Function at 0x40f140
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x55ffff
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1a8
push ebx
push ebp
mov ebp, ecx
push esi
push edi
lea ecx, [esp + 0x7c]
mov dword [esp + 0x78], ebp
call fcn.00534d70
xor ebx, ebx
lea ecx, [esp + 0x3c]
mov dword [esp + 0x1c0], ebx
call fcn.00532e70
mov al, byte [esp + 0x67]
push ebx
lea ecx, [esp + 0x28]
mov byte [esp + 0x1c4], 1
mov byte [esp + 0x28], al
call fcn.00404bb0
push 6
push 0x59cd54
lea ecx, [esp + 0x3c]
mov byte [esp + 0x1c8], 2
call fcn.005318a0
mov ecx, dword [0x59cdf8]
mov dx, word [0x59cdfc]
mov al, byte [0x59cdfe]
mov dword [esp + 0x98], ecx
push 6
push 0x59c0fc
lea ecx, [esp + 0x18]
mov byte [esp + 0x1c8], 3
mov word [esp + 0xa4], dx
mov byte [esp + 0xa6], al
call fcn.005318a0
mov ecx, 5
mov esi, 0x59cde4
lea edi, [esp + 0x50]
push ebx
rep movsd dword es:[edi], dword [esi]
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x59b910
mov byte [esp + 0x1d4], 4
call fcn.005318a0
push ecx
mov byte [esp + 0x1d0], 5
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x59c0ec
call fcn.005318a0
mov ecx, 0x5c6628
mov byte [esp + 0x1d0], 4
call fcn.00533b90
mov ecx, ebp
call fcn.0052cfd0
lea edx, [esp + 0x154]
push 2
lea eax, [esp + 0x9c]
push edx
lea ecx, [ebp + 0x78]
push eax
call fcn.0043cb50
cmp ax, bx
jne 0x40f305
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x59b920
call fcn.005318a0
push ecx
mov byte [esp + 0x1d0], 6
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x59b918
call fcn.005318a0
mov ecx, 0x5c6628
mov byte [esp + 0x1d0], 4
call fcn.00533b90
lea ecx, [esp + 0x10]
mov byte [esp + 0x1c0], 3
call fcn.00531940
lea ecx, [esp + 0x34]
mov byte [esp + 0x1c0], 2
call fcn.00531940
push 1
lea ecx, [esp + 0x28]
mov byte [esp + 0x1c4], 1
call fcn.00404bb0
push 1
lea ecx, [esp + 0x44]
mov byte [esp + 0x1c4], bl
call fcn.00404bb0
jmp 0x410917
mov ecx, dword [esp + 0x158]
mov edx, dword [esp + 0x15c]
mov eax, dword [esp + 0x160]
mov dword [esp + 0x54], ecx
mov cx, word [esp + 0x164]
mov dword [esp + 0x58], edx
mov edx, dword [esp + 0x1cc]
mov word [esp + 0x60], cx
push edx
push 5
lea ecx, [esp + 0x3c]
mov dword [esp + 0x64], eax
call fcn.00531ad0
mov esi, dword [esp + 0x1c8]
and esi, 0xff
cmp esi, 0xb
ja case.0x40f4fe.1
jmp dword [esi*4 + 0x410aa0]
cmp esi, 8
ja case.0x40f368.1
jmp dword [esi*4 + 0x410ad0]
mov al, byte [esp + 0x15f]
shr al, 4
and al, 1
movzx di, al
jmp 0x40f3c6
mov cl, byte [esp + 0x15f]
and cl, 1
movzx di, cl
jmp 0x40f3c6
mov dl, byte [esp + 0x15f]
shr dl, 7
movzx di, dl
jmp 0x40f3c6
mov al, byte [esp + 0x162]
and al, 1
movzx di, al
jmp 0x40f3c6
mov cl, byte [esp + 0x162]
shr cl, 1
and cl, 1
movzx di, cl
jmp 0x40f3c6
mov edi, dword [esp + 0x18]
push ecx
lea edx, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.00531810
mov ecx, dword [0x5c663c]
call fcn.00534ea0
push 0x19
push 5
lea ecx, [esp + 0x18]
call fcn.00531ad0
sub esp, 0x10
lea eax, [esp + 0x20]
mov ebp, esp
mov dword [esp + 0x28], esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.00531810
push ebp
call fcn.005388b0
mov ecx, dword [0x5c663c]
add esp, 8
call fcn.00535350
push 0x18
push 5
lea ecx, [esp + 0x18]
call fcn.00531ad0
sub esp, 0x10
lea edx, [esp + 0x20]
mov ebp, esp
mov dword [esp + 0x28], esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.00531810
push ebp
call fcn.005388b0
mov ecx, dword [0x5c663c]
add esp, 8
call fcn.00535350
push 1
lea ecx, [esp + 0x80]
call fcn.00535950
push 2
lea ecx, [esp + 0x80]
call fcn.005359b0
push 1
push edi
lea ecx, [esp + 0x84]
call fcn.00535aa0
lea eax, [esp + 0x1e]
push 1
lea ecx, [esp + 0x80]
push eax
push ecx
mov ecx, dword [0x5c663c]
call fcn.00535620
and eax, 0xff
mov dword [esp + 0x14], eax
jne 0x40f4f5
lea ecx, [esp + 0x10]
mov byte [esp + 0x1c0], 3
call fcn.00531940
lea ecx, [esp + 0x34]
mov byte [esp + 0x1c0], 2
call fcn.00531940
push 1
lea ecx, [esp + 0x28]
mov byte [esp + 0x1c4], 1
call fcn.00404bb0
push 1
lea ecx, [esp + 0x44]
mov byte [esp + 0x1c4], 0
call fcn.00404bb0
jmp 0x410a6b
cmp esi, 8
ja case.0x40f4fe.1
jmp dword [esi*4 + 0x410af4]
mov cl, byte [esp + 0x5b]
mov byte [esp + 0x50], 0x10
and cl, 0xef
cmp word [esp + 0x1e], bx
mov byte [esp + 0x52], 0x62
mov byte [esp + 0x5b], cl
je case.0x40f4fe.1
mov al, cl
or al, 0x10
mov byte [esp + 0x5b], al
jmp case.0x40f4fe.1
mov cl, byte [esp + 0x5b]
mov byte [esp + 0x50], 0x10
and cl, 0xfe
cmp word [esp + 0x1e], bx
mov byte [esp + 0x52], 0x62
mov byte [esp + 0x5b], cl
je case.0x40f4fe.1
mov al, cl
or al, 1
mov byte [esp + 0x5b], al
jmp case.0x40f4fe.1
mov cl, byte [esp + 0x5b]
mov byte [esp + 0x50], 0x12
and cl, 0x7f
cmp word [esp + 0x1e], bx
mov byte [esp + 0x52], 0x64
mov byte [esp + 0x5b], cl
je case.0x40f4fe.1
mov al, cl
or al, 0x80
mov byte [esp + 0x5b], al
jmp case.0x40f4fe.1
mov cl, byte [esp + 0x5e]
mov byte [esp + 0x50], 0x12
and cl, 0xfe
cmp word [esp + 0x1e], bx
mov byte [esp + 0x52], 0x64
mov byte [esp + 0x5e], cl
je case.0x40f4fe.1
mov al, cl
or al, 1
mov byte [esp + 0x5e], al
jmp case.0x40f4fe.1
mov cl, byte [esp + 0x5e]
mov byte [esp + 0x50], 0x12
and cl, 0xfd
cmp word [esp + 0x1e], bx
mov byte [esp + 0x52], 0x64
mov byte [esp + 0x5e], cl
je case.0x40f4fe.1
mov al, cl
or al, 2
mov byte [esp + 0x5e], al
jmp case.0x40f4fe.1
mov dl, byte [esp + 0x15f]
push ecx
shr dl, 5
lea eax, [esp + 0x38]
and dl, 1
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
movzx si, dl
call fcn.00531810
mov ecx, dword [0x5c663c]
call fcn.00534ea0
push 2
push 5
lea ecx, [esp + 0x18]
call fcn.00531ad0
sub esp, 0x10
lea edx, [esp + 0x20]
mov edi, esp
mov dword [esp + 0x28], esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.00531810
push edi
call fcn.005388b0
mov ecx, dword [0x5c663c]
add esp, 8
call fcn.00535350
push 1
push 5
lea ecx, [esp + 0x18]
call fcn.00531ad0
sub esp, 0x10
lea eax, [esp + 0x20]
mov edi, esp
mov dword [esp + 0x28], esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.00531810
push edi
call fcn.005388b0
mov ecx, dword [0x5c663c]
add esp, 8
call fcn.00535350
push 1
lea ecx, [esp + 0x80]
call fcn.00535950
push 2
lea ecx, [esp + 0x80]
call fcn.005359b0
push 1
push esi
lea ecx, [esp + 0x84]
call fcn.00535aa0
lea ecx, [esp + 0x1e]
push 1
lea edx, [esp + 0x80]
push ecx
mov ecx, dword [0x5c663c]
push edx
call fcn.00535620
and eax, 0xff
mov dword [esp + 0x14], eax
jne 0x40f726
lea ecx, [esp + 0x10]
mov byte [esp + 0x1c0], 3
call fcn.00531940
lea ecx, [esp + 0x34]
mov byte [esp + 0x1c0], 2
call fcn.00531940
push 1
lea ecx, [esp + 0x28]
mov byte [esp + 0x1c4], 1
call fcn.00404bb0
push 1
lea ecx, [esp + 0x44]
mov byte [esp + 0x1c4], 0
call fcn.00404bb0
jmp 0x410a6b
mov cl, byte [esp + 0x5b]
mov byte [esp + 0x50], 0x10
and cl, 0xdf
cmp word [esp + 0x1e], bx
mov byte [esp + 0x52], 0x62
mov byte [esp + 0x5b], cl
je case.0x40f4fe.1
mov al, cl
or al, 0x20
mov byte [esp + 0x5b], al
jmp case.0x40f4fe.1
mov al, byte [esp + 0x15f]
lea ecx, [esp + 0x68]
shr eax, 1
and eax, 7
push eax
push 0x59ba5c
push ecx
call fcn.00556aa4
lea edi, [esp + 0x74]
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
dec ecx
push 1
mov ebx, ecx
lea ecx, [esp + 0x28]
push ebx
call fcn.00404d70
test al, al
je 0x40f7b6
mov edi, dword [esp + 0x28]
mov ecx, ebx
mov edx, ecx
lea esi, [esp + 0x68]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [esp + 0x28]
mov dword [esp + 0x2c], ebx
mov byte [ebx + eax], 0
mov cl, byte [esp + 0x67]
sub esp, 0x10
mov ebp, esp
xor esi, esi
mov dword [esp + 0x28], esp
push esi
mov byte [ebp], cl
mov ecx, ebp
call fcn.00404bb0
mov edi, 0x59cde0
or ecx, 0xffffffff
xor eax, eax
push 1
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov ebx, ecx
mov ecx, ebp
push ebx
call fcn.00404d70
test al, al
je 0x40f814
mov edi, dword [ebp + 4]
mov ecx, ebx
mov edx, ecx
mov esi, 0x59cde0
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp + 4]
mov dword [ebp + 8], ebx
add ebx, eax
xor esi, esi
mov byte [ebx], 0
sub esp, 0x10
lea eax, [esp + 0x87]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
push 0x59c32c
mov byte [esp + 0x1e8], 7
call fcn.00404840
sub esp, 0x10
lea edx, [esp + 0xa6]
mov ecx, esp
mov dword [esp + 0xb8], esp
push edx
push 0x59cddc
mov byte [esp + 0x1f8], 8
call fcn.00404840
sub esp, 0x10
lea eax, [esp + 0x64]
mov ecx, esp
mov dword [esp + 0xcc], esp
push eax
mov byte [esp + 0x204], 9
call fcn.00404720
sub esp, 0x10
mov byte [esp + 0x210], 0xa
mov edi, esp
mov dword [esp + 0x88], esp
push ecx
mov ecx, esp
mov dword [esp + 0x74], esp
push 6
push 0x59cdd4
call fcn.005318a0
push edi
call fcn.005388b0
sub esp, 8
mov byte [esp + 0x220], 0xb
mov edi, esp
mov dword [esp + 0x80], esp
push ecx
mov ecx, esp
mov dword [esp + 0x84], esp
push 6
push 0x59cdcc
call fcn.005318a0
push edi
call fcn.005388b0
add esp, 8
lea ecx, [esp + 0x150]
mov byte [esp + 0x220], 4
push ecx
mov ecx, 0x5c6628
call fcn.00533da0
mov ecx, dword [0x57217c]
mov dx, word [eax]
push ecx
add eax, 4
push esi
push eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0x1cc], 0xc
mov word [esp + 0x48], dx
call fcn.004049b0
mov eax, dword [esp + 0xf8]
mov byte [esp + 0x1c0], 4
cmp eax, esi
je 0x40f94a
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x40f941
cmp al, 0xff
je 0x40f941
dec al
mov byte [ecx], al
jmp 0x40f94a
push ecx
call fcn.00556360
add esp, 4
lea ecx, [esp + 0x3c]
mov dword [esp + 0xf8], esi
mov dword [esp + 0xfc], esi
mov dword [esp + 0x100], esi
call fcn.005330c0
cmp ax, 2
je 0x40fa53
lea edx, [esp + 0xd0]
lea ecx, [esp + 0x3c]
push edx
call fcn.005330d0
mov edi, dword [eax + 4]
cmp edi, esi
jne 0x40f98f
mov edi, 0x572184
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x68]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [esp + 0xd4]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
xor esi, esi
cmp eax, esi
je 0x40f9da
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x40f9d1
cmp al, 0xff
je 0x40f9d1
dec al
mov byte [ecx], al
jmp 0x40f9da
push ecx
call fcn.00556360
add esp, 4
lea ecx, [esp + 0x68]
mov dword [esp + 0xd4], esi
push ecx
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0xdc], esi
mov dword [esp + 0xe0], esi
call fcn.004e6860
cmp eax, 1
jb 0x40fa0b
cmp eax, 7
jbe 0x40fadc
push esi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov byte [esp + 0x1d0], 0xd
mov ecx, esp
mov dword [esp + 0x48], esp
push 6
push 0x59cdc4
call fcn.005318a0
mov ecx, 0x5c6628
mov byte [esp + 0x1d0], 4
call fcn.00533b90
jmp case.0x40f35c.4
lea ecx, [esp + 0x10]
mov byte [esp + 0x1c0], 3
call fcn.00531940
lea ecx, [esp + 0x34]
mov byte [esp + 0x1c0], 2
call fcn.00531940
mov eax, dword [esp + 0x28]
cmp eax, esi
je 0x40fa9a
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x40fa91
cmp al, 0xff
je 0x40fa91
dec al
mov byte [ecx], al
jmp 0x40fa9a
push ecx
call fcn.00556360
add esp, 4
mov eax, dword [esp + 0x44]
mov dword [esp + 0x28], esi
cmp eax, esi
mov dword [esp + 0x2c], esi
mov dword [esp + 0x30], esi
je 0x40facb
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x40fac2
cmp al, 0xff
je 0x40fac2
dec al
mov byte [ecx], al
jmp 0x40facb
push ecx
call fcn.00556360
add esp, 4
mov dword [esp + 0x44], esi
mov dword [esp + 0x48], esi
mov dword [esp + 0x4c], esi
jmp 0x410917
mov dl, byte [esp + 0x5b]
and al, 0x7f
shl al, 1
and dl, 0xf1
mov byte [esp + 0x50], 0x12
add al, dl
mov byte [esp + 0x52], 0x64
mov byte [esp + 0x5b], al
jmp 0x410844
mov eax, dword [esp + 0x163]
lea ecx, [esp + 0x68]
and eax, 0xff
push eax
push 0x59ba5c
push ecx
call fcn.00556aa4
lea edi, [esp + 0x74]
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
dec ecx
push 1
mov ebp, ecx
lea ecx, [esp + 0x28]
push ebp
call fcn.00404d70
test al, al
je 0x40fb5f
mov edi, dword [esp + 0x28]
mov ecx, ebp
mov edx, ecx
lea esi, [esp + 0x68]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [esp + 0x28]
mov dword [esp + 0x2c], ebp
mov byte [eax + ebp], 0
mov cl, byte [esp + 0x76]
sub esp, 0x10
mov edx, esp
mov edi, 0x59cdc0
xor eax, eax
mov dword [esp + 0x30], esp
mov byte [edx], cl
or ecx, 0xffffffff
mov dword [edx + 4], ebx
mov dword [edx + 8], ebx
mov dword [edx + 0xc], ebx
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x59cdc0
mov ecx, edx
call fcn.0040a330
sub esp, 0x10
lea edx, [esp + 0xb6]
mov ecx, esp
mov dword [esp + 0x58], esp
push edx
push 0x59c330
mov byte [esp + 0x1e8], 0xe
call fcn.00404840
sub esp, 0x10
lea eax, [esp + 0xa5]
mov ecx, esp
mov dword [esp + 0xbc], esp
push eax
push 0x59cddc
mov byte [esp + 0x1f8], 0xf
call fcn.00404840
sub esp, 0x10
lea edx, [esp + 0x64]
mov ecx, esp
mov dword [esp + 0xc8], esp
push edx
mov byte [esp + 0x204], 0x10
call fcn.00404720
sub esp, 0x10
mov byte [esp + 0x210], 0x11
mov esi, esp
mov dword [esp + 0x68], esp
push ecx
mov ecx, esp
mov dword [esp + 0x68], esp
push 6
push 0x59cdb8
call fcn.005318a0
push esi
call fcn.005388b0
sub esp, 8
mov byte [esp + 0x220], 0x12
mov esi, esp
mov dword [esp + 0x74], esp
push ecx
mov ecx, esp
mov dword [esp + 0x78], esp
push 6
push 0x59cdb0
call fcn.005318a0
push esi
call fcn.005388b0
add esp, 8
lea eax, [esp + 0x178]
mov ecx, 0x5c6628
mov byte [esp + 0x220], 4
push eax
call fcn.00533da0
mov cx, word [eax]
mov edx, dword [0x57217c]
mov byte [esp + 0x1c0], 0x13
mov word [esp + 0x3c], cx
push edx
add eax, 4
push ebx
push eax
lea ecx, [esp + 0x4c]
call fcn.004049b0
mov eax, dword [esp + 0x120]
mov byte [esp + 0x1c0], 4
cmp eax, ebx
je 0x40fcbf
mov cl, byte [eax - 1]
dec eax
test cl, cl
je 0x40fcb6
cmp cl, 0xff
je 0x40fcb6
dec cl
mov byte [eax], cl
jmp 0x40fcbf
push eax
call fcn.00556360
add esp, 4
lea ecx, [esp + 0x3c]
mov dword [esp + 0x120], ebx
mov dword [esp + 0x124], ebx
mov dword [esp + 0x128], ebx
call fcn.005330c0
cmp ax, 2
je 0x410893
lea eax, [esp + 0xc0]
lea ecx, [esp + 0x3c]
push eax
call fcn.005330d0
mov edi, dword [eax + 4]
cmp edi, ebx
jne 0x40fd04
mov edi, 0x572184
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x68]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [esp + 0xc4]
and ecx, 3
cmp eax, ebx
rep movsb byte es:[edi], byte [esi]
je 0x40fd4d
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x40fd44
cmp al, 0xff
je 0x40fd44
dec al
mov byte [ecx], al
jmp 0x40fd4d
push ecx
call fcn.00556360
add esp, 4
lea ecx, [esp + 0x68]
mov dword [esp + 0xc4], ebx
push ecx
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0xcc], ebx
mov dword [esp + 0xd0], ebx
call fcn.004e6860
cmp eax, 2
jb 0x40fd7c
cmp eax, 0xff
jbe 0x40fdc4
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov byte [esp + 0x1d0], 0x14
mov ecx, esp
mov dword [esp + 0x48], esp
push 6
push 0x59cdc4
call fcn.005318a0
mov ecx, 0x5c6628
mov byte [esp + 0x1d0], 4
call fcn.00533b90
jmp case.0x40f35c.5
mov byte [esp + 0x50], 0x12
mov byte [esp + 0x52], 0x64
mov byte [esp + 0x5f], al
jmp case.0x40f4fe.1
mov edx, dword [esp + 0x15a]
mov eax, dword [esp + 0x159]
mov ecx, dword [esp + 0x158]
and edx, 0xff
shl edx, 8
and eax, 0xff
and ecx, 0xff
add edx, eax
shl edx, 8
add edx, ecx
push edx
lea edx, [esp + 0x6c]
push 0x59bb6c
push edx
call fcn.00556aa4
lea edi, [esp + 0x74]
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
dec ecx
push 1
mov ebp, ecx
lea ecx, [esp + 0x28]
push ebp
call fcn.00404d70
test al, al
je 0x40fe5e
mov edi, dword [esp + 0x28]
mov ecx, ebp
mov eax, ecx
lea esi, [esp + 0x68]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x2c], ebp
mov byte [ecx + ebp], 0
mov al, byte [esp + 0x75]
sub esp, 0x10
mov edx, esp
mov edi, str.999999
or ecx, 0xffffffff
mov dword [esp + 0x30], esp
mov byte [edx], al
xor eax, eax
mov dword [edx + 4], ebx
mov dword [edx + 8], ebx
mov dword [edx + 0xc], ebx
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.999999
mov ecx, edx
call fcn.0040a330
sub esp, 0x10
lea edx, [esp + 0xb3]
mov ecx, esp
mov dword [esp + 0x58], esp
push edx
push 0x59cda4
mov byte [esp + 0x1e8], 0x15
call fcn.00404840
sub esp, 0x10
lea eax, [esp + 0xa4]
mov ecx, esp
mov dword [esp + 0xbc], esp
push eax
push 0x59cddc
mov byte [esp + 0x1f8], 0x16
call fcn.00404840
sub esp, 0x10
lea edx, [esp + 0x64]
mov ecx, esp
mov dword [esp + 0xc8], esp
push edx
mov byte [esp + 0x204], 0x17
call fcn.00404720
sub esp, 0x10
mov byte [esp + 0x210], 0x18
mov esi, esp
mov dword [esp + 0x68], esp
push ecx
mov ecx, esp
mov dword [esp + 0x68], esp
push 6
push 0x59cd9c
call fcn.005318a0
push esi
call fcn.005388b0
sub esp, 8
mov byte [esp + 0x220], 0x19
mov esi, esp
mov dword [esp + 0x74], esp
push ecx
mov ecx, esp
mov dword [esp + 0x78], esp
push 6
push 0x59cd94
call fcn.005318a0
push esi
call fcn.005388b0
add esp, 8
lea eax, [esp + 0x1a0]
mov ecx, 0x5c6628
mov byte [esp + 0x220], 4
push eax
call fcn.00533da0
mov cx, word [eax]
mov edx, dword [0x57217c]
mov byte [esp + 0x1c0], 0x1a
mov word [esp + 0x3c], cx
push edx
add eax, 4
push ebx
push eax
lea ecx, [esp + 0x4c]
call fcn.004049b0
mov eax, dword [esp + 0x148]
mov byte [esp + 0x1c0], 4
cmp eax, ebx
je 0x40ffbe
mov cl, byte [eax - 1]
dec eax
test cl, cl
je 0x40ffb5
cmp cl, 0xff
je 0x40ffb5
dec cl
mov byte [eax], cl
jmp 0x40ffbe
push eax
call fcn.00556360
add esp, 4
lea ecx, [esp + 0x3c]
mov dword [esp + 0x148], ebx
mov dword [esp + 0x14c], ebx
mov dword [esp + 0x150], ebx
call fcn.005330c0
cmp ax, 2
je 0x410893
lea eax, [esp + 0xe0]
lea ecx, [esp + 0x3c]
push eax
call fcn.005330d0
mov edi, dword [eax + 4]
cmp edi, ebx
jne 0x410003
mov edi, 0x572184
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x68]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [esp + 0xe4]
and ecx, 3
cmp eax, ebx
rep movsb byte es:[edi], byte [esi]
je 0x41004c
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x410043
cmp al, 0xff
je 0x410043
dec al
mov byte [ecx], al
jmp 0x41004c
push ecx
call fcn.00556360
add esp, 4
lea ecx, [esp + 0x68]
mov dword [esp + 0xe4], ebx
push ecx
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0xec], ebx
mov dword [esp + 0xf0], ebx
call fcn.004e6860
cmp eax, 0xf423f
jbe 0x4100be
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov byte [esp + 0x1d0], 0x1b
mov ecx, esp
mov dword [esp + 0x48], esp
push 6
push 0x59cdc4
call fcn.005318a0
mov ecx, 0x5c6628
mov byte [esp + 0x1d0], 4
call fcn.00533b90
jmp case.0x40f35c.9
mov edx, eax
mov byte [esp + 0x54], al
shr edx, 8
shr eax, 0x10
mov byte [esp + 0x50], 0x10
mov byte [esp + 0x52], 0x62
mov byte [esp + 0x55], dl
mov byte [esp + 0x56], al
jmp case.0x40f4fe.1
mov eax, dword [esp + 0x15e]
mov ecx, dword [esp + 0x15d]
and eax, 0xff
and ecx, 0xff
shl eax, 8
add eax, ecx
lea edx, [esp + 0x68]
push eax
push 0x59ba5c
push edx
call fcn.00556aa4
lea edi, [esp + 0x74]
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
dec ecx
push 1
mov ebp, ecx
lea ecx, [esp + 0x28]
push ebp
call fcn.00404d70
test al, al
je 0x410156
mov edi, dword [esp + 0x28]
mov ecx, ebp
mov eax, ecx
lea esi, [esp + 0x68]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x2c], ebp
mov byte [ecx + ebp], 0
mov dl, byte [esp + 0x74]
sub esp, 0x10
mov ebp, esp
mov edi, str.9999
or ecx, 0xffffffff
xor eax, eax
mov byte [ebp], dl
mov dword [ebp + 4], ebx
mov dword [ebp + 8], ebx
mov dword [ebp + 0xc], ebx
repne scasb al, byte es:[edi]
not ecx
mov dword [esp + 0x30], esp
dec ecx
push 1
mov dword [esp + 0x28], ecx
push ecx
mov ecx, ebp
call fcn.00404d70
test al, al
je 0x4101b4
mov eax, dword [esp + 0x24]
mov edi, dword [ebp + 4]
mov ecx, eax
mov esi, str.9999
mov edx, ecx
push eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, ebp
call fcn.00404d50
sub esp, 0x10
lea eax, [esp + 0xb5]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
push 0x59cda4
mov byte [esp + 0x1e8], 0x1c
call fcn.00404840
sub esp, 0x10
lea edx, [esp + 0xa7]
mov ecx, esp
mov dword [esp + 0xbc], esp
push edx
push 0x59cddc
mov byte [esp + 0x1f8], 0x1d
call fcn.00404840
sub esp, 0x10
lea eax, [esp + 0x64]
mov ecx, esp
mov dword [esp + 0xc8], esp
push eax
mov byte [esp + 0x204], 0x1e
call fcn.00404720
sub esp, 0x10
mov byte [esp + 0x210], 0x1f
mov esi, esp
mov dword [esp + 0x68], esp
push ecx
mov ecx, esp
mov dword [esp + 0x68], esp
push 6
push 0x59cd84
call fcn.005318a0
push esi
call fcn.005388b0
sub esp, 8
mov byte [esp + 0x220], 0x20
mov esi, esp
mov dword [esp + 0x74], esp
push ecx
mov ecx, esp
mov dword [esp + 0x78], esp
push 6
push 0x59cd7c
call fcn.005318a0
push esi
call fcn.005388b0
add esp, 8
lea ecx, [esp + 0x164]
mov byte [esp + 0x220], 4
push ecx
mov ecx, 0x5c6628
call fcn.00533da0
mov ecx, dword [0x57217c]
mov dx, word [eax]
push ecx
add eax, 4
push ebx
push eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0x1cc], 0x21
mov word [esp + 0x48], dx
call fcn.004049b0
mov eax, dword [esp + 0x10c]
mov byte [esp + 0x1c0], 4
cmp eax, ebx
je 0x4102e1
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x4102d8
cmp al, 0xff
je 0x4102d8
dec al
mov byte [ecx], al
jmp 0x4102e1
push ecx
call fcn.00556360
add esp, 4
lea ecx, [esp + 0x3c]
mov dword [esp + 0x10c], ebx
mov dword [esp + 0x110], ebx
mov dword [esp + 0x114], ebx
call fcn.005330c0
cmp ax, 2
je 0x410893
lea edx, [esp + 0xa0]
lea ecx, [esp + 0x3c]
push edx
call fcn.005330d0
mov edi, dword [eax + 4]
cmp edi, ebx
jne 0x410326
mov edi, 0x572184
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x68]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [esp + 0xa4]
and ecx, 3
cmp eax, ebx
rep movsb byte es:[edi], byte [esi]
je 0x41036f
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x410366
cmp al, 0xff
je 0x410366
dec al
mov byte [ecx], al
jmp 0x41036f
push ecx
call fcn.00556360
add esp, 4
lea ecx, [esp + 0x68]
mov dword [esp + 0xa4], ebx
push ecx
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0xac], ebx
mov dword [esp + 0xb0], ebx
call fcn.004e6860
cmp eax, 0x270f
jbe 0x4103e1
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov byte [esp + 0x1d0], 0x22
mov ecx, esp
mov dword [esp + 0x48], esp
push 6
push 0x59cdc4
call fcn.005318a0
mov ecx, 0x5c6628
mov byte [esp + 0x1d0], 4
call fcn.00533b90
jmp case.0x40f35c.10
mov byte [esp + 0x59], al
mov byte [esp + 0x50], 0x10
shr eax, 8
mov byte [esp + 0x52], 0x62
mov byte [esp + 0x5a], al
jmp case.0x40f4fe.1
mov edx, dword [esp + 0x15c]
mov eax, dword [esp + 0x15b]
and edx, 0xff
and eax, 0xff
shl edx, 8
add edx, eax
lea ecx, [esp + 0x68]
push edx
push 0x59ba5c
push ecx
call fcn.00556aa4
lea edi, [esp + 0x74]
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
dec ecx
push 1
mov ebx, ecx
lea ecx, [esp + 0x28]
push ebx
call fcn.00404d70
test al, al
je 0x410470
mov edi, dword [esp + 0x28]
mov ecx, ebx
mov edx, ecx
lea esi, [esp + 0x68]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [esp + 0x28]
mov dword [esp + 0x2c], ebx
mov byte [eax + ebx], 0
mov cl, byte [esp + 0x77]
sub esp, 0x10
mov ebp, esp
xor esi, esi
mov edi, str.9999
xor eax, eax
mov byte [ebp], cl
or ecx, 0xffffffff
mov dword [ebp + 4], esi
mov dword [ebp + 8], esi
mov dword [ebp + 0xc], esi
mov dword [esp + 0x30], esp
repne scasb al, byte es:[edi]
not ecx
dec ecx
push 1
mov ebx, ecx
mov ecx, ebp
push ebx
call fcn.00404d70
test al, al
je 0x4104cf
mov edi, dword [ebp + 4]
mov ecx, ebx
mov edx, ecx
mov esi, str.9999
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp + 4]
mov dword [ebp + 8], ebx
add ebx, eax
xor esi, esi
mov byte [ebx], 0
sub esp, 0x10
lea eax, [esp + 0xb7]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
push 0x59cda4
mov byte [esp + 0x1e8], 0x23
call fcn.00404840
sub esp, 0x10
lea edx, [esp + 0xc4]
mov ecx, esp
mov dword [esp + 0xbc], esp
push edx
push 0x59cddc
mov byte [esp + 0x1f8], 0x24
call fcn.00404840
sub esp, 0x10
lea eax, [esp + 0x64]
mov ecx, esp
mov dword [esp + 0xc8], esp
push eax
mov byte [esp + 0x204], 0x25
call fcn.00404720
sub esp, 0x10
mov byte [esp + 0x210], 0x26
mov edi, esp
mov dword [esp + 0x68], esp
push ecx
mov ecx, esp
mov dword [esp + 0x68], esp
push 6
push 0x59cd74
call fcn.005318a0
push edi
call fcn.005388b0
sub esp, 8
mov byte [esp + 0x220], 0x27
mov edi, esp
mov dword [esp + 0x74], esp
push ecx
mov ecx, esp
mov dword [esp + 0x78], esp
push 6
push 0x59cd6c
call fcn.005318a0
push edi
call fcn.005388b0
add esp, 8
lea ecx, [esp + 0x18c]
mov byte [esp + 0x220], 4
push ecx
mov ecx, 0x5c6628
call fcn.00533da0
mov dx, word [eax]
mov ecx, dword [0x57217c]
lea edi, [eax + 4]
mov word [esp + 0x3c], dx
mov byte [esp + 0x1c0], 0x28
mov eax, dword [edi + 8]
mov ebp, eax
cmp ecx, ebp
jae 0x4105cb
mov ebp, ecx
lea edx, [esp + 0x40]
cmp edx, edi
jne 0x4105ee
push ecx
push ebp
lea ecx, [esp + 0x48]
call fcn.00404c30
push esi
push esi
lea ecx, [esp + 0x48]
call fcn.00404c30
jmp 0x41067b
cmp ebp, esi
jbe 0x41063b
cmp ebp, eax
jne 0x41063b
mov eax, dword [edi + 4]
cmp eax, esi
jne 0x410602
mov eax, 0x572184
cmp byte [eax - 1], 0xfe
jae 0x41063b
push 1
lea ecx, [esp + 0x44]
call fcn.00404bb0
mov eax, dword [edi + 4]
cmp eax, esi
jne 0x41061f
mov eax, 0x572184
mov dword [esp + 0x44], eax
mov ecx, dword [edi + 8]
mov dword [esp + 0x48], ecx
mov edi, dword [edi + 0xc]
mov dword [esp + 0x4c], edi
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x41067b
push 1
push ebp
lea ecx, [esp + 0x48]
call fcn.00404d70
test al, al
je 0x41067b
mov edi, dword [edi + 4]
cmp edi, esi
mov esi, 0x572184
je 0x410659
mov esi, edi
mov edi, dword [esp + 0x44]
mov ecx, ebp
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x48], ebp
xor esi, esi
mov byte [ecx + ebp], 0
mov eax, dword [esp + 0x134]
mov byte [esp + 0x1c0], 4
cmp eax, esi
je 0x4106ab
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x4106a2
cmp al, 0xff
je 0x4106a2
dec al
mov byte [ecx], al
jmp 0x4106ab
push ecx
call fcn.00556360
add esp, 4
lea ecx, [esp + 0x3c]
mov dword [esp + 0x134], esi
mov dword [esp + 0x138], esi
mov dword [esp + 0x13c], esi
call fcn.005330c0
cmp ax, 2
je 0x4107b1
lea edx, [esp + 0xb0]
lea ecx, [esp + 0x3c]
push edx
call fcn.005330d0
mov edi, dword [eax + 4]
cmp edi, esi
jne 0x4106f0
mov edi, 0x572184
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x68]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [esp + 0xb4]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
xor esi, esi
cmp eax, esi
je 0x41073b
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x410732
cmp al, 0xff
je 0x410732
dec al
mov byte [ecx], al
jmp 0x41073b
push ecx
call fcn.00556360
add esp, 4
lea ecx, [esp + 0x68]
mov dword [esp + 0xb4], esi
push ecx
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0xbc], esi
mov dword [esp + 0xc0], esi
call fcn.004e6860
cmp eax, 0x270f
jbe 0x41082f
push esi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov byte [esp + 0x1d0], 0x29
mov ecx, esp
mov dword [esp + 0x48], esp
push 6
push 0x59cdc4
call fcn.005318a0
mov ecx, 0x5c6628
mov byte [esp + 0x1d0], 4
call fcn.00533b90
jmp case.0x40f35c.11
lea ecx, [esp + 0x10]
mov byte [esp + 0x1c0], 3
call fcn.00531940
lea ecx, [esp + 0x34]
mov byte [esp + 0x1c0], 2
call fcn.00531940
mov eax, dword [esp + 0x28]
cmp eax, esi
je 0x4107f8
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x4107ef
cmp al, 0xff
je 0x4107ef
dec al
mov byte [ecx], al
jmp 0x4107f8
push ecx
call fcn.00556360
add esp, 4
mov eax, dword [esp + 0x44]
mov dword [esp + 0x28], esi
cmp eax, esi
mov dword [esp + 0x2c], esi
mov dword [esp + 0x30], esi
je 0x40facb
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x40fac2
cmp al, 0xff
je 0x40fac2
dec al
mov byte [ecx], al
jmp 0x40facb
mov byte [esp + 0x57], al
mov byte [esp + 0x50], 0x10
shr eax, 8
mov byte [esp + 0x52], 0x62
mov byte [esp + 0x58], al
xor ebx, ebx
push ebx
push 4
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov byte [esp + 0x1d0], 0x2a
mov ecx, esp
mov dword [esp + 0x48], esp
push 6
push 0x59cd64
call fcn.005318a0
mov ecx, 0x5c6628
mov byte [esp + 0x1d0], 4
call fcn.00533b90
cmp ax, 4
jne 0x410933
lea ecx, [esp + 0x10]
mov byte [esp + 0x1c0], 3
call fcn.00531940
lea ecx, [esp + 0x34]
mov byte [esp + 0x1c0], 2
call fcn.00531940
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x4108da
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x4108d1
cmp al, 0xff
je 0x4108d1
dec al
mov byte [ecx], al
jmp 0x4108da
push ecx
call fcn.00556360
add esp, 4
mov eax, dword [esp + 0x44]
mov dword [esp + 0x28], ebx
cmp eax, ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
je 0x41090b
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x410902
cmp al, 0xff
je 0x410902
dec al
mov byte [ecx], al
jmp 0x41090b
push ecx
call fcn.00556360
add esp, 4
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebx
lea ecx, [esp + 0x7c]
mov dword [esp + 0x1c0], 0xffffffff
call fcn.00531940
xor ax, ax
jmp 0x410a83
push ebx
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov byte [esp + 0x1d0], 0x2b
mov ecx, esp
mov dword [esp + 0x48], esp
push 6
push 0x59ccd4
call fcn.005318a0
mov ecx, 0x5c6628
mov byte [esp + 0x1d0], 4
call fcn.00533b90
mov esi, dword [esp + 0x78]
lea edx, [esp + 0x154]
push 2
lea eax, [esp + 0x54]
push edx
push eax
lea ecx, [esi + 0x78]
call fcn.0043cb50
push 0x3e8
call fcn.0043d4c0
add esp, 4
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov byte [esp + 0x1d0], 0x2c
mov ecx, esp
mov dword [esp + 0x48], esp
push 6
push 0x59cccc
call fcn.005318a0
mov ecx, 0x5c6628
mov byte [esp + 0x1d0], 4
call fcn.00533b90
mov ecx, esi
call fcn.004594b0
lea ecx, [esp + 0x10]
mov byte [esp + 0x1c0], 3
call fcn.00531940
lea ecx, [esp + 0x34]
mov byte [esp + 0x1c0], 2
call fcn.00531940
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x410a2e
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x410a25
cmp al, 0xff
je 0x410a25
dec al
mov byte [ecx], al
jmp 0x410a2e
push ecx
call fcn.00556360
add esp, 4
mov eax, dword [esp + 0x44]
mov dword [esp + 0x28], ebx
cmp eax, ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
je 0x410a5f
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x410a56
cmp al, 0xff
je 0x410a56
dec al
mov byte [ecx], al
jmp 0x410a5f
push ecx
call fcn.00556360
add esp, 4
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebx
lea ecx, [esp + 0x7c]
mov dword [esp + 0x1c0], 0xffffffff
call fcn.00531940
mov ax, 1
mov ecx, dword [esp + 0x1b8]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x1b4
ret 8