Function at 0x40c280
Capabilities:
Check for peb ntglobalflag flag
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5d6780
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x70
push ebx
push ebp
push esi
push edi
mov esi, ecx
mov eax, dword [0x666d08]
xor ebx, ebx
mov ebp, 1
mov dword [esp + 0x88], ebx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
lea ecx, [esp + 0x34]
mov byte [esp + 0x88], 2
call fcn.0040dff0
push 0xa
lea ecx, [esp + 0x68]
mov byte [esp + 0x8c], 3
call fcn.0040e1e0
push ebx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 4
mov dword [esp + 0x2c], 0x5ed0bc
call fcn.00427bb0
mov eax, dword [esp + 0x90]
lea ecx, [esp + 0x28]
push eax
mov byte [esp + 0x8c], 5
call fcn.00427bb0
test al, al
je 0x40d946
push 0x63f67c
lea ecx, [esp + 0x2c]
call fcn.00427fb0
test al, al
je 0x40d93f
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
push ebx
push ecx
push edx
lea ecx, [esp + 0x34]
call fcn.0040e6d0
push 0x63f674
lea ecx, [esp + 0x2c]
call fcn.00428010
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x48]
push ebx
push eax
push ecx
lea ecx, [esp + 0x34]
call fcn.0040e6d0
push 0x63f66c
lea ecx, [esp + 0x2c]
call fcn.00428010
test al, al
je 0x40c39f
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0040e690
mov eax, dword [eax]
push eax
call fcn.005a478e
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esi + 4], eax
call fcn.005c0be8
push 0x63f664
lea ecx, [esp + 0x2c]
call fcn.00428010
test al, al
je 0x40c63d
lea ecx, [esp + 0x28]
call fcn.004282c0
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x48]
push ebx
push eax
push ecx
lea ecx, [esp + 0x34]
call fcn.0040e6d0
push 0x63f65c
lea ecx, [esp + 0x2c]
call fcn.00428010
test al, al
je 0x40c414
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0040e690
push eax
lea ecx, [esi + 8]
mov byte [esp + 0x8c], 6
call fcn.005c0d21
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call fcn.005c0be8
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x48]
push ebx
push eax
push ecx
lea ecx, [esp + 0x34]
call fcn.0040e6d0
push 0x63f654
lea ecx, [esp + 0x2c]
call fcn.00428010
test al, al
je 0x40c46a
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0040e690
push eax
lea ecx, [esi + 0xc]
mov byte [esp + 0x8c], 7
call fcn.005c0d21
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call fcn.005c0be8
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x48]
push ebx
push eax
push ecx
lea ecx, [esp + 0x34]
call fcn.0040e6d0
push 0x63f64c
lea ecx, [esp + 0x2c]
call fcn.00428010
test al, al
je 0x40c4c0
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0040e690
push eax
lea ecx, [esi + 0x10]
mov byte [esp + 0x8c], 8
call fcn.005c0d21
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call fcn.005c0be8
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push 0x63f640
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00428010
test al, al
je 0x40c51d
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0040e690
push eax
lea ecx, [esi + 0x14]
mov byte [esp + 0x8c], 9
call fcn.005c0d21
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call fcn.005c0be8
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f63c
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428010
test al, al
je 0x40c57a
lea eax, [esp + 0x14]
lea ecx, [esp + 0x28]
push eax
call fcn.0040e690
push eax
lea ecx, [esi + 0x18]
mov byte [esp + 0x8c], 0xa
call fcn.005c0d21
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call fcn.005c0be8
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push 0x63f634
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00428010
test al, al
je 0x40c5d7
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0040e690
push eax
lea ecx, [esi + 0x1c]
mov byte [esp + 0x8c], 0xb
call fcn.005c0d21
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call fcn.005c0be8
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push 0x63f62c
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00428010
test al, al
je 0x40c634
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0040e690
push eax
lea ecx, [esi + 0x20]
mov byte [esp + 0x8c], 0xc
call fcn.005c0d21
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call fcn.005c0be8
lea ecx, [esp + 0x28]
call fcn.00428300
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f61c
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428010
test al, al
je 0x40c68f
lea eax, [esp + 0x14]
lea ecx, [esp + 0x28]
push eax
call fcn.0040e690
mov eax, dword [eax]
push eax
call fcn.005a478e
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esi + 0x24], eax
call fcn.005c0be8
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push 0x63f614
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00428010
test al, al
je 0x40ca5f
lea ecx, [esp + 0x28]
call fcn.004282c0
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f60c
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428010
test al, al
je 0x40c726
lea eax, [esp + 0x14]
lea ecx, [esp + 0x28]
push eax
call fcn.0040e690
push eax
lea ecx, [esi + 0x28]
mov byte [esp + 0x8c], 0xd
call fcn.005c0d21
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call fcn.005c0be8
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push 0x63f604
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00428010
test al, al
je 0x40c9b2
lea ecx, [esp + 0x28]
call fcn.004282c0
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f5fc
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428010
test al, al
je 0x40c7bd
lea eax, [esp + 0x14]
lea ecx, [esp + 0x28]
push eax
call fcn.0040e690
push eax
lea ecx, [esi + 0x2c]
mov byte [esp + 0x8c], 0xe
call fcn.005c0d21
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call fcn.005c0be8
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push 0x63f5f4
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00428010
test al, al
je 0x40c80f
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0040e690
mov eax, dword [eax]
push eax
call fcn.005a478e
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esi + 0x30], eax
call fcn.005c0be8
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push 0x63f5ec
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00428010
test al, al
je 0x40c861
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0040e690
mov eax, dword [eax]
push eax
call fcn.005a478e
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esi + 0x34], eax
call fcn.005c0be8
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f5e4
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428010
test al, al
je 0x40c8b3
lea eax, [esp + 0x14]
lea ecx, [esp + 0x28]
push eax
call fcn.0040e690
mov eax, dword [eax]
push eax
call fcn.005a478e
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esi + 0x38], eax
call fcn.005c0be8
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push 0x63f5dc
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00428010
test al, al
je 0x40c905
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0040e690
mov eax, dword [eax]
push eax
call fcn.005a478e
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esi + 0x3c], eax
call fcn.005c0be8
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push 0x63f5d0
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00428010
test al, al
je 0x40c957
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0040e690
mov eax, dword [eax]
push eax
call fcn.005a478e
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esi + 0x40], eax
call fcn.005c0be8
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f5c4
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428010
test al, al
je 0x40c9a9
lea eax, [esp + 0x14]
lea ecx, [esp + 0x28]
push eax
call fcn.0040e690
mov eax, dword [eax]
push eax
call fcn.005a478e
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esi + 0x44], eax
call fcn.005c0be8
lea ecx, [esp + 0x28]
call fcn.00428300
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push 0x63f5bc
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00428010
test al, al
je 0x40ca04
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0040e690
mov eax, dword [eax]
push eax
call fcn.005a478e
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esi + 0x48], eax
call fcn.005c0be8
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push 0x63f5b4
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00428010
test al, al
je 0x40ca56
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0040e690
mov eax, dword [eax]
push eax
call fcn.005a478e
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esi + 0x4c], eax
call fcn.005c0be8
lea ecx, [esp + 0x28]
call fcn.00428300
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f5b0
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428010
test al, al
je 0x40d28b
lea ecx, [esp + 0x28]
call fcn.004282c0
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push 0x63f5a8
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00428010
test al, al
je 0x40ccdc
lea ecx, [esp + 0x28]
call fcn.004282c0
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push 0x63f5a0
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00428010
test al, al
je 0x40cb32
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0040e690
push eax
lea ecx, [esi + 0x50]
mov byte [esp + 0x8c], 0xf
call fcn.005c0d21
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call fcn.005c0be8
jmp 0x40cb48
push 0x63f574
lea ecx, [esi + 0xe0]
call fcn.005c0d71
xor ebp, ebp
mov dword [esp + 0x10], ebp
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push 0x63f568
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00428010
test al, al
je 0x40cc2d
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0040e690
mov edi, dword [eax]
lea edx, [esp + 0x20]
push edx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x10
call fcn.0040e690
mov ebp, dword [eax]
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x11
call fcn.0040e690
mov ecx, dword [eax]
push 0x10
push ebx
push ebp
mov dword [esp + 0x24], ecx
call fcn.005a53b5
xor ecx, ecx
xor edx, edx
mov cl, ah
push 0x10
mov dh, cl
push ebx
push edi
mov ebx, edx
call fcn.005a53b5
push 0x10
shr eax, 0x10
mov bl, al
mov eax, dword [esp + 0x34]
push 0
push eax
call fcn.005a53b5
and eax, 0xff
add esp, 0x24
shl eax, 0x10
or ebx, eax
lea ecx, [esp + 0x1c]
mov dword [esi + 0x54], ebx
call fcn.005c0be8
lea ecx, [esp + 0x20]
mov byte [esp + 0x88], 0x10
call fcn.005c0be8
lea ecx, [esp + 0x24]
mov byte [esp + 0x88], 5
call fcn.005c0be8
mov ebp, dword [esp + 0x10]
xor ebx, ebx
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push 0x63f560
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00428010
test al, al
je 0x40cc7f
lea edx, [esp + 0x24]
lea ecx, [esp + 0x28]
push edx
call fcn.0040e690
mov eax, dword [eax]
push eax
call fcn.005a478e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0x58], eax
call fcn.005c0be8
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push 0x63f558
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00428010
test al, al
je 0x40ccd1
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0040e690
mov eax, dword [eax]
push eax
call fcn.005a478e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0x5c], eax
call fcn.005c0be8
lea ecx, [esp + 0x28]
call fcn.00428300
jmp 0x40ccf2
push 0x63f534
lea ecx, [esi + 0xe0]
call fcn.005c0d71
xor ebp, ebp
mov dword [esp + 0x10], ebp
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f528
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428010
test al, al
je 0x40cf35
lea ecx, [esp + 0x28]
call fcn.004282c0
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push 0x63f5a0
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00428010
test al, al
je 0x40cd8b
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0040e690
push eax
lea ecx, [esi + 0x60]
mov byte [esp + 0x8c], 0x12
call fcn.005c0d21
lea ecx, [esp + 0x24]
mov byte [esp + 0x88], 5
call fcn.005c0be8
jmp 0x40cda1
push 0x63f4f8
lea ecx, [esi + 0xe0]
call fcn.005c0d71
xor ebp, ebp
mov dword [esp + 0x10], ebp
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f568
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428010
test al, al
je 0x40ce86
lea eax, [esp + 0x14]
lea ecx, [esp + 0x28]
push eax
call fcn.0040e690
mov edi, dword [eax]
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x13
call fcn.0040e690
mov ebp, dword [eax]
lea edx, [esp + 0x1c]
push edx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x14
call fcn.0040e690
mov eax, dword [eax]
push 0x10
push ebx
push ebp
mov dword [esp + 0x2c], eax
call fcn.005a53b5
xor ecx, ecx
xor edx, edx
mov cl, ah
push 0x10
mov dh, cl
push ebx
push edi
mov ebx, edx
call fcn.005a53b5
mov edx, dword [esp + 0x38]
push 0x10
push 0
shr eax, 0x10
push edx
mov bl, al
call fcn.005a53b5
and eax, 0xff
add esp, 0x24
shl eax, 0x10
or ebx, eax
lea ecx, [esp + 0x1c]
mov dword [esi + 0x64], ebx
call fcn.005c0be8
lea ecx, [esp + 0x18]
mov byte [esp + 0x88], 0x13
call fcn.005c0be8
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call fcn.005c0be8
mov ebp, dword [esp + 0x10]
xor ebx, ebx
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push 0x63f560
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00428010
test al, al
je 0x40ced8
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0040e690
mov eax, dword [eax]
push eax
call fcn.005a478e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0x68], eax
call fcn.005c0be8
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f558
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428010
test al, al
je 0x40cf2a
lea eax, [esp + 0x24]
lea ecx, [esp + 0x28]
push eax
call fcn.0040e690
mov eax, dword [eax]
push eax
call fcn.005a478e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0x6c], eax
call fcn.005c0be8
lea ecx, [esp + 0x28]
call fcn.00428300
jmp 0x40cf4b
push 0x63f4d0
lea ecx, [esi + 0xe0]
call fcn.005c0d71
xor ebp, ebp
mov dword [esp + 0x10], ebp
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push 0x63f4c4
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00428010
test al, al
je 0x40d18e
lea ecx, [esp + 0x28]
call fcn.004282c0
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f5a0
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428010
test al, al
je 0x40cfe4
lea eax, [esp + 0x24]
lea ecx, [esp + 0x28]
push eax
call fcn.0040e690
push eax
lea ecx, [esi + 0x70]
mov byte [esp + 0x8c], 0x15
call fcn.005c0d21
lea ecx, [esp + 0x24]
mov byte [esp + 0x88], 5
call fcn.005c0be8
jmp 0x40cffa
push 0x63f498
lea ecx, [esi + 0xe0]
call fcn.005c0d71
xor ebp, ebp
mov dword [esp + 0x10], ebp
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push 0x63f568
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00428010
test al, al
je 0x40d0df
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0040e690
mov edi, dword [eax]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x16
call fcn.0040e690
mov ebp, dword [eax]
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x17
call fcn.0040e690
mov edx, dword [eax]
push 0x10
push ebx
push ebp
mov dword [esp + 0x2c], edx
call fcn.005a53b5
xor ecx, ecx
xor edx, edx
mov cl, ah
push 0x10
mov dh, cl
push ebx
push edi
mov ebx, edx
call fcn.005a53b5
mov edx, dword [esp + 0x38]
push 0x10
push 0
shr eax, 0x10
push edx
mov bl, al
call fcn.005a53b5
and eax, 0xff
add esp, 0x24
shl eax, 0x10
or ebx, eax
lea ecx, [esp + 0x1c]
mov dword [esi + 0x74], ebx
call fcn.005c0be8
lea ecx, [esp + 0x18]
mov byte [esp + 0x88], 0x16
call fcn.005c0be8
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call fcn.005c0be8
mov ebp, dword [esp + 0x10]
xor ebx, ebx
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push 0x63f560
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00428010
test al, al
je 0x40d131
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0040e690
mov eax, dword [eax]
push eax
call fcn.005a478e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0x78], eax
call fcn.005c0be8
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f558
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428010
test al, al
je 0x40d183
lea eax, [esp + 0x24]
lea ecx, [esp + 0x28]
push eax
call fcn.0040e690
mov eax, dword [eax]
push eax
call fcn.005a478e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0x7c], eax
call fcn.005c0be8
lea ecx, [esp + 0x28]
call fcn.00428300
jmp 0x40d1a4
push 0x63f470
lea ecx, [esi + 0xe0]
call fcn.005c0d71
xor ebp, ebp
mov dword [esp + 0x10], ebp
lea ecx, [esp + 0x28]
call fcn.00428300
cmp ebp, ebx
je 0x40d958
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push 0x63f468
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00428010
test al, al
je 0x40d938
lea ecx, [esp + 0x28]
call fcn.004282c0
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f5a8
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428010
test al, al
je 0x40d448
lea ecx, [esp + 0x28]
call fcn.004282c0
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push 0x63f5a0
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00428010
test al, al
je 0x40d295
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0040e690
push eax
lea ecx, [esi + 0x80]
mov byte [esp + 0x8c], 0x18
call fcn.005c0d21
lea ecx, [esp + 0x24]
mov byte [esp + 0x88], 5
call fcn.005c0be8
jmp 0x40d2ab
push 0x63f448
jmp 0x40d94b
push 0x63f41c
lea ecx, [esi + 0xe0]
call fcn.005c0d71
xor ebp, ebp
mov dword [esp + 0x10], ebp
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f568
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428010
test al, al
je 0x40d393
lea eax, [esp + 0x14]
lea ecx, [esp + 0x28]
push eax
call fcn.0040e690
mov edi, dword [eax]
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x19
call fcn.0040e690
mov ebp, dword [eax]
lea edx, [esp + 0x1c]
push edx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x1a
call fcn.0040e690
mov eax, dword [eax]
push 0x10
push ebx
push ebp
mov dword [esp + 0x2c], eax
call fcn.005a53b5
xor ecx, ecx
xor edx, edx
mov cl, ah
push 0x10
mov dh, cl
push ebx
push edi
mov ebx, edx
call fcn.005a53b5
mov edx, dword [esp + 0x38]
push 0x10
push 0
shr eax, 0x10
push edx
mov bl, al
call fcn.005a53b5
and eax, 0xff
add esp, 0x24
shl eax, 0x10
or ebx, eax
lea ecx, [esp + 0x1c]
mov dword [esi + 0x84], ebx
call fcn.005c0be8
lea ecx, [esp + 0x18]
mov byte [esp + 0x88], 0x19
call fcn.005c0be8
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call fcn.005c0be8
mov ebp, dword [esp + 0x10]
xor ebx, ebx
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push 0x63f560
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00428010
test al, al
je 0x40d3e8
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0040e690
mov eax, dword [eax]
push eax
call fcn.005a478e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0x88], eax
call fcn.005c0be8
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f558
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428010
test al, al
je 0x40d43d
lea eax, [esp + 0x24]
lea ecx, [esp + 0x28]
push eax
call fcn.0040e690
mov eax, dword [eax]
push eax
call fcn.005a478e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0x8c], eax
call fcn.005c0be8
lea ecx, [esp + 0x28]
call fcn.00428300
jmp 0x40d45e
push 0x63f3f4
lea ecx, [esi + 0xe0]
call fcn.005c0d71
xor ebp, ebp
mov dword [esp + 0x10], ebp
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push 0x63f528
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00428010
test al, al
je 0x40d6ad
lea ecx, [esp + 0x28]
call fcn.004282c0
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f5a0
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428010
test al, al
je 0x40d4fa
lea eax, [esp + 0x24]
lea ecx, [esp + 0x28]
push eax
call fcn.0040e690
push eax
lea ecx, [esi + 0x90]
mov byte [esp + 0x8c], 0x1b
call fcn.005c0d21
lea ecx, [esp + 0x24]
mov byte [esp + 0x88], 5
call fcn.005c0be8
jmp 0x40d510
push 0x63f3c4
lea ecx, [esi + 0xe0]
call fcn.005c0d71
xor ebp, ebp
mov dword [esp + 0x10], ebp
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push 0x63f568
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00428010
test al, al
je 0x40d5f8
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0040e690
mov edi, dword [eax]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x1c
call fcn.0040e690
mov ebp, dword [eax]
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x1d
call fcn.0040e690
mov edx, dword [eax]
push 0x10
push ebx
push ebp
mov dword [esp + 0x2c], edx
call fcn.005a53b5
xor ecx, ecx
xor edx, edx
mov cl, ah
push 0x10
mov dh, cl
push ebx
push edi
mov ebx, edx
call fcn.005a53b5
mov edx, dword [esp + 0x38]
push 0x10
push 0
shr eax, 0x10
push edx
mov bl, al
call fcn.005a53b5
and eax, 0xff
add esp, 0x24
shl eax, 0x10
or ebx, eax
lea ecx, [esp + 0x1c]
mov dword [esi + 0x94], ebx
call fcn.005c0be8
lea ecx, [esp + 0x18]
mov byte [esp + 0x88], 0x1c
call fcn.005c0be8
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call fcn.005c0be8
mov ebp, dword [esp + 0x10]
xor ebx, ebx
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push 0x63f560
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00428010
test al, al
je 0x40d64d
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0040e690
mov eax, dword [eax]
push eax
call fcn.005a478e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0x98], eax
call fcn.005c0be8
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f558
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428010
test al, al
je 0x40d6a2
lea eax, [esp + 0x24]
lea ecx, [esp + 0x28]
push eax
call fcn.0040e690
mov eax, dword [eax]
push eax
call fcn.005a478e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0x9c], eax
call fcn.005c0be8
lea ecx, [esp + 0x28]
call fcn.00428300
jmp 0x40d6c3
push 0x63f398
lea ecx, [esi + 0xe0]
call fcn.005c0d71
xor ebp, ebp
mov dword [esp + 0x10], ebp
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push 0x63f4c4
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00428010
test al, al
je 0x40d91b
lea ecx, [esp + 0x28]
call fcn.004282c0
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f5a0
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428010
test al, al
je 0x40d75f
lea eax, [esp + 0x24]
lea ecx, [esp + 0x28]
push eax
call fcn.0040e690
push eax
lea ecx, [esi + 0xa0]
mov byte [esp + 0x8c], 0x1e
call fcn.005c0d21
lea ecx, [esp + 0x24]
mov byte [esp + 0x88], 5
call fcn.005c0be8
jmp 0x40d775
push 0x63f368
lea ecx, [esi + 0xe0]
call fcn.005c0d71
xor ebp, ebp
mov dword [esp + 0x10], ebp
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push 0x63f568
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00428010
test al, al
je 0x40d85d
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0040e690
mov edi, dword [eax]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x1f
call fcn.0040e690
mov ebp, dword [eax]
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x20
call fcn.0040e690
mov edx, dword [eax]
push 0x10
push ebx
push ebp
mov dword [esp + 0x2c], edx
call fcn.005a53b5
xor ecx, ecx
xor edx, edx
mov cl, ah
push 0x10
mov dh, cl
push ebx
push edi
mov ebx, edx
call fcn.005a53b5
mov edx, dword [esp + 0x38]
push 0x10
push 0
shr eax, 0x10
push edx
mov bl, al
call fcn.005a53b5
and eax, 0xff
add esp, 0x24
shl eax, 0x10
or ebx, eax
lea ecx, [esp + 0x1c]
mov dword [esi + 0xa4], ebx
call fcn.005c0be8
lea ecx, [esp + 0x18]
mov byte [esp + 0x88], 0x1f
call fcn.005c0be8
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call fcn.005c0be8
mov ebp, dword [esp + 0x10]
xor ebx, ebx
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push 0x63f560
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00428010
test al, al
je 0x40d8b2
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0040e690
mov eax, dword [eax]
push eax
call fcn.005a478e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0xa8], eax
call fcn.005c0be8
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x63f558
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428010
test al, al
je 0x40d907
lea eax, [esp + 0x24]
lea ecx, [esp + 0x28]
push eax
call fcn.0040e690
mov eax, dword [eax]
push eax
call fcn.005a478e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0xac], eax
call fcn.005c0be8
lea ecx, [esp + 0x28]
call fcn.00428300
lea ecx, [esp + 0x28]
call fcn.00428300
jmp 0x40d958
push 0x63f340
lea ecx, [esi + 0xe0]
call fcn.005c0d71
lea ecx, [esp + 0x28]
xor ebp, ebp
call fcn.00428300
jmp 0x40d958
push 0x63f320
jmp 0x40d94b
push 0x63f2fc
jmp 0x40d94b
push 0x63f2e4
lea ecx, [esi + 0xe0]
call fcn.005c0d71
xor ebp, ebp
mov dword [esp + 0x28], 0x5ed0bc
lea ecx, [esp + 0x64]
mov dword [esp + 0x64], 0x5ed0ac
mov dword [esp + 0x20], ecx
mov eax, dword [esp + 0x68]
mov byte [esp + 0x88], 0x24
cmp eax, ebx
je 0x40d9af
mov ecx, dword [esp + 0x6c]
xor edi, edi
cmp ecx, ebx
jbe 0x40d9af
mov esi, dword [eax + edi*4]
cmp esi, ebx
je 0x40d9a6
lea edx, [esi + 8]
push 1
push edx
call fcn.005bd4b6
mov esi, dword [esi]
cmp esi, ebx
jne 0x40d991
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x6c]
inc edi
cmp edi, ecx
jb 0x40d98a
push eax
call fcn.005c0952
mov ecx, dword [esp + 0x7c]
add esp, 4
mov dword [esp + 0x68], ebx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x74], ebx
call fcn.005bf6c5
lea eax, [esp + 0x34]
mov dword [esp + 0x78], ebx
mov dword [esp + 0x20], eax
mov dword [esp + 0x34], 0x5ed0c4
mov eax, dword [esp + 0x38]
mov byte [esp + 0x88], 0x25
cmp eax, ebx
je 0x40d9fa
push eax
call fcn.005c0952
add esp, 4
lea ecx, [esp + 0x30]
mov byte [esp + 0x88], 0x21
call fcn.005c0be8
lea ecx, [esp + 0x2c]
mov byte [esp + 0x88], bl
call fcn.005c0be8
lea ecx, [esp + 0x90]
mov dword [esp + 0x88], 0xffffffff
call fcn.005c0be8
mov ecx, dword [esp + 0x80]
pop edi
mov eax, ebp
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x7c
ret 4