Function at 0x40e1d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42512d
mov eax, dword fs:[0]
push eax
sub esp, 0x64
mov eax, dword [0x434014]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x70], esi
mov ebx, dword [0x435b48]
mov dword [esi], 0
mov dword [ebp - 0x60], ebx
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x58]
mov edx, dword [ebx]
call fcn.004051a0
push eax
mov ecx, esi
call fcn.004041a0
mov edx, dword [ebp - 0x44]
cmp edx, 0x10
jb 0x40e270
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e266
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee63
push edx
push ecx
call fcn.00410227
add esp, 8
mov edx, dword [ebx + 0x24]
lea ecx, [ebp - 0x40]
call fcn.004051a0
push esi
mov edx, eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x58]
call fcn.00404360
add esp, 4
cmp dword [eax + 0x14], 0x10
jb 0x40e295
mov eax, dword [eax]
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov edx, dword [ebp - 0x44]
mov dword [esi + 0x18], eax
cmp edx, 0x10
jb 0x40e2d7
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e2cd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee68
push edx
push ecx
call fcn.00410227
add esp, 8
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
cmp edx, 0x10
jb 0x40e321
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e317
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee68
push edx
push ecx
call fcn.00410227
add esp, 8
mov edx, dword [ebx + 0x54]
lea ecx, [ebp - 0x40]
call fcn.004051a0
cmp dword [eax + 0x14], 0x10
jb 0x40e334
mov eax, dword [eax]
push eax
push dword [esi + 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [ebp - 0x2c]
mov dword [esi + 0x30], eax
cmp edx, 0x10
jb 0x40e375
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e36b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee6d
push edx
push ecx
call fcn.00410227
add esp, 8
mov edx, dword [ebx + 0x54]
lea ecx, [ebp - 0x28]
call fcn.004051a0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x28]
cmp dword [ebp - 0x14], 0x10
mov edx, dword [esi + 0x18]
cmovae ecx, dword [ebp - 0x28]
mov dword [ebp - 0x6c], ecx
test edx, edx
jne 0x40e3a0
xor edi, edi
jmp 0x40e448
mov eax, dword [edx + 0x3c]
mov edi, dword [eax + edx + 0x78]
add edi, edx
mov dword [ebp - 0x64], edi
cmp ecx, 0xffff
ja 0x40e3bf
mov eax, dword [edi + 0x1c]
movzx ecx, cx
jmp 0x40e440
mov ebx, dword [edi + 0x18]
mov edi, dword [edi + 0x20]
dec ebx
xor eax, eax
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x5c], eax
nop
lea edi, [eax + ebx]
mov eax, dword [ebp - 0x68]
shr edi, 1
lea eax, [eax + edi*4]
mov eax, dword [eax + edx]
add eax, edx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40e400
test dl, dl
je 0x40e3fc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40e400
add eax, 2
add ecx, 2
test dl, dl
jne 0x40e3e0
xor eax, eax
jmp 0x40e405
sbb eax, eax
or eax, 1
test eax, eax
jns 0x40e411
lea eax, [edi + 1]
mov dword [ebp - 0x5c], eax
jmp 0x40e419
jle 0x40e42a
mov eax, dword [ebp - 0x5c]
lea ebx, [edi - 1]
mov edx, dword [esi + 0x18]
mov ecx, dword [ebp - 0x6c]
cmp eax, ebx
jbe 0x40e3d0
mov ebx, dword [ebp - 0x60]
xor edi, edi
jmp 0x40e448
mov ebx, dword [ebp - 0x64]
mov edx, dword [esi + 0x18]
mov eax, dword [ebx + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [ebx + 0x1c]
mov ebx, dword [ebp - 0x60]
lea eax, [eax + ecx*4]
mov edi, dword [eax + edx]
add edi, edx
mov edx, dword [ebx + 0x4c]
lea ecx, [ebp - 0x40]
call fcn.004051a0
mov byte [ebp - 4], 3
cmp dword [eax + 0x14], 0x10
jb 0x40e45f
mov eax, dword [eax]
push eax
push dword [esi + 0x18]
call edi
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2c]
mov dword [esi + 0x2c], eax
cmp edx, 0x10
jb 0x40e4a0
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e496
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee72
push edx
push ecx
call fcn.00410227
add esp, 8
mov edx, dword [ebx + 0x28]
lea ecx, [ebp - 0x40]
call fcn.004051a0
mov byte [ebp - 4], 4
cmp dword [eax + 0x14], 0x10
jb 0x40e4b7
mov eax, dword [eax]
push eax
push dword [esi + 0x18]
call edi
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2c]
mov dword [esi + 0x34], eax
cmp edx, 0x10
jb 0x40e4f8
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e4ee
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee77
push edx
push ecx
call fcn.00410227
add esp, 8
mov edx, dword [ebx + 0x2c]
lea ecx, [ebp - 0x40]
call fcn.004051a0
mov byte [ebp - 4], 5
cmp dword [eax + 0x14], 0x10
jb 0x40e50f
mov eax, dword [eax]
push eax
push dword [esi + 0x18]
call edi
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2c]
mov dword [esi + 0x38], eax
cmp edx, 0x10
jb 0x40e550
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e546
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee7c
push edx
push ecx
call fcn.00410227
add esp, 8
mov edx, dword [ebx + 0x30]
lea ecx, [ebp - 0x40]
call fcn.004051a0
mov byte [ebp - 4], 6
cmp dword [eax + 0x14], 0x10
jb 0x40e567
mov eax, dword [eax]
push eax
push dword [esi + 0x18]
call edi
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2c]
mov dword [esi + 0x40], eax
cmp edx, 0x10
jb 0x40e5a8
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e59e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee81
push edx
push ecx
call fcn.00410227
add esp, 8
mov edx, dword [ebx + 0x34]
lea ecx, [ebp - 0x40]
call fcn.004051a0
mov byte [ebp - 4], 7
cmp dword [eax + 0x14], 0x10
jb 0x40e5bf
mov eax, dword [eax]
push eax
push dword [esi + 0x18]
call edi
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2c]
mov dword [esi + 0x3c], eax
cmp edx, 0x10
jb 0x40e600
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e5f6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee86
push edx
push ecx
call fcn.00410227
add esp, 8
mov edx, dword [ebx + 0x38]
lea ecx, [ebp - 0x40]
call fcn.004051a0
mov byte [ebp - 4], 8
cmp dword [eax + 0x14], 0x10
jb 0x40e617
mov eax, dword [eax]
push eax
push dword [esi + 0x18]
call edi
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2c]
mov dword [esi + 0x44], eax
cmp edx, 0x10
jb 0x40e658
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e64e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee8b
push edx
push ecx
call fcn.00410227
add esp, 8
mov edx, dword [ebx + 0x3c]
lea ecx, [ebp - 0x40]
call fcn.004051a0
mov byte [ebp - 4], 9
cmp dword [eax + 0x14], 0x10
jb 0x40e66f
mov eax, dword [eax]
push eax
push dword [esi + 0x18]
call edi
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2c]
mov dword [esi + 0x48], eax
cmp edx, 0x10
jb 0x40e6b0
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e6a6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee90
push edx
push ecx
call fcn.00410227
add esp, 8
mov edx, dword [ebx + 0x44]
lea ecx, [ebp - 0x40]
call fcn.004051a0
mov byte [ebp - 4], 0xa
cmp dword [eax + 0x14], 0x10
jb 0x40e6c7
mov eax, dword [eax]
push eax
push dword [esi + 0x18]
call edi
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2c]
mov dword [esi + 0x4c], eax
cmp edx, 0x10
jb 0x40e708
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e6fe
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee95
push edx
push ecx
call fcn.00410227
add esp, 8
mov edx, dword [ebx + 0x48]
lea ecx, [ebp - 0x40]
call fcn.004051a0
mov byte [ebp - 4], 0xb
cmp dword [eax + 0x14], 0x10
jb 0x40e71f
mov eax, dword [eax]
push eax
push dword [esi + 0x18]
call edi
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2c]
mov dword [esi + 0x50], eax
cmp edx, 0x10
jb 0x40e760
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e756
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee9a
push edx
push ecx
call fcn.00410227
add esp, 8
mov edx, dword [ebx + 0x50]
lea ecx, [ebp - 0x40]
call fcn.004051a0
mov byte [ebp - 4], 0xc
cmp dword [eax + 0x14], 0x10
jb 0x40e777
mov eax, dword [eax]
push eax
push dword [esi + 0x18]
call edi
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2c]
mov dword [esi + 0x54], eax
cmp edx, 0x10
jb 0x40e7b8
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e7ae
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee9f
push edx
push ecx
call fcn.00410227
add esp, 8
mov edx, dword [ebx + 0x6c]
lea ecx, [ebp - 0x40]
call fcn.004051a0
mov byte [ebp - 4], 0xd
cmp dword [eax + 0x14], 0x10
jb 0x40e7cf
mov eax, dword [eax]
push eax
push dword [esi + 0x18]
call edi
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2c]
mov dword [esi + 0x58], eax
cmp edx, 0x10
jb 0x40e810
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e806
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40eea4
push edx
push ecx
call fcn.00410227
add esp, 8
mov edx, dword [ebx + 0x70]
lea ecx, [ebp - 0x40]
call fcn.004051a0
push esi
mov edx, eax
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x58]
call fcn.00404360
add esp, 4
mov byte [ebp - 4], 0xf
cmp dword [eax + 0x14], 0x10
jb 0x40e839
mov eax, dword [eax]
push eax
mov eax, dword [esi + 0x2c]
call eax
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x44]
mov dword [esi + 0x1c], eax
cmp edx, 0x10
jb 0x40e87a
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e870
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40eea9
push edx
push ecx
call fcn.00410227
add esp, 8
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
cmp edx, 0x10
jb 0x40e8c4
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e8ba
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40eea9
push edx
push ecx
call fcn.00410227
add esp, 8
mov edx, dword [ebx + 0x74]
lea ecx, [ebp - 0x40]
call fcn.004051a0
mov byte [ebp - 4], 0x10
cmp dword [eax + 0x14], 0x10
jb 0x40e8db
mov eax, dword [eax]
push eax
push dword [esi + 0x1c]
call edi
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2c]
mov dword [esi + 0x5c], eax
cmp edx, 0x10
jb 0x40e91c
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e912
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40eeae
push edx
push ecx
call fcn.00410227
add esp, 8
mov edx, dword [ebx + 0x78]
lea ecx, [ebp - 0x40]
call fcn.004051a0
push esi
mov edx, eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x58]
call fcn.00404360
add esp, 4
mov byte [ebp - 4], 0x12
cmp dword [eax + 0x14], 0x10
jb 0x40e945
mov eax, dword [eax]
push eax
mov eax, dword [esi + 0x2c]
call eax
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x44]
mov dword [esi + 0x20], eax
cmp edx, 0x10
jb 0x40e986
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e97c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40eeb3
push edx
push ecx
call fcn.00410227
add esp, 8
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
cmp edx, 0x10
jb 0x40e9d0
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e9c6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40eeb3
push edx
push ecx
call fcn.00410227
add esp, 8
mov edx, dword [ebx + 0x7c]
lea ecx, [ebp - 0x40]
call fcn.004051a0
mov byte [ebp - 4], 0x13
cmp dword [eax + 0x14], 0x10
jb 0x40e9e7
mov eax, dword [eax]
push eax
push dword [esi + 0x20]
call edi
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2c]
mov dword [esi + 0x60], eax
cmp edx, 0x10
jb 0x40ea28
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ea1e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40eeb8
push edx
push ecx
call fcn.00410227
add esp, 8
mov edx, dword [ebx + 0x80]
lea ecx, [ebp - 0x40]
call fcn.004051a0
mov byte [ebp - 4], 0x14
cmp dword [eax + 0x14], 0x10
jb 0x40ea42
mov eax, dword [eax]
push eax
push dword [esi + 0x20]
call edi
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2c]
mov dword [esi + 0x64], eax
cmp edx, 0x10
jb 0x40ea83
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ea79
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40eebd
push edx
push ecx
call fcn.00410227
add esp, 8
mov edx, dword [ebx + 0x84]
lea ecx, [ebp - 0x40]
call fcn.004051a0
mov byte [ebp - 4], 0x15
cmp dword [eax + 0x14], 0x10
jb 0x40ea9d
mov eax, dword [eax]
push eax
push dword [esi + 0x20]
call edi
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2c]
mov dword [esi + 0x68], eax
cmp edx, 0x10
jb 0x40eade
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ead4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40eec2
push edx
push ecx
call fcn.00410227
add esp, 8
mov edx, dword [ebx + 0x88]
lea ecx, [ebp - 0x40]
call fcn.004051a0
push esi
mov edx, eax
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x58]
call fcn.00404360
add esp, 4
mov byte [ebp - 4], 0x17
cmp dword [eax + 0x14], 0x10
jb 0x40eb0a
mov eax, dword [eax]
push eax
mov eax, dword [esi + 0x2c]
call eax
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x44]
mov dword [esi + 0x24], eax
cmp edx, 0x10
jb 0x40eb4b
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40eb41
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40eec7
push edx
push ecx
call fcn.00410227
add esp, 8
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
cmp edx, 0x10
jb 0x40eb95
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40eb8b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40eec7
push edx
push ecx
call fcn.00410227
add esp, 8
mov edx, dword [ebx + 0x8c]
lea ecx, [ebp - 0x40]
call fcn.004051a0
mov byte [ebp - 4], 0x18
cmp dword [eax + 0x14], 0x10
jb 0x40ebaf
mov eax, dword [eax]
push eax
push dword [esi + 0x24]
call edi
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2c]
mov dword [esi + 0x6c], eax
cmp edx, 0x10
jb 0x40ebf0
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ebe6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40eecc
push edx
push ecx
call fcn.00410227
add esp, 8
mov edx, dword [ebx + 0x90]
lea ecx, [ebp - 0x40]
call fcn.004051a0
mov byte [ebp - 4], 0x19
cmp dword [eax + 0x14], 0x10
jb 0x40ec0a
mov eax, dword [eax]
push eax
push dword [esi + 0x24]
call edi
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2c]
mov dword [esi + 0x70], eax
cmp edx, 0x10
jb 0x40ec4b
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ec41
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40eed1
push edx
push ecx
call fcn.00410227
add esp, 8
mov edx, dword [ebx + 0x94]
lea ecx, [ebp - 0x40]
call fcn.004051a0
push esi
mov edx, eax
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x58]
call fcn.00404360
add esp, 4
mov byte [ebp - 4], 0x1b
cmp dword [eax + 0x14], 0x10
jb 0x40ec77
mov eax, dword [eax]
push eax
mov eax, dword [esi + 0x2c]
call eax
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x44]
mov dword [esi + 0x28], eax
cmp edx, 0x10
jb 0x40ecb8
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ecae
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40eed6
push edx
push ecx
call fcn.00410227
add esp, 8
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
cmp edx, 0x10
jb 0x40ed02
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ecf8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40eed6
push edx
push ecx
call fcn.00410227
add esp, 8
mov edx, dword [ebx + 0x98]
lea ecx, [ebp - 0x40]
call fcn.004051a0
mov byte [ebp - 4], 0x1c
cmp dword [eax + 0x14], 0x10
jb 0x40ed1c
mov eax, dword [eax]
push eax
push dword [esi + 0x28]
call edi
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2c]
mov dword [esi + 0x74], eax
cmp edx, 0x10
jb 0x40ed5d
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ed53
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40eedb
push edx
push ecx
call fcn.00410227
add esp, 8
mov edx, dword [ebx + 0x9c]
lea ecx, [ebp - 0x40]
call fcn.004051a0
mov byte [ebp - 4], 0x1d
cmp dword [eax + 0x14], 0x10
jb 0x40ed77
mov eax, dword [eax]
push eax
push dword [esi + 0x28]
call edi
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2c]
mov dword [esi + 0x78], eax
cmp edx, 0x10
jb 0x40edb8
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40edae
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40eee0
push edx
push ecx
call fcn.00410227
add esp, 8
mov edx, dword [ebx + 0xa0]
lea ecx, [ebp - 0x40]
call fcn.004051a0
mov byte [ebp - 4], 0x1e
cmp dword [eax + 0x14], 0x10
jb 0x40edd2
mov eax, dword [eax]
push eax
push dword [esi + 0x28]
call edi
mov edx, dword [ebp - 0x2c]
mov dword [esi + 0x7c], eax
cmp edx, 0x10
jb 0x40ee0f
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ee05
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40eee5
push edx
push ecx
call fcn.00410227
add esp, 8
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x40ee43
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ee39
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40eeea
push edx
push ecx
call fcn.00410227
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0040ff98
mov esp, ebp
pop ebp
ret 4
call fcn.004141df
call fcn.004141df
call fcn.004141df
call fcn.004141df
call fcn.004141df
call fcn.004141df
call fcn.004141df
call fcn.004141df
call fcn.004141df
call fcn.004141df
call fcn.004141df
call fcn.004141df
call fcn.004141df
call fcn.004141df
call fcn.004141df
call fcn.004141df
call fcn.004141df
call fcn.004141df
call fcn.004141df
call fcn.004141df
call fcn.004141df
call fcn.004141df
call fcn.004141df
call fcn.004141df
call fcn.004141df
call fcn.004141df
call fcn.004141df
call fcn.004141df
int3