Function at 0x4237ca
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x520f4c
call fcn.004e66c0
sub esp, 0x498
mov eax, dword [ebp + 8]
push ebx
push esi
mov esi, ecx
push edi
lea ecx, [ebp - 0x428]
mov dword [ebp - 0x1c], eax
call fcn.004243e6
xor edi, edi
mov ecx, esi
mov dword [ebp - 4], edi
call fcn.00428790
mov byte [ebp - 0x428], al
mov eax, dword [esi + 8]
push dword [0x530940]
lea ecx, [ebp - 0x41c]
mov eax, dword [eax*4 + 0x536214]
mov dword [ebp - 0x424], eax
mov al, byte [esi + 0xc]
mov byte [ebp - 0x420], al
mov eax, dword [esi + 0x10]
add eax, 4
push edi
push eax
call fcn.0040199c
mov eax, dword [esi + 0x10]
push dword [0x530940]
add eax, 0x14
lea ecx, [ebp - 0x40c]
push edi
push eax
call fcn.0040199c
mov eax, dword [esi + 0x10]
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x24], edi
lea edi, [ebp - 0x3f0]
mov ecx, dword [eax + 0x24]
mov dword [ebp - 0x3fc], ecx
mov eax, dword [eax + 0x28]
mov dword [ebp - 0x3f8], eax
lea eax, [esi + 0x28]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x24]
mov ecx, dword [eax]
mov eax, dword [esi + 0x10]
add ecx, 4
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x28], ecx
lea ebx, [eax + edx + 4]
mov al, byte [eax + edx + 4]
and al, 1
mov byte [edi - 4], al
mov al, byte [ebx]
shr al, 1
and al, 1
mov byte [edi - 3], al
mov eax, dword [ebx + 4]
mov dword [edi], eax
mov al, byte [ebx]
test al, 3
je 0x4238d1
test al, 0x10
je 0x42389e
lea eax, [ebx + 0x10]
jmp 0x4238af
push dword [ebp - 0x10]
lea eax, [ebp - 0x44]
mov ecx, esi
push eax
call fcn.004236c4
mov ecx, dword [ebp - 0x28]
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0xd0], edx
mov dl, byte [ebx]
shr dl, 4
and dl, 1
mov byte [edi + 0xc], al
mov byte [edi + 4], dl
mov edx, dword [ebp - 0xd0]
mov dword [edi + 8], edx
mov al, byte [ebx]
shr al, 3
and al, 1
mov byte [edi + 0xd], al
mov al, byte [ebx]
test al, 8
je 0x42394e
shr al, 2
and al, 1
add ebx, 8
mov byte [edi + 0xe], al
mov eax, dword [esi + 0x18]
mov ecx, dword [ebx]
xor edx, edx
test cl, cl
push dword [ebx + 4]
setne dl
mov ecx, dword [eax + edx*4]
lea eax, [eax + edx*4]
add ecx, 4
call fcn.0042a469
push 0
push 0x583170
push 0x57d8c8
push 0
push eax
call fcn.004e7392
mov ecx, dword [eax + 4]
add esp, 0x14
mov ecx, dword [ecx + 4]
mov ecx, dword [ecx + eax + 8]
cmp dword [ecx + 0x28], 0x4d
je 0x423939
mov ecx, eax
call fcn.004c2bd3
jmp 0x42393c
or eax, 0xffffffff
mov dword [edi + 0x10], eax
lea eax, [edi + 0x14]
push eax
push ebx
mov ecx, esi
call fcn.00428e78
mov ecx, dword [ebp - 0x28]
cmp dword [ecx + 0x40], 0
seta al
mov byte [edi + 0x20], al
mov eax, dword [ecx + 0x48]
cmp dword [eax + 0x10], 0
jbe 0x4239a5
push dword [ebp - 0x10]
mov ecx, esi
call fcn.00429483
mov ebx, eax
