Function at 0x41b530
Capabilities:
Authenticate hmac
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x180
mov dword [ebp - 8], 0x11b
mov dword [ebp - 0x50], 0x16e
mov dword [ebp - 0x18], 0xa1
mov dword [ebp - 0x40], 0x33f
mov dword [ebp - 0x74], 0x19c
mov dword [ebp - 0x34], 0x206
mov dword [ebp - 0x108], 0x172
mov dword [ebp - 0x54], 0x2b5
mov dword [ebp - 0x30], 0x2c8
mov dword [ebp - 0x1c], 0x13d
mov dword [ebp - 0x48], 0x3bc
mov dword [ebp - 0x44], 0x1e1
mov dword [ebp - 0x20], 0x34b
mov dword [ebp - 0x14], 0x14
mov dword [ebp - 0x24], 0x45
mov dword [ebp - 0x3c], 0x1e7
mov dword [ebp - 4], 0x67
mov dword [ebp - 0xc], 0x55
mov dword [ebp - 0x28], 0x389
mov dword [ebp - 0x38], 0x26f
mov dword [ebp - 0x10], 0x17d
mov eax, dword [ebp - 4]
xor eax, dword [ebp - 0x40]
mov dword [ebp - 0xf4], eax
mov ecx, dword [0x41d014]
mov dword [ebp - 0xf8], ecx
mov edx, dword [ebp - 4]
sub edx, 1
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0xf8]
jge 0x41b60a
mov dword [ebp - 0x9c], 1
jmp 0x41b614
mov dword [ebp - 0x9c], 0
mov ecx, dword [0x41d00c]
sub ecx, dword [ebp - 0x34]
and ecx, dword [ebp - 0x9c]
je 0x41b634
mov edx, dword [0x41d024]
add edx, 1
mov dword [0x41d024], edx
mov eax, dword [0x41d014]
add eax, 0x16c
push eax
mov ecx, dword [0x41d024]
add ecx, 0x1fc
push ecx
mov edx, dword [ebp - 0x10]
add edx, 0x194
push edx
mov eax, dword [0x41d014]
sub eax, 0x14
push eax
mov ecx, dword [ebp - 4]
add ecx, 0x2d6
push ecx
mov edx, dword [ebp - 0x14]
add edx, 0xda
push edx
mov eax, dword [ebp - 0x18]
sub eax, 0x5c
push eax
mov ecx, dword [ebp - 0x48]
sub ecx, 0x26e
push ecx
mov edx, dword [ebp - 0x18]
add edx, 0x13b
push edx
call fcn.00407bd0
add esp, 0x24
mov eax, dword [ebp - 0x20]
sub eax, 0x17
push eax
mov ecx, dword [ebp - 0x3c]
sub ecx, 0x16a
push ecx
mov edx, dword [ebp - 0x34]
sub edx, 0xf5
push edx
mov eax, dword [0x41d010]
sub eax, 0xba
push eax
mov ecx, dword [ebp - 0x38]
sub ecx, 0x1db
push ecx
mov edx, dword [ebp - 0x54]
sub edx, 0x113
push edx
mov eax, dword [ebp - 0x34]
sub eax, 0x17a
push eax
mov ecx, dword [ebp - 0x24]
add ecx, 0x2e9
push ecx
mov edx, dword [0x41d000]
sub edx, 0x100
push edx
mov eax, dword [ebp - 0x1c]
add eax, 0x2a
push eax
call fcn.00407630
add esp, 0x28
mov ecx, dword [ebp - 0xc]
add ecx, 1
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x74]
add edx, 0x9d
push edx
call fcn.00407100
add esp, 4
mov eax, dword [0x41d024]
add eax, 0x227
push eax
call fcn.00407100
add esp, 4
mov ecx, dword [0x41d028]
add ecx, 0xf1
push ecx
mov edx, dword [ebp - 0xc]
add edx, 0x14f
push edx
mov eax, dword [0x41d008]
add eax, 0x7c
push eax
mov ecx, dword [ebp - 4]
add ecx, 0xdd
push ecx
mov edx, dword [ebp - 4]
add edx, 0x1c6
push edx
mov eax, dword [ebp - 0x10]
add eax, 0x55
push eax
mov ecx, dword [ebp - 0x1c]
add ecx, 0x73
push ecx
mov edx, dword [ebp - 0x24]
add edx, 0x141
push edx
call fcn.00406980
add esp, 0x20
