Function at 0x40d670
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
xor ebx, ebx
sub esp, 0x9c
mov edx, dword [esp + 0xbc]
mov esi, dword [edx]
mov eax, esi
and eax, 0xffffffcf
mov dword [edx], eax
mov eax, esi
and eax, 7
cmp eax, 4
ja case.default.0x40d69a
jmp dword [eax*4 + 0x444818]
fld st(0)
fadd st(1)
fadd dword [0x444864]
fstp qword [esp + 0x68]
sub dword [esp + 0x6c], 0x3400000
fld st(0)
fsub dword [0x444868]
fld qword [esp + 0x68]
fxch st(1)
fucom st(1)
fnstsw ax
sahf
ja 0x40e602
fxch st(1)
fchs
fucompp
fnstsw ax
sahf
ja 0x40e07d
jmp 0x40d6f1
fstp st(0)
fstp st(0)
jmp 0x40d6f1
fstp st(0)
fstp st(0)
fstp st(0)
jmp 0x40d6f1
fstp st(0)
fstp qword [esp + 0x38]
cmp dword [esp + 0x20], 0xe
jg 0x40dda0
mov eax, dword [esp + 0x50]
test eax, eax
js 0x40dda0
mov esi, dword [esp + 0x48]
mov edx, dword [esp + 0x20]
test esi, esi
fld qword [edx*8 + 0x444880]
jg 0x40e113
mov eax, dword [esp + 0xc4]
shr eax, 0x1f
test al, al
je 0x40e113
mov ecx, dword [esp + 0x48]
test ecx, ecx
jne 0x40e081
fmul dword [0x444868]
fld qword [esp + 0x38]
fxch st(1)
fucompp
fnstsw ax
sahf
jae 0x40e083
add edx, 2
xor edi, edi
mov dword [esp + 0x28], edx
mov dword [esp + 0x38], 0
mov byte [ebx], 0x31
lea esi, [ebx + 1]
mov dword [esp + 0x40], 0
mov dword [esp + 0x24], 0x20
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.0040f7c0
test edi, edi
je 0x40d7a1
cmp dword [esp + 0x40], edi
jne 0x40e3bd
mov dword [esp], edi
call fcn.0040f7c0
mov dword [esp], ebp
call fcn.0040f7c0
mov eax, dword [esp + 0xcc]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0xc8]
mov byte [esi], 0
test eax, eax
mov dword [edx], ecx
je 0x40d7cd
mov eax, dword [esp + 0xcc]
mov dword [eax], esi
mov edx, dword [esp + 0xbc]
mov ecx, dword [esp + 0x24]
or dword [edx], ecx
lea esi, [esi]
add esp, 0x9c
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [esp + 0xb0]
xor edx, edx
mov edi, dword [eax]
cmp edi, 0x20
jle 0x40d80e
mov eax, 0x20
add eax, eax
add edx, 1
cmp edi, eax
jg 0x40d805
mov dword [esp], edx
call fcn.0040f700
mov edx, dword [esp + 0xb8]
mov ebp, eax
lea eax, [edi - 1]
sar eax, 5
lea ebx, [edx + eax*4]
mov eax, dword [esp + 0xb8]
lea edx, [ebp + 0x14]
mov ecx, edx
mov dword [esp + 0x20], edx
mov edx, dword [eax]
add eax, 4
mov dword [ecx], edx
add ecx, 4
cmp ebx, eax
jae 0x40d838
mov edx, dword [esp + 0x20]
sub ecx, edx
sar ecx, 2
nop
lea eax, [ecx - 1]
mov edx, dword [ebp + eax*4 + 0x14]
test edx, edx
jne 0x40dd20
test eax, eax
mov ecx, eax
jne 0x40d850
mov dword [ebp + 0x10], 0
mov dword [esp + 0x40], 0
mov dword [esp], ebp
call fcn.00410210
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x50], ecx
test eax, eax
mov dword [esp + 0x8c], eax
jne 0x40dcf1
mov ebx, dword [ebp + 0x10]
test ebx, ebx
jne 0x40d960
mov dword [esp], ebp
call fcn.0040f7c0
mov ecx, dword [esp + 0xc8]
mov eax, dword [esp + 0xcc]
mov dword [ecx], 1
mov dword [esp + 8], 1
mov dword [esp + 4], eax
mov dword [esp], 0x444815
call fcn.0040f330
add esp, 0x9c
mov ebx, eax
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
mov edx, dword [esp + 0xc8]
mov ecx, dword [esp + 0xcc]
mov dword [edx], 0xffff8000
mov dword [esp + 8], 3
mov dword [esp + 4], ecx
mov dword [esp], 0x444811
call fcn.0040f330
add esp, 0x9c
mov ebx, eax
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
mov ecx, dword [esp + 0xc8]
mov eax, dword [esp + 0xcc]
mov dword [ecx], 0xffff8000
mov dword [esp + 8], 8
mov dword [esp + 4], eax
mov dword [esp], str.Infinity
call fcn.0040f330
add esp, 0x9c
mov ebx, eax
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
lea eax, [esp + 0x8c]
mov dword [esp + 4], eax
mov dword [esp], ebp
call fcn.0040fec0
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x40]
lea ecx, [eax + edx - 1]
fstp qword [esp + 0x38]
mov ebx, dword [esp + 0x3c]
mov edx, ecx
mov dword [esp + 0x78], ecx
sar edx, 0x1f
mov eax, edx
xor eax, ecx
and ebx, 0xfffff
sub eax, edx
or ebx, 0x3ff00000
sub eax, 0x435
mov dword [esp + 0x3c], ebx
test eax, eax
fld qword [esp + 0x38]
fsub dword [0x44482c]
fmul qword [0x444830]
fadd qword [0x444838]
fild dword [esp + 0x78]
fmul qword [0x444840]
faddp st(1)
jle 0x40d9e1
mov dword [esp + 0x78], eax
fild dword [esp + 0x78]
fmul qword [0x444848]
faddp st(1)
fnstcw word [esp + 0x7e]
movzx eax, word [esp + 0x7e]
mov ah, 0xc
mov word [esp + 0x7c], ax
fldcw word [esp + 0x7c]
fist dword [esp + 0x20]
fldcw word [esp + 0x7e]
fldz
fucomp st(1)
fnstsw ax
sahf
ja 0x40e0e0
fstp st(0)
mov eax, ecx
shl eax, 0x14
add eax, ebx
cmp dword [esp + 0x20], 0x16
mov dword [esp + 0x3c], eax
mov dword [esp + 0x5c], 1
ja 0x40da4f
mov edx, dword [esp + 0x20]
fld qword [edx*8 + 0x444880]
fld qword [esp + 0x38]
fxch st(1)
fucompp
fnstsw ax
sahf
jbe 0x40e010
sub dword [esp + 0x20], 1
mov dword [esp + 0x5c], 0
mov eax, dword [esp + 0x40]
mov dword [esp + 0x54], 0
sub eax, ecx
sub eax, 1
mov dword [esp + 0x4c], eax
js 0x40e0b1
mov ecx, dword [esp + 0x20]
test ecx, ecx
js 0x40e0c4
mov edx, dword [esp + 0x20]
add dword [esp + 0x4c], edx
mov dword [esp + 0x58], 0
mov dword [esp + 0x60], edx
cmp dword [esp + 0xc0], 9
ja 0x40dd40
cmp dword [esp + 0xc0], 5
jle 0x40ec0f
sub dword [esp + 0xc0], 4
xor eax, eax
cmp dword [esp + 0xc0], 3
je 0x40e032
jg 0x40e394
cmp dword [esp + 0xc0], 2
jne 0x40dd4b
mov dword [esp + 0x64], 0
mov edx, dword [esp + 0xc4]
test edx, edx
jle 0x40e5ae
cmp dword [esp + 0xc4], 0xe
setbe dl
mov ecx, dword [esp + 0xc4]
and edx, eax
mov dword [esp + 0x8c], ecx
mov eax, ecx
mov dword [esp + 0x70], ecx
mov dword [esp + 0x48], ecx
mov dword [esp], eax
mov byte [esp + 0x18], dl
call fcn.0040f2f0
mov ecx, dword [esp + 0xb0]
movzx edx, byte [esp + 0x18]
mov ecx, dword [ecx + 0xc]
mov ebx, eax
sub ecx, 1
cmp ecx, 0
mov dword [esp + 0x44], ecx
je 0x40db46
jl 0x40e070
and esi, 8
jne 0x40e020
test dl, dl
je 0x40d6f5
mov edx, dword [esp + 0x44]
or edx, dword [esp + 0x20]
jne 0x40d6f5
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x8c], 0
fld qword [esp + 0x38]
test eax, eax
je 0x40db80
fld1
fucomp st(1)
fnstsw ax
sahf
ja 0x40e8c1
fld st(0)
mov eax, dword [esp + 0x48]
fadd st(1)
fadd dword [0x444864]
fstp qword [esp + 0x68]
sub dword [esp + 0x6c], 0x3400000
test eax, eax
je 0x40d6b7
mov edx, dword [esp + 0x48]
fld st(0)
mov dword [esp + 0x74], 0
mov eax, dword [esp + 0x64]
test eax, eax
je 0x40e61f
fld qword [esp + 0x68]
lea esi, [ebx + 1]
fld dword [0x44486c]
fdiv qword [edx*8 + 0x444878]
fnstcw word [esp + 0x7e]
mov dword [esp + 0x8c], 0
movzx eax, word [esp + 0x7e]
mov ah, 0xc
mov word [esp + 0x7c], ax
fsubrp st(1)
fxch st(1)
fldcw word [esp + 0x7c]
fist dword [esp + 0x78]
fldcw word [esp + 0x7e]
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x78], ecx
add ecx, 0x30
fild dword [esp + 0x78]
fsubp st(1)
fxch st(1)
mov byte [ebx], cl
fucom st(1)
fnstsw ax
sahf
ja 0x40dcc0
fld st(1)
fsubr dword [0x444858]
fxch st(1)
fucom st(1)
fnstsw ax
fstp st(1)
sahf
ja 0x40dfb8
mov eax, dword [esp + 0x8c]
add eax, 1
cmp eax, edx
mov dword [esp + 0x8c], eax
jge 0x40d6e1
fld dword [0x44485c]
jmp 0x40dc87
fld st(1)
fsubr dword [0x444858]
fxch st(1)
fucom st(1)
fnstsw ax
fstp st(1)
sahf
ja 0x40dfc0
mov eax, dword [esp + 0x8c]
add eax, 1
cmp edx, eax
mov dword [esp + 0x8c], eax
jle 0x40d6e7
fxch st(1)
fxch st(2)
fmul st(1), st(0)
fmul st(2), st(0)
fxch st(2)
fldcw word [esp + 0x7c]
fist dword [esp + 0x78]
fldcw word [esp + 0x7e]
mov eax, dword [esp + 0x78]
mov dword [esp + 0x78], eax
lea ecx, [eax + 0x30]
fild dword [esp + 0x78]
fsubp st(1)
fxch st(1)
mov byte [esi], cl
add esi, 1
fucom st(1)
fnstsw ax
sahf
jbe 0x40dc53
fstp st(0)
fstp st(1)
fstp st(1)
jmp 0x40dcc4
fstp st(0)
fstp st(1)
fldz
fxch st(1)
fucompp
fnstsw ax
sahf
jp 0x40eb03
jne 0x40eb03
mov edx, dword [esp + 0x74]
mov dword [esp + 0x24], 0
add edx, 1
mov dword [esp + 0x28], edx
jmp 0x40d7a1
mov dword [esp + 4], eax
mov dword [esp], ebp
call fcn.00410100
mov eax, dword [esp + 0x8c]
mov edx, dword [esp + 0xb4]
sub dword [esp + 0x40], eax
add edx, eax
mov dword [esp + 0x50], edx
jmp 0x40d896
bsr eax, dword [ebp + ecx*4 + 0x10]
mov dword [ebp + 0x10], ecx
shl ecx, 5
xor eax, 0x1f
sub ecx, eax
mov dword [esp + 0x40], ecx
jmp 0x40d874
mov dword [esp + 0xc0], 0
mov dword [esp + 0x78], edi
xor edx, edx
fild dword [esp + 0x78]
fmul qword [0x444850]
mov dword [esp + 0x64], 1
mov dword [esp + 0x70], 0xffffffff
mov dword [esp + 0x48], 0xffffffff
mov dword [esp + 0xc4], 0
fldcw word [esp + 0x7c]
fistp dword [esp + 0x78]
fldcw word [esp + 0x7e]
mov eax, dword [esp + 0x78]
add eax, 3
mov dword [esp + 0x8c], eax
jmp 0x40db0e
mov eax, dword [esp + 0x64]
test eax, eax
je 0x40e100
cmp dword [esp + 0xc0], 1
jle 0x40e705
mov eax, dword [esp + 0x48]
sub eax, 1
cmp dword [esp + 0x58], eax
jl 0x40e5da
mov esi, dword [esp + 0x58]
sub esi, eax
mov eax, dword [esp + 0x48]
test eax, eax
js 0x40e827
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x8c], edx
mov edi, edx
mov dword [esp + 0x50], ecx
mov dword [esp], 1
add dword [esp + 0x54], edi
add dword [esp + 0x4c], edi
call fcn.0040f910
mov edi, eax
mov eax, dword [esp + 0x4c]
test eax, eax
jle 0x40de39
mov eax, dword [esp + 0x50]
test eax, eax
jle 0x40de39
mov eax, dword [esp + 0x4c]
mov edx, dword [esp + 0x50]
cmp eax, edx
jle 0x40de26
mov eax, edx
sub dword [esp + 0x54], eax
sub dword [esp + 0x50], eax
sub dword [esp + 0x4c], eax
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x58]
test eax, eax
jle 0x40de89
mov ecx, dword [esp + 0x64]
test ecx, ecx
je 0x40e5c3
test esi, esi
jle 0x40de7d
mov dword [esp], edi
mov dword [esp + 4], esi
call fcn.0040faa0
mov dword [esp + 4], ebp
mov dword [esp], eax
mov edi, eax
call fcn.0040f940
mov dword [esp], ebp
mov dword [esp + 0x18], eax
call fcn.0040f7c0
mov eax, dword [esp + 0x18]
mov ebp, eax
mov eax, dword [esp + 0x58]
sub eax, esi
jne 0x40e5ef
mov dword [esp], 1
call fcn.0040f910
mov edx, dword [esp + 0x60]
test edx, edx
mov dword [esp + 0x38], eax
jle 0x40deb5
mov edx, dword [esp + 0x60]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.0040faa0
mov dword [esp + 0x38], eax
cmp dword [esp + 0xc0], 1
mov dword [esp + 0x58], 0
jle 0x40e511
mov eax, dword [esp + 0x60]
mov esi, 0x1f
test eax, eax
je 0x40dee7
mov edx, dword [esp + 0x38]
mov eax, dword [edx + 0x10]
bsr esi, dword [edx + eax*4 + 0x10]
xor esi, 0x1f
sub esi, dword [esp + 0x4c]
mov ecx, dword [esp + 0x54]
sub esi, 4
and esi, 0x1f
add ecx, esi
mov eax, esi
test ecx, ecx
mov dword [esp + 0x8c], esi
jle 0x40df19
mov dword [esp], ebp
mov dword [esp + 4], ecx
call fcn.0040fbc0
mov ebp, eax
mov eax, dword [esp + 0x8c]
add eax, dword [esp + 0x4c]
test eax, eax
jle 0x40df35
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.0040fbc0
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x5c]
test eax, eax
jne 0x40e3da
cmp dword [esp + 0xc0], 2
jle 0x40e1f8
mov eax, dword [esp + 0x48]
test eax, eax
jg 0x40e1f8
mov eax, dword [esp + 0x48]
test eax, eax
jne 0x40e08d
mov eax, dword [esp + 0x38]
mov dword [esp + 8], 0
mov dword [esp + 4], 5
mov dword [esp], eax
call fcn.0040f810
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 0x38], eax
call fcn.0040fcc0
test eax, eax
jle 0x40e08d
mov edx, dword [esp + 0x20]
add edx, 2
mov dword [esp + 0x28], edx
jmp 0x40d769
movzx ecx, byte [eax - 1]
mov esi, eax
jmp 0x40dfd2
fstp st(0)
fstp st(0)
fstp st(0)
jmp 0x40dfd2
fstp st(0)
fstp st(0)
fstp st(0)
fstp st(0)
jmp 0x40dfd2
fstp st(0)
fstp st(0)
fstp st(0)
fstp st(0)
cmp cl, 0x39
lea eax, [esi - 1]
jne 0x40e9f2
cmp eax, ebx
jne 0x40dfb0
add dword [esp + 0x74], 1
mov ecx, 0x31
mov byte [ebx], 0x30
mov byte [eax], cl
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x24], 0x20
add ecx, 1
mov dword [esp + 0x28], ecx
jmp 0x40d7a1
mov dword [esp + 0x5c], 0
jmp 0x40da4f
mov eax, 3
sub eax, dword [esp + 0x44]
mov dword [esp + 0x44], eax
jmp 0x40db46
mov dword [esp + 0x64], 0
mov edx, dword [esp + 0xc4]
add edx, dword [esp + 0x20]
mov dword [esp + 0x70], edx
add edx, 1
test edx, edx
mov dword [esp + 0x48], edx
jle 0x40e58f
cmp edx, 0xe
mov dword [esp + 0x8c], edx
setbe dl
and edx, eax
mov eax, dword [esp + 0x48]
jmp 0x40db0e
mov dword [esp + 0x44], 2
jmp 0x40db3d
fstp st(0)
jmp 0x40e083
fstp st(0)
mov dword [esp + 0x38], 0
xor edi, edi
mov ecx, dword [esp + 0xc4]
mov esi, ebx
mov dword [esp + 0x40], 0
mov dword [esp + 0x24], 0x10
neg ecx
mov dword [esp + 0x28], ecx
jmp 0x40d77f
neg eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x4c], 0
jmp 0x40da6a
mov ecx, dword [esp + 0x20]
sub dword [esp + 0x54], ecx
mov dword [esp + 0x60], 0
neg ecx
mov dword [esp + 0x58], ecx
jmp 0x40da8a
fild dword [esp + 0x20]
fucompp
fnstsw ax
sahf
jp 0x40e0f1
je 0x40da0c
sub dword [esp + 0x20], 1
jmp 0x40da0c
mov ecx, dword [esp + 0x54]
xor edi, edi
mov esi, dword [esp + 0x58]
mov dword [esp + 0x50], ecx
jmp 0x40de08
fld qword [esp + 0x38]
lea esi, [ebx + 1]
fld st(0)
fdiv st(2)
fnstcw word [esp + 0x7e]
mov dword [esp + 0x8c], 1
movzx eax, word [esp + 0x7e]
mov ah, 0xc
mov word [esp + 0x7c], ax
fldcw word [esp + 0x7c]
fistp dword [esp + 0x78]
fldcw word [esp + 0x7e]
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x78], ecx
lea eax, [ecx + 0x30]
fild dword [esp + 0x78]
fmul st(2)
mov byte [ebx], al
fsubp st(1)
fldz
fxch st(1)
fucom st(1)
fnstsw ax
fstp st(1)
sahf
jnp 0x40eb1b
mov eax, dword [esp + 0x8c]
cmp dword [esp + 0x48], eax
je 0x40e55c
fld dword [0x44485c]
mov edx, dword [esp + 0x48]
jmp 0x40e197
mov eax, dword [esp + 0x8c]
cmp edx, eax
je 0x40e55a
add eax, 1
fmul st(1), st(0)
mov dword [esp + 0x8c], eax
fld st(1)
fdiv st(3)
fldcw word [esp + 0x7c]
fistp dword [esp + 0x78]
fldcw word [esp + 0x7e]
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x78], ecx
lea eax, [ecx + 0x30]
fild dword [esp + 0x78]
fmul st(3)
mov byte [esi], al
add esi, 1
fsubp st(2)
fldz
fxch st(2)
fucom st(2)
fnstsw ax
fstp st(2)
sahf
jp 0x40e188
jne 0x40e188
fstp st(0)
fstp st(0)
fstp st(0)
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x24], 0
add ecx, 1
mov dword [esp + 0x28], ecx
jmp 0x40d7a1
mov eax, dword [esp + 0x64]
test eax, eax
je 0x40e43a
add esi, dword [esp + 0x50]
test esi, esi
jle 0x40e21a
mov dword [esp], edi
mov dword [esp + 4], esi
call fcn.0040fbc0
mov edi, eax
mov esi, dword [esp + 0x58]
mov edx, edi
test esi, esi
jne 0x40e910
mov dword [esp + 0x28], ebx
mov esi, edx
mov dword [esp + 0x4c], ebx
mov ebx, edi
mov dword [esp + 0x8c], 1
mov dword [esp + 0x40], edi
jmp 0x40e325
mov dword [esp], edx
mov dword [esp + 0x18], eax
call fcn.0040f7c0
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0xc0]
or edx, eax
jne 0x40e27b
mov ecx, dword [esp + 0xb8]
test byte [ecx], 1
jne 0x40e27b
mov edx, dword [esp + 0x44]
test edx, edx
je 0x40eb3d
test edi, edi
js 0x40e771
or edi, dword [esp + 0xc0]
jne 0x40e29c
mov edx, dword [esp + 0xb8]
test byte [edx], 1
je 0x40e771
test eax, eax
jg 0x40e969
mov edx, dword [esp + 0x28]
movzx eax, byte [esp + 0x2c]
mov ecx, dword [esp + 0x48]
mov byte [edx], al
add edx, 1
cmp dword [esp + 0x8c], ecx
mov dword [esp + 0x28], edx
je 0x40e954
mov dword [esp], ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
call fcn.0040f810
cmp ebx, esi
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
mov dword [esp], ebx
mov ebp, eax
je 0x40e389
call fcn.0040f810
mov dword [esp], esi
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
mov ebx, eax
call fcn.0040f810
mov esi, eax
add dword [esp + 0x8c], 1
mov eax, dword [esp + 0x38]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.0040f3a0
mov dword [esp + 4], ebx
mov dword [esp], ebp
mov dword [esp + 0x34], eax
add eax, 0x30
mov dword [esp + 0x2c], eax
call fcn.0040fcc0
mov dword [esp + 4], esi
mov edi, eax
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.0040fd30
mov edx, eax
mov eax, 1
mov ecx, dword [edx + 0xc]
test ecx, ecx
jne 0x40e248
mov dword [esp + 4], edx
mov dword [esp], ebp
mov dword [esp + 0x18], edx
call fcn.0040fcc0
mov edx, dword [esp + 0x18]
jmp 0x40e248
call fcn.0040f810
mov ebx, eax
mov esi, eax
jmp 0x40e31d
cmp dword [esp + 0xc0], 4
je 0x40e54d
cmp dword [esp + 0xc0], 5
jne 0x40dd4b
mov dword [esp + 0x64], 1
jmp 0x40e03a
mov edx, dword [esp + 0x40]
test edx, edx
je 0x40d799
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.0040f7c0
jmp 0x40d799
mov eax, dword [esp + 0x38]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.0040fcc0
test eax, eax
jns 0x40df41
mov dword [esp], ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
sub dword [esp + 0x20], 1
call fcn.0040f810
mov ebp, eax
mov eax, dword [esp + 0x64]
test eax, eax
jne 0x40eb76
cmp dword [esp + 0xc0], 2
mov edx, dword [esp + 0x70]
jle 0x40e436
cmp dword [esp + 0x70], 0
jle 0x40ec19
mov dword [esp + 0x48], edx
mov esi, ebx
mov dword [esp + 0x24], edi
mov edi, dword [esp + 0x48]
mov dword [esp + 0x30], ebx
mov ebx, dword [esp + 0x38]
mov dword [esp + 0x8c], 1
jmp 0x40e482
mov dword [esp], ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
call fcn.0040f810
add dword [esp + 0x8c], 1
mov ebp, eax
mov dword [esp + 4], ebx
mov dword [esp], ebp
call fcn.0040f3a0
add eax, 0x30
mov byte [esi], al
add esi, 1
cmp edi, dword [esp + 0x8c]
jg 0x40e460
mov edi, dword [esp + 0x24]
mov ebx, dword [esp + 0x30]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x40], 0
mov eax, dword [esp + 0x44]
test eax, eax
je 0x40e85a
cmp dword [esp + 0x44], 2
je 0x40e892
cmp dword [ebp + 0x10], 1
jle 0x40ea44
movzx ecx, byte [esi - 1]
jmp 0x40e4e6
movzx ecx, byte [eax - 1]
mov esi, eax
cmp cl, 0x39
lea eax, [esi - 1]
jne 0x40e9b4
cmp eax, ebx
jne 0x40e4e0
mov edx, dword [esp + 0x20]
mov byte [ebx], 0x31
mov dword [esp + 0x24], 0x20
add edx, 2
mov dword [esp + 0x28], edx
jmp 0x40d77f
cmp dword [esp + 0x40], 1
jne 0x40decb
mov ecx, dword [esp + 0xb0]
mov eax, dword [ecx + 4]
add eax, 1
cmp dword [esp + 0xb4], eax
jle 0x40decb
add dword [esp + 0x54], 1
add dword [esp + 0x4c], 1
mov dword [esp + 0x58], 1
jmp 0x40decb
mov dword [esp + 0x64], 1
jmp 0x40dada
fstp st(0)
mov eax, dword [esp + 0x44]
test eax, eax
je 0x40e73c
fstp st(0)
fstp st(0)
cmp dword [esp + 0x44], 1
je 0x40e849
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x24], 0x10
add ecx, 1
mov dword [esp + 0x28], ecx
jmp 0x40d7a1
cmp dword [esp + 0x48], 0xe
mov dword [esp + 0x8c], 1
setbe dl
and edx, eax
mov eax, 1
jmp 0x40db0e
mov edx, 1
mov dword [esp + 0xc4], 1
jmp 0x40daf4
mov ecx, dword [esp + 0x58]
mov dword [esp], ebp
mov dword [esp + 4], ecx
call fcn.0040faa0
mov ebp, eax
jmp 0x40de89
mov ecx, eax
xor esi, esi
sub ecx, dword [esp + 0x58]
mov dword [esp + 0x58], eax
add dword [esp + 0x60], ecx
jmp 0x40ddd1
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.0040faa0
mov ebp, eax
jmp 0x40de89
fstp st(0)
fstp st(0)
fstp st(0)
mov dword [esp + 0x28], 2
xor edi, edi
mov dword [esp + 0x38], 0
jmp 0x40d769
fld qword [esp + 0x68]
mov esi, ebx
fnstcw word [esp + 0x7e]
fmul qword [edx*8 + 0x444878]
mov dword [esp + 0x8c], 1
movzx eax, word [esp + 0x7e]
fld qword [esp + 0x38]
mov ah, 0xc
fld dword [0x44485c]
fxch st(3)
mov word [esp + 0x7c], ax
jmp 0x40e663
fmul st(2)
add eax, 1
mov dword [esp + 0x8c], eax
fld st(0)
fldcw word [esp + 0x7c]
fist dword [esp + 0x78]
fldcw word [esp + 0x7e]
mov eax, dword [esp + 0x78]
test eax, eax
je 0x40e685
fstp st(1)
mov dword [esp + 0x78], eax
fild dword [esp + 0x78]
fsubp st(1)
jmp 0x40e687
fstp st(0)
lea ecx, [eax + 0x30]
mov byte [esi], cl
mov eax, dword [esp + 0x8c]
add esi, 1
cmp eax, edx
jne 0x40e655
fstp st(2)
fxch st(1)
fld dword [0x44486c]
fld st(2)
fadd st(1)
fxch st(2)
fucom st(2)
fnstsw ax
fstp st(2)
sahf
ja 0x40dfca
fsubrp st(2)
fxch st(1)
fucomp st(1)
fnstsw ax
sahf
jbe 0x40d6ef
fstp st(1)
fldz
fxch st(1)
fucompp
fnstsw ax
sahf
jp 0x40ea83
jne 0x40ea83
mov dword [esp + 0x24], 0
jmp 0x40e6ed
movzx ecx, byte [eax - 1]
mov esi, eax
cmp cl, 0x30
lea eax, [esi - 1]
je 0x40e6e7
mov edx, dword [esp + 0x74]
add edx, 1
mov dword [esp + 0x28], edx
jmp 0x40d7a1
mov eax, dword [esp + 0xb0]
sub edi, dword [esp + 0x40]
mov ecx, dword [eax + 4]
mov eax, dword [esp + 0x50]
sub eax, edi
cmp eax, ecx
jl 0x40e9d1
mov edx, dword [esp + 0x54]
add edi, 1
mov dword [esp + 0x8c], edi
mov esi, dword [esp + 0x58]
mov dword [esp + 0x50], edx
jmp 0x40ddf2
fadd st(0)
fucom st(1)
fnstsw ax
sahf
ja 0x40e845
fxch st(1)
fucompp
fnstsw ax
sahf
jp 0x40e758
je 0x40ea6e
mov edx, dword [esp + 0x20]
movzx ecx, byte [esi - 1]
mov dword [esp + 0x24], 0x10
mov dword [esp + 0x74], edx
jmp 0x40e6ed
mov ecx, dword [esp + 0x44]
mov edx, esi
mov dword [esp + 0x40], ebx
mov esi, dword [esp + 0x28]
mov ebx, dword [esp + 0x4c]
mov edi, dword [esp + 0x2c]
test ecx, ecx
je 0x40ea04
cmp dword [ebp + 0x10], 1
jle 0x40e9fa
cmp dword [esp + 0x44], 2
je 0x40ea20
mov dword [esp + 0x24], ebx
mov ebx, edx
jmp 0x40e7df
mov dword [esp], ebp
mov ebx, edi
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
call fcn.0040f810
mov ebp, eax
mov eax, dword [esp + 0x38]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.0040f3a0
add eax, 0x30
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.0040fcc0
test eax, eax
jle 0x40ea90
movzx ecx, byte [esp + 0x2c]
mov byte [esi], cl
add esi, 1
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
mov dword [esp], ebx
call fcn.0040f810
cmp dword [esp + 0x40], ebx
mov edi, eax
jne 0x40e7ac
mov dword [esp + 0x40], eax
jmp 0x40e7ac
mov edx, dword [esp + 0x54]
xor edi, edi
sub edx, dword [esp + 0x48]
mov dword [esp + 0x8c], 0
mov dword [esp + 0x50], edx
jmp 0x40ddf2
fstp st(0)
fstp st(0)
mov edx, dword [esp + 0x20]
movzx ecx, byte [esi - 1]
mov dword [esp + 0x74], edx
jmp 0x40dfd2
mov dword [esp], ebp
mov dword [esp + 4], 1
call fcn.0040fbc0
mov ebp, eax
mov eax, dword [esp + 0x38]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.0040fcc0
cmp eax, 0
jg 0x40e4d4
jne 0x40e892
test byte [esp + 0x2c], 1
jne 0x40e4d4
cmp dword [ebp + 0x10], 1
jle 0x40ebd2
mov dword [esp + 0x24], 0x10
jmp 0x40e8a8
mov esi, eax
cmp byte [esi - 1], 0x30
lea eax, [esi - 1]
je 0x40e8a6
mov edx, dword [esp + 0x20]
add edx, 1
mov dword [esp + 0x28], edx
jmp 0x40d77f
mov eax, dword [esp + 0x48]
test eax, eax
je 0x40d6a1
mov eax, dword [esp + 0x70]
test eax, eax
jle 0x40d6f1
fld st(0)
mov edx, dword [esp + 0x70]
fmul dword [0x44485c]
mov dword [esp + 0x74], 0xffffffff
fst qword [esp + 0x38]
fld st(0)
fmul dword [0x444860]
fadd dword [0x444864]
fstp qword [esp + 0x68]
sub dword [esp + 0x6c], 0x3400000
jmp 0x40dbb0
mov eax, dword [edi + 4]
mov dword [esp], eax
call fcn.0040f700
lea edx, [eax + 0xc]
mov esi, eax
mov eax, dword [edi + 0x10]
mov dword [esp], edx
lea ecx, [eax*4 + 8]
lea eax, [edi + 0xc]
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
call fcn.00410a30
mov dword [esp + 4], 1
mov dword [esp], esi
call fcn.0040fbc0
mov edx, eax
jmp 0x40e228
mov edx, esi
mov esi, dword [esp + 0x28]
mov dword [esp + 0x40], ebx
mov edi, edx
mov ebx, dword [esp + 0x4c]
jmp 0x40e4b3
cmp dword [esp + 0x44], 2
je 0x40e2a4
cmp dword [esp + 0x2c], 0x39
mov edx, esi
mov dword [esp + 0x40], ebx
mov esi, dword [esp + 0x28]
mov ebx, dword [esp + 0x4c]
je 0x40ea5c
movzx eax, byte [esp + 0x2c]
mov edi, edx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x24], 0x20
add eax, 1
add ecx, 1
mov byte [esi], al
add esi, 1
mov dword [esp + 0x28], ecx
jmp 0x40d77f
add ecx, 1
mov byte [eax], cl
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x24], 0x20
add ecx, 1
mov dword [esp + 0x28], ecx
jmp 0x40d77f
mov edi, dword [esp + 0x50]
mov esi, dword [esp + 0x58]
sub edi, ecx
mov ecx, dword [esp + 0x54]
add edi, 1
mov dword [esp + 0x8c], edi
mov dword [esp + 0x50], ecx
jmp 0x40ddf2
add ecx, 1
jmp 0x40dfef
cmp dword [ebp + 0x14], 0
jne 0x40e799
test eax, eax
jg 0x40eaaf
mov dword [esp + 0x24], 0
cmp dword [ebp + 0x10], 1
jg 0x40ea20
cmp dword [ebp + 0x14], 0
je 0x40ea28
mov dword [esp + 0x24], 0x10
movzx eax, byte [esp + 0x2c]
mov edi, edx
mov byte [esi], al
mov ecx, dword [esp + 0x20]
add esi, 1
add ecx, 1
mov dword [esp + 0x28], ecx
jmp 0x40d77f
mov ecx, dword [ebp + 0x14]
test ecx, ecx
jne 0x40e4d4
mov dword [esp + 0x24], 0
jmp 0x40e8a8
mov byte [esi], 0x39
mov edi, edx
add esi, 1
mov ecx, 0x39
jmp 0x40e4e6
mov edx, dword [esp + 0x20]
and ecx, 1
movzx ecx, byte [esi - 1]
mov dword [esp + 0x74], edx
jne 0x40dfd2
mov dword [esp + 0x24], 0x10
jmp 0x40e6ed
cmp dword [esp + 0x2c], 0x39
mov edx, ebx
mov ebx, dword [esp + 0x24]
je 0x40ea5c
add dword [esp + 0x2c], 1
mov dword [esp + 0x24], 0x20
jmp 0x40ea28
mov dword [esp], ebp
mov dword [esp + 4], 1
mov dword [esp + 0x18], edx
call fcn.0040fbc0
mov ebp, eax
mov eax, dword [esp + 0x38]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.0040fcc0
mov edx, dword [esp + 0x18]
cmp eax, 0
jle 0x40ebae
mov ecx, dword [esp + 0x34]
add ecx, 0x31
cmp edi, 0x39
mov dword [esp + 0x2c], ecx
je 0x40ea5c
mov dword [esp + 0x24], 0x20
jmp 0x40ea14
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x24], 0x10
add ecx, 1
mov dword [esp + 0x28], ecx
jmp 0x40d7a1
jne 0x40e16b
fstp st(0)
fstp st(0)
mov edx, dword [esp + 0x20]
mov dword [esp + 0x24], 0
add edx, 1
mov dword [esp + 0x28], edx
jmp 0x40d7a1
cmp dword [esp + 0x2c], 0x39
mov edx, esi
mov dword [esp + 0x40], ebx
mov esi, dword [esp + 0x28]
mov ebx, dword [esp + 0x4c]
je 0x40ea5c
test edi, edi
jle 0x40ebe9
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x24], 0x20
add ecx, 0x31
mov dword [esp + 0x2c], ecx
jmp 0x40ea28
mov dword [esp], edi
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
call fcn.0040f810
cmp dword [esp + 0x70], 0
mov edi, eax
jg 0x40eba1
cmp dword [esp + 0xc0], 2
jg 0x40ebc5
mov edx, dword [esp + 0x70]
mov dword [esp + 0x48], edx
jmp 0x40e204
jne 0x40eaf6
test byte [esp + 0x2c], 1
je 0x40eaf6
nop
jmp 0x40eae2
mov ecx, dword [esp + 0x70]
mov dword [esp + 0x48], ecx
jmp 0x40df5b
cmp dword [ebp + 0x14], 0
mov dword [esp + 0x24], 0
jne 0x40e89c
jmp 0x40e8a8
cmp dword [ebp + 0x10], 1
mov dword [esp + 0x24], 0x10
jg 0x40ea28
cmp dword [ebp + 0x14], 1
sbb eax, eax
not eax
and eax, 0x10
mov dword [esp + 0x24], eax
jmp 0x40ea28
mov eax, 1
jmp 0x40dab0
mov dword [esp + 0x48], edx
jmp 0x40df5b