Function at 0x4271c0
Capabilities:
Create process on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f391d
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x1a0
mov eax, dword [0x52c018]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
push 0x512695
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0xf
mov byte [ebp - 0xbc], 0
call fcn.00408530
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xa4]
push 0
push 0x512695
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
call fcn.00408530
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x8c]
push 0
push 0x512695
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
call fcn.00408530
push 0x533158
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 2
call fcn.004078c0
push str.GoogleChromeApplicationchrome.exe
lea ecx, [ebp - 0xbc]
call fcn.004078c0
push 0x533158
lea ecx, [ebp - 0x8c]
call fcn.004078c0
push str.MicrosoftEdgeApplicationmsedge.exe
lea ecx, [ebp - 0x8c]
call fcn.004078c0
push 0x533158
lea ecx, [ebp - 0xa4]
call fcn.004078c0
push str.GoogleChromeApplicationchrome.exe
lea ecx, [ebp - 0xa4]
call fcn.004078c0
push 1
push 0x512c00
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.00408530
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 3
call fcn.004254c0
test al, al
je 0x427378
cmp dword [ebp - 0xa8], 0x10
lea ecx, [ebp - 0xbc]
mov esi, dword [ebp - 0x18]
mov eax, esi
cmovae ecx, dword [ebp - 0xbc]
mov edi, dword [ebp - 0xac]
mov edx, dword [ebp - 0x1c]
sub eax, edx
push edi
push ecx
cmp edi, eax
ja 0x427426
lea eax, [edx + edi]
cmp esi, 0x10
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x2c]
cmovae eax, dword [ebp - 0x2c]
lea esi, [eax + edx]
push esi
call fcn.004c8d50
add esp, 0xc
mov byte [edi + esi], 0
jmp 0x42743c
lea ecx, [ebp - 0x8c]
call fcn.004254c0
lea ecx, [ebp - 0x8c]
test al, al
je 0x4273cd
cmp dword [ebp - 0x78], 0x10
mov esi, dword [ebp - 0x18]
mov eax, esi
cmovae ecx, dword [ebp - 0x8c]
mov edi, dword [ebp - 0x7c]
mov edx, dword [ebp - 0x1c]
sub eax, edx
push edi
push ecx
cmp edi, eax
ja 0x427426
lea eax, [edx + edi]
cmp esi, 0x10
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x2c]
cmovae eax, dword [ebp - 0x2c]
lea esi, [eax + edx]
push esi
call fcn.004c8d50
add esp, 0xc
mov byte [edi + esi], 0
jmp 0x42743c
call fcn.004254c0
test al, al
je 0x427a1b
cmp dword [ebp - 0x90], 0x10
lea ecx, [ebp - 0xa4]
mov esi, dword [ebp - 0x18]
mov eax, esi
cmovae ecx, dword [ebp - 0xa4]
mov edi, dword [ebp - 0x94]
mov edx, dword [ebp - 0x1c]
sub eax, edx
push edi
push ecx
cmp edi, eax
ja 0x427426
lea eax, [edx + edi]
cmp esi, 0x10
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x2c]
cmovae eax, dword [ebp - 0x2c]
lea esi, [eax + edx]
push esi
call fcn.004c8d50
add esp, 0xc
mov byte [edi + esi], 0
jmp 0x42743c
mov byte [ebp - 0x168], 0
lea ecx, [ebp - 0x2c]
push dword [ebp - 0x168]
push edi
call fcn.004098a0
mov edx, dword [0x533960]
lea ecx, [ebp - 0x164]
mov edx, dword [edx + 0x60]
call fcn.00401e10
mov esi, eax
mov byte [ebp - 4], 0xc
mov edx, str.____start_maximized___app_https:__
mov ecx, dword [0x533960]
add ecx, 0x18c
push ecx
lea ecx, [ebp - 0x134]
call fcn.00409220
add esp, 4
mov byte [ebp - 4], 0xd
mov edx, eax
mov ecx, dword [0x533960]
add ecx, 0x30
push ecx
lea ecx, [ebp - 0x11c]
call fcn.00409370
add esp, 4
push str._spa_dash_client_login.php_token
mov ecx, eax
mov byte [ebp - 4], 0xe
call fcn.004078c0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x74], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x64], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0xf
lea edx, [ebp - 0x74]
mov eax, dword [0x533960]
lea ecx, [ebp - 0x104]
add eax, 0x23c
push eax
call fcn.00409370
add esp, 4
push str.cliente
mov ecx, eax
mov byte [ebp - 4], 0x10
call fcn.004078c0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x5c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x4c], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x11
lea edx, [ebp - 0x5c]
mov eax, dword [0x533960]
lea ecx, [ebp - 0xec]
add eax, 0xcc
push eax
call fcn.00409370
add esp, 4
push 0x518f80
mov ecx, eax
mov byte [ebp - 4], 0x12
call fcn.004078c0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x44], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x34], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push esi
lea edx, [ebp - 0x44]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xd4]
call fcn.00409410
add esp, 4
push 0x512c00
mov ecx, eax
mov byte [ebp - 4], 0x14
call fcn.004078c0
movups xmm1, xmmword [eax]
movq xmm0, qword [eax + 0x10]
movups xmmword [ebp - 0x14c], xmm1
mov dword [eax + 0x10], 0
movq qword [ebp - 0x13c], xmm0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x15
lea edx, [ebp - 0x14c]
cmp dword [ebp - 0x138], 0x10
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x13c]
movd edi, xmm1
push ecx
cmovae edx, edi
sub eax, esi
push edx
cmp ecx, eax
ja 0x427636
cmp dword [ebp - 0x18], 0x10
lea eax, [esi + ecx]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x2c]
cmovae eax, dword [ebp - 0x2c]
add esi, eax
push esi
call fcn.004c8d50
mov eax, dword [ebp - 0x13c]
add esp, 0xc
mov byte [eax + esi], 0
jmp 0x427652
mov byte [ebp - 0x168], 0
push dword [ebp - 0x168]
push ecx
lea ecx, [ebp - 0x2c]
call fcn.004098a0
mov edi, dword [ebp - 0x14c]
mov eax, dword [ebp - 0x138]
cmp eax, 0x10
jb 0x427688
lea ecx, [eax + 1]
mov eax, edi
cmp ecx, 0x1000
jb 0x42767e
mov edi, dword [edi - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427fa3
push ecx
push edi
call fcn.004748b1
add esp, 8
mov edx, dword [ebp - 0xc0]
cmp edx, 0x10
jb 0x4276c2
mov ecx, dword [ebp - 0xd4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4276b8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427fa3
push edx
push ecx
call fcn.004748b1
add esp, 8
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc0], 0xf
mov byte [ebp - 0xd4], 0
cmp edx, 0x10
jb 0x427711
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x427707
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427fa3
push edx
push ecx
call fcn.004748b1
add esp, 8
mov edx, dword [ebp - 0xd8]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
cmp edx, 0x10
jb 0x42775d
mov ecx, dword [ebp - 0xec]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x427753
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427fa3
push edx
push ecx
call fcn.004748b1
add esp, 8
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xd8], 0xf
mov byte [ebp - 0xec], 0
cmp edx, 0x10
jb 0x4277ac
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4277a2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427fa3
push edx
push ecx
call fcn.004748b1
add esp, 8
mov edx, dword [ebp - 0xf0]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
cmp edx, 0x10
jb 0x4277f8
mov ecx, dword [ebp - 0x104]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4277ee
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427fa3
push edx
push ecx
call fcn.004748b1
add esp, 8
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xf0], 0xf
mov byte [ebp - 0x104], 0
cmp edx, 0x10
jb 0x427847
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x42783d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427fa3
push edx
push ecx
call fcn.004748b1
add esp, 8
mov edx, dword [ebp - 0x108]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp edx, 0x10
jb 0x427893
mov ecx, dword [ebp - 0x11c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x427889
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427fa3
push edx
push ecx
call fcn.004748b1
add esp, 8
mov edx, dword [ebp - 0x120]
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x108], 0xf
mov byte [ebp - 0x11c], 0
cmp edx, 0x10
jb 0x4278e8
mov ecx, dword [ebp - 0x134]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4278de
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427fa3
push edx
push ecx
call fcn.004748b1
add esp, 8
mov edx, dword [ebp - 0x150]
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x120], 0xf
mov byte [ebp - 0x134], 0
cmp edx, 0x10
jb 0x42793d
mov ecx, dword [ebp - 0x164]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x427933
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427fa3
push edx
push ecx
call fcn.004748b1
add esp, 8
cmp dword [ebp - 0x18], 0x10
lea eax, [ebp - 0x2c]
xorps xmm0, xmm0
mov dword [ebp - 0x1b0], 0x44
cmovae eax, dword [ebp - 0x2c]
xor ecx, ecx
mov word [ebp - 0x16e], cx
mov word [ebp - 0x180], cx
lea ecx, [ebp - 0x3c]
push ecx
lea ecx, [ebp - 0x1b0]
movlpd qword [ebp - 0x188], xmm0
or dword [ebp - 0x184], 1
push ecx
push 0
push 0
push 0x200
push 1
push 0
push 0
push eax
push 0
movlpd qword [ebp - 0x1ac], xmm0
movlpd qword [ebp - 0x1a0], xmm0
movlpd qword [ebp - 0x198], xmm0
movlpd qword [ebp - 0x190], xmm0
movlpd qword [ebp - 0x17e], xmm0
movlpd qword [ebp - 0x176], xmm0
mov dword [ebp - 0x1a4], str.chrome.exe
movups xmmword [ebp - 0x3c], xmm0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x4279df
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov eax, 0x512695
cmp eax, str.WAIT
jne 0x4279f6
push 0xffffffffffffffff
push dword [ebp - 0x3c]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, str.chrome.exe
cmp eax, 0x518960
jne 0x427e63
mov eax, dword [0x533960]
movups xmm0, xmmword [ebp - 0x3c]
movups xmmword [eax + 0x284], xmm0
jmp 0x427e63
mov edx, dword [0x533960]
lea ecx, [ebp - 0x164]
mov edx, dword [edx + 0x60]
call fcn.00401e10
mov esi, eax
mov byte [ebp - 4], 4
mov edx, str.https:__
mov ecx, dword [0x533960]
add ecx, 0x18c
push ecx
lea ecx, [ebp - 0xd4]
call fcn.00409220
add esp, 4
mov byte [ebp - 4], 5
mov edx, eax
mov ecx, dword [0x533960]
add ecx, 0x30
push ecx
lea ecx, [ebp - 0xec]
call fcn.00409370
add esp, 4
push str._spa_dash_client_login.php_token
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.004078c0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x44], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x34], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 7
lea edx, [ebp - 0x44]
mov eax, dword [0x533960]
lea ecx, [ebp - 0x104]
add eax, 0x23c
push eax
call fcn.00409370
add esp, 4
push str.cliente
mov ecx, eax
mov byte [ebp - 4], 8
call fcn.004078c0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x5c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x4c], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 9
lea edx, [ebp - 0x5c]
mov eax, dword [0x533960]
lea ecx, [ebp - 0x11c]
add eax, 0xcc
push eax
call fcn.00409370
add esp, 4
push 0x518f80
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.004078c0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x74], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x64], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push esi
lea edx, [ebp - 0x74]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x134]
call fcn.00409410
add esp, 4
lea ecx, [ebp - 0x2c]
push eax
call fcn.004079e0
mov edx, dword [ebp - 0x120]
cmp edx, 0x10
jb 0x427bcc
mov ecx, dword [ebp - 0x134]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x427bc2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427fa8
push edx
push ecx
call fcn.004748b1
add esp, 8
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x120], 0xf
mov byte [ebp - 0x134], 0
cmp edx, 0x10
jb 0x427c1b
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x427c11
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427fa8
push edx
push ecx
call fcn.004748b1
add esp, 8
mov edx, dword [ebp - 0x108]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp edx, 0x10
jb 0x427c67
mov ecx, dword [ebp - 0x11c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x427c5d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427fa8
push edx
push ecx
call fcn.004748b1
add esp, 8
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x108], 0xf
mov byte [ebp - 0x11c], 0
cmp edx, 0x10
jb 0x427cb6
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x427cac
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427fa8
push edx
push ecx
call fcn.004748b1
add esp, 8
mov edx, dword [ebp - 0xf0]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
cmp edx, 0x10
jb 0x427d02
mov ecx, dword [ebp - 0x104]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x427cf8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427fa8
push edx
push ecx
call fcn.004748b1
add esp, 8
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xf0], 0xf
mov byte [ebp - 0x104], 0
cmp edx, 0x10
jb 0x427d51
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x427d47
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427fa8
push edx
push ecx
call fcn.004748b1
add esp, 8
mov edx, dword [ebp - 0xd8]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
cmp edx, 0x10
jb 0x427d9d
mov ecx, dword [ebp - 0xec]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x427d93
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427fa8
push edx
push ecx
call fcn.004748b1
add esp, 8
mov edx, dword [ebp - 0xc0]
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xd8], 0xf
mov byte [ebp - 0xec], 0
cmp edx, 0x10
jb 0x427df2
mov ecx, dword [ebp - 0xd4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x427de8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427fa8
push edx
push ecx
call fcn.004748b1
add esp, 8
mov edx, dword [ebp - 0x150]
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc0], 0xf
mov byte [ebp - 0xd4], 0
cmp edx, 0x10
jb 0x427e47
mov ecx, dword [ebp - 0x164]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x427e3d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427fa8
push edx
push ecx
call fcn.004748b1
add esp, 8
cmp dword [ebp - 0x18], 0x10
lea eax, [ebp - 0x2c]
push 5
cmovae eax, dword [ebp - 0x2c]
push 0
push 0
push eax
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov edx, dword [ebp - 0x18]
cmp edx, 0x10
jb 0x427e97
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x427e8d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427fad
push edx
push ecx
call fcn.004748b1
add esp, 8
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
cmp edx, 0x10
jb 0x427ee0
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x427ed6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427fad
push edx
push ecx
call fcn.004748b1
add esp, 8
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
cmp edx, 0x10
jb 0x427f2f
mov ecx, dword [ebp - 0xa4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x427f25
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427fad
push edx
push ecx
call fcn.004748b1
add esp, 8
mov edx, dword [ebp - 0xa8]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
cmp edx, 0x10
jb 0x427f80
mov ecx, dword [ebp - 0xbc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x427f76
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427fad
push edx
push ecx
call fcn.004748b1
add esp, 8
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00474416
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.004d274f
call fcn.004d274f
call fcn.004d274f
int3