Function at 0x41d037
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2ec
push esi
push 3
lea ecx, [ebp - 0x1f0]
call fcn.00422862
mov dword [ebp - 0x120], 0xcd9d7540
mov dword [ebp - 0xf8], 0xe55a
lea eax, [ebp - 0x1f0]
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.0040d518
pop ecx
pop ecx
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x1f0]
push eax
call fcn.0041c7e6
add esp, 0xc
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.0040da31
pop ecx
pop ecx
lea ecx, [ebp - 0x1f0]
call fcn.00422922
mov eax, dword [0x15bdf30]
and eax, 1
jne 0x41d0e0
mov eax, dword [0x15bdf30]
or eax, 1
mov dword [0x15bdf30], eax
mov ecx, 0x15bdf80
call fcn.0042294a
push 0x4b247f
call fcn.00496f8f
pop ecx
mov dword [ebp - 0x150], 0xb0f7
mov dword [ebp - 0x48], 0xffffffff
mov dword [ebp - 0x16c], 1
push 4
lea ecx, [ebp - 0x214]
call fcn.00422862
mov dword [ebp - 0x54], 0xdcb0c7b2
mov dword [ebp - 0x230], 0xfd90538e
mov dword [ebp - 0x238], 0x6aece011
mov dword [ebp - 0x1cc], 0x22354120
mov dword [ebp - 0x1c8], 0x22354120
mov dword [ebp - 0x1c4], 0x22354120
mov dword [ebp - 0x1c0], 0x22354120
lea ecx, [ebp - 0x49]
call fcn.00401b47
push eax
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x1cc]
push eax
lea ecx, [ebp - 0x29c]
call fcn.00422936
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x184]
call fcn.004228fc
and dword [ebp - 0x1b8], 0
and dword [ebp - 0x1b4], 0
and dword [ebp - 0x1b0], 0
and dword [ebp - 0x1ac], 0
lea ecx, [ebp - 0x61]
call fcn.00401b47
push eax
lea eax, [ebp - 0x1a8]
push eax
lea eax, [ebp - 0x1b8]
push eax
lea ecx, [ebp - 0x2a4]
call fcn.00422936
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x250]
call fcn.004228fc
mov dword [ebp - 0x268], 0xcdb5cf63
mov dword [ebp - 0x244], 0xb2933530
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x14], 0
jmp 0x41d1f9
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x41d20f
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1fc], 0xf07b4bc6
jmp 0x41d1f2
mov dword [ebp - 0x14], 0
jmp 0x41d21f
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x41d23b
push dword [ebp - 0x14]
lea ecx, [ebp - 0x214]
call fcn.00422927
mov dword [eax], 0x422d
jmp 0x41d218
cmp dword [ebp - 0x150], 0
je 0x41d379
mov dword [ebp - 0x20], 0xfffffff7
push 0x4ee5
push 1
push 0
push 0x24b4
push 0x235e
call fcn.0041aeb3
add esp, 0x14
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
jne 0x41d297
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x16c], eax
jne 0x41d28e
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1fc], 0
jne 0x41d297
and dword [ebp - 0x188], 0
jmp 0x41d2a1
mov dword [ebp - 0x188], 1
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x20], 0
jne 0x41d2bc
mov dword [ebp - 0xcc], 1
jmp 0x41d2c3
and dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0xcc], eax
jle 0x41d2da
mov dword [ebp - 0x118], 1
jmp 0x41d2e1
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x118], eax
jle 0x41d2f5
mov dword [ebp - 0x7c], 1
jmp 0x41d2f9
and dword [ebp - 0x7c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1fc]
cmp eax, dword [ebp - 0x7c]
jle 0x41d316
mov dword [ebp - 0x10c], 1
jmp 0x41d31d
and dword [ebp - 0x10c], 0
imul eax, dword [ebp - 0x10c], 0xffff
test eax, eax
jne 0x41d337
mov dword [ebp - 0x164], 1
jmp 0x41d33e
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x254], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jle 0x41d35b
mov dword [ebp - 0x84], 1
jmp 0x41d362
and dword [ebp - 0x84], 0
push 2
lea ecx, [ebp - 0x214]
call fcn.00422927
mov ecx, dword [ebp - 0x84]
mov dword [eax], ecx
jmp 0x41d39c
call fcn.0041cee4
mov byte [ebp - 0x1a], 0
lea eax, [ebp - 0x1a]
push eax
push 1
push 1
push 0x62e0
push 0x5289
call fcn.0041aeb3
add esp, 0x14
push 3
lea ecx, [ebp - 0x184]
call fcn.00422927
mov eax, dword [eax]
inc eax
jne 0x41d3c0
push 0
lea ecx, [ebp - 0x184]
call fcn.00422927
cmp dword [eax], 0
je 0x41d3d9
push 3
lea ecx, [ebp - 0x184]
call fcn.00422927
cmp dword [eax], 0
je 0x41d3d9
push 0xfffffffffffffffd
pop eax
test eax, eax
jne 0x41d3fd
mov eax, 0xffff
test eax, eax
jne 0x41d3fd
push 0
lea ecx, [ebp - 0x250]
call fcn.00422927
cmp dword [eax], 0
jne 0x41d3fd
and dword [ebp - 0xd4], 0
jmp 0x41d407
mov dword [ebp - 0xd4], 1
mov eax, dword [ebp - 0x54]
imul eax, dword [ebp - 0xd4]
sub eax, dword [ebp - 0x154]
jne 0x41d422
mov dword [ebp - 0x50], 1
jmp 0x41d426
and dword [ebp - 0x50], 0
push 1
lea ecx, [ebp - 0x184]
call fcn.00422927
mov ecx, dword [ebp - 0x50]
mov dword [eax], ecx
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x54], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x54]
mov dword [ebp + eax - 0x1fc], ecx
lea ecx, [ebp - 0x250]
call fcn.00422922
lea ecx, [ebp - 0x184]
call fcn.00422922
lea ecx, [ebp - 0x214]
call fcn.00422922
movzx eax, byte [0x15bdebd]
test eax, eax
je 0x41d722
mov ecx, 0x15bdf80
call fcn.004229ed
movzx eax, al
test eax, eax
jne 0x41d722
mov dword [ebp - 0x18], 0xffff
mov dword [ebp - 0x174], 0x7a3d58e5
mov eax, 0xfe7d8a87
test eax, eax
je 0x41d4bf
cmp dword [ebp - 0x18], 0
je 0x41d4bf
mov dword [ebp - 0xa4], 1
jmp 0x41d4c6
and dword [ebp - 0xa4], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
jle 0x41d4da
mov dword [ebp - 0x8c], 1
jmp 0x41d4e1
and dword [ebp - 0x8c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x8c], eax
jle 0x41d4f8
mov dword [ebp - 0xfc], 1
jmp 0x41d4ff
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xfc], eax
jg 0x41d516
mov dword [ebp - 0x94], 1
jmp 0x41d51d
and dword [ebp - 0x94], 0
cmp dword [ebp - 0x94], 0xfffffff8
jne 0x41d532
mov dword [ebp - 0xdc], 1
jmp 0x41d539
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xdc], eax
jge 0x41d550
mov dword [ebp - 0x9c], 1
jmp 0x41d557
and dword [ebp - 0x9c], 0
imul eax, dword [ebp - 0x9c], 0xffff
cmp eax, dword [ebp - 0x18]
jge 0x41d572
mov dword [ebp - 0x11c], 1
jmp 0x41d579
and dword [ebp - 0x11c], 0
cmp dword [ebp - 0x11c], 0x3b9da4d0
jle 0x41d591
mov dword [ebp - 0xe4], 1
jmp 0x41d598
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0xe4]
jne 0x41d5e2
mov dword [ebp - 0x160], 0xffffffff
mov dword [ebp - 0x140], 0xfffffff6
mov byte [ebp - 0x1b], 0
lea eax, [ebp - 0x1b]
push eax
call fcn.0041cefa
pop ecx
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x140]
push eax
call fcn.0040da31
pop ecx
pop ecx
jmp 0x41d6cd
push 1
lea ecx, [ebp - 0x1d8]
call fcn.00422862
mov dword [ebp - 0x1a4], 0x70aacc70
mov dword [ebp - 0x1a0], 0x70aacc70
mov dword [ebp - 0x19c], 0x70aacc70
mov dword [ebp - 0x198], 0x70aacc70
lea ecx, [ebp - 0x62]
call fcn.00401b47
push eax
lea eax, [ebp - 0x194]
push eax
lea eax, [ebp - 0x1a4]
push eax
lea ecx, [ebp - 0x2dc]
call fcn.00422936
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x260]
call fcn.004228fc
push 1
lea eax, [ebp - 0x21c]
push eax
push 0x4bfe
push 0x29b4
push 0x7058
push 0x790e
push 0x7ef8
push 1
lea eax, [ebp - 0x1d8]
push eax
call fcn.0041b07e
add esp, 0x24
push 0x1727
push 0x18c5
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
lea eax, [ebp - 0x260]
push eax
push 1
push 0x277a
push 1
lea eax, [ebp - 0x1d8]
push eax
push 0x4b43
call fcn.0041c34c
add esp, 0x2c
lea ecx, [ebp - 0x260]
call fcn.00422922
lea ecx, [ebp - 0x1d8]
call fcn.00422922
push dword [ebp + 8]
lea eax, [ebp - 0xac]
push eax
mov ecx, 0x15bdf80
call fcn.004229f6
call fcn.0041ca3d
lea eax, [ebp - 0x224]
push eax
mov ecx, 0x15bdf80
call fcn.004229df
push eax
lea ecx, [ebp - 0xac]
call fcn.00422a11
movzx eax, al
test eax, eax
je 0x41d722
call fcn.0041cf28
lea ecx, [ebp - 0xac]
call fcn.00422a0b
mov eax, dword [eax + 4]
jmp 0x41e0bc
mov dword [ebp - 0x148], 0x928c176b
lea eax, [ebp - 0x148]
push eax
call fcn.0041cf66
pop ecx
mov eax, dword [ebp + 8]
push dword [eax]
lea eax, [ebp - 0x2d4]
push eax
call fcn.004718d7
pop ecx
pop ecx
mov dword [ebp - 0x28], 0x9dada439
mov dword [ebp - 0x34], 0
jmp 0x41d763
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x41d779
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x138], 1
jmp 0x41d75c
call fcn.0041cd84
mov dword [ebp - 0x28], 0
jmp 0x41d78e
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jg 0x41d899
xor eax, eax
je 0x41d86d
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0x138], 0
je 0x41d854
mov dword [ebp - 0x168], 0xfffffff7
mov dword [ebp - 0x40], 0
jmp 0x41d7cb
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x41d7de
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x6c], 0
jmp 0x41d7c4
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x6c], 2
jmp 0x41d803
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x6c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6c], 0
jl 0x41d845
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x6c]
mov eax, dword [ebp + eax*4 - 0x138]
mov dword [ebp + ecx*4 - 0x138], eax
mov byte [ebp - 0x19], 0
movzx eax, byte [ebp - 0x19]
test eax, eax
je 0x41d843
call fcn.0041cdc0
jmp 0x41d7ee
lea eax, [ebp - 0x168]
push eax
call fcn.0041cdd4
pop ecx
jmp 0x41d86b
mov dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
jmp 0x41d87f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x138], 0
je 0x41d87f
jmp 0x41d899
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x138], 0
je 0x41d894
jmp 0x41d787
jmp 0x41d787
lea eax, [ebp - 0x2d4]
push eax
call fcn.0040fbbc
pop ecx
mov dword [ebp - 0x110], eax
movzx eax, byte [0x15bdebd]
test eax, eax
je 0x41d8cc
mov ecx, 0x15bdf80
call fcn.004229ed
movzx eax, al
test eax, eax
jne 0x41dd8d
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x22c], 0xffffffff
mov dword [ebp - 0x124], 4
push 2
lea ecx, [ebp - 0x208]
call fcn.00422862
mov dword [ebp - 0xc], 0
jmp 0x41d904
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 2
jge 0x41d91a
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x2ac], 0xf0ea
jmp 0x41d8fd
push 1
push 0x7e2e
push 1
lea eax, [ebp - 0xc]
push eax
push 0x756f
push 1
push 0x5682
push 0x4cae
lea eax, [ebp - 0x208]
push eax
push 0x67df
push 0x2139
push 0x7311
call fcn.0041bc2d
add esp, 0x30
mov dword [ebp - 0xc], 0
jmp 0x41d966
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 4
jge 0x41d97c
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x288], 0xffffffff
jmp 0x41d95f
mov dword [ebp - 0x38], 0
jmp 0x41d98c
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jg 0x41da0a
mov dword [ebp - 0x234], 0x5121
mov dword [ebp - 0x240], 0xffffffff
mov dword [ebp - 0x274], 0
mov dword [ebp - 0x218], 0xfffffff6
mov dword [ebp - 0x23c], 0x5b054dbb
mov dword [ebp - 0x3c], 0
jmp 0x41d9d4
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jge 0x41d9ea
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x2ec], 9
jmp 0x41d9cd
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x288]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x288], eax
jmp 0x41d985
lea eax, [ebp - 0x208]
push eax
lea eax, [ebp - 0x124]
push eax
call fcn.0041ce1e
pop ecx
pop ecx
lea ecx, [ebp - 0x208]
call fcn.00422922
push dword [ebp + 8]
push 1
push 0x15bdf80
lea eax, [ebp - 0x110]
push eax
push 1
call fcn.0041bfd3
add esp, 0x14
mov dword [ebp - 8], 0
mov dword [ebp - 0x170], 0x4f84b811
mov dword [ebp - 0x158], 0xffffffff
push 3
lea ecx, [ebp - 0x60]
call fcn.00422862
mov dword [ebp - 0x13c], 0
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x60]
push eax
push 0x7eaa
push 1
push 1
call fcn.0041c116
add esp, 0x14
mov dword [ebp - 0x30], 0
jmp 0x41da9d
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x41dab3
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x190], 0x7617c0ec
jmp 0x41da96
mov dword [ebp - 8], 0xffffffe2
jmp 0x41dac3
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0xffffffe3
je 0x41dae2
mov dword [ebp - 0x178], 0xfff6
lea eax, [ebp - 0x178]
push eax
call fcn.0040d187
pop ecx
jmp 0x41dabc
mov dword [ebp - 8], 0
jmp 0x41daf2
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 2
jg 0x41dd65
mov dword [ebp - 0x2c], 0x86f25db2
mov dword [ebp - 0x24], 0x169ff4ca
push dword [ebp - 8]
lea ecx, [ebp - 0x60]
call fcn.00422927
mov eax, dword [ebp - 8]
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x270], eax
push dword [ebp - 8]
lea ecx, [ebp - 0x60]
call fcn.00422927
mov eax, dword [eax]
mov dword [ebp - 0x170], eax
mov eax, 0xd8af
cmp eax, 5
jbe 0x41db53
mov dword [ebp - 0xb4], 1
jmp 0x41db5a
and dword [ebp - 0xb4], 0
push dword [ebp - 8]
lea ecx, [ebp - 0x60]
call fcn.00422927
mov eax, dword [eax]
add eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0x2c]
jl 0x41db7e
mov dword [ebp - 0xec], 1
jmp 0x41db85
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0xec], eax
jle 0x41dba2
cmp dword [ebp - 0x2c], 0
je 0x41dba2
mov dword [ebp - 0xbc], 1
jmp 0x41dba9
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0xbc], eax
jl 0x41dbc0
mov dword [ebp - 0x114], 1
jmp 0x41dbc7
and dword [ebp - 0x114], 0
push 2
lea ecx, [ebp - 0x60]
call fcn.00422927
mov ecx, dword [ebp - 0x114]
cmp ecx, dword [eax]
jl 0x41dbe7
mov dword [ebp - 0xc4], 1
jmp 0x41dbee
and dword [ebp - 0xc4], 0
push 2
lea ecx, [ebp - 0x60]
call fcn.00422927
mov ecx, dword [ebp - 0xc4]
add ecx, dword [eax]
add ecx, dword [ebp - 0x24]
cmp ecx, dword [ebp - 0x24]
jg 0x41dc14
mov dword [ebp - 0xf4], 1
jmp 0x41dc1b
and dword [ebp - 0xf4], 0
cmp dword [ebp - 0xf4], 0
jne 0x41dc28
cmp dword [ebp - 0x24], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x190], 0x94951162
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x264], eax
push 1
lea ecx, [ebp - 0x60]
call fcn.00422927
cmp dword [eax], 0xe30f
jle 0x41dc66
mov dword [ebp - 0x74], 1
jmp 0x41dc6a
and dword [ebp - 0x74], 0
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x74]
jne 0x41dc7e
mov dword [ebp - 0x12c], 1
jmp 0x41dc85
and dword [ebp - 0x12c], 0
push dword [ebp - 8]
lea ecx, [ebp - 0x60]
call fcn.00422927
cmp dword [eax], 0
jne 0x41dca1
cmp dword [ebp - 0x24], 0
jne 0x41dca1
and dword [ebp - 0x78], 0
jmp 0x41dca8
mov dword [ebp - 0x78], 1
push 0
lea ecx, [ebp - 0x60]
call fcn.00422927
mov esi, dword [ebp - 0x78]
sub esi, dword [eax]
push 0
lea ecx, [ebp - 0x60]
call fcn.00422927
cmp esi, dword [eax]
jge 0x41dcce
mov dword [ebp - 0x80], 1
jmp 0x41dcd2
and dword [ebp - 0x80], 0
mov eax, dword [ebp - 0x13c]
cmp dword [ebp - 0x80], eax
jg 0x41dce9
mov dword [ebp - 0x88], 1
jmp 0x41dcf0
and dword [ebp - 0x88], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x190]
cmp dword [ebp - 0x88], eax
jle 0x41dd11
mov dword [ebp - 0x90], 1
jmp 0x41dd18
and dword [ebp - 0x90], 0
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x90]
jne 0x41dd2f
mov dword [ebp - 0x98], 1
jmp 0x41dd36
and dword [ebp - 0x98], 0
cmp dword [ebp - 0x98], 0xffffffff
jae 0x41dd4b
mov dword [ebp - 0xa0], 1
jmp 0x41dd52
and dword [ebp - 0xa0], 0
mov eax, dword [ebp - 0xa0]
add eax, 0x83eb
mov dword [ebp - 0x24], eax
jmp 0x41daeb
lea ecx, [ebp - 0x60]
call fcn.00422922
push 1
push 0x26bd
push 0x37a7
push 1
push 0x75fd
push 0x15bdebd
call fcn.0041c1de
add esp, 0x18
mov dword [ebp - 0xa8], 0
push 3
lea ecx, [ebp - 0x1e4]
call fcn.00422862
mov dword [ebp - 4], 0
jmp 0x41ddb4
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 1
jge 0x41ddc7
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x10], 0
jmp 0x41ddad
mov dword [ebp - 4], 0
jmp 0x41ddd7
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 1
jge 0x41dded
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x128], 1
jmp 0x41ddd0
mov dword [ebp - 4], 0
jmp 0x41ddfd
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 4
jge 0x41de13
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x2bc], 0
jmp 0x41ddf6
push 0x73fc
lea eax, [ebp - 4]
push eax
push 0x566b
push 0x7101
push 1
push 0x16c2
push 1
push 0x62a2
push 1
push 0x1622
lea eax, [ebp - 0x1e4]
push eax
call fcn.0041c34c
add esp, 0x2c
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x10], 0xffffffe3
jmp 0x41de6f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x10], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10], 0x11
je 0x41e08f
mov dword [ebp - 0x144], 0x5931
mov dword [ebp - 0xd0], 0xfffffffb
mov dword [ebp - 0x14c], 0xe6a0
mov dword [ebp - 0x44], 0
jmp 0x41deae
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x41dec4
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x294], 4
jmp 0x41dea7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
mov dword [ebp - 0xa8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
cmp dword [ebp - 0xa8], eax
jle 0x41def2
mov dword [ebp - 0x100], 1
jmp 0x41def9
and dword [ebp - 0x100], 0
xor eax, eax
inc eax
je 0x41df1a
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x2bc], 0
je 0x41df1a
mov dword [ebp - 0xb0], 1
jmp 0x41df21
and dword [ebp - 0xb0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
cmp dword [ebp - 0xb0], eax
jle 0x41df3f
mov dword [ebp - 0xb8], 1
jmp 0x41df46
and dword [ebp - 0xb8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
cmp dword [ebp - 0xb8], eax
jl 0x41df64
mov dword [ebp - 0xc0], 1
jmp 0x41df6b
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0x144]
cmp eax, dword [ebp - 0xc0]
jne 0x41df85
mov dword [ebp - 0xc8], 1
jmp 0x41df8c
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xd0]
imul eax, dword [ebp - 0x14c]
test eax, eax
je 0x41dfc7
push 2
lea ecx, [ebp - 0x1e4]
call fcn.00422927
cmp dword [eax], 0
je 0x41dfc7
mov dword [ebp - 0xd8], 1
jmp 0x41dfce
and dword [ebp - 0xd8], 0
cmp dword [ebp - 0xd8], 1
je 0x41dfe3
mov dword [ebp - 0xe0], 1
jmp 0x41dfea
and dword [ebp - 0xe0], 0
cmp dword [ebp - 0xe0], 0x76ac
je 0x41e002
mov dword [ebp - 0xe8], 1
jmp 0x41e009
and dword [ebp - 0xe8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x128]
cmp dword [ebp - 0xe8], eax
jge 0x41e02a
mov dword [ebp - 0xf0], 1
jmp 0x41e031
and dword [ebp - 0xf0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
cmp dword [ebp - 0xf0], eax
jl 0x41e04c
mov dword [ebp - 0x70], 1
jmp 0x41e050
and dword [ebp - 0x70], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x70]
sub ecx, dword [ebp + eax - 0x10]
cmp dword [ebp - 0x100], ecx
jle 0x41e071
mov dword [ebp - 0x108], 1
jmp 0x41e078
and dword [ebp - 0x108], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x108]
mov dword [ebp + eax - 0x294], ecx
jmp 0x41de5a
call fcn.0041d021
lea ecx, [ebp - 0x1e4]
call fcn.00422922
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x15c], eax
lea ecx, [ebp - 0x2d4]
call fcn.00422791
mov eax, dword [ebp - 0x15c]
pop esi
mov esp, ebp
pop ebp
ret