Function at 0x42664e
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Encrypt data using speck

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c2109
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x235c
call fcn.004be310
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x40]
test eax, eax
je 0x4381d8
lea eax, [ebp + 0x1c]
mov dword [ebp - 0x1454], eax
lea eax, [ebp + 0x28]
mov dword [ebp - 0x12e0], eax
lea eax, [ebp + 8]
mov dword [ebp - 0x136c], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x1374], eax
mov eax, dword [ebp + 0x3c]
mov dword [ebp - 0x135c], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x1354], eax
mov eax, dword [ebp + 0x44]
mov dword [ebp - 0x1364], eax
mov eax, dword [ebp + 0x4c]
mov dword [ebp - 0x137c], eax
mov eax, dword [ebp - 0x12e0]
movzx eax, byte [eax]
test eax, eax
je 0x438029
mov eax, dword [ebp - 0x1454]
mov dword [ebp - 0x145c], eax
mov eax, dword [ebp - 0x145c]
movzx eax, byte [eax]
test eax, eax
je 0x438006
push 3
lea ecx, [ebp - 0x1768]
call fcn.004392e4
mov dword [ebp - 0x208], 0xaeef20fe
mov dword [ebp - 0x1d50], 0x221e9c96
mov dword [ebp - 0x2000], 0x196ee4e9
mov dword [ebp - 0x1d74], 0x3b2c57e7
mov dword [ebp - 0x1f9c], 0x2a96950a
mov dword [ebp - 0x1d7c], 0xc694a61b
mov dword [ebp - 0x146c], 0
mov dword [ebp - 0x2004], 2
mov dword [ebp - 0x1d84], 0x193208a
push 0x2be9
lea eax, [ebp - 0x1fac]
push eax
push 0x1fdf
lea eax, [ebp - 0x1768]
push eax
push 0x6234
push 1
push 1
push 1
call fcn.004075c8
add esp, 0x20
mov dword [ebp - 0x208], 0
jmp 0x4267a4
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 2
jg 0x426997
mov dword [ebp - 0x2d0], 0xffffffff
mov dword [ebp - 0x1d8c], 0xc6c8951b
mov dword [ebp - 0xac], 0
jmp 0x4267de
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 3
jge 0x4267fa
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x1e78], 1
jmp 0x4267d1
mov dword [ebp - 0xac], 0
jmp 0x426813
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 2
jge 0x42682f
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x21f0], 0x6c37fc05
jmp 0x426806
mov byte [ebp - 0x148], 0
movzx eax, byte [ebp - 0x148]
test eax, eax
je 0x426847
call dword [0xab73fc]
mov dword [ebp - 0x2d0], 0
jmp 0x426860
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 2
jg 0x426992
mov dword [ebp - 0x200c], 0xb7928fbc
mov dword [ebp - 0x734], 0x5300
mov dword [ebp - 0x634], 0
jmp 0x42689a
mov eax, dword [ebp - 0x634]
inc eax
mov dword [ebp - 0x634], eax
cmp dword [ebp - 0x634], 3
jge 0x4268b6
mov eax, dword [ebp - 0x634]
mov dword [ebp + eax*4 - 0x236c], 0xd8f6efba
jmp 0x42688d
push dword [ebp - 0x2d0]
lea ecx, [ebp - 0x1768]
call fcn.004393d2
cmp dword [eax], 0
je 0x4268d1
jmp 0x426992
push 4
pop eax
shl eax, 1
mov esi, dword [ebp + eax - 0x1e78]
push dword [ebp - 0x208]
lea ecx, [ebp - 0x1768]
call fcn.004393d2
cmp esi, dword [eax]
jl 0x4268fe
mov dword [ebp - 0x1464], 1
jmp 0x426905
and dword [ebp - 0x1464], 0
push dword [ebp - 0x208]
lea ecx, [ebp - 0x1768]
call fcn.004393d2
cmp dword [ebp - 0x146c], 0xaa3e8f08
jae 0x42692e
mov dword [ebp - 0xbe4], 1
jmp 0x426935
and dword [ebp - 0xbe4], 0
mov eax, dword [ebp - 0x734]
mov dword [ebp - 0x1474], eax
mov eax, dword [ebp - 0xbe4]
mov dword [ebp - 0x16b0], eax
mov eax, dword [ebp - 0x734]
inc eax
mov dword [ebp - 0x734], eax
mov eax, dword [ebp - 0x1474]
cmp eax, dword [ebp - 0x16b0]
jne 0x426974
mov dword [ebp - 0x109c], 1
jmp 0x42697b
and dword [ebp - 0x109c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x109c]
mov dword [ebp + eax - 0x1e78], ecx
jmp 0x426853
jmp 0x426797
lea ecx, [ebp - 0x1768]
call fcn.004393b6
mov dword [ebp - 0x5dc], 0x91a049fe
mov dword [ebp - 0x1d94], 0
mov dword [ebp - 0x1fbc], 0
mov dword [ebp - 0x1d9c], 0xfffffffc
mov dword [ebp - 0x2014], 0x70cd5099
push 3
lea ecx, [ebp - 0x1ea8]
call fcn.004392e4
mov dword [ebp - 0x16b8], 0x58018d9d
push 1
push 0x18cf
push 0x44c4
push 1
push 0x6699
push 0x41ae
push 0x7282
push 0x60a3
push 0
push 0x6061
push 0x3f15
push 0x194c
push 0x46a
push 0x4df8
lea eax, [ebp - 0x1da4]
push eax
push 0xd9e
lea eax, [ebp - 0x1ea8]
push eax
push 0x5ab5
push 0x5236
push 0x7b1f
push 0x3a75
push 0x3672
push 0x15a8
push 0x3cc2
push 0x517c
push 0x3e24
push 1
push 1
push 0x44fe
push 0x59ce
call fcn.0042479d
add esp, 0x78
mov dword [ebp - 0x5dc], 0xffffffea
jmp 0x426a97
mov eax, dword [ebp - 0x5dc]
inc eax
mov dword [ebp - 0x5dc], eax
cmp dword [ebp - 0x5dc], 1
jg 0x426b80
push 3
lea ecx, [ebp - 0x1e98]
call fcn.004392e4
mov dword [ebp - 0x1fcc], 0x76038591
mov dword [ebp - 0x1dac], 0xd870a326
push 4
lea ecx, [ebp - 0x1e88]
call fcn.004392e4
push 0
lea eax, [ebp - 0x348]
push eax
push 0
push 1
push 0x1f76
lea eax, [ebp - 0x1e98]
push eax
push 0x4e89
call fcn.0040ff98
add esp, 0x1c
mov dword [ebp - 0x348], 0
jmp 0x426b11
mov eax, dword [ebp - 0x348]
inc eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 4
jge 0x426b33
push dword [ebp - 0x348]
lea ecx, [ebp - 0x1e88]
call fcn.004393d2
mov dword [eax], 1
jmp 0x426b04
push 0
push 0
push 0x610f
push 0x504d
push 1
push 0x298e
lea eax, [ebp - 0x16b8]
push eax
push 0
push 0x719
push 0x14ef
push 1
call fcn.004094b0
add esp, 0x2c
lea ecx, [ebp - 0x1e88]
call fcn.004393b6
lea ecx, [ebp - 0x1e98]
call fcn.004393b6
jmp 0x426a8a
lea ecx, [ebp - 0x1ea8]
call fcn.004393b6
push 3
lea ecx, [ebp - 0x1788]
call fcn.004392e4
mov dword [ebp - 0x10a4], 0xb871
mov dword [ebp - 0x10d0], 0xffffffff
mov dword [ebp - 0x10c8], 0xffffffff
mov dword [ebp - 0x10d8], 0xfffffffd
push 2
lea ecx, [ebp - 0x18e4]
call fcn.004392e4
mov dword [ebp - 0x16c0], 0x6a8
mov dword [ebp - 0x16c8], 0xfffffff7
mov dword [ebp - 0x16d0], 0xfffffffb
mov dword [ebp - 0x37c], 0
jmp 0x426c04
mov eax, dword [ebp - 0x37c]
inc eax
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 2
jge 0x426c26
push dword [ebp - 0x37c]
lea ecx, [ebp - 0x18e4]
call fcn.004393d2
mov dword [eax], 9
jmp 0x426bf7
lea eax, [ebp - 0x18e4]
push eax
push 0x6f39
lea eax, [ebp - 0x10d0]
push eax
lea eax, [ebp - 0x10a4]
push eax
push 0
lea eax, [ebp - 0x10d8]
push eax
push 1
push 0x1e3b
push 0
push 0x4ad4
lea eax, [ebp - 0x10c8]
push eax
call fcn.0040e039
add esp, 0x2c
lea eax, [ebp - 0x16c0]
push eax
lea eax, [ebp - 0x10a4]
push eax
lea eax, [ebp - 0x10c8]
push eax
push 0x4485
push 1
lea eax, [ebp - 0x16c8]
push eax
push 0x34e
push 1
lea eax, [ebp - 0x10d0]
push eax
lea eax, [ebp - 0x16d0]
push eax
push 0x7277
push 0x589e
push 0x2744
push 0
push 0x63db
push 0x27a6
push 0x7dc5
push 0
push 0x6520
push 0x25ca
push 0x529a
push 0x1778
lea eax, [ebp - 0x10d8]
push eax
push 0x2a6e
push 0x55dd
push 0x5fe
push 0x137
push 0x3df8
push 1
lea eax, [ebp - 0x18e4]
push eax
push 0x2c36
push 0x26b4
push 0x7759
call fcn.0041a609
add esp, 0x84
lea ecx, [ebp - 0x18e4]
call fcn.004393b6
mov dword [ebp - 0x26c], 0xaeef20fe
mov dword [ebp - 0x201c], 0x221e9c96
push 2
lea ecx, [ebp - 0x1128]
call fcn.004392e4
mov dword [ebp - 0x764], 0x647dc4b4
mov dword [ebp - 0x7d0], 0xd9e2
mov dword [ebp - 0x76c], 0xffffffff
mov dword [ebp - 0x788], 0x814b11f3
mov dword [ebp - 0x10f8], 0xc5706b37
mov dword [ebp - 0x1118], 0xfffffffc
mov dword [ebp - 0x110c], 0xbe58ed0b
mov dword [ebp - 0x16e0], 0x7f4a1d2d
mov dword [ebp - 0x16e8], 0x839bf5bf
mov dword [ebp - 0x9c], 0
jmp 0x426db6
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 2
jge 0x426dd8
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x1128]
call fcn.004393d2
mov dword [eax], 0x3185
jmp 0x426da9
mov dword [ebp - 0x9c], 0
jmp 0x426df1
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 3
jge 0x426e0d
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x1a24], 3
jmp 0x426de4
lea eax, [ebp - 0x1128]
push eax
lea eax, [ebp - 0x764]
push eax
push 0xdaa
push 1
push 0
push 0xaa9
push 1
push 0x19d
push 0x7e21
push 1
push 1
push 0x5864
push 0x1df4
push 0
push 0x3a85
call fcn.00405fb5
add esp, 0x3c
push 0
lea ecx, [ebp - 0x1128]
call fcn.004393d2
mov ecx, dword [ebp - 0x76c]
cmp dword [eax], ecx
jle 0x426e75
mov dword [ebp - 0x10e0], 1
jmp 0x426e7c
and dword [ebp - 0x10e0], 0
mov eax, dword [ebp - 0x10e0]
mov dword [ebp - 0x764], eax
mov eax, dword [ebp - 0x788]
cmp dword [ebp - 0x764], eax
jl 0x426ea2
mov dword [ebp - 0x10e8], 1
jmp 0x426ea9
and dword [ebp - 0x10e8], 0
mov eax, dword [ebp - 0x76c]
imul eax, dword [ebp - 0x10e8]
cmp eax, dword [ebp - 0x76c]
jne 0x426eca
mov dword [ebp - 0x10f0], 1
jmp 0x426ed1
and dword [ebp - 0x10f0], 0
mov eax, dword [ebp - 0x10f0]
mov dword [ebp - 0x10f8], eax
cmp dword [ebp - 0x10f8], 0
je 0x426f02
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1a24], 0
je 0x426f02
mov dword [ebp - 0x1100], 1
jmp 0x426f09
and dword [ebp - 0x1100], 0
mov eax, dword [ebp - 0x7d0]
imul eax, dword [ebp - 0x1100]
imul eax, dword [ebp - 0x788]
cmp eax, 0xdbcabebf
ja 0x426f30
mov dword [ebp - 0x1108], 1
jmp 0x426f37
and dword [ebp - 0x1108], 0
push 1
lea ecx, [ebp - 0x1128]
call fcn.004393d2
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1108]
jle 0x426f5a
mov dword [ebp - 0x1110], 1
jmp 0x426f61
and dword [ebp - 0x1110], 0
mov eax, dword [ebp - 0x1110]
mov dword [ebp - 0x1118], eax
cmp dword [ebp - 0x1118], 0
je 0x426f91
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1a24], 0
je 0x426f91
mov dword [ebp - 0x16d8], 1
jmp 0x426f98
and dword [ebp - 0x16d8], 0
push 0
lea ecx, [ebp - 0x1128]
call fcn.004393d2
push 0
lea ecx, [ebp - 0x1128]
call fcn.004393d2
mov dword [ebp - 0x110c], 0x3ed23c5a
mov eax, dword [ebp - 0x110c]
mov dword [ebp - 0x16e0], eax
cmp dword [ebp - 0x7d0], 0xa898cbdb
je 0x426fe0
mov dword [ebp - 0x1094], 1
jmp 0x426fe7
and dword [ebp - 0x1094], 0
push 0
lea ecx, [ebp - 0x1128]
call fcn.004393d2
mov ecx, dword [ebp - 0x1094]
cmp ecx, dword [eax]
jne 0x42700a
mov dword [ebp - 0xca8], 1
jmp 0x427011
and dword [ebp - 0xca8], 0
cmp dword [ebp - 0xca8], 0xfffffffa
je 0x427026
mov dword [ebp - 0x7d8], 1
jmp 0x42702d
and dword [ebp - 0x7d8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1a24]
add eax, dword [ebp - 0x7d8]
imul eax, dword [ebp - 0x788]
mov dword [ebp - 0x16e8], eax
lea ecx, [ebp - 0x1128]
call fcn.004393b6
mov dword [ebp - 0x1db4], 0x196ee4e9
mov dword [ebp - 0x16c], 0xfffffffa
mov dword [ebp - 0x384], 0xe5e53494
mov dword [ebp - 0x1700], 0x8642e5f0
cmp dword [ebp - 0x16c], 0
je 0x427119
mov dword [ebp - 0x16f8], 0x7f37c04c
mov dword [ebp - 0x16f0], 0xf33f23e9
push 0x5fb2
push 0x4c17
push 0x66c1
push 1
push 1
push 0xe4
push 0
push 0xbd4
push 0x3b2c
push 1
push 1
push 0x51ce
push 0xf8a
push 1
push 0x53e8
call fcn.00405fb5
add esp, 0x3c
push 1
lea eax, [ebp - 0x16c]
push eax
lea eax, [ebp - 0x16f0]
push eax
push 1
push 1
push 0x4209
push 0xfa3
push 0x7bd
lea eax, [ebp - 0x16f8]
push eax
call fcn.00407e1c
add esp, 0x24
jmp 0x4272d4
mov dword [ebp - 0xcb8], 0xfffffff8
mov dword [ebp - 0x488], 0
jmp 0x42713c
mov eax, dword [ebp - 0x488]
inc eax
mov dword [ebp - 0x488], eax
cmp dword [ebp - 0x488], 4
jge 0x427158
mov eax, dword [ebp - 0x488]
mov dword [ebp + eax*4 - 0x2114], 0
jmp 0x42712f
push 1
push 0
push 0x3bac
push 0x598e
push 1
lea eax, [ebp - 0x16c]
push eax
push 0x4b7e
push 1
push 0x7ab
push 0x3595
push 1
call fcn.004094b0
add esp, 0x2c
mov dword [ebp - 0x384], 1
mov eax, dword [ebp - 0x16c]
cmp dword [ebp - 0x384], eax
je 0x4271ae
mov dword [ebp - 0x1048], 1
jmp 0x4271b5
and dword [ebp - 0x1048], 0
mov eax, dword [ebp - 0x16c]
cmp eax, dword [ebp - 0x1048]
jge 0x4272a0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x16c]
cmp dword [ebp + eax - 0x2114], ecx
jl 0x4271ee
mov eax, 0x2ef7e291
test eax, eax
jne 0x4271ee
and dword [ebp - 0x7e0], 0
jmp 0x4271f8
mov dword [ebp - 0x7e0], 1
cmp dword [ebp - 0x7e0], 0x2455f992
jge 0x427216
cmp dword [ebp - 0x384], 0
jne 0x427216
and dword [ebp - 0xcb0], 0
jmp 0x427220
mov dword [ebp - 0xcb0], 1
mov eax, dword [ebp - 0x384]
cmp dword [ebp - 0xcb0], eax
jg 0x42723a
mov dword [ebp - 0x7e8], 1
jmp 0x427241
and dword [ebp - 0x7e8], 0
mov eax, dword [ebp - 0x7e8]
add eax, dword [ebp - 0x16c]
mov dword [ebp - 0xf18], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xf18]
mov dword [ebp + eax - 0x2114], ecx
mov eax, dword [ebp - 0xcb8]
cmp dword [ebp - 0xf18], eax
je 0x427280
mov dword [ebp - 0x7f0], 1
jmp 0x427287
and dword [ebp - 0x7f0], 0
mov eax, dword [ebp - 0x7f0]
add eax, 0x29564fc5
je 0x4272a0
mov dword [ebp - 0x7f8], 1
jmp 0x4272a7
and dword [ebp - 0x7f8], 0
mov eax, dword [ebp - 0xcb8]
cmp dword [ebp - 0x7f8], eax
jg 0x4272c1
mov dword [ebp - 0x10e4], 1
jmp 0x4272c8
and dword [ebp - 0x10e4], 0
mov eax, dword [ebp - 0x10e4]
mov dword [ebp - 0x1700], eax
mov dword [ebp - 0x1fdc], 0x3b2c57e7
mov dword [ebp - 0x1dbc], 0x2a96950a
mov dword [ebp - 0x1708], 1
mov byte [ebp - 0x14a], 0
push 1
push 0x280e
push 0x7caa
push 0x36c2
push 0x4635
push 0
lea eax, [ebp - 0x14a]
push eax
push 1
push 1
push 0xc0b
push 1
push 0
call fcn.0040ca7f
add esp, 0x30
push 0x62b7
push 1
push 0x6206
push 0x3dba
lea eax, [ebp - 0x1708]
push eax
push 0
push 1
push 0x6276
push 0
push 0x6d68
call fcn.004122a2
add esp, 0x28
mov dword [ebp - 0x2024], 0xc694a61b
mov dword [ebp - 0x16c4], 0
mov dword [ebp - 0x1710], 0xfffffff6
mov dword [ebp - 0x1dc4], 0x3531f145
mov dword [ebp - 0x1fec], 0x88586fd5
mov dword [ebp - 0x1dcc], 0xffffffff
mov dword [ebp - 0x202c], 0x906d8bc0
push 3
lea ecx, [ebp - 0x1a3c]
call fcn.004392e4
mov dword [ebp - 0x350], 0
jmp 0x4273c9
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 1
jge 0x4273e5
mov eax, dword [ebp - 0x350]
mov dword [ebp + eax*4 - 0x1dd4], 0
jmp 0x4273bc
push 0
push 0x3432
push 0x69b3
push 0
push 0x3cd7
lea eax, [ebp - 0x350]
push eax
push 0x5e9c
push 0
lea eax, [ebp - 0x1a3c]
push eax
push 0x5c7d
call fcn.004087af
add esp, 0x28
push 0xb77
lea eax, [ebp - 0x1710]
push eax
push 1
push 1
push 0x54ec
push 0
push 0x680e
push 0x18aa
push 0x5857
push 0
push 0x401
call fcn.0040b0d5
add esp, 0x2c
lea eax, [ebp - 0x1a3c]
push eax
push 0
push 0
push 0x7cd3
push 0x7c7d
push 0x300c
push 1
call fcn.00409a48
add esp, 0x1c
lea ecx, [ebp - 0x1a3c]
call fcn.004393b6
mov dword [ebp - 0x1ffc], 2
mov dword [ebp - 0x11c], 0xfffffffd
mov dword [ebp - 0x808], 0x443ac46d
mov dword [ebp - 0x1718], 6
mov dword [ebp - 0x11c], 0
jmp 0x4274bf
mov eax, dword [ebp - 0x11c]
dec eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0xfffffff3
jl 0x427704
mov dword [ebp - 0x174], 0xfffffff6
mov dword [ebp - 0x374], 0xf4c6
mov dword [ebp - 0x174], 0xfffffff0
jmp 0x4274f9
mov eax, dword [ebp - 0x174]
dec eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0xffffffe4
jle 0x42753f
mov byte [ebp - 0x14c], 0
push 1
push 0x66ab
push 0x2d2a
push 0x2de0
push 0x617b
push 1
push 0x2db1
push 1
push 1
lea eax, [ebp - 0x14c]
push eax
push 1
push 0
call fcn.0040ca7f
add esp, 0x30
jmp 0x4274ec
cmp dword [ebp - 0x174], 0
jne 0x42755a
mov eax, 0x3fe5e81a
test eax, eax
jne 0x42755a
and dword [ebp - 0xcc0], 0
jmp 0x427564
mov dword [ebp - 0xcc0], 1
cmp dword [ebp - 0x174], 0
jge 0x427579
mov dword [ebp - 0x800], 1
jmp 0x427580
and dword [ebp - 0x800], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x800], eax
jle 0x4275a3
cmp dword [ebp - 0x1718], 0
je 0x4275a3
mov dword [ebp - 0xf20], 1
jmp 0x4275aa
and dword [ebp - 0xf20], 0
mov eax, dword [ebp - 0xcc0]
mov dword [ebp - 0x808], eax
mov eax, dword [ebp - 0x808]
cmp eax, dword [ebp - 0xf20]
jge 0x4275d0
mov dword [ebp - 0x810], 1
jmp 0x4275d7
and dword [ebp - 0x810], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x810], eax
jl 0x4275f1
mov dword [ebp - 0xcc8], 1
jmp 0x4275f8
and dword [ebp - 0xcc8], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0xcc8], eax
jge 0x427612
mov dword [ebp - 0x818], 1
jmp 0x427619
and dword [ebp - 0x818], 0
mov eax, dword [ebp - 0x818]
sub eax, 3
cmp eax, dword [ebp - 0x11c]
jne 0x4276a3
push 4
lea ecx, [ebp - 0x1a54]
call fcn.004392e4
mov dword [ebp - 0x490], 0
jmp 0x427650
mov eax, dword [ebp - 0x490]
inc eax
mov dword [ebp - 0x490], eax
cmp dword [ebp - 0x490], 4
jge 0x427672
push dword [ebp - 0x490]
lea ecx, [ebp - 0x1a54]
call fcn.004393d2
mov dword [eax], 0xe8ef
jmp 0x427643
push 3
lea ecx, [ebp - 0x1a54]
call fcn.004393d2
mov dword [ebp - 0x1050], eax
mov eax, dword [ebp - 0x1050]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x1050]
mov dword [ecx], eax
lea ecx, [ebp - 0x1a54]
call fcn.004393b6
jmp 0x4276ff
mov dword [ebp - 0x374], 0xffffffe7
jmp 0x4276bc
mov eax, dword [ebp - 0x374]
inc eax
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 0xfffffff8
je 0x4276f4
mov byte [ebp - 0x14e], 0
push 0x4629
push 1
lea eax, [ebp - 0x14e]
push eax
push 1
push 0x14ba
push 0
push 0x14f9
push 1
call fcn.0040b4f1
add esp, 0x20
jmp 0x4276af
cmp dword [ebp - 0x174], 0
je 0x4276ff
jmp 0x427704
jmp 0x4274b2
mov dword [ebp - 0x1ddc], 0x193208a
mov dword [ebp - 0xcd0], 0xe90
mov dword [ebp - 0x1728], 0xaa19c8
cmp dword [ebp - 0xcd0], 0x1027
jle 0x42783c
and dword [ebp - 0x498], 0
jmp 0x427748
mov eax, dword [ebp - 0x498]
inc eax
mov dword [ebp - 0x498], eax
cmp dword [ebp - 0x498], 0x5891
jge 0x427832
and dword [ebp - 0x394], 0
jmp 0x42776e
mov eax, dword [ebp - 0x394]
inc eax
mov dword [ebp - 0x394], eax
cmp dword [ebp - 0x394], 0x1a2e
jge 0x42782d
and dword [ebp - 0x4e4], 0
jmp 0x427794
mov eax, dword [ebp - 0x4e4]
inc eax
mov dword [ebp - 0x4e4], eax
cmp dword [ebp - 0x4e4], 0x39b
jge 0x427828
and dword [ebp - 0x39c], 0
jmp 0x4277ba
mov eax, dword [ebp - 0x39c]
inc eax
mov dword [ebp - 0x39c], eax
cmp dword [ebp - 0x39c], 0x44b8
jge 0x427823
mov eax, dword [ebp - 0x498]
mov ecx, dword [ebp - 0x394]
shl eax, cl
mov ecx, dword [ebp - 0x4e4]
sub ecx, dword [ebp - 0x39c]
sar eax, cl
cdq
mov dword [ebp - 0x1480], eax
mov dword [ebp - 0x147c], edx
push dword [ebp - 0x147c]
push dword [ebp - 0x1480]
lea ecx, [ebp - 0x2360]
call fcn.004019fe
pop ecx
pop ecx
mov ecx, eax
call fcn.00439195
push eax
call fcn.004ac497
pop ecx
lea ecx, [ebp - 0x2360]
call fcn.0043918b
jmp 0x4277ad
jmp 0x427787
jmp 0x427761
jmp 0x42773b
push 0
push 0
call dword [0xab72d8]
mov dword [ebp - 0x78c], 0xfffffffd
mov dword [ebp - 0x820], 0xffffffff
mov dword [ebp - 0x1720], 0x32bb11ac
mov dword [ebp - 0x58c], 0
jmp 0x427873
mov eax, dword [ebp - 0x58c]
inc eax
mov dword [ebp - 0x58c], eax
cmp dword [ebp - 0x58c], 3
jge 0x42788f
mov eax, dword [ebp - 0x58c]
mov dword [ebp + eax*4 - 0x2140], 0
jmp 0x427866
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2140]
mov dword [ebp - 0x78c], eax
mov eax, dword [ebp - 0x78c]
mov dword [ebp - 0x820], eax
mov eax, dword [ebp - 0x820]
mov dword [ebp - 0x1720], eax
push 0x76c0
lea eax, [ebp - 0x78c]
push eax
push 1
push 1
push 1
push 0x5e75
push 0
push 0x1d90
push 1
push 1
call fcn.00416c51
add esp, 0x28
and dword [ebp - 4], 0
cmp dword [ebp - 0xcd0], 0xd1b
jge 0x4278ff
push dword [ebp - 0x1728]
call fcn.004ac497
pop ecx
jmp 0x42791b
or dword [ebp - 4], 0xffffffff
jmp 0x427925
push 0x7849
push 0x481e
push 0x52
push 0x4858
push 0
push 0x684f
push 0x2f42
push 0
lea eax, [ebp - 0x1788]
push eax
push 0x610b
push 1
push 0x2fa6
push 0
lea eax, [ebp - 0x2034]
push eax
call fcn.00408c33
add esp, 0x38
mov dword [ebp - 0xdc], 4
mov dword [ebp - 0x358], 0x83303773
mov dword [ebp - 0x73c], 0xf98cafa3
mov dword [ebp - 0x360], 0x8c38ec32
mov dword [ebp - 0x114c], 0xfffffff6
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0xdc], eax
jne 0x4279b4
mov dword [ebp - 0xf28], 1
jmp 0x4279bb
and dword [ebp - 0xf28], 0
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x1e10], eax
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0xdc], eax
je 0x4279e1
mov dword [ebp - 0x828], 1
jmp 0x4279e8
and dword [ebp - 0x828], 0
imul eax, dword [ebp - 0x828], 0
add eax, 0x2fbb6bc3
cmp dword [ebp - 0xf28], eax
je 0x427a08
mov dword [ebp - 0x830], 1
jmp 0x427a0f
and dword [ebp - 0x830], 0
mov eax, 0x9a3df603
sub eax, dword [ebp - 0x830]
je 0x427a31
cmp dword [ebp - 0xdc], 0
je 0x427a31
mov dword [ebp - 0xcd8], 1
jmp 0x427a38
and dword [ebp - 0xcd8], 0
mov eax, dword [ebp - 0xcd8]
mov dword [ebp - 0x358], eax
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0x73c], eax
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0x203c], eax
mov eax, dword [ebp - 0x360]
mov dword [ebp - 0x1e1c], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x2008], eax
cmp dword [ebp - 0x360], 0xb34
jge 0x427a8c
mov dword [ebp - 0x838], 1
jmp 0x427a93
and dword [ebp - 0x838], 0
mov eax, dword [ebp - 0xdc]
cmp eax, dword [ebp - 0x838]
je 0x427aa8
cmp dword [ebp - 0x360], 0
or eax, 0xffffffff
je 0x427ab4
cmp dword [ebp - 0x358], 0
cmp dword [ebp - 0x360], 0
je 0x427bad
mov dword [ebp - 0x1730], 0xa74d4b4b
mov dword [ebp - 0x1740], 0xffffffff
mov dword [ebp - 0x1738], 0xffffffff
push 0x3a36
lea eax, [ebp - 0x358]
push eax
lea eax, [ebp - 0x360]
push eax
push 0x1156
push 0x5c3e
push 1
push 0x23bb
lea eax, [ebp - 0x1730]
push eax
push 0x712c
push 1
push 0x3fc3
push 0
push 0x7cae
push 1
push 0x6a7
push 0x7a59
push 0x46e
push 1
lea eax, [ebp - 0x73c]
push eax
push 0x1c05
push 0xfe3
push 0x7928
push 0x22cc
push 0x4f35
lea eax, [ebp - 0x114c]
push eax
push 0x4419
push 0
lea eax, [ebp - 0x1738]
push eax
push 0x5ac9
lea eax, [ebp - 0x1740]
push eax
call fcn.00419224
add esp, 0x78
mov byte [ebp - 0x150], 0
lea eax, [ebp - 0x150]
push eax
push 0x4f45
push 1
push 0x4160
push 1
push 1
push 0x5cd2
push 1
push 0
call fcn.0040fccd
add esp, 0x24
jmp 0x427d6c
mov dword [ebp - 0x1748], 0xb48fe2d5
mov dword [ebp - 0x3a4], 0
jmp 0x427bd0
mov eax, dword [ebp - 0x3a4]
inc eax
mov dword [ebp - 0x3a4], eax
cmp dword [ebp - 0x3a4], 2
jge 0x427bec
mov eax, dword [ebp - 0x3a4]
mov dword [ebp + eax*4 - 0x21f8], 0xfffffffc
jmp 0x427bc3
mov dword [ebp - 0x840], 0x1854
mov dword [ebp - 0x1750], 0xaa1a20
cmp dword [ebp - 0x840], 0x1b77
jle 0x427cea
and dword [ebp - 0x3b4], 0
jmp 0x427c26
mov eax, dword [ebp - 0x3b4]
inc eax
mov dword [ebp - 0x3b4], eax
cmp dword [ebp - 0x3b4], 0x680f
jge 0x427cea
and dword [ebp - 0x4ec], 0
jmp 0x427c4c
mov eax, dword [ebp - 0x4ec]
inc eax
mov dword [ebp - 0x4ec], eax
cmp dword [ebp - 0x4ec], 0x2910
jge 0x427ce5
and dword [ebp - 0x3ac], 0
jmp 0x427c72
mov eax, dword [ebp - 0x3ac]
inc eax
mov dword [ebp - 0x3ac], eax
cmp dword [ebp - 0x3ac], 0x6cfe
jge 0x427ce0
and dword [ebp - 0x61c], 0
jmp 0x427c94
mov eax, dword [ebp - 0x61c]
inc eax
mov dword [ebp - 0x61c], eax
cmp dword [ebp - 0x61c], 0x5c14
jge 0x427cde
mov eax, dword [ebp - 0x4ec]
imul eax, dword [ebp - 0x3ac]
sub eax, dword [ebp - 0x61c]
or eax, dword [ebp - 0x3b4]
cdq
mov dword [ebp - 0x148c], eax
mov dword [ebp - 0x1488], edx
push dword [ebp - 0x1488]
push dword [ebp - 0x148c]
mov ecx, 0xab4298
call fcn.004391a0
jmp 0x427c87
jmp 0x427c65
jmp 0x427c3f
jmp 0x427c19
push 1
lea eax, [ebp - 0xdc]
push eax
push 0x172c
push 0
lea eax, [ebp - 0x1748]
push eax
push 0x172
lea eax, [ebp - 0x114c]
push eax
push 0x6b0e
lea eax, [ebp - 0x73c]
push eax
push 0
call fcn.0041cea0
add esp, 0x28
mov dword [ebp - 4], 2
cmp dword [ebp - 0x840], 0x1590
jge 0x427d46
mov edx, dword [ebp - 0x1750]
mov ecx, 0xab4298
call fcn.0043af56
jmp 0x427d62
or dword [ebp - 4], 0xffffffff
jmp 0x427d6c
mov dword [ebp - 0x26c], 0
jmp 0x427d85
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 2
jg 0x429737
push 2
lea ecx, [ebp - 0x1eb8]
call fcn.004392e4
mov dword [ebp - 0x4f4], 1
push 1
push 0x258c
push 0x497e
push 0x2282
push 0x315c
push 0x1889
push 0x14f7
push 1
lea eax, [ebp - 0x1eb8]
push eax
push 0x4837
push 0x57d8
push 0
push 0x3be8
push 0x1296
push 0x835
push 0x4e1c
push 1
push 0x25d0
lea eax, [ebp - 0x1bb0]
push eax
push 0x7804
call fcn.00417d91
add esp, 0x50
mov dword [ebp - 0x4f4], 0
jmp 0x427e26
mov eax, dword [ebp - 0x4f4]
inc eax
mov dword [ebp - 0x4f4], eax
cmp dword [ebp - 0x4f4], 1
jg 0x427e4b
push 0x2590
push 1
push 1
push 1
push 0x46d7
push 1
call fcn.0040838c
add esp, 0x18
jmp 0x427e19
lea ecx, [ebp - 0x1eb8]
call fcn.004393b6
mov dword [ebp - 0x2b8], 0xffffffff
push 0
push 0
push 0x101f
push 0
push 0x7e7b
push 1
push 0x616
call fcn.00420bd0
add esp, 0x1c
mov dword [ebp - 0x1758], 0x324ec2e0
mov dword [ebp - 0x1800], 0x6200
push 0
push 1
lea eax, [ebp - 0x1758]
push eax
push 0x7d2
lea eax, [ebp - 0x1800]
push eax
push 0x1833
push 1
call fcn.0041e41c
add esp, 0x1c
mov byte [ebp - 0x152], 0
push 1
push 1
push 1
push 0x135d
lea eax, [ebp - 0x152]
push eax
call fcn.00408491
add esp, 0x14
mov dword [ebp - 0x1bb8], 0xc6c8951b
mov dword [ebp - 0xce0], 1
mov dword [ebp - 0x848], 0x59b8bc58
mov dword [ebp - 0x144c], 0xfffffffb
mov dword [ebp - 0xa4], 0
jmp 0x427f1b
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jge 0x427f37
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x1158], 0x7d8e
jmp 0x427f0e
mov dword [ebp - 0xa4], 0
jmp 0x427f50
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jge 0x427f6c
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x2194], 0xffffffff
jmp 0x427f43
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1158]
mov dword [ebp - 0xce0], eax
mov eax, dword [ebp - 0xce0]
mov dword [ebp - 0x848], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1158]
cmp dword [ebp - 0x848], eax
jne 0x427fac
mov dword [ebp - 0x1808], 1
jmp 0x427fb3
and dword [ebp - 0x1808], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1158], 0
je 0x427fcf
mov dword [ebp - 0x11f8], 1
jmp 0x427fd6
and dword [ebp - 0x11f8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1158]
mov dword [ebp - 0x1bc0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1158]
mov dword [ebp - 0x1bc8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1158]
mov dword [ebp - 0x1bd0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1158]
mov dword [ebp - 0xf30], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xf30]
mov dword [ebp + eax - 0x2194], ecx
mov eax, dword [ebp - 0xf30]
mov dword [ebp - 0x144c], eax
mov dword [ebp - 0xcc], 0
jmp 0x42805a
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 3
jge 0x428076
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x1f18], 1
jmp 0x42804d
push 2
lea ecx, [ebp - 0x1ec8]
call fcn.004392e4
mov dword [ebp - 0x3bc], 1
push 0x1f03
push 0x15fd
lea eax, [ebp - 0x1ec8]
push eax
push 0x5484
push 1
push 1
push 0x3b75
push 0x4868
push 0x24f
push 0x2ad5
push 0
push 0
push 0x22f0
lea eax, [ebp - 0x1bd8]
push eax
call fcn.00407266
add esp, 0x38
mov dword [ebp - 0x3bc], 0
jmp 0x4280ec
mov eax, dword [ebp - 0x3bc]
inc eax
mov dword [ebp - 0x3bc], eax
cmp dword [ebp - 0x3bc], 1
jg 0x428114
push 1
push 1
push 0xa2d
push 0x55f4
push 0
push 0x35f4
call fcn.0040b25a
add esp, 0x18
jmp 0x4280df
lea ecx, [ebp - 0x1ec8]
call fcn.004393b6
mov dword [ebp - 0xcc], 0
jmp 0x428138
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 2
jge 0x428154
