Function at 0x4139bb
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x250
push esi
mov dword [ebp - 0x1c], 0xb871c7bf
mov dword [ebp - 0x198], 1
mov dword [ebp - 0x134], 0x87b34174
mov dword [ebp - 0x18c], 9
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.00414b40
pop ecx
pop ecx
mov dword [ebp - 0x1c], 0xfffffff3
jmp 0x413a07
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 7
jle 0x413bca
mov dword [ebp - 0x20], 0xfff6
push 3
lea ecx, [ebp - 0x1c0]
call fcn.0042f38f
lea eax, [ebp - 0x1f8]
push eax
push 0x15c0
push 0x5b22
push 0
lea eax, [ebp - 0x1c0]
push eax
call fcn.00424a6d
add esp, 0x14
cmp dword [ebp - 0x20], 0
je 0x413a5d
lea ecx, [ebp - 0x1c0]
call fcn.0042f461
jmp 0x413bca
mov dword [ebp - 0x20], 0xfffffff8
jmp 0x413a6d
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x1c
jne 0x413bba
mov dword [ebp - 0x58], 0x62daab72
mov dword [ebp - 0x74], 0x7e2f9d44
mov dword [ebp - 0x12c], 0xfffffff6
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x1c], eax
jl 0x413aa3
mov dword [ebp - 0xe4], 1
jmp 0x413aaa
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x13c]
cmp eax, dword [ebp - 0x194]
jne 0x413add
mov dword [ebp - 0x80], 1
jmp 0x413ae1
and dword [ebp - 0x80], 0
cmp dword [ebp - 0x80], 0x39ecf4a4
je 0x413af6
mov dword [ebp - 0x168], 1
jmp 0x413afd
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x1c], 0
je 0x413b25
mov dword [ebp - 0x11c], 0x3531
mov eax, dword [ebp - 0x11c]
dec eax
mov dword [ebp - 0x11c], eax
jmp 0x413b78
push 2
lea ecx, [ebp - 0x1dc]
call fcn.0042f38f
lea eax, [ebp - 0x218]
push eax
push 0
lea eax, [ebp - 0x1dc]
push eax
push 1
push 1
push 0x6de0
call fcn.0041b2d9
add esp, 0x18
push 0x32e1
lea eax, [ebp - 0x74]
push eax
push 0
lea eax, [ebp - 0x1dc]
push eax
call fcn.0041881c
add esp, 0x10
lea ecx, [ebp - 0x1dc]
call fcn.0042f461
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0x134]
push eax
push 0
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0041f8ea
add esp, 0x28
jmp 0x413a66
lea ecx, [ebp - 0x1c0]
call fcn.0042f461
jmp 0x413a00
jmp 0x413be6
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
add eax, 4
mov ecx, dword [ebp + 0x10]
mov dword [ecx], eax
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
add eax, 4
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
cmp dword [eax], 0
je 0x414b3b
mov dword [ebp - 0x44], 0
mov dword [ebp - 0xa0], 1
mov dword [ebp - 0x40], 1
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x190], 1
mov dword [ebp - 4], 0
jmp 0x413c2d
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 3
jge 0x413c40
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x6c], 0x3d783989
jmp 0x413c26
mov dword [ebp - 4], 0
jmp 0x413c50
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
jge 0x413c66
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x1c8], 0xdd61fb9a
jmp 0x413c49
mov dword [ebp - 4], 0
jmp 0x413c76
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
jge 0x413c8c
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x1d0], 0x4b4b26d8
jmp 0x413c6f
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x6c]
cmp dword [ebp + eax - 0x6c], ecx
je 0x413cac
mov dword [ebp - 0xd0], 1
jmp 0x413cb3
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x44], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6c]
cmp dword [ebp - 0x44], eax
je 0x413cd6
mov dword [ebp - 0x88], 1
jmp 0x413cdd
and dword [ebp - 0x88], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6c]
cmp eax, dword [ebp - 0x88]
jne 0x413cfa
mov dword [ebp - 0x120], 1
jmp 0x413d01
and dword [ebp - 0x120], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6c]
mov dword [ebp - 0x22c], eax
push 5
pop eax
test eax, eax
jne 0x413d1b
cmp dword [ebp - 0x44], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6c]
mov dword [ebp - 0x1fc], eax
xor eax, eax
jne 0x413d3b
cmp dword [ebp - 0x44], 0
jne 0x413d3b
and dword [ebp - 0x60], 0
jmp 0x413d42
mov dword [ebp - 0x60], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x60]
mov dword [ebp + eax - 0x1c8], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x60]
mov dword [ebp + eax - 0x1d0], ecx
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6c]
cmp eax, dword [ebp - 0x60]
jne 0x413d7c
mov dword [ebp - 0xf8], 1
jmp 0x413d83
and dword [ebp - 0xf8], 0
cmp dword [ebp - 0xf8], 0x9ec6ea3d
jne 0x413da5
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x6c], 0
jne 0x413da5
and dword [ebp - 0x180], 0
jmp 0x413daf
mov dword [ebp - 0x180], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6c]
mov dword [ebp - 0x204], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c8], 0
je 0x413de6
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x6c], 0
je 0x413de6
mov dword [ebp - 0x90], 1
jmp 0x413ded
and dword [ebp - 0x90], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
cmp dword [ebp - 0x90], eax
jle 0x413e0e
cmp dword [ebp - 0x44], 0
jne 0x413e0e
and dword [ebp - 0xd8], 0
jmp 0x413e18
mov dword [ebp - 0xd8], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6c]
cmp eax, dword [ebp - 0xd8]
jne 0x413e35
mov dword [ebp - 0x98], 1
jmp 0x413e3c
and dword [ebp - 0x98], 0
imul eax, dword [ebp - 0x98], 0xa4a2
sub eax, dword [ebp - 0xa0]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xc026
jle 0x413e64
mov dword [ebp - 0x118], 1
jmp 0x413e6b
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x38], eax
je 0x413e8b
mov dword [ebp - 0xe0], 1
jmp 0x413e92
and dword [ebp - 0xe0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe0]
sub ecx, dword [ebp + eax - 0x6c]
cmp ecx, 0x204
jle 0x413eb6
mov dword [ebp - 0xa8], 1
jmp 0x413ebd
and dword [ebp - 0xa8], 0
cmp dword [ebp - 0xa8], 0xd9ca
jge 0x413ed5
mov dword [ebp - 0x100], 1
jmp 0x413edc
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x100]
inc eax
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x6c]
jle 0x413f86
mov dword [ebp - 0x38], 0
jmp 0x413f02
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xfffffff6
jg 0x413f84
mov dword [ebp - 0x40], 0xfffffff3
jmp 0x413f18
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xffffffe4
je 0x413f33
push 0
push 0x48a3
push 1
push 1
call fcn.004294c6
add esp, 0x10
jmp 0x413f11
push 1
push 0x2399
push 1
push 0x58f0
push 0x121f
push 0x6214
push 0x6386
push 0x5f17
push 1
push 0x4db0
push 0x5e7b
push 0x3303
push 1
push 0x2743
push 0x2877
push 0x5843
call fcn.0041258d
add esp, 0x40
jmp 0x413efb
jmp 0x413fc9
mov dword [ebp - 0x144], 0xee8b7203
push 0x26dc
push 1
push 1
push 0x6d47
push 1
push 1
push 0x45cd
push 0x4b23
lea eax, [ebp - 0x144]
push eax
call fcn.0041053e
add esp, 0x24
push 0
push 0x50d7
call fcn.0042946b
pop ecx
pop ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x190]
mov dword [ebp + eax - 0x1d0], ecx
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
mov eax, dword [eax]
and eax, 0x80000000
je 0x4141c1
mov dword [ebp - 0x14], 0x1c29
mov dword [ebp - 0x188], 0xc0351a93
mov dword [ebp - 0x20c], 1
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x14], 0
jne 0x4140c5
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jl 0x41403f
mov eax, 0x74c3
test eax, eax
jne 0x41403f
and dword [ebp - 0xb0], 0
jmp 0x414049
mov dword [ebp - 0xb0], 1
cmp dword [ebp - 0xb0], 0
jbe 0x41405e
mov dword [ebp - 0xe8], 1
jmp 0x414065
and dword [ebp - 0xe8], 0
cmp dword [ebp - 0xe8], 3
jne 0x41407a
mov dword [ebp - 0xb8], 1
jmp 0x414081
and dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xb8], eax
jl 0x414098
mov dword [ebp - 0x110], 1
jmp 0x41409f
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x110], eax
jle 0x4140b6
mov dword [ebp - 0x14c], 1
jmp 0x4140bd
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x14]
je 0x414115
mov dword [ebp - 0x154], 0xd3860a42
push 0x1303
lea eax, [ebp - 0x188]
push eax
push 0x5ba7
push 1
push 1
push 0x5f05
push 0x25eb
push 1
push 0x55f0
lea eax, [ebp - 0x154]
push eax
push 0x64dd
push 0x681a
push 0x312e
call fcn.00410a06
add esp, 0x34
jmp 0x414190
push 2
lea ecx, [ebp - 0x1e8]
call fcn.0042f38f
push 0x57eb
lea eax, [ebp - 0x1e8]
push eax
push 1
push 0
lea eax, [ebp - 0x48]
push eax
push 0x5bac
call fcn.00425245
add esp, 0x18
mov dword [ebp - 0x48], 0
jmp 0x414153
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x414169
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x250], 0x8651
jmp 0x41414c
push 0
lea ecx, [ebp - 0x1e8]
call fcn.0042f47d
push 4
pop ecx
shl ecx, 0
mov eax, dword [eax]
mov dword [ebp + ecx - 0x250], eax
lea ecx, [ebp - 0x1e8]
call fcn.0042f461
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
mov eax, dword [eax]
and eax, 0xffff
push eax
mov eax, dword [ebp + 8]
push dword [eax]
push 0x62d5
push 0x70ef
call fcn.00407216
pop ecx
pop ecx
call eax
mov ecx, dword [ebp + 0x14]
mov ecx, dword [ecx]
mov dword [ecx], eax
jmp 0x4143d3
mov dword [ebp - 0x4c], 0xc03342eb
mov dword [ebp - 0x4c], 0
jmp 0x4141d8
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xfffffff2
je 0x4142a7
push 1
lea ecx, [ebp - 0x1a4]
call fcn.0042f38f
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x1a4]
push eax
push 1
push 0
call fcn.0041c17e
add esp, 0x10
push 0x4c3f
push 1
push 1
push 0
push 0x5323
call fcn.004190b0
add esp, 0x14
push 0
lea ecx, [ebp - 0x1a4]
call fcn.0042f47d
and dword [eax], 0
jmp 0x414257
push 0
lea ecx, [ebp - 0x1a4]
call fcn.0042f47d
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xc0]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x1a4]
call fcn.0042f47d
cmp dword [eax], 3
jne 0x414297
push 0x3c17
push 0x5300
push 1
push 0x66e6
push 0x408f
push 0x5c94
push 1
push 0x3825
push 0
call fcn.00425591
add esp, 0x24
jmp 0x414233
lea ecx, [ebp - 0x1a4]
call fcn.0042f461
jmp 0x4141d1
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
mov ecx, dword [ebp + 0xc]
add ecx, dword [eax]
mov dword [ebp - 0x17c], ecx
mov dword [ebp - 0x70], 0xf7e2799a
mov dword [ebp - 0x16c], 0x55b7cefa
mov dword [ebp - 0x70], 0xffffffe9
jmp 0x4142d8
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xfffffff2
je 0x414397
mov dword [ebp - 0x15c], 0xfffffff7
push 1
push 0x23e7
push 1
push 0x75ca
push 0x30b6
push 1
push 0
push 0x1cf6
push 0x587d
push 0x4ea1
lea eax, [ebp - 0x16c]
push eax
push 0x5b6b
lea eax, [ebp - 0x15c]
push eax
call fcn.0042f07b
add esp, 0x34
push 1
push 1
push 0x69aa
push 1
push 0x6bea
push 0x3e1c
push 0x23eb
push 0x2920
push 0x2a26
push 0x4763
push 0x3068
push 0x2eea
push 0x378f
push 0x1fc6
push 0x6f7a
push 0x2698
push 0x134d
push 0x36a9
push 0x70c6
push 0x53f7
push 1
call fcn.00413311
add esp, 0x54
jmp 0x4142d1
mov byte [ebp - 0x2d], 0
push 1
push 0
lea eax, [ebp - 0x2d]
push eax
call fcn.0041b8ea
add esp, 0xc
mov eax, dword [ebp - 0x17c]
inc eax
inc eax
push eax
mov eax, dword [ebp + 8]
push dword [eax]
push 0x62d5
push 0x70ef
call fcn.00407216
pop ecx
pop ecx
call eax
mov ecx, dword [ebp + 0x14]
mov ecx, dword [ecx]
mov dword [ecx], eax
mov dword [ebp - 0x24], 0xfffffffd
mov dword [ebp - 0x18], 0xfffffffb
mov dword [ebp - 0x124], 0x8ca0e2c2
mov dword [ebp - 0x50], 0
jmp 0x4143fb
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x414411
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x1f4], 0xfffffffc
jmp 0x4143f4
mov dword [ebp - 0x24], 0
jmp 0x414421
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xb
je 0x414560
mov dword [ebp - 0x54], 0x7161ab6e
mov dword [ebp - 0x2c], 0x64f943af
mov dword [ebp - 0x128], 5
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x54]
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x24]
add eax, 0x5a60
imul eax, dword [ebp - 0x2c]
test eax, eax
jne 0x414471
cmp dword [ebp - 0x18], 0
jne 0x414471
cmp dword [ebp - 0x18], 0
je 0x414483
cmp dword [ebp - 0x2c], 0
je 0x414483
mov dword [ebp - 0xf0], 1
jmp 0x41448a
and dword [ebp - 0xf0], 0
cmp dword [ebp - 0xf0], 0x933b
jg 0x4144a2
mov dword [ebp - 0x164], 1
jmp 0x4144a9
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xc8], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xc8]
mov dword [ebp + eax - 0x1f4], ecx
mov eax, dword [ebp - 0x54]
imul eax, dword [ebp - 0xc8]
cmp eax, dword [ebp - 0x2c]
je 0x4144e8
mov dword [ebp - 0x184], 1
jmp 0x4144ef
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x2c], 0
jne 0x41450e
push 0xfffffffffffffff9
pop eax
test eax, eax
jne 0x41450e
and dword [ebp - 0x108], 0
jmp 0x414518
mov dword [ebp - 0x108], 1
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x108]
lea eax, [ecx + eax + 0x76]
cmp dword [ebp - 0x54], eax
jle 0x414533
mov dword [ebp - 0x7c], 1
jmp 0x414537
and dword [ebp - 0x7c], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0x7c]
imul eax, eax, 0xa38
mov dword [ebp - 0x124], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1f4]
mov dword [ebp - 0x128], eax
jmp 0x41441a
mov dword [ebp - 0x18], 0
jmp 0x414570
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jg 0x414587
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x1f4], 0
je 0x414585
jmp 0x414587
jmp 0x414569
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
cmp dword [eax], 0
jne 0x414b36
push 0x4fb7
push 1
push 0x28a6
push 1
push 0
push 0xe0
lea eax, [ebp + 0x18]
push eax
call fcn.00416a14
add esp, 0x1c
mov dword [ebp - 0x34], 0x36cc
mov dword [ebp - 8], 0xfe4b2830
mov dword [ebp - 0xc], 1
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x5c], 0
jmp 0x4145e2
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 4
jge 0x4145f8
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x240], 0xd7f9b64a
jmp 0x4145db
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 8]
push eax
push 0
call fcn.00416c87
add esp, 0x14
cmp dword [ebp - 8], 0
jne 0x41462e
push 7
pop eax
sub eax, dword [ebp - 0xc]
cmp eax, 0xde46
jne 0x41462e
and dword [ebp - 0x84], 0
jmp 0x414638
mov dword [ebp - 0x84], 1
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x84]
jle 0x41464f
mov dword [ebp - 0x8c], 1
jmp 0x414656
and dword [ebp - 0x8c], 0
cmp dword [ebp - 0x8c], 0xa1a8f1ed
jbe 0x41466e
mov dword [ebp - 0x94], 1
jmp 0x414675
and dword [ebp - 0x94], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x94], eax
jle 0x41468c
mov dword [ebp - 0x130], 1
jmp 0x414693
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x208], eax
mov eax, dword [ebp - 8]
add eax, 6
cmp eax, dword [ebp - 0x10]
je 0x4146b3
mov dword [ebp - 0x9c], 1
jmp 0x4146ba
and dword [ebp - 0x9c], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x9c], eax
jne 0x4146d7
cmp dword [ebp - 0xc], 0
je 0x4146d7
mov dword [ebp - 0xa4], 1
jmp 0x4146de
and dword [ebp - 0xa4], 0
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0xa4]
je 0x4146fe
mov eax, 0xba00
test eax, eax
je 0x4146fe
mov dword [ebp - 0xac], 1
jmp 0x414705
and dword [ebp - 0xac], 0
mov eax, dword [ebp - 0xac]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x34]
jne 0x41472b
mov dword [ebp - 0xb4], 1
jmp 0x414732
and dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0xb4], eax
jne 0x414749
mov dword [ebp - 0xbc], 1
jmp 0x414750
and dword [ebp - 0xbc], 0
cmp dword [ebp - 0xbc], 0x4bb323fa
jle 0x414a06
mov dword [ebp - 0x3c], 0x1bab0c3e
mov dword [ebp - 0x1b4], 0x295d0c5f
mov dword [ebp - 0x1b0], 0x295d0c5f
mov dword [ebp - 0x1ac], 0x295d0c5f
mov dword [ebp - 0x1a8], 0x295d0c5f
push 4
lea ecx, [ebp - 0x178]
call fcn.0042f38f
