Function at 0x4042ce
Capabilities:
Send data
Send data on socket

Disassembly:
push 0xa7c
mov eax, 0x40b779
call fcn.0040a84b
mov ecx, dword [ebp + 8]
lea esi, [ebp + 0x10]
lea edi, [ebp - 0xa48]
mov dword [ebp - 0xa50], ecx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
xor esi, esi
mov ebx, esi
mov dword [ebp - 0xa60], esi
mov dword [ebp - 0xa6c], esi
mov dword [ebp - 0xa68], esi
mov dword [ebp - 0xa5c], ebx
mov dword [ebp - 0xa88], ebx
mov dword [ebp - 0xa84], esi
mov dword [ebp - 0xa80], esi
xor eax, eax
mov dword [ebp - 4], esi
lea edi, [ebp - 0x870]
stosd dword es:[edi], eax
push 7
pop edx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x860], esi
mov dword [ebp - 0x85c], edx
mov word [ebp - 0x870], ax
lea edi, [ebp - 0x978]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x968], esi
mov dword [ebp - 0x964], edx
mov word [ebp - 0x978], ax
lea edi, [ebp - 0x960]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x950], esi
mov dword [ebp - 0x94c], edx
mov word [ebp - 0x960], ax
lea edi, [ebp - 0x948]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x938], esi
mov dword [ebp - 0x934], edx
mov word [ebp - 0x948], ax
lea edi, [ebp - 0x930]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x920], esi
mov dword [ebp - 0x91c], edx
mov word [ebp - 0x930], ax
lea edi, [ebp - 0x918]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x908], esi
mov dword [ebp - 0x904], edx
mov word [ebp - 0x918], ax
lea edi, [ebp - 0x900]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x8f0], esi
mov dword [ebp - 0x8ec], edx
mov word [ebp - 0x900], ax
lea edi, [ebp - 0x8e8]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x8d8], esi
mov dword [ebp - 0x8d4], edx
mov word [ebp - 0x8e8], ax
lea edi, [ebp - 0x8b8]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x8a8], esi
mov dword [ebp - 0x8a4], edx
mov word [ebp - 0x8b8], ax
lea edi, [ebp - 0x8d0]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x8c0], esi
mov dword [ebp - 0x8bc], edx
mov word [ebp - 0x8d0], ax
lea edi, [ebp - 0x9a8]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x998], esi
mov dword [ebp - 0x994], edx
mov word [ebp - 0x9a8], ax
lea edi, [ebp - 0x858]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x848], esi
mov dword [ebp - 0x844], edx
mov word [ebp - 0x858], ax
lea edi, [ebp - 0x8a0]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x890], esi
mov dword [ebp - 0x88c], edx
mov word [ebp - 0x8a0], ax
lea edi, [ebp - 0x990]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x980], esi
mov dword [ebp - 0x97c], edx
mov word [ebp - 0x990], ax
lea edi, [ebp - 0x9f0]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x9e0], esi
mov dword [ebp - 0x9dc], edx
mov word [ebp - 0x9f0], ax
lea edi, [ebp - 0x9d8]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x9c8], esi
mov dword [ebp - 0x9c4], edx
mov word [ebp - 0x9d8], ax
lea edi, [ebp - 0x9c0]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x9b0], esi
mov dword [ebp - 0x9ac], edx
mov word [ebp - 0x9c0], ax
lea edi, [ebp - 0x888]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x878], esi
mov dword [ebp - 0x874], edx
mov word [ebp - 0x888], ax
lea eax, [ebp - 0xa68]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0xa60]
push eax
push esi
push esi
push 1
push ecx
push esi
call sub.wevtapi.dll_EvtRender
test eax, eax
jne 0x404583
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x4045d9
lea eax, [ebp - 0xa61]
push eax
push dword [ebp - 0xa60]
lea ecx, [ebp - 0xa88]
call fcn.0040273d
mov ebx, dword [ebp - 0xa88]
lea eax, [ebp - 0xa68]
mov esi, dword [ebp - 0xa50]
xor edi, edi
push eax
lea eax, [ebp - 0xa6c]
mov dword [ebp - 0xa5c], ebx
push eax
push ebx
push dword [ebp - 0xa60]
push 1
push esi
push edi
call sub.wevtapi.dll_EvtRender
test eax, eax
jne 0x4045e3
push esi
call sub.wevtapi.dll_EvtClose
jmp 0x4045db
xor edi, edi
or esi, 0xffffffff
jmp 0x404f63
mov ecx, dword [ebp - 0xa6c]
lea edi, [ebp - 0x840]
xor eax, eax
shr ecx, 1
stosd dword es:[edi], eax
push ecx
push ebx
lea ecx, [ebp - 0x840]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
and dword [ebp - 0x830], 0
and dword [ebp - 0x82c], 0
call fcn.0040161d
push 2
sub esp, 0x18
mov byte [ebp - 4], 0x13
mov ecx, esp
push str._Provider_Name______.__1
call fcn.0040358b
lea eax, [ebp - 0x840]
push eax
lea eax, [ebp - 0xa08]
push eax
call fcn.00408f51
mov esi, eax
add esp, 0x24
lea eax, [ebp - 0x9a8]
cmp eax, esi
je 0x40465c
mov ecx, eax
call fcn.004085b3
push esi
lea ecx, [ebp - 0x9a8]
call fcn.00408434
lea ecx, [ebp - 0xa08]
call fcn.004085b3
push 2
sub esp, 0x18
mov ecx, esp
push str.Guid______.__1
call fcn.0040358b
lea eax, [ebp - 0x840]
push eax
lea eax, [ebp - 0xa08]
push eax
call fcn.00408f51
mov esi, eax
add esp, 0x24
lea eax, [ebp - 0x858]
cmp eax, esi
je 0x4046ad
mov ecx, eax
call fcn.004085b3
push esi
lea ecx, [ebp - 0x858]
call fcn.00408434
lea ecx, [ebp - 0xa08]
call fcn.004085b3
cmp dword [ebp - 0x998], 0
mov edi, 0x40c374
mov esi, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
jne 0x4046eb
cmp dword [ebp - 0x848], 0
jne 0x4046eb
push edi
call esi
pop ecx
push eax
push edi
lea ecx, [ebp - 0x8a0]
call fcn.0040896d
jmp 0x40479b
lea eax, [ebp - 0x9a8]
push eax
lea eax, [ebp - 0x828]
push 0x40cc90
push eax
call fcn.004011dc
add esp, 0xc
mov ecx, eax
cmp dword [ebp - 0x844], 7
lea eax, [ebp - 0x858]
push dword [ebp - 0x848]
cmova eax, dword [ebp - 0x858]
push eax
mov byte [ebp - 4], 0x14
call fcn.00408912
push eax
lea ecx, [ebp - 0xa08]
call fcn.004034dd
push 0x40cc8c
lea eax, [ebp - 0xa08]
mov byte [ebp - 4], 0x15
push eax
lea eax, [ebp - 0xa38]
push eax
call fcn.0040118a
mov edi, eax
add esp, 0xc
lea eax, [ebp - 0x8a0]
cmp eax, edi
je 0x404776
mov ecx, eax
call fcn.004085b3
push edi
lea ecx, [ebp - 0x8a0]
call fcn.00408434
lea ecx, [ebp - 0xa38]
call fcn.004085b3
lea ecx, [ebp - 0xa08]
call fcn.004085b3
lea ecx, [ebp - 0x828]
mov byte [ebp - 4], 0x13
call fcn.004085b3
push 1
sub esp, 0x18
mov ecx, esp
push str._EventID_____.____EventID_
call fcn.0040358b
lea eax, [ebp - 0x840]
push eax
lea eax, [ebp - 0x828]
push str.EventID:
push eax
call fcn.00408a48
mov edi, eax
add esp, 0x28
lea eax, [ebp - 0x870]
cmp eax, edi
je 0x4047e6
mov ecx, eax
call fcn.004085b3
push edi
lea ecx, [ebp - 0x870]
call fcn.00408434
lea ecx, [ebp - 0x828]
call fcn.004085b3
push str.__Version_
push str._Version_
sub esp, 0x18
lea eax, [ebp - 0x840]
mov ecx, esp
push eax
call fcn.00403504
lea eax, [ebp - 0x828]
push str.Version:
push eax
call fcn.00408afd
mov edi, eax
add esp, 0x28
lea eax, [ebp - 0x948]
cmp eax, edi
je 0x40483f
mov ecx, eax
call fcn.004085b3
push edi
lea ecx, [ebp - 0x948]
call fcn.00408434
lea ecx, [ebp - 0x828]
call fcn.004085b3
push str.__Level_
push str._Level_
sub esp, 0x18
lea eax, [ebp - 0x840]
mov ecx, esp
push eax
call fcn.00403504
lea eax, [ebp - 0x828]
push eax
call fcn.00408ea4
mov edi, eax
add esp, 0x24
lea eax, [ebp - 0x978]
cmp eax, edi
je 0x404893
mov ecx, eax
call fcn.004085b3
push edi
lea ecx, [ebp - 0x978]
call fcn.00408434
lea ecx, [ebp - 0x828]
call fcn.004085b3
push str.__Task_
push str._Task_
sub esp, 0x18
lea eax, [ebp - 0x840]
mov ecx, esp
push eax
call fcn.00403504
lea eax, [ebp - 0x828]
push str.Task:
push eax
call fcn.00408afd
mov edi, eax
add esp, 0x28
lea eax, [ebp - 0x930]
cmp eax, edi
je 0x4048ec
mov ecx, eax
call fcn.004085b3
push edi
lea ecx, [ebp - 0x930]
call fcn.00408434
lea ecx, [ebp - 0x828]
call fcn.004085b3
push str.__Opcode_
push str._Opcode_
sub esp, 0x18
lea eax, [ebp - 0x840]
mov ecx, esp
push eax
call fcn.00403504
lea eax, [ebp - 0x828]
push str.Opcode:
push eax
call fcn.00408afd
mov edi, eax
add esp, 0x28
lea eax, [ebp - 0x918]
cmp eax, edi
je 0x404945
mov ecx, eax
call fcn.004085b3
push edi
lea ecx, [ebp - 0x918]
call fcn.00408434
lea ecx, [ebp - 0x828]
call fcn.004085b3
push str.__Keywords_
push str._Keywords_
sub esp, 0x18
lea eax, [ebp - 0x840]
mov ecx, esp
push eax
call fcn.00403504
lea eax, [ebp - 0x828]
push str.Keywords:
push eax
call fcn.00408afd
mov edi, eax
add esp, 0x28
lea eax, [ebp - 0x900]
cmp eax, edi
je 0x40499e
mov ecx, eax
call fcn.004085b3
push edi
lea ecx, [ebp - 0x900]
call fcn.00408434
lea ecx, [ebp - 0x828]
call fcn.004085b3
push 0x40ce00
push str._TimeCreated_SystemTime
sub esp, 0x18
lea eax, [ebp - 0x840]
mov ecx, esp
push eax
call fcn.00403504
lea eax, [ebp - 0x828]
push str.Timestamp:
push eax
call fcn.00408afd
mov edi, eax
add esp, 0x28
lea eax, [ebp - 0x960]
cmp eax, edi
je 0x4049f7
mov ecx, eax
call fcn.004085b3
push edi
lea ecx, [ebp - 0x960]
call fcn.00408434
lea ecx, [ebp - 0x828]
call fcn.004085b3
push 0xa
push 0
push str.__EventRecordID_
push str._EventRecordID_
sub esp, 0x18
lea eax, [ebp - 0x840]
mov ecx, esp
push eax
call fcn.00403504
lea eax, [ebp - 0x828]
push eax
call fcn.00408ea4
add esp, 0x24
push eax
mov byte [ebp - 4], 0x16
call fcn.00409ba2
add esp, 0xc
mov byte [ebp - 4], 0x13
mov ebx, eax
lea ecx, [ebp - 0x828]
mov dword [ebp - 0xa54], ebx
call fcn.004085b3
test ebx, ebx
je 0x404ae9
lea eax, [ebp - 0xa08]
push ebx
push eax
call fcn.00402b71
lea eax, [ebp - 0xa08]
mov byte [ebp - 4], 0x17
push eax
lea eax, [ebp - 0xa38]
push str.EventRecordID:
push eax
call fcn.004011b2
push 0x40cc8c
push eax
lea eax, [ebp - 0x828]
mov byte [ebp - 4], 0x18
push eax
call fcn.0040118a
mov edi, eax
add esp, 0x20
lea eax, [ebp - 0x888]
cmp eax, edi
je 0x404abd
mov ecx, eax
call fcn.004085b3
push edi
lea ecx, [ebp - 0x888]
call fcn.00408434
lea ecx, [ebp - 0x828]
call fcn.004085b3
lea ecx, [ebp - 0xa38]
call fcn.004085b3
lea ecx, [ebp - 0xa08]
mov byte [ebp - 4], 0x13
call fcn.004085b3
mov ebx, 0x40c374
jmp 0x404aff
mov ebx, 0x40c374
push ebx
call esi
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x888]
call fcn.0040896d
push str.__Computer_
push str._Computer_
sub esp, 0x18
lea eax, [ebp - 0x840]
mov ecx, esp
push eax
call fcn.00403504
lea eax, [ebp - 0x828]
push str.Computer:
push eax
call fcn.00408afd
mov edi, eax
add esp, 0x28
lea eax, [ebp - 0x8e8]
cmp eax, edi
je 0x404b4d
mov ecx, eax
call fcn.004085b3
push edi
lea ecx, [ebp - 0x8e8]
call fcn.00408434
lea ecx, [ebp - 0x828]
call fcn.004085b3
push str.__Data_
push str._Data_NameTargetUserName_
sub esp, 0x18
lea eax, [ebp - 0x840]
mov ecx, esp
push eax
call fcn.00403504
lea eax, [ebp - 0x828]
push str.TargetUserName:
push eax
call fcn.00408afd
mov edi, eax
add esp, 0x28
lea eax, [ebp - 0x8d0]
cmp eax, edi
je 0x404ba6
mov ecx, eax
call fcn.004085b3
push edi
lea ecx, [ebp - 0x8d0]
call fcn.00408434
lea ecx, [ebp - 0x828]
call fcn.004085b3
push str.__Data_
push str._Data_NameStatus_
sub esp, 0x18
lea eax, [ebp - 0x840]
mov ecx, esp
push eax
call fcn.00403504
lea eax, [ebp - 0x828]
push eax
call fcn.00408ea4
mov edi, eax
add esp, 0x24
lea eax, [ebp - 0x9f0]
cmp eax, edi
je 0x404bfa
mov ecx, eax
call fcn.004085b3
push edi
lea ecx, [ebp - 0x9f0]
call fcn.00408434
lea ecx, [ebp - 0x828]
call fcn.004085b3
push str.__Data_
push str._Data_NameSubStatus_
sub esp, 0x18
lea eax, [ebp - 0x840]
mov ecx, esp
push eax
call fcn.00403504
lea eax, [ebp - 0x828]
push eax
call fcn.00408ea4
mov edi, eax
add esp, 0x24
lea eax, [ebp - 0x9d8]
cmp eax, edi
je 0x404c4e
mov ecx, eax
call fcn.004085b3
push edi
lea ecx, [ebp - 0x9d8]
call fcn.00408434
lea ecx, [ebp - 0x828]
call fcn.004085b3
push str.__Data_
push str._Data_NameFailureReason_
sub esp, 0x18
lea eax, [ebp - 0x840]
mov ecx, esp
push eax
call fcn.00403504
lea eax, [ebp - 0x828]
push eax
call fcn.00408ea4
mov edi, eax
add esp, 0x24
lea eax, [ebp - 0x9c0]
cmp eax, edi
je 0x404ca2
mov ecx, eax
call fcn.004085b3
push edi
lea ecx, [ebp - 0x9c0]
call fcn.00408434
lea ecx, [ebp - 0x828]
call fcn.004085b3
lea eax, [ebp - 0x9d8]
push eax
lea eax, [ebp - 0x9f0]
push eax
lea eax, [ebp - 0x870]
push eax
lea eax, [ebp - 0x9c0]
push eax
lea eax, [ebp - 0x828]
push eax
call fcn.00403e76
mov edi, eax
add esp, 0x14
lea eax, [ebp - 0x990]
cmp eax, edi
je 0x404cf7
mov ecx, eax
call fcn.004085b3
push edi
lea ecx, [ebp - 0x990]
call fcn.00408434
lea ecx, [ebp - 0x828]
call fcn.004085b3
cmp dword [ebp - 0x980], 0
je 0x404d77
lea eax, [ebp - 0x990]
push eax
lea eax, [ebp - 0xa38]
push str.Message:
push eax
call fcn.004011dc
push 0x40cc8c
push eax
lea eax, [ebp - 0x828]
mov byte [ebp - 4], 0x19
push eax
call fcn.0040118a
mov esi, eax
add esp, 0x18
lea eax, [ebp - 0x8b8]
cmp eax, esi
je 0x404d5b
mov ecx, eax
call fcn.004085b3
push esi
lea ecx, [ebp - 0x8b8]
call fcn.00408434
lea ecx, [ebp - 0x828]
call fcn.004085b3
lea ecx, [ebp - 0xa38]
mov byte [ebp - 4], 0x13
call fcn.004085b3
jmp 0x404d88
push ebx
call esi
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x8b8]
call fcn.0040896d
push 7
pop ecx
cmp dword [ebp - 0x8a4], ecx
lea eax, [ebp - 0x8b8]
lea ebx, [ebp - 0x930]
cmova eax, dword [ebp - 0x8b8]
lea edi, [ebp - 0x948]
cmp dword [ebp - 0x8bc], ecx
lea esi, [ebp - 0x888]
mov dword [ebp - 0xa4c], eax
lea edx, [ebp - 0x870]
push dword [ebp - 0xa4c]
lea eax, [ebp - 0x8d0]
cmova eax, dword [ebp - 0x8d0]
cmp dword [ebp - 0x8d4], ecx
mov dword [ebp - 0xa70], eax
lea eax, [ebp - 0x8e8]
cmova eax, dword [ebp - 0x8e8]
cmp dword [ebp - 0x94c], ecx
push dword [ebp - 0xa70]
mov dword [ebp - 0xa74], eax
lea eax, [ebp - 0x960]
cmova eax, dword [ebp - 0x960]
cmp dword [ebp - 0x8ec], ecx
push dword [ebp - 0xa74]
mov dword [ebp - 0xa78], eax
lea eax, [ebp - 0x900]
cmova eax, dword [ebp - 0x900]
cmp dword [ebp - 0x904], ecx
push dword [ebp - 0xa78]
mov dword [ebp - 0xa7c], eax
lea eax, [ebp - 0x918]
cmova eax, dword [ebp - 0x918]
cmp dword [ebp - 0x91c], ecx
push dword [ebp - 0xa7c]
cmova ebx, dword [ebp - 0x930]
cmp dword [ebp - 0x934], ecx
mov dword [ebp - 0xa58], eax
lea eax, [ebp - 0x978]
cmova edi, dword [ebp - 0x948]
cmp dword [ebp - 0x874], ecx
push dword [ebp - 0xa58]
cmova esi, dword [ebp - 0x888]
cmp dword [ebp - 0x85c], ecx
lea ecx, [ebp - 0x8a0]
push ebx
cmova edx, dword [ebp - 0x870]
cmp dword [ebp - 0x88c], 7
push edi
cmova ecx, dword [ebp - 0x8a0]
cmp dword [ebp - 0x964], 7
push esi
cmova eax, dword [ebp - 0x978]
push edx
push ecx
push eax
push str.__s___s_s_s_s_s_s_s_s_s_s_sTHAEventLogVersion:1.3.1
lea eax, [ebp - 0x810]
push 0x400
push eax
call fcn.00402d86
lea eax, [ebp - 0x810]
push eax
call fcn.00409edf
add esp, 0x40
mov esi, eax
lea eax, [ebp - 0xa20]
push esi
push eax
call fcn.00409863
push esi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov eax, dword [ebp - 0xa54]
add esp, 0xc
cmp eax, dword [0x410360]
jbe 0x404f10
mov dword [0x410360], eax
cmp dword [ebp - 0xa0c], 0xf
lea eax, [ebp - 0xa20]
push 0x10
cmova eax, dword [ebp - 0xa20]
lea ecx, [ebp - 0xa48]
push ecx
xor edi, edi
push edi
push dword [ebp - 0xa10]
push eax
push dword [ebp + 0xc]
call dword [sym.imp.WS2_32.dll_sendto]
push dword [ebp - 0xa50]
call sub.wevtapi.dll_EvtClose
lea ecx, [ebp - 0xa20]
mov esi, edi
call fcn.0040858d
lea ecx, [ebp - 0x840]
call fcn.004085b3
mov eax, dword [ebp - 0x874]
push 7
pop ebx
cmp eax, ebx
jbe 0x404fba
mov ecx, dword [ebp - 0x888]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa50], eax
mov dword [ebp - 0xa4c], ecx
cmp eax, 0x1000
jb 0x404fb1
lea eax, [ebp - 0xa50]
push eax
lea eax, [ebp - 0xa4c]
push eax
call fcn.00406025
mov eax, dword [ebp - 0xa50]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa4c]
push eax
push ecx
call fcn.0040a588
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x878], edi
mov word [ebp - 0x888], ax
mov eax, dword [ebp - 0x9ac]
mov dword [ebp - 0x874], ebx
cmp eax, ebx
jbe 0x405023
mov ecx, dword [ebp - 0x9c0]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x40501a
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.00406025
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0040a588
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x9b0], edi
mov word [ebp - 0x9c0], ax
mov eax, dword [ebp - 0x9c4]
mov dword [ebp - 0x9ac], ebx
cmp eax, ebx
jbe 0x40508c
mov ecx, dword [ebp - 0x9d8]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x405083
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.00406025
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0040a588
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x9c8], edi
mov word [ebp - 0x9d8], ax
mov eax, dword [ebp - 0x9dc]
mov dword [ebp - 0x9c4], ebx
cmp eax, ebx
jbe 0x4050f5
mov ecx, dword [ebp - 0x9f0]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x4050ec
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.00406025
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0040a588
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x9e0], edi
mov word [ebp - 0x9f0], ax
mov eax, dword [ebp - 0x97c]
mov dword [ebp - 0x9dc], ebx
cmp eax, ebx
jbe 0x40515e
mov ecx, dword [ebp - 0x990]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x405155
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.00406025
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0040a588
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x980], edi
mov word [ebp - 0x990], ax
mov eax, dword [ebp - 0x88c]
mov dword [ebp - 0x97c], ebx
cmp eax, ebx
jbe 0x4051c7
mov ecx, dword [ebp - 0x8a0]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x4051be
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.00406025
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0040a588
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x890], edi
mov word [ebp - 0x8a0], ax
mov eax, dword [ebp - 0x844]
mov dword [ebp - 0x88c], ebx
cmp eax, ebx
jbe 0x405230
mov ecx, dword [ebp - 0x858]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x405227
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.00406025
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0040a588
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x848], edi
mov word [ebp - 0x858], ax
mov eax, dword [ebp - 0x994]
mov dword [ebp - 0x844], ebx
cmp eax, ebx
jbe 0x405299
mov ecx, dword [ebp - 0x9a8]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x405290
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.00406025
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0040a588
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x998], edi
mov word [ebp - 0x9a8], ax
mov eax, dword [ebp - 0x8bc]
mov dword [ebp - 0x994], ebx
cmp eax, ebx
jbe 0x405302
mov ecx, dword [ebp - 0x8d0]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x4052f9
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.00406025
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0040a588
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x8c0], edi
mov word [ebp - 0x8d0], ax
mov eax, dword [ebp - 0x8a4]
mov dword [ebp - 0x8bc], ebx
cmp eax, ebx
jbe 0x40536b
mov ecx, dword [ebp - 0x8b8]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x405362
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.00406025
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0040a588
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x8a8], edi
mov word [ebp - 0x8b8], ax
mov eax, dword [ebp - 0x8d4]
mov dword [ebp - 0x8a4], ebx
cmp eax, ebx
jbe 0x4053d4
mov ecx, dword [ebp - 0x8e8]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x4053cb
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.00406025
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0040a588
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x8d8], edi
mov word [ebp - 0x8e8], ax
mov eax, dword [ebp - 0x8ec]
mov dword [ebp - 0x8d4], ebx
cmp eax, ebx
jbe 0x40543d
mov ecx, dword [ebp - 0x900]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x405434
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.00406025
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0040a588
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x8f0], edi
mov word [ebp - 0x900], ax
mov eax, dword [ebp - 0x904]
mov dword [ebp - 0x8ec], ebx
cmp eax, ebx
jbe 0x4054a6
mov ecx, dword [ebp - 0x918]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x40549d
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.00406025
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0040a588
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x908], edi
mov word [ebp - 0x918], ax
mov eax, dword [ebp - 0x91c]
mov dword [ebp - 0x904], ebx
cmp eax, ebx
jbe 0x40550f
mov ecx, dword [ebp - 0x930]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x405506
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.00406025
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0040a588
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x920], edi
mov word [ebp - 0x930], ax
mov eax, dword [ebp - 0x934]
mov dword [ebp - 0x91c], ebx
cmp eax, ebx
jbe 0x405578
mov ecx, dword [ebp - 0x948]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x40556f
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.00406025
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0040a588
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x938], edi
mov word [ebp - 0x948], ax
mov eax, dword [ebp - 0x94c]
mov dword [ebp - 0x934], ebx
cmp eax, ebx
jbe 0x4055e1
mov ecx, dword [ebp - 0x960]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x4055d8
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.00406025
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0040a588
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x950], edi
mov word [ebp - 0x960], ax
mov eax, dword [ebp - 0x964]
mov dword [ebp - 0x94c], ebx
cmp eax, ebx
jbe 0x40564a
mov ecx, dword [ebp - 0x978]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x405641
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.00406025
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0040a588
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x968], edi
mov word [ebp - 0x978], ax
mov eax, dword [ebp - 0x85c]
mov dword [ebp - 0x964], ebx
cmp eax, ebx
jbe 0x4056b3
mov ecx, dword [ebp - 0x870]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa50], ecx
cmp eax, 0x1000
jb 0x4056aa
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa50]
push eax
call fcn.00406025
mov eax, dword [ebp - 0xa4c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa50]
push eax
push ecx
call fcn.0040a588
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa5c]
xor eax, eax
mov dword [ebp - 0x860], edi
mov dword [ebp - 0x85c], ebx
mov word [ebp - 0x870], ax
test ecx, ecx
je 0x405717
mov eax, dword [ebp - 0xa80]
sub eax, ecx
mov dword [ebp - 0xa4c], ecx
mov dword [ebp - 0xa5c], eax
cmp eax, 0x1000
jb 0x40570e
lea eax, [ebp - 0xa5c]
push eax
lea eax, [ebp - 0xa4c]
push eax
call fcn.00406025
mov eax, dword [ebp - 0xa5c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa4c]
push eax
push ecx
call fcn.0040a588
pop ecx
pop ecx
mov eax, esi
call fcn.0040a809
ret