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x2218], 0x6c37fc05
jmp 0x42812b
push 4
lea ecx, [ebp - 0x294]
call fcn.004392e4
mov dword [ebp - 0xf38], 0
mov dword [ebp - 0x1200], 0xfffffffc
mov dword [ebp - 0x94], 0
jmp 0x42818e
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 4
jge 0x4281b0
push dword [ebp - 0x94]
lea ecx, [ebp - 0x294]
call fcn.004393d2
mov dword [eax], 0x87f2
jmp 0x428181
mov dword [ebp - 0x94], 0
jmp 0x4281c9
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x4281e5
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x1ed8], 3
jmp 0x4281bc
push 0
lea ecx, [ebp - 0x294]
call fcn.004393d2
cmp dword [eax], 0x65251c60
je 0x428206
mov dword [ebp - 0x850], 1
jmp 0x42820d
and dword [ebp - 0x850], 0
push 2
lea ecx, [ebp - 0x294]
call fcn.004393d2
push 1
lea ecx, [ebp - 0x294]
call fcn.004393d2
mov ecx, dword [ebp - 0x850]
cmp ecx, dword [eax]
jge 0x42823d
mov dword [ebp - 0xce8], 1
jmp 0x428244
and dword [ebp - 0xce8], 0
push 1
lea ecx, [ebp - 0x294]
call fcn.004393d2
mov ecx, dword [ebp - 0xce8]
cmp ecx, dword [eax]
jg 0x428267
mov dword [ebp - 0x858], 1
jmp 0x42826e
and dword [ebp - 0x858], 0
push 1
lea ecx, [ebp - 0x294]
call fcn.004393d2
mov ecx, dword [ebp - 0x858]
cmp ecx, dword [eax]
jge 0x428291
mov dword [ebp - 0x1590], 1
jmp 0x428298
and dword [ebp - 0x1590], 0
push 1
lea ecx, [ebp - 0x294]
call fcn.004393d2
push 1
lea ecx, [ebp - 0x294]
call fcn.004393d2
or eax, 0xffffffff
cmp eax, 0xbc4aee50
je 0x4282c8
mov dword [ebp - 0x1058], 1
jmp 0x4282cf
and dword [ebp - 0x1058], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1058]
mov dword [ebp + eax - 0x1ed8], ecx
push 0
lea ecx, [ebp - 0x294]
call fcn.004393d2
push 2
lea ecx, [ebp - 0x294]
call fcn.004393d2
push 1
lea ecx, [ebp - 0x294]
call fcn.004393d2
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x1ed8]
push 3
lea ecx, [ebp - 0x294]
call fcn.004393d2
cmp esi, dword [eax]
je 0x428333
mov dword [ebp - 0x860], 1
jmp 0x42833a
and dword [ebp - 0x860], 0
push 3
lea ecx, [ebp - 0x294]
call fcn.004393d2
mov ecx, dword [ebp - 0x860]
cmp ecx, dword [eax]
jge 0x42835d
mov dword [ebp - 0xcf0], 1
jmp 0x428364
and dword [ebp - 0xcf0], 0
push 1
lea ecx, [ebp - 0x294]
call fcn.004393d2
mov eax, dword [eax]
cmp eax, dword [ebp - 0xcf0]
jg 0x428387
mov dword [ebp - 0x868], 1
jmp 0x42838e
and dword [ebp - 0x868], 0
mov eax, dword [ebp - 0x868]
mov dword [ebp - 0xf38], eax
mov esi, dword [ebp - 0xf38]
push 1
lea ecx, [ebp - 0x294]
call fcn.004393d2
sub esi, dword [eax]
push 1
lea ecx, [ebp - 0x294]
call fcn.004393d2
cmp esi, dword [eax]
jle 0x4283e0
push 1
lea ecx, [ebp - 0x294]
call fcn.004393d2
cmp dword [eax], 0
jne 0x4283e0
xor eax, eax
inc eax
jne 0x4283e0
and dword [ebp - 0x870], 0
jmp 0x4283ea
mov dword [ebp - 0x870], 1
push 1
lea ecx, [ebp - 0x294]
call fcn.004393d2
mov ecx, dword [ebp - 0x870]
sub ecx, dword [eax]
mov dword [ebp - 0x1200], ecx
lea ecx, [ebp - 0x294]
call fcn.004393b6
mov byte [ebp - 0x154], 0
push 4
lea ecx, [ebp - 0x2a0]
call fcn.004392e4
mov dword [ebp - 0x890], 0
mov dword [ebp - 0x1208], 0xfffffffc
mov dword [ebp - 0xec], 0
jmp 0x428451
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 4
jge 0x428473
push dword [ebp - 0xec]
lea ecx, [ebp - 0x2a0]
call fcn.004393d2
mov dword [eax], 0x87f2
jmp 0x428444
mov dword [ebp - 0xec], 0
jmp 0x42848c
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 3
jge 0x4284a8
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x1ee8], 3
jmp 0x42847f
push 0
lea ecx, [ebp - 0x2a0]
call fcn.004393d2
cmp dword [eax], 0x65251c60
je 0x4284c9
mov dword [ebp - 0xcf8], 1
jmp 0x4284d0
and dword [ebp - 0xcf8], 0
push 2
lea ecx, [ebp - 0x2a0]
call fcn.004393d2
push 1
lea ecx, [ebp - 0x2a0]
call fcn.004393d2
mov ecx, dword [ebp - 0xcf8]
cmp ecx, dword [eax]
jge 0x428500
mov dword [ebp - 0x878], 1
jmp 0x428507
and dword [ebp - 0x878], 0
push 1
lea ecx, [ebp - 0x2a0]
call fcn.004393d2
mov ecx, dword [ebp - 0x878]
cmp ecx, dword [eax]
jg 0x42852a
mov dword [ebp - 0x10ec], 1
jmp 0x428531
and dword [ebp - 0x10ec], 0
push 1
lea ecx, [ebp - 0x2a0]
call fcn.004393d2
mov ecx, dword [ebp - 0x10ec]
cmp ecx, dword [eax]
jge 0x428554
mov dword [ebp - 0x179c], 1
jmp 0x42855b
and dword [ebp - 0x179c], 0
push 1
lea ecx, [ebp - 0x2a0]
call fcn.004393d2
push 1
lea ecx, [ebp - 0x2a0]
call fcn.004393d2
or eax, 0xffffffff
cmp eax, 0xbc4aee50
je 0x42858b
mov dword [ebp - 0x880], 1
jmp 0x428592
and dword [ebp - 0x880], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x880]
mov dword [ebp + eax - 0x1ee8], ecx
push 0
lea ecx, [ebp - 0x2a0]
call fcn.004393d2
push 2
lea ecx, [ebp - 0x2a0]
call fcn.004393d2
push 1
lea ecx, [ebp - 0x2a0]
call fcn.004393d2
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x1ee8]
push 3
lea ecx, [ebp - 0x2a0]
call fcn.004393d2
cmp esi, dword [eax]
je 0x4285f6
mov dword [ebp - 0xd00], 1
jmp 0x4285fd
and dword [ebp - 0xd00], 0
push 3
lea ecx, [ebp - 0x2a0]
call fcn.004393d2
mov ecx, dword [ebp - 0xd00]
cmp ecx, dword [eax]
jge 0x428620
mov dword [ebp - 0x888], 1
jmp 0x428627
and dword [ebp - 0x888], 0
push 1
lea ecx, [ebp - 0x2a0]
call fcn.004393d2
mov eax, dword [eax]
cmp eax, dword [ebp - 0x888]
jg 0x42864a
mov dword [ebp - 0xf40], 1
jmp 0x428651
and dword [ebp - 0xf40], 0
mov eax, dword [ebp - 0xf40]
mov dword [ebp - 0x890], eax
mov esi, dword [ebp - 0x890]
push 1
lea ecx, [ebp - 0x2a0]
call fcn.004393d2
sub esi, dword [eax]
push 1
lea ecx, [ebp - 0x2a0]
call fcn.004393d2
cmp esi, dword [eax]
jle 0x4286a3
push 1
lea ecx, [ebp - 0x2a0]
call fcn.004393d2
cmp dword [eax], 0
jne 0x4286a3
xor eax, eax
inc eax
jne 0x4286a3
and dword [ebp - 0xd08], 0
jmp 0x4286ad
mov dword [ebp - 0xd08], 1
push 1
lea ecx, [ebp - 0x2a0]
call fcn.004393d2
mov ecx, dword [ebp - 0xd08]
sub ecx, dword [eax]
mov dword [ebp - 0x1208], ecx
lea ecx, [ebp - 0x2a0]
call fcn.004393b6
movzx eax, byte [ebp - 0x154]
test eax, eax
je 0x4287cc
mov dword [ebp - 0x594], 0
jmp 0x4286fb
mov eax, dword [ebp - 0x594]
inc eax
mov dword [ebp - 0x594], eax
cmp dword [ebp - 0x594], 3
jge 0x428717
mov eax, dword [ebp - 0x594]
mov dword [ebp + eax*4 - 0x18fc], 0xa8eac8b1
jmp 0x4286ee
mov byte [ebp - 0x156], 0
movzx eax, byte [ebp - 0x156]
test eax, eax
je 0x428754
push 0x5b93
push 1
push 0x722d
push 1
push 0x731f
push 0
push 0x4a86
push 0x75
push 0xe3e
push 1
call fcn.00402c43
add esp, 0x28
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x18fc], 0xffffffe6
jmp 0x42877f
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x18fc]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x18fc], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x18fc], 9
jg 0x4287c6
push 0x7731
push 0x388c
push 0x5532
push 0x435e
push 1
push 0x2eac
push 1
push 0x342a
push 0
push 0x49f8
push 0x607e
call fcn.0040e039
add esp, 0x2c
jmp 0x428766
call dword [0xab73fc]
push 4
lea ecx, [ebp - 0x7c4]
call fcn.004392e4
mov dword [ebp - 0xd10], 0x35edade0
mov dword [ebp - 0x1060], 0x919adb82
mov dword [ebp - 0x8a0], 0xce3cb5af
mov dword [ebp - 0x1598], 1
mov dword [ebp - 0xb4], 0
jmp 0x42881a
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 3
jge 0x428836
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x1194], 0x2fdcba86
jmp 0x42880d
mov dword [ebp - 0xb4], 0
jmp 0x42884f
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 4
jge 0x428871
push dword [ebp - 0xb4]
lea ecx, [ebp - 0x7c4]
call fcn.004393d2
mov dword [eax], 0x65e3edfa
jmp 0x428842
or eax, 0xffffffff
je 0x428a30
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0x1194]
push 3
lea ecx, [ebp - 0x7c4]
call fcn.004393d2
cmp esi, dword [eax]
jne 0x4288a4
mov dword [ebp - 0x8a8], 1
jmp 0x4288ab
and dword [ebp - 0x8a8], 0
push 3
lea ecx, [ebp - 0x7c4]
call fcn.004393d2
mov esi, eax
push 1
lea ecx, [ebp - 0x7c4]
call fcn.004393d2
mov ecx, dword [esi]
cmp ecx, dword [eax]
jl 0x4288d9
mov dword [ebp - 0x898], 1
jmp 0x4288e0
and dword [ebp - 0x898], 0
mov eax, dword [ebp - 0x898]
mov dword [ebp - 0x1060], eax
mov dword [ebp - 0xd10], 0xaee5a986
mov eax, dword [ebp - 0x1060]
mov dword [ebp - 0x8a0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x8a0]
sub ecx, dword [ebp + eax - 0x1194]
mov eax, dword [ebp - 0xd10]
sub eax, ecx
cmp dword [ebp - 0x8a8], eax
jne 0x428931
mov dword [ebp - 0xf48], 1
jmp 0x428938
and dword [ebp - 0xf48], 0
push 3
lea ecx, [ebp - 0x7c4]
call fcn.004393d2
mov ecx, dword [ebp - 0xf48]
cmp ecx, dword [eax]
jl 0x42895b
mov dword [ebp - 0x8b0], 1
jmp 0x428962
and dword [ebp - 0x8b0], 0
push 3
lea ecx, [ebp - 0x7c4]
call fcn.004393d2
mov ecx, dword [ebp - 0x8b0]
cmp ecx, dword [eax]
jne 0x428985
mov dword [ebp - 0xd18], 1
jmp 0x42898c
and dword [ebp - 0xd18], 0
push 3
lea ecx, [ebp - 0x7c4]
call fcn.004393d2
mov ecx, dword [ebp - 0xd18]
sub ecx, dword [eax]
jne 0x4289bc
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1194], 0
jne 0x4289bc
and dword [ebp - 0x6a0], 0
jmp 0x4289c6
mov dword [ebp - 0x6a0], 1
push 3
lea ecx, [ebp - 0x7c4]
call fcn.004393d2
mov ecx, dword [ebp - 0x6a0]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1194]
cmp dword [ebp - 0x6a0], eax
jge 0x4289fc
mov dword [ebp - 0x8b8], 1
jmp 0x428a03
and dword [ebp - 0x8b8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1194]
imul eax, dword [ebp - 0x8b8]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x1194]
jg 0x428a30
mov dword [ebp - 0x1140], 1
jmp 0x428a37
and dword [ebp - 0x1140], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1194]
imul eax, dword [ebp - 0x1140]
mov dword [ebp - 0x1598], eax
lea ecx, [ebp - 0x7c4]
call fcn.004393b6
mov dword [ebp - 0x2b8], 0
jmp 0x428a75
cmp dword [ebp - 0x2b8], 2
jg 0x429732
mov dword [ebp - 0x17c], 0xfffffff8
mov dword [ebp - 0x8c0], 0x8b9dbea5
push 3
lea ecx, [ebp - 0x1a6c]
call fcn.004392e4
mov dword [ebp - 0x35c], 0
jmp 0x428abc
mov eax, dword [ebp - 0x35c]
inc eax
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 2
jge 0x428ad8
mov eax, dword [ebp - 0x35c]
mov dword [ebp + eax*4 - 0x194c], 0x3afc3718
jmp 0x428aaf
push 0x279b
push 0x3bb6
lea eax, [ebp - 0x35c]
push eax
push 0x940
push 0x37d1
push 1
push 0x55d
push 0x2a45
push 1
push 0
push 0x5c5d
push 0x31e2
lea eax, [ebp - 0x1a6c]
push eax
push 1
push 0x4a67
push 0x5989
push 0x3706
push 0x4bf6
push 0
push 0x1e6a
push 0x45cc
push 0x1c1a
push 0x2af1
push 0x2adf
push 0x5a35
push 0x1068
push 0x543a
push 1
push 0x2f24
push 0x1dfb
push 0x1166
call fcn.0040c07c
add esp, 0x7c
push 0xb7c
push 0x2c9d
push 0
push 0xa21
push 0x701f
push 0x7736
push 0
push 0x78da
push 0xd49
push 0x2340
push 1
lea eax, [ebp - 0x17c]
push eax
push 0x6f1e
push 0x3c06
push 1
push 0x740c
push 0x205c
call fcn.004215d1
add esp, 0x44
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x1be0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x17c]
mov dword [ebp + eax - 0x194c], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x17c]
cmp dword [ebp + eax - 0x194c], ecx
jg 0x428c00
mov dword [ebp - 0xd20], 1
jmp 0x428c07
and dword [ebp - 0xd20], 0
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x8c0], eax
mov eax, dword [ebp - 0x8c0]
sub eax, dword [ebp - 0x17c]
cmp dword [ebp - 0xd20], eax
jg 0x428c33
mov dword [ebp - 0x8c8], 1
jmp 0x428c3a
and dword [ebp - 0x8c8], 0
mov eax, dword [ebp - 0x17c]
cmp dword [ebp - 0x8c8], eax
jne 0x428c54
mov dword [ebp - 0xf50], 1
jmp 0x428c5b
and dword [ebp - 0xf50], 0
push 0
lea ecx, [ebp - 0x1a6c]
call fcn.004393d2
mov ecx, dword [ebp - 0xf50]
mov dword [eax], ecx
lea ecx, [ebp - 0x1a6c]
call fcn.004393b6
mov dword [ebp - 0x1be8], 0xb7928fbc
mov dword [ebp - 0x1218], 0x3efc07e1
mov dword [ebp - 0x1220], 0xbda18461
mov dword [ebp - 0x16b4], 6
push 2
lea ecx, [ebp - 0x1a9c]
call fcn.004392e4
push 3
lea ecx, [ebp - 0x1a84]
call fcn.004392e4
mov dword [ebp - 0x15a0], 0xac3efc16
mov dword [ebp - 0x1bf0], 6
push 0x59b9
push 1
push 0x3490
push 0x1c60
push 1
push 0x576c
lea eax, [ebp - 0x1a9c]
push eax
lea eax, [ebp - 0x1210]
push eax
push 1
call fcn.0040902a
add esp, 0x24
push 1
push 0
push 0x7fbd
push 0x4d38
push 0x41b4
push 0x7c15
lea eax, [ebp - 0x1a84]
push eax
push 1
lea eax, [ebp - 0x1210]
push eax
call fcn.004201e2
add esp, 0x24
push 0
push 1
push 0x1747
push 0x28c6
push 0
lea eax, [ebp - 0x16b4]
push eax
lea eax, [ebp - 0x1218]
push eax
push 0x108b
push 1
lea eax, [ebp - 0x15a0]
push eax
lea eax, [ebp - 0x1a9c]
push eax
push 0x16df
push 0x40da
lea eax, [ebp - 0x1220]
push eax
lea eax, [ebp - 0x1a84]
push eax
call fcn.00418c6b
add esp, 0x3c
lea ecx, [ebp - 0x1a84]
call fcn.004393b6
lea ecx, [ebp - 0x1a9c]
call fcn.004393b6
mov dword [ebp - 0x8d0], 0x5c96
push 2
lea ecx, [ebp - 0x1914]
call fcn.004392e4
push 1
push 0x3d65
push 0x7d61
push 0
push 0xa47
push 0
lea eax, [ebp - 0x1914]
push eax
lea eax, [ebp - 0x1bf8]
push eax
push 0
push 0x170d
call fcn.0041ba71
add esp, 0x28
push 1
lea eax, [ebp - 0x1914]
push eax
push 0x3aa
push 0
push 1
lea eax, [ebp - 0x8d0]
push eax
push 0x7e8
push 0x6c5d
push 1
call fcn.00411c76
add esp, 0x24
push 0x73e9
push 0
push 0xfc3
lea eax, [ebp - 0x1914]
push eax
push 0x5a88
push 0x1836
lea eax, [ebp - 0x8d0]
push eax
push 0x2973
push 1
push 0
push 1
push 0x1542
call fcn.00414209
add esp, 0x30
lea ecx, [ebp - 0x1914]
call fcn.004393b6
mov dword [ebp - 0xd28], 0x5844
mov dword [ebp - 0x173c], 0xaa1aa0
cmp dword [ebp - 0xd28], 0x5974
jle 0x428f12
and dword [ebp - 0x3c4], 0
jmp 0x428e91
mov eax, dword [ebp - 0x3c4]
inc eax
mov dword [ebp - 0x3c4], eax
cmp dword [ebp - 0x3c4], 0xfbc
jge 0x428f12
and dword [ebp - 0x4fc], 0
jmp 0x428eb3
mov eax, dword [ebp - 0x4fc]
inc eax
mov dword [ebp - 0x4fc], eax
cmp dword [ebp - 0x4fc], 0x3c28
jge 0x428f0d
mov eax, dword [ebp - 0x3c4]
imul eax, dword [ebp - 0x4fc]
cdq
mov dword [ebp - 0x1498], eax
mov dword [ebp - 0x1494], edx
push dword [ebp - 0x1494]
push dword [ebp - 0x1498]
lea ecx, [ebp - 0x22d0]
call fcn.004019fe
pop ecx
pop ecx
mov ecx, eax
call fcn.00439195
push eax
call fcn.004ac497
pop ecx
lea ecx, [ebp - 0x22d0]
call fcn.0043918b
jmp 0x428ea6
jmp 0x428e84
mov dword [ebp - 0x6a8], 0x5300
mov dword [ebp - 4], 4
cmp dword [ebp - 0xd28], 0x5711
jge 0x428f3b
push dword [ebp - 0x173c]
call fcn.004ac497
pop ecx
jmp 0x428f57
or dword [ebp - 4], 0xffffffff
jmp 0x428f61
mov dword [ebp - 0x1c00], 6
mov dword [ebp - 0x1c08], 1
push 3
lea ecx, [ebp - 0x1ef8]
call fcn.004392e4
mov dword [ebp - 0x1c10], 0x9d568d52
mov dword [ebp - 0x1c18], 3
mov dword [ebp - 0x1c20], 0
mov dword [ebp - 0x1228], 0x63d62a0
lea eax, [ebp - 0x1ef8]
push eax
push 0x7038
push 0x6bc5
push 0x5330
lea eax, [ebp - 0x1c28]
push eax
push 0
push 0
push 0x1d34
push 1
push 1
call fcn.004046b9
add esp, 0x28
mov byte [ebp - 0x158], 0
push 1
lea eax, [ebp - 0x158]
push eax
push 0x13c0
push 1
push 0x6917
push 1
push 0
call fcn.0041f57b
add esp, 0x1c
push 0x883
lea eax, [ebp - 0x1228]
push eax
push 1
push 0x7d87
push 0x1037
push 0
push 0
call fcn.0041ef5e
add esp, 0x1c
lea ecx, [ebp - 0x1ef8]
call fcn.004393b6
mov dword [ebp - 0x15a8], 0xfa2f
mov dword [ebp - 0x8d8], 0
push 3
lea ecx, [ebp - 0x1778]
call fcn.004392e4
mov dword [ebp - 0x8f0], 9
mov dword [ebp - 0x8e0], 0x3d35
mov dword [ebp - 0x180c], 0xb1d319d7
push 1
push 0x4b92
push 1
push 1
push 1
push 1
push 0x5e6
push 0x12f2
push 0x5d39
push 0x138
push 0x7952
push 0x9b7
lea eax, [ebp - 0x1778]
push eax
lea eax, [ebp - 0x308]
push eax
push 0x5e20
push 0x3393
push 0x18c5
push 0x6a56
push 0
push 0x1cbb
call fcn.0041d857
add esp, 0x50
mov dword [ebp - 0x308], 0
jmp 0x4290e9
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 3
jge 0x429105
mov eax, dword [ebp - 0x308]
mov dword [ebp + eax*4 - 0x214c], 0xe961
jmp 0x4290dc
push 0xfffffffffffffff8
pop eax
test eax, eax
je 0x4291c0
mov dword [ebp - 0x16bc], 0xfffffffd
mov dword [ebp - 0x1230], 0xfffffffe
push 1
lea eax, [ebp - 0x8d8]
push eax
push 0x67af
push 1
lea eax, [ebp - 0x15a8]
push eax
push 0x2371
push 0x3822
push 0x1639
push 1
push 0x4fc7
push 0x6259
push 0x43c0
push 0x3b6b
push 0x2493
push 0x3287
lea eax, [ebp - 0x1230]
push eax
push 0x6712
push 0x7da8
push 0x1d37
push 0x6692
push 0x494
push 0x24c1
push 0x2f45
push 0x6c3c
push 0x49cd
push 0x1c5e
push 1
push 0
push 0x2084
lea eax, [ebp - 0x16bc]
push eax
call fcn.0042479d
add esp, 0x78
jmp 0x429338
mov dword [ebp - 0x1238], 0x6364d64e
mov dword [ebp - 0x15b0], 0xfffffffb
mov dword [ebp - 0x1c30], 0x3b15a8d
mov dword [ebp - 0x1c38], 0xfffffff6
mov dword [ebp - 0x1c40], 0x9984333
mov dword [ebp - 0x1c48], 0x79b347d1
mov dword [ebp - 0x1c50], 5
push 1
lea ecx, [ebp - 0x1f08]
call fcn.004392e4
mov dword [ebp - 0x1240], 0xfffffff8
mov dword [ebp - 0x2b0], 0
jmp 0x429236
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 1
jge 0x429252
mov eax, dword [ebp - 0x2b0]
mov dword [ebp + eax*4 - 0x1c58], 0x3c3d2146
jmp 0x429229
push 0x5c4e
push 0x3c4c
push 0x27d2
lea eax, [ebp - 0x2b0]
push eax
push 0
push 0x3c5
push 1
lea eax, [ebp - 0x1f08]
push eax
push 0x6c85
push 1
push 0
push 0x2910
call fcn.0040922d
add esp, 0x30
mov eax, dword [ebp - 0x1238]
mov dword [ebp - 0x15b0], eax
push 0x4f7a
push 0x27e7
push 0x2caf
push 0x3bef
push 0x442e
push 1
lea eax, [ebp - 0x1240]
push eax
push 0x121e
push 1
push 1
push 0x1498
push 0xc2b
push 0x1326
push 1
push 0x5628
push 0x4dbe
push 0x67b3
push 0x7d64
push 0
push 0x7600
push 0x1d00
push 0x1742
push 0x1f88
push 0x7722
push 0x5804
push 0x194c
push 0x72fe
push 1
push 0x74cc
push 0x2ec8
push 0x7482
call fcn.0040c07c
add esp, 0x7c
lea ecx, [ebp - 0x1f08]
call fcn.004393b6
cmp dword [ebp - 0x8e0], 0
je 0x4293b1
mov eax, dword [ebp - 0x8f0]
mov dword [ebp - 0x1c60], eax
cmp dword [ebp - 0x8d8], 0
je 0x429374
push 0
lea ecx, [ebp - 0x1778]
call fcn.004393d2
cmp dword [eax], 0
je 0x429374
mov dword [ebp - 0x1068], 1
jmp 0x42937b
and dword [ebp - 0x1068], 0
cmp dword [ebp - 0x1068], 1
jl 0x429390
mov dword [ebp - 0xd30], 1
jmp 0x429397
and dword [ebp - 0xd30], 0
mov eax, dword [ebp - 0x8e0]
cmp dword [ebp - 0xd30], eax
jl 0x4293b1
mov dword [ebp - 0x8e8], 1
jmp 0x4293b8
and dword [ebp - 0x8e8], 0
push 1
lea ecx, [ebp - 0x1778]
call fcn.004393d2
mov ecx, dword [ebp - 0x8e8]
cmp ecx, dword [eax]
jl 0x4293db
mov dword [ebp - 0xf58], 1
jmp 0x4293e2
and dword [ebp - 0xf58], 0
cmp dword [ebp - 0xf58], 7
jb 0x4293fd
cmp dword [ebp - 0x8f0], 0
jne 0x4293fd
and dword [ebp - 0xd38], 0
jmp 0x429407
mov dword [ebp - 0xd38], 1
cmp dword [ebp - 0xd38], 0xe47e5f8f
jae 0x42941f
mov dword [ebp - 0x8f8], 1
jmp 0x429426
and dword [ebp - 0x8f8], 0
push 2
lea ecx, [ebp - 0x1778]
call fcn.004393d2
mov ecx, dword [ebp - 0x8f8]
cmp ecx, dword [eax]
jge 0x429449
mov dword [ebp - 0x720], 1
jmp 0x429450
and dword [ebp - 0x720], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x720]
mov dword [ebp + eax - 0x214c], ecx
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x180c], eax
lea ecx, [ebp - 0x1778]
call fcn.004393b6
mov dword [ebp - 0x3cc], 0
jmp 0x429493
mov eax, dword [ebp - 0x3cc]
inc eax
mov dword [ebp - 0x3cc], eax
cmp dword [ebp - 0x3cc], 3
jge 0x4294af
mov eax, dword [ebp - 0x3cc]
mov dword [ebp + eax*4 - 0x22a0], 0xd8f6efba
jmp 0x429486
mov dword [ebp - 0x3d4], 1
mov dword [ebp - 0x1248], 0xe9934b0b
mov dword [ebp - 0x338], 0xff18c9a0
mov dword [ebp - 0x5e4], 0
jmp 0x4294e6
mov eax, dword [ebp - 0x5e4]
inc eax
mov dword [ebp - 0x5e4], eax
cmp dword [ebp - 0x5e4], 3
jge 0x429502
mov eax, dword [ebp - 0x5e4]
mov dword [ebp + eax*4 - 0x1aa8], 0x2eac4530
jmp 0x4294d9
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1aa8], 0xb16
jge 0x429521
mov dword [ebp - 0x10f4], 1
jmp 0x429528
and dword [ebp - 0x10f4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1aa8]
cmp dword [ebp - 0x10f4], eax
jg 0x429549
mov dword [ebp - 0x900], 1
jmp 0x429550
and dword [ebp - 0x900], 0
mov eax, dword [ebp - 0x900]
inc eax
push 4
pop ecx
shl ecx, 1
sub eax, dword [ebp + ecx - 0x1aa8]
mov dword [ebp - 0x338], eax
mov dword [ebp - 0x3d4], 0
jmp 0x429582
jmp 0x427d78
lea ecx, [ebp - 0x1788]
call fcn.004393b6
mov byte [ebp - 0x21], 0
mov dword [ebp - 0x1c], 0
push 4
lea ecx, [ebp - 0x1798]
call fcn.004392e4
mov dword [ebp - 0x310], 0
jmp 0x429773
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 1
jge 0x42978f
mov eax, dword [ebp - 0x310]
mov dword [ebp + eax*4 - 0xf4], 0xfffffffc
jmp 0x429766
lea eax, [ebp - 0x310]
push eax
push 0x5d93
push 0x3280
push 1
push 0xc7a
push 1
push 0xc92
lea eax, [ebp - 0x1798]
push eax
push 1
push 0x612b
call fcn.00409b63
add esp, 0x28
push 0x5f91
push 0x7343
push 0x7e4a
push 0x3bba
push 1
push 0xa65
push 0x3fe7
push 0x348c
push 0x6d92
push 1
push 0
push 0x1343
push 1
push 0x7942
push 1
push 0x2ac0
call fcn.00425452
add esp, 0x40
mov dword [ebp - 0x1c], 0
jmp 0x42981d
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jg 0x429c4d
mov dword [ebp - 0x728], 1
mov dword [ebp - 0x214], 0xffffffff
mov dword [ebp - 0x6b8], 0x9f4aec70
mov dword [ebp - 0xd4], 0
jmp 0x42985e
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 3
jge 0x42987a
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x1ab4], 0xe74e8003
jmp 0x429851
mov dword [ebp - 0xd4], 0
jmp 0x429893
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 3
jge 0x4298af
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x2158], 8
jmp 0x429886
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xf4]
mov dword [ebp - 0x1c68], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0xf4], ecx
jle 0x4298da
mov dword [ebp - 0xf60], 1
jmp 0x4298e1
and dword [ebp - 0xf60], 0
mov eax, dword [ebp - 0xf60]
inc eax
cmp eax, dword [ebp - 0x1c]
jl 0x4298f9
mov dword [ebp - 0x910], 1
jmp 0x429900
and dword [ebp - 0x910], 0
mov dword [ebp - 0x728], 0x735b
mov eax, dword [ebp - 0x728]
cmp eax, dword [ebp - 0x910]
jg 0x429924
mov dword [ebp - 0xd48], 1
jmp 0x42992b
and dword [ebp - 0xd48], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xd48]
mov dword [ebp + eax - 0x1ab4], ecx
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp + ecx*4 - 0xf4]
cmp dword [ebp + eax - 0x1ab4], ecx
jge 0x429962
mov dword [ebp - 0x918], 1
jmp 0x429969
and dword [ebp - 0x918], 0
cmp dword [ebp - 0x918], 0xfffffff9
jl 0x42997e
mov dword [ebp - 0x1070], 1
jmp 0x429985
and dword [ebp - 0x1070], 0
cmp dword [ebp - 0x1070], 0xd0c1
jle 0x42999d
mov dword [ebp - 0x920], 1
jmp 0x4299a4
and dword [ebp - 0x920], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xf4]
cmp eax, dword [ebp - 0x920]
jge 0x4299c2
mov dword [ebp - 0x760], 1
jmp 0x4299c9
and dword [ebp - 0x760], 0
push 2
lea ecx, [ebp - 0x1798]
call fcn.004393d2
mov ecx, dword [ebp - 0x760]
mov dword [eax], ecx
cmp dword [ebp - 0x760], 0xffffffff
je 0x4299f3
mov dword [ebp - 0xd50], 1
jmp 0x4299fa
and dword [ebp - 0xd50], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xf4]
cmp dword [ebp - 0xd50], eax
jg 0x429a18
mov dword [ebp - 0x928], 1
jmp 0x429a1f
and dword [ebp - 0x928], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xf4]
cmp dword [ebp - 0x928], eax
jne 0x429a3d
mov dword [ebp - 0xf68], 1
jmp 0x429a44
and dword [ebp - 0xf68], 0
mov eax, dword [ebp - 0xf68]
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x214], 0
jmp 0x429a69
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0
jg 0x429c48
mov dword [ebp - 0x504], 0x1b4373c9
mov dword [ebp - 0x1138], 0xffc5a258
push 3
lea ecx, [ebp - 0x1798]
call fcn.004393d2
cmp dword [eax], 0
jne 0x429c03
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0xf4], 0xf5ee
jle 0x429af4
cmp dword [ebp - 0x504], 0xfffffff8
jb 0x429ac5
mov dword [ebp - 0x6b0], 1
jmp 0x429acc
and dword [ebp - 0x6b0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x6b0]
mov dword [ebp + eax - 0x1ab4], ecx
cmp dword [ebp - 0x6b0], 0
je 0x429af4
mov dword [ebp - 0x930], 1
jmp 0x429afb
and dword [ebp - 0x930], 0
mov eax, dword [ebp - 0x504]
cmp dword [ebp - 0x930], eax
jne 0x429b15
mov dword [ebp - 0x1260], 1
jmp 0x429b1c
and dword [ebp - 0x1260], 0
mov dword [ebp - 0x6b8], 0x8360
mov eax, dword [ebp - 0x6b8]
mov dword [ebp - 0x1c70], eax
mov eax, dword [ebp - 0x728]
mov dword [ebp - 0x1c78], eax
mov esi, dword [ebp - 0x504]
sub esi, 0x760
push 2
lea ecx, [ebp - 0x1798]
call fcn.004393d2
cmp esi, dword [eax]
jge 0x429b71
xor eax, eax
jne 0x429b71
cmp dword [ebp - 0x6b8], 0
jne 0x429b71
and dword [ebp - 0xd58], 0
jmp 0x429b7b
mov dword [ebp - 0xd58], 1
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xf4]
cmp dword [ebp - 0xd58], eax
jg 0x429b99
mov dword [ebp - 0x938], 1
jmp 0x429ba0
and dword [ebp - 0x938], 0
mov eax, dword [ebp - 0x938]
mov dword [ebp - 0x1138], eax
cmp dword [ebp - 0x1138], 0
jne 0x429bc1
mov dword [ebp - 0x940], 1
jmp 0x429bc8
and dword [ebp - 0x940], 0
mov eax, dword [ebp - 0x940]
sub eax, dword [ebp - 0x214]
cmp dword [ebp - 0x1c], eax
jne 0x429be5
mov dword [ebp - 0xd60], 1
jmp 0x429bec
and dword [ebp - 0xd60], 0
mov eax, dword [ebp - 0x504]
cmp dword [ebp - 0xd60], eax
je 0x429c03
and dword [ebp - 0x948], 0
jmp 0x429c0d
mov dword [ebp - 0x948], 1
cmp dword [ebp - 0x948], 0xc84c
jge 0x429c25
mov dword [ebp - 0xf70], 1
jmp 0x429c2c
and dword [ebp - 0xf70], 0
mov eax, dword [ebp - 0xf70]
sub eax, 0x2b63
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x2158], eax
jmp 0x429a5c
jmp 0x429816
lea ecx, [ebp - 0x1798]
call fcn.004393b6
mov dword [ebp - 0x254], 0x5d6c05ba
push 3
lea ecx, [ebp - 0x1ae4]
call fcn.004392e4
mov dword [ebp - 0xbc], 0
jmp 0x429c88
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 1
jge 0x429ca4
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x3dc], 0x4bf8
jmp 0x429c7b
mov dword [ebp - 0xbc], 0
jmp 0x429cbd
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 3
jge 0x429cdf
push dword [ebp - 0xbc]
lea ecx, [ebp - 0x1ae4]
call fcn.004393d2
mov dword [eax], 0x6966ef3b
jmp 0x429cb0
mov dword [ebp - 0x254], 0xe
jmp 0x429cf8
mov eax, dword [ebp - 0x254]
dec eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 9
jl 0x429f7c
cmp dword [ebp - 0x254], 0
je 0x429d77
mov dword [ebp - 0x1744], 1
push 0x5fd7
push 0x1afe
push 0x6117
lea eax, [ebp - 0x1744]
push eax
push 0x1528
push 0x1c84
push 0x25c3
push 0x4f78
push 1
lea eax, [ebp - 0x254]
push eax
push 0x7571
push 0x105c
push 1
push 0x1478
push 0x1f6
push 1
push 0x53d9
push 0
call fcn.0041747d
add esp, 0x48
jmp 0x429f77
push 1
lea ecx, [ebp - 0x1acc]
call fcn.004392e4
mov dword [ebp - 0x2c0], 0
jmp 0x429d9d
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 1
jge 0x429db9
mov eax, dword [ebp - 0x2c0]
mov dword [ebp + eax*4 - 0x104], 0xfbf2121f
jmp 0x429d90
push 0x6c12
push 1
lea eax, [ebp - 0x2c0]
push eax
push 0x75c1
push 0
push 0x4ffc
lea eax, [ebp - 0x1acc]
push eax
push 0
push 1
call fcn.0041d0e6
add esp, 0x24
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x104], 0
jmp 0x429e14
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x104]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x104], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x104], 0
jl 0x429f6c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x104]
cmp dword [ebp + eax*4 - 0x3dc], 0xffffffff
jge 0x429e4b
mov dword [ebp - 0x950], 1
jmp 0x429e52
and dword [ebp - 0x950], 0
cmp dword [ebp - 0x950], 0xffff
ja 0x429e6a
mov dword [ebp - 0xd68], 1
jmp 0x429e71
and dword [ebp - 0xd68], 0
cmp dword [ebp - 0xd68], 1
je 0x429e9d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x104]
cmp dword [ebp + eax*4 - 0x3dc], 0
je 0x429e9d
mov dword [ebp - 0x1268], 1
jmp 0x429ea4
and dword [ebp - 0x1268], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x104]
mov eax, dword [ebp + eax*4 - 0x3dc]
mov dword [ebp - 0x1c80], eax
push 0xfffffffffffffff6
pop eax
cmp eax, 0xffffffff
jne 0x429ed2
mov dword [ebp - 0x958], 1
jmp 0x429ed9
and dword [ebp - 0x958], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x104]
mov eax, dword [ebp + eax*4 - 0x3dc]
cmp dword [ebp - 0x958], eax
je 0x429f01
mov dword [ebp - 0x1078], 1
jmp 0x429f08
and dword [ebp - 0x1078], 0
push 2
lea ecx, [ebp - 0x1ae4]
call fcn.004393d2
mov esi, dword [ebp - 0x1078]
imul esi, dword [eax]
sub esi, 0x137d
push 0
lea ecx, [ebp - 0x1acc]
call fcn.004393d2
mov dword [eax], esi
mov byte [ebp - 0x15c], 0
push 0
push 1
push 0x6694
push 1
push 0x76bd
lea eax, [ebp - 0x15c]
push eax
push 0x2090
push 0x17e
push 1
push 1
call fcn.0040eb1c
add esp, 0x28
jmp 0x429df9
lea ecx, [ebp - 0x1acc]
call fcn.004393b6
jmp 0x429ceb
lea ecx, [ebp - 0x1ae4]
call fcn.004393b6
mov dword [ebp - 0x59c], 8
mov byte [ebp - 0x15e], 0
push 0x221f
push 0
push 0
push 0x2104
push 0x331c
lea eax, [ebp - 0x15e]
push eax
push 0
push 1
call fcn.00422ad3
add esp, 0x20
mov dword [ebp - 0x59c], 2
jmp 0x429fd7
mov eax, dword [ebp - 0x59c]
dec eax
mov dword [ebp - 0x59c], eax
cmp dword [ebp - 0x59c], 0xfffffff4
jge 0x42a1ed
mov dword [ebp - 0x12c], 0xffffffff
mov dword [ebp - 0x3e4], 0
jmp 0x42a007
mov eax, dword [ebp - 0x3e4]
inc eax
mov dword [ebp - 0x3e4], eax
cmp dword [ebp - 0x3e4], 1
jge 0x42a023
mov eax, dword [ebp - 0x3e4]
mov dword [ebp + eax*4 - 0x960], 0xd95e17ca
jmp 0x429ffa
mov dword [ebp - 0x12c], 0
jmp 0x42a03c
mov eax, dword [ebp - 0x12c]
dec eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
jl 0x42a083
mov byte [ebp - 0x160], 0
push 0x7923
push 0x5d1d
push 0x2317
push 0x1dc
push 1
push 0x4ff3
lea eax, [ebp - 0x160]
push eax
push 1
push 1
push 0
push 0x2d5d
call fcn.00421b20
add esp, 0x2c
jmp 0x42a02f
mov dword [ebp - 0x12c], 0
jmp 0x42a09c
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x1d
jle 0x42a1e8
mov dword [ebp - 0x50c], 0x8ee41b66
mov dword [ebp - 0x50c], 0
jmp 0x42a0cc
mov eax, dword [ebp - 0x50c]
dec eax
mov dword [ebp - 0x50c], eax
cmp dword [ebp - 0x50c], 0
jl 0x42a1e3
mov dword [ebp - 0x3ec], 1
mov dword [ebp - 0x3ec], 0
jmp 0x42a0fc
mov eax, dword [ebp - 0x3ec]
dec eax
mov dword [ebp - 0x3ec], eax
cmp dword [ebp - 0x3ec], 0
jl 0x42a1de
mov dword [ebp - 0x2c8], 0x8ea38884
mov byte [ebp - 0x162], 0
push 0x621e
push 1
lea eax, [ebp - 0x162]
push eax
push 0x1128
push 0
push 0x1097
push 0x40a3
push 0x5e71
push 1
call fcn.0040902a
add esp, 0x24
mov dword [ebp - 0x2c8], 0
jmp 0x42a161
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 0
jg 0x42a1d9
mov dword [ebp - 0x33c], 0xffffffff
mov dword [ebp - 0x15c8], 0x986e3e45
mov dword [ebp - 0x33c], 0
jmp 0x42a197
mov eax, dword [ebp - 0x33c]
dec eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 0
jl 0x42a1d4
mov eax, dword [ebp - 0x33c]
mov eax, dword [ebp + eax*4 - 0x960]
mov dword [ebp - 0xd70], eax
mov eax, dword [ebp - 0x2c8]
mov ecx, dword [ebp - 0xd70]
mov dword [ebp + eax*4 - 0x960], ecx
mov eax, dword [ebp - 0xd70]
mov dword [ebp - 0x15c8], eax
jmp 0x42a18a
jmp 0x42a154
jmp 0x42a0ef
jmp 0x42a0bf
jmp 0x42a08f
jmp 0x429fca
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x70], 1
mov dword [ebp - 0x15d0], 0
mov dword [ebp - 0x1288], 0xad8a
mov dword [ebp - 0x17ac], 0xc8cd
mov dword [ebp - 0x1280], 0x26fbc79a
mov dword [ebp - 0x70], 0
jmp 0x42a233
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xffffffea
jne 0x42a436
mov dword [ebp - 0x1278], 0x559653e3
mov dword [ebp - 0x60c], 0
jmp 0x42a260
mov eax, dword [ebp - 0x60c]
inc eax
mov dword [ebp - 0x60c], eax
cmp dword [ebp - 0x60c], 3
jge 0x42a27c
mov eax, dword [ebp - 0x60c]
mov dword [ebp + eax*4 - 0x7b8], 1
jmp 0x42a253
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7b8]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x7b8]
test eax, eax
jne 0x42a2c0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x7b8]
cmp dword [ebp + eax - 0x7b8], ecx
jne 0x42a2c0
and dword [ebp - 0x968], 0
jmp 0x42a2ca
mov dword [ebp - 0x968], 1
mov eax, dword [ebp - 0x968]
add eax, 0xf341
jne 0x42a2e3
mov dword [ebp - 0xf78], 1
jmp 0x42a2ea
and dword [ebp - 0xf78], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7b8]
cmp dword [ebp - 0xf78], eax
jge 0x42a30b
mov dword [ebp - 0x970], 1
jmp 0x42a312
and dword [ebp - 0x970], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7b8]
imul eax, dword [ebp - 0x970]
test eax, eax
jne 0x42a342
mov eax, 0x361a6b71
test eax, eax
jne 0x42a342
cmp dword [ebp - 0x70], 0
jne 0x42a342
and dword [ebp - 0xd78], 0
jmp 0x42a34c
mov dword [ebp - 0xd78], 1
mov eax, dword [ebp - 0x70]
add eax, dword [ebp - 0xd78]
cmp eax, dword [ebp - 0x70]
jl 0x42a366
mov dword [ebp - 0x1270], 1
jmp 0x42a36d
and dword [ebp - 0x1270], 0
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x1c88], eax
mov eax, dword [ebp - 0x70]
neg eax
cmp eax, 0xffffffff
jne 0x42a38c
mov dword [ebp - 0x978], 1
jmp 0x42a393
and dword [ebp - 0x978], 0
cmp dword [ebp - 0x978], 1
je 0x42a3a8
mov dword [ebp - 0x16cc], 1
jmp 0x42a3af
and dword [ebp - 0x16cc], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7b8], 0x886a6c65
je 0x42a3ce
mov dword [ebp - 0x10fc], 1
jmp 0x42a3d5
and dword [ebp - 0x10fc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7b8]
cmp eax, dword [ebp - 0x10fc]
jg 0x42a3f6
mov dword [ebp - 0x980], 1
jmp 0x42a3fd
and dword [ebp - 0x980], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7b8]
cmp dword [ebp - 0x980], eax
jge 0x42a41e
mov dword [ebp - 0xd80], 1
jmp 0x42a425
and dword [ebp - 0xd80], 0
mov eax, dword [ebp - 0xd80]
mov dword [ebp - 0x1278], eax
jmp 0x42a22c
lea eax, [ebp - 0x15d0]
push eax
lea eax, [ebp - 0x70]
push eax
push 0x6448
lea eax, [ebp - 0x1280]
push eax
push 1
push 1
push 0x2b63
lea eax, [ebp - 0x17ac]
push eax
lea eax, [ebp - 0x1288]
push eax
push 0x102
push 1
push 0
push 0x3746
push 0xb91
call fcn.00407266
add esp, 0x38
push 4
lea ecx, [ebp - 0x17a8]
call fcn.004392e4
mov dword [ebp - 0x4c], 0xf01c0890
mov dword [ebp - 0xe4], 0xadf890ba
mov dword [ebp - 0x270], 0x8663
mov dword [ebp - 0xda8], 0x5315fa72
mov dword [ebp - 0x1290], 0xe98b8724
mov dword [ebp - 0x3f4], 0
jmp 0x42a4d4
mov eax, dword [ebp - 0x3f4]
inc eax
mov dword [ebp - 0x3f4], eax
cmp dword [ebp - 0x3f4], 1
jge 0x42a4f0
mov eax, dword [ebp - 0x3f4]
mov dword [ebp + eax*4 - 0x21c], 0x7cdedfc3
jmp 0x42a4c7
mov byte [ebp - 0x164], 0
movzx eax, byte [ebp - 0x164]
test eax, eax
je 0x42a526
push 0x76d0
push 1
push 0
push 0x163
push 0xcb3
push 0x2937
push 0
push 1
call fcn.00422ad3
add esp, 0x20
cmp dword [ebp - 0x4c], 0
je 0x42a7a6
mov dword [ebp - 0x10c], 8
mov dword [ebp - 0x6c0], 0x326874be
mov dword [ebp - 0x4c], 0xb
jmp 0x42a554
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x3b
jl 0x42a69a
mov dword [ebp - 0x794], 0x9226
mov dword [ebp - 0x9a0], 0xffffffff
cmp dword [ebp - 0x4c], 0xdb78
jge 0x42a587
mov dword [ebp - 0x988], 1
jmp 0x42a58e
and dword [ebp - 0x988], 0
mov eax, dword [ebp - 0x6c0]
cmp dword [ebp - 0x988], eax
jge 0x42a5a8
mov dword [ebp - 0xf80], 1
jmp 0x42a5af
and dword [ebp - 0xf80], 0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0xf80]
jne 0x42a5c6
mov dword [ebp - 0x990], 1
jmp 0x42a5cd
and dword [ebp - 0x990], 0
mov eax, dword [ebp - 0x990]
neg eax
cmp eax, 0x7030
jl 0x42a5e8
mov dword [ebp - 0xd88], 1
jmp 0x42a5ef
and dword [ebp - 0xd88], 0
mov eax, dword [ebp - 0x794]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x10c]
cmp eax, dword [ebp - 0xd88]
jl 0x42a61e
cmp dword [ebp - 0x10c], 0
je 0x42a61e
mov dword [ebp - 0x15d8], 1
jmp 0x42a625
and dword [ebp - 0x15d8], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x1c90], eax
mov eax, 0x978d8ef0
sub eax, dword [ebp - 0x794]
je 0x42a650
cmp dword [ebp - 0x794], 0
je 0x42a650
mov dword [ebp - 0x998], 1
jmp 0x42a657
and dword [ebp - 0x998], 0
cmp dword [ebp - 0x998], 0x912491e2
je 0x42a66f
mov dword [ebp - 0x1080], 1
jmp 0x42a676
and dword [ebp - 0x1080], 0
mov eax, dword [ebp - 0x1080]
mov dword [ebp - 0x9a0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9a0]
mov dword [ebp + eax - 0x21c], ecx
jmp 0x42a54d
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x10c], eax
jle 0x42a774
mov eax, dword [ebp - 0x10c]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x21c]
test eax, eax
jne 0x42a6d3
cmp dword [ebp - 0x4c], 0
jne 0x42a6d3
and dword [ebp - 0xd90], 0
jmp 0x42a6dd
mov dword [ebp - 0xd90], 1
cmp dword [ebp - 0xd90], 2
je 0x42a701
mov eax, 0x9342
test eax, eax
jne 0x42a701
mov eax, 0xba4a
test eax, eax
jne 0x42a701
and dword [ebp - 0x9a8], 0
jmp 0x42a70b
mov dword [ebp - 0x9a8], 1
mov eax, dword [ebp - 0x9a8]
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0x6c0]
add eax, dword [ebp - 0x10c]
cmp eax, dword [ebp - 0xe4]
jg 0x42a737
mov dword [ebp - 0xf88], 1
jmp 0x42a73e
and dword [ebp - 0xf88], 0
mov eax, dword [ebp - 0x6c0]
cmp dword [ebp - 0xf88], eax
je 0x42a758
mov dword [ebp - 0x9b0], 1
jmp 0x42a75f
and dword [ebp - 0x9b0], 0
mov eax, dword [ebp - 0x9b0]
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0
je 0x42a78e
xor eax, eax
inc eax
je 0x42a78e
cmp dword [ebp - 0xe4], 0
je 0x42a78e
mov dword [ebp - 0xd98], 1
jmp 0x42a795
and dword [ebp - 0xd98], 0
mov eax, dword [ebp - 0xd98]
mov dword [ebp - 0x10c], eax
jmp 0x42a9d1
mov dword [ebp - 0x6c8], 1
mov dword [ebp - 0x730], 0xffffffff
mov dword [ebp - 0xe4], 5
jmp 0x42a7d3
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x10
jne 0x42a9d1
mov dword [ebp - 0x514], 0x8b036c86
mov eax, dword [ebp - 0x730]
mov dword [ebp - 0x1c98], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x21c]
mov dword [ebp - 0x1ca0], eax
mov eax, dword [ebp - 0x730]
mov dword [ebp - 0x1ca8], eax
cmp dword [ebp - 0x514], 0
jne 0x42a825
cmp dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0xe4]
neg eax
cmp eax, dword [ebp - 0x730]
jle 0x42a841
mov dword [ebp - 0x9b8], 1
jmp 0x42a848
and dword [ebp - 0x9b8], 0
mov eax, dword [ebp - 0x6c8]
cmp eax, dword [ebp - 0x9b8]
jg 0x42a862
mov dword [ebp - 0x1148], 1
jmp 0x42a869
and dword [ebp - 0x1148], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1148]
mov dword [ebp + eax - 0x21c], ecx
mov eax, 0xf9c6
test eax, eax
je 0x42a89a
cmp dword [ebp - 0x514], 0
je 0x42a89a
mov dword [ebp - 0x9d8], 1
jmp 0x42a8a1
and dword [ebp - 0x9d8], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x21c], 0
jne 0x42a8d7
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x21c], 0xdd60280e
mov eax, 0xdd60280e
cmp eax, 0xb0f60517
ja 0x42a8d7
and dword [ebp - 0x9c0], 0
jmp 0x42a8e1
mov dword [ebp - 0x9c0], 1
mov eax, dword [ebp - 0x270]
cmp dword [ebp - 0x9c0], eax
jl 0x42a8fb
mov dword [ebp - 0xda0], 1
jmp 0x42a902
and dword [ebp - 0xda0], 0
mov eax, dword [ebp - 0xda0]
sub eax, dword [ebp - 0x514]
sub eax, dword [ebp - 0x514]
imul eax, dword [ebp - 0x6c8]
cmp eax, dword [ebp - 0x4c]
je 0x42a92c
mov dword [ebp - 0x9c8], 1
jmp 0x42a933
and dword [ebp - 0x9c8], 0
mov eax, dword [ebp - 0x270]
cmp dword [ebp - 0x9c8], eax
jg 0x42a94d
mov dword [ebp - 0xf90], 1
jmp 0x42a954
and dword [ebp - 0xf90], 0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0xf90]
jne 0x42a971
cmp dword [ebp - 0xe4], 0
jne 0x42a971
and dword [ebp - 0x9d0], 0
jmp 0x42a97b
mov dword [ebp - 0x9d0], 1
imul eax, dword [ebp - 0x9d0], 0x8172
mov dword [ebp - 0xda8], eax
cmp dword [ebp - 0xda8], 0
je 0x42a99b
cmp dword [ebp - 0x270], 0
cmp dword [ebp - 0x9d8], 0x59bbc08f
jg 0x42a9b3
mov dword [ebp - 0x1088], 1
jmp 0x42a9ba
and dword [ebp - 0x1088], 0
mov eax, dword [ebp - 0x1088]
sub eax, dword [ebp - 0x270]
mov dword [ebp - 0x1290], eax
jmp 0x42a7c6
mov dword [ebp - 0x318], 0
jmp 0x42a9ea
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 1
jge 0x42aa06
mov eax, dword [ebp - 0x318]
mov dword [ebp + eax*4 - 0x114], 0xfffffffc
jmp 0x42a9dd
mov dword [ebp - 0x258], 0xd76c
mov dword [ebp - 0x224], 0x44401d1b
mov dword [ebp - 0xc4], 0x6eea5306
push 3
lea ecx, [ebp - 0x192c]
call fcn.004392e4
mov dword [ebp - 0x1104], 0x7a95534f
mov dword [ebp - 0x15e0], 0x7c74e2b7
mov dword [ebp - 0x12a0], 1
push 1
push 1
push 0x7bda
push 0
push 0x6fe7
push 0x858
push 0x4719
push 0x12c8
push 1
push 0x1544
push 0x7095
lea eax, [ebp - 0x192c]
push eax
push 0x1483
push 1
push 0x4aa5
lea eax, [ebp - 0x64]
push eax
push 0x24cc
push 0x62b5
call fcn.0040d2af
add esp, 0x48
mov dword [ebp - 0x64], 0
jmp 0x42aab3
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x42aac9
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x11dc], 0x8fc7
jmp 0x42aaac
mov dword [ebp - 0x64], 0
jmp 0x42aad9
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 4
jge 0x42aaef
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x20b0], 0
jmp 0x42aad2
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0
je 0x42ac97
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x1cb0], eax
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x1cb8], eax
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0xc4], eax
jne 0x42ab46
mov dword [ebp - 0x9e0], 1
jmp 0x42ab4d
and dword [ebp - 0x9e0], 0
cmp dword [ebp - 0x9e0], 0xabf8
jle 0x42ab65
mov dword [ebp - 0x16d4], 1
jmp 0x42ab6c
and dword [ebp - 0x16d4], 0
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x1cc0], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0xdb0], eax
push 1
lea ecx, [ebp - 0x192c]
call fcn.004393d2
mov ecx, dword [ebp - 0xdb0]
mov dword [eax], ecx
cmp dword [ebp - 0xdb0], 0x7b18
jg 0x42abbd
mov dword [ebp - 0x9e8], 1
jmp 0x42abc4
and dword [ebp - 0x9e8], 0
mov eax, dword [ebp - 0xc4]
imul eax, dword [ebp - 0x9e8]
test eax, eax
jne 0x42abe7
cmp dword [ebp - 0x224], 0
jne 0x42abe7
and dword [ebp - 0xf98], 0
jmp 0x42abf1
mov dword [ebp - 0xf98], 1
cmp dword [ebp - 0xf98], 0x6a81
je 0x42ac09
mov dword [ebp - 0x1298], 1
jmp 0x42ac10
and dword [ebp - 0x1298], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x11dc]
mov dword [ebp - 0x1cc8], eax
push 1
lea ecx, [ebp - 0x192c]
call fcn.004393d2
cmp dword [eax], 0x7e12fd89
je 0x42ac43
mov dword [ebp - 0x9f0], 1
jmp 0x42ac4a
and dword [ebp - 0x9f0], 0
mov eax, dword [ebp - 0xc4]
add eax, dword [ebp - 0x9f0]
imul eax, dword [ebp - 0xc4]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x11dc]
jl 0x42ac77
mov dword [ebp - 0xdb8], 1
jmp 0x42ac7e
and dword [ebp - 0xdb8], 0
mov eax, dword [ebp - 0xc4]
imul eax, dword [ebp - 0xdb8]
push 4
pop ecx
shl ecx, 1
add eax, dword [ebp + ecx - 0x11dc]
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x11dc]
mov dword [ebp - 0x1cd0], eax
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x1cd8], eax
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x1104], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x11dc], 0
jne 0x42ace0
push 5
pop eax
test eax, eax
jne 0x42ace0
and dword [ebp - 0x9f8], 0
jmp 0x42acea
mov dword [ebp - 0x9f8], 1
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x9f8]
sub ecx, dword [ebp + eax - 0x20b0]
cmp ecx, dword [ebp - 0x15e0]
jne 0x42ad0e
mov eax, 0x60277ed4
test eax, eax
je 0x42ad23
cmp dword [ebp - 0x1104], 0
je 0x42ad23
mov dword [ebp - 0xa00], 1
jmp 0x42ad2a
and dword [ebp - 0xa00], 0
mov eax, dword [ebp - 0x258]
cmp dword [ebp - 0xa00], eax
jl 0x42ad54
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x20b0], 0
je 0x42ad54
mov dword [ebp - 0xdc0], 1
jmp 0x42ad5b
and dword [ebp - 0xdc0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x20b0]
cmp dword [ebp - 0xdc0], eax
je 0x42ad7c
mov dword [ebp - 0xa08], 1
jmp 0x42ad83
and dword [ebp - 0xa08], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x11dc]
imul eax, dword [ebp - 0xa08]
mov dword [ebp - 0x12a0], eax
push 1
push 0x428a
push 0x3e7c
push 0x5965
push 1
push 0x72bd
push 1
push 0x52db
call fcn.0040a7dd
add esp, 0x20
lea ecx, [ebp - 0x192c]
call fcn.004393b6
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x17a8]
push eax
push 0x6abe
push 1
push 0x5cc2
push 1
push 1
push 0x43ca
push 0
call fcn.004123fd
add esp, 0x24
mov dword [ebp - 0x2a4], 0
mov dword [ebp - 0x181c], 0xa290be4
mov dword [ebp - 0x1818], 0xa290be4
mov dword [ebp - 0x1814], 0xa290be4
mov dword [ebp - 0x1810], 0xa290be4
cmp dword [ebp - 0x2a4], 7
jg 0x42ae42
mov dword [ebp - 0xfa0], 1
jmp 0x42ae49
and dword [ebp - 0xfa0], 0
cmp dword [ebp - 0xfa0], 0xb58e469a
je 0x42ae61
mov dword [ebp - 0xa10], 1
jmp 0x42ae68
and dword [ebp - 0xa10], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xa10]
mov dword [ebp + eax - 0x181c], ecx
mov dword [ebp - 0x2a4], 0x18
jmp 0x42ae93
mov eax, dword [ebp - 0x2a4]
dec eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0xffffffeb
jg 0x42b01a
mov dword [ebp - 0x184], 3
mov byte [ebp - 0x1fe], 0
lea eax, [ebp - 0x1fe]
push eax
push 0x73a5
push 1
push 1
push 0
push 0x46ae
push 1
push 0x4e16
push 1
push 1
call fcn.00416c51
add esp, 0x28
mov dword [ebp - 0x184], 3
jmp 0x42aef4
mov eax, dword [ebp - 0x184]
dec eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0
jl 0x42b015
mov eax, dword [ebp - 0x184]
mov ecx, dword [ebp - 0x184]
mov eax, dword [ebp + eax*4 - 0x181c]
mov dword [ebp + ecx*4 - 0x181c], eax
mov dword [ebp - 0xdc8], 0x197
mov dword [ebp - 0x174c], 0xaa1af4
cmp dword [ebp - 0xdc8], 0x2d2
jle 0x42afb2
and dword [ebp - 0x3fc], 0
jmp 0x42af51
mov eax, dword [ebp - 0x3fc]
inc eax
mov dword [ebp - 0x3fc], eax
cmp dword [ebp - 0x3fc], 0x7da4
jge 0x42afb2
and dword [ebp - 0x5a4], 0
jmp 0x42af73
mov eax, dword [ebp - 0x5a4]
inc eax
mov dword [ebp - 0x5a4], eax
cmp dword [ebp - 0x5a4], 0x3dd9
jge 0x42afb0
mov eax, dword [ebp - 0x3fc]
sub eax, dword [ebp - 0x5a4]
cdq
mov dword [ebp - 0x14a4], eax
mov dword [ebp - 0x14a0], edx
push dword [ebp - 0x14a0]
push dword [ebp - 0x14a4]
mov ecx, 0xab4298
call fcn.004391a0
jmp 0x42af66
jmp 0x42af44
mov eax, dword [ebp - 0x184]
cmp dword [ebp + eax*4 - 0x181c], 0
je 0x42afc7
jmp 0x42aee7
mov dword [ebp - 4], 6
cmp dword [ebp - 0xdc8], 0xfffffe51
jge 0x42afea
mov edx, dword [ebp - 0x174c]
mov ecx, 0xab4298
call fcn.0043af56
jmp 0x42b006
or dword [ebp - 4], 0xffffffff
jmp 0x42b010
jmp 0x42aee7
jmp 0x42ae86
mov byte [ebp - 0x200], 0
mov dword [ebp - 0x7c], 0xa35f
mov dword [ebp - 0x18c], 1
mov dword [ebp - 0xa20], 0x11023dcd
mov dword [ebp - 0xa18], 0
mov dword [ebp - 0x768], 0xfffffff9
mov dword [ebp - 0xde0], 0
mov dword [ebp - 0x22c], 1
push 1
lea ecx, [ebp - 0x1908]
call fcn.004392e4
mov dword [ebp - 0x1130], 1
mov dword [ebp - 0x1ce0], 0xee328db1
mov dword [ebp - 0x12b0], 0xe2e8
push 0x4e89
push 0x655d
push 0x5a20
push 0x441
push 0x58a5
push 1
push 0x513a
push 0x7b0f
push 0
push 1
push 0x281c
push 0x1f3d
push 0x30df
push 1
push 0x5c1b
push 0x1feb
push 0x2fa2
push 0x56e7
push 1
push 0x5134
push 0x7596
push 0x55ec
lea eax, [ebp - 0x1908]
push eax
lea eax, [ebp - 0x1ce8]
push eax
push 0x4c85
push 0x247e
push 0x3a3b
push 1
push 0x576d
push 0x3a93
push 0x623f
call fcn.0040c07c
add esp, 0x7c
mov dword [ebp - 0xa18], 0xbc8b
mov eax, dword [ebp - 0xa18]
mov dword [ebp - 0x768], eax
mov eax, dword [ebp - 0x768]
mov ecx, dword [ebp - 0x7c]
imul ecx, dword [ebp - 0x7c]
add ecx, 0x7a13beb0
add eax, ecx
cmp eax, 0x7bf1
jle 0x42b162
mov dword [ebp - 0x1090], 1
jmp 0x42b169
and dword [ebp - 0x1090], 0
mov eax, dword [ebp - 0x1090]
mov dword [ebp - 0xde0], eax
mov eax, dword [ebp - 0x7c]
imul eax, dword [ebp - 0x7c]
test eax, eax
je 0x42b187
cmp dword [ebp - 0x768], 0
cmp dword [ebp - 0x7c], 0x64f6b903
jle 0x42b19c
mov dword [ebp - 0xdd0], 1
jmp 0x42b1a3
and dword [ebp - 0xdd0], 0
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0xa20], eax
mov eax, dword [ebp - 0xa20]
imul eax, dword [ebp - 0xdd0]
test eax, eax
jne 0x42b1db
cmp dword [ebp - 0x18c], 0
jne 0x42b1db
and dword [ebp - 0xa28], 0
jmp 0x42b1e5
mov dword [ebp - 0xa28], 1
mov eax, dword [ebp - 0x22c]
cmp dword [ebp - 0xa28], eax
jg 0x42b1ff
mov dword [ebp - 0xfa8], 1
jmp 0x42b206
and dword [ebp - 0xfa8], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0xfa8], eax
jl 0x42b21d
mov dword [ebp - 0xa30], 1
jmp 0x42b224
and dword [ebp - 0xa30], 0
cmp dword [ebp - 0xa30], 1
ja 0x42b23f
mov eax, 0x402095d7
test eax, eax
jne 0x42b23f
and dword [ebp - 0x6d0], 0
jmp 0x42b249
mov dword [ebp - 0x6d0], 1
push 0
lea ecx, [ebp - 0x1908]
call fcn.004393d2
mov ecx, dword [ebp - 0x6d0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0x6d0]
jle 0x42b275
mov dword [ebp - 0xdd8], 1
jmp 0x42b27c
and dword [ebp - 0xdd8], 0
cmp dword [ebp - 0xdd8], 0x25aa9c4a
jge 0x42b294
mov dword [ebp - 0xa38], 1
jmp 0x42b29b
and dword [ebp - 0xa38], 0
mov eax, dword [ebp - 0xa38]
mov dword [ebp - 0x1130], eax
mov eax, dword [ebp - 0x1130]
cmp dword [ebp - 0x7c], eax
jne 0x42b2be
mov dword [ebp - 0xa40], 1
jmp 0x42b2c5
and dword [ebp - 0xa40], 0
mov eax, dword [ebp - 0xa40]
sub eax, dword [ebp - 0x22c]
jne 0x42b45d
mov dword [ebp - 0x1cf0], 0x1602a050
mov dword [ebp - 0x12c0], 0x297f1ff7
mov dword [ebp - 0xa48], 0xffff
mov dword [ebp - 0x15e8], 0x3b8af76
mov dword [ebp - 0x17ec], 1
mov dword [ebp - 0x15f0], 0x4061
mov dword [ebp - 0x16dc], 0x23bf
mov dword [ebp - 0x18c], 0xffffffed
jmp 0x42b336
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x10
jle 0x42b356
mov dword [ebp - 0x12a8], 0xffffffff
cmp dword [ebp - 0x12a8], 0
je 0x42b354
jmp 0x42b356
jmp 0x42b329
mov dword [ebp - 0x22c], 0xfffffffa
jmp 0x42b36f
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0x12
jge 0x42b45b
mov dword [ebp - 0x1cf8], 0x324e8160
mov dword [ebp - 0x12c8], 0xffffffff
mov dword [ebp - 0x12b8], 0x1d88c924
push 1
push 0x5f7e
push 0x33f9
push 1
lea eax, [ebp - 0xa48]
push eax
push 0x55d2
push 0x4bdd
push 0x2a4
push 0
push 1
call fcn.00422bfe
add esp, 0x28
lea eax, [ebp - 0x15e8]
push eax
push 0x5c7d
lea eax, [ebp - 0x12b0]
push eax
push 0
lea eax, [ebp - 0xde0]
push eax
lea eax, [ebp - 0x7c]
push eax
push 0x3683
push 0
push 0x18c3
push 0x74dc
lea eax, [ebp - 0x16dc]
push eax
lea eax, [ebp - 0x12b8]
push eax
lea eax, [ebp - 0x15f0]
push eax
push 0x199
lea eax, [ebp - 0x12c0]
push eax
lea eax, [ebp - 0x17ec]
push eax
push 0x4b17
push 0x52a9
lea eax, [ebp - 0x12c8]
push eax
lea eax, [ebp - 0x1908]
push eax
push 1
lea eax, [ebp - 0xa48]
push eax
push 0x1481
push 0x4c80
call fcn.0040f62c
add esp, 0x60
jmp 0x42b362
jmp 0x42b49e
mov byte [ebp - 0x145], 0
push 1
push 0x6bda
lea eax, [ebp - 0x145]
push eax
push 1
push 0x3d8d
push 0x7403
push 0x4a99
push 0x5eeb
push 0x7142
push 0x1f01
push 1
push 1
call fcn.0040aa33
add esp, 0x30
lea ecx, [ebp - 0x1908]
call fcn.004393b6
movzx eax, byte [ebp - 0x200]
test eax, eax
je 0x42b76d
push 4
lea ecx, [ebp - 0x1944]
call fcn.004392e4
mov dword [ebp - 0x340], 0xfffffff8
mov dword [ebp - 0x15f8], 0xffffffff
mov dword [ebp - 0x16e4], 0xfff7
mov dword [ebp - 0x12d0], 0x336d0658
push 1
push 0x4c90
push 0
push 1
push 1
push 0
push 0x73e2
push 0x2804
push 0xa5f
push 0x3445
push 0x5b1
lea eax, [ebp - 0x1944]
push eax
push 0x6086
push 0x71a1
push 0x228e
push 0xe98
lea eax, [ebp - 0x1d00]
push eax
push 0x1898
push 1
push 0x632b
call fcn.0041d857
add esp, 0x50
mov dword [ebp - 0x340], 3
jmp 0x42b564
mov eax, dword [ebp - 0x340]
dec eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 0
jl 0x42b70e
mov dword [ebp - 0x404], 0xfffffff7
mov dword [ebp - 0x404], 3
jmp 0x42b594
mov eax, dword [ebp - 0x404]
dec eax
mov dword [ebp - 0x404], eax
cmp dword [ebp - 0x404], 0
jl 0x42b709
mov dword [ebp - 0x124], 0xffffffff
mov dword [ebp - 0x124], 3
jmp 0x42b5c4
mov eax, dword [ebp - 0x124]
dec eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0
jl 0x42b5f0
mov byte [ebp - 0x202], 0
push 0x869
push 1
lea eax, [ebp - 0x202]
push eax
push 1
push 1
call fcn.0040ae1d
add esp, 0x14
jmp 0x42b5b7
mov dword [ebp - 0x124], 3
jmp 0x42b609
mov eax, dword [ebp - 0x124]
dec eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0
jl 0x42b704
mov dword [ebp - 0x51c], 0x65352f76
mov dword [ebp - 0x51c], 0
jmp 0x42b639
mov eax, dword [ebp - 0x51c]
inc eax
mov dword [ebp - 0x51c], eax
cmp dword [ebp - 0x51c], 3
jg 0x42b6ff
push 3
lea ecx, [ebp - 0x1afc]
call fcn.004392e4
mov dword [ebp - 0x40c], 0
jmp 0x42b66c
mov eax, dword [ebp - 0x40c]
inc eax
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0x40c], 3
jge 0x42b68e
push dword [ebp - 0x40c]
lea ecx, [ebp - 0x1afc]
call fcn.004393d2
mov dword [eax], 4
jmp 0x42b65f
lea eax, [ebp - 0x1afc]
push eax
push 0
push 1
push 1
lea eax, [ebp - 0x1944]
push eax
push 0x4996
call fcn.0040e50d
add esp, 0x18
mov byte [ebp - 0x185], 0
movzx eax, byte [ebp - 0x185]
test eax, eax
je 0x42b6ef
push 0x6239
push 1
push 0x2453
push 0x5413
push 0x32b4
push 0
push 1
push 0x4fd7
push 1
push 0x17cf
call fcn.004122a2
add esp, 0x28
lea ecx, [ebp - 0x1afc]
call fcn.004393b6
jmp 0x42b62c
jmp 0x42b5fc
jmp 0x42b587
jmp 0x42b557
lea eax, [ebp - 0x15f8]
push eax
lea eax, [ebp - 0x340]
push eax
push 0x4fdf
push 0
push 0x46be
push 0x142a
lea eax, [ebp - 0x1944]
push eax
lea eax, [ebp - 0x12d0]
push eax
push 1
push 1
push 0x2d6f
push 0x6ae0
lea eax, [ebp - 0x16e4]
push eax
call fcn.00402105
add esp, 0x34
lea ecx, [ebp - 0x1944]
call fcn.004393b6
push 0
push 0
call dword [fcn.00ab7208]
mov dword [ebp - 0x28], 0
jmp 0x42b77d
cmp dword [ebp - 0x28], 0
jg 0x42d032
mov dword [ebp - 0x770], 1
mov dword [ebp - 0xa60], 0x506d4441
mov dword [ebp - 0xdf0], 0x1c2a2c7c
mov dword [ebp - 0x6d8], 0xffffffff
mov dword [ebp - 0x1600], 3
mov dword [ebp - 0x738], 0xffb91e60
mov dword [ebp - 0x12e8], 0x660d64c9
mov dword [ebp - 0x790], 1
mov dword [ebp - 0x12d8], 0x9c6fec1b
mov dword [ebp - 0xfb0], 6
mov dword [ebp - 0x98], 0
jmp 0x42b804
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jge 0x42b820
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x268], 0x3650dfa0
jmp 0x42b7f7
mov dword [ebp - 0x98], 0
jmp 0x42b839
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x42b855
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x1e00], 0xe8a2
jmp 0x42b82c
cmp dword [ebp - 0xa60], 0
jne 0x42b946
mov eax, dword [ebp - 0xfb0]
dec eax
mov dword [ebp - 0xfb0], eax
mov eax, dword [ebp - 0x738]
mov dword [ebp - 0x1d08], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x268]
mov dword [ebp - 0x1d10], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x268]
mov dword [ebp - 0x1d18], eax
mov eax, dword [ebp - 0x738]
add eax, dword [ebp - 0x6d8]
imul eax, dword [ebp - 0x12d8]
imul eax, dword [ebp - 0x1600]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x268]
test eax, eax
jne 0x42b8dd
push 9
pop eax
test eax, eax
jne 0x42b8dd
and dword [ebp - 0xa50], 0
jmp 0x42b8e7
mov dword [ebp - 0xa50], 1
mov eax, dword [ebp - 0x738]
cmp dword [ebp - 0xa50], eax
jge 0x42b901
mov dword [ebp - 0x11f0], 1
jmp 0x42b908
and dword [ebp - 0x11f0], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x268], 0
jne 0x42b924
mov dword [ebp - 0x1754], 1
jmp 0x42b92b
and dword [ebp - 0x1754], 0
mov eax, 0xac92d14b
sub eax, dword [ebp - 0x12e8]
cmp eax, 0xf996
je 0x42b946
and dword [ebp - 0xde8], 0
jmp 0x42b950
mov dword [ebp - 0xde8], 1
mov eax, dword [ebp - 0x790]
imul eax, dword [ebp - 0xde8]
mov dword [ebp - 0x6d8], eax
mov eax, dword [ebp - 0x790]
cmp dword [ebp - 0x6d8], eax
jg 0x42b97d
mov dword [ebp - 0xa58], 1
jmp 0x42b984
and dword [ebp - 0xa58], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa58]
sub ecx, dword [ebp + eax - 0x268]
sub ecx, dword [ebp - 0x790]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x268]
jl 0x42b9b8
mov dword [ebp - 0x1098], 1
jmp 0x42b9bf
and dword [ebp - 0x1098], 0
cmp dword [ebp - 0x1098], 0
jg 0x42b9d4
mov dword [ebp - 0xa68], 1
jmp 0x42b9db
and dword [ebp - 0xa68], 0
mov eax, dword [ebp - 0xa60]
mov dword [ebp - 0xdf0], eax
mov eax, dword [ebp - 0xdf0]
sub eax, dword [ebp - 0xa68]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1e00], eax
mov dword [ebp - 0x5ec], 0
jmp 0x42ba19
mov eax, dword [ebp - 0x5ec]
inc eax
mov dword [ebp - 0x5ec], eax
cmp dword [ebp - 0x5ec], 3
jge 0x42ba35
mov eax, dword [ebp - 0x5ec]
mov dword [ebp + eax*4 - 0x1860], 0xfd3df75d
jmp 0x42ba0c
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1860], 0
jmp 0x42ba63
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1860]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1860], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1860], 3
jge 0x42ba8a
mov dword [ebp - 0x1608], 0xffffffff
cmp dword [ebp - 0x1608], 0
je 0x42ba88
jmp 0x42ba8a
jmp 0x42ba48
mov dword [ebp - 0x23c], 0xffffffff
mov dword [ebp - 0x414], 0
jmp 0x42baad
mov eax, dword [ebp - 0x414]
inc eax
mov dword [ebp - 0x414], eax
cmp dword [ebp - 0x414], 3
jge 0x42bac9
mov eax, dword [ebp - 0x414]
mov dword [ebp + eax*4 - 0x18d8], 0x75b57fd5
jmp 0x42baa0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x18d8], 0xfffffff7
jmp 0x42baf7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18d8]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x18d8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x18d8], 0x1a
jg 0x42bb1e
mov dword [ebp - 0x12f0], 0x7c8a
cmp dword [ebp - 0x12f0], 0
je 0x42bb1c
jmp 0x42bb1e
jmp 0x42badc
mov dword [ebp - 0x6f0], 0x9f4aec70
mov dword [ebp - 0x2d8], 0x7102d149
mov dword [ebp - 0x234], 0xffffffff
push 1
lea ecx, [ebp - 0x1b14]
call fcn.004392e4
mov dword [ebp - 0xfb8], 0x7d17
mov dword [ebp - 0x16ec], 0xaa1b30
cmp dword [ebp - 0xfb8], 0x7f69
jle 0x42bc17
and dword [ebp - 0x524], 0
jmp 0x42bb83
mov eax, dword [ebp - 0x524]
inc eax
mov dword [ebp - 0x524], eax
cmp dword [ebp - 0x524], 0x5b73
jge 0x42bc17
and dword [ebp - 0x41c], 0
jmp 0x42bba9
cmp dword [ebp - 0x41c], 0x54be
jge 0x42bc12
and dword [ebp - 0x5ac], 0
jmp 0x42bbcb
cmp dword [ebp - 0x5ac], 0x481b
jge 0x42bc10
mov eax, dword [ebp - 0x524]
mov ecx, dword [ebp - 0x41c]
sar eax, cl
or eax, dword [ebp - 0x5ac]
cdq
mov dword [ebp - 0x14b0], eax
mov dword [ebp - 0x14ac], edx
push dword [ebp - 0x14ac]
push dword [ebp - 0x14b0]
mov ecx, 0xab4298
call fcn.004391a0
jmp 0x42bbbe
jmp 0x42bb9c
jmp 0x42bb76
mov dword [ebp - 0x1610], 0x21fbb9cf
mov dword [ebp - 4], 8
cmp dword [ebp - 0xfb8], 0x7987
jge 0x42bc44
mov edx, dword [ebp - 0x16ec]
mov ecx, 0xab4298
call fcn.0043af56
jmp 0x42bc60
or dword [ebp - 4], 0xffffffff
jmp 0x42bc6a
push 1
push 0x3c2d
push 0x516a
push 0x4106
push 0
lea eax, [ebp - 0x1b14]
push eax
push 0x6d8b
push 1
push 0x6938
lea eax, [ebp - 0x1d20]
push eax
push 0x39c
push 1
push 0x6b91
push 1
push 1
push 0x1c81
push 0x2c7f
push 0
call fcn.00418524
add esp, 0x48
push 0xb39
push 1
push 0x7ef1
push 0
push 0x39f
push 0x522d
push 0x15ee
lea eax, [ebp - 0x2d8]
push eax
push 0x3345
push 1
push 0x261e
lea eax, [ebp - 0x234]
push eax
push 0xb93
push 0x55c5
push 0x4a84
push 0x1a31
push 0x553b
push 1
push 0x46de
push 0x41c0
push 0x5f68
push 0x3a31
call fcn.004028a1
add esp, 0x58
mov dword [ebp - 0x2d8], 0
jmp 0x42bd42
cmp dword [ebp - 0x2d8], 0
jg 0x42be11
mov dword [ebp - 0x12f8], 1
mov byte [ebp - 0x149], 0
movzx eax, byte [ebp - 0x149]
test eax, eax
je 0x42bd75
push 0
push 0
call dword [0xab740c]
mov dword [ebp - 0x234], 0
jmp 0x42bd8e
lea ecx, [ebp - 0x1b14]
call fcn.004393b6
mov dword [ebp - 0x2e0], 0
mov dword [ebp - 0x1300], 1
mov dword [ebp - 0x6c], 0x1d962ee6
mov dword [ebp - 0x434], 0x8c7b5c6e
mov dword [ebp - 0x1d28], 3
mov dword [ebp - 0x1d30], 0xf8d19c92
mov dword [ebp - 0x1d38], 0x1e19e95d
mov dword [ebp - 0x1d40], 0xfffffff7
mov dword [ebp - 0x1310], 0xfffffff9
push 3
lea ecx, [ebp - 0x1f38]
call fcn.004392e4
mov dword [ebp - 0xa78], 0x12ed4033
mov dword [ebp - 0x1620], 0
mov dword [ebp - 0x320], 0
jmp 0x42bead
cmp dword [ebp - 0x320], 4
jge 0x42bec9
lea ecx, [ebp - 0x17a8]
call fcn.004393b6
lea eax, [ebp - 0xfec]
push eax
call dword [0xab72b4]
push eax
call dword [0xab72e8]
mov dword [ebp - 0x1024], eax
mov dword [ebp - 0x134], 0xfffffffd
mov dword [ebp - 0xb00], 0
mov dword [ebp - 0x54], 0xfffffffa
mov dword [ebp - 0xe58], 0xfffffffa
mov dword [ebp - 0x45c], 0
jmp 0x42d095
mov eax, dword [ebp - 0x45c]
inc eax
mov dword [ebp - 0x45c], eax
cmp dword [ebp - 0x45c], 4
jge 0x42d0b1
mov eax, dword [ebp - 0x45c]
mov dword [ebp + eax*4 - 0x197c], 0xdb8846b5
jmp 0x42d088
push 0
lea eax, [ebp - 0xb00]
push eax
push 0xdbd
push 0x29ce
push 1
lea eax, [ebp - 0x54]
push eax
push 1
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp - 0xe58]
push eax
push 0x6132
push 0x479e
push 1
push 0x550c
push 0
push 0x2b12
push 1
call fcn.0041e92c
add esp, 0x40
mov dword [ebp - 0x54], 0
jmp 0x42d10c
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jg 0x42d69f
mov dword [ebp - 0xf8], 0xffffffff
mov dword [ebp - 0x1a4], 0x45180735
mov dword [ebp - 0x134], 3
jmp 0x42d143
mov eax, dword [ebp - 0x134]
dec eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0
jl 0x42d69a
mov dword [ebp - 0x19b0], 1
mov dword [ebp - 0x19ac], 1
mov dword [ebp - 0x19a8], 1
mov dword [ebp - 0x19a4], 1
lea ecx, [ebp - 0x751]
call fcn.004393e1
push eax
lea eax, [ebp - 0x19a0]
push eax
lea eax, [ebp - 0x19b0]
push eax
lea ecx, [ebp - 0x2220]
call fcn.004393e4
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1890]
call fcn.00439390
mov dword [ebp - 0x5bc], 0
jmp 0x42d1c6
mov eax, dword [ebp - 0x5bc]
inc eax
mov dword [ebp - 0x5bc], eax
cmp dword [ebp - 0x5bc], 2
jge 0x42d1e2
mov eax, dword [ebp - 0x5bc]
mov dword [ebp + eax*4 - 0x11c0], 0x8e51
jmp 0x42d1b9
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x197c]
mov dword [ebp - 0x10b8], eax
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x10b8]
mov dword [ebp + eax*4 - 0x197c], ecx
cmp dword [ebp - 0x10b8], 0
je 0x42d26c
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x1e20], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x11c0]
cmp dword [ebp - 0x54], eax
jge 0x42d238
mov dword [ebp - 0x1348], 1
jmp 0x42d23f
and dword [ebp - 0x1348], 0
mov eax, dword [ebp - 0xb00]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp + eax*4 - 0x197c]
imul eax, dword [ebp - 0x1a4]
test eax, eax
je 0x42d26c
mov dword [ebp - 0xe40], 1
jmp 0x42d273
and dword [ebp - 0xe40], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0xe40], eax
je 0x42d28d
mov dword [ebp - 0xb08], 1
jmp 0x42d294
and dword [ebp - 0xb08], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x11c0]
cmp eax, dword [ebp - 0xb08]
jl 0x42d2bc
push 8
pop eax
test eax, eax
je 0x42d2bc
mov dword [ebp - 0xfe0], 1
jmp 0x42d2c3
and dword [ebp - 0xfe0], 0
mov eax, dword [ebp - 0x134]
add eax, dword [ebp - 0xfe0]
je 0x42d2fa
push 0x37c9
push 1
push 0
push 0x4982
push 0x8db
push 0x640e
push 1
push 0
call fcn.00422ad3
add esp, 0x20
jmp 0x42d606
mov dword [ebp - 0xb30], 1
mov dword [ebp - 0x199c], 0x3350090
mov dword [ebp - 0x1998], 0x3350090
mov dword [ebp - 0x1994], 0x3350090
mov dword [ebp - 0x1990], 0x3350090
mov dword [ebp - 0x464], 0
jmp 0x42d345
mov eax, dword [ebp - 0x464]
inc eax
mov dword [ebp - 0x464], eax
cmp dword [ebp - 0x464], 1
jge 0x42d361
mov eax, dword [ebp - 0x464]
mov dword [ebp + eax*4 - 0x328], 0x7639
jmp 0x42d338
mov eax, dword [ebp - 0xf8]
neg eax
cmp eax, dword [ebp - 0xf8]
jne 0x42d3d5
mov dword [ebp - 0x1638], 0x114ff6a9
push 0x7354
push 0x6a8f
push 0x5426
push 0x27e7
push 0x3917
push 0
push 0x3cbe
lea eax, [ebp - 0x1638]
push eax
push 0x1f41
push 0x3632
push 0x7b14
push 0
push 0x93a
push 0x3fbc
push 0
push 1
push 1
push 0x5389
call fcn.0041bfb6
add esp, 0x48
jmp 0x42d606
mov dword [ebp - 0x748], 0xf31bc463
mov dword [ebp - 0x6f8], 0x5e7732c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x328], 0xfffffff7
jbe 0x42d575
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x328], 1
je 0x42d41f
cmp dword [ebp - 0x1a4], 0
jne 0x42d41f
and dword [ebp - 0xb10], 0
jmp 0x42d429
mov dword [ebp - 0xb10], 1
mov eax, dword [ebp - 0xb10]
add eax, 0x327bc4a6
jne 0x42d44f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x328], 0
jne 0x42d44f
and dword [ebp - 0xe48], 0
jmp 0x42d459
mov dword [ebp - 0xe48], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x328]
cmp dword [ebp - 0xe48], eax
jg 0x42d47a
mov dword [ebp - 0xb18], 1
jmp 0x42d481
and dword [ebp - 0xb18], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0xb18], eax
jle 0x42d4a3
mov eax, 0xd173
test eax, eax
jne 0x42d4a3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x328], 0
mov dword [ebp - 0x748], 0xfffffffd
mov esi, dword [ebp - 0x748]
push 2
lea ecx, [ebp - 0x1890]
call fcn.004393d2
add esi, dword [eax]
mov eax, dword [ebp - 0x54]
cmp esi, dword [ebp + eax*4 - 0x197c]
jl 0x42d4da
mov dword [ebp - 0x10c0], 1
jmp 0x42d4e1
and dword [ebp - 0x10c0], 0
mov eax, dword [ebp - 0x10c0]
add eax, 0x60aa0707
jne 0x42d4fe
push 0xfffffffffffffffe
pop eax
test eax, eax
jne 0x42d4fe
and dword [ebp - 0xb20], 0
jmp 0x42d508
mov dword [ebp - 0xb20], 1
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp + eax*4 - 0x197c]
cmp dword [ebp - 0xb20], eax
je 0x42d526
mov dword [ebp - 0xe50], 1
jmp 0x42d52d
and dword [ebp - 0xe50], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0xe50], eax
jle 0x42d547
mov dword [ebp - 0xfe8], 1
mov eax, dword [ebp - 0xfe8]
mov dword [ebp - 0xb30], eax
cmp dword [ebp - 0xb30], 0
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x199c]
cmp dword [ebp + eax - 0x199c], ecx
jg 0x42d5ba
mov dword [ebp - 0x1350], 1
jmp 0x42d5c1
and dword [ebp - 0x1350], 0
push 2
lea ecx, [ebp - 0x1890]
call fcn.004393d2
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x11c0]
mov dword [ebp - 0x1e28], eax
mov eax, dword [ebp - 0x748]
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x6f8], 0
je 0x42d606
lea ecx, [ebp - 0x1890]
call fcn.004393b6
jmp 0x42d136
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x134], eax
jg 0x42d620
mov dword [ebp - 0x1704], 1
jmp 0x42d627
and dword [ebp - 0x1704], 0
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x1e30], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x11c0], 1
ja 0x42d64c
mov eax, 0x175669ba
test eax, eax
je 0x42d661
cmp dword [ebp - 0x1a4], 0
je 0x42d661
mov dword [ebp - 0x1358], 1
jmp 0x42d668
and dword [ebp - 0x1358], 0
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x1e38], eax
mov dword [ebp - 0x1a4], 0x4e64a2b
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0xe58], eax
lea ecx, [ebp - 0x1890]
call fcn.004393b6
jmp 0x42d136
jmp 0x42d105
mov dword [ebp - 0x20], 0x24a8c6a5
mov dword [ebp - 0x8c], 6
mov dword [ebp - 0x1b4], 0xea2ff3e1
mov dword [ebp - 0xb80], 1
mov dword [ebp - 0x20], 0
jmp 0x42d6d4
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xf
jne 0x42d967
mov dword [ebp - 0x1ac], 5
mov dword [ebp - 0xff0], 0xe2e4ed
mov dword [ebp - 0xb70], 0x23fa9dfe
push 0xfffffffffffffffe
pop eax
test eax, eax
je 0x42d848
cmp dword [ebp - 0x20], 0
jne 0x42d832
cmp dword [ebp - 0x20], 1
jl 0x42d723
mov dword [ebp - 0xb38], 1
jmp 0x42d72a
and dword [ebp - 0xb38], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0xb38], eax
jle 0x42d741
mov dword [ebp - 0x10b4], 1
jmp 0x42d748
and dword [ebp - 0x10b4], 0
mov eax, dword [ebp - 0x1ac]
cmp eax, dword [ebp - 0x10b4]
jne 0x42d762
mov dword [ebp - 0xb40], 1
jmp 0x42d769
and dword [ebp - 0xb40], 0
mov eax, dword [ebp - 0xff0]
imul eax, dword [ebp - 0xb40]
test eax, eax
je 0x42d786
mov dword [ebp - 0xe60], 1
jmp 0x42d78d
and dword [ebp - 0xe60], 0
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0xe60]
jle 0x42d7a4
mov dword [ebp - 0xb48], 1
jmp 0x42d7ab
and dword [ebp - 0xb48], 0
mov eax, dword [ebp - 0xb48]
sub eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x8c], eax
jne 0x42d7c8
cmp dword [ebp - 0x8c], 0
je 0x42d7dd
cmp dword [ebp - 0xff0], 0
je 0x42d7dd
mov dword [ebp - 0xb50], 1
jmp 0x42d7e4
and dword [ebp - 0xb50], 0
mov eax, dword [ebp - 0x1ac]
cmp dword [ebp - 0xb50], eax
jge 0x42d80d
cmp dword [ebp - 0x8c], 0
je 0x42d80d
cmp dword [ebp - 0x20], 0
je 0x42d80d
mov dword [ebp - 0xe68], 1
jmp 0x42d814
and dword [ebp - 0xe68], 0
mov eax, dword [ebp - 0xe68]
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0
jne 0x42d832
and dword [ebp - 0xb58], 0
jmp 0x42d83c
mov dword [ebp - 0xb58], 1
mov eax, dword [ebp - 0xb58]
sub eax, dword [ebp - 0x1ac]
xor eax, eax
jne 0x42d858
mov dword [ebp - 0x1134], 1
jmp 0x42d85f
and dword [ebp - 0x1134], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x1134], eax
jg 0x42d876
mov dword [ebp - 0xb60], 1
jmp 0x42d87d
and dword [ebp - 0xb60], 0
cmp dword [ebp - 0xb60], 0xfffffffd
jne 0x42d895
cmp dword [ebp - 0x20], 0
jne 0x42d895
and dword [ebp - 0xe70], 0
jmp 0x42d89f
mov dword [ebp - 0xe70], 1
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0xe70], eax
jge 0x42d8b6
mov dword [ebp - 0xb68], 1
jmp 0x42d8bd
and dword [ebp - 0xb68], 0
mov eax, dword [ebp - 0xb68]
mov dword [ebp - 0xb70], eax
cmp dword [ebp - 0x1ac], 5
je 0x42d8e7
cmp dword [ebp - 0x1ac], 0
je 0x42d8e7
mov dword [ebp - 0xff8], 1
jmp 0x42d8ee
and dword [ebp - 0xff8], 0
cmp dword [ebp - 0xff8], 0xfff8
jbe 0x42d92b
lea eax, [ebp - 0x1ac]
push eax
push 0x5516
lea eax, [ebp - 0xb70]
push eax
push 0
push 1
push 0x54fc
push 1
push 1
push 1
push 0x20d4
call fcn.004146cd
add esp, 0x28
jmp 0x42d962
mov byte [ebp - 0x195], 0
push 0x5df1
push 0x6f65
push 1
push 0x3822
push 0
push 0x2bad
push 1
push 0x2d2a
push 0
lea eax, [ebp - 0x195]
push eax
call fcn.0041f041
add esp, 0x28
jmp 0x42d6cd
mov dword [ebp - 0x8c], 0xfffffff6
jmp 0x42d980
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 3
jl 0x42daff
mov dword [ebp - 0x46c], 0xe734
mov dword [ebp - 0x1360], 0x1ec3d250
mov dword [ebp - 0x54c], 0
jmp 0x42d9ba
mov eax, dword [ebp - 0x54c]
inc eax
mov dword [ebp - 0x54c], eax
cmp dword [ebp - 0x54c], 1
jge 0x42d9d6
mov eax, dword [ebp - 0x54c]
mov dword [ebp + eax*4 - 0xb88], 0x77d7e7d
jmp 0x42d9ad
cmp dword [ebp - 0x20], 0
jne 0x42da11
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1e40], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x1e48], eax
mov eax, dword [ebp - 0x46c]
cmp dword [ebp - 0x46c], eax
jne 0x42da08
cmp dword [ebp - 0x8c], 0
jne 0x42da11
and dword [ebp - 0x1640], 0
jmp 0x42da1b
mov dword [ebp - 0x1640], 1
mov eax, dword [ebp - 0x46c]
mov dword [ebp - 0x1e50], eax
mov eax, dword [ebp - 0x46c]
mov dword [ebp - 0x1e58], eax
mov eax, dword [ebp - 0x1360]
cmp dword [ebp - 0x20], eax
je 0x42da4a
mov dword [ebp - 0xe78], 1
jmp 0x42da51
and dword [ebp - 0xe78], 0
mov eax, dword [ebp - 0x8c]
imul eax, dword [ebp - 0xe78]
cmp dword [ebp - 0x1b4], eax
jl 0x42da72
mov dword [ebp - 0xb78], 1
jmp 0x42da79
and dword [ebp - 0xb78], 0
mov eax, dword [ebp - 0xb80]
imul eax, dword [ebp - 0xb78]
test eax, eax
je 0x42da9f
cmp dword [ebp - 0x1b4], 0
je 0x42da9f
mov dword [ebp - 0x10bc], 1
jmp 0x42daa6
and dword [ebp - 0x10bc], 0
mov eax, dword [ebp - 0x10bc]
sub eax, dword [ebp - 0xb80]
cmp eax, 0xfffffff9
je 0x42dac3
mov dword [ebp - 0xe80], 1
jmp 0x42daca
and dword [ebp - 0xe80], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe80]
mov dword [ebp + eax - 0xb88], ecx
mov dword [ebp - 0x1b4], 8
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp + eax - 0xb88], ecx
jmp 0x42d973
mov dword [ebp - 0x1018], 0x10e4
mov dword [ebp - 0x1648], 0xaa1c10
cmp dword [ebp - 0x1018], 0x1316
jle 0x42dc23
and dword [ebp - 0x614], 0
jmp 0x42db39
mov eax, dword [ebp - 0x614]
inc eax
mov dword [ebp - 0x614], eax
cmp dword [ebp - 0x614], 0x429d
jge 0x42dc23
and dword [ebp - 0x474], 0
jmp 0x42db5f
mov eax, dword [ebp - 0x474]
inc eax
mov dword [ebp - 0x474], eax
cmp dword [ebp - 0x474], 0x642e
jge 0x42dc1e
and dword [ebp - 0x554], 0
jmp 0x42db85
mov eax, dword [ebp - 0x554]
inc eax
mov dword [ebp - 0x554], eax
cmp dword [ebp - 0x554], 0x70bf
jge 0x42dc19
and dword [ebp - 0x47c], 0
jmp 0x42dbab
mov eax, dword [ebp - 0x47c]
inc eax
mov dword [ebp - 0x47c], eax
cmp dword [ebp - 0x47c], 0x312c
jge 0x42dc14
mov eax, dword [ebp - 0x614]
mov ecx, dword [ebp - 0x474]
sar eax, cl
mov ecx, dword [ebp - 0x554]
add ecx, dword [ebp - 0x47c]
or eax, ecx
cdq
mov dword [ebp - 0x14c8], eax
mov dword [ebp - 0x14c4], edx
push dword [ebp - 0x14c4]
push dword [ebp - 0x14c8]
lea ecx, [ebp - 0x2330]
call fcn.004019fe
pop ecx
pop ecx
mov ecx, eax
call fcn.00439195
push eax
call fcn.004ac497
pop ecx
lea ecx, [ebp - 0x2330]
call fcn.0043918b
jmp 0x42db9e
jmp 0x42db78
jmp 0x42db52
jmp 0x42db2c
mov dword [ebp - 0x40], 0xa4f833fc
mov dword [ebp - 0x244], 0
mov dword [ebp - 0xea0], 0x5c5bccbf
mov dword [ebp - 0xbc0], 0x3da79815
mov dword [ebp - 0xbd8], 7
mov dword [ebp - 0x113c], 0xffffffff
push 1
lea ecx, [ebp - 0x1b98]
call fcn.004392e4
mov dword [ebp - 0x74], 0
jmp 0x42dc79
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x42dc8f
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x100], 0xa8e
jmp 0x42dc72
push 0
lea eax, [ebp - 0x1b98]
push eax
push 0x50b8
push 0
push 0x6b3c
push 0x43db
lea eax, [ebp - 0x74]
push eax
push 1
push 0x5e77
push 0x4d1e
call fcn.004087af
add esp, 0x28
mov dword [ebp - 0x74], 0
jmp 0x42dcd1
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x42dce7
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x1e0c], 0
jmp 0x42dcca
mov dword [ebp - 0x40], 0
jmp 0x42dcf7
cmp dword [ebp - 0x40], 0
jl 0x42df66
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x5c4], 0x6bf5ee87
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x1e60], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x1e68], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x100]
neg eax
cmp eax, dword [ebp - 0x34]
jl 0x42dd44
mov dword [ebp - 0x1000], 1
jmp 0x42dd4b
and dword [ebp - 0x1000], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x1000], eax
jle 0x42dd62
mov dword [ebp - 0xb90], 1
jmp 0x42dd69
and dword [ebp - 0xb90], 0
mov eax, dword [ebp - 0xb90]
add eax, 0x35f28aa1
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
lea eax, [eax + ecx - 1]
cmp eax, 8
jbe 0x42dd95
mov dword [ebp - 0xe88], 1
jmp 0x42dd9c
and dword [ebp - 0xe88], 0
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0xe88]
je 0x42ddb3
mov dword [ebp - 0xb98], 1
jmp 0x42ddba
and dword [ebp - 0xb98], 0
cmp dword [ebp - 0xb98], 0
jne 0x42ddcf
mov dword [ebp - 0x1114], 1
jmp 0x42ddd6
and dword [ebp - 0x1114], 0
cmp dword [ebp - 0x1114], 0xc46983c1
jne 0x42ddee
mov dword [ebp - 0xba0], 1
jmp 0x42ddf5
and dword [ebp - 0xba0], 0
mov eax, dword [ebp - 0xba0]
sub eax, dword [ebp - 0x40]
je 0x42de12
cmp dword [ebp - 0x34], 0
je 0x42de12
mov dword [ebp - 0xe90], 1
jmp 0x42de19
and dword [ebp - 0xe90], 0
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0xe90]
je 0x42de30
mov dword [ebp - 0xba8], 1
jmp 0x42de37
and dword [ebp - 0xba8], 0
cmp dword [ebp - 0xba8], 0x996f
jge 0x42de58
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0xbc0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x100]
cmp dword [ebp - 0xbc0], eax
jne 0x42df93
mov dword [ebp - 0xbc8], 1
jmp 0x42df9a
and dword [ebp - 0xbc8], 0
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0xea0], eax
mov eax, dword [ebp - 0xea0]
cmp eax, dword [ebp - 0xbc8]
jge 0x42dfc0
mov dword [ebp - 0xbe0], 1
jmp 0x42dfc7
and dword [ebp - 0xbe0], 0
cmp dword [ebp - 0x244], 1
jne 0x42dfdc
mov dword [ebp - 0x1010], 1
jmp 0x42dfe3
and dword [ebp - 0x1010], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x100]
cmp dword [ebp - 0x1010], eax
je 0x42e004
mov dword [ebp - 0xbd0], 1
jmp 0x42e00b
and dword [ebp - 0xbd0], 0
mov eax, dword [ebp - 0x244]
cmp dword [ebp - 0xbd0], eax
jge 0x42e025
mov dword [ebp - 0xea8], 1
jmp 0x42e02c
and dword [ebp - 0xea8], 0
mov eax, dword [ebp - 0xea8]
add eax, 0x5d3615df
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x100]
jne 0x42e052
mov dword [ebp - 0x1368], 1
jmp 0x42e059
and dword [ebp - 0x1368], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x100]
mov dword [ebp - 0x2044], eax
mov dword [ebp - 0xbd8], 0x8453
mov eax, dword [ebp - 0xbd8]
mov dword [ebp - 0x113c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x100]
cmp dword [ebp - 0x113c], eax
jle 0x42e0a9
cmp dword [ebp - 0x244], 0
jne 0x42e0a9
and dword [ebp - 0xeb0], 0
jmp 0x42e0b3
mov dword [ebp - 0xeb0], 1
mov eax, dword [ebp - 0xbe0]
cmp eax, dword [ebp - 0xeb0]
jne 0x42e0cd
mov dword [ebp - 0xbe8], 1
jmp 0x42e0d4
and dword [ebp - 0xbe8], 0
mov dword [ebp - 0x40], 0xe240
mov esi, dword [ebp - 0x40]
sub esi, dword [ebp - 0xbe8]
push 0
lea ecx, [ebp - 0x1b98]
call fcn.004393d2
add esi, dword [eax]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1e0c], esi
lea ecx, [ebp - 0x1b98]
call fcn.004393b6
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x1018], 0x10a9
jge 0x42e12a
mov byte [ebp - 0x146], 0
movzx eax, byte [ebp - 0x146]
test eax, eax
je 0x438024
push 0
push 0
push 0
call dword [0xab73ac]
jmp 0x4381d3
mov eax, dword [ebp - 0x1354]
mov dword [ebp - 0x13dc], eax
mov eax, dword [ebp - 0x135c]
mov dword [ebp - 0x139c], eax
mov eax, dword [ebp - 0x1364]
mov dword [ebp - 0x13d4], eax
mov eax, dword [ebp - 0x136c]
mov dword [ebp - 0x1384], eax
mov eax, dword [ebp - 0x1374]
mov dword [ebp - 0x1394], eax
mov eax, dword [ebp - 0x137c]
mov dword [ebp - 0x138c], eax
mov eax, dword [ebp - 0x1384]
movzx eax, byte [eax]
test eax, eax
je 0x43815e
mov eax, dword [ebp - 0x138c]
mov dword [ebp - 0x13a4], eax
mov eax, dword [ebp - 0x1394]
mov dword [ebp - 0x13ac], eax
mov eax, dword [ebp - 0x139c]
mov dword [ebp - 0x13b4], eax
mov eax, dword [ebp - 0x13a4]
mov dword [ebp - 0x13c4], eax
mov eax, dword [ebp - 0x13ac]
mov dword [ebp - 0x13bc], eax
mov eax, dword [ebp - 0x13b4]
mov dword [ebp - 0x13cc], eax
mov edx, dword [ebp - 0x13bc]
mov ecx, dword [ebp - 0x13c4]
call fcn.0043b141
movzx eax, al
test eax, eax
je 0x43815c
mov dword [ebp - 0x1d4c], 0xfffffffb
mov dword [ebp - 0x2070], 0x60f57a7c
mov dword [ebp - 0x1d54], 0xade2167f
mov dword [ebp - 0x1f7c], 0
mov dword [ebp - 0x1d5c], 3
mov dword [ebp - 0x20c8], 1
mov dword [ebp - 0x1d64], 0x11151
mov dword [ebp - 0x1f8c], 0
mov dword [ebp - 0x1d6c], 0
mov dword [ebp - 0x1084], 0xd4a0
mov eax, dword [ebp - 0x1084]
dec eax
mov dword [ebp - 0x1084], eax
mov eax, dword [ebp - 0x13cc]
mov byte [eax], 1
jmp 0x4381d3
mov eax, dword [ebp - 0x13d4]
mov dword [ebp - 0x13e4], eax
mov eax, dword [ebp - 0x13dc]
mov dword [ebp - 0x13ec], eax
mov eax, dword [ebp - 0x13e4]
mov dword [ebp - 0x334], eax
mov eax, dword [ebp - 0x13ec]
mov dword [ebp - 0x13f4], eax
mov eax, dword [ebp - 0x334]
mov dword [eax], 0
jmp 0x4381ad
mov eax, dword [ebp - 0x334]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x334]
mov dword [ecx], eax
mov eax, dword [ebp - 0x334]
cmp dword [eax], 3
jge 0x4381d3
mov eax, dword [ebp - 0x334]
push dword [eax]
mov ecx, dword [ebp - 0x13f4]
call fcn.004393d2
mov dword [eax], 0x964a90c6
jmp 0x43819c
jmp 0x4383c7
mov dword [ebp - 0x108c], 0x542a
mov dword [ebp - 0x13fc], 0xaa20e0
cmp dword [ebp - 0x108c], 0x5592
jle 0x4382e1
and dword [ebp - 0x600], 0
jmp 0x438212
mov eax, dword [ebp - 0x600]
inc eax
mov dword [ebp - 0x600], eax
cmp dword [ebp - 0x600], 0x4b98
jge 0x4382d9
and dword [ebp - 0x608], 0
jmp 0x438238
mov eax, dword [ebp - 0x608]
inc eax
mov dword [ebp - 0x608], eax
cmp dword [ebp - 0x608], 0x1bb0
jge 0x4382d4
and dword [ebp - 0x610], 0
jmp 0x43825e
mov eax, dword [ebp - 0x610]
inc eax
mov dword [ebp - 0x610], eax
cmp dword [ebp - 0x610], 0xb43
jge 0x4382cf
and dword [ebp - 0x618], 0
jmp 0x438280
mov eax, dword [ebp - 0x618]
inc eax
mov dword [ebp - 0x618], eax
cmp dword [ebp - 0x618], 0x7568
jge 0x4382cd
mov eax, dword [ebp - 0x600]
imul eax, dword [ebp - 0x608]
mov ecx, dword [ebp - 0x610]
imul ecx, dword [ebp - 0x618]
sub eax, ecx
cdq
mov dword [ebp - 0x157c], eax
mov dword [ebp - 0x1578], edx
push dword [ebp - 0x1578]
push dword [ebp - 0x157c]
mov ecx, 0xab4298
call fcn.004391a0
jmp 0x438273
jmp 0x438251
jmp 0x43822b
jmp 0x438205
push 0
call dword [fcn.00ab721c]
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x142c], eax
mov dword [ebp - 4], 0x2a
cmp dword [ebp - 0x108c], 0x526d
jge 0x43830d
mov edx, dword [ebp - 0x13fc]
mov ecx, 0xab4298
call fcn.0043af56
jmp 0x438329
or dword [ebp - 4], 0xffffffff
jmp 0x438333
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x1414], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x1444], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x143c], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x1404], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x1424], eax
mov eax, dword [ebp + 0x48]
mov dword [ebp - 0x140c], eax
mov eax, dword [ebp + 0x38]
mov dword [ebp - 0x1434], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x141c], eax
push 1
push dword [ebp - 0x1404]
push dword [ebp - 0x140c]
push 1
push dword [ebp - 0x1414]
push dword [ebp - 0x141c]
push dword [ebp - 0x1424]
push dword [ebp - 0x142c]
push 0x7e6f
push dword [ebp - 0x1434]
push 0x20eb
push dword [ebp - 0x143c]
push dword [ebp - 0x1444]
call fcn.00414c9a
add esp, 0x34
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret