Function at 0x4172c0
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x49c
push esi
movzx eax, byte [ebp + 0x28]
test eax, eax
je 0x417312
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x364], eax
lea eax, [ebp + 0x2c]
mov dword [ebp - 0x36c], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x30c], eax
push 1
push dword [ebp - 0x30c]
push dword [ebp - 0x364]
mov eax, dword [ebp - 0x36c]
movzx eax, byte [eax]
push eax
call fcn.004194e1
add esp, 0x10
jmp 0x4194dc
lea eax, [ebp + 0x20]
mov dword [ebp - 0x380], eax
lea eax, [ebp + 0x24]
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x388], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x398], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x3b0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp - 0x380]
movzx eax, byte [eax]
test eax, eax
je 0x417375
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x390], eax
push 0
push dword [ebp - 0x390]
call fcn.00412a6f
pop ecx
pop ecx
jmp 0x4194dc
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0x318], eax
mov eax, dword [ebp - 0x3a0]
mov dword [ebp - 0x35c], eax
mov eax, dword [ebp - 0x3a8]
mov dword [ebp - 0x3cc], eax
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0x3cc]
movzx eax, byte [eax]
test eax, eax
je 0x4173dc
push 0xc2e
push 0
push 0x13f2
push 0x372
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_TextOutA]
jmp 0x4194dc
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0x33c], eax
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0x368], eax
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x7c], eax
push 4
lea ecx, [ebp - 0x3ec]
call fcn.0043387f
mov dword [ebp - 0x48], 9
push 3
lea ecx, [ebp - 0x430]
call fcn.0043387f
mov dword [ebp - 0x320], 0xbeb96916
mov dword [ebp - 0x4c], 0
jmp 0x417438
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 4
jge 0x417454
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x3ec]
call fcn.0043396d
mov dword [eax], 1
jmp 0x417431
push 0x7d69
push 0
lea eax, [ebp - 0x430]
push eax
push 0
lea eax, [ebp - 0x4c]
push eax
push 0
call fcn.0040bbd5
add esp, 0x18
mov dword [ebp - 0x48], 3
jmp 0x417482
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x4174a7
push 0
call fcn.0040af29
pop ecx
push dword [ebp - 0x48]
lea ecx, [ebp - 0x3ec]
call fcn.0043396d
cmp dword [eax], 0
je 0x4174a5
jmp 0x4174a7
jmp 0x41747b
lea eax, [ebp - 0x430]
push eax
lea eax, [ebp - 0x48]
push eax
push 0
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x3ec]
push eax
call fcn.0040b0f7
add esp, 0x14
lea ecx, [ebp - 0x430]
call fcn.00433951
lea ecx, [ebp - 0x3ec]
call fcn.00433951
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1d8], eax
push 1
lea ecx, [ebp - 0x410]
call fcn.0043387f
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x2a8], 0
mov dword [ebp - 0x150], 2
lea eax, [ebp - 0x410]
push eax
push 0x3af
lea eax, [ebp - 0x44c]
push eax
push 0x31f4
push 0
call fcn.00414a51
add esp, 0x14
mov dword [ebp - 0x3c], 0
jmp 0x417546
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jl 0x4175eb
mov dword [ebp - 0x3e0], 0xfc75dfcc
lea eax, [ebp - 0x410]
push eax
push 0
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x2a8]
push eax
push 0
push 1
lea eax, [ebp - 0x3c]
push eax
call fcn.004212c9
add esp, 0x1c
push 0x35d
lea eax, [ebp - 0x3c]
push eax
push 0x2a59
push 0x6eda
push 0x7cb9
push 0
lea eax, [ebp - 0x150]
push eax
push 0x7059
push 0x26ef
lea eax, [ebp - 0x3e0]
push eax
push 0x1b6f
lea eax, [ebp - 0x410]
push eax
push 0x1eb8
push 0
push 1
lea eax, [ebp - 0x2a8]
push eax
push 0x493b
push 0x5dd
push 0x234
call fcn.0041ac0b
add esp, 0x4c
jmp 0x41753f
lea ecx, [ebp - 0x410]
call fcn.00433951
mov dword [ebp - 0x60], 0xfffffffd
mov dword [ebp - 0xbc], 0
jmp 0x417616
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 3
jge 0x417632
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x2fc], 0xe3245f1d
jmp 0x417609
mov dword [ebp - 0x60], 0
jmp 0x417642
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x17
jg 0x417809
mov dword [ebp - 0x328], 0x4495
mov dword [ebp - 0x330], 7
mov dword [ebp - 0x88], 0
jmp 0x417679
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jge 0x417692
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x68], 0xd37ad43
jmp 0x41766c
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x68], 2
jmp 0x4176b7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x68], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x68], 0
jl 0x4177f5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x68], 0
je 0x417712
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
mov ecx, dword [ebp - 0x328]
cmp dword [ebp + eax*4 - 0x2fc], ecx
jl 0x4176fa
mov dword [ebp - 0x394], 1
jmp 0x417701
and dword [ebp - 0x394], 0
or eax, 0xffffffff
je 0x417712
mov dword [ebp - 0x2bc], 1
jmp 0x417719
and dword [ebp - 0x2bc], 0
cmp dword [ebp - 0x2bc], 0x6c37fc05
jge 0x417731
mov dword [ebp - 0x248], 1
jmp 0x417738
and dword [ebp - 0x248], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
cmp eax, dword [ebp - 0x248]
jne 0x417756
mov dword [ebp - 0x104], 1
jmp 0x41775d
and dword [ebp - 0x104], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2fc]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x68]
mov edx, dword [ebp - 0x104]
sub edx, dword [ebp + ecx*4 - 0x2fc]
push 4
pop ecx
imul ecx, ecx, 0
sub edx, dword [ebp + ecx - 0x68]
sub eax, edx
jne 0x41779a
mov dword [ebp - 0x250], 1
jmp 0x4177a1
and dword [ebp - 0x250], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
mov eax, dword [ebp + eax*4 - 0x2fc]
cmp eax, dword [ebp - 0x250]
je 0x4177c6
mov dword [ebp - 0xc0], 1
jmp 0x4177cd
and dword [ebp - 0xc0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
mov ecx, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x2fc], ecx
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x330], eax
jmp 0x4176a2
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x60]
mov dword [ebp + eax - 0x2fc], ecx
jmp 0x41763b
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x7c]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x1c], eax
push 0
push 0x268a
push 0x4cf6
push 1
push 0
call fcn.0041086f
add esp, 0x14
and dword [ebp - 0xf4], 0
jmp 0x417855
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0x1c]
add eax, 0x28
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0xf4], eax
jge 0x4194dc
mov dword [ebp - 0x44], 0x5720e83c
mov dword [ebp - 0x6c], 0xde9829cb
mov dword [ebp - 0xb0], 0xfffffff6
push 3
lea ecx, [ebp - 0x2d4]
call fcn.0043387f
mov dword [ebp - 0x39c], 1
mov dword [ebp - 0x3a4], 1
mov dword [ebp - 0x20], 0
jmp 0x4178b3
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x4178c9
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x3c0], 0x31e4
jmp 0x4178ac
mov dword [ebp - 0x20], 0
jmp 0x4178d9
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x4178f5
push dword [ebp - 0x20]
lea ecx, [ebp - 0x2d4]
call fcn.0043396d
mov dword [eax], 1
jmp 0x4178d2
lea eax, [ebp - 0x44]
push eax
push 0
push 0x4571
call fcn.00417145
add esp, 0xc
mov dword [ebp - 0x44], 0
jmp 0x417918
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jg 0x417ee9
mov dword [ebp - 8], 0xffffffff
mov dword [ebp - 0x158], 1
mov dword [ebp - 0xb4], 1
push 1
lea ecx, [ebp - 0x2f0]
call fcn.0043387f
mov dword [ebp - 0x214], 1
mov dword [ebp - 0x58], 0
jmp 0x417964
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x417977
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x30], 0xffffffff
jmp 0x41795d
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x2f0]
push eax
push 0x838
push 0
push 0x51a6
call fcn.00419fbc
add esp, 0x14
cmp dword [ebp - 8], 0xda2a
jge 0x4179ab
mov dword [ebp - 0x10c], 1
jmp 0x4179b2
and dword [ebp - 0x10c], 0
cmp dword [ebp - 0x10c], 0xffffffff
je 0x4179c7
mov dword [ebp - 0x258], 1
jmp 0x4179ce
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
sub eax, dword [ebp - 8]
je 0x4179f1
cmp dword [ebp - 8], 0
je 0x4179f1
mov dword [ebp - 0x114], 1
jmp 0x4179f8
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x114], eax
jle 0x417a0f
mov dword [ebp - 0x11c], 1
jmp 0x417a16
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 8]
mov dword [ebp - 0x268], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x268]
mov dword [ebp + eax - 0x30], ecx
mov eax, dword [ebp - 0x268]
cmp eax, dword [ebp - 0x11c]
jle 0x417a53
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x30], 0
jne 0x417a53
and dword [ebp - 0x3dc], 0
jmp 0x417a5d
mov dword [ebp - 0x3dc], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3c0]
mov dword [ebp - 0x47c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3c0], 0x8ad64de8
jae 0x417a8f
mov dword [ebp - 0x338], 1
jmp 0x417a96
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x484], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
mov dword [ebp - 0x48c], eax
push 0
lea ecx, [ebp - 0x2d4]
call fcn.0043396d
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x39c], eax
jge 0x417ad6
mov dword [ebp - 0x270], 1
jmp 0x417add
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x270]
je 0x417af4
mov dword [ebp - 0x340], 1
jmp 0x417afb
and dword [ebp - 0x340], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
mov dword [ebp - 0x458], eax
mov eax, dword [ebp - 0xb0]
sub eax, dword [ebp - 8]
cmp eax, dword [ebp - 8]
jl 0x417b25
mov dword [ebp - 0x124], 1
jmp 0x417b2c
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x158]
cmp dword [ebp - 0x124], eax
jl 0x417b46
mov dword [ebp - 0x278], 1
jmp 0x417b4d
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x278]
dec eax
mov dword [ebp - 0xb4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c0]
cmp eax, dword [ebp - 0xb4]
jle 0x417b7b
mov dword [ebp - 0x12c], 1
jmp 0x417b82
and dword [ebp - 0x12c], 0
cmp dword [ebp - 0x12c], 8
jg 0x417ba6
push 0x2689
push 0x18e7
push 1
push 0
call fcn.00416cdd
add esp, 0x10
jmp 0x417d5c
mov dword [ebp - 0x348], 0x72c95c8f
cmp dword [ebp - 0x44], 7
jbe 0x417bc2
mov dword [ebp - 0x3d4], 1
jmp 0x417bc9
and dword [ebp - 0x3d4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
mov dword [ebp - 0x478], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3c0]
mov dword [ebp - 0x460], eax
xor eax, eax
inc eax
jne 0x417bfe
xor eax, eax
jne 0x417bfe
and dword [ebp - 0x280], 0
jmp 0x417c08
mov dword [ebp - 0x280], 1
cmp dword [ebp - 0x280], 0x335a02a9
jle 0x417c20
mov dword [ebp - 0x134], 1
jmp 0x417c27
and dword [ebp - 0x134], 0
push 0
lea ecx, [ebp - 0x2f0]
call fcn.0043396d
mov ecx, dword [ebp - 0x134]
mov dword [eax], ecx
cmp dword [ebp - 0x348], 0xd142
jg 0x417c54
mov dword [ebp - 0x144], 1
jmp 0x417c5b
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 8]
mov dword [ebp - 0xb4], eax
push 2
lea ecx, [ebp - 0x2d4]
call fcn.0043396d
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [eax]
mov dword [ebp + ecx - 0x30], eax
xor eax, eax
add eax, 0xffffe0f1
cmp dword [ebp - 0x214], eax
jge 0x417c98
mov dword [ebp - 0x288], 1
jmp 0x417c9f
and dword [ebp - 0x288], 0
cmp dword [ebp - 0x288], 1
jne 0x417cb4
mov dword [ebp - 0x13c], 1
jmp 0x417cbb
and dword [ebp - 0x13c], 0
cmp dword [ebp - 0x13c], 0xd1dc2cbf
je 0x417cd3
mov dword [ebp - 0x290], 1
jmp 0x417cda
and dword [ebp - 0x290], 0
cmp dword [ebp - 0x290], 1
je 0x417cef
mov dword [ebp - 0x298], 1
jmp 0x417cf6
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x144]
cmp eax, dword [ebp - 0x298]
jg 0x417d10
mov dword [ebp - 0x2a0], 1
jmp 0x417d17
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x158]
cmp dword [ebp - 0xb4], eax
jl 0x417d3a
mov dword [ebp - 0x154], 1
jmp 0x417d41
and dword [ebp - 0x154], 0
push 0
lea ecx, [ebp - 0x2f0]
call fcn.0043396d
mov ecx, dword [ebp - 0x154]
add ecx, dword [eax]
mov dword [ebp - 0x3a4], ecx
mov eax, 0xfffdb83c
test eax, eax
je 0x417e9c
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x350], 0xfffffffb
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x488], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3c0]
mov dword [ebp - 0x468], eax
push 0
lea ecx, [ebp - 0x2f0]
call fcn.0043396d
mov eax, dword [ebp - 8]
mov dword [ebp - 0x480], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x30], 0x8626
mov esi, 0x8626
neg esi
push 2
lea ecx, [ebp - 0x2d4]
call fcn.0043396d
add esi, dword [eax]
cmp esi, dword [ebp - 0x350]
jg 0x417de9
mov dword [ebp - 0x208], 1
jmp 0x417df0
and dword [ebp - 0x208], 0
push 0
lea ecx, [ebp - 0x2d4]
call fcn.0043396d
mov ecx, dword [ebp - 0x208]
cmp ecx, dword [eax]
jg 0x417e13
mov dword [ebp - 0x15c], 1
jmp 0x417e1a
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x5d954113
jle 0x417e44
mov dword [ebp - 0x20c], 1
jmp 0x417e4b
and dword [ebp - 0x20c], 0
cmp dword [ebp - 0x20c], 0x890b
jne 0x417e63
mov dword [ebp - 0x164], 1
jmp 0x417e6a
and dword [ebp - 0x164], 0
imul eax, dword [ebp - 0x164], 0xffff
cmp eax, 0x49d5
je 0x417e87
mov dword [ebp - 0x2a4], 1
jmp 0x417e8e
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x16c], eax
jmp 0x417ed9
mov dword [ebp - 0x3c8], 0x2e326e24
cmp dword [ebp - 0x214], 0
je 0x417ebc
lea ecx, [ebp - 0x2f0]
call fcn.00433951
jmp 0x417ee9
push 0x6686
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x3c8]
push eax
push 0
call fcn.0040a29f
add esp, 0x10
lea ecx, [ebp - 0x2f0]
call fcn.00433951
jmp 0x417911
lea ecx, [ebp - 0x2d4]
call fcn.00433951
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x10], 0
jne 0x41889f
mov dword [ebp - 0xc8], 1
mov dword [ebp - 0x34], 0x2dafbbd
mov dword [ebp - 0x90], 0
jmp 0x417f2b
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x417f47
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x264], 0
jmp 0x417f1e
mov byte [ebp - 0x36], 0
push 0xbf1
lea eax, [ebp - 0x36]
push eax
push 0
call fcn.0042ae87
add esp, 0xc
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x264]
mov dword [ebp - 0x470], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x264]
mov dword [ebp - 0x450], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x264]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jne 0x417fc2
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x264]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x264]
test eax, eax
jne 0x417fc2
and dword [ebp - 0x174], 0
jmp 0x417fcc
mov dword [ebp - 0x174], 1
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x358], eax
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x3ac], eax
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x358]
cmp eax, dword [ebp - 0x3ac]
jl 0x41800b
mov dword [ebp - 0x26c], 1
jmp 0x418012
and dword [ebp - 0x26c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x264]
cmp dword [ebp - 0x26c], eax
je 0x418033
mov dword [ebp - 0x17c], 1
jmp 0x41803a
and dword [ebp - 0x17c], 0
cmp dword [ebp - 0x17c], 0x6c218e99
jg 0x418052
mov dword [ebp - 0x21c], 1
jmp 0x418059
and dword [ebp - 0x21c], 0
cmp dword [ebp - 0x21c], 7
jge 0x41806e
mov dword [ebp - 0xe0], 1
jmp 0x418075
and dword [ebp - 0xe0], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xe0]
mov dword [ebp + eax - 0x264], ecx
cmp dword [ebp - 0xe0], 0
je 0x4180b9
mov dword [ebp - 0x34], 2
jmp 0x4180a0
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x4180b7
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x264], 0
je 0x4180b5
jmp 0x4180b7
jmp 0x418099
jmp 0x418103
mov dword [ebp - 0x3d0], 0xb89b
mov dword [ebp - 0x360], 5
mov byte [ebp - 0x35], 0
push 0
lea eax, [ebp - 0x35]
push eax
push 0x3c6c
push 0x5563
push 0
call fcn.00422c00
add esp, 0x14
lea eax, [ebp - 0x360]
push eax
push 0
lea eax, [ebp - 0x3d0]
push eax
call fcn.00425262
add esp, 0xc
lea eax, [ebp - 0x1d8]
push eax
lea eax, [ebp - 0x368]
push eax
push 0
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0040bb25
add esp, 0x14
mov dword [ebp - 0x50], 0xbacd7953
push 2
lea ecx, [ebp - 0x308]
call fcn.0043387f
mov dword [ebp - 0xa8], 0xfffffffa
mov dword [ebp - 0xb8], 0xc017f215
mov dword [ebp - 0xc4], 0xffffffff
push 3
lea ecx, [ebp - 0x2c8]
call fcn.0043387f
mov dword [ebp - 0x24], 9
mov dword [ebp - 0xa0], 0xe9e5a939
mov dword [ebp - 0x18c], 0x314d41bd
mov dword [ebp - 0x3b4], 1
mov dword [ebp - 0xf0], 0xfffffff8
mov dword [ebp - 0xe8], 1
mov dword [ebp - 0x37c], 0xfffffffd
push 1
lea ecx, [ebp - 0x448]
call fcn.0043387f
push 0x6398
push 0
push 0x3195
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x308]
push eax
call fcn.00419f59
add esp, 0x14
mov dword [ebp - 0x10], 0
jmp 0x4181e4
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x4181fd
push dword [ebp - 0x10]
lea ecx, [ebp - 0x2c8]
call fcn.0043396d
and dword [eax], 0
jmp 0x4181dd
mov dword [ebp - 0x10], 0
jmp 0x41820d
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x418223
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x2b4], 0xffffffff
jmp 0x418206
lea eax, [ebp - 0x448]
push eax
push 0x69d0
push 0x21b9
lea eax, [ebp - 0x10]
push eax
push 0x45ec
push 0x55c1
push 0x3206
push 1
push 0x1080
push 0x2026
push 0x78d5
push 1
push 0
push 0
push 0x1e5b
push 0x1960
call fcn.0042a744
add esp, 0x40
push 0x48fe
lea eax, [ebp - 0xc4]
push eax
push 0
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x308]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x2c8]
push eax
push 0x16f2
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x18c]
push eax
call fcn.0041d6e8
add esp, 0x30
push 0
lea ecx, [ebp - 0x308]
call fcn.0043396d
cmp dword [eax], 0
jne 0x4182db
mov dword [ebp - 0x184], 1
jmp 0x4182e2
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x184], eax
jg 0x418305
cmp dword [ebp - 0xb8], 0
je 0x418305
mov dword [ebp - 0x294], 1
jmp 0x41830c
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 0x294]
sub eax, dword [ebp - 0x50]
cmp eax, 0x7709c180
jge 0x418328
mov dword [ebp - 0x224], 1
jmp 0x41832f
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x18c]
cmp eax, dword [ebp - 0x224]
jl 0x418349
mov dword [ebp - 0x194], 1
jmp 0x418350
and dword [ebp - 0x194], 0
cmp dword [ebp - 0x194], 0xfffffff9
jbe 0x418365
mov dword [ebp - 0x274], 1
jmp 0x41836c
and dword [ebp - 0x274], 0
push 0
lea ecx, [ebp - 0x2c8]
call fcn.0043396d
mov ecx, dword [ebp - 0x274]
cmp ecx, dword [eax]
jge 0x41838f
mov dword [ebp - 0x19c], 1
jmp 0x418396
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x19c], eax
jne 0x4183b3
cmp dword [ebp - 0x3b4], 0
jne 0x4183b3
and dword [ebp - 0x22c], 0
jmp 0x4183bd
mov dword [ebp - 0x22c], 1
cmp dword [ebp - 0x22c], 4
jbe 0x4183db
mov eax, 0x8275baed
test eax, eax
je 0x4183db
mov dword [ebp - 0x370], 1
jmp 0x4183e2
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x454], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2b4]
cmp dword [ebp - 0x50], eax
jg 0x41840c
mov dword [ebp - 0x1a4], 1
jmp 0x418413
and dword [ebp - 0x1a4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2b4]
cmp dword [ebp - 0x1a4], eax
jg 0x418434
mov dword [ebp - 0x2b8], 1
jmp 0x41843b
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x2b8]
dec eax
mov dword [ebp - 0xf0], eax
je 0x41845a
xor eax, eax
je 0x41845a
mov dword [ebp - 0x1ac], 1
jmp 0x418461
and dword [ebp - 0x1ac], 0
push 2
lea ecx, [ebp - 0x2c8]
call fcn.0043396d
mov ecx, dword [ebp - 0x1ac]
cmp ecx, dword [eax]
jg 0x418484
mov dword [ebp - 0x234], 1
jmp 0x41848b
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0
jne 0x4184b2
cmp dword [ebp - 0xe8], 0
jne 0x4184b2
and dword [ebp - 0x1b4], 0
jmp 0x4184bc
mov dword [ebp - 0x1b4], 1
cmp dword [ebp - 0x1b4], 0x332e
jl 0x4184d4
mov dword [ebp - 0x27c], 1
jmp 0x4184db
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x27c]
inc eax
cmp eax, dword [ebp - 0xb8]
jle 0x4184f6
mov dword [ebp - 0x3d8], 1
jmp 0x4184fd
and dword [ebp - 0x3d8], 0
mov eax, 0xa6e4
cmp eax, 0xffffffff
jne 0x418513
mov dword [ebp - 0xd0], 1
jmp 0x41851a
and dword [ebp - 0xd0], 0
push 2
lea ecx, [ebp - 0x2c8]
call fcn.0043396d
mov ecx, dword [ebp - 0xd0]
mov dword [eax], ecx
push 1
lea ecx, [ebp - 0x308]
call fcn.0043396d
mov eax, dword [eax]
sub eax, dword [ebp - 0xd0]
cmp eax, 0xccf04a32
ja 0x418557
mov dword [ebp - 0x1bc], 1
jmp 0x41855e
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x1bc]
jge 0x418575
mov dword [ebp - 0x23c], 1
jmp 0x41857c
and dword [ebp - 0x23c], 0
imul eax, dword [ebp - 0x23c], 0xd617
cmp dword [ebp - 0xa0], eax
je 0x41859b
mov eax, 0x58950224
test eax, eax
je 0x418733
mov dword [ebp - 0x98], 1
mov dword [ebp - 0x3c4], 0xac52cf4
mov dword [ebp - 0x24], 0xfffffff4
jmp 0x4185bf
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffe5
je 0x41872e
mov dword [ebp - 0x1c4], 1
mov dword [ebp - 0xd8], 0x33c814b4
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x45c], eax
push 1
lea ecx, [ebp - 0x2c8]
call fcn.0043396d
mov dword [eax], 0xe69a7eec
mov dword [ebp - 0x1c4], 0xe69a7eec
mov eax, dword [ebp - 0x1c4]
sub eax, dword [ebp - 0x98]
add eax, dword [ebp - 0xf0]
add eax, dword [ebp - 0x37c]
cmp eax, 0x6d4b
jl 0x41862e
mov dword [ebp - 0x29c], 1
jmp 0x418635
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0x29c]
jl 0x41864f
mov dword [ebp - 0x1cc], 1
jmp 0x418656
and dword [ebp - 0x1cc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2b4]
cmp eax, dword [ebp - 0x1cc]
jge 0x418677
mov dword [ebp - 0x244], 1
jmp 0x41867e
and dword [ebp - 0x244], 0
cmp dword [ebp - 0x244], 0
jle 0x418693
mov dword [ebp - 0x1d4], 1
jmp 0x41869a
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x1d4], eax
je 0x4186bd
cmp dword [ebp - 0xd8], 0
je 0x4186bd
mov dword [ebp - 0x284], 1
jmp 0x4186c4
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0x284]
je 0x4186de
mov dword [ebp - 0x1dc], 1
jmp 0x4186e5
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x1dc], eax
jle 0x418705
cmp dword [ebp - 0xe8], 0
jne 0x418705
and dword [ebp - 0x24c], 0
jmp 0x41870f
mov dword [ebp - 0x24c], 1
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x3c4], eax
cmp dword [ebp - 0xd8], 0
je 0x418729
jmp 0x4185b8
jmp 0x4185b8
jmp 0x418879
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x1fc], 0xfffffffb
cmp dword [ebp - 0x84], 0
jne 0x4187b4
cmp dword [ebp - 0x84], 0
je 0x4187ac
cmp dword [ebp - 0xb8], 0x14209850
jl 0x418771
mov dword [ebp - 0x1e4], 1
jmp 0x418778
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x1e4]
inc eax
je 0x41879f
push 1
lea ecx, [ebp - 0x308]
call fcn.0043396d
cmp dword [eax], 0
je 0x41879f
mov dword [ebp - 0x2ac], 1
jmp 0x4187a6
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0xe8]
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x50]
je 0x4187c9
cmp dword [ebp - 0x84], 0
je 0x4187c9
mov dword [ebp - 0x1ec], 1
jmp 0x4187d0
and dword [ebp - 0x1ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2b4]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0x1ec]
jge 0x4187fd
mov dword [ebp - 0x254], 1
jmp 0x418804
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x84]
add eax, dword [ebp - 0x254]
cmp eax, 0x9b40cd91
jb 0x418823
mov dword [ebp - 0x1f4], 1
jmp 0x41882a
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0xc4]
cmp eax, dword [ebp - 0x1f4]
jge 0x418844
mov dword [ebp - 0x28c], 1
jmp 0x41884b
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x1fc], eax
mov esi, dword [ebp - 0x1fc]
push 4
pop eax
imul eax, eax, 0
sub esi, dword [ebp + eax - 0x2b4]
push 0
lea ecx, [ebp - 0x448]
call fcn.0043396d
mov dword [eax], esi
lea ecx, [ebp - 0x448]
call fcn.00433951
lea ecx, [ebp - 0x2c8]
call fcn.00433951
lea ecx, [ebp - 0x308]
call fcn.00433951
jmp 0x41783f
mov dword [ebp - 0x384], 0xdb34
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0xa4], 0x2f3ccd24
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x310], 6
mov dword [ebp - 0xd4], 0xddbc75b1
mov dword [ebp - 0x1c8], 0x9d90dc6c
mov dword [ebp - 0x334], 1
push 0xbce
lea eax, [ebp - 0xa4]
push eax
push 0xefa
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0xc]
push eax
push 0xf13
lea eax, [ebp - 0x384]
push eax
lea eax, [ebp - 0x2c]
push eax
push 0
call fcn.00416328
add esp, 0x24
mov dword [ebp - 0x2c], 5
jmp 0x418933
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x1d
jg 0x418e08
mov dword [ebp - 0x54], 0x3631af66
mov dword [ebp - 0x314], 0
mov dword [ebp - 0x180], 0xfffc
mov dword [ebp - 0x1d0], 0xdd75
mov dword [ebp - 0x8c], 0
jmp 0x41897b
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x418994
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x28], 0x54d8142c
jmp 0x41896e
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x28], 0
mov dword [ebp - 0xc], 0
jmp 0x4189b2
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jg 0x418e03
mov dword [ebp - 0xdc], 0xfffffffc
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x28], 0
je 0x418a60
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x28], 0xe4f
jg 0x4189ed
mov dword [ebp - 0x204], 1
jmp 0x4189f4
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x54], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
cmp eax, dword [ebp - 0x54]
jl 0x418a18
mov dword [ebp - 0x14c], 1
jmp 0x418a1f
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x204]
cmp eax, dword [ebp - 0x14c]
jne 0x418a39
mov dword [ebp - 0xf8], 1
jmp 0x418a40
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x2c], 0
jne 0x418a54
or eax, 0xffffffff
je 0x418a60
mov dword [ebp - 0x148], 1
jmp 0x418a67
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x464], eax
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x46c], eax
mov dword [ebp - 0x18], 1
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0xd4]
cmp eax, 0xffff
je 0x418aae
mov dword [ebp - 0x160], 1
jmp 0x418ab5
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x180]
cmp dword [ebp - 0x160], eax
jge 0x418acf
mov dword [ebp - 0x31c], 1
jmp 0x418ad6
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x2c], eax
jl 0x418aea
mov dword [ebp - 0x168], 1
jmp 0x418af1
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x28]
cmp dword [ebp - 0x168], eax
je 0x418b0c
mov dword [ebp - 0x170], 1
jmp 0x418b13
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x28]
imul eax, dword [ebp - 0x170]
test eax, eax
je 0x418d6b
mov dword [ebp - 0x1b0], 0xffffffff
mov dword [ebp - 0x94], 0
jmp 0x418b4c
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jge 0x418b68
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x1a8], 0xd5b1
jmp 0x418b3f
mov dword [ebp - 0x18], 0
jmp 0x418b78
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jg 0x418d59
push 4
lea ecx, [ebp - 0x3f8]
call fcn.0043387f
mov dword [ebp - 0xcc], 0x11ee15d1
mov dword [ebp - 0x9c], 0
jmp 0x418bb2
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 4
jge 0x418bd4
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x3f8]
call fcn.0043396d
mov dword [eax], 0xfffffff9
jmp 0x418ba5
push 3
lea ecx, [ebp - 0x3f8]
call fcn.0043396d
cmp dword [ebp - 0x54], 0
je 0x418c12
push 0
lea ecx, [ebp - 0x3f8]
call fcn.0043396d
cmp dword [eax], 0x3b28
jl 0x418c08
mov dword [ebp - 0x178], 1
jmp 0x418c0f
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x180], 0xb385fae1
jae 0x418c2a
mov dword [ebp - 0x188], 1
jmp 0x418c31
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x28]
cmp eax, dword [ebp - 0x188]
jl 0x418c4c
mov dword [ebp - 0x190], 1
jmp 0x418c53
and dword [ebp - 0x190], 0
cmp dword [ebp - 0x190], 3
ja 0x418c68
mov dword [ebp - 0x324], 1
jmp 0x418c6f
and dword [ebp - 0x324], 0
mov dword [ebp - 0xcc], 1
cmp dword [ebp - 0xcc], 0
je 0x418c97
cmp dword [ebp - 0xcc], 0
je 0x418c97
mov dword [ebp - 0x198], 1
jmp 0x418c9e
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x1c8]
add eax, dword [ebp - 0x198]
cmp eax, 0xe412
jg 0x418cbd
mov dword [ebp - 0x1a0], 1
jmp 0x418cc4
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0
je 0x418cf0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1a8], 0
je 0x418cf0
cmp dword [ebp - 0x1d0], 0
cmp dword [ebp - 0x1b0], 0xffffffff
je 0x418d12
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1a8], 0
jne 0x418d12
and dword [ebp - 0x1b8], 0
jmp 0x418d1c
mov dword [ebp - 0x1b8], 1
mov eax, dword [ebp - 0x1b0]
cmp dword [ebp - 0x1b8], eax
je 0x418d36
mov dword [ebp - 0x1c0], 1
jmp 0x418d3d
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0xa4], eax
lea ecx, [ebp - 0x3f8]
call fcn.00433951
jmp 0x418b71
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x28], ecx
jmp 0x418dfe
mov dword [ebp - 0x32c], 0xade0f7f7
push 1
lea ecx, [ebp - 0x43c]
call fcn.0043387f
push 0x22e0
push 0x7aa1
push 0x7b16
push 0
push 0x32fc
lea eax, [ebp - 0x43c]
push eax
push 0
lea eax, [ebp - 0x474]
push eax
call fcn.0040f9ac
add esp, 0x20
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x32c]
push eax
lea eax, [ebp - 0x334]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x1c8]
push eax
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x43c]
push eax
push 0
call fcn.00410ae3
add esp, 0x28
lea ecx, [ebp - 0x43c]
call fcn.00433951
jmp 0x4189ab
jmp 0x41892c
push 4
push 0x1000
mov eax, dword [ebp - 0x1c]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1d8]
add ecx, dword [eax + 0xc]
push ecx
push 0x6aba
push 0x4c3e
call fcn.00407138
pop ecx
pop ecx
call eax
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0x1c]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x33c]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0xe4]
call fcn.00407668
add esp, 0xc
mov dword [ebp - 0x424], 0xb55bb2c2
mov dword [ebp - 0x420], 0xb55bb2c2
mov dword [ebp - 0x41c], 0xb55bb2c2
mov dword [ebp - 0x418], 0xb55bb2c2
lea ecx, [ebp - 0xe9]
call fcn.0043397c
push eax
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0x424]
push eax
lea ecx, [ebp - 0x49c]
call fcn.0043397f
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x78]
call fcn.0043392b
mov dword [ebp - 0x40], 0xb2b534de
mov dword [ebp - 0x1e0], 0xea6edad9
mov dword [ebp - 0xac], 0
jmp 0x418ee0
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 1
jge 0x418ef9
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 4], 0x689351f2
jmp 0x418ed3
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 4], 3
jmp 0x418f1e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 4]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 4], 0
jl 0x4194a7
mov dword [ebp - 0x14], 0x3ac9d73d
push 3
lea ecx, [ebp - 0x404]
call fcn.0043387f
mov dword [ebp - 0x34c], 0xfadbacd6
lea eax, [ebp - 0x5c]
push eax
push 0
push 0x7066
lea eax, [ebp - 0x404]
push eax
push 0x7f60
push 0
call fcn.0041cb98
add esp, 0x18
mov dword [ebp - 0x5c], 0
jmp 0x418f7e
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x418f94
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x494], 0xfffffff9
jmp 0x418f77
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 4]
lea ecx, [ebp - 0x78]
call fcn.0043396d
cmp dword [eax], 0
jne 0x419078
push 3
lea ecx, [ebp - 0x78]
call fcn.0043396d
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x1e0], eax
mov esi, dword [ebp - 0x1e0]
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 4]
lea ecx, [ebp - 0x78]
call fcn.0043396d
cmp dword [eax], esi
jl 0x418fef
mov dword [ebp - 0x1e8], 1
jmp 0x418ff6
and dword [ebp - 0x1e8], 0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 4]
lea ecx, [ebp - 0x78]
call fcn.0043396d
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1e8]
jge 0x41901e
mov dword [ebp - 0x1f0], 1
jmp 0x419025
and dword [ebp - 0x1f0], 0
cmp dword [ebp - 0x1f0], 1
jne 0x41903a
mov dword [ebp - 0x1f8], 1
jmp 0x419041
and dword [ebp - 0x1f8], 0
cmp dword [ebp - 0x1f8], 8
je 0x419056
mov dword [ebp - 0x200], 1
jmp 0x41905d
and dword [ebp - 0x200], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 4]
cmp dword [ebp - 0x200], eax
jge 0x419078
and dword [ebp - 0x210], 0
jmp 0x419082
mov dword [ebp - 0x210], 1
cmp dword [ebp - 0x210], 0x5f34
jg 0x41909a
mov dword [ebp - 0x218], 1
jmp 0x4190a1
and dword [ebp - 0x218], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 4]
cmp dword [ebp - 0x218], eax
jne 0x4190bf
mov dword [ebp - 0x220], 1
jmp 0x4190c6
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x14], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 4]
cmp dword [ebp - 0x14], eax
jg 0x419107
mov dword [ebp - 0x344], 0x266d8ff8
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 4]
lea ecx, [ebp - 0x78]
call fcn.0043396d
mov eax, dword [eax]
mov dword [ebp - 0x344], eax
jmp 0x41947a
mov dword [ebp - 0x2e4], 1
mov dword [ebp - 0x2e0], 1
mov dword [ebp - 0x2dc], 1
mov dword [ebp - 0x2d8], 1
mov dword [ebp - 0x14], 3
jmp 0x41913f
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x41947a
mov dword [ebp - 0x240], 0x195c588c
mov dword [ebp - 0x354], 0xd282
mov dword [ebp - 0x80], 0
jmp 0x41916d
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jge 0x419183
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x378], 0
jmp 0x419166
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 4]
lea ecx, [ebp - 0x78]
call fcn.0043396d
cmp dword [eax], 0
je 0x4192e9
push dword [ebp - 0x14]
lea ecx, [ebp - 0x78]
call fcn.0043396d
cmp dword [eax], 0
je 0x419299
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 4]
lea ecx, [ebp - 0x78]
call fcn.0043396d
push dword [ebp - 0x14]
lea ecx, [ebp - 0x78]
call fcn.0043396d
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 4]
lea ecx, [ebp - 0x78]
call fcn.0043396d
mov esi, eax
push 1
lea ecx, [ebp - 0x404]
call fcn.0043396d
mov ecx, dword [esi]
cmp ecx, dword [eax]
jl 0x419202
mov dword [ebp - 0x228], 1
jmp 0x419209
and dword [ebp - 0x228], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x78]
call fcn.0043396d
mov eax, dword [eax]
cmp eax, dword [ebp - 0x228]
jne 0x41922a
mov dword [ebp - 0x230], 1
jmp 0x419231
and dword [ebp - 0x230], 0
mov esi, dword [ebp - 0x14]
imul esi, dword [ebp - 0x230]
push 1
lea ecx, [ebp - 0x78]
call fcn.0043396d
cmp esi, dword [eax]
jge 0x419255
mov dword [ebp - 0x238], 1
jmp 0x41925c
and dword [ebp - 0x238], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x238]
sub ecx, dword [ebp + eax - 4]
mov dword [ebp - 0x240], ecx
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0x40], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e4]
cmp dword [ebp - 0x40], eax
jl 0x419299
mov dword [ebp - 0xfc], 1
jmp 0x4192a0
and dword [ebp - 0xfc], 0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 4]
lea ecx, [ebp - 0x78]
call fcn.0043396d
mov ecx, dword [ebp - 0xfc]
cmp ecx, dword [eax]
jge 0x4192c8
mov dword [ebp - 0x100], 1
jmp 0x4192cf
and dword [ebp - 0x100], 0
imul eax, dword [ebp - 0x100], 0
cmp eax, 0x4e719ba7
jge 0x4192e9
mov dword [ebp - 0x108], 1
jmp 0x4192f0
and dword [ebp - 0x108], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x494]
imul eax, dword [ebp - 0x108]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 4]
je 0x41931c
mov dword [ebp - 0x110], 1
jmp 0x419323
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x34c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2e4], 0
je 0x419353
mov eax, 0xab59a67e
test eax, eax
je 0x419353
mov dword [ebp - 0x118], 1
jmp 0x41935a
and dword [ebp - 0x118], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, 0xd048
sub ecx, dword [ebp + eax - 0x2e4]
push 4
pop eax
shl eax, 0
imul ecx, dword [ebp + eax - 0x378]
add ecx, dword [ebp - 0x354]
jne 0x41939a
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2e4], 0
jne 0x41939a
and dword [ebp - 0x120], 0
jmp 0x4193a4
mov dword [ebp - 0x120], 1
mov eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 0x120]
jge 0x4193be
mov dword [ebp - 0x128], 1
jmp 0x4193c5
and dword [ebp - 0x128], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x378]
cmp dword [ebp - 0x128], eax
jg 0x4193e6
mov dword [ebp - 0x130], 1
jmp 0x4193ed
and dword [ebp - 0x130], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e4]
cmp dword [ebp - 0x130], eax
jge 0x41940e
mov dword [ebp - 0x138], 1
jmp 0x419415
and dword [ebp - 0x138], 0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 4]
lea ecx, [ebp - 0x78]
call fcn.0043396d
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 4]
add ecx, dword [ebp - 0x138]
mov eax, dword [eax]
sub eax, ecx
mov dword [ebp - 0x40], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2e4]
cmp dword [ebp - 0x40], eax
je 0x41945b
mov dword [ebp - 0x140], 1
jmp 0x419462
and dword [ebp - 0x140], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x140]
mov dword [ebp + eax - 0x378], ecx
jmp 0x419138
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 4], 0
je 0x419497
lea ecx, [ebp - 0x404]
call fcn.00433951
jmp 0x418f09
lea ecx, [ebp - 0x404]
call fcn.00433951
jmp 0x418f09
lea ecx, [ebp - 0x78]
call fcn.00433951
lea eax, [ebp - 0x1c]
push eax
push 1
push 0
push 0x268f
push 0x21a8
push 0x4062
push 0
lea eax, [ebp - 0xe4]
push eax
call fcn.004265d4
add esp, 0x20
jmp 0x41783f
pop esi
mov esp, ebp
pop ebp
ret