Function at 0x406890
Capabilities:
Check for software breakpoints

Disassembly:
push ebp
mov ebp, esp
mov edx, dword [ebp + 0xc]
sub esp, 8
push ebx
push esi
xor ebx, ebx
push edi
cmp edx, 0xd2
jg 0x4075e3
je 0x4075c4
lea eax, [edx - 3]
cmp eax, 0xcc
ja case.0x409244.40296
movzx eax, byte [eax + 0x4094bc]
jmp dword [eax*4 + 0x409370]
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
cmp ecx, 0xffffffff
jl 0x4091ea
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x4dc], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
js 0x4091ea
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x6c0], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x714], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x715], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x712], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x70d], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
pop edi
mov esi, dword [eax]
test esi, esi
mov ecx, dword [edx + 0x77c]
setne al
mov byte [edx + 0x707], al
mov eax, ecx
and eax, 0xffffffef
or ecx, 0x10
test esi, esi
pop esi
cmove ecx, eax
mov eax, ebx
mov dword [edx + 0x77c], ecx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov ecx, dword [eax]
test ecx, ecx
setne al
mov byte [edx + 0x710], al
test ecx, ecx
je 0x4069d2
pop edi
pop esi
mov eax, ebx
mov dword [edx + 0x3f8], 5
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [edx + 0x3f8], 5
jne case.0x4068c5.91
pop edi
pop esi
mov dword [edx + 0x3f8], ebx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x708], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov ecx, dword [eax]
test ecx, ecx
setne al
mov byte [edx + 0x711], al
test ecx, ecx
je 0x406a39
mov eax, 4
mov byte [edx + 0x710], bl
pop edi
mov dword [edx + 0x3f8], eax
mov eax, ebx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor eax, eax
pop edi
mov dword [edx + 0x3f8], eax
mov eax, ebx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x6fd], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
test eax, eax
js 0x4091ea
cmp eax, 0x20c49b
jg 0x4091ea
imul ecx, eax, 0x3e8
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x208], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
js 0x4091ea
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x210], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
js 0x4091ea
cmp ecx, 3
jge 0x4091ea
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x518], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x6ff], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
js 0x4091ea
cmp ecx, 4
jge 0x4091ea
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x3e4], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 8]
pop edi
pop esi
mov eax, dword [eax]
cdq
mov dword [ecx + 0x3f0], eax
mov eax, ebx
mov dword [ecx + 0x3f4], edx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
cdq
mov edi, eax
mov ecx, edx
mov dword [ebp + 0xc], ecx
cmp ecx, 0xffffffff
jl 0x4091ea
jg 0x406b5c
cmp edi, 0xffffffff
jb 0x4091ea
mov esi, dword [ebp + 8]
cmp dword [esi + 0x18c], ecx
jg 0x406b95
jl 0x406b71
cmp dword [esi + 0x188], edi
jae 0x406b95
mov eax, dword [esi + 0x180]
lea edx, [esi + 0x664]
cmp eax, dword [edx]
jne 0x406b95
push 0
push edx
call fcn.00406820
mov ecx, dword [ebp + 0xc]
add esp, 8
mov dword [esi + 0x180], ebx
mov dword [esi + 0x188], edi
mov eax, ebx
pop edi
mov dword [esi + 0x18c], ecx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x70f], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x70b], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x70a], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x70c], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
cmp ecx, 0xffffffff
jl 0x4091ea
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x178], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
js 0x4091ea
mov eax, dword [ebp + 8]
and ecx, 7
pop edi
pop esi
mov dword [eax + 0x17c], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 8]
cmp dword [eax], ebx
je 0x406c78
mov eax, 1
mov byte [ecx + 0x710], bl
pop edi
mov dword [ecx + 0x3f8], eax
mov eax, ebx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor eax, eax
pop edi
mov dword [ecx + 0x3f8], eax
mov eax, ebx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x6f9], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
cmp dword [eax], ebx
je case.0x4068c5.91
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x3f8], ebx
mov word [eax + 0x710], bx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
js 0x4091ea
cmp ecx, 3
jl 0x406ce5
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 8]
pop edi
pop esi
mov byte [eax + 0x3fc], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
test edx, edx
jne 0x406d12
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x16c], ebx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov esi, dword [ebp + 8]
mov eax, edx
shr eax, 4
and al, 1
mov byte [esi + 0x9c6], al
test dl, 0x10
je 0x406d2d
and edx, 0xffffffef
or edx, 2
and edx, 0xffffffdb
xor ecx, ecx
mov eax, 1
shl eax, cl
inc ecx
and eax, edx
jne 0x406d4f
cmp ecx, 0x1f
jl 0x406d32
pop edi
pop esi
mov eax, 4
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
mov dword [esi + 0x16c], edx
mov eax, ebx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x6fe], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
