Function at 0x40c126
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x42c
push esi
call fcn.0040bdbd
mov dword [ebp - 0x64], 0xffffffff
mov dword [ebp - 0x288], 0x30c4e2bf
call fcn.0040be09
mov dword [ebp - 0x64], 0
jmp 0x40c15b
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
je 0x40c1b6
mov dword [ebp - 0x1c0], 0x446df37d
mov dword [ebp - 0x284], 0xffffffff
mov dword [ebp - 0x280], 0x4709ba87
lea eax, [ebp - 0x1c0]
push eax
call fcn.0040be27
pop ecx
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x284]
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x288]
push eax
call fcn.0040ba02
add esp, 0x14
jmp 0x40c154
mov byte [ebp - 0xe4], 0x17
mov byte [ebp - 0xe3], 0x4f
mov byte [ebp - 0xe2], 4
mov byte [ebp - 0xe1], 0x1d
mov byte [ebp - 0xe0], 0x15
mov byte [ebp - 0xdf], 0x13
mov byte [ebp - 0xde], 0xd
mov byte [ebp - 0xdd], 0x18
mov byte [ebp - 0xdc], 0
mov byte [ebp - 0xdb], 0xf
mov byte [ebp - 0xda], 2
mov byte [ebp - 0xd9], 2
mov byte [ebp - 0xd8], 6
mov byte [ebp - 0xd7], 4
mov byte [ebp - 0xd6], 1
mov byte [ebp - 0xd5], 5
mov byte [ebp - 0xd4], 0xe
mov byte [ebp - 0xd3], 0xd
mov byte [ebp - 0xd2], 0x12
mov byte [ebp - 0xd1], 0x1c
mov byte [ebp - 0xd0], 0x18
mov byte [ebp - 0xcf], 0xa
mov byte [ebp - 0xce], 0xb
mov byte [ebp - 0xcd], 0x15
mov byte [ebp - 0xcc], 0xa
mov byte [ebp - 0xcb], 7
mov byte [ebp - 0xca], 0x14
mov byte [ebp - 0xc9], 0x1e
mov byte [ebp - 0xc8], 0x10
mov byte [ebp - 0xc7], 4
mov byte [ebp - 0xc6], 5
mov byte [ebp - 0xc5], 0x17
mov byte [ebp - 0xc4], 0x19
mov byte [ebp - 0xc3], 0x1c
mov byte [ebp - 0xc2], 0x13
mov byte [ebp - 0xc1], 0xe
mov byte [ebp - 0xc0], 7
mov byte [ebp - 0xbf], 0x1c
mov byte [ebp - 0xbe], 3
mov byte [ebp - 0xbd], 0xc
mov byte [ebp - 0xbc], 9
mov byte [ebp - 0xbb], 0xe
mov byte [ebp - 0xba], 0xc
mov byte [ebp - 0xb9], 7
mov byte [ebp - 0xb8], 0x16
mov byte [ebp - 0xb7], 0x1a
mov byte [ebp - 0xb6], 0xf
mov byte [ebp - 0xb5], 7
mov byte [ebp - 0xb4], 0xa
mov byte [ebp - 0xb3], 0xce
mov byte [ebp - 0xb2], 5
mov byte [ebp - 0xb1], 0x7a
mov byte [ebp - 0xb0], 0x47
mov byte [ebp - 0xaf], 0xbb
mov byte [ebp - 0xae], 0x6f
mov byte [ebp - 0xad], 0x74
mov byte [ebp - 0xac], 0x58
mov byte [ebp - 0xab], 0x21
mov byte [ebp - 0xaa], 0xc7
mov byte [ebp - 0xa9], 0x11
mov byte [ebp - 0xa8], 2
mov byte [ebp - 0xa7], 8
mov byte [ebp - 0xa6], 0x1b
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x22c], 0xffffffff
push 2
lea ecx, [ebp - 0x380]
call fcn.00413ed8
mov dword [ebp - 0x7c], 0
jmp 0x40c39d
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jge 0x40c3b6
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x380]
call fcn.00413f7a
and dword [eax], 0
jmp 0x40c396
cmp dword [ebp - 0x6c], 0
jne 0x40c415
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x6c], eax
jge 0x40c3d0
mov dword [ebp - 0x224], 1
jmp 0x40c3d7
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp - 0x22c]
cmp dword [ebp - 0x6c], eax
jne 0x40c3fa
mov dword [ebp - 0x1c8], 1
jmp 0x40c401
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0x1c8]
jne 0x40c415
and dword [ebp - 0x12c], 0
jmp 0x40c41f
mov dword [ebp - 0x12c], 1
mov eax, dword [ebp - 0x12c]
add eax, 0x25bf
je 0x40c448
mov dword [ebp - 0x290], 0x9b64fda7
lea eax, [ebp - 0x290]
push eax
call fcn.0040be3f
pop ecx
jmp 0x40c514
mov dword [ebp - 0x20c], 0x75158018
push 1
lea ecx, [ebp - 0x338]
call fcn.00413ed8
mov dword [ebp - 0x5c], 0
jmp 0x40c46f
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x40c485
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x3cc], 0xffffffff
jmp 0x40c468
lea eax, [ebp - 0x338]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.0040be58
pop ecx
pop ecx
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x3b8], eax
cmp dword [ebp - 0x20c], 1
jne 0x40c4b8
mov dword [ebp - 0x134], 1
jmp 0x40c4bf
and dword [ebp - 0x134], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3cc]
cmp dword [ebp - 0x134], eax
jle 0x40c4df
mov dword [ebp - 0x214], 1
jmp 0x40c4e6
and dword [ebp - 0x214], 0
push 0
lea ecx, [ebp - 0x338]
call fcn.00413f7a
mov ecx, dword [ebp - 0x214]
mov dword [eax], ecx
mov byte [ebp - 0x36], 0
lea eax, [ebp - 0x36]
push eax
call fcn.0040bea0
pop ecx
lea ecx, [ebp - 0x338]
call fcn.00413f75
mov byte [ebp - 0x4d], 0
lea eax, [ebp - 0x4d]
push eax
call fcn.0040bebd
pop ecx
lea ecx, [ebp - 0x380]
call fcn.00413f75
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xe4]
or eax, 0x37
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xe4]
and ecx, 0x37
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0xe4]
mov byte [ebp + ecx - 0x364], al
push 3
lea ecx, [ebp - 0x2c0]
call fcn.00413ed8
mov dword [ebp - 0xa0], 0xfffffff6
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x384]
push eax
call fcn.0040beda
pop ecx
pop ecx
mov dword [ebp - 0xa0], 0
jmp 0x40c5ab
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 2
jg 0x40c71d
push 2
lea ecx, [ebp - 0x270]
call fcn.00413ed8
mov dword [ebp - 0x84], 0
jmp 0x40c5de
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 2
jge 0x40c600
push dword [ebp - 0x84]
lea ecx, [ebp - 0x270]
call fcn.00413f7a
mov dword [eax], 5
jmp 0x40c5d1
push 1
lea ecx, [ebp - 0x270]
call fcn.00413f7a
and dword [eax], 0
jmp 0x40c636
push 1
lea ecx, [ebp - 0x270]
call fcn.00413f7a
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x21c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x21c]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x270]
call fcn.00413f7a
cmp dword [eax], 2
jg 0x40c708
mov dword [ebp - 0x98], 0
jmp 0x40c665
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jge 0x40c67e
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x54], 0xda622a14
jmp 0x40c658
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x54], 0
jmp 0x40c6a3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x54], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x54], 2
jg 0x40c6e2
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x54]
lea ecx, [ebp - 0x2c0]
call fcn.00413f7a
mov esi, eax
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x54]
lea ecx, [ebp - 0x2c0]
call fcn.00413f7a
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x40c68e
push 1
lea ecx, [ebp - 0x270]
call fcn.00413f7a
push dword [eax]
lea ecx, [ebp - 0x2c0]
call fcn.00413f7a
cmp dword [eax], 0
je 0x40c703
jmp 0x40c708
jmp 0x40c612
call fcn.0040bf22
lea ecx, [ebp - 0x270]
call fcn.00413f75
jmp 0x40c59e
lea ecx, [ebp - 0x2c0]
call fcn.00413f75
mov dword [ebp - 4], 2
and dword [ebp - 0x68], 0
jmp 0x40c73d
mov eax, dword [ebp - 4]
inc eax
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0x3f
jae 0x40d280
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xe4]
lea eax, [eax + eax + 2]
cmp dword [ebp - 4], eax
jne 0x40cd13
mov eax, dword [ebp - 4]
movzx eax, byte [ebp + eax - 0xe4]
inc eax
mov dword [ebp - 0x68], eax
push 4
lea ecx, [ebp - 0x120]
call fcn.00413ed8
mov dword [ebp - 0x20], 0x66fe7d8a
mov dword [ebp - 0x2a8], 9
mov dword [ebp - 0x8c], 0
jmp 0x40c7a8
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 4
jge 0x40c7ca
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x120]
call fcn.00413f7a
mov dword [eax], 1
jmp 0x40c79b
mov dword [ebp - 0x20], 0
jmp 0x40c7da
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jg 0x40cafc
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x150], 0x57a55752
mov dword [ebp - 0x18], 0
jmp 0x40c805
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jg 0x40caea
mov dword [ebp - 0x3c], 1
mov dword [ebp - 0x30c], 0xfffffffc
mov dword [ebp - 0x308], 0xfffffffc
mov dword [ebp - 0x304], 0xfffffffc
mov dword [ebp - 0x300], 0xfffffffc
mov dword [ebp - 0x3c], 0
jmp 0x40c84e
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jg 0x40c910
mov dword [ebp - 0x2c], 0xfffffffc
mov dword [ebp - 0x2c], 3
jmp 0x40c86f
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x40c8b8
push dword [ebp - 0x18]
lea ecx, [ebp - 0x120]
call fcn.00413f7a
mov dword [ebp - 0x140], eax
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x120]
call fcn.00413f7a
mov ecx, dword [ebp - 0x140]
mov eax, dword [eax]
mov dword [ecx], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x140]
mov ecx, dword [ecx]
mov dword [ebp + eax - 0x30c], ecx
jmp 0x40c868
mov dword [ebp - 0x2c], 0
jmp 0x40c8c8
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jg 0x40c90b
mov dword [ebp - 0x60], 0x969161d5
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.0040bafe
add esp, 0xc
mov dword [ebp - 0x60], 3
jmp 0x40c8fc
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
jl 0x40c909
call fcn.0040bf3b
jmp 0x40c8f5
jmp 0x40c8c1
jmp 0x40c847
cmp dword [ebp - 0x18], 0x1f433c8a
jl 0x40c925
mov dword [ebp - 0x210], 1
jmp 0x40c92c
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x150]
imul eax, dword [ebp - 0x210]
cmp eax, 0xe769035a
jae 0x40c94c
mov dword [ebp - 0x298], 1
jmp 0x40c953
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x388], eax
push 3
lea ecx, [ebp - 0x120]
call fcn.00413f7a
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x30c]
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x30c], 0
jne 0x40c98f
mov eax, 0xffff
test eax, eax
je 0x40c99e
cmp dword [ebp - 0x18], 0
jne 0x40c99e
and dword [ebp - 0x148], 0
jmp 0x40c9a8
mov dword [ebp - 0x148], 1
push dword [ebp - 0x18]
lea ecx, [ebp - 0x120]
call fcn.00413f7a
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x148]
sub edx, dword [ebp + ecx - 0x30c]
cmp dword [eax], edx
jl 0x40c9d9
mov dword [ebp - 0x1d0], 1
jmp 0x40c9e0
and dword [ebp - 0x1d0], 0
cmp dword [ebp - 0x1d0], 0x919c44d4
ja 0x40c9f8
mov dword [ebp - 0x264], 1
jmp 0x40c9ff
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x264], eax
jle 0x40ca19
mov dword [ebp - 0x158], 1
jmp 0x40ca20
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x158], eax
je 0x40ca37
mov dword [ebp - 0xe8], 1
jmp 0x40ca3e
and dword [ebp - 0xe8], 0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x120]
call fcn.00413f7a
mov ecx, dword [ebp - 0xe8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
je 0x40ca78
mov eax, 0xddd5d57d
test eax, eax
je 0x40ca78
mov dword [ebp - 0x2a0], 1
jmp 0x40ca7f
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x390], eax
mov eax, dword [ebp - 0x20]
add eax, 0x68d9a65c
cmp eax, dword [ebp - 0x20]
jle 0x40caa1
mov dword [ebp - 0x1d8], 1
jmp 0x40caa8
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x1d8], eax
jne 0x40cacf
push dword [ebp - 0x18]
lea ecx, [ebp - 0x120]
call fcn.00413f7a
cmp dword [eax], 0
jne 0x40cacf
and dword [ebp - 0x160], 0
jmp 0x40cad9
mov dword [ebp - 0x160], 1
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x2a8], eax
jmp 0x40c7fe
lea eax, [ebp - 0x120]
push eax
call fcn.0040bb68
pop ecx
jmp 0x40c7d3
lea ecx, [ebp - 0x120]
call fcn.00413f75
mov eax, dword [ebp - 4]
movzx eax, byte [ebp + eax - 0xe4]
mov ecx, dword [ebp - 4]
lea eax, [ecx + eax - 1]
mov dword [ebp - 4], eax
mov dword [ebp - 0x218], 0x9eeda585
mov dword [ebp - 8], 0
jmp 0x40cb36
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 3
jge 0x40cb4c
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x23c], 0x888a
jmp 0x40cb2f
mov dword [ebp - 8], 0
jmp 0x40cb5c
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 3
jge 0x40cb72
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x3fc], 0x57f451d5
jmp 0x40cb55
mov dword [ebp - 8], 0
jmp 0x40cb82
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 3
jge 0x40cb98
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x3f0], 0xffffffff
jmp 0x40cb7b
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x23c], 0
jae 0x40cbba
mov eax, 0xd7bc
test eax, eax
jne 0x40cbba
and dword [ebp - 0x2b0], 0
jmp 0x40cbc4
mov dword [ebp - 0x2b0], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x23c]
mov dword [ebp - 0x38c], eax
mov dword [ebp - 0x218], 1
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x168], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x168]
mov dword [ebp + eax - 0x3fc], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x168]
sub ecx, dword [ebp + eax - 0x23c]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x23c]
jle 0x40cc3c
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x23c], 0
je 0x40cc3c
mov dword [ebp - 0x1e0], 1
jmp 0x40cc43
and dword [ebp - 0x1e0], 0
cmp dword [ebp - 0x1e0], 0x7a67
jle 0x40cc5b
mov dword [ebp - 0x170], 1
jmp 0x40cc62
and dword [ebp - 0x170], 0
cmp dword [ebp - 0x170], 0
jge 0x40cc77
mov dword [ebp - 0x240], 1
jmp 0x40cc7e
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x240]
add eax, 0x3d87e3bc
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x23c]
jg 0x40cca3
mov dword [ebp - 0x178], 1
jmp 0x40ccaa
and dword [ebp - 0x178], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x23c]
cmp eax, dword [ebp - 0x178]
je 0x40ccca
mov dword [ebp - 0x1e8], 1
jmp 0x40ccd1
and dword [ebp - 0x1e8], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1e8]
sub ecx, dword [ebp + eax - 0x23c]
cmp ecx, 1
ja 0x40ccf4
mov dword [ebp - 0x180], 1
jmp 0x40ccfb
and dword [ebp - 0x180], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x180]
mov dword [ebp + eax - 0x3f0], ecx
jmp 0x40c735
mov dword [ebp - 0x14], 9
mov dword [ebp - 0x1f8], 0x4e20eeb
mov dword [ebp - 0x2c4], 0x38fd2320
mov dword [ebp - 0x14], 0
jmp 0x40cd3e
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x14
jle 0x40d1aa
mov dword [ebp - 0x58], 0xffffffff
mov dword [ebp - 0x90], 0
jmp 0x40cd68
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x40cd84
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x24c], 0xfffffff6
jmp 0x40cd5b
mov dword [ebp - 0x58], 0
jmp 0x40cd94
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 9
je 0x40d1a5
mov dword [ebp - 0x1c], 0xffffffff
cmp dword [ebp - 0x14], 0
je 0x40cdaf
cmp dword [ebp - 0x1c], 0
cmp dword [ebp - 0x58], 0
jne 0x40ce2b
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x398], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x3a0], eax
cmp dword [ebp - 0x14], 0
je 0x40cddf
cmp dword [ebp - 0x1c], 0
je 0x40cddf
mov dword [ebp - 0x220], 1
jmp 0x40cde6
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x220]
add eax, 0x53f0d3ec
mov dword [ebp - 0x188], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x188]
mov dword [ebp + eax - 0x24c], ecx
cmp dword [ebp - 0x188], 0
je 0x40ce19
cmp dword [ebp - 0x1c], 0
jne 0x40ce2b
mov eax, 0x32c5
test eax, eax
jne 0x40ce2b
and dword [ebp - 0x1f0], 0
jmp 0x40ce35
mov dword [ebp - 0x1f0], 1
cmp dword [ebp - 0x1f0], 0x4adc
jg 0x40ce45
cmp dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
je 0x40d195
or eax, 0xffffffff
je 0x40d195
mov dword [ebp - 0x2dc], 0x7758a8c
push 4
lea ecx, [ebp - 0x2d0]
call fcn.00413ed8
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x3ac]
push eax
call fcn.0040bf54
pop ecx
pop ecx
mov dword [ebp - 0x1c], 2
jmp 0x40ce96
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x40d188
mov dword [ebp - 0x32c], 0x46e74a6e
mov dword [ebp - 0x328], 0x46e74a6e
mov dword [ebp - 0x324], 0x46e74a6e
mov dword [ebp - 0x320], 0x46e74a6e
lea ecx, [ebp - 0x101]
call fcn.00401e75
push eax
lea eax, [ebp - 0x31c]
push eax
lea eax, [ebp - 0x32c]
push eax
lea ecx, [ebp - 0x404]
call fcn.00413f89
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x27c]
call fcn.00413f4b
push 1
lea ecx, [ebp - 0x27c]
call fcn.00413f7a
and dword [eax], 0
jmp 0x40cf33
push 1
lea ecx, [ebp - 0x27c]
call fcn.00413f7a
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x190]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x190]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x27c]
call fcn.00413f7a
cmp dword [eax], 2
jg 0x40d178
mov dword [ebp - 0x250], 1
push 1
lea ecx, [ebp - 0x27c]
call fcn.00413f7a
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp + ecx*4 - 0x24c]
cmp dword [ebp + eax*4 - 0x24c], ecx
jl 0x40d127
mov dword [ebp - 0x114], 0xfffffff8
mov byte [ebp - 0x45], 0
lea eax, [ebp - 0x45]
push eax
call fcn.0040bb86
pop ecx
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x2dc], eax
push 2
lea ecx, [ebp - 0x27c]
call fcn.00413f7a
cmp dword [eax], 8
jge 0x40cfbb
mov dword [ebp - 0x260], 1
jmp 0x40cfc2
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x24c]
cmp eax, dword [ebp - 0x260]
jg 0x40cfe0
mov dword [ebp - 0x198], 1
jmp 0x40cfe7
and dword [ebp - 0x198], 0
mov esi, dword [ebp - 0x114]
add esi, dword [ebp - 0x198]
push 0
lea ecx, [ebp - 0x2d0]
call fcn.00413f7a
cmp esi, dword [eax]
je 0x40d010
mov dword [ebp - 0xf0], 1
jmp 0x40d017
and dword [ebp - 0xf0], 0
push 0
lea ecx, [ebp - 0x2d0]
call fcn.00413f7a
mov ecx, dword [ebp - 0xf0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1f8]
cmp dword [ebp - 0xf0], eax
jl 0x40d046
mov dword [ebp - 0x1a0], 1
jmp 0x40d04d
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x1a0], eax
jg 0x40d067
mov dword [ebp - 0x228], 1
jmp 0x40d06e
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x228], eax
jle 0x40d088
mov dword [ebp - 0x1a8], 1
jmp 0x40d08f
and dword [ebp - 0x1a8], 0
mov eax, 0xa164e62b
sub eax, dword [ebp - 0x1a8]
sub eax, 0x5f7f7777
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x24c]
jl 0x40d0ba
mov dword [ebp - 0xf8], 1
jmp 0x40d0c1
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0x24c], ecx
xor eax, eax
inc eax
sub eax, dword [ebp - 0xf8]
cmp eax, dword [ebp - 0x250]
jg 0x40d0ee
mov dword [ebp - 0x200], 1
jmp 0x40d0f5
and dword [ebp - 0x200], 0
cmp dword [ebp - 0x200], 0x8af1
jne 0x40d10d
mov dword [ebp - 0x1b0], 1
jmp 0x40d114
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x1b0]
sub eax, 0xad53
mov dword [ebp - 0x250], eax
jmp 0x40d173
mov byte [ebp - 0x3d], 0
lea eax, [ebp - 0x3d]
push eax
call fcn.0040bf9c
pop ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24c]
mov dword [ebp - 0x1b8], eax
push 0
lea ecx, [ebp - 0x2d0]
call fcn.00413f7a
mov ecx, dword [ebp - 0x1b8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x1b8]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x24c], eax
jmp 0x40cf0f
lea ecx, [ebp - 0x27c]
call fcn.00413f75
jmp 0x40ce8f
lea ecx, [ebp - 0x2d0]
call fcn.00413f75
jmp 0x40d1a0
cmp dword [ebp - 0x2c4], 0
je 0x40d1a0
jmp 0x40d1a5
jmp 0x40cd8d
jmp 0x40cd37
mov eax, dword [ebp - 4]
movzx eax, byte [ebp + eax - 0xe3]
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x68]
movzx ecx, byte [ebp + ecx - 0xe6]
movsx ecx, byte [ebp + ecx - 0x364]
add eax, ecx
mov ecx, dword [ebp - 4]
movzx ecx, byte [ebp + ecx - 0xe3]
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x68]
movzx edx, byte [ebp + edx - 0xe6]
movsx edx, byte [ebp + edx - 0x364]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 4]
movzx ecx, byte [ebp + ecx - 0xe3]
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x68]
movzx edx, byte [ebp + edx - 0xe6]
movsx edx, byte [ebp + edx - 0x364]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 4]
movzx ecx, byte [ebp + ecx - 0xe4]
mov byte [ebp + ecx - 0x364], al
mov dword [ebp - 0x94], 0xffffffff
call fcn.0040bfb9
mov dword [ebp - 0x94], 0
jmp 0x40d251
mov eax, dword [ebp - 0x94]
dec eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0xfffffff8
jg 0x40d271
mov dword [ebp - 0x28c], 6
cmp dword [ebp - 0x28c], 0
je 0x40d26f
jmp 0x40d271
jmp 0x40d244
lea eax, [ebp - 0x68]
push eax
call fcn.0040bbdd
pop ecx
jmp 0x40c735
mov dword [ebp - 0x44], 0xe3580d4
mov dword [ebp - 0x10], 0xb79f6a71
mov dword [ebp - 0x124], 0
mov dword [ebp - 0xec], 1
push 3
lea ecx, [ebp - 0x318]
call fcn.00413ed8
mov dword [ebp - 0xf4], 0xfb07d0d1
mov dword [ebp - 0x348], 0x761ac7eb
mov dword [ebp - 0x344], 0x761ac7eb
mov dword [ebp - 0x340], 0x761ac7eb
mov dword [ebp - 0x33c], 0x761ac7eb
mov dword [ebp - 0x24], 0
jmp 0x40d2f1
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x40d307
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x2f4], 0x6c715341
jmp 0x40d2ea
mov dword [ebp - 0x24], 0
jmp 0x40d317
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x40d333
push dword [ebp - 0x24]
lea ecx, [ebp - 0x318]
call fcn.00413f7a
mov dword [eax], 1
jmp 0x40d310
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x39c], eax
cmp dword [ebp - 0x44], 0
jge 0x40d34e
mov dword [ebp - 0x208], 1
jmp 0x40d355
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0x2c44
jge 0x40d379
mov dword [ebp - 0x230], 1
jmp 0x40d380
and dword [ebp - 0x230], 0
mov dword [ebp - 0x10], 0xfffffff7
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x230]
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
je 0x40d3b2
cmp dword [ebp - 0x10], 0
je 0x40d3b2
mov dword [ebp - 0x138], 1
jmp 0x40d3b9
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x138], eax
jne 0x40d3d0
mov dword [ebp - 0x13c], 1
jmp 0x40d3d7
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x44]
imul eax, dword [ebp - 0x13c]
add eax, 0x34859bb
cmp eax, 0x3b16aac8
jl 0x40d3fc
mov dword [ebp - 0x108], 1
jmp 0x40d403
and dword [ebp - 0x108], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x108]
mov dword [ebp + eax - 0x2f4], ecx
cmp dword [ebp - 0x108], 9
jbe 0x40d42b
mov dword [ebp - 0x100], 1
jmp 0x40d432
and dword [ebp - 0x100], 0
push 0
lea ecx, [ebp - 0x318]
call fcn.00413f7a
mov ecx, dword [ebp - 0x100]
mov dword [eax], ecx
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x100], eax
jge 0x40d45e
mov dword [ebp - 0x144], 1
jmp 0x40d465
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0xf4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xf4]
mov dword [ebp + eax - 0x348], ecx
mov dword [ebp - 0x10], 3
jmp 0x40d494
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x40d5f1
mov dword [ebp - 0x164], 0xdb9bec7a
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x2f4]
mov dword [ebp - 0x3bc], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xec]
cmp dword [ebp + eax - 0x2f4], ecx
jne 0x40d4d8
mov dword [ebp - 0x14c], 1
jmp 0x40d4df
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x2f4]
cmp dword [ebp - 0x14c], eax
jne 0x40d4fd
mov dword [ebp - 0x154], 1
jmp 0x40d504
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0x154]
jge 0x40d51e
mov dword [ebp - 0x15c], 1
jmp 0x40d525
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x44]
imul eax, dword [ebp - 0x15c]
sub eax, dword [ebp - 0x164]
je 0x40d54c
cmp dword [ebp - 0x164], 0
je 0x40d54c
mov dword [ebp - 0x16c], 1
jmp 0x40d553
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x16c]
add ecx, 0xb458
cmp dword [ebp + eax*4 - 0x2f4], ecx
jg 0x40d577
mov dword [ebp - 0x174], 1
jmp 0x40d57e
and dword [ebp - 0x174], 0
push 0
lea ecx, [ebp - 0x318]
call fcn.00413f7a
mov ecx, dword [ebp - 0x174]
cmp ecx, dword [eax]
jge 0x40d5a1
mov dword [ebp - 0x2d4], 1
jmp 0x40d5a8
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x2f4]
mov dword [ebp - 0x3a4], eax
mov eax, 0xd240
cmp eax, 0xb460
jne 0x40d5d0
mov dword [ebp - 0x17c], 1
jmp 0x40d5d7
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x17c]
mov dword [ebp + eax*4 - 0x2f4], ecx
call fcn.0040bfd2
jmp 0x40d48d
lea ecx, [ebp - 0x318]
call fcn.00413f75
xor eax, eax
inc eax
imul eax, eax, 0x1a
mov byte [ebp + eax - 0x364], 0
mov dword [ebp - 0x30], 0x58bd4dfb
mov dword [ebp - 0x4c], 0x8d20b50f
mov dword [ebp - 0x2e4], 0x5c74600e
mov dword [ebp - 0x80], 0
jmp 0x40d632
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x40d648
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x25c], 0x25b9b55b
jmp 0x40d62b
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x25c], 0
jmp 0x40d673
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x25c]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x25c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x25c], 0x1b
jl 0x40dbd5
mov dword [ebp - 0x70], 0x9351f200
mov dword [ebp - 0xc], 0
jmp 0x40d69d
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 1
jge 0x40d6b0
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x28], 0xfffffff6
jmp 0x40d696
mov dword [ebp - 0xc], 0
jmp 0x40d6c0
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 1
jge 0x40d6d3
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x74], 0x8909ff4c
jmp 0x40d6b9
mov dword [ebp - 0xc], 0
jmp 0x40d6e3
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 4
jge 0x40d6f9
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x414], 0x62a08d8d
jmp 0x40d6dc
mov dword [ebp - 0x70], 0
jmp 0x40d709
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 8
je 0x40dbd0
mov dword [ebp - 0x184], 4
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x29c], 1
mov dword [ebp - 0x2fc], 0x6f69a7c8
mov dword [ebp - 0x1fc], 0xffffffff
mov dword [ebp - 0x88], 0
jmp 0x40d75b
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jge 0x40d777
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x110], 0xfffffff6
jmp 0x40d74e
mov dword [ebp - 0x30], 7
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x30]
mov dword [ebp + eax - 0x28], ecx
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x25c], 0
je 0x40d7af
cmp dword [ebp - 0x184], 0
je 0x40d7af
mov dword [ebp - 0x294], 1
jmp 0x40d7b6
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x3b4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x30], 0xad8e
jge 0x40d7e7
mov dword [ebp - 0x18c], 1
jmp 0x40d7ee
and dword [ebp - 0x18c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
imul eax, dword [ebp - 0x18c]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xfffa
jne 0x40da2f
mov dword [ebp - 0xfc], 1
mov dword [ebp - 0x1bc], 0x18f82ea9
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.0040bfeb
pop ecx
pop ecx
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x3b0], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x34], 0x804524be
ja 0x40d862
mov eax, 0x2a41536c
test eax, eax
je 0x40d862
mov dword [ebp - 0x194], 1
jmp 0x40d869
and dword [ebp - 0x194], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x25c]
cmp dword [ebp - 0x194], eax
je 0x40d889
mov dword [ebp - 0x19c], 1
jmp 0x40d890
and dword [ebp - 0x19c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x19c]
sub ecx, dword [ebp + eax - 0x28]
push 4
pop eax
imul eax, eax, 0
sub ecx, dword [ebp + eax - 0x28]
mov dword [ebp - 0x2e4], ecx
mov eax, dword [ebp - 0xfc]
neg eax
jne 0x40d8cc
cmp dword [ebp - 0x29c], 0
jne 0x40d8cc
and dword [ebp - 0x1a4], 0
jmp 0x40d8d6
mov dword [ebp - 0x1a4], 1
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x3c0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1a4]
sub ecx, dword [ebp + eax - 0x25c]
push 4
pop eax
imul eax, eax, 0
add ecx, dword [ebp + eax - 0x28]
mov dword [ebp - 0x2f8], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2f8]
mov dword [ebp + eax - 0x74], ecx
mov dword [ebp - 0x34], 0
cmp dword [ebp - 0x34], 0
jne 0x40d93b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x74], 0
jne 0x40d93b
and dword [ebp - 0x1ac], 0
jmp 0x40d945
mov dword [ebp - 0x1ac], 1
mov eax, dword [ebp - 0xfc]
imul eax, dword [ebp - 0x1ac]
cmp eax, dword [ebp - 0x70]
je 0x40d963
mov dword [ebp - 0x1b4], 1
jmp 0x40d96a
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x1bc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
cmp eax, dword [ebp - 0x1bc]
je 0x40d994
mov dword [ebp - 0x1c4], 1
jmp 0x40d99b
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x1c4], eax
jne 0x40d9c8
cmp dword [ebp - 0xfc], 0
je 0x40d9c8
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x74], 0
je 0x40d9c8
mov dword [ebp - 0x2a4], 1
jmp 0x40d9cf
and dword [ebp - 0x2a4], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28], 0xaf36eaf
jl 0x40d9eb
mov dword [ebp - 0x1cc], 1
jmp 0x40d9f2
and dword [ebp - 0x1cc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
cmp dword [ebp - 0x1cc], eax
je 0x40da10
mov dword [ebp - 0x1d4], 1
jmp 0x40da17
and dword [ebp - 0x1d4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1d4]
mov dword [ebp + eax - 0x110], ecx
jmp 0x40dbcb
mov dword [ebp - 0x1ec], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x110]
add eax, 0x4ccf
jne 0x40db0e
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x110]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x1ec]
cmp dword [ebp - 0x34], eax
je 0x40da78
mov dword [ebp - 0x1dc], 1
jmp 0x40da7f
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x1dc]
add eax, 7
cmp eax, dword [ebp - 0x4c]
jge 0x40da99
mov dword [ebp - 0x2e0], 1
jmp 0x40daa0
and dword [ebp - 0x2e0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x74]
cmp dword [ebp - 0x34], eax
je 0x40dabb
mov dword [ebp - 0x1e4], 1
jmp 0x40dac2
and dword [ebp - 0x1e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
imul eax, dword [ebp - 0x1e4]
cmp eax, 0x9e2267c8
jne 0x40dae9
mov dword [ebp - 0x2ac], 1
jmp 0x40daf0
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x1ec]
push 4
pop ecx
imul ecx, ecx, 3
add eax, dword [ebp + ecx - 0x414]
jne 0x40db0e
and dword [ebp - 0x1f4], 0
jmp 0x40db18
mov dword [ebp - 0x1f4], 1
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x2fc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x25c]
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0
je 0x40db5c
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x110], 0
je 0x40db5c
mov dword [ebp - 0x204], 1
jmp 0x40db63
and dword [ebp - 0x204], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x110]
cmp dword [ebp - 0x204], eax
jg 0x40db84
mov dword [ebp - 0x128], 1
jmp 0x40db8b
and dword [ebp - 0x128], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x110]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x128]
jle 0x40dbb2
mov dword [ebp - 0x130], 1
jmp 0x40dbb9
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x130]
mov dword [ebp - 0x4c], eax
call fcn.0040c02e
jmp 0x40d702
jmp 0x40d65a
lea eax, [ebp - 0x364]
push eax
lea ecx, [ebp - 0x42c]
call fcn.00413db7
and dword [ebp - 0x9c], 0
jmp 0x40dbfd
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x1b
jae 0x40dc16
mov eax, dword [ebp - 0x9c]
mov byte [ebp + eax - 0x364], 0
jmp 0x40dbf0
push 0xaba806
lea ecx, [ebp - 0x3e4]
call fcn.00413db7
call fcn.0040c047
mov dword [ebp - 0x2d8], 0xffffffff
mov dword [ebp - 0x2b4], 0xe9323d1b
lea eax, [ebp - 0x2b4]
push eax
lea eax, [ebp - 0x2d8]
push eax
call fcn.0040c06a
pop ecx
pop ecx
push 0x723d
push 0
push 0x5c99
lea eax, [ebp - 0x394]
push eax
lea eax, [ebp - 0x42c]
push eax
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x3e4]
push eax
push 1
push 0x1606
push 0x697
push 0x49cc
push 0x7111
push 0x1c84
call fcn.0040e6ab
add esp, 0x34
push 3
lea ecx, [ebp - 0x374]
call fcn.00413ed8
mov dword [ebp - 0x78], 0xffffffff
mov dword [ebp - 0xa4], 0
jmp 0x40dcc9
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jge 0x40dceb
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x374]
call fcn.00413f7a
mov dword [eax], 0xfffa
jmp 0x40dcbc
mov dword [ebp - 0x78], 0
jmp 0x40dcfb
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jg 0x40dd11
mov byte [ebp - 0x35], 0
lea eax, [ebp - 0x35]
push eax
call fcn.0040c109
pop ecx
jmp 0x40dcf4
mov byte [ebp - 0x4e], 0
movzx eax, byte [ebp - 0x4e]
test eax, eax
je 0x40dd22
call fcn.0040bdab
lea ecx, [ebp - 0x374]
call fcn.00413f75
lea eax, [ebp - 0x3e4]
push eax
mov ecx, dword [ebp + 8]
call fcn.00413de6
lea ecx, [ebp - 0x3e4]
call fcn.00413e3f
lea ecx, [ebp - 0x42c]
call fcn.00413e3f
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret