Function at 0x40d4c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x49aac0
mov eax, dword fs:[0]
push eax
sub esp, 0x104
mov eax, dword [0x4be0a0]
xor eax, esp
mov dword [esp + 0x100], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4be0a0]
xor eax, esp
push eax
lea eax, [esp + 0x118]
mov dword fs:[0], eax
and dword [esp + 0xcc], 0xfffffe00
xor ebx, ebx
mov esi, ecx
mov dword [esp + 0x78], esi
mov dword [esp + 0xd0], ebx
mov dword [esp + 0xd4], ebx
mov dword [esp + 0xd8], ebx
lea eax, [esp + 0xc4]
push eax
lea ecx, [esp + 0xb0]
push ecx
mov dword [esp + 0x128], 1
call fcn.00469282
mov byte [esp + 0x120], 2
mov ebp, dword [esi + 0x4ec]
cmp ebp, dword [esi + 0x4f0]
jbe 0x40d55e
call fcn.0047db04
mov edi, dword [esi + 0x4e0]
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], ebp
lea esp, [esp]
mov ebp, dword [esi + 0x4f0]
cmp dword [esi + 0x4ec], ebp
jbe 0x40d583
call fcn.0047db04
mov esi, dword [esi + 0x4e0]
cmp edi, ebx
je 0x40d591
cmp edi, esi
je 0x40d596
call fcn.0047db04
cmp dword [esp + 0x34], ebp
je 0x40e4c3
and dword [esp + 0x9c], 0xfffffe00
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], ebx
mov dword [esp + 0xa8], ebx
lea edx, [esp + 0x94]
push edx
lea eax, [esp + 0x80]
push eax
mov byte [esp + 0x128], 4
call fcn.00469282
cmp edi, ebx
jne 0x40d83b
call fcn.0047db04
xor edi, edi
mov ecx, dword [esp + 0x34]
cmp ecx, dword [edi + 0x10]
jb 0x40d5fa
call fcn.0047db04
mov edx, dword [esp + 0x34]
mov eax, dword [edx]
mov eax, dword [eax]
mov byte [esp + 0x1c], 1
mov esi, dword [esp + 0x1c]
cdq
and esi, 0xfffffeff
mov edi, eax
mov ebp, edx
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], ebp
push str.admin
lea ecx, [esp + 0x80]
push ecx
mov ecx, 0x4a2489
mov byte [esp + 0x128], 6
call fcn.0046a0e5
mov byte [esp + 0x120], 5
movsx ecx, byte [eax + 8]
mov dl, byte [esp + 0x1c]
mov byte [eax + 8], dl
mov edx, esi
xor edx, ecx
and edx, 0xff
lea ecx, [esp + 0x14]
xor esi, edx
cmp eax, ecx
je 0x40d686
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [eax], edi
mov dword [eax + 4], ebp
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
mov edx, dword [eax + 8]
mov ecx, edx
shr ecx, 8
and ecx, 1
shl ecx, 8
mov edi, esi
xor edi, edx
xor ecx, esi
and ecx, 0x100
and edi, 0x100
xor edi, edx
xor esi, ecx
lea ecx, [eax + 0xc]
lea edx, [esp + 0x20]
mov dword [eax + 8], edi
mov dword [esp + 0x1c], esi
cmp ecx, edx
je 0x40d6c4
mov edx, dword [ecx]
mov dword [ecx], ebx
mov dword [esp + 0x20], edx
lea ecx, [eax + 0x10]
lea edx, [esp + 0x24]
cmp ecx, edx
je 0x40d6d7
mov edx, dword [ecx]
mov dword [ecx], ebx
mov dword [esp + 0x24], edx
add eax, 0x14
lea ecx, [esp + 0x28]
cmp eax, ecx
je 0x40d6ea
mov ecx, dword [eax]
mov dword [eax], ebx
mov dword [esp + 0x28], ecx
lea esi, [esp + 0x14]
call fcn.0046941b
mov eax, dword [esp + 0x30]
cmp eax, ebx
jne 0x40d842
call fcn.0047db04
xor eax, eax
mov edx, dword [esp + 0x34]
cmp edx, dword [eax + 0x10]
jb 0x40d714
call fcn.0047db04
mov eax, dword [esp + 0x34]
