Function at 0x40467e
Capabilities:
Send data
Send data on socket

Disassembly:
push 0xa7c
mov eax, 0x430017
call fcn.0042ae5b
mov ecx, dword [ebp + 8]
lea esi, [ebp + 0x10]
lea edi, [ebp - 0xa48]
mov dword [ebp - 0xa50], ecx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
xor esi, esi
mov ebx, esi
mov dword [ebp - 0xa60], esi
mov dword [ebp - 0xa6c], esi
mov dword [ebp - 0xa68], esi
mov dword [ebp - 0xa5c], ebx
mov dword [ebp - 0xa88], ebx
mov dword [ebp - 0xa84], esi
mov dword [ebp - 0xa80], esi
xor eax, eax
mov dword [ebp - 4], esi
lea edi, [ebp - 0x870]
stosd dword es:[edi], eax
push 7
pop edx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x860], esi
mov dword [ebp - 0x85c], edx
mov word [ebp - 0x870], ax
lea edi, [ebp - 0x978]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x968], esi
mov dword [ebp - 0x964], edx
mov word [ebp - 0x978], ax
lea edi, [ebp - 0x960]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x950], esi
mov dword [ebp - 0x94c], edx
mov word [ebp - 0x960], ax
lea edi, [ebp - 0x948]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x938], esi
mov dword [ebp - 0x934], edx
mov word [ebp - 0x948], ax
lea edi, [ebp - 0x930]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x920], esi
mov dword [ebp - 0x91c], edx
mov word [ebp - 0x930], ax
lea edi, [ebp - 0x918]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x908], esi
mov dword [ebp - 0x904], edx
mov word [ebp - 0x918], ax
lea edi, [ebp - 0x900]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x8f0], esi
mov dword [ebp - 0x8ec], edx
mov word [ebp - 0x900], ax
lea edi, [ebp - 0x8e8]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x8d8], esi
mov dword [ebp - 0x8d4], edx
mov word [ebp - 0x8e8], ax
lea edi, [ebp - 0x8b8]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x8a8], esi
mov dword [ebp - 0x8a4], edx
mov word [ebp - 0x8b8], ax
lea edi, [ebp - 0x8d0]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x8c0], esi
mov dword [ebp - 0x8bc], edx
mov word [ebp - 0x8d0], ax
lea edi, [ebp - 0x9a8]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x998], esi
mov dword [ebp - 0x994], edx
mov word [ebp - 0x9a8], ax
lea edi, [ebp - 0x858]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x848], esi
mov dword [ebp - 0x844], edx
mov word [ebp - 0x858], ax
lea edi, [ebp - 0x8a0]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x890], esi
mov dword [ebp - 0x88c], edx
mov word [ebp - 0x8a0], ax
lea edi, [ebp - 0x990]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x980], esi
mov dword [ebp - 0x97c], edx
mov word [ebp - 0x990], ax
lea edi, [ebp - 0x9f0]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x9e0], esi
mov dword [ebp - 0x9dc], edx
mov word [ebp - 0x9f0], ax
lea edi, [ebp - 0x9d8]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x9c8], esi
mov dword [ebp - 0x9c4], edx
mov word [ebp - 0x9d8], ax
lea edi, [ebp - 0x9c0]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x9b0], esi
mov dword [ebp - 0x9ac], edx
mov word [ebp - 0x9c0], ax
lea edi, [ebp - 0x888]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x878], esi
mov dword [ebp - 0x874], edx
mov word [ebp - 0x888], ax
lea eax, [ebp - 0xa68]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0xa60]
push eax
push esi
push esi
push 1
push ecx
push esi
call sub.wevtapi.dll_EvtRender
test eax, eax
jne 0x404933
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x404989
lea eax, [ebp - 0xa61]
push eax
push dword [ebp - 0xa60]
lea ecx, [ebp - 0xa88]
call fcn.0040254a
mov ebx, dword [ebp - 0xa88]
lea eax, [ebp - 0xa68]
mov esi, dword [ebp - 0xa50]
xor edi, edi
push eax
lea eax, [ebp - 0xa6c]
mov dword [ebp - 0xa5c], ebx
push eax
push ebx
push dword [ebp - 0xa60]
push 1
push esi
push edi
call sub.wevtapi.dll_EvtRender
test eax, eax
jne 0x404993
push esi
call sub.wevtapi.dll_EvtClose
jmp 0x40498b
xor edi, edi
or esi, 0xffffffff
jmp 0x405309
mov ecx, dword [ebp - 0xa6c]
lea edi, [ebp - 0x840]
xor eax, eax
shr ecx, 1
stosd dword es:[edi], eax
push ecx
push ebx
lea ecx, [ebp - 0x840]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor edi, edi
mov dword [ebp - 0x830], edi
mov dword [ebp - 0x82c], edi
call fcn.004016b9
push 2
sub esp, 0x18
mov byte [ebp - 4], 0x13
mov ecx, esp
push str._Provider_Name______.__1
call fcn.0040344f
lea eax, [ebp - 0x840]
push eax
lea eax, [ebp - 0xa08]
push eax
call fcn.0040999d
mov esi, eax
add esp, 0x24
lea eax, [ebp - 0x9a8]
cmp eax, esi
je 0x404a0c
mov ecx, eax
call fcn.00408c7c
push esi
lea ecx, [ebp - 0x9a8]
call fcn.00408aa5
lea ecx, [ebp - 0xa08]
call fcn.00408c7c
push 2
sub esp, 0x18
mov ecx, esp
push str.Guid______.__1
call fcn.0040344f
lea eax, [ebp - 0x840]
push eax
lea eax, [ebp - 0xa08]
push eax
call fcn.0040999d
mov esi, eax
add esp, 0x24
lea eax, [ebp - 0x858]
cmp eax, esi
je 0x404a5d
mov ecx, eax
call fcn.00408c7c
push esi
lea ecx, [ebp - 0x858]
call fcn.00408aa5
lea ecx, [ebp - 0xa08]
call fcn.00408c7c
cmp dword [ebp - 0x998], 0
mov esi, 0x43165c
jne 0x404a98
cmp dword [ebp - 0x848], 0
jne 0x404a98
push esi
call fcn.00412492
pop ecx
push eax
push esi
lea ecx, [ebp - 0x8a0]
call fcn.0040908f
jmp 0x404b48
lea eax, [ebp - 0x9a8]
push eax
lea eax, [ebp - 0x828]
push 0x431d40
push eax
call fcn.0040127a
add esp, 0xc
mov ecx, eax
cmp dword [ebp - 0x844], 7
lea eax, [ebp - 0x858]
push dword [ebp - 0x848]
cmova eax, dword [ebp - 0x858]
push eax
mov byte [ebp - 4], 0x14
call fcn.00409034
push eax
lea ecx, [ebp - 0xa08]
call fcn.004033a1
push 0x431d3c
lea eax, [ebp - 0xa08]
mov byte [ebp - 4], 0x15
push eax
lea eax, [ebp - 0xa38]
push eax
call fcn.0040122a
mov esi, eax
add esp, 0xc
lea eax, [ebp - 0x8a0]
cmp eax, esi
je 0x404b23
mov ecx, eax
call fcn.00408c7c
push esi
lea ecx, [ebp - 0x8a0]
call fcn.00408aa5
lea ecx, [ebp - 0xa38]
call fcn.00408c7c
lea ecx, [ebp - 0xa08]
call fcn.00408c7c
lea ecx, [ebp - 0x828]
mov byte [ebp - 4], 0x13
call fcn.00408c7c
push 1
sub esp, 0x18
mov ecx, esp
push str._EventID_____.____EventID_
call fcn.0040344f
lea eax, [ebp - 0x840]
push eax
lea eax, [ebp - 0x828]
push str.EventID:
push eax
call fcn.004091d2
mov esi, eax
add esp, 0x28
lea eax, [ebp - 0x870]
cmp eax, esi
je 0x404b93
mov ecx, eax
call fcn.00408c7c
push esi
lea ecx, [ebp - 0x870]
call fcn.00408aa5
lea ecx, [ebp - 0x828]
call fcn.00408c7c
push str.__Version_
push str._Version_
sub esp, 0x18
lea eax, [ebp - 0x840]
mov ecx, esp
push eax
call fcn.004033c8
lea eax, [ebp - 0x828]
push str.Version:
push eax
call fcn.00409287
mov esi, eax
add esp, 0x28
lea eax, [ebp - 0x948]
cmp eax, esi
je 0x404bec
mov ecx, eax
call fcn.00408c7c
push esi
lea ecx, [ebp - 0x948]
call fcn.00408aa5
lea ecx, [ebp - 0x828]
call fcn.00408c7c
push str.__Level_
push str._Level_
sub esp, 0x18
lea eax, [ebp - 0x840]
mov ecx, esp
push eax
call fcn.004033c8
lea eax, [ebp - 0x828]
push eax
call fcn.004098f4
mov esi, eax
add esp, 0x24
lea eax, [ebp - 0x978]
cmp eax, esi
je 0x404c40
mov ecx, eax
call fcn.00408c7c
push esi
lea ecx, [ebp - 0x978]
call fcn.00408aa5
lea ecx, [ebp - 0x828]
call fcn.00408c7c
push str.__Task_
push str._Task_
sub esp, 0x18
lea eax, [ebp - 0x840]
mov ecx, esp
push eax
call fcn.004033c8
lea eax, [ebp - 0x828]
push str.Task:
push eax
call fcn.00409287
mov esi, eax
add esp, 0x28
lea eax, [ebp - 0x930]
cmp eax, esi
je 0x404c99
mov ecx, eax
call fcn.00408c7c
push esi
lea ecx, [ebp - 0x930]
call fcn.00408aa5
lea ecx, [ebp - 0x828]
call fcn.00408c7c
push str.__Opcode_
push str._Opcode_
sub esp, 0x18
lea eax, [ebp - 0x840]
mov ecx, esp
push eax
call fcn.004033c8
lea eax, [ebp - 0x828]
push str.Opcode:
push eax
call fcn.00409287
mov esi, eax
add esp, 0x28
lea eax, [ebp - 0x918]
cmp eax, esi
je 0x404cf2
mov ecx, eax
call fcn.00408c7c
push esi
lea ecx, [ebp - 0x918]
call fcn.00408aa5
lea ecx, [ebp - 0x828]
call fcn.00408c7c
push str.__Keywords_
push str._Keywords_
sub esp, 0x18
lea eax, [ebp - 0x840]
mov ecx, esp
push eax
call fcn.004033c8
lea eax, [ebp - 0x828]
push str.Keywords:
push eax
call fcn.00409287
mov esi, eax
add esp, 0x28
lea eax, [ebp - 0x900]
cmp eax, esi
je 0x404d4b
mov ecx, eax
call fcn.00408c7c
push esi
lea ecx, [ebp - 0x900]
call fcn.00408aa5
lea ecx, [ebp - 0x828]
call fcn.00408c7c
push 0x431eb0
push str._TimeCreated_SystemTime
sub esp, 0x18
lea eax, [ebp - 0x840]
mov ecx, esp
push eax
call fcn.004033c8
lea eax, [ebp - 0x828]
push str.Timestamp:
push eax
call fcn.00409287
mov esi, eax
add esp, 0x28
lea eax, [ebp - 0x960]
cmp eax, esi
je 0x404da4
mov ecx, eax
call fcn.00408c7c
push esi
lea ecx, [ebp - 0x960]
call fcn.00408aa5
lea ecx, [ebp - 0x828]
call fcn.00408c7c
push 0xa
push edi
push str.__EventRecordID_
push str._EventRecordID_
sub esp, 0x18
lea eax, [ebp - 0x840]
mov ecx, esp
push eax
call fcn.004033c8
lea eax, [ebp - 0x828]
push eax
call fcn.004098f4
add esp, 0x24
push eax
mov byte [ebp - 4], 0x16
call fcn.0040a672
add esp, 0xc
mov byte [ebp - 4], 0x13
mov ebx, eax
lea ecx, [ebp - 0x828]
mov dword [ebp - 0xa54], ebx
call fcn.00408c7c
test ebx, ebx
je 0x404e95
lea eax, [ebp - 0xa08]
push ebx
push eax
call fcn.0040297e
lea eax, [ebp - 0xa08]
mov byte [ebp - 4], 0x17
push eax
lea eax, [ebp - 0xa38]
push str.EventRecordID:
push eax
call fcn.00401251
push 0x431d3c
push eax
lea eax, [ebp - 0x828]
mov byte [ebp - 4], 0x18
push eax
call fcn.0040122a
mov esi, eax
add esp, 0x20
lea eax, [ebp - 0x888]
cmp eax, esi
je 0x404e69
mov ecx, eax
call fcn.00408c7c
push esi
lea ecx, [ebp - 0x888]
call fcn.00408aa5
lea ecx, [ebp - 0x828]
call fcn.00408c7c
lea ecx, [ebp - 0xa38]
call fcn.00408c7c
lea ecx, [ebp - 0xa08]
mov byte [ebp - 4], 0x13
call fcn.00408c7c
mov ebx, 0x43165c
jmp 0x404eae
mov ebx, 0x43165c
push ebx
call fcn.00412492
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x888]
call fcn.0040908f
push str.__Computer_
push str._Computer_
sub esp, 0x18
lea eax, [ebp - 0x840]
mov ecx, esp
push eax
call fcn.004033c8
lea eax, [ebp - 0x828]
push str.Computer:
push eax
call fcn.00409287
mov esi, eax
add esp, 0x28
lea eax, [ebp - 0x8e8]
cmp eax, esi
je 0x404efc
mov ecx, eax
call fcn.00408c7c
push esi
lea ecx, [ebp - 0x8e8]
call fcn.00408aa5
lea ecx, [ebp - 0x828]
call fcn.00408c7c
mov edi, str.__Data_
lea eax, [ebp - 0x840]
push edi
push str._Data_NameTargetUserName_
sub esp, 0x18
mov ecx, esp
push eax
call fcn.004033c8
lea eax, [ebp - 0x828]
push str.TargetUserName:
push eax
call fcn.00409287
mov esi, eax
add esp, 0x28
lea eax, [ebp - 0x8d0]
cmp eax, esi
je 0x404f56
mov ecx, eax
call fcn.00408c7c
push esi
lea ecx, [ebp - 0x8d0]
call fcn.00408aa5
lea ecx, [ebp - 0x828]
call fcn.00408c7c
push edi
push str._Data_NameStatus_
sub esp, 0x18
lea eax, [ebp - 0x840]
mov ecx, esp
push eax
call fcn.004033c8
lea eax, [ebp - 0x828]
push eax
call fcn.004098f4
mov esi, eax
add esp, 0x24
lea eax, [ebp - 0x9f0]
cmp eax, esi
je 0x404fa6
mov ecx, eax
call fcn.00408c7c
push esi
lea ecx, [ebp - 0x9f0]
call fcn.00408aa5
lea ecx, [ebp - 0x828]
call fcn.00408c7c
push edi
push str._Data_NameSubStatus_
sub esp, 0x18
lea eax, [ebp - 0x840]
mov ecx, esp
push eax
call fcn.004033c8
lea eax, [ebp - 0x828]
push eax
call fcn.004098f4
mov esi, eax
add esp, 0x24
lea eax, [ebp - 0x9d8]
cmp eax, esi
je 0x404ff6
mov ecx, eax
call fcn.00408c7c
push esi
lea ecx, [ebp - 0x9d8]
call fcn.00408aa5
lea ecx, [ebp - 0x828]
call fcn.00408c7c
push edi
push str._Data_NameFailureReason_
sub esp, 0x18
lea eax, [ebp - 0x840]
mov ecx, esp
push eax
call fcn.004033c8
lea eax, [ebp - 0x828]
push eax
call fcn.004098f4
mov esi, eax
add esp, 0x24
lea eax, [ebp - 0x9c0]
cmp eax, esi
je 0x405046
mov ecx, eax
call fcn.00408c7c
push esi
lea ecx, [ebp - 0x9c0]
call fcn.00408aa5
lea ecx, [ebp - 0x828]
call fcn.00408c7c
lea eax, [ebp - 0x9d8]
push eax
lea eax, [ebp - 0x9f0]
push eax
lea eax, [ebp - 0x870]
push eax
lea eax, [ebp - 0x9c0]
push eax
lea eax, [ebp - 0x828]
push eax
call fcn.004041cb
mov esi, eax
add esp, 0x14
lea eax, [ebp - 0x990]
cmp eax, esi
je 0x40509b
mov ecx, eax
call fcn.00408c7c
push esi
lea ecx, [ebp - 0x990]
call fcn.00408aa5
lea ecx, [ebp - 0x828]
call fcn.00408c7c
cmp dword [ebp - 0x980], 0
je 0x40511b
lea eax, [ebp - 0x990]
push eax
lea eax, [ebp - 0xa38]
push str.Message:
push eax
call fcn.0040127a
push 0x431d3c
push eax
lea eax, [ebp - 0x828]
mov byte [ebp - 4], 0x19
push eax
call fcn.0040122a
mov esi, eax
add esp, 0x18
lea eax, [ebp - 0x8b8]
cmp eax, esi
je 0x4050ff
mov ecx, eax
call fcn.00408c7c
push esi
lea ecx, [ebp - 0x8b8]
call fcn.00408aa5
lea ecx, [ebp - 0x828]
call fcn.00408c7c
lea ecx, [ebp - 0xa38]
mov byte [ebp - 4], 0x13
call fcn.00408c7c
jmp 0x40512f
push ebx
call fcn.00412492
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x8b8]
call fcn.0040908f
push 7
pop ecx
cmp dword [ebp - 0x8a4], ecx
lea eax, [ebp - 0x8b8]
lea ebx, [ebp - 0x930]
cmova eax, dword [ebp - 0x8b8]
lea edi, [ebp - 0x948]
cmp dword [ebp - 0x8bc], ecx
lea esi, [ebp - 0x888]
mov dword [ebp - 0xa4c], eax
lea edx, [ebp - 0x870]
push dword [ebp - 0xa4c]
lea eax, [ebp - 0x8d0]
cmova eax, dword [ebp - 0x8d0]
cmp dword [ebp - 0x8d4], ecx
mov dword [ebp - 0xa70], eax
lea eax, [ebp - 0x8e8]
cmova eax, dword [ebp - 0x8e8]
cmp dword [ebp - 0x94c], ecx
push dword [ebp - 0xa70]
mov dword [ebp - 0xa74], eax
lea eax, [ebp - 0x960]
cmova eax, dword [ebp - 0x960]
cmp dword [ebp - 0x8ec], ecx
push dword [ebp - 0xa74]
mov dword [ebp - 0xa78], eax
lea eax, [ebp - 0x900]
cmova eax, dword [ebp - 0x900]
cmp dword [ebp - 0x904], ecx
push dword [ebp - 0xa78]
mov dword [ebp - 0xa7c], eax
lea eax, [ebp - 0x918]
cmova eax, dword [ebp - 0x918]
cmp dword [ebp - 0x91c], ecx
push dword [ebp - 0xa7c]
cmova ebx, dword [ebp - 0x930]
cmp dword [ebp - 0x934], ecx
mov dword [ebp - 0xa58], eax
lea eax, [ebp - 0x978]
cmova edi, dword [ebp - 0x948]
cmp dword [ebp - 0x874], ecx
push dword [ebp - 0xa58]
cmova esi, dword [ebp - 0x888]
cmp dword [ebp - 0x85c], ecx
lea ecx, [ebp - 0x8a0]
push ebx
cmova edx, dword [ebp - 0x870]
cmp dword [ebp - 0x88c], 7
push edi
cmova ecx, dword [ebp - 0x8a0]
cmp dword [ebp - 0x964], 7
push esi
cmova eax, dword [ebp - 0x978]
push edx
push ecx
push eax
push str.__s___s_s_s_s_s_s_s_s_s_s_sTHAEventLogVersion:1.3.1
lea eax, [ebp - 0x810]
push 0x400
push eax
call fcn.00402b93
lea eax, [ebp - 0x810]
push eax
call fcn.0040a9b5
add esp, 0x40
mov esi, eax
lea eax, [ebp - 0xa20]
push esi
push eax
call fcn.0040a161
push esi
call fcn.0040b13b
mov eax, dword [ebp - 0xa54]
add esp, 0xc
cmp eax, dword [0x43f150]
jbe 0x4052b6
mov dword [0x43f150], eax
cmp dword [ebp - 0xa0c], 0xf
lea eax, [ebp - 0xa20]
push 0x10
cmova eax, dword [ebp - 0xa20]
lea ecx, [ebp - 0xa48]
push ecx
xor edi, edi
push edi
push dword [ebp - 0xa10]
push eax
push dword [ebp + 0xc]
call dword [sym.imp.WS2_32.dll_sendto]
push dword [ebp - 0xa50]
call sub.wevtapi.dll_EvtClose
lea ecx, [ebp - 0xa20]
mov esi, edi
call fcn.00408c56
lea ecx, [ebp - 0x840]
call fcn.00408c7c
mov eax, dword [ebp - 0x874]
push 7
pop ebx
cmp eax, ebx
jbe 0x405360
mov ecx, dword [ebp - 0x888]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa50], eax
mov dword [ebp - 0xa4c], ecx
cmp eax, 0x1000
jb 0x405357
lea eax, [ebp - 0xa50]
push eax
lea eax, [ebp - 0xa4c]
push eax
call fcn.004063c6
mov eax, dword [ebp - 0xa50]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa4c]
push eax
push ecx
call fcn.0042ab93
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x878], edi
mov word [ebp - 0x888], ax
mov eax, dword [ebp - 0x9ac]
mov dword [ebp - 0x874], ebx
cmp eax, ebx
jbe 0x4053c9
mov ecx, dword [ebp - 0x9c0]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x4053c0
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.004063c6
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0042ab93
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x9b0], edi
mov word [ebp - 0x9c0], ax
mov eax, dword [ebp - 0x9c4]
mov dword [ebp - 0x9ac], ebx
cmp eax, ebx
jbe 0x405432
mov ecx, dword [ebp - 0x9d8]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x405429
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.004063c6
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0042ab93
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x9c8], edi
mov word [ebp - 0x9d8], ax
mov eax, dword [ebp - 0x9dc]
mov dword [ebp - 0x9c4], ebx
cmp eax, ebx
jbe 0x40549b
mov ecx, dword [ebp - 0x9f0]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x405492
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.004063c6
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0042ab93
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x9e0], edi
mov word [ebp - 0x9f0], ax
mov eax, dword [ebp - 0x97c]
mov dword [ebp - 0x9dc], ebx
cmp eax, ebx
jbe 0x405504
mov ecx, dword [ebp - 0x990]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x4054fb
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.004063c6
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0042ab93
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x980], edi
mov word [ebp - 0x990], ax
mov eax, dword [ebp - 0x88c]
mov dword [ebp - 0x97c], ebx
cmp eax, ebx
jbe 0x40556d
mov ecx, dword [ebp - 0x8a0]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x405564
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.004063c6
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0042ab93
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x890], edi
mov word [ebp - 0x8a0], ax
mov eax, dword [ebp - 0x844]
mov dword [ebp - 0x88c], ebx
cmp eax, ebx
jbe 0x4055d6
mov ecx, dword [ebp - 0x858]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x4055cd
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.004063c6
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0042ab93
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x848], edi
mov word [ebp - 0x858], ax
mov eax, dword [ebp - 0x994]
mov dword [ebp - 0x844], ebx
cmp eax, ebx
jbe 0x40563f
mov ecx, dword [ebp - 0x9a8]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x405636
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.004063c6
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0042ab93
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x998], edi
mov word [ebp - 0x9a8], ax
mov eax, dword [ebp - 0x8bc]
mov dword [ebp - 0x994], ebx
cmp eax, ebx
jbe 0x4056a8
mov ecx, dword [ebp - 0x8d0]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x40569f
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.004063c6
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0042ab93
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x8c0], edi
mov word [ebp - 0x8d0], ax
mov eax, dword [ebp - 0x8a4]
mov dword [ebp - 0x8bc], ebx
cmp eax, ebx
jbe 0x405711
mov ecx, dword [ebp - 0x8b8]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x405708
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.004063c6
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0042ab93
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x8a8], edi
mov word [ebp - 0x8b8], ax
mov eax, dword [ebp - 0x8d4]
mov dword [ebp - 0x8a4], ebx
cmp eax, ebx
jbe 0x40577a
mov ecx, dword [ebp - 0x8e8]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x405771
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.004063c6
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0042ab93
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x8d8], edi
mov word [ebp - 0x8e8], ax
mov eax, dword [ebp - 0x8ec]
mov dword [ebp - 0x8d4], ebx
cmp eax, ebx
jbe 0x4057e3
mov ecx, dword [ebp - 0x900]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x4057da
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.004063c6
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0042ab93
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x8f0], edi
mov word [ebp - 0x900], ax
mov eax, dword [ebp - 0x904]
mov dword [ebp - 0x8ec], ebx
cmp eax, ebx
jbe 0x40584c
mov ecx, dword [ebp - 0x918]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x405843
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.004063c6
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0042ab93
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x908], edi
mov word [ebp - 0x918], ax
mov eax, dword [ebp - 0x91c]
mov dword [ebp - 0x904], ebx
cmp eax, ebx
jbe 0x4058b5
mov ecx, dword [ebp - 0x930]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x4058ac
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.004063c6
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0042ab93
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x920], edi
mov word [ebp - 0x930], ax
mov eax, dword [ebp - 0x934]
mov dword [ebp - 0x91c], ebx
cmp eax, ebx
jbe 0x40591e
mov ecx, dword [ebp - 0x948]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x405915
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.004063c6
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0042ab93
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x938], edi
mov word [ebp - 0x948], ax
mov eax, dword [ebp - 0x94c]
mov dword [ebp - 0x934], ebx
cmp eax, ebx
jbe 0x405987
mov ecx, dword [ebp - 0x960]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x40597e
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.004063c6
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0042ab93
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x950], edi
mov word [ebp - 0x960], ax
mov eax, dword [ebp - 0x964]
mov dword [ebp - 0x94c], ebx
cmp eax, ebx
jbe 0x4059f0
mov ecx, dword [ebp - 0x978]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x4059e7
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.004063c6
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0042ab93
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x968], edi
mov word [ebp - 0x978], ax
mov eax, dword [ebp - 0x85c]
mov dword [ebp - 0x964], ebx
cmp eax, ebx
jbe 0x405a59
mov ecx, dword [ebp - 0x870]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x405a50
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.004063c6
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0042ab93
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa5c]
xor eax, eax
mov dword [ebp - 0x860], edi
mov dword [ebp - 0x85c], ebx
mov word [ebp - 0x870], ax
test ecx, ecx
je 0x405abd
mov eax, dword [ebp - 0xa80]
sub eax, ecx
mov dword [ebp - 0xa4c], ecx
mov dword [ebp - 0xa5c], eax
cmp eax, 0x1000
jb 0x405ab4
lea eax, [ebp - 0xa5c]
push eax
lea eax, [ebp - 0xa4c]
push eax
call fcn.004063c6
mov eax, dword [ebp - 0xa5c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa4c]
push eax
push ecx
call fcn.0042ab93
pop ecx
pop ecx
mov eax, esi
call fcn.0042ae19
ret