Function at 0x52398240
Capabilities:
Terminate process

Disassembly:
push 0x4c
push 0x523a95f8
call fcn.523a8484
mov esi, ecx
xor edi, edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x38], edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x5c], 1
lea ebx, [esi + 0xf00]
call fcn.52387c38
mov ecx, dword [ebx]
mov dword [ecx + 4], eax
mov eax, dword [ebx]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x24], ecx
mov ebx, dword [esi + 0xef0]
sub ebx, dword [esi + 0xec8]
sar ebx, 1
mov dword [ebp - 0x58], ebx
sub eax, dword [esi + 0xedc]
cdq
push 0x18
pop ecx
idiv ecx
mov dword [ebp - 0x34], eax
mov dword [esi + 0xe88], eax
mov dword [esi + 0xe8c], eax
push edi
push dword [ebp - 0x24]
call fcn.52392164
cmp eax, edi
je 0x52398574
mov dword [esi + 0xea8], eax
inc dword [eax + 4]
push edi
push dword [ebp - 0x24]
call fcn.52392164
cmp eax, edi
je 0x52398574
mov dword [esi + 0xeac], eax
inc dword [eax + 4]
mov eax, dword [ebp - 0x34]
lea ecx, [eax + 1]
cmp ecx, eax
ja 0x523982f0
push 0x2eeb
call dword [sym.imp.KERNEL32.dll_ExitProcess]
lea ecx, [ebx + ebx]
mov dword [ebp - 0x3c], ecx
lea ecx, [eax + 1]
shl ecx, 4
mov dword [ebp - 0x4c], ecx
mov ecx, eax
shl ecx, 2
mov dword [ebp - 0x50], ecx
mov edx, dword [ebp - 0x3c]
shr edx, 1
cmp ebx, edx
jne 0x523982e5
mov edx, dword [ebp - 0x4c]
shr edx, 4
lea ebx, [eax + 1]
cmp ebx, edx
jne 0x523982e5
mov edx, ecx
shr edx, 2
cmp eax, edx
jne 0x523982e5
lea edx, [ecx + 4]
shr edx, 2
cmp ebx, edx
jne 0x523982e5
shr ecx, 2
cmp eax, ecx
jne 0x523982e5
push 1
push edi
push dword [ebp - 0x3c]
call fcn.52394459
mov dword [ebp - 0x1c], eax
push 1
push edi
push dword [ebp - 0x4c]
call fcn.52394459
mov dword [ebp - 0x20], eax
push 1
push edi
mov ebx, dword [ebp - 0x50]
push ebx
call fcn.52394459
mov dword [esi + 0xe90], eax
push 1
push edi
push ebx
call fcn.52394459
mov dword [esi + 0xe94], eax
push 1
push edi
push ebx
call fcn.52394459
mov dword [esi + 0xe9c], eax
push 1
push edi
lea eax, [ebx + 4]
push eax
call fcn.52394459
mov dword [esi + 0xe98], eax
push 1
push edi
push ebx
call fcn.52394459
mov dword [esi + 0xea0], eax
push 1
push edi
push ebx
call fcn.52394459
mov dword [esi + 0xea4], eax
push dword [ebp - 0x3c]
push dword [esi + 0xec8]
mov ebx, dword [ebp - 0x1c]
push ebx
call sub.msvcrt.dll_memcpy
add esp, 0xc
sub ebx, dword [esi + 0xec8]
sar ebx, 1
mov eax, dword [esi + 0xe98]
mov dword [ebp - 0x30], eax
mov eax, dword [esi + 0xe9c]
mov dword [ebp - 0x48], eax
mov eax, dword [esi + 0xea0]
mov dword [ebp - 0x40], eax
mov eax, dword [esi + 0xea4]
mov dword [ebp - 0x44], eax
mov edi, dword [esi + 0xedc]
mov dword [ebp - 0x54], edi
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x28]
dec dword [ebp - 0x28]
test ecx, ecx
je 0x523984b3
lea ecx, [ebx + ebx]
mov edx, dword [edi]
add edx, ecx
mov dword [eax + 4], edx
mov edx, dword [edi]
add edx, ecx
mov dword [eax], edx
mov cl, byte [edi + 0x14]
mov byte [eax + 0xe], cl
mov ecx, dword [edi + 0xc]
mov edx, dword [ebp - 0x40]
mov dword [edx], ecx
add dword [ebp - 0x40], 4
mov ecx, dword [edi + 0x10]
mov edx, dword [ebp - 0x44]
mov dword [edx], ecx
add dword [ebp - 0x44], 4
mov ecx, dword [edi + 4]
mov edx, dword [ebp - 0x30]
mov dword [edx], ecx
add dword [ebp - 0x30], 4
mov ecx, dword [edi + 8]
mov edx, dword [ebp - 0x48]
mov dword [edx], ecx
add dword [ebp - 0x48], 4
mov ecx, dword [edi + 4]
cmp ecx, dword [ebp - 0x24]
je 0x52398474
push ecx
mov ecx, dword [esi + 0xea8]
call fcn.52387ba1
mov eax, dword [ebp - 0x2c]
mov ecx, dword [edi + 4]
cmp ecx, dword [ebp - 0x24]
je 0x5239848b
push ecx
mov ecx, dword [esi + 0xeac]
call fcn.52387ba1
mov eax, dword [ebp - 0x2c]
mov ecx, dword [edi + 8]
cmp ecx, dword [ebp - 0x24]
je 0x523984a2
push ecx
mov ecx, dword [esi + 0xeac]
call fcn.52387ba1
mov eax, dword [ebp - 0x2c]
add eax, 0x10
mov dword [ebp - 0x2c], eax
add edi, 0x18
mov dword [ebp - 0x54], edi
jmp 0x52398409
mov ecx, dword [esi + 0xea8]
xor edi, edi
mov dword [ecx + 0x1c], edi
mov ecx, dword [esi + 0xeac]
mov dword [ecx + 0x1c], edi
mov dword [eax + 4], edi
mov ecx, dword [esi + 0xef0]
lea ecx, [ecx + ebx*2]
mov dword [eax], ecx
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x30]
mov dword [ecx], eax
push edi
push edi
push edi
push edi
push dword [esi + 0xec4]
push dword [ebp - 0x34]
push dword [ebp - 0x20]
push dword [ebp - 0x58]
push dword [ebp - 0x1c]
call fcn.523a0f70
mov ebx, eax
mov dword [ebp - 0x38], ebx
inc dword [eax + 4]
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x20], edi
mov ecx, eax
call fcn.5239efd1
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x28], ecx
mov eax, ecx
dec ecx
mov dword [ebp - 0x28], ecx
test eax, eax
je 0x5239853d
mov eax, dword [ebx + 0x58]
mov eax, dword [eax + ecx*4]
sub eax, dword [ebx + 0x50]
sar eax, 4
mov edx, dword [esi + 0xe90]
mov dword [edx + eax*4], ecx
mov edx, dword [esi + 0xe94]
mov dword [edx + ecx*4], eax
jmp 0x52398513
mov dword [esi + 0xe84], ebx
inc dword [ebx + 4]
mov ecx, ebx
mov dword [ebp - 0x38], edi
dec dword [ecx + 4]
jne 0x52398556
mov eax, dword [ecx]
push 1
call dword [eax]
lea ebx, [esi + 0xec8]
push ebx
call fcn.523a74ee
mov dword [ebx], edi
add esi, 0xedc
push esi
call fcn.523a74ee
mov dword [esi], edi
xor edi, edi
mov dword [ebp - 4], 0xfffffffe
mov dword [ebp - 0x5c], 0
call fcn.5239858f
call fcn.523a84c9
ret