mov ecx, dword [eax]
mov eax, dword [ecx + 4]
mov byte [esp + 0x1c], 1
mov esi, dword [esp + 0x1c]
cdq
and esi, 0xfffffeff
mov edi, eax
mov ebp, edx
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], ebp
push str.toolType
lea edx, [esp + 0x80]
push edx
mov ecx, 0x4a2494
mov byte [esp + 0x128], 7
call fcn.0046a0e5
mov byte [esp + 0x120], 5
movsx ecx, byte [eax + 8]
mov dl, byte [esp + 0x1c]
mov byte [eax + 8], dl
mov edx, esi
xor edx, ecx
and edx, 0xff
lea ecx, [esp + 0x14]
xor esi, edx
cmp eax, ecx
je 0x40d7a1
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [eax], edi
mov dword [eax + 4], ebp
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
mov edx, dword [eax + 8]
mov ecx, edx
shr ecx, 8
and ecx, 1
shl ecx, 8
mov edi, esi
xor edi, edx
xor ecx, esi
and ecx, 0x100
and edi, 0x100
xor edi, edx
xor esi, ecx
lea ecx, [eax + 0xc]
lea edx, [esp + 0x20]
mov dword [eax + 8], edi
mov dword [esp + 0x1c], esi
cmp ecx, edx
je 0x40d7df
mov edx, dword [ecx]
mov dword [ecx], ebx
mov dword [esp + 0x20], edx
lea ecx, [eax + 0x10]
lea edx, [esp + 0x24]
cmp ecx, edx
je 0x40d7f2
mov edx, dword [ecx]
mov dword [ecx], ebx
mov dword [esp + 0x24], edx
add eax, 0x14
lea ecx, [esp + 0x28]
cmp eax, ecx
je 0x40d805
mov ecx, dword [eax]
mov dword [eax], ebx
mov dword [esp + 0x28], ecx
lea esi, [esp + 0x14]
call fcn.0046941b
mov eax, dword [esp + 0x30]
cmp eax, ebx
jne 0x40d849
call fcn.0047db04
xor eax, eax
mov esi, dword [esp + 0x34]
cmp esi, dword [eax + 0x10]
jb 0x40d82b
call fcn.0047db04
mov eax, dword [esi]
add eax, 8
cmp dword [eax + 0x18], 8
jb 0x40d84d
mov ecx, dword [eax + 4]
jmp 0x40d850
mov edi, dword [edi]
jmp 0x40d5ec
mov eax, dword [eax]
jmp 0x40d706
mov eax, dword [eax]
jmp 0x40d81d
lea ecx, [eax + 4]
xor edx, edx
mov eax, ecx
mov dword [esp + 0x6c], 7
mov dword [esp + 0x68], ebx
mov word [esp + 0x58], dx
lea esi, [eax + 2]
jmp 0x40d870
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0x40d870
sub eax, esi
sar eax, 1
push eax
push ecx
lea esi, [esp + 0x5c]
call fcn.004028e0
mov eax, esi
push eax
lea ecx, [esp + 0x3c]
push ecx
mov byte [esp + 0x128], 8
call fcn.004059b0
add esp, 8
mov byte [esp + 0x120], 9
mov edi, dword [eax + 0x14]
mov byte [esp + 0x1c], 4
mov esi, dword [esp + 0x1c]
or esi, 0x100
cmp dword [eax + 0x18], 0x10
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
jb 0x40d8d7
mov eax, dword [eax + 4]
jmp 0x40d8da
add eax, 4
push eax
call fcn.00468c9d
mov edi, eax
add esp, 4
mov dword [esp + 0x14], edi
push 0x4a2058
lea edx, [esp + 0x80]
push edx
mov ecx, 0x4a205c
mov byte [esp + 0x128], 0xa
call fcn.0046a0e5
mov byte [esp + 0x120], 9
movsx ecx, byte [eax + 8]
mov dl, byte [esp + 0x1c]
xor ecx, esi
and ecx, 0xff
xor esi, ecx
lea ecx, [esp + 0x14]
mov byte [eax + 8], dl
cmp eax, ecx
je 0x40d943
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [eax], edi
mov edi, dword [esp + 0x18]
mov dword [eax + 4], edi
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
mov edx, dword [eax + 8]
mov ecx, edx
shr ecx, 8
and ecx, 1
shl ecx, 8
mov edi, esi
xor edi, edx
xor ecx, esi
and ecx, 0x100
and edi, 0x100
xor edi, edx
xor esi, ecx
lea ecx, [eax + 0xc]
lea edx, [esp + 0x20]
mov dword [eax + 8], edi
mov dword [esp + 0x1c], esi
cmp ecx, edx
je 0x40d981
mov edx, dword [ecx]
mov dword [ecx], ebx
mov dword [esp + 0x20], edx
lea ecx, [eax + 0x10]
lea edx, [esp + 0x24]
cmp ecx, edx
je 0x40d994
mov edx, dword [ecx]
mov dword [ecx], ebx
mov dword [esp + 0x24], edx
add eax, 0x14
lea ecx, [esp + 0x28]
cmp eax, ecx
je 0x40d9a7
mov ecx, dword [eax]
mov dword [eax], ebx
mov dword [esp + 0x28], ecx
lea esi, [esp + 0x14]
call fcn.0046941b
mov ebp, 0x10
cmp dword [esp + 0x50], ebp
jb 0x40d9c8
mov edx, dword [esp + 0x3c]
push edx
call fcn.0047d710
add esp, 4
mov esi, 8
mov byte [esp + 0x120], 5
mov dword [esp + 0x50], 0xf
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x3c], bl
cmp dword [esp + 0x6c], esi
jb 0x40d9f8
mov eax, dword [esp + 0x58]
push eax
call fcn.0047d710
add esp, 4
mov eax, dword [esp + 0x30]
cmp eax, ebx
jne 0x40da24
call fcn.0047db04
xor eax, eax
mov edi, dword [esp + 0x34]
cmp edi, dword [eax + 0x10]
jb 0x40da15
call fcn.0047db04
mov eax, dword [edi]
add eax, 0x40
cmp dword [eax + 0x18], esi
jb 0x40da28
mov ecx, dword [eax + 4]
jmp 0x40da2b
mov eax, dword [eax]
jmp 0x40da07
lea ecx, [eax + 4]
xor edx, edx
mov eax, ecx
mov dword [esp + 0x6c], 7
mov dword [esp + 0x68], ebx
mov word [esp + 0x58], dx
lea esi, [eax + 2]
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0x40da43
sub eax, esi
sar eax, 1
push eax
push ecx
lea esi, [esp + 0x5c]
call fcn.004028e0
mov eax, esi
push eax
lea ecx, [esp + 0x3c]
push ecx
mov byte [esp + 0x128], 0xb
call fcn.004059b0
add esp, 8
mov byte [esp + 0x120], 0xc
mov edi, dword [eax + 0x14]
mov byte [esp + 0x1c], 4
mov esi, dword [esp + 0x1c]
or esi, 0x100
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
cmp dword [eax + 0x18], ebp
jb 0x40daa9
mov eax, dword [eax + 4]
jmp 0x40daac
add eax, 4
push eax
call fcn.00468c9d
mov edi, eax
add esp, 4
mov dword [esp + 0x14], edi
push str.path
lea edx, [esp + 0x80]
push edx
mov ecx, 0x4a249c
mov byte [esp + 0x128], 0xd
call fcn.0046a0e5
mov byte [esp + 0x120], 0xc
movsx ecx, byte [eax + 8]
mov dl, byte [esp + 0x1c]
xor ecx, esi
and ecx, 0xff
xor esi, ecx
lea ecx, [esp + 0x14]
mov byte [eax + 8], dl
cmp eax, ecx
je 0x40db15
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [eax], edi
mov edi, dword [esp + 0x18]
mov dword [eax + 4], edi
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
mov edx, dword [eax + 8]
mov ecx, edx
shr ecx, 8
and ecx, 1
shl ecx, 8
mov edi, esi
xor edi, edx
xor ecx, esi
and ecx, 0x100
and edi, 0x100
xor edi, edx
xor esi, ecx
lea ecx, [eax + 0xc]
lea edx, [esp + 0x20]
mov dword [eax + 8], edi
mov dword [esp + 0x1c], esi
cmp ecx, edx
je 0x40db53
mov edx, dword [ecx]
mov dword [ecx], ebx
mov dword [esp + 0x20], edx
lea ecx, [eax + 0x10]
lea edx, [esp + 0x24]
cmp ecx, edx
je 0x40db66
mov edx, dword [ecx]
mov dword [ecx], ebx
mov dword [esp + 0x24], edx
add eax, 0x14
lea ecx, [esp + 0x28]
cmp eax, ecx
je 0x40db79
mov ecx, dword [eax]
mov dword [eax], ebx
mov dword [esp + 0x28], ecx
lea esi, [esp + 0x14]
call fcn.0046941b
mov ebp, 0x10
cmp dword [esp + 0x50], ebp
jb 0x40db9a
mov edx, dword [esp + 0x3c]
push edx
call fcn.0047d710
add esp, 4
mov esi, 8
mov byte [esp + 0x120], 5
mov dword [esp + 0x50], 0xf
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x3c], bl
cmp dword [esp + 0x6c], esi
jb 0x40dbca
mov eax, dword [esp + 0x58]
push eax
call fcn.0047d710
add esp, 4
mov eax, dword [esp + 0x30]
cmp eax, ebx
jne 0x40dbf6
call fcn.0047db04
xor eax, eax
mov edi, dword [esp + 0x34]
cmp edi, dword [eax + 0x10]
jb 0x40dbe7
call fcn.0047db04
mov eax, dword [edi]
add eax, 0x78
cmp dword [eax + 0x18], esi
jb 0x40dbfa
mov ecx, dword [eax + 4]
jmp 0x40dbfd
mov eax, dword [eax]
jmp 0x40dbd9
lea ecx, [eax + 4]
xor edx, edx
mov eax, ecx
mov dword [esp + 0x6c], 7
mov dword [esp + 0x68], ebx
mov word [esp + 0x58], dx
lea esi, [eax + 2]
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0x40dc15
sub eax, esi
sar eax, 1
push eax
push ecx
lea esi, [esp + 0x5c]
call fcn.004028e0
mov eax, esi
push eax
lea ecx, [esp + 0x3c]
push ecx
mov byte [esp + 0x128], 0xe
call fcn.004059b0
add esp, 8
mov byte [esp + 0x120], 0xf
mov edi, dword [eax + 0x14]
mov byte [esp + 0x1c], 4
mov esi, dword [esp + 0x1c]
or esi, 0x100
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
cmp dword [eax + 0x18], ebp
jb 0x40dc7b
mov eax, dword [eax + 4]
jmp 0x40dc7e
add eax, 4
push eax
call fcn.00468c9d
mov edi, eax
add esp, 4
mov dword [esp + 0x14], edi
push str.desc
lea edx, [esp + 0x80]
push edx
mov ecx, 0x4a193c
mov byte [esp + 0x128], 0x10
call fcn.0046a0e5
mov byte [esp + 0x120], 0xf
movsx ecx, byte [eax + 8]
mov dl, byte [esp + 0x1c]
xor ecx, esi
and ecx, 0xff
xor esi, ecx
lea ecx, [esp + 0x14]
mov byte [eax + 8], dl
cmp eax, ecx
je 0x40dce7
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [eax], edi
mov edi, dword [esp + 0x18]
mov dword [eax + 4], edi
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
mov edx, dword [eax + 8]
mov ecx, edx
shr ecx, 8
and ecx, 1
shl ecx, 8
mov edi, esi
xor edi, edx
xor ecx, esi
and ecx, 0x100
and edi, 0x100
xor edi, edx
xor esi, ecx
lea ecx, [eax + 0xc]
lea edx, [esp + 0x20]
mov dword [eax + 8], edi
mov dword [esp + 0x1c], esi
cmp ecx, edx
je 0x40dd25
mov edx, dword [ecx]
mov dword [ecx], ebx
mov dword [esp + 0x20], edx
lea ecx, [eax + 0x10]
lea edx, [esp + 0x24]
cmp ecx, edx
je 0x40dd38
mov edx, dword [ecx]
mov dword [ecx], ebx
mov dword [esp + 0x24], edx
add eax, 0x14
lea ecx, [esp + 0x28]
cmp eax, ecx
je 0x40dd4b
mov ecx, dword [eax]
mov dword [eax], ebx
mov dword [esp + 0x28], ecx
lea esi, [esp + 0x14]
call fcn.0046941b
mov ebp, 0x10
cmp dword [esp + 0x50], ebp
jb 0x40dd6c
mov edx, dword [esp + 0x3c]
push edx
call fcn.0047d710
add esp, 4
mov esi, 8
mov byte [esp + 0x120], 5
mov dword [esp + 0x50], 0xf
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x3c], bl
cmp dword [esp + 0x6c], esi
jb 0x40dd9c
mov eax, dword [esp + 0x58]
push eax
call fcn.0047d710
add esp, 4
mov eax, dword [esp + 0x30]
cmp eax, ebx
jne 0x40ddc8
call fcn.0047db04
xor eax, eax
mov edi, dword [esp + 0x34]
cmp edi, dword [eax + 0x10]
jb 0x40ddb9
call fcn.0047db04
mov eax, dword [edi]
add eax, 0x5c
cmp dword [eax + 0x18], esi
jb 0x40ddcc
mov ecx, dword [eax + 4]
jmp 0x40ddcf
mov eax, dword [eax]
jmp 0x40ddab
lea ecx, [eax + 4]
xor edx, edx
mov eax, ecx
mov dword [esp + 0x6c], 7
mov dword [esp + 0x68], ebx
mov word [esp + 0x58], dx
lea esi, [eax + 2]
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0x40dde7
sub eax, esi
sar eax, 1
push eax
push ecx
lea esi, [esp + 0x5c]
call fcn.004028e0
mov eax, esi
push eax
lea ecx, [esp + 0x3c]
push ecx
mov byte [esp + 0x128], 0x11
call fcn.004059b0
add esp, 8
mov byte [esp + 0x120], 0x12
mov edi, dword [eax + 0x14]
mov byte [esp + 0x1c], 4
mov esi, dword [esp + 0x1c]
or esi, 0x100
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
cmp dword [eax + 0x18], ebp
jb 0x40de4d
mov eax, dword [eax + 4]
jmp 0x40de50
add eax, 4
push eax
call fcn.00468c9d
mov edi, eax
add esp, 4
mov dword [esp + 0x14], edi
push str.image
lea edx, [esp + 0x80]
push edx
mov ecx, 0x4a24a5
mov byte [esp + 0x128], 0x13
call fcn.0046a0e5
mov byte [esp + 0x120], 0x12
movsx ecx, byte [eax + 8]
mov dl, byte [esp + 0x1c]
xor ecx, esi
and ecx, 0xff
xor esi, ecx
lea ecx, [esp + 0x14]
mov byte [eax + 8], dl
cmp eax, ecx
je 0x40deb9
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [eax], edi
mov edi, dword [esp + 0x18]
mov dword [eax + 4], edi
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
mov edx, dword [eax + 8]
mov ecx, edx
shr ecx, 8
and ecx, 1
shl ecx, 8
mov edi, edx
xor edi, esi
xor ecx, esi
and ecx, 0x100
and edi, 0x100
xor edi, edx
xor esi, ecx
lea ecx, [eax + 0xc]
lea edx, [esp + 0x20]
mov dword [eax + 8], edi
mov dword [esp + 0x1c], esi
cmp ecx, edx
je 0x40def7
mov edx, dword [ecx]
mov dword [ecx], ebx
mov dword [esp + 0x20], edx
lea ecx, [eax + 0x10]
lea edx, [esp + 0x24]
cmp ecx, edx
je 0x40df0a
mov edx, dword [ecx]
mov dword [ecx], ebx
mov dword [esp + 0x24], edx
add eax, 0x14
lea ecx, [esp + 0x28]
cmp eax, ecx
je 0x40df1d
mov ecx, dword [eax]
mov dword [eax], ebx
mov dword [esp + 0x28], ecx
lea esi, [esp + 0x14]
call fcn.0046941b
mov ebp, 0x10
cmp dword [esp + 0x50], ebp
jb 0x40df3e
mov edx, dword [esp + 0x3c]
push edx
call fcn.0047d710
add esp, 4
mov esi, 8
mov byte [esp + 0x120], 5
mov dword [esp + 0x50], 0xf
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x3c], bl
cmp dword [esp + 0x6c], esi
jb 0x40df6e
mov eax, dword [esp + 0x58]
push eax
call fcn.0047d710
add esp, 4
mov eax, dword [esp + 0x30]
cmp eax, ebx
jne 0x40df9c
call fcn.0047db04
xor eax, eax
mov edi, dword [esp + 0x34]
cmp edi, dword [eax + 0x10]
jb 0x40df8b
call fcn.0047db04
mov eax, dword [edi]
add eax, 0x94
cmp dword [eax + 0x18], esi
jb 0x40dfa0
mov ecx, dword [eax + 4]
jmp 0x40dfa3
mov eax, dword [eax]
jmp 0x40df7d
lea ecx, [eax + 4]
xor edx, edx
mov eax, ecx
mov dword [esp + 0x6c], 7
mov dword [esp + 0x68], ebx
mov word [esp + 0x58], dx
lea esi, [eax + 2]
jmp 0x40dfc0
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0x40dfc0
sub eax, esi
sar eax, 1
push eax
push ecx
lea esi, [esp + 0x5c]
call fcn.004028e0
mov eax, esi
push eax
lea ecx, [esp + 0x3c]
push ecx
mov byte [esp + 0x128], 0x14
call fcn.004059b0
add esp, 8
mov byte [esp + 0x120], 0x15
mov edi, dword [eax + 0x14]
mov byte [esp + 0x1c], 4
mov esi, dword [esp + 0x1c]
or esi, 0x100
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
cmp dword [eax + 0x18], ebp
jb 0x40e026
mov eax, dword [eax + 4]
jmp 0x40e029
add eax, 4
push eax
call fcn.00468c9d
mov edi, eax
add esp, 4
mov dword [esp + 0x14], edi
push str.param
lea edx, [esp + 0x80]
push edx
mov ecx, 0x4a24ad
mov byte [esp + 0x128], 0x16
call fcn.0046a0e5
mov byte [esp + 0x120], 0x15
movsx ecx, byte [eax + 8]
mov dl, byte [esp + 0x1c]
xor ecx, esi
and ecx, 0xff
xor esi, ecx
lea ecx, [esp + 0x14]
mov byte [eax + 8], dl
cmp eax, ecx
je 0x40e092
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [eax], edi
mov edi, dword [esp + 0x18]
mov dword [eax + 4], edi
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
mov edx, dword [eax + 8]
mov ecx, edx
shr ecx, 8
and ecx, 1
shl ecx, 8
mov edi, edx
xor edi, esi
xor ecx, esi
and ecx, 0x100
and edi, 0x100
xor edi, edx
xor esi, ecx
lea ecx, [eax + 0xc]
lea edx, [esp + 0x20]
mov dword [eax + 8], edi
mov dword [esp + 0x1c], esi
cmp ecx, edx
je 0x40e0d0
mov edx, dword [ecx]
mov dword [ecx], ebx
mov dword [esp + 0x20], edx
lea ecx, [eax + 0x10]
lea edx, [esp + 0x24]
cmp ecx, edx
je 0x40e0e3
mov edx, dword [ecx]
mov dword [ecx], ebx
mov dword [esp + 0x24], edx
add eax, 0x14
lea ecx, [esp + 0x28]
cmp eax, ecx
je 0x40e0f6
mov ecx, dword [eax]
mov dword [eax], ebx
mov dword [esp + 0x28], ecx
lea esi, [esp + 0x14]
call fcn.0046941b
mov ebp, 0x10
cmp dword [esp + 0x50], ebp
jb 0x40e117
mov edx, dword [esp + 0x3c]
push edx
call fcn.0047d710
add esp, 4
mov esi, 8
mov byte [esp + 0x120], 5
mov dword [esp + 0x50], 0xf
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x3c], bl
cmp dword [esp + 0x6c], esi
jb 0x40e147
mov eax, dword [esp + 0x58]
push eax
call fcn.0047d710
add esp, 4
mov eax, dword [esp + 0x30]
cmp eax, ebx
jne 0x40e173
call fcn.0047db04
xor eax, eax
mov edi, dword [esp + 0x34]
cmp edi, dword [eax + 0x10]
jb 0x40e164
call fcn.0047db04
mov eax, dword [edi]
add eax, 0x24
cmp dword [eax + 0x18], esi
jb 0x40e177
mov ecx, dword [eax + 4]
jmp 0x40e17a
mov eax, dword [eax]
jmp 0x40e156
lea ecx, [eax + 4]
xor edx, edx
mov eax, ecx
mov dword [esp + 0x6c], 7
mov dword [esp + 0x68], ebx
mov word [esp + 0x58], dx
lea esi, [eax + 2]
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0x40e192
sub eax, esi
sar eax, 1
push eax
push ecx
lea esi, [esp + 0x5c]
call fcn.004028e0
mov eax, esi
push eax
lea ecx, [esp + 0x3c]
push ecx
mov byte [esp + 0x128], 0x17
call fcn.004059b0
add esp, 8
mov byte [esp + 0x120], 0x18
mov edi, dword [eax + 0x14]
mov byte [esp + 0x1c], 4
mov esi, dword [esp + 0x1c]
or esi, 0x100
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
cmp dword [eax + 0x18], ebp
jb 0x40e1f8
mov eax, dword [eax + 4]
jmp 0x40e1fb
add eax, 4
push eax
call fcn.00468c9d
mov ebp, eax
add esp, 4
mov dword [esp + 0x14], ebp
push str.btnName
lea edx, [esp + 0x80]
push edx
mov ecx, 0x4a24b7
mov byte [esp + 0x128], 0x19
call fcn.0046a0e5
mov byte [esp + 0x120], 0x18
movsx edi, byte [eax + 8]
mov cl, byte [esp + 0x1c]
mov edx, esi
xor edx, edi
and edx, 0xff
mov byte [eax + 8], cl
lea ecx, [esp + 0x14]
xor esi, edx
cmp eax, ecx
je 0x40e266
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov edi, dword [esp + 0x18]
mov dword [eax], ebp
mov dword [eax + 4], edi
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
mov edx, dword [eax + 8]
mov ecx, edx
shr ecx, 8
and ecx, 1
shl ecx, 8
mov edi, edx
xor edi, esi
xor ecx, esi
and ecx, 0x100
and edi, 0x100
xor edi, edx
xor esi, ecx
lea ecx, [eax + 0xc]
lea edx, [esp + 0x20]
mov dword [eax + 8], edi
mov dword [esp + 0x1c], esi
cmp ecx, edx
je 0x40e2a4
mov edx, dword [ecx]
mov dword [ecx], ebx
mov dword [esp + 0x20], edx
lea ecx, [eax + 0x10]
lea edx, [esp + 0x24]
cmp ecx, edx
je 0x40e2b7
mov edx, dword [ecx]
mov dword [ecx], ebx
mov dword [esp + 0x24], edx
add eax, 0x14
lea ecx, [esp + 0x28]
cmp eax, ecx
je 0x40e2ca
mov ecx, dword [eax]
mov dword [eax], ebx
mov dword [esp + 0x28], ecx
lea esi, [esp + 0x14]
call fcn.0046941b
cmp dword [esp + 0x50], 0x10
jb 0x40e2e7
mov edx, dword [esp + 0x3c]
push edx
call fcn.0047d710
add esp, 4
mov byte [esp + 0x120], 5
cmp dword [esp + 0x6c], 8
mov dword [esp + 0x50], 0xf
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x3c], bl
jb 0x40e313
mov eax, dword [esp + 0x58]
push eax
call fcn.0047d710
add esp, 4
lea ecx, [esp + 0x7c]
push ecx
lea edx, [esp + 0x18]
push edx
call fcn.00469282
mov byte [esp + 0x120], 0x1a
movsx eax, byte [esp + 0xb4]
cmp eax, 7
ja case.0x40e337.0
jmp dword [eax*4 + 0x40e62c]
mov eax, dword [esp + 0xac]
cmp dword [eax + 0x1c], ebx
je case.0x40e337.0
mov ecx, dword [eax + 0x18]
mov eax, dword [eax]
lea esi, [esp + 0x70]
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], ecx
call fcn.0046c847
mov eax, dword [esp + 0x70]
cmp eax, ebx
jne 0x40e383
call fcn.0047db04
xor eax, eax
mov esi, dword [esp + 0x74]
cmp esi, dword [eax + 0x18]
jne 0x40e37d
call fcn.0047db04
mov eax, dword [esi + 0x14]
inc eax
jmp 0x40e395
mov eax, dword [eax]
jmp 0x40e36f
mov eax, dword [esp + 0xac]
mov eax, dword [eax + 0x1c]
jmp 0x40e395
xor eax, eax
push eax
lea ecx, [esp + 0xb0]
push ecx
call fcn.00469e2e
mov byte [esp + 0x120], 5
mov dl, byte [esp + 0x1c]
movsx esi, byte [eax + 8]
mov byte [eax + 8], dl
mov ecx, dword [esp + 0x1c]
mov edx, ecx
xor edx, esi
and edx, 0xff
xor ecx, edx
mov dword [esp + 0x1c], ecx
lea ecx, [esp + 0x14]
cmp eax, ecx
je 0x40e3ec
mov esi, dword [esp + 0x14]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [eax], esi
mov esi, dword [esp + 0x18]
mov dword [eax + 4], esi
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
mov edx, dword [eax + 8]
mov esi, edx
xor esi, dword [esp + 0x1c]
mov ecx, edx
shr ecx, 8
and ecx, 1
and esi, 0x100
xor esi, edx
shl ecx, 8
mov dword [eax + 8], esi
mov edx, dword [esp + 0x1c]
xor ecx, edx
and ecx, 0x100
xor edx, ecx
mov dword [esp + 0x1c], edx
lea ecx, [eax + 0xc]
lea edx, [esp + 0x20]
cmp ecx, edx
je 0x40e434
mov esi, dword [esp + 0x20]
mov edx, dword [ecx]
mov dword [ecx], esi
mov dword [esp + 0x20], edx
lea ecx, [eax + 0x10]
lea edx, [esp + 0x24]
cmp ecx, edx
je 0x40e44b
mov esi, dword [esp + 0x24]
mov edx, dword [ecx]
mov dword [ecx], esi
mov dword [esp + 0x24], edx
add eax, 0x14
lea ecx, [esp + 0x28]
cmp eax, ecx
je 0x40e462
mov edx, dword [esp + 0x28]
mov ecx, dword [eax]
mov dword [eax], edx
mov dword [esp + 0x28], ecx
lea esi, [esp + 0x14]
call fcn.0046941b
lea esi, [esp + 0x7c]
mov byte [esp + 0x120], 4
call fcn.0046941b
lea esi, [esp + 0x94]
mov byte [esp + 0x120], 2
call fcn.0046941b
mov eax, dword [esp + 0x30]
cmp eax, ebx
jne 0x40e4bf
call fcn.0047db04
xor eax, eax
mov ecx, dword [esp + 0x34]
cmp ecx, dword [eax + 0x10]
jb 0x40e4ad
call fcn.0047db04
add dword [esp + 0x34], 4
mov esi, dword [esp + 0x78]
mov edi, dword [esp + 0x30]
jmp 0x40d570
mov eax, dword [eax]
jmp 0x40e49f
lea edx, [esp + 0xac]
push edx
lea ecx, [esp + 0x3c]
call fcn.0046a800
push eax
lea eax, [esp + 0xe0]
push eax
mov byte [esp + 0x128], 0x1b
call fcn.0047554e
add esp, 8
mov edi, 0x10
mov byte [esp + 0x120], 0x1d
cmp dword [esp + 0x50], edi
jb 0x40e50d
mov ecx, dword [esp + 0x3c]
push ecx
call fcn.0047d710
add esp, 4
lea edx, [esp + 0xf8]
mov ebp, 0xf
push edx
mov ecx, str.gxoneclimanual_tools.json
mov dword [esp + 0x54], ebp
mov dword [esp + 0x50], ebx
mov byte [esp + 0x40], bl
call fcn.004621f2
mov ecx, dword [esp + 0xe4]
add esp, 4
cmp dword [esp + 0xf4], edi
jae 0x40e54a
lea ecx, [esp + 0xe0]
mov eax, dword [esp + 0xfc]
mov esi, 8
cmp dword [esp + 0x110], esi
jae 0x40e566
lea eax, [esp + 0xfc]
mov edx, dword [esp + 0xf0]
push edx
push ecx
push eax
call fcn.0045d031
cmp dword [esp + 0x110], esi
jb 0x40e58e
mov eax, dword [esp + 0xfc]
push eax
call fcn.0047d710
add esp, 4
xor ecx, ecx
mov dword [esp + 0x110], 7
mov dword [esp + 0x10c], ebx
mov word [esp + 0xfc], cx
cmp dword [esp + 0xf4], edi
jb 0x40e5c3
mov edx, dword [esp + 0xe0]
push edx
call fcn.0047d710
add esp, 4
lea esi, [esp + 0xac]
mov dword [esp + 0xf4], ebp
mov dword [esp + 0xf0], ebx
mov byte [esp + 0xe0], bl
mov byte [esp + 0x120], 1
call fcn.0046941b
lea esi, [esp + 0xc4]
mov dword [esp + 0x120], 0xffffffff
call fcn.0046941b
mov ecx, dword [esp + 0x118]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x100]
xor ecx, esp
call fcn.0047d444
add esp, 0x110
ret