Function at 0x4830c8
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c
push ebx
mov ebx, dword [ebp + 0x10]
push esi
mov esi, dword [ebp + 0x14]
push edi
mov edi, ecx
mov dword [ebp - 0x20], edx
xor ecx, ecx
mov dword [ebp - 0x28], edi
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x2c], ecx
mov eax, dword [edi]
or dword [esi + 0x1c], 0xffffffff
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x34], 0xa7
mov dword [ebp - 0x14], ecx
test edx, edx
je 0x483188
test byte [ebx + 0x18], 6
je 0x483115
mov dword [ebp - 0x20], ecx
jmp 0x483188
mov ebx, ecx
cmp dword [eax + 0x14], ecx
jle 0x48315c
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x40], eax
mov ecx, dword [eax]
call fcn.0045c824
test eax, eax
je 0x483146
mov ecx, dword [ebp - 0x10]
inc ebx
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x20]
add eax, 0x10
mov dword [ebp - 0x40], eax
cmp ebx, dword [ecx + 0x14]
jl 0x483122
mov eax, ecx
jmp 0x48315c
mov edx, dword [ebp - 0x10]
mov eax, ebx
add eax, eax
mov ecx, dword [edx + 0x10]
mov eax, dword [ecx + eax*8 + 0xc]
mov dword [ebp - 0x24], eax
mov eax, edx
mov edx, dword [ebp - 0x20]
cmp ebx, dword [eax + 0x14]
jne 0x483185
mov ecx, 0x42e9bc
call fcn.0045c824
mov ebx, dword [ebp + 0x10]
test eax, eax
jne 0x483188
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x10]
mov ecx, dword [eax + 0xc]
mov eax, dword [eax]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], eax
jmp 0x483188
mov ebx, dword [ebp + 0x10]
mov eax, dword [ebx + 4]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x4832db
xor edx, edx
lea ecx, [eax + 8]
mov dword [ebp - 0x48], edx
mov dword [ebp - 8], ecx
cmp dword [eax], edx
jle 0x4832aa
test dword [ecx + 0x28], 0x2000
mov edx, dword [ecx + 0x10]
mov dword [ebp - 0x30], edx
je 0x483372
mov eax, dword [ecx + 0x14]
xor ebx, ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x38], ebx
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x4c], eax
cmp dword [eax], ebx
jle 0x483364
lea ebx, [eax + 0x14]
push dword [ebp - 0x20]
mov edx, dword [ebp + 0xc]
lea ecx, [ebx - 0xc]
push dword [ebp + 8]
call fcn.00482eb9
pop ecx
pop ecx
test eax, eax
je 0x48333e
mov eax, dword [ebp - 0xc]
test eax, eax
jle 0x483262
mov eax, dword [ebp - 8]
test dword [eax + 0x28], 0x400
je 0x48324b
mov edx, dword [ebp + 0xc]
mov ecx, dword [eax + 0x30]
call fcn.00494da3
test eax, eax
js 0x48324b
mov eax, dword [ebp - 8]
mov al, byte [eax + 0x24]
test al, 0x10
je 0x48333e
test al, 8
jne 0x483235
mov edx, dword [ebp - 0x14]
xor eax, eax
mov dword [ebp - 0xc], eax
test edx, edx
je 0x48325c
jmp 0x483252
movzx eax, word [esi + 0x20]
lea edx, [ebp - 0x14]
push eax
push dword [ebp - 0x1c]
mov ecx, edi
call fcn.00482fd1
pop ecx
pop ecx
jmp 0x48325f
mov edx, dword [ebp - 0x14]
test edx, edx
je 0x48325a
mov ecx, dword [ebp - 0x10]
call fcn.00486cac
xor eax, eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x38]
inc eax
mov edx, dword [ebp - 8]
mov dword [ebp - 0xc], eax
xor eax, eax
mov word [esi + 0x20], cx
inc eax
or dword [ebx], 0x40
test byte [ebx], 0x80
mov dword [ebp - 0x2c], 2
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x40], eax
je 0x483344
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x48]
add ecx, 0x48
inc edx
mov dword [ebp - 8], ecx
mov dword [ebp - 0x48], edx
cmp edx, dword [eax]
jl 0x4831a9
mov ebx, dword [ebp + 0x10]
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
je 0x4832d0
mov eax, dword [ecx + 0x2c]
mov dword [esi + 0x1c], eax
mov eax, dword [ecx + 0x10]
mov dword [esi + 0x2c], eax
test byte [ecx + 0x24], 0x48
je 0x4832ca
or dword [esi + 4], 0x200000
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x483778
cmp dword [ebp - 0x20], 0
jne 0x483657
mov edx, dword [edi + 0x7c]
xor eax, eax
mov ebx, eax
test edx, edx
je 0x483583
mov al, byte [edi + 0x9c]
mov byte [ebp - 1], al
cmp byte [edi + 0x9d], bl
je 0x48353d
mov ecx, dword [ebp + 0x10]
test dword [ecx + 0x18], 0x400
je 0x483583
cmp dword [ebp + 8], ebx
je 0x483330
mov edx, dword [edx]
mov ecx, dword [ebp + 8]
call fcn.0045c824
test eax, eax
jne 0x483583
xor eax, eax
cmp byte [ebp - 1], 0x80
setne al
jmp 0x48357d
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x4c]
inc ecx
add ebx, 0x14
mov dword [ebp - 0x38], ecx
cmp ecx, dword [edx]
jl 0x4831d8
mov ecx, dword [ebp - 8]
test eax, eax
jne 0x48328f
mov edx, dword [ebp - 0x30]
cmp dword [ebp + 8], 0
mov eax, dword [ebp - 0x18]
jne 0x48337c
jmp 0x483292
cmp dword [ebp + 8], 0
je 0x483411
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4833ad
mov esi, dword [ebp - 0x24]
cmp dword [edx + 0x3c], esi
mov esi, dword [ebp + 0x14]
jne 0x483292
cmp dword [ebp - 0x24], 0
jne 0x4833ad
cmp byte [ebx], 0x2a
jne 0x48328f
movzx eax, byte [ebx + 1]
test al, al
jne 0x48328f
mov ebx, dword [ecx + 0xc]
mov ecx, dword [ebp + 8]
test ebx, ebx
je 0x4833c8
mov edx, ebx
call fcn.0045c824
test eax, eax
jne 0x48328c
jmp 0x4833f6
mov edx, dword [edx]
call fcn.0045c824
test eax, eax
je 0x4833f6
mov eax, dword [ebp - 0x30]
cmp dword [eax + 0x14], 1
jne 0x48328c
push dword [ebp - 0x24]
mov ecx, dword [ebp + 8]
mov edx, eax
call fcn.0048301f
pop ecx
test eax, eax
je 0x48328c
cmp byte [edi + 0xd8], 2
jb 0x483411
test ebx, ebx
je 0x483411
lea eax, [esi + 0x2c]
xor edx, edx
push eax
mov ecx, edi
call fcn.0048c00f
pop ecx
mov ecx, dword [ebp + 0xc]
call fcn.0045c8b9
mov ecx, dword [ebp - 0x30]
mov dl, al
xor eax, eax
mov byte [ebp - 1], dl
mov dword [ebp - 0x38], eax
mov ebx, dword [ecx + 4]
movsx ecx, word [ecx + 0x22]
mov dword [ebp - 0x40], ecx
test ecx, ecx
jle 0x48348d
cmp byte [ebx + 0xa], dl
jne 0x483482
mov edx, dword [ebp + 0xc]
mov ecx, dword [ebx]
call fcn.0045c824
test eax, eax
jne 0x483479
cmp dword [ebp - 0xc], eax
jle 0x483502
mov eax, dword [ebp - 8]
test dword [eax + 0x28], 0x400
je 0x4834ee
mov edx, dword [ebp + 0xc]
mov ecx, dword [eax + 0x30]
call fcn.00494da3
test eax, eax
js 0x4834ee
mov eax, dword [ebp - 8]
mov al, byte [eax + 0x24]
test al, 0x10
jne 0x4834bb
mov dl, byte [ebp - 1]
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x38]
inc eax
add ebx, 0x10
mov dword [ebp - 0x38], eax
cmp eax, ecx
jl 0x483434
mov ebx, dword [ebp - 8]
cmp dword [ebp - 0xc], 0
jne 0x48328c
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 8]
test dword [eax + 0x1c], 0x200
mov eax, dword [ebp - 0x18]
jne 0x483292
inc dword [ebp - 0x2c]
mov dword [ebp - 0x1c], ebx
jmp 0x483292
test al, 8
jne 0x4834d8
mov edx, dword [ebp - 0x14]
xor ebx, ebx
mov dword [ebp - 0xc], ebx
test edx, edx
je 0x4834d3
mov ecx, dword [ebp - 0x10]
call fcn.00486cac
mov dword [ebp - 0x14], ebx
jmp 0x483502
movzx eax, word [esi + 0x20]
lea edx, [ebp - 0x14]
push eax
push dword [ebp - 0x1c]
mov ecx, edi
call fcn.00482fd1
pop ecx
pop ecx
jmp 0x483502
mov edx, dword [ebp - 0x14]
test edx, edx
je 0x4834fd
mov ecx, dword [ebp - 0x10]
call fcn.00486cac
xor eax, eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x30]
inc dword [ebp - 0xc]
mov edx, dword [ebp - 0x38]
mov ebx, dword [ebp - 8]
movsx eax, word [eax + 0x20]
cmp edx, eax
movzx ecx, dx
push 0xffffffffffffffff
pop eax
cmove ecx, eax
mov dword [ebp - 0x1c], ebx
mov word [esi + 0x20], cx
test dword [ebx + 0x28], 0x2000
je 0x483490
mov ecx, ebx
call fcn.004a371d
jmp 0x483490
cmp al, 0x80
je 0x483567
cmp dword [ebp + 8], ebx
je 0x483563
mov edx, dword [ebp + 8]
mov ecx, 0x42e9c8
call fcn.0045c824
test eax, eax
jne 0x483560
mov dword [esi + 0x1c], 1
jmp 0x483580
mov al, byte [ebp - 1]
cmp al, 0x7f
je 0x483583
cmp dword [ebp + 8], ebx
je 0x483583
mov edx, dword [ebp + 8]
mov ecx, 0x42e9cc
call fcn.0045c824
test eax, eax
jne 0x483583
mov dword [esi + 0x1c], eax
mov ebx, dword [edi + 0x7c]
mov ecx, dword [ebp + 0x10]
test dword [ecx + 0x18], 0x200
je 0x4835bf
cmp dword [ebp + 8], 0
je 0x4835bf
cmp dword [ecx + 8], 0
je 0x4835bf
mov edx, dword [ebp + 8]
mov ecx, 0x42e9d0
call fcn.0045c824
test eax, eax
jne 0x4835bf
mov ecx, dword [ebp + 0x10]
mov eax, dword [ecx + 8]
mov eax, dword [eax + 0x20]
mov ebx, dword [eax + 0x18]
mov dword [esi + 0x1c], 2
test ebx, ebx
je 0x483657
mov ecx, dword [ebp + 0xc]
call fcn.0045c8b9
movsx ecx, word [ebx + 0x22]
mov dl, al
mov eax, dword [ebx + 0x3c]
inc dword [ebp - 0x2c]
mov dword [ebp - 0x24], eax
xor eax, eax
mov byte [ebp - 1], dl
mov edi, eax
mov eax, dword [ebx + 4]
mov dword [ebp - 0x48], eax
test ecx, ecx
jle 0x483625
cmp byte [eax + 0xa], dl
jne 0x48360c
mov edx, dword [ebp + 0xc]
mov ecx, dword [eax]
call fcn.0045c824
test eax, eax
je 0x483619
mov eax, dword [ebp - 0x48]
movsx ecx, word [ebx + 0x22]
mov dl, byte [ebp - 1]
inc edi
add eax, 0x10
mov dword [ebp - 0x48], eax
cmp edi, ecx
jl 0x4835ef
jmp 0x483625
movsx eax, word [ebx + 0x20]
cmp edi, eax
push 0xffffffffffffffff
pop eax
cmove edi, eax
movzx eax, word [ebx + 0x22]
cwde
cmp edi, eax
jl 0x483647
mov ecx, dword [ebp + 0xc]
call fcn.004871f5
test eax, eax
je 0x483647
test dword [ebx + 0x1c], 0x200
push 0xffffffffffffffff
pop eax
cmove edi, eax
movzx eax, word [ebx + 0x22]
cwde
cmp edi, eax
jl 0x483786
mov edi, dword [ebp - 0x28]
cmp dword [ebp - 0x2c], 1
mov ebx, dword [ebp + 0x10]
jne 0x48368b
cmp dword [ebp - 0x1c], 0
je 0x48368b
test byte [ebx + 0x18], 0x28
jne 0x48368b
mov ecx, dword [ebp + 0xc]
call fcn.004871f5
test eax, eax
je 0x48368b
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x10]
test dword [eax + 0x1c], 0x200
je 0x483878
test byte [ebx + 0x18], 0x80
je 0x4836fa
cmp dword [ebp + 8], 0
jne 0x4836fa
mov ecx, dword [ebx + 8]
xor eax, eax
mov dword [ebp - 0x40], eax
mov edx, dword [ecx]
mov dword [ebp - 0x48], edx
test edx, edx
jle 0x4836fa
lea edx, [ecx + 0x14]
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x38], edx
test byte [edx], 3
mov ebx, dword [edx - 8]
jne 0x4836e9
test ebx, ebx
jne 0x4836c6
mov ecx, dword [ebp + 0xc]
neg ecx
sbb ecx, ecx
jmp 0x4836de
cmp dword [ebp + 0xc], 0
je 0x4836e9
mov edx, dword [ebp + 0xc]
mov ecx, ebx
call fcn.0045c824
mov edx, dword [ebp - 0x38]
mov ecx, eax
mov eax, dword [ebp - 0x40]
test ecx, ecx
je 0x48388f
mov ecx, dword [ebp - 0x48]
inc eax
add edx, 0x14
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x38], edx
cmp eax, ecx
jl 0x4836b1
mov ebx, dword [ebp + 0x10]
mov ebx, dword [ebx + 0xc]
inc dword [ebp - 0x44]
mov dword [ebp + 0x10], ebx
test ebx, ebx
jne 0x483188
cmp dword [ebp + 8], ebx
jne 0x483973
test byte [esi + 4], 0x80
je 0x483968
mov eax, dword [ebp - 0x10]
cmp byte [eax + 0xb1], bl
jne 0x483943
mov ecx, dword [ebp - 0x3c]
test dword [ecx + 0x18], 0x10000
je 0x483936
mov ecx, eax
call fcn.00490c36
xor ecx, ecx
test eax, eax
je 0x48375d
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x20]
and eax, 0x40000000
or eax, ecx
jne 0x483943
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x20]
and eax, 0x20000000
or eax, ecx
je 0x483930
xor eax, eax
inc eax
jmp 0x483932
cmp eax, 1
je 0x483a5b
jmp 0x483976
mov ecx, dword [esi + 0x1c]
xor eax, eax
mov dword [ebp - 0xc], 1
mov dword [ebp - 0x1c], eax
mov dword [ebp + 0x14], ecx
movzx edx, di
cmp ecx, 2
jne 0x4837e3
mov edi, dword [ebp - 0x28]
cmp byte [edi + 0xd8], cl
jb 0x4837c1
mov dword [esi + 0x2c], ebx
mov ebx, dword [ebp + 0x10]
mov word [esi + 0x20], dx
mov dword [ebp - 0x34], 0xa7
jmp 0x483a5d
mov ecx, ebx
call fcn.00490d7b
mov ebx, dword [ebp + 0x10]
movsx ecx, ax
mov dword [ebp - 0x34], 0xb0
mov eax, dword [ebx + 8]
add ecx, dword [eax + 0x24]
mov dword [esi + 0x1c], ecx
jmp 0x483a5b
mov eax, dword [ebp - 0x28]
mov dword [esi + 0x2c], ebx
mov al, byte [eax + 0x9d]
mov word [esi + 0x20], dx
test al, al
je 0x48382b
mov ecx, ebx
mov dword [ebp - 0x34], 0xb0
mov byte [esi + 2], 0xa7
call fcn.00490d7b
movsx ecx, ax
movsx eax, word [ebx + 0x22]
mov ebx, dword [ebp + 0x10]
inc eax
imul eax, dword [ebp + 0x14]
add ecx, eax
mov eax, dword [ebx + 8]
inc eax
add eax, ecx
mov dword [esi + 0x1c], eax
mov edi, dword [ebp - 0x28]
jmp 0x483a5b
mov ebx, dword [ebp + 0x10]
mov dword [ebp - 0x34], 0x4d
test edi, edi
jns 0x48383f
mov byte [esi + 1], 0x44
jmp 0x483823
xor eax, eax
inc eax
test ecx, ecx
push 0xffffffffffffffff
mov ecx, edi
jne 0x483861
shl eax, cl
cmp edi, 0x20
mov edi, dword [ebp - 0x28]
pop ecx
cmovge eax, ecx
or dword [edi + 0x90], eax
jmp 0x483a5b
shl eax, cl
cmp edi, 0x20
mov edi, dword [ebp - 0x28]
pop ecx
cmovge eax, ecx
or dword [edi + 0x94], eax
jmp 0x483a5b
or eax, 0xffffffff
mov dword [ebp - 0xc], 1
mov word [esi + 0x20], ax
mov byte [esi + 1], 0x44
jmp 0x483a5b
mov ecx, dword [ebp + 0x10]
imul eax, eax, 0x14
mov edx, dword [ecx + 8]
mov edx, dword [eax + edx + 8]
mov eax, ecx
test byte [eax + 0x18], 1
jne 0x4838c1
test byte [edx + 4], 0x10
je 0x4838c1
push ebx
push 0x42e9dc
push edi
call fcn.0045c6d7
add esp, 0xc
push 2
pop eax
pop edi
pop esi
pop ebx
leave
ret
test dword [edx + 4], 0x8000
je 0x4838e0
test dword [eax + 0x18], 0x4000
je 0x4838d8
cmp eax, dword [ebp - 0x3c]
je 0x4838e0
push ebx
push 0x42e9fc
jmp 0x4838b0
mov ecx, edx
call fcn.00485543
cmp eax, 1
je 0x4838fb
push 0x42ea24
push edi
call fcn.0045c6d7
pop ecx
pop ecx
jmp 0x4838b9
mov eax, dword [ebp - 0x44]
mov ecx, edi
mov ebx, dword [ebp + 0x10]
push eax
push esi
push dword [ebp - 0x40]
mov edx, dword [ebx + 8]
call fcn.00482db0
add esp, 0xc
cmp byte [edi + 0xd8], 2
jb 0x483ac0
push esi
xor edx, edx
mov ecx, edi
call fcn.0048c00f
pop ecx
jmp 0x483ac0
mov eax, ecx
test eax, eax
jmp 0x483941
mov eax, dword [eax + 0x20]
and eax, 0x40000000
or eax, 0
je 0x483968
push dword [ebp + 0xc]
push 0x42ea38
push 0x1c
call fcn.0045b970
add esp, 0xc
mov byte [esi], 0x75
xor eax, eax
mov dword [esi + 0x2c], eax
mov dword [esi + 0x30], eax
xor eax, eax
inc eax
jmp 0x4838bc
mov ecx, esi
call fcn.00486d48
test eax, eax
jne 0x483960
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x14]
test edx, edx
je 0x4839ef
dec eax
cmp dword [edx], eax
jne 0x4839e7
mov eax, dword [esi + 4]
test eax, 0x800000
je 0x483996
and eax, 0xff7fffff
mov dword [esi + 4], eax
jmp 0x4839be
mov edx, dword [esi + 0xc]
test edx, edx
je 0x4839a5
mov ecx, dword [ebp - 0x10]
call fcn.0048602a
mov edx, dword [esi + 0x10]
xor eax, eax
mov dword [esi + 0xc], eax
test edx, edx
je 0x4839bb
mov ecx, dword [ebp - 0x10]
call fcn.0048602a
xor eax, eax
mov dword [esi + 0x10], eax
movzx eax, word [esi + 0x20]
lea edx, [ebp - 0x14]
push eax
push dword [ebp - 0x1c]
mov ecx, edi
call fcn.00482fd1
mov eax, dword [ebp - 0x14]
pop ecx
pop ecx
mov byte [esi], 0xac
mov dword [esi + 8], 0x42ea5c
mov dword [esi + 0x14], eax
jmp 0x483ac0
mov ecx, dword [ebp - 0x10]
call fcn.00486cac
cmp dword [ebp - 0xc], 0
mov ecx, 0x42ea78
push dword [ebp + 0xc]
mov eax, 0x42ea68
cmovne eax, ecx
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x483a1f
push dword [ebp + 8]
push ecx
push eax
push 0x42ea90
push edi
call fcn.0045c6d7
add esp, 0x18
jmp 0x483a48
cmp dword [ebp + 8], 0
je 0x483a39
push dword [ebp + 8]
push eax
push 0x42eaa0
push edi
call fcn.0045c6d7
add esp, 0x14
jmp 0x483a48
push eax
push 0x42eaac
push edi
call fcn.0045c6d7
add esp, 0x10
mov ecx, dword [edi]
mov edx, esi
call fcn.0045b32e
mov eax, dword [ebp - 0x3c]
mov byte [edi + 0x11], 1
inc dword [eax + 0x14]
xor eax, eax
test dword [esi + 4], 0x810000
jne 0x483a95
mov edx, dword [esi + 0xc]
test edx, edx
je 0x483a77
mov ecx, dword [ebp - 0x10]
call fcn.0048602a
xor eax, eax
mov edx, dword [esi + 0x10]
mov dword [esi + 0xc], eax
test edx, edx
je 0x483a8b
mov ecx, dword [ebp - 0x10]
call fcn.0048602a
xor eax, eax
or dword [esi + 4], 0x800000
mov dword [esi + 0x10], eax
cmp word [esi + 0x20], ax
jl 0x483ab1
cmp dword [ebp - 0x1c], 0
je 0x483ab1
mov ecx, esi
call fcn.00482f5f
mov ecx, dword [ebp - 0x1c]
or dword [ecx + 0x38], eax
or dword [ecx + 0x3c], edx
mov eax, dword [ebp - 0x34]
mov byte [esi], al
cmp dword [ebp - 0xc], 1
jne 0x4838b9
mov eax, dword [edi]
xor ecx, ecx
cmp dword [eax + 0x16c], ecx
je 0x483ae7
mov al, byte [esi]
cmp al, 0xa7
je 0x483ad6
cmp al, 0x4d
jne 0x483ae7
push dword [ebx + 4]
mov edx, esi
mov ecx, edi
push dword [ebp - 0x24]
call fcn.0048fc4f
pop ecx
pop ecx
mov eax, dword [ebp - 0x3c]
jmp 0x483aef
mov eax, dword [eax + 0xc]
inc dword [eax + 0x10]
cmp eax, ebx
jne 0x483aec
jmp 0x483960