Function at 0x40dab7
Capabilities:
Check os version
Encrypt data using speck
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp + 8]
push eax
push ecx
push edx
add dword [ebp - 0x2c], 0xaed
push dword [ebp - 0x50]
cmp dword [ebp - 0x3c], 1
je 0x405763
call fcn.0041080d
xor esi, dword [ebp - 0x5c]
xor edx, dword [ebp - 0x48]
cmp dword [ebp - 0x20], 1
jne 0x4057b9
xor esi, dword [ebp - 0x64]
push dword [ebp - 0x20]
add esi, 0xfd6b
push 0xffffffff
and esi, ebx
add dword [ebp - 0x2c], esi
sub edi, eax
add eax, esi
mov edx, dword [ebp - 0x68]
mov ebx, edi
mov eax, dword [ebp - 0x50]
add eax, 0x5cc
call dword [eax]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x68], edx
and dword [ebp - 0x5c], ecx
or edx, dword [ebp - 0x38]
jmp 0x4057f0
mov ebx, dword [ebp - 0x50]
xor eax, dword [ebp - 0x34]
mov edx, esi
or dword [ebx + 4], 4
xor ebx, dword [ebp - 0x58]
add ecx, dword [ebp - 0x58]
jmp 0x4057f0
mov esi, dword [ebp - 0x30]
or dword [ebp - 0x64], 0x904
sub ebx, ecx
mov dword [esi - 0x94], 0x400
and edi, esi
mov esi, dword [ebp - 0x30]
and dword [ebp - 0x6c], 0x558
or eax, edx
mov dword [esi - 0x90], 0
add edx, eax
push 4
add ecx, 0xf139
and edi, dword [ebp - 0x58]
push 0x3000
and ebx, dword [ebp - 0x44]
and eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x3c], 0xffffffe8
jne 0x405855
add eax, edx
lea edx, [ebp - 0x68]
push edx
mov edx, dword [ebp - 0x30]
push dword [edx - 4]
call fcn.0040456b
mov ecx, dword [ebp - 0x30]
test dword [ebp - 0x28], 0
je 0x40d814
sub ecx, 0x40
je 0x40d875
sub ecx, 0x41a539
je 0x40d870
sub ecx, 0x40
jne 0x40d88f
mov dword [ecx - 0x28], 0
mov ebx, dword [ebp - 0x30]
mov dword [ebx - 0x2c], 0
xor ecx, esi
or dword [ebp - 0x48], ecx
push 4
xor dword [ebp - 0x2c], 0x3aa
sub esi, dword [ebp - 0x2c]
cmp dword [ebp - 0x3c], 0x400002
jne 0x40d863
mov dword [edx], 0
mov eax, dword [ebp - 0xa8]
mov dword [eax], 0
mov ecx, dword [ebp - 0x98]
push 0
xor esi, dword [ebp - 0x6c]
push 1
and esi, eax
sub esi, dword [ebp - 0x2c]
or esi, ecx
mov ecx, edx
mov ecx, edi
mov ecx, dword [ebp - 0x20]
or edi, dword [ebp - 0x6c]
or dword [ebp - 0x48], esi
mov esi, dword [ebp - 0x30]
add eax, esi
lea ecx, [esi - 0x2c]
mov dword [ebp - 0x20], ecx
or edi, eax
xor esi, eax
xor dword [ebp - 0x64], eax
push dword [ebp - 0x20]
cmp dword [ebp - 0x3c], 2
jne 0x40d8a5
mov ecx, dword [ebp - 0x30]
push 0
add dword [ebp - 0x5c], ecx
or eax, ebx
push 0
sub eax, ebx
mov eax, 0x66858fd8
mov eax, ebx
add dword [ebp - 0x28], 0
je 0x40d8d4
xor edx, edx
cmp dword [ebp + 0x10], edx
je 0x409ce5
movzx ecx, word [edi]
push 0
add eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x3c], 0xf
jne 0x40d8f1
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x28], 0
je 0x40d906
pop edi
push edi
lea eax, [ebp - 4]
push eax
lea eax, [ebp + 8]
mov ecx, dword [ebp - 0x30]
sub esi, dword [ebp - 0x64]
lea eax, [ecx - 0x28]
mov dword [ebp - 0x20], eax
lea ebx, [ecx + 0xed0]
sub edx, esi
push dword [ebp - 0x20]
xor dword [ebp - 0x1c], ebx
and dword [ebp - 0x34], esi
push 0xffffffff
mov esi, dword [ebp - 0x30]
cmp dword [ebp - 0x3c], 0x400002
jne 0x40d94a
push dword [esi - 4]
mov edx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x50]
add eax, 0x594
call dword [eax]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x68], edx
add dword [ebp - 0x44], ebx
or word [ebp - 0x48], 0x207
lea eax, [ebx + eax*4 + 0x8b3]
cmp dword [ebp - 0x28], 2
jne 0x40d982
mov edx, dword [ebp - 0x20]
or dword [ebp - 0x20], edx
jne 0x40deb1
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x30]
push dword [eax - 0x28]
call fcn.0040456b
cmp dword [ebp - 0x3c], 1
je 0x40d9b0
and edx, esi
cmp edx, ebx
jb fcn.0040d937
test byte [eax + 0x20], 1
mov eax, dword [ebp - 0x30]
lea eax, [eax - 0x38]
push eax
push dword [ebp - 0x20]
call fcn.0040456b
lea eax, [ecx - 0x6f]
test dword [ebp - 0x28], 0
je 0x40d9e2
push 7
pop ecx
cmp eax, ecx
ja 0x41499b
xor eax, eax
or dword [ebp - 0x218], 0xffffffff
mov ecx, dword [ebp - 0x50]
cmp dword [ecx + 0x644], 0
jne 0x40da34
or dword [ebp - 0x2c], ecx
push 0x331ba8a0
mov dword [ebp - 0x58], ecx
sub edx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x50]
push dword [edx + 0x9c]
and word [ebp - 0x64], 0x359
call fcn.00416fbe
sub ecx, dword [ebp - 0x2c]
and dword [ebp - 0x48], 0x59
mov edi, dword [ebp - 0x50]
lea edi, [edi + 0x644]
push edi
push dword [ebp - 0x20]
call fcn.0040456b
or dword [ebp - 0x44], 0x299
push 0x820
and ecx, dword [ebp - 0x34]
mov edi, dword [ebp - 0x30]
cmp dword [ebp - 0x28], 0x400002
jne 0x40da4e
xor eax, eax
pop edi
push dword [edi - 0x28]
or edx, dword [ebp - 0x48]
add edx, edi
call fcn.0040e06f
sub ecx, ebx
sub esi, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x30]
lea edx, [edx - 0x3c]
push edx
push dword [ebp - 0x20]
call fcn.0040456b
mov word [ebp - 0x34], 0xcb4
push 0x880
mov esi, dword [ebp - 0x30]
or ecx, dword [ebp - 0x38]
push dword [esi - 0x28]
add dword [ebp - 0x2c], 6
mov edx, ebx
mov edx, edi
call fcn.0040e06f
mov ecx, dword [ebp - 0x30]
lea ecx, [ecx - 0x40]
push ecx
push dword [ebp - 0x20]
call fcn.0040456b
and dword [ebp - 0x38], 0x2c4
and edx, dword [ebp - 0x1c]
push 0x8e0
cmp dword [ebp - 0x28], 0
je 0x40dac3
lea ebx, [esi + 8]
push ebx
call dword [0x41a04c]
test eax, eax
mov edi, dword [ebp - 0x30]
or esi, dword [ebp - 0x58]
and dword [ebp - 0x5c], eax
push dword [edi - 0x28]
or eax, ebx
xor edi, dword [ebp - 0x48]
call fcn.0040e06f
mov edi, dword [ebp - 0x30]
lea edi, [edi - 0x44]
push edi
push dword [ebp - 0x20]
call fcn.0040456b
and dword [ebp - 0x5c], 0xd27
mov edx, dword [ebp - 0x68]
cmp dword [ebp - 0x28], 0x16
jne 0x40db06
call fcn.00414539
mov dword [eax], 0x16
mov eax, dword [ebp - 0x50]
add eax, 0x644
call dword [eax]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x68], edx
or dword [ebp - 0x64], ecx
cmp dword [ebp - 0x3c], 1
je 0x40db26
add byte [eax], bh
scasd eax, dword es:[edi]
mov ecx, dword [ebp - 0x30]
cmp dword [ecx - 0x3c], 0
je 0x40db8b
xor eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x3c], 1
je 0x40db49
cmp ecx, 8
jb 0x40db5a
rep movsd dword es:[edi], dword [esi]
cmp dword [ebp - 0x28], 0x400002
jne 0x40db65
mov al, byte [ebp - 8]
push 2
mov byte [ebp + 0xc], al
mov byte [ebp + 0xd], bl
mov byte [ebp + 0xe], 0
pop eax
cmp dword [ebp - 0x20], 0xea60
jae 0x40db8b
and edx, ecx
or dword [ebp - 0x64], ecx
mov ebx, dword [ebp - 0x50]
add eax, esi
or dword [ebx + 4], 0x10
jmp 0x40dc1f
add ebx, esi
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x28], 0x74
jne 0x40db9b
mov edi, edi
cmp dword [eax - 0x3c], 0
je 0x40dc1f
or eax, dword [ebp - 0x44]
lea ecx, [ebp - 0x68]
and esi, ebx
add dword [ebp - 0x44], eax
push ecx
xor eax, edx
and dword [ebp - 0x5c], edi
push dword [ebp - 0x20]
and edx, dword [ebp - 0x2c]
call fcn.0040456b
cmp dword [ebp - 0x3c], 0x400002
jne 0x40dbdb
pop esi
mov esp, ebp
pop ebp
call fcn.00415635
pop edi
pop esi
lea edx, [ebp - 0x68]
push edx
mov edx, dword [ebp - 0x30]
push dword [edx - 0x3c]
call fcn.004046fb
or dword [ebp - 0x34], 0x37
test dword [ebp - 0x28], 0
je 0x40dc01
cmp dword [ebp - 0x68], 0xea60
jae 0x40dc1f
mov esi, dword [ebp - 0x50]
or dword [esi + 4], 0x10
or dword [ebp - 0x2c], 0xfffffff0
add ebx, dword [ebp - 0x2c]
cmp dword [ebp - 0x28], 6
jne 0x40dc30
cmp eax, dword [ebp + 0xc]
jae 0x40dbb6
mov ecx, dword [ebp - 0x30]
add dword [ebp - 0x28], 0
je 0x40dc4e
lea eax, [edx + 0xc]
mov ecx, dword [edx - 8]
xor ecx, eax
call fcn.00404943
mov eax, 0x41a212
cmp dword [ecx - 0x40], 0
je 0x40dcc0
mov dword [ebp - 0x58], ebx
lea ecx, [ecx + edx*2 + 0x1106]
mov ecx, eax
cmp dword [ebp - 0x20], 0xea60
jae 0x40dcc0
xor eax, dword [ebp - 0x58]
and ebx, edi
test dword [ebp - 0x28], 0
je 0x40dc9b
call fcn.00417169
push 4
mov dword [ebp - 4], 0
call fcn.00413a60
mov esi, dword [ebp - 0x50]
sub ebx, dword [ebp - 0x2c]
xor ecx, dword [ebp - 0x64]
or dword [esi + 4], 0x20
jmp 0x40dd3e
add ecx, 0xa1fa
mov ecx, dword [ebp - 0x30]
cmp dword [ecx - 0x40], 0
je 0x40dd3e
lea edi, [ebp - 0x68]
lea esi, [esi + eax*4 - 0x48]
test dword [ebp - 0x28], 0
je 0x40dcea
push ebx
push edi
push dword [ebp - 0x20]
call fcn.0040456b
or dword [ebp - 0x6c], 0xdfe
lea ecx, [ebp - 0x68]
push ecx
mov ecx, dword [ebp - 0x30]
push dword [ecx - 0x40]
call fcn.004046fb
cmp dword [ebp - 0x68], 0xea60
jae 0x40dd3e
mov ecx, dword [ebp - 0x30]
or esi, dword [ebp - 0x6c]
cmp dword [ebp - 0x28], 0x46
jne 0x40dd5d
test eax, eax
jne 0x40dda0
cmp dword [ecx - 0x44], 0
je 0x40ddb9
mov eax, dword [ebp - 0x30]
push dword [eax - 4]
or eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x3c], 0x400002
jne 0x40dec9
mov edx, dword [ebp - 0x68]
and eax, dword [ebp - 0x44]
and eax, edx
mov esi, dword [ebp - 0x50]
add esi, 0x598
call dword [esi]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x68], edx
cmp dword [ebp - 0x3c], 1
je 0x40df07
je 0x414f20
cmp eax, 0x11
jne 0x4123bf
lea edx, [ebp - 0x2014]
push edx
call dword [0x41a008]
test dword [ebp - 0x28], 0
je 0x40df17
test esi, esi
je 0x40df5a
mov ecx, dword [ebp - 0x30]
add ebx, dword [ebp - 0x58]
xor edi, dword [ebp - 0x44]
mov dword [ecx - 0x34], 0
lea edi, [esi - 0x17]
add dword [ebp - 0x34], ecx
push 0x8000
and dword [ebp - 0x48], eax
lea ebx, [eax]
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x3c], 1
je 0x40df4b
pop ebx
pop ebp
int3
mov ecx, dword [ebp - 0x30]
xor dword [ebp - 0x44], ebx
cmp dword [ebp - 0x3c], 1
je 0x40df60
add esp, 0x14
mov edi, edi
push ebp
lea eax, [ecx - 0x34]
mov dword [ebp - 0x20], eax
or esi, dword [ebp - 0x48]
cmp dword [ebp - 0x3c], 1
je 0x40df81
or edx, dword [ebp - 0x48]
push dword [ebp - 0x20]
or edx, dword [ebp - 0x5c]
and dword [ebp - 0x64], 0x9cf
or ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x30]
add esi, dword [ebp - 0x5c]
lea edx, [ecx - 0x30]
mov dword [ebp - 0x20], edx
and ecx, eax
xor edx, edi
lea esi, [esi + 0x1413]
xor ecx, esi
push dword [ebp - 0x20]
and word [ebp - 0x6c], 0x836
xor eax, edi
add dword [ebp - 0x28], 0
je 0x40dfc8
push 0xffffffff
add ebx, eax
mov ebx, edx
mov edx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x50]
add eax, 0x5a4
call dword [eax]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x68], edx
cmp dword [ebp - 0x28], 0x400002
jne 0x40dff4
mov dword [ebp - 0x3c], eax
lea edi, [ebp - 0x20]
push edi
mov edi, dword [ebp - 0x30]
push dword [edi - 0x38]
call fcn.0040456b
or eax, dword [ebp - 0x2c]
sub ebx, ecx
pop dword [ebp - 0x50]
mov ebx, dword [ebp - 0x30]
or word [ebp - 0x1c], 0x57e
cmp dword [ebp - 0x28], 0xf
jne 0x40e039
mov byte [ebp - 0x22c], 0x2b
test al, 2
je 0x40e056
mov byte [ebp - 0x22c], 0x20
mov dword [ebp - 0x230], 1
mov esp, ebx
add eax, 0xd5d0
or ebx, edi
cmp dword [ebp - 0x3c], 0x6f
jne 0x40e05b
mov edx, 0x41a0ff
pop dword [ebp - 0x30]
or word [ebp - 0x5c], 0x95d
xor dword [ebp - 0x58], 0x72
ret 4
mov dword fs:[0], ecx
pop ecx
pop edi
push dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
lea esi, [eax + edx*8 + 0xb]
mov edx, dword [ebp - 0x30]
lea eax, [edx - 4]
mov dword [ebp - 0x20], eax
mov word [ebp - 0x48], 0xe67
add eax, dword [ebp - 0x2c]
push dword [ebp - 0x20]
cmp dword [ebp - 0x3c], 0xfffffff6
jne 0x410783
mov eax, dword [0x41a39c]
mov dword [0x41a0e4], eax
push 0xffffffff
add ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x68]
sub edi, ebx
or eax, esi
mov eax, dword [ebp - 0x50]
add eax, 0x5a4
call dword [eax]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x68], edx
lea edi, [ebp - 0x20]
or eax, dword [ebp - 0x38]
push edi
add dword [ebp - 0x48], 0xfffffffe
push dword [ebp - 0x40]
call fcn.0040456b
cmp dword [ebp - 0x3c], 0x400002
jne 0x4107cf
and eax, 0xffff
or eax, 0x80070000
pop ebp
int3
mov eax, dword [ebp - 0x30]
add ecx, edx
cmp dword [ebp - 0x3c], 0x400002
jne 0x4107ed
mov ecx, eax
call fcn.0040fec9
test eax, eax
jne 0x41086a
xor ecx, ecx
mov esp, eax
pop dword [ebp - 0x30]
or dword [ebp - 0x38], 0xffffff86
ret 8
invalid
mov ecx, dword [ebp - 0x4c]
or dword [ebp - 0x4c], ecx
jne 0x4118b9
cmp dword [ebp - 0x3c], 0x400002
jne 0x411861
pop esi
pop ebp
int3
push dword [ebp - 0x50]
call fcn.00412b77
or dword [ebp - 0x64], 0x51c
xor ebx, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x30]
lea ecx, [ecx - 0x4c]
push ecx
push dword [ebp - 0x68]
call fcn.0040456b
and dword [ebp - 0x6c], 0x42
sub esi, dword [ebp - 0x5c]
sub ecx, dword [ebp - 0x58]
cmp dword [ebp - 0x68], 0x60
jb 0x411928
mov edx, dword [ebp - 0x30]
lea eax, [eax - 0x56]
mov dword [edx - 0x14], 0x19
and word [ebp - 0x64], 0xab2
jmp 0x411928
add edi, dword [ebp - 0x6c]
cmp dword [ebp - 0x4c], 1
jne 0x411905
mov edi, dword [ebp - 0x30]
add dword [ebp - 0x64], eax
add ebx, 0xe6
mov dword [edi - 0x14], 2
cmp dword [ebp - 0x3c], 1
je 0x4118f6
mov edx, dword [ebp + 8]
push esi
push edi
mov esi, ecx
test edx, edx
je 0x411948
jmp 0x411928
mov edx, dword [ebp - 0x30]
add esi, 0x4461
sub esi, eax
mov dword [edx - 0x14], 0xa
cmp dword [ebp - 0x28], 7
jne 0x411928
mov ecx, dword [ebp - 0x30]
and eax, edx
cmp dword [ecx - 0x14], 0
je 0x4123f5
sub edi, dword [ebp - 0x34]
cmp dword [ebp - 0x3c], 1
je 0x411956
or esi, eax
shr edx, 0x1f
lea eax, [edi + edi]
or eax, edx
add ecx, 0x41a4a9
mov ebx, dword [ebp - 0x20]
and word [ebp - 0x5c], 0xe6d
add dword [ebp - 0x44], ecx
mov ecx, dword [ebp - 0x30]
or esi, edi
mov esi, edi
xor dword [ebp - 0x34], 0xffffffaa
lea ebx, [ecx - 0x18]
mov dword [ebp - 0x20], ebx
add ecx, eax
push dword [ebp - 0x20]
cmp dword [ebp - 0x3c], 0x400002
jne 0x411991
lea edi, [edx + 0x1367]
test dword [ebp - 0x28], 0
je 0x4119b3
mov dword fs:[0], ebx
mov eax, dword [ebp - 0x28]
mov dword fs:[0], eax
push 0
cmp dword [ebp - 0x3c], 1
je 0x4119ce
or ebx, dword [ebp - 0x6c]
push 0xffffffff
and esi, ebx
add ecx, 0xd548
mov edx, dword [ebp - 0x68]
xor ecx, dword [ebp - 0x2c]
test dword [ebp - 0x28], 0
je 0x4123e4
push dword [ebp + 0x14]
mov esi, dword [ebp - 0x50]
add esi, 0x5a4
call dword [esi]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x68], edx
add dword [ebp - 0x4c], 1
cmp dword [ebp - 0x3c], 0x21
jne 0x412410
cmp edx, ebx
je 0x412446
mov eax, dword [ecx + 0xc]
or eax, edx
cmp dword [ecx + 0x38], ebx
jne 0x412446
cmp dword [ebp - 0x3c], 1
je 0x41241f
jne 0x412419
and dword [eax + 8], 0
cmp dword [ebp - 0x4c], 3
jne 0x411843
add eax, 0x639b
test dword [ebp - 0x28], 0
je 0x41244d
imul eax, dword [ecx], 3
insb byte es:[edi], dx
inc ecx
add bh, bh
push 0x41
add byte [eax], al
mov ecx, dword [ebp - 0x30]
xor esi, eax
xor esi, dword [ebp - 0x6c]
push dword [ecx - 0x10]
sub esi, ebx
cmp dword [ebp - 0x3c], 0x3e
jne 0x412472
lea eax, [ebp + eax - 0xe4]
push 8
push ecx
call fcn.00406639
xor esi, edx
mov edx, dword [ebp - 0x68]
mov word [ebp - 0x64], 0x973
cmp dword [ebp - 0x3c], 0xffffff89
jne 0x4124a2
push dword [0x41a3a2]
push dword [0x41a2c9]
call dword [0x41a058]
call eax
push dword [ebp + 8]
call fcn.00411f35
mov esi, dword [ebp - 0x50]
add esi, 0x598
call dword [esi]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x68], edx
add ecx, dword [ebp - 0x5c]
cmp dword [ebp - 0x28], 0x400002
jne 0x4124cd
push edx
push edi
mov ecx, esi
call fcn.00417d7b
test edi, edi
and edx, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x30]
cmp dword [ebp - 0x28], 0
je 0x4124e9
mov bl, byte [esi]
push edi
lea edi, [esi + 1]
cmp dword [ecx + 0xac], 1
cmp dword [ebx + 0xc], 0xffffffff
jne 0x41251e
xor edi, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
push dword [edx - 0x24]
sub ebx, dword [ebp - 0x44]
sub esi, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x68]
mov esi, dword [ebp - 0x50]
add esi, 0x598
call dword [esi]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x68], edx
add esi, dword [ebp - 0x44]
lea eax, [eax]
lea ecx, [ebp - 0x20]
lea ebx, [ebx + edi*2 + 0x6bc]
push ecx
push dword [ebp - 0x40]
or dword [ebp - 0x6c], ecx
call fcn.0040456b
mov edx, eax
add dword [ebp - 0x44], ebx
pop dword [ebp - 0x40]
or dword [ebp - 0x38], ebx
pop dword [ebp - 0x4c]
and esi, dword [ebp - 0x44]
and dword [ebp - 0x58], 0xffffffb0
pop dword [ebp - 0x50]
cmp dword [ebp - 0x28], 0x400002
jne 0x41255b
mov edx, dword [ebp - 0x30]
and dword [ebp - 0x44], edi
xor esi, ebx
mov esp, edx
xor dword [ebp - 0x48], ebx
pop dword [ebp - 0x30]
sub edx, dword [ebp - 0x6c]
xor esi, dword [ebp - 0x34]
xor eax, dword [ebp - 0x48]
ret 8
xor dword [ebp - 0x58], ebx
jmp 0x4147ac
jmp 0x41461b
mov edi, dword [ebp - 0x4c]
or dword [ebp - 0x5c], ecx
mov al, byte [ebp - 0x68]
mov al, byte [edi]
mov byte [ebp - 0x68], al
cmp dword [ebp - 0x3c], 1
je 0x41452d
jne 0x4144d8
call fcn.0040e66e
mov dword [eax], 0x16
call fcn.0040fd1c
lea edi, [ebp - 0x68]
cmp dword [ebp - 0x28], 0
je 0x414545
push edi
push dword [ebp - 0x20]
call fcn.004047c6
mov ebx, dword [ebp - 0x40]
or eax, dword [ebp - 0x34]
cmp dword [ebp - 0x3c], 0x400002
jne 0x41456c
mov eax, dword [ebp - 0x14]
cmp eax, 0xfffffffe
jne 0x40d7e2
mov dl, byte [ebp - 0x68]
cmp dword [ebp - 0x3c], 0x21
jne 0x414581
mov ecx, dword [edi]
mov cl, byte [esi + ecx + 0x25]
mov byte [ebx], dl
cmp dword [ebp - 0x28], 0
je 0x41458f
mov esp, ebp
pop ebp
mov ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x2c], esi
xor word [ebp - 0x6c], 0xb8c
mov dl, byte [ebp - 0x20]
add dword [ebp - 0x58], eax
add dl, byte [ecx]
add dword [ebp - 0x58], 0xdc5
add ecx, 0xe735
mov byte [ebp - 0x20], dl
cmp dword [ebp - 0x3c], 0x400002
jne 0x4145cf
mov ebx, 1
xor dword [ebp - 0x44], ecx
and word [ebp - 0x2c], 0x4a4
add dword [ebp - 0x4c], ebx
cmp dword [ebp - 0x3c], 0x400002
jne 0x4145f1
int3
xor ecx, dword [ebp - 0x58]
add dword [ebp - 0x40], 1
cmp dword [ebp - 0x28], 0
je 0x41460b
mov edx, dword [ebp - 4]
imul edx, dword [ebp + 0x14]
mov esi, 1
sub edi, esi
and word [ebp - 0x48], 0x98e
sub dword [ebp - 0x54], esi
xor word [ebp - 0x5c], 0x183
lea esi, [edx + 0x2b]
mov ebx, dword [ebp - 0x54]
xor dword [ebp - 0x58], ecx
cmp dword [ebp - 0x3c], 1
je 0x414637
or dword [ebp - 0x54], ebx
jne 0x4144fe
test dword [ebp - 0x28], 0
je 0x414650
add dword [ecx], eax
add dword [ecx], eax
lea eax, [ebp - 0x68]
and edx, dword [ebp - 0x1c]
cmp dword [ebp - 0x3c], 0x400002
jne 0x414670
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
push eax
push dword [ebp - 0x68]
call fcn.004047c6
cmp dword [ebp - 0x3c], 0xffffffb0
jne 0x414694
mov eax, dword [ebp - 0x4c]
mov ebx, ecx
xor edx, eax
mov dl, byte [ebp - 0x68]
sub ebx, ecx
and edi, dword [ebp - 0x48]
mov dl, byte [eax]
xor dword [ebp - 0x38], 0x888
and ebx, eax
mov byte [ebp - 0x68], dl
or dword [ebp - 0x1c], 0x589
and ebx, esi
lea edx, [ebp - 0x68]
push edx
push dword [ebp - 0x20]
add edi, edx
call fcn.004047c6
xor dword [ebp - 0x2c], 0xfffffff0
test dword [ebp - 0x28], 0
je 0x4146df
add dword [ebp - 0x4c], 1
lea edi, [ebp - 0x54]
mov dword [ebp - 0x44], ebx
push edi
cmp dword [ebp - 0x28], 0
je 0x414700
call fcn.00415e95
call fcn.00415635
push dword [ebp - 0x54]
call fcn.004047c6
mov edx, eax
or edi, dword [ebp - 0x64]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x1c], edi
and dword [ebp - 0x2c], 0x3b
xor edx, dword [ebp - 0x6c]
mov cl, byte [ebp - 0x54]
mov ebx, esi
add cl, byte [eax]
sub esi, dword [ebp - 0x2c]
sub esi, ebx
mov byte [ebp - 0x54], cl
mov esi, 1
or ecx, ebx
cmp dword [ebp - 0x3c], 0x400002
jne 0x414754
xor ecx, ecx
mov edx, dword [eax]
mov ecx, dword [edx + 4]
add ecx, eax
mov edx, dword [ecx + 0x14]
and edx, 0x41a387
add dword [ebp - 0x4c], esi
lea esi, [ecx - 0x7a]
lea ecx, [ebp - 0x54]
push ecx
sub edx, dword [ebp - 0x1c]
add eax, edx
push dword [ebp - 0x20]
add ecx, edx
call fcn.004047c6
lea eax, [ebp - 0x4c]
push eax
cmp dword [ebp - 0x3c], 0x64
jne 0x414781
int3
push dword [ebp - 0x68]
call fcn.00404623
and esi, dword [ebp - 0x58]
cmp dword [ebp - 0x3c], 0x3e
jne 0x414797
mov esp, ebp
and ebx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x30]
and ebx, esi
add esi, 0x8fbe
sub dword [ecx - 0xc], 1
add dword [ebp - 0x34], eax
mov edx, dword [ebp - 0x30]
cmp dword [edx - 0xc], 0
jne 0x4144f9
cmp dword [ebp - 0x28], 0x1c
jne 0x4147dc
push dword [esi + 8]
call fcn.00409933
and dword [esi - 0x7c], 0xff0041a3
xor eax, eax
pop ecx
mov dword [esi], eax
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x30]
push dword [eax + 0xc]
call fcn.0040456b
mov dword [ebp - 0x2c], edx
and dword [ebp - 0x34], edx
pop dword [ebp - 0x40]
or ecx, dword [ebp - 0x58]
pop dword [ebp - 0x4c]
sub ecx, edx
lea eax, [ebx + 0x71]
mov eax, 0xd99f4ffa
mov eax, ecx
mov edi, dword [ebp - 0x30]
mov esp, edi
sub edi, edx
and edx, dword [ebp - 0x58]
cmp dword [ebp - 0x28], 0
je 0x414827
je 0x41488b
cmp eax, 0x20000
je 0x414868
cmp eax, 0x24000
pop dword [ebp - 0x30]
or word [ebp - 0x2c], 0x475
cmp dword [ebp - 0x3c], 0x60
jne 0x41483c
mov eax, dword [eax + 4]
ret 0x18
call fcn.00414c0a
mov ecx, dword [ebp + 0x10]
cmp dword [ebp - 0x3c], 0xffffffa8
jne 0x41488f
push 0x41a4e7
call dword [0x41a014]
cmp dword [0x41a189], 0
jne 0x41482a
push 1
push dword [ebp - 0x50]
sub eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x28], 0x400002
jne 0x4148a6
call fcn.0040d4a7
lea ecx, [ebp - 0x50]
push ecx
mov ecx, dword [ebp - 0x30]
push dword [ecx + 0xc]
call fcn.0040456b
mov dword [ebp - 0x2c], 0xb92
and esi, dword [ebp - 0x5c]
push 0
and esi, dword [ebp - 0x48]
xor ebx, dword [ebp - 0x64]
push 0
and esi, dword [ebp - 0x6c]
add dword [ebp - 0x6c], 0xba9
and eax, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x34]
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
lea ebx, [eax - 0x20]
mov dword [ebp - 0x20], ebx
add ecx, dword [ebp - 0x2c]
sub ebx, dword [ebp - 0x2c]
push dword [ebp - 0x20]
lea eax, [edx + ebx + 0x14c2]
mov dword [ebp - 0x5c], 0x3d7
mov edi, dword [ebp - 0x30]
push dword [edi + 8]
or esi, edi
add dword [ebp - 0x28], 0
je 0x414927
je 0x416422
dec eax
jne 0x405745
mov dword [ebp - 0x1c], 0xfeff
cmp dword [ebp - 0x28], 6
jne 0x41493e
je 0x4148f4
mov ecx, dword [ebp - 8]
and dword [ecx + 0x70], 0xfffffffd
mov edi, edi
push ebp
mov ebp, esp
mov edx, dword [ebp - 0x68]
xor dword [ebp - 0x6c], 0x8d9
mov ecx, dword [ebp - 0x50]
add ecx, 0x59c
call dword [ecx]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x68], edx
cmp dword [ebp - 0x20], 1
jne 0x414a6a
cmp dword [ebp - 0x28], 0
je 0x414975
mov eax, dword [eax + 8]
mov edi, dword [ebp - 0x20]
and edx, eax
cmp dword [ebp - 0x3c], 0xe
jne 0x414986
mov edx, dword [ebp - 0x30]
lea edi, [edx - 0x20]
mov dword [ebp - 0x20], edi
cmp dword [ebp - 0x28], 0x400002
jne 0x41499c
push ebp
or ecx, eax
push dword [ebp - 0x20]
sub edx, ebx
mov dword [ebp - 0x5c], esi
mov ecx, dword [ebp - 0x20]
mov edi, dword [ebp - 0x30]
mov dword [ebp - 0x2c], edi
lea ecx, [edi - 0x18]
mov dword [ebp - 0x20], ecx
and dword [ebp - 0x38], 0xffffffc3
or dword [ebp - 0x58], ebx
and esi, dword [ebp - 0x1c]
push dword [ebp - 0x20]
add ecx, dword [ebp - 0x38]
sub edx, dword [ebp - 0x2c]
call fcn.004133b7
or dword [ebp - 0x44], 0x16
mov word [ebp - 0x6c], 0x882
push 2
mov edx, ecx
cmp dword [ebp - 0x3c], 0x400002
jne 0x4149fe
jne 0x4158b6
movzx esi, byte [eax + 1]
movzx ebx, byte [ecx + 1]
sub esi, ebx
je 0x4149c2
xor ebx, ebx
and dword [ebp - 0x2c], edi
add dword [ebp - 0x2c], ebx
push dword [ebp - 0x50]
and eax, ebx
add ebx, ecx
call fcn.00417acb
lea ebx, [esi + 0x1488]
add ebx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x30]
sub esi, ebx
add esi, 0x1f39
lea eax, [ecx - 0x18]
mov dword [ebp - 0x20], eax
push dword [ebp - 0x20]
or eax, edi
cmp dword [ebp - 0x3c], 0x400002
jne 0x414a44
add byte [ebx - 0x2f], bh
inc eax
add byte [eax], al
mov edx, dword [ebp - 0x68]
cmp dword [ebp - 0x3c], 1
je 0x414a55
mov eax, dword [ecx + 0x50]
push edx
push ebx
mov ecx, dword [ebp - 0x50]
add ecx, 0x608
call dword [ecx]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x68], edx
add edi, ecx
add esi, edi
cmp dword [ebp - 0x3c], 0x33
jne 0x414a7b
push edi
mov edi, 0x41a20f
mov eax, edi
pop dword [ebp - 0x50]
mov esi, dword [ebp - 0x30]
mov esp, esi
and ecx, dword [ebp - 0x34]
cmp dword [ebp - 0x3c], 1
je 0x414a91
rep stosd dword es:[edi], eax
pop dword [ebp - 0x30]
cmp dword [ebp - 0x3c], 1
je 0x414aa0
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x6c], eax
add dword [ebp - 0x28], 0
je 0x414aaf
ret 8
sub esi, dword [ebp - 0x6c]
xor dword [ebp - 0x34], 0x9aa
add edi, eax
cmp dword [ebp - 0x28], 0x5b
jne 0x414f3d
or edi, eax
lea eax, [esi + 0xe0]
mov eax, dword [ebp - 0x30]
xor ecx, dword [ebp - 0x48]
or edx, dword [ebp - 0x34]
mov dword [eax - 0x34], 0
cmp dword [ebp - 0x28], 0x400002
jne 0x414f61
int3
mov edi, dword [ebp - 0x30]
mov dword [ebp - 0x48], ebx
add dword [ebp - 0x6c], 0xffffffed
mov dword [edi - 0x38], 0
push 2
or eax, dword [ebp - 0x38]
and dword [ebp - 0x1c], edi
push 0
xor esi, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x58]
push 1
xor eax, dword [ebp - 0x1c]
and edi, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
add ebx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x30]
or dword [ebp - 0x44], eax
and edx, esi
lea eax, [ecx - 0x38]
mov dword [ebp - 0x20], eax
mov byte [ebp - 0x1c], 0xdc
push dword [ebp - 0x20]
sub edi, ecx
push 0
sub edi, ecx
test dword [ebp - 0x28], 0
je 0x414fcb
add esp, 4
mov eax, edi
push 0
cmp dword [ebp - 0x3c], 0x400002
jne 0x414fde
mov cl, byte [edx]
xor eax, esi
push 0
and ecx, dword [ebp - 0x34]
mov word [ebp - 0x64], 0x143
cmp dword [ebp - 0x3c], 0x400002
jne 0x41500a
add esp, 0xc
mov eax, dword [eax + 0xc8]
mov ecx, dword [ebp + 8]
movzx eax, word [eax + ecx*2]
mov eax, dword [ebp - 0x20]
mov ecx, ebx
cmp dword [ebp - 0x3c], 0x400002
jne 0x41502d
setne al
test eax, eax
jne 0x414fdc
call fcn.00407e97
mov dword [eax], 0x16
mov ebx, dword [ebp - 0x30]
xor ecx, dword [ebp - 0x2c]
and ecx, edx
lea eax, [ebx - 0x34]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], esi
and dword [ebp - 0x6c], edi
xor esi, dword [ebp - 0x58]
push dword [ebp - 0x20]
test dword [ebp - 0x28], 0
je 0x41505e
call 0x408ab7
add esp, 4
lea ecx, [ebp - 0x64]
cmp dword [ebp - 0x28], 0x7c
jne 0x415079
add esp, 8
push eax
call 0x40f2e6
add esp, 8
push eax
call 0x413de8
push 0xffffffff
cmp dword [ebp - 0x28], 0x400002
jne 0x41509b
push esi
push edi
mov edi, dword [ebp + 0x18]
mov dword [ebp - 0x88], eax
jne 0x418224
mov ecx, dword [ebp - 0x30]
push dword [ecx - 8]
or edx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x68]
mov esi, dword [ebp - 0x4c]
add esi, 0x594
call dword [esi]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x68], edx
or dword [ebp - 0x5c], edx
mov esi, dword [ebp - 0x20]
or ebx, edx
or dword [ebp - 0x20], esi
je 0x4150e1
add eax, ebx
cmp dword [ebp - 0x20], 0x40000003
jne 0x4162ab
xor edi, dword [ebp - 0x64]
add ebx, dword [ebp - 0x64]
lea eax, [ebp - 0x68]
push eax
mov eax, dword [ebp - 0x30]
push dword [eax - 0x34]
call fcn.0040456b
lea esi, [ebp - 0x68]
push esi
mov esi, dword [ebp - 0x68]
push dword [esi + 0x3c]
call fcn.00404623
cmp dword [ebp - 0x28], 0x400002
jne 0x41510e
push dword [ebp + 0x20]
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x68]
push dword [eax + 0x28]
call fcn.0040456b
and dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x30]
lea eax, [eax - 0x64]
push eax
push dword [ebp - 0x20]
call fcn.0040456b
lea edi, [ebp - 0x20]
push edi
mov edi, dword [ebp - 0x30]
push dword [edi - 0x38]
call fcn.0040456b
mov ecx, dword [ebp - 0x30]
lea ecx, [ecx - 0x44]
push ecx
push dword [ebp - 0x20]
call fcn.0040456b
mov edx, dword [ebp - 0x30]
and ecx, dword [ebp - 0x48]
mov dword [edx - 0x40], 0
xor esi, dword [ebp - 0x2c]
push 0
cmp dword [ebp - 0x28], 0
je 0x415178
mov dword fs:[0], eax
push dword [ebp + 0x18]
push ecx
and dword [ebp - 0x2c], 0x74
lea eax, [ebx]
push 0x8000000
cmp dword [ebp - 0x28], 0x400002
jne 0x4151ac
add dword [ebp - 0x1c], eax
or dword [ebp - 0x64], edx
mov eax, dword [ebp - 0x30]
and dword [ebp - 0x38], 0xffffffc1
lea esi, [eax - 0xbc]
mov dword [ebp - 0x20], esi
add esi, dword [ebp - 0x5c]
add ecx, dword [ebp - 0x1c]
push dword [ebp - 0x20]
mov ecx, esi
cmp dword [ebp - 0x28], 0xfffffffd
jne 0x4158ee
push ecx
mov ecx, eax
call fcn.00417a67
test eax, eax
jne 0x41592c
xor ecx, ecx
mov edi, dword [ebp - 0x20]
add edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x30]
xor ecx, dword [ebp - 0x38]
cmp dword [ebp - 0x3c], 0xffffffe6
jne 0x41590b
not esi
mov dword [0x41a29e], esi
lea edi, [eax - 0xac]
mov dword [ebp - 0x20], edi
push dword [ebp - 0x20]
or eax, dword [ebp - 0x34]
cmp dword [ebp - 0x3c], 0x33
jne 0x415934
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x18], esi
push 0
lea esi, [ebx + 0x18db]
cmp dword [ebp - 0x28], 0
je 0x415954
mov ecx, esi
call fcn.00406a3a
pop edi
mov eax, esi
pop esi
pop ebx
push 0
add eax, dword [ebp - 0x6c]
push 4
or dword [ebp - 0x34], 0x46b
xor eax, dword [ebp - 0x58]
push 0
or edi, dword [ebp - 0x6c]
cmp dword [ebp - 0x3c], 1
je 0x415994
call fcn.00416faa
push dword [esi + 0xc]
call fcn.0040f9ba
push dword [esi + 0x10]
call 0x406a1a
push dword [esi + 0x14]
push 0
or edx, edi
or dword [ebp - 0x44], 0x9a5
push 0
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x2c], cx
mov dword [ebp - 4], 1
push dword [ecx + 0x54]
test dword [ebp - 0x28], 0
je 0x41645c
mov eax, esi
cmp dword [ebp + 0x10], 0
je 0x416452
cmp dword [ebp + 0xc], eax
jae 0x416422
call fcn.004060bd
mov edx, dword [ebp - 0x30]
and ecx, dword [ebp - 0x2c]
push dword [edx + 8]
mov ebx, dword [ebp - 0x30]
add edx, dword [ebp - 0x48]
cmp dword [ebp - 0x3c], 0x400002
jne 0x41647a
mov ecx, dword [esi + 0x20]
push dword [ebx + 0xc]
cmp dword [ebp - 0x3c], 0x21
jne 0x41648b
int3
call fcn.0041797f
xor ecx, dword [ebp - 0x6c]
or edx, dword [ebp - 0x5c]
lea eax, [ebp - 0x54]
push eax
mov eax, dword [ebp - 0x68]
push dword [eax + 6]
call fcn.0040456b
add edx, edi
cmp dword [ebp - 0x3c], 1
je 0x4164b7
jns 0x4164a5
dec edx
or edx, 0xffffffe0
inc edx
mov eax, 0xffff
and dword [ebp - 0x54], eax
lea edi, [ebp - 0x20]
push edi
mov edi, dword [ebp - 0x68]
push dword [edi + 0x14]
call fcn.0040456b
or edx, dword [ebp - 0x1c]
cmp dword [ebp - 0x3c], 1
je 0x4164dd
mov ecx, 0xffff
cmp dword [ebp - 0x28], 0x400002
jne 0x4164f0
call edi
and dword [ebp - 0x20], ecx
and ecx, dword [ebp - 0x2c]
lea ebx, [ebp - 0x68]
push ebx
add ebx, edi
push dword [ebp - 0x20]
call fcn.00404623
xor dword [ebp - 0x58], esi
sub ebx, dword [ebp - 0x48]
add dword [ebp - 0x68], 0x18
jmp 0x4165c3
lea esi, [ebp - 0x20]
push esi
mov esi, dword [ebp - 0x68]
push dword [esi + 0xc]
call fcn.0040456b
lea edx, [ebp - 0x40]
push edx
mov dword [ebp - 0x64], edx
xor ecx, edx
push dword [ebp - 0x20]
call fcn.0040456b
cmp dword [ebp - 0x28], 0xffffff8b
jne 0x416543
push ecx
lea ebx, [ebp - 0x20]
push ebx
mov ebx, dword [ebp - 0x30]
push dword [ebx + 8]
call fcn.00404623
lea ebx, [ebp - 0x40]
push ebx
mov ebx, dword [ebp - 0x30]
push dword [ebx + 0xc]
call fcn.00404623
mov ecx, dword [ebp - 0x68]
push dword [ecx + 8]
xor edx, dword [ebp - 0x44]
mov word [ebp - 0x38], 0x44f
push dword [ebp - 0x20]
add eax, ecx
mov eax, 0x91e6a18b
mov eax, ebx
sub eax, dword [ebp - 0x38]
mov dword [ebp - 0x6c], 0xa1b
push dword [ebp - 0x40]
sub edx, dword [ebp - 0x44]
xor esi, edx
call fcn.0041797f
mov dword [ebp - 0x1c], ecx
mov ebx, 0x28
add dword [ebp - 0x68], ebx
cmp dword [ebp - 0x3c], 1
je 0x4165ab
add eax, dword [ebx]
add eax, dword [ebx]
sub dword [ebp - 0x54], 1
add dword [ebp - 0x28], 0
je 0x4165c3
add esp, 0xc
cmp dword [ebp - 0xa0], esi
je 0x41661f
cmp dword [ebp - 0x3c], 0x400002
jne 0x4165e4
sete cl
mov byte [ebp - 0x2c], cl
mov dword [ebp - 4], 1
test cl, cl
je 0x410748
mov esi, dword [ebp - 0x54]
add edx, 0xa66e
or ecx, dword [ebp - 0x5c]
or dword [ebp - 0x54], esi
jne 0x416519
mov ebx, ecx
mov ebx, edx
add edi, edx
pop dword [ebp - 0x40]
mov ebx, dword [ebp - 0x30]
mov esp, ebx
cmp dword [ebp - 0x28], 0x74
jne 0x416626
add esp, 0x20
call fcn.00405392
cmp dword [eax + 0x94], 0
je 0x4165f9
call fcn.00414aac
xor dword [ebp - 0x2c], ebx
pop dword [ebp - 0x30]
and esi, edi
xor dword [ebp - 0x64], edx
ret 8
and ecx, ebx
push dword [ebp - 0x30]
xor esi, dword [ebp - 0x44]
or word [ebp - 0x64], 0x5a7
mov dword [ebp - 0x30], esp
add esi, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x64]
add edx, 0x4321
push dword [ebp - 0x50]
lea ebx, [ebp - 0x54]
push ebx
mov ebx, dword [ebp - 0x30]
push dword [ebx + 0xc]
call fcn.0040456b
cmp dword [ebp - 0x3c], 1
je 0x418267
call fcn.0040f649
pop ecx
pop ecx
test eax, eax
je 0x418235
mov ebx, dword [ebp - 0x54]
shr ebx, 2
mov dword [ebp - 0x54], ebx
xor esi, eax
cmp dword [ebp - 0x28], 0x74
jne 0x418290
mov esi, eax
push esi
call dword [0x41a008]
mov dword [0x41a188], eax
mov dword [0x41a3a8], eax
test esi, esi
lea edx, [ebp - 0x20]
push edx
mov edx, dword [ebp - 0x30]
push dword [edx + 0x10]
call fcn.0040456b
lea ebx, [ebp - 0x68]
push ebx
mov ebx, dword [ebp - 0x30]
push dword [ebx + 8]
call fcn.0040456b
sub ebx, dword [ebp - 0x5c]
cmp dword [ebp - 0x28], 0x59
jne 0x4182c0