Function at 0x40bb90
Capabilities:
Check for time delay via queryperformancecounter
Encode data using xor
Hash data using sha1
Receive data
Receive data on socket

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a444d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0xde8
push esi
push edi
mov edi, ecx
mov ecx, 2
mov dword [ebp - 0x68], edi
nop
mov eax, dword [edi + 0x816]
mov dword [ebp - 0x88], 0x10
mov word [ebp - 0xd8], cx
cmp eax, 0xffffffff
jne 0x40bc1c
or eax, eax
cmp byte [edi + 4], 0
jne 0x40bcc1
mov eax, dword [edi]
mov ecx, edi
push 0
push 0
mov byte [edi + 4], 1
call dword [eax + 0x24]
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
lea ecx, [ebp - 0x88]
push ecx
lea ecx, [ebp - 0xd8]
push ecx
push 0
push 0x240
lea ecx, [ebp - 0xdf8]
push ecx
push eax
call dword [sym.imp.WS2_32.dll_recvfrom]
mov esi, eax
cmp esi, 1
jge 0x40bc50
xor eax, eax
cmp esi, 0xffffffff
setne al
jmp 0x40bcbc
push dword [ebp - 0xd6]
lea eax, [ebp - 0xdf8]
mov dword [ebp - 0x2c], eax
call dword [sym.imp.WS2_32.dll_ntohs]
movzx edx, ax
mov eax, dword [0x5e692c]
cmp byte [eax + 0x1a], 0
je 0x40bca3
cmp dword [eax], 0xffffffff
je 0x40bc9e
mov eax, dword [ebp - 0xdf4]
push dword [ebp - 0xdf0]
mov dword [ebp - 0xd4], eax
call dword [sym.imp.WS2_32.dll_htons]
movzx edx, ax
sub esi, 0xa
lea eax, [ebp - 0xdee]
jmp 0x40bca9
mov eax, dword [ebp - 0x2c]
jmp 0x40bca9
lea eax, [ebp - 0xdf8]
mov ecx, dword [ebp - 0xd4]
push edi
push esi
push eax
call fcn.0040ac50
mov eax, 1
mov ecx, 2
cmp byte [edi + 4], 0
jne 0x40bc07
test eax, eax
jg 0x40bbd0
xorps xmm0, xmm0
mov dword [ebp - 0xa0], 0xffff
xor ecx, ecx
movlpd qword [ebp - 0x50], xmm0
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x30], edx
nop word [eax + eax]
mov eax, dword [edi + 0x7e9]
cmp eax, dword [edi + 0x7f5]
je 0x40be5e
cmp byte [eax + 0x29], 0
je 0x40be5e
mov esi, dword [edi + 0x7e9]
mov eax, dword [esi + 0x2a]
mov dword [edi + 0x7e9], eax
test esi, esi
je 0x40be5e
cmp dword [esi + 0x25], 0
jne 0x40be12
mov eax, edx
or eax, ecx
jne 0x40bd52
call fcn.00403220
mov ecx, edx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x38], ecx
mov edx, eax
movzx eax, byte [esi + 0x13]
push ecx
push edx
push 1
push eax
mov eax, dword [esi + 0xd]
sub esp, 8
mov ecx, esp
mov dword [ecx], eax
mov ax, word [esi + 0x11]
mov word [ecx + 4], ax
mov ecx, edi
movzx eax, byte [esi + 0xc]
push eax
push dword [esi + 8]
push dword [esi + 4]
push dword [esi]
push dword [esi + 0x21]
call fcn.0040a710
test al, al
jne 0x40bd95
push 1
push dword [esi + 0x21]
call fcn.00478b59
add esp, 8
cmp dword [esi + 0x14], 0
je 0x40be34
cmp dword [esi + 0xd], 0xffffffff
mov edx, 0xffff
jne 0x40bdb4
cmp word [esi + 0x11], dx
je 0x40be34
mov eax, dword [esi + 0xd]
mov cx, word [esi + 0x11]
mov dword [ebp - 0xb0], eax
mov word [ebp - 0xac], cx
cmp eax, 0xffffffff
jne 0x40bdd2
cmp cx, dx
je 0x40be34
lea eax, [ebp - 0x51]
push eax
lea eax, [ebp - 0xb0]
push eax
lea ecx, [edi + 0x338]
call fcn.0040d620
cmp byte [ebp - 0x51], 0
je 0x40be34
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x338]
imul eax, dword [eax + ecx*2 + 6], 0x7f2
add eax, dword [edi + 0x334]
je 0x40be34
mov ecx, dword [esi + 0x14]
mov dword [eax + 0x7ee], ecx
jmp 0x40be34
movzx eax, byte [esi + 0xc]
push eax
mov eax, dword [esi + 0xd]
push 1
push 0
sub esp, 8
mov ecx, esp
mov dword [ecx], eax
mov ax, word [esi + 0x11]
mov word [ecx + 4], ax
mov ecx, edi
call fcn.0040a3e0
mov eax, dword [edi + 0x7f1]
inc dword [edi + 0x7f9]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x30]
mov byte [eax + 0x29], 0
mov eax, dword [edi + 0x7f1]
mov eax, dword [eax + 0x2a]
mov dword [edi + 0x7f1], eax
jmp 0x40bd00
mov eax, dword [edi + 0x3b9]
cmp eax, dword [edi + 0x3c5]
je 0x40c0c6
cmp byte [eax + 0x116], 0
je 0x40c0c6
mov esi, dword [edi + 0x3b9]
mov dword [ebp - 0x34], esi
mov eax, dword [esi + 0x117]
mov dword [edi + 0x3b9], eax
test esi, esi
je 0x40c0c6
mov dword [ebp - 0x3c], esi
jmp 0x40bea6
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x30]
mov eax, edx
or eax, ecx
jne 0x40bed0
call fcn.00403220
push 0
mov ecx, eax
mov eax, edx
push 0x3e8
push eax
push ecx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x38], eax
call fcn.004a1970
mov edx, eax
mov dword [ebp - 0x24], edx
jmp 0x40bed3
mov edx, dword [ebp - 0x24]
cmp dword [esi + 6], edx
jae 0x40c085
cmp dword [esi], 0xffffffff
lea edx, [esi + 4]
mov al, byte [esi + 0xa]
mov byte [ebp - 0x1d], al
jne 0x40befb
mov ecx, 0xffff
mov dword [ebp - 0x44], edx
cmp word [edx], cx
jne 0x40befb
mov cl, 1
jmp 0x40bf00
mov dword [ebp - 0x44], edx
xor cl, cl
mov byte [ebp - 0x3e], cl
cmp al, 6
je 0x40bf9e
test cl, cl
jne 0x40bf9e
inc al
xor ecx, ecx
mov byte [esi + 0xa], al
mov eax, dword [ebp - 0x24]
add eax, 0x96
mov dword [ebp - 0x44], ecx
mov dword [esi + 6], eax
mov word [ebp - 0x64], 0x6918
mov byte [ebp - 0x62], 0x69
cmp dword [edi + 0x3b1], ecx
jbe 0x40bf82
nop word [eax + eax]
mov eax, dword [edi + 0x3ad]
sub esp, 8
mov edx, esp
mov ecx, dword [eax + ecx*4]
push 0x18
mov eax, dword [ecx]
mov esi, dword [eax + 0x1c]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov dword [edx], eax
mov eax, dword [ebp - 0x34]
mov ax, word [eax + 4]
mov word [edx + 4], ax
lea eax, [ebp - 0x64]
push eax
call esi
mov ecx, dword [ebp - 0x44]
inc ecx
mov dword [ebp - 0x44], ecx
cmp ecx, dword [edi + 0x3b1]
jb 0x40bf40
mov esi, dword [ebp - 0x34]
lea edx, [esi + 4]
movzx eax, word [edx]
push eax
push dword [esi]
lea eax, [ebp - 0x64]
push 3
push eax
push dword [edi + 0x816]
call fcn.00419280
jmp 0x40c085
mov ecx, dword [esi + 0xb]
test ecx, ecx
je 0x40bfb8
push ecx
call fcn.00478b24
mov al, byte [ebp - 0x1d]
add esp, 4
mov dword [esi + 0xb], 0
cmp al, 6
jne 0x40c011
cmp byte [ebp - 0x3e], 0
jne 0x40c011
cmp dword [esi + 0x112], 1
jne 0x40c011
push 0x16
call fcn.00480d0c
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x44]
lea ecx, [edx + 0x15]
mov dword [edx + 0x10], ecx
mov dword [edx + 8], 1
mov byte [edx + 0x14], 0
mov byte [ecx], 0x1d
mov dword [edx + 0xc], 8
mov ecx, dword [esi]
mov dword [edx + 2], ecx
mov ecx, edi
mov ax, word [eax]
mov word [edx + 6], ax
mov eax, 0xffff
push edx
mov word [edx], ax
call fcn.0040abc0
cmp esi, dword [ebp - 0x3c]
jne 0x40c074
mov eax, dword [edi + 0x3c1]
inc dword [edi + 0x3c9]
mov byte [eax + 0x116], 0
mov eax, dword [edi + 0x3c1]
mov eax, dword [eax + 0x117]
mov dword [edi + 0x3c1], eax
mov eax, dword [edi + 0x3b9]
cmp eax, dword [edi + 0x3c5]
je 0x40c06b
cmp byte [eax + 0x116], 0
je 0x40c06b
mov ecx, dword [edi + 0x3b9]
mov esi, ecx
mov dword [ebp - 0x3c], ecx
mov eax, dword [ecx + 0x117]
mov dword [edi + 0x3b9], eax
jmp 0x40c0ae
xor ecx, ecx
mov dword [ebp - 0x3c], ecx
mov esi, ecx
jmp 0x40c0ae
mov eax, dword [ebp - 0x44]
mov ecx, 0xffff
mov dword [esi], 0xffffffff
mov word [eax], cx
mov eax, dword [edi + 0x3b9]
cmp eax, dword [edi + 0x3c5]
je 0x40c0b9
cmp byte [eax + 0x116], 0
je 0x40c0b9
mov esi, dword [edi + 0x3b9]
mov eax, dword [esi + 0x117]
mov dword [edi + 0x3b9], eax
mov dword [ebp - 0x34], esi
test esi, esi
jne 0x40bea0
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x40c0c6
mov dword [edi + 0x3b9], eax
xor ecx, ecx
xor eax, eax
mov dword [ebp - 0x34], ecx
cmp ax, word [edi + 7]
jae 0x40d4d5
mov edx, dword [ebp - 0x24]
nop word [eax + eax]
imul esi, ecx, 0x7f2
add esi, dword [edi + 0x334]
mov dword [ebp - 0x28], esi
cmp byte [esi], 0
je 0x40d4c2
mov eax, dword [esi + 1]
mov dword [ebp - 0x18], eax
mov ax, word [esi + 5]
mov word [ebp - 0x14], ax
mov eax, dword [ebp - 0x30]
or eax, dword [ebp - 0x38]
jne 0x40c130
call fcn.00403220
push 0
mov ecx, eax
mov eax, edx
push 0x3e8
push eax
push ecx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x38], eax
call fcn.004a1970
mov edx, eax
mov dword [ebp - 0x24], edx
mov ecx, dword [esi + 0x6b8]
cmp edx, ecx
jbe 0x40c19e
mov eax, edx
sub eax, ecx
cmp eax, 0x1388
jbe 0x40c19e
cmp dword [esi + 0x7ee], 8
jne 0x40c19e
lea ecx, [esi + 0xd]
call fcn.00414c70
cmp dword [eax + 0x60], 0
jne 0x40c19e
push dword [ebp - 0x38]
mov eax, dword [esi + 1]
push dword [ebp - 0x30]
mov byte [ebp - 0x52], 0x17
push 0
push 0
sub esp, 8
mov ecx, esp
push 0
