Function at 0x41027f
Capabilities:
Acquire debug privileges

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x54
mov dword [ebp - 4], 0
push 0x1008
call fcn.0041d6e2
add esp, 4
mov dword [ebp - 8], eax
mov edi, eax
mov esi, 0x4a69d7
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
mov ecx, 0x400
rep stosd dword es:[edi], eax
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
push 0x1c
call fcn.0041d6e2
add esp, 4
mov dword [ebp - 0x20], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 7
rep stosd dword es:[edi], eax
push 0x28
call fcn.0041d6e2
add esp, 4
mov dword [ebp - 0x24], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 0xa
rep stosd dword es:[edi], eax
mov dword [ebp - 0x28], 0
push 8
call fcn.0041d6e2
add esp, 4
mov dword [ebp - 0x2c], eax
mov edi, eax
mov esi, 0x4a61fc
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x410360
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x41035c
imul eax, dword [ebx]
jmp 0x410351
mov ecx, eax
test ecx, ecx
je 0x4103f4
push ecx
push ebx
mov ebx, dword [ebx]
push ebx
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x41037b
push ebx
call fcn.0041d6ee
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x41038f
push ebx
call fcn.0041d6ee
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x4103a3
push ebx
call fcn.0041d6ee
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x4103b7
push ebx
call fcn.0041d6ee
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x4103cb
push ebx
call fcn.0041d6ee
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x4103df
push ebx
call fcn.0041d6ee
add esp, 4
pop ebx
call fcn.0041d6ee
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x410366
call fcn.0041d6ee
add esp, 4
mov eax, 0x4a61fc
mov ebx, dword [ebp + 8]
mov dword [ebx], eax
call fcn.00411041
push 1
mov eax, str.SeDebugPrivilege
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
call fcn.00411106
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x410434
push ebx
call fcn.0041d6ee
add esp, 4
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 4], eax
mov dword [ebp - 0x38], esp
lea eax, [ebp - 0xc]
push eax
push 0x1000
mov ebx, dword [ebp - 8]
call fcn.00401217
push ebx
mov eax, 0xb
call fcn.0041d6fa
cmp dword [ebp - 0x38], esp
je 0x41046b
push 6
call fcn.0041d6f4
add esp, 4
fild dword [ebp - 0xc]
fstp qword [ebp - 0x3c]
fld qword [ebp - 0x3c]
fdiv qword [0x4a6956]
fstp qword [ebp - 0x44]
fld qword [ebp - 0x44]
call fcn.00405969
mov dword [ebp - 0x10], eax
push dword [ebp - 0x10]
lea eax, [ebp - 0x14]
mov ebx, eax
mov ecx, 1
pop edx
push edx
push ecx
push ebx
mov dword [ebx], ecx
cmp ecx, edx
jg 0x4109ff
mov ebx, dword [ebp - 8]
call fcn.00401217
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4104c0
push 4
call fcn.0041d6f4
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4104d3
push 1
call fcn.0041d6f4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x38]
push dword [ebx]
call fcn.0041157a
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4104fc
push ebx
call fcn.0041d6ee
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push 0x4a61f3
push dword [ebp - 0x18]
call fcn.004053bc
add esp, 8
cmp eax, 0
je 0x41057c
push 0x80000301
push 0
push 0x104
push 1
mov ebx, 0x41e860
call fcn.0041d6e8
add esp, 0x10
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x41054e
push ebx
call fcn.0041d6ee
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x38], esp
push 0x104
push dword [ebp - 0x1c]
push dword [ebp - 0x18]
mov eax, 0xc
call fcn.0041d6fa
cmp dword [ebp - 0x38], esp
je 0x41057c
push 6
call fcn.0041d6f4
add esp, 4
mov ebx, dword [ebp - 0x20]
mov dword [ebp - 0x38], ebx
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x41059e
push eax
mov ebx, eax
call fcn.0040105b
inc eax
push eax
call fcn.0041d6e2
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4105b1
push ebx
call fcn.0041d6ee
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x20]
add ebx, 8
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 8]
call fcn.00401217
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4105dd
push 4
call fcn.0041d6f4
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4105f0
push 1
call fcn.0041d6f4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x3c], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x3c]
push dword [ebx]
push 1
mov ebx, 0x41ee20
call fcn.0041d6e8
add esp, 0x10
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x41062f
push ebx
call fcn.0041d6ee
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
mov ebx, dword [ebp - 8]
call fcn.00401217
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x410652
push 4
call fcn.0041d6f4
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x410665
push 1
call fcn.0041d6f4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x38]
push dword [ebx]
call fcn.00411937
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0x24]
push ebx
call fcn.0041d6ee
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
add ebx, 0xc
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x24]
add ebx, 0xc
mov dword [ebp - 0x3c], ebx
mov ebx, dword [ebp - 0x3c]
fild dword [ebx]
fstp qword [ebp - 0x44]
fld qword [ebp - 0x44]
fdiv qword [0x4a69cf]
fstp qword [ebp - 0x4c]
push 0x80000601
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push 1
mov ebx, 0x41dcf0
call fcn.0041d6e8
add esp, 0x10
push eax
call fcn.00411a01
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4106f0
push ebx
call fcn.0041d6ee
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x20]
add ebx, 0x10
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x24]
add ebx, 8
mov dword [ebp - 0x3c], ebx
mov ebx, dword [ebp - 0x3c]
fild dword [ebx]
fstp qword [ebp - 0x44]
fld qword [ebp - 0x44]
fdiv qword [0x4a69cf]
fstp qword [ebp - 0x4c]
push 0x80000601
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push 1
mov ebx, 0x41dcf0
call fcn.0041d6e8
add esp, 0x10
push eax
call fcn.00411a01
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x410758
push ebx
call fcn.0041d6ee
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
mov ebx, dword [ebp - 8]
call fcn.00401217
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x41077b
push 4
call fcn.0041d6f4
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x41078e
push 1
call fcn.0041d6f4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x3c], esp
mov ebx, dword [ebp - 0x38]
push dword [ebx]
push 0
push 0x401
mov eax, 0xd
call fcn.0041d6fa
cmp dword [ebp - 0x3c], esp
je 0x4107c4
push 6
call fcn.0041d6f4
add esp, 4
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x20]
add ebx, 0x14
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x3c], esp
push dword [ebp - 0x28]
mov eax, 0xe
call fcn.0041d6fa
cmp dword [ebp - 0x3c], esp
je 0x4107f2
push 6
call fcn.0041d6f4
add esp, 4
push eax
call fcn.00411c70
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x410811
push ebx
call fcn.0041d6ee
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x20]
add ebx, 0x18
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x38]
mov dword [ebx], 0
mov eax, dword [0x4cce6c]
push eax
push dword [ebp - 0x18]
call fcn.004053bc
add esp, 8
cmp eax, 0
je 0x410864
mov eax, dword [0x4cce70]
push eax
push dword [ebp - 0x18]
call fcn.004053bc
add esp, 8
cmp eax, 0
je 0x410864
mov eax, 1
jmp 0x410866
xor eax, eax
test eax, eax
je 0x4108ac
mov ebx, dword [ebp - 0x20]
add ebx, 4
mov dword [ebp - 0x38], ebx
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x410893
push eax
mov ebx, eax
call fcn.0040105b
inc eax
push eax
call fcn.0041d6e2
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4108a6
push ebx
call fcn.0041d6ee
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
mov eax, dword [ebp - 0x14]
mov dword [0x4cce74], eax
push dword [ebp + 8]
push 4
mov eax, 2
call fcn.0041d6dc
add esp, 8
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
mov dword [ebp - 0x3c], ebx
call fcn.00401217
mov dword [ebp - 0x40], ecx
mov edi, dword [ebp - 0x3c]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x4108f8
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x40]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x3c]
call fcn.0041d700
add esp, 8
mov ebx, dword [ebp + 8]
mov dword [ebx], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x40]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x38]
push edi
push eax
push 0x1c
call fcn.0041d6e2
add esp, 4
pop esi
mov edi, eax
push eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x410952
push eax
mov ebx, eax
call fcn.0040105b
inc eax
push eax
call fcn.0041d6e2
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x410971
push eax
mov ebx, eax
call fcn.0040105b
inc eax
push eax
call fcn.0041d6e2
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x410990
push eax
mov ebx, eax
call fcn.0040105b
inc eax
push eax
call fcn.0041d6e2
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x4109af
push eax
mov ebx, eax
call fcn.0040105b
inc eax
push eax
call fcn.0041d6e2
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x4109ce
push eax
mov ebx, eax
call fcn.0040105b
inc eax
push eax
call fcn.0041d6e2
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x4109ed
push eax
mov ebx, eax
call fcn.0040105b
inc eax
push eax
call fcn.0041d6e2
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
pop eax
pop edi
mov dword [edi], eax
pop ebx
pop ecx
pop edx
inc ecx
jmp 0x410496
add esp, 0xc
push 0
mov eax, 3
mov ebx, 0x466e10
call fcn.0041d706
add esp, 4
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
push eax
mov ebx, dword [ebp - 0x2c]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x410a3e
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x410a3a
imul eax, dword [ebx]
jmp 0x410a2f
mov ecx, eax
test ecx, ecx
je 0x410a5d
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x410a56
push ebx
push eax
call fcn.0041d6ee
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x410a44
call fcn.0041d6ee
add esp, 4
pop eax
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x2c]
call fcn.004011fe
xor ecx, ecx
push eax
lea eax, [ebp - 0x30]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x410efd
mov ebx, dword [ebp - 0x2c]
call fcn.00401217
push ebx
push ecx
mov eax, dword [ebp - 0x30]
dec eax
jns 0x410aa5
push 4
call fcn.0041d6f4
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x410ab8
push 1
call fcn.0041d6f4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x38], ebx
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x38]
mov eax, dword [ebx]
test eax, eax
jne 0x410ad5
mov eax, 0x4a61f3
push eax
push 1
mov ebx, 0x41e250
call fcn.0041d6e8
add esp, 0x10
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x40], esp
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x3c]
mov eax, 0xf
call fcn.0041d6fa
cmp dword [ebp - 0x40], esp
je 0x410b11
push 6
call fcn.0041d6f4
add esp, 4
push dword [ebp - 0x34]
push dword [ebp + 8]
call fcn.00411d2b
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jne 0x410ef5
push dword [ebp - 0x34]
call fcn.0041157a
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x410b48
push ebx
call fcn.0041d6ee
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x38], esp
push 0x104
push dword [ebp - 0x1c]
push dword [ebp - 0x18]
mov eax, 0xc
call fcn.0041d6fa
cmp dword [ebp - 0x38], esp
je 0x410b76
push 6
call fcn.0041d6f4
add esp, 4
mov ebx, dword [ebp - 0x20]
mov dword [ebp - 0x38], ebx
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x410b98
push eax
mov ebx, eax
call fcn.0040105b
inc eax
push eax
call fcn.0041d6e2
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x410bab
push ebx
call fcn.0041d6ee
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x20]
add ebx, 4
mov dword [ebp - 0x38], ebx
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x410bd6
push eax
mov ebx, eax
call fcn.0040105b
inc eax
push eax
call fcn.0041d6e2
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x410be9
push ebx
call fcn.0041d6ee
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x20]
add ebx, 8
mov dword [ebp - 0x38], ebx
push 0x80000301
push 0
push dword [ebp - 0x34]
push 1
mov ebx, 0x41ee20
call fcn.0041d6e8
add esp, 0x10
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x410c2d
push ebx
call fcn.0041d6ee
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
push dword [ebp - 0x34]
call fcn.00411937
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
push eax
mov ebx, dword [ebp - 0x24]
push ebx
call fcn.0041d6ee
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
add ebx, 0xc
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x24]
add ebx, 0xc
mov dword [ebp - 0x3c], ebx
mov ebx, dword [ebp - 0x3c]
fild dword [ebx]
fstp qword [ebp - 0x44]
fld qword [ebp - 0x44]
fdiv qword [0x4a69cf]
fstp qword [ebp - 0x4c]
push 0x80000601
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push 1
mov ebx, 0x41dcf0
call fcn.0041d6e8
add esp, 0x10
push eax
call fcn.00411a01
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x410cb4
push ebx
call fcn.0041d6ee
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x20]
add ebx, 0x10
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x24]
add ebx, 8
mov dword [ebp - 0x3c], ebx
mov ebx, dword [ebp - 0x3c]
fild dword [ebx]
fstp qword [ebp - 0x44]
fld qword [ebp - 0x44]
fdiv qword [0x4a69cf]
fstp qword [ebp - 0x4c]
push 0x80000601
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push 1
mov ebx, 0x41dcf0
call fcn.0041d6e8
add esp, 0x10
push eax
call fcn.00411a01
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x410d1c
push ebx
call fcn.0041d6ee
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
mov dword [ebp - 0x38], esp
push dword [ebp - 0x34]
push 0
push 0x401
mov eax, 0xd
call fcn.0041d6fa
cmp dword [ebp - 0x38], esp
je 0x410d4e
push 6
call fcn.0041d6f4
add esp, 4
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x20]
add ebx, 0x14
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x3c], esp
push dword [ebp - 0x28]
mov eax, 0xe
call fcn.0041d6fa
cmp dword [ebp - 0x3c], esp
je 0x410d7c
push 6
call fcn.0041d6f4
add esp, 4
push eax
call fcn.00411c70
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x410d9b
push ebx
call fcn.0041d6ee
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x20]
add ebx, 0x18
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x38]
mov dword [ebx], 1
push dword [ebp + 8]
push 4
mov eax, 2
call fcn.0041d6dc
add esp, 8
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
mov dword [ebp - 0x3c], ebx
call fcn.00401217
mov dword [ebp - 0x40], ecx
mov edi, dword [ebp - 0x3c]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x410df7
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x40]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x3c]
call fcn.0041d700
add esp, 8
mov ebx, dword [ebp + 8]
mov dword [ebx], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x40]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x38]
push edi
push eax
push 0x1c
call fcn.0041d6e2
add esp, 4
pop esi
mov edi, eax
push eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x410e51
push eax
mov ebx, eax
call fcn.0040105b
inc eax
push eax
call fcn.0041d6e2
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x410e70
push eax
mov ebx, eax
call fcn.0040105b
inc eax
push eax
call fcn.0041d6e2
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x410e8f
push eax
mov ebx, eax
call fcn.0040105b
inc eax
push eax
call fcn.0041d6e2
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x410eae
push eax
mov ebx, eax
call fcn.0040105b
inc eax
push eax
call fcn.0041d6e2
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x410ecd
push eax
mov ebx, eax
call fcn.0040105b
inc eax
push eax
call fcn.0041d6e2
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x410eec
push eax
mov ebx, eax
call fcn.0040105b
inc eax
push eax
call fcn.0041d6e2
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
pop eax
pop edi
mov dword [edi], eax
pop eax
pop ebx
pop ecx
jmp 0x410a7a
add esp, 0xc
cmp dword [ebp - 4], 0
je 0x410f2c
mov dword [ebp - 0x38], esp
push dword [ebp - 4]
mov eax, 0x10
call fcn.0041d6fa
cmp dword [ebp - 0x38], esp
je 0x410f2c
push 6
call fcn.0041d6f4
add esp, 4
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
call fcn.004011fe
jmp 0x410f3b
push eax
mov ebx, dword [ebp - 8]
push ebx
call fcn.0041d6ee
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x410f58
push ebx
call fcn.0041d6ee
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x410f68
push ebx
call fcn.0041d6ee
add esp, 4
mov ebx, dword [ebp - 0x20]
push ebx
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x410f7c
push ebx
call fcn.0041d6ee
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x410f90
push ebx
call fcn.0041d6ee
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x410fa4
push ebx
call fcn.0041d6ee
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x410fb8
push ebx
call fcn.0041d6ee
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x410fcc
push ebx
call fcn.0041d6ee
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x410fe0
push ebx
call fcn.0041d6ee
add esp, 4
pop ebx
call fcn.0041d6ee
add esp, 4
mov ebx, dword [ebp - 0x24]
push ebx
call fcn.0041d6ee
add esp, 4
mov ebx, dword [ebp - 0x2c]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x411013
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x41100f
imul eax, dword [ebx]
jmp 0x411004
mov ecx, eax
test ecx, ecx
je 0x411032
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x41102b
push ebx
push eax
call fcn.0041d6ee
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x411019
call fcn.0041d6ee
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 4