Function at 0x405b2b
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xb0
mov dword [ebp - 0x10], 0x643d621c
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcatW]
mov eax, dword [ebp - 0x10]
cmp eax, 0xf2f3613e
jle 0x405bab
cmp eax, 0x3f0b7a42
jg 0x405ca2
cmp eax, 0x1ae4eb6f
jg 0x405d03
cmp eax, 0x3ab7621
jg 0x405ea0
cmp eax, 0xfc82a923
jg 0x4062f9
cmp eax, 0xf6284c8f
jg 0x406512
cmp eax, 0xf2f3613f
je 0x406814
cmp eax, 0xf45141dd
jne 0x405b44
mov eax, dword [ebp - 0x90]
mov word [eax], 0
mov dword [ebp - 0x10], 0xd960021d
jmp 0x405b44
cmp eax, 0xcf97b785
jle 0x405c3f
cmp eax, 0xde4687d4
jg 0x405d46
cmp eax, 0xd61f0ff3
jle 0x40605e
cmp eax, 0xd949b207
jle 0x40649e
cmp eax, 0xd9b9cf4d
jg 0x4065bc
cmp eax, 0xd949b208
je 0x406d89
cmp eax, 0xd960021d
jne 0x405b44
mov eax, dword [ebp - 0x50]
movzx ecx, word [0x46d294]
mov word [eax], cx
xor eax, eax
inc eax
push eax
push 0x46d296
push eax
push dword [ebp - 0x50]
call fcn.004085d0
add esp, 0x10
push dword [ebp - 0x50]
push dword [ebp - 0x4c]
call ebx
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov word [eax + 0xc], 0
mov dword [ebp - 0x10], 0xeae26dc6
jmp 0x405b44
cmp eax, 0xab335dce
jle 0x405d9d
cmp eax, 0xbb096878
jle 0x405e53
cmp eax, 0xc50a1474
jle 0x40612c
cmp eax, 0xccfb6189
jg 0x4064e7
cmp eax, 0xc50a1475
je 0x4066c9
cmp eax, 0xcc0ca77d
jne 0x405b44
mov eax, dword [ebp - 0x18]
shr eax, 0xa
and eax, 0xfffffffe
imul eax, eax, 0xc9
shr eax, 2
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x47169d0f
jmp 0x405b44
cmp eax, 0x59c2a337
jle 0x405de9
cmp eax, 0x643d621b
jle 0x405f2d
cmp eax, 0x78adae77
jle 0x406377
cmp eax, 0x7b5a5708
jg 0x406578
cmp eax, 0x78adae78
je 0x4069af
cmp eax, 0x78ee2efa
jne 0x405b44
mov eax, dword [ebp - 0x7c]
inc eax
push eax
push dword [ebp - 0x64]
call fcn.00459e01
add esp, 8
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x10], 0xd44c5952
jmp 0x405b44
cmp eax, 0x26c61df6
jle 0x405ee1
cmp eax, 0x2a75fc46
jle 0x40632e
cmp eax, 0x393352bd
jg 0x406534
cmp eax, 0x2a75fc47
je 0x406820
cmp eax, 0x352842d8
jne 0x405b44
mov dword [ebp - 0x10], 0xdde61fca
jmp 0x405b44
cmp eax, 0xe899e5b7
jle 0x405fce
cmp eax, 0xecdc4a19
jg 0x4060bb
cmp eax, 0xeae26dc5
jle 0x4065eb
cmp eax, 0xeae26dc6
je 0x406a86
cmp eax, 0xec3fd8a4
jne 0x405b44
push dword [ebp - 0x9c]
call fcn.00401686
add esp, 4
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x10], 0xcece8dc9
jmp 0x405b44
cmp eax, 0x91d658ed
jg 0x405f8a
cmp eax, 0x85bae820
jg 0x40621d
cmp eax, 0x813c480d
je 0x406cac
cmp eax, 0x827a54d2
je 0x406927
cmp eax, 0x85a897f8
jne 0x405b44
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0x10], 0xd7be2730
jmp 0x405b44
cmp eax, 0x4b3bbf0f
jg 0x40600c
cmp eax, 0x43ce62e0
jg 0x4063bf
cmp eax, 0x3f0b7a43
je 0x406e5f
cmp eax, 0x400693c6
je 0x406bd7
cmp eax, 0x412cde95
jne 0x405b44
imul esi, dword [ebp - 0x14], 0x6e
add esi, 0xffff4660
mov dword [ebp - 0x14], esi
push 0x17b
push esi
call fcn.00401783
add esp, 8
mov eax, 0x4b3bbf10
cmp esi, 0x63
jge 0x406efa
mov eax, 0x47169d0f
jmp 0x406efa
cmp eax, 0xb4f8999f
jg 0x4060eb
cmp eax, 0xab335dcf
je 0x4068b6
cmp eax, 0xabd6809e
je 0x40669d
cmp eax, 0xb32e11ea
jne 0x405b44
xor eax, eax
inc eax
push eax
push 0x46d2c4
push eax
push dword [ebp - 0x60]
call fcn.004085d0
add esp, 0x10
mov dword [ebp - 0x10], 0xd167e99e
jmp 0x405b44
cmp eax, 0xfecd056
jg 0x40616d
cmp eax, 0x3ab7622
je 0x406b03
cmp eax, 0x71c5828
je 0x40670b
cmp eax, 0xe8a4492
jne 0x405b44
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x10], 0x813c480d
jmp 0x405b44
cmp eax, 0x1cb761e5
jg 0x4061ac
cmp eax, 0x1ae4eb70
je 0x406b1c
cmp eax, 0x1b7e615a
je 0x406736
cmp eax, 0x1c6f585f
jne 0x405b44
push dword [ebp - 0x84]
call fcn.0045a120
add esp, 4
mov dword [ebp - 0xac], eax
mov dword [ebp - 0x10], 0x1497d589
jmp 0x405b44
cmp eax, 0x603e2278
jg 0x4061e8
cmp eax, 0x59c2a338
je 0x406b79
cmp eax, 0x59cfb70b
je 0x4067a3
cmp eax, 0x5eaa874a
jne 0x405b44
mov esi, dword [ebp - 0x14]
shl esi, 0xb
and esi, 0x1ffff800
or esi, 0x5d
mov dword [ebp - 0x14], esi
push esi
call fcn.00401279
add esp, 4
mov eax, 0xe899e5b8
cmp esi, 0xa0
jb 0x40680a
jmp 0x406efa
cmp eax, 0x9806c24c
jg 0x40628c
cmp eax, 0x91d658ee
je 0x406cc6
cmp eax, 0x92c633fe
je 0x406963
cmp eax, 0x972f1c02
jne 0x405b44
mov eax, dword [ebp - 0x18]
shl eax, 0xb
or eax, 0x4f
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xbd15b7c2
jmp 0x405b44
cmp eax, 0xe1377357
jg 0x4062bd
cmp eax, 0xde4687d5
je 0x406d0d
cmp eax, 0xdf997e8c
je 0x406a09
cmp eax, 0xdff88c32
jne 0x405b44
push eax
mov eax, esp
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x10], 0x43ce62e1
jmp 0x405b44
cmp eax, 0x5508325a
jg 0x406412
cmp eax, 0x4b3bbf10
je 0x406e6b
cmp eax, 0x4d32ec6c
je 0x406c0b
cmp eax, 0x526e2f92
jne 0x405b44
push 2
push 0x104
call fcn.00458cc3
add esp, 8
mov dword [ebp - 0x40], eax
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x10], 0x7165b63b
jmp 0x405b44
cmp eax, 0xd167e99d
jg 0x406466
cmp eax, 0xcf97b786
je 0x406f02
cmp eax, 0xcfdc0465
je 0x406c70
cmp eax, 0xd0e008bb
jne 0x405b44
imul esi, dword [ebp - 0x14], 0xb2
add esi, 0xffff7654
mov dword [ebp - 0x14], esi
push esi
call fcn.004024eb
add esp, 4
mov eax, 0x44c1204b
cmp esi, 5
jae 0x406efa
mov eax, 0xcece8dc9
jmp 0x406efa
cmp eax, 0xecdc4a1a
je 0x4067c8
cmp eax, 0xf2d6180c
je 0x40667c
cmp eax, 0xf2e91554
jne 0x405b44
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x10], 0xa70e4d21
jmp 0x405b44
cmp eax, 0xb4f899a0
je 0x4068e1
cmp eax, 0xb53f7529
je 0x4066a9
cmp eax, 0xb58ba76d
jne 0x405b44
mov eax, dword [ebp - 0x18]
shl eax, 6
and eax, 0x3ffffc0
add eax, 0x45
shr eax, 3
