Function at 0x412fc0
Capabilities:
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x41eed5
mov eax, dword fs:[0]
push eax
sub esp, 0x80
mov eax, dword [0x42600c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor eax, eax
sar eax, 4
push eax
push 0
call fcn.00417010
sub esp, 0x18
lea eax, [ebp - 0x4c]
mov edi, esp
mov dword [ebp - 0x5c], edi
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [ebp - 0x38]
lea esi, [ebp - 0x13]
mov dword [ebp - 0x5c], ecx
mov eax, 0xcccccccd
dec esi
mul ecx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
mov eax, dword [ebp - 0x5c]
add cl, cl
sub al, cl
mov ecx, edx
add al, 0x30
mov byte [esi], al
mov eax, edx
mov dword [ebp - 0x5c], eax
test eax, eax
jne 0x413015
push ecx
lea eax, [ebp - 0x13]
push eax
push esi
lea ecx, [ebp - 0x74]
call fcn.00405740
lea eax, [ebp - 0x74]
mov dword [ebp - 4], 0
push eax
mov edx, str.CoreCount:
mov ecx, edi
call fcn.00404ca0
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov ecx, dword [ebp - 0x60]
cmp ecx, 0x10
jb 0x4130a3
mov edx, dword [ebp - 0x74]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x413099
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x413099
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0041c982
add esp, 8
lea ecx, [ebp - 0x58]
call fcn.00406350
add esp, 0x18
mov dword [ebp - 4], 1
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x24], 0xf4
call fcn.00405e50
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x58]
test ecx, ecx
je 0x413131
mov edx, dword [ebp - 0x50]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x413112
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4131a6
push edx
push ecx
call fcn.0041c982
add esp, 8
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 4], 3
mov edi, dword [0x4269cc]
cmp edi, dword [0x4269d0]
je 0x41316a
mov eax, dword [ebp - 0x24]
xor esi, esi
mov ecx, dword [ebp - 0x18]
xor edx, edx
mov dword [edi], eax
mov eax, dword [ebp - 0x20]
mov dword [edi + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
add dword [0x4269cc], 0x10
jmp 0x41317f
lea eax, [ebp - 0x24]
mov ecx, 0x4269c8
push eax
push edi
call fcn.0040adc0
mov esi, dword [ebp - 0x18]
mov edx, dword [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
test edx, edx
je 0x4131b6
sub esi, edx
mov eax, edx
cmp esi, 0x1000
jb 0x4131ac
mov edx, dword [eax - 4]
add esi, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4131ac
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push esi
push edx
call fcn.0041c982
add esp, 8
sub esp, 0x18
lea esi, [ebp - 0x58]
mov ecx, esp
call fcn.0040bf60
mov ecx, esi
call fcn.00406350
add esp, 0x18
mov dword [ebp - 4], 4
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov eax, esi
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x24], 0xf5
call fcn.00405e50
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x58]
test edx, edx
je 0x41324f
mov ecx, dword [ebp - 0x50]
mov eax, edx
sub ecx, edx
cmp ecx, 0x1000
jb 0x413230
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4132c4
push ecx
push edx
call fcn.0041c982
add esp, 8
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 4], 6
mov edi, dword [0x4269cc]
cmp edi, dword [0x4269d0]
je 0x413288
mov eax, dword [ebp - 0x24]
xor esi, esi
mov ecx, dword [ebp - 0x18]
xor edx, edx
mov dword [edi], eax
mov eax, dword [ebp - 0x20]
mov dword [edi + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
add dword [0x4269cc], 0x10
jmp 0x41329d
lea eax, [ebp - 0x24]
mov ecx, 0x4269c8
push eax
push edi
call fcn.0040adc0
mov esi, dword [ebp - 0x18]
mov edx, dword [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
test edx, edx
je 0x4132d4
sub esi, edx
mov eax, edx
cmp esi, 0x1000
jb 0x4132ca
mov edx, dword [eax - 4]
add esi, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4132ca
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push esi
push edx
call fcn.0041c982
add esp, 8
sub esp, 0x18
lea esi, [ebp - 0x58]
mov ecx, esp
call fcn.0040bdc0
mov ecx, esi
call fcn.00406350
add esp, 0x18
mov dword [ebp - 4], 7
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov eax, esi
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x24], 0xf6
call fcn.00405e50
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x58]
test edx, edx
je 0x41336d
mov ecx, dword [ebp - 0x50]
mov eax, edx
sub ecx, edx
cmp ecx, 0x1000
jb 0x41334e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4133e2
push ecx
push edx
call fcn.0041c982
add esp, 8
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 4], 9
mov edi, dword [0x4269cc]
cmp edi, dword [0x4269d0]
je 0x4133a6
mov eax, dword [ebp - 0x24]
xor esi, esi
mov ecx, dword [ebp - 0x18]
xor edx, edx
mov dword [edi], eax
mov eax, dword [ebp - 0x20]
mov dword [edi + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
add dword [0x4269cc], 0x10
jmp 0x4133bb
lea eax, [ebp - 0x24]
mov ecx, 0x4269c8
push eax
push edi
call fcn.0040adc0
mov esi, dword [ebp - 0x18]
mov edx, dword [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
test edx, edx
je 0x4133f2
sub esi, edx
mov eax, edx
cmp esi, 0x1000
jb 0x4133e8
mov edx, dword [eax - 4]
add esi, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4133e8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push esi
push edx
call fcn.0041c982
add esp, 8
sub esp, 0x18
lea esi, [ebp - 0x58]
cmp dword [sym.imp.KERNEL32.dll_IsWow64Process], 0
mov ecx, esp
xorps xmm0, xmm0
mov dword [ebp - 0x5c], ecx
push 3
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
je 0x413423
push 0x420aa8
jmp 0x413428
push 0x420aac
call fcn.00405000
mov ecx, esi
call fcn.00406350
add esp, 0x18
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x24], pe_nt_image_headers32
call fcn.00405e50
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x58]
test ecx, ecx
je 0x4134ba
mov edx, dword [ebp - 0x50]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x41349b
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41352f
push edx
push ecx
call fcn.0041c982
add esp, 8
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 4], 0xc
mov edi, dword [0x4269cc]
cmp edi, dword [0x4269d0]
je 0x4134f3
mov eax, dword [ebp - 0x24]
xor esi, esi
mov ecx, dword [ebp - 0x18]
xor edx, edx
mov dword [edi], eax
mov eax, dword [ebp - 0x20]
mov dword [edi + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
add dword [0x4269cc], 0x10
jmp 0x413508
lea eax, [ebp - 0x24]
mov ecx, 0x4269c8
push eax
push edi
call fcn.0040adc0
mov esi, dword [ebp - 0x18]
mov edx, dword [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
test edx, edx
je 0x41353f
sub esi, edx
mov eax, edx
cmp esi, 0x1000
jb 0x413535
mov edx, dword [eax - 4]
add esi, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x413535
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push esi
push edx
call fcn.0041c982
add esp, 8
sub esp, 0x18
lea esi, [ebp - 0x58]
mov ecx, esp
call fcn.0040c840
mov ecx, esi
call fcn.00406350
add esp, 0x18
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov eax, esi
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x24], 0xf7
call fcn.00405e50
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x58]
test edx, edx
je 0x4135d8
mov ecx, dword [ebp - 0x50]
mov eax, edx
sub ecx, edx
cmp ecx, 0x1000
jb 0x4135b9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41364d
push ecx
push edx
call fcn.0041c982
add esp, 8
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 4], 0xf
mov edi, dword [0x4269cc]
cmp edi, dword [0x4269d0]
je 0x413611
mov eax, dword [ebp - 0x24]
xor esi, esi
mov ecx, dword [ebp - 0x18]
xor edx, edx
mov dword [edi], eax
mov eax, dword [ebp - 0x20]
mov dword [edi + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
add dword [0x4269cc], 0x10
jmp 0x413626
lea eax, [ebp - 0x24]
mov ecx, 0x4269c8
push eax
push edi
call fcn.0040adc0
mov esi, dword [ebp - 0x18]
mov edx, dword [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
test edx, edx
je 0x41365d
sub esi, edx
mov eax, edx
cmp esi, 0x1000
jb 0x413653
mov edx, dword [eax - 4]
add esi, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x413653
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push esi
push edx
call fcn.0041c982
add esp, 8
sub esp, 0x18
lea esi, [ebp - 0x58]
mov ecx, esp
call fcn.0040bc40
mov ecx, esi
call fcn.00406350
add esp, 0x18
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov eax, esi
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x24], 0xf9
call fcn.00405e50
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x58]
test edx, edx
je 0x4136f6
mov ecx, dword [ebp - 0x50]
mov eax, edx
sub ecx, edx
cmp ecx, 0x1000
jb 0x4136d7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41376b
push ecx
push edx
call fcn.0041c982
add esp, 8
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 4], 0x12
mov edi, dword [0x4269cc]
cmp edi, dword [0x4269d0]
je 0x41372f
mov eax, dword [ebp - 0x24]
xor esi, esi
mov ecx, dword [ebp - 0x18]
xor edx, edx
mov dword [edi], eax
mov eax, dword [ebp - 0x20]
mov dword [edi + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
add dword [0x4269cc], 0x10
jmp 0x413744
lea eax, [ebp - 0x24]
mov ecx, 0x4269c8
push eax
push edi
call fcn.0040adc0
mov esi, dword [ebp - 0x18]
mov edx, dword [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
test edx, edx
je 0x41377b
sub esi, edx
mov eax, edx
cmp esi, 0x1000
jb 0x413771
mov edx, dword [eax - 4]
add esi, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x413771
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push esi
push edx
call fcn.0041c982
add esp, 8
mov edx, dword [0x4260ec]
lea ecx, [ebp - 0x58]
call fcn.00406ff0
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x24], 1
call fcn.00405e50
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x58]
test ecx, ecx
je 0x41380c
mov edx, dword [ebp - 0x50]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x4137ed
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x413881
push edx
push ecx
call fcn.0041c982
add esp, 8
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 4], 0x15
mov edi, dword [0x4269cc]
cmp edi, dword [0x4269d0]
je 0x413845
mov eax, dword [ebp - 0x24]
xor esi, esi
mov ecx, dword [ebp - 0x18]
xor edx, edx
mov dword [edi], eax
mov eax, dword [ebp - 0x20]
mov dword [edi + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
add dword [0x4269cc], 0x10
jmp 0x41385a
lea eax, [ebp - 0x24]
mov ecx, 0x4269c8
push eax
push edi
call fcn.0040adc0
mov esi, dword [ebp - 0x18]
mov edx, dword [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
test edx, edx
je 0x413891
sub esi, edx
mov eax, edx
cmp esi, 0x1000
jb 0x413887
mov edx, dword [eax - 4]
add esi, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x413887
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push esi
push edx
call fcn.0041c982
add esp, 8
mov dx, word [0x426928]
lea ecx, [ebp - 0x58]
call fcn.00406ff0
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x17
push eax
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x24], 0x11
call fcn.00405e50
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x58]
test ecx, ecx
je 0x413923
mov edx, dword [ebp - 0x50]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x413904
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x413998
push edx
push ecx
call fcn.0041c982
add esp, 8
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 4], 0x18
mov edi, dword [0x4269cc]
cmp edi, dword [0x4269d0]
je 0x41395c
mov eax, dword [ebp - 0x24]
xor esi, esi
mov ecx, dword [ebp - 0x18]
xor edx, edx
mov dword [edi], eax
mov eax, dword [ebp - 0x20]
mov dword [edi + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
add dword [0x4269cc], 0x10
jmp 0x413971
lea eax, [ebp - 0x24]
mov ecx, 0x4269c8
push eax
push edi
call fcn.0040adc0
mov esi, dword [ebp - 0x18]
mov edx, dword [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
test edx, edx
je 0x4139a8
sub esi, edx
mov eax, edx
cmp esi, 0x1000
jb 0x41399e
mov edx, dword [eax - 4]
add esi, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x41399e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push esi
push edx
call fcn.0041c982
add esp, 8
mov edx, dword [0x426144]
lea ecx, [ebp - 0x58]
call fcn.00406ff0
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x24], 0x21
call fcn.00405e50
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x58]
test ecx, ecx
je 0x413a39
mov edx, dword [ebp - 0x50]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x413a1a
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x413aae
push edx
push ecx
call fcn.0041c982
add esp, 8
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 4], 0x1b
mov edi, dword [0x4269cc]
cmp edi, dword [0x4269d0]
je 0x413a72
mov eax, dword [ebp - 0x24]
xor esi, esi
mov ecx, dword [ebp - 0x18]
xor edx, edx
mov dword [edi], eax
mov eax, dword [ebp - 0x20]
mov dword [edi + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
add dword [0x4269cc], 0x10
jmp 0x413a87
lea eax, [ebp - 0x24]
mov ecx, 0x4269c8
push eax
push edi
call fcn.0040adc0
mov esi, dword [ebp - 0x18]
mov edx, dword [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
test edx, edx
je 0x413abe
sub esi, edx
mov eax, edx
cmp esi, 0x1000
jb 0x413ab4
mov edx, dword [eax - 4]
add esi, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x413ab4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push esi
push edx
call fcn.0041c982
add esp, 8
mov edx, dword [0x4260b4]
lea ecx, [ebp - 0x58]
call fcn.00406ff0
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x1d
push eax
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x24], 0x31
call fcn.00405e50
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x58]
test ecx, ecx
je 0x413b4f
mov edx, dword [ebp - 0x50]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x413b30
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x413bc4
push edx
push ecx
call fcn.0041c982
add esp, 8
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 4], 0x1e
mov edi, dword [0x4269cc]
cmp edi, dword [0x4269d0]
je 0x413b88
mov eax, dword [ebp - 0x24]
xor esi, esi
mov ecx, dword [ebp - 0x18]
xor edx, edx
mov dword [edi], eax
mov eax, dword [ebp - 0x20]
mov dword [edi + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
add dword [0x4269cc], 0x10
jmp 0x413b9d
lea eax, [ebp - 0x24]
mov ecx, 0x4269c8
push eax
push edi
call fcn.0040adc0
mov esi, dword [ebp - 0x18]
mov edx, dword [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
test edx, edx
je 0x413bd4
sub esi, edx
mov eax, edx
cmp esi, 0x1000
jb 0x413bca
mov edx, dword [eax - 4]
add esi, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x413bca
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push esi
push edx
call fcn.0041c982
add esp, 8
push ecx
mov ecx, 0x426128
call fcn.0040d150
push ecx
mov ecx, 0x426098
call fcn.0040fcd0
sub esp, 0x18
lea esi, [ebp - 0x58]
mov ecx, esp
call fcn.0040ba40
mov ecx, esi
call fcn.00406350
add esp, 0x18
mov dword [ebp - 4], 0x1f
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov eax, esi
mov byte [ebp - 4], 0x20
push eax
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x24], 0x13
call fcn.00405e50
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x58]
test edx, edx
je 0x413c83
mov ecx, dword [ebp - 0x50]
mov eax, edx
sub ecx, edx
cmp ecx, 0x1000
jb 0x413c64
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x413cf8
push ecx
push edx
call fcn.0041c982
add esp, 8
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 4], 0x21
mov edi, dword [0x4269cc]
cmp edi, dword [0x4269d0]
je 0x413cbc
mov eax, dword [ebp - 0x24]
xor esi, esi
mov ecx, dword [ebp - 0x18]
xor edx, edx
mov dword [edi], eax
mov eax, dword [ebp - 0x20]
mov dword [edi + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
add dword [0x4269cc], 0x10
jmp 0x413cd1
lea eax, [ebp - 0x24]
mov ecx, 0x4269c8
push eax
push edi
call fcn.0040adc0
mov esi, dword [ebp - 0x18]
mov edx, dword [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
test edx, edx
je 0x413d08
sub esi, edx
mov eax, edx
cmp esi, 0x1000
jb 0x413cfe
mov edx, dword [eax - 4]
add esi, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x413cfe
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push esi
push edx
call fcn.0041c982
add esp, 8
sub esp, 0x18
mov edi, esp
sub esp, 0xc
mov esi, esp
sub esp, 0xc
mov ecx, esp
push 0x4269c8
call fcn.00409820
mov ecx, esi
call fcn.00406ca0
add esp, 0xc
mov ecx, edi
call fcn.00406520
add esp, 0xc
lea ecx, [ebp - 0x8c]
call fcn.00417fc0
add esp, 0x18
mov ecx, 0x42610c
push eax
call fcn.004099f0
mov ecx, dword [ebp - 0x78]
cmp ecx, 0x10
jb 0x413d87
mov edx, dword [ebp - 0x8c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x413d7d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x413d7d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0041c982
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041c42c
mov esp, ebp
pop ebp
ret