Function at 0x416c60
Capabilities:
Terminate process

Disassembly:
push 0xffffffffffffffff
push 0x4787ad
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2a4
mov eax, dword [0x486090]
xor eax, dword [esp + 0x2b0]
push ebx
mov ebx, dword [0x47a0ec]
push ebp
push esi
push edi
mov edi, dword [esp + 0x2c4]
push 0x47b2bc
push edi
mov dword [esp + 0x2b8], eax
mov esi, ecx
call ebx
test eax, eax
je 0x417b7e
push str.CgBg
push edi
call ebx
test eax, eax
je 0x417b7e
push 0x47b2b0
push edi
call ebx
test eax, eax
je 0x417b4c
push str.CgMidAuto
push edi
call ebx
test eax, eax
je 0x417b4c
push 0x47b2a0
push edi
call ebx
test eax, eax
jne 0x416df4
mov eax, dword [esi + 4]
lea ecx, [esi + 4]
push edi
call dword [eax + 0x88]
mov bl, al
push edi
mov ecx, esi
mov byte [esp + 0x18], bl
call fcn.00415e30
movzx eax, bl
add eax, 0xfffffff1
cmp eax, 6
ja case.0x416d1b.16
jmp dword [eax*4 + 0x417c38]
push 0x4f
mov ecx, esi
call fcn.00415ac0
mov edx, dword [esi + 0x30]
lea edi, [esi + 0x30]
push 0x20
mov ecx, edi
call dword [edx + 0x78]
push 0x4d
mov ecx, esi
call fcn.00415ac0
mov eax, dword [edi]
push 0x17
mov ecx, edi
call dword [eax + 0x80]
mov eax, 1
jmp 0x417c07
push 0x4d
mov ecx, esi
call fcn.00415ac0
mov edx, dword [esi + 0x30]
lea ecx, [esi + 0x30]
push 0x15
call dword [edx + 0x80]
mov eax, 1
jmp 0x417c07
push 0x50
mov ecx, esi
call fcn.00415ac0
mov eax, dword [esi + 0x30]
add esi, 0x30
push 0
mov ecx, esi
call dword [eax + 0x78]
push 0x1e
jmp 0x416daa
push 0x50
mov ecx, esi
call fcn.00415ac0
mov eax, dword [esi + 0x30]
add esi, 0x30
push 0x1e
mov ecx, esi
call dword [eax + 0x78]
push 0
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x78]
mov eax, dword [esi]
push 0x50
mov ecx, esi
call dword [eax + 0x78]
mov edx, dword [esi]
push 0x190
mov ecx, esi
call dword [edx + 0x78]
mov eax, 1
jmp 0x417c07
push 0x4d
mov ecx, esi
call fcn.00415ac0
mov edx, dword [esp + 0x14]
mov eax, dword [esi + 0x30]
lea ecx, [esi + 0x30]
push edx
call dword [eax + 0x80]
mov eax, 1
jmp 0x417c07
push 0x47b29c
push edi
call ebx
test eax, eax
je 0x417b09
push str.CgMid
push edi
call ebx
test eax, eax
je 0x417b09
push 0x47b290
push edi
call ebx
test eax, eax
je 0x417ac3
push str.ReturnTitle
push edi
call ebx
test eax, eax
je 0x417ac3
push 0x47b280
push edi
call ebx
test eax, eax
je 0x417a84
push str.CgMidDelete
push edi
call ebx
test eax, eax
je 0x417a84
push str.RecordStart
push edi
call ebx
test eax, eax
je 0x417a6a
push str.RecS
push edi
call ebx
test eax, eax
je 0x417a6a
push str.Wait
push edi
call ebx
test eax, eax
je 0x417a2c
push 0x47b254
push edi
call ebx
test eax, eax
je 0x417a2c
push str.FlagStand
push edi
call ebx
test eax, eax
je 0x4179e5
push 0x47b244
push edi
call ebx
test eax, eax
je 0x4179e5
push str.FlagSet
push edi
call ebx
test eax, eax
je 0x417983
push str.FSet
push edi
call ebx
test eax, eax
je 0x417983
push str.FlagAdd
push edi
call ebx
test eax, eax
je 0x41794a
push str.FAdd
push edi
call ebx
test eax, eax
je 0x41794a
push str.FlagSub
push edi
call ebx
test eax, eax
je 0x417911
push str.FSub
push edi
call ebx
test eax, eax
je 0x417911
push str.FlagInc
push edi
call ebx
test eax, eax
je 0x4178f5
push str.FInc
push edi
call ebx
test eax, eax
je 0x4178f5
push str.FlagDec
push edi
call ebx
test eax, eax
je 0x4178d9
push str.FDec
push edi
call ebx
test eax, eax
je 0x4178d9
push str.FlagClear
push edi
call ebx
test eax, eax
je 0x41789f
push 0x47b1e4
push edi
call ebx
test eax, eax
je 0x41789f
push 0x47ab68
push edi
call ebx
test eax, eax
jne 0x416f9e
mov eax, dword [esi + 0x6bdbc]
inc eax
mov ecx, esi
mov dword [esi + 0x6bdbc], eax
call fcn.00416310
mov eax, 1
jmp 0x417c07
push str.else
push edi
call ebx
test eax, eax
jne 0x416ff6
push 0xb
mov ecx, esi
call fcn.00415ac0
mov eax, dword [esi + 0x6bdbc]
lea eax, [eax + eax*4]
lea ecx, [esi + eax*8 + 0x6bab0]
push ecx
mov ecx, esi
call fcn.004156b0
test eax, eax
je 0x417683
mov eax, dword [esi + 0x6bdbc]
lea edx, [eax + eax*4]
lea eax, [esi + edx*8 + 0x6ba9c]
push eax
mov ecx, esi
call fcn.00415550
dec eax
neg eax
sbb eax, eax
inc eax
jmp 0x417c07
push str.endif
push edi
call ebx
test eax, eax
jne 0x417033
mov eax, dword [esi + 0x6bdbc]
lea ecx, [eax + eax*4]
lea edx, [esi + ecx*8 + 0x6bab0]
push edx
mov ecx, esi
call fcn.00415550
cmp eax, 1
jne 0x417683
dec dword [esi + 0x6bdbc]
mov eax, 1
jmp 0x417c07
push str.Select
push edi
call ebx
test eax, eax
jne 0x4171e1
mov ecx, esi
mov dword [esi + 0x6ba58], eax
lea ebp, [esi + 0x6ba70]
call fcn.00415890
push eax
push ebp
call dword [0x47a0f8]
push ebp
mov ecx, esi
call fcn.00415550
cmp eax, 1
jne 0x417683
mov ecx, esi
call fcn.00415890
push 0xc8
mov ecx, esi
call fcn.00415ac0
mov eax, dword [esi + 0x30]
lea ebp, [esi + 0x30]
mov ecx, ebp
call dword [eax + 0x48]
mov edx, dword [ebp]
mov dword [esp + 0x2c], eax
inc eax
push eax
mov ecx, ebp
call dword [edx + 0x28]
mov eax, dword [esi + 4]
lea ebp, [esi + 4]
push edi
mov ecx, ebp
mov dword [esp + 0x18], 0
call dword [eax + 0x7c]
cmp byte [edi], 0x28
jne 0x4170d7
cmp byte [edi + 2], 0x29
jne 0x4170d7
mov cl, byte [edi + 1]
lea edx, [esp + 0x1c]
push edx
mov byte [esp + 0x20], cl
mov byte [esp + 0x21], 0
call fcn.00434c9d
add esp, 4
mov dword [esp + 0x14], eax
mov eax, dword [ebp]
mov ecx, ebp
mov dword [esp + 0x18], 0
call dword [eax + 0x48]
mov edx, dword [ebp]
push edi
mov ecx, ebp
mov dword [esp + 0x14], eax
call dword [edx + 0x7c]
push str.endselect
push edi
call ebx
test eax, eax
je 0x417130
push str.case
push edi
call ebx
test eax, eax
jne 0x41711b
push 1
push eax
push eax
mov ecx, esi
call fcn.00415b20
inc dword [esp + 0x18]
mov eax, dword [ebp]
push edi
mov ecx, ebp
call dword [eax + 0x7c]
push str.endselect
push edi
call ebx
test eax, eax
jne 0x417100
mov edx, dword [esi + 0x30]
lea edi, [esi + 0x30]
mov ecx, edi
call dword [edx + 0x48]
mov ecx, dword [esp + 0x2c]
mov ebx, eax
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x28]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
cmp eax, ecx
je 0x4171ba
push eax
mov ecx, esi
call fcn.00415ac0
lea ecx, [esp + 0x1c]
call fcn.0043a6c0
push str.WARNING_:_Select
lea ecx, [esp + 0x20]
mov dword [esp + 0x2c0], 0
call fcn.0043aa40
mov eax, dword [esi + 0x70]
test eax, eax
jne 0x417194
mov ecx, esi
call fcn.00415820
mov dword [esi + 0x70], 1
mov eax, dword [esp + 0x20]
mov edx, dword [esi + 0x54]
lea ecx, [esi + 0x54]
push 1
push eax
call dword [edx + 0x40]
lea ecx, [esp + 0x1c]
mov dword [esp + 0x2bc], 0xffffffff
call fcn.0043a700
jmp 0x4171c2
push ecx
mov ecx, esi
call fcn.00415ac0
mov edx, dword [edi]
push ebx
mov ecx, edi
call dword [edx + 0x28]
mov ecx, dword [esp + 0x10]
mov eax, dword [ebp]
push ecx
mov ecx, ebp
call dword [eax + 0x28]
mov eax, 1
jmp 0x417c07
push str.case
push edi
call ebx
test eax, eax
jne 0x417228
push 0xc9
mov ecx, esi
call fcn.00415ac0
mov ecx, dword [esi + 0x6ba58]
mov edx, dword [esi + 0x30]
lea eax, [esi + 0x6ba58]
inc ecx
mov dword [eax], ecx
lea ecx, [esi + 0x30]
push 1
push eax
call dword [edx + 0x60]
mov eax, dword [esi + 4]
lea ecx, [esi + 4]
push edi
call dword [eax + 0x7c]
mov eax, 1
jmp 0x417c07
push str.break
push edi
call ebx
test eax, eax
jne 0x417250
push 0xb
mov ecx, esi
call fcn.00415ac0
lea ecx, [esi + 0x6ba5c]
push ecx
mov ecx, esi
call fcn.004156b0
jmp 0x417c01
push str.continue
push edi
call ebx
test eax, eax
jne 0x417278
push 0xb
mov ecx, esi
call fcn.00415ac0
lea edx, [esi + 0x6ba70]
push edx
mov ecx, esi
call fcn.004156b0
jmp 0x417c01
push str.endselect
push edi
call ebx
test eax, eax
jne 0x41729d
lea eax, [esi + 0x6ba5c]
push eax
mov ecx, esi
call fcn.00415550
dec eax
neg eax
sbb eax, eax
inc eax
jmp 0x417c07
push 0x47b0fc
push edi
call ebx
test eax, eax
je 0x417754
push 0x47b0f8
push edi
call ebx
test eax, eax
je 0x417754
push 0x47b0f4
push edi
call ebx
test eax, eax
je 0x417754
push 0x47b0f0
push edi
call ebx
test eax, eax
je 0x417754
push 0x47b0ec
push edi
call ebx
test eax, eax
je 0x417754
push 0x47b0e8
push edi
call ebx
test eax, eax
je 0x417754
push str.CFill
push edi
call ebx
test eax, eax
je 0x417704
push str.ColorFill
push edi
call ebx
test eax, eax
je 0x417704
push str.CFDark
push edi
call ebx
test eax, eax
je 0x417704
push 0x47b0c8
push edi
call ebx
test eax, eax
je 0x4176ec
push str.CgMidCenter
push edi
call ebx
test eax, eax
je 0x4176ec
push str.CMCC
push edi
call ebx
test eax, eax
je 0x417a73
push str.CgMidCenterCancel
push edi
call ebx
test eax, eax
je 0x417a73
push str.RecordEnd
push edi
call ebx
test eax, eax
je 0x4176c5
push str.RecE
push edi
call ebx
test eax, eax
je 0x4176c5
push 0x47b088
push edi
call ebx
test eax, eax
je 0x41769d
push str.SaveStatus
push edi
call ebx
test eax, eax
je 0x41769d
push str.SkipStop
push edi
call ebx
test eax, eax
je 0x41768a
push str.SkSt
push edi
call ebx
test eax, eax
je 0x41768a
push str.Flag
push edi
call ebx
test eax, eax
jne 0x417425
lea ecx, [esp + 0x1c]
call fcn.0043a6c0
mov edi, 1
push 0x47af18
lea ecx, [esp + 0x20]
mov dword [esp + 0x2c0], edi
call fcn.0043aa40
mov eax, dword [esi + 0x70]
test eax, eax
jne 0x41740d
mov ecx, esi
call fcn.00415820
mov dword [esi + 0x70], edi
mov eax, dword [esp + 0x20]
mov edx, dword [esi + 0x54]
add esi, 0x54
push edi
push eax
mov ecx, esi
call dword [edx + 0x40]
push 0
call fcn.00434ab8
push str.FlagMul
push edi
call ebx
or ebp, 0xffffffff
test eax, eax
je 0x417440
push str.FMul
push edi
call ebx
test eax, eax
jne 0x417497
lea ecx, [esp + 0x1c]
call fcn.0043a6c0
push 0x47ae80
lea ecx, [esp + 0x20]
mov dword [esp + 0x2c0], 2
call fcn.0043aa40
mov eax, dword [esi + 0x70]
test eax, eax
jne 0x417477
mov ecx, esi
call fcn.00415820
mov dword [esi + 0x70], 1
mov eax, dword [esp + 0x20]
mov edx, dword [esi + 0x54]
lea ecx, [esi + 0x54]
push 1
push eax
call dword [edx + 0x40]
lea ecx, [esp + 0x1c]
mov dword [esp + 0x2bc], ebp
call fcn.0043a700
push str.FlagDiv
push edi
call ebx
test eax, eax
je 0x4174af
push str.FDiv
push edi
call ebx
test eax, eax
jne 0x417506
lea ecx, [esp + 0x1c]
call fcn.0043a6c0
push 0x47ade8
lea ecx, [esp + 0x20]
mov dword [esp + 0x2c0], 3
call fcn.0043aa40
mov eax, dword [esi + 0x70]
test eax, eax
jne 0x4174e6
mov ecx, esi
call fcn.00415820
mov dword [esi + 0x70], 1
mov eax, dword [esp + 0x20]
mov edx, dword [esi + 0x54]
lea ecx, [esi + 0x54]
push 1
push eax
call dword [edx + 0x40]
lea ecx, [esp + 0x1c]
mov dword [esp + 0x2bc], ebp
call fcn.0043a700
push str.FlagExc
push edi
call ebx
test eax, eax
je 0x41751e
push str.FExc
push edi
call ebx
test eax, eax
jne 0x417575
lea ecx, [esp + 0x1c]
call fcn.0043a6c0
push 0x47ad50
lea ecx, [esp + 0x20]
mov dword [esp + 0x2c0], 4
call fcn.0043aa40
mov eax, dword [esi + 0x70]
test eax, eax
jne 0x417555
mov ecx, esi
call fcn.00415820
mov dword [esi + 0x70], 1
mov eax, dword [esp + 0x20]
mov edx, dword [esi + 0x54]
lea ecx, [esi + 0x54]
push 1
push eax
call dword [edx + 0x40]
lea ecx, [esp + 0x1c]
mov dword [esp + 0x2bc], ebp
call fcn.0043a700
push str.FlagRnd
push edi
call ebx
test eax, eax
je 0x41758d
push str.FRnd
push edi
call ebx
test eax, eax
jne 0x4175e4
lea ecx, [esp + 0x1c]
call fcn.0043a6c0
push 0x47ace0
lea ecx, [esp + 0x20]
mov dword [esp + 0x2c0], 5
call fcn.0043aa40
mov eax, dword [esi + 0x70]
test eax, eax
jne 0x4175c4
mov ecx, esi
call fcn.00415820
mov dword [esi + 0x70], 1
mov eax, dword [esp + 0x20]
mov edx, dword [esi + 0x54]
lea ecx, [esi + 0x54]
push 1
push eax
call dword [edx + 0x40]
lea ecx, [esp + 0x1c]
mov dword [esp + 0x2bc], ebp
call fcn.0043a700
push 0x47acd8
push edi
call ebx
test eax, eax
je 0x41762c
push str.JSPZ
push edi
call ebx
test eax, eax
je 0x41762c
push 0x47accc
push edi
call ebx
test eax, eax
je 0x41762c
push str.JSNZ
push edi
call ebx
test eax, eax
je 0x41762c
push str.JSMI
push edi
call ebx
test eax, eax
je 0x41762c
push str.JSME
push edi
call ebx
test eax, eax
jne 0x417683
lea ecx, [esp + 0x64]
call fcn.0043a6c0
push 0x47ac30
lea ecx, [esp + 0x68]
mov dword [esp + 0x2c0], 6
call fcn.0043aa40
mov eax, dword [esi + 0x70]
test eax, eax
jne 0x417663
mov ecx, esi
call fcn.00415820
mov dword [esi + 0x70], 1
mov eax, dword [esp + 0x68]
mov edx, dword [esi + 0x54]
lea ecx, [esi + 0x54]
push 1
push eax
call dword [edx + 0x40]
lea ecx, [esp + 0x64]
mov dword [esp + 0x2bc], ebp
call fcn.0043a700
xor eax, eax
jmp 0x417c07
push 0xe
mov ecx, esi
call fcn.00415ac0
mov eax, 1
jmp 0x417c07
push 0x14
mov ecx, esi
call fcn.00415ac0
push 1
push 0
push 0
mov ecx, esi
call fcn.00415b20
test eax, eax
je 0x417683
push 1
push 0
push 0x47a6ac
jmp 0x417bfa
push 4
mov ecx, esi
call fcn.00415ac0
mov edx, dword [esi + 4]
lea ecx, [esi + 4]
lea eax, [esp + 0x1ac]
push eax
call dword [edx + 0x88]
mov eax, 1
jmp 0x417c07
mov ecx, esi
call fcn.00416b40
mov ecx, esi
call fcn.00416b40
mov eax, 1
jmp 0x417c07
push 0x56
mov ecx, esi
call fcn.00415ac0
mov ecx, esi
call fcn.00416b40
mov ecx, esi
call fcn.00416b40
mov ecx, esi
call fcn.00416b40
mov edx, dword [esi + 0x30]
add esi, 0x30
push 2
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov dword [esp + 0x1c], 0
call dword [edx + 0x60]
mov edx, dword [esi]
push 2
lea eax, [esp + 0x18]
mov ecx, esi
push eax
call dword [edx + 0x60]
mov eax, 1
jmp 0x417c07
mov edx, dword [esi + 4]
lea ebp, [esi + 4]
lea eax, [esp + 0x30]
push eax
mov ecx, ebp
call dword [edx + 0x7c]
mov edx, dword [ebp]
lea eax, [esp + 0x74]
push eax
mov ecx, ebp
call dword [edx + 0x7c]
push 0
lea ecx, [esp + 0x78]
push ecx
mov ecx, esi
call fcn.00415860
cmp eax, 1
push 0x47b0fc
push edi
jne 0x4177fd
call ebx
test eax, eax
jne 0x417799
push 0x3a
mov ecx, esi
call fcn.00415ac0
push 0x47b0f8
push edi
call ebx
test eax, eax
jne 0x4177ae
push 0x3c
mov ecx, esi
call fcn.00415ac0
push 0x47b0f4
push edi
call ebx
test eax, eax
jne 0x4177c3
push 0x37
mov ecx, esi
call fcn.00415ac0
push 0x47b0f0
push edi
call ebx
test eax, eax
jne 0x4177d8
push 0x38
mov ecx, esi
call fcn.00415ac0
push 0x47b0ec
push edi
call ebx
test eax, eax
jne 0x4177ed
push 0x39
mov ecx, esi
call fcn.00415ac0
push 0x47b0e8
push edi
call ebx
test eax, eax
jne 0x417875
push 0x3b
jmp 0x41786e
call ebx
test eax, eax
jne 0x41780c
push 0x27
mov ecx, esi
call fcn.00415ac0
push 0x47b0f8
push edi
call ebx
test eax, eax
jne 0x417821
push 0x29
mov ecx, esi
call fcn.00415ac0
push 0x47b0f4
push edi
call ebx
test eax, eax
jne 0x417836
push 0x24
mov ecx, esi
call fcn.00415ac0
push 0x47b0f0
push edi
call ebx
test eax, eax
jne 0x41784b
push 0x25
mov ecx, esi
call fcn.00415ac0
push 0x47b0ec
push edi
call ebx
test eax, eax
jne 0x417860
push 0x26
mov ecx, esi
call fcn.00415ac0
push 0x47b0e8
push edi
call ebx
test eax, eax
jne 0x417875
push 0x28
mov ecx, esi
call fcn.00415ac0
push 1
lea edx, [esp + 0x34]
push edx
mov ecx, esi
call fcn.00416070
push 0
lea eax, [esp + 0x78]
push eax
mov ecx, esi
call fcn.00416070
push 0
mov ecx, esi
call fcn.004156b0
jmp 0x417c01
mov edx, dword [esi + 4]
lea ecx, [esi + 4]
lea eax, [esp + 0x30]
push eax
call dword [edx + 0x7c]
push 0x1e
mov ecx, esi
call fcn.00415ac0
push 1
lea ecx, [esp + 0x34]
push ecx
mov ecx, esi
call fcn.00416070
push 0
push 0
mov ecx, esi
call fcn.00416070
mov eax, 1
jmp 0x417c07
mov edx, dword [esi + 4]
lea ecx, [esi + 4]
lea eax, [esp + 0x30]
push eax
call dword [edx + 0x7c]
push 0x1a
mov ecx, esi
call fcn.00415ac0
jmp 0x4179fc
mov edx, dword [esi + 4]
lea ecx, [esi + 4]
lea eax, [esp + 0x30]
push eax
call dword [edx + 0x7c]
push 0x19
mov ecx, esi
call fcn.00415ac0
jmp 0x4179fc
mov edx, dword [esi + 4]
lea edi, [esi + 4]
lea eax, [esp + 0x30]
push eax
mov ecx, edi
call dword [edx + 0x7c]
mov edx, dword [edi]
lea eax, [esp + 0x74]
push eax
mov ecx, edi
call dword [edx + 0x7c]
push 0
lea ecx, [esp + 0x78]
push ecx
mov ecx, esi
call fcn.00415860
cmp eax, 1
mov ecx, esi
jne 0x417946
push 0x31
jmp 0x4179ba
push 0x1a
jmp 0x4179ba
mov edx, dword [esi + 4]
lea edi, [esi + 4]
lea eax, [esp + 0x30]
push eax
mov ecx, edi
call dword [edx + 0x7c]
mov edx, dword [edi]
lea eax, [esp + 0x74]
push eax
mov ecx, edi
call dword [edx + 0x7c]
push 0
lea ecx, [esp + 0x78]
push ecx
mov ecx, esi
call fcn.00415860
cmp eax, 1
mov ecx, esi
jne 0x41797f
push 0x30
jmp 0x4179ba
push 0x19
jmp 0x4179ba
mov edx, dword [esi + 4]
lea edi, [esi + 4]
lea eax, [esp + 0x30]
push eax
mov ecx, edi
call dword [edx + 0x7c]
mov edx, dword [edi]
lea eax, [esp + 0x74]
push eax
mov ecx, edi
call dword [edx + 0x7c]
push 0
lea ecx, [esp + 0x78]
push ecx
mov ecx, esi
call fcn.00415860
cmp eax, 1
mov ecx, esi
jne 0x4179b8
push 0x35
jmp 0x4179ba
push 0x1e
call fcn.00415ac0
push 1
lea edx, [esp + 0x34]
push edx
mov ecx, esi
call fcn.00416070
push 0
lea eax, [esp + 0x78]
push eax
mov ecx, esi
call fcn.00416070
mov eax, 1
jmp 0x417c07
push 0x1e
mov ecx, esi
call fcn.00415ac0
mov edx, dword [esi + 4]
lea ecx, [esi + 4]
lea eax, [esp + 0x30]
push eax
call dword [edx + 0x7c]
push 1
lea ecx, [esp + 0x34]
push ecx
mov ecx, esi
call fcn.00416070
mov edx, dword [esi + 0x30]
lea ecx, [esi + 0x30]
push 4
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], 1
call dword [edx + 0x60]
mov eax, 1
jmp 0x417c07
push 0x64
mov ecx, esi
call fcn.00415ac0
mov edx, dword [esi + 4]
lea ecx, [esi + 4]
lea eax, [esp + 0x1ac]
push eax
call dword [edx + 0x88]
imul eax, eax, 0x64
mov edx, dword [esi + 0x30]
mov dword [esp + 0x10], eax
lea ecx, [esi + 0x30]
push 2
lea eax, [esp + 0x14]
push eax
call dword [edx + 0x60]
mov eax, 1
jmp 0x417c07
push 2
mov ecx, esi
call fcn.00415ac0
mov ecx, esi
call fcn.00416b40
mov eax, 1
jmp 0x417c07
push 0x4c
mov ecx, esi
call fcn.00415ac0
mov edx, dword [esi + 4]
lea ecx, [esi + 4]
push edi
call dword [edx + 0x88]
dec al
push edi
mov ecx, esi
mov byte [esp + 0x14], al
call fcn.00415e30
mov edx, dword [esp + 0x10]
mov eax, dword [esi + 0x30]
lea ecx, [esi + 0x30]
push edx
call dword [eax + 0x80]
mov eax, 1
jmp 0x417c07
push 0xf0
mov ecx, esi
call fcn.00415ac0
mov eax, dword [esi + 0x30]
push 4
lea ecx, [esp + 0x1c]
add esi, 0x30
push ecx
mov ecx, esi
mov dword [esp + 0x20], 1
call dword [eax + 0x60]
mov edx, dword [esi]
push 4
lea eax, [esp + 0x1c]
push eax
mov ecx, esi
mov dword [esp + 0x20], 0
call dword [edx + 0x60]
mov eax, 1
jmp 0x417c07
push 0x83
mov ecx, esi
call fcn.00415ac0
mov edx, dword [esi + 4]
lea ecx, [esi + 4]
lea eax, [esp + 0xa8]
push eax
call dword [edx + 0x7c]
mov ecx, esi
call fcn.00416b40
mov ecx, esi
call fcn.00416ba0
mov ecx, esi
call fcn.00416ba0
push 1
push 1
lea ecx, [esp + 0xb0]
push ecx
jmp 0x417bfa
push 0x82
mov ecx, esi
call fcn.00415ac0
mov edx, dword [esi + 4]
lea ecx, [esi + 4]
lea eax, [esp + 0xa8]
push eax
call dword [edx + 0x7c]
mov ecx, esi
call fcn.00416b40
push 1
push 1
lea ecx, [esp + 0xb0]
push ecx
jmp 0x417bfa
push 0x4c
mov ecx, esi
call fcn.00415ac0
mov edx, dword [esi + 0x30]
lea edi, [esi + 0x30]
push 0
mov ecx, edi
call dword [edx + 0x80]
push 0x4c
mov ecx, esi
call fcn.00415ac0
mov eax, dword [edi]
push 1
mov ecx, edi
call dword [eax + 0x80]
push 0x4c
mov ecx, esi
call fcn.00415ac0
mov edx, dword [edi]
push 2
mov ecx, edi
call dword [edx + 0x80]
push 0x4c
mov ecx, esi
call fcn.00415ac0
mov eax, dword [edi]
push 3
mov ecx, edi
call dword [eax + 0x80]
push 0x4c
mov ecx, esi
call fcn.00415ac0
mov edx, dword [edi]
push 4
mov ecx, edi
call dword [edx + 0x80]
push 0x46
mov ecx, esi
call fcn.00415ac0
push 1
push 1
push 0
mov ecx, esi
call fcn.00415b20
neg eax
sbb eax, eax
neg eax
mov ecx, dword [esp + 0x2b4]
pop edi
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x2ac]
xor ecx, dword [esp + 0x2bc]
pop esi
pop ebp
pop ebx
call fcn.0043488e
add esp, 0x2b0
ret 4