Function at 0x40bc9a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x1fc
mov eax, 0x48152f
call fcn.00458ed9
push 1
call fcn.004582b3
mov dword [ebp - 0x130], eax
lea edi, [ebp - 0x8f]
mov dword [ebp - 0xec], 0x88b28481
xor eax, eax
mov dword [ebp - 0xe8], 0xaeb0aab1
mov dword [ebp - 0xe4], 0xb6b8bdbc
mov dword [ebp - 0xe0], 0xde9ab181
mov dword [ebp - 0xdc], 0xb9829db7
mov dword [ebp - 0xd8], 0x86cb9e99
mov dword [ebp - 0xd4], 0x9aaca9ae
mov dword [ebp - 0xd0], 0xc1c3cda9
mov dword [ebp - 0xcc], 0xac96b7a4
mov dword [ebp - 0xc8], 0x5e7e5868
mov dword [ebp - 0xc4], 0x6a407752
mov dword [ebp - 0xc0], 0x7d5c526e
mov dword [ebp - 0xbc], 0x37695757
mov dword [ebp - 0xb8], 0x4f624b78
mov dword [ebp - 0xb4], 0x6750597d
mov dword [ebp - 0xb0], 0x2e445343
mov dword [ebp - 0xac], 0x4d4c4547
mov dword [ebp - 0xa8], 0x5e4d7b48
mov dword [ebp - 0xa4], 0x76707977
mov dword [ebp - 0xa0], 0x5d604779
mov dword [ebp - 0x9c], 0x541b6674
mov dword [ebp - 0x98], 0x4460458
mov dword [ebp - 0x94], 0x76026d60
mov byte [ebp - 0x90], 0x3c
stosd dword es:[edi], eax
pop ecx
mov cl, byte [ebp - 0x15]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [0x49f1d0]
mov edi, dword [0x49f1cc]
mov dword [ebp - 0x70], eax
xor esi, esi
cmp esi, 0x70
jae 0x40c68f
mov dl, byte [ebp + esi - 0xec]
mov byte [ebp - 0x71], dl
movzx edx, dl
mov dword [ebp - 0x68], edx
mov ebx, edx
cmp edi, esi
ja 0x40c687
inc eax
cmp edi, eax
jae 0x40be03
lea ecx, [esi - 0x5db51da4]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
add ecx, edx
add cl, 0x7c
jmp 0x40be4a
je 0x40c61c
inc eax
cmp edi, eax
je 0x40c5b2
mov eax, dword [ebp - 0x70]
add eax, 4
cmp edi, eax
je 0x40c58e
mov eax, dword [ebp - 0x70]
add eax, 3
cmp edi, eax
je 0x40c553
mov eax, dword [ebp - 0x70]
add eax, 6
cmp edi, eax
je 0x40c531
mov eax, dword [ebp - 0x70]
add eax, 9
cmp edi, eax
je 0x40c4fd
mov edx, dword [ebp - 0x70]
cmp edx, esi
ja 0x40c67f
lea eax, [edx + 4]
cmp edi, eax
jae 0x40be6d
lea edx, [esi + 0x5024918c]
mov cl, 0x16
mov al, dl
and al, bl
jmp 0x40c025
lea eax, [edx + 1]
cmp edi, eax
je 0x40c4f0
inc eax
cmp edi, eax
je 0x40c4d8
lea eax, [edx + 3]
cmp edi, eax
je 0x40c4c8
lea eax, [edx + 5]
cmp edi, eax
je 0x40c4b1
lea eax, [edx + 7]
cmp edi, eax
je 0x40c498
lea eax, [edx + edi]
cmp eax, esi
jbe 0x40c219
lea eax, [edx + 0x40]
cmp edi, eax
je 0x40c209
lea eax, [edx + 0x2a]
cmp edi, eax
je 0x40c1fc
lea ecx, [edx + 0x28]
cmp edi, ecx
je 0x40c1ef
lea eax, [edx + 0x5a]
cmp edi, eax
je 0x40c1df
lea eax, [edx + 0x64]
cmp edi, eax
je 0x40c1d2
lea eax, [edx + 2]
cmp edi, eax
je 0x40c1bc
lea eax, [edx + 0x42]
cmp edi, eax
je 0x40c1ac
lea eax, [edx + 1]
cmp edi, eax
je 0x40c19f
lea eax, [edx + 0x200]
cmp edi, eax
je 0x40c189
lea eax, [edx + 4]
cmp edi, eax
je 0x40bead
mov edi, ecx
lea edx, [edi + 0x80]
lea eax, [edx + 0x5a]
mov dword [ebp - 0x70], edx
cmp edi, eax
jb 0x40c667
lea eax, [edx + 0x20]
cmp edi, eax
jb 0x40c64c
lea ecx, [edx + 0x41]
cmp edi, ecx
jb 0x40c050
lea eax, [edx + 0x42]
cmp edi, eax
jb 0x40c036
lea eax, [edx + 1]
cmp edi, eax
jb 0x40c019
lea eax, [edx + 0x40]
cmp edi, eax
jb 0x40c17c
lea eax, [edx + 4]
cmp edi, eax
jb 0x40c164
lea eax, [edx + 0x80]
cmp edi, eax
jb 0x40c14c
lea eax, [edx + 3]
cmp edi, eax
jb 0x40c12d
lea eax, [edx + 0x64]
cmp edi, eax
jb 0x40bead
mov edi, ecx
lea edx, [edi + 6]
lea eax, [edx + 0x10]
mov dword [ebp - 0x70], edx
cmp edi, eax
ja 0x40c116
lea eax, [edx + 0x7a]
cmp edi, eax
ja 0x40c0fc
lea eax, [edx + 0x40]
cmp edi, eax
ja 0x40c0e3
lea eax, [edx + 0x2a]
cmp edi, eax
ja 0x40c0cc
lea eax, [edx + 0x28]
cmp edi, eax
ja 0x40c0b0
lea eax, [edx + 3]
cmp edi, eax
ja 0x40c0a0
lea eax, [edx + 0x64]
cmp edi, eax
ja 0x40c093
lea eax, [edx + 2]
cmp edi, eax
ja 0x40c07d
lea eax, [edx + 0x42]
cmp edi, eax
ja 0x40c06d
lea eax, [edx + 5]
cmp edi, eax
ja 0x40bead
lea edi, [edx + 0xa]
lea edx, [edi + 0x200]
mov dword [ebp - 0x70], edx
jmp 0x40bead
lea edx, [esi + 0x1ea8e7f4]
mov al, bl
and al, dl
mov cl, 0x2a
sub cl, al
add cl, cl
add cl, byte [ebp - 0x68]
add cl, dl
mov edx, dword [ebp - 0x70]
jmp 0x40bea2
lea edx, [esi - 0x25ecdcc4]
mov al, bl
and al, dl
mov cl, 0x2e
sub cl, al
add cl, cl
add cl, byte [ebp - 0x68]
add cl, dl
jmp 0x40be4a
mov edx, dword [ebp - 0x68]
lea ecx, [esi - 0x6a82a17c]
and bl, cl
mov al, 0x32
sub al, bl
add al, al
add al, dl
add cl, al
mov eax, dword [ebp - 0x70]
jmp 0x40bddc
mov edx, dword [ebp - 0x68]
lea ecx, [esi - 0x7edb73a0]
mov al, 0x30
jmp 0x40c505
lea ecx, [esi + 0x3c8ec7a8]
mov al, 0x34
and bl, cl
sub al, bl
add al, al
add al, byte [ebp - 0x68]
jmp 0x40c544
lea ecx, [esi - 0x806fd10]
mov al, 0x38
jmp 0x40c4e0
mov edx, dword [ebp - 0x68]
lea ecx, [esi - 0x4c9cc1c8]
mov al, 0x3c
jmp 0x40c55b
mov ecx, dword [ebp - 0x68]
lea eax, [esi + 0x6ecd7980]
and bl, al
add bl, bl
sub cl, bl
sub cl, 0x80
add cl, al
mov dword [ebp - 0x6c], ecx
jmp 0x40c587
mov ecx, dword [ebp - 0x68]
lea eax, [esi + 0x2a37b4c8]
and bl, al
add bl, bl
sub cl, bl
sub cl, 0x78
jmp 0x40c59e
mov edx, dword [ebp - 0x68]
lea ecx, [esi - 0x1a5e0ff0]
and bl, cl
mov al, dl
add bl, bl
sub al, bl
sub cl, 0x70
jmp 0x40c5c2
lea eax, [esi - 0x5ef3d4a8]
and bl, al
add bl, bl
sub al, bl
mov ebx, dword [ebp - 0x68]
lea ecx, [ebx + eax]
sub cl, 0x68
jmp 0x40c3bc
mov ecx, dword [ebp - 0x68]
lea eax, [esi + 0x5c7666a0]
and bl, al
add bl, bl
sub cl, bl
sub cl, 0x60
jmp 0x40c62f
lea ecx, [esi + 0x30fffad4]
mov al, 0x1a
and bl, cl
sub al, bl
add al, al
add al, byte [ebp - 0x68]
add cl, al
mov byte [ebp + esi - 0xec], cl
jmp 0x40c643
lea edx, [esi - 0x1395c9e4]
mov al, bl
and al, dl
mov cl, 0x1e
sub cl, al
add cl, cl
add cl, byte [ebp - 0x68]
jmp 0x40c297
lea edx, [esi - 0x582b8e9c]
mov al, bl
and al, dl
mov cl, 0x22
sub cl, al
add cl, cl
add cl, byte [ebp - 0x68]
jmp 0x40c26a
lea edx, [esi + 0x633eacac]
mov cl, 0x26
jmp 0x40c22c
lea ecx, [esi - 0x1f2496b8]
mov al, 4
and bl, cl
sub al, bl
add al, al
add al, byte [ebp - 0x68]
jmp 0x40c62f
lea ecx, [esi - 0x63ba5b70]
mov al, 8
jmp 0x40c3af
mov edx, dword [ebp - 0x68]
lea ecx, [esi + 0x57afdfd8]
mov al, 0xc
jmp 0x40c5ba
lea ecx, [esi + 0x131a1b20]
mov al, 0x10
and bl, cl
sub al, bl
add al, al
add al, byte [ebp - 0x68]
jmp 0x40c59e
lea ecx, [esi - 0x317ba998]
mov al, 0x14
jmp 0x40c364
lea ecx, [esi - 0x76116e50]
mov edx, dword [ebp - 0x68]
mov al, 0x18
jmp 0x40c55b
lea ecx, [esi + 0x4558ccf8]
mov al, 0x1c
jmp 0x40c4e0
lea ecx, [esi + 0xc30840]
mov al, 0x20
jmp 0x40c085
mov edx, dword [ebp - 0x68]
lea ecx, [esi - 0x43d2bc78]
mov al, 0x24
jmp 0x40c505
lea eax, [edx + 0x20]
cmp edi, eax
jae 0x40c2c2
lea edx, [esi - 0x5db51da4]
mov cl, 0x3e
mov al, bl
and al, dl
sub cl, al
add cl, cl
add cl, byte [ebp - 0x68]
add cl, dl
mov edx, dword [ebp - 0x70]
lea eax, [edx + edi]
cmp eax, 0x10
je 0x40c47f
lea eax, [edx + 0x3e8]
cmp edi, eax
jbe 0x40c323
mov cl, byte [ebp - 0x68]
lea edx, [esi - 0x54281014]
mov al, bl
and al, dl
add al, al
sub cl, al
sub dl, 0x74
add cl, dl
mov edx, dword [ebp - 0x70]
cmp edi, 0x61
jae 0x40c461
lea eax, [edx + 4]
cmp edi, eax
jbe 0x40c3c4
mov cl, byte [ebp - 0x68]
lea edx, [esi - 0x4037e88]
mov al, bl
and al, dl
add al, al
sub cl, al
sub dl, 0x48
add cl, dl
mov edx, dword [ebp - 0x70]
cmp edx, 0x20
jb 0x40c140
mov edx, dword [ebp - 0x68]
lea ecx, [esi - 0x5629cf58]
and bl, cl
mov al, dl
add bl, bl
sub al, bl
add cl, al
add cl, cl
sub cl, 0x30
jmp 0x40c50f
lea eax, [edx + 1]
cmp edi, eax
jne 0x40c2d6
lea ecx, [esi - 0x5fb6dce8]
mov al, 0x2c
jmp 0x40c191
inc eax
cmp edi, eax
jne 0x40c2eb
mov edx, dword [ebp - 0x68]
lea ecx, [esi + 0x2974ac88]
mov al, 0x24
jmp 0x40c5ba
lea eax, [edx + 3]
cmp edi, eax
jne 0x40c30d
lea ecx, [esi - 0x4d5fca08]
mov al, 0x1c
and bl, cl
sub al, bl
add al, al
add cl, al
add cl, byte [ebp - 0x68]
mov dword [ebp - 0x6c], ecx
jmp 0x40c58a
lea eax, [edx + 4]
cmp edi, eax
jne 0x40c23c
lea ecx, [esi - 0x8ca0550]
jmp 0x40c1e5
lea eax, [edx + 1]
cmp edi, eax
jne 0x40c343
mov edx, dword [ebp - 0x68]
lea ecx, [esi - 0xf924b5c]
and bl, cl
mov al, dl
add bl, bl
sub al, bl
sub cl, 0x7c
jmp 0x40c50d
inc eax
cmp edi, eax
jne 0x40c355
lea ecx, [esi + 0x79993e14]
mov al, 0x3a
jmp 0x40c4e0
lea eax, [edx + 4]
cmp edi, eax
jne 0x40c371
lea ecx, [esi + 0x2c4c784]
mov al, 0x32
and bl, cl
sub al, bl
add al, al
add al, byte [ebp - 0x68]
add cl, al
jmp 0x40c305
lea eax, [edx + 5]
cmp edi, eax
jne 0x40c385
lea ecx, [esi + 0x475a8c3c]
mov al, 0x2e
jmp 0x40c1c4
lea eax, [edx + 7]
cmp edi, eax
jne 0x40c39c
mov edx, dword [ebp - 0x68]
lea ecx, [esi - 0x740faf0c]
mov al, 0x2a
jmp 0x40c5ba
lea eax, [edx + 3]
cmp edi, eax
jne 0x40c26f
lea ecx, [esi - 0x2f79ea54]
mov al, 0x26
and bl, cl
sub al, bl
mov ebx, dword [ebp - 0x68]
add al, al
add cl, al
add cl, bl
mov dword [ebp - 0x6c], ecx
jmp 0x40c5f4
lea eax, [edx + 1]
cmp edi, eax
jne 0x40c3e2
mov ecx, dword [ebp - 0x68]
lea eax, [esi + 0x40924630]
and bl, al
add bl, bl
sub cl, bl
sub cl, 0x50
jmp 0x40c62f
inc eax
cmp edi, eax
jne 0x40c3fe
lea eax, [esi - 0x7ad7f518]
and bl, al
add bl, bl
sub al, bl
mov ebx, dword [ebp - 0x68]
lea ecx, [ebx + eax]
sub cl, 0x58
jmp 0x40c3bc
lea eax, [edx + 3]
cmp edi, eax
jne 0x40c41c
mov ecx, dword [ebp - 0x68]
lea eax, [esi + 0xe539458]
and bl, al
add bl, bl
sub cl, bl
sub cl, 0x68
jmp 0x40c59e
lea eax, [edx + 6]
cmp edi, eax
jne 0x40c43f
mov edx, dword [ebp - 0x68]
lea ecx, [esi - 0x6880e238]
and bl, cl
mov al, dl
add bl, bl
sub al, bl
lea ebx, [ecx + eax]
sub bl, 0x78
jmp 0x40c566
lea eax, [edx + 7]
cmp edi, eax
jne 0x40c29c
mov ecx, dword [ebp - 0x68]
lea eax, [esi - 0x23eb1d80]
and bl, al
add bl, bl
sub cl, bl
sub cl, 0x80
jmp 0x40c4e9
mov edx, dword [ebp - 0x68]
lea ecx, [esi - 0x11940aa0]
and bl, cl
mov al, 0x30
sub al, bl
add al, al
lea ebx, [edx + eax]
add bl, cl
add bl, byte [ebp - 0x71]
jmp 0x40c566
mov edx, dword [ebp - 0x68]
lea ecx, [esi + 0x3301ba18]
and bl, cl
mov al, 0x2c
sub al, bl
add al, al
sub al, byte [ebp - 0x71]
jmp 0x40c5c0
mov edx, dword [ebp - 0x68]
lea ecx, [esi + 0x303cf294]
and bl, cl
mov al, dl
add bl, bl
sub al, bl
sub cl, 0xc
jmp 0x40c5c2
mov ecx, dword [ebp - 0x68]
lea eax, [esi - 0x1458d224]
and bl, al
add bl, bl
sub cl, bl
sub cl, 4
jmp 0x40c59e
mov edx, dword [ebp - 0x68]
lea ecx, [esi + 0x627ba46c]
mov al, 6
jmp 0x40c55b
lea ecx, [esi + 0x1de5dfb4]
mov al, 0xa
and bl, cl
sub al, bl
add al, al
add al, byte [ebp - 0x68]
add cl, al
mov dword [ebp - 0x6c], ecx
jmp 0x40c54d
mov edx, dword [ebp - 0x68]
lea ecx, [esi - 0x6b45a9bc]
mov al, 0x12
jmp 0x40c505
lea ecx, [esi + 0xb8eccd4]
mov al, 0x1a
and bl, cl
sub al, bl
add al, al
add al, dl
add cl, al
mov dword [ebp - 0x6c], ecx
lea ecx, [esi + 0x4c211304]
mov al, cl
and al, dl
sub dl, 0x1c
add al, al
sub cl, al
add cl, dl
mov edx, dword [ebp - 0x70]
mov byte [ebp + esi - 0xec], cl
jmp 0x40c549
lea ecx, [esi - 0x3906f7e4]
mov al, 0x1e
and bl, cl
sub al, bl
add al, al
add al, dl
mov edx, dword [ebp - 0x70]
add cl, al
mov dword [ebp - 0x6c], ecx
inc edx
mov dword [ebp - 0x70], edx
dec esi
jmp 0x40c640
lea ecx, [esi + 0x3dcd7eac]
mov al, 0x26
and bl, cl
sub al, bl
add al, al
lea ebx, [edx + eax]
add bl, cl
mov dword [ebp - 0x6c], ebx
lea ecx, [esi - 0x6f492844]
mov al, cl
and al, dl
sub dl, 0x24
add al, al
sub cl, al
add cl, dl
add cl, bl
mov byte [ebp + esi - 0xec], cl
mov ecx, ebx
mov edx, dword [ebp - 0x70]
add edi, edx
jmp 0x40c5a3
lea ecx, [esi - 0x4b5e0ac4]
mov al, 0x2e
and bl, cl
sub al, bl
add al, al
add al, dl
add cl, al
mov dword [ebp - 0x6c], ecx
movzx eax, cl
or ecx, 0xffffffff
sub ecx, eax
add esi, ecx
jmp 0x40c640
lea ecx, [esi + 0x700c3084]
mov al, 0x32
and bl, cl
sub al, bl
add al, al
add al, dl
add cl, al
mov dword [ebp - 0x6c], ecx
mov ebx, dword [ebp - 0x70]
lea ecx, [esi - 0x2ab3638c]
mov al, dl
mov dword [ebp - 0x68], edx
and al, cl
add al, al
sub cl, al
sub cl, 0x2c
add cl, dl
inc ebx
movzx eax, cl
add eax, ebx
mov byte [ebp + esi - 0xec], cl
mov dword [ebp - 0x70], ebx
sub esi, eax
mov ebx, edx
lea edx, [esi + 0x77977ed0]
mov cl, 0x28
mov al, dl
and al, bl
sub cl, al
or eax, 0xffffffff
add cl, cl
add cl, dl
mov edx, dword [ebp - 0x70]
add cl, bl
inc edi
sub eax, edi
mov byte [ebp + esi - 0xec], cl
add esi, eax
jmp 0x40c634
lea ecx, [esi - 0x191f58ec]
mov al, 0x3a
and bl, cl
sub al, bl
add al, al
add al, dl
mov edx, dword [ebp - 0x70]
add cl, al
mov dword [ebp - 0x6c], ecx
movzx eax, byte [ebp + esi - 0xec]
add eax, edx
add esi, eax
mov ecx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x70]
inc esi
jmp 0x40bdc6
lea ecx, [esi + 0x50e799cc]
mov al, 0x36
and bl, cl
sub al, bl
add al, al
add al, byte [ebp - 0x68]
add cl, al
mov eax, dword [ebp - 0x70]
jmp 0x40bdc4
lea ecx, [esi + 0xc51d514]
mov al, 0x3a
and bl, cl
sub al, bl
add al, al
add al, byte [ebp - 0x68]
add cl, al
jmp 0x40bdb6
lea eax, [ebp + 0x15014e4]
jmp 0x40c695
lea eax, [ebp + 0x5af740]
jmp 0x40c695
lea eax, [ebp - 0xec]
push eax
lea ecx, [ebp - 0x178]
call fcn.004032e2
and dword [ebp - 4], 0
lea edx, [ebp - 0x178]
lea ecx, [ebp - 0x1c0]
call fcn.0040b85a
mov edx, eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x64]
call fcn.0040b85a
lea ecx, [ebp - 0x1c0]
call fcn.00403349
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 4
call fcn.00403349
mov bl, byte [ebp - 0x15]
lea edi, [ebp - 0xff]
mov dword [ebp - 0x12c], 0x95eaf1f5
xor eax, eax
mov dword [ebp - 0x128], 0xcef8e1e8
mov dword [ebp - 0x124], 0xf2f8e7c3
mov dword [ebp - 0x120], 0xd8de1df9
mov dword [ebp - 0x11c], 0xe8fcddc1
mov dword [ebp - 0x118], 0xcff817f6
mov dword [ebp - 0x114], 0xd9aafedd
mov dword [ebp - 0x110], 0xb1e0d0c1
mov dword [ebp - 0x10c], 0xcde8d4d2
mov dword [ebp - 0x108], 0xe5bacee1
mov dword [ebp - 0x104], 0xf602dde0
mov byte [ebp - 0x100], 0xcc
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosb byte es:[edi], al
mov ecx, dword [0x49f1d0]
mov edi, dword [0x49f1cc]
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x6c], ebx
xor esi, esi
cmp esi, 0x3e
jae 0x40ced9
mov al, byte [ebp + esi - 0x12c]
mov byte [ebp - 0x71], al
movzx edx, al
mov dword [ebp - 0x68], edx
mov ebx, edx
cmp edi, esi
ja 0x40ced1
lea eax, [ecx + 1]
cmp edi, eax
jae 0x40c7be
lea ecx, [esi - 0x16bc91ac]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
add ecx, edx
mov edx, ecx
mov dword [ebp - 0x6c], ecx
sub dl, 0x4c
jmp 0x40c95d
je 0x40ce68
inc eax
cmp edi, eax
je 0x40ce44
lea eax, [ecx + 3]
cmp edi, eax
je 0x40ce2c
mov edx, dword [ebp - 0x6c]
mov dword [ebp - 0x7c], edi
mov dword [ebp - 0x78], ecx
cmp ecx, esi
ja 0x40cec9
lea eax, [ecx + 3]
cmp edi, eax
jae 0x40c80b
mov cl, byte [ebp - 0x68]
lea edx, [esi + 0x22880ce4]
mov al, dl
and al, bl
add al, al
sub cl, al
sub cl, 0x3c
add dl, cl
mov ecx, dword [ebp - 0x78]
jmp 0x40c859
lea eax, [ecx + 1]
cmp edi, eax
je 0x40cdec
inc eax
cmp edi, eax
je 0x40cdd5
mov ecx, dword [ebp - 0x78]
lea eax, [ecx + 3]
cmp edi, eax
je 0x40cdbb
lea eax, [ecx + 4]
cmp edi, eax
je 0x40cd7c
lea eax, [ecx + 5]
cmp edi, eax
je 0x40cd65
lea eax, [ecx + 6]
cmp edi, eax
je 0x40cd58
lea eax, [ecx + 5]
cmp edi, eax
je 0x40cd4b
mov edi, dword [ebp - 0x7c]
lea eax, [ecx + edi]
cmp eax, esi
jbe 0x40cabc
lea eax, [ecx + 3]
mov dword [ebp - 0x70], ecx
cmp edi, eax
je 0x40caaf
lea eax, [ecx + 4]
cmp edi, eax
je 0x40ca95
lea eax, [ecx + 1]
cmp edi, eax
je 0x40ca88
lea eax, [ecx + 2]
cmp edi, eax
je 0x40ca6c
lea eax, [ecx + 5]
cmp edi, eax
je 0x40ca50
lea eax, [ecx + 6]
cmp edi, eax
je 0x40ca35
lea edi, [ecx + 0x200]
lea ecx, [edi + 5]
lea eax, [ecx + 0x3e8]
mov dword [ebp - 0x70], ecx
cmp edi, eax
jb 0x40ceb0
lea eax, [ecx + 0x400]
cmp edi, eax
jb 0x40ce93
lea eax, [ecx + 0x1000]
cmp edi, eax
jb 0x40c965
lea eax, [ecx + 0x200]
cmp edi, eax
jb 0x40c948
lea eax, [ecx + 0x61]
cmp edi, eax
jb 0x40ca1c
lea eax, [ecx + 0x7a]
cmp edi, eax
jb 0x40c9f7
lea edi, [ecx + 8]
lea ecx, [edi + 0x1000]
lea eax, [ecx + 9]
mov dword [ebp - 0x70], ecx
cmp edi, eax
ja 0x40c9dd
lea eax, [ecx + 0xa]
cmp edi, eax
ja 0x40c9d3
lea eax, [ecx + 0x10]
cmp edi, eax
ja 0x40c9b7
lea eax, [ecx + 0x20]
cmp edi, eax
ja 0x40c9a1
lea eax, [ecx + 0x28]
cmp edi, eax
ja 0x40c987
lea edi, [ecx + 0x7a]
lea ecx, [edi + 0x10]
jmp 0x40c867
lea edx, [esi - 0x2ae9f50c]
mov al, bl
and al, dl
mov cl, 0x2a
sub cl, al
add cl, cl
add cl, byte [ebp - 0x68]
add dl, cl
mov ecx, dword [ebp - 0x70]
jmp 0x40c7db
mov edx, dword [ebp - 0x68]
lea ecx, [esi + 0x28f2e4c]
and bl, cl
mov al, dl
add bl, bl
sub al, bl
lea ebx, [ecx + eax]
mov ecx, dword [ebp - 0x70]
sub bl, 0x14
mov dword [ebp - 0x6c], ebx
jmp 0x40c78d
lea edx, [esi + 0x14406720]
mov al, dl
and al, bl
mov bl, 0x10
sub bl, al
add bl, bl
add bl, byte [ebp - 0x68]
add bl, dl
jmp 0x40ce05
lea ecx, [esi - 0x861e828]
mov dl, 0xc
and bl, cl
sub dl, bl
add dl, dl
add dl, byte [ebp - 0x68]
jmp 0x40ce54
mov edx, dword [ebp - 0x68]
lea ecx, [esi + 0x25173b30]
and bl, cl
mov al, dl
add bl, bl
sub al, bl
lea ebx, [ecx + eax]
sub bl, 0x50
jmp 0x40ccf7
lea ecx, [esi + 0x52905e88]
mov al, 0x24
jmp 0x40ca3d
mov edx, dword [ebp - 0x68]
lea eax, [esi - 0x7ff67e20]
and bl, al
add bl, bl
sub dl, bl
lea ebx, [eax + edx]
sub bl, 0x20
jmp 0x40ce7e
lea ecx, [esi - 0xe47a5c4]
mov dl, 0x2e
and bl, cl
sub dl, bl
add dl, dl
add dl, byte [ebp - 0x68]
add dl, cl
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], edx
mov byte [ebp + esi - 0x12c], dl
jmp 0x40ce8d
mov cl, byte [ebp - 0x68]
lea edx, [esi + 0x1f317d94]
mov al, bl
and al, dl
add al, al
sub cl, al
sub cl, 0xc
jmp 0x40cb43
lea ecx, [esi - 0x3568f50]
mov al, 0x18
mov edx, dword [ebp - 0x68]
and bl, cl
sub al, bl
add al, al
lea ebx, [ecx + eax]
add bl, dl
jmp 0x40cd24
mov edx, dword [ebp - 0x68]
lea ecx, [esi + 0x2a229408]
and bl, cl
mov al, dl
add bl, bl
sub al, bl
lea ebx, [ecx + eax]
sub bl, 0x38
jmp 0x40ccf4
mov edx, dword [ebp - 0x68]
lea ecx, [esi - 0x4d7201f0]
and bl, cl
mov al, dl
add bl, bl
sub al, bl
lea ebx, [ecx + eax]
sub bl, 0x70
jmp 0x40cd92
lea ecx, [esi - 0x1ff8de98]
mov al, 0x14
jmp 0x40cc19
mov ecx, dword [ebp - 0x68]
lea eax, [esi + 0xd8044c0]
and bl, al
add bl, bl
sub cl, bl
lea ebx, [eax + ecx]
sub bl, 0x40
jmp 0x40ce22
lea ecx, [esi + 0x3af96818]
mov al, 0x2c
jmp 0x40cdf4
lea eax, [ecx + 5]
cmp edi, eax
jae 0x40cb71
mov cl, byte [ebp - 0x68]
lea edx, [esi - 0x16bc91ac]
mov al, bl
and al, dl
add al, al
sub cl, al
sub cl, 0x4c
add dl, cl
mov ecx, dword [ebp - 0x78]
mov dword [ebp - 0x6c], edx
mov dword [ebp - 0x70], ecx
lea eax, [edi + ecx]
cmp eax, 0x400
je 0x40ccda
lea eax, [ecx + 8]
cmp edi, eax
jbe 0x40cbf8
mov cl, byte [ebp - 0x68]
lea edx, [esi - 0x6aeeb5fc]
mov al, bl
and al, dl
add al, al
sub cl, al
sub cl, 0x1c
add dl, cl
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], edx
cmp edi, 0xa
jae 0x40ccbc
lea eax, [ecx + 0x7a]
cmp edi, eax
jbe 0x40cc72
mov cl, byte [ebp - 0x68]
lea edx, [esi - 0x4866a918]
mov al, bl
and al, dl
add al, al
sub cl, al
sub cl, 0x58
add dl, cl
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], edx
cmp ecx, 3
jb 0x40ca10
mov edx, dword [ebp - 0x68]
lea ecx, [esi - 0xf220a88]
and bl, cl
mov al, 0x1c
sub al, bl
add al, al
lea ebx, [edx + eax]
add bl, cl
add bl, bl
jmp 0x40ce02
lea eax, [ecx + 1]
cmp edi, eax
jne 0x40cb98
mov ecx, dword [ebp - 0x68]
lea eax, [esi + 0x451019c8]
and bl, al
add bl, bl
sub cl, bl
lea ebx, [eax + ecx]
mov ecx, dword [ebp - 0x78]
sub bl, 0x78
mov dword [ebp - 0x70], ecx
jmp 0x40ce7e
inc eax
cmp edi, eax
jne 0x40cbbe
mov edx, dword [ebp - 0x68]
lea ecx, [esi - 0x15e22ce8]
and bl, cl
mov al, 0x2c
sub al, bl
add al, al
lea ebx, [edx + eax]
mov eax, dword [ebp - 0x78]
add bl, cl
mov dword [ebp - 0x70], eax
jmp 0x40ccf4
mov eax, dword [ebp - 0x78]
add eax, 5
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x6c], edx
cmp dword [ebp - 0x7c], eax
jne 0x40cae6
mov edx, dword [ebp - 0x68]
lea ecx, [esi + 0x61b26910]
mov edi, dword [ebp - 0x7c]
and bl, cl
add bl, bl
mov al, dl
sub al, bl
lea ebx, [ecx + eax]
mov eax, dword [ebp - 0x78]
sub bl, 0x70
mov dword [ebp - 0x70], eax
jmp 0x40cd92
lea eax, [ecx + 1]
cmp edi, eax
jne 0x40cc0c
lea ecx, [esi + 0x679826ac]
mov al, 0x26
jmp 0x40cdf4
inc eax
cmp edi, eax
jne 0x40cc2a
lea ecx, [esi + 0xca5dffc]
mov al, 0xe
and bl, cl
sub al, bl
add al, al
add al, byte [ebp - 0x68]
lea ebx, [ecx + eax]
jmp 0x40cdd0
lea eax, [ecx + 5]
cmp edi, eax
jne 0x40cc4b
mov edx, dword [ebp - 0x68]
lea eax, [esi - 0x4e4c66b4]
and bl, al
add bl, bl
sub dl, bl
sub dl, 0x14
mov ecx, dword [ebp - 0x70]
jmp 0x40ce3b
lea eax, [ecx + 3]
cmp edi, eax
jne 0x40cb1b
mov edx, dword [ebp - 0x68]
lea ecx, [esi + 0x56c1529c]
and bl, cl
mov al, dl
add bl, bl
sub al, bl
lea ebx, [ecx + eax]
sub bl, 0x44
jmp 0x40ccf4
lea eax, [ecx + 1]
cmp edi, eax
jne 0x40cc92
lea ecx, [esi - 0x75dfcc70]
mov al, 8
and bl, cl
sub al, bl
add al, al
add al, byte [ebp - 0x68]
lea ebx, [ecx + eax]
jmp 0x40ce7b
inc eax
cmp edi, eax
jne 0x40cca4
lea ecx, [esi + 0x1b4c988]
mov dl, 0x24
jmp 0x40c9a9
lea eax, [ecx + 3]
cmp edi, eax
jne 0x40cb4b
lea ecx, [esi + 0x1e5718d0]
mov al, 0x28
jmp 0x40cdf4
mov edx, dword [ebp - 0x68]
lea ecx, [esi - 0x3c9b2de0]
and bl, cl
mov al, 0x10
sub al, bl
add al, al
lea ebx, [edx + eax]
add bl, cl
add bl, byte [ebp - 0x71]
jmp 0x40cd92
mov edx, dword [ebp - 0x68]
lea ecx, [esi - 0x6a145138]
and bl, cl
mov al, dl
add bl, bl
sub al, bl
sub al, byte [ebp - 0x71]
lea ebx, [ecx + eax]
sub bl, 0x78
mov dword [ebp - 0x68], edx
lea ecx, [esi + 0x7f2f1d1c]
mov al, cl
and al, dl
mov dl, 0x1e
sub dl, al
add dl, dl
add dl, cl
mov ecx, dword [ebp - 0x70]
add dl, byte [ebp - 0x68]
inc ecx
movzx eax, dl
mov byte [ebp + esi - 0x12c], dl
add eax, ecx
mov edx, dword [ebp - 0x68]
sub esi, eax
mov dword [ebp - 0x70], ecx
lea ecx, [esi + 0x68728b70]
mov al, cl
and al, dl
add al, al
sub cl, al
or eax, 0xffffffff
sub cl, 0x10
add cl, dl
inc edi
sub eax, edi
mov byte [ebp + esi - 0x12c], cl
add esi, eax
jmp 0x40ce7b
lea ecx, [esi - 0x76ba3134]
mov al, 0x36
jmp 0x40cc81
lea ecx, [esi + 0x11b138d4]
mov dl, 0x1a
jmp 0x40c9a9
mov edx, dword [ebp - 0x68]
lea eax, [esi + 0x3f2a5c2c]
and bl, al
add bl, bl
sub dl, bl
sub dl, 0x34
jmp 0x40cc43
mov edx, dword [ebp - 0x68]
lea ecx, [esi + 0x6ca37f84]
and bl, cl
mov al, 0x32
sub al, bl
add al, al
lea ebx, [edx + eax]
add bl, cl
mov dword [ebp - 0x6c], ebx
lea ecx, [esi - 0x5357bf8c]
mov al, cl
and al, dl
sub dl, 0x2c
add al, al
sub cl, al
add cl, bl
add cl, dl
mov edx, ebx
mov byte [ebp + esi - 0x12c], cl
mov ecx, dword [ebp - 0x70]
jmp 0x40ce40
mov ecx, dword [ebp - 0x68]
lea eax, [esi - 0x65e35d24]
and bl, al
add bl, bl
sub cl, bl
lea ebx, [eax + ecx]
sub bl, 4
mov ecx, dword [ebp - 0x70]
jmp 0x40ce29
mov ecx, dword [ebp - 0x68]
lea eax, [esi - 0x386a39cc]
and bl, al
add bl, bl
sub cl, bl
lea ebx, [eax + ecx]
sub bl, 0x6c
jmp 0x40ce22
lea ecx, [esi - 0xaf11674]
mov al, 0x16
mov edx, dword [ebp - 0x68]
and bl, cl
sub al, bl
add al, al
lea ebx, [edx + eax]
add bl, cl
mov dword [ebp - 0x68], edx
lea edx, [esi - 0x25de9c34]
mov cl, 0x36
mov al, dl
and al, byte [ebp - 0x68]
sub cl, al
add cl, cl
add cl, dl
add cl, byte [ebp - 0x68]
mov byte [ebp + esi - 0x12c], cl
mov ecx, dword [ebp - 0x70]
inc ecx
mov dword [ebp - 0x70], ecx
dec esi
jmp 0x40ce8a
lea eax, [esi + 0x5e5bd9c]
and bl, al
add bl, bl
sub dl, bl
sub dl, 0x44
add dl, al
mov dword [ebp - 0x6c], edx
add edi, ecx
jmp 0x40ce59
lea ecx, [esi + 0x335ee0f4]
mov al, 0x2a
and bl, cl
sub al, bl
add al, al
add dl, al
add dl, cl
mov dword [ebp - 0x6c], edx
or ecx, 0xffffffff
movzx eax, dl
sub ecx, eax
add esi, ecx
mov ecx, dword [ebp - 0x70]
jmp 0x40ce8d
lea ecx, [esi - 0x4435b504]
mov al, 0xe
and bl, cl
sub al, bl
add al, al
lea ebx, [edx + eax]
add bl, cl
mov ecx, dword [ebp - 0x70]
movzx eax, byte [ebp + esi - 0x12c]
add eax, ecx
add esi, eax
mov dword [ebp - 0x6c], ebx
inc esi
jmp 0x40c777
mov ecx, dword [ebp - 0x68]
lea eax, [esi + 0x300851a4]
and bl, al
add bl, bl
sub cl, bl
lea ebx, [eax + ecx]
mov ecx, dword [ebp - 0x70]
sub bl, 0x7c
jmp 0x40c772
lea ecx, [esi + 0x5d8174fc]
mov al, 0xe
and bl, cl
sub al, bl
add al, al
add al, byte [ebp - 0x68]
lea ebx, [ecx + eax]
jmp 0x40c763
lea eax, [ebp + 0x14e1f44]
jmp 0x40cedf
lea eax, [ebp + 0x518d98]
jmp 0x40cedf
lea eax, [ebp - 0x12c]
push eax
lea ecx, [ebp - 0x190]
call fcn.004032e2
lea edx, [ebp - 0x190]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1d8]
call fcn.0040b85a
mov edx, eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x4c]
call fcn.0040b85a
lea ecx, [ebp - 0x1d8]
call fcn.00403349
lea ecx, [ebp - 0x190]
mov byte [ebp - 4], 9
call fcn.00403349
mov dl, byte [ebp - 0x15]
lea edi, [ebp - 0x14f]
push 7
mov dword [ebp - 0x160], 0x6686bdb2
xor eax, eax
mov dword [ebp - 0x15c], 0x6b746099
mov dword [ebp - 0x158], 0x9094899b
mov dword [ebp - 0x154], 0xbca47f96
mov byte [ebp - 0x150], 0xf6
pop ecx
rep stosd dword es:[edi], eax
mov dword [ebp - 0x68], edx
stosw word es:[edi], ax
mov ecx, dword [0x49f1d0]
mov edi, dword [0x49f1cc]
mov dword [ebp - 0x70], ecx
xor esi, esi
cmp esi, 0x2f
jae 0x40d810
mov al, byte [ebp + esi - 0x160]
mov byte [ebp - 0x71], al
movzx ebx, al
mov edx, ebx
mov dword [ebp - 0x6c], edx
cmp edi, esi
ja 0x40d808
lea eax, [ecx + 1]
cmp edi, eax
jae 0x40cfbf
lea edx, [esi - 0x215e321]
mov eax, edx
and eax, ebx
add eax, eax
sub edx, eax
add edx, ebx
sub dl, 0x19
mov dword [ebp - 0x68], edx
jmp 0x40cfe4
je 0x40d79f
inc eax
cmp edi, eax
je 0x40d77e
lea eax, [ecx + 3]
cmp edi, eax
je 0x40d764
lea eax, [ecx + 4]
cmp edi, eax
je 0x40d72f
cmp ecx, esi
ja 0x40d800
lea eax, [ecx + 0x28]
cmp edi, eax
jae 0x40d00e
lea edx, [esi - 0x2bcba1b5]
mov cl, bl
mov al, dl
and al, byte [ebp - 0x6c]
add al, al
sub cl, al
lea eax, [edx + ecx]
sub al, 0xd
jmp 0x40d1b3
lea eax, [ecx + 1]
cmp edi, eax
je 0x40d71a
inc eax
cmp edi, eax
je 0x40d702
lea eax, [ecx + 4]
cmp edi, eax
je 0x40d6ec
lea eax, [ecx + 3]
cmp edi, eax
je 0x40d6d2
lea eax, [edi + ecx]
cmp eax, esi
jbe 0x40d3f1
lea eax, [ecx + 0x2a]
cmp edi, eax
je 0x40d3d9
lea eax, [ecx + 0xa]
cmp edi, eax
je 0x40d3bf
lea eax, [ecx + 0x3e8]
cmp edi, eax
je 0x40d3a9
lea eax, [ecx + 2]
cmp edi, eax
je 0x40d390
lea eax, [ecx + 0x20]
cmp edi, eax
je 0x40d383
lea eax, [ecx + 0x1000]
cmp edi, eax
je 0x40d369
lea eax, [ecx + 4]
cmp edi, eax
je 0x40d351
lea edi, [ecx + 0x400]
lea ecx, [edi + 0x20]
lea eax, [ecx + 3]
mov dword [ebp - 0x70], ecx
cmp edi, eax
jb 0x40d7e5
lea eax, [ecx + 0x28]
cmp edi, eax
jb 0x40d7c7
lea eax, [ecx + 0x61]
cmp edi, eax
jb 0x40d1df
lea eax, [ecx + 5]
cmp edi, eax
jb 0x40d1be
lea eax, [ecx + 0x42]
cmp edi, eax
jb 0x40d19d
lea eax, [ecx + 0x41]
cmp edi, eax
jb 0x40d336
lea eax, [ecx + 8]
cmp edi, eax
jb 0x40d31d
lea eax, [ecx + 0x80]
cmp edi, eax
jb 0x40d304
lea eax, [ecx + 0x2a]
cmp edi, eax
jb 0x40d2e0
lea eax, [ecx + 0xa]
cmp edi, eax
jb 0x40d043
lea edi, [ecx + 1]
lea ecx, [edi + 0x3e8]
lea eax, [ecx + 0x10]
mov dword [ebp - 0x70], ecx
cmp edi, eax
ja 0x40d2c3
lea eax, [ecx + 0x400]
cmp edi, eax
ja 0x40d2ab
lea eax, [ecx + 3]
cmp edi, eax
ja 0x40d293
lea eax, [ecx + 0x28]
cmp edi, eax
ja 0x40d279
lea eax, [ecx + 0x61]
cmp edi, eax
ja 0x40d25c
lea eax, [ecx + 5]
cmp edi, eax
ja 0x40d244
lea eax, [ecx + 0x42]
cmp edi, eax
ja 0x40d22e
lea eax, [ecx + 0x41]
cmp edi, eax
ja 0x40d218
lea eax, [ecx + 8]
cmp edi, eax
ja 0x40d200
lea eax, [ecx + 0x80]
cmp edi, eax
ja 0x40d043
lea edi, [ecx + 9]
lea ecx, [edi + 0x2a]
mov dword [ebp - 0x70], ecx
jmp 0x40d043
mov al, byte [ebp - 0x6c]
lea edx, [esi - 0x21e252eb]
and al, dl
mov cl, bl
add al, al
sub cl, al
lea eax, [edx + ecx]
add al, 0x6d
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x68], eax
jmp 0x40d038
mov al, byte [ebp - 0x6c]
lea edx, [esi - 0x1db68ca9]
and al, dl
mov cl, bl
add al, al
sub cl, al
lea eax, [edx + ecx]
mov ecx, dword [ebp - 0x70]
sub al, 0x61
mov dword [ebp - 0x68], eax
jmp 0x40cfe4
mov edx, dword [ebp - 0x6c]
lea ecx, [esi - 0x198ac667]
and dl, cl
mov al, bl
add dl, dl
sub cl, 0x2f
sub al, dl
add al, cl
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x68], eax
jmp 0x40cf93
mov edx, dword [ebp - 0x6c]
lea ecx, [esi - 0x5e5d0da8]
and dl, cl
mov al, bl
add dl, dl
sub al, dl
sub al, 0x68
jmp 0x40d73f
mov ecx, dword [ebp - 0x6c]
lea eax, [esi - 0x5a314766]
and cl, al
add cl, cl
sub bl, cl
sub al, 0x36
jmp 0x40d713
mov ecx, dword [ebp - 0x6c]
lea eax, [esi - 0x56058124]
and cl, al
add cl, cl
sub bl, cl
sub al, 4
jmp 0x40d4ad
mov edx, dword [ebp - 0x6c]
lea ecx, [esi - 0x51d9bae2]
and dl, cl
mov al, 0x17
sub al, dl
add al, al
add al, bl
jmp 0x40d639
lea ecx, [esi - 0x4dadf4a0]
mov al, 0x30
mov edx, dword [ebp - 0x6c]
and dl, cl
sub al, dl
add al, al
add al, bl
add al, cl
mov ecx, dword [ebp - 0x70]
jmp 0x40d774
mov ecx, dword [ebp - 0x6c]
lea eax, [esi - 0x49822e5e]
and cl, al
add cl, cl
sub bl, cl
lea edx, [eax + ebx]
sub dl, 0x6e
jmp 0x40d790
mov edx, dword [ebp - 0x6c]
lea ecx, [esi - 0x4556681c]
and dl, cl
mov al, bl
add dl, dl
sub al, dl
sub al, 0x3c
jmp 0x40d678
mov ecx, dword [ebp - 0x6c]
lea eax, [esi - 0x412aa1da]
and cl, al
add cl, cl
sub al, cl
sub al, 0xa
add al, bl
jmp 0x40d489
mov edx, dword [ebp - 0x6c]
lea ecx, [esi - 0x3cfedb98]
and dl, cl
mov al, 0x14
sub al, dl
add al, al
add al, bl
add al, cl
mov ecx, dword [ebp - 0x70]
jmp 0x40d7af
mov ecx, dword [ebp - 0x6c]
lea eax, [esi - 0x32916bf3]
and cl, al
add cl, cl
sub bl, cl
lea edx, [eax + ebx]
sub dl, 0x5b
mov dword [ebp - 0x68], edx
mov byte [ebp + esi - 0x160], dl
jmp 0x40d7be
mov al, byte [ebp - 0x6c]
lea edx, [esi - 0x2e65a5b1]
and al, dl
mov cl, bl
add al, al
sub cl, al
sub cl, 0x29
jmp 0x40d573
mov al, byte [ebp - 0x6c]
lea edx, [esi - 0x2a39df6f]
and al, dl
mov cl, bl
add al, al
sub cl, al
add cl, 9
jmp 0x40d442
mov al, byte [ebp - 0x6c]
lea edx, [esi - 0x260e192d]
and al, dl
mov cl, bl
add al, al
sub cl, al
lea eax, [edx + ecx]
add al, 0x3b
jmp 0x40d40e
lea ecx, [esi + 0x191c246]
mov al, 0xb
mov edx, dword [ebp - 0x6c]
and dl, cl
sub al, dl
add al, al
add al, bl
jmp 0x40d678
lea edx, [esi + 0x5bd8888]
mov cl, 0x24
mov al, dl
and al, byte [ebp - 0x6c]
sub cl, al
add cl, cl
add dl, cl
add dl, bl
jmp 0x40d790
lea ecx, [esi + 0x9e94eca]
mov al, 0x3d
jmp 0x40d264
mov edx, dword [ebp - 0x6c]
lea ecx, [esi + 0xe15150c]
and dl, cl
mov al, bl
add dl, dl
sub al, dl
sub cl, 0x54
jmp 0x40d639
mov ecx, dword [ebp - 0x6c]
lea eax, [esi + 0x1240db4e]
and cl, al
add cl, cl
sub bl, cl
sub al, 0x22
jmp 0x40d4ad
mov edx, dword [ebp - 0x6c]
lea ecx, [esi + 0x166ca190]
and dl, cl
mov al, 8
sub al, dl
add al, al
add al, bl
add al, cl
jmp 0x40d715
mov edx, dword [ebp - 0x6c]
lea ecx, [esi + 0x1a9867d2]
and dl, cl
mov al, 0x21
sub al, dl
add al, al
add al, bl
jmp 0x40d73f
lea eax, [ecx + 2]
cmp edi, eax
jae 0x40d44f
mov al, byte [ebp - 0x6c]
lea edx, [esi - 0x215e321]
and al, dl
mov cl, bl
add al, al
sub cl, al
lea eax, [edx + ecx]
sub al, 0x19
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x68], eax
lea eax, [edi + ecx]
cmp eax, 0x2a
je 0x40d662
lea eax, [ecx + 0x200]
cmp edi, eax
jbe 0x40d4b7
mov al, byte [ebp - 0x6c]
lea edx, [esi - 0x7f371edd]
and al, dl
mov cl, bl
add al, al
sub cl, al
add cl, 0xb
add dl, cl
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x68], edx
jmp 0x40d54f
lea eax, [ecx + 1]
cmp edi, eax
jne 0x40d46f
mov ecx, dword [ebp - 0x6c]
lea eax, [esi - 0x5797436a]
and cl, al
add cl, cl
sub bl, cl
sub al, 0x1a
mov ecx, dword [ebp - 0x70]
jmp 0x40d7ad
inc eax
cmp edi, eax
jne 0x40d491
mov edx, dword [ebp - 0x6c]
lea ecx, [esi - 0x5bc309ac]
and dl, cl
mov al, bl
add dl, dl
sub al, dl
sub al, 0x4c
add al, cl
mov dword [ebp - 0x68], eax
jmp 0x40d6a7
lea eax, [ecx + 3]
cmp edi, eax
jne 0x40d414
mov ecx, dword [ebp - 0x6c]
lea eax, [esi - 0x709de8f6]
and cl, al
add cl, cl
sub bl, cl
sub al, 0x46
add al, bl
mov dword [ebp - 0x68], eax
jmp 0x40d761
lea eax, [ecx + 1]
cmp edi, eax
jne 0x40d4d6
mov edx, dword [ebp - 0x6c]
lea ecx, [esi + 0x7c9d1ae1]
and dl, cl
mov al, bl
add dl, dl
sub al, dl
sub al, 0x27
jmp 0x40d73f
inc eax
cmp edi, eax
jne 0x40d4ee
mov ecx, dword [ebp - 0x6c]
lea eax, [esi + 0x74458e5d]
and cl, al
add cl, cl
sub bl, cl
add al, 0x75
jmp 0x40d4ad
lea eax, [ecx + 4]
cmp edi, eax
jne 0x40d50e
mov edx, dword [ebp - 0x6c]
lea ecx, [esi + 0x7019c81b]
and dl, cl
mov al, bl
add dl, dl
sub al, dl
add cl, 0x43
jmp 0x40d639
lea eax, [ecx + 6]
cmp edi, eax
jne 0x40d52d
mov edx, dword [ebp - 0x6c]
lea ecx, [esi + 0x63967555]
and dl, cl
mov al, bl
add dl, dl
sub al, dl
sub al, 0x53
jmp 0x40d678
lea eax, [ecx + 3]
cmp edi, eax
jne 0x40d54c
mov edx, dword [ebp - 0x6c]
lea ecx, [esi + 0x5f6aaf13]
and dl, cl
mov al, bl
add dl, dl
sub al, dl
add al, 0x7b
jmp 0x40d487
mov edx, dword [ebp - 0x68]
cmp edi, 8
jae 0x40d621
lea eax, [ecx + 0x5a]
cmp edi, eax
jbe 0x40d5a0
mov al, byte [ebp - 0x6c]
lea edx, [esi + 0x54fd3f6e]
and al, dl
mov cl, bl
add al, al
sub cl, al
sub cl, 2
add dl, cl
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x68], edx
cmp ecx, 0x42
jb 0x40d2f8
mov edx, dword [ebp - 0x6c]
lea ecx, [esi + 0x2b4780da]
and dl, cl
mov al, 5
sub al, dl
add al, al
add al, bl
add al, cl
add al, al
jmp 0x40d741
lea eax, [ecx + 1]
cmp edi, eax
jne 0x40d5bd
mov ecx, dword [ebp - 0x6c]
lea eax, [esi + 0x50d1792c]
and cl, al
add cl, cl
sub bl, cl
sub al, 0x34
jmp 0x40d467
inc eax
cmp edi, eax
jne 0x40d5cf
lea ecx, [esi + 0x4879eca8]
mov al, 0x34
jmp 0x40d359
lea eax, [ecx + 5]
cmp edi, eax
jne 0x40d5e3
lea ecx, [esi + 0x40226024]
mov al, 2
jmp 0x40d264
lea eax, [ecx + 4]
cmp edi, eax
jne 0x40d600
mov edx, dword [ebp - 0x6c]
lea ecx, [esi + 0x3bf699e2]
and dl, cl
mov al, bl
add dl, dl
sub al, dl
sub cl, 0x2e
jmp 0x40d639
lea eax, [ecx + 6]
cmp edi, eax
jne 0x40d57b
mov ecx, dword [ebp - 0x6c]
lea eax, [esi + 0x37cad3a0]
and cl, al
add cl, cl
sub bl, cl
sub al, 0x60
jmp 0x40d4ad
mov ecx, dword [ebp - 0x6c]
lea eax, [esi + 0x271bba98]
mov dl, byte [ebp - 0x71]
and cl, al
add cl, cl
sub dl, cl
lea ecx, [ebx + edx]
sub cl, 0x28
add cl, al
mov dword [ebp - 0x68], ecx
lea edx, [esi + 0x2505d777]
mov al, dl
and al, bl
add al, al
sub cl, al
sub cl, 0x41
add cl, bl
add cl, dl
mov byte [ebp + esi - 0x160], cl
mov ecx, dword [ebp - 0x70]
jmp 0x40d777
mov edx, dword [ebp - 0x6c]
lea ecx, [esi + 0x22eff456]
and dl, cl
mov al, bl
add dl, dl
sub al, dl
sub al, byte [ebp - 0x71]
sub al, 0x5a
add al, cl
mov dword [ebp - 0x68], eax
lea ecx, [esi + 0x20da1135]
mov al, bl
and al, cl
mov dl, bl
add al, al
sub cl, 0x73
sub dl, al
add dl, cl
mov ecx, dword [ebp - 0x70]
inc ecx
movzx eax, dl
add eax, ecx
mov byte [ebp + esi - 0x160], dl
mov dword [ebp - 0x70], ecx
sub esi, eax
lea edx, [esi + 0x1ec42e14]
mov cl, 0x3a
mov al, dl
and al, bl
sub cl, al
or eax, 0xffffffff
add cl, cl
add cl, dl
add cl, bl
inc edi
mov byte [ebp + esi - 0x160], cl
sub eax, edi
mov ecx, dword [ebp - 0x70]
add esi, eax
jmp 0x40d7b2
mov ecx, dword [ebp - 0x6c]
lea eax, [esi - 0x44d24741]
and cl, al
add cl, cl
sub bl, cl
lea edx, [eax + ebx]
sub dl, 0x39
jmp 0x40d790
mov ecx, dword [ebp - 0x6c]
lea eax, [esi - 0x40a680ff]
and cl, al
add cl, cl
sub bl, cl
mov ecx, dword [ebp - 0x70]
sub al, 7
jmp 0x40d772
mov ecx, dword [ebp - 0x6c]
lea eax, [esi - 0x34232e39]
and cl, al
add cl, cl
sub bl, cl
sub al, 0x71
add al, bl
mov dword [ebp - 0x68], eax
jmp 0x40d75e
mov edx, dword [ebp - 0x6c]
lea ecx, [esi - 0x2ff767f7]
and dl, cl
mov al, bl
add dl, dl
sub al, dl
sub al, 0x3f
jmp 0x40d73f
lea ecx, [esi - 0x279fdb73]
mov al, bl
and dl, cl
add dl, dl
sub al, dl
add al, 0x25
add al, cl
mov dword [ebp - 0x68], eax
lea ecx, [esi + 0x29319db9]
mov al, cl
and al, bl
add al, al
sub bl, al
sub bl, 0xf
add bl, cl
mov byte [ebp + esi - 0x160], bl
inc dword [ebp - 0x70]
dec esi
jmp 0x40d7be
lea eax, [esi - 0x16f0c26b]
and dl, al
add dl, dl
sub bl, dl
sub al, 0x13
add al, bl
mov dword [ebp - 0x68], eax
mov edx, dword [ebp - 0x68]
add edi, ecx
jmp 0x40d793
lea eax, [esi - 0x12c4fc29]
and dl, al
add dl, dl
sub bl, dl
lea edx, [eax + ebx]
add dl, 0x1f
mov dword [ebp - 0x68], edx
or ecx, 0xffffffff
movzx eax, dl
sub ecx, eax
add esi, ecx
jmp 0x40d7be
lea eax, [esi - 0x641a963]
and dl, al
add dl, dl
sub bl, dl
sub al, 0x4b
add al, bl
mov dword [ebp - 0x68], eax
movzx eax, byte [ebp + esi - 0x160]
add eax, ecx
add esi, eax
mov ecx, dword [ebp - 0x70]
inc esi
jmp 0x40cf7d
mov ecx, dword [ebp - 0x6c]
lea eax, [esi - 0x155f0025]
and cl, al
add al, 3
add cl, cl
sub bl, cl
mov ecx, dword [ebp - 0x70]
add al, bl
mov dword [ebp - 0x68], eax
jmp 0x40cf7b
mov ecx, dword [ebp - 0x6c]
lea eax, [esi - 0x113339e3]
and cl, al
add al, 0x35
add cl, cl
sub bl, cl
add al, bl
mov dword [ebp - 0x68], eax
jmp 0x40cf6c
lea eax, [ebp + 0x14b6474]
jmp 0x40d816
lea eax, [ebp + 0x1758153]
jmp 0x40d816
lea eax, [ebp - 0x160]
push eax
lea ecx, [ebp - 0x1a8]
call fcn.004032e2
lea edx, [ebp - 0x1a8]
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x208]
call fcn.0040b85a
mov edx, eax
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1f0]
call fcn.0040b85a
push eax
lea edx, [ebp - 0x4c]
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x34]
call fcn.0040e6ae
pop ecx
lea ecx, [ebp - 0x1f0]
call fcn.00403349
lea ecx, [ebp - 0x208]
call fcn.00403349
lea ecx, [ebp - 0x1a8]
call fcn.00403349
lea eax, [ebp - 0x15]
mov byte [ebp - 0x15], 0
mov dword [ebp - 0x1c], eax
sub esp, 0x18
mov byte [ebp - 4], 0x11
mov eax, esp
mov dword [ebp - 0x7c], esp
lea ecx, [ebp - 0x34]
push ecx
mov ecx, dword [ebp - 0x130]
push eax
call fcn.004031ac
sub esp, 0x18
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0x64]
mov ecx, esp
push eax
call fcn.00404069
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x11
call fcn.00403e55
lea ecx, [ebp - 0x34]
call fcn.00403349
lea ecx, [ebp - 0x4c]
call fcn.00403349
lea ecx, [ebp - 0x64]
call fcn.00403349
call fcn.00458e88
ret