Function at 0x42de88
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff1c
push ebx
xor ebx, ebx
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0xe0], ebx
mov dword [ebp - 0xdc], ebx
mov dword [ebp - 0xd8], ebx
mov dword [ebp - 0xcc], ebx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x42e9a5
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0x7d], 0
mov word [ebp - 0x7a], 0x27
mov word [ebp - 0x7c], 0x22
lea eax, [ebp - 0xc8]
xor ecx, ecx
mov edx, 0x20
call fcn.004046d0
mov dword [ebp - 0x28], 1
mov word [ebp - 0x3e], 0x3b
mov word [ebp - 0xc8], 0x20
mov word [ebp - 0xc6], 9
mov word [ebp - 0xc4], 0
xor eax, eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], 1
mov dword [ebp - 0x64], 1
xor eax, eax
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 4]
cmp dword [eax + 0x20], 0
je 0x42e316
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
cmp word [eax], 0x22
je 0x42df53
mov eax, dword [ebp - 0x2c]
cmp word [eax], 0x27
jne 0x42df63
mov eax, dword [ebp - 0x2c]
mov ax, word [eax]
mov word [ebp - 0x40], ax
add dword [ebp - 0x2c], 2
jmp 0x42df69
mov word [ebp - 0x40], 0
mov dword [ebp - 0x5c], 1
jmp 0x42e25d
add dword [ebp - 0x2c], 2
mov eax, dword [ebp - 0x2c]
cmp word [eax], 0
je 0x42df8d
mov eax, dword [ebp - 0x2c]
cmp word [eax], 0x20
jbe 0x42df77
mov eax, dword [ebp - 0x2c]
mov ax, word [eax]
cmp ax, word [ebp - 0x40]
je 0x42e270
mov edx, 0x42e9b8
mov ecx, 4
mov eax, dword [ebp - 0x2c]
call fcn.00414cd4
test eax, eax
jne 0x42dfc7
mov eax, dword [ebp - 0x2c]
mov ax, word [eax + 8]
mov word [ebp - 0x3e], ax
add dword [ebp - 0x2c], 0xa
jmp 0x42e25d
mov edx, 0x42e9c4
mov ecx, 7
mov eax, dword [ebp - 0x2c]
call fcn.00414cd4
test eax, eax
jne 0x42e076
add dword [ebp - 0x2c], 0xe
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
jmp 0x42e007
mov eax, dword [ebp - 0x2c]
cmp word [eax], 0x20
jne 0x42e003
mov eax, dword [ebp - 0x2c]
mov ax, word [eax + 2]
cmp ax, word [ebp - 0x40]
jne 0x42e01c
add dword [ebp - 0x2c], 2
mov eax, dword [ebp - 0x2c]
cmp word [eax], 0
je 0x42e01c
mov eax, dword [ebp - 0x2c]
mov ax, word [eax]
cmp ax, word [ebp - 0x40]
jne 0x42dfed
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x30]
sar eax, 1
jns 0x42e029
adc eax, 0
cmp eax, 0x20
jge 0x42e049
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x30]
sar ecx, 1
jns 0x42e03b
adc ecx, 0
lea eax, [ebp - 0xc8]
mov edx, dword [ebp - 0x30]
call fcn.00419e80
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x30]
sar eax, 1
jns 0x42e056
adc eax, 0
mov word [ebp + eax*2 - 0xc8], 0
mov eax, dword [ebp - 0x2c]
cmp word [eax], 0
je 0x42e25d
add dword [ebp - 0x2c], 2
jmp 0x42e25d
mov edx, 0x42e9d4
mov ecx, 5
mov eax, dword [ebp - 0x2c]
call fcn.00414cd4
test eax, eax
jne 0x42e0b4
add dword [ebp - 0x2c], 0xa
push 0
lea eax, [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x2c]
push eax
call sub.msvcrt.dll_wcstol
add esp, 0xc
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jle 0x42e219
jmp 0x42e25d
mov edx, 0x42e9e0
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.00414cd4
test eax, eax
jne 0x42e0e3
add dword [ebp - 0x2c], 0x10
mov word [ebp - 0x7a], 0x60
mov word [ebp - 0x7c], 0x27
mov byte [ebp - 0x7d], 1
jmp 0x42e25d
mov edx, 0x42e9f4
mov ecx, 7
mov eax, dword [ebp - 0x2c]
call fcn.00414cd4
test eax, eax
jne 0x42e112
add dword [ebp - 0x2c], 0xe
mov word [ebp - 0x7a], 0x60
mov word [ebp - 0x7c], 0x27
mov byte [ebp - 0x7d], 1
jmp 0x42e25d
mov edx, 0x42ea04
mov ecx, 7
mov eax, dword [ebp - 0x2c]
call fcn.00414cd4
test eax, eax
jne 0x42e219
add dword [ebp - 0x2c], 0xe
xor eax, eax
mov dword [ebp - 0x64], eax
xor eax, eax
mov dword [ebp - 0x5c], eax
jmp 0x42e1f0
mov eax, dword [ebp - 0x2c]
cmp word [eax], 0x2a
jne 0x42e15a
add dword [ebp - 0x2c], 2
inc dword [ebp - 0x5c]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x60], eax
jmp 0x42e209
push 0
lea eax, [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x2c]
push eax
call sub.msvcrt.dll_wcstol
add esp, 0xc
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jle 0x42e219
mov eax, dword [ebp - 0x2c]
cmp word [eax], 0x2d
jne 0x42e1a2
push 0
lea eax, [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 2
push eax
call sub.msvcrt.dll_wcstol
add esp, 0xc
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jle 0x42e219
jmp 0x42e1a8
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x54], 0
jle 0x42e1d8
cmp dword [ebp - 0x58], 0x20
jge 0x42e1d8
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x58]
jg 0x42e1d8
inc dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x54]
dec ecx
mov eax, 1
shl eax, cl
or dword [ebp - 0x64], eax
inc dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x58]
jle 0x42e1bc
mov eax, dword [ebp - 0x2c]
cmp word [eax], 0x2c
jne 0x42e1e7
add dword [ebp - 0x2c], 2
jmp 0x42e1f0
mov eax, dword [ebp - 0x2c]
cmp word [eax], 0x2a
jne 0x42e209
mov eax, dword [ebp - 0x2c]
cmp word [eax], 0
je 0x42e209
mov eax, dword [ebp - 0x2c]
mov ax, word [eax]
cmp ax, word [ebp - 0x40]
jne 0x42e13f
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x48]
jle 0x42e25d
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x48], eax
jmp 0x42e25d
push 0
lea edx, [ebp - 0xcc]
mov eax, dword [0x43696c]
call fcn.00409578
mov eax, dword [ebp - 0xcc]
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0xd4], edx
mov byte [ebp - 0xd0], 0xa
lea ecx, [ebp - 0xd4]
mov edx, 1
call fcn.0042a3c8
mov dword [ebp - 0x10], 1
jmp 0x42e97c
cmp dword [ebp - 0x2c], 0
je 0x42e270
mov eax, dword [ebp - 0x2c]
cmp word [eax], 0
jne 0x42df7b
cmp dword [ebp - 0x48], 1
jle 0x42e316
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x48]
mov edx, eax
add edx, edx
mov eax, dword [0x4368f8]
call fcn.0041aa50
mov dword [0x4368f8], eax
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x48]
push eax
mov eax, 0x44f974
mov ecx, 1
mov edx, dword [0x42b938]
call fcn.00407df0
add esp, 4
xor eax, eax
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x48]
jge 0x42e303
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
xor edx, edx
push edx
push eax
mov eax, dword [ebp - 0x54]
cdq
add eax, dword [esp]
adc edx, dword [esp + 4]
add esp, 8
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0x54]
mov ecx, dword [0x4368f8]
mov word [ecx + edx*2], ax
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x54]
mov edx, dword [0x44f974]
xor ecx, ecx
mov dword [edx + eax*4], ecx
inc dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x48]
jl 0x42e2bf
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x54]
