Function at 0x40cb71
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
lea ebp, [esp - 0x39c]
sub esp, 0x39c
push 0xffffffffffffffff
push 0x42ff65
mov eax, dword fs:[0]
push eax
sub esp, 0xdc
mov eax, dword [0x43d748]
xor eax, ebp
mov dword [ebp + 0x398], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
or dword [ebp - 0x3c], 0xffffffff
xor ebx, ebx
or dword [ebp - 0x94], 0xffffffff
mov edi, ebx
or dword [ebp - 0x50], 0xffffffff
mov eax, ebx
mov ecx, ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp + 0x340], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x84], ebx
mov dword [ebp + 0x350], ebx
mov dword [ebp + 0x354], 7
mov word [ebp + 0x340], ax
cmp dword [0x4581f8], 8
mov eax, 0x4581e4
mov byte [ebp - 4], 1
jb 0x40cc2e
mov eax, dword [0x4581e4]
push eax
lea ecx, [ebp + 0x370]
call fcn.004014a3
cmp byte [0x4580d1], 0
lea eax, [ebp + 0x370]
push eax
sete al
mov byte [ebp - 4], 2
movzx eax, al
push eax
call fcn.0040b6f9
lea ecx, [ebp + 0x370]
mov byte [ebp - 4], 1
call fcn.00401770
push 0x40
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], ebx
call fcn.0040c845
lea eax, [ebp - 0x4c]
push eax
push 0x40
push dword [ebp - 0x4c]
call fcn.0040c2f9
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x70], ebx
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 4
push eax
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x60], ebx
call fcn.0040bce1
mov dword [ebp - 0x64], eax
mov al, byte [0x458498]
mov byte [ebp - 4], 5
mov dword [0x44766c], 1
mov byte [0x447670], al
mov dword [0x4476a8], ebx
mov dword [ebp - 0xc0], 0x88
call fcn.0040b6f0
test al, al
jne 0x40df41
mov ecx, ebx
mov esi, ebx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x18], esi
cmp ecx, 0x40
jl 0x40cd0a
cmp byte [0x45787c], 0
je 0x40d22e
mov eax, dword [ebp - 0x48]
sub eax, dword [ebp - 0x4c]
cdq
idiv dword [ebp - 0xc0]
cmp ecx, eax
jl 0x40cd2b
lea eax, [ebp - 0xd]
push eax
lea eax, [ecx + 1]
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040c142
mov eax, dword [ebp - 0x4c]
add eax, esi
mov esi, 0x4476b0
push 4
push esi
mov dword [0x4476b8], eax
call fcn.0040f285
test eax, eax
je 0x40d220
push esi
call fcn.0040e8cc
test al, al
je 0x40d1bc
call fcn.00411cde
test eax, eax
jne 0x40d1b7
cmp dword [0x4577e8], 8
mov esi, 0x4577d4
mov dword [0x4577e4], ebx
mov eax, esi
jb 0x40cd80
mov eax, dword [0x4577d4]
xor ecx, ecx
mov word [eax], cx
movzx eax, byte [0x457749]
push eax
movzx eax, word [0x457768]
push 0x45774c
push 2
push eax
call fcn.0040edac
test eax, eax
je 0x40cdb7
cmp eax, edi
jle 0x40cdae
mov edi, eax
mov dword [ebp - 0x14], edi
cmp eax, 1
jg 0x40d1a1
movzx eax, word [0x45776a]
push ebx
push ebx
push 3
push eax
call fcn.0040edac
test eax, eax
je 0x40cddc
cmp eax, edi
jle 0x40cdd3
mov dword [ebp - 0x14], eax
cmp eax, 1
jg 0x40d1a1
movzx eax, word [0x45776a]
push ebx
push eax
push dword [0x457718]
call fcn.00411898
xor eax, eax
lea edi, [ebp - 0xe0]
stosd dword es:[edi], eax
push 0x63
stosd dword es:[edi], eax
stosd dword es:[edi], eax
pop eax
cmp word [0x45774e], ax
jne 0x40ce2e
lea eax, [ebp - 0xe0]
push eax
movzx eax, word [0x45776a]
push eax
push dword [0x457718]
call fcn.0040e808
mov ax, word [ebp - 0xd8]
mov word [0x45774e], ax
mov edi, dword [0x4476b8]
lea esi, [ebp - 0xe0]
push ebx
push ebx
push ebx
lea edi, [edi + 0x58]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movzx eax, word [0x45776c]
