Function at 0x403df0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
push 0xffffffffffffffff
push 0x4d0a59
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, 0x2dd34
call fcn.004bfc70
mov eax, dword [0x4ea93c]
xor eax, esp
mov dword [esp + 0x2dd30], eax
push ebx
push esi
push edi
mov eax, dword [0x4ea93c]
xor eax, esp
push eax
lea eax, [esp + 0x2dd78]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
xor esi, esi
mov ebx, ecx
mov eax, dword [ebx + 0x38]
mov dword [esp + 0x3c], edi
mov dword [esp + 0x28], esi
mov dword [esp + 0x24], esi
mov dword [esp + 0x40], esi
cmp word [eax + 0x73b0], si
je 0x403e66
mov dword [eax + 0x6160], esi
mov dword [eax + 0x6164], esi
mov eax, dword [ebx + 0x38]
cmp word [eax + 0x1010], si
je 0x403ed2
push 0x4d6814
push edi
call fcn.0045fb20
test al, al
jne 0x403ed2
push 0x4d680c
push edi
call fcn.0045fb20
test al, al
jne 0x403ed2
push 0x4d6804
push edi
call fcn.0045fb20
test al, al
jne 0x403ecc
mov eax, edi
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
cmp cx, si
jne 0x403ea4
mov ecx, dword [0x4d67f8]
mov dword [eax], ecx
mov edx, dword [0x4d67fc]
mov dword [eax + 4], edx
mov cx, word [0x4d6800]
mov word [eax + 8], cx
push edi
call fcn.00460ec0
mov edx, dword [ebx + 0x38]
cmp byte [edx + 0x6198], 0
je 0x403ee4
push edi
call fcn.0043cd50
xor eax, eax
mov word [esp + 0x2ccbc], ax
mov eax, dword [ebx + 0x38]
mov edx, dword [eax + 0x6160]
xor ecx, ecx
or edx, dword [eax + 0x6164]
mov word [esp + 0x2cd3c], cx
je 0x403f12
mov byte [ebx + 0x1920], 1
jmp 0x403f19
and dword [eax + 0x6144], 0xffffffe7
mov eax, dword [ebx + 0x38]
movzx ecx, byte [eax + 0x6189]
mov edx, dword [eax + 0x6158]
push 1
push ecx
push edx
add eax, 0xc41c
push eax
lea ecx, [esp + 0x1a6a4]
mov byte [esp + 0x2e], 0
call fcn.00476e50
xor edi, edi
mov dword [esp + 0x2dd80], edi
mov eax, dword [esp + 0x3c]
push 0x800
push eax
lea ecx, [esp + 0x1d6c0]
push ecx
call fcn.0047e340
mov eax, dword [ebx + 0x38]
lea ecx, [esp + 0x31cc]
mov dword [esp + 0x1e6b8], eax
call fcn.00481670
lea ecx, [esp + 0x31d4]
call fcn.00481670
lea ecx, [esp + 0x31dc]
call fcn.00481670
mov edx, dword [ebx + 0x38]
push edx
lea ecx, [esp + 0xc8]
call fcn.004069f0
mov byte [esp + 0x2dd80], 1
mov eax, dword [ebx + 0x38]
cmp word [eax + 0x73b0], di
lea esi, [eax + 0x73b0]
je 0x404024
push 0x50
lea eax, [esp + 0x58]
push edi
push eax
call fcn.004c05a0
add esp, 0xc
lea ecx, [esp + 0x4c]
mov dword [esp + 0x54], esi
mov dword [esp + 0x80], 2
mov dword [esp + 0x9c], 0xffffffff
call fcn.00481670
lea ecx, [esp + 0x4c]
call fcn.004815c0
lea ecx, [esp + 0x4c]
call fcn.004815a0
lea ecx, [esp + 0x54]
push ecx
lea ecx, [esp + 0xc8]
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], edx
call fcn.00406590
mov edi, 1
jmp 0x40419f
lea edx, [esp + 0x21bc]
push edx
lea ecx, [esp + 0x1a698]
call fcn.004776f0
test eax, eax
jne 0x40419f
or esi, 0xffffffff
mov eax, dword [esp + 0x130]
mov edx, dword [esp + 0x3c]
push edi
push eax
lea ecx, [esp + 0x21c4]
push ecx
push edx
mov ecx, ebx
call fcn.00401430
test al, al
je 0x404183
push 0x50
lea eax, [esp + 0x58]
push 0
push eax
call fcn.004c05a0
mov eax, dword [esp + 0x31cc]
mov edx, dword [esp + 0x31c8]
lea ecx, [esp + 0x21c8]
mov dword [esp + 0x60], ecx
mov ecx, dword [esp + 0x31d0]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x31d4]
or byte [esp + 0x2a], ah
mov dword [esp + 0x70], ecx
add esp, 0xc
lea ecx, [esp + 0x31cc]
mov dword [esp + 0x5c], edx
mov byte [esp + 0xa0], al
mov byte [esp + 0xa1], ah
call fcn.004815a0
lea ecx, [esp + 0x31dc]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], edx
call fcn.004815a0
mov ecx, dword [ebx + 0x38]
mov dword [esp + 0x78], edx
movzx edx, word [esp + 0x1d6b4]
mov dword [esp + 0x74], eax
lea eax, [esp + 0x21bc]
push eax
mov dword [esp + 0x80], edx
mov dword [esp + 0x84], 2
mov dword [esp + 0xa0], esi
call fcn.004205f0
test al, al
je 0x404123
or dword [esp + 0x94], 1
mov eax, dword [ebx + 0x38]
cmp dword [eax + 0xc48c], 0
jbe 0x404167
push 0x800
lea ecx, [esp + 0x1198]
push ecx
lea edx, [esp + 0x5c]
push edx
push eax
call fcn.00401570
mov eax, dword [esp + 0x31c8]
push 0
push 0
push eax
lea ecx, [esp + 0x11a0]
push ecx
mov ecx, dword [ebx + 0x38]
call fcn.00420eb0
test al, al
jne 0x404183
lea edx, [esp + 0x54]
push edx
lea ecx, [esp + 0xc8]
call fcn.00406590
cmp byte [esp + 0x31c8], 0
jne 0x404183
inc edi
lea eax, [esp + 0x21bc]
push eax
lea ecx, [esp + 0x1a698]
call fcn.004776f0
test eax, eax
je 0x404043
mov ecx, dword [esp + 0x130]
mov esi, dword [esp + 0x3c]
push edi
push ecx
xor edi, edi
push edi
push edi
mov ecx, ebx
call fcn.00401430
cmp dword [esp + 0x1b6ac], edi
je 0x4041f9
mov edx, dword [ebx + 0x38]
cmp byte [edx + 0x62b2], 0
je 0x4041ed
push 0x44c
call fcn.004744a0
push eax
call fcn.004ab990
add esp, 4
push 6
mov ecx, 0x51e7a8
call fcn.004333b0
jmp 0x4041f9
push 6
mov ecx, 0x51e7a8
call fcn.00433290
lea ecx, [esp + 0xc4]
call fcn.00406a60
mov eax, dword [ebx + 0x38]
push eax
lea ecx, [esp + 0xec48]
call fcn.0040df00
mov byte [esp + 0x2dd80], 2
mov ecx, dword [ebx + 0x38]
push ecx
lea ecx, [esp + 0x3208]
call fcn.0040df00
mov byte [esp + 0x2dd80], 3
mov eax, dword [ebx + 0x38]
cmp byte [eax + 0x5122], 0
je 0x404251
cmp byte [eax + 0x5120], 0
je 0x404251
mov ecx, 1
jmp 0x404253
xor ecx, ecx
mov byte [esp + 0xdbc8], cl
mov edx, dword [eax + 0x73ac]
mov ecx, dword [eax + 0x73a8]
push edx
mov edx, dword [eax + 0x73a4]
push ecx
push edx
lea ecx, [esp + 0x3210]
call fcn.0040b7d0
mov eax, dword [ebx + 0x38]
movzx ecx, byte [eax + 0x6195]
neg ecx
sbb ecx, ecx
and ecx, 3
inc ecx
push ecx
push esi
lea ecx, [esp + 0xec4c]
call fcn.0043ad10
test al, al
je 0x4045ad
mov eax, dword [ebx + 0x38]
mov edx, dword [eax + 0x6160]
or edx, dword [eax + 0x6164]
jne 0x4042c5
cmp byte [esp + 0x19600], dl
jne 0x40431a
cmp dword [eax + 0x6144], edi
je 0x40431a
lea ecx, [esp + 0xec44]
call fcn.0043b650
cmp eax, 0x14
jne 0x4042f6
cmp edx, edi
jne 0x4042f6
lea ecx, [esp + 0xec44]
call fcn.0043b020
mov dword [esp + 0xfc64], 1
jmp 0x4045bb
mov eax, dword [ebx + 0x38]
mov ecx, dword [eax + 0x6160]
or ecx, dword [eax + 0x6164]
je 0x40431a
mov dword [eax + 0x6160], edi
mov dword [eax + 0x6164], edi
mov byte [ebx + 0x1920], 0
push edi
lea ecx, [esp + 0xec48]
call fcn.0040e160
lea ecx, [esp + 0xec44]
call fcn.0040b6c0
test al, al
jne 0x404342
push esi
mov ecx, 0x51e7a8
call fcn.00433930
lea ecx, [esp + 0xec44]
call fcn.004b1d50
push edi
lea ecx, [esp + 0xec48]
call fcn.0040b520
test al, al
je 0x40436b
push 4
mov ecx, 0x51e7a8
call fcn.004333b0
lea ecx, [esp + 0xec44]
call fcn.0040b5e0
test al, al
je 0x404387
push 3
mov ecx, 0x51e7a8
call fcn.004333b0
mov dl, byte [esp + 0x19600]
mov byte [esp + 0xdbc0], dl
push 1
push esi
push edi
call fcn.00409fa0
cmp dword [esp + 0xec48], 0xffffffff
mov eax, dword [esp + 0x130]
setne byte [esp + 0x1f]
xor esi, esi
xor edi, edi
mov byte [esp + 0x1c], 0
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], edi
cmp eax, esi
jbe 0x404490
jmp 0x4043d0
push esi
lea ecx, [esp + 0xc8]
call fcn.004065e0
cmp dword [eax + 0x2c], 2
je 0x4043fa
push esi
lea ecx, [esp + 0xc8]
call fcn.004065e0
cmp dword [eax + 0x2c], 3
jne 0x40447c
push esi
lea ecx, [esp + 0xc8]
call fcn.004065e0
mov ecx, dword [eax + 0xc]
cmp ecx, edi
jb 0x404430
ja 0x404419
mov edx, dword [eax + 8]
cmp edx, dword [esp + 0x34]
jbe 0x404430
push esi
lea ecx, [esp + 0xc8]
call fcn.004065e0
mov ecx, dword [eax + 8]
mov edi, dword [eax + 0xc]
mov dword [esp + 0x34], ecx
push esi
lea ecx, [esp + 0xc8]
call fcn.004065e0
mov edx, dword [eax + 8]
add dword [esp + 0xdbf4], edx
mov eax, dword [eax + 0xc]
push esi
adc dword [esp + 0xdbfc], eax
lea ecx, [esp + 0xc8]
call fcn.004065e0
mov ecx, dword [eax]
push ecx
lea ecx, [esp + 0x3208]
call fcn.0040b500
add dword [esp + 0xdbfc], eax
adc dword [esp + 0xdc00], 0
mov eax, dword [esp + 0x130]
inc esi
cmp esi, eax
jb 0x4043d0
mov dword [esp + 0x38], edi
cmp byte [esp + 0x1f], 0
je 0x40467e
test eax, eax
jne 0x4044ae
mov edx, dword [ebx + 0x38]
cmp byte [edx + 0x62b2], al
je 0x4046d8
lea ecx, [esp + 0x3204]
call fcn.0040b620
push 0
push 1
lea eax, [esp + 0xec4c]
push eax
lea ecx, [esp + 0x3210]
call fcn.0040fed0
lea ecx, [esp + 0xdbd2]
push ecx
lea edx, [esp + 0x21]
push edx
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0xd0]
push ecx
lea edx, [esp + 0xec54]
push edx
mov ecx, ebx
call fcn.004028e0
cmp byte [esp + 0x1d], 0
je 0x4046d8
xor esi, esi
cmp dword [esp + 0x130], esi
jbe 0x404544
lea edi, [esi + 4]
jmp 0x404520
push esi
lea ecx, [esp + 0xc8]
call fcn.004065e0
cmp dword [eax + 0x2c], edi
jne 0x4046d4
inc esi
cmp esi, dword [esp + 0x130]
jb 0x404520
mov edi, dword [esp + 0x38]
mov eax, dword [ebx + 0x38]
cmp dword [eax + 0x6180], 0
jne 0x4046d8
push 0xa
mov ecx, 0x51e7a8
call fcn.00433290
lea ecx, [esp + 0x3204]
call fcn.0043b020
mov byte [esp + 0x2dd80], 2
lea ecx, [esp + 0x3204]
call fcn.0040bce0
mov byte [esp + 0x2dd80], 1
lea ecx, [esp + 0xec44]
call fcn.0040bce0
mov byte [esp + 0x2dd80], 0
lea ecx, [esp + 0xc4]
call fcn.00402870
jmp 0x406089
cmp dword [esp + 0xfc64], 1
jne 0x404661
push 1
push esi
lea ecx, [esp + 0x320c]
mov byte [esp + 0xdc0c], 1
call fcn.0043b450
mov edx, dword [ebx + 0x38]
cmp word [edx + 0x1010], di
je 0x404640
lea ecx, [esp + 0x1194]
call fcn.0043acd0
mov byte [esp + 0x2dd80], 4
mov eax, dword [ebx + 0x38]
add eax, 0x1010
push eax
lea ecx, [esp + 0x1198]
call fcn.0043b410
push 0x7fffffff
push 0x7fffffff
lea ecx, [esp + 0x320c]
push ecx
lea ecx, [esp + 0x11a0]
call fcn.0043b910
mov dword [esp + 0xdbcc], eax
mov byte [esp + 0x2dd80], 3
lea ecx, [esp + 0x1194]
call fcn.0043b3e0
mov eax, dword [ebx + 0x38]
cmp dword [eax + 0x6144], edi
je 0x40465b
cmp dword [eax + 0x6130], edi
je 0x40465b
mov byte [esp + 0xdbc0], 1
push edi
jmp 0x404397
push esi
push edi
mov ecx, 0x51e7a8
call fcn.004337a0
push 9
mov ecx, 0x51e7a8
call fcn.004333b0
jmp 0x40439e
mov ecx, dword [ebx + 0x38]
xor edx, edx
cmp byte [ecx + 0x6197], dl
push 0
setne dl
push 0
lea eax, [esp + 0xec4c]
push eax
lea ecx, [esp + 0x3210]
add edx, 2
mov dword [esp + 0xdbc8], edx
call fcn.0040fed0
mov eax, dword [ebx + 0x38]
mov ecx, dword [eax + 0x6160]
mov eax, dword [eax + 0x6164]
mov edx, ecx
or edx, eax
je 0x4046d8
push eax
push ecx
lea eax, [esp + 0x320c]
push eax
call fcn.004914e0
jmp 0x4046d8
mov edi, dword [esp + 0x38]
mov ecx, dword [esp + 0xdbbc]
push ecx
mov ecx, dword [ebx + 0x38]
call fcn.00420830
xor esi, esi
cmp dword [esp + 0x130], esi
jbe 0x404743
mov edx, dword [ebx + 0x38]
cmp byte [edx + 0x614f], 0
je 0x404712
push esi
lea ecx, [esp + 0xc8]
call fcn.004065e0
cmp dword [eax + 0x2c], 2
je 0x404725
push esi
lea ecx, [esp + 0xc8]
call fcn.004065e0
cmp dword [eax + 0x2c], 1
jne 0x404739
push esi
lea ecx, [esp + 0xc8]
call fcn.004065e0
mov dword [eax + 0x2c], 0
inc esi
cmp esi, dword [esp + 0x130]
jb 0x4046f3
mov esi, dword [ebx + 0x38]
cmp word [esi + 0x73b0], 0
jne 0x4047e1
cmp byte [esp + 0x1f], 0
je 0x404765
cmp byte [esp + 0x19600], 0
jne 0x4047e1
cmp byte [esp + 0x1e], 0
jne 0x4047e1
mov eax, dword [esi + 0x6144]
test eax, eax
je 0x404786
mov ecx, dword [esp + 0xdbf4]
mov edx, dword [esp + 0xdbf8]
jmp 0x40478c
mov ecx, dword [esp + 0x34]
mov edx, edi
neg eax
sbb eax, eax
and eax, 0xe0000
add eax, 0x20000
cmp dword [esi + 0xc], eax
jbe 0x4047e1
push 0
push 2
push edx
push ecx
call fcn.004bfed0
mov edi, eax
lea esp, [esp]
mov ecx, dword [ebx + 0x38]
mov eax, dword [ecx + 0xc]
xor esi, esi
cmp esi, edx
jb 0x4047e1
ja 0x4047c2
cmp eax, edi
jbe 0x4047e1
shr dword [ecx + 0xc], 1
mov ecx, dword [ebx + 0x38]
mov eax, dword [ecx + 0x6144]
neg eax
sbb eax, eax
and eax, 0xe0000
add eax, 0x20000
cmp dword [ecx + 0xc], eax
ja 0x4047b0
cmp dword [esp + 0xdbbc], 2
mov ecx, 0x400000
jne 0x4047fb
mov eax, dword [ebx + 0x38]
cmp dword [eax + 0xc], ecx
jbe 0x4047fb
mov dword [eax + 0xc], ecx
cmp byte [esp + 0xdbc0], 0
je 0x404815
mov ecx, dword [ebx + 0x38]
cmp byte [ecx + 0x617d], 0
jne 0x404815
mov al, 1
jmp 0x404817
xor al, al
push 0
push eax
lea ecx, [esp + 0xcc]
call fcn.00406d00
mov edx, dword [ebx + 0x38]
cmp dword [edx + 0x61a0], 0
je 0x404860
cmp dword [esp + 0xdbbc], 3
jne 0x404860
push 0x62c
call fcn.004744a0
push eax
call fcn.0049e9d0
call fcn.0049f0e0
lea eax, [esp + 0xc4]
push eax
mov ecx, ebx
call fcn.00402080
mov ecx, dword [ebx + 0x3c]
test ecx, ecx
je 0x40486f
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
cmp byte [esp + 0x1f], 0
je 0x4048b4
cmp dword [esp + 0x195fc], 3
je 0x4048c0
push 0x1b498
call fcn.004c0acd
add esp, 4
mov dword [esp + 0x2c], eax
mov byte [esp + 0x2dd80], 6
test eax, eax
je 0x4048f4
mov edx, dword [ebx + 0x38]
lea ecx, [ebx + 0x80]
push ecx
mov ecx, dword [edx + 0xc]
push ecx
mov ecx, eax
call fcn.0045bac0
jmp 0x4048f6
mov ecx, dword [ebx + 0x38]
cmp byte [ecx + 0x6197], 0
je 0x404880
push 0x6228
call fcn.004c0acd
add esp, 4
mov dword [esp + 0x2c], eax
mov byte [esp + 0x2dd80], 5
test eax, eax
je 0x4048f4
mov ecx, dword [ebx + 0x38]
lea edx, [ebx + 0x80]
push edx
mov edx, dword [ecx + 0xc]
push edx
mov ecx, eax
call fcn.004551c0
jmp 0x4048f6
xor eax, eax
mov byte [esp + 0x2dd80], 3
mov edx, dword [ebx + 0x38]
lea edi, [ebx + 0x80]
mov dword [ebx + 0x3c], eax
push edi
lea ecx, [esp + 0x1e6c0]
mov dword [edx + 0xa3c4], eax
call fcn.0048c2d0
mov byte [esp + 0x2dd80], 7
mov ecx, dword [ebx + 0x3c]
mov eax, dword [ebx + 0x38]
mov edx, dword [ecx]
mov eax, dword [eax + 0x83b0]
mov edx, dword [edx + 0x20]
push eax
call edx
mov eax, dword [ebx + 0x38]
mov eax, dword [eax + 0x83b0]
cmp eax, 8
jb 0x40494c
mov eax, 8
mov ecx, dword [ebx + 0x3c]
mov dword [esp + 0x1e6d8], eax
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebx + 0x3c]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
lea esi, [ebx + 8]
push esi
call eax
mov dword [esi + 0x24], ebx
mov ecx, dword [ebx + 0x38]
mov dword [esi + 0x2c], edi
xor edi, edi
cmp byte [esp + 0x19600], 0
lea edx, [esp + 0xec44]
lea eax, [esp + 0x3204]
mov dword [esi + 0x28], ecx
mov dword [esi + 0x20], edi
mov dword [esi + 4], edi
mov dword [esi + 8], edi
mov dword [esi + 0x18], edx
mov dword [esi + 0x1c], eax
mov byte [esp + 0x1d], 0
mov byte [esp + 0x1e], 0
je 0x4049f3
mov ecx, dword [ebx + 0x38]
cmp byte [ecx + 0x5120], 0
jne 0x4049bd
cmp byte [esp + 0x1c], 0
je 0x4049d3
mov edx, dword [ebx + 0x48]
add dword [esp + 0xdbf4], edx
mov eax, dword [ebx + 0x4c]
adc dword [esp + 0xdbf8], eax
jmp 0x4049d8
mov byte [esp + 0x1d], 1
push edi
lea ecx, [esp + 0xec48]
call fcn.00410450
push edx
push eax
lea ecx, [esp + 0xec50]
call fcn.0040b840
xor esi, esi
mov dword [esp + 0x13c], esi
mov dword [esp + 0x140], edi
mov dword [esp + 0x144], edi
mov dword [esp + 0x148], edi
mov byte [esp + 0x2dd80], 8
mov dword [esp + 0x34], edi
mov dword [esp + 0x38], edi
mov dword [esp + 0x20], edi
cmp dword [esp + 0x130], edi
jbe 0x405869
mov ecx, dword [esp + 0x20]
push ecx
lea ecx, [esp + 0xc8]
call fcn.004065e0
mov ecx, 0x14
mov esi, eax
lea edi, [esp + 0x54]
rep movsd dword es:[edi], dword [esi]
cmp dword [esp + 0x80], 0
je 0x40584c
mov edi, dword [esp + 0x20]
mov esi, dword [esp + 0x90]
lea esp, [esp]
mov eax, dword [esp + 0x80]
cmp eax, 6
je 0x405385
cmp eax, 5
je 0x4054d2
cmp eax, 4
je 0x4054e0
push 0
lea ecx, [esp + 0x9158]
call fcn.00441d20
lea ecx, [esp + 0x115c]
call fcn.00481670
lea ecx, [esp + 0x1164]
call fcn.00481670
lea ecx, [esp + 0x116c]
call fcn.00481670
lea ecx, [esp + 0x1194]
call fcn.0043acd0
mov byte [esp + 0x2dd80], 0xa
cmp byte [esp + 0xa1], 0
je 0x404b19
cmp dword [esp + 0xdbbc], 3
jne 0x404b19
mov edx, dword [ebx + 0x38]
cmp byte [edx + 0x6189], 0
mov byte [esp + 0x1b], 1
je 0x404b1e
mov ecx, dword [esp + 0x54]
lea eax, [esp + 0x9154]
push eax
push ecx
call fcn.004364b0
cmp dword [esp + 0xa244], 0
jne 0x404b1e
mov byte [esp + 0x1b], 0
mov al, byte [esp + 0xa0]
test al, al
jne 0x404b41
cmp byte [esp + 0x1b], al
je 0x404b3a
mov edx, dword [ebx + 0x38]
cmp byte [edx + 0x6189], al
jne 0x404b41
mov byte [esp + 0x30], 0
jmp 0x404b5a
mov byte [esp + 0x30], 1
test al, al
je 0x404b5a
mov eax, dword [ebx + 0x38]
cmp dword [eax + 0x6154], 1
je 0x405838
mov eax, dword [ebx + 0x38]
cmp word [eax + 0x73b0], 0
jne 0x404ba7
movzx ecx, byte [eax + 0x6189]
mov eax, dword [esp + 0x54]
push ecx
lea edx, [esp + 0x150]
push edx
push eax
call fcn.00441010
cmp byte [esp + 0xa0], 0
mov byte [esp + 0x1b], al
je 0x404bb7
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
push ecx
push edx
lea ecx, [esp + 0x1174]
call fcn.004815b0
jmp 0x404bb7
mov byte [esp + 0x1b], 0
mov dword [esp + 0x11a0], 1
mov cl, byte [esp + 0x30]
test cl, cl
jne 0x404d3e
mov eax, dword [ebx + 0x38]
cmp word [eax + 0x73b0], 0
jne 0x404d3e
cmp byte [esp + 0x1b], cl
je 0x404bfa
movzx eax, byte [eax + 0x6195]
mov ecx, dword [esp + 0x54]
neg eax
sbb eax, eax
and eax, 4
push eax
push ecx
lea ecx, [esp + 0x119c]
call fcn.0043ad10
cmp dword [esp + 0x1198], 0xffffffff
jne 0x404c9b
mov edx, dword [esp + 0x54]
mov eax, dword [esp + 0x3c]
push edx
push eax
mov ecx, 0x51e7a8
call fcn.00433770
mov ecx, dword [esp + 0x5c]
sub dword [esp + 0xdbf4], ecx
mov edx, dword [esp + 0x60]
push edi
sbb dword [esp + 0xdbfc], edx
lea ecx, [esp + 0xc8]
call fcn.004065e0
inc dword [esp + 0x28]
mov dword [eax + 0x2c], 0
test esi, esi
jl 0x405838
jg 0x404c62
cmp dword [esp + 0x8c], 0
jbe 0x405838
cmp dword [esp + 0x98], 0
jne 0x405838
mov dword [esp + 0x80], 4
mov dword [ebx + 0x40], 0
mov byte [esp + 0x2dd80], 8
lea ecx, [esp + 0x1194]
call fcn.0043b3e0
jmp 0x404a70
cmp byte [esp + 0x1b], 0
je 0x404cb6
lea ecx, [esp + 0x115c]
call fcn.004815a0
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], edx
cmp byte [esp + 0xa1], 0
jne 0x404d5c
mov eax, dword [ebx + 0x38]
cmp byte [eax + 0x618a], 0
je 0x404d5c
cmp dword [esp + 0xdbbc], 3
jne 0x404d5c
lea ecx, [esp + 0xa4]
push ecx
lea edx, [esp + 0x140]
push edx
lea eax, [esp + 0x119c]
push eax
mov ecx, ebx
mov dword [esp + 0xb0], edi
call fcn.00402c20
test al, al
je 0x404d5c
mov edx, dword [esp + 0xa4]
push 0x800
lea ecx, [esp + 0xa24c]
push ecx
push edx
lea ecx, [esp + 0xd0]
mov dword [esp + 0xa250], 4
call fcn.004065e0
push eax
mov eax, dword [ebx + 0x38]
push eax
jmp 0x404dc7
cmp byte [esp + 0xa1], 0
jne 0x404d58
xor eax, eax
mov dword [esp + 0x114c], eax
mov dword [esp + 0x1150], eax
test cl, cl
jne 0x404dd1
cmp dword [esp + 0x9c], 0xffffffff
je 0x404dd1
cmp dword [esp + 0x1198], 0xffffffff
je 0x404d7c
lea ecx, [esp + 0x1194]
call fcn.0043afc0
mov esi, dword [esp + 0x9c]
push esi
lea ecx, [esp + 0xc8]
call fcn.004065e0
mov eax, dword [eax + 0x2c]
cmp eax, 2
je 0x404d9d
cmp eax, 3
jne 0x404dd1
push 0x800
lea ecx, [esp + 0xa24c]
push ecx
push esi
lea ecx, [esp + 0xd0]
mov dword [esp + 0xa250], 5
call fcn.004065e0
mov edx, dword [ebx + 0x38]
push eax
push edx
call fcn.00401570
mov byte [esp + 0x30], 1
mov eax, dword [esp + 0x54]
push eax
push 1
mov ecx, 0x51e7b4
call fcn.00420a60
mov eax, dword [ebx + 0x38]
push 0x800
lea ecx, [esp + 0x9178]
push ecx
lea edx, [esp + 0x5c]
push edx
push eax
call fcn.00401570
cmp byte [esp + 0x1e], 0
je 0x404e6c
lea ecx, [esp + 0xec44]
call fcn.0040b880
push 0
lea ecx, [esp + 0xec48]
mov esi, eax
mov edi, edx
call fcn.00410450
push edx
push eax
lea ecx, [esp + 0xec50]
call fcn.0040b840
push 0
lea ecx, [esp + 0x1e6c0]
push ecx
push edi
push esi
lea edx, [esp + 0xec54]
push edx
mov ecx, ebx
call fcn.00402620
mov edx, dword [ebx + 0x38]
mov edx, dword [edx + 0x6130]
mov ecx, dword [ebx + 0x3c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x10]
dec edx
push edx
lea edx, [esp + 0x1e6c0]
push edx
call eax
mov byte [ebx + 0x54], 1
xor edi, edi
cmp byte [esp + 0xdbc0], 0
mov byte [esp + 0x1e], 0
mov byte [esp + 0x1d], 0
je 0x404f9b
mov eax, dword [ebx + 0x38]
mov ecx, dword [eax + 0x6144]
mov byte [esp + 0x1c], 0
test cl, 2
je 0x404eb9
mov esi, dword [eax + 0x6148]
cmp esi, edi
jle 0x404eb9
cmp dword [esp + 0x24], edi
jle 0x404eb9
mov eax, dword [esp + 0x24]
cdq
idiv esi
test edx, edx
jne 0x404eb9
mov byte [esp + 0x1c], 1
test cl, 4
je 0x404f04
lea ecx, [esp + 0x9174]
push ecx
call fcn.0045fb00
mov esi, eax
cmp esi, edi
je 0x404efa
lea edx, [esp + 0x2ccbc]
push edx
push esi
call fcn.0047e2f0
test eax, eax
je 0x404ee8
mov byte [esp + 0x1c], 1
push 0x40
push esi
lea eax, [esp + 0x2ccc4]
push eax
call fcn.0047e340
jmp 0x404f04
xor ecx, ecx
mov word [esp + 0x2ccbc], cx
mov edx, dword [ebx + 0x38]
mov edx, dword [edx + 0x6144]
test dl, 8
jne 0x404f66
lea ecx, [esp + 0x3222]
lea eax, [esp + 0x2cd3c]
mov si, word [eax]
cmp si, word [ecx]
jne 0x404f46
cmp si, di
je 0x404f42
mov si, word [eax + 2]
cmp si, word [ecx + 2]
jne 0x404f46
add eax, 4
add ecx, 4
cmp si, di
jne 0x404f20
xor eax, eax
jmp 0x404f4b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
je 0x404f66
test dl, 0x10
jne 0x404f6d
cmp dword [esp + 0x38], edi
jg 0x404f6d
jl 0x404f66
cmp dword [esp + 0x34], 0x400000
ja 0x404f6d
cmp byte [esp + 0x1c], 0
je 0x404f8b
cmp dword [esp + 0x24], edi
jle 0x404f8b
mov ecx, dword [ebx + 0x3c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x14]
call edx
mov byte [ebx + 0x54], 0
mov dword [esp + 0x34], edi
mov dword [esp + 0x38], edi
jmp 0x404f9b
mov eax, dword [esp + 0x5c]
add dword [esp + 0x34], eax
mov ecx, dword [esp + 0x60]
adc dword [esp + 0x38], ecx
xor eax, eax
lea ecx, [ecx]
movzx ecx, word [esp + eax + 0x3222]
mov word [esp + eax + 0x2cd3c], cx
add eax, 2
cmp cx, di
jne 0x404fa0
mov eax, dword [esp + 0x80]
cmp eax, 2
jne 0x404fce
mov edx, dword [esp + 0x54]
push edi
push edi
push edi
push edx
jmp 0x404fdc
cmp eax, 3
jne 0x404fe2
mov eax, dword [esp + 0x54]
push edi
push edi
push 1
push eax
push edi
call fcn.00409fe0
mov eax, dword [ebx + 0x38]
cmp word [eax + 0x73b0], di
jne 0x404ffe
mov ecx, dword [esp + 0x115c]
or ecx, dword [esp + 0x1160]
jne 0x405010
mov dword [esp + 0x114c], edi
mov dword [esp + 0x1150], 0x100
cmp dword [esp + 0xdbbc], 3
mov edx, dword [esp + 0x114c]
mov ecx, dword [esp + 0x1150]
mov dword [esp + 0x9158], 2
mov dword [esp + 0xa1a4], edx
mov dword [esp + 0xa1a8], ecx
mov dword [esp + 0xa19c], edi
mov dword [esp + 0xa1a0], edi
jne 0x405057
mov edi, dword [eax + 0x6134]
jmp 0x40505c
mov edi, 2
push edi
lea ecx, [esp + 0xa1b8]
call fcn.00441990
mov edx, dword [ebx + 0x38]
cmp byte [edx + 0x5120], 0
je 0x405119
cmp byte [esp + 0xa0], 0
jne 0x405119
mov esi, dword [esp + 0xdbbc]
cmp esi, 3
jne 0x4050cf
push 0x10
lea eax, [esp + 0xa1f9]
push eax
call fcn.004298d0
mov esi, dword [esp + 0xdbbc]
xor ecx, ecx
cmp byte [esp + 0xdbc8], cl
mov dword [esp + 0xa230], 0xf
sete cl
mov byte [esp + 0xa205], 1
mov byte [esp + 0xa20e], cl
mov edx, dword [esp + 0xdbd2]
mov eax, dword [esp + 0xdbd6]
mov ecx, dword [esp + 0xdbda]
mov dword [esp + 0xa1e5], edx
mov edx, dword [esp + 0xdbde]
mov byte [esp + 0xa1df], 1
mov byte [esp + 0xa1e4], 1
mov dword [esp + 0xa1e9], eax
mov dword [esp + 0xa1ed], ecx
mov dword [esp + 0xa1f1], edx
jmp 0x405120
mov esi, dword [esp + 0xdbbc]
mov eax, esi
sub eax, 3
neg eax
sbb eax, eax
and eax, 0x1d
cmp byte [ebx + 0x54], 0
mov byte [esp + 0x916d], al
mov eax, dword [ebx + 0x38]
mov ecx, dword [eax + 0xc]
mov dword [esp + 0xa238], ecx
mov byte [esp + 0xa235], 0
je 0x405156
mov byte [esp + 0xa234], 1
cmp byte [esp + 0x1b], 0
je 0x4051b5
mov edx, dword [esp + 0x115c]
mov ecx, dword [esp + 0x1160]
mov dword [esp + 0xa184], edx
mov edx, dword [esp + 0x116c]
mov dword [esp + 0xa188], ecx
mov ecx, dword [esp + 0x1170]
mov dword [esp + 0xa194], edx
mov edx, dword [esp + 0x1164]
mov dword [esp + 0xa198], ecx
mov ecx, dword [esp + 0x1168]
mov dword [esp + 0xa18c], edx
mov dword [esp + 0xa190], ecx
xor edx, edx
jmp 0x4051e1
xor edx, edx
mov dword [esp + 0xa184], edx
mov dword [esp + 0xa188], edx
mov dword [esp + 0xa194], edx
mov dword [esp + 0xa198], edx
mov dword [esp + 0xa18c], edx
mov dword [esp + 0xa190], edx
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x9170], ecx
cmp esi, 2
je 0x4051fa
cmp dword [esp + 0xa244], edx
jne 0x405207
and ecx, 0xfffffbff
mov dword [esp + 0x9170], ecx
cmp dword [esp + 0xa1a8], edx
movzx ecx, byte [esp + 0xa0]
mov byte [esp + 0xa235], cl
movzx ecx, byte [eax + 0x6130]
mov byte [esp + 0x916e], cl
jg 0x40524a
jl 0x40523c
cmp dword [esp + 0xa1a4], 0x80000000
ja 0x40524a
cmp word [eax + 0x73b0], dx
jne 0x40524a
cmp esi, 3
jne 0x405252
mov byte [esp + 0xa23d], 1
mov edx, dword [eax + 0x83b0]
push edx
push edi
lea ecx, [ebx + 0x2300]
call fcn.00441ae0
inc dword [esp + 0x24]
lea eax, [esp + 0x3204]
push eax
lea ecx, [esp + 0x1198]
push ecx
lea esi, [ebx + 0x80]
mov ecx, esi
mov dword [esp + 0xa248], 0
call fcn.00467130
xor eax, eax
mov dword [ebx + 0x1930], eax
mov dword [ebx + 0x1934], eax
mov eax, dword [esp + 0x114c]
mov dword [esp + 0xa1ac], eax
mov edx, dword [esp + 0x1150]
xor edi, edi
cmp byte [esp + 0x30], 0
mov byte [ebx + 0xd0], 1
mov dword [esp + 0xa1b0], edx
jne 0x4056fc
mov ecx, dword [ebx + 0x38]
cmp word [ecx + 0x73b0], di
jne 0x4056fc
lea edx, [esp + 0x46]
push edx
lea eax, [esp + 0x4b]
push eax
lea ecx, [esp + 0x34]
push ecx
mov ecx, esi
call fcn.00467070
cmp byte [esp + 0x47], 0
je 0x405610
mov edx, dword [esp + 0x54]
mov eax, dword [esp + 0x3c]
push edx
push eax
mov ecx, 0x51e7a8
call fcn.00433770
mov ecx, dword [esp + 0x5c]
sub dword [esp + 0xdbf4], ecx
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x60]
sbb dword [esp + 0xdbf8], edx
push eax
lea ecx, [esp + 0xc8]
call fcn.004065e0
inc dword [esp + 0x28]
cmp dword [esp + 0x90], edi
mov dword [eax + 0x2c], edi
jl 0x405838
jg 0x40535e
cmp dword [esp + 0x8c], edi
jbe 0x405838
mov dword [esp + 0x80], 4
mov dword [ebx + 0x40], edi
mov byte [esp + 0x2dd80], 8
lea ecx, [esp + 0x1194]
call fcn.0043b3e0
jmp 0x404a5e
mov edx, dword [esp + 0xec44]
mov eax, dword [edx + 0xc]
lea ecx, [esp + 0xec44]
mov dword [esp + 0xac], ecx
call eax
mov esi, eax
mov edi, edx
mov dword [esp + 0xb4], esi
mov dword [esp + 0xb8], edi
mov byte [esp + 0x2dd80], 9
mov ecx, dword [ebx + 0x3c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
call eax
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x8c]
push 0
push ecx
push edx
lea ecx, [esp + 0xec50]
call fcn.0040b840
lea ecx, [esp + 0xec44]
call fcn.00412ce0
mov eax, dword [esp + 0x13e68]
cmp eax, 2
je 0x405458
cmp eax, 3
je 0x405461
mov al, byte [esp + 0x19608]
cmp al, byte [esp + 0xdbc8]
jne 0x4054ae
mov ecx, dword [esp + 0x195f0]
mov edx, dword [esp + 0x195ec]
push 0
push ecx
push edx
lea ecx, [esp + 0xec50]
call fcn.0040b840
mov eax, dword [esp + 0x195f4]
sub eax, dword [esp + 0x195ec]
mov ecx, dword [esp + 0x195f8]
sbb ecx, dword [esp + 0x195f0]
lea edx, [esp + 0x3204]
push ecx
push eax
push edx
jmp 0x4054a2
lea ecx, [esp + 0x14b94]
jmp 0x405468
lea ecx, [esp + 0x16ed4]
push 0
push 0
push ecx
push eax
lea ecx, [esp + 0x3214]
call fcn.0040e240
lea ecx, [esp + 0xec44]
call fcn.0040b880
mov ecx, dword [esp + 0x195f4]
sub ecx, eax
mov eax, dword [esp + 0x195f8]
sbb eax, edx
push eax
push ecx
lea ecx, [esp + 0x320c]
push ecx
lea ecx, [esp + 0xec50]
call fcn.0043b910
mov byte [esp + 0x2dd80], 8
mov edx, dword [esp + 0xec44]
mov eax, dword [edx + 8]
push 0
push edi
push esi
lea ecx, [esp + 0xec50]
call eax
jmp 0x40584c
inc dword [esp + 0x40]
call fcn.0047eeb0
jmp 0x40584c
cmp byte [esp + 0x19600], 0
je 0x40554a
cmp byte [esp + 0x1d], 0
jne 0x40554a
mov edx, dword [esp + 0x8c]
push 0
lea ecx, [esp + 0x1e6c0]
push ecx
push esi
push edx
lea eax, [esp + 0xec54]
push eax
mov ecx, ebx
call fcn.00402620
mov ecx, dword [esp + 0x98]
mov eax, dword [ebx + 0x3c]
push ecx
push 0
lea edx, [esp + 0x1e6c4]
push edx
push eax
lea ecx, [esp + 0x3214]
push ecx
lea edx, [esp + 0xec58]
push edx
mov ecx, ebx
call fcn.004034e0
call fcn.0047eeb0
jmp 0x40584c
mov ecx, dword [ebx + 0x3c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x14]
call edx
mov eax, dword [esp + 0x8c]
push 0
push esi
push eax
lea ecx, [esp + 0xec50]
call fcn.0040b840
lea ecx, [esp + 0xec44]
call fcn.00412ce0
lea ecx, [esp + 0x14b94]
push ecx
lea ecx, [esp + 0x9158]
call fcn.00441e00
mov eax, dword [esp + 0x98]
test eax, eax
je 0x4055a6
push eax
lea edx, [esp + 0x9158]
push edx
mov ecx, ebx
call fcn.00401680
lea ecx, [esp + 0xec44]
call fcn.00410360
test al, al
jne 0x4055c1
mov al, byte [esp + 0x19600]
mov byte [esp + 0x1e], al
cmp byte [esp + 0x1e], 0
je 0x4055de
mov ecx, dword [ebx + 0x38]
mov eax, dword [ecx + 0xc]
cmp eax, dword [esp + 0xa238]
jbe 0x4055de
mov dword [esp + 0xa238], eax
push 0
push 0
push 0
push 2
lea ecx, [esp + 0x3214]
call fcn.0040e240
lea edx, [esp + 0xec44]
push edx
lea ecx, [esp + 0x3208]
call fcn.0040b670
call fcn.0047eeb0
jmp 0x40584c
cmp byte [esp + 0x46], 0
je 0x405665
mov ecx, dword [esp + 0x1150]
mov edx, dword [esp + 0x2c]
xor eax, eax
cmp ecx, eax
mov eax, dword [esp + 0x114c]
ja 0x40564d
jb 0x405635
cmp eax, edx
jae 0x40564d
mov byte [esp + 0x48], 1
mov edx, dword [esp + 0x48]
push edx
push 1
push ecx
push eax
call fcn.00401720
jmp 0x4056ee
mov byte [esp + 0x48], 0
mov edx, dword [esp + 0x48]
push edx
push 1
push ecx
push eax
call fcn.00401720
jmp 0x4056ee
mov eax, dword [esp + 0x2c]
xor ecx, ecx
mov esi, ecx
push esi
mov dword [esp + 0x1150], eax
mov edi, eax
add eax, 0x200
mov dword [esp + 0x1154], ecx
push 2
adc ecx, ecx
push ecx
push eax
call fcn.004bfed0
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], edx
cmp edx, esi
ja 0x4056ac
jb 0x4056a0
cmp eax, edi
jae 0x4056ac
mov dword [esp + 0x4c], esi
mov dword [esp + 0x50], 0x40000000
mov edi, dword [esp + 0x4c]
mov esi, 1
xor eax, eax
mov edx, esi
add edx, 0xffffffff
mov ecx, eax
adc ecx, 0xffffffff
cmp dword [esp + 0x50], ecx
jb 0x4056e0
ja 0x4056cd
cmp edi, edx
jb 0x4056e0
shld eax, esi, 7
shl esi, 7
mov edx, esi
or edx, eax
jne 0x4056b7
mov edx, dword [esp + 0x50]
jmp 0x4056ea
add esi, 0xffffffff
adc eax, 0xffffffff
mov edi, esi
mov edx, eax
mov eax, edi
xor edi, edi
mov dword [esp + 0xa1ac], eax
mov dword [esp + 0xa1b0], edx
mov ecx, dword [esp + 0xdbbc]
cmp ecx, 3
jne 0x405714
mov dword [ebx + 0x1958], eax
mov dword [ebx + 0x195c], edx
test byte [esp + 0x94], 1
jne 0x40572d
mov eax, dword [ebx + 0x38]
cmp dword [eax + 0x6130], edi
je 0x40572d
xor al, al
jmp 0x40572f
mov al, 1
cmp byte [esp + 0x30], 0
mov byte [esp + 0x1c], al
jne 0x40573e
test al, al
je 0x405763
mov edx, dword [ebx + 0x38]
mov byte [esp + 0x916e], 0
cmp byte [edx + 0x5120], 0
jne 0x40575f
cmp ecx, 3
je 0x40575f
mov byte [esp + 0x916d], 0x14
test al, al
jne 0x40578f
mov ecx, dword [ebx + 0x3c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x1c]
call edx
xor ecx, ecx
add eax, dword [esp + 0xa1a4]
adc ecx, dword [esp + 0xa1a8]
mov dword [esp + 0xa8], ecx
js 0x405799
jg 0x40578f
cmp eax, 0x8000
jbe 0x405799
mov ecx, dword [ebx + 0x3c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
call eax
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x54]
mov eax, dword [ebx + 0x3c]
push ecx
push 1
push edx
push eax
lea ecx, [esp + 0x11a4]
push ecx
lea esi, [ebx + 8]
mov ecx, esi
call fcn.004032c0
cmp byte [esp + 0x30], 0
jne 0x40581c
cmp byte [esp + 0x1c], 0
je 0x4057ed
push edi
mov ecx, esi
call fcn.00403380
lea eax, [ebx + 0x80]
push eax
call fcn.00402b70
push edi
mov ecx, esi
call fcn.00402da0
mov dword [esi + 8], edi
mov dword [esi + 4], edi
jmp 0x40581c
mov eax, dword [ebx + 0x38]
mov ecx, dword [ebx + 0x3c]
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
lea esi, [eax + 0x62dc]
mov eax, dword [eax + 0x6130]
push esi
dec eax
push eax
movzx eax, byte [ebx + 0x54]
push eax
call edx
cmp byte [esp + 0xdbc0], 0
je 0x405826
mov byte [ebx + 0x54], 1
cmp byte [esp + 0xdbc0], 0
jne 0x405830
mov ecx, dword [ebx + 0x3c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x14]
call edx
call fcn.0047eeb0
mov dword [ebx + 0x28], edi
mov byte [esp + 0x2dd80], 8
lea ecx, [esp + 0x1194]
call fcn.0043b3e0
mov eax, dword [esp + 0x20]
inc eax
mov dword [esp + 0x20], eax
cmp eax, dword [esp + 0x130]
jb 0x404a32
mov esi, dword [esp + 0x13c]
mov ecx, dword [ebx + 0x3c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x14]
call edx
cmp dword [esp + 0x28], 0
mov eax, dword [ebx + 0x38]
mov dword [eax + 0xa3c4], 0
jle 0x405893
push 6
mov ecx, 0x51e7a8
call fcn.00433290
cmp dword [esp + 0x24], 0
jne 0x405933
cmp dword [esp + 0x40], 0
jne 0x405933
push 0xa
mov ecx, 0x51e7a8
call fcn.00433290
lea ecx, [esp + 0x3204]
call fcn.0043b020
mov byte [esp + 0x2dd80], 7
test esi, esi
je 0x4058d6
push esi
call fcn.004bff04
add esp, 4
mov byte [esp + 0x2dd80], 3
lea ecx, [esp + 0x1e6bc]
call fcn.0048c430
mov byte [esp + 0x2dd80], 2
lea ecx, [esp + 0x3204]
call fcn.0040bce0
mov byte [esp + 0x2dd80], 1
lea ecx, [esp + 0xec44]
call fcn.0040bce0
mov byte [esp + 0x2dd80], 0xb
mov eax, dword [esp + 0x120]
test eax, eax
je 0x40592e
push eax
call fcn.004bff04
add esp, 4
jmp 0x40606d
cmp byte [esp + 0x1f], 0
je 0x405950
lea ecx, [esp + 0xec44]
push ecx
lea ecx, [esp + 0x3208]
call fcn.0040edf0
jmp 0x405960
push 0
push 0
lea ecx, [esp + 0x320c]
call fcn.0040f420
mov byte [esp + 0x2dd80], 7
test esi, esi
je 0x405975
push esi
call fcn.004bff04
add esp, 4
mov byte [esp + 0x2dd80], 3
lea ecx, [esp + 0x1e6bc]
call fcn.0048c430
lea edx, [esp + 0x3222]
push edx
push 0
mov ecx, 0x51e7b4
call fcn.00420a60
mov eax, dword [ebx + 0x38]
movzx esi, word [eax + 0x639c]
add eax, 0x639c
test si, si
je 0x4059db
xor ecx, ecx
cmp si, 0x40
sete cl
lea edx, [esp + 0x3222]
dec ecx
and eax, ecx
push eax
push edx
call fcn.0047f1a0
test al, al
jne 0x4059db
push 2
mov ecx, 0x51e7a8
call fcn.004333b0
mov eax, dword [ebx + 0x38]
cmp byte [eax + 0x614c], 0
je 0x405b19
push 0x33e
call fcn.004744a0
push eax
call fcn.0049e9d0
call fcn.0049f0e0
cmp dword [esp + 0x130], 0
mov dword [esp + 0x40], 0
jbe 0x405b19
jmp 0x405a20
mov ecx, dword [esp + 0x40]
push ecx
lea ecx, [esp + 0xc8]
call fcn.004065e0
mov esi, eax
mov ecx, 0x14
lea edi, [esp + 0x54]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 0x80]
cmp eax, 2
je 0x405a53
cmp eax, 3
jne 0x405b03
lea ecx, [esp + 0x115c]
call fcn.00481670
lea ecx, [esp + 0x1164]
call fcn.00481670
lea ecx, [esp + 0x116c]
call fcn.00481670
mov esi, dword [esp + 0x54]
push 0
lea edx, [esp + 0x150]
push edx
push esi
call fcn.00441010
test al, al
je 0x405b03
lea ecx, [esp + 0x115c]
call fcn.004815a0
cmp eax, dword [esp + 0x6c]
jne 0x405b03
cmp edx, dword [esp + 0x70]
jne 0x405b03
mov eax, dword [esp + 0x114c]
cmp eax, dword [esp + 0x5c]
jne 0x405b03
mov ecx, dword [esp + 0x1150]
cmp ecx, dword [esp + 0x60]
jne 0x405b03
cmp byte [esp + 0xa0], 0
jne 0x405b03
mov edx, dword [esp + 0x64]
and edx, 0xffffffdf
push edx
push esi
call fcn.0043bf70
test al, al
jne 0x405af6
push esi
push 0x4bf
call fcn.004744a0
push eax
mov eax, dword [esp + 0x44]
push eax
call fcn.004abfe0
add esp, 0xc
push esi
push 0
call fcn.0049eac0
call fcn.0049f0e0
mov eax, dword [esp + 0x40]
inc eax
mov dword [esp + 0x40], eax
cmp eax, dword [esp + 0x130]
jb 0x405a20
cmp word [esp + 0xdc06], 0
lea eax, [esp + 0xdc06]
jne 0x405b32
lea eax, [esp + 0x3222]
mov ecx, dword [ebx + 0x38]
push 0x800
push eax
add ecx, 0xb41a
push ecx
mov dword [esp + 0x30], eax
call fcn.0047e340
mov edx, dword [ebx + 0x38]
cmp byte [edx + 0x62d9], 0
je 0x405d8a
mov ecx, dword [ebx + 0x3c]
test ecx, ecx
je 0x405b6a
mov eax, dword [ecx]
mov edx, dword [eax]
push 1
call edx
push 0xc5e8
mov dword [ebx + 0x3c], 0
call fcn.004c0acd
add esp, 4
mov dword [esp + 0x2c], eax
mov byte [esp + 0x2dd80], 0xe
test eax, eax
je 0x405b97
mov ecx, eax
call fcn.00421330
jmp 0x405b99
xor eax, eax
mov dword [esp + 0x20], eax
mov byte [esp + 0x2dd80], 3
mov byte [eax + 0x62d9], 1
mov ecx, dword [ebx + 0x38]
mov edx, dword [ecx + 0x83b0]
mov dword [eax + 0x83b0], edx
mov dword [eax + 0x739c], 1
mov ecx, dword [ebx + 0x38]
movzx edx, byte [ecx + 0x6140]
mov byte [eax + 0x6140], dl
mov ecx, dword [ebx + 0x38]
movzx edx, byte [ecx + 0x614e]
mov byte [eax + 0x614e], dl
mov ecx, dword [ebx + 0x38]
movzx edx, byte [ecx + 0x6195]
mov byte [eax + 0x6195], dl
mov ecx, 0x4d67f4
sub eax, ecx
lea edx, [eax + 0xa3fa]
movzx eax, word [ecx]
mov word [edx + ecx], ax
add ecx, 2
test ax, ax
jne 0x405c02
mov esi, dword [ebx + 0x38]
mov edi, dword [esp + 0x20]
add esi, 0x5020
add edi, 0x5020
mov ecx, 0x40
rep movsd dword es:[edi], dword [esi]
mov byte [esp + 0x1d], al
mov eax, dword [esp + 0x24]
push eax
movsw word es:[edi], word [esi]
call fcn.0043c780
mov esi, dword [esp + 0x24]
test al, al
jne 0x405c80
mov edi, 0x2e
jmp 0x405c50
mov ecx, dword [ebx + 0x38]
cmp word [ecx + 0x639c], di
je 0x405c7b
push esi
call fcn.00490f40
test al, al
sete al
mov byte [esp + 0x1d], al
cmp al, 1
je 0x405c80
push esi
call fcn.0043c780
test al, al
je 0x405c50
jmp 0x405c80
mov byte [esp + 0x1d], 1
cmp byte [esp + 0x1d], 0
mov byte [esp + 0x1c], 0
jne 0x405d26
mov edx, dword [ebx + 0x38]
cmp byte [edx + 0xa3d9], 0
jne 0x405ca1
call fcn.0049eea0
push esi
mov esi, dword [esp + 0x24]
mov ecx, esi
call fcn.004206a0
push 0x4d67f0
lea ecx, [esi + 0xc41c]
call fcn.0047e700
mov eax, dword [0x51e7ac]
push 0x5740
mov dword [esp + 0x30], eax
call fcn.004c0acd
add esp, 4
mov dword [esp + 0x48], eax
mov byte [esp + 0x2dd80], 0xf
test eax, eax
je 0x405cef
push esi
mov ecx, eax
call fcn.00438cb0
mov edi, eax
jmp 0x405cf1
xor edi, edi
mov byte [esp + 0x2dd80], 3
push esi
mov ecx, edi
call fcn.0043a450
test edi, edi
je 0x405d15
mov ecx, edi
call fcn.00438d90
push edi
call fcn.004bfebc
add esp, 4
mov ecx, dword [esp + 0x2c]
cmp ecx, dword [0x51e7ac]
setne byte [esp + 0x1c]
jmp 0x405d2a
mov esi, dword [esp + 0x20]
mov ecx, esi
call fcn.004019d0
push esi
call fcn.004bfebc
add esp, 4
cmp byte [esp + 0x1c], 0
je 0x405d8a
mov byte [esp + 0x2dd80], 2
lea ecx, [esp + 0x3204]
call fcn.0040bce0
mov byte [esp + 0x2dd80], 1
lea ecx, [esp + 0xec44]
call fcn.0040bce0
mov byte [esp + 0x2dd80], 0x10
mov eax, dword [esp + 0x120]
test eax, eax
je 0x405d85
push eax
call fcn.004bff04
add esp, 4
jmp 0x40606d
mov edx, dword [ebp + 0x10]
cmp word [edx], 0x4d
je 0x405da3
mov eax, dword [ebx + 0x38]
cmp byte [eax + 0x6196], 0
je 0x406005
push 0x33f
call fcn.004744a0
push eax
call fcn.0049e9d0
push 1
push 0
lea ecx, [esp + 0xcc]
call fcn.00406d00
mov esi, dword [esp + 0x130]
or edi, 0xffffffff
lea ecx, [esp + 0xac]
dec esi
mov dword [esp + 0x48], edi
mov dword [esp + 0x2c], edi
call fcn.0043d280
mov byte [esp + 0x2dd80], 0x13
mov ecx, dword [ebx + 0x38]
cmp byte [ecx + 0x619a], 0
mov byte [esp + 0x1d], 0
je 0x405e3a
call fcn.00420fa0
test al, al
jne 0x405e3a
cmp dword [esp + 0x28], 0
jne 0x405e3a
mov eax, dword [ebx + 0x38]
cmp byte [eax + 0x614f], 0
jne 0x405e3a
cmp byte [eax + 0x6150], 0
jne 0x405e3a
mov edi, dword [esp + 0x130]
mov byte [esp + 0x1d], 1
xor esi, esi
mov dword [esp + 0x48], edi
mov dword [esp + 0x2c], 1
mov dword [esp + 0x28], esi
cmp esi, edi
je 0x405ff1
test byte [esp + 0x28], 0xf
jne 0x405e52
call fcn.0047eeb0
mov ecx, dword [esp + 0x28]
push ecx
lea ecx, [esp + 0xc8]
call fcn.004065e0
mov esi, eax
mov ecx, 0x14
lea edi, [esp + 0x54]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 0x80]
cmp eax, 2
je 0x405e85
cmp eax, 3
jne 0x405fdb
mov edx, dword [ebx + 0x38]
cmp byte [edx + 0x619a], 0
mov esi, dword [esp + 0x54]
jne 0x405ea9
mov eax, dword [esp + 0x64]
push eax
call fcn.0043bef0
test al, al
jne 0x405ea9
push esi
call fcn.0043c8a0
mov ecx, dword [ebp + 0x10]
cmp word [ecx + 2], 0x46
setne al
cmp byte [esp + 0xa0], 0
je 0x405f54
test al, al
je 0x405fdb
mov eax, dword [ebx + 0x38]
mov cl, byte [eax + 0x619a]
test cl, cl
je 0x405f0f
cmp byte [esp + 0x1d], 0
je 0x405f0f
push esi
call fcn.0043c780
test al, al
je 0x405fdb
push esi
lea ecx, [esp + 0xb0]
call fcn.0043d340
lea ecx, [esp + 0xac]
call fcn.0043c9f0
mov byte [esp + 0x1b], 1
jmp 0x405f9f
cmp byte [eax + 0x6199], 0
je 0x405f3c
push esi
call fcn.0043c270
test al, al
je 0x405f2a
push esi
call fcn.0043ca50
jmp 0x405f9b
push 0x91
mov byte [esp + 0x1f], 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x405f9f
test cl, cl
je 0x405f4c
lea ecx, [esp + 0xac]
call fcn.0043c9f0
push esi
call fcn.0043c110
jmp 0x405f9b
mov eax, dword [ebx + 0x38]
cmp byte [eax + 0x619a], 0
push esi
je 0x405f86
call fcn.0043c780
test al, al
je 0x405fdb
push esi
lea ecx, [esp + 0xb0]
call fcn.0043d340
push esi
push 0
call fcn.0049eac0
call fcn.0049f0e0
jmp 0x405fdb
cmp byte [eax + 0x6199], 0
je 0x405f96
call fcn.0043d430
jmp 0x405f9b
call fcn.0043c090
mov byte [esp + 0x1b], al
cmp byte [esp + 0x1b], 0
je 0x405fb5
push esi
push 0
call fcn.0049eac0
call fcn.0049f0e0
jmp 0x405fdb
push esi
push 0x202
call fcn.004744a0
push eax
lea edx, [esp + 0x322a]
push edx
call fcn.004abfe0
add esp, 0xc
mov ecx, 0x51e7a8
call fcn.004333c0
mov eax, dword [esp + 0x28]
add eax, dword [esp + 0x2c]
mov dword [esp + 0x28], eax
cmp eax, dword [esp + 0x48]
jne 0x405e46
mov byte [esp + 0x2dd80], 3
lea ecx, [esp + 0xac]
call fcn.0043d2e0
cmp byte [esp + 0xdbc1], 0
je 0x406029
mov ebx, dword [ebx + 0x38]
cmp dword [ebx + 0x613c], 0
je 0x406029
lea eax, [esp + 0xdc06]
push eax
push ebx
call fcn.0046ad80
mov byte [esp + 0x2dd80], 2
lea ecx, [esp + 0x3204]
call fcn.0040bce0
mov byte [esp + 0x2dd80], 1
lea ecx, [esp + 0xec44]
call fcn.0040bce0
mov byte [esp + 0x2dd80], 0x14
mov eax, dword [esp + 0x120]
test eax, eax
je 0x40606d
push eax
call fcn.004bff04
add esp, 4
mov byte [esp + 0x2dd80], 0
mov eax, dword [esp + 0xc4]
test eax, eax
je 0x406089
push eax
call fcn.004bff04
add esp, 4
mov dword [esp + 0x2dd80], 0xffffffff
lea ecx, [esp + 0x1a694]
call fcn.004770c0
mov ecx, dword [esp + 0x2dd78]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x2dd30]
xor ecx, esp
call fcn.004bfc52
mov esp, ebp
pop ebp
ret 0xc