Function at 0x409800
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4113c6
mov eax, dword fs:[0]
push eax
sub esp, 0x28
push ebx
push esi
push edi
mov eax, dword [0x41700c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x34], 0x412424
mov dword [ebp - 0x34], vtable.CVolObject.0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 4], 1
mov dword [ebp - 0x34], vtable.CVolMem.0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x1c], 0x40
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x34]
push edx
mov dword [ebp - 0x34], vtable.CVolMem.0
call fcn.00401ea0
mov dword [ebp - 4], 3
mov edx, dword [ebp - 0x24]
mov eax, edx
mov ebx, dword [ebp - 0x20]
sub eax, ebx
cmp eax, 4
jl 0x4098bf
mov eax, dword [ebp - 0x28]
mov dword [ebx + eax], 0
mov eax, dword [ebp - 0x20]
add eax, 4
mov dword [ebp - 0x20], eax
jmp 0x409982
mov ecx, dword [ebp - 0x28]
lea edi, [ebx + 4]
cmp edi, ebx
je 0x409975
test edi, edi
jne 0x40990d
test ecx, ecx
je 0x4098f4
mov eax, dword [ebp - 0x34]
push ecx
mov eax, dword [eax + 0xc]
cmp eax, method.CWString.virtual_12
jne 0x4098ef
mov ecx, 0x417968
call fcn.0040e650
jmp 0x4098f4
lea ecx, [ebp - 0x34]
call eax
mov dword [ebp - 0x28], 0
xor ecx, ecx
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
jmp 0x409975
test ecx, ecx
jne 0x40991e
push edi
lea ecx, [ebp - 0x34]
call fcn.0040da40
mov ecx, eax
jmp 0x409975
mov esi, dword [ebp - 0x1c]
mov eax, 0x40
test esi, esi
cmovle esi, eax
cmp edx, edi
jl 0x409935
sub edx, edi
cmp edx, esi
jle 0x409972
mov eax, edi
cdq
idiv esi
mov eax, dword [ebp - 0x34]
sub esi, edx
add esi, edi
push esi
mov eax, dword [eax + 8]
push ecx
cmp eax, method.CWString.virtual_8
jne 0x409965
mov ecx, 0x417968
call fcn.0040e5c0
mov ecx, eax
test ecx, ecx
jne 0x40996c
push 0xffffffffffffffff
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
lea ecx, [ebp - 0x34]
call eax
mov ecx, eax
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x20], edi
mov edi, dword [ebp - 0x10]
mov dword [ecx + ebx], 0
mov eax, dword [ebp - 0x20]
mov esi, dword [ebp - 0x28]
xor ecx, ecx
test eax, eax
cmove esi, ecx
mov ecx, edi
call fcn.00401a90
mov byte [ebp - 4], 4
mov dword [edi], vtable.CWString.0
test esi, esi
je 0x409a69
cmp word [esi], 0
je 0x409a69
mov ecx, edi
call fcn.0040e990
mov edx, eax
mov eax, dword [edx + 0x14]
cmp eax, 2
jb 0x4099d3
mov ecx, dword [edx + 0xc]
movzx ecx, word [ecx + eax - 2]
test cx, cx
jne 0x4099d3
add eax, 0xfffffffe
mov dword [edx + 0x14], eax
mov ecx, esi
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4099e0
mov eax, dword [edi + 0x20]
sub ecx, edx
mov edx, dword [edi + 0x24]
sub eax, edx
sar ecx, 1
mov dword [ebp - 0x14], edx
lea ebx, [ecx*2 + 2]
cmp eax, ebx
jl 0x409a48
cmp ebx, 2
jne 0x409a19
mov eax, dword [edi + 0x1c]
movzx ecx, word [esi]
mov word [edx + eax], cx
add dword [edi + 0x24], ebx
jmp 0x409a66
cmp ebx, 4
jne 0x409a2b
mov eax, dword [edi + 0x1c]
mov ecx, dword [esi]
mov dword [edx + eax], ecx
add dword [edi + 0x24], ebx
jmp 0x409a66
cmp ebx, 8
jne 0x409a48
mov eax, dword [edi + 0x1c]
mov ebx, dword [ebp - 0x14]
mov ecx, dword [esi]
mov edx, dword [esi + 4]
mov dword [ebx + eax], ecx
mov dword [ebx + eax + 4], edx
add dword [edi + 0x24], 8
jmp 0x409a66
test ebx, ebx
jle 0x409a66
lea eax, [edx + ebx]
push eax
lea ecx, [edi + 0x10]
call fcn.0040daa0
add eax, dword [ebp - 0x14]
push ebx
push esi
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edi, dword [ebp - 0x10]
mov byte [ebp - 4], 3
mov dword [ebp - 0x18], 1
mov byte [ebp - 4], 0
mov dword [ebp - 0x34], vtable.CVolMem.0
mov dword [ebp - 4], 5
mov edx, dword [ebp - 0x28]
test edx, edx
je 0x409aac
mov eax, dword [ebp - 0x34]
push edx
mov eax, dword [eax + 0xc]
cmp eax, method.CWString.virtual_12
jne 0x409aa7
mov ecx, 0x417968
call fcn.0040e650
jmp 0x409aac
lea ecx, [ebp - 0x34]
call eax
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov byte [ebp - 4], 0
mov dword [ebp - 0x34], vtable.CVolObject.0
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret