Function at 0x425110
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov eax, 0x12a4
call fcn.00440ae0
lea eax, [ebp - 0x109c]
mov ecx, 0x20a
lea edx, [ebp - 0xe66]
lea esi, [ebp - 0x63e]
lea edi, [ebp - 0x848]
lea ebx, [ebp - 0x434]
mov dword [ebp - 0x10c4], eax
lea eax, [ebp - 0xc5c]
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x10a4], 0xffffffff
mov dword [esp], edx
mov edx, dword [ebp - 0x10c4]
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], 0x20a
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], 0x20a
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], 0x20a
mov dword [esp + 0x20], eax
mov dword [ebp - 0x10c8], ecx
call fcn.004236a0
mov eax, 0
mov ecx, 0x20a
lea edx, [ebp - 0x1070]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [ebp - 0x10cc], eax
mov dword [ebp - 0x10d0], ecx
call fcn.00406910
mov ecx, 0x20a
lea edx, [ebp - 0x1070]
mov dword [esp], edx
mov dword [esp + 4], 0x20a
mov dword [ebp - 0x10d4], eax
mov dword [ebp - 0x10d8], ecx
call fcn.004080e0
lea eax, [ebp - 0x1070]
mov ecx, dword [0x46d91c]
mov edx, esp
mov dword [edx + 8], eax
mov dword [edx + 4], 0
mov dword [edx], 0
call ecx
sub esp, 0xc
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10c0], 0xaa726aa0
mov eax, dword [ebp - 0x10c0]
mov ecx, eax
sub ecx, 0x92281571
mov dword [ebp - 0x10dc], eax
mov dword [ebp - 0x10e0], ecx
jg 0x425287
jmp 0x42526b
mov eax, dword [ebp - 0x10dc]
sub eax, 0x8fad12cf
mov dword [ebp - 0x10e4], eax
je 0x426112
jmp 0x42596b
mov eax, dword [ebp - 0x10dc]
sub eax, 0x9eaaa2c9
mov dword [ebp - 0x10e8], eax
jg 0x4252bf
jmp 0x4252a3
mov eax, dword [ebp - 0x10dc]
sub eax, 0x92281572
mov dword [ebp - 0x10ec], eax
je 0x426162
jmp 0x42596b
mov eax, dword [ebp - 0x10dc]
sub eax, 0xa79acbb3
mov dword [ebp - 0x10f0], eax
jg 0x4252f7
jmp 0x4252db
mov eax, dword [ebp - 0x10dc]
sub eax, 0x9eaaa2ca
mov dword [ebp - 0x10f4], eax
je 0x4262b3
jmp 0x42596b
mov eax, dword [ebp - 0x10dc]
sub eax, 0xaa726a9f
mov dword [ebp - 0x10f8], eax
jg 0x42532f
jmp 0x425313
mov eax, dword [ebp - 0x10dc]
sub eax, 0xa79acbb4
mov dword [ebp - 0x10fc], eax
je 0x425a02
jmp 0x42596b
mov eax, dword [ebp - 0x10dc]
sub eax, 0xb33d63e8
mov dword [ebp - 0x1100], eax
jg 0x425367
jmp 0x42534b
mov eax, dword [ebp - 0x10dc]
sub eax, 0xaa726aa0
mov dword [ebp - 0x1104], eax
je 0x425970
jmp 0x42596b
mov eax, dword [ebp - 0x10dc]
sub eax, 0xb7a056b3
mov dword [ebp - 0x1108], eax
jg 0x42539f
jmp 0x425383
mov eax, dword [ebp - 0x10dc]
sub eax, 0xb33d63e9
mov dword [ebp - 0x110c], eax
je 0x4261a7
jmp 0x42596b
mov eax, dword [ebp - 0x10dc]
sub eax, 0xbfcfa5be
mov dword [ebp - 0x1110], eax
jg 0x4253d7
jmp 0x4253bb
mov eax, dword [ebp - 0x10dc]
sub eax, 0xb7a056b4
mov dword [ebp - 0x1114], eax
je 0x4259e0
jmp 0x42596b
mov eax, dword [ebp - 0x10dc]
sub eax, 0xc16dd295
mov dword [ebp - 0x1118], eax
jg 0x42540f
jmp 0x4253f3
mov eax, dword [ebp - 0x10dc]
sub eax, 0xbfcfa5bf
mov dword [ebp - 0x111c], eax
je 0x426276
jmp 0x42596b
mov eax, dword [ebp - 0x10dc]
sub eax, 0xc2bedb4e
mov dword [ebp - 0x1120], eax
jg 0x425447
jmp 0x42542b
mov eax, dword [ebp - 0x10dc]
sub eax, 0xc16dd296
mov dword [ebp - 0x1124], eax
je 0x425991
jmp 0x42596b
mov eax, dword [ebp - 0x10dc]
sub eax, 0xc38d0657
mov dword [ebp - 0x1128], eax
jg 0x42547f
jmp 0x425463
mov eax, dword [ebp - 0x10dc]
sub eax, 0xc2bedb4f
mov dword [ebp - 0x112c], eax
je 0x426153
jmp 0x42596b
mov eax, dword [ebp - 0x10dc]
sub eax, 0xd5ddc1b1
mov dword [ebp - 0x1130], eax
jg 0x4254b7
jmp 0x42549b
mov eax, dword [ebp - 0x10dc]
sub eax, 0xc38d0658
mov dword [ebp - 0x1134], eax
je 0x4259a0
jmp 0x42596b
mov eax, dword [ebp - 0x10dc]
sub eax, 0xe4484a43
mov dword [ebp - 0x1138], eax
jg 0x4254ef
jmp 0x4254d3
mov eax, dword [ebp - 0x10dc]
sub eax, 0xd5ddc1b2
mov dword [ebp - 0x113c], eax
je 0x425d81
jmp 0x42596b
mov eax, dword [ebp - 0x10dc]
sub eax, 0xed11798d
mov dword [ebp - 0x1140], eax
jg 0x425527
jmp 0x42550b
mov eax, dword [ebp - 0x10dc]
sub eax, 0xe4484a44
mov dword [ebp - 0x1144], eax
je 0x4261c6
jmp 0x42596b
mov eax, dword [ebp - 0x10dc]
sub eax, 0xf3634aeb
mov dword [ebp - 0x1148], eax
jg 0x42555f
jmp 0x425543
mov eax, dword [ebp - 0x10dc]
sub eax, 0xed11798e
mov dword [ebp - 0x114c], eax
je 0x425e06
jmp 0x42596b
mov eax, dword [ebp - 0x10dc]
sub eax, 0x13e07364
mov dword [ebp - 0x1150], eax
jg 0x425597
jmp 0x42557b
mov eax, dword [ebp - 0x10dc]
sub eax, 0xf3634aec
mov dword [ebp - 0x1154], eax
je 0x425d90
jmp 0x42596b
mov eax, dword [ebp - 0x10dc]
sub eax, 0x24db29a6
mov dword [ebp - 0x1158], eax
jg 0x4255cf
jmp 0x4255b3
mov eax, dword [ebp - 0x10dc]
sub eax, 0x13e07365
mov dword [ebp - 0x115c], eax
je 0x425bf4
jmp 0x42596b
mov eax, dword [ebp - 0x10dc]
sub eax, 0x2d758dec
mov dword [ebp - 0x1160], eax
jg 0x425607
jmp 0x4255eb
mov eax, dword [ebp - 0x10dc]
sub eax, 0x24db29a7
mov dword [ebp - 0x1164], eax
je 0x425e4a
jmp 0x42596b
mov eax, dword [ebp - 0x10dc]
sub eax, 0x33684a7b
mov dword [ebp - 0x1168], eax
jg 0x42563f
jmp 0x425623
mov eax, dword [ebp - 0x10dc]
sub eax, 0x2d758ded
mov dword [ebp - 0x116c], eax
je 0x425fc0
jmp 0x42596b
mov eax, dword [ebp - 0x10dc]
sub eax, 0x7eeab99d
mov dword [ebp - 0x1170], eax
jg 0x42594f
jmp 0x42565b
mov eax, dword [ebp - 0x10dc]
sub eax, 0x7e4bef50
mov dword [ebp - 0x1174], eax
jg 0x425933
jmp 0x425677
mov eax, dword [ebp - 0x10dc]
sub eax, 0x7c64b7c7
mov dword [ebp - 0x1178], eax
jg 0x425917
jmp 0x425693
mov eax, dword [ebp - 0x10dc]
sub eax, 0x6faaf5bf
mov dword [ebp - 0x117c], eax
jg 0x4258fb
jmp 0x4256af
mov eax, dword [ebp - 0x10dc]
sub eax, 0x6f181572
mov dword [ebp - 0x1180], eax
jg 0x4258df
jmp 0x4256cb
mov eax, dword [ebp - 0x10dc]
sub eax, 0x6c0a2460
mov dword [ebp - 0x1184], eax
jg 0x4258c3
jmp 0x4256e7
mov eax, dword [ebp - 0x10dc]
sub eax, 0x5922298d
mov dword [ebp - 0x1188], eax
jg 0x4258a7
jmp 0x425703
mov eax, dword [ebp - 0x10dc]
sub eax, 0x5665c2ab
mov dword [ebp - 0x118c], eax
jg 0x42588b
jmp 0x42571f
mov eax, dword [ebp - 0x10dc]
sub eax, 0x5513e71c
mov dword [ebp - 0x1190], eax
jg 0x42586f
jmp 0x42573b
mov eax, dword [ebp - 0x10dc]
sub eax, 0x496f41e1
mov dword [ebp - 0x1194], eax
jg 0x425853
jmp 0x425757
mov eax, dword [ebp - 0x10dc]
sub eax, 0x33e9fe0a
mov dword [ebp - 0x1198], eax
jg 0x42578f
jmp 0x425773
mov eax, dword [ebp - 0x10dc]
sub eax, 0x33684a7c
mov dword [ebp - 0x119c], eax
je 0x425c50
jmp 0x42596b
mov eax, dword [ebp - 0x10dc]
sub eax, 0x37f24d90
mov dword [ebp - 0x11a0], eax
jg 0x4257c7
jmp 0x4257ab
mov eax, dword [ebp - 0x10dc]
sub eax, 0x33e9fe0b
mov dword [ebp - 0x11a4], eax
je 0x425fa7
jmp 0x42596b
mov eax, dword [ebp - 0x10dc]
sub eax, 0x4068d7dd
mov dword [ebp - 0x11a8], eax
jg 0x4257ff
jmp 0x4257e3
mov eax, dword [ebp - 0x10dc]
sub eax, 0x37f24d91
mov dword [ebp - 0x11ac], eax
je 0x4262c5
jmp 0x42596b
mov eax, dword [ebp - 0x10dc]
sub eax, 0x4068d7de
mov dword [ebp - 0x11b0], eax
je 0x425f98
jmp 0x42581b
mov eax, dword [ebp - 0x10dc]
sub eax, 0x446c5d2e
mov dword [ebp - 0x11b4], eax
je 0x425e59
jmp 0x425837
mov eax, dword [ebp - 0x10dc]
sub eax, 0x44ce6a77
mov dword [ebp - 0x11b8], eax
je 0x42612b
jmp 0x42596b
mov eax, dword [ebp - 0x10dc]
sub eax, 0x496f41e2
mov dword [ebp - 0x11bc], eax
je 0x4261ec
jmp 0x42596b
mov eax, dword [ebp - 0x10dc]
sub eax, 0x5513e71d
mov dword [ebp - 0x11c0], eax
je 0x426250
jmp 0x42596b
mov eax, dword [ebp - 0x10dc]
sub eax, 0x5665c2ac
mov dword [ebp - 0x11c4], eax
je 0x426181
jmp 0x42596b
mov eax, dword [ebp - 0x10dc]
sub eax, 0x5922298e
mov dword [ebp - 0x11c8], eax
je 0x425be5
jmp 0x42596b
mov eax, dword [ebp - 0x10dc]
sub eax, 0x6c0a2461
mov dword [ebp - 0x11cc], eax
je 0x426144
jmp 0x42596b
mov eax, dword [ebp - 0x10dc]
sub eax, 0x6f181573
mov dword [ebp - 0x11d0], eax
je 0x425e15
jmp 0x42596b
mov eax, dword [ebp - 0x10dc]
sub eax, 0x6faaf5c0
mov dword [ebp - 0x11d4], eax
je 0x425a11
jmp 0x42596b
mov eax, dword [ebp - 0x10dc]
sub eax, 0x7c64b7c8
mov dword [ebp - 0x11d8], eax
je 0x426231
jmp 0x42596b
mov eax, dword [ebp - 0x10dc]
sub eax, 0x7e4bef51
mov dword [ebp - 0x11dc], eax
je 0x42620b
jmp 0x42596b
mov eax, dword [ebp - 0x10dc]
sub eax, 0x7eeab99e
mov dword [ebp - 0x11e0], eax
je 0x425c41
jmp 0x42596b
jmp 0x4262d0
mov eax, 0xc38d0658
mov ecx, 0xc16dd296
mov edx, dword [ebp - 0x10]
cmp edx, 0
cmove eax, ecx
mov dword [ebp - 0x10c0], eax
jmp 0x4262d0
mov dword [ebp - 0x10c0], 0x2d758ded
jmp 0x4262d0
mov eax, dword [0x46d938]
mov ecx, dword [ebp - 0x18]
mov edx, esp
mov dword [edx], ecx
mov dword [edx + 4], 0xffffffff
call eax
sub esp, 8
mov ecx, 0x6faaf5c0
mov edx, 0xb7a056b4
mov dword [ebp - 0x10a0], eax
cmp dword [ebp - 0x10a0], 0
cmovne ecx, edx
mov dword [ebp - 0x10c0], ecx
jmp 0x4262d0
mov eax, 0x6faaf5c0
mov ecx, 0xa79acbb4
cmp dword [ebp - 0x10a0], 0x80
cmovne eax, ecx
mov dword [ebp - 0x10c0], eax
jmp 0x4262d0
mov dword [ebp - 0x10c0], 0x2d758ded
jmp 0x4262d0
mov eax, 0
mov ecx, 0x20a
lea edx, [ebp - 0xa52]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [ebp - 0x11e4], eax
mov dword [ebp - 0x11e8], ecx
call fcn.00406910
mov ecx, 0x104
lea edx, [0x44b166]
mov esi, 3
lea edi, [ebp - 0xa52]
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 3
mov dword [ebp - 0x11ec], eax
mov dword [ebp - 0x11f0], ecx
mov dword [ebp - 0x11f4], esi
call fcn.00406c30
lea ecx, [ebp - 0x434]
mov dword [esp], ecx
mov dword [ebp - 0x11f8], eax
call fcn.004071a0
mov ecx, 0x101
lea edx, [ebp - 0xa52]
lea esi, [ebp - 0x434]
add edx, 6
mov dword [esp], edx
mov dword [esp + 4], 0x101
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [ebp - 0x11fc], ecx
call fcn.00406c30
mov ecx, 0
mov edx, 0x20a
lea esi, [ebp - 0x22a]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [ebp - 0x1200], eax
mov dword [ebp - 0x1204], ecx
mov dword [ebp - 0x1208], edx
call fcn.00406910
lea ecx, [ebp - 0x22a]
mov edx, 0
mov esi, dword [0x44dd74]
movzx esi, word [esi]
mov dword [ebp - 0x10a8], esi
mov esi, dword [ebp - 0x10a8]
mov edi, edx
sub edi, esi
mov esi, edx
sub esi, 1
add edi, esi
sub edx, edi
mov esi, dword [0x44dd74]
movzx edx, word [esi + edx*2]
mov dword [ebp - 0x10ac], edx
mov edx, dword [ebp - 0x10ac]
mov esi, dword [0x44dd74]
mov edi, dword [ebp - 0x10a8]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [0x44dd74]
add edi, 2
mov ebx, dword [ebp - 0x10a8]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [ebp - 0x120c], eax
call fcn.00405e10
lea eax, [ebp - 0x63e]
mov ecx, dword [0x46d944]
mov edx, esp
mov dword [edx + 8], 0
mov dword [edx + 0xc], eax
mov dword [edx + 4], 0
mov dword [edx], 0
call ecx
sub esp, 0x10
mov ecx, 0x13e07365
mov edx, 0x5922298e
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
cmove ecx, edx
mov dword [ebp - 0x10c0], ecx
jmp 0x4262d0
mov dword [ebp - 0x10c0], 0x2d758ded
jmp 0x4262d0
lea eax, [ebp - 0x14]
lea ecx, [ebp - 0x20]
lea edx, [ebp - 0xe66]
lea esi, [ebp - 0x63e]
mov edi, dword [ebp - 0x109c]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], esi
call fcn.00424bd0
mov ecx, 0x33684a7c
mov edx, 0x7eeab99e
cmp eax, 0
cmovl ecx, edx
mov dword [ebp - 0x10c0], ecx
jmp 0x4262d0
mov dword [ebp - 0x10c0], 0x2d758ded
jmp 0x4262d0
mov eax, 0
mov ecx, 0x14
lea edx, [ebp - 0x1084]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x14
mov dword [ebp - 0x1210], eax
mov dword [ebp - 0x1214], ecx
call fcn.00406910
lea ecx, [ebp - 0x1084]
mov edx, 0
mov esi, dword [0x44dd78]
movzx esi, word [esi]
mov dword [ebp - 0x10b0], esi
mov esi, dword [ebp - 0x10b0]
sub edx, 1
sub esi, edx
mov edx, dword [0x44dd78]
movzx edx, word [edx + esi*2]
mov dword [ebp - 0x10b4], edx
mov edx, dword [ebp - 0x10b4]
mov esi, dword [0x44dd78]
mov edi, dword [ebp - 0x10b0]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [0x44dd78]
add edi, 2
mov ebx, dword [ebp - 0x10b0]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [ebp - 0x1218], eax
call fcn.00405e10
mov eax, pe_nt_image_headers32
mov ecx, 0
mov edx, 1
lea esi, [ebp - 0x22a]
lea edi, [ebp - 0xa52]
lea ebx, [ebp - 0x1084]
mov dword [esp], esi
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], pe_nt_image_headers32
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 1
mov dword [ebp - 0x121c], eax
mov dword [ebp - 0x1220], ecx
mov dword [ebp - 0x1224], edx
call fcn.00424940
mov ecx, 0xf3634aec
mov edx, 0xd5ddc1b2
cmp eax, 0
cmovl ecx, edx
mov dword [ebp - 0x10c0], ecx
jmp 0x4262d0
mov dword [ebp - 0x10c0], 0x2d758ded
jmp 0x4262d0
mov eax, 0
mov ecx, pe_nt_image_headers32
mov edx, 1
lea esi, [ebp - 0xc5c]
lea edi, [ebp - 0x1084]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], edi
mov dword [esp + 0xc], pe_nt_image_headers32
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
mov dword [ebp - 0x1228], eax
mov dword [ebp - 0x122c], ecx
mov dword [ebp - 0x1230], edx
call fcn.00424940
mov ecx, 0x6f181573
mov edx, 0xed11798e
cmp eax, 0
cmovl ecx, edx
mov dword [ebp - 0x10c0], ecx
jmp 0x4262d0
mov dword [ebp - 0x10c0], 0x2d758ded
jmp 0x4262d0
mov eax, dword [0x46d938]
mov ecx, dword [ebp - 0x1c]
mov edx, esp
mov dword [edx], ecx
mov dword [edx + 4], 0xffffffff
call eax
sub esp, 8
mov ecx, 0x446c5d2e
mov edx, 0x24db29a7
cmp eax, 0
cmovne ecx, edx
mov dword [ebp - 0x10c0], ecx
jmp 0x4262d0
mov dword [ebp - 0x10c0], 0xc2bedb4f
jmp 0x4262d0
mov eax, 0
mov ecx, 0x20a
lea edx, [ebp - 0xa52]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [ebp - 0x1234], eax
mov dword [ebp - 0x1238], ecx
call fcn.00406910
mov ecx, 0x104
lea edx, str._q__u
mov esi, 6
lea edi, [ebp - 0xa52]
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 6
mov dword [ebp - 0x123c], eax
mov dword [ebp - 0x1240], ecx
mov dword [ebp - 0x1244], esi
call fcn.00406c30
lea ecx, [ebp - 0x434]
mov dword [esp], ecx
mov dword [ebp - 0x1248], eax
call fcn.004071a0
mov ecx, 0xfe
lea edx, [ebp - 0xa52]
lea esi, [ebp - 0x434]
add edx, 0xc
mov dword [esp], edx
mov dword [esp + 4], 0xfe
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [ebp - 0x124c], ecx
call fcn.00406c30
mov ecx, pe_nt_image_headers32
mov edx, 0
mov esi, 1
lea edi, [ebp - 0x22a]
lea ebx, [ebp - 0xa52]
mov dword [ebp - 0x1250], eax
lea eax, [ebp - 0x1084]
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], pe_nt_image_headers32
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 1
mov dword [ebp - 0x1254], esi
mov dword [ebp - 0x1258], ecx
mov dword [ebp - 0x125c], edx
call fcn.00424940
mov ecx, 0x33e9fe0b
mov edx, 0x4068d7de
cmp eax, 0
cmovl ecx, edx
mov dword [ebp - 0x10c0], ecx
jmp 0x4262d0
mov dword [ebp - 0x10c0], 0x2d758ded
jmp 0x4262d0
mov dword [ebp - 0x10a4], 1
mov dword [ebp - 0x10c0], 0x92281572
jmp 0x4262d0
lea eax, [ebp - 0x848]
mov ecx, dword [0x46d940]
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov ecx, 0
mov edx, 0x14
lea esi, [ebp - 0x1098]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x14
mov dword [ebp - 0x1260], eax
mov dword [ebp - 0x1264], ecx
mov dword [ebp - 0x1268], edx
call fcn.00406910
lea ecx, [ebp - 0x1098]
mov edx, 0
mov esi, dword [0x44dd7c]
movzx esi, word [esi]
mov dword [ebp - 0x10b8], esi
mov esi, dword [ebp - 0x10b8]
mov edi, edx
sub edi, esi
mov esi, edx
sub esi, 1
add edi, esi
sub edx, edi
mov esi, dword [0x44dd7c]
movzx edx, word [esi + edx*2]
mov dword [ebp - 0x10bc], edx
mov edx, dword [ebp - 0x10bc]
mov esi, dword [0x44dd7c]
mov edi, dword [ebp - 0x10b8]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [0x44dd7c]
add edi, 2
mov ebx, dword [ebp - 0x10b8]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [ebp - 0x126c], eax
call fcn.00405e10
mov eax, 0
mov ecx, 0x4540
mov edx, 1
lea esi, [ebp - 0xe66]
lea edi, [ebp - 0x1098]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], edi
mov dword [esp + 0xc], 0x4540
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 0
mov dword [ebp - 0x1270], eax
mov dword [ebp - 0x1274], ecx
mov dword [ebp - 0x1278], edx
call fcn.00424940
mov ecx, 0x44ce6a77
mov edx, 0x8fad12cf
cmp eax, 0
cmovl ecx, edx
mov dword [ebp - 0x10c0], ecx
jmp 0x4262d0
mov dword [ebp - 0x10a4], 0xffffffff
mov dword [ebp - 0x10c0], 0x6c0a2461
jmp 0x4262d0
mov dword [ebp - 0x10a4], 1
mov dword [ebp - 0x10c0], 0x6c0a2461
jmp 0x4262d0
mov dword [ebp - 0x10c0], 0xc2bedb4f
jmp 0x4262d0
mov dword [ebp - 0x10c0], 0x92281572
jmp 0x4262d0
mov eax, 0xb33d63e9
mov ecx, 0x5665c2ac
cmp dword [ebp - 0x14], 0
cmovne eax, ecx
mov dword [ebp - 0x10c0], eax
jmp 0x4262d0
mov eax, dword [0x46d904]
mov ecx, dword [ebp - 0x14]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov dword [ebp - 0x10c0], 0xb33d63e9
mov dword [ebp - 0x127c], eax
jmp 0x4262d0
mov eax, 0x496f41e2
mov ecx, 0xe4484a44
cmp dword [ebp - 0x20], 0
cmovne eax, ecx
mov dword [ebp - 0x10c0], eax
jmp 0x4262d0
mov eax, dword [0x46d95c]
mov ecx, dword [ebp - 0x20]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov dword [ebp - 0x10c0], 0x496f41e2
mov dword [ebp - 0x1280], eax
jmp 0x4262d0
mov eax, 0x7c64b7c8
mov ecx, 0x7e4bef51
cmp dword [ebp - 0x1c], 0
cmovne eax, ecx
mov dword [ebp - 0x10c0], eax
jmp 0x4262d0
mov eax, dword [0x46d95c]
mov ecx, dword [ebp - 0x1c]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov dword [ebp - 0x10c0], 0x7c64b7c8
mov dword [ebp - 0x1284], eax
jmp 0x4262d0
mov eax, 0xbfcfa5bf
mov ecx, 0x5513e71d
cmp dword [ebp - 0x18], 0
cmovne eax, ecx
mov dword [ebp - 0x10c0], eax
jmp 0x4262d0
mov eax, dword [0x46d95c]
mov ecx, dword [ebp - 0x18]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov dword [ebp - 0x10c0], 0xbfcfa5bf
mov dword [ebp - 0x1288], eax
jmp 0x4262d0
lea eax, [ebp - 0x434]
mov ecx, dword [0x46d940]
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov ecx, 0x37f24d91
mov edx, 0x9eaaa2ca
cmp dword [ebp - 0x10a4], 0
cmovne ecx, edx
mov dword [ebp - 0x10c0], ecx
mov dword [ebp - 0x128c], eax
jmp 0x4262d0
mov eax, esp
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.dll_ExitProcess]
call eax
sub esp, 4
add esp, 0x12a4
pop esi
pop edi
pop ebx
pop ebp
ret
jmp 0x425246