Function at 0x4088c0
Capabilities:
Connect to http server
Create http request
Read and send data from client to server
Read file on windows
Send data
Send http request

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x16c
lea eax, [ebp + 0x38]
cmp dword [ebp + 0x4c], 0x10
cmovae eax, dword [ebp + 0x38]
push ebx
push esi
push edi
push 0x44422c
push eax
call fcn.0041bf26
add esp, 8
test eax, eax
je 0x40941f
push eax
call fcn.0041bfb4
add esp, 4
cmp dword [ebp + 0x18], 0
je 0x40941f
cmp dword [ebp + 0x30], 0
je 0x40941f
cmp dword [ebp + 0x60], 0
je 0x40941f
lea eax, [ebp + 0x38]
push eax
lea ecx, [ebp - 0x78]
call fcn.00414750
cmp dword [ebp - 0x64], 0x10
lea ecx, [ebp - 0x140]
lea eax, [ebp - 0x78]
cmovae eax, dword [ebp - 0x78]
push ecx
push eax
call fcn.0041cc40
mov edx, dword [ebp - 0x64]
or ebx, 0xffffffff
add esp, 8
test eax, eax
cmove ebx, dword [ebp - 0x12c]
cmp edx, 0x10
jb 0x40897b
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408971
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409524
push edx
push ecx
call fcn.00417582
add esp, 8
mov dword [ebp - 0x68], 0
lea esi, [ebp - 0xdf]
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
test ebx, ebx
jns 0x4089c8
neg ebx
nop dword [eax]
mov eax, 0xcccccccd
dec esi
mul ebx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [esi], bl
mov ebx, edx
test ebx, ebx
jne 0x4089a0
dec esi
mov byte [esi], 0x2d
jmp 0x4089ea
mov eax, 0xcccccccd
dec esi
mul ebx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [esi], bl
mov ebx, edx
test ebx, ebx
jne 0x4089c8
xor eax, eax
lea edx, [ebp - 0xdf]
mov dword [ebp - 0x50], eax
mov ecx, 0xf
mov dword [ebp - 0x4c], ecx
mov byte [ebp - 0x60], al
cmp esi, edx
je 0x408a18
mov eax, edx
lea ecx, [ebp - 0x60]
sub eax, esi
push eax
push esi
call fcn.00414eb0
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x50]
cmp ecx, 0x10
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
lea edx, [ebp - 0x60]
cmovae edx, dword [ebp - 0x60]
lea ecx, [ebp - 0x10c]
push eax
call fcn.00402ff0
mov edx, dword [ebp - 0x4c]
add esp, 4
cmp edx, 0x10
jb 0x408a6b
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408a61
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409529
push edx
push ecx
call fcn.00417582
add esp, 8
lea eax, [ebp - 0x10c]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x447d28
call fcn.00414750
lea ecx, [ebp - 0x38]
call fcn.004034e0
add esp, 0x1c
lea ecx, [ebp - 0xc0]
mov edx, eax
call fcn.00415380
mov edx, dword [ebp - 0x24]
add esp, 4
cmp edx, 0x10
jb 0x408ad0
mov ecx, dword [ebp - 0x38]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408ac6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40952e
push edx
push ecx
call fcn.00417582
add esp, 8
sub esp, 0x18
mov ecx, esp
push 0x447b00
call fcn.00414750
lea ecx, [ebp - 0x128]
call fcn.004034e0
add esp, 0x18
push eax
lea eax, [ebp + 0x50]
push eax
sub esp, 0x18
mov ecx, esp
push 0x447ef0
call fcn.00414750
lea ecx, [ebp - 0x38]
call fcn.004034e0
add esp, 0x18
push eax
lea eax, [ebp - 0x10c]
push eax
sub esp, 0x18
mov ecx, esp
push 0x447fb0
call fcn.00414750
lea ecx, [ebp - 0xdc]
call fcn.004034e0
add esp, 0x18
lea ecx, [ebp - 0xf4]
mov edx, eax
call fcn.00415380
add esp, 4
lea ecx, [ebp - 0x60]
mov edx, eax
call fcn.00415290
add esp, 4
lea ecx, [ebp - 0x78]
mov edx, eax
call fcn.00415380
add esp, 4
lea ecx, [ebp - 0xa8]
mov edx, eax
call fcn.00415290
mov edx, dword [ebp - 0x64]
add esp, 4
cmp edx, 0x10
jb 0x408b9f
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408b95
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409533
push edx
push ecx
call fcn.00417582
add esp, 8
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
cmp edx, 0x10
jb 0x408be5
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408bdb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409533
push edx
push ecx
call fcn.00417582
add esp, 8
mov edx, dword [ebp - 0xe0]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
cmp edx, 0x10
jb 0x408c31
mov ecx, dword [ebp - 0xf4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408c27
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409533
push edx
push ecx
call fcn.00417582
add esp, 8
mov edx, dword [ebp - 0xc8]
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xe0], 0xf
mov byte [ebp - 0xf4], 0
cmp edx, 0x10
jb 0x408c86
mov ecx, dword [ebp - 0xdc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408c7c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409533
push edx
push ecx
call fcn.00417582
add esp, 8
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], 0
cmp edx, 0x10
jb 0x408cd5
mov ecx, dword [ebp - 0x38]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408ccb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409533
push edx
push ecx
call fcn.00417582
add esp, 8
mov edx, dword [ebp - 0x114]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0xf
mov byte [ebp - 0x38], 0
cmp edx, 0x10
jb 0x408d21
mov ecx, dword [ebp - 0x128]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408d17
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409533
push edx
push ecx
call fcn.00417582
add esp, 8
sub esp, 0x18
mov ecx, esp
push 0x447f80
call fcn.00414750
lea ecx, [ebp - 0x128]
call fcn.004034e0
add esp, 0x18
push eax
lea eax, [ebp - 0x10c]
push eax
sub esp, 0x18
mov ecx, esp
push 0x448130
call fcn.00414750
lea ecx, [ebp - 0xdc]
call fcn.004034e0
add esp, 0x18
lea ecx, [ebp - 0x38]
mov edx, eax
call fcn.00415380
add esp, 4
lea ecx, [ebp - 0x90]
mov edx, eax
call fcn.00415290
mov edx, dword [ebp - 0x24]
add esp, 4
cmp edx, 0x10
jb 0x408db4
mov ecx, dword [ebp - 0x38]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408daa
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409538
push edx
push ecx
call fcn.00417582
add esp, 8
mov edx, dword [ebp - 0xc8]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0xf
mov byte [ebp - 0x38], 0
cmp edx, 0x10
jb 0x408e00
mov ecx, dword [ebp - 0xdc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408df6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409538
push edx
push ecx
call fcn.00417582
add esp, 8
mov edx, dword [ebp - 0x114]
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], 0
cmp edx, 0x10
jb 0x408e55
mov ecx, dword [ebp - 0x128]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408e4b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409538
push edx
push ecx
call fcn.00417582
add esp, 8
cmp dword [ebp - 0xac], 0x10
lea eax, [ebp - 0xc0]
lea ecx, [ebp - 0x90]
cmovae eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x94], 0x10
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0xa8]
cmovae eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x7c], 0x10
mov ebx, eax
mov dword [ebp - 4], eax
cmovae ecx, dword [ebp - 0x90]
mov dword [ebp - 0x1c], ecx
lea edx, [ebx + 1]
nop dword [eax]
mov al, byte [ebx]
inc ebx
test al, al
jne 0x408ea0
sub ebx, edx
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x408eb0
xorps xmm0, xmm0
mov dword [ebp - 0x10], 0
sub ecx, edx
movlpd qword [ebp - 0x164], xmm0
push 0x10000
mov dword [ebp - 0x44], ecx
movlpd qword [ebp - 0x15c], xmm0
movlpd qword [ebp - 0x154], xmm0
movlpd qword [ebp - 0x148], xmm0
call fcn.00417590
add esp, 4
mov dword [ebp - 0x3c], eax
push 0x10000
push 0
push eax
call fcn.00419150
add esp, 0xc
lea ecx, [ebp + 0x38]
cmp dword [ebp + 0x4c], 0x10
cmovae ecx, dword [ebp + 0x38]
push 0
push 0x8000080
push 3
push 0
push 1
push 0x80000000
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, eax
lea ecx, [ebp - 0x38]
lea eax, [ebp + 0x38]
mov dword [ebp - 0x14], edi
push eax
call fcn.00414750
cmp dword [ebp - 0x24], 0x10
lea ecx, [ebp - 0x140]
lea eax, [ebp - 0x38]
cmovae eax, dword [ebp - 0x38]
push ecx
push eax
call fcn.0041cc40
mov edx, dword [ebp - 0x24]
add esp, 8
test eax, eax
mov eax, 0xffffffff
cmove eax, dword [ebp - 0x12c]
mov dword [ebp - 8], eax
cmp edx, 0x10
jb 0x408f9b
mov ecx, dword [ebp - 0x38]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408f91
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40953d
push edx
push ecx
call fcn.00417582
add esp, 8
push 0
push 0
push 0
push 1
push 0
call dword [sym.imp.WININET.dll_InternetOpenW]
cmp dword [ebp + 0x1c], 0x10
lea ecx, [ebp + 8]
push 0
cmovae ecx, dword [ebp + 8]
push 0
push 3
push 0
push 0
push 0x50
push ecx
push eax
mov dword [ebp - 0xc], eax
call dword [sym.imp.WININET.dll_InternetConnectA]
cmp dword [ebp + 0x34], 0x10
mov esi, eax
lea eax, [ebp + 0x20]
mov dword [ebp - 0x48], esi
cmovae eax, dword [ebp + 0x20]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xc4], eax
push 0x4484c0
call fcn.00414750
lea ecx, [ebp - 0x128]
call fcn.004034e0
add esp, 0x18
cmp dword [eax + 0x14], 0x10
jb 0x409008
mov eax, dword [eax]
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0xc4]
push eax
push esi
call dword [sym.imp.WININET.dll_HttpOpenRequestA]
mov edx, dword [ebp - 0x114]
mov esi, eax
cmp edx, 0x10
jb 0x40905c
mov ecx, dword [ebp - 0x128]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409052
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409542
push edx
push ecx
call fcn.00417582
add esp, 8
push 0xa0000000
push 0xffffffffffffffff
push dword [ebp - 0x18]
push esi
call dword [sym.imp.WININET.dll_HttpAddRequestHeadersA]
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 8]
push 0
add eax, ebx
mov dword [ebp - 0x168], 0x28
push 8
mov dword [ebp - 0x14c], eax
lea eax, [ebp - 0x168]
push 0
push eax
push esi
call dword [sym.imp.WININET.dll_HttpSendRequestExA]
test ebx, ebx
je 0x4090bc
mov edi, dword [ebp - 4]
lea eax, [ebp - 4]
push eax
push ebx
push edi
push esi
call dword [sym.imp.WININET.dll_InternetWriteFile]
test eax, eax
je 0x4090b9
add edi, dword [ebp - 4]
sub ebx, dword [ebp - 4]
jne 0x4090a0
mov edi, dword [ebp - 0x14]
mov eax, dword [ebp - 8]
test eax, eax
je 0x409127
sub eax, dword [ebp - 0x10]
mov ecx, 4
cmp eax, ecx
push 0
cmovb ecx, eax
lea eax, [ebp - 0x40]
push eax
push ecx
push dword [ebp - 0x3c]
push edi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x4092be
mov ebx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 4], eax
test ebx, ebx
je 0x409117
mov edi, eax
lea eax, [ebp - 0x18]
push eax
push ebx
push edi
push esi
call dword [sym.imp.WININET.dll_InternetWriteFile]
test eax, eax
je 0x409111
add edi, dword [ebp - 0x18]
sub ebx, dword [ebp - 0x18]
jne 0x4090f8
mov ebx, dword [ebp - 0x40]
mov edi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
add eax, ebx
cmp eax, dword [ebp - 8]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 8]
jb 0x4090c3
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x40914d
mov edi, dword [ebp - 0x1c]
lea eax, [ebp - 0x1c]
push eax
push ebx
push edi
push esi
call dword [sym.imp.WININET.dll_InternetWriteFile]
test eax, eax
je 0x40914a
add edi, dword [ebp - 0x1c]
sub ebx, dword [ebp - 0x1c]
jne 0x409131
mov edi, dword [ebp - 0x14]
push 0
push 8
push 0
push esi
call dword [sym.imp.WININET.dll_HttpEndRequestA]
mov ebx, dword [sym.imp.WININET.dll_InternetCloseHandle]
test esi, esi
je 0x409167
push esi
call ebx
mov eax, dword [ebp - 0x48]
test eax, eax
je 0x409171
push eax
call ebx
mov eax, dword [ebp - 0xc]
test eax, eax
je 0x40917b
push eax
call ebx
test edi, edi
je 0x40918b
cmp edi, 0xffffffff
je 0x40918b
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x7c]
cmp edx, 0x10
jb 0x4091c2
mov ecx, dword [ebp - 0x90]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4091b8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409547
push edx
push ecx
call fcn.00417582
add esp, 8
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
cmp edx, 0x10
jb 0x409211
mov ecx, dword [ebp - 0xa8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409207
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409547
push edx
push ecx
call fcn.00417582
add esp, 8
mov edx, dword [ebp - 0xac]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
cmp edx, 0x10
jb 0x409266
mov ecx, dword [ebp - 0xc0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40925c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409547
push edx
push ecx
call fcn.00417582
add esp, 8
mov edx, dword [ebp - 0xf8]
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], 0
cmp edx, 0x10
jb 0x40941f
mov ecx, dword [ebp - 0x10c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409415
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409547
jmp 0x409415
mov ebx, dword [sym.imp.WININET.dll_InternetCloseHandle]
test esi, esi
je 0x4092cb
push esi
call ebx
mov eax, dword [ebp - 0x48]
test eax, eax
je 0x4092d5
push eax
call ebx
mov eax, dword [ebp - 0xc]
test eax, eax
je 0x4092df
push eax
call ebx
test edi, edi
je 0x4092ef
cmp edi, 0xffffffff
je 0x4092ef
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x7c]
cmp edx, 0x10
jb 0x409326
mov ecx, dword [ebp - 0x90]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40931c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409547
push edx
push ecx
call fcn.00417582
add esp, 8
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
cmp edx, 0x10
jb 0x409375
mov ecx, dword [ebp - 0xa8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40936b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409547
push edx
push ecx
call fcn.00417582
add esp, 8
mov edx, dword [ebp - 0xac]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
cmp edx, 0x10
jb 0x4093ca
mov ecx, dword [ebp - 0xc0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4093c0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409547
push edx
push ecx
call fcn.00417582
add esp, 8
mov edx, dword [ebp - 0xf8]
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], 0
cmp edx, 0x10
jb 0x40941f
mov ecx, dword [ebp - 0x10c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409415
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409547
push edx
push ecx
call fcn.00417582
add esp, 8
mov edx, dword [ebp + 0x1c]
cmp edx, 0x10
jb 0x409453
mov ecx, dword [ebp + 8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409449
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40954c
push edx
push ecx
call fcn.00417582
add esp, 8
mov edx, dword [ebp + 0x34]
mov dword [ebp + 0x18], 0
mov dword [ebp + 0x1c], 0xf
mov byte [ebp + 8], 0
cmp edx, 0x10
jb 0x409499
mov ecx, dword [ebp + 0x20]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40948f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40954c
push edx
push ecx
call fcn.00417582
add esp, 8
mov edx, dword [ebp + 0x4c]
mov dword [ebp + 0x30], 0
mov dword [ebp + 0x34], 0xf
mov byte [ebp + 0x20], 0
cmp edx, 0x10
jb 0x4094db
mov ecx, dword [ebp + 0x38]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4094d1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40954c
push edx
push ecx
call fcn.00417582
add esp, 8
mov edx, dword [ebp + 0x64]
mov dword [ebp + 0x48], 0
mov dword [ebp + 0x4c], 0xf
mov byte [ebp + 0x38], 0
cmp edx, 0x10
jb 0x40951d
mov ecx, dword [ebp + 0x50]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409513
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40954c
push edx
push ecx
call fcn.00417582
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.0041ea01
call fcn.0041ea01
call fcn.0041ea01
call fcn.0041ea01
call fcn.0041ea01
call fcn.0041ea01
call fcn.0041ea01
call fcn.0041ea01
call fcn.0041ea01
int3