Function at 0x412bfa
Capabilities:
Inspect section memory permissions

Disassembly:
push 0xac
mov eax, 0x44e955
call fcn.0044bbed
mov ebx, ecx
mov dword [ebp - 0xac], ebx
mov eax, dword [ebp + 0x14]
lea esi, [ebx + 0x30]
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xa8], ecx
mov ecx, esi
push 0
mov dword [ebp - 0xb4], eax
call fcn.0040bfda
xor edi, edi
mov dword [ebp - 0x9c], edi
test eax, eax
je 0x412c54
push edi
push edi
mov ecx, esi
call fcn.0040d16c
mov ecx, esi
call fcn.0040bddb
mov edx, dword [ebp - 0xa8]
test edx, edx
je 0x412cb1
mov ecx, edx
call fcn.0040cf44
push eax
mov ecx, esi
mov dword [ebx + 0x2c], eax
call fcn.0040cf2f
push 0
mov ecx, edx
call fcn.0040bfda
mov edi, eax
push 0xfffffffffffffff0
push edi
mov dword [ebp - 0x9c], edi
call dword [0x450438]
test eax, 0x20000000
je 0x412c9c
push 9
push edi
call dword [0x4504b0]
jmp 0x412cbb
push edi
call dword [0x450410]
test eax, eax
jne 0x412cbb
xor edi, edi
mov dword [ebp - 0x9c], edi
jmp 0x412cbb
mov ecx, esi
call fcn.0040cf44
mov dword [ebx + 0x2c], eax
mov eax, dword [ebp + 0x10]
and dword [ebx + 0x14], 0
mov dword [ebx + 0x10], eax
cmp eax, 4
jne 0x4131a1
test edi, edi
je 0x4133bd
push 0xfffffffffffffff0
push edi
call dword [0x450438]
test eax, 0x20000000
jne 0x4133bd
cmp dword [ebp - 0x98], 0x46
push 0x4b
pop eax
mov ecx, eax
mov dword [ebp - 0xa4], eax
cmovge ecx, dword [ebp - 0x98]
lea eax, [ebp - 0x64]
push eax
push edi
mov dword [ebp - 0xb8], ecx
call dword [0x4503a0]
test eax, eax
je 0x412d45
lea eax, [ebp - 0x54]
xorps xmm0, xmm0
push eax
push edi
movups xmmword [ebp - 0x54], xmm0
call dword [0x450394]
test eax, eax
je 0x412d45
mov eax, dword [ebp - 0x60]
mov edx, dword [ebp - 0x64]
add eax, 4
add edx, dword [ebp - 0x54]
add eax, dword [ebp - 0x50]
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x60], eax
jmp 0x412d4b
mov eax, dword [ebp - 0x60]
mov edx, dword [ebp - 0x64]
push 6
lea ecx, [edx + 0x18]
add eax, 0x10
mov dword [ebp - 0x38], ecx
lea edi, [ebp - 0x94]
pop ecx
push 1
mov dword [ebp - 0xa0], eax
xor eax, eax
push 0x470014
push dword [ebp - 0xb4]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x94]
call fcn.0040690f
and dword [ebp - 4], 0
lea edi, [ebp - 0x7c]
push 6
pop ecx
xor eax, eax
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x7c]
call fcn.004068d3
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 1
call fcn.00401a9d
cmp eax, 1
jbe 0x412db8
push 1
call fcn.004069af
mov dword [ebp - 0x98], eax
jmp 0x412dc2
mov dword [ebp - 0x98], 0x47001c
mov edi, dword [ebp - 0x9c]
push 0xffffffffffffffec
push edi
call dword [0x450438]
push ecx
push edi
mov edi, dword [ebp - 0xb8]
and eax, 8
push eax
push 0x80000000
push dword [ebp - 0xa0]
mov ecx, esi
push dword [ebp - 0x38]
push edi
push 0xc8
push dword [ebp - 0x98]
push 0x470034
call fcn.0040bb1e
mov ecx, dword [ebp - 0xa8]
push eax
mov dword [ebp - 0xb4], eax
call fcn.0040baa3
movsd xmm1, qword [0x49a808]
push ecx
push str.Arial
push ecx
push 0x190
mov ecx, esi
call fcn.0040cf4b
push 0xffffff
mov ecx, esi
call fcn.0040cdf3
push ecx
push 0xffffffffffffffff
lea eax, [edi - 0x2d]
xor edi, edi
push eax
push 0xb4
push 0x23
push 0xa
push edi
lea ecx, [ebp - 0x94]
call fcn.004069af
push eax
mov ecx, esi
call fcn.0040f732
push eax
mov ecx, esi
mov dword [ebp - 0xb8], eax
call fcn.0040bfda
push eax
mov dword [ebp - 0xa0], eax
call dword [0x4503b0]
push 1
push 0x46fbcc
push edi
lea ecx, [ebp - 0x94]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x40], edi
call fcn.004069af
push eax
lea ecx, [ebp - 0x7c]
call fcn.00406a13
push 0x10
pop edx
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x9c], edx
mov esi, edi
call fcn.00401a9d
test eax, eax
je 0x412f28
push 0x4b
pop ebx
lea eax, [ebp - 0x44]
mov edi, ebx
push eax
push esi
lea ecx, [ebp - 0x7c]
call fcn.004069af
mov ecx, eax
call fcn.00406b76
push eax
push esi
lea ecx, [ebp - 0x7c]
call fcn.004069af
push eax
push dword [ebp - 0xa8]
call dword [0x4500f4]
mov edx, dword [ebp - 0x9c]
test eax, eax
je 0x412f0f
mov ebx, dword [ebp - 0x44]
add ebx, 0x14
cmp ebx, edi
cmovle ebx, edi
cmp dword [ebp - 0x40], edx
jle 0x412f0f
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x9c], edx
lea ecx, [ebp - 0x7c]
inc esi
call fcn.00401a9d
cmp esi, eax
jb 0x412ebf
mov dword [ebp - 0xa4], ebx
mov ebx, dword [ebp - 0xac]
lea ecx, [ebp - 0x7c]
call fcn.00401a9d
push dword [ebp - 0xa8]
mov edi, eax
push dword [ebp - 0xa0]
imul edi, edx
lea esi, [edi + 0x2d]
mov dword [ebp - 0x9c], esi
call dword [0x4503b4]
mov eax, dword [ebp - 0xa4]
push 0x212
push esi
mov esi, dword [0x4503a4]
push eax
xor eax, eax
push eax
push eax
push eax
push dword [ebp - 0xb4]
call esi
push 0x202
push edi
mov edi, dword [ebp - 0xa4]
lea eax, [edi - 0x14]
push eax
xor eax, eax
push eax
push eax
push eax
push dword [ebp - 0xa0]
call esi
push 0x10
call dword [0x4505d4]
mov ecx, eax
mov dword [ebp - 0xac], ecx
test ecx, ecx
je 0x412fca
mov edi, ecx
xor eax, eax
push 0xe200b
push dword [ebp - 0x9c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov edi, dword [ebp - 0xa4]
push edi
call fcn.00401579
mov esi, eax
mov dword [ebp - 0xa0], eax
jmp 0x412fd2
xor esi, esi
mov dword [ebp - 0xa0], esi
mov eax, dword [esi + 8]
and dword [esi + 8], 0
test eax, eax
jne 0x4130de
xorps xmm0, xmm0
lea ecx, [ebp - 0x3c]
push esi
movlpd qword [ebp - 0x3c], xmm0
call fcn.00401330
lea eax, [ebp - 0xac]
mov dword [ebp - 0xac], 0xff000000
push eax
lea ecx, [ebp - 0x50]
call fcn.004012e4
push dword [ebp - 0x9c]
push edi
push ecx
push ecx
push eax
lea ecx, [ebp - 0x3c]
call fcn.0040142f
push dword [ebp - 0x4c]
mov esi, dword [0x4505d0]
mov dword [ebp - 0x50], 0x49a79c
call esi
and dword [ebp - 0xb0], 0
lea eax, [ebp - 0xb0]
push eax
push 0
push ecx
mov dword [esp], 0x40000000
push 0xffffffffffffffff
call dword [0x45060c]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0x9c]
add eax, 0xfffffffe
push eax
lea eax, [edi - 2]
push eax
push ecx
push ecx
lea eax, [ebp - 0xb0]
push eax
lea ecx, [ebp - 0x3c]
call fcn.004013c8
push dword [ebp - 0xb0]
call dword [0x4505bc]
movaps xmm0, xmmword [0x49a890]
lea eax, [ebp - 0xac]
and dword [ebp - 0x20], 0
lea ecx, [ebp - 0x50]
push eax
movups xmmword [ebp - 0x34], xmm0
mov dword [ebp - 0x24], 0x20
mov dword [ebp - 0xac], 0xff6060ff
call fcn.004012e4
push 0
push 3
lea ecx, [ebp - 0x34]
push ecx
push dword [eax + 4]
push dword [ebp - 0x3c]
call dword [0x4505fc]
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0x49a79c
call esi
push dword [ebp - 0x3c]
call dword [0x450624]
mov esi, dword [ebp - 0xa0]
push 0
push 0
lea edi, [ebx + 0x30]
push esi
mov ecx, edi
call fcn.0040cc33
mov eax, dword [esi]
mov ecx, esi
push 1
call dword [eax]
mov eax, dword [ebp - 0xa4]
push ecx
push 0xffffffffffffffff
push 0x14
add eax, 0xffffffdd
mov ecx, edi
push eax
push 6
push 0x23
push dword [ebp - 0x98]
call fcn.0040f732
movsd xmm0, qword [0x49a820]
sub esp, 0xc
mov esi, eax
movsd qword [esp + 4], xmm0
push 0
push ecx
push 0x190
push 0xffffffffffffffff
mov ecx, edi
call fcn.004105f5
push 0x1b
pop eax
mov word [ebp - 0x1a], ax
mov ecx, edi
mov eax, dword [ebp - 0xb8]
push 0xd
mov word [ebp - 0x18], ax
pop eax
mov word [ebp - 0x14], ax
lea eax, [ebp - 0x1c]
push 2
push eax
mov byte [ebp - 0x1c], 1
mov byte [ebp - 0x16], 1
mov word [ebp - 0x12], si
call fcn.0040cbf3
push 1
push 4
mov ecx, edi
call fcn.0040d16c
mov eax, dword [ebp - 0xb4]
push ebx
push eax
push 0x40b5a2
push eax
call dword [0x450098]
lea ecx, [ebp - 0x7c]
call fcn.00406953
lea ecx, [ebp - 0x94]
call fcn.00406953
jmp 0x4133bd
push ecx
push edi
push 0xffffffffffffffff
push 0x80000000
push 0xffffffffffffffff
push 0xffffffffffffffff
push dword [ebp - 0x98]
mov ecx, esi
push 0x168
push 0x46f8f4
push 0x470054
call fcn.0040bb1e
movsd xmm1, qword [0x49a808]
push ecx
push str.Arial
push ecx
push 0x190
mov ecx, esi
call fcn.0040cf4b
push dword [ebx + 0x24]
mov ecx, esi
call fcn.0040cdf3
push ecx
push dword [ebx + 0x28]
push dword [ebx + 0x20]
push dword [ebx + 0x1c]
push dword [ebx + 0x18]
push dword [ebp - 0x98]
push 0x168
call fcn.004122ba
push 0
mov ecx, esi
call fcn.0040bfda
push ecx
mov edx, edi
mov dword [ebp - 0xac], eax
mov ecx, eax
call fcn.004083fc
mov ecx, dword [ebp - 0xa8]
test ecx, ecx
je 0x41323a
push dword [ebp - 0xac]
call fcn.0040baa3
mov edi, dword [ebp - 0x98]
push ecx
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi - 0x41]
push eax
push 0x140
push 0x14
push 0x14
push dword [ebp - 0xb4]
call fcn.0040f732
mov dword [ebx], eax
lea ecx, [edi - 0x23]
mov eax, dword [ebp + 0x10]
mov edi, 0xe1
cmp eax, 1
je 0x413281
cmp eax, 2
je 0x413281
cmp eax, 3
jne 0x413284
push 0x1e
pop edi
jmp 0x413337
push 0x42
pop edi
test eax, eax
jne 0x4132a8
push ecx
push 0x10000001
push 0x19
push 0x50
push ecx
push edi
push 0x47007c
mov ecx, esi
call fcn.0040f120
mov dword [ebx + 4], eax
jmp 0x4133a3
cmp eax, 1
jne 0x4132e8
push ecx
push 0x10000001
push 0x19
push 0x50
push ecx
push edi
push 0x470084
mov ecx, esi
call fcn.0040f120
push ecx
push 0xffffffffffffffff
mov dword [ebx + 4], eax
mov eax, dword [ebp - 0x98]
push 0x19
push 0x50
add eax, 0xffffffdd
push eax
lea eax, [edi*2 + 0x50]
push eax
push 0x47008c
jmp 0x413326
cmp eax, 2
jne 0x413332
push ecx
push 0x10000001
push 0x19
push 0x50
push ecx
push edi
push 0x47007c
mov ecx, esi
call fcn.0040f120
push ecx
push 0xffffffffffffffff
mov dword [ebx + 4], eax
mov eax, dword [ebp - 0x98]
push 0x19
push 0x50
add eax, 0xffffffdd
push eax
lea eax, [edi*2 + 0x50]
push eax
push 0x470094
mov ecx, esi
call fcn.0040f120
mov dword [ebx + 8], eax
jmp 0x4133a3
cmp eax, 3
jne 0x4133a3
push ecx
push 0x10000001
push 0x19
push 0x50
push ecx
push edi
push 0x470084
mov ecx, esi
call fcn.0040f120
push ecx
push 0xffffffffffffffff
mov dword [ebx + 4], eax
mov ecx, esi
mov eax, dword [ebp - 0x98]
push 0x19
push 0x50
add eax, 0xffffffdd
push eax
lea eax, [edi*2 + 0x50]
push eax
push 0x47008c
call fcn.0040f120
push ecx
push 0xffffffffffffffff
mov dword [ebx + 8], eax
mov ecx, esi
mov eax, dword [ebp - 0x98]
push 0x19
push 0x50
add eax, 0xffffffdd
push eax
imul eax, edi, 3
add eax, 0xa0
push eax
push 0x470094
call fcn.0040f120
mov dword [ebx + 0xc], eax
push 7
push 5
mov ecx, esi
call fcn.0040d16c
push 0x80
push dword [ebx + 4]
mov ecx, esi
call fcn.0041083d
mov eax, ebx
call fcn.0044bba8
ret 0x20