Function at 0x40e250
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x417f56
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x218
mov eax, dword [0x421008]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x41a6b4
lea eax, [ebp - 0x168]
push str.item_proto
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen_s]
mov eax, dword [ebp - 0x168]
add esp, 0xc
test eax, eax
jne 0x40e2c4
push str.item_proto_not_found_n
call fcn.0040b370
jmp 0x40e42e
mov esi, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
push eax
push 1
lea eax, [ebp - 0x20c]
push 4
push eax
call esi
push dword [ebp - 0x168]
lea eax, [ebp - 0x208]
push 1
push 4
push eax
call esi
push dword [ebp - 0x168]
lea eax, [ebp - 0x204]
push 1
push 4
push eax
call esi
push dword [ebp - 0x168]
lea eax, [ebp - 0x16c]
push 1
push 4
push eax
call esi
add esp, 0x40
lea eax, [ebp - 0x174]
push dword [ebp - 0x168]
push 1
push 4
push eax
call esi
push dword [ebp - 0x174]
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 0x14
mov edi, eax
mov dword [ebp - 0x17c], edi
push dword [ebp - 0x20c]
push str.fourcc__u_n
call fcn.0040b370
push dword [ebp - 0x208]
push str.protoVersion__u_n
call fcn.0040b370
push dword [ebp - 0x204]
push str.struct_size__u_n
call fcn.0040b370
push dword [ebp - 0x16c]
push str.tableSize__u_n
call fcn.0040b370
push dword [ebp - 0x174]
push str.dataSize__u_n
call fcn.0040b370
add esp, 0x28
test edi, edi
je 0x40e422
push dword [ebp - 0x168]
push 1
push dword [ebp - 0x174]
push edi
call esi
add esp, 0x10
mov word [ebp - 0x184], 0
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x18c], 0
mov dword [ebp - 0x188], 0
mov ecx, edi
mov dword [ebp - 4], 0
cmp dword [ecx], 0x5a4f434d
je 0x40e44f
push str.LZObject:_not_a_valid_data_n
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
call fcn.00407ca0
add esp, 8
push dword [ebp - 0x17c]
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
lea ecx, [ebp - 0x194]
call fcn.00414b40
push dword [ebp - 0x168]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004168e6
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov edi, dword [ecx + 0xc]
lea eax, [ecx + 0x14]
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x190], edi
cmp edi, 0x10000
jae 0x40e4a8
mov eax, dword [0x423f2c]
cmp dword [0x423f28], eax
je 0x40e490
mov esi, dword [eax - 4]
add eax, 0xfffffffc
push edi
push esi
mov dword [0x423f2c], eax
push str.lzo.reuse_alloc_t_p__d__free_n
jmp 0x40e4ba
push 0x10000
call fcn.00416a77
add esp, 4
mov esi, eax
push edi
push esi
push str.lzo.reuse_alloc_t_p__d__real_n
jmp 0x40e4ba
push edi
call fcn.00416a77
add esp, 4
mov esi, eax
push edi
push esi
push str.lzo.real_alloc_t_p__d__n
call fcn.0040b370
mov eax, dword [ebp - 0x17c]
add esp, 0xc
mov dword [ebp - 0x194], esi
push dword [eax + 0xc]
push 0
push esi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x194]
push 0x421030
call fcn.00414cb0
test al, al
je 0x40e408
cmp byte [ebp - 0x184], 0
mov eax, dword [ebp - 0x18c]
je 0x40e517
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x40e50f
lea eax, [ecx + 0x14]
jmp 0x40e51a
mov eax, dword [eax + 8]
add eax, 0x14
jmp 0x40e51a
mov eax, dword [eax + 0xc]
push eax
push str.real_size__u_n
call fcn.0040b370
add esp, 8
cmp byte [0x423f14], 0
je 0x40e56c
xor edi, edi
cmp dword [ebp - 0x16c], edi
jbe 0x40e408
mov esi, dword [ebp - 0x194]
lea eax, [esi + 0x21]
push eax
push dword [esi]
push str._u__s_n
call fcn.0040b370
inc edi
lea esi, [esi + 0xb4]
add esp, 0xc
cmp edi, dword [ebp - 0x16c]
jb 0x40e545
jmp 0x40e408
mov esi, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen_s]
lea eax, [ebp - 0x1b8]
push 0x41a714
push str.item_names.txt
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x178]
push 0x41a714
push str.item_proto.txt
push eax
call esi
mov eax, dword [ebp - 0x1b8]
add esp, 0xc
test eax, eax
jne 0x40e5af
push str.item_names.txt_not_writable
jmp 0x40e5c1
cmp dword [ebp - 0x178], 0
jne 0x40e65e
push str.item_proto.txt_not_writable
call fcn.0040b370
add esp, 4
mov dword [ebp - 4], 2
mov esi, dword [ebp - 0x194]
mov edi, dword [ebp - 0x190]
test esi, esi
je 0x40e643
cmp byte [ebp - 0x183], 0
jne 0x40e643
mov dword [ebp - 0x170], esi
push edi
push esi
cmp edi, 0x10000
jae 0x40e62d
push str.lzo.reuse_free_t_p__d__n
call fcn.0040b370
mov eax, dword [0x423f2c]
add esp, 0xc
cmp eax, dword [0x423f30]
je 0x40e61e
mov dword [eax], esi
add dword [0x423f2c], 4
jmp 0x40e643
lea ecx, [ebp - 0x170]
push ecx
push eax
call fcn.00415200
jmp 0x40e643
push str.lzo.real_free_t_p__d__n
call fcn.0040b370
add esp, 0xc
push esi
call fcn.0041704d
add esp, 4
test edi, edi
je 0x40e431
push edi
push str.lzo.free__d_n
call fcn.0040b370
add esp, 8
jmp 0x40e431
push str.VNUM_tLOCALE_NAME_n
push eax
call fcn.00407ca0
push str.ITEM_VNUMRANGE_tITEM_NAME_K__tITEM_TYPE_tSUB_TYPE_tSIZE_tANTI_FLAG_tFLAG_tITEM_WEAR_tIMMUNE_tGOLD_tSHOP_BUY_PRICE_tREFINE_tREFINESET_tMAGIC_PCT_tLIMIT_TYPE0_tLIMIT_VALUE0_tLIMIT_TYPE1_tLIMIT_VALUE1_tADDON_TYPE0_tADDON_VALUE0_tADDON_TYPE1_tADDON_VALUE1_tADDON_TYPE2_tADDON_VALUE2_tVALUE0_tVALUE1_tVALUE2_tVALUE3_tVALUE4_tVALUE5_tSpecular_tSOCKET_tATTU_ADDON_n
push dword [ebp - 0x178]
call fcn.00407ca0
xor eax, eax
add esp, 0x10
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x16c], eax
jbe 0x40e408
imul esi, eax, 0xb4
add esi, dword [ebp - 0x194]
lea eax, [esi + 0x21]
push eax
push dword [esi]
push str._u_t_s_n
push dword [ebp - 0x1b8]
call fcn.00407ca0
mov eax, dword [esi + 0xb0]
lea ecx, [ebp - 0x164]
movzx edx, byte [esi + 0x6a]
add esp, 0x10
mov dword [ebp - 0x200], eax
movzx eax, byte [esi + 0xaf]
mov dword [ebp - 0x1f8], eax
movzx eax, byte [esi + 0xae]
mov dword [ebp - 0x1f4], eax
mov eax, dword [esi + 0x97]
mov dword [ebp - 0x1f0], eax
mov eax, dword [esi + 0x93]
mov dword [ebp - 0x1ec], eax
mov eax, dword [esi + 0x8f]
mov dword [ebp - 0x1e8], eax
mov eax, dword [esi + 0x8b]
mov dword [ebp - 0x1e4], eax
mov eax, dword [esi + 0x87]
mov dword [ebp - 0x1e0], eax
mov eax, dword [esi + 0x83]
mov dword [ebp - 0x1fc], eax
mov eax, dword [esi + 0x6b]
mov dword [ebp - 0x1dc], eax
call fcn.00413110
mov dword [ebp - 0x1bc], eax
mov byte [ebp - 4], 3
cmp dword [eax + 0x14], 0x10
jb 0x40e753
mov eax, dword [eax]
mov dword [ebp - 0x1bc], eax
mov eax, dword [esi + 0x66]
lea ecx, [ebp - 0x14c]
movzx edx, byte [esi + 0x65]
mov dword [ebp - 0x210], eax
call fcn.00413110
mov dword [ebp - 0x1b0], eax
mov byte [ebp - 4], 4
cmp dword [eax + 0x14], 0x10
jb 0x40e783
mov eax, dword [eax]
mov dword [ebp - 0x1b0], eax
mov eax, dword [esi + 0x61]
lea ecx, [ebp - 0x134]
movzx edx, byte [esi + 0x60]
mov dword [ebp - 0x214], eax
call fcn.00413110
mov dword [ebp - 0x1c0], eax
mov byte [ebp - 4], 5
cmp dword [eax + 0x14], 0x10
jb 0x40e7b3
mov eax, dword [eax]
mov dword [ebp - 0x1c0], eax
mov eax, dword [esi + 0x5c]
lea ecx, [ebp - 0xec]
movzx edx, byte [esi + 0x5b]
mov dword [ebp - 0x218], eax
call fcn.00412d80
mov dword [ebp - 0x198], eax
mov byte [ebp - 4], 6
cmp dword [eax + 0x14], 0x10
jb 0x40e7e3
mov eax, dword [eax]
mov dword [ebp - 0x198], eax
mov eax, dword [esi + 0x57]
lea ecx, [ebp - 0x104]
movzx edx, byte [esi + 0x56]
mov dword [ebp - 0x1c4], eax
call fcn.00412d80
mov dword [ebp - 0x19c], eax
mov byte [ebp - 4], 7
cmp dword [eax + 0x14], 0x10
jb 0x40e813
mov eax, dword [eax]
mov dword [ebp - 0x19c], eax
movzx eax, byte [esi + 0xad]
lea ecx, [ebp - 0x11c]
mov edx, dword [esi + 0x4a]
mov dword [ebp - 0x1c8], eax
movzx eax, word [esi + 0xab]
mov dword [ebp - 0x1cc], eax
mov eax, dword [esi + 0xa7]
mov dword [ebp - 0x1d0], eax
mov eax, dword [esi + 0x52]
mov dword [ebp - 0x1d4], eax
mov eax, dword [esi + 0x4e]
mov dword [ebp - 0x1d8], eax
call fcn.004128d0
mov dword [ebp - 0x1a0], eax
mov byte [ebp - 4], 8
cmp dword [eax + 0x14], 0x10
jb 0x40e871
mov eax, dword [eax]
mov dword [ebp - 0x1a0], eax
mov edx, dword [esi + 0x46]
lea ecx, [ebp - 0xa4]
call fcn.00412320
mov dword [ebp - 0x1a4], eax
mov byte [ebp - 4], 9
cmp dword [eax + 0x14], 0x10
jb 0x40e897
mov eax, dword [eax]
mov dword [ebp - 0x1a4], eax
mov edx, dword [esi + 0x42]
lea ecx, [ebp - 0xd4]
call fcn.00411d70
mov dword [ebp - 0x1a8], eax
mov byte [ebp - 4], 0xa
cmp dword [eax + 0x14], 0x10
jb 0x40e8bd
mov eax, dword [eax]
mov dword [ebp - 0x1a8], eax
mov edx, dword [esi + 0x3e]
lea ecx, [ebp - 0xbc]
call fcn.004117b0
mov dword [ebp - 0x1ac], eax
cmp dword [eax + 0x14], 0x10
jb 0x40e8df
mov eax, dword [eax]
mov dword [ebp - 0x1ac], eax
movzx ecx, byte [esi + 0x3a]
movzx eax, byte [esi + 0x3d]
movzx edi, byte [esi + 0x3b]
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x180], ecx
cmp ecx, 0xff
je 0x40e9dd
mov edx, dword [ecx*4 + 0x41cb90]
test edx, edx
je 0x40e9dd
cmp edi, 0xff
je 0x40e9dd
xorps xmm0, xmm0
mov dword [ebp - 0x7c], 0
movups xmmword [ebp - 0x228], xmm0
mov dword [ebp - 0x78], 0xf
movups xmmword [ebp - 0x8c], xmm0
mov byte [ebp - 4], 0xc
xor eax, eax
mov ecx, dword [ecx*4 + 0x41cae0]
test ecx, ecx
jle 0x40e9a0
nop
cmp edi, eax
je 0x40e95b
inc eax
cmp eax, ecx
jl 0x40e950
jmp 0x40e9a0
cmp byte [0x423f15], 0
lea eax, [eax + eax*2]
mov ecx, 0xffffffff
lea eax, [edx + eax*8]
cmovne edi, ecx
lea ecx, [ebp - 0x8c]
cmp ecx, eax
je 0x40e9a0
cmp dword [eax + 0x14], 0x10
mov ecx, dword [eax + 0x10]
jb 0x40e985
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x8c]
call fcn.0040a3d0
movups xmm0, xmmword [ebp - 0x8c]
movups xmmword [ebp - 0x228], xmm0
cmp byte [0x423f15], 0
je 0x40e9c3
cmp edi, 0xffffffff
je 0x40e9c3
push dword [ebp - 0x180]
mov edx, edi
mov ecx, str.Item_SubType_not_found
call fcn.00410870
add esp, 4
movups xmm0, xmmword [ebp - 0x228]
movups xmmword [ebp - 0x2c], xmm0
movq xmm0, qword [ebp - 0x7c]
movq qword [ebp - 0x1c], xmm0
mov ecx, dword [ebp - 0x18]
jmp 0x40e9fb
mov al, byte [0x41bc7c]
xorps xmm0, xmm0
mov ecx, 0xf
mov dword [ebp - 0x1c], 1
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x18], ecx
mov byte [ebp - 0x2c], al
movzx edi, byte [esi + 0x3a]
lea eax, [ebp - 0x2c]
cmp ecx, 0x10
xorps xmm0, xmm0
cmovae eax, dword [ebp - 0x2c]
mov dword [ebp - 0x180], eax
cmp edi, 0xff
jne 0x40ea3b
mov ecx, dword [str.NONE]
mov eax, 0xf
movups xmmword [ebp - 0x44], xmm0
mov dword [ebp - 0x34], 4
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x44], ecx
jmp 0x40eb6f
movups xmmword [ebp - 0x228], xmm0
mov dword [ebp - 0x64], 0
movups xmmword [ebp - 0x74], xmm0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 4], 0xe
xor eax, eax
nop word [eax + eax]
cmp edi, eax
je 0x40ea6c
inc eax
cmp eax, 0x2b
jb 0x40ea60
jmp 0x40eaac
cmp byte [0x423f15], 0
lea eax, [eax + eax*2]
mov ecx, 0xffffffff
lea eax, [eax*8 + 0x422080]
cmovne edi, ecx
lea ecx, [ebp - 0x74]
cmp ecx, eax
je 0x40eaac
cmp dword [eax + 0x14], 0x10
mov ecx, dword [eax + 0x10]
jb 0x40ea97
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x74]
call fcn.0040a3d0
movups xmm0, xmmword [ebp - 0x74]
movups xmmword [ebp - 0x228], xmm0
cmp byte [0x423f15], 0
je 0x40eb54
cmp edi, 0xffffffff
je 0x40eb54
mov eax, dword fs:[0x2c]
mov ecx, dword [eax]
mov eax, dword [0x423f70]
cmp eax, dword [ecx + 4]
jle 0x40eb0f
push 0x423f70
call fcn.00416b9d
add esp, 4
cmp dword [0x423f70], 0xffffffff
jne 0x40eb0f
push 0x41afd4
push str.debug.log
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
push 0x423f70
mov dword [0x424178], eax
call fcn.00416b53
add esp, 0xc
push str.Item_Type_not_found
push edi
push str.ERROR:___d___s_n
push 0x200
push 0x423f78
call fcn.0040b3e0
mov ecx, 0x423f78
add esp, 0x14
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40eb34
push dword [0x424178]
sub ecx, edx
push ecx
push 1
push 0x423f78
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
add esp, 0x10
movups xmm0, xmmword [ebp - 0x228]
movups xmmword [ebp - 0x44], xmm0
mov ecx, dword [ebp - 0x44]
movq xmm0, qword [ebp - 0x64]
movq qword [ebp - 0x34], xmm0
mov eax, dword [ebp - 0x30]
cmp eax, 0x10
mov byte [ebp - 4], 0xf
mov eax, dword [esi + 4]
lea edi, [ebp - 0x44]
cmovae edi, ecx
mov ecx, dword [esi]
test eax, eax
je 0x40eb9f
add eax, ecx
push eax
push ecx
push str._u_u
push 0x15
push 0x423f58
call fcn.0040b3e0
add esp, 0x14
jmp 0x40ebb4
push ecx
push 0x41ab5c
push 0x15
push 0x423f58
call fcn.0040b3e0
add esp, 0x10
mov ecx, 0x423f58
mov dword [ebp - 0x4c], 0
xorps xmm0, xmm0
mov dword [ebp - 0x48], 0
movups xmmword [ebp - 0x5c], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40ebd1
sub ecx, edx
push ecx
push 0x423f58
lea ecx, [ebp - 0x5c]
call fcn.0040a9a0
push dword [ebp - 0x200]
cmp dword [ebp - 0x48], 0x10
lea eax, [esi + 8]
push dword [ebp - 0x1f8]
lea ecx, [ebp - 0x5c]
push dword [ebp - 0x1f4]
cmovae ecx, dword [ebp - 0x5c]
push dword [ebp - 0x1f0]
push dword [ebp - 0x1ec]
push dword [ebp - 0x1e8]
push dword [ebp - 0x1e4]
push dword [ebp - 0x1e0]
push dword [ebp - 0x1fc]
push dword [ebp - 0x1dc]
push dword [ebp - 0x1bc]
push dword [ebp - 0x210]
push dword [ebp - 0x1b0]
push dword [ebp - 0x214]
push dword [ebp - 0x1c0]
push dword [ebp - 0x218]
push dword [ebp - 0x198]
push dword [ebp - 0x1c4]
push dword [ebp - 0x19c]
push dword [ebp - 0x1c8]
push dword [ebp - 0x1cc]
push dword [ebp - 0x1d0]
push dword [ebp - 0x1d4]
push dword [ebp - 0x1d8]
push dword [ebp - 0x1a0]
push dword [ebp - 0x1a4]
push dword [ebp - 0x1a8]
push dword [ebp - 0x1ac]
push dword [ebp - 0x1b4]
push dword [ebp - 0x180]
push edi
push eax
push ecx
push str._s_t_s_t_s_t_s_t_u_t_s_t_s_t_s_t_s_t_u_t_u_t_u_t_u_t_u_t_s_t_d_t_s_t_d_t_s_t_d_t_s_t_d_t_s_t_d_t_d_t_d_t_d_t_d_t_d_t_d_t_u_t_u_t_d_n
push dword [ebp - 0x178]
call fcn.00407ca0
mov ecx, dword [ebp - 0x48]
add esp, 0x8c
cmp ecx, 0x10
jb 0x40ecf7
mov edx, dword [ebp - 0x5c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40eced
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f0b9
push ecx
push edx
call fcn.00416a46
add esp, 8
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
cmp ecx, 0x10
jb 0x40ed41
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40ed37
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f0b9
push ecx
push edx
call fcn.00416a46
add esp, 8
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
cmp ecx, 0x10
jb 0x40ed8b
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40ed81
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f0b9
push ecx
push edx
call fcn.00416a46
add esp, 8
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0xa8]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
cmp ecx, 0x10
jb 0x40eddb
mov edx, dword [ebp - 0xbc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40edd1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f0b9
push ecx
push edx
call fcn.00416a46
add esp, 8
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0xc0]
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0xf
mov byte [ebp - 0xbc], 0
cmp ecx, 0x10
jb 0x40ee34
mov edx, dword [ebp - 0xd4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40ee2a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f0b9
push ecx
push edx
call fcn.00416a46
add esp, 8
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x90]
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc0], 0xf
mov byte [ebp - 0xd4], 0
cmp ecx, 0x10
jb 0x40ee8d
mov edx, dword [ebp - 0xa4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40ee83
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f0b9
push ecx
push edx
call fcn.00416a46
add esp, 8
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x108]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
cmp ecx, 0x10
jb 0x40eee6
mov edx, dword [ebp - 0x11c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40eedc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f0b9
push ecx
push edx
call fcn.00416a46
add esp, 8
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0xf0]
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x108], 0xf
mov byte [ebp - 0x11c], 0
cmp ecx, 0x10
jb 0x40ef3f
mov edx, dword [ebp - 0x104]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40ef35
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f0b9
push ecx
push edx
call fcn.00416a46
add esp, 8
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0xd8]
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xf0], 0xf
mov byte [ebp - 0x104], 0
cmp ecx, 0x10
jb 0x40ef98
mov edx, dword [ebp - 0xec]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40ef8e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f0b9
push ecx
push edx
call fcn.00416a46
add esp, 8
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x120]
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xd8], 0xf
mov byte [ebp - 0xec], 0
cmp ecx, 0x10
jb 0x40eff1
mov edx, dword [ebp - 0x134]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40efe7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f0b9
push ecx
push edx
call fcn.00416a46
add esp, 8
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x138]
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x120], 0xf
mov byte [ebp - 0x134], 0
cmp ecx, 0x10
jb 0x40f046
mov edx, dword [ebp - 0x14c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40f03c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f0b9
push ecx
push edx
call fcn.00416a46
add esp, 8
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x150]
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x138], 0xf
mov byte [ebp - 0x14c], 0
cmp ecx, 0x10
jb 0x40f09b
mov edx, dword [ebp - 0x164]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40f091
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f0b9
push ecx
push edx
call fcn.00416a46
add esp, 8
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp eax, dword [ebp - 0x16c]
jb 0x40e690
jmp 0x40e408
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3