js 0x4091ea
cmp ecx, 0xffff
jg 0x4091ea
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x154], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
test edx, edx
jne 0x406dbe
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x170], ebx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov esi, dword [ebp + 8]
mov eax, edx
shr eax, 4
and al, 1
mov byte [esi + 0x9d6], al
test dl, 0x10
je 0x406dd9
and edx, 0xffffffef
or edx, 2
and edx, 0xffffffdb
xor ecx, ecx
nop
mov eax, 1
shl eax, cl
inc ecx
and eax, edx
jne 0x406dfd
cmp ecx, 0x1f
jl 0x406de0
pop edi
pop esi
mov eax, 4
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
mov dword [esi + 0x170], edx
mov eax, ebx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
js 0x4091ea
cmp ecx, 7
jg 0x4091ea
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x3e8], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
sub eax, 0
je 0x406e5a
sub eax, 1
jne 0x406fa0
mov eax, dword [ebp + 8]
pop edi
pop esi
mov byte [eax + 0x71c], 1
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 8]
pop edi
pop esi
mov byte [eax + 0x71c], bl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x701], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x700], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
js 0x4091ea
cmp ecx, 4
jge 0x4091ea
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x500], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x704], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x703], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x705], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
js 0x4091ea
cmp ecx, 3
jge 0x4091ea
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x508], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x706], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
js 0x4091ea
cmp ecx, 3
jge 0x4091ea
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x504], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
js 0x406fa0
cmp ecx, 2
jg 0x406fa0
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x50c], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
mov ebx, 0x2b
pop esi
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
cmp eax, 0xffffffff
jl 0x4091ea
mov ecx, dword [ebp + 8]
cdq
pop edi
pop esi
mov dword [ecx + 0x218], eax
mov eax, ebx
mov dword [ecx + 0x21c], edx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
js 0x4091ea
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x220], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
js 0x4091ea
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x224], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
js 0x4091ea
cmp ecx, 0xffff
jg 0x4091ea
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x168], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
test eax, eax
js 0x4091ea
cmp eax, 0x20c49b
jg 0x4091ea
imul ecx, eax, 0x3e8
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x1f8], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
js 0x4091ea
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x1f8], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
test eax, eax
js 0x4091ea
cmp eax, 0x20c49b
jg 0x4091ea
imul ecx, eax, 0x3e8
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x1fc], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
js 0x4091ea
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x1fc], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
cmp eax, 0xffffffff
jl 0x4091ea
mov ecx, dword [ebp + 8]
cdq
pop edi
pop esi
mov dword [ecx + 0x238], eax
mov eax, ebx
mov dword [ecx + 0x23c], edx
pop ebx
mov esp, ebp
pop ebp
ret
mov esi, dword [ebp + 8]
push 0
lea eax, [esi + 0x5d8]
push eax
call fcn.00406820
push esi
call fcn.00412ec0
add esp, 0xc
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x6fa], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
test eax, eax
js 0x4091ea
cmp eax, 0xffff
jg 0x4091ea
push eax
call fcn.0041a2d0
mov ecx, dword [ebp + 8]
add esp, 4
pop edi
mov word [ecx + 0x190], ax
mov eax, ebx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
test eax, eax
js 0x4091ea
cmp eax, 0xffff
jg 0x4091ea
push eax
call fcn.0041a2b0
mov ecx, dword [ebp + 8]
add esp, 4
pop edi
mov dword [ecx + 0x194], eax
mov eax, ebx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x434], cl
mov eax, dword [eax + 0xc]
test eax, eax
je case.0x4068c5.91
pop edi
mov byte [eax + 0x208], cl
mov eax, ebx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
test byte [eax], 3
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x435], cl
mov eax, dword [eax + 0xc]
test eax, eax
je case.0x4068c5.91
pop edi
mov byte [eax + 0x209], cl
mov eax, ebx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [0x5bf014]
test byte [eax + 8], 2
je case.0x40760b.244
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x464], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x8fc], ebx
jne 0x4091ea
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
cmp eax, 0x80000
jle 0x407256
mov eax, 0x80000
pop edi
mov dword [ecx + 0x4e0], eax
mov eax, ebx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 1
jge 0x40726f
mov eax, 0x4000
pop edi
mov dword [ecx + 0x4e0], eax
mov eax, ebx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, 0x400
cmp eax, edx
pop edi
cmovl eax, edx
mov dword [ecx + 0x4e0], eax
mov eax, ebx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x716], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
test eax, eax
js 0x4091ea
mov ecx, dword [ebp + 8]
cdq
pop edi
pop esi
mov dword [ecx + 0x4f8], eax
mov eax, ebx
mov dword [ecx + 0x4fc], edx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
js 0x4091ea
cmp ecx, 4
jge 0x4091ea
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x51c], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
js 0x4091ea
cmp ecx, 2
jg 0x4091ea
mov eax, dword [ebp + 8]
pop edi
pop esi
mov byte [eax + 0x4f0], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x717], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x718], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x719], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x437], cl
mov byte [eax + 0x4a3], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
sete cl
mov byte [eax + 0x71a], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
sete cl
mov byte [eax + 0x71b], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
js 0x4091ea
cmp ecx, 0x1ff
jg 0x4091ea
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x520], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
js 0x4091ea
cmp ecx, 0x1ff
jg 0x4091ea
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x524], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x68c], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x690], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x694], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
dec eax
cmp eax, 0xa
ja case.default.0x407464
jmp dword [eax*4 + 0x40958c]
mov eax, dword [ebp + 8]
mov ecx, 1
pop edi
pop esi
mov dword [eax + 0x69c], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 8]
mov ecx, 2
pop edi
pop esi
mov dword [eax + 0x69c], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 8]
mov ecx, 3
pop edi
pop esi
mov dword [eax + 0x69c], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 8]
mov ecx, 4
pop edi
pop esi
mov dword [eax + 0x69c], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 8]
mov ecx, 5
pop edi
pop esi
mov dword [eax + 0x69c], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 8]
mov ecx, 6
pop edi
pop esi
mov dword [eax + 0x69c], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 8]
mov ecx, 7
pop edi
pop esi
mov dword [eax + 0x69c], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 8]
mov ecx, 8
pop edi
pop esi
mov dword [eax + 0x69c], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 8]
mov ecx, 9
pop edi
pop esi
mov dword [eax + 0x69c], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 8]
mov ecx, 0xa
pop edi
pop esi
mov dword [eax + 0x69c], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 8]
mov ecx, 0xb
pop edi
pop esi
mov dword [eax + 0x69c], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 8]
xor ecx, ecx
pop edi
pop esi
mov dword [eax + 0x69c], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0xc60], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0xc64], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x71e], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
js 0x4091ea
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x6b4], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
cmp edx, 0x2711
jg 0x407b95
je 0x407b7e
lea eax, [edx - 0xd4]
cmp eax, 0x60
ja case.0x409244.40296
movzx eax, byte [eax + 0x409654]
jmp dword [eax*4 + 0x4095b8]
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x709], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x6f7], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
cmp edx, 0x20
mov eax, 0x400
mov edx, dword [ebp + 8]
mov ecx, 0x46c
cmove ecx, eax
mov eax, dword [ebp + 0x10]
add edx, ecx
mov ecx, dword [eax]
movzx eax, cx
and ecx, 0xffff0000
cmp eax, 2
je 0x4091ea
cmp eax, 3
je 0x4091ea
cmp eax, 8
jae 0x4091ea
cmp ecx, 0x7ffff
ja 0x4091ea
pop edi
mov dword [edx], eax
mov eax, ebx
pop esi
mov dword [edx + 4], ecx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov cl, byte [eax]
mov eax, dword [ebp + 8]
and cl, 1
mov byte [eax + 0x6f8], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
js 0x4091ea
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x6c4], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
cmp eax, 1
jg 0x4091ea
test eax, eax
mov eax, dword [ebp + 8]
pop edi
setne cl
pop esi
mov byte [eax + 0x730], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ebx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x174], ebx
and ebx, 0xfffffffa
neg ebx
sbb ebx, ebx
and ebx, 4
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
js 0x4091ea
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x200], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x728], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x72d], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x4a0], cl
mov eax, dword [eax + 0xc]
test eax, eax
je case.0x4068c5.91
pop edi
mov byte [eax + 0x240], cl
mov eax, ebx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
test byte [eax], 3
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x72e], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
test byte [eax], 3
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x4a1], cl
mov eax, dword [eax + 0xc]
test eax, eax
je case.0x4068c5.91
pop edi
mov byte [eax + 0x241], cl
mov eax, ebx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.004125e0
test al, al
jne 0x4077f9
pop edi
mov ebx, 4
pop esi
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x436], cl
mov eax, dword [eax + 0xc]
test eax, eax
je case.0x4068c5.91
pop edi
mov byte [eax + 0x20a], cl
mov eax, ebx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.004125e0
test al, al
je case.0x40760b.244
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x72f], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.004129e0
test al, al
je case.0x40760b.244
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x465], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
cmp eax, 0x200000
jle 0x40787d
mov eax, 0x200000
jmp 0x407887
mov ecx, 0x4000
cmp eax, ecx
cmovl eax, ecx
mov esi, dword [ebp + 8]
mov dword [esi + 0x4e4], eax
push dword [esi + 0x900]
call dword [0x5bf004]
add esp, 4
mov dword [esi + 0x900], ebx
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 8]
pop edi
pop esi
mov edx, dword [eax]
mov al, dl
and al, 1
mov byte [ecx + 0x466], al
mov eax, edx
shr eax, 1
and al, 1
mov byte [ecx + 0x467], al
mov eax, edx
shr eax, 2
and al, 1
mov byte [ecx + 0x468], al
mov eax, edx
shr eax, 3
and al, 1
mov byte [ecx + 0x469], al
mov eax, edx
shr eax, 4
and al, 1
shr edx, 5
mov byte [ecx + 0x46a], al
and dl, 1
mov eax, ebx
mov byte [ecx + 0x46b], dl
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 8]
pop edi
pop esi
mov edx, dword [eax]
mov al, dl
and al, 1
mov byte [ecx + 0x4d2], al
mov eax, edx
shr eax, 1
and al, 1
mov byte [ecx + 0x4d3], al
mov eax, edx
shr eax, 2
and al, 1
mov byte [ecx + 0x4d4], al
mov eax, edx
shr eax, 3
and al, 1
mov byte [ecx + 0x4d5], al
mov eax, edx
shr eax, 4
and al, 1
shr edx, 5
mov byte [ecx + 0x4d6], al
and dl, 1
mov eax, ebx
mov byte [ecx + 0x4d7], dl
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x731], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x71d], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x71f], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
js 0x4091ea
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x6b8], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
js 0x4091ea
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x6bc], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x721], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x722], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x723], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x724], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x725], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
js 0x4091ea
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x204], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x726], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
cmp dword [eax], ebx
mov eax, dword [ebp + 8]
setne cl
mov byte [eax + 0x72a], cl
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
js 0x4091ea
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x6dc], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
js 0x4091ea
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x20c], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov esi, dword [ebp + 8]
add esi, 0x73c
test byte [eax], 1
je 0x407b35
cmp dword [esi], ebx
jne case.0x4068c5.91
call fcn.0041b5c0
mov dword [esi], eax
test eax, eax
jne case.0x4068c5.91
pop edi
pop esi
mov eax, 0x1b
pop ebx
mov esp, ebp
pop ebp
ret
push esi
call fcn.0041b570
add esp, 4
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov esi, dword [ebp + 8]
mov eax, dword [esi + 0x740]
test eax, eax
jne 0x407b67
call fcn.0041a820
mov dword [esi + 0x740], eax
test eax, eax
je 0x407ed7
mov ecx, dword [ebp + 0x10]
push dword [ecx]
push eax
call fcn.0041a800
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x158], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
cmp edx, 0x27f4
jg 0x4088de
je 0x4088c7
add edx, 0xffffd8ee
cmp edx, 0xde
ja case.0x409244.40296
movzx eax, byte [edx + 0x4097e0]
jmp dword [eax*4 + 0x4096b8]
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x5ac
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x5c0
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x5bc
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x57c
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov esi, dword [ebp + 8]
mov ecx, dword [eax]
mov dword [ebp + 0xc], ecx
test ecx, ecx
je 0x407ce2
mov edi, dword [esi + 0x188]
mov eax, edi
mov edx, dword [esi + 0x18c]
and eax, edx
cmp eax, 0xffffffff
je 0x407ce2
test edx, edx
ja 0x407cb6
jb 0x407c76
cmp edi, 0xffffffff
ja 0x407cb6
lea eax, [esi + 0x664]
push 0
push eax
call fcn.00406820
mov ecx, dword [esi + 0x188]
add esp, 8
mov edx, dword [esi + 0x18c]
mov eax, ecx
or eax, edx
je 0x407c9e
mov dword [ebp - 4], edx
jmp 0x407ca6
mov ecx, 1
mov dword [ebp - 4], ebx
push ecx
call dword [section..data]
mov edi, eax
add esp, 4
test edi, edi
jne 0x407cbd
mov ebx, 0x1b
jmp 0x407cf4
mov ecx, dword [esi + 0x188]
mov eax, ecx
or eax, dword [esi + 0x18c]
je 0x407cda
push ecx
push dword [ebp + 0xc]
push edi
call fcn.0051ccd0
add esp, 0xc
mov dword [esi + 0x664], edi
jmp 0x407cf4
push ecx
lea eax, [esi + 0x664]
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
mov eax, dword [esi + 0x664]
pop edi
mov dword [esi + 0x180], eax
mov eax, ebx
mov dword [esi + 0x3f8], 1
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov esi, dword [ebp + 8]
push 0
mov eax, dword [eax]
mov dword [esi + 0x180], eax
lea eax, [esi + 0x664]
push eax
call fcn.00406820
add esp, 8
mov dword [esi + 0x3f8], 1
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
test eax, eax
je 0x407d8f
cmp byte [eax], bl
jne 0x407d8f
call fcn.0041d740
mov esi, eax
test esi, esi
jne 0x407d6b
pop edi
mov ebx, 0x1b
pop esi
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 8]
add eax, 0x550
push esi
push eax
call fcn.00406820
push esi
mov ebx, eax
call dword [0x5bf004]
add esp, 0xc
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push eax
mov eax, dword [ebp + 8]
add eax, 0x550
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp + 8]
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov eax, dword [eax]
mov dword [ecx + 0x248], eax
mov eax, ebx
mov byte [ecx + 0x710], bl
mov dword [ecx + 0x3f8], 2
pop ebx
mov esp, ebp
pop ebp
ret
mov edi, dword [ebp + 8]
cmp byte [edi + 0xd27], bl
je 0x407df7
push dword [edi + 0xcb8]
call dword [0x5bf004]
add esp, 4
mov dword [edi + 0xcb8], ebx
mov byte [edi + 0xd27], bl
mov eax, dword [ebp + 0x10]
lea esi, [edi + 0x58c]
push dword [eax]
push esi
call fcn.00406820
add esp, 8
mov ebx, eax
mov eax, dword [esi]
mov dword [edi + 0xcb8], eax
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x5c4
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x240], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x4ec], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x53c
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
test edx, edx
je 0x407ef2
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x407e98
sub ecx, esi
cmp ecx, 0x7a1200
ja 0x4091ea
mov esi, dword [ebp + 8]
push edx
push dword [esi + 0xcbc]
call fcn.00405da0
add esp, 8
test eax, eax
jne 0x407ee3
push dword [esi + 0xcbc]
call fcn.00405de0
add esp, 4
mov dword [esi + 0xcbc], ebx
pop edi
pop esi
mov eax, 0x1b
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
mov dword [esi + 0xcbc], eax
mov eax, ebx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov esi, dword [ebp + 8]
push dword [esi + 0xcbc]
call fcn.00405de0
mov eax, dword [esi + 0x78]
add esp, 4
mov dword [esi + 0xcbc], ebx
test eax, eax
je 0x407f15
cmp dword [eax + 0x68], ebx
jne 0x407f2e
push dword [esi + 0x738]
call fcn.0040dac0
push dword [esi + 0x738]
call fcn.0040da70
add esp, 8
pop edi
mov dword [esi + 0x738], ebx
mov eax, ebx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov esi, dword [ebp + 8]
push dword [eax]
lea eax, [esi + 0x540]
push eax
call fcn.00406820
mov ebx, eax
movzx eax, byte [esi + 0x6f9]
push eax
push dword [esi + 0x738]
push 0
push esi
call fcn.0040dd20
add esp, 0x18
mov dword [esi + 0x738], eax
test eax, eax
mov ecx, 0x1b
cmove ebx, ecx
pop edi
pop esi
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov esi, dword [eax]
test esi, esi
je case.0x4068c5.91
push 0x5595c0
push esi
call fcn.0041d4b0
add esp, 8
test eax, eax
je 0x407fd0
mov esi, dword [ebp + 8]
push 2
push 2
push esi
call fcn.0041da60
push dword [esi + 0x738]
call fcn.0040dac0
push 2
push esi
call fcn.0041daa0
add esp, 0x18
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push str.SESS
push esi
call fcn.0041d4b0
add esp, 8
test eax, eax
je 0x40800e
mov esi, dword [ebp + 8]
push 2
push 2
push esi
call fcn.0041da60
push dword [esi + 0x738]
call fcn.0040db00
push 2
push esi
call fcn.0041daa0
add esp, 0x18
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push str.FLUSH
push esi
call fcn.0041d4b0
add esp, 8
test eax, eax
je 0x408036
push 0
push dword [ebp + 8]
call fcn.0040df80
add esp, 8
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push str.RELOAD
push esi
call fcn.0041d4b0
add esp, 8
test eax, eax
je 0x40805c
push dword [ebp + 8]
call fcn.0040df00
add esp, 4
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edi, dword [ebp + 8]
cmp dword [edi + 0x738], ebx
jne 0x40807c
push 1
push 0
push 0
push edi
call fcn.0040dd20
add esp, 0x10
mov dword [edi + 0x738], eax
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x408081
sub ecx, edx
cmp ecx, 0x7a1200
ja 0x4091ea
push esi
call dword [0x5bf00c]
mov esi, eax
add esp, 4
test esi, esi
je 0x40810d
cmp dword [edi + 0x738], ebx
je 0x40810d
push 2
push 2
push edi
call fcn.0041da60
push 0xb
push esi
push str.Set_Cookie:
call fcn.0041d640
add esp, 0x18
test eax, eax
je 0x4080d5
mov byte [ebp + 0xc], 1
lea eax, [esi + 0xb]
jmp 0x4080da
mov byte [ebp + 0xc], bl
mov eax, esi
push 1
push 0
push 0
push eax
push 0
push dword [ebp + 0xc]
push dword [edi + 0x738]
push edi
call fcn.0040cd40
push 2
push edi
call fcn.0041daa0
push esi
call dword [0x5bf004]
add esp, 0x2c
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push esi
mov ebx, 0x1b
call dword [0x5bf004]
add esp, 4
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x544
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x580
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x160], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x150], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov edi, dword [ebp + 8]
push dword [eax]
lea esi, [edi + 0x55c]
push esi
call fcn.00406820
add esp, 8
mov ebx, eax
cmp dword [esi], 0
setne al
mov byte [edi + 0x702], al
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x554
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x558
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov edi, dword [ebp + 8]
push dword [eax]
lea esi, [edi + 0x578]
push esi
call fcn.00406820
add esp, 8
mov ebx, eax
cmp dword [esi], 0
setne al
mov byte [edi + 0x713], al
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x15c], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov edi, dword [ebp + 8]
cmp byte [edi + 0xd26], bl
je 0x408268
push dword [edi + 0xcb4]
call dword [0x5bf004]
add esp, 4
mov dword [edi + 0xcb4], ebx
mov byte [edi + 0xd26], bl
mov eax, dword [ebp + 0x10]
lea esi, [edi + 0x590]
push dword [eax]
push esi
call fcn.00406820
add esp, 8
mov ebx, eax
mov eax, dword [esi]
mov dword [edi + 0xcb4], eax
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp + 8]
lea eax, [ecx + 0x5e0]
push eax
lea eax, [ecx + 0x5dc]
push eax
mov eax, dword [ebp + 0x10]
push dword [eax]
call fcn.00409b60
add esp, 0xc
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x5dc
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x5e0
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x5e4
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x630
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x3c4], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x3c8], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x3c0], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x3dc], ecx
mov dword [eax + 0xcc0], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x1f0], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp + 8]
lea eax, [ecx + 0x5ec]
push eax
lea eax, [ecx + 0x5e8]
jmp 0x40829f
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x5e8
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x5ec
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x5f0
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x588
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x14c], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov esi, dword [ebp + 8]
mov eax, dword [eax]
mov dword [esi + 0x148], eax
test eax, eax
jne case.0x4068c5.91
push 2
call fcn.0051f417
add esp, 4
mov dword [esi + 0x148], eax
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x1d0], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x1f4], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x52c
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x534
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x560
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x570
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x568
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov esi, dword [eax]
test esi, esi
je case.0x4068c5.91
cmp byte [esi], bl
je case.0x4068c5.91
mov edi, dword [ebp + 8]
push esi
lea eax, [edi + 0x5d8]
push eax
call fcn.00406820
mov ebx, eax
add esp, 8
test ebx, ebx
jne case.0x4068c5.91
push esi
push edi
call fcn.00412eb0
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x54c
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [0x5bf014]
test byte [eax + 8], 8
je case.0x40760b.244
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x44c], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x59c
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [0x5bf014]
test byte [eax + 8], 1
je case.0x40760b.244
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x594
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x5c8
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x5d0
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x3d8], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov esi, dword [ebp + 8]
mov edi, dword [eax]
mov eax, dword [esi + 0x78]
test eax, eax
je 0x4086de
push 2
push 1
push esi
call fcn.0041da60
add esp, 0xc
cmp dword [esi + 0x6c], 2
jne 0x40869f
mov dword [esi + 0x68], ebx
mov dword [esi + 0x6c], ebx
mov ecx, dword [esi + 0x78]
mov eax, dword [ecx + 0x68]
cmp eax, dword [esi + 0x738]
jne 0x4086b3
mov dword [esi + 0x738], ebx
mov eax, dword [ecx + 0x6c]
cmp eax, dword [esi + 0x91c]
jne 0x4086c4
mov dword [esi + 0x91c], ebx
mov ecx, dword [ecx + 8]
mov eax, dword [esi + 0x78]
dec ecx
push 1
push esi
mov dword [eax + 8], ecx
call fcn.0041daa0
add esp, 8
mov dword [esi + 0x78], ebx
xor eax, eax
test edi, edi
je 0x4086ef
cmp dword [edi], 0x7e117a1e
jne 0x4086ef
mov dword [esi + 0x78], edi
mov eax, edi
test eax, eax
je case.0x4068c5.91
push 2
push 1
push esi
call fcn.0041da60
mov eax, dword [esi + 0x78]
add esp, 0xc
mov ecx, dword [eax + 8]
mov eax, dword [esi + 0x78]
inc ecx
mov dword [eax + 8], ecx
mov ecx, dword [esi + 0x78]
test byte [ecx + 4], 8
je 0x408727
lea eax, [ecx + 0x50]
mov dword [esi + 0x68], eax
mov dword [esi + 0x6c], 2
cmp dword [ecx + 0x68], ebx
je 0x408746
push dword [esi + 0x738]
call fcn.0040da70
mov ecx, dword [esi + 0x78]
add esp, 4
mov eax, dword [ecx + 0x68]
mov dword [esi + 0x738], eax
cmp dword [ecx + 0x6c], ebx
je 0x408760
mov eax, dword [ecx + 0x70]
mov dword [esi + 0x4d8], eax
mov eax, dword [esi + 0x78]
mov eax, dword [eax + 0x6c]
mov dword [esi + 0x91c], eax
push 1
push esi
call fcn.0041daa0
add esp, 8
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x4e8], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x1bc], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c4], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x1cc], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x618
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x61c
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x698], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x5f4
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x5f8
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x5fc
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x164], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0xd54], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x6b0], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x244], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
cmp edx, 0x4e2b
jg 0x408e47
je 0x408e0c
add edx, 0xffffd80a
cmp edx, 0x4b
ja case.0x409244.40296
movzx eax, byte [edx + 0x409950]
jmp dword [eax*4 + 0x4098c0]
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x5b0
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.00412f30
test al, al
je case.0x408906.10240
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x5b4
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.00412f30
test al, al
je case.0x408906.10240
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x5b8
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x638
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov edi, dword [ebp + 8]
push dword [eax]
lea esi, [edi + 0x668]
push esi
call fcn.00406820
add esp, 8
mov ebx, eax
cmp dword [esi], 0
je case.0x4068c5.91
mov dword [edi + 0x16c], 0x80
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov esi, dword [ebp + 8]
push 0
push dword [eax]
lea eax, [esi + 0x250]
push eax
call fcn.0040fde0
mov ebx, eax
add esp, 0xc
test ebx, ebx
jne case.0x4068c5.91
pop edi
mov dword [esi + 0x3f8], 3
mov byte [esi + 0x710], al
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x584
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x610
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x614
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x6e8], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x530
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x538
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x564
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x574
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x56c
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [0x5bf014]
test byte [eax + 8], 4
je case.0x40760b.244
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x5a4
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [0x5bf014]
test byte [eax + 8], 4
je case.0x40760b.244
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x5a8
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x5a0
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [0x5bf014]
test byte [eax + 8], 1
je case.0x40760b.244
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x598
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x5cc
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x5d4
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x65c
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x6d8], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x548
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x648
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp + 8]
mov eax, dword [ebp + 0x10]
mov byte [ecx + 0x729], bl
push dword [eax]
lea eax, [ecx + 0x634]
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp + 8]
mov eax, dword [ebp + 0x10]
mov byte [ecx + 0x729], 1
push dword [eax]
lea eax, [ecx + 0x634]
push eax
call fcn.00406820
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x3e0], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov edi, dword [ebp + 8]
push dword [eax]
lea esi, [edi + 0x63c]
push esi
call fcn.00406820
add esp, 8
mov ebx, eax
cmp dword [esi], 0
setne al
mov byte [edi + 0x72b], al
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x6ec], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x1e4], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x1ec], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov esi, dword [ebp + 8]
cmp dword [esi + 0x73c], ebx
jne 0x408d6f
call fcn.0041b5c0
mov dword [esi + 0x73c], eax
test eax, eax
je 0x407ed7
mov eax, dword [ebp + 0x10]
mov edi, dword [eax]
lea eax, [esi + 0x644]
push edi
push eax
call fcn.00406820
mov ebx, eax
add esp, 8
test ebx, ebx
jne 0x409368
test edi, edi
je case.0x4068c5.91
push edi
push dword [esi + 0x73c]
push esi
call fcn.0041b600
add esp, 0xc
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov esi, dword [ebp + 8]
cmp dword [esi + 0x740], ebx
jne 0x408dcd
call fcn.0041a820
mov dword [esi + 0x740], eax
test eax, eax
je 0x407ed7
mov eax, dword [ebp + 0x10]
mov edi, dword [eax]
lea eax, [esi + 0x640]
push edi
push eax
call fcn.00406820
mov ebx, eax
add esp, 8
test ebx, ebx
jne 0x409368
test edi, edi
je case.0x4068c5.91
push edi
push dword [esi + 0x740]
call fcn.0041a850
add esp, 8
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 8]
mov eax, dword [eax]
mov dword [ecx + 0x198], eax
test eax, eax
jne 0x408e37
pop edi
mov byte [ecx + 0x6f5], bl
mov eax, ebx
pop esi
mov dword [ecx + 0x198], fcn.005283a0
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
pop esi
mov eax, ebx
mov byte [ecx + 0x6f5], 1
pop ebx
mov esp, ebp
pop ebp
ret
cmp edx, 0x4f30
jg 0x409077
je 0x409060
add edx, 0xffffb1d4
cmp edx, 0xcf
ja case.0x409244.40296
movzx eax, byte [edx + 0x4099e8]
jmp dword [eax*4 + 0x40999c]
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 8]
pop edi
pop esi
mov eax, dword [eax]
test eax, eax
mov dword [ecx + 0x1a8], eax
setne al
mov byte [ecx + 0x8cc], al
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 8]
pop edi
pop esi
mov eax, dword [eax]
test eax, eax
mov dword [ecx + 0x1ac], eax
setne al
mov byte [ecx + 0x8cc], al
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x1b0], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x19c], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 8]
mov eax, dword [eax]
mov dword [ecx + 0x1a4], eax
test eax, eax
jne 0x408f16
pop edi
mov byte [ecx + 0x6f4], bl
mov eax, ebx
pop esi
mov dword [ecx + 0x1a4], fcn.00527b9a
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
pop esi
mov eax, ebx
mov byte [ecx + 0x6f4], 1
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x184], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x1d4], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x1d8], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x1dc], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x1b4], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [0x5bf014]
test byte [eax + 8], 8
je case.0x40760b.244
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x448], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x1b8], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c0], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c8], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x1a0], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x6a4], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x6a8], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x6ac], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x6d4], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
cmp edx, 0x763e
jg 0x40922e
je 0x40920e
cmp edx, 0x75a3
jg 0x409126
je 0x4090f2
sub edx, 0x4f3b
je 0x4090db
sub edx, 0x12
je 0x4090c4
sub edx, 2
jne case.0x409244.40296
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x1e8], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x1e0], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [eax + 0x6f0], ecx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov edx, dword [eax + 4]
mov ecx, dword [eax]
cmp edx, 0xffffffff
jl 0x4091ea
jg 0x40910e
cmp ecx, 0xffffffff
jb 0x4091ea
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x218], ecx
mov dword [eax + 0x21c], edx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
add edx, 0xffff8a5c
cmp edx, 0x1e
ja case.0x409244.40296
movzx eax, byte [edx + 0x409ad0]
jmp dword [eax*4 + 0x409ab8]
mov eax, dword [ebp + 0x10]
mov edi, dword [eax]
mov ecx, dword [eax + 4]
jmp 0x406b45
mov eax, dword [ebp + 0x10]
mov edx, dword [eax + 4]
mov ecx, dword [eax]
test edx, edx
jl 0x4091ea
jg 0x40916a
test ecx, ecx
jb 0x4091ea
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x228], ecx
mov dword [eax + 0x22c], edx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov edx, dword [eax + 4]
mov ecx, dword [eax]
test edx, edx
jl 0x4091ea
jg 0x409194
test ecx, ecx
jb 0x4091ea
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x230], ecx
mov dword [eax + 0x234], edx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov edx, dword [eax + 4]
mov ecx, dword [eax]
cmp edx, 0xffffffff
jl 0x4091ea
jg 0x4091c0
cmp ecx, 0xffffffff
jb 0x4091ea
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x238], ecx
mov dword [eax + 0x23c], edx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov edx, dword [eax + 4]
mov ecx, dword [eax]
test edx, edx
jg 0x4091f6
jl 0x4091ea
test ecx, ecx
jae 0x4091f6
pop edi
pop esi
mov eax, 0x2b
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword [eax + 0x4f8], ecx
mov dword [eax + 0x4fc], edx
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [ebp + 0x10]
mov ecx, dword [ebp + 8]
pop edi
pop esi
mov eax, dword [edx]
mov dword [ecx + 0x3f0], eax
mov eax, dword [edx + 4]
mov dword [ecx + 0x3f4], eax
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
add edx, 0xffff629d
cmp edx, 0x13
ja case.0x409244.40296
movzx eax, byte [edx + 0x409b14]
jmp dword [eax*4 + 0x409af0]
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x66c
push eax
call fcn.00406780
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x670
push eax
call fcn.00406780
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x674
push eax
call fcn.00406780
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x678
push eax
call fcn.00406780
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [0x5bf014]
test byte [eax + 8], 0x40
je case.0x408906.10240
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x684
push eax
call fcn.00406780
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [0x5bf014]
test byte [eax + 8], 0x40
je case.0x408906.10240
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x688
push eax
call fcn.00406780
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x67c
push eax
call fcn.00406780
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 8]
add eax, 0x680
push eax
call fcn.00406780
add esp, 8
mov ebx, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ebx, 0x30
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret