Function at 0x427fd4
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x260
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x429201
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x168], eax
lea eax, [ebp + 0x10]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x170], eax
lea eax, [ebp + 8]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x188]
movzx eax, byte [eax]
test eax, eax
je 0x42806d
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x1bc], eax
push 1
push 0x7246
push dword [ebp - 0x1bc]
push dword [ebp - 0x160]
call fcn.00429248
add esp, 0x10
jmp 0x4291ff
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x198]
movzx eax, byte [eax]
test eax, eax
je 0x4280b7
push 0
call dword [0xaae0c4]
jmp 0x4291ff
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x154], 3
mov dword [ebp - 0x150], 3
mov dword [ebp - 0x14c], 3
mov dword [ebp - 0x148], 3
mov dword [ebp - 0x5c], 7
mov dword [ebp - 0x184], 0xaeb382e5
mov dword [ebp - 0x54], 0
jmp 0x428121
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x428137
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x260], 0x34caa8e5
jmp 0x42811a
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x154], 0
jne 0x42819c
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x154]
mov dword [ebp - 0x228], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x154], 1
je 0x428173
mov dword [ebp - 0xd0], 1
jmp 0x42817a
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x5c], eax
mov eax, 0xfffa
imul eax, eax, 0xa062
cmp eax, dword [ebp - 0x5c]
jg 0x42819c
and dword [ebp - 0xf4], 0
jmp 0x4281a6
mov dword [ebp - 0xf4], 1
mov eax, dword [ebp - 0xf4]
sub eax, 0xa05ce79
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x154]
jg 0x4281cb
mov dword [ebp - 0x138], 1
jmp 0x4281d2
and dword [ebp - 0x138], 0
cmp dword [ebp - 0x138], 1
je 0x4281e7
mov dword [ebp - 0x9c], 1
jmp 0x4281ee
and dword [ebp - 0x9c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x260]
cmp dword [ebp - 0x9c], eax
jg 0x428212
cmp dword [ebp - 0x5c], 0
jne 0x428212
and dword [ebp - 0xec], 0
jmp 0x42821c
mov dword [ebp - 0xec], 1
mov eax, dword [ebp - 0xec]
neg eax
mov dword [ebp - 0xa4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xa4]
mov dword [ebp + eax - 0x154], ecx
cmp dword [ebp - 0xa4], 0xffffffff
je 0x428252
mov dword [ebp - 0xf0], 1
jmp 0x428259
and dword [ebp - 0xf0], 0
cmp dword [ebp - 0xf0], 0xfffffffd
je 0x42826e
mov dword [ebp - 0xac], 1
jmp 0x428275
and dword [ebp - 0xac], 0
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x184], eax
push 0x2d32
push 0
push 0x4dcf
push 1
push 1
push 1
push 0x68b2
call fcn.00427d2c
add esp, 0x1c
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 4]
mov dword [ebp - 0xf8], eax
push 0x6895
push 1
push 0
push 0x4412
call fcn.0041d656
add esp, 0x10
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x30]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], 0x8a61928c
mov dword [ebp - 0x58], 0
jmp 0x4282ee
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x428304
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x244], 0x193e0566
jmp 0x4282e7
mov dword [ebp - 0xc], 0
jmp 0x428314
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x19
jne 0x4283e0
mov dword [ebp - 0x3c], 0xaa9ac70c
mov dword [ebp - 0x3c], 0xffffffe2
jmp 0x428335
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x17
jl 0x4283db
mov dword [ebp - 0x4c], 0x49f845d8
mov dword [ebp - 0x4c], 0xfffffff7
jmp 0x428356
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xffffffe5
jle 0x4283d6
mov dword [ebp - 0x1c8], 0xabfc3938
push 0x6fb
push 0
push 1
push 0x2d35
push 0
call fcn.0041a73c
add esp, 0x14
push 0x3bb4
push 0x13d
lea eax, [ebp - 0x1c8]
push eax
push 0
push 0x1b0c
push 0
push 0x338c
push 0x7624
push 1
push 0x5a8
push 0x3748
push 0x2ed2
push 1
push 0x1023
push 0xc3
push 0x2330
push 0x225a
call fcn.0040ddb1
add esp, 0x44
jmp 0x42834f
jmp 0x42832e
jmp 0x42830d
mov dword [ebp - 0xc], 0
jmp 0x4283f0
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 2
jge 0x428406
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x244], 0xffffffff
jmp 0x4283e9
and dword [ebp - 0x80], 0
jmp 0x42841c
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 8]
add eax, 0x28
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x80], eax
jge 0x4291ff
mov dword [ebp - 0x18c], 0xfffffffd
push 2
lea ecx, [ebp - 0x218]
call fcn.00434b93
push 0x1faa
push 0x4976
push 0
push 0xce3
push 1
lea eax, [ebp - 0x218]
push eax
push 0x66f0
push 0
push 0x2c1a
push 1
lea eax, [ebp - 0x238]
push eax
push 0x732a
call fcn.004090f1
add esp, 0x30
push 1
push 0x3b4a
lea eax, [ebp - 0x218]
push eax
push 0
lea eax, [ebp - 0x18c]
push eax
call fcn.0041bcc5
add esp, 0x14
mov byte [ebp - 0x19], 0
push 1
push 0x797a
push 0
push 0x76c9
push 0
push 0x49d5
lea eax, [ebp - 0x19]
push eax
push 1
push 0x7060
call fcn.00408236
add esp, 0x24
lea ecx, [ebp - 0x218]
call fcn.00434c65
mov eax, dword [ebp - 8]
cmp dword [eax + 0x10], 0
jne 0x428e07
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x20], 0xa
jmp 0x4284fb
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffff
jl 0x4287a9
push 1
lea ecx, [ebp - 0x1ec]
call fcn.00434b93
push 3
lea ecx, [ebp - 0x144]
call fcn.00434b93
mov dword [ebp - 0x19c], 0xd93ba6ae
mov dword [ebp - 0x28], 1
push 0x5ddb
push 0
push 0x7cb4
push 1
push 0x3c5b
push 0
push 0
push 0x59e7
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x1ec]
push eax
push 0x2cbb
push 0x336e
call fcn.00429bc1
add esp, 0x30
push 0x2b29
push 0x3b91
push 1
push 0x766a
push 0x7c65
lea eax, [ebp - 0x1c0]
push eax
push 1
push 0
push 0x4f73
push 1
lea eax, [ebp - 0x144]
push eax
call fcn.004274c9
add esp, 0x2c
push 2
lea ecx, [ebp - 0x144]
call fcn.00434c81
and dword [eax], 0
jmp 0x4285d9
push 2
lea ecx, [ebp - 0x144]
call fcn.00434c81
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x134]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x134]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x144]
call fcn.00434c81
cmp dword [eax], 0
jg 0x42878e
mov dword [ebp - 0x44], 0
jmp 0x4285ff
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x428615
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x200], 1
jmp 0x4285f8
cmp dword [ebp - 0x20], 0
jne 0x42862d
mov eax, 0xf0a9
test eax, eax
jne 0x42862d
and dword [ebp - 0xb4], 0
jmp 0x428637
mov dword [ebp - 0xb4], 1
cmp dword [ebp - 0xb4], 0xfa1e
jge 0x42864f
mov dword [ebp - 0xfc], 1
jmp 0x428656
and dword [ebp - 0xfc], 0
push 2
lea ecx, [ebp - 0x144]
call fcn.00434c81
push dword [eax]
lea ecx, [ebp - 0x1ec]
call fcn.00434c81
mov ecx, dword [ebp - 0xfc]
cmp ecx, dword [eax]
jle 0x428686
mov dword [ebp - 0x194], 1
jmp 0x42868d
and dword [ebp - 0x194], 0
push 2
lea ecx, [ebp - 0x144]
call fcn.00434c81
push dword [eax]
lea ecx, [ebp - 0x1ec]
call fcn.00434c81
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x200]
mov dword [ebp - 0x254], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x200], 0
jl 0x4286d6
mov dword [ebp - 0x1d0], 1
jmp 0x4286dd
and dword [ebp - 0x1d0], 0
cmp dword [ebp - 0x20], 0xdab551fa
jbe 0x4286f2
mov dword [ebp - 0xbc], 1
jmp 0x4286f9
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0xbc], eax
jg 0x428713
mov dword [ebp - 0x11c], 1
jmp 0x42871a
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x28], 1
jmp 0x428733
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x428789
mov dword [ebp - 0x1b4], 0xfffffff7
push 0x52bd
push 0
push 0x5b78
push 0x60cd
push 0x59f9
push 0x599a
push 0x380f
push 0x5945
push 1
lea eax, [ebp - 0x1b4]
push eax
push 0
push 0
push 0x3e0f
push 0x3a64
call fcn.00409494
add esp, 0x38
jmp 0x42872c
jmp 0x4285b5
lea ecx, [ebp - 0x144]
call fcn.00434c65
lea ecx, [ebp - 0x1ec]
call fcn.00434c65
jmp 0x4284f4
push 0x5592
push 1
push 0x50d1
push 0x564d
push 0x2fcf
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x1a4]
push eax
push 1
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0x7c]
push eax
push 1
push 0
call fcn.0040e1cc
add esp, 0x30
mov dword [ebp - 0x78], 0xd06c
push 3
lea ecx, [ebp - 0x8c]
call fcn.00434b93
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x38], 0x38425739
mov dword [ebp - 0x34], 0xb47e
mov dword [ebp - 0x124], 0x8a1bab0
mov dword [ebp - 0x1b0], 0xc74bf7a8
mov dword [ebp - 0x60], 0xfffffff8
mov dword [ebp - 0x1c4], 0x7201
push 0
push 0x7612
push 0x130a
push 1
push 0
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 4]
push eax
push 0x6677
push 1
push 1
push 0x2978
push 0x467e
call fcn.0041fc67
add esp, 0x30
mov dword [ebp - 4], 0
jmp 0x428877
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 1
jge 0x42888a
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x70], 0xe56e31bb
jmp 0x428870
mov dword [ebp - 4], 0
jmp 0x42889a
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 1
jge 0x4288ad
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x64], 0x18264d92
jmp 0x428893
push 0x500e
push 0x6248
lea eax, [ebp - 0x78]
push eax
push 0x3685
push 0x252f
push 0x76da
push 0
push 1
push 0x1446
push 0
push 1
push 0x2b67
lea eax, [ebp - 0x8c]
push eax
push 1
call fcn.0042ef8c
add esp, 0x38
mov eax, 0x82a1
test eax, eax
je 0x428abf
push 0
lea ecx, [ebp - 0x8c]
call fcn.00434c81
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x234], eax
push 0
lea ecx, [ebp - 0x8c]
call fcn.00434c81
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x40], 0x3d2a
jne 0x428941
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x34], eax
jne 0x428952
mov dword [ebp - 0x68], 1
jmp 0x428956
and dword [ebp - 0x68], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x68]
mov dword [ebp + eax - 0x70], ecx
cmp dword [ebp - 0x68], 0xe6b6
jge 0x428978
mov dword [ebp - 0xc4], 1
jmp 0x42897f
and dword [ebp - 0xc4], 0
push 1
lea ecx, [ebp - 0x8c]
call fcn.00434c81
mov ecx, dword [ebp - 0xc4]
cmp ecx, dword [eax]
jle 0x4289a2
mov dword [ebp - 0x104], 1
jmp 0x4289a9
and dword [ebp - 0x104], 0
cmp dword [ebp - 0x104], 0x5924
je 0x4289c1
mov dword [ebp - 0xcc], 1
jmp 0x4289c8
and dword [ebp - 0xcc], 0
push 0
lea ecx, [ebp - 0x8c]
call fcn.00434c81
mov eax, dword [eax]
cmp eax, dword [ebp - 0xcc]
jge 0x4289e3
cmp dword [ebp - 0x38], 0
imul eax, dword [ebp - 0x78], 0xfffa
test eax, eax
jne 0x4289f5
cmp dword [ebp - 0x124], 0
cmp dword [ebp - 0x1b0], 0xfffffffd
je 0x428a0f
xor eax, eax
inc eax
je 0x428a0f
mov dword [ebp - 0x12c], 1
jmp 0x428a16
and dword [ebp - 0x12c], 0
cmp dword [ebp - 0x12c], 0x8236511f
jbe 0x428a2e
mov dword [ebp - 0xd4], 1
jmp 0x428a35
and dword [ebp - 0xd4], 0
cmp dword [ebp - 0xd4], 0x71c25028
jle 0x428a4d
mov dword [ebp - 0x10c], 1
jmp 0x428a54
and dword [ebp - 0x10c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
cmp dword [ebp - 0x10c], eax
jl 0x428a72
mov dword [ebp - 0x1ac], 1
jmp 0x428a79
and dword [ebp - 0x1ac], 0
push 0
lea ecx, [ebp - 0x8c]
call fcn.00434c81
xor eax, eax
inc eax
jne 0x428aa0
cmp dword [ebp - 0x38], 0
jne 0x428aa0
cmp dword [ebp - 0x38], 0
jne 0x428aa0
and dword [ebp - 0xdc], 0
jmp 0x428aaa
mov dword [ebp - 0xdc], 1
cmp dword [ebp - 0xdc], 0xffffffff
jg 0x428abf
mov dword [ebp - 0xe4], 1
jmp 0x428ac6
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0x124]
imul eax, dword [ebp - 0xe4]
test eax, eax
je 0x428b0a
push 0xfc0
push 0x51a3
push 0x333e
push 1
push 0
push 1
push 0x3d2b
push 0x59b4
push 1
push 0xe38
call fcn.0040891c
add esp, 0x28
jmp 0x428df7
mov dword [ebp - 0xd8], 0x332e525b
mov dword [ebp - 0x23c], 0xfffffffe
push 2
lea ecx, [ebp - 0x20c]
call fcn.00434b93
push 3
lea ecx, [ebp - 0x1f8]
call fcn.00434b93
mov dword [ebp - 0xe8], 0x1552d49a
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x48], 0x8b5db27c
mov dword [ebp - 0x2c], 0
jmp 0x428b63
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x428b7f
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x20c]
call fcn.00434c81
mov dword [eax], 2
jmp 0x428b5c
lea eax, [ebp - 0x1f8]
push eax
push 0
push 1
push 1
push 0x79a1
push 0x64f1
push 0x3c94
lea eax, [ebp - 0x2c]
push eax
call fcn.0041584b
add esp, 0x20
mov eax, 0x8e6
test eax, eax
je 0x428ca0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x70]
mov dword [ebp - 0x22c], eax
push 4
pop eax
imul eax, eax, 0
xor ecx, ecx
inc ecx
sub ecx, dword [ebp + eax - 0x70]
cmp dword [ebp - 0x38], ecx
jge 0x428be2
mov dword [ebp - 0x114], 1
jmp 0x428be9
and dword [ebp - 0x114], 0
push 1
lea ecx, [ebp - 0x20c]
call fcn.00434c81
mov ecx, dword [ebp - 0x114]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1c4]
cmp dword [ebp - 0x60], eax
jg 0x428c15
mov dword [ebp - 0x94], 1
jmp 0x428c1c
and dword [ebp - 0x94], 0
push 0
lea ecx, [ebp - 0x8c]
call fcn.00434c81
mov ecx, dword [ebp - 0x94]
add ecx, dword [eax]
cmp ecx, 0xe84f5495
ja 0x428c45
mov dword [ebp - 0x98], 1
jmp 0x428c4c
and dword [ebp - 0x98], 0
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x98]
jg 0x428c63
mov dword [ebp - 0xa0], 1
jmp 0x428c6a
and dword [ebp - 0xa0], 0
cmp dword [ebp - 0xa0], 1
je 0x428c7f
mov dword [ebp - 0xa8], 1
jmp 0x428c86
and dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0xa8], eax
jge 0x428ca0
mov dword [ebp - 0xb0], 1
jmp 0x428ca7
and dword [ebp - 0xb0], 0
push 0
lea ecx, [ebp - 0x1f8]
call fcn.00434c81
mov ecx, dword [ebp - 0xb0]
cmp ecx, dword [eax]
jne 0x428cca
mov dword [ebp - 0xb8], 1
jmp 0x428cd1
and dword [ebp - 0xb8], 0
cmp dword [ebp - 0xb8], 6
jae 0x428ce6
mov dword [ebp - 0xc0], 1
jmp 0x428ced
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0xc0]
jl 0x428d0b
mov dword [ebp - 0xc8], 1
jmp 0x428d12
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x230], eax
push 0
lea ecx, [ebp - 0x1f8]
call fcn.00434c81
cmp dword [eax], 1
jge 0x428d42
mov dword [ebp - 0x90], 1
jmp 0x428d49
and dword [ebp - 0x90], 0
mov eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0xd8]
jne 0x428d5d
cmp dword [ebp - 0x48], 0
je 0x428d6f
push 2
lea ecx, [ebp - 0x8c]
call fcn.00434c81
cmp dword [eax], 0
jne 0x428d78
cmp dword [ebp - 0x1cc], 0
je 0x428d7c
cmp dword [ebp - 0x60], 0
push 2
lea ecx, [ebp - 0x8c]
call fcn.00434c81
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
inc eax
cmp dword [ebp - 0xd8], eax
jg 0x428da8
mov dword [ebp - 0xe0], 1
jmp 0x428daf
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0xe8], eax
mov byte [ebp - 0x1a], 0
movzx eax, byte [ebp - 0x1a]
test eax, eax
je 0x428de1
push 0x4fe4
push 1
push 0
push 0x44a7
push 1
push 0
call fcn.0042714e
add esp, 0x18
lea ecx, [ebp - 0x1f8]
call fcn.00434c65
lea ecx, [ebp - 0x20c]
call fcn.00434c65
lea ecx, [ebp - 0x8c]
call fcn.00434c65
jmp 0x42840c
push 4
push 0x1000
mov eax, dword [ebp - 8]
push dword [eax + 0x10]
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0xf8]
add ecx, dword [eax + 0xc]
push ecx
push 0x316f
push 0x3805
call fcn.00406e53
pop ecx
pop ecx
call eax
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 8]
push dword [eax + 0x10]
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x17c]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x7c]
call fcn.00407576
add esp, 0xc
push 4
lea ecx, [ebp - 0x1e0]
call fcn.00434b93
mov dword [ebp - 0x14], 0xfffffffb
push 3
lea ecx, [ebp - 0x224]
call fcn.00434b93
mov dword [ebp - 0x24], 0
jmp 0x428e86
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x428e99
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x10], 0
jmp 0x428e7f
push 0
push 0x7ab5
push 1
push 0x1f68
lea eax, [ebp - 0x1e0]
push eax
push 0x383b
push 0
push 0x5a3d
push 1
push 0x142f
push 0x2aa7
push 0x3cba
push 0x74d2
push 0x64d2
push 0x40f3
push 0x44e3
push 0x68b
lea eax, [ebp - 0x24]
push eax
push 0x734c
push 0x4e30
push 0
push 0x42b7
call fcn.0041cb41
add esp, 0x58
push 0
lea eax, [ebp - 0x224]
push eax
push 0x412b
push 1
lea eax, [ebp - 0x24]
push eax
push 0x5a6e
push 0
push 0x44bf
push 1
push 0x58ff
push 0x28e2
push 0x2fbd
push 0x7c38
push 0x8c1
call fcn.0041aab4
add esp, 0x38
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x10], 0xffffffe5
jmp 0x428f69
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x10], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10], 0xfffffff6
jge 0x42918d
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x18], 0
jmp 0x428f91
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jg 0x429188
mov dword [ebp - 0x6c], 0x44653ff
mov dword [ebp - 0x180], 0xffffffff
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x14], 3
jmp 0x428fc9
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x429183
mov dword [ebp - 0x130], 0xdc6f79b3
mov dword [ebp - 0x16c], 1
mov dword [ebp - 0x50], 0
jmp 0x428ff7
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x42900d
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x250], 3
jmp 0x428ff0
cmp dword [ebp - 0x18], 0xfffffff7
je 0x42901f
mov dword [ebp - 0x118], 1
jmp 0x429026
and dword [ebp - 0x118], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10], 0
je 0x429106
push dword [ebp - 0x14]
lea ecx, [ebp - 0x1e0]
call fcn.00434c81
cmp dword [eax], 7
jle 0x429056
mov dword [ebp - 0x100], 1
jmp 0x42905d
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jne 0x429082
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10], 0
jne 0x429082
and dword [ebp - 0x108], 0
jmp 0x42908c
mov dword [ebp - 0x108], 1
mov eax, dword [ebp - 0x180]
cmp dword [ebp - 0x108], eax
jne 0x4290a6
mov dword [ebp - 0x110], 1
jmp 0x4290ad
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x110]
sub eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x18]
jge 0x4290c7
mov dword [ebp - 0x15c], 1
jmp 0x4290ce
and dword [ebp - 0x15c], 0
push 1
lea ecx, [ebp - 0x224]
call fcn.00434c81
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x74]
mov dword [ecx], eax
mov eax, dword [ebp - 0x6c]
add eax, 0x43cc
mov ecx, dword [ebp - 0x74]
mov ecx, dword [ecx]
sub ecx, eax
je 0x429106
mov dword [ebp - 0x120], 1
jmp 0x42910d
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 0x120]
jl 0x429128
xor eax, eax
jne 0x429128
and dword [ebp - 0x128], 0
jmp 0x429132
mov dword [ebp - 0x128], 1
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x130], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x250]
cmp dword [ebp - 0x130], eax
je 0x42915f
mov dword [ebp - 0x164], 1
jmp 0x429166
and dword [ebp - 0x164], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x1e0]
call fcn.00434c81
mov dword [ebp - 0x16c], 1
jmp 0x428fc2
jmp 0x428f8a
jmp 0x428f54
lea ecx, [ebp - 0x224]
call fcn.00434c65
lea ecx, [ebp - 0x1e0]
call fcn.00434c65
push 0x652
push 0x2312
push 0x7320
push 0x722d
push 0x7a1a
push 0x17ee
push 0x31d6
push 0x14a5
push 0x5f57
push 0
lea eax, [ebp - 0x7c]
push eax
push 0x6b1f
push 0x24ca
push 1
push 0x5b81
push 0
push 0x3592
lea eax, [ebp - 8]
push eax
call fcn.0041f749
add esp, 0x48
jmp 0x42840c
jmp 0x429244
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x174], eax
push 0x59da
push 0x4cc2
push 1
push 0
push 0x931
push 0x526d
push 0x4f4c
push 0x53ee
push dword [ebp - 0x174]
push 0x4bb8
push 0xb8
call fcn.004099b6
add esp, 0x2c
mov esp, ebp
pop ebp
ret