Function at 0x4250e0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49e0f7
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x2e8
mov eax, dword [0x4dc100]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x230], esi
mov dword [ebp - 4], 2
mov eax, dword [0x4dfca8]
mov eax, dword [eax]
cmp dword [eax + 4], 0xffffffff
jne 0x425208
mov ecx, dword [ebx + 0x1c]
cmp ecx, 0xf
jbe 0x425175
mov edx, dword [ebx + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42516b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42610d
push ecx
push edx
call fcn.00474928
add esp, 8
mov ecx, dword [ebx + 0x34]
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x1c], 0xf
mov byte [ebx + 8], 0
cmp ecx, 0xf
jbe 0x4251bb
mov edx, dword [ebx + 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4251b1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42610d
push ecx
push edx
call fcn.00474928
add esp, 8
mov ecx, dword [ebx + 0x4c]
mov dword [ebx + 0x30], 0
mov dword [ebx + 0x34], 0xf
mov byte [ebx + 0x20], 0
cmp ecx, 0xf
jbe 0x425201
mov edx, dword [ebx + 0x38]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4251f7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42610d
push ecx
push edx
call fcn.00474928
add esp, 8
xor al, al
jmp 0x425f22
call fcn.00424f30
test al, al
je 0x425299
movaps xmm0, xmmword [0x4d68b0]
xor ecx, ecx
movups xmmword [ebp - 0x2b8], xmm0
mov dword [ebp - 0x298], 0x4e584a4e
movaps xmm0, xmmword [0x4d6820]
movups xmmword [ebp - 0x2a8], xmm0
mov dword [ebp - 0x294], 0x52595f0b
mov dword [ebp - 0x290], 0x4a4c4a0b
mov word [ebp - 0x28c], 0x4542
mov byte [ebp - 0x28a], 0
mov al, byte [ebp - 0x2b8]
xor byte [ebp + ecx - 0x2b7], al
inc ecx
cmp ecx, 0x2d
jb 0x425261
push 0x30
push str.HSACSX
lea eax, [ebp - 0x2b7]
mov byte [ebp - 0x28a], 0
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov ax, word [esi + 0x272]
cmp ax, word [esi + 0x270]
jge 0x426053
push 0x130
lea eax, [ebp - 0x178]
push 0
push eax
call fcn.00476480
sub esp, 0x1c
lea ecx, [ebp - 0x178]
mov eax, esp
mov dword [eax], 0x4d64f0
mov dword [eax + 0x24], eax
call fcn.00403930
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x260]
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x23c], 1
push 0x4d1109
mov byte [ebp - 0x229], 4
movups xmmword [ebp - 0x260], xmm0
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0
call fcn.00409650
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x288]
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x278], 0
push 0x4d1109
movups xmmword [ebp - 0x288], xmm0
mov dword [ebp - 0x274], 0
call fcn.00409650
lea eax, [ebp - 0x23c]
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0x229]
mov dword [ebp - 0x238], 0x15
push eax
lea eax, [ebp - 0x260]
push eax
lea eax, [ebp - 0x288]
push eax
lea eax, [ebp - 0x238]
push eax
lea eax, [ebx + 8]
push eax
lea ecx, [ebp - 0x178]
call fcn.00403f60
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x274]
cmp ecx, 0xf
jbe 0x4253d0
mov edx, dword [ebp - 0x288]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4253c6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x426144
push ecx
push edx
call fcn.00474928
add esp, 8
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x24c]
cmp ecx, 0xf
jbe 0x42540e
mov edx, dword [ebp - 0x260]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x425404
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x426144
push ecx
push edx
call fcn.00474928
add esp, 8
lea eax, [ebp - 0x2f8]
mov dword [ebp - method.std::_Func_impl_no_alloc_int____cdecl___void___double__double__double__double___int__void___double__double__double__double_.virtual_0], vtable.std::_Func_impl_no_alloc_int____cdecl___void___double__double__double__double___int__void___double__double__double__double_.0
mov dword [ebp - 0x2f4], 0x424cd0
mov dword [ebp - 0x2d4], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xb0]
push eax
mov dword [ebp - 0x7c], 0xffffffff
call fcn.00404dd0
mov eax, dword [ebp - 0xb8]
xorps xmm0, xmm0
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x2d4]
mov dword [ebp - 0x80], eax
movsd qword [ebp - 0x88], xmm0
mov byte [ebp - 0x78], 1
test ecx, ecx
je 0x42547e
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
lea eax, [ebp - 0x2f8]
cmp ecx, eax
setne al
push eax
call edx
lea edi, [esi + 8]
lea eax, [ebx + 0x38]
cmp edi, eax
je 0x42549b
cmp dword [ebx + 0x4c], 0xf
mov ecx, edi
push dword [ebx + 0x48]
cmova eax, dword [ebx + 0x38]
push eax
call fcn.00402690
mov ecx, dword [ebx + 0x30]
mov eax, accept
sub eax, ecx
cmp eax, 1
jb 0x426112
cmp dword [ebx + 0x34], 0xf
lea eax, [ebx + 0x20]
push 1
cmova eax, dword [ebx + 0x20]
push 0x4d12c0
push ecx
push eax
push ecx
push dword [ebp - 0x230]
lea ecx, [ebp - 0x288]
call fcn.0040a900
mov byte [ebp - 4], 7
lea edx, [ebx + 0x38]
cmp dword [ebx + 0x4c], 0xf
mov eax, dword [ebp - 0x278]
cmova edx, dword [ebx + 0x38]
mov ecx, dword [ebx + 0x48]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x274]
sub eax, dword [ebp - 0x23c]
mov dword [ebp - 0x238], ecx
push ecx
push edx
cmp ecx, eax
ja 0x42555d
mov eax, dword [ebp - 0x23c]
lea esi, [ebp - 0x288]
add eax, ecx
cmp dword [ebp - 0x274], 0xf
mov dword [ebp - 0x278], eax
cmova esi, dword [ebp - 0x288]
mov eax, dword [ebp - 0x23c]
add eax, esi
push eax
call fcn.00476850
mov eax, dword [ebp - 0x238]
add esp, 0xc
mov ecx, dword [ebp - 0x23c]
add eax, esi
mov esi, dword [ebp - 0x230]
mov byte [eax + ecx], 0
lea eax, [ebp - 0x288]
jmp 0x42556f
push dword [ebp - 0x230]
push ecx
lea ecx, [ebp - 0x288]
call fcn.004094f0
mov dword [ebp - 0x2c0], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x2d0], xmm0
mov dword [ebp - 0x2bc], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x2d0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x2c0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 8
cmp dword [ebx + 0x48], 0
je 0x425a13
cmp dword [ebp - 0x2c0], 0
je 0x425a13
mov eax, dword [ebp - 0xb8]
test eax, eax
jne 0x42566f
test byte [ebp - 0x104], 1
je 0x425a13
push 0x4e
xorps xmm0, xmm0
mov dword [ebp - 0x250], eax
push str._FTPClient__Error__Curl_session_is_not_initialized___Use_InitSession___before.
lea ecx, [ebp - 0x260]
mov dword [ebp - 0x24c], eax
movups xmmword [ebp - 0x260], xmm0
call fcn.00409650
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
je 0x426117
mov eax, dword [ecx]
lea edx, [ebp - 0x260]
push edx
call dword [eax + 8]
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x24c]
cmp ecx, 0xf
jbe 0x425a13
mov edx, dword [ebp - 0x260]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x425a09
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42611c
jmp 0x425a09
push eax
call fcn.0042a130
add esp, 4
mov byte [ebp - 0x229], 0
lea eax, [ebp - 0x2d0]
lea ecx, [ebp - 0x178]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.00404270
push 0xb0
lea eax, [ebp - 0x228]
mov byte [ebp - 4], 0xa
push 0
push eax
call fcn.00476480
add esp, 8
lea ecx, [ebp - 0x228]
call fcn.00405bc0
mov byte [ebp - 4], 0xb
lea eax, [ebx + 0x38]
cmp dword [ebx + 0x4c], 0xf
lea ecx, [ebp - 0x224]
cmova eax, dword [ebx + 0x38]
sub esp, 8
push eax
call fcn.004082a0
test eax, eax
lea ecx, [ebp - 0x228]
mov eax, dword [ebp - 0x228]
je 0x4256fa
add ecx, dword [eax + 4]
xor edx, edx
mov eax, 4
cmp dword [ecx + 0x38], edx
cmovne eax, edx
jmp 0x42570f
add ecx, dword [eax + 4]
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push 0
push eax
call fcn.004037b0
mov eax, dword [ebp - 0x228]
mov eax, dword [eax + 4]
test byte [ebp + eax - 0x21c], 6
jne 0x4258cf
cmp dword [ebp - 0x30], 0xf
lea eax, [ebp - 0x44]
cmova eax, dword [ebp - 0x44]
push eax
push 0x2712
push dword [ebp - 0xb8]
call fcn.0042e630
add esp, 0xc
push 0x404d70
push 0x4e2b
push dword [ebp - 0xb8]
call fcn.0042e630
add esp, 0xc
lea eax, [ebp - 0x228]
push eax
push 0x2711
push dword [ebp - 0xb8]
call fcn.0042e630
add esp, 0xc
lea ecx, [ebp - 0x178]
call fcn.004049e0
mov dword [ebp - 0x230], eax
test eax, eax
je 0x42586a
test byte [ebp - 0x104], 1
je 0x425871
push eax
call fcn.0042ac50
add esp, 4
lea edx, [ebp - 0x2d0]
cmp dword [ebp - 0x2bc], 0xf
lea ecx, [ebp - 0x140]
xorps xmm0, xmm0
cmova edx, dword [ebp - 0x2d0]
cmp dword [ebp - 0x12c], 0xf
push eax
push dword [ebp - 0x230]
cmova ecx, dword [ebp - 0x140]
push edx
push ecx
sub esp, 0x18
mov ecx, esp
push 0x48
movups xmmword [ecx], xmm0
push str._FTPClient__Error__Unable_to_import_remote_File__s__s__Error___d___s_.
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00409650
lea eax, [ebp - 0x2a4]
push eax
call fcn.00404c00
add esp, 0x2c
mov edx, eax
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
je 0x426121
mov eax, dword [ecx]
push edx
call dword [eax + 8]
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x290]
cmp ecx, 0xf
jbe 0x425871
mov edx, dword [ebp - 0x2a4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42585e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x426126
push ecx
push edx
call fcn.00474928
add esp, 8
jmp 0x425871
mov byte [ebp - 0x229], 1
lea ecx, [ebp - 0x224]
call fcn.00407640
test eax, eax
jne 0x4258a9
mov eax, dword [ebp - 0x228]
lea ecx, [ebp - 0x228]
push 0
add ecx, dword [eax + 4]
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.004037b0
cmp byte [ebp - 0x229], 0
jne 0x425965
cmp dword [ebx + 0x4c], 0xf
lea eax, [ebx + 0x38]
cmova eax, dword [ebx + 0x38]
push eax
call fcn.0047ddcd
add esp, 4
jmp 0x425965
test byte [ebp - 0x104], 1
je 0x425965
push 0x4e
xorps xmm0, xmm0
mov dword [ebp - 0x250], 0
push str._FTPClient__Error__Unable_to_open_local_file__s_in_CFTPClient::DownloadFile__.
lea ecx, [ebp - 0x260]
mov dword [ebp - 0x24c], 0
movups xmmword [ebp - 0x260], xmm0
call fcn.00409650
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
je 0x42612b
mov eax, dword [ecx]
lea edx, [ebp - 0x260]
push edx
call dword [eax + 8]
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x24c]
cmp ecx, 0xf
jbe 0x425965
mov edx, dword [ebp - 0x260]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42595b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x426130
push ecx
push edx
call fcn.00474928
add esp, 8
mov eax, dword [ebp - 0x228]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x228]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x22c], eax
lea ecx, [ebp - 0x224]
call fcn.00405b10
mov eax, dword [ebp - 0x228]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ostream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x228]
mov ecx, dword [eax + 4]
lea eax, [ecx - 8]
mov dword [ebp + ecx - 0x22c], eax
lea eax, [ebp - 0x1c0]
mov byte [ebp - 4], 0xe
push eax
mov dword [ebp - method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.004737ad
mov byte [ebp - 4], 8
add esp, 4
mov ecx, dword [ebp - 0x30]
cmp ecx, 0xf
jbe 0x425a13
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x425a09
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x426135
push ecx
push edx
call fcn.00474928
add esp, 8
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x2bc]
cmp ecx, 0xf
jbe 0x425a51
mov edx, dword [ebp - 0x2d0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x425a47
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42613a
push ecx
push edx
call fcn.00474928
add esp, 8
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x274]
mov dword [ebp - 0x2c0], 0
mov dword [ebp - 0x2bc], 0xf
mov byte [ebp - 0x2d0], 0
cmp ecx, 0xf
jbe 0x425aaa
mov edx, dword [ebp - 0x288]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x425aa0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42613a
push ecx
push edx
call fcn.00474928
add esp, 8
lea ecx, [ebp - 0x178]
call fcn.00404170
mov ecx, dword [esi + 0x18]
xorps xmm0, xmm0
add ecx, 0xfffffffc
mov dword [ebp - 0x1c], 0
cmp dword [edi + 0x10], ecx
movups xmmword [ebp - 0x2c], xmm0
cmovb ecx, dword [edi + 0x10]
cmp dword [edi + 0x14], 0xf
mov dword [ebp - 0x18], 0
jbe 0x425adf
mov edi, dword [edi]
push ecx
push edi
lea ecx, [ebp - 0x2c]
call fcn.00409650
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], 0xf
cmova eax, dword [ebp - 0x2c]
push eax
call fcn.004808e8
add esp, 4
mov word [esi + 0x272], ax
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [ebx + 0x4c], 0xf
lea ecx, [ebx + 0x38]
lea edi, [esi + 0x2c]
cmova ecx, dword [ebx + 0x38]
mov edx, edi
sub esp, 8
call fcn.00429ce0
cmp dword [ebx + 0x4c], 0xf
lea eax, [ebx + 0x38]
cmova eax, dword [ebx + 0x38]
push eax
call fcn.0047ddcd
add esp, 0xc
mov dword [ebp - 0x270], 0x596f603c
mov cl, 0x3c
mov dword [ebp - 0x26c], 0x4e594a4e
mov dword [ebp - 0x268], 0x55525512
xor eax, eax
mov byte [ebp - 0x264], 0
xor byte [ebp + eax - 0x26f], cl
inc eax
cmp eax, 0xb
jae 0x425b7a
mov cl, byte [ebp - 0x270]
jmp 0x425b65
mov ecx, edi
mov byte [ebp - 0x264], 0
xorps xmm0, xmm0
mov dword [ebp - 0x34], 0
movups xmmword [ebp - 0x44], xmm0
mov dword [ebp - 0x30], 0
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x425ba0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x44]
call fcn.00409650
lea eax, [ebp - 0x26f]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0x44]
call fcn.004061f0
mov dword [ebp - 0x250], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x260], xmm0
mov dword [ebp - 0x24c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x260], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x250], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x260]
cmp dword [ebp - 0x24c], 0xf
lea ecx, [ebp - 0x2a4]
movsx edx, word [esi + 0x272]
cmova eax, dword [ebp - 0x260]
mov dword [ebp - 0x230], eax
call fcn.0040e460
mov edi, eax
cmp dword [edi + 0x14], 0xf
jbe 0x425c46
mov edi, dword [edi]
push dword [ebp - 0x230]
mov dh, 0x77
mov byte [ebp - 0x248], 0x75
mov al, 0x31
mov byte [ebp - 0x238], dh
xor al, dh
mov byte [ebp - 0x229], 0x1b
mov byte [ebp - 0x237], al
mov cl, 0x1e
xor cl, dh
mov byte [ebp - 0x232], 0
mov dl, 0x1b
mov byte [ebp - 0x236], cl
xor dl, dh
mov byte [ebp - 0x240], 0
mov ah, 0x12
mov byte [ebp - 0x235], dl
xor ah, dh
mov byte [ebp - 0x232], 0
mov ch, 4
mov byte [ebp - 0x234], ah
xor ch, dh
mov byte [ebp - 0x240], 0
mov al, 0x23
mov byte [ebp - 0x233], ch
xor al, byte [ebp - 0x248]
mov cl, 0x10
mov byte [ebp - 0x247], al
mov dl, 7
mov al, byte [ebp - 0x248]
mov ah, 6
xor cl, al
xor dl, al
xor ah, al
mov byte [ebp - 0x246], cl
mov ch, 0x1c
mov byte [ebp - 0x244], ah
xor ch, al
mov byte [ebp - 0x245], dl
mov dh, 0x1a
mov byte [ebp - 0x243], ch
xor dh, al
mov al, byte [ebp - 0x229]
xor al, byte [ebp - 0x248]
mov byte [ebp - 0x241], al
lea eax, [ebp - 0x237]
push edi
push eax
lea eax, [ebp - 0x247]
mov byte [ebp - 0x242], dh
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [ebp - 0x290]
cmp ecx, 0xf
jbe 0x425d57
mov edx, dword [ebp - 0x2a4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x425d4d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42613f
push ecx
push edx
call fcn.00474928
add esp, 8
mov ecx, dword [ebp - 0x24c]
mov dword [ebp - 0x294], 0
mov dword [ebp - 0x290], 0xf
mov byte [ebp - 0x2a4], 0
cmp ecx, 0xf
jbe 0x425dac
mov edx, dword [ebp - 0x260]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x425da2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42613f
push ecx
push edx
call fcn.00474928
add esp, 8
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0xf
mov byte [ebp - 0x260], 0
cmp ecx, 0xf
jbe 0x425dfb
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x425df1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42613f
push ecx
push edx
call fcn.00474928
add esp, 8
mov ax, word [esi + 0x272]
mov ecx, dword [ebp - 0x18]
cmp ax, word [esi + 0x270]
jne 0x425f42
cmp ecx, 0xf
jbe 0x425e43
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x425e39
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x426144
push ecx
push edx
call fcn.00474928
add esp, 8
lea ecx, [ebp - 0x178]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.00403ba0
mov ecx, dword [ebx + 0x1c]
cmp ecx, 0xf
jbe 0x425e94
mov edx, dword [ebx + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x425e8a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x426144
push ecx
push edx
call fcn.00474928
add esp, 8
mov ecx, dword [ebx + 0x34]
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x1c], 0xf
mov byte [ebx + 8], 0
cmp ecx, 0xf
jbe 0x425eda
mov edx, dword [ebx + 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x425ed0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x426144
push ecx
push edx
call fcn.00474928
add esp, 8
mov ecx, dword [ebx + 0x4c]
mov dword [ebx + 0x30], 0
mov dword [ebx + 0x34], 0xf
mov byte [ebx + 0x20], 0
cmp ecx, 0xf
jbe 0x425f20
mov edx, dword [ebx + 0x38]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x425f16
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x426144
push ecx
push edx
call fcn.00474928
add esp, 8
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004748e0
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x48
cmp ecx, 0xf
jbe 0x425f73
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x425f69
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x426144
push ecx
push edx
call fcn.00474928
add esp, 8
lea ecx, [ebp - 0x178]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.00403ba0
mov ecx, dword [ebx + 0x1c]
cmp ecx, 0xf
jbe 0x425fc4
mov edx, dword [ebx + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x425fba
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x426144
push ecx
push edx
call fcn.00474928
add esp, 8
mov ecx, dword [ebx + 0x34]
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x1c], 0xf
mov byte [ebx + 8], 0
cmp ecx, 0xf
jbe 0x42600a
mov edx, dword [ebx + 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x426000
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x426144
push ecx
push edx
call fcn.00474928
add esp, 8
mov ecx, dword [ebx + 0x4c]
mov dword [ebx + 0x30], 0
mov dword [ebx + 0x34], 0xf
mov byte [ebx + 0x20], 0
cmp ecx, 0xf
jbe 0x425201
mov edx, dword [ebx + 0x38]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4251f7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x426144
jmp 0x4251f7
mov ecx, dword [ebx + 0x1c]
cmp ecx, 0xf
jbe 0x426087
mov edx, dword [ebx + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42607d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42610d
push ecx
push edx
call fcn.00474928
add esp, 8
mov ecx, dword [ebx + 0x34]
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x1c], 0xf
mov byte [ebx + 8], 0
cmp ecx, 0xf
jbe 0x4260c9
mov edx, dword [ebx + 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4260bf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42610d
push ecx
push edx
call fcn.00474928
add esp, 8
mov ecx, dword [ebx + 0x4c]
mov dword [ebx + 0x30], 0
mov dword [ebx + 0x34], 0xf
mov byte [ebx + 0x20], 0
cmp ecx, 0xf
jbe 0x425f20
mov edx, dword [ebx + 0x38]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x425f16
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x425f16
call fcn.0047ce51
call fcn.004015c0
call fcn.004731d2
call fcn.0047ce51
call fcn.004731d2
call fcn.0047ce51
call fcn.004731d2
call fcn.0047ce51
call fcn.0047ce51
call fcn.0047ce51
call fcn.0047ce51
call fcn.0047ce51
int3