Function at 0x424d10
Capabilities:
Access peb ldr_data
Get number of processors
Read .ini file

Disassembly:
push 0xffffffffffffffff
push 0x4b06c0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xf8
mov al, byte [esp + 0x10c]
push ebx
mov ebx, dword [esp + 0x10c]
push ebp
mov ebp, ecx
mov byte [esp + 0x28], al
mov ecx, ebx
push esi
xor esi, esi
push edi
mov edx, dword [ecx]
push esi
mov dword [esp + 0x35], edx
mov eax, dword [ecx + 4]
mov dword [esp + 0x39], eax
mov edx, dword [ecx + 8]
mov dword [esp + 0x3d], edx
lea edx, [esp + 0x34]
mov eax, dword [ecx + 0xc]
mov ecx, dword [ebp + 0x1bd4]
mov dword [esp + 0x41], eax
mov eax, dword [ebp + 0x1bd8]
push eax
push ecx
push 0x11
push edx
lea ecx, [ebp + 0xf0]
call fcn.004aca94
mov eax, dword [0x4dca08]
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x11c]
mov edx, dword [ebp + 0x1c18]
push ecx
push edx
lea eax, [esp + 0x30]
push str._sOldDataOldData._d
push eax
mov dword [esp + 0x120], esi
call fcn.00490e4f
add esp, 0x10
lea ecx, [esp + 0x54]
call fcn.004981c7
mov ecx, dword [esp + 0x28]
push esi
push 0x42
push ecx
lea ecx, [esp + 0x60]
mov byte [esp + 0x11c], 1
call fcn.004982d9
test eax, eax
jne 0x424df2
mov edx, dword [esp + 0x28]
push esi
push 0x1042
push edx
lea ecx, [esp + 0x60]
call fcn.004982d9
test eax, eax
je 0x424e5d
lea eax, [esp + 0x1c]
push 4
push eax
lea ecx, [esp + 0x5c]
call fcn.004983f6
mov eax, dword [esp + 0x1c]
inc eax
cmp eax, 0x2710
mov dword [esp + 0x1c], eax
jbe 0x424e16
mov dword [esp + 0x1c], esi
mov edx, dword [esp + 0x54]
push esi
push esi
lea ecx, [esp + 0x5c]
call dword [edx + 0x28]
lea eax, [esp + 0x1c]
push 4
push eax
lea ecx, [esp + 0x5c]
call fcn.00498430
mov ecx, dword [esp + 0x1c]
push esi
shl ecx, 4
add ecx, 4
push ecx
lea ecx, [esp + 0x5c]
call fcn.0049847b
push 0x10
push ebx
lea ecx, [esp + 0x5c]
call fcn.00498430
lea ecx, [esp + 0x54]
call fcn.004984f4
mov al, byte [0x4e0ea4]
test al, 1
jne 0x424e99
push 0xffffffffffffffff
mov cl, al
push 1
push 1
or cl, 1
push 1
push 1
mov byte [0x4e0ea4], cl
push 1
push 0x7d0
mov ecx, 0x4e0ea0
call fcn.00490e62
push 0x425e80
call fcn.0047ee46
add esp, 4
cmp dword [ebp + 0x160], esi
jne 0x424fe7
cmp dword [ebp + 0x1b68], esi
je 0x424fe7
xor edx, edx
mov dl, byte [ebx]
cmp dword [ebp + edx*4 + 0x1b6c], esi
je 0x424fe7
xor eax, eax
xor ecx, ecx
mov al, byte [ebx + 7]
mov cl, byte [ebx + 6]
xor edx, edx
push 0xffffffffffffffff
mov dl, byte [ebx + 5]
push eax
push ecx
xor eax, eax
mov al, byte [ebx + 4]
push edx
xor ecx, ecx
xor edx, edx
mov cl, byte [ebx + 3]
mov dx, word [ebx + 1]
push eax
push ecx
push edx
lea ecx, [esp + 0x40]
call fcn.00490e62
push ecx
mov ecx, dword [0x4e0ea0]
mov eax, esp
mov dword [esp + 0x30], esp
mov dword [eax], ecx
lea ecx, [esp + 0x28]
call fcn.00425e70
cmp eax, esi
je 0x424fe7
mov edx, ebx
mov edi, dword [ebp + 0x1ac]
mov esi, dword [edx]
mov eax, dword [edx + 4]
mov dword [esp + 0x34], eax
mov eax, dword [ebp + 0x1b4]
mov ecx, dword [edx + 8]
test eax, eax
mov edx, dword [edx + 0xc]
mov dword [esp + 0x38], ecx
mov dword [esp + 0x3c], edx
jne 0x424f77
mov eax, dword [ebp + 0x1bc]
push 0x18
lea ecx, [ebp + 0x1b8]
push eax
push ecx
call fcn.004926fb
mov ecx, dword [ebp + 0x1bc]
lea edx, [ecx + ecx*2]
dec ecx
test ecx, ecx
lea eax, [eax + edx*8 - 0x14]
jl 0x424f77
inc ecx
mov edx, dword [ebp + 0x1b4]
mov dword [eax], edx
mov dword [ebp + 0x1b4], eax
sub eax, 0x18
dec ecx
jne 0x424f63
mov ecx, dword [ebp + 0x1b4]
xor edx, edx
mov eax, dword [ecx]
mov dword [ebp + 0x1b4], eax
mov dword [ecx + 4], edi
mov dword [ecx], 0
mov edi, dword [ebp + 0x1b0]
inc edi
lea eax, [ecx + 8]
mov dword [ebp + 0x1b0], edi
mov edi, eax
mov dword [edi], edx
mov dword [edi + 4], edx
mov dword [edi + 8], edx
mov dword [edi + 0xc], edx
mov edx, dword [esp + 0x34]
mov dword [eax], esi
mov dword [eax + 4], edx
mov edx, dword [esp + 0x38]
mov dword [eax + 8], edx
mov edx, dword [esp + 0x3c]
mov dword [eax + 0xc], edx
mov eax, dword [ebp + 0x1ac]
test eax, eax
je 0x424fd2
mov dword [eax], ecx
jmp 0x424fd8
mov dword [ebp + 0x1a8], ecx
mov eax, dword [esp + 0x24]
mov dword [ebp + 0x1ac], ecx
mov dword [0x4e0ea0], eax
mov eax, dword [ebp + 0xc4]
test eax, eax
je 0x425b27
mov esi, dword [0x4dca08]
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], esi
mov dword [esp + 0x20], esi
mov eax, dword [esp + 0x11c]
xor ecx, ecx
mov cl, byte [ebx + 8]
xor edx, edx
mov dl, byte [ebx + 9]
shl eax, 8
add eax, ecx
xor ecx, ecx
mov cl, byte [ebx + 0xa]
shl eax, 8
add eax, edx
xor edx, edx
shl eax, 8
add eax, ecx
mov ecx, eax
shr eax, 4
div dword [ebp + 0x1c84]
mov eax, dword [ebp + 0x1c80]
test eax, eax
je 0x42506f
mov eax, dword [eax + edx*4]
test eax, eax
je 0x42506f
cmp dword [eax + 8], ecx
je 0x425057
mov eax, dword [eax]
test eax, eax
jne 0x42504a
jmp 0x42506f
test eax, eax
je 0x42506f
lea esi, [eax + 0xc]
mov ecx, 0x29
lea edi, [esp + 0x64]
rep movsd dword es:[edi], dword [esi]
mov esi, dword [0x4dca08]
mov dword [esp + 0x1c], esi
mov dword [esp + 0x18], esi
mov byte [esp + 0x110], 6
call fcn.004a8348
mov esi, dword [eax + 4]
call fcn.004a8348
mov edx, dword [esi + 0x1c]
mov eax, dword [eax + 4]
push str.work.sf
mov ecx, dword [edx + 0x1c24]
mov edx, dword [eax + 0x1c]
push ecx
push str.user_
mov eax, dword [edx + 0x1c18]
lea ecx, [esp + 0x28]
push eax
push str._s_s_s_s
push ecx
call fcn.00490e4f
mov edx, dword [esp + 0x85]
mov eax, dword [esp + 0x84]
add esp, 0x18
and edx, 0xff
and eax, 0xff
lea ecx, [esp + 0x18]
push edx
push eax
push str._03d_03d
push ecx
call fcn.00490e4f
mov edx, dword [esp + 0x2c]
mov esi, dword [esp + 0x28]
add esp, 0x10
lea ecx, [esp + 0x18]
push edx
push 0x64
push 0x64
call fcn.0049397a
push eax
push 0x4e0dd0
push esi
push 0x4d3768
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push 0xffffffffffffffff
lea ecx, [esp + 0x1c]
call fcn.004939c9
xor eax, eax
xor ecx, ecx
mov al, byte [ebx + 7]
mov cl, byte [ebx + 6]
xor edx, edx
push eax
mov dl, byte [ebx + 5]
push ecx
xor eax, eax
push edx
mov al, byte [ebx + 4]
xor ecx, ecx
mov cl, byte [ebx + 3]
xor edx, edx
mov dx, word [ebx + 1]
push eax
push ecx
push edx
lea eax, [esp + 0x28]
push str._04d__02d__02d__02d:_02d:_02d
push eax
call fcn.00490e4f
xor eax, eax
add esp, 0x20
mov al, byte [ebx]
cmp eax, 0x18
ja case.default.0x42553f
jmp dword [eax*4 + 0x425cdc]
push 0x4d8720
lea ecx, [esp + 0x14]
call fcn.00493926
lea ecx, [esp + 0x84]
push ecx
lea ecx, [esp + 0x18]
call fcn.004936d3
lea edx, [esp + 0x18]
lea ecx, [esp + 0x10]
push edx
call fcn.00493962
push 0x4d3db0
lea ecx, [esp + 0x14]
call fcn.00493926
lea eax, [esp + 0x14]
push eax
jmp 0x4259fc
push 0x4d3c88
lea ecx, [esp + 0x14]
call fcn.00493926
lea ecx, [esp + 0x84]
push ecx
lea ecx, [esp + 0x18]
call fcn.004936d3
lea edx, [esp + 0x18]
lea ecx, [esp + 0x10]
push edx
call fcn.00493962
push 0x4d3db0
lea ecx, [esp + 0x14]
call fcn.00493926
lea eax, [esp + 0x14]
push eax
jmp 0x4259fc
push 0x4d3c80
lea ecx, [esp + 0x14]
call fcn.00493926
lea ecx, [esp + 0x84]
push ecx
lea ecx, [esp + 0x18]
call fcn.004936d3
lea edx, [esp + 0x18]
lea ecx, [esp + 0x10]
push edx
call fcn.00493962
push 0x4d3db0
lea ecx, [esp + 0x14]
call fcn.00493926
lea eax, [esp + 0x14]
push eax
jmp 0x4259fc
push 0x4d3c74
lea ecx, [esp + 0x14]
call fcn.00493926
lea ecx, [esp + 0x84]
push ecx
lea ecx, [esp + 0x18]
call fcn.004936d3
lea edx, [esp + 0x18]
lea ecx, [esp + 0x10]
push edx
call fcn.00493962
push 0x4d3db0
lea ecx, [esp + 0x14]
call fcn.00493926
lea eax, [esp + 0x14]
push eax
jmp 0x4259fc
push 0x4d3c6c
lea ecx, [esp + 0x14]
call fcn.00493926
lea ecx, [esp + 0x84]
push ecx
lea ecx, [esp + 0x18]
call fcn.004936d3
lea edx, [esp + 0x18]
lea ecx, [esp + 0x10]
push edx
call fcn.00493962
push 0x4d3db0
lea ecx, [esp + 0x14]
call fcn.00493926
lea eax, [esp + 0x14]
push eax
jmp 0x4259fc
push 0x4d3c60
lea ecx, [esp + 0x14]
call fcn.00493926
lea ecx, [esp + 0x84]
push ecx
lea ecx, [esp + 0x18]
call fcn.004936d3
lea edx, [esp + 0x18]
lea ecx, [esp + 0x10]
push edx
call fcn.00493962
push 0x4d3db0
lea ecx, [esp + 0x14]
call fcn.00493926
lea eax, [esp + 0x14]
push eax
jmp 0x4259fc
push 0x4d3aac
lea ecx, [esp + 0x14]
call fcn.00493926
xor eax, eax
mov al, byte [ebx + 8]
cmp eax, 0x88
ja case.0x42532e.17
xor ecx, ecx
mov cl, byte [eax + 0x425d88]
jmp dword [ecx*4 + 0x425d40]
mov cl, byte [ebx + 9]
lea edx, [esp + 0x1c]
lea eax, [esp + 0x20]
push edx
push eax
push 0
push ecx
call fcn.004088e0
mov edx, dword [esp + 0x30]
add esp, 0x10
lea eax, [esp + 0x14]
push edx
push 0x4d3c50
push eax
call fcn.00490e4f
add esp, 0xc
jmp case.0x42532e.17
xor ecx, ecx
lea edx, [esp + 0x14]
mov cl, byte [ebx + 9]
push ecx
push 0x4d3c30
push edx
call fcn.00490e4f
add esp, 0xc
jmp case.0x42532e.17
xor eax, eax
mov al, byte [ebx + 9]
push eax
push 0x4d3c10
jmp 0x425511
xor edx, edx
lea eax, [esp + 0x14]
mov dl, byte [ebx + 9]
push edx
push 0x4d3bf0
push eax
call fcn.00490e4f
add esp, 0xc
jmp case.0x42532e.17
xor eax, eax
mov al, byte [ebx + 9]
push eax
push 0x4d3bd8
jmp 0x425511
xor edx, edx
lea eax, [esp + 0x14]
mov dl, byte [ebx + 9]
push edx
push 0x4d3bc4
push eax
call fcn.00490e4f
add esp, 0xc
jmp case.0x42532e.17
xor ecx, ecx
lea edx, [esp + 0x14]
mov cl, byte [ebx + 9]
push ecx
push 0x4d3bac
push edx
call fcn.00490e4f
add esp, 0xc
jmp case.0x42532e.17
xor eax, eax
mov al, byte [ebx + 9]
push eax
push 0x4d3b98
jmp 0x425511
mov cl, byte [ebx + 9]
lea edx, [esp + 0x1c]
lea eax, [esp + 0x20]
push edx
push eax
push 0
push ecx
call fcn.004088e0
mov edx, dword [esp + 0x30]
add esp, 0x10
lea eax, [esp + 0x14]
push edx
push 0x4d3b84
push eax
call fcn.00490e4f
add esp, 0xc
jmp case.0x42532e.17
xor ecx, ecx
lea edx, [esp + 0x14]
mov cl, byte [ebx + 9]
push ecx
push 0x4d3b60
push edx
call fcn.00490e4f
add esp, 0xc
jmp case.0x42532e.17
xor eax, eax
mov al, byte [ebx + 9]
push eax
push 0x4d3b3c
jmp 0x425511
xor edx, edx
lea eax, [esp + 0x14]
mov dl, byte [ebx + 9]
push edx
push 0x4d3b18
push eax
call fcn.00490e4f
add esp, 0xc
jmp case.0x42532e.17
mov al, byte [ebx + 9]
lea ecx, [esp + 0x1c]
lea edx, [esp + 0x20]
push ecx
push edx
push 0
push eax
call fcn.004088e0
mov ecx, dword [esp + 0x30]
add esp, 0x10
lea edx, [esp + 0x14]
push ecx
push 0x4d3c50
push edx
call fcn.00490e4f
add esp, 0xc
jmp case.0x42532e.17
xor eax, eax
mov al, byte [ebx + 9]
push eax
push 0x4d3afc
jmp 0x425511
xor edx, edx
lea eax, [esp + 0x14]
mov dl, byte [ebx + 9]
push edx
push 0x4d3ae8
push eax
call fcn.00490e4f
add esp, 0xc
jmp case.0x42532e.17
xor ecx, ecx
lea edx, [esp + 0x14]
mov cl, byte [ebx + 9]
push ecx
push 0x4d3ad0
push edx
call fcn.00490e4f
add esp, 0xc
jmp case.0x42532e.17
xor eax, eax
mov al, byte [ebx + 9]
push eax
push 0x4d3abc
lea ecx, [esp + 0x1c]
push ecx
call fcn.00490e4f
add esp, 0xc
jmp case.0x42532e.17
push 0x4d3a44
lea ecx, [esp + 0x14]
call fcn.00493926
xor eax, eax
mov al, byte [ebx + 8]
cmp eax, 4
ja case.default.0x42553f
jmp dword [eax*4 + 0x425e14]
push 0x4d3aa0
lea ecx, [esp + 0x14]
call fcn.00493926
jmp case.default.0x42553f
push 0x4d3a94
lea ecx, [esp + 0x14]
call fcn.00493926
jmp case.default.0x42553f
xor eax, eax
xor ecx, ecx
mov al, byte [ebx + 0xa]
mov cl, byte [ebx + 9]
push eax
push ecx
lea edx, [esp + 0x1c]
push 0x4d3a78
push edx
call fcn.00490e4f
add esp, 0x10
lea eax, [esp + 0x14]
push eax
jmp 0x4259fc
xor ecx, ecx
xor edx, edx
mov cl, byte [ebx + 0xa]
mov dl, byte [ebx + 9]
push ecx
push edx
lea eax, [esp + 0x1c]
push 0x4d3a5c
push eax
call fcn.00490e4f
add esp, 0x10
lea ecx, [esp + 0x14]
push ecx
jmp 0x4259fc
push 0x4d3a50
lea ecx, [esp + 0x14]
call fcn.00493926
jmp case.default.0x42553f
push 0x4d399c
lea ecx, [esp + 0x14]
call fcn.00493926
xor eax, eax
mov al, byte [ebx + 8]
cmp eax, 0xa
ja case.default.0x42553f
jmp dword [eax*4 + 0x425e28]
push 0x4d3a30
lea ecx, [esp + 0x14]
call fcn.00493926
mov edx, dword [0x4dca08]
lea eax, [ebx + 9]
push eax
lea ecx, [esp + 0x54]
mov dword [esp + 0x54], edx
call fcn.004936d3
lea eax, [esp + 0x50]
lea ecx, [esp + 0x10]
push eax
mov byte [esp + 0x114], 7
call fcn.00493962
lea ecx, [esp + 0x50]
mov byte [esp + 0x110], 6
call fcn.0049354a
jmp case.default.0x42553f
push 0x4d3a1c
lea ecx, [esp + 0x14]
call fcn.00493926
mov ecx, dword [0x4dca08]
lea eax, [ebx + 9]
mov dword [esp + 0x44], ecx
push eax
lea ecx, [esp + 0x48]
call fcn.004936d3
lea edx, [esp + 0x44]
lea ecx, [esp + 0x10]
push edx
mov byte [esp + 0x114], 8
call fcn.00493962
lea ecx, [esp + 0x44]
mov byte [esp + 0x110], 6
call fcn.0049354a
jmp case.default.0x42553f
push 0x4d3a08
lea ecx, [esp + 0x14]
call fcn.00493926
mov eax, dword [0x4dca08]
lea ecx, [esp + 0x48]
mov dword [esp + 0x48], eax
lea eax, [ebx + 9]
push eax
call fcn.004936d3
lea ecx, [esp + 0x48]
mov byte [esp + 0x110], 9
push ecx
lea ecx, [esp + 0x14]
call fcn.00493962
lea ecx, [esp + 0x48]
mov byte [esp + 0x110], 6
call fcn.0049354a
jmp case.default.0x42553f
push 0x4d39f4
lea ecx, [esp + 0x14]
call fcn.00493926
mov edx, dword [0x4dca08]
lea eax, [ebx + 9]
push eax
lea ecx, [esp + 0x50]
mov dword [esp + 0x50], edx
call fcn.004936d3
lea eax, [esp + 0x4c]
lea ecx, [esp + 0x10]
push eax
mov byte [esp + 0x114], 0xa
call fcn.00493962
lea ecx, [esp + 0x4c]
mov byte [esp + 0x110], 6
call fcn.0049354a
jmp case.default.0x42553f
push 0x4d39ec
lea ecx, [esp + 0x14]
call fcn.00493926
jmp case.default.0x42553f
push 0x4d39e4
lea ecx, [esp + 0x14]
call fcn.00493926
jmp case.default.0x42553f
push 0x4d39d8
lea ecx, [esp + 0x14]
call fcn.00493926
jmp case.default.0x42553f
push 0x4d39cc
lea ecx, [esp + 0x14]
call fcn.00493926
jmp case.default.0x42553f
push 0x4d39c0
lea ecx, [esp + 0x14]
call fcn.00493926
jmp case.default.0x42553f
push 0x4d39b4
lea ecx, [esp + 0x14]
call fcn.00493926
mov ecx, dword [0x4dca08]
lea eax, [ebx + 9]
mov dword [esp + 0x2c], ecx
push eax
lea ecx, [esp + 0x30]
call fcn.004936d3
lea edx, [esp + 0x2c]
lea ecx, [esp + 0x10]
push edx
mov byte [esp + 0x114], 0xb
call fcn.00493962
lea ecx, [esp + 0x2c]
mov byte [esp + 0x110], 6
call fcn.0049354a
jmp case.default.0x42553f
push 0x4d39a8
lea ecx, [esp + 0x14]
call fcn.00493926
mov eax, dword [0x4dca08]
lea ecx, [esp + 0x24]
mov dword [esp + 0x24], eax
lea eax, [ebx + 9]
push eax
call fcn.004936d3
lea ecx, [esp + 0x24]
mov byte [esp + 0x110], 0xc
push ecx
lea ecx, [esp + 0x14]
call fcn.00493962
lea ecx, [esp + 0x24]
mov byte [esp + 0x110], 6
call fcn.0049354a
jmp case.default.0x42553f
push 0x4d3954
lea ecx, [esp + 0x14]
call fcn.00493926
xor eax, eax
mov al, byte [ebx + 8]
cmp eax, 4
ja case.default.0x42553f
jmp dword [eax*4 + 0x425e54]
push 0x4d3990
lea ecx, [esp + 0x14]
call fcn.00493926
jmp case.default.0x42553f
push 0x4d3984
lea ecx, [esp + 0x14]
call fcn.00493926
jmp case.default.0x42553f
push 0x4d3978
lea ecx, [esp + 0x14]
call fcn.00493926
jmp case.default.0x42553f
push 0x4d396c
lea ecx, [esp + 0x14]
call fcn.00493926
jmp case.default.0x42553f
push 0x4d3960
lea ecx, [esp + 0x14]
call fcn.00493926
jmp case.default.0x42553f
push 0x4d3918
lea ecx, [esp + 0x14]
call fcn.00493926
mov cl, byte [ebx + 9]
mov eax, ecx
and eax, 0xff
sub eax, 0
je 0x425940
dec eax
je 0x42590f
dec eax
jne case.default.0x42553f
lea edx, [esp + 0x1c]
lea eax, [esp + 0x20]
push edx
push eax
push 0
push ecx
call fcn.004088e0
mov ecx, dword [esp + 0x30]
add esp, 0x10
push ecx
push 0x4d3944
lea edx, [esp + 0x1c]
push edx
call fcn.00490e4f
add esp, 0xc
jmp case.default.0x42553f
lea eax, [esp + 0x1c]
lea edx, [esp + 0x20]
push eax
push edx
push 0
push ecx
call fcn.004088e0
mov eax, dword [esp + 0x30]
add esp, 0x10
lea ecx, [esp + 0x14]
push eax
push 0x4d3934
push ecx
call fcn.00490e4f
add esp, 0xc
jmp case.default.0x42553f
lea edx, [esp + 0x1c]
lea eax, [esp + 0x20]
push edx
push eax
push 0
push ecx
call fcn.004088e0
mov ecx, dword [esp + 0x30]
add esp, 0x10
push ecx
push 0x4d3924
jmp 0x4258fd
push 0x4d390c
jmp 0x4259c1
push 0x4d3904
jmp 0x4259c1
push 0x4d38f8
jmp 0x4259c1
push 0x4d38e8
jmp 0x4259c1
push 0x4d38d8
jmp 0x4259c1
push 0x4d38c8
jmp 0x4259c1
push 0x4d38b8
jmp 0x4259c1
push 0x4d38a8
jmp 0x4259c1
push 0x4d3898
jmp 0x4259c1
push 0x4d3888
jmp 0x4259c1
push 0x4d3878
jmp 0x4259c1
push 0x4d3870
jmp 0x4259c1
push 0x4d3864
jmp 0x4259c1
push 0x4d3858
lea ecx, [esp + 0x14]
call fcn.00493926
lea eax, [esp + 0x84]
lea ecx, [esp + 0x14]
push eax
call fcn.004936d3
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x14]
call fcn.00493962
push 0x4d3db0
lea ecx, [esp + 0x14]
call fcn.00493926
lea edx, [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
call fcn.00493962
lea ecx, [esp + 0x18]
mov byte [esp + 0x110], 5
call fcn.0049354a
lea ecx, [esp + 0x1c]
mov byte [esp + 0x110], 4
call fcn.0049354a
mov eax, dword [ebp + 0x1c64]
test eax, eax
mov dword [esp + 0x24], eax
je 0x425af4
mov eax, dword [esp + 0x24]
mov ecx, dword [eax]
lea esi, [eax + 8]
mov dword [esp + 0x24], ecx
push esi
lea ecx, [esp + 0x68]
call fcn.004932bf
lea edx, [esi + 4]
lea ecx, [esp + 0x68]
push edx
mov byte [esp + 0x114], 0xd
call fcn.004932bf
add esi, 8
mov ecx, 0x1a
lea edi, [esp + 0x6c]
rep movsd dword es:[edi], dword [esi]
xor eax, eax
mov byte [esp + 0x110], 0xe
mov al, byte [ebx]
mov ecx, dword [esp + eax*4 + 0x70]
test ecx, ecx
je 0x425ac6
push 0x80
lea ecx, [esp + 0x6c]
call fcn.0049397a
push eax
push 0x400
lea ecx, [esp + 0x18]
call fcn.0049397a
push eax
call sub.SMSDLL.dll_SMSSendMessage
push 0xffffffffffffffff
lea ecx, [esp + 0x14]
mov dword [ebp + 0xc0], eax
call fcn.004939c9
push 0xffffffffffffffff
lea ecx, [esp + 0x6c]
call fcn.004939c9
lea ecx, [esp + 0x68]
mov byte [esp + 0x110], 0xf
call fcn.0049354a
lea ecx, [esp + 0x64]
mov byte [esp + 0x110], 4
call fcn.0049354a
mov eax, dword [esp + 0x24]
test eax, eax
jne 0x425a39
lea ecx, [esp + 0x20]
mov byte [esp + 0x110], 3
call fcn.0049354a
lea ecx, [esp + 0x14]
mov byte [esp + 0x110], 2
call fcn.0049354a
lea ecx, [esp + 0x10]
mov byte [esp + 0x110], 1
call fcn.0049354a
mov eax, dword [ebx + 8]
mov ecx, dword [ebx]
mov edi, dword [ebp + 0x1dac]
mov edx, dword [ebx + 4]
mov dword [esp + 0x38], eax
mov dword [esp + 0x30], ecx
mov ecx, dword [ebx + 0xc]
mov ebx, dword [ebp + 0x1cd8]
mov eax, edi
mov dword [esp + 0x34], edx
shr eax, 4
xor edx, edx
mov dword [esp + 0x3c], ecx
div ebx
mov ecx, dword [ebp + 0x1cd4]
mov dword [esp + 0x24], edi
test ecx, ecx
mov esi, edx
je 0x425b87
mov eax, dword [ecx + esi*4]
test eax, eax
je 0x425b83
cmp dword [eax + 8], edi
je 0x425b7b
mov eax, dword [eax]
test eax, eax
jne 0x425b6e
jmp 0x425b83
test eax, eax
jne 0x425c53
test ecx, ecx
jne 0x425bbd
lea edi, [ebx*4]
push edi
call fcn.00493b03
mov edx, eax
mov ecx, edi
mov dword [ebp + 0x1cd4], edx
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
add esp, 4
and ecx, 3
rep stosb byte es:[edi], al
mov edi, dword [esp + 0x24]
mov dword [ebp + 0x1cd8], ebx
mov eax, dword [ebp + 0x1ce0]
test eax, eax
jne 0x425c09
mov eax, dword [ebp + 0x1ce8]
push 0x1c
lea ecx, [ebp + 0x1ce4]
push eax
push ecx
call fcn.004926fb
mov ecx, dword [ebp + 0x1ce8]
lea edx, [ecx*8]
sub edx, ecx
dec ecx
test ecx, ecx
lea eax, [eax + edx*4 - 0x18]
jl 0x425c09
inc ecx
mov edx, dword [ebp + 0x1ce0]
mov dword [eax], edx
mov dword [ebp + 0x1ce0], eax
sub eax, 0x1c
dec ecx
jne 0x425bf5
mov eax, dword [ebp + 0x1ce0]
mov ecx, dword [eax]
mov dword [ebp + 0x1ce0], ecx
mov ecx, dword [ebp + 0x1cdc]
inc ecx
xor edx, edx
mov dword [ebp + 0x1cdc], ecx
mov dword [eax + 8], 0
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], edx
mov dword [eax + 0x14], edx
mov dword [eax + 0x18], edx
mov dword [eax + 4], esi
mov dword [eax + 8], edi
mov ecx, dword [ebp + 0x1cd4]
mov edx, dword [ecx + esi*4]
mov dword [eax], edx
mov ecx, dword [ebp + 0x1cd4]
mov dword [ecx + esi*4], eax
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
add eax, 0xc
mov dword [eax], edx
mov edx, dword [esp + 0x38]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov ecx, dword [ebp + 0x1dac]
inc ecx
mov eax, ecx
mov dword [ebp + 0x1dac], ecx
cmp eax, 0x2710
jb 0x425c91
mov dword [ebp + 0x1dac], 0
lea ecx, [esp + 0x54]
mov dword [ebp + 0x10c], 1
mov byte [esp + 0x110], 0
call fcn.0049821c
lea ecx, [esp + 0x28]
mov dword [esp + 0x110], 0xffffffff
call fcn.0049354a
mov ecx, dword [esp + 0x108]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x104
ret 8