Function at 0x415538
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x274
push esi
movzx eax, byte [ebp + 0x24]
test eax, eax
je 0x416492
mov eax, dword [ebp + 0x38]
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x138], eax
lea eax, [ebp + 0x40]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x140], eax
lea eax, [ebp + 0x18]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x1cc]
movzx eax, byte [eax]
test eax, eax
je 0x416475
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x148]
movzx eax, byte [eax]
test eax, eax
je 0x41565b
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x24]
mov dword [eax], 0
jmp 0x415636
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x24]
mov dword [ecx], eax
mov eax, dword [ebp - 0x24]
cmp dword [eax], 2
jge 0x415656
mov eax, dword [ebp - 0x24]
push dword [eax]
mov ecx, dword [ebp - 0x130]
call fcn.00431297
mov dword [eax], 9
jmp 0x41562b
jmp 0x416473
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x170], 0x4fc2285f
mov dword [ebp - 0x1a4], 0xce43c7d7
push 0x7ed2
push 1
push 0x2a19
push 0x5832
push 1
push 0x658
push 0x3b36
push 0
push 1
call fcn.0040c6e6
add esp, 0x24
push 0x51e8
lea eax, [ebp - 0x1a4]
push eax
push 0x2dc6
push 0x74f2
push 1
push 0x361
lea eax, [ebp - 0x170]
push eax
push 1
push 0x406
push 1
push 0x24fd
push 0x18b2
push 0x1d29
push 0
push 0
call fcn.004096d7
add esp, 0x3c
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 4]
mov dword [ebp - 0x64], eax
push 0x6ce7
push 0
call fcn.00426031
pop ecx
pop ecx
push 2
lea ecx, [ebp - 0x23c]
call fcn.004311a9
mov dword [ebp - 0x21c], 0xffffffff
mov dword [ebp - 0x240], 0x34e6d4f2
mov dword [ebp - 0x220], 0x5664dc9e
mov dword [ebp - 0x224], 0xfc2285fa
mov dword [ebp - 0x1a8], 4
mov dword [ebp - 0x22c], 0xffffffff
mov dword [ebp - 0x178], 0xca27
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x30]
push eax
push 0
call fcn.004293d3
add esp, 0xc
mov dword [ebp - 0x30], 0
jmp 0x415790
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x4157a6
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x274], 4
jmp 0x415789
push 0
lea eax, [ebp - 0x1a8]
push eax
call fcn.00420e79
pop ecx
pop ecx
push 0x7fb6
push 0
lea eax, [ebp - 0x178]
push eax
push 0x7e0e
push 0
push 0x24e2
push 0x25b
push 0x19cc
push 0x38e8
call fcn.0041b4f5
add esp, 0x24
lea ecx, [ebp - 0x23c]
call fcn.0043127b
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0xc], eax
push 0
call fcn.004243ab
pop ecx
and dword [ebp - 0x5c], 0
jmp 0x415825
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0xc]
add eax, 0x28
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x5c], eax
jge 0x416473
push 2
lea ecx, [ebp - 0x200]
call fcn.004311a9
mov dword [ebp - 0x180], 0xfffffffa
mov dword [ebp - 0x24c], 0xb64d
mov dword [ebp - 8], 0
jmp 0x415868
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 4
jge 0x41587e
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x12c], 2
jmp 0x415861
mov dword [ebp - 8], 0
jmp 0x41588e
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 3
jge 0x4158a4
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x25c], 0x67f5ed9a
jmp 0x415887
push 0x51c7
push 0
push 0
push 0x61c7
push 0x108a
push 0x71f8
push 0x64e7
push 0x11ca
push 0x7074
lea eax, [ebp - 0x200]
push eax
push 0x5ef6
push 0x2b77
push 0
push 0x6e89
push 1
push 0x1f9
push 0x1eaf
lea eax, [ebp - 8]
push eax
push 0x3f95
push 0x2ff6
push 0x40c5
push 0x609c
call fcn.0041118e
add esp, 0x58
push 1
push 1
push 0x7849
push 0
push 0x4b79
push 0x585e
push 1
push 0
call fcn.004212dd
add esp, 0x20
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x12c], 0xb
jmp 0x41595b
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x12c]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x12c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x12c], 0x16
jl 0x415a98
mov dword [ebp - 0x60], 0xc39ba095
mov dword [ebp - 0xc8], 0xfffffff9
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x12c]
mov dword [ebp - 0x114], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x114]
mov dword [ebp + eax - 0x25c], ecx
cmp dword [ebp - 0x114], 0
jne 0x4159b8
cmp dword [ebp - 0x60], 0
jne 0x4159b8
and dword [ebp - 0x78], 0
jmp 0x4159bf
mov dword [ebp - 0x78], 1
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x60]
cmp dword [ebp + eax - 0x12c], ecx
jle 0x4159df
mov eax, 0xcb0befcd
test eax, eax
jne 0x4159df
and dword [ebp - 0x70], 0
jmp 0x4159e6
mov dword [ebp - 0x70], 1
cmp dword [ebp - 0x70], 0xfffffff7
jge 0x4159f8
mov dword [ebp - 0x1b0], 1
jmp 0x4159ff
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x248], eax
push 4
pop eax
imul eax, eax, 3
imul eax, dword [ebp + eax - 0x12c], 0xe936
mov dword [ebp - 0x11c], eax
push 1
lea ecx, [ebp - 0x200]
call fcn.00431297
mov ecx, dword [ebp - 0x11c]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x12c]
cmp eax, dword [ebp - 0x11c]
jg 0x415a52
mov dword [ebp - 0x6c], 1
jmp 0x415a56
and dword [ebp - 0x6c], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x78], eax
jle 0x415a76
mov dword [ebp - 0x108], 1
jmp 0x415a7d
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x108]
neg eax
mov dword [ebp - 0x180], eax
push 0
call fcn.004212b6
pop ecx
jmp 0x415942
lea ecx, [ebp - 0x200]
call fcn.0043127b
mov eax, dword [ebp - 0xc]
cmp dword [eax + 0x10], 0
jne 0x415f85
mov dword [ebp - 0x38], 2
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], 0xfffffffb
mov dword [ebp - 0x20], 0x52f34111
mov dword [ebp - 0xd8], 0xd081
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x1b8]
cmp eax, dword [ebp - 0x188]
jl 0x415b0f
mov dword [ebp - 0xd0], 1
jmp 0x415b16
and dword [ebp - 0xd0], 0
cmp dword [ebp - 0x20], 0xffff22ad
jg 0x415b2b
mov dword [ebp - 0x1c0], 1
jmp 0x415b32
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x20]
neg eax
jne 0x415b51
mov eax, 0xef70
test eax, eax
jne 0x415b51
and dword [ebp - 0x80], 0
jmp 0x415b58
mov dword [ebp - 0x80], 1
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x80]
jge 0x415b75
mov eax, 0x6436
test eax, eax
je 0x415b75
mov dword [ebp - 0x88], 1
jmp 0x415b7c
and dword [ebp - 0x88], 0
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x88]
cmp dword [ebp - 0x44], eax
jge 0x415b9f
mov dword [ebp - 0xf8], 1
jmp 0x415ba6
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0xf8], eax
je 0x415bc0
mov dword [ebp - 0x90], 1
jmp 0x415bc7
and dword [ebp - 0x90], 0
cmp dword [ebp - 0x90], 1
jae 0x415bdc
mov dword [ebp - 0x98], 1
jmp 0x415be3
and dword [ebp - 0x98], 0
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x98], eax
jne 0x415bfd
mov dword [ebp - 0x118], 1
jmp 0x415c04
and dword [ebp - 0x118], 0
cmp dword [ebp - 0x118], 0xcadfb1af
jbe 0x415c1c
mov dword [ebp - 0xa0], 1
jmp 0x415c23
and dword [ebp - 0xa0], 0
cmp dword [ebp - 0xa0], 0xd59e57ad
jae 0x415c3b
mov dword [ebp - 0xe0], 1
jmp 0x415c42
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x44], 0
je 0x415cae
push 1
lea ecx, [ebp - 0x20c]
call fcn.004311a9
mov dword [ebp - 0x190], 0xffffffff
lea eax, [ebp - 0x250]
push eax
push 0
lea eax, [ebp - 0x20c]
push eax
push 0
push 0x4422
push 0x3865
call fcn.00420c2d
add esp, 0x18
push 0
lea ecx, [ebp - 0x20c]
call fcn.00431297
mov eax, dword [eax]
mov dword [ebp - 0x190], eax
lea ecx, [ebp - 0x20c]
call fcn.0043127b
jmp 0x415cee
push 0
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.0041905f
add esp, 0x10
mov byte [ebp - 0xd], 0
lea eax, [ebp - 0xd]
push eax
push 0x816
push 1
push 0x1bf8
push 0x5e6
push 0
push 0
push 0x1dbf
call fcn.0040f3ec
add esp, 0x20
push 0
push 0x4be5
push 0x3a58
call fcn.00424d4d
add esp, 0xc
push 1
push 0x5a54
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x1c8]
push eax
push 0x4e6f
lea eax, [ebp - 0x64]
push eax
push 0x246f
push 0x52bb
push 0x5116
push 0
push 0x24dd
push 0x4c49
push 0x73ee
lea eax, [ebp - 0x58]
push eax
push 0x4c08
call fcn.00416a6c
add esp, 0x3c
mov dword [ebp - 4], 0xa860
mov dword [ebp - 0x48], 0xfffffff7
mov dword [ebp - 0x110], 0x22401dbd
mov dword [ebp - 0x54], 0x85bd52a2
push 3
lea ecx, [ebp - 0x218]
call fcn.004311a9
push 0x38eb
push 0x5009
push 1
push 0x3b55
push 0x34c5
push 0x3bff
lea eax, [ebp - 0x218]
push eax
push 1
push 0x4a37
push 0x25df
push 0x674c
push 0
push 0x50b0
push 0x1d6
push 0x72bc
push 1
lea eax, [ebp - 0x2c]
push eax
push 0x6da9
call fcn.00409d57
add esp, 0x48
mov dword [ebp - 0x2c], 0
jmp 0x415de1
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x415df7
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x268], 0x3abefa02
jmp 0x415dda
push 0
push 0x48a6
push 0
push 0x3139
lea eax, [ebp - 4]
push eax
call fcn.0041bc37
add esp, 0x14
mov eax, dword [ebp - 4]
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jne 0x415e21
cmp dword [ebp - 0x48], 0
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 4]
cmp dword [ebp - 4], eax
jne 0x415e38
mov dword [ebp - 0xa8], 1
jmp 0x415e3f
and dword [ebp - 0xa8], 0
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0xa8]
cmp dword [ebp - 4], eax
jne 0x415e59
mov dword [ebp - 0x100], 1
jmp 0x415e60
and dword [ebp - 0x100], 0
cmp dword [ebp - 0x100], 0x1448112d
jle 0x415e78
mov dword [ebp - 0xb0], 1
jmp 0x415e7f
and dword [ebp - 0xb0], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0xb0], eax
jle 0x415e96
mov dword [ebp - 0xe8], 1
jmp 0x415e9d
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0xe8], eax
jne 0x415eba
cmp dword [ebp - 4], 0
je 0x415eba
mov dword [ebp - 0xb8], 1
jmp 0x415ec1
and dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x110]
cmp dword [ebp - 4], eax
je 0x415ee7
mov dword [ebp - 0xc0], 1
jmp 0x415eee
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0xc0], eax
jge 0x415f05
mov dword [ebp - 0xf0], 1
jmp 0x415f0c
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0xf0], eax
jge 0x415f20
mov dword [ebp - 0x4c], 1
jmp 0x415f24
and dword [ebp - 0x4c], 0
push 0
lea ecx, [ebp - 0x218]
call fcn.00431297
mov ecx, dword [ebp - 0x4c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x4c], eax
jne 0x415f47
mov dword [ebp - 0x68], 1
jmp 0x415f4b
and dword [ebp - 0x68], 0
mov eax, dword [ebp - 0x68]
add eax, 7
je 0x415f62
cmp dword [ebp - 4], 0
je 0x415f62
mov dword [ebp - 0x74], 1
jmp 0x415f66
and dword [ebp - 0x74], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x74]
mov dword [ebp + eax - 0x268], ecx
lea ecx, [ebp - 0x218]
call fcn.0043127b
jmp 0x415815
push 2
lea ecx, [ebp - 0x1c]