push eax
call fcn.0040edac
test eax, eax
je 0x40ce65
cmp eax, dword [ebp - 0x14]
jle 0x40ce5c
mov dword [ebp - 0x14], eax
cmp eax, 1
jg 0x40d1b0
mov dword [ebp + 0x370], ebx
mov dword [ebp + 0x380], ebx
mov dword [ebp + 0x384], 0xf
mov byte [ebp + 0x370], bl
lea eax, [ebp + 0x370]
mov byte [ebp - 4], 6
push eax
push dword [0x4577ec]
movzx eax, word [0x45776a]
push eax
push dword [0x457718]
call fcn.0040e77a
test al, al
je 0x40cec2
mov esi, 0x4577d4
lea eax, [ebp + 0x370]
push esi
push eax
call fcn.00413e36
push esi
push esi
call fcn.004066d6
lea ecx, [ebp + 0x370]
mov byte [ebp - 4], 5
call fcn.00409eaa
movzx ecx, word [0x457752]
movzx eax, word [0x457750]
shl ecx, 0x10
or ecx, eax
push ecx
mov ecx, dword [0x4476b8]
lea ecx, [ecx + 0x68]
call fcn.0040abc9
mov eax, dword [0x4476b8]
mov dword [eax + 0x70], ebx
mov dword [eax + 0x74], ebx
mov eax, dword [0x4476b8]
mov dword [eax + 0x78], ebx
mov dword [eax + 0x7c], ebx
mov ecx, dword [0x4476b8]
lea eax, [ecx + 0x78]
push eax
lea eax, [ecx + 0x70]
push eax
lea eax, [ecx + 0x68]
push eax
movzx eax, word [0x45776a]
push eax
push dword [0x457718]
call fcn.0040e5da
movzx esi, word [0x45776a]
mov edi, dword [0x457718]
test esi, esi
je 0x40cf47
test edi, edi
jne 0x40d02f
mov byte [ebp - 0xd], bl
push 0x340
lea eax, [ebp]
push ebx
push eax
call fcn.0041d690
add esp, 0xc
lea ecx, [ebp]
call fcn.0040c4d2
push 0x4577d4
lea ecx, [ebp + 0x28]
mov byte [ebp - 4], 7
call fcn.004021af
mov eax, dword [0x457774]
mov dword [ebp + 0x24], eax
lea eax, [ebp + 0x24]
push ebx
push eax
push dword [0x457764]
mov eax, dword [0x4476b8]
push dword [0x457760]
push dword [eax + 0x34]
lea eax, [ebp + 0x28]
push eax
call fcn.00413e74
mov edx, dword [0x4476b8]
mov byte [ebp + 0x101], al
mov eax, dword [edx + 0x68]
mov ecx, dword [edx + 0x6c]
add edx, 0x40
mov dword [ebp + 0x50], eax
mov eax, dword [0x457760]
mov dword [ebp + 0x54], ecx
mov ecx, dword [0x457764]
mov dword [ebp + 0x70], eax
mov dword [ebp + 0x74], ecx
mov dword [edx + 0x10], ebx
cmp dword [edx + 0x14], 0x10
jb 0x40cfd6
mov edx, dword [edx]
mov byte [edx], bl
movzx esi, word [0x45776a]
mov edi, dword [0x457718]
test esi, esi
je 0x40d133
test edi, edi
je 0x40d133
jmp 0x40d095
push edi
call fcn.0040f132
movzx eax, ax
mov dword [ebp - 0x2c], eax
lea eax, [edi + 2]
push eax
call fcn.0040f132
movzx ecx, ax
lea eax, [esi - 4]
cmp ecx, eax
ja 0x40cf47
cmp dword [ebp - 0x2c], 0x17
je 0x40d039
push 0xfffffffffffffffc
add edi, 4
pop eax
sub eax, ecx
add edi, ecx
add esi, eax
cmp esi, 4
jae 0x40cffa
jmp 0x40cf47
push str.AES_0017
push 0x4577d4
push 0x4581e4
push 0x22
mov byte [ebp - 0xd], 1
call fcn.0040c3a8
jmp 0x40cf4a
push edi
call fcn.0040f132
movzx eax, ax
mov dword [ebp - 0x2c], eax
lea eax, [edi + 2]
push eax
call fcn.0040f132
movzx ecx, ax
lea eax, [esi - 4]
cmp ecx, eax
ja 0x40d133
cmp dword [ebp - 0x2c], 0x9903
jne 0x40d089
cmp ecx, 0x14
jae 0x40d09f
push 0xfffffffffffffffc
add edi, 4
pop eax
sub eax, ecx
add edi, ecx
add esi, eax
cmp esi, 4
jae 0x40d058
jmp 0x40d133
push 0x10
lea eax, [edi + 8]
push eax
lea eax, [ebp + 0x388]
push eax
call fcn.0041d110
mov ecx, dword [0x4476b8]
lea eax, [ebp + 0x388]
add esp, 0xc
lea ecx, [ecx + 0x40]
push 0x10
push eax
call fcn.00409ece
push 0x5c
pop eax
cmp word [0x45774e], ax
je 0x40d133
mov eax, dword [0x4476b8]
lea ecx, [ebp + 0x358]
add eax, 0x40
push eax
call fcn.0040c474
push 0x4577d4
lea ecx, [ebp + 0x370]
mov byte [ebp - 4], 8
call fcn.00401f7c
lea eax, [ebp + 0x358]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0xe8]
push eax
lea ecx, [ebp - 0x64]
call fcn.0040bd9b
lea ecx, [ebp + 0x370]
mov byte [ebp - 4], 7
call fcn.00401770
lea ecx, [ebp + 0x358]
call fcn.00409eaa
cmp byte [ebp - 0xd], 0
jne 0x40d17d
push ebx
push ebx
push 6
push ebx
lea eax, [ebp]
mov ecx, 0x457fd0
push eax
call fcn.0040271d
test eax, eax
je 0x40d17d
call fcn.0040e999
test eax, eax
je 0x40d17a
mov ecx, dword [0x4476b8]
push 0x4577d4
call fcn.004021af
mov esi, dword [ebp - 0x18]
inc dword [ebp - 0x38]
add esi, 0x88
mov dword [ebp - 0x18], esi
jmp 0x40d180
inc dword [ebp - 0x40]
mov esi, dword [ebp - 0x18]
add dword [ebp - 0x68], 1
lea ecx, [ebp]
mov byte [ebp - 4], 5
adc dword [ebp - 0x98], ebx
call fcn.0040c6c8
mov edi, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x38]
jmp 0x40ccf8
push esi
push 0x4581e4
push 0x1c
call fcn.00402bd2
jmp 0x40d227
push 0x4577d4
jmp 0x40d1a2
mov dword [ebp - 0x14], eax
jmp 0x40d227
mov eax, dword [ebp - 0x68]
mov ecx, dword [0x457790]
xor eax, ecx
movzx eax, ax
or eax, ebx
je 0x40d1f6
cmp ecx, 0xffff
jne 0x40d1de
cmp dword [0x457794], ebx
je 0x40d1f6
push 0x4581e4
mov ecx, 0x4584e8
call fcn.00402c98
mov dword [ebp - 0x14], 3
jmp 0x40d227
push esi
call fcn.0040e914
test al, al
jne 0x40d21b
cmp byte [0x457884], al
je 0x40d212
push esi
call fcn.0040e8f0
test al, al
jne 0x40d21b
mov dword [ebp - 0x58], 1
jmp 0x40d227
mov dword [ebp - 0x58], ebx
jmp 0x40d227
mov dword [ebp - 0x14], 0x33
mov dword [ebp - 0x20], 1
cmp byte [0x45787c], 0
mov eax, dword [0x457708]
mov dword [ebp - 0xb0], eax
mov eax, dword [0x45770c]
mov dword [ebp - 0xac], eax
mov eax, dword [0x4576c8]
mov dword [ebp - 0xb4], eax
mov eax, dword [0x4576d0]
mov dword [ebp - 0xb8], eax
mov eax, dword [0x4576d4]
mov dword [ebp - 0xbc], eax
je 0x40d318
push 0x4581e4
mov dword [0x457880], ebx
call fcn.0040c73c
test al, al
mov eax, str.zx01
jne 0x40d290
mov eax, 0x431fc4
sub esp, 0x18
mov ecx, esp
push eax
call fcn.004014a3
push 0x4581e4
call fcn.0040665e
mov edi, dword [0x4576e8]
test edi, edi
je 0x40d2c1
mov eax, dword [edi]
push 1
mov esi, dword [eax]
mov ecx, esi
call dword [0x431248]
mov ecx, edi
call esi
mov dword [0x4576e8], ebx
call fcn.0040f147
cmp dword [0x4581f8], 8
mov eax, 0x4581e4
jb 0x40d2df
mov eax, dword [0x4581e4]
push eax
lea ecx, [ebp + 0x370]
call fcn.004014a3
cmp byte [0x4580d1], 0
lea eax, [ebp + 0x370]
push eax
sete al
mov byte [ebp - 4], 0xa
movzx eax, al
push eax
call fcn.0040b6f9
lea ecx, [ebp + 0x370]
mov byte [ebp - 4], 5
call fcn.00401770
cmp dword [ebp - 0x38], 0
mov eax, ebx
mov dword [ebp - 0x2c], ebx
jle 0x40da36
mov ecx, dword [ebp - 0x54]
shl ecx, 6
mov dword [ebp - 0xa0], ecx
imul esi, eax, 0x88
add ecx, eax
mov dword [ebp - 0x3c], ecx
add esi, dword [ebp - 0x4c]
mov dword [0x4476b8], esi
mov dword [ebp - 0x28], esi
cmp dword [esi + 0x14], 8
jb 0x40d355
mov eax, dword [esi]
mov dword [ebp - 0x28], eax
cmp byte [0x45787c], 0
je 0x40d3ec
mov ecx, dword [esi + 0x38]
cmp ecx, dword [0x457880]
je 0x40d3ec
movzx eax, word [0x457780]
cmp ecx, eax
jne 0x40d3a7
push 0x4581e4
call fcn.0040c73c
test al, al
mov eax, str.zipx
jne 0x40d390
mov eax, 0x431fd8
sub esp, 0x18
mov ecx, esp
push eax
call fcn.004014a3
push 0x4581e4
call fcn.0040665e
jmp 0x40d3b2
push ecx
push 0x4581e4
call fcn.0040c7e6
mov eax, dword [0x4476b8]
mov edi, dword [0x4576e8]
mov eax, dword [eax + 0x38]
mov dword [0x457880], eax
test edi, edi
je 0x40d3db
mov eax, dword [edi]
push 1
mov esi, dword [eax]
mov ecx, esi
call dword [0x431248]
mov ecx, edi
call esi
mov dword [0x4576e8], ebx
call fcn.0040f147
mov esi, dword [0x4476b8]
mov edi, dword [esi + 0x18]
add edi, dword [0x457710]
mov esi, dword [esi + 0x1c]
adc esi, dword [0x457714]
push ebx
push 0x2000
push esi
push edi
call fcn.0041c560
mov ecx, edi
mov dword [ebp - 0x1c], eax
sub ecx, eax
mov eax, esi
sbb eax, edx
mov dword [ebp - 0x24], eax
cmp esi, ebx
jg 0x40d4b6
jl 0x40d42b
cmp edi, ebx
jae 0x40d4b6
push 0x4581e4
mov ecx, 0x4584e8
call fcn.00402c98
cmp dword [ebp - 0x3c], 0
mov dword [ebp - 0x14], 2
jne 0x40d4aa
mov ecx, dword [0x457710]
mov eax, ecx
mov edx, dword [0x457714]
or eax, edx
je 0x40d4aa
mov eax, dword [0x4476b8]
push ebx
push 0x2000
mov dword [0x457710], ebx
mov dword [0x457714], ebx
mov esi, dword [eax + 0x1c]
mov edi, dword [eax + 0x18]
push esi
push edi
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x7c], edx
call fcn.0041c560
mov ecx, edi
mov dword [ebp - 0x1c], eax
sub ecx, eax
mov eax, esi
sbb eax, edx
mov dword [ebp - 0x24], eax
cmp esi, ebx
jg 0x40d4b6
jl 0x40d49b
cmp edi, ebx
jae 0x40d4b6
push 0x4581e4
mov ecx, 0x4584e8
call fcn.00402c98
mov dword [ebp - 0x14], 3
jmp 0x40df1a
cmp ecx, dword [0x457708]
jne 0x40d4fb
cmp eax, dword [0x45770c]
jne 0x40d4fb
cmp byte [0x45787c], 0
jne 0x40d4fb
mov eax, dword [0x4576c8]
mov edi, dword [ebp - 0x1c]
sub eax, edi
mov ecx, dword [0x4576c4]
sub eax, ecx
cdq
add dword [0x4576d0], eax
adc dword [0x4576d4], edx
lea eax, [edi + ecx]
mov dword [0x4576c8], eax
jmp 0x40d58d
mov edi, dword [0x4576e8]
push ebx
push dword [ebp - 0x24]
mov eax, dword [edi]
push ecx
mov esi, dword [eax + 0x10]
mov ecx, esi
call dword [0x431248]
mov ecx, edi
call esi
mov edi, dword [0x4576e8]
mov eax, dword [edi]
mov esi, dword [eax + 0x14]
mov ecx, esi
call dword [0x431248]
mov ecx, edi
call esi
push 0x2000
push dword [0x4576c4]
mov dword [0x457708], eax
mov dword [0x45770c], edx
call fcn.0040f69f
cdq
mov esi, edx
mov ecx, eax
mov dword [0x4576d0], ecx
mov dword [0x4576d4], esi
cmp esi, ebx
jg 0x40d56c
jl 0x40d49b
cmp ecx, ebx
jbe 0x40d49b
mov eax, dword [0x4576c4]
add eax, dword [ebp - 0x1c]
mov dword [0x4576c8], eax
mov eax, dword [ebp - 0x1c]
cdq
sub ecx, eax
mov dword [0x4576d0], ecx
sbb esi, edx
mov dword [0x4576d4], esi
push 4
mov edi, 0x4476b0
push edi
call fcn.0040f285
test eax, eax
je 0x40d49b
push edi
call fcn.0040e938
test al, al
jne 0x40d63b
cmp dword [ebp - 0x3c], 0
mov edx, dword [0x457714]
mov ecx, dword [0x457710]
jne 0x40d5dc
mov eax, ecx
or eax, edx
je 0x40d5dc
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x7c], edx
mov dword [0x457710], ebx
mov dword [0x457714], ebx
jmp 0x40d600
or ecx, edx
jne 0x40d49b
mov esi, dword [ebp - 0x6c]
mov eax, esi
mov edi, dword [ebp - 0x7c]
or eax, edi
je 0x40d49b
mov dword [0x457710], esi
mov dword [0x457714], edi
mov eax, dword [0x4476b8]
push dword [eax + 0x1c]
push dword [eax + 0x18]
call fcn.0040f4c8
test eax, eax
jne 0x40d49b
push 4
mov edi, 0x4476b0
push edi
call fcn.0040f285
test eax, eax
je 0x40d49b
push edi
call fcn.0040e938
test al, al
je 0x40d49b
call fcn.00411e67
mov esi, eax
test esi, esi
je 0x40d65d
push 0x4581e4
mov ecx, 0x4584e8
call fcn.00402c98
mov dword [ebp - 0x14], esi
jmp 0x40df1a
cmp dword [0x4577e8], 8
mov edi, 0x4577d4
mov dword [0x4577e4], ebx
mov eax, edi
jb 0x40d678
mov eax, dword [0x4577d4]
push ebx
xor ecx, ecx
push 0x457722
mov word [eax], cx
movzx eax, word [0x457740]
push 2
push eax
call fcn.0040edac
test eax, eax
je 0x40d6b5
cmp eax, dword [ebp - 0x14]
jle 0x40d69e
mov dword [ebp - 0x14], eax
cmp eax, 1
jle 0x40d6b5
push edi
push 0x4581e4
push 0x1c
call fcn.00402bd2
jmp 0x40df1a
mov eax, dword [0x457718]
test eax, eax
je 0x40d6cb
push eax
call fcn.004230f5
pop ecx
mov dword [0x457718], ebx
movzx eax, word [0x457742]
push ebx
push ebx
push 3
push eax
call fcn.0040edac
test eax, eax
je 0x40d6ed
cmp eax, dword [ebp - 0x14]
jle 0x40d6e8
mov dword [ebp - 0x14], eax
cmp eax, 1
jg 0x40d6a3
movzx eax, word [0x457742]
push 1
push eax
push dword [0x457718]
call fcn.00411898
mov dword [ebp + 0x370], ebx
mov dword [ebp + 0x380], ebx
mov dword [ebp + 0x384], 0xf
mov byte [ebp + 0x370], bl
lea eax, [ebp + 0x370]
mov byte [ebp - 4], 0xb
push eax
push dword [0x4577ec]
movzx eax, word [0x457742]
push eax
push dword [0x457718]
call fcn.0040e77a
test al, al
je 0x40d75a
push edi
lea eax, [ebp + 0x370]
push eax
call fcn.00413e36
push edi
push edi
call fcn.004066d6
mov eax, dword [ebp + 0x384]
mov byte [ebp - 4], 5
cmp eax, 0x10
jb 0x40d799
mov ecx, dword [ebp + 0x370]
inc eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x1c], ecx
cmp eax, 0x1000
jb 0x40d790
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.004016b3
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x1c]
push eax
push ecx
call fcn.0041be16
pop ecx
pop ecx
mov edx, dword [0x4476b8]
push 0x457800
push 0x4577f8
push 0x4577f0
mov eax, dword [edx + 0x68]
mov ecx, dword [edx + 0x6c]
mov dword [0x4577f0], eax
mov dword [0x4577f4], ecx
mov eax, dword [edx + 0x70]
mov ecx, dword [edx + 0x74]
mov dword [0x4577f8], eax
mov dword [0x4577fc], ecx
mov eax, dword [edx + 0x78]
mov ecx, dword [edx + 0x7c]
mov dword [0x457800], eax
movzx eax, word [0x457742]
push eax
push dword [0x457718]
mov dword [0x457804], ecx
call fcn.0040e5da
push 0x63
pop eax
mov cl, bl
mov byte [0x457888], cl
cmp word [0x457724], ax
jne 0x40d826
movzx eax, word [0x457742]
push 0x457888
push eax
push dword [0x457718]
call fcn.0040e808
mov cl, byte [0x457888]
mov esi, dword [0x4476b8]
add esi, 0x58
cmp byte [esi], 0
je 0x40d84b
test cl, cl
jne 0x40d84f
mov edi, 0x457888
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov cl, byte [0x457888]
mov edi, 0x4577d4
test cl, cl
je 0x40d85b
mov ax, word [0x457890]
mov word [0x457724], ax
mov esi, dword [ebp - 0x28]
push esi
call fcn.00420f3e
pop ecx
push eax
push esi
mov ecx, edi
call fcn.0040180c
mov ecx, dword [0x4476b8]
push ebx
lea eax, [ecx + 0x3c]
push eax
push dword [ecx + 0x2c]
push dword [ecx + 0x28]
push dword [ecx + 0x34]
push edi
call fcn.00413e74
mov edx, dword [0x4577e8]
cmp edx, 8
mov byte [ebp - 0xd], al
mov eax, edi
mov edi, dword [0x4577d4]
sbb cl, cl
inc cl
cmp edx, 8
jb 0x40d8a7
mov eax, edi
cmp word [eax], bx
je 0x40d915
mov eax, 0x4577d4
test cl, cl
je 0x40d8b7
mov eax, edi
cmp word [eax + 2], bx
je 0x40d915
mov esi, dword [0x4577e4]
push 2
pop eax
cmp esi, eax
jbe 0x40d915
mov ebx, dword [0x4577e8]
cmp ebx, 8
mov ecx, 0x4577d4
sbb dl, dl
inc dl
cmp ebx, 8
jb 0x40d8e3
mov ecx, edi
cmp word [ecx + eax*2], 0x3a
jne 0x40d90e
mov ecx, 0x4577d4
test dl, dl
je 0x40d8f5
mov ecx, edi
push 0x5f
pop edx
mov word [ecx + eax*2], dx
mov esi, dword [0x4577e4]
mov edi, dword [0x4577d4]
mov ebx, dword [0x4577e8]
inc eax
cmp eax, esi
jb 0x40d8d0
xor ebx, ebx
mov eax, 0x4577d4
push eax
push eax
call fcn.00405adb
cmp byte [ebp - 0xd], 0
je 0x40d92d
mov edx, ebx
mov esi, ebx
jmp 0x40d939
mov edx, dword [0x447688]
mov esi, dword [0x44768c]
movzx ecx, word [0x457742]
movzx eax, word [0x457740]
add ecx, 0x1e
add eax, ecx
xor ecx, ecx
add eax, edx
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x24], eax
mov eax, edx
adc ecx, esi
and eax, dword [ebp - 0x50]
mov dword [ebp - 0x1c], ecx
mov ecx, dword [0x4476b8]
cmp eax, 0xffffffff
je 0x40dbcc
mov eax, dword [ebp - 0xc4]
cmp eax, dword [ecx + 0x38]
jne 0x40dbcc
mov edi, dword [ecx + 0x1c]
mov eax, dword [ebp - 0x50]
mov esi, dword [ecx + 0x18]
mov dword [ebp - 0x9c], esi
mov dword [ebp - 0x28], edi
cmp edi, eax
jg 0x40dbcc
jl 0x40d9a5
cmp esi, edx
jae 0x40dbcc
sub edx, esi
sbb eax, edi
mov dword [ebp - 0xa4], eax
js 0x40dbcc
jg 0x40d9c3
cmp edx, 0x200
jbe 0x40dbcc
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xc8], ecx
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0xd4], esi
mov dword [ebp - 0xd0], edi
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0x34], edi
jg 0x40dac2
jl 0x40d9f7
cmp ecx, esi
ja 0x40dac2
mov edx, ecx
mov ecx, dword [ebp - 0x34]
add edx, dword [ebp - 0x80]
adc ecx, dword [ebp - 0x84]
cmp ecx, edi
jg 0x40da17
jl 0x40dad0
cmp edx, esi
jbe 0x40dad0
push 0x4577d4
push 0x4581e4
push 0x1c
call fcn.00402bd2
mov dword [ebp - 0x14], 3
mov dword [ebp - 0x20], 1
mov edi, dword [0x4576e8]
push ebx
push dword [ebp - 0xac]
mov eax, dword [edi]
push dword [ebp - 0xb0]
mov esi, dword [eax + 0x10]
mov ecx, esi
call dword [0x431248]
mov ecx, edi
call esi
mov edi, dword [0x4576e8]
mov eax, dword [edi]
mov esi, dword [eax + 0x14]
mov ecx, esi
call dword [0x431248]
mov ecx, edi
call esi
push 0x2000
push dword [0x4576c4]
mov dword [0x457708], eax
mov dword [0x45770c], edx
call fcn.0040f69f
mov eax, dword [ebp - 0xb4]
inc dword [ebp - 0x54]
cmp dword [ebp - 0x20], 0
mov edi, dword [ebp - 0x14]
mov dword [0x4576c8], eax
mov eax, dword [ebp - 0xb8]
mov dword [0x4576d0], eax
mov eax, dword [ebp - 0xbc]
mov dword [0x4576d4], eax
jne 0x40df41
jmp 0x40cce1
mov edx, dword [ebp - 0x80]
add edx, ecx
mov ecx, dword [ebp - 0x84]
adc ecx, dword [ebp - 0x34]
mov edi, esi
add edi, eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xa4], edi
adc eax, dword [ebp - 0x1c]
add esi, dword [ebp - 0x24]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x28]
adc eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x34], eax
jg 0x40db0f
jl 0x40daf8
cmp dword [ebp - 0x30], esi
jae 0x40db0f
mov eax, dword [ebp - 0x18]
cmp ecx, eax
jg 0x40da17
jl 0x40db12
cmp edx, edi
jae 0x40da17
jmp 0x40db12
mov eax, dword [ebp - 0x18]
mov edi, dword [ebp - 0x90]
jmp 0x40db86
mov ecx, dword [ebp - 0x28]
mov edx, dword [edi]
cmp dword [edi + 4], ecx
jg 0x40db53
jl 0x40db2e
cmp edx, dword [ebp - 0x9c]
ja 0x40db53
mov eax, dword [edi + 0xc]
mov ecx, edx
add ecx, dword [edi + 8]
adc eax, dword [edi + 4]
cmp eax, dword [ebp - 0x28]
jg 0x40da17
jl 0x40db50
cmp ecx, dword [ebp - 0x9c]
ja 0x40da17
mov eax, dword [ebp - 0x18]
cmp dword [edi + 4], eax
jg 0x40db83
mov ecx, dword [ebp - 0xa4]
jl 0x40db64
cmp edx, ecx
jae 0x40db83
add edx, dword [edi + 8]
mov eax, dword [edi + 0xc]
adc eax, dword [edi + 4]
cmp eax, dword [ebp - 0x18]
jg 0x40da17
jl 0x40db80
cmp edx, ecx
jae 0x40da17
mov eax, dword [ebp - 0x18]
add edi, 0x10
cmp edi, dword [ebp - 0x8c]
jne 0x40db1a
mov eax, dword [ebp - 0x8c]
cmp eax, dword [ebp - 0x88]
je 0x40dbb3
mov edi, eax
lea esi, [ebp - 0xd4]
add eax, 0x10
mov dword [ebp - 0x8c], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
jmp 0x40dbc6
lea ecx, [ebp - 0xd4]
push ecx
push eax
lea ecx, [ebp - 0x90]
call fcn.0040be23
mov ecx, dword [0x4476b8]
mov esi, dword [ecx + 0x18]
mov eax, dword [ebp - 0x24]
mov edi, dword [ecx + 0x1c]
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], esi
add esi, eax
mov dword [ebp - 0x80], eax
mov eax, dword [ecx + 0x38]
mov cl, byte [0x4580d1]
mov dword [ebp - 0x34], edi
adc edi, edx
mov dword [ebp - 0x84], edx
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x50], edi
mov dword [ebp - 0xc4], eax
test cl, cl
je 0x40dc24
cmp dword [0x4581e0], 8
mov eax, 0x4581cc
jb 0x40dc1a
mov eax, dword [0x4581cc]
push 0x49
pop edx
cmp word [eax], dx
mov al, 1
jne 0x40dc26
mov al, bl
push ebx
push eax
test cl, cl
mov edi, 0x4577d4
sete al
movzx eax, al
push eax
push edi
call fcn.0040b712
test al, al
je 0x40da36
mov al, byte [0x4580d1]
test al, al
jne 0x40dc78
cmp byte [0x458063], al
jne 0x40dc9a
lea eax, [ebp + 0x340]
push eax
push 0x4581fc
push edi
call fcn.004044f6
test al, al
je 0x40df1a
mov al, byte [0x4580d1]
test al, al
je 0x40dc9a
cmp byte [ebp - 0xd], 0
jne 0x40df1a
push 0x5c
pop ecx
cmp word [0x457724], cx
je 0x40df1a
test al, al
jne 0x40dec6
cmp byte [ebp - 0xd], 0
mov esi, ebx
je 0x40de23
cmp byte [0x45803b], 0
jne 0x40df1a
cmp dword [0x4577e4], 0
je 0x40df1a
cmp dword [0x458040], 1
je 0x40df1a
mov eax, dword [0x4476b8]
cmp dword [eax + 0x34], 0
je 0x40dcde
cmp dword [eax + 0x34], 0xb
jne 0x40dce1
mov esi, dword [eax + 0x3c]
push edi
call fcn.0040440b
test al, al
jne 0x40dd4e
cmp byte [0x458078], al
push esi
sete al
movzx eax, al
push eax
push edi
call fcn.004046fc
test eax, eax
je 0x40dd48
movzx eax, byte [0x45802b]
push eax
push 1
push edi
call fcn.004041f1
cmp byte [0x458078], 0
push esi
sete al
movzx eax, al
push eax
push edi
call fcn.004046fc
test eax, eax
je 0x40dd48
push edi
push 0x4581e4
push 0x14
call fcn.00402bd2
mov ecx, 0x4584e8
call fcn.00402f81
jmp 0x40df1a
inc dword [0x4476a8]
xor eax, eax
mov dword [ebp + 0x358], ebx
mov dword [ebp + 0x368], ebx
mov dword [ebp + 0x36c], 7
mov word [ebp + 0x358], ax
mov dword [ebp + 0x370], ebx
mov dword [ebp + 0x374], ebx
mov dword [ebp + 0x378], ebx
mov dword [ebp + 0x37c], ebx
mov dword [ebp + 0x380], ebx
mov dword [ebp + 0x384], ebx
push edi
lea ecx, [ebp + 0x358]
mov byte [ebp - 4], 0xc
call fcn.004021af
mov eax, dword [0x4577f0]
mov ecx, dword [0x4577f4]
mov esi, dword [ebp - 0x74]
mov dword [ebp + 0x370], eax
mov eax, dword [0x457800]
mov dword [ebp + 0x378], eax
mov eax, dword [0x4577f8]
mov dword [ebp + 0x374], ecx
mov ecx, dword [0x457804]
mov dword [ebp + 0x380], eax
lea eax, [ebp + 0x358]
mov dword [ebp + 0x37c], ecx
mov ecx, dword [0x4577fc]
push eax
mov dword [ebp + 0x384], ecx
push esi
cmp esi, dword [ebp - 0x70]
je 0x40de07
lea eax, [ebp - 0x78]
push eax
call fcn.0040c32e
add esi, 0x30
mov dword [ebp - 0x74], esi
jmp 0x40de0f
lea ecx, [ebp - 0x78]
call fcn.0040bf1a
lea ecx, [ebp + 0x358]
mov byte [ebp - 4], 5
call fcn.00401770
jmp 0x40df1a
push edi
call fcn.0040eb5b
cmp eax, 0xffffffff
je 0x40de8a
test eax, eax
je 0x40de6e
cmp eax, 1
jne 0x40dec6
mov eax, dword [0x458010]
cmp eax, 2
je 0x40df1a
cmp byte [0x45803c], 0
jne 0x40df1a
cmp byte [0x45803b], 0
jne 0x40df1a
test eax, eax
je 0x40de9b
cmp eax, 3
jne 0x40dec6
jmp 0x40de9b
mov eax, dword [0x458010]
cmp eax, 2
je 0x40df1a
test eax, eax
je 0x40de85
cmp eax, 3
jne 0x40dec6
xor esi, esi
inc esi
jmp 0x40de97
cmp byte [0x45803b], 0
jne 0x40df1a
test esi, esi
je 0x40dec6
push ebx
push 0x4577f0
push dword [0x447694]
push dword [0x447690]
push edi
push 0x457fd0
call fcn.0040b5ce
cmp eax, 6
je 0x40da2f
cmp eax, 1
je 0x40df1a
mov eax, dword [0x4476b8]
test byte [eax + 0x80], 1
je 0x40df05
call fcn.00412663
test eax, eax
je 0x40df05
cmp eax, 9
je 0x40df35
cmp eax, 0xc
jne 0x40deee
inc dword [ebp - 0x5c]
push 6
jmp 0x40def8
cmp eax, dword [ebp - 0x14]
jle 0x40def6
mov dword [ebp - 0x14], eax
push 0x1c
pop eax
push edi
push 0x4581e4
push eax
jmp 0x40d6ab
lea eax, [ebp - 0x64]
push eax
call fcn.0040e0c8
test eax, eax
je 0x40df1a
cmp eax, dword [ebp - 0x14]
jle 0x40df1a
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, dword [ebp - 0x38]
jge 0x40da36
mov ecx, dword [ebp - 0xa0]
jmp 0x40d333
push 2
call fcn.00402b65
mov edi, dword [ebp - 0x14]
mov bl, 1
mov esi, dword [ebp - 0x78]
cmp esi, dword [ebp - 0x74]
je 0x40dfb9
add esi, 0x28
cmp dword [esi - 0x14], 8
lea eax, [esi - 0x28]
jb 0x40df57
mov eax, dword [eax]
push eax
lea ecx, [ebp + 0x370]
call fcn.004014a3
mov eax, dword [0x4581a8]
mov ecx, dword [0x4581a4]
neg eax
mov byte [ebp - 4], 0xd
sbb eax, eax
and eax, esi
neg ecx
push eax
sbb ecx, ecx
lea eax, [esi - 8]
and ecx, eax
lea eax, [esi - 0x10]
push ecx
mov ecx, dword [0x4581a0]
neg ecx
sbb ecx, ecx
and ecx, eax
lea eax, [ebp + 0x370]
push ecx
push eax
call fcn.0040481e
lea ecx, [ebp + 0x370]
mov byte [ebp - 4], 5
call fcn.00401770
add esi, 0x30
lea eax, [esi - 0x28]
cmp eax, dword [ebp - 0x74]
jne 0x40df4c
call fcn.0040b6f0
test al, al
jne 0x40dfe4
cmp dword [ebp - 0x58], 0
je 0x40dfe4
cmp byte [0x45787c], al
jne 0x40dfe4
push 0x4581e4
mov ecx, 0x4584e8
call fcn.00402c98
test edi, edi
jne 0x40dfe4
inc edi
mov esi, dword [ebp - 0x3c]
inc esi
cmp dword [0x4476a8], 0
jne 0x40e028
cmp dword [0x4581e0], 8
mov eax, dword [0x4581cc]
jae 0x40e004
mov eax, 0x4581cc
push 0x49
pop ecx
cmp word [eax], cx
je 0x40e028
test bl, bl
jne 0x40e01c
push 0x4581e4
push 0x45
call fcn.00402b96
push 0xa
mov ecx, 0x4584e8
call fcn.00402f39
test esi, esi
jne 0x40e044
cmp edi, 1
jg 0x40e044
mov eax, dword [ebp - 0x40]
xor cx, cx
cmp cx, ax
sbb edi, edi
and edi, 0x46
add edi, 0xb
jmp 0x40e072
mov ecx, dword [ebp - 0x5c]
movzx eax, cx
cmp esi, eax
jne 0x40e057
cmp edi, 1
jg 0x40e057
push 0x52
jmp 0x40e065
cmp word [ebp - 0x40], 0
je 0x40e068
cmp edi, 1
jg 0x40e068
push 0x51
pop edi
jmp 0x40e072
test cx, cx
je 0x40e072
test edi, edi
jne 0x40e072
inc edi
lea eax, [ebp - 0x64]
push eax
mov ecx, eax
call fcn.0040c01b
lea ecx, [ebp - 0x78]
call fcn.0040c680
lea ecx, [ebp - 0x4c]
call fcn.0040caf8
lea ecx, [ebp + 0x340]
call fcn.00401770
lea ecx, [ebp - 0x90]
call fcn.0040c65c
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x398]
xor ecx, ebp
call fcn.0041be24
add ebp, 0x39c
leave
ret