Function at 0x4f97fc
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff60
push ebx
xor ebx, ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4f9b8d
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x3c]
imul dword [ebp - 0x4c]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x58], eax
xor eax, eax
mov dword [ebp - 0x5c], eax
xor eax, eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 6
jge 0x4f9878
inc dword [ebp - 0x60]
mov eax, dword [0x53295c]
mov dword [0x532864], eax
mov eax, dword [0x5328f4]
mov dword [0x53286c], eax
mov eax, dword [0x53286c]
cmp eax, dword [0x532864]
jle 0x4f9872
imul eax, dword [ebp - 0x38], 0x13
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x60], 6
jl 0x4f9847
inc dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], 9
jne 0x4f983c
mov eax, dword [0x5329e8]
mov dword [0x53294c], eax
mov eax, dword [ebp - 0x30]
mov edx, eax
shl eax, 3
sub eax, edx
mov dword [ebp - 0x48], eax
mov eax, dword [0x532a40]
mov dword [0x5329ac], eax
mov eax, dword [0x5329ac]
cmp eax, dword [0x532864]
jge 0x4f98e1
mov eax, dword [0x5329d0]
sub eax, dword [0x5328bc]
cmp eax, dword [0x5329d0]
jge 0x4f98d3
mov eax, dword [0x532a30]
sub eax, 0xc0
mov dword [0x53286c], eax
jmp 0x4f98ff
imul eax, dword [0x532864], 0x23
mov dword [0x532904], eax
jmp 0x4f98ff
mov eax, dword [0x53289c]
add eax, 4
mov dword [ebp - 0xa0], eax
fild dword [ebp - 0xa0]
call fcn.00408238
mov dword [0x5329d0], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 4]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x44]
push eax
mov eax, dword [0x5328f4]
push eax
mov ecx, dword [0x532884]
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x40]
call fcn.004f96a0
mov dword [ebp - 0x60], eax
xor eax, eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 6
jge 0x4f99a7
inc dword [ebp - 0x30]
mov eax, dword [ebp - 0x64]
sub eax, dword [ebp - 0x50]
mov dword [ebp - 0x38], eax
mov edx, dword [0x53292c]
mov eax, dword [0x53297c]
call fcn.004f8fc4
mov dword [0x532864], eax
mov eax, dword [0x532874]
mov dword [0x532944], eax
mov eax, dword [0x532a28]
mov dword [0x53295c], eax
mov eax, dword [0x532944]
cmp eax, dword [0x53295c]
jge 0x4f9980
fild dword [ebp - 0x68]
call fcn.0040822c
mov dword [ebp - 0x24], eax
jmp 0x4f99a1
xor eax, eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x4f99a1
inc dword [ebp - 0x2c]
lea eax, [ebp - 0x14]
mov edx, 0x4f9ba8
call fcn.0040ac1c
cmp dword [ebp - 0x2c], 1
jl 0x4f998b
cmp dword [ebp - 0x30], 6
jl 0x4f9931
xor eax, eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x48]
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x3c], eax
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0xb
jne 0x4f99ac
mov eax, dword [ebp - 0x5c]
add eax, 0x8c
mov dword [ebp - 0x44], eax
mov eax, dword [0x532964]
sub eax, 7
mov dword [0x532874], eax
mov eax, dword [0x5328f4]
mov dword [0x5328d4], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
xor edx, edx
add edx, 0x18
add eax, edx
mov edx, dword [ebp - 0x84]
movzx edx, word [edx + 0x14]
add eax, edx
mov dword [ebp - 0x7c], eax
mov eax, dword [0x5329e8]
mov dword [0x5329d8], eax
mov eax, dword [0x5329e8]
mov dword [0x5329d8], eax
mov eax, dword [0x5329d8]
cmp eax, dword [0x5329d8]
jge 0x4f9a5d
xor eax, eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 7
jge 0x4f9ac7
inc dword [ebp - 0x5c]
xor eax, eax
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x14]
mov edx, 0x4f9be0
call fcn.0040ac1c
inc dword [ebp - 0x64]
cmp dword [ebp - 0x64], 0xd
jne 0x4f9a3f
cmp dword [ebp - 0x5c], 7
jl 0x4f9a37
jmp 0x4f9ac7
mov eax, dword [ebp - 0x58]
add eax, 4
mov dword [ebp - 0xa0], eax
fild dword [ebp - 0xa0]
call fcn.00408238
mov dword [ebp - 0x38], eax
mov eax, dword [0x53290c]
call fcn.00407df4
mov dword [0x53290c], eax
push 0x532964
lea eax, [ebp - 0x38]
push eax
push 0x5328f4
lea ecx, [ebp - 0x28]
mov edx, 0x532894
mov eax, 0x53286c
call fcn.004ec1bc
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x5c]
sub eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x48]
jne 0x4f9abe
mov eax, dword [0x53286c]
mov dword [0x532984], eax
mov eax, dword [ebp - 0x48]
add eax, 4
mov dword [ebp - 0x54], eax
mov eax, dword [0x532944]
mov dword [0x532a30], eax
mov eax, dword [ebp - 0x4c]
sub eax, 0xeb
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x60]
push eax
push 0x5329e0
mov ecx, 0x532a18
mov edx, 0x532974
lea eax, [ebp - 0x54]
call fcn.004ec1bc
mov dword [0x5328f4], eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x28]
jge 0x4f9b36
lea eax, [ebp - 0x54]
push eax
push 0x532a50
lea eax, [ebp - 0x40]
push eax
push 0x5329d8
mov ecx, 0x5328cc
lea edx, [ebp - 0x60]
mov eax, 0x532a30
call fcn.004f8b80
mov dword [0x532a00], eax
jmp 0x4f9b41
mov eax, dword [ebp - 0x40]
add eax, 0xcd
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x48]
sub eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x48]
jge 0x4f9b5b
mov eax, dword [str.sw1_a]
sub eax, 0xec
mov dword [0x5329c4], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax]
movzx eax, word [eax + 6]
dec eax
test eax, eax
jl 0x4fa6ef
inc eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x6c], 0
mov eax, dword [ebp - 0x7c]
cmp dword [eax + 0x10], 0
jne 0x4fa356
mov eax, dword [ebp - 0x34]
add eax, 0x16
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x68]
add eax, dword [ebp - 0x54]
mov dword [ebp - 0x50], eax
xor eax, eax
mov dword [ebp - 0x58], eax
xor eax, eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x4f9bd2
inc dword [ebp - 0x5c]
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x14]
call fcn.0040b7a0
jne 0x4f9bc3
mov eax, dword [0x532974]
mov dword [0x53288c], eax
jmp 0x4f9bcc
mov eax, dword [ebp - 0x48]
add eax, dword [ebp - 0x30]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x5c], 1
jl 0x4f9ba7
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x4f9c16
inc dword [ebp - 0x28]
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x58]
jge 0x4f9c05
xor eax, eax
mov dword [ebp - 0x64], eax
mov eax, dword [0x53298c]
mov dword [0x532864], eax
inc dword [ebp - 0x64]
cmp dword [ebp - 0x64], 6
jne 0x4f9bf0
jmp 0x4f9c10
mov eax, dword [ebp - 0x60]
sub eax, 0x90
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x28], 1
jl 0x4f9bdd
inc dword [ebp - 0x58]
cmp dword [ebp - 0x58], 8
jne 0x4f9b9c
mov eax, dword [0x532a18]
add eax, dword [0x532a40]
mov dword [0x532a28], eax
imul eax, dword [0x53294c], 0x62
mov dword [0x53289c], eax
mov eax, 2
sub eax, dword [ebp - 0x3c]
cmp eax, 0x5c
jge 0x4f9c56
mov eax, dword [0x532934]
mov dword [0x53295c], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x70], eax
mov eax, dword [0x53296c]
mov dword [0x532874], eax
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 6
jge 0x4f9d10
inc dword [ebp - 0x24]
imul eax, dword [ebp - 0x54], 0xf0
mov dword [ebp - 0x30], eax
mov eax, dword [0x5328b4]
mov dword [0x5328dc], eax
mov eax, dword [0x53286c]
mov dword [0x5328ec], eax
mov eax, dword [0x5328dc]
cmp eax, dword [0x5328ec]
jle 0x4f9cb3
mov eax, 0x21
sub eax, dword [ebp - 0x38]
mov dword [ebp - 0x40], eax
jmp 0x4f9ce0
mov eax, dword [ebp - 0x28]
add eax, 0x84
mov dword [ebp - 0x50], eax
mov eax, dword [0x53293c]
mov dword [0x5329f8], eax
mov eax, dword [0x5329f8]
cmp eax, dword [0x5328ec]
jge 0x4f9ce0
fild dword [ebp - 0x60]
call fcn.0040822c
mov dword [ebp - 0x2c], eax
mov eax, dword [0x53296c]
mov dword [0x53295c], eax
mov eax, dword [ebp - 0x3c]
add eax, 4
mov dword [ebp - 0xa0], eax
fild dword [ebp - 0xa0]
call fcn.00408238
mov dword [ebp - 0x48], eax
jmp 0x4f9d10
imul eax, dword [ebp - 0x44], 0x7b
mov dword [ebp - 0x5c], eax
mov eax, dword [0x53286c]
call fcn.00407df4
mov dword [0x53286c], eax
mov eax, dword [0x5329f8]
add eax, 0x75
mov dword [0x5328bc], eax
mov eax, dword [0x5329e8]
sub eax, 0xda
mov dword [0x53290c], eax
cmp dword [ebp - 0x70], 0
jle 0x4fa12e
mov eax, dword [0x532964]
mov dword [0x53285c], eax
mov eax, dword [ebp - 0x3c]
add eax, 0x80
mov dword [ebp - 0x20], eax
mov eax, 5
sub eax, dword [ebp - 0x60]
mov dword [ebp - 0x28], eax
xor eax, eax
mov dword [ebp - 0x2c], eax
mov eax, dword [0x532864]
mov dword [0x5328d4], eax
mov eax, dword [0x5328e4]
call fcn.00407df4
mov dword [0x5328e4], eax
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 9
jne 0x4f9d71
mov eax, dword [0x53290c]
call fcn.00407df4
mov dword [0x53290c], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x5c], eax
push 4
push 0x1000
mov eax, dword [ebp - 0x70]
push eax
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax + 0xc]
add eax, dword [ebp - 0x74]
push eax
call dword [0x532980]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jne 0x4f9f72
mov eax, dword [ebp - 0x40]
add eax, 0xc8
mov dword [ebp - 0xa0], eax
fild dword [ebp - 0xa0]
call fcn.0040822c
mov dword [ebp - 0x28], eax
imul eax, dword [ebp - 0x64], 0xfa
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x4c]
imul dword [ebp - 0x54]
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x4f9e25
inc dword [ebp - 0x3c]
mov eax, dword [ebp - 0x60]
sub eax, 0x7e
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x2c]
add eax, 4
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x3c], 1
jl 0x4f9e0a
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x4f9e48
mov eax, dword [ebp - 0x88]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0xd1
jle 0x4f9e6c
lea eax, [ebp - 0x14]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0x18]
call fcn.0040b7d8
jmp 0x4f9e7b
imul eax, dword [0x53297c], 0xbb
mov dword [0x532904], eax
mov eax, dword [0x53294c]
call fcn.00407df4
mov dword [0x53294c], eax
mov byte [ebp - 0xd], 0
jmp 0x4fa772
xor eax, eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x4f9fd2
inc dword [ebp - 0x60]
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 0x14]
call fcn.0040ac1c
mov eax, dword [0x532894]
mov dword [0x532874], eax
mov eax, dword [0x5329e8]
mov dword [0x53288c], eax
mov eax, dword [0x532874]
cmp eax, dword [0x53288c]
jle 0x4f9fb8
mov eax, dword [0x53288c]
mov dword [0x5328c4], eax
jmp 0x4f9fc1
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x40]
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 0x14]
call fcn.0040ac1c
cmp dword [ebp - 0x60], 2
jl 0x4f9f7d
lea eax, [ebp - 0x1c]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0x18]
call fcn.0040b7d8
mov eax, dword [ebp - 0x2c]
sub eax, 0x78
mov dword [ebp - 0x58], eax
mov eax, dword [0x532a08]
call fcn.00407df4
mov dword [0x532a08], eax
mov eax, dword [ebp - 0x48]
add eax, 0xd8
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x64]
imul dword [ebp - 0x50]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax + 0xc]
add eax, dword [ebp - 0x74]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x7c]
mov edx, dword [ebp - 0x78]
mov dword [eax + 8], edx
mov eax, dword [ebp - 0x5c]
add eax, dword [ebp - 0x3c]
mov dword [ebp - 0x4c], eax
mov eax, dword [0x5328cc]
mov dword [0x5329bc], eax
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x58]
mov dword [ebp - 0x54], eax
mov eax, dword [0x5329f8]
sub eax, dword [0x5329e8]
cmp eax, dword [0x5329f8]
jge 0x4fa084
xor eax, eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 4
jge 0x4fa079
inc dword [ebp - 0x60]
lea eax, [ebp - 0x14]
mov edx, 0x4f9c1c
call fcn.0040ac1c
cmp dword [ebp - 0x60], 4
jl 0x4fa063
mov eax, dword [ebp - 0x48]
sub eax, dword [ebp - 0x64]
mov dword [ebp - 0x2c], eax
jmp 0x4fa0c3
mov eax, dword [ebp - 0x50]
add eax, 0x35
mov dword [ebp - 0x68], eax
xor eax, eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 5
jge 0x4fa0c3
inc dword [ebp - 0x38]
mov eax, dword [ebp - 0x5c]
sub eax, dword [ebp - 0x3c]
cmp eax, 0x24
jge 0x4fa0bd
xor eax, eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x34], eax
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 9
jne 0x4fa0ab
cmp dword [ebp - 0x38], 5
jl 0x4fa098
mov eax, dword [0x53286c]
mov dword [0x5329d8], eax
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x78]
xor ecx, ecx
call fcn.0040832c
mov eax, dword [ebp - 0x5c]
add eax, 0xdb
mov dword [ebp - 0xa0], eax
fild dword [ebp - 0xa0]
call fcn.0040822c
mov dword [ebp - 0x2c], eax
mov eax, dword [0x5328dc]
mov dword [0x5328cc], eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x58]
mov dword [ebp - 0x34], eax
imul eax, dword [ebp - 0x50], 0x45
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x18]
push eax
xor ecx, ecx
mov edx, 1
mov eax, dword [ebp - 0x14]
call fcn.0040b7d8
mov eax, 0xa4
sub eax, dword [ebp - 0x54]
mov dword [ebp - 0x68], eax
xor eax, eax
mov dword [ebp - 0x64], eax
mov ecx, 1
mov edx, dword [0x532a20]
mov eax, 0x4f9c50
call fcn.0040b9e8
cmp eax, 0x31
je 0x4fa163
mov eax, dword [ebp - 0x54]
add eax, 0xd1
mov dword [ebp - 0x28], eax
fild dword [ebp - 0x2c]
call fcn.00408238
mov dword [ebp - 0x30], eax
fild dword [ebp - 0x38]
call fcn.0040822c
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x60]
add eax, 0x51
mov dword [ebp - 0x40], eax
jmp 0x4fa182
mov eax, dword [0x532a40]
add eax, 0xfc
mov dword [0x532a50], eax
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 9
jge 0x4fa1d4
inc dword [ebp - 0x24]
fild dword [0x532874]
call fcn.0040822c
mov dword [0x5328ec], eax
mov eax, dword [0x5328f4]
sub eax, dword [0x532904]
mov dword [0x53298c], eax
mov eax, dword [0x53285c]
add eax, 0x8c
mov dword [0x532a30], eax
cmp dword [ebp - 0x24], 9
jl 0x4fa19c
imul eax, dword [0x5328dc], 0x89
mov dword [0x5328b4], eax
mov eax, dword [0x5328d4]
call fcn.00407df4
mov dword [0x5328d4], eax
mov eax, dword [0x5329d8]
mov edx, eax
shl eax, 5
sub eax, edx
mov dword [0x532944], eax
add dword [ebp - 0x7c], 0x28
xor eax, eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0xb
jge 0x4fa27d
inc dword [ebp - 0x60]
lea eax, [ebp - 0x14]
mov edx, 0x4f9c78
call fcn.0040ac1c
imul eax, dword [ebp - 0x48], 0xb3
mov dword [ebp - 0x24], eax
mov eax, 0x9b
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c], eax
mov eax, dword [0x5328d4]
call fcn.00407df4
mov dword [0x5328d4], eax
mov eax, dword [0x5328ec]
mov dword [0x5328dc], eax
mov eax, dword [0x5328d4]
cmp eax, dword [0x5328dc]
jle 0x4fa277
mov eax, dword [ebp - 0x50]
add eax, 4
mov dword [ebp - 0xa0], eax
fild dword [ebp - 0xa0]
call fcn.00408238
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x60], 0xb
jl 0x4fa212
mov eax, dword [ebp - 0x34]
sub eax, 0x46
mov dword [ebp - 0x54], eax
mov eax, 0xdd
sub eax, dword [0x5329d8]
mov dword [0x532a48], eax
mov eax, dword [0x53285c]
call fcn.00407df4
mov dword [0x53285c], eax
mov eax, 0xe3
sub eax, dword [ebp - 0x54]
cmp eax, 0x86
jge 0x4fa2c6
mov eax, 0x72
sub eax, dword [0x5328fc]
mov dword [0x53290c], eax
jmp 0x4fa2d3
mov eax, dword [0x532a00]
add eax, 9
mov dword [0x5329bc], eax
mov eax, dword [0x5328dc]
add eax, 0x9f
mov dword [ebp - 0xa0], eax
fild dword [ebp - 0xa0]
call fcn.0040822c
mov dword [0x532a50], eax
jmp 0x4fa6e3
push 4
push 0x1000
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax + 0x10]
push eax
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax + 0xc]
add eax, dword [ebp - 0x74]
push eax
call dword [0x532980]
mov dword [ebp - 0x78], eax
imul eax, dword [ebp - 0x54], 0xbc
mov dword [ebp - 0x28], eax
mov eax, dword [0x532994]
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
je 0x4fa3a6
mov eax, dword [ebp - 0x90]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0xdd
jne 0x4fa3c3
mov eax, dword [0x5328bc]
call fcn.00407df4
mov dword [0x5328bc], eax
jmp 0x4fa3cc
mov eax, dword [ebp - 0x48]
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x64]
add eax, 0x40
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x3c]
sub eax, 0x65
mov dword [ebp - 0x58], eax
xor eax, eax
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x58]
add eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x50]
add edx, dword [ebp - 0x58]
cmp eax, edx
jge 0x4fa413
xor eax, eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xe
jge 0x4fa422
inc dword [ebp - 0x2c]
mov eax, dword [0x5329e8]
mov dword [0x532864], eax
cmp dword [ebp - 0x2c], 0xe
jl 0x4fa3fe
jmp 0x4fa422
imul eax, dword [0x532904], 0xe2
mov dword [0x532934], eax
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], 0xb
jne 0x4fa3e3
mov eax, dword [0x5328f4]
mov dword [0x532a00], eax
cmp dword [ebp - 0x78], 0
jne 0x4fa530
mov eax, dword [ebp - 0x5c]
add eax, 0xa6
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x64]
mov dword [ebp - 0x3c], eax
mov eax, 0x1f
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x68], eax
imul eax, dword [ebp - 0x30], 0x70
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x54]
sub eax, dword [ebp - 0x4c]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x38]
add eax, 0x1f
mov dword [ebp - 0x24], eax
mov byte [ebp - 0xd], 0
jmp 0x4fa772
mov eax, dword [0x5328ac]
call fcn.00407df4
mov dword [0x5328ac], eax
mov eax, dword [0x532a48]
mov dword [0x5328bc], eax
imul eax, dword [ebp - 0x5c], 0xf1
mov dword [ebp - 0x34], eax
imul eax, dword [ebp - 0x60], 0x8b
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
je 0x4fa580
mov eax, dword [ebp - 0x94]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x9c
jne 0x4fa599
mov eax, dword [ebp - 0x30]
mov edx, eax
shl eax, 5
add eax, edx
mov dword [ebp - 0x4c], eax
mov eax, dword [0x532a30]
mov dword [0x53297c], eax
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax + 0xc]
add eax, dword [ebp - 0x74]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax + 0x14]
add eax, dword [ebp - 4]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x9c], eax
mov edx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x9c]
call fcn.00407bb0
mov eax, dword [ebp - 0x7c]
mov edx, dword [ebp - 0x78]
mov dword [eax + 8], edx
mov eax, dword [ebp - 0x54]
sub eax, 0x17
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x28]
sub eax, 0xf4
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x5c]
add eax, 4
mov dword [ebp - 0xa0], eax
fild dword [ebp - 0xa0]
call fcn.00408238
mov dword [ebp - 0x38], eax
fild dword [ebp - 0x68]
call fcn.0040822c
mov dword [ebp - 0x40], eax
xor eax, eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0xd
jge 0x4fa645
inc dword [ebp - 0x48]
mov eax, dword [0x5329ac]
call fcn.00407df4
mov dword [0x5329ac], eax
jmp 0x4fa645
xor eax, eax
mov dword [ebp - 0x30], eax
xor eax, eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x4fa68f
inc dword [ebp - 0x60]
mov ecx, 1
mov edx, dword [0x532a20]
mov eax, 0x4f9c98
call fcn.0040b9e8
cmp eax, 7
jge 0x4fa67d
mov eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x50]
mov dword [ebp - 0x44], eax
jmp 0x4fa68f
mov eax, dword [0x532a08]
mov dword [0x53298c], eax
jmp 0x4fa68f
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xb
jne 0x4fa64a
add dword [ebp - 0x7c], 0x28
mov eax, dword [ebp - 0x40]
add eax, 0x68
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x28]
add eax, 3
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 0x18]
call fcn.0040ac1c
mov eax, dword [0x532974]
mov dword [0x53290c], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x30]
add eax, 4
mov dword [ebp - 0xa0], eax
fild dword [ebp - 0xa0]
call fcn.00408238
mov dword [ebp - 0x20], eax
inc dword [ebp - 0x6c]
dec dword [ebp - 0x80]
jne 0x4f9b78
xor eax, eax
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x60]
push eax
mov eax, dword [ebp - 0x40]
push eax
mov ecx, dword [0x532934]
mov edx, dword [ebp - 0x48]
mov eax, dword [0x532a00]
call fcn.004f939c
jmp 0x4fa71e
mov eax, dword [0x5328ec]
call fcn.00407df4
mov dword [0x5328ec], eax
imul eax, dword [ebp - 0x50], 0xf7
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x34]
imul dword [ebp - 0x64]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x44]
add eax, 0xc9
cmp eax, dword [ebp - 0x5c]
jge 0x4fa759
imul eax, dword [ebp - 0x60], 0x9b
mov dword [ebp - 0x48], eax
jmp 0x4fa764
mov eax, dword [ebp - 0x4c]
sub eax, 0x94
mov dword [ebp - 0x20], eax
imul eax, dword [ebp - 0x44], 0x95
mov dword [ebp - 0x24], eax
mov byte [ebp - 0xd], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4f9b94
lea eax, [ebp - 0x1c]
mov edx, 3
call fcn.0040a854
ret