Function at 0x44075d
Capabilities:
Contain obfuscated stackstrings
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3e0
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x441fcc
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x280], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x294], eax
lea eax, [ebp + 0x14]
mov dword [ebp - 0x26c], eax
lea eax, [ebp + 0x20]
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x278], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x270], eax
mov eax, dword [ebp - 0x26c]
movzx eax, byte [eax]
test eax, eax
je 0x441f94
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x250], eax
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x298], eax
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp - 0x1ec]
movzx eax, byte [eax]
test eax, eax
je 0x440fe8
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x48], 0x9beb0647
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x254], 0x7a1245c8
mov dword [ebp - 0x388], 0xffff
mov dword [ebp - 0x64], 0
jmp 0x44086f
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x440885
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x2bc], 0xbca63185
jmp 0x440868
mov dword [ebp - 0x48], 1
jmp 0x440895
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x440939
mov dword [ebp - 0x3c], 0xaaaeb9ae
push 0x1286
lea eax, [ebp - 0x34]
push eax
push 1
push 0x753d
push 1
push 0x55bf
push 0
push 0x331f
call fcn.004443b1
add esp, 0x20
mov dword [ebp - 0x3c], 1
jmp 0x4408dc
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jl 0x440934
mov dword [ebp - 0x34], 0
jmp 0x4408f2
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jg 0x440932
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x2bc]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x1a8]
mov dword [ebp + eax*4 - 0x2bc], ecx
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x254], eax
jmp 0x4408eb
jmp 0x4408d5
jmp 0x44088e
push 4
push 0x2000
mov eax, dword [ebp - 0xa8]
push dword [eax + 0x50]
mov eax, dword [ebp - 0xa8]
push dword [eax + 0x34]
push 0x29da
push 0x2536
call fcn.0041ce49
pop ecx
pop ecx
call eax
mov ecx, dword [ebp - 0x90]
mov dword [ecx], eax
mov dword [ebp - 0x10], 7
mov dword [ebp - 0x284], 0x684a08de
mov dword [ebp - 0x84], 0x332a5b4d
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x10], 0
jmp 0x44099f
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xfffffffa
jle 0x440f17
mov dword [ebp - 0xc], 0xfffffff6
mov dword [ebp - 8], 0xffffffff
mov dword [ebp - 0x15c], 1
mov dword [ebp - 0x2dc], 0x46587a76
mov dword [ebp - 0x2d8], 0x46587a76
mov dword [ebp - 0x2d4], 0x46587a76
mov dword [ebp - 0x2d0], 0x46587a76
mov dword [ebp - 0x264], 0x79c14114
mov dword [ebp - 0xc], 0
jmp 0x440a03
mov eax, dword [ebp - 0xc]
dec eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0xffffffea
je 0x440ceb
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x70], 0
jmp 0x440a24
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jge 0x440a3a
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x1c8], 0x87a7525d
jmp 0x440a1d
cmp dword [ebp - 0xc], 0x2a14
jle 0x440a4f
mov dword [ebp - 0x1b0], 1
jmp 0x440a56
and dword [ebp - 0x1b0], 0
cmp dword [ebp - 0x1b0], 0xec79e672
je 0x440a6e
mov dword [ebp - 0xbc], 1
jmp 0x440a75
and dword [ebp - 0xbc], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x10]
cmp dword [ebp + eax - 0x1c8], ecx
jle 0x440a93
mov dword [ebp - 0x1fc], 1
jmp 0x440a9a
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x32c], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x334], eax
xor eax, eax
jne 0x440ace
cmp dword [ebp - 0xc], 0
jne 0x440ace
and dword [ebp - 0x148], 0
jmp 0x440ad8
mov dword [ebp - 0x148], 1
mov eax, dword [ebp - 0xbc]
cmp eax, dword [ebp - 0x148]
jl 0x440af2
mov dword [ebp - 0xc4], 1
jmp 0x440af9
and dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0xc4], eax
jle 0x440b10
mov dword [ebp - 0x144], 1
jmp 0x440b17
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x144]
mov dword [ebp - 8], eax
mov dword [ebp - 8], 1
jmp 0x440b30
mov eax, dword [ebp - 8]
dec eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jl 0x440ce6
mov dword [ebp - 0xec], 4
cmp dword [ebp - 0x284], 0xffffffff
jge 0x440b59
mov dword [ebp - 0xcc], 1
jmp 0x440b60
and dword [ebp - 0xcc], 0
or eax, 0xffffffff
sub eax, dword [ebp - 0xcc]
cmp eax, 0x56cd219f
jle 0x440b7c
mov dword [ebp - 0x17c], 1
jmp 0x440b83
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x17c]
add eax, 0xa603
je 0x440ba2
cmp dword [ebp - 8], 0
je 0x440ba2
mov dword [ebp - 0xd4], 1
jmp 0x440ba9
and dword [ebp - 0xd4], 0
cmp dword [ebp - 0xd4], 0x34071e99
jl 0x440bc4
cmp dword [ebp - 0x10], 0
jne 0x440bc4
and dword [ebp - 0x204], 0
jmp 0x440bce
mov dword [ebp - 0x204], 1
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x1c8]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x25c]
mov dword [ebp + eax*4 - 0x1c8], ecx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x33c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x14]
cmp dword [ebp + eax - 0x1c8], ecx
jge 0x440c15
mov dword [ebp - 0x14c], 1
jmp 0x440c1c
and dword [ebp - 0x14c], 0
imul eax, dword [ebp - 0x14c], 0xffff
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
add eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jl 0x440c4c
cmp dword [ebp - 8], 0
je 0x440c4c
mov dword [ebp - 0xdc], 1
jmp 0x440c53
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0xdc]
sub eax, dword [ebp - 0xec]
jne 0x440c70
cmp dword [ebp - 0x14], 0
jne 0x440c70
and dword [ebp - 0x1a4], 0
jmp 0x440c7a
mov dword [ebp - 0x1a4], 1
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x40], eax
imul eax, dword [ebp - 0x40], 0xfffffff8
cmp eax, dword [ebp - 0x14]
jge 0x440c98
mov dword [ebp - 0xe4], 1
jmp 0x440c9f
and dword [ebp - 0xe4], 0
cmp dword [ebp - 0xe4], 0xff51
jg 0x440cb7
mov dword [ebp - 0x154], 1
jmp 0x440cbe
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x14], eax
push 0x71ef
push 1
lea eax, [ebp - 0xec]
push eax
push 0
push 1
call fcn.00442013
add esp, 0x14
jmp 0x440b29
jmp 0x4409fc
mov dword [ebp - 8], 0xffffffe5
jmp 0x440cfb
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0xfffffff5
jne 0x440f12
mov dword [ebp - 0x10c], 0xfffffff7
mov dword [ebp - 0x20c], 9
mov dword [ebp - 0x214], 0x7339
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x40], eax
je 0x440d37
mov dword [ebp - 0x18c], 1
jmp 0x440d3e
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x3d47
jg 0x440d59
mov dword [ebp - 0x184], 1
jmp 0x440d60
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x184]
neg eax
cmp eax, dword [ebp - 0x10]
jg 0x440d79
mov dword [ebp - 0xf4], 1
jmp 0x440d80
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0xf4]
neg eax
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x15c]
cmp dword [ebp - 0x40], eax
jge 0x440da5
mov dword [ebp - 0xfc], 1
jmp 0x440dac
and dword [ebp - 0xfc], 0
cmp dword [ebp - 0xfc], 0x12cb5dcf
je 0x440dc4
mov dword [ebp - 0x19c], 1
jmp 0x440dcb
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x19c], eax
jne 0x440de5
mov dword [ebp - 0x104], 1
jmp 0x440dec
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x20c]
cmp dword [ebp - 0x104], eax
jl 0x440e06
mov dword [ebp - 0x164], 1
jmp 0x440e0d
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x164]
sub eax, 0xb686
je 0x440e2f
cmp dword [ebp - 0x10c], 0
je 0x440e2f
mov dword [ebp - 0x114], 1
jmp 0x440e36
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x18c]
cmp eax, dword [ebp - 0x114]
jge 0x440e50
mov dword [ebp - 0x16c], 1
jmp 0x440e57
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x16c], eax
jne 0x440e6e
mov dword [ebp - 0x290], 1
jmp 0x440e75
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x364], eax
xor eax, eax
inc eax
je 0x440e98
cmp dword [ebp - 8], 0
je 0x440e98
mov dword [ebp - 0xac], 1
jmp 0x440e9f
and dword [ebp - 0xac], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xac]
mov dword [ebp + eax - 0x2dc], ecx
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0xac], eax
jg 0x440ecc
mov dword [ebp - 0x11c], 1
jmp 0x440ed3
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x11c]
sub eax, 0xab9c
mov dword [ebp - 0x264], eax
push 0x67d5
push 0x7d83
push 0x52f0
push 1
push 0
push 1
push 0x77f6
push 0x5ef7
push 1
call fcn.004401bd
add esp, 0x24
jmp 0x440cf4
jmp 0x440998
mov eax, dword [ebp - 0x90]
cmp dword [eax], 0
jne 0x440fe3
mov dword [ebp - 0x1ac], 0x99841b3c
mov dword [ebp - 0x224], 0x7e434392
mov dword [ebp - 0x288], 7
mov dword [ebp - 0x21c], 1
push 0x3556
push 0x5c32
push 0x4a99
push 1
push 1
push 1
push 0x4f3b
lea eax, [ebp - 0x1ac]
push eax
push 1
call fcn.004401bd
add esp, 0x24
lea eax, [ebp - 0x1ac]
push eax
push 1
lea eax, [ebp - 0x21c]
push eax
push 1
lea eax, [ebp - 0x288]
push eax
lea eax, [ebp - 0x224]
push eax
push 1
push 0x4b39
push 0x40e7
push 1
push 0x146d
push 1
call fcn.0043fd10
add esp, 0x30
push 4
push 0x2000
mov eax, dword [ebp - 0xa8]
push dword [eax + 0x50]
push 0
push 0x29da
push 0x2536
call fcn.0041ce49
pop ecx
pop ecx
call eax
mov ecx, dword [ebp - 0x90]
mov dword [ecx], eax
jmp 0x441f92
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x6c], eax
push 1
push 1
push 0
push 0x43f2
push 0x27cb
push 0
call fcn.00436f0e
add esp, 0x18
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 4]
mov dword [ebp - 0x160], eax
push 1
push 0x2c8e
push 0
push 0
push 0x3c27
push 0x7e48
push 0x67bc
call fcn.004421fe
add esp, 0x1c
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x274], 0xfffffffe
mov dword [ebp - 0x54], 0
jmp 0x441072
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 4
jge 0x441088
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x1c0], 0xa8eac8b
jmp 0x44106b
mov dword [ebp - 4], 3
jmp 0x441098
mov eax, dword [ebp - 4]
dec eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jl 0x44113d
mov dword [ebp - 0x5c], 0x7dd68876
mov dword [ebp - 0x74], 0
jmp 0x4410b9
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x4410cf
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x39c], 0
jmp 0x4410b2
mov dword [ebp - 0x5c], 0
jmp 0x4410df
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jg 0x441138
mov dword [ebp - 0x234], 0xd297
push 1
push 1
push 0x6b1c
push 0x5975
lea eax, [ebp - 0x234]
push eax
push 0x3b0c
push 1
push 0
push 0
call fcn.00439a7d
add esp, 0x24
push 0
push 0
push 0x2a4b
push 0x55aa
push 0x1b3b
push 0
push 1
call fcn.004403e4
add esp, 0x1c
jmp 0x4410d8
jmp 0x441091
mov dword [ebp - 4], 3
jmp 0x44114d
mov eax, dword [ebp - 4]
dec eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jl 0x441313
mov dword [ebp - 0x12c], 0x8648
mov dword [ebp - 0x174], 0xfffffff9
lea eax, [ebp - 0x12c]
push eax
push 0
call fcn.0044559c
pop ecx
pop ecx
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x1c0]
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 4], 0
jne 0x44124f
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x1c0], 0xa4d9a54e
jb 0x4411be
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1c0], 0
jne 0x4411be
and dword [ebp - 0x124], 0
jmp 0x4411c8
mov dword [ebp - 0x124], 1
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0
je 0x4411e4
cmp dword [ebp - 0x12c], 0
mov eax, 0xd683
test eax, eax
je 0x4411f9
mov dword [ebp - 0x13c], 1
jmp 0x441200
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x1c0]
imul eax, dword [ebp - 0x13c]
mov ecx, dword [ebp - 4]
cmp eax, dword [ebp + ecx*4 - 0x1c0]
jne 0x441229
mov dword [ebp - 0x134], 1
jmp 0x441230
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x1c0]
cmp dword [ebp - 0x134], eax
jle 0x44124f
xor eax, eax
jne 0x44124f
and dword [ebp - 0x140], 0
jmp 0x441259
mov dword [ebp - 0x140], 1
cmp dword [ebp - 0x140], 1
jb 0x441274
mov eax, 0xf22a1efe
test eax, eax
jne 0x441274
and dword [ebp - 0xb4], 0
jmp 0x44127e
mov dword [ebp - 0xb4], 1
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 4]
jne 0x441299
mov dword [ebp - 0xb8], 1
jmp 0x4412a0
and dword [ebp - 0xb8], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x1c0]
mov ecx, dword [ebp - 4]
mov ecx, dword [ebp + ecx*4 - 0x1c0]
sub ecx, dword [ebp - 0xb8]
sub eax, ecx
cmp eax, dword [ebp - 4]
jne 0x4412d3
mov eax, 0x2869
test eax, eax
jne 0x4412d3
and dword [ebp - 0xc0], 0
jmp 0x4412dd
mov dword [ebp - 0xc0], 1
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x1c0]
cmp dword [ebp - 0xc0], eax
jne 0x4412fb
mov dword [ebp - 0xc8], 1
jmp 0x441302
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x274], eax
jmp 0x441146
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x6c]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x380], 1
mov dword [ebp - 0x2e0], 5
mov dword [ebp - 0x384], 0x1551da62
mov dword [ebp - 0x348], 1
mov dword [ebp - 0x28], 0
jmp 0x441360
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x441376
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x3d0], 0x7633efc0
jmp 0x441359
mov dword [ebp - 0x28], 0
jmp 0x441386
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x44139c
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x2b4], 9
jmp 0x44137f
push 0x611f
push 0
push 0x2725
push 0x185b
push 0
push 0x3fa7
call fcn.0044248d
add esp, 0x18
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2b4]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2b4], eax
and dword [ebp - 0xa0], 0
jmp 0x4413f6
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x20]
add eax, 0x28
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0xa0], eax
jge 0x441f92
mov dword [ebp - 0x1c], 0
jmp 0x44141b
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x441431
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xd0], 0xffffffff
jmp 0x441414
mov dword [ebp - 0x1c], 0
jmp 0x441441
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x441457
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1dc], 8
jmp 0x44143a
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x1dc], 0
jmp 0x441482
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1dc]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x1dc], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1dc], 0
jl 0x44153d
mov dword [ebp - 0x4c], 0
jmp 0x4414a5
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 4
jge 0x4414bb
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x3ac], 8
jmp 0x44149e
push 0x7d3b
push 0x6340
push 1
push 1
push 0
push 0
push 1
push 0x4ceb
push 0x35b3
push 0x63f
call fcn.0043a316
add esp, 0x28
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1dc]
cmp dword [ebp + eax*4 - 0xd0], 0
jne 0x44151b
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1dc]
cmp dword [ebp + eax*4 - 0xd0], 0
jne 0x44151b
and dword [ebp - 0xd8], 0
jmp 0x441525
mov dword [ebp - 0xd8], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xd8]
mov dword [ebp + eax - 0x3ac], ecx
jmp 0x441469
mov eax, dword [ebp - 0x20]
cmp dword [eax + 0x10], 0
jne 0x44176f
mov dword [ebp - 0x18], 0
jmp 0x44155a
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x441570
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x3e0], 0x9b55
jmp 0x441553
mov dword [ebp - 0x18], 0
jmp 0x441580
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x441596
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x2cc], 0x32fe2236
jmp 0x441579
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x2cc], 3
jmp 0x4415c1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2cc]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x2cc], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2cc], 0
jl 0x441673
mov dword [ebp - 0x50], 0
jmp 0x4415e4
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x4415fa
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x1d0], 0x7be18795
jmp 0x4415dd
push 0
call fcn.0044578f
pop ecx
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1d0], 3
jmp 0x441630
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1d0]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1d0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1d0], 0
jl 0x44166e
mov byte [ebp - 0x2f], 0
push 1
push 0x70c9
lea eax, [ebp - 0x2f]
push eax
push 0x13ca
push 1
push 0x1848
push 0
push 1
push 0x70cb
call fcn.004394bb
add esp, 0x24
jmp 0x441615
jmp 0x4415a8
push dword [ebp - 0x160]
push 0
push 1
push 1
push 0x310f
push 1
push dword [ebp - 0x23c]
push 0x1c59
push 0x726f
push 0x5d3b
lea eax, [ebp - 0xa4]
push eax
push dword [ebp - 0x20]
push 0x3a83
push 0
call fcn.00447846
add esp, 0x38
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x244], 0x94964a53
mov dword [ebp - 0x2e8], 0x4822b16
mov dword [ebp - 0x35c], 0x3b7beded
mov dword [ebp - 0x2f0], 0xc657e3b6
mov dword [ebp - 0x2ac], 0xdad816f9
mov dword [ebp - 0x2a8], 0xdad816f9
mov dword [ebp - 0x2a4], 0xdad816f9
mov dword [ebp - 0x2a0], 0xdad816f9
mov dword [ebp - 0x58], 0
jmp 0x44171e
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x441734
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x3b4], 0xffffffff
jmp 0x441717
push 0x1da
lea eax, [ebp - 0x27c]
push eax
push 0
lea eax, [ebp - 0x244]
push eax
call fcn.00443bde
add esp, 0x10
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2ac]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x2ac], eax
jmp 0x4413e0
mov dword [ebp - 0x8c], 0xffffffff
mov dword [ebp - 0x24], 0
jmp 0x441789
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x44179c
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x80], 0xffffffff
jmp 0x441782
mov dword [ebp - 0x24], 0
jmp 0x4417ac
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x4417bf
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x68], 0x74e8
jmp 0x4417a5
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x80], 0xffffffe2
jmp 0x4417e1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x80]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x80], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x80], 0xfffffff1
jl 0x441812
mov byte [ebp - 0x30], 0
push 0x249
push 0xe02
lea eax, [ebp - 0x30]
push eax
push 0x7d5a
push 0
push 0
call fcn.00445613
add esp, 0x18
jmp 0x4417ce
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x80]
mov dword [ebp - 0x37c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x80]
mov dword [ebp - 0x2f8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x68], 0
jne 0x44184a
mov dword [ebp - 0xe0], 1
jmp 0x441851
and dword [ebp - 0xe0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe0]
sub ecx, dword [ebp + eax - 0x68]
cmp ecx, 1
jge 0x441872
mov dword [ebp - 0xe8], 1
jmp 0x441879
and dword [ebp - 0xe8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x80]
sub eax, dword [ebp - 0xe8]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x80]
jl 0x4418a0
mov dword [ebp - 0xf0], 1
jmp 0x4418a7
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0xf0]
jne 0x4418bc
push 0xfffffffffffffff8
pop eax
test eax, eax
je 0x4418d1
cmp dword [ebp - 0x8c], 0
je 0x4418d1
mov dword [ebp - 0xf8], 1
jmp 0x4418d8
and dword [ebp - 0xf8], 0
cmp dword [ebp - 0xf8], 0x3d1f
jne 0x4418fd
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x80], 0
je 0x4418fd
mov dword [ebp - 0x100], 1
jmp 0x441904
and dword [ebp - 0x100], 0
cmp dword [ebp - 0x100], 0
jl 0x441919
mov dword [ebp - 0x108], 1
jmp 0x441920
and dword [ebp - 0x108], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x80]
add eax, dword [ebp - 0x108]
cmp eax, 0x4e5878ed
jg 0x441943
mov dword [ebp - 0x98], 1
jmp 0x44194a
and dword [ebp - 0x98], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x98]
mov dword [ebp + eax - 0x80], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
cmp dword [ebp - 0x98], eax
jne 0x441977
mov dword [ebp - 0x110], 1
jmp 0x44197e
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x110]
neg eax
je 0x441b07
mov dword [ebp - 0x138], 0xffffffff
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x60], 0
jmp 0x4419b0
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x4419c6
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x88], 0xad21dd8e
jmp 0x4419a9
mov byte [ebp - 0x2d], 0
push 0x5064
lea eax, [ebp - 0x2d]
push eax
push 0
push 0x2d46
push 0x68f0
call fcn.0044e94e
add esp, 0x14
xor eax, eax
inc eax
je 0x441a8f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x88], 1
je 0x441a0c
mov dword [ebp - 0x118], 1
jmp 0x441a13
and dword [ebp - 0x118], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x88]
cmp dword [ebp - 0x118], eax
jle 0x441a34
mov dword [ebp - 0x120], 1
jmp 0x441a3b
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x128], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x80]
cmp eax, dword [ebp - 0x128]
jl 0x441a64
mov dword [ebp - 0x130], 1
jmp 0x441a6b
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x138]
sub eax, dword [ebp - 0x130]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x80]
jl 0x441a8f
mov dword [ebp - 0x24c], 1
jmp 0x441a96
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x350], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x88]
mov dword [ebp - 0x300], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
cmp dword [ebp - 0x8c], eax
jg 0x441ad3
mov dword [ebp - 0x150], 1
jmp 0x441ada
and dword [ebp - 0x150], 0
cmp dword [ebp - 0x150], 0
ja 0x441aef
mov dword [ebp - 0x158], 1
jmp 0x441af6
and dword [ebp - 0x158], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x158]
mov dword [ebp + eax - 0x80], ecx
jmp 0x441b22
mov byte [ebp - 0x2e], 0
push 0
push 0xea0
push 0
push 1
lea eax, [ebp - 0x2e]
push eax
call fcn.0043b71c
add esp, 0x14
push 4
push 0x1000
mov eax, dword [ebp - 0x20]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x160]
add ecx, dword [eax + 0xc]
push ecx
push 0x29da
push 0x2536
call fcn.0041ce49
pop ecx
pop ecx
call eax
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x20]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1e4]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0xa4]
call fcn.0042d729
add esp, 0xc
mov dword [ebp - 0x38], 0xd23b6182
mov dword [ebp - 0x1e8], 0x84cb8f6c
mov dword [ebp - 0x240], 0xebc5f93b
mov dword [ebp - 0x370], 0x23917005
mov dword [ebp - 0x308], 0x276463a4
mov dword [ebp - 0x200], 0xbbe0e206
mov dword [ebp - 0x198], 0xfffc
mov dword [ebp - 0x2c], 0
jmp 0x441bc9
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x441bdf
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x394], 0x934b0b4e
jmp 0x441bc2
mov dword [ebp - 0x2c], 0
jmp 0x441bef
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x441c05
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x248], 2
jmp 0x441be8
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x38], 0x38ec
jne 0x441c23
mov dword [ebp - 0x168], 1
jmp 0x441c2a
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x168]
test eax, eax
je 0x441f28
mov dword [ebp - 0x310], 0xa7b7e80d
mov dword [ebp - 0x374], 9
mov dword [ebp - 0x228], 0x7770b168
mov dword [ebp - 0x9c], 0xa4129b85
mov dword [ebp - 0x318], 0xc8af9534
mov dword [ebp - 0x360], 0x30477ae2
mov dword [ebp - 0x238], 0x82f4e55b
mov dword [ebp - 0x320], 0x5a7ab5bf
mov dword [ebp - 0x378], 0
mov dword [ebp - 0x328], 1
mov dword [ebp - 0x368], 0xce7aebb1
mov dword [ebp - 0x330], 0xffffffff
mov dword [ebp - 0x344], 0
mov dword [ebp - 0x338], 0xffffffff
mov dword [ebp - 0x1f0], 0xfffffffc
mov dword [ebp - 0x34c], 0xffffffff
mov dword [ebp - 0x340], 0x3a81f6ed
mov dword [ebp - 0x354], 1
mov dword [ebp - 0x1f8], 0xfe96f77d
mov dword [ebp - 0x2e4], 0
mov dword [ebp - 0x2ec], 0x6dae1dc6
mov dword [ebp - 0x2f4], 3
mov dword [ebp - 0x2fc], 0
mov dword [ebp - 0x304], 0xfffffff8
mov dword [ebp - 0x94], 4
mov dword [ebp - 0x208], 0xcf5e
mov dword [ebp - 0x258], 0
mov dword [ebp - 0x44], 0
jmp 0x441d5a
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 4
jge 0x441d70
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x3c4], 0xed5ebae8
jmp 0x441d53
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x30c], eax
mov eax, dword [ebp - 0x198]
cmp dword [ebp - 0x1e8], eax
jle 0x441d9c
cmp dword [ebp - 0x1f0], 0
je 0x441d9c
mov dword [ebp - 0x170], 1
jmp 0x441da3
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x1f8]
cmp dword [ebp - 0x170], eax
jle 0x441dbd
mov dword [ebp - 0x178], 1
jmp 0x441dc4
and dword [ebp - 0x178], 0
imul eax, dword [ebp - 0x178], 0xaa6b
imul eax, dword [ebp - 0x200]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x3c4]
je 0x441df0
mov dword [ebp - 0x180], 1
jmp 0x441df7
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x94]
imul eax, dword [ebp - 0x180]
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x94]
dec eax
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x210]
cmp eax, dword [ebp - 0x218]
jle 0x441e3d
mov dword [ebp - 0x188], 1
jmp 0x441e44
and dword [ebp - 0x188], 0
cmp dword [ebp - 0x188], 5
jle 0x441e59
mov dword [ebp - 0x190], 1
jmp 0x441e60
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x190]
jne 0x441e77
mov dword [ebp - 0x220], 1
jmp 0x441e7e
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x198]
cmp dword [ebp - 0x228], eax
jl 0x441eb1
mov dword [ebp - 0x230], 1
jmp 0x441eb8
and dword [ebp - 0x230], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x394]
mov dword [ebp - 0x31c], eax
mov eax, dword [ebp - 0x238]
cmp dword [ebp - 0x240], eax
jge 0x441ef2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x248], 0
jne 0x441ef2
and dword [ebp - 0x1a0], 0
jmp 0x441efc
mov dword [ebp - 0x1a0], 1
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x1a0], eax
jge 0x441f13
mov dword [ebp - 0xb0], 1
jmp 0x441f1a
and dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x258], eax
jmp 0x441f51
push 0x5856
push 0
push 0x3b08
push 0x6dc6
push 0x4f97
push 0
push 1
push 1
push 0x4306
call fcn.0044abcf
add esp, 0x24
push 1
push 0
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0xa4]
push eax
push 0x6e2f
push 0x59e6
push 0x6670
push 0x27be
push 1
push 0x70b7
push 0x3143
push 0x601f
call fcn.004346eb
add esp, 0x30
jmp 0x4413e0
jmp 0x441fca
push 0x7bd1
push 0x22d4
push 0x140a
push 0
push 0x51ce
push 0x5148
push 0x4dae
push 0x7d6f
push 1
push 0x7e49
push 1
call fcn.004459d8
add esp, 0x2c
jmp 0x44200f
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x268], eax
push 0x7e9a
push 1
push 0x7ecd
push dword [ebp - 0x260]
push 0x12af
push dword [ebp - 0x268]
push 0x44a
push 0
push 0x36ac
call fcn.0044b94e
add esp, 0x24
mov esp, ebp
pop ebp
ret