call fcn.004311a9
mov dword [ebp - 0x28], 0x218f0ed6
mov dword [ebp - 0x3c], 0x27682c5a
mov dword [ebp - 0x50], 0x4acdff90
mov dword [ebp - 0x1d8], 0xc8a5
mov dword [ebp - 0x1a0], 8
mov dword [ebp - 0x230], 1
lea eax, [ebp - 0x244]
push eax
push 0
push 0x207b
push 0x62fa
push 0
push 0x70e5
lea eax, [ebp - 0x1c]
push eax
call fcn.004181ee
add esp, 0x1c
push 1
lea ecx, [ebp - 0x1c]
call fcn.00431297
push 1
lea ecx, [ebp - 0x1c]
call fcn.00431297
mov esi, eax
push 1
lea ecx, [ebp - 0x1c]
call fcn.00431297
mov ecx, dword [esi]
cmp ecx, dword [eax]
jl 0x416017
mov dword [ebp - 0x7c], 1
jmp 0x41601b
and dword [ebp - 0x7c], 0
mov eax, dword [ebp - 0x7c]
neg eax
cmp eax, 0x2910a83a
jle 0x416033
mov dword [ebp - 0x84], 1
jmp 0x41603a
and dword [ebp - 0x84], 0
push 1
lea ecx, [ebp - 0x1c]
call fcn.00431297
mov ecx, dword [ebp - 0x84]
imul ecx, dword [eax]
cmp ecx, 0xfffffffb
jl 0x41605e
mov dword [ebp - 0x8c], 1
jmp 0x416065
and dword [ebp - 0x8c], 0
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x6522452a
jne 0x416083
mov dword [ebp - 0x94], 1
jmp 0x41608a
and dword [ebp - 0x94], 0
push 1
lea ecx, [ebp - 0x1c]
call fcn.00431297
mov ecx, dword [ebp - 0x94]
cmp ecx, dword [eax]
jl 0x4160aa
mov dword [ebp - 0x9c], 1
jmp 0x4160b1
and dword [ebp - 0x9c], 0
push 1
lea ecx, [ebp - 0x1c]
call fcn.00431297
mov ecx, dword [ebp - 0x9c]
cmp ecx, dword [eax]
je 0x4160d7
mov eax, 0x37a30b91
test eax, eax
jne 0x4160d7
and dword [ebp - 0xa4], 0
jmp 0x4160e1
mov dword [ebp - 0xa4], 1
push 1
lea ecx, [ebp - 0x1c]
call fcn.00431297
mov ecx, dword [ebp - 0xa4]
cmp ecx, dword [eax]
jle 0x416101
mov dword [ebp - 0xac], 1
jmp 0x416108
and dword [ebp - 0xac], 0
cmp dword [ebp - 0xac], 7
jae 0x41611d
mov dword [ebp - 0xb4], 1
jmp 0x416124
and dword [ebp - 0xb4], 0
push 1
lea ecx, [ebp - 0x1c]
call fcn.00431297
mov ecx, dword [ebp - 0xb4]
cmp ecx, dword [eax]
jge 0x416144
mov dword [ebp - 0xbc], 1
jmp 0x41614b
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xbc]
sub eax, 0x5fe5
cmp eax, 0xffffffff
jg 0x416167
mov dword [ebp - 0xc4], 1
jmp 0x41616e
and dword [ebp - 0xc4], 0
cmp dword [ebp - 0xc4], 1
jge 0x416183
mov dword [ebp - 0xcc], 1
jmp 0x41618a
and dword [ebp - 0xcc], 0
push 1
lea ecx, [ebp - 0x1c]
call fcn.00431297
mov esi, dword [ebp - 0xcc]
imul esi, dword [eax]
push 1
lea ecx, [ebp - 0x1c]
call fcn.00431297
cmp esi, dword [eax]
je 0x4161b7
mov dword [ebp - 0xd4], 1
jmp 0x4161be
and dword [ebp - 0xd4], 0
push 0
lea ecx, [ebp - 0x1c]
call fcn.00431297
mov esi, eax
push 1
lea ecx, [ebp - 0x1c]
call fcn.00431297
mov ecx, dword [ebp - 0xd4]
add ecx, dword [eax]
cmp dword [esi], ecx
jne 0x4161f5
mov eax, 0x85e9
test eax, eax
je 0x4161f5
mov dword [ebp - 0xdc], 1
jmp 0x4161fc
and dword [ebp - 0xdc], 0
push 1
lea ecx, [ebp - 0x1c]
call fcn.00431297
push 0
lea ecx, [ebp - 0x1c]
call fcn.00431297
cmp dword [eax], 0
jne 0x416237
cmp dword [ebp - 0x28], 0
jne 0x416237
xor eax, eax
jne 0x416237
push 1
lea ecx, [ebp - 0x1c]
call fcn.00431297
cmp dword [eax], 0
jne 0x416237
and dword [ebp - 0x198], 0
jmp 0x416241
mov dword [ebp - 0x198], 1
push 1
lea ecx, [ebp - 0x1c]
call fcn.00431297
push 1
lea ecx, [ebp - 0x1c]
call fcn.00431297
cmp dword [eax], 0
je 0x416266
mov dword [ebp - 0xe4], 1
jmp 0x41626d
and dword [ebp - 0xe4], 0
cmp dword [ebp - 0xe4], 9
jg 0x416282
mov dword [ebp - 0xec], 1
jmp 0x416289
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
je 0x4162aa
cmp dword [ebp - 0x3c], 0
je 0x4162aa
mov dword [ebp - 0xf4], 1
jmp 0x4162b1
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x50], eax
push 1
lea ecx, [ebp - 0x1c]
call fcn.00431297
cmp dword [eax], 0x3b016fef
jle 0x4162d3
push 3
pop eax
test eax, eax
je 0x416310
mov eax, 0xb182
test eax, eax
je 0x416310
mov dword [ebp - 0x1d0], 0xfe1db4db
mov dword [ebp - 0x1d0], 0xffffffff
mov byte [ebp - 0xe], 0
lea eax, [ebp - 0xe]
push eax
push 0
push 0
push 1
push 0x5ab4
call fcn.0041c86a
add esp, 0x14
jmp 0x4163c5
mov dword [ebp - 0x10c], 0xc3cb8784
mov dword [ebp - 0xfc], 0x923552e2
mov dword [ebp - 0x104], 0x2e93b6ab
lea eax, [ebp - 0x1c]
push eax
push 0x46ab
push 1
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0xfc]
push eax
push 1
push 1
push 0
push 0xfa6
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.0040dddf
add esp, 0x30
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0x3c]
push eax
push 1
push 0x6fc
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x1a0]
push eax
push 0x79ed
push 1
lea eax, [ebp - 0x1c]
push eax
push 0x3f4
push 0x5b76
push 1
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x1d8]
push eax
push 0
push 0x4652
lea eax, [ebp - 0x10c]
push eax
call fcn.00409d57
add esp, 0x48
lea ecx, [ebp - 0x1c]
call fcn.0043127b
push 4
push 0x1000
mov eax, dword [ebp - 0xc]
push dword [eax + 0x10]
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x64]
add ecx, dword [eax + 0xc]
push ecx
push 0xbf6e
push 0xa50a
call fcn.00406a9b
pop ecx
pop ecx
call eax
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0xc]
push dword [eax + 0x10]
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x1e0]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x58]
call fcn.00407790
add esp, 0xc
push 0
push 0x74d4
push 0x59af
push 0
call fcn.00417939
add esp, 0x10
push 0
push 1
push 0x52f4
push 0
push 0x60ab
push 0x65be
push 0x4a4e
push 0x534a
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0xc]
push eax
push 0x6886
push 0x6c95
push 0x40d3
push 1
call fcn.0040fafb
add esp, 0x38
jmp 0x415815
jmp 0x41648d
push 1
push 0x4a31
push 0
push 0x7411
push 0
call fcn.00414284
add esp, 0x14
jmp 0x416614
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x134], eax
lea eax, [ebp + 0x28]
mov dword [ebp - 0x16c], eax
lea eax, [ebp + 0xc]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp + 0x3c]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x1ac]
movzx eax, byte [eax]
test eax, eax
je 0x41654c
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x144], eax
push dword [ebp - 0x144]
push 1
push dword [ebp - 0x14c]
push dword [ebp - 0x154]
push dword [ebp - 0x15c]
push dword [ebp - 0x164]
push 0x21ab
call fcn.00411b5d
add esp, 0x1c
jmp 0x416614
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x174]
movzx eax, byte [eax]
test eax, eax
je 0x4165fd
mov dword [ebp - 0x17c], 1
mov dword [ebp - 0x19c], 0xffffffff
mov dword [ebp - 0x194], 1
mov dword [ebp - 0x18c], 0xffffffff
mov dword [ebp - 0x184], 0xb58fe4de
push 1
push 1
push 0
push 0x5cfb
lea eax, [ebp - 0x17c]
push eax
push 1
push 0xce6
push 0x5db7
push 0x169d
lea eax, [ebp - 0x184]
push eax
push 0x4bab
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0x194]
push eax
lea eax, [ebp - 0x19c]
push eax
push 0x3381
push 0x7a2e
push 0x68b
push 0x3c9d
call fcn.0041e234
add esp, 0x48
jmp 0x416614
mov byte [ebp - 0xf], 0
movzx eax, byte [ebp - 0xf]
test eax, eax
je 0x416614
push 0x1399
call dword [0xaa5448]
pop esi
mov esp, ebp
pop ebp
ret