mov edx, dword [0x4368f8]
mov word [edx + eax*2 + 2], 0
cmp dword [ebp - 0xc], 0
je 0x42e334
mov eax, dword [ebp - 0xc]
mov ax, word [eax]
cmp ax, word [ebp - 0x7a]
je 0x42e343
mov eax, dword [ebp - 0xc]
mov ax, word [eax]
cmp ax, word [ebp - 0x7c]
je 0x42e343
xor ecx, ecx
xor edx, edx
mov eax, dword [ebp - 0xc]
call fcn.00423e50
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x50], eax
xor eax, eax
mov dword [ebp - 0x20], eax
jmp 0x42e929
call fcn.0042d900
call fcn.0042b7a0
xor eax, eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0xc]
call fcn.00419fec
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0xc]
mov ax, word [eax]
cmp ax, word [ebp - 0x7a]
jne 0x42e562
cmp dword [ebp - 0x24], 1
jle 0x42e562
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x24]
mov ax, word [eax + edx*2 - 2]
cmp ax, word [ebp - 0x7a]
jne 0x42e562
add dword [ebp - 0xc], 2
sub dword [ebp - 0x24], 2
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x24]
mov word [eax + edx*2], 0
mov eax, dword [ebp - 0x24]
inc eax
call fcn.0041a964
mov dword [ebp - 0x6c], eax
push 0x42ea14
mov eax, dword [ebp - 0xc]
push eax
call sub.msvcrt.dll__wpopen
add esp, 8
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jne 0x42e42c
push 0
lea edx, [ebp - 0xd8]
mov eax, dword [0x436c0c]
call fcn.00409578
mov eax, dword [ebp - 0xd8]
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0xd4], edx
mov byte [ebp - 0xd0], 0xa
lea ecx, [ebp - 0xd4]
mov edx, 1
call fcn.0042a3c8
call sub.kernel32.dll_GetLastError_2
mov dword [ebp - 0x10], eax
jmp 0x42e97c
xor eax, eax
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x74], eax
xor eax, eax
mov dword [ebp - 0x6c], eax
jmp 0x42e4f8
mov eax, dword [ebp - 0x78]
sub eax, dword [ebp - 0x74]
cmp eax, 0x200
jge 0x42e4c7
add dword [ebp - 0x78], 0x200
cmp dword [ebp - 0x6c], 0
je 0x42e468
lea eax, [ebp - 0x6c]
mov edx, dword [ebp - 0x78]
call fcn.00403f60
jmp 0x42e473
mov eax, dword [ebp - 0x78]
call fcn.00403f2c
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jne 0x42e4c7
push 0
lea edx, [ebp - 0xdc]
mov eax, dword [0x436978]
call fcn.00409578
mov eax, dword [ebp - 0xdc]
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0xd4], edx
mov byte [ebp - 0xd0], 0xa
lea ecx, [ebp - 0xd4]
mov edx, 1
call fcn.0042a3c8
mov eax, dword [ebp - 0x68]
push eax
call sub.msvcrt.dll__pclose
pop ecx
mov dword [ebp - 0x10], 8
jmp 0x42e97c
mov eax, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x74]
mov byte [eax + edx], 0
mov eax, dword [ebp - 0x68]
push eax
push 0x200
mov eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0x74]
push eax
call sub.msvcrt.dll_fgets
add esp, 0xc
test eax, eax
je 0x42e518
mov eax, dword [ebp - 0x6c]
call fcn.00414b34
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x68]
push eax
call sub.msvcrt.dll_feof
pop ecx
test eax, eax
jne 0x42e518
mov eax, dword [ebp - 0x68]
push eax
call sub.msvcrt.dll_ferror
pop ecx
test eax, eax
je 0x42e441
mov eax, dword [ebp - 0x68]
push eax
call sub.msvcrt.dll__pclose
pop ecx
mov eax, dword [ebp - 0x74]
add eax, 2
mov edx, eax
add edx, edx
lea eax, [ebp - 0x6c]
call fcn.00403f60
mov eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0x74]
mov dword [ebp - 0x70], eax
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x74]
call fcn.004040d0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
jmp 0x42e6dd
mov eax, dword [ebp - 0xc]
mov ax, word [eax]
cmp ax, word [ebp - 0x7c]
jne 0x42e5b0
cmp dword [ebp - 0x24], 1
jle 0x42e5b0
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x24]
mov ax, word [eax + edx*2 - 2]
cmp ax, word [ebp - 0x7c]
jne 0x42e5b0
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x24]
mov word [eax + edx*2 - 2], 0xa
add dword [ebp - 0xc], 2
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x2c], eax
sub dword [ebp - 0x24], 2
mov eax, dword [ebp - 0x24]
add eax, eax
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x38], eax
jmp 0x42e755
cmp byte [ebp - 0x7d], 0
je 0x42e5c3
mov eax, dword [ebp - 0xc]
call fcn.0042af54
mov dword [ebp - 0x44], eax
jmp 0x42e5c9
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x44], eax
push 0
push 0
push 3
push 0
push 5
push 0x80000000
mov eax, dword [ebp - 0x44]
push eax
call sub.kernel32.dll_CreateFileW_1
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xffffffff
jne 0x42e62f
push 0
lea edx, [ebp - 0xe0]
mov eax, dword [0x436be8]
call fcn.00409578
mov eax, dword [ebp - 0xe0]
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0xd4], edx
mov byte [ebp - 0xd0], 0xa
lea ecx, [ebp - 0xd4]
mov edx, 1
call fcn.0042a3c8
call sub.kernel32.dll_GetLastError_2
mov dword [ebp - 0x10], eax
jmp 0x42e97c
push 2
push 0
push 0
mov eax, dword [ebp - 0x14]
push eax
call sub.kernel32.dll_SetFilePointer_1
mov dword [ebp - 0x18], eax
push 0
push 0
push 0
mov eax, dword [ebp - 0x14]
push eax
call sub.kernel32.dll_SetFilePointer_1
mov eax, dword [ebp - 0x18]
add eax, 2
add eax, eax
call fcn.00403f2c
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jne 0x42e6b3
push 0
lea edx, [ebp - 0xe4]
mov eax, dword [0x436978]
call fcn.00409578
mov eax, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0xd4], edx
mov byte [ebp - 0xd0], 0xa
lea ecx, [ebp - 0xd4]
mov edx, 1
call fcn.0042a3c8
mov eax, dword [ebp - 0x14]
push eax
call sub.kernel32.dll_CloseHandle_1
mov dword [ebp - 0x10], 8
jmp 0x42e97c
mov dword [ebp - 0x1c], 0xffffffff
push 0
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x14]
push eax
call sub.kernel32.dll_ReadFile_1
mov eax, dword [ebp - 0x14]
push eax
call sub.kernel32.dll_CloseHandle_1
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x18]
jne 0x42e755
mov eax, dword [0x436bec]
mov eax, dword [eax]
call fcn.0042fc7c
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x84]
push eax
mov eax, dword [0x436bec]
mov eax, dword [eax]
push eax
call sub.kernel32.dll_MultiByteToWideChar_1
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x18]
add eax, eax
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x2c]
je 0x42e741
mov eax, dword [ebp - 0x38]
cmp word [eax - 2], 0xa
je 0x42e74d
mov eax, dword [ebp - 0x38]
mov word [eax], 0xa
add dword [ebp - 0x38], 2
mov eax, dword [ebp - 0x38]
mov word [eax], 0
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x38]
jae 0x42e908
call fcn.0042b7a0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
mov dx, 0xa
mov eax, dword [ebp - 0x30]
call fcn.00419f28
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
je 0x42e908
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x30]
jbe 0x42e7a0
mov eax, dword [ebp - 0x2c]
cmp word [eax - 2], 0xd
jne 0x42e7a0
mov eax, dword [ebp - 0x2c]
mov word [eax - 2], 0
mov eax, dword [ebp - 0x2c]
mov word [eax], 0
add dword [ebp - 0x2c], 2
cmp dword [ebp - 0x4c], 0
jne 0x42e8f9
mov eax, dword [ebp - 0x48]
dec eax
test eax, eax
jle 0x42e7e7
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x54], 1
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x54]
mov edx, dword [0x44f974]
xor ecx, ecx
mov dword [edx + eax*4], ecx
inc dword [ebp - 0x54]
dec dword [ebp - 0x88]
jne 0x42e7cb
xor eax, eax
mov dword [ebp - 0x54], eax
xor eax, eax
mov dword [ebp - 0x5c], eax
jmp 0x42e8c4
call fcn.0042b7a0
jmp 0x42e801
add dword [ebp - 0x30], 2
mov eax, dword [ebp - 0x30]
cmp word [eax], 0
je 0x42e81f
lea eax, [ebp - 0xc8]
mov edx, dword [ebp - 0x30]
mov dx, word [edx]
call fcn.00419f28
test eax, eax
jne 0x42e7fd
cmp dword [ebp - 0x54], 0
jne 0x42e835
mov eax, dword [ebp - 0x30]
mov ax, word [eax]
cmp ax, word [ebp - 0x3e]
je 0x42e8d1
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x60], 0
je 0x42e865
mov eax, dword [ebp - 0x5c]
inc eax
cmp eax, dword [ebp - 0x60]
jne 0x42e865
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x5c]
mov edx, dword [0x44f974]
mov ecx, dword [ebp - 0x34]
mov dword [edx + eax*4], ecx
inc dword [ebp - 0x5c]
jmp 0x42e8d1
add dword [ebp - 0x30], 2
mov eax, dword [ebp - 0x30]
cmp word [eax], 0
je 0x42e883
lea eax, [ebp - 0xc8]
mov edx, dword [ebp - 0x30]
mov dx, word [edx]
call fcn.00419f28
test eax, eax
je 0x42e861
mov eax, dword [ebp - 0x30]
mov word [eax], 0
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x30]
je 0x42e8c0
cmp dword [ebp - 0x54], 0x20
jge 0x42e8c0
mov ecx, dword [ebp - 0x54]
mov eax, 1
shl eax, cl
and eax, dword [ebp - 0x64]
je 0x42e8bd
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x5c]
mov edx, dword [0x44f974]
mov ecx, dword [ebp - 0x34]
mov dword [edx + eax*4], ecx
inc dword [ebp - 0x5c]
inc dword [ebp - 0x54]
add dword [ebp - 0x30], 2
mov eax, dword [ebp - 0x30]
cmp word [eax], 0
jne 0x42e7f6
cmp dword [ebp - 0x5c], 0
je 0x42e8fc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov dl, byte [ebp + 8]
call fcn.0042ec38
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x20]
call fcn.0042f190
mov dword [ebp - 0x20], eax
mov byte [ebp + 8], 0
jmp 0x42e8fc
dec dword [ebp - 0x4c]
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x38]
jb 0x42e761
cmp dword [ebp - 0x3c], 0
je 0x42e91b
mov eax, dword [ebp - 0x3c]
call fcn.00403f48
xor eax, eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x24]
add eax, eax
add eax, dword [ebp - 0xc]
add eax, 2
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
cmp word [eax], 0
je 0x42e93f
cmp byte [0x4368f4], 0
je 0x42e353
cmp dword [ebp - 0x48], 1
jle 0x42e976
cmp dword [0x4368f8], 0
je 0x42e976
mov eax, dword [0x4368f8]
cmp word [eax], 0
je 0x42e976
mov eax, dword [0x4368f8]
mov edx, dword [ebp - 8]
mov word [eax + edx*2 + 2], 0
mov eax, dword [0x44f974]
mov edx, dword [ebp - 8]
xor ecx, ecx
mov dword [eax + edx*4 + 4], ecx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x10], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x42e9ac
lea eax, [ebp - 0xe4]
mov edx, 4
call fcn.00406a7c
lea eax, [ebp - 0xcc]
call fcn.00406a1c
ret