Function at 0x425724
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x280
push esi
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x425768
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x190], eax
push dword [ebp - 0x150]
push 1
push 0x75a8
push dword [ebp - 0x190]
call fcn.00426909
add esp, 0x10
jmp 0x426904
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x108], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x14c], eax
lea eax, [ebp + 8]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x13c], eax
lea eax, [ebp + 0x1c]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x198]
movzx eax, byte [eax]
test eax, eax
je 0x4268c6
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x158]
movzx eax, byte [eax]
test eax, eax
je 0x42582a
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x130]
mov dword [eax], 0
jmp 0x4268c4
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x38], 1
push 3
lea ecx, [ebp - 0x218]
call fcn.00433f13
mov dword [ebp - 0x180], 0x98aa
mov dword [ebp - 0x19c], 0xfffffff7
mov dword [ebp - 0x148], 0xfffffff6
mov dword [ebp - 0x1bc], 0xf13550e3
push 0x70d1
push 0xfeb
push 0
push 0x53f4
push 0x7e4b
push 0x2e94
push 0x21c8
push 0x401b
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x23c]
push eax
push 0
push 0x7e43
call fcn.00409884
add esp, 0x30
cmp dword [ebp - 0x38], 0
je 0x425a00
mov dword [ebp - 0x178], 0xa266d210
push 4
lea ecx, [ebp - 0x1d0]
call fcn.00433f13
mov dword [ebp - 0x154], 0xfffffff7
push 0x95b
push 0x321d
push 0x5f28
push 0x14b5
lea eax, [ebp - 0x248]
push eax
push 0x131e
push 0x39d5
push 0
lea eax, [ebp - 0x1d0]
push eax
push 0x1abe
call fcn.00414094
add esp, 0x28
mov dword [ebp - 0x38], 0
jmp 0x42593f
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffe6
jl 0x4259e3
mov dword [ebp - 0x188], 0xffffffff
mov dword [ebp - 0x140], 0x1912530a
mov dword [ebp - 0x15c], 1
lea eax, [ebp - 0x1d0]
push eax
push 0x5050
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x178]
push eax
push 0x61f6
push 0x5d34
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x218]
push eax
push 0x39f7
push 0x3642
lea eax, [ebp - 0x188]
push eax
push 0x198f
lea eax, [ebp - 0x154]
push eax
lea eax, [ebp - 0x38]
push eax
push 0x7bc1
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0x15c]
push eax
push 0
call fcn.004098bb
add esp, 0x4c
jmp 0x425938
lea eax, [ebp - 0x1bc]
push eax
push 0
call fcn.004224db
pop ecx
pop ecx
lea ecx, [ebp - 0x1d0]
call fcn.00433fe5
jmp 0x425a6c
mov dword [ebp - 0x164], 0xd9751230
push 1
lea ecx, [ebp - 0x1f4]
call fcn.00433f13
lea eax, [ebp - 0x260]
push eax
lea eax, [ebp - 0x1f4]
push eax
push 1
push 0
push 1
call fcn.004171ec
add esp, 0x14
push 0
lea eax, [ebp - 0x1f4]
push eax
push 0x85c
push 0
lea eax, [ebp - 0x164]
push eax
push 0x365
push 0x146c
push 0x1db8
call fcn.004123e0
add esp, 0x20
lea ecx, [ebp - 0x1f4]
call fcn.00433fe5
lea ecx, [ebp - 0x218]
call fcn.00433fe5
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 4]
mov dword [ebp - 0xec], eax
push 1
push 0
push 0x1200
call fcn.0040c820
add esp, 0xc
push 1
lea ecx, [ebp - 0x1dc]
call fcn.00433f13
mov dword [ebp - 0x10], 0xfffffff9
mov dword [ebp - 0x3c], 1
mov dword [ebp - 0x1c4], 0xffffffff
push 0x63a9
lea eax, [ebp - 0x1dc]
push eax
push 0
lea eax, [ebp - 0x250]
push eax
call fcn.0040c1cd
add esp, 0x10
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x1dc]
push eax
push 0xcca
push 0x69d3
push 1
push 0
call fcn.004108ac
add esp, 0x18
mov dword [ebp - 0x10], 0
jmp 0x425b07
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jg 0x425ebb
mov dword [ebp - 0x34], 0x9cfe0482
mov dword [ebp - 0x68], 0xfffffff7
mov dword [ebp - 0xd0], 0x23e2
mov dword [ebp - 0x238], 0xdbfe
mov dword [ebp - 0x234], 0xdbfe
mov dword [ebp - 0x230], 0xdbfe
mov dword [ebp - 0x22c], 0xdbfe
mov dword [ebp - 0x34], 0
jmp 0x425b61
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x425eb6
push 4
lea ecx, [ebp - 0x104]
call fcn.00433f13
mov dword [ebp - 0xb0], 1
mov dword [ebp - 0x2c], 1
lea eax, [ebp - 0x264]
push eax
push 0x24ea
push 0x660
push 0
push 0
push 0x1f9f
push 0
push 0x4edd
lea eax, [ebp - 0x104]
push eax
call fcn.004091fe
add esp, 0x24
push 2
lea ecx, [ebp - 0x104]
call fcn.00434001
cmp dword [eax], 0
jne 0x425bde
mov eax, dword [ebp - 0x34]
sub eax, 0x816f
jne 0x425bde
and dword [ebp - 0xf4], 0
jmp 0x425be8
mov dword [ebp - 0xf4], 1
cmp dword [ebp - 0xf4], 0x5de1
jge 0x425bfd
mov dword [ebp - 0x78], 1
jmp 0x425c01
and dword [ebp - 0x78], 0
push 2
lea ecx, [ebp - 0x104]
call fcn.00434001
mov ecx, dword [ebp - 0x78]
cmp ecx, dword [eax]
jle 0x425c21
mov dword [ebp - 0xe0], 1
jmp 0x425c28
and dword [ebp - 0xe0], 0
push 0
lea ecx, [ebp - 0x104]
call fcn.00434001
mov ecx, dword [ebp - 0xe0]
sub ecx, dword [eax]
mov dword [ebp - 0x68], ecx
mov eax, dword [ebp - 0xb0]
add eax, dword [ebp - 0x68]
mov esi, dword [ebp - 0x34]
sub esi, eax
push 0
lea ecx, [ebp - 0x104]
call fcn.00434001
cmp esi, dword [eax]
jge 0x425c68
mov eax, 0x53a38d06
test eax, eax
jne 0x425c7a
mov eax, 0x7d96711d
test eax, eax
jne 0x425c7a
and dword [ebp - 0x90], 0
jmp 0x425c84
mov dword [ebp - 0x90], 1
cmp dword [ebp - 0x90], 0x84edc02
jge 0x425c9c
mov dword [ebp - 0xc8], 1
jmp 0x425ca3
and dword [ebp - 0xc8], 0
push 2
lea ecx, [ebp - 0x104]
call fcn.00434001
mov ecx, dword [ebp - 0xc8]
sub ecx, dword [ebp - 0x2c]
cmp dword [eax], ecx
je 0x425cd6
push 0x58e8
push 0
push 0x6616
call fcn.00411e21
add esp, 0xc
jmp 0x425e7d
mov dword [ebp - 0xe8], 7
mov dword [ebp - 0x2c], 0
jmp 0x425cf0
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x425e7d
mov dword [ebp - 0x24], 1
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x24], eax
jl 0x425d1e
mov dword [ebp - 0x1ac], 1
jmp 0x425d25
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x3c], eax
jne 0x425d42
mov dword [ebp - 0x98], 1
jmp 0x425d49
and dword [ebp - 0x98], 0
mov eax, dword [ebp - 0x98]
neg eax
jne 0x425d62
cmp dword [ebp - 0x2c], 0
jne 0x425d62
and dword [ebp - 0xf0], 0
jmp 0x425d6c
mov dword [ebp - 0xf0], 1
mov eax, dword [ebp - 0xf0]
sub eax, 0xa
cmp eax, dword [ebp - 0xd0]
jge 0x425d92
mov eax, 0x3b10
test eax, eax
je 0x425d92
mov dword [ebp - 0xa0], 1
jmp 0x425d99
and dword [ebp - 0xa0], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0xa0]
jl 0x425db0
mov dword [ebp - 0x16c], 1
jmp 0x425db7
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x240], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x238], 0xd707d8eb
ja 0x425de2
mov dword [ebp - 0xa8], 1
jmp 0x425de9
and dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x1c4], eax
mov dword [ebp - 0x3c], 0
jmp 0x425e05
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jg 0x425e78
mov dword [ebp - 0x174], 0xffffffff
push 0x4ecb
lea eax, [ebp - 0xe8]
push eax
push 0
push 0x411b
push 0x44b7
push 0x6562
push 0
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.00408c9d
add esp, 0x24
mov dword [ebp - 0x24], 0
jmp 0x425e5a
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jg 0x425e76
push 0
push 0x239
push 0x3db2
call fcn.00415426
add esp, 0xc
jmp 0x425e53
jmp 0x425dfe
jmp 0x425ce9
push 0x74c4
push 0
push 1
push 0x484
lea eax, [ebp - 0xb0]
push eax
push 0x328e
push 0x3a9d
push 1
call fcn.0041a7a6
add esp, 0x20
lea ecx, [ebp - 0x104]
call fcn.00433fe5
jmp 0x425b5a
jmp 0x425b00
lea ecx, [ebp - 0x1dc]
call fcn.00433fe5
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x64]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], 0x1e559696
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0x1b8], 8
mov dword [ebp - 0x60], 0
jmp 0x425f06
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x425f19
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x14], 0
jmp 0x425eff
mov dword [ebp - 0xc], 0
jmp 0x425f29
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jg 0x425f42
push 0x2c4d
push 0
push 0
call fcn.0040cea2
add esp, 0xc
jmp 0x425f22
cmp dword [ebp - 0xc], 0
jne 0x42602f
mov dword [ebp - 0xd8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0xd8], eax
jge 0x425f74
mov dword [ebp - 0xb8], 1
jmp 0x425f7b
and dword [ebp - 0xb8], 0
cmp dword [ebp - 0xb8], 0xbefcdf11
jb 0x425f93
mov dword [ebp - 0xf8], 1
jmp 0x425f9a
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0xf8]
jl 0x425fb1
mov dword [ebp - 0xc0], 1
jmp 0x425fb8
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0xc], eax
imul eax, dword [ebp - 0xc], 0xfffffff6
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x14]
cmp eax, 3
ja 0x425fdd
mov dword [ebp - 0x7c], 1
jmp 0x425fe1
and dword [ebp - 0x7c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7c]
sub ecx, dword [ebp + eax - 0x14]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x14]
je 0x426006
mov dword [ebp - 0x1c0], 1
jmp 0x42600d
and dword [ebp - 0x1c0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0xc], 0xbf4d
je 0x42602f
and dword [ebp - 0x17c], 0
jmp 0x426039
mov dword [ebp - 0x17c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
mov dword [ebp - 0x24c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
mov dword [ebp - 0x1b8], eax
and dword [ebp - 0x70], 0
jmp 0x42606f
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 8]
add eax, 0x28
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x70], eax
jge 0x4268c4
push 4
lea ecx, [ebp - 0x1a8]
call fcn.00433f13
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x4c], 7
push 2
lea ecx, [ebp - 0x1e8]
call fcn.00433f13
mov dword [ebp - 0x48], 0
jmp 0x4260b9
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 4
jge 0x4260d5
push dword [ebp - 0x48]
lea ecx, [ebp - 0x1a8]
call fcn.00434001
mov dword [eax], 1
jmp 0x4260b2
lea eax, [ebp - 0x1e8]
push eax
push 0
lea eax, [ebp - 0x48]
push eax
push 0
call fcn.0040c18d
add esp, 0x10
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x1c]
push eax
push 0x709a
push 0x1e2d
lea eax, [ebp - 0x1a8]
push eax
push 0
call fcn.00427e12
add esp, 0x18
mov dword [ebp - 0x1c], 0
jmp 0x42611f
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jg 0x4261b7
mov dword [ebp - 0x184], 0xfe44fa3f
push 0x219f
push 0x60d2
push 0
call fcn.004225f3
add esp, 0xc
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1a8]
call fcn.00434001
cmp dword [eax], 0
je 0x42615c
jmp 0x426118
mov dword [ebp - 0x4c], 0
jmp 0x42616c
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jg 0x4261b2
push 0
push 0x3c07
lea eax, [ebp - 0x1a8]
push eax
lea eax, [ebp - 0x1e8]
push eax
push 0x3906
push 0
push 0x1a7c
push 0x278e
lea eax, [ebp - 0x1c]
push eax
push 0x5fa1
lea eax, [ebp - 0x184]
push eax
call fcn.0040a831
add esp, 0x2c
jmp 0x426165
jmp 0x426118
lea ecx, [ebp - 0x1e8]
call fcn.00433fe5
lea ecx, [ebp - 0x1a8]
call fcn.00433fe5
mov eax, dword [ebp - 8]
cmp dword [eax + 0x10], 0
jne 0x426702
push 1
lea ecx, [ebp - 0x200]
call fcn.00433f13
mov dword [ebp - 4], 0xfffffff9
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x1b4], 0xffffffff
push 0
lea eax, [ebp - 0x254]
push eax
push 0x293c
lea eax, [ebp - 0x200]
push eax
push 0x532
call fcn.004090b1
add esp, 0x14
mov dword [ebp - 4], 0
jmp 0x426231
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 1
jge 0x426263
push 0x63ad
push 1
lea eax, [ebp - 4]
push eax
push 0
push 0
push 1
push 0x29a6
push 0x200c
lea eax, [ebp - 0x200]
push eax
call fcn.0041b365
add esp, 0x24
jmp 0x42622a
mov dword [ebp - 4], 0
jmp 0x426273
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jg 0x426651
mov dword [ebp - 0x28], 0x9cfe0482
mov dword [ebp - 0x6c], 0xfffffff7
mov dword [ebp - 0xcc], 0x23e2
mov dword [ebp - 0x228], 0xdbfe
mov dword [ebp - 0x224], 0xdbfe
mov dword [ebp - 0x220], 0xdbfe
mov dword [ebp - 0x21c], 0xdbfe
mov dword [ebp - 0x28], 0
jmp 0x4262cd
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x42664c
push 4
lea ecx, [ebp - 0x88]
call fcn.00433f13
mov dword [ebp - 0xe4], 1
mov dword [ebp - 0x30], 1
push 0x13e9
push 0x447c
push 0x397
push 0x45a7
push 0x19a6
lea eax, [ebp - 0x25c]
push eax
push 0x3b11
push 0
push 0
push 0x2877
push 0
push 0x46e6
push 0xfa3
push 0x33cc
lea eax, [ebp - 0x88]
push eax
call fcn.00408b05
add esp, 0x3c
push 2
lea ecx, [ebp - 0x88]
call fcn.00434001
cmp dword [eax], 0
jne 0x426368
mov eax, dword [ebp - 0x28]
sub eax, 0x816f
jne 0x426368
and dword [ebp - 0x8c], 0
jmp 0x426372
mov dword [ebp - 0x8c], 1
cmp dword [ebp - 0x8c], 0x5de1
jge 0x42638a
mov dword [ebp - 0x94], 1
jmp 0x426391
and dword [ebp - 0x94], 0
push 2
lea ecx, [ebp - 0x88]
call fcn.00434001
mov ecx, dword [ebp - 0x94]
cmp ecx, dword [eax]
jle 0x4263b4
mov dword [ebp - 0x9c], 1
jmp 0x4263bb
and dword [ebp - 0x9c], 0
push 0
lea ecx, [ebp - 0x88]
call fcn.00434001
mov ecx, dword [ebp - 0x9c]
sub ecx, dword [eax]
mov dword [ebp - 0x6c], ecx
mov eax, dword [ebp - 0xe4]
add eax, dword [ebp - 0x6c]
mov esi, dword [ebp - 0x28]
sub esi, eax
push 0
lea ecx, [ebp - 0x88]
call fcn.00434001
cmp esi, dword [eax]
jge 0x4263fb
mov eax, 0x53a38d06
test eax, eax
jne 0x42640d
mov eax, 0x7d96711d
test eax, eax
jne 0x42640d
and dword [ebp - 0xa4], 0
jmp 0x426417
mov dword [ebp - 0xa4], 1
cmp dword [ebp - 0xa4], 0x84edc02
jge 0x42642f
mov dword [ebp - 0xac], 1
jmp 0x426436
and dword [ebp - 0xac], 0
push 2
lea ecx, [ebp - 0x88]
call fcn.00434001
mov ecx, dword [ebp - 0xac]
sub ecx, dword [ebp - 0x30]
cmp dword [eax], ecx
je 0x426477
push 0x5758
push 0
push 1
push 0
push 0x3fbb
push 0xbc3
push 0x43b2
call fcn.00409027
add esp, 0x1c
jmp 0x426615
mov dword [ebp - 0xdc], 7
mov dword [ebp - 0x30], 0
jmp 0x426491
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x426615
mov dword [ebp - 0x40], 1
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x40], eax
jl 0x4264bf
mov dword [ebp - 0x1b0], 1
jmp 0x4264c6
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x20], eax
jne 0x4264e3
mov dword [ebp - 0xb4], 1
jmp 0x4264ea
and dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0xb4]
neg eax
jne 0x426503
cmp dword [ebp - 0x30], 0
jne 0x426503
and dword [ebp - 0xbc], 0
jmp 0x42650d
mov dword [ebp - 0xbc], 1
mov eax, dword [ebp - 0xbc]
sub eax, 0xa
cmp eax, dword [ebp - 0xcc]
jge 0x426533
mov eax, 0x3b10
test eax, eax
je 0x426533
mov dword [ebp - 0xc4], 1
jmp 0x42653a
and dword [ebp - 0xc4], 0
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0xc4]
jl 0x426551
mov dword [ebp - 0x18c], 1
jmp 0x426558
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x270], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x228], 0xd707d8eb
ja 0x426583
mov dword [ebp - 0xd4], 1
jmp 0x42658a
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x20], 0
jmp 0x4265a6
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jg 0x426610
mov dword [ebp - 0x194], 0xffffffff
push 0
lea eax, [ebp - 0x194]
push eax
push 0x2218
lea eax, [ebp - 0xdc]
push eax
push 0x75a1
lea eax, [ebp - 0x88]
push eax
call fcn.004211ed
add esp, 0x18
mov dword [ebp - 0x40], 0
jmp 0x4265ef
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jg 0x42660e
mov byte [ebp - 0x15], 0
push 0
push 0x2815
lea eax, [ebp - 0x15]
push eax
call fcn.0042b949
add esp, 0xc
jmp 0x4265e8
jmp 0x42659f
jmp 0x42648a
push 0x4a5c
push 0
push 0
lea eax, [ebp - 0xe4]
push eax
push 0x1c5a
push 0x53d8
push 0x73e3
call fcn.0041741d
add esp, 0x1c
lea ecx, [ebp - 0x88]
call fcn.00433fe5
jmp 0x4262c6
jmp 0x42626c
lea ecx, [ebp - 0x200]
call fcn.00433fe5
lea eax, [ebp - 0x74]
push eax
push 0
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 8]
push eax
call fcn.00415456
add esp, 0x14
mov dword [ebp - 0x44], 0xe469ad59
mov dword [ebp - 0x54], 0
jmp 0x426693
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x4266a9
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x280], 1
jmp 0x42668c
push 0x66c9
push 0x7f4
push 0
push 0x2d42
push 8
push 0x4c49
push 0
push 0x1218
push 0x4ea5
push 1
call fcn.0041984e
add esp, 0x28
mov dword [ebp - 0x44], 0
jmp 0x4266e7
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x4266fd
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x280], 0x7ad95e17
jmp 0x4266e0
jmp 0x42605f
push 1
lea ecx, [ebp - 0x20c]
call fcn.00433f13
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x12c], 0xccb97252
mov dword [ebp - 0x114], 0x7a5e
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x5c], 0
jmp 0x426747
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x426763
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x20c]
call fcn.00434001
mov dword [eax], 0x4fc2
jmp 0x426740
push 0
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x11c]
push eax
push 0x40e5
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x20c]
push eax
push 0x29f1
push 0x603e
push 1
push 0x6773
call fcn.00420c1a
add esp, 0x2c
push 0
push 0x1213
push 0x4b20
call fcn.00414c0b
add esp, 0xc
lea ecx, [ebp - 0x20c]
call fcn.00433fe5
push 4
push 0x1000
mov eax, dword [ebp - 8]
push dword [eax + 0x10]
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0xec]
add ecx, dword [eax + 0xc]
push ecx
push 0x8d73
push 0xa3c6
call fcn.004069f0
pop ecx
pop ecx
call eax
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 8]
push dword [eax + 0x10]
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x134]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x74]
call fcn.004073e3
add esp, 0xc
mov dword [ebp - 0x50], 0xfffffffa
mov dword [ebp - 0x58], 0
jmp 0x42682a
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x426840
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x26c], 0xf94f378
jmp 0x426823
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x50]
mov dword [ebp + eax - 0x26c], ecx
mov dword [ebp - 0x50], 5
jmp 0x426860
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0xf
jl 0x42687c
push 0
push 0x7c02
push 0x71db
call fcn.004269de
add esp, 0xc
jmp 0x426859
push 1
push 0x1610
push 0x26c
push 0x3adf
push 0x53fe
push 0
push 0x7ee1
lea eax, [ebp - 0x74]
push eax
push 0x1265
push 0
push 0x6115
push 0x7497
push 0x6e75
lea eax, [ebp - 8]
push eax
call fcn.00411cba
add esp, 0x38
jmp 0x42605f
jmp 0x426904
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x144], eax
push 0x5197
push 0
push 1
push 0x6826
push 0
push dword [ebp - 0x144]
push 0x558a
push 0x4912
push 0x6f1
push 0x3634
call fcn.00408e77
add esp, 0x28
pop esi
mov esp, ebp
pop ebp
ret