Function at 0x40b28b
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x298
movzx eax, byte [ebp + 0x38]
test eax, eax
je 0x40c364
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp + 0x44]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x208], eax
mov eax, dword [ebp + 0x40]
mov dword [ebp - 0x224], eax
lea eax, [ebp + 0x30]
mov dword [ebp - 0x194], eax
lea eax, [ebp + 0x2c]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x204], eax
mov eax, dword [ebp + 0x3c]
mov dword [ebp - 0x1fc], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x194]
movzx eax, byte [eax]
test eax, eax
je 0x40c322
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x1f8], eax
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x1bc]
movzx eax, byte [eax]
test eax, eax
je 0x40b49e
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x254], eax
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x100]
cmp dword [eax], 0
je 0x40b484
mov eax, dword [ebp - 0x1f4]
mov eax, dword [eax]
inc eax
jne 0x40b45e
mov eax, 0xe38
test eax, eax
jne 0x40b45e
and dword [ebp - 0x134], 0
jmp 0x40b468
mov dword [ebp - 0x134], 1
mov eax, dword [ebp - 0x100]
mov eax, dword [eax]
cmp dword [ebp - 0x134], eax
jg 0x40b484
mov dword [ebp - 0x128], 1
jmp 0x40b48b
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x1c0]
mov ecx, dword [ebp - 0x128]
mov dword [eax], ecx
jmp 0x40c320
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 4]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x74]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], 0
jmp 0x40b4f0
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x40b506
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x140], 0xffffffff
jmp 0x40b4e9
mov dword [ebp - 0x18], 0
jmp 0x40b516
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x40b52c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x268], 0x3245f1db
jmp 0x40b50f
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x140], 0xfffffff1
jmp 0x40b55a
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x140]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x140], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x140], 0x10
jge 0x40b5c3
mov dword [ebp - 0x3c], 0xd37ad43
mov dword [ebp - 0x3c], 0
jmp 0x40b581
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jl 0x40b5b6
mov dword [ebp - 0x6c], 0x7909b792
mov dword [ebp - 0x6c], 0
jmp 0x40b59e
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jg 0x40b5b4
push 0x30b1
push 0
call fcn.004106d5
pop ecx
pop ecx
jmp 0x40b597
jmp 0x40b57a
cmp dword [ebp - 0x3c], 0
je 0x40b5be
jmp 0x40b5c3
jmp 0x40b53f
and dword [ebp - 0x84], 0
jmp 0x40b5e2
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x14]
add eax, 0x28
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x84], eax
jge 0x40c320
mov dword [ebp - 0xc], 0xf40fc027
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xffffffff
mov dword [ebp - 0x210], 1
mov dword [ebp - 0x23c], 0x9f81
mov dword [ebp - 0x1d8], 0xfffd
mov dword [ebp - 0x58], 0
jmp 0x40b641
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 4
jge 0x40b657
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x278], 0xe769
jmp 0x40b63a
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0xc], eax
je 0x40b674
mov dword [ebp - 0xac], 1
jmp 0x40b67b
and dword [ebp - 0xac], 0
mov eax, dword [ebp - 0xac]
dec eax
jne 0x40b693
cmp dword [ebp - 0x2c], 0
jne 0x40b693
and dword [ebp - 0xfc], 0
jmp 0x40b69d
mov dword [ebp - 0xfc], 1
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jne 0x40b6bb
cmp dword [ebp - 0xc], 0
jne 0x40b6bb
and dword [ebp - 0xb4], 0
jmp 0x40b6c5
mov dword [ebp - 0xb4], 1
mov eax, dword [ebp - 0xb4]
sub eax, 3
cmp eax, dword [ebp - 0xc]
jle 0x40b6df
mov dword [ebp - 0x124], 1
jmp 0x40b6e6
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x124], eax
jle 0x40b6f5
cmp dword [ebp - 0x48], 0
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x264], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0xc], 0x72305ab
jg 0x40b71c
mov dword [ebp - 0x1d0], 1
jmp 0x40b723
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0xc], eax
jne 0x40b737
mov dword [ebp - 0xbc], 1
jmp 0x40b73e
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0xbc], eax
jge 0x40b755
mov dword [ebp - 0x104], 1
jmp 0x40b75c
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x104], eax
jge 0x40b773
mov dword [ebp - 0xc4], 1
jmp 0x40b77a
and dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0x210]
cmp dword [ebp - 0xc4], eax
jge 0x40b79a
cmp dword [ebp - 0x48], 0
je 0x40b79a
mov dword [ebp - 0x130], 1
jmp 0x40b7a1
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x130], eax
jge 0x40b7b0
cmp dword [ebp - 0x48], 0
cmp dword [ebp - 0x44], 0
jne 0x40b7c3
xor eax, eax
jne 0x40b7c3
and dword [ebp - 0xcc], 0
jmp 0x40b7cd
mov dword [ebp - 0xcc], 1
mov eax, dword [ebp - 0xcc]
sub eax, 0x49ef57a5
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x278], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x278], 0
je 0x40b86b
cmp dword [ebp - 0xc], 0
je 0x40b86b
mov dword [ebp - 0x2c], 0
jmp 0x40b80a
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jg 0x40b851
mov dword [ebp - 0x80], 0
jmp 0x40b820
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x40b836
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x250], 0x43de
jmp 0x40b819
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x250]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x250], eax
jmp 0x40b803
push 1
push 0
push 0x1b4d
push 0x46a2
push 0
call fcn.0041300c
add esp, 0x14
jmp 0x40b8b2
mov dword [ebp - 0x60], 0
jmp 0x40b87b
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x40b891
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x28c], 0x58e5
jmp 0x40b874
lea eax, [ebp - 0x1d8]
push eax
push 0
push 1
push 0x469b
push 1
push 0x1ed6
push 0
call fcn.0041e976
add esp, 0x1c
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x10], 0
jne 0x40c080
mov dword [ebp - 4], 0x5fa2ef7
mov dword [ebp - 8], 0xd0811fc8
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x1c], 0xc1094d0e
mov dword [ebp - 0xb8], 0xffffffff
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x7c], 0
jmp 0x40b91d
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jge 0x40b933
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x9c], 0
jmp 0x40b916
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x9c], 0
jmp 0x40b961
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9c]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x9c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x9c], 0xfffffffe
jle 0x40bb4e
mov dword [ebp - 0xdc], 0xffffffff
mov dword [ebp - 0x168], 3
mov dword [ebp - 0x164], 3
mov dword [ebp - 0x160], 3
mov dword [ebp - 0x15c], 3
mov dword [ebp - 0x200], 0xa6c6
mov dword [ebp - 0xdc], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9c]
mov dword [ebp - 0x10c], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x10c]
mov dword [ebp + eax - 0x168], ecx
cmp dword [ebp - 0x10c], 0
jne 0x40bae2
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x9c]
cmp dword [ebp + eax - 0x168], ecx
jge 0x40ba16
mov dword [ebp - 0xd4], 1
jmp 0x40ba1d
and dword [ebp - 0xd4], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x168]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 4]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x168]
inc eax
mov dword [ebp - 8], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x168]
cmp eax, dword [ebp - 8]
jle 0x40ba74
mov dword [ebp - 0x12c], 1
jmp 0x40ba7b
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x12c]
inc eax
cmp eax, dword [ebp - 0xdc]
jge 0x40ba96
mov dword [ebp - 0x114], 1
jmp 0x40ba9d
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x200]
cmp dword [ebp - 0x114], eax
je 0x40bab7
mov dword [ebp - 0x8c], 1
jmp 0x40babe
and dword [ebp - 0x8c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x8c]
mov dword [ebp + eax - 0x158], ecx
cmp dword [ebp - 0x8c], 0
jne 0x40bae2
and dword [ebp - 0xe4], 0
jmp 0x40baec
mov dword [ebp - 0xe4], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9c]
cmp eax, dword [ebp - 0xe4]
je 0x40bb0d
mov dword [ebp - 0x138], 1
jmp 0x40bb14
and dword [ebp - 0x138], 0
cmp dword [ebp - 0x138], 0x6559
jg 0x40bb2c
mov dword [ebp - 0xec], 1
jmp 0x40bb33
and dword [ebp - 0xec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9c]
add eax, dword [ebp - 0xec]
mov dword [ebp - 0x1c], eax
jmp 0x40b946
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x9c], 3
jl 0x40bb6a
mov dword [ebp - 0xf4], 1
jmp 0x40bb71
and dword [ebp - 0xf4], 0
push 0xfffffffffffffff9
pop eax
test eax, eax
je 0x40bbb9
mov dword [ebp - 4], 1
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x1c]
jne 0x40bb9f
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x158], 0
jne 0x40bb9f
and dword [ebp - 0x11c], 0
jmp 0x40bba9
mov dword [ebp - 0x11c], 1
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x11c]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
mov eax, dword [ebp - 0xf4]
sub eax, dword [ebp - 0xb8]
je 0x40bd22
mov dword [ebp - 0xd8], 9
mov dword [ebp - 0xa8], 0x584e2bba
mov dword [ebp - 0x1e0], 0xc0978c76
mov dword [ebp - 0x228], 0xb20e9505
mov byte [ebp - 0x26], 0
push 0
lea eax, [ebp - 0x26]
push eax
push 0
call fcn.0040c556
add esp, 0xc
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x9c], 0xfffffffc
cmp dword [ebp - 0xd8], 0xfffffffc
jg 0x40bc2c
mov dword [ebp - 0xd0], 1
jmp 0x40bc33
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 4], eax
jg 0x40bc4d
mov dword [ebp - 0xa4], 1
jmp 0x40bc54
and dword [ebp - 0xa4], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0xbb218ad3
jbe 0x40bc88
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x158], 0
je 0x40bc88
mov dword [ebp - 0xb0], 1
jmp 0x40bc8f
and dword [ebp - 0xb0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x158]
cmp dword [ebp - 0xb0], eax
jge 0x40bcb0
mov dword [ebp - 0xc0], 1
jmp 0x40bcb7
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0xb8]
cmp dword [ebp - 0xc0], eax
jle 0x40bcd4
cmp dword [ebp - 8], 0
jne 0x40bcd4
and dword [ebp - 0xc8], 0
jmp 0x40bcde
mov dword [ebp - 0xc8], 1
mov eax, dword [ebp - 0xc8]
shl eax, 2
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0xd0]
sub eax, 9
cmp eax, dword [ebp - 0xd8]
jne 0x40bd0a
mov dword [ebp - 0xe0], 1
jmp 0x40bd11
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x228], eax
jmp 0x40bdaa
mov dword [ebp - 4], 0
jmp 0x40bd32
mov eax, dword [ebp - 4]
dec eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0xffffffea
jg 0x40bdaa
mov dword [ebp - 0x1c], 0x12
jmp 0x40bd48
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffe3
jle 0x40bda8
mov dword [ebp - 0x38], 0
jmp 0x40bd5e
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x11
jl 0x40bd98
mov dword [ebp - 0x1e8], 0xfffffffd
mov dword [ebp - 8], 0
jmp 0x40bd7e
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 3
jg 0x40bd96
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x158]
mov dword [ebp - 0x1e8], eax
jmp 0x40bd77
jmp 0x40bd57
push 0
push 0x4fd8
call fcn.004192ab
pop ecx
pop ecx
jmp 0x40bd41
jmp 0x40bd2b
push 0
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x14]
push eax
push 1
lea eax, [ebp - 0x170]
push eax
push 0
lea eax, [ebp - 0x120]
push eax
call fcn.00418629
add esp, 0x1c
mov dword [ebp - 0x118], 0xdb8e9646
mov dword [ebp - 0x4c], 0
jmp 0x40bdeb
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x40bdfe
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x40], 0x648261f
jmp 0x40bde4
push 1
push 0
push 0
push 0
push 1
push 0x11b3
call fcn.004131ee
add esp, 0x18
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x40], 0
jmp 0x40be3a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x40]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x40], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x40], 0x13
jge 0x40c07b
mov dword [ebp - 0x78], 0xe446df37
mov dword [ebp - 0x24], 0xfffffffa
mov dword [ebp - 0x68], 0
jmp 0x40be69
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x40be7f
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x21c], 0x9ed9
jmp 0x40be62
mov dword [ebp - 0x78], 0
jmp 0x40be8f
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 6
je 0x40c064
mov dword [ebp - 0x30], 0x285faafe
mov dword [ebp - 0x30], 0
jmp 0x40beb0
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jg 0x40c05f
mov dword [ebp - 0x20], 0x4c59
mov dword [ebp - 0x20], 0x2df3d37a
cmp dword [ebp - 0x20], 0
je 0x40c052
mov dword [ebp - 0x20], 0
jmp 0x40bee2
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jg 0x40c050
mov dword [ebp - 0x88], 0xb972
push 0
lea eax, [ebp - 0x88]
push eax
call fcn.0040e484
pop ecx
pop ecx
mov dword [ebp - 0x24], 0
jmp 0x40bf16
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jg 0x40c04b
push 0x3466
push 0x71d5
push 1
push 0
push 0
push 0x2261
push 0
push 1
call fcn.0041f100
add esp, 0x20
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x21c], 0
je 0x40bf5c
mov dword [ebp - 0xe8], 1
jmp 0x40bf63
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0xe8], eax
jle 0x40bf7d
mov dword [ebp - 0xf0], 1
jmp 0x40bf84
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x21c]
sub eax, dword [ebp - 0xf0]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x21c]
je 0x40bfaf
mov dword [ebp - 0xf8], 1
jmp 0x40bfb6
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0xf8], eax
jge 0x40bfd0
mov dword [ebp - 0xa0], 1
jmp 0x40bfd7
and dword [ebp - 0xa0], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x21c]
imul eax, dword [ebp - 0xa0]
test eax, eax
jne 0x40bffb
cmp dword [ebp - 0x20], 0
jne 0x40bffb
and dword [ebp - 0x108], 0
jmp 0x40c005
mov dword [ebp - 0x108], 1
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x108]
jg 0x40c022
cmp dword [ebp - 0x118], 0
jne 0x40c022
and dword [ebp - 0x110], 0
jmp 0x40c02c
mov dword [ebp - 0x110], 1
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x21c]
imul eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x110]
mov dword [ebp - 0x118], eax
jmp 0x40bf0f
jmp 0x40bedb
jmp 0x40c05a
push 0
call fcn.00412f9c
pop ecx
jmp 0x40bea9
jmp 0x40be88
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x40], 0
je 0x40c076
jmp 0x40be25
jmp 0x40be25
jmp 0x40b5cc
mov dword [ebp - 0x50], 0xfffffffb
mov dword [ebp - 0x50], 0
jmp 0x40c097
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
je 0x40c1fb
mov dword [ebp - 0x34], 1
push 0
lea eax, [ebp - 0x34]
push eax
push 0x62cb
call fcn.0040e13d
add esp, 0xc
mov dword [ebp - 0x34], 7
jmp 0x40c0cb
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 6
je 0x40c1f6
mov dword [ebp - 0x54], 0xfba1a4d6
mov dword [ebp - 0x178], 0x7fc0549e
mov dword [ebp - 0x54], 0
jmp 0x40c0f6
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xffffffe8
jge 0x40c1f1
mov dword [ebp - 0x64], 0x1e9c96c7
mov dword [ebp - 0x5c], 0
jmp 0x40c117
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x40c12d
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x298], 0x8373b2c5
jmp 0x40c110
mov dword [ebp - 0x64], 0
jmp 0x40c13d
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0xfffffff9
jg 0x40c1ec
mov dword [ebp - 0x70], 0
jmp 0x40c157
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jge 0x40c16d
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x148], 0x2b441a62
jmp 0x40c150
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x148], 0
jmp 0x40c19b
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x148]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x148], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x148], 2
jg 0x40c1e7
mov dword [ebp - 0x180], 0x1bf07968
push 0x4e10
push 0x66ab
push 0x1cae
push 0xba9
lea eax, [ebp - 0x178]
push eax
push 0
push 1
push 0
lea eax, [ebp - 0x180]
push eax
call fcn.00421994
add esp, 0x24
jmp 0x40c180
jmp 0x40c136
jmp 0x40c0ef
jmp 0x40c0c4
jmp 0x40c090
push 4
push 0x1000
mov eax, dword [ebp - 0x14]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x120]
add ecx, dword [eax + 0xc]
push ecx
push 0x6158
push 0x647b
call fcn.004070a3
pop ecx
pop ecx
call eax
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x14]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x188]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x90]
call fcn.00407c10
add esp, 0xc
mov dword [ebp - 0x10], 0
jmp 0x40c25f
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x40c275
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x280], 0xfffffff9
jmp 0x40c258
mov dword [ebp - 0x10], 0
jmp 0x40c285
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x40c29b
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x234], 0x7a4a12b5
jmp 0x40c27e
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x234], 1
jmp 0x40c2c9
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x234]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x234], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x234], 0
jl 0x40c2ec
mov byte [ebp - 0x25], 0
lea eax, [ebp - 0x25]
push eax
push 0
call fcn.00410fb7
pop ecx
pop ecx
jmp 0x40c2ae
push 0x305d
push 0x75da
push 0
push 1
push 1
push 0
call fcn.0041a537
add esp, 0x18
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x90]
push eax
push 0
call fcn.0040f76e
add esp, 0xc
jmp 0x40b5cc
jmp 0x40c362
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x198], eax
push 0x6090
push 0
push 0x7be9
push 1
push 0x42f4
push 0x755b
push 1
push 0x23d9
push 1
push 0xc1c
push dword [ebp - 0x198]
call fcn.004128c2
add esp, 0x2c
jmp 0x40c3a5
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x1a0], eax
push dword [ebp - 0x1a0]
push 0x6e8b
push 0x518c
push dword [ebp - 0x1a8]
push dword [ebp - 0x1b0]
push 1
call fcn.00408755
add esp, 0x18
mov esp, ebp
pop ebp
ret