Function at 0x413502
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x94
mov eax, dword [0x450eac]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
push 6
mov esi, dword [ebx + 0x28]
lea eax, [ebx + 0x9324]
mov edi, dword [ebx + 0x54]
mov dword [ebp - 0x38], esi
add edi, 2
mov dword [ebp - 0x60], eax
mov esi, eax
pop eax
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x40], eax
test edi, edi
jle 0x413551
push edi
push 0xf
push esi
call fcn.004288f0
mov eax, dword [ebp - 0x40]
add esp, 0xc
add esi, 0x102
sub eax, 1
mov dword [ebp - 0x40], eax
jne 0x41353e
mov eax, dword [ebx + 0x274]
mov dword [ebp - 0x54], eax
test eax, eax
jg 0x413580
push 0xbb9
call fcn.0040e898
mov eax, dword [ebx + 0x274]
pop ecx
mov dword [ebp - 0x54], eax
cmp eax, 0xc8
jge 0x41358c
push 2
pop ecx
jmp 0x4135af
cmp eax, 0x258
jge 0x413597
push 3
jmp 0x413589
cmp eax, 0x4b0
jge 0x4135a2
push 4
jmp 0x413589
xor ecx, ecx
cmp eax, 0x960
setge cl
add ecx, 5
mov esi, dword [ebp - 0x54]
lea eax, [ecx + 0x91]
xor ebx, ebx
mov dword [ebp - 0x50], ecx
imul eax, eax, 0x102
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x64], eax
mov eax, esi
mov dword [ebp - 0x3c], ebx
cdq
idiv dword [ebp - 0x5c]
mov edx, eax
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x68], edx
mov dword [ebp - 0x70], eax
test edx, edx
jle 0x41361e
lea ecx, [edi - 1]
mov dword [ebp - 0x58], ecx
mov ecx, dword [ebp - 0x4c]
add ecx, 0x278
lea ecx, [ecx + eax*4]
mov dword [ebp - 0x44], ecx
mov ecx, ebx
mov edx, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x58]
jge 0x413615
add edx, 4
inc eax
add ecx, dword [edx]
cmp ecx, dword [ebp - 0x68]
jl 0x413605
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 0x70], eax
mov edx, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x48]
jle 0x413659
cmp dword [ebp - 0x5c], ecx
je 0x413659
cmp dword [ebp - 0x5c], 1
je 0x413659
mov eax, dword [ebp - 0x40]
and eax, 0x80000001
jns 0x413640
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
mov eax, dword [ebp - 0x70]
jne 0x413659
mov edi, dword [ebp - 0x3c]
sub edi, dword [edx + eax*4 + 0x278]
dec eax
mov dword [ebp - 0x3c], edi
mov edi, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x50]
test edi, edi
jle 0x41368b
mov ecx, dword [ebp - 0x64]
add ecx, edx
mov dword [ebp - 0x58], ecx
mov ecx, ebx
mov esi, dword [ebp - 0x58]
cmp ecx, dword [ebp - 0x48]
jl 0x413678
mov dl, bl
cmp ecx, eax
jle 0x41367a
mov dl, 0xf
mov byte [esi + ecx], dl
inc ecx
cmp ecx, edi
jl 0x41366d
mov edx, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x50]
mov esi, dword [ebp - 0x54]
dec dword [ebp - 0x5c]
sub dword [ebp - 0x64], 0x102
inc dword [ebp - 0x40]
inc eax
sub esi, dword [ebp - 0x3c]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x54], esi
cmp dword [ebp - 0x5c], ebx
jg 0x4135d2
mov eax, ecx
mov dword [ebp - 0x44], ebx
lea ecx, [edx + 0xb160]
shl eax, 2
mov dword [ebp - 0x84], ecx
mov edx, dword [ebp - 0x84]
lea edi, [ebp - 0x34]
mov esi, dword [ebp - 0x6c]
mov ecx, eax
shr ecx, 2
xor eax, eax
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x40], eax
test esi, esi
jle 0x4136e9
xor eax, eax
mov ecx, esi
mov edi, edx
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x40]
add edx, 0x408
sub eax, 1
mov dword [ebp - 0x40], eax
jne 0x4136da
mov edi, dword [ebp - 0x50]
mov edx, dword [ebp - 0x4c]
cmp edi, 6
jne 0x413762
mov eax, esi
test eax, eax
jle 0x413762
lea esi, [edx + 0x9324]
lea edi, [edx + 0xc994]
mov edx, eax
movzx ecx, byte [esi + 0x102]
movzx eax, byte [esi]
shl ecx, 0x10
or ecx, eax
mov dword [edi - 4], ecx
movzx ecx, byte [esi + 0x306]
movzx eax, byte [esi + 0x204]
shl ecx, 0x10
or ecx, eax
mov dword [edi], ecx
lea edi, [edi + 0x10]
movzx ecx, byte [esi + 0x50a]
movzx eax, byte [esi + 0x408]
shl ecx, 0x10
or ecx, eax
inc esi
mov dword [edi - 0xc], ecx
sub edx, 1
jne 0x413716
mov edx, dword [ebp - 0x4c]
mov edi, dword [ebp - 0x50]
mov ecx, dword [edx + 0x274]
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x3c], ebx
test ecx, ecx
jle 0x4142cb
lea esi, [ebx + 0x31]
cmp esi, ecx
mov dword [ebp - 0xc], esi
lea eax, [ecx - 1]
cmovl eax, esi
xor ecx, ecx
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x40], ecx
cmp dword [ebp - 0x40], 6
mov edx, dword [ebp - 0x4c]
jae 0x414c0d
mov esi, dword [ebp - 0x40]
xor edi, edi
mov word [ebp + esi*2 - 0x18], di
inc esi
mov edi, dword [ebp - 0x50]
cmp esi, edi
mov dword [ebp - 0x40], esi
mov esi, dword [ebp - 0x38]
jl 0x41378f
cmp edi, 6
jne 0x413feb
sub eax, ebx
cmp eax, 0x31
jne 0x413fe8
movzx edi, word [esi + ebx*2 + 8]
movzx edx, word [esi + ebx*2 + 0xa]
movzx ebx, word [esi + ebx*2 + 0xc]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x88], ebx
movzx esi, word [esi + ecx*2 + 0xe]
movzx ecx, word [eax + ecx*2 + 0x10]
mov eax, ecx
add ecx, 0xc99
shl eax, 4
add ecx, ecx
mov dword [ebp - 0x40], eax
mov eax, esi
shl eax, 4
mov dword [ebp - 0x68], eax
mov eax, ebx
mov ebx, dword [ebp - 0x38]
shl eax, 4
mov dword [ebp - 0x80], eax
mov eax, edx
shl eax, 4
mov dword [ebp - 0x7c], eax
mov eax, edi
mov edi, dword [ebp - 0x3c]
shl eax, 4
mov dword [ebp - 0x78], eax
movzx edx, word [ebx + edi*2 + 4]
movzx eax, word [ebx + edi*2 + 6]
shl edx, 4
shl eax, 4
mov dword [ebp - 0x64], edx
mov edx, edi
mov dword [ebp - 0x70], eax
movzx eax, word [ebx + edi*2 + 2]
shl eax, 4
movzx edi, word [ebx + edx*2]
mov ebx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x94], eax
shl edi, 4
mov ecx, dword [ebx + ecx*8]
mov edx, dword [ebx + edx + 0xc998]
mov dword [ebp - 0x90], edi
add edx, dword [edi + ebx + 0xc998]
add edx, dword [eax + ebx + 0xc998]
mov dword [ebp - 0x54], edx
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x54]
add eax, dword [edx + ebx + 0xc998]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x70]
mov edx, dword [ebp - 0x54]
add edx, dword [eax + ebx + 0xc998]
mov eax, dword [ebp - 0x78]
add edx, dword [eax + ebx + 0xc998]
mov eax, dword [ebp - 0x7c]
add edx, dword [eax + ebx + 0xc998]
mov eax, dword [ebp - 0x80]
add edx, dword [eax + ebx + 0xc998]
mov eax, dword [ebp - 0x68]
add edx, dword [eax + ebx + 0xc998]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x54], edx
mov edx, dword [ebp - 0x3c]
movzx edx, word [eax + edx*2 + 0x12]
lea eax, [edx + 0xc99]
add eax, eax
add ecx, dword [ebx + eax*8]
lea eax, [esi + 0xc99]
add eax, eax
mov esi, ebx
add ecx, dword [esi + eax*8]
mov eax, dword [ebp - 0x88]
mov ebx, ecx
add eax, 0xc99
mov dword [ebp - 0x8c], ecx
mov ecx, esi
add eax, eax
mov esi, dword [ebp - 0x38]
add ebx, dword [ecx + eax*8]
mov edi, dword [ebp - 0x3c]
add edx, edx
movzx eax, word [esi + edi*2 + 0xa]
add eax, 0xc99
add eax, eax
add ebx, dword [ecx + eax*8]
movzx eax, word [esi + edi*2 + 8]
add eax, 0xc99
add eax, eax
add ebx, dword [ecx + eax*8]
movzx eax, word [esi + edi*2 + 6]
add eax, 0xc99
add eax, eax
add ebx, dword [ecx + eax*8]
movzx eax, word [esi + edi*2 + 4]
add eax, 0xc99
add eax, eax
add ebx, dword [ecx + eax*8]
movzx eax, word [esi + edi*2 + 2]
add eax, 0xc99
add eax, eax
add ebx, dword [ecx + eax*8]
movzx eax, word [esi + edi*2]
add eax, 0xc99
mov edi, dword [ebp - 0x90]
add eax, eax
add ebx, dword [ecx + eax*8]
mov eax, dword [ebp - 0x40]
mov esi, dword [ecx + eax + 0xc994]
add esi, dword [ecx + edx*8 + 0xc994]
add esi, dword [edi + ecx + 0xc994]
mov eax, dword [ebp - 0x94]
mov edi, dword [ebp - 0x54]
add edi, dword [ecx + edx*8 + 0xc998]
mov edx, dword [ebp - 0x4c]
add esi, dword [eax + ecx + 0xc994]
mov eax, dword [ebp - 0x64]
add esi, dword [eax + ecx + 0xc994]
mov eax, dword [ebp - 0x70]
add esi, dword [eax + ecx + 0xc994]
mov eax, dword [ebp - 0x78]
add esi, dword [eax + ecx + 0xc994]
mov eax, dword [ebp - 0x7c]
add esi, dword [eax + ecx + 0xc994]
mov eax, dword [ebp - 0x80]
add esi, dword [eax + ecx + 0xc994]
mov eax, dword [ebp - 0x68]
add esi, dword [eax + ecx + 0xc994]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x14]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x16]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x18]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x1a]
lea eax, [ecx + 0xc99]
add eax, eax
add ebx, dword [edx + eax*8]
add ecx, ecx
mov eax, dword [ebp - 0x38]
add esi, dword [edx + ecx*8 + 0xc994]
add edi, dword [edx + ecx*8 + 0xc998]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x1c]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x1e]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x20]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x22]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x24]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x26]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x28]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x2a]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x2c]
lea eax, [ecx + 0xc99]
add eax, eax
add ebx, dword [edx + eax*8]
add ecx, ecx
mov eax, dword [ebp - 0x38]
add esi, dword [edx + ecx*8 + 0xc994]
add edi, dword [edx + ecx*8 + 0xc998]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x2e]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x30]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x32]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x34]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x36]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x38]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x3a]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x3c]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x3e]
lea eax, [ecx + 0xc99]
add eax, eax
add ebx, dword [edx + eax*8]
add ecx, ecx
mov eax, dword [ebp - 0x38]
add esi, dword [edx + ecx*8 + 0xc994]
add edi, dword [edx + ecx*8 + 0xc998]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x40]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x42]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x44]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x46]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x48]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x4a]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x4c]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x4e]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x50]
lea eax, [ecx + 0xc99]
add eax, eax
add ebx, dword [edx + eax*8]
add ecx, ecx
mov eax, dword [ebp - 0x38]
add esi, dword [edx + ecx*8 + 0xc994]
add edi, dword [edx + ecx*8 + 0xc998]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x52]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x54]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x56]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x58]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x5a]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x5c]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x5e]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx ecx, word [eax + ecx*2 + 0x60]
lea eax, [ecx + 0xc99]
add ecx, ecx
add eax, eax
add esi, dword [edx + ecx*8 + 0xc994]
add ebx, dword [edx + eax*8]
add edi, dword [edx + ecx*8 + 0xc998]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0xc]
movzx ecx, word [eax + ecx*2]
lea eax, [ecx + 0xc99]
add eax, eax
add ebx, dword [edx + eax*8]
add ecx, ecx
mov word [ebp - 0x18], bx
shr ebx, 0x10
mov word [ebp - 0x16], bx
add edi, dword [edx + ecx*8 + 0xc998]
add esi, dword [edx + ecx*8 + 0xc994]
mov word [ebp - 0x10], di
shr edi, 0x10
mov word [ebp - 0x14], si
shr esi, 0x10
xor ecx, ecx
mov word [ebp - 0xe], di
mov edi, dword [ebp - 0x50]
mov word [ebp - 0x12], si
jmp 0x41402a
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x40], ebx
cmp ebx, eax
jg 0x41402d
mov ebx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x40]
movzx eax, word [esi + eax*2]
lea esi, [edx + 0x9324]
add esi, eax
mov edx, ecx
movzx eax, byte [esi]
lea esi, [esi + 0x102]
add word [ebp + edx*2 - 0x18], ax
inc edx
cmp edx, edi
jl 0x414006
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x4c]
inc eax
mov esi, dword [ebp - 0x38]
mov dword [ebp - 0x40], eax
cmp eax, ebx
jle 0x413ff8
mov ebx, dword [ebp - 0x3c]
mov eax, 0x3b9ac9ff
or esi, 0xffffffff
mov edx, ecx
mov ecx, eax
movzx eax, word [ebp + edx*2 - 0x18]
mov dword [ebp - 0x68], eax
mov eax, edx
cmp dword [ebp - 0x68], ecx
cmovge eax, esi
mov esi, eax
mov eax, dword [ebp - 0x68]
cmp eax, ecx
cmovge eax, ecx
inc edx
cmp edx, edi
jl 0x414037
add dword [ebp - 0x58], eax
mov ecx, esi
mov eax, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x40], esi
inc dword [ebp + ecx*4 - 0x34]
mov esi, dword [ebp - 0x38]
mov byte [edx + eax + 0x680], cl
inc eax
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x5c], eax
cmp edi, 6
jne 0x414295
mov eax, ecx
sub eax, ebx
cmp eax, 0x31
jne 0x414295
mov eax, dword [ebp - 0x40]
add eax, 0x2c
imul ecx, eax, 0x102
movzx eax, word [esi + ebx*2]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 2]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 4]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 6]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 8]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0xa]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0xc]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0xe]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x10]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x12]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x14]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x16]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x18]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x1a]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x1c]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x1e]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x20]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x22]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x24]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x26]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x28]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x2a]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x2c]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x2e]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x30]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x32]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x34]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x36]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x38]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x3a]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x3c]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x3e]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x40]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x42]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x44]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x46]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x48]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x4a]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x4c]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x4e]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x50]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x52]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x54]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x56]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x58]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x5a]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x5c]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x5e]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x60]
add eax, ecx
inc dword [edx + eax*4]
movzx eax, word [esi + ebx*2 + 0x62]
add eax, ecx
mov ecx, dword [ebp - 0x48]
inc dword [edx + eax*4]
jmp 0x4142b7
cmp ebx, ecx
jg 0x4142b7
mov eax, dword [ebp - 0x40]
add eax, 0x2c
imul eax, eax, 0x102
mov dword [ebp - 0xc], eax
movzx eax, word [esi + ebx*2]
add eax, dword [ebp - 0xc]
inc dword [edx + eax*4]
inc ebx
cmp ebx, ecx
jle 0x4142a8
lea ebx, [ecx + 1]
mov ecx, dword [edx + 0x274]
mov dword [ebp - 0x3c], ebx
cmp ebx, ecx
jl 0x413779
mov esi, dword [ebp - 0x6c]
xor ebx, ebx
mov eax, ebx
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x58], eax
mov edi, eax
add eax, 0xb160
push 0x11
add eax, edx
push esi
push eax
lea eax, [edx + 0x9324]
add eax, edi
push eax
call fcn.0041d403
mov eax, dword [ebp - 0x58]
add esp, 0x10
mov edx, dword [ebp - 0x4c]
add eax, 0x408
add edi, 0x102
mov dword [ebp - 0x58], eax
sub dword [ebp - 0x68], 1
jne 0x4142da
mov eax, dword [ebp - 0x44]
mov edi, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x44], eax
cmp eax, 4
lea eax, [edi*4]
jl 0x4136bf
mov eax, dword [ebp - 0x5c]
cmp eax, 0x8000
jge 0x41433b
cmp eax, 0x4652
jle 0x414349
push 0xbbb
call fcn.0040e898
mov eax, dword [ebp - 0x5c]
pop ecx
mov byte [ebp + ebx - 0xc], bl
inc ebx
cmp ebx, edi
jl 0x414349
test eax, eax
jle 0x414388
mov esi, dword [ebp - 0x4c]
mov ebx, eax
mov cl, byte [ebp - 0xc]
add esi, 0x4cd2
mov ah, byte [esi - 0x4652]
xor edx, edx
jmp 0x414379
inc edx
mov al, cl
mov cl, byte [ebp + edx - 0xc]
mov byte [ebp + edx - 0xc], al
cmp ah, cl
jne 0x41436e
mov byte [esi], dl
inc esi
mov byte [ebp - 0xc], cl
sub ebx, 1
jne 0x414364
mov ebx, dword [ebp - 0x4c]
xor esi, esi
mov eax, esi
mov dword [ebp - 0x58], edi
mov edi, dword [ebp - 0x6c]
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x40], esi
mov edx, esi
push 0x20
pop ecx
test edi, edi
jle 0x414417
add ebx, 0x9324
add eax, ebx
mov ebx, edx
mov dword [ebp - 0xc], eax
jmp 0x4143b9
mov eax, dword [ebp - 0xc]
movzx eax, byte [eax + ebx]
cmp eax, edx
mov ebx, eax
cmovle ebx, edx
cmp eax, ecx
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x40]
cmovge eax, ecx
mov edx, dword [ebp - 0x48]
inc ebx
mov dword [ebp - 0x44], eax
mov ecx, eax
mov dword [ebp - 0x40], ebx
cmp ebx, edi
jl 0x4143b6
mov ebx, dword [ebp - 0x4c]
mov ecx, edx
cmp ecx, 0x11
jle 0x4143fa
push 0xbbc
call fcn.0040e898
mov eax, dword [ebp - 0x44]
pop ecx
mov ecx, dword [ebp - 0x48]
mov edx, ecx
mov ecx, eax
cmp eax, 1
jge 0x414414
push 0xbbd
call fcn.0040e898
mov edx, dword [ebp - 0x48]
pop ecx
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x54]
push edi
add eax, 0x9324
push edx
add eax, ebx
push ecx
push eax
mov eax, dword [ebp - 0x64]
add eax, 0x9930
add eax, ebx
push eax
call fcn.0041d3c7
mov eax, dword [ebp - 0x54]
add esp, 0x14
add dword [ebp - 0x64], 0x408
add eax, 0x102
sub dword [ebp - 0x58], 1
mov dword [ebp - 0x54], eax
jne 0x41439b
xor eax, eax
lea edx, [ebx + 0x58]
mov ecx, eax
mov dword [ebp - 0x40], edx
mov edi, edx
cmp ecx, 0x10
jae 0x414c0d
mov byte [ebp + ecx - 0x1c], al
mov edx, eax
cmp byte [edx + edi], al
je 0x414476
mov byte [ebp + ecx - 0x1c], 1
inc edx
cmp edx, 0x10
jl 0x41446c
inc ecx
add edi, 0x10
cmp ecx, 0x10
jl 0x414460
mov edi, eax
xor eax, eax
cmp byte [ebp + edi - 0x1c], al
setne al
push eax
push 1
push ebx
call fcn.00413296
add esp, 0xc
inc edi
cmp edi, 0x10
jl 0x414487
xor edi, edi
lea ecx, [ebx + 0x58]
mov eax, edi
mov dword [ebp - 0x44], eax
cmp byte [ebp + eax - 0x1c], 0
je 0x4144d5
mov esi, edi
xor eax, eax
cmp byte [esi + ecx], al
setne al
push eax
push 1
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x40]
add esp, 0xc
inc esi
cmp esi, 0x10
jl 0x4144b5
mov eax, dword [ebp - 0x44]
inc eax
add ecx, 0x10
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], ecx
cmp eax, 0x10
jl 0x4144ac
push dword [ebp - 0x50]
push 3
push ebx
call fcn.00413296
mov eax, dword [ebp - 0x5c]
push eax
push 0xf
push ebx
call fcn.00413296
mov eax, dword [ebp - 0x5c]
add esp, 0x18
test eax, eax
jle 0x414550
lea ecx, [ebx + 0x4cd2]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x40], ecx
cmp byte [ecx], 0
mov dword [ebp - 0x44], edi
jbe 0x414537
mov esi, dword [ebp - 0x40]
push 1
push 1
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x44]
add esp, 0xc
movzx eax, byte [esi]
inc ecx
mov dword [ebp - 0x44], ecx
cmp ecx, eax
jl 0x41451c
push edi
push 1
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x40]
add esp, 0xc
inc ecx
sub dword [ebp - 0x58], 1
mov dword [ebp - 0x40], ecx
jne 0x414511
mov edi, dword [ebp - 0x50]
lea eax, [ebx + 0x9324]
mov esi, dword [ebp - 0x6c]
mov dword [ebp - 0x44], edi
movzx eax, byte [eax]
push eax
push 5
push ebx
mov dword [ebp - 0xc], eax
call fcn.00413296
xor ecx, ecx
add esp, 0xc
mov edx, ecx
mov dword [ebp - 0x48], edx
test esi, esi
jle 0x4145ed
mov edi, dword [ebp - 0xc]
mov eax, dword [ebp - 0x60]
mov cl, byte [eax + edx]
movzx eax, cl
cmp edi, eax
jge 0x4145ad
mov esi, dword [ebp - 0x60]
push 2
push 2
push ebx
call fcn.00413296
mov eax, dword [ebp - 0x48]
add esp, 0xc
inc edi
mov cl, byte [esi + eax]
movzx eax, cl
cmp edi, eax
jl 0x41458f
mov esi, dword [ebp - 0x6c]
movzx eax, cl
cmp edi, eax
jle 0x4145d3
mov esi, dword [ebp - 0x60]
push 3
push 2
push ebx
call fcn.00413296
mov eax, dword [ebp - 0x48]
add esp, 0xc
dec edi
movzx eax, byte [esi + eax]
cmp edi, eax
jg 0x4145b7
mov esi, dword [ebp - 0x6c]
push 0
push 1
push ebx
call fcn.00413296
mov edx, dword [ebp - 0x48]
add esp, 0xc
inc edx
mov dword [ebp - 0x48], edx
cmp edx, esi
jl 0x41457f
xor ecx, ecx
mov eax, dword [ebp - 0x60]
add eax, 0x102
sub dword [ebp - 0x44], 1
mov dword [ebp - 0x60], eax
jne 0x41455f
mov eax, dword [ebx + 0x274]
mov edx, ecx
mov edi, dword [ebp - 0x50]
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x44], eax
test eax, eax
jle 0x414bee
lea esi, [edx + 0x31]
dec eax
cmp esi, dword [ebp - 0x44]
mov dword [ebp - 0xc], esi
cmovl eax, esi
mov esi, dword [ebp - 0x38]
mov dword [ebp - 0x60], eax
movzx eax, byte [ecx + ebx + 0x680]
cmp eax, edi
jb 0x41464b
push 0xbbe
call fcn.0040e898
mov edx, dword [ebp - 0x3c]
pop ecx
mov ecx, dword [ebp - 0x74]
cmp edi, 6
jne 0x414b7d
mov eax, dword [ebp - 0x60]
sub eax, edx
cmp eax, 0x31
jne 0x414b7d
movzx ecx, byte [ecx + ebx + 0x680]
lea eax, [ecx + 0x92]
imul edi, eax, 0x102
lea eax, [ecx + 0x26]
imul esi, eax, 0x408
mov eax, dword [ebp - 0x38]
add edi, ebx
movzx eax, word [eax + edx*2]
add esi, ebx
push dword [esi + eax*4]
movzx eax, byte [eax + edi]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 2]
push dword [esi + eax*4]
movzx eax, byte [eax + edi]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 4]
push dword [esi + eax*4]
movzx eax, byte [eax + edi]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 6]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 8]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0xa]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
add esp, 0x48
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0xc]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0xe]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x10]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx eax, word [eax + ecx*2 + 0x12]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x14]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x16]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
add esp, 0x48
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x18]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x1a]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x1c]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x1e]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x20]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x22]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
add esp, 0x48
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x24]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx eax, word [eax + ecx*2 + 0x26]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x28]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x2a]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x2c]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x2e]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
add esp, 0x48
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x30]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x32]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x34]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x36]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x38]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
movzx eax, word [eax + ecx*2 + 0x3a]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
add esp, 0x48
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x3c]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x3e]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x40]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x42]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x44]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x46]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
add esp, 0x48
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x48]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x4a]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x4c]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x4e]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x50]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x52]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
add esp, 0x48
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x54]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x56]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x58]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x5a]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x5c]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2 + 0x5e]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov eax, dword [ebp - 0x38]
add esp, 0x48
mov ecx, dword [ebp - 0x3c]
movzx eax, word [eax + ecx*2 + 0x60]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2]
push dword [esi + eax*4]
movzx eax, byte [edi + eax]
push eax
push ebx
call fcn.00413296
add esp, 0x18
jmp 0x414bca
mov eax, dword [ebp - 0x60]
cmp edx, eax
jg 0x414bd3
mov edi, eax
movzx ecx, byte [ecx + ebx + 0x680]
movzx edx, word [esi + edx*2]
lea eax, [ecx + 0x26]
imul eax, eax, 0x102
add eax, edx
push dword [ebx + eax*4]
lea eax, [ecx + 0x92]
imul eax, eax, 0x102
add eax, ebx
movzx eax, byte [eax + edx]
push eax
push ebx
call fcn.00413296
mov edx, dword [ebp - 0x3c]
add esp, 0xc
mov ecx, dword [ebp - 0x74]
inc edx
mov dword [ebp - 0x3c], edx
cmp edx, edi
jle 0x414b86
mov eax, dword [ebp - 0x60]
mov edi, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x74]
lea edx, [eax + 1]
inc ecx
mov eax, dword [ebx + 0x274]
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x44], eax
cmp edx, eax
jl 0x41461b
pop edi
pop esi
pop ebx
cmp ecx, dword [ebp - 0x5c]
je 0x414c01
push 0xbbf
call fcn.0040e898
pop ecx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0042702f
leave
ret
call fcn.00427289
int3