Function at 0x431adf
Capabilities:
Accept command line arguments
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x19b4
call fcn.00499e10
push esi
push edi
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x43c85b
lea eax, [ebp + 0x14]
mov dword [ebp - 0xd08], eax
mov eax, dword [ebp - 0xd08]
movzx eax, byte [eax]
test eax, eax
je 0x43c83d
mov byte [ebp - 0x15], 0
mov dword [ebp - 0x1f4], 0xe56f9b2c
mov dword [ebp - 0x1358], 0x999fb023
mov dword [ebp - 0x14a8], 0x5dae5a60
mov dword [ebp - 0x1674], 0xfffffffd
mov dword [ebp - 0x14b0], 0xccb63e8e
mov dword [ebp - 0x1658], 0xffffffff
push 2
lea ecx, [ebp - 0x1518]
call fcn.00422862
mov dword [ebp - 0xd14], 0xfffffffd
mov dword [ebp - 0x64], 0
jmp 0x431b7b
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x431b91
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x16f0], 0xde0bcd8c
jmp 0x431b74
push 1
lea eax, [ebp - 0x64]
push eax
push 0x5497
push 0x4b33
lea eax, [ebp - 0x1518]
push eax
push 0x917
push 0
push 0x35ca
call fcn.0042ecfa
add esp, 0x20
mov dword [ebp - 0x64], 0
jmp 0x431bcc
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x431be2
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x1800], 0x93d0
jmp 0x431bc5
mov dword [ebp - 0x1f4], 0
jmp 0x431bfb
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 2
jge 0x431c17
mov eax, dword [ebp - 0x1f4]
mov dword [ebp + eax*4 - 0x16f0], 1
jmp 0x431bee
push 0
push 0x7eb2
push 0x6ff6
push 0x73fa
push 1
push 0x4852
push 0x4ec
lea eax, [ebp - 0xd14]
push eax
call fcn.0042f4bd
add esp, 0x20
lea ecx, [ebp - 0x1518]
call fcn.00422922
push 1
lea ecx, [ebp - 0xc44]
call fcn.00422862
push 1
lea ecx, [ebp - 0x1274]
call fcn.00422862
lea eax, [ebp - 0xc44]
push eax
push 0x42a8
push 0
push 0x57d0
push 0x6de3
push 0
lea eax, [ebp - 0x1a4]
push eax
push 0x4ea5
call fcn.0042c5e9
add esp, 0x20
mov dword [ebp - 0x1a4], 0
jmp 0x431caf
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 1
jge 0x431cd1
push dword [ebp - 0x1a4]
lea ecx, [ebp - 0x1274]
call fcn.00422927
mov dword [eax], 1
jmp 0x431ca2
push 0
lea ecx, [ebp - 0xc44]
call fcn.00422927
and dword [eax], 0
jmp 0x431d07
push 0
lea ecx, [ebp - 0xc44]
call fcn.00422927
mov dword [ebp - 0x830], eax
mov eax, dword [ebp - 0x830]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x830]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xc44]
call fcn.00422927
cmp dword [eax], 7
jl 0x431db6
mov dword [ebp - 0xb28], 0x4b4e1265
mov dword [ebp - 0xd1c], 0xffffffff
mov dword [ebp - 0xb18], 1
push 0x5c63
push 0x6dc9
push 0x1058
push 0
lea eax, [ebp - 0xb18]
push eax
lea eax, [ebp - 0xb28]
push eax
push 1
push 0x6bc
lea eax, [ebp - 0xd1c]
push eax
lea eax, [ebp - 0x1274]
push eax
call fcn.0042c907
add esp, 0x28
cmp dword [ebp - 0xb18], 0
je 0x431d9e
push 0
lea ecx, [ebp - 0xc44]
call fcn.00422927
cmp dword [eax], 0
je 0x431d9e
mov dword [ebp - 0xb20], 1
jmp 0x431da5
and dword [ebp - 0xb20], 0
mov eax, dword [ebp - 0xb20]
mov dword [ebp - 0xb28], eax
jmp 0x431ce3
lea ecx, [ebp - 0x1274]
call fcn.00422922
lea ecx, [ebp - 0xc44]
call fcn.00422922
mov dword [ebp - 0x224], 0xe56f9b2c
mov dword [ebp - 0x14b8], 0x999fb023
and dword [ebp - 0x1058], 0
and dword [ebp - 0x1054], 0
and dword [ebp - 0x1050], 0
and dword [ebp - 0x104c], 0
lea ecx, [ebp - 0x4d3]
call fcn.00401b47
push eax
lea eax, [ebp - 0x1048]
push eax
lea eax, [ebp - 0x1058]
push eax
lea ecx, [ebp - 0x17f8]
call fcn.00422936
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1790]
call fcn.004228fc
mov dword [ebp - 0x264], 0x6d444182
mov dword [ebp - 0x264], 3
jmp 0x431e54
mov eax, dword [ebp - 0x264]
dec eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0
jl 0x431e98
push 0x31e
push 0
push 0x3d6b
push 0x65bc
push 0x77cd
push 0x7504
push 0x712d
push 0x2d15
push 0x1f52
push 1
push 0xb7
call fcn.0042c343
add esp, 0x2c
jmp 0x431e47
lea ecx, [ebp - 0x1790]
call fcn.00422922
mov dword [ebp - 0x1720], 0x5dae5a60
mov dword [ebp - 0x14c0], 0xfffffffd
mov dword [ebp - 0x84], 0xffffffff
mov dword [ebp - 0x524], 6
mov dword [ebp - 0x1660], 0x7f45b6d4
mov dword [ebp - 0x14c8], 0xfffffffb
mov dword [ebp - 0xd24], 0xdbf1
mov dword [ebp - 0x74], 0
jmp 0x431ef9
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x431f0f
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x434], 0x9714
jmp 0x431ef2
mov dword [ebp - 0x74], 0
jmp 0x431f1f
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x431f35
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x14e4], 0xfef40729
jmp 0x431f18
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x434]
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
je 0x432260
mov dword [ebp - 0x274], 0xfffffffd
mov dword [ebp - 0x3a4], 0xffffffff
and dword [ebp - 0x10f8], 0
and dword [ebp - 0x10f4], 0
and dword [ebp - 0x10f0], 0
and dword [ebp - 0x10ec], 0
lea ecx, [ebp - 0x4d9]
call fcn.00401b47
push eax
lea eax, [ebp - 0x10e8]
push eax
lea eax, [ebp - 0x10f8]
push eax
lea ecx, [ebp - 0x1808]
call fcn.00422936
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1528]
call fcn.004228fc
cmp dword [ebp - 0x274], 0xfffffffc
ja 0x431fcf
mov dword [ebp - 0xb78], 1
jmp 0x431fd6
and dword [ebp - 0xb78], 0
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jne 0x431ff9
or eax, 0xffffffff
jne 0x431ff9
and dword [ebp - 0xb80], 0
jmp 0x432003
mov dword [ebp - 0xb80], 1
mov eax, dword [ebp - 0xb78]
sub eax, dword [ebp - 0x274]
cmp eax, dword [ebp - 0xb80]
je 0x432023
mov dword [ebp - 0xb88], 1
jmp 0x43202a
and dword [ebp - 0xb88], 0
cmp dword [ebp - 0xb88], 0xfff9
jb 0x432042
mov dword [ebp - 0xb90], 1
jmp 0x432049
and dword [ebp - 0xb90], 0
mov eax, dword [ebp - 0xb90]
sub eax, 0x22632bbd
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x434]
cmp eax, dword [ebp - 0x274]
je 0x432076
mov dword [ebp - 0xb98], 1
jmp 0x43207d
and dword [ebp - 0xb98], 0
mov eax, dword [ebp - 0xb98]
mov dword [ebp - 0x3a4], eax
mov dword [ebp - 0x84], 0
jmp 0x4320a2
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x1d
jge 0x432253
mov dword [ebp - 0xbb8], 0xf2d6
mov dword [ebp - 0x49c], 4
push 1
lea ecx, [ebp - 0xf60]
call fcn.00422862
mov dword [ebp - 0x270], 0
jmp 0x4320e9
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 1
jge 0x43210b
push dword [ebp - 0x270]
lea ecx, [ebp - 0xf60]
call fcn.00422927
mov dword [eax], 0xd68c2afe
jmp 0x4320dc
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0x1678], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x434]
mov dword [ebp - 0x49c], eax
mov eax, dword [ebp - 0x49c]
cmp dword [ebp - 0x3a4], eax
je 0x432174
push 3
lea ecx, [ebp - 0x1528]
call fcn.00422927
mov dword [ebp - 0x43c], eax
mov eax, dword [ebp - 0x43c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x43c]
mov ecx, dword [ecx]
dec ecx
mov edx, dword [ebp - 0x43c]
mov dword [edx], ecx
test eax, eax
je 0x432174
mov dword [ebp - 0xbb0], 1
jmp 0x43217b
and dword [ebp - 0xbb0], 0
cmp dword [ebp - 0x3a4], 0
je 0x432191
push 0
lea ecx, [ebp - 0xf60]
call fcn.00422927
xor eax, eax
cmp eax, 0x6c7a88ff
jne 0x4321a6
mov dword [ebp - 0xba0], 1
jmp 0x4321ad
and dword [ebp - 0xba0], 0
mov eax, dword [ebp - 0x3a4]
add eax, dword [ebp - 0xba0]
cmp eax, dword [ebp - 0x274]
jge 0x4321cd
mov dword [ebp - 0xba8], 1
jmp 0x4321d4
and dword [ebp - 0xba8], 0
mov eax, dword [ebp - 0xba8]
neg eax
cmp dword [ebp - 0xbb0], eax
jle 0x4321f0
mov dword [ebp - 0x884], 1
jmp 0x4321f7
and dword [ebp - 0x884], 0
mov dword [ebp - 0xbb8], 0xeab3
mov eax, dword [ebp - 0xbb8]
cmp eax, dword [ebp - 0x884]
je 0x43221b
mov dword [ebp - 0xb10], 1
jmp 0x432222
and dword [ebp - 0xb10], 0
mov eax, dword [ebp - 0xb10]
mov dword [ebp - 0x524], eax
mov esi, dword [ebp - 0x524]
push 0
lea ecx, [ebp - 0xf60]
call fcn.00422927
mov dword [eax], esi
lea ecx, [ebp - 0xf60]
call fcn.00422922
jmp 0x432095
lea ecx, [ebp - 0x1528]
call fcn.00422922
jmp 0x43227a
mov byte [ebp - 0xb7], 0
push 1
push 0
lea eax, [ebp - 0xb7]
push eax
call fcn.0042d276
add esp, 0xc
push 0x728b
lea eax, [ebp - 0xd24]
push eax
push 0x4aac
push 0x3cd8
push 0
push 0x3d95
push 0
push 1
push 0x895
call fcn.0042fa23
add esp, 0x24
mov dword [ebp - 0x1318], 0xccb63e8e
or dword [ebp - 0x1080], 0xffffffff
or dword [ebp - 0x107c], 0xffffffff
or dword [ebp - 0x1078], 0xffffffff
or dword [ebp - 0x1074], 0xffffffff
lea ecx, [ebp - 0x481]
call fcn.00401b47
push eax
lea eax, [ebp - 0x1070]
push eax
lea eax, [ebp - 0x1080]
push eax
lea ecx, [ebp - 0x18f8]
call fcn.00422936
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xc20]
call fcn.004228fc
mov dword [ebp - 0x444], 0x147909b7
mov dword [ebp - 0x131c], 0xa4d63a88
mov dword [ebp - 0x1324], 0xffffffff
mov dword [ebp - 0x894], 0xfffffffe
mov dword [ebp - 0xd2c], 1
push 2
lea ecx, [ebp - 0xc20]
call fcn.00422927
and dword [eax], 0
jmp 0x43236b
push 2
lea ecx, [ebp - 0xc20]
call fcn.00422927
mov dword [ebp - 0xbcc], eax
mov eax, dword [ebp - 0xbcc]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xbcc]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0xc20]
call fcn.00422927
cmp dword [eax], 0x1c
jle 0x43269c
mov dword [ebp - 0xff0], 0xce1e2c0d
mov dword [ebp - 0xfec], 0xce1e2c0d
mov dword [ebp - 0xfe8], 0xce1e2c0d
mov dword [ebp - 0xfe4], 0xce1e2c0d
mov dword [ebp - 0x544], 3
mov dword [ebp - 0x27c], 0x781ced8f
mov dword [ebp - 0xd44], 0xe9c96c79
push 1
lea ecx, [ebp - 0xfcc]
call fcn.00422862
mov dword [ebp - 0xb14], 2
push 3
lea ecx, [ebp - 0xfd8]
call fcn.00422862
mov dword [ebp - 0xd3c], 0xffffffff
push 0x78fe
push 0
push 0
lea eax, [ebp - 0x234]
push eax
lea eax, [ebp - 0xfcc]
push eax
push 0x2383
push 0x4a34
push 0x3637
push 1
push 0x7200
call fcn.0042daef
add esp, 0x28
mov dword [ebp - 0x234], 0
jmp 0x432443
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 3
jge 0x432465
push dword [ebp - 0x234]
lea ecx, [ebp - 0xfd8]
call fcn.00422927
mov dword [eax], 7
jmp 0x432436
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xff0], 0
je 0x4324d8
mov dword [ebp - 0x132c], 0
mov dword [ebp - 0x324], 0
jmp 0x432498
mov eax, dword [ebp - 0x324]
inc eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 3
jge 0x4324b4
mov eax, dword [ebp - 0x324]
mov dword [ebp + eax*4 - 0x1948], 0x950a4ba3
jmp 0x43248b
push 0x3215
lea eax, [ebp - 0xb14]
push eax
push 1
push 0x5922
push 0
push 1
call fcn.0042c6d5
add esp, 0x18
jmp 0x43261d
mov dword [ebp - 0x4e0], 0x3388a019
mov dword [ebp - 0x52c], 0xfffffffa
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x1334], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xff0]
cmp dword [ebp - 0x894], eax
jg 0x432519
mov dword [ebp - 0xa3c], 1
jmp 0x432520
and dword [ebp - 0xa3c], 0
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x133c], eax
mov eax, dword [ebp - 0x52c]
mov dword [ebp - 0x1344], eax
cmp dword [ebp - 0x52c], 9
jl 0x43254d
mov dword [ebp - 0x88c], 1
jmp 0x432554
and dword [ebp - 0x88c], 0
cmp dword [ebp - 0x88c], 2
je 0x432569
mov dword [ebp - 0x534], 1
jmp 0x432570
and dword [ebp - 0x534], 0
push 3
lea ecx, [ebp - 0xc20]
call fcn.00422927
mov ecx, dword [ebp - 0x534]
imul ecx, dword [eax]
cmp ecx, dword [ebp - 0x444]
jl 0x4325ac
push 0
lea ecx, [ebp - 0xfcc]
call fcn.00422927
cmp dword [eax], 0
je 0x4325ac
mov dword [ebp - 0x53c], 1
jmp 0x4325b3
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0xa3c]
mov dword [ebp - 0x4e0], eax
mov eax, dword [ebp - 0x4e0]
add eax, dword [ebp - 0x53c]
mov dword [ebp - 0x27c], eax
mov esi, dword [ebp - 0x27c]
push 0
lea ecx, [ebp - 0xfd8]
call fcn.00422927
sub esi, dword [eax]
cmp esi, dword [ebp - 0xd2c]
jge 0x4325fb
xor eax, eax
jne 0x4325fb
and dword [ebp - 0xd34], 0
jmp 0x432605
mov dword [ebp - 0xd34], 1
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0x134c], eax
mov eax, dword [ebp - 0x544]
mov dword [ebp - 0xd3c], eax
push 0xea5
lea eax, [ebp - 0x894]
push eax
lea eax, [ebp - 0xc20]
push eax
push 0
push 1
lea eax, [ebp - 0x544]
push eax
lea eax, [ebp - 0xfd8]
push eax
lea eax, [ebp - 0x27c]
push eax
push 0x5c1f
push 0x7b61
lea eax, [ebp - 0x444]
push eax
lea eax, [ebp - 0xd44]
push eax
push 0x6e3f
lea eax, [ebp - 0xb14]
push eax
lea eax, [ebp - 0xfcc]
push eax
push 0x1a8b
call fcn.0042b710
add esp, 0x40
lea ecx, [ebp - 0xfd8]
call fcn.00422922
lea ecx, [ebp - 0xfcc]
call fcn.00422922
jmp 0x432347
lea ecx, [ebp - 0xc20]
call fcn.00422922
mov dword [ebp - 0x1354], 0xffffffff
mov dword [ebp - 0x44c], 1
mov dword [ebp - 0x56c], 1
mov dword [ebp - 0x4a4], 1
mov dword [ebp - 0x57c], 5
mov dword [ebp - 0x37c], 0
jmp 0x4326f2
mov eax, dword [ebp - 0x37c]
inc eax
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 3
jge 0x43270e
mov eax, dword [ebp - 0x37c]
mov dword [ebp + eax*4 - 0x250], 0x1c08901
jmp 0x4326e5
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x250]
mov dword [ebp - 0x54c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x54c]
mov dword [ebp + eax - 0x250], ecx
mov eax, dword [ebp - 0x54c]
mov dword [ebp - 0x44c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x250]
mov dword [ebp - 0x135c], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x250]
cmp dword [ebp + eax - 0x250], ecx
jl 0x432787
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x250], 0
jne 0x432787
and dword [ebp - 0x89c], 0
jmp 0x432791
mov dword [ebp - 0x89c], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x250]
mov dword [ebp - 0x4a4], eax
mov eax, dword [ebp - 0x4a4]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x250]
sub ecx, eax
cmp ecx, dword [ebp - 0x89c]
jle 0x4327ce
mov dword [ebp - 0x554], 1
jmp 0x4327d5
and dword [ebp - 0x554], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x250]
imul eax, dword [ebp - 0x554]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x250]
jg 0x432803
mov dword [ebp - 0xa44], 1
jmp 0x43280a
and dword [ebp - 0xa44], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x250]
cmp dword [ebp - 0xa44], eax
jge 0x43282b
mov dword [ebp - 0x55c], 1
jmp 0x432832
and dword [ebp - 0x55c], 0
cmp dword [ebp - 0x55c], 0xbfcc013c
ja 0x432850
cmp dword [ebp - 0x4a4], 0
jne 0x432850
and dword [ebp - 0x8a4], 0
jmp 0x43285a
mov dword [ebp - 0x8a4], 1
imul eax, dword [ebp - 0x8a4], 0xe623
neg eax
jne 0x432874
mov dword [ebp - 0xe2c], 1
jmp 0x43287b
and dword [ebp - 0xe2c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x250]
mov dword [ebp - 0x1364], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x250]
cmp dword [ebp - 0x57c], eax
jle 0x4328ae
mov dword [ebp - 0x564], 1
jmp 0x4328b5
and dword [ebp - 0x564], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x250]
cmp dword [ebp - 0x564], eax
jg 0x4328d6
mov dword [ebp - 0xb40], 1
jmp 0x4328dd
and dword [ebp - 0xb40], 0
cmp dword [ebp - 0xb40], 0xfffffff7
jle 0x4328fb
mov eax, 0x129ec6ea
test eax, eax
je 0x4328fb
mov dword [ebp - 0x8ac], 1
jmp 0x432902
and dword [ebp - 0x8ac], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x250]
mov dword [ebp - 0x56c], eax
mov eax, dword [ebp - 0x56c]
mov dword [ebp - 0x44c], eax
mov eax, dword [ebp - 0x44c]
cmp eax, dword [ebp - 0x8ac]
jge 0x43293b
mov dword [ebp - 0x574], 1
jmp 0x432942
and dword [ebp - 0x574], 0
cmp dword [ebp - 0x574], 0xaedf
je 0x43295a
mov dword [ebp - 0xa4c], 1
jmp 0x432961
and dword [ebp - 0xa4c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x250]
cmp dword [ebp - 0xa4c], eax
jne 0x432982
mov dword [ebp - 0x4b0], 1
jmp 0x432989
and dword [ebp - 0x4b0], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x4b0]
mov dword [ebp + eax - 0x250], ecx
mov eax, dword [ebp - 0x4b0]
mov dword [ebp - 0x57c], eax
push 2
lea ecx, [ebp - 0x1538]
call fcn.00422862
push 1
lea ecx, [ebp - 0xf84]
call fcn.00422862
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0xe4c], 0xb8f1fe3d
mov dword [ebp - 0xe44], 0xd7c1
lea eax, [ebp - 0xf84]
push eax
push 0
push 0x1d9b
push 0x1a5
push 1
push 0x6b89
push 1
push 0x4bda
push 0xb89
push 0x569d
push 0x1ab8
lea eax, [ebp - 0x136c]
push eax
call fcn.0042d3c7
add esp, 0x30
mov dword [ebp - 0x14c], 0
jmp 0x432a37
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0
jg 0x432acd
mov dword [ebp - 0xe34], 1
mov dword [ebp - 0xe3c], 0xbed85728
push 0
push 0x637b
lea eax, [ebp - 0x14c]
push eax
lea eax, [ebp - 0xf84]
push eax
push 1
push 0
push 0x704a
push 0x69e9
call fcn.00430434
add esp, 0x20
push 0
push 0
lea eax, [ebp - 0xe34]
push eax
lea eax, [ebp - 0xe3c]
push eax
push 0x29f2
lea eax, [ebp - 0xf84]
push eax
lea eax, [ebp - 0xe44]
push eax
lea eax, [ebp - 0x14c]
push eax
push 0x5775
push 0x66b2
lea eax, [ebp - 0xe4c]
push eax
call fcn.00430ebe
add esp, 0x2c
jmp 0x432a2a
lea ecx, [ebp - 0xf84]
call fcn.00422922
mov dword [ebp - 0x5ac], 0xfffffffd
push 1
lea ecx, [ebp - 0x3f0]
call fcn.00422862
mov dword [ebp - 0x8c], 0x7b30498d
lea eax, [ebp - 0x1374]
push eax
lea eax, [ebp - 0x3f0]
push eax
push 0xcae
push 0x559b
push 0x1467
push 0x7b37
push 0x6be7
push 1
push 0
call fcn.0042f36d
add esp, 0x24
push 0
lea ecx, [ebp - 0x3f0]
call fcn.00422927
mov esi, eax
push 0
lea ecx, [ebp - 0x3f0]
call fcn.00422927
mov ecx, dword [esi]
add ecx, dword [eax]
jne 0x432b69
push 0
lea ecx, [ebp - 0x3f0]
call fcn.00422927
cmp dword [eax], 0
jne 0x432b69
and dword [ebp - 0x8b4], 0
jmp 0x432b73
mov dword [ebp - 0x8b4], 1
push 0
lea ecx, [ebp - 0x3f0]
call fcn.00422927
mov esi, dword [eax]
imul esi, dword [ebp - 0x8b4]
push 0
lea ecx, [ebp - 0x3f0]
call fcn.00422927
cmp esi, dword [eax]
jl 0x432ba6
mov dword [ebp - 0xe54], 1
jmp 0x432bad
and dword [ebp - 0xe54], 0
push 0
lea ecx, [ebp - 0x3f0]
call fcn.00422927
mov eax, dword [ebp - 0x8c]
sub eax, 6
jne 0x432bd1
mov dword [ebp - 0x584], 1
jmp 0x432bd8
and dword [ebp - 0x584], 0
push 0
lea ecx, [ebp - 0x3f0]
call fcn.00422927
mov ecx, dword [ebp - 0x584]
add ecx, dword [eax]
mov dword [ebp - 0x8c], ecx
cmp dword [ebp - 0x8c], 0x62c5d177
jl 0x432c0f
push 0xfffffffffffffffd
pop eax
test eax, eax
jne 0x432c0f
and dword [ebp - 0xb1c], 0
jmp 0x432c19
mov dword [ebp - 0xb1c], 1
push 0
lea ecx, [ebp - 0x3f0]
call fcn.00422927
mov ecx, dword [ebp - 0xb1c]
cmp ecx, dword [eax]
jg 0x432c4b
push 0
lea ecx, [ebp - 0x3f0]
call fcn.00422927
cmp dword [eax], 0
jne 0x432c4b
and dword [ebp - 0x58c], 0
jmp 0x432c55
mov dword [ebp - 0x58c], 1
push 0
lea ecx, [ebp - 0x3f0]
call fcn.00422927
mov eax, dword [eax]
cmp eax, dword [ebp - 0x58c]
jne 0x432cc9
mov dword [ebp - 0x8c], 0
jmp 0x432c85
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jg 0x432cc4
mov byte [ebp - 0x143], 0
movzx eax, byte [ebp - 0x143]
test eax, eax
je 0x432cb1
push 0
push 0x44f0
push 0
call fcn.0042bb97
add esp, 0xc
push 0
push 0x72ef
push 1
call fcn.0042bb97
add esp, 0xc
jmp 0x432c78
jmp 0x432d6f
mov dword [ebp - 0x8bc], 0x4446
mov dword [ebp - 0xe64], 0
mov dword [ebp - 0xe74], 2
cmp dword [ebp - 0x8bc], 0x90d
jl 0x432cff
mov dword [ebp - 0xe5c], 1
jmp 0x432d06
and dword [ebp - 0xe5c], 0
mov eax, dword [ebp - 0xe64]
mov dword [ebp - 0x137c], eax
cmp dword [ebp - 0x8c], 0xa1804524
jae 0x432d2a
mov dword [ebp - 0x594], 1
jmp 0x432d31
and dword [ebp - 0x594], 0
mov esi, dword [ebp - 0x8bc]
push 0
lea ecx, [ebp - 0x3f0]
call fcn.00422927
imul esi, dword [eax]
cmp esi, dword [ebp - 0x594]
jl 0x432d5b
mov dword [ebp - 0xe6c], 1
jmp 0x432d62
and dword [ebp - 0xe6c], 0
xor eax, eax
add eax, 0xc745d07a
mov dword [ebp - 0xe74], eax
lea ecx, [ebp - 0x3f0]
call fcn.00422922
mov dword [ebp - 0x24], 0
jmp 0x432d8a
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x432da0
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x14d4], 0xde0bcd8c
jmp 0x432d83
mov dword [ebp - 0xe7c], 0xffffffff
mov dword [ebp - 0x284], 0
jmp 0x432dc3
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 1
jge 0x432ddf
mov eax, dword [ebp - 0x284]
mov dword [ebp + eax*4 - 0x1ac], 0xffffffff
jmp 0x432db6
mov byte [ebp - 0xb9], 0
movzx eax, byte [ebp - 0xb9]
test eax, eax
je 0x432e16
push 0
push 0x4c92
push 0x2a1d
push 0x38de
push 1
push 0x5fb5
push 0x1306
call fcn.004308a3
add esp, 0x1c
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1ac], 0
jmp 0x432e44
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1ac]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1ac], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1ac], 0xfffffff8
je 0x432e69
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1ac]
mov dword [ebp - 0xe7c], eax
jmp 0x432e29
mov dword [ebp - 0x24], 0
jmp 0x432e79
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x432e95
push dword [ebp - 0x24]
lea ecx, [ebp - 0x1538]
call fcn.00422927
mov dword [eax], 1
jmp 0x432e72
mov dword [ebp - 0x24], 0
jmp 0x432ea5
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x432ebb
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1908], 0x93d0
jmp 0x432e9e
mov dword [ebp - 0x1fc], 3
cmp dword [ebp - 0x1fc], 0
je 0x432eea
mov byte [ebp - 0x115], 0
movzx eax, byte [ebp - 0x115]
test eax, eax
je 0x432ee8
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
jmp 0x432f2b
mov dword [ebp - 0x1fc], 0
jmp 0x432f03
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0x2a
jle 0x432f2b
push 0x36eb
push 0x7580
push 0
push 0x5564
push 1
push 0
call fcn.0042c6d5
add esp, 0x18
jmp 0x432ef6
mov dword [ebp - 0x224], 0
jmp 0x432f44
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 2
jge 0x43327a
push 2
lea ecx, [ebp - 0x122c]
call fcn.00422862
mov dword [ebp - 0x32c], 4
mov dword [ebp - 0xe8c], 5
push 1
lea ecx, [ebp - 0x12d4]
call fcn.00422862
push 0x2f3e
push 0
push 0x39fd
lea eax, [ebp - 0xe84]
push eax
lea eax, [ebp - 0x122c]
push eax
push 0
call fcn.0042b510
add esp, 0x18
push 0x6025
push 0x6044
lea eax, [ebp - 0xe84]
push eax
push 0
push 0
lea eax, [ebp - 0x12d4]
push eax
push 0x6e04
push 0x5014
call fcn.00430789
add esp, 0x20
mov dword [ebp - 0x32c], 0
jmp 0x432fea
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 1
jg 0x43324e
mov dword [ebp - 0x1b4], 0xffffffff
mov dword [ebp - 0x6c], 1
mov dword [ebp - 0xe9c], 0x62d17f49
mov dword [ebp - 0xeac], 5
mov dword [ebp - 0x28c], 0
jmp 0x433035
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 4
jge 0x433051
mov eax, dword [ebp - 0x28c]
mov dword [ebp + eax*4 - 0x1860], 0x392f
jmp 0x433028
mov dword [ebp - 0x6c], 1
mov esi, dword [ebp - 0x6c]
push 0
lea ecx, [ebp - 0x122c]
call fcn.00422927
sub esi, dword [eax]
cmp esi, 0xfffffffc
jle 0x43310b
mov dword [ebp - 0x1b4], 0
jmp 0x43308c
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 1
jg 0x4330bf
mov byte [ebp - 0xbb], 0
movzx eax, byte [ebp - 0xbb]
test eax, eax
je 0x4330bd
push 1
push 0x355c
push 0x69e1
push 0
call fcn.0042b9c7
add esp, 0x10
jmp 0x43307f
lea eax, [ebp - 0xe8c]
push eax
push 0x545
push 0
push 0x73ee
push 0x7e0f
push 0
push 0x6f4a
push 0x68d2
push 0x616d
push 0xb02
push 0x33b2
push 0x76f4
push 0x6f58
push 0x574b
call fcn.004247a9
add esp, 0x38
jmp 0x43314f
mov dword [ebp - 0x6c], 0
jmp 0x43311b
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jg 0x43312e
push 1
push 0
call fcn.0042d33e
pop ecx
pop ecx
jmp 0x433114
mov byte [ebp - 0x13e], 0
push 0
push 0x1d77
lea eax, [ebp - 0x13e]
push eax
push 0
push 1
call fcn.0042fdac
add esp, 0x14
cmp dword [ebp - 0x6c], 0xffffffff
jge 0x43316a
mov eax, 0x38c46158
test eax, eax
je 0x43316a
mov dword [ebp - 0xa54], 1
jmp 0x433171
and dword [ebp - 0xa54], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0xa54], eax
jle 0x433188
mov dword [ebp - 0x59c], 1
jmp 0x43318f
and dword [ebp - 0x59c], 0
cmp dword [ebp - 0x59c], 0x268d9a6
jne 0x4331a7
mov dword [ebp - 0x8c4], 1
jmp 0x4331ae
and dword [ebp - 0x8c4], 0
push 0
lea ecx, [ebp - 0x12d4]
call fcn.00422927
mov ecx, dword [ebp - 0x8c4]
cmp ecx, dword [eax]
jl 0x4331d1
mov dword [ebp - 0x5a4], 1
jmp 0x4331d8
and dword [ebp - 0x5a4], 0
mov eax, dword [ebp - 0x1b4]
cmp dword [ebp - 0x5a4], eax
jl 0x4331f2
mov dword [ebp - 0xb3c], 1
jmp 0x4331f9
and dword [ebp - 0xb3c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1860]
cmp dword [ebp - 0xb3c], eax
jge 0x43321a
mov dword [ebp - 0xe94], 1
jmp 0x433221
and dword [ebp - 0xe94], 0
cmp dword [ebp - 0xe9c], 0xdc46221e
jb 0x433239
mov dword [ebp - 0xea4], 1
jmp 0x433240
and dword [ebp - 0xea4], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0xeac], eax
jmp 0x432fdd
lea ecx, [ebp - 0x12d4]
call fcn.00422922
lea ecx, [ebp - 0x122c]
call fcn.00422922
mov eax, dword [ebp - 0x224]
mov dword [ebp + eax*4 - 0x14d4], 1
jmp 0x432f37
mov eax, dword [ebp - 0x5ac]
inc eax
mov dword [ebp - 0x5ac], eax
lea ecx, [ebp - 0x1538]
call fcn.00422922
mov dword [ebp - 0x3bc], 0
mov dword [ebp - 0x3bc], 0
jmp 0x4332b5
mov eax, dword [ebp - 0x3bc]
inc eax
mov dword [ebp - 0x3bc], eax
cmp dword [ebp - 0x3bc], 0
jne 0x4332e8
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x4332e6
push 0
push 0
push 0x3195
push 0x4a5a
call fcn.0042cc53
add esp, 0x10
jmp 0x4332a8
mov byte [ebp - 0x11d], 0
lea eax, [ebp - 0x11d]
push eax
push 1
push 0
call fcn.004301b4
add esp, 0xc
lea eax, [ebp - 0x9d0]
push eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov dword [ebp - 0x9d8], eax
mov dword [ebp - 0x154], 0x7f6af112
mov dword [ebp - 0x1384], 0x9fb37b04
mov dword [ebp - 0x29c], 0x9226c312
mov dword [ebp - 0xec8], 0xfffffffa
mov dword [ebp - 0x1bc], 0x14f98caf
mov dword [ebp - 0x1c4], 0x2d1a4e66
mov dword [ebp - 0x138c], 0xec326874
mov dword [ebp - 0xeb4], 1
mov dword [ebp - 0xc68], 0x30bd
push 2
lea ecx, [ebp - 0x1558]
call fcn.00422862
push 0x6cf9
push 0x2ecf
push 0
push 0x832
push 0x5d11
push 1
push 0x538c
lea eax, [ebp - 0x1394]
push eax
push 0x512c
push 0x57a0
push 0x21a3
push 0x846
push 0x7b47
lea eax, [ebp - 0x1558]
push eax
call fcn.004247a9
add esp, 0x38
mov dword [ebp - 0x154], 0x1d
jmp 0x4333e8
mov eax, dword [ebp - 0x154]
dec eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 6
je 0x4339b2
mov dword [ebp - 0x174], 1
mov dword [ebp - 0x5e4], 0xfffffff9
mov dword [ebp - 0xd4], 0x2db785b6
mov dword [ebp - 0x204], 0xfffffffd
mov dword [ebp - 0xec4], 0
mov dword [ebp - 0x454], 0xffffffff
mov dword [ebp - 0x294], 0
jmp 0x43344a
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 2
jge 0x433466
mov eax, dword [ebp - 0x294]
mov dword [ebp + eax*4 - 0xc04], 0x3fa75c19
jmp 0x43343d
mov dword [ebp - 0x174], 0
jmp 0x43347f
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 1
jg 0x4336ec
mov dword [ebp - 0x139c], 0x58a0
mov dword [ebp - 0xebc], 0xfffffffb
mov dword [ebp - 0x13a4], 7
mov dword [ebp - 0x13ac], 0x83303773
mov dword [ebp - 0x5c4], 5
push 3
lea ecx, [ebp - 0x12a4]
call fcn.00422862
mov dword [ebp - 0xd50], 0xfffffff6
mov dword [ebp - 0xd0c], 0
mov dword [ebp - 0x334], 0
jmp 0x4334f8
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 3
jge 0x43351a
push dword [ebp - 0x334]
lea ecx, [ebp - 0x12a4]
call fcn.00422927
mov dword [eax], 0xfbfcc013
jmp 0x4334eb
push 1
lea eax, [ebp - 0xeb4]
push eax
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0xebc]
push eax
push 0
lea eax, [ebp - 0x5c4]
push eax
lea eax, [ebp - 0x12a4]
push eax
lea eax, [ebp - 0x5e4]
push eax
lea eax, [ebp - 0x29c]
push eax
lea eax, [ebp - 0x154]
push eax
push 0x2986
call fcn.0042b300
add esp, 0x30
mov eax, dword [ebp - 0x154]
neg eax
cmp dword [ebp - 0xec4], eax
jg 0x433586
mov dword [ebp - 0x8cc], 1
jmp 0x43358d
and dword [ebp - 0x8cc], 0
cmp dword [ebp - 0x8cc], 6
jb 0x4335a2
mov dword [ebp - 0x5b4], 1
jmp 0x4335a9
and dword [ebp - 0x5b4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc04]
add eax, 0x409f8fea
imul eax, dword [ebp - 0x5b4]
cmp eax, 0x49dd
jg 0x4335d5
mov dword [ebp - 0xa5c], 1
jmp 0x4335dc
and dword [ebp - 0xa5c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc04]
imul eax, dword [ebp - 0xa5c]
cmp eax, 0x121adf56
jg 0x433603
mov dword [ebp - 0x5bc], 1
jmp 0x43360a
and dword [ebp - 0x5bc], 0
cmp dword [ebp - 0x5bc], 0x4c38
jge 0x433622
mov dword [ebp - 0x8d4], 1
jmp 0x433629
and dword [ebp - 0x8d4], 0
mov eax, dword [ebp - 0x29c]
cmp dword [ebp - 0x8d4], eax
jne 0x433640
cmp dword [ebp - 0xd4], 0
je 0x433655
cmp dword [ebp - 0x5c4], 0
je 0x433655
mov dword [ebp - 0xb24], 1
jmp 0x43365c
and dword [ebp - 0xb24], 0
mov eax, dword [ebp - 0x454]
cmp dword [ebp - 0xb24], eax
jl 0x433676
mov dword [ebp - 0x5cc], 1
jmp 0x43367d
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x5cc]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0x29c]
cmp dword [ebp - 0xd50], eax
jge 0x4336a3
mov dword [ebp - 0x8dc], 1
jmp 0x4336aa
and dword [ebp - 0x8dc], 0
mov eax, dword [ebp - 0x1bc]
add eax, dword [ebp - 0x8dc]
cmp eax, 0x342bb1e5
jne 0x4336c9
mov dword [ebp - 0x5d4], 1
jmp 0x4336d0
and dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0x5d4]
mov dword [ebp - 0xd0c], eax
lea ecx, [ebp - 0x12a4]
call fcn.00422922
jmp 0x433472
mov dword [ebp - 0xd4], 0
jmp 0x433705
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0xf
jge 0x4339ad
mov dword [ebp - 0xcc], 1
mov dword [ebp - 0xa6c], 0x1c63cc5d
mov dword [ebp - 0xc70], 0x69bd
cmp dword [ebp - 0xcc], 0
jne 0x433745
mov dword [ebp - 0xa64], 1
jmp 0x43374c
and dword [ebp - 0xa64], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc04]
mov dword [ebp - 0x13b4], eax
mov eax, 0xffff
test eax, eax
je 0x43377d
cmp dword [ebp - 0x1c4], 0
je 0x43377d
mov dword [ebp - 0x5dc], 1
jmp 0x433784
and dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0xa64]
cmp eax, dword [ebp - 0x5dc]
jge 0x43379e
mov dword [ebp - 0x8e4], 1
jmp 0x4337a5
and dword [ebp - 0x8e4], 0
mov eax, dword [ebp - 0x1bc]
cmp eax, dword [ebp - 0x8e4]
jg 0x4337bf
mov dword [ebp - 0xc60], 1
jmp 0x4337c6
and dword [ebp - 0xc60], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x13bc], eax
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0xec8]
mov dword [ebp - 0x13c4], eax
mov dword [ebp - 0x1bc], 0x4c83b0f6
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc04]
cmp eax, dword [ebp - 0x1bc]
jne 0x433815
mov dword [ebp - 0x8f4], 1
jmp 0x43381c
and dword [ebp - 0x8f4], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x13cc], eax
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0x13d4], eax
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0x13dc], eax
mov eax, dword [ebp - 0x174]
cmp dword [ebp - 0xc68], eax
jl 0x433863
cmp dword [ebp - 0xcc], 0
je 0x433863
mov dword [ebp - 0xb58], 1
jmp 0x43386a
and dword [ebp - 0xb58], 0
mov eax, dword [ebp - 0x5e4]
cmp dword [ebp - 0xb58], eax
jle 0x433884
mov dword [ebp - 0x5ec], 1
jmp 0x43388b
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0xcc]
add eax, dword [ebp - 0x5ec]
cmp eax, dword [ebp - 0xcc]
jg 0x4338ab
mov dword [ebp - 0x8ec], 1
jmp 0x4338b2
and dword [ebp - 0x8ec], 0
mov eax, dword [ebp - 0x204]
cmp dword [ebp - 0x8ec], eax
jle 0x4338cc
mov dword [ebp - 0x5f4], 1
jmp 0x4338d3
and dword [ebp - 0x5f4], 0
mov eax, dword [ebp - 0x5f4]
mov dword [ebp - 0xa6c], eax
cmp dword [ebp - 0xa6c], 0xfffffffe
je 0x4338f4
mov dword [ebp - 0x5fc], 1
jmp 0x4338fb
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x5fc], eax
jle 0x433915
mov dword [ebp - 0xe48], 1
jmp 0x43391c
and dword [ebp - 0xe48], 0
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x13e4], eax
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x13ec], eax
mov eax, dword [ebp - 0xc70]
mov dword [ebp - 0x13f4], eax
cmp dword [ebp - 0x8f4], 5
jge 0x433955
mov dword [ebp - 0x604], 1
jmp 0x43395c
and dword [ebp - 0x604], 0
cmp dword [ebp - 0x604], 0xfffa
jne 0x433974
mov dword [ebp - 0xb2c], 1
jmp 0x43397b
and dword [ebp - 0xb2c], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0xb2c], eax
jl 0x433995
mov dword [ebp - 0x60c], 1
jmp 0x43399c
and dword [ebp - 0x60c], 0
mov eax, dword [ebp - 0x60c]
mov dword [ebp - 0x29c], eax
jmp 0x4336f8
jmp 0x4333db
mov dword [ebp - 0x1c4], 1
jmp 0x4339cb
mov eax, dword [ebp - 0x1c4]
dec eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0
jl 0x433a91
or dword [ebp - 0x1148], 0xffffffff
or dword [ebp - 0x1144], 0xffffffff
or dword [ebp - 0x1140], 0xffffffff
or dword [ebp - 0x113c], 0xffffffff
lea ecx, [ebp - 0x4c9]
call fcn.00401b47
push eax
lea eax, [ebp - 0x1138]
push eax
lea eax, [ebp - 0x1148]
push eax
lea ecx, [ebp - 0x1818]
call fcn.00422936
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1548]
call fcn.004228fc
mov dword [ebp - 0xf1c], 2
lea eax, [ebp - 0xf1c]
push eax
push 0x75b5
push 0x1fbf
push 0x4e49
push 0x24b8
push 0x4cc2
push 1
push 0x4814
push 0
push 0x684e
push 0x3796
push 1
lea eax, [ebp - 0x1548]
push eax
push 0x4699
push 0x106
call fcn.0042f723
add esp, 0x3c
lea ecx, [ebp - 0x1548]
call fcn.00422922
jmp 0x4339be
lea ecx, [ebp - 0x1558]
call fcn.00422922
mov dword [ebp - 0x33c], 0
mov dword [ebp - 0x54], 0xa3df
mov dword [ebp - 0x98], 1
mov dword [ebp - 0x10a8], 0xea41449c
mov dword [ebp - 0x10a4], 0xea41449c
mov dword [ebp - 0x10a0], 0xea41449c
mov dword [ebp - 0x109c], 0xea41449c
lea ecx, [ebp - 0x411]
call fcn.00401b47
push eax
lea eax, [ebp - 0x1098]
push eax
lea eax, [ebp - 0x10a8]
push eax
lea ecx, [ebp - 0x1898]
call fcn.00422936
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xbf0]
call fcn.004228fc
mov dword [ebp - 0x384], 0
jmp 0x433b2d
mov eax, dword [ebp - 0x384]
inc eax
mov dword [ebp - 0x384], eax
cmp dword [ebp - 0x384], 3
jge 0x433b49
mov eax, dword [ebp - 0x384]
mov dword [ebp + eax*4 - 0x1960], 0x2978d8ef
jmp 0x433b20
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x13fc], eax
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x54], eax
jl 0x433b66
mov dword [ebp - 0x8fc], 1
jmp 0x433b6d
and dword [ebp - 0x8fc], 0
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0x8fc]
jle 0x433b90
mov dword [ebp - 0x614], 1
jmp 0x433b97
and dword [ebp - 0x614], 0
push 3
lea ecx, [ebp - 0xbf0]
call fcn.00422927
mov ecx, dword [ebp - 0x614]
mov dword [eax], ecx
mov dword [ebp - 0x54], 0
jmp 0x433bbc
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jg 0x433d87
mov dword [ebp - 0x1404], 0x56a0b349
mov dword [ebp - 0x140c], 0
mov dword [ebp - 0xc78], 1
mov dword [ebp - 0x1414], 0x6a08376f
mov dword [ebp - 0x141c], 0xf3392002
mov dword [ebp - 0x1424], 0
mov dword [ebp - 0x4ac], 1
push dword [ebp - 0x54]
lea ecx, [ebp - 0xbf0]
call fcn.00422927
mov eax, dword [eax]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x98], 0
jmp 0x433c3b
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x13
jge 0x433d82
mov dword [ebp - 0xa74], 0xeba4
mov dword [ebp - 0x2a4], 0
jmp 0x433c6b
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 3
jge 0x433c87
mov eax, dword [ebp - 0x2a4]
mov dword [ebp + eax*4 - 0x17c0], 0x3e8ce6fc
jmp 0x433c5e
push 3
lea ecx, [ebp - 0xbf0]
call fcn.00422927
mov eax, dword [eax]
mov dword [ebp - 0xa74], eax
cmp dword [ebp - 0xa74], 0
je 0x433cd3
push dword [ebp - 0x54]
lea ecx, [ebp - 0xbf0]
call fcn.00422927
cmp dword [eax], 0
je 0x433cd3
mov eax, dword [ebp - 0x4ac]
inc eax
mov dword [ebp - 0x4ac], eax
je 0x433cd3
mov dword [ebp - 0x61c], 1
jmp 0x433cda
and dword [ebp - 0x61c], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x17c0], 0x4b26
jle 0x433cf8
mov dword [ebp - 0x904], 1
jmp 0x433cff
and dword [ebp - 0x904], 0
push 3
lea ecx, [ebp - 0xbf0]
call fcn.00422927
mov ecx, dword [ebp - 0x98]
mov edx, dword [ebp - 0x61c]
imul edx, dword [ebp - 0x904]
add ecx, edx
cmp dword [eax], ecx
je 0x433d31
mov dword [ebp - 0x624], 1
jmp 0x433d38
and dword [ebp - 0x624], 0
push dword [ebp - 0x54]
lea ecx, [ebp - 0xbf0]
call fcn.00422927
mov ecx, dword [ebp - 0x624]
imul ecx, dword [eax]
mov dword [ebp - 0xc78], ecx
mov byte [ebp - 0xbf], 0
movzx eax, byte [ebp - 0xbf]
test eax, eax
je 0x433d7d
push 1
push 0
push 0x6d8b
push 0x199e
call fcn.0042cc53
add esp, 0x10
jmp 0x433c2e
jmp 0x433bb5
lea ecx, [ebp - 0xbf0]
call fcn.00422922
mov dword [ebp - 0x33c], 0
jmp 0x433dab
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 0
jne 0x43448c
mov dword [ebp - 8], 1
mov dword [ebp - 0xa8], 0xffffffff
mov dword [ebp - 0x3ac], 0x57440e70
mov dword [ebp - 0x674], 6
mov dword [ebp - 8], 0xfffffff8
jmp 0x433ded
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 6
jne 0x433e0c
mov dword [ebp - 0xb60], 0x2cb51dba
mov eax, dword [ebp - 0xb60]
dec eax
mov dword [ebp - 0xb60], eax
jmp 0x433de6
mov dword [ebp - 8], 0xffffffe9
jmp 0x433e1c
mov eax, dword [ebp - 8]
dec eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0xffffffe4
je 0x434243
mov dword [ebp - 0x45c], 0
mov dword [ebp - 0x2ac], 0
jmp 0x433e49
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 1
jge 0x433e62
mov eax, dword [ebp - 0x2ac]
mov dword [ebp + eax*4 - 0x50], 0xf90edcad
jmp 0x433e3c
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x50], 0
jmp 0x433e87
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x50]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x50], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x50], 0xffffffff
jle 0x4341ce
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xb68], 0xc7527853
cmp dword [ebp - 8], 2
je 0x433ebe
mov dword [ebp - 0x62c], 1
jmp 0x433ec5
and dword [ebp - 0x62c], 0
mov eax, dword [ebp - 8]
mov dword [ebp - 0x142c], eax
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0xdc]
mov dword [ebp - 0xa8], eax
jne 0x433eeb
mov dword [ebp - 0x90c], 1
jmp 0x433ef2
and dword [ebp - 0x90c], 0
mov eax, dword [ebp - 0x62c]
cmp eax, dword [ebp - 0x90c]
jl 0x433f0c
mov dword [ebp - 0x634], 1
jmp 0x433f13
and dword [ebp - 0x634], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x634], eax
jge 0x433f2a
mov dword [ebp - 0xa7c], 1
jmp 0x433f31
and dword [ebp - 0xa7c], 0
imul eax, dword [ebp - 0xa7c], 0xffff
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x50]
jle 0x433f53
mov dword [ebp - 0x63c], 1
jmp 0x433f5a
and dword [ebp - 0x63c], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x63c], eax
je 0x433f71
mov dword [ebp - 0x914], 1
jmp 0x433f78
and dword [ebp - 0x914], 0
cmp dword [ebp - 0x914], 0x8f585950
jbe 0x433f90
mov dword [ebp - 0xd4c], 1
jmp 0x433f97
and dword [ebp - 0xd4c], 0
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x1434], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x50]
mov dword [ebp - 0x143c], eax
cmp dword [ebp - 8], 0
jne 0x433fcf
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x50], 0
jne 0x433fcf
and dword [ebp - 0x644], 0
jmp 0x433fd9
mov dword [ebp - 0x644], 1
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x644], eax
je 0x433ff3
mov dword [ebp - 0xb38], 1
jmp 0x433ffa
and dword [ebp - 0xb38], 0
mov dword [ebp - 0x45c], 0x1a35ca42
mov eax, dword [ebp - 0x45c]
cmp eax, dword [ebp - 0xb38]
jge 0x43401e
mov dword [ebp - 0x64c], 1
jmp 0x434025
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x64c], eax
jne 0x43403f
mov dword [ebp - 0x91c], 1
jmp 0x434046
and dword [ebp - 0x91c], 0
mov eax, dword [ebp - 0x91c]
mov dword [ebp - 0x3ac], eax
mov eax, 0x254
test eax, eax
je 0x434191
cmp dword [ebp - 0xa8], 0
je 0x43407d
cmp dword [ebp - 0x3ac], 0
je 0x43407d
mov dword [ebp - 0x654], 1
jmp 0x434084
and dword [ebp - 0x654], 0
mov eax, dword [ebp - 0x654]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x674], eax
cmp dword [ebp - 8], 0
je 0x4340ae
mov dword [ebp - 0xc80], 1
jmp 0x4340b5
and dword [ebp - 0xc80], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x50]
mov dword [ebp - 0x1444], eax
push 7
pop eax
test eax, eax
jne 0x4340de
cmp dword [ebp - 0xb68], 0
jne 0x4340de
and dword [ebp - 0xa84], 0
jmp 0x4340e8
mov dword [ebp - 0xa84], 1
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0xa84], eax
jg 0x434102
mov dword [ebp - 0x65c], 1
jmp 0x434109
and dword [ebp - 0x65c], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x65c], eax
jge 0x434120
mov dword [ebp - 0x924], 1
jmp 0x434127
and dword [ebp - 0x924], 0
mov eax, dword [ebp - 0x3ac]
cmp eax, dword [ebp - 0x924]
jge 0x434141
mov dword [ebp - 0x664], 1
jmp 0x434148
and dword [ebp - 0x664], 0
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0x664]
lea eax, [ecx + eax - 0x839b]
test eax, eax
jne 0x434171
cmp dword [ebp - 0xb68], 0
jne 0x434171
and dword [ebp - 0x66c], 0
jmp 0x43417b
mov dword [ebp - 0x66c], 1
mov eax, dword [ebp - 0x66c]
neg eax
je 0x434191
mov dword [ebp - 0xd54], 1
jmp 0x434198
and dword [ebp - 0xd54], 0
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x144c], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x1454], eax
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x145c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x50]
mov dword [ebp - 0x45c], eax
jmp 0x433e72
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x50]
mov dword [ebp - 0x1464], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x50], 0
je 0x434209
cmp dword [ebp - 0xa8], 0
jne 0x4341fd
mov eax, 0x7b094c65
test eax, eax
je 0x434209
mov dword [ebp - 0x92c], 1
jmp 0x434210
and dword [ebp - 0x92c], 0
mov eax, dword [ebp - 0x92c]
inc eax
cmp eax, dword [ebp - 0xa8]
je 0x43422b
mov dword [ebp - 0xc88], 1
jmp 0x434232
and dword [ebp - 0xc88], 0
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x674], eax
jmp 0x433e15
mov byte [ebp - 0x140], 0
movzx eax, byte [ebp - 0x140]
test eax, eax
je 0x434487
mov dword [ebp - 0x15c], 5
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0x934], 0x94b2ab76
mov dword [ebp - 0xa94], 1
push 2
lea ecx, [ebp - 0x1244]
call fcn.00422862
push 0x78c5
push 1
push 0x44c
lea eax, [ebp - 0x1244]
push eax
push 0x36b1
lea eax, [ebp - 0x146c]
push eax
push 0
push 0x6566
call fcn.0042d169
add esp, 0x20
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0xfffffffa
jb 0x4342dd
mov dword [ebp - 0x68c], 1
jmp 0x4342e4
and dword [ebp - 0x68c], 0
cmp dword [ebp - 0x15c], 0
je 0x434302
mov eax, 0xe4b7
test eax, eax
je 0x434302
mov dword [ebp - 0x67c], 1
jmp 0x434309
and dword [ebp - 0x67c], 0
mov eax, dword [ebp - 0x15c]
cmp dword [ebp - 0x15c], eax
je 0x434323
mov dword [ebp - 0xa8c], 1
jmp 0x43432a
and dword [ebp - 0xa8c], 0
cmp dword [ebp - 0xa8c], 0xfffffffe
jne 0x43433f
mov dword [ebp - 0x684], 1
jmp 0x434346
and dword [ebp - 0x684], 0
mov eax, dword [ebp - 0x67c]
mov dword [ebp - 0x934], eax
mov eax, dword [ebp - 0x934]
imul eax, dword [ebp - 0x684]
cmp eax, dword [ebp - 0x15c]
jle 0x434373
mov dword [ebp - 0xb70], 1
jmp 0x43437a
and dword [ebp - 0xb70], 0
mov eax, dword [ebp - 0x15c]
cmp dword [ebp - 0xb70], eax
jge 0x434394
mov dword [ebp - 0x93c], 1
jmp 0x43439b
and dword [ebp - 0x93c], 0
mov eax, dword [ebp - 0x68c]
cmp eax, dword [ebp - 0x93c]
jl 0x4343b5
mov dword [ebp - 0x694], 1
jmp 0x4343bc
and dword [ebp - 0x694], 0
mov eax, dword [ebp - 0x694]
mov dword [ebp - 0xa94], eax
cmp dword [ebp - 0xa94], 0
je 0x434402
mov byte [ebp - 0xc1], 0
movzx eax, byte [ebp - 0xc1]
test eax, eax
je 0x434400
push 0x2092
push 1
push 1
push 0x64bd
push 0
push 0x284d
call fcn.0042d89d
add esp, 0x18
jmp 0x434466
mov dword [ebp - 0xe4], 0
jmp 0x43441b
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 2
jge 0x43443d
push dword [ebp - 0xe4]
lea ecx, [ebp - 0x1244]
call fcn.00422927
mov dword [eax], 0x700d62e6
jmp 0x43440e
mov byte [ebp - 0x125], 0
push 0x3279
push 0x41dc
push 1
push 0
lea eax, [ebp - 0x125]
push eax
push 0x3ca1
call fcn.0042f56b
add esp, 0x18
lea ecx, [ebp - 0x1244]
call fcn.00422922
push 1
push 0
push 0x1f94
push 0xd26
call fcn.00430fed
add esp, 0x10
jmp 0x433d9e
mov dword [ebp - 0x244], 0x4bcd76ce
mov dword [ebp - 0xec], 2
mov dword [ebp - 0x1474], 0xc629c4dd
mov dword [ebp - 0x147c], 0xc869
mov dword [ebp - 0x1484], 4
mov dword [ebp - 0x148c], 0xfffffffc
mov dword [ebp - 0x1494], 0xffffffff
mov dword [ebp - 0x149c], 9
mov dword [ebp - 0x14a4], 0xfffffff6
mov dword [ebp - 0x14ac], 0xffffffff
mov dword [ebp - 0x14b4], 0x8ff7673e
mov dword [ebp - 0x14bc], 0xe12fd89d
mov dword [ebp - 0x14c4], 0xbeb927ee
mov dword [ebp - 0x2b4], 0
jmp 0x434527
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 2
jge 0x434543
mov eax, dword [ebp - 0x2b4]
mov dword [ebp + eax*4 - 0xfe0], 0xfffffff8
jmp 0x43451a
mov eax, 0xa516
test eax, eax
je 0x43457d
cmp dword [ebp - 0x244], 0
jne 0x434561
mov dword [ebp - 0xd5c], 1
jmp 0x434568
and dword [ebp - 0xd5c], 0
cmp dword [ebp - 0x244], 0
je 0x43457d
mov dword [ebp - 0x69c], 1
jmp 0x434584
and dword [ebp - 0x69c], 0
mov eax, dword [ebp - 0x244]
add eax, dword [ebp - 0x69c]
cmp eax, 0x28f6
je 0x4345a3
mov dword [ebp - 0xc90], 1
jmp 0x4345aa
and dword [ebp - 0xc90], 0
imul eax, dword [ebp - 0x244], 0
add eax, dword [ebp - 0x244]
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xec], 0
jmp 0x4345d6
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 1
jg 0x434673
mov dword [ebp - 0x14cc], 0
mov dword [ebp - 0x14d8], 0x9229a275
mov dword [ebp - 0x1668], 0x5211521f
mov dword [ebp - 0x1748], 5
mov dword [ebp - 0x1670], 3
mov dword [ebp - 0x14dc], 0xafe44fa3
mov dword [ebp - 0x14e0], 0x9716e289
mov dword [ebp - 0x14e8], 0xffffffff
mov dword [ebp - 0x14f0], 0x99e68fc7
mov dword [ebp - 0x944], 0x6d4f509e
mov eax, dword [ebp - 0x944]
inc eax
mov dword [ebp - 0x944], eax
mov eax, dword [ebp - 0xec]
mov ecx, dword [ebp - 0xec]
mov eax, dword [ebp + eax*4 - 0xfe0]
mov dword [ebp + ecx*4 - 0xfe0], eax
jmp 0x4345c9
mov byte [ebp - 0xc3], 0
movzx eax, byte [ebp - 0xc3]
test eax, eax
je 0x43487d
mov dword [ebp - 0x344], 0xffffffff
mov dword [ebp - 0x14f8], 0xffffffff
mov dword [ebp - 0x38c], 4
push 2
lea ecx, [ebp - 0x119c]
call fcn.00422862
mov dword [ebp - 0x30], 0
jmp 0x4346c4
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x4346da
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x1828], 0xf0ea
jmp 0x4346bd
mov dword [ebp - 0x30], 0
jmp 0x4346ea
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x434706
push dword [ebp - 0x30]
lea ecx, [ebp - 0x119c]
call fcn.00422927
mov dword [eax], 0x999d94b4
jmp 0x4346e3
mov dword [ebp - 0x30], 0
jmp 0x434716
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 4
jge 0x43472c
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x1764], 0xffffffff
jmp 0x43470f
mov dword [ebp - 0x344], 0
jmp 0x434745
mov eax, dword [ebp - 0x344]
inc eax
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 1
jg 0x4347d9
mov dword [ebp - 0x1500], 0x5121
mov dword [ebp - 0x1508], 0xffffffff
mov dword [ebp - 0x167c], 0
mov dword [ebp - 0x1684], 0xfffffff6
mov dword [ebp - 0x168c], 0x5b054dbb
mov dword [ebp - 0x2bc], 0
jmp 0x43479d
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 4
jge 0x4347b9
mov eax, dword [ebp - 0x2bc]
mov dword [ebp + eax*4 - 0x1994], 9
jmp 0x434790
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1764]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1764], eax
jmp 0x434738
mov dword [ebp - 0x38c], 0
jmp 0x4347f2
mov eax, dword [ebp - 0x38c]
dec eax
mov dword [ebp - 0x38c], eax
cmp dword [ebp - 0x38c], 0xffffffff
jl 0x434863
push 2
lea ecx, [ebp - 0x1304]
call fcn.00422862
push 0x3a01
push 0x6022
push 0x7e99
push 0
push 1
push 0x2e25
lea eax, [ebp - 0x16d0]
push eax
lea eax, [ebp - 0x1304]
push eax
call fcn.00430789
add esp, 0x20
push 1
lea ecx, [ebp - 0x1304]
call fcn.00422927
mov esi, eax
push 0
lea ecx, [ebp - 0x119c]
call fcn.00422927
mov ecx, dword [esi]
mov dword [eax], ecx
lea ecx, [ebp - 0x1304]
call fcn.00422922
jmp 0x4347e5
lea ecx, [ebp - 0x119c]
call fcn.00422922
push 0
push 0x3fd
push 0
call dword [sym.imp.ADVAPI32.dll_ControlService]
mov dword [ebp - 0x44], 0x30f94f37
mov dword [ebp - 0x4c0], 8
mov dword [ebp - 0x6ac], 0xca8cda2a
mov dword [ebp - 0x6a4], 0xcd329b3a
mov dword [ebp - 0x101c], 0x13f08700
mov dword [ebp - 0x1018], 0x13f08700
mov dword [ebp - 0x1014], 0x13f08700
mov dword [ebp - 0x1010], 0x13f08700
lea ecx, [ebp - 0x489]
call fcn.00401b47
push eax
lea eax, [ebp - 0x100c]
push eax
lea eax, [ebp - 0x101c]
push eax
lea ecx, [ebp - 0x1900]
call fcn.00422936
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1568]
call fcn.004228fc
cmp dword [ebp - 0x44], 0
je 0x434923
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x6a4], eax
cmp dword [ebp - 0x6a4], 0
je 0x434923
mov dword [ebp - 0xb50], 1
jmp 0x43492a
and dword [ebp - 0xb50], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0xb50], eax
jl 0x434944
cmp dword [ebp - 0x44], 0
jne 0x434944
and dword [ebp - 0xd64], 0
jmp 0x43494e
mov dword [ebp - 0xd64], 1
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x4c0], eax
mov eax, dword [ebp - 0x4c0]
neg eax
mov dword [ebp - 0x6ac], eax
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x6ac], eax
je 0x43497c
mov dword [ebp - 0x94c], 1
jmp 0x434983
and dword [ebp - 0x94c], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x94c], eax
jge 0x43499a
mov dword [ebp - 0x6b4], 1
jmp 0x4349a1
and dword [ebp - 0x6b4], 0
cmp dword [ebp - 0x6b4], 0x99a56718
jb 0x4349b9
mov dword [ebp - 0xa9c], 1
jmp 0x4349c0
and dword [ebp - 0xa9c], 0
mov eax, dword [ebp - 0xa9c]
sub eax, dword [ebp - 0x44]
cmp eax, 0x52487223
jg 0x4349dc
mov dword [ebp - 0x6bc], 1
jmp 0x4349e3
and dword [ebp - 0x6bc], 0
mov eax, dword [ebp - 0x44]
imul eax, dword [ebp - 0x6bc]
test eax, eax
jne 0x4349fe
xor eax, eax
jne 0x4349fe
and dword [ebp - 0x954], 0
jmp 0x434a08
mov dword [ebp - 0x954], 1
mov esi, dword [ebp - 0x44]
imul esi, dword [ebp - 0x954]
push 0
lea ecx, [ebp - 0x1568]
call fcn.00422927
mov dword [eax], esi
push 0x4b94
push 0
push 1
push 0x83f
push 0x58f8
lea eax, [ebp - 0x4c0]
push eax
push 0x129b
push 0x2577
push 1
lea eax, [ebp - 0x44]
push eax
call fcn.0042daef
add esp, 0x28
lea ecx, [ebp - 0x1568]
call fcn.00422922
cmp dword [ebp - 0x9d8], 0
je 0x43ba12
cmp dword [ebp - 0x9d0], 1
jle 0x43ba12
mov dword [ebp - 0x2c4], 0
jmp 0x434a91
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 1
jge 0x434aad
mov eax, dword [ebp - 0x2c4]
mov dword [ebp + eax*4 - 0xc98], 0
jmp 0x434a84
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc98], 0
je 0x434b0e
mov dword [ebp - 0xca0], 0x98a59c17
mov dword [ebp - 0xd6c], 0xffffffff
push 0x6b45
lea eax, [ebp - 0xd6c]
push eax
push 0x363a
push 1
push 0x11ed
push 0x1419
lea eax, [ebp - 0xca0]
push eax
push 0
push 0x6b6e
push 0x32ad
call fcn.0042fb4b
add esp, 0x28
jmp 0x434c20
mov dword [ebp - 0xa0], 7
mov dword [ebp - 0xa0], 0xffffffe4
jmp 0x434b31
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0xffffffee
je 0x434bd2
push 1
lea ecx, [ebp - 0x11a8]
call fcn.00422862
push 0x4a60
lea eax, [ebp - 0x16d8]
push eax
lea eax, [ebp - 0x11a8]
push eax
push 0x69c1
push 0
push 0x440
push 1
push 0x424c
push 0
call fcn.0042d022
add esp, 0x24
lea eax, [ebp - 0x11a8]
push eax
push 0x3acb
push 0x7b3
push 0x5665
push 0x10e5
push 0x6a20
push 0x2a8f
push 0
push 0x3464
push 0
push 0x51e
push 0x527b
push 1
push 0x23f1
call fcn.00431621
add esp, 0x38
lea ecx, [ebp - 0x11a8]
call fcn.00422922
jmp 0x434b24
mov dword [ebp - 0xa0], 0
jmp 0x434beb
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 8
jle 0x434c20
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x434c1e
push 0
push 0x6d91
push 0x6313
push 1
push 1
call fcn.0042fdac
add esp, 0x14
jmp 0x434bde
mov dword [ebp - 0x22c], 0x30f94f37
mov dword [ebp - 0x1cc], 0x9b55bb2c
mov dword [ebp - 0x1cc], 0
jmp 0x434c4d
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0xf
je 0x434c86
mov dword [ebp - 0xd74], 0
lea eax, [ebp - 0xd74]
push eax
push 1
lea eax, [ebp - 0x1cc]
push eax
push 0xb6e
push 0x2b34
push 0
call fcn.0042b510
add esp, 0x18
jmp 0x434c40
mov dword [ebp - 0x744], 8
mov dword [ebp - 0x34c], 0x928c176b
mov dword [ebp - 0x34c], 0
jmp 0x434cb3
mov eax, dword [ebp - 0x34c]
inc eax
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 0x11
jl 0x434e06
mov dword [ebp - 0x2cc], 8
push 4
lea ecx, [ebp - 0x11d8]
call fcn.00422862
push 0x13ef
push 0xc95
push 1
push 0x6ebf
push 0x53e0
push 0x6d69
push 0xa49
push 0x37ae
push 0x6432
push 0x28d3
push 0x4b55
push 0x4537
push 0xbf1
push 0x4ab6
push 0x2f1e
push 0x6165
push 0x525e
push 0x2469
push 1
push 0x223a
push 0x1102
lea eax, [ebp - 0x16e0]
push eax
lea eax, [ebp - 0x11d8]
push eax
push 0x20ab
push 0x4350
push 0
call fcn.004309ca
add esp, 0x68
mov dword [ebp - 0x2cc], 0x18
jmp 0x434d75
mov eax, dword [ebp - 0x2cc]
dec eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 0xfffffffa
jg 0x434df6
push 1
lea ecx, [ebp - 0x11c0]
call fcn.00422862
mov dword [ebp - 0x3cc], 0
jmp 0x434da4
mov eax, dword [ebp - 0x3cc]
inc eax
mov dword [ebp - 0x3cc], eax
cmp dword [ebp - 0x3cc], 1
jge 0x434dc6
push dword [ebp - 0x3cc]
lea ecx, [ebp - 0x11c0]
call fcn.00422927
mov dword [eax], 0x5d811f07
jmp 0x434d97
push 0
lea ecx, [ebp - 0x11c0]
call fcn.00422927
mov esi, eax
push 2
lea ecx, [ebp - 0x11d8]
call fcn.00422927
mov ecx, dword [esi]
mov dword [eax], ecx
lea ecx, [ebp - 0x11c0]
call fcn.00422922
jmp 0x434d68
lea ecx, [ebp - 0x11d8]
call fcn.00422922
jmp 0x434ca6
mov dword [ebp - 0xcb8], 0xca8cda2a
mov dword [ebp - 0xf4], 7
mov dword [ebp - 0x16e8], 0xfffffffb
push 4
lea ecx, [ebp - 0x1588]
call fcn.00422862
mov dword [ebp - 0x2d4], 0
jmp 0x434e4a
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 4
jge 0x434e6c
push dword [ebp - 0x2d4]
lea ecx, [ebp - 0x1588]
call fcn.00422927
mov dword [eax], 0xfcfbce00
jmp 0x434e3d
mov dword [ebp - 0xf4], 0xffffffe2
jmp 0x434e85
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x16
je 0x4350bc
push 2
lea ecx, [ebp - 0xfb4]
call fcn.00422862
mov dword [ebp - 0x20c], 0
jmp 0x434eb8
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 4
jge 0x434ed4
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0x18c0], 0x9c3f
jmp 0x434eab
push 1
lea eax, [ebp - 0xfb4]
push eax
push 0x3933
push 0
push 0x1a24
lea eax, [ebp - 0x20c]
push eax
push 0
push 0x615f
push 0x2391
push 0x6b95
call fcn.0042e9ce
add esp, 0x28
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x18c0], 0
jne 0x434f27
or eax, 0xffffffff
jne 0x434f27
and dword [ebp - 0xb8c], 0
jmp 0x434f31
mov dword [ebp - 0xb8c], 1
mov eax, dword [ebp - 0xf4]
dec eax
mov dword [ebp - 0x6c4], eax
push 0
lea ecx, [ebp - 0xfb4]
call fcn.00422927
mov ecx, dword [ebp - 0x6c4]
mov dword [eax], ecx
cmp dword [ebp - 0x6c4], 0xfff6
ja 0x434f6b
mov dword [ebp - 0x6cc], 1
jmp 0x434f72
and dword [ebp - 0x6cc], 0
mov eax, dword [ebp - 0xb8c]
cmp eax, dword [ebp - 0x6cc]
jg 0x434f8c
mov dword [ebp - 0x95c], 1
jmp 0x434f93
and dword [ebp - 0x95c], 0
mov eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0x95c]
je 0x434fe2
mov byte [ebp - 0x135], 0
movzx eax, byte [ebp - 0x135]
test eax, eax
je 0x434fdd
push 0x54d6
push 0
push 0x4a3a
push 0x2892
push 0x31a5
push 1
push 0x6329
push 0x3bad
call fcn.0042c804
add esp, 0x20
jmp 0x435096
mov dword [ebp - 0x16f4], 0xe012d2c8
mov dword [ebp - 0x16fc], 7
mov dword [ebp - 0x1704], 0xd40a1650
mov dword [ebp - 0x170c], 0x1a7a81a8
push 3
lea ecx, [ebp - 0x1578]
call fcn.00422862
mov dword [ebp - 0x6d4], 0x25189d9e
push 0
push 0x22fe
lea eax, [ebp - 0x1578]
push eax
push 1
push 0x25d5
push 0x60a9
push 1
push 0x2078
lea eax, [ebp - 0x1714]
push eax
push 0x54d5
call fcn.0042e9ce
add esp, 0x28
mov byte [ebp - 0x142], 0
movzx eax, byte [ebp - 0x142]
test eax, eax
je 0x43507e
push 0
push 0x6f06
push 1
push 0x6dbb
call fcn.00431adf
add esp, 0x10
mov eax, dword [ebp - 0x6d4]
dec eax
mov dword [ebp - 0x6d4], eax
lea ecx, [ebp - 0x1578]
call fcn.00422922
cmp dword [ebp - 0xf4], 0
je 0x4350ac
lea ecx, [ebp - 0xfb4]
call fcn.00422922
jmp 0x4350bc
lea ecx, [ebp - 0xfb4]
call fcn.00422922
jmp 0x434e78
lea ecx, [ebp - 0x1588]
call fcn.00422922
mov dword [ebp - 0xd8c], 0xcd329b3a
push 4
lea ecx, [ebp - 0xbc8]
call fcn.00422862
mov dword [ebp - 0x1c], 0xfffffffb
mov dword [ebp - 0x104], 0xfffffffc
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x96c], 1
mov dword [ebp - 0x354], 0
jmp 0x43511c
mov eax, dword [ebp - 0x354]
inc eax
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 4
jge 0x43513e
push dword [ebp - 0x354]
lea ecx, [ebp - 0xbc8]
call fcn.00422927
mov dword [eax], 4
jmp 0x43510f
mov dword [ebp - 0x1c], 3
jmp 0x43514e
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x435486
mov dword [ebp - 0xfc], 0xd013d0bb
push 2
lea ecx, [ebp - 0x508]
call fcn.00422862
lea eax, [ebp - 0x171c]
push eax
lea eax, [ebp - 0x508]
push eax
push 0x265c
push 1
push 0x30cf
push 0
call fcn.0042b5f2
add esp, 0x18
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xbc8]
call fcn.00422927
cmp dword [eax], 0
je 0x43532e
push 0
lea ecx, [ebp - 0xbc8]
call fcn.00422927
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xbc8]
call fcn.00422927
mov dword [ebp - 0xaa4], eax
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xbc8]
call fcn.00422927
mov ecx, dword [ebp - 0xaa4]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0xaa4]
cmp dword [eax], 0
je 0x43523b
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xbc8]
call fcn.00422927
cmp dword [eax], 0
jne 0x435210
cmp dword [ebp - 0x1c], 0
jne 0x435210
and dword [ebp - 0x6dc], 0
jmp 0x43521a
mov dword [ebp - 0x6dc], 1
mov eax, dword [ebp - 0x6dc]
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
je 0x43523b
mov dword [ebp - 0x964], 1
jmp 0x435242
and dword [ebp - 0x964], 0
mov eax, dword [ebp - 0x964]
mov dword [ebp - 0xfc], eax
mov esi, dword [ebp - 0xfc]
push 1
lea ecx, [ebp - 0x508]
call fcn.00422927
imul esi, dword [eax]
push 0
lea ecx, [ebp - 0x508]
call fcn.00422927
add esi, dword [eax]
cmp esi, dword [ebp - 0x1c]
jg 0x435284
mov dword [ebp - 0x6e4], 1
jmp 0x43528b
and dword [ebp - 0x6e4], 0
push 0
lea ecx, [ebp - 0x508]
call fcn.00422927
mov ecx, dword [ebp - 0x6e4]
add ecx, dword [eax]
jne 0x4352ae
mov dword [ebp - 0x464], 1
jmp 0x4352b5
and dword [ebp - 0x464], 0
push 1
lea ecx, [ebp - 0x508]
call fcn.00422927
mov ecx, dword [ebp - 0x464]
mov dword [eax], ecx
cmp dword [ebp - 0x464], 0
je 0x4352d7
cmp dword [ebp - 0x1c], 0
cmp dword [ebp - 0x1c], 0x4128
jne 0x4352ec
mov dword [ebp - 0xb54], 1
jmp 0x4352f3
and dword [ebp - 0xb54], 0
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xb54]
cmp dword [ebp - 0x1c], eax
jle 0x43530d
mov dword [ebp - 0x6ec], 1
jmp 0x435314
and dword [ebp - 0x6ec], 0
mov eax, dword [ebp - 0x6ec]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x96c]
cmp dword [ebp - 0x90], eax
jne 0x435356
mov dword [ebp - 0xca8], 0xffffffff
cmp dword [ebp - 0xca8], 0
je 0x435351
lea ecx, [ebp - 0x508]
call fcn.00422922
jmp 0x435486
jmp 0x435476
mov dword [ebp - 0xd7c], 0xd37f4a1d
mov dword [ebp - 0xfc], 1
jmp 0x435379
mov eax, dword [ebp - 0xfc]
dec eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
jl 0x43546c
mov dword [ebp - 0x90], 1
jmp 0x43539f
mov eax, dword [ebp - 0x90]
dec eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jl 0x435467
push dword [ebp - 0xfc]
lea ecx, [ebp - 0x508]
call fcn.00422927
cmp dword [eax], 0
je 0x4353c7
jmp 0x435467
mov dword [ebp - 0x104], 3
jmp 0x4353e0
mov eax, dword [ebp - 0x104]
dec eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
jl 0x435462
push 1
push 0x7265
push 0xb9e
push 0x4cbc
push 1
lea eax, [ebp - 0x508]
push eax
push 0
lea eax, [ebp - 0x90]
push eax
push 0x5159
call fcn.004314c8
add esp, 0x24
mov byte [ebp - 0xc5], 0
push 1
push 0x31d1
push 0x1e20
push 0x6df5
push 0x1766
push 1
push 0x27f3
push 0x5ce
push 0x5257
push 0x42a1
push 0x11
lea eax, [ebp - 0xc5]
push eax
call fcn.0042b300
add esp, 0x30
jmp 0x4353d3
jmp 0x435392
jmp 0x43536c
mov dword [ebp - 0xd7c], 0xfffffffe
lea ecx, [ebp - 0x508]
call fcn.00422922
jmp 0x435147
lea eax, [ebp - 0x96c]
push eax
lea eax, [ebp - 0xbc8]
push eax
push 1
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x104]
push eax
push 0x22a6
push 0x5d7
push 0x5976
push 0
push 0x3d8c
lea eax, [ebp - 0x90]
push eax
push 0x3bf6
call fcn.0042dc88
add esp, 0x30
lea ecx, [ebp - 0xbc8]
call fcn.00422922
mov dword [ebp - 0x10d0], 0x13f08700
mov dword [ebp - 0x10cc], 0x13f08700
mov dword [ebp - 0x10c8], 0x13f08700
mov dword [ebp - 0x10c4], 0x13f08700
lea ecx, [ebp - 0x419]
call fcn.00401b47
push eax
lea eax, [ebp - 0x10c0]
push eax
lea eax, [ebp - 0x10d0]
push eax
lea ecx, [ebp - 0x1838]
call fcn.00422936
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x15a8]
call fcn.004228fc
mov dword [ebp - 0x4c], 1
mov dword [ebp - 0x4c8], 6
mov dword [ebp - 0x2dc], 0
jmp 0x43555d
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 1
jge 0x435579
mov eax, dword [ebp - 0x2dc]
mov dword [ebp + eax*4 - 0xd84], 1
jmp 0x435550
mov byte [ebp - 0x12d], 0
movzx eax, byte [ebp - 0x12d]
test eax, eax
je 0x43559c
push 1
push 0
push 0xfa
call fcn.0042f621
add esp, 0xc
mov dword [ebp - 0x4c], 0
jmp 0x4355ac
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xfffffff5
je 0x43570c
mov dword [ebp - 0x394], 0xffffffff
mov dword [ebp - 0x704], 0x9beab1d6
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], eax
jl 0x4355de
mov dword [ebp - 0x6f4], 1
jmp 0x4355e5
and dword [ebp - 0x6f4], 0
mov eax, dword [ebp - 0x394]
mov dword [ebp - 0x1724], eax
cmp dword [ebp - 0x4c], 0xb441
je 0x435606
mov dword [ebp - 0xaac], 1
jmp 0x43560d
and dword [ebp - 0xaac], 0
mov eax, dword [ebp - 0x6f4]
cmp eax, dword [ebp - 0xaac]
jg 0x435627
mov dword [ebp - 0xcb0], 1
jmp 0x43562e
and dword [ebp - 0xcb0], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x172c], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x1734], eax
mov dword [ebp - 0x4c8], 0xffffffff
cmp dword [ebp - 0x4c8], 0
je 0x435671
cmp dword [ebp - 0x394], 0
je 0x435671
cmp dword [ebp - 0x4c8], 0
je 0x435671
mov dword [ebp - 0x6fc], 1
jmp 0x435678
and dword [ebp - 0x6fc], 0
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x394], eax
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x394], eax
jg 0x43569b
mov dword [ebp - 0x974], 1
jmp 0x4356a2
and dword [ebp - 0x974], 0
mov eax, dword [ebp - 0x974]
mov dword [ebp - 0x704], eax
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x704], eax
jge 0x4356c5
mov dword [ebp - 0xbac], 1
jmp 0x4356cc
and dword [ebp - 0xbac], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xbac]
mov dword [ebp + eax - 0xd84], ecx
mov byte [ebp - 0xc7], 0
movzx eax, byte [ebp - 0xc7]
test eax, eax
je 0x435707
push 0x7cfc
push 1
push 0x4d4e
push 0
call fcn.00431434
add esp, 0x10
jmp 0x4355a5
lea eax, [ebp - 0x744]
push eax
lea eax, [ebp - 0xcb8]
push eax
push 0
push 0x533b
push 0x61ca
push 0
push 0x389c
lea eax, [ebp - 0xd8c]
push eax
lea eax, [ebp - 0x15a8]
push eax
push 0x7ae7
lea eax, [ebp - 0x22c]
push eax
call fcn.0042fe62
add esp, 0x2c
push 3
lea ecx, [ebp - 0x4ec]
call fcn.00422862
mov dword [ebp - 0x1d4], 0xcd9d7540
mov dword [ebp - 0x5c], 0xe55a
push 0x403b
push 0x58e
lea eax, [ebp - 0x173c]
push eax
push 1
lea eax, [ebp - 0x4ec]
push eax
push 1
call fcn.0042b5f2
add esp, 0x18
push 0
lea ecx, [ebp - 0x4ec]
call fcn.00422927
cmp dword [eax], 0
jne 0x43588e
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x1744], eax
mov esi, dword [ebp - 0x1d4]
imul esi, dword [ebp - 0x5c]
push 0
lea ecx, [ebp - 0x4ec]
call fcn.00422927
cmp esi, dword [eax]
jge 0x4357f5
cmp dword [ebp - 0x1d4], 0
je 0x4357f5
push 0
lea ecx, [ebp - 0x4ec]
call fcn.00422927
cmp dword [eax], 0
je 0x4357f5
mov dword [ebp - 0x70c], 1
jmp 0x4357fc
and dword [ebp - 0x70c], 0
push 0
lea ecx, [ebp - 0x4ec]
call fcn.00422927
mov ecx, dword [ebp - 0x70c]
cmp ecx, dword [eax]
jg 0x43581f
mov dword [ebp - 0xcc0], 1
jmp 0x435826
and dword [ebp - 0xcc0], 0
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x174c], eax
push 0
lea ecx, [ebp - 0x4ec]
call fcn.00422927
xor eax, eax
inc eax
cmp eax, 0xf393
je 0x435855
mov dword [ebp - 0x97c], 1
jmp 0x43585c
and dword [ebp - 0x97c], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x97c], eax
jne 0x435873
mov dword [ebp - 0x714], 1
jmp 0x43587a
and dword [ebp - 0x714], 0
mov eax, dword [ebp - 0x714]
sub eax, 6
jne 0x43588e
and dword [ebp - 0xab4], 0
jmp 0x435898
mov dword [ebp - 0xab4], 1
push 0
lea ecx, [ebp - 0x4ec]
call fcn.00422927
mov ecx, dword [ebp - 0xab4]
cmp ecx, dword [eax]
je 0x4358bb
mov dword [ebp - 0xd94], 1
jmp 0x4358c2
and dword [ebp - 0xd94], 0
cmp dword [ebp - 0x5c], 0
jne 0x4358d6
or eax, 0xffffffff
jne 0x4358d6
and dword [ebp - 0x71c], 0
jmp 0x4358e0
mov dword [ebp - 0x71c], 1
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x71c], eax
jne 0x4358fb
push 0xfffffffffffffff8
pop eax
test eax, eax
je 0x4358fb
and dword [ebp - 0x984], 0
jmp 0x435905
mov dword [ebp - 0x984], 1
push 0
lea ecx, [ebp - 0x4ec]
call fcn.00422927
mov eax, dword [eax]
mov ecx, dword [ebp - 0x984]
lea eax, [ecx + eax - 6]
test eax, eax
je 0x4359b8
push 3
lea ecx, [ebp - 0x11f0]
call fcn.00422862
mov dword [ebp - 0xcc8], 0x37d437f1
push 0x4c81
push 0x1674
push 0x1ffc
push 0x3787
push 1
lea eax, [ebp - 0x1754]
push eax
push 1
lea eax, [ebp - 0x11f0]
push eax
push 0
call fcn.0042d022
add esp, 0x24
push 0
lea ecx, [ebp - 0x11f0]
call fcn.00422927
mov dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x724]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x724]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x4ec]
call fcn.00422927
mov eax, dword [eax]
neg eax
mov dword [ebp - 0xcc8], eax
lea ecx, [ebp - 0x11f0]
call fcn.00422922
jmp 0x435a46
mov dword [ebp - 0xd9c], 0x9dfeee83
mov dword [ebp - 0xb5c], 0x404e5477
lea eax, [ebp - 0xb5c]
push eax
push 0x60b1
push 0x2fd
push 1
push 1
push 0x870
push 0x22ce
push 0x3f4a
lea eax, [ebp - 0xd9c]
push eax
lea eax, [ebp - 0x4ec]
push eax
push 0x4e57
push 0x56fe
push 0x4b84
push 0x7bdd
push 0x5c60
lea eax, [ebp - 0x5c]
push eax
call fcn.0042b710
add esp, 0x40
mov dword [ebp - 0x5c], 0xffffffe5
jmp 0x435a33
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x19
jl 0x435a46
cmp dword [ebp - 0xb5c], 0
je 0x435a44
jmp 0x435a46
jmp 0x435a2c
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x1d4], eax
lea ecx, [ebp - 0x4ec]
call fcn.00422922
mov dword [ebp - 0x22c], 0xa
jmp 0x435a73
cmp dword [ebp - 0x22c], 1
je 0x435ecd
mov dword [ebp - 0xcd0], 0xb0f7
mov dword [ebp - 0x2e4], 0xffffffff
mov dword [ebp - 0xda4], 1
push 4
lea ecx, [ebp - 0x1220]
call fcn.00422862
mov dword [ebp - 0x4d0], 0xdcb0c7b2
mov dword [ebp - 0x1730], 0xfd90538e
mov dword [ebp - 0x16e4], 0x6aece011
mov dword [ebp - 0x1030], 0x22354120
mov dword [ebp - 0x102c], 0x22354120
mov dword [ebp - 0x1028], 0x22354120
mov dword [ebp - 0x1024], 0x22354120
lea ecx, [ebp - 0x4d2]
call fcn.00401b47
push eax
lea eax, [ebp - 0x1020]
push eax
lea eax, [ebp - 0x1030]
push eax
lea ecx, [ebp - 0x18a8]
call fcn.00422936
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xed4]
call fcn.004228fc
and dword [ebp - 0x1044], 0
and dword [ebp - 0x1040], 0
and dword [ebp - 0x103c], 0
and dword [ebp - 0x1038], 0
lea ecx, [ebp - 0x4ca]
call fcn.00401b47
push eax
lea eax, [ebp - 0x1034]
push eax
lea eax, [ebp - 0x1044]
push eax
lea ecx, [ebp - 0x1848]
call fcn.00422936
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1598]
call fcn.004228fc
mov dword [ebp - 0x16f8], 0xcdb5cf63
mov dword [ebp - 0x14ec], 0xb2933530
mov dword [ebp - 0xce0], 0
mov dword [ebp - 0x1dc], 0
jmp 0x435bae
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 3
jge 0x435bca
mov eax, dword [ebp - 0x1dc]
mov dword [ebp + eax*4 - 0x1208], 0xf07b4bc6
jmp 0x435ba1
lea eax, [ebp - 0x1dc]
push eax
push 0x6604
push 0xadc
push 0x3b3f
push 1
lea eax, [ebp - 0x1220]
push eax
push 0x1c96
push 0
push 0x633
push 0x723b
call fcn.004319fa
add esp, 0x28
cmp dword [ebp - 0xcd0], 0
je 0x435d7e
mov dword [ebp - 0x10c], 0xfffffff7
mov byte [ebp - 0x144], 0
movzx eax, byte [ebp - 0x144]
test eax, eax
je 0x435c48
mov byte [ebp - 0xcd], 0
movzx eax, byte [ebp - 0xcd]
test eax, eax
je 0x435dab
lea ecx, [ebp - 0x15a8]
call fcn.00422922
mov dword [ebp - 0x16a0], 0x48d327cb
mov dword [ebp - 0x169c], 0x48d327cb
mov dword [ebp - 0x1698], 0x48d327cb
mov dword [ebp - 0x1694], 0x48d327cb
mov dword [ebp - 0x1328], 0x8fc558ba
mov dword [ebp - 0xb94], 2
mov byte [ebp - 0x146], 0
movzx eax, byte [ebp - 0x146]
test eax, eax
je 0x435f31
push 0
push 0
call fcn.00430229
pop ecx
pop ecx
mov eax, dword [ebp - 0xb94]
dec eax
mov dword [ebp - 0xb94], eax
mov dword [ebp - 0x14], 7
push 2
lea ecx, [ebp - 0x1250]
call fcn.00422862
push 3
lea ecx, [ebp - 0x1238]
call fcn.00422862
mov dword [ebp - 0x4c4], 0x38425739
push 1
lea ecx, [ebp - 0xc2c]
call fcn.00422862
mov dword [ebp - 0x14f4], 7
mov dword [ebp - 0x40], 0
jmp 0x435f90
cmp dword [ebp - 0x40], 2
jge 0x435fac
push dword [ebp - 0x40]
lea ecx, [ebp - 0x1250]
call fcn.00422927
mov dword [eax], 0xcb61d225
jmp 0x435f89
push 1
push 0x2c13
push 0
push 0x21f3
push 0x3886
lea eax, [ebp - 0x40]
push eax
push 0x71cf
lea eax, [ebp - 0x1238]
push eax
call fcn.0042eb36
add esp, 0x20
lea eax, [ebp - 0xc2c]
push eax
push 0
push 1
lea eax, [ebp - 0x40]
push eax
call fcn.0042fcf4
add esp, 0x10
mov dword [ebp - 0x40], 0
jmp 0x435ffe
mov dword [ebp - 0xc], 0x256915a
mov dword [ebp - 0x3b0], 0x7673ed13
mov dword [ebp - 0x390], 0
jmp 0x43ba3c
mov eax, dword [ebp - 0x390]
inc eax
mov dword [ebp - 0x390], eax
cmp dword [ebp - 0x390], 1
jge 0x43ba58
mov eax, dword [ebp - 0x390]
mov dword [ebp + eax*4 - 0x3a8], 0xffffffff
jmp 0x43ba2f
mov dword [ebp - 0xc], 0
jmp 0x43ba68
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jg 0x43babd
mov dword [ebp - 0x398], 0xcd53bc6e
mov dword [ebp - 0x398], 0
jmp 0x43ba91
mov eax, dword [ebp - 0x398]
inc eax
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x398], 0
jg 0x43babb
mov byte [ebp - 0xc4], 0
lea eax, [ebp - 0xc4]
push eax
push 1
push 0x72ad
push 1
call fcn.004305ae
add esp, 0x10
jmp 0x43ba84
jmp 0x43ba61
mov dword [ebp - 0xc], 0
jmp 0x43bacd
mov eax, dword [ebp - 0xc]
dec eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jl 0x43bd2f
mov dword [ebp - 0x160], 0xbf8b243e
mov dword [ebp - 0x3a0], 1
mov dword [ebp - 0x12c], 0xfffffff8
mov dword [ebp - 0xa10], 0xb7f45b6
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x3a8]
sub eax, 0x6f44401d
je 0x43bc79
cmp dword [ebp - 0x160], 0
jle 0x43bb29
mov dword [ebp - 0x9e0], 1
jmp 0x43bb30
and dword [ebp - 0x9e0], 0
mov eax, dword [ebp - 0x160]
cmp dword [ebp - 0x9e0], eax
jle 0x43bb4a
mov dword [ebp - 0x9e8], 1
jmp 0x43bb51
and dword [ebp - 0x9e8], 0
cmp dword [ebp - 0x9e8], 1
je 0x43bb66
mov dword [ebp - 0xc5c], 1
jmp 0x43bb6d
and dword [ebp - 0xc5c], 0
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x160c], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1460], eax
mov eax, dword [ebp - 0x3a0]
mov dword [ebp - 0x1650], eax
cmp dword [ebp - 0x160], 0xe44fa3fd
jb 0x43bba6
mov dword [ebp - 0x9f0], 1
jmp 0x43bbad
and dword [ebp - 0x9f0], 0
mov eax, dword [ebp - 0xc]
imul eax, dword [ebp - 0x9f0]
test eax, eax
je 0x43bbd0
mov eax, 0x5c6a81d6
test eax, eax
je 0x43bbd0
mov dword [ebp - 0xc64], 1
jmp 0x43bbd7
and dword [ebp - 0xc64], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x3a8]
mov dword [ebp - 0xc6c], eax
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0xc6c]
mov dword [ebp + eax*4 - 0x3a8], ecx
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x3b0], eax
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x1468], eax
cmp dword [ebp - 0x3a0], 0x2c7e
jge 0x43bc30
mov dword [ebp - 0x9f8], 1
jmp 0x43bc37
and dword [ebp - 0x9f8], 0
mov eax, dword [ebp - 0x3a0]
cmp dword [ebp - 0x9f8], eax
jl 0x43bc51
mov dword [ebp - 0xa00], 1
jmp 0x43bc58
and dword [ebp - 0xa00], 0
mov eax, dword [ebp - 0xa00]
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
je 0x43bc79
mov dword [ebp - 0xa08], 1
jmp 0x43bc80
and dword [ebp - 0xa08], 0
mov eax, dword [ebp - 0xa08]
mov dword [ebp - 0xa10], eax
cmp dword [ebp - 0xa10], 0
jne 0x43bca4
cmp dword [ebp - 0xc], 0
jne 0x43bca4
and dword [ebp - 0xa18], 0
jmp 0x43bcae
mov dword [ebp - 0xa18], 1
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0xa18], eax
je 0x43bcc5
mov dword [ebp - 0xa20], 1
jmp 0x43bccc
and dword [ebp - 0xa20], 0
mov eax, dword [ebp - 0x3a0]
cmp dword [ebp - 0xa20], eax
je 0x43bd11
mov dword [ebp - 0x12c], 0
jmp 0x43bcf3
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 1
jge 0x43bd0f
mov eax, dword [ebp - 0x12c]
mov dword [ebp + eax*4 - 0x3a8], 0xcc9d6c84
jmp 0x43bce6
jmp 0x43bd1c
cmp dword [ebp - 0x3b0], 0
je 0x43bd1c
jmp 0x43bd2f
cmp dword [ebp - 0x3b0], 0
je 0x43bd2a
jmp 0x43bac6
jmp 0x43bac6
mov dword [ebp - 0x168], 0x7f6af112
mov dword [ebp - 0x161c], 0x9fb37b04
mov dword [ebp - 0x3c8], 0x9226c312
mov dword [ebp - 0xca4], 0xfffffffa
mov dword [ebp - 0x228], 0x14f98caf
mov dword [ebp - 0x238], 0x2d1a4e66
mov dword [ebp - 0x1470], 0xec326874
mov dword [ebp - 0xc74], 1
mov dword [ebp - 0xcac], 0x30bd
push 2
lea ecx, [ebp - 0x1648]
call fcn.00422862
mov dword [ebp - 0x3b8], 0
jmp 0x43bdaf
mov eax, dword [ebp - 0x3b8]
inc eax
mov dword [ebp - 0x3b8], eax
cmp dword [ebp - 0x3b8], 2
jge 0x43bdd1
push dword [ebp - 0x3b8]
lea ecx, [ebp - 0x1648]
call fcn.00422927
mov dword [eax], 0xfffffff9
jmp 0x43bda2
mov dword [ebp - 0x168], 0x1d
jmp 0x43bdea
mov eax, dword [ebp - 0x168]
dec eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 6
je 0x43c3e5
mov dword [ebp - 0x170], 1
mov dword [ebp - 0xa90], 0xfffffff9
mov dword [ebp - 0x13c], 0x2db785b6
mov dword [ebp - 0x230], 0xfffffffd
mov dword [ebp - 0xc84], 0
mov dword [ebp - 0x498], 0xffffffff
mov dword [ebp - 0x3c0], 0
jmp 0x43be4c
mov eax, dword [ebp - 0x3c0]
inc eax
mov dword [ebp - 0x3c0], eax
cmp dword [ebp - 0x3c0], 2
jge 0x43be68
mov eax, dword [ebp - 0x3c0]
mov dword [ebp + eax*4 - 0xc0c], 0x3fa75c19
jmp 0x43be3f
mov dword [ebp - 0x170], 0
jmp 0x43be81
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 1
jg 0x43c11f
mov dword [ebp - 0x1654], 0x58a0
mov dword [ebp - 0xc7c], 0xfffffffb
mov dword [ebp - 0x1478], 7
mov dword [ebp - 0x162c], 0x83303773
mov dword [ebp - 0xa50], 5
push 3
lea ecx, [ebp - 0x11fc]
call fcn.00422862
mov dword [ebp - 0xc8c], 0xfffffff6
mov dword [ebp - 0xc94], 0
push 1
push 0x625e
lea eax, [ebp - 0x11fc]
push eax
push 0x909
push 1
push 0x1d99
lea eax, [ebp - 0x1480]
push eax
call fcn.004308a3
add esp, 0x1c
push 0x5db
push 0x7aee
push 1
lea eax, [ebp - 0xc74]
push eax
push 0x2bc
push 0x5670
push 0x5812
lea eax, [ebp - 0x3c8]
push eax
push 0x1b5b
push 0x7260
push 0x3f8a
lea eax, [ebp - 0xa50]
push eax
push 0x17a8
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x168]
push eax
lea eax, [ebp - 0xa90]
push eax
push 0x6337
push 0xc96
push 1
lea eax, [ebp - 0x11fc]
push eax
push 0x5ff8
push 0x6ee0
push 0x3b5e
lea eax, [ebp - 0xc7c]
push eax
lea eax, [ebp - 0x230]
push eax
push 1
call fcn.004309ca
add esp, 0x68
mov eax, dword [ebp - 0x168]
neg eax
cmp dword [ebp - 0xc84], eax
jg 0x43bfb9
mov dword [ebp - 0xa28], 1
jmp 0x43bfc0
and dword [ebp - 0xa28], 0
cmp dword [ebp - 0xa28], 6
jb 0x43bfd5
mov dword [ebp - 0xa30], 1
jmp 0x43bfdc
and dword [ebp - 0xa30], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc0c]
add eax, 0x409f8fea
imul eax, dword [ebp - 0xa30]
cmp eax, 0x49dd
jg 0x43c008
mov dword [ebp - 0xa38], 1
jmp 0x43c00f
and dword [ebp - 0xa38], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc0c]
imul eax, dword [ebp - 0xa38]
cmp eax, 0x121adf56
jg 0x43c036
mov dword [ebp - 0xa40], 1
jmp 0x43c03d
and dword [ebp - 0xa40], 0
cmp dword [ebp - 0xa40], 0x4c38
jge 0x43c055
mov dword [ebp - 0xa48], 1
jmp 0x43c05c
and dword [ebp - 0xa48], 0
mov eax, dword [ebp - 0x3c8]
cmp dword [ebp - 0xa48], eax
jne 0x43c073
cmp dword [ebp - 0x13c], 0
je 0x43c088
cmp dword [ebp - 0xa50], 0
je 0x43c088
mov dword [ebp - 0xa58], 1
jmp 0x43c08f
and dword [ebp - 0xa58], 0
mov eax, dword [ebp - 0x498]
cmp dword [ebp - 0xa58], eax
jl 0x43c0a9
mov dword [ebp - 0xa60], 1
jmp 0x43c0b0
and dword [ebp - 0xa60], 0
mov eax, dword [ebp - 0xa60]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x3c8]
cmp dword [ebp - 0xc8c], eax
jge 0x43c0d6
mov dword [ebp - 0xa68], 1
jmp 0x43c0dd
and dword [ebp - 0xa68], 0
mov eax, dword [ebp - 0x228]
add eax, dword [ebp - 0xa68]
cmp eax, 0x342bb1e5
jne 0x43c0fc
mov dword [ebp - 0xa70], 1
jmp 0x43c103
and dword [ebp - 0xa70], 0
mov eax, dword [ebp - 0xa70]
mov dword [ebp - 0xc94], eax
lea ecx, [ebp - 0x11fc]
call fcn.00422922
jmp 0x43be74
mov dword [ebp - 0x13c], 0
jmp 0x43c138
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0xf
jge 0x43c3e0
mov dword [ebp - 0x134], 1
mov dword [ebp - 0xab8], 0x1c63cc5d
mov dword [ebp - 0xcbc], 0x69bd
cmp dword [ebp - 0x134], 0
jne 0x43c178
mov dword [ebp - 0xa78], 1
jmp 0x43c17f
and dword [ebp - 0xa78], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc0c]
mov dword [ebp - 0x165c], eax
mov eax, 0xffff
test eax, eax
je 0x43c1b0
cmp dword [ebp - 0x238], 0
je 0x43c1b0
mov dword [ebp - 0xa80], 1
jmp 0x43c1b7
and dword [ebp - 0xa80], 0
mov eax, dword [ebp - 0xa78]
cmp eax, dword [ebp - 0xa80]
jge 0x43c1d1
mov dword [ebp - 0xa88], 1
jmp 0x43c1d8
and dword [ebp - 0xa88], 0
mov eax, dword [ebp - 0x228]
cmp eax, dword [ebp - 0xa88]
jg 0x43c1f2
mov dword [ebp - 0xc9c], 1
jmp 0x43c1f9
and dword [ebp - 0xc9c], 0
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x1488], eax
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0xca4]
mov dword [ebp - 0x163c], eax
mov dword [ebp - 0x228], 0x4c83b0f6
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc0c]
cmp eax, dword [ebp - 0x228]
jne 0x43c248
mov dword [ebp - 0xac8], 1
jmp 0x43c24f
and dword [ebp - 0xac8], 0
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x1490], eax
mov eax, dword [ebp - 0x498]
mov dword [ebp - 0x1664], eax
mov eax, dword [ebp - 0x498]
mov dword [ebp - 0x1498], eax
mov eax, dword [ebp - 0x170]
cmp dword [ebp - 0xcac], eax
jl 0x43c296
cmp dword [ebp - 0x134], 0
je 0x43c296
mov dword [ebp - 0xa98], 1
jmp 0x43c29d
and dword [ebp - 0xa98], 0
mov eax, dword [ebp - 0xa90]
cmp dword [ebp - 0xa98], eax
jle 0x43c2b7
mov dword [ebp - 0xaa0], 1
jmp 0x43c2be
and dword [ebp - 0xaa0], 0
mov eax, dword [ebp - 0x134]
add eax, dword [ebp - 0xaa0]
cmp eax, dword [ebp - 0x134]
jg 0x43c2de
mov dword [ebp - 0xaa8], 1
jmp 0x43c2e5
and dword [ebp - 0xaa8], 0
mov eax, dword [ebp - 0x230]
cmp dword [ebp - 0xaa8], eax
jle 0x43c2ff
mov dword [ebp - 0xab0], 1
jmp 0x43c306
and dword [ebp - 0xab0], 0
mov eax, dword [ebp - 0xab0]
mov dword [ebp - 0xab8], eax
cmp dword [ebp - 0xab8], 0xfffffffe
je 0x43c327
mov dword [ebp - 0xac0], 1
jmp 0x43c32e
and dword [ebp - 0xac0], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0xac0], eax
jle 0x43c348
mov dword [ebp - 0xcb4], 1
jmp 0x43c34f
and dword [ebp - 0xcb4], 0
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x164c], eax
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x14a0], eax
mov eax, dword [ebp - 0xcbc]
mov dword [ebp - 0x166c], eax
cmp dword [ebp - 0xac8], 5
jge 0x43c388
mov dword [ebp - 0xad0], 1
jmp 0x43c38f
and dword [ebp - 0xad0], 0
cmp dword [ebp - 0xad0], 0xfffa
jne 0x43c3a7
mov dword [ebp - 0xad8], 1
jmp 0x43c3ae
and dword [ebp - 0xad8], 0
mov eax, dword [ebp - 0x13c]
cmp dword [ebp - 0xad8], eax
jl 0x43c3c8
mov dword [ebp - 0xae0], 1
jmp 0x43c3cf
and dword [ebp - 0xae0], 0
mov eax, dword [ebp - 0xae0]
mov dword [ebp - 0x3c8], eax
jmp 0x43c12b
jmp 0x43bddd
mov dword [ebp - 0x238], 1
jmp 0x43c3fe
mov eax, dword [ebp - 0x238]
dec eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0
jl 0x43c495
or dword [ebp - 0x1170], 0xffffffff
or dword [ebp - 0x116c], 0xffffffff
or dword [ebp - 0x1168], 0xffffffff
or dword [ebp - 0x1164], 0xffffffff
lea ecx, [ebp - 0x4cb]
call fcn.00401b47
push eax
lea eax, [ebp - 0x1160]
push eax
lea eax, [ebp - 0x1170]
push eax
lea ecx, [ebp - 0x18e8]
call fcn.00422936
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1638]
call fcn.004228fc
mov dword [ebp - 0xcc4], 2
push 0
push 1
lea eax, [ebp - 0xcc4]
push eax
push 0x4d6f
lea eax, [ebp - 0x1638]
push eax
call fcn.00431970
add esp, 0x14
lea ecx, [ebp - 0x1638]
call fcn.00422922
jmp 0x43c3f1
lea ecx, [ebp - 0x1648]
call fcn.00422922
movzx eax, byte [ebp - 0x15]
test eax, eax
jne 0x43c4b2
jmp 0x43c88d
push 2
lea ecx, [ebp - 0x1214]
call fcn.00422862
mov dword [ebp - 0x3d0], 4
mov dword [ebp - 0xcd4], 5
push 1
lea ecx, [ebp - 0x128c]
call fcn.00422862
push 1
push 1
lea eax, [ebp - 0xccc]
push eax
lea eax, [ebp - 0x1214]
push eax
call fcn.00430fed
add esp, 0x10
lea eax, [ebp - 0x128c]
push eax
push 1
lea eax, [ebp - 0xccc]
push eax
push 1
call fcn.00431434
add esp, 0x10
mov dword [ebp - 0x3d0], 0
jmp 0x43c52d
mov eax, dword [ebp - 0x3d0]
inc eax
mov dword [ebp - 0x3d0], eax
cmp dword [ebp - 0x3d0], 1
jg 0x43c7d9
mov dword [ebp - 0x240], 0xffffffff
mov dword [ebp - 0x88], 1
mov dword [ebp - 0xce4], 0x62d17f49
mov dword [ebp - 0xcf4], 5
mov dword [ebp - 0x26c], 0
jmp 0x43c57b
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 4
jge 0x43c597
mov eax, dword [ebp - 0x26c]
mov dword [ebp + eax*4 - 0x1918], 0x392f
jmp 0x43c56e
mov dword [ebp - 0x88], 1
mov esi, dword [ebp - 0x88]
push 0
lea ecx, [ebp - 0x1214]
call fcn.00422927
sub esi, dword [eax]
cmp esi, 0xfffffffc
jle 0x43c661
mov dword [ebp - 0x240], 0
jmp 0x43c5d8
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 1
jg 0x43c618
mov byte [ebp - 0xc6], 0
push 1
push 0x4d47
push 0x3fb3
lea eax, [ebp - 0xc6]
push eax
push 1
push 0x27ec
push 1
push 0x1320
push 0x701e
call fcn.004314c8
add esp, 0x24
jmp 0x43c5cb
push 0x2022
push 0x3ab0
push 0x1200
lea eax, [ebp - 0xcd4]
push eax
push 0x5d51
push 0x2244
push 0x579
push 1
push 0x4f21
push 1
push 0x5ac8
push 0x7c7d
push 1
push 0x3cc5
call fcn.00431621
add esp, 0x38
jmp 0x43c6d1
mov dword [ebp - 0x88], 0
jmp 0x43c67a
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jg 0x43c69d
push 1
push 1
push 0x7e
push 0x6638
push 0x2551
call fcn.00431970
add esp, 0x14
jmp 0x43c66d
push 0x33db
push 0x328f
push 0x4a23
push 0x3f7d
push 1
push 0x451c
push 0x7236
push 1
push 0x7708
push 0x128
call fcn.004319fa
add esp, 0x28
cmp dword [ebp - 0x88], 0xffffffff
jge 0x43c6ef
mov eax, 0x38c46158
test eax, eax
je 0x43c6ef
mov dword [ebp - 0xae8], 1
jmp 0x43c6f6
and dword [ebp - 0xae8], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0xae8], eax
jle 0x43c710
mov dword [ebp - 0xaf0], 1
jmp 0x43c717
and dword [ebp - 0xaf0], 0
cmp dword [ebp - 0xaf0], 0x268d9a6
jne 0x43c72f
mov dword [ebp - 0xaf8], 1
jmp 0x43c736
and dword [ebp - 0xaf8], 0
push 0
lea ecx, [ebp - 0x128c]
call fcn.00422927
mov ecx, dword [ebp - 0xaf8]
cmp ecx, dword [eax]
jl 0x43c759
mov dword [ebp - 0xb00], 1
jmp 0x43c760
and dword [ebp - 0xb00], 0
mov eax, dword [ebp - 0x240]
cmp dword [ebp - 0xb00], eax
jl 0x43c77a
mov dword [ebp - 0xb08], 1
jmp 0x43c781
and dword [ebp - 0xb08], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1918]
cmp dword [ebp - 0xb08], eax
jge 0x43c7a2
mov dword [ebp - 0xcdc], 1
jmp 0x43c7a9
and dword [ebp - 0xcdc], 0
cmp dword [ebp - 0xce4], 0xdc46221e
jb 0x43c7c1
mov dword [ebp - 0xcec], 1
jmp 0x43c7c8
and dword [ebp - 0xcec], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0xcf4], eax
jmp 0x43c520
lea ecx, [ebp - 0x128c]
call fcn.00422922
lea ecx, [ebp - 0x1214]
call fcn.00422922
push 1
lea eax, [ebp - 0x196c]
push eax
xor edx, edx
inc edx
xor ecx, ecx
call fcn.00449b34
pop ecx
pop ecx
mov esi, eax
lea edi, [ebp - 0x17a8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x17a8]
lea edi, [ebp - 0xfc0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
cmp dword [ebp - 0xfc0], 0
je 0x43c83b
push 0
push dword [ebp - 0xfb8]
push dword [ebp - 0xfbc]
call dword [ebp - 0xfc0]
jmp 0x43c859
push 0xfe0
push 0x835
push 0xa40
push 0xee5
push 0
call dword [sym.imp.USER32.dll_SetRect]
jmp 0x43c88d
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xd04], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xcfc], eax
push 1
push dword [ebp - 0xcfc]
push 0x290
push dword [ebp - 0xd04]
push 0x42e7
call fcn.0042e99f
add esp, 0x14
pop edi
pop esi
mov esp, ebp
pop ebp
ret