Function at 0x4189bd
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x358
push esi
movzx eax, byte [ebp + 0x34]
test eax, eax
je 0x418aee
mov eax, dword [ebp + 0x54]
mov dword [ebp - 0x274], eax
mov eax, dword [ebp + 0x40]
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp + 0x50]
mov dword [ebp - 0x270], eax
lea eax, [ebp + 0x28]
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x244]
movzx eax, byte [eax]
test eax, eax
je 0x418a2f
push 0
push 0x508c
push 0x7ee2
call fcn.004265d5
add esp, 0xc
jmp 0x418ae9
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x17c], eax
push dword [ebp - 0x17c]
push 0x133e
push dword [ebp - 0x168]
push 0x792d
push 0
push 1
push 0x6f06
push 0x417
push dword [ebp - 0x184]
push 0x441e
push 0x5283
push 1
push 0x1811
push 0x155a
push 0x53b
push 0x75b6
push 1
push 0x35cb
push dword [ebp - 0x238]
push 0x44e8
push dword [ebp - 0x18c]
push 0x20dd
push 0x7ce2
push 0x4c40
push 0x71d9
call fcn.0041401f
add esp, 0x64
jmp 0x419eac
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x1b4], eax
lea eax, [ebp + 0x14]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp + 0x48]
mov dword [ebp - 0x1fc], eax
lea eax, [ebp + 0x38]
mov dword [ebp - 0x240], eax
mov eax, dword [ebp + 0x4c]
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp + 0x44]
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp + 0x3c]
mov dword [ebp - 0x204], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp + 0x58]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x240]
movzx eax, byte [eax]
test eax, eax
je 0x419e6d
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x214]
movzx eax, byte [eax]
test eax, eax
je 0x418e76
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x264], eax
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x26c], eax
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x1f8], eax
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x208], eax
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x254], eax
mov eax, dword [ebp - 0x120]
cmp dword [eax], 0
je 0x418d2a
push 1
mov ecx, dword [ebp - 0x18]
call fcn.00430d9e
imul esi, dword [eax], 0xfffb
push 2
mov ecx, dword [ebp - 0x18]
call fcn.00430d9e
cmp esi, dword [eax]
jle 0x418cec
mov dword [ebp - 0xb8], 1
jmp 0x418cf3
and dword [ebp - 0xb8], 0
push 2
mov ecx, dword [ebp - 0x18]
call fcn.00430d9e
mov ecx, dword [ebp - 0x25c]
mov edx, dword [ebp - 0xb8]
sub edx, dword [ecx]
mov esi, edx
imul esi, dword [eax]
push 0
mov ecx, dword [ebp - 0x18]
call fcn.00430d9e
cmp esi, dword [eax]
jl 0x418d2a
mov dword [ebp - 0x88], 1
jmp 0x418d31
and dword [ebp - 0x88], 0
push 2
mov ecx, dword [ebp - 0x18]
call fcn.00430d9e
mov ecx, dword [ebp - 0x88]
cmp ecx, dword [eax]
jge 0x418d5d
push 1
mov ecx, dword [ebp - 0x18]
call fcn.00430d9e
cmp dword [eax], 0
jne 0x418d5d
and dword [ebp - 0xf0], 0
jmp 0x418d67
mov dword [ebp - 0xf0], 1
push 0
mov ecx, dword [ebp - 0x18]
call fcn.00430d9e
mov ecx, dword [ebp - 0xf0]
cmp ecx, dword [eax]
je 0x418d87
mov dword [ebp - 0x90], 1
jmp 0x418d8e
and dword [ebp - 0x90], 0
push 2
mov ecx, dword [ebp - 0x18]
call fcn.00430d9e
mov eax, dword [eax]
cmp eax, dword [ebp - 0x90]
jle 0x418dae
mov dword [ebp - 0x98], 1
jmp 0x418db5
and dword [ebp - 0x98], 0
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
cmp dword [ebp - 0x98], eax
jl 0x418dd1
mov dword [ebp - 0xf8], 1
jmp 0x418dd8
and dword [ebp - 0xf8], 0
push 0
mov ecx, dword [ebp - 0x100]
call fcn.00430d9e
mov ecx, dword [ebp - 0xf8]
cmp ecx, dword [eax]
jg 0x418dfb
mov dword [ebp - 0xa0], 1
jmp 0x418e02
and dword [ebp - 0xa0], 0
mov eax, dword [ebp - 0x200]
mov dword [eax], 0xdfa01480
cmp dword [ebp - 0xa0], 0xdfa01480
jne 0x418e26
mov dword [ebp - 0x138], 1
jmp 0x418e2d
and dword [ebp - 0x138], 0
cmp dword [ebp - 0x138], 0x805e5316
jne 0x418e45
mov dword [ebp - 0xa8], 1
jmp 0x418e4c
and dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0x254]
mov esi, dword [eax]
add esi, dword [ebp - 0xa8]
push 0
mov ecx, dword [ebp - 0x100]
call fcn.00430d9e
add esi, dword [eax]
mov eax, dword [ebp - 0x208]
mov dword [eax], esi
jmp 0x419e6b
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x48], eax
mov dword [ebp - 4], 9
mov dword [ebp - 0x50], 0
jmp 0x418eae
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x418ec4
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x294], 0xa6847dfa
jmp 0x418ea7
mov byte [ebp - 0x1d], 0
push 0x7bc8
push 0x276d
push 0x73fb
push 0x6d78
push 1
push 0x295
lea eax, [ebp - 0x1d]
push eax
push 0x3335
push 0x25d3
push 0x3089
push 0x4647
push 1
push 1
push 0
push 0x38ae
push 0
call fcn.004111ce
add esp, 0x40
mov dword [ebp - 4], 0
jmp 0x418f20
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
jg 0x419006
mov eax, 0x74bf90ed
test eax, eax
je 0x418fd1
cmp dword [ebp - 4], 0x35ca4204
jge 0x418f49
mov dword [ebp - 0x80], 1
jmp 0x418f4d
and dword [ebp - 0x80], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x294]
cmp dword [ebp - 0x80], eax
jle 0x418f68
mov dword [ebp - 0xb0], 1
jmp 0x418f6f
and dword [ebp - 0xb0], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0xb0], eax
jl 0x418f86
mov dword [ebp - 0xb4], 1
jmp 0x418f8d
and dword [ebp - 0xb4], 0
cmp dword [ebp - 0xb4], 0
jae 0x418fa2
mov dword [ebp - 0x128], 1
jmp 0x418fa9
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x128], eax
jl 0x418fc0
mov dword [ebp - 0xc0], 1
jmp 0x418fc7
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x294]
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x294], 1
jne 0x418fea
mov dword [ebp - 0x108], 1
jmp 0x418ff1
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x108]
mov dword [ebp + eax*4 - 0x294], ecx
jmp 0x418f19
mov eax, dword [ebp - 0x48]
mov eax, dword [eax + 4]
mov dword [ebp - 0x14c], eax
push 0x24eb
push 1
push 0x165d
push 0
push 0
push 0x5b34
push 1
push 0x3209
push 0x1fc3
push 0x3a16
push 0
call fcn.00412dc0
add esp, 0x2c
mov dword [ebp - 0xc], 0x2ba39464
mov dword [ebp - 0xc8], 0x7525d2d9
mov dword [ebp - 0x10], 0
jmp 0x419063
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x419076
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x60], 0xc93
jmp 0x41905c
mov dword [ebp - 0x10], 0
jmp 0x419086
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x41909c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x218], 0x1874da86
jmp 0x41907f
mov dword [ebp - 0xc], 0
jmp 0x4190ac
mov eax, dword [ebp - 0xc]
dec eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jl 0x419201
mov dword [ebp - 0xe0], 0xfffffff6
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x2cc], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x9cf13e1
jl 0x4190ea
mov dword [ebp - 0x148], 1
jmp 0x4190f1
and dword [ebp - 0x148], 0
cmp dword [ebp - 0x148], 0xfffffffb
ja 0x419106
mov dword [ebp - 0xd0], 1
jmp 0x41910d
and dword [ebp - 0xd0], 0
cmp dword [ebp - 0xd0], 0xe008fb0b
jb 0x419125
mov dword [ebp - 0x110], 1
jmp 0x41912c
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x60]
cmp dword [ebp - 0x110], eax
jl 0x419147
mov dword [ebp - 0xd8], 1
jmp 0x41914e
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x60]
cmp dword [ebp - 0xd8], eax
je 0x419169
mov dword [ebp - 0x130], 1
jmp 0x419170
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x60]
cmp eax, dword [ebp - 0xe0]
jle 0x419197
mov dword [ebp - 0x118], 1
jmp 0x41919e
and dword [ebp - 0x118], 0
push 2
pop eax
sub eax, dword [ebp - 0x118]
je 0x4191bb
cmp dword [ebp - 0xc], 0
je 0x4191bb
mov dword [ebp - 0xe8], 1
jmp 0x4191c2
and dword [ebp - 0xe8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe8]
mov dword [ebp + eax - 0x218], ecx
push 0x2052
push 1
push 0x2bf1
push 1
push 0
push 0x5469
push 0x455f
push 0x9bd
call fcn.0040fd85
add esp, 0x20
jmp 0x4190a5
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x3c], 0xb5a5efa2
push 1
lea ecx, [ebp - 0x2bc]
call fcn.00430cb0
push 0
push 0x3493
push 0xcf7
push 1
push 0
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 8]
push eax
push 0x3dfb
push 1
push 0x3226
push 1
push 0x4607
call fcn.00421245
add esp, 0x30
mov dword [ebp - 8], 0
jmp 0x419270
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
jge 0x419286
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x278], 0x6076fda0
jmp 0x419269
mov dword [ebp - 8], 0
jmp 0x419296
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
jge 0x4192ac
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x220], 8
jmp 0x41928f
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], eax
jl 0x4192bd
mov dword [ebp - 0x58], 1
jmp 0x4192c1
and dword [ebp - 0x58], 0
cmp dword [ebp - 0x3c], 0x52aa
jg 0x4192d6
mov dword [ebp - 0x140], 1
jmp 0x4192dd
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x140], eax
jl 0x4192f4
mov dword [ebp - 0x84], 1
jmp 0x4192fb
and dword [ebp - 0x84], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x84], eax
jl 0x419312
mov dword [ebp - 0x8c], 1
jmp 0x419319
and dword [ebp - 0x8c], 0
cmp dword [ebp - 0x8c], 1
ja 0x41932e
mov dword [ebp - 0x94], 1
jmp 0x419335
and dword [ebp - 0x94], 0
push 0
lea ecx, [ebp - 0x2bc]
call fcn.00430d9e
mov ecx, dword [ebp - 0x58]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x94]
sub ecx, dword [ebp + eax - 0x278]
cmp dword [ebp - 0x58], ecx
jle 0x41936b
mov dword [ebp - 0x9c], 1
jmp 0x419372
and dword [ebp - 0x9c], 0
cmp dword [ebp - 0x9c], 0xcba2afe0
jae 0x41938a
mov dword [ebp - 0xa4], 1
jmp 0x419391
and dword [ebp - 0xa4], 0
cmp dword [ebp - 0xa4], 0x5062d7bc
jne 0x4193a9
mov dword [ebp - 0xac], 1
jmp 0x4193b0
and dword [ebp - 0xac], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xac]
mov dword [ebp + eax - 0x220], ecx
lea ecx, [ebp - 0x2bc]
call fcn.00430d82
and dword [ebp - 0x68], 0
jmp 0x4193e4
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x14]
add eax, 0x28
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x68], eax
jge 0x419e6b
mov dword [ebp - 0xd4], 0x8974b66
mov dword [ebp - 0x64], 5
mov dword [ebp - 0x78], 0xa924c000
mov dword [ebp - 0x4c], 0xc3c39ba0
mov dword [ebp - 0x5c], 8
mov dword [ebp - 0x260], 0xb95ae649
push 1
lea ecx, [ebp - 0x158]
call fcn.00430cb0
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x228], 0xc04840c2
mov dword [ebp - 0x34], 0
jmp 0x419454
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x41946a
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x29c], 6
jmp 0x41944d
push 0x320a
push 0x409d
push 0
push 0
push 1
lea eax, [ebp - 0x158]
push eax
push 0x539b
push 0x7403
lea eax, [ebp - 0x34]
push eax
push 0x1662
push 0x1b6
call fcn.00420e1a
add esp, 0x2c
push 0
lea ecx, [ebp - 0x158]
call fcn.00430d9e
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xbc]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xbc]
mov dword [ecx], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x334], eax
push 5
pop eax
test eax, eax
je 0x419637
mov dword [ebp - 0x260], 0xebef
cmp dword [ebp - 0x4c], 0
jne 0x4194f7
xor eax, eax
inc eax
jne 0x4194f7
and dword [ebp - 0xc4], 0
jmp 0x419501
mov dword [ebp - 0xc4], 1
imul eax, dword [ebp - 0xc4], 0x2e7e
test eax, eax
jge 0x41951b
mov dword [ebp - 0xcc], 1
jmp 0x419522
and dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0xcc]
neg eax
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x2f0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x29c]
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x5c], eax
jge 0x419563
mov dword [ebp - 0xdc], 1
jmp 0x41956a
and dword [ebp - 0xdc], 0
cmp dword [ebp - 0xdc], 0
jb 0x41957f
mov dword [ebp - 0xe4], 1
jmp 0x419586
and dword [ebp - 0xe4], 0
mov esi, dword [ebp - 0xe4]
add esi, 8
push 0
lea ecx, [ebp - 0x158]
call fcn.00430d9e
cmp esi, dword [eax]
jle 0x4195ac
mov dword [ebp - 0xec], 1
jmp 0x4195b3
and dword [ebp - 0xec], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xec]
mov dword [ebp + eax - 0x29c], ecx
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x4c], 0
jne 0x4195e3
xor eax, eax
inc eax
jne 0x4195e3
and dword [ebp - 0xf4], 0
jmp 0x4195ed
mov dword [ebp - 0xf4], 1
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x78], eax
mov esi, dword [ebp - 0x78]
push 0
lea ecx, [ebp - 0x158]
call fcn.00430d9e
sub esi, dword [eax]
push 0
lea ecx, [ebp - 0x158]
call fcn.00430d9e
imul esi, dword [eax]
mov dword [ebp - 0x4c], esi
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
neg eax
cmp eax, dword [ebp - 0x64]
jle 0x419637
mov dword [ebp - 0xfc], 1
jmp 0x41963e
and dword [ebp - 0xfc], 0
push 0
lea ecx, [ebp - 0x158]
call fcn.00430d9e
mov ecx, dword [ebp - 0xfc]
cmp ecx, dword [eax]
jg 0x419661
mov dword [ebp - 0x104], 1
jmp 0x419668
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jne 0x41968a
push 3
pop eax
test eax, eax
jne 0x41968a
mov dword [ebp - 0x10c], 1
jmp 0x419691
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x10c], eax
jl 0x4196a8
mov dword [ebp - 0x114], 1
jmp 0x4196af
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x114], eax
je 0x4196c6
mov dword [ebp - 0x11c], 1
jmp 0x4196cd
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x11c]
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x228], eax
lea ecx, [ebp - 0x158]
call fcn.00430d82
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x10], 0
jne 0x419827
push 3
lea ecx, [ebp - 0x288]
call fcn.00430cb0
mov dword [ebp - 0x30], 0xe2236432
mov dword [ebp - 0x178], 2
push 0
push 0x63b7
push 1
push 0xa40
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x288]
push eax
push 0x7a99
push 0
call fcn.004149d2
add esp, 0x20
mov dword [ebp - 0x30], 0
jmp 0x41974d
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jg 0x4197b0
mov dword [ebp - 0x170], 4
mov dword [ebp - 0x16c], 9
push 0
lea eax, [ebp - 0x288]
push eax
lea eax, [ebp - 0x16c]
push eax
push 0x65de
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x178]
push eax
push 0x3a4c
push 0
call fcn.0042b2f9
add esp, 0x20
push dword [ebp - 0x30]
lea ecx, [ebp - 0x288]
call fcn.00430d9e
cmp dword [eax], 0
je 0x4197ae
jmp 0x419746
jmp 0x419746
lea ecx, [ebp - 0x288]
call fcn.00430d82
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x14c]
push eax
push 0
push 0x2950
lea eax, [ebp - 0x7c]
push eax
push 0
lea eax, [ebp - 0x14]
push eax
push 0x3214
push 0x37e0
push 0x56d8
push 0x2219
call fcn.0041fcb8
add esp, 0x2c
push 0
push 0xf88
push 0
push 0x135e
push 0x189
push 1
push 0x2dc6
push 0x1158
push 0x7b66
call fcn.00409b4b
add esp, 0x24
jmp 0x4193d4
mov dword [ebp - 0x38], 0xffffffff
push 2
lea ecx, [ebp - 0x164]
call fcn.00430cb0
push 1
lea ecx, [ebp - 0x2c8]
call fcn.00430cb0
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x164]
push eax
push 0
call fcn.00424633
add esp, 0xc
push 0
push 0x49b6
push 0x49f6
push 0x5d50
push 1
lea eax, [ebp - 0x2c8]
push eax
lea eax, [ebp - 0x188]
push eax
push 0x465f
push 0x7045
push 0
push 0x147c
call fcn.00414837
add esp, 0x2c
push 0x7893
push 1
push 0x5029
push 0
push 0x545e
push 0x61d2
push 0x3843
push 0x5be7
push 1
lea eax, [ebp - 0x38]
push eax
push 0x7e0c
push 0x23cc
push 0x1a25
push 0x64a1
call fcn.004117d4
add esp, 0x38
mov dword [ebp - 0x38], 0
jmp 0x4198ee
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jg 0x419bd1
mov dword [ebp - 0x1c], 0x82a1836c
mov dword [ebp - 0x124], 2
mov dword [ebp - 0x74], 9
push 2
lea ecx, [ebp - 0x320]
call fcn.00430cb0
mov dword [ebp - 0x2dc], 0xffffffff
mov dword [ebp - 0x54], 0x56370016
mov dword [ebp - 0x198], 1
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x28]
push eax
push 0
call fcn.0041a163
add esp, 0xc
mov dword [ebp - 0x28], 0
jmp 0x41995d
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x419973
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x344], 0x6e31bb00
jmp 0x419956
mov dword [ebp - 0x1c], 0
jmp 0x419983
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jg 0x419bc1
mov dword [ebp - 0x44], 0x1dfe4b28
mov dword [ebp - 0x2e4], 0xb8561371
mov dword [ebp - 0x2ec], 0xb000cd9d
push 1
lea ecx, [ebp - 0x310]
call fcn.00430cb0
mov dword [ebp - 0x2f4], 0xb4dfecbe
push 0x1783
push 0x2a96
push 1
lea eax, [ebp - 0x304]
push eax
push 0
lea eax, [ebp - 0x310]
push eax
push 0x75c9
push 0
call fcn.00411d06
add esp, 0x20
mov dword [ebp - 0x44], 1
jmp 0x4199fa
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jl 0x419bb1
mov dword [ebp - 0x2d8], 0x61fc
push 1
lea ecx, [ebp - 0x300]
call fcn.00430cb0
mov dword [ebp - 0x338], 0x84257392
mov dword [ebp - 0x190], 0x3d478254
mov dword [ebp - 0x134], 1
push 0x1593
push 1
push 0
push 0x5f6a
push 0
lea eax, [ebp - 0x2e0]
push eax
push 0x37d1
push 0xfd9
lea eax, [ebp - 0x300]
push eax
push 1
push 0x7473
push 0x77f4
call fcn.00412bd0
add esp, 0x30
push 0x3e52
lea eax, [ebp - 0x190]
push eax
push 0
call fcn.00418689
add esp, 0xc
mov dword [ebp - 0x54], 0
jmp 0x419a9b
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jg 0x419ba1
push 0
lea ecx, [ebp - 0x2c8]
call fcn.00430d9e
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x164]
call fcn.00430d9e
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x164]
call fcn.00430d9e
mov eax, dword [eax]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x124], eax
je 0x419aed
mov dword [ebp - 0x12c], 1
jmp 0x419af4
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0
jne 0x419b22
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x164]
call fcn.00430d9e
cmp dword [eax], 0
jne 0x419b22
and dword [ebp - 0x6c], 0
jmp 0x419b29
mov dword [ebp - 0x6c], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x6c]
mov dword [ebp + eax - 0x344], ecx
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x164]
call fcn.00430d9e
mov eax, dword [eax]
cmp eax, dword [ebp - 0x6c]
je 0x419b5a
mov dword [ebp - 0x13c], 1
jmp 0x419b61
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x314], eax
xor eax, eax
inc eax
cmp eax, 0x397bde51
jae 0x419b89
mov dword [ebp - 0x144], 1
jmp 0x419b90
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x198], eax
jmp 0x419a94
lea ecx, [ebp - 0x300]
call fcn.00430d82
jmp 0x4199f3
lea ecx, [ebp - 0x310]
call fcn.00430d82
jmp 0x41997c
lea ecx, [ebp - 0x320]
call fcn.00430d82
jmp 0x4198e7
lea ecx, [ebp - 0x2c8]
call fcn.00430d82
lea ecx, [ebp - 0x164]
call fcn.00430d82
push 4
push 0x1000
mov eax, dword [ebp - 0x14]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14c]
add ecx, dword [eax + 0xc]
push ecx
push 0x9063
push 0x88fd
call fcn.004073d2
pop ecx
pop ecx
call eax
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x14]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x1a0]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x7c]
call fcn.00407b4d
add esp, 0xc
mov dword [ebp - 0x24], 0xdf75dcec
push 2
lea ecx, [ebp - 0x250]
call fcn.00430cb0
mov dword [ebp - 0x1c0], 0x1e6
mov dword [ebp - 0x40], 0
jmp 0x419c63
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x419c79
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x350], 0xcdf5ef88
jmp 0x419c5c
push 0x5ca1
push 0x4887
push 0
push 1
push 0x7543
lea eax, [ebp - 0x250]
push eax
push 0
push 0x36da
push 0x27a4
push 1
push 0x3927
push 1
push 0x5ba2
lea eax, [ebp - 0x40]
push eax
push 0x7b0a
call fcn.004237b6
add esp, 0x3c
mov dword [ebp - 0x24], 0xffffffeb
jmp 0x419cce
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffe5
je 0x419dac
mov dword [ebp - 0x1b0], 0xfffffffb
mov dword [ebp - 0x1a8], 0x308f4727
mov dword [ebp - 0x2b0], 8
mov dword [ebp - 0x2ac], 8
mov dword [ebp - 0x2a8], 8
mov dword [ebp - 0x2a4], 8
lea ecx, [ebp - 0x6d]
call fcn.00430dad
push eax
lea eax, [ebp - 0x2a0]
push eax
lea eax, [ebp - 0x2b0]
push eax
lea ecx, [ebp - 0x358]
call fcn.00430db0
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x330]
call fcn.00430d5c
push 0x1c66
push 0x39a4
lea eax, [ebp - 0x250]
push eax
push 0
push 0x39a6
lea eax, [ebp - 0x1a8]
push eax
push 1
lea eax, [ebp - 0x1b0]
push eax
lea eax, [ebp - 0x330]
push eax
push 0x57ea
lea eax, [ebp - 0x24]
push eax
push 0x3f19
push 0x4552
push 0
push 0x6542
push 0x42c2
call fcn.0040ea4f
add esp, 0x40
lea ecx, [ebp - 0x330]
call fcn.00430d82
jmp 0x419cc7
push 0
lea ecx, [ebp - 0x250]
call fcn.00430d9e
cmp dword [eax], 0
je 0x419dd1
push 2
pop eax
test eax, eax
je 0x419dd1
mov dword [ebp - 0x1b8], 1
jmp 0x419dd8
and dword [ebp - 0x1b8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x350]
mov dword [ebp - 0x2e8], eax
mov esi, dword [ebp - 0x1c0]
push 0
lea ecx, [ebp - 0x250]
call fcn.00430d9e
cmp esi, dword [eax]
jle 0x419e17
push 0x3dc4
push 0
push 0x5b16
call fcn.004297fb
add esp, 0xc
jmp 0x419e47
mov dword [ebp - 0x1c8], 0x3f36fc75
push 1
push 0xa35
push 0x1d21
push 0x6fa7
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x1c8]
push eax
push 0
call fcn.00420625
add esp, 0x1c
lea ecx, [ebp - 0x250]
call fcn.00430d82
push 0
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x7c]
push eax
push 0
call fcn.00424d19
add esp, 0x10
jmp 0x4193d4
jmp 0x419eac
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x1e8], eax
push 0x21bf
push 0
push 0
push dword [ebp - 0x1e0]
push 0x7216
push dword [ebp - 0x1e8]
push 0x2798
call fcn.00416cb6
add esp, 0x1c
pop esi
mov esp, ebp
pop ebp
ret