Function at 0x406bbf
Capabilities:
Create thread
Resume thread

Disassembly:
push ebx
push esi
push edi
push ebp
mov ebp, esp
sub esp, 0xc8
sub ebp, 0x40
lea esi, [0x54cd10]
lea edi, [ebp]
mov ecx, 0xe
rep movsd dword es:[edi], dword [esi]
mov cl, byte [0x41563a]
mov eax, dword [0x54cc4c]
mov dword [ebp - 4], eax
mov esi, eax
cwde
shr esi, 0x10
mov byte [ebp - 0x6d], cl
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x14], eax
xor eax, eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x6c], eax
movzx eax, word [ebp - 4]
mov dword [ebp - 0x14], eax
push dword [ebp + 0x24]
pop dword [ebp - 8]
mov al, byte [0x414fcf]
mov ah, byte [0x415181]
mov word [ebp - 0x18], ax
push dword [ebp + 0x28]
pop dword [ebp - 0xc]
push dword [0x410476]
pop dword [ebp - 0x4e]
mov dword [ebp - 0x5a], 0x54cdbc
movzx eax, byte [ebp - 0x18]
add eax, 0x414e64
mov eax, dword [eax]
mov word [ebp - 0x6f], ax
cmp byte [0x414f34], 1
jne 0x406c6e
xor eax, eax
cmp byte [ebp - 0x18], 0x15
jne 0x406c5b
or eax, 0xffffffff
mov edi, dword [ebp - 8]
movzx ebx, word [ebp - 4]
movzx ecx, word [ebp - 2]
imul ecx, ebx
cld
rep stosd dword es:[edi], eax
jmp 0x406c78
mov ecx, 1
call fcn.0040add8
mov eax, 0x476a601a
mov edi, dword [ebp - 0xc]
movzx ecx, word [ebp - 4]
movzx ebx, word [ebp - 2]
imul ecx, ebx
cmp byte [ebp - 0x18], 0x13
jne 0x406c94
shl ecx, 2
cld
rep stosd dword es:[edi], eax
cmp byte [ebp - 0x18], 0xf
jl 0x406cb3
mov eax, 0x476a601a
mov edi, dword [ebp + 0x30]
movzx ecx, word [ebp - 4]
movzx ebx, word [ebp - 2]
imul ecx, ebx
cld
rep stosd dword es:[edi], eax
mov esi, 0x4105bc
mov eax, dword [esi + 8]
mov ebx, dword [esi]
mov edx, dword [esi + 4]
mov edi, 0x54cd80
mov esi, 0x4105b8
call fcn.004082c6
mov esi, 0x54cd80
mov edi, 0x54cdbc
mov ecx, 9
cld
rep movsd dword es:[edi], dword [esi]
mov esi, 0x54cdbc
mov ebx, 0x41055a
call fcn.00408684
mov ebx, dword [ebp - 0x5a]
push dword [0x54ca30]
push 0x20
push ebx
push fcn.0040378f
push 0
push 0
call dword [sym.imp.KERNEL32_CreateThread]
mov dword [0x54cb34], eax
push 0x20
push 0x54cb34
call dword [sym.imp.KERNEL32_SetThreadPriority]
push 1
push dword [0x54cb34]
call dword [sym.imp.KERNEL32_SetThreadAffinityMask]
push dword [0x54ca34]
push 0x20
push 0
push 0x4034e9
push 0
push 0
call dword [sym.imp.KERNEL32_CreateThread]
mov dword [0x54cb38], eax
push 0x20
push 0x54cb38
call dword [sym.imp.KERNEL32_SetThreadPriority]
push 2
push dword [0x54cb38]
call dword [sym.imp.KERNEL32_SetThreadAffinityMask]
push dword [0x54cb34]
call dword [sym.imp.KERNEL32_ResumeThread]
push dword [0x54cb38]
call dword [sym.imp.KERNEL32_ResumeThread]
push 0
push 0xffffffffffffffff
push 1
push 0x54cb34
push 2
call dword [sym.imp.KERNEL32_WaitForMultipleObjectsEx]
push dword [0x54cb34]
call dword [sym.imp.KERNEL32_CloseHandle]
push dword [0x54cb38]
call dword [sym.imp.KERNEL32_CloseHandle]
cmp byte [0x41540c], 0
je 0x406dc1
mov eax, 0x406a69
xor edx, edx
mov ecx, 3
call fcn.0040998f
cmp byte [ebp - 0x17], 5
jne 0x406dda
mov esi, dword [0x54cd20]
mov ecx, 0x3c
movups xmm1, xmmword [esi]
add esi, 0x10
loop 0x406dd2
movzx eax, word [ebp - 4]
movzx ecx, word [ebp - 2]
mul ecx
mov ecx, eax
shr ecx, 2
inc ecx
xor eax, eax
mov edi, dword [0x54cd48]
cld
rep stosd dword es:[edi], eax
cmp byte [0x41561b], 1
jne 0x406e61
movzx eax, byte [0x41500d]
mov ebx, 0x200
cmp al, 2
jne 0x406e12
movzx ebx, word [ebp - 4]
cld
mov edi, dword [ebp - 8]
mov esi, 0x7cf8e0
xor ecx, ecx
push ecx
xor edx, edx
push edx
cmp al, 2
je 0x406e31
and edx, 0x1ff
and ecx, 0x1ff
push ecx
imul ecx, ebx
add ecx, edx
shl ecx, 2
mov esi, 0x7cf8e0
cmp byte [0x41500d], 2
cmove esi, dword [0x54ccfc]
add esi, ecx
movsd dword es:[edi], dword [esi]
pop ecx
pop edx
inc edx
cmp dx, word [ebp - 4]
jne 0x406e20
pop ecx
inc ecx
cmp cx, word [ebp - 2]
jne 0x406e1d
or ebx, 0xffffffff
mov eax, dword [0x4158ee]
cmp eax, ebx
je 0x406f1f
movss xmm0, dword [0x54cc70]
movss xmm1, dword [0x54cc6c]
xorps xmm2, xmm2
punpcklwd xmm0, xmm2
punpcklwd xmm1, xmm2
psubd xmm0, xmm1
cvtdq2ps xmm0, xmm0
mov edi, dword [ebp + 0x10]
movzx ebx, byte [0x415105]
cmp ebx, 1
jne 0x406eb3
dec eax
imul eax, eax, 0xc
movlps xmm1, qword [eax + edi]
addps xmm1, xmm0
movlps qword [eax + edi], xmm1
jmp 0x406f1f
cmp ebx, 2
jne 0x406ef2
imul eax, eax, 0xc
add eax, dword [ebp + 0xc]
mov ebx, dword [eax + 4]
mov ecx, dword [eax + 8]
mov eax, dword [eax]
imul eax, eax, 0xc
imul ebx, ebx, 0xc
imul ecx, ecx, 0xc
movlps xmm1, qword [eax + edi]
movlps xmm2, qword [ebx + edi]
movlps xmm3, qword [ecx + edi]
addps xmm1, xmm0
addps xmm2, xmm0
addps xmm3, xmm0
movlps qword [eax + edi], xmm1
movlps qword [ebx + edi], xmm2
movlps qword [ecx + edi], xmm3
jmp 0x406f1f
cmp ebx, 3
jne 0x406f1f
dec eax
shl eax, 3
add eax, dword [ebp + 0x18]
mov ebx, dword [eax + 4]
mov eax, dword [eax]
imul eax, eax, 0xc
imul ebx, ebx, 0xc
movlps xmm1, qword [eax + edi]
movlps xmm2, qword [ebx + edi]
addps xmm1, xmm0
addps xmm2, xmm0
movlps qword [eax + edi], xmm1
movlps qword [ebx + edi], xmm2
call fcn.00406776
movzx eax, word [ebp - 0x6f]
bt eax, 7
jb 0x407001
mov edx, 0xc0000000
mov ecx, 2
bt eax, 1
jb 0x406fe2
cmp byte [ebp - 0x18], 5
je 0x406fe2
bt eax, 6
jb 0x406fee
xor eax, eax
mov edi, dword [ebp + 0x2c]
movzx ebx, word [ebp - 4]
movzx ecx, word [ebp - 2]
imul ecx, ebx
shr ecx, 2
cld
rep stosd dword es:[edi], eax
cmp byte [ebp - 0x18], 0x11
je 0x406fdb
cmp byte [ebp - 0x18], 0x12
je 0x406fdb
movups xmm5, xmmword [ebp - 0x6c]
call fcn.0040662b
cmp byte [ebp - 0x18], 0x14
jne 0x406fdb
movzx eax, word [ebp - 4]
movzx ebx, word [ebp - 2]
mov edi, dword [ebp + 0x2c]
call fcn.0040bed9
push ecx
add ecx, 0xc8
shl ecx, 2
mov eax, ecx
call fcn.00407d2a
mov dword [0x54cd74], eax
cld
mov eax, 0x476a601a
mov edi, dword [0x54cd74]
pop ecx
rep stosd dword es:[edi], eax
mov eax, dword [0x54cd74]
mov esi, dword [ebp + 0x2c]
mov edi, dword [ebp + 0x30]
movzx edx, word [ebp - 4]
movzx ecx, word [ebp - 2]
imul ecx, edx
call fcn.0040bebc
mov ecx, 4
xor edx, edx
mov eax, 0x403ecf
call fcn.0040998f
jmp 0x40700f
mov eax, fcn.0040577a
xor edx, edx
mov ecx, 2
call fcn.0040998f
jmp 0x407019
mov ebx, 0x80000000
xor eax, eax
call fcn.0040577a
jmp 0x407019
mov eax, dword [0x54cd74]
call fcn.00407d44
xor ecx, ecx
mov eax, 0x74726576
mov bl, byte [0x4152f5]
or bl, bl
je 0x407035
cmp bl, 1
cmove eax, ecx
call fcn.0040eb59
cmp byte [0x4155be], 1
je 0x40704b
cmp byte [0x4105b3], 1
jne 0x4070f2
mov esi, dword [ebp - 0x5a]
lea edi, [ebp - 0x46]
call fcn.0040843b
mov esi, dword [ebp + 0x10]
mov edi, dword [ebp + 8]
mov ecx, dword [ebp]
lea ecx, [ecx + ecx*2]
cld
rep movsd dword es:[edi], dword [esi]
cvtdq2ps xmm3, xmmword [0x4105d0]
mov ebx, dword [ebp + 8]
mov ecx, dword [ebp]
movlps xmm0, qword [ebx]
subps xmm0, xmm3
movlps qword [ebx], xmm0
add ebx, 0xc
loop 0x407072
mov esi, dword [ebp + 8]
mov edi, esi
lea ebx, [ebp - 0x46]
mov ecx, dword [ebp]
call fcn.004085f5
or eax, 0xffffffff
xor ebx, ebx
mov dword [0x4158ee], eax
mov dword [0x54cc70], ebx
mov dword [0x54cc6c], ebx
mov byte [0x4105b3], bl
cmp byte [0x4155be], 1
jne 0x4070f2
mov byte [0x4155be], bl
lea esi, [0x410576]
lea edi, [0x4e5abf]
mov ecx, 0x11
rep movsw word es:[edi], word [esi]
mov edi, 0x412fc0
mov esi, 0x4e5ae9
mov ecx, 0x120
cld
rep movsd dword es:[edi], dword [esi]
call fcn.0040c0fb
call fcn.0040bfa5
xor eax, eax
call fcn.00407bc6
mov al, byte [ebp - 0x6d]
cmp al, 4
je 0x407223
or al, al
jne 0x407118
cmp byte [ebp - 0x17], 0
je 0x407223
cmp byte [0x4151bf], 0
je 0x407223
mov edi, 0x4c5abf
mov esi, 0x4b5abf
cld
mov ecx, 0x7d0
rep movsd dword es:[edi], dword [esi]
mov eax, 0x505ae9
mov esi, 0x4c5abf
cmp byte [ebp - 0x6d], 3
cmovne esi, eax
mov edi, dword [0x54cd4c]
movzx ecx, word [ebp - 4]
movzx eax, word [ebp - 2]
imul ecx, eax
or eax, 0xffffffff
cld
rep stosd dword es:[edi], eax
cmp byte [0x415909], 0
je 0x40719c
movzx eax, word [0x415907]
cmp ax, 0xffff
je 0x40719c
movd xmm3, eax
imul eax, eax, 0xc
add esi, eax
xorps xmm2, xmm2
movss xmm0, dword [0x4158ff]
movss xmm1, dword [0x415903]
punpcklwd xmm0, xmm2
punpcklwd xmm1, xmm2
psubd xmm1, xmm0
cvtdq2ps xmm1, xmm1
movups xmm0, xmmword [esi]
addps xmm0, xmm1
movlps qword [esi], xmm0
mov ebx, 0x413ba0
movzx ecx, byte [ebp - 0x6d]
cmp ecx, 3
je 0x407214
cmp ecx, 1
je 0x4071ca
or ecx, ecx
je 0x4071b7
shl ecx, 1
jmp 0x4071ca
cmp byte [ebp - 0x17], 0
je 0x407223
movzx ecx, word [0x54c694]
mov ebx, dword [0x54cd64]
push ecx
push ebx
mov edi, dword [ebp + 0x24]
mov esi, 0x505ae9
call fcn.0040dced
pop ebx
add ebx, 0x20
pop ecx
loop 0x4071ca
mov esi, 0x505ae9
mov ecx, 1
cmp byte [ebp - 0x6d], 2
jne 0x4071f5
mov ecx, 0x30
cmp byte [ebp - 0x6d], 1
jne 0x407200
mov ecx, 0x10
cmp byte [ebp - 0x17], 0
je 0x40720d
movzx ecx, word [0x54c696]
call fcn.0040ddc0
jmp 0x407223
mov esi, 0x4c5abf
mov ecx, 5
call fcn.00402dcb
mov dword [ebp - 0x10], 0xff00
xor edx, edx
cmp byte [0x415697], 1
jne 0x4072a6
mov edx, dword [ebp + 0x20]
xor ecx, ecx
mov edi, dword [ebp + 0x18]
push edx
push ecx
push edi
mov eax, ecx
mov ebx, ecx
shr eax, 3
and ebx, 7
add eax, edx
bt dword [eax], ebx
jae 0x40729a
mov eax, dword [edi]
mov ebx, dword [edi + 4]
imul eax, eax, 0xc
imul ebx, ebx, 0xc
add eax, dword [ebp + 0x10]
add ebx, dword [ebp + 0x10]
movlps xmm5, qword [eax]
movhps xmm5, qword [ebx]
xorps xmm6, xmm6
movss xmm7, dword [ebp - 4]
punpcklwd xmm7, xmm6
movlhps xmm7, xmm7
movd edx, xmm7
cvtps2dq xmm5, xmm5
xor eax, eax
sub esp, 0x10
movups xmmword [esp], xmm5
pop eax
pop ebx
pop ecx
pop edx
movups xmm5, xmmword [ebp - 0x14]
mov edi, 0x405fd5
call fcn.00405e08
pop edi
add edi, 8
pop ecx
pop edx
inc ecx
cmp ecx, dword [ebp + 0x1c]
jne 0x40723d
mov ebx, dword [0x41047e]
xor eax, eax
cmp ebx, eax
je 0x4072c5
cmp byte [0x415352], al
je 0x4072c5
cmp edx, ebx
je 0x4072c5
mov edx, ebx
jmp 0x407238
xor eax, eax
cmp byte [0x415504], 1
jne 0x4073b9
cmp dword [0x410490], eax
je 0x4073b9
cmp dword [0x41047a], eax
je 0x4073b9
push dword [0x4104f5]
or eax, 0xffffffff
mov edi, dword [0x54cd4c]
movzx ebx, word [ebp - 4]
movzx ecx, word [ebp - 2]
imul ecx, ebx
cld
rep stosd dword es:[edi], eax
xor ecx, ecx
mov esi, dword [ebp + 0xc]
push ecx
mov eax, ecx
shl eax, 1
add eax, dword [0x41047a]
mov cx, word [eax]
movzx ecx, cx
movd xmm7, ecx
ror cx, 2
mov edx, ecx
neg dx
ror dx, 3
mov dword [0x4104f5], ecx
call fcn.0040b4fd
push eax
mov ecx, dword [0x4104f5]
xchg ch, cl
mov edx, 0xff
call fcn.0040b4fd
pop ecx
shl ecx, 8
mov cl, al
and ecx, 0xffffff
mov dword [ebp - 0x5e], ecx
cld
lodsd eax, dword [esi]
xchg edi, eax
lodsd eax, dword [esi]
xchg ebx, eax
lodsd eax, dword [esi]
xchg edi, eax
imul eax, eax, 0xc
imul ebx, ebx, 0xc
imul edi, edi, 0xc
push esi
mov esi, dword [ebp + 0x10]
movlps xmm6, qword [eax + esi]
movhps xmm6, qword [ebx + esi]
movlps xmm0, qword [edi + esi]
movhlps xmm5, xmm6
addps xmm0, xmm5
addps xmm0, xmm6
mulps xmm0, xmmword [0x4108f0]
movd ecx, xmm7
mov eax, dword [ebp - 0x5e]
movzx esi, word [ebp - 2]
movzx edx, word [ebp - 4]
sub esi, 4
sub edx, 4
call fcn.0040d897
pop esi
pop ecx
inc ecx
cmp ecx, dword [ebp + 4]
jne 0x40730e
pop dword [0x4104f5]
xor eax, eax
cmp byte [0x415469], al
je 0x40745f
xorps xmm6, xmm6
movss xmm7, dword [ebp - 4]
punpcklwd xmm7, xmm6
cvtdq2ps xmm7, xmm7
movaps xmm4, xmmword [0x4108c0]
subps xmm7, xmm4
movzx edx, word [ebp - 4]
shl edx, 2
mov esi, edx
sub edx, 0xc
mov ecx, dword [ebp]
cld
push ecx
mov edi, ecx
mov eax, ecx
shr eax, 3
and ecx, 7
add eax, dword [ebp - 0x4e]
xor ebx, ebx
bt dword [eax], ecx
adc ebx, 0
shl ebx, 6
imul edi, edi, 0xc
add edi, dword [ebp + 0x10]
movlps xmm0, qword [edi]
movaps xmm1, xmm0
movaps xmm2, xmm0
cmpltps xmm1, xmm4
cmpltps xmm2, xmm7
xorps xmm2, xmm1
movmskps eax, xmm2
and eax, 3
add eax, ebx
cmp eax, 3
jne 0x40745c
cvtps2dq xmm0, xmm0
sub esp, 8
movlps qword [esp], xmm0
pop eax
pop edi
dec eax
dec edi
shl eax, 2
imul edi, esi
add edi, eax
add edi, dword [ebp - 8]
mov eax, 0xfffff
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add edi, edx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add edi, edx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
pop ecx
loop 0x4073f0
cmp byte [0x415124], 0
jne 0x40746d
call fcn.0040a9a5
call fcn.0040c0fb
call fcn.0040bfa5
pushal
movzx eax, word [0x54cc4c]
mov ebx, 0x8df5a0
mov ecx, 0x3de
movzx edx, word [0x54cc4e]
cmp ecx, edx
cmova ecx, edx
push 0xcc0020
push 0
push 0x54d15c
push ebx
push ecx
push 0x190
push 0
push 0
push ecx
push 0x190
push 0
push eax
push dword [0x54d130]
call dword [sym.imp.GDI32_StretchDIBits]
popal
add esp, 0xc8
pop ebp
pop edi
pop esi
pop ebx
ret