Function at 0x416200
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x240
push esi
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x417196
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x134], eax
lea eax, [ebp + 0x38]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x124], eax
lea eax, [ebp + 0x20]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x13c]
movzx eax, byte [eax]
test eax, eax
je 0x41715c
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x120]
movzx eax, byte [eax]
test eax, eax
je 0x416312
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0xc4], eax
push 1
mov ecx, dword [ebp - 0xc4]
call fcn.00437dff
cmp dword [eax], 0xfffc
je 0x4162f1
mov dword [ebp - 0xf8], 1
jmp 0x4162f8
and dword [ebp - 0xf8], 0
push 2
mov ecx, dword [ebp - 0xc4]
call fcn.00437dff
mov ecx, dword [ebp - 0xf8]
mov dword [eax], ecx
jmp 0x41715a
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x6c], 0xfffffff7
mov dword [ebp - 0x6c], 0xffffffeb
jmp 0x41634a
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xfffffff1
jl 0x416399
mov dword [ebp - 0x154], 1
mov byte [ebp - 0x36], 0
push 1
push 0
lea eax, [ebp - 0x36]
push eax
push 0x7244
push 0x3a0a
push 1
call fcn.0043417a
add esp, 0x18
push 1
push 0x3245
push 0x6413
lea eax, [ebp - 0x154]
push eax
push 0
call fcn.004316f4
add esp, 0x14
jmp 0x416343
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 4]
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x1dc], 0xb57fd546
mov dword [ebp - 0x1d8], 0xb57fd546
mov dword [ebp - 0x1d4], 0xb57fd546
mov dword [ebp - 0x1d0], 0xb57fd546
lea ecx, [ebp - 0x79]
call fcn.00437e0e
push eax
lea eax, [ebp - 0x1cc]
push eax
lea eax, [ebp - 0x1dc]
push eax
lea ecx, [ebp - 0x240]
call fcn.00437e11
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x200]
call fcn.00437dbd
mov dword [ebp - 0x48], 0x2bd7b1c2
mov dword [ebp - 0x48], 0
jmp 0x416416
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jg 0x41651a
mov dword [ebp - 0x5c], 0xffffffff
mov dword [ebp - 0x5c], 3
jmp 0x416437
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jl 0x4164ff
mov dword [ebp - 0x10], 0xef9d7865
mov dword [ebp - 0x10], 3
jmp 0x416458
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x416496
push 1
push 0
push 0x4a08
push 0
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x10]
push eax
push 0x434e
lea eax, [ebp - 0x200]
push eax
push 1
push 0x2a6a
call fcn.0042c9c9
add esp, 0x28
cmp dword [ebp - 0x10], 0
je 0x416494
jmp 0x416451
jmp 0x416451
mov dword [ebp - 0x10], 0xfffffffc
jmp 0x4164a6
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffe6
jg 0x4164fa
mov byte [ebp - 0x35], 0
lea eax, [ebp - 0x35]
push eax
push 0x44d5
push 0
push 0
push 0x31da
call fcn.00421055
add esp, 0x14
push 0
push 0x5441
push 1
push 0x40bd
push 0x5da
push 0xa1
push 0
push 0xd4e
push 1
push 0xb00
call fcn.00411c97
add esp, 0x28
jmp 0x41649f
jmp 0x416430
push 0
push 0
push 0x29e1
push 0x5d20
call fcn.0041feae
add esp, 0x10
jmp 0x41640f
lea ecx, [ebp - 0x200]
call fcn.00437de3
push 0
push 0x2edd
push 0
push 0x16c0
push 1
push 0x693c
call fcn.0042d29e
add esp, 0x18
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x50]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 8], 4
mov dword [ebp - 0x2c], 0x4800fa7
mov dword [ebp - 0x64], 0xa08376fb
mov dword [ebp - 0x70], 0
jmp 0x41657c
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x41658f
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x18], 0xaf1124f0
jmp 0x416575
mov dword [ebp - 8], 0
jmp 0x41659f
mov eax, dword [ebp - 8]
dec eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jl 0x4167bb
mov dword [ebp - 0x98], 0xffffffff
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x18]
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x18]
mov dword [ebp - 0x214], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
mov ecx, dword [ebp - 8]
sub eax, dword [ebp + ecx*4 - 0x18]
cmp dword [ebp - 0x2c], eax
jne 0x4165ef
mov dword [ebp - 0x184], 1
jmp 0x4165f6
and dword [ebp - 0x184], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x18], 0
je 0x416640
mov dword [ebp - 0x15c], 0xe703
push 0
lea eax, [ebp - 0x15c]
push eax
push 0x6764
push 0xff2
push 0
call fcn.004316f4
add esp, 0x14
mov byte [ebp - 0x25], 0
lea eax, [ebp - 0x25]
push eax
push 0
call fcn.004360a7
pop ecx
pop ecx
jmp 0x4167ae
mov dword [ebp - 0x90], 0x7d1
mov dword [ebp - 0x14], 0
jmp 0x41665a
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x416670
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x18c], 0xfffffffd
jmp 0x416653
mov dword [ebp - 0x14], 0
jmp 0x416680
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x416696
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x194], 0xfffffff8
jmp 0x416679
cmp dword [ebp - 0x2c], 0
jne 0x4166b3
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x90], eax
jle 0x4166b3
and dword [ebp - 0xd8], 0
jmp 0x4166bd
mov dword [ebp - 0xd8], 1
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jne 0x4166e4
mov eax, 0xc0b3
test eax, eax
jne 0x4166e4
and dword [ebp - 0x118], 0
jmp 0x4166ee
mov dword [ebp - 0x118], 1
cmp dword [ebp - 0x118], 0xfffffffa
jle 0x416703
mov dword [ebp - 0xa0], 1
jmp 0x41670a
and dword [ebp - 0xa0], 0
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x18]
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x2c], 0
je 0x416737
or eax, 0xffffffff
je 0x416737
mov dword [ebp - 0xe0], 1
jmp 0x41673e
and dword [ebp - 0xe0], 0
cmp dword [ebp - 0xe0], 0xfd2d1a4e
je 0x416756
mov dword [ebp - 0xa8], 1
jmp 0x41675d
and dword [ebp - 0xa8], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x18]
sub eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x18], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp - 8]
imul eax, dword [ebp + eax*4 - 0x18], 0x6ea3
mov dword [ebp - 0x74], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x74]
mov dword [ebp + eax - 0x18c], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x74]
mov dword [ebp + eax - 0x194], ecx
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
je 0x4167b6
jmp 0x4167bb
jmp 0x416598
mov dword [ebp - 0x2c], 0
jmp 0x4167cb
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jg 0x416800
mov dword [ebp - 8], 0
jmp 0x4167e1
mov eax, dword [ebp - 8]
dec eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jl 0x4167fe
push 0
push 1
push 0x1ec6
push 0x1f
push 1
call fcn.00408523
add esp, 0x14
jmp 0x4167da
jmp 0x4167c4
and dword [ebp - 0x78], 0
jmp 0x416816
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x1c]
add eax, 0x28
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x78], eax
jge 0x41715a
push 0
call fcn.004245f0
pop ecx
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x10], 0
jne 0x416f17
push 2
lea ecx, [ebp - 0x1c8]
call fcn.00437d11
mov dword [ebp - 0x54], 1
mov dword [ebp - 0x34], 0xc795c380
mov dword [ebp - 0xc0], 5
mov dword [ebp - 0x1ec], 5
mov dword [ebp - 0x1e8], 5
mov dword [ebp - 0x1e4], 5
mov dword [ebp - 0x1e0], 5
lea eax, [ebp - 0x1c8]
push eax
push 0
push 0x6f09
lea eax, [ebp - 0x44]
push eax
push 0x61bd
push 1
push 0x3739
push 0x364a
push 1
push 0
call fcn.00413068
add esp, 0x28
mov dword [ebp - 0x44], 0
jmp 0x4168c9
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 4
jge 0x4168df
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x1bc], 0x57976326
jmp 0x4168c2
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x1bc], 0
jmp 0x41690d
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1bc]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x1bc], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1bc], 1
jg 0x416ce2
mov dword [ebp - 0x20], 7
mov dword [ebp - 0xc], 0x813f1a07
mov dword [ebp - 0x8c], 0xffffffff
mov dword [ebp - 0x20], 0
jmp 0x416949
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jg 0x4169b9
mov dword [ebp - 0x190], 0x6507
mov dword [ebp - 0x168], 0x5eb20068
push 0x168d
lea eax, [ebp - 0x168]
push eax
push 1
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x34]
push eax
push 0
push 0x7ecd
push 0
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x1c8]
push eax
push 0
lea eax, [ebp - 0x20]
push eax
call fcn.0041730f
add esp, 0x34
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1c8]
call fcn.00437dff
cmp dword [eax], 0
je 0x4169b7
jmp 0x416942
jmp 0x416942
mov byte [ebp - 0x38], 0
push 0
push 1
push 0x60e9
lea eax, [ebp - 0x38]
push eax
push 0x3be3
push 0x2941
push 0
push 0x30e6
call fcn.00423b78
add esp, 0x20
mov dword [ebp - 0xc], 0
jmp 0x4169f3
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 1
jg 0x416cdd
mov dword [ebp - 0x3c], 2
mov dword [ebp - 0xe8], 9
mov dword [ebp - 0x4c], 4
cmp dword [ebp - 0xc], 0
jne 0x416a27
mov dword [ebp - 0x100], 1
jmp 0x416a2e
and dword [ebp - 0x100], 0
cmp dword [ebp - 0x100], 1
jne 0x416a43
mov dword [ebp - 0xb0], 1
jmp 0x416a4a
and dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x54], eax
je 0x416a73
mov dword [ebp - 0xb8], 1
jmp 0x416a7a
and dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0xb8]
sub eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x4c]
jl 0x416a94
mov dword [ebp - 0x110], 1
jmp 0x416a9b
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xc0], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x1bc]
cmp dword [ebp + eax - 0x1bc], ecx
je 0x416add
cmp dword [ebp - 0xc0], 0
je 0x416add
mov dword [ebp - 0xf0], 1
jmp 0x416ae4
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0xf0], eax
jg 0x416afb
mov dword [ebp - 0xc8], 1
jmp 0x416b02
and dword [ebp - 0xc8], 0
mov dword [ebp - 0x3c], 0xd5d9
mov eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x3c], eax
je 0x416b23
mov dword [ebp - 0x108], 1
jmp 0x416b2a
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x108]
neg eax
jne 0x416b46
mov eax, 0x5baed416
test eax, eax
jne 0x416b46
and dword [ebp - 0xd0], 0
jmp 0x416b50
mov dword [ebp - 0xd0], 1
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0xd0], eax
jne 0x416b67
mov dword [ebp - 0x88], 1
jmp 0x416b6e
and dword [ebp - 0x88], 0
cmp dword [ebp - 0x88], 0x87c6
jle 0x416b86
mov dword [ebp - 0x94], 1
jmp 0x416b8d
and dword [ebp - 0x94], 0
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
cmp eax, dword [ebp - 0x94]
jl 0x416bb7
mov dword [ebp - 0x9c], 1
jmp 0x416bbe
and dword [ebp - 0x9c], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x9c], eax
je 0x416bd5
mov dword [ebp - 0xa4], 1
jmp 0x416bdc
and dword [ebp - 0xa4], 0
mov eax, dword [ebp - 0xa4]
sub eax, dword [ebp - 0x4c]
cmp dword [ebp - 0xc], eax
jg 0x416bf9
cmp dword [ebp - 0x54], 0
jne 0x416bf9
and dword [ebp - 0xac], 0
jmp 0x416c03
mov dword [ebp - 0xac], 1
cmp dword [ebp - 0xac], 0
jb 0x416c18
mov dword [ebp - 0xb4], 1
jmp 0x416c1f
and dword [ebp - 0xb4], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xb4]
mov dword [ebp + eax - 0x1ec], ecx
mov dword [ebp - 0x3c], 1
jmp 0x416c42
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jl 0x416cd8
mov dword [ebp - 0x34], 0
jmp 0x416c5c
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jg 0x416cc0
mov dword [ebp - 0x58], 0
jmp 0x416c72
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x416c88
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x210], 9
jmp 0x416c6b
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x210]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x210], eax
push 1
push 0
push 0x1ac5
push 0x5325
push 0x6631
push 0
call fcn.0043417a
add esp, 0x18
jmp 0x416c55
push 0x62db
lea eax, [ebp - 0x4c]
push eax
push 0
call fcn.004340bf
add esp, 0xc
jmp 0x416c3b
jmp 0x4169ec
jmp 0x4168f2
lea ecx, [ebp - 0x1c8]
call fcn.00437de3
push 1
push 0x4f63
push 1
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x1c]
push eax
push 0x16e1
push 0x6be2
push 0
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.00408b3a
add esp, 0x28
mov dword [ebp - 4], 0x795010f7
mov dword [ebp - 0x24], 4
mov eax, dword [ebp - 4]
mov dword [ebp - 0x228], eax
cmp dword [ebp - 4], 0x34bdac84
je 0x416d4c
mov dword [ebp - 0xbc], 1
jmp 0x416d53
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0xbc]
imul eax, dword [ebp - 4]
test eax, eax
jne 0x416d74
cmp dword [ebp - 4], 0
jne 0x416d74
and dword [ebp - 0x84], 0
jmp 0x416d7e
mov dword [ebp - 0x84], 1
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x84], eax
jne 0x416d95
mov dword [ebp - 0xcc], 1
jmp 0x416d9c
and dword [ebp - 0xcc], 0
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0xcc]
jl 0x416db3
mov dword [ebp - 0xd4], 1
jmp 0x416dba
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 4], eax
jle 0x416dd7
mov dword [ebp - 0xdc], 1
jmp 0x416dde
and dword [ebp - 0xdc], 0
cmp dword [ebp - 0xdc], 0
jg 0x416df3
mov dword [ebp - 0xe4], 1
jmp 0x416dfa
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0xe4], eax
jne 0x416e11
mov dword [ebp - 0x1ac], 1
jmp 0x416e18
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x24], eax
jne 0x416e3e
mov dword [ebp - 0xec], 1
jmp 0x416e45
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0xec]
jl 0x416e5c
mov dword [ebp - 0xf4], 1
jmp 0x416e63
and dword [ebp - 0xf4], 0
imul eax, dword [ebp - 0xf4], 0xe45d
cmp eax, 0x4aafbebf
jg 0x416e9a
push 0
push 0x5932
push 0x7276
push 0x77e2
push 1
push 0
push 0x34a5
push 0
call fcn.0040b239
add esp, 0x20
jmp 0x416f12
mov dword [ebp - 0x60], 0
jmp 0x416eaa
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x416ec0
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x238], 0xffffffff
jmp 0x416ea3
mov dword [ebp - 4], 0
jmp 0x416ed0
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
jg 0x416f12
push 0x4fc1
push 0
push 0x2b24
call fcn.0043282b
add esp, 0xc
mov dword [ebp - 0x24], 2
jmp 0x416efa
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x416f10
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x238], 0x9a5a165f
jmp 0x416ef3
jmp 0x416ec9
jmp 0x416806
push 4
lea ecx, [ebp - 0x1a4]
call fcn.00437d11
mov dword [ebp - 0x40], 7
push 1
lea eax, [ebp - 0x1a4]
push eax
push 0
push 0x5373
push 0x5ff1
push 0x7bcf
lea eax, [ebp - 0x204]
push eax
push 0
push 0x1767
push 0x41c7
call fcn.00408b3a
add esp, 0x28
mov byte [ebp - 0x2d], 0
push 0
lea eax, [ebp - 0x2d]
push eax
call fcn.0041928c
pop ecx
pop ecx
mov dword [ebp - 0x40], 0
jmp 0x416f81
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jg 0x4170c1
mov dword [ebp - 0x180], 0x54dbbe5
push dword [ebp - 0x40]
lea ecx, [ebp - 0x1a4]
call fcn.00437dff
cmp dword [eax], 0
je 0x416fd2
mov byte [ebp - 0x37], 0
lea eax, [ebp - 0x37]
push eax
push 0
push 0x740d
push 1
push 0x4257
push 0
push 0x1084
call fcn.0042cb26
add esp, 0x1c
jmp 0x4170bc
mov dword [ebp - 0x178], 0x1d21f1eb
mov dword [ebp - 0x198], 0xffffffff
mov dword [ebp - 0x68], 0
jmp 0x416ff6
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x41700c
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x224], 0
jmp 0x416fef
push 0
lea ecx, [ebp - 0x1a4]
call fcn.00437dff
cmp dword [eax], 0xec17
jl 0x41702d
mov dword [ebp - 0xfc], 1
jmp 0x417034
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x178]
cmp eax, dword [ebp - 0xfc]
jle 0x417051
mov dword [ebp - 0x104], 1
jmp 0x417058
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x198]
cmp dword [ebp - 0x104], eax
jle 0x417072
mov dword [ebp - 0x10c], 1
jmp 0x417079
and dword [ebp - 0x10c], 0
mov esi, dword [ebp - 0x180]
add esi, dword [ebp - 0x10c]
push 0
lea ecx, [ebp - 0x1a4]
call fcn.00437dff
cmp esi, dword [eax]
jl 0x4170a2
mov dword [ebp - 0x114], 1
jmp 0x4170a9
and dword [ebp - 0x114], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x114]
mov dword [ebp + eax - 0x224], ecx
jmp 0x416f7a
lea ecx, [ebp - 0x1a4]
call fcn.00437de3
push 4
push 0x1000
mov eax, dword [ebp - 0x1c]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x11c]
add ecx, dword [eax + 0xc]
push ecx
push 0x687a
push 0x78f7
call fcn.00406969
pop ecx
pop ecx
call eax
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x1c]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1a8]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x80]
call fcn.0040759c
add esp, 0xc
push 0x2a0f
push 0x4438
push 0x6d96
lea eax, [ebp - 0x1c]
push eax
push 0x3467
push 1
lea eax, [ebp - 0x80]
push eax
push 0
push 0x722e
push 0
push 0x1e3d
push 0x7fab
push 1
call fcn.0040e3c8
add esp, 0x34
jmp 0x416806
jmp 0x417194
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x130], eax
push 0x7b5b
push dword [ebp - 0x130]
push dword [ebp - 0x138]
push 0
push 0x108d
call fcn.00430aa1
add esp, 0x14
jmp 0x4171fb
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x158], eax
lea eax, [ebp + 0x10]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x148], eax
push 0x7e56
push 1
push 0x4fba
push dword [ebp - 0x140]
push 0x2a8e
push 0x93e
push dword [ebp - 0x148]
mov eax, dword [ebp - 0x150]
movzx eax, byte [eax]
push eax
push dword [ebp - 0x158]
push 0xa3
push 1
call fcn.00410b90
add esp, 0x2c
pop esi
mov esp, ebp
pop ebp
ret