Function at 0x404e90
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
add ecx, edx
push edi
push esi
mov esi, edx
push ebx
sub esp, 0x13c
mov edi, dword [eax + 0x7368]
mov ebx, dword [eax + 0x72b0]
mov ebp, dword [eax + 0x72b8]
mov dword [esp + 0x8c], eax
mov dword [esp + 0x40], edi
mov dword [esp + 0xa8], edi
add edi, dword [eax + 0x7378]
mov dword [esp + 0x64], edi
mov edi, dword [eax + 0x72b4]
mov dword [esp + 0x80], edx
mov dword [esp + 0x7c], edi
mov edi, eax
mov eax, dword [esp + 0x158]
mov dword [esp + 0x44], ecx
mov dword [esp + 0x50], ebx
mov dword [esp + 0x84], ebp
test eax, eax
je 0x404f80
mov edx, dword [edi + 0x6830]
mov ecx, dword [edi + 0x682c]
sub esi, ebx
mov dword [edi + 0x72fc], 1
mov eax, dword [edi + 0x6834]
mov dword [esp + 0x124], ebx
mov dword [esp + 0x118], ecx
mov ecx, dword [esp + 0x154]
mov dword [esp + 0x11c], edx
mov edx, dword [esp + 0x150]
mov dword [esp + 0x120], eax
lea eax, [esp + 0xec]
mov dword [esp + 0x48], esi
mov dword [esp + 0x12c], esi
mov dword [esp + 0x128], ebp
call fcn.00401b20
cmp eax, 0xffffff88
jbe 0x404fc8
mov ebp, 0xffffffec
add esp, 0x13c
mov eax, ebp
pop ebx
pop esi
pop edi
pop ebp
ret
mov edi, edx
mov eax, ecx
mov ebx, dword [esp + 0x64]
mov esi, dword [esp + 0x40]
sub eax, edi
mov ebp, 0xffffffba
sub ebx, esi
cmp ebx, eax
ja 0x404f6d
test edi, edi
je 0x404faf
mov dword [esp], edi
add edi, ebx
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
call sub.msvcrt.dll_memcpy
sub edi, dword [esp + 0x80]
add esp, 0x13c
mov ebp, edi
pop ebx
pop esi
mov eax, ebp
pop edi
pop ebp
ret
mov eax, 4
cmp dword [esp + 0x158], eax
mov ecx, dword [edi]
lea edx, [esp + 0xec]
cmovle eax, dword [esp + 0x158]
mov dword [esp + 0x6c], eax
lea eax, [esp + 0x100]
call fcn.00402a60
mov ecx, dword [edi + 8]
lea edx, [esp + 0xec]
lea eax, [esp + 0x108]
call fcn.00402a60
mov ecx, dword [edi + 4]
lea edx, [esp + 0xec]
lea eax, [esp + 0x110]
call fcn.00402a60
mov esi, dword [esp + 0xf0]
mov dword [esp + 0x98], esi
cmp esi, 0x20
ja 0x4053a0
mov eax, dword [esp + 0xfc]
movzx ebx, byte [esp + 0x15c]
mov byte [esp + 0x3c], 0
mov edi, dword [esp + 0xf4]
mov dword [esp + 0x24], 0
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0xf8]
and ebx, 1
mov dword [esp + 0x9c], edi
mov ecx, dword [esp + 0x108]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x104]
mov byte [esp + 0x8b], bl
mov ebp, dword [esp + 0xec]
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x100]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x114]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x110]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x10c]
mov dword [esp + 0x78], eax
lea eax, [esp + 0xac]
mov dword [esp + 0x54], eax
xor eax, eax
mov byte [esp + 0x28], al
jmp 0x4052be
cmp al, 0x18
mov ecx, esi
mov edx, ebp
seta byte [esp + 0x8a]
shl edx, cl
movzx ecx, byte [esp + 0x8a]
and cl, byte [esp + 0x8b]
mov byte [esp + 0x8a], cl
jne 0x405cc0
add esi, eax
neg eax
mov ecx, eax
shr edx, cl
add edx, dword [esp + 0x68]
cmp esi, 0x20
ja 0x405150
cmp dword [esp + 0x20], ebx
jbe 0x405d80
mov edi, dword [esp + 0x38]
cmp edi, ebx
je 0x405150
mov ecx, esi
mov eax, ebx
shr ecx, 3
sub eax, ecx
cmp eax, edi
jae 0x405142
sub ebx, edi
mov eax, edi
mov ecx, ebx
mov byte [esp + 0x3c], 1
shl ecx, 3
mov ebp, dword [eax]
mov ebx, eax
sub esi, ecx
mov eax, dword [esp + 0x11c]
mov dword [esp + 0x120], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x118], edx
mov dword [esp + 0x2c], edx
mov dword [esp + 0x11c], eax
xor eax, eax
cmp byte [esp + 0x4c], 0
jne 0x405680
movzx edx, byte [esp + 0x34]
add eax, edx
cmp eax, 0x13
jg 0x405638
movzx eax, byte [esp + 0x34]
test al, al
jne 0x405610
cmp esi, 0x20
ja 0x40562b
cmp dword [esp + 0x20], ebx
jbe 0x405c50
mov ecx, dword [esp + 0x38]
mov edi, ecx
cmp ecx, ebx
je 0x4051da
mov eax, esi
mov edi, ebx
shr eax, 3
sub edi, eax
cmp edi, ecx
jae 0x4051ce
mov eax, ebx
mov edi, ecx
sub eax, ecx
mov ebp, dword [edi]
mov byte [esp + 0x3c], 1
shl eax, 3
sub esi, eax
mov ebx, dword [esp + 0x58]
mov eax, dword [esp + 0x48]
mov edx, ebp
add eax, dword [esp + 0x28]
add eax, dword [esp + 0x30]
mov dword [esp + 0x48], eax
movzx eax, byte [ebx + 3]
add esi, eax
mov ecx, esi
neg ecx
shr edx, cl
and edx, dword [eax*4 + 0x41f3e0]
mov eax, edx
movzx edx, word [ebx]
mov ebx, dword [esp + 0x5c]
add eax, edx
mov edx, ebp
mov dword [esp + 0x34], eax
movzx eax, byte [ebx + 3]
add esi, eax
mov ecx, esi
neg ecx
shr edx, cl
and edx, dword [eax*4 + 0x41f3e0]
mov eax, edx
movzx edx, word [ebx]
add eax, edx
mov dword [esp + 0x4c], eax
cmp esi, 0x20
ja 0x40526c
cmp dword [esp + 0x20], edi
jbe 0x405c30
mov ebx, dword [esp + 0x38]
cmp ebx, edi
je 0x40526c
mov eax, esi
mov edx, edi
shr eax, 3
sub edx, eax
cmp edx, ebx
jae 0x405d60
mov eax, edi
sub eax, ebx
sub edi, eax
mov ebp, dword [edi]
mov byte [esp + 0x3c], 1
shl eax, 3
sub esi, eax
mov ebx, dword [esp + 0x60]
mov edx, ebp
add dword [esp + 0x24], 1
movzx eax, byte [ebx + 3]
add esi, eax
mov ecx, esi
neg ecx
shr edx, cl
mov ecx, dword [eax*4 + 0x41f3e0]
movzx eax, word [ebx]
mov ebx, dword [esp + 0x28]
mov byte [esp + 0x28], 1
and ecx, edx
add ecx, eax
mov eax, dword [esp + 0x54]
mov dword [eax], ebx
mov ebx, dword [esp + 0x30]
add eax, 0x10
mov dword [eax - 0xc], ebx
mov ebx, dword [esp + 0x2c]
mov dword [eax - 8], ebx
mov dword [esp + 0x54], eax
cmp esi, 0x20
ja 0x405c70
cmp dword [esp + 0x20], edi
jbe 0x4056a0
mov eax, dword [esp + 0x38]
cmp eax, edi
je 0x405d70
mov edx, esi
mov ebx, edi
shr edx, 3
sub ebx, edx
cmp eax, ebx
jbe 0x4052e7
sub edi, eax
mov ebx, eax
mov edx, edi
mov ebp, dword [ebx]
mov byte [esp + 0x3c], 1
shl edx, 3
sub esi, edx
mov edx, 1
mov eax, dword [esp + 0x24]
cmp dword [esp + 0x6c], eax
jle 0x4056c6
mov edi, dword [esp + 0x34]
mov eax, dword [esp + 0x70]
lea eax, [eax + edi*8]
movzx edx, byte [eax + 2]
mov dword [esp + 0x58], eax
mov eax, dword [eax + 4]
mov byte [esp + 0x34], dl
mov edx, dword [esp + 0x4c]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x74]
lea edx, [eax + edx*8]
movzx eax, byte [edx + 2]
mov dword [esp + 0x5c], edx
mov byte [esp + 0x4c], al
mov eax, dword [edx + 4]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x78]
lea ecx, [eax + ecx*8]
mov dword [esp + 0x60], ecx
movzx eax, byte [ecx + 2]
mov ecx, dword [ecx + 4]
mov dword [esp + 0x68], ecx
mov ecx, dword [esp + 0x118]
mov dword [esp + 0x2c], ecx
cmp al, 1
ja 0x4050e0
je 0x405de0
mov edi, dword [esp + 0x28]
test edi, edi
jne 0x405174
mov eax, dword [esp + 0x11c]
mov dword [esp + 0x11c], ecx
mov dword [esp + 0x118], eax
mov dword [esp + 0x2c], eax
jmp 0x405174
mov dword [esp + 0x24], 0
lea esi, [esi]
nop
mov edi, dword [esp + 0x24]
cmp dword [esp + 0x6c], edi
jg 0x404f68
mov edi, dword [esp + 0x80]
lea esi, [esi]
mov eax, dword [esp + 0x24]
cmp dword [esp + 0x158], eax
jg 0x404f68
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x24]
sub eax, dword [esp + 0x6c]
mov dword [esp + 0x20], eax
cmp dword [esp + 0x158], eax
jle 0x4055b3
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
mov esi, edi
sub eax, 0x20
mov dword [esp + 0x3c], eax
nop
mov eax, dword [esp + 0x20]
and eax, 3
shl eax, 4
mov ecx, dword [esp + eax + 0xac]
mov edi, dword [esp + eax + 0xb0]
mov eax, dword [esp + eax + 0xb4]
lea ebp, [ecx + edi]
mov dword [esp + 0x2c], edi
lea ebx, [esi + ecx]
lea edi, [esi + ebp]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], edi
lea edi, [edx + ecx]
mov dword [esp + 0x28], ebp
mov ebp, edi
mov dword [esp + 0x38], edi
mov edi, ebx
sub edi, eax
mov dword [esp + 0x24], eax
mov eax, edi
cmp dword [esp + 0x64], ebp
jb 0x4060e0
mov ebp, dword [esp + 0x3c]
cmp dword [esp + 0x30], ebp
ja 0x4060e0
mov edi, dword [esp + 0x44]
mov ebp, dword [esp + 0x28]
sub edi, esi
add ebp, 0x20
cmp edi, ebp
jb 0x4060e0
mov ebp, dword [edx]
mov dword [esi], ebp
mov ebp, dword [edx + 4]
mov dword [esi + 4], ebp
mov ebp, dword [edx + 8]
mov dword [esi + 8], ebp
mov ebp, dword [edx + 0xc]
mov dword [esi + 0xc], ebp
cmp ecx, 0x10
ja 0x406308
mov edi, dword [esp + 0x38]
mov edx, ebx
sub edx, dword [esp + 0x50]
mov dword [esp + 0xa8], edi
cmp dword [esp + 0x24], edx
jbe 0x405513
mov edx, ebx
sub edx, dword [esp + 0x7c]
cmp dword [esp + 0x24], edx
ja 0x404f68
mov edi, dword [esp + 0x84]
sub eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x2c]
mov ebp, eax
lea eax, [edi + eax]
lea edx, [eax + ecx]
cmp edi, edx
jae 0x406288
mov edx, ebp
mov dword [esp], ebx
neg edx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0x28], edx
call sub.msvcrt.dll_memmove
add dword [esp + 0x2c], ebp
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x50]
add ebx, edx
cmp dword [esp + 0x24], 0xf
jbe 0x4063ab
mov edx, dword [eax]
cmp dword [esp + 0x2c], 0x10
mov dword [ebx], edx
mov edx, dword [eax + 4]
mov dword [ebx + 4], edx
mov edx, dword [eax + 8]
mov dword [ebx + 8], edx
mov edx, dword [eax + 0xc]
mov dword [ebx + 0xc], edx
jle 0x405581
mov edi, dword [esp + 0x30]
add ebx, 0x10
add eax, 0x10
lea esi, [esi]
mov edx, dword [eax]
add ebx, 0x20
add eax, 0x20
mov dword [ebx - 0x20], edx
mov edx, dword [eax - 0x1c]
mov dword [ebx - 0x1c], edx
mov edx, dword [eax - 0x18]
mov dword [ebx - 0x18], edx
mov edx, dword [eax - 0x14]
mov dword [ebx - 0x14], edx
mov ebp, dword [eax - 0x10]
mov dword [ebx - 0x10], ebp
mov ebp, dword [eax - 0xc]
mov dword [ebx - 0xc], ebp
mov ebp, dword [eax - 8]
mov dword [ebx - 8], ebp
mov ecx, dword [eax - 4]
mov dword [ebx - 4], ecx
cmp edi, ebx
ja 0x405548
mov eax, dword [esp + 0x34]
cmp eax, 0xffffff88
ja 0x4064d5
add dword [esp + 0x20], 1
add esi, eax
mov edx, dword [esp + 0xa8]
mov eax, dword [esp + 0x20]
cmp dword [esp + 0x158], eax
jne 0x405410
mov dword [esp + 0x40], edx
mov edi, esi
mov esi, dword [esp + 0x8c]
mov eax, dword [esp + 0x118]
mov dword [esi + 0x682c], eax
mov eax, dword [esp + 0x11c]
mov dword [esi + 0x6830], eax
mov eax, dword [esp + 0x120]
mov dword [esi + 0x6834], eax
mov eax, dword [esp + 0x44]
jmp 0x404f84
mov eax, esi
mov byte [esp + 0x3c], 1
and esi, 7
shr eax, 3
sub ebx, eax
mov ebp, dword [ebx]
movzx eax, byte [esp + 0x34]
test al, al
je 0x4051a7
nop
mov ecx, esi
mov eax, ebp
add esi, edx
shl eax, cl
mov ecx, edx
neg ecx
shr eax, cl
add dword [esp + 0x28], eax
cmp esi, 0x20
jbe 0x4051a7
mov edi, ebx
jmp 0x4051da
cmp esi, 0x20
ja 0x405da0
cmp ebx, dword [esp + 0x20]
jae 0x4055f0
mov edi, dword [esp + 0x38]
cmp ebx, edi
je 0x405601
mov eax, esi
mov ecx, ebx
shr eax, 3
sub ecx, eax
cmp ecx, edi
jae 0x405db0
mov eax, ebx
sub eax, edi
sub ebx, eax
shl eax, 3
mov byte [esp + 0x3c], 1
mov ebp, dword [ebx]
sub esi, eax
jmp 0x405191
movzx eax, byte [esp + 0x4c]
mov ecx, esi
mov edx, ebp
shl edx, cl
mov ecx, eax
add esi, eax
neg ecx
shr edx, cl
add dword [esp + 0x30], edx
jmp 0x405181
mov edx, esi
mov eax, dword [esp + 0x24]
and esi, 7
shr edx, 3
sub edi, edx
mov edx, 1
mov ebp, dword [edi]
mov ebx, edi
mov byte [esp + 0x3c], 1
cmp dword [esp + 0x6c], eax
jg 0x405306
movzx eax, byte [esp + 0x28]
test al, al
je 0x4056da
mov edi, dword [esp + 0x48]
mov dword [esp + 0x12c], edi
cmp byte [esp + 0x3c], 0
je 0x406390
mov dword [esp + 0xf4], ebx
mov dword [esp + 0xec], ebp
test dl, dl
je 0x405e19
mov dword [esp + 0xf0], esi
test al, al
je 0x405723
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x108], ecx
mov dword [esp + 0x110], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x100], eax
mov edi, dword [esp + 0x80]
cmp esi, 0x20
ja 0x4053c8
movzx eax, byte [esp + 0x15c]
mov dword [esp + 0x34], esi
and eax, 1
mov byte [esp + 0x5c], al
cmp ebx, dword [esp + 0x20]
jae 0x405bff
mov edx, dword [esp + 0xf8]
mov esi, ebx
cmp edx, ebx
je 0x405790
mov eax, dword [esp + 0x34]
shr eax, 3
sub esi, eax
cmp edx, esi
jbe 0x405770
mov eax, ebx
mov esi, edx
sub eax, edx
mov edx, dword [esp + 0x34]
shl eax, 3
mov dword [esp + 0xf4], esi
sub edx, eax
mov dword [esp + 0xf0], edx
mov eax, dword [esi]
mov dword [esp + 0xec], eax
mov eax, dword [esp + 0x24]
cmp dword [esp + 0x158], eax
jle 0x4053e4
mov edx, dword [esp + 0x100]
mov eax, dword [esp + 0x104]
mov ecx, dword [esp + 0x118]
lea ebx, [eax + edx*8]
mov edx, dword [esp + 0x110]
movzx eax, byte [ebx + 2]
mov dword [esp + 0x48], ebx
mov dword [esp + 0x2c], ecx
mov byte [esp + 0x34], al
mov eax, dword [ebx + 4]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x114]
lea ebx, [eax + edx*8]
mov edx, dword [esp + 0x108]
movzx eax, byte [ebx + 2]
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x3c], al
mov eax, dword [ebx + 4]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x10c]
lea eax, [eax + edx*8]
movzx ebx, byte [eax + 2]
mov ebp, dword [eax + 4]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0xf0]
cmp bl, 1
jbe 0x405e28
movzx ecx, bl
mov edx, dword [esp + 0xec]
mov dword [esp + 0x58], ecx
mov ecx, eax
shl edx, cl
cmp bl, 0x18
jbe 0x405e60
cmp byte [esp + 0x5c], 0
je 0x405e60
mov ebx, dword [esp + 0x58]
mov esi, 0x20
sub esi, eax
cmp esi, ebx
cmova esi, ebx
mov ecx, esi
sub ebx, esi
add eax, esi
neg ecx
mov dword [esp + 0xf0], eax
lea eax, [esp + 0xec]
shr edx, cl
mov ecx, ebx
mov dword [esp + 0x60], ebx
mov ebx, ebp
shl edx, cl
add ebx, edx
call fcn.004016a0
mov ecx, dword [esp + 0x60]
mov eax, dword [esp + 0xf0]
test ecx, ecx
jne 0x406260
mov edx, dword [esp + 0x11c]
mov esi, dword [esp + 0x2c]
mov dword [esp + 0x118], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x120], edx
mov dword [esp + 0x11c], esi
xor esi, esi
cmp byte [esp + 0x3c], 0
jne 0x405f90
movzx ebx, byte [esp + 0x34]
add esi, ebx
cmp esi, 0x13
jg 0x405ee0
cmp byte [esp + 0x34], 0
jne 0x405f50
mov edx, dword [esp + 0xf4]
cmp eax, 0x20
ja 0x405f7e
cmp dword [esp + 0x20], edx
jbe 0x405fc0
cmp dword [esp + 0x38], edx
je 0x405f7e
mov ecx, eax
mov ebx, edx
mov esi, dword [esp + 0x38]
shr ecx, 3
sub ebx, ecx
cmp esi, ebx
jbe 0x405919
mov ecx, edx
mov ebx, esi
sub ecx, esi
mov esi, dword [ebx]
mov dword [esp + 0xf4], ebx
shl ecx, 3
sub eax, ecx
mov dword [esp + 0xec], esi
mov ecx, dword [esp + 0x28]
mov ebx, dword [esp + 0x30]
mov ebp, esi
lea edx, [ecx + ebx]
mov ebx, dword [esp + 0x48]
add dword [esp + 0x12c], edx
movzx edx, byte [ebx + 3]
add eax, edx
mov ecx, eax
neg ecx
shr ebp, cl
mov ecx, dword [edx*4 + 0x41f3e0]
and ecx, ebp
mov ebp, esi
mov edx, ecx
movzx ecx, word [ebx]
mov ebx, dword [esp + 0x4c]
add edx, ecx
mov dword [esp + 0x100], edx
movzx edx, byte [ebx + 3]
add eax, edx
mov ecx, eax
mov dword [esp + 0xf0], eax
neg ecx
shr ebp, cl
mov ecx, dword [edx*4 + 0x41f3e0]
and ecx, ebp
mov edx, ecx
movzx ecx, word [ebx]
add ecx, edx
mov dword [esp + 0x110], ecx
cmp eax, 0x20
ja 0x4059e2
mov edx, dword [esp + 0xf4]
cmp edx, dword [esp + 0x20]
jae 0x405fe0
mov ebx, dword [esp + 0xf8]
cmp edx, ebx
je 0x4059e2
mov ecx, eax
mov esi, edx
shr ecx, 3
sub esi, ecx
cmp ebx, esi
jbe 0x4059cd
mov ecx, edx
mov esi, ebx
sub ecx, ebx
mov dword [esp + 0xf4], esi
mov esi, dword [esi]
shl ecx, 3
sub eax, ecx
mov dword [esp + 0xec], esi
mov ebx, dword [esp + 0x54]
movzx edx, byte [ebx + 3]
add eax, edx
mov ecx, eax
mov dword [esp + 0x34], eax
neg ecx
mov dword [esp + 0xf0], eax
movzx eax, word [ebx]
shr esi, cl
and esi, dword [edx*4 + 0x41f3e0]
add esi, eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x108], esi
and eax, 3
mov dword [esp + 0x54], eax
shl eax, 4
mov ecx, dword [esp + eax + 0xac]
mov esi, dword [esp + eax + 0xb0]
mov ebp, dword [esp + eax + 0xb4]
lea eax, [ecx + esi]
mov dword [esp + 0x48], esi
lea ebx, [edi + ecx]
mov dword [esp + 0x3c], eax
lea esi, [edi + eax]
mov eax, dword [esp + 0x40]
mov dword [esp + 0x20], ebp
lea edx, [eax + ecx]
mov dword [esp + 0x58], edx
mov eax, edx
mov edx, ebx
sub edx, ebp
mov dword [esp + 0x4c], edx
mov edx, dword [esp + 0x44]
sub edx, 0x20
cmp esi, edx
ja 0x406000
cmp dword [esp + 0x64], eax
jb 0x406000
mov edx, dword [esp + 0x44]
sub edx, edi
mov ebp, edx
mov edx, dword [esp + 0x3c]
add edx, 0x20
cmp ebp, edx
jb 0x406000
mov eax, dword [esp + 0x40]
mov edx, dword [eax]
mov dword [edi], edx
mov edx, dword [eax + 4]
mov dword [edi + 4], edx
mov edx, dword [eax + 8]
mov dword [edi + 8], edx
mov edx, dword [eax + 0xc]
mov dword [edi + 0xc], edx
cmp ecx, 0x10
ja 0x406138
mov ecx, dword [esp + 0x58]
mov edx, ebx
sub edx, dword [esp + 0x50]
mov dword [esp + 0xa8], ecx
cmp dword [esp + 0x20], edx
jbe 0x405b23
mov edx, ebx
sub edx, dword [esp + 0x7c]
cmp dword [esp + 0x20], edx
ja 0x404f68
mov ecx, dword [esp + 0x84]
mov eax, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
sub eax, dword [esp + 0x50]
mov ebp, eax
lea eax, [ecx + eax]
add edx, eax
cmp ecx, edx
jae 0x406090
mov edx, ebp
mov dword [esp], ebx
neg edx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0x40], edx
call sub.msvcrt.dll_memmove
mov eax, dword [esp + 0x50]
add dword [esp + 0x48], ebp
mov edx, dword [esp + 0x40]
mov dword [esp + 0x4c], eax
add ebx, edx
cmp dword [esp + 0x20], 0xf
jbe 0x4061d8
mov eax, dword [esp + 0x4c]
cmp dword [esp + 0x48], 0x10
mov edx, dword [eax]
mov dword [ebx], edx
mov edx, dword [eax + 4]
mov dword [ebx + 4], edx
mov edx, dword [eax + 8]
mov dword [ebx + 8], edx
mov edx, dword [eax + 0xc]
mov dword [ebx + 0xc], edx
jle 0x405b91
add ebx, 0x10
add eax, 0x10
lea esi, [esi]
mov edx, dword [eax]
add ebx, 0x20
add eax, 0x20
mov dword [ebx - 0x20], edx
mov edx, dword [eax - 0x1c]
mov dword [ebx - 0x1c], edx
mov edx, dword [eax - 0x18]
mov dword [ebx - 0x18], edx
mov edx, dword [eax - 0x14]
mov dword [ebx - 0x14], edx
mov ebp, dword [eax - 0x10]
mov dword [ebx - 0x10], ebp
mov ebp, dword [eax - 0xc]
mov dword [ebx - 0xc], ebp
mov ebp, dword [eax - 8]
mov dword [ebx - 8], ebp
mov ecx, dword [eax - 4]
mov dword [ebx - 4], ecx
cmp esi, ebx
ja 0x405b58
mov esi, dword [esp + 0x3c]
cmp esi, 0xffffff88
ja 0x4064ce
mov eax, dword [esp + 0x54]
mov ebx, dword [esp + 0x28]
add edi, esi
mov ecx, dword [esp + 0x30]
add dword [esp + 0x24], 1
shl eax, 4
cmp dword [esp + 0x34], 0x20
mov dword [esp + eax + 0xac], ebx
mov ebx, dword [esp + 0x2c]
mov dword [esp + eax + 0xb0], ecx
mov dword [esp + eax + 0xb4], ebx
ja 0x4053c8
mov eax, dword [esp + 0xfc]
mov ebx, dword [esp + 0xf4]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x40], eax
cmp ebx, dword [esp + 0x20]
jb 0x405750
mov ecx, dword [esp + 0x34]
mov esi, ebx
mov eax, ecx
shr eax, 3
sub esi, eax
mov eax, ecx
and eax, 7
mov dword [esp + 0xf4], esi
mov dword [esp + 0xf0], eax
mov eax, dword [esi]
mov dword [esp + 0xec], eax
jmp 0x405790
mov eax, esi
and esi, 7
shr eax, 3
sub edi, eax
mov ebp, dword [edi]
mov byte [esp + 0x3c], 1
jmp 0x40526c
mov eax, esi
mov edi, ebx
and esi, 7
shr eax, 3
sub edi, eax
mov ebp, dword [edi]
mov byte [esp + 0x3c], 1
jmp 0x4051da
mov eax, dword [esp + 0x48]
cmp byte [esp + 0x3c], 0
mov dword [esp + 0x12c], eax
je 0x405c90
mov dword [esp + 0xf4], edi
mov dword [esp + 0xec], ebp
mov eax, dword [esp + 0x4c]
mov dword [esp + 0xf0], esi
mov dword [esp + 0x108], ecx
mov dword [esp + 0x110], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x100], eax
jmp 0x4053b0
mov ecx, 0x20
mov edi, eax
sub ecx, esi
cmp ecx, eax
cmova ecx, eax
sub edi, ecx
mov dword [esp + 0x94], ecx
add esi, ecx
neg ecx
shr edx, cl
mov ecx, edi
mov dword [esp + 0x90], edi
shl edx, cl
add edx, dword [esp + 0x68]
cmp esi, 0x20
ja 0x405d2f
cmp dword [esp + 0x20], ebx
jbe 0x405dc0
mov edi, dword [esp + 0x38]
cmp edi, ebx
je 0x405d2f
mov ebp, esi
mov ecx, ebx
shr ebp, 3
sub ecx, ebp
cmp ecx, edi
jae 0x405d16
sub ebx, edi
mov ecx, edi
mov ebp, ebx
lea ebx, [ebp*8]
mov ebp, dword [ecx]
sub esi, ebx
mov ebx, ecx
movzx ecx, byte [esp + 0x8a]
mov byte [esp + 0x3c], cl
mov ecx, dword [esp + 0x90]
test ecx, ecx
je 0x405150
mov ecx, esi
mov edi, ebp
add esi, dword [esp + 0x90]
shl edi, cl
mov ecx, dword [esp + 0x94]
sub ecx, eax
mov eax, edi
shr eax, cl
add edx, eax
jmp 0x405150
mov edi, edx
jmp 0x405260
movzx edx, byte [esp + 0x28]
mov ebx, eax
jmp 0x4052f8
mov eax, esi
mov byte [esp + 0x3c], 1
and esi, 7
shr eax, 3
sub ebx, eax
mov ebp, dword [ebx]
jmp 0x405150
test dl, dl
jne 0x405610
mov edi, ebx
jmp 0x4051da
mov ebx, ecx
jmp 0x405666
mov ecx, esi
and esi, 7
shr ecx, 3
sub ebx, ecx
movzx ecx, byte [esp + 0x8a]
mov ebp, dword [ebx]
mov byte [esp + 0x3c], cl
jmp 0x405d2f
mov ecx, esi
mov eax, ebp
add esi, 1
shl eax, cl
shr eax, 0x1f
cmp dword [esp + 0x28], 1
adc eax, dword [esp + 0x68]
cmp eax, 3
je 0x40642c
mov edx, dword [esp + eax*4 + 0x118]
cmp edx, 1
adc edx, 0
cmp eax, 1
je 0x40515e
jmp 0x405150
mov esi, dword [esp + 0x98]
jmp 0x405702
je 0x4062a0
mov edx, dword [esp + 0x28]
test edx, edx
jne 0x4058b6
mov edx, dword [esp + 0x11c]
mov dword [esp + 0x11c], ecx
mov dword [esp + 0x118], edx
mov dword [esp + 0x2c], edx
jmp 0x4058b6
mov ecx, dword [esp + 0x58]
mov ebx, ebp
add eax, ecx
neg ecx
shr edx, cl
mov dword [esp + 0xf0], eax
add ebx, edx
cmp eax, 0x20
ja 0x405892
cmp dword [esp + 0x20], esi
jbe 0x4060b0
mov edx, dword [esp + 0xf8]
cmp edx, esi
je 0x405892
mov ecx, eax
mov ebp, esi
shr ecx, 3
sub ebp, ecx
mov dword [esp + 0x58], ecx
mov ecx, ebp
cmp edx, ebp
jbe 0x405eb2
sub esi, edx
mov ecx, edx
mov dword [esp + 0x58], esi
mov edx, dword [esp + 0x58]
mov dword [esp + 0xf4], ecx
shl edx, 3
sub eax, edx
mov edx, dword [ecx]
mov dword [esp + 0xf0], eax
mov dword [esp + 0xec], edx
jmp 0x405892
cmp eax, 0x20
ja 0x4061b8
mov ecx, dword [esp + 0xf4]
cmp ecx, dword [esp + 0x20]
jae 0x406058
mov edx, dword [esp + 0xf8]
cmp ecx, edx
je 0x40607b
mov esi, eax
mov ebp, ecx
shr esi, 3
sub ebp, esi
mov dword [esp + 0x3c], esi
mov esi, ebp
cmp edx, ebp
jbe 0x405f24
sub ecx, edx
mov esi, edx
mov dword [esp + 0x3c], ecx
mov edx, dword [esp + 0x3c]
mov dword [esp + 0xf4], esi
shl edx, 3
sub eax, edx
mov edx, dword [esi]
cmp byte [esp + 0x34], 0
mov dword [esp + 0xf0], eax
mov dword [esp + 0xec], edx
je 0x4058de
nop
mov edx, dword [esp + 0xec]
mov ecx, eax
add eax, ebx
shl edx, cl
mov ecx, ebx
mov dword [esp + 0xf0], eax
neg ecx
shr edx, cl
add dword [esp + 0x28], edx
mov edx, dword [esp + 0xf4]
cmp eax, 0x20
jbe 0x4058ee
mov esi, dword [esp + 0xec]
jmp 0x40592e
movzx esi, byte [esp + 0x3c]
mov edx, dword [esp + 0xec]
mov ecx, eax
shl edx, cl
mov ecx, esi
add eax, esi
neg ecx
mov dword [esp + 0xf0], eax
shr edx, cl
add dword [esp + 0x30], edx
jmp 0x4058c3
mov ecx, eax
and eax, 7
shr ecx, 3
sub edx, ecx
mov esi, dword [edx]
mov dword [esp + 0xf4], edx
mov dword [esp + 0xec], esi
jmp 0x40592e
mov ecx, eax
and eax, 7
shr ecx, 3
sub edx, ecx
mov esi, dword [edx]
mov dword [esp + 0xf4], edx
mov dword [esp + 0xec], esi
jmp 0x4059e2
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x44]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xa8]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x48]
mov dword [esp], eax
mov eax, edi
call fcn.00402940
mov dword [esp + 0x3c], eax
jmp 0x405b91
mov esi, eax
and eax, 7
shr esi, 3
mov dword [esp + 0xf0], eax
sub ecx, esi
mov dword [esp + 0xf4], ecx
mov edx, ecx
mov ecx, dword [ecx]
mov dword [esp + 0xec], ecx
cmp byte [esp + 0x34], 0
je 0x4058ee
jmp 0x405f50
mov esi, dword [esp + 0x48]
mov dword [esp + 4], eax
mov dword [esp], ebx
mov dword [esp + 8], esi
call sub.msvcrt.dll_memmove
jmp 0x405b91
mov edx, eax
and eax, 7
shr edx, 3
mov dword [esp + 0xf0], eax
sub esi, edx
mov edx, dword [esi]
mov dword [esp + 0xf4], esi
mov dword [esp + 0xec], edx
jmp 0x405892
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x44]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xa8]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
mov eax, esi
call fcn.00402940
mov dword [esp + 0x34], eax
jmp 0x405581
lea edx, [eax + 0x10]
mov eax, dword [eax + 0x10]
sub ecx, 0x10
mov dword [edi + 0x10], eax
mov eax, dword [edx + 4]
mov dword [edi + 0x14], eax
mov eax, dword [edx + 8]
mov dword [edi + 0x18], eax
mov edx, dword [edx + 0xc]
mov dword [edi + 0x1c], edx
cmp ecx, 0x10
jle 0x405ab0
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x40], edi
lea edx, [edi + 0x20]
add ecx, 0x20
lea esi, [esi]
mov edi, dword [ecx]
add edx, 0x20
add ecx, 0x20
mov dword [edx - 0x20], edi
mov edi, dword [ecx - 0x1c]
mov dword [edx - 0x1c], edi
mov edi, dword [ecx - 0x18]
mov dword [edx - 0x18], edi
mov edi, dword [ecx - 0x14]
mov dword [edx - 0x14], edi
mov eax, dword [ecx - 0x10]
mov dword [edx - 0x10], eax
mov eax, dword [ecx - 0xc]
mov dword [edx - 0xc], eax
mov eax, dword [ecx - 8]
mov dword [edx - 8], eax
mov ebp, dword [ecx - 4]
mov dword [edx - 4], ebp
cmp ebx, edx
ja 0x406170
mov edi, dword [esp + 0x40]
jmp 0x405ab0
mov edx, dword [esp + 0xec]
cmp byte [esp + 0x34], 0
mov esi, edx
je 0x40592e
jmp 0x405f57
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x4c]
cmp ecx, 7
ja 0x40639c
movzx edx, byte [eax]
mov byte [ebx], dl
movzx edx, byte [eax + 1]
mov byte [ebx + 1], dl
movzx edx, byte [eax + 2]
mov byte [ebx + 2], dl
movzx edx, byte [eax + 3]
add eax, dword [ecx*4 + 0x41e880]
mov byte [ebx + 3], dl
mov edx, dword [eax]
sub eax, dword [ecx*4 + str._b_b_b_a_b_t_n_v]
mov dword [ebx + 4], edx
mov dword [esp + 0x4c], eax
cmp dword [esp + 0x48], 8
jbe 0x405b91
mov eax, dword [esp + 0x4c]
mov ebp, ebx
lea edx, [ebx + 8]
sub ebp, eax
lea ecx, [eax + 8]
cmp ebp, 0xf
jg 0x40645e
mov eax, edi
nop
mov edi, dword [ecx]
mov ebp, dword [ecx + 4]
add edx, 8
add ecx, 8
mov dword [edx - 8], edi
mov dword [edx - 4], ebp
cmp esi, edx
ja 0x406240
mov edi, eax
jmp 0x405b91
mov edx, dword [esp + 0xec]
mov ecx, eax
sub esi, dword [esp + 0x58]
add eax, dword [esp + 0x60]
shl edx, cl
mov ecx, esi
mov dword [esp + 0xf0], eax
shr edx, cl
add ebx, edx
jmp 0x405892
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov dword [esp], ebx
call sub.msvcrt.dll_memmove
jmp 0x405581
mov edx, dword [esp + 0xec]
mov ecx, eax
add eax, 1
mov dword [esp + 0xf0], eax
shl edx, cl
shr edx, 0x1f
cmp dword [esp + 0x28], 1
adc edx, ebp
cmp edx, 3
je 0x40644b
mov ecx, dword [esp + edx*4 + 0x118]
cmp ecx, 1
adc ecx, 0
cmp edx, 1
je 0x4062e8
mov edx, dword [esp + 0x11c]
mov dword [esp + 0x120], edx
mov esi, dword [esp + 0x2c]
mov dword [esp + 0x118], ecx
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x11c], esi
jmp 0x4058b6
mov ebp, dword [edx + 0x10]
sub ecx, 0x10
mov dword [esi + 0x10], ebp
mov ebp, dword [edx + 0x14]
mov dword [esi + 0x14], ebp
mov ebp, dword [edx + 0x18]
mov dword [esi + 0x18], ebp
mov ebp, dword [edx + 0x1c]
mov dword [esi + 0x1c], ebp
cmp ecx, 0x10
jle 0x4054a7
mov dword [esp + 0x28], esi
mov edi, dword [esp + 0x30]
lea ecx, [esi + 0x20]
add edx, 0x20
mov dword [esp + 0x40], eax
nop
mov esi, dword [edx]
add ecx, 0x20
add edx, 0x20
mov dword [ecx - 0x20], esi
mov esi, dword [edx - 0x1c]
mov dword [ecx - 0x1c], esi
mov esi, dword [edx - 0x18]
mov dword [ecx - 0x18], esi
mov esi, dword [edx - 0x14]
mov dword [ecx - 0x14], esi
mov eax, dword [edx - 0x10]
mov dword [ecx - 0x10], eax
mov eax, dword [edx - 0xc]
mov dword [ecx - 0xc], eax
mov eax, dword [edx - 8]
mov dword [ecx - 8], eax
mov ebp, dword [edx - 4]
mov dword [ecx - 4], ebp
cmp ebx, ecx
ja 0x406340
mov esi, dword [esp + 0x28]
mov eax, dword [esp + 0x40]
mov dword [esp + 0x30], edi
jmp 0x4054a7
mov ebx, dword [esp + 0x9c]
jmp 0x4056f3
mov edx, dword [eax]
mov ecx, dword [eax + 4]
mov dword [ebx], edx
mov dword [ebx + 4], ecx
jmp 0x40621a
mov edi, dword [esp + 0x24]
cmp edi, 7
ja 0x40643f
movzx edx, byte [eax]
mov byte [ebx], dl
movzx edx, byte [eax + 1]
mov byte [ebx + 1], dl
movzx edx, byte [eax + 2]
mov byte [ebx + 2], dl
movzx edx, byte [eax + 3]
add eax, dword [edi*4 + 0x41e880]
mov byte [ebx + 3], dl
mov edx, dword [eax]
sub eax, dword [edi*4 + str._b_b_b_a_b_t_n_v]
mov dword [ebx + 4], edx
cmp dword [esp + 0x2c], 8
jbe 0x405581
mov ebp, ebx
lea ecx, [eax + 8]
lea edx, [ebx + 8]
sub ebp, eax
cmp ebp, 0xf
jg 0x4064dc
mov edi, dword [esp + 0x30]
mov eax, esi
lea esi, [esi]
mov ebx, dword [ecx]
mov esi, dword [ecx + 4]
add edx, 8
add ecx, 8
mov dword [edx - 8], ebx
mov dword [edx - 4], esi
cmp edi, edx
ja 0x406410
mov esi, eax
jmp 0x405581
mov edx, dword [esp + 0x2c]
xor eax, eax
sub edx, 1
sete al
add edx, eax
jmp 0x405150
mov edx, dword [eax]
mov ecx, dword [eax + 4]
mov dword [ebx], edx
mov dword [ebx + 4], ecx
jmp 0x4063e5
mov ecx, dword [esp + 0x2c]
xor edx, edx
sub ecx, 1
sete dl
add ecx, edx
jmp 0x4062da
mov ebp, dword [eax + 8]
mov dword [ebx + 8], ebp
mov ebp, dword [ecx + 4]
mov dword [edx + 4], ebp
mov ebp, dword [ecx + 8]
mov dword [edx + 8], ebp
mov ecx, dword [ecx + 0xc]
mov dword [edx + 0xc], ecx
mov edx, dword [esp + 0x48]
sub edx, 8
cmp edx, 0x10
jle 0x405b91
add ebx, 0x18
add eax, 0x18
lea esi, [esi]
mov edx, dword [eax]
add ebx, 0x20
add eax, 0x20
mov dword [ebx - 0x20], edx
mov edx, dword [eax - 0x1c]
mov dword [ebx - 0x1c], edx
mov edx, dword [eax - 0x18]
mov dword [ebx - 0x18], edx
mov edx, dword [eax - 0x14]
mov dword [ebx - 0x14], edx
mov ebp, dword [eax - 0x10]
mov dword [ebx - 0x10], ebp
mov ebp, dword [eax - 0xc]
mov dword [ebx - 0xc], ebp
mov ebp, dword [eax - 8]
mov dword [ebx - 8], ebp
mov ecx, dword [eax - 4]
mov dword [ebx - 4], ecx
cmp esi, ebx
ja 0x406490
jmp 0x405b91
mov ebp, esi
jmp 0x404f6d
mov ebp, eax
jmp 0x404f6d
mov ebp, dword [eax + 8]
mov dword [ebx + 8], ebp
mov ebp, dword [ecx + 4]
mov dword [edx + 4], ebp
mov ebp, dword [ecx + 8]
mov dword [edx + 8], ebp
mov ecx, dword [ecx + 0xc]
mov dword [edx + 0xc], ecx
mov edx, dword [esp + 0x2c]
sub edx, 8
cmp edx, 0x10
jle 0x405581
mov edi, dword [esp + 0x30]
add ebx, 0x18
add eax, 0x18
mov edx, dword [eax]
add ebx, 0x20
add eax, 0x20
mov dword [ebx - 0x20], edx
mov edx, dword [eax - 0x1c]
mov dword [ebx - 0x1c], edx
mov edx, dword [eax - 0x18]
mov dword [ebx - 0x18], edx
mov edx, dword [eax - 0x14]
mov dword [ebx - 0x14], edx
mov ebp, dword [eax - 0x10]
mov dword [ebx - 0x10], ebp
mov ebp, dword [eax - 0xc]
mov dword [ebx - 0xc], ebp
mov ebp, dword [eax - 8]
mov dword [ebx - 8], ebp
mov ecx, dword [eax - 4]
mov dword [ebx - 4], ecx
cmp edi, ebx
ja 0x40650e
jmp 0x405581