Function at 0x41f1b5
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c5433
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1a10
call fcn.004c1770
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x42b1b4
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0xf0c], eax
mov dword [ebp - 0x81c], 0x60ed
mov dword [ebp - 0xda0], str.taqglzcsv_udekechy_ojv_ipctw_hkvgylbcw_mtlncghk_ljqnyv_mefko_dpibwigou_tiehiwcmr
cmp dword [ebp - 0x81c], 0x629a
jle 0x41f2ee
and dword [ebp - 0x2b0], 0
jmp 0x41f22d
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 0x2505
jge 0x41f2de
and dword [ebp - 0x1f0], 0
jmp 0x41f253
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0x6174
jge 0x41f2d9
and dword [ebp - 0x304], 0
jmp 0x41f275
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 0x6176
jge 0x41f2d4
mov eax, dword [ebp - 0x2b0]
add eax, dword [ebp - 0x1f0]
add eax, dword [ebp - 0x304]
cdq
mov dword [ebp - 0xf18], eax
mov dword [ebp - 0xf14], edx
push dword [ebp - 0xf14]
push dword [ebp - 0xf18]
lea ecx, [ebp - 0x18f8]
call fcn.00401a48
pop ecx
pop ecx
mov ecx, eax
call fcn.0040b047
push eax
call fcn.004af8e7
pop ecx
lea ecx, [ebp - 0x18f8]
call fcn.0040b03d
jmp 0x41f268
jmp 0x41f246
jmp 0x41f220
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_ExtCreatePen]
mov eax, dword [ebp + 8]
mov dword [ebp - 0xecc], eax
and dword [ebp - 4], 0
cmp dword [ebp - 0x81c], 0x5e15
jge 0x41f313
push dword [ebp - 0xda0]
call fcn.004af8e7
pop ecx
jmp 0x41f32f
or dword [ebp - 4], 0xffffffff
jmp 0x41f339
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1014], eax
lea eax, [ebp + 0x30]
mov dword [ebp - 0x101c], eax
lea eax, [ebp + 0x10]
mov dword [ebp - 0xf04], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0xed4], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x1024], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x102c], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x100c], eax
mov eax, dword [ebp - 0xf04]
movzx eax, byte [eax]
test eax, eax
je 0x42b167
mov eax, dword [ebp - 0xf0c]
mov dword [ebp - 0x1054], eax
mov eax, dword [ebp - 0x100c]
mov dword [ebp - 0x105c], eax
mov eax, dword [ebp - 0x1014]
mov dword [ebp - 0x1064], eax
mov eax, dword [ebp - 0x101c]
mov dword [ebp - 0x1034], eax
mov eax, dword [ebp - 0x1024]
mov dword [ebp - 0x103c], eax
mov eax, dword [ebp - 0x102c]
mov dword [ebp - 0x104c], eax
mov eax, dword [ebp - 0x1034]
movzx eax, byte [eax]
test eax, eax
je 0x41f40c
mov eax, dword [ebp - 0x103c]
mov dword [ebp - 0x1044], eax
mov eax, dword [ebp - 0x1044]
mov dword [ebp - 0xc94], eax
mov eax, dword [ebp - 0xc94]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xc94]
mov dword [ecx], eax
jmp 0x42b165
mov eax, dword [ebp - 0x104c]
mov dword [ebp - 0xff4], eax
mov eax, dword [ebp - 0x1054]
mov dword [ebp - 0xf64], eax
mov eax, dword [ebp - 0x105c]
mov dword [ebp - 0xc84], eax
mov eax, dword [ebp - 0x1064]
mov dword [ebp - 0x490], eax
mov dword [ebp - 0x38c], 0
mov dword [ebp - 0x28], 0x7c8a6b95
mov dword [ebp - 0x42c], 1
mov dword [ebp - 0xcb4], 0xfffffffd
mov dword [ebp - 0x1074], 0xd221
mov dword [ebp - 0x107c], 0x947e29ac
mov dword [ebp - 0x1fc], 0
jmp 0x41f48e
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 3
jge 0x41f4aa
mov eax, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0x136c], 0xd7ba9668
jmp 0x41f481
cmp dword [ebp - 0x38c], 0
jne 0x41f4c2
cmp dword [ebp - 0x28], 0
jne 0x41f4c2
and dword [ebp - 0x558], 0
jmp 0x41f4cc
mov dword [ebp - 0x558], 1
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x17d4], eax
mov eax, dword [ebp - 0x42c]
cmp dword [ebp - 0x38c], eax
jne 0x41f4f2
mov dword [ebp - 0xc9c], 1
jmp 0x41f4f9
and dword [ebp - 0xc9c], 0
cmp dword [ebp - 0xc9c], 0xd8d92426
je 0x41f511
mov dword [ebp - 0xca4], 1
jmp 0x41f518
and dword [ebp - 0xca4], 0
mov eax, dword [ebp - 0xca4]
sub eax, dword [ebp - 0x42c]
cmp eax, 0xec1b
jle 0x41f537
mov dword [ebp - 0xcac], 1
jmp 0x41f53e
and dword [ebp - 0xcac], 0
mov eax, dword [ebp - 0xcac]
mov dword [ebp - 0xcb4], eax
cmp dword [ebp - 0xcb4], 1
je 0x41f565
cmp dword [ebp - 0x28], 0
je 0x41f565
mov dword [ebp - 0xcbc], 1
jmp 0x41f56c
and dword [ebp - 0xcbc], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0xcbc], eax
je 0x41f583
mov dword [ebp - 0xcc4], 1
jmp 0x41f58a
and dword [ebp - 0xcc4], 0
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0xcc4]
cmp eax, dword [ebp - 0x28]
jge 0x41f5b4
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x136c], 0
je 0x41f5b4
mov dword [ebp - 0xccc], 1
jmp 0x41f5bb
and dword [ebp - 0xccc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x136c]
cmp dword [ebp - 0xccc], eax
jg 0x41f5dc
mov dword [ebp - 0xcd4], 1
jmp 0x41f5e3
and dword [ebp - 0xcd4], 0
mov eax, dword [ebp - 0xcd4]
sub eax, 3
cmp dword [ebp - 0x28], eax
jge 0x41f5fd
mov dword [ebp - 0x106c], 1
jmp 0x41f604
and dword [ebp - 0x106c], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x136c], 0xbe74fd57
jne 0x41f622
mov dword [ebp - 0xcec], 1
jmp 0x41f629
and dword [ebp - 0xcec], 0
mov eax, dword [ebp - 0x42c]
cmp dword [ebp - 0xcec], eax
je 0x41f643
mov dword [ebp - 0xcf4], 1
jmp 0x41f64a
and dword [ebp - 0xcf4], 0
mov eax, dword [ebp - 0xcf4]
sub eax, dword [ebp - 0x1074]
cmp eax, 3
jb 0x41f667
mov dword [ebp - 0xcfc], 1
jmp 0x41f66e
and dword [ebp - 0xcfc], 0
cmp dword [ebp - 0xcfc], 0xfffffffa
ja 0x41f689
cmp dword [ebp - 0x28], 0
je 0x41f689
mov dword [ebp - 0xc8c], 1
jmp 0x41f690
and dword [ebp - 0xc8c], 0
mov eax, dword [ebp - 0xc8c]
mov dword [ebp - 0x107c], eax
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x558]
cmp eax, dword [ebp - 0x38c]
jne 0x41f6e2
mov byte [ebp - 0xe3], 0
push 0
push 0x21ac
push 0xf96
lea eax, [ebp - 0xe3]
push eax
push 0x2eb3
push 0
push 0
push 0x1fbf
call fcn.004453ad
add esp, 0x20
jmp 0x41f7c0
mov dword [ebp - 0x1084], 0x965da1f7
mov dword [ebp - 0x11c4], 0xb039b7c3
mov dword [ebp - 0x28], 0
jmp 0x41f706
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffeb
jge 0x41f7c0
mov dword [ebp - 0x11bc], 1
push 2
lea ecx, [ebp - 0x1360]
call fcn.0040b279
push 0x4eb4
push 0x4bc
push 0x74d3
push 1
push 1
lea eax, [ebp - 0x1360]
push eax
push 0x26f4
push 0x2a51
push 0
push 0x5d6
lea eax, [ebp - 0x17e8]
push eax
call fcn.0041d27e
add esp, 0x2c
mov byte [ebp - 0xfc], 0
lea eax, [ebp - 0xfc]
push eax
push 0
call fcn.00432ee8
pop ecx
pop ecx
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x1084]
push eax
lea eax, [ebp - 0x11bc]
push eax
push 0
lea eax, [ebp - 0x1360]
push eax
lea eax, [ebp - 0x11c4]
push eax
push 0x7abf
push 0
push 1
push 0x7caa
call fcn.0044195c
add esp, 0x28
lea ecx, [ebp - 0x1360]
call fcn.0040b34b
jmp 0x41f6ff
mov dword [ebp - 0x4c], 0x185299da
mov dword [ebp - 0x204], 0xbeb0647d
mov dword [ebp - 0x95c], 5
mov dword [ebp - 0x948], 0xee39f3fa
push 3
lea ecx, [ebp - 0x1654]
call fcn.0040b279
mov dword [ebp - 0x11cc], 0xffffffff
mov dword [ebp - 0x1574], 0xc5ad058b
push 1
lea eax, [ebp - 0x1654]
push eax
push 0x77c2
push 0x13cd
push 0
push 0x5a8
push 0
push 1
push 0x1ed0
lea eax, [ebp - 0x1738]
push eax
push 0
call fcn.0043e355
add esp, 0x2c
push 0x2182
push 0
push 0x1ebf
push 0x386e
push 0x5263
push 0
push 1
lea eax, [ebp - 0x4c]
push eax
push 0x3e75
lea eax, [ebp - 0x204]
push eax
call fcn.004337b3
add esp, 0x28
mov dword [ebp - 0x204], 0x14b5
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x95c], eax
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x95c]
jge 0x41f899
mov dword [ebp - 0x560], 1
jmp 0x41f8a0
and dword [ebp - 0x560], 0
cmp dword [ebp - 0x4c], 0
jne 0x41f8b5
cmp dword [ebp - 0x4c], 0
jne 0x41f8b5
and dword [ebp - 0xc08], 0
jmp 0x41f8bf
mov dword [ebp - 0xc08], 1
mov eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x560]
cmp eax, dword [ebp - 0xc08]
jl 0x41f8dd
mov dword [ebp - 0x568], 1
jmp 0x41f8e4
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x568]
mov dword [ebp - 0x948], eax
cmp dword [ebp - 0x948], 0
je 0x41f8ff
cmp dword [ebp - 0x4c], 0
jne 0x41f90e
cmp dword [ebp - 0x4c], 0
jne 0x41f90e
and dword [ebp - 0x570], 0
jmp 0x41f918
mov dword [ebp - 0x570], 1
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x570], eax
jne 0x41f92f
mov dword [ebp - 0xb20], 1
jmp 0x41f936
and dword [ebp - 0xb20], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0xb20], eax
jne 0x41f94d
mov dword [ebp - 0x578], 1
jmp 0x41f954
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x578], eax
jne 0x41f96b
mov dword [ebp - 0x950], 1
jmp 0x41f972
and dword [ebp - 0x950], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x950], eax
jge 0x41f984
push 3
pop eax
test eax, eax
je 0x41f993
mov dword [ebp - 0x204], 0x7af2c9a1
jmp 0x41fa31
mov dword [ebp - 0x157c], 9
mov dword [ebp - 0x1820], 0x814b11f3
mov dword [ebp - 0x1584], 0x40c3
mov dword [ebp - 0x30c], 0
jmp 0x41f9ca
mov eax, dword [ebp - 0x30c]
inc eax
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 4
jge 0x41f9e6
mov eax, dword [ebp - 0x30c]
mov dword [ebp + eax*4 - 0x1a00], 0xfffffffc
jmp 0x41f9bd
mov byte [ebp - 0xd1], 0
push 0x6a6f
push 0x2607
push 0x294e
push 1
push 0x3526
push 0
lea eax, [ebp - 0xd1]
push eax
push 1
push 0x3a57
call fcn.00439fe5
add esp, 0x24
lea eax, [ebp - 0x11cc]
push eax
push 0
push 0x5111
call fcn.0043d69c
add esp, 0xc
lea ecx, [ebp - 0x1654]
call fcn.0040b34b
mov dword [ebp - 0x234], 0
push 0
push 0x407f
push 0x1e47
push 0x1037
push 0x7551
call fcn.004444ce
add esp, 0x14
mov dword [ebp - 0x30], 0x7c8a6b95
mov dword [ebp - 0x20c], 0
jmp 0x41fa84
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 3
jge 0x41faa0
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0x50c], 9
jmp 0x41fa77
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x50c], 2
je 0x41fabc
mov dword [ebp - 0x580], 1
jmp 0x41fac3
and dword [ebp - 0x580], 0
cmp dword [ebp - 0x580], 0xb95ae649
je 0x41fae4
mov eax, 0xd0714ad3
test eax, eax
je 0x41fae4
mov dword [ebp - 0xc80], 1
jmp 0x41faeb
and dword [ebp - 0xc80], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x50c]
imul eax, dword [ebp - 0xc80]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x50c]
jg 0x41fb19
mov dword [ebp - 0x11d4], 1
jmp 0x41fb20
and dword [ebp - 0x11d4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x50c]
mov dword [ebp - 0x1748], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x50c], 0xbfb66feb
jae 0x41fb50
mov dword [ebp - 0x588], 1
jmp 0x41fb57
and dword [ebp - 0x588], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x50c]
imul eax, dword [ebp - 0x588]
test eax, eax
jne 0x41fb7e
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x50c], 0
je 0x41fbaa
mov dword [ebp - 0x11dc], 0xcdf1
push 0x7855
push 0
lea eax, [ebp - 0x11dc]
push eax
push 0
push 0x4cf4
call fcn.00432c46
add esp, 0x14
jmp 0x41fc30
mov dword [ebp - 0x40c], 0xc9b996a5
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 1
mov eax, dword [ebp + eax - 0x50c]
mov dword [ebp + ecx - 0x50c], eax
mov dword [ebp - 0x40c], 0
jmp 0x41fbe6
mov eax, dword [ebp - 0x40c]
inc eax
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0x40c], 2
jg 0x41fc30
mov dword [ebp - 0x184], 0xffffffff
mov dword [ebp - 0x184], 0
jmp 0x41fc12
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 3
jge 0x41fc2e
mov eax, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0x50c], 0xb64d07dd
jmp 0x41fc05
jmp 0x41fbd9
mov dword [ebp - 0x958], 0x37bd
mov dword [ebp - 0xefc], str.fyl_ohwuj_tcuxvo_aefyge_oubjahksq_qyx_iqz_pobnbebhz_xedivicwl_otala_vqduq
cmp dword [ebp - 0x958], 0x3af8
jle 0x41fd08
and dword [ebp - 0x214], 0
jmp 0x41fc6a
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0x4539
jge 0x41fcfd
and dword [ebp - 0x314], 0
jmp 0x41fc90
mov eax, dword [ebp - 0x314]
inc eax
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 0x5a14
jge 0x41fcf8
and dword [ebp - 0x21c], 0
jmp 0x41fcb2
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0x6120
jge 0x41fcf6
mov eax, dword [ebp - 0x214]
imul eax, dword [ebp - 0x314]
or eax, dword [ebp - 0x21c]
cdq
mov dword [ebp - 0xf24], eax
mov dword [ebp - 0xf20], edx
push dword [ebp - 0xf20]
push dword [ebp - 0xf24]
mov ecx, 0xade298
call fcn.0040b052
jmp 0x41fca5
jmp 0x41fc83
jmp 0x41fc5d
push 0x44c
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
mov dword [ebp - 0x4a8], 1
mov dword [ebp - 4], 2
cmp dword [ebp - 0x958], 0x36e4
jge 0x41fd35
mov edx, dword [ebp - 0xefc]
mov ecx, 0xade298
call fcn.0040d8d7
jmp 0x41fd51
or dword [ebp - 4], 0xffffffff
jmp 0x41fd5b
mov dword [ebp - 0x394], 0x2c29a3df
mov dword [ebp - 0xddc], 1
mov dword [ebp - 0x5b0], 3
mov dword [ebp - 0xc10], 0xffffffff
mov dword [ebp - 0x598], 0x3cc25429
mov dword [ebp - 0x80], 0
jmp 0x41fd9d
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x41fdb3
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0xd80], 0xf1124f01
jmp 0x41fd96
mov dword [ebp - 0x80], 0
jmp 0x41fdc3
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x41fdd9
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x158c], 0xfa72c25
jmp 0x41fdbc
mov dword [ebp - 0x394], 0
jmp 0x41fdf2
mov eax, dword [ebp - 0x394]
inc eax
mov dword [ebp - 0x394], eax
cmp dword [ebp - 0x394], 0
jg 0x41feb8
mov dword [ebp - 0x17f0], 0x449c9fb3
mov dword [ebp - 0x1594], 0xfffffff8
mov dword [ebp - 0x1758], 0
mov dword [ebp - 0x159c], 0xbb6bc3ec
push 1
lea ecx, [ebp - 0x1664]
call fcn.0040b279
push 0
lea eax, [ebp - 0x1860]
push eax
push 0x5b75
push 0x26e1
push 0x1a8b
push 0x27d0
push 0x199a
push 0
push 0
push 0x3a45
push 1
push 0x7df0
push 1
push 1
push 0x204a
push 0x79d6
push 0x2418
lea eax, [ebp - 0x1664]
push eax
call fcn.0043cdbc
add esp, 0x48
push 0x6345
push 0
lea eax, [ebp - 0xc10]
push eax
push 0x6935
push 0x6289
call fcn.0044b7a8
add esp, 0x14
lea ecx, [ebp - 0x1664]
call fcn.0040b34b
jmp 0x41fde5
cmp dword [ebp - 0x5b0], 0
je 0x41feef
mov byte [ebp - 0x11a], 0
push 0x6c8f
lea eax, [ebp - 0x11a]
push eax
push 0
push 0x494d
push 0x4de6
push 0
call fcn.00431f34
add esp, 0x18
jmp 0x420027
push 1
lea ecx, [ebp - 0x11e8]
call fcn.0040b279
push 0
push 0x3ab6
push 0x618
lea eax, [ebp - 0x11e8]
push eax
lea eax, [ebp - 0x15a4]
push eax
push 0
push 1
push 1
push 0x6672
call fcn.0041a5fc
add esp, 0x24
push 0
lea ecx, [ebp - 0x11e8]
call fcn.0040b367
mov esi, eax
push 0
lea ecx, [ebp - 0x11e8]
call fcn.0040b367
mov ecx, dword [esi]
cmp ecx, dword [eax]
jg 0x41ff57
mov dword [ebp - 0x590], 1
jmp 0x41ff5e
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x590]
sub eax, 0x31903d1a
cmp dword [ebp - 0x598], eax
jge 0x41ff7d
mov dword [ebp - 0x960], 1
jmp 0x41ff84
and dword [ebp - 0x960], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xddc]
cmp dword [ebp + eax - 0xd80], ecx
je 0x41ffa5
mov dword [ebp - 0xb28], 1
jmp 0x41ffac
and dword [ebp - 0xb28], 0
mov eax, dword [ebp - 0xb28]
dec eax
cmp eax, dword [ebp - 0x598]
jle 0x41ffc7
mov dword [ebp - 0x5a0], 1
jmp 0x41ffce
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x960]
cmp eax, dword [ebp - 0x5a0]
jl 0x41ffe8
mov dword [ebp - 0x5a8], 1
jmp 0x41ffef
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0xc10]
cmp dword [ebp - 0x5a8], eax
jle 0x420009
mov dword [ebp - 0x968], 1
jmp 0x420010
and dword [ebp - 0x968], 0
mov eax, dword [ebp - 0x968]
mov dword [ebp - 0x5b0], eax
lea ecx, [ebp - 0x11e8]
call fcn.0040b34b
mov dword [ebp - 0x628], 0xfffffffd
mov dword [ebp - 0x434], 0xffffffff
mov dword [ebp - 0xf94], 0xc3a0b8ee
mov dword [ebp - 0x15f8], 3
mov dword [ebp - 0x978], 8
push 4
lea ecx, [ebp - 0x11f4]
call fcn.0040b279
mov dword [ebp - 0x494], 0x274952f
mov dword [ebp - 0xd88], 0x4361a6b7
mov dword [ebp - 0x5b8], 0
mov dword [ebp - 0x4c0], 3
mov dword [ebp - 0xd90], 0x17d239f9
mov dword [ebp - 0xfa0], 0xb826fbc7
push 0
push 0
lea eax, [ebp - 0x11f4]
push eax
lea eax, [ebp - 0x15ac]
push eax
call fcn.0043ac11
add esp, 0x10
push 1
push 0xf19
lea eax, [ebp - 0x494]
push eax
lea eax, [ebp - 0xf94]
push eax
push 0x395c
push 0x7158
push 0x1d06
push 1
push 0
push 0x4b9e
push 0
lea eax, [ebp - 0x434]
push eax
push 1
push 1
push 0x2037
lea eax, [ebp - 0x11f4]
push eax
lea eax, [ebp - 0xd88]
push eax
push 0x5d84
call fcn.0043cdbc
add esp, 0x48
mov eax, dword [ebp - 0x4c0]
inc eax
mov dword [ebp - 0x4c0], eax
jne 0x42016b
mov eax, dword [ebp - 0x434]
mov dword [ebp - 0x15fc], eax
cmp dword [ebp - 0x434], 0xffffffff
jbe 0x420146
mov dword [ebp - 0x11d8], 1
jmp 0x42014d
and dword [ebp - 0x11d8], 0
mov eax, dword [ebp - 0xd90]
mov dword [ebp - 0x15b4], eax
mov eax, 0xf839
test eax, eax
jne 0x42016b
and dword [ebp - 0xb30], 0
jmp 0x420175
mov dword [ebp - 0xb30], 1
push 1
lea ecx, [ebp - 0x11f4]
call fcn.0040b367
mov ecx, dword [ebp - 0xb30]
mov dword [eax], ecx
mov eax, dword [ebp - 0xfa0]
mov dword [ebp - 0x1604], eax
mov dword [ebp - 0x494], 0xa26c
mov eax, dword [ebp - 0x5b8]
cmp dword [ebp - 0x494], eax
jl 0x4201ba
mov dword [ebp - 0x970], 1
jmp 0x4201c1
and dword [ebp - 0x970], 0
mov eax, dword [ebp - 0x5b8]
cmp dword [ebp - 0x970], eax
jle 0x4201db
mov dword [ebp - 0x5c0], 1
jmp 0x4201e2
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x978]
cmp eax, dword [ebp - 0x5c0]
jge 0x4201fc
mov dword [ebp - 0xcd8], 1
jmp 0x420203
and dword [ebp - 0xcd8], 0
cmp dword [ebp - 0xcd8], 1
je 0x420218
mov dword [ebp - 0x5c8], 1
jmp 0x42021f
and dword [ebp - 0x5c8], 0
mov eax, dword [ebp - 0x5c8]
mov dword [ebp - 0x978], eax
lea ecx, [ebp - 0x11f4]
call fcn.0040b34b
mov dword [ebp - 0xbc], 0xfff8
mov dword [ebp - 0x1188], 0x960f
mov dword [ebp - 0x1184], 0x960f
mov dword [ebp - 0x1180], 0x960f
mov dword [ebp - 0x117c], 0x960f
mov dword [ebp - 0x108], 0x69c1477a
mov dword [ebp - 0x43c], 0xfffffffd
mov dword [ebp - 0x5e8], 5
mov dword [ebp - 0x618], 1
mov dword [ebp - 0x224], 0
jmp 0x4202a9
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 3
jge 0x4202c5
mov eax, dword [ebp - 0x224]
mov dword [ebp + eax*4 - 0x1884], 0xffffffff
jmp 0x42029c
push 0
push 0x7b9b
lea eax, [ebp - 0xbc]
push eax
push 0xc6c
push 0
call fcn.004349bb
add esp, 0x14
mov dword [ebp - 0xbc], 0
jmp 0x4202fb
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 3
jg 0x420738
push 2
lea ecx, [ebp - 0x41c]
call fcn.0040b279
mov dword [ebp - 0x988], 0x5c1b
mov dword [ebp - 0x10c8], 0x1cd43a1e
mov dword [ebp - 0x15bc], 0xfffffffa
push 1
push 1
push 0x2d47
push 0x44ba
lea eax, [ebp - 0x160c]
push eax
push 0
lea eax, [ebp - 0x41c]
push eax
call fcn.0041283a
add esp, 0x1c
push 0x3346
push 0x490
push 0
call fcn.0043f9d3
add esp, 0xc
push 1
lea ecx, [ebp - 0x41c]
call fcn.0040b367
cmp dword [eax], 0
jne 0x420409
push 0
lea ecx, [ebp - 0x41c]
call fcn.0040b367
imul esi, dword [eax], 0xffff
push 0
lea ecx, [ebp - 0x41c]
call fcn.0040b367
cmp esi, dword [eax]
jge 0x4203b9
cmp dword [ebp - 0x108], 0
jne 0x4203b9
and dword [ebp - 0x5d0], 0
jmp 0x4203c3
mov dword [ebp - 0x5d0], 1
cmp dword [ebp - 0x5d0], 1
jl 0x4203d8
mov dword [ebp - 0xb38], 1
jmp 0x4203df
and dword [ebp - 0xb38], 0
cmp dword [ebp - 0xb38], 9
jae 0x4203f4
mov dword [ebp - 0xd98], 1
jmp 0x4203fb
and dword [ebp - 0xd98], 0
xor eax, eax
inc eax
jne 0x420409
and dword [ebp - 0x5d8], 0
jmp 0x420413
mov dword [ebp - 0x5d8], 1
push 0
lea ecx, [ebp - 0x41c]
call fcn.0040b367
mov ecx, dword [ebp - 0x5d8]
imul ecx, dword [eax]
mov dword [ebp - 0x43c], ecx
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0x15c4], eax
cmp dword [ebp - 0x108], 0x57b17b4d
je 0x420453
mov dword [ebp - 0x980], 1
jmp 0x42045a
and dword [ebp - 0x980], 0
push 1
lea ecx, [ebp - 0x41c]
call fcn.0040b367
push 7
pop ecx
sub ecx, dword [eax]
mov eax, dword [ebp - 0x980]
sub eax, dword [ebp - 0x108]
cmp ecx, eax
jg 0x420488
mov dword [ebp - 0x5e0], 1
jmp 0x42048f
and dword [ebp - 0x5e0], 0
push 1
lea ecx, [ebp - 0x41c]
call fcn.0040b367
mov ecx, dword [ebp - 0x5e0]
cmp ecx, dword [eax]
jle 0x4204b2
mov dword [ebp - 0xc18], 1
jmp 0x4204b9
and dword [ebp - 0xc18], 0
mov eax, dword [ebp - 0xc18]
mov dword [ebp - 0x5e8], eax
mov eax, dword [ebp - 0x5e8]
mov dword [ebp - 0x988], eax
cmp dword [ebp - 0x988], 0
jne 0x4204ec
cmp dword [ebp - 0x43c], 0
jne 0x4204ec
and dword [ebp - 0x5f0], 0
jmp 0x4204f6
mov dword [ebp - 0x5f0], 1
push 0
lea ecx, [ebp - 0x41c]
call fcn.0040b367
mov ecx, dword [ebp - 0x5f0]
cmp ecx, dword [eax]
jle 0x420522
cmp dword [ebp - 0x108], 0
je 0x420522
mov dword [ebp - 0x5f8], 1
jmp 0x420529
and dword [ebp - 0x5f8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1188]
mov dword [ebp - 0xb40], eax
mov eax, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0xb40]
mov dword [ebp + eax*4 - 0x1188], ecx
mov esi, dword [ebp - 0xb40]
imul esi, dword [ebp - 0x5f8]
push 1
lea ecx, [ebp - 0x41c]
call fcn.0040b367
sub esi, dword [eax]
add esi, 0xfffffff6
mov dword [ebp - 0x990], esi
push 1
lea ecx, [ebp - 0x41c]
call fcn.0040b367
mov ecx, dword [ebp - 0x990]
mov dword [eax], ecx
mov eax, dword [ebp - 0x10c8]
imul eax, dword [ebp - 0x990]
test eax, eax
je 0x4205b6
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1188], 0
je 0x4205b6
mov dword [ebp - 0x600], 1
jmp 0x4205bd
and dword [ebp - 0x600], 0
cmp dword [ebp - 0x600], 0xfffffffa
jne 0x4205d2
mov dword [ebp - 0xc88], 1
jmp 0x4205d9
and dword [ebp - 0xc88], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xc88]
mov dword [ebp + eax - 0x1884], ecx
push 0
lea ecx, [ebp - 0x41c]
call fcn.0040b367
mov ecx, dword [ebp - 0xbc]
cmp dword [eax], ecx
jne 0x420628
mov eax, 0x5b4499c7
test eax, eax
je 0x420628
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1188], 0
je 0x420628
mov dword [ebp - 0x608], 1
jmp 0x42062f
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x608], eax
jne 0x420649
mov dword [ebp - 0x998], 1
jmp 0x420650
and dword [ebp - 0x998], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x998], eax
jge 0x42066a
mov dword [ebp - 0x610], 1
jmp 0x420671
and dword [ebp - 0x610], 0
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x610], eax
jl 0x42068b
mov dword [ebp - 0xb48], 1
jmp 0x420692
and dword [ebp - 0xb48], 0
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0xb48], eax
jge 0x4206c8
mov byte [ebp - 0xd9], 0
push 1
push 0
lea eax, [ebp - 0xd9]
push eax
push 0x6eaa
push 0x78f4
push 0
call fcn.0043d6bb
add esp, 0x18
jmp 0x420728
mov dword [ebp - 0x1614], 0xfc71010f
mov dword [ebp - 0x15cc], 1
mov dword [ebp - 0x1414], 0x206cbc8c
mov dword [ebp - 0x31c], 0
jmp 0x4206ff
mov eax, dword [ebp - 0x31c]
inc eax
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 1
jge 0x42071b
mov eax, dword [ebp - 0x31c]
mov dword [ebp + eax*4 - 0x1418], 0
jmp 0x4206f2
mov eax, dword [ebp - 0x618]
inc eax
mov dword [ebp - 0x618], eax
lea ecx, [ebp - 0x41c]
call fcn.0040b34b
jmp 0x4202ee
mov dword [ebp - 0x11a0], 0xd221
mov dword [ebp - 0xd70], 0xfffffff7
push 0x47d5
push 1
lea eax, [ebp - 0xd70]
push eax
push 1
push 0
push 0
push 0x209
call fcn.0044278e
add esp, 0x1c
mov dword [ebp - 0xdb0], 0x947e29ac
mov dword [ebp - 0xfac], 0
mov dword [ebp - 0x22c], 0
jmp 0x42079a
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 2
jge 0x4207b6
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0x1620], 0x14a02569
jmp 0x42078d
mov byte [ebp - 0x11c], 0
push 0x3b18
push 1
push 0x76b3
push 0x27ec
push 0
lea eax, [ebp - 0x11c]
push eax
push 1
push 0x6731
push 0x31a5
push 0
push 0
push 0x15ee
call fcn.0044865a
add esp, 0x30
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1620]
mov dword [ebp - 0xfac], eax
mov dword [ebp - 0x3d4], 0
jmp 0x420820
mov eax, dword [ebp - 0x3d4]
inc eax
mov dword [ebp - 0x3d4], eax
cmp dword [ebp - 0x3d4], 3
jge 0x42083c
mov eax, dword [ebp - 0x3d4]
mov dword [ebp + eax*4 - 0x1384], 0xd7ba9668
jmp 0x420813
cmp dword [ebp - 0x234], 0
jne 0x420854
cmp dword [ebp - 0x30], 0
jne 0x420854
and dword [ebp - 0x9b8], 0
jmp 0x42085e
mov dword [ebp - 0x9b8], 1
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x1420], eax
mov eax, dword [ebp - 0x4a8]
cmp dword [ebp - 0x234], eax
jne 0x420884
mov dword [ebp - 0x9a0], 1
jmp 0x42088b
and dword [ebp - 0x9a0], 0
cmp dword [ebp - 0x9a0], 0xd8d92426
je 0x4208a3
mov dword [ebp - 0x620], 1
jmp 0x4208aa
and dword [ebp - 0x620], 0
mov eax, dword [ebp - 0x620]
sub eax, dword [ebp - 0x4a8]
cmp eax, 0xec1b
jle 0x4208c9
mov dword [ebp - 0xc20], 1
jmp 0x4208d0
and dword [ebp - 0xc20], 0
mov eax, dword [ebp - 0xc20]
mov dword [ebp - 0x628], eax
cmp dword [ebp - 0x628], 1
je 0x4208f7
cmp dword [ebp - 0x30], 0
je 0x4208f7
mov dword [ebp - 0x9a8], 1
jmp 0x4208fe
and dword [ebp - 0x9a8], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x9a8], eax
je 0x420915
mov dword [ebp - 0x630], 1
jmp 0x42091c
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x630]
cmp eax, dword [ebp - 0x30]
jge 0x420946
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1384], 0
je 0x420946
mov dword [ebp - 0xb50], 1
jmp 0x42094d
and dword [ebp - 0xb50], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1384]
cmp dword [ebp - 0xb50], eax
jg 0x42096e
mov dword [ebp - 0x638], 1
jmp 0x420975
and dword [ebp - 0x638], 0
mov eax, dword [ebp - 0x638]
sub eax, 3
cmp dword [ebp - 0x30], eax
jge 0x42098f
mov dword [ebp - 0xda8], 1
jmp 0x420996
and dword [ebp - 0xda8], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1384], 0xbe74fd57
jne 0x4209b4
mov dword [ebp - 0x9b0], 1
jmp 0x4209bb
and dword [ebp - 0x9b0], 0
mov eax, dword [ebp - 0x4a8]
cmp dword [ebp - 0x9b0], eax
je 0x4209d5
mov dword [ebp - 0x640], 1
jmp 0x4209dc
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0x640]
sub eax, dword [ebp - 0x11a0]
cmp eax, 3
jb 0x4209f9
mov dword [ebp - 0xcc0], 1
jmp 0x420a00
and dword [ebp - 0xcc0], 0
cmp dword [ebp - 0xcc0], 0xfffffffa
ja 0x420a1b
cmp dword [ebp - 0x30], 0
je 0x420a1b
mov dword [ebp - 0x648], 1
jmp 0x420a22
and dword [ebp - 0x648], 0
mov eax, dword [ebp - 0x648]
mov dword [ebp - 0xdb0], eax
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x9b8]
cmp eax, dword [ebp - 0x234]
jne 0x421013
mov dword [ebp - 0x40], 0x185299da
mov dword [ebp - 0x324], 0xbeb0647d
mov dword [ebp - 0x650], 5
mov dword [ebp - 0x660], 0xee39f3fa
push 3
lea ecx, [ebp - 0x1674]
call fcn.0040b279
mov dword [ebp - 0xfb8], 0xffffffff
mov dword [ebp - 0x1428], 0xc5ad058b
lea eax, [ebp - 0x1430]
push eax
push 1
push 0x3f92
lea eax, [ebp - 0x1674]
push eax
push 0x5cae
push 0
push 1
push 0x2e80
push 0x7323
push 0x5641
call fcn.004337b3
add esp, 0x28
lea eax, [ebp - 0x324]
push eax
lea eax, [ebp - 0x40]
push eax
push 0x10ca
push 0x3800
push 0
call fcn.0043cb46
add esp, 0x14
mov dword [ebp - 0x324], 0x14b5
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x650], eax
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x650]
jge 0x420b0a
mov dword [ebp - 0xb58], 1
jmp 0x420b11
and dword [ebp - 0xb58], 0
cmp dword [ebp - 0x40], 0
jne 0x420b26
cmp dword [ebp - 0x40], 0
jne 0x420b26
and dword [ebp - 0x658], 0
jmp 0x420b30
mov dword [ebp - 0x658], 1
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0xb58]
cmp eax, dword [ebp - 0x658]
jl 0x420b4e
mov dword [ebp - 0x9c0], 1
jmp 0x420b55
and dword [ebp - 0x9c0], 0
mov eax, dword [ebp - 0x9c0]
mov dword [ebp - 0x660], eax
cmp dword [ebp - 0x660], 0
je 0x420b70
cmp dword [ebp - 0x40], 0
jne 0x420b7f
cmp dword [ebp - 0x40], 0
jne 0x420b7f
and dword [ebp - 0xc28], 0
jmp 0x420b89
mov dword [ebp - 0xc28], 1
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0xc28], eax
jne 0x420ba0
mov dword [ebp - 0x668], 1
jmp 0x420ba7
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x668], eax
jne 0x420bbe
mov dword [ebp - 0x9c8], 1
jmp 0x420bc5
and dword [ebp - 0x9c8], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x9c8], eax
jne 0x420bdc
mov dword [ebp - 0x670], 1
jmp 0x420be3
and dword [ebp - 0x670], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x670], eax
jge 0x420bf5
push 3
pop eax
test eax, eax
je 0x420c1e
push 0x45a4
lea eax, [ebp - 0x324]
push eax
push 0x6337
push 0x4c19
push 0
push 0
push 0
call fcn.00440d12
add esp, 0x1c
jmp 0x420ce3
mov dword [ebp - 0x1438], 9
mov dword [ebp - 0x1440], 0x814b11f3
mov dword [ebp - 0x1448], 0x40c3
mov dword [ebp - 0x23c], 0
jmp 0x420c55
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 4
jge 0x420c71
mov eax, dword [ebp - 0x23c]
mov dword [ebp + eax*4 - 0x1a10], 0xfffffffc
jmp 0x420c48
mov byte [ebp - 0xe1], 0
movzx eax, byte [ebp - 0xe1]
test eax, eax
je 0x420c91
push 0
push 0xed4
call fcn.00438668
pop ecx
pop ecx
push 1
push 0x23ad
push 0x6d8e
push 0x502d
push 0x75c4
lea eax, [ebp - 0xfb8]
push eax
push 0x6c96
push 0
push 0
push 0x2323
push 1
push 0x5bdb
push 1
push 1
push 0x4bf6
push 0x1cb
push 0x7c29
push 0x277e
call fcn.0043cdbc
add esp, 0x48
lea ecx, [ebp - 0x1674]
call fcn.0040b34b
mov byte [ebp - 0x120], 0
push 1
lea ecx, [ebp - 0x1684]
call fcn.0040b279
mov dword [ebp - 0x1b4], 0
jmp 0x420d1b
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 1
jge 0x420d37
mov eax, dword [ebp - 0x1b4]
mov dword [ebp + eax*4 - 0x39c], 0x4fd3df75
jmp 0x420d0e
push 0
push 0x3f52
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x1684]
push eax
push 0x6f9
push 0
call fcn.0042de00
add esp, 0x18
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x39c], 0x1b
jmp 0x420d89
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x39c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x39c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x39c], 0xffffffe9
je 0x420db5
mov byte [ebp - 0x11e], 0
movzx eax, byte [ebp - 0x11e]
test eax, eax
je 0x420db3
push 0
call fcn.0042dd08
pop ecx
jmp 0x420d6e
lea ecx, [ebp - 0x1684]
call fcn.0040b34b
movzx eax, byte [ebp - 0x120]
test eax, eax
je 0x42100e
mov dword [ebp - 0x500], 0xffffffff
mov dword [ebp - 0x4fc], 0xffffffff
mov dword [ebp - 0x4f8], 0xffffffff
mov dword [ebp - 0x4f4], 0xffffffff
mov dword [ebp - 0xdb8], 0
mov dword [ebp - 0x244], 0
jmp 0x420e1a
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 3
jge 0x420e36
mov eax, dword [ebp - 0x244]
mov dword [ebp + eax*4 - 0x120c], 0xffffffff
jmp 0x420e0d
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x500], 2
jmp 0x420e64
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x500]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x500], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x500], 0
jl 0x420fe9
push 3
lea ecx, [ebp - 0x1300]
call fcn.0040b279
mov dword [ebp - 0x678], 0xb9dbea52
mov dword [ebp - 0xc90], 0x8382bdb9
mov dword [ebp - 0x688], 0
push 1
push 0x1fb3
push 0
push 0x3a23
lea eax, [ebp - 0x1450]
push eax
lea eax, [ebp - 0x1300]
push eax
push 0
call fcn.004386d9
add esp, 0x1c
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x500]
mov eax, dword [ebp + eax*4 - 0x120c]
mov dword [ebp - 0x1458], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x500]
mov dword [ebp - 0xb60], eax
push 2
lea ecx, [ebp - 0x1300]
call fcn.0040b367
mov ecx, dword [ebp - 0xb60]
mov dword [eax], ecx
mov eax, dword [ebp - 0xb60]
mov dword [ebp - 0x678], eax
cmp dword [ebp - 0x678], 0
je 0x420f83
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x500], 0
jne 0x420f51
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x500]
mov dword [ebp - 0x1460], eax
xor eax, eax
inc eax
jne 0x420f51
and dword [ebp - 0x9d0], 0
jmp 0x420f5b
mov dword [ebp - 0x9d0], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x500]
mov eax, dword [ebp + eax*4 - 0x120c]
cmp dword [ebp - 0x9d0], eax
jge 0x420f83
mov dword [ebp - 0x680], 1
jmp 0x420f8a
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0x680]
mov dword [ebp - 0xc90], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x500]
mov ecx, dword [ebp - 0xc90]
sub ecx, dword [ebp + eax*4 - 0x120c]
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x500]
mov eax, dword [ebp + eax*4 - 0x120c]
imul eax, ecx
mov dword [ebp - 0x688], eax
mov eax, dword [ebp - 0x688]
mov dword [ebp - 0xdb8], eax
lea ecx, [ebp - 0x1300]
call fcn.0040b34b
jmp 0x420e49
push 1
push 0
push 0
push 0
push 0x6bc1
push 0x5082
call fcn.0043fe8b
add esp, 0x18
push 0x1d01
call dword [sym.imp.USER32.dll_GetDC]
jmp 0x4223a7
mov dword [ebp - 0xdf0], 0x965da1f7
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x1468], 0x5761be36
mov dword [ebp - 0x49c], 0x41311e2d
mov dword [ebp - 0x2c], 0xbd4856cd
mov dword [ebp - 0xa8], 2
cmp dword [ebp - 0x14c], 0xf72d4ea6
jbe 0x4210cf
cmp dword [ebp - 0x14c], 0xd94b
jle 0x421070
mov dword [ebp - 0x9d8], 1
jmp 0x421077
and dword [ebp - 0x9d8], 0
cmp dword [ebp - 0x9d8], 0x81d21f1e
ja 0x42108f
mov dword [ebp - 0x690], 1
jmp 0x421096
and dword [ebp - 0x690], 0
cmp dword [ebp - 0x690], 0xa831d26e
ja 0x4210ae
mov dword [ebp - 0xb68], 1
jmp 0x4210b5
and dword [ebp - 0xb68], 0
mov eax, dword [ebp - 0x14c]
cmp dword [ebp - 0xb68], eax
jle 0x4210cf
mov dword [ebp - 0x698], 1
jmp 0x4210d6
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x14c]
add eax, dword [ebp - 0x698]
je 0x4211d0
mov dword [ebp - 0xdc0], 0xfffa
mov dword [ebp - 0xfc4], 0x799333c7
mov dword [ebp - 0xdc8], 0x58f5537c
mov dword [ebp - 0x1470], 4
mov dword [ebp - 0x1478], 0xf7bdd484
mov dword [ebp - 0x10d8], 1
mov byte [ebp - 0xf9], 0
push 0x1d7e
push 0x128d
push 0x6806
push 0x2f59
push 0x2c49
push 0
lea eax, [ebp - 0xf9]
push eax
call fcn.0043b41a
add esp, 0x1c
push 0x4426
push 0
lea eax, [ebp - 0x2c]
push eax
push 0x2d16
lea eax, [ebp - 0x10d8]
push eax
lea eax, [ebp - 0x14c]
push eax
push 0x7cc
lea eax, [ebp - 0xdc0]
push eax
push 0x1245
push 0x309c
push 0x1b71
push 0x49e5
push 0
push 0x86
lea eax, [ebp - 0xfc4]
push eax
push 0x5919
push 0x4261
lea eax, [ebp - 0x49c]
push eax
push 0x4742
lea eax, [ebp - 0xdc8]
push eax
push 0x3970
call fcn.00432386
add esp, 0x54
jmp 0x421774
push 4
lea ecx, [ebp - 0x4cc]
call fcn.0040b279
mov dword [ebp - 0x1480], 0xc1dc0ac7
lea eax, [ebp - 0x4cc]
push eax
push 0
lea eax, [ebp - 0x194]
push eax
push 0x452d
call fcn.0043d2d3
add esp, 0x10
mov dword [ebp - 0x194], 0
jmp 0x42121d
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 2
jge 0x421239
mov eax, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0x15d8], 0x9c36de1f
jmp 0x421210
mov dword [ebp - 0xa8], 0
jmp 0x421252
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 3
jg 0x421769
mov dword [ebp - 0x12a4], 0x21a1
mov dword [ebp - 0x12a0], 0x21a1
mov dword [ebp - 0x129c], 0x21a1
mov dword [ebp - 0x1298], 0x21a1
mov dword [ebp - 0x9e0], 0x7bc6
mov dword [ebp - 0x11c0], str.nboufsp_dxybupmx_qjyorbgh_gvletexvj_vjaaxggsz_ebgseh
cmp dword [ebp - 0x9e0], 0x7d2a
jle 0x421341
and dword [ebp - 0x1e0], 0
jmp 0x4212c1
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0x1fa
jge 0x421341
and dword [ebp - 0x32c], 0
jmp 0x4212e3
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0x7fba
jge 0x42133c
mov eax, dword [ebp - 0x1e0]
xor eax, dword [ebp - 0x32c]
cdq
mov dword [ebp - 0xf30], eax
mov dword [ebp - 0xf2c], edx
push dword [ebp - 0xf2c]
push dword [ebp - 0xf30]
lea ecx, [ebp - 0x19b8]
call fcn.00401a48
pop ecx
pop ecx
mov ecx, eax
call fcn.0040b047
push eax
call fcn.004af8e7
pop ecx
lea ecx, [ebp - 0x19b8]
call fcn.0040b03d
jmp 0x4212d6
jmp 0x4212b4
mov dword [ebp - 0x444], 0x3e67b33d
mov dword [ebp - 4], 4
cmp dword [ebp - 0x9e0], 0x7a94
jge 0x42136a
push dword [ebp - 0x11c0]
call fcn.004af8e7
pop ecx
jmp 0x421386
or dword [ebp - 4], 0xffffffff
jmp 0x421390
mov byte [ebp - 0xe5], 0
movzx eax, byte [ebp - 0xe5]
test eax, eax
je 0x421543
mov dword [ebp - 0x6a0], 0x2503
mov dword [ebp - 0xdd0], str.kqfehvd_zyclfovc_ocljgvxye_ppuisav_gjrbxjhbi_fln_ggjl_tzqp_jhtvgqrzn_dqy_jvzlz
cmp dword [ebp - 0x6a0], 0x2682
jle 0x4214cb
and dword [ebp - 0x24c], 0
jmp 0x4213e0
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0x5f77
jge 0x4214cb
and dword [ebp - 0x3f4], 0
jmp 0x421406
mov eax, dword [ebp - 0x3f4]
inc eax
mov dword [ebp - 0x3f4], eax
cmp dword [ebp - 0x3f4], 0x58d
jge 0x4214c6
and dword [ebp - 0x254], 0
jmp 0x42142c
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0xbbe
jge 0x4214c1
and dword [ebp - 0x334], 0
jmp 0x421452
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0x2e3c
jge 0x4214bc
mov ecx, dword [ebp - 0x24c]
xor ecx, dword [ebp - 0x3f4]
mov eax, dword [ebp - 0x254]
cdq
idiv dword [ebp - 0x334]
xor ecx, edx
mov eax, ecx
cdq
mov dword [ebp - 0xf3c], eax
mov dword [ebp - 0xf38], edx
push dword [ebp - 0xf38]
push dword [ebp - 0xf3c]
lea ecx, [ebp - 0x1910]
call fcn.00401a48
pop ecx
pop ecx
mov ecx, eax
call fcn.0040b047
push eax
call fcn.004af8e7
pop ecx
lea ecx, [ebp - 0x1910]
call fcn.0040b03d
jmp 0x421445
jmp 0x42141f
jmp 0x4213f9
jmp 0x4213d3
push 0
push 0x681e
push 0x3eaa
push 0x5fd8
push 0x4426
push 0
push 0x2688
push 0x1412
push 0x3f5f
push 1
push 0
call fcn.0042e0e0
add esp, 0x2c
mov dword [ebp - 4], 6
cmp dword [ebp - 0x6a0], 0x22e6
jge 0x42151d
push dword [ebp - 0xdd0]
call fcn.004af8e7
pop ecx
jmp 0x421539
or dword [ebp - 4], 0xffffffff
jmp 0x421543
push 0
push 0x751e
push 0x7d46
push 0x544a
push 0x4ccd
push 0
push 0x9ab
call fcn.0042e65f
add esp, 0x1c
mov dword [ebp - 0x2c], 3
jmp 0x421578
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x421764
cmp dword [ebp - 0x444], 1
jl 0x421597
mov dword [ebp - 0xc30], 1
jmp 0x42159e
and dword [ebp - 0xc30], 0
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x4cc]
call fcn.0040b367
mov ecx, dword [ebp - 0xc30]
cmp ecx, dword [eax]
je 0x4215c2
mov dword [ebp - 0x6a8], 1
jmp 0x4215c9
and dword [ebp - 0x6a8], 0
mov eax, dword [ebp - 0x49c]
cmp dword [ebp - 0x6a8], eax
jl 0x4215e3
mov dword [ebp - 0x9e8], 1
jmp 0x4215ea
and dword [ebp - 0x9e8], 0
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x4cc]
call fcn.0040b367
mov ecx, dword [ebp - 0x9e8]
cmp ecx, dword [eax]
jl 0x421611
mov dword [ebp - 0x6b0], 1
jmp 0x421618
and dword [ebp - 0x6b0], 0
mov eax, dword [ebp - 0x6b0]
mov dword [ebp - 0x444], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x12a4]
cmp dword [ebp - 0x444], eax
jne 0x421645
mov dword [ebp - 0xb70], 1
jmp 0x42164c
and dword [ebp - 0xb70], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x12a4]
cmp dword [ebp - 0xb70], eax
jle 0x42166d
mov dword [ebp - 0x6b8], 1
jmp 0x421674
and dword [ebp - 0x6b8], 0
push 3
lea ecx, [ebp - 0x4cc]
call fcn.0040b367
mov ecx, dword [ebp - 0x6b8]
cmp ecx, dword [eax]
je 0x42169a
cmp dword [ebp - 0x2c], 0
jne 0x42169a
and dword [ebp - 0x9f0], 0
jmp 0x4216a4
mov dword [ebp - 0x9f0], 1
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x4cc]
call fcn.0040b367
mov ecx, dword [ebp - 0x9f0]
cmp ecx, dword [eax]
jl 0x4216cb
mov dword [ebp - 0xfd0], 1
jmp 0x4216d2
and dword [ebp - 0xfd0], 0
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x4cc]
call fcn.0040b367
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x4cc]
call fcn.0040b367
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x4cc]
call fcn.0040b367
mov esi, eax
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x4cc]
call fcn.0040b367
mov ecx, dword [esi]
cmp ecx, dword [eax]
jl 0x421724
mov dword [ebp - 0x25c], 1
jmp 0x42172b
and dword [ebp - 0x25c], 0
push 3
lea ecx, [ebp - 0x4cc]
call fcn.0040b367
mov ecx, dword [ebp - 0x25c]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x25c]
mov dword [ebp + eax - 0x15d8], ecx
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x49c], eax
jmp 0x421571
jmp 0x421245
lea ecx, [ebp - 0x4cc]
call fcn.0040b34b
mov dword [ebp - 0x2c], 0xffffffed
jmp 0x421784
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xf
jl 0x4217c2
push 0x338f
push 0x5a0d
push 0x1065
push 0x6622
push 0
push 0x39c3
push 0
push 0x2a5b
push 1
push 0x28d0
push 0x4e44
call fcn.00431a37
add esp, 0x2c
jmp 0x42177d
mov dword [ebp - 0xfe8], 0xb039b7c3
mov dword [ebp - 0x10e8], 0x60477862
mov dword [ebp - 0xdd8], 0xdfc9b996
mov dword [ebp - 0x1488], 1
mov dword [ebp - 0x1490], 0xf4df7b14
mov dword [ebp - 0x1498], 0xfffffff6
mov dword [ebp - 0x14a0], 0xfffffff9
mov dword [ebp - 0x14a8], 0xfffffffd
mov dword [ebp - 0x14b0], 0xfffffffe
mov dword [ebp - 0x14b8], 5
push 2
lea ecx, [ebp - 0x1694]
call fcn.0040b279
mov dword [ebp - 0x14c0], 2
mov dword [ebp - 0x14c8], 0xbb5fb49a
mov dword [ebp - 0x6c0], 0xffff
mov dword [ebp - 0x3a4], 0
jmp 0x42186a
mov eax, dword [ebp - 0x3a4]
inc eax
mov dword [ebp - 0x3a4], eax
cmp dword [ebp - 0x3a4], 2
jge 0x42188c
push dword [ebp - 0x3a4]
lea ecx, [ebp - 0x1694]
call fcn.0040b367
mov dword [eax], 0x205300ce
jmp 0x42185d
push 0x1fe7
push 0x43ae
push 0x23bb
push 1
push 0x7820
push 1
push 0x521
push 1
push 0x14fb
push 0x382d
push 0
push 0xd18
push 0x20f0
push 0x75f7
lea eax, [ebp - 0xdd8]
push eax
push 0x25a4
lea eax, [ebp - 0x10e8]
push eax
call fcn.00419086
add esp, 0x44
mov eax, dword [ebp - 0x6c0]
dec eax
mov dword [ebp - 0x6c0], eax
lea ecx, [ebp - 0x1694]
call fcn.0040b34b
mov dword [ebp - 0x30], 0
jmp 0x421909
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffeb
jge 0x4223a7
push 1
lea ecx, [ebp - 0x16c4]
call fcn.0040b279
mov dword [ebp - 0x264], 0xffffffff
mov dword [ebp - 0x14d0], 0xfffffff8
mov dword [ebp - 0x1840], 8
mov dword [ebp - 0x183c], 8
mov dword [ebp - 0x1838], 8
mov dword [ebp - 0x1834], 8
mov dword [ebp - 0x14d8], 0
mov dword [ebp - 0xde0], 0xffff
push 0
lea eax, [ebp - 0x14e0]
push eax
lea eax, [ebp - 0x16c4]
push eax
call fcn.0044c8a7
add esp, 0xc
mov dword [ebp - 0x264], 0
jmp 0x4219a1
mov eax, dword [ebp - 0x264]
dec eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0
jl 0x421a91
push 2
lea ecx, [ebp - 0x16b4]
call fcn.0040b279
mov dword [ebp - 0x14e8], 0x4678dc2a
mov dword [ebp - 0x14f0], 9
push 3
lea ecx, [ebp - 0x16a4]
call fcn.0040b279
mov dword [ebp - 0x14f8], 0xd9827359
mov dword [ebp - 0x154], 0
jmp 0x4219ff
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 2
jge 0x421a21
push dword [ebp - 0x154]
lea ecx, [ebp - 0x16b4]
call fcn.0040b367
mov dword [eax], 0x7be7e550
jmp 0x4219f2
push 0x1920
lea eax, [ebp - 0x16a4]
push eax
push 0x6b4f
lea eax, [ebp - 0x154]
push eax
push 0
call fcn.0044ea10
add esp, 0x14
push 0
lea eax, [ebp - 0xde0]
push eax
push 0x4bb8
push 0
push 0x3c19
call fcn.0042c8c7
add esp, 0x14
push 0xd1d
push 0x70d9
push 0
push 1
call fcn.0044e72d
add esp, 0x10
lea ecx, [ebp - 0x16a4]
call fcn.0040b34b
lea ecx, [ebp - 0x16b4]
call fcn.0040b34b
jmp 0x421994
lea ecx, [ebp - 0x16c4]
call fcn.0040b34b
mov dword [ebp - 0xcf0], 0x4f95
mov dword [ebp - 0xfdc], str.myrpnmviy_mibn_fbide_bhdxgcyvu_aulrlvm_fillztaf_hsn_rpcxoj_ecfeqpwcy_gpyxrtpj_ucn_cbx_rqo
cmp dword [ebp - 0xcf0], 0x5224
jle 0x421b9b
and dword [ebp - 0x33c], 0
jmp 0x421ad6
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 0x2290
jge 0x421b9b
and dword [ebp - 0x26c], 0
jmp 0x421afc
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 0x4098
jge 0x421b96
and dword [ebp - 0x3dc], 0
jmp 0x421b22
mov eax, dword [ebp - 0x3dc]
inc eax
mov dword [ebp - 0x3dc], eax
cmp dword [ebp - 0x3dc], 0x3d52
jge 0x421b91
and dword [ebp - 0x274], 0
jmp 0x421b44
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0x2222
jge 0x421b8f
mov eax, dword [ebp - 0x33c]
mov ecx, dword [ebp - 0x26c]
shl eax, cl
and eax, dword [ebp - 0x3dc]
and eax, dword [ebp - 0x274]
cdq
mov dword [ebp - 0xf48], eax
mov dword [ebp - 0xf44], edx
push dword [ebp - 0xf44]
push dword [ebp - 0xf48]
mov ecx, 0xade298
call fcn.0040b052
jmp 0x421b37
jmp 0x421b15
jmp 0x421aef
jmp 0x421ac9
mov dword [ebp - 0xdf8], 1
mov dword [ebp - 4], 8
cmp dword [ebp - 0xcf0], 0x4d69
jge 0x421bc8
mov edx, dword [ebp - 0xfdc]
mov ecx, 0xade298
call fcn.0040d8d7
jmp 0x421be4
or dword [ebp - 4], 0xffffffff
jmp 0x421bee
mov dword [ebp - 0xb80], 0x8748
mov dword [ebp - 0x48], 7
push 2
lea ecx, [ebp - 0x13a8]
call fcn.0040b279
mov dword [ebp - 0x27c], 0xfffffff6
mov dword [ebp - 0xc98], 0xfffffffd
mov dword [ebp - 0x1d4], 0
jmp 0x421c39
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 3
jge 0x421c55
mov eax, dword [ebp - 0x1d4]
mov dword [ebp + eax*4 - 0x1094], 0xfffffffe
jmp 0x421c2c
push 1
push 0
lea eax, [ebp - 0x13a8]
push eax
push 0x5e11
push 0
push 0x3b2e
push 0x30b6
lea eax, [ebp - 0x1d4]
push eax
call fcn.0043487e
add esp, 0x20
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x1500], eax
cmp dword [ebp - 0x48], 0x1a78e
jl 0x421c9e
mov dword [ebp - 0x6c8], 1
jmp 0x421ca5
and dword [ebp - 0x6c8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1094]
cmp dword [ebp - 0x6c8], eax
jne 0x421cc6
mov dword [ebp - 0x9f8], 1
jmp 0x421ccd
and dword [ebp - 0x9f8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1094]
cmp dword [ebp - 0x9f8], eax
jge 0x421cf4
mov eax, 0x15a8df04
test eax, eax
jne 0x421cf4
and dword [ebp - 0x6d0], 0
jmp 0x421cfe
mov dword [ebp - 0x6d0], 1
mov eax, dword [ebp - 0x6d0]
sub eax, 0x1914
jne 0x421d1a
cmp dword [ebp - 0x48], 0
jne 0x421d1a
and dword [ebp - 0x344], 0
jmp 0x421d24
mov dword [ebp - 0x344], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x344]
mov dword [ebp + eax - 0x1094], ecx
push 0
lea ecx, [ebp - 0x13a8]
call fcn.0040b367
mov ecx, dword [ebp - 0x344]
mov dword [eax], ecx
cmp dword [ebp - 0x344], 1
jl 0x421d61
mov dword [ebp - 0xb78], 1
jmp 0x421d68
and dword [ebp - 0xb78], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0xb78], eax
jl 0x421d7f
mov dword [ebp - 0x6d8], 1
jmp 0x421d86
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x6d8], eax
jge 0x421d9d
mov dword [ebp - 0xa00], 1
jmp 0x421da4
and dword [ebp - 0xa00], 0
mov eax, dword [ebp - 0x48]
imul eax, dword [ebp - 0xa00]
sub eax, 0x1210
cmp eax, 0x90ef874a
jb 0x421dc6
mov dword [ebp - 0x6e0], 1
jmp 0x421dcd
and dword [ebp - 0x6e0], 0
mov eax, dword [ebp - 0x48]
add eax, dword [ebp - 0x6e0]
cmp eax, 0xffffffff
je 0x421de7
mov dword [ebp - 0xc38], 1
jmp 0x421dee
and dword [ebp - 0xc38], 0
cmp dword [ebp - 0xc38], 0xffffffff
jb 0x421e03
mov dword [ebp - 0x6e8], 1
jmp 0x421e0a
and dword [ebp - 0x6e8], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x6e8], eax
jge 0x421e21
mov dword [ebp - 0xa08], 1
jmp 0x421e28
and dword [ebp - 0xa08], 0
mov eax, dword [ebp - 0xa08]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x27c]
cmp dword [ebp - 0x48], eax
jge 0x421e48
mov dword [ebp - 0x6f0], 1
jmp 0x421e4f
and dword [ebp - 0x6f0], 0
cmp dword [ebp - 0x6f0], 1
je 0x421e64
mov dword [ebp - 0x6f8], 1
jmp 0x421e6b
and dword [ebp - 0x6f8], 0
mov dword [ebp - 0xb80], 0x52c58fb7
mov eax, dword [ebp - 0xb80]
cmp eax, dword [ebp - 0x6f8]
je 0x421e8f
mov dword [ebp - 0xa10], 1
jmp 0x421e96
and dword [ebp - 0xa10], 0
mov eax, dword [ebp - 0xa10]
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0
jne 0x421eb9
push 6
pop eax
test eax, eax
jne 0x421eb9
cmp dword [ebp - 0x27c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1094]
mov dword [ebp - 0x1508], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xc98]
cmp dword [ebp + eax - 0x1094], ecx
jl 0x421eed
mov dword [ebp - 0x700], 1
jmp 0x421ef4
and dword [ebp - 0x700], 0
mov eax, dword [ebp - 0x700]
mov dword [ebp - 0xc98], eax
push 0x31b7
push 0x3ad1
push 0x4500
push 0x7973
push 1
lea eax, [ebp - 0x48]
push eax
push 0x4d72
push 0
push 0
push 1
push 0
call fcn.00439a8f
add esp, 0x2c
lea ecx, [ebp - 0x13a8]
call fcn.0040b34b
push 2
lea ecx, [ebp - 0x130c]
call fcn.0040b279
mov dword [ebp - 0x3ac], 0xae355683
mov dword [ebp - 0x3ac], 0
jmp 0x421f6a
mov eax, dword [ebp - 0x3ac]
dec eax
mov dword [ebp - 0x3ac], eax
cmp dword [ebp - 0x3ac], 0xffffffeb
jle 0x422131
mov dword [ebp - 0x15c], 0xffffffff
mov dword [ebp - 0x15c], 0xfffffff9
mov dword [ebp - 0x15c], 0xffffffff
jmp 0x421fa4
cmp dword [ebp - 0x15c], 0xffffffff
jg 0x42212c
mov dword [ebp - 0x74], 0x26d2e858
mov dword [ebp - 0x284], 0
jmp 0x421fd1
cmp dword [ebp - 0x284], 4
jge 0x421fed
jmp 0x421f5d
mov dword [ebp - 0xc40], 0x38ec
mov dword [ebp - 0x728], 1
mov dword [ebp - 0x718], 1
mov dword [ebp - 0x710], 0x2ba7b7e8
mov dword [ebp - 0xde8], 1
mov dword [ebp - 0x720], 0x8d9ba5f2
push 2
lea ecx, [ebp - 0x1224]
call fcn.0040b279
mov dword [ebp - 0xa18], 0xc3997b09
mov dword [ebp - 0xb88], 1
mov dword [ebp - 0xa20], 0x77ae2718
lea eax, [ebp - 0x1224]
push eax
push 0x7a7c
push 1
push 0
lea eax, [ebp - 0x1518]
push eax
call fcn.0044c662
add esp, 0x14
push 0x5448
push 0
push 0x1e1a
lea eax, [ebp - 0x1224]
push eax
push 0x36bd
push 0x53bb
lea eax, [ebp - 0xa18]
push eax
push 0x7560
lea eax, [ebp - 0xb88]
push eax
lea eax, [ebp - 0xde8]
push eax
lea eax, [ebp - 0xc40]
push eax
lea eax, [ebp - 0x710]
push eax
push 1
lea eax, [ebp - 0xa20]
push eax
push 0x65b8
lea eax, [ebp - 0x720]
push eax
push 0x2e6c
push 0x3b95
lea eax, [ebp - 0x728]
push eax
push 0x3059
lea eax, [ebp - 0x718]
push eax
call fcn.00432386
add esp, 0x54
lea eax, [ebp - 0xa18]
push eax
lea eax, [ebp - 0x710]
push eax
lea eax, [ebp - 0xb88]
push eax
lea eax, [ebp - 0x718]
push eax
push 0xfc
lea eax, [ebp - 0xa20]
push eax
lea eax, [ebp - 0x720]
push eax
push 0
lea eax, [ebp - 0xc40]
push eax
lea eax, [ebp - 0x728]
push eax
lea eax, [ebp - 0x1224]
push eax
push 0x1d73
call fcn.00430d43
add esp, 0x30
lea ecx, [ebp - 0x1224]
call fcn.0040b34b
push 0x6c31
lea eax, [ebp - 0x130c]
push eax
push 0x1661
lea eax, [ebp - 0x1520]
push eax
push 0
push 0
call fcn.0043c7d8
add esp, 0x18
mov byte [ebp - 0xfb], 0
lea eax, [ebp - 0xfb]
push eax
push 0x66a0
push 0x74fc
push 0
call fcn.00432953
add esp, 0x10
mov dword [ebp - 0x34c], 0x60477862
mov dword [ebp - 0x1528], 7
mov dword [ebp - 0x34c], 0
jmp 0x422307
mov eax, dword [ebp - 0x34c]
inc eax
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 0x17
jge 0x422337
mov dword [ebp - 0x11a8], 0x7c203980
push 0x5e59
lea eax, [ebp - 0x11a8]
push eax
push 0
push 0x6ecd
call fcn.00442b22
add esp, 0x10
jmp 0x4222fa
push 0x7208
push 0x756f
push 0
push 0
push 1
push 0x7f24
push 1
call fcn.00433658
add esp, 0x1c
push 0
lea eax, [ebp - 0x130c]
push eax
push 0xef1
push 0x1855
push 1
push 0x2b3c
lea eax, [ebp - 0xdf0]
push eax
push 0
lea eax, [ebp - 0xfe8]
push eax
push 1
push 1
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0xdf8]
push eax
call fcn.0041008e
add esp, 0x34
lea ecx, [ebp - 0x130c]
call fcn.0040b34b
jmp 0x421902
mov dword [ebp - 0x54], 0x4e2
mov dword [ebp - 0x28c], 0
jmp 0x4223c7
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 3
jge 0x4223e3
mov eax, dword [ebp - 0x28c]
mov dword [ebp + eax*4 - 0x16d4], 0x898f01ba
jmp 0x4223ba
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x54], 0
jmp 0x4223fa
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x12
jge 0x422624
mov dword [ebp - 0xb4], 0xea122098
cmp dword [ebp - 0x54], 0
je 0x422512
mov dword [ebp - 0x44c], 8
mov dword [ebp - 0x4ac], 0x1b17d72b
mov dword [ebp - 0xe00], 1
mov eax, dword [ebp - 0x4ac]
mov dword [ebp - 0x1530], eax
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x1538], eax
mov eax, dword [ebp - 0x4ac]
mov dword [ebp - 0x1540], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0xa28], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xa28]
mov dword [ebp + eax - 0x16d4], ecx
mov eax, dword [ebp - 0x44c]
dec eax
mov dword [ebp - 0x44c], eax
mov eax, dword [ebp - 0x44c]
mov ecx, dword [ebp - 0x54]
imul ecx, dword [ebp - 0x54]
imul eax, ecx
cmp dword [ebp - 0xa28], eax
jl 0x4224a7
mov dword [ebp - 0xff8], 1
jmp 0x4224ae
and dword [ebp - 0xff8], 0
mov eax, dword [ebp - 0xe00]
mov dword [ebp - 0x1548], eax
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0xb4], eax
jg 0x4224d4
mov dword [ebp - 0x730], 1
jmp 0x4224db
and dword [ebp - 0x730], 0
mov eax, dword [ebp - 0x730]
add eax, 0x108fc3a9
cmp dword [ebp - 0xb4], eax
jne 0x4224fa
mov dword [ebp - 0xb90], 1
jmp 0x422501
and dword [ebp - 0xb90], 0
mov eax, dword [ebp - 0xb90]
mov dword [ebp - 0x4ac], eax
jmp 0x422611
mov dword [ebp - 0xb4], 2
jmp 0x42252b
mov eax, dword [ebp - 0xb4]
dec eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
jl 0x422611
mov dword [ebp - 0x404], 0xae7b1b0c
mov dword [ebp - 0x404], 0
jmp 0x42255b
mov eax, dword [ebp - 0x404]
inc eax
mov dword [ebp - 0x404], eax
cmp dword [ebp - 0x404], 2
jg 0x4225fe
mov dword [ebp - 0x294], 0xffffffff
mov dword [ebp - 0x294], 2
jmp 0x42258b
mov eax, dword [ebp - 0x294]
dec eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 0
jl 0x4225f9
mov dword [ebp - 0x19c], 0x29207965
mov byte [ebp - 0xe9], 0
push 0x349a
lea eax, [ebp - 0xe9]
push eax
push 0xcca
push 0
push 0
call fcn.00430b09
add esp, 0x14
mov dword [ebp - 0x19c], 0
jmp 0x4225db
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 3
jge 0x4225f7
mov eax, dword [ebp - 0x19c]
mov dword [ebp + eax*4 - 0x16d4], 0x653e3f36
jmp 0x4225ce
jmp 0x42257e
jmp 0x42254e
push 0x1e99
push 0
call fcn.00431694
pop ecx
pop ecx
jmp 0x42251e
push 0x4c5a
push 0
call fcn.0042e04d
pop ecx
pop ecx
jmp 0x4223f3
mov eax, dword [ebp - 0xff4]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x164], 0xac204e2d
mov dword [ebp - 0xcc8], 0xf6872920
mov dword [ebp - 0x13dc], 0x4ab462a7
mov dword [ebp - 0x13d8], 0x4ab462a7
mov dword [ebp - 0x13d4], 0x4ab462a7
mov dword [ebp - 0x13d0], 0x4ab462a7
mov dword [ebp - 0x164], 0xffffffe3
jmp 0x422688
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0xe
jle 0x422984
push 4
lea ecx, [ebp - 0x10b4]
call fcn.0040b279
mov dword [ebp - 0x6c], 0xfffffffc
push 0x4b09
push 0
push 1
push 0
push 0x1a73
lea eax, [ebp - 0x1550]
push eax
push 0
lea eax, [ebp - 0x10b4]
push eax
call fcn.0043a5c7
add esp, 0x20
mov dword [ebp - 0x738], 0x77e9
mov dword [ebp - 0xe08], str.wibximciu_nrwgfdts_ekhz_yeusvzi_pzst_jycdmpiq
cmp dword [ebp - 0x738], 0x7b90
jle 0x4227ab
and dword [ebp - 0x3b4], 0
jmp 0x42270b
mov eax, dword [ebp - 0x3b4]
inc eax
mov dword [ebp - 0x3b4], eax
cmp dword [ebp - 0x3b4], 0x1290
jge 0x4227a0
and dword [ebp - 0x354], 0
jmp 0x422731
mov eax, dword [ebp - 0x354]
inc eax
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 0x1e79
jge 0x42279b
and dword [ebp - 0x29c], 0
jmp 0x422753
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 0x4bb1
jge 0x422799
mov eax, dword [ebp - 0x354]
cdq
idiv dword [ebp - 0x29c]
or edx, dword [ebp - 0x3b4]
mov eax, edx
cdq
mov dword [ebp - 0xf54], eax
mov dword [ebp - 0xf50], edx
push dword [ebp - 0xf50]
push dword [ebp - 0xf54]
mov ecx, 0xade298
call fcn.0040b052
jmp 0x422746
jmp 0x422724
jmp 0x4226fe
push 0x15bf
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x738], 0x7468
jge 0x4227ce
mov edx, dword [ebp - 0xe08]
mov ecx, 0xade298
call fcn.0040d8d7
jmp 0x4227ea
or dword [ebp - 4], 0xffffffff
jmp 0x4227f4
mov dword [ebp - 0x6c], 3
jmp 0x422804
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jl 0x422939
push 2
lea ecx, [ebp - 0x1324]
call fcn.0040b279
push 0x633d
push 0x4fd1
lea eax, [ebp - 0x1558]
push eax
lea eax, [ebp - 0x1324]
push eax
push 0
push 0
push 1
call fcn.00440d12
add esp, 0x1c
push 1
lea ecx, [ebp - 0x1324]
call fcn.0040b367
mov eax, dword [ebp - 0x6c]
xor ecx, ecx
inc ecx
sub ecx, dword [ebp - 0x6c]
add eax, ecx
je 0x422870
cmp dword [ebp - 0x164], 0
je 0x422870
mov dword [ebp - 0xa30], 1
jmp 0x422877
and dword [ebp - 0xa30], 0
mov eax, dword [ebp - 0xa30]
add eax, 0x886a
jne 0x422890
mov dword [ebp - 0x740], 1
jmp 0x422897
and dword [ebp - 0x740], 0
mov eax, dword [ebp - 0x740]
mov dword [ebp - 0xcc8], eax
cmp dword [ebp - 0xcc8], 0x3e3f
jne 0x4228bb
mov dword [ebp - 0x748], 1
jmp 0x4228c2
and dword [ebp - 0x748], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x748], eax
je 0x4228d9
mov dword [ebp - 0x750], 1
jmp 0x4228e0
and dword [ebp - 0x750], 0
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x10b4]
call fcn.0040b367
mov dword [ebp - 0xa38], eax
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x10b4]
call fcn.0040b367
mov ecx, dword [ebp - 0xa38]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0xa38]
mov eax, dword [eax]
imul eax, dword [ebp - 0x750]
neg eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x13dc], eax
lea ecx, [ebp - 0x1324]
call fcn.0040b34b
jmp 0x4227fd
push 1
push 0
push 0x704f
push 1
push 0x91c
lea eax, [ebp - 0x6c]
push eax
push 0xb1e
lea eax, [ebp - 0x10b4]
push eax
push 0x5b7a
push 0x28b9
push 1
push 0xe6
push 1
call fcn.0041d5e5
add esp, 0x34
lea ecx, [ebp - 0x10b4]
call fcn.0040b34b
jmp 0x42267b
mov byte [ebp - 0x111], 0
push 0
push 0
push 0x42da
push 0x6562
push 0x4f69
push 0x5726
push 1
lea eax, [ebp - 0x111]
push eax
push 0x314d
push 0x48ab
call fcn.0041b639
add esp, 0x28
mov dword [ebp - 0x2a4], 0xc75b57fd
mov dword [ebp - 0x2a4], 0xffffffee
jmp 0x4229e1
mov eax, dword [ebp - 0x2a4]
dec eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0xffffffec
jge 0x422ac5
mov dword [ebp - 0x110], 0x1bf2
mov dword [ebp - 0x35c], 0
jmp 0x422a11
mov eax, dword [ebp - 0x35c]
inc eax
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 4
jge 0x422a2d
mov eax, dword [ebp - 0x35c]
mov dword [ebp + eax*4 - 0x1854], 0xffffffff
jmp 0x422a04
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1854]
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x110], 0
jmp 0x422a58
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 3
jg 0x422ac0
mov dword [ebp - 0x1bc], 0xef9d7865
mov dword [ebp - 0x1bc], 3
jmp 0x422a84
mov eax, dword [ebp - 0x1bc]
dec eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0
jl 0x422ab3
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x110]
mov eax, dword [ebp + eax - 0x1854]
mov dword [ebp + ecx*4 - 0x1854], eax
cmp dword [ebp - 0x110], 0
je 0x422ab1
jmp 0x422a77
jmp 0x422a77
cmp dword [ebp - 0x1bc], 0
je 0x422abe
jmp 0x422a4b
jmp 0x422a4b
jmp 0x4229d4
mov dword [ebp - 0xe10], 1
push 3
lea ecx, [ebp - 0x16e4]
call fcn.0040b279
mov dword [ebp - 0x1560], 0xffffffff
mov dword [ebp - 0x758], 0x2ba7b7e8
mov dword [ebp - 0x64], 0
jmp 0x422b00
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x422b16
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x162c], 0xffffffff
jmp 0x422af9
mov dword [ebp - 0xb98], 0x3a44
mov dword [ebp - 0xffc], str.xqzwrowut_zbyxvy_mgwbf_tllpq
cmp dword [ebp - 0xb98], 0x3b3c
jle 0x422c15
and dword [ebp - 0x2b4], 0
jmp 0x422b50
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0x14f3
jge 0x422c01
and dword [ebp - 0x2ac], 0
jmp 0x422b76
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 0x2488
jge 0x422bfc
and dword [ebp - 0x3e4], 0
jmp 0x422b98
mov eax, dword [ebp - 0x3e4]
inc eax
mov dword [ebp - 0x3e4], eax
cmp dword [ebp - 0x3e4], 0x13b1
jge 0x422bf7
mov eax, dword [ebp - 0x2ac]
add eax, dword [ebp - 0x3e4]
xor eax, dword [ebp - 0x2b4]
cdq
mov dword [ebp - 0xf60], eax
mov dword [ebp - 0xf5c], edx
push dword [ebp - 0xf5c]
push dword [ebp - 0xf60]
lea ecx, [ebp - 0x1928]
call fcn.00401a48
pop ecx
pop ecx
mov ecx, eax
call fcn.0040b047
push eax
call fcn.004af8e7
pop ecx
lea ecx, [ebp - 0x1928]
call fcn.0040b03d
jmp 0x422b8b
jmp 0x422b69
jmp 0x422b43
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
lea eax, [ebp - 0x64]
push eax
push 0
push 0x1772
lea eax, [ebp - 0x16e4]
push eax
push 0x61b9
push 0
call fcn.00432eb4
add esp, 0x18
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0xb98], 0x3739
jge 0x422c55
push dword [ebp - 0xffc]
call fcn.004af8e7
pop ecx
jmp 0x422c71
or dword [ebp - 4], 0xffffffff
jmp 0x422c7b
mov dword [ebp - 0x64], 0
jmp 0x422c8b
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 4
jge 0x422ca1
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x19e0], 0xfffffff9
jmp 0x422c84
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x162c]
mov dword [ebp - 0xe10], eax
mov eax, dword [ebp - 0x758]
inc eax
mov dword [ebp - 0x758], eax
lea ecx, [ebp - 0x16e4]
call fcn.0040b34b
mov dword [ebp - 0xa0], 0x4e2
push 4
lea ecx, [ebp - 0x10c4]
call fcn.0040b279
push 0
lea eax, [ebp - 0x16c]
push eax
push 1
push 0x7f43
lea eax, [ebp - 0x10c4]
push eax
push 1
call fcn.00454c45
add esp, 0x18
mov dword [ebp - 0x16c], 0
jmp 0x422d1d
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 4
jge 0x422d39
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0x18b8], 1
jmp 0x422d10
push 3
lea ecx, [ebp - 0x10c4]
call fcn.0040b367
push 3
lea ecx, [ebp - 0x10c4]
call fcn.0040b367
push 0
lea ecx, [ebp - 0x10c4]
call fcn.0040b367
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x18b8]
cmp dword [eax], ecx
je 0x422d7c
mov dword [ebp - 0xa40], 1
jmp 0x422d83
and dword [ebp - 0xa40], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0xa40]
je 0x422dde
push 0x7835
push 0
push 0x45de
call fcn.0044a665
add esp, 0xc
mov byte [ebp - 0xeb], 0
push 0x8ac
push 0x7f2e
push 0x5a12
push 1
push 0x306f
push 0x5692
push 0x3762
push 0
push 1
lea eax, [ebp - 0xeb]
push eax
call fcn.0044195c
add esp, 0x28
jmp 0x422e0e
mov byte [ebp - 0xfd], 0
movzx eax, byte [ebp - 0xfd]
test eax, eax
je 0x422e0e
push 0
push 0x2d45
push 0x64b7
push 0x7f8f
push 0x3c5d
call fcn.0044138d
add esp, 0x14
lea ecx, [ebp - 0x10c4]
call fcn.0040b34b
push 2
lea ecx, [ebp - 0x52c]
call fcn.0040b279
mov dword [ebp - 0x12cc], 0x6d8d3833
mov dword [ebp - 0x12c8], 0x6d8d3833
mov dword [ebp - 0x12c4], 0x6d8d3833
mov dword [ebp - 0x12c0], 0x6d8d3833
lea ecx, [ebp - 0x41d]
call fcn.0040b376
push eax
lea eax, [ebp - 0x12bc]
push eax
lea eax, [ebp - 0x12cc]
push eax
lea ecx, [ebp - 0x1898]
call fcn.0040b379
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x123c]
call fcn.0040b325
mov dword [ebp - 0xb8], 0xb785b647
mov dword [ebp - 0x790], 0xe2caeaba
mov dword [ebp - 0x174], 0
push 0
lea eax, [ebp - 0x1a4]
push eax
lea eax, [ebp - 0x52c]
push eax
call fcn.0044bf87
add esp, 0xc
mov dword [ebp - 0x1a4], 0
jmp 0x422ed2
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 3
jge 0x422eee
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0xce4], 0
jmp 0x422ec5
push 1
lea ecx, [ebp - 0x52c]
call fcn.0040b367
cmp dword [eax], 0
jne 0x422f12
mov eax, 0xffff
test eax, eax
jne 0x422f12
and dword [ebp - 0x760], 0
jmp 0x422f1c
mov dword [ebp - 0x760], 1
push 1
lea ecx, [ebp - 0x52c]
call fcn.0040b367
mov esi, eax
push 0
lea ecx, [ebp - 0x52c]
call fcn.0040b367
mov ecx, dword [esi]
cmp ecx, dword [eax]
jl 0x422f4a
mov dword [ebp - 0x1004], 1
jmp 0x422f51
and dword [ebp - 0x1004], 0
push 1
lea ecx, [ebp - 0x52c]
call fcn.0040b367
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xce4]
mov dword [ebp - 0x1568], eax
push 2
lea ecx, [ebp - 0x123c]
call fcn.0040b367
cmp dword [eax], 0x98cafa32
jne 0x422f92
mov dword [ebp - 0xc48], 1
jmp 0x422f99
and dword [ebp - 0xc48], 0
mov eax, dword [ebp - 0x760]
cmp eax, dword [ebp - 0xc48]
jl 0x422fc5
push 2
lea ecx, [ebp - 0x123c]
call fcn.0040b367
cmp dword [eax], 0
je 0x422fc5
mov dword [ebp - 0x768], 1
jmp 0x422fcc
and dword [ebp - 0x768], 0
push 1
lea ecx, [ebp - 0x52c]
call fcn.0040b367
mov ecx, dword [ebp - 0x768]
mov dword [eax], ecx
mov dword [ebp - 0xb8], 0xffffffea
jmp 0x422ffa
cmp dword [ebp - 0xb8], 0x15
jge 0x423408
mov dword [ebp - 0x50], 1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xce4], 0
ja 0x42302a
lea ecx, [ebp - 0x123c]
call fcn.0040b34b
lea ecx, [ebp - 0x52c]
call fcn.0040b34b
push 1
lea ecx, [ebp - 0x10d4]
call fcn.0040b279
lea eax, [ebp - 0x1598]
push eax
lea eax, [ebp - 0x10d4]
push eax
push 0x4595
push 0x775c
push 0
call fcn.00434761
add esp, 0x14
push 0
lea ecx, [ebp - 0x10d4]
call fcn.0040b367
mov dword [eax], 0xfffffff2
jmp 0x423486
jmp 0x42b1b2
mov eax, dword [ebp - 0xecc]
mov dword [ebp - 0xedc], eax
mov eax, dword [ebp - 0xed4]
mov dword [ebp - 0xee4], eax
push 0x64ed
push dword [ebp - 0xedc]
push 0x373e
push 0x13e6
push 0
push 0xf70
push 0x7a1
push 0
push 1
push dword [ebp - 0xee4]
call fcn.0041b76b
add esp, 0x28
jmp 0x42b1f1
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0xef4], eax
lea eax, [ebp + 0x28]
mov dword [ebp - 0xeec], eax
push 0x36ac
mov eax, dword [ebp - 0xeec]
movzx eax, byte [eax]
push eax
push 0x6265
push 1
push dword [ebp - 0xef4]
push 1
push 0x423
call fcn.0041d7cf
add esp, 0x1c
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret