Function at 0x40ec84
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 8
mov byte [esp + 0x1f], al
mov dword [esp + 0x20], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x3c], esi
mov dword [esp + 0x30], esi
mov dword [esp + 0x14], esi
mov dword [esp + 0x34], esi
mov word [esp + 0x38], 1
call fcn.0041fddb
mov ecx, dword [edi]
mov edx, eax
add esp, 4
mov dword [esp + 0x20], edx
mov dword [esp + 0x50], edx
mov dword [esp + 0x4c], 1
mov dword [edx], 0x14
mov dword [edx + 4], esi
mov esi, dword [ebp + 8]
mov dword [esp + 0x14], 0x17
mov eax, dword [esi + 4]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x49c470]
mov dword [esp + 0x70], ecx
movsx eax, word [eax + 0xa]
mov dword [esp + 0x58], eax
mov eax, dword [ebp + 0x14]
mov ecx, dword [edi]
cmp ecx, eax
je case.0x40fb15.4
mov edi, dword [esi + 4]
mov esi, dword [edi + ecx*4]
movzx eax, word [esi + 8]
mov edx, eax
cmp ax, 0x7f
je case.0x40fb15.4
movsx eax, dx
cmp eax, 0x33
je 0x40edc0
cmp eax, 0x4f
je case.0x40fb15.4
cmp eax, 5
je 0x40f1d5
cmp eax, 0x58
ja case.0x40fb15.4
movzx eax, byte [eax + 0x40ffe4]
jmp dword [eax*4 + 0x40ff78]
mov eax, dword [esi]
cmp eax, 4
jl 0x40fb04
cmp eax, 0x27
jge 0x40fb04
mov ebx, 0x14
mov dword [esp + 0x14], ebx
mov cl, byte [esp + 0x1b]
mov edx, dword [esp + 0x20]
test cl, cl
jne 0x40f3b3
mov eax, edx
imul eax, dword [eax], 0x15
movzx eax, byte [eax + ebx + 0x4b1840]
cmp eax, 3
jne 0x40f100
cmp dword [esp + 0x2c], 1
jne 0x454c0b
mov eax, dword [esp + 0x30]
xor edi, edi
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], edi
test eax, eax
jne 0x40f5b9
test edx, edx
je 0x40edb5
mov esi, dword [edx + 4]
push 8
push edx
call fcn.0041fdcd
add esp, 8
mov edx, esi
test esi, esi
jne 0x40eda1
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov edi, dword [esp + 0x38]
mov dword [esp + 0x14], 0x16
test edi, edi
jne 0x40f562
cmp ebx, 0x4d02a0
je 0x40ee15
sti
mov al, byte [0x74004d02]
cmp dword [ebx - 0x77cf3bd], ecx
add byte [ecx + edi - 0x75], dh
inc ebx
or al, 0x83
clc
mov eax, dword [ebx + 0xc]
cmp eax, 4
je 0x40fa93
add al, 0xf
test byte [ebx - 0x74fffff4], ch
jae 0x40edf3
mov esi, dword [ebx + 8]
test esi, esi
jne 0x40faa5
cmp eax, 5
jge 0x45474b
push 0x4d02a0
mov ecx, ebx
mov dword [ebx + 0xc], 1
mov dword [ebx], 0
call fcn.004100e0
mov eax, dword [esp + 0x10]
inc edi
mov dword [esp + 0x38], edi
mov dword [esp + 0x2c], edi
cmp edi, 1
jne 0x40f5a2
mov dword [esp + 0x88], ebx
cmp dword [0x4d2380], 0
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
mov ebx, dword [eax]
mov dword [esp + 0x6c], ebx
or byte [ebx + 0x48b0440], cl
mov byte [ebx + 0x245c8918], cl
insb byte es:[edi], dx
je 0x40fb2e
xor al, al
test al, al
jne 0x40f272
cmp byte [0x4d2389], al
jne 0x4548f7
mov esi, dword [0x4d2384]
cmp dword [esi], 0
je 0x40f272
mov ecx, dword [esp + 0x8c]
mov eax, dword [0x4d2540]
mov byte [esp + 0x3f], 0
cmp eax, dword [ecx + 4]
jg 0x454904
mov dword [0x4d2560], 0
mov dword [0x4d255c], 0
mov dword [esp + 0x68], 0x4d2544
mov dword [esp + 0x64], 0x4d2544
lea esp, [esp]
mov eax, dword [esi]
mov ecx, dword [ebx + 4]
mov dword [esp + 0x60], eax
mov dword [esp + 0x48], ecx
mov edx, dword [eax + 4]
test ecx, ecx
je 0x454947
test edx, edx
je 0x45494f
ror byte [edi], cl
test byte [edi + 0x5a], ch
add al, 0
mov edi, dword [eax]
mov ebx, dword [ebx]
cmp ecx, edx
jb 0x40f171
mov edx, ecx
test edx, edx
je 0x40ef15
movzx eax, word [ebx]
mov dword [esp + 0x44], eax
movzx eax, word [edi]
mov ecx, eax
mov dword [esp + 0x40], ecx
movzx ecx, word [ebx]
cmp cx, ax
jne 0x40ef19
add ebx, 2
add edi, 2
sub edx, 1
jne 0x40eef2
xor eax, eax
jmp 0x40ef28
mov eax, dword [esp + 0x40]
cmp word [esp + 0x44], ax
sbb eax, eax
and eax, 0xfffffffe
inc eax
test eax, eax
js 0x40efcc
jle 0x40f043
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x60]
mov ebx, dword [esp + 0x6c]
mov edx, dword [eax + 0x1c]
test edx, edx
je 0x40f048
mov edi, dword [edx + 4]
cmp edi, ecx
ja 0x40f605
mov eax, dword [edx]
mov ebx, dword [ebx]
mov dword [esp + 0x44], eax
mov dword [esp + 0x40], edi
test edi, edi
je 0x40efad
jmp 0x40ef70
movzx ecx, word [eax]
movzx eax, cx
mov dword [esp + 0x78], eax
movzx eax, word [ebx]
mov dword [esp + 0x74], ecx
mov ecx, eax
mov dword [esp + 0x5c], ecx
mov ecx, dword [esp + 0x74]
cmp cx, ax
jne 0x40f1a6
mov eax, dword [esp + 0x44]
add ebx, 2
add eax, 2
sub dword [esp + 0x40], 1
mov dword [esp + 0x44], eax
jne 0x40ef70
mov ecx, dword [esp + 0x48]
cmp edi, ecx
jb 0x40f1b5
mov edx, dword [esi]
mov ecx, dword [esp + 0x64]
mov dword [ecx + 0x1c], edx
mov ebx, dword [esi]
mov dword [esp + 0x64], ebx
mov eax, dword [ebx + 0x1c]
jmp 0x40f0f5
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x60]
mov ebx, dword [esp + 0x6c]
mov edx, dword [eax + 0x18]
test edx, edx
je 0x40f048
mov eax, dword [edx + 4]
cmp ecx, eax
ja 0x40f649
mov edi, dword [edx]
mov ebx, dword [ebx]
mov dword [esp + 0x44], ecx
test ecx, ecx
je 0x40f0db
lea ebx, [ebx]
movzx eax, word [ebx]
mov dword [esp + 0x74], eax
movzx eax, word [edi]
mov ecx, eax
mov dword [esp + 0x40], ecx
movzx ecx, word [ebx]
cmp cx, ax
je 0x40f0c3
cmp word [esp + 0x74], ax
jae 0x40f0e3
mov ecx, dword [esp + 0x60]
mov eax, dword [edx + 0x1c]
mov dword [ecx + 0x18], eax
mov eax, dword [esi]
mov dword [edx + 0x1c], eax
mov dword [esi], edx
cmp dword [edx + 0x18], 0
je 0x40f048
jmp 0x40f0e5
mov byte [esp + 0x3f], 1
cmp byte [esp + 0x3f], 0
mov eax, dword [esi]
mov ecx, dword [esp + 0x64]
mov eax, dword [eax + 0x18]
mov dword [ecx + 0x1c], eax
mov eax, dword [esi]
mov ecx, dword [esp + 0x68]
mov eax, dword [eax + 0x1c]
mov dword [ecx + 0x18], eax
mov ecx, dword [esi]
mov eax, dword [0x4d2560]
mov dword [ecx + 0x18], eax
mov ecx, dword [esi]
mov eax, dword [0x4d255c]
mov dword [ecx + 0x1c], eax
je 0x40f272
mov eax, dword [esi]
test eax, eax
je 0x40f272
mov eax, dword [eax + 0x14]
test eax, eax
je 0x40f272
push dword [esp + 0x88]
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov ecx, dword [esp + 0x28]
push eax
inc dword [edi]
push edi
push esi
call fcn.004101e0
test eax, eax
js 0x454b05
mov ebx, dword [esp + 0x1c]
mov eax, dword [ebp + 0x14]
jmp 0x40ecf4
add ebx, 2
add edi, 2
sub dword [esp + 0x44], 1
jne 0x40f000
mov eax, dword [edx + 4]
mov ecx, dword [esp + 0x48]
cmp ecx, eax
jb 0x40f027
mov edx, dword [esi]
mov ecx, dword [esp + 0x68]
mov dword [ecx + 0x18], edx
mov ebx, dword [esi]
mov dword [esp + 0x68], ebx
mov eax, dword [ebx + 0x18]
mov ebx, dword [esp + 0x6c]
mov dword [esi], eax
jmp 0x40eec0
inc dword [ebx - 0x78f0f908]
int3
cmp eax, 6
ja case.0x40f109.3
jmp dword [eax*4 + 0x410040]
test cl, cl
jne 0x40f67a
push 8
call fcn.0041fddb
mov ecx, dword [esp + 0x24]
add esp, 4
mov dword [esp + 0x20], eax
mov dword [esp + 0x50], eax
mov dword [eax], ebx
mov dword [eax + 4], ecx
mov edi, dword [esp + 0x4c]
inc edi
mov dword [esp + 0x4c], edi
cmp ebx, 7
je 0x40fb88
cmp ebx, 8
je 0x40fb88
mov edi, dword [ebp + 0xc]
mov eax, dword [esp + 0x30]
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x38], eax
mov esi, dword [ebp + 8]
jmp 0x40f0bb
test edx, edx
je 0x40ef15
lea esp, [esp]
movzx eax, word [ebx]
mov dword [esp + 0x44], eax
movzx eax, word [edi]
mov ecx, eax
mov dword [esp + 0x40], ecx
movzx ecx, word [ebx]
cmp cx, ax
je 0x40fa7f
cmp word [esp + 0x44], ax
jmp 0x40ef22
mov eax, dword [esp + 0x5c]
cmp word [esp + 0x78], ax
and al, 0x78
jae 0x40efb5
mov ecx, dword [esp + 0x60]
mov eax, dword [edx + 0x18]
mov dword [ecx + 0x1c], eax
mov eax, dword [esi]
mov dword [edx + 0x18], eax
mov dword [esi], edx
cmp dword [edx + 0x1c], 0
je 0x40f048
jmp 0x40efb7
mov edi, dword [esp + 0x38]
mov dword [esp + 0x14], 0x16
test edi, edi
jne 0x40f68b
cmp ebx, 0x4d02a0
je 0x40f22a
mov eax, dword [ebx + 0xc]
cmp eax, 4
je 0x40f60c
mov esi, dword [ebx + 8]
test esi, esi
jne 0x40f61e
cmp eax, 5
jge 0x454542
push 0x4d02a0
mov ecx, ebx
mov dword [ebx + 0xc], 1
mov dword [ebx], 0
call fcn.004100e0
mov edx, dword [esp + 0x10]
mov eax, dword [ebp + 0xc]
inc edi
mov dword [esp + 0x38], edi
mov dword [esp + 0x2c], edi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov esi, dword [eax + ecx*4]
cmp edi, 1
jne 0x40f6cb
mov edi, ebx
mov esi, dword [esi]
mov ecx, edi
call fcn.0040cfa0
mov eax, dword [ebp + 0x14]
mov dword [edi + 0xc], 1
mov dword [edi], esi
mov edi, dword [ebp + 0xc]
inc dword [edi]
mov esi, dword [ebp + 8]
jmp 0x40ecf4
inc edi
invalid
mov ebx, dword [0x4d2370]
test ebx, ebx
je 0x454ad9
mov ecx, dword [esp + 0x8c]
mov eax, dword [0x4d2540]
mov byte [esp + 0x3f], 0
cmp eax, dword [ecx + 4]
jg 0x45495c
mov dword [0x4d2560], 0
mov dword [0x4d255c], 0
mov dword [esp + 0x60], 0x4d2544
mov dword [esp + 0x64], 0x4d2544
add byte [eax], al
add bh, al
inc esp
and al, 0x60
inc esp
and eax, 0x44c7004d
and al, 0x64
inc esp
and eax, 0x748b004d
and al, 0x6c
mov esi, dword [esp + 0x6c]
mov edi, dword [ebx + 4]
mov eax, dword [esi + 4]
mov dword [esp + 0x48], eax
test eax, eax
je 0x4549a1
test edi, edi
je 0x4549a9
mov edx, dword [ebx]
mov esi, dword [esi]
cmp eax, edi
jb 0x40f31b
mov edi, eax
test edi, edi
je 0x40f317
lea ecx, [ecx]
movzx eax, word [esi]
mov dword [esp + 0x5c], eax
movzx eax, word [edx]
mov ecx, eax
mov dword [esp + 0x78], ecx
movzx ecx, word [esi]
cmp cx, ax
jne 0x40f4a2
add esi, 2
add edx, 2
sub edi, 1
jne 0x40f2f0
xor eax, eax
jmp 0x40f347
test edi, edi
je 0x40f317
nop
movzx eax, word [esi]
mov dword [esp + 0x5c], eax
movzx eax, word [edx]
mov ecx, eax
mov dword [esp + 0x78], ecx
movzx ecx, word [esi]
cmp cx, ax
je 0x40f654
cmp word [esp + 0x5c], ax
sbb eax, eax
and eax, 0xfffffffe
inc eax
test eax, eax
js 0x40f4b0
jg 0x40f3bb
mov byte [esp + 0x3f], 1
cmp byte [esp + 0x3f], 0
mov ecx, dword [esp + 0x64]
mov eax, dword [ebx + 0x18]
mov dword [ecx + 0x1c], eax
mov eax, dword [0x4d2370]
mov ecx, dword [esp + 0x60]
mov eax, dword [eax + 0x1c]
mov dword [ecx + 0x18], eax
mov ecx, dword [0x4d2370]
mov eax, dword [0x4d2560]
mov dword [ecx + 0x18], eax
mov ecx, dword [0x4d2370]
mov eax, dword [0x4d255c]
mov dword [ecx + 0x1c], eax
je 0x454ad9
mov eax, dword [0x4d2370]
test eax, eax
je 0x454ad9
mov eax, dword [eax + 0x14]
test eax, eax
jne 0x40f094
jmp 0x454ad9
mov eax, dword [edx + 4]
jmp 0x40ed68
mov eax, dword [esp + 0x48]
mov esi, dword [esp + 0x6c]
lea ecx, [ebx + 0x1c]
mov dword [esp + 0x74], ecx
mov ecx, dword [ecx]
mov dword [esp + 0x40], ecx
test ecx, ecx
je 0x40f356
mov edx, dword [ecx + 4]
mov dword [esp + 0x68], edx
cmp edx, eax
jbe 0x40f3e5
mov edx, eax
mov dword [esp + 0x68], eax
cmp dword [esp + 0x68], 0
mov edi, edx
mov edx, dword [esi]
mov esi, dword [ecx]
jbe 0x40f41d
movzx eax, word [esi]
mov dword [esp + 0x5c], eax
movzx eax, word [edx]
mov ecx, eax
mov dword [esp + 0x78], ecx
movzx ecx, word [esi]
cmp cx, ax
jne 0x40f425
add esi, 2
add edx, 2
sub edi, 1
jne 0x40f3f2
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x40]
cmp dword [esp + 0x68], eax
jb 0x40f434
jmp 0x40f457
mov eax, dword [esp + 0x78]
cmp word [esp + 0x5c], ax
jae 0x40f457
mov ecx, dword [esp + 0x40]
mov ebx, ecx
mov ecx, dword [esp + 0x74]
mov eax, dword [ebx + 0x18]
mov dword [ecx], eax
mov eax, dword [0x4d2370]
mov dword [ebx + 0x18], eax
mov dword [0x4d2370], ebx
cmp dword [ebx + 0x1c], 0
je 0x40f356
mov ecx, dword [esp + 0x64]
mov dword [ecx + 0x1c], ebx
mov ecx, dword [0x4d2370]
mov dword [esp + 0x64], ecx
mov ebx, dword [ecx + 0x1c]
mov dword [0x4d2370], ebx
jmp 0x40f2c1
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x50]
push eax
call fcn.004106a0
test eax, eax
js 0x454b0b
mov al, byte [esp + 0x55]
mov ecx, dword [esp + 0x50]
mov byte [esp + 0x1b], al
mov dword [esp + 0x20], ecx
jmp 0x40ed56
mov eax, dword [esp + 0x78]
cmp word [esp + 0x5c], ax
jmp 0x40f341
mov eax, dword [esp + 0x48]
mov edx, dword [ebx + 0x18]
lea ecx, [ebx + 0x18]
mov dword [esp + 0x44], ecx
test edx, edx
je 0x40f356
mov esi, dword [edx + 4]
cmp eax, esi
ja 0x40fc63
mov edi, dword [esp + 0x6c]
mov esi, dword [edx]
mov dword [esp + 0x40], eax
mov edi, dword [edi]
test eax, eax
je 0x40f50e
movzx eax, word [edi]
mov dword [esp + 0x5c], eax
movzx eax, word [esi]
mov ecx, eax
mov dword [esp + 0x78], ecx
movzx ecx, word [edi]
cmp cx, ax
jne 0x40f515
add edi, 2
add esi, 2
sub dword [esp + 0x40], 1
jne 0x40f4e1
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
cmp eax, dword [edx + 4]
jb 0x40f524
jmp 0x40f543
mov eax, dword [esp + 0x78]
cmp word [esp + 0x5c], ax
jae 0x40f543
mov ecx, dword [esp + 0x44]
mov ebx, edx
mov eax, dword [ebx + 0x1c]
mov dword [ecx], eax
mov eax, dword [0x4d2370]
mov dword [ebx + 0x1c], eax
mov dword [0x4d2370], ebx
cmp dword [ebx + 0x18], 0
je 0x40f356
mov ecx, dword [esp + 0x60]
mov dword [ecx + 0x18], ebx
mov ecx, dword [0x4d2370]
mov dword [esp + 0x60], ecx
mov ebx, dword [ecx + 0x18]
mov dword [0x4d2370], ebx
jmp 0x40f2c1
cmp byte [esp + 0x35], 0
jne 0x40f8b1
push 0x18
call fcn.0041fddb
add esp, 4
mov esi, eax
mov ecx, esi
push 0x4d02a0
mov dword [esi + 8], 0
call fcn.004100e0
mov eax, dword [esp + 0x10]
mov dword [esi + 0x10], eax
mov eax, esi
mov dword [esp + 0x10], eax
mov dword [esp + 0x30], eax
jmp 0x40ee19
cmp byte [esp + 0x35], 0
jne 0x4548ef
mov dword [esp + 0x88], eax
jmp 0x40ee32
mov edi, dword [esp + 0x10]
lea ecx, [ecx]
mov ebx, dword [edi + 8]
mov esi, dword [edi + 0x10]
test ebx, ebx
jne 0x40fc8e
mov eax, dword [edi + 0xc]
cmp eax, 5
jge 0x40fd9f
push 0x18
push edi
mov dword [edi + 0xc], 1
mov dword [edi], 0
call fcn.0041fdcd
add esp, 8
mov edi, esi
test esi, esi
jne 0x40f5c0
mov edi, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
jmp 0x40ed9d
mov edi, ecx
jmp 0x40ef58
cmp dword [0x4d02ac], 4
jne 0x40f1fd
jmp 0x45450b
mov eax, dword [esi + 0xc]
dec dword [eax]
mov eax, dword [esi + 0xc]
cmp dword [eax], 0
je 0x454526
push 0x10
push esi
call fcn.0041fdcd
mov eax, dword [ebx + 0xc]
add esp, 8
mov dword [ebx + 8], 0
jmp 0x40f208
mov ecx, eax
mov dword [esp + 0x48], eax
jmp 0x40efea
add esi, 2
add edx, 2
sub edi, 1
jne 0x40f320
jmp 0x40f317
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 0xd
mov dword [esi], eax
jmp 0x40ed52
xor al, al
mov dword [edx], ebx
mov byte [esp + 0x1b], al
mov byte [esp + 0x55], al
jmp 0x40f133
cmp byte [esp + 0x35], 0
jne 0x40fa1a
push 0x18
call fcn.0041fddb
add esp, 4
mov esi, eax
mov ecx, esi
push 0x4d02a0
mov dword [esi + 8], 0
call fcn.004100e0
mov eax, dword [esp + 0x10]
mov edx, esi
mov dword [esi + 0x10], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x30], edx
jmp 0x40f22e
cmp byte [esp + 0x35], 0
jne 0x45470c
mov edi, edx
jmp 0x40f250
test cl, cl
je 0x40f904
mov eax, dword [edx + 4]
cmp dword [eax], 0x12
je 0x40f76e
test cl, cl
jne 0x40fa12
mov eax, edx
cmp dword [eax], 0x14
je 0x454ba8
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x50]
push eax
call fcn.004106a0
test eax, eax
js 0x454b0b
mov edx, dword [esp + 0x50]
mov cl, byte [esp + 0x55]
mov dword [esp + 0x20], edx
jmp case.0x40f109.2
test ecx, ecx
je 0x40f74a
mov eax, dword [edi + ecx*4 - 4]
movzx eax, word [eax + 8]
mov edx, eax
cmp ax, 0x48
je 0x45411e
cmp dx, 0x4f
je 0x45411e
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 0x12
mov dword [esi], eax
jmp 0x40ed52
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 0x13
mov dword [esi], eax
jmp 0x40ed52
test cl, cl
je 0x40f78a
mov esi, dword [edx + 4]
push 8
push edx
call fcn.0041fdcd
mov edx, esi
add esp, 8
mov dword [esp + 0x20], edx
mov dword [esp + 0x50], edx
cmp byte [esp + 0x54], 0
je 0x4549b6
mov al, 1
mov edi, dword [esp + 0x4c]
dec edi
mov byte [esp + 0x55], al
mov byte [esp + 0x1b], al
mov dword [esp + 0x4c], edi
jmp 0x40f13c
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 1
mov dword [esi], eax
jmp 0x40ed52
mov esi, dword [esp + 0x38]
mov dword [esp + 0x14], 0x16
test esi, esi
je 0x40fcb6
cmp byte [esp + 0x35], 0
jne 0x40fd2f
add eax, 0x186a0000
push 0x18
call fcn.0041fddb
add esp, 4
mov esi, eax
mov ecx, esi
push 0x4d02a0
mov dword [esi + 8], 0
call fcn.004100e0
mov eax, dword [esp + 0x10]
mov dword [esi + 0x10], eax
mov eax, esi
mov esi, dword [esp + 0x38]
mov dword [esp + 0x10], eax
mov dword [esp + 0x30], eax
mov eax, dword [ebp + 8]
inc esi
mov edi, dword [ebp + 0xc]
mov dword [esp + 0x38], esi
mov dword [esp + 0x2c], esi
mov edx, dword [eax + 4]
mov ecx, dword [edi]
mov eax, dword [edx + ecx*4 + 4]
cmp word [eax + 8], 0x47
jne 0x453f51
cmp esi, 1
je 0x40fcc7
cmp byte [esp + 0x35], 0
mov eax, dword [esp + 0x10]
jne 0x453f6d
mov esi, dword [ebp + 8]
mov ecx, dword [esp + 0x24]
push eax
push edi
push esi
push 0
call fcn.00411310
test eax, eax
js 0x454b05
mov eax, dword [esp + 0x24]
cmp dword [eax + 0xfc], 1
jne 0x40f0bb
jmp 0x454b05
mov eax, dword [esp + 0x14]
cmp eax, 0x16
jne 0x40fae2
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov dword [esp + 0x14], 0xb
mov ebx, dword [esp + 0x14]
mov dword [esi], eax
jmp 0x40ed56
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
xor ebx, ebx
mov dword [esi], eax
jmp 0x40ed52
mov ecx, dword [esp + 0x10]
cmp ecx, 0x4d02a0
je 0x40f8fa
mov eax, dword [ecx + 0xc]
cmp eax, 4
je 0x40feea
mov ecx, dword [ecx + 8]
test ecx, ecx
jne 0x40fefc
cmp eax, 5
jge 0x454817
mov esi, dword [esp + 0x10]
mov ecx, esi
push 0x4d02a0
mov dword [esi + 0xc], 1
mov dword [esi], 0
call fcn.004100e0
mov byte [esp + 0x35], 0
jmp 0x40ee15
mov eax, edx
jmp 0x40f6eb
mov edi, dword [esp + 0x38]
mov dword [esp + 0x14], 0x16
test edi, edi
jne 0x40fb35
cmp ebx, 0x4d02a0
je 0x40f944
mov al, byte [0x74004d02]
sbb eax, 0x40c7b83
cmp dword [ebx + 0xc], 4
je 0x40ff65
mov ecx, ebx
call fcn.0040cfa0
push 0x4d02a0
mov ecx, ebx
call fcn.004100e0
mov edx, dword [esp + 0x10]
mov esi, dword [ebp + 0xc]
inc edi
mov eax, dword [ebp + 8]
mov dword [esp + 0x38], edi
mov dword [esp + 0x2c], edi
mov ecx, dword [esi]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
cmp edi, 1
jne 0x40fb76
mov esi, ebx
mov edi, dword [eax]
mov eax, dword [esi + 0xc]
mov ecx, dword [esi + 8]
cmp eax, 4
je 0x453dec
test ecx, ecx
jne 0x453dff
cmp eax, 5
jge 0x453e14
push 0x10
mov dword [esi], 0
mov dword [esi + 0xc], 4
call fcn.0041fddb
mov ecx, dword [edi]
add esp, 4
mov dword [eax], ecx
mov ecx, dword [edi + 4]
mov dword [eax + 4], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 8], ecx
mov ecx, dword [edi + 0xc]
mov dword [eax + 0xc], ecx
inc dword [ecx]
mov dword [esi + 8], eax
mov edi, dword [ebp + 0xc]
mov edx, dword [esp + 0x24]
inc dword [edi]
cmp byte [edx + 0x102], 0
jne 0x453ed3
inc dword [esp + eax]
cmp byte [edx + 0x103], 0
mov esi, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
je 0x40ecf4
jmp 0x453eec
mov eax, dword [esp + 0x14]
cmp eax, 0x16
jne 0x40fc6e
mov dword [esp + 0x14], 0xc
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, dword [esp + 0x14]
mov dword [esi], eax
jmp 0x40ed56
mov eax, dword [edx + 4]
jmp 0x40f6fa
mov ecx, dword [esp + 0x10]
cmp ecx, 0x4d02a0
je 0x40fa63
mov eax, dword [ecx + 0xc]
cmp eax, 4
je 0x4545f3
mov ecx, dword [ecx + 8]
test ecx, ecx
jne 0x45461b
cmp eax, 5
jge 0x454634
mov esi, dword [esp + 0x10]
mov ecx, esi
push 0x4d02a0
mov dword [esi + 0xc], 1
mov dword [esi], 0
call fcn.004100e0
mov byte [esp + 0x35], 0
jmp 0x40f22a
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 0xe
mov dword [esi], eax
jmp 0x40ed52
add ebx, 2
add edi, 2
sub edx, 1
jne 0x40f180
idiv bh
invalid
jmp 0x40ef15
cmp dword [0x4d02ac], 4
jne 0x40ede8
jmp 0x454714
mov eax, dword [esi + 0xc]
dec dword [eax]
mov eax, dword [esi + 0xc]
cmp dword [eax], 0
je 0x45472f
push 0x10
push esi
call fcn.0041fdcd
mov eax, dword [ebx + 0xc]
add esp, 8
mov dword [ebx + 8], 0
jmp 0x40edf3
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 9
mov dword [esi], eax
jmp 0x40ed52
cmp eax, 0x13
je 0x40f889
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov dword [esp + 0x14], 0x11
mov ebx, dword [esp + 0x14]
mov dword [esi], eax
jmp 0x40ed56
dec eax
cmp eax, 0x29
ja case.0x40fb15.4
movzx eax, byte [eax + 0x41007c]
jmp dword [eax*4 + 0x41005c]
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 7
mov dword [esi], eax
jmp 0x40ed52
mov al, 1
jmp 0x40ee55
cmp byte [esp + 0x35], 0
je 0x40fce0
mov esi, dword [esp + 0x10]
cmp esi, 0x4d02a0
je 0x40fb6c
cmp dword [0x4d02ac], 4
je 0x40fedb
mov ecx, esi
call fcn.0040cfa0
push 0x4d02a0
mov ecx, esi
call fcn.004100e0
mov byte [esp + 0x35], 0
jmp 0x40f944
cmp byte [esp + 0x35], 0
jne 0x453de4
mov esi, edx
jmp 0x40f96a
mov esi, dword [esp + 0x2c]
mov eax, dword [esp + 0x30]
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x38], esi
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], ebx
test esi, esi
je 0x4549de
cmp esi, 1
jne 0x4549e6
add byte [ebx - 0x7372af3d], cl
and al, 0xe4
add byte [eax], al
add bh, al
test byte [esp + ebp*8], ah
add byte [eax], al
add byte [eax], al
add byte [eax], al
add al, ch
adc eax, 0x8d000005
mov word [eax], fs
add byte [eax], al
add al, ch
jecxz 0x40fbf8
mov eax, ebx
push eax
lea ecx, [esp + 0xe4]
mov dword [esp + 0xec], 0
call fcn.004100e0
lea ecx, [esp + 0xe0]
call fcn.00401fba
mov ecx, dword [esp + 0x14]
test al, al
jne 0x40fe12
invalid
cmp ecx, 7
jne 0x40fc4c
push dword [ebp + 0xc]
mov eax, dword [ebp + 8]
push eax
call fcn.00419d2b
test eax, eax
js 0x454bdc
mov al, ah
dec edi
loopne 0x40fc49
add al, 0
cmp dword [esp + 0x14], 8
je 0x4549f9
cmp esi, 1
jne 0x454a13
mov esi, ebx
mov ecx, esi
call fcn.0040cfa0
mov byte [esi], 0
cmp byte [esp + 0x1b], 0
mov dword [esi + 0xc], 9
jne 0x454a2f
mov eax, dword [esp + 0x20]
cmp byte [esp + 0x54], 0
je 0x454a50
mov al, 1
dec edi
mov byte [esp + 0x55], al
mov byte [esp + 0x1b], al
mov dword [esp + 0x4c], edi
jl 0x40fc6f
dec esp
lea ecx, [esp + 0xe0]
call fcn.0040cfa0
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
jmp 0x40f0bb
invalid
mov eax, esi
mov dword [esp + 0x48], esi
jmp 0x40f4d1
cmp eax, 0x13
je 0x40f9f9
clc
adc ecx, dword [edi]
test byte [edx - 0x16000003], al
or byte [esp + eax], al
jmp 0x454084
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 5
mov dword [esi], eax
add eax, 0x89000000
push es
jmp 0x40ed52
mov eax, dword [ebx + 0xc]
dec dword [eax]
mov eax, dword [ebx + 0xc]
cmp dword [eax], 0
je 0x40fd83
push 0x10
push ebx
call fcn.0041fdcd
add esp, 8
mov dword [edi + 8], 0
jmp 0x40f5ce
push 0x4d02a0
mov ecx, ebx
call fcn.0040aceb
jmp 0x40f812
mov eax, ebx
jmp 0x40f84d
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 2
mov dword [esi], eax
jmp 0x40ed52
push 0x18
call fcn.0041fddb
add esp, 4
mov esi, eax
mov ecx, esi
push 0x4d02a0
mov dword [esi + 8], 0
call fcn.004100e0
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x40fe28
mov edx, esi
mov dword [esi + 0x10], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x30], edx
jmp 0x40f948
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 4
mov dword [esi], eax
jmp 0x40ed52
mov ecx, dword [esp + 0x10]
push 0x4d02a0
call fcn.0040aceb
mov byte [esp + 0x35], 0
jmp 0x40f812
push 0x4d02a0
lea ecx, [esp + 0x2c]
mov dword [esp + 0x18], 0x16
call fcn.0041ceb1
lea ecx, [esp + 0x28]
call fcn.0041cf15
mov esi, eax
mov ecx, esi
call fcn.0040cfa0
mov dword [esi + 0xc], 9
mov byte [esi], 0
mov edi, dword [ebp + 0xc]
inc dword [edi]
jmp 0x40f151
push dword [ebx]
call fcn.0041fe14
add esp, 4
push 4
push dword [ebx + 0xc]
call fcn.0041fdcd
add esp, 8
jmp 0x40fc9f
sub eax, 5
cmp eax, 0xa
ja case.0x40fdab.6
jmp dword [eax*4 + 0x4100a8]
push 0x4d02a0
lea ecx, [esp + 0x2c]
mov dword [esp + 0x18], 0x16
call fcn.0041ceb1
lea ecx, [esp + 0x28]
call fcn.0041cf15
mov esi, eax
mov ecx, esi
call fcn.0040cfa0
mov edi, dword [ebp + 0xc]
mov dword [esi + 0xc], 9
mov byte [esi], 1
inc dword [edi]
jmp 0x40f151
and al, 0x18
push ss
add byte [eax], al
add al, ch
jmp 0x8d40fe99
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 3
mov dword [esi], eax
jmp 0x40ed52
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 8
mov dword [esi], eax
jmp 0x40ed52
cmp ecx, 8
je 0x40fbe8
test al, al
jne 0x40fc4c
jmp 0x40fbe3
mov edx, esi
mov dword [esi + 0x10], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x30], edx
jmp 0x40f948
push 0x4d02a0
lea ecx, [esp + 0x2c]
mov dword [esp + 0x18], 0x16
call fcn.0041ceb1
mov edi, dword [ebp + 0xc]
lea ecx, [esp + 0x28]
mov esi, dword [ebp + 8]
mov edx, dword [edi]
lea eax, [edx + 1]
mov dword [edi], eax
mov eax, dword [esi + 4]
mov edx, dword [eax + edx*4]
call fcn.0041cf15
mov ebx, dword [esp + 0x24]
mov ecx, ebx
push eax
push dword [edx]
call fcn.0041cf92
test eax, eax
js 0x454a9e
mov eax, dword [esp + 0x30]
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x38], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x1c], ebx
jmp 0x40ecf4
cmp dword [esi + 0xc], 4
jne 0x40fb59
jmp 0x453dc9
cmp dword [0x4d02ac], 4
jne 0x40f8c9
jmp 0x4547fc
push ecx
call fcn.0041d1e6
mov eax, dword [esp + 0x10]
mov dword [eax + 8], 0
mov eax, dword [eax + 0xc]
jmp 0x40f8d4
push 0x4d02a0
lea ecx, [esp + 0x2c]
mov dword [esp + 0x18], 0x16
call fcn.0041ceb1
mov edi, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov ecx, dword [edi]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
lea ecx, [esp + 0x28]
fld qword [eax]
fstp qword [esp + 0x78]
call fcn.0041cf15
mov esi, eax
mov ecx, esi
call fcn.0040cfa0
fld qword [esp + 0x78]
inc dword [edi]
fstp qword [esi]
mov dword [esi + 0xc], 3
jmp 0x40f151
cmp dword [0x4d02ac], 4
jne 0x40f931
jmp 0x453dae
jbe 0x453de8
inc ebp
add bh, dh
xor eax, dword [ebp]
pop ss
xor al, 0x45
add ah, bh
cmp byte [ebp], al
cld
cmp byte [ebp], al
sub eax, 0x71004534
cmp dword [ebp], eax
or ebp, eax
inc eax
add byte [ebx], cl
call 0x397c3e14
inc ebp
add byte [ebx], cl
call 0x39a03e1c
add byte [ebx], cl
call 0xe8503e10
inc eax
add byte [edi], dh
cmp dword [ebp], eax
or ebp, eax
inc eax
add byte [ebx + 0x39], bl
inc ebp
add byte [edi - 0x58ffbac7], al
cmp dword [ebp], eax
sar dword [ecx], cl
inc ebp
add bl, dl
cmp dword [ebp], eax
sar dword [ecx], cl
inc ebp
add bl, dl
cmp dword [ebp], eax
mov ebp, 0x8b664539
inc ebp
add byte [ebp - 0x7499bac7], bh
dec ebx
or byte [ecx + 0x4d02a8], ah
ret
mov ebx, 0xe850fffb
add ebp, dword [ebx - 5]
invalid
add bl, al
adc cl, ch
cmp edx, dword [ebx + 0x50fffbbd]
call fcn.0040a90b
jmp 0x40fbb0
mov edx, 0xe851fffb
sar dword [esi - 0x1016ff9a], 0xba
sti
dec dword [ebx + 0xfc9850e]
test ch, ah
mov edx, 0x18bfffb
push 1
add dword [edx + 1], ebp
call dword [eax]
jmp 0x40f9d0
push ebx
call 0xbb41fe11
sub ebx, 8
mov ebx, dword [esp + 0x1c]
jmp 0x40f9d0
sub al, 0xc7
inc esp
and al, 0x18
push ss
add byte [eax], al
add al, ch
xchg esi, eax
invalid
lea ecx, [esp + 0x28]
mov edi, dword [eax]
mov ebx, dword [eax + 4]
add al, 0xe8
fimul word [edi - 0xf740004]
add al, 0xe8
fimul word [edi - 0xf740004]
mov ecx, esi
call fcn.0040cfe4
mov dword [esi + 0xc], 0x66f102
mov dword [esi], edi
mov dword [esi + 4], ebx
jmp 0x40fdbd
cld
dec dword [ebx - 0x74d7dba4]
retf
call 0xe340bf84
add eax, edi
mov dword [eax + 0xa5e], ecx
cmp dword [ebx + 0xfc], 1
je 0x74644afc
mov eax, dword [esp + 0x30]
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x38], eax
mov dword [esp + 0x1c], ebx
jmp 0x40f0ff
dec dword [ebx + 0x758b0c7d]
or byte [ebx + 0x5028244c], cl
push edi
push esi
call 0xe3410224
add eax, edi
mov dword [eax + 0x9cd], ecx
lea eax, [esp + 0x8900b0]
push eax
lea ecx, [esp + 0x2c]
call fcn.0041cf59
mov ecx, eax
call fcn.0040ad2f
lea ecx, [esp + 0x8900b0]
call fcn.0040cfe4
jmp 0x40f0ff
dec dword [ebx + 0x758b0c7d]
or byte [ebx + 0x5028244c], cl
push edi
push esi
call 0xe3410224
loop 0x4541ba
invalid
mov dword [eax + 0x97f], ecx
loop 0x4541ba
invalid
jg 0x4541c5
add byte [eax], al
lea eax, [esp + 0x8900c0]
push eax
lea ecx, [esp + 0x2c]
dec esp
and al, 0x2c
dec esp
and al, 0x2c
call fcn.0041cf59
mov ecx, eax
call fcn.0040ad2f
lea ecx, [esp + 0x8900c0]
call fcn.0040cfe4
jmp 0x40f0ff
ret 0x741f
mov eax, dword [edi + edx*4]
movzx eax, word [eax + 8]
cmp ax, 0x47
jne 0x454312
inc ecx
jmp 0x45432e
cmp ax, 0x48
jne 0x45431b
dec ecx
jmp 0x45432e
mov esi, ebx
cmp ax, 0x7f
je 0x45433c
cmp ax, 0x40
jne 0x45432e
cmp ecx, 1
je 0x45433c
mov eax, dword [ebp + 0xc]
inc edx
mov ebx, edx
mov esi, ebx
mov dword [eax], edx
mov dword [eax], edx
test ecx, ecx
jne 0x454302
mov eax, dword [edi + esi*4 - 4]
mov ebx, dword [esp + 0x1c]
mov edi, dword [ebp + 0xc]
cmp word [eax + 8], 0x48
mov eax, dword [ebp + 0x14]
jne 0x40f2ae
scasd eax, dword es:[edi]
sti
invalid
scasd eax, dword es:[edi]
sti
inc dword [ebp + 0x51850fc9]
scasd eax, dword es:[edi]
sti
dec dword [ebp + 0x789ff46]
test ecx, ecx
jne 0x40f2ae
lea eax, [esi - 1]
mov dword [edi], eax
jmp 0x40f1ad
add dword [edi + 0x6246e8c9], ecx
cld
jmp [eax - 0x60]
and al, 0xd0
add byte [eax], al
add byte [eax - 0x73], dl
dec esp
and al, 0x2c
call fcn.0041cef5
lea ecx, [esp + 0xd0]
call fcn.0040cfe4
lea ecx, [esp + 0x890090]
call fcn.0040cfe4
mov eax, dword [esp + 0x30]
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x38], eax
mov dword [esp + 0x1c], ebx
jmp 0x40f0ff
lodsb al, byte [esi]
sti
call dword [ecx - 0x18]
mov eax, dword [0xe90089b7]
push esp
lodsb al, byte [esi]
sti
dec dword [ebx + 0xfc9850b]
test byte [edx - 0x54], cl
sti
dec dword [ebx - 0xfe95ff]
adc cl, ch
aas
lodsb al, byte [esi]
sti
dec dword [ebx + 0xff60333]
test byte [0x8bfffbac], dh
into
call fcn.004098d3
push 0x14
push esi
call 0xbb41fe11
sub ebx, 8
jmp 0x40f255
lodsb al, byte [esi]
sti
inc dword [ebx + 0x4d02ac3d]
add byte [edi + ecx], al
test dword [edx], esi
mov ah, 0xfb
dec dword [ebx - 0x575ef7b7]
add cl, byte [ebp]
ret
jmp 0x454742
add cl, ch
js 0x4546c3
sti
dec dword [ebx - 0x74efdbb4]
or dword [ebp + 0x6a840fc9], eax
mov bl, 0xfb
dec dword [ebx - 0xfe95ff]
adc cl, ch
pop edi
mov bl, 0xfb
dec dword [ebx - 0x74efdbbc]
xor al, ch
test byte [edi], 0x84
push ecx
and al, 0x10
mov ecx, dword [ecx]
test ecx, ecx
je 0x40fa8a
mov eax, dword [ecx]
push 1
call dword [eax]
jmp 0x40fa8a
mov esi, dword [eax]
call 0x51c9572c
mov bl, 0xfb
dec dword [ebx + 0x5193e8ce]
sti
jmp [edx + 0x14]
push esi
call 0xbb41fe11
sub ebx, 8
jmp 0x40fa8a
cmpsb byte [esi], byte es:[edi]
sti
call dword [ecx - 0x18]
cwde
mov ch, 0x89
add cl, ch
cmpsb byte ss:[esi], byte es:[edi]
sti
dec dword [ebx + 0xfc9850b]
test byte [esi], ch
sti
dec dword [ebx - 0xfe95ff]
add edi, edi
adc cl, ch
and dword [esi + 0x338bfffb], esp
add esi, esi
je 0x40ee40
mov ecx, esi
call fcn.004098d3
push 0x14
push esi
call 0xbb41fe11
sub ebx, 8
jmp 0x40ee40
add cl, ch
sub al, 0xb0
sti
dec dword [ebx - 0x74efdbb4]
or dword [ebp + 0x1e840fc9], eax
mov al, 0xfb
dec dword [ebx - 0xfe95ff]
adc cl, ch
adc esi, dword [eax + 0x448bfffb]
and al, 0x10
mov esi, dword [eax]
call 0x5c9590f
mov al, 0xfb
dec dword [ebx + 0x4fb0e8ce]
sti
jmp [edx + 0x14]
and al, 0x10
mov ecx, dword [ecx]
test ecx, ecx
je 0x40f921
mov eax, dword [ecx]
push 1
add dword [edx + 1], ebp
call dword [eax]
jmp 0x40f921
jmp [eax + 0x40]
mov ecx, 0xeb83bafc
add al, 0x83
cmp eax, 0x4d2540
dec dword [edi]
test dword [edi - 0x5b], esi
sti
invalid
jne 0x40eed9
mov ecx, 0x4d2544
call fcn.0040a9a5
push 0x442449
call 0xbb4200e7
sub ebx, 4
push 0x4d2540
call 0xbb42023c
sub ebx, 4
jmp 0x40eed9
inc eax
and eax, 0xdce8004d
mov eax, 0xeb83bafc
add al, 0x83
mov edx, 0x8304eb83
cmp eax, 0x4d2540
push dword [ebp + 0x24]
mov ecx, 0x4d2544
call fcn.0040a9a5
push 0x442449
call 0xbb4200e7
sub ebx, 4
push 0x4d2540
call 0xbb42023c
cld
mov edx, 0x8b04eb83
sbb eax, 0x4d2370
cld
mov edx, 0x8b04eb83
sbb eax, 0x4d2370
dec ebp
add cl, ch
cld
test al, 0xfb
inc dword [ebp + 0xb850fff]
jmp 0x40f2e1
dec dword [edi]
test dword [ebx], ecx
stosd dword es:[edi], eax
sti
loop 0x4549f1
invalid
adc ch, byte [edx + 0x29e9fffb]
test eax, 0x728bfffb
add al, 0x6a
or byte [edx - 0x18], dl
or al, 0xb4
cld
mov edx, 0xeb83c68b
or byte [ecx - 0x76dfdbbc], cl
inc esp
and al, 0x50
dec dword [ebx + 0x86a0472]
push edx
call 0xbb41fe11
mov eax, esi
sub ebx, 8
mov dword [esp + 0x20], eax
mov dword [esp + 0x50], eax
xor al, al
jmp 0x40f7db
shr cl, 0xc2
lodsd eax, dword [esi]
sti
dec dword [ebx - 0x16b3db84]
pop esi
cmpsd dword [esi], dword es:[edi]
sti
dec dword [ebx - 0x7c16f383]
cmpsd dword [esi], dword es:[edi]
sti
inc dword [eax + 0x35247c]
je 0x40fbf7
mov eax, dword [eax + 0x10]
jmp 0x40fbf7
push es
add ecx, ebp
or dword [edx + 0x7c80fffb], esi
and al, 0x35
add byte [esp + ecx - 0x75], dh
inc esp
and al, 0x10
mov esi, dword [eax + 0x10]
jmp 0x40fc56
mov edx, 0xeb83c68b
or byte [ecx - 0x76dfdbbc], cl
inc esp
and al, 0x50
xor al, al
jmp 0x40fc83
push esp
and al, 0x30
mov dword [esp + 0x10], edx
jmp 0x454b49
inc ebx
lea ecx, [esp + 0x8900b0]
mov dword [eax], eax
call fcn.0040cfe4
jmp 0x454b49
mov edx, dword [esp + 0x20]
jmp 0x454b6e
mov eax, dword [esp + 0x10]
or edi, 0xffffffff
jmp 0x40edd5
and al, 0xf
mov bh, 0x40
or bl, byte [eax + 0x2be85250]
call fcn.004735e0
jmp 0x454bdb
mov ecx, dword [edi]
invalid
call fcn.004735e0
jmp 0x454bdb
jnp 0x4d05004
mov byte [ebx + 0xf24244c], cl
mov edi, 0x6a500a40
outsb dx, byte [esi]
call fcn.004735e0
lea ecx, [esp + 0xd0]
add byte [eax], al
add byte [eax], al
call fcn.0040cfe4
lea ecx, [esp + 0x890090]
call fcn.0040cfe4
jmp 0x454b49
mov word [eax + edx*4], fs
add byte [ecx - 0x7c021800], cl
sti
invalid
mov edx, dword [esp + 0x30]
mov dword [esp + 0x10], edx
jmp 0x454b49
sub byte [edx + 0x6e], ch
call fcn.004735e0
or edi, 0xffffffff
lea ecx, [esp + 0x741fe0]
mov dword [esp + 0x1c], edi
call fcn.0040cfe4
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x10]
inc esp
and al, 0x10
inc esp
and al, 0x10
jmp 0x40edd9
add dword [eax], eax
mov edx, dword [esp + 0x30]
mov dword [esp + 0x10], edx
jmp 0xbb064b49
test eax, 0x50bafba9
call dword [esp + 0x74]
push 0x10
push dword [edi]
call 0xbb41fe11
sub ebx, 8
jmp 0x40f61e
je 0x40f61e
push ecx
call fcn.0041e4c2
jmp 0x40f61e
je 0x40f61e
push ecx
call fcn.0041ce43
jmp 0x40f61e
add al, 0xe8
cdq
mov cl, 0xfc
mov edx, 0x6a04eb83
or bh, bh
aaa
call 0xbb41fe11
sub ebx, 8
jmp 0x40f61e