Function at 0x40b9a0
Capabilities:
Check for time delay via queryperformancecounter
Encode data using xor
Hash data using sha1
Receive data
Receive data on socket

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x48889d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0xde8
push esi
mov esi, ecx
mov ecx, 2
push edi
mov dword [ebp - 0x9c], esi
nop dword [eax]
nop word [eax + eax]
mov eax, dword [esi + 0x816]
mov dword [ebp - 0x88], 0x10
mov word [ebp - 0xd4], cx
cmp eax, 0xffffffff
jne 0x40ba3c
or eax, eax
cmp byte [esi + 4], 0
jne 0x40bae1
mov eax, dword [esi]
mov ecx, esi
push 0
push 0
mov byte [esi + 4], 1
call dword [eax + 0x24]
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
lea ecx, [ebp - 0x88]
push ecx
lea ecx, [ebp - 0xd4]
push ecx
push 0
push 0x240
lea ecx, [ebp - 0xce0]
push ecx
push eax
call dword [sym.imp.WS2_32.dll_recvfrom]
mov edi, eax
cmp edi, 1
jge 0x40ba70
xor eax, eax
cmp edi, 0xffffffff
setne al
jmp 0x40badc
push dword [ebp - 0xd2]
lea eax, [ebp - 0xce0]
mov dword [ebp - 0x1c], eax
call dword [sym.imp.WS2_32.dll_ntohs]
movzx edx, ax
mov eax, dword [0x5bc698]
cmp byte [eax + 0x1a], 0
je 0x40bac3
cmp dword [eax], 0xffffffff
je 0x40babe
mov eax, dword [ebp - 0xcdc]
push dword [ebp - 0xcd8]
mov dword [ebp - 0xd0], eax
call dword [sym.imp.WS2_32.dll_htons]
movzx edx, ax
sub edi, 0xa
lea eax, [ebp - 0xcd6]
jmp 0x40bac9
mov eax, dword [ebp - 0x1c]
jmp 0x40bac9
lea eax, [ebp - 0xce0]
mov ecx, dword [ebp - 0xd0]
push esi
push edi
push eax
call fcn.0040aa60
mov eax, 1
mov ecx, 2
cmp byte [esi + 4], 0
jne 0x40ba27
test eax, eax
jg 0x40b9f0
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
movlpd qword [ebp - 0x48], xmm0
mov edx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x80], 0xffff
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x34], ecx
nop word [eax + eax]
mov eax, dword [esi + 0x7e9]
cmp eax, dword [esi + 0x7f5]
je 0x40bc7c
cmp byte [eax + 0x29], 0
je 0x40bc7c
mov edi, dword [esi + 0x7e9]
mov eax, dword [edi + 0x2a]
mov dword [esi + 0x7e9], eax
test edi, edi
je 0x40bc7c
cmp dword [edi + 0x25], 0
jne 0x40bc30
mov eax, ecx
or eax, edx
jne 0x40bb70
call fcn.00403150
mov ecx, eax
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x34], ecx
movzx eax, byte [edi + 0x13]
push edx
push ecx
push 1
push eax
mov eax, dword [edi + 0xd]
sub esp, 8
mov ecx, esp
mov dword [ecx], eax
mov ax, word [edi + 0x11]
mov word [ecx + 4], ax
mov ecx, esi
movzx eax, byte [edi + 0xc]
push eax
push dword [edi + 8]
push dword [edi + 4]
push dword [edi]
push dword [edi + 0x21]
call fcn.0040a520
test al, al
jne 0x40bbb3
push 1
push dword [edi + 0x21]
call fcn.00461132
add esp, 8
cmp dword [edi + 0x14], 0
je 0x40bc52
cmp dword [edi + 0xd], 0xffffffff
mov edx, 0xffff
jne 0x40bbd2
cmp word [edi + 0x11], dx
je 0x40bc52
mov eax, dword [edi + 0xd]
mov cx, word [edi + 0x11]
mov dword [ebp - 0xac], eax
mov word [ebp - 0xa8], cx
cmp eax, 0xffffffff
jne 0x40bbf0
cmp cx, dx
je 0x40bc52
lea eax, [ebp - 0x49]
push eax
lea eax, [ebp - 0xac]
push eax
lea ecx, [esi + 0x338]
call fcn.0040d440
cmp byte [ebp - 0x49], 0
je 0x40bc52
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x338]
imul eax, dword [eax + ecx*2 + 6], 0x7f2
add eax, dword [esi + 0x334]
je 0x40bc52
mov ecx, dword [edi + 0x14]
mov dword [eax + 0x7ee], ecx
jmp 0x40bc52
movzx eax, byte [edi + 0xc]
push eax
mov eax, dword [edi + 0xd]
push 1
push 0
sub esp, 8
mov ecx, esp
mov dword [ecx], eax
mov ax, word [edi + 0x11]
mov word [ecx + 4], ax
mov ecx, esi
call fcn.0040a1f0
mov eax, dword [esi + 0x7f1]
inc dword [esi + 0x7f9]
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x34]
mov byte [eax + 0x29], 0
mov eax, dword [esi + 0x7f1]
mov eax, dword [eax + 0x2a]
mov dword [esi + 0x7f1], eax
jmp 0x40bb20
mov eax, dword [esi + 0x3b9]
cmp eax, dword [esi + 0x3c5]
je 0x40beec
cmp byte [eax + 0x116], 0
je 0x40beec
mov edi, dword [esi + 0x3b9]
mov dword [ebp - 0x30], edi
mov eax, dword [edi + 0x117]
mov dword [esi + 0x3b9], eax
test edi, edi
je 0x40beec
mov dword [ebp - 0x28], edi
jmp 0x40bcc3
mov ecx, dword [ebp - 0x34]
mov eax, ecx
or eax, edx
jne 0x40bced
call fcn.00403150
push 0
mov ecx, eax
mov eax, edx
push 0x3e8
push eax
push ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x20], eax
call fcn.00485cd0
mov edx, eax
mov dword [ebp - 0x24], edx
jmp 0x40bcf0
mov edx, dword [ebp - 0x24]
cmp dword [edi + 6], edx
jae 0x40bea5
cmp dword [edi], 0xffffffff
lea edx, [edi + 4]
mov al, byte [edi + 0xa]
mov byte [ebp - 0x3a], al
jne 0x40bd18
mov ecx, 0xffff
mov dword [ebp - 0x40], edx
cmp word [edx], cx
jne 0x40bd18
mov cl, 1
jmp 0x40bd1d
mov dword [ebp - 0x40], edx
xor cl, cl
mov byte [ebp - 0x3b], cl
cmp al, 6
je 0x40bdbe
test cl, cl
jne 0x40bdbe
inc al
xor ecx, ecx
mov byte [edi + 0xa], al
mov eax, dword [ebp - 0x24]
add eax, 0x96
mov dword [ebp - 0x40], ecx
mov dword [edi + 6], eax
mov dword [ebp - 0x64], 0x57000018
mov byte [ebp - 0x60], 0x62
cmp dword [esi + 0x3b1], ecx
jbe 0x40bda2
nop dword [eax + eax]
mov eax, dword [esi + 0x3ad]
sub esp, 8
mov edx, esp
mov ecx, dword [eax + ecx*4]
push 0x18
mov eax, dword [ecx]
mov edi, dword [eax + 0x1c]
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov dword [edx], eax
mov eax, dword [ebp - 0x30]
mov ax, word [eax + 4]
mov word [edx + 4], ax
lea eax, [ebp - 0x64]
push eax
call edi
mov ecx, dword [ebp - 0x40]
inc ecx
mov dword [ebp - 0x40], ecx
cmp ecx, dword [esi + 0x3b1]
jb 0x40bd60
mov edi, dword [ebp - 0x30]
lea edx, [edi + 4]
movzx eax, word [edx]
push eax
push dword [edi]
lea eax, [ebp - 0x64]
push 5
push eax
push dword [esi + 0x816]
call fcn.004191a0
jmp 0x40bea5
mov ecx, dword [edi + 0xb]
test ecx, ecx
je 0x40bdd8
push ecx
call fcn.004610fd
mov al, byte [ebp - 0x3a]
add esp, 4
mov dword [edi + 0xb], 0
cmp al, 6
jne 0x40be31
cmp byte [ebp - 0x3b], 0
jne 0x40be31
cmp dword [edi + 0x112], 1
jne 0x40be31
push 0x16
call fcn.004684fa
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x40]
lea ecx, [edx + 0x15]
mov dword [edx + 0x10], ecx
mov dword [edx + 8], 1
mov byte [edx + 0x14], 0
mov byte [ecx], 0x1d
mov dword [edx + 0xc], 8
mov ecx, dword [edi]
mov dword [edx + 2], ecx
mov ecx, esi
mov ax, word [eax]
mov word [edx + 6], ax
mov eax, 0xffff
push edx
mov word [edx], ax
call fcn.0040a9d0
cmp edi, dword [ebp - 0x28]
jne 0x40be94
mov eax, dword [esi + 0x3c1]
inc dword [esi + 0x3c9]
mov byte [eax + 0x116], 0
mov eax, dword [esi + 0x3c1]
mov eax, dword [eax + 0x117]
mov dword [esi + 0x3c1], eax
mov eax, dword [esi + 0x3b9]
cmp eax, dword [esi + 0x3c5]
je 0x40be8b
cmp byte [eax + 0x116], 0
je 0x40be8b
mov ecx, dword [esi + 0x3b9]
mov edi, ecx
mov dword [ebp - 0x28], ecx
mov eax, dword [ecx + 0x117]
mov dword [esi + 0x3b9], eax
jmp 0x40bece
xor ecx, ecx
mov dword [ebp - 0x28], ecx
mov edi, ecx
jmp 0x40bece
mov eax, dword [ebp - 0x40]
mov ecx, 0xffff
mov dword [edi], 0xffffffff
mov word [eax], cx
mov eax, dword [esi + 0x3b9]
cmp eax, dword [esi + 0x3c5]
je 0x40bedc
cmp byte [eax + 0x116], 0
je 0x40bedc
mov edi, dword [esi + 0x3b9]
mov eax, dword [edi + 0x117]
mov dword [esi + 0x3b9], eax
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x30], edi
test edi, edi
jne 0x40bcc0
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x20]
test eax, eax
je 0x40beec
mov dword [esi + 0x3b9], eax
xor ecx, ecx
xor eax, eax
mov dword [ebp - 0x30], ecx
cmp ax, word [esi + 7]
jae 0x40d2f9
nop dword [eax]
imul edi, ecx, 0x7f2
add edi, dword [esi + 0x334]
mov dword [ebp - 0x2c], edi
cmp byte [edi], 0
je 0x40d2e6
mov eax, dword [edi + 1]
mov dword [ebp - 0x18], eax
mov ax, word [edi + 5]
mov word [ebp - 0x14], ax
mov eax, dword [ebp - 0x34]
or eax, edx
jne 0x40bf51
call fcn.00403150
push 0
mov ecx, eax
mov eax, edx
push 0x3e8
push eax
push ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x20], eax
call fcn.00485cd0
mov edx, eax
mov dword [ebp - 0x24], edx
jmp 0x40bf54
mov edx, dword [ebp - 0x24]
mov ecx, dword [edi + 0x6b8]
cmp edx, ecx
jbe 0x40bfc2
mov eax, edx
sub eax, ecx
cmp eax, 0x1388
jbe 0x40bfc2
cmp dword [edi + 0x7ee], 8
jne 0x40bfc2
lea ecx, [edi + 0xd]
call fcn.00414a70
cmp dword [eax + 0x60], 0
jne 0x40bfc2
push dword [ebp - 0x20]
mov eax, dword [edi + 1]
push dword [ebp - 0x34]
mov byte [ebp - 0x4a], 0x17