mov dword [ebp - 0x148], 6
mov dword [ebp - 0x150], 8
mov dword [ebp - 0x158], 0x9a337b27
push 0
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x178]
push eax
call fcn.00428aaa
add esp, 0xc
mov byte [ebp - 0x25], 0
push 1
push 1
push 0
push 0x5e3b
lea eax, [ebp - 0x25]
push eax
call fcn.004217d7
add esp, 0x14
cmp dword [ebp - 0x34], 0
je 0x4148bc
cmp dword [ebp - 0xc], 1
jne 0x41480b
or eax, 0xffffffff
jne 0x41480b
and dword [ebp - 0x138], 0
jmp 0x414815
mov dword [ebp - 0x138], 1
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], eax
je 0x414829
mov dword [ebp - 0xc4], 1
jmp 0x414830
and dword [ebp - 0xc4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc4]
mov dword [ebp + eax - 0x1b4], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b4]
mov dword [ebp - 0x210], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c]
cmp dword [ebp + eax - 0x1b4], ecx
jg 0x414874
mov dword [ebp - 0xcc], 1
jmp 0x41487b
and dword [ebp - 0xcc], 0
push 0
lea ecx, [ebp - 0x178]
call fcn.0042f47d
mov ecx, dword [ebp - 0xcc]
cmp ecx, dword [eax]
jg 0x41489e
mov dword [ebp - 0xd4], 1
jmp 0x4148a5
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0xd4], eax
jge 0x4148bc
mov dword [ebp - 0x140], 1
jmp 0x4148c3
and dword [ebp - 0x140], 0
push 0
lea ecx, [ebp - 0x178]
call fcn.0042f47d
mov esi, dword [ebp - 0x34]
push 0
lea ecx, [ebp - 0x178]
call fcn.0042f47d
cmp esi, dword [eax]
jge 0x4148f0
mov dword [ebp - 0xdc], 1
jmp 0x4148f7
and dword [ebp - 0xdc], 0
cmp dword [ebp - 0xdc], 0xfffffff9
jb 0x414909
mov dword [ebp - 0x78], 1
jmp 0x41490d
and dword [ebp - 0x78], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x240]
imul eax, dword [ebp - 0x78]
cmp eax, dword [ebp - 0x3c]
jge 0x414931
or eax, 0xffffffff
jne 0x414931
and dword [ebp - 0xec], 0
jmp 0x41493b
mov dword [ebp - 0xec], 1
cmp dword [ebp - 0xec], 0xf7c93e25
jbe 0x414953
mov dword [ebp - 0xf4], 1
jmp 0x41495a
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x148]
imul eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x10], eax
je 0x41497e
mov dword [ebp - 0xfc], 1
jmp 0x414985
and dword [ebp - 0xfc], 0
cmp dword [ebp - 0xfc], 0x9d5a
jne 0x41499d
mov dword [ebp - 0x104], 1
jmp 0x4149a4
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x104], eax
je 0x4149bb
mov dword [ebp - 0x10c], 1
jmp 0x4149c2
and dword [ebp - 0x10c], 0
cmp dword [ebp - 0x10c], 0xfe74c19f
jae 0x4149e3
cmp dword [ebp - 0x150], 0
je 0x4149e3
mov dword [ebp - 0x114], 1
jmp 0x4149ea
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x158], eax
lea ecx, [ebp - 0x178]
call fcn.0042f461
jmp 0x414b34
mov dword [ebp - 0x160], 0xffffffff
mov dword [ebp - 8], 0
jmp 0x414a20
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 4
jge 0x414a36
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x240], 1
jmp 0x414a19
mov dword [ebp - 8], 3
jmp 0x414a46
mov eax, dword [ebp - 8]
dec eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jl 0x414b34
push 1
push 0x77ca
push 1
push 0x7e6e
push 0x7d9
push 0xe9
push 1
push 0x4269
push 1
lea eax, [ebp - 0xc]
push eax
push 0x113b
push 0x71e8
push 1
call fcn.0041377e
add esp, 0x34
mov dword [ebp - 0x10], 3
jmp 0x414a99
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x414ac7
mov dword [ebp - 0xc], 0
jmp 0x414aaf
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 4
jge 0x414ac5
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x240], 0
jmp 0x414aa8
jmp 0x414a92
push 0x16d0
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0xc]
push eax
push 1
push 0x72a
push 0x700f
push 0x76b0
push 0x4638
push 0x27a8
push 0x288
push 0
push 1
push 0x69ff
push 0xd33
push 0xd0c
push 1
push 0x1488
push 1
push 0x5307
push 0x49df
push 0x1a5f
push 0x6209
call fcn.00412d46
add esp, 0x58
jmp 0x414a3f
jmp 0x414b3b
jmp 0x413bcc
pop esi
mov esp, ebp
pop ebp
ret