Function at 0x427520
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49f9d7
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x2e8
mov eax, dword [0x4dd094]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x230], esi
mov dword [ebp - 4], 2
mov eax, dword [0x4e0c4c]
mov eax, dword [eax]
cmp dword [eax + 4], 0xffffffff
jne 0x427648
mov ecx, dword [ebx + 0x1c]
cmp ecx, 0x10
jb 0x4275b5
mov edx, dword [ebx + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4275ab
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42854d
push ecx
push edx
call fcn.00476d74
add esp, 8
mov ecx, dword [ebx + 0x34]
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x1c], 0xf
mov byte [ebx + 8], 0
cmp ecx, 0x10
jb 0x4275fb
mov edx, dword [ebx + 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4275f1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42854d
push ecx
push edx
call fcn.00476d74
add esp, 8
mov ecx, dword [ebx + 0x4c]
mov dword [ebx + 0x30], 0
mov dword [ebx + 0x34], 0xf
mov byte [ebx + 0x20], 0
cmp ecx, 0x10
jb 0x427641
mov edx, dword [ebx + 0x38]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x427637
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42854d
push ecx
push edx
call fcn.00476d74
add esp, 8
xor al, al
jmp 0x428362
call fcn.00427370
test al, al
je 0x4276d9
movaps xmm0, xmmword [0x4d7380]
xor ecx, ecx
movups xmmword [ebp - 0x2b8], xmm0
mov dword [ebp - 0x298], 0x4e584a4e
movaps xmm0, xmmword [0x4d72c0]
movups xmmword [ebp - 0x2a8], xmm0
mov dword [ebp - 0x294], 0x52595f0b
mov dword [ebp - 0x290], 0x4a4c4a0b
mov word [ebp - 0x28c], 0x4542
mov byte [ebp - 0x28a], 0
mov al, byte [ebp - 0x2b8]
xor byte [ebp + ecx - 0x2b7], al
inc ecx
cmp ecx, 0x2d
jb 0x4276a1
push 0x30
push str.FunACS
lea eax, [ebp - 0x2b7]
mov byte [ebp - 0x28a], 0
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov ax, word [esi + 0x272]
cmp ax, word [esi + 0x270]
jge 0x428493
push 0x130
lea eax, [ebp - 0x178]
push 0
push eax
call fcn.00478780
sub esp, 0x1c
lea ecx, [ebp - 0x178]
mov eax, esp
mov dword [eax], 0x4d6e78
mov dword [eax + 0x24], eax
call fcn.004039c0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x260]
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x23c], 1
push 0x4d1f99
mov byte [ebp - 0x229], 4
movups xmmword [ebp - 0x260], xmm0
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0
call fcn.00408290
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x288]
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x278], 0
push 0x4d1f99
movups xmmword [ebp - 0x288], xmm0
mov dword [ebp - 0x274], 0
call fcn.00408290
lea eax, [ebp - 0x23c]
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0x229]
mov dword [ebp - 0x238], 0x15
push eax
lea eax, [ebp - 0x260]
push eax
lea eax, [ebp - 0x288]
push eax
lea eax, [ebp - 0x238]
push eax
lea eax, [ebx + 8]
push eax
lea ecx, [ebp - 0x178]
call fcn.00403ff0
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x274]
cmp ecx, 0x10
jb 0x427810
mov edx, dword [ebp - 0x288]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x427806
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x428584
push ecx
push edx
call fcn.00476d74
add esp, 8
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x24c]
cmp ecx, 0x10
jb 0x42784e
mov edx, dword [ebp - 0x260]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x427844
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x428584
push ecx
push edx
call fcn.00476d74
add esp, 8
lea eax, [ebp - 0x2f8]
mov dword [ebp - method.std::_Func_impl_no_alloc_int____cdecl___void___double__double__double__double___int__void___double__double__double__double_.virtual_0], vtable.std::_Func_impl_no_alloc_int____cdecl___void___double__double__double__double___int__void___double__double__double__double_.0
mov dword [ebp - 0x2f4], 0x427120
mov dword [ebp - 0x2d4], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xb0]
push eax
mov dword [ebp - 0x7c], 0xffffffff
call fcn.00404e00
mov eax, dword [ebp - 0xb8]
xorps xmm0, xmm0
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x2d4]
mov dword [ebp - 0x80], eax
movsd qword [ebp - 0x88], xmm0
mov byte [ebp - 0x78], 1
test ecx, ecx
je 0x4278be
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
lea eax, [ebp - 0x2f8]
cmp ecx, eax
setne al
push eax
call edx
lea edi, [esi + 8]
lea eax, [ebx + 0x38]
cmp edi, eax
je 0x4278db
cmp dword [ebx + 0x4c], 0x10
mov ecx, edi
push dword [ebx + 0x48]
cmovae eax, dword [ebx + 0x38]
push eax
call fcn.004028c0
mov ecx, dword [ebx + 0x30]
mov eax, accept
sub eax, ecx
cmp eax, 1
jb 0x428552
cmp dword [ebx + 0x34], 0x10
lea eax, [ebx + 0x20]
push 1
cmovae eax, dword [ebx + 0x20]
push 0x4d2150
push ecx
push eax
push ecx
push dword [ebp - 0x230]
lea ecx, [ebp - 0x288]
call fcn.00408c50
mov byte [ebp - 4], 7
lea edx, [ebx + 0x38]
cmp dword [ebx + 0x4c], 0x10
mov eax, dword [ebp - 0x278]
cmovae edx, dword [ebx + 0x38]
mov ecx, dword [ebx + 0x48]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x274]
sub eax, dword [ebp - 0x23c]
mov dword [ebp - 0x238], ecx
push ecx
push edx
cmp ecx, eax
ja 0x42799d
mov eax, dword [ebp - 0x23c]
lea esi, [ebp - 0x288]
add eax, ecx
cmp dword [ebp - 0x274], 0x10
mov dword [ebp - 0x278], eax
cmovae esi, dword [ebp - 0x288]
mov eax, dword [ebp - 0x23c]
add eax, esi
push eax
call fcn.00478b50
mov eax, dword [ebp - 0x238]
add esp, 0xc
mov ecx, dword [ebp - 0x23c]
add eax, esi
mov esi, dword [ebp - 0x230]
mov byte [eax + ecx], 0
lea eax, [ebp - 0x288]
jmp 0x4279af
push dword [ebp - 0x230]
push ecx
lea ecx, [ebp - 0x288]
call fcn.00408130
xorps xmm0, xmm0
mov dword [ebp - 0x2c0], 0
movups xmmword [ebp - 0x2d0], xmm0
mov dword [ebp - 0x2bc], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x2d0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x2c0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 8
cmp dword [ebx + 0x48], 0
je 0x427e53
cmp dword [ebp - 0x2c0], 0
je 0x427e53
mov eax, dword [ebp - 0xb8]
test eax, eax
jne 0x427aaf
test byte [ebp - 0x104], 1
je 0x427e53
push 0x4e
xorps xmm0, xmm0
mov dword [ebp - 0x250], eax
push str._FTPClient__Error__Curl_session_is_not_initialized___Use_InitSession___before.
lea ecx, [ebp - 0x260]
mov dword [ebp - 0x24c], eax
movups xmmword [ebp - 0x260], xmm0
call fcn.00408290
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
je 0x428557
mov eax, dword [ecx]
lea edx, [ebp - 0x260]
push edx
call dword [eax + 8]
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x24c]
cmp ecx, 0x10
jb 0x427e53
mov edx, dword [ebp - 0x260]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x427e49
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42855c
jmp 0x427e49
push eax
call fcn.0042c370
add esp, 4
mov byte [ebp - 0x229], 0
lea eax, [ebp - 0x2d0]
lea ecx, [ebp - 0x178]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.00404300
push 0xb0
lea eax, [ebp - 0x228]
mov byte [ebp - 4], 0xa
push 0
push eax
call fcn.00478780
add esp, 8
lea ecx, [ebp - 0x228]
call fcn.00405c20
mov byte [ebp - 4], 0xb
lea eax, [ebx + 0x38]
cmp dword [ebx + 0x4c], 0x10
lea ecx, [ebp - 0x224]
cmovae eax, dword [ebx + 0x38]
sub esp, 8
push eax
call fcn.00407240
test eax, eax
lea ecx, [ebp - 0x228]
mov eax, dword [ebp - 0x228]
je 0x427b3a
add ecx, dword [eax + 4]
xor edx, edx
mov eax, 4
cmp dword [ecx + 0x38], edx
cmovne eax, edx
jmp 0x427b4f
add ecx, dword [eax + 4]
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push 0
push eax
call fcn.00403880
mov eax, dword [ebp - 0x228]
mov eax, dword [eax + 4]
test byte [ebp + eax - 0x21c], 6
jne 0x427d0f
cmp dword [ebp - 0x30], 0x10
lea eax, [ebp - 0x44]
cmovae eax, dword [ebp - 0x44]
push eax
push 0x2712
push dword [ebp - 0xb8]
call fcn.00430870
add esp, 0xc
push 0x404da0
push 0x4e2b
push dword [ebp - 0xb8]
call fcn.00430870
add esp, 0xc
lea eax, [ebp - 0x228]
push eax
push 0x2711
push dword [ebp - 0xb8]
call fcn.00430870
add esp, 0xc
lea ecx, [ebp - 0x178]
call fcn.00404a70
mov dword [ebp - 0x230], eax
test eax, eax
je 0x427caa
test byte [ebp - 0x104], 1
je 0x427cb1
push eax
call fcn.0042ce90
add esp, 4
lea edx, [ebp - 0x2d0]
cmp dword [ebp - 0x2bc], 0x10
lea ecx, [ebp - 0x140]
xorps xmm0, xmm0
cmovae edx, dword [ebp - 0x2d0]
cmp dword [ebp - 0x12c], 0x10
push eax
push dword [ebp - 0x230]
cmovae ecx, dword [ebp - 0x140]
push edx
push ecx
sub esp, 0x18
mov ecx, esp
push 0x48
movups xmmword [ecx], xmm0
push str._FTPClient__Error__Unable_to_import_remote_File__s__s__Error___d___s_.
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00408290
lea eax, [ebp - 0x2a4]
push eax
call fcn.00404c30
add esp, 0x2c
mov edx, eax
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
je 0x428561
mov eax, dword [ecx]
push edx
call dword [eax + 8]
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x290]
cmp ecx, 0x10
jb 0x427cb1
mov edx, dword [ebp - 0x2a4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x427c9e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x428566
push ecx
push edx
call fcn.00476d74
add esp, 8
jmp 0x427cb1
mov byte [ebp - 0x229], 1
lea ecx, [ebp - 0x224]
call fcn.00406b10
test eax, eax
jne 0x427ce9
mov eax, dword [ebp - 0x228]
lea ecx, [ebp - 0x228]
push 0
add ecx, dword [eax + 4]
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.00403880
cmp byte [ebp - 0x229], 0
jne 0x427da5
cmp dword [ebx + 0x4c], 0x10
lea eax, [ebx + 0x38]
cmovae eax, dword [ebx + 0x38]
push eax
call fcn.0047fb0c
add esp, 4
jmp 0x427da5
test byte [ebp - 0x104], 1
je 0x427da5
push 0x4e
xorps xmm0, xmm0
mov dword [ebp - 0x250], 0
push str._FTPClient__Error__Unable_to_open_local_file__s_in_CFTPClient::DownloadFile__.
lea ecx, [ebp - 0x260]
mov dword [ebp - 0x24c], 0
movups xmmword [ebp - 0x260], xmm0
call fcn.00408290
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
je 0x42856b
mov eax, dword [ecx]
lea edx, [ebp - 0x260]
push edx
call dword [eax + 8]
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x24c]
cmp ecx, 0x10
jb 0x427da5
mov edx, dword [ebp - 0x260]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x427d9b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x428570
push ecx
push edx
call fcn.00476d74
add esp, 8
mov eax, dword [ebp - 0x228]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x228]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x22c], eax
lea ecx, [ebp - 0x224]
call fcn.00405b70
mov eax, dword [ebp - 0x228]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ostream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x228]
mov ecx, dword [eax + 4]
lea eax, [ecx - 8]
mov dword [ebp + ecx - 0x22c], eax
lea eax, [ebp - 0x1c0]
mov byte [ebp - 4], 0xe
push eax
mov dword [ebp - method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.00475a0a
mov byte [ebp - 4], 8
add esp, 4
mov ecx, dword [ebp - 0x30]
cmp ecx, 0x10
jb 0x427e53
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x427e49
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x428575
push ecx
push edx
call fcn.00476d74
add esp, 8
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x2bc]
cmp ecx, 0x10
jb 0x427e91
mov edx, dword [ebp - 0x2d0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x427e87
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42857a
push ecx
push edx
call fcn.00476d74
add esp, 8
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x274]
mov dword [ebp - 0x2c0], 0
mov dword [ebp - 0x2bc], 0xf
mov byte [ebp - 0x2d0], 0
cmp ecx, 0x10
jb 0x427eea
mov edx, dword [ebp - 0x288]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x427ee0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42857a
push ecx
push edx
call fcn.00476d74
add esp, 8
lea ecx, [ebp - 0x178]
call fcn.00404200
mov ecx, dword [esi + 0x18]
xorps xmm0, xmm0
add ecx, 0xfffffffc
mov dword [ebp - 0x1c], 0
cmp dword [edi + 0x10], ecx
movups xmmword [ebp - 0x2c], xmm0
cmovb ecx, dword [edi + 0x10]
cmp dword [edi + 0x14], 0x10
mov dword [ebp - 0x18], 0
jb 0x427f1f
mov edi, dword [edi]
push ecx
push edi
lea ecx, [ebp - 0x2c]
call fcn.00408290
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], 0x10
cmovae eax, dword [ebp - 0x2c]
push eax
call fcn.00482406
add esp, 4
mov word [esi + 0x272], ax
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [ebx + 0x4c], 0x10
lea ecx, [ebx + 0x38]
lea edi, [esi + 0x2c]
cmovae ecx, dword [ebx + 0x38]
mov edx, edi
sub esp, 8
call fcn.0042bf20
cmp dword [ebx + 0x4c], 0x10
lea eax, [ebx + 0x38]
cmovae eax, dword [ebx + 0x38]
push eax
call fcn.0047fb0c
add esp, 0xc
mov dword [ebp - 0x270], 0x6a5c530f
mov cl, 0xf
mov dword [ebp - 0x26c], 0x7d6a797d
mov dword [ebp - 0x268], 0x66616621
xor eax, eax
mov byte [ebp - 0x264], 0
xor byte [ebp + eax - 0x26f], cl
inc eax
cmp eax, 0xb
jae 0x427fba
mov cl, byte [ebp - 0x270]
jmp 0x427fa5
mov ecx, edi
mov byte [ebp - 0x264], 0
xorps xmm0, xmm0
mov dword [ebp - 0x34], 0
movups xmmword [ebp - 0x44], xmm0
mov dword [ebp - 0x30], 0
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x427fe0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x44]
call fcn.00408290
lea eax, [ebp - 0x26f]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0x44]
call fcn.004061a0
xorps xmm0, xmm0
mov dword [ebp - 0x250], 0
movups xmmword [ebp - 0x260], xmm0
mov dword [ebp - 0x24c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x260], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x250], xmm0
mov dword [eax + 0x10], 0
lea ecx, [ebp - 0x2a4]
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x260]
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x24c], 0x10
movsx edx, word [esi + 0x272]
cmovae eax, dword [ebp - 0x260]
mov dword [ebp - 0x230], eax
call fcn.00409ef0
mov edi, eax
cmp dword [edi + 0x14], 0x10
jb 0x428086
mov edi, dword [edi]
push dword [ebp - 0x230]
mov dh, 0x2f
mov byte [ebp - 0x248], 0x55
mov al, 0x69
mov byte [ebp - 0x238], dh
xor al, dh
mov byte [ebp - 0x229], 0x3b
mov byte [ebp - 0x237], al
mov cl, 0x46
xor cl, dh
mov byte [ebp - 0x232], 0
mov dl, 0x43
mov byte [ebp - 0x236], cl
xor dl, dh
mov byte [ebp - 0x240], 0
mov ah, 0x4a
mov byte [ebp - 0x235], dl
xor ah, dh
mov byte [ebp - 0x232], 0
mov ch, 0x5c
mov byte [ebp - 0x234], ah
xor ch, dh
mov byte [ebp - 0x240], 0
mov al, 3
mov byte [ebp - 0x233], ch
xor al, byte [ebp - 0x248]
mov cl, 0x30
mov byte [ebp - 0x247], al
mov dl, 0x27
mov al, byte [ebp - 0x248]
mov ah, 0x26
xor cl, al
xor dl, al
xor ah, al
mov byte [ebp - 0x246], cl
mov ch, 0x3c
mov byte [ebp - 0x244], ah
xor ch, al
mov byte [ebp - 0x245], dl
mov dh, 0x3a
mov byte [ebp - 0x243], ch
xor dh, al
mov al, byte [ebp - 0x229]
xor al, byte [ebp - 0x248]
mov byte [ebp - 0x241], al
lea eax, [ebp - 0x237]
push edi
push eax
lea eax, [ebp - 0x247]
mov byte [ebp - 0x242], dh
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [ebp - 0x290]
cmp ecx, 0x10
jb 0x428197
mov edx, dword [ebp - 0x2a4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42818d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42857f
push ecx
push edx
call fcn.00476d74
add esp, 8
mov ecx, dword [ebp - 0x24c]
mov dword [ebp - 0x294], 0
mov dword [ebp - 0x290], 0xf
mov byte [ebp - 0x2a4], 0
cmp ecx, 0x10
jb 0x4281ec
mov edx, dword [ebp - 0x260]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4281e2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42857f
push ecx
push edx
call fcn.00476d74
add esp, 8
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0xf
mov byte [ebp - 0x260], 0
cmp ecx, 0x10
jb 0x42823b
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x428231
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42857f
push ecx
push edx
call fcn.00476d74
add esp, 8
mov ax, word [esi + 0x272]
mov ecx, dword [ebp - 0x18]
cmp ax, word [esi + 0x270]
jne 0x428382
cmp ecx, 0x10
jb 0x428283
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x428279
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x428584
push ecx
push edx
call fcn.00476d74
add esp, 8
lea ecx, [ebp - 0x178]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.00403c30
mov ecx, dword [ebx + 0x1c]
cmp ecx, 0x10
jb 0x4282d4
mov edx, dword [ebx + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4282ca
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x428584
push ecx
push edx
call fcn.00476d74
add esp, 8
mov ecx, dword [ebx + 0x34]
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x1c], 0xf
mov byte [ebx + 8], 0
cmp ecx, 0x10
jb 0x42831a
mov edx, dword [ebx + 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x428310
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x428584
push ecx
push edx
call fcn.00476d74
add esp, 8
mov ecx, dword [ebx + 0x4c]
mov dword [ebx + 0x30], 0
mov dword [ebx + 0x34], 0xf
mov byte [ebx + 0x20], 0
cmp ecx, 0x10
jb 0x428360
mov edx, dword [ebx + 0x38]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x428356
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x428584
push ecx
push edx
call fcn.00476d74
add esp, 8
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00476d2c
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x48
cmp ecx, 0x10
jb 0x4283b3
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4283a9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x428584
push ecx
push edx
call fcn.00476d74
add esp, 8
lea ecx, [ebp - 0x178]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.00403c30
mov ecx, dword [ebx + 0x1c]
cmp ecx, 0x10
jb 0x428404
mov edx, dword [ebx + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4283fa
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x428584
push ecx
push edx
call fcn.00476d74
add esp, 8
mov ecx, dword [ebx + 0x34]
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x1c], 0xf
mov byte [ebx + 8], 0
cmp ecx, 0x10
jb 0x42844a
mov edx, dword [ebx + 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x428440
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x428584
push ecx
push edx
call fcn.00476d74
add esp, 8
mov ecx, dword [ebx + 0x4c]
mov dword [ebx + 0x30], 0
mov dword [ebx + 0x34], 0xf
mov byte [ebx + 0x20], 0
cmp ecx, 0x10
jb 0x427641
mov edx, dword [ebx + 0x38]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x427637
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x428584
jmp 0x427637
mov ecx, dword [ebx + 0x1c]
cmp ecx, 0x10
jb 0x4284c7
mov edx, dword [ebx + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4284bd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42854d
push ecx
push edx
call fcn.00476d74
add esp, 8
mov ecx, dword [ebx + 0x34]
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x1c], 0xf
mov byte [ebx + 8], 0
cmp ecx, 0x10
jb 0x428509
mov edx, dword [ebx + 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4284ff
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42854d
push ecx
push edx
call fcn.00476d74
add esp, 8
mov ecx, dword [ebx + 0x4c]
mov dword [ebx + 0x30], 0
mov dword [ebx + 0x34], 0xf
mov byte [ebx + 0x20], 0
cmp ecx, 0x10
jb 0x428360
mov edx, dword [ebx + 0x38]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x428356
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x428356
call fcn.0047ebc0
call fcn.00401830
call fcn.00475412
call fcn.0047ebc0
call fcn.00475412
call fcn.0047ebc0
call fcn.00475412
call fcn.0047ebc0
call fcn.0047ebc0
call fcn.0047ebc0
call fcn.0047ebc0
call fcn.0047ebc0
int3