Function at 0x42056e
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x350
movzx eax, byte [ebp + 0x38]
test eax, eax
je 0x421a8d
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x2bc], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x250], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x210], eax
lea eax, [ebp + 0x54]
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp + 0x5c]
mov dword [ebp - 0x208], eax
lea eax, [ebp + 0x60]
mov dword [ebp - 0x2ac], eax
lea eax, [ebp + 0x44]
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x2c0], eax
mov eax, dword [ebp + 0x40]
mov dword [ebp - 0x2c8], eax
mov eax, dword [ebp + 0x50]
mov dword [ebp - 0x298], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x1a0]
movzx eax, byte [eax]
test eax, eax
je 0x4209d4
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x270], eax
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x288], eax
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x1b0]
movzx eax, byte [eax]
test eax, eax
je 0x420976
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x34]
mov dword [eax], 6
jmp 0x420702
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x34]
mov dword [ecx], eax
mov eax, dword [ebp - 0x34]
cmp dword [eax], 2
jge 0x420974
mov dword [ebp - 0xb0], 0xffffffff
mov dword [ebp - 0x68], 0x2d505bc9
cmp dword [ebp - 0xb0], 0
je 0x42075f
mov dword [ebp - 0x2c4], 1
push dword [ebp - 0x130]
push 0
call fcn.004281d8
pop ecx
pop ecx
push 0
push 0x30e5
lea eax, [ebp - 0x2c4]
push eax
push dword [ebp - 0x34]
call fcn.004258e0
add esp, 0x10
jmp 0x42096f
mov dword [ebp - 0x8c], 9
mov dword [ebp - 0x1e0], 0x4aec7014
mov dword [ebp - 0x64], 0
jmp 0x420783
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x420799
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x2b8], 0
jmp 0x42077c
mov dword [ebp - 0x8c], 2
cmp dword [ebp - 0x8c], 0
je 0x420867
cmp dword [ebp - 0x68], 0
jne 0x420814
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2b8]
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x32c], eax
push 3
mov ecx, dword [ebp - 0x74]
call fcn.00436be9
cmp dword [eax], 0
je 0x4207f3
cmp dword [ebp - 0x68], 0
je 0x4207f3
mov dword [ebp - 0x174], 1
jmp 0x4207fa
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x174]
sub eax, dword [ebp - 0x8c]
cmp eax, 1
jbe 0x420814
and dword [ebp - 0x17c], 0
jmp 0x42081e
mov dword [ebp - 0x17c], 1
mov eax, dword [ebp - 0x17c]
neg eax
sub eax, 0xa836
cmp eax, dword [ebp - 0x1e0]
jge 0x42083f
mov dword [ebp - 0xa8], 1
jmp 0x420846
and dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0x130]
mov ecx, dword [ebp - 0xa8]
sub ecx, dword [eax]
imul eax, ecx, 7
test eax, eax
je 0x420867
mov dword [ebp - 0x280], 1
jmp 0x42086e
and dword [ebp - 0x280], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2b8]
mov dword [ebp - 0x300], eax
push 1
mov ecx, dword [ebp - 0x74]
call fcn.00436be9
mov ecx, dword [ebp - 0x1e8]
mov ecx, dword [ecx]
add ecx, dword [eax]
cmp ecx, 0xfffffff8
jne 0x4208a6
mov dword [ebp - 0x118], 1
jmp 0x4208ad
and dword [ebp - 0x118], 0
cmp dword [ebp - 0x118], 0xc97de2e5
jbe 0x4208c5
mov dword [ebp - 0x88], 1
jmp 0x4208cc
and dword [ebp - 0x88], 0
push 1
mov ecx, dword [ebp - 0x74]
call fcn.00436be9
mov ecx, dword [ebp - 0x88]
mov dword [eax], ecx
cmp dword [ebp - 0x88], 0
jne 0x4208f3
mov dword [ebp - 0x150], 1
jmp 0x4208fa
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0xb0]
cmp eax, dword [ebp - 0x150]
jle 0x420914
mov dword [ebp - 0xb8], 1
jmp 0x42091b
and dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0x2a8]
mov eax, dword [eax]
cmp dword [ebp - 0xb8], eax
jne 0x420937
mov dword [ebp - 0x120], 1
jmp 0x42093e
and dword [ebp - 0x120], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2b8]
cmp dword [ebp - 0x120], eax
jle 0x42095f
mov dword [ebp - 0xc0], 1
jmp 0x420966
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x68], eax
jmp 0x4206f7
jmp 0x4209cf
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x1f8], eax
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x58]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0xc]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x200]
mov edx, dword [edx]
mov dword [eax + ecx*4], edx
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
inc eax
mov ecx, dword [ebp - 0x58]
mov ecx, dword [ecx]
mov dword [ecx + 0xc], eax
jmp 0x421a88
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x25c]
movzx eax, byte [eax]
test eax, eax
je 0x421a41
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x5c], eax
push 0x6dec
push 0x13e0
push 0
push 0x65ad
push 1
call fcn.00418947
add esp, 0x14
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x5c]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 4], eax
push 2
lea ecx, [ebp - 0x194]
call fcn.00436afb
mov dword [ebp - 0x228], 0x5a83d87e
push 1
lea ecx, [ebp - 0x2f8]
call fcn.00436afb
mov dword [ebp - 0x30c], 0x66fa4bc4
push 0x1561
push 1
push 0x11ad
push 0x6891
push 0x771f
push 0
push 0x1030
push 0
push 1
push 0
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x194]
push eax
push 0x2254
push 0x29be
call fcn.00415e24
add esp, 0x38
mov dword [ebp - 0x48], 0
jmp 0x420acc
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x420ae8
push dword [ebp - 0x48]
lea ecx, [ebp - 0x2f8]
call fcn.00436be9
mov dword [eax], 1
jmp 0x420ac5
push 1
lea ecx, [ebp - 0x194]
call fcn.00436be9
and dword [eax], 0
jmp 0x420b1e
push 1
lea ecx, [ebp - 0x194]
call fcn.00436be9
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x168]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x168]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x194]
call fcn.00436be9
cmp dword [eax], 0xfffffffd
jle 0x420bc5
mov dword [ebp - 0x220], 0x52aa0a5d
mov dword [ebp - 0x264], 0x51
mov dword [ebp - 0x26c], 0xfffffff7
lea eax, [ebp - 0x264]
push eax
push 0x1e23
push 0x3a6
lea eax, [ebp - 0x220]
push eax
push 0x9e1
push 0x57ce
push 0x4871
push 1
lea eax, [ebp - 0x26c]
push eax
push 0x79b3
lea eax, [ebp - 0x194]
push eax
push 1
lea eax, [ebp - 0x2f8]
push eax
push 0x6c8b
push 0
lea eax, [ebp - 0x228]
push eax
push 0x1de5
push 1
push 0
push 0x7153
push 0x7456
call fcn.00419342
add esp, 0x54
jmp 0x420afa
lea ecx, [ebp - 0x2f8]
call fcn.00436bcd
lea ecx, [ebp - 0x194]
call fcn.00436bcd
and dword [ebp - 0x80], 0
jmp 0x420bf1
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 4]
add eax, 0x28
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x80], eax
jge 0x421a3f
mov dword [ebp - 0x274], 0xbf5c
mov dword [ebp - 0xd0], 0xfffffffb
push 3
lea ecx, [ebp - 0x2e0]
call fcn.00436afb
mov dword [ebp - 0x128], 0x99e885dc
mov dword [ebp - 0xc8], 0xb243e5ec
mov dword [ebp - 0xa0], 0x3372585f
push 0x2754
push 0x7554
push 0
push 0
push 0x6b0
push 0x742
push 1
push 0x63a6
push 0xc6a
push 0xe95
push 0x6c6e
push 0x7c01
lea eax, [ebp - 0x2e0]
push eax
push 1
push 0x46e1
push 0x5857
push 0x5445
push 0x596e
push 1
lea eax, [ebp - 0x44]
push eax
push 0x74cf
push 0x1c8c
push 0x79eb
push 0x5421
push 1
call fcn.00415240
add esp, 0x64
mov dword [ebp - 0x44], 0
jmp 0x420cc6
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x420cdc
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x350], 0x4bab92a1
jmp 0x420cbf
push 0
push 0x268a
lea eax, [ebp - 0x128]
push eax
push 1
push 0x3a3a
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x274]
push eax
push 0x5b32
push 0x3507
push 1
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0xc8]
push eax
push 0x6ecd
call fcn.0042cf84
add esp, 0x38
push 0
lea eax, [ebp - 0xc8]
push eax
push 0x69ae
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0x128]
push eax
push 1
push 0x1078
push 0x889
push 0x276f
lea eax, [ebp - 0x2e0]
push eax
call fcn.00413757
add esp, 0x2c
lea ecx, [ebp - 0x2e0]
call fcn.00436bcd
push 0x532a
push 0
push 1
push 0x7e04
push 0x7a62
push 1
push 0x2c6f
push 1
push 0x3fe4
call fcn.0041a660
add esp, 0x24
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x24]
and eax, 0x20000000
je 0x420dbd
mov dword [ebp - 0xd8], 1
jmp 0x420dc4
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x24]
and eax, 0x40000000
je 0x420de9
mov dword [ebp - 0x12c], 1
jmp 0x420df0
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x294], eax
mov dword [ebp - 0x24], 0x62d5e48d
mov dword [ebp - 0x24], 0
jmp 0x420e13
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffe4
je 0x421036
mov dword [ebp - 0xc], 0
jmp 0x420e2d
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 1
jge 0x420e43
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x90], 0xffffffff
jmp 0x420e26
mov dword [ebp - 0xc], 0
jmp 0x420e53
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 2
jge 0x420e66
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x70], 0x8bac04ee
jmp 0x420e4c
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x70], 0
jmp 0x420e8b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x70]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x70], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x70], 0
jl 0x421031
mov dword [ebp - 0x3c], 0xe6e7f737
push 3
lea ecx, [ebp - 0x2ec]
call fcn.00436afb
mov dword [ebp - 0x230], 9
push 0x5407
lea eax, [ebp - 0x314]
push eax
push 0
push 0
lea eax, [ebp - 0x2ec]
push eax
call fcn.00416707
add esp, 0x14
mov dword [ebp - 0x3c], 0
jmp 0x420ee9
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jg 0x421000
mov dword [ebp - 0x27c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x70]
cmp dword [ebp + eax*4 - 0x90], 0
je 0x420f37
push 2
lea ecx, [ebp - 0x2ec]
call fcn.00436be9
mov dword [eax], 0xfffffffc
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x420f37
mov dword [ebp - 0xe8], 1
jmp 0x420f3e
and dword [ebp - 0xe8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x70]
mov eax, dword [ebp + eax*4 - 0x90]
mov dword [ebp - 0x31c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x70]
cmp dword [ebp + eax*4 - 0x90], 0
jne 0x420f74
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x70], 0
cmp dword [ebp - 0x24], 0
je 0x420f8c
cmp dword [ebp - 0x3c], 0
je 0x420f8c
mov dword [ebp - 0xe0], 1
jmp 0x420f93
and dword [ebp - 0xe0], 0
cmp dword [ebp - 0xe0], 1
jl 0x420fa8
mov dword [ebp - 0x158], 1
jmp 0x420faf
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x158]
add eax, 0x66c1
cmp dword [ebp - 0xe8], eax
jne 0x420fce
mov dword [ebp - 0x138], 1
jmp 0x420fd5
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x230], eax
lea eax, [ebp - 0x27c]
push eax
push 0
lea eax, [ebp - 0x24]
push eax
push 0x2b46
call fcn.004277f6
add esp, 0x10
jmp 0x420ee2
mov byte [ebp - 0x1d], 0
lea eax, [ebp - 0x1d]
push eax
push 0x5a9a
push 0
push 0x615d
push 0x5fdd
call fcn.00436896
add esp, 0x14
lea ecx, [ebp - 0x2ec]
call fcn.00436bcd
jmp 0x420e76
jmp 0x420e0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x24]
and eax, 0x80000000
je 0x42104f
mov dword [ebp - 0xf0], 1
jmp 0x421056
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x258], eax
mov dword [ebp - 0x38], 9
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x110], 6
mov dword [ebp - 0xa4], 3
mov dword [ebp - 0x60], 0xcc424770
mov dword [ebp - 0x28], 0x98ab5457
mov dword [ebp - 0x170], 0x12af0488
mov dword [ebp - 0xac], 0
mov dword [ebp - 0x78], 1
mov dword [ebp - 0x238], 0x92d14b43
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x328], eax
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x30], eax
jge 0x4210db
mov dword [ebp - 0x178], 1
jmp 0x4210e2
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
sub eax, dword [ebp - 0x30]
cmp eax, 0x3a74adf2
jge 0x421104
mov dword [ebp - 0xf8], 1
jmp 0x42110b
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0xf8]
je 0x421125
cmp dword [ebp - 0x28], 0
jne 0x421125
and dword [ebp - 0x140], 0
jmp 0x42112f
mov dword [ebp - 0x140], 1
cmp dword [ebp - 0x140], 0xa5fef9d7
jne 0x421147
mov dword [ebp - 0x100], 1
jmp 0x42114e
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x100]
sub eax, dword [ebp - 0x30]
cmp eax, 0x950ba1bf
jb 0x42116a
mov dword [ebp - 0x160], 1
jmp 0x421171
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x160], eax
jle 0x421188
mov dword [ebp - 0x108], 1
jmp 0x42118f
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x108]
sub eax, 0x60e7
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0x110], 0
je 0x42126f
mov dword [ebp - 0x148], 0x4380d33b
mov dword [ebp - 0xb4], 0x4965da1f
mov dword [ebp - 0x284], 0xc113e7be
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x28]
push eax
push 0
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x238]
push eax
push 1
lea eax, [ebp - 0x38]
push eax
push 0
call fcn.0041b843
add esp, 0x30
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x284]
push eax
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0xac]
push eax
push 1
push 0
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x38]
push eax
push 0xc8
lea eax, [ebp - 0xb4]
push eax
push 0x6242
call fcn.004126c6
add esp, 0x40
jmp 0x42129a
push 0x7858
push 1
push 0x306d
push 0
push 0x20ad
push 0x732
push 0
push 0x2a82
push 1
push 1
call fcn.0041b23b
add esp, 0x28
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x24]
and eax, 0x2000000
je 0x421551
push 0x4000
mov eax, dword [ebp - 4]
push dword [eax + 0x10]
mov eax, dword [ebp - 4]
push dword [eax + 8]
push 0x795f
push 0x6f8a
call fcn.00406c4d
pop ecx
pop ecx
call eax
mov dword [ebp - 0x40], 0
push 2
lea ecx, [ebp - 0x188]
call fcn.00436afb
mov dword [ebp - 0xf4], 0xd7d41305
mov dword [ebp - 0x7c], 0xd907c4e7
mov dword [ebp - 0x248], 0x5bbb785a
push 0
push 1
lea eax, [ebp - 8]
push eax
push 0x588
push 1
lea eax, [ebp - 0x188]
push eax
push 0x584a
call fcn.00415992
add esp, 0x1c
mov dword [ebp - 8], 0
jmp 0x421331
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
jge 0x421344
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x50], 0xea4d59ff
jmp 0x42132a
mov dword [ebp - 8], 0
jmp 0x421354
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 4
jge 0x42136a
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x348], 0x74d9
jmp 0x42134d
mov dword [ebp - 0x40], 1
cmp dword [ebp - 0x40], 0
je 0x42152e
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x330], eax
push 0
lea ecx, [ebp - 0x188]
call fcn.00436be9
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x50]
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0xf4], eax
jle 0x4213b2
mov dword [ebp - 0xbc], 1
jmp 0x4213b9
and dword [ebp - 0xbc], 0
push 1
lea ecx, [ebp - 0x188]
call fcn.00436be9
mov eax, dword [eax]
add eax, dword [ebp - 0xbc]
je 0x4213ee
push 1
lea ecx, [ebp - 0x188]
call fcn.00436be9
cmp dword [eax], 0
je 0x4213ee
mov dword [ebp - 0xc4], 1
jmp 0x4213f5
and dword [ebp - 0xc4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x50]
cmp dword [ebp - 0xc4], eax
jne 0x421413
mov dword [ebp - 0xcc], 1
jmp 0x42141a
and dword [ebp - 0xcc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x50]
cmp dword [ebp - 0xcc], eax
jl 0x421438
mov dword [ebp - 0xd4], 1
jmp 0x42143f
and dword [ebp - 0xd4], 0
cmp dword [ebp - 0xd4], 0x8636eebc
ja 0x421457
mov dword [ebp - 0x240], 1
jmp 0x42145e
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x338], eax
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
push 1
lea ecx, [ebp - 0x188]
call fcn.00436be9
push 3
pop eax
cmp eax, 0xf55f5dd
jb 0x421496
xor eax, eax
inc eax
je 0x421496
mov dword [ebp - 0xdc], 1
jmp 0x42149d
and dword [ebp - 0xdc], 0
cmp dword [ebp - 0xdc], 0xffffffff
je 0x4214b2
mov dword [ebp - 0xe4], 1
jmp 0x4214b9
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0x40]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x50]
mov dword [ebp - 0x324], eax
push 1
lea ecx, [ebp - 0x188]
call fcn.00436be9
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x348], 5
ja 0x4214f4
mov dword [ebp - 0x28c], 1
jmp 0x4214fb
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x304], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x348]
mov dword [ebp - 0x308], eax
mov eax, 0xd0b827be
test eax, eax
je 0x42152e
mov dword [ebp - 0xec], 1
jmp 0x421535
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0xf4], eax
lea ecx, [ebp - 0x188]
call fcn.00436bcd
jmp 0x420be1
mov dword [ebp - 0x1c], 5
mov dword [ebp - 0x84], 0xd832937a
mov dword [ebp - 0x114], 0xbf199314
mov dword [ebp - 0x1c], 0
jmp 0x42157c
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x19
jg 0x4218b1
mov dword [ebp - 0x10], 0xfffffffe
mov dword [ebp - 0x134], 0x5ec41505
mov dword [ebp - 0x18], 0x3f36
mov dword [ebp - 0x254], 0x297f1ff7
mov dword [ebp - 0x4c], 0
jmp 0x4215b8
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x4215ce
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x9c], 0xfffffffc
jmp 0x4215b1
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xfc], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xfc]
mov dword [ebp + eax - 0x9c], ecx
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x84], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x9c], 0
jne 0x421616
push 3
pop eax
test eax, eax
jne 0x421616
and dword [ebp - 0x144], 0
jmp 0x421620
mov dword [ebp - 0x144], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9c]
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x30467731
jg 0x42164b
mov dword [ebp - 0x104], 1
jmp 0x421652
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x104], eax
jle 0x42166c
mov dword [ebp - 0x10c], 1
jmp 0x421673
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
jne 0x4216a1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x9c], 0
jne 0x4216a1
and dword [ebp - 0x11c], 0
jmp 0x4216ab
mov dword [ebp - 0x11c], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9c]
cmp dword [ebp - 0x11c], eax
jle 0x4216cc
mov dword [ebp - 0x124], 1
jmp 0x4216d3
and dword [ebp - 0x124], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9c]
cmp dword [ebp - 0x124], eax
jne 0x4216f4
mov dword [ebp - 0x29c], 1
jmp 0x4216fb
and dword [ebp - 0x29c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9c]
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x134], 0
jl 0x421723
mov dword [ebp - 0x13c], 1
jmp 0x42172a
and dword [ebp - 0x13c], 0
cmp dword [ebp - 0x13c], 0xcdf5ef88
jne 0x421742
mov dword [ebp - 0x14c], 1
jmp 0x421749
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0x9c]
cmp eax, dword [ebp - 0x14c]
jne 0x421777
mov dword [ebp - 0x154], 1
jmp 0x42177e
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x154]
cmp eax, dword [ebp - 0x1c]
jl 0x421798
mov dword [ebp - 0x15c], 1
jmp 0x42179f
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x15c], eax
jne 0x4217b6
mov dword [ebp - 0x2a4], 1
jmp 0x4217bd
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x10], 0
je 0x42189b
push 2
lea ecx, [ebp - 0x2d4]
call fcn.00436afb
mov dword [ebp - 0x54], 0
jmp 0x4217ed
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x421809
push dword [ebp - 0x54]
lea ecx, [ebp - 0x2d4]
call fcn.00436be9
mov dword [eax], 0x2a05008d
jmp 0x4217e6
mov dword [ebp - 0x10], 0
jmp 0x421819
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jg 0x42188e
mov dword [ebp - 0x18], 0
jmp 0x42182f
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jg 0x42188c
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x9c]
mov dword [ebp - 0x334], eax
push 0
lea ecx, [ebp - 0x2d4]
call fcn.00436be9
push 1
lea ecx, [ebp - 0x2d4]
call fcn.00436be9
mov eax, 0xe8160a87
cmp eax, 0xe0689bb5
jbe 0x421877
mov dword [ebp - 0x164], 1
jmp 0x42187e
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x254], eax
jmp 0x421828
jmp 0x421812
lea ecx, [ebp - 0x2d4]
call fcn.00436bcd
jmp 0x4218ac
mov byte [ebp - 0x11], 0
lea eax, [ebp - 0x11]
push eax
push 0
call fcn.0042a3c9
pop ecx
pop ecx
jmp 0x421575
push 0x28fc
push 0x8b0
push 0x3945
push 0x63de
push 0x18f2
lea eax, [ebp - 0x1cc]
push eax
push dword [ebp - 0x258]
push 0
push 0
push dword [ebp - 0x294]
push 1
push 0xcb6
push 0x47dd
push 0x1e3a
push 0x60ad
push 0x66fd
push dword [ebp - 0x19c]
push 0x4eba
push dword [ebp - 4]
call fcn.0041cf3e
add esp, 0x4c
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x1c4], 0x16542076
mov dword [ebp - 0x2c], 0xfffffff7
jmp 0x421933
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffec
jle 0x4219cc
mov dword [ebp - 0x1bc], 0x3c34eea2
mov dword [ebp - 0x1b4], 0x65653d42
mov dword [ebp - 0x1ac], 0x76427603
mov dword [ebp - 0x1a4], 1
push 0xbbc
push 0x531b
push 0x5fa1
lea eax, [ebp - 0x1a4]
push eax
push 0xcbf
lea eax, [ebp - 0x2c]
push eax
push 0x6662
lea eax, [ebp - 0x1ac]
push eax
push 0x27f3
push 1
lea eax, [ebp - 0x1b4]
push eax
push 0x838
push 0x1d85
push 0
push 0x24ff
push 0
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x1c4]
push eax
call fcn.0042aeac
add esp, 0x48
jmp 0x42192c
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x16c]
push eax
lea eax, [ebp - 0x5c]
push eax
push 0
call fcn.004310d2
add esp, 0x10
cmp dword [ebp - 0x16c], 0
jbe 0x421a3a
push 0x5f18
push 0x20c0
push 0
push 0x4203
push 1
push 0x585d
call fcn.0041fc7b
add esp, 0x18
lea eax, [ebp - 0x318]
push eax
push dword [ebp - 0x1cc]
push dword [ebp - 0x16c]
mov eax, dword [ebp - 4]
push dword [eax + 8]
push 0x795f
push 0x7618
call fcn.00406c4d
pop ecx
pop ecx
call eax
jmp 0x420be1
jmp 0x421a88
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x1fc], eax
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x1f4]
mov eax, dword [eax]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1fc]
mov ecx, dword [ecx]
mov eax, dword [eax + 0x20]
mov dword [ecx], eax
jmp 0x421b1e
mov eax, dword [ebp + 0x4c]
mov dword [ebp - 0x234], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x204], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x214], eax
mov eax, dword [ebp + 0x3c]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x224], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x244], eax
mov eax, dword [ebp + 0x48]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp + 0x58]
mov dword [ebp - 0x21c], eax
push dword [ebp - 0x204]
push dword [ebp - 0x20c]
push dword [ebp - 0x214]
push dword [ebp - 0x21c]
push dword [ebp - 0x224]
push dword [ebp - 0x22c]
push dword [ebp - 0x234]
push dword [ebp - 0x23c]
push dword [ebp - 0x244]
push 0
call fcn.0040aaa0
add esp, 0x28
mov esp, ebp
pop ebp
ret