Function at 0x40c493
Capabilities:
Connect socket
Resolve dns

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
mov eax, 0x13c60
call fcn.00403377
mov dword [esp + 0x1c], ecx
jmp 0x40c4ae
jmp 0x40c4b3
mov eax, dword [edx]
mov edi, edx
movzx ebx, word [edx + 0x20]
lea ecx, [esp + 0x48]
mov dword [esp], eax
mov eax, dword [edx + 4]
mov dword [esp + 4], eax
jmp 0x40c4cc
jmp 0x40c4d2
jmp 0x40c4db
jmp 0x40c4e0
jmp 0x40c4e3
jmp 0x40c4e5
jmp 0x40c4ea
jmp 0x40c4f4
mov eax, dword [edx + 0x18]
mov edx, dword [edx + 0x1c]
mov dword [ecx + 4], edx
mov dword [ecx], eax
and dword [ecx + 0xc], 0
and dword [ecx + 8], 0
jmp 0x40c50f
mov esi, dword [ebp + 4]
jmp 0x40c518
sub esp, 4
push 0x20
pop edx
push 2
call fcn.0041ef93
pop ecx
pop edx
test eax, eax
je 0x40c59d
mov dword [esp + 8], esi
jmp 0x40c535
movsd xmm0, qword [esp + 0x48]
movsd xmm1, qword [esp + 0x50]
lea edx, [esp + 0x90]
mov esi, eax
movsd qword [eax + 8], xmm1
movsd qword [eax], xmm0
and dword [eax + 0x18], 0
and dword [eax + 0x1c], 0
movsd xmm0, qword [edi + 0x18]
movsd qword [edx], xmm0
jmp 0x40c56c
mov dword [esp + 0x14], edi
lea edi, [esp + 0x6c]
mov ecx, edi
push dword [esp + 4]
push dword [esp + 4]
call fcn.0041aa60
pop eax
pop ecx
movzx edi, word [edi + 8]
test di, di
je 0x40c5b1
mov ecx, esi
jmp 0x40c598
jmp 0x40c6f9
lea ecx, [esp + 0x48]
jmp 0x40c5a3
call fcn.0041ef3e
mov di, 2
jmp 0x40c6fe
mov dword [esp + 4], esi
jmp 0x40c5bd
mov eax, dword [esp + 0x6c]
mov cx, 0x64
xor edi, edi
mov dword [esp], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0x10], eax
jmp 0x40c5dc
jmp 0x40c5e6
jmp 0x40c5ed
and dword [esp + 0x34], 0
and dword [esp + 0x30], 0
mov eax, ebx
jmp 0x40c600
cmp ax, 0x64
jmp 0x40c606
jb 0x40c618
xor edx, edx
jmp 0x40c610
add edi, 2
div cx
jmp 0x40c600
cmp ax, 0xa
lea esi, [esp + 0x24]
lea eax, [esp + 0x30]
jmp 0x40c626
jmp 0x40c628
sbb edi, 0
mov ecx, esi
mov dword [esi], eax
jmp 0x40c634
add edi, 2
mov edx, edi
call fcn.0041f11b
xor edx, edx
lea edi, [esp + 0x30]
lea ecx, [esp + 0x24]
jmp 0x40c650
inc edx
mov dword [esi], edi
jmp 0x40c657
call fcn.0041f11b
jmp 0x40c664
mov eax, dword [edi + 4]
mov di, 2
jmp 0x40c673
test eax, eax
jne 0x40c6b3
mov eax, dword [esp + 0x30]
jmp 0x40c67f
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x98]
lea esi, [esp + 0x78]
movsd xmm0, qword [ecx + 0x18]
mov ecx, esi
movsd qword [edx], xmm0
jmp 0x40c69f
push eax
call fcn.0040b93f
pop eax
movzx edi, word [esi + 8]
test di, di
je 0x40c750
jmp 0x40c6bb
jmp 0x40c6c5
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [eax + 0x18]
mov eax, dword [eax + 0x1c]
inc esi
mov eax, dword [eax + 8]
jmp 0x40c6df
mov edx, dword [esp]
push dword [esp + 8]
push 0
push esi
call eax
add esp, 0xc
jmp 0x40c6f5
mov ecx, dword [esp + 4]
call fcn.0041f0e7
jmp 0x40c700
jmp 0x40c70a
jmp 0x40c710
jmp 0x40c719
jmp 0x40c71d
jmp 0x40c727
jmp 0x40c72d
mov eax, dword [esp + 0x1c]
jmp 0x40c73b
jmp 0x40c73e
mov word [eax + 8], di
jmp 0x40c748
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
jmp 0x40c759
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x7c]
jmp 0x40c767
jmp 0x40c76e
lea edi, [esp + 0x24]
mov dword [esp + 0x44], edi
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ecx
and dword [esp + 0x2c], 0
jmp 0x40c786
jmp 0x40c78c
push 0xf
pop esi
mov cx, 0x64
cmp bx, 0x64
jmp 0x40c79c
jb 0x40c7c4
mov eax, ebx
xor edx, edx
jmp 0x40c7aa
div cx
movzx edx, dx
mov ebx, eax
movzx edx, word [edx + edx + 0x405ac8]
mov word [esp + esi + 0x30], dx
add esi, 0xfffffffe
jmp 0x40c793
cmp bx, 9
jmp 0x40c7d2
ja 0x40c7e4
add bl, 0x30
jmp 0x40c7dd
mov byte [esp + esi + 0x31], bl
inc esi
jmp 0x40c7f9
movzx eax, bx
jmp 0x40c7ec
movzx eax, word [eax + eax + 0x405ac8]
mov word [esp + esi + 0x30], ax
jmp 0x40c802
lea ecx, [esp + esi + 0x30]
push 0x11
pop edx
lea eax, [esp + 0x44]
sub edx, esi
jmp 0x40c815
push eax
push 0x40618c
call fcn.0041e97c
pop ecx
pop edx
test ax, ax
jmp 0x40c82a
je 0x40c833
jmp 0x40c831
jmp 0x40c85d
lea ecx, [esp + 0x84]
jmp 0x40c83e
mov edx, 0x406188
mov dword [ecx], edi
jmp 0x40c84a
push 1
call fcn.0041cdbb
pop ecx
test ax, ax
jmp 0x40c857
je 0x40c986
lea esi, [esp + 0x20]
jmp 0x40c866
jmp 0x40c86b
jmp 0x40c86d
jmp 0x40c870
jmp 0x40c874
xor ebx, ebx
and dword [esi], 0
jmp 0x40c87b
push esi
push 0x406048
push dword [esp + 0x14]
push dword [esp + 0xc]
call sub.WS2_32.dll_getaddrinfo
cmp ax, 0x276d
jne 0x40c90d
test bl, 1
jmp 0x40c89e
jne 0x40cc97
jmp 0x40c8ad
call 0x40bed5
mov bl, 1
test ax, ax
je 0x40c879
jmp 0x40c8bf
mov esi, dword [esp + 0x14]
mov edi, eax
mov eax, dword [esi + 0x1c]
mov ecx, dword [esi + 0x18]
mov eax, dword [eax + 8]
jmp 0x40c8d1
mov ebx, dword [esp + 8]
mov edx, dword [esp + 0xc]
push ebx
push 0
push dword [esp + 0x20]
call eax
add esp, 0xc
mov eax, dword [esi + 0x1c]
mov ecx, dword [esi + 0x18]
mov esi, dword [esp + 0x10]
mov eax, dword [eax + 8]
jmp 0x40c8f7
mov edx, dword [esp]
inc esi
push ebx
push 0
push esi
call eax
add esp, 0xc
jmp 0x40c908
jmp 0x40c6f5
movzx eax, ax
cmp eax, 0x2afb
je 0x40c99d
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
cmp eax, 8
je 0x40ca00
cmp eax, 0x273f
je 0x40ca4f
cmp eax, 0x277d
je 0x40caa8
cmp eax, 0x2af9
je 0x40cb07
cmp eax, 0x2afa
je 0x40cb5f
test eax, eax
jne 0x40cbbc
xor edi, edi
jmp 0x40c967
mov esi, dword [esi]
test esi, esi
je 0x40cc0e
jmp 0x40c97a
cmp dword [esi + 0x18], 1
sbb edi, 0xffffffff
add esi, 0x1c
jmp 0x40c962
jmp 0x40c988
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x18], ecx
jmp 0x40c85d
jmp 0x40c9a3
mov esi, dword [esp + 0x14]
mov eax, dword [esi + 0x1c]
mov ecx, dword [esi + 0x18]
mov eax, dword [eax + 8]
jmp 0x40c9b7
mov edi, dword [esp + 8]
mov edx, dword [esp + 0xc]
push edi
push 0
push dword [esp + 0x20]
call eax
add esp, 0xc
mov eax, dword [esi + 0x1c]
mov ecx, dword [esi + 0x18]
mov esi, dword [esp + 0x10]
mov eax, dword [eax + 8]
jmp 0x40c9dc
mov edx, dword [esp]
inc esi
push edi
push 0
push esi
call eax
add esp, 0xc
jmp 0x40c9ee
mov ecx, dword [esp + 4]
call fcn.0041f0e7
mov di, 0x35
jmp 0x40c6fe
jmp 0x40ca05
mov eax, dword [edi + 0x1c]
mov ecx, dword [edi + 0x18]
mov eax, dword [eax + 8]
jmp 0x40ca15
mov esi, dword [esp + 8]
mov edx, dword [esp + 0xc]
push esi
push 0
push ebx
call eax
add esp, 0xc
mov eax, dword [edi + 0x1c]
mov ecx, dword [edi + 0x18]
mov edi, dword [esp + 0x10]
mov eax, dword [eax + 8]
jmp 0x40ca37
mov edx, dword [esp]
inc edi
push esi
push 0
push edi
call eax
add esp, 0xc
jmp 0x40ca4a
jmp 0x40cc89
jmp 0x40ca58
mov eax, dword [edi + 0x1c]
mov ecx, dword [edi + 0x18]
mov eax, dword [eax + 8]
jmp 0x40ca63
mov esi, dword [esp + 8]
mov edx, dword [esp + 0xc]
push esi
push 0
push ebx
call eax
add esp, 0xc
mov eax, dword [edi + 0x1c]
mov ecx, dword [edi + 0x18]
mov edi, dword [esp + 0x10]
mov eax, dword [eax + 8]
jmp 0x40ca87
mov edx, dword [esp]
inc edi
push esi
push 0
push edi
call eax
add esp, 0xc
jmp 0x40ca96
mov ecx, dword [esp + 4]
call fcn.0041f0e7
mov di, 0x26
jmp 0x40c6fe
jmp 0x40caae
mov eax, dword [edi + 0x1c]
mov ecx, dword [edi + 0x18]
mov eax, dword [eax + 8]
jmp 0x40cabc
mov esi, dword [esp + 8]
mov edx, dword [esp + 0xc]
push esi
push 0
push ebx
call eax
add esp, 0xc
mov eax, dword [edi + 0x1c]
mov ecx, dword [edi + 0x18]
mov edi, dword [esp + 0x10]
mov eax, dword [eax + 8]
jmp 0x40cae4
mov edx, dword [esp]
inc edi
push esi
push 0
push edi
call eax
add esp, 0xc
jmp 0x40caf5
mov ecx, dword [esp + 4]
call fcn.0041f0e7
mov di, 0x37
jmp 0x40c6fe
jmp 0x40cb0b
mov eax, dword [edi + 0x1c]
mov ecx, dword [edi + 0x18]
mov eax, dword [eax + 8]
jmp 0x40cb1a
mov esi, dword [esp + 8]
mov edx, dword [esp + 0xc]
push esi
push 0
push ebx
call eax
add esp, 0xc
mov eax, dword [edi + 0x1c]
mov ecx, dword [edi + 0x18]
mov edi, dword [esp + 0x10]
mov eax, dword [eax + 8]
jmp 0x40cb3b
mov edx, dword [esp]
inc edi
push esi
push 0
push edi
call eax
add esp, 0xc
jmp 0x40cb4d
mov ecx, dword [esp + 4]
call fcn.0041f0e7
mov di, 0x36
jmp 0x40c6fe
jmp 0x40cb63
mov eax, dword [edi + 0x1c]
mov ecx, dword [edi + 0x18]
mov eax, dword [eax + 8]
jmp 0x40cb71
mov esi, dword [esp + 8]
mov edx, dword [esp + 0xc]
push esi
push 0
push ebx
call eax
add esp, 0xc
mov eax, dword [edi + 0x1c]
mov ecx, dword [edi + 0x18]
mov edi, dword [esp + 0x10]
mov eax, dword [eax + 8]
jmp 0x40cb98
mov edx, dword [esp]
inc edi
push esi
push 0
push edi
call eax
add esp, 0xc
jmp 0x40cbaa
mov ecx, dword [esp + 4]
call fcn.0041f0e7
mov di, 0x34
jmp 0x40c6fe
jmp 0x40cbc3
mov eax, dword [edi + 0x1c]
mov ecx, dword [edi + 0x18]
mov eax, dword [eax + 8]
jmp 0x40cbcf
mov esi, dword [esp + 8]
mov edx, dword [esp + 0xc]
push esi
push 0
push ebx
call eax
add esp, 0xc
mov eax, dword [edi + 0x1c]
mov ecx, dword [edi + 0x18]
mov edi, dword [esp + 0x10]
mov eax, dword [eax + 8]
jmp 0x40cbf3
mov edx, dword [esp]
inc edi
push esi
push 0
push edi
call eax
add esp, 0xc
jmp 0x40cc09
jmp 0x40ccee
jmp 0x40cc11
jmp 0x40cc1b
push 0x1c
pop ecx
mov eax, edi
mul ecx
jno 0x40cd00
jmp 0x40cc32
mov eax, dword [esp + 0x20]
jmp 0x40cc3d
push eax
call 0x43ba9c
mov esi, dword [esp + 0x14]
mov eax, dword [esi + 0x1c]
mov ecx, dword [esi + 0x18]
mov eax, dword [eax + 8]
jmp 0x40cc52
mov edi, dword [esp + 8]
mov edx, dword [esp + 0xc]
push edi
push 0
push ebx
call eax
add esp, 0xc
mov eax, dword [esi + 0x1c]
mov ecx, dword [esi + 0x18]
mov esi, dword [esp + 0x10]
mov eax, dword [eax + 8]
jmp 0x40cc75
mov edx, dword [esp]
inc esi
push edi
push 0
push esi
call eax
add esp, 0xc
jmp 0x40cc89
mov ecx, dword [esp + 4]
call fcn.0041f0e7
jmp 0x40c5a8
jmp 0x40cc9e
mov esi, dword [esp + 0x14]
mov eax, dword [esi + 0x1c]
mov ecx, dword [esi + 0x18]
mov eax, dword [eax + 8]
jmp 0x40ccb2
mov edi, dword [esp + 8]
mov edx, dword [esp + 0xc]
push edi
push 0
push dword [esp + 0x20]
call eax
add esp, 0xc
mov eax, dword [esi + 0x1c]
mov ecx, dword [esi + 0x18]
mov esi, dword [esp + 0x10]
mov eax, dword [eax + 8]
jmp 0x40ccdb
mov edx, dword [esp]
inc esi
push edi
push 0
push esi
call eax
add esp, 0xc
jmp 0x40ccee
mov ecx, dword [esp + 4]
call fcn.0041f0e7
mov di, 0xe
jmp 0x40c6fe
test eax, eax
jmp 0x40cd07
je 0x40cd27
jmp 0x40cd0c
sub esp, 4
mov ecx, dword [esp + 8]
mov edx, eax
push 2
call fcn.0041ef93
pop ecx
pop edx
test eax, eax
jne 0x40cd2a
jmp 0x40cc28
push 0xfffffffffffffffc
pop eax
jmp 0x40cd34
mov edx, dword [esp + 4]
xor ebx, ebx
lea esi, [esp + 0x20]
mov dword [edx + 0x10], eax
mov dword [edx + 0x14], edi
mov edi, dword [esp + 0x14]
jmp 0x40cd50
mov esi, dword [esi]
test esi, esi
je 0x40ce7f
jmp 0x40cd60
mov ecx, dword [esi + 0x18]
test ecx, ecx
je 0x40ce75
imul eax, ebx, 0x1c
jmp 0x40cd72
add eax, dword [edx + 0x10]
cmp word [ecx], 2
jne 0x40cd86
jmp 0x40cd84
jmp 0x40cda9
jmp 0x40cd8d
mov edx, dword [ecx + 0x18]
mov dword [esp + 0x5c0], edx
mov edx, dword [esp + 4]
movsd xmm0, qword [ecx + 0x10]
movsd qword [esp + 0x5b8], xmm0
movsd xmm0, qword [ecx]
movsd xmm1, qword [ecx + 8]
movsd qword [esp + 0x5b0], xmm1
movsd qword [esp + 0x5a8], xmm0
jmp 0x40cdca
mov ecx, dword [esp + 0x5c0]
mov dword [eax + 0x18], ecx
movsd xmm0, qword [esp + 0x5b8]
movsd qword [eax + 0x10], xmm0
movsd xmm0, qword [esp + 0x5a8]
movsd xmm1, qword [esp + 0x5b0]
movsd qword [eax + 8], xmm1
movsd qword [eax], xmm0
mov eax, dword [esi + 0x14]
test eax, eax
je 0x40ce70
jmp 0x40ce08
cmp dword [edx + 0x18], 0
jne 0x40ce70
xor edi, edi
mov ecx, 0x405a64
jmp 0x40ce17
mov dword [esp + 0x58], edx
dec edi
mov dword [esp + 0x5c], ecx
jmp 0x40ce27
cmp byte [eax + edi + 1], 0
lea edi, [edi + 1]
jne 0x40ce20
jmp 0x40ce34
lea ecx, [esp + 0x60]
lea edx, [esp + 0x58]
push edi
push eax
call fcn.0040bceb
pop eax
pop ecx
movzx edi, word [esp + 0x68]
test di, di
jne 0x40d147
jmp 0x40ce5a
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 4]
mov edi, dword [esp + 0x14]
mov dword [edx + 0x18], eax
mov dword [edx + 0x1c], ecx
inc ebx
jmp 0x40ce75
jmp 0x40ce77
add esi, 0x1c
jmp 0x40cd48
jmp 0x40ce88
mov eax, dword [esp + 0x20]
jmp 0x40ce92
push eax
call 0x43ba9c
mov eax, dword [edi + 0x1c]
mov ecx, dword [edi + 0x18]
mov eax, dword [eax + 8]
jmp 0x40cea7
mov esi, dword [esp + 8]
mov edx, dword [esp + 0xc]
push esi
push 0
push dword [esp + 0x20]
call eax
add esp, 0xc
mov eax, dword [edi + 0x1c]
mov ecx, dword [edi + 0x18]
mov edi, dword [esp + 0x10]
mov eax, dword [eax + 8]
jmp 0x40cecd
mov edx, dword [esp]
inc edi
push esi
push 0
push edi
call eax
mov ecx, dword [esp + 0x10]
add esp, 0xc
jmp 0x40cee5
jmp 0x40ceec
jmp 0x40cef0
jmp 0x40cef5
jmp 0x40ceff
jmp 0x40cf06
jmp 0x40cf0f
mov eax, dword [ecx + 0x14]
test eax, eax
je 0x40d11e
mov edx, dword [ecx + 0x10]
xor esi, esi
jmp 0x40cf24
mov dword [esp + 0xc], eax
mov dword [esp + 0x18], edx
cmp esi, eax
jmp 0x40cf36
je 0x40d1e3
imul eax, esi, 0x1c
jmp 0x40cf48
mov dword [esp + 8], esi
xor ebx, ebx
movzx esi, word [edx + eax]
jmp 0x40cf5a
movzx ecx, word [edx + eax + 0x1a]
mov word [esp + 0xb8], cx
movsd xmm0, qword [edx + eax + 0x12]
movsd qword [esp + 0xb0], xmm0
movsd xmm0, qword [edx + eax + 2]
movsd xmm1, qword [edx + eax + 0xa]
movzx eax, si
movsd qword [esp + 0xa8], xmm1
movsd qword [esp + 0xa0], xmm0
jmp 0x40cf9c
mov word [esp + 0x10], si
mov dword [esp], eax
jmp 0x40cfa7
push 0
push 0
push 0
push 6
push 1
push dword [esp + 0x14]
call sub.WS2_32.dll_WSASocketW
cmp eax, 0xffffffff
jne 0x40cffb
jmp 0x40cfc7
call sub.WS2_32.dll_WSAGetLastError
cmp ax, 0x276d
jne 0x40d0d9
test bl, 1
jmp 0x40cfdc
jne 0x40d132
jmp 0x40cfe8
call 0x40bed5
mov bl, 1
test ax, ax
je 0x40cfa4
mov edi, eax
jmp 0x40d0b5
jmp 0x40cffe
movzx edx, word [esp + 0x10]
mov esi, eax
lea ecx, [esp + 0x5aa]
mov word [esp + 0x5a8], dx
jmp 0x40d01c
movzx eax, word [esp + 0xb8]
movsd xmm0, qword [esp + 0xb0]
movsd xmm2, qword [esp + 0xa0]
movsd xmm1, qword [esp + 0xa8]
cmp dx, 2
mov word [ecx + 0x18], ax
movsd qword [ecx + 0x10], xmm0
movsd qword [ecx + 8], xmm1
movsd qword [ecx], xmm2
push 0x1c
pop eax
push 0x10
pop ecx
cmove eax, ecx
jmp 0x40d063
push eax
lea eax, [esp + 0x5ac]
push eax
push esi
call sub.WS2_32.dll_connect
test eax, eax
je 0x40d1f8
jmp 0x40d084
call sub.WS2_32.dll_WSAGetLastError
add eax, 0xffffd8c1
mov di, 0xe
cmp ax, 0x12
ja 0x40d0a9
movzx eax, ax
jmp 0x40d0a1
movzx edi, word [eax + eax + 0x4063ae]
mov ecx, esi
jmp 0x40d0b0
call fcn.0041f152
mov ecx, dword [esp + 4]
jmp 0x40d0bd
mov esi, dword [esp + 8]
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 0x18]
inc esi
cmp di, 0x42
je 0x40cf2c
jmp 0x40d1d5
mov ecx, dword [esp + 4]
movzx eax, ax
cmp eax, 0x2728
je 0x40d1b1
cmp eax, 0x273b
je 0x40d1bd
cmp eax, 0x273f
je 0x40d1c3
cmp eax, 0x2747
jne 0x40d132
jmp 0x40d111
mov ecx, dword [esp + 4]
mov di, 0x15
jmp 0x40d1ce
jmp 0x40d124
call fcn.0041f0e7
mov di, 0x36
jmp 0x40c72d
jmp 0x40d13a
mov ecx, dword [esp + 4]
mov di, 0xe
jmp 0x40d1d5
jmp 0x40d14d
mov eax, dword [esp + 0x20]
jmp 0x40d157
push eax
call 0x43ba9c
mov esi, dword [esp + 0x14]
mov eax, dword [esi + 0x1c]
mov ecx, dword [esi + 0x18]
mov eax, dword [eax + 8]
jmp 0x40d174
mov ebx, dword [esp + 8]
mov edx, dword [esp + 0xc]
push ebx
push 0
push dword [esp + 0x20]
call eax
add esp, 0xc
mov eax, dword [esi + 0x1c]
mov ecx, dword [esi + 0x18]
mov esi, dword [esp + 0x10]
mov eax, dword [eax + 8]
jmp 0x40d19d
mov edx, dword [esp]
inc esi
push ebx
push 0
push esi
call eax
add esp, 0xc
jmp 0x40d1ac
jmp 0x40c6f5
jmp 0x40d1b7
mov di, 0x12
jmp 0x40d1ce
mov di, 0x28
jmp 0x40d1ce
jmp 0x40d1ca
mov di, 0x26
jmp 0x40d1d5
jmp 0x40d1d9
call fcn.0041f0e7
jmp 0x40c72d
jmp 0x40d1ea
call fcn.0041f0e7
mov di, 0x42
jmp 0x40c72d
jmp 0x40d1fa
jmp 0x40d1fd
mov ecx, dword [esp + 4]
call fcn.0041f0e7
jmp 0x40d20d
mov eax, dword [esp + 0x14]
lea ebx, [esp + 0xaf0]
mov ecx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov eax, 0xd58
lea ecx, [esp + 0x5a8]
jmp 0x40d237
mov dword [ebx + 0x13f8], esi
jmp 0x40d247
jmp 0x40d24f
jmp 0x40d259
lea edi, [ecx + eax]
push eax
push 0
push ecx
call fcn.004052d9
add esp, 0xc
mov dword [ebx - 4], 0x3030301
jmp 0x40d276
jmp 0x40d279
push 0xbe8
push 0
push edi
call fcn.004052d9
add esp, 0xc
mov dword [ebx + 0x810], 0x408524
mov dword [ebx + 0x1244], 0x4092c4
and dword [ebx + 0x1070], 0
jmp 0x40d2aa
jmp 0x40d2af
jmp 0x40d2b5
jmp 0x40d2ba
push 0x5a
push 0x407d70
push ebx
call fcn.004052fe
add esp, 0xc
mov eax, 0x407d2c
mov byte [ebx + 0x60], 0x2d
jmp 0x40d2dd
jmp 0x40d2df
jmp 0x40d2e8
mov dword [ebx + 0x808], fcn.00437b95
jmp 0x40d2f7
jmp 0x40d2fa
mov dword [ebx + 0x7c0], 0x437969
jmp 0x40d30a
jmp 0x40d30e
mov dword [ebx + 0x7bc], eax
mov dword [ebx + 0x7c4], 0x422ca3
movsd xmm0, qword [ebx + 0x7c0]
movsd qword [ebx + 0x13e8], xmm0
mov dword [ebx + 0x13f0], eax
push 0xffffffffffffffe8
pop eax
jmp 0x40d33f
mov ecx, dword [eax + 0x407de4]
mov dword [esp + eax + 0x1240], ecx
mov dword [esp + eax + 0x1cf0], ecx
add eax, 4
jne 0x40d337
lea esi, [esp + 0x5a8]
jmp 0x40d363
mov ecx, esi
mov dword [esi + 0xc98], edi
mov dword [esi + 0xcb4], 0x428f76
mov dword [esi + 0xcb8], 0x429cba
mov dword [esi + 0xcbc], 0x42a198
jmp 0x40d38e
call fcn.00428f16
jmp 0x40d39a
jmp 0x40d39f
mov dword [esi + 0xcfc], 0x407de4
mov dword [esi + 0xd00], 0x407df4
jmp 0x40d3b7