Function at 0x41e291
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x290
push esi
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x41e3b5
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x104], eax
lea eax, [ebp + 0x38]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x1e0], eax
lea eax, [ebp + 0x18]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x12c]
movzx eax, byte [eax]
test eax, eax
je 0x41e37d
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x1c8]
movzx eax, byte [eax]
test eax, eax
je 0x41e348
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
push dword [eax + 8]
call fcn.00487597
pop ecx
pop ecx
mov ecx, dword [ebp - 0x6c]
mov ecx, dword [ecx]
mov dword [ecx + 8], eax
jmp 0x41e37b
mov byte [ebp - 0x22], 0
push 0x5f94
lea eax, [ebp - 0x22]
push eax
push 1
push 0x1f0a
push 1
push 1
push 0x57a3
push 1
push 0x6d4d
push 0x3525
push 0
call fcn.0041a9a9
add esp, 0x2c
jmp 0x41e3b0
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x1a8], eax
push dword [ebp - 0x1a8]
push 0x5335
push 0
push dword [ebp - 0x10c]
call fcn.00427631
add esp, 0x10
jmp 0x41f5a6
lea eax, [ebp + 0x2c]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x1f0], eax
lea eax, [ebp + 8]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x1d0]
movzx eax, byte [eax]
test eax, eax
je 0x41e447
push 0x4a3
push 0x3a0b
push 0x498c
push 0x6ec5
push 0x5444
push 0x56bf
push 0x4fa4
push 0x2786
push 1
push 0x60b6
push 0x76f3
push 0x573b
call fcn.00415030
add esp, 0x30
jmp 0x41f5a6
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0xf0]
movzx eax, byte [eax]
test eax, eax
je 0x41f3bd
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x60], eax
push 2
lea ecx, [ebp - 0xec]
call fcn.00434056
mov dword [ebp - 0x20], 0xbdba76aa
push 0x620d
push 0x1dcf
push 0x5349
lea eax, [ebp - 0xec]
push eax
push 0x28d0
push 0x4776
push 0x7dd3
push 1
push 0
push 0x2c2c
push 0
push 0x3c20
lea eax, [ebp - 0x234]
push eax
push 0
push 0x212a
push 1
call fcn.00419649
add esp, 0x40
mov dword [ebp - 0x20], 0
jmp 0x41e51a
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jg 0x41e6ba
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x68], 0
jmp 0x41e53b
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x41e551
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x250], 0x5062d7bc
jmp 0x41e534
mov dword [ebp - 0x14], 0
jmp 0x41e561
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jg 0x41e6b5
mov dword [ebp - 0xb0], 0xffffffff
mov byte [ebp - 0x1b], 0
push 1
push 0x3e69
push 0
push 0x3610
push 0x65f7
push 0x1a12
push 0x625d
lea eax, [ebp - 0x1b]
push eax
push 0x3557
push 0x1ebd
push 0x7fdc
push 1
call fcn.004234af
add esp, 0x30
cmp dword [ebp - 0x14], 0xfffffff8
jg 0x41e5c5
mov dword [ebp - 0xd4], 1
jmp 0x41e5cc
and dword [ebp - 0xd4], 0
mov esi, dword [ebp - 0x20]
push dword [ebp - 0x14]
lea ecx, [ebp - 0xec]
call fcn.00434144
mov ecx, dword [ebp - 0xd4]
sub ecx, dword [eax]
cmp esi, ecx
jge 0x41e5f2
mov dword [ebp - 0x74], 1
jmp 0x41e5f6
and dword [ebp - 0x74], 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x74]
jne 0x41e60d
cmp dword [ebp - 0x20], 0
jne 0x41e60d
and dword [ebp - 0xdc], 0
jmp 0x41e617
mov dword [ebp - 0xdc], 1
push dword [ebp - 0x14]
lea ecx, [ebp - 0xec]
call fcn.00434144
mov eax, dword [eax]
cmp eax, dword [ebp - 0xdc]
jge 0x41e638
mov dword [ebp - 0x80], 1
jmp 0x41e63c
and dword [ebp - 0x80], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0xec]
call fcn.00434144
mov eax, dword [eax]
neg eax
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0xb0]
cmp eax, dword [ebp - 0x80]
jge 0x41e66b
mov dword [ebp - 0xd8], 1
jmp 0x41e672
and dword [ebp - 0xd8], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0xec]
call fcn.00434144
mov ecx, dword [ebp - 0xd8]
cmp ecx, dword [eax]
jle 0x41e696
mov dword [ebp - 0x88], 1
jmp 0x41e69d
and dword [ebp - 0x88], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x88]
mov dword [ebp + eax - 0x250], ecx
jmp 0x41e55a
jmp 0x41e513
lea ecx, [ebp - 0xec]
call fcn.00434128
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x60]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 4], eax
push 2
lea ecx, [ebp - 0x58]
call fcn.00434056
mov dword [ebp - 0x18], 5
mov dword [ebp - 0x78], 0xffffffff
push 0x538e
lea eax, [ebp - 0x58]
push eax
push 0x6df4
lea eax, [ebp - 0x40]
push eax
push 0
call fcn.00419952
add esp, 0x14
mov dword [ebp - 0x40], 0
jmp 0x41e71e
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x41e731
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0xc], 0x5d16df25
jmp 0x41e717
mov byte [ebp - 0x19], 0
push 0x35a7
lea eax, [ebp - 0x19]
push eax
push 0x2865
push 0
call fcn.004286ff
add esp, 0x10
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xc], 1
jmp 0x41e772
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xc], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc], 0
jl 0x41eabe
mov dword [ebp - 0xc8], 0xcc72fddd
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0xc]
lea ecx, [ebp - 0x58]
call fcn.00434144
mov esi, eax
push 1
lea ecx, [ebp - 0x58]
call fcn.00434144
mov ecx, dword [esi]
imul ecx, dword [eax]
cmp ecx, 0xaa61
je 0x41e7c4
mov dword [ebp - 0x90], 1
jmp 0x41e7cb
and dword [ebp - 0x90], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc]
mov dword [ebp - 0x244], eax
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0xc]
lea ecx, [ebp - 0x58]
call fcn.00434144
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0xc]
lea ecx, [ebp - 0x58]
call fcn.00434144
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0xc]
sub esi, 0x50faeb38
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0xc]
lea ecx, [ebp - 0x58]
call fcn.00434144
cmp esi, dword [eax]
jle 0x41e831
mov dword [ebp - 0xb8], 1
jmp 0x41e838
and dword [ebp - 0xb8], 0
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0xc]
lea ecx, [ebp - 0x58]
call fcn.00434144
mov ecx, dword [ebp - 0xb8]
cmp ecx, dword [eax]
jne 0x41e860
mov dword [ebp - 0x134], 1
jmp 0x41e867
and dword [ebp - 0x134], 0
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0xc]
lea ecx, [ebp - 0x58]
call fcn.00434144
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x90]
sub ecx, dword [ebp + eax - 0xc]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0xc]
jl 0x41e8a1
mov dword [ebp - 0xd0], 1
jmp 0x41e8a8
and dword [ebp - 0xd0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
cmp dword [ebp - 0xd0], eax
jle 0x41e8c6
mov dword [ebp - 0x98], 1
jmp 0x41e8cd
and dword [ebp - 0x98], 0
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x18], eax
mov esi, dword [ebp - 0x18]
push 4
pop eax
shl eax, 0
sub esi, dword [ebp + eax - 0xc]
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0xc]
lea ecx, [ebp - 0x58]
call fcn.00434144
cmp esi, dword [eax]
jg 0x41e905
mov dword [ebp - 0xc0], 1
jmp 0x41e90c
and dword [ebp - 0xc0], 0
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0xc]
lea ecx, [ebp - 0x58]
call fcn.00434144
mov ecx, dword [ebp - 0xc0]
cmp ecx, dword [eax]
jl 0x41e934
mov dword [ebp - 0xa0], 1
jmp 0x41e93b
and dword [ebp - 0xa0], 0
cmp dword [ebp - 0xa0], 0x5498
jge 0x41e953
mov dword [ebp - 0x1c0], 1
jmp 0x41e95a
and dword [ebp - 0x1c0], 0
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0xc]
lea ecx, [ebp - 0x58]
call fcn.00434144
mov esi, eax
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0xc]
lea ecx, [ebp - 0x58]
call fcn.00434144
mov ecx, dword [esi]
mov dword [eax], ecx
push 1
lea ecx, [ebp - 0x58]
call fcn.00434144
cmp dword [eax], 0
je 0x41e9f4
mov dword [ebp - 0x13c], 0xdfee
mov dword [ebp - 0x5c], 0
jmp 0x41e9ad
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x41e9c3
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x26c], 0x8e6bae05
jmp 0x41e9a6
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x26c]
push 4
pop ecx
shl ecx, 1
sub eax, dword [ebp + ecx - 0x26c]
mov ecx, 0x2ae4
sub ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x13c], eax
jmp 0x41eab9
mov dword [ebp - 0x1e8], 1
mov dword [ebp - 0x18], 0
jmp 0x41ea0e
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xfffffff0
jl 0x41eab9
mov dword [ebp - 0x254], 0xe33a9025
mov dword [ebp - 0x144], 0x6d99275a
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc], 0
je 0x41ea4a
xor eax, eax
inc eax
je 0x41ea4a
mov dword [ebp - 0xe0], 1
jmp 0x41ea51
and dword [ebp - 0xe0], 0
cmp dword [ebp - 0xe0], 0xfffe
ja 0x41ea69
mov dword [ebp - 0xa8], 1
jmp 0x41ea70
and dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0
jne 0x41ea8c
cmp dword [ebp - 0x1e8], 0
mov dword [ebp - 0x78], 0x8c6aee34
push 0x6c6a
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x144]
push eax
push 0
push 0x4121
push 0
call fcn.0042a233
add esp, 0x18
jmp 0x41ea07
jmp 0x41e75d
lea ecx, [ebp - 0x58]
call fcn.00434128
and dword [ebp - 0x70], 0
jmp 0x41eadc
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 4]
add eax, 0x28
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x70], eax
jge 0x41f3b8
push 3
lea ecx, [ebp - 0x224]
call fcn.00434056
mov dword [ebp - 0x198], 0xffffffff
mov dword [ebp - 0x14c], 0x4c266d8f
push 0
push 0x176
lea eax, [ebp - 0x258]
push eax
push 0x4a58
lea eax, [ebp - 0x224]
push eax
call fcn.00426611
add esp, 0x14
push 1
push 0x3c57
push 0x25d7
push 0
push 0x5834
push 0
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x14c]
push eax
lea eax, [ebp - 0x224]
push eax
call fcn.0042872b
add esp, 0x24
lea ecx, [ebp - 0x224]
call fcn.00434128
mov dword [ebp - 0x2c], 0xdde0
mov dword [ebp - 0x154], 0x5cdbe8e5
mov dword [ebp - 0x238], 0
push 4
lea ecx, [ebp - 0x20c]
call fcn.00434056
mov dword [ebp - 0x194], 0xf4a0426a
mov dword [ebp - 0x190], 0
push 0
lea eax, [ebp - 0x240]
push eax
push 0x6fb9
push 0x3c63
lea eax, [ebp - 0x20c]
push eax
push 0x4445
call fcn.00433cbb
add esp, 0x18
lea eax, [ebp - 0x194]
push eax
push 0x274d
push 0x4964
push 0
push 1
push 0x3464
push 0x1fc8
push 0x5c42
push 0x1298
push 0x5dc7
call fcn.00411f97
add esp, 0x28
push 2
lea ecx, [ebp - 0x20c]
call fcn.00434144
cmp dword [eax], 0x5e53
jl 0x41ec56
mov byte [ebp - 0x23], 0
push 0
push 0x4d2e
push 0x6bf7
push 1
push 0
lea eax, [ebp - 0x23]
push eax
push 0x173c
call fcn.00411304
add esp, 0x1c
push 0
lea eax, [ebp - 0x154]
push eax
call fcn.004177f4
pop ecx
pop ecx
jmp 0x41ed30
mov dword [ebp - 0x34], 0xc7fffaa2
mov dword [ebp - 0x15c], 1
push 0x76f8
push 1
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x190]
push eax
push 0x3f46
push 0x7bab
lea eax, [ebp - 0x20c]
push eax
push 0xe1e
lea eax, [ebp - 0x15c]
push eax
push 1
push 0x54da
push 0x146b
push 0
push 1
lea eax, [ebp - 0x34]
push eax
push 1
push 0x48de
call fcn.00427108
add esp, 0x44
mov dword [ebp - 0x34], 0x14
jmp 0x41ecc9
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xd
je 0x41ed30
mov dword [ebp - 0x4c], 0
jmp 0x41ecdf
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x41ecf5
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x27c], 0
jmp 0x41ecd8
mov byte [ebp - 0x21], 0
push 0
lea eax, [ebp - 0x21]
push eax
call fcn.0042a3ff
pop ecx
pop ecx
mov dword [ebp - 0x2c], 0xfffffff6
jmp 0x41ed16
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffe8
je 0x41ed2e
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x27c], 0x5f0e77da
jmp 0x41ed0f
jmp 0x41ecc2
lea ecx, [ebp - 0x20c]
call fcn.00434128
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x24]
and eax, 0x20000000
je 0x41ed51
mov dword [ebp - 0x7c], 1
jmp 0x41ed55
and dword [ebp - 0x7c], 0
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x1bc], 1
mov dword [ebp - 0x1ac], 0xfffffffe
mov dword [ebp - 0x16c], 0xfffffffc
mov dword [ebp - 0x1b4], 0x6dd2cc9
mov dword [ebp - 0x84], 0xe7b1b0ca
mov dword [ebp - 0x164], 0x9d66de6b
mov dword [ebp - 0x44], 0
jmp 0x41edaa
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x41edc0
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x284], 0x6a6c65b0
jmp 0x41eda3
lea eax, [ebp - 0x84]
push eax
push 0
lea eax, [ebp - 0x1ac]
push eax
push 1
push 0x6ae7
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0x1b4]
push eax
push 0
push 0x16b9
push 0x614e
lea eax, [ebp - 0x16c]
push eax
push 0x8ac
lea eax, [ebp - 0x1bc]
push eax
call fcn.0041b0fb
add esp, 0x34
push 1
push 1
push 0x2cd2
push 0
lea eax, [ebp - 0x84]
push eax
push 0x6104
push 0x6c42
push 0x4065
push 0x3f47
push 1
push 0x2f0a
push 1
call fcn.00410f25
add esp, 0x30
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x24]
and eax, 0x40000000
je 0x41ee5c
mov dword [ebp - 0x8c], 1
jmp 0x41ee63
and dword [ebp - 0x8c], 0
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x174], 4
mov dword [ebp - 0x3c], 0x7c4d1454
mov dword [ebp - 0x1c4], 0x4431fada
lea eax, [ebp - 0x3c]
push eax
push 0x3eb3
push 0
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x1c4]
push eax
push 0x5f8
call fcn.0041b2f7
add esp, 0x18
mov dword [ebp - 0x3c], 0xffffffff
jmp 0x41eec0
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 5
jne 0x41ef38
push 0x4153
push 1
push 0x1cc5
push 0x1a40
push 0x2b47
push 0x7e16
push 0x7bb7
push 1
push 0x5762
push 0
push 0
push 0x701b
push 0x7d0a
push 0x3fa
push 0x1875
push 1
call fcn.0042a774
add esp, 0x40
mov byte [ebp - 0x1a], 0
movzx eax, byte [ebp - 0x1a]
test eax, eax
je 0x41ef36
push 0x1c1
push 0x5d4e
push 0
push 0x32ca
push 1
call fcn.0040ae7f
add esp, 0x14
jmp 0x41eeb9
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x24]
and eax, 0x80000000
je 0x41ef51
mov dword [ebp - 0x94], 1
jmp 0x41ef58
and dword [ebp - 0x94], 0
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x120], eax
push 0
push 0xf07
call fcn.0041c949
pop ecx
pop ecx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x24]
and eax, 0x2000000
je 0x41f0dd
push 0x4000
mov eax, dword [ebp - 4]
push dword [eax + 0x10]
mov eax, dword [ebp - 4]
push dword [eax + 8]
push 0x15a4
push 0x179b
call fcn.00406edc
pop ecx
pop ecx
call eax
mov dword [ebp - 0x30], 0xf5720e83
mov dword [ebp - 0x28], 0x4f37
push 2
lea ecx, [ebp - 0x230]
call fcn.00434056
mov dword [ebp - 0x1d4], 6
mov dword [ebp - 0x1cc], 0x38951fe5
lea eax, [ebp - 0x248]
push eax
push 0x170a
push 0x763a
push 0x497d
push 0x6a96
push 1
push 0x44b3
push 0x5e46
push 0x51d8
push 0x1ce7
push 0
push 0x410f
push 0
lea eax, [ebp - 0x230]
push eax
push 0x58c9
push 0x113c
push 0x5041
push 0x24f5
call fcn.00415079
add esp, 0x48
lea eax, [ebp - 0x30]
push eax
push 0x6ffa
push 0x58be
push 0
push 0
lea eax, [ebp - 0x28]
push eax
push 1
call fcn.00417e85
add esp, 0x1c
mov dword [ebp - 0x30], 0
jmp 0x41f063
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jg 0x41f0cd
mov dword [ebp - 0x184], 0xfffffff6
mov dword [ebp - 0x28], 0
jmp 0x41f083
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jg 0x41f0cb
mov dword [ebp - 0x17c], 4
push 0
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0x1cc]
push eax
push 0x27b6
lea eax, [ebp - 0x184]
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.004179cd
add esp, 0x20
jmp 0x41f07c
jmp 0x41f05c
lea ecx, [ebp - 0x230]
call fcn.00434128
jmp 0x41eacc
mov dword [ebp - 0x100], 0xd94f
mov dword [ebp - 0xf8], 1
mov dword [ebp - 0x19c], 1
mov dword [ebp - 0x25c], 7
mov dword [ebp - 0x270], 0xfffffffc
mov dword [ebp - 0x1a4], 0xfffffffa
mov dword [ebp - 0x1e4], 0xe28de637
mov dword [ebp - 0x1dc], 0x10afbd13
push 3
lea ecx, [ebp - 0x218]
call fcn.00434056
mov dword [ebp - 0xf4], 0xd52a
mov dword [ebp - 0x18c], 0xffff
mov dword [ebp - 0x108], 0xfffffff9
push 1
lea eax, [ebp - 0x23c]
push eax
push 0
push 0x14db
push 0
lea eax, [ebp - 0x218]
push eax
push 1
call fcn.0041ca15
add esp, 0x1c
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x1dc]
push eax
push 0x61e4
lea eax, [ebp - 0x1e4]
push eax
push 0x7fa2
push 1
push 0x7c46
lea eax, [ebp - 0x1a4]
push eax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xf4]
push eax
push 0
push 0x567c
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0x108]
push eax
call fcn.004092ef
add esp, 0x40
lea ecx, [ebp - 0x218]
call fcn.00434128
push 1
lea eax, [ebp - 0x110]
push eax
push 0
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 4]
push eax
push 0x1172
push 0x3e36
push 0x5e
push 0x251b
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x120]
push eax
push 0
call fcn.004234af
add esp, 0x30
lea eax, [ebp - 0x60]
push eax
push 0
push 0x1cc3
push 0x199e
push 0x84f
push 0x22b1
push 0x7b92
push 0x571e
push 1
push 0x2761
push 0x3302
push 0
push 0x62dd
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 4]
push eax
call fcn.004121d0
add esp, 0x3c
mov dword [ebp - 0x64], 0
jmp 0x41f285
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x41f29b
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x200], 0x20624039
jmp 0x41f27e
push 0
call fcn.0041f778
pop ecx
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x200], 0
jmp 0x41f2d1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x200]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x200], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x200], 0xffffffe2
jg 0x41f370
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x48], 0
jmp 0x41f2ff
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x41f315
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x290], 0x6ff5
jmp 0x41f2f8
push 0x11d7
push 0x7817
lea eax, [ebp - 0x128]
push eax
push 0x46b
push 0x245a
push 0x3969
push 1
push 0x4ac2
push 0x1af7
push 0x2831
push 0xc14
push 0x2494
push 0
push 0xe05
push 0x6346
push 1
push 0xf7e
call fcn.00411b8e
add esp, 0x44
jmp 0x41f2b6
cmp dword [ebp - 0x9c], 0
jbe 0x41f3b3
push 0x778f
push 0
call fcn.00427959
pop ecx
pop ecx
lea eax, [ebp - 0x260]
push eax
push dword [ebp - 0x130]
push dword [ebp - 0x9c]
mov eax, dword [ebp - 4]
push dword [eax + 8]
push 0x15a4
push 0xdc8
call fcn.00406edc
pop ecx
pop ecx
call eax
jmp 0x41eacc
jmp 0x41f5a6
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x178], eax
push 1
mov ecx, dword [ebp - 0x10]
call fcn.00434144
mov dword [eax], 2
jmp 0x41f44a
push 1
mov ecx, dword [ebp - 0x10]
call fcn.00434144
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xa4]
mov dword [ecx], eax
push 1
mov ecx, dword [ebp - 0x10]
call fcn.00434144
cmp dword [eax], 0
jl 0x41f5a6
push 1
mov ecx, dword [ebp - 0x10]
call fcn.00434144
cmp dword [eax], 0
je 0x41f483
mov eax, dword [ebp - 0x178]
cmp dword [eax], 0
je 0x41f483
mov dword [ebp - 0xac], 1
jmp 0x41f48a
and dword [ebp - 0xac], 0
push 3
mov ecx, dword [ebp - 0x10]
call fcn.00434144
mov esi, eax
push 1
mov ecx, dword [ebp - 0x10]
call fcn.00434144
mov eax, dword [eax]
mov ecx, dword [esi]
lea eax, [ecx + eax*2]
cmp dword [ebp - 0xac], eax
je 0x41f4bb
mov dword [ebp - 0xb4], 1
jmp 0x41f4c2
and dword [ebp - 0xb4], 0
push 1
mov ecx, dword [ebp - 0x10]
call fcn.00434144
push dword [eax]
mov ecx, dword [ebp - 0x38]
call fcn.00434144
mov eax, dword [eax]
cmp eax, dword [ebp - 0xb4]
je 0x41f4ec
mov dword [ebp - 0x180], 1
jmp 0x41f4f3
and dword [ebp - 0x180], 0
push 1
mov ecx, dword [ebp - 0x10]
call fcn.00434144
push dword [eax]
mov ecx, dword [ebp - 0x38]
call fcn.00434144
imul eax, dword [eax], 0x9d73
test eax, eax
jne 0x41f51d
mov dword [ebp - 0xbc], 1
jmp 0x41f524
and dword [ebp - 0xbc], 0
push 1
mov ecx, dword [ebp - 0x10]
call fcn.00434144
push dword [eax]
mov ecx, dword [ebp - 0x38]
call fcn.00434144
mov ecx, dword [ebp - 0xbc]
cmp ecx, dword [eax]
jge 0x41f54e
mov dword [ebp - 0xc4], 1
jmp 0x41f555
and dword [ebp - 0xc4], 0
push 1
mov ecx, dword [ebp - 0x38]
call fcn.00434144
mov esi, dword [ebp - 0xc4]
imul esi, dword [eax]
push 1
mov ecx, dword [ebp - 0x10]
call fcn.00434144
push dword [eax]
mov ecx, dword [ebp - 0x38]
call fcn.00434144
cmp esi, dword [eax]
jg 0x41f58c
mov dword [ebp - 0xcc], 1
jmp 0x41f593
and dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0x188]
mov ecx, dword [ebp - 0xcc]
mov dword [eax], ecx
jmp 0x41f429
pop esi
mov esp, ebp
pop ebp
ret