Function at 0x40d95d
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
lea ebp, [esp - 0x39c]
sub esp, 0x39c
push 0xffffffffffffffff
push 0x431324
mov eax, dword fs:[0]
push eax
sub esp, 0xe4
mov eax, dword [0x43f780]
xor eax, ebp
mov dword [ebp + 0x398], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
or dword [ebp - 0x38], 0xffffffff
xor ebx, ebx
or dword [ebp - 0x8c], 0xffffffff
mov esi, ebx
or dword [ebp - 0x54], 0xffffffff
mov eax, ebx
mov ecx, ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x80], ebx
lea edi, [ebp + 0x340]
mov dword [ebp - 4], ebx
stosd dword es:[edi], eax
push 7
pop ecx
mov dword [ebp - 0x2c], ebx
stosd dword es:[edi], eax
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x7c], ebx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp + 0x350], ebx
mov dword [ebp + 0x354], ecx
mov word [ebp + 0x340], ax
mov eax, 0x45c294
mov byte [ebp - 4], 1
cmp dword [0x45c2a8], ecx
jbe 0x40da18
mov eax, dword [0x45c294]
push eax
lea ecx, [ebp + 0x370]
call fcn.004014a2
cmp byte [0x45c181], 0
lea eax, [ebp + 0x370]
push eax
sete al
mov byte [ebp - 4], 2
movzx eax, al
push eax
call fcn.0040c623
lea ecx, [ebp + 0x370]
mov byte [ebp - 4], 1
call fcn.00401780
push 0x40
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], ebx
call fcn.0040d7bd
lea eax, [ebp - 0x50]
push eax
push 0x40
push dword [ebp - 0x50]
call fcn.0040d25f
mov dword [ebp - 0x4c], eax
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 3
call fcn.0040d3d7
mov dword [ebp - 0xe8], ebx
lea eax, [ebp - 0x68]
mov byte [ebp - 4], 4
push eax
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x64], ebx
call fcn.0040cdeb
mov dword [ebp - 0x68], eax
mov al, byte [0x45c548]
mov byte [ebp - 4], 5
mov dword [0x44b6fc], 1
mov byte [0x44b700], al
mov dword [0x44b738], ebx
mov dword [ebp - 0xb0], 0x88
call fcn.0040c61a
test al, al
jne 0x40ecbb
mov ecx, ebx
mov edi, ebx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x20], edi
cmp ecx, 0x40
jl 0x40db00
cmp byte [0x45b90c], 0
je 0x40e057
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x50]
cdq
idiv dword [ebp - 0xb0]
cmp ecx, eax
jl 0x40db21
lea eax, [ebp - 0x11]
push eax
lea eax, [ecx + 1]
push eax
lea ecx, [ebp - 0x50]
call fcn.0040d111
mov eax, dword [ebp - 0x50]
add eax, edi
mov edi, 0x44b740
push 4
push edi
mov dword [0x44b748], eax
call fcn.0040ff25
test eax, eax
je 0x40e049
push edi
call fcn.0040f5ea
test al, al
je 0x40dfe5
call fcn.0041290f
test eax, eax
jne 0x40dfe0
cmp dword [0x45b878], 7
mov edi, 0x45b864
mov dword [0x45b874], ebx
mov eax, edi
jbe 0x40db76
mov eax, dword [0x45b864]
xor ecx, ecx
mov word [eax], cx
movzx eax, byte [0x45b7d9]
push eax
movzx eax, word [0x45b7f8]
push 0x45b7dc
push 2
push eax
call fcn.0040fb10
test eax, eax
je 0x40dbad
cmp eax, esi
jle 0x40dba4
mov esi, eax
mov dword [ebp - 0x10], esi
cmp eax, 1
jg 0x40dfca
movzx eax, word [0x45b7fa]
push ebx
push ebx
push 3
push eax
call fcn.0040fb10
test eax, eax
je 0x40dbd2
cmp eax, esi
jle 0x40dbc9
mov dword [ebp - 0x10], eax
cmp eax, 1
jg 0x40dfca
movzx eax, word [0x45b7fa]
push ebx
push eax
push dword [0x45b7a8]
call fcn.004124ea
xor eax, eax
lea edi, [ebp - 0xd0]
stosd dword es:[edi], eax
push 0x63
stosd dword es:[edi], eax
stosd dword es:[edi], eax
pop eax
cmp word [0x45b7de], ax
jne 0x40dc24
lea eax, [ebp - 0xd0]
push eax
movzx eax, word [0x45b7fa]
push eax
push dword [0x45b7a8]
call fcn.0040f526
mov ax, word [ebp - 0xc8]
mov word [0x45b7de], ax
mov edi, dword [0x44b748]
lea esi, [ebp - 0xd0]
push ebx
push ebx
push ebx
lea edi, [edi + 0x58]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movzx eax, word [0x45b7fc]
push eax
call fcn.0040fb10
test eax, eax
je 0x40dc5b
cmp eax, dword [ebp - 0x10]
jle 0x40dc52
mov dword [ebp - 0x10], eax
cmp eax, 1
jg 0x40dfd9
xor eax, eax
lea edi, [ebp + 0x370]
stosd dword es:[edi], eax
push 0xf
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
pop edi
mov dword [ebp + 0x380], ebx
mov dword [ebp + 0x384], edi
mov byte [ebp + 0x370], bl
lea eax, [ebp + 0x370]
mov byte [ebp - 4], 6
push eax
push dword [0x45b87c]
movzx eax, word [0x45b7fa]
push eax
push dword [0x45b7a8]
call fcn.0040f496
test al, al
je 0x40dcbd
mov esi, 0x45b864
lea eax, [ebp + 0x370]
push esi
push eax
call fcn.00414a4e
push esi
push esi
call fcn.00406e30
mov eax, dword [ebp + 0x384]
mov byte [ebp - 4], 5
cmp eax, edi
jbe 0x40dcfb
mov ecx, dword [ebp + 0x370]
inc eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], ecx
cmp eax, 0x1000
jb 0x40dcf2
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.004016c3
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
push eax
push ecx
call fcn.0041d0f6
pop ecx
pop ecx
movzx ecx, word [0x45b7e2]
movzx eax, word [0x45b7e0]
shl ecx, 0x10
or ecx, eax
push ecx
mov ecx, dword [0x44b748]
lea ecx, [ecx + 0x68]
call fcn.0040baa0
mov eax, dword [0x44b748]
mov dword [eax + 0x70], ebx
mov dword [eax + 0x74], ebx
mov eax, dword [0x44b748]
mov dword [eax + 0x78], ebx
mov dword [eax + 0x7c], ebx
mov ecx, dword [0x44b748]
lea eax, [ecx + 0x78]
push eax
lea eax, [ecx + 0x70]
push eax
lea eax, [ecx + 0x68]
push eax
movzx eax, word [0x45b7fa]
push eax
push dword [0x45b7a8]
call fcn.0040f2ee
movzx esi, word [0x45b7fa]
mov edi, dword [0x45b7a8]
test esi, esi
je 0x40dd71
test edi, edi
jne 0x40de58
mov byte [ebp - 0x11], bl
push 0x340
lea eax, [ebp]
push ebx
push eax
call fcn.0041ea90
add esp, 0xc
lea ecx, [ebp]
call fcn.0040d427
push 0x45b864
lea ecx, [ebp + 0x28]
mov byte [ebp - 4], 7
call fcn.00403aaa
mov eax, dword [0x45b804]
mov dword [ebp + 0x24], eax
lea eax, [ebp + 0x24]
push ebx
push eax
push dword [0x45b7f4]
mov eax, dword [0x44b748]
push dword [0x45b7f0]
push dword [eax + 0x34]
lea eax, [ebp + 0x28]
push eax
call fcn.00414a8c
mov edx, dword [0x44b748]
mov byte [ebp + 0x101], al
mov eax, dword [edx + 0x68]
mov ecx, dword [edx + 0x6c]
add edx, 0x40
mov dword [ebp + 0x50], eax
mov eax, dword [0x45b7f0]
mov dword [ebp + 0x54], ecx
mov ecx, dword [0x45b7f4]
mov dword [ebp + 0x70], eax
mov dword [ebp + 0x74], ecx
mov dword [edx + 0x10], ebx
cmp dword [edx + 0x14], 0xf
jbe 0x40de00
mov edx, dword [edx]
mov byte [edx], bl
movzx esi, word [0x45b7fa]
mov edi, dword [0x45b7a8]
test esi, esi
je 0x40df5c
test edi, edi
je 0x40df5c
jmp 0x40debe
push edi
call fcn.0040fdef
mov word [ebp - 0x12], ax
lea eax, [edi + 2]
push eax
call fcn.0040fdef
movzx ecx, ax
lea eax, [esi - 4]
cmp ecx, eax
ja 0x40dd71
cmp word [ebp - 0x12], 0x17
je 0x40de62
push 0xfffffffffffffffc
add edi, 4
pop eax
sub eax, ecx
add edi, ecx
add esi, eax
cmp esi, 4
jae 0x40de24
jmp 0x40dd71
push str.AES_0017
push 0x45b864
push 0x45c294
push 0x22
mov byte [ebp - 0x11], 1
call fcn.0040d2b3
jmp 0x40dd74
push edi
call fcn.0040fdef
mov word [ebp - 0x26], ax
lea eax, [edi + 2]
push eax
call fcn.0040fdef
movzx ecx, ax
lea eax, [esi - 4]
cmp ecx, eax
ja 0x40df5c
mov eax, 0x9903
cmp word [ebp - 0x26], ax
jne 0x40deb2
cmp ecx, 0x14
jae 0x40dec8
push 0xfffffffffffffffc
add edi, 4
pop eax
sub eax, ecx
add edi, ecx
add esi, eax
cmp esi, 4
jae 0x40de81
jmp 0x40df5c
push 0x10
lea eax, [edi + 8]
push eax
lea eax, [ebp + 0x388]
push eax
call fcn.0041e510
mov ecx, dword [0x44b748]
lea eax, [ebp + 0x388]
add esp, 0xc
lea ecx, [ecx + 0x40]
push 0x10
push eax
call fcn.0040ae1b
push 0x5c
pop eax
cmp word [0x45b7de], ax
je 0x40df5c
mov eax, dword [0x44b748]
lea ecx, [ebp + 0x358]
add eax, 0x40
push eax
call fcn.0040d3a3
push 0x45b864
lea ecx, [ebp + 0x370]
mov byte [ebp - 4], 8
call fcn.00402740
lea eax, [ebp + 0x358]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0xf0]
push eax
lea ecx, [ebp - 0x68]
call fcn.0040ce89
lea ecx, [ebp + 0x370]
mov byte [ebp - 4], 7
call fcn.00401780
lea ecx, [ebp + 0x358]
call fcn.0040adf7
cmp byte [ebp - 0x11], 0
jne 0x40dfa6
push ebx
push ebx
push 6
push ebx
lea eax, [ebp]
mov ecx, 0x45c080
push eax
call fcn.00402f24
test eax, eax
je 0x40dfa6
call fcn.0040f6e2
test eax, eax
je 0x40dfa3
mov ecx, dword [0x44b748]
push 0x45b864
call fcn.00403aaa
mov edi, dword [ebp - 0x20]
inc dword [ebp - 0x30]
add edi, 0x88
mov dword [ebp - 0x20], edi
jmp 0x40dfa9
inc dword [ebp - 0x3c]
mov edi, dword [ebp - 0x20]
add dword [ebp - 0x6c], 1
lea ecx, [ebp]
mov byte [ebp - 4], 5
adc dword [ebp - 0x94], ebx
call fcn.0040d638
mov esi, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x30]
jmp 0x40daee
push edi
push 0x45c294
push 0x1c
call fcn.00403448
jmp 0x40e050
push 0x45b864
jmp 0x40dfcb
mov dword [ebp - 0x10], eax
jmp 0x40e050
mov eax, dword [ebp - 0x6c]
mov ecx, dword [0x45b820]
xor eax, ecx
movzx eax, ax
or eax, ebx
je 0x40e01f
cmp ecx, 0xffff
jne 0x40e007
cmp dword [0x45b824], ebx
je 0x40e01f
push 0x45c294
mov ecx, 0x45c598
call fcn.0040350e
mov dword [ebp - 0x10], 3
jmp 0x40e050
push edi
call fcn.0040f632
test al, al
jne 0x40e044
cmp byte [0x45b914], al
je 0x40e03b
push edi
call fcn.0040f60e
test al, al
jne 0x40e044
mov dword [ebp - 0x5c], 1
jmp 0x40e050
mov dword [ebp - 0x5c], ebx
jmp 0x40e050
mov dword [ebp - 0x10], 0x33
mov dword [ebp - 0x24], 1
cmp byte [0x45b90c], 0
mov eax, dword [0x45b798]
mov dword [ebp - 0xa0], eax
mov eax, dword [0x45b79c]
mov dword [ebp - 0x9c], eax
mov eax, dword [0x45b758]
mov dword [ebp - 0xa4], eax
mov eax, dword [0x45b760]
mov dword [ebp - 0xa8], eax
mov eax, dword [0x45b764]
mov dword [ebp - 0xac], eax
je 0x40e141
push 0x45c294
mov dword [0x45b910], ebx
call fcn.0040d6b4
test al, al
mov eax, str.zx01
jne 0x40e0b9
mov eax, 0x434018
sub esp, 0x18
mov ecx, esp
push eax
call fcn.004014a2
push 0x45c294
call fcn.00406db8
mov edi, dword [0x45b778]
test edi, edi
je 0x40e0ea
mov eax, dword [edi]
push 1
mov esi, dword [eax]
mov ecx, esi
call dword [0x433258]
mov ecx, edi
call esi
mov dword [0x45b778], ebx
call fcn.0040fe04
cmp dword [0x45c2a8], 7
mov eax, 0x45c294
jbe 0x40e108
mov eax, dword [0x45c294]
push eax
lea ecx, [ebp + 0x370]
call fcn.004014a2
cmp byte [0x45c181], 0
lea eax, [ebp + 0x370]
push eax
sete al
mov byte [ebp - 4], 0xa
movzx eax, al
push eax
call fcn.0040c623
lea ecx, [ebp + 0x370]
mov byte [ebp - 4], 5
call fcn.00401780
cmp dword [ebp - 0x30], 0
mov eax, ebx
mov dword [ebp - 0x90], ebx
jle 0x40ec27
mov ecx, dword [ebp - 0x58]
shl ecx, 6
mov dword [ebp - 0x98], ecx
imul esi, eax, 0x88
add ecx, eax
mov dword [ebp - 0x38], ecx
add esi, dword [ebp - 0x50]
mov dword [0x44b748], esi
mov dword [ebp - 0x40], esi
cmp dword [esi + 0x14], 7
jbe 0x40e181
mov eax, dword [esi]
mov dword [ebp - 0x40], eax
cmp byte [0x45b90c], 0
je 0x40e218
mov ecx, dword [esi + 0x38]
cmp ecx, dword [0x45b910]
je 0x40e218
movzx eax, word [0x45b810]
cmp ecx, eax
jne 0x40e1d3
push 0x45c294
call fcn.0040d6b4
test al, al
mov eax, str.zipx
jne 0x40e1bc
mov eax, 0x43402c
sub esp, 0x18
mov ecx, esp
push eax
call fcn.004014a2
push 0x45c294
call fcn.00406db8
jmp 0x40e1de
push ecx
push 0x45c294
call fcn.0040d75e
mov eax, dword [0x44b748]
mov edi, dword [0x45b778]
mov eax, dword [eax + 0x38]
mov dword [0x45b910], eax
test edi, edi
je 0x40e207
mov eax, dword [edi]
push 1
mov esi, dword [eax]
mov ecx, esi
call dword [0x433258]
mov ecx, edi
call esi
mov dword [0x45b778], ebx
call fcn.0040fe04
mov esi, dword [0x44b748]
mov edi, dword [esi + 0x18]
add edi, dword [0x45b7a0]
mov esi, dword [esi + 0x1c]
adc esi, dword [0x45b7a4]
push ebx
push 0x2000
push esi
push edi
call fcn.0041da00
mov ecx, edi
mov dword [ebp - 0x1c], eax
sub ecx, eax
mov eax, esi
sbb eax, edx
mov dword [ebp - 0x18], eax
cmp esi, ebx
jg 0x40e2e2
jl 0x40e257
cmp edi, ebx
jae 0x40e2e2
push 0x45c294
mov ecx, 0x45c598
call fcn.0040350e
cmp dword [ebp - 0x38], 0
mov dword [ebp - 0x10], 2
jne 0x40e2d6
mov ecx, dword [0x45b7a0]
mov eax, ecx
mov edx, dword [0x45b7a4]
or eax, edx
je 0x40e2d6
mov eax, dword [0x44b748]
push ebx
push 0x2000
mov dword [0x45b7a0], ebx
mov dword [0x45b7a4], ebx
mov esi, dword [eax + 0x1c]
mov edi, dword [eax + 0x18]
push esi
push edi
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x74], edx
call fcn.0041da00
mov ecx, edi
mov dword [ebp - 0x1c], eax
sub ecx, eax
mov eax, esi
sbb eax, edx
mov dword [ebp - 0x18], eax
cmp esi, ebx
jg 0x40e2e2
jl 0x40e2c7
cmp edi, ebx
jae 0x40e2e2
push 0x45c294
mov ecx, 0x45c598
call fcn.0040350e
mov dword [ebp - 0x10], 3
jmp 0x40ebeb
cmp ecx, dword [0x45b798]
jne 0x40e327
cmp eax, dword [0x45b79c]
jne 0x40e327
cmp byte [0x45b90c], 0
jne 0x40e327
mov eax, dword [0x45b758]
mov ecx, dword [0x45b754]
sub eax, ecx
mov edi, dword [ebp - 0x1c]
sub eax, edi
cdq
add dword [0x45b760], eax
adc dword [0x45b764], edx
lea eax, [ecx + edi]
mov dword [0x45b758], eax
jmp 0x40e3b9
mov edi, dword [0x45b778]
push ebx
push dword [ebp - 0x18]
mov eax, dword [edi]
push ecx
mov esi, dword [eax + 0x10]
mov ecx, esi
call dword [0x433258]
mov ecx, edi
call esi
mov edi, dword [0x45b778]
mov eax, dword [edi]
mov esi, dword [eax + 0x14]
mov ecx, esi
call dword [0x433258]
mov ecx, edi
call esi
push 0x2000
push dword [0x45b754]
mov dword [0x45b798], eax
mov dword [0x45b79c], edx
call fcn.0041033f
cdq
mov esi, edx
mov ecx, eax
mov dword [0x45b760], ecx
mov dword [0x45b764], esi
cmp esi, ebx
jg 0x40e398
jl 0x40e2c7
cmp ecx, ebx
jbe 0x40e2c7
mov eax, dword [0x45b754]
add eax, dword [ebp - 0x1c]
mov dword [0x45b758], eax
mov eax, dword [ebp - 0x1c]
cdq
sub ecx, eax
mov dword [0x45b760], ecx
sbb esi, edx
mov dword [0x45b764], esi
push 4
mov edi, 0x44b740
push edi
call fcn.0040ff25
test eax, eax
je 0x40e2c7
push edi
call fcn.0040f656
test al, al
jne 0x40e467
cmp dword [ebp - 0x38], 0
mov edx, dword [0x45b7a4]
mov ecx, dword [0x45b7a0]
jne 0x40e408
mov eax, ecx
or eax, edx
je 0x40e408
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x74], edx
mov dword [0x45b7a0], ebx
mov dword [0x45b7a4], ebx
jmp 0x40e42c
or ecx, edx
jne 0x40e2c7
mov esi, dword [ebp - 0x70]
mov eax, esi
mov edi, dword [ebp - 0x74]
or eax, edi
je 0x40e2c7
mov dword [0x45b7a0], esi
mov dword [0x45b7a4], edi
mov eax, dword [0x44b748]
push dword [eax + 0x1c]
push dword [eax + 0x18]
call fcn.00410168
test eax, eax
jne 0x40e2c7
push 4
mov edi, 0x44b740
push edi
call fcn.0040ff25
test eax, eax
je 0x40e2c7
push edi
call fcn.0040f656
test al, al
je 0x40e2c7
call fcn.00412a98
mov esi, eax
test esi, esi
je 0x40e489
push 0x45c294
mov ecx, 0x45c598
call fcn.0040350e
mov dword [ebp - 0x10], esi
jmp 0x40ebeb
cmp dword [0x45b878], 7
mov edi, 0x45b864
mov dword [0x45b874], ebx
mov eax, edi
jbe 0x40e4a4
mov eax, dword [0x45b864]
push ebx
xor ecx, ecx
push 0x45b7b2
mov word [eax], cx
movzx eax, word [0x45b7d0]
push 2
push eax
call fcn.0040fb10
test eax, eax
je 0x40e4e1
cmp eax, dword [ebp - 0x10]
jle 0x40e4ca
mov dword [ebp - 0x10], eax
cmp eax, 1
jle 0x40e4e1
push edi
push 0x45c294
push 0x1c
call fcn.00403448
jmp 0x40ebeb
mov eax, dword [0x45b7a8]
test eax, eax
je 0x40e4f7
push eax
call fcn.00422428
pop ecx
mov dword [0x45b7a8], ebx
movzx eax, word [0x45b7d2]
push ebx
push ebx
push 3
push eax
call fcn.0040fb10
test eax, eax
je 0x40e519
cmp eax, dword [ebp - 0x10]
jle 0x40e514
mov dword [ebp - 0x10], eax
cmp eax, 1
jg 0x40e4cf
movzx eax, word [0x45b7d2]
push 1
push eax
push dword [0x45b7a8]
call fcn.004124ea
xor eax, eax
lea edi, [ebp + 0x370]
stosd dword es:[edi], eax
push 0xf
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
pop edi
mov dword [ebp + 0x380], ebx
mov dword [ebp + 0x384], edi
mov byte [ebp + 0x370], bl
lea eax, [ebp + 0x370]
mov byte [ebp - 4], 0xb
push eax
push dword [0x45b87c]
movzx eax, word [0x45b7d2]
push eax
push dword [0x45b7a8]
call fcn.0040f496
test al, al
je 0x40e590
mov esi, 0x45b864
lea eax, [ebp + 0x370]
push esi
push eax
call fcn.00414a4e
push esi
push esi
call fcn.00406e30
mov eax, dword [ebp + 0x384]
mov byte [ebp - 4], 5
cmp eax, edi
jbe 0x40e5ce
mov ecx, dword [ebp + 0x370]
inc eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], ecx
cmp eax, 0x1000
jb 0x40e5c5
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.004016c3
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
push eax
push ecx
call fcn.0041d0f6
pop ecx
pop ecx
mov edx, dword [0x44b748]
push 0x45b890
push 0x45b888
push 0x45b880
mov eax, dword [edx + 0x68]
mov ecx, dword [edx + 0x6c]
mov dword [0x45b880], eax
mov dword [0x45b884], ecx
mov eax, dword [edx + 0x70]
mov ecx, dword [edx + 0x74]
mov dword [0x45b888], eax
mov dword [0x45b88c], ecx
mov eax, dword [edx + 0x78]
mov ecx, dword [edx + 0x7c]
mov dword [0x45b890], eax
movzx eax, word [0x45b7d2]
push eax
push dword [0x45b7a8]
mov dword [0x45b894], ecx
call fcn.0040f2ee
push 0x63
pop eax
mov cl, bl
mov byte [0x45b918], cl
cmp word [0x45b7b4], ax
jne 0x40e65b
movzx eax, word [0x45b7d2]
push 0x45b918
push eax
push dword [0x45b7a8]
call fcn.0040f526
mov cl, byte [0x45b918]
mov esi, dword [0x44b748]
add esi, 0x58
cmp byte [esi], 0
je 0x40e67b
test cl, cl
jne 0x40e67f
mov edi, 0x45b918
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov cl, byte [0x45b918]
test cl, cl
je 0x40e68b
mov ax, word [0x45b920]
mov word [0x45b7b4], ax
mov esi, dword [ebp - 0x40]
push esi
call fcn.0042234e
pop ecx
push eax
mov edi, 0x45b864
push esi
mov ecx, edi
call fcn.0040181c
mov ecx, dword [0x44b748]
push ebx
lea eax, [ecx + 0x3c]
push eax
push dword [ecx + 0x2c]
push dword [ecx + 0x28]
push dword [ecx + 0x34]
push edi
call fcn.00414a8c
mov esi, dword [0x45b878]
mov ecx, dword [0x45b864]
mov byte [ebp - 0x11], al
mov eax, edi
cmp esi, 7
jbe 0x40e6d5
mov eax, ecx
cmp word [eax], bx
je 0x40e74e
mov eax, edi
cmp esi, 7
jbe 0x40e6e3
mov eax, ecx
cmp word [eax + 2], bx
je 0x40e74e
mov edx, dword [0x45b874]
push 2
pop eax
mov dword [ebp - 0x18], eax
cmp edx, eax
jbe 0x40e74e
push 4
pop edi
push edi
pop ebx
mov eax, 0x45b864
cmp esi, 7
jbe 0x40e70a
mov eax, ecx
cmp word [eax + edi], 0x3a
jne 0x40e736
mov eax, 0x45b864
cmp esi, 7
jbe 0x40e71d
mov eax, ecx
push 0x5f
pop ecx
mov word [eax + ebx], cx
mov esi, dword [0x45b878]
mov edx, dword [0x45b874]
mov ecx, dword [0x45b864]
mov eax, dword [ebp - 0x18]
add edi, 2
inc eax
add ebx, 2
mov dword [ebp - 0x18], eax
cmp eax, edx
jb 0x40e6fe
xor ebx, ebx
mov edi, 0x45b864
push edi
push edi
call fcn.0040621c
cmp byte [ebp - 0x11], 0
je 0x40e761
mov edx, ebx
mov esi, ebx
jmp 0x40e76d
mov edx, dword [0x44b718]
mov esi, dword [0x44b71c]
movzx ecx, word [0x45b7d2]
movzx eax, word [0x45b7d0]
add ecx, 0x1e
add eax, ecx
xor ecx, ecx
add eax, edx
mov edx, dword [ebp - 0x8c]
mov dword [ebp - 0x1c], eax
mov eax, edx
adc ecx, esi
and eax, dword [ebp - 0x54]
mov dword [ebp - 0x20], ecx
mov ecx, dword [0x44b748]
cmp eax, 0xffffffff
je 0x40e931
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ecx + 0x38]
jne 0x40e931
mov esi, dword [ecx + 0x1c]
mov eax, dword [ebp - 0x54]
mov edi, dword [ecx + 0x18]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x28], esi
cmp esi, eax
jg 0x40e931
jl 0x40e7d6
cmp edi, edx
jae 0x40e931
sub edx, edi
sbb eax, esi
mov dword [ebp - 0x40], eax
js 0x40e931
jg 0x40e7f1
cmp edx, 0x200
jbe 0x40e931
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0xc4], edi
mov dword [ebp - 0xc0], esi
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xb8], ecx
cmp dword [ebp - 0x34], esi
jg 0x40e83a
mov eax, dword [ebp - 0x2c]
jl 0x40e81d
cmp eax, edi
ja 0x40e83a
mov ecx, eax
mov eax, dword [ebp - 0x34]
add ecx, dword [ebp - 0x78]
adc eax, dword [ebp - 0x7c]
cmp eax, esi
jg 0x40ec08
jl 0x40e83a
cmp ecx, edi
ja 0x40ec08
mov eax, dword [ebp - 0x20]
mov ecx, edx
mov edx, dword [ebp - 0x34]
add ecx, edi
adc eax, esi
cmp edx, eax
jg 0x40e87a
mov eax, dword [ebp - 0x2c]
jl 0x40e853
cmp eax, ecx
jae 0x40e87a
mov esi, eax
mov ecx, edx
add esi, dword [ebp - 0x78]
mov edx, edi
mov eax, dword [ebp - 0x28]
adc ecx, dword [ebp - 0x7c]
add edx, dword [ebp - 0x1c]
adc eax, dword [ebp - 0x20]
cmp ecx, eax
jg 0x40ec08
jl 0x40e87a
cmp esi, edx
jae 0x40ec08
mov edi, dword [ebp - 0x88]
jmp 0x40e8f2
mov eax, dword [edi + 4]
mov ecx, dword [ebp - 0x28]
mov edx, dword [edi]
mov dword [ebp - 0x40], eax
cmp eax, ecx
jg 0x40e8b7
jl 0x40e898
cmp edx, dword [ebp - 0x18]
ja 0x40e8b7
mov ecx, edx
add ecx, dword [edi + 8]
adc eax, dword [edi + 0xc]
cmp eax, dword [ebp - 0x28]
jg 0x40ec08
jl 0x40e8b4
cmp ecx, dword [ebp - 0x18]
ja 0x40ec08
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x1c]
push 0
adc ecx, dword [ebp - 0x20]
pop ebx
cmp dword [ebp - 0x40], ecx
jg 0x40e8ef
jl 0x40e8ce
cmp edx, eax
jae 0x40e8ef
add edx, dword [edi + 8]
mov ebx, dword [ebp - 0x40]
adc ebx, dword [edi + 0xc]
push 0
mov dword [ebp - 0x40], ebx
cmp ebx, ecx
pop ebx
jg 0x40ec08
jl 0x40e8ef
cmp edx, eax
jae 0x40ec08
add edi, 0x10
mov eax, dword [ebp - 0x84]
cmp edi, eax
jne 0x40e882
cmp eax, dword [ebp - 0x80]
je 0x40e918
mov edi, eax
lea esi, [ebp - 0xc4]
add eax, 0x10
mov dword [ebp - 0x84], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
jmp 0x40e92b
lea ecx, [ebp - 0xc4]
push ecx
push eax
lea ecx, [ebp - 0x88]
call fcn.0040cf11
mov ecx, dword [0x44b748]
mov esi, dword [ecx + 0x18]
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
mov edi, dword [ecx + 0x1c]
mov dword [ebp - 0x78], eax
add eax, esi
mov dword [ebp - 0x8c], eax
mov eax, edx
adc eax, edi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x54], eax
mov eax, dword [ecx + 0x38]
mov cl, byte [0x45c181]
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x7c], edx
mov dword [ebp - 0xb4], eax
test cl, cl
je 0x40e988
cmp dword [0x45c290], 7
mov eax, 0x45c27c
jbe 0x40e97e
mov eax, dword [0x45c27c]
push 0x49
pop edx
cmp word [eax], dx
mov al, 1
jne 0x40e98a
mov al, bl
push ebx
push eax
test cl, cl
mov edi, 0x45b864
sete al
movzx eax, al
push eax
push edi
call fcn.0040c63c
test al, al
je 0x40ec27
mov al, byte [0x45c181]
test al, al
jne 0x40e9dc
cmp byte [0x45c113], al
jne 0x40e9fe
lea eax, [ebp + 0x340]
push eax
push 0x45c2ac
push edi
call fcn.00404d84
test al, al
je 0x40ebeb
mov al, byte [0x45c181]
test al, al
je 0x40e9fe
cmp byte [ebp - 0x11], 0
jne 0x40ebeb
push 0x5c
pop ecx
cmp word [0x45b7b4], cx
je 0x40ebeb
test al, al
jne 0x40eb93
cmp byte [ebp - 0x11], 0
mov esi, ebx
je 0x40eaf0
cmp byte [0x45c0eb], 0
jne 0x40ebeb
cmp dword [0x45b874], 0
je 0x40ebeb
cmp dword [0x45c0f0], 1
je 0x40ebeb
mov eax, dword [0x44b748]
cmp dword [eax + 0x34], 0
je 0x40ea42
cmp dword [eax + 0x34], 0xb
jne 0x40ea45
mov esi, dword [eax + 0x3c]
push edi
call fcn.00404c97
test al, al
jne 0x40eab2
cmp byte [0x45c12a], al
push esi
sete al
movzx eax, al
push eax
push edi
call fcn.00404f2d
test eax, eax
je 0x40eaac
movzx eax, byte [0x45c0db]
push eax
push 1
push edi
call fcn.00404a79
cmp byte [0x45c12a], 0
push esi
sete al
movzx eax, al
push eax
push edi
call fcn.00404f2d
test eax, eax
je 0x40eaac
push edi
push 0x45c294
push 0x14
call fcn.00403448
mov ecx, 0x45c598
call fcn.004037f7
jmp 0x40ebeb
inc dword [0x44b738]
mov eax, dword [0x45c258]
lea ecx, [ebp - 0xe8]
neg eax
sbb eax, eax
and eax, 0x45b888
push eax
mov eax, dword [0x45c254]
neg eax
sbb eax, eax
and eax, 0x45b890
push eax
mov eax, dword [0x45c250]
neg eax
sbb eax, eax
and eax, 0x45b880
push eax
push edi
call fcn.004049e3
jmp 0x40ebeb
push edi
call fcn.0040f8d9
cmp eax, 0xffffffff
je 0x40eb57
test eax, eax
je 0x40eb3b
cmp eax, 1
jne 0x40eb93
mov eax, dword [0x45c0c0]
cmp eax, 2
je 0x40ebeb
cmp byte [0x45c0ec], 0
jne 0x40ebeb
cmp byte [0x45c0eb], 0
jne 0x40ebeb
test eax, eax
je 0x40eb68
cmp eax, 3
jne 0x40eb93
jmp 0x40eb68
mov eax, dword [0x45c0c0]
cmp eax, 2
je 0x40ebeb
test eax, eax
je 0x40eb52
cmp eax, 3
jne 0x40eb93
xor esi, esi
inc esi
jmp 0x40eb64
cmp byte [0x45c0eb], 0
jne 0x40ebeb
test esi, esi
je 0x40eb93
push ebx
push 0x45b880
push dword [0x44b724]
push dword [0x44b720]
push edi
push 0x45c080
call fcn.0040c4ae
cmp eax, 6
je 0x40ec20
cmp eax, 1
je 0x40ebeb
mov eax, dword [0x44b748]
test byte [eax + 0x80], 1
je 0x40ebd6
call fcn.00413283
test eax, eax
je 0x40ebd6
cmp eax, 9
je 0x40ecaf
cmp eax, 0xc
jne 0x40ebbf
inc dword [ebp - 0x60]
push 6
jmp 0x40ebc9
cmp eax, dword [ebp - 0x10]
jle 0x40ebc7
mov dword [ebp - 0x10], eax
push 0x1c
pop eax
push edi
push 0x45c294
push eax
jmp 0x40e4d7
lea eax, [ebp - 0x68]
push eax
call fcn.0040edd8
test eax, eax
je 0x40ebeb
cmp eax, dword [ebp - 0x10]
jle 0x40ebeb
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp eax, dword [ebp - 0x30]
jge 0x40ec27
mov ecx, dword [ebp - 0x98]
jmp 0x40e15f
push 0x45b864
push 0x45c294
push 0x1c
call fcn.00403448
mov dword [ebp - 0x10], 3
mov dword [ebp - 0x24], 1
mov edi, dword [0x45b778]
push ebx
push dword [ebp - 0x9c]
mov eax, dword [edi]
push dword [ebp - 0xa0]
mov esi, dword [eax + 0x10]
mov ecx, esi
call dword [0x433258]
mov ecx, edi
call esi
mov edi, dword [0x45b778]
mov eax, dword [edi]
mov esi, dword [eax + 0x14]
mov ecx, esi
call dword [0x433258]
mov ecx, edi
call esi
push 0x2000
push dword [0x45b754]
mov dword [0x45b798], eax
mov dword [0x45b79c], edx
call fcn.0041033f
mov eax, dword [ebp - 0xa4]
inc dword [ebp - 0x58]
cmp dword [ebp - 0x24], 0
mov esi, dword [ebp - 0x10]
mov dword [0x45b758], eax
mov eax, dword [ebp - 0xa8]
mov dword [0x45b760], eax
mov eax, dword [ebp - 0xac]
mov dword [0x45b764], eax
jne 0x40ecbb
jmp 0x40dad7
push 2
call fcn.004033db
mov esi, dword [ebp - 0x10]
mov bl, 1
lea ecx, [ebp - 0xe8]
call fcn.0040505d
call fcn.0040c61a
test al, al
jne 0x40ecf1
cmp dword [ebp - 0x5c], 0
je 0x40ecf1
cmp byte [0x45b90c], al
jne 0x40ecf1
push 0x45c294
mov ecx, 0x45c598
call fcn.0040350e
test esi, esi
jne 0x40ecf1
inc esi
mov edi, dword [ebp - 0x38]
inc edi
cmp dword [0x44b738], 0
jne 0x40ed35
cmp dword [0x45c290], 7
mov eax, dword [0x45c27c]
ja 0x40ed11
mov eax, 0x45c27c
push 0x49
pop ecx
cmp word [eax], cx
je 0x40ed35
test bl, bl
jne 0x40ed29
push 0x45c294
push 0x46
call fcn.0040340c
push 0xa
mov ecx, 0x45c598
call fcn.004037af
test edi, edi
jne 0x40ed51
cmp esi, 1
jg 0x40ed51
mov eax, dword [ebp - 0x3c]
xor cx, cx
cmp cx, ax
sbb esi, esi
and esi, 0x46
add esi, 0xb
jmp 0x40ed7f
mov ecx, dword [ebp - 0x60]
movzx eax, cx
cmp edi, eax
jne 0x40ed64
cmp esi, 1
jg 0x40ed64
push 0x52
jmp 0x40ed72
cmp word [ebp - 0x3c], 0
je 0x40ed75
cmp esi, 1
jg 0x40ed75
push 0x51
pop esi
jmp 0x40ed7f
test cx, cx
je 0x40ed7f
test esi, esi
jne 0x40ed7f
inc esi
lea eax, [ebp - 0x68]
push eax
mov ecx, eax
call fcn.0040d008
lea ecx, [ebp - 0xe4]
call fcn.0040d5dc
lea ecx, [ebp - 0x50]
call fcn.0040d8f9
lea ecx, [ebp + 0x340]
call fcn.00401780
lea ecx, [ebp - 0x88]
call fcn.0040d60f
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x398]
xor ecx, ebp
call fcn.0041d104
add ebp, 0x39c
leave
ret