Function at 0x40bad0
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Print debug messages
Read .ini file
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x45d9eb
mov eax, dword fs:[0]
push eax
sub esp, 0x708
mov eax, dword [0x4754f4]
xor eax, esp
mov dword [esp + 0x704], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4754f4]
xor eax, esp
push eax
lea eax, [esp + 0x71c]
mov dword fs:[0], eax
mov eax, dword [esp + 0x72c]
mov dword [esp + 0x4c], eax
add eax, 4
push eax
lea ecx, [esp + 0xe0]
call fcn.00402eb0
push str.GameInfoModifyXml.ini
push eax
lea eax, [esp + 0x24]
push eax
mov dword [esp + 0x730], 0
call fcn.00402300
add esp, 0xc
mov byte [esp + 0x724], 2
mov eax, dword [esp + 0xdc]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40bb6f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x1c]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
jne 0x40bbb0
mov dword [esp + 0x724], 0xffffffff
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40bba9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor al, al
jmp 0x40cc14
mov dword [esp + 0x30], 1
mov edx, dword [esp + 0x30]
push 0xa
push 0xa
lea ecx, [esp + 0xfc]
xor eax, eax
push ecx
push edx
mov byte [esp + 0x104], 0
mov dword [esp + 0x105], eax
mov dword [esp + 0x109], eax
mov byte [esp + 0x10d], al
call fcn.0042db1e
mov eax, dword [esp + 0x2c]
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
add esp, 0x10
push eax
push 0x104
lea ecx, [esp + 0x20c]
push ecx
push 0x465b3c
push str.name
lea edx, [esp + 0x108]
push edx
call esi
mov eax, dword [esp + 0x1c]
push eax
push 0x104
lea ecx, [esp + 0x414]
push ecx
push 0x465b3c
push 0x468060
lea edx, [esp + 0x108]
push edx
call esi
mov eax, dword [esp + 0x1c]
push eax
push 0x104
lea ecx, [esp + 0x61c]
push ecx
push 0x465b3c
push str.param
lea edx, [esp + 0x108]
push edx
call esi
mov eax, dword [esp + 0x1c]
push eax
push 0xa
lea ecx, [esp + 0x310]
push ecx
push 0x465b3c
push 0x468854
lea edx, [esp + 0x108]
push edx
call esi
mov eax, dword [esp + 0x1c]
push eax
push 0x104
lea ecx, [esp + 0x518]
push ecx
push 0x465b3c
push str.KeyName
lea edx, [esp + 0x108]
push edx
call esi
lea eax, [esp + 0x204]
lea ecx, [eax + 1]
jmp 0x40bcc0
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x40bcc0
sub eax, ecx
cmp eax, 1
jb 0x40cbe7
lea eax, [esp + 0x510]
push eax
lea ecx, [esp + 0x8c]
call fcn.00402eb0
mov esi, eax
lea ecx, [esp + 0x308]
push ecx
lea ecx, [esp + 0xc4]
mov byte [esp + 0x728], 3
call fcn.00402eb0
mov edi, eax
lea edx, [esp + 0x614]
push edx
lea ecx, [esp + 0x84]
mov byte [esp + 0x728], 4
call fcn.00402eb0
mov ebp, eax
lea eax, [esp + 0x40c]
push eax
lea ecx, [esp + 0xd4]
mov byte [esp + 0x728], 5
call fcn.00402eb0
mov ebx, eax
lea ecx, [esp + 0x204]
push ecx
lea ecx, [esp + 0x7c]
mov byte [esp + 0x728], 6
call fcn.00402eb0
push 0x465b00
push eax
lea edx, [esp + 0xc0]
push edx
mov byte [esp + 0x730], 7
call fcn.00402300
push ebx
push eax
lea eax, [esp + 0x84]
push eax
mov byte [esp + 0x73c], 8
call fcn.00402240
push 0x465b00
push eax
lea ecx, [esp + 0xe8]
push ecx
mov byte [esp + 0x748], 9
call fcn.00402300
push ebp
push eax
lea edx, [esp + 0x94]
push edx
mov byte [esp + 0x754], 0xa
call fcn.00402240
push 0x465b00
push eax
lea eax, [esp + 0xe8]
push eax
mov byte [esp + 0x760], 0xb
call fcn.00402300
push edi
push eax
lea ecx, [esp + 0xa4]
push ecx
mov byte [esp + 0x76c], 0xc
call fcn.00402240
add esp, 0x48
push 0x465b00
push eax
lea edx, [esp + 0xcc]
mov byte [esp + 0x72c], 0xd
push edx
call fcn.00402300
push esi
push eax
lea eax, [esp + 0x6c]
push eax
mov byte [esp + 0x73c], 0xe
call fcn.00402240
push 0x465a78
push eax
lea ecx, [esp + 0xc8]
push ecx
mov byte [esp + 0x748], 0xf
call fcn.00402300
mov eax, dword [eax]
add esp, 0x24
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esp + 0xa8]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40be6d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 0xe
mov eax, dword [esp + 0x58]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40be95
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 0xd
mov eax, dword [esp + 0xc4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40bec0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 0xc
mov eax, dword [esp + 0x60]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40bee8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 0xb
mov eax, dword [esp + 0xb0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40bf13
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 0xa
mov eax, dword [esp + 0x68]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40bf3b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 9
mov eax, dword [esp + 0xc8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40bf66
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 8
mov eax, dword [esp + 0x70]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40bf8e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 7
mov eax, dword [esp + 0xb8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40bfb9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 6
mov eax, dword [esp + 0x78]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40bfe1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 5
mov eax, dword [esp + 0xd0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c00c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 4
mov eax, dword [esp + 0x80]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c037
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 3
mov eax, dword [esp + 0xc0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c062
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 2
mov eax, dword [esp + 0x88]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c08d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push ecx
lea edx, [esp + 0x30c]
mov ecx, esp
mov dword [esp + 0x18], esp
push edx
call fcn.00402eb0
mov edi, dword [esp + 0x50]
lea eax, [esp + 0x4c]
push eax
mov ecx, edi
call fcn.0040cc50
lea ecx, [esp + 0x40c]
push ecx
lea ecx, [esp + 0x94]
mov byte [esp + 0x728], 0x10
call fcn.00402eb0
push eax
lea edx, [esp + 0x4c]
push edx
lea eax, [esp + 0x48]
push eax
mov byte [esp + 0x730], 0x11
call fcn.00402240
add esp, 0xc
mov byte [esp + 0x724], 0x13
mov eax, dword [esp + 0x90]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c113
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0x103
lea ecx, [esp + 0x105]
push 0
push ecx
mov byte [esp + 0x10c], 0
call fcn.004314b0
mov edx, dword [esp + 0x28]
add esp, 0xc
push edx
push 0x104
lea eax, [esp + 0x108]
push eax
push 0x465b3c
push str.file
push str.config
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [esp + 0x100]
push ecx
lea ecx, [esp + 0xd0]
call fcn.00402eb0
mov esi, eax
add edi, 4
push edi
lea ecx, [esp + 0x9c]
mov byte [esp + 0x728], 0x14
call fcn.00402eb0
push 0x465af8
push eax
lea edx, [esp + 0xe0]
push edx
mov byte [esp + 0x730], 0x15
call fcn.00402300
push esi
push eax
lea eax, [esp + 0x3c]
push eax
mov byte [esp + 0x73c], 0x16
call fcn.00402240
add esp, 0x18
mov byte [esp + 0x724], 0x18
mov eax, dword [esp + 0xd8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c1e4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 0x19
mov eax, dword [esp + 0x98]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c20f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 0x1a
mov eax, dword [esp + 0xcc]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c23a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x100]
push ecx
lea ecx, [esp + 0x58]
call fcn.00402eb0
mov esi, eax
push edi
lea ecx, [esp + 0x54]
mov byte [esp + 0x728], 0x1b
call fcn.00402eb0
push 0x465af8
push eax
lea edx, [esp + 0xdc]
push edx
mov byte [esp + 0x730], 0x1c
call fcn.00402300
push esi
push eax
lea eax, [esp + 0xb4]
push eax
mov byte [esp + 0x73c], 0x1d
call fcn.00402240
push str..tmp
push eax
lea ecx, [esp + 0xdc]
push ecx
mov byte [esp + 0x748], 0x1e
call fcn.00402300
add esp, 0x24
mov byte [esp + 0x724], 0x20
mov eax, dword [esp + 0xa0]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40c2da
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 0x21
mov eax, dword [esp + 0xd4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c305
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 0x22
mov eax, dword [esp + 0x50]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c32d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 0x23
mov eax, dword [esp + 0x54]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c355
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0xe0]
call fcn.0041c9a1
push 0
mov byte [esp + 0x728], 0x24
mov ecx, dword [esp + 0x2c]
push 2
push ecx
lea ecx, [esp + 0xec]
call fcn.0041c9b9
test eax, eax
je 0x40cb1c
call fcn.00410db9
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x40cc3e
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x18], eax
mov byte [esp + 0x724], 0x25
call fcn.00410db9
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x40cc3e
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
lea edi, [eax + 0x10]
mov dword [esp + 0x14], edi
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0xe4]
mov byte [esp + 0x728], 0x26
call fcn.0041ceed
test eax, eax
je 0x40ca8b
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], 0
jge 0x40c406
or esi, 0xffffffff
jmp 0x40c423
push 0x4680bc
push eax
call fcn.00430179
add esp, 8
test eax, eax
jne 0x40c41d
or esi, 0xffffffff
jmp 0x40c423
sub eax, dword [esp + 0x18]
mov esi, eax
push esi
lea edx, [esp + 0x3c]
push edx
lea ecx, [esp + 0x20]
call fcn.00406010
mov byte [esp + 0x724], 0x27
mov eax, dword [esp + 0x18]
mov eax, dword [eax - 0xc]
sub eax, esi
dec eax
push eax
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x20]
call fcn.00405f90
mov byte [esp + 0x724], 0x28
mov ebx, dword [esp + 0x24]
cmp dword [ebx - 0xc], 0
jge 0x40c46a
or esi, 0xffffffff
jmp 0x40c485
push 0x4680bc
push ebx
call fcn.00430179
add esp, 8
test eax, eax
jne 0x40c481
or esi, 0xffffffff
jmp 0x40c485
sub eax, ebx
mov esi, eax
push esi
lea edx, [esp + 0x30]
push edx
lea ecx, [esp + 0x2c]
call fcn.00406010
mov byte [esp + 0x724], 0x29
mov eax, dword [ebx - 0xc]
sub eax, esi
dec eax
push eax
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x2c]
call fcn.00405f90
lea ecx, [esp + 0x204]
mov byte [esp + 0x724], 0x2a
mov edx, dword [esp + 0x2c]
push ecx
push edx
call fcn.0042da2a
mov ebp, dword [esp + 0x28]
add esp, 8
test eax, eax
sete al
test al, al
je 0x40c8ec
cmp dword [ebp - 0xc], 0
jge 0x40c4ea
or esi, 0xffffffff
jmp 0x40c505
push 0x4680bc
push ebp
call fcn.00430179
add esp, 8
test eax, eax
jne 0x40c501
or esi, 0xffffffff
jmp 0x40c505
sub eax, ebp
mov esi, eax
push esi
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x28]
call fcn.00406010
mov byte [esp + 0x724], 0x2b
mov eax, dword [ebp - 0xc]
sub eax, esi
dec eax
push eax
lea ecx, [esp + 0x40]
push ecx
lea ecx, [esp + 0x28]
call fcn.00405f90
mov byte [esp + 0x724], 0x2c
mov ebx, dword [esp + 0x3c]
cmp dword [ebx - 0xc], 0
jge 0x40c548
or ecx, 0xffffffff
jmp 0x40c563
push 0x4680bc
push ebx
call fcn.00430179
add esp, 8
test eax, eax
jne 0x40c55f
or ecx, 0xffffffff
jmp 0x40c563
sub eax, ebx
mov ecx, eax
mov eax, dword [ebx - 0xc]
sub eax, ecx
dec eax
push eax
lea edx, [esp + 0x38]
push edx
lea ecx, [esp + 0x44]
call fcn.00405f90
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0xac]
push edx
mov byte [esp + 0x730], 0x2d
call fcn.00402240
push 0x4680bc
push eax
lea eax, [esp + 0xb0]
push eax
mov byte [esp + 0x73c], 0x2e
call fcn.00402300
lea ecx, [esp + 0x44]
push ecx
push eax
lea edx, [esp + 0xb4]
push edx
mov byte [esp + 0x748], 0x2f
call fcn.00402240
push 0x4680bc
push eax
lea eax, [esp + 0xb8]
push eax
mov byte [esp + 0x754], 0x30
call fcn.00402300
lea ecx, [esp + 0x74]
push ecx
push eax
lea edx, [esp + 0xbc]
push edx
mov byte [esp + 0x760], 0x31
call fcn.00402240
push 0x4680bc
push eax
lea eax, [esp + 0xc0]
push eax
mov byte [esp + 0x76c], 0x32
call fcn.00402300
add esp, 0x48
lea ecx, [esp + 0x40]
push ecx
push eax
lea edx, [esp + 0x7c]
push edx
mov byte [esp + 0x730], 0x33
call fcn.00402240
push 0x4680bc
push eax
lea eax, [esp + 0x80]
push eax
mov byte [esp + 0x73c], 0x34
call fcn.00402300
lea ecx, [esp + 0x4c]
push ecx
push eax
lea edx, [esp + 0x84]
push edx
mov byte [esp + 0x748], 0x35
call fcn.00402240
mov byte [esp + 0x748], 0x36
push 0x468888
push eax
lea eax, [esp + 0x88]
push eax
call fcn.00402300
add esp, 0x30
mov byte [esp + 0x724], 0x37
mov ecx, dword [eax]
lea eax, [ecx - 0x10]
lea esi, [edi - 0x10]
cmp eax, esi
je 0x40c6f0
cmp dword [esi + 0xc], 0
lea edi, [esi + 0xc]
jl 0x40c6de
mov edx, dword [eax]
cmp edx, dword [esi]
jne 0x40c6de
push eax
call fcn.004028c0
mov ebp, eax
add esp, 4
or eax, 0xffffffff
lock xadd dword [edi], eax
dec eax
test eax, eax
jg 0x40c6d1
mov ecx, dword [esi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push esi
call eax
lea edi, [ebp + 0x10]
mov ebp, dword [esp + 0x20]
mov dword [esp + 0x14], edi
jmp 0x40c6f0
mov eax, dword [ecx - 0xc]
push eax
push ecx
lea ecx, [esp + 0x1c]
call fcn.00402da0
mov edi, dword [esp + 0x14]
mov byte [esp + 0x724], 0x36
mov eax, dword [esp + 0x5c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c718
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 0x35
mov eax, dword [esp + 0x64]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c740
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 0x34
mov eax, dword [esp + 0x6c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c768
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 0x33
mov eax, dword [esp + 0x74]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c790
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 0x32
mov eax, dword [esp + 0x7c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c7b8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 0x31
mov eax, dword [esp + 0x84]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c7e3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 0x30
mov eax, dword [esp + 0x8c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c80e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 0x2f
mov eax, dword [esp + 0x94]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c839
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 0x2e
mov eax, dword [esp + 0x9c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c864
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 0x2d
mov eax, dword [esp + 0xa4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c88f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 0x2c
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c8b7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [ebx - 0x10]
mov byte [esp + 0x724], 0x2b
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c8db
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 0x2a
mov eax, dword [esp + 0x44]
jmp 0x40c9ba
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0xbc]
push eax
call fcn.00402240
push 0x468888
push eax
lea ecx, [esp + 0xc0]
push ecx
mov byte [esp + 0x73c], 0x38
call fcn.00402300
add esp, 0x18
mov byte [esp + 0x724], 0x39
mov ecx, dword [eax]
lea eax, [ecx - 0x10]
lea esi, [edi - 0x10]
cmp eax, esi
je 0x40c980
cmp dword [esi + 0xc], 0
lea edi, [esi + 0xc]
jl 0x40c96e
mov edx, dword [eax]
cmp edx, dword [esi]
jne 0x40c96e
push eax
call fcn.004028c0
mov ebx, eax
add esp, 4
or eax, 0xffffffff
lock xadd dword [edi], eax
dec eax
test eax, eax
jg 0x40c965
mov ecx, dword [esi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push esi
call eax
lea edi, [ebx + 0x10]
mov dword [esp + 0x14], edi
jmp 0x40c980
mov eax, dword [ecx - 0xc]
push eax
push ecx
lea ecx, [esp + 0x1c]
call fcn.00402da0
mov edi, dword [esp + 0x14]
mov byte [esp + 0x724], 0x38
mov eax, dword [esp + 0xac]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c9ab
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 0x2a
mov eax, dword [esp + 0xb4]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c9d6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [ebp - 0x10]
mov byte [esp + 0x724], 0x29
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c9fa
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 0x28
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40ca22
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 0x27
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40ca4a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 0x26
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40ca72
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0xe4]
call fcn.0041ceed
test eax, eax
jne 0x40c3f7
lea ecx, [esp + 0xe0]
call fcn.0041cd67
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [esp + 0x28]
push 0
push 0x1002
push edx
lea ecx, [esp + 0xec]
call fcn.0041c9b9
push edi
lea ecx, [esp + 0xe4]
call fcn.0041cbaa
lea ecx, [esp + 0xe0]
call fcn.0041cd67
lea eax, [edi - 0x10]
mov byte [esp + 0x724], 0x25
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40caf4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 0x24
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40cb1c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0xe0]
mov byte [esp + 0x724], 0x23
call fcn.0041cdd2
mov byte [esp + 0x724], 0x1a
mov eax, dword [esp + 0xbc]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40cb5b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 0x13
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40cb83
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 0x10
mov eax, dword [esp + 0x40]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40cbab
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x724], 2
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40cbd3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x1388
mov dword [esp + 0x30], eax
jl 0x40bbb8
mov dword [esp + 0x724], 0xffffffff
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40cc12
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov al, 1
mov ecx, dword [esp + 0x71c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x704]
xor ecx, esp
call fcn.0042d298
add esp, 0x714
ret 4
push 0x80004005
call fcn.00402d50
int3