Function at 0x406421
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x4167e5
call fcn.004116ec
sub esp, 0x120
push ebx
push esi
lea eax, [ebp - 0x40]
push edi
mov esi, ecx
push eax
mov dword [ebp - 0x14], esi
call fcn.00404d43
xor ebx, ebx
cmp eax, ebx
jne 0x4071b8
cmp dword [ebp - 0x40], 2
mov edi, dword [ebp + 8]
jne 0x406480
cmp dword [ebp - 0x3c], ebx
jne 0x406480
lea eax, [edi + 0x78]
mov ecx, esi
push eax
call fcn.00405097
cmp eax, ebx
jne 0x4071b8
lea eax, [ebp - 0x40]
mov ecx, esi
push eax
call fcn.00404d43
cmp eax, ebx
jne 0x4071b8
lea ecx, [ebp - 0x38]
call fcn.00402e66
mov esi, 0x4183c0
mov dword [ebp - 0x38], esi
cmp dword [ebp - 0x40], 3
mov dword [ebp - 4], ebx
jne 0x406509
cmp dword [ebp - 0x3c], ebx
jne 0x406509
lea ecx, [ebp - 0x38]
lea eax, [edi + 0x98]
push ecx
mov ecx, dword [ebp - 0x14]
push eax
push dword [edi + 0x8c]
push dword [edi + 0x88]
call fcn.00405fdf
cmp eax, ebx
je 0x4064d2
mov dword [ebp - 0x38], esi
mov dword [ebp - 4], 1
mov ebx, eax
jmp 0x406726
mov ecx, dword [edi + 0x88]
mov edx, dword [edi + 0x8c]
add dword [edi + 0x98], ecx
lea eax, [edi + 0x98]
mov ecx, dword [ebp - 0x14]
adc dword [eax + 4], edx
lea eax, [ebp - 0x40]
push eax
call fcn.00404d43
cmp eax, ebx
je 0x406509
mov dword [ebp - 0x38], esi
mov dword [ebp - 4], 2
jmp 0x4064cb
push 8
lea ecx, [ebp - 0x7c]
call fcn.00402685
mov dword [ebp - 0x7c], 0x418378
push 1
lea ecx, [ebp - 0x68]
call fcn.00402685
mov dword [ebp - 0x68], 0x4182fc
push 4
lea ecx, [ebp - 0x54]
call fcn.00402685
mov dword [ebp - 0x54], 0x418240
cmp dword [ebp - 0x40], 4
mov byte [ebp - 4], 5
jne 0x406626
cmp dword [ebp - 0x3c], ebx
jne 0x406626
lea ecx, [ebp - 0x54]
lea eax, [edi + 0x90]
push ecx
lea ecx, [ebp - 0x68]
push ecx
lea ecx, [ebp - 0x7c]
push ecx
lea ecx, [edi + 0x50]
push ecx
lea ecx, [edi + 0x3c]
push ecx
lea ecx, [edi + 0x28]
push ecx
lea ecx, [edi + 0x14]
push ecx
mov ecx, dword [ebp - 0x14]
push edi
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.00405ca0
cmp eax, ebx
mov dword [ebp + 8], eax
je 0x4065bf
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 4
call fcn.0040bd11
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 3
call fcn.0040bd11
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], bl
call fcn.0040bd11
mov dword [ebp - 0x38], esi
mov ebx, dword [ebp + 8]
mov dword [ebp - 4], 6
jmp 0x406726
mov ecx, dword [edi + 0x88]
mov edx, dword [edi + 0x8c]
add dword [edi + 0x90], ecx
lea eax, [edi + 0x90]
mov ecx, dword [ebp - 0x14]
adc dword [eax + 4], edx
lea eax, [ebp - 0x40]
push eax
call fcn.00404d43
cmp eax, ebx
mov dword [ebp + 8], eax
je 0x40667c
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 4
call fcn.0040bd11
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 3
call fcn.0040bd11
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], bl
call fcn.0040bd11
mov dword [ebp - 0x38], esi
mov ebx, dword [ebp + 8]
mov dword [ebp - 4], 7
jmp 0x406726
cmp dword [edi + 0x44], ebx
mov dword [ebp + 8], ebx
jle 0x40667c
push ebx
push 1
lea ecx, [edi + 0x50]
call fcn.004077da
mov eax, dword [edi + 0x48]
mov ecx, dword [ebp + 8]
mov ecx, dword [eax + ecx*4]
mov dword [ebp - 0x10], ecx
call fcn.0040387b
push edx
push eax
lea ecx, [ebp - 0x7c]
call fcn.004077da
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x68]
mov al, byte [eax + 0x50]
push eax
call fcn.004039fe
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x54]
push dword [eax + 0x54]
call fcn.00408e27
inc dword [ebp + 8]
mov eax, dword [ebp + 8]
cmp eax, dword [edi + 0x44]
jl 0x40662e
lea ecx, [edi + 0x64]
call fcn.0040bd21
mov eax, dword [ebp - 0x40]
or eax, dword [ebp - 0x3c]
jne 0x4066bb
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 4
call fcn.0040bd11
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 3
call fcn.0040bd11
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], bl
call fcn.0040bd11
mov dword [ebp - 0x38], esi
mov dword [ebp - 4], 8
jmp 0x406726
cmp dword [ebp - 0x40], 5
jne 0x4066c6
cmp dword [ebp - 0x3c], ebx
je 0x4066e3
push 1
lea ecx, [ebp - 0x10]
call fcn.00404caf
mov eax, dword [eax]
push 0x419630
mov dword [ebp + 8], eax
lea eax, [ebp + 8]
push eax
call fcn.0041170b
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x24]
push eax
call fcn.00404d43
cmp eax, ebx
mov dword [ebp + 8], eax
je 0x406741
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 4
call fcn.0040bd11
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 3
call fcn.0040bd11
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], bl
call fcn.0040bd11
mov dword [ebp - 0x38], esi
mov ebx, dword [ebp + 8]
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x38]
call fcn.0040bd21
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x38]
call fcn.0040bd11
mov eax, ebx
jmp 0x4071b8
push dword [ebp - 0x24]
lea ecx, [edi + 0x64]
call fcn.0040bd7a
cmp dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
jb 0x40679f
ja 0x40675e
cmp dword [ebp - 0x24], ebx
jbe 0x40679f
lea ecx, [ebp - 0x12c]
call fcn.004071c9
push eax
lea ecx, [edi + 0x64]
mov byte [ebp - 4], 0xa
call fcn.00407876
push dword [ebp - 0x104]
mov byte [ebp - 4], 5
call fcn.004112fa
add dword [ebp - 0x1c], 1
pop ecx
adc dword [ebp - 0x18], ebx
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x20]
jb 0x40675e
ja 0x40679f
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x24]
jb 0x40675e
push ebx
lea ecx, [edi + 0xa0]
push 9
call fcn.004077da
cmp dword [edi + 8], ebx
je 0x4067c0
push ebx
push 6
lea ecx, [edi + 0xa0]
call fcn.004077da
cmp dword [ebp - 0x20], ebx
ja 0x4067ca
cmp dword [ebp - 0x24], ebx
jbe 0x4067dd
cmp dword [ebp - 0x4c], ebx
je 0x4067dd
push ebx
push 0xa
lea ecx, [edi + 0xa0]
call fcn.004077da
push 1
lea ecx, [ebp - 0x90]
call fcn.00402685
mov dword [ebp - 0x90], 0x4182fc
push dword [ebp - 0x24]
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0xb
call fcn.0040bd7a
cmp dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
jb 0x40683d
ja 0x406818
cmp dword [ebp - 0x24], ebx
jbe 0x40683d
push ebx
lea ecx, [ebp - 0x90]
call fcn.004039fe
add dword [ebp - 0x1c], 1
adc dword [ebp - 0x18], ebx
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x20]
jb 0x406818
ja 0x40683d
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x24]
jb 0x406818
push 1
lea ecx, [ebp - 0xac]
call fcn.00402685
mov dword [ebp - 0xac], 0x4182fc
push 1
lea ecx, [ebp - 0xc0]
call fcn.00402685
mov dword [ebp - 0xc0], 0x4182fc
mov byte [ebp - 4], 0xd
mov dword [ebp + 8], ebx
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x98]
push eax
call fcn.00404d43
cmp eax, ebx
mov dword [ebp - 0x10], eax
jne 0x406b7e
mov eax, dword [ebp - 0x98]
or eax, dword [ebp - 0x94]
je 0x40708a
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0xec]
push eax
call fcn.00404d43
cmp eax, ebx
mov dword [ebp - 0x10], eax
jne 0x406be0
push dword [ebp - 0x94]
lea ecx, [edi + 0xa0]
push dword [ebp - 0x98]
call fcn.004077da
cmp dword [ebp - 0x94], ebx
mov eax, dword [ebp - 0x98]
ja 0x406b4f
jb 0x4068ec
cmp eax, 0x15
ja 0x406b4f
cmp eax, 0xe
je 0x406ac6
cmp eax, 0xf
je 0x406aa4
cmp eax, 0x10
je 0x406a82
cmp eax, 0x11
je 0x406a30
jbe 0x406b4f
cmp eax, 0x14
jbe 0x406a09
cmp eax, 0x15
jne 0x406b4f
push 1
lea ecx, [ebp - 0xe4]
call fcn.00402685
mov dword [ebp - 0xe4], 0x4182fc
mov eax, dword [edi + 0x6c]
lea ecx, [ebp - 0xe4]
push ecx
mov ecx, dword [ebp - 0x14]
push eax
mov byte [ebp - 4], 0x13
call fcn.00405e31
cmp eax, ebx
mov dword [ebp - 0x10], eax
jne 0x406c42
mov byte [ebp - 0xcc], bl
lea eax, [ebp - 0x38]
lea ecx, [ebp - 0xd0]
push eax
mov byte [ebp - 4], 0x15
push dword [ebp - 0x14]
call fcn.00404c3a
cmp eax, ebx
mov dword [ebp - 0x10], eax
jne 0x406cb3
xor ecx, ecx
cmp dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x18], ebx
jb 0x4069e6
ja 0x40699c
cmp dword [ebp - 0x24], ebx
jbe 0x4069e6
mov eax, dword [edi + 0x70]
mov edx, dword [ebp - 0xd8]
mov eax, dword [eax + ecx*4]
mov dl, byte [edx + ecx]
cmp dl, bl
mov byte [eax + 0x38], dl
je 0x4069ce
add eax, 0x20
push 4
push eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x18]
call fcn.00404dd0
test al, al
je 0x406d33
mov ecx, dword [ebp - 0x1c]
add ecx, 1
adc dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x20]
jb 0x40699c
ja 0x4069e6
cmp ecx, dword [ebp - 0x24]
jb 0x40699c
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 0x13
call fcn.00404b76
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 0xd
call fcn.0040bd11
jmp 0x406872
push dword [ebp - 0x94]
mov ecx, dword [ebp - 0x14]
push eax
lea eax, [edi + 0x64]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.00405e85
cmp eax, ebx
mov dword [ebp - 0x10], eax
jne 0x406db5
jmp 0x406872
mov byte [ebp - 0xc4], bl
lea eax, [ebp - 0x38]
lea ecx, [ebp - 0xc8]
push eax
mov byte [ebp - 4], 0x10
push dword [ebp - 0x14]
call fcn.00404c3a
cmp eax, ebx
mov dword [ebp - 0x10], eax
jne 0x406e17
mov ecx, dword [ebp - 0x14]
lea eax, [edi + 0x64]
push eax
call fcn.00405d21
cmp eax, ebx
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xc8]
jne 0x406e88
call fcn.00404b76
jmp 0x406872
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0xc0]
push eax
push dword [ebp + 8]
call fcn.00405dcb
cmp eax, ebx
mov dword [ebp - 0x10], eax
jne 0x406eef
jmp 0x406872
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0xac]
push eax
push dword [ebp + 8]
call fcn.00405dcb
cmp eax, ebx
mov dword [ebp - 0x10], eax
jne 0x406f51
jmp 0x406872
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x24]
call fcn.00405dcb
cmp eax, ebx
mov dword [ebp - 0x10], eax
jne 0x406fb3
mov ecx, dword [ebp - 0x88]
xor eax, eax
cmp ecx, ebx
jbe 0x406b02
mov edx, dword [ebp - 0x84]
cmp byte [edx + eax], bl
je 0x406afd
inc dword [ebp + 8]
inc eax
cmp eax, ecx
jb 0x406aef
push dword [ebp + 8]
lea ecx, [ebp - 0xac]
call fcn.0040bd7a
push dword [ebp + 8]
lea ecx, [ebp - 0xc0]
call fcn.0040bd7a
cmp dword [ebp + 8], ebx
jbe 0x406872
mov eax, dword [ebp + 8]
mov dword [ebp - 0x10], eax
push ebx
lea ecx, [ebp - 0xac]
call fcn.004039fe
push ebx
lea ecx, [ebp - 0xc0]
call fcn.004039fe
dec dword [ebp - 0x10]
jne 0x406b2d
jmp 0x406872
lea ecx, [edi + 0xa0]
call fcn.0040bd29
push dword [ebp - 0xe8]
mov ecx, dword [ebp - 0x14]
push dword [ebp - 0xec]
call fcn.00405030
cmp eax, ebx
mov dword [ebp - 0x10], eax
jne 0x407012
jmp 0x406872
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xc
call fcn.0040bd11
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0xb
call fcn.0040bd11
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 5
call fcn.0040bd11
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 4
call fcn.0040bd11
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 3
call fcn.0040bd11
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], bl
call fcn.0040bd11
mov dword [ebp - 0x38], esi
mov esi, dword [ebp - 0x10]
mov dword [ebp - 4], 0xe
jmp 0x40706f
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xc
call fcn.0040bd11
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0xb
call fcn.0040bd11
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 5
call fcn.0040bd11
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 4
call fcn.0040bd11
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 3
call fcn.0040bd11
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], bl
call fcn.0040bd11
mov dword [ebp - 0x38], esi
mov esi, dword [ebp - 0x10]
mov dword [ebp - 4], 0xf
jmp 0x40706f
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 0xd
call fcn.0040bd11
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xc
call fcn.0040bd11
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0xb
call fcn.0040bd11
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 5
call fcn.0040bd11
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 4
call fcn.0040bd11
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 3
call fcn.0040bd11
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], bl
call fcn.0040bd11
mov dword [ebp - 0x38], esi
mov esi, dword [ebp - 0x10]
mov dword [ebp - 4], 0x14
jmp 0x40706f
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 0x13
call fcn.00404b76
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 0xd
call fcn.0040bd11
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xc
call fcn.0040bd11
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0xb
call fcn.0040bd11
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 5
call fcn.0040bd11
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 4
call fcn.0040bd11
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 3
call fcn.0040bd11
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], bl
call fcn.0040bd11
mov dword [ebp - 0x38], esi
mov esi, dword [ebp - 0x10]
mov dword [ebp - 4], 0x16
jmp 0x40706f
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 0x13
call fcn.00404b76
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 0xd
call fcn.0040bd11
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xc
call fcn.0040bd11
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0xb
call fcn.0040bd11
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 5
call fcn.0040bd11
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 4
call fcn.0040bd11
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 3
call fcn.0040bd11
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], bl
call fcn.0040bd11
mov dword [ebp - 0x38], esi
mov dword [ebp - 4], 0x17
mov esi, 0x80004005
jmp 0x40706f
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xc
call fcn.0040bd11
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0xb
call fcn.0040bd11
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 5
call fcn.0040bd11
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 4
call fcn.0040bd11
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 3
call fcn.0040bd11
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], bl
call fcn.0040bd11
mov dword [ebp - 0x38], esi
mov esi, dword [ebp - 0x10]
mov dword [ebp - 4], 0x1b
jmp 0x40706f
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0xd
call fcn.00404b76
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xc
call fcn.0040bd11
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0xb
call fcn.0040bd11
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 5
call fcn.0040bd11
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 4
call fcn.0040bd11
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 3
call fcn.0040bd11
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], bl
call fcn.0040bd11
mov dword [ebp - 0x38], esi
mov esi, dword [ebp - 0x10]
mov dword [ebp - 4], 0x11
jmp 0x40706f
call fcn.00404b76
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xc
call fcn.0040bd11
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0xb
call fcn.0040bd11
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 5
call fcn.0040bd11
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 4
call fcn.0040bd11
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 3
call fcn.0040bd11
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], bl
call fcn.0040bd11
mov dword [ebp - 0x38], esi
mov esi, dword [ebp - 0x10]
mov dword [ebp - 4], 0x12
jmp 0x40706f
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xc
call fcn.0040bd11
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0xb
call fcn.0040bd11
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 5
call fcn.0040bd11
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 4
call fcn.0040bd11
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 3
call fcn.0040bd11
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], bl
call fcn.0040bd11
mov dword [ebp - 0x38], esi
mov esi, dword [ebp - 0x10]
mov dword [ebp - 4], 0x1a
jmp 0x40706f
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xc
call fcn.0040bd11
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0xb
call fcn.0040bd11
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 5
call fcn.0040bd11
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 4
call fcn.0040bd11
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 3
call fcn.0040bd11
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], bl
call fcn.0040bd11
mov dword [ebp - 0x38], esi
mov esi, dword [ebp - 0x10]
mov dword [ebp - 4], 0x19
jmp 0x40706f
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xc
call fcn.0040bd11
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0xb
call fcn.0040bd11
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 5
call fcn.0040bd11
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 4
call fcn.0040bd11
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 3
call fcn.0040bd11
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], bl
call fcn.0040bd11
mov dword [ebp - 0x38], esi
mov esi, dword [ebp - 0x10]
mov dword [ebp - 4], 0x18
jmp 0x40706f
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xc
call fcn.0040bd11
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0xb
call fcn.0040bd11
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 5
call fcn.0040bd11
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 4
call fcn.0040bd11
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 3
call fcn.0040bd11
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], bl
call fcn.0040bd11
mov dword [ebp - 0x38], esi
mov esi, dword [ebp - 0x10]
mov dword [ebp - 4], 0x1c
lea ecx, [ebp - 0x38]
call fcn.0040bd21
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x38]
call fcn.0040bd11
mov eax, esi
jmp 0x4071b8
xor ecx, ecx
cmp dword [ebp - 0x20], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp + 8], ebx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x18], ebx
jb 0x407148
ja 0x4070ac
cmp dword [ebp - 0x24], ebx
jbe 0x407148
mov edx, dword [ebp - 0x84]
mov eax, dword [edi + 0x70]
cmp byte [edx + ecx], bl
mov eax, dword [eax + ecx*4]
sete cl
cmp cl, bl
mov byte [eax + 0x34], cl
je 0x4070fa
mov edx, dword [ebp + 8]
mov byte [eax + 0x35], bl
mov byte [eax + 0x36], bl
mov ecx, dword [ebp - 0x70]
lea ecx, [ecx + edx*8]
mov edx, dword [ecx]
mov dword [eax + 0x18], edx
mov ecx, dword [ecx + 4]
mov dword [eax + 0x1c], ecx
mov edx, dword [ebp - 0x48]
mov ecx, dword [ebp + 8]
mov edx, dword [edx + ecx*4]
mov dword [eax + 0x24], edx
mov edx, dword [ebp - 0x5c]
mov dl, byte [edx + ecx]
inc ecx
mov byte [eax + 0x37], dl
mov dword [ebp + 8], ecx
jmp 0x407125
mov edx, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x10]
cmp byte [edx + ecx], bl
sete dl
mov byte [eax + 0x35], dl
mov edx, dword [ebp - 0xb4]
mov dl, byte [edx + ecx]
inc ecx
mov dword [eax + 0x18], ebx
mov byte [eax + 0x36], dl
mov dword [ebp - 0x10], ecx
mov dword [eax + 0x1c], ebx
mov byte [eax + 0x37], bl
mov ecx, dword [ebp - 0x1c]
add ecx, 1
adc dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x20]
jb 0x4070ac
ja 0x407148
cmp ecx, dword [ebp - 0x24]
jb 0x4070ac
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xc
call fcn.0040bd11
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0xb
call fcn.0040bd11
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 5
call fcn.0040bd11
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 4
call fcn.0040bd11
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 3
call fcn.0040bd11
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], bl
call fcn.0040bd11
mov dword [ebp - 0x38], esi
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], 0x1d
call fcn.0040bd21
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x38]
call fcn.0040bd11
xor eax, eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 4