Function at 0x4296b0
Capabilities:
Create service
Query service status
Start service

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x476280
mov eax, dword fs:[0]
push eax
sub esp, 0xb4
mov eax, dword [0x490040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0xbc], edi
mov ebx, dword [ebp + 0xc]
test ebx, ebx
je 0x4296f3
mov dword [ebx], 0
mov eax, dword fs:[0x2c]
movaps xmm0, xmmword [0x487d40]
movups xmmword [ebp - 0x54], xmm0
mov dword [ebp - 0x34], 0xa49833e
mov esi, dword [eax]
movaps xmm0, xmmword [0x4874d0]
mov eax, dword [0x497fa0]
movups xmmword [ebp - 0x44], xmm0
mov dword [ebp - 0x30], 0x299d6e6
mov dword [ebp - 0x94], esi
cmp eax, dword [esi + 4]
jle 0x4297a3
push 0x497fa0
call fcn.00452992
add esp, 4
cmp dword [0x497fa0], 0xffffffff
jne 0x4297a3
xorps xmm0, xmm0
mov byte [0x498080], 1
movlpd qword [ebp - 0x90], xmm0
mov edx, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x54]
mov byte [ecx + 0x498058], al
add ecx, 1
adc edx, 0
test edx, edx
jne 0x429789
cmp ecx, 0x28
jb 0x429770
push 0x47b9b0
call fcn.00452c62
add esp, 4
push 0x497fa0
call fcn.00452941
add esp, 4
mov ecx, 0x498058
call fcn.0041e7f0
push 0x2710
push 0x498058
push 3
call fcn.00401610
add esp, 0xc
mov dword [ebp - 0x98], 0
lea eax, [ebp - 0x98]
mov ecx, edi
push eax
push 0
call fcn.0042a830
test al, al
jne 0x4298fa
mov edx, dword [ebp - 0x98]
push ecx
lea ecx, [ebp - 0x28]
call fcn.0041a470
add esp, 4
mov esi, eax
mov dword [ebp - 4], 0
cmp dword [esi + 0x14], 7
jbe 0x429806
mov esi, dword [esi]
movaps xmm0, xmmword [0x488820]
mov ecx, dword [ebp - 0x94]
mov eax, dword [0x4992f0]
movups xmmword [ebp - 0x50], xmm0
mov word [ebp - 0x30], 0xbc3e
movaps xmm0, xmmword [0x487510]
movups xmmword [ebp - 0x40], xmm0
mov byte [ebp - 0x2e], 0x3c
cmp eax, dword [ecx + 4]
jle 0x4298a3
push 0x4992f0
call fcn.00452992
add esp, 4
cmp dword [0x4992f0], 0xffffffff
jne 0x4298a3
xorps xmm0, xmm0
mov byte [0x498d4f], 1
movlpd qword [ebp - 0x90], xmm0
mov edx, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
nop dword [eax]
mov al, byte [ebp + ecx - 0x50]
mov byte [ecx + 0x498d2c], al
add ecx, 1
adc edx, 0
test edx, edx
jne 0x429889
cmp ecx, 0x23
jb 0x429870
push 0x47b980
call fcn.00452c62
add esp, 4
push 0x4992f0
call fcn.00452941
add esp, 4
mov ecx, 0x498d2c
call fcn.00415f90
push esi
push 0x498d2c
push 1
call fcn.00401610
mov ecx, dword [ebp - 0x14]
add esp, 0xc
cmp ecx, 7
jbe 0x42a660
mov edx, dword [ebp - 0x28]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42a656
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42a667
jmp 0x42a656
lea eax, [ebp - 0x9c]
mov ecx, edi
push eax
push 0
call fcn.0042aba0
test al, al
je 0x4299cc
movaps xmm0, xmmword [0x487b60]
mov eax, dword [0x498e20]
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0x4b599d77
mov dword [ebp - 0x34], 0x6790dcef
mov dword [ebp - 0x30], 0x5e4f8663
mov word [ebp - 0x2c], 0xa5f8
cmp eax, dword [esi + 4]
jle 0x4299b3
push 0x498e20
call fcn.00452992
add esp, 4
cmp dword [0x498e20], 0xffffffff
jne 0x4299b3
xorps xmm0, xmm0
mov byte [0x497f82], 1
movlpd qword [ebp - 0x90], xmm0
mov edx, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
nop dword [eax]
mov al, byte [ebp + ecx - 0x48]
mov byte [ecx + 0x497f64], al
add ecx, 1
adc edx, 0
test edx, edx
jne 0x429999
cmp ecx, 0x1e
jb 0x429980
push 0x47b950
call fcn.00452c62
add esp, 4
push 0x498e20
call fcn.00452941
add esp, 4
mov ecx, 0x497f64
call fcn.0040a780
push 0x497f64
push 3
call fcn.00401610
add esp, 8
cmp dword [edi + 0x5c], 0
jne 0x429f52
movaps xmm0, xmmword [0x487520]
mov eax, dword [0x4981d0]
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0x5c4e8a68
mov dword [ebp - 0x14], 0x2d5c6e2
cmp eax, dword [esi + 4]
jle 0x429a63
push 0x4981d0
call fcn.00452992
add esp, 4
cmp dword [0x4981d0], 0xffffffff
jne 0x429a63
xorps xmm0, xmm0
mov byte [0x49923c], 1
movlpd qword [ebp - 0x90], xmm0
mov edx, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
mov al, byte [ebp + ecx - 0x28]
mov byte [ecx + 0x499224], al
add ecx, 1
adc edx, 0
test edx, edx
jne 0x429a49
cmp ecx, 0x18
jb 0x429a30
push 0x47b920
call fcn.00452c62
add esp, 4
push 0x4981d0
call fcn.00452941
add esp, 4
mov ecx, 0x499224
call fcn.0040aa80
push 0x499224
push 3
call fcn.00401610
lea esi, [edi + 0x30]
add esp, 8
cmp dword [esi + 0x14], 7
jbe 0x429a87
mov esi, dword [esi]
mov ecx, dword [ebp - 0x94]
mov eax, 0xa777
mov word [ebp - 0x14], ax
mov eax, dword [0x498d54]
mov dword [ebp - 0x28], 0x77741943
mov dword [ebp - 0x24], 0x61c5a705
mov dword [ebp - 0x20], 0x736a4715
mov dword [ebp - 0x1c], 0x153b43
mov dword [ebp - 0x18], 0x77281915
cmp eax, dword [ecx + 4]
jle 0x429b36
push 0x498d54
call fcn.00452992
add esp, 4
cmp dword [0x498d54], 0xffffffff
jne 0x429b36
xorps xmm0, xmm0
mov byte [0x497f9a], 1
movlpd qword [ebp - 0x90], xmm0
mov edx, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
nop word [eax + eax]
mov ax, word [ebp + ecx*2 - 0x28]
mov word [ecx*2 + 0x497f84], ax
add ecx, 1
adc edx, 0
test edx, edx
jne 0x429b1c
cmp ecx, 0xb
jb 0x429b00
push 0x47b8c0
call fcn.00452c62
add esp, 4
push 0x498d54
call fcn.00452941
add esp, 4
mov ecx, 0x497f84
call fcn.004304f0
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x9c], eax
mov eax, 0xa777
mov word [ebp - 0x14], ax
mov eax, dword [0x498a54]
mov dword [ebp - 0x28], 0x77741943
mov dword [ebp - 0x24], 0x61c5a705
mov dword [ebp - 0x20], 0x736a4715
mov dword [ebp - 0x1c], 0x153b43
mov dword [ebp - 0x18], 0x77281915
cmp eax, dword [ecx + 4]
jle 0x429bf6
push 0x498a54
call fcn.00452992
add esp, 4
cmp dword [0x498a54], 0xffffffff
jne 0x429bf6
xorps xmm0, xmm0
mov byte [0x49930a], 1
movlpd qword [ebp - 0x90], xmm0
mov edx, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
nop dword [eax]
mov ax, word [ebp + ecx*2 - 0x28]
mov word [ecx*2 + 0x4992f4], ax
add ecx, 1
adc edx, 0
test edx, edx
jne 0x429bdc
cmp ecx, 0xb
jb 0x429bc0
push 0x47b8f0
call fcn.00452c62
add esp, 4
push 0x498a54
call fcn.00452941
add esp, 4
mov ecx, 0x4992f4
call fcn.004304f0
push 0
push 0
push 0
push 0
push 0
push esi
push 1
push 3
push 1
push 0xf01ff
push dword [ebp - 0x9c]
push eax
push dword [edi + 0x58]
call dword [sym.imp.ADVAPI32.dll_CreateServiceW]
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [edi + 0x5c], eax
test eax, eax
jne 0x429f58
call esi
mov edi, eax
mov dword [ebp - 0x98], edi
cmp edi, 0x431
je 0x429e2f
mov ecx, dword [ebp - 0x94]
mov eax, dword [0x49928c]
mov dword [ebp - 0xb4], 0x484e8279
mov dword [ebp - 0xb0], 0x2c8088ff
mov word [ebp - 0xac], 0xde2f
mov byte [ebp - 0xaa], 0x3c
cmp eax, dword [ecx + 4]
jle 0x429cf6
push 0x49928c
call fcn.00452992
add esp, 4
cmp dword [0x49928c], 0xffffffff
jne 0x429cf6
xorps xmm0, xmm0
mov byte [0x4995ff], 1
movlpd qword [ebp - 0x90], xmm0
mov edx, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0xb4]
mov byte [ecx + 0x4995f4], al
add ecx, 1
adc edx, 0
test edx, edx
jne 0x429cdc
cmp ecx, 0xb
jb 0x429cc0
push 0x47b860
call fcn.00452c62
add esp, 4
push 0x49928c
call fcn.00452941
add esp, 4
mov ecx, 0x4995f4
call fcn.0040b580
push ecx
mov edx, edi
lea ecx, [ebp - 0x28]
call fcn.0041a470
add esp, 4
mov esi, eax
mov dword [ebp - 4], 1
cmp dword [esi + 0x14], 7
jbe 0x429d1f
mov esi, dword [esi]
movaps xmm0, xmmword [0x487e80]
mov ecx, dword [ebp - 0x94]
mov eax, dword [0x496da4]
movups xmmword [ebp - 0x5c], xmm0
mov dword [ebp - 0x3c], 0xa6fca3b
movaps xmm0, xmmword [0x487930]
movups xmmword [ebp - 0x4c], xmm0
mov dword [ebp - 0x38], 0x6fd1eba3
mov dword [ebp - 0x34], 0xf1cd57e
mov word [ebp - 0x30], 0x8cf8
mov byte [ebp - 0x2e], 0xb0
cmp eax, dword [ecx + 4]
jle 0x429dd3
push 0x496da4
call fcn.00452992
add esp, 4
cmp dword [0x496da4], 0xffffffff
jne 0x429dd3
xorps xmm0, xmm0
mov byte [0x4994bf], 1
movlpd qword [ebp - 0x90], xmm0
mov edx, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x5c]
mov byte [ecx + 0x499490], al
add ecx, 1
adc edx, 0
test edx, edx
jne 0x429db9
cmp ecx, 0x2f
jb 0x429da0
push 0x47b890
call fcn.00452c62
add esp, 4
push 0x496da4
call fcn.00452941
add esp, 4
mov ecx, 0x499490
call fcn.0041e850
push 0x4995f4
push esi
push 0x499490
push 1
call fcn.00401610
add esp, 0x10
mov ecx, dword [ebp - 0x14]
cmp ecx, 7
jbe 0x42a2dc
mov edx, dword [ebp - 0x28]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42a2d2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42a66c
jmp 0x42a2d2
mov edi, dword [ebp - 0xbc]
lea eax, [ebp - 0x98]
push eax
push 0
mov ecx, edi
call fcn.0042aba0
test al, al
jne 0x429f58
mov edi, dword [ebp - 0x98]
mov edx, edi
push ecx
lea ecx, [ebp - 0x28]
call fcn.0041a470
add esp, 4
mov esi, eax
mov dword [ebp - 4], 2
cmp dword [esi + 0x14], 7
jbe 0x429e72
mov esi, dword [esi]
movaps xmm0, xmmword [0x487d50]
mov ecx, dword [ebp - 0x94]
mov eax, dword [0x496db0]
movups xmmword [ebp - 0x68], xmm0
mov dword [ebp - 0x38], 0x4f1c8a78
movaps xmm0, xmmword [0x4884f0]
movups xmmword [ebp - 0x58], xmm0
mov dword [ebp - 0x34], 0x76c3ccf3
movaps xmm0, xmmword [0x4881a0]
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x30], 0xf1cd568
mov word [ebp - 0x2c], 0xa5d8
cmp eax, dword [ecx + 4]
jle 0x429f33
push 0x496db0
call fcn.00452992
add esp, 4
cmp dword [0x496db0], 0xffffffff
jne 0x429f33
xorps xmm0, xmm0
mov byte [0x498dc6], 1
movlpd qword [ebp - 0x90], xmm0
mov edx, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x68]
mov byte [ecx + 0x498d88], al
add ecx, 1
adc edx, 0
test edx, edx
jne 0x429f19
cmp ecx, 0x3e
jb 0x429f00
push 0x47b830
call fcn.00452c62
add esp, 4
push 0x496db0
call fcn.00452941
add esp, 4
mov ecx, 0x498d88
call fcn.0041ed30
push esi
push 0x498d88
push 1
call fcn.00401610
add esp, 0xc
jmp 0x429df2
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov eax, dword [edi + 0x5c]
test eax, eax
je 0x429f7f
lea ecx, [ebp - 0x9c]
push ecx
push 0x24
lea ecx, [ebp - 0x50]
push ecx
push 0
push eax
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatusEx]
test eax, eax
jne 0x42a000
call esi
push ecx
mov edx, eax
lea ecx, [ebp - 0x28]
call fcn.0041a470
add esp, 4
mov esi, eax
mov dword [ebp - 4], 3
cmp dword [esi + 0x14], 7
jbe 0x429f9e
mov esi, dword [esi]
call fcn.0042a680
mov ecx, eax
call fcn.0041d400
push esi
push eax
push 1
call fcn.00401610
mov dword [ebp - 4], 0xffffffff
add esp, 0xc
mov ecx, dword [ebp - 0x14]
cmp ecx, 7
jbe 0x42a115
mov edx, dword [ebp - 0x28]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x429ff1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42a66c
push ecx
push edx
call fcn.00452c7c
add esp, 8
jmp 0x42a115
mov edx, dword [ebp - 0x4c]
lea ecx, [ebp - 0x28]
call fcn.0041c030
mov esi, eax
mov dword [ebp - 4], 4
cmp dword [esi + 0x14], 0xf
jbe 0x42a01c
mov esi, dword [esi]
mov ecx, dword [ebp - 0x94]
movaps xmm0, xmmword [0x487800]
mov eax, dword [0x499008]
movups xmmword [ebp - 0xb8], xmm0
mov word [ebp - 0xa8], 0xef68
cmp eax, dword [ecx + 4]
jle 0x42a0b6
push 0x499008
call fcn.00452992
add esp, 4
cmp dword [0x499008], 0xffffffff
jne 0x42a0b6
xorps xmm0, xmm0
mov byte [0x49734a], 1
movlpd qword [ebp - 0x90], xmm0
mov edx, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0xb8]
mov byte [ecx + 0x497338], al
add ecx, 1
adc edx, 0
test edx, edx
jne 0x42a09c
cmp ecx, 0x12
jb 0x42a080
push 0x47b7d0
call fcn.00452c62
add esp, 4
push 0x499008
call fcn.00452941
add esp, 4
mov ecx, 0x497338
call fcn.0040bf10
push esi
push 0x497338
push 3
call fcn.00401610
mov dword [ebp - 4], 0xffffffff
add esp, 0xc
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x42a10b
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42a101
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42a66c
push ecx
push edx
call fcn.00452c7c
add esp, 8
cmp dword [ebp - 0x4c], 4
je 0x42a432
mov ecx, dword [ebp - 0x94]
movaps xmm0, xmmword [0x487530]
mov eax, dword [0x4983f4]
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0x5c4e8a68
mov dword [ebp - 0x14], 0x2d5c6e2
cmp eax, dword [ecx + 4]
jle 0x42a1b3
push 0x4983f4
call fcn.00452992
add esp, 4
cmp dword [0x4983f4], 0xffffffff
jne 0x42a1b3
xorps xmm0, xmm0
mov byte [0x49781c], 1
movlpd qword [ebp - 0x90], xmm0
mov edx, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x28]
mov byte [ecx + 0x497804], al
add ecx, 1
adc edx, 0
test edx, edx
jne 0x42a199
cmp ecx, 0x18
jb 0x42a180
push 0x47b7a0
call fcn.00452c62
add esp, 4
push 0x4983f4
call fcn.00452941
add esp, 4
mov ecx, 0x497804
call fcn.0040aa80
push 0x497804
push 3
call fcn.00401610
add esp, 8
push 0
push 0
push dword [edi + 0x5c]
call dword [sym.imp.ADVAPI32.dll_StartServiceW]
test eax, eax
jne 0x42a2f3
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp edi, 0x420
je 0x42a2ed
push ecx
mov edx, edi
lea ecx, [ebp - 0x28]
call fcn.0041a470
add esp, 4
mov esi, eax
mov dword [ebp - 4], 5
cmp dword [esi + 0x14], 7
jbe 0x42a214
mov esi, dword [esi]
movaps xmm0, xmmword [0x4875d0]
mov ecx, dword [ebp - 0x94]
mov eax, dword [0x4995f0]
movups xmmword [ebp - 0x50], xmm0
mov word [ebp - 0x30], 0xbc3e
movaps xmm0, xmmword [0x4874b0]
movups xmmword [ebp - 0x40], xmm0
mov byte [ebp - 0x2e], 0x3c
cmp eax, dword [ecx + 4]
jle 0x42a2b3
push 0x4995f0
call fcn.00452992
add esp, 4
cmp dword [0x4995f0], 0xffffffff
jne 0x42a2b3
xorps xmm0, xmm0
mov byte [0x498e47], 1
movlpd qword [ebp - 0x90], xmm0
mov edx, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x50]
mov byte [ecx + 0x498e24], al
add ecx, 1
adc edx, 0
test edx, edx
jne 0x42a299
cmp ecx, 0x23
jb 0x42a280
push 0x47b770
call fcn.00452c62
add esp, 4
push 0x4995f0
call fcn.00452941
add esp, 4
mov ecx, 0x498e24
call fcn.00415f90
push esi
push 0x498e24
push 1
call fcn.00401610
add esp, 0xc
jmp 0x429df2
push ecx
push edx
call fcn.00452c7c
add esp, 8
test ebx, ebx
je 0x42a660
mov dword [ebx], edi
xor al, al
jmp 0x42a434
mov edi, dword [ebp - 0xbc]
xor esi, esi
mov dword [ebp - 0x9c], esi
nop dword [eax + eax]
mov eax, dword [edi + 0x5c]
test eax, eax
je 0x42a32b
lea ecx, [ebp - 0x8c]
push ecx
push 0x24
lea ecx, [ebp - 0x50]
push ecx
push 0
push eax
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatusEx]
test eax, eax
jne 0x42a40d
call dword [sym.imp.KERNEL32.dll_GetLastError]
push ecx
mov edx, eax
lea ecx, [ebp - 0x28]
call fcn.0041a470
add esp, 4
mov dword [ebp - 0x98], eax
mov dword [ebp - 4], 6
cmp dword [eax + 0x14], 7
jbe 0x42a354
mov eax, dword [eax]
mov dword [ebp - 0x98], eax
call fcn.0042a750
mov ebx, eax
cmp byte [ebx + 0x4f], 0
je 0x42a3b9
xorps xmm0, xmm0
movlpd qword [ebp - 0xb0], xmm0
mov edi, dword [ebp - 0xac]
mov esi, dword [ebp - 0xb0]
nop dword [eax + eax]
mov ecx, esi
mov eax, 0x2a3cef1b
and ecx, 7
mov edx, 0x2b0a58b
shl ecx, 3
call fcn.004741f0
xor byte [esi + ebx], al
add esi, 1
adc edi, 0
test edi, edi
jne 0x42a3a9
cmp esi, 0x4f
jb 0x42a380
mov esi, dword [ebp - 0x9c]
mov edi, dword [ebp - 0xbc]
mov byte [ebx + 0x4f], 0
push dword [ebp - 0x98]
push ebx
push 1
call fcn.00401610
mov dword [ebp - 4], 0xffffffff
add esp, 0xc
mov ecx, dword [ebp - 0x14]
cmp ecx, 7
jbe 0x42a415
mov edx, dword [ebp - 0x28]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42a401
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42a667
push ecx
push edx
call fcn.00452c7c
add esp, 8
jmp 0x42a415
mov edx, dword [ebp - 0x4c]
cmp edx, 2
jne 0x42a452
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
add esi, 0x64
mov dword [ebp - 0x9c], esi
cmp esi, 0x2710
jb 0x42a300
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00452933
mov esp, ebp
pop ebp
ret 8
cmp edx, 4
jne 0x42a55d
lea ecx, [ebp - 0x84]
call fcn.0041c030
mov esi, eax
mov dword [ebp - 4], 7
cmp dword [esi + 0x14], 0xf
jbe 0x42a477
mov esi, dword [esi]
mov ecx, dword [ebp - 0x94]
movaps xmm0, xmmword [0x487800]
mov eax, dword [0x496ff8]
movups xmmword [ebp - 0x24], xmm0
mov word [ebp - 0x14], 0xef68
cmp eax, dword [ecx + 4]
jle 0x42a503
push 0x496ff8
call fcn.00452992
add esp, 4
cmp dword [0x496ff8], 0xffffffff
jne 0x42a503
xorps xmm0, xmm0
mov byte [0x4992e6], 1
movlpd qword [ebp - 0xb0], xmm0
mov edx, dword [ebp - 0xac]
mov ecx, dword [ebp - 0xb0]
nop
mov al, byte [ebp + ecx - 0x24]
mov byte [ecx + 0x4992d4], al
add ecx, 1
adc edx, 0
test edx, edx
jne 0x42a4e9
cmp ecx, 0x12
jb 0x42a4d0
push 0x47b710
call fcn.00452c62
add esp, 4
push 0x496ff8
call fcn.00452941
add esp, 4
mov ecx, 0x4992d4
call fcn.0040bf10
push esi
push 0x4992d4
push 3
call fcn.00401610
mov ecx, dword [ebp - 0x70]
add esp, 0xc
cmp ecx, 0xf
jbe 0x42a432
mov edx, dword [ebp - 0x84]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42a54e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42a66c
push ecx
push edx
call fcn.00452c7c
add esp, 8
jmp 0x42a432
lea ecx, [ebp - 0x44]
call fcn.0041c030
mov esi, eax
mov dword [ebp - 4], 8
cmp dword [esi + 0x14], 0xf
jbe 0x42a576
mov esi, dword [esi]
mov ecx, dword [ebp - 0x94]
movaps xmm0, xmmword [0x488830]
mov eax, dword [0x49711c]
movups xmmword [ebp - 0x84], xmm0
mov dword [ebp - 0x74], 0x5f488e6f
mov dword [ebp - 0x70], 0x27909ff8
mov word [ebp - 0x6c], 0xef68
cmp eax, dword [ecx + 4]
jle 0x42a616
push 0x49711c
call fcn.00452992
add esp, 4
cmp dword [0x49711c], 0xffffffff
jne 0x42a616
xorps xmm0, xmm0
mov byte [0x4995ce], 1
movlpd qword [ebp - 0xb0], xmm0
mov edx, dword [ebp - 0xac]
mov ecx, dword [ebp - 0xb0]
nop
mov al, byte [ebp + ecx - 0x84]
mov byte [ecx + 0x4995b4], al
add ecx, 1
adc edx, 0
test edx, edx
jne 0x42a5fc
cmp ecx, 0x1a
jb 0x42a5e0
push 0x47b6e0
call fcn.00452c62
add esp, 4
push 0x49711c
call fcn.00452941
add esp, 4
mov ecx, 0x4995b4
call fcn.0040a590
push esi
push 0x4995b4
push 1
call fcn.00401610
mov ecx, dword [ebp - 0x30]
add esp, 0xc
cmp ecx, 0xf
jbe 0x42a660
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42a656
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42a66c
push ecx
push edx
call fcn.00452c7c
add esp, 8
xor al, al
jmp 0x42a434
call fcn.004579bf
call fcn.004579bf
int3