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xf2d6180c
jmp 0x405b44
cmp eax, 0xbb096879
je 0x406ae1
cmp eax, 0xbd15b7c2
je 0x4066ff
cmp eax, 0xbd5f9c80
jne 0x405b44
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x68]
mov dword [eax], ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x68]
mov byte [ecx + eax], 0
mov dword [ebp - 0x10], 0xdf997e8c
jmp 0x405b44
cmp eax, 0xfecd057
je 0x406b3b
cmp eax, 0x1497d589
je 0x406760
cmp eax, 0x169864a5
jne 0x405b44
push eax
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov word [eax + 0x18], 0
mov dword [ebp - 0x10], 0xcc0ca77d
jmp 0x405b44
cmp eax, 0x1cb761e6
je 0x406b60
cmp eax, 0x2363333b
je 0x406779
cmp eax, 0x2682fdf2
jne 0x405b44
mov eax, dword [ebp - 0x18]
shr eax, 0x19
imul eax, eax, 0x2900
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xb53f7529
jmp 0x405b44
cmp eax, 0x603e2279
je 0x406ba3
cmp eax, 0x622ba329
je 0x4067bc
cmp eax, 0x63a53999
jne 0x405b44
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x10], 0xccfb618a
jmp 0x405b44
cmp eax, 0x85bae821
je 0x406cde
cmp eax, 0x871682d0
je 0x40697a
cmp eax, 0x8a7743e9
jne 0x405b44
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0xb8]
mov dword [ecx], eax
push dword [ebp - 0x34]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x34]
test eax, eax
je 0x40625e
mov ecx, edx
mov eax, dword [ebp - 0x38]
mov dword [eax + 4], ecx
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp - 0x38]
call fcn.0040474a
add esp, 0xc
push dword [ebp - 0x38]
call fcn.004596fc
add esp, 4
mov dword [ebp - 0x10], 0x1cb761e6
jmp 0x405b44
cmp eax, 0x9806c24d
je 0x406cf6
cmp eax, 0xa70e4d21
je 0x406994
cmp eax, 0xa985ff37
jne 0x405b44
shl dword [ebp - 0x18], 0x11
mov dword [ebp - 0x10], 0x63a53999
jmp 0x405b44
cmp eax, 0xe4ffa1b3
jg 0x406619
cmp eax, 0xe1377358
je 0x406e36
cmp eax, 0xe1ad81af
jne 0x405b44
imul eax, dword [ebp - 0x18], 0x58000
or eax, 0x11d
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x526e2f92
jmp 0x405b44
cmp eax, 0x1376270
jle 0x406653
cmp eax, 0x1376271
je 0x406e42
cmp eax, 0x36aa49f
jne 0x405b44
push dword [ebp + 0xc]
push dword [ebp - 0x4c]
call ebx
mov dword [ebp - 0x10], 0xfc82a924
jmp 0x405b44
cmp eax, 0x26c61df7
je 0x406d65
cmp eax, 0x28a7a5bf
je 0x406a4c
cmp eax, 0x29a28243
jne 0x405b44
mov ecx, dword [ebp - 0x80]
mov edx, dword [ebp - 0x88]
mov eax, 0xe8a4492
cmp edx, dword [ecx]
jb 0x406366
mov eax, 0x4d32ec6c
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x74], eax
jmp 0x405b44
cmp eax, 0x643d621c
je 0x406df8
cmp eax, 0x6574972c
je 0x406ac3
cmp eax, 0x7165b63b
jne 0x405b44
mov eax, dword [ebp - 0x44]
mov word [eax + 0x18], 0
push 0x18
push 0x46d240
push dword [ebp - 0x44]
call fcn.00448eb0
add esp, 0xc
mov dword [ebp - 0x10], 0xbb096879
jmp 0x405b44
cmp eax, 0x43ce62e1
je 0x406ea3
cmp eax, 0x44c1204b
je 0x406c24
cmp eax, 0x47169d0f
jne 0x405b44
push 0x18
push 0x46d270
push dword [ebp - 0x48]
call fcn.00448eb0
add esp, 0xc
push 6
push 0x46d288
push 0xc
push dword [ebp - 0x48]
call fcn.004085d0
add esp, 0x10
mov dword [ebp - 0x10], 0x2363333b
jmp 0x405b44
cmp eax, 0x5508325b
je 0x406ebb
cmp eax, 0x57cf3e0a
je 0x406c61
cmp eax, 0x59b94b71
jne 0x405b44
mov eax, dword [ebp - 0x18]
shr eax, 7
imul ecx, eax, 0xb2
imul eax, eax
imul edx, eax, 0x7d31
add ecx, 0xfffffff9
dec edx
mov dword [ebp - 0x18], ecx
mov ecx, 0xecdc4a1a
cmp eax, edx
je 0x406f70
mov ecx, 0x169864a5
jmp 0x406f70
cmp eax, 0xd167e99e
je 0x406f1b
cmp eax, 0xd44c5952
je 0x406ca0
cmp eax, 0xd5a6875f
jne 0x405b44
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp + 0xc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x10], 0xf2f3613f
jmp 0x405b44
cmp eax, 0xd61f0ff4
je 0x406f4c
cmp eax, 0xd7be2730
je 0x406e16
cmp eax, 0xd93b5130
jne 0x405b44
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp - 0x30]
call fcn.0040474a
add esp, 0xc
push dword [ebp - 0x30]
call fcn.004596fc
add esp, 4
mov dword [ebp - 0x10], 0x57cf3e0a
jmp 0x405b44
cmp eax, 0xccfb618a
je 0x4066f3
cmp eax, 0xcece8dc9
jne 0x405b44
push eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x10], 0x827a54d2
jmp 0x405b44
cmp eax, 0xf6284c90
je 0x406858
cmp eax, 0xf6ee2aea
jne 0x405b44
mov dword [ebp - 0x10], 0xec3fd8a4
jmp 0x405b44
cmp eax, 0x393352be
je 0x40689e
cmp eax, 0x3efec859
jne 0x405b44
mov eax, dword [ebp - 0x14]
mov ecx, eax
shl ecx, 7
sub ecx, eax
add ecx, 0x7e02
mov dword [ebp - 0x14], ecx
mov eax, 0x169864a5
cmp ecx, 0x9c
je 0x406efa
mov eax, 0x2363333b
jmp 0x406efa
cmp eax, 0x7b5a5709
je 0x4069ca
cmp eax, 0x7dcfdfac
jne 0x405b44
imul eax, dword [ebp - 0x14], 0x20c00
add eax, 0xffdce000
mov dword [ebp - 0x14], eax
push 0x3141
push 0x51b5
push eax
call fcn.0040474a
add esp, 0xc
mov dword [ebp - 0x10], 0x7165b63b
jmp 0x405b44
cmp eax, 0xd9b9cf4e
je 0x406da4
cmp eax, 0xdde61fca
jne 0x405b44
cmp dword [ebp - 0x6c], 0
mov eax, 0xcf97b786
je 0x406efa
mov eax, 0xabd6809e
jmp 0x406efa
cmp eax, 0xe899e5b8
jne 0x406f78
mov eax, dword [ebp - 0x14]
and eax, 0xffffffe0
shl eax, 4
imul eax, eax, 0x8c
add eax, 0xffffbdd4
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x526e2f92
jmp 0x405b44
cmp eax, 0xe638fdb2
jne 0x406f84
push dword [ebp - 0x28]
push dword [ebp - 0x24]
push dword [ebp - 0x2c]
call fcn.00402f2d
add esp, 0xc
push 2
push 0x104
call fcn.00458cc3
add esp, 8
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x10], 0x36aa49f
jmp 0x405b44
cmp eax, 0xfc82a924
jne 0x406f91
push eax
mov eax, esp
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
add eax, 2
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x10], 0xf45141dd
jmp 0x405b44
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0x8c]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x10], 0x6574972c
jmp 0x405b44
mov dword [ebp - 0x10], 0x26c61df7
jmp 0x405b44
push 4
push 0x46d2ba
push 7
push dword [ebp - 0x5c]
call fcn.004085d0
add esp, 0x10
mov dword [ebp - 0x10], 0x28a7a5bf
jmp 0x405b44
mov eax, dword [ebp - 0x14]
shr eax, 2
imul ecx, eax, 0xe8
mov eax, ecx
shr eax, 2
mov dword [ebp - 0x14], eax
mov eax, 0xe4ffa1b4
cmp ecx, 0xcd
jb 0x40680a
jmp 0x406efa
mov dword [ebp - 0x10], 0xd61f0ff4
jmp 0x405b44
mov dword [ebp - 0x10], 0x4b3bbf10
jmp 0x405b44
imul ecx, dword [ebp - 0x14], 0x4330
add ecx, 0x2f513c
mov dword [ebp - 0x14], ecx
mov eax, 0x59e234a8
cmp ecx, 0xa4
jl 0x406efa
mov eax, 0x412cde95
jmp 0x406efa
mov ecx, dword [ebp - 0x14]
shl ecx, 0xa
add ecx, 0xffffb4a0
mov dword [ebp - 0x14], ecx
mov eax, 0x59c2a338
cmp ecx, 0xd1
jge 0x406efa
mov eax, 0x169864a5
jmp 0x406efa
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x10], 0x44c1204b
jmp 0x405b44
push dword [ebp - 0x48]
push dword [ebp - 0x2c]
call ebx
push dword [ebp - 0x2c]
call fcn.0040d7de
add esp, 4
mov ecx, 0xe9355562
test eax, eax
je 0x406f70
mov ecx, 0xf2e91554
jmp 0x406f70
mov eax, dword [ebp - 0x60]
movzx ecx, word [0x46d2c2]
mov word [eax], cx
mov dword [ebp - 0x10], 0xb32e11ea
jmp 0x405b44
mov dword [ebp - 0x10], 0xe638fdb2
jmp 0x405b44
imul edi, dword [ebp - 0x14], 0xfb
mov esi, edi
shr esi, 1
mov dword [ebp - 0x14], esi
push 0x2235
push esi
call fcn.00402de1
add esp, 8
push 0
push 0x5163
push esi
push 0x554b
call fcn.0040269f
add esp, 0x10
mov eax, 0x5eaa874a
cmp edi, 0x13a
jb 0x406efa
mov eax, 0x871682d0
jmp 0x406efa
mov dword [ebp - 0x10], 0xf6284c90
jmp 0x405b44
mov eax, dword [ebp - 0x14]
shr eax, 0xc
and eax, 0x3ffff
add eax, 0x67
shr eax, 5
mov dword [ebp - 0x14], eax
push eax
push 0x1f5c
push 0x2707
push 0x3733
call fcn.0040265d
add esp, 0x10
mov dword [ebp - 0x10], 0x526e2f92
jmp 0x405b44
push eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
mov word [eax + 0xe], 0
mov eax, dword [ebp - 0x5c]
movzx ecx, word [0x46d2b8]
mov word [eax + 0xc], cx
mov ecx, dword [0x46d2b4]
mov dword [eax + 8], ecx
mov ecx, dword [0x46d2b0]
mov dword [eax + 4], ecx
mov ecx, dword [0x46d2ac]
mov dword [eax], ecx
mov dword [ebp - 0x10], 0x2682fdf2
jmp 0x405b44
mov eax, dword [ebp - 0x38]
add eax, 8
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x10], 0x78adae78
jmp 0x405b44
imul ecx, dword [ebp - 0x14], 0x2dc6
add ecx, 0xffbd4e82
mov dword [ebp - 0x14], ecx
mov eax, 0xa70e4d21
cmp ecx, 0xbd
jl 0x406efa
mov eax, 0xd9b9cf4e
jmp 0x406efa
mov eax, dword [ebp - 0x18]
shr eax, 0xb
imul eax, eax, 0xab
add eax, 0x88ef
mov ecx, eax
shr ecx, 7
imul eax, eax
imul edx, eax, 0x113d
dec edx
add ecx, 0xffffff43
mov dword [ebp - 0x18], ecx
mov ecx, 0x2363333b
cmp edx, eax
je 0x406918
mov ecx, 0xe8a4492
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x74], 0
jmp 0x405b44
mov eax, dword [ebp - 0x18]
mov ecx, 0xffffff2e
add eax, ecx
shr eax, 5
lea ecx, [eax + 0xe1]
imul ecx, ecx
imul edx, ecx, 0x559
dec edx
add eax, 0xe6
mov dword [ebp - 0x18], eax
mov eax, 0xcfdc0465
cmp ecx, edx
je 0x406efa
mov eax, 0xfecd057
jmp 0x406efa
mov eax, dword [ebp - 0xb4]
mov word [eax], 0
mov dword [ebp - 0x10], 0x59cfb70b
jmp 0x405b44
push eax
mov eax, esp
mov dword [ebp - 0x20], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x10], 0xe1ad81af
jmp 0x405b44
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [eax], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov dword [eax], ecx
mov dword [ebp - 0x10], 0x603e2279
jmp 0x405b44
imul eax, dword [ebp - 0x18], 0x6100
add eax, 0xffffbc9f
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x8a7743e9
jmp 0x405b44
imul ecx, dword [ebp - 0x18], 0x63
lea eax, [ecx - 0x1b75]
add ecx, 0xffffe559
imul eax, eax
shr ecx, 7
imul edx, eax, 0x438d
dec edx
add ecx, 0xffffffae
mov dword [ebp - 0x18], ecx
mov ecx, 0x1b7e615a
cmp edx, eax
je 0x4069fb
mov ecx, 0x85a897f8
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x78], eax
jmp 0x405b44
mov ecx, dword [ebp - 0x18]
mov eax, ecx
shr eax, 9
imul eax, eax
imul edx, eax, 0x7da9
shl ecx, 2
and ecx, 0xffffe000
dec edx
mov esi, ecx
shl esi, 8
sub esi, ecx
sub esi, ecx
mov dword [ebp - 0x18], esi
mov ecx, 0x47169d0f
cmp eax, edx
je 0x406a3e
mov ecx, 0x85a897f8
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x78], eax
jmp 0x405b44
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ecx + 0xc]
mov dword [eax + 0xc], edx
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov edx, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [eax + 4], ecx
mov dword [eax], edx
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x3c]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp + 8]
mov dword [eax + 4], ecx
mov dword [ebp - 0x10], 0xd93b5130
jmp 0x405b44
mov eax, dword [ebp - 0x54]
mov ecx, dword [0x46d2a0]
mov dword [eax + 8], ecx
mov ecx, dword [0x46d29c]
mov dword [eax + 4], ecx
mov ecx, dword [0x46d298]
mov dword [eax], ecx
push 4
push 0x46d2a4
push 6
push dword [ebp - 0x54]
call fcn.004085d0
add esp, 0x10
mov dword [ebp - 0x10], 0x1ae4eb70
jmp 0x405b44
push 2
push 0x104
call fcn.00458cc3
add esp, 8
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x10], 0x3ab7622
jmp 0x405b44
mov eax, dword [ebp - 0x18]
shr eax, 0x16
add eax, 0xffffff6c
shr eax, 0xc
add eax, 0x98
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xd9b9cf4e
jmp 0x405b44
imul eax, dword [ebp - 0x18], 0xb8000
shr eax, 0x17
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xe1377358
jmp 0x405b44
push dword [ebp - 0x54]
push dword [ebp - 0x4c]
call ebx
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x10], 0x3f0b7a43
jmp 0x405b44
mov eax, dword [ebp - 0x58]
mov byte [eax + 0x12], 0
push 0x12
push 0x47a3d0
push dword [ebp - 0x58]
call fcn.00448eb0
add esp, 0xc
mov dword [ebp - 0x10], 0x400693c6
jmp 0x405b44
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x10], 0x29a28243
jmp 0x405b44
mov ecx, dword [ebp - 0x14]
shl ecx, 0xb
add ecx, 0xfffa3fc0
shr ecx, 9
mov dword [ebp - 0x14], ecx
mov eax, 0xde4687d5
cmp ecx, 0x47
je 0x406efa
mov eax, 0xf45141dd
jmp 0x406efa
mov eax, dword [ebp - 0x18]
shr eax, 0xb
add eax, 0xb6
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x4cef
dec edx
shl eax, 0x1a
mov dword [ebp - 0x18], eax
mov eax, 0x3efec859
cmp ecx, edx
je 0x406efa
mov eax, 0x622ba329
jmp 0x406efa
push 4
push 0x47a3e2
push 0x12
push dword [ebp - 0x58]
call fcn.00408700
add esp, 0x10
push dword [ebp - 0x58]
push dword [ebp - 0xa0]
call fcn.00401783
add esp, 8
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x10], 0x352842d8
jmp 0x405b44
imul eax, dword [ebp - 0x18], 0x662
shr eax, 2
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x91d658ee
jmp 0x405b44
push dword [ebp - 0xb0]
push dword [ebp - 0x84]
push dword [ebp - 0x70]
call fcn.00459aec
add esp, 0xc
push 2
push 0x104
call fcn.00458cc3
add esp, 8
mov dword [ebp - 0x34], eax
push dword [ebp - 0x40]
push dword [ebp - 0x34]
call ebx
mov dword [ebp - 0x10], 0xdff88c32
jmp 0x405b44
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x10], 0x91d658ee
jmp 0x405b44
imul eax, dword [ebp - 0x14], 0xac
add eax, 0xffffbb78
shr eax, 0x12
imul ecx, eax, 0x93
mov dword [ebp - 0x14], ecx
mov eax, 0x1376271
cmp ecx, 0x47
jae 0x406efa
mov eax, 0xa70e4d21
jmp 0x406efa
mov dword [ebp - 0x10], 0xbd5f9c80
jmp 0x405b44
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x10], 0xb58ba76d
jmp 0x405b44
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x10], 0xe9355562
jmp 0x405b44
mov eax, dword [ebp - 0x6c]
add eax, 0xc
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0x10], 0xb4f899a0
jmp 0x405b44
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x10], 0x972f1c02
jmp 0x405b44
imul esi, dword [ebp - 0x14], 0xf24000
add esi, 0x3670c000
mov edi, esi
shr edi, 9
mov dword [ebp - 0x14], edi
push 0x5d4c
push edi
call fcn.00401650
fstp st(0)
add esp, 8
push 0x363a
push edi
push 0x50e0
push 0x6332
call fcn.00408000
add esp, 0x10
mov eax, 0x526e2f92
cmp esi, 0x1cc01
jae 0x406efa
mov eax, 0xeae26dc6
jmp 0x406efa
mov eax, dword [ebp - 0x6c]
add eax, 0x18
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
cmp dword [eax], 0
mov eax, 0x91d658ee
je 0x406efa
mov eax, 0x85bae821
jmp 0x406efa
mov eax, dword [ebp - 0x14]
shr eax, 9
add eax, 3
shr eax, 0x13
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x871682d0
jmp 0x405b44
push 8
push str.wW
push 0xc
push dword [ebp - 0x44]
call fcn.004085d0
add esp, 0x10
push dword [ebp - 0x44]
push 0x7328f505
call fcn.004433f4
add esp, 8
mov esi, 0x104
push esi
push dword [ebp - 0x40]
push dword [ebp + 8]
call eax
push 2
push esi
call fcn.00458cc3
add esp, 8
mov dword [ebp - 0x2c], eax
push dword [ebp - 0x40]
push dword [ebp - 0x2c]
call ebx
mov dword [ebp - 0x10], 0x59b94b71
jmp 0x405b44
push eax
mov eax, esp
mov dword [ebp - 0x24], eax
push eax
mov eax, esp
mov dword [ebp - 0x28], eax
push eax
mov eax, esp
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 0x871682d0
jmp 0x405b44
push dword [ebp - 0xbc]
call fcn.0040134d
add esp, 4
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x10], 0xf6ee2aea
jmp 0x405b44
mov dword [ebp - 0x10], 0x1c6f585f
jmp 0x405b44
push dword [ebp - 0x20]
push dword [ebp - 0x1c]
push dword [ebp - 0x2c]
call fcn.0040d04e
add esp, 0xc
mov dword [ebp - 0x10], 0xa985ff37
jmp 0x405b44
mov dword [ebp - 0x10], 0x9806c24d
jmp 0x405b44
push dword [ebp - 0x94]
push dword [ebp - 0x98]
push dword [ebp - 0x4c]
push dword [ebp + 0x10]
call fcn.0042245f
add esp, 0x10
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov dword [eax], ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov dword [eax], ecx
mov dword [ebp - 0x10], 0x1376271
jmp 0x405b44
mov eax, dword [ebp - 0x60]
add eax, 2
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0x10], 0x92c633fe
jmp 0x405b44
mov eax, dword [ebp - 0x14]
lea esi, [eax + eax*4]
shl esi, 4
add esi, 0x30
mov dword [ebp - 0x14], esi
push 0x4f13
push esi
push 0x472a
call fcn.004029cf
add esp, 0xc
push 0x41d0
push esi
call fcn.00401783
add esp, 8
mov eax, 0xd0e008bb
cmp esi, 0x19
jae 0x406efa
mov eax, 0xb32e11ea
mov dword [ebp - 0x10], eax
jmp 0x405b44
push 0xc
call fcn.00459aa4
add esp, 4
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x10], 0xd5a6875f
jmp 0x405b44
push dword [ebp - 0x60]
push dword [ebp - 0x34]
call ebx
push dword [ebp - 0x70]
push dword [ebp - 0x34]
call ebx
push 0xc
call fcn.00459aa4
add esp, 4
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp + 0xc]
mov dword [eax], ecx
mov dword [ebp - 0x10], 0x393352be
jmp 0x405b44
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ecx]
mov dword [ebp - 0x7c], ecx
cmp dword [ebp - 0x7c], 0
mov ecx, 0x78ee2efa
jne 0x406f67
mov ecx, 0x7b5a5709
test eax, eax
jne 0x406f70
mov ecx, 0x7b5a5709
mov dword [ebp - 0x10], ecx
jmp 0x405b44
cmp eax, 0xe9355562
je 0x406fc4
jmp 0x405b44
cmp eax, 0xe4ffa1b4
jne 0x405b44
jmp 0x406fcc
cmp eax, 0xfdd76c09
jne 0x405b44
mov eax, dword [ebp - 0x14]
shr eax, 2
and eax, 0x3ffffc00
add eax, 0x64c84
mov dword [ebp - 0x14], eax
push 0x3259
push 0xefb
push 0x5483
push eax
call fcn.00407ed0
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
imul eax, dword [ebp - 0x14], 0x700
add eax, 0xee00
mov dword [ebp - 0x14], eax
sub esp, 4
push eax
push 0x62c3
push 0x498
call fcn.0040269f