mov dword [ecx], eax
mov ax, word [esi + 5]
push 8
push 3
mov word [ecx + 4], ax
lea eax, [ebp - 0x52]
push 8
push eax
mov ecx, edi
call fcn.0040a710
mov eax, dword [esi + 0x2e0]
add eax, dword [ebp - 0x24]
mov dword [esi + 0x6b8], eax
lea eax, [edi + 0x3ad]
push eax
push dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
lea edx, [esi + 0xd]
push dword [ebp - 0x30]
mov dword [ebp - 0x44], edx
push dword [edi + 0x80d]
sub esp, 8
mov ecx, esp
push dword [edi + 0x816]
mov dword [ecx], eax
mov ax, word [ebp - 0x14]
mov word [ecx + 4], ax
mov ecx, edx
call fcn.004131f0
cmp byte [esi + 0x2d8], 0
jne 0x40d3b2
mov eax, dword [esi + 0x7ee]
cmp eax, 1
je 0x40c1f3
cmp eax, 2
jne 0x40c267
mov dword [ebp - 0x3c], 0
lea edx, [esi + 0x75]
nop dword [eax]
mov ecx, dword [edx + 4]
mov eax, dword [edx]
cmp eax, ecx
ja 0x40c20d
sub ecx, eax
jmp 0x40c214
mov eax, dword [edx + 8]
sub eax, dword [edx]
add ecx, eax
test ecx, ecx
jne 0x40c261
mov eax, dword [ebp - 0x3c]
add edx, 0x10
inc eax
mov dword [ebp - 0x3c], eax
cmp eax, 4
jb 0x40c200
cmp dword [esi + 0x2d], ecx
lea eax, [esi + 0xd]
ja 0x40c261
cmp dword [eax + 0x4c], ecx
jne 0x40c261
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0x10]
cmp edx, ecx
ja 0x40c242
sub ecx, edx
jmp 0x40c24c
mov eax, dword [eax + 0x18]
sub eax, edx
add ecx, eax
lea eax, [esi + 0xd]
test ecx, ecx
jne 0x40c261
cmp dword [eax + 4], ecx
ja 0x40c261
cmp dword [eax + 0xa8], ecx
jbe 0x40d3b2
mov eax, dword [esi + 0x7ee]
cmp eax, 3
jne 0x40c276
cmp dword [esi + 0x2d], 0
jbe 0x40d3b2
cmp eax, 4
je 0x40c28a
cmp eax, 5
je 0x40c28a
cmp eax, 6
je 0x40c28a
cmp eax, 7
jne 0x40c2ae
mov ecx, dword [esi + 0x7cd]
mov edx, dword [ebp - 0x24]
cmp edx, ecx
jbe 0x40c2b1
mov eax, edx
sub eax, ecx
cmp eax, 0x2710
ja 0x40d3b2
mov eax, dword [esi + 0x7ee]
jmp 0x40c2b1
mov edx, dword [ebp - 0x24]
cmp byte [esi + 0x2d9], 0
je 0x40c302
push 0x16
call fcn.00480d0c
mov edx, eax
add esp, 4
lea ecx, [edx + 0x15]
mov dword [edx + 0x10], ecx
mov dword [edx + 8], 1
mov byte [edx + 0x14], 0
mov dword [edx + 0xc], 8
mov byte [ecx], 0x26
mov ecx, dword [ebp - 0x18]
mov dword [edx + 2], ecx
mov ecx, edi
mov ax, word [ebp - 0x14]
mov word [edx + 6], ax
mov eax, dword [ebp - 0x34]
push edx
mov word [edx], ax
call fcn.0040abc0
jmp 0x40d4bf
cmp eax, 8
jne 0x40c34a
cmp edx, dword [esi + 0x6b4]
jbe 0x40c34a
cmp byte [edi + 6], 0
jne 0x40c323
mov eax, 0xffff
cmp word [esi + 0x6b2], ax
jne 0x40c34a
push 1
sub esp, 8
lea eax, [edx + 0x1388]
mov ecx, esp
mov dword [esi + 0x6b4], eax
mov eax, dword [ebp - 0x18]
mov dword [ecx], eax
mov ax, word [ebp - 0x14]
mov word [ecx + 4], ax
mov ecx, edi
call fcn.0040a2a0
lea eax, [ebp - 0x1c]
push eax
lea ecx, [esi + 0xd]
call fcn.00412fb0
mov dword [ebp - 0x3c], eax
test eax, eax
jle 0x40d4bf
mov edx, dword [ebp - 0x1c]
lea esi, [eax + 7]
sar esi, 3
cmp dword [edi + 0x7d1], 0
mov dword [ebp - 0x4c], esi
je 0x40c53c
push 0x240
mov dword [ebp - 0x2f8], 0
mov dword [ebp - 0x2f0], 0
call fcn.00480d0c
add esp, 4
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x2f4], 0x1200
mov byte [ebp - 0x2e8], 1
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x1c]
push esi
push ecx
lea ecx, [ebp - 0x2f8]
mov dword [ebp - 0x2f8], 0
mov dword [ebp - 0x2f0], 0
call fcn.00402270
mov esi, dword [ebp - 0x2f8]
mov dword [ebp - 0x6c], esi
lea ecx, [esi + 7]
sar ecx, 3
add dword [edi + 0x7dd], ecx
test esi, esi
je 0x40c50d
push ecx
call fcn.00478b1b
mov ecx, dword [ebp - 0x2f8]
add esp, 4
add ecx, 7
mov dword [ebp - 0x2c], eax
sar ecx, 3
push ecx
push dword [ebp - 0x2ec]
push eax
call fcn.0047a8c0
mov ecx, dword [edi + 0x7d1]
add esp, 0xc
mov dword [ebp - 0x2f8], 0
xor edi, edi
mov dword [ebp - 0x2f0], 0
mov dword [ebp - 0x8c], ecx
mov esi, dword [ecx]
mov byte [ebp - 0xba8], 0
nop dword [eax]
mov edx, dword [ebp - 0x2c]
mov eax, edi
sar eax, 3
mov ecx, edi
and ecx, 7
inc edi
mov dl, byte [eax + edx]
mov eax, 0x80
sar eax, cl
test al, dl
je 0x40c471
mov esi, dword [esi + 9]
jmp 0x40c474
mov esi, dword [esi + 5]
cmp dword [esi + 5], 0
jne 0x40c498
cmp dword [esi + 9], 0
jne 0x40c498
push 1
push 8
push esi
lea ecx, [ebp - 0x2f8]
call fcn.004022e0
mov eax, dword [ebp - 0x8c]
mov esi, dword [eax]
sub dword [ebp - 0x6c], 1
jne 0x40c450
mov ecx, dword [ebp - 0x2f8]
mov edi, dword [ebp - 0x68]
push dword [ebp - 0x2c]
lea ecx, [ecx + 7]
sar ecx, 3
add dword [edi + 0x7e5], ecx
call fcn.00478b24
mov esi, dword [ebp - 0x2f8]
add esp, 4
lea esi, [esi + 7]
sar esi, 3
cmp esi, dword [ebp - 0x4c]
jle 0x40c4f8
push dword [ebp - 0x1c]
call fcn.00478b24
add esp, 4
push esi
call fcn.00478b1b
add esp, 4
mov dword [ebp - 0x1c], eax
push esi
push dword [ebp - 0x2ec]
push eax
call fcn.0047a8c0
add esp, 0xc
jmp 0x40c50f
mov eax, dword [ebp - 0x1c]
push esi
push dword [ebp - 0x2ec]
push eax
call fcn.0047a8c0
add esp, 0xc
jmp 0x40c50f
xor esi, esi
mov dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x2e8], 0
je 0x40c539
cmp dword [ebp - 0x2f4], 0x800
jle 0x40c539
push dword [ebp - 0x2ec]
call fcn.00480cf1
add esp, 4
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x7ee]
mov dword [ebp - 0x2c], ecx
cmp ecx, 6
jne 0x40c5e5
cmp byte [edx], 0xb
mov eax, dword [ebp - 0x18]
jne 0x40c584
push esi
push edx
sub esp, 8
mov ecx, esp
push dword [ebp - 0x28]
mov dword [ecx], eax
mov ax, word [ebp - 0x14]
mov word [ecx + 4], ax
mov ecx, edi
call fcn.00408f50
push dword [ebp - 0x1c]
call fcn.00478b24
add esp, 4
jmp 0x40d375
push 0
push 1
push 0
sub esp, 8
mov ecx, esp
mov dword [ecx], eax
movzx eax, word [ebp - 0x14]
mov word [ecx + 4], ax
mov ecx, edi
call fcn.0040a3e0
mov eax, dword [edi]
sub esp, 8
mov edx, dword [ebp - 0x28]
mov ecx, esp
mov edi, dword [eax + 0x64]
mov esi, dword [edx + 0x2e0]
mov edx, dword [eax + 0xb8]
mov eax, dword [ebp - 0x18]
mov dword [ecx], eax
movzx eax, word [ebp - 0x14]
mov word [ecx + 4], ax
mov ecx, dword [ebp - 0x68]
call edx
mov ecx, dword [ebp - 0x68]
push esi
push eax
call edi
push dword [ebp - 0x1c]
call fcn.00478b24
mov edi, dword [ebp - 0x68]
add esp, 4
jmp 0x40d375
mov al, byte [edx]
cmp al, 0xb
jne 0x40c61f
cmp ecx, 8
je 0x40c611
mov eax, dword [ebp - 0x18]
push esi
push edx
sub esp, 8
mov ecx, esp
push dword [ebp - 0x28]
mov dword [ecx], eax
mov ax, word [ebp - 0x14]
mov word [ecx + 4], ax
mov ecx, edi
call fcn.00408f50
mov edx, dword [ebp - 0x1c]
push edx
call fcn.00478b24
add esp, 4
jmp 0x40d375
cmp al, 0x1e
jne 0x40c77f
cmp esi, 7
jne 0x40caf1
cmp ecx, 5
je 0x40c65f
cmp ecx, esi
je 0x40c65f
mov eax, dword [ebp - 0x18]
cmp eax, dword [edi + 0x22d]
jne 0x40c651
mov ax, word [ebp - 0x14]
cmp ax, word [edi + 0x231]
je 0x40c65f
push edx
call fcn.00478b24
add esp, 4
jmp 0x40d375
mov eax, dword [ebp - 0x28]
push 1
sub esp, 8
mov ecx, esp
mov dword [eax + 0x7ee], 8
mov eax, dword [ebp - 0x18]
mov dword [ecx], eax
movzx eax, word [ebp - 0x14]
mov word [ecx + 4], ax
mov ecx, edi
call fcn.0040a2a0
mov eax, dword [ebp - 0x18]
push 1
sub esp, 8
mov ecx, esp
mov dword [ecx], eax
movzx eax, word [ebp - 0x14]
mov word [ecx + 4], ax
mov ecx, edi
call fcn.0040a0a0
mov esi, dword [ebp - 0x1c]
mov dword [ebp - 0x758], 0x38
mov byte [ebp - 0x748], 0
mov dword [ebp - 0x754], 0x38
mov dword [ebp - 0x74c], esi
push 1
push 0x20
lea eax, [ebp - 0x78]
mov dword [ebp - 4], 1
push eax
lea ecx, [ebp - 0x758]
mov dword [ebp - 0x750], 8
call fcn.00402410
push 1
push 0x10
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x758]
call fcn.00402410
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x78]
push 0x15
mov dword [ecx + 7], eax
movzx eax, word [ebp - 0x74]
mov word [ecx + 0xb], ax
call fcn.00480d0c
mov ecx, dword [ebp - 0x3c]
add esp, 4
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], esi
mov dword [eax + 8], 7
mov byte [eax + 0x14], 1
mov ecx, dword [ebp - 0x18]
mov dword [eax + 2], ecx
mov cx, word [ebp - 0x14]
mov word [eax + 6], cx
mov ecx, dword [ebp - 0x34]
mov word [eax], cx
mov ecx, edi
push eax
call fcn.0040abc0
mov dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x748], 0
je 0x40d375
cmp dword [ebp - 0x754], 0x800
jle 0x40d375
push dword [ebp - 0x74c]
call fcn.00480cf1
add esp, 4
jmp 0x40d375
cmp al, 9
jne 0x40c8f5
cmp esi, 9
jne 0x40caf1
push 1
push 0x20
lea eax, [ebp - 0x70]
mov dword [ebp - 0x870], 0x48
push eax
lea ecx, [ebp - 0x870]
mov byte [ebp - 0x860], 0
mov dword [ebp - 0x86c], 0x48
mov dword [ebp - 0x864], edx
mov dword [ebp - 0x868], 8
call fcn.00402410
push 1
push 0x20
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x870]
call fcn.00402410
call fcn.00403220
push 0
mov ecx, eax
mov eax, edx
push 0x3e8
push eax
push ecx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x38], eax
call fcn.004a1970
mov esi, eax
xor edx, edx
sub eax, dword [ebp - 0x70]
cmp esi, dword [ebp - 0x70]
mov dword [ebp - 0x24], esi
mov esi, dword [ebp - 0x28]
cmova edx, eax
mov eax, dword [esi + 0x6ae]
add eax, 0x118
lea eax, [eax + eax*2]
lea eax, [esi + eax*2]
mov dword [ebp - 0x4c], eax
movzx eax, word [eax]
test eax, eax
je 0x40c842
lea eax, [eax + eax*2]
cmp edx, eax
jae 0x40c8ba
cmp edx, 0x4b0
jae 0x40c8ba
movzx eax, dx
mov ecx, eax
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x4c]
mov word [ecx], ax
mov eax, dword [ebp - 0x70]
add eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x90]
shr eax, 1
sub ecx, eax
mov eax, dword [esi + 0x6ae]
lea eax, [eax + eax*2]
mov dword [esi + eax*2 + 0x692], ecx
movzx eax, word [esi + 0x6b2]
mov ecx, eax
cmp ax, word [ebp - 0xa0]
je 0x40c886
cmp ecx, edx
jle 0x40c892
mov eax, dword [ebp - 0x2c]
mov word [esi + 0x6b2], ax
jmp 0x40c895
mov eax, dword [ebp - 0x2c]
movzx eax, ax
lea ecx, [esi + 0xd]
push eax
call fcn.00414bf0
inc dword [esi + 0x6ae]
cmp dword [esi + 0x6ae], 5
jne 0x40c8ba
mov dword [esi + 0x6ae], 0
push dword [ebp - 0x1c]
call fcn.00478b24
add esp, 4
cmp byte [ebp - 0x860], 0
je 0x40d375
cmp dword [ebp - 0x86c], 0x800
jle 0x40d375
push dword [ebp - 0x864]
call fcn.00480cf1
add esp, 4
jmp 0x40d375
cmp al, 6
jne 0x40cad2
cmp esi, 5
jne 0x40caf1
mov dword [ebp - 0x988], 0x28
mov byte [ebp - 0x978], 0
mov dword [ebp - 0x984], 0x28
mov dword [ebp - 0x97c], edx
push 1
push 0x20
lea eax, [ebp - 0xa4]
mov dword [ebp - 4], 2
push eax
lea ecx, [ebp - 0x988]
mov dword [ebp - 0x980], 8
call fcn.00402410
lea eax, [ebp - 0x3ff]
mov dword [ebp - 0x410], 0
mov dword [ebp - 0x40c], 0x800
mov dword [ebp - 0x408], 0
mov dword [ebp - 0x404], eax
mov byte [ebp - 0x400], 1
push 1
push 8
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x410]
mov byte [ebp - 0x58], 9
call fcn.004022e0
mov eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x410]
push 1
mov dword [ebp - 0xa8], eax
lea eax, [ebp - 0xa8]
push 0x20
push eax
call fcn.004022e0
cmp byte [0x5e6940], 0
jne 0x40c9d7
push 0x5e6944
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov byte [0x5e6940], 1
lea eax, [ebp - 0xc0]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
push 0
push 0x3e8
push dword [ebp - 0xbc]
push dword [ebp - 0xc0]
call fcn.004796a0
push dword [0x5e6948]
push dword [0x5e6944]
push edx
push eax
call fcn.004a1970
mov esi, eax
mov dword [ebp - 0x24], esi
call fcn.00403220
push 1
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0x410]
push 0x20
lea eax, [ebp - 0x94]
mov dword [ebp - 0x38], edx
push eax
mov dword [ebp - 0x94], esi
call fcn.004022e0
mov eax, dword [ebp - 0x18]
push 0
push esi
push 0
push 0
sub esp, 8
mov ecx, esp
push 0
push 6
push 0
push dword [ebp - 0x410]
mov dword [ecx], eax
mov ax, word [ebp - 0x14]
push dword [ebp - 0x404]
mov word [ecx + 4], ax
mov ecx, edi
call fcn.0040a710
push dword [ebp - 0x1c]
call fcn.00478b24
add esp, 4
cmp byte [ebp - 0x400], 0
je 0x40ca9b
cmp dword [ebp - 0x40c], 0x800
jle 0x40ca9b
push dword [ebp - 0x404]
call fcn.00480cf1
add esp, 4
mov dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x978], 0
je 0x40d375
cmp dword [ebp - 0x984], 0x800
jle 0x40d375
push dword [ebp - 0x97c]
call fcn.00480cf1
add esp, 4
jmp 0x40d375
cmp al, 0x20
jne 0x40caf1
mov eax, dword [ebp - 0x28]
push edx
mov dword [eax + 0x7ee], 3
call fcn.00478b24
add esp, 4
jmp 0x40d375
cmp al, 0x11
jne 0x40cc2f
lea eax, [esi*8]
mov byte [ebp - 0xa90], 0
mov dword [ebp - 0xaa0], eax
mov dword [ebp - 0xa9c], eax
mov dword [ebp - 0xa94], edx
push ecx
push 8
lea eax, [ebp - 0x3d]
mov dword [ebp - 4], 4
push eax
lea ecx, [ebp - 0xaa0]
mov dword [ebp - 0xa98], 8
call fcn.004024e0
mov eax, dword [ebp - 0x28]
xor ecx, ecx
mov esi, dword [eax + 0x7e6]
test esi, esi
je 0x40cb6b
mov eax, dword [eax + 0x7e2]
mov dword [ebp - 0x4c], eax
mov edx, dword [eax + ecx*4]
test edx, edx
je 0x40cb66
movzx eax, byte [ebp - 0x3d]
cmp dword [edx], eax
je 0x40cb6e
mov eax, dword [ebp - 0x4c]
inc ecx
cmp ecx, esi
jb 0x40cb54
or cl, 0xff
movzx esi, byte [ebp - 0x3d]
movzx edx, cl
cmp edx, esi
je 0x40cbed
cmp cl, 0xff
je 0x40cb9c
mov eax, dword [ebp - 0x28]
push 9
mov eax, dword [eax + 0x7e2]
mov ecx, dword [eax + edx*4]
push ecx
mov dword [eax + edx*4], 0
call fcn.00478b59
add esp, 8
push 9
call fcn.00478b29
mov ecx, dword [ebp - 0x28]
add esp, 4
add ecx, 0x7e2
mov dword [ebp - 0x4c], eax
mov dword [eax], esi
mov dword [eax + 4], 0
cmp esi, dword [ecx + 4]
jae 0x40cbe5
mov ecx, dword [ecx]
mov eax, dword [ecx + esi*4]
test eax, eax
je 0x40cbd4
push 9
push eax
call fcn.00478b59
add esp, 8
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [eax + 0x7e2]
mov dword [eax + esi*4], ecx
jmp 0x40cbed
push esi
push ecx
push eax
call fcn.00417cb0
push dword [ebp - 0x1c]
call fcn.00478b24
add esp, 4
mov dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0xa90], 0
je 0x40d375
cmp dword [ebp - 0xa9c], 0x800
jle 0x40d375
push dword [ebp - 0xa94]
call fcn.00480cf1
add esp, 4
jmp 0x40d375
cmp al, 0xa
jne 0x40cc5e
mov eax, dword [ebp - 0x18]
push 1
sub esp, 8
mov ecx, esp
mov dword [ecx], eax
mov ax, word [ebp - 0x14]
mov word [ecx + 4], ax
mov ecx, edi
call fcn.0040a0a0
push dword [ebp - 0x1c]
call fcn.00478b24
add esp, 4
jmp 0x40d375
cmp al, 0x29
jne 0x40ccc9
mov ecx, dword [ebp - 0x28]
lea eax, [esi - 1]
add ecx, 0x6bc
inc edx
mov dword [ebp - 0x4c], edx
mov dword [ecx], 0
mov dword [ecx + 8], 0
test eax, eax
je 0x40d33c
shl eax, 3
push eax
call fcn.004025b0
mov ecx, dword [ebp - 0x28]
lea eax, [esi - 1]
push eax
push dword [ebp - 0x4c]
mov eax, dword [ecx + 0x6bc]
add eax, 7
sar eax, 3
add eax, dword [ecx + 0x6c8]
push eax
call fcn.0047a8c0
mov ecx, dword [ebp - 0x28]
lea eax, [esi - 1]
shl eax, 3
add esp, 0xc
add dword [ecx + 0x6bc], eax
jmp 0x40d33c
cmp al, 0xf
jne 0x40ccf1
cmp esi, 0x39
jne 0x40d32f
push edx
push dword [ebp - 0x28]
mov ecx, edi
call fcn.00409c80
push dword [ebp - 0x1c]
call fcn.00478b24
add esp, 4
jmp 0x40d375
cmp al, 0x10
jne 0x40cf96
cmp esi, 0x35
jne 0x40d32f
mov dword [ebp - method.CSHA1.virtual_0], vtable.CSHA1.0
mov dword [ebp - 4], 5
lea eax, [ebp - 0x18]
push 4
push eax
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 0x1d], 0
mov dword [ebp - 0x19c], 0x67452301
mov dword [ebp - 0x198], 0xefcdab89
mov dword [ebp - 0x194], 0x98badcfe
mov dword [ebp - 0x190], 0x10325476
mov dword [ebp - 0x18c], 0xc3d2e1f0
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x184], 0
call fcn.004190a0
push 2
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x1a0]
call fcn.004190a0
push 0x14
lea eax, [edi + 0x991]
push eax
lea ecx, [ebp - 0x1a0]
call fcn.004190a0
lea ecx, [ebp - 0x1a0]
call fcn.00419160
mov esi, dword [ebp - 0x1c]
lea ecx, [ebp - 0x140]
mov dword [ebp - 0x2c], 0x10
lea edx, [esi + 1]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x40cdca
add ecx, 4
add edx, 4
sub dword [ebp - 0x2c], 4
jae 0x40cdb1
mov al, 1
jmp 0x40ce7a
push 4
lea eax, [ebp - 0x18]
mov dword [ebp - 0x19c], 0x67452301
push eax
lea ecx, [ebp - 0x1a0]
mov dword [ebp - 0x198], 0xefcdab89
mov dword [ebp - 0x194], 0x98badcfe
mov dword [ebp - 0x190], 0x10325476
mov dword [ebp - 0x18c], 0xc3d2e1f0
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x184], 0
call fcn.004190a0
push 2
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x1a0]
call fcn.004190a0
push 0x14
lea eax, [edi + 0x9a5]
push eax
lea ecx, [ebp - 0x1a0]
call fcn.004190a0
lea ecx, [ebp - 0x1a0]
call fcn.00419160
lea ecx, [ebp - 0x140]
mov dword [ebp - 0x2c], 0x10
lea edx, [esi + 1]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x40ce77
add ecx, 4
add edx, 4
sub dword [ebp - 0x2c], 4
jae 0x40ce61
mov al, 1
jmp 0x40ce7a
mov al, byte [ebp - 0x1d]
test al, al
je 0x40cf31
cmp byte [edi + 0x8b6], 0
movups xmm0, xmmword [esi + 0x15]
movups xmmword [ebp - 0x1c0], xmm0
movups xmm0, xmmword [esi + 0x25]
movups xmmword [ebp - 0x1b0], xmm0
je 0x40ced4
sub esp, 0x10
lea eax, [edi + 0x957]
lea edx, [ebp - 0x1c0]
lea ecx, [ebp - 0x1e0]
push eax
lea eax, [edi + 0x927]
push eax
lea eax, [edi + 0x8f7]
push eax
lea eax, [edi + 0x8b7]
push eax
call fcn.0040dd30
add esp, 0x20
lea edx, [ebp - 0xe8]
xor eax, eax
lea ecx, [esi + 0x10]
cmp edx, ecx
lea edx, [esi + 1]
ja 0x40cf09
lea ecx, [ebp - 0xd9]
cmp ecx, edx
jb 0x40cf09
mov cl, byte [ebp + eax - 0x1e0]
xor cl, byte [edx + eax]
mov byte [ebp + eax - 0xe8], cl
inc eax
cmp eax, 0x10
jl 0x40cef0
jmp 0x40cf1e
movups xmm1, xmmword [edx]
movups xmm0, xmmword [ebp - 0x1e0]
pxor xmm1, xmm0
movups xmmword [ebp - 0xe8], xmm1
push 1
lea eax, [ebp - 0xe8]
mov ecx, edi
push eax
push dword [ebp - 0x28]
call fcn.004092b0
push esi
call fcn.00478b24
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov dword [ebp - method.CSHA1.virtual_0], vtable.CSHA1.0
mov dword [ebp - 0x19c], 0x67452301
mov dword [ebp - 0x198], 0xefcdab89
mov dword [ebp - 0x194], 0x98badcfe
mov dword [ebp - 0x190], 0x10325476
mov dword [ebp - 0x18c], 0xc3d2e1f0
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x184], 0
jmp 0x40d375
cmp al, 0x17
jne 0x40cfb1
cmp esi, 1
jne 0x40d32f
push edx
call fcn.00478b24
add esp, 4
jmp 0x40d375
cmp al, 0x22
jne 0x40d32f
cmp esi, 0xd
jne 0x40d32f
cmp ecx, 5
je 0x40cfd9
cmp ecx, 4
je 0x40cfd9
cmp byte [edi + 0x9b9], 0
jne 0x40cfd9
xor al, al
jmp 0x40cfdb
mov al, 1
test al, al
je 0x40d305
mov dword [ebp - 0x640], 0x68
mov byte [ebp - 0x630], 0
mov dword [ebp - 0x63c], 0x68
mov dword [ebp - 0x634], edx
push 1
push 0x20
lea eax, [ebp - 0x80]
mov dword [ebp - 4], 6
push eax
lea ecx, [ebp - 0x640]
mov dword [ebp - 0x638], 8
call fcn.00402410
push 1
push 0x10
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x640]
call fcn.00402410
push 1
push 0x10
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0x640]
call fcn.00402410
cmp dword [ebp - 0x2c], 5
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x80]
mov dword [ecx + 7], eax
mov ax, word [ebp - 0x7c]
mov word [ecx + 0xb], ax
mov dword [ecx + 0x7ee], 8
je 0x40d0d4
cmp byte [ecx + 0x7e1], 0
je 0x40d0ca
lea eax, [ecx + 0x7d1]
mov dword [ebp - 0x4c], eax
test eax, eax
je 0x40d0ca
mov ecx, dword [ebp - 0x44]
xor dl, dl
lea esi, [ecx + 0x3fb]
mov byte [esi + 0x249], 1
push eax
push ecx
mov ecx, esi
call fcn.00417180
add esp, 8
mov dl, 1
push dword [ebp - 0x4c]
push ecx
lea ecx, [esi + 0x11a]
call fcn.00417180
add esp, 4
lea ecx, [esi + 0x234]
call fcn.00417350
add esp, 4
jmp 0x40d0d4
mov eax, dword [ebp - 0x44]
mov byte [eax + 0x644], 0
push 0x15
call fcn.00480d0c
mov esi, eax
add esp, 4
mov eax, dword [ebp - 0x1c]
mov dword [esi + 0x10], eax
mov dword [esi + 8], 0xd
mov byte [esi + 0x14], 1
mov dword [esi + 0xc], 0x68
mov ecx, dword [ebp - 0x18]
mov dword [esi + 2], ecx
movzx ecx, word [ebp - 0x14]
mov word [esi + 6], cx
mov eax, dword [ebp - 0x18]
mov cx, word [ebp - 0x14]
mov dword [ebp - 0xb8], eax
mov word [ebp - 0xb4], cx
cmp eax, 0xffffffff
jne 0x40d129
mov eax, 0xffff
cmp cx, ax
je 0x40d154
lea ecx, [ebp - 0x5d]
push ecx
lea ecx, [ebp - 0xb8]
push ecx
lea ecx, [edi + 0x338]
call fcn.0040d620
cmp byte [ebp - 0x5d], 0
je 0x40d154
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x338]
mov eax, dword [eax + ecx*2 + 6]
jmp 0x40d157
or eax, 0xffffffff
push esi
mov ecx, edi
mov word [esi], ax
call fcn.0040abc0
lea eax, [ebp - 0x517]
mov dword [ebp - 0x528], 0
mov dword [ebp - 0x520], 0
mov dword [ebp - 0x51c], eax
mov dword [ebp - 0x524], 0x800
mov byte [ebp - 0x518], 1
push 1
push 8
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x528]
mov byte [ebp - 0x5c], 0x1e
call fcn.004022e0
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x528]
push 1
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0x98]
push 0x20
push eax
call fcn.004022e0
movzx eax, word [ebp - 0x14]
lea ecx, [ebp - 0x528]
push 1
mov dword [ebp - 0x9c], eax
lea eax, [ebp - 0x9c]
push 0x10
push eax
call fcn.004022e0
cmp byte [0x5e6940], 0
jne 0x40d208
push 0x5e6944
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov byte [0x5e6940], 1
lea eax, [ebp - 0xc8]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
push 0
push 0x3e8
push dword [ebp - 0xc4]
push dword [ebp - 0xc8]
call fcn.004796a0
push dword [0x5e6948]
push dword [0x5e6944]
push edx
push eax
call fcn.004a1970
push 0
push eax
mov eax, dword [ebp - 0x18]
push 0
push 0
sub esp, 8
mov ecx, esp
push 0
push 8
push 0
push dword [ebp - 0x528]
mov dword [ecx], eax
mov ax, word [ebp - 0x14]
push dword [ebp - 0x51c]
mov word [ecx + 4], ax
mov ecx, edi
call fcn.0040a710
cmp dword [ebp - 0x2c], 5
je 0x40d2ae
mov eax, dword [ebp - 0x18]
push 1
sub esp, 8
mov ecx, esp
mov dword [ecx], eax
movzx eax, word [ebp - 0x14]
mov word [ecx + 4], ax
mov ecx, edi
call fcn.0040a2a0
mov eax, dword [ebp - 0x18]
push 1
sub esp, 8
mov ecx, esp
mov dword [ecx], eax
movzx eax, word [ebp - 0x14]
mov word [ecx + 4], ax
mov ecx, edi
call fcn.0040a0a0
cmp byte [ebp - 0x518], 0
je 0x40d2d1
cmp dword [ebp - 0x524], 0x800
jle 0x40d2d1
push dword [ebp - 0x51c]
call fcn.00480cf1
add esp, 4
mov dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x630], 0
je 0x40d375
cmp dword [ebp - 0x63c], 0x800
jle 0x40d375
push dword [ebp - 0x634]
call fcn.00480cf1
add esp, 4
jmp 0x40d375
mov eax, dword [ebp - 0x18]
push 0
push 1
sub esp, 8
mov ecx, esp
mov dword [ecx], eax
mov ax, word [ebp - 0x14]
mov word [ecx + 4], ax
mov ecx, edi
call fcn.004094c0
push dword [ebp - 0x1c]
call fcn.00478b24
add esp, 4
jmp 0x40d375
cmp esi, 2
jbe 0x40d338
cmp al, 0xc
je 0x40d33c
cmp al, 0x14
jb 0x40d375
push 0x15
call fcn.00480d0c
mov ecx, dword [ebp - 0x1c]
add esp, 4
mov dword [eax + 0x10], ecx
mov ecx, dword [ebp - 0x3c]
mov dword [eax + 8], esi
mov byte [eax + 0x14], 1
mov dword [eax + 0xc], ecx
mov ecx, dword [ebp - 0x18]
mov dword [eax + 2], ecx
mov cx, word [ebp - 0x14]
mov word [eax + 6], cx
mov ecx, dword [ebp - 0x34]
mov word [eax], cx
mov ecx, edi
push eax
call fcn.0040abc0
mov eax, dword [ebp - 0x24]
mov esi, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x38], esi
call fcn.00412fb0
mov dword [ebp - 0x3c], eax
test eax, eax
jg 0x40c361
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x24], edx
jmp 0x40d4c2
mov eax, dword [esi + 0x7ee]
cmp eax, 8
je 0x40d3d0
cmp eax, 4
je 0x40d3d0
cmp eax, 1
je 0x40d3d0
cmp eax, 3
jne 0x40d4a0
push 0x16
call fcn.00480d0c
mov ecx, eax
add esp, 4
mov dword [ebp - 0x4c], ecx
lea edx, [ecx + 0x15]
mov dword [ecx + 8], 1
mov dword [ecx + 0x10], edx
mov byte [ecx + 0x14], 0
mov eax, dword [esi + 0x7ee]
cmp eax, 4
jne 0x40d400
mov byte [edx], 0x1d
jmp 0x40d40a
cmp eax, 8
sete al
add al, 0x20
mov byte [edx], al
mov dword [ecx + 0xc], 8
mov eax, dword [ebp - 0x18]
mov dword [ecx + 2], eax
mov ax, word [ebp - 0x14]
mov word [ecx + 6], ax
mov eax, dword [ebp - 0x34]
mov word [ecx], ax
mov eax, dword [edi + 0x9c6]
mov eax, dword [eax + 5]
cmp eax, dword [edi + 0x9ca]
je 0x40d445
mov eax, dword [edi + 0x9c6]
mov eax, dword [eax + 5]
cmp byte [eax + 4], 1
jne 0x40d46d
mov eax, dword [edi + 0x9c6]
push 9
mov esi, dword [eax + 5]
call fcn.00478b29
mov ecx, dword [edi + 0x9c6]
add esp, 4
mov dword [ecx + 5], eax
mov eax, dword [edi + 0x9c6]
mov eax, dword [eax + 5]
mov dword [eax + 5], esi
mov ecx, dword [edi + 0x9c6]
mov eax, dword [ecx + 5]
mov dword [edi + 0x9c6], eax
mov eax, dword [ebp - 0x4c]
mov dword [ecx], eax
mov eax, dword [edi + 0x9ce]
inc dword [edi + 0x9d6]
mov byte [eax + 4], 1
mov eax, dword [edi + 0x9ce]
mov eax, dword [eax + 5]
mov dword [edi + 0x9ce], eax
mov eax, dword [ebp - 0x18]
push 0
push 1
push 0
sub esp, 8
mov ecx, esp
mov dword [ecx], eax
mov ax, word [ebp - 0x14]
mov word [ecx + 4], ax
mov ecx, edi
call fcn.0040a3e0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x34]
movzx eax, word [edi + 7]
inc ecx
mov dword [ebp - 0x34], ecx
cmp ecx, eax
jb 0x40c0e0
mov ecx, dword [ebp - 0xc]
mov al, 1
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret