Function at 0x419024
Capabilities:
Contain obfuscated stackstrings
Enumerate pe sections
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d1bbd
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x3b8
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
and dword [ebp - 0x1c], 0
movzx eax, byte [ebp + 0x28]
test eax, eax
je 0x41a975
mov dword [ebp - 0x14c], 0x3d76
mov dword [ebp - 0x200], 0xac60d4
cmp dword [ebp - 0x14c], 0x3fbc
jle 0x419146
and dword [ebp - 0x128], 0
jmp 0x419093
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x290d
jge 0x419146
and dword [ebp - 0xd4], 0
jmp 0x4190b9
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x3e5d
jge 0x419141
and dword [ebp - 0x120], 0
jmp 0x4190db
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x6368
jge 0x41913c
mov ecx, dword [ebp - 0xd4]
sub ecx, dword [ebp - 0x120]
mov eax, dword [ebp - 0x128]
sar eax, cl
cdq
mov dword [ebp - 0x208], eax
mov dword [ebp - 0x204], edx
push dword [ebp - 0x204]
push dword [ebp - 0x208]
lea ecx, [ebp - 0x320]
call fcn.00401a2d
pop ecx
pop ecx
mov ecx, eax
call fcn.0041d02b
push eax
call fcn.004bc2e7
pop ecx
lea ecx, [ebp - 0x320]
call fcn.0041d021
jmp 0x4190ce
jmp 0x4190ac
jmp 0x419086
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x230], eax
and dword [ebp - 4], 0
cmp dword [ebp - 0x14c], 0x3b49
jge 0x41916b
push dword [ebp - 0x200]
call fcn.004bc2e7
pop ecx
jmp 0x419187
or dword [ebp - 4], 0xffffffff
jmp 0x419191
mov dword [ebp - 0x184], 0xcfc
mov dword [ebp - 0x1fc], 0xac6100
cmp dword [ebp - 0x184], 0x1013
jle 0x41924b
and dword [ebp - 0x130], 0
jmp 0x4191cb
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0x10c7
jge 0x41924b
and dword [ebp - 0x10c], 0
jmp 0x4191ed
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x26a6
jge 0x419246
mov eax, dword [ebp - 0x130]
or eax, dword [ebp - 0x10c]
cdq
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x210], edx
push dword [ebp - 0x210]
push dword [ebp - 0x214]
lea ecx, [ebp - 0x3c8]
call fcn.00401a2d
pop ecx
pop ecx
mov ecx, eax
call fcn.0041d02b
push eax
call fcn.004bc2e7
pop ecx
lea ecx, [ebp - 0x3c8]
call fcn.0041d021
jmp 0x4191e0
jmp 0x4191be
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x224], eax
mov dword [ebp - 4], 2
cmp dword [ebp - 0x184], 0xa85
jge 0x419273
push dword [ebp - 0x1fc]
call fcn.004bc2e7
pop ecx
jmp 0x41928f
or dword [ebp - 4], 0xffffffff
jmp 0x419299
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x26c], eax
lea eax, [ebp + 0x2c]
mov dword [ebp - 0x264], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x278], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1d8], eax
mov dword [ebp - 0x148], 0x61fe
mov dword [ebp - 0x1c4], 0xac6170
cmp dword [ebp - 0x148], 0x63d2
jle 0x419360
and dword [ebp - 0xcc], 0
jmp 0x4192fc
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x4fd6
jge 0x419360
and dword [ebp - 0x110], 0
jmp 0x41931e
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x76fc
jge 0x41935e
mov eax, dword [ebp - 0xcc]
cdq
idiv dword [ebp - 0x110]
mov eax, edx
cdq
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], edx
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
mov ecx, 0xae9ab8
call fcn.0041d036
jmp 0x419311
jmp 0x4192ef
mov eax, dword [ebp - 0x264]
movzx eax, byte [eax]
test eax, eax
je 0x41a763
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x18c]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x419398
jmp 0x41ab54
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x2c]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x4c], ecx
mov eax, dword [ebp - 0x4c]
cmp dword [eax], 0x4550
je 0x4193b7
jmp 0x41ab54
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4c]
lea eax, [ecx + eax + 0x78]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
cmp dword [eax + 4], 0
jne 0x4193d5
jmp 0x41ab54
and dword [ebp - 0x28], 0
mov eax, dword [ebp - 0x4c]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0x4c]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0x58], eax
and dword [ebp - 0x134], 0
jmp 0x419409
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x58]
add eax, 0x28
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x4c]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x134], eax
jge 0x4194b0
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x198]
jb 0x4194ab
mov eax, dword [ebp - 0x4c]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x58]
push dword [eax + 8]
call fcn.00416fa3
pop ecx
pop ecx
add eax, dword [ebp - 0x198]
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x274]
jae 0x4194ab
push 0x538f
push 0x6047
push 1
push 0x6e19
push 1
push 0x1139
push 0x4b89
push 0x19f
push 1
push 0x167e
lea eax, [ebp - 0x28]
push eax
push 0x1aa7
push 0x494c
lea eax, [ebp - 0x58]
push eax
push 0x5bb9
call fcn.00418457
add esp, 0x3c
jmp 0x4194b0
jmp 0x4193f3
cmp dword [ebp - 0x28], 0
jne 0x4194bb
jmp 0x41ab54
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x28]
add ecx, dword [eax]
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x14], ecx
xor ecx, ecx
call fcn.00401a9c
push eax
call fcn.004bc3bc
pop ecx
mov byte [ebp - 0xc0], 6
mov byte [ebp - 0xbf], 0xff
mov byte [ebp - 0xbe], 4
mov byte [ebp - 0xbd], 9
mov byte [ebp - 0xbc], 3
mov byte [ebp - 0xbb], 0xf
mov byte [ebp - 0xba], 1
mov byte [ebp - 0xb9], 2
mov byte [ebp - 0xb8], 2
mov byte [ebp - 0xb7], 2
mov byte [ebp - 0xb6], 7
mov byte [ebp - 0xb5], 1
mov byte [ebp - 0xb4], 5
mov byte [ebp - 0xb3], 7
mov byte [ebp - 0xb2], 0x19
mov byte [ebp - 0xb1], 0x54
mov byte [ebp - 0xb0], 0x6e
mov byte [ebp - 0xaf], 0x25
mov byte [ebp - 0xae], 0xa3
mov byte [ebp - 0xad], 0x6d
mov byte [ebp - 0xac], 0xf9
mov byte [ebp - 0xab], 0x39
mov byte [ebp - 0xaa], 0x21
mov byte [ebp - 0xa9], 0x3c
mov byte [ebp - 0xa8], 0x62
mov byte [ebp - 0xa7], 0x7e
mov byte [ebp - 0xa6], 0xe2
mov byte [ebp - 0xa5], 0x11
mov byte [ebp - 0xa4], 0x8d
mov byte [ebp - 0xa3], 0x7b
mov byte [ebp - 0xa2], 0xf6
mov byte [ebp - 0xa1], 0xb6
mov byte [ebp - 0xa0], 0x12
mov byte [ebp - 0x9f], 0x57
mov byte [ebp - 0x9e], 0x5b
mov byte [ebp - 0x9d], 0xf9
mov byte [ebp - 0x9c], 0x5c
mov byte [ebp - 0x9b], 0xfc
mov byte [ebp - 0x9a], 0
mov byte [ebp - 0x99], 0xc6
mov byte [ebp - 0x98], 0
mov byte [ebp - 0x97], 0
mov byte [ebp - 0x96], 8
mov byte [ebp - 0x95], 1
mov byte [ebp - 0x94], 9
mov byte [ebp - 0x93], 0
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xc0]
or eax, 0xce
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xc0]
and ecx, 0xce
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0xc0]
mov byte [ebp + ecx - 0x1a8], al
mov dword [ebp - 0x20], 2
and dword [ebp - 0x7c], 0
jmp 0x41966c
mov eax, dword [ebp - 0x20]
inc eax
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x2e
jae 0x419760
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xc0]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x20], eax
jne 0x4196b3
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0xc0]
inc eax
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0xc0]
mov ecx, dword [ebp - 0x20]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x20], eax
jmp 0x419664
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0xbf]
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x7c]
movzx ecx, byte [ebp + ecx - 0xc2]
movsx ecx, byte [ebp + ecx - 0x1a8]
