Function at 0x427630
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
lea ebp, [esp - 0x3e4]
sub esp, 0x464
mov eax, dword [0x446b10]
xor eax, ebp
mov dword [ebp + 0x3e0], eax
test byte [0x4c5ee4], 4
mov eax, dword [ebp + 0x3ec]
push ebx
mov dword [ebp - 0x48], eax
mov eax, dword [ebp + 0x3f0]
push esi
mov ebx, 0x447c50
push edi
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x34], ebx
je 0x427678
mov dword [ebp - 0x34], 0x447c52
mov eax, dword [0x4c4254]
xor ecx, ecx
mov dword [0x4c5e70], ecx
mov dword [0x4c5e74], ecx
mov dword [0x4c5f34], ecx
mov eax, dword [eax + 4]
push ecx
push eax
call fcn.0041f328
mov edi, dword [sym.imp.MSVCR80.dll_sprintf_s]
mov esi, eax
push esi
push 0x408e68
push 0x20000
push ebx
mov dword [ebp - 0x3c], esi
call edi
add esp, 0x10
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
push 1
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x30], esi
mov esi, 0x408124
push esi
push 0x408e58
mov eax, 0x408e4c
push eax
push eax
call fcn.004244d3
mov eax, dword [0x4c4254]
mov ecx, dword [eax + 0x18]
movzx edx, word [ecx + 6]
movzx ecx, word [ecx + 0x14]
imul edx, edx, 0x28
add edx, ecx
cmp dword [eax + 0xc], 0
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x3c]
je 0x427708
lea ecx, [edx + ecx + 0x18]
jmp 0x42770c
lea ecx, [edx + ecx + 8]
cmp dword [eax + 0xc], 0
mov eax, dword [eax + 0x18]
mov eax, dword [eax + 0x54]
push 1
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push esi
mov dword [ebp - 0x2c], ecx
push 0x408e58
je 0x42780d
mov eax, 0x408e3c
push eax
push eax
call fcn.004244d3
mov eax, dword [ebp - 0x2c]
push 1
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push esi
push 0x408e58
mov eax, 0x408e28
push eax
push eax
call fcn.004244d3
mov eax, dword [ebp - 0x50]
imul eax, eax, 0x64
xor edx, edx
mov dword [ebp - 0x5c], eax
div dword [ebp - 0x3c]
test eax, eax
mov dword [ebp - 0x24], eax
fild dword [ebp - 0x24]
jge 0x427779
fadd dword [0x408e24]
push 0
fstp dword [ebp - 0x30]
lea eax, [ebp - 0x30]
push eax
mov eax, 0x408e18
push eax
push eax
mov eax, 0x408e3c
push eax
push eax
call fcn.004244d3
fild dword [ebp - 0x3c]
mov eax, dword [ebp - 0x5c]
test eax, eax
fstp qword [ebp - 0x6c]
fild dword [ebp - 0x5c]
jge 0x4277ab
fadd qword [0x408e10]
fdiv qword [ebp - 0x6c]
push ecx
push ecx
fstp qword [esp]
push dword [ebp - 0x2c]
push dword [ebp - 0x50]
push 0x408ddc
push 0x20000
push ebx
call edi
add esp, 0x1c
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
mov eax, dword [0x4c4254]
mov eax, dword [eax + 0x18]
mov ecx, dword [eax + 0x74]
and dword [ebp - 0x38], 0
and dword [ebp - 0x2c], 0
test ecx, ecx
jbe 0x4278ee
add eax, 0x7c
cmp dword [ebp - 0x2c], 0xf
je 0x4277fd
mov edx, dword [eax]
add dword [ebp - 0x38], edx
inc dword [ebp - 0x2c]
add eax, 8
cmp dword [ebp - 0x2c], ecx
jb 0x4277f2
jmp 0x4278ee
push 0x408e3c
push 0x408dcc
call fcn.004244d3
mov eax, dword [ebp - 0x2c]
push 1
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push esi
push 0x408e58
push 0x408e28
push 0x408db4
call fcn.004244d3
mov eax, dword [ebp - 0x50]
imul eax, eax, 0x64
xor edx, edx
mov dword [ebp - 0x5c], eax
div dword [ebp - 0x3c]
test eax, eax
mov dword [ebp - 0x24], eax
fild dword [ebp - 0x24]
jge 0x42785b
fadd dword [0x408e24]
push 0
fstp dword [ebp - 0x30]
lea eax, [ebp - 0x30]
push eax
mov eax, 0x408e18
push eax
push eax
push 0x408e3c
push 0x408dcc
call fcn.004244d3
fild dword [ebp - 0x3c]
mov eax, dword [ebp - 0x5c]
test eax, eax
fstp qword [ebp - 0x6c]
fild dword [ebp - 0x5c]
jge 0x427890
fadd qword [0x408e10]
fdiv qword [ebp - 0x6c]
push ecx
push ecx
fstp qword [esp]
push dword [ebp - 0x2c]
push dword [ebp - 0x50]
push 0x408ddc
push 0x20000
push ebx
call edi
add esp, 0x1c
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
mov eax, dword [0x4c4254]
mov eax, dword [eax + 0x18]
mov ecx, dword [eax + 0x84]
and dword [ebp - 0x38], 0
and dword [ebp - 0x2c], 0
test ecx, ecx
jbe 0x4278ee
add eax, 0x8c
cmp dword [ebp - 0x2c], 0xe
je 0x4278e3
mov edx, dword [eax]
add dword [ebp - 0x38], edx
inc dword [ebp - 0x2c]
add eax, 8
cmp dword [ebp - 0x2c], ecx
jb 0x4278d8
mov eax, dword [ebp - 0x38]
push 1
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push esi
push 0x408e58
mov eax, 0x408da0
push eax
push eax
call fcn.004244d3
mov eax, dword [ebp - 0x38]
imul eax, eax, 0x64
mov dword [ebp - 0x60], eax
cdq
idiv dword [ebp - 0x3c]
push 0
mov dword [ebp - 0x30], eax
fild dword [ebp - 0x30]
lea eax, [ebp - 0x30]
push eax
push 0x408d98
fstp dword [ebp - 0x30]
push 0x408e18
mov eax, 0x408da0
push eax
push eax
call fcn.004244d3
push dword [ebp - 0x38]
lea eax, [ebp - 0x20]
push 0x408d7c
push 0x400
push eax
call edi
fild dword [ebp - 0x60]
add esp, 8
lea eax, [ebp - 0x20]
fdiv qword [ebp - 0x6c]
fstp qword [esp]
push eax
push 0x408d68
push 0x20000
push ebx
call edi
add esp, 0x18
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
mov eax, dword [0x4c4254]
cmp dword [eax + 0xc], 0
mov eax, dword [eax + 0x18]
movzx eax, word [eax + 6]
movzx eax, ax
push 1
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push 0x408d5c
push 0x408d4c
mov eax, 0x408d38
push eax
push eax
call fcn.004244d3
push dword [ebp - 0x60]
push 0x408d18
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
push 1
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push esi
push 0x403b38
mov eax, 0x408d08
push eax
push eax
call fcn.004244d3
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
imul eax, eax, 0x64
xor edx, edx
div dword [ebp - 0x3c]
test eax, eax
mov dword [ebp - 0x24], eax
fild dword [ebp - 0x24]
jge 0x427a0c
fadd dword [0x408e24]
push 0
fstp dword [ebp - 0x30]
lea eax, [ebp - 0x30]
push eax
push 0x408d98
push 0x408e18
mov eax, 0x408d08
push eax
push eax
call fcn.004244d3
mov eax, dword [ebp - 0x48]
push dword [eax]
lea eax, [ebp - 0x20]
push 0x408cec
push 0x400
push eax
call edi
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
imul eax, eax, 0x64
test eax, eax
mov dword [ebp - 0x24], eax
fild dword [ebp - 0x24]
jge 0x427a58
fadd qword [0x408e10]
fdiv qword [ebp - 0x6c]
add esp, 8
lea eax, [ebp - 0x20]
fstp qword [esp]
push eax
push 0x408d68
push 0x20000
push ebx
call edi
add esp, 0x18
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
mov eax, dword [ebp - 0x48]
mov eax, dword [eax + 0xc]
push 1
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push esi
push esi
mov eax, 0x408cd8
push eax
push eax
call fcn.004244d3
mov eax, dword [ebp - 0x5c]
imul eax, eax, 0x64
xor edx, edx
mov dword [ebp - 0x60], eax
div dword [ebp - 0x3c]
test eax, eax
mov dword [ebp - 0x24], eax
fild dword [ebp - 0x24]
jge 0x427abe
fadd dword [0x408e24]
push 0
fstp dword [ebp - 0x30]
lea eax, [ebp - 0x30]
push eax
push 0x408d98
push 0x408e18
mov eax, 0x408cd8
push eax
push eax
call fcn.004244d3
push dword [ebp - 0x5c]
lea eax, [ebp - 0x20]
push 0x408cbc
push 0x400
push eax
call edi
fild dword [ebp - 0x60]
mov eax, dword [ebp - 0x60]
test eax, eax
jge 0x427b00
fadd qword [0x408e10]
fdiv qword [ebp - 0x6c]
add esp, 8
lea eax, [ebp - 0x20]
fstp qword [esp]
push eax
push 0x408d68
push 0x20000
push ebx
call edi
add esp, 0x18
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
mov eax, dword [ebp - 0x48]
and dword [ebp - 0x64], 0
push 6
add eax, 0x1c
pop ecx
mov edx, dword [eax]
add dword [ebp - 0x64], edx
add eax, 8
dec ecx
jne 0x427b35
mov eax, dword [ebp - 0x64]
push 1
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push esi
push esi
mov eax, 0x408ca8
push eax
push eax
call fcn.004244d3
mov eax, dword [ebp - 0x64]
imul eax, eax, 0x64
mov dword [ebp - 0x60], eax
cdq
idiv dword [ebp - 0x3c]
push 0
mov dword [ebp - 0x30], eax
fild dword [ebp - 0x30]
lea eax, [ebp - 0x30]
push eax
push 0x408d98
fstp dword [ebp - 0x30]
push 0x408e18
mov eax, 0x408ca8
push eax
push eax
call fcn.004244d3
push dword [ebp - 0x64]
lea eax, [ebp - 0x20]
push 0x408c8c
push 0x400
push eax
call edi
fild dword [ebp - 0x60]
add esp, 8
lea eax, [ebp - 0x20]
fdiv qword [ebp - 0x6c]
fstp qword [esp]
push eax
push 0x408d68
push 0x20000
push ebx
call edi
add esp, 0x18
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
xor eax, eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x50], eax
mov eax, dword [0x4c5e7c]
mov ecx, dword [eax]
push 0x6000000
push eax
call dword [ecx + 0xc]
mov dword [ebp - 0x30], eax
xor eax, eax
inc eax
cmp dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], eax
jb 0x427cf3
mov eax, dword [0x4c5e7c]
mov ecx, dword [eax]
lea edx, [ebp - 0x7c]
push edx
lea edx, [ebp - 0x60]
push edx
mov edx, dword [ebp - 0x2c]
or edx, 0x6000000
push edx
push eax
call dword [ecx + 0xc4]
cmp dword [ebp - 0x60], 0
je 0x427ce4
mov eax, dword [ebp - 0x7c]
and eax, 3
je 0x427c3e
cmp eax, 2
jne 0x427ce4
mov ecx, dword [0x4c4254]
inc dword [ebp - 0x50]
lea eax, [ebp - 0x80]
push eax
push dword [ebp - 0x60]
call fcn.00415125
mov ecx, dword [ebp - 0x80]
mov al, byte [ecx]
mov dl, al
and dl, 7
cmp dl, 3
jne 0x427ccb
movzx eax, byte [ecx + 1]
inc dword [ebp - 0x78]
shr eax, 4
shl eax, 2
add dword [ebp - 0x54], eax
mov dword [ebp - 0x4c], eax
mov eax, dword [ecx + 4]
add dword [ebp - 0x58], eax
mov edx, dword [ebp - 0x4c]
add eax, edx
add eax, ecx
mov dword [ebp - 0x24], eax
call fcn.0041f30b
test eax, eax
je 0x427ce4
test byte [eax], 0x40
mov dword [ebp - 0x4c], eax
je 0x427cac
movzx edx, byte [eax + 1]
inc dword [ebp - 0x70]
xor ecx, ecx
mov ch, byte [eax + 3]
mov cl, byte [eax + 2]
shl ecx, 8
or ecx, edx
jmp 0x427cb3
inc dword [ebp - 0x74]
movzx ecx, byte [eax + 1]
add eax, ecx
mov ecx, dword [ebp - 0x4c]
add eax, 3
and eax, 0xfffffffc
test byte [ecx], 0x80
jne 0x427c8e
sub eax, dword [ebp - 0x24]
add dword [ebp - 0x54], eax
jmp 0x427ce4
mov cl, al
and cl, 3
cmp cl, 2
jne 0x427ce4
inc dword [ebp - 0x5c]
inc dword [ebp - 0x54]
movzx eax, al
shr eax, 2
add dword [ebp - 0x58], eax
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x30]
jbe 0x427c03
mov eax, dword [ebp - 0x54]
push 1
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
push esi
mov eax, 0x408c78
push eax
push eax
call fcn.004244d3
mov eax, dword [ebp - 0x54]
imul eax, eax, 0x64
mov dword [ebp - 0x4c], eax
cdq
idiv dword [ebp - 0x3c]
push 0
mov dword [ebp - 0x24], eax
fild dword [ebp - 0x24]
lea eax, [ebp - 0x24]
push eax
push 0x408d98
fstp dword [ebp - 0x24]
push 0x408e18
mov eax, 0x408c78
push eax
push eax
call fcn.004244d3
push dword [ebp - 0x54]
lea eax, [ebp - 0x20]
push 0x408c5c
push 0x400
push eax
call edi
fild dword [ebp - 0x4c]
add esp, 8
lea eax, [ebp - 0x20]
fdiv qword [ebp - 0x6c]
fstp qword [esp]
push eax
push 0x408d68
push 0x20000
push ebx
call edi
add esp, 0x18
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
mov eax, dword [ebp - 0x58]
push 1
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
push esi
mov eax, 0x408c4c
push eax
push eax
call fcn.004244d3
mov eax, dword [ebp - 0x58]
imul eax, eax, 0x64
mov dword [ebp - 0x4c], eax
cdq
idiv dword [ebp - 0x3c]
push 0
mov dword [ebp - 0x24], eax
fild dword [ebp - 0x24]
lea eax, [ebp - 0x24]
push eax
push 0x408d98
fstp dword [ebp - 0x24]
push 0x408e18
mov eax, 0x408c4c
push eax
push eax
call fcn.004244d3
push dword [ebp - 0x58]
lea eax, [ebp - 0x20]
push 0x408c30
push 0x400
push eax
call edi
fild dword [ebp - 0x4c]
add esp, 8
lea eax, [ebp - 0x20]
fdiv qword [ebp - 0x6c]
fstp qword [esp]
push eax
push 0x408d68
push 0x20000
push ebx
call edi
add esp, 0x18
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
mov eax, dword [0x4c4254]
cmp dword [eax + 0xc], 0
mov eax, dword [eax + 0x18]
mov eax, dword [eax + 0x20]
push 1
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
mov eax, 0x408c28
push esi
push eax
push eax
je 0x427e8a
call fcn.004244d3
mov eax, dword [ebp - 0x2c]
imul eax, eax, 0x64
xor edx, edx
mov dword [ebp - 0x4c], eax
div dword [ebp - 0x3c]
test eax, eax
mov dword [ebp - 0x24], eax
fild dword [ebp - 0x24]
jge 0x427e50
fadd dword [0x408e24]
push 0
fstp dword [ebp - 0x24]
lea eax, [ebp - 0x24]
push eax
push 0x408d98
push 0x408e18
mov eax, 0x408c28
push eax
push eax
call fcn.004244d3
push dword [ebp - 0x2c]
lea eax, [ebp - 0x20]
push 0x408c0c
push 0x400
push eax
call edi
fild dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
jmp 0x427ee5
call fcn.004244d3
mov eax, dword [ebp - 0x2c]
imul eax, eax, 0x64
xor edx, edx
mov dword [ebp - 0x4c], eax
div dword [ebp - 0x3c]
test eax, eax
mov dword [ebp - 0x24], eax
fild dword [ebp - 0x24]
jge 0x427ead
fadd dword [0x408e24]
push 0
fstp dword [ebp - 0x24]
lea eax, [ebp - 0x24]
push eax
push 0x408d98
push 0x408e18
mov eax, 0x408c28
push eax
push eax
call fcn.004244d3
push dword [ebp - 0x2c]
lea eax, [ebp - 0x20]
push 0x408c0c
push 0x400
push eax
call edi
fild dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
test eax, eax
jge 0x427eef
fadd qword [0x408e10]
fdiv qword [ebp - 0x6c]
add esp, 8
lea eax, [ebp - 0x20]
fstp qword [esp]
push eax
push 0x408d68
push 0x20000
push ebx
call edi
add esp, 0x18
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
mov eax, dword [0x4c4254]
mov ecx, dword [eax + 0x18]
mov eax, dword [ebp - 0x3c]
sub eax, dword [ecx + 0x54]
mov ecx, dword [ebp - 0x48]
sub eax, dword [ecx + 0xc]
push 1
sub eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x54]
sub eax, dword [ebp - 0x64]
sub eax, dword [ebp - 0x38]
sub eax, dword [ecx]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
push esi
mov eax, 0x408c00
push eax
push eax
call fcn.004244d3
mov eax, dword [ebp - 0x2c]
imul eax, eax, 0x64
mov dword [ebp - 0x4c], eax
cdq
idiv dword [ebp - 0x3c]
push 0
mov dword [ebp - 0x24], eax
fild dword [ebp - 0x24]
lea eax, [ebp - 0x24]
push eax
push 0x408d98
fstp dword [ebp - 0x24]
push 0x408e18
mov eax, 0x408c00
push eax
push eax
call fcn.004244d3
push dword [ebp - 0x2c]
lea eax, [ebp - 0x20]
push 0x408be4
push 0x400
push eax
call edi
fild dword [ebp - 0x4c]
add esp, 8
lea eax, [ebp - 0x20]
fdiv qword [ebp - 0x6c]
fstp qword [esp]
push eax
push 0x408d68
push 0x20000
push ebx
call edi
add esp, 0x18
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
mov eax, dword [0x4c4254]
cmp dword [eax + 0xc], 0
mov eax, dword [eax + 0x18]
movzx eax, word [eax + 6]
movzx eax, ax
push 1
mov dword [ebp - 0x24], eax
je 0x428086
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x24]
push eax
push esi
push esi
mov eax, 0x408d38
push eax
push eax
call fcn.004244d3
push 0x402cef
push dword [ebp - 0x28]
call fcn.0040cba4
push dword [ebp - 0x3c]
push 0x408d18
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
cmp dword [ebp - 0x3c], 0
mov eax, dword [0x4c4254]
mov eax, dword [eax + 0x18]
movzx ecx, word [eax + 0x14]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0x38], eax
jbe 0x42811f
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x38]
push dword [eax + 0x10]
push esi
push esi
push eax
push eax
call fcn.0042472d
mov eax, dword [ebp - 0x38]
push dword [eax + 0x10]
push eax
push 0x408bd4
push 0x20000
push ebx
call edi
add esp, 0x14
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
add dword [ebp - 0x38], 0x28
dec dword [ebp - 0x30]
jne 0x428047
jmp 0x42811f
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x24]
push eax
push esi
push esi
mov eax, 0x408d38
push eax
push eax
call fcn.004244d3
push 0x402cef
push dword [ebp - 0x28]
call fcn.0040cba4
push dword [ebp - 0x3c]
push 0x408d18
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
cmp dword [ebp - 0x3c], 0
mov eax, dword [0x4c4254]
mov eax, dword [eax + 0x18]
movzx ecx, word [eax + 0x14]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0x38], eax
jbe 0x42811f
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x38]
push dword [eax + 0x10]
push esi
push esi
push eax
push eax
call fcn.0042472d
mov eax, dword [ebp - 0x38]
push dword [eax + 0x10]
push eax
push 0x408bd4
push 0x20000
push ebx
call edi
add esp, 0x14
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
add dword [ebp - 0x38], 0x28
dec dword [ebp - 0x30]
jne 0x4280e5
mov eax, dword [0x4c3e3c]
mov ecx, dword [eax]
push 0x4c5f30
push 0x402714
push eax
call dword [ecx]
test eax, eax
jge 0x428157
push 0x408ba8
push 0x20000
push ebx
call edi
add esp, 0xc
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
jmp 0x428d67
cmp dword [0x4c5f30], 0
jne 0x42816d
push 0x1b5
call fcn.0041f4d9
push eax
jmp 0x42814a
mov eax, dword [ebp - 0x48]
mov eax, dword [eax + 0xc]
push 1
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
push esi
mov eax, 0x408cd8
push eax
push eax
call fcn.004244d3
push 0x402cef
push dword [ebp - 0x28]
call fcn.0040cba4
push dword [ebp - 0x4c]
push 0x408b8c
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
mov eax, dword [0x4c5f30]
xor ecx, ecx
push ecx
push ecx
push ecx
mov dword [0x4c5f34], ecx
mov edx, dword [eax]
lea ecx, [ebp - 0x44]
push ecx
lea ecx, [ebp - 0x40]
push ecx
push 0
push eax
call dword [edx + 0x24]
mov eax, dword [0x4c5e74]
mov ecx, dword [ebp - 0x44]
mov dword [0x4c5e74], eax
mov eax, dword [ebp - 0x40]
or dword [0x4c5e70], 1
imul eax, ecx
add dword [0x4c5f34], eax
push 1
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x24]
push eax
mov eax, 0x40812c
push eax
push eax
mov eax, 0x408b7c
push eax
push eax
mov dword [ebp - 0x24], ecx
call fcn.004244d3
mov eax, dword [ebp - 0x2c]
push 1
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
push esi
mov eax, 0x408b6c
push eax
push eax
call fcn.004244d3
push dword [ebp - 0x2c]
push dword [ebp - 0x44]
push 0x408b64
push 0x408108
push 0x20000
push ebx
call edi
add esp, 0x18
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
mov eax, dword [0x4c5e7c]
mov ecx, dword [eax]
push 0x2000000
push eax
call dword [ecx + 0xc]
test eax, eax
mov dword [ebp - 0x44], eax
jbe 0x4283ab
and dword [ebp - 0x3c], 0
and dword [ebp - 0x38], 0
xor ecx, ecx
inc ecx
cmp eax, ecx
mov dword [ebp - 0x2c], ecx
jb 0x4282bf
mov eax, dword [0x4c5e7c]
mov ecx, dword [eax]
push 0
lea edx, [ebp - 0x30]
push edx
mov edx, dword [ebp - 0x2c]
or edx, 0x2000000
push edx
push eax
call dword [ecx + 0x9c]
test byte [ebp - 0x30], 0x20
je 0x4282ab
inc dword [ebp - 0x3c]
test byte [ebp - 0x30], 0x10
je 0x4282b4
inc dword [ebp - 0x38]
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x44]
jbe 0x428284
mov eax, dword [0x4c5f30]
mov edx, dword [eax]
xor ecx, ecx
push ecx
push ecx
push ecx
lea ecx, [ebp - 0x44]
push ecx
lea ecx, [ebp - 0x40]
push ecx
push 2
push eax
call dword [edx + 0x24]
mov eax, dword [0x4c5e74]
mov ecx, dword [ebp - 0x44]
mov dword [0x4c5e74], eax
mov eax, dword [ebp - 0x40]
or dword [0x4c5e70], 4
imul eax, ecx
add dword [0x4c5f34], eax
push 1
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x24]
push eax
mov eax, 0x40812c
push eax
push eax
mov eax, 0x408b54
push eax
push eax
mov dword [ebp - 0x24], ecx
call fcn.004244d3
mov eax, dword [ebp - 0x2c]
push 1
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
push esi
mov eax, 0x408b44
push eax
push eax
call fcn.004244d3
mov eax, dword [ebp - 0x3c]
push 1
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
mov eax, 0x40812c
push eax
push eax
mov eax, 0x408b38
push eax
push eax
call fcn.004244d3
mov eax, dword [ebp - 0x38]
push 1
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
mov eax, 0x40812c
push eax
push eax
mov eax, 0x408b28
push eax
push eax
call fcn.004244d3
push dword [ebp - 0x2c]
lea eax, [ebp - 0x20]
push dword [ebp - 0x44]
push 0x408b04
push 0x400
push eax
call edi
push dword [ebp - 0x38]
lea eax, [ebp - 0x20]
push dword [ebp - 0x3c]
push eax
push 0x408ad8
push 0x20000
push ebx
call edi
add esp, 0x2c
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
mov eax, dword [0x4c5f30]
mov edx, dword [eax]
xor ecx, ecx
push ecx
push ecx
push ecx
lea ecx, [ebp - 0x44]
push ecx
lea ecx, [ebp - 0x40]
push ecx
push 1
push eax
call dword [edx + 0x24]
mov ecx, dword [ebp - 0x44]
or dword [0x4c5e70], 2
test ecx, ecx
mov eax, dword [0x4c5e74]
mov dword [0x4c5e74], eax
jbe 0x428448
mov eax, dword [ebp - 0x40]
imul eax, ecx
add dword [0x4c5f34], eax
push 1
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x24]
push eax
mov eax, 0x40812c
push eax
push eax
mov eax, 0x408ac8
push eax
push eax
mov dword [ebp - 0x24], ecx
call fcn.004244d3
mov eax, dword [ebp - 0x2c]
push 1
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
push esi
mov eax, 0x408ab8
push eax
push eax
call fcn.004244d3
push dword [ebp - 0x2c]
push dword [ebp - 0x44]
push 0x403d88
push 0x408108
push 0x20000
push ebx
call edi
add esp, 0x18
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
mov eax, dword [0x4c5e7c]
mov ecx, dword [eax]
push 0x6000000
push eax
call dword [ecx + 0xc]
test eax, eax
mov dword [ebp - 0x44], eax
jbe 0x4285ad
and dword [ebp - 0x38], 0
xor ecx, ecx
inc ecx
cmp eax, ecx
mov dword [ebp - 0x2c], ecx
jb 0x42849d
mov edx, dword [ebp - 0x2c]
mov eax, dword [0x4c5e7c]
mov ecx, dword [eax]
or edx, 0x6000000
push edx
push eax
call dword [ecx + 0xc0]
test ax, 0x400
je 0x428492
inc dword [ebp - 0x38]
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x44]
jbe 0x428471
mov eax, dword [0x4c5f30]
mov edx, dword [eax]
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
lea ecx, [ebp - 0x40]
push ecx
push 6
push eax
call dword [edx + 0x24]
mov ecx, dword [ebp - 0x44]
or dword [0x4c5e70], 0x40
test ecx, ecx
mov eax, dword [0x4c5e74]
mov dword [0x4c5e74], eax
jbe 0x4285ad
mov eax, dword [ebp - 0x40]
imul eax, ecx
add dword [0x4c5f34], eax
push 1
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x24]
push eax
mov eax, 0x40812c
push eax
push eax
mov eax, 0x408aa4
push eax
push eax
mov dword [ebp - 0x24], ecx
call fcn.004244d3
mov eax, dword [ebp - 0x2c]
push 1
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
push esi
mov eax, 0x408a90
push eax
push eax
call fcn.004244d3
mov eax, dword [ebp - 0x38]
push 1
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
mov eax, 0x40812c
push eax
push eax
mov eax, 0x401bf0
push eax
push eax
call fcn.004244d3
and dword [ebp - 0x24], 0
push 1
lea eax, [ebp - 0x24]
push eax
mov eax, 0x40812c
push eax
push eax
mov eax, 0x401cfc
push eax
push eax
call fcn.004244d3
mov eax, dword [ebp - 0x50]
push 1
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
mov eax, 0x40812c
push eax
push eax
mov eax, 0x408a80
push eax
push eax
call fcn.004244d3
push dword [ebp - 0x2c]
lea eax, [ebp - 0x20]
push dword [ebp - 0x44]
push 0x408a5c
push 0x400
push eax
call edi
push dword [ebp - 0x50]
lea eax, [ebp - 0x20]
push 0
push dword [ebp - 0x38]
push eax
push 0x408a30
push 0x20000
push ebx
call edi
add esp, 0x30
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
mov eax, dword [0x4c5e7c]
mov ecx, dword [eax]
push 0x4000000
push eax
call dword [ecx + 0xc]
test eax, eax
mov dword [ebp - 0x44], eax
jbe 0x4286ca
and dword [ebp - 0x38], 0
xor ecx, ecx
inc ecx
cmp eax, ecx
mov dword [ebp - 0x2c], ecx
jb 0x428603
mov edx, dword [ebp - 0x2c]
mov eax, dword [0x4c5e7c]
mov ecx, dword [eax]
or edx, 0x4000000
push edx
push eax
call dword [ecx + 0xcc]
and eax, 0x30
cmp al, 0x30
jne 0x4285f8
inc dword [ebp - 0x38]
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x44]
jbe 0x4285d6
mov eax, dword [0x4c5f30]
mov edx, dword [eax]
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
lea ecx, [ebp - 0x40]
push ecx
push 4
push eax
call dword [edx + 0x24]
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x40]
imul eax, ecx
add dword [0x4c5f34], eax
push 1
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x24]
push eax
mov eax, 0x40812c
push eax
push eax
mov eax, 0x408a1c
push eax
push eax
mov dword [ebp - 0x24], ecx
call fcn.004244d3
mov eax, dword [ebp - 0x2c]
push 1
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
push esi
mov eax, 0x408a08
push eax
push eax
call fcn.004244d3
mov eax, dword [ebp - 0x38]
push 1
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
mov eax, 0x40812c
push eax
push eax
mov eax, 0x4089fc
push eax
push eax
call fcn.004244d3
push dword [ebp - 0x2c]
lea eax, [ebp - 0x20]
push dword [ebp - 0x44]
push 0x4089d8
push 0x400
push eax
call edi
push dword [ebp - 0x38]
lea eax, [ebp - 0x20]
push eax
push 0x4089c0
push 0x20000
push ebx
call edi
add esp, 0x28
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
mov eax, dword [0x4c5e74]
or dword [0x4c5e70], 0x10
mov dword [0x4c5e74], eax
push dword [ebp - 0x28]
push 0x403d28
push 0xa
call fcn.00424790
push dword [ebp - 0x28]
push 0x403db0
push 8
call fcn.00424790
push dword [ebp - 0x28]
push 0x4089b4
push 0x19
call fcn.00424790
push dword [ebp - 0x28]
push 0x4089a8
push 0xb
call fcn.00424790
push dword [ebp - 0x28]
push 0x403d34
push 0xc
call fcn.00424790
push dword [ebp - 0x28]
push 0x40899c
push 0xd
call fcn.00424790
push dword [ebp - 0x28]
push 0x408990
push 0xf
call fcn.00424790
push dword [ebp - 0x28]
push 0x408984
push 0x10
call fcn.00424790
push dword [ebp - 0x28]
push 0x408974
push 0x11
call fcn.00424790
push dword [ebp - 0x28]
push 0x403d78
push 9
call fcn.00424790
push dword [ebp - 0x28]
push 0x408968
push 0x15
call fcn.00424790
push dword [ebp - 0x28]
push 0x403d4c
push 0x17
call fcn.00424790
push dword [ebp - 0x28]
push 0x408958
push 0x18
call fcn.00424790
push dword [ebp - 0x28]
push 0x40894c
push 0xe
call fcn.00424790
push dword [ebp - 0x28]
push 0x403d58
push 0x1b
call fcn.00424790
push dword [ebp - 0x28]
push 0x408940
push 0x1a
call fcn.00424790
push dword [ebp - 0x28]
push 0x4058e8
push 0x20
call fcn.00424790
push dword [ebp - 0x28]
push 0x40892c
push 0x21
call fcn.00424790
push dword [ebp - 0x28]
push 0x408920
push 0x22
call fcn.00424790
push dword [ebp - 0x28]
push 0x408914
push 0x23
call fcn.00424790
push dword [ebp - 0x28]
push 0x4088fc
push 0x24
call fcn.00424790
push dword [ebp - 0x28]
push 0x4088ec
push 0x25
call fcn.00424790
push dword [ebp - 0x28]
push 0x4088e4
push 0x26
call fcn.00424790
push dword [ebp - 0x28]
push 0x4088d4
push 0x27
call fcn.00424790
push dword [ebp - 0x28]
push 0x4088c0
push 0x28
call fcn.00424790
push dword [ebp - 0x28]
push 0x4088b4
push 0x29
call fcn.00424790
mov eax, dword [0x4c5f30]
mov ecx, dword [eax]
lea edx, [ebp - 0x44]
push edx
push eax
call dword [ecx + 0x1c]
and dword [ebp - 0x2c], 0
cmp dword [ebp - 0x44], 0
jbe 0x42888c
push dword [ebp - 0x2c]
call fcn.00424768
test eax, eax
jne 0x428881
push dword [ebp - 0x28]
push eax
push dword [ebp - 0x2c]
call fcn.00424790
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x44]
jb 0x428869
mov eax, dword [0x4c5f30]
mov ecx, dword [eax]
lea edx, [ebp - 0x40]
push edx
push eax
call dword [ecx + 0xc]
mov eax, dword [ebp - 0x40]
test eax, eax
jbe 0x4288dd
add dword [0x4c5f34], eax
push 1
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
push esi
mov eax, 0x4088ac
push eax
push eax
call fcn.004244d3
push dword [ebp - 0x40]
push 0x40888c
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
mov eax, dword [0x4c5f30]
mov ecx, dword [eax]
lea edx, [ebp - 0x40]
push edx
push eax
call dword [ecx + 0x10]
mov eax, dword [ebp - 0x40]
test eax, eax
jbe 0x42892e
add dword [0x4c5f34], eax
push 1
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
push esi
mov eax, 0x408884
push eax
push eax
call fcn.004244d3
push dword [ebp - 0x40]
push 0x408864
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
mov eax, dword [0x4c5f30]
mov ecx, dword [eax]
lea edx, [ebp - 0x40]
push edx
push eax
call dword [ecx + 0x18]
mov eax, dword [ebp - 0x40]
test eax, eax
jbe 0x42897f
add dword [0x4c5f34], eax
push 1
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
push esi
mov eax, 0x408858
push eax
push eax
call fcn.004244d3
push dword [ebp - 0x40]
push 0x408838
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
mov eax, dword [0x4c5f30]
mov ecx, dword [eax]
lea edx, [ebp - 0x40]
push edx
push eax
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x40]
test eax, eax
jbe 0x4289d0
add dword [0x4c5f34], eax
push 1
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
push esi
mov eax, 0x408830
push eax
push eax
call fcn.004244d3
push dword [ebp - 0x40]
push 0x408810
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
mov eax, dword [ebp - 0x48]
mov eax, dword [eax + 0xc]
sub eax, dword [0x4c5f34]
je 0x428a1d
push 1
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
push esi
mov eax, 0x408800
push eax
push eax
call fcn.004244d3
mov eax, dword [ebp - 0x48]
mov eax, dword [eax + 0xc]
sub eax, dword [0x4c5f34]
push eax
push 0x4087e0
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
cmp dword [ebp - 0x64], 0
je 0x428b32
mov eax, dword [ebp - 0x64]
push 1
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
push esi
mov eax, 0x4087cc
push eax
push eax
call fcn.004244d3
push dword [ebp - 0x64]
push 0x4087b0
push 0x20000
push ebx
call edi
add esp, 0x10
push 0x402cef
push dword [ebp - 0x28]
call fcn.0040cba4
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
mov eax, dword [ebp - 0x48]
mov eax, dword [eax + 0x2c]
test eax, eax
je 0x428aae
push 1
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
push esi
mov eax, 0x40879c
push eax
push eax
call fcn.004244d3
mov eax, dword [ebp - 0x48]
push dword [eax + 0x2c]
push 0x408780
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
mov eax, dword [ebp - 0x48]
mov eax, dword [eax + 0x34]
test eax, eax
je 0x428af0
push 1
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
push esi
mov eax, 0x408770
push eax
push eax
call fcn.004244d3
mov eax, dword [ebp - 0x48]
push dword [eax + 0x34]
push 0x408754
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
mov eax, dword [ebp - 0x48]
mov eax, dword [eax + 0x1c]
test eax, eax
je 0x428b32
push 1
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
push esi
mov eax, 0x408748
push eax
push eax
call fcn.004244d3
mov eax, dword [ebp - 0x48]
push dword [eax + 0x1c]
push 0x40872c
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
mov eax, dword [ebp - 0x54]
push 1
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
mov eax, 0x40812c
push eax
push eax
mov eax, 0x408c78
push eax
push eax
call fcn.004244d3
push dword [ebp - 0x54]
push 0x408710
push 0x20000
push ebx
call edi
add esp, 0x10
push 0x402cef
push dword [ebp - 0x28]
call fcn.0040cba4
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
mov eax, dword [ebp - 0x50]
push 1
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
mov eax, 0x40812c
push eax
push eax
mov eax, 0x4086f8
push eax
push eax
call fcn.004244d3
push dword [ebp - 0x50]
push 0x4086d8
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
mov eax, dword [ebp - 0x78]
push 1
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
mov eax, 0x40812c
push eax
push eax
mov eax, 0x4086c4
push eax
push eax
call fcn.004244d3
push dword [ebp - 0x78]
push 0x4086a4
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
mov eax, dword [ebp - 0x5c]
push 1
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
mov eax, 0x40812c
push eax
push eax
mov eax, 0x408690
push eax
push eax
call fcn.004244d3
push dword [ebp - 0x5c]
push 0x408670
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
cmp dword [ebp - 0x70], 0
jne 0x428c3f
cmp dword [ebp - 0x74], 0
je 0x428cb9
mov eax, dword [ebp - 0x70]
push 1
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
mov eax, 0x40812c
push eax
push eax
mov eax, 0x40865c
push eax
push eax
call fcn.004244d3
push dword [ebp - 0x70]
push 0x40863c
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
mov eax, dword [ebp - 0x74]
push 1
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
mov eax, 0x40812c
push eax
push eax
mov eax, 0x408624
push eax
push eax
call fcn.004244d3
push dword [ebp - 0x74]
push 0x408604
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
mov eax, dword [ebp - 0x58]
push 1
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
push esi
mov eax, 0x408c4c
push eax
push eax
call fcn.004244d3
push dword [ebp - 0x58]
push 0x4085ec
push 0x20000
push ebx
call edi
add esp, 0x10
push 0x402cef
push dword [ebp - 0x28]
call fcn.0040cba4
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
cmp dword [ebp - 0x50], 0
je 0x428d43
mov eax, dword [ebp - 0x58]
cdq
idiv dword [ebp - 0x50]
push 1
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
push esi
mov eax, 0x4085dc
push eax
push eax
call fcn.004244d3
push dword [ebp - 0x4c]
push 0x4085c0
push 0x20000
push ebx
call edi
add esp, 0x10
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0040cba4
mov eax, dword [0x4c5f30]
test eax, eax
je 0x428d52
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp dword [0x4c5eb4], 0
je 0x428d67
push dword [0x4c5eb8]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp + 0x3e0]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0043eef0
add ebp, 0x3e4
leave
ret 8