mov eax, dword [ebx + 0xc]
lea ecx, [ebx + 0xc]
call dword [eax]
mov dword [edi + 0x24], eax
test byte [ebx + 0x18], 2
je 0x423983
mov eax, dword [ebx + 0x2c]
jmp 0x423986
or eax, 0xffffffff
mov dword [edi + 0x28], eax
test byte [ebx + 0x18], 1
je 0x4239a9
push dword [0x530940]
add ebx, 0x1c
lea ecx, [edi + 0x2c]
push 0
push ebx
call fcn.0040199c
jmp 0x4239a9
or dword [edi + 0x24], 0xffffffff
mov ebx, dword [ebp - 0x28]
mov eax, dword [ebx + 0x44]
mov dword [edi + 0x3c], eax
mov eax, dword [ebx + 0x48]
mov ecx, dword [ebx + 0x4c]
mov eax, dword [eax + 0x10]
mov edx, dword [ecx + 0x10]
lea ecx, [edi + 0x40]
add edx, eax
push edx
call fcn.0042bc9d
mov ecx, dword [ebx + 0x48]
lea eax, [ebp - 0x58]
add ecx, 4
push eax
call fcn.0042d4e4
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebx + 0x48]
lea eax, [ebp - 0x30]
add ecx, 4
push eax
call fcn.00474215
mov eax, dword [eax]
cmp dword [ebp - 0x14], eax
je 0x423a85
lea eax, [ebp + 0xb]
lea ecx, [ebp - 0xbc]
push eax
call fcn.0042b675
mov ecx, dword [edi + 0x44]
mov byte [ebp - 4], 1
test ecx, ecx
jne 0x423a15
xor eax, eax
jmp 0x423a20
mov eax, dword [edi + 0x48]
push 0x14
sub eax, ecx
pop ecx
cdq
idiv ecx
lea ecx, [ebp - 0xc0]
inc eax
push ecx
push eax
lea ecx, [edi + 0x40]
call fcn.0042bd5c
and byte [ebp - 4], 0
push 1
lea ecx, [ebp - 0xbc]
call fcn.004016d9
mov ecx, dword [ebp - 0x14]
mov eax, dword [edi + 0x48]
mov ecx, dword [ecx + 0xc]
mov dword [eax - 0x14], ecx
mov eax, dword [ebp - 0x14]
mov ecx, esi
push dword [eax + 0xc]
call fcn.00429595
test byte [eax + 0x18], 1
je 0x423a78
push dword [0x530940]
mov ecx, dword [edi + 0x48]
add eax, 0x1c
add ecx, 0xfffffff0
push 0
push eax
call fcn.0040199c
lea ecx, [ebp - 0x14]
call fcn.00411f99
jmp 0x4239dd
mov ecx, dword [ebx + 0x4c]
lea eax, [ebp - 0x34]
add ecx, 4
push eax
call fcn.0042d4e4
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebx + 0x4c]
lea eax, [ebp - 0x4c]
add ecx, 4
push eax
call fcn.00474215
mov eax, dword [eax]
cmp dword [ebp - 0x14], eax
je 0x423b07
lea eax, [ebp - 0x15]
lea ecx, [ebp - 0x70]
push eax
call fcn.0042b675
mov ecx, dword [edi + 0x44]
mov byte [ebp - 4], 2
test ecx, ecx
jne 0x423aca
xor eax, eax
jmp 0x423ad5
mov eax, dword [edi + 0x48]
push 0x14
sub eax, ecx
pop ecx
cdq
idiv ecx
lea ecx, [ebp - 0x74]
inc eax
push ecx
push eax
lea ecx, [edi + 0x40]
call fcn.0042bd5c
and byte [ebp - 4], 0
push 1
lea ecx, [ebp - 0x70]
call fcn.004016d9
mov ecx, dword [ebp - 0x14]
mov eax, dword [edi + 0x48]
mov ecx, dword [ecx + 0xc]
mov dword [eax - 0x14], ecx
lea ecx, [ebp - 0x14]
call fcn.00411f99
jmp 0x423a99
add dword [ebp - 0x24], 0x18
inc dword [ebp - 0x10]
add dword [ebp - 0x2c], 4
add edi, 0x54
cmp dword [ebp - 0x24], 0xc0
jl 0x423860
and dword [ebp - 0x40], 0
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x48], 0x5362fc
mov eax, dword [esi + 0x10]
mov byte [ebp - 4], 3
mov eax, dword [eax + 0x3c]
mov ecx, dword [eax + 8]
test ecx, ecx
je 0x423b55
lea eax, [ebp - 0x154]
lea edx, [ebp - 0x48]
mov dword [ebp - 0x40], eax
mov eax, dword [ecx]
push edx
call dword [eax + 4]
jmp 0x423b5c
or dword [ebp - 0x154], 0xffffffff
and dword [ebp - 0x40], 0
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x48], 0x5362e8
mov eax, dword [esi + 0x10]
mov byte [ebp - 4], 4
mov eax, dword [eax + 0x40]
mov ecx, dword [eax + 8]
test ecx, ecx
je 0x423b8f
lea eax, [ebp - 0x138]
lea edx, [ebp - 0x48]
mov dword [ebp - 0x40], eax
mov eax, dword [ecx]
push edx
call dword [eax + 4]
jmp 0x423b96
or dword [ebp - 0x138], 0xffffffff
mov eax, dword [esi + 0x10]
and byte [ebp - 4], 0
mov edi, dword [eax + 0x30]
add edi, 4
cmp byte [edi], 0
je 0x423bad
mov eax, dword [edi + 4]
jmp 0x423baf
xor eax, eax
mov dword [ebp - 0x128], eax
cmp byte [edi], 0
je 0x423bdc
and dword [ebp - 0x10], 0
lea ebx, [ebp - 0x124]
push dword [ebp - 0x10]
mov ecx, edi
call fcn.004ba7d7
inc dword [ebp - 0x10]
mov dword [ebx], eax
add ebx, 4
cmp dword [ebp - 0x10], 8
jl 0x423bc4
mov edi, dword [esi + 4]
neg edi
sbb edi, edi
xor ebx, ebx
and edi, 0x1c
add edi, 0x80
test edi, edi
jle 0x423c2b
mov ecx, dword [esi + 0x24]
push ebx
add ecx, 0x24
call fcn.0042d4b4
test al, al
jne 0x423c17
mov ecx, dword [esi + 0x10]
push ebx
add ecx, 0x44
call fcn.0042d4b4
test al, al
jne 0x423c17
push 1
pop eax
jmp 0x423c19
xor eax, eax
push eax
push ebx
lea ecx, [ebp - 0x104]
call fcn.0042d448
inc ebx
cmp ebx, edi
jl 0x423bf2
push 8
xor ecx, ecx
lea eax, [esi + 0x28]
pop edx
mov edi, dword [eax]
add eax, 4
mov edi, dword [edi + 0x50]
add ecx, dword [edi + 0x10]
dec edx
jne 0x423c33
push ecx
lea ecx, [ebp - 0xf0]
call fcn.0042bdf5
push 4
lea edi, [esi + 0x28]
mov dword [ebp - 0x2c], 8
pop ebx
mov ecx, dword [edi]
mov eax, dword [ecx + 0x50]
add eax, ebx
mov eax, dword [eax + 4]
mov edx, dword [eax]
mov dword [ebp + 8], edx
mov eax, dword [ecx + 0x50]
add eax, ebx
cmp edx, dword [eax + 4]
je 0x423ca2
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0xf0]
add eax, 0xc
push eax
push dword [ebp - 0xe8]
call fcn.004ae478
lea ecx, [ebp + 8]
call fcn.00411f99
mov eax, dword [edi]
mov eax, dword [eax + 0x50]
add eax, ebx
mov eax, dword [eax + 4]
cmp dword [ebp + 8], eax
jne 0x423c73
add edi, ebx
dec dword [ebp - 0x2c]
jne 0x423c5a
and dword [ebp - 0x2c], 0
and dword [ebp - 0x24], 0
mov dword [ebp + 8], ebx
mov eax, dword [0x5867d4]
mov ecx, dword [ebp - 0x24]
lea ebx, [ecx + eax]
mov eax, dword [esi + 0x10]
mov edi, dword [eax + 0x7c]
mov eax, dword [ebx]
add edi, dword [ebp + 8]
add eax, 4
push eax
mov ecx, dword [edi]
add ecx, 4
call fcn.00404159
test eax, eax
jne 0x423cfc
mov eax, dword [edi]
mov ecx, dword [ebx]
mov edx, dword [eax + 0x4c]
cmp edx, dword [ecx + 0x4c]
jne 0x423cfc
lea edx, [ecx + 0x54]
lea ecx, [eax + 0x54]
push edx
call fcn.0042cc33
test al, al
jne 0x423d96
lea ecx, [ebp - 0x78]
call fcn.004243c6
mov eax, dword [edi]
mov ebx, dword [ebx]
mov byte [ebp - 4], 5
mov ecx, dword [eax + 0x4c]
cmp ecx, dword [ebx + 0x4c]
je 0x423d17
mov dword [ebp - 0x78], ecx
lea edx, [ebx + 4]
lea ecx, [eax + 4]
push edx
call fcn.00404159
test eax, eax
je 0x423d3d
mov eax, dword [edi]
push dword [0x530940]
add eax, 4
lea ecx, [ebp - 0x74]
push 0
push eax
call fcn.0040199c
mov eax, dword [edi]
lea ecx, [ebp - 0xc4]
mov eax, dword [eax + 0x54]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xc8], eax
lea eax, [ebp - 0x78]
push eax
call fcn.0042c6ac
lea eax, [ebp - 0xc8]
lea ecx, [ebp - 0xe0]
push eax
lea eax, [ebp - 0x44]
push eax
mov byte [ebp - 4], 6
call fcn.0042d4f2
push 1
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 5
call fcn.004016d9
and byte [ebp - 4], 0
push 1
lea ecx, [ebp - 0x74]
call fcn.004016d9
add dword [ebp + 8], 4
add dword [ebp - 0x24], 0x10
xor ebx, ebx
inc dword [ebp - 0x2c]
cmp dword [ebp + 8], 0x274
jl 0x423cb4
push dword [esi + 4]
lea eax, [ebp - 0x1c]
lea ecx, [ebp - 0x428]
push eax
call fcn.0043b259
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x7c]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x7c]
lea ecx, [ebp - 0x1c]
push eax
call fcn.00433cda
mov eax, dword [esi + 4]
cmp eax, 2
jl 0x423df7
mov eax, dword [esi + 0x10]
add eax, 0x58
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00433d12
pop ecx
pop ecx
jmp 0x423e3b
cmp eax, 1
jl 0x423e3b
push ebx
lea ecx, [ebp - 0x74]
call fcn.0042de95
mov eax, dword [esi + 0x10]
xor edi, edi
lea ecx, [ebp - 0x74]
push edi
push ecx
mov ecx, 0x81
add eax, 0x58
xor edx, edx
push ecx
push eax
push edx
push eax
lea eax, [ebp - 0x44]
mov dword [ebp - 0x40], edx
push eax
call fcn.00433d79
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00433dbc
add esp, 0x24
xor ebx, ebx
cmp dword [esi + 4], 2
jl 0x423e64
mov eax, dword [esi + 0x10]
add eax, 0x6c
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00433e22
mov eax, dword [esi + 0x10]
add eax, 0x78
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00433e81
add esp, 0x10
mov eax, dword [esi + 0x10]
mov eax, dword [eax + 0x34]
add eax, 4
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00433edc
mov eax, dword [esi + 4]
pop ecx
cmp eax, 2
pop ecx
jl 0x423e8d
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, esi
call fcn.004284ee
xor eax, eax
mov dword [ebp - 0x3c], ebx
cmp byte [esi + 0xc], al
mov dword [ebp - 0x10], ebx
setne al
inc eax
mov dword [ebp - 0x24], eax
je 0x423f3c
mov ecx, dword [ebp - 0x10]
mov eax, dword [esi + 0x18]
mov edi, ecx
shl edi, 2
add eax, edi
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0042b46f
mov eax, dword [esi + 0x18]
pop ecx
add eax, edi
pop ecx
mov dword [ebp - 0x38], eax
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x10]
mov ecx, dword [ecx + 8]
mov ecx, dword [ecx]
mov ebx, ecx
mov eax, dword [esi + 0x18]
lea ecx, [eax + edi]
cmp dword [ebp - 0x38], ecx
jne 0x423ee5
cmp ebx, dword [0x536228]
je 0x423f2b
inc dword [ebp - 0x3c]
push 0
push 0x583170
push 0x57d8c8
push 0
push ebx
lea ecx, [eax + edi]
call fcn.0042b259
push eax
call fcn.004e7392
add esp, 0x14
test eax, eax
je 0x423f18
cmp dword [eax + 0xb4], 0
je 0x423f18
inc dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
lea ecx, [ebx + ebx*4]
mov eax, dword [eax]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 8]
mov ebx, dword [eax + ecx*4]
jmp 0x423ed2
inc dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x24]
jb 0x423ea5
xor ebx, ebx
lea ecx, [ebp - 0xac]
call fcn.00424511
test byte [0x59f2f0], 1
mov byte [ebp - 4], 7
jne 0x423f97
mov al, byte [ebp + 0xb]
or byte [0x59f2f0], 1
mov byte [0x59f3b0], al
mov dword [0x59f3b4], ebx
mov dword [0x59f3b8], ebx
mov dword [0x59f3bc], ebx
push str.objtmplt.txt
mov ecx, 0x59f3b0
mov byte [ebp - 4], 8
call fcn.004909c6
push 0x4244f1
mov byte [ebp - 4], 7
call fcn.004e7063
pop ecx
mov eax, dword [0x59f3b4]
cmp eax, dword [0x59f3b8]
mov edi, eax
je 0x423fbd
push edi
lea ecx, [ebp - 0xac]
call fcn.00433f26
add edi, 0x4c
cmp edi, dword [0x59f3b8]
jne 0x423fa6
lea eax, [ebp - 0x4d]
lea ecx, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x4c], ebx
push dword [ebp - 0x3c]
call fcn.004334de
xor edx, edx
cmp dword [ebp - 0x24], ebx
mov byte [ebp - 4], 9
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x10], edx
jbe 0x4240df
mov eax, dword [esi + 0x18]
mov ecx, dword [eax + edx*4]
lea eax, [eax + edx*4]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ecx + 0x10]
shl eax, 2
mov ecx, dword [ecx + 8]
mov dword [ebp + 8], eax
mov ecx, dword [ecx]
mov dword [ebp - 0x34], ecx
mov eax, dword [esi + 0x18]
mov edx, dword [ebp - 0x10]
lea ecx, [eax + edx*4]
cmp dword [ebp - 0x38], ecx
jne 0x424028
mov ecx, dword [ebp - 0x34]
cmp ecx, dword [0x536228]
je 0x4240d2
mov ecx, dword [ebp - 0x10]
push dword [ebp - 0x34]
lea ecx, [eax + ecx*4]
call fcn.0042b259
mov ebx, eax
mov eax, dword [ebp + 8]
inc dword [ebp - 0x14]
add dword [ebp + 8], 4
mov edi, dword [ebp - 0x88]
mov dword [ebp - 0x30], eax
mov eax, dword [ebx + 4]
lea ecx, [ebp - 0xac]
add eax, 0xc
push eax
call fcn.00433f26
mov ecx, dword [ebp - 0x30]
push 0
push 0x583170
push 0x57d8c8
push 0
push ebx
mov dword [ecx + edi], eax
call fcn.004e7392
add esp, 0x14
test eax, eax
je 0x4240b4
mov eax, dword [eax + 0xb4]
test eax, eax
je 0x4240b4
mov ecx, dword [eax + 4]
mov ebx, dword [ebp + 8]
inc dword [ebp - 0x14]
add dword [ebp + 8], 4
mov ecx, dword [ecx + 4]
mov edi, dword [ebp - 0x88]
mov eax, dword [ecx + eax + 8]
lea ecx, [ebp - 0xac]
add eax, 0xc
push eax
call fcn.00433f26
mov dword [ebx + edi], eax
mov eax, dword [ebp - 0x38]
xor ebx, ebx
mov eax, dword [eax]
mov ecx, dword [eax + 0x10]
mov eax, dword [ebp - 0x34]
mov ecx, dword [ecx + 8]
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*4]
mov dword [ebp - 0x34], eax
jmp 0x42400b
inc edx
cmp edx, dword [ebp - 0x24]
mov dword [ebp - 0x10], edx
jb 0x423feb
cmp dword [ebp - 0x98], ebx
jne 0x4240ec
mov dword [ebp + 8], ebx
jmp 0x4240fe
mov eax, dword [ebp - 0x94]
sub eax, dword [ebp - 0x98]
sar eax, 2
mov dword [ebp + 8], eax
lea eax, [ebp + 8]
lea ecx, [ebp - 0x1c]
push eax
call fcn.00407426
xor edi, edi
mov eax, dword [ebp - 0x98]
cmp eax, ebx
je 0x42413a
mov ecx, dword [ebp - 0x94]
sub ecx, eax
sar ecx, 2
cmp edi, ecx
jae 0x42413a
mov eax, dword [eax + edi*4]
add eax, 0xc
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.004906be
pop ecx
inc edi
pop ecx
jmp 0x42410c
xor eax, eax
lea edi, [ebp - 0x54]
stosd dword es:[edi], eax
stosb byte es:[edi], al
lea eax, [ebp - 0x3c]
lea ecx, [ebp - 0x1c]
push eax
mov dword [ebp - 0x14], ebx
call fcn.00407426
cmp dword [ebp - 0x24], ebx
mov dword [ebp - 0x10], ebx
jbe 0x4242f6
mov ecx, dword [ebp - 0x10]
mov eax, dword [esi + 0x18]
mov ebx, ecx
shl ebx, 2
add eax, ebx
mov dword [ebp - 0x5c], eax
mov ecx, dword [eax]
mov eax, dword [ebp - 0x14]
shl eax, 2
mov ecx, dword [ecx + 0x10]
mov dword [ebp - 0x28], eax
mov ecx, dword [ecx + 8]
mov ecx, dword [ecx]
mov edi, ecx
mov eax, dword [esi + 0x18]
lea ecx, [eax + ebx]
cmp dword [ebp - 0x5c], ecx
jne 0x424198
cmp edi, dword [0x536228]
je 0x4242e7
mov eax, dword [ebx + eax]
lea edi, [edi + edi*4]
shl edi, 2
mov eax, dword [eax + 0x10]
mov dl, byte [ebp - 0x10]
inc dword [ebp - 0x14]
mov byte [ebp + 0xb], dl
mov ecx, dword [eax + 8]
mov eax, dword [ecx + edi + 8]
mov dword [ebp - 0x38], eax
mov byte [ebp - 0x15], al
mov ecx, dword [ecx + edi + 0xc]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x34], ecx
mov byte [ebp - 0x1d], cl
lea ecx, [ebp - 0x54]
add dword [ebp - 0x28], 4
push ecx
mov ecx, dword [ebp - 0x88]
add eax, ecx
lea ecx, [ebp - 0x1c]
push eax
lea eax, [ebp + 0xb]
push eax
lea eax, [ebp - 0x1d]
push eax
lea eax, [ebp - 0x15]
push eax
call fcn.0040250e
mov ecx, eax
call fcn.0040250e
mov ecx, eax
call fcn.0040250e
mov ecx, eax
call fcn.00407426
mov ecx, eax
call fcn.00433fa1
mov eax, dword [esi + 0x18]
mov eax, dword [ebx + eax]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 8]
add eax, edi
mov eax, dword [eax + 0x10]
test eax, eax
je 0x424225
mov eax, dword [eax + 8]
mov dword [ebp + 8], eax
jmp 0x424229
and dword [ebp + 8], 0
mov ecx, dword [ebp + 8]
push dword [esi + 4]
lea edx, [ebp - 0x1c]
mov eax, dword [ecx]
push edx
call dword [eax + 0xc]
push 0
push 0x583170
push 0x57d8c8
push 0
push dword [ebp + 8]
call fcn.004e7392
add esp, 0x14
test eax, eax
je 0x4242d4
mov eax, dword [eax + 0xb4]
test eax, eax
mov dword [ebp - 0x30], eax
je 0x4242d4
mov al, byte [ebp - 0x10]
lea ecx, [ebp - 0x54]
mov byte [ebp + 0xb], al
mov al, byte [ebp - 0x34]
mov byte [ebp - 0x15], al
mov al, byte [ebp - 0x38]
mov byte [ebp - 0x1d], al
mov eax, dword [ebp - 0x28]
push ecx
mov ecx, dword [ebp - 0x88]
add eax, ecx
inc dword [ebp - 0x14]
push eax
lea eax, [ebp + 0xb]
add dword [ebp - 0x28], 4
push eax
lea eax, [ebp - 0x15]
lea ecx, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x1d]
push eax
call fcn.0040250e
mov ecx, eax
call fcn.0040250e
mov ecx, eax
call fcn.0040250e
mov ecx, eax
call fcn.00407426
mov ecx, eax
call fcn.00433fa1
mov eax, dword [ebp - 0x30]
push dword [esi + 4]
lea edx, [ebp - 0x1c]
mov ecx, dword [eax + 4]
push edx
mov ecx, dword [ecx + 4]
lea ecx, [ecx + eax + 4]
mov eax, dword [ecx]
call dword [eax + 0xc]
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 8]
mov edi, dword [eax + edi]
jmp 0x424181
inc dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x24]
jb 0x42415c
mov eax, dword [esi + 0x10]
xor edi, edi
mov eax, dword [eax + 0x38]
add eax, 4
mov ecx, dword [eax + 4]
cmp ecx, edi
jne 0x42430c
xor eax, eax
jmp 0x424317
mov eax, dword [eax + 8]
push 0x4c
sub eax, ecx
pop ecx
cdq
idiv ecx
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00407426
mov dword [ebp + 8], edi
mov eax, dword [esi + 0x10]
mov ecx, dword [eax + 0x38]
mov edx, dword [ecx + 8]
test edx, edx
je 0x42435d
mov eax, dword [ecx + 0xc]
push 0x4c
sub eax, edx
pop ebx
cdq
idiv ebx
cmp edi, eax
jae 0x42435d
push dword [esi + 4]
mov ecx, dword [ecx + 8]
add ecx, dword [ebp + 8]
lea eax, [ebp - 0x1c]
push eax
call fcn.004c0889
inc edi
add dword [ebp + 8], ebx
jmp 0x424329
push 0x1f
xor eax, eax
pop ecx
lea edi, [ebp - 0x4a4]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x4a4]
lea ecx, [ebp - 0x1c]
push eax
call fcn.00433fd9
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 7
call fcn.004adef0
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0xa
call fcn.004adef0
and byte [ebp - 4], 0
lea ecx, [ebp - 0xac]
call fcn.0042ba84
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x428]
call fcn.0041faea
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 4