Function at 0x4066e0
Capabilities:
Hide graphical window
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x498c90
mov eax, dword fs:[0]
push eax
sub esp, 0x378
mov eax, dword [0x4ba858]
xor eax, esp
mov dword [esp + 0x374], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4ba858]
xor eax, esp
push eax
lea eax, [esp + 0x38c]
mov dword fs:[0], eax
mov esi, dword [esp + 0x39c]
mov ebx, dword [esp + 0x3a0]
mov ecx, dword [esp + 0x3a4]
xor ebp, ebp
xor edi, edi
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x20], ebp
mov eax, dword [esi]
add esi, 4
cmp eax, 0x3000903
mov dword [esp + 0x38], ebx
mov dword [esp + 0x34], ecx
ja 0x40cdac
je 0x40cd60
cmp eax, 0x1008002
ja 0x40867c
je 0x408671
cmp eax, 0x300201
ja 0x4073a9
je 0x407392
cmp eax, 0x200101
ja 0x40701c
je 0x407005
cmp eax, 0x100f02
ja 0x406beb
je 0x406bb2
cmp eax, 0x100702
ja 0x4069f3
je 0x4069b4
cmp eax, 0x100302
ja 0x4068fd
je 0x4068db
cmp eax, 0x100002
je 0x4129a8
cmp eax, 0x100102
je 0x406869
cmp eax, 0x100202
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
cmp eax, 4
ja case.default.0x4109a5
jmp dword [eax*4 + 0x416084]
push 0
push 8
call fcn.00402a70
add esp, 8
jmp case.default.0x4109a5
push 0
push 0xb
call fcn.00402a70
add esp, 8
jmp case.default.0x4109a5
push 0
push 0xc
call fcn.00402a70
add esp, 8
jmp case.default.0x4109a5
push 0
push 0xd
call fcn.00402a70
add esp, 8
jmp case.default.0x4109a5
push 0
push 0xe
call fcn.00402a70
add esp, 8
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x14], edi
je 0x4068b0
test dword [0x6c77b0], 0x80000000
jne case.default.0x4109a5
mov eax, dword [0x4bcc70]
push 0
push 1
push 0x501
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
jmp case.default.0x4109a5
test dword [0x6c77b0], 0x80000000
je case.default.0x4109a5
mov ecx, dword [0x4bcc70]
push 0
push 0
push 0x501
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
jne case.default.0x4109a5
xor eax, eax
jmp 0x41605c
cmp eax, 0x100402
je 0x40697e
cmp eax, 0x100502
je 0x40694a
cmp eax, 0x100602
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
push 0
push edx
call fcn.004653c0
mov eax, dword [esp + 0x1c]
add esp, 8
mov dword [0x6cbbd8], eax
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
push 0xffffffffffffffff
push edx
call fcn.00465aa0
mov eax, dword [esp + 0x1c]
add esp, 8
mov dword [0x6cb798], eax
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
push edx
call fcn.00465720
mov eax, dword [esp + 0x18]
add esp, 4
mov dword [0x6c983c], eax
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x14], edi
je 0x4069e4
or dword [0x6c77b0], 0x800000
jmp case.default.0x4109a5
and dword [0x6c77b0], 0xff7fffff
jmp case.default.0x4109a5
cmp eax, 0x100b02
ja 0x406b1e
je 0x406ac3
cmp eax, 0x100802
je 0x406a87
cmp eax, 0x100902
je 0x406a4c
cmp eax, 0x100a02
jne 0x415e04
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
push eax
push 4
call fcn.00402fa0
add esp, 8
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
mov eax, dword [0x6c77b0]
shl edx, 4
xor edx, eax
and edx, 0xf0
xor eax, edx
mov dword [0x6c77b0], eax
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
mov eax, dword [0x6c77b0]
and edx, 0xf
shl edx, 0x14
and eax, 0xff8fffff
or edx, eax
mov dword [0x6c77b0], edx
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
and dword [0x6c77b0], 0xfff3ffff
sub eax, 1
je 0x406b0a
sub eax, 1
jne 0x406b14
or dword [0x6c77b0], 0x40000
call fcn.00465b00
jmp case.default.0x4109a5
or dword [0x6c77b0], 0x80000
call fcn.00465b00
jmp case.default.0x4109a5
cmp eax, 0x100c02
je 0x406b73
cmp eax, 0x100d02
je 0x406b57
cmp eax, 0x100e02
jne 0x415e04
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
jne 0x406a38
jmp 0x41605c
mov eax, dword [esi]
push 0x6cbd3c
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
jne 0x406b14
jmp 0x41605c
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x14], edi
je 0x406ba3
or dword [0x6c77b0], 0x10000000
jmp case.default.0x4109a5
and dword [0x6c77b0], 0xefffffff
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x14], edi
je 0x406bdf
or dword [0x6c984c], 1
jmp case.default.0x4109a5
and dword [0x6c984c], 0xfffffffe
jmp case.default.0x4109a5
cmp eax, 0x101702
ja 0x406e4a
je 0x406e11
cmp eax, 0x101302
ja 0x406d34
je 0x406d01
cmp eax, 0x101002
je 0x406cc8
cmp eax, 0x101102
je 0x406c94
cmp eax, 0x101202
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
cmp eax, dword [0x6cdde0]
je case.default.0x4109a5
test dword [0x6c77b0], 0x80000000
je 0x406c8a
mov edx, dword [0x4bcc70]
push edx
call fcn.004050a0
mov ecx, dword [0x4bcc70]
mov eax, dword [esp + 0x18]
push ecx
mov dword [0x6cdde0], eax
call fcn.004050a0
add esp, 8
jmp case.default.0x4109a5
mov dword [0x6cdde0], eax
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
push eax
push 0
mov dword [0x6cbdc8], eax
call fcn.0045e7e0
add esp, 8
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x14], edi
je 0x406cf5
or dword [0x6c984c], 2
jmp case.default.0x4109a5
and dword [0x6c984c], 0xfffffffd
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
and dword [0x6c77b0], 0xffffff0f
mov dword [0x6c6d30], eax
jmp case.default.0x4109a5
cmp eax, 0x101402
je 0x406dcf
cmp eax, 0x101502
je 0x406d90
cmp eax, 0x101602
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x14], edi
je 0x406d81
or dword [0x6cde28], 0x2000000
jmp case.default.0x4109a5
and dword [0x6cde28], 0xfdffffff
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x14], edi
je 0x406dc0
or dword [0x6cde28], 0x1000000
jmp case.default.0x4109a5
and dword [0x6cde28], 0xfeffffff
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [0x6cde28]
and dword [0x6c77b0], 0xf0ffffff
mov edx, eax
xor edx, dword [esp + 0x14]
and edx, 0xffffff
xor eax, edx
mov dword [0x6cde28], eax
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x14], edi
je 0x406e3e
or dword [0x6cdd10], 1
jmp case.default.0x4109a5
and dword [0x6cdd10], 0xfffffffe
jmp case.default.0x4109a5
cmp eax, 0x101b02
ja 0x406f6a
je 0x406f28
cmp eax, 0x101802
je 0x406eef
cmp eax, 0x101902
je 0x406eb7
cmp eax, 0x101a02
jne 0x415e04
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x14], edi
je 0x406ea8
or dword [0x6cde28], 0x4000000
jmp case.default.0x4109a5
and dword [0x6cde28], 0xfbffffff
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
push 0xfffffffffffffffe
push edx
call fcn.00465aa0
mov eax, dword [esp + 0x1c]
add esp, 8
mov dword [0x6c9728], eax
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x14], edi
je 0x406f1c
or dword [0x6cdd10], 2
jmp case.default.0x4109a5
and dword [0x6cdd10], 0xfffffffd
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
and dword [0x6c984c], 0xfffff0ff
test eax, eax
je case.default.0x4109a5
and eax, 0xf
shl eax, 8
or dword [0x6c984c], eax
jmp case.default.0x4109a5
cmp eax, 0x101c02
je 0x406fcd
cmp eax, 0x102002
je 0x406f92
cmp eax, 0x200001
jne 0x415e04
mov dword [0x6c77a8], 1
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
mov eax, dword [0x6c984c]
shl edx, 4
xor edx, eax
and edx, 0xf0
xor eax, edx
mov dword [0x6c984c], eax
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
push 1
push edx
call fcn.004653c0
mov eax, dword [esp + 0x1c]
add esp, 8
mov dword [0x6c9838], eax
jmp case.default.0x4109a5
mov ecx, dword [0x6c77b0]
and ecx, 0x80000000
mov dword [0x6c77a8], ecx
jmp case.default.0x4109a5
cmp eax, 0x201101
ja 0x4071f5
je 0x4071e4
cmp eax, 0x200901
ja 0x4070f5
je 0x4070de
cmp eax, 0x200501
ja 0x407088
je 0x407079
cmp eax, 0x200201
je 0x40714f
cmp eax, 0x200301
je 0x406f83
cmp eax, 0x200401
jne 0x415e04
mov edx, dword [0x6c983c]
mov dword [0x6c77a8], edx
jmp case.default.0x4109a5
mov eax, dword [0x6cb798]
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
cmp eax, 0x200601
je 0x4070cf
cmp eax, 0x200701
je 0x4070b8
cmp eax, 0x200801
jne 0x415e04
mov ecx, dword [0x6c77b0]
shr ecx, 0x14
and ecx, 7
mov dword [0x6c77a8], ecx
jmp case.default.0x4109a5
mov edx, dword [0x6c77b0]
shr edx, 0x17
and edx, 1
mov dword [0x6c77a8], edx
jmp case.default.0x4109a5
mov eax, dword [0x6cbbd8]
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
mov ecx, dword [0x6c77b0]
shr ecx, 4
and ecx, 0xf
mov dword [0x6c77a8], ecx
jmp case.default.0x4109a5
cmp eax, 0x200d01
ja 0x40718e
je 0x40717d
cmp eax, 0x200a01
je 0x407169
cmp eax, 0x200b01
je 0x407132
cmp eax, 0x200c02
jne 0x415e04
mov edx, dword [0x6c77b0]
shr edx, 0x1c
and edx, 1
mov dword [0x6c77a8], edx
jmp case.default.0x4109a5
mov eax, dword [0x6c77b0]
shr eax, 0x12
and eax, 3
sub eax, ebp
je 0x40714f
sub eax, 1
je 0x40715a
sub eax, 1
je 0x406f83
mov dword [0x6c77a8], ebp
jmp case.default.0x4109a5
mov dword [0x6c77a8], 2
jmp case.default.0x4109a5
movzx eax, byte [0x6c77b3]
and eax, 0xf
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
mov ecx, dword [0x6cbd3c]
mov dword [0x6c77a8], ecx
jmp case.default.0x4109a5
cmp eax, 0x200e01
je 0x4071cf
cmp eax, 0x200f01
je 0x4071bd
cmp eax, 0x201001
jne 0x415e04
mov edx, dword [0x6c984c]
shr edx, 1
and edx, 1
mov dword [0x6c77a8], edx
jmp case.default.0x4109a5
mov eax, dword [0x6c984c]
and eax, 1
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
movzx ecx, byte [0x6c77b3]
and ecx, 0xf
mov dword [0x6c77a8], ecx
jmp case.default.0x4109a5
mov edx, dword [0x6cbdc8]
mov dword [0x6c77a8], edx
jmp case.default.0x4109a5
cmp eax, 0x201901
ja 0x4072db
je 0x4072ca
cmp eax, 0x201501
ja 0x407272
je 0x40725e
cmp eax, 0x201201
je 0x40724d
cmp eax, 0x201301
je 0x40723c
cmp eax, 0x201401
jne 0x415e04
mov eax, dword [0x6cde28]
and eax, 0xffffff
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
mov ecx, dword [0x6c6d30]
mov dword [0x6c77a8], ecx
jmp case.default.0x4109a5
mov edx, dword [0x6cdde0]
mov dword [0x6c77a8], edx
jmp case.default.0x4109a5
movzx eax, byte [0x6cde2b]
and eax, 1
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
cmp eax, 0x201601
je 0x4072b5
cmp eax, 0x201701
je 0x4072a1
cmp eax, 0x201801
jne 0x415e04
mov ecx, dword [0x6cdd10]
shr ecx, 1
and ecx, 1
mov dword [0x6c77a8], ecx
jmp case.default.0x4109a5
mov edx, dword [0x6cdd10]
and edx, 1
mov dword [0x6c77a8], edx
jmp case.default.0x4109a5
mov eax, dword [0x6cde28]
shr eax, 0x19
and eax, 1
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
mov ecx, dword [0x6c9728]
mov dword [0x6c77a8], ecx
jmp case.default.0x4109a5
cmp eax, 0x202001
ja 0x407351
je 0x40733a
cmp eax, 0x201a01
je 0x407323
cmp eax, 0x201b02
je 0x40730e
cmp eax, 0x201c01
jne 0x415e04
mov edx, dword [0x6c9838]
mov dword [0x6c77a8], edx
jmp case.default.0x4109a5
mov eax, dword [0x6c984c]
shr eax, 8
and eax, 0xf
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
mov ecx, dword [0x6cde28]
shr ecx, 0x1a
and ecx, 1
mov dword [0x6c77a8], ecx
jmp case.default.0x4109a5
mov edx, dword [0x6c984c]
shr edx, 4
and edx, 0xf
mov dword [0x6c77a8], edx
jmp case.default.0x4109a5
cmp eax, 0x300001
je 0x407378
cmp eax, 0x300101
jne 0x415e04
mov eax, dword [0x6cde08]
shr eax, 0xb
and eax, 1
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
mov ecx, dword [0x6cde08]
and cl, 0xc3
neg cl
sbb ecx, ecx
neg ecx
mov dword [0x6c77a8], ecx
jmp case.default.0x4109a5
push 0
push 6
call fcn.00402fa0
add esp, 8
mov dword [0x4bc828], edi
jmp case.default.0x4109a5
cmp eax, 0x1000f03
ja 0x407d81
je 0x407d2f
cmp eax, 0x500302
ja 0x4079a8
je 0x407984
cmp eax, 0x400301
ja 0x4074fe
je 0x4074dd
cmp eax, 0x300601
ja 0x407462
je 0x407444
cmp eax, 0x300301
je 0x407433
cmp eax, 0x300401
je 0x40741c
cmp eax, 0x300501
jne 0x415e04
and dword [0x6cdd10], 0xfffeffff
push 1
push 0x40000
call fcn.00433500
add esp, 8
jmp case.default.0x4109a5
movzx edx, word [0x6cdd12]
not edx
and edx, 1
mov dword [0x6c77a8], edx
jmp case.default.0x4109a5
push 0
push 5
call fcn.00402fa0
add esp, 8
jmp case.default.0x4109a5
or dword [0x6cdd10], 0x10000
push 0
push 0x40000
call fcn.00433500
add esp, 8
jmp case.default.0x4109a5
cmp eax, 0x400001
je 0x4074bc
cmp eax, 0x400101
je 0x40749c
cmp eax, 0x400201
jne 0x415e04
lea eax, [esp + 0x154]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx ecx, word [esp + 0x15a]
mov dword [0x6c77a8], ecx
jmp case.default.0x4109a5
lea edx, [esp + 0x184]
push edx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [esp + 0x186]
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
lea ecx, [esp + 0x194]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx edx, word [esp + 0x194]
mov dword [0x6c77a8], edx
jmp case.default.0x4109a5
lea eax, [esp + 0x164]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx ecx, word [esp + 0x16c]
mov dword [0x6c77a8], ecx
jmp case.default.0x4109a5
cmp eax, 0x410103
ja 0x4078b4
je 0x4075ef
cmp eax, 0x400401
je 0x4075ce
cmp eax, 0x400501
je 0x4075ad
cmp eax, 0x410002
jne 0x415e04
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edi, dword [esp + 0x14]
xor eax, eax
cmp edi, eax
je 0x40759e
mov eax, 0xd1b71759
mul edi
shr edx, 0xd
mov dword [0x6c77e0], edx
mov eax, 0x51eb851f
mul edi
mov ecx, edx
shr ecx, 5
mov eax, ecx
imul ecx, ecx, 0x64
xor edx, edx
mov ebx, 0x64
div ebx
mov eax, edx
shl eax, 4
sub eax, edx
add eax, eax
add eax, eax
sub eax, ecx
add eax, edi
imul eax, eax, 0x3e8
mov dword [0x6c9850], eax
jmp case.default.0x4109a5
mov dword [0x6c77e0], eax
mov dword [0x6c9850], eax
jmp case.default.0x4109a5
lea ecx, [esp + 0x174]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx edx, word [esp + 0x180]
mov dword [0x6c77a8], edx
jmp case.default.0x4109a5
lea eax, [esp + 0x1a4]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx ecx, word [esp + 0x1ae]
mov dword [0x6c77a8], ecx
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x18]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
cmp eax, 4
ja case.default.0x4109a5
jmp dword [eax*4 + 0x416098]
mov eax, dword [esp + 0x18]
cmp eax, 3
ja case.default.0x4109a5
jmp dword [eax*4 + 0x4160ac]
mov edx, dword [0x6c9850]
mov dword [0x6c77a8], edx
jmp case.default.0x4109a5
mov ecx, dword [0x6c9850]
mov eax, 0x10624dd3
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x3e8
sub ecx, eax
mov dword [0x6c77a8], ecx
jmp case.default.0x4109a5
mov ecx, dword [0x6c9850]
mov eax, 0x45e7b273
imul ecx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xea60
sub ecx, eax
mov dword [0x6c77a8], ecx
jmp case.default.0x4109a5
mov ecx, dword [0x6c9850]
mov dword [0x6c77a8], ecx
jmp case.default.0x4109a5
mov eax, dword [esp + 0x18]
cmp eax, 3
ja case.default.0x4109a5
jmp dword [eax*4 + 0x4160bc]
mov ecx, dword [0x6c9850]
mov eax, 0x10624dd3
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
mov ecx, dword [0x6c9850]
mov eax, 0x10624dd3
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
cdq
mov ecx, 0x3c
idiv ecx
mov dword [0x6c77a8], edx
jmp case.default.0x4109a5
mov ecx, dword [0x6c77e0]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
add edx, edx
add edx, edx
add edx, edx
sub ecx, edx
mov edx, dword [0x6c9850]
imul ecx, ecx, 0xe10
mov eax, 0x10624dd3
imul edx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add ecx, edx
add eax, ecx
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
mov eax, dword [esp + 0x18]
sub eax, 0
je 0x4077f3
sub eax, 1
je 0x4077d2
sub eax, 1
jne case.default.0x4109a5
mov ecx, dword [0x6c77e0]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
add edx, edx
add edx, edx
add edx, edx
sub ecx, edx
mov edi, ecx
shl edi, 4
sub edi, ecx
mov ecx, dword [0x6c9850]
mov eax, 0x45e7b273
imul ecx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + edi*4]
mov dword [0x6c77a8], ecx
jmp case.default.0x4109a5
mov ecx, dword [0x6c9850]
mov eax, 0x45e7b273
imul ecx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
mov ecx, dword [0x6c9850]
mov eax, 0x45e7b273
imul ecx
sar edx, 0xe
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov dword [0x6c77a8], ecx
jmp case.default.0x4109a5
mov eax, dword [esp + 0x18]
sub eax, 0
je 0x407883
sub eax, 1
je 0x407856
sub eax, 1
jne case.default.0x4109a5
mov ecx, dword [0x6c77e0]
mov eax, 0x30c30c31
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xa8
sub ecx, eax
mov dword [0x6c77a8], ecx
jmp case.default.0x4109a5
mov ecx, dword [0x6c77e0]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
add edx, edx
add edx, edx
add edx, edx
sub ecx, edx
mov dword [0x6c77a8], ecx
jmp case.default.0x4109a5
mov eax, dword [0x6c77e0]
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
mov ecx, dword [0x6c77e0]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov dword [0x6c77a8], ecx
jmp case.default.0x4109a5
cmp eax, 0x500001
je 0x407966
cmp eax, 0x500102
je 0x407919
cmp eax, 0x500202
jne 0x415e04
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x14], edi
je 0x407905
mov eax, dword [0x4bcc70]
push 5
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp case.default.0x4109a5
mov ecx, dword [0x4bcc70]
push 0
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x14], edi
je 0x40794b
mov eax, dword [0x4bcc70]
push eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp case.default.0x4109a5
mov ecx, dword [0x4bcc70]
push 2
push ecx
call dword [sym.imp.USER32.dll_GetWindow]
push eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp case.default.0x4109a5
mov edx, dword [0x4bcc70]
push 0
push 0xf020
push 0x112
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp case.default.0x4109a5
mov eax, dword [esi]
push eax
mov dword [esp + 0x18], eax
add esi, 4
call fcn.004022f0
add esp, 4
push eax
mov eax, dword [0x4bcc70]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
jmp case.default.0x4109a5
cmp eax, 0x1000703
ja 0x407b81
je 0x407b4f
cmp eax, 0x1000302
ja 0x407a4a
je 0x407a0e
cmp eax, 0x1000001
je 0x4079f7
cmp eax, 0x1000101
je 0x4079ec
cmp eax, 0x1000202
jne 0x415e04
mov esi, dword [esi]
add esi, dword [0x4bc864]
jmp case.default.0x4109a5
mov dword [ebx], 7
jmp case.default.0x4109a5
push 0
push 0
call fcn.0046cac0
add esp, 8
mov dword [ebx], 6
jmp case.default.0x4109a5
cmp dword [esi], ebp
je 0x4129a8
mov ecx, dword [0x4bbfc8]
push ecx
mov edx, esi
sub edx, dword [0x4bc864]
push 0
add edx, 4
push 0
push edx
call fcn.0046c200
add esp, 0x10
test eax, eax
je 0x4129a8
mov esi, dword [esi]
add esi, dword [0x4bc864]
jmp case.default.0x4109a5
cmp eax, 0x1000401
je 0x407b08
cmp eax, 0x1000502
je 0x407ac3
cmp eax, 0x1000602
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov dword [ebx], 1
mov edi, dword [0x4bbfc8]
add edi, edi
add edi, edi
call fcn.004752b0
cmp dword [0x6cbd40], 0xffffffff
mov edx, dword [esp + 0x14]
mov dword [edi + 0x4bc400], eax
mov dword [edi + 0x4bbfa0], edx
je case.default.0x4109a5
push 1
call fcn.00402950
add esp, 4
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov dword [ebx], 2
mov edi, dword [0x4bbfc8]
add edi, edi
add edi, edi
call fcn.004752b0
mov edx, dword [esp + 0x14]
mov dword [edi + 0x4bc400], eax
mov dword [edi + 0x4bbfa0], edx
jmp case.default.0x4109a5
mov eax, dword [0x4bbfc8]
push 0x4bc82c
push 0x4bbfc8
push ebx
mov dword [esp + 0x20], eax
call fcn.0046c260
add esp, 0xc
test eax, eax
mov dword [esp + 0x28], eax
je 0x407b35
mov ecx, dword [0x4bc864]
lea esi, [ecx + eax]
mov edx, dword [esp + 0x14]
cmp edx, dword [0x4bbfc8]
je case.default.0x4109a5
call fcn.004286b0
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x14], edi
jne 0x4129a8
mov esi, dword [esi]
add esi, dword [0x4bc864]
jmp case.default.0x4109a5
cmp eax, 0x1000b02
ja 0x407c19
je 0x407bf9
cmp eax, 0x1000801
je 0x407be2
cmp eax, 0x1000901
je case.default.0x4109a5
cmp eax, 0x1000a02
jne 0x415e04
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov dword [ebx], 0xc
mov eax, dword [esp + 0x14]
mov ecx, dword [0x4bbfc8]
mov dword [ecx*4 + 0x4bbfa0], eax
jmp case.default.0x4109a5
call fcn.004752c0
mov edx, dword [0x4bbfc8]
mov dword [edx*4 + 0x4bc840], eax
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
jne 0x40d9f0
jmp 0x41605c
cmp eax, 0x1000c03
je 0x407ce5
cmp eax, 0x1000d02
je 0x407ca9
cmp eax, 0x1000e04
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [0x6cdde8], edx
mov dword [0x6cddec], eax
mov dword [0x6cddf0], ecx
jmp case.default.0x4109a5
mov edi, dword [esi]
push pe_nt_image_headers32
push 0
push 0x6c9738
mov dword [esp + 0x20], edi
add esi, 4
call fcn.00481aa0
push edi
call fcn.004022f0
add esp, 0x10
test eax, eax
je case.default.0x4109a5
push eax
push 0x6c9738
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x18]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov dword [eax*4 + 0x6c9858], edx
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [0x4bbfc8]
mov ecx, dword [eax*4 + 0x6cdd40]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov dword [ecx + eax*4], edx
jmp case.default.0x4109a5
cmp eax, 0x1001f01
ja 0x408229
je 0x40821a
cmp eax, 0x1001702
ja 0x4080d1
je 0x40809f
cmp eax, 0x1001302
ja 0x407f6b
je 0x407f09
cmp eax, 0x1001001
je 0x407e87
cmp eax, 0x1001102
je 0x407e24
cmp eax, 0x1001201
jne 0x415e04
mov eax, dword [0x4bbfc8]
cmp eax, ebp
je case.default.0x4109a5
mov edi, 0x6cdd58
jmp 0x407de7
xor ebp, ebp
mov ecx, dword [edi]
cmp ecx, ebp
je 0x407e08
cmp dword [ecx + 0x420], eax
jb 0x407e08
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov eax, dword [0x4bbfc8]
mov dword [edi], 0
add edi, 4
cmp edi, 0x6cddd8
jl 0x407de5
shl eax, 5
push eax
call fcn.0043abc0
add esp, 4
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [ebx]
xor edi, edi
cmp dword [esp + 0x14], edi
mov dword [esp + 0x28], edx
jle case.default.0x4109a5
push 0x4bc82c
push 0x4bbfc8
push ebx
call fcn.0046c260
add esp, 0xc
test eax, eax
mov dword [esp + 0x18], eax
je case.default.0x4109a5
mov ecx, dword [0x4bc864]
add edi, 1
cmp edi, dword [esp + 0x14]
lea esi, [ecx + eax]
jl 0x407e51
jmp case.default.0x4109a5
mov edx, dword [0x4bbfc8]
push 0x4bc82c
lea ecx, [esp + 0x18]
mov dword [esp + 0x18], edx
mov eax, dword [ebx]
push ecx
push ebx
mov dword [esp + 0x34], eax
call fcn.0046c260
add esp, 0xc
test eax, eax
mov dword [esp + 0x18], eax
je case.default.0x4109a5
jmp 0x407ec0
mov edx, dword [0x4bc864]
lea esi, [edx + eax]
mov eax, dword [esp + 0x14]
cmp eax, dword [0x4bbfc8]
jne 0x407ef5
push 0x4bc82c
lea ecx, [esp + 0x18]
push ecx
push ebx
call fcn.0046c260
add esp, 0xc
test eax, eax
mov dword [esp + 0x18], eax
jne 0x407ec0
jmp case.default.0x4109a5
call fcn.004286b0
mov edx, dword [esp + 0x14]
mov dword [0x4bbfc8], edx
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
test eax, eax
je 0x4068f6
mov edx, dword [0x4bbfc8]
mov eax, dword [0x4bc82c]
sub esi, dword [0x4bc864]
mov ecx, dword [ebx]
push edx
push eax
push ecx
add esi, 4
push esi
call fcn.0046c200
add esp, 0x10
test eax, eax
je 0x4068f6
mov edx, dword [0x4bc864]
mov eax, dword [esp + 0x14]
lea esi, [edx + eax]
call fcn.004286b0
add dword [0x4bbfc8], 1
mov dword [ebx], edi
jmp case.default.0x4109a5
cmp eax, 0x1001401
je 0x408028
cmp eax, 0x1001502
je 0x407fff
cmp eax, 0x1001604
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [0x6cddf8], edx
mov dword [0x6cddfc], eax
mov dword [0x6cde00], ecx
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
mov dword [0x6cddf4], eax
jmp case.default.0x4109a5
xor edi, edi
push edi
push edi
call fcn.0046cac0
add esp, 8
call fcn.0046c190
mov dword [0x4bbfc8], edi
mov dword [ebx], edi
mov ecx, dword [0x6c77ac]
cmp ecx, edi
mov byte [0x4bc3f5], 0
mov byte [0x4bc3f4], 0
je 0x408066
push 1
call fcn.00402770
mov dword [0x6c77ac], edi
mov ecx, dword [0x6cdd58]
cmp ecx, edi
je 0x40807e
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [0x6cdd58], edi
mov ecx, dword [0x6c9734]
cmp ecx, edi
je case.default.0x4109a5
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [0x6c9734], edi
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
push edx
call fcn.00457f80
add esp, 4
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
cmp eax, 0x1001b01
ja 0x4081d0
je 0x40814b
cmp eax, 0x1001801
je 0x4081a4
cmp eax, 0x1001902
je 0x408176
cmp eax, 0x1001a04
jne 0x415e04
mov edi, dword [esi]
lea ecx, [esp + 0x18]
add esi, 4
mov dword [esp + 0x14], edi
mov eax, dword [esi]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x24]
add esi, 4
push edx
push eax
call section..text
add esp, 0x10
add esi, 4
cmp dword [esp + 0x1c], ebp
je 0x408155
push 0
push edi
call fcn.004022d0
add esp, 4
push eax
call fcn.0042de20
add esp, 8
call fcn.0042e070
call fcn.0042de00
jmp case.default.0x4109a5
xor eax, eax
cmp dword [esp + 0x18], eax
setne al
push eax
push edi
call fcn.004022d0
add esp, 4
push eax
call fcn.0042de20
add esp, 8
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
call fcn.004752b0
add eax, dword [esp + 0x14]
mov dword [0x4bc834], eax
jmp case.default.0x4109a5
call fcn.004752b0
cmp eax, dword [0x4bc834]
jb case.default.0x4109a5
mov edx, dword [0x4bcc70]
push 0xffffffffffffffff
push 0
push 0x202
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp case.default.0x4109a5
cmp eax, 0x1001c01
je 0x408209
cmp eax, 0x1001d01
je 0x4081f8
cmp eax, 0x1001e01
jne 0x415e04
mov eax, dword [0x6cddf0]
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
mov ecx, dword [0x6cddec]
mov dword [0x6c77a8], ecx
jmp case.default.0x4109a5
mov edx, dword [0x6cdde8]
mov dword [0x6c77a8], edx
jmp case.default.0x4109a5
mov eax, dword [0x6cddf4]
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
cmp eax, 0x1002701
ja 0x408380
je 0x408376
cmp eax, 0x1002303
ja 0x4082e6
je 0x408291
cmp eax, 0x1002001
je 0x408282
cmp eax, 0x1002101
je 0x408271
cmp eax, 0x1002201
jne 0x415e04
mov ecx, dword [0x6cde00]
mov dword [0x6c77a8], ecx
jmp case.default.0x4109a5
mov edx, dword [0x6cddfc]
mov dword [0x6c77a8], edx
jmp case.default.0x4109a5
mov eax, dword [0x6cddf8]
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
mov ecx, dword [esi]
add esi, 4
mov dword [esp + 0x14], ecx
mov edx, dword [esi]
add esi, 4
test dword [0x6c77b0], 0x80000000
mov dword [esp + 0x18], edx
je 0x4082bd
mov eax, dword [0x4bcc70]
push eax
call fcn.004050a0
add esp, 4
mov ecx, dword [esp + 0x18]
push ecx
call fcn.004022f0
mov edx, dword [esp + 0x18]
add esp, 4
push eax
push edx
call fcn.004022d0
add esp, 4
push eax
call fcn.0042dfc0
add esp, 8
jmp case.default.0x4109a5
cmp eax, 0x1002401
je 0x408351
cmp eax, 0x1002501
je 0x40833c
cmp eax, 0x1002602
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
call fcn.004752c0
mov edx, dword [0x4bbfc8]
mov ecx, dword [esp + 0x14]
add edx, ecx
sub eax, dword [edx*4 + 0x4bc840]
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
push 0x6c9738
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
test dword [0x6c77b0], 0x80000000
je 0x40836c
mov edx, dword [0x4bcc70]
push edx
call fcn.004050a0
add esp, 4
call fcn.0042e040
jmp case.default.0x4109a5
call fcn.00428830
jmp case.default.0x4109a5
cmp eax, 0x1003004
ja 0x408589
je 0x40848f
cmp eax, 0x1002803
je 0x408428
cmp eax, 0x1002903
je 0x4083db
cmp eax, 0x1002a02
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
push edx
call fcn.0046cb60
add esp, 4
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
push eax
push ecx
call fcn.0046cac0
add esp, 8
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x18]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x14], 0x1000d
jne case.default.0x4109a5
mov edx, dword [esp + 0x18]
push edx
call fcn.004022f0
add esp, 4
push eax
push 0x6c9738
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esi]
add esi, 4
mov dword [esp + 0x18], edx
mov eax, dword [esi]
add esi, 4
test eax, eax
mov dword [esp + 0x1c], eax
je case.default.0x4109a5
mov eax, dword [0x4bbfc8]
mov ecx, dword [0x4bc82c]
mov edx, dword [0x4bc838]
push eax
push ecx
mov eax, esi
sub eax, dword [0x4bc864]
push edx
push eax
call fcn.0046c200
add esp, 0x10
test eax, eax
je case.default.0x4109a5
mov ecx, dword [0x4bbfc8]
mov edx, dword [esp + 0x14]
push ecx
push edx
push 0xc8
push 0xffffffffffffffff
call fcn.0046c200
add esp, 0x10
test eax, eax
jne 0x40852c
push 0x4bc82c
push 0x4bbfc8
push 0x4bc838
call fcn.0046c260
add esp, 0xc
jmp case.default.0x4109a5
mov eax, dword [0x4bc864]
mov ecx, dword [esp + 0x1c]
push pe_nt_image_headers32
push 0
push 0x6c9738
lea esi, [eax + ecx]
call fcn.00481aa0
mov edx, dword [esp + 0x24]
push edx
call fcn.004022f0
add esp, 0x10
test eax, eax
je 0x408566
push eax
push 0x6c9738
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
call fcn.00455870
call fcn.004558c0
and dword [0x6cde08], 0xffffefff
push 6
call fcn.0045cda0
add esp, 4
jmp case.default.0x4109a5
cmp eax, 0x1003101
je 0x4085c4
cmp eax, 0x1003201
jne 0x415e04
lea eax, [esp + 0x14]
push eax
push 0xc8
call fcn.0046c310
add esp, 8
test al, al
jne 0x40b22c
mov dword [0x6c77a8], 0xffffffff
jmp case.default.0x4109a5
mov edx, dword [0x4bbfc8]
mov edi, 0xc8
cmp dword [0x4bc838], edi
mov dword [esp + 0x14], edx
je 0x408611
jmp 0x4085e0
lea eax, [esp + 0x18]
push eax
push 0x4bbfc8
push 0x4bc838
call fcn.0046c260
add esp, 0xc
test eax, eax
mov dword [esp + 0x28], eax
je 0x408609
cmp dword [0x4bc838], edi
jne 0x4085e0
jmp 0x408611
cmp dword [0x4bc838], edi
jne 0x40863b
push 0x4bc82c
push 0x4bbfc8
push 0x4bc838
call fcn.0046c260
mov ecx, dword [0x4bc864]
add esp, 0xc
test eax, eax
mov dword [esp + 0x28], eax
lea esi, [ecx + eax]
jne 0x408647
jmp 0x408641
mov esi, dword [0x4bc864]
mov dword [0x4bc838], ebp
mov edx, dword [esp + 0x14]
cmp edx, dword [0x4bbfc8]
je 0x408658
call fcn.004286b0
push 7
call fcn.0045cda0
add esp, 4
and dword [0x6cde08], 0xffffefff
jmp case.default.0x4109a5
mov eax, dword [esi]
lea esi, [esi + eax*4 + 4]
jmp case.default.0x4109a5
cmp eax, 0x1060002
ja 0x40bd5a
je 0x40bd14
cmp eax, 0x1030806
ja 0x40a37e
je 0x409f33
cmp eax, 0x1020705
ja 0x4092d5
je 0x409270
cmp eax, 0x1020002
ja 0x408b7b
je 0x408a7e
cmp eax, 0x1010101
ja 0x4089a2
je 0x4088a6
sub eax, 0x1010005
je 0x40882b
sub eax, 1
je 0x4087ad
sub eax, 3
jne 0x415e04
mov ecx, dword [esi]
mov dword [0x6c77b8], ecx
mov edx, dword [esi + 4]
add esi, 4
mov dword [0x6c77b4], edx
mov eax, dword [esi + 4]
add esi, 4
push 0x6c77bc
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6c77c0
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6c77c4
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6c77c8
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6c77cc
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6c77d0
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
jne case.default.0x4109a5
jmp 0x41605c
mov eax, dword [esi]
mov dword [0x6c77b8], eax
mov ecx, dword [esi + 4]
add esi, 4
mov dword [0x6c77b4], ecx
mov eax, dword [esi + 4]
add esi, 4
push 0x6c77bc
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6c77c0
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6c77c4
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
xor eax, eax
mov dword [0x6c77c8], eax
mov dword [0x6c77cc], eax
mov dword [0x6c77d0], eax
jmp case.default.0x4109a5
mov edx, dword [esi]
xor edi, edi
mov dword [0x6c77b8], edx
add esi, 4
mov dword [0x6c77b4], edi
mov eax, dword [esi]
push 0x6c77bc
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6c77c0
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6c77c4
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov dword [0x6c77c8], edi
mov dword [0x6c77cc], edi
mov dword [0x6c77d0], edi
jmp case.default.0x4109a5
mov ecx, dword [0x6c9734]
cmp ecx, ebp
je 0x4088b8
mov eax, dword [ecx]
mov edx, dword [eax]
push 1
call edx
push 0x2834
call fcn.004812ee
add esp, 4
mov dword [esp + 0x30], eax
xor edi, edi
cmp eax, edi
mov dword [esp + 0x394], edi
je 0x4088e1
mov ecx, eax
call fcn.00421b90
mov edx, eax
jmp 0x4088e3
xor edx, edx
mov eax, dword [0x6c77b8]
push eax
mov dword [esp + 0x398], 0xffffffff
mov dword [0x6c9734], edx
mov dword [esp + 0xa0], edi
mov dword [esp + 0xa4], edi
call fcn.004022d0
mov ecx, dword [0x6c77b4]
push ecx
mov dword [esp + 0xb0], eax
call fcn.004022d0
mov ecx, dword [0x6c77c0]
mov dword [esp + 0xac], eax
mov eax, dword [0x6c77bc]
mov dword [esp + 0xb8], ecx
mov ecx, dword [0x6c77c8]
mov dword [esp + 0xb4], eax
mov eax, dword [0x6c77c4]
push ecx
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], edi
call fcn.004022d0
mov dword [esp + 0xc8], eax
mov eax, dword [0x6c77cc]
push eax
call fcn.004022d0
mov ecx, dword [0x6c77d0]
push ecx
mov dword [esp + 0xd4], eax
call fcn.004022d0
mov dword [esp + 0xd8], eax
add esp, 0x14
lea eax, [esp + 0x9c]
push eax
mov ecx, edx
call fcn.00421c70
jmp case.default.0x4109a5
cmp eax, 0x1010203
je 0x408a3f
cmp eax, 0x1010301
je 0x4089f2
cmp eax, 0x1010401
jne 0x415e04
mov ecx, dword [0x6c9734]
cmp ecx, ebp
je 0x4089d7
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [0x6c9734], edi
cmp dword [ebx], 0xb
jne 0x4089de
mov dword [ebx], edi
call fcn.00456030
and dword [0x6cde08], 0xffffefff
jmp case.default.0x4109a5
cmp dword [0x6c9734], ebp
je case.default.0x4109a5
test dword [0x6c984c], 0x200
push 0
je 0x408a10
push 8
jmp 0x408a12
push 7
call fcn.00402a70
mov ecx, dword [0x6c9734]
add esp, 8
call fcn.00421f20
mov dword [ebx], 0xb
call fcn.00455870
and dword [0x6cde08], 0xffffefff
jmp case.default.0x4109a5
mov eax, dword [esi]
mov edi, dword [0x6c9734]
add esi, 4
mov dword [esp + 0x14], eax
mov edx, dword [esi]
add esi, 4
test edi, edi
mov dword [esp + 0x18], edx
je case.default.0x4109a5
push eax
call fcn.004022f0
add esp, 4
test eax, eax
je case.default.0x4109a5
push edx
push eax
mov ecx, edi
call fcn.004250e0
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
cmp eax, 0x20
jb 0x408b0d
xor edi, edi
lea ebp, [edi + 1]
or ebx, 0xffffffff
lea ebx, [ebx]
mov ecx, dword [edi*4 + 0x6cdd58]
test ecx, ecx
je 0x408b01
mov edx, dword [ecx]
mov eax, dword [edx]
push ebp
call eax
push 0x444
call fcn.004812ee
add esp, 4
mov dword [esp + 0x30], eax
test eax, eax
mov dword [esp + 0x394], ebp
je 0x408af1
mov ecx, dword [0x4bbfc8]
push 0
push ecx
push edi
mov ecx, eax
call fcn.004222c0
jmp 0x408af3
xor eax, eax
mov dword [esp + 0x394], ebx
mov dword [edi*4 + 0x6cdd58], eax
add edi, ebp
cmp edi, 0x20
jl 0x408ab0
jmp case.default.0x4109a5
mov ecx, dword [eax*4 + 0x6cdd58]
test ecx, ecx
je case.default.0x4109a5
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
push 0x444
call fcn.004812ee
add esp, 4
mov dword [esp + 0x30], eax
test eax, eax
mov dword [esp + 0x394], 2
je 0x408b69
mov ecx, dword [0x4bbfc8]
mov edx, dword [esp + 0x14]
push 0
push ecx
push edx
mov ecx, eax
call fcn.004222c0
mov ecx, dword [esp + 0x14]
mov dword [ecx*4 + 0x6cdd58], eax
jmp case.default.0x4109a5
mov ecx, dword [esp + 0x14]
xor eax, eax
mov dword [ecx*4 + 0x6cdd58], eax
jmp case.default.0x4109a5
cmp eax, 0x1020304
ja 0x4090eb
je 0x409025
sub eax, 0x1020109
je 0x408ebc
sub eax, 1
je 0x408cba
sub eax, 0xf9
jne 0x415e04
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x18]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
cmp eax, 0x20
jb 0x408c42
mov ecx, dword [0x6cdd58]
test ecx, ecx
je 0x408c15
mov edx, dword [ecx]
mov eax, dword [esp + 0x18]
mov edx, dword [edx + 8]
push eax
call edx
mov dword [ebx], 0xf
call fcn.00455870
and dword [0x6cde08], 0xffffefff
mov edi, 0x6cdd5c
lea ebx, [ebx]
mov ecx, dword [edi]
test ecx, ecx
je 0x408c32
mov eax, dword [ecx]
mov edx, dword [esp + 0x18]
mov eax, dword [eax + 8]
push edx
call eax
add edi, 4
cmp edi, 0x6cddd8
jl 0x408c20
jmp case.default.0x4109a5
test eax, eax
je 0x408c66
mov ecx, dword [eax*4 + 0x6cdd58]
test ecx, ecx
je case.default.0x4109a5
mov edx, dword [ecx]
mov eax, dword [esp + 0x18]
mov edx, dword [edx + 8]
push eax
call edx
jmp case.default.0x4109a5
cmp dword [0x6cdd58], edi
je case.default.0x4109a5
test dword [0x6c984c], 0x200
push 0
je 0x408c84
push 8
jmp 0x408c86
push 7
call fcn.00402a70
mov ecx, dword [0x6cdd58]
mov eax, dword [ecx]
mov edx, dword [esp + 0x20]
mov eax, dword [eax + 8]
add esp, 8
push edx
call eax
call fcn.00455870
mov dword [ebx], 0xf
and dword [0x6cde08], 0xffffefff
jmp case.default.0x4109a5
xor eax, eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov eax, dword [esi]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x60]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x64]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x68]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x6c]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x70]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push eax
call fcn.004022d0
add esi, 4
mov dword [esp + 0x5c], eax
mov edx, dword [esi]
mov eax, dword [esp + 0x18]
add esp, 4
add esi, 4
cmp eax, 0x20
mov dword [esp + 0x74], edx
mov dword [esp + 0x54], edi
jb 0x408dee
mov eax, 1
mov edi, edi
cmp dword [eax*4 + 0x6cdd58], edi
je 0x408de1
add eax, 1
cmp eax, 0x20
jl 0x408dd0
cmp eax, 0x20
je case.default.0x4109a5
mov dword [esp + 0x14], eax
cmp dword [eax*4 + 0x6cdd58], edi
lea ecx, [eax*4 + 0x6cdd58]
jne 0x408e4f
push 0x444
call fcn.004812ee
add esp, 4
mov dword [esp + 0x30], eax
test eax, eax
mov dword [esp + 0x394], 3
je 0x408e35
mov ecx, dword [0x4bbfc8]
mov edx, dword [esp + 0x14]
push 0
push ecx
push edx
mov ecx, eax
call fcn.004222c0
jmp 0x408e37
xor eax, eax
mov ecx, dword [esp + 0x14]
lea ecx, [ecx*4 + 0x6cdd58]
mov dword [esp + 0x394], 0xffffffff
mov dword [ecx], eax
mov ecx, dword [ecx]
test ecx, ecx
je case.default.0x4109a5
mov eax, dword [ecx]
mov eax, dword [eax + 4]
lea edx, [esp + 0x54]
push edx
mov edx, dword [esp + 0x1c]
push edx
call eax
cmp dword [0x4bbfc8], 0
mov dword [esp + 0x28], eax
jne case.default.0x4109a5
mov ecx, dword [esp + 0x34]
test byte [ecx], 1
je case.default.0x4109a5
cmp dword [0x6cb7a4], 0
je case.default.0x4109a5
mov edx, dword [esp + 0x14]
mov ecx, dword [edx*4 + 0x6cdd58]
push eax
call fcn.00422f60
test eax, eax
je case.default.0x4109a5
push eax
call fcn.00404340
add esp, 4
jmp case.default.0x4109a5
xor eax, eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov eax, dword [esi]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x60]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x64]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x68]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x6c]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push eax
call fcn.004022d0
add esi, 4
mov dword [esp + 0x5c], eax
mov eax, dword [esi]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x18]
add esp, 4
add esi, 4
cmp eax, 0x20
mov dword [esp + 0x54], edi
jb 0x408fd3
mov eax, 1
cmp dword [eax*4 + 0x6cdd58], edi
je 0x408fc6
add eax, 1
cmp eax, 0x20
jl 0x408fb5
cmp eax, 0x20
je case.default.0x4109a5
mov dword [esp + 0x14], eax
cmp dword [eax*4 + 0x6cdd58], edi
lea ecx, [eax*4 + 0x6cdd58]
jne 0x408e4f
push 0x444
call fcn.004812ee
add esp, 4
mov dword [esp + 0x30], eax
test eax, eax
mov dword [esp + 0x394], 4
je 0x408e35
mov ecx, dword [0x4bbfc8]
mov edx, dword [esp + 0x14]
push 0
push ecx
push edx
mov ecx, eax
call fcn.004222c0
jmp 0x408e37
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
cmp eax, 0x20
jae case.default.0x4109a5
mov ecx, dword [eax*4 + 0x6cdd58]
test ecx, ecx
je case.default.0x4109a5
mov eax, dword [esp + 0x1c]
sub eax, 0
je 0x4090dc
sub eax, 1
je 0x4090cd
sub eax, 1
jne case.default.0x4109a5
mov edx, dword [esp + 0x18]
push edx
call fcn.004229f0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx*4 + 0x6cdd58]
push eax
call fcn.004255b0
jmp case.default.0x4109a5
mov edx, dword [esp + 0x18]
push edx
call fcn.004229f0
jmp case.default.0x4109a5
mov eax, dword [esp + 0x18]
push eax
call fcn.00422a20
jmp case.default.0x4109a5
cmp eax, 0x1020402
je 0x409207
cmp eax, 0x1020502
je 0x4091ca
cmp eax, 0x1020603
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esi]
mov eax, dword [esp + 0x14]
add esi, 4
cmp eax, 0x20
mov dword [esp + 0x18], edx
jb 0x409160
mov edi, 0x6cdd58
mov edi, edi
mov ecx, dword [edi]
test ecx, ecx
je 0x409150
mov eax, dword [ecx]
mov edx, dword [eax]
push 1
call edx
mov dword [edi], ebp
add edi, 4
cmp edi, 0x6cddd8
jl 0x409140
jmp case.default.0x4109a5
mov ecx, dword [eax*4 + 0x6cdd58]
test ecx, ecx
je 0x409173
mov eax, dword [ecx]
mov edx, dword [eax]
push 1
call edx
push 0x444
call fcn.004812ee
mov edx, eax
add esp, 4
mov dword [esp + 0x30], edx
test edx, edx
mov dword [esp + 0x394], 6
je 0x408b69
mov eax, dword [esp + 0x18]
push eax
call fcn.004022d0
mov ecx, dword [0x4bbfc8]
add esp, 4
push eax
mov eax, dword [esp + 0x18]
push ecx
push eax
mov ecx, edx
call fcn.004222c0
mov ecx, dword [esp + 0x14]
mov dword [ecx*4 + 0x6cdd58], eax
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
mov ecx, dword [eax*4 + 0x6cdd58]
test ecx, ecx
je 0x40b26e
call fcn.00422ce0
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
cmp eax, 0x20
jb 0x40924b
mov edi, 0x6cdd58
mov ecx, dword [edi]
test ecx, ecx
je 0x40923b
call fcn.00422ea0
add edi, 4
cmp edi, 0x6cddd8
jl 0x409230
jmp case.default.0x4109a5
mov ecx, dword [eax*4 + 0x6cdd58]
test ecx, ecx
je case.default.0x4109a5
call fcn.00422ea0
cmp dword [esp + 0x14], edi
jne case.default.0x4109a5
mov dword [ebx], edi
jmp case.default.0x4109a5
xor eax, eax
lea edx, [esp + 0x14]
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov eax, dword [esi]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x18]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
jne 0x409426
jmp 0x41605c
cmp eax, 0x1030002
ja 0x409856
je 0x409829
cmp eax, 0x1020a05
ja 0x40953f
je 0x40949e
cmp eax, 0x1020706
je 0x4093ab
cmp eax, 0x1020802
je 0x409375
cmp eax, 0x1020903
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
cmp eax, 0x20
jae case.default.0x4109a5
mov ecx, dword [eax*4 + 0x6cdd58]
test ecx, ecx
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
push eax
call fcn.00422520
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
xor edx, edx
cmp dword [eax*4 + 0x6cdd58], edx
setne dl
mov dword [0x6c77a8], edx
jmp case.default.0x4109a5
xor eax, eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov eax, dword [esi]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x70]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push eax
call fcn.004022d0
add esi, 4
mov dword [esp + 0x5c], eax
mov edx, dword [esi]
mov eax, dword [esp + 0x18]
add esp, 4
add esi, 4
cmp eax, 0x20
mov dword [esp + 0x74], edx
mov dword [esp + 0x54], 1
jae case.default.0x4109a5
mov ecx, dword [eax*4 + 0x6cdd58]
test ecx, ecx
je case.default.0x4109a5
mov eax, dword [ecx]
mov eax, dword [eax + 4]
lea edx, [esp + 0x54]
push edx
mov edx, dword [esp + 0x1c]
push edx
call eax
cmp dword [0x4bbfc8], edi
mov dword [esp + 0x28], eax
jne case.default.0x4109a5
mov ecx, dword [esp + 0x34]
test byte [ecx], 1
je case.default.0x4109a5
cmp dword [0x6cb7a4], edi
jmp 0x408e8f
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x20]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
cmp eax, 0x20
jae case.default.0x4109a5
mov ecx, dword [eax*4 + 0x6cdd58]
test ecx, ecx
je case.default.0x4109a5
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push eax
mov eax, dword [esp + 0x1c]
push edx
push eax
call fcn.004226d0
jmp case.default.0x4109a5
cmp eax, 0x1020b04
je 0x409795
cmp eax, 0x1020c03
je 0x409701
cmp eax, 0x1020d0b
jne 0x415e04
xor eax, eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov eax, dword [esi]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x60]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x64]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x68]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x6c]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push eax
call fcn.004022d0
add esi, 4
mov dword [esp + 0x5c], eax
mov eax, dword [esi]
add esi, 4
mov dword [esp + 0x78], eax
mov ecx, dword [esi]
mov eax, dword [esp + 0x18]
add esp, 4
add esi, 8
cmp eax, 0x20
mov dword [esp + 0x78], ecx
mov dword [esp + 0x54], edi
jb 0x409680
mov eax, 1
cmp dword [eax*4 + 0x6cdd58], edi
je 0x409673
add eax, 1
cmp eax, 0x20
jl 0x409662
cmp eax, 0x20
je case.default.0x4109a5
mov dword [esp + 0x14], eax
cmp dword [eax*4 + 0x6cdd58], edi
lea ecx, [eax*4 + 0x6cdd58]
jne 0x4096e1
push 0x444
call fcn.004812ee
add esp, 4
mov dword [esp + 0x30], eax
test eax, eax
mov dword [esp + 0x394], 5
je 0x4096c7
mov edx, dword [0x4bbfc8]
mov ecx, dword [esp + 0x14]
push 0
push edx
push ecx
mov ecx, eax
call fcn.004222c0
jmp 0x4096c9
xor eax, eax
mov ecx, dword [esp + 0x14]
lea ecx, [ecx*4 + 0x6cdd58]
mov dword [esp + 0x394], 0xffffffff
mov dword [ecx], eax
mov ecx, dword [ecx]
test ecx, ecx
je case.default.0x4109a5
mov edx, dword [ecx]
mov edx, dword [edx + 4]
lea eax, [esp + 0x54]
push eax
mov eax, dword [esp + 0x1c]
push eax
call edx
jmp 0x408e6a
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
cmp eax, 0x20
jae case.default.0x4109a5
mov ecx, dword [eax*4 + 0x6cdd58]
test ecx, ecx
je case.default.0x4109a5
cmp dword [0x4bc85c], edi
je case.default.0x4109a5
lea eax, [esp + 0x20]
push eax
mov eax, dword [esp + 0x1c]
lea edx, [esp + 0x20]
push edx
push eax
call fcn.00422f70
test al, al
je case.default.0x4109a5
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push ecx
mov ecx, dword [0x4bc85c]
push edx
call fcn.00427bf0
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
cmp eax, 0x20
jae case.default.0x4109a5
mov ecx, dword [eax*4 + 0x6cdd58]
test ecx, ecx
je case.default.0x4109a5
mov edx, dword [esp + 0x18]
push edx
call fcn.00422f60
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x1c]
push 1
push ecx
push eax
call fcn.00432530
add esp, 0xc
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
push eax
call fcn.0046b6a0
add esp, 4
jmp case.default.0x4109a5
cmp eax, 0x1030405
ja 0x4099ea
je 0x409910
cmp eax, 0x1030102
je 0x4098c1
cmp eax, 0x1030202
je 0x40988f
cmp eax, 0x1030301
jne 0x415e04
call fcn.0046b880
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
push edx
call fcn.0046b800
add esp, 4
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
push edx
call fcn.004064e0
add esp, 4
test eax, eax
je 0x40b26e
mov eax, dword [0x6c9844]
push eax
call fcn.00402320
add esp, 4
mov esi, eax
mov dword [0x6c77a8], 1
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x20]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov ecx, dword [0x4bbfc8]
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
push 0
push eax
shl ecx, 5
add ecx, 0x1a
push ecx
push 0xffffffffffffffff
push 0
push edx
call fcn.0046b600
add esp, 8
push eax
call fcn.0043be60
add esp, 0x14
test eax, eax
mov dword [0x6c77a8], eax
je case.default.0x4109a5
push eax
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
fild dword [esp + 0x20]
push 0
sub esp, 8
fstp dword [esp + 4]
fild dword [esp + 0x28]
fstp dword [esp]
push eax
call fcn.00436a50
add esp, 0x10
jmp case.default.0x4109a5
cmp eax, 0x1030505
je 0x409e5d
cmp eax, 0x1030606
je 0x409c81
cmp eax, 0x1030706
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x20]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x2c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x18]
push edx
call fcn.0046e5d0
mov edi, eax
add esp, 4
test edi, edi
je case.default.0x4109a5
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
push edi
call fcn.0046e810
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x50]
push edx
push eax
call fcn.0046bd50
add esp, 0x14
test eax, eax
je case.default.0x4109a5
mov eax, dword [esp + 0x2c]
cmp eax, 0xc
ja case.default.0x4109a5
movzx ecx, byte [eax + 0x4160e8]
jmp dword [ecx*4 + 0x4160cc]
movzx edx, word [esp + 0x44]
push 1
push 4
push edx
push edi
call fcn.00472740
mov eax, dword [0x4b4074]
push eax
push edi
call fcn.00471270
movzx ecx, word [esp + 0x5e]
push 1
push 2
push ecx
push edi
call fcn.00472740
mov edx, dword [0x4b4074]
add edx, 4
push edx
push edi
call fcn.00471270
movzx eax, word [esp + 0x7a]
push 1
push 2
push eax
push edi
call fcn.00472740
mov ecx, dword [0x4b4074]
add esp, 0x40
add ecx, 8
push ecx
push edi
call fcn.00471270
add esp, 8
jmp case.default.0x4109a5
movzx eax, word [esp + 0x44]
xor edx, edx
mov ecx, 0x64
div ecx
push 1
push 2
push edx
push edi
call fcn.00472740
mov edx, dword [0x4b4074]
push edx
push edi
call fcn.00471270
add esp, 0x18
movzx eax, word [esp + 0x46]
push 1
push 2
push eax
push edi
call fcn.00472740
mov ecx, dword [0x4b4074]
add ecx, 4
push ecx
push edi
call fcn.00471270
movzx edx, word [esp + 0x62]
push 1
push 2
push edx
push edi
call fcn.00472740
mov eax, dword [0x4b4074]
add eax, 8
push eax
push edi
call fcn.00471270
add esp, 0x30
jmp case.default.0x4109a5
movzx ecx, word [esp + 0x44]
push 1
push 4
push ecx
push edi
call fcn.00472740
mov edx, dword [0x4b4074]
add edx, 0x12
push edx
push edi
call fcn.00471270
movzx eax, word [esp + 0x5e]
push 1
push 2
push eax
push edi
call fcn.00472740
mov ecx, dword [0x4b4074]
add ecx, 0x12
push ecx
push edi
call fcn.00471270
movzx edx, word [esp + 0x7a]
push 1
push 2
push edx
push edi
call fcn.00472740
add esp, 0x40
jmp case.default.0x4109a5
movzx eax, word [esp + 0x44]
xor edx, edx
mov ecx, 0x64
div ecx
push 1
push 2
push edx
push edi
call fcn.00472740
mov edx, dword [0x4b4074]
add edx, 0x12
push edx
push edi
call fcn.00471270
add esp, 0x18
movzx eax, word [esp + 0x46]
push 1
push 2
push eax
push edi
call fcn.00472740
mov ecx, dword [0x4b4074]
add ecx, 0x12
push ecx
push edi
call fcn.00471270
movzx edx, word [esp + 0x62]
push 1
push 2
push edx
push edi
call fcn.00472740
add esp, 0x28
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x20]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x2c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x18]
push edx
call fcn.0046e5d0
mov edi, eax
add esp, 4
test edi, edi
je case.default.0x4109a5
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
push edi
call fcn.0046e810
push 0x20
call fcn.004811ca
mov ebp, eax
add esp, 0x10
test ebp, ebp
je case.default.0x4109a5
mov edx, dword [esp + 0x14]
push 2
push ebp
push edx
call fcn.0046be10
add esp, 0xc
test eax, eax
je case.0x409d68.4
mov eax, dword [esp + 0x2c]
cmp eax, 0xc
ja case.0x409d68.4
jmp dword [eax*4 + 0x4160f8]
mov eax, dword [ebp]
push 1
push eax
push edi
call fcn.00472720
mov ecx, dword [0x4b4074]
push ecx
push edi
call fcn.00471270
add esp, 0x14
mov edx, dword [ebp + 4]
push 1
push edx
push edi
call fcn.00472720
mov eax, dword [0x4b4074]
add eax, 4
push eax
push edi
call fcn.00471270
add esp, 0x14
mov ecx, dword [ebp + 8]
push 1
push ecx
push edi
call fcn.00472720
mov edx, dword [0x4b4074]
add edx, 8
push edx
push edi
call fcn.00471270
add esp, 0x14
push ebp
call fcn.0048124d
add esp, 4
jmp case.default.0x4109a5
mov eax, dword [ebp + 8]
push 1
push eax
push edi
call fcn.00472720
mov ecx, dword [0x4b4074]
add ecx, 0xc
push ecx
push edi
call fcn.00471270
add esp, 0x14
push ebp
call fcn.0048124d
add esp, 4
jmp case.default.0x4109a5
mov edx, dword [ebp]
push 1
push edx
push edi
call fcn.00472720
mov eax, dword [0x4b4074]
add eax, 0x12
push eax
push edi
call fcn.00471270
add esp, 0x14
mov ecx, dword [ebp + 4]
push 1
push ecx
push edi
call fcn.00472720
mov edx, dword [0x4b4074]
add edx, 0x12
push edx
push edi
call fcn.00471270
add esp, 0x14
mov eax, dword [ebp + 8]
push 1
push eax
push edi
call fcn.00472720
add esp, 0xc
push ebp
call fcn.0048124d
add esp, 4
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x20]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x18]
push eax
call fcn.0046e5d0
mov ebp, eax
add esp, 4
test ebp, ebp
je case.default.0x4109a5
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push ecx
push edx
push ebp
call fcn.0046e810
push pe_nt_image_headers32
call fcn.004811ca
mov edi, eax
add esp, 0x10
test edi, edi
je case.default.0x4109a5
mov eax, dword [esp + 0x14]
push 1
push edi
push eax
call fcn.0046be10
add esp, 0xc
test eax, eax
je 0x409f25
push edi
push ebp
call fcn.00471270
add esp, 8
push edi
call fcn.0048124d
add esp, 4
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x20]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x2c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x18]
push edx
call fcn.0046e5d0
mov edi, eax
add esp, 4
test edi, edi
je case.default.0x4109a5
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
push edi
call fcn.0046e810
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x50]
push edx
push eax
call fcn.0046bd50
add esp, 0x14
test eax, eax
je case.default.0x4109a5
mov eax, dword [esp + 0x2c]
cmp eax, 0x1f
ja case.default.0x4109a5
movzx ecx, byte [eax + 0x416150]
jmp dword [ecx*4 + 0x41612c]
movzx edx, word [esp + 0x4c]
push 1
push 2
push edx
push edi
call fcn.00472740
mov eax, dword [0x4b4074]
add eax, 0x1a
push eax
push edi
call fcn.00471270
movzx ecx, word [esp + 0x66]
push 1
push 2
push ecx
push edi
call fcn.00472740
mov edx, dword [0x4b4074]
add edx, 0x1e
push edx
push edi
call fcn.00471270
movzx eax, word [esp + 0x80]
push 1
push 2
push eax
push edi
call fcn.00472740
mov ecx, dword [0x4b4074]
add esp, 0x40
add ecx, 0x22
push ecx
push edi
call fcn.00471270
add esp, 8
jmp case.default.0x4109a5
movzx edx, word [esp + 0x4c]
push 1
push 2
push edx
push edi
call fcn.00472740
mov eax, dword [0x4b4074]
add eax, 0x1a
push eax
push edi
call fcn.00471270
movzx ecx, word [esp + 0x66]
push 1
push 2
push ecx
push edi
call fcn.00472740
mov edx, dword [0x4b4074]
add edx, 0x1e
push edx
push edi
call fcn.00471270
add esp, 0x30
jmp case.default.0x4109a5
cmp word [esp + 0x4c], 0xb
jbe 0x40a0f0
mov eax, dword [0x4b4074]
add eax, 0x2c
push eax
push edi
call fcn.00471270
movzx ecx, word [esp + 0x54]
push 1
push 2
sub ecx, 0xc
push ecx
jmp 0x40a10a
mov edx, dword [0x4b4074]
add edx, 0x26
push edx
push edi
call fcn.00471270
movzx eax, word [esp + 0x54]
push 1
push 2
push eax
push edi
call fcn.00472740
mov ecx, dword [0x4b4074]
add esp, 0x18
add ecx, 0x1a
push ecx
push edi
call fcn.00471270
movzx edx, word [esp + 0x56]
push 1
push 2
push edx
push edi
call fcn.00472740
mov eax, dword [0x4b4074]
add eax, 0x1e
push eax
push edi
call fcn.00471270
movzx ecx, word [esp + 0x70]
push 1
push 2
push ecx
push edi
call fcn.00472740
mov edx, dword [0x4b4074]
add edx, 0x22
push edx
push edi
call fcn.00471270
add esp, 0x38
jmp case.default.0x4109a5
cmp word [esp + 0x4c], 0xb
jbe 0x40a190
mov eax, dword [0x4b4074]
add eax, 0x2c
push eax
push edi
call fcn.00471270
movzx ecx, word [esp + 0x54]
push 1
push 2
sub ecx, 0xc
push ecx
jmp 0x40a1aa
mov edx, dword [0x4b4074]
add edx, 0x26
push edx
push edi
call fcn.00471270
movzx eax, word [esp + 0x54]
push 1
push 2
push eax
push edi
call fcn.00472740
mov ecx, dword [0x4b4074]
add esp, 0x18
add ecx, 0x1a
push ecx
push edi
call fcn.00471270
movzx edx, word [esp + 0x56]
push 1
push 2
push edx
push edi
call fcn.00472740
mov eax, dword [0x4b4074]
add eax, 0x1e
push eax
push edi
call fcn.00471270
add esp, 0x20
jmp case.default.0x4109a5
movzx ecx, word [esp + 0x4c]
push 1
push 2
push ecx
push edi
call fcn.00472740
mov edx, dword [0x4b4074]
add edx, 0x16
push edx
push edi
call fcn.00471270
movzx eax, word [esp + 0x66]
push 1
push 2
push eax
push edi
call fcn.00472740
mov ecx, dword [0x4b4074]
add ecx, 0x16
push ecx
push edi
call fcn.00471270
movzx edx, word [esp + 0x80]
push 1
push 2
push edx
push edi
call fcn.00472740
add esp, 0x40
jmp case.default.0x4109a5
movzx eax, word [esp + 0x4c]
push 1
push 2
push eax
push edi
call fcn.00472740
mov ecx, dword [0x4b4074]
add ecx, 0x16
push ecx
push edi
call fcn.00471270
movzx edx, word [esp + 0x66]
push 1
push 2
push edx
push edi
call fcn.00472740
add esp, 0x28
jmp case.default.0x4109a5
cmp word [esp + 0x4c], 0xb
jbe 0x40a2a3
mov eax, dword [0x4b4074]
add eax, 0x38
push eax
push edi
call fcn.00471270
movzx ecx, word [esp + 0x54]
push 1
push 2
sub ecx, 0xc
push ecx
jmp 0x40a2bd
mov edx, dword [0x4b4074]
add edx, 0x32
push edx
push edi
call fcn.00471270
movzx eax, word [esp + 0x54]
push 1
push 2
push eax
push edi
call fcn.00472740
mov ecx, dword [0x4b4074]
add esp, 0x18
add ecx, 0x16
push ecx
push edi
call fcn.00471270
movzx edx, word [esp + 0x56]
push 1
push 2
push edx
push edi
call fcn.00472740
mov eax, dword [0x4b4074]
add eax, 0x16
push eax
push edi
call fcn.00471270
movzx ecx, word [esp + 0x70]
push 1
push 2
push ecx
push edi
call fcn.00472740
add esp, 0x30
jmp case.default.0x4109a5
cmp word [esp + 0x4c], 0xb
jbe 0x40a334
mov edx, dword [0x4b4074]
add edx, 0x38
push edx
push edi
call fcn.00471270
movzx eax, word [esp + 0x54]
push 1
push 2
sub eax, 0xc
push eax
jmp 0x40a34e
mov ecx, dword [0x4b4074]
add ecx, 0x32
push ecx
push edi
call fcn.00471270
movzx edx, word [esp + 0x54]
push 1
push 2
push edx
push edi
call fcn.00472740
mov eax, dword [0x4b4074]
add esp, 0x18
add eax, 0x16
push eax
push edi
call fcn.00471270
movzx ecx, word [esp + 0x56]
push 1
push 2
push ecx
push edi
call fcn.00472740
add esp, 0x18
jmp case.default.0x4109a5
cmp eax, 0x1040107
ja 0x40b46a
je 0x40b2cb
cmp eax, 0x1031001
ja 0x40af3b
je 0x40af31
cmp eax, 0x1030c06
ja 0x40acdb
je 0x40a63b
cmp eax, 0x1030903
je 0x40a600
cmp eax, 0x1030a02
je 0x40a5cf
cmp eax, 0x1030b06
jne 0x415e04
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x18]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x1c]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x20]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x2c]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x18]
push eax
call fcn.0046e5d0
mov edi, eax
add esp, 4
test edi, edi
je case.default.0x4109a5
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push ecx
push edx
push edi
call fcn.0046e810
push 0x20
call fcn.004811ca
mov ebp, eax
add esp, 0x10
test ebp, ebp
je case.default.0x4109a5
mov eax, dword [esp + 0x14]
push 2
push ebp
push eax
call fcn.0046be10
add esp, 0xc
test eax, eax
je case.default.0x4109a5
mov eax, dword [esp + 0x2c]
sub eax, 0
je 0x40a549
sub eax, 1
jne 0x40a5c1
mov eax, dword [ebp + 0xc]
cmp eax, 6
ja case.default.0x40a4ca
jmp dword [eax*4 + 0x416170]
mov ecx, dword [0x4b4074]
add ecx, 8
jmp 0x40a51e
mov edx, dword [0x4b4074]
add edx, 4
push edx
jmp 0x40a51f
mov eax, dword [0x4b4074]
add eax, 0x3e
push eax
jmp 0x40a51f
mov ecx, dword [0x4b4074]
add ecx, 0x42
jmp 0x40a51e
mov edx, dword [0x4b4074]
add edx, 0x46
push edx
jmp 0x40a51f
mov eax, dword [0x4b4074]
add eax, 0x4a
push eax
jmp 0x40a51f
mov ecx, dword [0x4b4074]
add ecx, 0x4e
push ecx
push edi
call fcn.00471270
add esp, 8
mov edx, dword [0x4b4074]
add edx, 0x52
push edx
push edi
call fcn.00471270
add esp, 8
push ebp
call fcn.0048124d
add esp, 4
jmp case.default.0x4109a5
mov eax, dword [ebp + 0xc]
cmp eax, 6
ja case.default.0x40a551
jmp dword [eax*4 + 0x41618c]
mov eax, dword [0x4b4074]
add eax, 8
jmp 0x40a5a4
mov ecx, dword [0x4b4074]
add ecx, 4
push ecx
jmp 0x40a5a5
mov edx, dword [0x4b4074]
add edx, 0x3e
push edx
jmp 0x40a5a5
mov eax, dword [0x4b4074]
add eax, 0x42
jmp 0x40a5a4
mov ecx, dword [0x4b4074]
add ecx, 0x46
push ecx
jmp 0x40a5a5
mov edx, dword [0x4b4074]
add edx, 0x4a
push edx
jmp 0x40a5a5
mov eax, dword [0x4b4074]
add eax, 0x4e
push eax
push edi
call fcn.00471270
add esp, 8
mov ecx, dword [0x4b4074]
add ecx, 0x52
push ecx
push edi
call fcn.00471270
add esp, 8
push ebp
call fcn.0048124d
add esp, 4
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
push 3
push 0
push eax
call fcn.0046be10
add esp, 0xc
jmp case.default.0x4109a5
mov eax, dword [esi]
push 0x6cdd38
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cdd3c
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
jne case.default.0x4109a5
jmp 0x41605c
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x20]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x2c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x18]
push edx
call fcn.0046e5d0
mov edi, eax
add esp, 4
test edi, edi
je case.default.0x4109a5
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
push edi
call fcn.0046e810
push 0x20
call fcn.004811ca
mov ebp, eax
add esp, 0x10
test ebp, ebp
je case.default.0x4109a5
mov edx, dword [esp + 0x14]
push 2
push ebp
push edx
call fcn.0046be10
add esp, 0xc
test eax, eax
je case.default.0x4109a5
mov eax, dword [esp + 0x2c]
cmp eax, 0x28
ja case.0x40a729.3
movzx eax, byte [eax + 0x4161e8]
jmp dword [eax*4 + 0x4161a8]
mov ecx, dword [ebp + 0x10]
push 1
push 2
push ecx
push edi
call fcn.00472740
mov edx, dword [0x4b4074]
add edx, 0x1a
push edx
push edi
call fcn.00471270
mov eax, dword [ebp + 0x14]
push 1
push 2
push eax
push edi
call fcn.00472740
mov ecx, dword [0x4b4074]
add ecx, 0x1e
push ecx
push edi
call fcn.00471270
mov edx, dword [ebp + 0x18]
push 1
push 2
push edx
push edi
call fcn.00472740
mov eax, dword [0x4b4074]
add esp, 0x40
add eax, 0x22
jmp 0x40acc3
mov ecx, dword [ebp + 0x10]
push 1
push 2
push ecx
push edi
call fcn.00472740
mov edx, dword [0x4b4074]
add edx, 0x1a
push edx
push edi
call fcn.00471270
mov eax, dword [ebp + 0x14]
push 1
push 2
push eax
push edi
call fcn.00472740
mov ecx, dword [0x4b4074]
add ecx, 0x1e
push ecx
push edi
call fcn.00471270
add esp, 0x30
push ebp
call fcn.0048124d
add esp, 4
jmp case.default.0x4109a5
mov edx, dword [ebp + 0x10]
push 1
push 2
push edx
push edi
call fcn.00472740
mov eax, dword [0x4b4074]
add eax, 0x1a
push eax
push edi
call fcn.00471270
add esp, 0x18
push ebp
call fcn.0048124d
add esp, 4
jmp case.default.0x4109a5
cmp dword [ebp + 0x10], 0xb
jbe 0x40a828
mov ecx, dword [0x4b4074]
add ecx, 0x2c
push ecx
push edi
call fcn.00471270
mov edx, dword [ebp + 0x10]
push 1
push 2
sub edx, 0xc
push edx
jmp 0x40a83f
mov eax, dword [0x4b4074]
add eax, 0x26
push eax
push edi
call fcn.00471270
mov ecx, dword [ebp + 0x10]
push 1
push 2
push ecx
push edi
call fcn.00472740
mov edx, dword [0x4b4074]
add esp, 0x18
add edx, 0x1a
push edx
push edi
call fcn.00471270
mov eax, dword [ebp + 0x14]
push 1
push 2
push eax
push edi
call fcn.00472740
mov ecx, dword [0x4b4074]
add ecx, 0x1e
push ecx
push edi
call fcn.00471270
mov edx, dword [ebp + 0x18]
push 1
push 2
push edx
push edi
call fcn.00472740
mov eax, dword [0x4b4074]
add eax, 0x22
push eax
push edi
call fcn.00471270
add esp, 0x38
push ebp
call fcn.0048124d
add esp, 4
jmp case.default.0x4109a5
cmp dword [ebp + 0x10], 0xb
jbe 0x40a8c7
mov ecx, dword [0x4b4074]
add ecx, 0x2c
push ecx
push edi
call fcn.00471270
mov edx, dword [ebp + 0x10]
push 1
push 2
sub edx, 0xc
push edx
jmp 0x40a8de
mov eax, dword [0x4b4074]
add eax, 0x26
push eax
push edi
call fcn.00471270
mov ecx, dword [ebp + 0x10]
push 1
push 2
push ecx
push edi
call fcn.00472740
mov edx, dword [0x4b4074]
add esp, 0x18
add edx, 0x1a
push edx
push edi
call fcn.00471270
mov eax, dword [ebp + 0x14]
push 1
push 2
push eax
push edi
call fcn.00472740
mov ecx, dword [0x4b4074]
add ecx, 0x1e
push ecx
push edi
call fcn.00471270
add esp, 0x20
push ebp
call fcn.0048124d
add esp, 4
jmp case.default.0x4109a5
cmp dword [ebp + 0x10], 0xb
jbe 0x40a949
mov edx, dword [0x4b4074]
add edx, 0x2c
push edx
push edi
call fcn.00471270
mov eax, dword [ebp + 0x10]
push 1
push 2
sub eax, 0xc
push eax
jmp 0x40a961
mov ecx, dword [0x4b4074]
add ecx, 0x26
push ecx
push edi
call fcn.00471270
mov edx, dword [ebp + 0x10]
push 1
push 2
push edx
push edi
call fcn.00472740
mov eax, dword [0x4b4074]
add esp, 0x18
add eax, 0x1a
jmp 0x40acc3
cmp dword [ebp + 0x10], 0xb
jbe case.0x40ac1c.10
mov ecx, dword [0x4b4074]
add ecx, 0x2c
push ecx
push edi
call fcn.00471270
add esp, 8
push ebp
call fcn.0048124d
add esp, 4
jmp case.default.0x4109a5
mov edx, dword [0x4b4074]
add edx, 0x26
push edx
push edi
call fcn.00471270
add esp, 8
push ebp
call fcn.0048124d
add esp, 4
jmp case.default.0x4109a5
mov eax, dword [ebp + 0x10]
push 1
push 2
push eax
push edi
call fcn.00472740
mov ecx, dword [0x4b4074]
add ecx, 0x16
push ecx
push edi
call fcn.00471270
mov edx, dword [ebp + 0x14]
push 1
push 2
push edx
push edi
call fcn.00472740
mov eax, dword [0x4b4074]
add eax, 0x16
push eax
push edi
call fcn.00471270
mov ecx, dword [ebp + 0x18]
push 1
push 2
push ecx
push edi
call fcn.00472740
add esp, 0x40
push ebp
call fcn.0048124d
add esp, 4
jmp case.default.0x4109a5
mov edx, dword [ebp + 0x10]
push 1
push 2
push edx
push edi
call fcn.00472740
mov eax, dword [0x4b4074]
add eax, 0x16
push eax
push edi
call fcn.00471270
mov ecx, dword [ebp + 0x14]
push 1
push 2
push ecx
push edi
call fcn.00472740
add esp, 0x28
push ebp
call fcn.0048124d
add esp, 4
jmp case.default.0x4109a5
mov edx, dword [ebp + 0x10]
push 1
push 2
push edx
push edi
call fcn.00472740
add esp, 0x10
push ebp
call fcn.0048124d
add esp, 4
jmp case.default.0x4109a5
cmp dword [ebp + 0x10], 0xb
jbe 0x40aa96
mov eax, dword [0x4b4074]
add eax, 0x38
push eax
push edi
call fcn.00471270
mov ecx, dword [ebp + 0x10]
push 1
push 2
sub ecx, 0xc
push ecx
jmp 0x40aaae
mov edx, dword [0x4b4074]
add edx, 0x32
push edx
push edi
call fcn.00471270
mov eax, dword [ebp + 0x10]
push 1
push 2
push eax
push edi
call fcn.00472740
mov ecx, dword [0x4b4074]
add esp, 0x18
add ecx, 0x16
push ecx
push edi
call fcn.00471270
mov edx, dword [ebp + 0x14]
push 1
push 2
push edx
push edi
call fcn.00472740
mov eax, dword [0x4b4074]
add eax, 0x16
push eax
push edi
call fcn.00471270
mov ecx, dword [ebp + 0x18]
push 1
push 2
push ecx
push edi
call fcn.00472740
add esp, 0x30
push ebp
call fcn.0048124d
add esp, 4
jmp case.default.0x4109a5
cmp dword [ebp + 0x10], 0xb
jbe 0x40ab26
mov edx, dword [0x4b4074]
add edx, 0x38
push edx
push edi
call fcn.00471270
mov eax, dword [ebp + 0x10]
push 1
push 2
sub eax, 0xc
push eax
jmp 0x40ab3e
mov ecx, dword [0x4b4074]
add ecx, 0x32
push ecx
push edi
call fcn.00471270
mov edx, dword [ebp + 0x10]
push 1
push 2
push edx
push edi
call fcn.00472740
mov eax, dword [0x4b4074]
add esp, 0x18
add eax, 0x16
push eax
push edi
call fcn.00471270
mov ecx, dword [ebp + 0x14]
push 1
push 2
push ecx
push edi
call fcn.00472740
add esp, 0x18
push ebp
call fcn.0048124d
add esp, 4
jmp case.default.0x4109a5
cmp dword [ebp + 0x10], 0xb
jbe 0x40abad
mov edx, dword [0x4b4074]
add edx, 0x38
push edx
push edi
call fcn.00471270
mov eax, dword [ebp + 0x10]
push 1
push 2
sub eax, 0xc
push eax
push edi
call fcn.00472740
add esp, 0x18
push ebp
call fcn.0048124d
add esp, 4
jmp case.default.0x4109a5
mov ecx, dword [0x4b4074]
add ecx, 0x32
push ecx
push edi
call fcn.00471270
mov edx, dword [ebp + 0x10]
push 1
push 2
push edx
push edi
call fcn.00472740
add esp, 0x18
push ebp
call fcn.0048124d
add esp, 4
jmp case.default.0x4109a5
cmp dword [ebp + 0x10], 0xb
jbe 0x40abef
mov eax, dword [0x4b4074]
add eax, 0x38
jmp 0x40acc3
mov ecx, dword [0x4b4074]
add ecx, 0x32
push ecx
push edi
call fcn.00471270
add esp, 8
push ebp
call fcn.0048124d
add esp, 4
jmp case.default.0x4109a5
mov eax, dword [ebp + 0x18]
cmp eax, 0xb
ja case.0x40a729.3
jmp dword [eax*4 + 0x416214]
mov edx, dword [0x4b4074]
add edx, 0x56
push edx
push edi
call fcn.00471270
add esp, 8
push ebp
call fcn.0048124d
add esp, 4
jmp case.default.0x4109a5
mov eax, dword [0x4b4074]
add eax, 0x58
jmp 0x40acc3
mov ecx, dword [0x4b4074]
add ecx, 0x5c
push ecx
push edi
call fcn.00471270
add esp, 8
push ebp
call fcn.0048124d
add esp, 4
jmp case.default.0x4109a5
mov edx, dword [0x4b4074]
add edx, 0x60
push edx
push edi
call fcn.00471270
add esp, 8
push ebp
call fcn.0048124d
add esp, 4
jmp case.default.0x4109a5
mov eax, dword [0x4b4074]
add eax, 0x68
jmp 0x40acc3
mov ecx, dword [0x4b4074]
add ecx, 0x66
push ecx
push edi
call fcn.00471270
add esp, 8
push ebp
call fcn.0048124d
add esp, 4
jmp case.default.0x4109a5
mov eax, dword [0x4b4074]
add eax, 0x2c
push eax
push edi
call fcn.00471270
add esp, 8
push ebp
call fcn.0048124d
add esp, 4
jmp case.default.0x4109a5
cmp eax, 0x1030d02
je 0x40af04
cmp eax, 0x1030e08
je 0x40ad86
cmp eax, 0x1030f03
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esi]
mov eax, dword [esp + 0x14]
push eax
mov dword [esp + 0x1c], edx
add esi, 4
call fcn.004064e0
add esp, 4
test eax, eax
je 0x40b26e
mov ecx, dword [0x6c9844]
push ecx
call fcn.00402320
add esp, 4
cmp dword [esp + 0x18], edi
mov esi, eax
je 0x40ad77
mov edx, dword [0x4bbfc8]
sub eax, dword [0x4bc864]
push edx
push 0
push 0
push eax
call fcn.0046c200
add esp, 0x10
test eax, eax
je 0x40ad77
mov ecx, dword [esp + 0x18]
mov edx, dword [0x4bc864]
lea esi, [edx + ecx]
mov dword [0x6c77a8], 1
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x20]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x2c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x24]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x38]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
push 4
lea edx, [esp + 0x40]
push edx
push eax
call fcn.0046be10
add esp, 0xc
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x3c]
push ecx
call fcn.00402320
add esp, 4
cmp dword [eax], 0x80000307
jne case.default.0x4109a5
mov ecx, dword [eax + 8]
add eax, 8
test ecx, ecx
mov dword [esp + 0x3c], ecx
mov ebp, dword [eax + 4]
je 0x40aec0
mov edx, dword [esp + 0x18]
push edx
call fcn.0046e5d0
mov edi, eax
add esp, 4
test edi, edi
je 0x40aec0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
push edi
call fcn.0046e810
mov edx, dword [esp + 0x48]
push edx
call fcn.004022f0
push eax
push edi
call fcn.00471270
add esp, 0x18
test ebp, ebp
je case.default.0x4109a5
mov eax, dword [esp + 0x2c]
push eax
call fcn.0046e5d0
mov edi, eax
add esp, 4
test edi, edi
je case.default.0x4109a5
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x24]
push ecx
push edx
push edi
call fcn.0046e810
push ebp
call fcn.004022f0
push eax
push edi
call fcn.00471270
add esp, 0x18
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
push edx
call fcn.0046d3f0
add esp, 4
jmp case.default.0x4109a5
call fcn.0046b180
jmp case.default.0x4109a5
cmp eax, 0x1031402
ja 0x40b12d
je 0x40b0f5
cmp eax, 0x1031103
je 0x40b064
cmp eax, 0x1031203
je 0x40afc1
cmp eax, 0x1031303
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
push eax
push ecx
call fcn.0046bfa0
add esp, 8
neg al
sbb eax, eax
neg eax
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x18]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [0x4bbfc8]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
push 0
push edx
shl eax, 5
add eax, 0x1a
push eax
push 0xffffffffffffffff
push 0
push ecx
call fcn.0046b600
add esp, 8
push eax
call fcn.0043be60
add esp, 0x14
test eax, eax
mov dword [0x6c77a8], eax
jne case.default.0x4109a5
mov eax, dword [0x4bbfc8]
mov edx, dword [esp + 0x14]
mov ecx, dword [0x6cdd3c]
push edx
mov edx, dword [0x6cdd38]
shl eax, 5
add eax, 0x1a
push eax
push ecx
push edx
push 0
call fcn.0043bf10
add esp, 0x14
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
push 0x104
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov edi, eax
test edi, edi
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
push edi
push eax
call fcn.0046b600
add esp, 8
call fcn.0046b690
push eax
call fcn.0046b670
mov ecx, dword [esp + 0x18]
push eax
push edi
push ecx
call fcn.00433540
add esp, 4
push eax
call fcn.004346d0
add esp, 0x10
push edi
call dword [sym.imp.KERNEL32.dll_GlobalHandle]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
push eax
call fcn.0046c060
add esp, 4
neg al
sbb eax, eax
neg eax
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
cmp eax, 0x1031503
je 0x40b279
cmp eax, 0x1031604
je 0x40b1be
cmp eax, 0x1040002
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
cmp eax, 0xa
jb 0x40b197
mov edi, 0x6cbba8
mov ecx, dword [edi]
test ecx, ecx
je 0x40b187
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [edi], ebp
add edi, 4
cmp edi, 0x6cbbd0
jl 0x40b177
jmp case.default.0x4109a5
mov ecx, dword [eax*4 + 0x6cbba8]
test ecx, ecx
je case.default.0x4109a5
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov ecx, dword [esp + 0x14]
mov dword [ecx*4 + 0x6cbba8], edi
jmp case.default.0x4109a5
mov eax, dword [esi]
add esi, 4
mov dword [esp + 0x14], eax
mov edx, dword [esi]
add esi, 4
mov dword [esp + 0x18], edx
mov ecx, dword [esi]
push eax
mov dword [esp + 0x20], ecx
add esi, 4
call fcn.004064e0
add esp, 4
test eax, eax
je 0x40b23b
mov edx, dword [0x6c9844]
push edx
call fcn.00402320
mov esi, eax
add esp, 4
test esi, esi
je 0x40b23b
cmp dword [esp + 0x18], edi
je 0x40b22c
mov eax, dword [0x4bbfc8]
push eax
push 0
mov ecx, esi
sub ecx, dword [0x4bc864]
push 0
push ecx
call fcn.0046c200
add esp, 0x10
test eax, eax
je 0x40b22c
mov edx, dword [esp + 0x18]
mov eax, dword [0x4bc864]
lea esi, [eax + edx]
mov ecx, dword [esp + 0x14]
mov dword [0x6c77a8], ecx
jmp case.default.0x4109a5
cmp dword [esp + 0x1c], edi
je 0x40b26e
mov edx, dword [0x4bbfc8]
push edx
push 0
mov eax, esi
sub eax, dword [0x4bc864]
push 0
push eax
call fcn.0046c200
add esp, 0x10
test eax, eax
je 0x40b26e
mov ecx, dword [0x4bc864]
mov edx, dword [esp + 0x1c]
lea esi, [ecx + edx]
mov dword [0x6c77a8], edi
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
push eax
push ecx
call fcn.0046bac0
add esp, 8
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
push 0xbc
lea edx, [esp + 0x1b8]
push 0
push edx
call fcn.00481aa0
mov eax, dword [esi]
lea ecx, [esp + 0x20]
push ecx
push eax
call section..text
add esp, 0x14
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x1b8]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x240]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x240], 1
jne 0x40b384
mov edx, dword [esi]
mov dword [esp + 0x244], edx
add esi, 4
jmp 0x40b3a2
mov eax, dword [esi]
lea ecx, [esp + 0x244]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x14], 0xa
jae case.default.0x4109a5
mov edx, dword [esp + 0x18]
push edx
call fcn.004022d0
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
add esp, 4
test eax, eax
je 0x40b3cf
push eax
lea eax, [esp + 0x1c0]
push eax
call edi
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.004022d0
add esp, 4
test eax, eax
je 0x40b3eb
push eax
lea edx, [esp + 0x1f0]
push edx
call edi
mov ecx, dword [esp + 0x14]
cmp dword [ecx*4 + 0x6cbba8], ebp
lea ecx, [ecx*4 + 0x6cbba8]
jne 0x40b44e
push 0x448
call fcn.004812ee
add esp, 4
mov dword [esp + 0x30], eax
mov dword [esp + 0x394], 7
test eax, eax
je 0x40b434
mov ecx, dword [0x4bbfc8]
mov edx, dword [esp + 0x14]
push ecx
push edx
mov ecx, eax
call fcn.004231f0
jmp 0x40b436
xor eax, eax
mov ecx, dword [esp + 0x14]
lea ecx, [ecx*4 + 0x6cbba8]
mov dword [esp + 0x394], 0xffffffff
mov dword [ecx], eax
mov ecx, dword [ecx]
test ecx, ecx
je case.default.0x4109a5
lea eax, [esp + 0x1b4]
push eax
call fcn.00423310
jmp case.default.0x4109a5
cmp eax, 0x1050001
ja 0x40bbb7
je 0x40bb53
cmp eax, 0x1040302
ja 0x40ba6b
je 0x40ba31
sub eax, 0x1040118
je 0x40b6cf
sub eax, 0xec
je 0x40b61c
sub eax, 6
jne 0x415e04
push 0x58
push eax
lea ecx, [esp + 0x278]
push ecx
call fcn.00481aa0
mov eax, dword [esi]
lea edx, [esp + 0x20]
push edx
push eax
call section..text
add esp, 0x14
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x18]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x2a8]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x2ac]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x298]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x29c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x2a0]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x2a4]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x274]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
cmp dword [eax*4 + 0x6cbba8], edi
je case.default.0x4109a5
mov ecx, dword [esp + 0x18]
push ecx
mov dword [esp + 0x274], 1
call fcn.004022d0
add esp, 4
test eax, eax
je 0x40b5ff
push eax
lea edx, [esp + 0x27c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx*4 + 0x6cbba8]
lea eax, [esp + 0x270]
push eax
call fcn.00423ae0
jmp case.default.0x4109a5
push 0x58
lea edx, [esp + 0x274]
push 0
push edx
call fcn.00481aa0
mov eax, dword [esi]
lea ecx, [esp + 0x20]
push ecx
push eax
call section..text
add esp, 0x14
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x274]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
cmp dword [edx*4 + 0x6cbba8], edi
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
push eax
call fcn.004022d0
add esp, 4
test eax, eax
je 0x40b6b2
push eax
lea ecx, [esp + 0x27c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [esp + 0x14]
mov ecx, dword [eax*4 + 0x6cbba8]
lea edx, [esp + 0x270]
push edx
call fcn.00423ae0
jmp case.default.0x4109a5
push 0xbc
lea ecx, [esp + 0x1b8]
push 0
push ecx
call fcn.00481aa0
mov eax, dword [esi]
lea edx, [esp + 0x20]
push edx
push eax
call section..text
add esp, 0x14
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x18]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x1c]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x21c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x220]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1dc]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x1e0]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1e4]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x1e8]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x224]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x228]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x20c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x210]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x214]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x218]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x22c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x23c]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x238]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x230]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x234]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x1b8]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x240]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x240], 1
jne 0x40b986
mov edx, dword [esi]
mov dword [esp + 0x244], edx
add esi, 4
jmp 0x40b9a4
mov eax, dword [esi]
lea ecx, [esp + 0x244]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x14], 0xa
jae case.default.0x4109a5
mov edx, dword [esp + 0x18]
push edx
call fcn.004022d0
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
add esp, 4
test eax, eax
je 0x40b9d1
push eax
lea eax, [esp + 0x1c0]
push eax
call edi
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.004022d0
add esp, 4
test eax, eax
je 0x40b9ed
push eax
lea edx, [esp + 0x1f0]
push edx
call edi
mov ecx, dword [esp + 0x14]
cmp dword [ecx*4 + 0x6cbba8], ebp
lea ecx, [ecx*4 + 0x6cbba8]
mov dword [esp + 0x1b4], 0xf
jne 0x40b44e
push 0x448
call fcn.004812ee
add esp, 4
mov dword [esp + 0x30], eax
mov dword [esp + 0x394], 8
jmp 0x40b41b
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
mov ecx, dword [edx*4 + 0x6cbba8]
test ecx, ecx
je case.default.0x4109a5
push 1
call fcn.00424550
jmp case.default.0x4109a5
cmp eax, 0x1040402
je 0x40bb1b
cmp eax, 0x1040503
je 0x40bac3
cmp eax, 0x1040602
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
mov eax, dword [edx*4 + 0x6cbba8]
test eax, eax
je case.default.0x4109a5
mov eax, dword [eax + 0x44]
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
mov ecx, dword [eax*4 + 0x6cbba8]
test ecx, ecx
je case.default.0x4109a5
mov edx, dword [esp + 0x18]
push edx
call fcn.004243a0
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
mov ecx, dword [edx*4 + 0x6cbba8]
test ecx, ecx
je case.default.0x4109a5
call fcn.00424600
jmp case.default.0x4109a5
mov ecx, dword [0x4bc85c]
cmp ecx, ebp
je 0x40bb64
push 1
call fcn.00402750
push 0x78
call fcn.004812ee
add esp, 4
mov dword [esp + 0x30], eax
test eax, eax
mov dword [esp + 0x394], 9
je 0x40bb8a
mov ecx, eax
call fcn.004278a0
jmp 0x40bb8c
xor eax, eax
test eax, eax
mov dword [esp + 0x394], 0xffffffff
mov dword [0x4bc85c], eax
je case.default.0x4109a5
mov ecx, dword [0x4bcc70]
push ecx
mov ecx, eax
call fcn.004278f0
jmp case.default.0x4109a5
cmp eax, 0x1050402
ja 0x40bc67
je 0x40bc2f
cmp eax, 0x1050102
je 0x4129a8
cmp eax, 0x1050202
je 0x40bbf2
cmp eax, 0x1050301
jne 0x415e04
mov edx, dword [0x6cbbd4]
mov dword [0x6c77a8], edx
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov ecx, dword [0x4bc85c]
test ecx, ecx
mov eax, dword [esp + 0x14]
mov dword [0x6cbbd4], eax
je case.default.0x4109a5
push eax
call fcn.00427b80
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov ecx, dword [0x4bc85c]
test ecx, ecx
je case.default.0x4109a5
mov eax, dword [esp + 0x14]
push eax
call fcn.00427b90
jmp case.default.0x4109a5
cmp eax, 0x1050504
je 0x40bca7
cmp eax, 0x1051102
jne 0x415e04
mov eax, dword [esi]
mov ecx, dword [0x4bc85c]
add esi, 4
cmp ecx, ebp
mov dword [esp + 0x14], eax
je case.default.0x4109a5
mov edx, dword [0x58cfbc]
push eax
push edx
mov dword [0x6c6d38], eax
call fcn.00429100
jmp case.default.0x4109a5
mov edi, dword [esi]
lea ecx, [esp + 0x18]
add esi, 4
mov dword [esp + 0x14], edi
mov eax, dword [esi]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x1c]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [0x4bc85c]
test edx, edx
je case.default.0x4109a5
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
push eax
push ecx
push edi
call fcn.004022d0
add esp, 4
push eax
mov ecx, edx
call fcn.00427990
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
cmp eax, 0xffffffff
jne 0x40bd42
call fcn.00427520
jmp case.default.0x4109a5
push eax
call fcn.00427580
mov eax, dword [esp + 0x18]
push eax
call fcn.004266e0
add esp, 8
jmp case.default.0x4109a5
cmp eax, 0x2000b02
ja 0x40c80e
je 0x40c7ca
cmp eax, 0x1810103
ja 0x40c6a4
je 0x40c5da
cmp eax, 0x1060804
ja 0x40c460
je 0x40c3e1
cmp eax, 0x106040a
ja 0x40c2c7
je 0x40c175
cmp eax, 0x1060107
je 0x40c08c
cmp eax, 0x106020b
je 0x40bf11
cmp eax, 0x106030c
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x20]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x2c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x24]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x38]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esi]
lea ecx, [esp + 0x34]
mov dword [esp + 0x3c], edx
mov eax, dword [esi + 4]
add esi, 4
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov ebp, dword [esi]
mov edx, dword [esp + 0x14]
mov ebx, dword [esi + 4]
add esi, 4
push edx
add esi, 4
call fcn.00426740
mov edi, eax
add esp, 4
test edi, edi
je 0x4085b5
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x20]
push eax
mov eax, dword [esp + 0x20]
push ecx
mov ecx, dword [esp + 0x44]
push edx
push eax
push ecx
call fcn.004022d0
mov edx, dword [esp + 0x2c]
add esp, 4
push eax
push edx
mov ecx, edi
call fcn.00426390
cmp eax, 0xffffffff
mov dword [esp + 0x28], eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x38]
push ecx
push ebx
push ebp
push edx
push 1
jmp 0x40c2b1
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x20]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x2c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x24]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x38]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esi]
lea ecx, [esp + 0x34]
mov dword [esp + 0x3c], edx
mov eax, dword [esi + 4]
add esi, 4
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
mov ebp, dword [esi]
push edx
add esi, 4
call fcn.00426740
mov edi, eax
add esp, 4
test edi, edi
je case.default.0x4109a5
mov eax, dword [esp + 0x3c]
push eax
call fcn.004022d0
add esp, 4
test eax, eax
je 0x40c062
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x2c]
push ecx
mov ecx, dword [esp + 0x24]
push edx
mov edx, dword [esp + 0x24]
push ecx
push edx
push eax
mov eax, dword [esp + 0x2c]
push eax
mov ecx, edi
call fcn.00426390
cmp eax, 0xffffffff
mov dword [esp + 0x28], eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x38]
push ecx
push 0
push ebp
push edx
push 0
jmp 0x40c2b1
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x18]
push ecx
push 0
push ebp
push edx
push 3
push eax
mov ecx, edi
call fcn.004264c0
mov ecx, dword [esp + 0x18]
mov dword [0x6c77a8], ecx
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
mov dword [esp + 0x18], eax
mov eax, dword [esi + 4]
add esi, 4
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x20]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x2c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x24]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
push eax
call fcn.00426740
mov edx, eax
add esp, 4
test edx, edx
jne 0x40c147
mov ecx, dword [esp + 0x14]
push ecx
call fcn.004266e0
mov edx, eax
add esp, 4
test edx, edx
je case.default.0x4109a5
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x2c]
push eax
mov eax, dword [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x24]
push eax
mov eax, dword [esp + 0x24]
push ecx
push eax
call fcn.004022d0
add esp, 4
push eax
mov ecx, edx
call fcn.00425dd0
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x20]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x2c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x24]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov ebp, dword [esi]
mov eax, dword [esi + 4]
lea ecx, [esp + 0x3c]
add esi, 4
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x34]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
push eax
call fcn.00426740
mov edi, eax
add esp, 4
test edi, edi
je case.default.0x4109a5
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x20]
push ecx
mov ecx, dword [esp + 0x20]
push edx
push eax
push ecx
push ebp
call fcn.004022d0
mov edx, dword [esp + 0x2c]
add esp, 4
push eax
push edx
mov ecx, edi
call fcn.00426390
cmp eax, 0xffffffff
mov dword [esp + 0x28], eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x34]
push ecx
push 0
push edx
push 3
push 2
push eax
mov ecx, edi
call fcn.004264c0
mov eax, dword [esp + 0x28]
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
cmp eax, 0x1060502
je 0x40c37f
cmp eax, 0x1060602
je 0x40c343
cmp eax, 0x1060703
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
push eax
call fcn.00426740
add esp, 4
test eax, eax
je case.default.0x4109a5
cmp dword [esp + 0x18], edi
setne cl
push ecx
mov ecx, eax
call fcn.00426860
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
push eax
call fcn.00426740
add esp, 4
test eax, eax
je case.default.0x4109a5
mov ecx, eax
call fcn.004267c0
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
push edx
call fcn.00426740
add esp, 4
test eax, eax
je 0x40c3c4
mov ecx, dword [0x6c77b0]
shr ecx, 0x1f
and ecx, 0xffffff01
push 0
push ecx
mov ecx, eax
call fcn.00426f80
mov edx, dword [0x6c77b0]
shr edx, 0x1f
and edx, 0xffffff01
push edx
call fcn.00426e60
add esp, 4
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
push edx
call fcn.00426740
add esp, 4
test eax, eax
je case.default.0x4109a5
cmp dword [esp + 0x1c], edi
mov edx, dword [esp + 0x18]
setne cl
push ecx
push edx
mov ecx, eax
call fcn.00426940
jmp case.default.0x4109a5
cmp eax, 0x1800101
ja 0x40c593
je case.default.0x4109a5
cmp eax, 0x1070008
je 0x40c4bc
cmp eax, 0x1070102
je 0x40c48f
cmp eax, 0x1800001
jne 0x415e04
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
push edx
call fcn.00429500
add esp, 4
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x20]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x2c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
mov edx, dword [0x4bbfc8]
mov ecx, dword [esi + 4]
push edx
mov edx, dword [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x34]
add esi, 4
push eax
mov eax, dword [esp + 0x28]
add ecx, eax
push ecx
mov ecx, dword [esp + 0x28]
add edx, ecx
push edx
push eax
mov eax, dword [esp + 0x2c]
push ecx
push eax
add esi, 4
call fcn.00429450
add esp, 0x20
test eax, eax
je 0x4085b5
mov ecx, dword [esp + 0x14]
mov dword [0x6c77a8], ecx
jmp case.default.0x4109a5
cmp eax, 0x1800202
je 0x40c5ba
cmp eax, 0x1800302
je 0x4068db
cmp eax, 0x1810001
jne 0x415e04
call fcn.0045a950
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
jne case.default.0x4109a5
jmp 0x41605c
mov edx, dword [esi]
add esi, 4
mov dword [esp + 0x14], edx
mov eax, dword [esi]
mov dword [esp + 0x18], eax
add esi, 4
call fcn.0045cd90
cmp eax, 0x66
ja case.0x40c5fd.4
movzx ecx, byte [eax + 0x416254]
jmp dword [ecx*4 + 0x416244]
cmp dword [esp + 0x18], edi
mov dword [0x6c77a8], edi
je case.default.0x4109a5
mov ecx, dword [0x4bbfc8]
push ecx
push 0
mov edx, esi
sub edx, dword [0x4bc864]
push 0
push edx
call fcn.0046c200
add esp, 0x10
test eax, eax
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
mov ecx, dword [0x4bc864]
lea esi, [ecx + eax]
jmp case.default.0x4109a5
mov edx, dword [0x6c9844]
push edx
call fcn.00402320
add esp, 4
mov esi, eax
cmp dword [esp + 0x14], edi
mov dword [0x6c77a8], 1
je case.default.0x4109a5
mov eax, dword [0x4bbfc8]
push eax
push 0
mov ecx, esi
sub ecx, dword [0x4bc864]
push 0
push ecx
call fcn.0046c200
add esp, 0x10
test eax, eax
je case.default.0x4109a5
mov edx, dword [0x4bc864]
mov eax, dword [esp + 0x14]
lea esi, [edx + eax]
jmp case.default.0x4109a5
cmp eax, 0x2000403
ja 0x40c7a0
je 0x40c95d
cmp eax, 0x2000002
ja 0x40c77a
je 0x40c72b
cmp eax, 0x1820001
je 0x40c6fe
cmp eax, 0x1820101
je 0x40c6f3
cmp eax, 0x1830001
jne 0x415e04
call fcn.00405ee0
test al, al
je case.default.0x4109a5
mov esi, dword [0x4bbfd0]
jmp case.default.0x4109a5
lea edx, [esi + 4]
push edx
push 0x3e9
jmp 0x40c707
lea edx, [esi + 4]
push edx
push 0x3e8
mov eax, dword [0x4bcc70]
mov ecx, dword [0x58cfbc]
push eax
push ecx
call fcn.004053a0
add esp, 0x10
test eax, eax
je case.default.0x4109a5
mov esi, eax
jmp case.default.0x4109a5
mov eax, dword [esi]
add esi, 4
sub eax, 1
je 0x40c767
sub eax, 1
je 0x40c754
sub eax, 1
jne case.default.0x4109a5
mov ecx, 0x7d0
mov edi, 0x6cbdd0
rep stosd dword es:[edi], eax
jmp case.default.0x4109a5
mov ecx, 0x7d0
xor eax, eax
mov edi, 0x6c9858
rep stosd dword es:[edi], eax
jmp case.default.0x4109a5
mov ecx, 0x7d0
xor eax, eax
mov edi, 0x6c77e8
rep stosd dword es:[edi], eax
jmp case.default.0x4109a5
cmp eax, 0x2000103
je 0x40c95d
cmp eax, 0x2000203
je 0x40c95d
cmp eax, 0x2000303
je 0x40c95d
jmp 0x415e04
cmp eax, 0x2000802
ja 0x40c7f3
je 0x40c7ca
cmp eax, 0x2000503
je 0x40c95d
cmp eax, 0x2000603
je 0x40c95d
cmp eax, 0x2000702
jne 0x415e04
mov eax, dword [esi - 4]
sub esi, 4
add esi, 4
mov dword [esp + 0x14], eax
mov ecx, dword [esi]
push ecx
push eax
add esi, 4
call fcn.00401150
add esp, 8
test eax, eax
jne case.default.0x4109a5
jmp 0x41605c
cmp eax, 0x2000903
je 0x40c95d
cmp eax, 0x2000a03
je 0x40c95d
jmp 0x415e04
cmp eax, 0x2010403
ja 0x40c926
je 0x40c95d
cmp eax, 0x2001803
ja 0x40c8b3
je 0x40c8d9
cmp eax, 0x2001405
ja 0x40c899
je 0x40c852
cmp eax, 0x2001105
je 0x40c852
cmp eax, 0x2001205
je 0x40c852
cmp eax, 0x2001305
jne 0x415e04
mov eax, dword [esi - 4]
sub esi, 4
add esi, 4
mov dword [esp + 0x14], eax
mov ecx, dword [esi]
add esi, 4
mov dword [esp + 0x18], ecx
mov edx, dword [esi]
add esi, 4
mov dword [esp + 0x1c], edx
mov edi, dword [esi]
add esi, 4
mov dword [esp + 0x20], edi
mov ebx, dword [esi]
push ebx
push edi
push edx
push ecx
push eax
add esi, 4
call fcn.00401df0
add esp, 0x14
test eax, eax
jne case.default.0x4109a5
jmp 0x41605c
cmp eax, 0x2001505
je 0x40c852
cmp eax, 0x2001605
je 0x40c852
cmp eax, 0x2001703
je 0x40c8d9
jmp 0x415e04
cmp eax, 0x2010003
ja 0x40c90c
je 0x40c95d
cmp eax, 0x2001905
je 0x40c852
cmp eax, 0x2001a05
je 0x40c852
cmp eax, 0x2001b03
jne 0x415e04
mov eax, dword [esi - 4]
sub esi, 4
add esi, 4
mov dword [esp + 0x14], eax
mov ecx, dword [esi]
add esi, 4
mov dword [esp + 0x18], ecx
mov edx, dword [esi]
push edx
push ecx
push eax
add esi, 4
call fcn.00401c80
add esp, 0xc
test eax, eax
jne case.default.0x4109a5
jmp 0x41605c
cmp eax, 0x2010103
je 0x40c95d
cmp eax, 0x2010203
je 0x40c95d
cmp eax, 0x2010303
je 0x40c95d
jmp 0x415e04
cmp eax, 0x3000202
ja 0x40cba3
je 0x40cb7b
cmp eax, 0x2020002
ja 0x40c9bd
je 0x40c990
cmp eax, 0x2010503
je 0x40c95d
cmp eax, 0x2010603
je 0x40c95d
cmp eax, 0x2010703
jne 0x415e04
mov eax, dword [esi - 4]
sub esi, 4
add esi, 4
mov dword [esp + 0x14], eax
mov ecx, dword [esi]
add esi, 4
mov dword [esp + 0x18], ecx
mov edx, dword [esi]
push edx
push ecx
push eax
add esi, 4
call fcn.00401310
add esp, 0xc
test eax, eax
jne case.default.0x4109a5
jmp 0x41605c
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
push eax
call fcn.0046c360
add esp, 4
jmp case.default.0x4109a5
cmp eax, 0x2020102
je 0x40cb4e
cmp eax, 0x300000b
je 0x40ca14
cmp eax, 0x3000102
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esp + 0x1c]
add esp, 8
add esi, 4
cmp eax, 0xffffffff
jne 0x40ca00
call fcn.004729b0
jmp case.default.0x4109a5
push eax
call fcn.0046e5d0
push eax
call fcn.00472900
add esp, 8
jmp case.default.0x4109a5
push 0x54
lea edx, [esp + 0x104]
push 0
push edx
call fcn.00481aa0
mov eax, dword [esi]
lea ecx, [esp + 0x110]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x11c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x128]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x134]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x140]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x154]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x154]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
add esp, 0x44
lea edx, [esp + 0x11c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
add esi, 4
mov dword [esp + 0x1c], eax
mov dword [esp + 0x13c], eax
mov dword [esp + 0x138], eax
mov dword [esp + 0x134], eax
mov dword [esp + 0x130], eax
mov eax, 0x513974
lea ecx, [esp + 0x108]
add esi, 4
mov dword [esp + 0x14c], eax
mov dword [esp + 0x148], eax
mov dword [esp + 0x144], eax
mov dword [esp + 0x140], eax
mov eax, dword [esi]
push ecx
push eax
call section..text
mov eax, dword [0x4bbfc8]
mov edx, dword [0x4bcc6c]
push eax
lea ecx, [esp + 0x114]
push ecx
add esi, 4
mov dword [esp + 0x118], edx
call fcn.00472870
add esp, 0x18
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
push eax
call fcn.0046c400
add esp, 4
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edx, dword [esp + 0x1c]
push edx
add esi, 4
call fcn.0046e5d0
push eax
call fcn.00471630
add esp, 0x10
jmp case.default.0x4109a5
cmp eax, 0x3000604
ja 0x40ccf9
je 0x40cc9f
cmp eax, 0x3000303
je 0x40cc60
cmp eax, 0x3000403
je 0x40cc15
cmp eax, 0x3000503
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
add esp, 0x10
push eax
push ecx
add esi, 4
call fcn.0046e5d0
add esp, 4
push eax
call fcn.0046e700
add esp, 8
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x24]
push edx
add esi, 4
call fcn.0046e5d0
add esp, 0x14
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x18]
push 1
push ecx
push eax
call fcn.00472720
add esp, 0xc
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
add esi, 4
push eax
mov dword [esp + 0x24], eax
add esi, 4
call fcn.004022f0
add esp, 0xc
push eax
mov eax, dword [esp + 0x18]
push eax
call fcn.0046e5d0
add esp, 4
push eax
call fcn.00471270
add esp, 8
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
add esp, 0x18
push edx
push eax
push ecx
add esi, 4
call fcn.0046e5d0
add esp, 4
push eax
call fcn.0046e810
add esp, 0xc
jmp case.default.0x4109a5
cmp eax, 0x3000702
je 0x40cd38
cmp eax, 0x3000802
jne 0x415e04
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esp + 0x1c]
push eax
add esi, 4
call fcn.0046b3e0
add esp, 0xc
neg eax
sbb eax, eax
neg eax
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edx, dword [esp + 0x1c]
push edx
add esi, 4
call fcn.0046e5d0
push eax
call fcn.00470910
add esp, 0x10
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
add esp, 0x10
add esi, 4
cmp dword [esp + 0x18], edi
je 0x415ebf
mov eax, dword [esp + 0x14]
push eax
call fcn.0046e5d0
push eax
call fcn.0046f2d0
add esp, 8
mov dword [ebx], 3
jmp case.default.0x4109a5
cmp eax, 0x4040e02
ja 0x411d9e
je 0x411d71
cmp eax, 0x4010f08
ja 0x40ef32
je 0x40ee55
cmp eax, 0x4001504
ja 0x40db73
je 0x40db0f
cmp eax, 0x4000603
ja 0x40d461
je 0x40d418
cmp eax, 0x3001704
ja 0x40d11f
je 0x40d0c5
cmp eax, 0x3001303
ja 0x40cf7c
je 0x40cf38
cmp eax, 0x3001003
je 0x40cf00
cmp eax, 0x3001103
je 0x40ce9f
cmp eax, 0x3001206
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x84]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x90]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x9c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0xa8]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esp + 0x3c]
add esp, 0x28
lea edx, [esp + 0x7c]
push edx
push eax
jmp 0x40cee7
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
add esp, 0x10
mov dword [esp + 0x88], eax
mov dword [esp + 0x84], eax
mov dword [esp + 0x80], eax
mov dword [esp + 0x7c], eax
lea eax, [esp + 0x7c]
push eax
push ecx
add esi, 4
call fcn.0046e5d0
add esp, 4
push eax
call fcn.0046ee20
add esp, 8
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
push edx
push eax
add esi, 4
call fcn.0046e2d0
add esp, 0x18
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
add esp, 0x10
push eax
push ecx
add esi, 4
call fcn.0046e5d0
add esp, 4
push eax
call fcn.0046e640
add esp, 8
jmp case.default.0x4109a5
cmp eax, 0x3001403
je 0x40d081
cmp eax, 0x3001503
je 0x40d020
cmp eax, 0x3001606
jne 0x415e04
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x84]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x90]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x9c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0xa8]
add esi, 4
push edx
push eax
call section..text
mov ecx, dword [esp + 0x3c]
add esp, 0x28
lea eax, [esp + 0x7c]
push eax
push ecx
add esi, 4
call fcn.0046e5d0
add esp, 4
push eax
call fcn.0046ee70
add esp, 8
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esp + 0x28]
add esp, 0x10
lea edx, [esp + 0x7c]
mov dword [esp + 0x88], eax
mov dword [esp + 0x84], eax
mov dword [esp + 0x80], eax
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x14]
push edx
push eax
add esi, 4
call fcn.0046e5d0
add esp, 4
push eax
call fcn.0046ee70
add esp, 8
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
add esp, 0x10
push eax
push ecx
add esi, 4
call fcn.0046e5d0
add esp, 4
push eax
call fcn.0046e880
add esp, 8
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x2c]
add esp, 0x18
push eax
push ecx
push edx
add esi, 4
call fcn.0046e5d0
add esp, 4
push eax
call fcn.0046ed10
add esp, 0xc
jmp case.default.0x4109a5
cmp eax, 0x4000201
ja 0x40d30b
je 0x40d2df
cmp eax, 0x3001804
je 0x40d285
cmp eax, 0x4000004
je 0x40d1cb
cmp eax, 0x4000102
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esp + 0x1c]
add esp, 8
add esi, 4
cmp eax, 0xffffffff
jne 0x40d191
mov edx, dword [esp + 0x34]
test byte [edx], 1
je 0x40d187
mov ecx, dword [0x6cb7a4]
test ecx, ecx
je 0x40d187
push 0
call fcn.0043d460
call fcn.0043ac80
jmp case.default.0x4109a5
push eax
call fcn.00433540
mov edi, eax
add esp, 4
test edi, edi
je case.default.0x4109a5
mov eax, dword [esp + 0x34]
test byte [eax], 1
je 0x40d1bd
mov ecx, dword [0x6cb7a4]
test ecx, ecx
je 0x40d1bd
push edi
call fcn.0043d460
push edi
call fcn.0043ab20
add esp, 4
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edi, dword [esi + 4]
add esi, 4
lea edx, [esp + 0x24]
add esi, 4
mov dword [esp + 0x20], edi
mov eax, dword [esi]
push edx
push eax
call section..text
mov eax, dword [0x4bbfc8]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x2c]
add esp, 0x10
shl eax, 5
push eax
push ecx
push edx
push edi
add esi, 4
call fcn.004022d0
add esp, 4
push eax
call fcn.0043bdc0
mov edi, eax
add esp, 0x10
test edi, edi
je 0x40714f
cmp dword [0x4bbfc8], ebp
jne 0x40d249
mov eax, dword [esp + 0x34]
test byte [eax], 1
je 0x40d249
cmp dword [0x6cb7a4], ebp
je 0x40d249
push edi
call fcn.00404340
add esp, 4
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0046b4b0
add esp, 4
test dword [0x6cdd10], 0x10000
je 0x40d277
test dword [edi], 0x40000
je 0x40d277
push 4
push 0
push edi
call fcn.00433400
add esp, 0xc
mov edx, dword [edi + 8]
mov dword [0x6c77a8], edx
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
add esp, 0x18
push edx
push eax
push ecx
add esi, 4
call fcn.0046e5d0
add esp, 4
push eax
call fcn.0046e8d0
add esp, 0xc
jmp case.default.0x4109a5
call fcn.0043ac80
mov edx, dword [esp + 0x34]
test byte [edx], 1
je case.default.0x4109a5
mov ecx, dword [0x6cb7a4]
test ecx, ecx
je case.default.0x4109a5
push 0
call fcn.0043d460
jmp case.default.0x4109a5
cmp eax, 0x4000304
je 0x40d3b4
cmp eax, 0x4000403
je 0x40d36e
cmp eax, 0x4000503
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
add esp, 0x10
push 0
push eax
push ecx
add esi, 4
call fcn.00433540
add esp, 4
push eax
call fcn.00432530
add esp, 0xc
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
add esp, 0x10
push 0
push edx
push eax
add esi, 4
call fcn.00433540
add esp, 4
push eax
call fcn.00436b60
add esp, 0xc
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
fild dword [esp + 0x34]
mov edx, dword [esp + 0x2c]
add esp, 0x18
push 0
sub esp, 8
fstp dword [esp + 4]
add esi, 4
fild dword [esp + 0x24]
fstp dword [esp]
push edx
call fcn.00433540
add esp, 4
push eax
call fcn.00436a50
add esp, 0x10
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
fild dword [esp + 0x28]
mov eax, dword [esp + 0x24]
add esp, 0x10
push 0
push ecx
fstp dword [esp]
push eax
add esi, 4
call fcn.00433540
add esp, 4
push eax
call fcn.00432a40
add esp, 0xc
jmp case.default.0x4109a5
cmp eax, 0x4000d04
ja 0x40d7e1
je 0x40d77d
cmp eax, 0x4000902
ja 0x40d657
je 0x40d626
cmp eax, 0x4000606
je 0x40d548
cmp eax, 0x4000703
je 0x40d4ff
cmp eax, 0x4000804
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
fild dword [esp + 0x34]
mov edx, dword [esp + 0x2c]
add esp, 0x10
fstp dword [esp + 4]
add esi, 4
fild dword [esp + 0x20]
fstp dword [esp]
push edx
call fcn.00433540
add esp, 4
push eax
call fcn.00436fd0
add esp, 0xc
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
fild dword [esp + 0x28]
mov eax, dword [esp + 0x24]
add esp, 0x10
push 0
push ecx
fstp dword [esp]
push eax
add esi, 4
call fcn.00433540
add esp, 4
push eax
call fcn.00432080
add esp, 0xc
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x28
push 0
add esi, 4
sub esp, 0xc
cmp dword [esp + 0x3c], edi
je 0x40d5f4
fild dword [esp + 0x3c]
mov edx, dword [esp + 0x24]
fstp dword [esp + 0x40]
fild dword [esp + 0x30]
fld dword [esp + 0x40]
fld st(0)
fdivp st(2)
fxch st(1)
fstp dword [esp + 0x40]
fld dword [esp + 0x40]
fstp dword [esp + 8]
fild dword [esp + 0x2c]
fdiv st(1)
fstp dword [esp + 0x40]
fld dword [esp + 0x40]
fstp dword [esp + 4]
fidivr dword [esp + 0x28]
fstp dword [esp + 0x40]
fld dword [esp + 0x40]
fstp dword [esp]
push edx
jmp 0x40d610
fild dword [esp + 0x30]
mov eax, dword [esp + 0x24]
fstp dword [esp + 8]
fild dword [esp + 0x2c]
fstp dword [esp + 4]
fild dword [esp + 0x28]
fstp dword [esp]
push eax
call fcn.00433540
add esp, 4
push eax
call fcn.00432ca0
add esp, 0x14
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edx, dword [esp + 0x1c]
push edx
mov dword [esp + 0x34], eax
add esi, 4
call fcn.0046b470
add esp, 0xc
neg eax
sbb eax, eax
neg eax
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
cmp eax, 0x4000a0a
je 0x415872
cmp eax, 0x4000b03
je 0x40d700
cmp eax, 0x4000c06
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x94]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0xa0]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0xac]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0xb8]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esp + 0x3c]
add esp, 0x28
push 0
lea edx, [esp + 0x90]
push edx
push eax
add esi, 4
call fcn.00433540
add esp, 4
push eax
call fcn.00433830
add esp, 0xc
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov ecx, dword [esp + 0x28]
add esp, 0x10
add esi, 4
test ecx, ecx
jne 0x40d735
mov ecx, 0xb
mov dword [esp + 0x18], ecx
mov eax, dword [0x4bbfc8]
shl eax, 5
add ecx, eax
push ecx
push eax
call fcn.00431b10
mov eax, dword [0x4bbfc8]
mov edx, dword [esp + 0x20]
shl eax, 5
lea ecx, [eax + edx]
push ecx
push eax
call fcn.0043ac10
mov edx, dword [0x4bbfc8]
mov eax, dword [esp + 0x24]
shl edx, 5
push edx
push eax
call fcn.0043c070
add esp, 0x18
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
fild dword [esp + 0x34]
mov edx, dword [esp + 0x2c]
add esp, 0x18
push 0
sub esp, 8
fstp dword [esp + 4]
add esi, 4
fild dword [esp + 0x24]
fstp dword [esp]
push edx
call fcn.00433540
add esp, 4
push eax
call fcn.00432250
add esp, 0x10
jmp case.default.0x4109a5
cmp eax, 0x4001105
ja 0x40d960
je 0x40d8ee
cmp eax, 0x4000e03
je 0x40d8a8
cmp eax, 0x4000f03
je 0x40d865
cmp eax, 0x4001003
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x24]
push eax
add esi, 4
call fcn.00433540
add esp, 0x14
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
push ecx
push edx
call fcn.00433540
add esp, 4
push eax
call fcn.00431be0
add esp, 8
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x28]
add esp, 0x10
add esi, 4
test eax, eax
je case.default.0x4109a5
push eax
mov eax, dword [esp + 0x18]
push eax
call fcn.00433aa0
add esp, 8
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
add esp, 0x10
push 3
push eax
push ecx
add esi, 4
call fcn.00433540
add esp, 4
push eax
call fcn.00433400
add esp, 0xc
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x38]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
add esp, 0x20
push 0
push edx
mov edx, dword [esp + 0x1c]
push eax
push ecx
push edx
add esi, 4
call fcn.00433540
add esp, 4
push eax
call fcn.004370a0
add esp, 0x14
jmp case.default.0x4109a5
cmp eax, 0x4001204
je 0x40dab0
cmp eax, 0x4001306
je 0x40d9ff
cmp eax, 0x4001405
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edi, dword [esi + 4]
add esi, 4
lea edx, [esp + 0x24]
add esi, 4
mov dword [esp + 0x20], edi
mov eax, dword [esi]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x30]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x34]
add esp, 0x18
push edx
push edi
add esi, 4
call fcn.004022d0
add esp, 4
push eax
mov eax, dword [esp + 0x1c]
push eax
call fcn.0043c190
add esp, 0xc
test al, al
je 0x40714f
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0046b4b0
add esp, 4
mov edx, dword [esp + 0x14]
mov dword [0x6c77a8], edx
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x28
add esi, 4
cmp dword [esp + 0x20], edi
je 0x40da66
fild dword [esp + 0x1c]
fidiv dword [esp + 0x20]
jmp 0x40da78
mov edx, dword [esp + 0x1c]
fild dword [esp + 0x1c]
test edx, edx
jge 0x40da78
fadd dword [0x49a4d0]
mov eax, dword [esp + 0x2c]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
mov ecx, dword [esp + 0x14]
push 0
push eax
sub esp, 8
fstp dword [esp + 4]
fild dword [esp + 0x28]
fstp dword [esp]
push ecx
call fcn.00433540
add esp, 4
push eax
call fcn.00433e40
add esp, 0x14
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
fild dword [esp + 0x34]
mov eax, dword [esp + 0x2c]
add esp, 0x10
fstp dword [esp + 4]
add esi, 4
fild dword [esp + 0x20]
fstp dword [esp]
push eax
call fcn.00433540
add esp, 4
push eax
call fcn.00433d10
add esp, 0xc
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
fild dword [esp + 0x34]
mov edx, dword [esp + 0x2c]
add esp, 0x18
push 0
sub esp, 8
fstp dword [esp + 4]
add esi, 4
fild dword [esp + 0x24]
fstp dword [esp]
push edx
call fcn.00433540
add esp, 4
push eax
call fcn.00431e30
add esp, 0x10
jmp case.default.0x4109a5
cmp eax, 0x4010605
ja 0x40e4bf
je 0x40e436
cmp eax, 0x4010206
ja 0x40df62
je 0x40deb9
cmp eax, 0x4001803
ja 0x40dd3e
je 0x40dcdb
sub eax, 0x4001604
je 0x40dc7f
sub eax, 0x100
je 0x40dc1c
sub eax, 1
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x34]
add esp, 0x20
push eax
mov eax, dword [esp + 0x1c]
push ecx
push edx
push 0xffffffffffffffff
push eax
jmp 0x40dc61
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
add esp, 0x18
push 0
push edx
push eax
push 0xffffffffffffffff
push ecx
add esi, 4
call fcn.00433540
add esp, 4
push eax
call fcn.0043c140
add esp, 0x14
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x2c]
add esp, 0x18
push 0
push eax
push ecx
push edx
add esi, 4
call fcn.00433540
add esp, 4
push eax
call fcn.004339f0
add esp, 0x10
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov ecx, dword [esp + 0x28]
mov eax, ecx
add esp, 0x10
add esi, 4
sub eax, 0
je 0x40dd20
sub eax, 1
je 0x40dd19
sub eax, 8
jne 0x40dd26
lea ecx, [eax + 1]
jmp 0x40dd22
mov ecx, 2
jmp 0x40dd22
xor ecx, ecx
mov dword [esp + 0x18], ecx
mov eax, dword [esp + 0x14]
push ecx
push eax
call fcn.0043ace0
add esp, 8
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
cmp eax, 0x4010001
je 0x40de6b
cmp eax, 0x4010103
je 0x40ddf4
cmp eax, 0x4010205
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
add esp, 0x20
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
push eax
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
fild dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
push 0
push 0
push 0
sub esp, 8
fstp dword [esp + 4]
fild dword [esp + 0x30]
fstp dword [esp]
push eax
push ecx
mov ecx, dword [0x6c77ac]
call fcn.0043c6a0
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
xor edx, edx
add esp, 0x10
add esi, 4
cmp dword [esp + 0x18], edx
sete dl
cmp dword [0x6c77ac], edi
mov dword [0x4b4004], edx
je case.default.0x4109a5
call fcn.004752b0
mov ecx, dword [esp + 0x14]
lea edx, [eax + ecx]
mov ecx, dword [0x6c77ac]
push edx
push eax
mov dword [esp + 0x30], eax
call fcn.004373d0
test dword [0x6c77b0], 0x10000000
je 0x414201
mov dword [ebx], 5
jmp case.default.0x4109a5
mov ecx, dword [0x6c77ac]
cmp ecx, ebp
je 0x40de7c
push 1
call fcn.00402770
push 0x1520
call fcn.004812ee
add esp, 4
mov dword [esp + 0x30], eax
test eax, eax
mov dword [esp + 0x394], 0xa
je 0x40dead
mov ecx, eax
call fcn.004373a0
mov dword [0x6c77ac], eax
jmp case.default.0x4109a5
xor eax, eax
mov dword [0x6c77ac], eax
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x28
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov edx, dword [esp + 0x18]
push edx
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x2c]
fild dword [esp + 0x20]
mov edx, dword [esp + 0x14]
push 1
push ecx
mov ecx, dword [0x6c77ac]
push 0
sub esp, 8
fstp dword [esp + 4]
fild dword [esp + 0x30]
fstp dword [esp]
push eax
push edx
call fcn.0043c6a0
jmp case.default.0x4109a5
cmp eax, 0x4010407
ja 0x40e2a4
je 0x40e1e2
sub eax, 0x4010307
je 0x40e11b
sub eax, 1
je 0x40e040
sub eax, 0xfe
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x28
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov edx, dword [esp + 0x18]
push edx
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
fild dword [esp + 0x2c]
mov ecx, dword [0x6c77ac]
push 0
push 0
push 0
sub esp, 0xc
fstp dword [esp + 8]
fild dword [esp + 0x38]
fstp dword [esp + 4]
fild dword [esp + 0x34]
fstp dword [esp]
push eax
mov eax, dword [esp + 0x30]
push eax
call fcn.0043c810
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x68]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x38
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov edx, dword [esp + 0x18]
push edx
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x38]
fild dword [esp + 0x24]
mov edx, dword [esp + 0x14]
push 1
push ecx
mov ecx, dword [0x6c77ac]
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [esp + 0x48]
fstp dword [esp + 8]
fild dword [esp + 0x3c]
fstp dword [esp + 4]
fild dword [esp + 0x38]
fstp dword [esp]
push eax
push edx
call fcn.0043c710
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
add esp, 0x30
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
push eax
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
fild dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
push 0
push 0
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [esp + 0x48]
fstp dword [esp + 8]
fild dword [esp + 0x3c]
fstp dword [esp + 4]
fild dword [esp + 0x38]
fstp dword [esp]
push eax
push ecx
mov ecx, dword [0x6c77ac]
call fcn.0043c710
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x38]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x30
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov edx, dword [esp + 0x18]
push edx
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x24]
fild dword [esp + 0x2c]
mov edx, dword [esp + 0x14]
push 1
push ecx
mov ecx, dword [0x6c77ac]
push 0
sub esp, 0xc
fstp dword [esp + 8]
fild dword [esp + 0x38]
fstp dword [esp + 4]
fild dword [esp + 0x34]
fstp dword [esp]
push eax
push edx
call fcn.0043c810
jmp case.default.0x4109a5
sub eax, 0x4010504
je 0x40e3c1
sub eax, 1
je 0x40e338
sub eax, 0xff
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x18
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov edx, dword [esp + 0x18]
push edx
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
push 0
push 0
push ecx
mov ecx, dword [0x6c77ac]
push eax
push edx
call fcn.0043ca20
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
add esp, 0x20
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
push eax
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push 1
push ecx
mov ecx, dword [0x6c77ac]
push edx
push eax
mov eax, dword [esp + 0x24]
push eax
call fcn.0043c9b0
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x18
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov edx, dword [esp + 0x18]
push edx
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
push 0
push 0
push ecx
mov ecx, dword [0x6c77ac]
push eax
push edx
call fcn.0043c9b0
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
add esp, 0x20
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
push eax
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push 1
push ecx
mov ecx, dword [0x6c77ac]
push edx
push eax
mov eax, dword [esp + 0x24]
push eax
call fcn.0043ca20
jmp case.default.0x4109a5
cmp eax, 0x4010a08
ja 0x40eaf1
je 0x40ea24
cmp eax, 0x4010809
ja 0x40e7dc
je 0x40e6e8
sub eax, 0x4010704
je 0x40e66e
sub eax, 1
je 0x40e5e0
sub eax, 0x103
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x68]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x38
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov edx, dword [esp + 0x18]
push edx
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
fild dword [esp + 0x38]
push 0
push 0
mov ecx, dword [0x6c77ac]
push 1
sub esp, 0x14
fstp dword [esp + 0x10]
fild dword [esp + 0x44]
fstp dword [esp + 0xc]
fild dword [esp + 0x4c]
fstp dword [esp + 8]
fild dword [esp + 0x40]
fstp dword [esp + 4]
fild dword [esp + 0x3c]
fstp dword [esp]
push eax
mov eax, dword [esp + 0x38]
push eax
call fcn.0043cc10
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
add esp, 0x20
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
push eax
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x20]
fild dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
push 1
push ecx
push 0
push ecx
mov ecx, dword [0x6c77ac]
fstp dword [esp]
push eax
push edx
call fcn.0043cba0
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x18
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov edx, dword [esp + 0x18]
push edx
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
fild dword [esp + 0x1c]
push 0
push 0
push 0
push ecx
mov ecx, dword [0x6c77ac]
fstp dword [esp]
push eax
mov eax, dword [esp + 0x28]
push eax
call fcn.0043cba0
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x68]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x74]
add esi, 4
push edx
push eax
call section..text
add esp, 0x40
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
push eax
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x3c]
fild dword [esp + 0x38]
push 1
mov edx, dword [esp + 0x18]
push ecx
mov ecx, dword [0x6c77ac]
push 1
sub esp, 0x14
fstp dword [esp + 0x10]
fild dword [esp + 0x44]
fstp dword [esp + 0xc]
fild dword [esp + 0x4c]
fstp dword [esp + 8]
fild dword [esp + 0x40]
fstp dword [esp + 4]
fild dword [esp + 0x3c]
fstp dword [esp]
push eax
push edx
call fcn.0043cc10
jmp case.default.0x4109a5
sub eax, 0x4010906
je 0x40e976
sub eax, 1
je 0x40e8b4
sub eax, 0x100
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
add esp, 0x30
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
push eax
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x2c]
push 0
push 0
push 0
push ecx
mov ecx, dword [esp + 0x30]
push edx
mov edx, dword [esp + 0x30]
push ecx
mov ecx, dword [0x6c77ac]
push edx
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.0043ce10
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
add esp, 0x30
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
push eax
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x24]
fild dword [esp + 0x2c]
mov edx, dword [esp + 0x14]
push 1
push ecx
mov ecx, dword [0x6c77ac]
push 0
sub esp, 0xc
fstp dword [esp + 8]
fild dword [esp + 0x38]
fstp dword [esp + 4]
fild dword [esp + 0x34]
fstp dword [esp]
push eax
push edx
call fcn.0043cda0
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x28
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov edx, dword [esp + 0x18]
push edx
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
fild dword [esp + 0x2c]
mov ecx, dword [0x6c77ac]
push 0
push 0
push 0
sub esp, 0xc
fstp dword [esp + 8]
fild dword [esp + 0x38]
fstp dword [esp + 4]
fild dword [esp + 0x34]
fstp dword [esp]
push eax
mov eax, dword [esp + 0x30]
push eax
call fcn.0043cda0
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x68]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x38
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov edx, dword [esp + 0x18]
push edx
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x24]
push 1
push ecx
mov ecx, dword [esp + 0x34]
push 0
push edx
mov edx, dword [esp + 0x30]
push ecx
mov ecx, dword [esp + 0x30]
push edx
mov edx, dword [esp + 0x2c]
push ecx
mov ecx, dword [0x6c77ac]
push eax
push edx
call fcn.0043ce10
jmp case.default.0x4109a5
cmp eax, 0x4010d05
ja 0x40ec9f
je 0x40ec14
cmp eax, 0x4010b03
je 0x40ebcc
cmp eax, 0x4010c02
je 0x40eb9a
cmp eax, 0x4010d04
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x18
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov edx, dword [esp + 0x18]
push edx
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
push 0
push 0
push 0
push ecx
mov ecx, dword [0x6c77ac]
push eax
push edx
call fcn.0043ce90
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov ecx, dword [0x6c77ac]
add esp, 8
add esi, 4
test ecx, ecx
je case.default.0x4109a5
mov edx, dword [esp + 0x14]
push 0
push edx
call fcn.0043b960
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov ecx, dword [0x6c77ac]
add esp, 0x10
add esi, 4
test ecx, ecx
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
push 1
push eax
push edx
call fcn.0043cf70
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
add esp, 0x20
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
push eax
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push 1
push ecx
mov ecx, dword [0x6c77ac]
push 0
push edx
push eax
mov eax, dword [esp + 0x28]
push eax
call fcn.0043ce90
jmp case.default.0x4109a5
sub eax, 0x4010e07
je 0x40ed8e
sub eax, 1
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x68]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x38
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov edx, dword [esp + 0x18]
push edx
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x38]
fild dword [esp + 0x24]
mov edx, dword [esp + 0x14]
push 1
push ecx
mov ecx, dword [0x6c77ac]
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [esp + 0x48]
fstp dword [esp + 8]
fild dword [esp + 0x3c]
fstp dword [esp + 4]
fild dword [esp + 0x38]
fstp dword [esp]
push eax
push edx
call fcn.0043c790
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
add esp, 0x30
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
push eax
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
fild dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
push 0
push 0
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [esp + 0x48]
fstp dword [esp + 8]
fild dword [esp + 0x3c]
fstp dword [esp + 4]
fild dword [esp + 0x38]
fstp dword [esp]
push eax
push ecx
mov ecx, dword [0x6c77ac]
call fcn.0043c790
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x38]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x68]
add esi, 4
push edx
push eax
call section..text
add esp, 0x38
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
push eax
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x38]
fild dword [esp + 0x24]
mov edx, dword [esp + 0x14]
push 0
push 0
push 0
push ecx
mov ecx, dword [0x6c77ac]
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [esp + 0x4c]
fstp dword [esp + 8]
fild dword [esp + 0x40]
fstp dword [esp + 4]
fild dword [esp + 0x3c]
fstp dword [esp]
push eax
push edx
call fcn.0043c900
jmp case.default.0x4109a5
cmp eax, 0x4020406
ja 0x410bae
je 0x410aa4
cmp eax, 0x4011705
ja 0x40fbd7
je 0x40fb42
cmp eax, 0x4011307
ja 0x40f4e1
je 0x40f41a
cmp eax, 0x4011105
ja 0x40f23d
je 0x40f1b0
sub eax, 0x4010f09
je 0x40f0bf
sub eax, 0xfc
je 0x40f034
sub eax, 1
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x28
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov edx, dword [esp + 0x18]
push edx
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x20]
push 1
push ecx
mov ecx, dword [esp + 0x24]
push edx
mov edx, dword [esp + 0x20]
push ecx
mov ecx, dword [0x6c77ac]
push eax
push edx
call fcn.0043ca90
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
add esp, 0x20
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
push eax
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push 0
push 0
push ecx
mov ecx, dword [0x6c77ac]
push edx
push eax
mov eax, dword [esp + 0x28]
push eax
call fcn.0043ca90
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x68]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x74]
add esi, 4
push edx
push eax
call section..text
add esp, 0x40
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
push eax
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x3c]
fild dword [esp + 0x24]
mov edx, dword [esp + 0x38]
push 1
push ecx
mov ecx, dword [0x6c77ac]
push 0
push edx
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [esp + 0x4c]
fstp dword [esp + 8]
fild dword [esp + 0x40]
fstp dword [esp + 4]
fild dword [esp + 0x3c]
fstp dword [esp]
push eax
mov eax, dword [esp + 0x38]
push eax
call fcn.0043c900
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
add esp, 0x20
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
push eax
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push 0
push 0
push ecx
push edx
push 0
mov ecx, dword [0x6c77ac]
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.0043cb10
jmp case.default.0x4109a5
sub eax, 0x4011106
je 0x40f379
sub eax, 0xff
je 0x40f2fd
sub eax, 1
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x28
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov edx, dword [esp + 0x18]
push edx
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x20]
push 1
push ecx
mov ecx, dword [esp + 0x24]
push edx
mov edx, dword [esp + 0x20]
push ecx
mov ecx, dword [0x6c77ac]
push 1
push eax
push edx
call fcn.0043cb10
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
add esp, 0x20
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
push eax
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push 0
push 0
push ecx
push edx
push 1
jmp 0x40f227
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x28
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov edx, dword [esp + 0x18]
push edx
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x20]
push 1
push ecx
mov ecx, dword [esp + 0x24]
push edx
mov edx, dword [esp + 0x20]
push ecx
mov ecx, dword [0x6c77ac]
push 0
push eax
push edx
call fcn.0043cb10
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
add esp, 0x30
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
push eax
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
fild dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
push 0
push 0
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [esp + 0x48]
fstp dword [esp + 8]
fild dword [esp + 0x3c]
fstp dword [esp + 4]
fild dword [esp + 0x38]
fstp dword [esp]
push eax
push ecx
mov ecx, dword [0x6c77ac]
call fcn.0043cfb0
jmp case.default.0x4109a5
cmp eax, 0x4011508
ja 0x40f8d5
je 0x40f7f5
sub eax, 0x4011308
je 0x40f71a
sub eax, 0x101
je 0x40f621
sub eax, 1
jne 0x415e04
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x38]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x68]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x74]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
add esp, 0x40
lea edx, [esp + 0x34]
add esi, 4
push edx
push eax
call section..text
add esp, 8
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
push eax
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x34]
fild dword [esp + 0x3c]
push 1
push ecx
push 0
sub esp, 0x18
fstp dword [esp + 0x14]
mov edx, dword [esp + 0x38]
fild dword [esp + 0x5c]
mov ecx, dword [0x6c77ac]
fstp dword [esp + 0x10]
fild dword [esp + 0x48]
fstp dword [esp + 0xc]
fild dword [esp + 0x50]
fstp dword [esp + 8]
fild dword [esp + 0x44]
fstp dword [esp + 4]
fild dword [esp + 0x40]
fstp dword [esp]
push eax
push edx
call fcn.0043d050
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x68]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x74]
add esi, 4
push edx
push eax
call section..text
add esp, 0x40
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
push eax
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
fild dword [esp + 0x3c]
push 0
push 0
mov ecx, dword [esp + 0x1c]
push 0
sub esp, 0x18
fstp dword [esp + 0x14]
fild dword [esp + 0x5c]
fstp dword [esp + 0x10]
fild dword [esp + 0x48]
fstp dword [esp + 0xc]
fild dword [esp + 0x50]
fstp dword [esp + 8]
fild dword [esp + 0x44]
fstp dword [esp + 4]
fild dword [esp + 0x40]
fstp dword [esp]
push eax
push ecx
mov ecx, dword [0x6c77ac]
call fcn.0043d050
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x38]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x68]
add esi, 4
push edx
push eax
call section..text
add esp, 0x38
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
push eax
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x38]
fild dword [esp + 0x24]
mov edx, dword [esp + 0x14]
push 1
push ecx
mov ecx, dword [0x6c77ac]
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [esp + 0x48]
fstp dword [esp + 8]
fild dword [esp + 0x3c]
fstp dword [esp + 4]
fild dword [esp + 0x38]
fstp dword [esp]
push eax
push edx
call fcn.0043cfb0
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x68]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x38
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov edx, dword [esp + 0x18]
push edx
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
fild dword [esp + 0x38]
push 0
push 0
mov ecx, dword [0x6c77ac]
push 1
sub esp, 0x14
fstp dword [esp + 0x10]
fild dword [esp + 0x44]
fstp dword [esp + 0xc]
fild dword [esp + 0x4c]
fstp dword [esp + 8]
fild dword [esp + 0x40]
fstp dword [esp + 4]
fild dword [esp + 0x3c]
fstp dword [esp]
push eax
mov eax, dword [esp + 0x38]
push eax
call fcn.0043ccb0
jmp case.default.0x4109a5
sub eax, 0x4011509
je 0x40fa4e
sub eax, 0xfd
je 0x40f9ab
sub eax, 1
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
add esp, 0x30
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
push eax
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x2c]
push 1
push ecx
mov ecx, dword [esp + 0x28]
push 0
push edx
mov edx, dword [esp + 0x2c]
push ecx
mov ecx, dword [0x6c77ac]
push edx
push eax
mov eax, dword [esp + 0x30]
push eax
call fcn.0043d150
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x28
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov edx, dword [esp + 0x18]
push edx
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x20]
push 0
push 0
push 0
push ecx
mov ecx, dword [esp + 0x2c]
push edx
mov edx, dword [esp + 0x28]
push ecx
mov ecx, dword [0x6c77ac]
push eax
push edx
call fcn.0043d150
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x68]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x74]
add esi, 4
push edx
push eax
call section..text
add esp, 0x40
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
push eax
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x3c]
fild dword [esp + 0x38]
push 1
mov edx, dword [esp + 0x18]
push ecx
mov ecx, dword [0x6c77ac]
push 1
sub esp, 0x14
fstp dword [esp + 0x10]
fild dword [esp + 0x44]
fstp dword [esp + 0xc]
fild dword [esp + 0x4c]
fstp dword [esp + 8]
fild dword [esp + 0x40]
fstp dword [esp + 4]
fild dword [esp + 0x3c]
fstp dword [esp]
push eax
push edx
call fcn.0043ccb0
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
add esp, 0x20
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
push eax
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
fild dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
push 0
push 0
push 0
sub esp, 8
fstp dword [esp + 4]
fild dword [esp + 0x30]
fstp dword [esp]
push eax
push ecx
mov ecx, dword [0x6c77ac]
call fcn.0043d1c0
jmp case.default.0x4109a5
cmp eax, 0x4012204
ja 0x4101f6
je 0x41017c
cmp eax, 0x4012006
ja 0x40ff2b
je 0x40fe7d
sub eax, 0x4011706
je 0x40fdd4
sub eax, 0x101
je 0x40fd00
sub eax, 1
jne 0x415e04
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x38]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x68]
add esi, 4
push edx
push eax
call section..text
add esp, 0x38
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
push eax
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
cmp dword [esp + 0x2c], edi
je 0x40fcc2
fild dword [esp + 0x20]
fidiv dword [esp + 0x2c]
jmp 0x40fcc6
fild dword [esp + 0x20]
mov ecx, dword [esp + 0x38]
fstp dword [esp + 0x30]
mov edx, dword [esp + 0x24]
fld dword [esp + 0x30]
push 1
push ecx
mov ecx, dword [0x6c77ac]
push 0
push edx
sub esp, 8
fstp dword [esp + 4]
fild dword [esp + 0x34]
fstp dword [esp]
push eax
mov eax, dword [esp + 0x30]
push eax
call fcn.0043d230
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
add esp, 0x30
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
push eax
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
cmp dword [esp + 0x2c], edi
je 0x40fd99
fild dword [esp + 0x20]
fidiv dword [esp + 0x2c]
jmp 0x40fd9d
fild dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
mov edx, dword [esp + 0x14]
push 0
push 0
push 0
push ecx
mov ecx, dword [0x6c77ac]
sub esp, 8
fstp dword [esp + 4]
fild dword [esp + 0x34]
fstp dword [esp]
push eax
push edx
call fcn.0043d230
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x28
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov edx, dword [esp + 0x18]
push edx
call fcn.00433540
add esp, 4
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x2c]
fild dword [esp + 0x20]
mov edx, dword [esp + 0x14]
push 1
push ecx
mov ecx, dword [0x6c77ac]
push 0
sub esp, 8
fstp dword [esp + 4]
fild dword [esp + 0x30]
fstp dword [esp]
push eax
push edx
call fcn.0043d1c0
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x28
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov edx, dword [esp + 0x18]
push edx
call fcn.00460290
add esp, 4
test eax, eax
je case.default.0x4109a5
fild dword [esp + 0x2c]
mov ecx, dword [0x6c77ac]
push 1
push 0
push 0
sub esp, 0xc
fstp dword [esp + 8]
fild dword [esp + 0x38]
fstp dword [esp + 4]
fild dword [esp + 0x34]
fstp dword [esp]
push eax
mov eax, dword [esp + 0x30]
push eax
call fcn.0043d2a0
jmp case.default.0x4109a5
sub eax, 0x4012007
je 0x4100ba
sub eax, 0xff
je 0x41000c
sub eax, 1
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
add esp, 0x30
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
push eax
call fcn.00460290
add esp, 4
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x24]
fild dword [esp + 0x2c]
mov edx, dword [esp + 0x14]
push 1
push ecx
mov ecx, dword [0x6c77ac]
push 0
sub esp, 0xc
fstp dword [esp + 8]
fild dword [esp + 0x38]
fstp dword [esp + 4]
fild dword [esp + 0x34]
fstp dword [esp]
push eax
push edx
call fcn.0043d300
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x28
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov edx, dword [esp + 0x18]
push edx
call fcn.00460290
add esp, 4
test eax, eax
je case.default.0x4109a5
fild dword [esp + 0x2c]
mov ecx, dword [0x6c77ac]
push 1
push 0
push 0
sub esp, 0xc
fstp dword [esp + 8]
fild dword [esp + 0x38]
fstp dword [esp + 4]
fild dword [esp + 0x34]
fstp dword [esp]
push eax
mov eax, dword [esp + 0x30]
push eax
call fcn.0043d300
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
add esp, 0x30
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
push eax
call fcn.00460290
add esp, 4
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x24]
fild dword [esp + 0x2c]
mov edx, dword [esp + 0x14]
push 1
push ecx
mov ecx, dword [0x6c77ac]
push 0
sub esp, 0xc
fstp dword [esp + 8]
fild dword [esp + 0x38]
fstp dword [esp + 4]
fild dword [esp + 0x34]
fstp dword [esp]
push eax
push edx
call fcn.0043d2a0
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x18
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov edx, dword [esp + 0x18]
push edx
call fcn.00460290
add esp, 4
test eax, eax
je case.default.0x4109a5
fild dword [esp + 0x1c]
push 1
push 0
push 0
push ecx
mov ecx, dword [0x6c77ac]
fstp dword [esp]
push eax
mov eax, dword [esp + 0x28]
push eax
call fcn.0043d370
jmp case.default.0x4109a5
cmp eax, 0x4020101
ja 0x410705
je 0x41068e
cmp eax, 0x4012205
je 0x410600
cmp eax, 0x4018004
je 0x4105a0
cmp eax, 0x4020005
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
mov ebx, dword [esp + 0x1c]
add esi, 4
add esp, 8
cmp eax, 0x40000001
jne 0x41026b
cmp ebx, 5
ja case.default.0x41024e
jmp dword [ebx*4 + 0x4162bc]
mov edi, 7
mov dword [esp + 0x18], edi
jmp case.default.0x41024e
mov edi, 4
mov dword [esp + 0x18], edi
jmp case.default.0x41024e
lea edx, [esp + 0x18]
push edx
push eax
call section..text
mov edi, dword [esp + 0x20]
add esp, 8
mov eax, dword [esi + 4]
add esi, 4
cmp eax, 0x40000001
mov ecx, 0x3e8
jne 0x4102ab
cmp ebx, 5
ja case.default.0x410294
jmp dword [ebx*4 + 0x4162d4]
mov dword [esp + 0x1c], 0x14
jmp case.default.0x410294
mov dword [esp + 0x1c], ecx
jmp case.default.0x410294
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
mov eax, dword [esi + 4]
add esi, 4
cmp eax, 0x40000001
jne 0x4102f0
cmp ebx, 5
ja case.default.0x4102cb
jmp dword [ebx*4 + 0x4162ec]
mov ebp, 0x3e8
mov dword [esp + 0x20], ebp
jmp case.default.0x4102cb
xor ebp, ebp
mov dword [esp + 0x20], ebp
jmp case.default.0x4102cb
mov ebp, 1
mov dword [esp + 0x20], ebp
jmp case.default.0x4102cb
lea edx, [esp + 0x20]
push edx
push eax
call section..text
mov ebp, dword [esp + 0x28]
add esp, 8
add esi, 4
cmp ebx, 5
ja case.default.0x4109a5
jmp dword [ebx*4 + 0x416304]
test dword [0x6c77b0], 0x10000000
mov eax, dword [esp + 0x1c]
mov dword [0x6c7798], 3
mov dword [0x6c779c], edi
mov dword [0x6c77a0], eax
mov dword [0x6c77a4], ebp
je case.default.0x4109a5
mov ecx, dword [esp + 0x34]
test byte [ecx], 2
jne 0x41035e
push str.snow.epa
call fcn.00464470
mov edi, dword [esp + 0x1c]
add esp, 4
cmp edi, 0x64
jb 0x410376
push 0xf0
push 8
call fcn.00464550
mov edi, dword [esp + 0x20]
add esp, 8
mov eax, 0x51eb851f
mul edi
shr edx, 5
imul edx, edx, 0x64
sub edi, edx
cmp edi, 8
ja case.default.0x41038e
jmp dword [edi*4 + 0x41631c]
push 0x20
push 5
call fcn.00464550
push 0x3c
jmp 0x41040b
push 0x80
push 5
call fcn.00464550
push 0x3c
jmp 0x41040b
push pe_nt_image_headers32
push 5
call fcn.00464550
push 0x3c
jmp 0x41040b
push 0x20
push 5
call fcn.00464550
push 0x78
jmp 0x41040b
push 0x80
push 5
call fcn.00464550
push 0x78
jmp 0x41040b
push pe_nt_image_headers32
push 5
call fcn.00464550
push 0x78
jmp 0x41040b
push 0x20
jmp 0x4103ff
push 0x80
jmp 0x4103ff
push pe_nt_image_headers32
push 5
call fcn.00464550
push 0xf0
push 4
call fcn.00464550
add esp, 0x10
mov edx, dword [esp + 0x1c]
push edx
push 3
call fcn.00464550
mov eax, dword [esp + 0x28]
push eax
push 7
call fcn.00464550
mov edi, dword [esp + 0x44]
add esp, 0x10
test byte [edi], 2
jne 0x410443
push 0x64
call fcn.00464c80
add esp, 4
or dword [edi], 2
jmp case.default.0x4109a5
mov ecx, dword [0x6c77ac]
test ecx, ecx
je 0x41045c
push 1
call fcn.00402770
push 0x1520
call fcn.004812ee
add esp, 4
mov dword [esp + 0x30], eax
test eax, eax
mov dword [esp + 0x394], 0xb
je 0x410485
mov ecx, eax
call fcn.004373a0
jmp 0x410487
xor eax, eax
test eax, eax
mov dword [esp + 0x394], 0xffffffff
mov dword [0x6c77ac], eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x18]
test ecx, ecx
jne 0x4104b0
mov ecx, 4
mov dword [esp + 0x18], ecx
mov edi, dword [esp + 0x1c]
test edi, edi
jne 0x4104c1
mov edi, 0x3e8
mov dword [esp + 0x1c], edi
mov edx, dword [esp + 0x20]
cmp edx, 1
jne 0x4104d3
mov edx, 0xffffff
mov dword [esp + 0x20], edx
push 0
push 0
push edx
push edi
push ecx
push 0
mov ecx, eax
call fcn.0043cd30
mov edi, eax
call fcn.004752b0
mov ecx, dword [0x6c77ac]
add edi, eax
push edi
push eax
mov dword [esp + 0x30], eax
call fcn.004373d0
mov ecx, dword [esp + 0x38]
mov dword [ecx], 5
jmp case.default.0x4109a5
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x1c]
push edx
push eax
push 0
push ebp
push ecx
push edi
push 0x80010000
call fcn.004038c0
add esp, 0x1c
jmp case.default.0x4109a5
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x1c]
push edx
push eax
push 0
push ebp
push ecx
push edi
push 0x80020000
call fcn.004038c0
add esp, 0x1c
jmp case.default.0x4109a5
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x1c]
push edx
push eax
push 0
push ebp
push ecx
push edi
push 0x80030000
call fcn.004038c0
add esp, 0x1c
jmp case.default.0x4109a5
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x1c]
push edx
push eax
push 0
push ebp
push ecx
push edi
push 0x80040000
call fcn.004038c0
add esp, 0x1c
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov ecx, dword [0x6c77ac]
add esp, 0x18
add esi, 4
test ecx, ecx
je case.default.0x4109a5
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push 1
push eax
mov eax, dword [esp + 0x1c]
push 0
push edx
push eax
call fcn.0043d3c0
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
add esp, 0x20
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
push eax
call fcn.00460290
add esp, 4
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x20]
fild dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
push 1
push ecx
push 0
push ecx
mov ecx, dword [0x6c77ac]
fstp dword [esp]
push eax
push edx
call fcn.0043d370
jmp case.default.0x4109a5
test byte [ecx], 1
je 0x4106ad
mov eax, ecx
push eax
push ebx
push 0
push 0
push 0
push 0
push 0
call fcn.004038c0
mov ecx, dword [esp + 0x50]
add esp, 0x1c
test byte [ecx], 2
je 0x4106c0
call fcn.00464530
call fcn.00464c30
mov ecx, dword [esp + 0x34]
test byte [ecx], 4
je 0x4106d3
call fcn.00462110
call fcn.004626a0
mov ecx, dword [esp + 0x34]
test byte [ecx], 8
je 0x4106e6
call fcn.00463380
call fcn.00463b60
mov ecx, dword [esp + 0x34]
xor eax, eax
mov dword [0x6c7788], eax
mov dword [0x6c7798], eax
mov dword [0x6cdecc], eax
mov dword [0x6cdeec], eax
mov dword [ecx], eax
mov dword [ebx], eax
jmp case.default.0x4109a5
cmp eax, 0x4020204
je 0x410908
cmp eax, 0x4020305
je 0x410812
cmp eax, 0x4020405
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
mov dword [0x6cdef0], eax
mov eax, dword [esp + 0x40]
mov dword [0x6cdf08], edi
mov edi, dword [esp + 0x54]
add esp, 0x20
add esi, 4
mov dword [0x6cdeec], 1
mov dword [0x6cdef4], ecx
mov dword [0x6cdef8], edx
mov dword [0x6cdefc], eax
mov dword [0x6cdf00], 0xc8
mov dword [0x6cdf04], 0x7d0
test byte [edi], 4
jne 0x4107c4
call fcn.004620b0
mov ecx, dword [esp + 0x14]
push ecx
push 3
call fcn.00462130
mov edx, dword [esp + 0x20]
push edx
push 5
call fcn.00462130
push 0x7d0
push 4
call fcn.00462130
mov eax, dword [esp + 0x34]
push eax
push 9
call fcn.00462130
mov ecx, dword [esp + 0x40]
push ecx
push 0xa
call fcn.00462130
push 0
call fcn.004631c0
add esp, 0x2c
or dword [edi], 4
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x38]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x3c]
mov dword [0x6cded0], edx
mov edx, dword [esp + 0x40]
add esp, 0x20
add esi, 4
mov dword [0x6cdecc], eax
sub eax, 1
mov dword [0x6cded4], ecx
mov dword [0x6cded8], edx
je 0x4108af
sub eax, 1
je 0x410895
sub eax, 1
jne 0x4108ce
push str.sakura3.epa
jmp 0x4108b4
push str.sakura2.epa
call fcn.004632e0
push 0x384
push 3
call fcn.004633a0
push 0
jmp 0x4108c4
push 0x49a468
call fcn.004632e0
push 0
push 3
call fcn.004633a0
push 0xa
push 8
call fcn.004633a0
add esp, 0x14
mov eax, dword [esp + 0x20]
push eax
push 5
call fcn.004633a0
mov ecx, dword [esp + 0x24]
push ecx
push 4
call fcn.004633a0
mov edx, dword [esp + 0x28]
push edx
push 9
call fcn.004633a0
push 0x64
call fcn.00463bb0
mov eax, dword [esp + 0x50]
add esp, 0x1c
or dword [eax], 8
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov ecx, dword [esi + 4]
mov eax, dword [esp + 0x28]
add esi, 4
add esp, 0x10
add esi, 4
cmp eax, 0xd
mov dword [esp + 0x1c], ecx
ja case.0x41093f.0
jmp dword [eax*4 + 0x416340]
mov eax, 3
jmp 0x410994
mov eax, 0x1e
jmp 0x410994
mov eax, 0xa
jmp 0x410994
mov eax, dword [0x4bbfc8]
shl eax, 5
add eax, 7
jmp 0x410994
mov eax, dword [0x4bbfc8]
shl eax, 5
add eax, 3
jmp 0x410994
mov eax, dword [0x4bbfc8]
shl eax, 5
add eax, 0x1e
jmp 0x410994
mov eax, dword [0x4bbfc8]
shl eax, 5
add eax, 0xa
jmp 0x410994
mov eax, 7
mov edx, dword [esp + 0x14]
cmp edx, 9
mov dword [esp + 0x18], eax
ja case.default.0x4109a5
jmp dword [edx*4 + 0x416378]
push 0x1e
call fcn.0043ab70
push 7
call fcn.0043ab70
push 3
call fcn.0043ab70
push 0xa
call fcn.0043ab70
add esp, 0x10
jmp case.default.0x4109a5
push 0
push eax
push 0x60608
call fcn.0043bf60
add esp, 0xc
jmp case.default.0x4109a5
push 0
push eax
push 0xffffffffffffffff
push 4
call fcn.0043bec0
add esp, 0x10
jmp case.default.0x4109a5
push 0
push eax
or ecx, 0xff000000
push ecx
push 3
call fcn.0043bec0
add esp, 0x10
jmp case.default.0x4109a5
push 0
push eax
or ecx, 0xff000000
push ecx
push 1
call fcn.0043bec0
add esp, 0x10
jmp case.default.0x4109a5
push 0
push eax
or ecx, 0xff000000
push ecx
push 5
call fcn.0043bec0
add esp, 0x10
jmp case.default.0x4109a5
push 0
push eax
or ecx, 0xff000000
push ecx
push 6
call fcn.0043bec0
add esp, 0x10
jmp case.default.0x4109a5
push 0
push eax
or ecx, 0xff000000
push ecx
push 2
call fcn.0043bec0
add esp, 0x10
jmp case.default.0x4109a5
push 0
push eax
or ecx, 0xff000000
push ecx
push 7
call fcn.0043bec0
add esp, 0x10
jmp case.default.0x4109a5
push 0
push eax
push 0x60508
call fcn.0043bf60
add esp, 0xc
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
mov ebx, dword [esp + 0x5c]
mov dword [0x6cdef0], edx
mov edx, dword [esp + 0x48]
mov edi, 0xc8
add esp, 0x28
add esi, 4
mov dword [0x6cdeec], 1
mov dword [0x6cdef4], eax
mov dword [0x6cdef8], ecx
mov dword [0x6cdefc], edx
mov dword [0x6cdf00], edi
mov dword [0x6cdf04], 0x7d0
mov dword [0x6cdf08], ebp
test byte [ebx], 4
jne 0x410b55
call fcn.004620b0
mov eax, dword [esp + 0x14]
push eax
push 3
call fcn.00462130
mov ecx, dword [esp + 0x20]
push ecx
push 5
call fcn.00462130
mov edx, dword [esp + 0x2c]
push edx
push 9
call fcn.00462130
mov eax, dword [esp + 0x38]
push eax
push 0xa
call fcn.00462130
push edi
push 7
call fcn.00462130
push 0x7d0
push 4
call fcn.00462130
mov ecx, dword [esp + 0x5c]
push ecx
call fcn.004631c0
add esp, 0x34
or dword [ebx], 4
jmp case.default.0x4109a5
cmp eax, 0x4031604
ja 0x411742
je 0x4116ef
cmp eax, 0x4030502
ja 0x411368
je 0x411346
cmp eax, 0x403010e
ja 0x411114
je 0x410f70
cmp eax, 0x4020408
je 0x410e35
cmp eax, 0x4020507
je 0x410d97
cmp eax, 0x403000a
jne 0x415e04
call fcn.004605e0
mov eax, dword [esi]
lea edx, [esp + 0x24]
push edx
push eax
call section..text
add esi, 4
call fcn.0045f480
fild dword [esp + 0x2c]
fld qword [0x49a4c8]
lea ecx, [esp + 0x2c]
push ecx
fdiv st(1), st(0)
fxch st(1)
fstp dword [eax]
mov eax, dword [esi]
push eax
call section..text
fidivr dword [esp + 0x34]
add esi, 4
fstp dword [esp + 0x40]
fld dword [esp + 0x40]
fstp dword [esp + 0x40]
call fcn.0045f480
fld dword [esp + 0x40]
lea edx, [esp + 0x34]
fstp dword [eax + 4]
mov eax, dword [esi]
push edx
push eax
call section..text
fild dword [esp + 0x3c]
add esi, 4
fdiv qword [0x49a4c8]
fstp dword [esp + 0x48]
fld dword [esp + 0x48]
fstp dword [esp + 0x48]
call fcn.0045f480
fld dword [esp + 0x48]
lea ecx, [esp + 0x3c]
fstp dword [eax + 8]
mov eax, dword [esi]
push ecx
push eax
call section..text
fild dword [esp + 0x44]
add esi, 4
fdiv qword [0x49a4c8]
fstp dword [esp + 0x50]
fld dword [esp + 0x50]
fstp dword [esp + 0x50]
call fcn.0045f480
fld dword [esp + 0x50]
lea edx, [esp + 0x44]
fstp dword [eax + 0xc]
mov eax, dword [esi]
push edx
push eax
call section..text
fild dword [esp + 0x4c]
add esi, 4
fdiv qword [0x49a4c8]
fstp dword [esp + 0x58]
fld dword [esp + 0x58]
fstp dword [esp + 0x58]
call fcn.0045f480
fld dword [esp + 0x58]
lea ecx, [esp + 0x4c]
fstp dword [eax + 0x10]
mov eax, dword [esi]
push ecx
push eax
call section..text
fild dword [esp + 0x54]
add esi, 4
fdiv qword [0x49a4c8]
fstp dword [esp + 0x60]
fld dword [esp + 0x60]
fstp dword [esp + 0x60]
call fcn.0045f480
fld dword [esp + 0x60]
lea edx, [esp + 0x54]
fstp dword [eax + 0x14]
mov eax, dword [esi]
push edx
push eax
call section..text
fild dword [esp + 0x5c]
add esi, 4
fstp dword [esp + 0x68]
call fcn.0045f480
fld dword [esp + 0x68]
lea ecx, [esp + 0x5c]
fstp dword [eax + 0x18]
mov eax, dword [esi]
push ecx
push eax
call section..text
fild dword [esp + 0x64]
add esp, 0x40
add esi, 4
fstp dword [esp + 0x30]
call fcn.0045f480
fld dword [esp + 0x30]
lea edx, [esp + 0x24]
fstp dword [eax + 0x1c]
mov eax, dword [esi]
push edx
push eax
call section..text
fild dword [esp + 0x2c]
add esp, 8
add esi, 4
fstp dword [esp + 0x30]
call fcn.0045f480
fld dword [esp + 0x30]
fstp dword [eax + 0x20]
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x5c]
push eax
mov eax, dword [esp + 0x54]
push ebx
push ecx
mov ecx, dword [esp + 0x58]
push edx
mov edx, dword [esp + 0x54]
or edx, 0xffff8000
push eax
shl edx, 0x10
or edx, dword [esp + 0x5c]
push ecx
push edx
add esi, 4
call fcn.004038c0
add esp, 0x4c
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x68]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x74]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x5c]
mov edi, dword [esp + 0x6c]
mov ebp, dword [esp + 0x64]
mov ebx, dword [esp + 0x74]
mov dword [0x6cdef0], eax
mov eax, dword [esp + 0x60]
mov dword [0x6cdef4], ecx
mov ecx, dword [esp + 0x78]
add esp, 0x40
add esi, 4
mov dword [0x6cdeec], 1
mov dword [0x6cdef8], edx
mov dword [0x6cdefc], eax
mov dword [0x6cdf00], edi
mov dword [0x6cdf04], ebp
mov dword [0x6cdf08], ecx
test byte [ebx], 4
jne 0x410f1b
call fcn.004620b0
mov edx, dword [esp + 0x14]
push edx
push 3
call fcn.00462130
mov eax, dword [esp + 0x20]
push eax
push 5
call fcn.00462130
mov ecx, dword [esp + 0x2c]
push ecx
push 9
call fcn.00462130
mov edx, dword [esp + 0x38]
push edx
push 0xa
call fcn.00462130
push edi
push 7
call fcn.00462130
push ebp
push 4
call fcn.00462130
mov eax, dword [esp + 0x6c]
push eax
call fcn.004631c0
add esp, 0x34
or dword [ebx], 4
jmp case.default.0x4109a5
push 0xc0
lea ecx, [esp + 0x2cc]
push 0
push ecx
call fcn.00481aa0
mov eax, dword [esi]
lea edx, [esp + 0x20]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
add esi, 4
push eax
call fcn.004022d0
add esp, 0x18
push eax
lea eax, [esp + 0x2cc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [esi + 4]
lea ecx, [esp + 0x24]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x2c]
lea ecx, [esp + 0x2c]
add esi, 4
mov dword [esp + 0x350], edx
mov eax, dword [esi]
push ecx
push eax
call section..text
fild dword [esp + 0x34]
lea edx, [esp + 0x34]
add esi, 4
fstp dword [esp + 0x35c]
mov eax, dword [esi]
push edx
push eax
call section..text
fild dword [esp + 0x3c]
lea ecx, [esp + 0x3c]
add esi, 4
fstp dword [esp + 0x368]
mov eax, dword [esi]
push ecx
push eax
call section..text
fild dword [esp + 0x44]
lea edx, [esp + 0x44]
add esi, 4
fstp dword [esp + 0x374]
mov eax, dword [esi]
push edx
push eax
call section..text
fild dword [esp + 0x4c]
lea ecx, [esp + 0x4c]
add esi, 4
fstp dword [esp + 0x380]
mov eax, dword [esi]
push ecx
push eax
call section..text
fild dword [esp + 0x54]
lea edx, [esp + 0x54]
add esi, 4
fstp dword [esp + 0x38c]
mov eax, dword [esi]
push edx
push eax
call section..text
fild dword [esp + 0x5c]
add esi, 4
lea ecx, [esp + 0x5c]
fstp dword [esp + 0x398]
mov eax, dword [esi]
push ecx
push eax
call section..text
fild dword [esp + 0x64]
add esp, 0x40
fld qword [0x49a4c8]
lea edx, [esp + 0x24]
add esi, 4
fdiv st(1), st(0)
push edx
fxch st(1)
fstp dword [esp + 0x374]
mov eax, dword [esi]
push eax
call section..text
fild dword [esp + 0x2c]
lea ecx, [esp + 0x2c]
add esi, 4
fdiv st(1)
push ecx
fstp dword [esp + 0x380]
mov eax, dword [esi]
push eax
call section..text
fild dword [esp + 0x34]
lea edx, [esp + 0x34]
add esi, 4
fdiv st(1)
push edx
fstp dword [esp + 0x38c]
mov eax, dword [esi]
push eax
call section..text
fidivr dword [esp + 0x3c]
mov ecx, dword [esp + 0x2c]
lea eax, [esp + 0x2e0]
push eax
push ecx
add esi, 4
fstp dword [esp + 0x39c]
call fcn.0045faf0
add esp, 0x20
neg al
sbb eax, eax
and eax, dword [esp + 0x14]
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
cmp eax, 0x4030210
je 0x411169
cmp eax, 0x4030302
je 0x411137
cmp eax, 0x4030401
jne 0x415e04
call fcn.004617d0
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
call fcn.00460670
mov eax, dword [esp + 0x14]
test eax, eax
je case.default.0x4109a5
push eax
call fcn.004609c0
add esp, 4
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
fild dword [esp + 0x34]
lea ecx, [esp + 0x34]
add esi, 4
fstp dword [esp + 0xd8]
mov eax, dword [esi]
push ecx
push eax
call section..text
fild dword [esp + 0x3c]
lea edx, [esp + 0x3c]
add esi, 4
fstp dword [esp + 0xe4]
mov eax, dword [esi]
push edx
push eax
call section..text
fild dword [esp + 0x44]
lea ecx, [esp + 0x44]
add esi, 4
fstp dword [esp + 0xf0]
mov eax, dword [esi]
push ecx
push eax
call section..text
fild dword [esp + 0x4c]
fld qword [0x49a4c0]
lea edx, [esp + 0x4c]
add esi, 4
fdiv st(1), st(0)
push edx
fld qword [0x49a4b8]
fmul st(2), st(0)
fxch st(2)
fstp dword [esp + 0x100]
mov eax, dword [esi]
push eax
call section..text
fild dword [esp + 0x54]
lea ecx, [esp + 0x54]
add esi, 4
fdiv st(1)
push ecx
fmul st(2)
fstp dword [esp + 0x10c]
mov eax, dword [esi]
push eax
call section..text
fidivr dword [esp + 0x5c]
lea edx, [esp + 0x5c]
add esi, 4
push edx
fmulp st(1)
fstp dword [esp + 0x118]
mov eax, dword [esi]
push eax
call section..text
fild dword [esp + 0x64]
add esp, 0x40
lea ecx, [esp + 0x24]
add esi, 4
fstp dword [esp + 0xe0]
mov eax, dword [esi]
push ecx
push eax
call section..text
fild dword [esp + 0x2c]
add esi, 4
lea edx, [esp + 0x2c]
fstp dword [esp + 0xf0]
mov eax, dword [esi]
push edx
push eax
call section..text
fild dword [esp + 0x34]
lea ecx, [esp + 0x34]
add esi, 4
fstp dword [esp + 0xf4]
mov eax, dword [esi]
push ecx
push eax
call section..text
fild dword [esp + 0x3c]
lea edx, [esp + 0x3c]
add esi, 4
fstp dword [esp + 0x104]
mov eax, dword [esi]
push edx
push eax
call section..text
fild dword [esp + 0x44]
lea ecx, [esp + 0x44]
add esi, 4
fstp dword [esp + 0x110]
mov eax, dword [esi]
push ecx
push eax
call section..text
fild dword [esp + 0x4c]
fld qword [0x49a4b0]
lea edx, [esp + 0x4c]
add esi, 4
fdiv st(1), st(0)
push edx
fxch st(1)
fstp dword [esp + 0x124]
mov eax, dword [esi]
push eax
call section..text
fidivr dword [esp + 0x54]
lea ecx, [esp + 0x54]
add esi, 4
push ecx
fstp dword [esp + 0x128]
mov eax, dword [esi]
push eax
call section..text
fild dword [esp + 0x5c]
mov eax, dword [esp + 0x4c]
lea edx, [esp + 0x100]
fdiv qword [0x49a4a8]
push edx
push eax
add esi, 4
fstp dword [esp + 0x13c]
call fcn.004602b0
add esp, 0x40
neg al
sbb eax, eax
and eax, dword [esp + 0x14]
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edx, dword [esp + 0x1c]
push edx
add esi, 4
call fcn.004609c0
add esp, 0xc
jmp case.default.0x4109a5
cmp eax, 0x4031205
ja 0x411597
je 0x4114f6
cmp eax, 0x4030606
je 0x41147c
cmp eax, 0x4031005
je 0x41140b
cmp eax, 0x4031105
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
fild dword [esp + 0x40]
mov eax, dword [esp + 0x34]
add esp, 0x14
fstp dword [esp + 8]
add esi, 4
fild dword [esp + 0x28]
fstp dword [esp + 4]
fild dword [esp + 0x24]
fstp dword [esp]
push 0
push eax
call fcn.004603b0
add esp, 0x14
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
fild dword [esp + 0x40]
mov eax, dword [esp + 0x34]
add esp, 0x14
fstp dword [esp + 8]
add esi, 4
fild dword [esp + 0x28]
fstp dword [esp + 4]
fild dword [esp + 0x24]
fstp dword [esp]
push 1
push eax
call fcn.004603b0
add esp, 0x14
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x54]
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
push edx
mov edx, dword [esp + 0x44]
push eax
mov eax, dword [esp + 0x44]
push ecx
push edx
push eax
add esi, 4
call fcn.0045fb70
add esp, 0x3c
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
fild dword [esp + 0x40]
fld qword [0x49a4b8]
add esp, 0x14
mov eax, dword [esp + 0x20]
fmul st(1), st(0)
add esi, 4
fld qword [0x49a4c0]
fdiv st(2), st(0)
fxch st(2)
fstp dword [esp + 0x3c]
fld dword [esp + 0x3c]
fstp dword [esp + 8]
fild dword [esp + 0x28]
fmul st(1)
fdiv st(2)
fstp dword [esp + 0x3c]
fld dword [esp + 0x3c]
fstp dword [esp + 4]
fimul dword [esp + 0x24]
fdivrp st(1)
fstp dword [esp + 0x3c]
fld dword [esp + 0x3c]
fstp dword [esp]
push 1
push eax
call fcn.004603f0
add esp, 0x14
jmp case.default.0x4109a5
cmp eax, 0x4031305
je 0x41164e
cmp eax, 0x4031403
je 0x411601
cmp eax, 0x4031505
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
fild dword [esp + 0x28]
mov eax, dword [esp + 0x24]
add esp, 0xc
fdiv qword [0x49a4a8]
add esi, 4
fstp dword [esp + 0x34]
fld dword [esp + 0x34]
fstp dword [esp]
push 0
push eax
call fcn.00460430
add esp, 0xc
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
fild dword [esp + 0x28]
mov eax, dword [esp + 0x24]
add esp, 0xc
fdiv qword [0x49a4a8]
add esi, 4
fstp dword [esp + 0x34]
fld dword [esp + 0x34]
fstp dword [esp]
push 1
push eax
call fcn.00460430
add esp, 0xc
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
fild dword [esp + 0x40]
fld qword [0x49a4b8]
add esp, 0x14
mov eax, dword [esp + 0x20]
fmul st(1), st(0)
add esi, 4
fld qword [0x49a4c0]
fdiv st(2), st(0)
fxch st(2)
fstp dword [esp + 0x3c]
fld dword [esp + 0x3c]
fstp dword [esp + 8]
fild dword [esp + 0x28]
fmul st(1)
fdiv st(2)
fstp dword [esp + 0x3c]
fld dword [esp + 0x3c]
fstp dword [esp + 4]
fimul dword [esp + 0x24]
fdivrp st(1)
fstp dword [esp + 0x3c]
fld dword [esp + 0x3c]
fstp dword [esp]
push 0
push eax
call fcn.004603f0
add esp, 0x14
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
fild dword [esp + 0x34]
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x2c]
add esp, 0x14
fstp dword [esp]
push edx
push eax
add esi, 4
call fcn.00460460
add esp, 0xc
jmp case.default.0x4109a5
cmp eax, 0x4040703
ja 0x411a64
je 0x411a3c
cmp eax, 0x4040302
ja 0x411912
je 0x4118df
cmp eax, 0x4040004
je 0x41187e
cmp eax, 0x4040103
je 0x411838
cmp eax, 0x4040207
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x48]
push eax
add esi, 4
call fcn.00433540
add esp, 0x34
test eax, eax
je 0x40b26e
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x30]
push edx
mov edx, dword [esp + 0x28]
push ecx
mov ecx, dword [esp + 0x28]
push edx
push ecx
push eax
call fcn.00452b50
add esp, 0x18
test eax, eax
je 0x40b26e
mov edx, dword [esp + 0x14]
mov dword [0x6c77a8], edx
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
mov edx, dword [esp + 0x1c]
add esp, 8
add esi, 4
push edx
push eax
mov dword [esp + 0x20], eax
add esi, 4
call fcn.004022d0
add esp, 4
push eax
call fcn.004527c0
add esp, 8
neg eax
sbb eax, eax
and eax, dword [esp + 0x14]
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
push edx
push eax
push ecx
push 0
push 0
push 0
add esi, 4
call fcn.00452b50
add esp, 0x30
neg eax
sbb eax, eax
and eax, dword [esp + 0x14]
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esp + 0x1c]
push eax
add esi, 4
call fcn.004526d0
add esp, 0xc
test eax, eax
je case.default.0x4109a5
push eax
call fcn.00452700
add esp, 4
jmp case.default.0x4109a5
cmp eax, 0x4040404
je 0x4119dd
cmp eax, 0x4040504
je 0x41197e
cmp eax, 0x4040603
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
add esp, 0x10
push 0
mov eax, dword [esp + 0x1c]
push eax
add esi, 4
call fcn.004526d0
mov ecx, dword [esp + 0x1c]
add esp, 4
push eax
push ecx
call fcn.004526d0
add esp, 4
push eax
call fcn.00452e90
add esp, 0xc
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x2c]
push eax
add esi, 4
call fcn.004526d0
add esp, 0x1c
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push ecx
push edx
push eax
call fcn.004530e0
add esp, 0xc
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x2c]
push edx
add esi, 4
call fcn.004526d0
add esp, 0x1c
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push ecx
push edx
push eax
call fcn.00453070
add esp, 0xc
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
add esp, 0x10
push 2
jmp 0x411952
cmp eax, 0x4040b05
ja 0x411bea
je 0x411b7d
cmp eax, 0x4040803
je 0x411b55
cmp eax, 0x4040905
je 0x411adc
cmp eax, 0x4040a03
jne 0x415e04
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x24]
push edx
add esi, 4
call fcn.004526d0
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
push eax
call fcn.00433540
add esp, 4
push eax
call fcn.00452df0
add esp, 8
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
add esp, 0x20
push eax
push ecx
push edx
add esi, 4
call fcn.00433540
add esp, 4
push eax
mov eax, dword [esp + 0x20]
push eax
call fcn.004526d0
add esp, 4
push eax
call fcn.00452ce0
add esp, 0x10
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
add esp, 0x10
push 1
jmp 0x411952
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov edi, dword [esi + 4]
add esi, 4
lea ecx, [esp + 0x24]
add esi, 4
mov dword [esp + 0x20], edi
mov eax, dword [esi]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x30]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
add esp, 0x18
push eax
push ecx
push edi
add esi, 4
call fcn.004022d0
mov edx, dword [esp + 0x20]
add esp, 4
push eax
push edx
call fcn.004526d0
add esp, 4
push eax
call fcn.00453150
add esp, 0x10
jmp case.default.0x4109a5
cmp eax, 0x4040c02
je 0x411d2b
cmp eax, 0x4040d0b
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x68]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x74]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
add esp, 0x40
lea ecx, [esp + 0x34]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [0x6c9844]
push eax
add esi, 4
call fcn.00402320
add esp, 0x14
test eax, eax
je case.default.0x4109a5
cmp dword [eax], 0x80000307
jne case.default.0x4109a5
mov eax, dword [eax + 0xc]
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x34]
push ecx
mov ecx, dword [esp + 0x40]
push edx
mov edx, dword [esp + 0x40]
push ecx
mov ecx, dword [esp + 0x30]
push edx
mov edx, dword [esp + 0x3c]
push ecx
mov ecx, dword [esp + 0x34]
push edx
mov edx, dword [esp + 0x34]
push ecx
mov ecx, dword [esp + 0x34]
push edx
push ecx
push eax
call fcn.004022f0
mov edx, dword [esp + 0x3c]
add esp, 4
push eax
push edx
call fcn.004526d0
add esp, 4
push eax
call fcn.00453770
add esp, 0x2c
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edx, dword [esp + 0x1c]
push edx
add esi, 4
call fcn.004526d0
add esp, 0xc
test eax, eax
je case.default.0x4109a5
mov ecx, dword [eax + 0xc]
lea edx, [ecx*4]
push edx
mov edx, dword [eax + 0x10]
mov eax, dword [eax + 0x18]
push edx
push ecx
push eax
call fcn.00434750
add esp, 0x10
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edx, dword [esp + 0x1c]
push edx
add esi, 4
call fcn.004526d0
add esp, 0xc
neg eax
sbb eax, eax
neg eax
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
cmp eax, 0x6010103
ja 0x412f63
je 0x412f37
cmp eax, 0x5020102
ja 0x41281b
je 0x4127f7
cmp eax, 0x5000201
ja 0x412309
je 0x4122ca
cmp eax, 0x4050303
ja 0x4120f0
je 0x4120ac
cmp eax, 0x4041206
ja 0x411fc0
je 0x411f3d
cmp eax, 0x4041003
je 0x411ef4
cmp eax, 0x404110b
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x68]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x74]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
add esp, 0x40
lea ecx, [esp + 0x34]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x4c]
add esp, 0x10
push eax
mov eax, dword [esp + 0x3c]
push ecx
mov ecx, dword [esp + 0x2c]
push edx
mov edx, dword [esp + 0x38]
push eax
mov eax, dword [esp + 0x30]
push ecx
mov ecx, dword [esp + 0x30]
push edx
mov edx, dword [esp + 0x30]
push eax
push ecx
push edx
add esi, 4
push 0x6c9738
mov eax, dword [esp + 0x3c]
push eax
jmp 0x411d15
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x24]
push eax
add esi, 4
call fcn.004526d0
add esp, 0x14
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x18]
push ecx
push eax
call fcn.00453be0
add esp, 8
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov edi, dword [esi + 4]
add esi, 4
lea ecx, [esp + 0x24]
add esi, 4
mov dword [esp + 0x20], edi
mov eax, dword [esi]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x30]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x44]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
add esp, 0x20
push edx
push eax
push ecx
push edi
add esi, 4
call fcn.004022d0
mov edx, dword [esp + 0x24]
add esp, 4
push eax
push edx
call fcn.004526d0
add esp, 4
push eax
call fcn.004531a0
add esp, 0x14
jmp case.default.0x4109a5
cmp eax, 0x4050104
je 0x412057
cmp eax, 0x4050203
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esp + 0x30]
add esp, 0x18
add esi, 4
cmp eax, 0xffffffff
jne 0x412034
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
push edx
push eax
call fcn.00433540
add esp, 4
push eax
call fcn.00435ff0
add esp, 8
jmp case.default.0x4109a5
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
push ecx
push 0
push eax
push edx
call fcn.00433540
add esp, 4
push eax
call fcn.00436060
add esp, 0x10
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
add esi, 4
push eax
mov dword [esp + 0x30], eax
add esi, 4
call fcn.004022d0
mov ecx, dword [esp + 0x28]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
push eax
push ecx
call fcn.00433540
add esp, 4
push eax
call fcn.00436180
add esp, 0xc
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
add esp, 0x10
push edx
push eax
add esi, 4
call fcn.00433540
add esp, 4
push eax
call fcn.00436150
add esp, 8
jmp case.default.0x4109a5
cmp eax, 0x4060304
ja 0x4121f5
je 0x41219b
cmp eax, 0x4060103
je 0x412157
cmp eax, 0x4060203
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
add esp, 0x10
push eax
push ecx
add esi, 4
call fcn.00433540
add esp, 4
push eax
call fcn.00434100
add esp, 8
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
add esp, 0x10
push edx
push eax
add esi, 4
call fcn.00433540
add esp, 4
push eax
call fcn.004340c0
add esp, 8
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
add esp, 0x18
push edx
push eax
push ecx
add esi, 4
call fcn.00433540
add esp, 4
push eax
call fcn.00434110
add esp, 0xc
jmp case.default.0x4109a5
cmp eax, 0x5000003
je 0x412246
cmp eax, 0x5000102
jne 0x415e04
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esp + 0x1c]
add esp, 8
add esi, 4
test eax, eax
je 0x412236
push eax
call fcn.00465660
add esp, 4
mov dword [0x6cb79c], edi
jmp case.default.0x4109a5
call fcn.00465600
mov dword [0x6cb79c], edi
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov ecx, dword [0x6cb79c]
mov eax, dword [esp + 0x24]
and ecx, 0x7fffffff
add esp, 0x10
add esi, 4
cmp ecx, eax
je case.default.0x4109a5
mov edx, dword [esp + 0x18]
push edx
push eax
call fcn.004022d0
add esp, 4
push eax
call fcn.004654d0
call fcn.00465540
mov eax, dword [esp + 0x1c]
push eax
call fcn.0046b4b0
add esp, 0xc
cmp dword [esp + 0x18], edi
mov eax, dword [esp + 0x14]
mov dword [0x6cb79c], eax
je case.default.0x4109a5
or eax, 0x80000000
mov dword [0x6cb79c], eax
jmp case.default.0x4109a5
cmp dword [0x6cb79c], ebp
je case.default.0x4109a5
push 0
push 0
call fcn.004656c0
mov eax, 0x40000000
add esp, 8
test dword [0x6cb79c], eax
je 0x4122fa
or dword [0x6cb79c], eax
jmp case.default.0x4109a5
and dword [0x6cb79c], 0xbfffffff
jmp case.default.0x4109a5
cmp eax, 0x5010102
ja 0x412557
je 0x412533
cmp eax, 0x5000504
ja 0x4123e6
je 0x412369
cmp eax, 0x5000302
je 0x41234c
cmp eax, 0x5000402
jne 0x415e04
add esi, 4
mov dword [0x6c972c], edi
call fcn.00465b00
jmp case.default.0x4109a5
mov eax, dword [esi]
push 0x6c972c
push eax
call section..text
add esp, 8
add esi, 4
call fcn.00465b00
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [0x6cb79c]
mov eax, dword [esp + 0x2c]
and edx, 0xfffffff
add esp, 0x18
add esi, 4
cmp edx, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x1c]
push ecx
push eax
call fcn.004022d0
add esp, 4
push eax
call fcn.004654d0
mov edx, dword [esp + 0x20]
push edx
call fcn.004655a0
mov eax, dword [esp + 0x20]
push eax
call fcn.0046b4b0
add esp, 0x10
jmp 0x4122a8
cmp eax, 0x5010004
je 0x41246c
cmp eax, 0x5010101
jne 0x415e04
push 0
push 0xffffffffffffffff
call fcn.004653f0
add esp, 8
or eax, 0xffffffff
mov dword [0x6c6d3c], eax
mov dword [0x6c6d40], eax
mov dword [0x6c6d44], eax
mov dword [0x6c6d48], eax
mov dword [0x6c6d4c], eax
mov dword [0x6c6d50], eax
mov dword [0x6c6d54], eax
mov dword [0x6c6d58], eax
mov dword [0x6c6d5c], eax
xor eax, eax
mov dword [0x6cdd14], eax
mov dword [0x6cdd18], eax
mov dword [0x6cdd1c], eax
mov dword [0x6cdd20], eax
mov dword [0x6cdd24], eax
mov dword [0x6cdd28], eax
mov dword [0x6cdd2c], eax
mov dword [0x6cdd30], eax
mov dword [0x6cdd34], eax
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x2c]
add esp, 0x18
push 0
push edx
push 0xffffffffffffffff
push eax
add esi, 4
call fcn.004022d0
add esp, 4
push eax
call fcn.00465190
add esp, 0x10
cmp eax, 0xffffffff
mov dword [0x6c77a8], eax
je 0x4124d8
mov ecx, dword [esp + 0x18]
push ecx
push eax
call fcn.00465420
add esp, 8
mov edx, dword [esp + 0x14]
push edx
call fcn.0046b4b0
add esp, 4
cmp dword [esp + 0x18], edi
je case.default.0x4109a5
cmp dword [0x4bbfc8], edi
jne case.default.0x4109a5
xor eax, eax
lea ecx, [ecx]
cmp dword [eax*4 + 0x6cdd14], edi
je 0x412516
add eax, 1
cmp eax, 9
jl 0x412500
jmp case.default.0x4109a5
mov ecx, dword [esp + 0x14]
mov edx, dword [0x6c77a8]
mov dword [eax*4 + 0x6cdd14], ecx
mov dword [eax*4 + 0x6c6d3c], edx
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edx, dword [esp + 0x1c]
push edx
push 0xffffffffffffffff
add esi, 4
call fcn.004653f0
add esp, 0x10
jmp 0x412408
cmp eax, 0x5020004
ja 0x412725
je 0x412683
cmp eax, 0x5010103
je 0x412615
cmp eax, 0x5020003
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x24]
add esp, 0x10
add esi, 4
test eax, eax
je 0x412603
lea ecx, [esp + 0x40]
push ecx
push eax
call fcn.004022d0
add esp, 4
push eax
call fcn.0046c870
add esp, 8
test eax, eax
mov dword [esp + 0x28], eax
je 0x412603
mov edx, dword [0x6cb798]
mov ecx, dword [esp + 0x18]
imul edx, eax
mov eax, 0xd1b71759
mul edx
mov eax, dword [esp + 0x40]
push 0
shr edx, 0xd
push edx
push eax
mov dword [esp + 0x34], edx
mov edx, dword [esp + 0x20]
push ecx
push edx
call fcn.004022d0
add esp, 4
push eax
call fcn.00465ba0
add esp, 0x14
mov eax, dword [esp + 0x14]
push eax
call fcn.00455700
add esp, 4
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
push eax
push ecx
add esi, 4
call fcn.004653f0
mov ecx, dword [esp + 0x2c]
add esp, 0x18
test ecx, ecx
js 0x412408
xor eax, eax
cmp dword [eax*4 + 0x6c6d3c], ecx
je 0x41266c
add eax, 1
cmp eax, 9
jl 0x412656
jmp case.default.0x4109a5
mov dword [eax*4 + 0x6cdd14], edi
mov dword [eax*4 + 0x6c6d3c], 0xffffffff
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x2c]
add esp, 0x18
add esi, 4
test eax, eax
je case.default.0x4109a5
lea ecx, [esp + 0x40]
push ecx
push eax
call fcn.004022d0
add esp, 4
push eax
call fcn.0046c870
add esp, 8
test eax, eax
je case.default.0x4109a5
mov edx, dword [0x6cb798]
mov ecx, dword [esp + 0x40]
imul edx, eax
mov eax, 0xd1b71759
mul edx
mov eax, dword [esp + 0x1c]
push eax
mov eax, dword [esp + 0x18]
shr edx, 0xd
push edx
mov dword [esp + 0x30], edx
mov edx, dword [esp + 0x20]
push ecx
push edx
push eax
call fcn.004022d0
add esp, 4
push eax
call fcn.00465ba0
add esp, 0x14
jmp case.default.0x4109a5
cmp eax, 0x5020005
je 0x412748
cmp eax, 0x5020101
jne 0x415e04
push 0xffffffffffffffff
push 0
call fcn.004659e0
add esp, 8
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edi, dword [esi + 4]
add esi, 4
lea edx, [esp + 0x24]
add esi, 4
mov dword [esp + 0x20], edi
mov eax, dword [esi]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x30]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x18
add esi, 4
cmp dword [esp + 0x14], ebp
je 0x4127e5
lea edx, [esp + 0x40]
push edx
push edi
call fcn.004022d0
add esp, 4
push eax
call fcn.0046c870
add esp, 8
test eax, eax
mov dword [esp + 0x28], eax
je 0x4127e5
mov ecx, dword [0x6cb798]
imul ecx, eax
mov eax, 0xd1b71759
mul ecx
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
push 0
shr edx, 0xd
push edx
mov dword [esp + 0x30], edx
mov edx, dword [esp + 0x1c]
push edx
push eax
push ecx
call fcn.004022d0
add esp, 4
push eax
call fcn.00465ba0
add esp, 0x14
mov edx, dword [esp + 0x18]
push edx
call fcn.00455700
add esp, 4
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edx, dword [esp + 0x1c]
push 0xffffffffffffffff
push edx
add esi, 4
call fcn.004659e0
add esp, 0x10
jmp case.default.0x4109a5
cmp eax, 0x5050004
ja 0x412b4f
je 0x412af0
cmp eax, 0x5020502
ja 0x4129b0
je 0x412990
cmp eax, 0x5020403
ja 0x4128ae
je 0x41286c
cmp eax, 0x5020201
je 0x412862
cmp eax, 0x5020301
jne 0x415e04
call fcn.0046c700
jmp case.default.0x4109a5
call fcn.00465a40
jmp case.default.0x4109a5
mov edi, dword [esi]
lea ecx, [esp + 0x18]
add esi, 4
mov dword [esp + 0x14], edi
mov eax, dword [esi]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x18]
push 0xffffffffffffffff
push edx
push edi
call fcn.004022d0
add esp, 4
push eax
call fcn.0046c720
add esp, 0xc
jmp case.default.0x4109a5
cmp eax, 0x5020404
je 0x412930
cmp eax, 0x5020501
jne 0x415e04
push 0x44
call fcn.004812ee
mov edi, eax
add esp, 4
test edi, edi
je case.default.0x4109a5
push edi
call fcn.00455750
add esp, 4
test al, al
je 0x414fac
cmp dword [edi], ebp
je 0x414fac
mov ecx, dword [edi + 4]
lea eax, [esp + 0x40]
push eax
push ecx
call fcn.0046c870
add esp, 8
test eax, eax
mov dword [esp + 0x28], eax
je 0x414fac
mov edx, dword [0x6cb798]
imul edx, eax
mov eax, 0xd1b71759
mul edx
mov eax, dword [esp + 0x40]
shr edx, 0xd
push edx
mov dword [esp + 0x2c], edx
push eax
jmp 0x414fa1
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edi, dword [esi]
lea edx, [esp + 0x18]
add esi, 4
mov dword [esp + 0x14], edi
mov eax, dword [esi]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
push eax
push ecx
push edi
call fcn.004022d0
add esp, 4
push eax
call fcn.0046c720
add esp, 0xc
jmp case.default.0x4109a5
mov eax, dword [esi]
push eax
call fcn.004022d0
push 0
push eax
call fcn.0046c7f0
add esp, 0xc
mov dword [0x6c77a8], eax
add esi, 4
jmp case.default.0x4109a5
cmp eax, 0x5030101
ja 0x412a89
je 0x412a73
sub eax, 0x5030002
je 0x412a2f
sub eax, 1
jne 0x415e04
mov edx, dword [esi]
lea ecx, [esp + 0x18]
mov dword [esp + 0x14], edx
mov eax, dword [esi + 4]
add esi, 4
push ecx
push eax
call section..text
add esp, 8
add esi, 4
cmp dword [esp + 0x18], edi
jne 0x4129f9
call fcn.00465600
mov edx, dword [esp + 0x14]
push edx
call fcn.004022d0
push eax
call fcn.00403190
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x1c]
push eax
call fcn.0046b4b0
add esp, 0xc
cmp dword [esp + 0x28], edi
je case.default.0x4109a5
mov dword [ebx], 0xd
jmp case.default.0x4109a5
mov ecx, dword [esi]
mov dword [esp + 0x14], ecx
add esi, 4
call fcn.00465600
mov edx, dword [esp + 0x14]
push edx
call fcn.004022d0
push eax
call fcn.00403190
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x1c]
push eax
call fcn.0046b4b0
add esp, 0xc
cmp dword [esp + 0x28], edi
je case.default.0x4109a5
mov dword [ebx], 0xd
jmp case.default.0x4109a5
call fcn.0045e960
push 0
call fcn.00434100
add esp, 4
mov dword [ebx], edi
jmp case.default.0x4109a5
cmp eax, 0x5040002
je 0x412abf
cmp eax, 0x5040102
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edx, dword [esp + 0x1c]
push 0xfffffffffffffffe
push edx
add esi, 4
call fcn.004659e0
add esp, 0x10
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esp + 0x1c]
add esp, 8
add esi, 4
test eax, eax
je case.default.0x4109a5
mov edx, dword [0x6c9728]
push 0
push edx
push 0xfffffffffffffffe
push 0xffffffffffffffff
jmp 0x41270e
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edi, dword [esi + 4]
add esi, 4
lea edx, [esp + 0x24]
add esi, 4
mov dword [esp + 0x20], edi
mov eax, dword [esi]
push edx
push eax
call section..text
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
add esp, 0x10
push 0
push eax
push ecx
push edi
add esi, 4
call fcn.004022d0
add esp, 4
push eax
call fcn.00465190
mov edx, dword [esp + 0x28]
push edx
mov dword [0x6c77a8], eax
call fcn.0046b4b0
add esp, 0x14
jmp case.default.0x4109a5
cmp eax, 0x5060204
ja 0x412d48
je 0x412cff
cmp eax, 0x5050303
ja 0x412c74
je 0x412c3c
cmp eax, 0x5050102
je 0x412bfd
cmp eax, 0x5050204
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x2c]
push edx
push eax
add esi, 4
call fcn.00465420
add esp, 0x20
cmp dword [esp + 0x18], edi
je case.default.0x4109a5
cmp dword [0x4bbfc8], edi
jne case.default.0x4109a5
xor eax, eax
cmp dword [eax*4 + 0x6cdd14], edi
je 0x412516
add eax, 1
cmp eax, 9
jl 0x412be3
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edx, dword [esp + 0x1c]
push 0
push edx
add esi, 4
call fcn.004653f0
mov ecx, dword [esp + 0x24]
add esp, 0x10
xor eax, eax
cmp dword [eax*4 + 0x6c6d3c], ecx
je 0x41266c
add eax, 1
cmp eax, 9
jl 0x412c22
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
push eax
push ecx
add esi, 4
call fcn.00465470
add esp, 0x18
jmp case.default.0x4109a5
cmp eax, 0x5060004
je 0x412caa
cmp eax, 0x5060102
jne 0x415e04
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esp + 0x1c]
push 0
push eax
add esi, 4
call fcn.004653f0
add esp, 0x10
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edi, dword [esi + 4]
add esi, 4
lea edx, [esp + 0x24]
add esi, 4
mov dword [esp + 0x20], edi
mov eax, dword [esi]
push edx
push eax
call section..text
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
add esp, 0x10
push 1
push eax
push ecx
push edi
add esi, 4
call fcn.004022d0
add esp, 4
push eax
call fcn.00465190
add esp, 0x10
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
push eax
push ecx
add esi, 4
call fcn.00465420
add esp, 0x20
jmp case.default.0x4109a5
cmp eax, 0x6000104
ja 0x412eef
je 0x412e16
cmp eax, 0x5060404
je 0x412dad
cmp eax, 0x6000003
jne 0x415e04
mov edi, dword [esi]
lea edx, [esp + 0x18]
add esi, 4
mov dword [esp + 0x14], edi
mov eax, dword [esi]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x18]
push edi
push eax
call fcn.0046ca10
add esp, 8
neg al
sbb eax, eax
neg eax
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
mov edi, dword [esi]
lea ecx, [esp + 0x18]
add esi, 4
mov dword [esp + 0x14], edi
mov eax, dword [esi]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x24]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x2c]
add esp, 0x10
push 1
push eax
push 0xffffffffffffffff
push edi
add esi, 4
call fcn.004022d0
add esp, 4
push eax
call fcn.00465190
add esp, 0x10
cmp eax, 0xffffffff
mov dword [0x6c77a8], eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x18]
push ecx
push eax
call fcn.00465420
add esp, 8
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x30]
push eax
add esi, 4
call fcn.0046cc80
add esp, 0x1c
test eax, eax
mov dword [esp + 0x18], eax
je case.default.0x4109a5
mov ecx, dword [0x4bbfc8]
mov edx, dword [esp + 0x14]
shl ecx, 5
push ecx
mov ecx, dword [esp + 0x20]
push edx
push ecx
push eax
call fcn.004022d0
add esp, 4
push eax
call fcn.0043bdc0
mov edi, eax
add esp, 0x10
test edi, edi
je 0x40714f
cmp dword [0x4bbfc8], ebp
jne 0x412eb3
mov edx, dword [esp + 0x34]
test byte [edx], 1
je 0x412eb3
cmp dword [0x6cb7a4], ebp
je 0x412eb3
push edi
call fcn.00404340
add esp, 4
mov eax, dword [esp + 0x18]
push eax
call fcn.0046b4b0
add esp, 4
test dword [0x6cdd10], 0x10000
je 0x412ee1
test dword [edi], 0x40000
je 0x412ee1
push 4
push 0
push edi
call fcn.00433400
add esp, 0xc
mov ecx, dword [edi + 8]
mov dword [0x6c77a8], ecx
jmp case.default.0x4109a5
sub eax, 0x6010001
je 0x412f28
sub eax, 2
jne 0x415e04
mov edi, dword [esi]
lea edx, [esp + 0x18]
add esi, 4
mov dword [esp + 0x14], edi
mov eax, dword [esi]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
jne 0x412d8f
jmp 0x41605c
push 0
call fcn.0046dee0
add esp, 4
jmp case.default.0x4109a5
mov eax, dword [esi]
add esi, 4
mov dword [esp + 0x14], eax
mov ecx, dword [esi]
mov dword [esp + 0x18], ecx
push 0
push ecx
push eax
add esi, 4
call fcn.004022f0
add esp, 4
push eax
call fcn.0046ca60
add esp, 0xc
jmp case.default.0x4109a5
cmp eax, 0x80030005
ja 0x414e04
je 0x414d89
cmp eax, 0x80010c04
ja 0x414739
je 0x4142b7
cmp eax, 0x80010204
ja 0x413f90
je 0x413e70
cmp eax, 0x80000307
ja 0x413774
je 0x413116
cmp eax, 0x80000104
ja 0x413055
je 0x413001
cmp eax, 0x6010104
je 0x412fe3
cmp eax, 0x6010202
jne 0x415e04
mov eax, dword [esi]
push eax
mov dword [esp + 0x18], eax
add esi, 4
call fcn.004022f0
push eax
call fcn.0046dee0
add esp, 8
jmp case.default.0x4109a5
mov eax, dword [esi]
add esi, 4
mov dword [esp + 0x14], eax
mov ecx, dword [esi]
add esi, 4
mov dword [esp + 0x18], ecx
mov edx, dword [esi]
mov dword [esp + 0x1c], edx
push edx
jmp 0x412f48
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
add esp, 0x18
add esi, 4
mov dword [eax*4 + 0x6cde14], edx
mov dword [eax*4 + 0x6cde30], ecx
jmp case.default.0x4109a5
cmp eax, 0x80000202
jne 0x415e04
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov edi, dword [0x4bbfc8]
add edi, edi
add esi, 4
add edi, edi
call fcn.004752b0
lea ecx, [edi + 0x4bbfa0]
mov dword [edi + 0x4bc400], eax
mov eax, dword [esi]
push ecx
push eax
call section..text
add esp, 0x10
add esi, 4
test dword [0x6cde08], 0x800
je 0x4130e1
mov eax, dword [0x6cde0c]
cmp eax, 0xffffffff
je 0x4130e1
mov edx, dword [0x4bbfc8]
shl edx, 5
push edx
push 0
push 0xffffffffffffffff
push eax
call fcn.004022d0
add esp, 4
push eax
call fcn.0043bd70
mov dword [0x4bc828], ebp
add esp, 0x10
mov dword [ebx], 1
jmp case.default.0x4109a5
mov eax, dword [0x6cbd40]
cmp eax, 0xffffffff
je 0x41310b
mov ecx, dword [0x4bbfc8]
shl ecx, 5
push ecx
push 0
push 0xffffffffffffffff
push eax
call fcn.004022d0
add esp, 4
push eax
call fcn.0043bd70
add esp, 0x10
mov dword [ebx], 1
jmp case.default.0x4109a5
cmp byte [0x4bc3f5], 0
je 0x413127
sub esi, 4
jmp case.default.0x4109a5
mov edx, dword [esi]
mov dword [esp + 0x14], edx
mov eax, dword [esi + 4]
add esi, 4
mov dword [esp + 0x18], eax
mov ecx, dword [esi + 4]
add esi, 4
mov dword [esp + 0x1c], ecx
mov edi, dword [esi + 4]
add esi, 4
add esi, 4
mov dword [esp + 0x20], edi
mov ebp, dword [esi]
mov eax, dword [esi + 4]
lea edx, [esp + 0x24]
add esi, 4
push edx
push eax
mov dword [esp + 0x34], ebp
call section..text
push edi
add esi, 4
call fcn.0046d3f0
add esp, 0xc
test byte [0x6c77e4], 1
je 0x41324d
mov edi, dword [esp + 0x24]
mov eax, dword [edi*4 + 0x6cde30]
push eax
call fcn.0046e5d0
mov ebp, eax
add esp, 4
test ebp, ebp
je case.default.0x4109a5
push ebp
call fcn.0046e860
add esp, 4
test eax, eax
je 0x4131b2
push ebp
call fcn.0046e7b0
add esp, 4
push ebp
call fcn.0046f370
mov eax, dword [esp + 0x1c]
add esp, 4
xor ebx, ebx
test eax, eax
je 0x4131e6
push 1
push eax
call fcn.004022f0
add esp, 4
push eax
call fcn.0041b370
push eax
push ebp
call fcn.00471270
mov ebx, eax
mov eax, dword [esp + 0x28]
add esp, 0x10
mov ecx, dword [esp + 0x1c]
test ecx, ecx
je 0x413204
push ecx
call fcn.004022f0
push eax
push ebp
call fcn.00471270
add esp, 0xc
add ebx, eax
mov eax, dword [esp + 0x18]
test eax, eax
je 0x413224
push 2
push eax
call fcn.004022f0
add esp, 4
push eax
call fcn.0041b370
push eax
call fcn.0046ccb0
add esp, 0xc
jmp 0x413226
xor eax, eax
mov ecx, dword [esp + 0x14]
mov edx, dword [edi*4 + 0x6cde30]
push 1
push ecx
push edx
push eax
push 0
call fcn.00455ca0
push 1
push ebp
call fcn.0046e700
add esp, 0x1c
jmp 0x413534
xor edi, edi
test ebp, 0x2000000
je 0x4133d2
jmp 0x413260
mov eax, dword [edi + 0x6cde14]
push eax
call fcn.0046e5d0
push eax
call fcn.00471630
mov ecx, dword [edi + 0x6cde30]
push ecx
call fcn.0046e5d0
push eax
call fcn.00471630
add edi, 4
add esp, 0x10
cmp edi, 0x14
jl 0x413260
mov ebp, dword [esp + 0x24]
mov edx, dword [ebp*4 + 0x6cde14]
lea ebx, [ebp*4 + 0x6cde14]
push edx
call fcn.0046e5d0
mov edi, eax
add esp, 4
test edi, edi
je 0x41330b
cmp dword [esp + 0x18], 0
je 0x41330b
push 0
push edi
call fcn.0046e700
push edi
call fcn.0046e8b0
or eax, 0x10000
push eax
push edi
mov dword [esp + 0x3c], eax
call fcn.0046e880
mov eax, dword [esp + 0x2c]
add esp, 0x14
push 1
push eax
call fcn.004022f0
add esp, 4
push eax
call fcn.0041b370
push eax
push edi
call fcn.00471270
mov eax, dword [esp + 0x38]
and eax, 0xfffeffff
push eax
push edi
mov dword [esp + 0x40], eax
call fcn.0046e880
add esp, 0x18
mov ecx, dword [ebp*4 + 0x6cde30]
lea ebp, [ebp*4 + 0x6cde30]
push ecx
call fcn.0046e5d0
mov edi, eax
add esp, 4
test edi, edi
je 0x413375
cmp dword [esp + 0x1c], 0
je 0x413381
push 0
push edi
call fcn.0046e700
push edi
call fcn.0046e8b0
or eax, 0x10000
push eax
push edi
mov dword [esp + 0x3c], eax
call fcn.0046e880
mov edx, dword [esp + 0x30]
push edx
call fcn.004022f0
push eax
push edi
call fcn.00471270
mov eax, dword [esp + 0x48]
and eax, 0xfffeffff
push eax
push edi
mov dword [esp + 0x50], eax
call fcn.0046e880
add esp, 0x28
cmp dword [esp + 0x1c], 0
je 0x413381
mov ebp, dword [ebp]
jmp 0x413384
or ebp, 0xffffffff
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4133b1
push 2
push eax
call fcn.004022f0
add esp, 4
push eax
call fcn.0041b370
push eax
call fcn.0046ccb0
add esp, 0xc
cmp dword [esp + 0x18], 0
je 0x4133b3
mov ecx, dword [ebx]
jmp 0x4133b6
xor eax, eax
or ecx, 0xffffffff
mov edx, dword [esp + 0x14]
push 0
push edx
push ebp
push eax
push ecx
call fcn.00455ca0
add esp, 0x14
call fcn.004562b0
jmp case.default.0x4109a5
mov eax, dword [edi + 0x6cde14]
push eax
call fcn.0046e5d0
push eax
call fcn.00471630
mov ecx, dword [edi + 0x6cde30]
push ecx
call fcn.0046e5d0
push eax
call fcn.00471630
add edi, 4
add esp, 0x10
cmp edi, 0x14
jl 0x4133d2
mov ebp, dword [esp + 0x24]
mov edx, dword [ebp*4 + 0x6cde14]
lea eax, [ebp*4 + 0x6cde14]
push edx
mov dword [esp + 0x38], eax
call fcn.0046e5d0
mov edi, eax
add esp, 4
test edi, edi
je 0x41345e
mov eax, dword [esp + 0x18]
test eax, eax
je 0x413453
push 1
push eax
call fcn.004022f0
add esp, 4
push eax
call fcn.0041b370
push eax
push edi
call fcn.00471270
push 1
push edi
call fcn.0046e700
add esp, 0x18
jmp 0x41345e
push 0
push edi
call fcn.0046e700
add esp, 8
mov eax, dword [ebp*4 + 0x6cde30]
lea ebx, [ebp*4 + 0x6cde30]
push eax
call fcn.0046e5d0
mov ebp, eax
add esp, 4
test ebp, ebp
je 0x4134d2
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x4134bd
push eax
call fcn.004022f0
push eax
push ebp
call fcn.00471270
add esp, 0xc
test edi, edi
mov dword [esp + 0x30], eax
je 0x4134b0
test dword [edi + 0x4c], 0x200
je 0x4134b0
push 0
push ebp
push edi
call fcn.0046f720
add esp, 0xc
push 1
push ebp
call fcn.0046e700
add esp, 8
jmp 0x4134da
push 0
push ebp
mov dword [esp + 0x38], 0
call fcn.0046e700
add esp, 8
jmp 0x4134da
mov dword [esp + 0x30], 0
cmp dword [esp + 0x1c], 0
je 0x4134e5
mov edi, dword [ebx]
jmp 0x4134e8
or edi, 0xffffffff
mov eax, dword [esp + 0x18]
test eax, eax
je 0x413519
push 2
push eax
call fcn.004022f0
add esp, 4
push eax
call fcn.0041b370
push eax
call fcn.0046ccb0
add esp, 0xc
cmp dword [esp + 0x18], 0
je 0x41351b
mov ecx, dword [esp + 0x34]
mov ecx, dword [ecx]
jmp 0x41351e
xor eax, eax
or ecx, 0xffffffff
mov edx, dword [esp + 0x14]
push 0
push edx
push edi
push eax
push ecx
call fcn.00455ca0
mov ebx, dword [esp + 0x44]
add esp, 0x14
push 0
push 1
call fcn.00405940
mov eax, dword [esp + 0x28]
push eax
call fcn.0046b3e0
add esp, 0xc
test eax, eax
jne 0x413599
test dword [0x6c984c], 0x100
je 0x41357e
push 1
push 9
call fcn.00402a70
push 0
push 8
call fcn.00402a70
mov ecx, dword [esp + 0x30]
add esp, 0x10
push ecx
call fcn.0046b410
add esp, 4
jmp 0x4135a5
push 0
push 9
call fcn.00402a70
mov ecx, dword [esp + 0x28]
add esp, 8
push ecx
call fcn.0046b410
add esp, 4
jmp 0x4135a5
push 0
push 0xa
call fcn.00402a70
add esp, 8
mov eax, dword [esp + 0x14]
test eax, eax
je 0x413660
lea edx, [esp + 0x40]
push edx
push eax
call fcn.004022d0
add esp, 4
push eax
call fcn.0046c870
add esp, 8
test eax, eax
mov dword [esp + 0x28], eax
je 0x413660
mov ecx, dword [0x6cb798]
imul ecx, eax
mov eax, 0xd1b71759
mul ecx
mov eax, dword [0x6c77b0]
shr edx, 0xd
test eax, 0x800000
mov dword [esp + 0x28], edx
je 0x413630
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x413630
push ecx
call fcn.004022f0
push eax
push 4
call fcn.004332c0
mov edx, dword [esp + 0x34]
add esp, 0xc
test eax, eax
je 0x41362b
mov ecx, dword [esp + 0x40]
push 0
push edx
push ecx
push eax
call fcn.00433320
add esp, 4
jmp 0x41363e
mov eax, dword [0x6c77b0]
mov ecx, dword [esp + 0x40]
push 0
push edx
shr eax, 0x14
push ecx
and eax, 7
mov edx, dword [esp + 0x20]
push eax
push edx
call fcn.004022d0
add esp, 4
push eax
call fcn.00465ba0
add esp, 0x14
test eax, eax
je 0x413662
add eax, 0xc8
jmp 0x413662
xor eax, eax
test dword [0x6cde08], 0x800
je 0x41367c
push ebx
push eax
push 1
call fcn.00402790
add esp, 0xc
jmp 0x41369b
mov edi, dword [0x4bbfc8]
add edi, edi
add edi, edi
call fcn.004752b0
mov dword [edi + 0x4bc400], eax
mov dword [edi + 0x4bbfa0], 0xffffffff
mov eax, dword [esp + 0x2c]
and eax, 0xff0000
cmp eax, 0x20000
ja 0x413730
je 0x4136ed
test eax, eax
je 0x4136d4
cmp eax, 0x10000
jne case.default.0x4109a5
call fcn.0046f330
mov eax, dword [esp + 0x38]
mov dword [eax], 4
jmp case.default.0x4109a5
call fcn.004562b0
call fcn.0046f330
mov ecx, dword [esp + 0x38]
mov dword [ecx], 8
jmp case.default.0x4109a5
test byte [0x6c77b0], 0xf0
jne 0x413718
cmp dword [0x6c6d30], 0
jne 0x413718
call fcn.004562b0
call fcn.0046f330
mov edx, dword [esp + 0x38]
mov dword [edx], 8
jmp case.default.0x4109a5
push ebp
call fcn.0046f2d0
mov eax, dword [esp + 0x3c]
add esp, 4
mov dword [eax], 3
jmp case.default.0x4109a5
cmp eax, 0x30000
jne case.default.0x4109a5
test byte [0x6c77b0], 0xf0
jne 0x41375c
cmp dword [0x6c6d30], 0
jne 0x41375c
mov ecx, dword [esp + 0x38]
mov dword [ecx], 4
jmp case.default.0x4109a5
push ebp
call fcn.0046f2d0
mov edx, dword [esp + 0x3c]
add esp, 4
mov dword [edx], 4
jmp case.default.0x4109a5
cmp eax, 0x80010102
ja 0x413cbe
je 0x413b29
cmp eax, 0x80000406
je 0x413796
cmp eax, 0x80010004
jmp 0x415e02
mov eax, dword [esi]
mov dword [esp + 0x14], eax
mov ecx, dword [esi + 4]
add esi, 4
mov dword [esp + 0x18], ecx
mov edx, dword [esi + 4]
add esi, 4
mov dword [esp + 0x1c], edx
mov eax, dword [esi + 4]
add esi, 4
lea ecx, [esp + 0x2c]
mov dword [esp + 0x20], eax
mov eax, dword [esi + 4]
add esi, 4
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test byte [0x6c77e4], 1
je 0x413858
mov edi, dword [esp + 0x2c]
mov edx, dword [edi*4 + 0x6cde30]
push edx
call fcn.0046e5d0
mov ebp, eax
add esp, 4
test ebp, ebp
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
xor ebx, ebx
test eax, eax
je 0x413818
push eax
call fcn.004022f0
push eax
push ebp
call fcn.00471270
add esp, 0xc
mov ebx, eax
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x413832
push eax
call fcn.004022f0
push eax
push ebp
call fcn.00471270
add esp, 0xc
add ebx, eax
mov eax, dword [esp + 0x14]
mov ecx, dword [edi*4 + 0x6cde30]
push 1
push eax
push ecx
push 0xffffffffffffffff
call fcn.00455d90
push 1
push ebp
call fcn.0046e700
add esp, 0x18
jmp 0x41395a
mov ebx, dword [esp + 0x2c]
mov edx, dword [ebx*4 + 0x6cde14]
lea eax, [ebx*4 + 0x6cde14]
push edx
mov dword [esp + 0x34], eax
call fcn.0046e5d0
mov ebp, eax
add esp, 4
test ebp, ebp
je 0x4138d8
cmp dword [esp + 0x18], edi
je 0x4138cd
mov edi, 0x6cde14
mov eax, dword [edi]
push eax
call fcn.0046e5d0
push eax
call fcn.00471630
add edi, 4
add esp, 8
cmp edi, 0x6cde28
jl 0x413888
mov ecx, dword [esp + 0x18]
push 1
push ecx
call fcn.004022f0
add esp, 4
push eax
call fcn.0041b370
push eax
push ebp
call fcn.00471270
push 1
push ebp
call fcn.0046e700
add esp, 0x18
jmp 0x4138d8
push 0
push ebp
call fcn.0046e700
add esp, 8
mov edx, dword [ebx*4 + 0x6cde30]
lea edi, [ebx*4 + 0x6cde30]
push edx
call fcn.0046e5d0
mov ebp, eax
add esp, 4
test ebp, ebp
je 0x413927
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x413919
push eax
call fcn.004022f0
push eax
push ebp
call fcn.00471270
push 1
push ebp
mov ebx, eax
call fcn.0046e700
add esp, 0x14
jmp 0x413929
xor ebx, ebx
push ebx
push ebp
call fcn.0046e700
add esp, 8
jmp 0x413929
xor ebx, ebx
cmp dword [esp + 0x1c], 0
je 0x413934
mov ecx, dword [edi]
jmp 0x413937
or ecx, 0xffffffff
cmp dword [esp + 0x18], 0
je 0x413946
mov eax, dword [esp + 0x30]
mov eax, dword [eax]
jmp 0x413949
or eax, 0xffffffff
mov edx, dword [esp + 0x14]
push 0
push edx
push ecx
push eax
call fcn.00455d90
add esp, 0x10
mov edi, dword [esp + 0x38]
push 0
push 1
call fcn.00405940
mov eax, dword [esp + 0x1c]
add esp, 8
test eax, eax
je 0x413a2f
lea ecx, [esp + 0x40]
push ecx
push eax
call fcn.004022d0
add esp, 4
push eax
call fcn.0046c870
add esp, 8
test eax, eax
mov dword [esp + 0x28], eax
je 0x413a2f
mov edx, dword [0x6cb798]
imul edx, eax
mov eax, 0xd1b71759
mul edx
mov eax, dword [0x6c77b0]
shr edx, 0xd
test eax, 0x800000
mov dword [esp + 0x28], edx
je 0x4139ff
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x4139ff
push ecx
call fcn.004022f0
push eax
push 4
call fcn.004332c0
add esp, 0xc
test eax, eax
je 0x4139f6
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x40]
push 0
push ecx
push edx
push eax
call fcn.00433320
add esp, 4
push eax
mov eax, dword [esp + 0x24]
push eax
jmp 0x413a13
mov edx, dword [esp + 0x28]
mov eax, dword [0x6c77b0]
mov ecx, dword [esp + 0x40]
push 0
push edx
mov edx, dword [esp + 0x1c]
shr eax, 0x14
push ecx
and eax, 7
push eax
push edx
call fcn.004022d0
add esp, 4
push eax
call fcn.00465ba0
add esp, 0x14
test eax, eax
je 0x413a31
add eax, 0xc8
jmp 0x413a31
xor eax, eax
test dword [0x6cde08], 0x800
je 0x413a4b
push ebx
push eax
push 2
call fcn.00402790
add esp, 0xc
jmp 0x413a6e
mov edi, dword [0x4bbfc8]
add edi, edi
add edi, edi
call fcn.004752b0
mov dword [edi + 0x4bc400], eax
mov dword [edi + 0x4bbfa0], 0xffffffff
mov edi, dword [esp + 0x38]
mov eax, dword [esp + 0x20]
and eax, 0xff0000
cmp eax, 0x20000
ja 0x413ada
je 0x413ab4
test eax, eax
je 0x413a9f
cmp eax, 0x10000
jne case.default.0x4109a5
call fcn.0046f330
mov dword [edi], 4
jmp case.default.0x4109a5
call fcn.004562b0
call fcn.0046f330
mov dword [edi], 8
jmp case.default.0x4109a5
test byte [0x6c77b0], 0xf0
jne 0x413ac6
cmp dword [0x6c6d30], 0
je 0x413a9f
push ebp
call fcn.0046f2d0
add esp, 4
mov dword [edi], 3
jmp case.default.0x4109a5
cmp eax, 0x30000
jne case.default.0x4109a5
test byte [0x6c77b0], 0xf0
jne 0x413b15
cmp dword [0x6c6d30], 0
jne 0x413b15
cmp dword [0x6cbd40], 0xffffffff
je 0x413b0a
push 1
call fcn.00402950
add esp, 4
mov dword [edi], 4
jmp case.default.0x4109a5
push ebp
call fcn.0046f2d0
add esp, 4
mov dword [edi], 4
jmp case.default.0x4109a5
mov eax, dword [0x4bbfc8]
cmp dword [eax*4 + 0x4bbfd8], ebp
je 0x413bab
lea ecx, [esp + 0x28]
shl eax, 5
push ecx
add eax, 4
xor ebx, ebx
push eax
mov dword [esp + 0x30], ebx
call fcn.00433630
mov edi, eax
add esp, 8
cmp edi, ebx
je 0x413b9f
mov ebp, dword [esp + 0x34]
jmp 0x413b60
test byte [ebp], 1
je 0x413b76
mov ecx, dword [0x6cb7a4]
cmp ecx, ebx
je 0x413b76
push edi
call fcn.0043d460
push edi
call fcn.0043ab20
mov eax, dword [0x4bbfc8]
lea edx, [esp + 0x2c]
shl eax, 5
push edx
add eax, 4
push eax
mov dword [esp + 0x34], ebx
call fcn.00433630
mov edi, eax
add esp, 0xc
cmp edi, ebx
jne 0x413b60
mov eax, dword [0x4bbfc8]
mov dword [eax*4 + 0x4bbfd8], ebx
xor ebx, ebx
cmp dword [eax*4 + 0x4bbfb4], ebx
je 0x413c23
lea ecx, [esp + 0x28]
shl eax, 5
push ecx
add eax, 1
push eax
mov dword [esp + 0x30], ebx
call fcn.00433630
mov edi, eax
add esp, 8
cmp edi, ebx
je 0x413c17
mov edx, dword [esp + 0x34]
test byte [edx], 1
je 0x413bed
mov ecx, dword [0x6cb7a4]
cmp ecx, ebx
je 0x413bed
push edi
call fcn.0043d460
push edi
call fcn.0043ab20
mov ecx, dword [0x4bbfc8]
lea eax, [esp + 0x2c]
shl ecx, 5
push eax
add ecx, 1
push ecx
mov dword [esp + 0x34], ebx
call fcn.00433630
mov edi, eax
add esp, 0xc
cmp edi, ebx
jne 0x413bd4
mov eax, dword [0x4bbfc8]
mov dword [eax*4 + 0x4bbfb4], ebx
mov ecx, dword [esi]
push ebx
shl eax, 5
push ebx
add eax, 1
push eax
push 0xffffffffffffffff
push ecx
mov dword [esp + 0x28], ecx
add esi, 4
call fcn.004022d0
add esp, 4
push eax
call fcn.0043be60
add esp, 0x14
cmp eax, ebx
mov dword [esp + 0x28], eax
je 0x413cb3
cmp dword [0x4bbfc8], ebx
jne 0x413c79
mov edx, dword [esp + 0x34]
test byte [edx], 1
je 0x413c79
cmp dword [0x6cb7a4], ebx
je 0x413c79
push eax
call fcn.00433540
push eax
call fcn.00404340
add esp, 8
mov eax, dword [esp + 0x14]
push eax
call fcn.0046b470
add esp, 4
test eax, eax
jne 0x413ca4
mov ecx, dword [esp + 0x14]
push ecx
call fcn.0046b4b0
add esp, 4
cmp dword [0x4bbfc8], ebx
jne 0x413ca4
call fcn.0046b180
mov edx, dword [esp + 0x28]
mov dword [0x6c77a8], edx
jmp case.default.0x4109a5
mov dword [0x6c77a8], ebx
jmp case.default.0x4109a5
cmp eax, 0x80010104
jne 0x415e04
mov edi, dword [0x4bbfc8]
cmp dword [edi*4 + 0x4bbfd8], ebp
je 0x413d4d
lea eax, [esp + 0x28]
shl edi, 5
push eax
add edi, 4
xor ebx, ebx
push edi
mov dword [esp + 0x30], ebx
call fcn.00433630
mov edi, eax
add esp, 8
cmp edi, ebx
je 0x413d40
mov ebp, dword [esp + 0x34]
lea esp, [esp]
test byte [ebp], 1
je 0x413d16
mov ecx, dword [0x6cb7a4]
cmp ecx, ebx
je 0x413d16
push edi
call fcn.0043d460
push edi
call fcn.0043ab20
mov edx, dword [0x4bbfc8]
lea ecx, [esp + 0x2c]
shl edx, 5
push ecx
add edx, 4
push edx
mov dword [esp + 0x34], ebx
call fcn.00433630
mov edi, eax
add esp, 0xc
cmp edi, ebx
jne 0x413d00
mov edi, dword [0x4bbfc8]
mov dword [edi*4 + 0x4bbfd8], ebx
xor ebx, ebx
cmp dword [edi*4 + 0x4bbfb4], ebx
je 0x413dcd
lea eax, [esp + 0x28]
shl edi, 5
push eax
add edi, 1
push edi
mov dword [esp + 0x30], ebx
call fcn.00433630
mov edi, eax
add esp, 8
cmp edi, ebx
je 0x413dc0
mov ebp, dword [esp + 0x34]
lea ebx, [ebx]
test byte [ebp], 1
je 0x413d96
mov ecx, dword [0x6cb7a4]
cmp ecx, ebx
je 0x413d96
push edi
call fcn.0043d460
push edi
call fcn.0043ab20
mov edx, dword [0x4bbfc8]
lea ecx, [esp + 0x2c]
shl edx, 5
push ecx
add edx, 1
push edx
mov dword [esp + 0x34], ebx
call fcn.00433630
mov edi, eax
add esp, 0xc
cmp edi, ebx
jne 0x413d80
mov edi, dword [0x4bbfc8]
mov dword [edi*4 + 0x4bbfb4], ebx
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov ebp, dword [esi + 4]
add esi, 4
lea edx, [esp + 0x24]
add esi, 4
mov dword [esp + 0x20], ebp
mov eax, dword [esi]
push edx
push eax
call section..text
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x2c]
add esp, 0x10
push ebx
push eax
shl edi, 5
add edi, 1
push edi
push ecx
push ebp
add esi, 4
call fcn.004022d0
add esp, 4
push eax
call fcn.0043be60
add esp, 0x14
cmp eax, ebx
mov dword [esp + 0x28], eax
je 0x413cb3
cmp dword [0x4bbfc8], ebx
jne 0x413e52
mov edx, dword [esp + 0x34]
test byte [edx], 1
je 0x413e52
cmp dword [0x6cb7a4], ebx
je 0x413e52
push eax
call fcn.00433540
push eax
call fcn.00404340
add esp, 8
mov eax, dword [esp + 0x18]
push eax
call fcn.0046b470
add esp, 4
test eax, eax
jne 0x413ca4
mov ecx, dword [esp + 0x18]
jmp 0x413c8e
mov edi, dword [0x4bbfc8]
xor ebx, ebx
cmp dword [edi*4 + 0x4bbfd8], ebp
je 0x413eef
lea eax, [esp + 0x28]
shl edi, 5
push eax
add edi, 4
push edi
mov dword [esp + 0x30], ebx
call fcn.00433630
mov edi, eax
add esp, 8
cmp edi, ebx
je 0x413ee2
nop
mov ecx, dword [esp + 0x34]
test byte [ecx], 1
je 0x413eb9
mov ecx, dword [0x6cb7a4]
cmp ecx, ebx
je 0x413eb9
push edi
call fcn.0043d460
push edi
call fcn.0043ab20
mov eax, dword [0x4bbfc8]
lea edx, [esp + 0x2c]
shl eax, 5
push edx
add eax, 4
push eax
mov dword [esp + 0x34], ebx
call fcn.00433630
mov edi, eax
add esp, 0xc
cmp edi, ebx
jne 0x413ea0
mov edi, dword [0x4bbfc8]
mov dword [edi*4 + 0x4bbfd8], ebx
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov ebp, dword [esi + 4]
add esi, 4
lea edx, [esp + 0x24]
add esi, 4
mov dword [esp + 0x20], ebp
mov eax, dword [esi]
push edx
push eax
call section..text
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x2c]
add esp, 0x10
push ebx
push eax
shl edi, 5
add edi, 4
push edi
push ecx
push ebp
add esi, 4
call fcn.004022d0
add esp, 4
push eax
call fcn.0043be60
add esp, 0x14
cmp eax, ebx
mov dword [esp + 0x28], eax
je 0x413cb3
cmp dword [0x4bbfc8], ebx
jne 0x413f74
mov edx, dword [esp + 0x34]
test byte [edx], 1
je 0x413f74
cmp dword [0x6cb7a4], ebx
je 0x413f74
push eax
call fcn.00433540
push eax
call fcn.00404340
add esp, 8
mov eax, dword [esp + 0x18]
push eax
call fcn.0046b4b0
mov ecx, dword [esp + 0x2c]
add esp, 4
mov dword [0x6c77a8], ecx
jmp case.default.0x4109a5
cmp eax, 0x80010705
ja 0x4144a3
je 0x414357
cmp eax, 0x80010504
ja 0x4142ac
je 0x414219
cmp eax, 0x80010304
je 0x414071
cmp eax, 0x80010404
jne 0x415e04
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [0x4bbfc8]
mov ecx, 1
add esp, 0x18
add esi, 4
test dword [0x6c77b0], 0x10000000
mov dword [eax*4 + 0x4bbfd8], ecx
mov dword [eax*4 + 0x4bbfb4], ecx
je 0x415ebf
mov eax, dword [esp + 0x14]
test eax, eax
je 0x415ebf
test byte [0x6cde08], 0xf
je 0x414046
cmp dword [0x4b4004], edi
jne 0x415ebf
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push ecx
push edx
push eax
call fcn.00434270
add esp, 0xc
mov ecx, dword [0x4bbfc8]
mov dword [ecx*4 + 0x4bc400], eax
mov dword [ebx], 0xa
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov ecx, dword [0x6c77ac]
add esp, 0x18
add esi, 4
cmp dword [esp + 0x14], edi
jne 0x414160
test ecx, ecx
je 0x4140c1
push 1
call fcn.00402770
push 0x1520
call fcn.004812ee
add esp, 4
mov dword [esp + 0x30], eax
test eax, eax
mov dword [esp + 0x394], 0xc
je 0x4140ea
mov ecx, eax
call fcn.004373a0
jmp 0x4140ec
xor eax, eax
test eax, eax
mov dword [esp + 0x394], 0xffffffff
mov dword [0x6c77ac], eax
je case.default.0x4109a5
lea eax, [esp + 0x28]
push eax
xor edi, edi
push 4
mov dword [esp + 0x30], edi
call fcn.00433630
add esp, 8
test eax, eax
je 0x41414e
lea ecx, [ecx]
mov ecx, dword [esp + 0x18]
push 0
push 0
push 0
push ecx
mov ecx, dword [0x6c77ac]
push eax
push edi
call fcn.0043ce90
lea edx, [esp + 0x28]
push edx
push 4
add edi, 1
call fcn.00433630
add esp, 8
test eax, eax
jne 0x414120
call fcn.004752b0
mov ecx, dword [esp + 0x1c]
lea edx, [eax + ecx]
push edx
jmp 0x4141e1
test ecx, ecx
je 0x41416b
push 1
call fcn.00402770
push 0x1520
call fcn.004812ee
add esp, 4
mov dword [esp + 0x30], eax
test eax, eax
mov dword [esp + 0x394], 0xd
je 0x414194
mov ecx, eax
call fcn.004373a0
jmp 0x414196
xor eax, eax
test eax, eax
mov dword [esp + 0x394], 0xffffffff
mov dword [0x6c77ac], eax
je case.default.0x4109a5
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
push 0
push 0
push 0
push eax
push ecx
call fcn.00433540
mov ecx, dword [0x6c77ac]
add esp, 4
push eax
push 0
call fcn.0043ce90
call fcn.004752b0
mov edx, dword [esp + 0x1c]
lea ecx, [eax + edx]
push ecx
mov ecx, dword [0x6c77ac]
push eax
mov dword [esp + 0x30], eax
call fcn.004373d0
test dword [0x6c77b0], 0x10000000
jne 0x40de60
mov ecx, dword [0x6c77ac]
push 0xffffffffffffffff
call fcn.0043d5c0
mov dword [ebx], 8
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [0x4bbfc8]
mov ecx, 1
add esp, 0x18
add esi, 4
test dword [0x6c77b0], 0x10000000
mov dword [eax*4 + 0x4bbfd8], ecx
mov dword [eax*4 + 0x4bbfb4], ecx
je 0x415ebf
mov eax, dword [esp + 0x14]
test eax, eax
je 0x415ebf
test byte [0x6cde08], 0xf
je 0x414297
cmp dword [0x4b4004], edi
jne 0x415ebf
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push ecx
push edx
push eax
call fcn.004342c0
jmp 0x414056
cmp eax, 0x80010604
jne 0x415e04
mov edi, dword [esi]
lea ecx, [esp + 0x18]
add esi, 4
mov dword [esp + 0x14], edi
mov eax, dword [esi]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x24]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x2c]
add esp, 0x10
add esi, 4
test al, 4
mov edx, 1
jne 0x414305
mov ecx, dword [0x4bbfc8]
mov dword [ecx*4 + 0x4bbfd8], edx
mov dword [ecx*4 + 0x4bbfb4], edx
mov cl, al
not cl
movzx ecx, cl
and ecx, edx
test dword [0x6c77b0], 0x10000000
mov dword [0x4b4004], ecx
je 0x415ebf
test edi, edi
je 0x415eb6
test byte [0x6cde08], 0xf
je 0x41433d
test ecx, ecx
jne 0x415ebf
mov edx, dword [esp + 0x18]
push eax
push edx
push edi
call fcn.004022d0
add esp, 4
push eax
call fcn.00434310
jmp 0x414056
mov edi, dword [0x4bbfc8]
xor ebx, ebx
cmp dword [edi*4 + 0x4bbfd8], ebp
je 0x4143d6
lea edx, [esp + 0x28]
shl edi, 5
push edx
add edi, 4
push edi
mov dword [esp + 0x30], ebx
call fcn.00433630
mov edi, eax
add esp, 8
cmp edi, ebx
je 0x4143c9
mov eax, dword [esp + 0x34]
test byte [eax], 1
je 0x41439f
mov ecx, dword [0x6cb7a4]
cmp ecx, ebx
je 0x41439f
push edi
call fcn.0043d460
push edi
call fcn.0043ab20
mov edx, dword [0x4bbfc8]
lea ecx, [esp + 0x2c]
shl edx, 5
push ecx
add edx, 4
push edx
mov dword [esp + 0x34], ebx
call fcn.00433630
mov edi, eax
add esp, 0xc
cmp edi, ebx
jne 0x414386
mov edi, dword [0x4bbfc8]
mov dword [edi*4 + 0x4bbfd8], ebx
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov ebp, dword [esi + 4]
add esi, 4
lea edx, [esp + 0x24]
add esi, 4
mov dword [esp + 0x20], ebp
mov eax, dword [esi]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x30]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x2c]
add esp, 0x18
push ebx
push edx
shl edi, 5
add edi, 4
push edi
push 0xffffffffffffffff
push ebp
add esi, 4
call fcn.004022d0
add esp, 4
push eax
call fcn.0043be60
push eax
mov dword [esp + 0x40], eax
call fcn.00433540
mov edi, eax
add esp, 0x18
cmp edi, ebx
je 0x413cb3
fild dword [esp + 0x20]
push ebx
sub esp, 8
fstp dword [esp + 4]
fild dword [esp + 0x28]
fstp dword [esp]
push edi
call fcn.00436ed0
add esp, 0x10
cmp dword [0x4bbfc8], ebx
jne 0x414487
mov eax, dword [esp + 0x34]
test byte [eax], 1
je 0x414487
cmp dword [0x6cb7a4], ebx
je 0x414487
push edi
call fcn.00404340
add esp, 4
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0046b4b0
mov edx, dword [esp + 0x2c]
add esp, 4
mov dword [0x6c77a8], edx
jmp case.default.0x4109a5
cmp eax, 0x80010a04
ja 0x41472f
je 0x41467c
cmp eax, 0x80010804
je 0x4145aa
cmp eax, 0x80010906
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov ecx, dword [esp + 0x44]
add esp, 0x28
add esi, 4
test cl, 4
mov edi, 1
jne 0x414542
mov eax, dword [0x4bbfc8]
mov dword [eax*4 + 0x4bbfd8], edi
mov dword [eax*4 + 0x4bbfb4], edi
mov edx, dword [esp + 0x2c]
mov al, dl
not al
movzx eax, al
and eax, edi
test dword [0x6c77b0], 0x10000000
mov dword [0x4b4004], eax
je 0x415ebf
test byte [0x6cde08], 0xf
je 0x414579
test eax, eax
je 0x414579
test dl, 2
jmp 0x415eb8
mov eax, dword [esp + 0x18]
push edx
mov edx, dword [esp + 0x24]
push edx
push ecx
mov ecx, dword [esp + 0x20]
push eax
push ecx
call fcn.00434360
mov edx, dword [0x4bbfc8]
mov dword [edx*4 + 0x4bc400], eax
add esp, 0x14
mov dword [ebx], 0x13
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov cl, byte [esp + 0x34]
add esp, 0x18
add esi, 4
test cl, 4
mov edx, 1
jne 0x414600
mov eax, dword [0x4bbfc8]
mov dword [eax*4 + 0x4bbfd8], edx
mov dword [eax*4 + 0x4bbfb4], edx
mov al, cl
not al
movzx eax, al
and eax, edx
test dword [0x6c77b0], 0x10000000
mov dword [0x4b4004], eax
je 0x415ebf
cmp dword [esp + 0x18], edi
je 0x414674
test byte [0x6cde08], 0xf
je 0x414635
test eax, eax
jne 0x415ebf
mov ecx, dword [esp + 0x14]
push ecx
call fcn.00446390
mov edx, dword [esp + 0x20]
mov eax, dword [0x4bbfc8]
mov ecx, dword [esp + 0x1c]
push edx
push eax
push ecx
push 0x3e9
call fcn.004341c0
mov edx, dword [0x4bbfc8]
mov dword [edx*4 + 0x4bc400], eax
add esp, 0x14
mov dword [ebx], 0xa
jmp case.default.0x4109a5
test cl, 2
jmp 0x415eb8
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov cl, byte [esp + 0x34]
add esp, 0x18
add esi, 4
test cl, 4
mov edx, 1
jne 0x4146d2
mov eax, dword [0x4bbfc8]
mov dword [eax*4 + 0x4bbfd8], edx
mov dword [eax*4 + 0x4bbfb4], edx
mov al, cl
not al
movzx eax, al
and eax, edx
test dword [0x6c77b0], 0x10000000
mov dword [0x4b4004], eax
je 0x415ebf
cmp dword [esp + 0x18], edi
je 0x414674
test byte [0x6cde08], 0xf
je 0x41470b
test eax, eax
jne 0x415ebf
mov ecx, dword [esp + 0x14]
push ecx
call fcn.00446390
mov edx, dword [esp + 0x20]
mov eax, dword [0x4bbfc8]
mov ecx, dword [esp + 0x1c]
push edx
push eax
push ecx
push 0x3ea
jmp 0x414654
cmp eax, 0x80010b04
jmp 0x415e02
cmp eax, 0x80020701
ja 0x414a92
je 0x414a83
cmp eax, 0x80020201
ja 0x4149ad
je 0x414996
cmp eax, 0x80020003
ja 0x414974
je 0x4148c2
cmp eax, 0x80010d04
je 0x41480a
cmp eax, 0x80020002
jne 0x415e04
mov eax, dword [esi]
push 0
push 0
push 0xd
push 0xffffffffffffffff
push eax
mov dword [esp + 0x28], eax
add esi, 4
call fcn.004022d0
add esp, 4
push eax
call fcn.0043be60
add esp, 0x14
test eax, eax
mov dword [esp + 0x28], eax
je 0x40b26e
push eax
call fcn.00433540
mov edi, eax
push edi
call fcn.004327e0
mov edx, dword [0x6c77dc]
push edx
push edi
call fcn.00432840
push 4
push 0
push edi
call fcn.00433400
add esp, 0x1c
cmp dword [0x4bbfc8], ebp
jne 0x4147fb
mov eax, dword [esp + 0x34]
test byte [eax], 1
je 0x4147fb
cmp dword [0x6cb7a4], ebp
je 0x4147fb
push edi
call fcn.00404340
add esp, 4
mov ecx, dword [esp + 0x28]
mov dword [0x6c77a8], ecx
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov ecx, dword [esp + 0x34]
add esp, 0x18
add esi, 4
test cl, 4
mov edx, 1
jne 0x414860
mov eax, dword [0x4bbfc8]
mov dword [eax*4 + 0x4bbfd8], edx
mov dword [eax*4 + 0x4bbfb4], edx
mov al, cl
not al
movzx eax, al
and eax, edx
test dword [0x6c77b0], 0x10000000
mov dword [0x4b4004], eax
je 0x415ebf
test byte [0x6cde08], 0xf
je 0x41488f
test eax, eax
jne 0x415ebf
mov edx, dword [esp + 0x14]
push ecx
mov ecx, dword [esp + 0x1c]
push ecx
push edx
call fcn.00476670
mov ecx, dword [0x4bbfc8]
add esp, 0xc
test eax, eax
mov dword [ecx*4 + 0x4bc400], eax
je case.default.0x4109a5
mov dword [ebx], 0xa
jmp case.default.0x4109a5
mov edi, dword [esi]
lea edx, [esp + 0x18]
add esi, 4
mov dword [esp + 0x14], edi
mov eax, dword [esi]
push edx
push eax
call section..text
add esp, 8
xor eax, eax
add esi, 4
cmp dword [esp + 0x18], eax
push 0
setne al
push 0
lea eax, [eax + eax + 0xb]
push eax
push 0xffffffffffffffff
push edi
call fcn.004022d0
add esp, 4
push eax
call fcn.0043be60
add esp, 0x14
test eax, eax
mov dword [esp + 0x28], eax
je 0x40714f
push eax
call fcn.00433540
mov edi, eax
push edi
call fcn.004327e0
mov ecx, dword [0x6c77dc]
push ecx
push edi
call fcn.00432840
push 4
push 0
push edi
call fcn.00433400
add esp, 0x1c
cmp dword [0x4bbfc8], ebp
jne 0x40c2b9
mov edx, dword [esp + 0x34]
test byte [edx], 1
je 0x40c2b9
cmp dword [0x6cb7a4], ebp
je 0x40c2b9
push edi
call fcn.00404340
mov eax, dword [esp + 0x2c]
add esp, 4
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
cmp eax, 0x80020101
jne 0x415e04
push 1
push 1
call fcn.00405940
add esp, 8
mov dword [ebx], 8
jmp case.default.0x4109a5
push 1
push 0
call fcn.00405940
add esp, 8
mov dword [ebx], 8
jmp case.default.0x4109a5
cmp eax, 0x80020501
ja 0x414a25
je 0x414a14
cmp eax, 0x80020302
je 0x4149f2
cmp eax, 0x80020402
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
mov dword [0x6cdde4], edx
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edx, dword [esp + 0x1c]
add esp, 8
add esi, 4
mov dword [0x6cbd40], edx
jmp case.default.0x4109a5
push 0xf
push 0xb
call fcn.0043ac10
add esp, 8
jmp case.default.0x4109a5
cmp eax, 0x80020602
jne 0x415e04
mov eax, dword [esi]
push 0
push 0
push 0x16
push 0xffffffffffffffff
push eax
mov dword [esp + 0x28], eax
add esi, 4
call fcn.004022d0
add esp, 4
push eax
call fcn.0043be60
add esp, 0x14
test eax, eax
mov dword [esp + 0x28], eax
je 0x40b26e
push 4
push 0
push eax
call fcn.00433540
add esp, 4
push eax
call fcn.00433400
mov eax, dword [esp + 0x34]
add esp, 0xc
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
push 0x16
call fcn.0043ab70
add esp, 4
jmp case.default.0x4109a5
cmp eax, 0x80020c03
ja 0x414c9b
je 0x414c33
cmp eax, 0x80020a02
ja 0x414b93
je 0x414b25
cmp eax, 0x80020802
je 0x414ad1
cmp eax, 0x80020901
jne 0x415e04
push 0x17
call fcn.0043ab70
add esp, 4
jmp case.default.0x4109a5
mov eax, dword [esi]
push 0
push 0
push 0x17
push 0xffffffffffffffff
push eax
mov dword [esp + 0x28], eax
add esi, 4
call fcn.004022d0
add esp, 4
push eax
call fcn.0043be60
add esp, 0x14
test eax, eax
mov dword [esp + 0x28], eax
je 0x40b26e
push 4
push 0
push eax
call fcn.00433540
add esp, 4
push eax
call fcn.00433400
mov ecx, dword [esp + 0x34]
add esp, 0xc
mov dword [0x6c77a8], ecx
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test dword [0x6c77b0], 0x10000000
mov dword [0x4b4004], 1
je 0x414996
mov ecx, dword [0x6c77ac]
test ecx, ecx
je 0x414b63
push 1
call fcn.00402770
push 0x1520
call fcn.004812ee
add esp, 4
mov dword [esp + 0x30], eax
test eax, eax
mov dword [esp + 0x394], 0xe
je 0x414d0f
mov ecx, eax
call fcn.004373a0
jmp 0x414d11
cmp eax, 0x80020b02
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edx, dword [esp + 0x1c]
lea eax, [esp + 0x30]
push eax
xor edi, edi
push 0xb
add esi, 4
mov dword [0x6c77dc], edx
mov dword [esp + 0x38], edi
call fcn.00433630
add esp, 0x10
cmp eax, edi
je 0x414bef
mov ecx, dword [esp + 0x14]
push ecx
push eax
call fcn.00432840
lea edx, [esp + 0x30]
push edx
push 0xb
call fcn.00433630
add esp, 0x10
cmp eax, edi
jne 0x414bd1
lea eax, [esp + 0x28]
push eax
push 0xd
mov dword [esp + 0x30], edi
call fcn.00433630
add esp, 8
cmp eax, edi
je case.default.0x4109a5
lea ebx, [ebx]
mov ecx, dword [esp + 0x14]
push ecx
push eax
call fcn.00432840
lea edx, [esp + 0x30]
push edx
push 0xd
call fcn.00433630
add esp, 0x10
cmp eax, edi
jne 0x414c10
jmp case.default.0x4109a5
mov edi, dword [esi]
lea ecx, [esp + 0x18]
add esi, 4
mov dword [esp + 0x14], edi
mov eax, dword [esi]
push ecx
push eax
call section..text
add esp, 8
xor edx, edx
add esi, 4
cmp dword [esp + 0x18], edx
push 0
setne dl
push 0
lea edx, [edx + edx + 0xc]
push edx
push 0xffffffffffffffff
push edi
call fcn.004022d0
add esp, 4
push eax
call fcn.0043be60
add esp, 0x14
test eax, eax
mov dword [esp + 0x28], eax
je 0x40714f
push eax
call fcn.00433540
push 4
mov edi, eax
push 0
push edi
call fcn.00433400
add esp, 0x10
jmp 0x4147d9
cmp eax, 0x80020d01
je 0x414d7a
cmp eax, 0x80020e02
je 0x414d58
cmp eax, 0x80021202
jne 0x415e04
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov ecx, dword [0x6c77ac]
add esp, 8
add esi, 4
test ecx, ecx
mov dword [0x4b4004], edi
je 0x414ce6
push 1
call fcn.00402770
push 0x1520
call fcn.004812ee
add esp, 4
mov dword [esp + 0x30], eax
test eax, eax
mov dword [esp + 0x394], 0xf
je 0x414d0f
mov ecx, eax
call fcn.004373a0
jmp 0x414d11
xor eax, eax
mov dword [0x6c77ac], eax
mov eax, dword [esp + 0x14]
push eax
push 1
mov dword [esp + 0x39c], 0xffffffff
call fcn.00403210
add esp, 8
call fcn.004752b0
mov ecx, dword [esp + 0x14]
lea edx, [eax + ecx]
mov ecx, dword [0x6c77ac]
push edx
push eax
mov dword [esp + 0x30], eax
call fcn.004373d0
mov dword [ebx], 0x12
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edx, dword [esp + 0x1c]
add esp, 8
add esi, 4
mov dword [0x6cde0c], edx
jmp case.default.0x4109a5
mov eax, dword [0x6c77dc]
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
mov eax, dword [esi]
push 0x6cbbdc
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbbe0
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbbe4
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbbe8
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov dword [0x6cbbec], 0xffffffff
jmp case.default.0x4109a5
cmp eax, 0x80050102
ja 0x4154fd
je 0x4154d0
cmp eax, 0x80030901
ja 0x415075
je 0x41505f
cmp eax, 0x80030401
ja 0x414fba
je 0x414f39
cmp eax, 0x80030201
ja 0x414f16
je 0x414efe
cmp eax, 0x80030006
je 0x414e72
cmp eax, 0x80030101
jne 0x415e04
call fcn.00405cf0
test al, al
je case.default.0x4109a5
mov esi, dword [0x4bbfd0]
jmp case.default.0x4109a5
mov eax, dword [esi]
push 0x6cbbdc
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbbe0
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbbe4
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbbe8
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbbec
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
jne case.default.0x4109a5
jmp 0x41605c
cmp byte [0x4bc3f5], 0
je case.default.0x4109a5
mov dword [ebx], 0x65
jmp case.default.0x4109a5
cmp eax, 0x80030301
jne 0x415e04
cmp byte [0x4bc3f5], 0
je case.default.0x4109a5
mov dword [ebx], 0x66
jmp case.default.0x4109a5
cmp byte [0x4bc3f5], 0
je case.default.0x4109a5
push 0x44
call fcn.004812ee
mov edi, eax
add esp, 4
test edi, edi
je case.default.0x4109a5
push edi
call fcn.00454cf0
add esp, 4
test al, al
je 0x414fac
cmp dword [edi], ebp
je 0x414fac
mov edx, dword [edi + 4]
lea ecx, [esp + 0x40]
push ecx
push edx
call fcn.0046c870
add esp, 8
test eax, eax
mov dword [esp + 0x28], eax
je 0x414fac
mov ecx, dword [0x6cb798]
imul ecx, eax
mov eax, 0xd1b71759
mul ecx
shr edx, 0xd
push edx
mov dword [esp + 0x2c], edx
mov edx, dword [esp + 0x44]
push edx
push 0xffffffffffffffff
push edi
call fcn.004658e0
add esp, 0x10
push edi
call fcn.00481252
add esp, 4
jmp case.default.0x4109a5
cmp eax, 0x80030701
ja 0x415037
je 0x415028
cmp eax, 0x80030501
je 0x415042
cmp eax, 0x80030602
jne 0x415e04
mov eax, dword [esi]
push 0
push 0
push 0x14
push 0xffffffffffffffff
push eax
mov dword [esp + 0x28], eax
add esi, 4
call fcn.004022d0
add esp, 4
push eax
call fcn.0043be60
add esp, 0x14
test eax, eax
mov dword [esp + 0x28], eax
je 0x40b26e
push 4
push 0
push eax
call fcn.00433540
add esp, 4
push eax
call fcn.00433400
mov eax, dword [esp + 0x34]
add esp, 0xc
mov dword [0x6c77a8], eax
jmp case.default.0x4109a5
push 0x14
call fcn.0043ab70
add esp, 4
jmp case.default.0x4109a5
cmp eax, 0x80030801
jne 0x415e04
cmp byte [0x4bc3f5], 0
je case.default.0x4109a5
call fcn.00405c20
mov esi, dword [0x4bbfd0]
jmp case.default.0x4109a5
xor ecx, ecx
cmp byte [0x4bc3f5], cl
setne cl
mov dword [0x6c77a8], ecx
jmp case.default.0x4109a5
cmp eax, 0x80040101
ja 0x415439
je 0x41542d
cmp eax, 0x80030c05
ja 0x41537b
je 0x4152fb
cmp eax, 0x80030a01
je 0x4152e7
add eax, 0x7ffcf4ec
cmp eax, 1
ja 0x415e04
mov eax, dword [esi]
push 0x6cbd48
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd4c
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd50
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd54
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd58
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd5c
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd60
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd64
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd68
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd6c
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd70
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd74
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd78
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd7c
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd80
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd84
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd88
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd8c
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd90
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd94
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [0x6cde34]
push edx
call fcn.004543e0
push 0
call fcn.00454db0
add esp, 8
jmp case.default.0x4109a5
call fcn.004560f0
push 7
call fcn.0045cda0
add esp, 4
jmp case.default.0x4109a5
mov edi, dword [esi]
lea ecx, [esp + 0x18]
add esi, 4
mov dword [esp + 0x14], edi
mov eax, dword [esi]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x1c]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x20]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
push edx
push eax
push ecx
push edi
call fcn.004022d0
add esp, 4
push eax
call fcn.00454430
add esp, 0x10
jmp case.default.0x4109a5
cmp eax, 0x80030d07
jne 0x415e04
mov eax, dword [esi]
push 0x6cbd98
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd9c
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbda0
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbda4
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbda8
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbdac
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
jne case.default.0x4109a5
jmp 0x41605c
or dword [0x6c77e4], 1
jmp case.default.0x4109a5
cmp eax, 0x80040201
je 0x4154c4
cmp eax, 0x80040301
je 0x41548b
cmp eax, 0x80050005
jne 0x415e04
mov eax, dword [esi]
add esi, 4
mov dword [esp + 0x14], eax
mov ecx, dword [esi]
add esi, 4
mov dword [esp + 0x18], ecx
mov edx, dword [esi]
add esi, 4
mov dword [esp + 0x1c], edx
mov edi, dword [esi]
push edi
push edx
push ecx
push eax
mov dword [esp + 0x30], edi
add esi, 4
call fcn.00452450
add esp, 0x10
jmp case.default.0x4109a5
xor edi, edi
lea ecx, [ecx]
mov edx, dword [edi + 0x6cde14]
push edx
call fcn.0046e5d0
push eax
call fcn.00471630
mov eax, dword [edi + 0x6cde30]
push eax
call fcn.0046e5d0
push eax
call fcn.00471630
add edi, 4
add esp, 0x10
cmp edi, 0x14
jl 0x415490
jmp case.default.0x4109a5
and dword [0x6c77e4], 0xfffffffe
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
push edx
call fcn.00452410
add esp, 4
jmp case.default.0x4109a5
cmp eax, 0xf0000201
ja 0x4159eb
je 0x41599a
cmp eax, 0x80060301
ja 0x415730
je 0x4156e2
cmp eax, 0x80060104
ja 0x41568e
je 0x4155d5
cmp eax, 0x80050202
je 0x415598
cmp eax, 0x80050302
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
test eax, eax
je 0x415589
push eax
call fcn.004752b0
push eax
push 0
call fcn.00451b30
add esp, 0xc
test al, al
je case.default.0x4109a5
mov dword [ebx], 0x14
jmp case.default.0x4109a5
push 0
call fcn.00451fb0
add esp, 4
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4155c6
push eax
call fcn.004752b0
push eax
push 1
jmp 0x41556e
push 1
call fcn.00451fb0
add esp, 4
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edx, dword [esi + 4]
add esi, 4
lea ecx, [esp + 0x24]
mov dword [esp + 0x20], edx
mov eax, dword [esi + 4]
add esi, 4
push ecx
push eax
call section..text
lea edx, [esp + 0x38]
push edx
push 0x11
xor ebx, ebx
push 0xf
add esi, 4
mov dword [esp + 0x44], ebx
call fcn.004336c0
mov ebp, dword [esp + 0x50]
mov edi, eax
add esp, 0x1c
cmp edi, ebx
je 0x415658
test byte [ebp], 1
je 0x415637
mov ecx, dword [0x6cb7a4]
cmp ecx, ebx
je 0x415637
push edi
call fcn.0043d460
push edi
call fcn.0043ab20
lea eax, [esp + 0x2c]
push eax
push 0x11
push 0xf
mov dword [esp + 0x38], ebx
call fcn.004336c0
mov edi, eax
add esp, 0x10
cmp edi, ebx
jne 0x415621
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
push ebp
push ebx
push ecx
push edx
push eax
call fcn.004022d0
add esp, 4
push eax
call fcn.00405b70
mov ecx, dword [esp + 0x2c]
push ecx
mov dword [0x6c77a8], eax
call fcn.0046b4b0
add esp, 0x18
jmp case.default.0x4109a5
cmp eax, 0x80060201
jne 0x415e04
lea edx, [esp + 0x28]
push edx
push 0x11
push 0xf
mov dword [esp + 0x34], edi
call fcn.004336c0
add esp, 0xc
test eax, eax
je 0x4156d1
push 3
push 1
push eax
call fcn.00433400
lea eax, [esp + 0x34]
push eax
push 0x11
push 0xf
call fcn.004336c0
add esp, 0x18
test eax, eax
jne 0x4156b2
push 1
push 1
call fcn.00403570
add esp, 8
jmp case.default.0x4109a5
lea ecx, [esp + 0x28]
push ecx
push 0x11
push 0xf
mov dword [esp + 0x34], edi
call fcn.004336c0
add esp, 0xc
test eax, eax
je 0x41571f
jmp 0x415700
push 3
push 0
push eax
call fcn.00433400
lea edx, [esp + 0x34]
push edx
push 0x11
push 0xf
call fcn.004336c0
add esp, 0x18
test eax, eax
jne 0x415700
push 0
push 1
call fcn.00403570
add esp, 8
jmp case.default.0x4109a5
cmp eax, 0xf000000a
ja 0x415953
je 0x415872
cmp eax, 0x80060401
je 0x415811
cmp eax, 0x80060504
jne 0x415e04
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edx, dword [esi + 4]
add esi, 4
lea ecx, [esp + 0x24]
mov dword [esp + 0x20], edx
mov eax, dword [esi + 4]
add esi, 4
push ecx
push eax
call section..text
lea edx, [esp + 0x38]
push edx
push 0x11
xor ebx, ebx
push 0xf
add esi, 4
mov dword [esp + 0x44], ebx
call fcn.004336c0
mov ebp, dword [esp + 0x50]
mov edi, eax
add esp, 0x1c
cmp edi, ebx
je 0x4157da
test byte [ebp], 1
je 0x4157b9
mov ecx, dword [0x6cb7a4]
cmp ecx, ebx
je 0x4157b9
push edi
call fcn.0043d460
push edi
call fcn.0043ab20
lea eax, [esp + 0x2c]
push eax
push 0x11
push 0xf
mov dword [esp + 0x38], ebx
call fcn.004336c0
mov edi, eax
add esp, 0x10
cmp edi, ebx
jne 0x4157a3
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
push ebp
push 1
push ecx
push edx
push eax
call fcn.004022d0
add esp, 4
push eax
call fcn.00405b70
mov ecx, dword [esp + 0x2c]
push ecx
mov dword [0x6c77a8], eax
call fcn.0046b4b0
add esp, 0x18
jmp case.default.0x4109a5
lea edx, [esp + 0x28]
push edx
push 0x11
xor ebx, ebx
push 0xf
mov dword [esp + 0x34], ebx
call fcn.004336c0
mov edi, eax
add esp, 0xc
cmp edi, ebx
je case.default.0x4109a5
mov ebp, dword [esp + 0x34]
test byte [ebp], 1
je 0x41584c
mov ecx, dword [0x6cb7a4]
cmp ecx, ebx
je 0x41584c
push edi
call fcn.0043d460
push edi
call fcn.0043ab20
lea eax, [esp + 0x2c]
push eax
push 0x11
push 0xf
mov dword [esp + 0x38], ebx
call fcn.004336c0
mov edi, eax
add esp, 0x10
cmp edi, ebx
jne 0x415836
jmp case.default.0x4109a5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x68]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x74]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
add esp, 0x40
lea ecx, [esp + 0x34]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x40]
add esp, 8
push edx
mov edx, dword [esp + 0x28]
push eax
mov eax, dword [esp + 0x34]
push ecx
mov ecx, dword [esp + 0x2c]
push edx
mov edx, dword [esp + 0x2c]
push eax
mov eax, dword [esp + 0x2c]
push ecx
mov ecx, dword [esp + 0x2c]
push edx
push eax
push ecx
add esi, 4
call fcn.00433540
add esp, 4
push eax
call fcn.00434760
add esp, 0x24
jmp case.default.0x4109a5
cmp eax, 0xf0000101
jne 0x415e04
call fcn.004620b0
push pe_nt_image_headers32
push 5
call fcn.00462130
push 0x7d0
push 4
call fcn.00462130
push 0
push 3
call fcn.00462130
push 0
call fcn.004631c0
mov eax, dword [esp + 0x50]
add esp, 0x1c
or dword [eax], 4
jmp case.default.0x4109a5
push 0x49a468
mov dword [0x6cdecc], 1
call fcn.004632e0
push pe_nt_image_headers32
push 5
call fcn.004633a0
push 0x3c
push 4
call fcn.004633a0
push 0
push 3
call fcn.004633a0
push 0xa
push 8
call fcn.004633a0
push 0x64
call fcn.00463bb0
mov eax, dword [esp + 0x5c]
add esp, 0x28
or dword [eax], 8
jmp case.default.0x4109a5
cmp eax, 0xf0020209
ja 0x415de7
je 0x415d10
cmp eax, 0xf002000f
ja 0x415cfb
je 0x415b72
cmp eax, 0xf0000301
je 0x415b52
cmp eax, 0xf0000308
jne 0x415e04
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x38]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x68]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x54]
mov edi, dword [esp + 0x64]
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x70]
mov dword [0x6cded0], eax
mov eax, dword [esp + 0x58]
push str.sys_leaf.epa
add esi, 4
mov dword [0x6cdecc], 0x64
mov dword [0x6cded4], ecx
mov dword [0x6cded8], edx
mov dword [0x6cdedc], eax
mov dword [0x6cdee0], edi
mov dword [0x6cdee4], ebx
mov dword [0x6cdee8], ebp
call fcn.004632e0
mov ecx, dword [esp + 0x50]
push ecx
push 3
call fcn.004633a0
mov edx, dword [esp + 0x5c]
add esp, 0x44
push edx
push 9
call fcn.004633a0
mov eax, dword [esp + 0x24]
push eax
push 4
call fcn.004633a0
mov ecx, dword [esp + 0x30]
push ecx
push 8
call fcn.004633a0
push edi
push 0xa
call fcn.004633a0
push ebx
push 0xb
call fcn.004633a0
push ebp
push 5
call fcn.004633a0
push 0x64
call fcn.00463bb0
mov eax, dword [esp + 0x68]
add esp, 0x34
or dword [eax], 8
jmp case.default.0x4109a5
fld1
push ecx
fstp dword [esp]
push 0x10
push 0x10
push 0x40
push pe_nt_image_headers32
push 0
call fcn.004617e0
add esp, 0x18
jmp case.default.0x4109a5
mov eax, dword [esi]
push 0x6cbd48
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd4c
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd50
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd54
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd58
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd5c
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd60
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd64
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd68
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd6c
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd70
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd74
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd78
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd7c
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
push 0
call fcn.00454db0
add esp, 4
jmp case.default.0x4109a5
cmp eax, 0xf0020101
jne 0x415e04
call fcn.00454460
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x18]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x1c]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x20]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x2c]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esi]
mov eax, dword [esi + 4]
add esi, 4
mov ecx, dword [esi + 4]
add esi, 4
push ecx
push eax
mov dword [esp + 0x30], ecx
add esi, 4
call fcn.004022d0
add esp, 4
push eax
push edx
call fcn.004022d0
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
add esp, 4
push eax
mov eax, dword [esp + 0x38]
push eax
mov eax, dword [esp + 0x28]
push ecx
mov ecx, dword [esp + 0x28]
push edx
push eax
push ecx
call fcn.00454490
add esp, 0x20
jmp case.default.0x4109a5
cmp eax, 0xf0020302
je 0x415f12
cmp eax, 0xf0020401
je 0x415eca
cmp eax, 0xff010004
je 0x415e1b
movzx eax, byte [esi - 4]
sub esi, 4
cmp eax, ebp
je 0x4068f6
lea esi, [esi + eax*4]
jmp case.default.0x4109a5
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x34]
mov edi, dword [0x4bbfc8]
add esp, 0x18
add esi, 4
test al, 4
mov edx, 1
jne 0x415e71
mov dword [edi*4 + 0x4bbfd8], edx
mov dword [edi*4 + 0x4bbfb4], edx
mov cl, al
not cl
movzx ecx, cl
and ecx, edx
test dword [0x6c77b0], 0x10000000
mov dword [0x4b4004], ecx
je 0x415ebf
mov edx, dword [esp + 0x14]
test edx, edx
je 0x415eb6
test byte [0x6cde08], 0xf
je 0x415ea1
test ecx, ecx
jne 0x415ebf
push eax
mov eax, dword [esp + 0x1c]
push edi
push eax
push edx
call fcn.004341c0
add esp, 0x10
jmp 0x414059
test al, 2
je 0x415ebf
call fcn.004753e0
mov dword [ebx], 8
jmp case.default.0x4109a5
cmp byte [0x4bc3f5], 0
je case.default.0x4109a5
push 0x44
call fcn.004812ee
mov edi, eax
add esp, 4
test edi, edi
je case.default.0x4109a5
push edi
call fcn.00455830
add esp, 4
test al, al
je 0x414fac
cmp dword [edi], ebp
je 0x414fac
mov eax, dword [edi + 4]
lea edx, [esp + 0x40]
push edx
push eax
jmp 0x414f74
mov eax, dword [esi]
mov dword [esp + 0x28], eax
add esi, 4
call fcn.004557e0
mov dword [esp + 0x14], eax
call fcn.00455800
mov edi, eax
test edi, edi
je case.default.0x4109a5
call fcn.00405c20
push 0
push edi
call fcn.0046d9c0
add esp, 8
test eax, eax
je case.default.0x4109a5
mov ecx, dword [esp + 0x14]
push ecx
call fcn.00456000
push 0
push 0xffffffffffffffff
mov dword [0x4bbfc8], ebp
call fcn.00404520
mov edx, dword [esp + 0x40]
mov dword [edx], eax
mov eax, dword [0x6cb79c]
add esp, 0xc
test eax, eax
je 0x415fb5
mov ecx, eax
shr ecx, 0x1f
and ecx, 1
push ecx
and eax, 0xfffffff
push eax
call fcn.004022d0
add esp, 4
push eax
call fcn.004654d0
add esp, 8
call fcn.00465540
test dword [0x6cb79c], 0x40000000
je 0x415fba
push 0
push 0
call fcn.004656c0
add esp, 8
jmp 0x415fba
call fcn.00465600
push 0
push 0xffffffffffffffff
call fcn.004653f0
add esp, 8
xor esi, esi
jmp 0x415fd0
mov eax, dword [esi + 0x6cdd14]
test eax, eax
je 0x416002
mov edx, dword [esi + 0x6c6d3c]
push 1
push 0
push 3
push edx
push eax
call fcn.004022d0
add esp, 4
push eax
call fcn.00465190
add esp, 0x10
push eax
call fcn.00465420
add esp, 8
add esi, 4
cmp esi, 0x24
jl 0x415fd0
mov eax, dword [0x6c9844]
push eax
mov byte [0x4bc3f5], 0
mov byte [0x4bc3f4], 0
call fcn.00402320
add esp, 4
cmp dword [esp + 0x28], ebp
mov esi, eax
je case.default.0x4109a5
mov ecx, dword [0x4bbfc8]
push ecx
push 0
mov edx, esi
sub edx, dword [0x4bc864]
push 0
push edx
call fcn.0046c200
add esp, 0x10
test eax, eax
je case.default.0x4109a5
mov eax, dword [0x4bc864]
mov ecx, dword [esp + 0x28]
lea esi, [eax + ecx]
mov eax, esi
mov ecx, dword [esp + 0x38c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x374]
xor ecx, esp
call fcn.0048171f
add esp, 0x384
ret