Function at 0x40f260
Capabilities:
Move file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x512a06
mov eax, dword fs:[0]
push eax
sub esp, 0x398
mov eax, dword [0x55d198]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
lea eax, [ebp - 0x294]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 0xe
xor eax, eax
mov dword [ebp - 0x360], 7
push str.start_download
lea ecx, [ebp - 0x374]
mov dword [ebp - 0x364], 0
mov word [ebp - 0x374], ax
call fcn.00403800
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x35c]
push 0x3e
xor eax, eax
mov dword [ebp - 0x348], 7
push str._P_05d__T_05d___04d__02d__02d__02d:_02d:_02d._03d___s___04d_:
mov dword [ebp - 0x34c], 0
mov word [ebp - 0x35c], ax
call fcn.00403800
push 2
push 0x544188
lea ecx, [ebp - 0x374]
mov byte [ebp - 4], 1
call fcn.00403070
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0x35c]
call fcn.004031a0
mov esi, eax
cmp dword [esi + 0x14], 8
jb 0x40f332
mov esi, dword [esi]
movzx eax, word [ebp - 0x286]
push 0x32
push str.CurlClient::Start
push eax
movzx eax, word [ebp - 0x288]
push eax
movzx eax, word [ebp - 0x28a]
push eax
movzx eax, word [ebp - 0x28c]
push eax
movzx eax, word [ebp - 0x28e]
push eax
movzx eax, word [ebp - 0x292]
push eax
movzx eax, word [ebp - 0x294]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push esi
call fcn.00423260
mov eax, dword [ebp - 0x348]
add esp, 0x30
cmp eax, 8
jb 0x40f3a6
inc eax
lea ecx, [ebp - 0x35c]
push eax
push dword [ebp - 0x35c]
call fcn.00403a50
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov word [ebp - 0x35c], ax
mov eax, dword [ebp - 0x360]
mov dword [ebp - 0x348], 7
mov dword [ebp - 0x34c], 0
cmp eax, 8
jb 0x40f3e8
inc eax
lea ecx, [ebp - 0x374]
push eax
push dword [ebp - 0x374]
call fcn.00403a50
lea eax, [ebp - 0x33c]
mov ecx, ebx
push eax
call fcn.0040f230
push 0
lea edx, [ebp - 0x33c]
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x2dc]
call fcn.00424180
add esp, 4
mov edx, eax
mov byte [ebp - 4], 3
cmp dword [edx + 0x14], 0x10
jb 0x40f421
mov edx, dword [edx]
mov dword [ebp - 0x298], 0xf
mov dword [ebp - 0x29c], 0
mov byte [ebp - 0x2ac], 0
cmp byte [edx], 0
jne 0x40f445
xor ecx, ecx
jmp 0x40f459
mov ecx, edx
lea esi, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40f450
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x2ac]
call fcn.00409fd0
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x2c8]
cmp eax, 0x10
jb 0x40f488
inc eax
lea ecx, [ebp - 0x2dc]
push eax
push dword [ebp - 0x2dc]
call fcn.00409eb0
push 0
lea edx, [ebx + 0x18]
mov dword [ebp - 0x2c8], 0xf
lea ecx, [ebp - 0x374]
mov dword [ebp - 0x2cc], 0
mov byte [ebp - 0x2dc], 0
call fcn.00424180
add esp, 4
mov edx, eax
mov byte [ebp - 4], 6
cmp dword [edx + 0x14], 0x10
jb 0x40f4c4
mov edx, dword [edx]
mov dword [ebp - 0x2b0], 0xf
mov dword [ebp - 0x2b4], 0
mov byte [ebp - 0x2c4], 0
cmp byte [edx], 0
jne 0x40f4e8
xor ecx, ecx
jmp 0x40f4f9
mov ecx, edx
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40f4f0
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x2c4]
call fcn.00409fd0
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x360]
cmp eax, 0x10
jb 0x40f528
inc eax
lea ecx, [ebp - 0x374]
push eax
push dword [ebp - 0x374]
call fcn.00409eb0
push 0xfde9
mov edx, ebx
mov dword [ebp - 0x360], 0xf
lea ecx, [ebp - 0x3a4]
mov dword [ebp - 0x364], 0
mov byte [ebp - 0x374], 0
call fcn.00424180
add esp, 4
mov edx, eax
mov byte [ebp - 4], 9
cmp dword [edx + 0x14], 0x10
jb 0x40f566
mov edx, dword [edx]
mov dword [ebp - 0x2f8], 0xf
mov dword [ebp - 0x2fc], 0
mov byte [ebp - 0x30c], 0
cmp byte [edx], 0
jne 0x40f58a
xor ecx, ecx
jmp 0x40f599
mov ecx, edx
lea esi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40f590
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x30c]
call fcn.00409fd0
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x390]
cmp eax, 0x10
jb 0x40f5c8
inc eax
lea ecx, [ebp - 0x3a4]
push eax
push dword [ebp - 0x3a4]
call fcn.00409eb0
push 8
xor eax, eax
mov dword [ebp - 0x390], 0xf
push str.file:___
lea ecx, [ebp - 0x38c]
mov dword [ebp - 0x394], 0
mov byte [ebp - 0x3a4], 0
mov dword [ebp - 0x378], 7
mov dword [ebp - 0x37c], 0
mov word [ebp - 0x38c], ax
call fcn.00403800
push dword [ebp - 0x37c]
mov esi, dword [ebp - 0x378]
lea eax, [ebp - 0x38c]
mov edi, dword [ebp - 0x38c]
cmp esi, 8
push 0
cmovae eax, edi
mov ecx, ebx
push eax
call fcn.004162c0
mov dword [ebp - 0x26c], eax
cmp esi, 8
jb 0x40f65b
lea ecx, [esi + 1]
push ecx
push edi
lea ecx, [ebp - 0x38c]
call fcn.00403a50
mov eax, dword [ebp - 0x26c]
test eax, eax
jne 0x40f713
mov edx, ebx
lea ecx, [ebp - 0x374]
call fcn.00424770
push 0
mov edx, eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x2dc]
call fcn.00424180
add esp, 4
mov edx, eax
mov byte [ebp - 4], 0xd
cmp dword [edx + 0x14], 0x10
jb 0x40f694
mov edx, dword [edx]
cmp byte [edx], 0
jne 0x40f69d
xor ecx, ecx
jmp 0x40f6ab
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40f6a2
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x30c]
call fcn.00409fd0
mov eax, dword [ebp - 0x2c8]
cmp eax, 0x10
jb 0x40f6d6
inc eax
lea ecx, [ebp - 0x2dc]
push eax
push dword [ebp - 0x2dc]
call fcn.00409eb0
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x360]
mov dword [ebp - 0x2c8], 0xf
mov dword [ebp - 0x2cc], 0
mov byte [ebp - 0x2dc], 0
cmp eax, 8
jb 0x40f713
inc eax
lea ecx, [ebp - 0x374]
push eax
push dword [ebp - 0x374]
call fcn.00403a50
xor edi, edi
mov dword [ebp - 0x340], edi
cmp dword [ebx + 0x6c], edi
jne 0x40f7b8
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], edi
jb 0x40f73d
mov eax, dword [ecx]
jmp 0x40f73f
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], 0
lea eax, [ebp - 0x30c]
push 0
push eax
call fcn.00409b90
call fcn.004101b0
mov esi, eax
lea ecx, [ebp - 0x324]
mov edx, esi
call fcn.00410810
lea ecx, [ebx + 0x5c]
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x324]
cmp ecx, eax
je 0x40f781
push 0xffffffffffffffff
push 0
push eax
call fcn.00409b90
mov ecx, esi
call fcn.004105e0
push esi
movsd qword [ebx + 0x40], xmm0
call fcn.004456c0
mov byte [ebp - 4], 0xb
add esp, 4
mov eax, dword [ebp - 0x310]
cmp eax, 0x10
jb 0x40f7b8
inc eax
lea ecx, [ebp - 0x324]
push eax
push dword [ebp - 0x324]
call fcn.00409eb0
xorps xmm0, xmm0
comisd xmm0, xmmword [ebx + 0x40]
jbe 0x40f7cc
mov esi, 0xfffffc1a
jmp 0x40fb6a
call fcn.00445700
mov edi, eax
test edi, edi
jne 0x40f7e1
mov esi, 0xfffffc1b
jmp 0x40fb6a
cmp dword [ebp - 0x298], 0x10
lea eax, [ebp - 0x2ac]
push 0x544e88
cmovae eax, dword [ebp - 0x2ac]
push eax
lea eax, [ebp - 0x340]
mov dword [ebx + 0x34], edi
push eax
call fcn.004e0f0e
add esp, 0xc
cmp dword [ebp - 0x340], 0
jne 0x40f879
call fcn.004d32fd
push dword [eax]
lea eax, [ebp - 0x268]
push 0xc8
push eax
call fcn.004e0ff5
add esp, 0xc
cmp word [ebp - 0x268], 0
jne 0x40f83f
xor ecx, ecx
jmp 0x40f85f
lea ecx, [ebp - 0x268]
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40f850
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x268]
push eax
lea ecx, [ebx + 0x74]
call fcn.00403800
mov esi, 0xfffffc1c
jmp 0x40fb6a
push 5
push str.https
lea ecx, [ebp - 0x35c]
mov dword [ebp - 0x348], 0xf
mov dword [ebp - 0x34c], 0
mov byte [ebp - 0x35c], 0
call fcn.00409fd0
push dword [ebp - 0x34c]
cmp dword [ebp - 0x348], 0x10
lea eax, [ebp - 0x35c]
push 0
cmovae eax, dword [ebp - 0x35c]
lea esi, [ebx + 0x5c]
push eax
mov ecx, esi
call fcn.00424af0
test eax, eax
mov eax, dword [ebp - 0x348]
sete byte [ebp - 0x341]
cmp eax, 0x10
jb 0x40f8f4
inc eax
lea ecx, [ebp - 0x35c]
push eax
push dword [ebp - 0x35c]
call fcn.00409eb0
cmp byte [ebp - 0x341], 0
je 0x40f914
push 0
push 0x40
push edi
call fcn.004457a0
push 0
push 0x51
push edi
call fcn.004457a0
add esp, 0x18
push str.Connection:_keep_alive
push 0
call fcn.00445b70
push str.Accept_Encoding:_gzip__deflate
push eax
call fcn.00445b70
push eax
push 0x2727
push edi
call fcn.004457a0
push 1
push 0xd5
push edi
call fcn.004457a0
push 0xa
push 0xd6
push edi
call fcn.004457a0
push 0xa
push 0xd7
push edi
call fcn.004457a0
add esp, 0x40
push 0
push 0xd
push edi
call fcn.004457a0
add esp, 0xc
cmp dword [esi + 0x14], 0x10
jb 0x40f976
mov esi, dword [esi]
push esi
push 0x2712
push edi
call fcn.004457a0
push 1
push 0x34
push edi
mov esi, eax
call fcn.004457a0
push 0x410070
push 0x4e2b
push edi
or esi, eax
call fcn.004457a0
push dword [ebp - 0x340]
or esi, eax
push 0x2711
push edi
call fcn.004457a0
push 0
push 0x2b
push edi
or esi, eax
call fcn.004457a0
push 0x410080
push 0x4efb
push edi
or esi, eax
call fcn.004457a0
add esp, 0x48
or esi, eax
push ebx
push 0x2749
push edi
call fcn.004457a0
push 1
push 0x2d
push edi
or esi, eax
call fcn.004457a0
push 0x3c
push 0x4e
push edi
or esi, eax
call fcn.004457a0
add esp, 0x24
mov dword [ebp - 0x270], 0xf
or esi, eax
mov dword [ebp - 0x274], 0
lea eax, [ebp - 0x2ac]
mov byte [ebp - 0x284], 0
lea ecx, [ebp - 0x284]
push 0xffffffffffffffff
push 0
push eax
call fcn.00409b90
cmp dword [ebp - 0x270], 0x10
lea ecx, [ebp - 0x2f4]
lea eax, [ebp - 0x284]
cmovae eax, dword [ebp - 0x284]
push ecx
push eax
call fcn.004e2252
add esp, 8
test eax, eax
mov eax, dword [ebp - 0x270]
jne 0x40fa8a
mov ecx, dword [ebp - 0x2e0]
mov dword [ebp - 0x26c], ecx
cmp eax, 0x10
jb 0x40faa5
inc eax
lea ecx, [ebp - 0x284]
push eax
push dword [ebp - 0x284]
call fcn.00409eb0
mov ecx, dword [ebp - 0x26c]
jmp 0x40faa5
cmp eax, 0x10
jb 0x40faa2
inc eax
lea ecx, [ebp - 0x284]
push eax
push dword [ebp - 0x284]
call fcn.00409eb0
or ecx, 0xffffffff
mov eax, ecx
cdq
mov dword [ebx + 0x48], eax
mov ecx, eax
mov dword [ebx + 0x4c], edx
mov ebx, edx
mov dword [ebp - 0x26c], eax
call fcn.004d2430
comisd xmm0, xmmword [0x548450]
jbe 0x40fade
push ebx
push dword [ebp - 0x26c]
push 0x75a4
push edi
call fcn.004457a0
add esp, 0x10
or esi, eax
test esi, esi
jne 0x40fb6a
push edi
call fcn.00445790
mov esi, eax
add esp, 4
test esi, esi
je 0x40fb6a
push 0x64
lea eax, [ebp - 0x74]
push 0
push eax
call fcn.00444b40
push esi
call fcn.00446380
push eax
push esi
push 0x544ecc
lea eax, [ebp - 0x74]
push 0x64
push eax
call fcn.00410970
add esp, 0x24
cmp esi, 0x16
jne 0x40fb6a
lea eax, [ebp - 0x26c]
mov dword [ebp - 0x26c], 0
push eax
push 0x200002
push edi
call fcn.004456e0
push 0x64
lea eax, [ebp - 0xd8]
push 0
push eax
call fcn.00444b40
push dword [ebp - 0x26c]
lea eax, [ebp - 0xd8]
push str.HTTP_error_code:_d
push 0x64
push eax
call fcn.00410970
add esp, 0x28
lea eax, [ebp - 0x294]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push esi
call fcn.00446380
mov edx, eax
mov dword [ebp - 0x360], 0xf
add esp, 4
mov dword [ebp - 0x364], 0
mov byte [ebp - 0x374], 0
cmp byte [edx], 0
jne 0x40fba6
xor ecx, ecx
jmp 0x40fbb9
mov ecx, edx
lea ebx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40fbb0
sub ecx, ebx
push ecx
push edx
lea ecx, [ebp - 0x374]
call fcn.00409fd0
push 0
lea edx, [ebp - 0x374]
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x2dc]
call fcn.00424010
add esp, 4
mov dword [ebp - 0x26c], eax
mov ebx, eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x284]
push 0xb
xor eax, eax
mov dword [ebp - 0x270], 7
push str.error:_d:_s
mov dword [ebp - 0x274], 0
mov word [ebp - 0x284], ax
call fcn.00403800
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x35c]
push 0x3e
xor eax, eax
mov dword [ebp - 0x348], 7
push str._P_05d__T_05d___04d__02d__02d__02d:_02d:_02d._03d___s___04d_:
mov dword [ebp - 0x34c], 0
mov word [ebp - 0x35c], ax
call fcn.00403800
mov byte [ebp - 4], 0x12
cmp dword [ebx + 0x14], 8
jb 0x40fc60
mov ebx, dword [ebx]
mov dword [ebp - 0x26c], ebx
push 2
push 0x544188
lea ecx, [ebp - 0x284]
call fcn.00403070
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0x35c]
call fcn.004031a0
mov ebx, eax
cmp dword [ebx + 0x14], 8
jb 0x40fc8c
mov ebx, dword [ebx]
push dword [ebp - 0x26c]
movzx eax, word [ebp - 0x286]
push esi
push 0xcb
push str.CurlClient::Start
push eax
movzx eax, word [ebp - 0x288]
push eax
movzx eax, word [ebp - 0x28a]
push eax
movzx eax, word [ebp - 0x28c]
push eax
movzx eax, word [ebp - 0x28e]
push eax
movzx eax, word [ebp - 0x292]
push eax
movzx eax, word [ebp - 0x294]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push ebx
call fcn.00423260
mov eax, dword [ebp - 0x348]
add esp, 0x38
cmp eax, 8
jb 0x40fd0a
inc eax
lea ecx, [ebp - 0x35c]
push eax
push dword [ebp - 0x35c]
call fcn.00403a50
xor eax, eax
mov dword [ebp - 0x348], 7
mov word [ebp - 0x35c], ax
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x34c], 0
cmp eax, 8
jb 0x40fd45
inc eax
lea ecx, [ebp - 0x284]
push eax
push dword [ebp - 0x284]
call fcn.00403a50
xor eax, eax
mov dword [ebp - 0x270], 7
mov word [ebp - 0x284], ax
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x274], 0
cmp eax, 8
jb 0x40fd80
inc eax
lea ecx, [ebp - 0x2dc]
push eax
push dword [ebp - 0x2dc]
call fcn.00403a50
xor eax, eax
mov byte [ebp - 4], 0xb
mov word [ebp - 0x2dc], ax
mov eax, dword [ebp - 0x360]
mov dword [ebp - 0x2c8], 7
mov dword [ebp - 0x2cc], 0
cmp eax, 0x10
jb 0x40fdbf
inc eax
lea ecx, [ebp - 0x374]
push eax
push dword [ebp - 0x374]
call fcn.00409eb0
push edi
call fcn.004456c0
mov eax, dword [ebp - 0x340]
add esp, 4
test eax, eax
je 0x40fde5
push eax
call fcn.004e10dc
add esp, 4
mov dword [ebp - 0x340], 0
test esi, esi
jne 0x40fe35
cmp dword [ebp - 0x2b0], 0x10
lea eax, [ebp - 0x2c4]
cmovae eax, dword [ebp - 0x2c4]
push eax
call fcn.004e0de9
cmp dword [ebp - 0x2b0], 0x10
lea ecx, [ebp - 0x2c4]
lea eax, [ebp - 0x2ac]
cmovae ecx, dword [ebp - 0x2c4]
cmp dword [ebp - 0x298], 0x10
push ecx
cmovae eax, dword [ebp - 0x2ac]
push eax
call fcn.004e115c
add esp, 0xc
lea eax, [ebp - 0x27c]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 0xc
xor eax, eax
mov dword [ebp - 0x2c8], 7
push str.end_download
lea ecx, [ebp - 0x2dc]
mov dword [ebp - 0x2cc], 0
mov word [ebp - 0x2dc], ax
call fcn.00403800
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x38c]
push 0x3e
xor eax, eax
mov dword [ebp - 0x378], 7
push str._P_05d__T_05d___04d__02d__02d__02d:_02d:_02d._03d___s___04d_:
mov dword [ebp - 0x37c], 0
mov word [ebp - 0x38c], ax
call fcn.00403800
push 2
push 0x544188
lea ecx, [ebp - 0x2dc]
mov byte [ebp - 4], 0x14
call fcn.00403070
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0x38c]
call fcn.004031a0
mov edi, eax
cmp dword [edi + 0x14], 8
jb 0x40fed4
mov edi, dword [edi]
movzx eax, word [ebp - 0x26e]
push 0xda
push str.CurlClient::Start
push eax
movzx eax, word [ebp - 0x270]
push eax
movzx eax, word [ebp - 0x272]
push eax
movzx eax, word [ebp - 0x274]
push eax
movzx eax, word [ebp - 0x276]
push eax
movzx eax, word [ebp - 0x27a]
push eax
movzx eax, word [ebp - 0x27c]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push edi
call fcn.00423260
mov eax, dword [ebp - 0x378]
add esp, 0x30
cmp eax, 8
jb 0x40ff4b
inc eax
lea ecx, [ebp - 0x38c]
push eax
push dword [ebp - 0x38c]
call fcn.00403a50
xor eax, eax
mov dword [ebp - 0x378], 7
mov word [ebp - 0x38c], ax
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x37c], 0
cmp eax, 8
jb 0x40ff86
inc eax
lea ecx, [ebp - 0x2dc]
push eax
push dword [ebp - 0x2dc]
call fcn.00403a50
mov eax, dword [ebp - 0x2f8]
cmp eax, 0x10
jb 0x40ffa4
inc eax
lea ecx, [ebp - 0x30c]
push eax
push dword [ebp - 0x30c]
call fcn.00409eb0
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x2f8], 0xf
mov dword [ebp - 0x2fc], 0
mov byte [ebp - 0x30c], 0
cmp eax, 0x10
jb 0x40ffdd
inc eax
lea ecx, [ebp - 0x2c4]
push eax
push dword [ebp - 0x2c4]
call fcn.00409eb0
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x2b0], 0xf
mov dword [ebp - 0x2b4], 0
mov byte [ebp - 0x2c4], 0
cmp eax, 0x10
jb 0x410016
inc eax
lea ecx, [ebp - 0x2ac]
push eax
push dword [ebp - 0x2ac]
call fcn.00409eb0
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x298], 0xf
mov dword [ebp - 0x29c], 0
mov byte [ebp - 0x2ac], 0
cmp eax, 8
jb 0x41004f
inc eax
lea ecx, [ebp - 0x33c]
push eax
push dword [ebp - 0x33c]
call fcn.00403a50
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004d1626
mov esp, ebp
pop ebp
ret