Function at 0x429aec
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2dc
push esi
movzx eax, byte [ebp + 0x30]
test eax, eax
je 0x42adba
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x218], eax
lea eax, [ebp + 0x18]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x210], eax
lea eax, [ebp + 0x2c]
mov dword [ebp - 0x200], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x208], eax
mov eax, dword [ebp + 0x38]
mov dword [ebp - 0x188], eax
lea eax, [ebp + 0xc]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x1e8]
movzx eax, byte [eax]
test eax, eax
je 0x42acee
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x214]
movzx eax, byte [eax]
test eax, eax
je 0x429be1
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x1c0]
mov eax, dword [eax]
mov eax, dword [eax]
and dword [eax + 0x10], 0
jmp 0x42ace9
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x70], 0x1aae4b9a
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x90], 5
mov dword [ebp - 0x38], 0
jmp 0x429c2a
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x429c40
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x10c], 0xffffffff
jmp 0x429c23
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x10c]
push 4
pop edx
shl edx, 1
imul ecx, dword [ebp + edx - 0x10c]
cmp dword [ebp + eax - 0x10c], ecx
jge 0x429c73
mov dword [ebp - 0xec], 1
jmp 0x429c7a
and dword [ebp - 0xec], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x10c]
cmp dword [ebp - 0xec], eax
jne 0x429c9a
mov dword [ebp - 0xf4], 1
jmp 0x429ca1
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0xf4], eax
jl 0x429cb8
mov dword [ebp - 0xfc], 1
jmp 0x429cbf
and dword [ebp - 0xfc], 0
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x10c]
add ecx, dword [ebp - 0xfc]
cmp dword [ebp + eax - 0x10c], ecx
jg 0x429ceb
mov dword [ebp - 0xc8], 1
jmp 0x429cf2
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0xc8]
sub eax, 0x34b6
je 0x429dc3
mov dword [ebp - 0x18], 0
xor eax, eax
jne 0x429d6f
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x26c], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
je 0x429d28
mov dword [ebp - 0x80], 1
jmp 0x429d2c
and dword [ebp - 0x80], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x80]
jle 0x429d43
cmp dword [ebp - 0x18], 0
jne 0x429d43
and dword [ebp - 0xf0], 0
jmp 0x429d4d
mov dword [ebp - 0xf0], 1
cmp dword [ebp - 0xf0], 0
jae 0x429d68
cmp dword [ebp - 0x18], 0
je 0x429d68
mov dword [ebp - 0x88], 1
jmp 0x429d6f
and dword [ebp - 0x88], 0
cmp dword [ebp - 0x18], 0
je 0x429d87
mov eax, 0xd1b7e280
test eax, eax
je 0x429d87
mov dword [ebp - 0x68], 1
jmp 0x429d8b
and dword [ebp - 0x68], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x68]
mov dword [ebp + eax - 0x10c], ecx
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x68], eax
jl 0x429dae
mov dword [ebp - 0xd0], 1
jmp 0x429db5
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x74], eax
jmp 0x429e49
mov dword [ebp - 0x278], 1
mov dword [ebp - 0x28c], 0xa4e63097
mov dword [ebp - 8], 0
jmp 0x429de7
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
jge 0x429dfd
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x294], 1
jmp 0x429de0
mov dword [ebp - 8], 0
jmp 0x429e0d
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 2
jge 0x429e23
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x284], 0xe62b5009
jmp 0x429e06
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 1
mov eax, dword [ebp + eax - 0x284]
mov dword [ebp + ecx - 0x10c], eax
push 0x5463
push 0
lea eax, [ebp - 0x70]
push eax
push 0
push 0x690f
lea eax, [ebp - 0x74]
push eax
push 0x1820
push 1
call fcn.0042f33c
add esp, 0x20
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 4]
mov dword [ebp - 0xd4], eax
push 0x21c
push 0x7a2b
push 0x1084
push 0x4634
push 1
push 0x2b5b
push 1
push 0
push 0x7ab4
push 0x54a3
push 0x719d
call fcn.00417405
add esp, 0x2c
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x30]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x14], eax
push 0
push 0
push 1
push 0x3c63
push 0
push 0x2caa
push 1
push 0x6d7f
push 0x8bb
push 0x59db
push 0x22a9
push 0x5d38
call fcn.004088d6
add esp, 0x30
and dword [ebp - 0x4c], 0
jmp 0x429f10
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x14]
add eax, 0x28
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x4c], eax
jge 0x42ace9
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x29c], 0x4f8d36fb
mov dword [ebp - 0x1d8], 0
mov dword [ebp - 0x10], 0
jmp 0x429f4d
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x429f60
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x34], 0xc64a
jmp 0x429f46
mov dword [ebp - 0x10], 0
jmp 0x429f70
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x429f83
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x40], 0x60b4ffb8
jmp 0x429f69
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x40], 0
jmp 0x429fa8
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x40]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x40], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x40], 0
jl 0x42a23d
push 1
lea ecx, [ebp - 0x11c]
call fcn.00434c60
mov dword [ebp - 0x244], 1
mov dword [ebp - 0x240], 1
mov dword [ebp - 0x23c], 1
mov dword [ebp - 0x238], 1
push 0x1e45
push 0x81e
push 0x2579
push 0x615b
push 0x7dee
lea eax, [ebp - 0x2a4]
push eax
push 0
push 0x2268
lea eax, [ebp - 0x11c]
push eax
push 1
push 0x5cab
push 0x237e
push 0x2775
push 0x7742
push 1
push 0x38eb
call fcn.0040a52a
add esp, 0x40
push 0x57bb
push 0x226f
push 0x61b8
push 0x3c60
push 0x5d85
push 1
push 0x7320
push 0x1719
push 0
push 0x55fe
push 0x4af3
push 0x25d
push 0x6a0c
push 0x610d
push 0x4a44
push 1
lea eax, [ebp - 0x28]
push eax
push 0x43da
push 0
push 1
push 0x65ba
call fcn.00426e70
add esp, 0x54
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x40]
mov eax, dword [ebp + eax*4 - 0x34]
mov dword [ebp - 0x2ac], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x2b4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x40]
cmp dword [ebp + eax*4 - 0x34], 0x1a35ca42
jg 0x42a1f6
push 0
lea ecx, [ebp - 0x11c]
call fcn.00434d4e
mov esi, eax
push 0
lea ecx, [ebp - 0x11c]
call fcn.00434d4e
mov ecx, dword [esi]
cmp ecx, dword [eax]
jg 0x42a105
mov dword [ebp - 0x1d0], 1
jmp 0x42a10c
and dword [ebp - 0x1d0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x40]
mov dword [ebp - 0x2bc], eax
push 0
lea ecx, [ebp - 0x11c]
call fcn.00434d4e
cmp dword [eax], 0x9e22
jge 0x42a13d
mov dword [ebp - 0x98], 1
jmp 0x42a144
and dword [ebp - 0x98], 0
push 0
lea ecx, [ebp - 0x11c]
call fcn.00434d4e
mov ecx, dword [ebp - 0x98]
cmp ecx, dword [eax]
jne 0x42a167
mov dword [ebp - 0xd8], 1
jmp 0x42a16e
and dword [ebp - 0xd8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x40]
mov eax, dword [ebp + eax*4 - 0x34]
cmp dword [ebp - 0xd8], eax
jge 0x42a190
mov dword [ebp - 0xa0], 1
jmp 0x42a197
and dword [ebp - 0xa0], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x244]
cmp dword [ebp - 0xa0], eax
jg 0x42a1b8
mov dword [ebp - 0xf8], 1
jmp 0x42a1bf
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0xf8], eax
je 0x42a1d6
mov dword [ebp - 0x15c], 1
jmp 0x42a1dd
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x2c4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
mov dword [ebp - 0x2cc], eax
push 0
lea ecx, [ebp - 0x11c]
call fcn.00434d4e
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x244]
mov dword [ebp - 0x2d4], eax
push 0
lea ecx, [ebp - 0x11c]
call fcn.00434d4e
mov eax, dword [eax]
add eax, 0xe708bee
mov dword [ebp - 0x28], eax
lea ecx, [ebp - 0x11c]
call fcn.00434d32
jmp 0x429f93
push 0x3e91
push 0x22a8
push 0
push 0x1192
push 0x2c44
push 0
push 1
push 0
lea eax, [ebp - 0x1d8]
push eax
call fcn.0040f105
add esp, 0x24
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x10], 0
jne 0x42a59b
push 0
push 0
push 1
push 1
push 0x162a
push 0x35d8
call fcn.00415315
add esp, 0x18
lea eax, [ebp - 0x14]
push eax
push 0x23f8
push 0x244b
push 0
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0xd4]
push eax
push 0x132f
push 0
lea eax, [ebp - 0x164]
push eax
call fcn.0042e57a
add esp, 0x24
push 2
lea ecx, [ebp - 0x5c]
call fcn.00434c60
mov dword [ebp - 0xa8], 0x10afbd13
mov dword [ebp - 0x20], 0x9220c436
mov dword [ebp - 0x1e0], 0xbbd4aa41
mov dword [ebp - 4], 0
jmp 0x42a2f5
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 1
jge 0x42a308
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x64], 0x3905
jmp 0x42a2ee
mov dword [ebp - 4], 0
jmp 0x42a318
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
jge 0x42a331
push dword [ebp - 4]
lea ecx, [ebp - 0x5c]
call fcn.00434d4e
mov dword [eax], 0x693e932
jmp 0x42a311
push 0
lea ecx, [ebp - 0x5c]
call fcn.00434d4e
push 0
lea ecx, [ebp - 0x5c]
call fcn.00434d4e
or ecx, 0xffffffff
sub ecx, dword [eax]
mov dword [ebp - 0xa8], ecx
mov esi, dword [ebp - 0xa8]
push 0
lea ecx, [ebp - 0x5c]
call fcn.00434d4e
add esi, dword [eax]
push 0
lea ecx, [ebp - 0x5c]
call fcn.00434d4e
cmp esi, dword [eax]
jge 0x42a37c
mov dword [ebp - 0xe0], 1
jmp 0x42a383
and dword [ebp - 0xe0], 0
push 0
lea ecx, [ebp - 0x5c]
call fcn.00434d4e
mov ecx, dword [ebp - 0xe0]
cmp ecx, dword [eax]
jge 0x42a3a3
mov dword [ebp - 0xb0], 1
jmp 0x42a3aa
and dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0xb0], eax
jne 0x42a3c1
mov dword [ebp - 0x110], 1
jmp 0x42a3c8
and dword [ebp - 0x110], 0
push 0
lea ecx, [ebp - 0x5c]
call fcn.00434d4e
mov ecx, dword [ebp - 0x110]
sub ecx, 9
cmp dword [eax], ecx
jl 0x42a3eb
mov dword [ebp - 0xb8], 1
jmp 0x42a3f2
and dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0xb8], eax
jle 0x42a409
mov dword [ebp - 0xe8], 1
jmp 0x42a410
and dword [ebp - 0xe8], 0
cmp dword [ebp - 0xe8], 0
ja 0x42a425
mov dword [ebp - 0xc0], 1
jmp 0x42a42c
and dword [ebp - 0xc0], 0
push 0
lea ecx, [ebp - 0x5c]
call fcn.00434d4e
mov eax, dword [eax]
cmp eax, dword [ebp - 0xc0]
jg 0x42a44c
mov dword [ebp - 0x100], 1
jmp 0x42a453
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x1e0], eax
mov eax, 0xc1d686a3
cmp eax, 7
jae 0x42a472
mov dword [ebp - 0x78], 1
jmp 0x42a476
and dword [ebp - 0x78], 0
cmp dword [ebp - 0x78], 0
ja 0x42a485
mov dword [ebp - 0x7c], 1
jmp 0x42a489
and dword [ebp - 0x7c], 0
push 0
lea ecx, [ebp - 0x5c]
call fcn.00434d4e
mov ecx, dword [ebp - 0x7c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2dc], eax
push 0
lea ecx, [ebp - 0x5c]
call fcn.00434d4e
mov ecx, dword [ebp - 0x20]
cmp dword [eax], ecx
jne 0x42a4be
mov dword [ebp - 0x84], 1
jmp 0x42a4c5
and dword [ebp - 0x84], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x84], eax
jg 0x42a4dc
mov dword [ebp - 0x8c], 1
jmp 0x42a4e3
and dword [ebp - 0x8c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x178], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x64], eax
mov eax, dword [ebp - 0x138]
cmp eax, dword [ebp - 0x178]
jl 0x42a554
mov dword [ebp - 0x274], 0xfffffff8
mov dword [ebp - 0x174], 0xacda2a4f
push 0x9a7
push 0
lea eax, [ebp - 0x174]
push eax
push 1
push 1
push 0
call fcn.0041203b
add esp, 0x18
jmp 0x42a58e
push 1
push 0xbca
push 0x4845
push 0x3553
push 0x17de
push 0
push 1
push 1
push 0xb5b
push 0x78e
push 0x1567
push 0x6db
push 1
call fcn.004250c5
add esp, 0x34
lea ecx, [ebp - 0x5c]
call fcn.00434d32
jmp 0x429f00
push 1
lea ecx, [ebp - 0x234]
call fcn.00434c60
mov dword [ebp - 0x1c], 0xfffffffb
mov dword [ebp - 0x184], 0xfffffff7
mov dword [ebp - 0xcc], 0x89afca86
mov dword [ebp - 0x1f8], 0x918c6a86
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x6c], 1
mov dword [ebp - 0x2d0], 0xd7f7ffff
mov dword [ebp - 0x1a4], 0x8fe2
mov dword [ebp - 0x27c], 0xfffffffc
mov dword [ebp - 0x2b0], 1
mov dword [ebp - 0x20c], 0x9e00c255
push 3
lea ecx, [ebp - 0x250]
call fcn.00434c60
mov dword [ebp - 0x288], 0x125bdf0d
mov dword [ebp - 0x18c], 0xfffffffd
push 0
push 0
push 0x538f
lea eax, [ebp - 0x1cc]
push eax
push 0
push 0x6ddd
push 0x6441
lea eax, [ebp - 0x234]
push eax
call fcn.0042b425
add esp, 0x20
push 0
push 0
push 1
push 0x7239
push 1
push 0x3bd0
push 1
push 0x7520
lea eax, [ebp - 0x1cc]
push eax
push 0x4a13
push 0x6d1c
lea eax, [ebp - 0x250]
push eax
call fcn.004088d6
add esp, 0x30
mov dword [ebp - 0x1c], 0
jmp 0x42a6a5
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x42a96f
mov dword [ebp - 0x2c8], 0x90031234
mov dword [ebp - 0xa4], 1
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x1dc], 0
mov dword [ebp - 0x290], 0x8610f121
mov dword [ebp - 0x94], 0xaa33fe68
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0
mov dword [ebp - 0xc4], 0xffffffff
mov dword [ebp - 0xc], 0
jmp 0x42a72d
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 3
jge 0x42a743
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x268], 0
jmp 0x42a726
mov dword [ebp - 0xc], 0
jmp 0x42a753
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 3
jge 0x42a769
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x25c], 0x904212e2
jmp 0x42a74c
lea eax, [ebp - 0x17c]
push eax
push 0x40a4
push 0
lea eax, [ebp - 0x1f8]
push eax
lea eax, [ebp - 0x234]
push eax
lea eax, [ebp - 0xcc]
push eax
push 0
lea eax, [ebp - 0x1c]
push eax
push 0xcc9
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x184]
push eax
push 1
call fcn.00425698
add esp, 0x30
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa4]
cmp dword [ebp + eax - 0x228], ecx
jg 0x42a7cd
mov dword [ebp - 0x9c], 1
jmp 0x42a7d4
and dword [ebp - 0x9c], 0
mov dword [ebp - 0x94], 0
mov eax, dword [ebp - 0x94]
add eax, dword [ebp - 0x9c]
jne 0x42a7fb
cmp dword [ebp - 0xa4], 0
jne 0x42a7fb
and dword [ebp - 0x44], 0
jmp 0x42a802
mov dword [ebp - 0x44], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x44]
mov dword [ebp + eax - 0x268], ecx
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x44], eax
jne 0x42a826
mov dword [ebp - 0x1d4], 1
jmp 0x42a82d
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x2b8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x268], 0xfffffffd
jge 0x42a855
mov dword [ebp - 0xac], 1
jmp 0x42a85c
and dword [ebp - 0xac], 0
cmp dword [ebp - 0xac], 0x7048
jg 0x42a874
mov dword [ebp - 0x1fc], 1
jmp 0x42a87b
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x298], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x228], 0xaf5201fe
jae 0x42a8a6
mov dword [ebp - 0xb4], 1
jmp 0x42a8ad
and dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0x1dc]
cmp eax, dword [ebp - 0xb4]
jne 0x42a8c7
mov dword [ebp - 0xbc], 1
jmp 0x42a8ce
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0xcfd253e6
jbe 0x42a8f2
mov dword [ebp - 0x19c], 1
jmp 0x42a8f9
and dword [ebp - 0x19c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x228]
mov dword [ebp - 0x2d8], eax
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x234]
call fcn.00434d4e
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x25c]
mov dword [ebp - 0x2a0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x268]
mov dword [ebp - 0x2c0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x25c]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x25c], eax
mov eax, dword [ebp - 0x20c]
add eax, 9
mov dword [ebp - 0xcc], eax
jmp 0x42a69e
push 0
lea eax, [ebp - 0x250]
push eax
push 1
push 1
push 0x1e0e
push 0x65a5
push 0x6e03
push 0x63b6
push 1
lea eax, [ebp - 0x6c]
push eax
push 0xf85
push 0x50f1
push 1
push 0
lea eax, [ebp - 0x1a4]
push eax
call fcn.00415768
add esp, 0x3c
lea ecx, [ebp - 0x250]
call fcn.00434d32
lea ecx, [ebp - 0x234]
call fcn.00434d32
push 4
push 0x1000
mov eax, dword [ebp - 0x14]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xd4]
add ecx, dword [eax + 0xc]
push ecx
push 0x69c3
push 0x61ef
call fcn.00407169
pop ecx
pop ecx
call eax
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x14]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x1e4]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x60]
call fcn.0040777a
add esp, 0xc
mov dword [ebp - 0x1b4], 0
mov dword [ebp - 0x24], 0x54207647
mov dword [ebp - 0x50], 0x23e52509
mov dword [ebp - 0x1ec], 0xbf90350d
mov dword [ebp - 0x204], 0xd228d5fe
push 2
lea ecx, [ebp - 0x128]
call fcn.00434c60
mov dword [ebp - 0x16c], 0x951162d5
mov dword [ebp - 0x2a8], 0xec0d
mov dword [ebp - 0x48], 8
push 2
lea ecx, [ebp - 0x134]
call fcn.00434c60
push 0x19e1
push 0xbcb
push 0
lea eax, [ebp - 0x128]
push eax
push 1
push 0
push 0x14df
push 0x13cf
lea eax, [ebp - 0x1ac]
push eax
call fcn.0041b8dd
add esp, 0x24
push 0x614c
lea eax, [ebp - 0x1ac]
push eax
push 1
push 0xd94
push 0x5263
push 1
push 0x6a74
push 0x26e6
push 0
push 0
lea eax, [ebp - 0x134]
push eax
push 0x13c3
push 0x310b
call fcn.00420da7
add esp, 0x34
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0x24]
push eax
push 0
push 1
push 0
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x1ec]
push eax
call fcn.004151b3
add esp, 0x24
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x270], eax
push 1
lea ecx, [ebp - 0x134]
call fcn.00434d4e
push 1
lea ecx, [ebp - 0x134]
call fcn.00434d4e
push 1
lea ecx, [ebp - 0x134]
call fcn.00434d4e
push 0
lea ecx, [ebp - 0x128]
call fcn.00434d4e
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xc197911
jle 0x42ab79
mov dword [ebp - 0xdc], 1
jmp 0x42ab80
and dword [ebp - 0xdc], 0
mov eax, 0x56411d7f
sub eax, dword [ebp - 0xdc]
je 0x42ac28
mov dword [ebp - 0x1bc], 0x1bbdb817
mov dword [ebp - 0x1c4], 0xd12ea0fe
mov dword [ebp - 0x1f4], 0x254f4d21
push 0x4e69
push 0x753c
lea eax, [ebp - 0x1bc]
push eax
push 1
lea eax, [ebp - 0x1f4]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x1c4]
push eax
push 0x237a
push 0x3d0
push 0
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x16c]
push eax
push 0x554a
push 1
push 0x5414
lea eax, [ebp - 0x134]
push eax
push 0x67ba
lea eax, [ebp - 0x128]
push eax
push 0x33e8
push 0x6cc2
push 0x56a8
push 0x3609
call fcn.0040e024
add esp, 0x58
jmp 0x42ac73
push 0x12c2
push 0x7974
push 0
push 0x6868
push 0
push 0
call fcn.0041d1b4
add esp, 0x18
push 0
lea eax, [ebp - 0x24]
push eax
push 1
push 0
lea eax, [ebp - 0x50]
push eax
push 0x4e44
push 1
lea eax, [ebp - 0x128]
push eax
push 0x49ee
push 0x7b0b
call fcn.0040a81b
add esp, 0x28
lea ecx, [ebp - 0x134]
call fcn.00434d32
lea ecx, [ebp - 0x128]
call fcn.00434d32
push 0x25f3
push 0xb
push 0x354
push 0x453c
push 0x79be
push 0x2df7
push 1
lea eax, [ebp - 0x60]
push eax
push 0x273c
push 0
push 0x277c
push 0x3c0e
push 1
push 0x1f4a
push 0x63f
lea eax, [ebp - 0x14]
push eax
push 0
push 0x5f98
push 0x282a
push 0x1747
call fcn.00412fc4
add esp, 0x50
jmp 0x429f00
jmp 0x42adb8
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x190]
movzx eax, byte [eax]
test eax, eax
je 0x42ad90
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x2c]
mov dword [eax], 0
jmp 0x42ad6e
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x2c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x2c]
cmp dword [eax], 1
jge 0x42ad8e
mov eax, dword [ebp - 0x2c]
push dword [eax]
mov ecx, dword [ebp - 0x13c]
call fcn.00434d4e
mov dword [eax], 0x3948b081
jmp 0x42ad63
jmp 0x42adb8
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov ecx, dword [ecx]
mov dword [eax], ecx
jmp 0x42ae0b
mov eax, dword [ebp + 0x3c]
mov dword [ebp - 0x160], eax
lea eax, [ebp + 0x20]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x150]
movzx eax, byte [eax]
push eax
push dword [ebp - 0x158]
push 0x55be
push 1
push dword [ebp - 0x160]
push 1
push 0x6dce
push 0x51ba
push 0x6958
call fcn.0040fcdd
add esp, 0x24
pop esi
mov esp, ebp
pop ebp
ret