push 0
push 0
sub esp, 8
mov ecx, esp
push 0
mov dword [ecx], eax
mov ax, word [edi + 5]
push 8
push 3
mov word [ecx + 4], ax
lea eax, [ebp - 0x4a]
push 8
push eax
mov ecx, esi
call fcn.0040a520
mov eax, dword [edi + 0x2e0]
add eax, dword [ebp - 0x24]
mov dword [edi + 0x6b8], eax
lea eax, [esi + 0x3ad]
push eax
push dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
lea edx, [edi + 0xd]
push dword [ebp - 0x34]
mov dword [ebp - 0x40], edx
push dword [esi + 0x80d]
sub esp, 8
mov ecx, esp
push dword [esi + 0x816]
mov dword [ecx], eax
mov ax, word [ebp - 0x14]
mov word [ecx + 4], ax
mov ecx, edx
call fcn.00412ff0
cmp byte [edi + 0x2d8], 0
jne 0x40d1d6
mov eax, dword [edi + 0x7ee]
cmp eax, 1
je 0x40c017
cmp eax, 2
jne 0x40c088
mov dword [ebp - 0x28], 0
lea edx, [edi + 0x75]
mov ecx, dword [edx + 4]
mov eax, dword [edx]
cmp eax, ecx
ja 0x40c02e
sub ecx, eax
jmp 0x40c035
mov eax, dword [edx + 8]
sub eax, dword [edx]
add ecx, eax
test ecx, ecx
jne 0x40c082
mov eax, dword [ebp - 0x28]
add edx, 0x10
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 4
jb 0x40c021
cmp dword [edi + 0x2d], ecx
lea eax, [edi + 0xd]
ja 0x40c082
cmp dword [eax + 0x4c], ecx
jne 0x40c082
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0x10]
cmp edx, ecx
ja 0x40c063
sub ecx, edx
jmp 0x40c06d
mov eax, dword [eax + 0x18]
sub eax, edx
add ecx, eax
lea eax, [edi + 0xd]
test ecx, ecx
jne 0x40c082
cmp dword [eax + 4], ecx
ja 0x40c082
cmp dword [eax + 0xa8], ecx
jbe 0x40d1d6
mov eax, dword [edi + 0x7ee]
cmp eax, 3
jne 0x40c097
cmp dword [edi + 0x2d], 0
jbe 0x40d1d6
cmp eax, 4
je 0x40c0ab
cmp eax, 5
je 0x40c0ab
cmp eax, 6
je 0x40c0ab
cmp eax, 7
jne 0x40c0cf
mov ecx, dword [edi + 0x7cd]
mov edx, dword [ebp - 0x24]
cmp edx, ecx
jbe 0x40c0d2
mov eax, edx
sub eax, ecx
cmp eax, 0x2710
ja 0x40d1d6
mov eax, dword [edi + 0x7ee]
jmp 0x40c0d2
mov edx, dword [ebp - 0x24]
cmp byte [edi + 0x2d9], 0
je 0x40c123
push 0x16
call fcn.004684fa
mov edx, eax
add esp, 4
lea ecx, [edx + 0x15]
mov dword [edx + 0x10], ecx
mov dword [edx + 8], 1
mov byte [edx + 0x14], 0
mov dword [edx + 0xc], 8
mov byte [ecx], 0x26
mov ecx, dword [ebp - 0x18]
mov dword [edx + 2], ecx
mov ecx, esi
mov ax, word [ebp - 0x14]
mov word [edx + 6], ax
mov eax, dword [ebp - 0x30]
push edx
mov word [edx], ax
call fcn.0040a9d0
jmp 0x40d2e3
cmp eax, 8
jne 0x40c16b
cmp edx, dword [edi + 0x6b4]
jbe 0x40c16b
cmp byte [esi + 6], 0
jne 0x40c144
mov eax, 0xffff
cmp word [edi + 0x6b2], ax
jne 0x40c16b
push 1
sub esp, 8
lea eax, [edx + 0x1388]
mov ecx, esp
mov dword [edi + 0x6b4], eax
mov eax, dword [ebp - 0x18]
mov dword [ecx], eax
mov ax, word [ebp - 0x14]
mov word [ecx + 4], ax
mov ecx, esi
call fcn.0040a0b0
lea eax, [ebp - 0x5c]
push eax
lea ecx, [edi + 0xd]
call fcn.00412db0
mov dword [ebp - 0x28], eax
test eax, eax
jle 0x40d2e3
mov edi, dword [ebp - 0x5c]
add eax, 7
sar eax, 3
cmp dword [esi + 0x7d1], 0
mov dword [ebp - 0x1c], eax
je 0x40c390
push 0x240
mov dword [ebp - 0x2f8], 0
mov dword [ebp - 0x2f0], 0
call fcn.004684fa
add esp, 4
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x2f4], 0x1200
mov byte [ebp - 0x2e8], 1
push dword [ebp - 0x1c]
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x2f8]
push edi
mov dword [ebp - 0x2f8], 0
mov dword [ebp - 0x2f0], 0
call fcn.004021a0
mov ecx, dword [ebp - 0x2f8]
mov dword [ebp - 0x38], ecx
lea edx, [ecx + 7]
sar edx, 3
add dword [esi + 0x7dd], edx
test ecx, ecx
je 0x40c318
push edx
call fcn.004610f4
mov ecx, dword [ebp - 0x2f8]
add esp, 4
add ecx, 7
mov dword [ebp - 0x68], eax
sar ecx, 3
push ecx
push dword [ebp - 0x2ec]
push eax
call fcn.00462e50
mov ecx, dword [esi + 0x7d1]
add esp, 0xc
mov dword [ebp - 0x2f8], 0
xor esi, esi
mov dword [ebp - 0x2f0], 0
mov dword [ebp - 0x44], ecx
mov edi, dword [ecx]
mov edx, dword [ebp - 0x68]
mov eax, esi
sar eax, 3
mov ecx, esi
and ecx, 7
inc esi
mov dl, byte [edx + eax]
mov eax, 0x80
sar eax, cl
test al, dl
je 0x40c284
mov edi, dword [edi + 9]
jmp 0x40c287
mov edi, dword [edi + 5]
cmp dword [edi + 5], 0
jne 0x40c2a8
cmp dword [edi + 9], 0
jne 0x40c2a8
push 1
push 8
push edi
lea ecx, [ebp - 0x2f8]
call fcn.00402210
mov eax, dword [ebp - 0x44]
mov edi, dword [eax]
sub dword [ebp - 0x38], 1
jne 0x40c263
mov ecx, dword [ebp - 0x2f8]
mov esi, dword [ebp - 0x9c]
push dword [ebp - 0x68]
lea ecx, [ecx + 7]
sar ecx, 3
add dword [esi + 0x7e5], ecx
call fcn.004610fd
mov edi, dword [ebp - 0x2f8]
add esp, 4
lea edi, [edi + 7]
sar edi, 3
mov dword [ebp - 0x38], edi
cmp edi, dword [ebp - 0x1c]
jle 0x40c300
push dword [ebp - 0x5c]
call fcn.004610fd
add esp, 4
push edi
call fcn.004610f4
mov edi, eax
add esp, 4
mov dword [ebp - 0x5c], edi
jmp 0x40c303
mov edi, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x38]
push ecx
push dword [ebp - 0x2ec]
push edi
call fcn.00462e50
add esp, 0xc
jmp 0x40c31d
xor ecx, ecx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x2e8], 0
je 0x40c347
cmp dword [ebp - 0x2f4], 0x800
jle 0x40c347
push dword [ebp - 0x2ec]
call fcn.004684df
add esp, 4
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ecx + 0x7ee]
mov dword [ebp - 0x1c], edx
cmp edx, 6
jne 0x40c3f8
cmp byte [edi], 0xb
jne 0x40c395
push eax
mov eax, dword [ebp - 0x18]
push edi
sub esp, 8
mov ecx, esp
push dword [ebp - 0x2c]
mov dword [ecx], eax
mov ax, word [ebp - 0x14]
mov word [ecx + 4], ax
mov ecx, esi
call fcn.00408d50
push edi
call fcn.004610fd
add esp, 4
jmp 0x40d199
mov dword [ebp - 0x38], eax
jmp 0x40c34a
mov eax, dword [ebp - 0x18]
push 0
push 1
push 0
sub esp, 8
mov ecx, esp
mov dword [ecx], eax
movzx eax, word [ebp - 0x14]
mov word [ecx + 4], ax
mov ecx, esi
call fcn.0040a1f0
mov eax, dword [esi]
sub esp, 8
mov ecx, dword [eax + 0x64]
mov edx, dword [eax + 0xb8]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x44], ecx
mov ecx, dword [ebp - 0x2c]
mov edi, dword [ecx + 0x2e0]
mov ecx, esp
mov dword [ecx], eax
movzx eax, word [ebp - 0x14]
mov word [ecx + 4], ax
mov ecx, esi
call edx
push edi
push eax
mov ecx, esi
call dword [ebp - 0x44]
push dword [ebp - 0x5c]
call fcn.004610fd
add esp, 4
jmp 0x40d199
mov cl, byte [edi]
cmp cl, 0xb
jne 0x40c430
cmp edx, 8
je 0x40c422
push eax
mov eax, dword [ebp - 0x18]
push edi
sub esp, 8
mov ecx, esp
push dword [ebp - 0x2c]
mov dword [ecx], eax
mov ax, word [ebp - 0x14]
mov word [ecx + 4], ax
mov ecx, esi
call fcn.00408d50
push edi
call fcn.004610fd
add esp, 4
jmp 0x40d199
cmp cl, 0x1e
jne 0x40c58e
cmp eax, 7
jne 0x40c90a
cmp edx, 5
je 0x40c471
cmp edx, eax
je 0x40c471
mov eax, dword [ebp - 0x18]
cmp eax, dword [esi + 0x22d]
jne 0x40c463
mov ax, word [ebp - 0x14]
cmp ax, word [esi + 0x231]
je 0x40c471
push edi
call fcn.004610fd
add esp, 4
jmp 0x40d199
mov eax, dword [ebp - 0x2c]
push 1
sub esp, 8
mov ecx, esp
mov dword [eax + 0x7ee], 8
mov eax, dword [ebp - 0x18]
mov dword [ecx], eax
movzx eax, word [ebp - 0x14]
mov word [ecx + 4], ax
mov ecx, esi
call fcn.0040a0b0
mov eax, dword [ebp - 0x18]
push 1
sub esp, 8
mov ecx, esp
mov dword [ecx], eax
movzx eax, word [ebp - 0x14]
mov word [ecx + 4], ax
mov ecx, esi
call fcn.00409eb0
mov dword [ebp - 0x758], 0x38
mov byte [ebp - 0x748], 0
mov dword [ebp - 0x754], 0x38
mov dword [ebp - 0x74c], edi
push 1
push 0x20
lea eax, [ebp - 0x74]
mov dword [ebp - 4], 1
push eax
lea ecx, [ebp - 0x758]
mov dword [ebp - 0x750], 8
call fcn.00402340
push 1
push 0x10
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x758]
call fcn.00402340
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x74]
push 0x15
mov dword [ecx + 7], eax
movzx eax, word [ebp - 0x70]
mov word [ecx + 0xb], ax
call fcn.004684fa
mov ecx, dword [ebp - 0x28]
add esp, 4
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], edi
mov dword [eax + 8], 7
mov byte [eax + 0x14], 1
mov ecx, dword [ebp - 0x18]
mov dword [eax + 2], ecx
mov cx, word [ebp - 0x14]
mov word [eax + 6], cx
mov ecx, dword [ebp - 0x30]
mov word [eax], cx
mov ecx, esi
push eax
call fcn.0040a9d0
mov dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x748], 0
je 0x40d199
cmp dword [ebp - 0x754], 0x800
jle 0x40d199
push dword [ebp - 0x74c]
call fcn.004684df
add esp, 4
jmp 0x40d199
cmp cl, 9
jne 0x40c70b
cmp eax, 9
jne 0x40c90a
push 1
push 0x20
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x870], 0x48
push eax
lea ecx, [ebp - 0x870]
mov byte [ebp - 0x860], 0
mov dword [ebp - 0x86c], 0x48
mov dword [ebp - 0x864], edi
mov dword [ebp - 0x868], 8
call fcn.00402340
push 1
push 0x20
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0x870]
call fcn.00402340
call fcn.00403150
push 0
mov ecx, eax
mov eax, edx
push 0x3e8
push eax
push ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x20], eax
call fcn.00485cd0
mov edx, dword [ebp - 0x6c]
xor ecx, ecx
mov dword [ebp - 0x24], eax
sub eax, edx
cmp dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x2c]
cmova ecx, eax
mov dword [ebp - 0x68], ecx
mov eax, dword [edx + 0x6ae]
add eax, 0x118
lea eax, [eax + eax*2]
lea eax, [edx + eax*2]
mov dword [ebp - 0x44], eax
movzx eax, word [eax]
test eax, eax
je 0x40c659
lea eax, [eax + eax*2]
cmp ecx, eax
jae 0x40c6d2
cmp ecx, 0x4b0
jae 0x40c6d2
movzx eax, cx
mov ecx, eax
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x44]
mov word [ecx], ax
mov eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0xa4]
shr eax, 1
sub ecx, eax
mov eax, dword [edx + 0x6ae]
lea eax, [eax + eax*2]
mov dword [edx + eax*2 + 0x692], ecx
movzx eax, word [edx + 0x6b2]
mov ecx, eax
cmp ax, word [ebp - 0x80]
je 0x40c69b
cmp ecx, dword [ebp - 0x68]
jle 0x40c6a7
mov eax, dword [ebp - 0x1c]
mov word [edx + 0x6b2], ax
jmp 0x40c6aa
mov eax, dword [ebp - 0x1c]
movzx eax, ax
lea ecx, [edx + 0xd]
push eax
call fcn.004149f0
mov eax, dword [ebp - 0x2c]
inc dword [eax + 0x6ae]
cmp dword [eax + 0x6ae], 5
jne 0x40c6d2
mov dword [eax + 0x6ae], 0
push edi
call fcn.004610fd
add esp, 4
cmp byte [ebp - 0x860], 0
je 0x40d199
cmp dword [ebp - 0x86c], 0x800
jle 0x40d199
push dword [ebp - 0x864]
call fcn.004684df
add esp, 4
jmp 0x40d199
cmp cl, 6
jne 0x40c8ea
cmp eax, 5
jne 0x40c90a
mov dword [ebp - 0x988], 0x28
mov byte [ebp - 0x978], 0
mov dword [ebp - 0x984], 0x28
mov dword [ebp - 0x97c], edi
push 1
push 0x20
lea eax, [ebp - 0x84]
mov dword [ebp - 4], 2
push eax
lea ecx, [ebp - 0x988]
mov dword [ebp - 0x980], 8
call fcn.00402340
lea eax, [ebp - 0x3ff]
mov dword [ebp - 0x410], 0
mov dword [ebp - 0x40c], 0x800
mov dword [ebp - 0x408], 0
mov dword [ebp - 0x404], eax
mov byte [ebp - 0x400], 1
push 1
push 8
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x410]
mov byte [ebp - 0x50], 9
call fcn.00402210
mov eax, dword [ebp - 0x84]
lea ecx, [ebp - 0x410]
push 1
mov dword [ebp - 0xa0], eax
lea eax, [ebp - 0xa0]
push 0x20
push eax
call fcn.00402210
cmp byte [0x5bc6ac], 0
jne 0x40c7ee
push 0x5bc6b0
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov byte [0x5bc6ac], 1
lea eax, [ebp - 0xbc]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
push 0
push 0x3e8
push dword [ebp - 0xb8]
push dword [ebp - 0xbc]
call fcn.00461c80
push dword [0x5bc6b4]
push dword [0x5bc6b0]
push edx
push eax
call fcn.00485cd0
mov dword [ebp - 0x24], eax
call fcn.00403150
mov dword [ebp - 0x34], eax
lea ecx, [ebp - 0x410]
mov eax, dword [ebp - 0x24]
push 1
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x8c]
push 0x20
push eax
mov dword [ebp - 0x20], edx
call fcn.00402210
mov eax, dword [ebp - 0x18]
push 0
push dword [ebp - 0x24]
push 0
push 0
sub esp, 8
mov ecx, esp
push 0
push 6
push 0
push dword [ebp - 0x410]
mov dword [ecx], eax
mov ax, word [ebp - 0x14]
push dword [ebp - 0x404]
mov word [ecx + 4], ax
mov ecx, esi
call fcn.0040a520
push edi
call fcn.004610fd
add esp, 4
cmp byte [ebp - 0x400], 0
je 0x40c8b3
cmp dword [ebp - 0x40c], 0x800
jle 0x40c8b3
push dword [ebp - 0x404]
call fcn.004684df
add esp, 4
mov dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x978], 0
je 0x40d199
cmp dword [ebp - 0x984], 0x800
jle 0x40d199
push dword [ebp - 0x97c]
call fcn.004684df
add esp, 4
jmp 0x40d199
cmp cl, 0x20
jne 0x40c90a
mov eax, dword [ebp - 0x2c]
push edi
mov dword [eax + 0x7ee], 3
call fcn.004610fd
add esp, 4
jmp 0x40d199
cmp cl, 0x11
jne 0x40ca58
shl eax, 3
mov dword [ebp - 0xaa0], eax
mov byte [ebp - 0xa90], 0
mov dword [ebp - 0xa9c], eax
mov dword [ebp - 0xa94], edi
push ecx
push 8
lea eax, [ebp - 0x39]
mov dword [ebp - 4], 4
push eax
lea ecx, [ebp - 0xaa0]
mov dword [ebp - 0xa98], 8
call fcn.00402410
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
add eax, 0x7e2
mov dword [ebp - 0x28], eax
mov edx, dword [eax + 4]
mov dword [ebp - 0x1c], edx
test edx, edx
je 0x40c98d
mov edx, dword [eax]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x44], edx
mov edx, dword [edx + ecx*4]
test edx, edx
je 0x40c983
movzx eax, byte [ebp - 0x39]
cmp dword [edx], eax
je 0x40c990
mov eax, dword [ebp - 0x1c]
inc ecx
cmp ecx, eax
jae 0x40c98d
mov edx, dword [ebp - 0x44]
jmp 0x40c971
or cl, 0xff
movzx eax, byte [ebp - 0x39]
movzx edx, cl
mov dword [ebp - 0x44], eax
cmp edx, eax
je 0x40ca18
cmp cl, 0xff
je 0x40c9c1
mov eax, dword [ebp - 0x28]
push 9
mov eax, dword [eax]
mov ecx, dword [eax + edx*4]
push ecx
mov dword [eax + edx*4], 0
call fcn.00461132
add esp, 8
push 9
call fcn.00461102
mov edx, dword [ebp - 0x28]
mov ecx, eax
mov eax, dword [ebp - 0x44]
add esp, 4
mov dword [ebp - 0x1c], ecx
mov dword [ecx], eax
mov dword [ecx + 4], 0
cmp eax, dword [edx + 4]
jae 0x40ca0e
mov ecx, dword [edx]
shl eax, 2
mov dword [ebp - 0x44], eax
mov eax, dword [eax + ecx]
test eax, eax
je 0x40ca01
push 9
push eax
call fcn.00461132
mov edx, dword [ebp - 0x28]
add esp, 8
mov eax, dword [edx]
mov edx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x1c]
mov dword [edx + eax], ecx
jmp 0x40ca18
push eax
push ecx
push ecx
mov ecx, edx
call fcn.00417ab0
push edi
call fcn.004610fd
add esp, 4
mov dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0xa90], 0
je 0x40d199
cmp dword [ebp - 0xa9c], 0x800
jle 0x40d199
push dword [ebp - 0xa94]
call fcn.004684df
add esp, 4
jmp 0x40d199
cmp cl, 0xa
jne 0x40ca86
mov eax, dword [ebp - 0x18]
push 1
sub esp, 8
mov ecx, esp
mov dword [ecx], eax
mov ax, word [ebp - 0x14]
mov word [ecx + 4], ax
mov ecx, esi
call fcn.00409eb0
push edi
call fcn.004610fd
add esp, 4
jmp 0x40d199
cmp cl, 0x29
jne 0x40caef
mov ecx, dword [ebp - 0x2c]
add ecx, 0x6bc
add eax, 0xffffffff
mov dword [ebp - 0x1c], eax
mov dword [ecx], 0
mov dword [ecx + 8], 0
je 0x40d160
shl eax, 3
push eax
call fcn.004024e0
mov ecx, dword [ebp - 0x2c]
lea eax, [edi + 1]
push dword [ebp - 0x1c]
push eax
mov eax, dword [ecx + 0x6bc]
add eax, 7
sar eax, 3
add eax, dword [ecx + 0x6c8]
push eax
call fcn.00462e50
mov ecx, dword [ebp - 0x2c]
add esp, 0xc
mov eax, dword [ebp - 0x1c]
shl eax, 3
add dword [ecx + 0x6bc], eax
jmp 0x40d160
cmp cl, 0xf
jne 0x40cb16
cmp eax, 0x39
jne 0x40d151
push edi
push dword [ebp - 0x2c]
mov ecx, esi
call fcn.00409a90
push edi
call fcn.004610fd
add esp, 4
jmp 0x40d199
cmp cl, 0x10
jne 0x40cdaa
cmp eax, 0x35
jne 0x40d151
mov dword [ebp - method.CSHA1.virtual_0], vtable.CSHA1.0
mov dword [ebp - 4], 5
lea eax, [ebp - 0x18]
push 4
push eax
lea ecx, [ebp - 0x1a0]
mov dword [ebp - 0x19c], 0x67452301
mov dword [ebp - 0x198], 0xefcdab89
mov dword [ebp - 0x194], 0x98badcfe
mov dword [ebp - 0x190], 0x10325476
mov dword [ebp - 0x18c], 0xc3d2e1f0
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x184], 0
call fcn.00418fc0
push 2
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x1a0]
call fcn.00418fc0
push 0x14
lea eax, [esi + 0x991]
push eax
lea ecx, [ebp - 0x1a0]
call fcn.00418fc0
lea ecx, [ebp - 0x1a0]
call fcn.00419080
lea edx, [edi + 1]
mov dword [ebp - 0x1c], 0x10
lea ecx, [ebp - 0x140]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x40cbe7
add ecx, 4
add edx, 4
sub dword [ebp - 0x1c], 4
jae 0x40cbd0
jmp 0x40cc96
push 4
lea eax, [ebp - 0x18]
mov dword [ebp - 0x19c], 0x67452301
push eax
lea ecx, [ebp - 0x1a0]
mov dword [ebp - 0x198], 0xefcdab89
mov dword [ebp - 0x194], 0x98badcfe
mov dword [ebp - 0x190], 0x10325476
mov dword [ebp - 0x18c], 0xc3d2e1f0
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x184], 0
call fcn.00418fc0
push 2
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x1a0]
call fcn.00418fc0
push 0x14
lea eax, [esi + 0x9a5]
push eax
lea ecx, [ebp - 0x1a0]
call fcn.00418fc0
lea ecx, [ebp - 0x1a0]
call fcn.00419080
lea ecx, [ebp - 0x140]
mov dword [ebp - 0x1c], 0x10
lea edx, [edi + 1]
nop
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x40cd45
add ecx, 4
add edx, 4
sub dword [ebp - 0x1c], 4
jae 0x40cc80
cmp byte [esi + 0x8b6], 0
movups xmm0, xmmword [edi + 0x15]
movups xmmword [ebp - 0x1c0], xmm0
movups xmm0, xmmword [edi + 0x25]
movups xmmword [ebp - 0x1b0], xmm0
je 0x40cce8
sub esp, 0x10
lea eax, [esi + 0x957]
lea edx, [ebp - 0x1c0]
lea ecx, [ebp - 0x1e0]
push eax
lea eax, [esi + 0x927]
push eax
lea eax, [esi + 0x8f7]
push eax
lea eax, [esi + 0x8b7]
push eax
call fcn.0040db50
add esp, 0x20
lea edx, [ebp - 0xe4]
xor ecx, ecx
lea eax, [edi + 0x10]
cmp edx, eax
lea edx, [edi + 1]
ja 0x40cd1d
lea eax, [ebp - 0xd5]
cmp eax, edx
jb 0x40cd1d
mov al, byte [ebp + ecx - 0x1e0]
xor al, byte [edx + ecx]
mov byte [ebp + ecx - 0xe4], al
inc ecx
cmp ecx, 0x10
jl 0x40cd04
jmp 0x40cd32
movups xmm1, xmmword [ebp - 0x1e0]
movups xmm0, xmmword [edx]
pxor xmm1, xmm0
movups xmmword [ebp - 0xe4], xmm1
push 1
lea eax, [ebp - 0xe4]
mov ecx, esi
push eax
push dword [ebp - 0x2c]
call fcn.004090b0
push edi
call fcn.004610fd
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov dword [ebp - method.CSHA1.virtual_0], vtable.CSHA1.0
mov dword [ebp - 0x19c], 0x67452301
mov dword [ebp - 0x198], 0xefcdab89
mov dword [ebp - 0x194], 0x98badcfe
mov dword [ebp - 0x190], 0x10325476
mov dword [ebp - 0x18c], 0xc3d2e1f0
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x184], 0
jmp 0x40d199
cmp cl, 0x17
jne 0x40cdc6
cmp eax, 1
jne 0x40d151
push edi
call fcn.004610fd
add esp, 4
jmp 0x40d199
cmp cl, 0x22
jne 0x40d151
cmp eax, 0xd
jne 0x40d151
cmp edx, 5
je 0x40cdef
cmp edx, 4
je 0x40cdef
cmp byte [esi + 0x9b9], 0
jne 0x40cdef
xor al, al
jmp 0x40cdf1
mov al, 1
test al, al
je 0x40d129
mov dword [ebp - 0x640], 0x68
mov byte [ebp - 0x630], 0
mov dword [ebp - 0x63c], 0x68
mov dword [ebp - 0x634], edi
push 1
push 0x20
lea eax, [ebp - 0x7c]
mov dword [ebp - 4], 6
push eax
lea ecx, [ebp - 0x640]
mov dword [ebp - 0x638], 8
call fcn.00402340
push 1
push 0x10
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x640]
call fcn.00402340
push 1
push 0x10
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x640]
call fcn.00402340
cmp dword [ebp - 0x1c], 5
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x7c]
mov dword [ecx + 7], eax
mov ax, word [ebp - 0x78]
mov word [ecx + 0xb], ax
mov dword [ecx + 0x7ee], 8
je 0x40ceed
cmp byte [ecx + 0x7e1], 0
je 0x40cee3
lea eax, [ecx + 0x7d1]
mov dword [ebp - 0x44], eax
test eax, eax
je 0x40cee3
mov ecx, dword [ebp - 0x40]
xor dl, dl
lea edi, [ecx + 0x3fb]
mov byte [edi + 0x249], 1
push eax
push ecx
mov ecx, edi
call fcn.00416f80
add esp, 8
mov dl, 1
push dword [ebp - 0x44]
push ecx
lea ecx, [edi + 0x11a]
call fcn.00416f80
add esp, 4
lea ecx, [edi + 0x234]
call fcn.00417150
mov edi, dword [ebp - 0x5c]
add esp, 4
jmp 0x40ceed
mov eax, dword [ebp - 0x40]
mov byte [eax + 0x644], 0
push 0x15
call fcn.004684fa
mov dword [ebp - 0x44], eax
add esp, 4
mov dword [eax + 0x10], edi
mov dword [eax + 8], 0xd
mov byte [eax + 0x14], 1
mov dword [eax + 0xc], 0x68
mov ecx, dword [ebp - 0x18]
mov dword [eax + 2], ecx
movzx ecx, word [ebp - 0x14]
mov word [eax + 6], cx
mov eax, dword [ebp - 0x18]
mov cx, word [ebp - 0x14]
mov dword [ebp - 0xb4], eax
mov word [ebp - 0xb0], cx
cmp eax, 0xffffffff
jne 0x40cf47
mov eax, 0xffff
cmp cx, ax
jne 0x40cf47
mov ecx, 0xffffffff
jmp 0x40cf75
lea eax, [ebp - 0x55]
push eax
lea eax, [ebp - 0xb4]
push eax
lea ecx, [esi + 0x338]
call fcn.0040d440
cmp byte [ebp - 0x55], 0
je 0x40cf72
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x338]
mov ecx, dword [eax + ecx*2 + 6]
jmp 0x40cf75
or ecx, 0xffffffff
mov eax, dword [ebp - 0x44]
push eax
mov word [eax], cx
mov ecx, esi
call fcn.0040a9d0
lea eax, [ebp - 0x517]
mov dword [ebp - 0x528], 0
mov dword [ebp - 0x520], 0
mov dword [ebp - 0x51c], eax
mov dword [ebp - 0x524], 0x800
mov byte [ebp - 0x518], 1
push 1
push 8
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x528]
mov byte [ebp - 0x54], 0x1e
call fcn.00402210
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x528]
push 1
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0x90]
push 0x20
push eax
call fcn.00402210
movzx eax, word [ebp - 0x14]
lea ecx, [ebp - 0x528]
push 1
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0x94]
push 0x10
push eax
call fcn.00402210
cmp byte [0x5bc6ac], 0
jne 0x40d029
push 0x5bc6b0
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov byte [0x5bc6ac], 1
lea eax, [ebp - 0xc4]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
push 0
push 0x3e8
push dword [ebp - 0xc0]
push dword [ebp - 0xc4]
call fcn.00461c80
push dword [0x5bc6b4]
push dword [0x5bc6b0]
push edx
push eax
call fcn.00485cd0
push 0
push eax
mov eax, dword [ebp - 0x18]
push 0
push 0
sub esp, 8
mov ecx, esp
push 0
push 8
push 0
push dword [ebp - 0x528]
mov dword [ecx], eax
mov ax, word [ebp - 0x14]
push dword [ebp - 0x51c]
mov word [ecx + 4], ax
mov ecx, esi
call fcn.0040a520
cmp dword [ebp - 0x1c], 5
je 0x40d0cf
mov eax, dword [ebp - 0x18]
push 1
sub esp, 8
mov ecx, esp
mov dword [ecx], eax
movzx eax, word [ebp - 0x14]
mov word [ecx + 4], ax
mov ecx, esi
call fcn.0040a0b0
mov eax, dword [ebp - 0x18]
push 1
sub esp, 8
mov ecx, esp
mov dword [ecx], eax
movzx eax, word [ebp - 0x14]
mov word [ecx + 4], ax
mov ecx, esi
call fcn.00409eb0
cmp byte [ebp - 0x518], 0
je 0x40d0f2
cmp dword [ebp - 0x524], 0x800
jle 0x40d0f2
push dword [ebp - 0x51c]
call fcn.004684df
add esp, 4
mov dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x630], 0
je 0x40d199
cmp dword [ebp - 0x63c], 0x800
jle 0x40d199
push dword [ebp - 0x634]
call fcn.004684df
add esp, 4
jmp 0x40d199
mov eax, dword [ebp - 0x18]
push 0
push 1
sub esp, 8
mov ecx, esp
mov dword [ecx], eax
mov ax, word [ebp - 0x14]
mov word [ecx + 4], ax
mov ecx, esi
call fcn.004092b0
push edi
call fcn.004610fd
add esp, 4
jmp 0x40d199
cmp eax, 2
jbe 0x40d15b
cmp cl, 0xc
je 0x40d160
cmp cl, 0x14
jb 0x40d199
push 0x15
call fcn.004684fa
mov ecx, dword [ebp - 0x38]
add esp, 4
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0x28]
mov dword [eax + 0x10], edi
mov byte [eax + 0x14], 1
mov dword [eax + 0xc], ecx
mov ecx, dword [ebp - 0x18]
mov dword [eax + 2], ecx
mov cx, word [ebp - 0x14]
mov word [eax + 6], cx
mov ecx, dword [ebp - 0x30]
mov word [eax], cx
mov ecx, esi
push eax
call fcn.0040a9d0
mov eax, dword [ebp - 0x34]
mov edi, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x24], edi
call fcn.00412db0
mov dword [ebp - 0x28], eax
test eax, eax
jg 0x40c182
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x24], edi
jmp 0x40d2e6
mov eax, dword [edi + 0x7ee]
cmp eax, 8
je 0x40d1f4
cmp eax, 4
je 0x40d1f4
cmp eax, 1
je 0x40d1f4
cmp eax, 3
jne 0x40d2c4
push 0x16
call fcn.004684fa
mov ecx, eax
add esp, 4
mov dword [ebp - 0x44], ecx
lea edx, [ecx + 0x15]
mov dword [ecx + 8], 1
mov dword [ecx + 0x10], edx
mov byte [ecx + 0x14], 0
mov eax, dword [edi + 0x7ee]
cmp eax, 4
jne 0x40d224
mov byte [edx], 0x1d
jmp 0x40d22e
cmp eax, 8
sete al
add al, 0x20
mov byte [edx], al
mov dword [ecx + 0xc], 8
mov eax, dword [ebp - 0x18]
mov dword [ecx + 2], eax
mov ax, word [ebp - 0x14]
mov word [ecx + 6], ax
mov eax, dword [ebp - 0x30]
mov word [ecx], ax
mov eax, dword [esi + 0x9c6]
mov eax, dword [eax + 5]
cmp eax, dword [esi + 0x9ca]
je 0x40d269
mov eax, dword [esi + 0x9c6]
mov eax, dword [eax + 5]
cmp byte [eax + 4], 1
jne 0x40d291
mov eax, dword [esi + 0x9c6]
push 9
mov edi, dword [eax + 5]
call fcn.00461102
mov ecx, dword [esi + 0x9c6]
add esp, 4
mov dword [ecx + 5], eax
mov eax, dword [esi + 0x9c6]
mov eax, dword [eax + 5]
mov dword [eax + 5], edi
mov ecx, dword [esi + 0x9c6]
mov eax, dword [ecx + 5]
mov dword [esi + 0x9c6], eax
mov eax, dword [ebp - 0x44]
mov dword [ecx], eax
mov eax, dword [esi + 0x9ce]
inc dword [esi + 0x9d6]
mov byte [eax + 4], 1
mov eax, dword [esi + 0x9ce]
mov eax, dword [eax + 5]
mov dword [esi + 0x9ce], eax
mov eax, dword [ebp - 0x18]
push 0
push 1
push 0
sub esp, 8
mov ecx, esp
mov dword [ecx], eax
mov ax, word [ebp - 0x14]
mov word [ecx + 4], ax
mov ecx, esi
call fcn.0040a1f0
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x30]
movzx eax, word [esi + 7]
inc ecx
mov dword [ebp - 0x30], ecx
cmp ecx, eax
jb 0x40bf00
mov ecx, dword [ebp - 0xc]
mov al, 1
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret