Function at 0x40c680
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x629f19
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x10218
call fcn.006055b0
mov eax, dword [0x6b6224]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, ecx
mov dword [ebp - 0x101cc], eax
xor edi, edi
mov dword [ebp - 0x101d0], eax
mov dword [ebp - 0x101b8], eax
mov dword [ebp - 0x101c8], edi
mov dword [ebp - 0x101d8], edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x78], 0xf
mov dword [ebp - 0x7c], edi
mov byte [ebp - 0x8c], 0
mov dword [ebp - 0x90], 0xf
mov dword [ebp - 0x94], edi
mov byte [ebp - 0xa4], 0
push edi
lea ecx, [ebp - 0x101b4]
call fcn.0040a9a0
lea eax, [ebp - 0x10160]
mov dword [ebp - 0x160], edi
mov dword [ebp - 0x1016c], eax
lea ecx, [ebp - 0x10160]
neg eax
mov dword [ebp - 0x15c], edi
and eax, 3
mov dword [ebp - 0x158], edi
add eax, ecx
mov dword [ebp - 0x154], edi
mov dword [ebp - 0x10168], eax
lea eax, [ebp - 0x160]
mov dword [ebp - 0x10164], eax
mov dword [ebp - 0x150], edi
cmp dword [ebp + 0x1c], 0x10
lea eax, [ebp + 8]
push edi
cmovae eax, dword [ebp + 8]
lea ecx, [ebp - 0x101b4]
push eax
mov byte [ebp - 4], 4
call fcn.004092d0
lea eax, [ebp - 0x101d4]
push 0x63b274
push eax
call fcn.00404ab0
add esp, 8
push 1
push edi
push edi
push edi
push dword [eax]
lea ecx, [ebp - 0x101b4]
mov byte [ebp - 4], 5
call fcn.0040ef00
mov edx, dword [ebp - 0x101d4]
or ebx, 0xffffffff
mov dword [ebp - 0x101f0], eax
add edx, 0xfffffff0
mov byte [ebp - 4], 4
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c7c8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x1018c]
xor eax, eax
test esi, esi
je 0x40c839
test eax, eax
je 0x40c840
cmp dword [esi + 0x18], eax
lea edi, [esi + 0x18]
jne 0x40c7f2
push dword [esi + 0x1c]
lea eax, [esi + 0x20]
mov ecx, esi
push dword [esi + 0x14]
push eax
push edi
call fcn.0040f670
cmp dword [edi], 0
lea eax, [esi + 0x20]
mov ecx, dword [eax]
mov dword [ebp - 0x101bc], ecx
jne 0x40c811
push dword [esi + 0x1c]
mov ecx, esi
push dword [esi + 0x14]
push eax
push edi
call fcn.0040f670
mov eax, dword [ebp - 0x101bc]
xor edx, edx
mov ecx, dword [edi]
test eax, eax
jne 0x40c834
lea edi, [ecx + eax]
cmp ecx, edi
jae 0x40c840
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x40c834
inc ecx
inc edx
cmp ecx, edi
jb 0x40c826
jmp 0x40c840
mov esi, dword [esi + 0x3c]
jmp 0x40c7ce
xor esi, esi
nop dword [eax + eax]
test esi, esi
je 0x40c850
mov ecx, esi
call fcn.0040f230
mov esi, dword [esi + 0x3c]
jmp 0x40c840
lea eax, [ebp - 0x101bc]
push 0x63b28c
push eax
call fcn.00404ab0
add esp, 8
mov edi, dword [ebp - 0x101f0]
mov ecx, edi
push 1
push 0
push dword [eax]
mov byte [ebp - 4], 6
call fcn.0040ee80
mov edx, dword [eax + 4]
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x2c], 0
cmp byte [edx], 0
jne 0x40c899
xor ecx, ecx
jmp 0x40c8a9
mov ecx, edx
lea esi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40c8a0
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00404090
mov eax, dword [ebp - 0x78]
cmp eax, 0x10
jb 0x40c8ce
inc eax
lea ecx, [ebp - 0x8c]
push eax
push dword [ebp - 0x8c]
call fcn.00404190
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x78], 0xf
push eax
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x7c], 0
mov byte [ebp - 0x8c], 0
call fcn.004045e0
mov eax, dword [ebp - 0x18]
cmp eax, 0x10
jb 0x40c907
inc eax
lea ecx, [ebp - 0x2c]
push eax
push dword [ebp - 0x2c]
call fcn.00404190
mov edx, dword [ebp - 0x101bc]
mov eax, ebx
mov dword [ebp - 0x18], 0xf
add edx, 0xfffffff0
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x2c], 0
mov byte [ebp - 4], 4
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c93a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x101f0]
push 0x63b2a0
push eax
call fcn.00404ab0
add esp, 8
push 1
push 0
push dword [eax]
mov ecx, edi
mov byte [ebp - 4], 8
call fcn.0040ee80
mov edx, dword [eax + 4]
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x2c], 0
cmp byte [edx], 0
jne 0x40c97d
xor ecx, ecx
jmp 0x40c98b
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40c982
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00404090
mov eax, dword [ebp - 0x90]
cmp eax, 0x10
jb 0x40c9b3
inc eax
lea ecx, [ebp - 0xa4]
push eax
push dword [ebp - 0xa4]
call fcn.00404190
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x90], 0xf
push eax
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0x94], 0
mov byte [ebp - 0xa4], 0
call fcn.004045e0
mov eax, dword [ebp - 0x18]
cmp eax, 0x10
jb 0x40c9f2
inc eax
lea ecx, [ebp - 0x2c]
push eax
push dword [ebp - 0x2c]
call fcn.00404190
mov edx, dword [ebp - 0x101f0]
mov eax, ebx
mov dword [ebp - 0x18], 0xf
add edx, 0xfffffff0
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x2c], 0
mov byte [ebp - 4], 4
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40ca25
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x101f0]
push 0x63b2b8
push eax
call fcn.00404ab0
add esp, 8
push 1
push 0
push 0
push 0
push dword [eax]
mov ecx, edi
mov byte [ebp - 4], 0xa
call fcn.0040ef00
mov edx, dword [ebp - 0x101f0]
mov edi, eax
mov dword [ebp - 0x101d4], eax
add edx, 0xfffffff0
mov byte [ebp - 4], 4
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40ca77
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 0x101bc], 1
test edi, edi
je 0x40d34c
lea eax, [ebp - 0x10218]
push 0x63b2cc
push eax
call fcn.00404ab0
add esp, 8
push 1
push 0
push dword [eax]
mov ecx, edi
mov byte [ebp - 4], 0xb
call fcn.0040ee80
mov edx, dword [eax + 4]
mov dword [ebp - 0x48], 0xf
mov dword [ebp - 0x4c], 0
mov byte [ebp - 0x5c], 0
cmp byte [edx], 0
jne 0x40cacc
xor ecx, ecx
jmp 0x40cada
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40cad1
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x5c]
call fcn.00404090
mov edx, dword [ebp - 0x10218]
mov eax, ebx
mov byte [ebp - 4], 0xd
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40cb05
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10214]
push 0x63b2d8
push eax
call fcn.00404ab0
add esp, 8
push 1
push 0
push dword [eax]
mov ecx, edi
mov byte [ebp - 4], 0xe
call fcn.0040ee80
mov edx, dword [eax + 4]
mov dword [ebp - 0x108], 0xf
mov dword [ebp - 0x10c], 0
mov byte [ebp - 0x11c], 0
cmp byte [edx], 0
jne 0x40cb51
xor ecx, ecx
jmp 0x40cb5f
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40cb56
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x11c]
call fcn.00404090
mov edx, dword [ebp - 0x10214]
mov eax, ebx
mov byte [ebp - 4], 0x10
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40cb8d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10210]
push 0x63b2e4
push eax
call fcn.00404ab0
add esp, 8
push 1
push 0
push dword [eax]
mov ecx, edi
mov byte [ebp - 4], 0x11
call fcn.0040ee80
mov edx, dword [eax + 4]
mov dword [ebp - 0x60], 0xf
mov dword [ebp - 0x64], 0
mov byte [ebp - 0x74], 0
cmp byte [edx], 0
jne 0x40cbd0
xor ecx, ecx
jmp 0x40cbde
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40cbd5
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x74]
call fcn.00404090
push 2
push 0x63b2f0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x2c], 0
call fcn.00404090
push dword [ebp - 0x101bc]
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x13
push eax
call fcn.0040f210
add esp, 8
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x14
push ecx
push eax
lea eax, [ebp - 0xbc]
push eax
call fcn.004088b0
add esp, 0xc
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x15
push ecx
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.004088b0
add esp, 0xc
mov eax, dword [ebp - 0xa8]
cmp eax, 0x10
jb 0x40cc71
inc eax
lea ecx, [ebp - 0xbc]
push eax
push dword [ebp - 0xbc]
call fcn.00404190
mov dword [ebp - 0xa8], 0xf
mov dword [ebp - 0xac], 0
mov byte [ebp - 0xbc], 0
mov eax, dword [ebp - 0x30]
cmp eax, 0x10
jb 0x40cca1
inc eax
lea ecx, [ebp - 0x44]
push eax
push dword [ebp - 0x44]
call fcn.00404190
mov dword [ebp - 0x30], 0xf
mov dword [ebp - 0x34], 0
mov byte [ebp - 0x44], 0
mov eax, dword [ebp - 0x18]
cmp eax, 0x10
jb 0x40ccc8
inc eax
lea ecx, [ebp - 0x2c]
push eax
push dword [ebp - 0x2c]
call fcn.00404190
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x2c], 0
mov eax, dword [ebp - 0x60]
cmp eax, 0x10
jb 0x40ccef
inc eax
lea ecx, [ebp - 0x74]
push eax
push dword [ebp - 0x74]
call fcn.00404190
mov dword [ebp - 0x60], 0xf
mov dword [ebp - 0x64], 0
mov byte [ebp - 0x74], 0
mov edx, dword [ebp - 0x10210]
mov eax, ebx
mov byte [ebp - 4], 0x1b
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40cd22
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x1020c]
push 0x63b2f4
push eax
call fcn.00404ab0
add esp, 8
push 1
push 0
push dword [eax]
mov ecx, edi
mov byte [ebp - 4], 0x1c
call fcn.0040ee80
lea ecx, [ebp - 0x134]
push dword [eax + 4]
call fcn.0040a860
mov edx, dword [ebp - 0x1020c]
mov eax, ebx
mov byte [ebp - 4], 0x1e
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40cd76
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x10208]
push 0x63b300
push eax
call fcn.00404ab0
add esp, 8
push 1
push 0
push dword [eax]
mov ecx, edi
mov byte [ebp - 4], 0x1f
call fcn.0040ee80
lea ecx, [ebp - 0x14c]
push dword [eax + 4]
call fcn.0040a860
mov edx, dword [ebp - 0x10208]
mov eax, ebx
mov byte [ebp - 4], 0x21
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40cdca
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x80
call fcn.004cf621
mov esi, eax
add esp, 4
mov dword [ebp - 0x10228], esi
mov byte [ebp - 4], 0x22
test esi, esi
je 0x40cf5d
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x101c4], esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x40ce1c
mov eax, dword [ecx]
jmp 0x40ce1e
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], 0
lea eax, [ebp - 0x14c]
push 0
push eax
call fcn.00403f60
sub esp, 0x18
mov byte [ebp - 4], 0x23
mov ecx, esp
mov dword [ebp - 0x10224], esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x40ce66
mov eax, dword [ecx]
jmp 0x40ce68
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], 0
lea eax, [ebp - 0x134]
push 0
push eax
call fcn.00403f60
sub esp, 0x18
mov byte [ebp - 4], 0x24
mov ecx, esp
mov dword [ebp - 0x10220], esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x40ceb0
mov eax, dword [ecx]
jmp 0x40ceb2
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], 0
lea eax, [ebp - 0x104]
push 0
push eax
call fcn.00403f60
sub esp, 0x18
mov byte [ebp - 4], 0x25
mov ecx, esp
mov dword [ebp - 0x1021c], esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x40cefa
mov eax, dword [ecx]
jmp 0x40cefc
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], 0
lea eax, [ebp - 0x11c]
push 0
push eax
call fcn.00403f60
sub esp, 0x18
mov byte [ebp - 4], 0x26
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x40cf3e
mov eax, dword [ecx]
jmp 0x40cf40
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], 0
lea eax, [ebp - 0x5c]
push 0
push eax
call fcn.00403f60
mov ecx, esi
mov byte [ebp - 4], 0x22
call fcn.0040ad10
jmp 0x40cf5f
xor eax, eax
push eax
lea ecx, [ebp - 0x101f8]
mov byte [ebp - 4], 0x21
mov dword [ebp - 0x101f8], 0
mov dword [ebp - 0x101f4], 0
call fcn.00409030
lea eax, [ebp - 0x10204]
mov byte [ebp - 4], 0x27
push 0x63b314
push eax
call fcn.00404ab0
add esp, 8
push 1
push 0
push 0
push 0
push dword [eax]
mov ecx, edi
mov byte [ebp - 4], 0x28
call fcn.0040ef00
mov edx, dword [ebp - 0x10204]
mov edi, eax
mov byte [ebp - 4], 0x27
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40cfd3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test edi, edi
je 0x40d1e5
push dword [edi + 4]
lea ecx, [ebp - 0x44]
call fcn.0040a860
lea eax, [ebp - 0x10200]
mov byte [ebp - 4], 0x29
push 0x63b324
push eax
call fcn.00404ab0
add esp, 8
push 1
push 0
push dword [eax]
mov ecx, edi
mov byte [ebp - 4], 0x2a
call fcn.0040ee80
lea ecx, [ebp - 0x74]
push dword [eax + 4]
call fcn.0040a860
mov edx, dword [ebp - 0x10200]
mov eax, ebx
mov byte [ebp - 4], 0x2c
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d03b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x30
call fcn.004cf621
mov esi, eax
add esp, 4
mov dword [ebp - 0x101e4], esi
mov byte [ebp - 4], 0x2d
test esi, esi
je 0x40d0ea
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x101fc], esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x40d08a
mov eax, dword [ecx]
jmp 0x40d08c
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], 0
lea eax, [ebp - 0x44]
push 0
push eax
call fcn.00403f60
sub esp, 0x18
mov byte [ebp - 4], 0x2e
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x40d0cb
mov eax, dword [ecx]
jmp 0x40d0cd
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], 0
lea eax, [ebp - 0x74]
push 0
push eax
call fcn.00403f60
mov ecx, esi
mov byte [ebp - 4], 0x2d
call fcn.0040aa30
jmp 0x40d0ec
xor eax, eax
push eax
lea ecx, [ebp - 0x101e0]
mov byte [ebp - 4], 0x2c
mov dword [ebp - 0x101e0], 0
mov dword [ebp - 0x101dc], 0
call fcn.00408e90
mov esi, dword [ebp - 0x101f8]
lea ecx, [ebp - 0x101e0]
push ecx
mov byte [ebp - 4], 0x2f
mov eax, dword [esi + 0x78]
lea ecx, [esi + 0x78]
mov dword [ebp - 0x101c4], eax
push dword [eax + 4]
push eax
call fcn.004089e0
mov ecx, 0xffffffe
mov edx, eax
sub ecx, dword [esi + 0x7c]
cmp ecx, 1
jae 0x40d14f
push str.list_T__too_long
call fcn.0060712b
mov eax, dword [ebp - 0x101c4]
mov ecx, edi
inc dword [esi + 0x7c]
push 1
push 0
mov dword [eax + 4], edx
mov eax, dword [edx + 4]
push 0
push 0
push 0
mov dword [eax], edx
call fcn.0040f070
mov esi, dword [ebp - 0x101dc]
mov edi, eax
test esi, esi
je 0x40d19c
mov eax, ebx
lock xadd dword [esi + 4], eax
jne 0x40d19c
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, ebx
lock xadd dword [esi + 8], eax
jne 0x40d19c
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov eax, dword [ebp - 0x60]
cmp eax, 0x10
jb 0x40d1b1
inc eax
lea ecx, [ebp - 0x74]
push eax
push dword [ebp - 0x74]
call fcn.00404190
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x60], 0xf
mov dword [ebp - 0x64], 0
mov byte [ebp - 0x74], 0
mov byte [ebp - 4], 0x27
cmp eax, 0x10
jb 0x40cfd3
inc eax
lea ecx, [ebp - 0x44]
push eax
push dword [ebp - 0x44]
call fcn.00404190
jmp 0x40cfd3
mov ecx, dword [ebp - 0x101cc]
lea eax, [ebp - 0x101f8]
push eax
add ecx, 4
call fcn.0040f1c0
mov ecx, dword [ebp - 0x101d4]
push 1
push 0
push 0
push 0
push 0
call fcn.0040f070
inc dword [ebp - 0x101bc]
mov edi, eax
mov esi, dword [ebp - 0x101f4]
mov dword [ebp - 0x101d4], edi
test esi, esi
je 0x40d246
mov eax, ebx
lock xadd dword [esi + 4], eax
jne 0x40d246
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, ebx
lock xadd dword [esi + 8], eax
jne 0x40d246
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov eax, dword [ebp - 0x138]
cmp eax, 0x10
jb 0x40d264
inc eax
lea ecx, [ebp - 0x14c]
push eax
push dword [ebp - 0x14c]
call fcn.00404190
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x138], 0xf
mov dword [ebp - 0x13c], 0
mov byte [ebp - 0x14c], 0
cmp eax, 0x10
jb 0x40d29d
inc eax
lea ecx, [ebp - 0x134]
push eax
push dword [ebp - 0x134]
call fcn.00404190
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x120], 0xf
mov dword [ebp - 0x124], 0
mov byte [ebp - 0x134], 0
cmp eax, 0x10
jb 0x40d2d6
inc eax
lea ecx, [ebp - 0x104]
push eax
push dword [ebp - 0x104]
call fcn.00404190
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0xf0], 0xf
mov dword [ebp - 0xf4], 0
mov byte [ebp - 0x104], 0
cmp eax, 0x10
jb 0x40d30f
inc eax
lea ecx, [ebp - 0x11c]
push eax
push dword [ebp - 0x11c]
call fcn.00404190
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x108], 0xf
mov dword [ebp - 0x10c], 0
mov byte [ebp - 0x11c], 0
mov byte [ebp - 4], 4
cmp eax, 0x10
jb 0x40ca81
inc eax
lea ecx, [ebp - 0x5c]
push eax
push dword [ebp - 0x5c]
call fcn.00404190
jmp 0x40ca81
lea ecx, [ebp - 0x1016c]
mov byte [ebp - 4], 0x30
call fcn.0040e9a0
mov edi, dword [ebp - 0x101cc]
jmp 0x40d384
mov eax, dword [ebp - 0x101b8]
mov dword [ebp - 4], 2
cmp dword [eax + 8], 0
jne 0x40d404
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x101e4], esp
push 0x63b334
call fcn.0040a860
lea eax, [ebp - 0x101e0]
mov byte [ebp - 4], 0x32
push eax
call fcn.00405990
add esp, 4
mov ecx, dword [eax]
mov byte [ebp - 4], 0x33
mov byte [ebp - 4], 0x34
call fcn.00406140
lea ecx, [ebp - 0x101e0]
call fcn.00413410
lea ecx, [ebp - 0xa4]
call fcn.00402860
lea ecx, [ebp - 0x8c]
call fcn.00402860
lea ecx, [ebp + 8]
call fcn.00402860
xor al, al
jmp 0x40dd45
lea ecx, [ebp - 0x101ec]
mov byte [ebp - 0x101bc], 0
mov dword [ebp - 0x101ec], 0
mov dword [ebp - 0x101e8], 0
call fcn.0040e510
mov dword [ebp - 0x101ec], eax
mov esi, dword [edi + 4]
mov esi, dword [esi]
cmp esi, dword [edi + 4]
je 0x40d661
nop
lea eax, [esi + 8]
push eax
lea ecx, [ebp - 0x101e0]
call fcn.0040a8c0
mov ecx, dword [ebp - 0x101e0]
lea eax, [ebp - 0xbc]
push eax
mov byte [ebp - 4], 0x36
call fcn.0040b9d0
push 0x63b370
push eax
call fcn.00404dd0
add esp, 8
lea ecx, [ebp - 0xbc]
mov bl, al
call fcn.00402860
mov eax, dword [ebp - 0x101bc]
test bl, bl
movzx eax, al
mov ecx, 1
cmove eax, ecx
mov ecx, dword [ebp - 0x101e0]
mov dword [ebp - 0x101bc], eax
lea eax, [ebp - 0x44]
push eax
call fcn.00415130
lea eax, [ebp - 0x101c4]
mov byte [ebp - 4], 0x37
push 0x63b374
push eax
call fcn.00404ab0
add esp, 8
mov ebx, dword [ebp - 0x101c8]
lea ecx, [ebp - 0x5c]
push dword [eax]
or ebx, 1
mov byte [ebp - 4], 0x38
mov dword [ebp - 0x101d8], ebx
call fcn.0040a860
push eax
or ebx, 2
mov dword [ebp - 4], 0x39
lea eax, [ebp - 0x44]
mov dword [ebp - 0x101c8], ebx
push eax
mov dword [ebp - 0x101d8], ebx
mov edi, ebx
call fcn.00408850
add esp, 8
test al, al
je 0x40d55a
lea eax, [ebp - 0x101b8]
push 0x63b388
push eax
call fcn.00404ab0
add esp, 8
push dword [eax]
or ebx, 4
mov dword [ebp - 4], 0x3a
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0x101d8], ebx
call fcn.0040a860
push eax
mov ebx, edi
lea eax, [ebp - 0x44]
or ebx, 0xc
push eax
mov dword [ebp - 0x101c8], ebx
call fcn.00408850
add esp, 8
mov byte [ebp - 0x101bd], 1
test al, al
jne 0x40d561
mov byte [ebp - 0x101bd], 0
test bl, 8
je 0x40d57a
and ebx, 0xfffffff7
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0x101c8], ebx
call fcn.00402860
mov dword [ebp - 4], 0x39
test bl, 4
je 0x40d5b7
mov edx, dword [ebp - 0x101b8]
and ebx, 0xfffffffb
mov dword [ebp - 0x101c8], ebx
add edx, 0xfffffff0
mov dword [ebp - 0x101d8], ebx
or ebx, 0xffffffff
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d5ba
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x40d5ba
or ebx, 0xffffffff
mov edi, dword [ebp - 0x101c8]
lea ecx, [ebp - 0x5c]
and edi, 0xfffffffd
call fcn.00402860
mov edx, dword [ebp - 0x101c4]
and edi, 0xfffffffe
mov dword [ebp - 4], 0x37
add edx, 0xfffffff0
mov dword [ebp - 0x101c8], edi
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d5f8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [ebp - 0x101bd], 0
je 0x40d61f
push dword [ebp - 0x101e4]
lea eax, [ebp - 0x44]
push eax
push 0
lea eax, [ebp - 0x101f8]
push eax
lea ecx, [ebp - 0x101ec]
call fcn.00408bb0
lea ecx, [ebp - 0x44]
call fcn.00402860
mov edi, dword [ebp - 0x101dc]
test edi, edi
je 0x40d650
mov eax, ebx
lock xadd dword [edi + 4], eax
jne 0x40d650
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
mov eax, ebx
lock xadd dword [edi + 8], eax
jne 0x40d650
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov eax, dword [ebp - 0x101cc]
mov esi, dword [esi]
cmp esi, dword [eax + 4]
jne 0x40d440
mov dword [ebp - 0xd8], 0xf
mov dword [ebp - 0xdc], 0
mov byte [ebp - 0xec], 0
cmp byte [ebp - 0x101bc], 0
mov byte [ebp - 4], 0x3b
je 0x40d6cf
lea eax, [ebp - 0x101b8]
push 0x63b39c
push eax
call fcn.00404ab0
add esp, 8
push dword [eax]
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0x3c
call fcn.0040b430
mov edx, dword [ebp - 0x101b8]
mov eax, ebx
mov byte [ebp - 4], 0x3b
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d6cf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x101e8], 0
je 0x40d7f7
push 0
push 0
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
call fcn.00408590
mov eax, dword [ebp - 0x101ec]
mov byte [ebp - 4], 0x3d
mov esi, dword [eax]
mov dword [ebp - 0x101d0], esi
cmp esi, eax
je 0x40d74e
nop dword [eax]
cmp dword [ebp - 0x4c], 0
je 0x40d725
push 2
push 0x63b3cc
lea ecx, [ebp - 0x5c]
call fcn.00406c80
push 0xffffffffffffffff
push 0
add esi, 0x10
lea ecx, [ebp - 0x5c]
push esi
call fcn.00406b80
lea ecx, [ebp - 0x101d0]
call fcn.0040b470
mov esi, dword [ebp - 0x101d0]
cmp esi, dword [ebp - 0x101ec]
jne 0x40d710
cmp dword [ebp - 0xdc], 0
je 0x40d769
push 2
push 0x63b3d0
lea ecx, [ebp - 0xec]
call fcn.00406c80
lea eax, [ebp - 0x101b8]
push 0x63b3d4
push eax
call fcn.00404ab0
add esp, 8
push dword [eax]
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x3e
call fcn.0040a860
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x3f
push ecx
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.00407e80
add esp, 0xc
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0x40
call fcn.00406b80
lea ecx, [ebp - 0x44]
call fcn.00402860
lea ecx, [ebp - 0xbc]
call fcn.00402860
mov edx, dword [ebp - 0x101b8]
mov eax, ebx
mov byte [ebp - 4], 0x3d
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d7eb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x3b
call fcn.00402860
cmp dword [ebp + 0x1c], 0x10
lea eax, [ebp + 8]
cmovae eax, dword [ebp + 8]
push eax
call fcn.00410a50
add esp, 4
lea ecx, [ebp - 0xd4]
push eax
call fcn.0040a860
cmp dword [ebp - 0xdc], 0
mov byte [ebp - 4], 0x41
je 0x40da0b
call fcn.004d0a25
mov ecx, eax
test ecx, ecx
jne 0x40d83d
push 0x80004005
call fcn.00402290
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x101d0], eax
lea eax, [ebp - 0x101b8]
mov byte [ebp - 4], 0x42
push 0x63b418
push eax
call fcn.00404ab0
mov esi, eax
cmp dword [ebp - 0xd8], 0x10
lea edx, [ebp - 0xec]
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x43
cmovae edx, dword [ebp - 0xec]
lea eax, [ebp - 0x8c]
cmp dword [ebp - 0x90], 0x10
push edx
cmovae ecx, dword [ebp - 0xa4]
cmp dword [ebp - 0x78], 0x10
push ecx
cmovae eax, dword [ebp - 0x8c]
push eax
push dword [esi]
lea eax, [ebp - 0x101d0]
push eax
call fcn.00402350
mov edx, dword [ebp - 0x101b8]
add esp, 0x1c
mov byte [ebp - 4], 0x42
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d8d4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.004d0a25
mov ecx, eax
test ecx, ecx
jne 0x40d8e9
push 0x80004005
call fcn.00402290
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x101d4], eax
lea eax, [ebp - 0x101b8]
mov byte [ebp - 4], 0x44
push 0x63b3fc
push eax
call fcn.00404ab0
push dword [ebp - 0xc4]
cmp dword [ebp - 0xc0], 0x10
lea ecx, [ebp - 0xd4]
mov edi, dword [ebp - 0x101d0]
cmovae ecx, dword [ebp - 0xd4]
push ecx
push edi
push dword [eax]
lea eax, [ebp - 0x101d4]
mov byte [ebp - 4], 0x45
push eax
call fcn.00402350
mov edx, dword [ebp - 0x101b8]
add esp, 0x1c
mov byte [ebp - 4], 0x44
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d964
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x101d4]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x101e4], esp
push esi
call fcn.0040a860
lea eax, [ebp - 0x101e0]
mov byte [ebp - 4], 0x46
push eax
call fcn.00405990
add esp, 4
mov ecx, dword [eax]
mov byte [ebp - 4], 0x47
mov byte [ebp - 4], 0x48
call fcn.00406520
mov ecx, dword [ebp - 0x101dc]
mov dword [ebp - 0x101b8], ecx
test ecx, ecx
je 0x40d9ce
mov eax, ebx
lock xadd dword [ecx + 4], eax
jne 0x40d9ce
mov eax, dword [ecx]
call dword [eax]
mov ecx, dword [ebp - 0x101b8]
mov eax, ebx
lock xadd dword [ecx + 8], eax
jne 0x40d9ce
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x42
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x40d9e9
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x41
add edi, 0xfffffff0
lock xadd dword [edi + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x40dcdd
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x40dcdd
lea eax, [ebp - 0x101b8]
push 0x63b4b0
push eax
call fcn.00404ab0
add esp, 8
push dword [eax]
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x49
call fcn.0040a860
mov edx, dword [ebp - 0x101b8]
mov eax, ebx
mov byte [ebp - 4], 0x4b
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40da51
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x101c4]
push 0x63b510
push eax
call fcn.00404ab0
add esp, 8
push dword [eax]
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x4c
call fcn.0040a860
mov edx, dword [ebp - 0x101c4]
mov eax, ebx
mov byte [ebp - 4], 0x4e
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40da94
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x101b8]
push 0x63b570
push eax
call fcn.00404ab0
add esp, 8
push dword [eax]
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x4f
call fcn.0040a860
mov edx, dword [ebp - 0x101b8]
mov eax, ebx
mov byte [ebp - 4], 0x51
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40dada
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x101c4]
push 0x63b5d8
push eax
call fcn.00404ab0
add esp, 8
push dword [eax]
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x52
call fcn.0040a860
mov edx, dword [ebp - 0x101c4]
mov byte [ebp - 4], 0x54
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x40db1b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.00408850
add esp, 8
test al, al
je 0x40dcb7
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.00408850
add esp, 8
test al, al
je 0x40dcb7
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.00408850
add esp, 8
test al, al
je 0x40dcb7
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.00408850
add esp, 8
test al, al
je 0x40dcb7
lea ecx, [ebp - 0x101cc]
call fcn.00401f90
lea eax, [ebp - 0x101b8]
mov byte [ebp - 4], 0x55
push 0x63b638
push eax
call fcn.00404ab0
cmp dword [ebp - 0x90], 0x10
lea edx, [ebp - 0xa4]
push 0x63b26a
cmovae edx, dword [ebp - 0xa4]
lea ecx, [ebp - 0x8c]
cmp dword [ebp - 0x78], 0x10
push edx
cmovae ecx, dword [ebp - 0x8c]
push ecx
push dword [eax]
lea eax, [ebp - 0x101cc]
mov byte [ebp - 4], 0x56
push eax
call fcn.00402350
add esp, 0x1c
lea ecx, [ebp - 0x101b8]
call fcn.00402840
lea ecx, [ebp - 0x101bc]
call fcn.00401f90
lea eax, [ebp - 0x101c4]
mov byte [ebp - 4], 0x57
push 0x63b494
push eax
call fcn.00404ab0
push dword [ebp - 0xc4]
cmp dword [ebp - 0xc0], 0x10
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x58
cmovae ecx, dword [ebp - 0xd4]
push ecx
push dword [ebp - 0x101cc]
push dword [eax]
lea eax, [ebp - 0x101bc]
push eax
call fcn.00402350
add esp, 0x1c
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x101c4]
call fcn.00402840
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x101e4], esp
push dword [ebp - 0x101bc]
call fcn.0040a860
lea eax, [ebp - 0x101e0]
mov byte [ebp - 4], 0x59
push eax
call fcn.00405990
add esp, 4
mov ecx, dword [eax]
mov byte [ebp - 4], 0x5a
mov byte [ebp - 4], 0x5b
call fcn.00406520
lea ecx, [ebp - 0x101e0]
call fcn.00413410
lea ecx, [ebp - 0x101bc]
call fcn.00402840
lea ecx, [ebp - 0x101cc]
call fcn.00402840
lea ecx, [ebp - 0x44]
call fcn.00402860
lea ecx, [ebp - 0xbc]
call fcn.00402860
lea ecx, [ebp - 0x5c]
call fcn.00402860
lea ecx, [ebp - 0x104]
call fcn.00402860
lea ecx, [ebp - 0xd4]
call fcn.00402860
lea ecx, [ebp - 0xec]
call fcn.00402860
mov eax, dword [ebp - 0x101ec]
lea ecx, [ebp - 0x101ec]
push eax
mov byte [ebp - 4], 0x5c
push dword [eax]
lea eax, [ebp - 0x101e4]
push eax
call fcn.0040eaa0
push 1
push dword [ebp - 0x101ec]
lea ecx, [ebp - 0x101ec]
call fcn.0040ea20
lea ecx, [ebp - 0xa4]
call fcn.00402860
lea ecx, [ebp - 0x8c]
call fcn.00402860
lea ecx, [ebp + 8]
call fcn.00402860
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.006052fe
mov esp, ebp
pop ebp
ret 0x18