Function at 0x401640
Capabilities:
Execute command

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x9c
push edi
push esi
push ebx
call fcn.0040b344
call fcn.0040fcc8
add esp, 0xfffffff4
mov ebx, dword [0x413010]
push ebx
call fcn.0040c6b0
add esp, 0x10
mov eax, eax
mov dword [ebp - 4], eax
add esp, 0xfffffff4
mov esi, dword [0x413010]
lea eax, [esi*4]
push eax
call fcn.0040c6b0
add esp, 0x10
mov eax, eax
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], 0
mov eax, dword [ebp - 0xc]
cmp eax, dword [0x413010]
jl 0x4016a0
jmp 0x4016b0
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0xc]
add eax, edx
mov byte [eax], 1
inc dword [ebp - 0xc]
jmp 0x401692
add esp, 0xfffffff8
push 0x403260
add esp, 0xfffffff8
push 0x4015f0
add esp, 0xfffffff8
push 0x403260
push 0x413034
call fcn.00411054
add esp, 0x10
mov eax, eax
push eax
call fcn.00402e28
add esp, 0x10
mov eax, eax
push eax
call fcn.00411054
add esp, 0x10
add esp, 0xfffffff4
mov edi, dword [0x413010]
lea eax, [edi*4]
push eax
call fcn.0040c6b0
add esp, 0x10
mov eax, eax
mov dword [ebp - 0x10], eax
mov eax, dword [section..bss]
mov dword [0x414008], eax
mov dword [ebp - 0x14], 0
lea esi, [esi]
mov eax, dword [ebp - 0x14]
cmp eax, dword [0x413010]
jl 0x401730
jmp 0x401770
mov edx, dword [ebp - 0x14]
lea eax, [edx*4]
mov edx, dword [ebp - 0x10]
mov ecx, dword [0x414008]
mov dword [ebp - 0x84], ecx
mov ecx, dword [ebp - 0x84]
mov ecx, dword [ecx]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x24]
mov dword [edx + eax], ecx
mov eax, dword [0x414008]
mov edx, dword [eax + 4]
mov dword [0x414008], edx
inc dword [ebp - 0x14]
jmp 0x401720
mov eax, dword [section..bss]
mov dword [0x414008], eax
lea esi, [esi]
cmp dword [0x414008], 0
jne 0x401790
jmp 0x4017b6
mov eax, dword [0x414008]
mov edx, dword [eax + 4]
mov dword [ebp - 0x18], edx
add esp, 0xfffffff4
mov eax, dword [0x414008]
push eax
call fcn.0040c810
add esp, 0x10
mov eax, dword [ebp - 0x18]
mov dword [0x414008], eax
jmp 0x401780
mov dword [ebp - 0x1c], 0
lea esi, [esi]
mov eax, dword [0x413010]
dec eax
cmp dword [ebp - 0x1c], eax
jl 0x4017d0
jmp 0x4019a0
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp eax, dword [0x413010]
jl 0x4017e7
jmp 0x401995
mov edx, dword [ebp - 0x1c]
lea eax, [edx*4]
mov edx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx*4]
mov dword [ebp - 0x84], ecx
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x2c], ecx
mov eax, dword [edx + eax]
mov edx, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x2c]
cmp eax, dword [ecx + edx]
jle 0x40198d
mov edx, dword [ebp - 0x1c]
lea eax, [edx*4]
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x88], edx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x30]
lea edx, [edx*4]
mov dword [ebp - 0x84], edx
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x38], edx
mov ecx, dword [ebp - 0x38]
lea ecx, [ecx*4]
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x40], edx
mov ecx, dword [ebp - 0x84]
mov edx, dword [ebp - 0x34]
mov ecx, dword [edx + ecx]
mov dword [ebp - 0x84], ecx
mov edx, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ecx + edx]
mov dword [ebp - 0x44], edx
mov edx, dword [ebp - 0x44]
add edx, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x88]
mov dword [ecx + eax], edx
mov edx, dword [ebp - 0x20]
lea eax, [edx*4]
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x88], ecx
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x48], edx
mov ecx, dword [ebp - 0x48]
lea ecx, [ecx*4]
mov dword [ebp - 0x84], ecx
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x4c], edx
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x50], ecx
mov edx, dword [ebp - 0x50]
lea edx, [edx*4]
mov dword [ebp - 0x54], edx
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x58], ecx
mov edx, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx + edx]
mov dword [ebp - 0x84], edx
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x58]
mov ecx, dword [edx + ecx]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x84]
sub ecx, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x88]
mov dword [edx + eax], ecx
mov edx, dword [ebp - 0x1c]
lea eax, [edx*4]
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x88], edx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x60], ecx
mov edx, dword [ebp - 0x60]
lea edx, [edx*4]
mov dword [ebp - 0x84], edx
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x64], ecx
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x68], edx
mov ecx, dword [ebp - 0x68]
lea ecx, [ecx*4]
mov dword [ebp - 0x6c], ecx
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x70], edx
mov ecx, dword [ebp - 0x84]
mov edx, dword [ebp - 0x64]
mov ecx, dword [edx + ecx]
mov dword [ebp - 0x84], ecx
mov edx, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x70]
mov edx, dword [ecx + edx]
mov dword [ebp - 0x74], edx
mov edx, dword [ebp - 0x84]
sub edx, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x88]
mov dword [ecx + eax], edx
inc dword [ebp - 0x20]
jmp 0x4017d7
inc dword [ebp - 0x1c]
jmp 0x4017c0
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
cmp eax, dword [0x413010]
jl 0x4019b4
jmp 0x4019f0
add esp, 0xfffffff8
push 0x403260
add esp, 0xfffffff8
mov eax, dword [ebp - 0x20]
lea edx, [eax*4]
mov eax, dword [ebp - 0x10]
mov edx, dword [eax + edx]
push edx
push 0x413034
call fcn.00402b68
add esp, 0x10
mov eax, eax
push eax
call fcn.00411054
add esp, 0x10
inc dword [ebp - 0x20]
jmp 0x4019a7
add esp, 0xfffffff8
push 0x403260
add esp, 0xfffffff8
push 0x40161b
add esp, 0xfffffff8
push 0x403260
push 0x413034
call fcn.00411054
add esp, 0x10
mov eax, eax
push eax
call fcn.00402e28
add esp, 0x10
mov eax, eax
push eax
call fcn.00411054
add esp, 0x10
add esp, 0xfffffff4
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov eax, dword [0x413010]
push eax
push 0
call fcn.0040fed4
add esp, 0x20
add esp, 0xfffffff4
mov eax, dword [ebp - 4]
push eax
call fcn.0040c810
add esp, 0x10
add esp, 0xfffffff4
mov eax, dword [ebp - 0x10]
push eax
call fcn.0040c810
add esp, 0x10
add esp, 0xfffffff4
mov eax, dword [ebp - 8]
push eax
call fcn.0040c810
add esp, 0x10
add esp, 0xfffffff4
push 0x401639
call sub.msvcrt.dll_system
add esp, 0x10
xor eax, eax
jmp 0x401a8f
lea esp, [ebp - 0xa8]
pop ebx
pop esi
pop edi
leave
ret