Function at 0x40dee8
Capabilities:
Get disk size

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffea4
push ebx
push esi
push edi
mov dword [ebp - 0x124], eax
mov eax, 0x534ed4
call fcn.00524684
mov word [ebp - 0x110], 8
xor edx, edx
xor ecx, ecx
mov dword [ebp - 0xc], edx
xor eax, eax
inc dword [ebp - 0x104]
xor edx, edx
mov word [ebp - 0x110], 0x14
mov word [ebp - 0x110], 0x20
mov dword [ebp - 0x10], ecx
inc dword [ebp - 0x104]
mov word [ebp - 0x110], 0x14
mov dword [ebp - 0x130], 0x400000
mov dword [ebp - 0x12c], 0
mov word [ebp - 0x110], 0x2c
mov dword [ebp - 0x14], eax
inc dword [ebp - 0x104]
mov word [ebp - 0x110], 0x14
mov word [ebp - 0x110], 0x38
mov dword [ebp - 0x18], edx
inc dword [ebp - 0x104]
mov word [ebp - 0x110], 0x14
mov word [ebp - 0x110], 0x44
mov ebx, dword [ebp - 0x124]
push 1
add ebx, 0x28
push ebx
call fcn.0052ef9c
add esp, 8
mov eax, ebx
call fcn.0052f52c
mov edx, dword [ebx]
lea eax, [ebp - 0x1c]
mov dl, byte [edx]
call fcn.0052f164
inc dword [ebp - 0x104]
xor ecx, ecx
mov word [ebp - 0x110], 0x14
mov word [ebp - 0x110], 0x50
mov dword [ebp - 0x20], ecx
xor eax, eax
inc dword [ebp - 0x104]
lea edx, [ebp - 0x24]
mov word [ebp - 0x110], 0x14
mov word [ebp - 0x110], 0x5c
mov dword [ebp - 0x24], eax
mov eax, 0x43c
inc dword [ebp - 0x104]
call fcn.0041cc78
lea edx, [ebp - 0x24]
lea eax, [ebp - 0x10]
call fcn.0052f364
dec dword [ebp - 0x104]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.0052f334
push 2
push 0
lea ecx, [ebp - 0x13a]
push ecx
call fcn.00524368
add esp, 0xc
lea eax, [ebp - 0x13a]
or byte [ebp - 0x139], 8
mov cx, word [eax]
mov edx, dword [0x55ad00]
mov eax, dword [edx]
mov edx, dword [ebp - 0x10]
call fcn.00402ad0
mov ecx, dword [0x55ad00]
mov eax, dword [ecx]
call fcn.00402f50
mov byte [ebp - 0x125], 1
mov edx, dword [ebp - 0x124]
mov eax, dword [edx + 0x6c]
mov edx, dword [ebp - 0x124]
add eax, dword [edx + 0x70]
xor edx, edx
add dword [ebp - 0x130], eax
adc dword [ebp - 0x12c], edx
mov edx, 0x53231e
mov word [ebp - 0x110], 0x68
lea eax, [ebp - 0x28]
call fcn.0052f020
inc dword [ebp - 0x104]
xor eax, eax
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x1c]
inc dword [ebp - 0x104]
lea edx, [ebp - 0x28]
lea ecx, [ebp - 0x2c]
call fcn.0052f38c
lea edx, [ebp - 0x2c]
lea eax, [ebp - 0x1c]
call fcn.0052f364
dec dword [ebp - 0x104]
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.0052f334
dec dword [ebp - 0x104]
lea eax, [ebp - 0x28]
mov edx, 2
call fcn.0052f334
cmp dword [ebp - 0x1c], 0
je 0x40e0ff
mov ebx, dword [ebp - 0x1c]
jmp 0x40e104
mov ebx, 0x532321
push 0
lea eax, [ebp - 0x138]
push 0
push eax
push ebx
call sub.KERNEL32.DLL_GetDiskFreeSpaceExA
test eax, eax
je 0x40e122
mov byte [ebp - 0x125], 1
jmp 0x40e136
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 0
mov word [ebp - 0x110], 0x74
xor edx, edx
mov eax, 0x442
mov dword [ebp - 0x30], edx
lea edx, [ebp - 0x30]
inc dword [ebp - 0x104]
call fcn.0041cc78
lea ecx, [ebp - 0x30]
mov eax, dword [ecx]
push eax
push 2
push 0
lea edx, [ebp - 0x13c]
push edx
call fcn.00524368
add esp, 0xc
lea ecx, [ebp - 0x13c]
or byte [ebp - 0x13b], 8
mov eax, dword [0x55ad00]
pop edx
mov cx, word [ecx]
mov eax, dword [eax]
call fcn.00402ad0
dec dword [ebp - 0x104]
lea eax, [ebp - 0x30]
mov edx, 2
call fcn.0052f334
mov word [ebp - 0x110], 0x80
push 0
mov dl, 1
mov ecx, dword [ebp - 0x124]
mov eax, dword [0x494058]
mov ecx, dword [ecx + 0x34]
call fcn.00498e10
mov edi, eax
mov eax, edi
call fcn.00498928
add dword [ebp - 0x130], eax
adc dword [ebp - 0x12c], edx
mov ebx, edi
mov dword [ebp - 0x38], ebx
test ebx, ebx
je 0x40e202
mov eax, dword [ebx]
mov dword [ebp - 0x34], eax
mov word [ebp - 0x110], 0x98
mov edx, 3
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x110], 0x8c
xor esi, esi
jmp 0x40e2da
mov eax, ebx
mov edx, esi
call fcn.00496114
mov word [ebp - 0x110], 0xa4
xor ecx, ecx
mov ebx, eax
mov dword [ebp - 0x3c], ecx
lea ecx, [ebp - 0x3c]
inc dword [ebp - 0x104]
lea edx, [ebx + 0x34]
mov eax, dword [ebp - 0x124]
add eax, 0x28
call fcn.0052f38c
lea edx, [ebp - 0x3c]
lea eax, [ebp - 0x14]
call fcn.0052f364
dec dword [ebp - 0x104]
lea eax, [ebp - 0x3c]
mov edx, 2
call fcn.0052f334
mov cl, byte [ebx]
sub cl, 2
jb 0x40e27a
sub cl, 3
je 0x40e27a
dec cl
jne 0x40e2d9
mov eax, dword [0x55ad18]
xor edx, edx
mov dl, byte [eax + 0x5e]
inc edx
cmp edx, dword [ebx + 0x15]
jne 0x40e2d9
mov eax, dword [ebp - 0x14]
call fcn.004a3d54
test al, al
je 0x40e2d9
push 0
mov ecx, dword [ebp - 0x14]
mov dl, 1
mov eax, dword [0x494058]
call fcn.00498e10
mov edi, eax
mov eax, edi
call fcn.00498928
add dword [ebp - 0x130], eax
adc dword [ebp - 0x12c], edx
mov ebx, edi
mov dword [ebp - 0x44], ebx
test ebx, ebx
je 0x40e2d9
mov eax, dword [ebx]
mov dword [ebp - 0x40], eax
mov word [ebp - 0x110], 0xbc
mov edx, 3
mov eax, dword [ebp - 0x44]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x110], 0xb0
inc esi
mov edx, dword [ebp - 0x124]
mov ebx, dword [edx + 0x14]
cmp esi, dword [ebx + 8]
jl 0x40e209
mov word [ebp - 0x110], 0x14
jmp 0x40e3f7
mov word [ebp - 0x110], 0xe0
xor ecx, ecx
lea eax, [ebp - 0x58]
mov dword [ebp - 0x58], ecx
push eax
inc dword [ebp - 0x104]
xor ecx, ecx
push dword [ebp - 0x12c]
push dword [ebp - 0x130]
mov dword [ebp - 0x54], ecx
mov al, 0x20
inc dword [ebp - 0x104]
lea edx, [ebp - 0x54]
call fcn.0040cd1c
lea ecx, [ebp - 0x54]
mov eax, dword [ecx]
xor ecx, ecx
push eax
lea eax, [ebp - 0x50]
push dword [ebp - 0x12c]
push dword [ebp - 0x130]
mov dword [ebp - 0x50], ecx
inc dword [ebp - 0x104]
call fcn.00415200
lea edx, [ebp - 0x50]
mov edx, dword [edx]
mov eax, 0x448
pop ecx
call fcn.0041cf38
lea eax, [ebp - 0x58]
mov edx, dword [eax]
push edx
push 2
push 0
lea ecx, [ebp - 0x142]
push ecx
call fcn.00524368
add esp, 0xc
lea eax, [ebp - 0x142]
or byte [ebp - 0x142], 0x40
mov cx, word [eax]
mov edx, dword [0x55ad00]
mov eax, dword [edx]
pop edx
call fcn.00402ad0
dec dword [ebp - 0x104]
lea eax, [ebp - 0x58]
mov edx, 2
call fcn.0052f334
dec dword [ebp - 0x104]
lea eax, [ebp - 0x54]
mov edx, 2
call fcn.0052f334
dec dword [ebp - 0x104]
lea eax, [ebp - 0x50]
mov edx, 2
call fcn.0052f334
mov eax, dword [ebp - 0x138]
mov edx, dword [ebp - 0x134]
cmp edx, dword [ebp - 0x12c]
jne 0x40e4f7
cmp eax, dword [ebp - 0x130]
jae 0x40e5c7
jmp 0x40e4fd
jge 0x40e5c7
mov word [ebp - 0x110], 0xec
push dword [ebp - 0x12c]
push dword [ebp - 0x130]
xor eax, eax
lea edx, [ebp - 0x60]
mov dword [ebp - 0x60], eax
mov al, 0x20
inc dword [ebp - 0x104]
call fcn.0040cd1c
lea edx, [ebp - 0x60]
xor eax, eax
mov ecx, dword [edx]
lea edx, [ebp - 0x64]
push ecx
mov dword [ebp - 0x64], eax
push edx
xor eax, eax
inc dword [ebp - 0x104]
lea edx, [ebp - 0x5c]
push dword [ebp - 0x134]
push dword [ebp - 0x138]
mov dword [ebp - 0x5c], eax
mov al, 0x20
inc dword [ebp - 0x104]
call fcn.0040cd1c
lea ecx, [ebp - 0x5c]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x1c]
mov eax, 0x446
call fcn.0041d31c
lea eax, [ebp - 0x64]
mov eax, dword [eax]
call fcn.0041ea64
dec dword [ebp - 0x104]
lea eax, [ebp - 0x64]
mov edx, 2
call fcn.0052f334
dec dword [ebp - 0x104]
lea eax, [ebp - 0x60]
mov edx, 2
call fcn.0052f334
dec dword [ebp - 0x104]
lea eax, [ebp - 0x5c]
mov edx, 2
call fcn.0052f334
mov byte [ebp - 0x125], 0
mov word [ebp - 0x110], 0x14
jmp 0x40f3c9
mov word [ebp - 0x110], 0xf8
mov word [ebp - 0x110], 0x104
xor ecx, ecx
mov dword [ebp - 0x68], ecx
lea ecx, [ebp - 0x68]
inc dword [ebp - 0x104]
mov edx, dword [0x53118c]
mov eax, 0x478
call fcn.0041cce8
lea eax, [ebp - 0x68]
mov edx, dword [eax]
push edx
push 2
push 0
lea ecx, [ebp - 0x144]
push ecx
call fcn.00524368
add esp, 0xc
lea eax, [ebp - 0x144]
or byte [ebp - 0x143], 8
mov cx, word [eax]
mov edx, dword [0x55ad00]
mov eax, dword [edx]
pop edx
call fcn.00402ad0
dec dword [ebp - 0x104]
lea eax, [ebp - 0x68]
mov edx, 2
call fcn.0052f334
push 0xffff
mov ecx, dword [0x53118c]
mov dl, 1
mov eax, dword [0x494058]
call fcn.00498e10
mov ecx, dword [ebp - 0x124]
mov dword [ecx + 4], eax
mov word [ebp - 0x110], 0x14
jmp 0x40e7e8
mov word [ebp - 0x110], 0x134
mov edx, 0x532322
lea eax, [ebp - 0x78]
call fcn.0052f020
inc dword [ebp - 0x104]
xor eax, eax
mov dword [ebp - 0x7c], eax
lea edx, [ebp - 0x78]
inc dword [ebp - 0x104]
lea ecx, [ebp - 0x7c]
mov eax, dword [ebp - 0x124]
add eax, 0x28
call fcn.0052f38c
lea edx, [ebp - 0x7c]
lea eax, [ebp - 0x20]
call fcn.0052f364
dec dword [ebp - 0x104]
lea eax, [ebp - 0x7c]
mov edx, 2
call fcn.0052f334
dec dword [ebp - 0x104]
lea eax, [ebp - 0x78]
mov edx, 2
call fcn.0052f334
mov edx, dword [ebp - 0x124]
lea eax, [ebp - 0x14]
add edx, 0x34
call fcn.0052f364
mov word [ebp - 0x110], 0x140
mov edi, dword [ebp - 0x124]
mov ebx, dword [ebp - 0x124]
add edi, 0x28
add ebx, 0x34
cmp dword [edi], 0
je 0x40e88c
mov eax, dword [edi]
mov esi, dword [eax - 4]
jmp 0x40e88e
xor esi, esi
inc esi
push esi
push ebx
call fcn.0052ef9c
add esp, 8
mov eax, ebx
call fcn.0052f52c
mov edx, dword [ebx]
lea eax, [ebp - 0x80]
add edx, esi
dec edx
call fcn.0052f020
inc dword [ebp - 0x104]
xor ecx, ecx
mov dword [ebp - 0x84], ecx
mov edx, eax
inc dword [ebp - 0x104]
lea eax, [ebp - 0x20]
lea ecx, [ebp - 0x84]
call fcn.0052f38c
lea edx, [ebp - 0x84]
lea eax, [ebp - 0x18]
call fcn.0052f364
dec dword [ebp - 0x104]
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.0052f334
dec dword [ebp - 0x104]
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.0052f334
mov word [ebp - 0x110], 0x14c
xor ecx, ecx
lea eax, [ebp - 0x88]
mov dword [ebp - 0x88], ecx
push eax
inc dword [ebp - 0x104]
mov eax, 0x474
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
call fcn.0041cf38
lea edx, [ebp - 0x88]
mov ecx, dword [edx]
push ecx
push 2
push 0
lea eax, [ebp - 0x14c]
push eax
call fcn.00524368
add esp, 0xc
lea edx, [ebp - 0x14c]
or byte [ebp - 0x14b], 8
mov cx, word [edx]
mov eax, dword [0x55ad00]
pop edx
mov eax, dword [eax]
call fcn.00402ad0
dec dword [ebp - 0x104]
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.0052f334
mov ecx, dword [ebp - 0x18]
push ecx
mov eax, dword [ebp - 0x14]
push eax
call fcn.0040dd04
add esp, 8
test al, al
je 0x40eb28
mov word [ebp - 0x110], 0x158
xor edx, edx
mov dword [ebp - 0x8c], edx
lea ecx, [ebp - 0x8c]
inc dword [ebp - 0x104]
lea edx, [ebp - 0x14]
mov eax, 0x53232f
call fcn.0052f980
lea ecx, [ebp - 0x8c]
push ecx
mov edx, 0x532332
lea eax, [ebp - 0x90]
call fcn.0052f020
inc dword [ebp - 0x104]
xor eax, eax
mov dword [ebp - 0x94], eax
lea edx, [ebp - 0x90]
inc dword [ebp - 0x104]
lea ecx, [ebp - 0x94]
pop eax
call fcn.0052f38c
lea eax, [ebp - 0x94]
xor edx, edx
mov dword [ebp - 0x98], edx
lea ecx, [ebp - 0x98]
inc dword [ebp - 0x104]
lea edx, [ebp - 0x18]
call fcn.0052f38c
lea eax, [ebp - 0x98]
push eax
mov edx, 0x532334
lea eax, [ebp - 0x9c]
call fcn.0052f020
inc dword [ebp - 0x104]
xor eax, eax
mov dword [ebp - 0xa0], eax
lea edx, [ebp - 0x9c]
inc dword [ebp - 0x104]
lea ecx, [ebp - 0xa0]
pop eax
call fcn.0052f38c
lea edx, [ebp - 0xa0]
lea eax, [ebp - 0xc]
call fcn.0052f364
dec dword [ebp - 0x104]
lea eax, [ebp - 0xa0]
mov edx, 2
call fcn.0052f334
dec dword [ebp - 0x104]
lea eax, [ebp - 0x9c]
mov edx, 2
call fcn.0052f334
dec dword [ebp - 0x104]
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.0052f334
dec dword [ebp - 0x104]
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.0052f334
dec dword [ebp - 0x104]
lea eax, [ebp - 0x90]
mov edx, 2
call fcn.0052f334
dec dword [ebp - 0x104]
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.0052f334
cmp dword [ebp - 0xc], 0
je 0x40eb03
mov ecx, dword [ebp - 0xc]
mov ecx, dword [ecx - 4]
jmp 0x40eb05
xor ecx, ecx
cmp dword [ebp - 0xc], 0
je 0x40eb10
mov edx, dword [ebp - 0xc]
jmp 0x40eb15
mov edx, 0x532337
mov eax, dword [ebp - 0x124]
mov eax, dword [eax + 4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
jmp 0x40ec30
mov word [ebp - 0x110], 0x164
xor eax, eax
lea edx, [ebp - 0xa4]
mov dword [ebp - 0xa4], eax
push edx
inc dword [ebp - 0x104]
mov eax, 0x402
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
call fcn.0041cf38
lea ecx, [ebp - 0xa4]
mov eax, dword [ecx]
push eax
push 2
push 0
lea edx, [ebp - 0x14e]
push edx
call fcn.00524368
add esp, 0xc
lea ecx, [ebp - 0x14e]
or byte [ebp - 0x14d], 2
mov eax, dword [0x55ad00]
pop edx
mov cx, word [ecx]
mov eax, dword [eax]
call fcn.00402ad0
dec dword [ebp - 0x104]
lea eax, [ebp - 0xa4]
mov edx, 2
call fcn.0052f334
mov word [ebp - 0x110], 0x170
xor ecx, ecx
lea edx, [ebp - 0xa8]
mov dword [ebp - 0xa8], ecx
mov eax, 0x3ee
inc dword [ebp - 0x104]
call fcn.0041cc78
lea ecx, [ebp - 0xa8]
mov eax, dword [ecx]
push eax
push 2
push 0
lea edx, [ebp - 0x150]
push edx
call fcn.00524368
add esp, 0xc
lea ecx, [ebp - 0x150]
or byte [ebp - 0x14f], 1
mov eax, dword [0x55ad00]
pop edx
mov cx, word [ecx]
mov eax, dword [eax]
call fcn.00402ad0
dec dword [ebp - 0x104]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.0052f334
mov byte [ebp - 0x125], 0
mov word [ebp - 0x110], 0x14
jmp 0x40f3c9
xor esi, esi
jmp 0x40f2d2
mov eax, ebx
mov edx, esi
call fcn.00496114
mov word [ebp - 0x110], 0x17c
xor ecx, ecx
mov ebx, eax
mov dword [ebp - 0xac], ecx
lea ecx, [ebp - 0xac]
inc dword [ebp - 0x104]
lea edi, [ebx + 0x34]
mov eax, dword [ebp - 0x124]
mov edx, edi
add eax, 0x28
call fcn.0052f38c
lea edx, [ebp - 0xac]
lea eax, [ebp - 0x14]
call fcn.0052f364
dec dword [ebp - 0x104]
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.0052f334
mov word [ebp - 0x110], 0x188
xor ecx, ecx
mov dword [ebp - 0xb0], ecx
lea ecx, [ebp - 0xb0]
inc dword [ebp - 0x104]
mov edx, edi
lea eax, [ebp - 0x20]
call fcn.0052f38c
lea edx, [ebp - 0xb0]
lea eax, [ebp - 0x18]
call fcn.0052f364
dec dword [ebp - 0x104]
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.0052f334
mov cl, byte [ebx]
sub cl, 2
jb 0x40ed09
sub cl, 3
je 0x40ed09
dec cl
jne 0x40f2d1
mov eax, dword [0x55ad18]
xor edx, edx
mov dl, byte [eax + 0x5e]
inc edx
cmp edx, dword [ebx + 0x15]
jne 0x40f2d1
mov eax, dword [ebp - 0x14]
call fcn.004a3d54
test al, al
jne 0x40ee03
mov word [ebp - 0x110], 0x194
xor edx, edx
mov dword [ebp - 0xb4], edx
lea ecx, [ebp - 0xb4]
inc dword [ebp - 0x104]
lea edx, [ebp - 0x14]
mov eax, 0x532338
call fcn.0052f980
lea ecx, [ebp - 0xb4]
push ecx
mov edx, 0x53233a
lea eax, [ebp - 0xb8]
call fcn.0052f020
inc dword [ebp - 0x104]
xor eax, eax
mov dword [ebp - 0xbc], eax
lea edx, [ebp - 0xb8]
inc dword [ebp - 0x104]
lea ecx, [ebp - 0xbc]
pop eax
call fcn.0052f38c
lea edx, [ebp - 0xbc]
lea eax, [ebp - 0xc]
call fcn.0052f364
dec dword [ebp - 0x104]
lea eax, [ebp - 0xbc]
mov edx, 2
call fcn.0052f334
dec dword [ebp - 0x104]
lea eax, [ebp - 0xb8]
mov edx, 2
call fcn.0052f334
dec dword [ebp - 0x104]
lea eax, [ebp - 0xb4]
mov edx, 2
call fcn.0052f334
cmp dword [ebp - 0xc], 0
je 0x40edde
mov ecx, dword [ebp - 0xc]
mov ecx, dword [ecx - 4]
jmp 0x40ede0
xor ecx, ecx
cmp dword [ebp - 0xc], 0
je 0x40edeb
mov edx, dword [ebp - 0xc]
jmp 0x40edf0
mov edx, 0x53233d
mov eax, dword [ebp - 0x124]
mov eax, dword [eax + 4]
mov edi, dword [eax]
call dword [edi + 0xc]
jmp 0x40f122
mov word [ebp - 0x110], 0x1a0
xor eax, eax
lea edx, [ebp - 0xc0]
mov dword [ebp - 0xc0], eax
push edx
inc dword [ebp - 0x104]
mov eax, 0x474
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
call fcn.0041cf38
lea ecx, [ebp - 0xc0]
mov eax, dword [ecx]
push eax
push 2
push 0
lea edx, [ebp - 0x152]
push edx
call fcn.00524368
add esp, 0xc
lea ecx, [ebp - 0x152]
or byte [ebp - 0x151], 8
mov eax, dword [0x55ad00]
pop edx
mov cx, word [ecx]
mov eax, dword [eax]
call fcn.00402ad0
dec dword [ebp - 0x104]
lea eax, [ebp - 0xc0]
mov edx, 2
call fcn.0052f334
mov ecx, dword [ebp - 0x18]
push ecx
mov eax, dword [ebp - 0x14]
push eax
call fcn.0040dd04
add esp, 8
test al, al
je 0x40f023
mov word [ebp - 0x110], 0x1ac
xor edx, edx
mov dword [ebp - 0xc4], edx
lea ecx, [ebp - 0xc4]
inc dword [ebp - 0x104]
lea edx, [ebp - 0x14]
mov eax, 0x53233e
call fcn.0052f980
lea ecx, [ebp - 0xc4]
push ecx
mov edx, 0x532341
lea eax, [ebp - 0xc8]
call fcn.0052f020
inc dword [ebp - 0x104]
xor eax, eax
mov dword [ebp - 0xcc], eax
lea edx, [ebp - 0xc8]
inc dword [ebp - 0x104]
lea ecx, [ebp - 0xcc]
pop eax
call fcn.0052f38c
lea eax, [ebp - 0xcc]
xor edx, edx
mov dword [ebp - 0xd0], edx
lea ecx, [ebp - 0xd0]
inc dword [ebp - 0x104]
lea edx, [ebp - 0x18]
call fcn.0052f38c
lea eax, [ebp - 0xd0]
push eax
mov edx, 0x532343
lea eax, [ebp - 0xd4]
call fcn.0052f020
inc dword [ebp - 0x104]
xor eax, eax
mov dword [ebp - 0xd8], eax
lea edx, [ebp - 0xd4]
inc dword [ebp - 0x104]
lea ecx, [ebp - 0xd8]
pop eax
call fcn.0052f38c
lea edx, [ebp - 0xd8]
lea eax, [ebp - 0xc]
call fcn.0052f364
dec dword [ebp - 0x104]
lea eax, [ebp - 0xd8]
mov edx, 2
call fcn.0052f334
dec dword [ebp - 0x104]
lea eax, [ebp - 0xd4]
mov edx, 2
call fcn.0052f334
dec dword [ebp - 0x104]
lea eax, [ebp - 0xd0]
mov edx, 2
call fcn.0052f334
dec dword [ebp - 0x104]
lea eax, [ebp - 0xcc]
mov edx, 2
call fcn.0052f334
dec dword [ebp - 0x104]
lea eax, [ebp - 0xc8]
mov edx, 2
call fcn.0052f334
dec dword [ebp - 0x104]
lea eax, [ebp - 0xc4]
mov edx, 2
call fcn.0052f334
cmp dword [ebp - 0xc], 0
je 0x40effe
mov ecx, dword [ebp - 0xc]
mov ecx, dword [ecx - 4]
jmp 0x40f000
xor ecx, ecx
cmp dword [ebp - 0xc], 0
je 0x40f00b
mov edx, dword [ebp - 0xc]
jmp 0x40f010
mov edx, 0x532346
mov eax, dword [ebp - 0x124]
mov eax, dword [eax + 4]
mov edi, dword [eax]
call dword [edi + 0xc]
jmp 0x40f122
mov word [ebp - 0x110], 0x1b8
xor eax, eax
lea edx, [ebp - 0xdc]
mov dword [ebp - 0xdc], eax
push edx
inc dword [ebp - 0x104]
mov eax, 0x402
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
call fcn.0041cf38
lea ecx, [ebp - 0xdc]
mov eax, dword [ecx]
push eax
push 2
push 0
lea edx, [ebp - 0x154]
push edx
call fcn.00524368
add esp, 0xc
lea ecx, [ebp - 0x154]
or byte [ebp - 0x153], 2
mov eax, dword [0x55ad00]
pop edx
mov cx, word [ecx]
mov eax, dword [eax]
call fcn.00402ad0
dec dword [ebp - 0x104]
lea eax, [ebp - 0xdc]
mov edx, 2
call fcn.0052f334
mov word [ebp - 0x110], 0x1c4
xor ecx, ecx
lea edx, [ebp - 0xe0]
mov dword [ebp - 0xe0], ecx
mov eax, 0x3ee
inc dword [ebp - 0x104]
call fcn.0041cc78
lea ecx, [ebp - 0xe0]
mov eax, dword [ecx]
push eax
push 2
push 0
lea edx, [ebp - 0x156]
push edx
call fcn.00524368
add esp, 0xc
lea ecx, [ebp - 0x156]
or byte [ebp - 0x155], 1
mov eax, dword [0x55ad00]
pop edx
mov cx, word [ecx]
mov eax, dword [eax]
call fcn.00402ad0
dec dword [ebp - 0x104]
lea eax, [ebp - 0xe0]
mov edx, 2
call fcn.0052f334
mov byte [ebp - 0x125], 0
jmp 0x40f3c9
mov cl, byte [ebx]
sub cl, 5
jb 0x40f245
dec cl
jne 0x40f2d1
mov eax, dword [ebp - 0x14]
call fcn.0052ef94
test al, al
je 0x40f1bf
mov word [ebp - 0x110], 0x1d0
xor edx, edx
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0xe4], edx
mov eax, 0x472
inc dword [ebp - 0x104]
mov edx, dword [ebp - 0x14]
call fcn.0041cce8
lea ecx, [ebp - 0xe4]
mov eax, dword [ecx]
push eax
push 2
push 0
lea edx, [ebp - 0x158]
push edx
call fcn.00524368
add esp, 0xc
lea ecx, [ebp - 0x158]
or byte [ebp - 0x157], 8
mov eax, dword [0x55ad00]
pop edx
mov cx, word [ecx]
mov eax, dword [eax]
call fcn.00402ad0
dec dword [ebp - 0x104]
lea eax, [ebp - 0xe4]
mov edx, 2
call fcn.0052f334
jmp 0x40f2d1
mov word [ebp - 0x110], 0x1dc
xor ecx, ecx
mov eax, 0x3fe
mov dword [ebp - 0xe8], ecx
lea ecx, [ebp - 0xe8]
inc dword [ebp - 0x104]
mov edx, dword [ebp - 0x14]
call fcn.0041cce8
lea eax, [ebp - 0xe8]
mov edx, dword [eax]
push edx
push 2
push 0
lea ecx, [ebp - 0x15a]
push ecx
call fcn.00524368
add esp, 0xc
lea eax, [ebp - 0x15a]
or byte [ebp - 0x159], 2
mov cx, word [eax]
mov edx, dword [0x55ad00]
mov eax, dword [edx]
pop edx
call fcn.00402ad0
dec dword [ebp - 0x104]
lea eax, [ebp - 0xe8]
mov edx, 2
call fcn.0052f334
mov byte [ebp - 0x125], 0
jmp 0x40f3c9
mov word [ebp - 0x110], 0x1e8
xor ecx, ecx
lea eax, [ebp - 0xf0]
mov dword [ebp - 0xf0], ecx
push eax
inc dword [ebp - 0x104]
lea eax, [ebp - 0xec]
mov edx, 0x532347
call fcn.0052f020
inc dword [ebp - 0x104]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x124]
add eax, 0x20
mov edx, dword [ebp - 0x14]
call fcn.00404ba8
lea edx, [ebp - 0xf0]
lea eax, [ebp - 0x10]
call fcn.0052f364
dec dword [ebp - 0x104]
lea eax, [ebp - 0xf0]
mov edx, 2
call fcn.0052f334
dec dword [ebp - 0x104]
lea eax, [ebp - 0xec]
mov edx, 2
call fcn.0052f334
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
call fcn.004a3f78
inc esi
mov ecx, dword [ebp - 0x124]
mov ebx, dword [ecx + 0x14]
cmp esi, dword [ebx + 8]
jl 0x40ec37
mov word [ebp - 0x110], 0x1f4
xor eax, eax
mov dword [ebp - 0xf4], eax
lea ecx, [ebp - 0xf4]
inc dword [ebp - 0x104]
lea edx, [ebp - 0x20]
mov eax, 0x53234b
call fcn.0052f980
lea edx, [ebp - 0xf4]
push edx
mov edx, 0x53234d
lea eax, [ebp - 0xf8]
call fcn.0052f020
inc dword [ebp - 0x104]
xor eax, eax
mov dword [ebp - 0xfc], eax
lea edx, [ebp - 0xf8]
inc dword [ebp - 0x104]
lea ecx, [ebp - 0xfc]
pop eax
call fcn.0052f38c
lea edx, [ebp - 0xfc]
lea eax, [ebp - 0xc]
call fcn.0052f364
dec dword [ebp - 0x104]
lea eax, [ebp - 0xfc]
mov edx, 2
call fcn.0052f334
dec dword [ebp - 0x104]
lea eax, [ebp - 0xf8]
mov edx, 2
call fcn.0052f334
dec dword [ebp - 0x104]
lea eax, [ebp - 0xf4]
mov edx, 2
call fcn.0052f334
cmp dword [ebp - 0xc], 0
je 0x40f3a9
mov ecx, dword [ebp - 0xc]
mov ecx, dword [ecx - 4]
jmp 0x40f3ab
xor ecx, ecx
cmp dword [ebp - 0xc], 0
je 0x40f3b6
mov edx, dword [ebp - 0xc]
jmp 0x40f3bb
mov edx, 0x532350
mov eax, dword [ebp - 0x124]
mov eax, dword [eax + 4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [0x55ad00]
mov eax, dword [eax]
call fcn.00402fe0
mov al, byte [ebp - 0x125]
mov edx, 2
push eax
lea eax, [ebp - 0x20]
dec dword [ebp - 0x104]
call fcn.0052f334
dec dword [ebp - 0x104]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.0052f334
dec dword [ebp - 0x104]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.0052f334
dec dword [ebp - 0x104]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.0052f334
dec dword [ebp - 0x104]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.0052f334
dec dword [ebp - 0x104]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0052f334
pop eax
mov edx, dword [ebp - 0x120]
mov dword fs:[0], edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret