Function at 0x41b676
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x228
push ebx
push esi
push edi
or dword [ebp - 0x20], 0xffffffff
and dword [ebp - 0x18], 0
or dword [ebp - 0x134], 0xffffffff
push pe_nt_image_headers32
push 0
lea eax, [ebp - 0x1c0]
push eax
call sub.CRTDLL.DLL_memset
add esp, 0xc
and dword [ebp - 4], 0
and dword [ebp - 0x138], 0
jmp 0x41c040
mov eax, dword [ebp - 4]
inc dword [ebp - 4]
mov edx, dword [ebp + 0xc]
cmp byte [edx + eax], 0x25
jne 0x41c040
mov eax, dword [ebp - 4]
mov edx, dword [ebp + 0xc]
cmp byte [edx + eax], 0x25
jne 0x41b6de
inc dword [ebp - 4]
jmp 0x41c040
and dword [ebp - 8], 0
and dword [ebp - 0x140], 0
lea eax, [ebp - 4]
push eax
push dword [ebp + 0xc]
call fcn.0041b5b6
add esp, 8
mov dword [ebp - 0x14], eax
xor eax, eax
cmp dword [ebp - 0x14], 0xffffffff
setne al
mov dword [ebp - 0x1c8], eax
or eax, eax
setne al
mov byte [ebp - 0x29], al
test byte [ebp - 0x29], 1
jne 0x41b721
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x40
jl 0x41b739
mov edi, dword [ebp - 4]
shl edi, 8
add edi, 3
mov eax, edi
neg eax
jmp 0x41c840
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x14], eax
jle 0x41b747
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], eax
and dword [ebp - 0x24], 0
or dword [ebp - 0x30], 0xffffffff
or dword [ebp - 0x13c], 0xffffffff
or dword [ebp - 0x28], 0xffffffff
jmp 0x41bbb9
mov eax, dword [ebp - 4]
inc dword [ebp - 4]
mov edx, dword [ebp + 0xc]
mov al, byte [edx + eax]
mov byte [ebp - 9], al
movsx eax, byte [ebp - 9]
cmp al, 0x5a
je 0x41bb59
jg 0x41b7ad
cmp eax, 0x20
jl case.0x41b78f.1
cmp eax, 0x40
jg case.default.0x41b78f
mov edi, eax
sub edi, 0x20
jmp dword [edi*4 + 0x46a8d8]
cmp eax, 0x49
je 0x41ba95
cmp eax, 0x4c
je 0x41ba50
jmp case.0x41b78f.1
cmp eax, 0x71
je 0x41ba8a
cmp eax, 0x74
je 0x41ba6a
jg 0x41b7e1
cmp eax, 0x68
je 0x41b9ec
cmp eax, 0x6a
je 0x41ba79
cmp eax, 0x6c
je 0x41ba1c
jmp case.0x41b78f.1
cmp eax, 0x77
je 0x41bb50
cmp eax, 0x7a
je 0x41ba5b
jmp case.0x41b78f.1
or byte [ebp - 8], 2
jmp 0x41bbb9
or byte [ebp - 8], 4
jmp 0x41bbb9
or byte [ebp - 8], 8
and dword [ebp - 8], 0xffffdfff
jmp 0x41bbb9
or byte [ebp - 8], 0x10
jmp 0x41bbb9
cmp dword [ebp - 0x140], 0
jne 0x41b901
inc dword [ebp - 0x140]
mov eax, dword [ebp - 4]
mov edx, dword [ebp + 0xc]
cmp byte [edx + eax], 0x2e
je 0x41bbb9
or dword [ebp - 8], 0x40000
mov eax, dword [ebp - 4]
mov edx, dword [ebp + 0xc]
movsx eax, byte [edx + eax]
cmp al, 0x2a
je 0x41b85f
cmp al, 0x40
jne 0x41b8d5
inc dword [ebp - 4]
or dword [ebp - 8], 0x80000
lea eax, [ebp - 4]
push eax
push dword [ebp + 0xc]
call fcn.0041b5b6
add esp, 8
mov dword [ebp - 0x30], eax
cmp eax, 0xffffffff
jne 0x41b8a3
inc dword [ebp - 0x138]
test byte [ebp - 0x29], 1
je 0x41b897
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x30], eax
jmp 0x41b8be
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
inc eax
mov dword [ebp - 0x14], eax
jmp 0x41b8be
test byte [ebp - 0x29], 1
jne 0x41b8b0
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x24], eax
jle 0x41b8be
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x14], eax
jle 0x41bbb9
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], eax
jmp 0x41bbb9
push 0xa
lea eax, [ebp - 0x1c4]
push eax
mov eax, dword [ebp - 4]
add eax, dword [ebp + 0xc]
push eax
call sub.CRTDLL.DLL_strtol
add esp, 0xc
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x1c4]
sub eax, dword [ebp + 0xc]
mov dword [ebp - 4], eax
jmp 0x41bbb9
cmp dword [ebp - 0x140], 1
jne 0x41bbb9
mov edi, dword [ebp - 4]
shl edi, 8
add edi, 2
mov eax, edi
neg eax
jmp 0x41c840
mov dword [ebp + 8], 1
cmp dword [ebp + 8], 1
jne 0x41b9a0
or dword [ebp - 8], 0x30000
lea eax, [ebp - 4]
push eax
push dword [ebp + 0xc]
call fcn.0041b5b6
add esp, 8
mov dword [ebp - 0x24], eax
cmp eax, 0xffffffff
jne 0x41b96e
inc dword [ebp - 0x138]
test byte [ebp - 0x29], 1
je 0x41b962
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x24], eax
jmp 0x41b989
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x24], eax
inc eax
mov dword [ebp - 0x14], eax
jmp 0x41b989
test byte [ebp - 0x29], 1
jne 0x41b97b
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x24], eax
jle 0x41b989
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x14], eax
jle 0x41bbb9
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], eax
jmp 0x41bbb9
or dword [ebp - 8], 0x8000000
jmp 0x41bbb9
test byte [ebp - 8], 8
jne case.0x41b78f.17
or word [ebp - 8], 0x2000
or dword [ebp - 8], 0x10000
push 0xa
lea eax, [ebp - 0x1c4]
push eax
mov eax, dword [ebp - 4]
dec eax
add eax, dword [ebp + 0xc]
push eax
call sub.CRTDLL.DLL_strtol
add esp, 0xc
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x1c4]
sub eax, dword [ebp + 0xc]
mov dword [ebp - 4], eax
jmp 0x41bbb9
test byte [ebp - 8], 0x40
je 0x41ba04
mov edi, dword [ebp - 4]
shl edi, 8
add edi, 2
mov eax, edi
neg eax
jmp 0x41c840
test byte [ebp - 8], 0x20
je 0x41ba13
or byte [ebp - 8], 0x40
jmp 0x41bbb9
or byte [ebp - 8], 0x20
jmp 0x41bbb9
test word [ebp - 8], 0x100
je 0x41ba36
mov edi, dword [ebp - 4]
shl edi, 8
add edi, 2
mov eax, edi
neg eax
jmp 0x41c840
test byte [ebp - 8], 0x80
je 0x41ba47
or word [ebp - 8], 0x100
jmp 0x41bbb9
or byte [ebp - 8], 0x80
jmp 0x41bbb9
or word [ebp - 8], 0x200
jmp 0x41bbb9
or word [ebp - 8], 0x400
or byte [ebp - 8], 0x80
jmp 0x41bbb9
or word [ebp - 8], 0x800
or byte [ebp - 8], 0x80
jmp 0x41bbb9
or word [ebp - 8], 0x1000
or word [ebp - 8], 0x100
jmp 0x41bbb9
or word [ebp - 8], 0x100
jmp 0x41bbb9
test dword [ebp - 8], 0x40000000
jne 0x41bbb9
test dword [ebp - 8], 0x22001fe0
je 0x41babd
mov edi, dword [ebp - 4]
shl edi, 8
add edi, 2
mov eax, edi
neg eax
jmp 0x41c840
mov eax, dword [ebp - 4]
mov edx, dword [ebp + 0xc]
cmp byte [edx + eax], 0x36
jne 0x41badd
cmp byte [eax + edx + 1], 0x34
jne 0x41badd
mov dword [ebp - 0x28], 8
add dword [ebp - 4], 2
jmp 0x41bb47
mov eax, dword [ebp - 4]
mov edx, dword [ebp + 0xc]
cmp byte [edx + eax], 0x33
jne 0x41bafd
cmp byte [eax + edx + 1], 0x32
jne 0x41bafd
mov dword [ebp - 0x28], 4
add dword [ebp - 4], 2
jmp 0x41bb47
mov eax, dword [ebp - 4]
mov edx, dword [ebp + 0xc]
cmp byte [edx + eax], 0x31
jne 0x41bb1d
cmp byte [eax + edx + 1], 0x36
jne 0x41bb1d
mov dword [ebp - 0x28], 2
add dword [ebp - 4], 2
jmp 0x41bb47
mov eax, dword [ebp - 4]
mov edx, dword [ebp + 0xc]
cmp byte [edx + eax], 0x38
jne 0x41bb35
mov dword [ebp - 0x28], 1
inc dword [ebp - 4]
jmp 0x41bb47
mov edi, dword [ebp - 4]
shl edi, 8
add edi, 2
mov eax, edi
neg eax
jmp 0x41c840
or dword [ebp - 8], 0x40000000
jmp 0x41bbb9
or dword [ebp - 8], 0x2000000
jmp 0x41bbb9
or byte [ebp - 8], 0x20
jmp 0x41bbb9
or dword [ebp - 8], 0x1000000
mov byte [0x46a82e], 3
jmp 0x41bbb9
or dword [ebp - 8], 0x20000000
inc dword [ebp - 0x138]
test byte [ebp - 0x29], 1
je 0x41bb8d
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x28], eax
jmp 0x41bb97
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x28], eax
inc eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x14], eax
jle 0x41bbb9
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], eax
jmp 0x41bbb9
mov edi, dword [ebp - 4]
shl edi, 8
add edi, 2
mov eax, edi
neg eax
jmp 0x41c840
mov eax, dword [ebp - 4]
mov edx, dword [ebp + 0xc]
movsx eax, byte [edx + eax]
push eax
push str.0123456789__.hlLztjqZw_I
call sub.CRTDLL.DLL_strchr
add esp, 8
or eax, eax
jne 0x41b75f
test dword [ebp - 8], 0x20000
je 0x41bc41
mov edi, dword [ebp - 0x24]
lea edi, [ebp + edi*2 - 0x1c0]
inc word [edi]
mov eax, 0x58
mul dword [ebp - 0x18]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp - 0x1cc]
mov dword [eax + edx], 7
mov eax, 0x58
mul dword [ebp - 0x18]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp - 0x1d0]
and dword [edx + eax + 4], 0
mov edi, dword [ebp - 0x24]
mov esi, dword [ebp - 0x18]
mov dword [ebp + edi*4 - 0x130], esi
mov eax, esi
mov edx, eax
inc edx
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x24], eax
test dword [ebp - 8], 0x80000
je 0x41bca9
mov edi, dword [ebp - 0x30]
lea edi, [ebp + edi*2 - 0x1c0]
inc word [edi]
mov eax, 0x58
mul dword [ebp - 0x18]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp - 0x1cc]
mov dword [eax + edx], 7
mov eax, 0x58
mul dword [ebp - 0x18]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp - 0x1d0]
and dword [edx + eax + 4], 0
mov edi, dword [ebp - 0x30]
mov esi, dword [ebp - 0x18]
mov dword [ebp + edi*4 - 0x130], esi
mov eax, esi
mov edx, eax
inc edx
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x30], eax
test dword [ebp - 8], 0x20000000
je 0x41bd11
mov edi, dword [ebp - 0x28]
lea edi, [ebp + edi*2 - 0x1c0]
inc word [edi]
mov eax, 0x58
mul dword [ebp - 0x18]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp - 0x1cc]
mov dword [eax + edx], 7
mov eax, 0x58
mul dword [ebp - 0x18]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp - 0x1d0]
and dword [edx + eax + 4], 0
mov edi, dword [ebp - 0x28]
mov esi, dword [ebp - 0x18]
mov dword [ebp + edi*4 - 0x130], esi
mov eax, esi
mov edx, eax
inc edx
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x28], eax
mov edi, dword [ebp - 0x14]
mov esi, dword [ebp - 0x18]
mov dword [ebp + edi*4 - 0x130], esi
mov eax, 0x58
mul dword [ebp - 0x18]
mov dword [ebp - 0x1cc], eax
add eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 4]
inc dword [ebp - 4]
mov edx, dword [ebp + 0xc]
movsx eax, byte [edx + eax]
cmp al, 0x53
je 0x41bdbc
jg 0x41bd63
cmp eax, 0x41
jl case.0x41b78f.36
cmp eax, 0x47
jg case.0x41b78f.36
mov edi, eax
sub edi, 0x41
jmp dword [edi*4 + 0x46a95c]
cmp eax, 0x58
jl case.0x41b78f.36
cmp eax, 0x75
jg case.default.0x41bd76
mov edi, eax
sub edi, 0x58
jmp dword [edi*4 + 0x46a978]
cmp eax, 0x78
je 0x41bf30
jmp case.0x41b78f.36
or dword [ebp - 8], 0x2000000
test byte [ebp - 8], 0x80
je 0x41bda1
or dword [ebp - 8], 0x2000000
jmp 0x41bdae
test byte [ebp - 8], 0x20
je 0x41bdae
and dword [ebp - 8], 0xfdffffff
mov eax, dword [ebp - 0x10]
mov dword [eax], 3
jmp 0x41bfd6
or dword [ebp - 8], 0x2000000
test byte [ebp - 8], 0x80
je 0x41bdd2
or dword [ebp - 8], 0x2000000
jmp 0x41bddf
test byte [ebp - 8], 0x20
je 0x41bddf
and dword [ebp - 8], 0xfdffffff
mov eax, dword [ebp - 0x10]
mov dword [eax], 4
jmp 0x41bfd6
cmp dword [ebp + 8], 2
jne 0x41bfd6
mov dword [ebp - 0x1d4], 1
mov eax, dword [ebp - 0x10]
mov dword [eax], 8
mov eax, dword [ebp - 4]
mov edx, dword [ebp + 0xc]
cmp byte [edx + eax], 0x5e
jne 0x41be19
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
mov edx, dword [ebp + 0xc]
cmp byte [edx + eax], 0x5d
jne 0x41be28
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
mov edx, dword [ebp + 0xc]
cmp byte [edx + eax], 0x2d
jne 0x41be75
inc dword [ebp - 4]
jmp 0x41be75
mov eax, dword [ebp - 4]
mov edx, dword [ebp + 0xc]
cmp byte [edx + eax], 0x5b
jne 0x41be4d
inc dword [ebp - 0x1d4]
jmp 0x41be72
mov eax, dword [ebp - 4]
mov edx, dword [ebp + 0xc]
cmp byte [edx + eax], 0x5d
jne 0x41be72
mov eax, dword [ebp - 0x1d4]
dec eax
mov dword [ebp - 0x1d4], eax
or eax, eax
jg 0x41be72
inc dword [ebp - 4]
jmp 0x41bfd6
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
mov edx, dword [ebp + 0xc]
cmp byte [edx + eax], 0
jne 0x41be39
jmp 0x41bfd6
cmp dword [ebp + 8], 2
jne 0x41be93
or dword [ebp - 8], 0x4000000
mov eax, dword [ebp - 0x10]
mov dword [eax], 1
jmp 0x41bfd6
or word [ebp - 8], 0x4000
mov eax, dword [ebp - 0x10]
mov dword [eax], 1
jmp 0x41bfd6
mov dword [ebp - 0x13c], 0xa
mov eax, dword [ebp - 0x10]
mov dword [eax], 1
jmp 0x41bfd6
cmp dword [ebp + 8], 2
je 0x41bed9
or word [ebp - 8], 0x4000
test word [ebp - 8], 0x200
je 0x41beee
and dword [ebp - 8], 0xfffffdff
or word [ebp - 8], 0x100
mov dword [ebp - 0x13c], 8
mov eax, dword [ebp - 0x10]
mov dword [eax], 1
jmp 0x41bfd6
or word [ebp - 8], 0x8000
or word [ebp - 8], 0x2000
mov dword [ebp - 0x13c], 2
mov eax, dword [ebp - 0x10]
mov dword [eax], 1
jmp 0x41bfd6
or word [ebp - 8], 0x8000
or word [ebp - 8], 0x4000
mov dword [ebp - 0x13c], 0x10
mov eax, dword [ebp - 0x10]
mov dword [eax], 1
jmp 0x41bfd6
or word [ebp - 8], 0x8000
or dword [ebp - 8], 0x400000
mov eax, dword [ebp - 0x10]
mov dword [eax], 2
jmp 0x41bfd6
or word [ebp - 8], 0x8000
or dword [ebp - 8], 0x800000
mov eax, dword [ebp - 0x10]
mov dword [eax], 2
jmp 0x41bfd6
or word [ebp - 8], 0x8000
mov eax, dword [ebp - 0x10]
mov dword [eax], 2
jmp 0x41bfd6
or byte [ebp - 8], 0x80
mov eax, dword [ebp - 0x10]
mov dword [eax], 5
jmp 0x41bfd6
mov eax, dword [ebp - 0x10]
mov dword [eax], 6
jmp 0x41bfd6
or word [ebp - 8], 0x8000
mov dword [ebp - 0x13c], 0x10
mov eax, dword [ebp - 0x10]
mov dword [eax], 2
jmp 0x41bfd6
mov edi, dword [ebp - 4]
shl edi, 8
add edi, 2
mov eax, edi
neg eax
jmp 0x41c840
mov edi, dword [ebp - 0x14]
lea edi, [ebp + edi*2 - 0x1c0]
inc word [edi]
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
mov dword [eax + 0x18], edx
mov edx, dword [ebp - 8]
mov dword [eax + 4], edx
mov edx, dword [ebp - 0x24]
mov dword [eax + 8], edx
mov edx, dword [ebp - 0x30]
mov dword [eax + 0xc], edx
cmp dword [ebp - 0x13c], 0xffffffff
jne 0x41c013
mov dword [ebp - 0x1d4], 0xa
jmp 0x41c01f
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1d4]
mov dword [eax + 0x10], edx
mov edx, dword [ebp - 0x28]
mov dword [eax + 0x14], edx
inc dword [ebp - 0x18]
test byte [ebp - 0x29], 1
jne 0x41c040
inc dword [ebp - 0x138]
mov eax, dword [ebp - 4]
mov edx, dword [ebp + 0xc]
cmp byte [edx + eax], 0
jne 0x41b6b7
and dword [ebp - 0x1c], 0
jmp 0x41c831
mov edi, dword [ebp - 0x1c]
mov edi, dword [ebp + edi*4 - 0x130]
mov dword [ebp - 0x134], edi
mov eax, 0x58
mul dword [ebp - 0x134]
mov dword [ebp - 0x1c8], eax
add eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
cmp dword [eax], 7
je 0x41c092
test dword [eax + 4], 0x8000000
jne case.default.0x41c0a8
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
or eax, eax
jl case.default.0x41c0a8
cmp eax, 8
jg case.default.0x41c0a8
jmp dword [eax*4 + 0x46a9f0]
cmp dword [ebp + 0x18], 0
jne 0x41c0c9
mov eax, dword [ebp + 0x14]
add eax, 4
mov dword [ebp + 0x14], eax
mov eax, dword [eax - 4]
mov dword [ebp - 0x1d0], eax
jmp 0x41c0d8
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp + 0x18]
mov edi, dword [esi + edi*4]
mov dword [ebp - 0x1d0], edi
mov edi, dword [ebp - 0x10]
mov esi, dword [ebp - 0x1d0]
mov dword [edi + 0x20], esi
jmp case.default.0x41c0a8
cmp dword [ebp + 0x18], 0
jne 0x41c103
mov eax, dword [ebp + 0x14]
add eax, 4
mov dword [ebp + 0x14], eax
mov eax, dword [eax - 4]
mov dword [ebp - 0x1d4], eax
jmp 0x41c112
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp + 0x18]
mov edi, dword [esi + edi*4]
mov dword [ebp - 0x1d4], edi
mov edi, dword [ebp - 0x10]
mov esi, dword [ebp - 0x1d4]
mov dword [edi + 0x20], esi
jmp case.default.0x41c0a8
cmp dword [ebp + 8], 2
jne 0x41c191
cmp dword [ebp + 0x18], 0
jne 0x41c146
mov eax, dword [ebp + 0x14]
add eax, 4
mov dword [ebp + 0x14], eax
mov edx, dword [ebp - 0x10]
mov eax, dword [eax - 4]
mov dword [edx + 0x20], eax
jmp case.default.0x41c0a8
mov eax, dword [ebp - 0x10]
cmp dword [eax], 3
jne 0x41c161
mov edi, eax
mov esi, dword [ebp - 0x1c]
mov ebx, dword [ebp + 0x18]
mov esi, dword [ebx + esi*4]
mov dword [edi + 0x20], esi
jmp case.default.0x41c0a8
mov eax, dword [ebp - 0x10]
test byte [eax + 4], 0x20
je 0x41c17d
mov edi, eax
mov esi, dword [ebp - 0x1c]
mov ebx, dword [ebp + 0x18]
mov esi, dword [ebx + esi*4]
mov dword [edi + 0x20], esi
jmp case.default.0x41c0a8
mov edi, dword [ebp - 0x10]
mov esi, dword [ebp - 0x1c]
mov ebx, dword [ebp + 0x18]
mov esi, dword [ebx + esi*4]
mov dword [edi + 0x20], esi
jmp case.default.0x41c0a8
mov eax, dword [ebp - 0x10]
test dword [eax + 4], 0x60000000
je 0x41c20f
test dword [eax + 4], 0x20000000
je 0x41c1c5
mov eax, 0x58
mov edi, dword [ebp - 0x10]
mul dword [edi + 0x14]
mov dword [ebp - 0x1d8], eax
mov edi, dword [ebp + 0x10]
mov esi, eax
mov edi, dword [esi + edi + 0x20]
mov dword [ebp - 0x28], edi
jmp 0x41c1ce
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x14]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x10]
add eax, 4
and dword [eax], 0xffffe27f
cmp dword [ebp - 0x28], 4
jle 0x41c20f
cmp dword [ebp - 0x28], 4
jg 0x41c1f1
mov eax, dword [ebp - 0x10]
add eax, 4
or byte [eax], 0x80
jmp 0x41c20f
cmp dword [ebp - 0x28], 8
jg 0x41c204
mov eax, dword [ebp - 0x10]
add eax, 4
or word [eax], 0x100
jmp 0x41c20f
mov eax, dword [ebp - 0x10]
add eax, 4
or word [eax], 0x1000
mov eax, dword [ebp - 0x10]
test word [eax + 4], 0x400
je 0x41c26f
cmp dword [ebp + 0x18], 0
jne 0x41c23c
mov edi, dword [ebp + 0x14]
add edi, 4
mov dword [ebp + 0x14], edi
mov eax, dword [edi - 4]
xor edx, edx
mov dword [ebp - 0x1dc], edx
mov dword [ebp - 0x1e0], eax
jmp 0x41c255
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp + 0x18]
mov edi, dword [esi + edi*4]
mov eax, dword [edi]
xor edx, edx
mov dword [ebp - 0x1dc], edx
mov dword [ebp - 0x1e0], eax
mov edi, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1dc]
mov eax, dword [ebp - 0x1e0]
mov dword [edi + 0x24], edx
mov dword [edi + 0x20], eax
jmp case.default.0x41c0a8
mov eax, dword [ebp - 0x10]
test word [eax + 4], 0x800
je 0x41c2cf
cmp dword [ebp + 0x18], 0
jne 0x41c29c
mov edi, dword [ebp + 0x14]
add edi, 4
mov dword [ebp + 0x14], edi
mov eax, dword [edi - 4]
xor edx, edx
mov dword [ebp - 0x1e4], edx
mov dword [ebp - 0x1e8], eax
jmp 0x41c2b5
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp + 0x18]
mov edi, dword [esi + edi*4]
mov eax, dword [edi]
xor edx, edx
mov dword [ebp - 0x1e4], edx
mov dword [ebp - 0x1e8], eax
mov edi, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1e4]
mov eax, dword [ebp - 0x1e8]
mov dword [edi + 0x24], edx
mov dword [edi + 0x20], eax
jmp case.default.0x41c0a8
mov eax, dword [ebp - 0x10]
test word [eax + 4], 0x1000
je 0x41c333
cmp dword [ebp + 0x18], 0
jne 0x41c2ff
mov edi, dword [ebp + 0x14]
add edi, 8
mov dword [ebp + 0x14], edi
add edi, 0xfffffff8
mov edx, dword [edi + 4]
mov eax, dword [edi]
mov dword [ebp - 0x1ec], edx
mov dword [ebp - 0x1f0], eax
jmp 0x41c319
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp + 0x18]
mov edi, dword [esi + edi*4]
mov edx, dword [edi + 4]
mov eax, dword [edi]
mov dword [ebp - 0x1ec], edx
mov dword [ebp - 0x1f0], eax
mov edi, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1ec]
mov eax, dword [ebp - 0x1f0]
mov dword [edi + 0x24], edx
mov dword [edi + 0x20], eax
jmp case.default.0x41c0a8
mov eax, dword [ebp - 0x10]
test word [eax + 4], 0x100
je 0x41c397
cmp dword [ebp + 0x18], 0
jne 0x41c363
mov edi, dword [ebp + 0x14]
add edi, 8
mov dword [ebp + 0x14], edi
add edi, 0xfffffff8
mov edx, dword [edi + 4]
mov eax, dword [edi]
mov dword [ebp - 0x1f4], edx
mov dword [ebp - 0x1f8], eax
jmp 0x41c37d
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp + 0x18]
mov edi, dword [esi + edi*4]
mov edx, dword [edi + 4]
mov eax, dword [edi]
mov dword [ebp - 0x1f4], edx
mov dword [ebp - 0x1f8], eax
mov edi, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1f4]
mov eax, dword [ebp - 0x1f8]
mov dword [edi + 0x24], edx
mov dword [edi + 0x20], eax
jmp case.default.0x41c0a8
mov eax, dword [ebp - 0x10]
test byte [eax + 4], 0x80
je 0x41c3f5
cmp dword [ebp + 0x18], 0
jne 0x41c3c2
mov edi, dword [ebp + 0x14]
add edi, 4
mov dword [ebp + 0x14], edi
mov eax, dword [edi - 4]
xor edx, edx
mov dword [ebp - 0x1fc], edx
mov dword [ebp - 0x200], eax
jmp 0x41c3db
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp + 0x18]
mov edi, dword [esi + edi*4]
mov eax, dword [edi]
xor edx, edx
mov dword [ebp - 0x1fc], edx
mov dword [ebp - 0x200], eax
mov edi, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1fc]
mov eax, dword [ebp - 0x200]
mov dword [edi + 0x24], edx
mov dword [edi + 0x20], eax
jmp case.default.0x41c0a8
cmp dword [ebp + 0x18], 0
jne 0x41c414
mov edi, dword [ebp + 0x14]
add edi, 4
mov dword [ebp + 0x14], edi
mov esi, dword [ebp - 0x10]
mov eax, dword [edi - 4]
xor edx, edx
mov dword [esi + 0x24], edx
mov dword [esi + 0x20], eax
jmp 0x41c46f
mov eax, dword [ebp - 0x10]
cmp dword [eax], 3
jne 0x41c436
mov edi, eax
mov esi, dword [ebp - 0x1c]
mov ebx, dword [ebp + 0x18]
mov esi, dword [ebx + esi*4]
movsx ebx, byte [esi]
mov eax, ebx
xor edx, edx
mov dword [edi + 0x24], edx
mov dword [edi + 0x20], eax
jmp 0x41c46f
mov eax, dword [ebp - 0x10]
test byte [eax + 4], 0x20
je 0x41c459
mov edi, eax
mov esi, dword [ebp - 0x1c]
mov ebx, dword [ebp + 0x18]
mov esi, dword [ebx + esi*4]
movsx esi, word [esi]
mov eax, esi
xor edx, edx
mov dword [edi + 0x24], edx
mov dword [edi + 0x20], eax
jmp 0x41c46f
mov edi, dword [ebp - 0x10]
mov esi, dword [ebp - 0x1c]
mov ebx, dword [ebp + 0x18]
mov esi, dword [ebx + esi*4]
mov eax, dword [esi]
xor edx, edx
mov dword [edi + 0x24], edx
mov dword [edi + 0x20], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 4]
test al, 0x40
je 0x41c495
test ax, 0x4000
je 0x41c495
mov edi, dword [ebp - 0x10]
add edi, 0x20
mov edx, dword [edi + 4]
movzx eax, byte [edi]
and edx, 0
mov dword [edi], eax
mov eax, edi
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 4]
test al, 0x20
je case.default.0x41c0a8
test ax, 0x4000
je case.default.0x41c0a8
mov edi, dword [ebp - 0x10]
add edi, 0x20
mov edx, dword [edi + 4]
movzx eax, word [edi]
and edx, 0
mov dword [edi], eax
mov eax, edi
mov dword [eax + 4], edx
jmp case.default.0x41c0a8
mov eax, dword [ebp - 0x10]
test dword [eax + 4], 0x8000000
je 0x41c50e
cmp dword [ebp + 0x18], 0
jne 0x41c4ee
mov eax, dword [ebp + 0x14]
add eax, 4
mov dword [ebp + 0x14], eax
mov eax, dword [eax - 4]
mov dword [ebp - 0x1d8], eax
jmp 0x41c4fd
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp + 0x18]
mov edi, dword [esi + edi*4]
mov dword [ebp - 0x1d8], edi
mov edi, dword [ebp - 0x10]
mov esi, dword [ebp - 0x1d8]
mov dword [edi + 0x20], esi
jmp case.default.0x41c0a8
cmp dword [ebp + 0x18], 0
jne 0x41c52f
mov edi, dword [ebp + 0x14]
add edi, 4
mov dword [ebp + 0x14], edi
mov eax, dword [edi - 4]
cdq
mov dword [ebp - 0x1dc], edx
mov dword [ebp - 0x1e0], eax
jmp 0x41c547
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp + 0x18]
mov edi, dword [esi + edi*4]
mov eax, dword [edi]
cdq
mov dword [ebp - 0x1dc], edx
mov dword [ebp - 0x1e0], eax
mov edi, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1dc]
mov eax, dword [ebp - 0x1e0]
mov dword [edi + 0x24], edx
mov dword [edi + 0x20], eax
jmp case.default.0x41c0a8
cmp dword [ebp + 8], 2
jne 0x41c633
mov eax, dword [ebp - 0x10]
test word [eax + 4], 0x280
jne 0x41c57c
add eax, 4
or byte [eax], 0x20
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 4]
test al, 0x80
jne 0x41c58c
test ax, 0x200
je 0x41c5c6
cmp dword [ebp + 0x18], 0
jne 0x41c5a6
mov eax, dword [ebp + 0x14]
add eax, 4
mov dword [ebp + 0x14], eax
mov eax, dword [eax - 4]
mov dword [ebp - 0x1e4], eax
jmp 0x41c5b5
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp + 0x18]
mov edi, dword [esi + edi*4]
mov dword [ebp - 0x1e4], edi
mov edi, dword [ebp - 0x10]
mov esi, dword [ebp - 0x1e4]
mov dword [edi + 0x20], esi
jmp case.default.0x41c0a8
cmp dword [ebp + 0x18], 0
jne 0x41c603
mov eax, dword [ebp - 0x10]
test byte [eax + 4], 0x20
je 0x41c5ec
mov eax, dword [ebp + 0x14]
add eax, 4
mov dword [ebp + 0x14], eax
mov edx, dword [ebp - 0x10]
mov eax, dword [eax - 4]
mov dword [edx + 0x20], eax
jmp case.default.0x41c0a8
mov eax, dword [ebp + 0x14]
add eax, 4
mov dword [ebp + 0x14], eax
mov edx, dword [ebp - 0x10]
mov eax, dword [eax - 4]
mov dword [edx + 0x20], eax
jmp case.default.0x41c0a8
mov eax, dword [ebp - 0x10]
test byte [eax + 4], 0x20
je 0x41c61f
mov edi, eax
mov esi, dword [ebp - 0x1c]
mov ebx, dword [ebp + 0x18]
mov esi, dword [ebx + esi*4]
mov dword [edi + 0x20], esi
jmp case.default.0x41c0a8
mov edi, dword [ebp - 0x10]
mov esi, dword [ebp - 0x1c]
mov ebx, dword [ebp + 0x18]
mov esi, dword [ebx + esi*4]
mov dword [edi + 0x20], esi
jmp case.default.0x41c0a8
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 4]
test al, 0x20
jne 0x41c67f
test ax, 0x200
je 0x41c67f
cmp dword [ebp + 0x18], 0
jne 0x41c65d
mov eax, dword [ebp + 0x14]
add eax, 0xc
mov dword [ebp + 0x14], eax
fld xword [eax - 0xc]
fstp xword [ebp - 0x1f0]
jmp 0x41c66e
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp + 0x18]
mov edi, dword [esi + edi*4]
fld xword [edi]
fstp xword [ebp - 0x1f0]
mov edi, dword [ebp - 0x10]
fld xword [ebp - 0x1f0]
fstp xword [edi + 0x20]
jmp case.default.0x41c0a8
mov eax, dword [ebp - 0x10]
test word [eax + 4], 0x100
je 0x41c6d9
cmp dword [ebp + 0x18], 0
jne 0x41c6b9
mov edi, dword [ebp + 0x14]
add edi, 0x38
mov dword [ebp - 0x1f4], edi
mov dword [ebp + 0x14], edi
mov edi, eax
add edi, 0x20
mov esi, dword [ebp - 0x1f4]
lea esi, [esi - 0x38]
mov ecx, 0xe
rep movsd dword es:[edi], dword [esi]
jmp case.default.0x41c0a8
push 0x38
mov edi, dword [ebp - 0x1c]
shl edi, 2
add edi, dword [ebp + 0x18]
push edi
mov edi, dword [ebp - 0x10]
add edi, 0x20
push edi
call sub.CRTDLL.DLL_memcpy
add esp, 0xc
jmp case.default.0x41c0a8
mov eax, dword [ebp - 0x10]
test byte [eax + 4], 0x20
je 0x41c7e8
cmp dword [ebp + 0x18], 0
jne 0x41c776
test word [eax + 4], 0x200
je 0x41c721
mov edi, dword [ebp + 0x14]
add edi, 0x18
mov dword [ebp - 0x224], edi
mov dword [ebp + 0x14], edi
mov edi, eax
add edi, 0x20
mov esi, dword [ebp - 0x224]
lea esi, [esi - 0x18]
mov ecx, 6
rep movsd dword es:[edi], dword [esi]
jmp case.default.0x41c0a8
mov edi, dword [ebp + 0x14]
add edi, 0x18
mov dword [ebp - 0x228], edi
mov dword [ebp + 0x14], edi
lea edi, [ebp - 0x220]
mov esi, dword [ebp - 0x228]
lea esi, [esi - 0x18]
mov ecx, 6
rep movsd dword es:[edi], dword [esi]
fld xword [ebp - 0x220]
fstp xword [ebp - 0x208]
fld xword [ebp - 0x214]
fstp xword [ebp - 0x1fc]
mov edi, dword [ebp - 0x10]
add edi, 0x20
lea esi, [ebp - 0x208]
mov ecx, 6
rep movsd dword es:[edi], dword [esi]
jmp case.default.0x41c0a8
mov eax, dword [ebp - 0x10]
test word [eax + 4], 0x200
je 0x41c7a0
push 0x18
mov edi, dword [ebp - 0x1c]
shl edi, 2
add edi, dword [ebp + 0x18]
push edi
mov edi, eax
add edi, 0x20
push edi
call sub.CRTDLL.DLL_memcpy
add esp, 0xc
jmp case.default.0x41c0a8
push 0x18
mov edi, dword [ebp - 0x1c]
shl edi, 2
add edi, dword [ebp + 0x18]
push edi
lea edi, [ebp - 0x220]
push edi
call sub.CRTDLL.DLL_memcpy
add esp, 0xc
fld xword [ebp - 0x220]
fstp xword [ebp - 0x208]
fld xword [ebp - 0x214]
fstp xword [ebp - 0x1fc]
mov edi, dword [ebp - 0x10]
add edi, 0x20
lea esi, [ebp - 0x208]
mov ecx, 6
rep movsd dword es:[edi], dword [esi]
jmp case.default.0x41c0a8
cmp dword [ebp + 0x18], 0
jne 0x41c802
mov eax, dword [ebp + 0x14]
add eax, 8
mov dword [ebp + 0x14], eax
mov edx, dword [ebp - 0x10]
fld qword [eax - 8]
fstp xword [edx + 0x20]
jmp case.default.0x41c0a8
mov eax, dword [ebp - 0x10]
test byte [eax + 4], 0x20
je 0x41c81d
mov edi, eax
mov esi, dword [ebp - 0x1c]
mov ebx, dword [ebp + 0x18]
mov esi, dword [ebx + esi*4]
fld dword [esi]
fstp xword [edi + 0x20]
jmp case.default.0x41c0a8
mov edi, dword [ebp - 0x10]
mov esi, dword [ebp - 0x1c]
mov ebx, dword [ebp + 0x18]
mov esi, dword [ebx + esi*4]
fld qword [esi]
fstp xword [edi + 0x20]
inc dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x1c], eax
jle 0x41c059
mov eax, dword [ebp - 0x1c]
pop edi
pop esi
pop ebx
leave
ret