Function at 0x42c782
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x310
push esi
movzx eax, byte [ebp + 0x3c]
test eax, eax
je 0x42c992
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x214], eax
lea eax, [ebp + 0x18]
mov dword [ebp - 0x188], eax
lea eax, [ebp + 0x20]
mov dword [ebp - 0x230], eax
lea eax, [ebp + 0x34]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp + 0x44]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x170]
movzx eax, byte [eax]
test eax, eax
je 0x42c88f
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x168]
movzx eax, byte [eax]
test eax, eax
je 0x42c84a
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp - 0x1c8]
mov eax, dword [eax]
mov eax, dword [eax]
and dword [eax + 0xc], 0
jmp 0x42c88a
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x180]
movzx eax, byte [eax]
test eax, eax
je 0x42c88a
push 0x16b
push 0
call dword [0xab14dc]
push eax
call dword [0xab14ac]
push eax
call dword [0xab10f0]
jmp 0x42c98d
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x1f8], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x1e8]
movzx eax, byte [eax]
test eax, eax
je 0x42c92a
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov dword [eax], 2
jmp 0x42c8f7
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x50]
mov dword [ecx], eax
mov eax, dword [ebp - 0x50]
cmp dword [eax], 0
jl 0x42c928
mov dword [ebp - 0x34], 0xfffffff6
mov dword [ebp - 0x34], 2
jmp 0x42c916
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x42c926
cmp dword [ebp - 0x34], 0
je 0x42c924
jmp 0x42c926
jmp 0x42c90f
jmp 0x42c8ec
jmp 0x42c98d
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x40]
mov dword [eax], 0
jmp 0x42c96d
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x40]
mov dword [ecx], eax
mov eax, dword [ebp - 0x40]
cmp dword [eax], 3
jge 0x42c98d
mov eax, dword [ebp - 0x40]
push dword [eax]
mov ecx, dword [ebp - 0x1b0]
call fcn.0043529d
mov dword [eax], 0x869e7721
jmp 0x42c962
jmp 0x42db6b
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x210], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x1b8], eax
lea eax, [ebp + 0x14]
mov dword [ebp - 0x208], eax
lea eax, [ebp + 0x40]
mov dword [ebp - 0x220], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp + 0x38]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x208]
movzx eax, byte [eax]
test eax, eax
je 0x42db63
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x23c]
movzx eax, byte [eax]
test eax, eax
je 0x42ca9f
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x3c]
mov dword [eax], 0
jmp 0x42ca7a
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x3c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x3c]
cmp dword [eax], 1
jge 0x42ca9a
mov eax, dword [ebp - 0x3c]
push dword [eax]
mov ecx, dword [ebp - 0x1e4]
call fcn.0043529d
mov dword [eax], 0xfffffffd
jmp 0x42ca6f
jmp 0x42db61
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x5c], eax
push 0
push 0x1cac
push 1
push 0
push 1
call fcn.00423dd7
add esp, 0x14
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 4]
mov dword [ebp - 0x130], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x60], 0xef054a20
mov dword [ebp - 0x10], 0
jmp 0x42caff
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x42cb15
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x2ec], 4
jmp 0x42caf8
mov dword [ebp - 0x10], 0
jmp 0x42cb25
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x42cb3b
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x2c8], 0xdbaf9eb1
jmp 0x42cb1e
cmp dword [ebp - 4], 0
jne 0x42cc8e
mov eax, dword [ebp - 4]
mov dword [ebp - 0x294], eax
mov eax, dword [ebp - 4]
cmp dword [ebp - 4], eax
jge 0x42cb62
mov dword [ebp - 0x140], 1
jmp 0x42cb69
and dword [ebp - 0x140], 0
cmp dword [ebp - 0x140], 0xd99ea7eb
jbe 0x42cb81
mov dword [ebp - 0xb4], 1
jmp 0x42cb88
and dword [ebp - 0xb4], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0xb4], eax
jge 0x42cb9f
mov dword [ebp - 0x114], 1
jmp 0x42cba6
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x114], eax
jg 0x42cbbd
mov dword [ebp - 0x8c], 1
jmp 0x42cbc4
and dword [ebp - 0x8c], 0
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x8c]
jg 0x42cbdb
mov dword [ebp - 0xec], 1
jmp 0x42cbe2
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0xec], eax
jg 0x42cbf9
mov dword [ebp - 0x94], 1
jmp 0x42cc00
and dword [ebp - 0x94], 0
cmp dword [ebp - 0x94], 0x3fc0
jle 0x42cc1e
mov eax, 0x3fd5
test eax, eax
jne 0x42cc1e
and dword [ebp - 0x12c], 0
jmp 0x42cc28
mov dword [ebp - 0x12c], 1
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x12c]
cmp eax, 0xfffffff7
je 0x42cc42
mov dword [ebp - 0x9c], 1
jmp 0x42cc49
and dword [ebp - 0x9c], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x9c], eax
jge 0x42cc60
mov dword [ebp - 0x1f4], 1
jmp 0x42cc67
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 4], 0
je 0x42cc8e
and dword [ebp - 0xf4], 0
jmp 0x42cc98
mov dword [ebp - 0xf4], 1
mov eax, dword [ebp - 0xf4]
dec eax
cmp eax, dword [ebp - 4]
jl 0x42ccb3
cmp dword [ebp - 4], 0
je 0x42ccb3
mov dword [ebp - 0x68], 1
jmp 0x42ccb7
and dword [ebp - 0x68], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x68]
mov dword [ebp + eax - 0x2ec], ecx
mov eax, dword [ebp - 0x68]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2c8], eax
push 0
push 0
push 0x1188
push 0x17d
push 1
call fcn.0041f4b2
add esp, 0x14
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x5c]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x28], 0xd95da228
mov dword [ebp - 0x15c], 2
mov dword [ebp - 0x158], 2
mov dword [ebp - 0x154], 2
mov dword [ebp - 0x150], 2
mov dword [ebp - 0xfc], 0x676492a4
push 2
lea ecx, [ebp - 0x254]
call fcn.004351af
mov dword [ebp - 0x30], 0
jmp 0x42cd63
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x42cd76
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x54], 0x88cb5c74
jmp 0x42cd5c
push 0
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x30]
push eax
push 0x2599
push 0x15f3
call fcn.0042656f
add esp, 0x14
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
shl eax, 3
imul eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x20]
jle 0x42cdbc
mov dword [ebp - 0xa4], 1
jmp 0x42cdc3
and dword [ebp - 0xa4], 0
cmp dword [ebp - 0xa4], 0x4adc9fe9
jne 0x42cddb
mov dword [ebp - 0x22c], 1
jmp 0x42cde2
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x28], 0x6f44
jl 0x42ce00
mov dword [ebp - 0x11c], 1
jmp 0x42ce07
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x11c], eax
je 0x42ce21
mov eax, 0x3352fb29
test eax, eax
jne 0x42ce21
and dword [ebp - 0x80], 0
jmp 0x42ce28
mov dword [ebp - 0x80], 1
cmp dword [ebp - 0x80], 0xdf34ffde
je 0x42ce3d
mov dword [ebp - 0xac], 1
jmp 0x42ce44
and dword [ebp - 0xac], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0xac], eax
jne 0x42ce5b
mov dword [ebp - 0xb0], 1
jmp 0x42ce62
and dword [ebp - 0xb0], 0
imul eax, dword [ebp - 0xb0], 0xfffffff6
cmp eax, dword [ebp - 0x20]
jl 0x42ce7a
mov dword [ebp - 0x1fc], 1
jmp 0x42ce81
and dword [ebp - 0x1fc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x15c]
mov dword [ebp - 0x2b8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x15c]
mov dword [ebp - 0xfc], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x15c]
cmp dword [ebp - 0xfc], eax
jg 0x42cec7
mov dword [ebp - 0xbc], 1
jmp 0x42cece
and dword [ebp - 0xbc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x15c]
add eax, dword [ebp - 0xbc]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x54], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x54], 0
jne 0x42cf0e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x54], 0
jne 0x42cf0e
and dword [ebp - 0x240], 0
jmp 0x42cf18
mov dword [ebp - 0x240], 1
cmp dword [ebp - 0x28], 0
jne 0x42cf34
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x54], 0
jne 0x42cf34
and dword [ebp - 0x13c], 0
jmp 0x42cf3e
mov dword [ebp - 0x13c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x15c]
cmp dword [ebp - 0x13c], eax
jg 0x42cf5f
mov dword [ebp - 0xc4], 1
jmp 0x42cf66
and dword [ebp - 0xc4], 0
mov esi, dword [ebp - 0x20]
imul esi, dword [ebp - 0xc4]
imul esi, dword [ebp - 0x20]
push 0
lea ecx, [ebp - 0x254]
call fcn.0043529d
cmp esi, dword [eax]
jl 0x42cf91
mov dword [ebp - 0x104], 1
jmp 0x42cf98
and dword [ebp - 0x104], 0
push 0
lea ecx, [ebp - 0x254]
call fcn.0043529d
mov ecx, dword [ebp - 0x104]
mov dword [eax], ecx
lea ecx, [ebp - 0x254]
call fcn.00435281
and dword [ebp - 0x70], 0
jmp 0x42cfce
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x18]
add eax, 0x28
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x70], eax
jge 0x42db61
mov dword [ebp - 8], 0xffffffff
mov dword [ebp - 8], 0xfffffffa
jmp 0x42cff7
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0x1a
jne 0x42d48a
push 3
lea ecx, [ebp - 0x7c]
call fcn.004351af
mov dword [ebp - 0xc], 0xffffffff
mov dword [ebp - 0x248], 1
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x7c]
push eax
push 0
push 0
push 0x36ef
push 0x7c5e
call fcn.00417b22
add esp, 0x18
mov dword [ebp - 0xc], 0
jmp 0x42d04d
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 2
jg 0x42d447
push 2
lea ecx, [ebp - 0x260]
call fcn.004351af
mov dword [ebp - 0x234], 0xc869b7d6
push 0x17a2
push 0x16d7
push 0x1a11
push 0x706f
push 0x2be7
push 0
push 0x5b31
push 0x4644
push 0x698e
push 1
push 0x4eaf
push 0x1481
push 0x395b
lea eax, [ebp - 0x2cc]
push eax
push 0x7426
push 1
push 0x5d6f
lea eax, [ebp - 0x260]
push eax
push 0xea3
push 0x5bbf
push 0
push 0x2e1b
call fcn.0041c434
add esp, 0x58
push 1
lea ecx, [ebp - 0x7c]
call fcn.0043529d
cmp dword [eax], 0xfffffffb
je 0x42d0f7
mov dword [ebp - 0xcc], 1
jmp 0x42d0fe
and dword [ebp - 0xcc], 0
cmp dword [ebp - 0xcc], 0xffff
je 0x42d116
mov dword [ebp - 0x124], 1
jmp 0x42d11d
and dword [ebp - 0x124], 0
push dword [ebp - 0xc]
lea ecx, [ebp - 0x7c]
call fcn.0043529d
mov esi, eax
push dword [ebp - 0xc]
lea ecx, [ebp - 0x7c]
call fcn.0043529d
mov eax, dword [eax]
add eax, 0xcd7e
mov ecx, dword [esi]
sub ecx, eax
cmp ecx, dword [ebp - 0x124]
jg 0x42d154
mov dword [ebp - 0xd4], 1
jmp 0x42d15b
and dword [ebp - 0xd4], 0
push dword [ebp - 0xc]
lea ecx, [ebp - 0x7c]
call fcn.0043529d
mov ecx, dword [ebp - 0xd4]
cmp ecx, dword [eax]
je 0x42d17c
mov dword [ebp - 0x204], 1
jmp 0x42d183
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 8]
mov dword [ebp - 0x2d4], eax
push 0
lea ecx, [ebp - 0x260]
call fcn.0043529d
cmp dword [eax], 0
je 0x42d1b3
mov eax, 0x7c62
test eax, eax
je 0x42d1b3
mov dword [ebp - 0x10c], 1
jmp 0x42d1ba
and dword [ebp - 0x10c], 0
push dword [ebp - 0xc]
lea ecx, [ebp - 0x7c]
call fcn.0043529d
mov ecx, dword [ebp - 0x10c]
cmp ecx, dword [eax]
jl 0x42d1e1
cmp dword [ebp - 0x234], 0
jne 0x42d1e1
and dword [ebp - 0xdc], 0
jmp 0x42d1eb
mov dword [ebp - 0xdc], 1
push 1
lea ecx, [ebp - 0x7c]
call fcn.0043529d
mov ecx, dword [ebp - 0xdc]
sub ecx, dword [eax]
jne 0x42d20b
mov dword [ebp - 0x134], 1
jmp 0x42d212
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 8]
imul eax, dword [ebp - 0x134]
test eax, eax
jne 0x42d22c
mov dword [ebp - 0xe4], 1
jmp 0x42d233
and dword [ebp - 0xe4], 0
push 1
lea ecx, [ebp - 0x7c]
call fcn.0043529d
mov ecx, dword [ebp - 0xe4]
cmp ecx, dword [eax]
jle 0x42d3be
mov dword [ebp - 0x44], 0
jmp 0x42d25b
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 4
jge 0x42d271
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x300], 0
jmp 0x42d254
cmp dword [ebp - 0xc], 1
jb 0x42d283
mov dword [ebp - 0x84], 1
jmp 0x42d28a
and dword [ebp - 0x84], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x84], eax
jl 0x42d2a4
cmp dword [ebp - 8], 0
jne 0x42d2a4
and dword [ebp - 0x20c], 0
jmp 0x42d2ae
mov dword [ebp - 0x20c], 1
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x2e0], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x300], 1
jne 0x42d2ed
mov eax, 0xd39e
test eax, eax
je 0x42d2ed
mov dword [ebp - 0x88], 1
jmp 0x42d2f4
and dword [ebp - 0x88], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x88], eax
je 0x42d30b
mov dword [ebp - 0x90], 1
jmp 0x42d312
and dword [ebp - 0x90], 0
xor eax, eax
sub eax, dword [ebp - 0x90]
cmp eax, 0xfffffff7
jg 0x42d32b
mov dword [ebp - 0x98], 1
jmp 0x42d332
and dword [ebp - 0x98], 0
push 0
lea ecx, [ebp - 0x260]
call fcn.0043529d
mov ecx, dword [ebp - 0x98]
cmp ecx, dword [eax]
je 0x42d35c
push 0xfffffffffffffff6
pop eax
test eax, eax
je 0x42d35c
mov dword [ebp - 0xa0], 1
jmp 0x42d363
and dword [ebp - 0xa0], 0
mov eax, dword [ebp - 0xa0]
sub eax, dword [ebp - 8]
je 0x42d38a
push dword [ebp - 0xc]
lea ecx, [ebp - 0x7c]
call fcn.0043529d
cmp dword [eax], 0
je 0x42d38a
mov dword [ebp - 0xa8], 1
jmp 0x42d391
and dword [ebp - 0xa8], 0
cmp dword [ebp - 0xa8], 0xaf53c8cb
ja 0x42d3a9
mov dword [ebp - 0xb8], 1
jmp 0x42d3b0
and dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x248], eax
jmp 0x42d437
mov dword [ebp - 0x164], 0x8a1bd053
push 1
push 0x1c60
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0xc]
push eax
push 0x50c5
push 0x657
push 1
lea eax, [ebp - 0x164]
push eax
push 0x3569
push 1
push 0x450a
push 0x7a6a
push 0x7245
push 0
push 0x4905
push 0
lea eax, [ebp - 0x7c]
push eax
push 0x10a3
call fcn.0040eaf3
add esp, 0x48
push 1
push 0x28c7
push 0
push 1
push 0x2b8c
push 0x54fd
call fcn.00423247
add esp, 0x18
lea ecx, [ebp - 0x260]
call fcn.00435281
jmp 0x42d046
push 0x7884
push 0x1353
push 0x1d4a
push 0x6c41
push 0
push 0x7d1
push 0x67d7
push 0x18a0
push 0x247
push 0
push 0
call fcn.0040a224
add esp, 0x2c
lea ecx, [ebp - 0x7c]
call fcn.00435281
jmp 0x42cff0
push 0x5e8a
push 0
push 0x5ef0
push 0x50fd
push 0x784a
lea eax, [ebp - 8]
push eax
push 0x24fa
push 0x57d4
push 0x860
push 0x5513
call fcn.0040f377
add esp, 0x28
mov eax, dword [ebp - 0x18]
cmp dword [eax + 0x10], 0
jne 0x42d855
push 2
lea ecx, [ebp - 0x14c]
call fcn.004351af
mov dword [ebp - 0xc0], 0xfffffffd
mov dword [ebp - 0x4c], 0x6ff2
mov dword [ebp - 0x16c], 0xb16
mov dword [ebp - 0x58], 0
jmp 0x42d505
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x42d521
push dword [ebp - 0x58]
lea ecx, [ebp - 0x14c]
call fcn.0043529d
mov dword [eax], 0x342eb90d
jmp 0x42d4fe
push 0x391
push 0x6c52
push 0x5eb
push 0x181f
push 0x31f9
push 0
push 0x7818
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x14c]
push eax
push 0x4e30
push 1
push 0x1ca8
push 1
push 0
call fcn.00416f36
add esp, 0x38
push 1
lea ecx, [ebp - 0x14c]
call fcn.0043529d
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je 0x42d5cd
push 0x164e
lea eax, [ebp - 0xc0]
push eax
push 0x3917
push 0
push 0
call fcn.0041448c
add esp, 0x14
push 0
push 1
push 0x1b15
push 1
push 0x6915
push 0x4de0
push 0x4d64
push 0x5262
push 0x7de2
call fcn.004242ab
add esp, 0x24
jmp 0x42d650
mov dword [ebp - 0x174], 0xc587c7ab
push 4
lea ecx, [ebp - 0x284]
call fcn.004351af
push 0x523d
lea eax, [ebp - 0x284]
push eax
push 0
lea eax, [ebp - 0x2a4]
push eax
call fcn.00411958
add esp, 0x10
push 0
lea eax, [ebp - 0x4c]
push eax
push 0x46b
lea eax, [ebp - 0x14c]
push eax
call fcn.0041889f
add esp, 0x10
push 0
lea eax, [ebp - 0x16c]
push eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x14c]
push eax
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x284]
push eax
call fcn.0041769a
add esp, 0x18
lea ecx, [ebp - 0x284]
call fcn.00435281
lea ecx, [ebp - 0x14c]
call fcn.00435281
push 0
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x17c]
push eax
call fcn.00418e7e
add esp, 0x14
mov dword [ebp - 0x1c], 0xbf2b2994
push 3
lea ecx, [ebp - 0x278]
call fcn.004351af
mov dword [ebp - 0x18c], 0xf2fe868e
mov dword [ebp - 0x19c], 0xffffffff
push 0x67fb
lea eax, [ebp - 0x278]
push eax
push 0
lea eax, [ebp - 0x2d0]
push eax
call fcn.0041841a
add esp, 0x10
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2ac], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2f0], eax
imul eax, dword [ebp - 0x1c], 0xfffffffd
add eax, dword [ebp - 0x1c]
cmp eax, 0xabc1
jle 0x42d771
mov dword [ebp - 0x1c], 0
jmp 0x42d6f4
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x13
jl 0x42d76c
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x2c], 0xfffffffb
jmp 0x42d711
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xfffffffc
jg 0x42d762
mov byte [ebp - 0x21], 0
push 1
lea eax, [ebp - 0x21]
push eax
push 0
push 0x34b8
push 0
push 0x2b50
push 0x3d02
call fcn.004184a7
add esp, 0x1c
push 0
push 1
push 0x33e7
push 0x7fef
push 0
push 0x3d52
push 1
push 0x181b
call fcn.0040a798
add esp, 0x20
jmp 0x42d70a
cmp dword [ebp - 0x2c], 0
je 0x42d76a
jmp 0x42d76c
jmp 0x42d6ed
jmp 0x42d7f2
push 3
lea ecx, [ebp - 0x26c]
call fcn.004351af
mov dword [ebp - 0x194], 0xdba5
mov dword [ebp - 0x184], 0xffffffff
lea eax, [ebp - 0x2b4]
push eax
push 0
lea eax, [ebp - 0x26c]
push eax
call fcn.004266cb
add esp, 0xc
lea eax, [ebp - 0x26c]
push eax
lea eax, [ebp - 0x184]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0x278]
push eax
push 0x32ff
push 0
lea eax, [ebp - 0x194]
push eax
lea eax, [ebp - 0x19c]
push eax
call fcn.00429c7f
add esp, 0x24
lea ecx, [ebp - 0x26c]
call fcn.00435281
push 1
push 0x2bbb
push 0x5fc5
push 0x16ce
push 0x49fd
push 0x135d
push 0
push 0x2a1c
push 0x3f6b
push 1
push 0x18fe
push 0x7e5f
push 0x2bef
push 1
push 0x67b7
push 1
push 0x2ee0
push 0x5d5f
call fcn.0040eaf3
add esp, 0x48
lea ecx, [ebp - 0x278]
call fcn.00435281
jmp 0x42cfbe
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x64], 0
mov dword [ebp - 0xd0], 0x1720348f
mov dword [ebp - 0xf0], 0xfffffffb
mov dword [ebp - 0x100], 0
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x48], 0
jmp 0x42d89b
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 4
jge 0x42d8b1
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x310], 0x5ea28c7f
jmp 0x42d894
cmp dword [ebp - 0x38], 0
je 0x42d8c3
mov dword [ebp - 0xc8], 1
jmp 0x42d8ca
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0xd0], eax
je 0x42d8ed
mov dword [ebp - 0xd8], 1
jmp 0x42d8f4
and dword [ebp - 0xd8], 0
cmp dword [ebp - 0xd8], 0
je 0x42d90c
cmp dword [ebp - 0x38], 0
jne 0x42d90c
and dword [ebp - 0xe0], 0
jmp 0x42d916
mov dword [ebp - 0xe0], 1
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0xe0]
jne 0x42d92d
mov dword [ebp - 0xe8], 1
jmp 0x42d934
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0
je 0x42d95b
cmp dword [ebp - 0x64], 0
je 0x42d95b
mov dword [ebp - 0xf8], 1
jmp 0x42d962
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0xb7f3
je 0x42d986
mov dword [ebp - 0x108], 1
jmp 0x42d98d
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x108]
lea eax, [eax + ecx - 0xfffe]
cmp eax, dword [ebp - 0x38]
jl 0x42d9ae
mov dword [ebp - 0x110], 1
jmp 0x42d9b5
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x110], eax
jne 0x42d9cc
mov dword [ebp - 0x118], 1
jmp 0x42d9d3
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0xfffffff7
jne 0x42d9f4
mov dword [ebp - 0x128], 1
jmp 0x42d9fb
and dword [ebp - 0x128], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x128]
mov dword [ebp + eax - 0x310], ecx
push 4
push 0x1000
mov eax, dword [ebp - 0x18]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x130]
add ecx, dword [eax + 0xc]
push ecx
push 0x564f
push 0x5bb3
call fcn.00406b3b
pop ecx
pop ecx
call eax
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x18]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1a4]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x6c]
call fcn.0040737d
add esp, 0xc
mov dword [ebp - 0x1ac], 1
mov dword [ebp - 0x2d8], 0x13a473eb
mov dword [ebp - 0x2bc], 0xa9831117
mov dword [ebp - 0x14], 0
jmp 0x42da89
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x42da9f
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x29c], 0x9d568d52
jmp 0x42da82
mov dword [ebp - 0x14], 0
jmp 0x42daaf
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x42dac5
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x290], 0x60693009
jmp 0x42daa8
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x1b4], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x290]
mov dword [ebp - 0x1bc], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x290]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x290], eax
mov eax, dword [ebp - 0x1b4]
cmp eax, dword [ebp - 0x1bc]
je 0x42db16
mov dword [ebp - 0x138], 1
jmp 0x42db1d
and dword [ebp - 0x138], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x138]
mov dword [ebp + eax - 0x29c], ecx
push 0x2193
push 1
push 0
push 0
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x6c]
push eax
push 0x5671
push 1
push 0x64ce
push 0x4011
call fcn.004229c7
add esp, 0x28
jmp 0x42cfbe
jmp 0x42db6b
push 0
call fcn.00418026
pop ecx
pop esi
mov esp, ebp
pop ebp
ret