Function at 0x4187ea
Capabilities:
Get disk information
Write file on windows

Disassembly:
mov eax, dword [ebp - 0x54]
call fcn.00407c34
mov byte [ebx], al
mov eax, esi
mov edx, 0x41a418
call fcn.004040c0
mov eax, dword [0x4296b4]
push eax
mov edx, 0x419998
mov ecx, 0x41a4a8
mov eax, 0x80000002
call fcn.00407ce0
mov dword [0x42ab70], eax
cmp dword [0x42ab70], 0x8f
jge 0x41890c
cmp byte [ebx], 0
jne 0x418888
mov ecx, 0x419e4c
lea eax, [ebp - 0x58]
mov edx, dword [edi]
call fcn.00404354
mov edx, dword [ebp - 0x58]
mov eax, dword [0x42ab04]
call fcn.00404454
je 0x418888
mov eax, 0x419e4c
call fcn.00407168
push 1
push 0x96
push 0x222e1
mov ecx, 0x419e4c
lea eax, [ebp - 0x5c]
mov edx, dword [edi]
call fcn.00404354
mov edx, dword [ebp - 0x5c]
mov cl, 1
mov eax, dword [0x42ab04]
call fcn.00406d6c
mov byte [ebx], al
cmp byte [ebx], 0
je 0x41890c
push 0x8f
mov ecx, 0x41a4a8
mov edx, 0x419998
mov eax, 0x80000002
call fcn.00407f58
mov byte [ebx], al
cmp dword [0x42ab70], 0
jle 0x4188d2
lea edx, [ebp - 0x60]
mov eax, dword [0x42ab70]
call fcn.00406920
mov ecx, dword [ebp - 0x60]
mov eax, 0x42ab00
mov edx, 0x41a4b8
call fcn.00404354
jmp 0x4188dc
mov eax, 0x42ab00
call fcn.0040406c
push 0x41a4c8
lea edx, [ebp - 0x68]
mov eax, 0x8f
call fcn.00406920
push dword [ebp - 0x68]
push dword [0x42ab00]
lea eax, [ebp - 0x64]
mov edx, 3
call fcn.004043c8
mov eax, dword [ebp - 0x64]
call fcn.0041b548
call fcn.00408e38
push 1
push 0x96
push 0x222e1
mov ecx, 0x419e60
lea eax, [ebp - 0x6c]
mov edx, dword [edi]
call fcn.00404354
mov edx, dword [ebp - 0x6c]
xor ecx, ecx
mov eax, dword [0x42ab04]
call fcn.00406d6c
mov byte [ebx], al
mov ecx, 0x419e60
lea eax, [ebp - 0x70]
mov edx, dword [edi]
call fcn.00404354
mov eax, dword [ebp - 0x70]
call fcn.00407c34
mov byte [ebx], al
mov eax, esi
mov edx, 0x41a4dc
call fcn.004040c0
push 1
push 0x96
push 0x222e1
mov ecx, 0x419e74
lea eax, [ebp - 0x74]
mov edx, dword [edi]
call fcn.00404354
mov edx, dword [ebp - 0x74]
xor ecx, ecx
mov eax, dword [0x42ab04]
call fcn.00406d6c
mov byte [ebx], al
mov ecx, 0x419e74
lea eax, [ebp - 0x78]
mov edx, dword [edi]
call fcn.00404354
mov eax, dword [ebp - 0x78]
call fcn.00407c34
mov byte [ebx], al
mov ecx, 0x419eb0
lea eax, [ebp - 0x7c]
mov edx, dword [edi]
call fcn.00404354
mov eax, dword [ebp - 0x7c]
call fcn.00406e00
test al, al
jne 0x418a48
push 1
push 0
push 0x222e1
mov ecx, 0x419eb0
lea eax, [ebp - 0x80]
mov edx, dword [edi]
call fcn.00404354
mov eax, dword [ebp - 0x80]
push eax
mov ecx, 0x419e88
lea eax, [ebp - 0x84]
mov edx, dword [edi]
call fcn.00404354
mov eax, dword [ebp - 0x84]
xor ecx, ecx
pop edx
call fcn.00406d6c
mov byte [ebx], al
push 1
push 0
push 0x222e1
mov ecx, 0x419ec4
lea eax, [ebp - 0x88]
mov edx, dword [edi]
call fcn.00404354
mov eax, dword [ebp - 0x88]
push eax
mov ecx, 0x419e9c
lea eax, [ebp - 0x8c]
mov edx, dword [edi]
call fcn.00404354
mov eax, dword [ebp - 0x8c]
xor ecx, ecx
pop edx
call fcn.00406d6c
mov byte [ebx], al
mov ecx, 0x419e88
lea eax, [ebp - 0x90]
mov edx, dword [edi]
call fcn.00404354
mov eax, dword [ebp - 0x90]
call fcn.00406e00
test al, al
jne 0x418af5
push 1
push 0
push 0x222e1
mov ecx, 0x419e88
lea eax, [ebp - 0x94]
mov edx, dword [edi]
call fcn.00404354
mov eax, dword [ebp - 0x94]
push eax
mov ecx, 0x419eb0
lea eax, [ebp - 0x98]
mov edx, dword [edi]
call fcn.00404354
mov eax, dword [ebp - 0x98]
xor ecx, ecx
pop edx
call fcn.00406d6c
mov byte [ebx], al
push 1
push 0
push 0x222e1
mov ecx, 0x419e9c
lea eax, [ebp - 0x9c]
mov edx, dword [edi]
call fcn.00404354
mov eax, dword [ebp - 0x9c]
push eax
mov ecx, 0x419ec4
lea eax, [ebp - 0xa0]
mov edx, dword [edi]
call fcn.00404354
mov eax, dword [ebp - 0xa0]
xor ecx, ecx
leave
pop edx
call fcn.00406d6c
mov byte [ebx], al
mov eax, dword [0x42ab04]
call fcn.00407c34
mov byte [ebx], al
mov eax, esi
mov edx, 0x41a514
call fcn.004040c0
mov ecx, 0x419e88
lea eax, [ebp - 0xa4]
mov edx, dword [edi]
call fcn.00404354
mov eax, dword [ebp - 0xa4]
call fcn.00407c34
mov byte [ebx], al
mov ecx, 0x419e9c
lea eax, [ebp - 0xa8]
mov edx, dword [edi]
call fcn.00404354
mov eax, dword [ebp - 0xa8]
call fcn.00407c34
mov byte [ebx], al
mov ecx, 0x419eb0
lea eax, [ebp - 0xac]
mov edx, dword [edi]
call fcn.00404354
mov eax, dword [ebp - 0xac]
call fcn.00407c34
mov byte [ebx], al
mov ecx, 0x419ec4
lea eax, [ebp - 0xb0]
mov edx, dword [edi]
call fcn.00404354
mov eax, dword [ebp - 0xb0]
call fcn.00407c34
mov byte [ebx], al
call fcn.004146e8
mov eax, 0x419f44
call fcn.00414e4c
mov eax, esi
mov edx, 0x41a5e0
call fcn.004040c0
mov eax, 0x419fcc
call fcn.00414e4c
mov eax, 0x41a03c
call fcn.00414e4c
mov eax, 0x41a600
call fcn.00414e4c
mov eax, esi
mov edx, 0x41a60c
call fcn.004040c0
push 0
push 0
push 0x42ab74
mov ecx, 0x409770
xor edx, edx
xor eax, eax
call fcn.00404028
mov eax, esi
mov edx, 0x41a6e0
call fcn.004040c0
push 0
push 0
push 0x42ab74
mov ecx, 0x408744
xor edx, edx
xor eax, eax
call fcn.00404028
mov ecx, 0x419e4c
mov eax, 0x42ab00
mov edx, dword [edi]
call fcn.00404354
mov eax, dword [0x42ab00]
mov edx, dword [0x42ab04]
call fcn.00404454
je 0x418c75
mov ecx, 0x419e60
lea eax, [ebp - 0xb4]
mov edx, dword [edi]
call fcn.00404354
mov eax, dword [ebp - 0xb4]
mov edx, dword [0x42ab04]
call fcn.00404454
je 0x418c75
mov ecx, 0x419e74
lea eax, [ebp - 0xb8]
mov edx, dword [edi]
call fcn.00404354
mov eax, dword [ebp - 0xb8]
mov edx, dword [0x42ab04]
call fcn.00404454
jne 0x418c81
mov eax, 0x42ab00
call fcn.0040406c
jmp 0x418c96
mov eax, 0x42ab00
mov ecx, dword [0x42ab04]
mov edx, 0x41a734
call fcn.00404354
mov al, byte [0x42ab7c]
sub al, 0x64
je 0x418ca9
dec al
je 0x418cc0
dec al
je 0x418cd7
jmp 0x418cec
mov eax, 0x42ab00
mov ecx, dword [0x42ab00]
mov edx, 0x41a740
call fcn.00404354
jmp 0x418cec
mov eax, 0x42ab00
mov ecx, dword [0x42ab00]
mov edx, 0x41a74c
call fcn.00404354
jmp 0x418cec
mov eax, 0x42ab00
mov ecx, dword [0x42ab00]
mov edx, 0x41a758
call fcn.00404354
lea eax, [ebp - 0xbc]
mov ecx, dword [0x42ab00]
mov edx, 0x41a768
call fcn.00404354
mov eax, dword [ebp - 0xbc]
call fcn.0041b548
mov ecx, 0x419998
mov eax, 0x42ab94
mov edx, 0x80000002
call fcn.004080b4
test al, al
jne 0x418d4c
mov ecx, 0x419998
mov eax, 0x42ab94
mov edx, 0x80000002
call fcn.004080b4
test al, al
jne 0x418d4c
mov eax, 0x41a778
call fcn.0041b548
jmp 0x4198e7
mov eax, esi
mov edx, 0x419f50
call fcn.004040c0
push dword [edi]
push 0x41a790
push 0x41a7a0
mov eax, 0x42ab20
mov edx, 3
call fcn.004043c8
mov eax, dword [0x42ab20]
call fcn.00406e00
test al, al
jne 0x418ded
push 1
push 0x96
push 0x222e1
lea eax, [ebp - 0xc0]
mov ecx, 0x41a7b0
mov edx, dword [edi]
call fcn.00404354
mov eax, dword [ebp - 0xc0]
mov cl, 1
mov edx, dword [0x42ab20]
call fcn.00406d6c
test al, al
je 0x418dd9
lea eax, [ebp - 0xc4]
mov ecx, dword [0x42ab20]
mov edx, 0x41a7c8
call fcn.00404354
mov eax, dword [ebp - 0xc4]
call fcn.0041b548
jmp 0x418ded
mov eax, 0x41a7e4
call fcn.0041b548
mov eax, 0x42ab20
call fcn.0040406c
mov eax, esi
mov edx, 0x41a7f4
call fcn.004040c0
mov eax, dword [0x42ab20]
call fcn.00404308
test eax, eax
jle 0x418fed
mov eax, 0x42ab28
mov ecx, 0x41a8a0
mov edx, dword [edi]
call fcn.00404354
mov eax, 0x42ab24
mov edx, 0x41a8b4
call fcn.004040c0
lea eax, [ebp - 0xc8]
mov ecx, 0x41a8c8
mov edx, dword [0x42ab28]
call fcn.00404354
mov eax, dword [ebp - 0xc8]
call fcn.00406e00
test al, al
je 0x418e5f
mov eax, 0x42ab24
mov edx, 0x41a8d8
call fcn.00404310
lea eax, [ebp - 0xcc]
mov ecx, 0x41a8e8
mov edx, dword [0x42ab28]
call fcn.00404354
mov eax, dword [ebp - 0xcc]
call fcn.00406e00
test al, al
je 0x418e93
mov eax, 0x42ab24
mov edx, 0x41a8f8
call fcn.00404310
lea eax, [ebp - 0xd0]
mov ecx, 0x41a908
mov edx, dword [0x42ab28]
call fcn.00404354
mov eax, dword [ebp - 0xd0]
call fcn.00406e00
test al, al
je 0x418ec7
mov eax, 0x42ab24
mov edx, 0x41a918
call fcn.00404310
lea eax, [ebp - 0xd4]
mov ecx, 0x41a928
mov edx, dword [0x42ab28]
call fcn.00404354
mov eax, dword [ebp - 0xd4]
call fcn.00406e00
test al, al
je 0x418efb
mov eax, 0x42ab24
mov edx, 0x41a938
call fcn.00404310
lea eax, [ebp - 0xd8]
mov ecx, 0x41a948
mov edx, dword [0x42ab28]
call fcn.00404354
mov eax, dword [ebp - 0xd8]
call fcn.00406e00
test al, al
je 0x418f2f
mov eax, 0x42ab24
mov edx, 0x41a958
call fcn.00404310
lea eax, [ebp - 0xdc]
mov ecx, 0x41a968
mov edx, dword [0x42ab28]
call fcn.00404354
mov eax, dword [ebp - 0xdc]
call fcn.00406e00
test al, al
je 0x418f63
mov eax, 0x42ab24
mov edx, 0x41a978
call fcn.00404310
lea eax, [ebp - 0xe0]
mov ecx, 0x41a988
mov edx, dword [0x42ab28]
call fcn.00404354
mov eax, dword [ebp - 0xe0]
call fcn.00406e00
test al, al
je 0x418f97
mov eax, 0x42ab24
mov edx, 0x41a998
call fcn.00404310
mov eax, dword [0x42ab24]
mov edx, 0x41a9a8
call fcn.00404454
jne 0x418fb4
mov eax, 0x41a9d8
call fcn.0041b548
jmp 0x418fd5
lea eax, [ebp - 0xe4]
mov ecx, dword [0x42ab24]
mov edx, 0x41a9e8
call fcn.00404354
mov eax, dword [ebp - 0xe4]
call fcn.0041b548
push 0
mov ecx, 0x41a9f8
mov edx, 0x41aa08
mov eax, 0x80000001
call fcn.00407f58
jmp 0x418ff7
mov eax, 0x42ab24
call fcn.0040406c
call fcn.0040970c
mov eax, 0x42ab00
mov edx, 0x41aa28
call fcn.004040c0
lea edx, [ebp - 0xec]
mov eax, 0x41aa6c
call fcn.004075fc
mov ecx, dword [ebp - 0xec]
lea eax, [ebp - 0xe8]
mov edx, dword [0x42ab04]
call fcn.00404354
mov eax, dword [ebp - 0xe8]
push eax
lea eax, [ebp - 0xf8]
mov ecx, 0x41aa90
mov edx, dword [0x42ab00]
call fcn.00404354
mov eax, dword [ebp - 0xf8]
lea edx, [ebp - 0xf4]
call fcn.004075fc
mov ecx, dword [ebp - 0xf4]
lea eax, [ebp - 0xf0]
mov edx, 0x41aab4
call fcn.00404354
mov edx, dword [ebp - 0xf0]
mov ecx, dword [0x42ab04]
mov eax, 0x80000002
call fcn.00407e68
mov eax, esi
mov edx, 0x419a3c
call fcn.004040c0
mov eax, dword [0x4296b4]
push eax
mov edx, 0x419998
mov ecx, 0x41aae0
mov eax, 0x80000002
call fcn.00407ce0
mov dword [0x42ab58], eax
mov eax, dword [0x4296b4]
push eax
mov edx, 0x419998
mov ecx, 0x41aaf0
mov eax, 0x80000002
call fcn.00407ce0
mov dword [0x42ab68], eax
cmp dword [0x42ab68], 0x64
jge 0x4192a2
mov eax, dword [0x4296b4]
push eax
push 0x400
lea eax, [ebp - 0x100]
push eax
mov edx, 0x419998
mov ecx, 0x41ab00
mov eax, 0x80000002
call fcn.00407d94
mov eax, dword [ebp - 0x100]
lea edx, [ebp - 0xfc]
call fcn.004069a4
mov edx, dword [ebp - 0xfc]
mov eax, 0x42ab18
call fcn.004040c0
mov eax, dword [0x42ab18]
call fcn.00404308
test eax, eax
je 0x419145
mov eax, dword [0x42ab18]
mov al, byte [eax]
add al, 0x9f
sub al, 0x1a
jb 0x419154
mov eax, 0x42ab18
mov edx, 0x41ab10
call fcn.004040c0
push 0x100002
mov eax, 0x42ac8c
mov ecx, 1
mov edx, dword [0x408724]
call fcn.00404f28
add esp, 4
mov eax, dword [0x42ab18]
mov bl, byte [eax]
cmp bl, 0x63
jb 0x41927e
lea eax, [ebp - 0x104]
mov edx, ebx
call fcn.00404254
lea eax, [ebp - 0x104]
mov edx, 0x41ab1c
call fcn.00404310
mov eax, dword [ebp - 0x104]
call fcn.00404508
push eax
call sub.kernel32.dll_GetDriveTypeA
add eax, 0xfffffffe
sub eax, 3
jb 0x4191c0
sub eax, 1
jne 0x41926d
xor eax, eax
mov dword [0x42ab5c], eax
lea eax, [ebp - 0x108]
mov edx, ebx
call fcn.00404254
lea eax, [ebp - 0x108]
mov edx, 0x41ab1c
call fcn.00404310
mov eax, dword [ebp - 0x108]
call fcn.0040eeb8
lea eax, [ebp - 0x110]
mov edx, ebx
call fcn.00404254
mov ecx, dword [ebp - 0x110]
lea eax, [ebp - 0x10c]
mov edx, 0x41ab28
call fcn.00404354
mov eax, dword [ebp - 0x10c]
call fcn.0041b548
lea eax, [ebp - 0x114]
xor edx, edx
mov dl, bl
dec edx
call fcn.00404254
mov eax, dword [ebp - 0x114]
push eax
mov ecx, 0x41ab00
mov edx, 0x419998
mov eax, 0x80000002
call fcn.00407e68
push 0
mov ecx, 0x41aae0
mov edx, 0x419998
mov eax, 0x80000002
call fcn.00407f58
cmp bl, 0x63
jne 0x41926d
mov eax, 0x41ab3c
call fcn.0041b548
xor eax, eax
mov dword [0x42ab58], eax
dec ebx
cmp bl, 0x62
jne 0x419181
mov dword [0x42ab68], 0x64
mov eax, dword [0x42ab68]
push eax
mov ecx, 0x41aaf0
mov edx, 0x419998
mov eax, 0x80000002
call fcn.00407f58
mov eax, esi
mov edx, 0x41a1a4
call fcn.004040c0
cmp dword [0x42ab68], 0xc8
jge 0x419352
cmp byte [0x42ab7c], 0x66
jne 0x4192ce
mov byte [0x429200], 0
xor eax, eax
mov dword [0x42ab60], eax
mov eax, esi
mov edx, 0x41ab50
call fcn.004040c0
mov eax, dword [0x4296b4]
push eax
mov edx, 0x419998
mov ecx, 0x41abd4
mov eax, 0x80000002
call fcn.00407ce0
mov dword [0x42ab64], eax
push 0x100002
mov eax, 0x42ac8c
mov ecx, 1
mov edx, dword [0x408724]
call fcn.00404f28
add esp, 4
xor eax, eax
call fcn.0040fc84
mov dword [0x42ab68], 0xc8
mov eax, dword [0x42ab68]
push eax
mov ecx, 0x41aaf0
mov edx, 0x419998
mov eax, 0x80000002
call fcn.00407f58
mov eax, 0x41abe4
call fcn.0041b548
push 0
mov eax, 0x42ac8c
mov ecx, 1
mov edx, dword [0x408724]
call fcn.00404f28
add esp, 4
mov eax, 0x42ab94
call fcn.00408128
mov eax, dword [0x42ab08]
call fcn.00404308
test eax, eax
jne 0x4193c8
lea edx, [ebp - 0x118]
mov eax, dword [0x42ab04]
call fcn.00406ba8
mov edx, dword [ebp - 0x118]
mov eax, 0x42ab08
call fcn.004040c0
mov eax, dword [0x42ab08]
call fcn.00404308
test eax, eax
jne 0x4193c8
call fcn.0040cd4c
jmp 0x4198e7
cmp byte [0x42ab7c], 0x64
jne 0x4193db
call fcn.0041b130
call fcn.00403f00
mov byte [0x429200], 0
mov eax, dword [0x4296b4]
push eax
mov edx, 0x419998
mov ecx, 0x41ac8c
mov eax, 0x80000002
call fcn.00407ce0
dec eax
je 0x4194ab
push 0
push 0x80
push 4
push 0
push 0
push 0x40000000
mov eax, dword [0x42aaec]
call fcn.00404508
push eax
call sub.kernel32.dll_CreateFileA_1
mov dword [0x42ab84], eax
mov eax, esi
mov edx, 0x41ac9c
call fcn.004040c0
push 2
push 0
push 0
mov eax, dword [0x42ab84]
push eax
call sub.kernel32.dll_SetFilePointer_1
call fcn.00409d2c
push 0
push 0x42ab74
mov eax, dword [0x42ab48]
call fcn.00404308
push eax
mov eax, 0x42ab48
call fcn.00404560
push eax
mov eax, dword [0x42ab84]
push eax
call sub.kernel32.dll_WriteFile_1
mov eax, 0x42ab48
call fcn.0040406c
mov eax, dword [0x42ab84]
push eax
call sub.kernel32.dll_CloseHandle_1
push 1
mov ecx, 0x41ac8c
mov edx, 0x419998
mov eax, 0x80000002
call fcn.00407f58
mov eax, esi
mov edx, 0x41ad1c
call fcn.004040c0
push 0xea60
call sub.kernel32.dll_Sleep
mov eax, esi
mov edx, 0x41a1a4
call fcn.004040c0
lea edx, [ebp - 0x11c]
mov al, 1
call fcn.004069e0
mov ecx, dword [ebp - 0x11c]
mov eax, 0x42ab14
mov edx, 0x41ad30
call fcn.00404354
mov eax, esi
mov edx, 0x41a60c
call fcn.004040c0
mov eax, 7
call fcn.00402e90
cmp eax, 5
ja case.default.0x419502
jmp dword [eax*4 + 0x419509]
lea edx, [ebp - 0x120]
mov eax, 0x41ad44
call fcn.004075fc
mov edx, dword [ebp - 0x120]
mov eax, 0x42ab10
call fcn.004040c0
jmp 0x419616
lea edx, [ebp - 0x124]
mov eax, 0x41ad5c
call fcn.004075fc
mov edx, dword [ebp - 0x124]
mov eax, 0x42ab10
call fcn.004040c0
jmp 0x419616
lea edx, [ebp - 0x128]
mov eax, 0x41ad74
call fcn.004075fc
mov edx, dword [ebp - 0x128]
mov eax, 0x42ab10
call fcn.004040c0
jmp 0x419616
lea edx, [ebp - 0x12c]
mov eax, 0x41ad8c
call fcn.004075fc
mov edx, dword [ebp - 0x12c]
mov eax, 0x42ab10
call fcn.004040c0
jmp 0x419616
lea edx, [ebp - 0x130]
mov eax, 0x41ada4
call fcn.004075fc
mov edx, dword [ebp - 0x130]
mov eax, 0x42ab10
call fcn.004040c0
jmp 0x419616
lea edx, [ebp - 0x134]
mov eax, 0x41adc0
call fcn.004075fc
mov edx, dword [ebp - 0x134]
mov eax, 0x42ab10
call fcn.004040c0
jmp 0x419616
lea edx, [ebp - 0x138]
mov eax, 0x41add8
call fcn.004075fc
mov edx, dword [ebp - 0x138]
mov eax, 0x42ab10
call fcn.004040c0
mov eax, 7
call fcn.00402e90
cmp eax, 5
ja case.default.0x419629
jmp dword [eax*4 + 0x419630]
lea edx, [ebp - 0x13c]
mov eax, 0x41adf0
call fcn.004075fc
mov edx, dword [ebp - 0x13c]
mov eax, 0x42ab0c
call fcn.004040c0
jmp 0x41973d
lea edx, [ebp - 0x140]
mov eax, 0x41ae0c
call fcn.004075fc
mov edx, dword [ebp - 0x140]
mov eax, 0x42ab0c
call fcn.004040c0
jmp 0x41973d
lea edx, [ebp - 0x144]
mov eax, 0x41ae28
call fcn.004075fc
mov edx, dword [ebp - 0x144]
mov eax, 0x42ab0c
call fcn.004040c0
jmp 0x41973d
lea edx, [ebp - 0x148]
mov eax, 0x41ae44
call fcn.004075fc
mov edx, dword [ebp - 0x148]
mov eax, 0x42ab0c
call fcn.004040c0
jmp 0x41973d
lea edx, [ebp - 0x14c]
mov eax, 0x41ae60
call fcn.004075fc
mov edx, dword [ebp - 0x14c]
mov eax, 0x42ab0c
call fcn.004040c0
jmp 0x41973d
lea edx, [ebp - 0x150]
mov eax, 0x41ae78
call fcn.004075fc
mov edx, dword [ebp - 0x150]
mov eax, 0x42ab0c
call fcn.004040c0
jmp 0x41973d
lea edx, [ebp - 0x154]
mov eax, 0x41ae94
call fcn.004075fc
mov edx, dword [ebp - 0x154]
mov eax, 0x42ab0c
call fcn.004040c0
mov ecx, 0x419ccc
lea eax, [ebp - 0x158]
mov edx, dword [edi]
call fcn.00404354
mov edx, dword [ebp - 0x158]
mov eax, dword [0x42aaec]
call fcn.004174a8
test al, al
je 0x419789
mov ecx, 0x419ce0
lea eax, [ebp - 0x15c]
mov edx, dword [edi]
call fcn.00404354
mov edx, dword [ebp - 0x15c]
mov eax, dword [0x42aaf0]
call fcn.004174a8
test al, al
jne 0x41979f
mov eax, esi
mov edx, 0x41aeb0
call fcn.004040c0
call fcn.0041b130
jmp 0x4198e7
call fcn.00407780
mov ecx, 0x419ccc
lea eax, [ebp - 0x160]
mov edx, dword [edi]
call fcn.00404354
mov eax, dword [ebp - 0x160]
call fcn.00410c1c
test al, al
je 0x4197f3
mov ecx, 0x419ce0
lea eax, [ebp - 0x164]
mov edx, dword [edi]
call fcn.00404354
mov eax, dword [ebp - 0x164]
call fcn.00410c1c
mov eax, esi
mov edx, 0x41af04
call fcn.004040c0
jmp 0x4198e7
call fcn.00407780
mov eax, esi
mov edx, 0x41af78
call fcn.004040c0
mov ecx, 0x419ccc
lea eax, [ebp - 0x168]
mov edx, dword [edi]
call fcn.00404354
mov eax, dword [ebp - 0x168]
call fcn.00410c1c
test al, al
je 0x419853
mov eax, esi
mov edx, 0x41af9c
call fcn.004040c0
mov ecx, 0x419ce0
lea eax, [ebp - 0x16c]
mov edx, dword [edi]
call fcn.00404354
mov eax, dword [ebp - 0x16c]
call fcn.00410c1c
jmp 0x4198e7
call fcn.00407780
mov ecx, 0x419ccc
lea eax, [ebp - 0x170]
mov edx, dword [edi]
call fcn.00404354
mov eax, dword [ebp - 0x170]
call fcn.00410c1c
test al, al
je 0x4198a4
mov eax, esi
mov edx, 0x419a3c
call fcn.004040c0
mov ecx, 0x419ce0
lea eax, [ebp - 0x174]
mov edx, dword [edi]
call fcn.00404354
mov eax, dword [ebp - 0x174]
call fcn.00410c1c
jmp 0x4198e7
mov eax, esi
mov edx, 0x41ac9c
call fcn.004040c0
call fcn.00407780
call fcn.00412308
test al, al
jne 0x4198e7
call fcn.00407780
call fcn.00413238
test al, al
jne 0x4198e7
call fcn.00412308
mov eax, 0x41b06c
call fcn.0041b548
mov eax, esi
mov edx, 0x41b080
call fcn.004040c0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x41990c
lea eax, [ebp - 0x174]
mov edx, 0x5d
call fcn.00404090
ret