Function at 0x434c29
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4cdc33
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x468
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x5c], 1
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0xd8], 0xffffffff
mov dword [ebp - 0xd4], 1
mov dword [ebp - 0x48], 0xffffffff
push 0
lea eax, [ebp - 0xd8]
push eax
push 0x59c9
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0xd4]
push eax
push 0x641c
call fcn.0043bc1b
add esp, 0x1c
cmp dword [ebp - 0x2c], 0
je 0x434cbc
cmp dword [ebp - 0xd8], 0
je 0x434cbc
mov dword [ebp - 0x13c], 1
jmp 0x434cc3
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x2c]
sub eax, 0x53739231
mov ecx, dword [ebp - 0x13c]
sub ecx, dword [ebp - 0x48]
cmp eax, ecx
jl 0x434ce6
or eax, 0xffffffff
jne 0x434ce6
and dword [ebp - 0x228], 0
jmp 0x434cf0
mov dword [ebp - 0x228], 1
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x228]
test eax, eax
je 0x434f6c
mov dword [ebp - 0xdc], 0xfffffffd
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0xac], 0x53d0c96
mov dword [ebp - 0x6c], 0
jmp 0x434d2d
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jge 0x434d43
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x41c], 0xfff8
jmp 0x434d26
xor eax, eax
inc eax
sub eax, dword [ebp - 0x24]
cmp eax, 0x51ef224b
jge 0x434d5c
mov dword [ebp - 0x20c], 1
jmp 0x434d63
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x20c]
jl 0x434d7a
mov dword [ebp - 0x270], 1
jmp 0x434d81
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3ac], eax
mov dword [ebp - 0xac], 0x3a8a1d58
cmp dword [ebp - 0xac], 0
je 0x434dae
or eax, 0xffffffff
je 0x434dae
mov dword [ebp - 0xfc], 1
jmp 0x434db5
and dword [ebp - 0xfc], 0
cmp dword [ebp - 0xfc], 0x7ea9
jne 0x434dcd
mov dword [ebp - 0x100], 1
jmp 0x434dd4
and dword [ebp - 0x100], 0
cmp dword [ebp - 0x100], 0x24e1
jg 0x434dec
mov dword [ebp - 0x19c], 1
jmp 0x434df3
and dword [ebp - 0x19c], 0
cmp dword [ebp - 0x19c], 0x819a
jge 0x434e0b
mov dword [ebp - 0x108], 1
jmp 0x434e12
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0xdc]
add eax, dword [ebp - 0x108]
cmp eax, dword [ebp - 0x2c]
jl 0x434e2f
mov dword [ebp - 0x1a0], 1
jmp 0x434e36
and dword [ebp - 0x1a0], 0
cmp dword [ebp - 0x1a0], 0x5584e2bb
jl 0x434e4e
mov dword [ebp - 0x110], 1
jmp 0x434e55
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0xdc]
imul eax, dword [ebp - 0x110]
cmp eax, 0x6f594a39
jg 0x434e75
mov dword [ebp - 0x1e8], 1
jmp 0x434e7c
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x1e8]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x41c]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x48], eax
jg 0x434eaa
mov dword [ebp - 0x118], 1
jmp 0x434eb1
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0xdc]
add eax, dword [ebp - 0x118]
cmp eax, 0xfffc
jb 0x434ed0
mov dword [ebp - 0x1a8], 1
jmp 0x434ed7
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x1a8], eax
jl 0x434ee9
cmp dword [ebp - 0xac], 0
cmp dword [ebp - 0x48], 0
je 0x434f04
cmp dword [ebp - 0xd4], 0
je 0x434f04
mov dword [ebp - 0x120], 1
jmp 0x434f0b
and dword [ebp - 0x120], 0
cmp dword [ebp - 0x120], 1
jae 0x434f20
mov dword [ebp - 0x208], 1
jmp 0x434f27
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xd4], eax
push 1
push 0xdb9
push 0x29dd
push 0x30df
push 1
push 0x432a
push 0
push 0x35b2
lea eax, [ebp - 0xac]
push eax
call fcn.00468a67
add esp, 0x24
jmp 0x435018
mov dword [ebp - 0x2bc], 0
mov dword [ebp - 0x2c4], 0x70f82edd
mov dword [ebp - 0x2cc], 3
push 0xe9f
push 1
push 1
push 0x7da5
push 0x2ee5
lea eax, [ebp - 0x2bc]
push eax
push 0x20fb
push 0x6df8
push 1
lea eax, [ebp - 0xd8]
push eax
push 0x2923
push 0x36ca
push 0x4ede
call fcn.0042e932
add esp, 0x34
push 1
push 0x3447
push 1
push 0x6232
push 1
push 0x453c
push 0x20a9
push 0x79fa
lea eax, [ebp - 0x2c4]
push eax
push 1
push 0
push 1
push 0x75e1
push 0x4230
push 0x20df
lea eax, [ebp - 0x2cc]
push eax
call fcn.00433681
add esp, 0x40
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x130], 0xb2c21353
mov dword [ebp - 0x1c], 5
mov dword [ebp - 0x74], 0
jmp 0x435045
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x43505b
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x24c], 0xfffffffe
jmp 0x43503e
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x128], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x128]
mov dword [ebp + eax - 0x24c], ecx
cmp dword [ebp - 0x128], 0
je 0x4351d5
push 3
lea ecx, [ebp - 0x320]
call fcn.0040bdd2
mov dword [ebp - 0x310], 0xd73d
mov dword [ebp - 0x1b0], 1
push 0x3486
push 1
push 0x15d2
push 0x5420
push 1
push 0
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x3e4]
push eax
call fcn.004510e3
add esp, 0x20
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x24c]
mov dword [ebp - 0x394], eax
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x24c], 1
push 8
pop eax
inc eax
mov dword [ebp - 0x1b0], eax
je 0x435115
mov eax, 0xffff
test eax, eax
je 0x435115
mov dword [ebp - 0x1f0], 1
jmp 0x43511c
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x1f0], eax
jg 0x435136
mov dword [ebp - 0x138], 1
jmp 0x43513d
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x310]
cmp dword [ebp - 0x138], eax
jg 0x435166
push 1
lea ecx, [ebp - 0x320]
call fcn.0040bec0
cmp dword [eax], 0
jne 0x435166
and dword [ebp - 0x1b8], 0
jmp 0x435170
mov dword [ebp - 0x1b8], 1
push 2
lea ecx, [ebp - 0x320]
call fcn.0040bec0
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1b8]
jne 0x435193
mov dword [ebp - 0x140], 1
jmp 0x43519a
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x140]
add eax, 0xffff
cmp eax, 0xcd95ff79
jne 0x4351b8
mov dword [ebp - 0x21c], 1
jmp 0x4351bf
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x320]
call fcn.0040bea4
jmp 0x435211
call fcn.004345c6
mov dword [ebp - 0x1c], 2
jmp 0x4351ea
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x435211
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x24c]
mov ecx, dword [ebp - 0x1c]
imul eax, dword [ebp + ecx*4 - 0x24c]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp + ecx*4 - 0x24c], eax
jmp 0x4351e3
mov eax, dword [ebp + 8]
mov eax, dword [eax]
push 8
pop ecx
shl ecx, 0
lea eax, [eax + ecx + 0x78]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x314], 0
mov dword [ebp - 0x3b0], 7
mov dword [ebp - 0x39c], 0xc17633ef
mov dword [ebp - 0x3b4], 0xfffffff9
mov dword [ebp - 0x3b8], 0x3fbb4ebb
mov dword [ebp - 0x410], 0
mov dword [ebp - 0x40c], 0
mov dword [ebp - 0x408], 0
mov dword [ebp - 0x404], 0
mov dword [ebp - 0x278], 0xfe012d2c
push 0x6f5
push 9
push 1
push 1
lea eax, [ebp - 0x314]
push eax
push 1
push 0x117d
push 0x7f3b
push 0x5551
push 0x63bf
push 1
call fcn.0043197e
add esp, 0x2c
push 0xfbb
push 0x3ab
push 1
push 0x6fcf
push 0x477
push 1
push 0x7eaf
push 0x30f5
lea eax, [ebp - 0x278]
push eax
push 0x4ba6
push 1
call fcn.0042efe4
add esp, 0x2c
mov eax, dword [ebp - 0x148]
cmp dword [eax + 4], 0
jbe 0x436711
push 0
push 0x299f
push 0x5b1d
call fcn.0046e2f4
add esp, 0xc
mov eax, dword [ebp - 0x148]
mov ecx, dword [ebp - 0xb0]
add ecx, dword [eax]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x354], 0x8eac
mov dword [ebp - 0x350], 0x8eac
mov dword [ebp - 0x34c], 0x8eac
mov dword [ebp - 0x348], 0x8eac
lea ecx, [ebp - 0xcd]
call fcn.0040becf
push eax
lea eax, [ebp - 0x344]
push eax
lea eax, [ebp - 0x354]
push eax
lea ecx, [ebp - 0x424]
call fcn.0040bed2
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x36c]
call fcn.0040be7e
or dword [ebp - 0x340], 0xffffffff
or dword [ebp - 0x33c], 0xffffffff
or dword [ebp - 0x338], 0xffffffff
or dword [ebp - 0x334], 0xffffffff
lea ecx, [ebp - 0xe1]
call fcn.0040becf
push eax
lea eax, [ebp - 0x330]
push eax
lea eax, [ebp - 0x340]
push eax
lea ecx, [ebp - 0x42c]
call fcn.0040bed2
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x360]
call fcn.0040be7e
mov dword [ebp - 0x2f4], 0xef6b8f3d
mov dword [ebp - 0x1c0], 0x5c30
mov dword [ebp - 0x27c], str.vlwidl_rhlcnvzbq_burixlxe_cynbpxg_ocnfpzv_cct_epvors
cmp dword [ebp - 0x1c0], 0x5f79
jle 0x4354e0
and dword [ebp - 0xbc], 0
jmp 0x43541b
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x5556
jge 0x4354e0
and dword [ebp - 0x7c], 0
jmp 0x435438
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x6221
jge 0x4354db
and dword [ebp - 0x60], 0
jmp 0x435452
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x2551
jge 0x4354d6
and dword [ebp - 0x84], 0
jmp 0x435471
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x15fd
jge 0x4354d1
mov eax, dword [ebp - 0xbc]
imul eax, dword [ebp - 0x7c]
and eax, dword [ebp - 0x60]
or eax, dword [ebp - 0x84]
cdq
mov dword [ebp - 0x284], eax
mov dword [ebp - 0x280], edx
push dword [ebp - 0x280]
push dword [ebp - 0x284]
lea ecx, [ebp - 0x454]
call fcn.004019d8
pop ecx
pop ecx
mov ecx, eax
call fcn.0040bba0
push eax
call fcn.004b7f67
pop ecx
lea ecx, [ebp - 0x454]
call fcn.0040bb96
jmp 0x435464
jmp 0x43544b
jmp 0x435431
jmp 0x43540e
and dword [ebp - 4], 0
cmp dword [ebp - 0x1c0], 0x5a46
jge 0x4354fc
push dword [ebp - 0x27c]
call fcn.004b7f67
pop ecx
jmp 0x435518
or dword [ebp - 4], 0xffffffff
jmp 0x435522
lea eax, [ebp - 0x36c]
push eax
lea eax, [ebp - 0x360]
push eax
push 0x29
push 1
push 0
push 1
push 0x58c4
call fcn.004315a1
add esp, 0x1c
lea eax, [ebp - 0x360]
push eax
lea eax, [ebp - 0x36c]
push eax
lea eax, [ebp - 0x2f4]
push eax
call fcn.00434605
add esp, 0xc
lea ecx, [ebp - 0x360]
call fcn.0040bea4
lea ecx, [ebp - 0x36c]
call fcn.0040bea4
jmp 0x435583
mov eax, dword [ebp - 0x34]
add eax, 0x14
mov dword [ebp - 0x34], eax
push dword [ebp - 0x34]
call fcn.0042c5cd
pop ecx
movzx eax, al
test eax, eax
jne 0x436711
mov eax, dword [ebp - 0x34]
cmp dword [eax + 0xc], 0
je 0x436711
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0xb0]
add ecx, dword [eax + 0xc]
push ecx
push 0x51aa
push 0x5916
call fcn.0040b136
pop ecx
pop ecx
call eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
jne 0x4356c2
push 2
lea ecx, [ebp - 0x378]
call fcn.0040bdd2
mov dword [ebp - 0xc4], 0
push 3
lea ecx, [ebp - 0x3d0]
call fcn.0040bdd2
mov dword [ebp - 0x3ec], 6
mov dword [ebp - 0x40], 0
jmp 0x435615
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x435631
push dword [ebp - 0x40]
lea ecx, [ebp - 0x378]
call fcn.0040bec0
mov dword [eax], 0xd3df
jmp 0x43560e
lea eax, [ebp - 0x3d0]
push eax
push 0x3eb6
push 0x3c0
push 1
push 1
push 0x193b
push 0x7246
push 1
lea eax, [ebp - 0x40]
push eax
push 1
call fcn.0042f83a
add esp, 0x28
mov dword [ebp - 0xc4], 0
jmp 0x435679
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 1
jg 0x4356a3
mov dword [ebp - 0x288], 0xa2a4f402
lea eax, [ebp - 0x378]
push eax
lea eax, [ebp - 0x288]
push eax
call fcn.00434721
pop ecx
pop ecx
jmp 0x43566c
lea ecx, [ebp - 0x3d0]
call fcn.0040bea4
lea ecx, [ebp - 0x378]
call fcn.0040bea4
and dword [ebp - 0x5c], 0
jmp 0x436711
call fcn.0043491a
lea eax, [ebp + 8]
push eax
call fcn.00434abc
pop ecx
mov dword [ebp - 0x38], 0x3ae35568
mov dword [ebp - 0x198], 0xfffffff7
mov dword [ebp - 0x8c], 0
jmp 0x4356fb
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 3
jge 0x435717
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x240], 0
jmp 0x4356ee
mov dword [ebp - 0x38], 0
jmp 0x435727
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xe
jl 0x435c19
push 3
lea ecx, [ebp - 0x234]
call fcn.0040bdd2
mov dword [ebp - 0x2ac], 0xa1c3d076
push 1
lea ecx, [ebp - 0x2dc]
call fcn.0040bdd2
mov dword [ebp - 0x2f0], 0x446f
