Function at 0x414bd0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0xdc
call sub.msvcrt.dll_localeconv
mov eax, dword [eax]
mov dword [esp], eax
mov dword [esp + 0x34], eax
call sub.msvcrt.dll_strlen
mov ebp, dword [esp + 0xf8]
mov edx, dword [esp + 0xf0]
mov dword [esp + 0xb4], 0
mov dword [esp + 0xc4], 0
mov ebp, dword [ebp]
mov dword [esp + 0xc0], edx
fldz
fstp qword [esp + 0xc8]
mov dword [esp + 0x58], eax
mov eax, edx
mov dword [esp + 0x40], ebp
movsx edx, byte [eax]
cmp dl, 0x2d
jbe 0x414cd2
mov ebx, eax
mov dword [esp + 0x5c], 0
cmp dl, 0x30
mov dword [esp + 0x44], 0
je 0x414f40
mov ebp, dword [esp + 0xf8]
cmp edx, 0x2f
mov edi, edx
mov ebp, dword [ebp + 0x10]
mov dword [esp + 0x88], ebp
jle 0x41609a
cmp edx, 0x39
jg 0x41609a
lea ebp, [ebx + 1]
xor esi, esi
mov dword [esp + 0x3c], ebx
xor eax, eax
xor ebx, ebx
mov dword [esp + 0x38], 0
jmp 0x414cbf
lea ecx, [esi + esi*4]
lea esi, [edx + ecx*2 - 0x30]
mov dword [esp + 0xc0], ebp
movsx edx, byte [ebp]
add eax, 1
mov ecx, ebp
cmp edx, 0x2f
mov edi, edx
jle 0x414db0
add ebp, 1
cmp edx, 0x39
jg 0x414db0
cmp eax, 8
jle 0x414c91
cmp eax, 0xf
jg 0x414c98
lea ecx, [ebx + ebx*4]
lea ebx, [edx + ecx*2 - 0x30]
jmp 0x414c98
movzx ecx, dl
jmp dword [ecx*4 + 0x4246cc]
mov dword [esp + 0x5c], 1
lea ebx, [eax + 1]
mov dword [esp + 0xc0], ebx
movsx edx, byte [eax + 1]
test dl, dl
jne 0x414c44
mov ecx, dword [esp + 0xf0]
xor edi, edi
mov dword [esp + 0xb4], 6
mov dword [esp + 0x5c], 0
mov dword [esp + 0xc0], ecx
mov ebx, dword [esp + 0xf4]
test ebx, ebx
je 0x414d3d
mov eax, dword [esp + 0xc0]
mov ebp, dword [esp + 0xf4]
mov dword [ebp], eax
mov ecx, dword [esp + 0x5c]
test ecx, ecx
jne 0x414d85
test edi, edi
je 0x414d73
mov eax, dword [esp + 0x100]
mov ebp, dword [esp + 0x40]
mov dword [esp + 8], edi
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.00419350
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
call fcn.00418850
mov eax, dword [esp + 0xb4]
add esp, 0xdc
pop ebx
pop esi
pop edi
pop ebp
ret
or dword [esp + 0xb4], 8
jmp 0x414d45
mov dword [esp + 0x5c], 0
jmp 0x414ce8
add eax, 1
mov dword [esp + 0xc0], eax
jmp 0x414c2e
mov dword [esp + 0x38], ebx
mov ebx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x34]
movsx ebp, byte [ebp]
cmp ebp, edx
mov dword [esp + 0x3c], ebp
je 0x415290
mov dword [esp + 0x48], ebx
mov ebp, eax
xor ebx, ebx
mov dword [esp + 0x34], 0
mov dword [esp + 0x3c], 0
mov edx, edi
and edx, 0xffffffdf
cmp edx, 0x45
je 0x414f05
xor edx, edx
test ebp, ebp
jne 0x414fa8
mov ecx, dword [esp + 0x34]
or ecx, dword [esp + 0x44]
jne 0x414ef9
mov eax, dword [esp + 0x3c]
test eax, eax
jne 0x414f83
cmp edi, 0x4e
je 0x416353
nop
jg 0x416341
cmp edi, 0x49
jne 0x414f83
lea ebx, [esp + 0xc0]
mov dword [esp + 4], 0x4246c0
mov dword [esp], ebx
call fcn.00419300
test eax, eax
je 0x414f83
mov dword [esp + 4], str.inity
mov dword [esp], ebx
sub dword [esp + 0xc0], 1
call fcn.00419300
test eax, eax
jne 0x414e72
add dword [esp + 0xc0], 1
mov ebp, dword [esp + 0xf8]
mov dword [esp + 0xb4], 3
mov dword [esp + 0x44], 0
mov eax, dword [ebp + 8]
add eax, 1
mov edx, dword [esp + 0xfc]
mov dword [edx], eax
mov edi, dword [esp + 0xc4]
mov eax, dword [esp + 0x44]
test eax, eax
je 0x414d21
mov ebp, dword [esp + 0x88]
test ebp, ebp
jne 0x415680
mov edx, dword [esp + 0xb4]
xor eax, eax
mov esi, dword [edi + 0x10]
and edx, 0xfffffff8
test esi, esi
setg al
add eax, eax
or eax, edx
test al, 0x30
mov dword [esp + 0xb4], eax
je 0x414d21
or eax, 0x40
mov dword [esp + 0xb4], eax
call sub.msvcrt.dll__errno
mov dword [eax], 0x22
mov edi, dword [esp + 0xc4]
jmp 0x414d21
mov edx, dword [esp + 0x34]
or edx, ebp
or edx, dword [esp + 0x44]
jne 0x415370
mov ecx, dword [esp + 0xf0]
mov dword [esp + 0xb4], 6
mov edi, dword [esp + 0xc4]
mov dword [esp + 0xc0], ecx
jmp 0x414d21
movzx eax, byte [ebx + 1]
cmp al, 0x58
je 0x416030
cmp al, 0x78
je 0x416030
lea eax, [ebx + 1]
mov dword [esp + 0xc0], eax
mov ebx, eax
lea eax, [eax + 1]
movsx edx, byte [eax - 1]
cmp dl, 0x30
je 0x414f57
xor edi, edi
test dl, dl
je 0x414d21
mov dword [esp + 0x44], 1
jmp 0x414c55
mov edx, dword [esp + 0xf0]
mov dword [esp + 0xb4], 6
mov edi, dword [esp + 0xc4]
mov dword [esp + 0xc0], edx
jmp 0x414d21
mov ecx, dword [esp + 0xf8]
sub edx, ebx
mov dword [esp + 0x30], edx
mov dword [esp + 0xb4], 1
mov edx, dword [ecx + 0xc]
and edx, 3
mov ecx, edx
sub ecx, dword [esp + 0x5c]
cmp edx, 2
mov dword [esp + 0x78], ecx
je 0x414ff1
mov ecx, dword [esp + 0x5c]
add ecx, 1
cmp edx, 3
mov dword [esp + 0x78], ecx
je 0x414ff1
test edx, edx
sete dl
movzx edx, dl
mov dword [esp + 0x78], edx
test eax, eax
mov dword [esp + 0x34], ebp
je 0x414ffd
mov dword [esp + 0x34], eax
cmp ebp, 0x10
mov ebx, ebp
jle 0x415009
mov ebx, 0x10
xor edx, edx
cmp ebx, 9
mov dword [esp + 0x90], esi
mov dword [esp + 0x94], edx
fild qword [esp + 0x90]
fst qword [esp + 0xc8]
jle 0x415060
fmul qword [ebx*8 + 0x424978]
xor edx, edx
mov eax, dword [esp + 0x38]
mov dword [esp + 0x94], edx
mov dword [esp + 0x90], eax
fild qword [esp + 0x90]
faddp st(1)
fstp qword [esp + 0xc8]
jmp 0x415062
fstp st(0)
cmp ebp, 0xf
jg 0x415072
cmp dword [esp + 0x40], 0x35
jle 0x4151dd
mov eax, dword [esp + 0x30]
mov edx, ebp
sub edx, ebx
add eax, edx
cmp eax, 0
jle 0x4160d7
mov edx, eax
and edx, 0xf
je 0x4150a1
fld qword [esp + 0xc8]
fmul qword [edx*8 + 0x4249c0]
fstp qword [esp + 0xc8]
and eax, 0xfffffff0
jne 0x4154b0
fld qword [esp + 0xc8]
xor ebx, ebx
lea eax, [esp + 0xb8]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xbc]
mov dword [esp + 8], eax
fstp qword [esp]
call fcn.00419060
mov ecx, dword [esp + 0xbc]
mov edx, dword [esp + 0xb8]
add ecx, ebx
mov ebx, edx
sub ebx, dword [esp + 0x40]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xbc], ecx
test ebx, ebx
jle 0x415122
mov dword [esp], eax
mov dword [esp + 4], ebx
call fcn.00419460
mov ecx, dword [esp + 0xbc]
mov eax, dword [esp + 0x40]
add ecx, ebx
mov dword [esp + 0xb8], eax
mov edx, eax
mov dword [esp + 0xbc], ecx
mov eax, dword [esp + 0xf8]
lea ebx, [ecx + edx]
sub ebx, dword [esp + 0x40]
mov eax, dword [eax + 8]
mov dword [esp + 0x28], eax
add eax, 1
cmp ebx, eax
jg 0x415fed
mov eax, dword [esp + 0xf8]
mov eax, dword [eax + 4]
cmp ebx, eax
mov dword [esp + 0x60], eax
jge 0x416202
mov edi, ecx
sub edi, eax
cmp edi, 0
jle 0x4155cf
mov eax, dword [esp + 0xc4]
mov dword [esp + 4], edi
mov dword [esp], eax
call fcn.00418c50
add dword [esp + 0xb8], edi
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x60]
test eax, eax
mov dword [esp + 0xbc], edx
je 0x4156c5
add ebx, 1
cmp edx, ebx
jle 0x4156c9
mov edi, dword [esp + 0xc4]
mov ebp, dword [esp + 0x60]
mov edx, dword [esp + 0xfc]
mov dword [esp + 0xb4], 0x50
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
mov dword [edx], ebp
jmp 0x414eae
cmp dword [esp + 0x30], 0
je 0x416216
jle 0x41562b
cmp dword [esp + 0x30], 0x16
jg 0x416240
mov eax, dword [esp + 0xc8]
mov ecx, dword [esp + 0x30]
test eax, eax
mov edx, dword [ecx*4 + 0x4247a0]
je 0x4163dd
bsf ecx, eax
mov eax, 0x35
sub eax, ecx
mov ecx, dword [esp + 0x30]
add eax, edx
fld qword [esp + 0xc8]
cmp eax, 0x35
setle al
movzx eax, al
fmul qword [ecx*8 + 0x4249c0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x100]
lea ecx, [esp + 0xb4]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x78]
mov dword [esp], eax
fstp qword [esp + 0xc8]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xfc]
lea eax, [esp + 0xc8]
mov edx, dword [esp + 0xf8]
call fcn.00414810
test eax, eax
jne 0x414ef9
xor eax, eax
jmp 0x415076
mov ebp, dword [esp + 0x34]
movzx edx, byte [ebp + 1]
test dl, dl
je 0x4165d5
cmp dl, byte [ecx + 1]
jne 0x414dcc
mov edx, 1
mov edi, ebp
mov dword [esp + 0x48], ebx
jmp 0x4152bf
cmp bl, byte [ecx + edx]
jne 0x415490
add edx, 1
movzx ebx, byte [edi + edx]
mov ebp, edx
test bl, bl
jne 0x4152b6
mov ebx, dword [esp + 0x48]
add ecx, ebp
test eax, eax
mov dword [esp + 0xc0], ecx
movsx edi, byte [ecx]
je 0x415574
mov dword [esp + 0x48], ebx
mov ebp, eax
xor ebx, ebx
mov dword [esp + 0x34], 0
lea ecx, [edi - 0x30]
cmp ecx, 9
mov dword [esp + 0x50], ecx
mov dword [esp + 0x3c], 1
ja 0x414de4
mov edx, dword [esp + 0xc0]
add dword [esp + 0x34], 1
mov dword [esp + 0x3c], edx
mov edi, dword [esp + 0x50]
test edi, edi
je 0x416326
add ebx, dword [esp + 0x34]
cmp dword [esp + 0x34], 1
je 0x41677b
mov edx, dword [esp + 0x34]
mov dword [esp + 0x60], ebp
lea edi, [ebp + edx - 1]
mov edx, ebp
mov ebp, dword [esp + 0x38]
jmp 0x415358
lea esi, [esi + esi*4]
add esi, esi
cmp edx, edi
je 0x4162f8
add edx, 1
lea ecx, [edx - 1]
cmp ecx, 8
jle 0x41534b
cmp edx, 0x10
jg 0x415350
lea ebp, [ebp + ebp*4]
add ebp, ebp
jmp 0x415350
mov edx, dword [esp + 0xc0]
mov dword [esp + 0xf0], edx
mov ecx, dword [esp + 0xf0]
add edx, 1
mov dword [esp + 0xc0], edx
movzx edx, byte [ecx + 1]
cmp dl, 0x2b
movsx edi, dl
je 0x4161c4
cmp dl, 0x2d
je 0x415602
mov dword [esp + 0x60], 0
lea edx, [edi - 0x30]
cmp edx, 9
ja 0x4156b0
cmp edi, 0x30
jne 0x4153e2
mov edx, dword [esp + 0xc0]
add edx, 1
nop
lea esi, [esi]
mov dword [esp + 0xc0], edx
movsx edi, byte [edx]
add edx, 1
cmp edi, 0x30
je 0x4153d0
lea ecx, [edi - 0x31]
xor edx, edx
cmp ecx, 8
ja 0x414df4
mov ecx, dword [esp + 0xc0]
sub edi, 0x30
mov dword [esp + 0x30], edi
mov edx, ecx
add edx, 1
mov dword [esp + 0xc0], edx
movsx edi, byte [ecx + 1]
mov dword [esp + 0x50], ecx
cmp edi, 0x2f
jle 0x41545a
cmp edi, 0x39
jg 0x41545a
add edx, 1
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x64], ebp
jmp 0x415438
add edx, 1
cmp edi, 0x39
jg 0x415450
lea ecx, [ecx + ecx*4]
mov ebp, edx
lea ecx, [edi + ecx*2 - 0x30]
mov dword [esp + 0xc0], edx
movsx edi, byte [edx]
cmp edi, 0x2f
jg 0x415430
mov edx, ebp
mov ebp, dword [esp + 0x64]
mov dword [esp + 0x30], ecx
mov ecx, edx
mov edx, 0x4e1f
sub ecx, dword [esp + 0x50]
cmp ecx, 8
jg 0x41547b
mov edx, dword [esp + 0x30]
cmp edx, 0x4e1f
jle 0x41547b
mov edx, 0x4e1f
mov ecx, dword [esp + 0x60]
test ecx, ecx
je 0x414df4
neg edx
jmp 0x414df4
mov edi, dword [esp + 0x3c]
mov ebp, eax
xor ebx, ebx
mov dword [esp + 0x34], 0
mov dword [esp + 0x3c], 0
jmp 0x414de4
sar eax, 4
cmp eax, 0xf
jle 0x416656
fld qword [0x424ae0]
mov ecx, eax
xor edi, edi
mov edx, dword [esp + 0xcc]
sub ecx, 0x10
mov ebx, edx
and edx, 0x800fffff
or edx, 0x3ff00000
and ebx, 0x7ff00000
mov dword [esp + 0xcc], edx
shr ebx, 0x14
cmp ecx, 0xf
fld qword [esp + 0xc8]
lea edi, [edi + ebx - 0x3ff]
fmul st(1)
fstp qword [esp + 0xc8]
jg 0x4154c6
fstp st(0)
and eax, 0xf
mov ebx, edi
mov ecx, dword [esp + 0xcc]
mov edx, ecx
and ecx, 0x800fffff
and edx, 0x7ff00000
or ecx, 0x3ff00000
shr edx, 0x14
test eax, eax
lea ebx, [ebx + edx - 0x3ff]
mov dword [esp + 0xcc], ecx
je 0x41665d
fld qword [esp + 0xc8]
xor edx, edx
fld st(0)
test al, 1
je 0x41555f
fstp st(1)
fmul qword [edx*8 + 0x424ac0]
fld st(0)
add edx, 1
sar eax, 1
jne 0x415550
fxch st(1)
fstp qword [esp + 0xc8]
jmp 0x4150b3
cmp edi, 0x30
jne 0x4166cf
lea edx, [ecx + 1]
mov dword [esp + 0xc0], edx
movsx edi, byte [edx]
mov ebp, edx
sub ebp, ecx
add edx, 1
cmp edi, 0x30
je 0x415580
mov dword [esp + 0x34], ebp
lea edx, [edi - 0x31]
cmp edx, 8
ja 0x4162e3
mov ebp, dword [esp + 0xc0]
sub edi, 0x30
mov ebx, dword [esp + 0x34]
mov dword [esp + 0x50], edi
mov dword [esp + 0x34], 1
mov dword [esp + 0x48], ebp
mov dword [esp + 0x3c], ebp
xor ebp, ebp
jmp 0x41531c
je 0x415186
add edx, edi
test edx, edx
mov dword [esp + 0xb8], edx
jle 0x416691
mov eax, edi
neg eax
mov dword [esp + 4], eax
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
call fcn.00419460
jmp 0x415186
mov dword [esp + 0x60], 1
mov edx, dword [esp + 0xf0]
add edx, 2
mov dword [esp + 0xc0], edx
mov edx, dword [esp + 0xf0]
movsx edi, byte [edx + 2]
jmp 0x4153b0
mov eax, dword [esp + 0x30]
cmp eax, 0xffffffea
jl 0x415076
neg eax
fld qword [esp + 0xc8]
fdiv qword [eax*8 + 0x4249c0]
mov edx, dword [esp + 0x78]
lea eax, [esp + 0xb4]
mov ecx, dword [esp + 0x100]
mov dword [esp + 0xc], eax
mov dword [esp + 4], 0
mov dword [esp + 8], edx
mov dword [esp], ecx
fstp qword [esp + 0xc8]
jmp 0x415262
mov dword [edi + 0x10], 0
mov dword [esp + 0xb4], 0x50
call sub.msvcrt.dll__errno
mov edi, dword [esp + 0xc4]
mov dword [eax], 0x22
jmp 0x414d21
mov edx, dword [esp + 0xf0]
mov dword [esp + 0xc0], edx
xor edx, edx
jmp 0x414df4
mov edx, dword [esp + 0x60]
mov dword [esp + 0x8c], edx
mov dword [esp + 0x44], 1
mov dword [esp + 8], ebp
mov ebp, dword [esp + 0x34]
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], esi
xor esi, esi
mov dword [esp + 4], ebp
mov ebp, dword [esp + 0x48]
mov dword [esp + 0x10], eax
mov dword [esp], ebp
call fcn.00419190
mov ebp, dword [esp + 0x40]
add ebp, 1
mov dword [esp + 0x7c], ebp
mov ebp, dword [esp + 0x30]
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x64]
neg ebp
sar eax, 0x1f
and ebp, eax
not eax
mov dword [esp + 0x58], ebp
mov ebp, dword [esp + 0x30]
add edx, 0xc
mov dword [esp + 0x80], edx
and eax, ebp
mov ebp, dword [esp + 0x78]
mov dword [esp + 0x3c], eax
and ebp, 1
mov dword [esp + 0x84], ebp
jmp 0x41591e
mov edi, dword [esp + 0x78]
test edi, edi
je 0x415b09
mov edx, dword [esp + 0x84]
xor edx, esi
mov dword [esp + 0x70], edx
je 0x4164a6
test esi, esi
je 0x415d80
fld1
xor esi, esi
fst qword [esp + 0x50]
mov dword [esp + 0xb4], 0x21
fstp qword [esp + 0x48]
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0x20
mov eax, dword [esp + 0xb8]
mov edx, dword [esp + 0xbc]
mov edi, dword [esp + 0x44]
add edx, eax
test edi, edi
mov dword [esp + 0x74], edx
jne 0x4157c4
cmp dword [esp + 0x40], eax
jg 0x415f22
lea eax, [esp + 0xb0]
fld qword [esp + 0x50]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xac]
mov dword [esp + 8], eax
fstp qword [esp]
call fcn.00419060
mov edi, eax
mov eax, dword [esp + 0xac]
cmp eax, 0
jl 0x415f60
je 0x415808
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.00418c50
mov edi, eax
mov ebx, dword [esp + 0xc4]
test esi, esi
mov dword [esp + 4], edi
mov dword [esp], ebx
je 0x415b95
call fcn.00418dc0
mov esi, dword [esp + 0x44]
mov edx, dword [ebx + 0x10]
test esi, esi
mov dword [esp + 0xc4], eax
jne 0x415875
lea ecx, [edx - 1]
cmp ecx, dword [eax + 0x10]
jge 0x415854
add edx, 3
bsr ecx, dword [eax + edx*4 + 4]
bsr edx, dword [ebx + edx*4 + 4]
xor ecx, 0x1f
xor edx, 0x1f
cmp ecx, edx
jle 0x415875
mov edx, dword [esp + 0x60]
cmp dword [esp + 0x8c], edx
jne 0x415d30
sub dword [esp + 0xb8], 1
mov dword [esp + 0x44], 1
mov dword [esp], edi
call fcn.00418850
mov dword [esp], ebx
call fcn.00418850
mov edx, dword [esp + 0x70]
test edx, edx
jne 0x415c10
mov eax, dword [esp + 0x68]
test eax, eax
je 0x4158e4
mov eax, dword [esp + 0xbc]
add eax, dword [esp + 0xb8]
cmp dword [esp + 0x74], eax
jne 0x4158e4
fld qword [esp + 0x50]
fmul qword [0x424810]
fld qword [esp + 0x48]
fsub dword [0x424804]
fld st(1)
fchs
fucomp st(1)
fnstsw ax
sahf
jbe 0x415ef0
fstp st(0)
fld qword [esp + 0x48]
fucompp
fnstsw ax
sahf
jbe 0x4158e4
jmp 0x415f12
fstp st(0)
mov eax, dword [esp + 0x44]
xor esi, esi
test eax, eax
je 0x415d67
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call fcn.00418850
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call fcn.00418850
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.00418850
mov dword [esp], ebp
call fcn.00418850
mov edx, dword [esp + 0x64]
mov eax, dword [edx + 4]
mov dword [esp], eax
call fcn.00418790
mov ecx, dword [esp + 0x64]
mov ebp, dword [esp + 0x80]
mov edx, dword [ecx + 0x10]
mov dword [esp + 4], ebp
mov dword [esp + 0x34], eax
add eax, 0xc
mov dword [esp], eax
lea edx, [edx*4 + 8]
mov dword [esp + 8], edx
call sub.msvcrt.dll_memcpy
mov eax, dword [esp + 0xc4]
mov eax, dword [eax + 4]
mov dword [esp], eax
call fcn.00418790
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0xc4]
mov edx, dword [esp + 0x30]
mov ecx, dword [eax + 0x10]
add eax, 0xc
add edx, 0xc
mov dword [esp], edx
mov dword [esp + 4], eax
lea ecx, [ecx*4 + 8]
mov dword [esp + 8], ecx
call sub.msvcrt.dll_memcpy
mov ebx, dword [esp + 0xb8]
mov dword [esp], 1
mov ebp, dword [esp + 0xbc]
call fcn.004189a0
sub ebx, esi
add ebp, esi
test ebp, ebp
mov dword [esp + 0x38], eax
js 0x415d20
mov edi, dword [esp + 0x58]
mov edx, dword [esp + 0x3c]
add edi, ebp
mov eax, dword [esp + 0x7c]
add ebp, ebx
sub ebp, dword [esp + 0x40]
sub eax, ebx
cmp dword [esp + 0x60], ebp
jle 0x4159e6
sub ebp, dword [esp + 0x60]
add eax, ebp
lea ecx, [edi + eax]
lea ebp, [edx + eax]
mov edx, ecx
cmp ecx, ebp
jle 0x4159f4
mov edx, ebp
cmp edx, edi
jle 0x4159fa
mov edx, edi
test edx, edx
jle 0x415a04
sub ecx, edx
sub ebp, edx
sub edi, edx
mov eax, dword [esp + 0x58]
test eax, eax
je 0x415a58
mov edx, dword [esp + 0x58]
mov eax, dword [esp + 0x38]
mov dword [esp + 0x20], ecx
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00418b30
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.004189d0
mov edx, dword [esp + 0x30]
mov dword [esp], edx
mov dword [esp + 0x24], eax
call fcn.00418850
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x30], eax
sub ecx, esi
cmp ecx, 0
jle 0x415b78
mov eax, dword [esp + 0x30]
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.00418c50
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x415a97
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x34]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00418b30
mov dword [esp + 0x34], eax
test ebp, ebp
jle 0x415aaf
mov eax, dword [esp + 0x34]
mov dword [esp + 4], ebp
mov dword [esp], eax
call fcn.00418c50
mov dword [esp + 0x34], eax
test edi, edi
jle 0x415ac7
mov eax, dword [esp + 0x38]
mov dword [esp + 4], edi
mov dword [esp], eax
call fcn.00418c50
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call fcn.00418dc0
cmp dword [eax + 0x10], 1
mov ebp, eax
jle 0x415c00
mov eax, dword [esp + 0x38]
mov esi, dword [ebp + 0xc]
mov dword [ebp + 0xc], 0
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.00418d50
test eax, eax
jle 0x415750
cmp eax, 0
jl 0x4163f8
je 0x4164bd
mov eax, dword [esp + 0x38]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.00419270
fld dword [0x424800]
fucomp st(1)
fnstsw ax
sahf
jb 0x415e30
fstp st(0)
test esi, esi
jne 0x415f90
mov dword [esp + 0x70], 0
cmp ebx, 1
jle 0x4165a0
fld1
mov esi, 1
fst qword [esp + 0x50]
mov dword [esp + 0x68], 0
fstp qword [esp + 0x48]
mov dword [esp + 0x6c], 0x10
jmp 0x41579e
je 0x415a77
mov eax, dword [esp + 0x30]
neg ecx
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.00419460
jmp 0x415a77
call fcn.004195b0
mov edx, dword [eax + 0x10]
mov dword [esp + 0xc4], eax
lea ecx, [edx - 1]
cmp ecx, dword [ebx + 0x10]
jge 0x415bc7
add edx, 3
bsr ecx, dword [eax + edx*4 + 4]
bsr edx, dword [ebx + edx*4 + 4]
xor ecx, 0x1f
xor edx, 0x1f
cmp ecx, edx
jge 0x415875
mov ecx, dword [esp + 0x44]
test ecx, ecx
je 0x415fc0
mov eax, dword [esp + 0xb8]
add eax, 1
cmp dword [esp + 0x40], eax
mov dword [esp + 0xb8], eax
sete al
movzx eax, al
sub eax, 1
and dword [esp + 0x44], eax
jmp 0x415875
mov eax, dword [eax + 0x14]
test eax, eax
jne 0x415ae7
nop
lea esi, [esi]
mov eax, dword [esp + 0x44]
test eax, eax
je 0x4160ad
mov eax, dword [esp + 0xbc]
mov edx, dword [esp + 0xfc]
mov dword [edx], eax
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call fcn.00418850
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call fcn.00418850
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.00418850
mov eax, dword [esp + 0x64]
mov dword [esp], eax
call fcn.00418850
mov dword [esp], ebp
call fcn.00418850
mov ebp, dword [esp + 0xf8]
mov eax, dword [esp + 0xbc]
cmp dword [ebp + 8], eax
jge 0x414e9b
mov ebp, dword [esp + 0xf8]
mov eax, dword [ebp + 0xc]
and eax, 3
cmp eax, 2
je 0x41657d
cmp eax, 3
je 0x41656c
cmp eax, 1
je 0x415ff5
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
call fcn.00418850
mov ebp, dword [esp + 0xf8]
mov edx, dword [esp + 0xfc]
mov ecx, dword [esp + 0x100]
mov dword [esp + 0xc4], 0
mov eax, dword [ebp + 8]
mov dword [esp + 0xb4], 0x11
mov dword [edx], eax
mov edx, dword [ebp]
lea eax, [edx + 0x1f]
sar eax, 5
lea eax, [ecx + eax*4]
cmp ecx, eax
jae 0x415cff
mov dword [ecx], 0xffffffff
add ecx, 4
cmp eax, ecx
ja 0x415cf2
xor edi, edi
and edx, 0x1f
je 0x414ea2
mov ecx, 0x20
sub ecx, edx
shr dword [eax - 4], cl
jmp 0x414ea2
mov edx, dword [esp + 0x3c]
mov edi, dword [esp + 0x58]
sub edx, ebp
jmp 0x4159ce
mov dword [esp + 4], 1
mov dword [esp], eax
call fcn.00418c50
mov dword [esp], edi
sub dword [esp + 0xbc], 1
sub dword [esp + 0x8c], 1
mov dword [esp + 0xc4], eax
call fcn.00418850
mov dword [esp], ebx
call fcn.00418850
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
call fcn.00419570
mov esi, eax
jmp 0x4158f2
mov edx, dword [esp + 0x60]
cmp dword [esp + 0x8c], edx
mov dword [esp + 0xb4], 0x11
je 0x415b4b
cmp dword [esp + 0x40], 0x1f
jle 0x41658e
mov edx, dword [esp + 0xc4]
mov esi, dword [edx + 0x14]
test esi, esi
jne 0x415b4b
mov eax, dword [esp + 0x40]
xor esi, esi
jmp 0x415dcd
mov ecx, dword [edx + esi*4 + 0x14]
test ecx, ecx
jne 0x415b4b
sub eax, 0x20
add esi, 1
cmp eax, 0x1f
jg 0x415dc1
cmp eax, 1
jle 0x415df8
add esi, 4
sub eax, 1
mov edi, dword [edx + esi*4 + 4]
bsf ecx, edi
shr edi, cl
cmp eax, ecx
mov dword [edx + esi*4 + 4], edi
jg 0x415b4b
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x8c]
mov dword [esp], edx
mov dword [esp + 4], ecx
sub eax, 1
mov dword [esp + 0xbc], eax
mov dword [esp + 0xb8], ecx
call fcn.00414b50
mov dword [esp + 0xc4], eax
jmp 0x415c10
fld dword [0x424804]
cmp esi, 1
fmul st(1), st(0)
fxch st(1)
sbb ecx, ecx
and ecx, 0x10
add ecx, 0x10
cmp esi, 1
sbb esi, esi
and esi, 1
fstp qword [esp + 0x48]
fld qword [0x424808]
fld qword [esp + 0x48]
fxch st(1)
fucomp st(1)
fnstsw ax
mov dword [esp + 0x6c], ecx
sahf
jbe 0x415f73
fnstcw word [esp + 0x9a]
fld st(0)
cmp dword [esp + 0x78], 1
movzx eax, word [esp + 0x9a]
mov ah, 0xc
mov word [esp + 0x98], ax
fldcw word [esp + 0x98]
fistp dword [esp + 0x68]
fldcw word [esp + 0x9a]
fild dword [esp + 0x68]
fst qword [esp + 0x50]
fsubp st(1)
fst qword [esp + 0x48]
je 0x4161d1
cmp dword [esp + 0x78], 2
je 0x4161f3
fucompp
fnstsw ax
sahf
jb 0x415ee0
add dword [esp + 0x68], 1
mov eax, 0x30
sub eax, dword [esp + 0x6c]
fild dword [esp + 0x68]
mov dword [esp + 0x6c], eax
fstp qword [esp + 0x50]
nop
mov dword [esp + 0x70], 0
jmp 0x41579e
fucomp st(1)
fnstsw ax
sahf
jbe 0x4158e2
fsubr dword [0x4247fc]
fld qword [esp + 0x48]
fxch st(1)
fucompp
fnstsw ax
sahf
jbe 0x4158e4
mov edx, dword [esp + 0x6c]
or dword [esp + 0xb4], edx
jmp 0x415c10
mov ebx, dword [esp + 0x40]
sub ebx, eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00418c50
mov ecx, dword [esp + 0x40]
sub dword [esp + 0xbc], ebx
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xc4], eax
jmp 0x4157c4
neg eax
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.00419460
jmp 0x415808
fstp st(0)
fstp st(0)
fld qword [esp + 0x48]
fstp qword [esp + 0x50]
mov dword [esp + 0x68], 0
jmp 0x415ee0
fld1
xor esi, esi
fst qword [esp + 0x50]
mov dword [esp + 0x68], 0
fstp qword [esp + 0x48]
mov dword [esp + 0x6c], 0x20
mov dword [esp + 0x70], 0
jmp 0x41579e
mov dword [esp + 4], 1
mov dword [esp], eax
call fcn.00419460
add dword [esp + 0xbc], 1
add dword [esp + 0x8c], 1
mov dword [esp + 0x68], 0
jmp 0x415875
mov dword [esp + 0x44], 0
mov eax, dword [esp + 0xc4]
mov dword [esp + 0xb4], 0xa3
mov dword [eax + 0x10], 0
call sub.msvcrt.dll__errno
mov ebp, dword [esp + 0xf8]
mov dword [eax], 0x22
mov eax, dword [ebp + 8]
add eax, 1
jmp 0x414e92
mov ebp, dword [esp + 0x5c]
lea eax, [esp + 0xc4]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x10], ebp
mov ebp, dword [esp + 0xf8]
mov dword [esp + 8], eax
lea eax, [esp + 0xc0]
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.00419730
mov edi, dword [esp + 0xc4]
cmp eax, 6
mov dword [esp + 0xb4], eax
jne 0x414d21
mov edx, dword [esp + 0xf0]
mov dword [esp + 0x5c], 0
mov dword [esp + 0xc0], edx
jmp 0x414d21
mov ecx, ebx
xor esi, esi
mov dword [esp + 0x38], 0
xor eax, eax
jmp 0x414db8
mov eax, dword [esp + 0xb8]
mov ebx, dword [esp + 0x40]
sub ebx, eax
cmp ebx, 0
jne 0x4162a6
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x44], 0
jmp 0x415c23
je 0x4150aa
neg eax
mov edx, eax
and edx, 0xf
je 0x4160fb
fld qword [esp + 0xc8]
fdiv qword [edx*8 + 0x4249c0]
fstp qword [esp + 0xc8]
and eax, 0xfffffff0
je 0x4150aa
sar eax, 4
cmp eax, 0xf
jle 0x416774
fld qword [0x424aa0]
mov ecx, eax
xor edi, edi
lea esi, [esi]
mov edx, dword [esp + 0xcc]
sub ecx, 0x10
mov ebx, edx
and edx, 0x800fffff
or edx, 0x3ff00000
and ebx, 0x7ff00000
mov dword [esp + 0xcc], edx
shr ebx, 0x14
cmp ecx, 0xf
fld qword [esp + 0xc8]
lea edi, [edi + ebx - 0x3ff]
fmul st(1)
fstp qword [esp + 0xc8]
jg 0x416120
fstp st(0)
and eax, 0xf
mov ecx, dword [esp + 0xcc]
mov edx, ecx
and ecx, 0x800fffff
and edx, 0x7ff00000
or ecx, 0x3ff00000
shr edx, 0x14
lea ebx, [edi + edx - 0x3ff]
xor edx, edx
mov dword [esp + 0xcc], ecx
test eax, eax
fld qword [esp + 0xc8]
jle 0x4150b3
test al, 1
je 0x4161b1
fmul qword [edx*8 + 0x424a80]
add edx, 1
sar eax, 1
jne 0x4161a6
fst qword [esp + 0xc8]
jmp 0x4150b3
mov dword [esp + 0x60], 0
jmp 0x41560a
fstp st(0)
fstp st(0)
test esi, esi
je 0x415ee0
fldz
fld qword [esp + 0x48]
fucompp
fnstsw ax
sahf
ja 0x415ec4
jmp 0x415ee0
fstp st(0)
fstp st(0)
test esi, esi
jne 0x415ee0
nop
jmp 0x4161dd
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x44], 0
jmp 0x4156d8
lea eax, [esp + 0xb4]
mov ecx, dword [esp + 0x78]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x100]
mov dword [esp + 4], 1
mov dword [esp + 8], ecx
mov dword [esp], eax
jmp 0x415262
mov eax, dword [esp + 0x30]
mov edx, 0x25
sub edx, ebp
cmp eax, edx
jg 0x415076
mov eax, 0xf
fld qword [esp + 0xc8]
sub eax, ebp
mov edx, dword [esp + 0x30]
fmul qword [eax*8 + 0x4249c0]
mov ecx, dword [esp + 0x78]
mov dword [esp + 4], 0
sub edx, eax
lea eax, [esp + 0xb4]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x100]
fmul qword [edx*8 + 0x4249c0]
mov dword [esp + 8], ecx
mov dword [esp], eax
fstp qword [esp + 0xc8]
jmp 0x415262
jle 0x41663a
mov eax, dword [esp + 0xc4]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00418c50
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x44], 0
sub eax, ebx
mov dword [esp + 0xbc], eax
jmp 0x415c23
mov dword [esp + 0x48], ebx
xor ebp, ebp
xor ebx, ebx
mov dword [esp + 0x3c], 1
jmp 0x414de4
mov dword [esp + 0x38], ebp
mov ecx, dword [esp + 0x34]
mov ebp, dword [esp + 0x60]
lea edx, [ebp + ecx - 1]
cmp edx, 8
lea ebp, [edx + 1]
jg 0x416669
mov ecx, dword [esp + 0x50]
lea edx, [esi + esi*4]
mov dword [esp + 0x34], 0
lea esi, [ecx + edx*2]
mov edx, dword [esp + 0x3c]
add edx, 1
mov dword [esp + 0xc0], edx
mov edx, dword [esp + 0x3c]
movsx edi, byte [edx + 1]
jmp 0x4152f4
cmp edi, 0x69
je 0x414e2f
cmp edi, 0x6e
jne 0x414f83
lea ebx, [esp + 0xc0]
mov dword [esp + 4], 0x4246c9
mov dword [esp], ebx
call fcn.00419300
test eax, eax
je 0x414f83
mov ebp, dword [esp + 0xf8]
mov edx, dword [esp + 0xfc]
mov dword [esp + 0xb4], 4
mov dword [esp + 0x44], 0
mov ebp, dword [ebp + 8]
mov eax, ebp
add eax, 1
mov dword [edx], eax
mov edx, dword [esp + 0xc0]
cmp byte [edx], 0x28
jne 0x414e92
mov ebp, dword [esp + 0xf8]
mov ecx, dword [esp + 0x100]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
call fcn.0041a0b0
mov dword [esp + 0xb4], eax
mov eax, dword [ebp + 8]
add eax, 1
jmp 0x414e92
mov eax, dword [esp + 0xcc]
or eax, 0x100000
bsf ecx, eax
mov eax, 0x15
sub eax, ecx
jmp 0x41521d
cmp esi, 1
sbb eax, eax
and eax, 0x10
add eax, 0x11
cmp ebx, 1
mov dword [esp + 0xb4], eax
jg 0x415c10
test esi, esi
jne 0x415c10
mov edx, dword [esp + 0x60]
cmp dword [esp + 0x8c], edx
je 0x415c10
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x415c10
mov dword [esp], ebp
mov dword [esp + 4], 1
call fcn.00418c50
mov ebp, eax
mov eax, dword [esp + 0x38]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.00418d50
test eax, eax
jle 0x4160ad
mov dword [esp + 0xb4], 0x11
mov dword [esp + 0x44], 0
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0xc4]
sub dword [esp + 0xbc], ecx
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xb8], ecx
call fcn.00414b50
mov dword [esp + 0xc4], eax
jmp 0x415c10
cmp esi, 1
sbb eax, eax
and eax, 0x10
add eax, 0x11
mov dword [esp + 0xb4], eax
jmp 0x415c10
test esi, esi
je 0x4165df
mov eax, dword [esp + 0x44]
test eax, eax
je 0x4166bf
mov edx, dword [esp + 0xb8]
mov edi, dword [esp + 0xc4]
mov dword [esp + 0x58], edx
sar edx, 5
lea eax, [edi + 0x14]
lea ecx, [edi + edx*4 + 0x14]
cmp eax, ecx
jae 0x416512
cmp dword [edi + 0x14], 0xffffffff
lea eax, [edi + 0x18]
je 0x41650e
jmp 0x4166bf
mov edx, dword [eax]
add eax, 4
cmp edx, 0xffffffff
jne 0x4166bf
cmp ecx, eax
ja 0x416500
mov ecx, dword [esp + 0x58]
and ecx, 0x1f
je 0x41652b
or edx, 0xffffffff
shl edx, cl
or edx, dword [eax]
add edx, 1
jne 0x4166bf
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x60]
mov dword [edi + 0x10], 1
mov dword [edi + 0x14], 1
mov dword [esp + 0xb8], 1
lea eax, [ecx + edx - 1]
mov dword [esp + 0xbc], eax
mov eax, 1
mov dword [esp + 0xb4], 0x21
jmp 0x4160b4
mov eax, dword [esp + 0x5c]
test eax, eax
jne 0x415ff5
jmp 0x415ca3
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x415ff5
jmp 0x415ca3
mov eax, dword [esp + 0x40]
xor esi, esi
mov edx, dword [esp + 0xc4]
jmp 0x415dd8
mov eax, dword [esp + 0x44]
test eax, eax
je 0x415b54
mov edx, dword [esp + 0xc4]
mov dword [edx + 0x10], 0
mov edx, dword [esp + 0x60]
mov dword [esp + 0xb4], 0x50
mov dword [esp + 0xbc], edx
jmp 0x415c10
mov ebp, 1
jmp 0x4152d0
cmp ebx, 1
je 0x4166dc
mov dword [esp + 0xb4], 0x21
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x416605
cmp dword [esp + 0x40], ebx
jg 0x4160ad
mov edx, dword [esp + 0xc4]
mov eax, dword [edx + 0x14]
test al, 1
je 0x415c10
test esi, esi
jne 0x41672e
cmp ebx, 1
je 0x4165b3
sub eax, 1
mov dword [edx + 0x14], eax
mov dword [esp + 0xb4], 0x11
jmp 0x415c10
mov eax, ebx
neg eax
mov dword [esp + 4], eax
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
call fcn.00419460
jmp 0x4162c6
xor ebx, ebx
jmp 0x415511
fld qword [esp + 0xc8]
jmp 0x4150b3
cmp ebp, 0x10
mov dword [esp + 0x34], 0
jg 0x416326
mov ecx, dword [esp + 0x38]
lea edx, [ecx + ecx*4]
mov ecx, dword [esp + 0x50]
lea edx, [ecx + edx*2]
mov dword [esp + 0x38], edx
jmp 0x416326
cmp edx, 0xffffffff
jl 0x4151ab
mov eax, dword [esp + 0xc4]
mov dword [esp + 0xb8], 1
mov dword [eax + 0x10], 1
mov dword [eax + 0x14], 1
jmp 0x415186
mov dword [esp + 0xb4], 0x11
jmp 0x4165f3
mov dword [esp + 0x34], 0
jmp 0x41559a
mov edx, dword [esp + 0x60]
cmp dword [esp + 0x8c], edx
mov dword [esp + 0xb4], 1
jne 0x416475
mov eax, dword [esp + 0xc4]
mov dword [esp + 0xb4], 0x21
cmp dword [eax + 0x10], 1
jne 0x415c10
cmp dword [eax + 0x14], 1
jne 0x415c10
mov dword [esp + 0x88], 1
jmp 0x415c10
mov dword [esp], edx
call fcn.00414770
mov ecx, dword [esp + 0xb8]
mov edx, dword [eax + 0x10]
mov dword [esp + 0xc4], eax
bsr eax, dword [eax + edx*4 + 0x10]
mov edx, ecx
neg edx
and edx, 0x1f
xor eax, 0x1f
cmp edx, eax
je 0x416764
add ecx, 1
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xb4], 0x21
jmp 0x415c10
xor edi, edi
jmp 0x416169
mov edx, ebp
jmp 0x416308