Function at 0x40f248
Capabilities:
Acquire debug privileges

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x54
mov dword [ebp - 4], 0
push 0x1008
call fcn.0041e71f
add esp, 4
mov dword [ebp - 8], eax
mov edi, eax
mov esi, 0x4ac9e0
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
mov ecx, 0x400
rep stosd dword es:[edi], eax
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
push 0x1c
call fcn.0041e71f
add esp, 4
mov dword [ebp - 0x20], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 7
rep stosd dword es:[edi], eax
push 0x28
call fcn.0041e71f
add esp, 4
mov dword [ebp - 0x24], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 0xa
rep stosd dword es:[edi], eax
mov dword [ebp - 0x28], 0
push 8
call fcn.0041e71f
add esp, 4
mov dword [ebp - 0x2c], eax
mov edi, eax
mov esi, 0x4abb59
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x40f329
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x40f325
imul eax, dword [ebx]
jmp 0x40f31a
mov ecx, eax
test ecx, ecx
je 0x40f3bd
push ecx
push ebx
mov ebx, dword [ebx]
push ebx
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f344
push ebx
call fcn.0041e725
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f358
push ebx
call fcn.0041e725
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f36c
push ebx
call fcn.0041e725
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f380
push ebx
call fcn.0041e725
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f394
push ebx
call fcn.0041e725
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f3a8
push ebx
call fcn.0041e725
add esp, 4
pop ebx
call fcn.0041e725
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x40f32f
call fcn.0041e725
add esp, 4
mov eax, 0x4abb59
mov ebx, dword [ebp + 8]
mov dword [ebx], eax
call fcn.0041000a
push 1
mov eax, 0x4ac9bf
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
call fcn.004100cf
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x40f3fd
push ebx
call fcn.0041e725
add esp, 4
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 4], eax
mov dword [ebp - 0x38], esp
lea eax, [ebp - 0xc]
push eax
push 0x1000
mov ebx, dword [ebp - 8]
call fcn.00401065
push ebx
mov eax, 0x2c
call fcn.0041e737
cmp dword [ebp - 0x38], esp
je 0x40f434
push 6
call fcn.0041e731
add esp, 4
fild dword [ebp - 0xc]
fstp qword [ebp - 0x3c]
fld qword [ebp - 0x3c]
fdiv qword [0x4ac9d0]
fstp qword [ebp - 0x44]
fld qword [ebp - 0x44]
call fcn.00408db7
mov dword [ebp - 0x10], eax
push dword [ebp - 0x10]
lea eax, [ebp - 0x14]
mov ebx, eax
mov ecx, 1
pop edx
push edx
push ecx
push ebx
mov dword [ebx], ecx
cmp ecx, edx
jg 0x40f9c8
mov ebx, dword [ebp - 8]
call fcn.00401065
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x40f489
push 4
call fcn.0041e731
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40f49c
push 1
call fcn.0041e731
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x38]
push dword [ebx]
call fcn.00410543
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40f4c5
push ebx
call fcn.0041e725
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push 0x4abb58
push dword [ebp - 0x18]
call fcn.0040231b
add esp, 8
cmp eax, 0
je 0x40f545
push 0x80000301
push 0
push 0x104
push 1
mov ebx, 0x41fe00
call fcn.0041e72b
add esp, 0x10
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40f517
push ebx
call fcn.0041e725
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x38], esp
push 0x104
push dword [ebp - 0x1c]
push dword [ebp - 0x18]
mov eax, 0x2d
call fcn.0041e737
cmp dword [ebp - 0x38], esp
je 0x40f545
push 6
call fcn.0041e731
add esp, 4
mov ebx, dword [ebp - 0x20]
mov dword [ebp - 0x38], ebx
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x40f567
push eax
mov ebx, eax
call fcn.00401294
inc eax
push eax
call fcn.0041e71f
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f57a
push ebx
call fcn.0041e725
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x20]
add ebx, 8
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 8]
call fcn.00401065
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x40f5a6
push 4
call fcn.0041e731
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40f5b9
push 1
call fcn.0041e731
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x3c], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x3c]
push dword [ebx]
push 1
mov ebx, 0x4205e0
call fcn.0041e72b
add esp, 0x10
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f5f8
push ebx
call fcn.0041e725
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
mov ebx, dword [ebp - 8]
call fcn.00401065
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x40f61b
push 4
call fcn.0041e731
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40f62e
push 1
call fcn.0041e731
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x38]
push dword [ebx]
call fcn.00410900
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0x24]
push ebx
call fcn.0041e725
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
add ebx, 0xc
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x24]
add ebx, 0xc
mov dword [ebp - 0x3c], ebx
mov ebx, dword [ebp - 0x3c]
fild dword [ebx]
fstp qword [ebp - 0x44]
fld qword [ebp - 0x44]
fdiv qword [0x4ac9d8]
fstp qword [ebp - 0x4c]
push 0x80000601
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push 1
mov ebx, 0x41ed70
call fcn.0041e72b
add esp, 0x10
push eax
call fcn.004109ca
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f6b9
push ebx
call fcn.0041e725
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x20]
add ebx, 0x10
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x24]
add ebx, 8
mov dword [ebp - 0x3c], ebx
mov ebx, dword [ebp - 0x3c]
fild dword [ebx]
fstp qword [ebp - 0x44]
fld qword [ebp - 0x44]
fdiv qword [0x4ac9d8]
fstp qword [ebp - 0x4c]
push 0x80000601
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push 1
mov ebx, 0x41ed70
call fcn.0041e72b
add esp, 0x10
push eax
call fcn.004109ca
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f721
push ebx
call fcn.0041e725
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
mov ebx, dword [ebp - 8]
call fcn.00401065
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x40f744
push 4
call fcn.0041e731
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40f757
push 1
call fcn.0041e731
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x3c], esp
mov ebx, dword [ebp - 0x38]
push dword [ebx]
push 0
push 0x401
mov eax, 0x2e
call fcn.0041e737
cmp dword [ebp - 0x3c], esp
je 0x40f78d
push 6
call fcn.0041e731
add esp, 4
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x20]
add ebx, 0x14
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x3c], esp
push dword [ebp - 0x28]
mov eax, 0x2f
call fcn.0041e737
cmp dword [ebp - 0x3c], esp
je 0x40f7bb
push 6
call fcn.0041e731
add esp, 4
push eax
call fcn.00410c39
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f7da
push ebx
call fcn.0041e725
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x20]
add ebx, 0x18
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x38]
mov dword [ebx], 0
mov eax, dword [0x4d8f30]
push eax
push dword [ebp - 0x18]
call fcn.0040231b
add esp, 8
cmp eax, 0
je 0x40f82d
mov eax, dword [0x4d8f34]
push eax
push dword [ebp - 0x18]
call fcn.0040231b
add esp, 8
cmp eax, 0
je 0x40f82d
mov eax, 1
jmp 0x40f82f
xor eax, eax
test eax, eax
je 0x40f875
mov ebx, dword [ebp - 0x20]
add ebx, 4
mov dword [ebp - 0x38], ebx
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x40f85c
push eax
mov ebx, eax
call fcn.00401294
inc eax
push eax
call fcn.0041e71f
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40f86f
push ebx
call fcn.0041e725
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
mov eax, dword [ebp - 0x14]
mov dword [0x4d8f38], eax
push dword [ebp + 8]
push 4
mov eax, 2
call fcn.0041e719
add esp, 8
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
mov dword [ebp - 0x3c], ebx
call fcn.00401065
mov dword [ebp - 0x40], ecx
mov edi, dword [ebp - 0x3c]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x40f8c1
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x40]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x3c]
call fcn.0041e743
add esp, 8
mov ebx, dword [ebp + 8]
mov dword [ebx], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x40]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x38]
push edi
push eax
push 0x1c
call fcn.0041e71f
add esp, 4
pop esi
mov edi, eax
push eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x40f91b
push eax
mov ebx, eax
call fcn.00401294
inc eax
push eax
call fcn.0041e71f
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x40f93a
push eax
mov ebx, eax
call fcn.00401294
inc eax
push eax
call fcn.0041e71f
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x40f959
push eax
mov ebx, eax
call fcn.00401294
inc eax
push eax
call fcn.0041e71f
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x40f978
push eax
mov ebx, eax
call fcn.00401294
inc eax
push eax
call fcn.0041e71f
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x40f997
push eax
mov ebx, eax
call fcn.00401294
inc eax
push eax
call fcn.0041e71f
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x40f9b6
push eax
mov ebx, eax
call fcn.00401294
inc eax
push eax
call fcn.0041e71f
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
pop eax
pop edi
mov dword [edi], eax
pop ebx
pop ecx
pop edx
inc ecx
jmp 0x40f45f
add esp, 0xc
push 0
mov eax, 2
mov ebx, 0x46ca80
call fcn.0041e73d
add esp, 4
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
push eax
mov ebx, dword [ebp - 0x2c]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x40fa07
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x40fa03
imul eax, dword [ebx]
jmp 0x40f9f8
mov ecx, eax
test ecx, ecx
je 0x40fa26
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x40fa1f
push ebx
push eax
call fcn.0041e725
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x40fa0d
call fcn.0041e725
add esp, 4
pop eax
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x2c]
call fcn.0040104c
xor ecx, ecx
push eax
lea eax, [ebp - 0x30]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x40fec6
mov ebx, dword [ebp - 0x2c]
call fcn.00401065
push ebx
push ecx
mov eax, dword [ebp - 0x30]
dec eax
jns 0x40fa6e
push 4
call fcn.0041e731
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40fa81
push 1
call fcn.0041e731
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x38], ebx
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x38]
mov eax, dword [ebx]
test eax, eax
jne 0x40fa9e
mov eax, 0x4abb58
push eax
push 1
mov ebx, 0x41f4a0
call fcn.0041e72b
add esp, 0x10
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x40], esp
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x3c]
mov eax, 0x30
call fcn.0041e737
cmp dword [ebp - 0x40], esp
je 0x40fada
push 6
call fcn.0041e731
add esp, 4
push dword [ebp - 0x34]
push dword [ebp + 8]
call fcn.00410cf4
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jne 0x40febe
push dword [ebp - 0x34]
call fcn.00410543
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40fb11
push ebx
call fcn.0041e725
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x38], esp
push 0x104
push dword [ebp - 0x1c]
push dword [ebp - 0x18]
mov eax, 0x2d
call fcn.0041e737
cmp dword [ebp - 0x38], esp
je 0x40fb3f
push 6
call fcn.0041e731
add esp, 4
mov ebx, dword [ebp - 0x20]
mov dword [ebp - 0x38], ebx
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x40fb61
push eax
mov ebx, eax
call fcn.00401294
inc eax
push eax
call fcn.0041e71f
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40fb74
push ebx
call fcn.0041e725
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x20]
add ebx, 4
mov dword [ebp - 0x38], ebx
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x40fb9f
push eax
mov ebx, eax
call fcn.00401294
inc eax
push eax
call fcn.0041e71f
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40fbb2
push ebx
call fcn.0041e725
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x20]
add ebx, 8
mov dword [ebp - 0x38], ebx
push 0x80000301
push 0
push dword [ebp - 0x34]
push 1
mov ebx, 0x4205e0
call fcn.0041e72b
add esp, 0x10
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40fbf6
push ebx
call fcn.0041e725
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
push dword [ebp - 0x34]
call fcn.00410900
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
push eax
mov ebx, dword [ebp - 0x24]
push ebx
call fcn.0041e725
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
add ebx, 0xc
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x24]
add ebx, 0xc
mov dword [ebp - 0x3c], ebx
mov ebx, dword [ebp - 0x3c]
fild dword [ebx]
fstp qword [ebp - 0x44]
fld qword [ebp - 0x44]
fdiv qword [0x4ac9d8]
fstp qword [ebp - 0x4c]
push 0x80000601
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push 1
mov ebx, 0x41ed70
call fcn.0041e72b
add esp, 0x10
push eax
call fcn.004109ca
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40fc7d
push ebx
call fcn.0041e725
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x20]
add ebx, 0x10
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x24]
add ebx, 8
mov dword [ebp - 0x3c], ebx
mov ebx, dword [ebp - 0x3c]
fild dword [ebx]
fstp qword [ebp - 0x44]
fld qword [ebp - 0x44]
fdiv qword [0x4ac9d8]
fstp qword [ebp - 0x4c]
push 0x80000601
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push 1
mov ebx, 0x41ed70
call fcn.0041e72b
add esp, 0x10
push eax
call fcn.004109ca
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40fce5
push ebx
call fcn.0041e725
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
mov dword [ebp - 0x38], esp
push dword [ebp - 0x34]
push 0
push 0x401
mov eax, 0x2e
call fcn.0041e737
cmp dword [ebp - 0x38], esp
je 0x40fd17
push 6
call fcn.0041e731
add esp, 4
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x20]
add ebx, 0x14
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x3c], esp
push dword [ebp - 0x28]
mov eax, 0x2f
call fcn.0041e737
cmp dword [ebp - 0x3c], esp
je 0x40fd45
push 6
call fcn.0041e731
add esp, 4
push eax
call fcn.00410c39
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40fd64
push ebx
call fcn.0041e725
add esp, 4
pop eax
mov ebx, dword [ebp - 0x38]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x20]
add ebx, 0x18
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x38]
mov dword [ebx], 1
push dword [ebp + 8]
push 4
mov eax, 2
call fcn.0041e719
add esp, 8
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
mov dword [ebp - 0x3c], ebx
call fcn.00401065
mov dword [ebp - 0x40], ecx
mov edi, dword [ebp - 0x3c]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x40fdc0
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x40]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x3c]
call fcn.0041e743
add esp, 8
mov ebx, dword [ebp + 8]
mov dword [ebx], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x40]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x38]
push edi
push eax
push 0x1c
call fcn.0041e71f
add esp, 4
pop esi
mov edi, eax
push eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x40fe1a
push eax
mov ebx, eax
call fcn.00401294
inc eax
push eax
call fcn.0041e71f
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x40fe39
push eax
mov ebx, eax
call fcn.00401294
inc eax
push eax
call fcn.0041e71f
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x40fe58
push eax
mov ebx, eax
call fcn.00401294
inc eax
push eax
call fcn.0041e71f
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x40fe77
push eax
mov ebx, eax
call fcn.00401294
inc eax
push eax
call fcn.0041e71f
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x40fe96
push eax
mov ebx, eax
call fcn.00401294
inc eax
push eax
call fcn.0041e71f
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x40feb5
push eax
mov ebx, eax
call fcn.00401294
inc eax
push eax
call fcn.0041e71f
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
pop eax
pop edi
mov dword [edi], eax
pop eax
pop ebx
pop ecx
jmp 0x40fa43
add esp, 0xc
cmp dword [ebp - 4], 0
je 0x40fef5
mov dword [ebp - 0x38], esp
push dword [ebp - 4]
mov eax, 0x31
call fcn.0041e737
cmp dword [ebp - 0x38], esp
je 0x40fef5
push 6
call fcn.0041e731
add esp, 4
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
call fcn.0040104c
jmp 0x40ff04
push eax
mov ebx, dword [ebp - 8]
push ebx
call fcn.0041e725
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40ff21
push ebx
call fcn.0041e725
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40ff31
push ebx
call fcn.0041e725
add esp, 4
mov ebx, dword [ebp - 0x20]
push ebx
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x40ff45
push ebx
call fcn.0041e725
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x40ff59
push ebx
call fcn.0041e725
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x40ff6d
push ebx
call fcn.0041e725
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x40ff81
push ebx
call fcn.0041e725
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x40ff95
push ebx
call fcn.0041e725
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x40ffa9
push ebx
call fcn.0041e725
add esp, 4
pop ebx
call fcn.0041e725
add esp, 4
mov ebx, dword [ebp - 0x24]
push ebx
call fcn.0041e725
add esp, 4
mov ebx, dword [ebp - 0x2c]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x40ffdc
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x40ffd8
imul eax, dword [ebx]
jmp 0x40ffcd
mov ecx, eax
test ecx, ecx
je 0x40fffb
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x40fff4
push ebx
push eax
call fcn.0041e725
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x40ffe2
call fcn.0041e725
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 4