push 0x7755
lea eax, [ebp - 0x234]
push eax
push 1
push 0x2892
push 1
push 0x2a94
push 1
lea eax, [ebp - 0x2e8]
push eax
call fcn.0043006e
add esp, 0x20
lea eax, [ebp - 0x2dc]
push eax
lea eax, [ebp - 0x2e8]
push eax
call fcn.00434af1
pop ecx
pop ecx
push 0x3316
push 1
push 0x67f5
push 1
push 0x145c
push 0
push 0x45f5
push 0x6720
call fcn.0043bff9
add esp, 0x20
push 0
lea ecx, [ebp - 0x234]
call fcn.0040bec0
mov dword [eax], 0xfffffff3
jmp 0x4357ff
push 0
lea ecx, [ebp - 0x234]
call fcn.0040bec0
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x150]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x150]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x234]
call fcn.0040bec0
cmp dword [eax], 2
jl 0x435bfe
mov dword [ebp - 0x18], 0xfffffffa
mov dword [ebp - 0x30], 0xfffffffd
mov dword [ebp - 0x308], 5
mov dword [ebp - 0x1d8], 0x9f19
mov dword [ebp - 0x18], 0
jmp 0x435847
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jg 0x435beb
mov dword [ebp - 0x3c4], 0xa5659cde
mov dword [ebp - 0x3f0], 0x91260e2e
mov dword [ebp - 0x3d4], 0xa2fc53d
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x240]
mov dword [ebp - 0x400], eax
push 4
pop eax
shl eax, 1
imul eax, dword [ebp + eax - 0x240], 0x6986
test eax, eax
jne 0x4358a2
cmp dword [ebp - 0x18], 0
jne 0x4358a2
and dword [ebp - 0x1f8], 0
jmp 0x4358ac
mov dword [ebp - 0x1f8], 1
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x1f8]
jg 0x4358c3
mov dword [ebp - 0x294], 1
jmp 0x4358ca
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x38c], eax
push 1
lea ecx, [ebp - 0x234]
call fcn.0040bec0
mov ecx, dword [ebp - 0x30]
cmp dword [eax], ecx
jge 0x4358f3
mov dword [ebp - 0x158], 1
jmp 0x4358fa
and dword [ebp - 0x158], 0
cmp dword [ebp - 0x158], 0x8b012130
jne 0x435912
mov dword [ebp - 0x1c8], 1
jmp 0x435919
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp + eax*4 - 0x240]
add esi, dword [ebp - 0x1c8]
push 0
lea ecx, [ebp - 0x234]
call fcn.0040bec0
sub esi, dword [eax]
je 0x43594b
or eax, 0xffffffff
je 0x43594b
mov dword [ebp - 0x160], 1
jmp 0x435952
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x240]
add eax, dword [ebp - 0x160]
cmp eax, dword [ebp - 0x30]
jl 0x435973
mov dword [ebp - 0x214], 1
jmp 0x43597a
and dword [ebp - 0x214], 0
cmp dword [ebp - 0x214], 0x9d73
jne 0x435992
mov dword [ebp - 0x168], 1
jmp 0x435999
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x168]
mov dword [ebp + eax*4 - 0x240], ecx
mov dword [ebp - 0x30], 0xfffffffd
jmp 0x4359b9
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xc
jl 0x435be6
mov dword [ebp - 0x58], 0xfffd
push 2
lea ecx, [ebp - 0x384]
call fcn.0040bdd2
push 0x32b7
push 1
push 0x612
lea eax, [ebp - 0x384]
push eax
lea eax, [ebp - 0x390]
push eax
push 0x7e6
push 0
push 0x74ac
push 0x639d
push 0x4fc1
push 1
push 0x4887
call fcn.00456a14
add esp, 0x30
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
jne 0x435bb3
push 0
lea ecx, [ebp - 0x2dc]
call fcn.0040bec0
cmp dword [ebp - 0x18], 0xc3314648
jae 0x435a45
mov dword [ebp - 0x188], 1
jmp 0x435a4c
and dword [ebp - 0x188], 0
push 0
lea ecx, [ebp - 0x2dc]
call fcn.0040bec0
mov eax, dword [ebp - 0x58]
imul eax, dword [ebp - 0x18]
test eax, eax
jne 0x435a76
cmp dword [ebp - 0x308], 0
jne 0x435a76
and dword [ebp - 0x1d0], 0
jmp 0x435a80
mov dword [ebp - 0x1d0], 1
mov eax, dword [ebp - 0x198]
cmp dword [ebp - 0x1d0], eax
je 0x435a9a
mov dword [ebp - 0x170], 1
jmp 0x435aa1
and dword [ebp - 0x170], 0
cmp dword [ebp - 0x170], 0x80b0b8b0
jbe 0x435ab9
mov dword [ebp - 0x200], 1
jmp 0x435ac0
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x200]
sub eax, 0x55901a70
jne 0x435ad9
mov dword [ebp - 0x178], 1
jmp 0x435ae0
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0
jae 0x435b01
mov dword [ebp - 0x180], 1
jmp 0x435b08
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x240]
add eax, dword [ebp - 0x180]
cmp eax, 0xe5571be3
ja 0x435b2b
mov dword [ebp - 0x224], 1
jmp 0x435b32
and dword [ebp - 0x224], 0
cmp dword [ebp - 0x224], 0x7b
jg 0x435b47
mov dword [ebp - 0x2a0], 1
jmp 0x435b4e
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0x398], eax
push 0
lea ecx, [ebp - 0x2dc]
call fcn.0040bec0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x388], eax
cmp dword [ebp - 0x2ac], 0
jne 0x435b92
push 8
pop eax
test eax, eax
jne 0x435b92
and dword [ebp - 0x1e0], 0
jmp 0x435b9c
mov dword [ebp - 0x1e0], 1
mov eax, dword [ebp - 0x188]
cmp eax, dword [ebp - 0x1e0]
je 0x435bb3
and dword [ebp - 0x190], 0
jmp 0x435bbd
mov dword [ebp - 0x190], 1
imul esi, dword [ebp - 0x190], 0x94a3
push 1
lea ecx, [ebp - 0x384]
call fcn.0040bec0
mov dword [eax], esi
lea ecx, [ebp - 0x384]
call fcn.0040bea4
jmp 0x4359b2
jmp 0x435840
cmp dword [ebp - 0x198], 0
je 0x435bf9
jmp 0x4357db
jmp 0x4357db
lea ecx, [ebp - 0x2dc]
call fcn.0040bea4
lea ecx, [ebp - 0x234]
call fcn.0040bea4
jmp 0x435720
mov eax, dword [ebp + 8]
cmp dword [eax + 8], 0
jne 0x436261
mov dword [ebp - 0x26c], 0xfffffff9
mov dword [ebp - 0x268], 0xfffffff9
mov dword [ebp - 0x264], 0xfffffff9
mov dword [ebp - 0x260], 0xfffffff9
mov dword [ebp - 0x104], 0xfffffff9
mov dword [ebp - 0xf8], 0xffffffff
mov dword [ebp - 0x134], 0xffff
mov dword [ebp - 0x11c], 0xfffffffb
mov dword [ebp - 0x124], 0x627e80a7
mov dword [ebp - 0xc8], 0
jmp 0x435c99
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 2
jge 0x435cb5
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x3a8], 5
jmp 0x435c8c
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x26c], 0x8bbca631
xor eax, eax
inc eax
je 0x435d0b
mov dword [ebp - 0x94], 1
mov dword [ebp - 0x94], 0
jmp 0x435cee
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 9
jl 0x435d06
lea eax, [ebp - 0x104]
push eax
call fcn.00404a8a
pop ecx
jmp 0x435ce1
jmp 0x435eec
mov dword [ebp - 0x50], 0xaae0
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x26c], 0
je 0x435e2c
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x26c]
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 1
jne 0x435d4e
mov dword [ebp - 0xf4], 1
jmp 0x435d55
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0xf4]
sub eax, dword [ebp - 0x104]
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x26c]
sub ecx, dword [ebp - 0x50]
cmp eax, ecx
jge 0x435d8e
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x26c], 0
jne 0x435d8e
and dword [ebp - 0x10c], 0
jmp 0x435d98
mov dword [ebp - 0x10c], 1
mov eax, dword [ebp - 0x10c]
sub eax, dword [ebp - 0x50]
mov dword [ebp - 0x30c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x30c]
mov dword [ebp + eax - 0x3a8], ecx
imul eax, dword [ebp - 0x134], 5
test eax, eax
jne 0x435dd2
xor eax, eax
jne 0x435dd2
and dword [ebp - 0x114], 0
jmp 0x435ddc
mov dword [ebp - 0x114], 1
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x124], eax
jne 0x435e0b
mov dword [ebp - 0x12c], 1
jmp 0x435e12
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x12c]
sub eax, dword [ebp - 0x134]
je 0x435e2c
mov dword [ebp - 0xec], 1
jmp 0x435e33
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0x50]
add eax, dword [ebp - 0xec]
cmp eax, dword [ebp - 0x50]
jg 0x435e4d
mov dword [ebp - 0x144], 1
jmp 0x435e54
and dword [ebp - 0x144], 0
cmp dword [ebp - 0x144], 0xffffffff
jge 0x435e69
mov dword [ebp - 0x14c], 1
jmp 0x435e70
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x14c]
neg eax
je 0x435ede
push 0x7bcb
push 0x4ac4
push 0x352
push 0x1e52
push 1
push 0x7b86
push 0x76af
push 1
push 0x3f87
push 0x7df1
push 0x5c63
push 0x1a2
push 1
push 0x3d0f
push 0x360
push 0x4052
push 0x17c1
push 0x62a4
push 1
push 0
push 0x64cd
call fcn.00450133
add esp, 0x54
jmp 0x435eec
push 0
push 0x2082
call fcn.0045556f
pop ecx
pop ecx
push 0x55ad
push 0x1d2f
push 0x5395
push 0x2879
push 0
push 0x675a
push 1
push 0x3d5a
push 0x3faf
push 0x507d
push 1
lea eax, [ebp - 0x5c]
push eax
call fcn.00469229
add esp, 0x30
mov dword [ebp - 0xc0], 0x53b26bdd
push 3
lea ecx, [ebp - 0x3e0]
call fcn.0040bdd2
mov dword [ebp - 0x15c], 0xee28fdeb
lea eax, [ebp - 0x3f4]
push eax
push 1
push 0
lea eax, [ebp - 0x3e0]
push eax
call fcn.004428b9
add esp, 0x10
mov dword [ebp - 0xc0], 0
jmp 0x435f7a
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 2
jg 0x436251
mov dword [ebp - 0x3fc], 0xed15
mov dword [ebp - 0x3f8], 0x85b7f37c
mov dword [ebp - 0x154], 0x6698
mov dword [ebp - 0x2b8], str.tprf_glrmtsw_yqh_iob_slnutnj_juw
cmp dword [ebp - 0x154], 0x6788
jle 0x436085
and dword [ebp - 0x9c], 0
jmp 0x435fd5
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x2285
jge 0x436085
and dword [ebp - 0xb4], 0
jmp 0x435ffb
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x4c1a
jge 0x436080
and dword [ebp - 0xa4], 0
jmp 0x43601d
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x46fe
jge 0x43607b
and dword [ebp - 0x64], 0
jmp 0x436036
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x5596
jge 0x436079
mov eax, dword [ebp - 0x9c]
and eax, dword [ebp - 0xb4]
and eax, dword [ebp - 0xa4]
or eax, dword [ebp - 0x64]
cdq
mov dword [ebp - 0x290], eax
mov dword [ebp - 0x28c], edx
push dword [ebp - 0x28c]
push dword [ebp - 0x290]
mov ecx, 0xaa47f8
call fcn.0040bbab
jmp 0x43602f
jmp 0x436010
jmp 0x435fee
jmp 0x435fc8
mov dword [ebp - 0x68], 0
jmp 0x436095
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x4360ab
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x460], 0x1b88146c
jmp 0x43608e
mov dword [ebp - 4], 2
cmp dword [ebp - 0x154], 0x63fd
jge 0x4360ce
mov edx, dword [ebp - 0x2b8]
mov ecx, 0xaa47f8
call fcn.0040e430
jmp 0x4360ea
or dword [ebp - 4], 0xffffffff
jmp 0x4360f4
mov eax, dword [ebp - 0x15c]
dec eax
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x164], 0x37d7
mov dword [ebp - 0x2f8], str.xgczcff_vlzdp_aizv_jompkmg
cmp dword [ebp - 0x164], 0x387f
jle 0x4361d9
and dword [ebp - 0x70], 0
jmp 0x436132
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x5f6e
jge 0x4361cf
and dword [ebp - 0x78], 0
jmp 0x43614c
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x2a7f
jge 0x4361ca
and dword [ebp - 0x80], 0
jmp 0x436162
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x4a8e
jge 0x4361c5
and dword [ebp - 0x88], 0
jmp 0x436181
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x5451
jge 0x4361c3
mov eax, dword [ebp - 0x70]
and eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x80]
and ecx, dword [ebp - 0x88]
or eax, ecx
cdq
mov dword [ebp - 0x29c], eax
mov dword [ebp - 0x298], edx
push dword [ebp - 0x298]
push dword [ebp - 0x29c]
mov ecx, 0xaa47f8
call fcn.0040bbab
jmp 0x436174
jmp 0x43615b
jmp 0x436145
jmp 0x43612b
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
mov byte [ebp - 0x1e], 0
push 0x5518
push 0x2320
push 0
push 1
push 0x60ff
push 1
push 0x2e6f
lea eax, [ebp - 0x1e]
push eax
call fcn.0045ef29
add esp, 0x20
mov dword [ebp - 4], 4
cmp dword [ebp - 0x164], 0x3642
jge 0x436226
mov edx, dword [ebp - 0x2f8]
mov ecx, 0xaa47f8
call fcn.0040e430
jmp 0x436242
or dword [ebp - 4], 0xffffffff
jmp 0x43624c
jmp 0x435f6d
lea ecx, [ebp - 0x3e0]
call fcn.0040bea4
jmp 0x436711
mov dword [ebp - 0x174], 0x1a96
mov dword [ebp - 0x2c0], str.twpoky_uiimcw_zdpzc_rranqn_xacxehdgd_kndd_cablfcdwy
cmp dword [ebp - 0x174], 0x1cb9
jle 0x436332
push 0xccd
push 0
push 0x1240
push 0x25f1
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
and dword [ebp - 0x90], 0
jmp 0x4362b2
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x4b19
jge 0x436332
and dword [ebp - 0x98], 0
jmp 0x4362d4
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x7c63
jge 0x43632d
mov eax, dword [ebp - 0x90]
and eax, dword [ebp - 0x98]
cdq
mov dword [ebp - 0x2a8], eax
mov dword [ebp - 0x2a4], edx
push dword [ebp - 0x2a4]
push dword [ebp - 0x2a8]
lea ecx, [ebp - 0x478]
call fcn.004019d8
pop ecx
pop ecx
mov ecx, eax
call fcn.0040bba0
push eax
call fcn.004b7f67
pop ecx
lea ecx, [ebp - 0x478]
call fcn.0040bb96
jmp 0x4362c7
jmp 0x4362a5
mov dword [ebp - 0xa8], 0xd6c05baf
mov dword [ebp - 0xa0], 0
jmp 0x436355
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 1
jge 0x436371
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x16c], 2
jmp 0x436348
mov dword [ebp - 0xa8], 0
jmp 0x43638a
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0xfffffffd
jg 0x4363e4
mov dword [ebp - 0x28], 0x248c66f5
mov dword [ebp - 0x28], 0
jmp 0x4363aa
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jg 0x4363e2
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x16c]
mov dword [ebp + ecx*4 - 0x16c], eax
mov byte [ebp - 0x1d], 0
push 0x1cdd
lea eax, [ebp - 0x1d]
push eax
push 0x2f61
push 0
call fcn.0045d201
add esp, 0x10
jmp 0x4363a3
jmp 0x43637d
mov dword [ebp - 4], 6
cmp dword [ebp - 0x174], 0x176e
jge 0x436403
push dword [ebp - 0x2c0]
call fcn.004b7f67
pop ecx
jmp 0x43641f
or dword [ebp - 4], 0xffffffff
jmp 0x436429
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2c8]
push eax
push dword [ebp - 0xb0]
push dword [ebp - 0x34]
lea eax, [ebp - 0xe0]
push eax
push dword [ebp + 8]
call fcn.0042c9be
add esp, 0x18
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2c8]
push eax
push dword [ebp - 0xb0]
lea eax, [ebp - 0xe0]
push eax
call fcn.0042ca33
add esp, 0x14
call fcn.00434b39
cmp dword [ebp - 0x5c], 0
jne 0x43670c
mov dword [ebp - 0x25c], 0xfffffff9
mov dword [ebp - 0x258], 0xfffffff9
mov dword [ebp - 0x254], 0xfffffff9
mov dword [ebp - 0x250], 0xfffffff9
mov dword [ebp - 0x18c], 0xfffffff9
mov dword [ebp - 0x17c], 0xffffffff
mov dword [ebp - 0x1c4], 0xffff
mov dword [ebp - 0x1ac], 0xfffffffb
mov dword [ebp - 0x1b4], 0x627e80a7
mov dword [ebp - 0xcc], 0
jmp 0x4364fb
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 2
jge 0x436517
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x3c0], 5
jmp 0x4364ee
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x25c], 0x8bbca631
xor eax, eax
inc eax
je 0x436586
mov dword [ebp - 0x2e4], 1
push 1
push 0x7d3b
push 1
lea eax, [ebp - 0x18c]
push eax
push 1
push 0x590a
push 0x6ede
push 0x290e
push 0x3301
push 1
push 1
push 1
push 0x63bc
push 0x4f45
lea eax, [ebp - 0x2e4]
push eax
push 0x1c44
call fcn.00433681
add esp, 0x40
jmp 0x43670a
mov dword [ebp - 0x44], 0xaae0
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x25c], 0
je 0x4366a7
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x25c]
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 1
jne 0x4365c9
mov dword [ebp - 0x184], 1
jmp 0x4365d0
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x184]
sub eax, dword [ebp - 0x18c]
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x25c]
sub ecx, dword [ebp - 0x44]
cmp eax, ecx
jge 0x436609
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x25c], 0
jne 0x436609
and dword [ebp - 0x194], 0
jmp 0x436613
mov dword [ebp - 0x194], 1
mov eax, dword [ebp - 0x194]
sub eax, dword [ebp - 0x44]
mov dword [ebp - 0x2d0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2d0]
mov dword [ebp + eax - 0x3c0], ecx
imul eax, dword [ebp - 0x1c4], 5
test eax, eax
jne 0x43664d
xor eax, eax
jne 0x43664d
and dword [ebp - 0x1a4], 0
jmp 0x436657
mov dword [ebp - 0x1a4], 1
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x1b4], eax
jne 0x436686
mov dword [ebp - 0x1bc], 1
jmp 0x43668d
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x1bc]
sub eax, dword [ebp - 0x1c4]
je 0x4366a7
mov dword [ebp - 0x1cc], 1
jmp 0x4366ae
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x1cc]
cmp eax, dword [ebp - 0x44]
jg 0x4366c8
mov dword [ebp - 0x1d4], 1
jmp 0x4366cf
and dword [ebp - 0x1d4], 0
cmp dword [ebp - 0x1d4], 0xffffffff
jge 0x4366e4
mov dword [ebp - 0x1dc], 1
jmp 0x4366eb
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x1dc]
neg eax
je 0x436705
push 0
push 0x423
call fcn.00441340
pop ecx
pop ecx
jmp 0x43670a
call fcn.00434bc8
jmp 0x436711
jmp 0x43557a
mov dword [ebp - 0x4c], 0x7689351f
mov dword [ebp - 0xe8], 0x4c7b7f60
mov dword [ebp - 0x54], 0xffffffff
mov dword [ebp - 0x220], 1
mov dword [ebp - 0x3c], 0x2a41536c
mov dword [ebp - 0x14], 0
jmp 0x43674a
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x436760
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x304], 0xffff
jmp 0x436743
mov dword [ebp - 0x14], 0
jmp 0x436770
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x436786
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x43c], 0xac84
jmp 0x436769
mov dword [ebp - 0x14], 0
jmp 0x436796
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x4367ac
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x2b4], 0xe9a07b30
jmp 0x43678f
cmp dword [ebp - 0xe8], 0
je 0x4367bc
cmp dword [ebp - 0xe8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x304]
sub eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], eax
je 0x4367dd
mov dword [ebp - 0x1e4], 1
jmp 0x4367e4
and dword [ebp - 0x1e4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1e4]
sub ecx, dword [ebp + eax - 0x43c]
cmp dword [ebp - 0x4c], ecx
jne 0x436808
mov dword [ebp - 0x1ec], 1
jmp 0x43680f
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x1ec], eax
je 0x436826
mov dword [ebp - 0x1f4], 1
jmp 0x43682d
and dword [ebp - 0x1f4], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1f4]
add ecx, dword [ebp + eax - 0x304]
mov dword [ebp - 0x1fc], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1fc]
mov dword [ebp + eax - 0x2b4], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x304]
cmp dword [ebp - 0x1fc], eax
jg 0x436879
mov dword [ebp - 0x204], 1
jmp 0x436880
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x204]
mov dword [ebp - 0x54], eax
je 0x4369df
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x304], 0
je 0x4369df
mov dword [ebp - 0x2ec], 0
push 4
lea ecx, [ebp - 0x32c]
call fcn.0040bdd2
mov dword [ebp - 0x274], 0xaf19195c
mov dword [ebp - 0xb8], 0
jmp 0x4368e0
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 4
jge 0x4368ff
push dword [ebp - 0xb8]
lea ecx, [ebp - 0x32c]
call fcn.0040bec0
and dword [eax], 0
jmp 0x4368d3
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x2b4], 0x70cc
mov eax, dword [ebp - 0x2ec]
mov dword [ebp - 0x3e8], eax
push 1
lea ecx, [ebp - 0x32c]
call fcn.0040bec0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x304], 0
jne 0x43694b
mov eax, 0x83fb18ba
test eax, eax
jne 0x43694b
and dword [ebp - 0x210], 0
jmp 0x436955
mov dword [ebp - 0x210], 1
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x54], eax
mov esi, dword [ebp - 0x54]
push 1
lea ecx, [ebp - 0x32c]
call fcn.0040bec0
cmp esi, dword [eax]
jg 0x43697e
mov dword [ebp - 0x218], 1
jmp 0x436985
and dword [ebp - 0x218], 0
imul eax, dword [ebp - 0x218], 0x65f5
mov dword [ebp - 0x220], eax
mov eax, 0xc34ccbb2
sub eax, dword [ebp - 0x220]
imul eax, dword [ebp - 0xe8], 0
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xfff7
jae 0x4369bf
mov dword [ebp - 0xf0], 1
jmp 0x4369c6
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x274], eax
lea ecx, [ebp - 0x32c]
call fcn.0040bea4
jmp 0x436a0c
mov dword [ebp - 0x3c], 0
jmp 0x4369ef
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xd
jg 0x4369fc
call fcn.00434bf7
jmp 0x4369e8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2b4]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret