Function at 0x42404e
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 0x10
add esp, 0xfffff004
push eax
dec eax
jne 0x424057
mov eax, dword [ebp - 4]
add esp, 0xfffffce4
push ebx
push esi
push edi
mov ebx, ecx
mov dword [ebp - 0xf4e0], edx
mov dword [ebp - 0xf4dc], eax
lea esi, [ebp - 0xf4d8]
mov eax, 0x4a2074
call fcn.00494df8
xor edx, edx
xor ecx, ecx
mov dword [ebp - 0xf4e4], edx
mov dword [ebp - 0xf4e8], ecx
mov byte [ebp - 0xf4e9], 0
mov word [esi + 0x10], 8
mov edx, dword [ebp - 0xf4dc]
lea eax, [ebp - 0x7a54]
call fcn.004041c8
add dword [esi + 0x1c], 0xa
mov word [esi + 0x10], 0x14
mov word [esi + 0x10], 0x20
lea eax, [ebp - 0xf4a8]
mov edx, dword [ebp - 0xf4dc]
call fcn.004041c8
add dword [esi + 0x1c], 0xa
mov word [esi + 0x10], 0x14
lea eax, [ebp - 0x7a54]
mov ecx, ebx
mov edx, dword [ebp - 0xf4e0]
call fcn.00409640
mov byte [ebp - 0x7a43], 1
push 0x4a1f99
lea eax, [ebp - 0xf90c]
push eax
call fcn.004949c8
add esp, 8
mov eax, dword [ebp - 0xf4e0]
call fcn.0040ba30
push eax
lea edx, [ebp - 0xf90c]
push edx
call fcn.004948ec
add esp, 8
lea eax, [ebp - 0xf90c]
xor edx, edx
call fcn.0040c2e0
push 0x4a1fa0
lea ecx, [ebp - 0xfd0c]
push ecx
call fcn.004949c8
add esp, 8
mov eax, dword [ebp - 0xf4e0]
call fcn.0040ba30
push eax
lea edx, [ebp - 0xfd0c]
push edx
call fcn.004948ec
add esp, 8
mov edx, 0x4a1fa9
mov eax, dword [ebp - 0xf4e0]
call fcn.0040be78
test al, al
jne 0x424191
mov edx, 0x4a1fad
mov eax, dword [ebp - 0xf4e0]
call fcn.0040be78
test al, al
je 0x4241a1
mov edx, 0x4a1fb1
lea eax, [ebp - 0xfd0c]
call fcn.0040bd60
lea eax, [ebp - 0xfd0c]
xor edx, edx
call fcn.0040c2e0
push 0
lea eax, [ebp - 0xf4ea]
mov ecx, dword [ebp - 0xf4dc]
lea edx, [ebp - 0xf4a8]
push dword [ecx + 0x209c]
push eax
push 0x80000000
push 0
push 0
mov eax, dword [ebp - 0xf4dc]
lea ecx, [ebp - 0xf90c]
call fcn.0040b310
test al, al
jne 0x4242fb
cmp byte [ebp - 0xf4ea], 0
jne 0x424213
mov eax, 0x4ae120
mov edx, 9
call fcn.0042cee4
lea edx, [ebp - 0xf90c]
mov eax, 0x4ae120
call fcn.0042cdb8
mov al, byte [ebp - 0xf4ea]
mov edx, 2
push eax
lea eax, [ebp - 0x9438]
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
call fcn.004017ec
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
lea eax, [ebp - 0xa164]
mov edx, 2
call fcn.004017ec
sub dword [esi + 0x1c], 2
lea eax, [ebp - 0xe0d8]
mov edx, 2
call fcn.00427bc0
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
lea eax, [ebp - 0xe63c]
mov edx, 2
call fcn.004017ec
dec dword [esi + 0x1c]
lea eax, [ebp - 0xf4a8]
xor edx, edx
call fcn.004094d4
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
lea eax, [ebp - 0x19e4]
mov edx, 2
call fcn.004017ec
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
lea eax, [ebp - 0x2710]
mov edx, 2
call fcn.004017ec
sub dword [esi + 0x1c], 2
lea eax, [ebp - 0x6684]
mov edx, 2
call fcn.00427bc0
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
lea eax, [ebp - 0x6be8]
mov edx, 2
call fcn.004017ec
dec dword [esi + 0x1c]
lea eax, [ebp - 0x7a54]
xor edx, edx
call fcn.004094d4
pop eax
mov edx, dword [esi]
mov dword fs:[0], edx
jmp 0x425071
lea ecx, [ebp - 0xf90c]
mov eax, 0x267
push ecx
call fcn.00411fe8
push eax
lea edx, [ebp - 0x1030c]
push edx
call fcn.00497928
add esp, 0xc
lea eax, [ebp - 0x1030c]
call fcn.0047e5d0
lea edx, [ebp - 0xf4a8]
lea eax, [ebp - 0x7a54]
call fcn.00422cc4
mov ebx, eax
cmp ebx, 2
jne 0x424432
lea eax, [ebp - 0xf4a8]
call fcn.004097c8
mov al, 1
mov edx, 2
push eax
lea eax, [ebp - 0x9438]
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
call fcn.004017ec
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
lea eax, [ebp - 0xa164]
mov edx, 2
call fcn.004017ec
sub dword [esi + 0x1c], 2
lea eax, [ebp - 0xe0d8]
mov edx, 2
call fcn.00427bc0
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
lea eax, [ebp - 0xe63c]
mov edx, 2
call fcn.004017ec
dec dword [esi + 0x1c]
lea eax, [ebp - 0xf4a8]
xor edx, edx
call fcn.004094d4
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
lea eax, [ebp - 0x19e4]
mov edx, 2
call fcn.004017ec
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
lea eax, [ebp - 0x2710]
mov edx, 2
call fcn.004017ec
sub dword [esi + 0x1c], 2
lea eax, [ebp - 0x6684]
mov edx, 2
call fcn.00427bc0
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
lea eax, [ebp - 0x6be8]
mov edx, 2
call fcn.004017ec
dec dword [esi + 0x1c]
lea eax, [ebp - 0x7a54]
xor edx, edx
call fcn.004094d4
pop eax
mov edx, dword [esi]
mov dword fs:[0], edx
jmp 0x425071
cmp ebx, 1
jne 0x424569
lea eax, [ebp - 0xf4a8]
call fcn.004097c8
mov edx, dword [ebp - 0xf4dc]
cmp byte [edx + 0x20e0], 0
jne 0x424569
push 0x24
mov eax, 0x262
call fcn.00411fe8
push eax
mov eax, 0x275
call fcn.00411fe8
push eax
push dword [0x4c144c]
call sub.USER32.DLL_MessageBoxA
cmp eax, 6
je 0x424569
mov al, 1
mov edx, 2
push eax
lea eax, [ebp - 0x9438]
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
call fcn.004017ec
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
lea eax, [ebp - 0xa164]
mov edx, 2
call fcn.004017ec
sub dword [esi + 0x1c], 2
lea eax, [ebp - 0xe0d8]
mov edx, 2
call fcn.00427bc0
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
lea eax, [ebp - 0xe63c]
mov edx, 2
call fcn.004017ec
dec dword [esi + 0x1c]
lea eax, [ebp - 0xf4a8]
xor edx, edx
call fcn.004094d4
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
lea eax, [ebp - 0x19e4]
mov edx, 2
call fcn.004017ec
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
lea eax, [ebp - 0x2710]
mov edx, 2
call fcn.004017ec
sub dword [esi + 0x1c], 2
lea eax, [ebp - 0x6684]
mov edx, 2
call fcn.00427bc0
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
lea eax, [ebp - 0x6be8]
mov edx, 2
call fcn.004017ec
dec dword [esi + 0x1c]
lea eax, [ebp - 0x7a54]
xor edx, edx
call fcn.004094d4
pop eax
mov edx, dword [esi]
mov dword fs:[0], edx
jmp 0x425071
test ebx, ebx
jne 0x424578
lea eax, [ebp - 0xf4a8]
call fcn.0040985c
push 0
push 0
lea eax, [ebp - 0x7a54]
xor edx, edx
call fcn.00409c04
push 0
push 0
lea ecx, [ebp - 0xf4ea]
push ecx
push 0x80000000
push 0
push 0
lea ecx, [ebp - 0xfd0c]
lea edx, [ebp - 0xf4a8]
mov eax, dword [ebp - 0xf4dc]
call fcn.0040b310
test al, al
jne 0x4246d5
cmp byte [ebp - 0xf4ea], 0
jne 0x4245e4
mov eax, 0x4ae120
mov edx, 9
call fcn.0042cee4
lea edx, [ebp - 0xfd0c]
mov eax, 0x4ae120
call fcn.0042cdb8
xor eax, eax
mov edx, 2
mov al, byte [ebp - 0xf4ea]
cmp eax, 1
sbb eax, eax
neg eax
push eax
lea eax, [ebp - 0x9438]
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
call fcn.004017ec
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
lea eax, [ebp - 0xa164]
mov edx, 2
call fcn.004017ec
sub dword [esi + 0x1c], 2
lea eax, [ebp - 0xe0d8]
mov edx, 2
call fcn.00427bc0
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
lea eax, [ebp - 0xe63c]
mov edx, 2
call fcn.004017ec
dec dword [esi + 0x1c]
lea eax, [ebp - 0xf4a8]
xor edx, edx
call fcn.004094d4
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
lea eax, [ebp - 0x19e4]
mov edx, 2
call fcn.004017ec
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
lea eax, [ebp - 0x2710]
mov edx, 2
call fcn.004017ec
sub dword [esi + 0x1c], 2
lea eax, [ebp - 0x6684]
mov edx, 2
call fcn.00427bc0
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
lea eax, [ebp - 0x6be8]
mov edx, 2
call fcn.004017ec
dec dword [esi + 0x1c]
lea eax, [ebp - 0x7a54]
xor edx, edx
call fcn.004094d4
pop eax
mov edx, dword [esi]
mov dword fs:[0], edx
jmp 0x425071
lea eax, [ebp - 0x7a54]
call fcn.00409ebc
mov dword [ebp - 0xf4f4], eax
mov dword [ebp - 0xf4f0], edx
lea edx, [ebp - 0xfd0c]
mov eax, 0x267
push edx
call fcn.00411fe8
push eax
lea edx, [ebp - 0x1030c]
push edx
call fcn.00497928
add esp, 0xc
lea eax, [ebp - 0x1030c]
call fcn.0047e5d0
mov byte [ebp - 0xf4f5], 0
lea eax, [ebp - 0x7a54]
xor edx, edx
call fcn.004045a8
test al, al
je 0x424862
mov byte [ebp - 0xf4f5], 1
mov cx, word [ebp - 0x3350]
mov word [ebp - 0xada4], cx
mov ax, word [ebp - 0x334e]
mov word [ebp - 0xada2], ax
cmp byte [ebp - 0xc2c], 0
je 0x424862
mov eax, 0x272
call fcn.00411fe8
push eax
lea edx, [ebp - 0x7a3d]
push edx
call fcn.004487f8
add esp, 8
mov al, 1
push eax
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
lea eax, [ebp - 0x9438]
mov edx, 2
call fcn.004017ec
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
lea eax, [ebp - 0xa164]
mov edx, 2
call fcn.004017ec
sub dword [esi + 0x1c], 2
lea eax, [ebp - 0xe0d8]
mov edx, 2
call fcn.00427bc0
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
lea eax, [ebp - 0xe63c]
mov edx, 2
call fcn.004017ec
dec dword [esi + 0x1c]
lea eax, [ebp - 0xf4a8]
xor edx, edx
call fcn.004094d4
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
lea eax, [ebp - 0x19e4]
mov edx, 2
call fcn.004017ec
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
lea eax, [ebp - 0x2710]
mov edx, 2
call fcn.004017ec
sub dword [esi + 0x1c], 2
lea eax, [ebp - 0x6684]
mov edx, 2
call fcn.00427bc0
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
lea eax, [ebp - 0x6be8]
mov edx, 2
call fcn.004017ec
dec dword [esi + 0x1c]
lea eax, [ebp - 0x7a54]
xor edx, edx
call fcn.004094d4
pop eax
mov edx, dword [esi]
mov dword fs:[0], edx
jmp 0x425071
xor ecx, ecx
lea eax, [ebp - 0xf4a8]
mov dword [ebp - 0xad9c], ecx
mov edx, 0x72
mov word [ebp - 0xada0], cx
and word [ebp - 0xada4], 0xff9f
xor ecx, ecx
call fcn.00401cac
lea eax, [ebp - 0xf4a8]
xor ecx, ecx
mov edx, 0x73
call fcn.00401cac
mov eax, dword [ebp - 0xc3c]
mov edx, dword [ebp - 0xc38]
add eax, 0xd
adc edx, 0
push edx
push eax
lea eax, [ebp - 0x7a54]
xor edx, edx
call fcn.00409c04
movzx eax, word [ebp - 0xada2]
add eax, 0xfffffff3
cdq
push edx
push eax
lea edx, [ebp - 0xf4a8]
lea eax, [ebp - 0x7a54]
call fcn.00409f50
push 0
push 0
lea eax, [ebp - 0x7a54]
xor edx, edx
call fcn.00409c04
mov word [esi + 0x10], 0x2c
lea eax, [ebp - 0xf4b4]
mov edx, 0x10000
call fcn.00401c08
inc dword [esi + 0x1c]
mov word [esi + 0x10], 0x14
mov dword [ebp - 0xf500], 0
mov dword [ebp - 0xf4fc], 0
mov dword [ebp - 0xf508], 0
mov dword [ebp - 0xf504], 0
lea eax, [ebp - 0x7a54]
mov ecx, dword [ebp - 0xf4b0]
mov edx, dword [ebp - 0xf4b4]
call fcn.00409aa0
mov eax, dword [ebp - 0xf4b0]
add eax, 0xfffff000
cdq
add dword [ebp - 0xf508], eax
adc dword [ebp - 0xf504], edx
mov eax, dword [ebp - 0xf4b0]
add eax, 0xfffff000
cdq
push edx
push eax
mov eax, dword [ebp - 0xf500]
mov edx, dword [ebp - 0xf4fc]
call fcn.00498fb4
mov ebx, eax
xor eax, eax
add ebx, dword [ebp - 0xf4b4]
xor ecx, ecx
mov word [esi + 0x10], 0x14
mov al, byte [ebx + 2]
xor edx, edx
mov dword [ebp - 0xad90], eax
xor eax, eax
mov cl, byte [ebx + 6]
mov dl, byte [ebx + 5]
shl ecx, 8
add dx, cx
mov word [ebp - 0xad8a], dx
xor edx, edx
mov dl, byte [ebx + 0x1b]
mov al, byte [ebx + 0x1a]
shl edx, 8
add ax, dx
mov word [ebp - 0xad72], ax
cmp dword [ebp - 0xad90], 0x74
jne 0x424e04
cmp word [ebp - 0xad8a], 0x1000
jae 0x424e04
cmp word [ebp - 0xad72], 0
jbe 0x424e04
cmp word [ebp - 0xad72], 0x400
jae 0x424e04
xor eax, eax
xor ecx, ecx
mov al, byte [ebx + 1]
mov cl, byte [ebx]
shl eax, 8
xor edx, edx
add cx, ax
xor eax, eax
mov word [ebp - 0xad94], cx
xor ecx, ecx
mov cl, byte [ebx + 4]
mov dl, byte [ebx + 3]
shl ecx, 8
add dx, cx
xor ecx, ecx
mov word [ebp - 0xad8c], dx
xor edx, edx
mov dl, byte [ebx + 8]
mov al, byte [ebx + 7]
shl edx, 8
mov cl, byte [ebx + 9]
add eax, edx
xor edx, edx
mov dl, byte [ebx + 0xa]
shl ecx, 0x10
shl edx, 0x18
add eax, ecx
add eax, edx
xor ecx, ecx
mov dword [ebp - 0xad88], eax
xor eax, eax
mov cl, byte [ebx + 0xc]
mov al, byte [ebx + 0xb]
shl ecx, 8
xor edx, edx
add eax, ecx
mov dl, byte [ebx + 0xd]
xor ecx, ecx
mov cl, byte [ebx + 0xe]
shl edx, 0x10
shl ecx, 0x18
add eax, edx
add eax, ecx
xor edx, edx
mov dword [ebp - 0xad84], eax
xor ecx, ecx
mov al, byte [ebx + 0xf]
mov byte [ebp - 0xad80], al
xor eax, eax
mov dl, byte [ebx + 0x11]
mov al, byte [ebx + 0x10]
shl edx, 8
mov cl, byte [ebx + 0x12]
add eax, edx
xor edx, edx
mov dl, byte [ebx + 0x13]
shl ecx, 0x10
shl edx, 0x18
add eax, ecx
add eax, edx
xor ecx, ecx
mov dword [ebp - 0xad7c], eax
xor eax, eax
mov cl, byte [ebx + 0x15]
mov al, byte [ebx + 0x14]
shl ecx, 8
xor edx, edx
add eax, ecx
mov dl, byte [ebx + 0x16]
xor ecx, ecx
mov cl, byte [ebx + 0x17]
shl edx, 0x10
shl ecx, 0x18
add eax, edx
add eax, ecx
xor ecx, ecx
mov dword [ebp - 0xad78], eax
xor edx, edx
mov al, byte [ebx + 0x18]
mov byte [ebp - 0xad74], al
mov al, byte [ebx + 0x19]
mov byte [ebp - 0xad73], al
xor eax, eax
mov cl, byte [ebx + 0x1d]
mov dl, byte [ebx + 0x1c]
shl ecx, 8
mov al, byte [ebx + 0x1e]
add edx, ecx
xor ecx, ecx
mov cl, byte [ebx + 0x1f]
shl eax, 0x10
shl ecx, 0x18
add edx, eax
add edx, ecx
mov dword [ebp - 0xad70], edx
test byte [ebp - 0xad8b], 1
je 0x424b75
xor eax, eax
xor edx, edx
mov al, byte [ebx + 0x21]
mov dl, byte [ebx + 0x20]
shl eax, 8
xor ecx, ecx
add edx, eax
mov cl, byte [ebx + 0x22]
xor eax, eax
mov al, byte [ebx + 0x23]
shl ecx, 0x10
shl eax, 0x18
add edx, ecx
add edx, eax
xor ecx, ecx
mov dword [ebp - 0xad6c], edx
xor edx, edx
mov cl, byte [ebx + 0x25]
mov dl, byte [ebx + 0x24]
shl ecx, 8
xor eax, eax
add edx, ecx
mov al, byte [ebx + 0x26]
xor ecx, ecx
mov cl, byte [ebx + 0x27]
shl eax, 0x10
shl ecx, 0x18
add edx, eax
add edx, ecx
mov dword [ebp - 0xad68], edx
jmp 0x424b83
xor edx, edx
mov dword [ebp - 0xad68], edx
mov dword [ebp - 0xad6c], edx
mov eax, dword [ebp - 0xad6c]
xor edx, edx
mov edx, eax
xor eax, eax
push edx
push eax
mov eax, dword [ebp - 0xad88]
xor edx, edx
add eax, dword [esp]
adc edx, dword [esp + 4]
add esp, 8
mov dword [ebp - 0xa0a0], eax
mov dword [ebp - 0xa09c], edx
mov eax, dword [ebp - 0xad68]
xor edx, edx
mov edx, eax
xor eax, eax
push edx
push eax
mov eax, dword [ebp - 0xad84]
xor edx, edx
add eax, dword [esp]
adc edx, dword [esp + 4]
add esp, 8
mov dword [ebp - 0xa098], eax
mov dword [ebp - 0xa094], edx
movzx ecx, word [ebp - 0xad72]
push ecx
lea eax, [ebp - 0xf4a8]
xor edx, edx
call fcn.004250dc
add eax, ebx
push eax
lea ecx, [ebp - 0xad64]
push ecx
call fcn.004947d8
add esp, 0xc
test byte [ebp - 0xad8b], 2
je 0x424c55
lea eax, [ebp - 0x10320]
call fcn.00411ae8
lea edx, [ebp - 0xad64]
push edx
call fcn.004949f8
pop ecx
inc eax
movzx ecx, word [ebp - 0xad72]
sub ecx, eax
lea edx, [ebp - 0xa964]
push ecx
lea ecx, [ebp - 0xad64]
add ecx, eax
push edx
lea edx, [ebp - 0xad64]
push 0x400
lea eax, [ebp - 0x10320]
call fcn.00411d84
jmp 0x424c5e
mov word [ebp - 0xa964], 0
test byte [ebp - 0xad8b], 4
je 0x424c91
push 8
lea eax, [ebp - 0xf4a8]
xor edx, edx
call fcn.004250dc
add eax, ebx
movzx ecx, word [ebp - 0xad72]
add eax, ecx
push eax
lea eax, [ebp - 0xa158]
push eax
call fcn.004947d8
add esp, 0xc
movzx edi, word [ebp - 0xad8a]
add edi, 0xfffffffe
mov byte [ebp - 0xf509], 0
test edi, edi
jg 0x424caf
mov byte [ebp - 0xf509], 1
jmp 0x424cee
test byte [ebp - 0xad8c], 8
je 0x424cd3
lea eax, [ebp - 0xf4a8]
mov dl, 1
call fcn.004250dc
mov edi, eax
movzx eax, word [ebp - 0xad72]
add edi, eax
add edi, 0xfffffffe
lea edx, [ebx + 2]
mov ecx, edi
or eax, 0xffffffff
call fcn.00410734
not ax
and ax, 0xffff
mov word [ebp - 0x866e], ax
cmp byte [ebp - 0xf509], 0
jne 0x424e04
lea ecx, [ebp - 0xf4e9]
lea edx, [ebp - 0xf4a8]
mov eax, dword [ebp - 0xf4dc]
call fcn.00425078
test al, al
je 0x424e04
movzx eax, word [ebp - 0xad8a]
cdq
add eax, dword [ebp - 0xf500]
mov bl, 1
adc edx, dword [ebp - 0xf4fc]
push edx
push eax
lea eax, [ebp - 0x7a54]
xor edx, edx
call fcn.00409c04
movzx ecx, word [ebp - 0xad72]
mov byte [ebp + ecx - 0xad64], 0
call fcn.0040fac0
test bl, bl
je 0x424e04
cmp word [ebp - 0xa964], 0
jne 0x424d72
lea eax, [ebp - 0xad64]
mov dl, 1
call fcn.0040c2e0
movzx ecx, word [ebp - 0xad8c]
and ecx, 0xffffefff
or dword [ebp - 0xf4e8], ecx
lea eax, [ebp - 0xf4a8]
mov dl, 1
call fcn.004250dc
add ax, word [ebp - 0xad72]
mov word [ebp - 0xad8a], ax
lea eax, [ebp - 0xad64]
call fcn.0040ed8c
push eax
mov eax, 0x268
call fcn.00411fe8
push eax
lea edx, [ebp - 0x1030c]
push edx
call fcn.00497928
add esp, 0xc
lea eax, [ebp - 0x1030c]
call fcn.0047e5d0
inc dword [ebp - 0xf4e4]
lea eax, [ebp - 0xf4a8]
xor ecx, ecx
mov edx, 0x74
call fcn.00401cac
mov eax, dword [ebp - 0xad88]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0xf4a8]
lea eax, [ebp - 0x7a54]
call fcn.00409f50
add dword [ebp - 0xf500], 1
adc dword [ebp - 0xf4fc], 0
mov eax, dword [ebp - 0xf4f4]
mov edx, dword [ebp - 0xf4f0]
sub eax, 0x20
sbb edx, 0
cmp edx, dword [ebp - 0xf4fc]
jne 0x424e39
cmp eax, dword [ebp - 0xf500]
ja 0x424e3b
jmp 0x424eb9
jle 0x424eb9
mov eax, dword [ebp - 0xf4b0]
add eax, 0xfffff000
cdq
push edx
push eax
mov eax, dword [ebp - 0xf500]
mov edx, dword [ebp - 0xf4fc]
call fcn.00498fb4
cmp edx, 0
jne 0x424964
cmp eax, 0
jne 0x424964
push dword [ebp - 0xf504]
push dword [ebp - 0xf508]
lea eax, [ebp - 0x7a54]
xor edx, edx
call fcn.00409c04
lea eax, [ebp - 0x7a54]
mov ecx, dword [ebp - 0xf4b0]
mov edx, dword [ebp - 0xf4b4]
call fcn.00409aa0
mov eax, dword [ebp - 0xf4b0]
add eax, 0xfffff000
cdq
add dword [ebp - 0xf508], eax
adc dword [ebp - 0xf504], edx
jmp 0x424964
test byte [ebp - 0xf4e8], 3
je 0x424eca
or word [ebp - 0xada4], 1
cmp dword [ebp - 0xf4e4], 0
jle 0x424f1b
cmp byte [ebp - 0xf4f5], 0
jne 0x424f1b
mov ecx, dword [ebp - 0xf4dc]
cmp byte [ecx + 0x20e0], 0
jne 0x424f1b
push 0x24
mov eax, 0x262
call fcn.00411fe8
push eax
mov eax, 0x273
call fcn.00411fe8
push eax
push dword [0x4c144c]
call sub.USER32.DLL_MessageBoxA
cmp eax, 6
jne 0x424f1b
or word [ebp - 0xada4], 8
cmp dword [ebp - 0xf4e4], 0
jne 0x424f3f
mov eax, 0x274
call fcn.00411fe8
push eax
push dword [ebp - 0xf4e0]
call fcn.004487f8
add esp, 8
jmp 0x424f7f
push 0
push 0
lea eax, [ebp - 0xf4a8]
xor edx, edx
call fcn.00409c04
lea eax, [ebp - 0xf4a8]
xor ecx, ecx
mov edx, 0x72
call fcn.00401cac
lea eax, [ebp - 0xf4a8]
xor ecx, ecx
mov edx, 0x73
call fcn.00401cac
lea eax, [ebp - 0xf4a8]
call fcn.004097c8
mov al, 1
mov edx, 2
push eax
lea eax, [ebp - 0xf4b4]
dec dword [esi + 0x1c]
call fcn.00401c80
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
lea eax, [ebp - 0x9438]
mov edx, 2
call fcn.004017ec
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
lea eax, [ebp - 0xa164]
mov edx, 2
call fcn.004017ec
sub dword [esi + 0x1c], 2
lea eax, [ebp - 0xe0d8]
mov edx, 2
call fcn.00427bc0
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
lea eax, [ebp - 0xe63c]
mov edx, 2
call fcn.004017ec
dec dword [esi + 0x1c]
lea eax, [ebp - 0xf4a8]
xor edx, edx
call fcn.004094d4
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
lea eax, [ebp - 0x19e4]
mov edx, 2
call fcn.004017ec
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
lea eax, [ebp - 0x2710]
mov edx, 2
call fcn.004017ec
sub dword [esi + 0x1c], 2
lea eax, [ebp - 0x6684]
mov edx, 2
call fcn.00427bc0
dec dword [esi + 0x1c]
dec dword [esi + 0x1c]
lea eax, [ebp - 0x6be8]
mov edx, 2
call fcn.004017ec
dec dword [esi + 0x1c]
lea eax, [ebp - 0x7a54]
xor edx, edx
call fcn.004094d4
pop eax
mov edx, dword [esi]
mov dword fs:[0], edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret