Function at 0x424430
Capabilities:
Create thread
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x509315
mov eax, dword fs:[0]
push eax
sub esp, 0x24
push ebx
push esi
push edi
mov eax, dword [0x54e938]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x10], esi
lea ebx, [esi + 4]
xor edi, edi
mov dword [ebx], edi
mov dword [ebx + 4], edi
mov dword [ebx + 8], edi
mov dword [esi], vtable.acrobat_broker::SandboxPrintDispatcher.0
push 0x4c
mov dword [ebp - 4], edi
mov dword [esi + 0x1c], edi
call fcn.004051ca
add esp, 4
cmp eax, edi
je 0x425565
mov dword [esi + 0x18], eax
mov dword [eax], eax
mov eax, dword [esi + 0x18]
mov dword [eax + 4], eax
mov eax, dword [esi + 0x18]
mov dword [eax + 8], eax
mov eax, dword [esi + 0x18]
mov byte [eax + 0x48], 1
mov ecx, dword [esi + 0x18]
mov byte [ecx + 0x49], 1
push 0x1c
mov byte [ebp - 4], 1
mov dword [esi + 0x2c], edi
call fcn.004051ca
add esp, 4
cmp eax, edi
je 0x425541
mov dword [esi + 0x28], eax
mov dword [eax], eax
mov eax, dword [esi + 0x28]
mov dword [eax + 4], eax
mov eax, dword [esi + 0x28]
mov dword [eax + 8], eax
mov edx, dword [esi + 0x28]
mov byte [edx + 0x18], 1
mov eax, dword [esi + 0x28]
mov byte [eax + 0x19], 1
mov ecx, dword [ebp + 8]
mov byte [esi + 0x34], 0
mov dword [esi + 0x38], ecx
mov dword [esi + 0x78], edi
mov dword [esi + 0x7c], edi
mov dword [esi + 0x80], edi
push 0x18
mov byte [ebp - 4], 3
mov dword [esi + 0x90], edi
call fcn.004051ca
add esp, 4
cmp eax, edi
je 0x42551d
mov dword [esi + 0x8c], eax
mov dword [eax], eax
mov eax, dword [esi + 0x8c]
mov dword [eax + 4], eax
mov eax, dword [esi + 0x8c]
mov dword [eax + 8], eax
mov edx, dword [esi + 0x8c]
mov byte [edx + 0x14], 1
mov eax, dword [esi + 0x8c]
mov byte [eax + 0x15], 1
mov dword [esi + 0x98], edi
mov dword [esi + 0x9c], edi
mov dword [esi + 0xa0], edi
push 0x30
mov byte [ebp - 4], 4
mov dword [esi + 0xac], edi
call fcn.004051ca
add esp, 4
cmp eax, edi
je 0x4254f9
mov dword [esi + 0xa8], eax
mov dword [eax], eax
mov eax, dword [esi + 0xa8]
mov dword [eax + 4], eax
mov eax, dword [esi + 0xa8]
mov dword [eax + 8], eax
mov ecx, dword [esi + 0xa8]
mov byte [ecx + 0x2c], 1
mov edx, dword [esi + 0xa8]
mov byte [edx + 0x2d], 1
add esi, 0x3c
push esi
mov byte [ebp - 4], 5
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov eax, dword [ebx + 4]
cmp eax, 0x52e7a0
jbe 0x4245e0
mov ecx, dword [ebx]
cmp ecx, 0x52e7a0
ja 0x4245e0
mov esi, 0x52e7a0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x4245d2
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424603
jmp 0x4245fc
cmp eax, dword [ebx + 8]
jne 0x4245ee
push 1
mov ecx, ebx
call fcn.00414760
mov eax, dword [ebx + 4]
cmp eax, edi
je 0x424603
mov esi, 0x52e7a0
mov edi, eax
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e760
jbe 0x42463e
mov ecx, dword [ebx]
cmp ecx, 0x52e760
ja 0x42463e
mov esi, 0x52e760
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424630
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x42465f
jmp 0x424658
cmp eax, dword [ebx + 8]
jne 0x42464c
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x42465f
mov esi, 0x52e760
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e720
jbe 0x42469a
mov ecx, dword [ebx]
cmp ecx, 0x52e720
ja 0x42469a
mov esi, 0x52e720
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x42468c
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x4246bb
jmp 0x4246b4
cmp eax, dword [ebx + 8]
jne 0x4246a8
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x4246bb
mov esi, 0x52e720
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
mov esi, dword [sym.imp.KERNEL32.dll_CreateEventW]
add dword [ebx + 4], 0x40
push 0
push 0
push 0
push 0
call esi
mov edi, dword [ebp - 0x10]
push 0
push 0
push 0
push 0
mov dword [edi + 0x58], eax
call esi
mov dword [edi + 0x5c], eax
lea eax, [edi + 0x74]
push eax
push 0
push edi
push 0x425570
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [edi + 0x54], eax
mov esi, dword [0x5513c0]
test esi, esi
je 0x42472c
mov dword [ebp + 8], esi
add esi, 4
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [ebp + 8]
mov dl, byte [ecx + 0x58]
push esi
mov byte [ebp + 0xb], dl
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp byte [ebp + 0xb], 0
jne 0x4254e3
mov eax, dword [ebx + 4]
cmp eax, 0x52e6e0
jbe 0x424763
mov ecx, dword [ebx]
cmp ecx, 0x52e6e0
ja 0x424763
mov esi, 0x52e6e0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424755
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424784
jmp 0x42477d
cmp eax, dword [ebx + 8]
jne 0x424771
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424784
mov esi, 0x52e6e0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, str.r_a_a_a
jbe 0x4247bf
mov ecx, dword [ebx]
cmp ecx, str.r_a_a_a
ja 0x4247bf
mov esi, str.r_a_a_a
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x4247b1
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x4247e0
jmp 0x4247d9
cmp eax, dword [ebx + 8]
jne 0x4247cd
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x4247e0
mov esi, str.r_a_a_a
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e660
jbe 0x42481b
mov ecx, dword [ebx]
cmp ecx, 0x52e660
ja 0x42481b
mov esi, 0x52e660
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x42480d
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x42483c
jmp 0x424835
cmp eax, dword [ebx + 8]
jne 0x424829
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x42483c
mov esi, 0x52e660
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e620
jbe 0x424877
mov ecx, dword [ebx]
cmp ecx, 0x52e620
ja 0x424877
mov esi, 0x52e620
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424869
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424898
jmp 0x424891
cmp eax, dword [ebx + 8]
jne 0x424885
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424898
mov esi, 0x52e620
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e5e0
jbe 0x4248d3
mov ecx, dword [ebx]
cmp ecx, 0x52e5e0
ja 0x4248d3
mov esi, 0x52e5e0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x4248c5
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x4248f4
jmp 0x4248ed
cmp eax, dword [ebx + 8]
jne 0x4248e1
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x4248f4
mov esi, 0x52e5e0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e5a0
jbe 0x42492f
mov ecx, dword [ebx]
cmp ecx, 0x52e5a0
ja 0x42492f
mov esi, 0x52e5a0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424921
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424950
jmp 0x424949
cmp eax, dword [ebx + 8]
jne 0x42493d
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424950
mov esi, 0x52e5a0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e560
jbe 0x42498b
mov ecx, dword [ebx]
cmp ecx, 0x52e560
ja 0x42498b
mov esi, 0x52e560
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x42497d
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x4249ac
jmp 0x4249a5
cmp eax, dword [ebx + 8]
jne 0x424999
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x4249ac
mov esi, 0x52e560
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e520
jbe 0x4249e7
mov ecx, dword [ebx]
cmp ecx, 0x52e520
ja 0x4249e7
mov esi, 0x52e520
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x4249d9
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424a08
jmp 0x424a01
cmp eax, dword [ebx + 8]
jne 0x4249f5
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424a08
mov esi, 0x52e520
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e4e0
jbe 0x424a43
mov ecx, dword [ebx]
cmp ecx, 0x52e4e0
ja 0x424a43
mov esi, 0x52e4e0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424a35
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424a64
jmp 0x424a5d
cmp eax, dword [ebx + 8]
jne 0x424a51
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424a64
mov esi, 0x52e4e0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e4a0
jbe 0x424a9f
mov ecx, dword [ebx]
cmp ecx, 0x52e4a0
ja 0x424a9f
mov esi, 0x52e4a0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424a91
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424ac0
jmp 0x424ab9
cmp eax, dword [ebx + 8]
jne 0x424aad
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424ac0
mov esi, 0x52e4a0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e460
jbe 0x424afb
mov ecx, dword [ebx]
cmp ecx, 0x52e460
ja 0x424afb
mov esi, 0x52e460
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424aed
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424b1c
jmp 0x424b15
cmp eax, dword [ebx + 8]
jne 0x424b09
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424b1c
mov esi, 0x52e460
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e420
jbe 0x424b57
mov ecx, dword [ebx]
cmp ecx, 0x52e420
ja 0x424b57
mov esi, 0x52e420
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424b49
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424b78
jmp 0x424b71
cmp eax, dword [ebx + 8]
jne 0x424b65
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424b78
mov esi, 0x52e420
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e3e0
jbe 0x424bb3
mov ecx, dword [ebx]
cmp ecx, 0x52e3e0
ja 0x424bb3
mov esi, 0x52e3e0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424ba5
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424bd4
jmp 0x424bcd
cmp eax, dword [ebx + 8]
jne 0x424bc1
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424bd4
mov esi, 0x52e3e0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e3a0
jbe 0x424c0f
mov ecx, dword [ebx]
cmp ecx, 0x52e3a0
ja 0x424c0f
mov esi, 0x52e3a0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424c01
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424c30
jmp 0x424c29
cmp eax, dword [ebx + 8]
jne 0x424c1d
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424c30
mov esi, 0x52e3a0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e360
jbe 0x424c6b
mov ecx, dword [ebx]
cmp ecx, 0x52e360
ja 0x424c6b
mov esi, 0x52e360
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424c5d
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424c8c
jmp 0x424c85
cmp eax, dword [ebx + 8]
jne 0x424c79
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424c8c
mov esi, 0x52e360
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e320
jbe 0x424cc7
mov ecx, dword [ebx]
cmp ecx, 0x52e320
ja 0x424cc7
mov esi, 0x52e320
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424cb9
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424ce8
jmp 0x424ce1
cmp eax, dword [ebx + 8]
jne 0x424cd5
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424ce8
mov esi, 0x52e320
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e2e0
jbe 0x424d23
mov ecx, dword [ebx]
cmp ecx, 0x52e2e0
ja 0x424d23
mov esi, 0x52e2e0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424d15
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424d44
jmp 0x424d3d
cmp eax, dword [ebx + 8]
jne 0x424d31
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424d44
mov esi, 0x52e2e0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e2a0
jbe 0x424d7f
mov ecx, dword [ebx]
cmp ecx, 0x52e2a0
ja 0x424d7f
mov esi, 0x52e2a0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424d71
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424da0
jmp 0x424d99
cmp eax, dword [ebx + 8]
jne 0x424d8d
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424da0
mov esi, 0x52e2a0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e260
jbe 0x424ddb
mov ecx, dword [ebx]
cmp ecx, 0x52e260
ja 0x424ddb
mov esi, 0x52e260
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424dcd
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424dfc
jmp 0x424df5
cmp eax, dword [ebx + 8]
jne 0x424de9
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424dfc
mov esi, 0x52e260
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e220
jbe 0x424e37
mov ecx, dword [ebx]
cmp ecx, 0x52e220
ja 0x424e37
mov esi, 0x52e220
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424e29
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424e58
jmp 0x424e51
cmp eax, dword [ebx + 8]
jne 0x424e45
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424e58
mov esi, 0x52e220
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e1e0
jbe 0x424e93
mov ecx, dword [ebx]
cmp ecx, 0x52e1e0
ja 0x424e93
mov esi, 0x52e1e0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424e85
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424eb4
jmp 0x424ead
cmp eax, dword [ebx + 8]
jne 0x424ea1
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424eb4
mov esi, 0x52e1e0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e1a0
jbe 0x424eef
mov ecx, dword [ebx]
cmp ecx, 0x52e1a0
ja 0x424eef
mov esi, 0x52e1a0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424ee1
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424f10
jmp 0x424f09
cmp eax, dword [ebx + 8]
jne 0x424efd
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424f10
mov esi, 0x52e1a0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e160
jbe 0x424f4b
mov ecx, dword [ebx]
cmp ecx, 0x52e160
ja 0x424f4b
mov esi, 0x52e160
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424f3d
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424f6c
jmp 0x424f65
cmp eax, dword [ebx + 8]
jne 0x424f59
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424f6c
mov esi, 0x52e160
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e120
jbe 0x424fa7
mov ecx, dword [ebx]
cmp ecx, 0x52e120
ja 0x424fa7
mov esi, 0x52e120
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424f99
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424fc8
jmp 0x424fc1
cmp eax, dword [ebx + 8]
jne 0x424fb5
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424fc8
mov esi, 0x52e120
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e0e0
jbe 0x425003
mov ecx, dword [ebx]
cmp ecx, 0x52e0e0
ja 0x425003
mov esi, 0x52e0e0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424ff5
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x425024
jmp 0x42501d
cmp eax, dword [ebx + 8]
jne 0x425011
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x425024
mov esi, 0x52e0e0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e0a0
jbe 0x42505f
mov ecx, dword [ebx]
cmp ecx, 0x52e0a0
ja 0x42505f
mov esi, 0x52e0a0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x425051
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x425080
jmp 0x425079
cmp eax, dword [ebx + 8]
jne 0x42506d
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x425080
mov esi, 0x52e0a0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e060
jbe 0x4250bb
mov ecx, dword [ebx]
cmp ecx, 0x52e060
ja 0x4250bb
mov esi, 0x52e060
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x4250ad
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x4250dc
jmp 0x4250d5
cmp eax, dword [ebx + 8]
jne 0x4250c9
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x4250dc
mov esi, 0x52e060
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e020
jbe 0x425117
mov ecx, dword [ebx]
cmp ecx, 0x52e020
ja 0x425117
mov esi, 0x52e020
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x425109
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x425138
jmp 0x425131
cmp eax, dword [ebx + 8]
jne 0x425125
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x425138
mov esi, 0x52e020
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52dfe0
jbe 0x425173
mov ecx, dword [ebx]
cmp ecx, 0x52dfe0
ja 0x425173
mov esi, 0x52dfe0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x425165
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x425194
jmp 0x42518d
cmp eax, dword [ebx + 8]
jne 0x425181
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x425194
mov esi, 0x52dfe0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52dfa0
jbe 0x4251cf
mov ecx, dword [ebx]
cmp ecx, 0x52dfa0
ja 0x4251cf
mov esi, 0x52dfa0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x4251c1
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x4251f0
jmp 0x4251e9
cmp eax, dword [ebx + 8]
jne 0x4251dd
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x4251f0
mov esi, 0x52dfa0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52df60
jbe 0x42522b
mov ecx, dword [ebx]
cmp ecx, 0x52df60
ja 0x42522b
mov esi, 0x52df60
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x42521d
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x42524c
jmp 0x425245
cmp eax, dword [ebx + 8]
jne 0x425239
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x42524c
mov esi, 0x52df60
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52df20
jbe 0x425287
mov ecx, dword [ebx]
cmp ecx, 0x52df20
ja 0x425287
mov esi, 0x52df20
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x425279
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x4252a8
jmp 0x4252a1
cmp eax, dword [ebx + 8]
jne 0x425295
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x4252a8
mov esi, 0x52df20
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52dee0
jbe 0x4252e3
mov ecx, dword [ebx]
cmp ecx, 0x52dee0
ja 0x4252e3
mov esi, 0x52dee0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x4252d5
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x425304
jmp 0x4252fd
cmp eax, dword [ebx + 8]
jne 0x4252f1
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x425304
mov esi, 0x52dee0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52dea0
jbe 0x42533f
mov ecx, dword [ebx]
cmp ecx, 0x52dea0
ja 0x42533f
mov esi, 0x52dea0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x425331
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x425360
jmp 0x425359
cmp eax, dword [ebx + 8]
jne 0x42534d
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x425360
mov esi, 0x52dea0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52de60
jbe 0x42539b
mov ecx, dword [ebx]
cmp ecx, 0x52de60
ja 0x42539b
mov esi, 0x52de60
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x42538d
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x4253bc
jmp 0x4253b5
cmp eax, dword [ebx + 8]
jne 0x4253a9
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x4253bc
mov esi, 0x52de60
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52de20
jbe 0x4253f7
mov ecx, dword [ebx]
cmp ecx, 0x52de20
ja 0x4253f7
mov esi, 0x52de20
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x4253e9
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x425418
jmp 0x425411
cmp eax, dword [ebx + 8]
jne 0x425405
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x425418
mov esi, 0x52de20
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52dde0
jbe 0x425453
mov ecx, dword [ebx]
cmp ecx, 0x52dde0
ja 0x425453
mov esi, 0x52dde0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x425445
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x425474
jmp 0x42546d
cmp eax, dword [ebx + 8]
jne 0x425461
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x425474
mov esi, 0x52dde0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52dda0
jbe 0x4254af
mov ecx, dword [ebx]
cmp ecx, 0x52dda0
ja 0x4254af
mov esi, 0x52dda0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x4254a1
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x4254d0
cmp eax, dword [ebx + 8]
jne 0x4254bd
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x4254d0
mov esi, 0x52dda0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
push 0x52dd60
mov ecx, ebx
call fcn.004166a0
mov edi, dword [ebp - 0x10]
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov dword [ebp - 0x14], edi
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x24]
call fcn.004e102a
push 0x53b460
lea ecx, [ebp - 0x24]
push ecx
mov dword [ebp - 0x24], vtable.std::bad_alloc.0
call fcn.004e1169
lea edx, [ebp + 8]
push edx
lea ecx, [ebp - 0x30]
mov dword [ebp + 8], edi
call fcn.004e102a
push 0x53b460
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x30], vtable.std::bad_alloc.0
call fcn.004e1169
lea ecx, [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x14], edi
call fcn.004e102a
push 0x53b460
lea edx, [ebp - 0x30]
push edx
mov dword [ebp - 0x30], vtable.std::bad_alloc.0
call fcn.004e1169
mov dword [ebp - 0x18], edi
lea eax, [ebp - 0x18]
jmp 0x4254ff