Function at 0x4087d0
Capabilities:
Check http status code
Parse pe header

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4a04da
push eax
mov al, byte [esp + 0x10]
mov dword fs:[0], esp
sub esp, 8
test al, al
push ebx
push ebp
push esi
push edi
mov ebp, ecx
je 0x408862
lea esi, [ebp + 0x6004]
mov ecx, esi
call fcn.00401fc0
mov ecx, dword [ebp + 0x36144]
mov eax, dword [ebp + 0x4dd34]
test ecx, ecx
je 0x40881f
push eax
push 0
push 0
push 0
call fcn.00489220
mov ecx, ebp
call fcn.00451420
mov ecx, dword [ebp + 0x4dd34]
xor edx, edx
mov eax, ecx
mov edi, 0x320
div edi
push ecx
cmp edx, 0x190
jae 0x408844
push 1
jmp 0x408846
push 2
mov ecx, dword [ebp + 0x36144]
push 0x1be
push 0x10b
call fcn.00488ff0
mov ecx, esi
call fcn.004018b0
movsx eax, byte [ebp + 0x4ebff]
cmp eax, 0x64
ja case.0x40887a.26
xor ecx, ecx
mov cl, byte [eax + 0x40cbb0]
jmp dword [ecx*4 + 0x40cb44]
mov ebx, dword [sym.imp.kernel32.dll_CreateFileA]
push 0
push 0
push 3
push 0
push 0
push connect
push 0x4a6f88
call ebx
mov esi, dword [sym.imp.kernel32.dll_HeapAlloc]
mov edi, dword [sym.imp.kernel32.dll_GetProcessHeap]
cmp eax, 0xffffffff
mov dword [ebp + 0x4ef10], eax
je 0x40894f
push 0x54
push 8
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0
je 0x4088f1
mov ecx, dword [ebp + 0x4ef10]
push 0
push 0
lea edx, [ebp + 0x6004]
push 0x4a6f7c
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x4088f3
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x36078], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 1
je 0x408932
mov ecx, dword [ebp + 0x4ef10]
push 0
push 1
lea edx, [ebp + 0x6004]
push 0x4a6f7c
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x408934
xor eax, eax
mov dword [ebp + 0x360d0], eax
mov edx, dword [ebp + 0x4ef10]
push edx
mov dword [esp + 0x24], 0xffffffff
call dword [sym.imp.kernel32.dll_CloseHandle]
push 0
push 0
push 3
push 0
push 0
push connect
push 0x4a644c
call ebx
cmp eax, 0xffffffff
mov dword [ebp + 0x4ef10], eax
je 0x408a0b
push 0x54
push 8
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 2
je 0x4089ad
mov edx, dword [ebp + 0x4ef10]
push 0
push 1
lea ecx, [ebp + 0x6004]
push 0x4a6440
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x4089af
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x360e8], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 3
je 0x4089ee
mov edx, dword [ebp + 0x4ef10]
push 0
push 2
lea ecx, [ebp + 0x6004]
push 0x4a6440
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x4089f0
xor eax, eax
mov dword [ebp + 0x360ec], eax
mov eax, dword [ebp + 0x4ef10]
push eax
mov dword [esp + 0x24], 0xffffffff
call dword [sym.imp.kernel32.dll_CloseHandle]
push 0
push 0
push 3
push 0
push 0
push connect
push 0x4a6f64
call ebx
cmp eax, 0xffffffff
mov dword [ebp + 0x4ef10], eax
je 0x408ac7
push 0x54
push 8
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 4
je 0x408a69
mov edx, dword [ebp + 0x4ef10]
push 0
push 0
lea ecx, [ebp + 0x6004]
push 0x4a6f58
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x408a6b
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x360f0], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 5
je 0x408aaa
mov edx, dword [ebp + 0x4ef10]
push 0
push 1
lea ecx, [ebp + 0x6004]
push 0x4a6f58
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x408aac
xor eax, eax
mov dword [ebp + 0x360f4], eax
mov eax, dword [ebp + 0x4ef10]
push eax
mov dword [esp + 0x24], 0xffffffff
call dword [sym.imp.kernel32.dll_CloseHandle]
push 0
push 0
push 3
push 0
push 0
push connect
push 0x4a6f44
call ebx
cmp eax, 0xffffffff
mov dword [ebp + 0x4ef10], eax
je 0x408c46
push 0x54
push 8
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 6
je 0x408b25
mov edx, dword [ebp + 0x4ef10]
push 0
push 0
lea ecx, [ebp + 0x6004]
push 0x4a6f3c
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x408b27
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x36104], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 7
je 0x408b66
mov edx, dword [ebp + 0x4ef10]
push 0
push 1
lea ecx, [ebp + 0x6004]
push 0x4a6f3c
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x408b68
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x36108], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 8
je 0x408ba7
mov edx, dword [ebp + 0x4ef10]
push 0
push 2
lea ecx, [ebp + 0x6004]
push 0x4a6f3c
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x408ba9
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x3610c], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 9
je 0x408be8
mov edx, dword [ebp + 0x4ef10]
push 0
push 3
lea ecx, [ebp + 0x6004]
push 0x4a6f3c
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x408bea
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x36110], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0xa
je 0x408c29
mov edx, dword [ebp + 0x4ef10]
push 0
push 4
lea ecx, [ebp + 0x6004]
push 0x4a6f3c
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x408c2b
xor eax, eax
mov dword [ebp + 0x36114], eax
mov eax, dword [ebp + 0x4ef10]
push eax
mov dword [esp + 0x24], 0xffffffff
call dword [sym.imp.kernel32.dll_CloseHandle]
push 0
push 0
push 3
push 0
push 0
push connect
push 0x4a6f24
call ebx
cmp eax, 0xffffffff
mov dword [ebp + 0x4ef10], eax
je 0x408cbd
push 0x54
push 8
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0xb
je 0x408ca0
mov edx, dword [ebp + 0x4ef10]
push 0
push 0
lea ecx, [ebp + 0x6004]
push 0x4a6f18
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x408ca2
xor eax, eax
mov dword [ebp + 0x3614c], eax
mov eax, dword [ebp + 0x4ef10]
push eax
mov dword [esp + 0x24], 0xffffffff
call dword [sym.imp.kernel32.dll_CloseHandle]
push 0
push 0
push 3
push 0
push 0
push connect
push 0x4a6470
call ebx
cmp eax, 0xffffffff
mov dword [ebp + 0x4ef10], eax
je 0x408d79
push 0x54
push 8
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0xc
je 0x408d1b
mov edx, dword [ebp + 0x4ef10]
push 0
push 1
lea ecx, [ebp + 0x6004]
push 0x4a6464
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x408d1d
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x36148], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0xd
je 0x408d5c
mov edx, dword [ebp + 0x4ef10]
push 0
push 2
lea ecx, [ebp + 0x6004]
push 0x4a6464
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x408d5e
xor eax, eax
mov dword [ebp + 0x36154], eax
mov eax, dword [ebp + 0x4ef10]
push eax
mov dword [esp + 0x24], 0xffffffff
call dword [sym.imp.kernel32.dll_CloseHandle]
push 0
push 0
push 3
push 0
push 0
push connect
push 0x4a6f00
call ebx
cmp eax, 0xffffffff
mov dword [ebp + 0x4ef10], eax
je 0x408ffc
push 0x54
push 8
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0xe
je 0x408dd7
mov edx, dword [ebp + 0x4ef10]
push 0
push 0
lea ecx, [ebp + 0x6004]
push 0x4a6ef4
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x408dd9
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x36168], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0xf
je 0x408e18
mov edx, dword [ebp + 0x4ef10]
push 0
push 1
lea ecx, [ebp + 0x6004]
push 0x4a6ef4
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x408e1a
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x3616c], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x10
je 0x408e59
mov edx, dword [ebp + 0x4ef10]
push 0
push 2
lea ecx, [ebp + 0x6004]
push 0x4a6ef4
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x408e5b
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x36170], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x11
je 0x408e9a
mov edx, dword [ebp + 0x4ef10]
push 0
push 3
lea ecx, [ebp + 0x6004]
push 0x4a6ef4
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x408e9c
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x36174], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x12
je 0x408edb
mov edx, dword [ebp + 0x4ef10]
push 0
push 4
lea ecx, [ebp + 0x6004]
push 0x4a6ef4
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x408edd
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x36198], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x13
je 0x408f1c
mov edx, dword [ebp + 0x4ef10]
push 0
push 6
lea ecx, [ebp + 0x6004]
push 0x4a6ef4
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x408f1e
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x36178], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x14
je 0x408f5d
mov edx, dword [ebp + 0x4ef10]
push 0
push 7
lea ecx, [ebp + 0x6004]
push 0x4a6ef4
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x408f5f
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x36184], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x15
je 0x408f9e
mov edx, dword [ebp + 0x4ef10]
push 0
push 8
lea ecx, [ebp + 0x6004]
push 0x4a6ef4
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x408fa0
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x3615c], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x16
je 0x408fdf
mov edx, dword [ebp + 0x4ef10]
push 0
push 9
lea ecx, [ebp + 0x6004]
push 0x4a6ef4
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x408fe1
xor eax, eax
mov dword [ebp + 0x36160], eax
mov eax, dword [ebp + 0x4ef10]
push eax
mov dword [esp + 0x24], 0xffffffff
call dword [sym.imp.kernel32.dll_CloseHandle]
push 0
push 0
push 3
push 0
push 0
push connect
push 0x4a6edc
call ebx
cmp eax, 0xffffffff
mov dword [ebp + 0x4ef10], eax
je 0x4090b8
push 0x54
push 8
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x17
je 0x40905a
mov edx, dword [ebp + 0x4ef10]
push 0
push 0
lea ecx, [ebp + 0x6004]
push 0x4a6ed0
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40905c
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x36190], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x18
je 0x40909b
mov edx, dword [ebp + 0x4ef10]
push 0
push 1
lea ecx, [ebp + 0x6004]
push 0x4a6ed0
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40909d
xor eax, eax
mov dword [ebp + 0x36194], eax
mov eax, dword [ebp + 0x4ef10]
push eax
mov dword [esp + 0x24], 0xffffffff
call dword [sym.imp.kernel32.dll_CloseHandle]
push 0
push 0x1a
push 0x49
push 0x4a6ec4
mov ecx, ebp
call fcn.004084a0
push 0
push 1
push 0x32
push 0x4a6ebc
mov ecx, ebp
call fcn.004084a0
mov byte [ebp + 0x4ebff], 4
jmp case.0x40887a.26
push 1
push 0x20
push 0
push 0x4a6eb0
mov ecx, ebp
call fcn.004085b0
push 0
push 0
push 3
push 0
push 0
push connect
push 0x4a6e98
call dword [sym.imp.kernel32.dll_CreateFileA]
cmp eax, 0xffffffff
mov dword [ebp + 0x4ef10], eax
je 0x4091c6
mov esi, dword [sym.imp.kernel32.dll_GetProcessHeap]
push 0x54
push 8
call esi
mov edi, dword [sym.imp.kernel32.dll_HeapAlloc]
push eax
call edi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x19
je 0x409168
mov edx, dword [ebp + 0x4ef10]
push 1
push 1
lea ecx, [ebp + 0x6004]
push 0x4a6e8c
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40916a
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x499c4], eax
call esi
push eax
call edi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x1a
je 0x4091a9
mov edx, dword [ebp + 0x4ef10]
push 1
push 5
lea ecx, [ebp + 0x6004]
push 0x4a6e8c
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x4091ab
xor eax, eax
mov dword [ebp + 0x499d4], eax
mov eax, dword [ebp + 0x4ef10]
push eax
mov dword [esp + 0x24], 0xffffffff
call dword [sym.imp.kernel32.dll_CloseHandle]
push 0
push 0x1b
push 0x46
push 0x4a6e80
mov ecx, ebp
call fcn.004085b0
push 1
push 0x2e
push 0x64
push 0x4a6e78
mov ecx, ebp
call fcn.004085b0
push 1
push 0x2e
push 0x96
push 0x4a6e6c
mov ecx, ebp
call fcn.004085b0
push 1
push 8
push 0xc8
push 0x4a6e60
mov ecx, ebp
call fcn.004085b0
push 1
push 5
push 0xd3
push 0x4a6e54
mov ecx, ebp
call fcn.004085b0
push 1
push 4
push 0xd8
push 0x4a6e48
mov ecx, ebp
call fcn.004085b0
push 1
push 1
push 0xdc
push 0x4a6e3c
mov ecx, ebp
call fcn.004085b0
mov byte [ebp + 0x4ebff], 8
jmp case.0x40887a.26
push 1
push 3
push 0xdf
push 0x4a6e30
mov ecx, ebp
call fcn.004085b0
push 1
push 4
push 0xe2
push 0x4a6e24
mov ecx, ebp
call fcn.004085b0
push 1
push 0xf
push 0x12c
push 0x4a6e18
mov ecx, ebp
call fcn.004085b0
push 1
push 0xa
push 0x140
push 0x4a6e0c
mov ecx, ebp
call fcn.004085b0
push 1
push 0x13
push 0x14a
push 0x4a6e00
mov ecx, ebp
call fcn.004085b0
push 1
push 4
push 0x15d
push 0x4a6df4
mov ecx, ebp
call fcn.004085b0
push 1
push 9
push 0x161
push 0x4a6de4
mov ecx, ebp
call fcn.004085b0
push 1
push 4
push 0x16b
push 0x4a6dd8
mov ecx, ebp
call fcn.004085b0
push 1
push 0xc
push 0x172
push 0x4a6dcc
mov ecx, ebp
call fcn.004085b0
push 1
push 6
push 0x17e
push 0x4a6dc0
mov ecx, ebp
call fcn.004085b0
push 1
push 0xf
push 0x184
push 0x4a6db4
mov ecx, ebp
call fcn.004085b0
mov byte [ebp + 0x4ebff], 0xc
jmp case.0x40887a.26
push 1
push 3
push 0x193
push 0x4a6da8
mov ecx, ebp
call fcn.004085b0
push 1
push 0x10
push 0x196
push 0x4a6d9c
mov ecx, ebp
call fcn.004085b0
push 1
push 8
push 0x1a6
push 0x4a6d90
mov ecx, ebp
call fcn.004085b0
push 1
push 0xe
push 0x1ae
push 0x4a6d84
mov ecx, ebp
call fcn.004085b0
push 1
push 1
push 0x1bc
push 0x4a6d78
mov ecx, ebp
call fcn.004085b0
push 1
push 0x11
push 0x1bd
push 0x4a6d6c
mov ecx, ebp
call fcn.004085b0
push 0
push 0x11
push 0x12d
push 0x4a6d60
mov ecx, ebp
call fcn.004084a0
mov ebx, dword [sym.imp.kernel32.dll_CreateFileA]
push 0
push 0
push 3
push 0
push 0
push connect
push 0x4a6d48
call ebx
mov esi, dword [sym.imp.kernel32.dll_HeapAlloc]
mov edi, dword [sym.imp.kernel32.dll_GetProcessHeap]
cmp eax, 0xffffffff
mov dword [ebp + 0x4ef10], eax
je 0x4094b3
push 0x54
push 8
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x1b
je 0x409455
mov edx, dword [ebp + 0x4ef10]
push 0
push 0x11
lea ecx, [ebp + 0x6004]
push 0x4a6d60
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x409457
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x36578], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x1c
je 0x409496
mov edx, dword [ebp + 0x4ef10]
push 0
push 0x12
lea ecx, [ebp + 0x6004]
push 0x4a6d60
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x409498
xor eax, eax
mov dword [ebp + 0x3657c], eax
mov eax, dword [ebp + 0x4ef10]
push eax
mov dword [esp + 0x24], 0xffffffff
call dword [sym.imp.kernel32.dll_CloseHandle]
push 0
push 0x11
push 0x65
push 0x4a6d3c
mov ecx, ebp
call fcn.004084a0
push 0
push 0
push 3
push 0
push 0
push connect
push 0x4a6d24
call ebx
cmp eax, 0xffffffff
mov dword [ebp + 0x4ef10], eax
je 0x409581
push 0x54
push 8
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x1d
je 0x409523
mov edx, dword [ebp + 0x4ef10]
push 0
push 0x11
lea ecx, [ebp + 0x6004]
push 0x4a6d3c
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x409525
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x36258], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x1e
je 0x409564
mov edx, dword [ebp + 0x4ef10]
push 0
push 0x12
lea ecx, [ebp + 0x6004]
push 0x4a6d3c
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x409566
xor eax, eax
mov dword [ebp + 0x3625c], eax
mov eax, dword [ebp + 0x4ef10]
push eax
mov dword [esp + 0x24], 0xffffffff
call dword [sym.imp.kernel32.dll_CloseHandle]
push 0
push 2
push 0x190
push 0x4a6d14
mov ecx, ebp
call fcn.004084a0
mov byte [ebp + 0x4ebff], 0x10
jmp case.0x40887a.26
mov ebx, dword [sym.imp.kernel32.dll_CreateFileA]
push 0
push 0
push 3
push 0
push 0
push connect
push 0x4a6cfc
call ebx
mov esi, dword [sym.imp.kernel32.dll_HeapAlloc]
mov edi, dword [sym.imp.kernel32.dll_GetProcessHeap]
cmp eax, 0xffffffff
mov dword [ebp + 0x4ef10], eax
je 0x4099bd
push 0x54
push 8
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x1f
je 0x409612
mov edx, dword [ebp + 0x4ef10]
push 0
push 0
lea ecx, [ebp + 0x6004]
push 0x4a6cf0
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x409614
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x36398], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x20
je 0x409653
mov edx, dword [ebp + 0x4ef10]
push 0
push 1
lea ecx, [ebp + 0x6004]
push 0x4a6cf0
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x409655
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x3639c], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x21
je 0x409694
mov edx, dword [ebp + 0x4ef10]
push 0
push 2
lea ecx, [ebp + 0x6004]
push 0x4a6cf0
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x409696
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x363a0], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x22
je 0x4096d5
mov edx, dword [ebp + 0x4ef10]
push 0
push 3
lea ecx, [ebp + 0x6004]
push 0x4a6cf0
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x4096d7
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x363a4], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x23
je 0x409716
mov edx, dword [ebp + 0x4ef10]
push 0
push 4
lea ecx, [ebp + 0x6004]
push 0x4a6cf0
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x409718
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x363a8], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x24
je 0x409757
mov edx, dword [ebp + 0x4ef10]
push 0
push 5
lea ecx, [ebp + 0x6004]
push 0x4a6cf0
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x409759
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x363ac], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x25
je 0x409798
mov edx, dword [ebp + 0x4ef10]
push 0
push 6
lea ecx, [ebp + 0x6004]
push 0x4a6cf0
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40979a
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x363b4], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x26
je 0x4097d9
mov edx, dword [ebp + 0x4ef10]
push 0
push 7
lea ecx, [ebp + 0x6004]
push 0x4a6cf0
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x4097db
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x363b8], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x27
je 0x40981a
mov edx, dword [ebp + 0x4ef10]
push 0
push 8
lea ecx, [ebp + 0x6004]
push 0x4a6cf0
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40981c
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x363bc], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x28
je 0x40985b
mov edx, dword [ebp + 0x4ef10]
push 0
push 0xb
lea ecx, [ebp + 0x6004]
push 0x4a6cf0
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40985d
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x363d4], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x29
je 0x40989c
mov edx, dword [ebp + 0x4ef10]
push 0
push 0xc
lea ecx, [ebp + 0x6004]
push 0x4a6cf0
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40989e
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x363dc], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x2a
je 0x4098dd
mov edx, dword [ebp + 0x4ef10]
push 0
push 9
lea ecx, [ebp + 0x6004]
push 0x4a6cf0
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x4098df
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x363e0], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x2b
je 0x40991e
mov edx, dword [ebp + 0x4ef10]
push 0
push 0xa
lea ecx, [ebp + 0x6004]
push 0x4a6cf0
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x409920
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x363e4], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x2c
je 0x40995f
mov edx, dword [ebp + 0x4ef10]
push 0
push 0xd
lea ecx, [ebp + 0x6004]
push 0x4a6cf0
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x409961
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x363e8], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x2d
je 0x4099a0
mov edx, dword [ebp + 0x4ef10]
push 0
push 0xe
lea ecx, [ebp + 0x6004]
push 0x4a6cf0
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x4099a2
xor eax, eax
mov dword [ebp + 0x363ec], eax
mov eax, dword [ebp + 0x4ef10]
push eax
mov dword [esp + 0x24], 0xffffffff
call dword [sym.imp.kernel32.dll_CloseHandle]
push 0
push 0
push 3
push 0
push 0
push connect
push 0x4a6d48
call ebx
cmp eax, 0xffffffff
mov dword [ebp + 0x4ef10], eax
je 0x409a34
push 0x54
push 8
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x2e
je 0x409a17
mov edx, dword [ebp + 0x4ef10]
push 1
push 0xf
lea ecx, [ebp + 0x6004]
push 0x4a6d60
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x409a19
xor eax, eax
mov dword [ebp + 0x363d8], eax
mov eax, dword [ebp + 0x4ef10]
push eax
mov dword [esp + 0x24], 0xffffffff
call dword [sym.imp.kernel32.dll_CloseHandle]
push 0
push 0
push 3
push 0
push 0
push connect
push 0x4a6cd8
call ebx
cmp eax, 0xffffffff
mov dword [ebp + 0x4ef10], eax
je 0x409e3d
push 0x54
push 8
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x2f
je 0x409a92
mov edx, dword [ebp + 0x4ef10]
push 0
push 0
lea ecx, [ebp + 0x6004]
push 0x4a6ccc
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x409a94
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x36438], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x30
je 0x409ad3
mov edx, dword [ebp + 0x4ef10]
push 0
push 1
lea ecx, [ebp + 0x6004]
push 0x4a6ccc
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x409ad5
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x3643c], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x31
je 0x409b14
mov edx, dword [ebp + 0x4ef10]
push 0
push 2
lea ecx, [ebp + 0x6004]
push 0x4a6ccc
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x409b16
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x36440], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x32
je 0x409b55
mov edx, dword [ebp + 0x4ef10]
push 0
push 3
lea ecx, [ebp + 0x6004]
push 0x4a6ccc
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x409b57
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x36444], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x33
je 0x409b96
mov edx, dword [ebp + 0x4ef10]
push 0
push 4
lea ecx, [ebp + 0x6004]
push 0x4a6ccc
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x409b98
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x3644c], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x34
je 0x409bd7
mov edx, dword [ebp + 0x4ef10]
push 0
push 5
lea ecx, [ebp + 0x6004]
push 0x4a6ccc
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x409bd9
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x36460], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x35
je 0x409c18
mov edx, dword [ebp + 0x4ef10]
push 0
push 6
lea ecx, [ebp + 0x6004]
push 0x4a6ccc
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x409c1a
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x36464], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x36
je 0x409c59
mov edx, dword [ebp + 0x4ef10]
push 0
push 7
lea ecx, [ebp + 0x6004]
push 0x4a6ccc
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x409c5b
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x36468], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x37
je 0x409c9a
mov edx, dword [ebp + 0x4ef10]
push 0
push 8
lea ecx, [ebp + 0x6004]
push 0x4a6ccc
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x409c9c
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x3646c], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x38
je 0x409cdb
mov edx, dword [ebp + 0x4ef10]
push 0
push 0xb
lea ecx, [ebp + 0x6004]
push 0x4a6ccc
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x409cdd
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x36474], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x39
je 0x409d1c
mov edx, dword [ebp + 0x4ef10]
push 0
push 0xc
lea ecx, [ebp + 0x6004]
push 0x4a6ccc
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x409d1e
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x3647c], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x3a
je 0x409d5d
mov edx, dword [ebp + 0x4ef10]
push 0
push 9
lea ecx, [ebp + 0x6004]
push 0x4a6ccc
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x409d5f
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x36480], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x3b
je 0x409d9e
mov edx, dword [ebp + 0x4ef10]
push 0
push 0xa
lea ecx, [ebp + 0x6004]
push 0x4a6ccc
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x409da0
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x36484], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x3c
je 0x409ddf
mov edx, dword [ebp + 0x4ef10]
push 0
push 0xd
lea ecx, [ebp + 0x6004]
push 0x4a6ccc
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x409de1
xor eax, eax
push 0x54
push 8
mov dword [ebp + 0x36488], eax
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x3d
je 0x409e20
mov edx, dword [ebp + 0x4ef10]
push 0
push 0xe
lea ecx, [ebp + 0x6004]
push 0x4a6ccc
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x409e22
xor eax, eax
mov dword [ebp + 0x3648c], eax
mov eax, dword [ebp + 0x4ef10]
push eax
mov dword [esp + 0x24], 0xffffffff
call dword [sym.imp.kernel32.dll_CloseHandle]
push 0
push 0
push 3
push 0
push 0
push connect
push 0x4a6d48
call ebx
cmp eax, 0xffffffff
mov dword [ebp + 0x4ef10], eax
je 0x409eb4
push 0x54
push 8
call edi
push eax
call esi
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x3e
je 0x409e97
mov edx, dword [ebp + 0x4ef10]
push 1
push 0xf
lea ecx, [ebp + 0x6004]
push 0x4a6d60
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x409e99
xor eax, eax
mov dword [ebp + 0x36478], eax
mov eax, dword [ebp + 0x4ef10]
push eax
mov dword [esp + 0x24], 0xffffffff
call dword [sym.imp.kernel32.dll_CloseHandle]
push 1
push 0x60
push 0x1f4
push 0x4a6cc8
mov ecx, ebp
call fcn.004084a0
push 1
push 0x60
push 0x26c
push 0x4a6cc4
mov ecx, ebp
call fcn.004084a0
push 1
push 0x60
push 0x2e4
push 0x4a6cc0
mov ecx, ebp
call fcn.004084a0
mov byte [ebp + 0x4ebff], 0x14
jmp case.0x40887a.26
push 1
push 0x60
push 0x35c
push 0x4a6cbc
mov ecx, ebp
call fcn.004084a0
push 1
push 0x60
push 0x3d4
push 0x4a6cb8
mov ecx, ebp
call fcn.004084a0
push 1
push 0x60
push 0x44c
push 0x4a6cb4
mov ecx, ebp
call fcn.004084a0
mov byte [ebp + 0x4ebff], 0x18
jmp case.0x40887a.26
push 1
push 0x28
push 0x4c4
push 0x4a6cb0
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0x4fc
push 0x4a6cac
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0x534
push 0x4a6ca8
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0x56c
push 0x4a6ca4
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0x5a4
push 0x4a6ca0
mov ecx, ebp
call fcn.004084a0
push 1
push 8
push 0x5dc
push 0x4a6c98
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0x614
push 0x4a6c94
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0x64c
push 0x4a6c90
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0x684
push 0x4a6c8c
mov ecx, ebp
call fcn.004084a0
push 1
push 8
push 0x6bc
push 0x4a6c84
mov ecx, ebp
call fcn.004084a0
push 1
push 8
push 0x6f4
push 0x4a6c7c
mov ecx, ebp
call fcn.004084a0
mov byte [ebp + 0x4ebff], 0x1c
jmp case.0x40887a.26
push 1
push 0x28
push 0x72c
push 0x4a6c74
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0x764
push 0x4a6c70
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0x79c
push 0x4a6c6c
mov ecx, ebp
call fcn.004084a0
push 1
push 8
push 0x7d4
push 0x4a6c68
mov ecx, ebp
call fcn.004084a0
push 1
push 8
push 0x80c
push 0x4a6654
mov ecx, ebp
call fcn.004084a0
push 1
push 8
push 0x844
push 0x4a6c60
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0x87c
push 0x4a6c58
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0x8b4
push 0x4a6c50
mov ecx, ebp
call fcn.004084a0
mov byte [ebp + 0x4ebff], 0x20
jmp case.0x40887a.26
push 1
push 0x28
push 0x8ec
push 0x4a6c48
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0x924
push 0x4a6c40
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0x95c
push 0x4a6c38
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0x994
push 0x4a6c30
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0x9cc
push 0x4a6c24
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0xa04
push 0x4a6c1c
mov ecx, ebp
call fcn.004084a0
push 0
push 0
push 3
push 0
push 0
push connect
push 0x4a6c08
call dword [sym.imp.kernel32.dll_CreateFileA]
cmp eax, 0xffffffff
mov dword [ebp + 0x4ef10], eax
je 0x40a20e
mov edi, dword [sym.imp.kernel32.dll_HeapAlloc]
mov ebx, dword [sym.imp.kernel32.dll_GetProcessHeap]
lea esi, [ebp + 0x38968]
mov dword [esp + 0x28], 0x28
push 0x54
push 8
call ebx
push eax
call edi
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x20], 0x3f
je 0x40a1e7
mov edx, dword [ebp + 0x4ef10]
push 1
push 0
lea ecx, [ebp + 0x6004]
push 0x4a6bfc
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40a1e9
xor eax, eax
mov dword [esi], eax
mov eax, dword [esp + 0x28]
add esi, 4
dec eax
mov dword [esp + 0x20], 0xffffffff
mov dword [esp + 0x28], eax
jne 0x40a1ae
mov eax, dword [ebp + 0x4ef10]
push eax
call dword [sym.imp.kernel32.dll_CloseHandle]
mov byte [ebp + 0x4ebff], 0x24
jmp case.0x40887a.26
push 1
push 0x28
push 0xa74
push 0x4a6bf0
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0xaac
push 0x4a6be4
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0xae4
push 0x4a6bd4
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0xb1c
push 0x4a6bc8
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0xb54
push 0x4a6bc4
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0xb8c
push 0x4a6bc0
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0xbc4
push 0x4a6bb4
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0xbfc
push 0x4a6bb0
mov ecx, ebp
call fcn.004084a0
mov byte [ebp + 0x4ebff], 0x28
jmp case.0x40887a.26
push 1
push 0x28
push 0xc34
push 0x4a6bac
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0xc6c
push 0x4a6ba4
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0xca4
push 0x4a6ba0
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0xcdc
push 0x4a6b9c
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0xd14
push 0x4a6b94
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0xd4c
push 0x4a6b88
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0xd84
push 0x4a6b7c
mov ecx, ebp
call fcn.004084a0
mov byte [ebp + 0x4ebff], 0x2c
jmp case.0x40887a.26
push 1
push 0x28
push 0xdbc
push 0x4a6b70
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0xdf4
push 0x4a6b68
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0xe2c
push 0x4a6b5c
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0xe64
push 0x4a6b54
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0xe9c
push 0x4a6b4c
mov ecx, ebp
call fcn.004084a0
mov byte [ebp + 0x4ebff], 0x30
jmp case.0x40887a.26
push 1
push 0x28
push 0xed4
push 0x4a6b48
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0xf0c
push 0x4a6b3c
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0xf44
push 0x4a6b34
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0xf7c
push 0x4a6b2c
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0xfb4
push 0x4a6b20
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0xfec
push 0x4a6b18
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0x1024
push 0x4a6b0c
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0x105c
push 0x4a6b04
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0x1094
push 0x4a6afc
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0x10cc
push 0x4a6af0
mov ecx, ebp
call fcn.004084a0
push 1
push 0x28
push 0x1104
push 0x4a6ae8
mov ecx, ebp
call fcn.004084a0
push 1
push 0x10
push 0x113c
push 0x4a6adc
mov ecx, ebp
call fcn.004084a0
push 1
push 0x10
push 0x1174
push 0x4a6ad4
mov ecx, ebp
call fcn.004084a0
push 1
push 0x10
push 0x11ac
push 0x4a6acc
mov ecx, ebp
call fcn.004084a0
push 0
push 0
push 3
push 0
push 0
push connect
push 0x4a6abc
call dword [sym.imp.kernel32.dll_CreateFileA]
cmp eax, 0xffffffff
mov dword [ebp + 0x4ef10], eax
je 0x40a7f4
mov ebx, dword [sym.imp.kernel32.dll_HeapAlloc]
xor esi, esi
lea edi, [ebp + 0x3a808]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x40
je 0x40a57b
mov edx, dword [ebp + 0x4ef10]
push 1
push esi
lea ecx, [ebp + 0x6004]
push 0x4a6ab8
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40a57d
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0xc
jl 0x40a53f
xor esi, esi
lea edi, [ebp + 0x3a844]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x41
je 0x40a5cf
lea ecx, [esi + 0xc]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a6ab8
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40a5d1
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0xc
jl 0x40a590
xor esi, esi
lea edi, [ebp + 0x3a880]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x42
je 0x40a623
lea edx, [esi + 0x18]
push 1
push edx
mov edx, dword [ebp + 0x4ef10]
lea ecx, [ebp + 0x6004]
push 0x4a6ab8
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40a625
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0xc
jl 0x40a5e4
xor esi, esi
lea edi, [ebp + 0x3a8bc]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x43
je 0x40a677
lea ecx, [esi + 0x24]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a6ab8
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40a679
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0xc
jl 0x40a638
xor esi, esi
lea edi, [ebp + 0x3a8f8]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x44
je 0x40a6cb
lea edx, [esi + 0x30]
push 1
push edx
mov edx, dword [ebp + 0x4ef10]
lea ecx, [ebp + 0x6004]
push 0x4a6ab8
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40a6cd
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0xc
jl 0x40a68c
xor esi, esi
lea edi, [ebp + 0x3a934]
mov ebx, 0x45
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], ebx
je 0x40a724
lea ecx, [esi + 0x3c]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a6ab8
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40a726
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0xc
jl 0x40a6e5
mov ebx, dword [sym.imp.kernel32.dll_HeapAlloc]
xor esi, esi
lea edi, [ebp + 0x3a970]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x46
je 0x40a77e
lea edx, [esi + 0x48]
push 1
push edx
mov edx, dword [ebp + 0x4ef10]
lea ecx, [ebp + 0x6004]
push 0x4a6ab8
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40a780
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0xc
jl 0x40a73f
xor esi, esi
lea edi, [ebp + 0x3a9ac]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x47
je 0x40a7d2
lea ecx, [esi + 0x54]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a6ab8
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40a7d4
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0xc
mov dword [esp + 0x20], 0xffffffff
jl 0x40a793
mov edx, dword [ebp + 0x4ef10]
push edx
call dword [sym.imp.kernel32.dll_CloseHandle]
mov byte [ebp + 0x4ebff], 0x34
jmp case.0x40887a.26
push 0
push 0
push 3
push 0
push 0
push connect
push 0x4a6aa8
call dword [sym.imp.kernel32.dll_CreateFileA]
cmp eax, 0xffffffff
mov dword [ebp + 0x4ef10], eax
je 0x40aaf1
mov ebx, dword [sym.imp.kernel32.dll_HeapAlloc]
xor esi, esi
lea edi, [ebp + 0x3abc8]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x48
je 0x40a873
mov edx, dword [ebp + 0x4ef10]
push 1
push esi
lea ecx, [ebp + 0x6004]
push 0x4a6aa4
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40a875
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0xc
jl 0x40a837
xor esi, esi
lea edi, [ebp + 0x3ac04]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x49
je 0x40a8c7
lea ecx, [esi + 0xc]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a6aa4
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40a8c9
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0xc
jl 0x40a888
xor esi, esi
lea edi, [ebp + 0x3ac40]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x4a
je 0x40a91b
lea edx, [esi + 0x18]
push 1
push edx
mov edx, dword [ebp + 0x4ef10]
lea ecx, [ebp + 0x6004]
push 0x4a6aa4
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40a91d
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0xc
jl 0x40a8dc
xor esi, esi
lea edi, [ebp + 0x3ac7c]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x4b
je 0x40a96f
lea ecx, [esi + 0x24]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a6aa4
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40a971
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0xc
jl 0x40a930
xor esi, esi
lea edi, [ebp + 0x3acb8]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x4c
je 0x40a9c3
lea edx, [esi + 0x30]
push 1
push edx
mov edx, dword [ebp + 0x4ef10]
lea ecx, [ebp + 0x6004]
push 0x4a6aa4
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40a9c5
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0xc
jl 0x40a984
xor esi, esi
lea edi, [ebp + 0x3acf4]
mov ebx, 0x4d
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], ebx
je 0x40aa1c
lea ecx, [esi + 0x3c]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a6aa4
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40aa1e
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0xc
jl 0x40a9dd
xor esi, esi
lea edi, [ebp + 0x3ad30]
mov ebx, 0x4e
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], ebx
je 0x40aa75
lea edx, [esi + 0x48]
push 1
push edx
mov edx, dword [ebp + 0x4ef10]
lea ecx, [ebp + 0x6004]
push 0x4a6aa4
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40aa77
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0xc
jl 0x40aa36
mov ebx, dword [sym.imp.kernel32.dll_HeapAlloc]
xor esi, esi
lea edi, [ebp + 0x3ad6c]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x4f
je 0x40aacf
lea ecx, [esi + 0x54]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a6aa4
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40aad1
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0xc
mov dword [esp + 0x20], 0xffffffff
jl 0x40aa90
mov edx, dword [ebp + 0x4ef10]
push edx
call dword [sym.imp.kernel32.dll_CloseHandle]
push 1
push 0xc
push 0x13d3
push 0x4a6a9c
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x13e2
push 0x4a6a94
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x13f1
push 0x4a6a8c
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x1400
push 0x4a6a84
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x140f
push 0x4a6a7c
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x141e
push 0x4a6a74
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x142d
push 0x4a6a6c
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x14c3
push 0x4a6a64
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x14d2
push 0x4a6a58
mov ecx, ebp
call fcn.004084a0
mov byte [ebp + 0x4ebff], 0x38
jmp case.0x40887a.26
push 1
push 0xc
push 0x15b3
push 0x4a6a4c
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x15c2
push 0x4a6a40
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x15d1
push 0x4a6a38
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x15e0
push 0x4a6a2c
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x16a3
push 0x4a6a24
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x16b2
push 0x4a6a1c
mov ecx, ebp
call fcn.004084a0
push 0
push 0
push 3
push 0
push 0
push connect
push 0x4a6a0c
call dword [sym.imp.kernel32.dll_CreateFileA]
cmp eax, 0xffffffff
mov dword [ebp + 0x4ef10], eax
je 0x40b057
mov ebx, dword [sym.imp.kernel32.dll_HeapAlloc]
xor esi, esi
lea edi, [ebp + 0x3bf88]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x50
je 0x40acab
mov edx, dword [ebp + 0x4ef10]
push 1
push esi
lea ecx, [ebp + 0x6004]
push 0x4a6a08
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40acad
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0x38
jl 0x40ac6f
xor esi, esi
lea edi, [ebp + 0x3c088]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x51
je 0x40acff
lea ecx, [esi + 0x38]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a6a08
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40ad01
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0x38
jl 0x40acc0
xor esi, esi
lea edi, [ebp + 0x3c188]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x52
je 0x40ad53
lea edx, [esi + 0x70]
push 1
push edx
mov edx, dword [ebp + 0x4ef10]
lea ecx, [ebp + 0x6004]
push 0x4a6a08
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40ad55
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0x38
jl 0x40ad14
xor esi, esi
lea edi, [ebp + 0x3c288]
mov ebx, 0x53
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], ebx
je 0x40adaf
lea ecx, [esi + 0xa8]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a6a08
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40adb1
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0x38
jl 0x40ad6d
mov ebx, dword [sym.imp.kernel32.dll_HeapAlloc]
xor esi, esi
lea edi, [ebp + 0x3c488]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x54
je 0x40ae0c
lea edx, [esi + 0x118]
push 1
push edx
mov edx, dword [ebp + 0x4ef10]
lea ecx, [ebp + 0x6004]
push 0x4a6a08
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40ae0e
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0x38
jl 0x40adca
xor esi, esi
lea edi, [ebp + 0x3c588]
mov ebx, 0x55
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], ebx
je 0x40ae68
lea ecx, [esi + 0x150]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a6a08
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40ae6a
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0x38
jl 0x40ae26
xor esi, esi
lea edi, [ebp + 0x3c688]
mov ebx, 0x56
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], ebx
je 0x40aec4
lea edx, [esi + 0x188]
push 1
push edx
mov edx, dword [ebp + 0x4ef10]
lea ecx, [ebp + 0x6004]
push 0x4a6a08
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40aec6
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0x38
jl 0x40ae82
xor esi, esi
lea edi, [ebp + 0x3c788]
mov ebx, 0x57
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], ebx
je 0x40af20
lea ecx, [esi + 0x1c0]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a6a08
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40af22
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0x38
jl 0x40aede
xor esi, esi
lea edi, [ebp + 0x3c888]
mov ebx, 0x58
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], ebx
je 0x40af7c
lea edx, [esi + 0x1f8]
push 1
push edx
mov edx, dword [ebp + 0x4ef10]
lea ecx, [ebp + 0x6004]
push 0x4a6a08
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40af7e
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0x38
jl 0x40af3a
xor esi, esi
lea edi, [ebp + 0x3c988]
mov ebx, 0x59
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], ebx
je 0x40afd8
lea ecx, [esi + 0x230]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a6a08
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40afda
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0x38
jl 0x40af96
mov ebx, dword [sym.imp.kernel32.dll_HeapAlloc]
xor esi, esi
lea edi, [ebp + 0x3ca88]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x5a
je 0x40b035
lea edx, [esi + 0x268]
push 1
push edx
mov edx, dword [ebp + 0x4ef10]
lea ecx, [ebp + 0x6004]
push 0x4a6a08
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40b037
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0x38
mov dword [esp + 0x20], 0xffffffff
jl 0x40aff3
mov eax, dword [ebp + 0x4ef10]
push eax
call dword [sym.imp.kernel32.dll_CloseHandle]
mov byte [ebp + 0x4ebff], 0x3c
jmp case.0x40887a.26
push 1
push 0x38
push 0x18c4
push 0x4a6a00
mov ecx, ebp
call fcn.004084a0
push 1
push 0x38
push 0x1ac4
push 0x4a69f8
mov ecx, ebp
call fcn.004084a0
push 1
push 0x38
push 0x1c84
push 0x4a69f0
mov ecx, ebp
call fcn.004084a0
push 1
push 0x38
push 0x1cc4
push 0x4a69e8
mov ecx, ebp
call fcn.004084a0
mov byte [ebp + 0x4ebff], 0x40
jmp case.0x40887a.26
push 1
push 0x38
push 0x1d04
push 0x4a69e0
mov ecx, ebp
call fcn.004084a0
push 1
push 0x38
push 0x1d44
push 0x4a69d8
mov ecx, ebp
call fcn.004084a0
push 1
push 0x38
push 0x1d84
push 0x4a69d0
mov ecx, ebp
call fcn.004084a0
push 1
push 0x38
push 0x1dc4
push 0x4a69c4
mov ecx, ebp
call fcn.004084a0
push 1
push 0x38
push 0x1e04
push 0x4a69bc
mov ecx, ebp
call fcn.004084a0
push 1
push 0x38
push 0x1e44
push 0x4a69b4
mov ecx, ebp
call fcn.004084a0
mov byte [ebp + 0x4ebff], 0x44
jmp case.0x40887a.26
push 1
push 0x38
push 0x1f04
push 0x4a69ac
mov ecx, ebp
call fcn.004084a0
push 1
push 0x38
push 0x1f44
push 0x4a69a0
mov ecx, ebp
call fcn.004084a0
push 1
push 0x38
push 0x2044
push 0x4a6998
mov ecx, ebp
call fcn.004084a0
push 1
push 0x38
push 0x2084
push 0x4a6990
mov ecx, ebp
call fcn.004084a0
mov byte [ebp + 0x4ebff], 0x48
jmp case.0x40887a.26
push 1
push 0x38
push 0x2184
push 0x4a698c
mov ecx, ebp
call fcn.004084a0
mov ebx, dword [sym.imp.kernel32.dll_CreateFileA]
push 0
push 0
push 3
push 0
push 0
push connect
push 0x4a697c
call ebx
cmp eax, 0xffffffff
mov dword [ebp + 0x4ef10], eax
je 0x40b256
xor esi, esi
lea edi, [ebp + 0x3e788]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x5b
je 0x40b234
lea ecx, [esi + 0x38]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a698c
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40b236
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0x38
mov dword [esp + 0x20], 0xffffffff
jl 0x40b1f1
mov edx, dword [ebp + 0x4ef10]
push edx
call dword [sym.imp.kernel32.dll_CloseHandle]
push 0
push 0
push 3
push 0
push 0
push connect
push 0x4a696c
call ebx
cmp eax, 0xffffffff
mov dword [ebp + 0x4ef10], eax
je 0x40b597
mov ebx, dword [sym.imp.kernel32.dll_HeapAlloc]
xor esi, esi
lea edi, [ebp + 0x3eec8]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x5c
je 0x40b2c5
mov edx, dword [ebp + 0x4ef10]
push 1
push esi
lea ecx, [ebp + 0x6004]
push 0x4a6968
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40b2c7
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 7
jl 0x40b289
xor esi, esi
lea edi, [ebp + 0x3eee8]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x5d
je 0x40b319
lea ecx, [esi + 7]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a6968
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40b31b
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 7
jl 0x40b2da
xor esi, esi
lea edi, [ebp + 0x3ef08]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x5e
je 0x40b36d
lea edx, [esi + 0xe]
push 1
push edx
mov edx, dword [ebp + 0x4ef10]
lea ecx, [ebp + 0x6004]
push 0x4a6968
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40b36f
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 7
jl 0x40b32e
xor esi, esi
lea edi, [ebp + 0x3ef28]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x5f
je 0x40b3c1
lea ecx, [esi + 0x15]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a6968
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40b3c3
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 7
jl 0x40b382
xor esi, esi
lea edi, [ebp + 0x3ef48]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x60
je 0x40b415
lea edx, [esi + 0x1c]
push 1
push edx
mov edx, dword [ebp + 0x4ef10]
lea ecx, [ebp + 0x6004]
push 0x4a6968
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40b417
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 7
jl 0x40b3d6
xor esi, esi
lea edi, [ebp + 0x3ef68]
mov ebx, 0x61
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], ebx
je 0x40b46e
lea ecx, [esi + 0x23]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a6968
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40b470
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 7
jl 0x40b42f
xor esi, esi
lea edi, [ebp + 0x3ef88]
mov ebx, 0x62
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], ebx
je 0x40b4c7
lea edx, [esi + 0x2a]
push 1
push edx
mov edx, dword [ebp + 0x4ef10]
lea ecx, [ebp + 0x6004]
push 0x4a6968
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40b4c9
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 7
jl 0x40b488
mov ebx, dword [sym.imp.kernel32.dll_HeapAlloc]
xor esi, esi
lea edi, [ebp + 0x3efa8]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x63
je 0x40b521
lea ecx, [esi + 0x31]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a6968
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40b523
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 7
jl 0x40b4e2
xor esi, esi
lea edi, [ebp + 0x3efc8]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x64
je 0x40b575
lea edx, [esi + 0x38]
push 1
push edx
mov edx, dword [ebp + 0x4ef10]
lea ecx, [ebp + 0x6004]
push 0x4a6968
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40b577
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 7
mov dword [esp + 0x20], 0xffffffff
jl 0x40b536
mov eax, dword [ebp + 0x4ef10]
push eax
call dword [sym.imp.kernel32.dll_CloseHandle]
mov byte [ebp + 0x4ebff], 0x4c
jmp case.0x40887a.26
push 1
push 0xc
push 0x241d
push 0x4a695c
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x242c
push 0x4a6950
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x243b
push 0x4a6944
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x2463
push 0x4a693c
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x2472
push 0x4a6934
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x2481
push 0x4a692c
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x2490
push 0x4a6924
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x249f
push 0x4a691c
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x24ae
push 0x4a6914
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x24bd
push 0x4a690c
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x24cc
push 0x4a6904
mov ecx, ebp
call fcn.004084a0
push 0
push 0
push 3
push 0
push 0
push connect
push 0x4a68f4
call dword [sym.imp.kernel32.dll_CreateFileA]
mov ebx, dword [sym.imp.kernel32.dll_HeapAlloc]
cmp eax, 0xffffffff
mov dword [ebp + 0x4ef10], eax
je 0x40b985
xor esi, esi
lea edi, [ebp + 0x44448]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x65
je 0x40b6fd
mov edx, dword [ebp + 0x4ef10]
push 1
push esi
lea ecx, [ebp + 0x6004]
push 0x4a68f0
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40b6ff
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0xc
jl 0x40b6c1
xor esi, esi
lea edi, [ebp + 0x44484]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x66
je 0x40b751
lea ecx, [esi + 0xc]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a68f0
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40b753
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0xc
jl 0x40b712
xor esi, esi
lea edi, [ebp + 0x444c0]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x67
je 0x40b7a5
lea edx, [esi + 0x18]
push 1
push edx
mov edx, dword [ebp + 0x4ef10]
lea ecx, [ebp + 0x6004]
push 0x4a68f0
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40b7a7
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0xc
jl 0x40b766
xor esi, esi
lea edi, [ebp + 0x444fc]
mov ebx, 0x68
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], ebx
je 0x40b7fe
lea ecx, [esi + 0x24]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a68f0
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40b800
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0xc
jl 0x40b7bf
xor esi, esi
lea edi, [ebp + 0x44538]
mov ebx, 0x69
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], ebx
je 0x40b857
lea edx, [esi + 0x30]
push 1
push edx
mov edx, dword [ebp + 0x4ef10]
lea ecx, [ebp + 0x6004]
push 0x4a68f0
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40b859
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0xc
jl 0x40b818
xor esi, esi
lea edi, [ebp + 0x44574]
mov ebx, 0x6a
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], ebx
je 0x40b8b0
lea ecx, [esi + 0x3c]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a68f0
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40b8b2
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0xc
jl 0x40b871
xor esi, esi
lea edi, [ebp + 0x445b0]
mov ebx, 0x6b
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], ebx
je 0x40b909
lea edx, [esi + 0x48]
push 1
push edx
mov edx, dword [ebp + 0x4ef10]
lea ecx, [ebp + 0x6004]
push 0x4a68f0
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40b90b
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0xc
jl 0x40b8ca
mov ebx, dword [sym.imp.kernel32.dll_HeapAlloc]
xor esi, esi
lea edi, [ebp + 0x445ec]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x6c
je 0x40b963
lea ecx, [esi + 0x54]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a68f0
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40b965
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0xc
mov dword [esp + 0x20], 0xffffffff
jl 0x40b924
mov edx, dword [ebp + 0x4ef10]
push edx
call dword [sym.imp.kernel32.dll_CloseHandle]
push 0
push 0
push 3
push 0
push 0
push connect
push 0x4a68e0
call dword [sym.imp.kernel32.dll_CreateFileA]
cmp eax, 0xffffffff
mov dword [ebp + 0x4ef10], eax
je 0x40bc89
xor esi, esi
lea edi, [ebp + 0x44808]
mov ebx, 0x6d
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], ebx
je 0x40b9f7
mov edx, dword [ebp + 0x4ef10]
push 1
push esi
lea ecx, [ebp + 0x6004]
push 0x4a68dc
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40b9f9
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0xc
jl 0x40b9bb
xor esi, esi
lea edi, [ebp + 0x44844]
mov ebx, 0x6e
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], ebx
je 0x40ba50
lea ecx, [esi + 0xc]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a68dc
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40ba52
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0xc
jl 0x40ba11
xor esi, esi
lea edi, [ebp + 0x44880]
mov ebx, 0x6f
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], ebx
je 0x40baa9
lea edx, [esi + 0x18]
push 1
push edx
mov edx, dword [ebp + 0x4ef10]
lea ecx, [ebp + 0x6004]
push 0x4a68dc
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40baab
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0xc
jl 0x40ba6a
xor esi, esi
lea edi, [ebp + 0x448bc]
mov ebx, 0x70
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], ebx
je 0x40bb02
lea ecx, [esi + 0x24]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a68dc
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40bb04
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0xc
jl 0x40bac3
xor esi, esi
lea edi, [ebp + 0x448f8]
mov ebx, 0x71
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], ebx
je 0x40bb5b
lea edx, [esi + 0x30]
push 1
push edx
mov edx, dword [ebp + 0x4ef10]
lea ecx, [ebp + 0x6004]
push 0x4a68dc
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40bb5d
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0xc
jl 0x40bb1c
xor esi, esi
lea edi, [ebp + 0x44934]
mov ebx, 0x72
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], ebx
je 0x40bbb4
lea ecx, [esi + 0x3c]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a68dc
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40bbb6
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0xc
jl 0x40bb75
xor esi, esi
lea edi, [ebp + 0x44970]
mov ebx, 0x73
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], ebx
je 0x40bc0d
lea edx, [esi + 0x48]
push 1
push edx
mov edx, dword [ebp + 0x4ef10]
lea ecx, [ebp + 0x6004]
push 0x4a68dc
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40bc0f
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0xc
jl 0x40bbce
mov ebx, dword [sym.imp.kernel32.dll_HeapAlloc]
xor esi, esi
lea edi, [ebp + 0x449ac]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x74
je 0x40bc67
lea ecx, [esi + 0x54]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a68dc
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40bc69
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0xc
mov dword [esp + 0x20], 0xffffffff
jl 0x40bc28
mov edx, dword [ebp + 0x4ef10]
push edx
call dword [sym.imp.kernel32.dll_CloseHandle]
mov byte [ebp + 0x4ebff], 0x50
jmp case.0x40887a.26
push 1
push 0xc
push 0x3ae3
push 0x4a68d0
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x3af2
push 0x4a68c4
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x3b01
push 0x4a68bc
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x3b10
push 0x4a68b4
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x3b1f
push 0x4a68ac
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x3b2e
push 0x4a68a4
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x3b3d
push 0x4a689c
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x3b4c
push 0x4a6894
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x3bd3
push 0x4a6888
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x3be2
push 0x4a6880
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x3bf1
push 0x4a6874
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x3cc3
push 0x4a686c
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x3cd2
push 0x4a6860
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x3ce1
push 0x4a6854
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x3cf0
push 0x4a684c
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x3cff
push 0x4a6840
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x3db3
push 0x4a6838
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x3dc2
push 0x4a6830
mov ecx, ebp
call fcn.004084a0
mov byte [ebp + 0x4ebff], 0x54
jmp case.0x40887a.26
push 0
push 0
push 3
push 0
push 0
push connect
push 0x4a6820
call dword [sym.imp.kernel32.dll_CreateFileA]
cmp eax, 0xffffffff
mov dword [ebp + 0x4ef10], eax
je 0x40c22f
mov ebx, dword [sym.imp.kernel32.dll_HeapAlloc]
xor esi, esi
lea edi, [ebp + 0x45bc8]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x75
je 0x40be8e
mov edx, dword [ebp + 0x4ef10]
push 1
push esi
lea ecx, [ebp + 0x6004]
push 0x4a681c
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40be90
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0x38
jl 0x40be52
xor esi, esi
lea edi, [ebp + 0x45cc8]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x76
je 0x40bee2
lea ecx, [esi + 0x38]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a681c
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40bee4
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0x38
jl 0x40bea3
xor esi, esi
lea edi, [ebp + 0x45dc8]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x77
je 0x40bf36
lea edx, [esi + 0x70]
push 1
push edx
mov edx, dword [ebp + 0x4ef10]
lea ecx, [ebp + 0x6004]
push 0x4a681c
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40bf38
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0x38
jl 0x40bef7
xor esi, esi
lea edi, [ebp + 0x45ec8]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x78
je 0x40bf8d
lea ecx, [esi + 0xa8]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a681c
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40bf8f
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0x38
jl 0x40bf4b
xor esi, esi
lea edi, [ebp + 0x460c8]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x79
je 0x40bfe4
lea edx, [esi + 0x118]
push 1
push edx
mov edx, dword [ebp + 0x4ef10]
lea ecx, [ebp + 0x6004]
push 0x4a681c
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40bfe6
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0x38
jl 0x40bfa2
xor esi, esi
lea edi, [ebp + 0x461c8]
mov ebx, 0x7a
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], ebx
je 0x40c040
lea ecx, [esi + 0x150]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a681c
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40c042
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0x38
jl 0x40bffe
xor esi, esi
lea edi, [ebp + 0x462c8]
mov ebx, 0x7b
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], ebx
je 0x40c09c
lea edx, [esi + 0x188]
push 1
push edx
mov edx, dword [ebp + 0x4ef10]
lea ecx, [ebp + 0x6004]
push 0x4a681c
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40c09e
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0x38
jl 0x40c05a
xor esi, esi
lea edi, [ebp + 0x463c8]
mov ebx, 0x7c
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], ebx
je 0x40c0f8
lea ecx, [esi + 0x1c0]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a681c
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40c0fa
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0x38
jl 0x40c0b6
xor esi, esi
lea edi, [ebp + 0x464c8]
mov ebx, 0x7d
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], ebx
je 0x40c154
lea edx, [esi + 0x1f8]
push 1
push edx
mov edx, dword [ebp + 0x4ef10]
lea ecx, [ebp + 0x6004]
push 0x4a681c
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40c156
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0x38
jl 0x40c112
xor esi, esi
lea edi, [ebp + 0x465c8]
mov ebx, 0x7e
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], ebx
je 0x40c1b0
lea ecx, [esi + 0x230]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a681c
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40c1b2
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0x38
jl 0x40c16e
mov ebx, dword [sym.imp.kernel32.dll_HeapAlloc]
xor esi, esi
lea edi, [ebp + 0x466c8]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x7f
je 0x40c20d
lea edx, [esi + 0x268]
push 1
push edx
mov edx, dword [ebp + 0x4ef10]
lea ecx, [ebp + 0x6004]
push 0x4a681c
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40c20f
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0x38
mov dword [esp + 0x20], 0xffffffff
jl 0x40c1cb
mov eax, dword [ebp + 0x4ef10]
push eax
call dword [sym.imp.kernel32.dll_CloseHandle]
push 1
push 0x38
push 0x3fd4
push 0x4a6814
mov ecx, ebp
call fcn.004084a0
push 1
push 0x38
push 0x41d4
push 0x4a680c
mov ecx, ebp
call fcn.004084a0
mov byte [ebp + 0x4ebff], 0x58
jmp case.0x40887a.26
push 1
push 0xc
push 0x4b2d
push 0x4a6800
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x4b3c
push 0x4a67f4
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x4b4b
push 0x4a67e8
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x4b73
push 0x4a67e0
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x4ba0
push 0x4a67d8
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x4baf
push 0x4a67d0
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x4bbe
push 0x4a67c8
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x4bcd
push 0x4a67c0
mov ecx, ebp
call fcn.004084a0
push 1
push 0xc
push 0x4bdc
push 0x4a67b8
mov ecx, ebp
call fcn.004084a0
push 1
push 0x38
push 0x4394
push 0x4a67b0
mov ecx, ebp
call fcn.004084a0
push 1
push 0x38
push 0x43d4
push 0x4a67a8
mov ecx, ebp
call fcn.004084a0
push 1
push 0x38
push 0x4414
push 0x4a67a0
mov ecx, ebp
call fcn.004084a0
mov byte [ebp + 0x4ebff], 0x5c
jmp case.0x40887a.26
push 1
push 0x38
push 0x4454
push 0x4a6798
mov ecx, ebp
call fcn.004084a0
push 1
push 0x38
push 0x4494
push 0x4a6790
mov ecx, ebp
call fcn.004084a0
push 1
push 0x38
push 0x44d4
push 0x4a6784
mov ecx, ebp
call fcn.004084a0
push 1
push 0x38
push 0x4514
push 0x4a677c
mov ecx, ebp
call fcn.004084a0
push 1
push 0x38
push 0x4554
push 0x4a6774
mov ecx, ebp
call fcn.004084a0
push 1
push 0x38
push 0x4614
push 0x4a676c
mov ecx, ebp
call fcn.004084a0
push 1
push 0x38
push 0x4654
push 0x4a6760
mov ecx, ebp
call fcn.004084a0
mov byte [ebp + 0x4ebff], 0x60
jmp case.0x40887a.26
push 1
push 0x38
push 0x4754
push 0x4a6758
mov ecx, ebp
call fcn.004084a0
push 1
push 0x38
push 0x4794
push 0x4a6750
mov ecx, ebp
call fcn.004084a0
push 1
push 0x38
push 0x4894
push 0x4a674c
mov ecx, ebp
call fcn.004084a0
mov ebx, dword [sym.imp.kernel32.dll_CreateFileA]
push 0
push 0
push 3
push 0
push 0
push connect
push 0x4a673c
call ebx
cmp eax, 0xffffffff
mov dword [ebp + 0x4ef10], eax
je 0x40c4df
xor esi, esi
lea edi, [ebp + 0x483c8]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x80
je 0x40c4bd
lea ecx, [esi + 0x38]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a674c
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40c4bf
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 0x38
mov dword [esp + 0x20], 0xffffffff
jl 0x40c47a
mov edx, dword [ebp + 0x4ef10]
push edx
call dword [sym.imp.kernel32.dll_CloseHandle]
push 0
push 0
push 3
push 0
push 0
push connect
push 0x4a672c
call ebx
cmp eax, 0xffffffff
mov dword [ebp + 0x4ef10], eax
je 0x40c825
mov ebx, dword [sym.imp.kernel32.dll_HeapAlloc]
xor esi, esi
lea edi, [ebp + 0x48b08]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x81
je 0x40c54e
mov edx, dword [ebp + 0x4ef10]
push 1
push esi
lea ecx, [ebp + 0x6004]
push 0x4a6728
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40c550
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 7
jl 0x40c512
xor esi, esi
lea edi, [ebp + 0x48b28]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x82
je 0x40c5a2
lea ecx, [esi + 7]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a6728
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40c5a4
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 7
jl 0x40c563
xor esi, esi
lea edi, [ebp + 0x48b48]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x83
je 0x40c5f6
lea edx, [esi + 0xe]
push 1
push edx
mov edx, dword [ebp + 0x4ef10]
lea ecx, [ebp + 0x6004]
push 0x4a6728
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40c5f8
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 7
jl 0x40c5b7
xor esi, esi
lea edi, [ebp + 0x48b68]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x84
je 0x40c64a
lea ecx, [esi + 0x15]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a6728
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40c64c
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 7
jl 0x40c60b
xor esi, esi
lea edi, [ebp + 0x48b88]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x85
je 0x40c69e
lea edx, [esi + 0x1c]
push 1
push edx
mov edx, dword [ebp + 0x4ef10]
lea ecx, [ebp + 0x6004]
push 0x4a6728
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40c6a0
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 7
jl 0x40c65f
xor esi, esi
lea edi, [ebp + 0x48ba8]
mov ebx, 0x86
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], ebx
je 0x40c6f7
lea ecx, [esi + 0x23]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a6728
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40c6f9
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 7
jl 0x40c6b8
xor esi, esi
lea edi, [ebp + 0x48bc8]
mov ebx, 0x87
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], ebx
je 0x40c750
lea edx, [esi + 0x2a]
push 1
push edx
mov edx, dword [ebp + 0x4ef10]
lea ecx, [ebp + 0x6004]
push 0x4a6728
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40c752
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 7
jl 0x40c711
xor esi, esi
lea edi, [ebp + 0x48be8]
mov ebx, 0x88
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], ebx
je 0x40c7a9
lea ecx, [esi + 0x31]
push 1
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a6728
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40c7ab
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 7
jl 0x40c76a
mov ebx, dword [sym.imp.kernel32.dll_HeapAlloc]
xor esi, esi
lea edi, [ebp + 0x48c08]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x89
je 0x40c803
lea edx, [esi + 0x38]
push 1
push edx
mov edx, dword [ebp + 0x4ef10]
lea ecx, [ebp + 0x6004]
push 0x4a6728
push ecx
push edx
mov ecx, eax
call fcn.00488d30
jmp 0x40c805
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 7
mov dword [esp + 0x20], 0xffffffff
jl 0x40c7c4
mov eax, dword [ebp + 0x4ef10]
push eax
call dword [sym.imp.kernel32.dll_CloseHandle]
mov byte [ebp + 0x4ebff], 0x64
jmp case.0x40887a.26
push 0
push 0xa
push 0
push 0x4a6720
mov ecx, ebp
call fcn.004086c0
push 0
push 3
push 0xa
push 0x4a6718
mov ecx, ebp
call fcn.004086c0
push 0
push 6
push 0xd
push 0x4a6710
mov ecx, ebp
call fcn.004086c0
push 0
push 5
push 0x13
push 0x4a6708
mov ecx, ebp
call fcn.004086c0
push 0
push 0
push 3
push 0
push 0
push connect
push 0x4a66f4
call dword [sym.imp.kernel32.dll_CreateFileA]
cmp eax, 0xffffffff
mov dword [ebp + 0x4ef10], eax
je 0x40c90d
mov ebx, dword [sym.imp.kernel32.dll_HeapAlloc]
xor esi, esi
lea edi, [ebp + 0x4a128]
push 0x54
push 8
call dword [sym.imp.kernel32.dll_GetProcessHeap]
push eax
call ebx
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0x20], 0x8a
je 0x40c8eb
lea ecx, [esi + 1]
push 0
push ecx
mov ecx, dword [ebp + 0x4ef10]
lea edx, [ebp + 0x6004]
push 0x4a66ec
push edx
push ecx
mov ecx, eax
call fcn.00488d30
jmp 0x40c8ed
xor eax, eax
mov dword [edi], eax
inc esi
add edi, 4
cmp esi, 6
mov dword [esp + 0x20], 0xffffffff
jle 0x40c8ac
mov edx, dword [ebp + 0x4ef10]
push edx
call dword [sym.imp.kernel32.dll_CloseHandle]
push 0
push 9
push 0x1f
push 0x4a66e0
mov ecx, ebp
call fcn.004086c0
push 0
push 5
push 0x28
push 0x4a66d8
mov ecx, ebp
call fcn.004086c0
push 0
push 0xc
push 0x2d
push 0x4a66d0
mov ecx, ebp
call fcn.004086c0
push 0
push 9
push 0x39
push 0x4a66c8
mov ecx, ebp
call fcn.004086c0
push 0
push 0x15
push 0x42
push 0x4a66c0
mov ecx, ebp
call fcn.004086c0
mov eax, dword [ebp + 0x4ddb0]
test eax, eax
je 0x40cb13
mov esi, 1
lea eax, [ebp + 0x5adc]
mov dword [esp + 0x28], esi
lea ebx, [ebp + 0x4e763]
mov dword [esp + 0x10], eax
push esi
push 0x4a66b0
push ebx
call dword [sym.imp.user32.dll_wsprintfA]
push 0xa0
call fcn.00491cd3
add esp, 0x10
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x20], 0x8b
je 0x40c9e1
push 0
push ebx
sub esp, 0x60
lea esi, [ebp + 0x5a78]
mov ecx, 0x18
mov edi, esp
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp + 0x5a74]
push ecx
mov ecx, eax
call fcn.004904d0
mov esi, dword [esp + 0x28]
jmp 0x40c9e3
xor eax, eax
mov ecx, dword [esp + 0x10]
inc esi
mov dword [esp + 0x20], 0xffffffff
mov dword [esp + 0x28], esi
mov dword [ecx], eax
add ecx, 4
cmp esi, 0x18
mov dword [esp + 0x10], ecx
jle 0x40c98e
mov esi, 1
lea edx, [ebp + 0x5c94]
mov dword [esp + 0x28], esi
mov dword [esp + 0x10], edx
push esi
push 0x4a66a0
push ebx
call dword [sym.imp.user32.dll_wsprintfA]
push 0xa0
call fcn.00491cd3
add esp, 0x10
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x20], 0x8c
je 0x40ca68
push 0
push ebx
sub esp, 0x60
lea esi, [ebp + 0x5a78]
mov ecx, 0x18
mov edi, esp
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp + 0x5a74]
push ecx
mov ecx, eax
call fcn.004904d0
mov esi, dword [esp + 0x28]
jmp 0x40ca6a
xor eax, eax
mov ecx, dword [esp + 0x10]
inc esi
mov dword [esp + 0x20], 0xffffffff
mov dword [esp + 0x28], esi
mov dword [ecx], eax
add ecx, 4
cmp esi, 0x62
mov dword [esp + 0x10], ecx
jle 0x40ca15
lea edx, [ebp + 0x5e4c]
mov dword [esp + 0x28], 1
mov dword [esp + 0x10], edx
mov eax, dword [esp + 0x28]
push eax
push 0x4a6690
push ebx
call dword [sym.imp.user32.dll_wsprintfA]
push 0xa0
call fcn.00491cd3
add esp, 0x10
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x20], 0x8d
je 0x40caee
push 0
push ebx
sub esp, 0x60
lea esi, [ebp + 0x5a78]
mov ecx, 0x18
mov edi, esp
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp + 0x5a74]
push ecx
mov ecx, eax
call fcn.004904d0
jmp 0x40caf0
xor eax, eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x20], 0xffffffff
mov dword [ecx], eax
mov eax, dword [esp + 0x28]
inc eax
add ecx, 4
cmp eax, 0x2f
mov dword [esp + 0x28], eax
mov dword [esp + 0x10], ecx
jle 0x40ca9b
mov edx, dword [ebp + 0x4dd34]
mov byte [ebp + 0x4e830], 0
mov byte [ebp + 0x4e7e3], 0
mov dword [ebp + 0x4dd40], edx
mov ecx, dword [esp + 0x18]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x14
ret 4