mov dword [ebp - 0x60], 0
jmp 0x41b793
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
mov ecx, dword [ebp - 0x50]
sub ecx, 0x16d
cmp dword [ebp - 0x60], ecx
jge 0x41b80e
mov edx, dword [ebp - 0x24]
cmp edx, dword [ebp - 0x3c]
jge 0x41b7b5
mov dword [ebp - 0xa0], 1
jmp 0x41b7bf
mov dword [ebp - 0xa0], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0xc]
cmp eax, dword [0x41d024]
jge 0x41b7da
mov dword [ebp - 0xa4], 1
jmp 0x41b7e4
mov dword [ebp - 0xa4], 0
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x38]
and ecx, dword [ebp - 0xa0]
and ecx, dword [ebp - 0xa4]
je 0x41b809
mov edx, dword [ebp - 0x24]
and edx, dword [ebp - 8]
je 0x41b809
mov eax, dword [ebp - 0xc]
add eax, 1
mov dword [ebp - 0xc], eax
jmp 0x41b78a
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x2c], ecx
mov edx, dword [0x41d028]
add edx, 0xf1
push edx
mov eax, dword [ebp - 0x14]
add eax, 0x191
push eax
mov ecx, dword [ebp - 0x54]
sub ecx, 0x85
push ecx
mov edx, dword [ebp - 0x10]
sub edx, 0x3a
push edx
mov eax, dword [0x41d000]
sub eax, 0xf3
push eax
mov ecx, dword [ebp - 0x28]
sub ecx, 0x1b7
push ecx
mov edx, dword [0x41d000]
sub edx, 0x16f
push edx
mov eax, dword [ebp - 0x50]
mov al, 0x83
rcr byte [eax], 0x50
call fcn.00406980
add esp, 0x20
mov dword [ebp - 0x64], 0
jmp 0x41b87e
mov ecx, dword [ebp - 0x64]
add ecx, 1
mov dword [ebp - 0x64], ecx
mov edx, dword [ebp - 0x30]
sub edx, 0x18968
cmp dword [ebp - 0x64], edx
jge 0x41b897
mov eax, dword [ebp - 0x20]
sub eax, 1
mov dword [ebp - 0x20], eax
jmp 0x41b875
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xfc], ecx
mov dword [ebp - 0x68], 0
jmp 0x41b8b2
mov edx, dword [ebp - 0x68]
add edx, 1
mov dword [ebp - 0x68], edx
mov eax, dword [ebp - 0x34]
sub eax, 0x205
cmp dword [ebp - 0x68], eax
jge 0x41b8ca
mov ecx, dword [ebp - 0x18]
add ecx, 1
mov dword [ebp - 0x18], ecx
jmp 0x41b8a9
mov edx, dword [ebp - 0xfc]
mov eax, dword [ebp - 0x2c]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x100], eax
mov ecx, dword [0x41d028]
sub ecx, 0x46
push ecx
mov edx, dword [0x41d004]
add edx, 0x144
push edx
call fcn.004066a0
add esp, 8
mov eax, dword [0x41d018]
sub eax, 1
mov dword [0x41d018], eax
mov ecx, dword [ebp - 0x100]
add ecx, 0x78
mov dword [ebp - 0x104], ecx
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
mov dword [ebp - 0x6c], 0
jmp 0x41b932
mov eax, dword [ebp - 0x6c]
add eax, 1
mov dword [ebp - 0x6c], eax
mov ecx, dword [ebp - 0x28]
sub ecx, 0x388
cmp dword [ebp - 0x6c], ecx
jge 0x41b94b
mov edx, dword [ebp - 0x3c]
sub edx, 1
mov dword [ebp - 0x3c], edx
jmp 0x41b929
mov eax, 8
imul ecx, eax, 0
mov edx, dword [ebp - 0x104]
mov eax, dword [ebp - 0x2c]
add eax, dword [edx + ecx]
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x3c]
cmp ecx, dword [ebp - 0x14]
jge 0x41b976
mov dword [ebp - 0xac], 1
jmp 0x41b980
mov dword [ebp - 0xac], 0
mov edx, dword [ebp - 0x74]
cmp edx, dword [ebp - 0x50]
jge 0x41b994
mov dword [ebp - 0xa8], 1
jmp 0x41b99e
mov dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0x40]
cmp eax, dword [0x41d024]
jge 0x41b9b5
mov dword [ebp - 0xb0], 1
jmp 0x41b9bf
mov dword [ebp - 0xb0], 0
mov ecx, dword [ebp - 0xa8]
and ecx, dword [0x41d018]
or ecx, dword [ebp - 0xac]
or ecx, dword [ebp - 0xb0]
je 0x41b9e2
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
mov eax, dword [0x41d020]
add eax, 6
push eax
mov ecx, dword [0x41d014]
sub ecx, 0xe6
push ecx
mov edx, dword [ebp - 0x30]
sub edx, 0x1b7
push edx
mov eax, dword [ebp - 0x34]
sub eax, 0x4b
push eax
mov ecx, dword [ebp - 0x38]
sub ecx, 0x1db
push ecx
mov edx, dword [ebp - 0xc]
add edx, 0x14b
push edx
mov eax, dword [ebp - 4]
add eax, 0x25
push eax
mov ecx, dword [ebp - 0x40]
sub ecx, 0x11
push ecx
mov edx, dword [ebp - 0x10]
add edx, 0xa2
push edx
mov eax, dword [0x41d028]
sub eax, 0x5c
push eax
call fcn.00407630
add esp, 0x28
mov ecx, dword [0x41d00c]
sub ecx, 0x13a
push ecx
mov edx, dword [ebp - 0x30]
add edx, 0xce
push edx
mov eax, dword [ebp - 0x18]
add eax, 0x2e0
push eax
mov ecx, dword [0x41d028]
add ecx, 0xcd
push ecx
mov edx, dword [0x41d018]
add edx, 0x1ec
push edx
mov eax, dword [0x41d004]
sub eax, 0x71
push eax
mov ecx, dword [ebp - 0x18]
add ecx, 0x8b
push ecx
mov edx, dword [ebp - 0x108]
add edx, 0x1a0
push edx
mov eax, dword [ebp - 8]
sub eax, 0x56
push eax
call fcn.00406e60
add esp, 0x24
mov dword [ebp - 0x70], 0
jmp 0x41bac1
mov ecx, dword [ebp - 0x70]
add ecx, 1
mov dword [ebp - 0x70], ecx
mov edx, dword [0x41d004]
sub edx, 0x1885a
cmp dword [ebp - 0x70], edx
jge 0x41bca1
mov eax, dword [0x41d020]
cmp eax, dword [ebp - 0x28]
jge 0x41baec
mov dword [ebp - 0xb4], 1
jmp 0x41baf6
mov dword [ebp - 0xb4], 0
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x10c], ecx
mov edx, dword [0x41d024]
mov dword [ebp - 0x110], edx
mov eax, dword [0x41d024]
sub eax, 1
mov dword [0x41d024], eax
mov ecx, dword [ebp - 8]
add ecx, 1
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x10c]
cmp edx, dword [ebp - 0x110]
jge 0x41bb3b
mov dword [ebp - 0xb8], 1
jmp 0x41bb45
mov dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0xb4]
and eax, dword [ebp - 0xb8]
je 0x41bc9c
mov ecx, dword [ebp - 0x24]
sub ecx, 1
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 0x24]
jge 0x41bc9c
mov eax, dword [0x41d024]
and eax, dword [ebp - 0x30]
mov dword [ebp - 0x114], eax
mov ecx, dword [0x41d008]
mov dword [ebp - 0x118], ecx
mov edx, dword [0x41d024]
sub edx, 1
mov dword [0x41d024], edx
mov eax, dword [ebp - 0x114]
cmp eax, dword [ebp - 0x118]
jge 0x41bbaf
mov dword [ebp - 0xbc], 1
jmp 0x41bbb9
mov dword [ebp - 0xbc], 0
mov ecx, dword [0x41d010]
add ecx, 1
mov dword [0x41d010], ecx
mov edx, dword [0x41d010]
xor edx, dword [0x41d018]
cmp edx, dword [ebp - 0x28]
jge 0x41bbe5
mov dword [ebp - 0xc0], 1
jmp 0x41bbef
mov dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0xbc]
or eax, dword [ebp - 0xc0]
je 0x41bc9c
mov ecx, dword [0x41d014]
cmp ecx, dword [ebp - 0xc]
jge 0x41bc9c
mov edx, dword [ebp - 8]
cmp edx, dword [0x41d00c]
jge 0x41bc27
mov dword [ebp - 0xc4], 1
jmp 0x41bc31
mov dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x74]
mov dword [ebp - 0x11c], eax
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x120], ecx
mov edx, dword [ebp - 0x20]
add edx, 1
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x11c]
cmp eax, dword [ebp - 0x120]
jge 0x41bc6a
mov dword [ebp - 0xc8], 1
jmp 0x41bc74
mov dword [ebp - 0xc8], 0
mov ecx, dword [ebp - 0x40]
and ecx, dword [ebp - 0x54]
and ecx, dword [ebp - 0xc4]
and ecx, dword [ebp - 0xc8]
je 0x41bc9c
mov edx, dword [0x41d00c]
cmp edx, dword [ebp - 0x10]
jge 0x41bc9c
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
jmp 0x41bab8
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x2c]
add edx, dword [ecx + 0x20]
mov dword [ebp - 0x134], edx
mov dword [ebp - 0x78], 0
jmp 0x41bcc2
mov eax, dword [ebp - 0x78]
add eax, 1
mov dword [ebp - 0x78], eax
mov ecx, dword [ebp - 0x10]
sub ecx, 0x17c
cmp dword [ebp - 0x78], ecx
jge 0x41bcec
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x34]
jge 0x41bcea
mov ecx, dword [ebp - 0x38]
add ecx, 1
mov dword [ebp - 0x38], ecx
jmp 0x41bcb9
mov edx, dword [0x41d028]
and edx, dword [ebp - 0x44]
cmp edx, dword [ebp - 0x14]
jge 0x41bd84
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x124], eax
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x128], ecx
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x124]
cmp eax, dword [ebp - 0x128]
jge 0x41bd33
mov dword [ebp - 0xcc], 1
jmp 0x41bd3d
mov dword [ebp - 0xcc], 0
mov ecx, dword [0x41d008]
add ecx, 1
mov dword [0x41d008], ecx
mov edx, dword [ebp - 0x38]
cmp edx, dword [0x41d008]
jge 0x41bd63
mov dword [ebp - 0xd0], 1
jmp 0x41bd6d
mov dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0xcc]
or eax, dword [ebp - 0xd0]
je 0x41bd84
mov ecx, dword [ebp - 0xc]
add ecx, 1
mov dword [ebp - 0xc], ecx
mov edx, dword [0x41d008]
add edx, 0x16d
push edx
mov eax, dword [0x41d01c]
sub eax, 0x26c
push eax
mov ecx, dword [ebp - 0x1c]
add ecx, 0x272
push ecx
mov edx, dword [ebp - 0x18]
add edx, 0x170
push edx
mov eax, dword [ebp - 0x48]
sub eax, 0x3ae
push eax
call fcn.00406370
add esp, 0x14
mov ecx, dword [ebp - 0x48]
sub ecx, 1
mov dword [ebp - 0x48], ecx
mov edx, dword [ebp - 0x1c]
add edx, 0x41
push edx
mov eax, dword [0x41d00c]
add eax, 0x153
push eax
call fcn.004066a0
add esp, 8
mov ecx, dword [0x41d010]
sub ecx, 0x205
push ecx
mov edx, dword [ebp - 0x28]
add edx, 0xd
push edx
mov eax, dword [ebp - 0x34]
add eax, 0x17c
push eax
mov ecx, dword [0x41d028]
add ecx, 0xcd
push ecx
mov edx, dword [ebp - 4]
add edx, 0x2fd
push edx
mov eax, dword [0x41d018]
sub eax, 0x30
push eax
mov ecx, dword [0x41d014]
sub ecx, 0x36
push ecx
mov edx, dword [0x41d00c]
add edx, 0x167
push edx
mov eax, dword [ebp - 0x28]
sub eax, 0x2c3
push eax
call fcn.00406e60
add esp, 0x24
mov dword [ebp - 0x7c], 0
jmp 0x41be5b
mov ecx, dword [ebp - 0x7c]
add ecx, 1
mov dword [ebp - 0x7c], ecx
mov edx, dword [ebp - 0x3c]
sub edx, 0x1e5
cmp dword [ebp - 0x7c], edx
jge 0x41bf04
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x44]
jge 0x41be81
mov dword [ebp - 0xd4], 1
jmp 0x41be8b
mov dword [ebp - 0xd4], 0
mov ecx, dword [0x41d00c]
and ecx, dword [ebp - 0x30]
or ecx, dword [ebp - 0xd4]
mov edx, dword [ebp - 0x20]
xor edx, dword [ebp - 8]
or ecx, edx
je 0x41beff
mov eax, dword [0x41d00c]
cmp eax, dword [0x41d008]
jge 0x41bebd
mov dword [ebp - 0xd8], 1
jmp 0x41bec7
mov dword [ebp - 0xd8], 0
mov ecx, dword [ebp - 0x50]
and ecx, dword [ebp - 0x30]
cmp ecx, dword [ebp - 0x28]
jge 0x41bede
mov dword [ebp - 0xdc], 1
jmp 0x41bee8
mov dword [ebp - 0xdc], 0
mov edx, dword [ebp - 0xd8]
and edx, dword [ebp - 0xdc]
je 0x41beff
mov eax, dword [ebp - 0x18]
add eax, 1
mov dword [ebp - 0x18], eax
jmp 0x41be52
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x2c]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x144], edx
mov dword [ebp - 0x80], 0
jmp 0x41bf25
mov eax, dword [ebp - 0x80]
add eax, 1
mov dword [ebp - 0x80], eax
mov ecx, dword [ebp - 0x24]
sub ecx, 0x43
cmp dword [ebp - 0x80], ecx
jge 0x41bf3b
mov edx, dword [ebp - 0x14]
add edx, 1
mov dword [ebp - 0x14], edx
jmp 0x41bf1c
mov dword [ebp - 0x84], 0
jmp 0x41bf56
mov eax, dword [ebp - 0x84]
add eax, 1
mov dword [ebp - 0x84], eax
mov ecx, dword [0x41d028]
sub ecx, 0x1c2
cmp dword [ebp - 0x84], ecx
jge 0x41bf75
mov edx, dword [ebp - 4]
sub edx, 1
mov dword [ebp - 4], edx
jmp 0x41bf47
mov dword [ebp - 0x88], 0
jmp 0x41bf90
mov eax, dword [ebp - 0x88]
add eax, 1
mov dword [ebp - 0x88], eax
mov ecx, dword [ebp - 0x30]
sub ecx, 0x2c7
cmp dword [ebp - 0x88], ecx
jge 0x41bfb2
mov edx, dword [0x41d004]
add edx, 1
mov dword [0x41d004], edx
jmp 0x41bf81
mov eax, dword [ebp - 0x44]
add eax, 0x14c
push eax
mov ecx, dword [ebp - 0x40]
sub ecx, 0x22c
push ecx
mov edx, dword [0x41d008]
add edx, 0x1aa
push edx
mov eax, dword [ebp - 0x1c]
add eax, 0x44
push eax
call fcn.004082e0
add esp, 0x10
mov ecx, dword [ebp - 0x44]
cmp ecx, dword [ebp - 0x28]
jge 0x41bff5
mov dword [ebp - 0xe0], 1
jmp 0x41bfff
mov dword [ebp - 0xe0], 0
mov edx, dword [ebp - 0x38]
add edx, dword [ebp - 0x10]
mov dword [ebp - 0x12c], edx
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x130], eax
mov ecx, dword [ebp - 0x10]
add ecx, 1
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x12c]
cmp edx, dword [ebp - 0x130]
jge 0x41c037
mov dword [ebp - 0xe4], 1
jmp 0x41c041
mov dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0xe0]
or eax, dword [ebp - 0xe4]
je 0x41c085
mov ecx, dword [0x41d01c]
cmp ecx, dword [ebp - 0x3c]
jge 0x41c085
mov edx, dword [0x41d00c]
imul edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
sub eax, dword [0x41d008]
and edx, eax
je 0x41c085
mov ecx, dword [0x41d008]
cmp ecx, dword [ebp - 0x54]
jge 0x41c085
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x2c]
add ecx, dword [eax + 0x24]
mov dword [ebp - 0x140], ecx
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x4c], 0
jmp 0x41c0af
mov eax, dword [ebp - 0x4c]
add eax, 1
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x4c]
cmp edx, dword [ecx + 0x18]
jae 0x41c299
mov dword [ebp - 0x148], 0x2a
mov dword [ebp - 0x14c], 0x2ba
mov dword [ebp - 0x5c], 0x193
mov dword [ebp - 0x150], 0x143
mov dword [ebp - 0xe8], 0x187
mov dword [ebp - 0x154], 0x329
mov dword [ebp - 0xf0], 0x1d2
mov dword [ebp - 0x158], 0x178
mov dword [ebp - 0x15c], 0x24a
mov dword [ebp - 0x13c], 0xa3
mov dword [ebp - 0x160], 0x335
mov dword [ebp - 0x164], 0x341
mov dword [ebp - 0xec], 0x21d
mov dword [ebp - 0x168], 0x15d
mov dword [ebp - 0x16c], 0x358
mov dword [ebp - 0x170], 0x13d
mov dword [ebp - 0x174], 0x1d1
mov dword [ebp - 0x178], 0xef
mov dword [ebp - 0x17c], 0x305
mov dword [ebp - 0x180], 0x290
mov eax, dword [ebp - 0xe8]
sub eax, 0x20
push eax
mov ecx, dword [ebp - 0x5c]
add ecx, 0x193
push ecx
call fcn.00407290
add esp, 8
mov edx, dword [ebp - 0x5c]
add edx, 1
mov dword [ebp - 0x5c], edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x134]
mov edx, dword [ebp - 0x2c]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x138], edx
mov eax, dword [ebp - 0xe8]
add eax, 0x99
push eax
call fcn.004068b0
add esp, 4
mov dword [ebp - 0x8c], 0
jmp 0x41c1ec
mov ecx, dword [ebp - 0x8c]
add ecx, 1
mov dword [ebp - 0x8c], ecx
mov edx, dword [ebp - 0x5c]
sub edx, 0x18834
cmp dword [ebp - 0x8c], edx
jge 0x41c20e
mov eax, dword [ebp - 0xec]
add eax, 1
mov dword [ebp - 0xec], eax
jmp 0x41c1dd
mov ecx, dword [ebp - 0xf0]
add ecx, 1
mov dword [ebp - 0xf0], ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp - 0x138]
push eax
call fcn.00413090
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x41c294
mov dword [ebp - 0x90], 0
jmp 0x41c252
mov edx, dword [ebp - 0x90]
add edx, 1
mov dword [ebp - 0x90], edx
mov eax, dword [ebp - 0x13c]
sub eax, 0xa2
cmp dword [ebp - 0x90], eax
jge 0x41c276
mov ecx, dword [0x41d024]
sub ecx, 1
mov dword [0x41d024], ecx
jmp 0x41c243
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x140]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x144]
mov eax, dword [ebp - 0x2c]
add eax, dword [edx + ecx*4]
jmp 0x41c31d
jmp 0x41c0a6
mov dword [ebp - 0x94], 0
jmp 0x41c2b4
mov eax, dword [ebp - 0x94]
add eax, 1
mov dword [ebp - 0x94], eax
mov ecx, dword [0x41d004]
sub ecx, 0x1ba
cmp dword [ebp - 0x94], ecx
jge 0x41c2de
mov edx, dword [0x41d028]
cmp edx, dword [ebp - 0x14]
jge 0x41c2dc
mov eax, dword [ebp - 0x14]
sub eax, 1
mov dword [ebp - 0x14], eax
jmp 0x41c2a5
xor eax, eax
jmp 0x41c31d
mov esp, ebp
pop ebp
ret