Function at 0x40473f
Capabilities:
Move file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x1704
call fcn.00415a10
push ebx
push esi
push edi
xor ebx, ebx
lea eax, [esp + 0x290]
push ebx
push eax
push str.ddd:MMM_ddth__yyyy
push ebx
push ebx
push 0x800
call dword [sym.imp.KERNEL32.dll_GetDateFormatW]
push 9
mov edx, 0x44bb00
lea ecx, [esp + 0x90]
call fcn.004034d9
push eax
lea ecx, [esp + 0xd8]
call fcn.00401f8b
xor edi, edi
lea ecx, [esp + 0x8c]
push ebx
inc edi
push edi
call fcn.00401720
cmp dword [esp + 0xe8], 8
lea eax, [esp + 0xd4]
cmovae eax, dword [esp + 0xd4]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
je 0x4047c9
mov esi, ebx
jmp 0x405106
mov ecx, dword [ebp + 0x10]
call fcn.00403e77
test al, al
jne 0x4047dc
push 0xffffffffffffff88
jmp 0x405105
call fcn.0040249e
push 0x1d7
push 0x421408
lea eax, [esp + 0x218]
push 0x40
push eax
call fcn.0040b808
add esp, 0x10
mov dword [esp + 0x1c], ebx
xor eax, eax
lea ecx, [esp + 0xc]
mov word [esp + 0xc], ax
lea eax, [esp + 0x210]
push 7
pop esi
push eax
mov dword [esp + 0x24], esi
call fcn.00401601
xor eax, eax
mov dword [esp + 0xb8], esi
push 0x421458
lea ecx, [esp + 0xa8]
mov dword [esp + 0xb8], ebx
mov word [esp + 0xa8], ax
call fcn.00401601
lea eax, [esp + 0xc]
push eax
push 0x421450
lea edx, [esp + 0xac]
lea ecx, [esp + 0x34]
call fcn.00405cab
mov edx, eax
lea ecx, [esp + 0x90]
call fcn.00405d05
mov ecx, eax
call fcn.0040576e
push ebx
push edi
lea ecx, [esp + 0x94]
call fcn.00401720
push ebx
push edi
lea ecx, [esp + 0x34]
call fcn.00401720
push ebx
push edi
lea ecx, [esp + 0xac]
call fcn.00401720
push ebx
push edi
lea ecx, [esp + 0x14]
call fcn.00401720
lea ecx, [esp + 0x150]
call fcn.00406041
lea eax, [esp + 0x120]
push eax
lea ecx, [esp + 0x154]
call fcn.004067af
lea eax, [esp + 0x1f4]
push eax
lea ecx, [esp + 0x10c]
call fcn.00403073
lea eax, [esp + 0x1dc]
push eax
lea ecx, [esp + 0xc0]
call fcn.00403073
cmp dword [0x47d3b0], ebx
jne 0x40496c
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x128]
mov ecx, 0x47d3a0
push eax
call fcn.00401a8a
push esi
mov edx, 0x43c544
lea ecx, [esp + 0x30]
call fcn.004034d9
push 0xffffffffffffffff
push ebx
push eax
mov ecx, 0x47d3a0
call fcn.00405b12
push ebx
push edi
lea ecx, [esp + 0x34]
call fcn.00401720
cmp byte [0x47e781], bl
je 0x40496c
sub esp, 0x18
lea eax, [esp + 0xd4]
mov ecx, esp
push eax
call fcn.00403073
lea ecx, [esp + 0x44]
call fcn.0040450c
mov ecx, eax
call fcn.0040576e
push ebx
push edi
lea ecx, [esp + 0x34]
call fcn.00401720
lea edx, [esp + 0x150]
lea ecx, [esp + 0xf0]
call fcn.00401eb5
cmp dword [esp + 0x100], 0
movzx ebx, bl
cmova ebx, edi
cmp byte [0x47e783], 0
mov dword [esp + 0x24], ebx
je 0x4049b1
sub esp, 0x18
lea eax, [esp + 0xd4]
mov ecx, esp
push eax
call fcn.00403073
call fcn.00403a58
cmp dword [0x47d390], 0
lea ecx, [esp + 0x2c]
jne 0x4049d9
push 0x16
mov edx, 0x468eb0
call fcn.004034d9
cmp dword [eax + 0x14], 8
jb 0x40568d
jmp 0x40568b
cmp dword [0x47d394], 8
mov esi, 0x47d380
push edi
cmovae esi, dword [0x47d380]
mov edx, 0x42eccc
call fcn.004034d9
cmp dword [eax + 0x14], 8
jb 0x4049ff
mov eax, dword [eax]
push esi
push eax
lea eax, [esp + 0x2d8]
push 0x7ff
push eax
call fcn.004034bd
add esp, 0x10
lea ecx, [esp + 0x2c]
xor edi, edi
xor esi, esi
inc esi
push edi
push esi
call fcn.00401720
xor eax, eax
mov dword [esp + 0x20], 7
mov word [esp + 0xc], ax
lea ecx, [esp + 0xc]
lea eax, [esp + 0x2d0]
mov dword [esp + 0x1c], edi
push eax
call fcn.00401601
lea ecx, [esp + 0xc]
call fcn.0040576e
push edi
push esi
lea ecx, [esp + 0x14]
call fcn.00401720
cmp byte [0x47e782], 0
jne 0x404bf7
cmp byte [0x47e781], 0
jne 0x404bf7
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0x10c]
push eax
lea ecx, [esp + 0xac]
call fcn.00401dab
cmp dword [esp + 0xb4], edi
ja 0x405701
push 0x19
mov edx, 0x4529b0
mov dword [esp + 0x2c], edi
lea ecx, [esp + 0x30]
call fcn.004034d9
cmp dword [eax + 0x14], 8
jb 0x404abd
mov eax, dword [eax]
lea ecx, [esp + 0x28]
push ecx
push 0x20019
push edi
push eax
push 0x80000002
call dword [0x47e568]
mov ebx, eax
lea ecx, [esp + 0x2c]
push edi
neg ebx
push esi
sbb bl, bl
call fcn.00401720
inc bl
je 0x404b00
push 0x32
mov edx, 0x426da0
lea ecx, [esp + 0x48]
call fcn.004034d9
mov ecx, eax
jmp 0x405708
xor eax, eax
mov dword [esp + 0x20], 7
mov word [esp + 0xc], ax
lea ecx, [esp + 0x8c]
lea eax, [esp + 0xc]
mov dword [esp + 0x1c], edi
push eax
push 0x12
mov edx, 0x4693b0
call fcn.004034d9
push eax
push 0x20
mov edx, 0x461970
lea ecx, [esp + 0x38]
call fcn.004034d9
mov edx, eax
call fcn.00405ecc
push edi
push 1
lea ecx, [esp + 0x34]
mov esi, eax
call fcn.00401720
push edi
push 1
lea ecx, [esp + 0x94]
call fcn.00401720
test esi, esi
jne 0x404bae
push 6
mov edx, 0x43222c
lea ecx, [esp + 0x90]
call fcn.004034d9
lea edx, [esp + 0x8c]
lea ecx, [esp + 0xc]
call fcn.00405c8f
test al, al
je 0x404b9b
push 0x32
mov edx, 0x426da0
lea ecx, [esp + 0x48]
jmp 0x404af4
xor esi, esi
lea ecx, [esp + 0x8c]
push edi
inc esi
push esi
call fcn.00401720
jmp 0x404bb1
xor esi, esi
inc esi
push edi
push esi
lea ecx, [esp + 0x14]
call fcn.00401720
push edi
push esi
lea ecx, [esp + 0xac]
call fcn.00401720
cmp byte [0x47e781], 0
jne 0x404bf3
lea ecx, [esp + 0x150]
call fcn.00406930
test al, al
jne 0x404bf3
push 0x32
mov edx, 0x426da0
lea ecx, [esp + 0x48]
jmp 0x404af4
mov ebx, dword [esp + 0x24]
xor eax, eax
mov dword [esp + 0x70], 7
push 0x41f5ac
lea ecx, [esp + 0x60]
mov dword [esp + 0x70], edi
mov word [esp + 0x60], ax
call fcn.00401601
xor eax, eax
mov dword [esp + 0x88], 7
mov dword [esp + 0x84], edi
mov word [esp + 0x74], ax
cmp dword [0x47d3d0], eax
jbe 0x404c52
push 0xffffffffffffffff
push edi
push 0x47d3c0
lea ecx, [esp + 0x80]
call fcn.00401a8a
jmp 0x404d52
lea eax, [esp + 0x12d0]
push eax
push 0x104
call dword [0x47e360]
test eax, eax
je 0x404ca6
xor eax, eax
mov dword [esp + 0x20], 7
mov word [esp + 0xc], ax
lea ecx, [esp + 0xc]
lea eax, [esp + 0x12d0]
mov dword [esp + 0x1c], edi
push eax
call fcn.00401601
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x60]
call fcn.00401fad
push edi
push esi
lea ecx, [esp + 0x14]
call fcn.00401720
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x30]
push eax
call fcn.00406c20
push eax
lea ecx, [esp + 0x60]
call fcn.00401fad
push edi
push esi
lea ecx, [esp + 0x34]
call fcn.00401720
cmp dword [esp + 0x70], 8
lea eax, [esp + 0x5c]
push edi
cmovae eax, dword [esp + 0x60]
push eax
call dword [0x47e350]
test eax, eax
jne 0x404d16
push 0x17
mov edx, 0x463510
lea ecx, [esp + 0x30]
call fcn.004034d9
mov ecx, eax
call fcn.0040576e
push edi
push esi
lea ecx, [esp + 0x34]
call fcn.00401720
push 0x25
mov edx, 0x4727c0
lea ecx, [esp + 0x48]
jmp 0x4056f5
cmp dword [esp + 0x70], 8
lea eax, [esp + 0x5c]
push 4
cmovae eax, dword [esp + 0x60]
push edi
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x30]
push eax
call fcn.00406f6d
push eax
lea ecx, [esp + 0x78]
call fcn.00401fad
push edi
push esi
lea ecx, [esp + 0x34]
call fcn.00401720
cmp dword [esp + 0x88], 8
lea esi, [esp + 0x74]
push 0x11
cmovae esi, dword [esp + 0x78]
lea ecx, [esp + 0x30]
mov edx, 0x441ed0
call fcn.004034d9
cmp dword [eax + 0x14], 8
jb 0x404d7b
mov eax, dword [eax]
push esi
push eax
lea eax, [esp + 0x2d8]
push 0x7ff
push eax
call fcn.004034bd
add esp, 0x10
lea ecx, [esp + 0x2c]
push edi
push 1
call fcn.00401720
xor eax, eax
mov dword [esp + 0x20], 7
mov word [esp + 0xc], ax
lea ecx, [esp + 0xc]
lea eax, [esp + 0x2d0]
mov dword [esp + 0x1c], edi
push eax
call fcn.00401601
lea ecx, [esp + 0xc]
call fcn.0040576e
push edi
push 1
lea ecx, [esp + 0x14]
call fcn.00401720
cmp byte [0x47e788], 0
jne 0x404e39
xor ecx, ecx
movzx eax, bl
cmp byte [0x47e789], cl
cmovne eax, ecx
test al, al
jne 0x404e39
mov eax, 0x1c0bc
push eax
mov dword [esp + 0x2c], eax
call fcn.0040b7ff
mov ebx, eax
mov dword [esp + 0x28], edi
pop ecx
mov eax, edi
mov esi, dword [edi + 0x41fbd0]
add eax, ebx
push esi
push dword [edi + 0x41faa0]
push eax
call fcn.0040a640
mov eax, dword [esp + 0x30]
add edi, 4
add eax, esi
add esp, 0xc
mov dword [esp + 0x24], eax