add eax, ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0xbf]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x7c]
movzx edx, byte [ebp + edx - 0xc2]
movsx edx, byte [ebp + edx - 0x1a8]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0xbf]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x7c]
movzx edx, byte [ebp + edx - 0xc2]
movsx edx, byte [ebp + edx - 0x1a8]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0xc0]
mov byte [ebp + ecx - 0x1a8], al
push 1
push 0x7e37
push 0x308e
lea eax, [ebp - 0x7c]
push eax
push 0x7661
push 0x226a
push 0x731f
push 0
call fcn.0041793f
add esp, 0x20
jmp 0x419664
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x1a8], 0
push 0xa
lea eax, [ebp - 0x1a8]
push eax
lea ecx, [ebp - 0x2f0]
call fcn.0041d14b
xor edx, edx
mov ecx, eax
call fcn.00401a61
pop ecx
mov dword [ebp - 0x1c0], eax
lea ecx, [ebp - 0x2f0]
call fcn.0041d1d3
and dword [ebp - 0xc4], 0
jmp 0x4197b3
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0xb
jae 0x4197cc
mov eax, dword [ebp - 0xc4]
mov byte [ebp + eax - 0x1a8], 0
jmp 0x4197a6
mov byte [ebp - 0x70], 1
mov byte [ebp - 0x6f], 0x47
mov byte [ebp - 0x6e], 0
mov byte [ebp - 0x6d], 7
mov byte [ebp - 0x6c], 3
mov byte [ebp - 0x6b], 0x35
mov byte [ebp - 0x6a], 0xda
mov byte [ebp - 0x69], 0xc0
mov byte [ebp - 0x68], 3
mov byte [ebp - 0x67], 3
mov byte [ebp - 0x66], 2
mov byte [ebp - 0x65], 5
mov byte [ebp - 0x64], 4
mov byte [ebp - 0x63], 3
mov byte [ebp - 0x62], 5
mov byte [ebp - 0x61], 5
mov byte [ebp - 0x60], 8
mov byte [ebp - 0x5f], 1
mov byte [ebp - 0x5e], 9
mov byte [ebp - 0x5d], 0
mov byte [ebp - 0x5c], 6
mov byte [ebp - 0x5b], 9
mov byte [ebp - 0x5a], 7
mov byte [ebp - 0x59], 0xf
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x70]
or eax, 0x71
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x70]
and ecx, 0x71
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x70]
mov byte [ebp + ecx - 0x1b4], al
mov dword [ebp - 0x24], 2
and dword [ebp - 0x84], 0
jmp 0x419874
mov eax, dword [ebp - 0x24]
inc eax
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x18
jae 0x419954
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x70]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x24], eax
jne 0x4198b5
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0x70]
inc eax
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0x70]
mov ecx, dword [ebp - 0x24]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x24], eax
jmp 0x41986c
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0x6f]
mov ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x84]
movzx ecx, byte [ebp + ecx - 0x72]
movsx ecx, byte [ebp + ecx - 0x1b4]
add eax, ecx
mov ecx, dword [ebp - 0x24]
movzx ecx, byte [ebp + ecx - 0x6f]
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x84]
movzx edx, byte [ebp + edx - 0x72]
movsx edx, byte [ebp + edx - 0x1b4]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x24]
movzx ecx, byte [ebp + ecx - 0x6f]
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x84]
movzx edx, byte [ebp + edx - 0x72]
movsx edx, byte [ebp + edx - 0x1b4]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x24]
movzx ecx, byte [ebp + ecx - 0x70]
mov byte [ebp + ecx - 0x1b4], al
push 0x8a5
push 0xb66
push 1
lea eax, [ebp - 0x84]
push eax
push 0x262a
push 0
push 0x7c1b
call fcn.004189e9
add esp, 0x1c
jmp 0x41986c
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x1b4], 0
push 0xa
lea eax, [ebp - 0x1b4]
push eax
lea ecx, [ebp - 0x380]
call fcn.0041d14b
xor edx, edx
mov ecx, eax
call fcn.00401a61
pop ecx
mov dword [ebp - 0x27c], eax
lea ecx, [ebp - 0x380]
call fcn.0041d1d3
and dword [ebp - 0x118], 0
jmp 0x4199a7
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0xb
jae 0x4199c0
mov eax, dword [ebp - 0x118]
mov byte [ebp + eax - 0x1b4], 0
jmp 0x41999a
push dword [ebp - 0x27c]
push dword [ebp - 0x1c0]
call fcn.00412033
pop ecx
pop ecx
mov dword [ebp - 0x178], eax
lea eax, [ebp - 0x4c]
push eax
push 1
push 0x46d
push 1
push 0x44b3
push 0x61da
push 0
push 0x1079
push 0x3025
lea eax, [ebp - 0x178]
push eax
push 0x3784
call fcn.00418bb0
add esp, 0x2c
push 0x7c17
push 1
push 0x708b
lea eax, [ebp - 0x178]
push eax
lea eax, [ebp - 0x14]
push eax
push 0x4dae
push 0x4c74
push 0
call fcn.00418397
add esp, 0x20
and dword [ebp - 0x74], 0
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 0
jbe 0x419a5a
mov eax, dword [ebp - 0x14]
push dword [eax + 0x18]
push 0
call fcn.00412033
pop ecx
pop ecx
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x14]
sub eax, dword [ebp - 0x74]
mov dword [ebp - 0x54], eax
and dword [ebp - 0x88], 0
jmp 0x419a85
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x54]
jge 0x419b5d
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov eax, dword [eax + 0x14]
sub eax, dword [ecx + 0x18]
cmp dword [ebp - 0x88], eax
jae 0x419ac5
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
add ecx, dword [eax + 0x1c]
add ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x88]
mov eax, dword [ecx + eax*4]
mov dword [ebp - 0x17c], eax
jmp 0x419aeb
push 0
push 0x3232
push 0x3ec9
lea eax, [ebp - 0x17c]
push eax
push 0x57a6
lea eax, [ebp - 0x58]
push eax
push 1
call fcn.004174b8
add esp, 0x1c
lea eax, [ebp - 0x17c]
push eax
push 0x3bda
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x28]
push eax
push 0x1496
lea eax, [ebp - 0x2c]
push eax
push 0x4b1c
push 0x65fa
push 0x11e3
push 1
push 0
call fcn.00418d7c
add esp, 0x2c
push 0x5c71
push 1
push 0x18a4
push 0
push 0x430d
lea eax, [ebp - 0x18]
push eax
push 1
push 0x29b2
push 0x2067
push 0x6c4c
push 0x4623
call fcn.00418bb0
add esp, 0x2c
jmp 0x419a78
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x14]
sub eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x14], eax
push 0x1bac
push 1
push 0x4b0f
push 1
lea eax, [ebp - 0x74]
push eax
push 0x60c3
push 1
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x54]
push eax
push 0x2a6c
push 0x74c3
call fcn.00418bb0
add esp, 0x2c
and dword [ebp - 0x140], 0
jmp 0x419bb5
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x140]
cmp eax, dword [ebp - 0x54]
jge 0x419d30
push 0x1f0
push 1
push 0x5c8c
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x28]
push eax
push 1
push 0x2fc6
push 0x7d8a
call fcn.00418cb7
add esp, 0x24
push 1
push 0x3292
lea eax, [ebp - 0x18]
push eax
push 0x4b7a
push 0x556a
push 0x585b
push 1
call fcn.004174b8
add esp, 0x1c
mov dword [ebp - 0x150], 0x3515
mov dword [ebp - 0x1f4], 0xac61d0
cmp dword [ebp - 0x150], 0x3779
jle 0x419ce2
and dword [ebp - 0xe4], 0
jmp 0x419c4e
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x1f2e
jge 0x419ce2
and dword [ebp - 0xdc], 0
jmp 0x419c74
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x6fae
jge 0x419cdd
and dword [ebp - 0x12c], 0
jmp 0x419c96
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x3b6
jge 0x419cdb
mov ecx, dword [ebp - 0xdc]
sub ecx, dword [ebp - 0x12c]
mov eax, dword [ebp - 0xe4]
sar eax, cl
cdq
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x228], edx
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
mov ecx, 0xae9ab8
call fcn.0041d036
jmp 0x419c89
jmp 0x419c67
jmp 0x419c41
mov dword [ebp - 4], 4
cmp dword [ebp - 0x150], 0x34ed
jge 0x419d05
mov edx, dword [ebp - 0x1f4]
mov ecx, 0xae9ab8
call fcn.0041f563
jmp 0x419d21
or dword [ebp - 4], 0xffffffff
jmp 0x419d2b
jmp 0x419ba8
push 0xea3
lea eax, [ebp - 0x18]
push eax
push 0x4bae
push 0x2499
lea eax, [ebp - 0x54]
push eax
push 0x6b59
lea eax, [ebp - 0x14]
push eax
push 0x4b59
push 0x5bd1
push 1
push 1
call fcn.00418d7c
add esp, 0x2c
push 0x3318
push 0x6b51
push 0
lea eax, [ebp - 0x14]
push eax
push 1
push 0x43ab
push 0x342c
lea eax, [ebp - 0x74]
push eax
push 0
push 0x48b
push 0x4172
push 0x44dc
push 0x3b9f
push 0x7dd8
push 0x43bf
call fcn.00418457
add esp, 0x3c
and dword [ebp - 0x114], 0
jmp 0x419dc4
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
cmp eax, dword [ebp - 0x54]
jge 0x419f4c
push 0x5d0b
push 0x3bf8
lea eax, [ebp - 0x2c]
push eax
push 0x746b
push 1
push 0x978
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x114]
push eax
push 0x3663
lea eax, [ebp - 0x14]
push eax
push 0x51bd
push 0x864
lea eax, [ebp - 0x18]
push eax
push 0x6f21
push 0
call fcn.00418eb6
add esp, 0x3c
mov dword [ebp - 0x190], 0x138
mov dword [ebp - 0x218], 0xac624c
cmp dword [ebp - 0x190], 0x277
jle 0x419ee8
and dword [ebp - 0xec], 0
jmp 0x419e58
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x2cb
jge 0x419ed8
and dword [ebp - 0x124], 0
jmp 0x419e7a
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0x6446
jge 0x419ed3
mov eax, dword [ebp - 0xec]
add eax, dword [ebp - 0x124]
cdq
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], edx
push dword [ebp - 0x234]
push dword [ebp - 0x238]
lea ecx, [ebp - 0x350]
call fcn.00401a2d
pop ecx
pop ecx
mov ecx, eax
call fcn.0041d02b
push eax
call fcn.004bc2e7
pop ecx
lea ecx, [ebp - 0x350]
call fcn.0041d021
jmp 0x419e6d
jmp 0x419e4b
push 0xe38
push 0xde0
call dword [0xaec110]
mov dword [ebp - 4], 6
cmp dword [ebp - 0x190], 0x10c
jge 0x419f07
push dword [ebp - 0x218]
call fcn.004bc2e7
pop ecx
jmp 0x419f23
or dword [ebp - 4], 0xffffffff
jmp 0x419f2d
push 0
push 0x61ad
lea eax, [ebp - 0x18]
push eax
push 0x21cc
push 0
call fcn.00418823
add esp, 0x14
jmp 0x419db7
mov eax, dword [ebp - 0x54]
shl eax, 1
mov ecx, dword [ebp - 0x18]
sub ecx, eax
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x24], ecx
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
add ecx, dword [eax + 0xc]
add ecx, dword [ebp - 0x2c]
push ecx
lea ecx, [ebp - 0x2c0]
call fcn.0041d14b
lea ecx, [ebp - 0x2c0]
call fcn.0041d1ee
mov dword [ebp - 0x158], eax
push dword [ebp - 0x158]
mov eax, dword [ebp - 0x158]
shr eax, 1
push eax
call fcn.00412033
pop ecx
pop ecx
mov dword [ebp - 0x80], eax
mov byte [ebp - 0x44], 2
mov byte [ebp - 0x43], 0x96
mov byte [ebp - 0x42], 0
mov byte [ebp - 0x41], 0x42
mov byte [ebp - 0x40], 1
mov byte [ebp - 0x3f], 0x4a
mov byte [ebp - 0x3e], 1
mov byte [ebp - 0x3d], 0x3b
mov byte [ebp - 0x3c], 3
mov byte [ebp - 0x3b], 8
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x44]
or eax, 0xfa
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x44]
and ecx, 0xfa
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x44]
mov byte [ebp + ecx - 0x90], al
mov dword [ebp - 0x30], 2
and dword [ebp - 0xf4], 0
jmp 0x41a013
mov eax, dword [ebp - 0x30]
inc eax
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xa
jae 0x41a0db
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x44]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x30], eax
jne 0x41a054
mov eax, dword [ebp - 0x30]
movzx eax, byte [ebp + eax - 0x44]
inc eax
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0x30]
movzx eax, byte [ebp + eax - 0x44]
mov ecx, dword [ebp - 0x30]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x30], eax
jmp 0x41a00b
mov eax, dword [ebp - 0x30]
movzx eax, byte [ebp + eax - 0x43]
mov ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0xf4]
movzx ecx, byte [ebp + ecx - 0x46]
movsx ecx, byte [ebp + ecx - 0x90]
or eax, ecx
mov ecx, dword [ebp - 0x30]
movzx ecx, byte [ebp + ecx - 0x43]
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0xf4]
movzx edx, byte [ebp + edx - 0x46]
movsx edx, byte [ebp + edx - 0x90]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x30]
movzx ecx, byte [ebp + ecx - 0x44]
mov byte [ebp + ecx - 0x90], al
push 0x448
push 1
push 0x4559
push 0x2297
push 0x3880
push 0x395d
push 0
lea eax, [ebp - 0xf4]
push eax
push 0x71d6
call fcn.00418cb7
add esp, 0x24
jmp 0x41a00b
xor eax, eax
inc eax
shl eax, 2
mov byte [ebp + eax - 0x90], 0
cmp dword [ebp - 0x80], 4
jle 0x41a139
or dword [ebp - 0x1c], 1
or dword [ebp - 0x1c], 2
or dword [ebp - 0x1c], 4
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x368]
call fcn.0041d14b
push eax
mov eax, dword [ebp - 0x80]
sub eax, 4
push eax
lea eax, [ebp - 0x338]
push eax
call fcn.0041355f
pop ecx
pop ecx
mov edx, eax
lea ecx, [ebp - 0x308]
call fcn.0041f74e
pop ecx
mov dword [ebp - 0x180], eax
jmp 0x41a154
or dword [ebp - 0x1c], 8
push dword [ebp - 0x80]
lea eax, [ebp - 0x3b0]
push eax
call fcn.0041355f
pop ecx
pop ecx
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x1c8], eax
push dword [ebp - 0x1c8]
lea ecx, [ebp - 0x2d8]
call fcn.0041d17a
mov eax, dword [ebp - 0x1c]
and eax, 8
je 0x41a188
and dword [ebp - 0x1c], 0xfffffff7
lea ecx, [ebp - 0x3b0]
call fcn.0041d1d3
mov eax, dword [ebp - 0x1c]
and eax, 4
je 0x41a19f
and dword [ebp - 0x1c], 0xfffffffb
lea ecx, [ebp - 0x308]
call fcn.0041d1d3
mov eax, dword [ebp - 0x1c]
and eax, 2
je 0x41a1b6
and dword [ebp - 0x1c], 0xfffffffd
lea ecx, [ebp - 0x338]
call fcn.0041d1d3
mov eax, dword [ebp - 0x1c]
and eax, 1
je 0x41a1cd
and dword [ebp - 0x1c], 0xfffffffe
lea ecx, [ebp - 0x368]
call fcn.0041d1d3
and dword [ebp - 0x11c], 0
jmp 0x41a1e3
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 5
jae 0x41a1fc
mov eax, dword [ebp - 0x11c]
mov byte [ebp + eax - 0x90], 0
jmp 0x41a1d6
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov dword [eax + 0xc], ecx
lea eax, [ebp - 0x28]
push eax
push 0
push 1
push 0x15c0
push 0x6e
lea eax, [ebp - 0x80]
push eax
push 0x6be
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x2d8]
push eax
push 0x4a59
lea eax, [ebp - 0x2c]
push eax
call fcn.00419024
add esp, 0x2c
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x80]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x28]
push eax
push 0
push 0x29b8
push 1
push 0x714
lea eax, [ebp - 0x18]
push eax
push 0x7df4
push 1
push 0x1eea
push 0x1e24
push 0x60d7
push 0x153c
push 0x336d
push 0x3a52
call fcn.00418457
add esp, 0x3c
push 1
lea eax, [ebp - 0x18]
push eax
push 0x2ca7
push 0xf5
push 0
call fcn.00418823
add esp, 0x14
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 0
jbe 0x41a301
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x18]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 4]
sub eax, ecx
mov ecx, dword [ebp - 0x14]
xor edx, edx
div dword [ecx + 0x18]
cmp eax, 0xc
jbe 0x41a2d5
mov dword [ebp - 0x160], 0xc
jmp 0x41a2f3
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x18]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 4]
sub eax, ecx
mov ecx, dword [ebp - 0x14]
xor edx, edx
div dword [ecx + 0x18]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x194], eax
jmp 0x41a308
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x168], eax
and dword [ebp - 0x104], 0
jmp 0x41a32a
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x104]
cmp ecx, dword [eax + 0x18]
jae 0x41a58c
push dword [ebp - 0x168]
mov eax, dword [ebp - 0x168]
cdq
sub eax, edx
sar eax, 1
push eax
call fcn.00412033
pop ecx
pop ecx
mov dword [ebp - 0x13c], eax
push dword [ebp - 0x13c]
lea eax, [ebp - 0x2a8]
push eax
call fcn.0041355f
pop ecx
pop ecx
mov dword [ebp - 0x188], 0x4d47
mov dword [ebp - 0x254], 0xac6288
cmp dword [ebp - 0x188], 0x4e27
jle 0x41a439
push 0
push 0
push 0x179
call dword [0xaec358]
and dword [ebp - 0xfc], 0
jmp 0x41a3b8
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x949
jge 0x41a439
and dword [ebp - 0x108], 0
jmp 0x41a3da
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x4000
jge 0x41a434
mov eax, dword [ebp - 0xfc]
imul eax, dword [ebp - 0x108]
cdq
mov dword [ebp - 0x244], eax
mov dword [ebp - 0x240], edx
push dword [ebp - 0x240]
push dword [ebp - 0x244]
lea ecx, [ebp - 0x398]
call fcn.00401a2d
pop ecx
pop ecx
mov ecx, eax
call fcn.0041d02b
push eax
call fcn.004bc2e7
pop ecx
lea ecx, [ebp - 0x398]
call fcn.0041d021
jmp 0x41a3cd
jmp 0x41a3ab
push 0x28a3
push 0x4716
push 1
push 0x686d
push 0
lea eax, [ebp - 0x18]
push eax
push 0x2dea
push 0x54c3
push 1
lea eax, [ebp - 0x104]
push eax
push 0x7105
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x14]
push eax
push 0x3cd9
lea eax, [ebp - 0x2c]
push eax
call fcn.00418457
add esp, 0x3c
mov dword [ebp - 4], 8
cmp dword [ebp - 0x188], 0x4b2f
jge 0x41a4a0
push dword [ebp - 0x254]
call fcn.004bc2e7
pop ecx
jmp 0x41a4bc
or dword [ebp - 4], 0xffffffff
jmp 0x41a4c6
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x2a8]
push eax
push 0x568f
push 1
lea eax, [ebp - 0x18]
push eax
push 0x79d7
lea eax, [ebp - 0x13c]
push eax
call fcn.0041776e
add esp, 0x20
push 0x5213
push 0
lea eax, [ebp - 0x13c]
push eax
push 0
push 0x230d
push 0x77f2
push 1
push 0x184f
push 0x5da2
push 0x720
lea eax, [ebp - 0x18]
push eax
call fcn.00418bb0
add esp, 0x2c
push 0x6f29
lea eax, [ebp - 0x2c]
push eax
push 0x7ee9
lea eax, [ebp - 0x18]
push eax
push 0
push 0x5076
push 0x6c5c
push 0x7a67
lea eax, [ebp - 0x28]
push eax
push 0x7f56
push 0xaf8
push 0x1391
push 0x2d31
push 0x2161
push 0
call fcn.00418eb6
add esp, 0x3c
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x2a8]
call fcn.0041d1d3
jmp 0x41a31d
and dword [ebp - 0x78], 0
jmp 0x41a599
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x18]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 4]
sub eax, ecx
cmp dword [ebp - 0x78], eax
jae 0x41a720
mov dword [ebp - 0x170], 0xa9b
mov dword [ebp - 0x1d0], 0xac62d0
cmp dword [ebp - 0x170], 0xc41
jle 0x41a6c2
and dword [ebp - 0xc8], 0
jmp 0x41a5ec
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x719a
jge 0x41a6ba
and dword [ebp - 0xd0], 0
jmp 0x41a612
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x3fb2
jge 0x41a6b5
and dword [ebp - 0xd8], 0
jmp 0x41a638
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x19e4
jge 0x41a6b0
and dword [ebp - 0xe0], 0
jmp 0x41a65a
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x234f
jge 0x41a6ab
mov eax, dword [ebp - 0xc8]
cdq
idiv dword [ebp - 0xd0]
mov eax, edx
cdq
idiv dword [ebp - 0xd8]
mov ecx, dword [ebp - 0xe0]
sar edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x24c], edx
push dword [ebp - 0x24c]
push dword [ebp - 0x250]
mov ecx, 0xae9ab8
call fcn.0041d036
jmp 0x41a64d
jmp 0x41a62b
jmp 0x41a605
jmp 0x41a5df
push 0
call dword [0xaec350]
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x2c]
mov byte [ecx + eax], 0
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x170], 0x927
jge 0x41a6f5
mov edx, dword [ebp - 0x1d0]
mov ecx, 0xae9ab8
call fcn.0041f563
jmp 0x41a711
or dword [ebp - 4], 0xffffffff
jmp 0x41a71b
jmp 0x41a592
lea eax, [ebp - 0x78]
push eax
push 1
push 0x7c05
push 0x35d8
push 0x6662
push 0x667a
lea eax, [ebp - 0x34]
push eax
push 1
call fcn.00418397
add esp, 0x20
lea ecx, [ebp - 0x2d8]
call fcn.0041d1d3
lea ecx, [ebp - 0x2c0]
call fcn.0041d1d3
jmp 0x41a927
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x1f8], eax
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x248], eax
mov dword [ebp - 0x19c], 0x6ea7
mov dword [ebp - 0x270], 0xac6350
cmp dword [ebp - 0x19c], 0x7125
jle 0x41a89f
and dword [ebp - 0xe8], 0
jmp 0x41a809
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x59f8
jge 0x41a89f
and dword [ebp - 0xf0], 0
jmp 0x41a82f
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0x6479
jge 0x41a89a
and dword [ebp - 0xf8], 0
jmp 0x41a851
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x29a7
jge 0x41a898
mov eax, dword [ebp - 0xe8]
imul eax, dword [ebp - 0xf0]
cdq
idiv dword [ebp - 0xf8]
mov eax, edx
cdq
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x258], edx
push dword [ebp - 0x258]
push dword [ebp - 0x25c]
mov ecx, 0xae9ab8
call fcn.0041d036
jmp 0x41a844
jmp 0x41a822
jmp 0x41a7fc
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x19c], 0x6b20
jge 0x41a8ce
mov edx, dword [ebp - 0x270]
mov ecx, 0xae9ab8
call fcn.0041f563
jmp 0x41a8ea
or dword [ebp - 4], 0xffffffff
jmp 0x41a8f4
push 0
mov eax, dword [ebp - 0x1b8]
push dword [eax]
mov eax, dword [ebp - 0x248]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x20c]
mov ecx, dword [ecx]
add ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x268]
mov eax, dword [eax]
add eax, ecx
push eax
mov ecx, dword [ebp - 0x1bc]
call fcn.0041d1f2
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x148], 0x5ea4
jge 0x41a94a
mov edx, dword [ebp - 0x1c4]
mov ecx, 0xae9ab8
call fcn.0041f563
jmp 0x41a966
or dword [ebp - 4], 0xffffffff
jmp 0x41a970
jmp 0x41ab54
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x1dc], eax
mov dword [ebp - 0x50], 0x89a69576
mov dword [ebp - 0x38], 9
mov dword [ebp - 0x164], 0xfa5f9c71
mov dword [ebp - 0x138], 0xd1e12aa5
mov dword [ebp - 0x48], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x50]
imul eax, dword [ebp - 0x164]
mov ecx, dword [ebp - 0x38]
sub ecx, 0xb5c6
sub ecx, eax
mov eax, dword [ebp - 0x50]
sub eax, ecx
imul eax, dword [ebp - 0x50]
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
je 0x41aa01
cmp dword [ebp - 0x138], 0
je 0x41aa01
mov dword [ebp - 0x144], 1
jmp 0x41aa08
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x144], eax
jl 0x41aa1f
mov dword [ebp - 0x154], 1
jmp 0x41aa26
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x290], eax
mov eax, 0xb06c0e26
test eax, eax
jne 0x41aa4e
xor eax, eax
jne 0x41aa4e
and dword [ebp - 0x15c], 0
jmp 0x41aa58
mov dword [ebp - 0x15c], 1
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x15c], eax
je 0x41aa6f
mov dword [ebp - 0x1cc], 1
jmp 0x41aa76
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x164], 0xfffffffd
jbe 0x41aabc
mov dword [ebp - 0x38], 4
jmp 0x41aa98
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xfffffff2
jl 0x41aaba
mov dword [ebp - 0x1d4], 0xfe0cd1b7
mov dword [ebp - 0x48], 0x2ddb74a7
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x1d4], eax
jmp 0x41aa91
jmp 0x41ab33
mov dword [ebp - 0x174], 0x7312b948
mov dword [ebp - 0x100], 0x64e62b50
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x280], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0
jne 0x41ab02
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x100], eax
jl 0x41ab02
and dword [ebp - 0x16c], 0
jmp 0x41ab0c
mov dword [ebp - 0x16c], 1
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x284], eax
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x38], eax
push 0
push 0x4faf
push dword [ebp - 0x1dc]
push dword [ebp - 0x1e4]
push dword [ebp - 0x1ec]
call fcn.00417444
add esp, 0x14
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret