Function at 0x4120c0
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x44bd0b
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xa0
mov eax, dword [0x461020]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebx + 0xc]
mov edi, dword [ebx + 0x18]
mov esi, dword [ebx + 0x10]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebx + 0x14]
mov dword [ebp - 0x78], eax
mov eax, dword [ebx + 0x1c]
mov dword [ebp - 0xa8], eax
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x80], ecx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x84]
mov dword [ebp - 4], 0
push eax
call fcn.0040f0d0
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x98], eax
test ecx, ecx
je 0x41216c
mov edx, dword [ecx]
mov edx, dword [edx + 8]
call edx
test eax, eax
je 0x41216c
mov ecx, dword [eax]
push 1
mov edx, dword [ecx]
mov ecx, eax
call edx
mov ecx, dword [ebp - 0x98]
lea edx, [ebp - 0x68]
push edx
mov eax, dword [ecx]
call dword [eax + 0x14]
mov dword [ebp - 4], 1
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x80], ecx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x84]
mov byte [ebp - 4], 2
push eax
call fcn.0040e1f0
mov byte [ebp - 4], 1
add esp, 4
mov ecx, dword [ebp - 0x80]
mov edi, eax
test ecx, ecx
je 0x4121c5
mov edx, dword [ecx]
mov edx, dword [edx + 8]
call edx
test eax, eax
je 0x4121c5
mov ecx, dword [eax]
push 1
mov edx, dword [ecx]
mov ecx, eax
call edx
mov eax, dword [edi]
lea ecx, [ebp - 0x34]
push ecx
push 0x45ae51
push 0x45ae34
mov ecx, edi
call dword [eax + 0x1c]
push dword [ebp - 0x78]
mov edi, dword [ebp - 0xa4]
push esi
mov byte [ebp - 0x7a], 0
call fcn.00413760
add esp, 8
test al, al
jne 0x412327
mov cl, byte [esi + 4]
test cl, cl
jne 0x412238
mov ecx, dword [esi]
test ecx, ecx
je 0x41222c
mov eax, dword [ecx + 0x1c]
mov edx, dword [eax]
test edx, edx
je 0x41221b
mov eax, dword [ecx + 0x2c]
cmp dword [eax], 0
jle 0x41221b
movzx eax, byte [edx]
jmp 0x412222
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
call eax
cmp eax, 0xffffffff
je 0x41222c
mov byte [esi + 5], al
jmp 0x412232
mov dword [esi], 0
mov byte [esi + 4], 1
mov cl, 1
mov al, byte [esi + 5]
cmp al, byte [ebp - 0x1d]
jne 0x412297
mov eax, edi
mov byte [eax], 0x2b
lea edi, [eax + 1]
mov ecx, dword [esi]
test ecx, ecx
je 0x412287
mov eax, dword [ecx + 0x1c]
cmp dword [eax], 0
je 0x412271
mov edx, dword [ecx + 0x2c]
mov eax, dword [edx]
test eax, eax
jle 0x412271
dec eax
mov dword [edx], eax
mov ecx, dword [ecx + 0x1c]
mov edx, dword [ecx]
lea eax, [edx + 1]
mov dword [ecx], eax
movzx eax, byte [edx]
jmp 0x412278
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
call eax
cmp eax, 0xffffffff
je 0x412287
xor al, al
mov byte [esi + 4], al
jmp 0x412327
mov al, 1
mov dword [esi], 0
mov byte [esi + 4], al
jmp 0x412327
test cl, cl
jne 0x4122d5
mov ecx, dword [esi]
test ecx, ecx
je 0x4122c8
mov eax, dword [ecx + 0x1c]
mov edx, dword [eax]
test edx, edx
je 0x4122b7
mov eax, dword [ecx + 0x2c]
cmp dword [eax], 0
jle 0x4122b7
movzx eax, byte [edx]
jmp 0x4122be
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
call eax
cmp eax, 0xffffffff
je 0x4122c8
mov byte [esi + 5], al
jmp 0x4122d1
mov al, byte [esi + 5]
mov dword [esi], 0
mov byte [esi + 4], 1
cmp al, byte [ebp - 0x1e]
jne 0x412327
mov eax, edi
mov byte [eax], 0x2d
lea edi, [eax + 1]
mov ecx, dword [esi]
test ecx, ecx
je 0x41231d
mov eax, dword [ecx + 0x1c]
cmp dword [eax], 0
je 0x41230b
mov edx, dword [ecx + 0x2c]
mov eax, dword [edx]
test eax, eax
jle 0x41230b
dec eax
mov dword [edx], eax
mov ecx, dword [ecx + 0x1c]
mov edx, dword [ecx]
lea eax, [edx + 1]
mov dword [ecx], eax
movzx eax, byte [edx]
jmp 0x412312
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
call eax
cmp eax, 0xffffffff
je 0x41231d
mov byte [esi + 4], 0
jmp 0x412327
mov dword [esi], 0
mov byte [esi + 4], 1
mov word [edi], 0x7830
add edi, 2
mov dword [ebp - 0x70], edi
mov edi, dword [ebp - 0x78]
push edi
push esi
mov byte [ebp - 0x69], 0
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x88], 0
call fcn.00413760
add esp, 8
test al, al
jne 0x4124d5
cmp byte [esi + 4], al
jne 0x41239b
mov ecx, dword [esi]
test ecx, ecx
je 0x412391
mov eax, dword [ecx + 0x1c]
mov edx, dword [eax]
test edx, edx
je 0x412380
mov eax, dword [ecx + 0x2c]
cmp dword [eax], 0
jle 0x412380
movzx eax, byte [edx]
jmp 0x412387
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
call eax
cmp eax, 0xffffffff
je 0x412391
mov byte [esi + 5], al
jmp 0x412397
mov dword [esi], 0
mov byte [esi + 4], 1
mov al, byte [esi + 5]
cmp al, byte [ebp - 0x34]
jne 0x4124d5
mov ecx, dword [esi]
test ecx, ecx
je 0x4123e0
mov eax, dword [ecx + 0x1c]
cmp dword [eax], 0
je 0x4123d0
mov edx, dword [ecx + 0x2c]
mov eax, dword [edx]
test eax, eax
jle 0x4123d0
dec eax
mov dword [edx], eax
mov ecx, dword [ecx + 0x1c]
mov edx, dword [ecx]
lea eax, [edx + 1]
mov dword [ecx], eax
movzx eax, byte [edx]
jmp 0x4123d7
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
call eax
cmp eax, 0xffffffff
je 0x4123e0
xor al, al
jmp 0x4123e8
mov dword [esi], 0
mov al, 1
push edi
push esi
mov byte [esi + 4], al
call fcn.00413760
add esp, 8
test al, al
jne 0x4124d1
mov cl, byte [esi + 4]
test cl, cl
jne 0x41243d
mov ecx, dword [esi]
test ecx, ecx
je 0x412431
mov eax, dword [ecx + 0x1c]
mov edx, dword [eax]
test edx, edx
je 0x412420
mov eax, dword [ecx + 0x2c]
cmp dword [eax], 0
jle 0x412420
movzx eax, byte [edx]
jmp 0x412427
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
call eax
cmp eax, 0xffffffff
je 0x412431
mov byte [esi + 5], al
jmp 0x412437
mov dword [esi], 0
mov byte [esi + 4], 1
mov cl, 1
mov al, byte [esi + 5]
cmp al, byte [ebp - 0x1b]
je 0x412488
test cl, cl
jne 0x412483
mov ecx, dword [esi]
test ecx, ecx
je 0x412476
mov eax, dword [ecx + 0x1c]
mov edx, dword [eax]
test edx, edx
je 0x412465
mov eax, dword [ecx + 0x2c]
cmp dword [eax], 0
jle 0x412465
movzx eax, byte [edx]
jmp 0x41246c
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
call eax
cmp eax, 0xffffffff
je 0x412476
mov byte [esi + 5], al
jmp 0x41247f
mov al, byte [esi + 5]
mov dword [esi], 0
mov byte [esi + 4], 1
cmp al, byte [ebp - 0x1c]
jne 0x4124d1
mov ecx, dword [esi]
test ecx, ecx
je 0x4124c4
mov eax, dword [ecx + 0x1c]
cmp dword [eax], 0
je 0x4124b1
mov edx, dword [ecx + 0x2c]
mov eax, dword [edx]
test eax, eax
jle 0x4124b1
dec eax
mov dword [edx], eax
mov ecx, dword [ecx + 0x1c]
mov edx, dword [ecx]
lea eax, [edx + 1]
mov dword [ecx], eax
movzx eax, byte [edx]
jmp 0x4124b8
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
call eax
cmp eax, 0xffffffff
je 0x4124c4
xor al, al
mov byte [esi + 4], al
jmp 0x4124d5
mov al, 1
mov dword [esi], 0
mov byte [esi + 4], al
jmp 0x4124d5
mov byte [ebp - 0x69], 1
mov ecx, dword [ebp - 0xa8]
mov eax, 0x24
mov edx, 0x300
cmp dword [ecx], 0x3b9aca00
cmove eax, edx
cmp dword [ebp - 0x54], 0x10
mov dword [ebp - 0xa0], eax
lea eax, [ebp - 0x68]
cmovae eax, dword [ebp - 0x68]
mov dword [ebp - 0x94], eax
mov al, byte [eax]
cmp al, 0x7f
je 0x41286e
test al, al
jle 0x41286e
cmp dword [ebp - 0x58], 0
jne 0x412523
mov byte [ebp - 0x79], 0
jmp 0x412533
mov ecx, dword [ebp - 0x98]
mov eax, dword [ecx]
mov eax, dword [eax + 0x10]
call eax
mov byte [ebp - 0x79], al
xorps xmm0, xmm0
mov dword [ebp - 0x3c], 1
mov ecx, 0xf
movups xmmword [ebp - 0x4c], xmm0
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x38], ecx
mov byte [ebp - 0x4c], 0
push dword [ebp - 0x78]
mov byte [ebp - 4], 3
xor edi, edi
push esi
call fcn.00413760
add esp, 8
test al, al
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x74], eax
jne 0x4127b0
lea ecx, [esi + 5]
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xac], ecx
cmp byte [esi + 4], 0
jne 0x4125d2
mov ecx, dword [esi]
test ecx, ecx
je 0x4125c2
mov eax, dword [ecx + 0x1c]
mov edx, dword [eax]
test edx, edx
je 0x4125a4
mov eax, dword [ecx + 0x2c]
cmp dword [eax], 0
jle 0x4125a4
movzx eax, byte [edx]
jmp 0x4125ab
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
call eax
cmp eax, 0xffffffff
je 0x4125c2
mov edx, dword [ebp - 0xac]
mov ecx, edx
mov dword [ebp - 0x9c], ecx
mov byte [edx], al
jmp 0x4125ce
mov ecx, dword [ebp - 0x9c]
mov dword [esi], 0
mov byte [esi + 4], 1
mov al, byte [ecx]
mov byte [ebp - 0x50], al
lea eax, [ebp - 0x18]
push dword [ebp - 0x50]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.00429e20
lea ecx, [ebp - 0x34]
sub eax, ecx
cmp eax, 0x16
jae 0x41265f
mov edx, dword [ebp - 0x8c]
mov byte [ebp - 0x69], 1
cmp dword [ebp - 0xa0], edx
jg 0x41260b
inc dword [ebp - 0x88]
jmp 0x412629
test eax, eax
jne 0x412613
test edx, edx
je 0x412629
mov ecx, dword [ebp - 0x70]
mov al, byte [eax + 0x45ae34]
mov byte [ecx], al
inc ecx
inc edx
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x8c], edx
cmp dword [ebp - 0x90], 0x10
lea eax, [ebp - 0x4c]
mov edx, dword [ebp - 0x74]
cmovae eax, edx
setae cl
cmp byte [eax + edi], 0x7f
je 0x412735
test cl, cl
lea eax, [ebp - 0x4c]
cmovne eax, edx
inc byte [eax + edi]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x90], eax
jmp 0x41272f
mov edx, dword [ebp - 0x90]
lea eax, [ebp - 0x4c]
cmp edx, 0x10
cmovae eax, dword [ebp - 0x74]
setae byte [ebp - 0x7b]
cmp byte [eax + edi], 0
je 0x412793
cmp byte [ebp - 0x79], 0
je 0x412793
cmp byte [esi + 4], 0
jne 0x4126e1
mov ecx, dword [esi]
test ecx, ecx
je 0x4126c9
mov eax, dword [ecx + 0x1c]
mov edx, dword [eax]
test edx, edx
je 0x4126a9
mov eax, dword [ecx + 0x2c]
cmp dword [eax], 0
jle 0x4126a9
movzx eax, byte [edx]
jmp 0x4126b0
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
call eax
cmp eax, 0xffffffff
je 0x4126c9
mov ecx, dword [ebp - 0x9c]
mov edx, dword [ebp - 0x90]
mov byte [esi + 4], 1
mov byte [ecx], al
jmp 0x4126e7
mov ecx, dword [ebp - 0x9c]
mov edx, dword [ebp - 0x90]
mov dword [esi], 0
mov byte [esi + 4], 1
jmp 0x4126e7
mov ecx, dword [ebp - 0x9c]
mov al, byte [ecx]
cmp al, byte [ebp - 0x79]
jne 0x412793
mov ecx, dword [ebp - 0x3c]
cmp ecx, edx
jae 0x412712
cmp byte [ebp - 0x7b], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x4c]
cmovne eax, dword [ebp - 0x74]
mov word [eax + ecx], 0
jmp 0x412725
push 0
mov byte [ebp - 0x80], 0
lea ecx, [ebp - 0x4c]
push dword [ebp - 0x80]
push 1
call fcn.00401ef0
mov ecx, dword [ebp - 0x38]
inc edi
mov dword [ebp - 0x90], ecx
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x74], eax
mov ecx, dword [esi]
test ecx, ecx
je 0x41276e
mov eax, dword [ecx + 0x1c]
cmp dword [eax], 0
je 0x41275e
mov edx, dword [ecx + 0x2c]
mov eax, dword [edx]
test eax, eax
jle 0x41275e
dec eax
mov dword [edx], eax
mov ecx, dword [ecx + 0x1c]
mov edx, dword [ecx]
lea eax, [edx + 1]
mov dword [ecx], eax
movzx eax, byte [edx]
jmp 0x412765
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
call eax
cmp eax, 0xffffffff
je 0x41276e
xor al, al
jmp 0x412776
mov dword [esi], 0
mov al, 1
push dword [ebp - 0x78]
mov byte [esi + 4], al
push esi
call fcn.00413760
mov ecx, dword [ebp - 0x9c]
add esp, 8
test al, al
je 0x412582
mov edx, dword [ebp - 0x90]
test edi, edi
je 0x4127b5
cmp edx, 0x10
lea eax, [ebp - 0x4c]
cmovae eax, dword [ebp - 0x74]
cmp byte [eax + edi], 0
jle 0x4127df
inc edi
jmp 0x4127b5
mov edx, 0xf
mov ecx, dword [ebp - 0x94]
nop dword [eax + eax]
test edi, edi
je 0x4127e3
mov cl, byte [ecx]
cmp cl, 0x7f
je 0x4127e3
sub edi, 1
je 0x412840
cmp edx, 0x10
lea eax, [ebp - 0x4c]
cmovae eax, dword [ebp - 0x74]
cmp cl, byte [eax + edi]
je 0x412852
mov byte [ebp - 0x7a], 1
mov byte [ebp - 4], 1
cmp edx, 0x10
jb 0x41281a
lea ecx, [edx + 1]
mov edx, dword [ebp - 0x74]
mov eax, edx
cmp ecx, 0x1000
jb 0x412810
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4130f4
push ecx
push edx
call fcn.0042b48a
add esp, 8
cmp byte [ebp - 0x69], 0
je 0x41298f
cmp dword [ebp - 0x8c], 0
mov edi, dword [ebp - 0x70]
jne 0x412992
mov byte [edi], 0x30
inc edi
mov dword [ebp - 0x70], edi
jmp 0x412992
test edi, edi
jne 0x412852
cmp edx, 0x10
lea eax, [ebp - 0x4c]
cmovae eax, dword [ebp - 0x74]
cmp cl, byte [eax]
jl 0x4127df
mov ecx, dword [ebp - 0x94]
cmp byte [ecx + 1], 0
jle 0x4127c0
inc ecx
mov dword [ebp - 0x94], ecx
jmp 0x4127c0
push edi
push esi
call fcn.00413760
add esp, 8
test al, al
jne 0x41281a
lea eax, [esi + 5]
mov dword [ebp - 0x94], eax
mov edi, eax
cmp byte [esi + 4], 0
jne 0x4128d1
mov ecx, dword [esi]
test ecx, ecx
je 0x4128c7
mov eax, dword [ecx + 0x1c]
mov edx, dword [eax]
test edx, edx
je 0x4128a9
mov eax, dword [ecx + 0x2c]
cmp dword [eax], 0
jle 0x4128a9
movzx eax, byte [edx]
jmp 0x4128b0
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
call eax
cmp eax, 0xffffffff
je 0x4128c1
mov byte [edi], al
mov eax, edi
mov dword [ebp - 0x94], eax
jmp 0x4128cd
mov eax, dword [ebp - 0x94]
mov dword [esi], 0
mov byte [esi + 4], 1
mov al, byte [eax]
mov byte [ebp - 0x80], al
lea eax, [ebp - 0x18]
push dword [ebp - 0x80]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.00429e20
lea ecx, [ebp - 0x34]
sub eax, ecx
cmp eax, 0x16
jae 0x41281a
mov edx, dword [ebp - 0x8c]
cmp dword [ebp - 0xa0], edx
jg 0x41290a
inc dword [ebp - 0x88]
jmp 0x412928
test eax, eax
jne 0x412912
test edx, edx
je 0x412928
mov ecx, dword [ebp - 0x70]
mov al, byte [eax + 0x45ae34]
mov byte [ecx], al
inc ecx
inc edx
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x8c], edx
mov ecx, dword [esi]
mov byte [ebp - 0x69], 1
test ecx, ecx
je 0x412965
mov eax, dword [ecx + 0x1c]
cmp dword [eax], 0
je 0x412955
mov edx, dword [ecx + 0x2c]
mov eax, dword [edx]
test eax, eax
jle 0x412955
dec eax
mov dword [edx], eax
mov ecx, dword [ecx + 0x1c]
mov edx, dword [ecx]
lea eax, [edx + 1]
mov dword [ecx], eax
movzx eax, byte [edx]
jmp 0x41295c
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
call eax
cmp eax, 0xffffffff
je 0x412965
xor al, al
jmp 0x41296d
mov dword [esi], 0
mov al, 1
push dword [ebp - 0x78]
mov byte [esi + 4], al
push esi
call fcn.00413760
add esp, 8
test al, al
mov eax, dword [ebp - 0x94]
je 0x412887
jmp 0x412824
mov edi, dword [ebp - 0x70]
push dword [ebp - 0x78]
push esi
call fcn.00413760
add esp, 8
test al, al
jne 0x412a4e
cmp byte [esi + 4], al
jne 0x4129e2
mov ecx, dword [esi]
test ecx, ecx
je 0x4129d8
mov eax, dword [ecx + 0x1c]
mov edx, dword [eax]
test edx, edx
je 0x4129c7
mov eax, dword [ecx + 0x2c]
cmp dword [eax], 0
jle 0x4129c7
movzx eax, byte [edx]
jmp 0x4129ce
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
call eax
cmp eax, 0xffffffff
je 0x4129d8
mov byte [esi + 5], al
jmp 0x4129de
mov dword [esi], 0
mov byte [esi + 4], 1
mov ecx, dword [ebp - 0x98]
mov al, byte [esi + 5]
mov byte [ebp - 0x7b], al
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
cmp byte [ebp - 0x7b], al
jne 0x412a4e
call fcn.004342fb
mov eax, dword [eax]
mov al, byte [eax]
mov byte [edi], al
inc edi
mov ecx, dword [esi]
mov dword [ebp - 0x70], edi
test ecx, ecx
je 0x412a44
mov eax, dword [ecx + 0x1c]
cmp dword [eax], 0
je 0x412a32
mov edx, dword [ecx + 0x2c]
mov eax, dword [edx]
test eax, eax
jle 0x412a32
dec eax
mov dword [edx], eax
mov ecx, dword [ecx + 0x1c]
mov edx, dword [ecx]
lea eax, [edx + 1]
mov dword [ecx], eax
movzx eax, byte [edx]
jmp 0x412a39
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
call eax
cmp eax, 0xffffffff
je 0x412a44
mov byte [esi + 4], 0
jmp 0x412a4e
mov dword [esi], 0
mov byte [esi + 4], 1
cmp dword [ebp - 0x8c], 0
jne 0x412b3a
push dword [ebp - 0x78]
push esi
call fcn.00413760
add esp, 8
test al, al
jne 0x412b1f
lea edi, [esi + 5]
mov dword [ebp - 0x80], edi
cmp byte [esi + 4], 0
jne 0x412ab6
mov ecx, dword [esi]
test ecx, ecx
je 0x412aac
mov eax, dword [ecx + 0x1c]
mov edx, dword [eax]
test edx, edx
je 0x412a97
mov eax, dword [ecx + 0x2c]
cmp dword [eax], 0
jle 0x412a97
movzx eax, byte [edx]
jmp 0x412a9e
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
call eax
cmp eax, 0xffffffff
je 0x412aac
mov ecx, dword [ebp - 0x80]
mov edi, ecx
mov byte [ecx], al
jmp 0x412ab2
mov dword [esi], 0
mov byte [esi + 4], 1
mov al, byte [edi]
cmp al, byte [ebp - 0x34]
jne 0x412b1f
dec dword [ebp - 0x88]
mov ecx, dword [esi]
mov byte [ebp - 0x69], 1
test ecx, ecx
je 0x412b00
mov eax, dword [ecx + 0x1c]
cmp dword [eax], 0
je 0x412af0
mov edx, dword [ecx + 0x2c]
mov eax, dword [edx]
test eax, eax
jle 0x412af0
dec eax
mov dword [edx], eax
mov ecx, dword [ecx + 0x1c]
mov edx, dword [ecx]
lea eax, [edx + 1]
mov dword [ecx], eax
movzx eax, byte [edx]
jmp 0x412af7
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
call eax
cmp eax, 0xffffffff
je 0x412b00
xor al, al
jmp 0x412b08
mov dword [esi], 0
mov al, 1
push dword [ebp - 0x78]
mov byte [esi + 4], al
push esi
call fcn.00413760
add esp, 8
test al, al
je 0x412a75
mov ecx, dword [ebp - 0x88]
test ecx, ecx
jns 0x412b3a
mov eax, dword [ebp - 0x70]
mov byte [eax], 0x30
inc eax
inc ecx
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x88], ecx
push dword [ebp - 0x78]
push esi
call fcn.00413760
add esp, 8
lea edi, [esi + 4]
test al, al
jne 0x412c55
lea eax, [esi + 5]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x74], eax
nop dword [eax]
cmp byte [edi], 0
jne 0x412bab
mov ecx, dword [esi]
test ecx, ecx
je 0x412ba2
mov eax, dword [ecx + 0x1c]
mov edx, dword [eax]
test edx, edx
je 0x412b81
mov eax, dword [ecx + 0x2c]
cmp dword [eax], 0
jle 0x412b81
movzx eax, byte [edx]
jmp 0x412b88
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
call eax
cmp eax, 0xffffffff
je 0x412b9c
mov edx, dword [ebp - 0x74]
mov byte [edx], al
mov eax, edx
mov dword [ebp - 0x98], eax
jmp 0x412ba8
mov eax, dword [ebp - 0x98]
mov dword [esi], 0
mov byte [edi], 1
mov al, byte [eax]
mov byte [ebp - 0x80], al
lea eax, [ebp - 0x18]
push dword [ebp - 0x80]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.00429e20
lea ecx, [ebp - 0x34]
sub eax, ecx
cmp eax, 0x16
jae 0x412c55
mov edx, dword [ebp - 0x8c]
cmp edx, dword [ebp - 0xa0]
jge 0x412bf2
mov ecx, dword [ebp - 0x70]
mov al, byte [eax + 0x45ae34]
mov byte [ecx], al
inc ecx
inc edx
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x8c], edx
mov ecx, dword [esi]
mov byte [ebp - 0x69], 1
test ecx, ecx
je 0x412c2f
mov eax, dword [ecx + 0x1c]
cmp dword [eax], 0
je 0x412c1f
mov edx, dword [ecx + 0x2c]
mov eax, dword [edx]
test eax, eax
jle 0x412c1f
dec eax
mov dword [edx], eax
mov ecx, dword [ecx + 0x1c]
mov edx, dword [ecx]
lea eax, [edx + 1]
mov dword [ecx], eax
movzx eax, byte [edx]
jmp 0x412c26
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
call eax
cmp eax, 0xffffffff
je 0x412c2f
xor al, al
jmp 0x412c37
mov dword [esi], 0
mov al, 1
push dword [ebp - 0x78]
mov byte [edi], al
push esi
call fcn.00413760
add esp, 8
test al, al
mov eax, dword [ebp - 0x98]
je 0x412b60
jmp 0x412c66
mov al, byte [ebp - 0x69]
test al, al
je 0x41307e
lea eax, [esi + 5]
mov dword [ebp - 0x74], eax
push dword [ebp - 0x78]
push esi
call fcn.00413760
add esp, 8
test al, al
jne 0x41307b
mov cl, byte [edi]
test cl, cl
jne 0x412cc3
mov ecx, dword [esi]
test ecx, ecx
je 0x412cb2
mov eax, dword [ecx + 0x1c]
mov edx, dword [eax]
test edx, edx
je 0x412c9c
mov eax, dword [ecx + 0x2c]
cmp dword [eax], 0
jle 0x412c9c
movzx eax, byte [edx]
jmp 0x412ca3
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
call eax
cmp eax, 0xffffffff
je 0x412cb2
lea edx, [esi + 5]
mov byte [edx], al
mov dword [ebp - 0x74], edx
jmp 0x412cbe
lea eax, [esi + 5]
mov dword [esi], 0
mov dword [ebp - 0x74], eax
mov byte [edi], 1
mov cl, 1
mov edx, dword [ebp - 0x74]
mov al, byte [edx]
cmp al, byte [ebp - 0x19]
je 0x412d1a
test cl, cl
jne 0x412d11
mov ecx, dword [esi]
test ecx, ecx
je 0x412d06
mov eax, dword [ecx + 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x80], eax
test eax, eax
je 0x412cf3
mov eax, dword [ecx + 0x2c]
cmp dword [eax], 0
jle 0x412cf3
mov eax, dword [ebp - 0x80]
movzx eax, byte [eax]
jmp 0x412cfd
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
call eax
mov edx, dword [ebp - 0x74]
cmp eax, 0xffffffff
je 0x412d06
mov byte [edx], al
jmp 0x412d0e
mov al, byte [edx]
mov dword [esi], 0
mov byte [edi], 1
cmp al, byte [ebp - 0x1a]
jne 0x41307b
mov eax, dword [ebp - 0x70]
mov byte [eax], 0x70
inc eax
mov ecx, dword [esi]
mov dword [ebp - 0x70], eax
test ecx, ecx
je 0x412d5d
mov eax, dword [ecx + 0x1c]
cmp dword [eax], 0
je 0x412d4d
mov edx, dword [ecx + 0x2c]
mov eax, dword [edx]
test eax, eax
jle 0x412d4d
dec eax
mov dword [edx], eax
mov ecx, dword [ecx + 0x1c]
mov edx, dword [ecx]
lea eax, [edx + 1]
mov dword [ecx], eax
movzx eax, byte [edx]
jmp 0x412d54
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
call eax
cmp eax, 0xffffffff
je 0x412d5d
xor al, al
jmp 0x412d65
mov dword [esi], 0
mov al, 1
push dword [ebp - 0x78]
mov byte [edi], al
push esi
mov byte [ebp - 0x69], 0
mov dword [ebp - 0xa0], 0
call fcn.00413760
add esp, 8
test al, al
jne 0x412ec0
mov cl, byte [edi]
test cl, cl
jne 0x412dc9
mov ecx, dword [esi]
test ecx, ecx
je 0x412dbe
mov eax, dword [ecx + 0x1c]
mov edx, dword [eax]
test edx, edx
je 0x412dab
mov eax, dword [ecx + 0x2c]
cmp dword [eax], 0
jle 0x412dab
movzx eax, byte [edx]
jmp 0x412db2
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
call eax
cmp eax, 0xffffffff
je 0x412dbe
mov ecx, dword [ebp - 0x74]
mov byte [ecx], al
jmp 0x412dc4
mov dword [esi], 0
mov byte [edi], 1
mov cl, 1
mov edx, dword [ebp - 0x74]
mov al, byte [edx]
cmp al, byte [ebp - 0x1d]
jne 0x412e2a
mov eax, dword [ebp - 0x70]
mov byte [eax], 0x2b
inc eax
mov ecx, dword [esi]
mov dword [ebp - 0x70], eax
test ecx, ecx
je 0x412e1b
mov eax, dword [ecx + 0x1c]
cmp dword [eax], 0
je 0x412e06
mov edx, dword [ecx + 0x2c]
mov eax, dword [edx]
test eax, eax
jle 0x412e06
dec eax
mov dword [edx], eax
mov ecx, dword [ecx + 0x1c]
mov edx, dword [ecx]
lea eax, [edx + 1]
mov dword [ecx], eax
movzx eax, byte [edx]
jmp 0x412e0d
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
call eax
cmp eax, 0xffffffff
je 0x412e1b
xor al, al
mov byte [edi], al
jmp 0x412ec0
mov al, 1
mov dword [esi], 0
mov byte [edi], al
jmp 0x412ec0
test cl, cl
jne 0x412e6e
mov ecx, dword [esi]
test ecx, ecx
je 0x412e63
mov eax, dword [ecx + 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x80], eax
test eax, eax
je 0x412e50
mov eax, dword [ecx + 0x2c]
cmp dword [eax], 0
jle 0x412e50
mov eax, dword [ebp - 0x80]
movzx eax, byte [eax]
jmp 0x412e5a
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
call eax
mov edx, dword [ebp - 0x74]
cmp eax, 0xffffffff
je 0x412e63
mov byte [edx], al
jmp 0x412e6b
mov al, byte [edx]
mov dword [esi], 0
mov byte [edi], 1
cmp al, byte [ebp - 0x1e]
jne 0x412ec0
mov eax, dword [ebp - 0x70]
mov byte [eax], 0x2d
inc eax
mov ecx, dword [esi]
mov dword [ebp - 0x70], eax
test ecx, ecx
je 0x412eb7
mov eax, dword [ecx + 0x1c]
cmp dword [eax], 0
je 0x412ea6
mov edx, dword [ecx + 0x2c]
mov eax, dword [edx]
test eax, eax
jle 0x412ea6
dec eax
mov dword [edx], eax
mov ecx, dword [ecx + 0x1c]
mov edx, dword [ecx]
lea eax, [edx + 1]
mov dword [ecx], eax
movzx eax, byte [edx]
jmp 0x412ead
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
call eax
cmp eax, 0xffffffff
je 0x412eb7
mov byte [edi], 0
jmp 0x412ec0
mov dword [esi], 0
mov byte [edi], 1
push dword [ebp - 0x78]
push esi
call fcn.00413760
add esp, 8
test al, al
jne 0x412f88
cmp byte [edi], 0
jne 0x412f11
mov ecx, dword [esi]
test ecx, ecx
je 0x412f08
mov eax, dword [ecx + 0x1c]
mov edx, dword [eax]
test edx, edx
je 0x412ef5
mov eax, dword [ecx + 0x2c]
cmp dword [eax], 0
jle 0x412ef5
movzx eax, byte [edx]
jmp 0x412efc
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
call eax
cmp eax, 0xffffffff
je 0x412f08
mov ecx, dword [ebp - 0x74]
mov byte [ecx], al
jmp 0x412f0e
mov dword [esi], 0
mov byte [edi], 1
mov eax, dword [ebp - 0x74]
mov al, byte [eax]
cmp al, byte [ebp - 0x34]
jne 0x412f78
mov ecx, dword [esi]
mov byte [ebp - 0x69], 1
test ecx, ecx
je 0x412f58
mov eax, dword [ecx + 0x1c]
cmp dword [eax], 0
je 0x412f48
mov edx, dword [ecx + 0x2c]
mov eax, dword [edx]
test eax, eax
jle 0x412f48
dec eax
mov dword [edx], eax
mov ecx, dword [ecx + 0x1c]
mov edx, dword [ecx]
lea eax, [edx + 1]
mov dword [ecx], eax
movzx eax, byte [edx]
jmp 0x412f4f
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
call eax
cmp eax, 0xffffffff
je 0x412f58
xor al, al
jmp 0x412f60
mov dword [esi], 0
mov al, 1
push dword [ebp - 0x78]
mov byte [edi], al
push esi
call fcn.00413760
add esp, 8
test al, al
je 0x412ed4
jmp 0x412f7e
cmp byte [ebp - 0x69], 0
je 0x412f88
mov eax, dword [ebp - 0x70]
mov byte [eax], 0x30
inc eax
mov dword [ebp - 0x70], eax
push dword [ebp - 0x78]
push esi
call fcn.00413760
add esp, 8
test al, al
jne 0x41307b
nop dword [eax]
cmp byte [edi], 0
jne 0x412fdd
mov ecx, dword [esi]
test ecx, ecx
je 0x412fd4
mov eax, dword [ecx + 0x1c]
mov edx, dword [eax]
test edx, edx
je 0x412fc1
mov eax, dword [ecx + 0x2c]
cmp dword [eax], 0
jle 0x412fc1
movzx eax, byte [edx]
jmp 0x412fc8
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
call eax
cmp eax, 0xffffffff
je 0x412fd4
mov ecx, dword [ebp - 0x74]
mov byte [ecx], al
jmp 0x412fda
mov dword [esi], 0
mov byte [edi], 1
mov eax, dword [ebp - 0x74]
mov al, byte [eax]
mov byte [ebp - 0x80], al
lea eax, [ebp - 0x18]
push dword [ebp - 0x80]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.00429e20
lea ecx, [ebp - 0x34]
sub eax, ecx
cmp eax, 0x16
jae 0x41307b
mov ecx, dword [ebp - 0xa0]
cmp ecx, 8
jge 0x413020
mov edx, dword [ebp - 0x70]
mov al, byte [eax + 0x45ae34]
mov byte [edx], al
inc edx
inc ecx
mov dword [ebp - 0x70], edx
mov dword [ebp - 0xa0], ecx
mov ecx, dword [esi]
mov byte [ebp - 0x69], 1
test ecx, ecx
je 0x41305d
mov eax, dword [ecx + 0x1c]
cmp dword [eax], 0
je 0x41304d
mov edx, dword [ecx + 0x2c]
mov eax, dword [edx]
test eax, eax
jle 0x41304d
dec eax
mov dword [edx], eax
mov ecx, dword [ecx + 0x1c]
mov edx, dword [ecx]
lea eax, [edx + 1]
mov dword [ecx], eax
movzx eax, byte [edx]
jmp 0x413054
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
call eax
cmp eax, 0xffffffff
je 0x41305d
xor al, al
jmp 0x413065
mov dword [esi], 0
mov al, 1
push dword [ebp - 0x78]
mov byte [edi], al
push esi
call fcn.00413760
add esp, 8
test al, al
je 0x412fa0
mov al, byte [ebp - 0x69]
cmp byte [ebp - 0x7a], 0
jne 0x413088
test al, al
jne 0x413090
mov eax, dword [ebp - 0xa4]
jmp 0x413093
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0xa8]
mov byte [eax], 0
mov eax, dword [ebp - 0x88]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x54]
cmp ecx, 0x10
jb 0x4130d4
mov edx, dword [ebp - 0x68]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4130ca
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4130f4
push ecx
push edx
call fcn.0042b48a
add esp, 8
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0042b459
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.0043042f
int3