Function at 0x4070f0
Capabilities:
Check os version
Get number of processors
Hide graphical window
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x49c4ba
mov eax, dword fs:[0]
push eax
sub esp, 0x3ac
mov eax, dword [0x4be944]
xor eax, esp
mov dword [esp + 0x3a8], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4be944]
xor eax, esp
push eax
lea eax, [esp + 0x3c0]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x3d0]
mov ebx, dword [esp + 0x3d4]
mov ecx, dword [esp + 0x3d8]
xor edi, edi
xor esi, esi
mov dword [esp + 0x18], esi
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], edi
mov eax, dword [ebp]
add ebp, 4
cmp eax, 0x3000202
mov dword [esp + 0x34], ebx
mov dword [esp + 0x30], ecx
ja 0x40f28e
je 0x40f265
cmp eax, 0x1020002
ja 0x409b0d
je 0x409a15
cmp eax, 0x208001
ja 0x4080fb
je 0x4080e7
cmp eax, 0x102303
ja 0x407c0d
je 0x407be8
cmp eax, 0x101202
ja 0x40773b
je 0x4076d0
cmp eax, 0x100902
ja 0x4074ae
je 0x407472
cmp eax, 0x100402
ja 0x407358
je 0x407325
cmp eax, 0x100202
ja 0x4072f7
je 0x407272
cmp eax, 0x100002
je 0x415f4e
cmp eax, 0x100102
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
cmp dword [esp + 0x14], esi
je 0x407248
test dword [0x6d03f8], 0x80000000
jne case.default.0x4138e6
mov edx, dword [0x4c0658]
push esi
push 1
push 0x501
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp case.default.0x4138e6
test dword [0x6d03f8], 0x80000000
je case.default.0x4138e6
mov eax, dword [0x4c0658]
push 0
push 0
push 0x501
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
cmp eax, 4
ja case.default.0x4138e6
jmp dword [eax*4 + 0x41a5dc]
push 0
push 8
call fcn.00402d00
add esp, 8
jmp case.default.0x4138e6
push 0
push 0xb
call fcn.00402d00
add esp, 8
jmp case.default.0x4138e6
push 0
push 0xc
call fcn.00402d00
add esp, 8
jmp case.default.0x4138e6
push 0
push 0xd
call fcn.00402d00
add esp, 8
jmp case.default.0x4138e6
push 0
push 0xe
call fcn.00402d00
add esp, 8
jmp case.default.0x4138e6
cmp eax, 0x100302
jne 0x41a4cd
lea edx, [esp + 0x14]
push edx
mov eax, dword [ebp]
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
jne case.default.0x4138e6
xor eax, eax
jmp 0x41a5b3
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x14]
push edx
call fcn.00468cd0
mov eax, dword [esp + 0x18]
add esp, 4
mov dword [0x6d2528], eax
jmp case.default.0x4138e6
cmp eax, 0x100702
ja 0x407429
je 0x4073e9
cmp eax, 0x100502
je 0x4073b0
cmp eax, 0x100602
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x14]
push 0
push edx
call fcn.00468990
mov eax, dword [esp + 0x1c]
add esp, 8
mov dword [0x6d685c], eax
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x14]
push 0xffffffffffffffff
push edx
call fcn.00468fd0
mov eax, dword [esp + 0x1c]
add esp, 8
mov dword [0x6d4484], eax
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
cmp dword [esp + 0x14], esi
je 0x40741a
or dword [0x6d03f8], 0x800000
jmp case.default.0x4138e6
and dword [0x6d03f8], 0xff7fffff
jmp case.default.0x4138e6
cmp eax, 0x100802
jne 0x41a4cd
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
mov ecx, dword [0x6d03f8]
and eax, 0xf
shl eax, 0x14
and ecx, 0xff8fffff
or eax, ecx
mov dword [0x6d03f8], eax
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov ecx, dword [esp + 0x14]
mov eax, dword [0x6d03f8]
shl ecx, 4
xor ecx, eax
and ecx, 0xf0
xor eax, ecx
mov dword [0x6d03f8], eax
jmp case.default.0x4138e6
cmp eax, 0x100e02
ja 0x40760a
je 0x4075da
cmp eax, 0x100c02
ja 0x4075ae
je 0x40756e
cmp eax, 0x100a02
je 0x40753e
cmp eax, 0x100b02
jne 0x41a4cd
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
and dword [0x6d03f8], 0xfff3ffff
sub eax, 1
je 0x40752a
sub eax, 1
jne 0x407534
or dword [0x6d03f8], 0x40000
call fcn.00469150
jmp case.default.0x4138e6
or dword [0x6d03f8], 0x80000
call fcn.00469150
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x14]
push edx
push 4
call fcn.004031e0
add esp, 8
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
cmp dword [esp + 0x14], esi
je 0x40759f
or dword [0x6d03f8], 0x10000000
jmp case.default.0x4138e6
and dword [0x6d03f8], 0xefffffff
jmp case.default.0x4138e6
cmp eax, 0x100d02
jne 0x41a4cd
mov eax, dword [ebp]
push 0x6d69c8
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
jne 0x407534
jmp 0x41a5b3
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
push eax
push 4
call fcn.004031e0
add esp, 8
jmp case.default.0x4138e6
cmp eax, 0x100f02
je 0x407696
cmp eax, 0x101002
je 0x40765c
cmp eax, 0x101102
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
push eax
push 0
mov dword [0x6d6a54], eax
call fcn.0045fbe0
add esp, 8
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
cmp dword [esp + 0x14], esi
je 0x40768a
or dword [0x6d4478], 2
jmp case.default.0x4138e6
and dword [0x6d4478], 0xfffffffd
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
cmp dword [esp + 0x14], esi
je 0x4076c4
or dword [0x6d4478], 1
jmp case.default.0x4138e6
and dword [0x6d4478], 0xfffffffe
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
cmp eax, dword [0x6d8ad4]
je case.default.0x4138e6
test dword [0x6d03f8], 0x80000000
je 0x407731
mov eax, dword [0x4c0658]
push eax
call fcn.00405980
mov edx, dword [0x4c0658]
mov ecx, dword [esp + 0x18]
push edx
mov dword [0x6d8ad4], ecx
call fcn.00405980
add esp, 8
jmp case.default.0x4138e6
mov dword [0x6d8ad4], eax
jmp case.default.0x4138e6
cmp eax, 0x101b02
ja 0x4079d0
je 0x40798d
cmp eax, 0x101702
ja 0x4078bd
je 0x407883
cmp eax, 0x101502
ja 0x407838
je 0x4077f8
cmp eax, 0x101302
je 0x4077c3
cmp eax, 0x101402
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [0x6d8bf0]
and dword [0x6d03f8], 0xf0ffffff
mov edx, eax
xor edx, dword [esp + 0x14]
and edx, 0xffffff
xor eax, edx
mov dword [0x6d8bf0], eax
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x14]
and dword [0x6d03f8], 0xffffff0f
mov dword [0x6cf998], edx
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
cmp dword [esp + 0x14], esi
je 0x407829
or dword [0x6d8bf0], 0x1000000
jmp case.default.0x4138e6
and dword [0x6d8bf0], 0xfeffffff
jmp case.default.0x4138e6
cmp eax, 0x101602
jne 0x41a4cd
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
cmp dword [esp + 0x14], esi
je 0x407874
or dword [0x6d8bf0], 0x2000000
jmp case.default.0x4138e6
and dword [0x6d8bf0], 0xfdffffff
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
cmp dword [esp + 0x14], esi
je 0x4078b1
or dword [0x6d89a0], 1
jmp case.default.0x4138e6
and dword [0x6d89a0], 0xfffffffe
jmp case.default.0x4138e6
cmp eax, 0x101802
je 0x407953
cmp eax, 0x101902
je 0x40791a
cmp eax, 0x101a02
jne 0x41a4cd
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
cmp dword [esp + 0x14], esi
je 0x40790b
or dword [0x6d8bf0], 0x4000000
jmp case.default.0x4138e6
and dword [0x6d8bf0], 0xfbffffff
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x14]
push 0xfffffffffffffffe
push edx
call fcn.00468fd0
mov eax, dword [esp + 0x1c]
add esp, 8
mov dword [0x6d23d0], eax
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
cmp dword [esp + 0x14], esi
je 0x407981
or dword [0x6d89a0], 2
jmp case.default.0x4138e6
and dword [0x6d89a0], 0xfffffffd
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
and dword [0x6d4478], 0xfffff0ff
test eax, eax
je case.default.0x4138e6
and eax, 0xf
shl eax, 8
or dword [0x6d4478], eax
jmp case.default.0x4138e6
cmp eax, 0x101f02
ja 0x407b0f
je 0x407adc
cmp eax, 0x101e02
ja 0x407aba
je 0x407a7e
cmp eax, 0x101c02
je 0x407a44
cmp eax, 0x101d02
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
cmp dword [esp + 0x14], esi
je 0x407a35
or dword [0x6d048c], 0x100
jmp case.default.0x4138e6
and dword [0x6d048c], 0xfffffeff
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
push 1
push eax
call fcn.00468990
mov ecx, dword [esp + 0x1c]
add esp, 8
mov dword [0x6d2424], ecx
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov ecx, dword [esp + 0x14]
mov eax, dword [0x6d4478]
shl ecx, 0xc
xor ecx, eax
and ecx, 0xf000
xor eax, ecx
mov dword [0x6d4478], eax
jmp case.default.0x4138e6
cmp eax, 0x101f01
jne 0x41a4cd
mov edx, dword [0x6d4478]
shr edx, 0x10
and edx, 1
mov dword [0x6cf9a4], edx
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
cmp dword [esp + 0x14], esi
setne dl
push edx
push 3
call fcn.00403780
add esp, 8
jmp case.default.0x4138e6
cmp eax, 0x102002
je 0x407bac
cmp eax, 0x102102
je 0x407b6c
cmp eax, 0x102202
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
cmp dword [esp + 0x14], esi
je 0x407b5d
or dword [0x6d89a0], 0x100000
jmp case.default.0x4138e6
and dword [0x6d89a0], 0xffefffff
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
cmp dword [esp + 0x14], esi
je 0x407b9d
or dword [0x6d89a0], 0x200000
jmp case.default.0x4138e6
and dword [0x6d89a0], 0xffdfffff
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x14]
mov eax, dword [0x6d4478]
shl edx, 4
xor edx, eax
and edx, 0xf0
xor eax, edx
mov dword [0x6d4478], eax
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
lea edx, [esp + 0x18]
jmp 0x407306
cmp eax, 0x201001
ja 0x407ee5
je 0x407ed1
cmp eax, 0x200701
ja 0x407dcf
je 0x407db8
cmp eax, 0x200201
ja 0x407d61
je 0x407e64
cmp eax, 0x200001
ja 0x407d42
je 0x407d33
cmp eax, 0x102403
je 0x407ca3
cmp eax, 0x108002
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
cmp dword [esp + 0x14], esi
je 0x407c94
or dword [0x6d89a0], 0x10000
jmp case.default.0x4138e6
and dword [0x6d89a0], 0xfffeffff
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x18]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
test dword [0x6d03f8], 0x80000000
jne 0x407cf1
or dword [0x6d03f8], 0x80000000
cmp dword [esp + 0x14], esi
jne 0x407cff
mov dword [esp + 0x14], 0x500
cmp dword [esp + 0x18], esi
jne 0x407d0d
mov dword [esp + 0x18], 0x2d0
mov edx, dword [0x4c0658]
push edx
mov dword [0x6d89ac], 0x50002d0
call fcn.00405980
add esp, 4
jmp case.default.0x4138e6
or eax, ecx
je 0x40ec3c
mov dword [0x6cf9a4], 1
jmp case.default.0x4138e6
cmp eax, 0x200101
jne 0x41a4cd
mov eax, dword [0x6d03f8]
and eax, 0x80000000
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
cmp eax, 0x200501
ja 0x407d9e
je 0x407d8d
cmp eax, 0x200301
je 0x407d33
cmp eax, 0x200401
jne 0x41a4cd
mov ecx, dword [0x6d2528]
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
mov edx, dword [0x6d4484]
mov dword [0x6cf9a4], edx
jmp case.default.0x4138e6
cmp eax, 0x200601
jne 0x41a4cd
mov eax, dword [0x6d685c]
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov ecx, dword [0x6d03f8]
shr ecx, 0x17
and ecx, 1
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
cmp eax, 0x200c02
ja 0x407e95
je 0x407e7e
cmp eax, 0x200a01
ja 0x407e3c
je 0x407e27
cmp eax, 0x200801
je 0x407e12
cmp eax, 0x200901
jne 0x41a4cd
mov edx, dword [0x6d03f8]
shr edx, 4
and edx, 0xf
mov dword [0x6cf9a4], edx
jmp case.default.0x4138e6
mov eax, dword [0x6d03f8]
shr eax, 0x14
and eax, 7
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
movzx ecx, byte [0x6d03fb]
and ecx, 0xf
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
cmp eax, 0x200b01
jne 0x41a4cd
mov eax, dword [0x6d03f8]
shr eax, 0x12
and eax, 3
sub eax, edi
je 0x407e64
sub eax, 1
je 0x407e6f
sub eax, 1
je 0x407d33
mov dword [0x6cf9a4], edi
jmp case.default.0x4138e6
mov dword [0x6cf9a4], 2
jmp case.default.0x4138e6
mov edx, dword [0x6d03f8]
shr edx, 0x1c
and edx, 1
mov dword [0x6cf9a4], edx
jmp case.default.0x4138e6
cmp eax, 0x200d01
je 0x407ec0
cmp eax, 0x200e01
je 0x407e27
cmp eax, 0x200f01
jne 0x41a4cd
mov eax, dword [0x6d4478]
and eax, 1
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov edx, dword [0x6d69c8]
mov dword [0x6cf9a4], edx
jmp case.default.0x4138e6
mov eax, dword [0x6d4478]
shr eax, 1
and eax, 1
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
cmp eax, 0x201901
ja 0x407fed
je 0x407fde
cmp eax, 0x201501
ja 0x407f86
je 0x407f71
cmp eax, 0x201301
ja 0x407f4f
je 0x407f40
cmp eax, 0x201101
je 0x407f2f
cmp eax, 0x201201
jne 0x41a4cd
mov ecx, dword [0x6d8ad4]
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
mov edx, dword [0x6d6a54]
mov dword [0x6cf9a4], edx
jmp case.default.0x4138e6
mov eax, dword [0x6cf998]
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
cmp eax, 0x201401
jne 0x41a4cd
mov ecx, dword [0x6d8bf0]
and ecx, 0xffffff
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
movzx edx, byte [0x6d8bf3]
and edx, 1
mov dword [0x6cf9a4], edx
jmp case.default.0x4138e6
cmp eax, 0x201601
je 0x407fc7
cmp eax, 0x201701
je 0x407fb3
cmp eax, 0x201801
jne 0x41a4cd
mov eax, dword [0x6d89a0]
shr eax, 1
and eax, 1
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov ecx, dword [0x6d89a0]
and ecx, 1
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
mov edx, dword [0x6d8bf0]
shr edx, 0x19
and edx, 1
mov dword [0x6cf9a4], edx
jmp case.default.0x4138e6
mov eax, dword [0x6d23d0]
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
cmp eax, 0x201e01
ja 0x40808b
je 0x408074
cmp eax, 0x201c01
ja 0x408052
je 0x408043
cmp eax, 0x201a01
je 0x40802c
cmp eax, 0x201b02
jne 0x41a4cd
mov ecx, dword [0x6d4478]
shr ecx, 8
and ecx, 0xf
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
mov edx, dword [0x6d8bf0]
shr edx, 0x1a
and edx, 1
mov dword [0x6cf9a4], edx
jmp case.default.0x4138e6
mov eax, dword [0x6d2424]
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
cmp eax, 0x201d01
jne 0x41a4cd
mov ecx, dword [0x6d048c]
shr ecx, 8
and ecx, 1
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
mov edx, dword [0x6d4478]
shr edx, 0xc
and edx, 0xf
mov dword [0x6cf9a4], edx
jmp case.default.0x4138e6
cmp eax, 0x202001
je 0x4080d0
cmp eax, 0x202101
je 0x4080b9
cmp eax, 0x202201
jne 0x41a4cd
mov eax, dword [0x6d89a0]
shr eax, 0x14
and eax, 1
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov ecx, dword [0x6d89a0]
shr ecx, 0x15
and ecx, 1
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
mov edx, dword [0x6d4478]
shr edx, 4
and edx, 0xf
mov dword [0x6cf9a4], edx
jmp case.default.0x4138e6
movzx eax, byte [0x6d89a2]
and eax, 1
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
cmp eax, 0x1001401
ja 0x408d40
je 0x408cb9
cmp eax, 0x1000202
ja 0x408740
je 0x4087f2
cmp eax, 0x400501
ja 0x4082a4
je 0x408283
cmp eax, 0x400001
ja 0x4081db
je 0x4081ba
cmp eax, 0x300201
ja 0x40819e
je 0x408187
cmp eax, 0x300001
je 0x40816d
cmp eax, 0x300101
jne 0x41a4cd
mov ecx, dword [0x6d8bd4]
shr ecx, 0xb
and ecx, 1
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
mov edx, dword [0x6d8bd4]
and dl, 0xc3
neg dl
sbb edx, edx
neg edx
mov dword [0x6cf9a4], edx
jmp case.default.0x4138e6
push 0
push 6
call fcn.004031e0
add esp, 8
mov dword [0x4c013c], esi
jmp case.default.0x4138e6
cmp eax, 0x300301
jne 0x41a4cd
push 0
push 5
call fcn.004031e0
add esp, 8
jmp case.default.0x4138e6
lea eax, [esp + 0x1d8]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx ecx, word [esp + 0x1d8]
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
cmp eax, 0x400301
ja 0x408258
je 0x408237
cmp eax, 0x400101
je 0x408216
cmp eax, 0x400201
jne 0x41a4cd
lea edx, [esp + 0x188]
push edx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [esp + 0x18e]
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
lea ecx, [esp + 0x1b8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx edx, word [esp + 0x1ba]
mov dword [0x6cf9a4], edx
jmp case.default.0x4138e6
lea eax, [esp + 0x1c8]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx ecx, word [esp + 0x1d0]
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
cmp eax, 0x400401
jne 0x41a4cd
lea edx, [esp + 0x198]
push edx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [esp + 0x1a2]
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
lea ecx, [esp + 0x1a8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx edx, word [esp + 0x1b4]
mov dword [0x6cf9a4], edx
jmp case.default.0x4138e6
cmp eax, 0x500202
ja 0x4086df
je 0x408696
cmp eax, 0x500001
ja 0x40863d
je 0x40861f
cmp eax, 0x410002
je 0x4085a1
cmp eax, 0x410103
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
cmp eax, 4
ja case.default.0x4138e6
jmp dword [eax*4 + 0x41a5f0]
mov eax, dword [esp + 0x18]
cmp eax, 3
ja case.default.0x4138e6
jmp dword [eax*4 + 0x41a604]
mov eax, dword [0x6d447c]
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov ecx, dword [0x6d447c]
mov eax, 0x10624dd3
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x3e8
sub ecx, eax
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
mov ecx, dword [0x6d447c]
mov eax, 0x45e7b273
imul ecx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xea60
sub ecx, eax
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
mov ecx, dword [0x6d447c]
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
mov eax, dword [esp + 0x18]
cmp eax, 3
ja case.default.0x4138e6
jmp dword [eax*4 + 0x41a614]
mov ecx, dword [0x6d447c]
mov eax, 0x10624dd3
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov ecx, dword [0x6d447c]
mov eax, 0x10624dd3
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
cdq
mov ecx, 0x3c
idiv ecx
mov dword [0x6cf9a4], edx
jmp case.default.0x4138e6
mov ecx, dword [0x6d0488]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
add edx, edx
add edx, edx
add edx, edx
sub ecx, edx
mov edx, dword [0x6d447c]
imul ecx, ecx, 0xe10
mov eax, 0x10624dd3
imul edx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add ecx, edx
add eax, ecx
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov eax, dword [esp + 0x18]
sub eax, 0
je 0x4084e0
sub eax, 1
je 0x4084bf
sub eax, 1
jne case.default.0x4138e6
mov ecx, dword [0x6d0488]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
add edx, edx
add edx, edx
add edx, edx
sub ecx, edx
mov esi, ecx
shl esi, 4
sub esi, ecx
mov ecx, dword [0x6d447c]
mov eax, 0x45e7b273
imul ecx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + esi*4]
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
mov ecx, dword [0x6d447c]
mov eax, 0x45e7b273
imul ecx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov ecx, dword [0x6d447c]
mov eax, 0x45e7b273
imul ecx
sar edx, 0xe
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
mov eax, dword [esp + 0x18]
sub eax, 0
je 0x408570
sub eax, 1
je 0x408543
sub eax, 1
jne case.default.0x4138e6
mov ecx, dword [0x6d0488]
mov eax, 0x30c30c31
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xa8
sub ecx, eax
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
mov ecx, dword [0x6d0488]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
add edx, edx
add edx, edx
add edx, edx
sub ecx, edx
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
mov eax, dword [0x6d0488]
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov ecx, dword [0x6d0488]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov esi, dword [esp + 0x14]
xor eax, eax
cmp esi, eax
je 0x408610
mov eax, 0xd1b71759
mul esi
shr edx, 0xd
mov dword [0x6d0488], edx
mov eax, 0x51eb851f
mul esi
mov ecx, edx
shr ecx, 5
mov eax, ecx
imul ecx, ecx, 0x64
xor edx, edx
mov edi, 0x64
div edi
mov eax, edx
shl eax, 4
sub eax, edx
add eax, eax
add eax, eax
sub eax, ecx
add eax, esi
imul eax, eax, 0x3e8
mov dword [0x6d447c], eax
jmp case.default.0x4138e6
mov dword [0x6d0488], eax
mov dword [0x6d447c], eax
jmp case.default.0x4138e6
mov ecx, dword [0x4c0658]
push 0
push 0xf020
push 0x112
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp case.default.0x4138e6
cmp eax, 0x500102
jne 0x41a4cd
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
cmp dword [esp + 0x14], esi
je 0x40867b
mov eax, dword [0x4c0658]
push eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp case.default.0x4138e6
mov ecx, dword [0x4c0658]
push 2
push ecx
call dword [sym.imp.USER32.dll_GetWindow]
push eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
cmp dword [esp + 0x14], esi
je 0x4086cb
mov eax, dword [0x4c0658]
push 5
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp case.default.0x4138e6
mov ecx, dword [0x4c0658]
push 0
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
jmp case.default.0x4138e6
cmp eax, 0x500302
je 0x40871a
cmp eax, 0x1000001
je 0x408703
cmp eax, 0x1000101
jne 0x41a4cd
mov dword [ebx], 7
jmp case.default.0x4138e6
push 0
push 0
call fcn.00470480
add esp, 8
mov dword [ebx], 6
jmp case.default.0x4138e6
mov eax, dword [ebp]
push eax
mov dword [esp + 0x18], eax
add ebp, 4
call fcn.00402380
mov edx, dword [0x4c0658]
add esp, 4
push eax
push edx
call dword [sym.imp.USER32.dll_SetWindowTextA]
jmp case.default.0x4138e6
cmp eax, 0x1000b02
ja 0x40896f
je 0x40894e
cmp eax, 0x1000703
ja 0x4088e2
je 0x4088ae
cmp eax, 0x1000502
ja 0x408846
je 0x408800
cmp eax, 0x1000302
je 0x4087cc
cmp eax, 0x1000401
jne 0x41a4cd
mov eax, dword [0x4c00e8]
push 0x4c0140
push 0x4c00e8
push ebx
mov dword [esp + 0x20], eax
call fcn.0046fb10
add esp, 0xc
test eax, eax
mov dword [esp + 0x28], eax
je 0x4087b2
mov ecx, dword [0x4c017c]
lea ebp, [ecx + eax]
mov edx, dword [esp + 0x14]
cmp edx, dword [0x4c00e8]
je case.default.0x4138e6
call fcn.0042bd40
jmp case.default.0x4138e6
mov eax, dword [0x4c00e8]
push eax
mov ecx, ebp
sub ecx, dword [0x4c017c]
push 0
add ecx, 4
push 0
push ecx
call fcn.0046fab0
add esp, 0x10
test eax, eax
je 0x415f4e
mov ebp, dword [ebp]
add ebp, dword [0x4c017c]
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov dword [ebx], 2
mov esi, dword [0x4c00e8]
add esi, esi
add esi, esi
call fcn.00479090
mov dword [esi + 0x4c0114], eax
mov eax, dword [esp + 0x14]
mov dword [esi + 0x4c0080], eax
jmp case.default.0x4138e6
cmp eax, 0x1000602
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov dword [ebx], 1
mov esi, dword [0x4c00e8]
add esi, esi
add esi, esi
call fcn.00479090
cmp dword [0x6d69cc], 0xffffffff
mov edx, dword [esp + 0x14]
mov dword [esi + 0x4c0114], eax
mov dword [esi + 0x4c0080], edx
je case.default.0x4138e6
push 1
call fcn.00402be0
add esp, 4
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
cmp dword [esp + 0x14], esi
jne 0x415f4e
mov ebp, dword [ebp]
add ebp, dword [0x4c017c]
jmp case.default.0x4138e6
cmp eax, 0x1000801
je 0x408937
cmp eax, 0x1000901
je case.default.0x4138e6
cmp eax, 0x1000a02
jne 0x41a4cd
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov dword [ebx], 0xc
mov eax, dword [esp + 0x14]
mov ecx, dword [0x4c00e8]
mov dword [ecx*4 + 0x4c0080], eax
jmp case.default.0x4138e6
call fcn.004790a0
mov edx, dword [0x4c00e8]
mov dword [edx*4 + 0x4c0154], eax
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
jne 0x410a88
jmp 0x41a5b3
cmp eax, 0x1001001
ja 0x408b79
je 0x408b01
cmp eax, 0x1000e04
ja 0x408aa2
je 0x408a2c
cmp eax, 0x1000c03
je 0x4089e0
cmp eax, 0x1000d02
jne 0x41a4cd
mov esi, dword [ebp]
push 0x100
push 0
push 0x6d2428
mov dword [esp + 0x20], esi
add ebp, 4
call fcn.00485180
push esi
call fcn.00402380
add esp, 0x10
test eax, eax
je case.default.0x4138e6
push eax
push 0x6d2428
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [ecx*4 + 0x6d4488], eax
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x18]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x1c]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [0x6d8bb4], eax
mov dword [0x6d8bb8], ecx
mov dword [0x6d8bbc], edx
jmp case.default.0x4138e6
cmp eax, 0x1000f03
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [0x4c00e8]
mov ecx, dword [eax*4 + 0x6d89b0]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov dword [ecx + eax*4], edx
jmp case.default.0x4138e6
mov ecx, dword [0x4c00e8]
push 0x4c0140
lea eax, [esp + 0x18]
mov dword [esp + 0x18], ecx
mov edx, dword [ebx]
push eax
push ebx
mov dword [esp + 0x34], edx
call fcn.0046fb10
add esp, 0xc
test eax, eax
mov dword [esp + 0x18], eax
je case.default.0x4138e6
mov edx, dword [esp + 0x14]
cmp edx, dword [0x4c00e8]
mov ecx, dword [0x4c017c]
lea ebp, [ecx + eax]
jne 0x408b65
push 0x4c0140
lea eax, [esp + 0x18]
push eax
push ebx
call fcn.0046fb10
add esp, 0xc
test eax, eax
mov dword [esp + 0x18], eax
jne 0x408b30
jmp case.default.0x4138e6
call fcn.0042bd40
mov ecx, dword [esp + 0x14]
mov dword [0x4c00e8], ecx
jmp case.default.0x4138e6
cmp eax, 0x1001102
je 0x408c55
cmp eax, 0x1001201
je 0x408bf8
cmp eax, 0x1001302
jne 0x41a4cd
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
test eax, eax
je 0x40731e
mov eax, dword [0x4c00e8]
mov ecx, dword [0x4c0140]
sub ebp, dword [0x4c017c]
mov edx, dword [ebx]
push eax
push ecx
push edx
add ebp, 4
push ebp
call fcn.0046fab0
add esp, 0x10
test eax, eax
je 0x40731e
mov eax, dword [0x4c017c]
mov ecx, dword [esp + 0x14]
lea ebp, [eax + ecx]
call fcn.0042bd40
add dword [0x4c00e8], 1
mov dword [ebx], esi
jmp case.default.0x4138e6
mov eax, dword [0x4c00e8]
cmp eax, edi
je case.default.0x4138e6
mov esi, 0x6d89c8
lea ebx, [ebx]
mov ecx, dword [esi]
cmp ecx, edi
je 0x408c33
cmp dword [ecx + 0x428], eax
jb 0x408c33
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov eax, dword [0x4c00e8]
mov dword [esi], 0
xor edi, edi
add esi, 4
cmp esi, 0x6d8ac8
jl 0x408c10
lea ecx, [eax + eax*4]
add ecx, ecx
add ecx, ecx
add ecx, ecx
push ecx
call fcn.0043e540
add esp, 4
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebx]
xor esi, esi
cmp dword [esp + 0x14], esi
mov dword [esp + 0x28], eax
jle case.default.0x4138e6
push 0x4c0140
push 0x4c00e8
push ebx
call fcn.0046fb10
add esp, 0xc
test eax, eax
mov dword [esp + 0x18], eax
je case.default.0x4138e6
mov ecx, dword [0x4c017c]
add esi, 1
cmp esi, dword [esp + 0x14]
lea ebp, [ecx + eax]
jl 0x408c83
jmp case.default.0x4138e6
xor esi, esi
push esi
push esi
call fcn.00470480
add esp, 8
call fcn.0046fa40
mov dword [0x4c00e8], esi
mov dword [ebx], esi
mov ecx, dword [0x6d03f4]
cmp ecx, esi
mov byte [0x4c0170], 0
je 0x408cf0
push 1
call fcn.00402a10
mov dword [0x6d03f4], esi
mov ecx, dword [0x6d89c8]
cmp ecx, esi
je 0x408d08
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [0x6d89c8], esi
mov ecx, dword [0x6d2420]
cmp ecx, esi
je 0x408d20
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [0x6d2420], esi
mov ecx, dword [0x6d8ce8]
cmp ecx, esi
je case.default.0x4138e6
push 1
call fcn.004029d0
mov dword [0x6d8ce8], esi
jmp case.default.0x4138e6
cmp eax, 0x1002701
ja 0x409119
je 0x40910f
cmp eax, 0x1001e01
ja 0x408fb4
je 0x408fa3
cmp eax, 0x1001902
ja 0x408ed2
je 0x408ea3
cmp eax, 0x1001702
ja 0x408e6d
je 0x408e3a
cmp eax, 0x1001502
je 0x408e10
cmp eax, 0x1001604
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x1c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [0x6d8bc4], edx
mov dword [0x6d8bc8], eax
mov dword [0x6d8bcc], ecx
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
mov dword [0x6d8bc0], eax
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x14]
push edx
call fcn.0045c8e0
add esp, 4
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
cmp eax, 0x1001801
jne 0x41a4cd
call fcn.00479090
cmp eax, dword [0x4c0148]
jb case.default.0x4138e6
mov eax, dword [0x4c0658]
push 0xffffffffffffffff
push 0
push 0x202
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
call fcn.00479090
add eax, dword [esp + 0x14]
mov dword [0x4c0148], eax
jmp case.default.0x4138e6
cmp eax, 0x1001c01
ja 0x408f87
je 0x408f78
cmp eax, 0x1001a04
je 0x408eff
cmp eax, 0x1001b01
jne 0x41a4cd
call fcn.00431940
jmp case.default.0x4138e6
mov esi, dword [ebp]
lea edx, [esp + 0x18]
add ebp, 4
mov dword [esp + 0x14], esi
mov eax, dword [ebp]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x24]
add ebp, 4
push ecx
push eax
call fcn.00401070
add esp, 0x10
add ebp, 4
cmp dword [esp + 0x1c], edi
je 0x408f57
push 0
push esi
call fcn.00402340
add esp, 4
push eax
call fcn.00431960
add esp, 8
call fcn.00431bb0
call fcn.00431940
jmp case.default.0x4138e6
xor edx, edx
cmp dword [esp + 0x18], edx
setne dl
push edx
push esi
call fcn.00402340
add esp, 4
push eax
call fcn.00431960
add esp, 8
jmp case.default.0x4138e6
mov eax, dword [0x6d8bb4]
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
cmp eax, 0x1001d01
jne 0x41a4cd
mov ecx, dword [0x6d8bb8]
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
mov edx, dword [0x6d8bbc]
mov dword [0x6cf9a4], edx
jmp case.default.0x4138e6
cmp eax, 0x1002303
ja 0x40907e
je 0x409027
cmp eax, 0x1002101
ja 0x40900d
je 0x408ffc
cmp eax, 0x1001f01
je 0x408feb
cmp eax, 0x1002001
jne 0x41a4cd
mov eax, dword [0x6d8bc4]
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov ecx, dword [0x6d8bc0]
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
mov edx, dword [0x6d8bc8]
mov dword [0x6cf9a4], edx
jmp case.default.0x4138e6
cmp eax, 0x1002201
jne 0x41a4cd
mov eax, dword [0x6d8bcc]
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov ecx, dword [ebp]
add ebp, 4
mov dword [esp + 0x14], ecx
mov edx, dword [ebp]
add ebp, 4
test dword [0x6d03f8], 0x80000000
mov dword [esp + 0x18], edx
je 0x409055
mov eax, dword [0x4c0658]
push eax
call fcn.00405980
add esp, 4
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00402380
mov edx, dword [esp + 0x18]
add esp, 4
push eax
push edx
call fcn.00402340
add esp, 4
push eax
call fcn.00431b00
add esp, 8
jmp case.default.0x4138e6
cmp eax, 0x1002401
je 0x4090ea
cmp eax, 0x1002501
je 0x4090d5
cmp eax, 0x1002602
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
call fcn.004790a0
mov edx, dword [0x4c00e8]
mov ecx, dword [esp + 0x14]
add edx, ecx
sub eax, dword [edx*4 + 0x4c0154]
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
push 0x6d2428
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
test dword [0x6d03f8], 0x80000000
je 0x409105
mov edx, dword [0x4c0658]
push edx
call fcn.00405980
add esp, 4
call fcn.00431b80
jmp case.default.0x4138e6
call fcn.0042bec0
jmp case.default.0x4138e6
cmp eax, 0x1010101
ja 0x40962e
je 0x409493
cmp eax, 0x1009103
ja 0x4092c9
je 0x40926d
cmp eax, 0x1008103
ja 0x4091d3
je case.default.0x4138e6
cmp eax, 0x1002803
je 0x40916a
cmp eax, 0x1008002
jne 0x41a4cd
mov eax, dword [ebp]
lea ebp, [ebp + eax*4 + 4]
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
cmp dword [esp + 0x14], 0x1000d
jne case.default.0x4138e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00402380
add esp, 4
push eax
push 0x6d2428
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
cmp eax, 0x1009004
jne 0x41a4cd
mov ecx, dword [ebp]
lea edx, [esp + 0x18]
mov dword [esp + 0x14], ecx
mov eax, dword [ebp + 4]
add ebp, 4
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x1c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
cmp dword [esp + 0x18], esi
je 0x40925c
mov edx, dword [0x4c00e8]
push edx
push 0
mov eax, ebp
sub eax, dword [0x4c017c]
push 0
push eax
call fcn.0046fab0
add esp, 0x10
test eax, eax
je case.default.0x4138e6
mov ecx, dword [0x4c017c]
mov edx, dword [esp + 0x1c]
lea ebp, [ecx + edx]
jmp case.default.0x4138e6
mov eax, dword [0x4c017c]
mov ecx, dword [esp + 0x1c]
lea ebp, [eax + ecx]
jmp case.default.0x4138e6
mov edx, dword [ebp]
lea ecx, [esp + 0x18]
mov dword [esp + 0x14], edx
mov eax, dword [ebp + 4]
add ebp, 4
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [0x4c00e8]
push edx
push 0
mov eax, ebp
sub eax, dword [0x4c017c]
push 0
push eax
call fcn.0046fab0
add esp, 0x10
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x18]
mov edx, dword [0x4c017c]
lea ebp, [edx + ecx]
jmp case.default.0x4138e6
sub eax, 0x1010005
je 0x409414
sub eax, 1
je 0x409393
sub eax, 3
jne 0x41a4cd
mov eax, dword [ebp]
mov dword [0x6d0404], eax
mov ecx, dword [ebp + 4]
add ebp, 4
mov dword [0x6d0400], ecx
mov eax, dword [ebp + 4]
add ebp, 4
push 0x6d0408
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d040c
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d0410
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d0414
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d0418
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
push 0x6d041c
jmp 0x407307
mov edx, dword [ebp]
mov dword [0x6d0404], edx
mov eax, dword [ebp + 4]
add ebp, 4
mov dword [0x6d0400], eax
mov eax, dword [ebp + 4]
add ebp, 4
push 0x6d0408
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d040c
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d0410
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
xor eax, eax
mov dword [0x6d0414], eax
mov dword [0x6d0418], eax
mov dword [0x6d041c], eax
jmp case.default.0x4138e6
mov ecx, dword [ebp]
xor esi, esi
mov dword [0x6d0404], ecx
add ebp, 4
mov dword [0x6d0400], esi
mov eax, dword [ebp]
push 0x6d0408
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d040c
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d0410
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov dword [0x6d0414], esi
mov dword [0x6d0418], esi
mov dword [0x6d041c], esi
jmp case.default.0x4138e6
mov ecx, dword [0x6d2420]
cmp ecx, edi
je 0x4094a5
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
push 0x3060
call fcn.00484d49
add esp, 4
mov dword [esp + 0x38], eax
xor esi, esi
cmp eax, esi
mov dword [esp + 0x3c8], esi
je 0x4094ce
mov ecx, eax
call fcn.00424e70
mov edx, eax
jmp 0x4094d0
xor edx, edx
mov ecx, dword [0x6d0404]
push ecx
mov dword [esp + 0x3cc], 0xffffffff
mov dword [0x6d2420], edx
mov dword [esp + 0xd4], esi
mov dword [esp + 0xd8], esi
call fcn.00402340
mov dword [esp + 0xe0], eax
mov eax, dword [0x6d0400]
push eax
call fcn.00402340
mov ecx, dword [0x6d0408]
mov dword [esp + 0xe0], eax
mov eax, dword [0x6d040c]
mov dword [esp + 0xec], eax
mov eax, dword [0x6d0414]
mov dword [esp + 0xe8], ecx
mov ecx, dword [0x6d0410]
push eax
mov dword [esp + 0xf4], ecx
mov dword [esp + 0xf8], esi
call fcn.00402340
mov ecx, dword [0x6d0418]
push ecx
mov dword [esp + 0x100], eax
call fcn.00402340
mov dword [esp + 0x104], eax
mov eax, dword [0x6d041c]
push eax
call fcn.00402340
mov ecx, dword [0x6d042c]
push ecx
mov dword [esp + 0x110], eax
mov dword [esp + 0xbc], esi
mov dword [esp + 0xc0], esi
call fcn.00402340
mov dword [esp + 0xc8], eax
mov eax, dword [0x6d0428]
push eax
call fcn.00402340
mov ecx, dword [0x6d0430]
mov dword [esp + 0xc8], eax
mov eax, dword [0x6d0434]
mov dword [esp + 0xd4], eax
mov eax, dword [0x6d043c]
mov dword [esp + 0xd0], ecx
mov ecx, dword [0x6d0438]
push eax
mov dword [esp + 0xdc], ecx
mov dword [esp + 0xe0], esi
call fcn.00402340
mov ecx, dword [0x6d0440]
push ecx
mov dword [esp + 0xe8], eax
call fcn.00402340
mov dword [esp + 0xec], eax
mov eax, dword [0x6d0444]
push eax
call fcn.00402340
add esp, 0x28
lea ecx, [esp + 0xa4]
mov dword [esp + 0xcc], eax
push ecx
lea eax, [esp + 0xd4]
push eax
mov ecx, edx
call fcn.00424f60
jmp case.default.0x4138e6
cmp eax, 0x1010606
ja 0x40983b
je 0x4097b9
cmp eax, 0x1010401
ja 0x409730
je 0x409703
cmp eax, 0x1010203
je 0x4096ae
cmp eax, 0x1010301
jne 0x41a4cd
mov eax, dword [0x6d2420]
cmp eax, edi
je case.default.0x4138e6
cmp dword [eax + 0x1ff8], edi
je 0x4096a4
test dword [0x6d4478], 0x200
push 0
je 0x409689
push 8
jmp 0x40968b
push 7
call fcn.00402d00
mov ecx, dword [0x6d2420]
add esp, 8
call fcn.004252e0
mov dword [ebx], 0xb
call fcn.00459e30
jmp case.default.0x4138e6
mov eax, dword [ebp]
add ebp, 4
mov dword [esp + 0x14], eax
mov ecx, dword [ebp]
add ebp, 4
cmp dword [0x6d2420], edi
mov dword [esp + 0x18], ecx
je case.default.0x4138e6
push eax
call fcn.00402380
add esp, 4
cmp eax, edi
je case.default.0x4138e6
push 0x6d23fc
push eax
call fcn.0041e560
mov edx, dword [esp + 0x20]
mov ecx, dword [0x6d2420]
add esp, 8
push edx
push eax
call fcn.00401000
jmp case.default.0x4138e6
mov ecx, dword [0x6d2420]
cmp ecx, edi
je 0x40971b
mov eax, dword [ecx]
mov edx, dword [eax]
push 1
call edx
mov dword [0x6d2420], esi
call fcn.0045a4b0
cmp dword [ebx], 0xb
jne case.default.0x4138e6
mov dword [ebx], esi
jmp case.default.0x4138e6
cmp eax, 0x1010505
jne 0x41a4cd
mov eax, dword [ebp]
xor esi, esi
mov dword [0x6d042c], eax
add ebp, 4
mov dword [0x6d0428], esi
mov eax, dword [ebp]
push 0x6d0430
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d0434
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d0438
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov dword [0x6d043c], esi
mov dword [0x6d0440], esi
mov dword [0x6d0444], esi
jmp case.default.0x4138e6
mov ecx, dword [ebp]
mov dword [0x6d042c], ecx
mov edx, dword [ebp + 4]
add ebp, 4
mov dword [0x6d0428], edx
mov eax, dword [ebp + 4]
add ebp, 4
push 0x6d0430
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d0434
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d0438
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
xor eax, eax
mov dword [0x6d043c], eax
mov dword [0x6d0440], eax
mov dword [0x6d0444], eax
jmp case.default.0x4138e6
cmp eax, 0x1010709
je 0x409968
cmp eax, 0x1010804
je 0x4098f2
cmp eax, 0x1010a07
jne 0x41a4cd
mov eax, dword [ebp]
push 0x6d0450
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d0454
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d0458
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d045c
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d0460
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
push 0x6d0464
jmp 0x407307
mov esi, dword [ebp]
add ebp, 4
mov dword [esp + 0x14], esi
mov eax, dword [ebp]
lea ecx, [esp + 0x1c]
mov dword [esp + 0x18], eax
mov eax, dword [ebp + 4]
add ebp, 4
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
cmp dword [0x6d2420], edi
je case.default.0x4138e6
push esi
call fcn.00402380
add esp, 4
test eax, eax
je case.default.0x4138e6
push 0x6d23fc
push eax
call fcn.0041e560
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
add esp, 8
push edx
push ecx
mov ecx, dword [0x6d2420]
push eax
call fcn.00428690
jmp case.default.0x4138e6
mov edx, dword [ebp]
mov dword [0x6d042c], edx
mov eax, dword [ebp + 4]
add ebp, 4
mov dword [0x6d0428], eax
mov eax, dword [ebp + 4]
add ebp, 4
push 0x6d0430
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d0434
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d0438
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d043c
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d0440
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
push 0x6d0444
jmp 0x407307
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
cmp eax, 0x40
jb 0x409a9f
xor esi, esi
lea edi, [esi + 1]
or ebx, 0xffffffff
mov ecx, dword [esi*4 + 0x6d89c8]
test ecx, ecx
je 0x409a93
mov edx, dword [ecx]
mov eax, dword [edx]
push edi
call eax
push 0x44c
call fcn.00484d49
add esp, 4
mov dword [esp + 0x38], eax
test eax, eax
mov dword [esp + 0x3c8], edi
je 0x409a83
mov ecx, dword [0x4c00e8]
push 0
push ecx
push esi
mov ecx, eax
call fcn.00425700
jmp 0x409a85
xor eax, eax
mov dword [esp + 0x3c8], ebx
mov dword [esi*4 + 0x6d89c8], eax
add esi, edi
cmp esi, 0x40
jl 0x409a42
jmp case.default.0x4138e6
mov ecx, dword [eax*4 + 0x6d89c8]
test ecx, ecx
je case.default.0x4138e6
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
push 0x44c
call fcn.00484d49
add esp, 4
mov dword [esp + 0x38], eax
test eax, eax
mov dword [esp + 0x3c8], 2
je 0x409afb
mov ecx, dword [0x4c00e8]
mov edx, dword [esp + 0x14]
push 0
push ecx
push edx
mov ecx, eax
call fcn.00425700
mov ecx, dword [esp + 0x14]
mov dword [ecx*4 + 0x6d89c8], eax
jmp case.default.0x4138e6
mov ecx, dword [esp + 0x14]
xor eax, eax
mov dword [ecx*4 + 0x6d89c8], eax
jmp case.default.0x4138e6
cmp eax, 0x1050504
ja 0x40d98f
je 0x40d91f
cmp eax, 0x1031203
ja 0x40c621
je 0x40c575
cmp eax, 0x1030002
ja 0x40ab1f
je 0x40aaf1
cmp eax, 0x1020802
ja 0x40a481
je 0x40a44a
cmp eax, 0x1020402
ja 0x40a150
je 0x40a0e4
cmp eax, 0x1020203
ja 0x40a010
je 0x409f13
sub eax, 0x1020109
je 0x409d9c
sub eax, 1
jne 0x41a4cd
lea edx, [esp + 0x14]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], eax
mov eax, dword [ebp]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x18]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x68]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x6c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x70]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x74]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x78]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push eax
call fcn.00402340
add ebp, 4
mov dword [esp + 0x64], eax
mov eax, dword [ebp]
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x18]
add esp, 4
add ebp, 4
cmp eax, 0x40
mov dword [esp + 0x5c], esi
jb 0x409cce
mov eax, 1
jmp 0x409cb0
cmp dword [eax*4 + 0x6d89c8], esi
je 0x409cc1
add eax, 1
cmp eax, 0x40
jl 0x409cb0
cmp eax, 0x40
je case.default.0x4138e6
mov dword [esp + 0x14], eax
cmp dword [eax*4 + 0x6d89c8], esi
lea ecx, [eax*4 + 0x6d89c8]
jne 0x409d2f
push 0x44c
call fcn.00484d49
add esp, 4
mov dword [esp + 0x38], eax
test eax, eax
mov dword [esp + 0x3c8], 3
je 0x409d15
mov ecx, dword [0x4c00e8]
mov edx, dword [esp + 0x14]
push 0
push ecx
push edx
mov ecx, eax
call fcn.00425700
jmp 0x409d17
xor eax, eax
mov ecx, dword [esp + 0x14]
lea ecx, [ecx*4 + 0x6d89c8]
mov dword [esp + 0x3c8], 0xffffffff
mov dword [ecx], eax
mov ecx, dword [ecx]
test ecx, ecx
je case.default.0x4138e6
mov eax, dword [ecx]
mov eax, dword [eax + 4]
lea edx, [esp + 0x5c]
push edx
mov edx, dword [esp + 0x1c]
push edx
call eax
cmp dword [0x4c00e8], 0
mov dword [esp + 0x28], eax
jne case.default.0x4138e6
mov ecx, dword [esp + 0x30]
test byte [ecx], 1
je case.default.0x4138e6
cmp dword [0x6d6850], 0
je case.default.0x4138e6
mov edx, dword [esp + 0x14]
mov ecx, dword [edx*4 + 0x6d89c8]
push eax
call fcn.00426410
test eax, eax
je case.default.0x4138e6
push eax
call fcn.00404650
add esp, 4
jmp case.default.0x4138e6
xor eax, eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], eax
mov eax, dword [ebp]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x68]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x6c]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x70]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x74]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push eax
call fcn.00402340
add ebp, 4
mov dword [esp + 0x64], eax
mov eax, dword [ebp]
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x18]
add esp, 4
add ebp, 4
cmp eax, 0x40
mov dword [esp + 0x5c], esi
jb 0x409ec1
mov eax, 1
cmp dword [eax*4 + 0x6d89c8], esi
je 0x409eb4
add eax, 1
cmp eax, 0x40
jl 0x409ea3
cmp eax, 0x40
je case.default.0x4138e6
mov dword [esp + 0x14], eax
cmp dword [eax*4 + 0x6d89c8], esi
lea ecx, [eax*4 + 0x6d89c8]
jne 0x409d2f
push 0x44c
call fcn.00484d49
add esp, 4
mov dword [esp + 0x38], eax
test eax, eax
mov dword [esp + 0x3c8], 4
je 0x409d15
mov ecx, dword [0x4c00e8]
mov edx, dword [esp + 0x14]
push 0
push ecx
push edx
mov ecx, eax
call fcn.00425700
jmp 0x409d17
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
cmp eax, 0x40
jb 0x409fa2
mov ecx, dword [0x6d89c8]
test ecx, ecx
je 0x409f75
mov eax, dword [ecx]
mov edx, dword [esp + 0x18]
mov eax, dword [eax + 8]
push edx
call eax
mov dword [ebx], 0xf
call fcn.00459e30
mov esi, 0x6d89cc
lea ebx, [ebx]
mov ecx, dword [esi]
test ecx, ecx
je 0x409f92
mov edx, dword [ecx]
mov eax, dword [esp + 0x18]
mov edx, dword [edx + 8]
push eax
call edx
add esi, 4
cmp esi, 0x6d8ac8
jl 0x409f80
jmp case.default.0x4138e6
test eax, eax
je 0x409fc6
mov ecx, dword [eax*4 + 0x6d89c8]
test ecx, ecx
je case.default.0x4138e6
mov eax, dword [ecx]
mov edx, dword [esp + 0x18]
mov eax, dword [eax + 8]
push edx
call eax
jmp case.default.0x4138e6
cmp dword [0x6d89c8], esi
je case.default.0x4138e6
test dword [0x6d4478], 0x200
push 0
je 0x409fe4
push 8
jmp 0x409fe6
push 7
call fcn.00402d00
mov ecx, dword [0x6d89c8]
mov edx, dword [ecx]
mov eax, dword [esp + 0x20]
mov edx, dword [edx + 8]
add esp, 8
push eax
call edx
call fcn.00459e30
mov dword [ebx], 0xf
jmp case.default.0x4138e6
cmp eax, 0x1020304
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x1c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
cmp eax, 0x40
jae case.default.0x4138e6
mov ecx, dword [eax*4 + 0x6d89c8]
test ecx, ecx
je case.default.0x4138e6
mov eax, dword [esp + 0x1c]
sub eax, 0
je 0x40a0d5
sub eax, 1
je 0x40a0c6
sub eax, 1
jne case.default.0x4138e6
mov edx, dword [esp + 0x18]
push edx
call fcn.00425ef0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx*4 + 0x6d89c8]
push eax
call fcn.00428bc0
jmp case.default.0x4138e6
mov edx, dword [esp + 0x18]
push edx
call fcn.00425ef0
jmp case.default.0x4138e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00425f20
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
cmp eax, 0x40
jb 0x40a12b
mov esi, 0x6d89c8
mov edi, edi
mov ecx, dword [esi]
test ecx, ecx
je 0x40a11b
call fcn.00426350
add esi, 4
cmp esi, 0x6d8ac8
jl 0x40a110
jmp case.default.0x4138e6
mov ecx, dword [eax*4 + 0x6d89c8]
test ecx, ecx
je case.default.0x4138e6
call fcn.00426350
cmp dword [esp + 0x14], esi
jne case.default.0x4138e6
mov dword [ebx], esi
jmp case.default.0x4138e6
cmp eax, 0x1020705
ja 0x40a344
je 0x40a285
cmp eax, 0x1020502
je 0x40a247
cmp eax, 0x1020603
jne 0x41a4cd
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x14]
add ebp, 4
cmp eax, 0x40
jb 0x40a1d0
mov esi, 0x6d89c8
jmp 0x40a1b0
mov ecx, dword [esi]
test ecx, ecx
je 0x40a1c0
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [esi], edi
add esi, 4
cmp esi, 0x6d8ac8
jl 0x40a1b0
jmp case.default.0x4138e6
mov ecx, dword [eax*4 + 0x6d89c8]
test ecx, ecx
je 0x40a1e3
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
push 0x44c
call fcn.00484d49
mov edx, eax
add esp, 4
mov dword [esp + 0x38], edx
test edx, edx
mov dword [esp + 0x3c8], 6
je 0x40a235
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00402340
mov ecx, dword [esp + 0x18]
add esp, 4
push eax
mov eax, dword [0x4c00e8]
push eax
push ecx
mov ecx, edx
call fcn.00425700
mov edx, dword [esp + 0x14]
mov dword [edx*4 + 0x6d89c8], eax
jmp case.default.0x4138e6
mov edx, dword [esp + 0x14]
xor eax, eax
mov dword [edx*4 + 0x6d89c8], eax
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x14]
mov ecx, dword [edx*4 + 0x6d89c8]
test ecx, ecx
je 0x40ec3c
call fcn.00426190
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
xor eax, eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], eax
mov eax, dword [ebp]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push eax
call fcn.00402340
add ebp, 4
mov dword [esp + 0x64], eax
mov eax, dword [ebp]
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x18]
add esp, 4
add ebp, 4
cmp eax, 0x40
mov dword [esp + 0x5c], 1
jae case.default.0x4138e6
mov ecx, dword [eax*4 + 0x6d89c8]
test ecx, ecx
je case.default.0x4138e6
mov edx, dword [ecx]
mov edx, dword [edx + 4]
lea eax, [esp + 0x5c]
push eax
mov eax, dword [esp + 0x1c]
push eax
call edx
jmp 0x40a422
cmp eax, 0x1020706
jne 0x41a4cd
xor eax, eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], eax
mov eax, dword [ebp]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x78]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push eax
call fcn.00402340
add ebp, 4
mov dword [esp + 0x64], eax
mov edx, dword [ebp]
mov eax, dword [esp + 0x18]
add esp, 4
add ebp, 4
cmp eax, 0x40
mov dword [esp + 0x7c], edx
mov dword [esp + 0x5c], 1
jae case.default.0x4138e6
mov ecx, dword [eax*4 + 0x6d89c8]
test ecx, ecx
je case.default.0x4138e6
mov eax, dword [ecx]
mov eax, dword [eax + 4]
lea edx, [esp + 0x5c]
push edx
mov edx, dword [esp + 0x1c]
push edx
call eax
cmp dword [0x4c00e8], esi
mov dword [esp + 0x28], eax
jne case.default.0x4138e6
mov ecx, dword [esp + 0x30]
test byte [ecx], 1
je case.default.0x4138e6
cmp dword [0x6d6850], esi
jmp 0x409d6f
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
xor edx, edx
cmp dword [eax*4 + 0x6d89c8], edx
setne dl
mov dword [0x6cf9a4], edx
jmp case.default.0x4138e6
cmp eax, 0x1020d0b
ja 0x40a880
je 0x40a6f9
cmp eax, 0x1020b04
ja 0x40a658
je 0x40a5c1
cmp eax, 0x1020903
je 0x40a55e
cmp eax, 0x1020a05
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x1c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x20]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
cmp eax, 0x40
jae case.default.0x4138e6
mov ecx, dword [eax*4 + 0x6d89c8]
test ecx, ecx
je case.default.0x4138e6
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push eax
mov eax, dword [esp + 0x1c]
push edx
push eax
call fcn.00425ab0
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
cmp eax, 0x40
jae case.default.0x4138e6
mov ecx, dword [eax*4 + 0x6d89c8]
test ecx, ecx
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00425900
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x1c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
cmp eax, 0x40
jae case.default.0x4138e6
mov ecx, dword [eax*4 + 0x6d89c8]
test ecx, ecx
je case.default.0x4138e6
mov edx, dword [esp + 0x18]
push edx
call fcn.00426410
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x1c]
push 1
push ecx
push eax
call fcn.00435fb0
add esp, 0xc
jmp case.default.0x4138e6
cmp eax, 0x1020c03
jne 0x41a4cd
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x18]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
cmp eax, 0x40
jae case.default.0x4138e6
mov ecx, dword [eax*4 + 0x6d89c8]
test ecx, ecx
je case.default.0x4138e6
cmp dword [0x4c0174], esi
je case.default.0x4138e6
lea edx, [esp + 0x20]
push edx
mov edx, dword [esp + 0x1c]
lea eax, [esp + 0x20]
push eax
push edx
call fcn.00426420
test al, al
je case.default.0x4138e6
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
mov ecx, dword [0x4c0174]
call fcn.0042b240
jmp case.default.0x4138e6
xor eax, eax
lea edx, [esp + 0x14]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], eax
mov eax, dword [ebp]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x18]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x68]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x6c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x70]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x74]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push eax
call fcn.00402340
add ebp, 4
mov dword [esp + 0x64], eax
mov edx, dword [ebp]
add ebp, 4
mov dword [esp + 0x80], edx
mov eax, dword [ebp]
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0x18]
add esp, 4
add ebp, 8
cmp eax, 0x40
mov dword [esp + 0x5c], esi
jb 0x40a82e
mov eax, 1
lea ecx, [ecx]
cmp dword [eax*4 + 0x6d89c8], esi
je 0x40a821
add eax, 1
cmp eax, 0x40
jl 0x40a810
cmp eax, 0x40
je case.default.0x4138e6
mov dword [esp + 0x14], eax
cmp dword [eax*4 + 0x6d89c8], esi
lea ecx, [eax*4 + 0x6d89c8]
jne 0x409d2f
push 0x44c
call fcn.00484d49
add esp, 4
mov dword [esp + 0x38], eax
test eax, eax
mov dword [esp + 0x3c8], 5
je 0x409d15
mov ecx, dword [0x4c00e8]
mov edx, dword [esp + 0x14]
push 0
push ecx
push edx
mov ecx, eax
call fcn.00425700
jmp 0x409d17
cmp eax, 0x1020e05
je 0x40aa2c
cmp eax, 0x1020f05
je 0x40a967
cmp eax, 0x1021006
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x1c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x20]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x2c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
cmp eax, 0x40
jae case.default.0x4138e6
mov ecx, dword [eax*4 + 0x6d89c8]
test ecx, ecx
je case.default.0x4138e6
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x20]
push edx
mov edx, dword [esp + 0x20]
push eax
mov eax, dword [esp + 0x20]
push edx
push eax
call fcn.00401020
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x1c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x20]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
cmp eax, 0x40
jae case.default.0x4138e6
mov ecx, dword [eax*4 + 0x6d89c8]
test ecx, ecx
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00426410
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push 0
push 1
push ecx
push eax
push 0
push edx
call fcn.00402340
add esp, 4
push eax
call fcn.0043b180
add esp, 0x18
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x1c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x20]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
cmp eax, 0x40
jae case.default.0x4138e6
mov ecx, dword [eax*4 + 0x6d89c8]
test ecx, ecx
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
cmp eax, 0xff
jb 0x40aadc
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push eax
push edx
push 0xff
call fcn.00425ba0
jmp case.default.0x4138e6
mov edx, dword [esp + 0x20]
push edx
mov edx, dword [esp + 0x20]
push edx
push eax
call fcn.00425ba0
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x14]
push edx
call fcn.0046eed0
add esp, 4
jmp case.default.0x4138e6
cmp eax, 0x1030903
ja 0x40b841
je 0x40b81b
cmp eax, 0x1030505
ja 0x40aefc
je 0x40ae20
cmp eax, 0x1030301
ja 0x40ad34
je 0x40ad25
cmp eax, 0x1030102
je 0x40ab97
cmp eax, 0x1030202
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x14]
push edx
call fcn.0046f020
add esp, 4
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x14]
push edx
call fcn.0046f020
add esp, 4
test eax, eax
je case.default.0x4138e6
mov eax, dword [esp + 0x14]
push eax
call fcn.0046f950
add esp, 4
test al, al
jne 0x40abe4
mov dword [ebx], 0x3e9
jmp case.default.0x4138e6
push 0
push 0
call fcn.00470480
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00471bd0
push 0
push 0xffffffffffffffff
mov dword [0x4c00e8], esi
call fcn.00404830
mov edx, dword [esp + 0x44]
mov dword [edx], eax
mov eax, dword [0x6d63c8]
add esp, 0x14
test eax, eax
je 0x40ac57
mov ecx, eax
shr ecx, 0x1f
and ecx, 1
push ecx
and eax, 0xfffffff
push eax
call fcn.00402340
add esp, 4
push eax
call fcn.00468a80
add esp, 8
call fcn.00468b50
test dword [0x6d63c8], 0x40000000
je 0x40ac5c
push 0
push 0
call fcn.00468c70
add esp, 8
jmp 0x40ac5c
call fcn.00468af0
push 0
push 0xffffffffffffffff
call fcn.004689c0
add esp, 8
mov esi, 0x6d8ae0
lea ecx, [ecx]
cmp dword [esi - 8], edi
je 0x40acef
mov edx, dword [esi]
mov eax, dword [esi + 4]
mov ecx, dword [esi - 4]
push 0
push edx
push eax
push ecx
call fcn.00402340
add esp, 4
cmp dword [esi + 0xc], edi
push eax
je 0x40ac97
call fcn.00468880
jmp 0x40ac9c
call fcn.00468770
mov ecx, dword [esi + 8]
add esp, 0x10
test ecx, ecx
mov dword [esp + 0x28], eax
je 0x40acb8
push ecx
push eax
call fcn.004689f0
mov eax, dword [esp + 0x30]
add esp, 8
mov ecx, dword [esi + 4]
mov edx, ecx
and edx, 0xffff0000
cmp edx, 0x80000000
je 0x40ace2
cmp edx, 0x80010000
jne 0x40acef
and ecx, 0xffff
mov dword [ecx*4 + 0x6d4488], eax
jmp 0x40acef
and ecx, 0xffff
mov dword [ecx*4 + 0x6d0490], eax
add esi, 0x18
cmp esi, 0x6d8bb8
jl 0x40ac70
mov edx, dword [0x6d2530]
push edx
mov byte [0x4c0170], 0
mov dword [0x4c018c], 1
call fcn.004023b0
add esp, 4
mov ebp, eax
jmp case.default.0x4138e6
call fcn.0046f080
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
cmp eax, 0x1030405
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x1c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x20]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
push 0
push eax
mov eax, dword [0x4c00e8]
lea ecx, [eax + eax*4]
mov eax, dword [esp + 0x20]
lea edx, [ecx*8 + 0x1e]
push edx
push 0xffffffffffffffff
push 0
push eax
call fcn.0046ee30
add esp, 8
push eax
call fcn.0043f7b0
add esp, 0x14
test eax, eax
mov dword [0x6cf9a4], eax
je case.default.0x4138e6
push eax
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
fild dword [esp + 0x20]
push 0
sub esp, 8
fstp dword [esp + 4]
fild dword [esp + 0x28]
fstp dword [esp]
push eax
call fcn.0043a480
add esp, 0x10
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x1c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x20]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x18]
push eax
call fcn.004722d0
mov edi, eax
add esp, 4
test edi, edi
je case.default.0x4138e6
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push ecx
push edx
push edi
call fcn.00472480
push 0x100
call fcn.00484c16
mov esi, eax
add esp, 0x10
test esi, esi
je case.default.0x4138e6
mov eax, dword [esp + 0x14]
push 1
push esi
push eax
call fcn.0046f610
add esp, 0xc
test eax, eax
je 0x40aeee
push 1
push esi
push edi
call fcn.00474d80
add esp, 0xc
push esi
call fcn.00484c99
add esp, 4
jmp case.default.0x4138e6
cmp eax, 0x1030606
je 0x40b630
cmp eax, 0x1030706
je 0x40b39b
cmp eax, 0x1030806
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x1c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x20]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x2c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x18]
push edx
call fcn.004722d0
mov esi, eax
add esp, 4
test esi, esi
je case.default.0x4138e6
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
push esi
call fcn.00472480
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x58]
push edx
push eax
call fcn.0046f550
add esp, 0x14
test eax, eax
je case.default.0x4138e6
mov eax, dword [esp + 0x2c]
cmp eax, 0x1f
ja case.default.0x4138e6
movzx ecx, byte [eax + 0x41a648]
jmp dword [ecx*4 + 0x41a624]
movzx edx, word [esp + 0x54]
push 1
push 2
push edx
push esi
call fcn.00476580
mov eax, dword [0x4b8074]
push 1
add eax, 0x1a
push eax
push esi
call fcn.00474d80
movzx ecx, word [esp + 0x72]
push 1
push 2
push ecx
push esi
call fcn.00476580
mov edx, dword [0x4b8074]
push 1
add edx, 0x1e
push edx
push esi
call fcn.00474d80
movzx eax, word [esp + 0x90]
push 1
push 2
push eax
push esi
call fcn.00476580
mov ecx, dword [0x4b8074]
add esp, 0x48
push 1
add ecx, 0x22
push ecx
push esi
call fcn.00474d80
add esp, 0xc
jmp case.default.0x4138e6
movzx edx, word [esp + 0x54]
push 1
push 2
push edx
push esi
call fcn.00476580
mov eax, dword [0x4b8074]
push 1
add eax, 0x1a
push eax
push esi
call fcn.00474d80
movzx ecx, word [esp + 0x72]
push 1
push 2
push ecx
push esi
call fcn.00476580
mov edx, dword [0x4b8074]
push 1
add edx, 0x1e
push edx
push esi
call fcn.00474d80
add esp, 0x38
jmp case.default.0x4138e6
cmp word [esp + 0x54], 0xb
push 1
jbe 0x40b0eb
mov eax, dword [0x4b8074]
add eax, 0x2c
push eax
push esi
call fcn.00474d80
movzx ecx, word [esp + 0x60]
push 1
push 2
sub ecx, 0xc
push ecx
jmp 0x40b105
mov edx, dword [0x4b8074]
add edx, 0x26
push edx
push esi
call fcn.00474d80
movzx eax, word [esp + 0x60]
push 1
push 2
push eax
push esi
call fcn.00476580
mov ecx, dword [0x4b8074]
add esp, 0x1c
push 1
add ecx, 0x1a
push ecx
push esi
call fcn.00474d80
movzx edx, word [esp + 0x62]
push 1
push 2
push edx
push esi
call fcn.00476580
mov eax, dword [0x4b8074]
push 1
add eax, 0x1e
push eax
push esi
call fcn.00474d80
movzx ecx, word [esp + 0x80]
push 1
push 2
push ecx
push esi
call fcn.00476580
mov edx, dword [0x4b8074]
push 1
add edx, 0x22
push edx
push esi
call fcn.00474d80
add esp, 0x44
jmp case.default.0x4138e6
cmp word [esp + 0x54], 0xb
push 1
jbe 0x40b196
mov eax, dword [0x4b8074]
add eax, 0x2c
push eax
push esi
call fcn.00474d80
movzx ecx, word [esp + 0x60]
push 1
push 2
sub ecx, 0xc
push ecx
jmp 0x40b1b0
mov edx, dword [0x4b8074]
add edx, 0x26
push edx
push esi
call fcn.00474d80
movzx eax, word [esp + 0x60]
push 1
push 2
push eax
push esi
call fcn.00476580
mov ecx, dword [0x4b8074]
add esp, 0x1c
push 1
add ecx, 0x1a
push ecx
push esi
call fcn.00474d80
movzx edx, word [esp + 0x62]
push 1
push 2
push edx
push esi
call fcn.00476580
mov eax, dword [0x4b8074]
push 1
add eax, 0x1e
push eax
push esi
call fcn.00474d80
add esp, 0x28
jmp case.default.0x4138e6
movzx ecx, word [esp + 0x54]
push 1
push 2
push ecx
push esi
call fcn.00476580
mov edx, dword [0x4b8074]
push 1
add edx, 0x16
push edx
push esi
call fcn.00474d80
movzx eax, word [esp + 0x72]
push 1
push 2
push eax
push esi
call fcn.00476580
mov ecx, dword [0x4b8074]
push 1
add ecx, 0x16
push ecx
push esi
call fcn.00474d80
movzx edx, word [esp + 0x90]
push 1
push 2
push edx
push esi
call fcn.00476580
add esp, 0x48
jmp case.default.0x4138e6
movzx eax, word [esp + 0x54]
push 1
push 2
push eax
push esi
call fcn.00476580
mov ecx, dword [0x4b8074]
push 1
add ecx, 0x16
push ecx
push esi
call fcn.00474d80
movzx edx, word [esp + 0x72]
push 1
push 2
push edx
push esi
call fcn.00476580
add esp, 0x2c
jmp case.default.0x4138e6
cmp word [esp + 0x54], 0xb
push 1
jbe 0x40b2b5
mov eax, dword [0x4b8074]
add eax, 0x38
push eax
push esi
call fcn.00474d80
movzx ecx, word [esp + 0x60]
push 1
push 2
sub ecx, 0xc
push ecx
jmp 0x40b2cf
mov edx, dword [0x4b8074]
add edx, 0x32
push edx
push esi
call fcn.00474d80
movzx eax, word [esp + 0x60]
push 1
push 2
push eax
push esi
call fcn.00476580
mov ecx, dword [0x4b8074]
add esp, 0x1c
push 1
add ecx, 0x16
push ecx
push esi
call fcn.00474d80
movzx edx, word [esp + 0x62]
push 1
push 2
push edx
push esi
call fcn.00476580
mov eax, dword [0x4b8074]
push 1
add eax, 0x16
push eax
push esi
call fcn.00474d80
movzx ecx, word [esp + 0x80]
push 1
push 2
push ecx
push esi
call fcn.00476580
add esp, 0x38
jmp case.default.0x4138e6
cmp word [esp + 0x54], 0xb
push 1
jbe 0x40b34f
mov edx, dword [0x4b8074]
add edx, 0x38
push edx
push esi
call fcn.00474d80
movzx eax, word [esp + 0x60]
push 1
push 2
sub eax, 0xc
push eax
jmp 0x40b369
mov ecx, dword [0x4b8074]
add ecx, 0x32
push ecx
push esi
call fcn.00474d80
movzx edx, word [esp + 0x60]
push 1
push 2
push edx
push esi
call fcn.00476580
mov eax, dword [0x4b8074]
add esp, 0x1c
push 1
add eax, 0x16
push eax
push esi
call fcn.00474d80
movzx ecx, word [esp + 0x62]
push 1
push 2
push ecx
push esi
call fcn.00476580
add esp, 0x1c
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x18]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x1c]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x20]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x18]
push eax
call fcn.004722d0
mov esi, eax
add esp, 4
test esi, esi
je case.default.0x4138e6
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push ecx
push edx
push esi
call fcn.00472480
mov ecx, dword [esp + 0x20]
lea eax, [esp + 0x58]
push eax
push ecx
call fcn.0046f550
add esp, 0x14
test eax, eax
je case.default.0x4138e6
mov eax, dword [esp + 0x2c]
cmp eax, 0xc
ja case.default.0x4138e6
movzx edx, byte [eax + 0x41a684]
jmp dword [edx*4 + 0x41a668]
movzx eax, word [esp + 0x4c]
push 1
push 4
push eax
push esi
call fcn.00476580
mov ecx, dword [0x4b8074]
push 1
push ecx
push esi
call fcn.00474d80
movzx edx, word [esp + 0x6a]
push 1
push 2
push edx
push esi
call fcn.00476580
mov eax, dword [0x4b8074]
push 1
add eax, 4
push eax
push esi
call fcn.00474d80
movzx ecx, word [esp + 0x8a]
push 1
push 2
push ecx
push esi
call fcn.00476580
mov edx, dword [0x4b8074]
add esp, 0x48
push 1
add edx, 8
push edx
push esi
call fcn.00474d80
add esp, 0xc
jmp case.default.0x4138e6
movzx eax, word [esp + 0x4c]
xor edx, edx
mov ecx, 0x64
div ecx
push 1
push 2
push edx
push esi
call fcn.00476580
mov edx, dword [0x4b8074]
push 1
push edx
push esi
call fcn.00474d80
add esp, 0x1c
movzx eax, word [esp + 0x4e]
push 1
push 2
push eax
push esi
call fcn.00476580
mov ecx, dword [0x4b8074]
push 1
add ecx, 4
push ecx
push esi
call fcn.00474d80
movzx edx, word [esp + 0x6e]
push 1
push 2
push edx
push esi
call fcn.00476580
mov eax, dword [0x4b8074]
push 1
add eax, 8
push eax
push esi
call fcn.00474d80
add esp, 0x38
jmp case.default.0x4138e6
movzx ecx, word [esp + 0x4c]
push 1
push 4
push ecx
push esi
call fcn.00476580
mov edx, dword [0x4b8074]
push 1
add edx, 0x12
push edx
push esi
call fcn.00474d80
movzx eax, word [esp + 0x6a]
push 1
push 2
push eax
push esi
call fcn.00476580
mov ecx, dword [0x4b8074]
push 1
add ecx, 0x12
push ecx
push esi
call fcn.00474d80
movzx edx, word [esp + 0x8a]
push 1
push 2
push edx
push esi
call fcn.00476580
add esp, 0x48
jmp case.default.0x4138e6
movzx eax, word [esp + 0x4c]
xor edx, edx
mov ecx, 0x64
div ecx
push 1
push 2
push edx
push esi
call fcn.00476580
mov edx, dword [0x4b8074]
push 1
add edx, 0x12
push edx
push esi
call fcn.00474d80
add esp, 0x1c
movzx eax, word [esp + 0x4e]
push 1
push 2
push eax
push esi
call fcn.00476580
mov ecx, dword [0x4b8074]
push 1
add ecx, 0x12
push ecx
push esi
call fcn.00474d80
movzx edx, word [esp + 0x6e]
push 1
push 2
push edx
push esi
call fcn.00476580
add esp, 0x2c
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x1c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x20]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x2c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x18]
push edx
call fcn.004722d0
mov esi, eax
add esp, 4
test esi, esi
je case.default.0x4138e6
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
push esi
call fcn.00472480
push 0x20
call fcn.00484c16
mov edi, eax
add esp, 0x10
test edi, edi
je case.default.0x4138e6
mov edx, dword [esp + 0x14]
push 2
push edi
push edx
call fcn.0046f610
add esp, 0xc
test eax, eax
je case.0x40b71c.4
mov eax, dword [esp + 0x2c]
cmp eax, 0xc
ja case.0x40b71c.4
jmp dword [eax*4 + 0x41a694]
mov eax, dword [edi]
push 1
push eax
push esi
call fcn.00476560
mov ecx, dword [0x4b8074]
push 1
push ecx
push esi
call fcn.00474d80
add esp, 0x18
mov edx, dword [edi + 4]
push 1
push edx
push esi
call fcn.00476560
mov eax, dword [0x4b8074]
push 1
add eax, 4
push eax
push esi
call fcn.00474d80
add esp, 0x18
mov ecx, dword [edi + 8]
push 1
push ecx
push esi
call fcn.00476560
mov edx, dword [0x4b8074]
push 1
add edx, 8
push edx
push esi
call fcn.00474d80
add esp, 0x18
push edi
call fcn.00484c99
add esp, 4
jmp case.default.0x4138e6
mov eax, dword [edi + 8]
push 1
push eax
push esi
call fcn.00476560
mov ecx, dword [0x4b8074]
push 1
add ecx, 0xc
push ecx
push esi
call fcn.00474d80
add esp, 0x18
push edi
call fcn.00484c99
add esp, 4
jmp case.default.0x4138e6
mov edx, dword [edi]
push 1
push edx
push esi
call fcn.00476560
mov eax, dword [0x4b8074]
push 1
add eax, 0x12
push eax
push esi
call fcn.00474d80
add esp, 0x18
mov ecx, dword [edi + 4]
push 1
push ecx
push esi
call fcn.00476560
mov edx, dword [0x4b8074]
push 1
add edx, 0x12
push edx
push esi
call fcn.00474d80
add esp, 0x18
mov eax, dword [edi + 8]
push 1
push eax
push esi
call fcn.00476560
add esp, 0xc
push edi
call fcn.00484c99
add esp, 4
jmp case.default.0x4138e6
mov eax, dword [ebp]
push 0x6d89a4
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
push 0x6d89a8
jmp 0x407307
cmp eax, 0x1030e08
ja 0x40c2ea
je 0x40c155
cmp eax, 0x1030c06
ja 0x40c11c
je 0x40bac4
cmp eax, 0x1030a02
je 0x40ba92
cmp eax, 0x1030b06
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x1c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x20]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x2c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x18]
push edx
call fcn.004722d0
mov esi, eax
add esp, 4
test esi, esi
je case.default.0x4138e6
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
push esi
call fcn.00472480
push 0x20
call fcn.00484c16
mov edi, eax
add esp, 0x10
test edi, edi
je case.default.0x4138e6
mov edx, dword [esp + 0x14]
push 2
push edi
push edx
call fcn.0046f610
add esp, 0xc
test eax, eax
je case.default.0x4138e6
mov eax, dword [esp + 0x2c]
sub eax, 0
je 0x40ba00
sub eax, 1
jne case.0x40bbb7.3
mov eax, dword [edi + 0xc]
cmp eax, 6
ja case.default.0x40b976
jmp dword [eax*4 + 0x41a6c8]
mov eax, dword [0x4b8074]
add eax, 8
jmp 0x40b9d1
mov ecx, dword [0x4b8074]
push 1
add ecx, 4
push ecx
jmp 0x40b9d4
mov edx, dword [0x4b8074]
push 1
add edx, 0x3e
push edx
jmp 0x40b9d4
mov eax, dword [0x4b8074]
add eax, 0x42
jmp 0x40b9d1
mov ecx, dword [0x4b8074]
push 1
add ecx, 0x46
push ecx
jmp 0x40b9d4
mov edx, dword [0x4b8074]
push 1
add edx, 0x4a
push edx
jmp 0x40b9d4
mov eax, dword [0x4b8074]
add eax, 0x4e
push 1
push eax
push esi
call fcn.00474d80
add esp, 0xc
mov ecx, dword [0x4b8074]
push 1
add ecx, 0x52
push ecx
push esi
call fcn.00474d80
add esp, 0xc
push edi
call fcn.00484c99
add esp, 4
jmp case.default.0x4138e6
mov eax, dword [edi + 0xc]
cmp eax, 6
ja case.default.0x40ba08
jmp dword [eax*4 + 0x41a6e4]
mov edx, dword [0x4b8074]
add edx, 8
jmp 0x40ba64
mov eax, dword [0x4b8074]
push 1
add eax, 4
push eax
jmp 0x40ba67
mov ecx, dword [0x4b8074]
push 1
add ecx, 0x3e
push ecx
jmp 0x40ba67
mov edx, dword [0x4b8074]
add edx, 0x42
jmp 0x40ba64
mov eax, dword [0x4b8074]
push 1
add eax, 0x46
push eax
jmp 0x40ba67
mov ecx, dword [0x4b8074]
push 1
add ecx, 0x4a
push ecx
jmp 0x40ba67
mov edx, dword [0x4b8074]
add edx, 0x4e
push 1
push edx
push esi
call fcn.00474d80
add esp, 0xc
mov eax, dword [0x4b8074]
add eax, 0x52
push 1
push eax
push esi
call fcn.00474d80
add esp, 0xc
push edi
call fcn.00484c99
add esp, 4
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x14]
push 3
push 0
push edx
call fcn.0046f610
add esp, 0xc
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x1c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x20]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x2c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x18]
push edx
call fcn.004722d0
mov esi, eax
add esp, 4
test esi, esi
je case.default.0x4138e6
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
push esi
call fcn.00472480
push 0x20
call fcn.00484c16
mov edi, eax
add esp, 0x10
test edi, edi
je case.default.0x4138e6
mov edx, dword [esp + 0x14]
push 2
push edi
push edx
call fcn.0046f610
add esp, 0xc
test eax, eax
je case.default.0x4138e6
mov eax, dword [esp + 0x2c]
cmp eax, 0x28
ja case.0x40bbb7.3
movzx eax, byte [eax + 0x41a740]
jmp dword [eax*4 + 0x41a700]
mov ecx, dword [edi + 0x10]
push 1
push 2
push ecx
push esi
call fcn.00476580
mov edx, dword [0x4b8074]
push 1
add edx, 0x1a
push edx
push esi
call fcn.00474d80
mov eax, dword [edi + 0x14]
push 1
push 2
push eax
push esi
call fcn.00476580
mov ecx, dword [0x4b8074]
push 1
add ecx, 0x1e
push ecx
push esi
call fcn.00474d80
mov edx, dword [edi + 0x18]
push 1
push 2
push edx
push esi
call fcn.00476580
mov eax, dword [0x4b8074]
add esp, 0x48
add eax, 0x22
jmp 0x40ba78
mov ecx, dword [edi + 0x10]
push 1
push 2
push ecx
push esi
call fcn.00476580
mov edx, dword [0x4b8074]
push 1
add edx, 0x1a
push edx
push esi
call fcn.00474d80
mov eax, dword [edi + 0x14]
push 1
push 2
push eax
push esi
call fcn.00476580
mov ecx, dword [0x4b8074]
push 1
add ecx, 0x1e
push ecx
push esi
call fcn.00474d80
add esp, 0x38
push edi
call fcn.00484c99
add esp, 4
jmp case.default.0x4138e6
mov edx, dword [edi + 0x10]
push 1
push 2
push edx
push esi
call fcn.00476580
mov eax, dword [0x4b8074]
push 1
add eax, 0x1a
push eax
push esi
call fcn.00474d80
add esp, 0x1c
push edi
call fcn.00484c99
add esp, 4
jmp case.default.0x4138e6
cmp dword [edi + 0x10], 0xb
push 1
jbe 0x40bcc2
mov ecx, dword [0x4b8074]
add ecx, 0x2c
push ecx
push esi
call fcn.00474d80
mov edx, dword [edi + 0x10]
push 1
push 2
sub edx, 0xc
push edx
jmp 0x40bcd9
mov eax, dword [0x4b8074]
add eax, 0x26
push eax
push esi
call fcn.00474d80
mov ecx, dword [edi + 0x10]
push 1
push 2
push ecx
push esi
call fcn.00476580
mov edx, dword [0x4b8074]
add esp, 0x1c
push 1
add edx, 0x1a
push edx
push esi
call fcn.00474d80
mov eax, dword [edi + 0x14]
push 1
push 2
push eax
push esi
call fcn.00476580
mov ecx, dword [0x4b8074]
push 1
add ecx, 0x1e
push ecx
push esi
call fcn.00474d80
mov edx, dword [edi + 0x18]
push 1
push 2
push edx
push esi
call fcn.00476580
mov eax, dword [0x4b8074]
push 1
add eax, 0x22
push eax
push esi
call fcn.00474d80
add esp, 0x44
push edi
call fcn.00484c99
add esp, 4
jmp case.default.0x4138e6
cmp dword [edi + 0x10], 0xb
push 1
jbe 0x40bd69
mov ecx, dword [0x4b8074]
add ecx, 0x2c
push ecx
push esi
call fcn.00474d80
mov edx, dword [edi + 0x10]
push 1
push 2
sub edx, 0xc
push edx
jmp 0x40bd80
mov eax, dword [0x4b8074]
add eax, 0x26
push eax
push esi
call fcn.00474d80
mov ecx, dword [edi + 0x10]
push 1
push 2
push ecx
push esi
call fcn.00476580
mov edx, dword [0x4b8074]
add esp, 0x1c
push 1
add edx, 0x1a
push edx
push esi
call fcn.00474d80
mov eax, dword [edi + 0x14]
push 1
push 2
push eax
push esi
call fcn.00476580
mov ecx, dword [0x4b8074]
push 1
add ecx, 0x1e
push ecx
push esi
call fcn.00474d80
add esp, 0x28
push edi
call fcn.00484c99
add esp, 4
jmp case.default.0x4138e6
cmp dword [edi + 0x10], 0xb
push 1
jbe 0x40bdf1
mov edx, dword [0x4b8074]
add edx, 0x2c
push edx
push esi
call fcn.00474d80
mov eax, dword [edi + 0x10]
push 1
push 2
sub eax, 0xc
push eax
jmp 0x40be09
mov ecx, dword [0x4b8074]
add ecx, 0x26
push ecx
push esi
call fcn.00474d80
mov edx, dword [edi + 0x10]
push 1
push 2
push edx
push esi
call fcn.00476580
mov eax, dword [0x4b8074]
add esp, 0x1c
add eax, 0x1a
jmp 0x40ba78
cmp dword [edi + 0x10], 0xb
push 1
jbe 0x40c100
mov ecx, dword [0x4b8074]
add ecx, 0x2c
push ecx
jmp 0x40ba7b
mov eax, dword [edi + 0x10]
push 1
push 2
push eax
push esi
call fcn.00476580
mov ecx, dword [0x4b8074]
push 1
add ecx, 0x16
push ecx
push esi
call fcn.00474d80
mov edx, dword [edi + 0x14]
push 1
push 2
push edx
push esi
call fcn.00476580
mov eax, dword [0x4b8074]
push 1
add eax, 0x16
push eax
push esi
call fcn.00474d80
mov ecx, dword [edi + 0x18]
push 1
push 2
push ecx
push esi
call fcn.00476580
add esp, 0x48
push edi
call fcn.00484c99
add esp, 4
jmp case.default.0x4138e6
mov edx, dword [edi + 0x10]
push 1
push 2
push edx
push esi
call fcn.00476580
mov eax, dword [0x4b8074]
push 1
add eax, 0x16
push eax
push esi
call fcn.00474d80
mov ecx, dword [edi + 0x14]
push 1
push 2
push ecx
push esi
call fcn.00476580
add esp, 0x2c
push edi
call fcn.00484c99
add esp, 4
jmp case.default.0x4138e6
mov edx, dword [edi + 0x10]
push 1
push 2
push edx
push esi
call fcn.00476580
add esp, 0x10
push edi
call fcn.00484c99
add esp, 4
jmp case.default.0x4138e6
cmp dword [edi + 0x10], 0xb
push 1
jbe 0x40bf19
mov eax, dword [0x4b8074]
add eax, 0x38
push eax
push esi
call fcn.00474d80
mov ecx, dword [edi + 0x10]
push 1
push 2
sub ecx, 0xc
push ecx
jmp 0x40bf31
mov edx, dword [0x4b8074]
add edx, 0x32
push edx
push esi
call fcn.00474d80
mov eax, dword [edi + 0x10]
push 1
push 2
push eax
push esi
call fcn.00476580
mov ecx, dword [0x4b8074]
add esp, 0x1c
push 1
add ecx, 0x16
push ecx
push esi
call fcn.00474d80
mov edx, dword [edi + 0x14]
push 1
push 2
push edx
push esi
call fcn.00476580
mov eax, dword [0x4b8074]
push 1
add eax, 0x16
push eax
push esi
call fcn.00474d80
mov ecx, dword [edi + 0x18]
push 1
push 2
push ecx
push esi
call fcn.00476580
add esp, 0x38
push edi
call fcn.00484c99
add esp, 4
jmp case.default.0x4138e6
cmp dword [edi + 0x10], 0xb
push 1
jbe 0x40bfaf
mov edx, dword [0x4b8074]
add edx, 0x38
push edx
push esi
call fcn.00474d80
mov eax, dword [edi + 0x10]
push 1
push 2
sub eax, 0xc
push eax
jmp 0x40bfc7
mov ecx, dword [0x4b8074]
add ecx, 0x32
push ecx
push esi
call fcn.00474d80
mov edx, dword [edi + 0x10]
push 1
push 2
push edx
push esi
call fcn.00476580
mov eax, dword [0x4b8074]
add esp, 0x1c
push 1
add eax, 0x16
push eax
push esi
call fcn.00474d80
mov ecx, dword [edi + 0x14]
push 1
push 2
push ecx
push esi
call fcn.00476580
add esp, 0x1c
push edi
call fcn.00484c99
add esp, 4
jmp case.default.0x4138e6
cmp dword [edi + 0x10], 0xb
push 1
jbe 0x40c03a
mov edx, dword [0x4b8074]
add edx, 0x38
push edx
push esi
call fcn.00474d80
mov eax, dword [edi + 0x10]
push 1
push 2
sub eax, 0xc
push eax
push esi
call fcn.00476580
add esp, 0x1c
push edi
call fcn.00484c99
add esp, 4
jmp case.default.0x4138e6
mov ecx, dword [0x4b8074]
add ecx, 0x32
push ecx
push esi
call fcn.00474d80
mov edx, dword [edi + 0x10]
push 1
push 2
push edx
push esi
call fcn.00476580
add esp, 0x1c
push edi
call fcn.00484c99
add esp, 4
jmp case.default.0x4138e6
cmp dword [edi + 0x10], 0xb
push 1
jbe 0x40c07e
mov eax, dword [0x4b8074]
add eax, 0x38
jmp 0x40ba7a
mov ecx, dword [0x4b8074]
add ecx, 0x32
push ecx
jmp 0x40ba7b
mov eax, dword [edi + 0x18]
cmp eax, 0xb
ja case.0x40bbb7.3
jmp dword [eax*4 + 0x41a76c]
mov edx, dword [0x4b8074]
push 1
add edx, 0x56
push edx
jmp 0x40ba7b
mov eax, dword [0x4b8074]
add eax, 0x58
jmp 0x40ba78
mov ecx, dword [0x4b8074]
push 1
add ecx, 0x5c
push ecx
jmp 0x40ba7b
mov edx, dword [0x4b8074]
push 1
add edx, 0x60
push edx
jmp 0x40ba7b
mov eax, dword [0x4b8074]
add eax, 0x68
jmp 0x40ba78
mov ecx, dword [0x4b8074]
push 1
add ecx, 0x66
push ecx
jmp 0x40ba7b
push 1
mov edx, dword [0x4b8074]
add edx, 0x26
push edx
jmp 0x40ba7b
mov eax, dword [0x4b8074]
add eax, 0x2c
jmp 0x40ba78
cmp eax, 0x1030d02
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x14]
push edx
call fcn.00470e60
add esp, 4
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x1c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x20]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x2c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x24]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x34]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
push 4
lea edx, [esp + 0x44]
push edx
push eax
call fcn.0046f610
add esp, 0xc
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x40]
push ecx
call fcn.004023b0
add esp, 4
cmp dword [eax], 0x80000307
jne case.default.0x4138e6
mov ecx, dword [eax + 8]
add eax, 8
test ecx, ecx
mov dword [esp + 0x40], ecx
mov edi, dword [eax + 4]
je 0x40c29e
mov edx, dword [esp + 0x18]
push edx
call fcn.004722d0
mov esi, eax
add esp, 4
test esi, esi
je 0x40c29e
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
push esi
call fcn.00472480
mov edx, dword [esp + 0x4c]
add esp, 0xc
push 1
push edx
call fcn.00402380
add esp, 4
push eax
push esi
call fcn.00474d80
add esp, 0xc
test edi, edi
je case.default.0x4138e6
mov eax, dword [esp + 0x2c]
push eax
call fcn.004722d0
mov esi, eax
add esp, 4
test esi, esi
je case.default.0x4138e6
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x24]
push ecx
push edx
push esi
call fcn.00472480
add esp, 0xc
push 1
push edi
call fcn.00402380
add esp, 4
push eax
push esi
call fcn.00474d80
add esp, 0xc
jmp case.default.0x4138e6
cmp eax, 0x1030f03
je 0x40c3ad
cmp eax, 0x1031001
je 0x40c3a3
cmp eax, 0x1031103
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
push 0x104
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
test esi, esi
je 0x407e64
mov eax, dword [esp + 0x18]
push esi
push eax
call fcn.0046ee30
add esp, 8
call fcn.0046eec0
push eax
call fcn.0046eea0
mov ecx, dword [esp + 0x18]
push eax
push esi
push ecx
call fcn.00436fa0
add esp, 4
push eax
call fcn.00438100
add esp, 0x10
push esi
mov dword [0x6cf9a4], eax
call dword [sym.imp.KERNEL32.dll_GlobalHandle]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp case.default.0x4138e6
call fcn.0046e9e0
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
mov ecx, dword [esp + 0x14]
push ecx
mov dword [esp + 0x1c], eax
add ebp, 4
call fcn.0046f020
add esp, 4
test eax, eax
je case.default.0x4138e6
mov edx, dword [esp + 0x14]
push edx
call fcn.0046f950
add esp, 4
test al, al
je 0x40abd9
push 0
push 0
call fcn.00470480
mov eax, dword [esp + 0x1c]
push eax
call fcn.00471bd0
push 0
push 0xffffffffffffffff
mov dword [0x4c00e8], esi
call fcn.00404830
mov ecx, dword [esp + 0x44]
mov dword [ecx], eax
mov eax, dword [0x6d63c8]
add esp, 0x14
test eax, eax
je 0x40c470
mov edx, eax
shr edx, 0x1f
and edx, 1
and eax, 0xfffffff
push edx
push eax
call fcn.00402340
add esp, 4
push eax
call fcn.00468a80
add esp, 8
call fcn.00468b50
test dword [0x6d63c8], 0x40000000
je 0x40c475
push 0
push 0
call fcn.00468c70
add esp, 8
jmp 0x40c475
call fcn.00468af0
push 0
push 0xffffffffffffffff
call fcn.004689c0
add esp, 8
mov esi, 0x6d8ae0
cmp dword [esi - 8], edi
je 0x40c505
mov eax, dword [esi]
mov ecx, dword [esi + 4]
mov edx, dword [esi - 4]
push 0
push eax
push ecx
push edx
call fcn.00402340
add esp, 4
cmp dword [esi + 0xc], edi
push eax
je 0x40c4ad
call fcn.00468880
jmp 0x40c4b2
call fcn.00468770
mov ecx, dword [esi + 8]
add esp, 0x10
test ecx, ecx
mov dword [esp + 0x28], eax
je 0x40c4ce
push ecx
push eax
call fcn.004689f0
mov eax, dword [esp + 0x30]
add esp, 8
mov ecx, dword [esi + 4]
mov edx, ecx
and edx, 0xffff0000
cmp edx, 0x80000000
je 0x40c4f8
cmp edx, 0x80010000
jne 0x40c505
and ecx, 0xffff
mov dword [ecx*4 + 0x6d4488], eax
jmp 0x40c505
and ecx, 0xffff
mov dword [ecx*4 + 0x6d0490], eax
add esi, 0x18
cmp esi, 0x6d8bb8
jl 0x40c486
mov eax, dword [0x6d2530]
push eax
mov byte [0x4c0170], 0
mov dword [0x4c018c], 1
call fcn.004023b0
add esp, 4
cmp dword [esp + 0x18], edi
mov ebp, eax
je case.default.0x4138e6
mov ecx, dword [0x4c00e8]
push ecx
push 0
mov edx, ebp
sub edx, dword [0x4c017c]
push 0
push edx
call fcn.0046fab0
add esp, 0x10
test eax, eax
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
mov ecx, dword [0x4c017c]
lea ebp, [ecx + eax]
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x18]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [0x4c00e8]
mov edx, dword [esp + 0x14]
push 0
push edx
mov edx, dword [esp + 0x20]
lea eax, [eax + eax*4]
lea ecx, [eax*8 + 0x1e]
push ecx
push 0xffffffffffffffff
push 0
push edx
call fcn.0046ee30
add esp, 8
push eax
call fcn.0043f7b0
add esp, 0x14
test eax, eax
mov dword [0x6cf9a4], eax
jne case.default.0x4138e6
mov eax, dword [esp + 0x14]
push eax
mov eax, dword [0x4c00e8]
lea ecx, [eax + eax*4]
mov eax, dword [0x6d89a8]
lea edx, [ecx*8 + 0x1e]
mov ecx, dword [0x6d89a4]
push edx
push eax
push ecx
push 0
call fcn.0043f850
add esp, 0x14
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
cmp eax, 0x1033701
ja 0x40cd02
je 0x40ccf8
cmp eax, 0x1032402
ja 0x40ca44
je 0x40c9ea
cmp eax, 0x1031702
ja 0x40c855
je 0x40c81c
cmp eax, 0x1031402
ja 0x40c7bd
je 0x40c784
cmp eax, 0x1031204
je 0x40c6d1
cmp eax, 0x1031303
jne 0x41a4cd
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x18]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
push edx
push eax
call fcn.0046f7c0
add esp, 8
neg al
sbb eax, eax
neg eax
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x1c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [0x4c00e8]
mov edx, dword [esp + 0x14]
push 0
push edx
mov edx, dword [esp + 0x20]
lea eax, [eax + eax*4]
lea ecx, [eax*8 + 0x1e]
push ecx
push 0xffffffffffffffff
push 0
push edx
call fcn.0046ee30
add esp, 8
push eax
call fcn.0043f7b0
add esp, 0x14
test eax, eax
mov dword [0x6cf9a4], eax
jne case.default.0x4138e6
mov eax, dword [esp + 0x1c]
sub eax, 0
je 0x40c5eb
sub eax, 1
jne case.default.0x4138e6
mov dword [0x6cf9a4], esi
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
push eax
call fcn.0046f880
add esp, 4
neg al
sbb eax, eax
neg eax
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
cmp eax, 0x1031503
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
push eax
push ecx
call fcn.0046f2c0
add esp, 8
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
push eax
call fcn.0046f8f0
add esp, 4
neg al
sbb eax, eax
neg eax
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
cmp eax, 0x1032202
ja 0x40c985
je 0x40c92b
cmp eax, 0x1032002
je 0x40c8d2
cmp eax, 0x1032102
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
push 0x20
call fcn.00484c16
mov esi, eax
add esp, 4
test esi, esi
je case.default.0x4138e6
mov edx, dword [esp + 0x14]
push 2
push esi
push edx
call fcn.0046f610
add esp, 0xc
test eax, eax
je 0x40c8c4
mov eax, dword [esi + 4]
mov dword [0x6cf9a4], eax
push esi
call fcn.00484c99
add esp, 4
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
push 0x20
call fcn.00484c16
mov esi, eax
add esp, 4
test esi, esi
je case.default.0x4138e6
mov edx, dword [esp + 0x14]
push 2
push esi
push edx
call fcn.0046f610
add esp, 0xc
test eax, eax
je 0x40c91d
mov eax, dword [esi]
mov dword [0x6cf9a4], eax
push esi
call fcn.00484c99
add esp, 4
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
push 0x20
call fcn.00484c16
mov esi, eax
add esp, 4
test esi, esi
je case.default.0x4138e6
mov edx, dword [esp + 0x14]
push 2
push esi
push edx
call fcn.0046f610
add esp, 0xc
test eax, eax
je 0x40c977
mov eax, dword [esi + 8]
mov dword [0x6cf9a4], eax
push esi
call fcn.00484c99
add esp, 4
jmp case.default.0x4138e6
cmp eax, 0x1032302
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
push 0x20
call fcn.00484c16
mov esi, eax
add esp, 4
test esi, esi
je case.default.0x4138e6
mov edx, dword [esp + 0x14]
push 2
push esi
push edx
call fcn.0046f610
add esp, 0xc
test eax, eax
je 0x40c9dc
mov eax, dword [esi + 0xc]
mov dword [0x6cf9a4], eax
push esi
call fcn.00484c99
add esp, 4
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
push 0x20
call fcn.00484c16
mov esi, eax
add esp, 4
test esi, esi
je case.default.0x4138e6
mov edx, dword [esp + 0x14]
push 2
push esi
push edx
call fcn.0046f610
add esp, 0xc
test eax, eax
je 0x40ca36
mov eax, dword [esi + 0x10]
mov dword [0x6cf9a4], eax
push esi
call fcn.00484c99
add esp, 4
jmp case.default.0x4138e6
cmp eax, 0x1033202
ja 0x40cc09
je 0x40cbc3
cmp eax, 0x1033002
ja 0x40cb72
je 0x40cb2c
cmp eax, 0x1032502
je 0x40cad2
cmp eax, 0x1032602
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
push 0x20
call fcn.00484c16
mov esi, eax
add esp, 4
test esi, esi
je case.default.0x4138e6
mov edx, dword [esp + 0x14]
push 2
push esi
push edx
call fcn.0046f610
add esp, 0xc
test eax, eax
je 0x40cac4
mov eax, dword [esi + 0x18]
mov dword [0x6cf9a4], eax
push esi
call fcn.00484c99
add esp, 4
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
push 0x20
call fcn.00484c16
mov esi, eax
add esp, 4
test esi, esi
je case.default.0x4138e6
mov edx, dword [esp + 0x14]
push 2
push esi
push edx
call fcn.0046f610
add esp, 0xc
test eax, eax
je 0x40cb1e
mov eax, dword [esi + 0x14]
mov dword [0x6cf9a4], eax
push esi
call fcn.00484c99
add esp, 4
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x4c]
push edx
push eax
call fcn.0046f550
add esp, 8
test eax, eax
je 0x40ec3c
movzx ecx, word [esp + 0x4c]
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
cmp eax, 0x1033102
jne 0x41a4cd
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x4c]
push eax
push ecx
call fcn.0046f550
add esp, 8
test eax, eax
je 0x40ec3c
movzx edx, word [esp + 0x4e]
mov dword [0x6cf9a4], edx
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x4c]
push edx
push eax
call fcn.0046f550
add esp, 8
test eax, eax
je 0x40ec3c
movzx ecx, word [esp + 0x52]
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
cmp eax, 0x1033402
je 0x40ccb2
cmp eax, 0x1033502
je 0x40cc6c
cmp eax, 0x1033602
jne 0x41a4cd
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x4c]
push eax
push ecx
call fcn.0046f550
add esp, 8
test eax, eax
je 0x40ec3c
movzx edx, word [esp + 0x58]
mov dword [0x6cf9a4], edx
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x4c]
push edx
push eax
call fcn.0046f550
add esp, 8
test eax, eax
je 0x40ec3c
movzx ecx, word [esp + 0x56]
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x4c]
push eax
push ecx
call fcn.0046f550
add esp, 8
test eax, eax
je 0x40ec3c
movzx edx, word [esp + 0x54]
mov dword [0x6cf9a4], edx
jmp case.default.0x4138e6
call fcn.00434dc0
jmp case.default.0x4138e6
cmp eax, 0x1040503
ja 0x40d65b
je 0x40d601
cmp eax, 0x1040204
ja 0x40d3d4
je 0x40d31e
cmp eax, 0x1040107
ja 0x40cf6c
je 0x40cdc6
cmp eax, 0x1033801
je 0x40cdbc
cmp eax, 0x1040002
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
cmp eax, 0x20
jb 0x40cd95
mov esi, 0x6d67d0
mov ecx, dword [esi]
test ecx, ecx
je 0x40cd85
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [esi], edi
add esi, 4
cmp esi, 0x6d6850
jl 0x40cd75
jmp case.default.0x4138e6
mov ecx, dword [eax*4 + 0x6d67d0]
test ecx, ecx
je case.default.0x4138e6
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov ecx, dword [esp + 0x14]
mov dword [ecx*4 + 0x6d67d0], esi
jmp case.default.0x4138e6
call fcn.00434db0
jmp case.default.0x4138e6
push 0xbc
lea edx, [esp + 0x1ec]
push 0
push edx
call fcn.00485180
mov eax, dword [ebp]
lea ecx, [esp + 0x20]
push ecx
push eax
call fcn.00401070
add esp, 0x14
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x1c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x1ec]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x274]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
cmp dword [esp + 0x274], 1
jne 0x40ce85
mov edx, dword [ebp]
mov dword [esp + 0x278], edx
add ebp, 4
jmp 0x40cea4
mov eax, dword [ebp]
lea ecx, [esp + 0x278]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
cmp dword [esp + 0x14], 0x20
jae case.default.0x4138e6
mov edx, dword [esp + 0x18]
push edx
call fcn.00402340
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
add esp, 4
test eax, eax
je 0x40ced1
push eax
lea eax, [esp + 0x1f4]
push eax
call esi
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00402340
add esp, 4
test eax, eax
je 0x40ceed
push eax
lea edx, [esp + 0x224]
push edx
call esi
mov ecx, dword [esp + 0x14]
cmp dword [ecx*4 + 0x6d67d0], edi
lea ecx, [ecx*4 + 0x6d67d0]
jne 0x40cf50
push 0x468
call fcn.00484d49
add esp, 4
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c8], 7
test eax, eax
je 0x40cf36
mov ecx, dword [0x4c00e8]
mov edx, dword [esp + 0x14]
push ecx
push edx
mov ecx, eax
call fcn.004266a0
jmp 0x40cf38
xor eax, eax
mov ecx, dword [esp + 0x14]
lea ecx, [ecx*4 + 0x6d67d0]
mov dword [esp + 0x3c8], 0xffffffff
mov dword [ecx], eax
mov ecx, dword [ecx]
test ecx, ecx
je case.default.0x4138e6
lea eax, [esp + 0x1e8]
push eax
call fcn.004267d0
jmp case.default.0x4138e6
cmp eax, 0x1040118
jne 0x41a4cd
push 0xbc
lea ecx, [esp + 0x1ec]
push 0
push ecx
call fcn.00485180
mov eax, dword [ebp]
lea edx, [esp + 0x20]
push edx
push eax
call fcn.00401070
add esp, 0x14
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x18]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x1c]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x250]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x254]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x210]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x214]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x218]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x21c]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x258]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x25c]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x240]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x244]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x248]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x24c]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x260]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x270]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x26c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x264]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x268]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x1ec]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x20]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
movzx eax, byte [esp + 0x20]
cmp eax, 1
mov dword [esp + 0x274], eax
jne 0x40d249
mov edx, dword [ebp]
mov dword [esp + 0x278], edx
add ebp, 4
jmp 0x40d268
mov eax, dword [ebp]
lea ecx, [esp + 0x278]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edi, 0x20
cmp dword [esp + 0x14], edi
jae case.default.0x4138e6
mov edx, dword [esp + 0x18]
push edx
call fcn.00402340
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
add esp, 4
test eax, eax
je 0x40d299
push eax
lea eax, [esp + 0x1f4]
push eax
call esi
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00402340
add esp, 4
test eax, eax
je 0x40d2b5
push eax
lea edx, [esp + 0x224]
push edx
call esi
mov eax, dword [esp + 0x20]
test eax, 0x100
mov dword [esp + 0x1e8], 0xf
je 0x40d2d6
mov dword [esp + 0x1e8], 0x1f
test eax, 0x200
je 0x40d2e4
or dword [esp + 0x1e8], edi
mov ecx, dword [esp + 0x14]
cmp dword [ecx*4 + 0x6d67d0], 0
lea ecx, [ecx*4 + 0x6d67d0]
jne 0x40cf50
push 0x468
call fcn.00484d49
add esp, 4
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c8], 8
jmp 0x40cf1d
push 0x58
lea ecx, [esp + 0x2a8]
push 0
push ecx
call fcn.00485180
mov eax, dword [ebp]
lea edx, [esp + 0x20]
push edx
push eax
call fcn.00401070
add esp, 0x14
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x18]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x2a8]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
cmp dword [eax*4 + 0x6d67d0], esi
je case.default.0x4138e6
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00402340
add esp, 4
test eax, eax
je 0x40d3b7
push eax
lea edx, [esp + 0x2b0]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx*4 + 0x6d67d0]
lea eax, [esp + 0x2a4]
push eax
call fcn.00427000
jmp case.default.0x4138e6
cmp eax, 0x104020a
je 0x40d465
cmp eax, 0x1040302
je 0x40d42a
cmp eax, 0x1040402
jne 0x41a4cd
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
mov ecx, dword [eax*4 + 0x6d67d0]
test ecx, ecx
je case.default.0x4138e6
call fcn.00427ea0
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x14]
mov ecx, dword [edx*4 + 0x6d67d0]
test ecx, ecx
je case.default.0x4138e6
push 1
call fcn.00427df0
jmp case.default.0x4138e6
push 0x58
lea eax, [esp + 0x2a8]
push 0
push eax
call fcn.00485180
mov eax, dword [ebp]
lea ecx, [esp + 0x20]
push ecx
push eax
call fcn.00401070
add esp, 0x14
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x2dc]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x2e0]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x2cc]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x2d0]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x2d4]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x2d8]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x1c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x14]
cmp dword [edx*4 + 0x6d67d0], esi
je case.default.0x4138e6
mov eax, dword [esp + 0x1c]
test eax, 0x1000000
je 0x40d5b2
mov dword [esp + 0x2a4], 0x101
and eax, 0xfeffffff
jmp 0x40d5bd
mov dword [esp + 0x2a4], 1
mov dword [esp + 0x2a8], eax
mov eax, dword [esp + 0x18]
push eax
call fcn.00402340
add esp, 4
test eax, eax
je 0x40d5e4
push eax
lea ecx, [esp + 0x2b0]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [esp + 0x14]
mov ecx, dword [eax*4 + 0x6d67d0]
lea edx, [esp + 0x2a4]
push edx
call fcn.00427000
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
mov ecx, dword [eax*4 + 0x6d67d0]
test ecx, ecx
je case.default.0x4138e6
mov edx, dword [esp + 0x18]
push edx
call fcn.00427c00
jmp case.default.0x4138e6
cmp eax, 0x1050102
ja 0x40d87e
je 0x415f4e
cmp eax, 0x1040806
ja 0x40d80f
je 0x40d752
cmp eax, 0x1040602
je 0x40d716
cmp eax, 0x1040704
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x1c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x14]
mov ecx, dword [edx*4 + 0x6d67d0]
test ecx, ecx
je case.default.0x4138e6
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push eax
push edx
call fcn.004278e0
movzx eax, al
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x14]
mov eax, dword [edx*4 + 0x6d67d0]
test eax, eax
je case.default.0x4138e6
mov eax, dword [eax + 0x64]
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x1c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x20]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x2c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x14]
mov ecx, dword [edx*4 + 0x6d67d0]
test ecx, ecx
je case.default.0x4138e6
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x20]
push eax
mov eax, dword [esp + 0x20]
push edx
mov edx, dword [esp + 0x20]
push eax
push edx
call fcn.00401050
jmp case.default.0x4138e6
cmp eax, 0x1050001
jne 0x41a4cd
mov ecx, dword [0x4c0174]
cmp ecx, edi
je 0x40d82b
push 1
call fcn.004029f0
push 0x78
call fcn.00484d49
add esp, 4
mov dword [esp + 0x38], eax
test eax, eax
mov dword [esp + 0x3c8], 9
je 0x40d851
mov ecx, eax
call fcn.0042aef0
jmp 0x40d853
xor eax, eax
test eax, eax
mov dword [esp + 0x3c8], 0xffffffff
mov dword [0x4c0174], eax
je case.default.0x4138e6
mov ecx, dword [0x4c0658]
push ecx
mov ecx, eax
call fcn.0042af40
jmp case.default.0x4138e6
cmp eax, 0x1050202
je 0x40d8e1
cmp eax, 0x1050301
je 0x40d8d0
cmp eax, 0x1050402
jne 0x41a4cd
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov ecx, dword [0x4c0174]
test ecx, ecx
je case.default.0x4138e6
mov eax, dword [esp + 0x14]
push eax
call fcn.0042b1e0
jmp case.default.0x4138e6
mov ecx, dword [0x6d6858]
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov ecx, dword [0x4c0174]
test ecx, ecx
mov eax, dword [esp + 0x14]
mov dword [0x6d6858], eax
je case.default.0x4138e6
push eax
call fcn.0042b1d0
jmp case.default.0x4138e6
mov esi, dword [ebp]
lea ecx, [esp + 0x18]
add ebp, 4
mov dword [esp + 0x14], esi
mov eax, dword [ebp]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x1c]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [0x4c0174]
test edx, edx
je case.default.0x4138e6
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
push eax
push ecx
push esi
call fcn.00402340
add esp, 4
push eax
mov ecx, edx
call fcn.0042afe0
jmp case.default.0x4138e6
cmp eax, 0x2001b03
ja 0x40e580
je 0x40e553
cmp eax, 0x2000403
ja 0x40e435
je 0x40e5e8
cmp eax, 0x1060804
ja 0x40e14f
je 0x40e0cd
cmp eax, 0x106030c
ja 0x40de44
je 0x40dce9
cmp eax, 0x1060107
ja 0x40db5a
je 0x40da6c
cmp eax, 0x1051102
je 0x40da3d
cmp eax, 0x1060002
jne 0x41a4cd
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
cmp eax, 0xffffffff
jne 0x40da25
call fcn.0042ab70
jmp case.default.0x4138e6
push eax
call fcn.0042abd0
mov eax, dword [esp + 0x18]
push eax
call fcn.00429d30
add esp, 8
jmp case.default.0x4138e6
mov eax, dword [ebp]
mov ecx, dword [0x4c0174]
add ebp, 4
cmp ecx, edi
mov dword [esp + 0x14], eax
je case.default.0x4138e6
mov edx, dword [0x591404]
push eax
push edx
mov dword [0x6cf9a0], eax
call fcn.0042c890
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [ebp]
lea ecx, [esp + 0x1c]
mov dword [esp + 0x18], edx
mov eax, dword [ebp + 4]
add ebp, 4
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x20]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x2c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x24]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
push eax
call fcn.00429d90
mov edx, eax
add esp, 4
test edx, edx
jne 0x40db2c
mov ecx, dword [esp + 0x14]
push ecx
call fcn.00429d30
mov edx, eax
add esp, 4
test edx, edx
je case.default.0x4138e6
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x2c]
push eax
mov eax, dword [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x24]
push eax
mov eax, dword [esp + 0x24]
push ecx
push eax
call fcn.00402340
add esp, 4
push eax
mov ecx, edx
call fcn.00429420
jmp case.default.0x4138e6
cmp eax, 0x106020b
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x1c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x20]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x2c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x24]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x34]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [ebp]
lea ecx, [esp + 0x30]
mov dword [esp + 0x40], edx
mov eax, dword [ebp + 4]
add ebp, 4
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x14]
mov edi, dword [ebp]
push edx
add ebp, 4
call fcn.00429d90
mov esi, eax
add esp, 4
test esi, esi
je case.default.0x4138e6
mov eax, dword [esp + 0x40]
push eax
call fcn.00402340
add esp, 4
test eax, eax
je 0x40dcbf
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x2c]
push ecx
mov ecx, dword [esp + 0x24]
push edx
mov edx, dword [esp + 0x24]
push ecx
push edx
push eax
mov eax, dword [esp + 0x2c]
push eax
mov ecx, esi
call fcn.004299e0
cmp eax, 0xffffffff
mov dword [esp + 0x28], eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x34]
push ecx
push 0
push edi
push edx
push 0
jmp 0x40e00e
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x18]
push ecx
push 0
push edi
push edx
push 3
push eax
mov ecx, esi
call fcn.00429b10
mov ecx, dword [esp + 0x18]
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x18]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x1c]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x20]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x24]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x34]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x30]
mov dword [esp + 0x40], eax
mov eax, dword [ebp + 4]
add ebp, 4
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edi, dword [ebp]
mov edx, dword [esp + 0x14]
mov ebx, dword [ebp + 4]
add ebp, 4
push edx
add ebp, 4
call fcn.00429d90
mov esi, eax
add esp, 4
test esi, esi
je 0x41954e
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x20]
push eax
mov eax, dword [esp + 0x20]
push ecx
mov ecx, dword [esp + 0x48]
push edx
push eax
push ecx
call fcn.00402340
mov edx, dword [esp + 0x2c]
add esp, 4
push eax
push edx
mov ecx, esi
call fcn.004299e0
cmp eax, 0xffffffff
mov dword [esp + 0x28], eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x34]
push ecx
push ebx
push edi
push edx
push 1
jmp 0x40e00e
cmp eax, 0x1060602
ja 0x40e061
je 0x40e024
cmp eax, 0x106040a
je 0x40deca
cmp eax, 0x1060502
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x14]
push edx
call fcn.00429d90
add esp, 4
test eax, eax
je 0x40dead
mov ecx, dword [0x6d03f8]
shr ecx, 0x1f
and ecx, 0xffffff01
push 0
push ecx
mov ecx, eax
call fcn.0042a5d0
mov edx, dword [0x6d03f8]
shr edx, 0x1f
and edx, 0xffffff01
push edx
call fcn.0042a4b0
add esp, 4
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x1c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x20]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x2c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x24]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edi, dword [ebp]
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x40]
add ebp, 4
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x30]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
push eax
call fcn.00429d90
mov esi, eax
add esp, 4
test esi, esi
je case.default.0x4138e6
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x20]
push ecx
mov ecx, dword [esp + 0x20]
push edx
push eax
push ecx
push edi
call fcn.00402340
mov edx, dword [esp + 0x2c]
add esp, 4
push eax
push edx
mov ecx, esi
call fcn.004299e0
cmp eax, 0xffffffff
mov dword [esp + 0x28], eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x30]
push ecx
push 0
push edx
push 3
push 2
push eax
mov ecx, esi
call fcn.00429b10
mov eax, dword [esp + 0x28]
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x14]
push edx
call fcn.00429d90
add esp, 4
test eax, eax
je case.default.0x4138e6
mov ecx, eax
call fcn.00429e10
jmp case.default.0x4138e6
cmp eax, 0x1060703
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
push eax
call fcn.00429d90
add esp, 4
test eax, eax
je case.default.0x4138e6
cmp dword [esp + 0x18], esi
setne cl
push ecx
mov ecx, eax
call fcn.00429eb0
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x18]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x1c]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
push eax
call fcn.00429d90
add esp, 4
test eax, eax
je case.default.0x4138e6
cmp dword [esp + 0x1c], esi
mov edx, dword [esp + 0x18]
setne cl
push ecx
push edx
mov ecx, eax
call fcn.00429f90
jmp case.default.0x4138e6
cmp eax, 0x2000002
ja 0x40e40f
je 0x40e3bf
cmp eax, 0x1070204
ja 0x40e2fe
je 0x40e28e
cmp eax, 0x1070008
je 0x40e1b1
cmp eax, 0x1070102
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x14]
push edx
call fcn.0042cc90
add esp, 4
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x1c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x20]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x2c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
mov edx, dword [0x4c00e8]
mov ecx, dword [ebp + 4]
push edx
mov edx, dword [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x34]
add ebp, 4
push eax
mov eax, dword [esp + 0x28]
add ecx, eax
push ecx
mov ecx, dword [esp + 0x28]
add edx, ecx
push edx
push eax
mov eax, dword [esp + 0x2c]
push ecx
push eax
add ebp, 4
call fcn.0042cbe0
add esp, 0x20
test eax, eax
je 0x41954e
mov ecx, dword [esp + 0x14]
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x18]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x1c]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
push eax
push ecx
push edx
call fcn.0042c820
add esp, 0xc
jmp case.default.0x4138e6
cmp eax, 0x1070306
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x1c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x20]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x2c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x18]
add edx, eax
push edx
mov edx, dword [esp + 0x24]
add edx, ecx
push edx
push eax
mov eax, dword [esp + 0x20]
push ecx
push eax
call fcn.0042c2d0
add esp, 0x14
jmp case.default.0x4138e6
mov eax, dword [ebp]
add ebp, 4
sub eax, 1
je 0x40e3fc
sub eax, 1
je 0x40e3e9
sub eax, 1
jne case.default.0x4138e6
mov ecx, 0x7d0
mov edi, 0x6d6a60
rep stosd dword es:[edi], eax
jmp case.default.0x4138e6
mov ecx, 0x7d0
xor eax, eax
mov edi, 0x6d4488
rep stosd dword es:[edi], eax
jmp case.default.0x4138e6
mov ecx, 0x7d0
xor eax, eax
mov edi, 0x6d0490
rep stosd dword es:[edi], eax
jmp case.default.0x4138e6
cmp eax, 0x2000103
je 0x40e5e8
cmp eax, 0x2000203
je 0x40e5e8
cmp eax, 0x2000303
je 0x40e5e8
jmp 0x41a4cd
cmp eax, 0x2001205
ja 0x40e4c2
je 0x40e510
cmp eax, 0x2000903
ja 0x40e4a4
je 0x40e5e8
cmp eax, 0x2000702
ja 0x40e477
je 0x40e482
cmp eax, 0x2000503
je 0x40e5e8
cmp eax, 0x2000603
je 0x40e5e8
jmp 0x41a4cd
cmp eax, 0x2000802
jne 0x41a4cd
mov eax, dword [ebp - 4]
sub ebp, 4
add ebp, 4
mov dword [esp + 0x14], eax
mov ecx, dword [ebp]
push ecx
push eax
add ebp, 4
call fcn.004011c0
add esp, 8
jmp 0x407316
cmp eax, 0x2000a03
je 0x40e5e8
cmp eax, 0x2000b02
je 0x40e482
cmp eax, 0x2001105
je 0x40e510
jmp 0x41a4cd
cmp eax, 0x2001703
ja 0x40e4f7
je 0x40e553
cmp eax, 0x2001505
ja 0x40e4eb
je 0x40e510
cmp eax, 0x2001305
je 0x40e510
cmp eax, 0x2001405
je 0x40e510
jmp 0x41a4cd
cmp eax, 0x2001605
je 0x40e510
jmp 0x41a4cd
cmp eax, 0x2001803
je 0x40e553
cmp eax, 0x2001905
je 0x40e510
cmp eax, 0x2001a05
jne 0x41a4cd
mov eax, dword [ebp - 4]
sub ebp, 4
add ebp, 4
mov dword [esp + 0x14], eax
mov ecx, dword [ebp]
add ebp, 4
mov dword [esp + 0x18], ecx
mov edx, dword [ebp]
add ebp, 4
mov dword [esp + 0x1c], edx
mov esi, dword [ebp]
add ebp, 4
mov dword [esp + 0x20], esi
mov edi, dword [ebp]
push edi
push esi
push edx
push ecx
push eax
add ebp, 4
call fcn.00401e60
add esp, 0x14
jmp 0x407316
mov eax, dword [ebp - 4]
sub ebp, 4
add ebp, 4
mov dword [esp + 0x14], eax
mov ecx, dword [ebp]
add ebp, 4
mov dword [esp + 0x18], ecx
mov edx, dword [ebp]
push edx
push ecx
push eax
add ebp, 4
call fcn.00401cf0
add esp, 0xc
jmp 0x407316
cmp eax, 0x2031203
ja 0x40e97c
je 0x40e91b
cmp eax, 0x2020002
ja 0x40e643
je 0x40e615
cmp eax, 0x2010403
ja 0x40e5cf
je 0x40e5e8
cmp eax, 0x2010203
ja 0x40e5c3
je 0x40e5e8
cmp eax, 0x2010003
je 0x40e5e8
cmp eax, 0x2010103
je 0x40e5e8
jmp 0x41a4cd
cmp eax, 0x2010303
je 0x40e5e8
jmp 0x41a4cd
cmp eax, 0x2010503
je 0x40e5e8
cmp eax, 0x2010603
je 0x40e5e8
cmp eax, 0x2010703
jne 0x41a4cd
mov eax, dword [ebp - 4]
sub ebp, 4
add ebp, 4
mov dword [esp + 0x14], eax
mov ecx, dword [ebp]
add ebp, 4
mov dword [esp + 0x18], ecx
mov edx, dword [ebp]
push edx
push ecx
push eax
add ebp, 4
call fcn.00401380
add esp, 0xc
jmp 0x407316
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x14]
push edx
call fcn.0046fc00
add esp, 4
jmp case.default.0x4138e6
cmp eax, 0x2030303
ja 0x40e7c7
je 0x40e774
cmp eax, 0x2030103
ja 0x40e716
je 0x40e6c3
cmp eax, 0x2020102
je 0x40e695
cmp eax, 0x2030001
jne 0x41a4cd
mov dword [0x6d2538], edi
mov dword [0x6d253c], edi
mov ecx, 0x7ce
mov esi, 0x6d2538
mov edi, 0x6d2540
rep movsd dword es:[edi], dword [esi]
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x14]
push edx
call fcn.0046fca0
add esp, 4
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [eax*8 + 0x6d2538], ecx
mov dword [eax*8 + 0x6d253c], esi
jmp case.default.0x4138e6
cmp eax, 0x2030203
jne 0x41a4cd
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x18]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
add dword [eax*8 + 0x6d2538], edx
adc dword [eax*8 + 0x6d253c], esi
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
sub dword [eax*8 + 0x6d2538], ecx
sbb dword [eax*8 + 0x6d253c], esi
jmp case.default.0x4138e6
cmp eax, 0x2030403
je 0x40e8b0
cmp eax, 0x2030503
je 0x40e845
cmp eax, 0x2031103
jne 0x41a4cd
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x18]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x18]
mov edx, dword [eax*8 + 0x6d2538]
mov ecx, dword [esp + 0x14]
mov dword [ecx*8 + 0x6d2538], edx
mov eax, dword [eax*8 + 0x6d253c]
mov dword [ecx*8 + 0x6d253c], eax
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x18]
push 0
mov esi, dword [esp + 0x18]
mov ecx, dword [esi*8 + 0x6d253c]
mov edx, dword [esi*8 + 0x6d2538]
push eax
push ecx
push edx
call fcn.00485300
mov dword [esi*8 + 0x6d2538], eax
mov dword [esi*8 + 0x6d253c], edx
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov esi, dword [esp + 0x14]
mov eax, dword [esi*8 + 0x6d253c]
mov ecx, dword [esi*8 + 0x6d2538]
mov edx, dword [esp + 0x18]
push eax
push ecx
push 0
push edx
call fcn.004852c0
mov dword [esi*8 + 0x6d2538], eax
mov dword [esi*8 + 0x6d253c], edx
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx*8 + 0x6d2538]
mov eax, dword [esp + 0x14]
add dword [eax*8 + 0x6d2538], edx
mov ecx, dword [ecx*8 + 0x6d253c]
adc dword [eax*8 + 0x6d253c], ecx
jmp case.default.0x4138e6
cmp eax, 0x2040303
ja 0x40ee52
je 0x40edd5
cmp eax, 0x2038102
ja 0x40ec47
je 0x40ebe8
cmp eax, 0x2031503
ja 0x40eaee
je 0x40ea9e
cmp eax, 0x2031303
je 0x40ea3d
cmp eax, 0x2031403
jne 0x41a4cd
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x18]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov esi, dword [esp + 0x14]
mov edx, dword [esi*8 + 0x6d253c]
mov eax, dword [esi*8 + 0x6d2538]
push edx
push eax
mov eax, dword [esp + 0x20]
mov ecx, dword [eax*8 + 0x6d253c]
mov edx, dword [eax*8 + 0x6d2538]
push ecx
push edx
call fcn.004852c0
mov dword [esi*8 + 0x6d2538], eax
mov dword [esi*8 + 0x6d253c], edx
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx*8 + 0x6d2538]
mov eax, dword [esp + 0x14]
sub dword [eax*8 + 0x6d2538], edx
mov ecx, dword [ecx*8 + 0x6d253c]
sbb dword [eax*8 + 0x6d253c], ecx
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x18]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x18]
mov edx, dword [eax*8 + 0x6d253c]
mov eax, dword [eax*8 + 0x6d2538]
push edx
jmp 0x40e883
cmp eax, 0x2038004
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x1c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
test esi, esi
mov eax, dword [ecx*8 + 0x6d2538]
mov edx, dword [ecx*8 + 0x6d253c]
je 0x40eb77
push 0
push 0xa
push edx
push eax
call fcn.00485300
sub esi, 1
jne 0x40eb67
mov ecx, dword [esp + 0x18]
add ecx, 0xffffffff
cmp ecx, 8
ja case.default.0x40eb83
jmp dword [ecx*4 + 0x41a79c]
push 0
push 0xa
jmp 0x40ebd3
push 0
push 0x64
jmp 0x40ebd3
push 0
push 0x3e8
jmp 0x40ebd3
push 0
push 0x2710
jmp 0x40ebd3
push 0
push 0x186a0
jmp 0x40ebd3
push 0
push 0xf4240
jmp 0x40ebd3
push 0
push 0x989680
jmp 0x40ebd3
push 0
push 0x5f5e100
jmp 0x40ebd3
push 0
push 0x3b9aca00
push edx
push eax
call fcn.00485200
mov dword [esp + 0x3c], edx
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx*8 + 0x6d253c]
test edx, edx
mov eax, dword [ecx*8 + 0x6d2538]
jg 0x40ec26
jl 0x40ec20
test eax, eax
jae 0x40ec26
neg eax
adc edx, esi
neg edx
xor esi, esi
push 0
push 0xa
push edx
push eax
call fcn.00485300
mov ecx, eax
add esi, 1
or ecx, edx
jne 0x40ec28
mov dword [0x6cf9a4], esi
jmp case.default.0x4138e6
cmp eax, 0x2040003
je 0x40ed5e
cmp eax, 0x2040103
je 0x40ece1
cmp eax, 0x2040203
jne 0x41a4cd
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x18]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
mov edx, dword [eax*8 + 0x6d253c]
mov ecx, dword [esp + 0x18]
cmp edx, dword [ecx*8 + 0x6d253c]
jl 0x40ec3c
jg 0x407d33
mov eax, dword [eax*8 + 0x6d2538]
cmp eax, dword [ecx*8 + 0x6d2538]
jbe 0x40ec3c
mov dword [0x6cf9a4], 1
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
mov edx, dword [eax*8 + 0x6d253c]
mov ecx, dword [esp + 0x18]
cmp edx, dword [ecx*8 + 0x6d253c]
jg 0x40ec3c
jl 0x407d33
mov eax, dword [eax*8 + 0x6d2538]
cmp eax, dword [ecx*8 + 0x6d2538]
jae 0x40ec3c
mov dword [0x6cf9a4], 1
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
mov edx, dword [eax*8 + 0x6d2538]
mov ecx, dword [esp + 0x18]
cmp edx, dword [ecx*8 + 0x6d2538]
jne 0x40ec3c
mov eax, dword [eax*8 + 0x6d253c]
cmp eax, dword [ecx*8 + 0x6d253c]
jne 0x40ec3c
mov dword [0x6cf9a4], 1
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
mov edx, dword [eax*8 + 0x6d253c]
mov ecx, dword [esp + 0x18]
cmp edx, dword [ecx*8 + 0x6d253c]
jg 0x40ec3c
jl 0x407d33
mov eax, dword [eax*8 + 0x6d2538]
cmp eax, dword [ecx*8 + 0x6d2538]
ja 0x40ec3c
mov dword [0x6cf9a4], 1
jmp case.default.0x4138e6
cmp eax, 0x2040802
ja 0x40f06a
je 0x40f037
cmp eax, 0x2040603
ja 0x40efc5
je 0x40ef64
cmp eax, 0x2040403
je 0x40eee7
cmp eax, 0x2040503
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx*8 + 0x6d2538]
mov edx, dword [esp + 0x18]
mov ecx, dword [ecx*8 + 0x6d253c]
and eax, dword [edx*8 + 0x6d2538]
and ecx, dword [edx*8 + 0x6d253c]
jmp 0x407d2b
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
mov edx, dword [eax*8 + 0x6d253c]
mov ecx, dword [esp + 0x18]
cmp edx, dword [ecx*8 + 0x6d253c]
jl 0x40ec3c
jg 0x407d33
mov eax, dword [eax*8 + 0x6d2538]
cmp eax, dword [ecx*8 + 0x6d2538]
jb 0x40ec3c
mov dword [0x6cf9a4], 1
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx*8 + 0x6d2538]
mov edx, dword [esp + 0x18]
mov ecx, dword [ecx*8 + 0x6d253c]
or eax, dword [edx*8 + 0x6d2538]
or ecx, dword [edx*8 + 0x6d253c]
jmp 0x407d2b
cmp eax, 0x2040703
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
mov edx, dword [eax*8 + 0x6d2538]
mov ecx, dword [esp + 0x18]
cmp edx, dword [ecx*8 + 0x6d2538]
jne 0x407d33
mov eax, dword [eax*8 + 0x6d253c]
cmp eax, dword [ecx*8 + 0x6d253c]
jmp 0x407d2d
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
mov edx, dword [eax*8 + 0x6d2538]
or edx, dword [eax*8 + 0x6d253c]
jmp 0x407d2d
cmp eax, 0x2050102
je 0x40f1f2
cmp eax, 0x300000b
je 0x40f0c2
cmp eax, 0x3000102
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [esp + 0x1c]
add esp, 8
add ebp, 4
cmp eax, 0xffffffff
jne 0x40f0ae
call fcn.004767d0
jmp case.default.0x4138e6
push eax
call fcn.004722d0
push eax
call fcn.00476720
add esp, 8
jmp case.default.0x4138e6
push 0x54
lea edx, [esp + 0x138]
push 0
push edx
call fcn.00485180
mov eax, dword [ebp]
lea ecx, [esp + 0x144]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x150]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x15c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x168]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x174]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x188]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x188]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
add esp, 0x44
lea edx, [esp + 0x150]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
add ebp, 4
mov dword [esp + 0x1c], eax
mov dword [esp + 0x170], eax
mov dword [esp + 0x16c], eax
mov dword [esp + 0x168], eax
mov dword [esp + 0x164], eax
mov eax, 0x513974
lea ecx, [esp + 0x13c]
add ebp, 4
mov dword [esp + 0x180], eax
mov dword [esp + 0x17c], eax
mov dword [esp + 0x178], eax
mov dword [esp + 0x174], eax
mov eax, dword [ebp]
push ecx
push eax
call fcn.00401070
mov edx, dword [0x4c00e8]
push edx
lea eax, [esp + 0x148]
push eax
add ebp, 4
call fcn.00476690
add esp, 0x18
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov esi, dword [esp + 0x14]
mov edx, dword [0x6d0488]
xor edi, edi
push edi
mov dword [esi*8 + 0x6d2538], edx
push 0x36ee80
mov eax, edi
mov dword [esi*8 + 0x6d253c], edi
mov ecx, dword [esi*8 + 0x6d2538]
push eax
push ecx
call fcn.004852c0
mov dword [esi*8 + 0x6d2538], eax
mov dword [esi*8 + 0x6d253c], edx
mov edx, dword [0x6d447c]
add dword [esi*8 + 0x6d2538], edx
adc dword [esi*8 + 0x6d253c], edi
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x1c]
push edx
add ebp, 4
call fcn.004722d0
push eax
call fcn.004750c0
add esp, 0x10
jmp case.default.0x4138e6
cmp eax, 0x4040b05
ja 0x414d8d
je 0x414d1e
cmp eax, 0x4010705
ja 0x411697
je 0x411608
cmp eax, 0x4000304
ja 0x4103c3
je 0x41035e
cmp eax, 0x3010002
ja 0x40f97c
je 0x40f929
cmp eax, 0x3001206
ja 0x40f63f
je 0x40f5d9
cmp eax, 0x3000702
ja 0x40f47c
je 0x40f453
cmp eax, 0x3000503
ja 0x40f3ed
je 0x40f3a8
cmp eax, 0x3000303
je 0x40f363
cmp eax, 0x3000403
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x24]
push eax
add ebp, 4
call fcn.004722d0
add esp, 0x14
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x18]
push 1
push ecx
push eax
call fcn.00476560
add esp, 0xc
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
add esp, 8
add ebp, 4
push 1
push eax
mov dword [esp + 0x20], eax
add ebp, 4
call fcn.00402380
add esp, 4
push eax
mov eax, dword [esp + 0x1c]
push eax
call fcn.004722d0
add esp, 4
push eax
call fcn.00474d80
add esp, 0xc
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
add esp, 0x10
push eax
push ecx
add ebp, 4
call fcn.004722d0
add esp, 4
push eax
call fcn.00472380
add esp, 8
jmp case.default.0x4138e6
cmp eax, 0x3000604
jne 0x41a4cd
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x2c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x2c]
add esp, 0x18
push eax
push ecx
push edx
add ebp, 4
call fcn.004722d0
add esp, 4
push eax
call fcn.00472480
add esp, 0xc
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x1c]
push edx
add ebp, 4
call fcn.004722d0
push eax
call fcn.004744a0
add esp, 0x10
jmp case.default.0x4138e6
cmp eax, 0x3001003
ja 0x40f566
je 0x40f51a
cmp eax, 0x3000802
je 0x40f4ec
cmp eax, 0x3000903
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
add esp, 0x10
add ebp, 4
cmp dword [esp + 0x18], esi
je 0x41a5ab
mov eax, dword [esp + 0x14]
push eax
call fcn.004722d0
push eax
call fcn.00472e70
add esp, 8
mov dword [ebx], 3
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x1c]
push edx
add ebp, 4
call fcn.0046ec30
add esp, 0xc
neg al
sbb eax, eax
neg eax
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
push eax
push ecx
add ebp, 4
call fcn.00472050
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x30]
add esp, 0x18
mov dword [0x6d0420], edx
mov dword [0x6d0424], eax
jmp case.default.0x4138e6
cmp eax, 0x3001103
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x28]
add esp, 0x10
mov dword [esp + 0x90], eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x84], eax
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x84]
push eax
push ecx
add ebp, 4
call fcn.004722d0
add esp, 4
push eax
call fcn.004728f0
add esp, 8
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x8c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x98]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0xa4]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0xb0]
add ebp, 4
push edx
push eax
call fcn.00401070
add esp, 0x28
jmp 0x40f5b3
cmp eax, 0x3001704
ja 0x40f831
je 0x40f7d6
cmp eax, 0x3001503
ja 0x40f765
je 0x40f6fd
cmp eax, 0x3001303
je 0x40f6b8
cmp eax, 0x3001403
jne 0x41a4cd
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
add esp, 0x10
push edx
push eax
add ebp, 4
call fcn.004722d0
add esp, 4
push eax
call fcn.004724f0
add esp, 8
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
add esp, 0x10
push eax
push ecx
add ebp, 4
call fcn.004722d0
add esp, 4
push eax
call fcn.00472300
add esp, 8
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [esp + 0x28]
add esp, 0x10
mov dword [esp + 0x90], eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x84]
push edx
push eax
add ebp, 4
call fcn.004722d0
add esp, 4
push eax
call fcn.00472940
add esp, 8
jmp case.default.0x4138e6
cmp eax, 0x3001606
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x8c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x98]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0xa4]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0xb0]
add ebp, 4
push ecx
push eax
call fcn.00401070
add esp, 0x28
jmp 0x40f73f
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
add esp, 0x18
push edx
push eax
push ecx
add ebp, 4
call fcn.004722d0
add esp, 4
push eax
call fcn.00472800
add esp, 0xc
jmp case.default.0x4138e6
cmp eax, 0x3001804
je 0x40f8ce
cmp eax, 0x3001b02
je 0x40f8a9
cmp eax, 0x3001c04
jne 0x41a4cd
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x2c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x2c]
add esp, 0x18
push eax
push ecx
push edx
add ebp, 4
call fcn.004722d0
add esp, 4
push eax
call fcn.00472880
add esp, 0xc
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x1c]
add esp, 8
push 1
push 0x6d23fc
add ebp, 4
push edx
jmp 0x40f392
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
add esp, 0x18
push edx
push eax
push ecx
add ebp, 4
call fcn.004722d0
add esp, 4
push eax
call fcn.00472540
add esp, 0xc
jmp case.default.0x4138e6
mov esi, dword [ebp]
push 0x44
push 0
push 0x6d23d8
mov dword [esp + 0x20], esi
add ebp, 4
call fcn.00485180
push esi
call fcn.00402380
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
add esp, 0x10
push eax
push 0x6d23dc
call esi
mov edx, dword [esp + 0x14]
push edx
call fcn.00402380
add esp, 4
push eax
push 0x6d23fc
call esi
mov dword [0x6d23d8], 1
jmp case.default.0x4138e6
cmp eax, 0x302040b
ja 0x40fe05
je 0x40fd02
cmp eax, 0x3020004
ja 0x40fb94
je 0x40fb31
cmp eax, 0x3010302
ja 0x40fb10
je 0x40fa88
cmp eax, 0x3010101
je 0x40fa3f
cmp eax, 0x3010202
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov edx, dword [0x4c0658]
add esp, 8
add ebp, 4
test dword [0x6d03f8], 0x80000000
je 0x40fa21
push edx
call fcn.00405980
mov eax, dword [esp + 0x18]
mov ecx, dword [0x4c0658]
mov edx, dword [0x591404]
push eax
push ecx
push edx
call fcn.0042d480
mov dword [0x6cf9a4], eax
mov eax, dword [0x4c0658]
push eax
call fcn.00405980
add esp, 0x14
jmp case.default.0x4138e6
mov ecx, dword [esp + 0x14]
mov eax, dword [0x591404]
push ecx
push edx
push eax
call fcn.0042d480
add esp, 0xc
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
xor eax, eax
push 0x6d23fc
push 0x6d23dc
mov dword [0x6d23fc], eax
mov dword [0x6d2400], eax
mov dword [0x6d2404], eax
mov dword [0x6d2408], eax
mov dword [0x6d240c], eax
mov dword [0x6d2410], eax
mov dword [0x6d2414], eax
mov dword [0x6d2418], eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov dword [0x6d23d8], 1
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x1c]
push edx
add ebp, 4
call fcn.004722d0
add esp, 0xc
test eax, eax
je case.default.0x4138e6
xor ecx, ecx
mov dword [0x6d23fc], ecx
mov dword [0x6d2400], ecx
mov dword [0x6d2404], ecx
mov dword [0x6d2408], ecx
mov dword [0x6d240c], ecx
mov dword [0x6d2410], ecx
mov dword [0x6d2414], ecx
mov dword [0x6d2418], ecx
mov eax, dword [eax + 0x44]
push eax
push 0x6d23fc
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x6d23dc
push 0x6d23fc
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
neg eax
sbb eax, eax
add eax, 1
mov dword [0x6d23d8], eax
jmp case.default.0x4138e6
cmp eax, 0x3010401
jne 0x41a4cd
xor ecx, ecx
cmp dword [0x6d23d8], edi
setne cl
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x2c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
mov edx, dword [0x4c00e8]
push eax
mov eax, dword [esp + 0x30]
push ecx
push edx
push eax
add ebp, 4
call fcn.004761c0
add esp, 0x28
neg eax
sbb eax, eax
and eax, dword [esp + 0x14]
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
cmp eax, 0x3020102
je 0x40fcdf
cmp eax, 0x3020202
je 0x40fcb6
cmp eax, 0x302030b
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov esi, dword [ebp + 4]
add ebp, 4
lea edx, [esp + 0x24]
add ebp, 4
mov dword [esp + 0x20], esi
mov eax, dword [ebp]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x30]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x44]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x44]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x5c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x70]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x68]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
add esp, 0x40
lea ecx, [esp + 0x44]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x48]
add esp, 8
push edx
mov edx, dword [esp + 0x38]
push eax
mov eax, dword [esp + 0x2c]
push ecx
mov ecx, dword [esp + 0x38]
push edx
mov edx, dword [esp + 0x30]
push eax
mov eax, dword [esp + 0x30]
push ecx
push edx
push eax
push esi
add ebp, 4
call fcn.00402380
mov ecx, dword [esp + 0x38]
add esp, 4
push eax
push ecx
call fcn.004735b0
add esp, 4
push eax
call fcn.00473700
add esp, 0x28
neg al
sbb eax, eax
neg eax
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x1c]
push eax
add ebp, 4
call fcn.004735b0
push eax
call fcn.00473900
add esp, 0x10
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x1c]
push edx
add ebp, 4
call fcn.00476240
add esp, 0xc
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x64]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x78]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
add esp, 0x40
lea ecx, [esp + 0x30]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x50]
add esp, 0x10
push eax
mov eax, dword [esp + 0x38]
push ecx
mov ecx, dword [esp + 0x2c]
push edx
mov edx, dword [esp + 0x38]
push eax
mov eax, dword [esp + 0x30]
push ecx
mov ecx, dword [esp + 0x30]
push edx
mov edx, dword [esp + 0x30]
push eax
mov eax, dword [esp + 0x30]
push ecx
add ebp, 4
push edx
push eax
call fcn.004735b0
add esp, 4
push eax
call fcn.004762c0
add esp, 0x28
neg al
sbb eax, eax
neg eax
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
cmp eax, 0x3020904
ja 0x4100e3
je 0x410072
cmp eax, 0x3020704
ja 0x40ff37
je 0x40fedc
cmp eax, 0x3020503
je 0x40fe94
cmp eax, 0x3020604
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
add esp, 0x18
push edx
push eax
push ecx
add ebp, 4
call fcn.004735b0
add esp, 4
push eax
call fcn.00476500
add esp, 0xc
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [esp + 0x24]
xor edx, edx
add esp, 0x10
add ebp, 4
test eax, eax
setne dl
push edx
push eax
call fcn.004735b0
add esp, 4
push eax
call fcn.00473990
add esp, 8
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
add esp, 0x18
push edx
push eax
push ecx
add ebp, 4
call fcn.004735b0
add esp, 4
push eax
call fcn.00473940
add esp, 0xc
jmp case.default.0x4138e6
cmp eax, 0x302080b
jne 0x41a4cd
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x2c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x38]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x64]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x78]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
add esp, 0x40
lea edx, [esp + 0x30]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
push 0x100
add ebp, 4
call fcn.00484c16
mov esi, eax
add esp, 0x14
test esi, esi
je case.default.0x4138e6
mov edx, dword [esp + 0x18]
push 1
push esi
push edx
call fcn.0046f610
add esp, 0xc
test eax, eax
je 0x410064
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x40]
push eax
mov eax, dword [esp + 0x38]
push ecx
mov ecx, dword [esp + 0x2c]
push edx
mov edx, dword [esp + 0x38]
push eax
mov eax, dword [esp + 0x30]
push ecx
mov ecx, dword [esp + 0x30]
push edx
mov edx, dword [esp + 0x2c]
push eax
push ecx
push esi
push edx
call fcn.004735b0
add esp, 4
push eax
call fcn.00473700
add esp, 0x28
neg al
sbb eax, eax
neg eax
mov dword [0x6cf9a4], eax
push esi
call fcn.00484c99
add esp, 4
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
add esp, 0x20
push eax
mov eax, dword [esp + 0x18]
push ecx
push edx
push eax
add ebp, 4
call fcn.004735b0
add esp, 4
push eax
call fcn.004739e0
add esp, 0x10
jmp case.default.0x4138e6
cmp eax, 0x4000004
je 0x4101a7
cmp eax, 0x4000102
je 0x41012c
cmp eax, 0x4000201
jne 0x41a4cd
call fcn.0043e600
mov ecx, dword [esp + 0x30]
test byte [ecx], 1
je case.default.0x4138e6
mov ecx, dword [0x6d6850]
test ecx, ecx
je case.default.0x4138e6
push 0
call fcn.00440e40
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x1c]
add esp, 8
add ebp, 4
cmp eax, 0xffffffff
jne 0x41016d
mov eax, dword [esp + 0x30]
test byte [eax], 1
je 0x410163
mov ecx, dword [0x6d6850]
test ecx, ecx
je 0x410163
push 0
call fcn.00440e40
call fcn.0043e600
jmp case.default.0x4138e6
push eax
call fcn.00436fa0
mov esi, eax
add esp, 4
test esi, esi
je case.default.0x4138e6
mov ecx, dword [esp + 0x30]
test byte [ecx], 1
je 0x410199
mov ecx, dword [0x6d6850]
test ecx, ecx
je 0x410199
push esi
call fcn.00440e40
push esi
call fcn.0043e4a0
add esp, 4
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov esi, dword [ebp + 4]
add ebp, 4
lea ecx, [esp + 0x24]
add ebp, 4
mov dword [esp + 0x20], esi
mov eax, dword [ebp]
push ecx
push eax
call fcn.00401070
mov eax, dword [0x4c00e8]
mov ecx, dword [esp + 0x2c]
lea edx, [eax + eax*4]
mov eax, dword [esp + 0x24]
add edx, edx
add esp, 0x10
add edx, edx
add edx, edx
push edx
push eax
push ecx
push esi
add ebp, 4
call fcn.00402340
add esp, 4
push eax
call fcn.0043f760
mov edi, eax
xor ebx, ebx
add esp, 0x10
cmp edi, ebx
je 0x410353
cmp dword [0x4c00e8], ebx
jne 0x41022f
mov edx, dword [esp + 0x30]
test byte [edx], 1
je 0x41022f
cmp dword [0x6d6850], ebx
je 0x41022f
push edi
call fcn.00404650
add esp, 4
mov eax, dword [esp + 0x18]
push eax
call fcn.0046ed00
push edi
call fcn.00436d40
add esp, 8
sub eax, 1
je 0x4102d3
sub eax, 3
jne 0x410345
mov ecx, dword [0x4c00e8]
cmp dword [ecx*4 + 0x4c00f4], ebx
je 0x410345
lea edx, [esp + 0x28]
push edx
push 4
mov dword [esp + 0x30], ebx
call fcn.00437090
mov esi, eax
add esp, 8
cmp esi, ebx
je 0x4102b8
mov eax, dword [esp + 0x30]
test byte [eax], 1
je 0x410299
mov ecx, dword [0x6d6850]
cmp ecx, ebx
je 0x410299
push esi
call fcn.00440e40
push esi
call fcn.0043e4a0
lea ecx, [esp + 0x2c]
push ecx
push 4
mov dword [esp + 0x34], ebx
call fcn.00437090
mov esi, eax
add esp, 0xc
cmp esi, ebx
jne 0x410280
mov edx, dword [0x4c00e8]
mov dword [edx*4 + 0x4c00f4], ebx
mov edx, dword [edi + 8]
mov dword [0x6cf9a4], edx
jmp case.default.0x4138e6
mov eax, dword [0x4c00e8]
cmp dword [eax*4 + 0x4c0094], ebx
je 0x410345
lea ecx, [esp + 0x28]
push ecx
push 1
mov dword [esp + 0x30], ebx
call fcn.00437090
mov esi, eax
add esp, 8
cmp esi, ebx
je 0x410338
lea ebx, [ebx]
mov edx, dword [esp + 0x30]
test byte [edx], 1
je 0x410319
mov ecx, dword [0x6d6850]
cmp ecx, ebx
je 0x410319
push esi
call fcn.00440e40
push esi
call fcn.0043e4a0
lea eax, [esp + 0x2c]
push eax
push 1
mov dword [esp + 0x34], ebx
call fcn.00437090
mov esi, eax
add esp, 0xc
cmp esi, ebx
jne 0x410300
mov ecx, dword [0x4c00e8]
mov dword [ecx*4 + 0x4c0094], ebx
mov edx, dword [edi + 8]
mov dword [0x6cf9a4], edx
jmp case.default.0x4138e6
mov dword [0x6cf9a4], ebx
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
fild dword [esp + 0x34]
mov edx, dword [esp + 0x2c]
add esp, 0x18
push 0
sub esp, 8
fstp dword [esp + 4]
add ebp, 4
fild dword [esp + 0x24]
fstp dword [esp]
push edx
call fcn.00436fa0
add esp, 4
push eax
call fcn.0043a480
add esp, 0x10
jmp case.default.0x4138e6
cmp eax, 0x4001504
ja 0x410c0e
je 0x410ba9
cmp eax, 0x4000c06
ja 0x4107fd
je 0x410774
cmp eax, 0x4000703
ja 0x410625
je 0x4105db
cmp eax, 0x4000603
ja 0x4104f1
je 0x4104a7
cmp eax, 0x4000403
je 0x410460
cmp eax, 0x4000503
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
add esp, 0x10
push 0
push eax
push ecx
add ebp, 4
call fcn.00436fa0
add esp, 4
push eax
call fcn.00435fb0
add esp, 0xc
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
add esp, 0x10
push 0
push edx
push eax
add ebp, 4
call fcn.00436fa0
add esp, 4
push eax
call fcn.0043a590
add esp, 0xc
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
fild dword [esp + 0x28]
mov eax, dword [esp + 0x24]
add esp, 0x10
push 0
push ecx
fstp dword [esp]
push eax
add ebp, 4
call fcn.00436fa0
add esp, 4
push eax
call fcn.004364c0
add esp, 0xc
jmp case.default.0x4138e6
cmp eax, 0x4000606
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
add esp, 0x28
push 0
add ebp, 4
sub esp, 0xc
cmp dword [esp + 0x3c], esi
je 0x4105a9
fild dword [esp + 0x3c]
mov edx, dword [esp + 0x24]
fstp dword [esp + 0x48]
fild dword [esp + 0x30]
fld dword [esp + 0x48]
fld st(0)
fdivp st(2)
fxch st(1)
fstp dword [esp + 0x48]
fld dword [esp + 0x48]
fstp dword [esp + 8]
fild dword [esp + 0x2c]
fdiv st(1)
fstp dword [esp + 0x48]
fld dword [esp + 0x48]
fstp dword [esp + 4]
fidivr dword [esp + 0x28]
fstp dword [esp + 0x48]
fld dword [esp + 0x48]
fstp dword [esp]
push edx
jmp 0x4105c5
fild dword [esp + 0x30]
mov eax, dword [esp + 0x24]
fstp dword [esp + 8]
fild dword [esp + 0x2c]
fstp dword [esp + 4]
fild dword [esp + 0x28]
fstp dword [esp]
push eax
call fcn.00436fa0
add esp, 4
push eax
call fcn.00436720
add esp, 0x14
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
fild dword [esp + 0x28]
mov eax, dword [esp + 0x24]
add esp, 0x10
push 0
push ecx
fstp dword [esp]
push eax
add ebp, 4
call fcn.00436fa0
add esp, 4
push eax
call fcn.00435c00
add esp, 0xc
jmp case.default.0x4138e6
cmp eax, 0x4000a0a
ja 0x4106da
je 0x41967a
cmp eax, 0x4000804
je 0x41067a
cmp eax, 0x4000902
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x1c]
push edx
mov dword [esp + 0x34], eax
add ebp, 4
call fcn.0046ecc0
add esp, 0xc
neg eax
sbb eax, eax
neg eax
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
fild dword [esp + 0x34]
mov edx, dword [esp + 0x2c]
add esp, 0x10
fstp dword [esp + 4]
add ebp, 4
fild dword [esp + 0x20]
fstp dword [esp]
push edx
call fcn.00436fa0
add esp, 4
push eax
call fcn.0043aaa0
add esp, 0xc
jmp case.default.0x4138e6
cmp eax, 0x4000b03
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov ecx, dword [esp + 0x28]
add esp, 0x10
add ebp, 4
test ecx, ecx
jne 0x41071b
mov ecx, 0xb
mov dword [esp + 0x18], ecx
mov eax, dword [0x4c00e8]
lea eax, [eax + eax*4]
add eax, eax
add eax, eax
add eax, eax
add ecx, eax
push ecx
push eax
call fcn.00435690
mov eax, dword [0x4c00e8]
mov edx, dword [esp + 0x20]
lea eax, [eax + eax*4]
add eax, eax
add eax, eax
add eax, eax
lea ecx, [eax + edx]
push ecx
push eax
call fcn.0043e590
mov eax, dword [0x4c00e8]
lea edx, [eax + eax*4]
mov eax, dword [esp + 0x24]
add edx, edx
add edx, edx
add edx, edx
push edx
push eax
call fcn.0043f9c0
add esp, 0x18
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x9c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0xa8]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0xb4]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0xc0]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [esp + 0x3c]
add esp, 0x28
push 0
lea edx, [esp + 0x98]
push edx
push eax
add ebp, 4
call fcn.00436fa0
add esp, 4
push eax
call fcn.00437290
add esp, 0xc
jmp case.default.0x4138e6
cmp eax, 0x4001105
ja 0x4109f6
je 0x410983
cmp eax, 0x4000f03
ja 0x410921
je 0x4108dd
cmp eax, 0x4000d04
je 0x410878
cmp eax, 0x4000e03
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
add esp, 0x10
push 3
push eax
push ecx
add ebp, 4
call fcn.00436fa0
add esp, 4
push eax
call fcn.00436ea0
add esp, 0xc
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x2c]
add ebp, 4
push edx
push eax
call fcn.00401070
fild dword [esp + 0x34]
mov eax, dword [esp + 0x2c]
add esp, 0x18
push 0
sub esp, 8
fstp dword [esp + 4]
add ebp, 4
fild dword [esp + 0x24]
fstp dword [esp]
push eax
call fcn.00436fa0
add esp, 4
push eax
call fcn.00435dd0
add esp, 0x10
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x28]
add esp, 0x10
add ebp, 4
test eax, eax
je case.default.0x4138e6
push eax
mov eax, dword [esp + 0x18]
push eax
call fcn.00437500
add esp, 8
jmp case.default.0x4138e6
cmp eax, 0x4001003
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x24]
push eax
add ebp, 4
call fcn.00436fa0
add esp, 0x14
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
push ecx
push edx
call fcn.00436fa0
add esp, 4
push eax
call fcn.00435760
add esp, 8
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
add esp, 0x20
push 0
push eax
mov eax, dword [esp + 0x1c]
push ecx
push edx
push eax
add ebp, 4
call fcn.00436fa0
add esp, 4
push eax
call fcn.0043ab70
add esp, 0x14
jmp case.default.0x4138e6
cmp eax, 0x4001204
je 0x410b49
cmp eax, 0x4001306
je 0x410a97
cmp eax, 0x4001405
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov esi, dword [ebp + 4]
add ebp, 4
lea edx, [esp + 0x24]
add ebp, 4
mov dword [esp + 0x20], esi
mov eax, dword [ebp]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x30]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x34]
add esp, 0x18
push edx
push esi
add ebp, 4
call fcn.00402340
add esp, 4
push eax
mov eax, dword [esp + 0x1c]
push eax
call fcn.0043fb00
add esp, 0xc
test al, al
je 0x407e64
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0046ed00
add esp, 4
mov edx, dword [esp + 0x14]
mov dword [0x6cf9a4], edx
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
add esp, 0x28
add ebp, 4
cmp dword [esp + 0x20], esi
je 0x410aff
fild dword [esp + 0x1c]
fidiv dword [esp + 0x20]
jmp 0x410b11
mov edx, dword [esp + 0x1c]
fild dword [esp + 0x1c]
test edx, edx
jge 0x410b11
fadd dword [0x49e4a0]
mov eax, dword [esp + 0x2c]
fstp dword [esp + 0x38]
fld dword [esp + 0x38]
mov ecx, dword [esp + 0x14]
push 0
push eax
sub esp, 8
fstp dword [esp + 4]
fild dword [esp + 0x28]
fstp dword [esp]
push ecx
call fcn.00436fa0
add esp, 4
push eax
call fcn.004378a0
add esp, 0x14
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x2c]
add ebp, 4
push edx
push eax
call fcn.00401070
fild dword [esp + 0x34]
mov eax, dword [esp + 0x2c]
add esp, 0x10
fstp dword [esp + 4]
add ebp, 4
fild dword [esp + 0x20]
fstp dword [esp]
push eax
call fcn.00436fa0
add esp, 4
push eax
call fcn.00437770
add esp, 0xc
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
fild dword [esp + 0x34]
mov edx, dword [esp + 0x2c]
add esp, 0x18
push 0
sub esp, 8
fstp dword [esp + 4]
add ebp, 4
fild dword [esp + 0x24]
fstp dword [esp]
push edx
call fcn.00436fa0
add esp, 4
push eax
call fcn.004359b0
add esp, 0x10
jmp case.default.0x4138e6
cmp eax, 0x4010307
ja 0x4110dd
je 0x411015
cmp eax, 0x4010001
ja 0x410e30
je 0x410de2
cmp eax, 0x4001705
ja 0x410d73
je 0x410d14
cmp eax, 0x4001604
je 0x410cb7
cmp eax, 0x4001704
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
add esp, 0x18
push 0
push edx
push eax
push 0xffffffffffffffff
push ecx
add ebp, 4
call fcn.00436fa0
add esp, 4
push eax
call fcn.0043fab0
add esp, 0x14
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x2c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x2c]
add esp, 0x18
push 0
push eax
push ecx
push edx
add ebp, 4
call fcn.00436fa0
add esp, 4
push eax
call fcn.00437450
add esp, 0x10
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x34]
add esp, 0x20
push eax
mov eax, dword [esp + 0x1c]
push ecx
push edx
push 0xffffffffffffffff
push eax
jmp 0x410c99
cmp eax, 0x4001803
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov ecx, dword [esp + 0x28]
mov eax, ecx
add esp, 0x10
add ebp, 4
sub eax, 0
je 0x410dc4
sub eax, 1
je 0x410dbd
sub eax, 8
jne 0x410dca
lea ecx, [eax + 1]
jmp 0x410dc6
mov ecx, 2
jmp 0x410dc6
xor ecx, ecx
mov dword [esp + 0x18], ecx
mov eax, dword [esp + 0x14]
push ecx
push eax
call fcn.0043e660
add esp, 8
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov ecx, dword [0x6d03f4]
cmp ecx, edi
je 0x410df3
push 1
call fcn.00402a10
push 0x1520
call fcn.00484d49
add esp, 4
mov dword [esp + 0x38], eax
test eax, eax
mov dword [esp + 0x3c8], 0xa
je 0x410e24
mov ecx, eax
call fcn.0043add0
mov dword [0x6d03f4], eax
jmp case.default.0x4138e6
xor eax, eax
mov dword [0x6d03f4], eax
jmp case.default.0x4138e6
sub eax, 0x4010103
je 0x410f8f
sub eax, 0x102
je 0x410ef9
sub eax, 1
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
add esp, 0x28
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov edx, dword [esp + 0x18]
push edx
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x2c]
fild dword [esp + 0x20]
mov edx, dword [esp + 0x14]
push 1
push ecx
mov ecx, dword [0x6d03f4]
push 0
sub esp, 8
fstp dword [esp + 4]
fild dword [esp + 0x30]
fstp dword [esp]
push eax
push edx
call fcn.00440080
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
add esp, 0x20
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
fild dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
push 0
push 0
push 0
sub esp, 8
fstp dword [esp + 4]
fild dword [esp + 0x30]
fstp dword [esp]
push eax
push ecx
mov ecx, dword [0x6d03f4]
call fcn.00440080
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
xor edx, edx
add esp, 0x10
add ebp, 4
cmp dword [esp + 0x18], edx
sete dl
cmp dword [0x6d03f4], esi
mov dword [0x4b8004], edx
je case.default.0x4138e6
call fcn.00479090
mov ecx, dword [esp + 0x14]
lea edx, [eax + ecx]
push edx
mov ecx, dword [0x6d03f4]
push eax
mov dword [esp + 0x30], eax
call fcn.0043ae00
test dword [0x6d03f8], 0x10000000
je 0x411003
mov dword [ebx], 5
jmp case.default.0x4138e6
mov ecx, dword [0x6d03f4]
push 0xffffffffffffffff
call fcn.00440fa0
jmp 0x41a5ab
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
add esp, 0x30
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
fild dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
push 0
push 0
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [esp + 0x48]
fstp dword [esp + 8]
fild dword [esp + 0x3c]
fstp dword [esp + 4]
fild dword [esp + 0x38]
fstp dword [esp]
push eax
push ecx
mov ecx, dword [0x6d03f4]
call fcn.004400f0
jmp case.default.0x4138e6
cmp eax, 0x4010505
ja 0x41146e
je 0x4113e4
cmp eax, 0x4010407
ja 0x411363
je 0x4112a0
cmp eax, 0x4010308
je 0x4111c4
cmp eax, 0x4010406
jne 0x41a4cd
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x2c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x38]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
add esp, 0x28
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
fild dword [esp + 0x2c]
mov ecx, dword [esp + 0x14]
push 0
push 0
push 0
sub esp, 0xc
fstp dword [esp + 8]
fild dword [esp + 0x38]
fstp dword [esp + 4]
fild dword [esp + 0x34]
fstp dword [esp]
push eax
push ecx
mov ecx, dword [0x6d03f4]
call fcn.004401f0
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x2c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x38]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x64]
add ebp, 4
push edx
push eax
call fcn.00401070
add esp, 0x38
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x34]
fild dword [esp + 0x24]
mov edx, dword [esp + 0x14]
push 1
push ecx
mov ecx, dword [0x6d03f4]
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [esp + 0x48]
fstp dword [esp + 8]
fild dword [esp + 0x3c]
fstp dword [esp + 4]
fild dword [esp + 0x38]
fstp dword [esp]
push eax
push edx
call fcn.004400f0
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
add esp, 0x30
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x24]
fild dword [esp + 0x2c]
mov edx, dword [esp + 0x14]
push 1
push ecx
mov ecx, dword [0x6d03f4]
push 0
sub esp, 0xc
fstp dword [esp + 8]
fild dword [esp + 0x38]
fstp dword [esp + 4]
fild dword [esp + 0x34]
fstp dword [esp]
push eax
push edx
call fcn.004401f0
jmp case.default.0x4138e6
cmp eax, 0x4010504
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
add esp, 0x18
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov edx, dword [esp + 0x18]
push edx
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
push 0
push 0
push ecx
mov ecx, dword [0x6d03f4]
push eax
push edx
call fcn.00440390
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
add esp, 0x20
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push 1
push ecx
mov ecx, dword [0x6d03f4]
push edx
push eax
mov eax, dword [esp + 0x24]
push eax
call fcn.00440390
jmp case.default.0x4138e6
sub eax, 0x4010604
je 0x411592
sub eax, 1
je 0x411508
sub eax, 0xff
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
add esp, 0x18
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov edx, dword [esp + 0x18]
push edx
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
fild dword [esp + 0x1c]
push 0
push 0
push 0
push ecx
mov ecx, dword [0x6d03f4]
fstp dword [esp]
push eax
mov eax, dword [esp + 0x28]
push eax
call fcn.00440580
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
add esp, 0x20
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push 1
push ecx
mov ecx, dword [0x6d03f4]
push edx
push eax
mov eax, dword [esp + 0x24]
push eax
call fcn.00440400
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
add esp, 0x18
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov edx, dword [esp + 0x18]
push edx
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
push 0
push 0
push ecx
mov ecx, dword [0x6d03f4]
push eax
push edx
call fcn.00440400
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
add esp, 0x20
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x20]
fild dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
push 1
push ecx
push 0
push ecx
mov ecx, dword [0x6d03f4]
fstp dword [esp]
push eax
push edx
call fcn.00440580
jmp case.default.0x4138e6
cmp eax, 0x4012204
ja 0x4132e9
je 0x41326e
cmp eax, 0x4011205
ja 0x412436
je 0x4123b9
cmp eax, 0x4010d05
ja 0x411d89
je 0x411cfd
cmp eax, 0x4010a07
ja 0x411b0d
je 0x411a53
cmp eax, 0x4010906
ja 0x411985
je 0x4118d6
sub eax, 0x4010808
je 0x4117f5
sub eax, 1
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x64]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x78]
add ebp, 4
push edx
push eax
call fcn.00401070
add esp, 0x40
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x40]
fild dword [esp + 0x34]
push 1
mov edx, dword [esp + 0x18]
push ecx
mov ecx, dword [0x6d03f4]
push 1
sub esp, 0x14
fstp dword [esp + 0x10]
fild dword [esp + 0x44]
fstp dword [esp + 0xc]
fild dword [esp + 0x4c]
fstp dword [esp + 8]
fild dword [esp + 0x40]
fstp dword [esp + 4]
fild dword [esp + 0x3c]
fstp dword [esp]
push eax
push edx
call fcn.004405f0
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x64]
add ebp, 4
push ecx
push eax
call fcn.00401070
add esp, 0x38
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov edx, dword [esp + 0x18]
push edx
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
fild dword [esp + 0x34]
push 0
push 0
mov ecx, dword [0x6d03f4]
push 1
sub esp, 0x14
fstp dword [esp + 0x10]
fild dword [esp + 0x44]
fstp dword [esp + 0xc]
fild dword [esp + 0x4c]
fstp dword [esp + 8]
fild dword [esp + 0x40]
fstp dword [esp + 4]
fild dword [esp + 0x3c]
fstp dword [esp]
push eax
mov eax, dword [esp + 0x38]
push eax
call fcn.004405f0
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
add esp, 0x28
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov edx, dword [esp + 0x18]
push edx
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
fild dword [esp + 0x2c]
mov ecx, dword [0x6d03f4]
push 0
push 0
push 0
sub esp, 0xc
fstp dword [esp + 8]
fild dword [esp + 0x38]
fstp dword [esp + 4]
fild dword [esp + 0x34]
fstp dword [esp]
push eax
mov eax, dword [esp + 0x30]
push eax
call fcn.00440780
jmp case.default.0x4138e6
cmp eax, 0x4010907
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
add esp, 0x30
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x24]
fild dword [esp + 0x2c]
mov edx, dword [esp + 0x14]
push 1
push ecx
mov ecx, dword [0x6d03f4]
push 0
sub esp, 0xc
fstp dword [esp + 8]
fild dword [esp + 0x38]
fstp dword [esp + 4]
fild dword [esp + 0x34]
fstp dword [esp]
push eax
push edx
call fcn.00440780
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
add esp, 0x30
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x2c]
push 0
push 0
push 0
push ecx
mov ecx, dword [esp + 0x30]
push edx
mov edx, dword [esp + 0x30]
push ecx
mov ecx, dword [0x6d03f4]
push edx
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.004407f0
jmp case.default.0x4138e6
cmp eax, 0x4010c02
ja 0x411c7a
je 0x411c47
cmp eax, 0x4010a08
je 0x411b79
cmp eax, 0x4010b03
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov ecx, dword [0x6d03f4]
add esp, 0x10
add ebp, 4
test ecx, ecx
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
push 1
push eax
push edx
call fcn.00440950
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x64]
add ebp, 4
push ecx
push eax
call fcn.00401070
add esp, 0x38
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov edx, dword [esp + 0x18]
push edx
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x24]
push 1
push ecx
mov ecx, dword [esp + 0x34]
push 0
push edx
mov edx, dword [esp + 0x30]
push ecx
mov ecx, dword [esp + 0x30]
push edx
mov edx, dword [esp + 0x2c]
push ecx
mov ecx, dword [0x6d03f4]
push eax
push edx
call fcn.004407f0
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov ecx, dword [0x6d03f4]
add esp, 8
add ebp, 4
test ecx, ecx
je case.default.0x4138e6
mov edx, dword [esp + 0x14]
push 0
push edx
call fcn.0043f2e0
jmp case.default.0x4138e6
cmp eax, 0x4010d04
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
add esp, 0x18
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov edx, dword [esp + 0x18]
push edx
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
push 0
push 0
push 0
push ecx
mov ecx, dword [0x6d03f4]
push eax
push edx
call fcn.00440870
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
add esp, 0x20
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push 1
push ecx
mov ecx, dword [0x6d03f4]
push 0
push edx
push eax
mov eax, dword [esp + 0x28]
push eax
call fcn.00440870
jmp case.default.0x4138e6
cmp eax, 0x4011005
ja 0x4121ca
je 0x41213e
cmp eax, 0x4010f08
ja 0x412041
je 0x411f63
sub eax, 0x4010e07
je 0x411e9b
sub eax, 1
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x64]
add ebp, 4
push ecx
push eax
call fcn.00401070
add esp, 0x38
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov edx, dword [esp + 0x18]
push edx
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x34]
fild dword [esp + 0x24]
mov edx, dword [esp + 0x14]
push 1
push ecx
mov ecx, dword [0x6d03f4]
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [esp + 0x48]
fstp dword [esp + 8]
fild dword [esp + 0x3c]
fstp dword [esp + 4]
fild dword [esp + 0x38]
fstp dword [esp]
push eax
push edx
call fcn.00440170
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
add esp, 0x30
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
fild dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
push 0
push 0
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [esp + 0x48]
fstp dword [esp + 8]
fild dword [esp + 0x3c]
fstp dword [esp + 4]
fild dword [esp + 0x38]
fstp dword [esp]
push eax
push ecx
mov ecx, dword [0x6d03f4]
call fcn.00440170
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x2c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x38]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x64]
add ebp, 4
push edx
push eax
call fcn.00401070
add esp, 0x38
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x34]
fild dword [esp + 0x24]
mov edx, dword [esp + 0x14]
push 0
push 0
push 0
push ecx
mov ecx, dword [0x6d03f4]
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [esp + 0x4c]
fstp dword [esp + 8]
fild dword [esp + 0x40]
fstp dword [esp + 4]
fild dword [esp + 0x3c]
fstp dword [esp]
push eax
push edx
call fcn.004402e0
jmp case.default.0x4138e6
cmp eax, 0x4010f09
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x64]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x78]
add ebp, 4
push edx
push eax
call fcn.00401070
add esp, 0x40
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x40]
fild dword [esp + 0x24]
mov edx, dword [esp + 0x34]
push 1
push ecx
mov ecx, dword [0x6d03f4]
push 0
push edx
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [esp + 0x4c]
fstp dword [esp + 8]
fild dword [esp + 0x40]
fstp dword [esp + 4]
fild dword [esp + 0x3c]
fstp dword [esp]
push eax
mov eax, dword [esp + 0x38]
push eax
call fcn.004402e0
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
add esp, 0x20
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push 0
push 0
push ecx
mov ecx, dword [0x6d03f4]
push edx
push eax
mov eax, dword [esp + 0x28]
push eax
call fcn.00440470
jmp case.default.0x4138e6
sub eax, 0x4011006
je 0x412319
sub eax, 0xff
je 0x41228b
sub eax, 1
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
add esp, 0x28
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov edx, dword [esp + 0x18]
push edx
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x20]
push 1
push ecx
mov ecx, dword [esp + 0x24]
push edx
mov edx, dword [esp + 0x20]
push ecx
mov ecx, dword [0x6d03f4]
push 0
push eax
push edx
call fcn.004404f0
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
add esp, 0x20
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push 0
push 0
push ecx
push edx
push 0
mov ecx, dword [0x6d03f4]
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.004404f0
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
add esp, 0x28
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov edx, dword [esp + 0x18]
push edx
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x20]
push 1
push ecx
mov ecx, dword [esp + 0x24]
push edx
mov edx, dword [esp + 0x20]
push ecx
mov ecx, dword [0x6d03f4]
push eax
push edx
call fcn.00440470
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
add esp, 0x20
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push 0
push 0
push ecx
push edx
push 1
jmp 0x412303
cmp eax, 0x4011607
ja 0x412c2c
je 0x412b74
cmp eax, 0x401140a
ja 0x4128db
je 0x4127ca
cmp eax, 0x4011308
ja 0x4126c5
je 0x4125e9
cmp eax, 0x4011206
je 0x412547
cmp eax, 0x4011307
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
add esp, 0x30
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
fild dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
push 0
push 0
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [esp + 0x48]
fstp dword [esp + 8]
fild dword [esp + 0x3c]
fstp dword [esp + 4]
fild dword [esp + 0x38]
fstp dword [esp]
push eax
push ecx
mov ecx, dword [0x6d03f4]
call fcn.00440990
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x2c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x38]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
add esp, 0x28
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x20]
push 1
push ecx
mov ecx, dword [esp + 0x24]
push edx
mov edx, dword [esp + 0x20]
push ecx
mov ecx, dword [0x6d03f4]
push 1
push eax
push edx
call fcn.004404f0
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x64]
add ebp, 4
push ecx
push eax
call fcn.00401070
add esp, 0x38
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov edx, dword [esp + 0x18]
push edx
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x34]
fild dword [esp + 0x24]
mov edx, dword [esp + 0x14]
push 1
push ecx
mov ecx, dword [0x6d03f4]
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [esp + 0x48]
fstp dword [esp + 8]
fild dword [esp + 0x3c]
fstp dword [esp + 4]
fild dword [esp + 0x38]
fstp dword [esp]
push eax
push edx
call fcn.00440990
jmp case.default.0x4138e6
cmp eax, 0x4011409
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x64]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x78]
add ebp, 4
push edx
push eax
call fcn.00401070
add esp, 0x40
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
fild dword [esp + 0x40]
push 0
push 0
mov ecx, dword [esp + 0x1c]
push 0
sub esp, 0x18
fstp dword [esp + 0x14]
fild dword [esp + 0x58]
fstp dword [esp + 0x10]
fild dword [esp + 0x48]
fstp dword [esp + 0xc]
fild dword [esp + 0x50]
fstp dword [esp + 8]
fild dword [esp + 0x44]
fstp dword [esp + 4]
fild dword [esp + 0x40]
fstp dword [esp]
push eax
push ecx
mov ecx, dword [0x6d03f4]
call fcn.00440a30
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x2c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x38]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x64]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x78]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
add esp, 0x40
lea edx, [esp + 0x30]
add ebp, 4
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x30]
fild dword [esp + 0x40]
push 1
push ecx
push 0
sub esp, 0x18
fstp dword [esp + 0x14]
mov edx, dword [esp + 0x38]
fild dword [esp + 0x58]
mov ecx, dword [0x6d03f4]
fstp dword [esp + 0x10]
fild dword [esp + 0x48]
fstp dword [esp + 0xc]
fild dword [esp + 0x50]
fstp dword [esp + 8]
fild dword [esp + 0x44]
fstp dword [esp + 4]
fild dword [esp + 0x40]
fstp dword [esp]
push eax
push edx
call fcn.00440a30
jmp case.default.0x4138e6
sub eax, 0x4011508
je 0x412a93
sub eax, 1
je 0x41299e
sub eax, 0xfd
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
add esp, 0x28
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov edx, dword [esp + 0x18]
push edx
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x20]
push 0
push 0
push 0
push ecx
mov ecx, dword [esp + 0x2c]
push edx
mov edx, dword [esp + 0x28]
push ecx
mov ecx, dword [0x6d03f4]
push eax
push edx
call fcn.00440b30
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x64]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x78]
add ebp, 4
push edx
push eax
call fcn.00401070
add esp, 0x40
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x40]
fild dword [esp + 0x34]
push 1
mov edx, dword [esp + 0x18]
push ecx
mov ecx, dword [0x6d03f4]
push 1
sub esp, 0x14
fstp dword [esp + 0x10]
fild dword [esp + 0x44]
fstp dword [esp + 0xc]
fild dword [esp + 0x4c]
fstp dword [esp + 8]
fild dword [esp + 0x40]
fstp dword [esp + 4]
fild dword [esp + 0x3c]
fstp dword [esp]
push eax
push edx
call fcn.00440690
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x64]
add ebp, 4
push ecx
push eax
call fcn.00401070
add esp, 0x38
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov edx, dword [esp + 0x18]
push edx
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
fild dword [esp + 0x34]
push 0
push 0
mov ecx, dword [0x6d03f4]
push 1
sub esp, 0x14
fstp dword [esp + 0x10]
fild dword [esp + 0x44]
fstp dword [esp + 0xc]
fild dword [esp + 0x4c]
fstp dword [esp + 8]
fild dword [esp + 0x40]
fstp dword [esp + 4]
fild dword [esp + 0x3c]
fstp dword [esp]
push eax
mov eax, dword [esp + 0x38]
push eax
call fcn.00440690
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
add esp, 0x30
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x2c]
push 1
push ecx
mov ecx, dword [esp + 0x28]
push 0
push edx
mov edx, dword [esp + 0x2c]
push ecx
mov ecx, dword [0x6d03f4]
push edx
push eax
mov eax, dword [esp + 0x30]
push eax
call fcn.00440b30
jmp case.default.0x4138e6
cmp eax, 0x4012006
ja 0x41301a
je 0x412f6b
cmp eax, 0x4011807
ja 0x412e77
je 0x412da2
sub eax, 0x4011705
je 0x412d0c
sub eax, 1
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
add esp, 0x28
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov edx, dword [esp + 0x18]
push edx
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x2c]
fild dword [esp + 0x20]
mov edx, dword [esp + 0x14]
push 1
push ecx
mov ecx, dword [0x6d03f4]
push 0
sub esp, 8
fstp dword [esp + 4]
fild dword [esp + 0x30]
fstp dword [esp]
push eax
push edx
call fcn.00440ba0
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
add esp, 0x20
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
fild dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
push 0
push 0
push 0
sub esp, 8
fstp dword [esp + 4]
fild dword [esp + 0x30]
fstp dword [esp]
push eax
push ecx
mov ecx, dword [0x6d03f4]
call fcn.00440ba0
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x2c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x38]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
add esp, 0x30
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov edx, dword [esp + 0x18]
push edx
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
cmp dword [esp + 0x2c], esi
je 0x412e3c
fild dword [esp + 0x20]
fidiv dword [esp + 0x2c]
jmp 0x412e40
fild dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
fstp dword [esp + 0x38]
fld dword [esp + 0x38]
mov edx, dword [esp + 0x14]
push 0
push 0
push 0
push ecx
mov ecx, dword [0x6d03f4]
sub esp, 8
fstp dword [esp + 4]
fild dword [esp + 0x34]
fstp dword [esp]
push eax
push edx
call fcn.00440c10
jmp case.default.0x4138e6
cmp eax, 0x4011808
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x64]
add ebp, 4
push ecx
push eax
call fcn.00401070
add esp, 0x38
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov edx, dword [esp + 0x18]
push edx
call fcn.00436fa0
add esp, 4
test eax, eax
je case.default.0x4138e6
cmp dword [esp + 0x2c], esi
je 0x412f2d
fild dword [esp + 0x20]
fidiv dword [esp + 0x2c]
jmp 0x412f31
fild dword [esp + 0x20]
mov ecx, dword [esp + 0x34]
fstp dword [esp + 0x38]
mov edx, dword [esp + 0x24]
fld dword [esp + 0x38]
push 1
push ecx
mov ecx, dword [0x6d03f4]
push 0
push edx
sub esp, 8
fstp dword [esp + 4]
fild dword [esp + 0x34]
fstp dword [esp]
push eax
mov eax, dword [esp + 0x30]
push eax
call fcn.00440c10
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
add esp, 0x28
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov edx, dword [esp + 0x18]
push edx
call fcn.00461670
add esp, 4
test eax, eax
je case.default.0x4138e6
fild dword [esp + 0x2c]
mov ecx, dword [0x6d03f4]
push 1
push 0
push 0
sub esp, 0xc
fstp dword [esp + 8]
fild dword [esp + 0x38]
fstp dword [esp + 4]
fild dword [esp + 0x34]
fstp dword [esp]
push eax
mov eax, dword [esp + 0x30]
push eax
call fcn.00440c80
jmp case.default.0x4138e6
sub eax, 0x4012007
je 0x4131ab
sub eax, 0xff
je 0x4130fc
sub eax, 1
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
add esp, 0x30
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00461670
add esp, 4
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x24]
fild dword [esp + 0x2c]
mov edx, dword [esp + 0x14]
push 1
push ecx
mov ecx, dword [0x6d03f4]
push 0
sub esp, 0xc
fstp dword [esp + 8]
fild dword [esp + 0x38]
fstp dword [esp + 4]
fild dword [esp + 0x34]
fstp dword [esp]
push eax
push edx
call fcn.00440ce0
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
add esp, 0x28
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov edx, dword [esp + 0x18]
push edx
call fcn.00461670
add esp, 4
test eax, eax
je case.default.0x4138e6
fild dword [esp + 0x2c]
mov ecx, dword [0x6d03f4]
push 1
push 0
push 0
sub esp, 0xc
fstp dword [esp + 8]
fild dword [esp + 0x38]
fstp dword [esp + 4]
fild dword [esp + 0x34]
fstp dword [esp]
push eax
mov eax, dword [esp + 0x30]
push eax
call fcn.00440ce0
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
add esp, 0x30
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00461670
add esp, 4
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x24]
fild dword [esp + 0x2c]
mov edx, dword [esp + 0x14]
push 1
push ecx
mov ecx, dword [0x6d03f4]
push 0
sub esp, 0xc
fstp dword [esp + 8]
fild dword [esp + 0x38]
fstp dword [esp + 4]
fild dword [esp + 0x34]
fstp dword [esp]
push eax
push edx
call fcn.00440c80
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
add esp, 0x18
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov edx, dword [esp + 0x18]
push edx
call fcn.00461670
add esp, 4
test eax, eax
je case.default.0x4138e6
fild dword [esp + 0x1c]
push 1
push 0
push 0
push ecx
mov ecx, dword [0x6d03f4]
fstp dword [esp]
push eax
mov eax, dword [esp + 0x28]
push eax
call fcn.00440d50
jmp case.default.0x4138e6
cmp eax, 0x4031005
ja 0x4145cc
je 0x41455a
cmp eax, 0x4020408
ja 0x413e44
je 0x413d08
cmp eax, 0x4020204
ja 0x4139df
je 0x413834
cmp eax, 0x4020005
ja 0x4137a8
je 0x41342f
cmp eax, 0x4012205
je 0x4133a0
cmp eax, 0x4018004
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov ecx, dword [0x6d03f4]
add esp, 0x18
add ebp, 4
test ecx, ecx
je case.default.0x4138e6
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x18]
push 1
push edx
mov edx, dword [esp + 0x1c]
push 0
push eax
push edx
call fcn.00440da0
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
add esp, 0x20
add ebp, 4
cmp dword [0x6d03f4], esi
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
push eax
call fcn.00461670
add esp, 4
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x20]
fild dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
push 1
push ecx
push 0
push ecx
mov ecx, dword [0x6d03f4]
fstp dword [esp]
push eax
push edx
call fcn.00440d50
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
mov ebx, dword [esp + 0x1c]
add ebp, 4
add esp, 8
cmp eax, 0x40000001
jne 0x413473
cmp ebx, 5
ja case.default.0x413456
jmp dword [ebx*4 + 0x41a7c0]
mov esi, 7
mov dword [esp + 0x18], esi
jmp case.default.0x413456
mov esi, 4
mov dword [esp + 0x18], esi
jmp case.default.0x413456
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
mov esi, dword [esp + 0x20]
add esp, 8
mov eax, dword [ebp + 4]
add ebp, 4
cmp eax, 0x40000001
mov ecx, 0x3e8
jne 0x4134b3
cmp ebx, 5
ja case.default.0x41349c
jmp dword [ebx*4 + 0x41a7d8]
mov dword [esp + 0x1c], 0x14
jmp case.default.0x41349c
mov dword [esp + 0x1c], ecx
jmp case.default.0x41349c
lea ecx, [esp + 0x1c]
push ecx
push eax
call fcn.00401070
add esp, 8
mov eax, dword [ebp + 4]
add ebp, 4
cmp eax, 0x40000001
jne 0x4134f8
cmp ebx, 5
ja case.default.0x4134d3
jmp dword [ebx*4 + 0x41a7f0]
mov edi, 0x3e8
mov dword [esp + 0x20], edi
jmp case.default.0x4134d3
xor edi, edi
mov dword [esp + 0x20], edi
jmp case.default.0x4134d3
mov edi, 1
mov dword [esp + 0x20], edi
jmp case.default.0x4134d3
lea edx, [esp + 0x20]
push edx
push eax
call fcn.00401070
mov edi, dword [esp + 0x28]
add esp, 8
add ebp, 4
cmp ebx, 5
ja case.default.0x4138e6
jmp dword [ebx*4 + 0x41a808]
test dword [0x6d03f8], 0x10000000
mov eax, dword [esp + 0x1c]
mov dword [0x6d03e0], 3
mov dword [0x6d03e4], esi
mov dword [0x6d03e8], eax
mov dword [0x6d03ec], edi
je case.default.0x4138e6
mov ecx, dword [esp + 0x30]
test byte [ecx], 2
jne 0x413566
push str.snow.epa
call fcn.00467a50
mov esi, dword [esp + 0x1c]
add esp, 4
cmp esi, 0x64
jb 0x41357e
push 0xf0
push 8
call fcn.00467b30
mov esi, dword [esp + 0x20]
add esp, 8
mov eax, 0x51eb851f
mul esi
shr edx, 5
imul edx, edx, 0x64
sub esi, edx
cmp esi, 8
ja case.default.0x413596
jmp dword [esi*4 + 0x41a820]
push 0x20
push 5
call fcn.00467b30
push 0x3c
jmp 0x413613
push 0x80
push 5
call fcn.00467b30
push 0x3c
jmp 0x413613
push 0x100
push 5
call fcn.00467b30
push 0x3c
jmp 0x413613
push 0x20
push 5
call fcn.00467b30
push 0x78
jmp 0x413613
push 0x80
push 5
call fcn.00467b30
push 0x78
jmp 0x413613
push 0x100
push 5
call fcn.00467b30
push 0x78
jmp 0x413613
push 0x20
jmp 0x413607
push 0x80
jmp 0x413607
push 0x100
push 5
call fcn.00467b30
push 0xf0
push 4
call fcn.00467b30
add esp, 0x10
mov edx, dword [esp + 0x1c]
push edx
push 3
call fcn.00467b30
mov eax, dword [esp + 0x28]
push eax
push 7
call fcn.00467b30
mov esi, dword [esp + 0x40]
add esp, 0x10
test byte [esi], 2
jne 0x41364b
push 0x64
call fcn.00468260
add esp, 4
or dword [esi], 2
jmp case.default.0x4138e6
mov ecx, dword [0x6d03f4]
test ecx, ecx
je 0x413664
push 1
call fcn.00402a10
push 0x1520
call fcn.00484d49
add esp, 4
mov dword [esp + 0x38], eax
test eax, eax
mov dword [esp + 0x3c8], 0xb
je 0x41368d
mov ecx, eax
call fcn.0043add0
jmp 0x41368f
xor eax, eax
test eax, eax
mov dword [esp + 0x3c8], 0xffffffff
mov dword [0x6d03f4], eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x18]
test ecx, ecx
jne 0x4136b8
mov ecx, 4
mov dword [esp + 0x18], ecx
mov esi, dword [esp + 0x1c]
test esi, esi
jne 0x4136c9
mov esi, 0x3e8
mov dword [esp + 0x1c], esi
mov edx, dword [esp + 0x20]
cmp edx, 1
jne 0x4136db
mov edx, 0xffffff
mov dword [esp + 0x20], edx
push 0
push 0
push edx
push esi
push ecx
push 0
mov ecx, eax
call fcn.00440710
mov esi, eax
call fcn.00479090
mov ecx, dword [0x6d03f4]
add esi, eax
push esi
push eax
mov dword [esp + 0x30], eax
call fcn.0043ae00
mov ecx, dword [esp + 0x34]
mov dword [ecx], 5
jmp case.default.0x4138e6
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x1c]
push edx
push eax
push 0
push edi
push ecx
push esi
push 0x80010000
call fcn.00403b90
add esp, 0x1c
jmp case.default.0x4138e6
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x1c]
push edx
push eax
push 0
push edi
push ecx
push esi
push 0x80020000
call fcn.00403b90
add esp, 0x1c
jmp case.default.0x4138e6
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x1c]
push edx
push eax
push 0
push edi
push ecx
push esi
push 0x80030000
call fcn.00403b90
add esp, 0x1c
jmp case.default.0x4138e6
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x1c]
push edx
push eax
push 0
push edi
push ecx
push esi
push 0x80040000
call fcn.00403b90
add esp, 0x1c
jmp case.default.0x4138e6
cmp eax, 0x4020101
jne 0x41a4cd
test byte [ecx], 1
je 0x4137d4
mov edx, ecx
push edx
push ebx
push 0
push 0
push 0
push 0
push 0
call fcn.00403b90
mov ecx, dword [esp + 0x4c]
add esp, 0x1c
xor edi, edi
test byte [ecx], 2
je 0x4137e9
call fcn.00467b10
call fcn.00468210
mov ecx, dword [esp + 0x30]
xor edi, edi
test byte [ecx], 4
je 0x4137fe
call fcn.00465120
call fcn.004656b0
mov ecx, dword [esp + 0x30]
xor edi, edi
test byte [ecx], 8
je 0x413813
call fcn.00466390
call fcn.00466ba0
mov ecx, dword [esp + 0x30]
xor edi, edi
mov dword [0x6d03d0], edi
mov dword [0x6d03e0], edi
mov dword [0x6d8c94], edi
mov dword [0x6d8cb4], edi
mov dword [ecx], edi
mov dword [ebx], edi
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
mov ecx, dword [esp + 0x28]
add ebp, 4
add esp, 0x10
add ebp, 4
cmp ecx, 0xd
mov dword [esp + 0x1c], eax
ja case.0x41386c.0
jmp dword [ecx*4 + 0x41a844]
mov ecx, 3
jmp 0x4138d5
mov ecx, 0x22
jmp 0x4138d5
mov ecx, 0xa
jmp 0x4138d5
mov ecx, dword [0x4c00e8]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx*8 + 7]
jmp 0x4138d5
mov ecx, dword [0x4c00e8]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx*8 + 3]
jmp 0x4138d5
mov ecx, dword [0x4c00e8]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx*8 + 0x22]
jmp 0x4138d5
mov ecx, dword [0x4c00e8]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx*8 + 0xa]
jmp 0x4138d5
mov ecx, 7
mov edx, dword [esp + 0x14]
cmp edx, 9
mov dword [esp + 0x18], ecx
ja case.default.0x4138e6
jmp dword [edx*4 + 0x41a87c]
push 0x22
call fcn.0043e4f0
push 7
call fcn.0043e4f0
push 3
call fcn.0043e4f0
push 0xa
call fcn.0043e4f0
add esp, 0x10
jmp case.default.0x4138e6
push 0
push ecx
push 0x60608
call fcn.0043f8a0
add esp, 0xc
jmp case.default.0x4138e6
push 0
push ecx
push 0xffffffffffffffff
push 4
call fcn.0043f800
add esp, 0x10
jmp case.default.0x4138e6
push 0
push ecx
or eax, 0xff000000
push eax
push 3
call fcn.0043f800
add esp, 0x10
jmp case.default.0x4138e6
push 0
push ecx
or eax, 0xff000000
push eax
push 1
call fcn.0043f800
add esp, 0x10
jmp case.default.0x4138e6
push 0
push ecx
or eax, 0xff000000
push eax
push 5
call fcn.0043f800
add esp, 0x10
jmp case.default.0x4138e6
push 0
push ecx
or eax, 0xff000000
push eax
push 6
call fcn.0043f800
add esp, 0x10
jmp case.default.0x4138e6
push 0
push ecx
or eax, 0xff000000
push eax
push 2
call fcn.0043f800
add esp, 0x10
jmp case.default.0x4138e6
push 0
push ecx
or eax, 0xff000000
push eax
push 7
call fcn.0043f800
add esp, 0x10
jmp case.default.0x4138e6
push 0
push ecx
push 0x60508
call fcn.0043f8a0
add esp, 0xc
jmp case.default.0x4138e6
sub eax, 0x4020305
je 0x413bfa
sub eax, 0x100
je 0x413b0c
sub eax, 1
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
mov dword [0x6d8cb8], edx
mov edx, dword [esp + 0x48]
mov dword [0x6d8cd0], esi
mov esi, dword [esp + 0x58]
add esp, 0x28
add ebp, 4
mov dword [0x6d8cb4], 1
mov dword [0x6d8cbc], eax
mov dword [0x6d8cc0], ecx
mov dword [0x6d8cc4], edx
mov dword [0x6d8cc8], 0xc8
mov dword [0x6d8ccc], 0x7d0
test byte [esi], 4
jne 0x413aaf
call fcn.004650c0
mov eax, dword [esp + 0x14]
push eax
push 3
call fcn.00465140
mov ecx, dword [esp + 0x20]
push ecx
push 5
call fcn.00465140
mov edx, dword [esp + 0x2c]
push edx
push 9
call fcn.00465140
mov eax, dword [esp + 0x38]
push eax
push 0xa
call fcn.00465140
push 0xc8
push 7
call fcn.00465140
push 0x7d0
push 4
call fcn.00465140
mov ecx, dword [esp + 0x5c]
push ecx
call fcn.004661d0
add esp, 0x34
or dword [esi], 4
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x2c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x38]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
mov dword [0x6d8cb8], edx
mov edx, dword [esp + 0x40]
mov dword [0x6d8cd0], esi
mov esi, dword [esp + 0x50]
add esp, 0x20
add ebp, 4
mov dword [0x6d8cb4], 1
mov dword [0x6d8cbc], eax
mov dword [0x6d8cc0], ecx
mov dword [0x6d8cc4], edx
mov dword [0x6d8cc8], 0xc8
mov dword [0x6d8ccc], 0x7d0
test byte [esi], 4
jne 0x413bac
call fcn.004650c0
mov eax, dword [esp + 0x14]
push eax
push 3
call fcn.00465140
mov ecx, dword [esp + 0x20]
push ecx
push 5
call fcn.00465140
push 0x7d0
push 4
call fcn.00465140
mov edx, dword [esp + 0x34]
push edx
push 9
call fcn.00465140
mov eax, dword [esp + 0x40]
push eax
push 0xa
call fcn.00465140
push 0
call fcn.004661d0
add esp, 0x2c
or dword [esi], 4
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
mov dword [0x6d8c94], eax
mov dword [0x6d8c98], ecx
mov ecx, dword [esp + 0x40]
add eax, 0xffffffff
add esp, 0x20
add ebp, 4
cmp eax, 3
mov dword [0x6d8c9c], edx
mov dword [0x6d8ca0], ecx
ja case.default.0x413c70
jmp dword [eax*4 + 0x41a8a4]
push str.sakura.epa
call fcn.004662f0
push 0
push 3
call fcn.004663b0
push 0xa
jmp 0x413cc4
push str.sakura2.epa
call fcn.004662f0
push 0x384
push 3
call fcn.004663b0
push 0
jmp 0x413cc4
push 0x49e420
jmp 0x413c7c
push str.sakura.epa
call fcn.004662f0
push 0
push 3
call fcn.004663b0
push 0xfffffffffffffff6
push 8
call fcn.004663b0
add esp, 0x14
mov edx, dword [esp + 0x20]
push edx
push 5
call fcn.004663b0
mov eax, dword [esp + 0x24]
push eax
push 4
call fcn.004663b0
mov ecx, dword [esp + 0x28]
push ecx
push 9
call fcn.004663b0
push 0x64
call fcn.00466bf0
mov eax, dword [esp + 0x4c]
add esp, 0x1c
or dword [eax], 8
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x2c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x38]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x64]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x78]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x54]
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x5c]
mov esi, dword [esp + 0x6c]
mov edi, dword [esp + 0x64]
mov ebx, dword [esp + 0x70]
mov dword [0x6d8cb8], edx
mov edx, dword [esp + 0x60]
mov dword [0x6d8cbc], eax
mov eax, dword [esp + 0x74]
add esp, 0x40
add ebp, 4
mov dword [0x6d8cb4], 1
mov dword [0x6d8cc0], ecx
mov dword [0x6d8cc4], edx
mov dword [0x6d8cc8], esi
mov dword [0x6d8ccc], edi
mov dword [0x6d8cd0], eax
test byte [ebx], 4
jne 0x413def
call fcn.004650c0
mov ecx, dword [esp + 0x14]
push ecx
push 3
call fcn.00465140
mov edx, dword [esp + 0x20]
push edx
push 5
call fcn.00465140
mov eax, dword [esp + 0x2c]
push eax
push 9
call fcn.00465140
mov ecx, dword [esp + 0x38]
push ecx
push 0xa
call fcn.00465140
push esi
push 7
call fcn.00465140
push edi
push 4
call fcn.00465140
mov edx, dword [esp + 0x70]
push edx
call fcn.004661d0
add esp, 0x34
or dword [ebx], 4
jmp case.default.0x4138e6
cmp eax, 0x4030302
ja 0x414491
je 0x41445e
cmp eax, 0x403010e
ja 0x414268
je 0x4140b9
cmp eax, 0x4020507
je 0x41401a
cmp eax, 0x403000a
jne 0x41a4cd
call fcn.004619c0
mov eax, dword [ebp]
lea ecx, [esp + 0x24]
push ecx
push eax
call fcn.00401070
add ebp, 4
call fcn.00460860
fild dword [esp + 0x2c]
fld qword [0x49e498]
lea edx, [esp + 0x2c]
push edx
fdiv st(1), st(0)
fxch st(1)
fstp dword [eax]
mov eax, dword [ebp]
push eax
call fcn.00401070
fidivr dword [esp + 0x34]
add ebp, 4
fstp dword [esp + 0x48]
fld dword [esp + 0x48]
fstp dword [esp + 0x48]
call fcn.00460860
fld dword [esp + 0x48]
lea ecx, [esp + 0x34]
fstp dword [eax + 4]
mov eax, dword [ebp]
push ecx
push eax
call fcn.00401070
fild dword [esp + 0x3c]
add ebp, 4
fdiv qword [0x49e498]
fstp dword [esp + 0x50]
fld dword [esp + 0x50]
fstp dword [esp + 0x50]
call fcn.00460860
fld dword [esp + 0x50]
lea edx, [esp + 0x3c]
fstp dword [eax + 8]
mov eax, dword [ebp]
push edx
push eax
call fcn.00401070
fild dword [esp + 0x44]
add ebp, 4
fdiv qword [0x49e498]
fstp dword [esp + 0x58]
fld dword [esp + 0x58]
fstp dword [esp + 0x58]
call fcn.00460860
fld dword [esp + 0x58]
lea ecx, [esp + 0x44]
fstp dword [eax + 0xc]
mov eax, dword [ebp]
push ecx
push eax
call fcn.00401070
fild dword [esp + 0x4c]
add ebp, 4
fdiv qword [0x49e498]
fstp dword [esp + 0x60]
fld dword [esp + 0x60]
fstp dword [esp + 0x60]
call fcn.00460860
fld dword [esp + 0x60]
lea edx, [esp + 0x4c]
fstp dword [eax + 0x10]
mov eax, dword [ebp]
push edx
push eax
call fcn.00401070
fild dword [esp + 0x54]
add ebp, 4
fdiv qword [0x49e498]
fstp dword [esp + 0x68]
fld dword [esp + 0x68]
fstp dword [esp + 0x68]
call fcn.00460860
fld dword [esp + 0x68]
lea ecx, [esp + 0x54]
fstp dword [eax + 0x14]
mov eax, dword [ebp]
push ecx
push eax
call fcn.00401070
fild dword [esp + 0x5c]
add ebp, 4
fstp dword [esp + 0x70]
call fcn.00460860
fld dword [esp + 0x70]
lea edx, [esp + 0x5c]
fstp dword [eax + 0x18]
mov eax, dword [ebp]
push edx
push eax
call fcn.00401070
fild dword [esp + 0x64]
add esp, 0x40
add ebp, 4
fstp dword [esp + 0x38]
call fcn.00460860
fld dword [esp + 0x38]
lea ecx, [esp + 0x24]
fstp dword [eax + 0x1c]
mov eax, dword [ebp]
push ecx
push eax
call fcn.00401070
fild dword [esp + 0x2c]
add esp, 8
add ebp, 4
fstp dword [esp + 0x38]
call fcn.00460860
fld dword [esp + 0x38]
fstp dword [eax + 0x20]
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x2c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x38]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x60]
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x5c]
push edx
mov edx, dword [esp + 0x54]
push ebx
push eax
mov eax, dword [esp + 0x58]
push ecx
mov ecx, dword [esp + 0x54]
or ecx, 0xffff8000
push edx
shl ecx, 0x10
or ecx, dword [esp + 0x5c]
push eax
push ecx
add ebp, 4
call fcn.00403b90
add esp, 0x4c
jmp case.default.0x4138e6
push 0xc0
lea edx, [esp + 0x300]
push 0
push edx
call fcn.00485180
mov eax, dword [ebp]
lea ecx, [esp + 0x20]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
add ebp, 4
push eax
call fcn.00402340
add esp, 0x18
push eax
lea edx, [esp + 0x300]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x24]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x2c]
lea ecx, [esp + 0x2c]
add ebp, 4
mov dword [esp + 0x384], edx
mov eax, dword [ebp]
push ecx
push eax
call fcn.00401070
fild dword [esp + 0x34]
lea edx, [esp + 0x34]
add ebp, 4
fstp dword [esp + 0x390]
mov eax, dword [ebp]
push edx
push eax
call fcn.00401070
fild dword [esp + 0x3c]
lea ecx, [esp + 0x3c]
add ebp, 4
fstp dword [esp + 0x39c]
mov eax, dword [ebp]
push ecx
push eax
call fcn.00401070
fild dword [esp + 0x44]
lea edx, [esp + 0x44]
add ebp, 4
fstp dword [esp + 0x3a8]
mov eax, dword [ebp]
push edx
push eax
call fcn.00401070
fild dword [esp + 0x4c]
lea ecx, [esp + 0x4c]
add ebp, 4
fstp dword [esp + 0x3b4]
mov eax, dword [ebp]
push ecx
push eax
call fcn.00401070
fild dword [esp + 0x54]
lea edx, [esp + 0x54]
add ebp, 4
fstp dword [esp + 0x3c0]
mov eax, dword [ebp]
push edx
push eax
call fcn.00401070
fild dword [esp + 0x5c]
add ebp, 4
lea ecx, [esp + 0x5c]
fstp dword [esp + 0x3cc]
mov eax, dword [ebp]
push ecx
push eax
call fcn.00401070
fild dword [esp + 0x64]
add esp, 0x40
fld qword [0x49e498]
lea edx, [esp + 0x24]
add ebp, 4
fdiv st(1), st(0)
push edx
fxch st(1)
fstp dword [esp + 0x3a8]
mov eax, dword [ebp]
push eax
call fcn.00401070
fild dword [esp + 0x2c]
lea ecx, [esp + 0x2c]
add ebp, 4
fdiv st(1)
push ecx
fstp dword [esp + 0x3b4]
mov eax, dword [ebp]
push eax
call fcn.00401070
fild dword [esp + 0x34]
lea edx, [esp + 0x34]
add ebp, 4
fdiv st(1)
push edx
fstp dword [esp + 0x3c0]
mov eax, dword [ebp]
push eax
call fcn.00401070
fidivr dword [esp + 0x3c]
mov ecx, dword [esp + 0x2c]
lea eax, [esp + 0x314]
push eax
push ecx
add ebp, 4
fstp dword [esp + 0x3d0]
call fcn.00460ed0
add esp, 0x20
neg al
sbb eax, eax
and eax, dword [esp + 0x14]
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
cmp eax, 0x4030210
jne 0x41a4cd
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
fild dword [esp + 0x34]
lea edx, [esp + 0x34]
add ebp, 4
fstp dword [esp + 0x10c]
mov eax, dword [ebp]
push edx
push eax
call fcn.00401070
fild dword [esp + 0x3c]
lea ecx, [esp + 0x3c]
add ebp, 4
fstp dword [esp + 0x118]
mov eax, dword [ebp]
push ecx
push eax
call fcn.00401070
fild dword [esp + 0x44]
lea edx, [esp + 0x44]
add ebp, 4
fstp dword [esp + 0x124]
mov eax, dword [ebp]
push edx
push eax
call fcn.00401070
fild dword [esp + 0x4c]
fld qword [0x49e490]
lea ecx, [esp + 0x4c]
add ebp, 4
fdiv st(1), st(0)
push ecx
fld qword [0x49e488]
fmul st(2), st(0)
fxch st(2)
fstp dword [esp + 0x134]
mov eax, dword [ebp]
push eax
call fcn.00401070
fild dword [esp + 0x54]
lea edx, [esp + 0x54]
add ebp, 4
fdiv st(1)
push edx
fmul st(2)
fstp dword [esp + 0x140]
mov eax, dword [ebp]
push eax
call fcn.00401070
fidivr dword [esp + 0x5c]
lea ecx, [esp + 0x5c]
add ebp, 4
push ecx
fmulp st(1)
fstp dword [esp + 0x14c]
mov eax, dword [ebp]
push eax
call fcn.00401070
fild dword [esp + 0x64]
add esp, 0x40
lea edx, [esp + 0x24]
add ebp, 4
fstp dword [esp + 0x114]
mov eax, dword [ebp]
push edx
push eax
call fcn.00401070
fild dword [esp + 0x2c]
add ebp, 4
lea ecx, [esp + 0x2c]
fstp dword [esp + 0x124]
mov eax, dword [ebp]
push ecx
push eax
call fcn.00401070
fild dword [esp + 0x34]
lea edx, [esp + 0x34]
add ebp, 4
fstp dword [esp + 0x128]
mov eax, dword [ebp]
push edx
push eax
call fcn.00401070
fild dword [esp + 0x3c]
lea ecx, [esp + 0x3c]
add ebp, 4
fstp dword [esp + 0x138]
mov eax, dword [ebp]
push ecx
push eax
call fcn.00401070
fild dword [esp + 0x44]
lea edx, [esp + 0x44]
add ebp, 4
fstp dword [esp + 0x144]
mov eax, dword [ebp]
push edx
push eax
call fcn.00401070
fild dword [esp + 0x4c]
fld qword [0x49e480]
lea ecx, [esp + 0x4c]
add ebp, 4
fdiv st(1), st(0)
push ecx
fxch st(1)
fstp dword [esp + 0x158]
mov eax, dword [ebp]
push eax
call fcn.00401070
fidivr dword [esp + 0x54]
lea edx, [esp + 0x54]
add ebp, 4
push edx
fstp dword [esp + 0x15c]
mov eax, dword [ebp]
push eax
call fcn.00401070
fild dword [esp + 0x5c]
mov ecx, dword [esp + 0x4c]
lea eax, [esp + 0x134]
fdiv qword [0x49e478]
push eax
push ecx
add ebp, 4
fstp dword [esp + 0x170]
call fcn.00461690
add esp, 0x40
neg al
sbb eax, eax
and eax, dword [esp + 0x14]
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
call fcn.00461a50
mov eax, dword [esp + 0x14]
test eax, eax
je case.default.0x4138e6
push eax
call fcn.00461da0
add esp, 4
jmp case.default.0x4138e6
cmp eax, 0x4030401
je 0x414550
cmp eax, 0x4030502
je 0x41452d
cmp eax, 0x4030606
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x54]
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
push edx
mov edx, dword [esp + 0x44]
push eax
mov eax, dword [esp + 0x44]
push ecx
push edx
push eax
add ebp, 4
call fcn.00460f50
add esp, 0x3c
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x1c]
push edx
add ebp, 4
call fcn.00461da0
add esp, 0xc
jmp case.default.0x4138e6
call fcn.00462bb0
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
fild dword [esp + 0x40]
mov eax, dword [esp + 0x34]
add esp, 0x14
fstp dword [esp + 8]
add ebp, 4
fild dword [esp + 0x28]
fstp dword [esp + 4]
fild dword [esp + 0x24]
fstp dword [esp]
push 1
push eax
call fcn.00461790
add esp, 0x14
jmp case.default.0x4138e6
cmp eax, 0x4040207
ja 0x414a40
je 0x41498c
cmp eax, 0x4031505
ja 0x414872
je 0x414824
cmp eax, 0x4031305
ja 0x4147cb
je 0x414729
cmp eax, 0x4031105
je 0x4146b7
cmp eax, 0x4031205
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
fild dword [esp + 0x40]
fld qword [0x49e488]
add esp, 0x14
mov eax, dword [esp + 0x20]
fmul st(1), st(0)
add ebp, 4
fld qword [0x49e490]
fdiv st(2), st(0)
fxch st(2)
fstp dword [esp + 0x44]
fld dword [esp + 0x44]
fstp dword [esp + 8]
fild dword [esp + 0x28]
fmul st(1)
fdiv st(2)
fstp dword [esp + 0x44]
fld dword [esp + 0x44]
fstp dword [esp + 4]
fimul dword [esp + 0x24]
fdivrp st(1)
fstp dword [esp + 0x44]
fld dword [esp + 0x44]
fstp dword [esp]
push 1
push eax
call fcn.004617d0
add esp, 0x14
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
fild dword [esp + 0x40]
mov eax, dword [esp + 0x34]
add esp, 0x14
fstp dword [esp + 8]
add ebp, 4
fild dword [esp + 0x28]
fstp dword [esp + 4]
fild dword [esp + 0x24]
fstp dword [esp]
push 0
push eax
call fcn.00461790
add esp, 0x14
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
fild dword [esp + 0x40]
fld qword [0x49e488]
add esp, 0x14
mov eax, dword [esp + 0x20]
fmul st(1), st(0)
add ebp, 4
fld qword [0x49e490]
fdiv st(2), st(0)
fxch st(2)
fstp dword [esp + 0x44]
fld dword [esp + 0x44]
fstp dword [esp + 8]
fild dword [esp + 0x28]
fmul st(1)
fdiv st(2)
fstp dword [esp + 0x44]
fld dword [esp + 0x44]
fstp dword [esp + 4]
fimul dword [esp + 0x24]
fdivrp st(1)
fstp dword [esp + 0x44]
fld dword [esp + 0x44]
fstp dword [esp]
push 0
push eax
call fcn.004617d0
add esp, 0x14
jmp case.default.0x4138e6
cmp eax, 0x4031403
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
fild dword [esp + 0x28]
mov eax, dword [esp + 0x24]
add esp, 0xc
fdiv qword [0x49e478]
add ebp, 4
fstp dword [esp + 0x3c]
fld dword [esp + 0x3c]
fstp dword [esp]
push 1
push eax
call fcn.00461810
add esp, 0xc
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
fild dword [esp + 0x28]
mov eax, dword [esp + 0x24]
add esp, 0xc
fdiv qword [0x49e478]
add ebp, 4
fstp dword [esp + 0x3c]
fld dword [esp + 0x3c]
fstp dword [esp]
push 0
push eax
call fcn.00461810
add esp, 0xc
jmp case.default.0x4138e6
cmp eax, 0x4031604
je 0x414938
cmp eax, 0x4040004
je 0x4148d6
cmp eax, 0x4040103
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
mov edx, dword [esp + 0x1c]
add esp, 8
add ebp, 4
push edx
push eax
mov dword [esp + 0x20], eax
add ebp, 4
call fcn.00402340
add esp, 4
push eax
call fcn.00456c50
add esp, 8
neg eax
sbb eax, eax
and eax, dword [esp + 0x14]
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
push edx
push eax
push ecx
push 0
push 0
push 0
add ebp, 4
call fcn.00456fe0
add esp, 0x30
neg eax
sbb eax, eax
and eax, dword [esp + 0x14]
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x2c]
add ebp, 4
push edx
push eax
call fcn.00401070
fild dword [esp + 0x34]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
add esp, 0x14
fstp dword [esp]
push eax
push ecx
add ebp, 4
call fcn.00461840
add esp, 0xc
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x2c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x38]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x48]
push edx
add ebp, 4
call fcn.00436fa0
add esp, 0x34
test eax, eax
je 0x40ec3c
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x30]
push edx
mov edx, dword [esp + 0x28]
push ecx
mov ecx, dword [esp + 0x28]
push edx
push ecx
push eax
call fcn.00456fe0
add esp, 0x18
test eax, eax
je 0x40ec3c
mov edx, dword [esp + 0x14]
mov dword [0x6cf9a4], edx
jmp case.default.0x4138e6
cmp eax, 0x4040703
ja 0x414c13
je 0x414bc3
cmp eax, 0x4040504
ja 0x414b68
je 0x414b08
cmp eax, 0x4040302
je 0x414ad4
cmp eax, 0x4040404
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x2c]
push edx
add ebp, 4
call fcn.00456b60
add esp, 0x1c
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push ecx
push edx
push eax
call fcn.00457570
add esp, 0xc
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x1c]
push edx
add ebp, 4
call fcn.00456b60
add esp, 0xc
test eax, eax
je case.default.0x4138e6
push eax
call fcn.00456b90
add esp, 4
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x2c]
push edx
add ebp, 4
call fcn.00456b60
add esp, 0x1c
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push ecx
push edx
push eax
call fcn.004575e0
add esp, 0xc
jmp case.default.0x4138e6
cmp eax, 0x4040603
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
add esp, 0x10
push 0
mov eax, dword [esp + 0x1c]
push eax
add ebp, 4
call fcn.00456b60
mov ecx, dword [esp + 0x1c]
add esp, 4
push eax
push ecx
call fcn.00456b60
add esp, 4
push eax
call fcn.00457320
add esp, 0xc
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x28]
add esp, 0x10
push 2
push edx
add ebp, 4
call fcn.00456b60
add esp, 4
push eax
mov eax, dword [esp + 0x1c]
push eax
call fcn.00456b60
add esp, 4
push eax
call fcn.00457320
add esp, 0xc
jmp case.default.0x4138e6
cmp eax, 0x4040803
je 0x414cf5
cmp eax, 0x4040905
je 0x414c7b
cmp eax, 0x4040a03
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x24]
push eax
add ebp, 4
call fcn.00456b60
mov ecx, dword [esp + 0x2c]
add esp, 0x14
push eax
push ecx
call fcn.00436fa0
add esp, 4
push eax
call fcn.00457280
add esp, 8
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x2c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x38]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
add esp, 0x20
push edx
push eax
push ecx
add ebp, 4
call fcn.00436fa0
mov edx, dword [esp + 0x20]
add esp, 4
push eax
push edx
call fcn.00456b60
add esp, 4
push eax
call fcn.00457170
add esp, 0x10
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
add esp, 0x10
push 1
jmp 0x414b97
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov esi, dword [ebp + 4]
add ebp, 4
lea ecx, [esp + 0x24]
add ebp, 4
mov dword [esp + 0x20], esi
mov eax, dword [ebp]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x30]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
add esp, 0x18
push eax
push ecx
push esi
add ebp, 4
call fcn.00402340
mov edx, dword [esp + 0x20]
add esp, 4
push eax
push edx
call fcn.00456b60
add esp, 4
push eax
call fcn.00457650
add esp, 0x10
jmp case.default.0x4138e6
cmp eax, 0x6010103
ja 0x416670
je 0x416642
cmp eax, 0x5020005
ja 0x415cfb
je 0x415c0a
cmp eax, 0x4060203
ja 0x41565f
je 0x41561a
cmp eax, 0x404130c
ja 0x415286
je 0x415190
cmp eax, 0x4041003
ja 0x414ff8
je 0x414fae
cmp eax, 0x4040c02
je 0x414f67
cmp eax, 0x4040d0b
je 0x414e2d
cmp eax, 0x4040e02
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x1c]
push edx
add ebp, 4
call fcn.00456b60
add esp, 0xc
neg eax
sbb eax, eax
neg eax
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x64]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x78]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
add esp, 0x40
lea ecx, [esp + 0x30]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [0x6d2530]
push eax
add ebp, 4
call fcn.004023b0
add esp, 0x14
test eax, eax
je case.default.0x4138e6
cmp dword [eax], 0x80000307
jne case.default.0x4138e6
mov eax, dword [eax + 0xc]
test eax, eax
je case.default.0x4138e6
push 0x6d23fc
push eax
call fcn.00402380
add esp, 4
push eax
call fcn.0041e560
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x38]
add esp, 8
push ecx
mov ecx, dword [esp + 0x44]
push edx
mov edx, dword [esp + 0x3c]
push ecx
mov ecx, dword [esp + 0x30]
push edx
mov edx, dword [esp + 0x3c]
push ecx
mov ecx, dword [esp + 0x34]
push edx
mov edx, dword [esp + 0x34]
push ecx
mov ecx, dword [esp + 0x34]
push edx
mov edx, dword [esp + 0x34]
push ecx
push eax
push edx
call fcn.00456b60
add esp, 4
push eax
call fcn.00457cf0
add esp, 0x2c
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x1c]
push edx
add ebp, 4
call fcn.00456b60
add esp, 0xc
test eax, eax
je case.default.0x4138e6
mov ecx, dword [eax + 0xc]
lea edx, [ecx*4]
push edx
mov edx, dword [eax + 0x10]
mov eax, dword [eax + 0x18]
push edx
push ecx
push eax
call fcn.00438180
add esp, 0x10
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x24]
push eax
add ebp, 4
call fcn.00456b60
add esp, 0x14
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x18]
push ecx
push eax
call fcn.004580d0
add esp, 8
jmp case.default.0x4138e6
cmp eax, 0x404110b
je 0x415093
cmp eax, 0x4041206
jne 0x41a4cd
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov esi, dword [ebp + 4]
add ebp, 4
lea ecx, [esp + 0x24]
add ebp, 4
mov dword [esp + 0x20], esi
mov eax, dword [ebp]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x30]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x44]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
add esp, 0x20
push edx
push eax
push ecx
push esi
add ebp, 4
call fcn.00402340
mov edx, dword [esp + 0x24]
add esp, 4
push eax
push edx
call fcn.00456b60
add esp, 4
push eax
call fcn.004576a0
add esp, 0x14
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x64]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x78]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
add esp, 0x40
lea ecx, [esp + 0x30]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x50]
add esp, 0x10
push eax
mov eax, dword [esp + 0x38]
push ecx
mov ecx, dword [esp + 0x2c]
push edx
mov edx, dword [esp + 0x38]
push eax
mov eax, dword [esp + 0x30]
push ecx
mov ecx, dword [esp + 0x30]
push edx
mov edx, dword [esp + 0x30]
push eax
push ecx
push edx
push 0x6d2428
add ebp, 4
mov eax, dword [esp + 0x3c]
push eax
call fcn.00456b60
add esp, 4
push eax
call fcn.00457c80
add esp, 0x2c
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov esi, dword [ebp + 4]
add ebp, 4
lea edx, [esp + 0x24]
add ebp, 4
mov dword [esp + 0x20], esi
mov eax, dword [ebp]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x30]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x44]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x44]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x5c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x70]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x68]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
add esp, 0x40
lea ecx, [esp + 0x44]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x40]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x40]
add esp, 0x10
push eax
mov eax, dword [esp + 0x44]
push ecx
mov ecx, dword [esp + 0x3c]
push edx
mov edx, dword [esp + 0x30]
push eax
mov eax, dword [esp + 0x3c]
push ecx
mov ecx, dword [esp + 0x34]
push edx
push eax
add ebp, 4
push ecx
mov edx, dword [esp + 0x3c]
push edx
push esi
call fcn.00402380
add esp, 4
push eax
jmp 0x415175
cmp eax, 0x4050203
ja 0x41557e
je 0x4154fc
cmp eax, 0x404140b
je 0x415418
cmp eax, 0x404150c
je 0x41530a
cmp eax, 0x4050104
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
add ebp, 4
push eax
mov dword [esp + 0x30], eax
add ebp, 4
call fcn.00402340
mov ecx, dword [esp + 0x28]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
push eax
push ecx
call fcn.00436fa0
add esp, 4
push eax
call fcn.00439bb0
add esp, 0xc
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x2c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x38]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x64]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x78]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
add esp, 0x40
lea edx, [esp + 0x30]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x48]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x30]
push eax
add ebp, 4
call fcn.004722d0
add esp, 0x1c
test eax, eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x44]
push ecx
mov ecx, dword [esp + 0x34]
push edx
mov edx, dword [esp + 0x48]
push ecx
mov ecx, dword [esp + 0x40]
push edx
mov edx, dword [esp + 0x34]
push ecx
mov ecx, dword [esp + 0x40]
push edx
mov edx, dword [esp + 0x38]
push ecx
mov ecx, dword [esp + 0x38]
push edx
mov edx, dword [eax + 0x44]
mov eax, dword [esp + 0x34]
push ecx
push edx
push eax
jmp 0x414f51
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x64]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x78]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
add esp, 0x40
lea ecx, [esp + 0x30]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x50]
add esp, 0x10
push eax
mov eax, dword [esp + 0x38]
push ecx
mov ecx, dword [esp + 0x2c]
push edx
mov edx, dword [esp + 0x38]
push eax
mov eax, dword [esp + 0x30]
push ecx
mov ecx, dword [esp + 0x30]
push edx
mov edx, dword [esp + 0x30]
push eax
push ecx
push edx
push 0x6d23fc
jmp 0x415172
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [esp + 0x30]
add esp, 0x18
add ebp, 4
cmp eax, 0xffffffff
jne 0x41555b
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
push edx
push eax
call fcn.00436fa0
add esp, 4
push eax
call fcn.00439a20
add esp, 8
jmp case.default.0x4138e6
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
push ecx
push 0
push eax
push edx
call fcn.00436fa0
add esp, 4
push eax
call fcn.00439a90
add esp, 0x10
jmp case.default.0x4138e6
cmp eax, 0x4050303
je 0x4155d5
cmp eax, 0x4060103
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
add esp, 0x10
push eax
push ecx
add ebp, 4
call fcn.00436fa0
add esp, 4
push eax
call fcn.00437b20
add esp, 8
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
add esp, 0x10
push edx
push eax
add ebp, 4
call fcn.00436fa0
add esp, 4
push eax
call fcn.00439b80
add esp, 8
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
add esp, 0x10
push eax
push ecx
add ebp, 4
call fcn.00436fa0
add esp, 4
push eax
call fcn.00437b60
add esp, 8
jmp case.default.0x4138e6
cmp eax, 0x5000504
ja 0x4158be
je 0x415840
cmp eax, 0x5000201
ja 0x4157fd
je 0x4157be
cmp eax, 0x4060304
je 0x415763
cmp eax, 0x5000003
je 0x4156de
cmp eax, 0x5000102
jne 0x41a4cd
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x1c]
add esp, 8
add ebp, 4
test eax, eax
je 0x4156ce
push eax
call fcn.00468c10
add esp, 4
mov dword [0x6d63c8], esi
jmp case.default.0x4138e6
call fcn.00468af0
mov dword [0x6d63c8], esi
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov ecx, dword [0x6d63c8]
mov eax, dword [esp + 0x24]
and ecx, 0x7fffffff
add esp, 0x10
add ebp, 4
cmp ecx, eax
je case.default.0x4138e6
mov edx, dword [esp + 0x18]
push edx
push eax
call fcn.00402340
add esp, 4
push eax
call fcn.00468a80
call fcn.00468b50
mov eax, dword [esp + 0x1c]
push eax
call fcn.0046ed00
add esp, 0xc
cmp dword [esp + 0x18], esi
mov eax, dword [esp + 0x14]
mov dword [0x6d63c8], eax
je case.default.0x4138e6
or eax, 0x80000000
mov dword [0x6d63c8], eax
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
add esp, 0x18
push edx
push eax
push ecx
add ebp, 4
call fcn.00436fa0
add esp, 4
push eax
call fcn.00437b70
add esp, 0xc
jmp case.default.0x4138e6
cmp dword [0x6d63c8], edi
je case.default.0x4138e6
push 0
push 0
call fcn.00468c70
mov eax, 0x40000000
add esp, 8
test dword [0x6d63c8], eax
je 0x4157ee
or dword [0x6d63c8], eax
jmp case.default.0x4138e6
and dword [0x6d63c8], 0xbfffffff
jmp case.default.0x4138e6
cmp eax, 0x5000302
je 0x415822
cmp eax, 0x5000402
jne 0x41a4cd
add ebp, 4
mov dword [0x6d23d4], esi
call fcn.00469150
jmp case.default.0x4138e6
mov eax, dword [ebp]
push 0x6d23d4
push eax
call fcn.00401070
add esp, 8
add ebp, 4
call fcn.00469150
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x2c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov ecx, dword [0x6d63c8]
mov eax, dword [esp + 0x2c]
and ecx, 0xfffffff
add esp, 0x18
add ebp, 4
cmp ecx, eax
je case.default.0x4138e6
mov edx, dword [esp + 0x1c]
push edx
push eax
call fcn.00402340
add esp, 4
push eax
call fcn.00468a80
mov eax, dword [esp + 0x20]
push eax
call fcn.00468bb0
mov ecx, dword [esp + 0x20]
push ecx
call fcn.0046ed00
add esp, 0x10
jmp 0x415741
cmp eax, 0x5010102
ja 0x415a95
je 0x415a58
cmp eax, 0x5000601
je 0x415a05
cmp eax, 0x5010004
je 0x415915
cmp eax, 0x5010101
jne 0x41a4cd
push 0
push 0xffffffffffffffff
call fcn.004689c0
add esp, 8
mov eax, 0x6d8ad8
lea ecx, [ecx]
cmp dword [eax], esi
je 0x415906
mov dword [eax], esi
add eax, 0x18
cmp eax, 0x6d8bb0
jl 0x415900
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x2c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x2c]
add esp, 0x18
push 0
push eax
push 0xffffffffffffffff
push ecx
add ebp, 4
call fcn.00402340
add esp, 4
push eax
call fcn.00468770
add esp, 0x10
cmp eax, 0xffffffff
mov dword [0x6cf9a4], eax
je 0x415982
mov edx, dword [esp + 0x18]
push edx
push eax
call fcn.004689f0
add esp, 8
mov eax, dword [esp + 0x14]
push eax
call fcn.0046ed00
add esp, 4
cmp dword [esp + 0x18], esi
je case.default.0x4138e6
cmp dword [0x4c00e8], esi
jne case.default.0x4138e6
xor ecx, ecx
mov eax, 0x6d8ad8
lea edx, [ecx + 1]
nop
cmp dword [eax], esi
je 0x4159c5
add eax, 0x18
add ecx, edx
cmp eax, 0x6d8bb0
jl 0x4159b0
jmp case.default.0x4138e6
lea eax, [ecx + ecx*2]
mov ecx, dword [esp + 0x14]
add eax, eax
add eax, eax
add eax, eax
mov dword [eax + 0x6d8ad8], edx
mov dword [eax + 0x6d8adc], ecx
mov ecx, dword [esp + 0x1c]
mov dword [eax + 0x6d8ae0], ecx
mov ecx, dword [0x6cf9a4]
mov dword [eax + 0x6d8ae4], ecx
mov dword [eax + 0x6d8ae8], edx
mov dword [eax + 0x6d8aec], esi
jmp case.default.0x4138e6
mov eax, dword [0x6d63c8]
cmp eax, edi
je case.default.0x4138e6
mov edx, eax
shr edx, 0x1f
and edx, 1
and eax, 0xfffffff
push edx
push eax
call fcn.00402340
add esp, 4
push eax
call fcn.00468a80
add esp, 8
call fcn.00468b50
test dword [0x6d63c8], 0x40000000
je case.default.0x4138e6
push 0
push 0
call fcn.00468c70
add esp, 8
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x1c]
push edx
push 0xffffffffffffffff
add ebp, 4
call fcn.004689c0
add esp, 0x10
mov eax, 0x6d8ad8
lea ecx, [ecx]
cmp dword [eax], esi
je 0x415a86
mov dword [eax], esi
add eax, 0x18
cmp eax, 0x6d8bb0
jl 0x415a80
jmp case.default.0x4138e6
cmp eax, 0x5010103
je 0x415b79
cmp eax, 0x5020003
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x24]
add esp, 0x10
add ebp, 4
test eax, eax
je 0x415b61
lea ecx, [esp + 0x48]
push ecx
push eax
call fcn.00402340
add esp, 4
push eax
call fcn.00470110
add esp, 8
test eax, eax
mov dword [esp + 0x28], eax
je 0x415b61
mov eax, dword [0x6d4478]
shr eax, 0xc
and eax, 0xf
sub eax, 1
je 0x415b19
sub eax, 1
jne 0x415b25
push 0xffffffffffffffff
push 0x3e8
jmp 0x415b1d
push 0xffffffffffffffff
push 0
call fcn.00468f10
add esp, 8
mov edx, dword [0x6d4484]
imul edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x18]
mov eax, 0xd1b71759
mul edx
mov eax, dword [esp + 0x48]
push 0
shr edx, 0xd
push edx
push eax
mov dword [esp + 0x34], edx
mov edx, dword [esp + 0x20]
push ecx
push edx
call fcn.00402340
add esp, 4
push eax
call fcn.004691f0
add esp, 0x14
mov eax, dword [esp + 0x14]
push eax
call fcn.00402340
push eax
call fcn.00459cc0
add esp, 8
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
push eax
push ecx
add ebp, 4
call fcn.004689c0
mov edx, dword [esp + 0x2c]
add esp, 0x18
test edx, edx
jns 0x415bd5
mov eax, 0x6d8ad8
lea ebx, [ebx]
cmp dword [eax], esi
je 0x415bc6
mov dword [eax], esi
add eax, 0x18
cmp eax, 0x6d8bb0
jl 0x415bc0
jmp case.default.0x4138e6
xor ecx, ecx
mov eax, 0x6d8ae4
lea esp, [esp]
cmp dword [eax - 0xc], esi
je 0x415be9
cmp dword [eax], edx
je 0x415bfb
add eax, 0x18
add ecx, 1
cmp eax, 0x6d8bbc
jl 0x415be0
jmp case.default.0x4138e6
lea edx, [ecx + ecx*2]
mov dword [edx*8 + 0x6d8ad8], esi
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov esi, dword [ebp + 4]
add ebp, 4
lea edx, [esp + 0x24]
add ebp, 4
mov dword [esp + 0x20], esi
mov eax, dword [ebp]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x30]
add ebp, 4
push ecx
push eax
call fcn.00401070
add esp, 0x18
add ebp, 4
cmp dword [esp + 0x14], edi
je 0x415cd9
lea edx, [esp + 0x48]
push edx
push esi
call fcn.00402340
add esp, 4
push eax
call fcn.00470110
add esp, 8
test eax, eax
mov dword [esp + 0x28], eax
je 0x415cd9
mov eax, dword [0x6d4478]
shr eax, 0xc
and eax, 0xf
sub eax, 1
je 0x415c91
sub eax, 1
jne 0x415c9d
push 0xffffffffffffffff
push 0x3e8
jmp 0x415c95
push 0xffffffffffffffff
push 0
call fcn.00468f10
add esp, 8
mov ecx, dword [0x6d4484]
imul ecx, dword [esp + 0x28]
mov eax, 0xd1b71759
mul ecx
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
push 0
shr edx, 0xd
push edx
mov dword [esp + 0x30], edx
mov edx, dword [esp + 0x1c]
push edx
push eax
push ecx
call fcn.00402340
add esp, 4
push eax
call fcn.004691f0
add esp, 0x14
cmp dword [esp + 0x20], edi
jne case.default.0x4138e6
mov edx, dword [esp + 0x18]
push edx
call fcn.00402340
push eax
call fcn.00459cc0
add esp, 8
jmp case.default.0x4138e6
cmp eax, 0x5040102
ja 0x41602e
je 0x416009
cmp eax, 0x5020501
ja 0x415e79
je 0x415e3e
cmp eax, 0x5020301
ja 0x415d87
je 0x415d7d
sub eax, 0x5020101
je 0x415d6c
sub eax, 1
je 0x415d47
sub eax, 0xff
jne 0x41a4cd
call fcn.00468f70
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x1c]
push 0xffffffffffffffff
push edx
add ebp, 4
call fcn.00468f10
add esp, 0x10
jmp case.default.0x4138e6
push 0xffffffffffffffff
push 0
call fcn.00468f10
add esp, 8
jmp case.default.0x4138e6
call fcn.0046ffa0
jmp case.default.0x4138e6
sub eax, 0x5020403
je 0x415dfa
sub eax, 1
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x1c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov esi, dword [ebp]
lea edx, [esp + 0x18]
add ebp, 4
mov dword [esp + 0x14], esi
mov eax, dword [ebp]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
push eax
push ecx
push esi
call fcn.00402340
add esp, 4
push eax
call fcn.0046ffc0
add esp, 0xc
jmp case.default.0x4138e6
mov esi, dword [ebp]
lea edx, [esp + 0x18]
add ebp, 4
mov dword [esp + 0x14], esi
mov eax, dword [ebp]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x18]
push 0xffffffffffffffff
push eax
push esi
call fcn.00402340
add esp, 4
push eax
call fcn.0046ffc0
add esp, 0xc
jmp case.default.0x4138e6
push 0x44
call fcn.00484d49
mov esi, eax
add esp, 4
test esi, esi
je case.default.0x4138e6
push esi
call fcn.00459d10
add esp, 4
test al, al
je 0x418b03
cmp dword [esi], edi
je 0x418b03
mov edx, dword [esi + 4]
lea ecx, [esp + 0x48]
push ecx
push edx
jmp 0x419f9f
cmp eax, 0x5030003
ja 0x415f9d
je 0x415f56
cmp eax, 0x5020502
je 0x415f35
cmp eax, 0x5020602
je 0x415ef6
cmp eax, 0x5030002
jne 0x41a4cd
mov eax, dword [ebp]
mov dword [esp + 0x14], eax
add ebp, 4
call fcn.00468af0
mov ecx, dword [esp + 0x14]
push ecx
call fcn.00402340
push eax
call fcn.004033a0
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x30], eax
push edx
call fcn.0046ed00
add esp, 0xc
cmp dword [esp + 0x28], esi
je case.default.0x4138e6
push 0xffffffffffffffff
call fcn.00405b00
add esp, 4
mov dword [ebx], 0xd
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [esp + 0x1c]
add esp, 8
add ebp, 4
cmp eax, 0xffffffff
jne 0x415f22
call fcn.00469030
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
push eax
call fcn.004690c0
add esp, 4
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov eax, dword [ebp]
push eax
call fcn.00402340
push 0
push eax
call fcn.00470090
add esp, 0xc
mov dword [0x6cf9a4], eax
add ebp, 4
jmp case.default.0x4138e6
mov edx, dword [ebp]
lea ecx, [esp + 0x18]
mov dword [esp + 0x14], edx
mov eax, dword [ebp + 4]
add ebp, 4
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
cmp dword [esp + 0x18], esi
jne 0x415f7f
call fcn.00468af0
mov edx, dword [esp + 0x14]
push edx
call fcn.00402340
push eax
call fcn.004033a0
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x1c]
push eax
jmp 0x415ecf
cmp eax, 0x5030101
je 0x415ff3
cmp eax, 0x5040002
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [esp + 0x1c]
add esp, 8
add ebp, 4
test eax, eax
je case.default.0x4138e6
mov edx, dword [0x6d23d0]
push 0
push edx
push 0xfffffffffffffffe
push 0xffffffffffffffff
push eax
call fcn.00402340
add esp, 4
push eax
call fcn.004691f0
add esp, 0x14
jmp case.default.0x4138e6
call fcn.0045fd50
push 0
call fcn.00437b60
add esp, 4
mov dword [ebx], esi
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x1c]
push 0xfffffffffffffffe
push edx
add ebp, 4
call fcn.00468f10
add esp, 0x10
jmp case.default.0x4138e6
cmp eax, 0x5060204
ja 0x416357
je 0x41630d
cmp eax, 0x5050303
ja 0x41627f
je 0x416216
cmp eax, 0x5050004
je 0x41614f
cmp eax, 0x5050102
je 0x4160fa
cmp eax, 0x5050204
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x2c]
push edx
push eax
add ebp, 4
call fcn.004689f0
mov esi, dword [esp + 0x38]
add esp, 0x20
test esi, esi
je case.default.0x4138e6
mov edx, dword [esp + 0x14]
xor ecx, ecx
mov eax, 0x6d8ae4
lea ecx, [ecx]
cmp dword [eax - 0xc], edi
je 0x4160d9
cmp dword [eax], edx
je 0x4160eb
add eax, 0x18
add ecx, 1
cmp eax, 0x6d8bbc
jl 0x4160d0
jmp case.default.0x4138e6
lea ecx, [ecx + ecx*2]
mov dword [ecx*8 + 0x6d8ae8], esi
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x1c]
push 0
push eax
add ebp, 4
call fcn.004689c0
mov edx, dword [esp + 0x24]
add esp, 0x10
xor ecx, ecx
mov eax, 0x6d8ae4
cmp dword [eax - 0xc], esi
je 0x41612e
cmp dword [eax], edx
je 0x416140
add eax, 0x18
add ecx, 1
cmp eax, 0x6d8bbc
jl 0x416125
jmp case.default.0x4138e6
lea ecx, [ecx + ecx*2]
mov dword [ecx*8 + 0x6d8ad8], esi
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov esi, dword [ebp + 4]
add ebp, 4
lea ecx, [esp + 0x24]
add ebp, 4
mov dword [esp + 0x20], esi
mov eax, dword [ebp]
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x24]
add esp, 0x10
push 0
push edx
push eax
push esi
add ebp, 4
call fcn.00402340
add esp, 4
push eax
call fcn.00468880
mov edi, dword [esp + 0x28]
add esp, 0x10
test eax, eax
mov dword [0x6cf9a4], eax
je 0x416208
xor edx, edx
mov ecx, 0x6d8ad8
lea esi, [edx + 1]
cmp dword [ecx], 0
je 0x4161d3
add ecx, 0x18
add edx, esi
cmp ecx, 0x6d8bb0
jl 0x4161b3
push edi
call fcn.0046ed00
add esp, 4
jmp case.default.0x4138e6
lea ecx, [edx + edx*2]
mov edx, dword [esp + 0x1c]
add ecx, ecx
add ecx, ecx
add ecx, ecx
mov dword [ecx + 0x6d8ad8], esi
mov dword [ecx + 0x6d8adc], edi
mov dword [ecx + 0x6d8ae0], edx
mov dword [ecx + 0x6d8ae4], eax
mov dword [ecx + 0x6d8ae8], 0
mov dword [ecx + 0x6d8aec], esi
push edi
call fcn.0046ed00
add esp, 4
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
push eax
push ecx
add ebp, 4
call fcn.00468a20
mov edx, dword [esp + 0x2c]
add esp, 0x18
xor ecx, ecx
mov eax, 0x6d8ae4
cmp dword [eax - 0xc], esi
je 0x41625e
cmp dword [eax], edx
je 0x416270
add eax, 0x18
add ecx, 1
cmp eax, 0x6d8bbc
jl 0x416255
jmp case.default.0x4138e6
lea edx, [ecx + ecx*2]
mov dword [edx*8 + 0x6d8ae8], esi
jmp case.default.0x4138e6
cmp eax, 0x5060004
je 0x4162b6
cmp eax, 0x5060102
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x1c]
push 0
push edx
add ebp, 4
call fcn.004689c0
add esp, 0x10
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov esi, dword [ebp + 4]
add ebp, 4
lea edx, [esp + 0x24]
add ebp, 4
mov dword [esp + 0x20], esi
mov eax, dword [ebp]
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
add esp, 0x10
push 1
push eax
push ecx
push esi
add ebp, 4
call fcn.00402340
add esp, 4
push eax
call fcn.00468770
add esp, 0x10
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x2c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
push eax
push ecx
add ebp, 4
call fcn.004689f0
add esp, 0x20
jmp case.default.0x4138e6
cmp eax, 0x6000104
ja 0x4165df
je 0x416429
cmp eax, 0x5060404
je 0x4163be
cmp eax, 0x6000003
jne 0x41a4cd
mov esi, dword [ebp]
lea edx, [esp + 0x18]
add ebp, 4
mov dword [esp + 0x14], esi
mov eax, dword [ebp]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x18]
push esi
push eax
call fcn.00470360
add esp, 8
neg al
sbb eax, eax
neg eax
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov esi, dword [ebp]
lea ecx, [esp + 0x18]
add ebp, 4
mov dword [esp + 0x14], esi
mov eax, dword [ebp]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x24]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x2c]
add esp, 0x10
push 1
push eax
push 0xffffffffffffffff
push esi
add ebp, 4
call fcn.00402340
add esp, 4
push eax
call fcn.00468770
add esp, 0x10
cmp eax, 0xffffffff
mov dword [0x6cf9a4], eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x18]
push ecx
push eax
call fcn.004689f0
add esp, 8
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x2c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x30]
push eax
add ebp, 4
call fcn.004705a0
xor ebx, ebx
add esp, 0x1c
cmp eax, ebx
mov dword [esp + 0x18], eax
je case.default.0x4138e6
mov ecx, dword [0x4c00e8]
mov edx, dword [esp + 0x14]
lea ecx, [ecx + ecx*4]
add ecx, ecx
add ecx, ecx
add ecx, ecx
push ecx
mov ecx, dword [esp + 0x20]
push edx
push ecx
push eax
call fcn.00402340
add esp, 4
push eax
call fcn.0043f760
mov edi, eax
add esp, 0x10
cmp edi, ebx
je 0x410353
cmp dword [0x4c00e8], ebx
jne 0x4164cf
mov edx, dword [esp + 0x30]
test byte [edx], 1
je 0x4164cf
cmp dword [0x6d6850], ebx
je 0x4164cf
push edi
call fcn.00404650
add esp, 4
mov eax, dword [esp + 0x18]
push eax
call fcn.0046ed00
push edi
call fcn.00436d40
add esp, 8
sub eax, 1
je 0x416573
sub eax, 3
jne 0x410345
mov ecx, dword [0x4c00e8]
cmp dword [ecx*4 + 0x4c00f4], ebx
je 0x410345
lea edx, [esp + 0x28]
push edx
push 4
mov dword [esp + 0x30], ebx
call fcn.00437090
mov esi, eax
add esp, 8
cmp esi, ebx
je 0x416558
mov eax, dword [esp + 0x30]
test byte [eax], 1
je 0x416539
mov ecx, dword [0x6d6850]
cmp ecx, ebx
je 0x416539
push esi
call fcn.00440e40
push esi
call fcn.0043e4a0
lea ecx, [esp + 0x2c]
push ecx
push 4
mov dword [esp + 0x34], ebx
call fcn.00437090
mov esi, eax
add esp, 0xc
cmp esi, ebx
jne 0x416520
mov edx, dword [0x4c00e8]
mov dword [edx*4 + 0x4c00f4], ebx
mov edx, dword [edi + 8]
mov dword [0x6cf9a4], edx
jmp case.default.0x4138e6
mov eax, dword [0x4c00e8]
cmp dword [eax*4 + 0x4c0094], ebx
je 0x410345
lea ecx, [esp + 0x28]
push ecx
push 1
mov dword [esp + 0x30], ebx
call fcn.00437090
mov esi, eax
add esp, 8
cmp esi, ebx
je 0x410338
mov edx, dword [esp + 0x30]
test byte [edx], 1
je 0x4165bb
mov ecx, dword [0x6d6850]
cmp ecx, ebx
je 0x4165bb
push esi
call fcn.00440e40
push esi
call fcn.0043e4a0
lea eax, [esp + 0x2c]
push eax
push 1
mov dword [esp + 0x34], ebx
call fcn.00437090
mov esi, eax
add esp, 0xc
cmp esi, ebx
jne 0x4165a2
jmp 0x410338
sub eax, 0x6010001
je 0x416633
sub eax, 2
jne 0x41a4cd
mov esi, dword [ebp]
lea ecx, [esp + 0x18]
add ebp, 4
mov dword [esp + 0x14], esi
mov eax, dword [ebp]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x18]
push esi
push edx
call fcn.00470360
add esp, 8
neg al
sbb eax, eax
neg eax
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
push 0
call fcn.00471b30
add esp, 4
jmp case.default.0x4138e6
mov eax, dword [ebp]
add ebp, 4
mov dword [esp + 0x14], eax
mov ecx, dword [ebp]
mov dword [esp + 0x18], ecx
push 0
push ecx
push eax
add ebp, 4
call fcn.00402380
add esp, 4
push eax
call fcn.004703b0
add esp, 0xc
jmp case.default.0x4138e6
cmp eax, 0x80030101
ja 0x418a0e
je 0x4189f6
cmp eax, 0x80020002
ja 0x41812b
je 0x4180a2
cmp eax, 0x80010304
ja 0x4179d5
je 0x417866
cmp eax, 0x80000307
ja 0x416f8f
je 0x41688c
cmp eax, 0x6010202
ja 0x41675d
je 0x41673f
sub eax, 0x6010104
je 0x41671e
sub eax, 2
jne 0x41a4cd
mov eax, dword [ebp]
add ebp, 4
mov dword [esp + 0x14], eax
mov ecx, dword [ebp]
add ebp, 4
mov dword [esp + 0x18], ecx
mov edx, dword [ebp]
add ebp, 4
mov dword [esp + 0x1c], edx
mov esi, dword [ebp]
add ebp, 4
mov dword [esp + 0x20], esi
mov edi, dword [ebp]
push edi
push esi
push edx
push ecx
push eax
add ebp, 4
call fcn.00402380
add esp, 4
push eax
call fcn.00470410
add esp, 0x14
jmp case.default.0x4138e6
mov eax, dword [ebp]
add ebp, 4
mov dword [esp + 0x14], eax
mov ecx, dword [ebp]
add ebp, 4
mov dword [esp + 0x18], ecx
mov edx, dword [ebp]
mov dword [esp + 0x1c], edx
push edx
jmp 0x416655
mov eax, dword [ebp]
push eax
mov dword [esp + 0x18], eax
add ebp, 4
call fcn.00402380
push eax
call fcn.00471b30
add esp, 8
jmp case.default.0x4138e6
cmp eax, 0x80000104
je 0x416837
cmp eax, 0x80000202
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov esi, dword [0x4c00e8]
add esi, esi
add ebp, 4
add esi, esi
call fcn.00479090
lea edx, [esi + 0x4c0080]
mov dword [esi + 0x4c0114], eax
mov eax, dword [ebp]
push edx
push eax
call fcn.00401070
add esp, 0x10
add ebp, 4
test dword [0x6d8bd4], 0x800
je 0x4167fc
mov ecx, dword [0x6d8bd8]
cmp ecx, 0xffffffff
je 0x4167fc
mov eax, dword [0x4c00e8]
lea eax, [eax + eax*4]
add eax, eax
add eax, eax
add eax, eax
push eax
push 0
push 0xffffffffffffffff
push ecx
call fcn.00402340
add esp, 4
push eax
call fcn.0043f710
mov dword [0x4c013c], edi
add esp, 0x10
mov dword [ebx], 1
jmp case.default.0x4138e6
mov ecx, dword [0x6d69cc]
cmp ecx, 0xffffffff
je 0x41682c
mov eax, dword [0x4c00e8]
lea edx, [eax + eax*4]
add edx, edx
add edx, edx
add edx, edx
push edx
push 0
push 0xffffffffffffffff
push ecx
call fcn.00402340
add esp, 4
push eax
call fcn.0043f710
add esp, 0x10
mov dword [ebx], 1
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
add esp, 0x18
add ebp, 4
mov dword [eax*4 + 0x6d8bdc], edx
mov dword [eax*4 + 0x6d8bfc], ecx
jmp case.default.0x4138e6
cmp byte [0x4c0170], 0
je 0x41689d
sub ebp, 4
jmp case.default.0x4138e6
test dword [0x6d048c], 0x100
je 0x4168d7
push 1
push 0
push 0
call fcn.00405ec0
add esp, 0xc
test al, al
jne 0x4168d7
push 0
push 0
push 1
sub ebp, 4
call fcn.00405ec0
add esp, 0xc
mov dword [ebx], 0x16
jmp case.default.0x4138e6
mov edx, dword [ebp]
mov dword [esp + 0x14], edx
mov eax, dword [ebp + 4]
add ebp, 4
mov dword [esp + 0x18], eax
mov ecx, dword [ebp + 4]
add ebp, 4
mov dword [esp + 0x1c], ecx
mov esi, dword [ebp + 4]
add ebp, 4
add ebp, 4
mov dword [esp + 0x20], esi
mov edx, dword [ebp]
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x24]
add ebp, 4
push ecx
push eax
mov dword [esp + 0x34], edx
call fcn.00401070
mov ebx, dword [esp + 0x2c]
add esp, 8
add ebp, 4
cmp ebx, 4
jae case.default.0x4138e6
push esi
call fcn.00470e60
mov eax, dword [esp + 0x20]
xor edi, edi
add esp, 4
cmp eax, edi
je 0x416950
push eax
call fcn.00402380
push eax
call fcn.0041e520
add esp, 8
mov esi, eax
jmp 0x416952
xor esi, esi
mov ecx, dword [esp + 0x14]
cmp ecx, edi
je 0x41698d
cmp esi, edi
je 0x41697b
cmp dword [0x6d23d8], edi
jne 0x41697b
mov eax, 1
push ecx
push eax
call fcn.00402360
add esp, 8
mov dword [esp + 0x30], eax
jmp 0x416991
xor eax, eax
push ecx
push eax
call fcn.00402360
add esp, 8
mov dword [esp + 0x30], eax
jmp 0x416991
mov dword [esp + 0x30], edi
test byte [0x6d048c], 1
mov dword [esp + 0x38], edi
je 0x416a59
mov edx, dword [ebx*4 + 0x6d8bfc]
push edx
call fcn.004722d0
mov edi, eax
add esp, 4
test edi, edi
je case.default.0x4138e6
push edi
call fcn.004724d0
add esp, 4
test eax, eax
je 0x4169d2
push edi
call fcn.00472430
add esp, 4
push edi
call fcn.00472f30
mov eax, dword [esp + 0x1c]
add esp, 4
test eax, eax
mov dword [esp + 0x44], 0
je 0x416a0f
push 1
push 1
push eax
call fcn.00402380
add esp, 4
push eax
call fcn.0041e470
add esp, 8
push eax
push edi
call fcn.00474d80
add esp, 0xc
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x416a30
push 1
push eax
call fcn.00402380
add esp, 4
push eax
push edi
call fcn.00474d80
add esp, 0xc
add dword [esp + 0x44], eax
mov eax, dword [esp + 0x30]
mov ecx, dword [ebx*4 + 0x6d8bfc]
push esi
push 1
push eax
push ecx
push 0
push 0
call fcn.0045a1a0
push 1
push edi
call fcn.00472380
add esp, 0x20
jmp 0x416d3b
xor esi, esi
test dword [esp + 0x2c], 0x2000000
je 0x416c00
lea esp, [esp]
mov edx, dword [esi + 0x6d8bdc]
push edx
call fcn.004722d0
push eax
call fcn.004750c0
mov eax, dword [esi + 0x6d8bfc]
push eax
call fcn.004722d0
push eax
call fcn.004750c0
add esi, 4
add esp, 0x10
cmp esi, 0x14
jl 0x416a70
mov ebx, dword [esp + 0x24]
mov ecx, dword [ebx*4 + 0x6d8bdc]
lea ebx, [ebx*4 + 0x6d8bdc]
push ecx
call fcn.004722d0
mov esi, eax
add esp, 4
test esi, esi
je 0x416b41
cmp dword [esp + 0x18], edi
je 0x416b41
push 0
push esi
call fcn.00472380
push esi
call fcn.00472520
or eax, 0x10000
push eax
push esi
mov dword [esp + 0x3c], eax
call fcn.004724f0
mov edx, dword [esp + 0x2c]
add esp, 0x14
push 1
push edx
call fcn.00402380
add esp, 4
push eax
call fcn.0041e470
mov edi, eax
push 1
push edi
push esi
call fcn.00474d80
add esp, 0x14
push 0x49e474
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x416b2a
mov dword [esp + 0x38], 1
mov eax, dword [esp + 0x28]
and eax, 0xfffeffff
push eax
push esi
mov dword [esp + 0x30], eax
call fcn.004724f0
add esp, 8
mov edi, dword [esp + 0x24]
mov eax, dword [edi*4 + 0x6d8bfc]
lea edi, [edi*4 + 0x6d8bfc]
push eax
call fcn.004722d0
mov esi, eax
add esp, 4
test esi, esi
je 0x416bb7
cmp dword [esp + 0x1c], 0
je 0x416bc2
push 0
push esi
call fcn.00472380
push esi
call fcn.00472520
or eax, 0x10000
push eax
push esi
mov dword [esp + 0x3c], eax
call fcn.004724f0
mov ecx, dword [esp + 0x30]
add esp, 0x14
push 1
push ecx
call fcn.00402380
add esp, 4
push eax
push esi
call fcn.00474d80
mov eax, dword [esp + 0x34]
and eax, 0xfffeffff
push eax
push esi
mov dword [esp + 0x3c], eax
call fcn.004724f0
add esp, 0x14
cmp dword [esp + 0x1c], 0
je 0x416bc2
mov edi, dword [edi]
jmp 0x416bc5
or edi, 0xffffffff
cmp dword [esp + 0x18], 0
je 0x416bd0
mov eax, dword [ebx]
jmp 0x416bd3
or eax, 0xffffffff
mov edx, dword [esp + 0x38]
mov ecx, dword [esp + 0x30]
push edx
push 0
push ecx
push edi
push 0
push eax
call fcn.0045a1a0
add esp, 0x18
call fcn.0045a700
jmp case.default.0x4138e6
mov edx, dword [esi + 0x6d8bdc]
push edx
call fcn.004722d0
push eax
call fcn.004750c0
mov eax, dword [esi + 0x6d8bfc]
push eax
call fcn.004722d0
push eax
call fcn.004750c0
add esi, 4
add esp, 0x10
cmp esi, 0x14
jl 0x416c00
mov ebx, dword [esp + 0x24]
mov ecx, dword [ebx*4 + 0x6d8bdc]
lea ebx, [ebx*4 + 0x6d8bdc]
push ecx
call fcn.004722d0
mov esi, eax
add esp, 4
test esi, esi
je 0x416c9e
mov eax, dword [esp + 0x18]
test eax, eax
je 0x416c93
push 1
push eax
call fcn.00402380
add esp, 4
push eax
call fcn.0041e470
mov edi, eax
push 1
push edi
push esi
call fcn.00474d80
add esp, 0x14
push 0x49e474
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x416c8f
mov dword [esp + 0x38], 1
push 1
jmp 0x416c95
push 0
push esi
call fcn.00472380
add esp, 8
mov esi, dword [esp + 0x24]
mov edx, dword [esi*4 + 0x6d8bfc]
lea esi, [esi*4 + 0x6d8bfc]
push edx
call fcn.004722d0
mov edi, eax
add esp, 4
test edi, edi
je 0x416cff
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x416cea
push 1
push eax
call fcn.00402380
add esp, 4
push eax
push edi
call fcn.00474d80
push 1
push edi
mov dword [esp + 0x58], eax
call fcn.00472380
add esp, 0x14
jmp 0x416d07
push 0
push edi
mov dword [esp + 0x4c], 0
call fcn.00472380
add esp, 8
jmp 0x416d07
mov dword [esp + 0x44], 0
cmp dword [esp + 0x1c], 0
je 0x416d12
mov ecx, dword [esi]
jmp 0x416d15
or ecx, 0xffffffff
cmp dword [esp + 0x18], 0
je 0x416d20
mov eax, dword [ebx]
jmp 0x416d23
or eax, 0xffffffff
mov edx, dword [esp + 0x38]
push edx
mov edx, dword [esp + 0x34]
push 0
push edx
push ecx
push 0
push eax
call fcn.0045a1a0
add esp, 0x18
mov eax, dword [esp + 0x20]
mov ebx, dword [esp + 0x2c]
mov esi, dword [esp + 0x34]
push eax
call fcn.0046ec30
push eax
push 0
call fcn.00403820
push 0
push 0
push 1
call fcn.00405ec0
mov ecx, dword [esp + 0x38]
push ecx
call fcn.0046ec30
add esp, 0x1c
test al, al
jne 0x416dbc
test dword [0x6d4478], 0x100
je 0x416da1
push 1
push 9
call fcn.00402d00
push 0
push 8
call fcn.00402d00
mov edx, dword [esp + 0x30]
add esp, 0x10
push edx
call fcn.0046ec60
add esp, 4
jmp 0x416dc8
push 0
push 9
call fcn.00402d00
mov edx, dword [esp + 0x28]
add esp, 8
push edx
call fcn.0046ec60
add esp, 4
jmp 0x416dc8
push 0
push 0xa
call fcn.00402d00
add esp, 8
mov eax, dword [esp + 0x14]
test eax, eax
je 0x416eb0
lea ecx, [esp + 0x48]
push ecx
push eax
call fcn.00402340
add esp, 4
push eax
call fcn.00470110
add esp, 8
test eax, eax
mov dword [esp + 0x28], eax
je 0x416eb0
mov eax, dword [0x6d4478]
shr eax, 0xc
and eax, 0xf
sub eax, 1
je 0x416e15
sub eax, 1
jne 0x416e21
push 0xffffffffffffffff
push 0x3e8
jmp 0x416e19
push 0xffffffffffffffff
push 0
call fcn.00468f10
add esp, 8
mov edx, dword [0x6d4484]
imul edx, dword [esp + 0x28]
mov eax, 0xd1b71759
mul edx
mov eax, dword [0x6d03f8]
shr edx, 0xd
test eax, 0x800000
mov dword [esp + 0x28], edx
je 0x416e89
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x416e89
push ecx
call fcn.00402380
push eax
push 4
call fcn.00436d60
add esp, 0xc
test eax, eax
je 0x416e80
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x48]
push 0
push ecx
push edx
push eax
call fcn.00436dc0
add esp, 4
push eax
mov eax, dword [esp + 0x40]
push eax
jmp 0x416e9d
mov edx, dword [esp + 0x28]
mov eax, dword [0x6d03f8]
mov ecx, dword [esp + 0x48]
push 0
push edx
mov edx, dword [esp + 0x38]
shr eax, 0x14
push ecx
and eax, 7
push eax
push edx
call fcn.004691f0
add esp, 0x14
test eax, eax
je 0x416eb2
add eax, 0xc8
jmp 0x416eb2
xor eax, eax
test dword [0x6d8bd4], 0x800
je 0x416ed0
mov ecx, dword [esp + 0x44]
push ecx
push eax
push 1
call fcn.00402a50
add esp, 0xc
jmp 0x416ef3
mov esi, dword [0x4c00e8]
add esi, esi
add esi, esi
call fcn.00479090
mov dword [esi + 0x4c0114], eax
mov dword [esi + 0x4c0080], 0xffffffff
mov esi, dword [esp + 0x34]
and ebx, 0xff0000
mov eax, ebx
cmp eax, 0x20000
ja 0x416f5e
je 0x416f38
test eax, eax
je 0x416f23
cmp eax, 0x10000
jne case.default.0x4138e6
call fcn.00472ed0
mov dword [esi], 4
jmp case.default.0x4138e6
call fcn.0045a700
call fcn.00472ed0
mov dword [esi], 8
jmp case.default.0x4138e6
test byte [0x6d03f8], 0xf0
jne 0x416f4a
cmp dword [0x6cf998], 0
je 0x416f23
push edi
call fcn.00472e70
add esp, 4
mov dword [esi], 3
jmp case.default.0x4138e6
cmp eax, 0x30000
jne case.default.0x4138e6
test byte [0x6d03f8], 0xf0
jne 0x416f7b
cmp dword [0x6cf998], 0
je 0x416f84
push edi
call fcn.00472e70
add esp, 4
mov dword [esi], 4
jmp case.default.0x4138e6
cmp eax, 0x80010102
ja 0x417540
je 0x41738f
cmp eax, 0x80000406
je 0x416fb1
cmp eax, 0x80010004
jmp 0x41a4cb
mov edi, dword [ebp]
add ebp, 4
mov dword [esp + 0x14], edi
mov edx, dword [ebp]
mov dword [esp + 0x18], edx
mov esi, dword [ebp + 4]
add ebp, 4
add ebp, 4
mov dword [esp + 0x1c], esi
mov eax, dword [ebp]
lea ecx, [esp + 0x2c]
mov dword [esp + 0x20], eax
mov eax, dword [ebp + 4]
add ebp, 4
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test esi, esi
je 0x417006
push esi
call fcn.00402380
push eax
call fcn.0041e520
mov edi, dword [esp + 0x1c]
add esp, 8
jmp 0x417008
xor eax, eax
test edi, edi
je 0x417044
test eax, eax
je 0x417030
cmp dword [0x6d23d8], 0
jne 0x417030
mov eax, 1
push edi
push eax
call fcn.00402360
add esp, 8
mov ebx, eax
mov dword [esp + 0x30], eax
jmp 0x41704a
xor eax, eax
push edi
push eax
call fcn.00402360
add esp, 8
mov ebx, eax
mov dword [esp + 0x30], eax
jmp 0x41704a
xor ebx, ebx
mov dword [esp + 0x30], ebx
test byte [0x6d048c], 1
je 0x4170e1
mov esi, dword [esp + 0x2c]
mov edx, dword [esi*4 + 0x6d8bfc]
push edx
call fcn.004722d0
mov edi, eax
add esp, 4
test edi, edi
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
test eax, eax
mov dword [esp + 0x44], 0
je 0x41709e
push 1
push eax
call fcn.00402380
add esp, 4
push eax
push edi
call fcn.00474d80
add esp, 0xc
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x4170bf
push 1
push eax
call fcn.00402380
add esp, 4
push eax
push edi
call fcn.00474d80
add esp, 0xc
add dword [esp + 0x44], eax
mov eax, dword [esi*4 + 0x6d8bfc]
push 1
push ebx
push eax
push 0xffffffffffffffff
call fcn.0045a2a0
push 1
push edi
call fcn.00472380
add esp, 0x18
jmp 0x417201
mov ebx, dword [esp + 0x2c]
mov ecx, dword [ebx*4 + 0x6d8bdc]
lea eax, [ebx*4 + 0x6d8bdc]
push ecx
mov dword [esp + 0x3c], eax
call fcn.004722d0
mov edi, eax
add esp, 4
test edi, edi
je 0x417167
cmp dword [esp + 0x18], 0
je 0x41715c
mov esi, 0x6d8bdc
mov edx, dword [esi]
push edx
call fcn.004722d0
push eax
call fcn.004750c0
add esi, 4
add esp, 8
cmp esi, 0x6d8bf0
jl 0x417112
mov eax, dword [esp + 0x18]
push 1
push 1
push eax
call fcn.00402380
add esp, 4
push eax
call fcn.0041e470
add esp, 8
push eax
push edi
call fcn.00474d80
push 1
push edi
call fcn.00472380
add esp, 0x14
jmp 0x417167
push 0
push edi
call fcn.00472380
add esp, 8
mov ecx, dword [ebx*4 + 0x6d8bfc]
lea esi, [ebx*4 + 0x6d8bfc]
push ecx
call fcn.004722d0
mov edi, eax
add esp, 4
test edi, edi
je 0x4171c4
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x4171af
push 1
push eax
call fcn.00402380
add esp, 4
push eax
push edi
call fcn.00474d80
push 1
push edi
mov dword [esp + 0x58], eax
call fcn.00472380
add esp, 0x14
jmp 0x4171cc
push 0
push edi
mov dword [esp + 0x4c], 0
call fcn.00472380
add esp, 8
jmp 0x4171cc
mov dword [esp + 0x44], 0
cmp dword [esp + 0x1c], 0
je 0x4171d7
mov ecx, dword [esi]
jmp 0x4171da
or ecx, 0xffffffff
cmp dword [esp + 0x18], 0
je 0x4171e9
mov edx, dword [esp + 0x38]
mov eax, dword [edx]
jmp 0x4171ec
or eax, 0xffffffff
mov edx, dword [esp + 0x30]
push 0
push edx
push ecx
push eax
call fcn.0045a2a0
mov ebx, dword [esp + 0x40]
add esp, 0x10
mov esi, dword [esp + 0x34]
push 0
push 0
push 1
call fcn.00405ec0
mov eax, dword [esp + 0x20]
add esp, 0xc
test eax, eax
je 0x4172f1
lea ecx, [esp + 0x48]
push ecx
push eax
call fcn.00402340
add esp, 4
push eax
call fcn.00470110
add esp, 8
test eax, eax
mov dword [esp + 0x28], eax
je 0x4172f1
mov eax, dword [0x6d4478]
shr eax, 0xc
and eax, 0xf
sub eax, 1
je 0x417260
sub eax, 1
jne 0x41726c
push 0xffffffffffffffff
push 0x3e8
jmp 0x417264
push 0xffffffffffffffff
push 0
call fcn.00468f10
add esp, 8
mov edx, dword [0x6d4484]
imul edx, dword [esp + 0x28]
mov eax, 0xd1b71759
mul edx
mov eax, dword [0x6d03f8]
shr edx, 0xd
test eax, 0x800000
mov dword [esp + 0x28], edx
je 0x4172ce
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x4172ce
push ecx
call fcn.00402380
push eax
push 4
call fcn.00436d60
add esp, 0xc
test eax, eax
je 0x4172c5
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x48]
push 0
push ecx
push edx
push eax
call fcn.00436dc0
add esp, 4
jmp 0x4172dc
mov edx, dword [esp + 0x28]
mov eax, dword [0x6d03f8]
mov ecx, dword [esp + 0x48]
push 0
push edx
shr eax, 0x14
push ecx
and eax, 7
push eax
push ebx
call fcn.004691f0
add esp, 0x14
test eax, eax
je 0x4172f3
add eax, 0xc8
jmp 0x4172f3
xor eax, eax
test dword [0x6d8bd4], 0x800
je 0x417311
mov edx, dword [esp + 0x44]
push edx
push eax
push 2
call fcn.00402a50
add esp, 0xc
jmp 0x417334
mov esi, dword [0x4c00e8]
add esi, esi
add esi, esi
call fcn.00479090
mov dword [esi + 0x4c0114], eax
mov dword [esi + 0x4c0080], 0xffffffff
mov esi, dword [esp + 0x34]
mov eax, dword [esp + 0x20]
and eax, 0xff0000
cmp eax, 0x20000
jbe 0x416f02
cmp eax, 0x30000
jne case.default.0x4138e6
test byte [0x6d03f8], 0xf0
jne 0x416f7b
cmp dword [0x6cf998], 0
jne 0x416f7b
cmp dword [0x6d69cc], 0xffffffff
je 0x416f84
push 1
call fcn.00402be0
add esp, 4
mov dword [esi], 4
jmp case.default.0x4138e6
mov eax, dword [0x4c00e8]
cmp dword [eax*4 + 0x4c00f4], edi
je 0x417420
lea ecx, [esp + 0x28]
lea edx, [eax + eax*4]
push ecx
lea eax, [edx*8 + 4]
xor edi, edi
push eax
mov dword [esp + 0x30], edi
call fcn.00437090
mov esi, eax
add esp, 8
cmp esi, edi
je 0x417412
mov ebx, dword [esp + 0x30]
lea esp, [esp]
test byte [ebx], 1
je 0x4173e5
mov ecx, dword [0x6d6850]
cmp ecx, edi
je 0x4173e5
push esi
call fcn.00440e40
push esi
call fcn.0043e4a0
mov eax, dword [0x4c00e8]
lea ecx, [esp + 0x2c]
lea edx, [eax + eax*4]
push ecx
lea eax, [edx*8 + 4]
push eax
mov dword [esp + 0x34], edi
call fcn.00437090
mov esi, eax
add esp, 0xc
cmp esi, edi
jne 0x4173d0
mov eax, dword [0x4c00e8]
mov dword [eax*4 + 0x4c00f4], edi
xor edi, edi
cmp dword [eax*4 + 0x4c0094], edi
je 0x4174a5
lea ecx, [esp + 0x28]
lea edx, [eax + eax*4]
push ecx
lea eax, [edx*8 + 1]
xor edi, edi
push eax
mov dword [esp + 0x30], edi
call fcn.00437090
mov esi, eax
add esp, 8
cmp esi, edi
je 0x417497
mov ecx, dword [esp + 0x30]
test byte [ecx], 1
je 0x41746a
mov ecx, dword [0x6d6850]
cmp ecx, edi
je 0x41746a
push esi
call fcn.00440e40
push esi
call fcn.0043e4a0
mov eax, dword [0x4c00e8]
lea edx, [esp + 0x2c]
lea eax, [eax + eax*4]
push edx
lea ecx, [eax*8 + 1]
push ecx
mov dword [esp + 0x34], edi
call fcn.00437090
mov esi, eax
add esp, 0xc
cmp esi, edi
jne 0x417451
mov eax, dword [0x4c00e8]
mov dword [eax*4 + 0x4c0094], edi
jmp 0x4174a7
xor edi, edi
mov ecx, dword [ebp]
push edi
lea edx, [eax + eax*4]
push edi
lea eax, [edx*8 + 1]
push eax
push 0xffffffffffffffff
push ecx
mov dword [esp + 0x28], ecx
add ebp, 4
call fcn.00402340
add esp, 4
push eax
call fcn.0043f7b0
add esp, 0x14
cmp eax, edi
mov dword [esp + 0x28], eax
je 0x407e64
cmp dword [0x4c00e8], edi
jne 0x417506
mov ecx, dword [esp + 0x30]
test byte [ecx], 1
je 0x417506
cmp dword [0x6d6850], edi
je 0x417506
push eax
call fcn.00436fa0
push eax
call fcn.00404650
add esp, 8
mov edx, dword [esp + 0x14]
push edx
call fcn.0046ecc0
add esp, 4
test eax, eax
jne 0x417531
mov eax, dword [esp + 0x14]
push eax
call fcn.0046ed00
add esp, 4
cmp dword [0x4c00e8], edi
jne 0x417531
call fcn.0046e9e0
mov ecx, dword [esp + 0x28]
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
cmp eax, 0x80010104
je 0x417689
cmp eax, 0x80010204
jne 0x41a4cd
mov esi, dword [0x4c00e8]
xor ebx, ebx
cmp dword [esi*4 + 0x4c00f4], edi
je 0x4175e3
lea edx, [esp + 0x28]
lea eax, [esi + esi*4]
push edx
lea ecx, [eax*8 + 4]
push ecx
mov dword [esp + 0x30], ebx
call fcn.00437090
mov esi, eax
add esp, 8
cmp esi, ebx
je 0x4175d6
lea ecx, [ecx]
mov edx, dword [esp + 0x30]
test byte [edx], 1
je 0x4175a9
mov ecx, dword [0x6d6850]
cmp ecx, ebx
je 0x4175a9
push esi
call fcn.00440e40
push esi
call fcn.0043e4a0
lea eax, [esp + 0x2c]
push eax
mov eax, dword [0x4c00e8]
lea ecx, [eax + eax*4]
lea edx, [ecx*8 + 4]
push edx
mov dword [esp + 0x34], ebx
call fcn.00437090
mov esi, eax
add esp, 0xc
cmp esi, ebx
jne 0x417590
mov esi, dword [0x4c00e8]
mov dword [esi*4 + 0x4c00f4], ebx
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov edi, dword [ebp + 4]
add ebp, 4
lea edx, [esp + 0x24]
add ebp, 4
mov dword [esp + 0x20], edi
mov eax, dword [ebp]
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x24]
add esp, 0x10
push ebx
push eax
mov eax, dword [esp + 0x24]
lea ecx, [esi + esi*4]
lea edx, [ecx*8 + 4]
push edx
push eax
push edi
add ebp, 4
call fcn.00402340
add esp, 4
push eax
call fcn.0043f7b0
add esp, 0x14
cmp eax, ebx
mov dword [esp + 0x28], eax
je 0x410353
cmp dword [0x4c00e8], ebx
jne 0x41766e
mov ecx, dword [esp + 0x30]
test byte [ecx], 1
je 0x41766e
cmp dword [0x6d6850], ebx
je 0x41766e
push eax
call fcn.00436fa0
push eax
call fcn.00404650
add esp, 8
mov edx, dword [esp + 0x18]
push edx
call fcn.0046ed00
mov eax, dword [esp + 0x2c]
add esp, 4
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov esi, dword [0x4c00e8]
cmp dword [esi*4 + 0x4c00f4], edi
je 0x417715
lea ecx, [esp + 0x28]
lea edx, [esi + esi*4]
push ecx
lea eax, [edx*8 + 4]
xor edi, edi
push eax
mov dword [esp + 0x30], edi
call fcn.00437090
mov esi, eax
add esp, 8
cmp esi, edi
je 0x417706
mov ebx, dword [esp + 0x30]
test byte [ebx], 1
je 0x4176d9
mov ecx, dword [0x6d6850]
cmp ecx, edi
je 0x4176d9
push esi
call fcn.00440e40
push esi
call fcn.0043e4a0
mov eax, dword [0x4c00e8]
lea ecx, [esp + 0x2c]
lea edx, [eax + eax*4]
push ecx
lea eax, [edx*8 + 4]
push eax
mov dword [esp + 0x34], edi
call fcn.00437090
mov esi, eax
add esp, 0xc
cmp esi, edi
jne 0x4176c4
mov esi, dword [0x4c00e8]
mov dword [esi*4 + 0x4c00f4], edi
xor edi, edi
xor ebx, ebx
cmp dword [esi*4 + 0x4c0094], edi
je 0x417799
lea ecx, [esp + 0x28]
lea edx, [esi + esi*4]
push ecx
lea eax, [edx*8 + 1]
push eax
mov dword [esp + 0x30], ebx
call fcn.00437090
mov esi, eax
add esp, 8
cmp esi, ebx
je 0x41778c
mov ecx, dword [esp + 0x30]
test byte [ecx], 1
je 0x41775f
mov ecx, dword [0x6d6850]
cmp ecx, ebx
je 0x41775f
push esi
call fcn.00440e40
push esi
call fcn.0043e4a0
mov eax, dword [0x4c00e8]
lea edx, [esp + 0x2c]
lea eax, [eax + eax*4]
push edx
lea ecx, [eax*8 + 1]
push ecx
mov dword [esp + 0x34], ebx
call fcn.00437090
mov esi, eax
add esp, 0xc
cmp esi, ebx
jne 0x417746
mov esi, dword [0x4c00e8]
mov dword [esi*4 + 0x4c0094], ebx
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov edi, dword [ebp + 4]
add ebp, 4
lea ecx, [esp + 0x24]
add ebp, 4
mov dword [esp + 0x20], edi
mov eax, dword [ebp]
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x24]
add esp, 0x10
push ebx
push edx
mov edx, dword [esp + 0x24]
lea eax, [esi + esi*4]
lea ecx, [eax*8 + 1]
push ecx
push edx
push edi
add ebp, 4
call fcn.00402340
add esp, 4
push eax
call fcn.0043f7b0
add esp, 0x14
cmp eax, ebx
mov dword [esp + 0x28], eax
je 0x410353
cmp dword [0x4c00e8], ebx
jne 0x417824
mov ecx, dword [esp + 0x30]
test byte [ecx], 1
je 0x417824
cmp dword [0x6d6850], ebx
je 0x417824
push eax
call fcn.00436fa0
push eax
call fcn.00404650
add esp, 8
mov edx, dword [esp + 0x18]
push edx
call fcn.0046ecc0
add esp, 4
test eax, eax
jne 0x417531
mov eax, dword [esp + 0x18]
push eax
call fcn.0046ed00
add esp, 4
cmp dword [0x4c00e8], ebx
jne 0x417531
call fcn.0046e9e0
mov ecx, dword [esp + 0x28]
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x2c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov ecx, dword [0x6d03f4]
add esp, 0x18
add ebp, 4
cmp dword [esp + 0x14], esi
jne 0x41794f
test ecx, ecx
je 0x4178b7
push 1
call fcn.00402a10
push 0x1520
call fcn.00484d49
add esp, 4
mov dword [esp + 0x38], eax
test eax, eax
mov dword [esp + 0x3c8], 0xc
je 0x4178e0
mov ecx, eax
call fcn.0043add0
jmp 0x4178e2
xor eax, eax
test eax, eax
mov dword [esp + 0x3c8], 0xffffffff
mov dword [0x6d03f4], eax
je case.default.0x4138e6
lea eax, [esp + 0x28]
push eax
xor esi, esi
push 4
mov dword [esp + 0x30], esi
call fcn.00437090
add esp, 8
test eax, eax
je 0x417941
mov ecx, dword [esp + 0x18]
push 0
push 0
push 0
push ecx
mov ecx, dword [0x6d03f4]
push eax
push esi
call fcn.00440870
lea edx, [esp + 0x28]
push edx
push 4
add esi, 1
call fcn.00437090
add esp, 8
test eax, eax
jne 0x417913
call fcn.00479090
mov ecx, dword [esp + 0x1c]
jmp 0x410fd8
test ecx, ecx
je 0x41795a
push 1
call fcn.00402a10
push 0x1520
call fcn.00484d49
add esp, 4
mov dword [esp + 0x38], eax
test eax, eax
mov dword [esp + 0x3c8], 0xd
je 0x417983
mov ecx, eax
call fcn.0043add0
jmp 0x417985
xor eax, eax
test eax, eax
mov dword [esp + 0x3c8], 0xffffffff
mov dword [0x6d03f4], eax
je case.default.0x4138e6
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
push 0
push 0
push 0
push eax
push ecx
call fcn.00436fa0
mov ecx, dword [0x6d03f4]
add esp, 4
push eax
push 0
call fcn.00440870
call fcn.00479090
mov edx, dword [esp + 0x1c]
lea ecx, [eax + edx]
push ecx
jmp 0x410fdc
cmp eax, 0x80010906
ja 0x417e5b
je 0x417d7a
cmp eax, 0x80010604
ja 0x417b4b
je 0x417f39
cmp eax, 0x80010404
je 0x417ab7
cmp eax, 0x80010504
jne 0x41a4cd
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x2c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [0x4c00e8]
mov ecx, 1
add esp, 0x18
add ebp, 4
test dword [0x6d03f8], 0x10000000
mov dword [eax*4 + 0x4c00f4], ecx
mov dword [eax*4 + 0x4c0094], ecx
je 0x41a5ab
mov eax, dword [esp + 0x14]
test eax, eax
je 0x41a5ab
test byte [0x6d8bd4], 0xf
je 0x417a8c
cmp dword [0x4b8004], esi
jne 0x41a5ab
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push ecx
push edx
push eax
call fcn.00437cf0
mov ecx, dword [0x4c00e8]
mov dword [ecx*4 + 0x4c0114], eax
add esp, 0xc
mov dword [ebx], 0xa
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x2c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [0x4c00e8]
mov ecx, 1
add esp, 0x18
add ebp, 4
test dword [0x6d03f8], 0x10000000
mov dword [eax*4 + 0x4c00f4], ecx
mov dword [eax*4 + 0x4c0094], ecx
je 0x41a5ab
mov eax, dword [esp + 0x14]
test eax, eax
je 0x41a5ab
test byte [0x6d8bd4], 0xf
je 0x417b36
cmp dword [0x4b8004], esi
jne 0x41a5ab
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push ecx
push edx
push eax
call fcn.00437ca0
jmp 0x417a9c
cmp eax, 0x80010705
je 0x417c1d
cmp eax, 0x80010804
jne 0x41a4cd
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x2c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov cl, byte [esp + 0x34]
add esp, 0x18
add ebp, 4
test cl, 4
mov edx, 1
jne 0x417bb8
mov eax, dword [0x4c00e8]
mov dword [eax*4 + 0x4c00f4], edx
mov dword [eax*4 + 0x4c0094], edx
mov al, cl
not al
movzx eax, al
and eax, edx
test dword [0x6d03f8], 0x10000000
mov dword [0x4b8004], eax
je 0x41a5ab
cmp dword [esp + 0x18], esi
je 0x41a5a1
test byte [0x6d8bd4], 0xf
je 0x417bf1
test eax, eax
jne 0x41a5ab
mov ecx, dword [esp + 0x14]
push ecx
call fcn.0044a1f0
mov edx, dword [esp + 0x20]
mov eax, dword [0x4c00e8]
mov ecx, dword [esp + 0x1c]
push edx
push eax
push ecx
push 0x3e9
call fcn.00437bf0
add esp, 0x14
jmp 0x41a58c
mov esi, dword [0x4c00e8]
xor ebx, ebx
cmp dword [esi*4 + 0x4c00f4], edi
je 0x417ca7
lea eax, [esp + 0x28]
lea ecx, [esi + esi*4]
push eax
lea edx, [ecx*8 + 4]
push edx
mov dword [esp + 0x30], ebx
call fcn.00437090
mov esi, eax
add esp, 8
cmp esi, ebx
je 0x417c9a
mov eax, dword [esp + 0x30]
test byte [eax], 1
je 0x417c6d
mov ecx, dword [0x6d6850]
cmp ecx, ebx
je 0x417c6d
push esi
call fcn.00440e40
push esi
call fcn.0043e4a0
mov eax, dword [0x4c00e8]
lea ecx, [esp + 0x2c]
lea edx, [eax + eax*4]
push ecx
lea eax, [edx*8 + 4]
push eax
mov dword [esp + 0x34], ebx
call fcn.00437090
mov esi, eax
add esp, 0xc
cmp esi, ebx
jne 0x417c54
mov esi, dword [0x4c00e8]
mov dword [esi*4 + 0x4c00f4], ebx
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov edi, dword [ebp + 4]
add ebp, 4
lea edx, [esp + 0x24]
add ebp, 4
mov dword [esp + 0x20], edi
mov eax, dword [ebp]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x30]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x2c]
add esp, 0x18
push ebx
lea eax, [esi + esi*4]
push edx
lea ecx, [eax*8 + 4]
push ecx
push 0xffffffffffffffff
push edi
add ebp, 4
call fcn.00402340
add esp, 4
push eax
call fcn.0043f7b0
push eax
mov dword [esp + 0x40], eax
call fcn.00436fa0
mov esi, eax
add esp, 0x18
cmp esi, ebx
je 0x410353
fild dword [esp + 0x20]
push ebx
sub esp, 8
fstp dword [esp + 4]
fild dword [esp + 0x28]
fstp dword [esp]
push esi
call fcn.0043a9a0
add esp, 0x10
cmp dword [0x4c00e8], ebx
jne 0x417d5e
mov edx, dword [esp + 0x30]
test byte [edx], 1
je 0x417d5e
cmp dword [0x6d6850], ebx
je 0x417d5e
push esi
call fcn.00404650
add esp, 4
mov eax, dword [esp + 0x18]
push eax
call fcn.0046ed00
mov ecx, dword [esp + 0x2c]
add esp, 4
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x2c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x38]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov ecx, dword [esp + 0x44]
add esp, 0x28
add ebp, 4
test cl, 4
mov esi, 1
jne 0x417df3
mov eax, dword [0x4c00e8]
mov dword [eax*4 + 0x4c00f4], esi
mov dword [eax*4 + 0x4c0094], esi
mov edx, dword [esp + 0x2c]
mov al, dl
not al
movzx eax, al
and eax, esi
test dword [0x6d03f8], 0x10000000
mov dword [0x4b8004], eax
je 0x41a5ab
test byte [0x6d8bd4], 0xf
je 0x417e2a
test eax, eax
je 0x417e2a
test dl, 2
jmp 0x41a5a4
mov eax, dword [esp + 0x18]
push edx
mov edx, dword [esp + 0x24]
push edx
push ecx
mov ecx, dword [esp + 0x20]
push eax
push ecx
call fcn.00437d90
mov edx, dword [0x4c00e8]
mov dword [edx*4 + 0x4c0114], eax
add esp, 0x14
mov dword [ebx], 0x13
jmp case.default.0x4138e6
cmp eax, 0x80010c04
ja 0x417fde
je 0x417f39
cmp eax, 0x80010a04
je 0x417e7d
cmp eax, 0x80010b04
jmp 0x41a4cb
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov cl, byte [esp + 0x34]
add esp, 0x18
add ebp, 4
test cl, 4
mov edx, 1
jne 0x417ed4
mov eax, dword [0x4c00e8]
mov dword [eax*4 + 0x4c00f4], edx
mov dword [eax*4 + 0x4c0094], edx
mov al, cl
not al
movzx eax, al
and eax, edx
test dword [0x6d03f8], 0x10000000
mov dword [0x4b8004], eax
je 0x41a5ab
cmp dword [esp + 0x18], esi
je 0x41a5a1
test byte [0x6d8bd4], 0xf
je 0x417f0d
test eax, eax
jne 0x41a5ab
mov ecx, dword [esp + 0x14]
push ecx
call fcn.0044a1f0
mov edx, dword [esp + 0x20]
mov eax, dword [0x4c00e8]
mov ecx, dword [esp + 0x1c]
push edx
push eax
push ecx
push 0x3ea
call fcn.00437bf0
add esp, 0x14
jmp 0x41a58c
mov esi, dword [ebp]
lea ecx, [esp + 0x18]
add ebp, 4
mov dword [esp + 0x14], esi
mov eax, dword [ebp]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x24]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x2c]
add esp, 0x10
add ebp, 4
test al, 4
mov edx, 1
jne 0x417f89
mov ecx, dword [0x4c00e8]
mov dword [ecx*4 + 0x4c00f4], edx
mov dword [ecx*4 + 0x4c0094], edx
mov cl, al
not cl
movzx ecx, cl
and ecx, edx
test dword [0x6d03f8], 0x10000000
mov dword [0x4b8004], ecx
je 0x41a5ab
test esi, esi
je 0x417fd7
test byte [0x6d8bd4], 0xf
je 0x417fbd
test ecx, ecx
jne 0x41a5ab
mov edx, dword [esp + 0x18]
push eax
push edx
push esi
call fcn.00402340
add esp, 4
push eax
call fcn.00437d40
jmp 0x417a9c
test al, 2
jmp 0x41a5a4
cmp eax, 0x80010d04
jne 0x41a4cd
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x2c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov ecx, dword [esp + 0x34]
add esp, 0x18
add ebp, 4
test cl, 4
mov edx, 1
jne 0x418040
mov eax, dword [0x4c00e8]
mov dword [eax*4 + 0x4c00f4], edx
mov dword [eax*4 + 0x4c0094], edx
mov al, cl
not al
movzx eax, al
and eax, edx
test dword [0x6d03f8], 0x10000000
mov dword [0x4b8004], eax
je 0x41a5ab
test byte [0x6d8bd4], 0xf
je 0x41806f
test eax, eax
jne 0x41a5ab
mov edx, dword [esp + 0x14]
push ecx
mov ecx, dword [esp + 0x1c]
push ecx
push edx
call fcn.0047a120
mov ecx, dword [0x4c00e8]
add esp, 0xc
test eax, eax
mov dword [ecx*4 + 0x4c0114], eax
je case.default.0x4138e6
mov dword [ebx], 0xa
jmp case.default.0x4138e6
mov eax, dword [ebp]
push 0
push 0
push 0xd
push 0xffffffffffffffff
push eax
mov dword [esp + 0x28], eax
add ebp, 4
call fcn.00402340
add esp, 4
push eax
call fcn.0043f7b0
add esp, 0x14
test eax, eax
mov dword [esp + 0x28], eax
je 0x40ec3c
push eax
call fcn.00436fa0
mov esi, eax
push esi
call fcn.00436260
mov edx, dword [0x6d03fc]
push edx
push esi
call fcn.004362c0
push 4
push 0
push esi
call fcn.00436ea0
add esp, 0x1c
cmp dword [0x4c00e8], edi
jne 0x41811c
mov eax, dword [esp + 0x30]
test byte [eax], 1
je 0x41811c
cmp dword [0x6d6850], edi
je 0x41811c
push esi
call fcn.00404650
add esp, 4
mov ecx, dword [esp + 0x28]
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
cmp eax, 0x80020a02
ja 0x4184e2
je 0x41845c
cmp eax, 0x80020402
ja 0x41833d
je 0x418312
cmp eax, 0x80020102
ja 0x4182ca
je 0x418248
cmp eax, 0x80020003
je 0x418183
cmp eax, 0x80020101
jne 0x41a4cd
push 0
push 1
push 1
call fcn.00405ec0
add esp, 0xc
jmp 0x41a5ab
mov esi, dword [ebp]
lea edx, [esp + 0x18]
add ebp, 4
mov dword [esp + 0x14], esi
mov eax, dword [ebp]
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x20]
add esp, 8
add ebp, 4
sub eax, 0
je 0x4181c2
sub eax, 1
je 0x4181b4
sub eax, 1
je 0x4181bb
mov eax, 0xd
jmp 0x4181c7
mov eax, 0xf
jmp 0x4181c7
mov eax, 0xb
push 0
push 0
push eax
push 0xffffffffffffffff
push esi
mov dword [esp + 0x2c], eax
call fcn.00402340
add esp, 4
push eax
call fcn.0043f7b0
add esp, 0x14
test eax, eax
mov dword [esp + 0x28], eax
je 0x407e64
push eax
call fcn.00436fa0
mov esi, eax
push esi
call fcn.00436260
mov eax, dword [0x6d03fc]
push eax
push esi
call fcn.004362c0
push 4
push 0
push esi
call fcn.00436ea0
add esp, 0x1c
cmp dword [0x4c00e8], edi
jne 0x418239
mov ecx, dword [esp + 0x30]
test byte [ecx], 1
je 0x418239
cmp dword [0x6d6850], edi
je 0x418239
push esi
call fcn.00404650
add esp, 4
mov edx, dword [esp + 0x28]
mov dword [0x6cf9a4], edx
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
push 0
push 1
push 1
add ebp, 4
call fcn.00405ec0
mov eax, dword [esp + 0x28]
add esp, 0x14
test eax, eax
js case.default.0x4138e6
je 0x41a5ab
test dword [0x6d03f8], 0x10000000
je 0x41a5ab
mov ecx, dword [0x6d03f4]
test ecx, ecx
je 0x41829a
push 1
call fcn.00402a10
push 0x1520
call fcn.00484d49
add esp, 4
mov dword [esp + 0x38], eax
test eax, eax
mov dword [esp + 0x3c8], 0xe
je 0x41871c
mov ecx, eax
call fcn.0043add0
jmp 0x41871e
cmp eax, 0x80020201
je 0x4182ff
cmp eax, 0x80020302
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x1c]
add esp, 8
add ebp, 4
mov dword [0x6d69cc], edx
jmp case.default.0x4138e6
push 0
push 1
push 0
call fcn.00405ec0
add esp, 0xc
jmp 0x41a5ab
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x14]
mov dword [0x6d8bb0], edx
jmp case.default.0x4138e6
cmp eax, 0x80020701
ja 0x4183e6
je 0x4183d7
cmp eax, 0x80020501
je 0x4183b4
cmp eax, 0x80020602
jne 0x41a4cd
mov eax, dword [ebp]
push 0
push 0
push 0x18
push 0xffffffffffffffff
push eax
mov dword [esp + 0x28], eax
add ebp, 4
call fcn.00402340
add esp, 4
push eax
call fcn.0043f7b0
add esp, 0x14
test eax, eax
mov dword [esp + 0x28], eax
je 0x40ec3c
push 4
push 0
push eax
call fcn.00436fa0
add esp, 4
push eax
call fcn.00436ea0
mov eax, dword [esp + 0x34]
add esp, 0xc
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
push 0
push 0
push 0
call fcn.00405ec0
push 0xf
push 0xb
call fcn.0043e590
push 0x14
call fcn.0043e4f0
add esp, 0x18
jmp case.default.0x4138e6
push 0x18
call fcn.0043e4f0
add esp, 4
jmp case.default.0x4138e6
cmp eax, 0x80020802
je 0x418407
cmp eax, 0x80020901
jne 0x41a4cd
push 0x19
call fcn.0043e4f0
add esp, 4
jmp case.default.0x4138e6
mov eax, dword [ebp]
push 0
push 0
push 0x19
push 0xffffffffffffffff
push eax
mov dword [esp + 0x28], eax
add ebp, 4
call fcn.00402340
add esp, 4
push eax
call fcn.0043f7b0
add esp, 0x14
test eax, eax
mov dword [esp + 0x28], eax
je 0x40ec3c
push 4
push 0
push eax
call fcn.00436fa0
add esp, 4
push eax
call fcn.00436ea0
mov ecx, dword [esp + 0x34]
add esp, 0xc
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test dword [0x6d03f8], 0x10000000
mov dword [0x4b8004], 1
je 0x4182ff
mov ecx, dword [0x6d03f4]
test ecx, ecx
je 0x41849b
push 1
call fcn.00402a10
push 0x1520
call fcn.00484d49
add esp, 4
mov dword [esp + 0x38], eax
test eax, eax
mov dword [esp + 0x3c8], 0xf
je 0x4184d1
mov ecx, eax
call fcn.0043add0
mov dword [0x6d03f4], eax
mov eax, dword [esp + 0x14]
push eax
jmp 0x418728
xor eax, eax
mov dword [0x6d03f4], eax
mov eax, dword [esp + 0x14]
push eax
jmp 0x418728
cmp eax, 0x80021303
ja 0x4187fb
je 0x418788
cmp eax, 0x80020d01
ja 0x4186b2
je 0x4186a3
cmp eax, 0x80020b02
je 0x4185d8
cmp eax, 0x80020c03
jne 0x41a4cd
mov esi, dword [ebp]
lea ecx, [esp + 0x18]
add ebp, 4
mov dword [esp + 0x14], esi
mov eax, dword [ebp]
push ecx
push eax
call fcn.00401070
mov eax, dword [esp + 0x20]
add esp, 8
add ebp, 4
sub eax, 0
je 0x418559
sub eax, 1
je 0x41854b
sub eax, 1
je 0x418552
mov eax, 0xe
jmp 0x41855e
mov eax, 0x10
jmp 0x41855e
mov eax, 0xc
push 0
push 0
push eax
push 0xffffffffffffffff
push esi
mov dword [esp + 0x2c], eax
call fcn.00402340
add esp, 4
push eax
call fcn.0043f7b0
add esp, 0x14
test eax, eax
mov dword [esp + 0x28], eax
je 0x407e64
push eax
call fcn.00436fa0
push 4
mov esi, eax
push 0
push esi
call fcn.00436ea0
add esp, 0x10
cmp dword [0x4c00e8], edi
jne 0x40e016
mov edx, dword [esp + 0x30]
test byte [edx], 1
je 0x40e016
cmp dword [0x6d6850], edi
je 0x40e016
push esi
call fcn.00404650
mov eax, dword [esp + 0x2c]
add esp, 4
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x1c]
lea eax, [esp + 0x30]
push eax
xor esi, esi
push 0xb
add ebp, 4
mov dword [0x6d03fc], edx
mov dword [esp + 0x38], esi
call fcn.00437090
add esp, 0x10
cmp eax, esi
je 0x41862e
lea esp, [esp]
mov ecx, dword [esp + 0x14]
push ecx
push eax
call fcn.004362c0
lea edx, [esp + 0x30]
push edx
push 0xb
call fcn.00437090
add esp, 0x10
cmp eax, esi
jne 0x418610
lea eax, [esp + 0x28]
push eax
push 0xd
mov dword [esp + 0x30], esi
call fcn.00437090
add esp, 8
cmp eax, esi
je 0x418663
mov ecx, dword [esp + 0x14]
push ecx
push eax
call fcn.004362c0
lea edx, [esp + 0x30]
push edx
push 0xd
call fcn.00437090
add esp, 0x10
cmp eax, esi
jne 0x418645
lea eax, [esp + 0x28]
push eax
push 0xf
mov dword [esp + 0x30], esi
call fcn.00437090
add esp, 8
cmp eax, esi
je case.default.0x4138e6
mov edi, edi
mov ecx, dword [esp + 0x14]
push ecx
push eax
call fcn.004362c0
lea edx, [esp + 0x30]
push edx
push 0xf
call fcn.00437090
add esp, 0x10
cmp eax, esi
jne 0x418680
jmp case.default.0x4138e6
mov eax, dword [0x6d03fc]
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
cmp eax, 0x80020e02
je 0x418765
cmp eax, 0x80021202
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov ecx, dword [0x6d03f4]
add esp, 8
add ebp, 4
test ecx, ecx
mov dword [0x4b8004], esi
je 0x4186f3
push 1
call fcn.00402a10
push 0x1520
call fcn.00484d49
add esp, 4
mov dword [esp + 0x38], eax
test eax, eax
mov dword [esp + 0x3c8], 0x10
je 0x41871c
mov ecx, eax
call fcn.0043add0
jmp 0x41871e
xor eax, eax
mov edx, dword [esp + 0x14]
mov dword [0x6d03f4], eax
push edx
push 1
mov dword [esp + 0x3d0], 0xffffffff
call fcn.00403420
add esp, 8
call fcn.00479090
mov ecx, dword [esp + 0x14]
lea edx, [eax + ecx]
mov ecx, dword [0x6d03f4]
push edx
push eax
mov dword [esp + 0x30], eax
call fcn.0043ae00
mov dword [ebx], 0x12
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x1c]
add esp, 8
add ebp, 4
mov dword [0x6d8bd8], edx
jmp case.default.0x4138e6
mov esi, dword [ebp]
lea ecx, [esp + 0x18]
add ebp, 4
mov dword [esp + 0x14], esi
mov eax, dword [ebp]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
cmp dword [esp + 0x18], edi
push 0
push 0
je 0x4187b4
push 0x1a
jmp 0x4187b6
push 0x1b
push 0xffffffffffffffff
push esi
call fcn.00402340
add esp, 4
push eax
call fcn.0043f7b0
add esp, 0x14
test eax, eax
mov dword [esp + 0x28], eax
je 0x407e64
push 4
push 0
push eax
call fcn.00436fa0
add esp, 4
push eax
call fcn.00436ea0
mov edx, dword [esp + 0x34]
add esp, 0xc
mov dword [0x6cf9a4], edx
jmp case.default.0x4138e6
cmp eax, 0x80030006
ja 0x418955
je 0x4188ba
cmp eax, 0x80021401
je 0x4188a4
cmp eax, 0x80030005
jne 0x41a4cd
mov eax, dword [ebp]
push 0x6d6860
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6864
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6868
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d686c
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
or eax, 0xffffffff
mov dword [0x6d6870], eax
mov dword [0x6d6874], eax
jmp case.default.0x4138e6
push 0x1a
call fcn.0043e4f0
push 0x1b
call fcn.0043e4f0
add esp, 8
jmp case.default.0x4138e6
mov eax, dword [ebp]
push 0x6d6860
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6864
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6868
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d686c
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6870
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov dword [0x6d6874], 0xffffffff
jmp case.default.0x4138e6
cmp eax, 0x80030007
jne 0x41a4cd
mov eax, dword [ebp]
push 0x6d6860
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6864
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6868
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d686c
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6870
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
push 0x6d6874
jmp 0x407307
call fcn.00406c60
test al, al
je case.default.0x4138e6
mov ebp, dword [0x4c00ec]
jmp case.default.0x4138e6
cmp eax, 0x80060301
ja 0x4192b0
je 0x419267
cmp eax, 0x80030d07
ja 0x418f75
je 0x418edf
cmp eax, 0x80030701
ja 0x418ba4
je 0x418b95
cmp eax, 0x80030401
ja 0x418b11
je 0x418a90
cmp eax, 0x80030201
je 0x418a78
cmp eax, 0x80030301
jne 0x41a4cd
cmp byte [0x4c0170], 0
je case.default.0x4138e6
mov dword [ebx], 0x66
jmp case.default.0x4138e6
cmp byte [0x4c0170], 0
je case.default.0x4138e6
mov dword [ebx], 0x65
jmp case.default.0x4138e6
cmp byte [0x4c0170], 0
je case.default.0x4138e6
push 0x44
call fcn.00484d49
mov esi, eax
add esp, 4
test esi, esi
je case.default.0x4138e6
push esi
call fcn.00459370
add esp, 4
test al, al
je 0x418b03
cmp dword [esi], edi
je 0x418b03
mov ecx, dword [esi + 4]
lea eax, [esp + 0x48]
push eax
push ecx
call fcn.00470110
add esp, 8
test eax, eax
mov dword [esp + 0x28], eax
je 0x418b03
mov edx, dword [0x6d4484]
imul edx, eax
mov eax, 0xd1b71759
mul edx
mov eax, dword [esp + 0x48]
shr edx, 0xd
push edx
mov dword [esp + 0x2c], edx
push eax
push 0xffffffffffffffff
push esi
call fcn.00468e10
add esp, 0x10
push esi
call fcn.00484cad
add esp, 4
jmp case.default.0x4138e6
cmp eax, 0x80030501
je 0x418b78
cmp eax, 0x80030602
jne 0x41a4cd
mov eax, dword [ebp]
push 0
push 0
push 0x16
push 0xffffffffffffffff
push eax
mov dword [esp + 0x28], eax
add ebp, 4
call fcn.00402340
add esp, 4
push eax
call fcn.0043f7b0
add esp, 0x14
test eax, eax
mov dword [esp + 0x28], eax
je 0x40ec3c
push 4
push 0
push eax
call fcn.00436fa0
add esp, 4
push eax
call fcn.00436ea0
mov ecx, dword [esp + 0x34]
add esp, 0xc
mov dword [0x6cf9a4], ecx
jmp case.default.0x4138e6
cmp byte [0x4c0170], 0
je case.default.0x4138e6
call fcn.00406b90
mov ebp, dword [0x4c00ec]
jmp case.default.0x4138e6
push 0x16
call fcn.0043e4f0
add esp, 4
jmp case.default.0x4138e6
cmp eax, 0x80030a01
ja 0x418bf6
je 0x418bec
cmp eax, 0x80030801
je 0x418bd5
cmp eax, 0x80030901
jne 0x41a4cd
xor edx, edx
cmp byte [0x4c0170], dl
setne dl
mov dword [0x6cf9a4], edx
jmp case.default.0x4138e6
cmp byte [0x4c0170], 0
je case.default.0x4138e6
call fcn.00406b90
jmp case.default.0x4138e6
call fcn.0045a550
jmp case.default.0x4138e6
cmp eax, 0x80030b14
jb 0x41a4cd
cmp eax, 0x80030b15
jbe 0x418c9b
cmp eax, 0x80030c05
jne 0x41a4cd
mov esi, dword [ebp]
lea ecx, [esp + 0x18]
add ebp, 4
mov dword [esp + 0x14], esi
mov eax, dword [ebp]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x1c]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x20]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
push edx
push eax
push ecx
push esi
call fcn.00402340
add esp, 4
push eax
call fcn.00458a80
add esp, 0x10
jmp case.default.0x4138e6
mov eax, dword [ebp]
push 0x6d69d0
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d69d4
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d69d8
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d69dc
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d69e0
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d69e4
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d69e8
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d69ec
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d69f0
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d69f4
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d69f8
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d69fc
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6a00
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6a04
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6a08
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6a0c
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6a10
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6a14
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6a18
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6a1c
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [0x6d8c00]
push edx
call fcn.00458a30
add esp, 4
jmp case.default.0x4138e6
mov eax, dword [ebp]
push 0x6d6a20
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6a24
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6a28
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6a2c
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6a30
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
push 0x6d6a34
jmp 0x407307
cmp eax, 0x80050102
ja 0x4190a2
je 0x419074
cmp eax, 0x80040201
ja 0x418fea
je 0x418fde
cmp eax, 0x80030e02
jb 0x41a4cd
cmp eax, 0x80030e03
jbe 0x418fb8
cmp eax, 0x80040101
jne 0x41a4cd
or dword [0x6d048c], 1
jmp case.default.0x4138e6
mov eax, dword [ebp]
push 0x6d6a38
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
push 0x6d6a3c
jmp 0x407307
and dword [0x6d048c], 0xfffffffe
jmp case.default.0x4138e6
cmp eax, 0x80040301
je 0x419035
cmp eax, 0x80050005
jne 0x41a4cd
mov eax, dword [ebp]
add ebp, 4
mov dword [esp + 0x14], eax
mov ecx, dword [ebp]
add ebp, 4
mov dword [esp + 0x18], ecx
mov edx, dword [ebp]
add ebp, 4
mov dword [esp + 0x1c], edx
mov esi, dword [ebp]
push esi
push edx
push ecx
push eax
mov dword [esp + 0x30], esi
add ebp, 4
call fcn.004568e0
add esp, 0x10
jmp case.default.0x4138e6
xor esi, esi
jmp 0x419040
mov eax, dword [esi + 0x6d8bdc]
push eax
call fcn.004722d0
push eax
call fcn.004750c0
mov ecx, dword [esi + 0x6d8bfc]
push ecx
call fcn.004722d0
push eax
call fcn.004750c0
add esi, 4
add esp, 0x10
cmp esi, 0x14
jl 0x419040
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
push eax
call fcn.004568a0
add esp, 4
jmp case.default.0x4138e6
cmp eax, 0x80060104
ja 0x419213
je 0x41915a
cmp eax, 0x80050202
je 0x41911c
cmp eax, 0x80050302
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
test eax, eax
je 0x41910d
push eax
call fcn.00479090
push eax
push 0
call fcn.00455fc0
add esp, 0xc
test al, al
je case.default.0x4138e6
mov dword [ebx], 0x14
jmp case.default.0x4138e6
push 0
call fcn.00456440
add esp, 4
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [esp + 0x14]
test eax, eax
je 0x41914b
push eax
call fcn.00479090
push eax
push 1
jmp 0x4190f2
push 1
call fcn.00456440
add esp, 4
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov edx, dword [ebp + 4]
add ebp, 4
lea ecx, [esp + 0x24]
mov dword [esp + 0x20], edx
mov eax, dword [ebp + 4]
add ebp, 4
push ecx
push eax
call fcn.00401070
lea edx, [esp + 0x38]
push edx
push 0x13
xor edi, edi
push 0x11
add ebp, 4
mov dword [esp + 0x44], edi
call fcn.00437120
mov ebx, dword [esp + 0x4c]
mov esi, eax
add esp, 0x1c
cmp esi, edi
je 0x4191dd
test byte [ebx], 1
je 0x4191bc
mov ecx, dword [0x6d6850]
cmp ecx, edi
je 0x4191bc
push esi
call fcn.00440e40
push esi
call fcn.0043e4a0
lea eax, [esp + 0x2c]
push eax
push 0x13
push 0x11
mov dword [esp + 0x38], edi
call fcn.00437120
mov esi, eax
add esp, 0x10
cmp esi, edi
jne 0x4191a7
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
push ebx
push edi
push ecx
push edx
push eax
call fcn.00402340
add esp, 4
push eax
call fcn.004061a0
mov ecx, dword [esp + 0x2c]
push ecx
mov dword [0x6cf9a4], eax
call fcn.0046ed00
add esp, 0x18
jmp case.default.0x4138e6
cmp eax, 0x80060201
jne 0x41a4cd
lea edx, [esp + 0x28]
push edx
push 0x13
push 0x11
mov dword [esp + 0x34], esi
call fcn.00437120
add esp, 0xc
test eax, eax
je 0x419256
push 3
push 1
push eax
call fcn.00436ea0
lea eax, [esp + 0x34]
push eax
push 0x13
push 0x11
call fcn.00437120
add esp, 0x18
test eax, eax
jne 0x419237
push 1
push 1
call fcn.00403780
add esp, 8
jmp case.default.0x4138e6
lea ecx, [esp + 0x28]
push ecx
push 0x13
push 0x11
mov dword [esp + 0x34], esi
call fcn.00437120
add esp, 0xc
test eax, eax
je 0x41929f
push 3
push 0
push eax
call fcn.00436ea0
lea edx, [esp + 0x34]
push edx
push 0x13
push 0x11
call fcn.00437120
add esp, 0x18
test eax, eax
jne 0x419280
push 0
push 1
call fcn.00403780
add esp, 8
jmp case.default.0x4138e6
cmp eax, 0xf002000f
ja 0x419c27
je 0x419ab1
cmp eax, 0xf000000a
ja 0x41975c
je 0x41967a
cmp eax, 0x80070105
ja 0x41951a
je 0x419413
cmp eax, 0x80060401
je 0x4193b3
cmp eax, 0x80060504
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov edx, dword [ebp + 4]
add ebp, 4
lea ecx, [esp + 0x24]
mov dword [esp + 0x20], edx
mov eax, dword [ebp + 4]
add ebp, 4
push ecx
push eax
call fcn.00401070
lea edx, [esp + 0x38]
push edx
push 0x13
xor edi, edi
push 0x11
add ebp, 4
mov dword [esp + 0x44], edi
call fcn.00437120
mov ebx, dword [esp + 0x4c]
mov esi, eax
add esp, 0x1c
cmp esi, edi
je 0x41937c
test byte [ebx], 1
je 0x41935b
mov ecx, dword [0x6d6850]
cmp ecx, edi
je 0x41935b
push esi
call fcn.00440e40
push esi
call fcn.0043e4a0
lea eax, [esp + 0x2c]
push eax
push 0x13
push 0x11
mov dword [esp + 0x38], edi
call fcn.00437120
mov esi, eax
add esp, 0x10
cmp esi, edi
jne 0x419346
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
push ebx
push 1
push ecx
push edx
push eax
call fcn.00402340
add esp, 4
push eax
call fcn.004061a0
mov ecx, dword [esp + 0x2c]
push ecx
mov dword [0x6cf9a4], eax
call fcn.0046ed00
add esp, 0x18
jmp case.default.0x4138e6
lea edx, [esp + 0x28]
push edx
push 0x13
xor edi, edi
push 0x11
mov dword [esp + 0x34], edi
call fcn.00437120
mov esi, eax
add esp, 0xc
cmp esi, edi
je case.default.0x4138e6
mov ebx, dword [esp + 0x30]
test byte [ebx], 1
je 0x4193ed
mov ecx, dword [0x6d6850]
cmp ecx, edi
je 0x4193ed
push esi
call fcn.00440e40
push esi
call fcn.0043e4a0
lea eax, [esp + 0x2c]
push eax
push 0x13
push 0x11
mov dword [esp + 0x38], edi
call fcn.00437120
mov esi, eax
add esp, 0x10
cmp esi, edi
jne 0x4193d8
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov ecx, dword [0x6d8ce8]
add esp, 0x28
add ebp, 4
test ecx, ecx
je 0x41947c
push 1
call fcn.004029d0
push 0x80
call fcn.00484d49
add esp, 4
mov dword [esp + 0x38], eax
test eax, eax
mov dword [esp + 0x3c8], 0x11
je 0x4194a5
mov ecx, eax
call fcn.004643e0
jmp 0x4194a7
xor eax, eax
test eax, eax
mov dword [esp + 0x3c8], 0xffffffff
mov dword [0x6d8ce8], eax
je case.default.0x4138e6
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
push edx
mov edx, dword [esp + 0x1c]
push ecx
mov ecx, dword [esp + 0x1c]
push edx
push ecx
mov ecx, eax
call fcn.00464d20
mov edx, dword [esp + 0x2c]
mov ecx, dword [0x6d8ce8]
push edx
call fcn.00464400
mov ecx, dword [0x6d8ce8]
push 0
call fcn.00464430
push 0
mov ecx, dword [0x6d8ce8]
call fcn.004644a0
mov ecx, dword [0x6d8ce8]
call fcn.00464f80
mov dword [ebx], 0x1e
jmp case.default.0x4138e6
cmp eax, 0x80070108
je 0x41956e
cmp eax, 0x80070201
jne 0x41a4cd
mov ecx, dword [0x6d8ce8]
cmp ecx, edi
je case.default.0x4138e6
cmp dword [ebx], 0x1e
jne 0x41955d
push 1
call fcn.004029d0
mov dword [0x6d8ce8], esi
mov dword [ebx], esi
mov dword [0x6cf9a4], 0xffffffff
jmp case.default.0x4138e6
push 0x1f
push 0x1e
call fcn.0046fbc0
add esp, 8
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x44]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
add ebp, 4
push eax
call fcn.00402340
lea edx, [esp + 0x58]
mov esi, eax
mov eax, dword [ebp + 4]
add ebp, 4
push edx
push eax
call fcn.00401070
mov ecx, dword [0x6d8ce8]
add esp, 0x34
add ebp, 4
test ecx, ecx
je 0x4195f6
push 1
call fcn.004029d0
push 0x80
call fcn.00484d49
add esp, 4
mov dword [esp + 0x38], eax
test eax, eax
mov dword [esp + 0x3c8], 0x12
je 0x41961f
mov ecx, eax
call fcn.004643e0
jmp 0x419621
xor eax, eax
test eax, eax
mov dword [esp + 0x3c8], 0xffffffff
mov dword [0x6d8ce8], eax
je case.default.0x4138e6
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push ecx
mov ecx, dword [esp + 0x1c]
push edx
mov edx, dword [esp + 0x1c]
push ecx
push edx
mov ecx, eax
call fcn.00464d20
mov eax, dword [esp + 0x2c]
mov ecx, dword [0x6d8ce8]
push eax
call fcn.00464400
mov ecx, dword [0x6d8ce8]
push esi
call fcn.00464430
mov ecx, dword [esp + 0x24]
push ecx
jmp 0x4194f9
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x2c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x38]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x64]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x78]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
add esp, 0x40
lea edx, [esp + 0x30]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x3c]
add esp, 8
push eax
mov eax, dword [esp + 0x28]
push ecx
mov ecx, dword [esp + 0x34]
push edx
mov edx, dword [esp + 0x2c]
push eax
mov eax, dword [esp + 0x2c]
push ecx
mov ecx, dword [esp + 0x2c]
push edx
mov edx, dword [esp + 0x2c]
push eax
push ecx
push edx
add ebp, 4
call fcn.00436fa0
add esp, 4
push eax
call fcn.00438190
add esp, 0x24
jmp case.default.0x4138e6
cmp eax, 0xf0000301
ja 0x419830
je 0x419810
cmp eax, 0xf0000101
je 0x4197d4
cmp eax, 0xf0000201
jne 0x41a4cd
push str.sakura.epa
mov dword [0x6d8c94], 1
call fcn.004662f0
push 0x100
push 5
call fcn.004663b0
push 0x3c
push 4
call fcn.004663b0
push 0
push 3
call fcn.004663b0
push 0xa
push 8
call fcn.004663b0
push 0x64
call fcn.00466bf0
mov eax, dword [esp + 0x58]
add esp, 0x28
or dword [eax], 8
jmp case.default.0x4138e6
call fcn.004650c0
push 0x100
push 5
call fcn.00465140
push 0x7d0
push 4
call fcn.00465140
push 0
push 3
call fcn.00465140
push 0
call fcn.004661d0
mov eax, dword [esp + 0x4c]
add esp, 0x1c
or dword [eax], 4
jmp case.default.0x4138e6
fld1
push ecx
fstp dword [esp]
push 0x10
push 0x10
push 0x40
push 0x100
push 0
call fcn.00462bc0
add esp, 0x18
jmp case.default.0x4138e6
cmp eax, 0xf0000308
je 0x419980
cmp eax, 0xf0000408
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x64]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x54]
mov esi, dword [esp + 0x64]
mov edi, dword [esp + 0x5c]
mov ebx, dword [esp + 0x6c]
mov dword [0x6d8c98], edx
mov edx, dword [esp + 0x58]
push str.sys_confetti.epa
add ebp, 4
mov dword [0x6d8c94], 0x65
mov dword [0x6d8c9c], eax
mov dword [0x6d8ca0], ecx
mov dword [0x6d8ca4], edx
mov dword [0x6d8ca8], esi
mov dword [0x6d8cac], edi
mov dword [0x6d8cb0], ebx
call fcn.004662f0
push 2
push 0xc
call fcn.004663b0
mov eax, dword [esp + 0x58]
add esp, 0x44
push eax
push 3
call fcn.004663b0
mov ecx, dword [esp + 0x20]
push ecx
push 9
call fcn.004663b0
mov edx, dword [esp + 0x2c]
push edx
push 4
call fcn.004663b0
mov eax, dword [esp + 0x38]
push eax
push 8
call fcn.004663b0
push esi
push 0xa
call fcn.004663b0
push edi
push 0xb
call fcn.004663b0
push ebx
push 5
call fcn.004663b0
push 0x64
call fcn.00466bf0
mov eax, dword [esp + 0x6c]
add esp, 0x3c
or dword [eax], 8
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x20]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x2c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x38]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x4c]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x4c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x64]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x54]
mov esi, dword [esp + 0x64]
mov edi, dword [esp + 0x5c]
mov ebx, dword [esp + 0x6c]
mov dword [0x6d8c98], edx
mov edx, dword [esp + 0x58]
push str.sys_leaf.epa
add ebp, 4
mov dword [0x6d8c94], 0x64
mov dword [0x6d8c9c], eax
mov dword [0x6d8ca0], ecx
mov dword [0x6d8ca4], edx
mov dword [0x6d8ca8], esi
mov dword [0x6d8cac], edi
mov dword [0x6d8cb0], ebx
call fcn.004662f0
mov eax, dword [esp + 0x50]
push eax
push 3
call fcn.004663b0
mov ecx, dword [esp + 0x5c]
add esp, 0x44
push ecx
push 9
call fcn.004663b0
mov edx, dword [esp + 0x24]
push edx
push 4
call fcn.004663b0
mov eax, dword [esp + 0x30]
push eax
push 8
call fcn.004663b0
push esi
push 0xa
call fcn.004663b0
push edi
push 0xb
call fcn.004663b0
push ebx
push 5
call fcn.004663b0
push 0x64
call fcn.00466bf0
mov eax, dword [esp + 0x64]
add esp, 0x34
or dword [eax], 8
jmp case.default.0x4138e6
mov eax, dword [ebp]
push 0x6d69d0
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d69d4
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d69d8
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d69dc
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d69e0
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d69e4
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d69e8
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d69ec
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d69f0
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d69f4
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d69f8
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d69fc
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6a00
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
push 0x6d6a04
jmp 0x407307
cmp eax, 0xf0020602
ja 0x41a183
je 0x419fd5
cmp eax, 0xf0020302
ja 0x419ee8
je 0x419d46
cmp eax, 0xf0020101
je 0x419d3c
cmp eax, 0xf0020209
jne 0x41a4cd
mov eax, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x1c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea edx, [esp + 0x20]
push edx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
lea ecx, [esp + 0x2c]
push ecx
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov edx, dword [ebp]
mov eax, dword [ebp + 4]
add ebp, 4
mov ecx, dword [ebp + 4]
add ebp, 4
push ecx
push eax
mov dword [esp + 0x30], ecx
add ebp, 4
call fcn.00402340
add esp, 4
push eax
push edx
call fcn.00402340
mov edx, dword [esp + 0x38]
mov ecx, dword [esp + 0x28]
add esp, 4
push eax
mov eax, dword [esp + 0x2c]
push edx
mov edx, dword [esp + 0x28]
push eax
mov eax, dword [esp + 0x28]
push ecx
push edx
push eax
call fcn.00458ae0
add esp, 0x20
jmp case.default.0x4138e6
call fcn.00458ab0
jmp case.default.0x4138e6
mov ecx, dword [ebp]
mov dword [esp + 0x28], ecx
add ebp, 4
call fcn.00459da0
mov dword [esp + 0x14], eax
call fcn.00459dc0
mov esi, eax
test esi, esi
je case.default.0x4138e6
call fcn.00406b90
push 0
push esi
call fcn.00471610
add esp, 8
test eax, eax
je case.default.0x4138e6
mov edx, dword [esp + 0x14]
push edx
call fcn.0045a480
push 0
push 0xffffffffffffffff
mov dword [0x4c00e8], edi
call fcn.00404830
mov ecx, dword [esp + 0x3c]
mov dword [ecx], eax
mov eax, dword [0x6d63c8]
add esp, 0xc
test eax, eax
je 0x419dea
mov edx, eax
shr edx, 0x1f
and edx, 1
and eax, 0xfffffff
push edx
push eax
call fcn.00402340
add esp, 4
push eax
call fcn.00468a80
add esp, 8
call fcn.00468b50
test dword [0x6d63c8], 0x40000000
je 0x419def
push 0
push 0
call fcn.00468c70
add esp, 8
jmp 0x419def
call fcn.00468af0
push 0
push 0xffffffffffffffff
call fcn.004689c0
add esp, 8
mov esi, 0x6d8ae0
cmp dword [esi - 8], edi
je 0x419e83
mov eax, dword [esi]
mov ecx, dword [esi + 4]
mov edx, dword [esi - 4]
push 0
push eax
push ecx
push edx
call fcn.00402340
add esp, 4
cmp dword [esi + 0xc], edi
push eax
je 0x419e2b
call fcn.00468880
jmp 0x419e30
call fcn.00468770
mov ecx, dword [esi + 8]
add esp, 0x10
test ecx, ecx
mov dword [esp + 0x14], eax
je 0x419e4c
push ecx
push eax
call fcn.004689f0
mov eax, dword [esp + 0x1c]
add esp, 8
mov ecx, dword [esi + 4]
mov edx, ecx
and edx, 0xffff0000
cmp edx, 0x80000000
je 0x419e76
cmp edx, 0x80010000
jne 0x419e83
and ecx, 0xffff
mov dword [ecx*4 + 0x6d4488], eax
jmp 0x419e83
and ecx, 0xffff
mov dword [ecx*4 + 0x6d0490], eax
add esi, 0x18
cmp esi, 0x6d8bb8
jl 0x419e00
mov eax, dword [0x6d2530]
push eax
mov byte [0x4c0170], 0
call fcn.004023b0
add esp, 4
cmp dword [esp + 0x28], edi
mov ebp, eax
je case.default.0x4138e6
mov ecx, dword [0x4c00e8]
push ecx
push 0
mov edx, ebp
sub edx, dword [0x4c017c]
push 0
push edx
call fcn.0046fab0
add esp, 0x10
test eax, eax
je case.default.0x4138e6
mov eax, dword [0x4c017c]
mov ecx, dword [esp + 0x28]
lea ebp, [eax + ecx]
jmp case.default.0x4138e6
cmp eax, 0xf0020401
je 0x419f5c
cmp eax, 0xf0020505
jne 0x41a4cd
mov eax, dword [ebp]
push 0x6d6a40
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6a44
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6a48
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
push 0x6d6a4c
jmp 0x407307
cmp byte [0x4c0170], 0
je case.default.0x4138e6
push 0x44
call fcn.00484d49
mov esi, eax
add esp, 4
test esi, esi
je case.default.0x4138e6
push esi
call fcn.00459df0
add esp, 4
test al, al
je 0x418b03
cmp dword [esi], edi
je 0x418b03
mov eax, dword [esi + 4]
lea edx, [esp + 0x48]
push edx
push eax
call fcn.00470110
add esp, 8
test eax, eax
mov dword [esp + 0x28], eax
je 0x418b03
mov ecx, dword [0x6d4484]
imul ecx, eax
mov eax, 0xd1b71759
mul ecx
shr edx, 0xd
push edx
mov dword [esp + 0x2c], edx
mov edx, dword [esp + 0x4c]
push edx
jmp 0x418af8
mov eax, dword [ebp]
lea ecx, [esp + 0x18]
push ecx
mov dword [esp + 0x18], eax
add ebp, 4
call fcn.00459e90
mov esi, eax
add esp, 4
test esi, esi
je case.default.0x4138e6
push 0
push 0
call fcn.00470480
push 1
push esi
call fcn.00471610
add esp, 0x10
test eax, eax
je 0x40abd9
call fcn.0045a4e0
push 0
push 0xffffffffffffffff
mov dword [0x4c00e8], edi
call fcn.00404830
mov edx, dword [esp + 0x38]
mov dword [edx], eax
mov eax, dword [0x6d63c8]
add esp, 8
test eax, eax
je 0x41a077
mov ecx, eax
shr ecx, 0x1f
and ecx, 1
push ecx
and eax, 0xfffffff
push eax
call fcn.00402340
add esp, 4
push eax
call fcn.00468a80
add esp, 8
call fcn.00468b50
test dword [0x6d63c8], 0x40000000
je 0x41a07c
push 0
push 0
call fcn.00468c70
add esp, 8
jmp 0x41a07c
call fcn.00468af0
push 0
push 0xffffffffffffffff
call fcn.004689c0
add esp, 8
mov esi, 0x6d8ae0
lea ecx, [ecx]
cmp dword [esi - 8], edi
je 0x41a113
mov edx, dword [esi]
mov eax, dword [esi + 4]
mov ecx, dword [esi - 4]
push 0
push edx
push eax
push ecx
call fcn.00402340
add esp, 4
cmp dword [esi + 0xc], edi
push eax
je 0x41a0bb
call fcn.00468880
jmp 0x41a0c0
call fcn.00468770
mov ecx, dword [esi + 8]
add esp, 0x10
test ecx, ecx
mov dword [esp + 0x28], eax
je 0x41a0dc
push ecx
push eax
call fcn.004689f0
mov eax, dword [esp + 0x30]
add esp, 8
mov ecx, dword [esi + 4]
mov edx, ecx
and edx, 0xffff0000
cmp edx, 0x80000000
je 0x41a106
cmp edx, 0x80010000
jne 0x41a113
and ecx, 0xffff
mov dword [ecx*4 + 0x6d4488], eax
jmp 0x41a113
and ecx, 0xffff
mov dword [ecx*4 + 0x6d0490], eax
add esi, 0x18
cmp esi, 0x6d8bb8
jl 0x41a090
mov edx, dword [0x6d2530]
push edx
mov byte [0x4c0170], 0
mov dword [0x4c018c], 1
call fcn.004023b0
add esp, 4
cmp dword [esp + 0x14], edi
mov ebp, eax
je case.default.0x4138e6
mov eax, dword [0x4c00e8]
push eax
push 0
mov ecx, ebp
sub ecx, dword [0x4c017c]
push 0
push ecx
call fcn.0046fab0
add esp, 0x10
test eax, eax
je case.default.0x4138e6
mov edx, dword [0x4c017c]
mov eax, dword [esp + 0x14]
lea ebp, [edx + eax]
jmp case.default.0x4138e6
cmp eax, 0xf003011b
ja 0x41a4c6
je 0x41a1c6
cmp eax, 0xf0020701
je 0x41a1b7
cmp eax, 0xf0020801
jne 0x41a4cd
call fcn.00459ed0
neg eax
sbb eax, eax
neg eax
mov dword [0x6cf9a4], eax
jmp case.default.0x4138e6
call fcn.00459e30
call fcn.00459e80
jmp case.default.0x4138e6
mov eax, dword [ebp]
push 0x6d69d0
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d69d4
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6a20
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6a24
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6a08
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6a0c
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6a28
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6a2c
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d69f8
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d69f0
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d69f4
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6a00
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6a04
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d69fc
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6a18
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6a30
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6a34
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d69e0
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d69d8
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d69dc
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d69e8
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d69ec
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d69e4
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6a1c
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6a10
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov eax, dword [ebp]
push 0x6d6a14
push eax
call fcn.00401070
add esp, 8
add ebp, 4
test eax, eax
je 0x40731e
mov ecx, dword [0x6d8c00]
or dword [0x6d6a18], 0x80000000
or dword [0x6d6a1c], 0x80000000
push ecx
call fcn.00458a30
add esp, 4
jmp case.default.0x4138e6
cmp eax, 0xff010004
je 0x41a4e5
movzx eax, byte [ebp - 4]
sub ebp, 4
cmp eax, edi
je 0x40731e
lea ebp, [ebp + eax*4]
jmp case.default.0x4138e6
mov eax, dword [ebp]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
add ebp, 4
push ecx
push eax
call fcn.00401070
mov eax, dword [ebp + 4]
lea edx, [esp + 0x2c]
add ebp, 4
push edx
push eax
call fcn.00401070
mov ecx, dword [esp + 0x34]
mov esi, dword [0x4c00e8]
add esp, 0x18
add ebp, 4
test cl, 4
mov edi, 1
jne 0x41a53d
mov dword [esi*4 + 0x4c00f4], edi
mov dword [esi*4 + 0x4c0094], edi
mov al, cl
not al
movzx edx, al
mov eax, dword [esp + 0x14]
and edx, edi
cmp eax, 0x64
mov dword [0x4b8004], edx
jb 0x41a55f
mov dword [esp + 0x18], eax
mov eax, edi
mov dword [esp + 0x14], eax
test dword [0x6d03f8], 0x10000000
je 0x41a5ab
test eax, eax
je 0x41a5a1
test byte [0x6d8bd4], 0xf
je 0x41a57c
test edx, edx
jne 0x41a5ab
push ecx
mov ecx, dword [esp + 0x1c]
push esi
push ecx
push eax
call fcn.00437bf0
add esp, 0x10
mov edx, dword [0x4c00e8]
mov dword [edx*4 + 0x4c0114], eax
mov dword [ebx], 0xa
jmp case.default.0x4138e6
test cl, 2
je 0x41a5ab
call fcn.004791c0
mov dword [ebx], 8
mov eax, ebp
mov ecx, dword [esp + 0x3c0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x3a8]
xor ecx, esp
call fcn.00484c9e
add esp, 0x3b8
ret