Function at 0x428de0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, 4
imul ecx, eax, 0x2534
mov edx, 4
imul eax, edx, 0x3676
imul edx, dword [eax + 0x48fe00], 0xd969abe5
and edx, 0x8672b54
mov eax, dword [ecx + 0x48fe00]
or eax, edx
mov ecx, 4
imul edx, ecx, 0x2534
mov dword [edx + 0x48fe00], eax
mov eax, 4
imul ecx, eax, 0x5b
mov edx, 4
imul eax, edx, 0x962
imul edx, dword [eax + 0x48fe00], 0x25dc75c5
mov eax, dword [ecx + 0x48fe00]
add eax, edx
mov ecx, 4
imul edx, ecx, 0x5b
mov dword [edx + 0x48fe00], eax
cmp dword [0x4a4b28], 0
jne 0x428f0a
mov eax, 4
imul ecx, eax, 0xe32
mov edx, dword [ecx + 0x48fe00]
or edx, 0x52ae5bf2
mov eax, 4
imul ecx, eax, 0xe32
mov dword [ecx + 0x48fe00], edx
call fcn.0045f870
mov dword [0x4a4b28], eax
mov edx, 4
imul eax, edx, 0x352d
cmp dword [eax + 0x48fe00], 0x5ed4cd7c
jne 0x428f0a
mov ecx, 4
imul edx, ecx, 0x185f
mov eax, dword [edx + 0x48fe00]
add eax, 1
mov dword [ebp - 8], eax
mov ecx, 4
imul edx, ecx, 0x185f
mov eax, dword [ebp - 8]
mov dword [edx + 0x48fe00], eax
imul ecx, dword [ebp - 8], 0x279b66f7
sub ecx, 0x3d167d11
mov edx, 4
imul eax, edx, 0x284
mov edx, dword [eax + 0x48fe00]
add edx, ecx
mov eax, 4
imul ecx, eax, 0x284
mov dword [ecx + 0x48fe00], edx
mov edx, 4
imul eax, edx, 0x2aa4
mov ecx, dword [eax + 0x48fe00]
xor ecx, 0x1ad27a5e
mov edx, 4
imul eax, edx, 0x2aa4
mov dword [eax + 0x48fe00], ecx
push 3
push 0x34ef
call fcn.004511e0
add esp, 8
mov dword [ebp - 0xc], eax
mov ecx, 4
imul edx, ecx, 0x211
cmp dword [edx + 0x48fe00], 0x71e9baa1
jle 0x428f83
mov eax, 4
imul ecx, eax, 0x24d6
mov edx, dword [ecx + 0x48fe00]
add edx, 0x3203829a
mov eax, 4
imul ecx, eax, 0x24d6
mov dword [ecx + 0x48fe00], edx
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00466071
add esp, 8
mov dword [ebp - 4], eax
mov ecx, 2
imul edx, ecx, 0xa69
movsx eax, word [edx + 0x49db20]
add eax, 0x629a1c24
mov ecx, 2
imul edx, ecx, 0xa69
mov word [edx + 0x49db20], ax
mov eax, dword [ebp - 0xc]
push eax
push 3
call fcn.0045eda0
add esp, 8
mov ecx, 2
imul edx, ecx, 0x6a3
movsx eax, word [edx + 0x49db20]
sar eax, 0xa
mov ecx, 2
imul edx, ecx, 0x2b3
movsx ecx, word [edx + 0x49db20]
sar ecx, 6
sub eax, ecx
cmp eax, 0xbe22f62
jg 0x42903d
mov edx, 4
imul eax, edx, 0x7dd
mov ecx, 2
imul edx, ecx, 0x3620
movsx ecx, word [edx + 0x49db20]
lea edx, [ecx*4 + 0x7e6f8d1b]
mov eax, dword [eax + 0x48fe00]
sub eax, edx
mov ecx, 4
imul edx, ecx, 0x7dd
mov dword [edx + 0x48fe00], eax
cmp dword [ebp - 4], 0
jne 0x4291ca
mov eax, 2
imul ecx, eax, 0x35fd
mov edx, 4
imul eax, edx, 0x21db
mov edx, dword [eax + 0x48fe00]
sar edx, 6
mov eax, 4
imul eax, eax, 0x315a
mov eax, dword [eax + 0x48fe00]
sar eax, 4
imul edx, eax
xor edx, 0x263fea47
movsx ecx, word [ecx + 0x49db20]
imul ecx, edx
mov edx, 2
imul eax, edx, 0x35fd
mov word [eax + 0x49db20], cx
push 0x3e8
call dword [0x48fd74]
mov ecx, 4
imul edx, ecx, 0x2742
mov eax, dword [edx + 0x48fe00]
xor eax, 0x6cd49e5b
xor eax, 0x2fac8447
cmp eax, 0x30ec450
jne 0x429108
mov ecx, 4
imul edx, ecx, 0x3584
mov eax, 4
imul ecx, eax, 0x1d3a
mov eax, dword [ecx + 0x48fe00]
sar eax, 1
sub eax, 0x3f060ab4
mov ecx, dword [edx + 0x48fe00]
add ecx, eax
mov edx, 4
imul eax, edx, 0x3584
mov dword [eax + 0x48fe00], ecx
push 3
push 0x34ef
call fcn.004511e0
add esp, 8
mov dword [ebp - 0x10], eax
mov ecx, 2
imul edx, ecx, 0x2fad
movsx eax, word [edx + 0x49db20]
xor eax, 0xc9984dd
mov ecx, 2
imul edx, ecx, 0x2fad
mov word [edx + 0x49db20], ax
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00466071
add esp, 8
mov dword [ebp - 4], eax
mov edx, 4
imul eax, edx, 0x93
mov ecx, dword [eax + 0x48fe00]
or ecx, 0x60685cfe
mov edx, 4
imul eax, edx, 0x93
mov dword [eax + 0x48fe00], ecx
mov ecx, dword [ebp - 0x10]
push ecx
push 3
call fcn.0045eda0
add esp, 8
mov edx, 4
imul eax, edx, 0x2b63
cmp dword [eax + 0x48fe00], 0xbd7bb24d
jg 0x4291ca
mov ecx, 4
imul edx, ecx, 0x12d6
mov eax, dword [edx + 0x48fe00]
add eax, 0x77e464b7
mov ecx, 4
imul edx, ecx, 0x12d6
mov dword [edx + 0x48fe00], eax
mov eax, 4
imul ecx, eax, 0x36e5
mov edx, dword [ecx + 0x48fe00]
not edx
mov eax, 4
imul ecx, eax, 0x2406
or edx, dword [ecx + 0x48fe00]
or edx, 0x3c927990
mov dword [ebp - 0x1c], edx
mov edx, 4
imul eax, edx, 0x28c7
mov ecx, dword [eax + 0x48fe00]
shl ecx, 1
and ecx, 0x1616fbd0
or ecx, 0xfbeb1d12
mov dword [ebp - 0x20], ecx
mov edx, 4
imul eax, edx, 0x2406
mov ecx, dword [eax + 0x48fe00]
add ecx, 1
mov edx, 4
imul eax, edx, 0x2406
mov dword [eax + 0x48fe00], ecx
mov ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp - 0x20]
jg 0x429299
mov edx, 4
imul eax, edx, 0xc83
mov ecx, dword [eax + 0x48fe00]
add ecx, 1
mov dword [ebp - 0x14], ecx
mov edx, 4
imul eax, edx, 0xc83
mov ecx, dword [ebp - 0x14]
mov dword [eax + 0x48fe00], ecx
mov edx, 2
imul eax, edx, 0x1ed3
movsx ecx, word [eax + 0x49db20]
imul ecx, dword [ebp - 0x14]
mov edx, 2
imul eax, edx, 0x1ed3
mov word [eax + 0x49db20], cx
cmp dword [ebp - 4], 0
je 0x429417
mov ecx, 4
imul edx, ecx, 0x777
mov eax, dword [edx + 0x48fe00]
add eax, 1
mov dword [ebp - 0x18], eax
mov ecx, 4
imul edx, ecx, 0x777
mov eax, dword [ebp - 0x18]
mov dword [edx + 0x48fe00], eax
cmp dword [ebp - 0x18], 0xd384e723
jl 0x429318
mov ecx, 2
imul edx, ecx, 0x31d3
mov eax, 4
imul ecx, eax, 0x1526
mov eax, dword [ecx + 0x48fe00]
shl eax, 5
imul ecx, eax, 0xd8726369
movsx edx, word [edx + 0x49db20]
imul edx, ecx
mov eax, 2
imul ecx, eax, 0x31d3
mov word [ecx + 0x49db20], dx
mov edx, dword [ebp - 4]
push edx
push 1
push 4
push 0x4a4b28
call fcn.00466224
add esp, 0x10
mov eax, 2
imul ecx, eax, 0x1e10
movsx edx, word [ecx + 0x49db20]
mov dword [ebp - 0x24], edx
mov eax, 4
imul ecx, eax, 0x219e
mov edx, dword [ecx + 0x48fe00]
or edx, 0xe4f903e8
mov dword [ebp - 0x28], edx
mov eax, 2
imul ecx, eax, 0x1e10
mov dx, word [ecx + 0x49db20]
add dx, 1
mov eax, 2
imul ecx, eax, 0x1e10
mov word [ecx + 0x49db20], dx
mov edx, dword [ebp - 0x24]
cmp edx, dword [ebp - 0x28]
jne 0x4293bf
mov eax, 4
imul ecx, eax, 0x27b4
mov edx, 4
imul eax, edx, 0x31e2
mov ecx, dword [ecx + 0x48fe00]
sub ecx, dword [eax + 0x48fe00]
mov edx, 4
imul eax, edx, 0x27b4
mov dword [eax + 0x48fe00], ecx
mov ecx, dword [ebp - 4]
push ecx
call fcn.00465d46
add esp, 4
mov edx, 4
imul eax, edx, 0x183a
mov ecx, 4
imul edx, ecx, 0x667
mov ecx, dword [edx + 0x48fe00]
cmp dword [eax + 0x48fe00], ecx
jge 0x429417
mov edx, 4
imul eax, edx, 0x13e1
mov ecx, dword [eax + 0x48fe00]
sub ecx, 0x451ef577
mov edx, 4
imul eax, edx, 0x13e1
mov dword [eax + 0x48fe00], ecx
mov ecx, 4
imul edx, ecx, 0x866
mov eax, dword [edx + 0x48fe00]
sub eax, 0x45ef5966
mov ecx, 4
imul edx, ecx, 0x866
mov dword [edx + 0x48fe00], eax
mov esp, ebp
pop ebp
ret