cmp edi, 0xb8
jl 0x404e0a
jmp 0x404e7e
mov eax, 0x3bacf
push eax
mov dword [esp + 0x2c], eax
call fcn.0040b7ff
mov ebx, eax
mov dword [esp + 0x28], edi
pop ecx
mov eax, edi
mov esi, dword [edi + 0x41f910]
add eax, ebx
push esi
push dword [edi + 0x41f700]
push eax
call fcn.0040a640
mov eax, dword [esp + 0x30]
add edi, 4
add eax, esi
add esp, 0xc
mov dword [esp + 0x24], eax
cmp edi, 0x188
jl 0x404e51
mov edx, dword [esp + 0x28]
push ecx
mov ecx, ebx
call fcn.0040a57b
push 5
mov edx, 0x426e04
lea ecx, [esp + 0x30]
mov esi, eax
call fcn.004034d9
cmp dword [eax + 0x14], 8
jb 0x404ea4
mov eax, dword [eax]
mov edx, 0x80000
mov ecx, 0x10000
test esi, esi
jne 0x404ebc
mov dword [0x47e78c], ecx
mov edi, ecx
jmp 0x404eea
cmp dword [esi], 1
je 0x404ecb
mov dword [0x47e78c], edx
mov edi, edx
jmp 0x404eea
lea ecx, [esp + 0x14e0]
push ecx
lea ecx, [esp + 0x28]
push ecx
push ecx
mov ecx, dword [esi + 4]
push eax
call fcn.0040a3b2
mov edi, eax
mov dword [0x47e78c], edi
xor ebx, ebx
lea ecx, [esp + 0x2c]
push ebx
push 1
call fcn.00401720
test edi, edi
je 0x404f68
cmp byte [0x47e781], bl
je 0x404f58
push edi
push str.z__x
lea eax, [esp + 0x2d8]
push 0x7ff
push eax
call fcn.004034bd
add esp, 0x10
lea ecx, [esp + 0x2c]
mov edx, 0x425178
push 3
call fcn.004034d9
cmp dword [eax + 0x14], 8
jb 0x404f37
mov eax, dword [eax]
push 0x40040
push eax
lea eax, [esp + 0x2d8]
push eax
push ebx
call dword [0x47e3d0]
push ebx
push 1
lea ecx, [esp + 0x34]
call fcn.00401720
push 0x2f
mov edx, 0x42ccd0
lea ecx, [esp + 0x48]
jmp 0x404af4
mov edi, dword [esp + 0x170c]
push edi
call fcn.0040b7ff
pop ecx
push edi
mov dword [esp + 0x2c], eax
call fcn.0040b7ff
mov ebx, eax
pop ecx
test esi, esi
jne 0x404f93
mov dword [0x47e78c], 0x10000
jmp 0x404fb8
cmp dword [esi], 1
je 0x404fa4
mov dword [0x47e78c], 0x80000
jmp 0x404fb8
push ecx
mov ecx, dword [esi + 4]
push edi
push ebx
push dword [esp + 0x30]
call fcn.0040a45a
mov dword [0x47e78c], eax
push edi
push ebx
push dword [esp + 0x30]
call fcn.0040a640
add esp, 0xc
mov ecx, esi
call fcn.0040a5f0
push ebx
call fcn.0040b9be
cmp dword [esp + 0x8c], 8
lea eax, [esp + 0x78]
pop ecx
cmovae eax, dword [esp + 0x74]
xor ebx, ebx
push ebx
push 0x100
push 2
push ebx
push 1
push 0x40000000
push eax
call dword [0x47e354]
mov esi, eax
test esi, esi
jne 0x40511b
cmp dword [esp + 0x88], 8
lea esi, [esp + 0x74]
push 0x17
cmovae esi, dword [esp + 0x78]
lea ecx, [esp + 0x90]
mov edx, 0x47bdb0
call fcn.004034d9
push esi
sub esp, 0x18
mov esi, eax
lea eax, [esp + 0x2ec]
push 6
pop ecx
mov edi, esp
push eax
lea eax, [esp + 0x4c]
rep movsd dword es:[edi], dword [esi]
push eax
call fcn.00403e60
add esp, 0x24
lea ecx, [esp + 0x2c]
xor edi, edi
inc edi
push ebx
push edi
call fcn.00401720
push ebx
push edi
lea ecx, [esp + 0x94]
call fcn.00401720
xor eax, eax
mov dword [esp + 0x20], 7
mov word [esp + 0xc], ax
lea ecx, [esp + 0xc]
lea eax, [esp + 0x2d0]
mov dword [esp + 0x1c], ebx
push eax
call fcn.00401601
lea ecx, [esp + 0xc]
call fcn.0040576e
push ebx
push edi
lea ecx, [esp + 0x14]
call fcn.00401720
push ebx
call dword [0x47e35c]
push ebx
push edi
lea ecx, [esp + 0x7c]
call fcn.00401720
push ebx
push edi
lea ecx, [esp + 0x64]
call fcn.00401720
push ebx
push edi
lea ecx, [esp + 0xf8]
call fcn.00401720
push ebx
push edi
lea ecx, [esp + 0xc4]
call fcn.00401720
push ebx
push edi
lea ecx, [esp + 0x110]
call fcn.00401720
push ebx
push edi
lea ecx, [esp + 0x128]
call fcn.00401720
lea ecx, [esp + 0x150]
call fcn.00405715
push 0xd
pop esi
push ebx
push edi
lea ecx, [esp + 0xdc]
call fcn.00401720
mov eax, esi
jmp 0x405682
push ebx
mov ebx, dword [esp + 0x2c]
lea eax, [esp + 0xf0]
push eax
push edi
push ebx
push esi
call dword [0x47e364]
test eax, eax
je 0x40570d
push esi
call dword [0x47e35c]
push ebx
call fcn.0040b9be
cmp dword [esp + 0x8c], 8
lea eax, [esp + 0x78]
pop ecx
cmovae eax, dword [esp + 0x74]
xor ebx, ebx
push 4
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
cmp dword [esp + 0x88], 8
lea esi, [esp + 0x74]
push 0x14
cmovae esi, dword [esp + 0x78]
lea ecx, [esp + 0x30]
mov edx, 0x437380
call fcn.004034d9
cmp dword [eax + 0x14], 8
jb 0x40518d
mov eax, dword [eax]
push esi
push eax
lea eax, [esp + 0x2d8]
push 0x7ff
push eax
call fcn.004034bd
add esp, 0x10
lea ecx, [esp + 0x2c]
xor edi, edi
inc edi
push ebx
push edi
call fcn.00401720
xor eax, eax
mov dword [esp + 0x1c], ebx
push 7
pop esi
mov word [esp + 0xc], ax
lea ecx, [esp + 0xc]
lea eax, [esp + 0x2d0]
mov dword [esp + 0x20], esi
push eax
call fcn.00401601
lea ecx, [esp + 0xc]
call fcn.0040576e
push ebx
push edi
lea ecx, [esp + 0x14]
call fcn.00401720
cmp byte [0x47e781], bl
je 0x4052e4
push 0x421414
push edi
mov edx, 0x42dfac
lea ecx, [esp + 0x94]
call fcn.004034d9
push eax
lea ecx, [esp + 0x34]
call fcn.00405cdd
mov edx, eax
lea ecx, [esp + 0x10]
call fcn.00405cab
push ebx
push edi
lea ecx, [esp + 0x34]
call fcn.00401720
push ebx
push edi
lea ecx, [esp + 0x94]
call fcn.00401720
push edi
mov edx, 0x432d0c
lea ecx, [esp + 0xa8]
call fcn.004034d9
push 0xffffffffffffffff
push ebx
push 0x47d3a0
mov ecx, eax
call fcn.00405b12
push eax
lea ecx, [esp + 0x90]
call fcn.00401f8b
push edi
mov edx, 0x432d0c
lea ecx, [esp + 0x48]
call fcn.004034d9
push eax
lea edx, [esp + 0x90]
lea ecx, [esp + 0x30]
call fcn.00405d05
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x18]
call fcn.00405b12
push ebx
push edi
lea ecx, [esp + 0x34]
call fcn.00401720
push ebx
push edi
lea ecx, [esp + 0x94]
call fcn.00401720
push ebx
push edi
lea ecx, [esp + 0xac]
call fcn.00401720
push ebx
push edi
lea ecx, [esp + 0x4c]
call fcn.00401720
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x14]
mov ecx, 0x47d380
push eax
call fcn.00405b12
push ebx
push edi
lea ecx, [esp + 0x14]
call fcn.00401720
push 0x421414
push edi
mov edx, 0x4301a4
lea ecx, [esp + 0x34]
call fcn.004034d9
push eax
lea ecx, [esp + 0x4c]
call fcn.00405cdd
mov edx, eax
lea ecx, [esp + 0x13c]
call fcn.00405cab
push ebx
push edi
lea ecx, [esp + 0x4c]
call fcn.00401720
push ebx
push edi
lea ecx, [esp + 0x34]
call fcn.00401720
push edi
mov edx, 0x432d0c
lea ecx, [esp + 0x30]
call fcn.004034d9
push 0xffffffffffffffff
push ebx
lea ecx, [esp + 0xc4]
push ecx
mov ecx, eax
call fcn.00405b12
push eax
lea ecx, [esp + 0x90]
call fcn.00401f8b
push edi
mov edx, 0x432d0c
lea ecx, [esp + 0x10]
call fcn.004034d9
push eax
lea edx, [esp + 0x90]
lea ecx, [esp + 0x48]
call fcn.00405d05
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x144]
call fcn.00405b12
push ebx
push edi
lea ecx, [esp + 0x4c]
call fcn.00401720
push ebx
push edi
lea ecx, [esp + 0x94]
call fcn.00401720
push ebx
push edi
lea ecx, [esp + 0x34]
call fcn.00401720
push ebx
push edi
lea ecx, [esp + 0x14]
call fcn.00401720
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x140]
mov ecx, 0x47d380
push eax
call fcn.00405b12
lea ecx, [esp + 0x74]
call fcn.00403625
lea ecx, [esp + 0x44]
test al, al
je 0x4053e2
push 0x17
mov edx, 0x472f20
jmp 0x4053e9
push 0x10
mov edx, 0x474f70
call fcn.004034d9
cmp dword [eax + 0x14], 8
jb 0x4053f6
mov eax, dword [eax]
push 0x41f5ac
push eax
lea eax, [esp + 0x2d8]
push 0x7ff
push eax
call fcn.004034bd
add esp, 0x10
lea ecx, [esp + 0x44]
push ebx
push edi
call fcn.00401720
xor eax, eax
mov dword [esp + 0x20], esi
mov word [esp + 0xc], ax
lea ecx, [esp + 0xc]
lea eax, [esp + 0x2d0]
mov dword [esp + 0x1c], ebx
push eax
call fcn.00401601
lea ecx, [esp + 0xc]
call fcn.0040576e
push ebx
push edi
lea ecx, [esp + 0x14]
call fcn.00401720
cmp dword [esp + 0x6c], ebx
jbe 0x405598
cmp byte [0x47e781], bl
je 0x4054f7
cmp dword [esp + 0x70], 8
lea esi, [esp + 0x5c]
push 0x1a
cmovae esi, dword [esp + 0x60]
lea ecx, [esp + 0x48]
mov edx, 0x47c5a0
call fcn.004034d9
cmp dword [eax + 0x14], 8
jb 0x40548c
mov eax, dword [eax]
push esi
push eax
lea eax, [esp + 0x2d8]
push 0x7ff
push eax
call fcn.004034bd
add esp, 0x10
lea ecx, [esp + 0x44]
push ebx
push edi
call fcn.00401720
push 3
mov edx, 0x425178
lea ecx, [esp + 0x48]
call fcn.004034d9
cmp dword [eax + 0x14], 8
jb 0x4054c6
mov eax, dword [eax]
push 0x40024
push eax
lea eax, [esp + 0x2d8]
push eax
push ebx
call dword [0x47e3d0]
cmp eax, 6
lea ecx, [esp + 0x44]
push 0
push edi
sete bl
call fcn.00401720
test bl, bl
je 0x405593
xor ebx, ebx
cmp dword [esp + 0x70], 8
lea esi, [esp + 0x5c]
push 0x1a
cmovae esi, dword [esp + 0x60]
lea ecx, [esp + 0x48]
mov edx, 0x47c5a0
call fcn.004034d9
cmp dword [eax + 0x14], 8
jb 0x40551d
mov eax, dword [eax]
push esi
push eax
lea eax, [esp + 0x2d8]
push 0x7ff
push eax
call fcn.004034bd
add esp, 0x10
lea ecx, [esp + 0x44]
push ebx
push edi
call fcn.00401720
xor eax, eax
mov dword [esp + 0x1c], ebx
push 7
pop esi
mov word [esp + 0xc], ax
lea ecx, [esp + 0xc]
lea eax, [esp + 0x2d0]
mov dword [esp + 0x20], esi
push eax
call fcn.00401601
lea ecx, [esp + 0xc]
call fcn.0040576e
push ebx
push edi
lea ecx, [esp + 0x14]
call fcn.00401720
sub esp, 0x18
lea eax, [esp + 0x74]
mov ecx, esp
push eax
call fcn.00403073
lea ecx, [esp + 0x168]
call fcn.00406d19
jmp 0x405598
push 7
xor ebx, ebx
pop esi
push 0x16
mov edx, 0x44c2e0
lea ecx, [esp + 0x48]
call fcn.004034d9
cmp dword [eax + 0x14], 8
jb 0x4055b0
mov eax, dword [eax]
push 0x41f5ac
push eax
lea eax, [esp + 0x2d8]
push 0x7ff
push eax
call fcn.004034bd
add esp, 0x10
lea ecx, [esp + 0x44]
push ebx
push edi
call fcn.00401720
xor eax, eax
mov dword [esp + 0x20], esi
mov word [esp + 0xc], ax
lea ecx, [esp + 0xc]
lea eax, [esp + 0x2d0]
mov dword [esp + 0x1c], ebx
push eax
call fcn.00401601
lea ecx, [esp + 0xc]
call fcn.0040576e
push ebx
push edi
lea ecx, [esp + 0x14]
call fcn.00401720
push ebx
push edi
lea ecx, [esp + 0x140]
call fcn.00401720
push ebx
push edi
lea ecx, [esp + 0x7c]
call fcn.00401720
push ebx
push edi
lea ecx, [esp + 0x64]
call fcn.00401720
push ebx
push edi
lea ecx, [esp + 0xf8]
call fcn.00401720
push ebx
push edi
lea ecx, [esp + 0xc4]
call fcn.00401720
push ebx
push edi
lea ecx, [esp + 0x110]
call fcn.00401720
push ebx
push edi
lea ecx, [esp + 0x128]
call fcn.00401720
lea ecx, [esp + 0x150]
call fcn.00405715
push ebx
push edi
lea ecx, [esp + 0xdc]
call fcn.00401720
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov eax, dword [eax]
push 0x41f5ac
push eax
lea eax, [esp + 0x2d8]
push 0x7ff
push eax
call fcn.004034bd
add esp, 0x10
lea ecx, [esp + 0x2c]
push 0
push edi
call fcn.00401720
and dword [esp + 0x1c], 0
lea ecx, [esp + 0xc]
xor eax, eax
mov dword [esp + 0x20], esi
mov word [esp + 0xc], ax
lea eax, [esp + 0x2d0]
push eax
call fcn.00401601
lea ecx, [esp + 0xc]
call fcn.0040576e
push 0
push edi
lea ecx, [esp + 0x14]
call fcn.00401720
push 0x2f
mov edx, 0x42ccd0
lea ecx, [esp + 0x48]
call fcn.004034d9
mov ecx, eax
call fcn.00403d46
lea ecx, [esp + 0xa4]
call fcn.00405816
mov ecx, esi
call fcn.00403d92
int3