Function at 0x40d9a1
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
lea ebp, [esp - 0x39c]
sub esp, 0x39c
push 0xffffffffffffffff
push 0x4313a4
mov eax, dword fs:[0]
push eax
sub esp, 0xe4
mov eax, dword [0x43f780]
xor eax, ebp
mov dword [ebp + 0x398], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
or dword [ebp - 0x38], 0xffffffff
xor ebx, ebx
or dword [ebp - 0x8c], 0xffffffff
mov esi, ebx
or dword [ebp - 0x54], 0xffffffff
mov eax, ebx
mov ecx, ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x80], ebx
lea edi, [ebp + 0x340]
mov dword [ebp - 4], ebx
stosd dword es:[edi], eax
push 7
pop ecx
mov dword [ebp - 0x2c], ebx
stosd dword es:[edi], eax
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x7c], ebx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp + 0x350], ebx
mov dword [ebp + 0x354], ecx
mov word [ebp + 0x340], ax
mov eax, 0x45c294
mov byte [ebp - 4], 1
cmp dword [0x45c2a8], ecx
jbe 0x40da5c
mov eax, dword [0x45c294]
push eax
lea ecx, [ebp + 0x370]
call fcn.004014a2
cmp byte [0x45c181], 0
lea eax, [ebp + 0x370]
push eax
sete al
mov byte [ebp - 4], 2
movzx eax, al
push eax
call fcn.0040c667
lea ecx, [ebp + 0x370]
mov byte [ebp - 4], 1
call fcn.00401780
push 0x40
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], ebx
call fcn.0040d801
lea eax, [ebp - 0x50]
push eax
push 0x40
push dword [ebp - 0x50]
call fcn.0040d2a3
mov dword [ebp - 0x4c], eax
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 3
call fcn.0040d41b
mov dword [ebp - 0xe8], ebx
lea eax, [ebp - 0x68]
mov byte [ebp - 4], 4
push eax
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x64], ebx
call fcn.0040ce2f
mov dword [ebp - 0x68], eax
mov al, byte [0x45c548]
mov byte [ebp - 4], 5
mov dword [0x44b6fc], 1
mov byte [0x44b700], al
mov dword [0x44b738], ebx
mov dword [ebp - 0xb0], 0x88
call fcn.0040c65e
test al, al
jne 0x40ecff
mov ecx, ebx
mov edi, ebx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x20], edi
cmp ecx, 0x40
jl 0x40db44
cmp byte [0x45b90c], 0
je 0x40e09b
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x50]
cdq
idiv dword [ebp - 0xb0]
cmp ecx, eax
jl 0x40db65
lea eax, [ebp - 0x11]
push eax
lea eax, [ecx + 1]
push eax
lea ecx, [ebp - 0x50]
call fcn.0040d155
mov eax, dword [ebp - 0x50]
add eax, edi
mov edi, 0x44b740
push 4
push edi
mov dword [0x44b748], eax
call fcn.0040ff69
test eax, eax
je 0x40e08d
push edi
call fcn.0040f62e
test al, al
je 0x40e029
call fcn.00412952
test eax, eax
jne 0x40e024
cmp dword [0x45b878], 7
mov edi, 0x45b864
mov dword [0x45b874], ebx
mov eax, edi
jbe 0x40dbba
mov eax, dword [0x45b864]
xor ecx, ecx
mov word [eax], cx
movzx eax, byte [0x45b7d9]
push eax
movzx eax, word [0x45b7f8]
push 0x45b7dc
push 2
push eax
call fcn.0040fb54
test eax, eax
je 0x40dbf1
cmp eax, esi
jle 0x40dbe8
mov esi, eax
mov dword [ebp - 0x10], esi
cmp eax, 1
jg 0x40e00e
movzx eax, word [0x45b7fa]
push ebx
push ebx
push 3
push eax
call fcn.0040fb54
test eax, eax
je 0x40dc16
cmp eax, esi
jle 0x40dc0d
mov dword [ebp - 0x10], eax
cmp eax, 1
jg 0x40e00e
movzx eax, word [0x45b7fa]
push ebx
push eax
push dword [0x45b7a8]
call fcn.0041252d
xor eax, eax
lea edi, [ebp - 0xd0]
stosd dword es:[edi], eax
push 0x63
stosd dword es:[edi], eax
stosd dword es:[edi], eax
pop eax
cmp word [0x45b7de], ax
jne 0x40dc68
lea eax, [ebp - 0xd0]
push eax
movzx eax, word [0x45b7fa]
push eax
push dword [0x45b7a8]
call fcn.0040f56a
mov ax, word [ebp - 0xc8]
mov word [0x45b7de], ax
mov edi, dword [0x44b748]
lea esi, [ebp - 0xd0]
push ebx
push ebx
push ebx
lea edi, [edi + 0x58]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movzx eax, word [0x45b7fc]
push eax
call fcn.0040fb54
test eax, eax
je 0x40dc9f
cmp eax, dword [ebp - 0x10]
jle 0x40dc96
mov dword [ebp - 0x10], eax
cmp eax, 1
jg 0x40e01d
xor eax, eax
lea edi, [ebp + 0x370]
stosd dword es:[edi], eax
push 0xf
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
pop edi
mov dword [ebp + 0x380], ebx
mov dword [ebp + 0x384], edi
mov byte [ebp + 0x370], bl
lea eax, [ebp + 0x370]
mov byte [ebp - 4], 6
push eax
push dword [0x45b87c]
movzx eax, word [0x45b7fa]
push eax
push dword [0x45b7a8]
call fcn.0040f4da
test al, al
je 0x40dd01
mov esi, 0x45b864
lea eax, [ebp + 0x370]
push esi
push eax
call fcn.00414a8e
push esi
push esi
call fcn.00406e30
mov eax, dword [ebp + 0x384]
mov byte [ebp - 4], 5
cmp eax, edi
jbe 0x40dd3f
mov ecx, dword [ebp + 0x370]
inc eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], ecx
cmp eax, 0x1000
jb 0x40dd36
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.004016c3
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
push eax
push ecx
call fcn.0041d176
pop ecx
pop ecx
movzx ecx, word [0x45b7e2]
movzx eax, word [0x45b7e0]
shl ecx, 0x10
or ecx, eax
push ecx
mov ecx, dword [0x44b748]
lea ecx, [ecx + 0x68]
call fcn.0040bae4
mov eax, dword [0x44b748]
mov dword [eax + 0x70], ebx
mov dword [eax + 0x74], ebx
mov eax, dword [0x44b748]
mov dword [eax + 0x78], ebx
mov dword [eax + 0x7c], ebx
mov ecx, dword [0x44b748]
lea eax, [ecx + 0x78]
push eax
lea eax, [ecx + 0x70]
push eax
lea eax, [ecx + 0x68]
push eax
movzx eax, word [0x45b7fa]
push eax
push dword [0x45b7a8]
call fcn.0040f332
movzx esi, word [0x45b7fa]
mov edi, dword [0x45b7a8]
test esi, esi
je 0x40ddb5
test edi, edi
jne 0x40de9c
mov byte [ebp - 0x11], bl
push 0x340
lea eax, [ebp]
push ebx
push eax
call fcn.0041eb10
add esp, 0xc
lea ecx, [ebp]
call fcn.0040d46b
push 0x45b864
lea ecx, [ebp + 0x28]
mov byte [ebp - 4], 7
call fcn.00403aaa
mov eax, dword [0x45b804]
mov dword [ebp + 0x24], eax
lea eax, [ebp + 0x24]
push ebx
push eax
push dword [0x45b7f4]
mov eax, dword [0x44b748]
push dword [0x45b7f0]
push dword [eax + 0x34]
lea eax, [ebp + 0x28]
push eax
call fcn.00414acc
mov edx, dword [0x44b748]
mov byte [ebp + 0x101], al
mov eax, dword [edx + 0x68]
mov ecx, dword [edx + 0x6c]
add edx, 0x40
mov dword [ebp + 0x50], eax
mov eax, dword [0x45b7f0]
mov dword [ebp + 0x54], ecx
mov ecx, dword [0x45b7f4]
mov dword [ebp + 0x70], eax
mov dword [ebp + 0x74], ecx
mov dword [edx + 0x10], ebx
cmp dword [edx + 0x14], 0xf
jbe 0x40de44
mov edx, dword [edx]
mov byte [edx], bl
movzx esi, word [0x45b7fa]
mov edi, dword [0x45b7a8]
test esi, esi
je 0x40dfa0
test edi, edi
je 0x40dfa0
jmp 0x40df02
push edi
call fcn.0040fe33
mov word [ebp - 0x12], ax
lea eax, [edi + 2]
push eax
call fcn.0040fe33
movzx ecx, ax
lea eax, [esi - 4]
cmp ecx, eax
ja 0x40ddb5
cmp word [ebp - 0x12], 0x17
je 0x40dea6
push 0xfffffffffffffffc
add edi, 4
pop eax
sub eax, ecx
add edi, ecx
add esi, eax
cmp esi, 4
jae 0x40de68
jmp 0x40ddb5
push str.AES_0017
push 0x45b864
push 0x45c294
push 0x22
mov byte [ebp - 0x11], 1
call fcn.0040d2f7
jmp 0x40ddb8
push edi
call fcn.0040fe33
mov word [ebp - 0x26], ax
lea eax, [edi + 2]
push eax
call fcn.0040fe33
movzx ecx, ax
lea eax, [esi - 4]
cmp ecx, eax
ja 0x40dfa0
mov eax, 0x9903
cmp word [ebp - 0x26], ax
jne 0x40def6
cmp ecx, 0x14
jae 0x40df0c
push 0xfffffffffffffffc
add edi, 4
pop eax
sub eax, ecx
add edi, ecx
add esi, eax
cmp esi, 4
jae 0x40dec5
jmp 0x40dfa0
push 0x10
lea eax, [edi + 8]
push eax
lea eax, [ebp + 0x388]
push eax
call fcn.0041e590
mov ecx, dword [0x44b748]
lea eax, [ebp + 0x388]
add esp, 0xc
lea ecx, [ecx + 0x40]
push 0x10
push eax
call fcn.0040ae5f
push 0x5c
pop eax
cmp word [0x45b7de], ax
je 0x40dfa0
mov eax, dword [0x44b748]
lea ecx, [ebp + 0x358]
add eax, 0x40
push eax
call fcn.0040d3e7
push 0x45b864
lea ecx, [ebp + 0x370]
mov byte [ebp - 4], 8
call fcn.00402740
lea eax, [ebp + 0x358]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0xf0]
push eax
lea ecx, [ebp - 0x68]
call fcn.0040cecd
lea ecx, [ebp + 0x370]
mov byte [ebp - 4], 7
call fcn.00401780
lea ecx, [ebp + 0x358]
call fcn.0040ae3b
cmp byte [ebp - 0x11], 0
jne 0x40dfea
push ebx
push ebx
push 6
push ebx
lea eax, [ebp]
mov ecx, 0x45c080
push eax
call fcn.00402f24
test eax, eax
je 0x40dfea
call fcn.0040f726
test eax, eax
je 0x40dfe7
mov ecx, dword [0x44b748]
push 0x45b864
call fcn.00403aaa
mov edi, dword [ebp - 0x20]
inc dword [ebp - 0x30]
add edi, 0x88
mov dword [ebp - 0x20], edi
jmp 0x40dfed
inc dword [ebp - 0x3c]
mov edi, dword [ebp - 0x20]
add dword [ebp - 0x6c], 1
lea ecx, [ebp]
mov byte [ebp - 4], 5
adc dword [ebp - 0x94], ebx
call fcn.0040d67c
mov esi, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x30]
jmp 0x40db32
push edi
push 0x45c294
push 0x1c
call fcn.00403448
jmp 0x40e094
push 0x45b864
jmp 0x40e00f
mov dword [ebp - 0x10], eax
jmp 0x40e094
mov eax, dword [ebp - 0x6c]
mov ecx, dword [0x45b820]
xor eax, ecx
movzx eax, ax
or eax, ebx
je 0x40e063
cmp ecx, 0xffff
jne 0x40e04b
cmp dword [0x45b824], ebx
je 0x40e063
push 0x45c294
mov ecx, 0x45c598
call fcn.0040350e
mov dword [ebp - 0x10], 3
jmp 0x40e094
push edi
call fcn.0040f676
test al, al
jne 0x40e088
cmp byte [0x45b914], al
je 0x40e07f
push edi
call fcn.0040f652
test al, al
jne 0x40e088
mov dword [ebp - 0x5c], 1
jmp 0x40e094
mov dword [ebp - 0x5c], ebx
jmp 0x40e094
mov dword [ebp - 0x10], 0x33
mov dword [ebp - 0x24], 1
cmp byte [0x45b90c], 0
mov eax, dword [0x45b798]
mov dword [ebp - 0xa0], eax
mov eax, dword [0x45b79c]
mov dword [ebp - 0x9c], eax
mov eax, dword [0x45b758]
mov dword [ebp - 0xa4], eax
mov eax, dword [0x45b760]
mov dword [ebp - 0xa8], eax
mov eax, dword [0x45b764]
mov dword [ebp - 0xac], eax
je 0x40e185
push 0x45c294
mov dword [0x45b910], ebx
call fcn.0040d6f8
test al, al
mov eax, str.zx01
jne 0x40e0fd
mov eax, 0x434028
sub esp, 0x18
mov ecx, esp
push eax
call fcn.004014a2
push 0x45c294
call fcn.00406db8
mov edi, dword [0x45b778]
test edi, edi
je 0x40e12e
mov eax, dword [edi]
push 1
mov esi, dword [eax]
mov ecx, esi
call dword [0x433258]
mov ecx, edi
call esi
mov dword [0x45b778], ebx
call fcn.0040fe48
cmp dword [0x45c2a8], 7
mov eax, 0x45c294
jbe 0x40e14c
mov eax, dword [0x45c294]
push eax
lea ecx, [ebp + 0x370]
call fcn.004014a2
cmp byte [0x45c181], 0
lea eax, [ebp + 0x370]
push eax
sete al
mov byte [ebp - 4], 0xa
movzx eax, al
push eax
call fcn.0040c667
lea ecx, [ebp + 0x370]
mov byte [ebp - 4], 5
call fcn.00401780
cmp dword [ebp - 0x30], 0
mov eax, ebx
mov dword [ebp - 0x90], ebx
jle 0x40ec6b
mov ecx, dword [ebp - 0x58]
shl ecx, 6
mov dword [ebp - 0x98], ecx
imul esi, eax, 0x88
add ecx, eax
mov dword [ebp - 0x38], ecx
add esi, dword [ebp - 0x50]
mov dword [0x44b748], esi
mov dword [ebp - 0x40], esi
cmp dword [esi + 0x14], 7
jbe 0x40e1c5
mov eax, dword [esi]
mov dword [ebp - 0x40], eax
cmp byte [0x45b90c], 0
je 0x40e25c
mov ecx, dword [esi + 0x38]
cmp ecx, dword [0x45b910]
je 0x40e25c
movzx eax, word [0x45b810]
cmp ecx, eax
jne 0x40e217
push 0x45c294
call fcn.0040d6f8
test al, al
mov eax, str.zipx
jne 0x40e200
mov eax, 0x43403c
sub esp, 0x18
mov ecx, esp
push eax
call fcn.004014a2
push 0x45c294
call fcn.00406db8
jmp 0x40e222
push ecx
push 0x45c294
call fcn.0040d7a2
mov eax, dword [0x44b748]
mov edi, dword [0x45b778]
mov eax, dword [eax + 0x38]
mov dword [0x45b910], eax
test edi, edi
je 0x40e24b
mov eax, dword [edi]
push 1
mov esi, dword [eax]
mov ecx, esi
call dword [0x433258]
mov ecx, edi
call esi
mov dword [0x45b778], ebx
call fcn.0040fe48
mov esi, dword [0x44b748]
mov edi, dword [esi + 0x18]
add edi, dword [0x45b7a0]
mov esi, dword [esi + 0x1c]
adc esi, dword [0x45b7a4]
push ebx
push 0x2000
push esi
push edi
call fcn.0041da80
mov ecx, edi
mov dword [ebp - 0x1c], eax
sub ecx, eax
mov eax, esi
sbb eax, edx
mov dword [ebp - 0x18], eax
cmp esi, ebx
jg 0x40e326
jl 0x40e29b
cmp edi, ebx
jae 0x40e326
push 0x45c294
mov ecx, 0x45c598
call fcn.0040350e
cmp dword [ebp - 0x38], 0
mov dword [ebp - 0x10], 2
jne 0x40e31a
mov ecx, dword [0x45b7a0]
mov eax, ecx
mov edx, dword [0x45b7a4]
or eax, edx
je 0x40e31a
mov eax, dword [0x44b748]
push ebx
push 0x2000
mov dword [0x45b7a0], ebx
mov dword [0x45b7a4], ebx
mov esi, dword [eax + 0x1c]
mov edi, dword [eax + 0x18]
push esi
push edi
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x74], edx
call fcn.0041da80
mov ecx, edi
mov dword [ebp - 0x1c], eax
sub ecx, eax
mov eax, esi
sbb eax, edx
mov dword [ebp - 0x18], eax
cmp esi, ebx
jg 0x40e326
jl 0x40e30b
cmp edi, ebx
jae 0x40e326
push 0x45c294
mov ecx, 0x45c598
call fcn.0040350e
mov dword [ebp - 0x10], 3
jmp 0x40ec2f
cmp ecx, dword [0x45b798]
jne 0x40e36b
cmp eax, dword [0x45b79c]
jne 0x40e36b
cmp byte [0x45b90c], 0
jne 0x40e36b
mov eax, dword [0x45b758]
mov ecx, dword [0x45b754]
sub eax, ecx
mov edi, dword [ebp - 0x1c]
sub eax, edi
cdq
add dword [0x45b760], eax
adc dword [0x45b764], edx
lea eax, [ecx + edi]
mov dword [0x45b758], eax
jmp 0x40e3fd
mov edi, dword [0x45b778]
push ebx
push dword [ebp - 0x18]
mov eax, dword [edi]
push ecx
mov esi, dword [eax + 0x10]
mov ecx, esi
call dword [0x433258]
mov ecx, edi
call esi
mov edi, dword [0x45b778]
mov eax, dword [edi]
mov esi, dword [eax + 0x14]
mov ecx, esi
call dword [0x433258]
mov ecx, edi
call esi
push 0x2000
push dword [0x45b754]
mov dword [0x45b798], eax
mov dword [0x45b79c], edx
call fcn.00410383
cdq
mov esi, edx
mov ecx, eax
mov dword [0x45b760], ecx
mov dword [0x45b764], esi
cmp esi, ebx
jg 0x40e3dc
jl 0x40e30b
cmp ecx, ebx
jbe 0x40e30b
mov eax, dword [0x45b754]
add eax, dword [ebp - 0x1c]
mov dword [0x45b758], eax
mov eax, dword [ebp - 0x1c]
cdq
sub ecx, eax
mov dword [0x45b760], ecx
sbb esi, edx
mov dword [0x45b764], esi
push 4
mov edi, 0x44b740
push edi
call fcn.0040ff69
test eax, eax
je 0x40e30b
push edi
call fcn.0040f69a
test al, al
jne 0x40e4ab
cmp dword [ebp - 0x38], 0
mov edx, dword [0x45b7a4]
mov ecx, dword [0x45b7a0]
jne 0x40e44c
mov eax, ecx
or eax, edx
je 0x40e44c
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x74], edx
mov dword [0x45b7a0], ebx
mov dword [0x45b7a4], ebx
jmp 0x40e470
or ecx, edx
jne 0x40e30b
mov esi, dword [ebp - 0x70]
mov eax, esi
mov edi, dword [ebp - 0x74]
or eax, edi
je 0x40e30b
mov dword [0x45b7a0], esi
mov dword [0x45b7a4], edi
mov eax, dword [0x44b748]
push dword [eax + 0x1c]
push dword [eax + 0x18]
call fcn.004101ac
test eax, eax
jne 0x40e30b
push 4
mov edi, 0x44b740
push edi
call fcn.0040ff69
test eax, eax
je 0x40e30b
push edi
call fcn.0040f69a
test al, al
je 0x40e30b
call fcn.00412adb
mov esi, eax
test esi, esi
je 0x40e4cd
push 0x45c294
mov ecx, 0x45c598
call fcn.0040350e
mov dword [ebp - 0x10], esi
jmp 0x40ec2f
cmp dword [0x45b878], 7
mov edi, 0x45b864
mov dword [0x45b874], ebx
mov eax, edi
jbe 0x40e4e8
mov eax, dword [0x45b864]
push ebx
xor ecx, ecx
push 0x45b7b2
mov word [eax], cx
movzx eax, word [0x45b7d0]
push 2
push eax
call fcn.0040fb54
test eax, eax
je 0x40e525
cmp eax, dword [ebp - 0x10]
jle 0x40e50e
mov dword [ebp - 0x10], eax
cmp eax, 1
jle 0x40e525
push edi
push 0x45c294
push 0x1c
call fcn.00403448
jmp 0x40ec2f
mov eax, dword [0x45b7a8]
test eax, eax
je 0x40e53b
push eax
call fcn.004224a8
pop ecx
mov dword [0x45b7a8], ebx
movzx eax, word [0x45b7d2]
push ebx
push ebx
push 3
push eax
call fcn.0040fb54
test eax, eax
je 0x40e55d
cmp eax, dword [ebp - 0x10]
jle 0x40e558
mov dword [ebp - 0x10], eax
cmp eax, 1
jg 0x40e513
movzx eax, word [0x45b7d2]
push 1
push eax
push dword [0x45b7a8]
call fcn.0041252d
xor eax, eax
lea edi, [ebp + 0x370]
stosd dword es:[edi], eax
push 0xf
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
pop edi
mov dword [ebp + 0x380], ebx
mov dword [ebp + 0x384], edi
mov byte [ebp + 0x370], bl
lea eax, [ebp + 0x370]
mov byte [ebp - 4], 0xb
push eax
push dword [0x45b87c]
movzx eax, word [0x45b7d2]
push eax
push dword [0x45b7a8]
call fcn.0040f4da
test al, al
je 0x40e5d4
mov esi, 0x45b864
lea eax, [ebp + 0x370]
push esi
push eax
call fcn.00414a8e
push esi
push esi
call fcn.00406e30
mov eax, dword [ebp + 0x384]
mov byte [ebp - 4], 5
cmp eax, edi
jbe 0x40e612
mov ecx, dword [ebp + 0x370]
inc eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], ecx
cmp eax, 0x1000
jb 0x40e609
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.004016c3
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
push eax
push ecx
call fcn.0041d176
pop ecx
pop ecx
mov edx, dword [0x44b748]
push 0x45b890
push 0x45b888
push 0x45b880
mov eax, dword [edx + 0x68]
mov ecx, dword [edx + 0x6c]
mov dword [0x45b880], eax
mov dword [0x45b884], ecx
mov eax, dword [edx + 0x70]
mov ecx, dword [edx + 0x74]
mov dword [0x45b888], eax
mov dword [0x45b88c], ecx
mov eax, dword [edx + 0x78]
mov ecx, dword [edx + 0x7c]
mov dword [0x45b890], eax
movzx eax, word [0x45b7d2]
push eax
push dword [0x45b7a8]
mov dword [0x45b894], ecx
call fcn.0040f332
push 0x63
pop eax
mov cl, bl
mov byte [0x45b918], cl
cmp word [0x45b7b4], ax
jne 0x40e69f
movzx eax, word [0x45b7d2]
push 0x45b918
push eax
push dword [0x45b7a8]
call fcn.0040f56a
mov cl, byte [0x45b918]
mov esi, dword [0x44b748]
add esi, 0x58
cmp byte [esi], 0
je 0x40e6bf
test cl, cl
jne 0x40e6c3
mov edi, 0x45b918
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov cl, byte [0x45b918]
test cl, cl
je 0x40e6cf
mov ax, word [0x45b920]
mov word [0x45b7b4], ax
mov esi, dword [ebp - 0x40]
push esi
call fcn.004223ce
pop ecx
push eax
mov edi, 0x45b864
push esi
mov ecx, edi
call fcn.0040181c
mov ecx, dword [0x44b748]
push ebx
lea eax, [ecx + 0x3c]
push eax
push dword [ecx + 0x2c]
push dword [ecx + 0x28]
push dword [ecx + 0x34]
push edi
call fcn.00414acc
mov esi, dword [0x45b878]
mov ecx, dword [0x45b864]
mov byte [ebp - 0x11], al
mov eax, edi
cmp esi, 7
jbe 0x40e719
mov eax, ecx
cmp word [eax], bx
je 0x40e792
mov eax, edi
cmp esi, 7
jbe 0x40e727
mov eax, ecx
cmp word [eax + 2], bx
je 0x40e792
mov edx, dword [0x45b874]
push 2
pop eax
mov dword [ebp - 0x18], eax
cmp edx, eax
jbe 0x40e792
push 4
pop edi
push edi
pop ebx
mov eax, 0x45b864
cmp esi, 7
jbe 0x40e74e
mov eax, ecx
cmp word [eax + edi], 0x3a
jne 0x40e77a
mov eax, 0x45b864
cmp esi, 7
jbe 0x40e761
mov eax, ecx
push 0x5f
pop ecx
mov word [eax + ebx], cx
mov esi, dword [0x45b878]
mov edx, dword [0x45b874]
mov ecx, dword [0x45b864]
mov eax, dword [ebp - 0x18]
add edi, 2
inc eax
add ebx, 2
mov dword [ebp - 0x18], eax
cmp eax, edx
jb 0x40e742
xor ebx, ebx
mov edi, 0x45b864
push edi
push edi
call fcn.0040621c
cmp byte [ebp - 0x11], 0
je 0x40e7a5
mov edx, ebx
mov esi, ebx
jmp 0x40e7b1
mov edx, dword [0x44b718]
mov esi, dword [0x44b71c]
movzx ecx, word [0x45b7d2]
movzx eax, word [0x45b7d0]
add ecx, 0x1e
add eax, ecx
xor ecx, ecx
add eax, edx
mov edx, dword [ebp - 0x8c]
mov dword [ebp - 0x1c], eax
mov eax, edx
adc ecx, esi
and eax, dword [ebp - 0x54]
mov dword [ebp - 0x20], ecx
mov ecx, dword [0x44b748]
cmp eax, 0xffffffff
je 0x40e975
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ecx + 0x38]
jne 0x40e975
mov esi, dword [ecx + 0x1c]
mov eax, dword [ebp - 0x54]
mov edi, dword [ecx + 0x18]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x28], esi
cmp esi, eax
jg 0x40e975
jl 0x40e81a
cmp edi, edx
jae 0x40e975
sub edx, edi
sbb eax, esi
mov dword [ebp - 0x40], eax
js 0x40e975
jg 0x40e835
cmp edx, 0x200
jbe 0x40e975
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0xc4], edi
mov dword [ebp - 0xc0], esi
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xb8], ecx
cmp dword [ebp - 0x34], esi
jg 0x40e87e
mov eax, dword [ebp - 0x2c]
jl 0x40e861
cmp eax, edi
ja 0x40e87e
mov ecx, eax
mov eax, dword [ebp - 0x34]
add ecx, dword [ebp - 0x78]
adc eax, dword [ebp - 0x7c]
cmp eax, esi
jg 0x40ec4c
jl 0x40e87e
cmp ecx, edi
ja 0x40ec4c
mov eax, dword [ebp - 0x20]
mov ecx, edx
mov edx, dword [ebp - 0x34]
add ecx, edi
adc eax, esi
cmp edx, eax
jg 0x40e8be
mov eax, dword [ebp - 0x2c]
jl 0x40e897
cmp eax, ecx
jae 0x40e8be
mov esi, eax
mov ecx, edx
add esi, dword [ebp - 0x78]
mov edx, edi
mov eax, dword [ebp - 0x28]
adc ecx, dword [ebp - 0x7c]
add edx, dword [ebp - 0x1c]
adc eax, dword [ebp - 0x20]
cmp ecx, eax
jg 0x40ec4c
jl 0x40e8be
cmp esi, edx
jae 0x40ec4c
mov edi, dword [ebp - 0x88]
jmp 0x40e936
mov eax, dword [edi + 4]
mov ecx, dword [ebp - 0x28]
mov edx, dword [edi]
mov dword [ebp - 0x40], eax
cmp eax, ecx
jg 0x40e8fb
jl 0x40e8dc
cmp edx, dword [ebp - 0x18]
ja 0x40e8fb
mov ecx, edx
add ecx, dword [edi + 8]
adc eax, dword [edi + 0xc]
cmp eax, dword [ebp - 0x28]
jg 0x40ec4c
jl 0x40e8f8
cmp ecx, dword [ebp - 0x18]
ja 0x40ec4c
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x1c]
push 0
adc ecx, dword [ebp - 0x20]
pop ebx
cmp dword [ebp - 0x40], ecx
jg 0x40e933
jl 0x40e912
cmp edx, eax
jae 0x40e933
add edx, dword [edi + 8]
mov ebx, dword [ebp - 0x40]
adc ebx, dword [edi + 0xc]
push 0
mov dword [ebp - 0x40], ebx
cmp ebx, ecx
pop ebx
jg 0x40ec4c
jl 0x40e933
cmp edx, eax
jae 0x40ec4c
add edi, 0x10
mov eax, dword [ebp - 0x84]
cmp edi, eax
jne 0x40e8c6
cmp eax, dword [ebp - 0x80]
je 0x40e95c
mov edi, eax
lea esi, [ebp - 0xc4]
add eax, 0x10
mov dword [ebp - 0x84], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
jmp 0x40e96f
lea ecx, [ebp - 0xc4]
push ecx
push eax
lea ecx, [ebp - 0x88]
call fcn.0040cf55
mov ecx, dword [0x44b748]
mov esi, dword [ecx + 0x18]
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
mov edi, dword [ecx + 0x1c]
mov dword [ebp - 0x78], eax
add eax, esi
mov dword [ebp - 0x8c], eax
mov eax, edx
adc eax, edi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x54], eax
mov eax, dword [ecx + 0x38]
mov cl, byte [0x45c181]
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x7c], edx
mov dword [ebp - 0xb4], eax
test cl, cl
je 0x40e9cc
cmp dword [0x45c290], 7
mov eax, 0x45c27c
jbe 0x40e9c2
mov eax, dword [0x45c27c]
push 0x49
pop edx
cmp word [eax], dx
mov al, 1
jne 0x40e9ce
mov al, bl
push ebx
push eax
test cl, cl
mov edi, 0x45b864
sete al
movzx eax, al
push eax
push edi
call fcn.0040c680
test al, al
je 0x40ec6b
mov al, byte [0x45c181]
test al, al
jne 0x40ea20
cmp byte [0x45c113], al
jne 0x40ea42
lea eax, [ebp + 0x340]
push eax
push 0x45c2ac
push edi
call fcn.00404d84
test al, al
je 0x40ec2f
mov al, byte [0x45c181]
test al, al
je 0x40ea42
cmp byte [ebp - 0x11], 0
jne 0x40ec2f
push 0x5c
pop ecx
cmp word [0x45b7b4], cx
je 0x40ec2f
test al, al
jne 0x40ebd7
cmp byte [ebp - 0x11], 0
mov esi, ebx
je 0x40eb34
cmp byte [0x45c0eb], 0
jne 0x40ec2f
cmp dword [0x45b874], 0
je 0x40ec2f
cmp dword [0x45c0f0], 1
je 0x40ec2f
mov eax, dword [0x44b748]
cmp dword [eax + 0x34], 0
je 0x40ea86
cmp dword [eax + 0x34], 0xb
jne 0x40ea89
mov esi, dword [eax + 0x3c]
push edi
call fcn.00404c97
test al, al
jne 0x40eaf6
cmp byte [0x45c12a], al
push esi
sete al
movzx eax, al
push eax
push edi
call fcn.00404f2d
test eax, eax
je 0x40eaf0
movzx eax, byte [0x45c0db]
push eax
push 1
push edi
call fcn.00404a79
cmp byte [0x45c12a], 0
push esi
sete al
movzx eax, al
push eax
push edi
call fcn.00404f2d
test eax, eax
je 0x40eaf0
push edi
push 0x45c294
push 0x14
call fcn.00403448
mov ecx, 0x45c598
call fcn.004037f7
jmp 0x40ec2f
inc dword [0x44b738]
mov eax, dword [0x45c258]
lea ecx, [ebp - 0xe8]
neg eax
sbb eax, eax
and eax, 0x45b888
push eax
mov eax, dword [0x45c254]
neg eax
sbb eax, eax
and eax, 0x45b890
push eax
mov eax, dword [0x45c250]
neg eax
sbb eax, eax
and eax, 0x45b880
push eax
push edi
call fcn.004049e3
jmp 0x40ec2f
push edi
call fcn.0040f91d
cmp eax, 0xffffffff
je 0x40eb9b
test eax, eax
je 0x40eb7f
cmp eax, 1
jne 0x40ebd7
mov eax, dword [0x45c0c0]
cmp eax, 2
je 0x40ec2f
cmp byte [0x45c0ec], 0
jne 0x40ec2f
cmp byte [0x45c0eb], 0
jne 0x40ec2f
test eax, eax
je 0x40ebac
cmp eax, 3
jne 0x40ebd7
jmp 0x40ebac
mov eax, dword [0x45c0c0]
cmp eax, 2
je 0x40ec2f
test eax, eax
je 0x40eb96
cmp eax, 3
jne 0x40ebd7
xor esi, esi
inc esi
jmp 0x40eba8
cmp byte [0x45c0eb], 0
jne 0x40ec2f
test esi, esi
je 0x40ebd7
push ebx
push 0x45b880
push dword [0x44b724]
push dword [0x44b720]
push edi
push 0x45c080
call fcn.0040c4f2
cmp eax, 6
je 0x40ec64
cmp eax, 1
je 0x40ec2f
mov eax, dword [0x44b748]
test byte [eax + 0x80], 1
je 0x40ec1a
call fcn.004132c3
test eax, eax
je 0x40ec1a
cmp eax, 9
je 0x40ecf3
cmp eax, 0xc
jne 0x40ec03
inc dword [ebp - 0x60]
push 6
jmp 0x40ec0d
cmp eax, dword [ebp - 0x10]
jle 0x40ec0b
mov dword [ebp - 0x10], eax
push 0x1c
pop eax
push edi
push 0x45c294
push eax
jmp 0x40e51b
lea eax, [ebp - 0x68]
push eax
call fcn.0040ee1c
test eax, eax
je 0x40ec2f
cmp eax, dword [ebp - 0x10]
jle 0x40ec2f
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp eax, dword [ebp - 0x30]
jge 0x40ec6b
mov ecx, dword [ebp - 0x98]
jmp 0x40e1a3
push 0x45b864
push 0x45c294
push 0x1c
call fcn.00403448
mov dword [ebp - 0x10], 3
mov dword [ebp - 0x24], 1
mov edi, dword [0x45b778]
push ebx
push dword [ebp - 0x9c]
mov eax, dword [edi]
push dword [ebp - 0xa0]
mov esi, dword [eax + 0x10]
mov ecx, esi
call dword [0x433258]
mov ecx, edi
call esi
mov edi, dword [0x45b778]
mov eax, dword [edi]
mov esi, dword [eax + 0x14]
mov ecx, esi
call dword [0x433258]
mov ecx, edi
call esi
push 0x2000
push dword [0x45b754]
mov dword [0x45b798], eax
mov dword [0x45b79c], edx
call fcn.00410383
mov eax, dword [ebp - 0xa4]
inc dword [ebp - 0x58]
cmp dword [ebp - 0x24], 0
mov esi, dword [ebp - 0x10]
mov dword [0x45b758], eax
mov eax, dword [ebp - 0xa8]
mov dword [0x45b760], eax
mov eax, dword [ebp - 0xac]
mov dword [0x45b764], eax
jne 0x40ecff
jmp 0x40db1b
push 2
call fcn.004033db
mov esi, dword [ebp - 0x10]
mov bl, 1
lea ecx, [ebp - 0xe8]
call fcn.0040505d
call fcn.0040c65e
test al, al
jne 0x40ed35
cmp dword [ebp - 0x5c], 0
je 0x40ed35
cmp byte [0x45b90c], al
jne 0x40ed35
push 0x45c294
mov ecx, 0x45c598
call fcn.0040350e
test esi, esi
jne 0x40ed35
inc esi
mov edi, dword [ebp - 0x38]
inc edi
cmp dword [0x44b738], 0
jne 0x40ed79
cmp dword [0x45c290], 7
mov eax, dword [0x45c27c]
ja 0x40ed55
mov eax, 0x45c27c
push 0x49
pop ecx
cmp word [eax], cx
je 0x40ed79
test bl, bl
jne 0x40ed6d
push 0x45c294
push 0x46
call fcn.0040340c
push 0xa
mov ecx, 0x45c598
call fcn.004037af
test edi, edi
jne 0x40ed95
cmp esi, 1
jg 0x40ed95
mov eax, dword [ebp - 0x3c]
xor cx, cx
cmp cx, ax
sbb esi, esi
and esi, 0x46
add esi, 0xb
jmp 0x40edc3
mov ecx, dword [ebp - 0x60]
movzx eax, cx
cmp edi, eax
jne 0x40eda8
cmp esi, 1
jg 0x40eda8
push 0x52
jmp 0x40edb6
cmp word [ebp - 0x3c], 0
je 0x40edb9
cmp esi, 1
jg 0x40edb9
push 0x51
pop esi
jmp 0x40edc3
test cx, cx
je 0x40edc3
test esi, esi
jne 0x40edc3
inc esi
lea eax, [ebp - 0x68]
push eax
mov ecx, eax
call fcn.0040d04c
lea ecx, [ebp - 0xe4]
call fcn.0040d620
lea ecx, [ebp - 0x50]
call fcn.0040d93d
lea ecx, [ebp + 0x340]
call fcn.00401780
lea ecx, [ebp - 0x88]
call fcn.0040d653
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x398]
xor ecx, ebp
call fcn.0041d184
add ebp, 0x39c
leave
ret