Function at 0x41ab5e
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x35c
push esi
movzx eax, byte [ebp + 0x1c]
test eax, eax
je 0x41acc3
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x220], eax
lea eax, [ebp + 0x28]
mov dword [ebp - 0x288], eax
lea eax, [ebp + 0x18]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x20c]
movzx eax, byte [eax]
test eax, eax
je 0x41ac7d
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x2b8], eax
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x2c0], eax
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x2c8], eax
mov eax, dword [ebp - 0x2b8]
movzx eax, byte [eax]
test eax, eax
je 0x41ac18
mov byte [ebp - 0x25], 0
push 1
push 0xa4d
push 1
push 0x4a58
lea eax, [ebp - 0x25]
push eax
push 1
push 0x74fb
push 0x1af1
push 0x4345
push 0
push 1
call fcn.004327c0
add esp, 0x2c
jmp 0x41ac7b
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x248], eax
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x250], eax
mov eax, dword [ebp - 0x34]
mov dword [eax], 0
jmp 0x41ac5b
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x34]
mov dword [ecx], eax
mov eax, dword [ebp - 0x34]
cmp dword [eax], 2
jge 0x41ac7b
mov eax, dword [ebp - 0x34]
push dword [eax]
mov ecx, dword [ebp - 0x250]
call fcn.00438fe2
mov dword [eax], 0xba2afe01
jmp 0x41ac50
jmp 0x41acbe
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x258], eax
push dword [ebp - 0x258]
push 0x3bd8
push 1
push 0x702a
push 1
push 0x28a1
push 0x2388
push 0x53c9
push 0x3d75
push 0x2101
call fcn.0041542a
add esp, 0x28
jmp 0x41c3ec
lea eax, [ebp + 0x30]
mov dword [ebp - 0x228], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x270], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x268], eax
lea eax, [ebp + 0xc]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x228]
movzx eax, byte [eax]
test eax, eax
je 0x41c3d4
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x254], eax
mov eax, dword [ebp - 0x240]
movzx eax, byte [eax]
test eax, eax
je 0x41ad91
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x280], eax
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x98]
mov ecx, dword [ecx]
mov ecx, dword [ecx]
mov eax, dword [eax]
add eax, dword [ecx + 4]
mov ecx, dword [ebp - 0x98]
mov ecx, dword [ecx]
mov dword [ecx], eax
jmp 0x41c3d2
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x2b4], 0x7b4bc662
mov dword [ebp - 0x290], 0x566a927
mov dword [ebp - 0x25c], 0xf82baef6
push 1
lea ecx, [ebp - 0x304]
call fcn.00438ef4
lea eax, [ebp - 0x308]
push eax
lea eax, [ebp - 0x304]
push eax
push 0x2bc3
push 0
call fcn.004120b3
add esp, 0x10
push 0x7b4a
lea eax, [ebp - 0x290]
push eax
lea eax, [ebp - 0x25c]
push eax
push 0
push 0x3bf9
push 0x394e
push 0x5d1d
lea eax, [ebp - 0x304]
push eax
push 0x4fab
push 0
push 0xeb8
push 1
lea eax, [ebp - 0x2b4]
push eax
call fcn.0040ed89
add esp, 0x34
push 1
push 0x510e
push 0x6a34
push 1
push 0
push 0x231d
call fcn.004084a0
add esp, 0x18
lea ecx, [ebp - 0x304]
call fcn.00438fc6
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 4]
mov dword [ebp - 0x19c], eax
push 4
lea ecx, [ebp - 0x44]
call fcn.00438ef4
mov dword [ebp - 0x94], 0x9b4af7bd
lea eax, [ebp - 0xc]
push eax
push 0
lea eax, [ebp - 0x44]
push eax
call fcn.00424d53
add esp, 0xc
mov dword [ebp - 0xc], 0
jmp 0x41aeac
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 3
jge 0x41aec2
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xb8], 0xfffffff9
jmp 0x41aea5
mov dword [ebp - 0xc], 0
jmp 0x41aed2
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 2
jge 0x41aee5
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x68], 0xfffc
jmp 0x41aecb
push 3
lea ecx, [ebp - 0x44]
call fcn.00438fe2
push 0
lea ecx, [ebp - 0x44]
call fcn.00438fe2
mov esi, eax
push 0
lea ecx, [ebp - 0x44]
call fcn.00438fe2
mov ecx, dword [esi]
cmp ecx, dword [eax]
jle 0x41af17
mov dword [ebp - 0xa0], 1
jmp 0x41af1e
and dword [ebp - 0xa0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xa0]
mov dword [ebp + eax - 0xb8], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x68]
cmp dword [ebp - 0xa0], eax
jl 0x41af4f
mov dword [ebp - 0x128], 1
jmp 0x41af56
and dword [ebp - 0x128], 0
push 0
lea ecx, [ebp - 0x44]
call fcn.00438fe2
mov eax, dword [eax]
cmp eax, dword [ebp - 0x128]
je 0x41af76
mov dword [ebp - 0x1e4], 1
jmp 0x41af7d
and dword [ebp - 0x1e4], 0
push 0
lea ecx, [ebp - 0x44]
call fcn.00438fe2
imul ecx, dword [ebp - 0x1e4], 0xfffffffa
imul ecx, dword [eax]
test ecx, ecx
je 0x41b108
mov dword [ebp - 0x2c], 0x58f9c25b
mov dword [ebp - 0x60], 0
jmp 0x41afb0
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x41afc6
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x33c], 0xf37fc033
jmp 0x41afa9
mov dword [ebp - 0x2c], 0
jmp 0x41afd6
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 7
jle 0x41b103
mov dword [ebp - 0x264], 0x1be360de
cmp dword [ebp - 0x2c], 0
jne 0x41b0e1
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x324], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x68]
cmp dword [ebp - 0x264], eax
jle 0x41b01b
mov dword [ebp - 0x2a4], 1
jmp 0x41b022
and dword [ebp - 0x2a4], 0
mov esi, dword [ebp - 0x94]
push 0
lea ecx, [ebp - 0x44]
call fcn.00438fe2
cmp esi, dword [eax]
jle 0x41b042
mov dword [ebp - 0x1ec], 1
jmp 0x41b049
and dword [ebp - 0x1ec], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb8]
cmp dword [ebp - 0x1ec], eax
je 0x41b06a
mov dword [ebp - 0x1f4], 1
jmp 0x41b071
and dword [ebp - 0x1f4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
add eax, dword [ebp - 0x1f4]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x33c]
jle 0x41b09c
mov dword [ebp - 0x26c], 1
jmp 0x41b0a3
and dword [ebp - 0x26c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x68]
neg eax
cmp eax, 0x6b2c
jge 0x41b0c2
mov dword [ebp - 0x1fc], 1
jmp 0x41b0c9
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x1fc]
neg eax
cmp eax, 0xa1172167
jae 0x41b0e1
and dword [ebp - 0x170], 0
jmp 0x41b0eb
mov dword [ebp - 0x170], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x170]
mov dword [ebp + eax - 0xb8], ecx
jmp 0x41afcf
jmp 0x41b307
mov dword [ebp - 0x38], 5
mov dword [ebp - 0x16c], 0xfffffff9
cmp dword [ebp - 0x38], 0
push 1
lea ecx, [ebp - 0x44]
call fcn.00438fe2
cmp dword [eax], 0
jne 0x41b166
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x16c], 0
jne 0x41b14d
mov dword [ebp - 0x1c4], 1
jmp 0x41b154
and dword [ebp - 0x1c4], 0
cmp dword [ebp - 0x1c4], 0
jne 0x41b166
and dword [ebp - 0xc8], 0
jmp 0x41b170
mov dword [ebp - 0xc8], 1
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0xc8], eax
je 0x41b187
mov dword [ebp - 0x2c4], 1
jmp 0x41b18e
and dword [ebp - 0x2c4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb8]
mov dword [ebp - 0x32c], eax
push 2
lea ecx, [ebp - 0x44]
call fcn.00438fe2
cmp dword [eax], 0xffffffff
je 0x41b1bc
mov dword [ebp - 0x1cc], 1
jmp 0x41b1c3
and dword [ebp - 0x1cc], 0
cmp dword [ebp - 0x1cc], 0
jl 0x41b1d8
mov dword [ebp - 0xd0], 1
jmp 0x41b1df
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0xd0]
jg 0x41b1fa
push 0xfffffffffffffff8
pop eax
test eax, eax
jne 0x41b1fa
and dword [ebp - 0x8c], 0
jmp 0x41b204
mov dword [ebp - 0x8c], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x8c]
mov dword [ebp + eax - 0xb8], ecx
push 0
lea ecx, [ebp - 0x44]
call fcn.00438fe2
mov ecx, dword [ebp - 0x8c]
cmp ecx, dword [eax]
jle 0x41b237
mov dword [ebp - 0x1d4], 1
jmp 0x41b23e
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x1d4]
neg eax
cmp eax, 0x898791b1
jne 0x41b259
mov dword [ebp - 0x1dc], 1
jmp 0x41b260
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x1dc], eax
jle 0x41b277
mov dword [ebp - 0xdc], 1
jmp 0x41b27e
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0xdc]
sub eax, dword [ebp - 0x94]
je 0x41b2a1
cmp dword [ebp - 0x16c], 0
je 0x41b2a1
mov dword [ebp - 0xe4], 1
jmp 0x41b2a8
and dword [ebp - 0xe4], 0
cmp dword [ebp - 0xe4], 0x4c62b419
jne 0x41b2c0
mov dword [ebp - 0x1b8], 1
jmp 0x41b2c7
and dword [ebp - 0x1b8], 0
push 0
lea ecx, [ebp - 0x44]
call fcn.00438fe2
mov ecx, dword [ebp - 0x1b8]
cmp ecx, dword [eax]
jl 0x41b2e7
mov dword [ebp - 0x274], 1
jmp 0x41b2ee
and dword [ebp - 0x274], 0
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0x68]
push 0
lea ecx, [ebp - 0x44]
call fcn.00438fe2
add esi, dword [eax]
mov dword [ebp - 0x38], esi
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xb8], 0
jne 0x41b448
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xb8], 0
je 0x41b36e
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xb8]
cmp dword [ebp + eax - 0x68], ecx
je 0x41b350
mov dword [ebp - 0xec], 1
jmp 0x41b357
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0xec]
sub eax, 4
je 0x41b36e
mov dword [ebp - 0x178], 1
jmp 0x41b375
and dword [ebp - 0x178], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x68]
cmp dword [ebp - 0x178], eax
jne 0x41b393
mov dword [ebp - 0xf4], 1
jmp 0x41b39a
and dword [ebp - 0xf4], 0
cmp dword [ebp - 0xf4], 0x67b3
jge 0x41b3b2
mov dword [ebp - 0x1f8], 1
jmp 0x41b3b9
and dword [ebp - 0x1f8], 0
push 3
lea ecx, [ebp - 0x44]
call fcn.00438fe2
mov ecx, dword [ebp - 0x1f8]
cmp ecx, dword [eax]
je 0x41b3d9
mov dword [ebp - 0xfc], 1
jmp 0x41b3e0
and dword [ebp - 0xfc], 0
imul eax, dword [ebp - 0xfc], 0xfffffffa
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x68]
je 0x41b3ff
mov dword [ebp - 0x180], 1
jmp 0x41b406
and dword [ebp - 0x180], 0
push 0
lea ecx, [ebp - 0x44]
call fcn.00438fe2
mov ecx, dword [ebp - 0x180]
cmp ecx, dword [eax]
jg 0x41b426
mov dword [ebp - 0x104], 1
jmp 0x41b42d
and dword [ebp - 0x104], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x68]
add eax, dword [ebp - 0x104]
jne 0x41b448
and dword [ebp - 0x1c0], 0
jmp 0x41b452
mov dword [ebp - 0x1c0], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1c0]
mov dword [ebp + eax - 0xb8], ecx
lea ecx, [ebp - 0x44]
call fcn.00438fc6
push 3
lea ecx, [ebp - 0x74]
call fcn.00438ef4
mov dword [ebp - 4], 0x1e1e87df
mov dword [ebp - 0x10], 0x335900b0
mov dword [ebp - 0x78], 0xfffffffd
push 2
lea ecx, [ebp - 0x208]
call fcn.00438ef4
mov dword [ebp - 0x88], 8
push 0
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.00420609
add esp, 0xc
lea eax, [ebp - 0x208]
push eax
push 0
lea eax, [ebp - 0x30]
push eax
call fcn.00425a12
add esp, 0xc
mov dword [ebp - 0x30], 0
jmp 0x41b4da
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x41b4f0
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x348], 0x5e7732c3
jmp 0x41b4d3
mov dword [ebp - 4], 0
jmp 0x41b500
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
jg 0x41bc3c
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x58], 0
jmp 0x41b521
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x41b534
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 8], 0x7d65121a
jmp 0x41b51a
push dword [ebp - 4]
lea ecx, [ebp - 0x74]
call fcn.00438fe2
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 8]
cmp dword [eax], ecx
jne 0x41b559
mov dword [ebp - 0x11c], 1
jmp 0x41b560
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 4], 0xe568
je 0x41b57e
mov dword [ebp - 0x10c], 1
jmp 0x41b585
and dword [ebp - 0x10c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 8]
cmp dword [ebp - 0x10c], eax
jge 0x41b5a3
mov dword [ebp - 0x188], 1
jmp 0x41b5aa
and dword [ebp - 0x188], 0
push dword [ebp - 4]
lea ecx, [ebp - 0x74]
call fcn.00438fe2
mov ecx, dword [ebp - 0x188]
cmp ecx, dword [eax]
jg 0x41b5cb
mov dword [ebp - 0x114], 1
jmp 0x41b5d2
and dword [ebp - 0x114], 0
push dword [ebp - 4]
lea ecx, [ebp - 0x74]
call fcn.00438fe2
mov ecx, dword [ebp - 0x114]
add ecx, dword [eax]
jne 0x41b5fd
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 8], 0
jne 0x41b5fd
and dword [ebp - 0x1e0], 0
jmp 0x41b607
mov dword [ebp - 0x1e0], 1
cmp dword [ebp - 0x1e0], 0x4c92
jl 0x41b61f
mov dword [ebp - 0x190], 1
jmp 0x41b626
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x11c]
cmp eax, dword [ebp - 0x190]
jl 0x41b640
mov dword [ebp - 0x124], 1
jmp 0x41b647
and dword [ebp - 0x124], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x124]
mov dword [ebp + eax - 8], ecx
push dword [ebp - 4]
lea ecx, [ebp - 0x74]
call fcn.00438fe2
mov eax, dword [eax]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x41b679
mov dword [ebp - 0x12c], 1
jmp 0x41b680
and dword [ebp - 0x12c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 8]
cmp dword [ebp - 4], eax
jne 0x41b693
cmp dword [ebp - 4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 8]
add eax, dword [ebp - 0x78]
je 0x41b6b2
xor eax, eax
je 0x41b6b2
mov dword [ebp - 0x1c8], 1
jmp 0x41b6b9
and dword [ebp - 0x1c8], 0
push 0
lea ecx, [ebp - 0x74]
call fcn.00438fe2
mov eax, dword [eax]
add eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x198], eax
push 0
lea ecx, [ebp - 0x208]
call fcn.00438fe2
mov ecx, dword [ebp - 0x198]
mov dword [eax], ecx
mov eax, dword [ebp - 0x12c]
cmp eax, dword [ebp - 0x198]
jge 0x41b700
mov dword [ebp - 0x134], 1
jmp 0x41b707
and dword [ebp - 0x134], 0
cmp dword [ebp - 0x134], 7
jne 0x41b71c
mov dword [ebp - 0x1f0], 1
jmp 0x41b723
and dword [ebp - 0x1f0], 0
cmp dword [ebp - 0x1f0], 0x6a77
jne 0x41b73b
mov dword [ebp - 0x13c], 1
jmp 0x41b742
and dword [ebp - 0x13c], 0
imul eax, dword [ebp - 0x13c], 0xfc7d
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 8]
jge 0x41b764
mov dword [ebp - 0x2ac], 1
jmp 0x41b76b
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x320], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 4]
cmp dword [ebp + eax - 8], ecx
jl 0x41b78f
mov dword [ebp - 0x1a0], 1
jmp 0x41b796
and dword [ebp - 0x1a0], 0
push 1
lea ecx, [ebp - 0x74]
call fcn.00438fe2
mov ecx, dword [ebp - 0x1a0]
cmp ecx, dword [eax]
jge 0x41b7b6
mov dword [ebp - 0x144], 1
jmp 0x41b7bd
and dword [ebp - 0x144], 0
cmp dword [ebp - 0x144], 0
jne 0x41b7d4
or eax, 0xffffffff
jne 0x41b7d4
and dword [ebp - 0x1d0], 0
jmp 0x41b7de
mov dword [ebp - 0x1d0], 1
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x41bc23
mov dword [ebp - 0x2bc], 0xe7af825
push 1
lea ecx, [ebp - 0x74]
call fcn.00438fe2
cmp dword [eax], 0
jne 0x41b816
mov dword [ebp - 0x154], 1
jmp 0x41b81d
and dword [ebp - 0x154], 0
mov esi, dword [ebp - 4]
push dword [ebp - 4]
lea ecx, [ebp - 0x74]
call fcn.00438fe2
cmp esi, dword [eax]
jle 0x41b83b
mov dword [ebp - 0x27c], 1
jmp 0x41b842
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x328], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 8], 0x2ee1e3c1
jge 0x41b86a
mov dword [ebp - 0x14c], 1
jmp 0x41b871
and dword [ebp - 0x14c], 0
cmp dword [ebp - 0x14c], 9
jge 0x41b886
mov dword [ebp - 0x1a8], 1
jmp 0x41b88d
and dword [ebp - 0x1a8], 0
cmp dword [ebp - 0x1a8], 4
je 0x41b8a2
mov dword [ebp - 0x1e8], 1
jmp 0x41b8a9
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x154]
cmp eax, dword [ebp - 0x1e8]
jne 0x41b8c3
mov dword [ebp - 0x15c], 1
jmp 0x41b8ca
and dword [ebp - 0x15c], 0
cmp dword [ebp - 0x15c], 0xd78bea8e
jae 0x41b8e2
mov dword [ebp - 0x1b0], 1
jmp 0x41b8e9
and dword [ebp - 0x1b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 8]
cmp dword [ebp - 0x1b0], eax
jne 0x41b907
mov dword [ebp - 0x164], 1
jmp 0x41b90e
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x78]
cmp eax, dword [ebp - 0x164]
jl 0x41b925
mov dword [ebp - 0x1d8], 1
jmp 0x41b92c
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x1d8], eax
jl 0x41b943
mov dword [ebp - 0xd4], 1
jmp 0x41b94a
and dword [ebp - 0xd4], 0
cmp dword [ebp - 0xd4], 1
jae 0x41b95f
mov dword [ebp - 0xd8], 1
jmp 0x41b966
and dword [ebp - 0xd8], 0
cmp dword [ebp - 0xd8], 0xfffffffa
jne 0x41b97b
mov dword [ebp - 0xe0], 1
jmp 0x41b982
and dword [ebp - 0xe0], 0
cmp dword [ebp - 0xe0], 0x7c29
je 0x41b99a
mov dword [ebp - 0xe8], 1
jmp 0x41b9a1
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
je 0x41b9bc
mov dword [ebp - 0xf0], 1
jmp 0x41b9c3
and dword [ebp - 0xf0], 0
cmp dword [ebp - 0xf0], 9
jl 0x41b9d8
mov dword [ebp - 0xf8], 1
jmp 0x41b9df
and dword [ebp - 0xf8], 0
cmp dword [ebp - 0xf8], 0
jge 0x41b9fa
cmp dword [ebp - 0x10], 0
je 0x41b9fa
mov dword [ebp - 0x84], 1
jmp 0x41ba01
and dword [ebp - 0x84], 0
push 0
lea ecx, [ebp - 0x208]
call fcn.00438fe2
mov ecx, dword [ebp - 0x84]
mov dword [eax], ecx
mov eax, dword [ebp - 0x84]
add eax, 0xfffd
je 0x41bbf9
mov dword [ebp - 0x28c], 1
mov dword [ebp - 0x10], 0xc
jmp 0x41ba41
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
je 0x41bbf7
mov dword [ebp - 0x244], 0xffffffff
mov eax, 0xc8559ce7
test eax, eax
je 0x41ba7a
push dword [ebp - 4]
lea ecx, [ebp - 0x74]
call fcn.00438fe2
cmp dword [eax], 0
je 0x41ba7a
mov dword [ebp - 0x100], 1
jmp 0x41ba81
and dword [ebp - 0x100], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x348]
cmp dword [ebp - 0x100], eax
jg 0x41baa1
mov dword [ebp - 0x108], 1
jmp 0x41baa8
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x108], eax
jg 0x41babf
mov dword [ebp - 0x110], 1
jmp 0x41bac6
and dword [ebp - 0x110], 0
push 0
lea ecx, [ebp - 0x208]
call fcn.00438fe2
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x110]
cmp dword [eax], ecx
jg 0x41baec
mov dword [ebp - 0x118], 1
jmp 0x41baf3
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x118], eax
jle 0x41bb0d
mov dword [ebp - 0x120], 1
jmp 0x41bb14
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x2bc]
cmp dword [ebp - 0x120], eax
jl 0x41bb2e
mov dword [ebp - 0xbc], 1
jmp 0x41bb35
and dword [ebp - 0xbc], 0
cmp dword [ebp - 0xbc], 0
jle 0x41bb4a
mov dword [ebp - 0x130], 1
jmp 0x41bb51
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x130]
sub eax, 0x8a60
cmp eax, 0xf657
jl 0x41bb75
mov eax, 0xa19d8d77
test eax, eax
jne 0x41bb75
and dword [ebp - 0x284], 0
jmp 0x41bb7f
mov dword [ebp - 0x284], 1
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x30c], eax
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x310], eax
mov eax, 0xc1f20cf6
cmp eax, 0xfffffffa
ja 0x41bbad
mov dword [ebp - 0x138], 1
jmp 0x41bbb4
and dword [ebp - 0x138], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x138]
mov dword [ebp + eax - 8], ecx
mov dword [ebp - 0x14], 0
jmp 0x41bbd4
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jg 0x41bbf2
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 8]
mov dword [ebp + ecx*4 - 8], eax
cmp dword [ebp - 0x10], 0
je 0x41bbf0
jmp 0x41bbcd
jmp 0x41bbcd
jmp 0x41ba3a
jmp 0x41bc21
lea eax, [ebp - 0x74]
push eax
push 0
lea eax, [ebp - 0x88]
push eax
push 0x4594
push 0x2cf0
push 0x6bb0
lea eax, [ebp - 4]
push eax
call fcn.0040fd4e
add esp, 0x1c
jmp 0x41bc37
push 0
lea ecx, [ebp - 0x208]
call fcn.00438fe2
cmp dword [eax], 0
je 0x41bc37
jmp 0x41bc3c
jmp 0x41b4f9
lea ecx, [ebp - 0x208]
call fcn.00438fc6
lea ecx, [ebp - 0x74]
call fcn.00438fc6
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x20], 0x57fd5464
mov dword [ebp - 0x20], 0xfffffff7
jmp 0x41bc7b
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xfffffffd
je 0x41beb6
mov dword [ebp - 0x24], 0xba1bf2b2
mov dword [ebp - 0x9c], 8
mov dword [ebp - 0x54], 0
jmp 0x41bca6
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x41bcb9
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x5c], 0xfffffffe
jmp 0x41bc9f
mov dword [ebp - 0x24], 0
jmp 0x41bcc9
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x41beb1
mov dword [ebp - 0x48], 0
jmp 0x41bce3
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 4
jge 0x41bcf9
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x2d8], 0xd7865925
jmp 0x41bcdc
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x2d8], 0
jmp 0x41bd27
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2d8]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x2d8], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x2d8], 0
jg 0x41be94
mov dword [ebp - 0x214], 0xffffffff
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x5c], 0
jne 0x41bdba
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x20]
jns 0x41bd63
mov dword [ebp - 0x140], 1
jmp 0x41bd6a
and dword [ebp - 0x140], 0
imul eax, dword [ebp - 0x140], 0xffffffff
cmp eax, 1
jbe 0x41bd82
mov dword [ebp - 0x148], 1
jmp 0x41bd89
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x148], eax
jl 0x41bda0
mov dword [ebp - 0x210], 1
jmp 0x41bda7
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x5c], 0
jne 0x41bdba
and dword [ebp - 0x150], 0
jmp 0x41bdc4
mov dword [ebp - 0x150], 1
imul eax, dword [ebp - 0x150], 0x60e7
cmp eax, dword [ebp - 0x20]
jl 0x41bddf
mov dword [ebp - 0x158], 1
jmp 0x41bde6
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
jne 0x41be0e
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x5c], 0
jne 0x41be0e
and dword [ebp - 0x160], 0
jmp 0x41be18
mov dword [ebp - 0x160], 1
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x5c]
cmp eax, dword [ebp - 0x160]
jge 0x41be40
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x2d8], 0
jne 0x41be40
and dword [ebp - 0x168], 0
jmp 0x41be4a
mov dword [ebp - 0x168], 1
cmp dword [ebp - 0x168], 0xfffffffc
jne 0x41be5f
mov dword [ebp - 0x174], 1
jmp 0x41be66
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x214], eax
push 0
push 0
lea eax, [ebp - 0x9c]
push eax
push 0x3251
push 0x2f11
call fcn.0042914e
add esp, 0x14
jmp 0x41bd0c
push 0x296
push 0x174e
push 0
push 0
push 1
call fcn.00430eca
add esp, 0x14
jmp 0x41bcc2
jmp 0x41bc74
and dword [ebp - 0x7c], 0
jmp 0x41becc
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x18]
add eax, 0x28
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x7c], eax
jge 0x41c3d2
push 0x320a
push 0x4e15
push 0
call fcn.00409e47
add esp, 0xc
mov eax, dword [ebp - 0x18]
cmp dword [eax + 0x10], 0
jne 0x41bfdd
mov dword [ebp - 0x2ec], 0x3df75dce
mov dword [ebp - 0x2e8], 0x3df75dce
mov dword [ebp - 0x2e4], 0x3df75dce
mov dword [ebp - 0x2e0], 0x3df75dce
lea ecx, [ebp - 0x8d]
call fcn.00438ff1
push eax
lea eax, [ebp - 0x2dc]
push eax
lea eax, [ebp - 0x2ec]
push eax
lea ecx, [ebp - 0x35c]
call fcn.00438ff4
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x354]
call fcn.00438fa0
mov dword [ebp - 0x21c], 0xa35f394
mov dword [ebp - 0x318], 0
push 0x1a87
push 0x310e
lea eax, [ebp - 0x21c]
push eax
push 0x30e8
push 0xb0a
push 0x3217
push 0
push 0x4352
push 0x1215
push 0
push 0x5652
push 1
call fcn.004183d0
add esp, 0x30
lea ecx, [ebp - 0x354]
call fcn.00438fc6
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x19c]
push eax
call fcn.00415560
add esp, 0x14
jmp 0x41bebc
push 3
lea ecx, [ebp - 0x29c]
call fcn.00438ef4
push 4
lea ecx, [ebp - 0xac]
call fcn.00438ef4
mov dword [ebp - 0x1c], 0
jmp 0x41c007
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x41c023
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x29c]
call fcn.00438fe2
mov dword [eax], 0xf200
jmp 0x41c000
mov dword [ebp - 0x1c], 0
jmp 0x41c033
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x41c04f
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xac]
call fcn.00438fe2
mov dword [eax], 4
jmp 0x41c02c
push 3
lea ecx, [ebp - 0xac]
call fcn.00438fe2
mov esi, eax
push 1
lea ecx, [ebp - 0xac]
call fcn.00438fe2
mov ecx, dword [esi]
cmp ecx, dword [eax]
jne 0x41c07d
mov dword [ebp - 0x17c], 1
jmp 0x41c084
and dword [ebp - 0x17c], 0
push 3
lea ecx, [ebp - 0xac]
call fcn.00438fe2
mov eax, dword [eax]
cmp eax, dword [ebp - 0x17c]
je 0x41c0a7
mov dword [ebp - 0x184], 1
jmp 0x41c0ae
and dword [ebp - 0x184], 0
push 3
lea ecx, [ebp - 0xac]
call fcn.00438fe2
mov esi, eax
push 3
lea ecx, [ebp - 0xac]
call fcn.00438fe2
mov ecx, dword [esi]
sub ecx, dword [eax]
cmp dword [ebp - 0x184], ecx
jle 0x41c0e2
mov dword [ebp - 0x18c], 1
jmp 0x41c0e9
and dword [ebp - 0x18c], 0
push 1
lea ecx, [ebp - 0x29c]
call fcn.00438fe2
mov dword [eax], 0xfffffffc
cmp dword [ebp - 0x18c], 0xfffffffc
je 0x41c111
mov dword [ebp - 0x194], 1
jmp 0x41c118
and dword [ebp - 0x194], 0
imul esi, dword [ebp - 0x194], 0
push 3
lea ecx, [ebp - 0xac]
call fcn.00438fe2
cmp esi, dword [eax]
jl 0x41c1a5
mov dword [ebp - 0x22c], 0x282d564c
mov dword [ebp - 0x234], 0xfffffffc
push 0x2983
push 0x781c
push 0
push 0x73c6
call fcn.0040dced
add esp, 0x10
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x29c]
push eax
push 0x3bc9
lea eax, [ebp - 0x234]
push eax
push 0x31a2
push 0
push 0x6151
push 1
push 0
push 0x6047
push 0x3db9
lea eax, [ebp - 0xac]
push eax
call fcn.0040fe0a
add esp, 0x30
jmp 0x41c238
push 2
lea ecx, [ebp - 0x2f8]
call fcn.00438ef4
push 0x5f65
lea eax, [ebp - 0x330]
push eax
lea eax, [ebp - 0x2f8]
push eax
push 0
call fcn.0041569e
add esp, 0x10
push 0
lea eax, [ebp - 0x2f8]
push eax
call fcn.0040be6a
pop ecx
pop ecx
push 0xba7
push 0x46a3
push 0
lea eax, [ebp - 0xac]
push eax
push 0x1af5
push 0x223e
push 0x1ba8
push 0xe5a
push 0
push 0x1de0
push 0x806
push 0x173f
push 1
push 0x53b0
lea eax, [ebp - 0x29c]
push eax
call fcn.00415d31
add esp, 0x3c
lea ecx, [ebp - 0x2f8]
call fcn.00438fc6
lea ecx, [ebp - 0xac]
call fcn.00438fc6
lea ecx, [ebp - 0x29c]
call fcn.00438fc6
push 4
push 0x1000
mov eax, dword [ebp - 0x18]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x19c]
add ecx, dword [eax + 0xc]
push ecx
push 0x111f
push 0xec2
call fcn.0040709c
pop ecx
pop ecx
call eax
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x18]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x23c]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x80]
call fcn.00407955
add esp, 0xc
mov dword [ebp - 0x50], 1
mov dword [ebp - 0xc4], 0x8d383303
mov dword [ebp - 0x1b4], 0xfffffffd
mov dword [ebp - 0xc0], 1
cmp dword [ebp - 0x50], 0
je 0x41c371
cmp dword [ebp - 0x50], 0xffffffff
jg 0x41c2dd
mov dword [ebp - 0x1bc], 1
jmp 0x41c2e4
and dword [ebp - 0x1bc], 0
cmp dword [ebp - 0xc4], 0xbb6b
je 0x41c300
xor eax, eax
je 0x41c300
mov dword [ebp - 0x1a4], 1
jmp 0x41c307
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x1a4], eax
jle 0x41c31e
mov dword [ebp - 0x1ac], 1
jmp 0x41c325
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x1ac]
sub ecx, 0x5dd2487b
sub eax, ecx
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x1b4]
add eax, dword [ebp - 0x1bc]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0xc4]
lea eax, [eax + ecx - 0x38e486ae]
test eax, eax
je 0x41c371
mov dword [ebp - 0xcc], 1
jmp 0x41c378
and dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0xcc]
neg eax
je 0x41c38c
push 0
call fcn.0040bcb1
pop ecx
jmp 0x41c3a7
push 0x4a23
push 0x1c52
push 0
push 0x163b
push 0
call fcn.0042b2af
add esp, 0x14
lea eax, [ebp - 0x80]
push eax
push 0x1d01
lea eax, [ebp - 0x18]
push eax
push 0
push 0x8da
push 0x6136
push 0x299c
call fcn.0040ad84
add esp, 0x1c
jmp 0x41bebc
jmp 0x41c3ec
push 0x2ab1
push 0x96f
push 0
push 1
push 0
call fcn.0043348b
add esp, 0x14
pop esi
mov esp, ebp
pop ebp
ret