Function at 0x419e0c
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x304
push esi
push edi
movzx eax, byte [ebp + 0x38]
test eax, eax
je 0x419e64
lea eax, [ebp + 0x14]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x200], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x1f8], eax
mov eax, dword [ebp - 0x158]
movzx eax, byte [eax]
push eax
push dword [ebp - 0x1f8]
push dword [ebp - 0x200]
push 1
push 0x1aae
call fcn.0041b17f
add esp, 0x14
jmp 0x41b179
lea eax, [ebp + 0x10]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp + 0x3c]
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x168], eax
lea eax, [ebp + 0x2c]
mov dword [ebp - 0x208], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x210], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x208]
movzx eax, byte [eax]
test eax, eax
je 0x419f08
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x148], eax
push dword [ebp - 0x1a8]
push 1
push dword [ebp - 0x148]
push 0x55f0
push 0x5b06
call fcn.0040b769
add esp, 0x14
jmp 0x41b179
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x178]
movzx eax, byte [eax]
test eax, eax
je 0x41a247
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x124]
mov eax, dword [eax]
cmp dword [eax], 0
jbe 0x41a242
push 3
lea ecx, [ebp - 0x38]
call fcn.00434f0f
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x1a4], 0x9c90e69c
push 0
lea eax, [ebp - 0x24]
push eax
push 0x524c
push 1
lea eax, [ebp - 0x38]
push eax
push 0x4090
push 1
call fcn.0040f18b
add esp, 0x1c
mov dword [ebp - 0x24], 0
jmp 0x41a011
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x41a027
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x12c], 0xdffbe584
jmp 0x41a00a
push 1
lea ecx, [ebp - 0x38]
call fcn.00434ffd
mov esi, eax
push 1
lea ecx, [ebp - 0x38]
call fcn.00434ffd
mov ecx, dword [esi]
sub ecx, dword [eax]
cmp ecx, 0xb9193c1d
jne 0x41a053
push 0
lea ecx, [ebp - 0x38]
call fcn.00434ffd
push 1
lea ecx, [ebp - 0x38]
call fcn.00434ffd
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
mov esi, dword [ebp - 0x50]
push 1
lea ecx, [ebp - 0x38]
call fcn.00434ffd
mov edi, dword [eax]
sub edi, esi
push 0
lea ecx, [ebp - 0x38]
call fcn.00434ffd
cmp edi, dword [eax]
je 0x41a08d
mov dword [ebp - 0x1e8], 1
jmp 0x41a094
and dword [ebp - 0x1e8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x12c]
mov dword [ebp - 0x27c], eax
push 1
lea ecx, [ebp - 0x38]
call fcn.00434ffd
mov esi, eax
push 1
lea ecx, [ebp - 0x38]
call fcn.00434ffd
mov ecx, dword [esi]
cmp ecx, dword [eax]
jge 0x41a0cf
mov dword [ebp - 0x120], 1
jmp 0x41a0d6
and dword [ebp - 0x120], 0
push 1
lea ecx, [ebp - 0x38]
call fcn.00434ffd
mov ecx, dword [ebp - 0x120]
cmp ecx, dword [eax]
jne 0x41a0f6
mov dword [ebp - 0x1f0], 1
jmp 0x41a0fd
and dword [ebp - 0x1f0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x12c]
mov dword [ebp - 0x298], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x12c]
mov dword [ebp - 0x2a0], eax
mov eax, 0x424b
test eax, eax
je 0x41a13e
cmp dword [ebp - 0x50], 0
je 0x41a13e
mov dword [ebp - 0xa4], 1
jmp 0x41a145
and dword [ebp - 0xa4], 0
push 0
lea ecx, [ebp - 0x38]
call fcn.00434ffd
mov ecx, dword [ebp - 0xa4]
cmp ecx, dword [eax]
je 0x41a162
mov dword [ebp - 0x68], 1
jmp 0x41a166
and dword [ebp - 0x68], 0
mov eax, dword [ebp - 0x68]
add eax, 0x65f
cmp eax, 9
je 0x41a17f
mov dword [ebp - 0x19c], 1
jmp 0x41a186
and dword [ebp - 0x19c], 0
push 1
lea ecx, [ebp - 0x38]
call fcn.00434ffd
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x12c]
cmp dword [eax], ecx
jle 0x41a1ad
mov dword [ebp - 0x1ec], 1
jmp 0x41a1b4
and dword [ebp - 0x1ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x12c]
mov dword [ebp - 0x2b0], eax
push 1
lea ecx, [ebp - 0x38]
call fcn.00434ffd
mov esi, eax
push 1
lea ecx, [ebp - 0x38]
call fcn.00434ffd
mov ecx, dword [esi]
add ecx, dword [eax]
mov dword [ebp - 0x1a4], ecx
lea ecx, [ebp - 0x38]
call fcn.00434fe1
push 1
push 0x637e
push dword [ebp - 0x214]
push 0x18b9
push 1
push dword [ebp - 0x1ac]
push 0x2ceb
push 0x708a
push 0
push 0x20ed
push 1
push 0x1d82
push 0x1dae
push 1
push 0x59d9
push dword [ebp - 0x124]
push 1
call fcn.0041f2be
add esp, 0x44
jmp 0x419fb5
jmp 0x41b179
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x1c4], 0x4fd3df75
mov dword [ebp - 0x1fc], 0xffffffff
mov dword [ebp - 0x1bc], 0xf1d6
mov dword [ebp - 0x224], 0xfffffffd
lea eax, [ebp - 0x1bc]
push eax
push 1
push 0x3698
push 1
lea eax, [ebp - 0x1fc]
push eax
push 0x64bd
lea eax, [ebp - 0x1c4]
push eax
push 0
lea eax, [ebp - 0x224]
push eax
push 0x3a94
push 1
push 0
push 0x7985
push 0x2595
call fcn.0040997a
add esp, 0x38
mov eax, dword [ebp - 0x48]
mov eax, dword [eax + 4]
mov dword [ebp - 0x110], eax
push 0x1dfd
push 1
push 0x45e9
push 1
push 0x2a5b
push 0x60b8
push 0x4ceb
push 0x1c0a
push 0x1c11
push 0x2cae
push 0x1655
push 0
call fcn.00409710
add esp, 0x30
mov dword [ebp - 0xc], 0x9b55bb2c
push 1
lea ecx, [ebp - 0x260]
call fcn.00434f0f
mov dword [ebp - 0x80], 0x21c3a23f
lea eax, [ebp - 0x260]
push eax
push 0
push 0x548b
lea eax, [ebp - 0x280]
push eax
push 0x7f5b
call fcn.0042d25d
add esp, 0x14
mov dword [ebp - 0xc], 0xffffffff
jmp 0x41a36b
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x15
jl 0x41a46d
mov dword [ebp - 0x44], 0xa2282d56
mov dword [ebp - 0x1cc], 9
cmp dword [ebp - 0x44], 0
je 0x41a3f7
imul eax, dword [ebp - 0xc], 0xf88d
test eax, eax
jne 0x41a3a3
cmp dword [ebp - 0x44], 0
jne 0x41a3a3
and dword [ebp - 0x70], 0
jmp 0x41a3aa
mov dword [ebp - 0x70], 1
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x70], eax
jle 0x41a3c4
cmp dword [ebp - 0x44], 0
je 0x41a3c4
mov dword [ebp - 0xd4], 1
jmp 0x41a3cb
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0xd4], eax
je 0x41a3df
mov dword [ebp - 0x78], 1
jmp 0x41a3e3
and dword [ebp - 0x78], 0
push 4
pop eax
sub eax, dword [ebp - 0x78]
je 0x41a3f7
mov dword [ebp - 0x104], 1
jmp 0x41a3fe
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x104]
cmp eax, dword [ebp - 0x44]
jle 0x41a418
mov dword [ebp - 0xdc], 1
jmp 0x41a41f
and dword [ebp - 0xdc], 0
push 0
lea ecx, [ebp - 0x260]
call fcn.00434ffd
mov dword [eax], 5
mov dword [ebp - 0x80], 5
mov eax, dword [ebp - 0x80]
neg eax
add eax, dword [ebp - 0xdc]
cmp eax, dword [ebp - 0xc]
jle 0x41a455
mov dword [ebp - 0x88], 1
jmp 0x41a45c
and dword [ebp - 0x88], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x1cc], eax
jmp 0x41a364
lea ecx, [ebp - 0x260]
call fcn.00434fe1
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x10], eax
mov dword [ebp - 8], 0
mov dword [ebp - 0x7c], 0x85efbe72
mov dword [ebp - 0x284], 0xcadfd6f6
push 4
lea ecx, [ebp - 0x2dc]
call fcn.00434f0f
push 2
lea ecx, [ebp - 0x2cc]
call fcn.00434f0f
mov dword [ebp - 0x28c], 0xce9e
mov dword [ebp - 0x294], 0x1663
mov dword [ebp - 0x29c], 0xffffffff
mov dword [ebp - 0x2f4], 0x302a6f41
mov dword [ebp - 0x1e4], 0
lea eax, [ebp - 0x2dc]
push eax
push 0x57ef
push 0x36aa
push 1
push 0x7514
push 0
push 0
lea eax, [ebp - 0x204]
push eax
push 0x818
push 0x3e76
call fcn.0040e47e
add esp, 0x28
push 0
push 0x2940
push 0x824
push 0xa34
lea eax, [ebp - 0x204]
push eax
push 1
push 0x6749
push 0x6fb4
push 0
lea eax, [ebp - 0x2cc]
push eax
push 0x17a3
call fcn.0040a0fb
add esp, 0x2c
mov eax, dword [ebp - 8]
mov dword [ebp - 0x2d0], eax
mov eax, 0xfff9
cmp eax, 0xffffffff
jae 0x41a57f
mov dword [ebp - 0x11c], 1
jmp 0x41a586
and dword [ebp - 0x11c], 0
cmp dword [ebp - 0x11c], 8
jge 0x41a59b
mov dword [ebp - 0x90], 1
jmp 0x41a5a2
and dword [ebp - 0x90], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x90], eax
jg 0x41a5b9
mov dword [ebp - 0xe4], 1
jmp 0x41a5c0
and dword [ebp - 0xe4], 0
cmp dword [ebp - 0xe4], 0xfffe
jbe 0x41a5d8
mov dword [ebp - 0x98], 1
jmp 0x41a5df
and dword [ebp - 0x98], 0
mov eax, dword [ebp - 8]
mov eax, 0xbf0b
cmp eax, 0x6f3f
jle 0x41a5fa
mov dword [ebp - 0x10c], 1
jmp 0x41a601
and dword [ebp - 0x10c], 0
cmp dword [ebp - 0x10c], 0x860b
jle 0x41a616
mov dword [ebp - 0x60], 1
jmp 0x41a61a
and dword [ebp - 0x60], 0
mov eax, dword [ebp - 0x60]
sub eax, dword [ebp - 8]
je 0x41a98e
mov dword [ebp - 0x20], 0x924f63ab
or dword [ebp - 0x240], 0xffffffff
or dword [ebp - 0x23c], 0xffffffff
or dword [ebp - 0x238], 0xffffffff
or dword [ebp - 0x234], 0xffffffff
lea ecx, [ebp - 0x59]
call fcn.0043500c
push eax
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x240]
push eax
lea ecx, [ebp - 0x2fc]
call fcn.0043500f
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2bc]
call fcn.00434fbb
mov dword [ebp - 8], 0
jmp 0x41a68b
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0x15
je 0x41a981
push 2
lea ecx, [ebp - 0x220]
call fcn.00434f0f
mov dword [ebp - 0x22c], 0xfffffff7
mov dword [ebp - 0x64], 0xfffffffb
mov dword [ebp - 0x114], 0x7c525ac8
lea eax, [ebp - 0x28]
push eax
push 0
lea eax, [ebp - 0x220]
push eax
push 0
push 0x557
call fcn.00417f3e
add esp, 0x14
mov dword [ebp - 0x28], 0
jmp 0x41a6e9
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x41a6ff
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x2ac], 1
jmp 0x41a6e2
cmp dword [ebp - 0x20], 0
je 0x41a813
or eax, 0xffffffff
je 0x41a72c
push 0
lea ecx, [ebp - 0x220]
call fcn.00434ffd
cmp dword [eax], 0
je 0x41a72c
mov dword [ebp - 0xa0], 1
jmp 0x41a733
and dword [ebp - 0xa0], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0xa0], eax
jne 0x41a74a
mov dword [ebp - 0xec], 1
jmp 0x41a751
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0xec], eax
jge 0x41a768
mov dword [ebp - 0xac], 1
jmp 0x41a76f
and dword [ebp - 0xac], 0
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0xac]
jne 0x41a78c
mov eax, 0xdbefc712
test eax, eax
jne 0x41a78c
and dword [ebp - 0x1d4], 0
jmp 0x41a796
mov dword [ebp - 0x1d4], 1
push 0
lea ecx, [ebp - 0x220]
call fcn.00434ffd
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2ac]
cmp dword [ebp - 8], eax
jg 0x41a7c7
cmp dword [ebp - 0x22c], 0
jne 0x41a7c7
and dword [ebp - 0x130], 0
jmp 0x41a7d1
mov dword [ebp - 0x130], 1
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x130], eax
jg 0x41a7e8
mov dword [ebp - 0xb4], 1
jmp 0x41a7ef
and dword [ebp - 0xb4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb4]
sub ecx, dword [ebp + eax - 0x2ac]
cmp ecx, dword [ebp - 8]
je 0x41a813
mov dword [ebp - 0xf4], 1
jmp 0x41a81a
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0xf4]
imul eax, eax, 0x6a83
test eax, eax
jne 0x41a83c
cmp dword [ebp - 0x20], 0
jne 0x41a83c
and dword [ebp - 0xbc], 0
jmp 0x41a846
mov dword [ebp - 0xbc], 1
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x114], eax
jge 0x41a869
mov dword [ebp - 0xc4], 1
jmp 0x41a870
and dword [ebp - 0xc4], 0
push 0
lea ecx, [ebp - 0x220]
call fcn.00434ffd
mov eax, dword [eax]
add eax, dword [ebp - 0xc4]
imul eax, eax, 0x2c75
test eax, eax
jne 0x41a8a1
mov eax, 0xffff
test eax, eax
jne 0x41a8a1
and dword [ebp - 0xfc], 0
jmp 0x41a8ab
mov dword [ebp - 0xfc], 1
mov eax, dword [ebp - 0xfc]
inc eax
jne 0x41a8c7
xor eax, eax
inc eax
jne 0x41a8c7
xor eax, eax
inc eax
jne 0x41a8c7
and dword [ebp - 0x1dc], 0
jmp 0x41a8d1
mov dword [ebp - 0x1dc], 1
mov eax, dword [ebp - 8]
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 8], 1
jge 0x41a8ec
mov dword [ebp - 0xcc], 1
jmp 0x41a8f3
and dword [ebp - 0xcc], 0
cmp dword [ebp - 0xcc], 0
jne 0x41a908
cmp dword [ebp - 0x20], 0
jne 0x41a908
and dword [ebp - 0x6c], 0
jmp 0x41a90f
mov dword [ebp - 0x6c], 1
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x6c], eax
je 0x41a920
mov dword [ebp - 0x74], 1
jmp 0x41a924
and dword [ebp - 0x74], 0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x7c], eax
push 0x4fcd
push 0x7d5f
push 0x5a64
push 0xcd8
push 0x455b
push 0x415e
push 0
push 0
push 0x6186
push 0
push 0x4880
lea eax, [ebp - 0x2bc]
push eax
push 0x9ef
push 0x500c
call fcn.0042772b
add esp, 0x38
lea ecx, [ebp - 0x220]
call fcn.00434fe1
jmp 0x41a684
lea ecx, [ebp - 0x2bc]
call fcn.00434fe1
jmp 0x41a9d8
mov dword [ebp - 0x20c], 0xf2fe
push 0
lea eax, [ebp - 0x7c]
push eax
push 0
push 0x3bdc
push 0xbfb
push 1
push 0
push 0x60f5
push 0x649
push 0x6b54
push 1
push 0x47c3
push 0x7991
lea eax, [ebp - 0x20c]
push eax
call fcn.00414638
add esp, 0x38
lea eax, [ebp - 0x1e4]
push eax
push 0
call fcn.0040cdb1
pop ecx
pop ecx
lea ecx, [ebp - 0x2cc]
call fcn.00434fe1
lea ecx, [ebp - 0x2dc]
call fcn.00434fe1
and dword [ebp - 0x54], 0
jmp 0x41aa14
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x10]
add eax, 0x28
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x54], eax
jge 0x41b179
push 1
lea ecx, [ebp - 0x144]
call fcn.00434f0f
push 3
lea ecx, [ebp - 0x278]
call fcn.00434f0f
mov dword [ebp - 0x1a0], 0x93dd61fb
push 0x6aa1
push 0
lea eax, [ebp - 0x194]
push eax
push 0x5822
lea eax, [ebp - 0x144]
push eax
push 0x58a
push 0x3bd5
call fcn.00420ee1
add esp, 0x1c
push 0x315f
push 1
push 0x3809
push 0
lea eax, [ebp - 0x194]
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.0040b0a3
add esp, 0x18
push 0
lea ecx, [ebp - 0x144]
call fcn.00434ffd
and dword [eax], 0
jmp 0x41aad0
push 0
lea ecx, [ebp - 0x144]
call fcn.00434ffd
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x84]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x144]
call fcn.00434ffd
cmp dword [eax], 0x1a
jl 0x41ab92
mov dword [ebp - 0x8c], 0xffff
mov dword [ebp - 0x14c], 8
mov dword [ebp - 0x198], 4
push 0x61b8
lea eax, [ebp - 0x8c]
push eax
push 0xb63
push 0x6094
push 0x69eb
push 0x5ccf
lea eax, [ebp - 0x198]
push eax
push 0x4127
lea eax, [ebp - 0x144]
push eax
push 0
lea eax, [ebp - 0x1a0]
push eax
push 0x30d2
push 0x17c
lea eax, [ebp - 0x14c]
push eax
push 1
lea eax, [ebp - 0x278]
push eax
push 0x768d
push 0x3984
push 0x5953
push 0x475b
push 0x2f47
push 1
push 0x4329
call fcn.00408642
add esp, 0x5c
cmp dword [ebp - 0x8c], 0
je 0x41ab8d
jmp 0x41ab92
jmp 0x41aaac
lea ecx, [ebp - 0x278]
call fcn.00434fe1
lea ecx, [ebp - 0x144]
call fcn.00434fe1
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0x10], 0
jne 0x41afae
mov dword [ebp - 4], 0
mov dword [ebp - 0x2c], 0x9bca7b5c
mov dword [ebp - 0x18], 0xf403
mov dword [ebp - 0x14], 0xfa8f
mov dword [ebp - 0x4c], 6
mov dword [ebp - 0xf8], 0x8e10b09e
mov dword [ebp - 0x174], 0xf28f0e43
mov dword [ebp - 0x108], 0x5104f36c
cmp dword [ebp - 4], 0
jne 0x41ace7
cmp dword [ebp - 4], 0
jne 0x41acc9
cmp dword [ebp - 4], 0
je 0x41ac22
cmp dword [ebp - 4], 0
je 0x41ac22
mov dword [ebp - 0x94], 1
jmp 0x41ac29
and dword [ebp - 0x94], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x94], eax
jge 0x41ac40
mov dword [ebp - 0x9c], 1
jmp 0x41ac47
and dword [ebp - 0x9c], 0
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x9c]
jle 0x41ac5e
mov dword [ebp - 0xa8], 1
jmp 0x41ac65
and dword [ebp - 0xa8], 0
mov eax, 0xb65720b9
sub eax, dword [ebp - 0xa8]
jne 0x41ac78
cmp dword [ebp - 4], 0
je 0x41ac89
xor eax, eax
inc eax
je 0x41ac89
mov dword [ebp - 0xb0], 1
jmp 0x41ac90
and dword [ebp - 0xb0], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0xb0], eax
jge 0x41aca7
mov dword [ebp - 0xb8], 1
jmp 0x41acae
and dword [ebp - 0xb8], 0
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0xb8]
imul eax, dword [ebp - 4]
test eax, eax
jne 0x41acc9
and dword [ebp - 0xc0], 0
jmp 0x41acd3
mov dword [ebp - 0xc0], 1
mov eax, dword [ebp - 0xc0]
add eax, 3
jne 0x41ace7
and dword [ebp - 0xc8], 0
jmp 0x41acf1
mov dword [ebp - 0xc8], 1
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x2c], eax
jne 0x41ad0e
mov dword [ebp - 0xd0], 1
jmp 0x41ad15
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xb42b
jg 0x41ad74
mov dword [ebp - 0x15c], 0xffffffff
mov dword [ebp - 0x154], 0x550e3526
push 1
lea eax, [ebp - 0x14]
push eax
push 0x214b
lea eax, [ebp - 0x18]
push eax
push 0x148c
push 1
lea eax, [ebp - 0x154]
push eax
lea eax, [ebp - 0x15c]
push eax
push 0
push 0x3794
lea eax, [ebp - 0x2c]
push eax
call fcn.0040a0fb
add esp, 0x2c
jmp 0x41aded
push 2
lea ecx, [ebp - 0x26c]
call fcn.00434f0f
mov dword [ebp - 0x164], 0x98564dbb
mov dword [ebp - 0x3c], 0
jmp 0x41ad9b
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x41adb4
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x26c]
call fcn.00434ffd
and dword [eax], 0
jmp 0x41ad94
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x14]
push eax
push 0x30f2
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0x26c]
push eax
push 0x6227
lea eax, [ebp - 0x18]
push eax
push 0
call fcn.00422a63
add esp, 0x20
lea ecx, [ebp - 0x26c]
call fcn.00434fe1
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x288], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jge 0x41ae0a
mov dword [ebp - 0xd8], 1
jmp 0x41ae11
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0xd8]
cmp eax, dword [ebp - 0x4c]
je 0x41ae2c
mov dword [ebp - 0xe0], 1
jmp 0x41ae33
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0xe0], eax
jle 0x41ae4d
cmp dword [ebp - 0x4c], 0
jne 0x41ae4d
and dword [ebp - 0x16c], 0
jmp 0x41ae57
mov dword [ebp - 0x16c], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jge 0x41ae6b
mov dword [ebp - 0xe8], 1
jmp 0x41ae72
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0xe8], eax
jne 0x41ae93
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x41ae93
cmp dword [ebp - 4], 0
je 0x41ae93
and dword [ebp - 0xf0], 0
jmp 0x41ae9d
mov dword [ebp - 0xf0], 1
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x2c0], eax
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x14], 0
je 0x41aee2
cmp dword [ebp - 4], 0
je 0x41aee2
mov dword [ebp - 0x100], 1
jmp 0x41aee9
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x2c], eax
jge 0x41af47
push 0x6eeb
push 1
push 0x6030
push 1
push 0x665a
push 0x1473
push 0x745a
push 1
push 0x5f9e
push 0x5837
push 0
push 1
push 0x10d2
push 0x71e2
call fcn.0040997a
add esp, 0x38
jmp 0x41af4f
push 0
call fcn.00419bee
pop ecx
push 0x7b7d
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x17c]
push eax
push 0
lea eax, [ebp - 0x10]
push eax
push 0
push 0
push 0x54cd
push 0x6e1b
lea eax, [ebp - 0x58]
push eax
call fcn.0040e47e
add esp, 0x28
push 0
push 0
push 0x3934
push 0x70e6
push 0x31fa
push 0x56eb
push 0
push 0x67d0
call fcn.00423b4d
add esp, 0x20
jmp 0x41aa04
push 0
push 0x12e4
push 0x7a3
push 1
push 0x40c
call fcn.0040aee5
add esp, 0x14
push 4
push 0x1000
mov eax, dword [ebp - 0x10]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x110]
add ecx, dword [eax + 0xc]
push ecx
push 0x51e6
push 0x6371
call fcn.00406e84
pop ecx
pop ecx
call eax
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x10]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x184]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x58]
call fcn.004079ee
add esp, 0xc
and dword [ebp - 0x254], 0
and dword [ebp - 0x250], 0
and dword [ebp - 0x24c], 0
and dword [ebp - 0x248], 0
lea ecx, [ebp - 0x5a]
call fcn.0043500c
push eax
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x254]
push eax
lea ecx, [ebp - 0x304]
call fcn.0043500f
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2ec]
call fcn.00434fbb
mov dword [ebp - 0x40], 0
jmp 0x41b075
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x41b08b
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x138], 0xfffffff6
jmp 0x41b06e
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x138], 0
jmp 0x41b0b9
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x138]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x138], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x138], 3
jg 0x41b152
mov dword [ebp - 0x18c], 0
mov byte [ebp - 0x19], 0
push 0x23a
push 0x7778
lea eax, [ebp - 0x19]
push eax
push 0x1171
push 0
push 0x6750
push 0
push 0x7e41
push 0x5af7
push 0x6ff0
call fcn.004101e4
add esp, 0x28
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x138]
lea ecx, [ebp - 0x2ec]
call fcn.00434ffd
cmp dword [eax], 0x8cb4c23a
jae 0x41b13a
mov dword [ebp - 0x118], 1
jmp 0x41b141
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x18c], eax
jmp 0x41b09e
lea ecx, [ebp - 0x2ec]
call fcn.00434fe1
push 0
push 0x1dcd
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.0040bc03
add esp, 0x10
jmp 0x41aa04
pop edi
pop esi
mov esp, ebp
pop ebp
ret