Function at 0x4251a0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov eax, 0x12a4
call fcn.00440a80
lea eax, [ebp - 0x109c]
mov ecx, 0x20a
lea edx, [ebp - 0xe66]
lea esi, [ebp - 0x63e]
lea edi, [ebp - 0x848]
lea ebx, [ebp - 0x434]
mov dword [ebp - 0x10c4], eax
lea eax, [ebp - 0xc5c]
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x10a4], 0xffffffff
mov dword [esp], edx
mov edx, dword [ebp - 0x10c4]
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], 0x20a
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], 0x20a
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], 0x20a
mov dword [esp + 0x20], eax
mov dword [ebp - 0x10c8], ecx
call fcn.004236f0
mov eax, 0
mov ecx, 0x20a
lea edx, [ebp - 0x1070]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [ebp - 0x10cc], eax
mov dword [ebp - 0x10d0], ecx
call fcn.004068f0
mov ecx, 0x20a
lea edx, [ebp - 0x1070]
mov dword [esp], edx
mov dword [esp + 4], 0x20a
mov dword [ebp - 0x10d4], eax
mov dword [ebp - 0x10d8], ecx
call fcn.004080d0
lea eax, [ebp - 0x1070]
mov ecx, dword [0x46d89c]
mov edx, esp
mov dword [edx + 8], eax
mov dword [edx + 4], 0
mov dword [edx], 0
call ecx
sub esp, 0xc
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10c0], 0x94c72c56
mov eax, dword [ebp - 0x10c0]
mov ecx, eax
sub ecx, 0x7449e3bb
mov dword [ebp - 0x10dc], eax
mov dword [ebp - 0x10e0], ecx
jg 0x4259df
jmp 0x4252fb
mov eax, dword [ebp - 0x10dc]
sub eax, 0x5d24a796
mov dword [ebp - 0x10e4], eax
jg 0x4259c3
jmp 0x425317
mov eax, dword [ebp - 0x10dc]
sub eax, 0x5a25396b
mov dword [ebp - 0x10e8], eax
jg 0x4259a7
jmp 0x425333
mov eax, dword [ebp - 0x10dc]
sub eax, 0x557e9f6a
mov dword [ebp - 0x10ec], eax
jg 0x42598b
jmp 0x42534f
mov eax, dword [ebp - 0x10dc]
sub eax, 0x52414529
mov dword [ebp - 0x10f0], eax
jg 0x42596f
jmp 0x42536b
mov eax, dword [ebp - 0x10dc]
sub eax, 0x506beb4a
mov dword [ebp - 0x10f4], eax
jg 0x425953
jmp 0x425387
mov eax, dword [ebp - 0x10dc]
sub eax, 0x4a2a0364
mov dword [ebp - 0x10f8], eax
jg 0x425937
jmp 0x4253a3
mov eax, dword [ebp - 0x10dc]
sub eax, 0x3dfb1eb8
mov dword [ebp - 0x10fc], eax
jg 0x42591b
jmp 0x4253bf
mov eax, dword [ebp - 0x10dc]
sub eax, 0x354f67e9
mov dword [ebp - 0x1100], eax
jg 0x4258ff
jmp 0x4253db
mov eax, dword [ebp - 0x10dc]
sub eax, 0x29e34dad
mov dword [ebp - 0x1104], eax
jg 0x4258e3
jmp 0x4253f7
mov eax, dword [ebp - 0x10dc]
sub eax, 0x22bc3727
mov dword [ebp - 0x1108], eax
jg 0x4258c7
jmp 0x425413
mov eax, dword [ebp - 0x10dc]
sub eax, 0x1215d279
mov dword [ebp - 0x110c], eax
jg 0x4258ab
jmp 0x42542f
mov eax, dword [ebp - 0x10dc]
sub eax, 0x8ac5110
mov dword [ebp - 0x1110], eax
jg 0x42588f
jmp 0x42544b
mov eax, dword [ebp - 0x10dc]
sub eax, 0x1bbae96
mov dword [ebp - 0x1114], eax
jg 0x425873
jmp 0x425467
mov eax, dword [ebp - 0x10dc]
sub eax, 0xff61f359
mov dword [ebp - 0x1118], eax
jg 0x425857
jmp 0x425483
mov eax, dword [ebp - 0x10dc]
sub eax, 0x94c72c55
mov dword [ebp - 0x111c], eax
jg 0x4254bb
jmp 0x42549f
mov eax, dword [ebp - 0x10dc]
sub eax, 0x93186ded
mov dword [ebp - 0x1120], eax
je 0x425ea2
jmp 0x4259fb
mov eax, dword [ebp - 0x10dc]
sub eax, 0x98dbcdcf
mov dword [ebp - 0x1124], eax
jg 0x4254f3
jmp 0x4254d7
mov eax, dword [ebp - 0x10dc]
sub eax, 0x94c72c56
mov dword [ebp - 0x1128], eax
je 0x425a00
jmp 0x4259fb
mov eax, dword [ebp - 0x10dc]
sub eax, 0xe6b1f1c8
mov dword [ebp - 0x112c], eax
jg 0x42583b
jmp 0x42550f
mov eax, dword [ebp - 0x10dc]
sub eax, 0xe6385edf
mov dword [ebp - 0x1130], eax
jg 0x42581f
jmp 0x42552b
mov eax, dword [ebp - 0x10dc]
sub eax, 0xe55ff7c2
mov dword [ebp - 0x1134], eax
jg 0x425803
jmp 0x425547
mov eax, dword [ebp - 0x10dc]
sub eax, 0xe1dbdeda
mov dword [ebp - 0x1138], eax
jg 0x4257e7
jmp 0x425563
mov eax, dword [ebp - 0x10dc]
sub eax, 0xdf303f3b
mov dword [ebp - 0x113c], eax
jg 0x4257cb
jmp 0x42557f
mov eax, dword [ebp - 0x10dc]
sub eax, 0xde1549c8
mov dword [ebp - 0x1140], eax
jg 0x4257af
jmp 0x42559b
mov eax, dword [ebp - 0x10dc]
sub eax, 0xcfcdd5a9
mov dword [ebp - 0x1144], eax
jg 0x425793
jmp 0x4255b7
mov eax, dword [ebp - 0x10dc]
sub eax, 0xbd32ee4d
mov dword [ebp - 0x1148], eax
jg 0x425777
jmp 0x4255d3
mov eax, dword [ebp - 0x10dc]
sub eax, 0xba1ca01e
mov dword [ebp - 0x114c], eax
jg 0x42575b
jmp 0x4255ef
mov eax, dword [ebp - 0x10dc]
sub eax, 0xb66190a6
mov dword [ebp - 0x1150], eax
jg 0x42573f
jmp 0x42560b
mov eax, dword [ebp - 0x10dc]
sub eax, 0xb11a3410
mov dword [ebp - 0x1154], eax
jg 0x425723
jmp 0x425627
mov eax, dword [ebp - 0x10dc]
sub eax, 0xa870b74e
mov dword [ebp - 0x1158], eax
jg 0x425707
jmp 0x425643
mov eax, dword [ebp - 0x10dc]
sub eax, 0xa409192f
mov dword [ebp - 0x115c], eax
jg 0x4256eb
jmp 0x42565f
mov eax, dword [ebp - 0x10dc]
sub eax, 0x9e7619af
mov dword [ebp - 0x1160], eax
jg 0x4256cf
jmp 0x42567b
mov eax, dword [ebp - 0x10dc]
sub eax, 0x98dbcdd0
mov dword [ebp - 0x1164], eax
je 0x4261e7
jmp 0x425697
mov eax, dword [ebp - 0x10dc]
sub eax, 0x991f3e17
mov dword [ebp - 0x1168], eax
je 0x426034
jmp 0x4256b3
mov eax, dword [ebp - 0x10dc]
sub eax, 0x9a9618c3
mov dword [ebp - 0x116c], eax
je 0x425c81
jmp 0x4259fb
mov eax, dword [ebp - 0x10dc]
sub eax, 0x9e7619b0
mov dword [ebp - 0x1170], eax
je 0x426206
jmp 0x4259fb
mov eax, dword [ebp - 0x10dc]
sub eax, 0xa4091930
mov dword [ebp - 0x1174], eax
je 0x426338
jmp 0x4259fb
mov eax, dword [ebp - 0x10dc]
sub eax, 0xa870b74f
mov dword [ebp - 0x1178], eax
je 0x425cce
jmp 0x4259fb
mov eax, dword [ebp - 0x10dc]
sub eax, 0xb11a3411
mov dword [ebp - 0x117c], eax
je 0x426025
jmp 0x4259fb
mov eax, dword [ebp - 0x10dc]
sub eax, 0xb66190a7
mov dword [ebp - 0x1180], eax
je 0x425ee6
jmp 0x4259fb
mov eax, dword [ebp - 0x10dc]
sub eax, 0xba1ca01f
mov dword [ebp - 0x1184], eax
je 0x4262b6
jmp 0x4259fb
mov eax, dword [ebp - 0x10dc]
sub eax, 0xbd32ee4e
mov dword [ebp - 0x1188], eax
je 0x42604d
jmp 0x4259fb
mov eax, dword [ebp - 0x10dc]
sub eax, 0xcfcdd5aa
mov dword [ebp - 0x118c], eax
je 0x4262fb
jmp 0x4259fb
mov eax, dword [ebp - 0x10dc]
sub eax, 0xde1549c9
mov dword [ebp - 0x1190], eax
je 0x425aa1
jmp 0x4259fb
mov eax, dword [ebp - 0x10dc]
sub eax, 0xdf303f3c
mov dword [ebp - 0x1194], eax
je 0x42624b
jmp 0x4259fb
mov eax, dword [ebp - 0x10dc]
sub eax, 0xe1dbdedb
mov dword [ebp - 0x1198], eax
je 0x426290
jmp 0x4259fb
mov eax, dword [ebp - 0x10dc]
sub eax, 0xe55ff7c3
mov dword [ebp - 0x119c], eax
je 0x425ed7
jmp 0x4259fb
mov eax, dword [ebp - 0x10dc]
sub eax, 0xe6385ee0
mov dword [ebp - 0x11a0], eax
je 0x425a92
jmp 0x4259fb
mov eax, dword [ebp - 0x10dc]
sub eax, 0xe6b1f1c9
mov dword [ebp - 0x11a4], eax
je 0x425a21
jmp 0x4259fb
mov eax, dword [ebp - 0x10dc]
sub eax, 0xff61f35a
mov dword [ebp - 0x11a8], eax
je 0x4261b0
jmp 0x4259fb
mov eax, dword [ebp - 0x10dc]
sub eax, 0x1bbae97
mov dword [ebp - 0x11ac], eax
je 0x425e1d
jmp 0x4259fb
mov eax, dword [ebp - 0x10dc]
sub eax, 0x8ac5111
mov dword [ebp - 0x11b0], eax
je 0x425c72
jmp 0x4259fb
mov eax, dword [ebp - 0x10dc]
sub eax, 0x1215d27a
mov dword [ebp - 0x11b4], eax
je 0x425a70
jmp 0x4259fb
mov eax, dword [ebp - 0x10dc]
sub eax, 0x22bc3728
mov dword [ebp - 0x11b8], eax
je 0x4261c9
jmp 0x4259fb
mov eax, dword [ebp - 0x10dc]
sub eax, 0x29e34dae
mov dword [ebp - 0x11bc], eax
je 0x4261d8
jmp 0x4259fb
mov eax, dword [ebp - 0x10dc]
sub eax, 0x354f67ea
mov dword [ebp - 0x11c0], eax
je 0x425e93
jmp 0x4259fb
mov eax, dword [ebp - 0x10dc]
sub eax, 0x3dfb1eb9
mov dword [ebp - 0x11c4], eax
je 0x425a30
jmp 0x4259fb
mov eax, dword [ebp - 0x10dc]
sub eax, 0x4a2a0365
mov dword [ebp - 0x11c8], eax
je 0x42634a
jmp 0x4259fb
mov eax, dword [ebp - 0x10dc]
sub eax, 0x506beb4b
mov dword [ebp - 0x11cc], eax
je 0x426271
jmp 0x4259fb
mov eax, dword [ebp - 0x10dc]
sub eax, 0x5241452a
mov dword [ebp - 0x11d0], eax
je 0x425cdd
jmp 0x4259fb
mov eax, dword [ebp - 0x10dc]
sub eax, 0x557e9f6b
mov dword [ebp - 0x11d4], eax
je 0x426197
jmp 0x4259fb
mov eax, dword [ebp - 0x10dc]
sub eax, 0x5a25396c
mov dword [ebp - 0x11d8], eax
je 0x425e0e
jmp 0x4259fb
mov eax, dword [ebp - 0x10dc]
sub eax, 0x5d24a797
mov dword [ebp - 0x11dc], eax
je 0x42622c
jmp 0x4259fb
mov eax, dword [ebp - 0x10dc]
sub eax, 0x7449e3bc
mov dword [ebp - 0x11e0], eax
je 0x4262d5
jmp 0x4259fb
jmp 0x426355
mov eax, 0x3dfb1eb9
mov ecx, 0xe6b1f1c9
mov edx, dword [ebp - 0x10]
cmp edx, 0
cmove eax, ecx
mov dword [ebp - 0x10c0], eax
jmp 0x426355
mov dword [ebp - 0x10c0], 0xbd32ee4e
jmp 0x426355
mov eax, dword [0x46d8b8]
mov ecx, dword [ebp - 0x18]
mov edx, esp
mov dword [edx], ecx
mov dword [edx + 4], 0xffffffff
call eax
sub esp, 8
mov ecx, 0xde1549c9
mov edx, 0x1215d27a
mov dword [ebp - 0x10a0], eax
cmp dword [ebp - 0x10a0], 0
cmovne ecx, edx
mov dword [ebp - 0x10c0], ecx
jmp 0x426355
mov eax, 0xde1549c9
mov ecx, 0xe6385ee0
cmp dword [ebp - 0x10a0], 0x80
cmovne eax, ecx
mov dword [ebp - 0x10c0], eax
jmp 0x426355
mov dword [ebp - 0x10c0], 0xbd32ee4e
jmp 0x426355
mov eax, 0
mov ecx, 0x20a
lea edx, [ebp - 0xa52]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [ebp - 0x11e4], eax
mov dword [ebp - 0x11e8], ecx
call fcn.004068f0
mov ecx, 0x104
lea edx, [0x46c0f0]
mov esi, 3
lea edi, [ebp - 0xa52]
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 3
mov dword [ebp - 0x11ec], eax
mov dword [ebp - 0x11f0], ecx
mov dword [ebp - 0x11f4], esi
call fcn.00406c20
lea ecx, [ebp - 0x434]
mov dword [esp], ecx
mov dword [ebp - 0x11f8], eax
call fcn.00407180
mov ecx, 0x101
lea edx, [ebp - 0xa52]
lea esi, [ebp - 0x434]
add edx, 6
mov dword [esp], edx
mov dword [esp + 4], 0x101
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [ebp - 0x11fc], ecx
call fcn.00406c20
mov ecx, 0
mov edx, 0x20a
lea esi, [ebp - 0x22a]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [ebp - 0x1200], eax
mov dword [ebp - 0x1204], ecx
mov dword [ebp - 0x1208], edx
call fcn.004068f0
lea ecx, [ebp - 0x22a]
mov edx, dword [0x44ddb8]
movzx edx, word [edx]
mov dword [ebp - 0x10a8], edx
mov edx, dword [ebp - 0x10a8]
add edx, 0xb5c0db06
add edx, 1
sub edx, 0xb5c0db06
mov esi, dword [0x44ddb8]
movzx edx, word [esi + edx*2]
mov dword [ebp - 0x10ac], edx
mov edx, dword [ebp - 0x10ac]
mov esi, dword [0x44ddb8]
mov edi, dword [ebp - 0x10a8]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [0x44ddb8]
add edi, 2
mov ebx, dword [ebp - 0x10a8]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [ebp - 0x120c], eax
call fcn.00405e10
lea eax, [ebp - 0x63e]
mov ecx, dword [0x46d8c4]
mov edx, esp
mov dword [edx + 8], 0
mov dword [edx + 0xc], eax
mov dword [edx + 4], 0
mov dword [edx], 0
call ecx
sub esp, 0x10
mov ecx, 0x9a9618c3
mov edx, 0x8ac5111
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
cmove ecx, edx
mov dword [ebp - 0x10c0], ecx
jmp 0x426355
mov dword [ebp - 0x10c0], 0xbd32ee4e
jmp 0x426355
lea eax, [ebp - 0x14]
lea ecx, [ebp - 0x20]
lea edx, [ebp - 0xe66]
lea esi, [ebp - 0x63e]
mov edi, dword [ebp - 0x109c]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], esi
call fcn.00424c30
mov ecx, 0x5241452a
mov edx, 0xa870b74f
cmp eax, 0
cmovl ecx, edx
mov dword [ebp - 0x10c0], ecx
jmp 0x426355
mov dword [ebp - 0x10c0], 0xbd32ee4e
jmp 0x426355
mov eax, 0
mov ecx, 0x14
lea edx, [ebp - 0x1084]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x14
mov dword [ebp - 0x1210], eax
mov dword [ebp - 0x1214], ecx
call fcn.004068f0
lea ecx, [ebp - 0x1084]
mov edx, 0
mov esi, dword [0x44ddbc]
movzx esi, word [esi]
mov dword [ebp - 0x10b0], esi
mov esi, dword [ebp - 0x10b0]
sub edx, 1
sub esi, edx
mov edx, dword [0x44ddbc]
movzx edx, word [edx + esi*2]
mov dword [ebp - 0x10b4], edx
mov edx, dword [ebp - 0x10b4]
mov esi, dword [0x44ddbc]
mov edi, dword [ebp - 0x10b0]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [0x44ddbc]
add edi, 2
mov ebx, dword [ebp - 0x10b0]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [ebp - 0x1218], eax
call fcn.00405e10
mov eax, pe_nt_image_headers32
mov ecx, 0
mov edx, 1
lea esi, [ebp - 0x22a]
lea edi, [ebp - 0xa52]
lea ebx, [ebp - 0x1084]
mov dword [esp], esi
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], pe_nt_image_headers32
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 1
mov dword [ebp - 0x121c], eax
mov dword [ebp - 0x1220], ecx
mov dword [ebp - 0x1224], edx
call fcn.004249a0
mov ecx, 0x1bbae97
mov edx, 0x5a25396c
cmp eax, 0
cmovl ecx, edx
mov dword [ebp - 0x10c0], ecx
jmp 0x426355
mov dword [ebp - 0x10c0], 0xbd32ee4e
jmp 0x426355
mov eax, 0
mov ecx, pe_nt_image_headers32
mov edx, 1
lea esi, [ebp - 0xc5c]
lea edi, [ebp - 0x1084]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], edi
mov dword [esp + 0xc], pe_nt_image_headers32
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
mov dword [ebp - 0x1228], eax
mov dword [ebp - 0x122c], ecx
mov dword [ebp - 0x1230], edx
call fcn.004249a0
mov ecx, 0x93186ded
mov edx, 0x354f67ea
cmp eax, 0
cmovl ecx, edx
mov dword [ebp - 0x10c0], ecx
jmp 0x426355
mov dword [ebp - 0x10c0], 0xbd32ee4e
jmp 0x426355
mov eax, dword [0x46d8b8]
mov ecx, dword [ebp - 0x1c]
mov edx, esp
mov dword [edx], ecx
mov dword [edx + 4], 0xffffffff
call eax
sub esp, 8
mov ecx, 0xb66190a7
mov edx, 0xe55ff7c3
cmp eax, 0
cmovne ecx, edx
mov dword [ebp - 0x10c0], ecx
jmp 0x426355
mov dword [ebp - 0x10c0], 0x29e34dae
jmp 0x426355
mov eax, 0
mov ecx, 0x20a
lea edx, [ebp - 0xa52]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [ebp - 0x1234], eax
mov dword [ebp - 0x1238], ecx
call fcn.004068f0
mov ecx, 0x104
lea edx, [0x44ddc4]
mov esi, 6
lea edi, [ebp - 0xa52]
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 6
mov dword [ebp - 0x123c], eax
mov dword [ebp - 0x1240], ecx
mov dword [ebp - 0x1244], esi
call fcn.00406c20
lea ecx, [ebp - 0x434]
mov dword [esp], ecx
mov dword [ebp - 0x1248], eax
call fcn.00407180
mov ecx, 0xfe
lea edx, [ebp - 0xa52]
lea esi, [ebp - 0x434]
add edx, 0xc
mov dword [esp], edx
mov dword [esp + 4], 0xfe
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [ebp - 0x124c], ecx
call fcn.00406c20
mov ecx, pe_nt_image_headers32
mov edx, 0
mov esi, 1
lea edi, [ebp - 0x22a]
lea ebx, [ebp - 0xa52]
mov dword [ebp - 0x1250], eax
lea eax, [ebp - 0x1084]
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], pe_nt_image_headers32
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 1
mov dword [ebp - 0x1254], esi
mov dword [ebp - 0x1258], ecx
mov dword [ebp - 0x125c], edx
call fcn.004249a0
mov ecx, 0x991f3e17
mov edx, 0xb11a3411
cmp eax, 0
cmovl ecx, edx
mov dword [ebp - 0x10c0], ecx
jmp 0x426355
mov dword [ebp - 0x10c0], 0xbd32ee4e
jmp 0x426355
mov dword [ebp - 0x10a4], 1
mov dword [ebp - 0x10c0], 0x98dbcdd0
jmp 0x426355
lea eax, [ebp - 0x848]
mov ecx, dword [0x46d8c0]
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov ecx, 0
mov edx, 0x14
lea esi, [ebp - 0x1098]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x14
mov dword [ebp - 0x1260], eax
mov dword [ebp - 0x1264], ecx
mov dword [ebp - 0x1268], edx
call fcn.004068f0
lea ecx, [ebp - 0x1098]
mov edx, 0
mov esi, dword [0x44ddc0]
movzx esi, word [esi]
mov dword [ebp - 0x10b8], esi
mov esi, dword [ebp - 0x10b8]
sub edx, 1
sub esi, edx
mov edx, dword [0x44ddc0]
movzx edx, word [edx + esi*2]
mov dword [ebp - 0x10bc], edx
mov edx, dword [ebp - 0x10bc]
mov esi, dword [0x44ddc0]
mov edi, dword [ebp - 0x10b8]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [0x44ddc0]
add edi, 2
mov ebx, dword [ebp - 0x10b8]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [ebp - 0x126c], eax
call fcn.00405e10
mov eax, 0
mov ecx, 0x4540
mov edx, 1
lea esi, [ebp - 0xe66]
lea edi, [ebp - 0x1098]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], edi
mov dword [esp + 0xc], 0x4540
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 0
mov dword [ebp - 0x1270], eax
mov dword [ebp - 0x1274], ecx
mov dword [ebp - 0x1278], edx
call fcn.004249a0
mov ecx, 0xff61f35a
mov edx, 0x557e9f6b
cmp eax, 0
cmovl ecx, edx
mov dword [ebp - 0x10c0], ecx
jmp 0x426355
mov dword [ebp - 0x10a4], 0xffffffff
mov dword [ebp - 0x10c0], 0x22bc3728
jmp 0x426355
mov dword [ebp - 0x10a4], 1
mov dword [ebp - 0x10c0], 0x22bc3728
jmp 0x426355
mov dword [ebp - 0x10c0], 0x29e34dae
jmp 0x426355
mov dword [ebp - 0x10c0], 0x98dbcdd0
jmp 0x426355
mov eax, 0x5d24a797
mov ecx, 0x9e7619b0
cmp dword [ebp - 0x14], 0
cmovne eax, ecx
mov dword [ebp - 0x10c0], eax
jmp 0x426355
mov eax, dword [0x46d884]
mov ecx, dword [ebp - 0x14]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov dword [ebp - 0x10c0], 0x5d24a797
mov dword [ebp - 0x127c], eax
jmp 0x426355
mov eax, 0x506beb4b
mov ecx, 0xdf303f3c
cmp dword [ebp - 0x20], 0
cmovne eax, ecx
mov dword [ebp - 0x10c0], eax
jmp 0x426355
mov eax, dword [0x46d8dc]
mov ecx, dword [ebp - 0x20]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov dword [ebp - 0x10c0], 0x506beb4b
mov dword [ebp - 0x1280], eax
jmp 0x426355
mov eax, 0xba1ca01f
mov ecx, 0xe1dbdedb
cmp dword [ebp - 0x1c], 0
cmovne eax, ecx
mov dword [ebp - 0x10c0], eax
jmp 0x426355
mov eax, dword [0x46d8dc]
mov ecx, dword [ebp - 0x1c]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov dword [ebp - 0x10c0], 0xba1ca01f
mov dword [ebp - 0x1284], eax
jmp 0x426355
mov eax, 0xcfcdd5aa
mov ecx, 0x7449e3bc
cmp dword [ebp - 0x18], 0
cmovne eax, ecx
mov dword [ebp - 0x10c0], eax
jmp 0x426355
mov eax, dword [0x46d8dc]
mov ecx, dword [ebp - 0x18]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov dword [ebp - 0x10c0], 0xcfcdd5aa
mov dword [ebp - 0x1288], eax
jmp 0x426355
lea eax, [ebp - 0x434]
mov ecx, dword [0x46d8c0]
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov ecx, 0x4a2a0365
mov edx, 0xa4091930
cmp dword [ebp - 0x10a4], 0
cmovne ecx, edx
mov dword [ebp - 0x10c0], ecx
mov dword [ebp - 0x128c], eax
jmp 0x426355
mov eax, esp
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.dll_ExitProcess]
call eax
sub esp, 4
add esp, 0x12a4
pop esi
pop edi
pop ebx
pop ebp
ret
jmp 0x4252d6