Function at 0x4041b0
Capabilities:
Check os version
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x460901
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x2e844
call fcn.00453360
mov eax, dword [0x46aee0]
xor eax, esp
mov dword [esp + 0x2e840], eax
push ebx
push esi
push edi
mov eax, dword [0x46aee0]
xor eax, esp
push eax
lea eax, [esp + 0x2e858]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
xor esi, esi
mov ebx, ecx
mov eax, dword [ebx + 0x38]
mov dword [esp + 0x30], edi
mov dword [esp + 0x38], esi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], esi
cmp word [eax + 0x73b0], si
je 0x404224
mov dword [eax + 0x6160], esi
mov dword [eax + 0x6164], esi
mov eax, dword [ebx + 0x38]
cmp word [eax + 0x1010], si
je 0x404290
push 0x4634a4
push edi
call fcn.004313d0
test al, al
jne 0x404290
push 0x46349c
push edi
call fcn.004313d0
test al, al
jne 0x404290
push 0x463494
push edi
call fcn.004313d0
test al, al
jne 0x40428a
mov eax, edi
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
cmp cx, si
jne 0x404262
mov ecx, dword [str..ext]
mov dword [eax], ecx
mov edx, dword [0x46348c]
mov dword [eax + 4], edx
mov cx, word [0x463490]
mov word [eax + 8], cx
push edi
call fcn.00432710
mov eax, dword [ebx + 0x38]
cmp byte [eax + 0x61b0], 0
je 0x4042ae
mov edx, dword [ebp + 0xc]
push 1
add eax, 0x61b2
push eax
push edx
push edi
call fcn.004322f0
mov eax, dword [ebx + 0x38]
cmp byte [eax + 0x6198], 0
je 0x4042c0
push edi
call fcn.004234e0
mov eax, dword [ebx + 0x38]
xor ecx, ecx
mov word [esp + 0x2d7cc], cx
mov ecx, dword [eax + 0x6160]
xor edx, edx
or ecx, dword [eax + 0x6164]
mov word [esp + 0x2d84c], dx
je 0x4042ee
mov byte [ebx + 0x18e6], 1
jmp 0x4042f5
and dword [eax + 0x6148], 0xffffffe7
cmp byte [0x46be80], 0
jne 0x404311
push 0xd28
call fcn.00440400
push eax
call fcn.004177c0
add esp, 4
mov eax, dword [ebx + 0x38]
movzx edx, byte [eax + 0x6189]
mov ecx, dword [eax + 0x615c]
push 1
push edx
push ecx
add eax, 0xa3e4
push eax
lea ecx, [esp + 0x1b0b4]
mov byte [esp + 0x26], 0
call fcn.00442710
mov edx, dword [esp + 0x30]
push 0x800
push edx
lea eax, [esp + 0x1e0d0]
xor edi, edi
push eax
mov dword [esp + 0x2e86c], edi
call fcn.00445b10
mov ecx, dword [ebx + 0x38]
mov dword [esp + 0x1f0c8], ecx
lea ecx, [esp + 0x31dc]
call fcn.00446e10
lea ecx, [esp + 0x31e4]
call fcn.00446e10
lea ecx, [esp + 0x31ec]
call fcn.00446e10
mov edx, dword [ebx + 0x38]
push edx
lea ecx, [esp + 0xc8]
call fcn.00406fc0
mov eax, dword [ebx + 0x38]
lea esi, [eax + 0x73b0]
mov byte [esp + 0x2e860], 1
cmp word [esi], di
je 0x404459
push 0x50
lea eax, [esp + 0x58]
push edi
push eax
call fcn.004538e0
add esp, 0xc
lea ecx, [esp + 0x3c]
mov dword [esp + 0x54], esi
mov dword [esp + 0x80], 2
mov dword [esp + 0x9c], 0xffffffff
call fcn.00446e10
lea ecx, [esp + 0x3c]
call fcn.00446d60
lea ecx, [esp + 0x3c]
call fcn.00446d40
lea ecx, [esp + 0x54]
push ecx
lea ecx, [esp + 0xc8]
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], edx
call fcn.00406b60
mov esi, dword [esp + 0x30]
cmp dword [esp + 0x1c0bc], 0
je 0x4045df
mov ecx, dword [ebx + 0x38]
cmp byte [ecx + 0x62b2], 0
je 0x4045d3
push 0xe50
call fcn.00440400
push eax
push esi
call fcn.00418100
add esp, 8
push 6
mov ecx, 0x47e198
call fcn.0041cc60
jmp 0x4045df
lea edx, [esp + 0x21cc]
push edx
lea ecx, [esp + 0x1b0a8]
call fcn.00442fc0
test eax, eax
jne 0x404412
mov esi, dword [esp + 0x30]
mov eax, dword [esp + 0x130]
push edi
push eax
lea ecx, [esp + 0x21d4]
push ecx
push esi
mov ecx, ebx
call fcn.00401490
test al, al
je 0x4045b2
push 0x50
lea edx, [esp + 0x58]
push 0
push edx
call fcn.004538e0
mov ecx, dword [esp + 0x31d8]
mov edx, dword [esp + 0x31dc]
lea eax, [esp + 0x21d8]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x31e0]
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x31e4]
or byte [esp + 0x22], ah
mov dword [esp + 0x68], ecx
add esp, 0xc
lea ecx, [esp + 0x31dc]
mov dword [esp + 0x60], edx
mov byte [esp + 0xa0], al
mov byte [esp + 0xa1], ah
call fcn.00446d40
lea ecx, [esp + 0x31ec]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], edx
call fcn.00446d40
movzx ecx, word [esp + 0x1e0c4]
mov dword [esp + 0x78], edx
lea edx, [esp + 0x21cc]
mov dword [esp + 0x7c], ecx
mov ecx, dword [ebx + 0x38]
push edx
mov dword [esp + 0x78], eax
mov dword [esp + 0x84], 2
mov dword [esp + 0xa0], 0xffffffff
call fcn.00414040
test al, al
je 0x404552
or dword [esp + 0x94], 1
mov eax, dword [ebx + 0x38]
cmp dword [eax + 0xa454], 0
jbe 0x404596
push 0x800
lea ecx, [esp + 0x11a8]
push ecx
lea edx, [esp + 0x5c]
push edx
push eax
call fcn.00401560
mov eax, dword [esp + 0x31d8]
push 0
push 0
push eax
lea ecx, [esp + 0x11b0]
push ecx
mov ecx, dword [ebx + 0x38]
call fcn.004148f0
test al, al
jne 0x4045b2
lea edx, [esp + 0x54]
push edx
lea ecx, [esp + 0xc8]
call fcn.00406b60
cmp byte [esp + 0x31d8], 0
jne 0x4045b2
inc edi
lea eax, [esp + 0x21cc]
push eax
lea ecx, [esp + 0x1b0a8]
call fcn.00442fc0
test eax, eax
je 0x404475
jmp 0x404416
push 6
mov ecx, 0x47e198
call fcn.0041ca60
lea ecx, [esp + 0xc4]
call fcn.00406ff0
mov eax, dword [ebx + 0x38]
mov ecx, dword [eax + 0x61a0]
cmp ecx, 3
je 0x4065f3
cmp ecx, 4
je 0x4065ee
push eax
lea ecx, [esp + 0xf160]
call fcn.00409b30
mov edx, dword [ebx + 0x38]
push edx
lea ecx, [esp + 0x3218]
mov byte [esp + 0x2e864], 2
call fcn.00409b30
mov eax, dword [ebx + 0x38]
cmp byte [eax + 0x5126], 0
mov byte [esp + 0x2e860], 3
je 0x404650
cmp byte [eax + 0x5124], 0
mov byte [esp + 0xe118], 1
jne 0x404658
mov byte [esp + 0xe118], 0
mov ecx, dword [eax + 0x73ac]
mov edx, dword [eax + 0x73a8]
mov eax, dword [eax + 0x73a4]
push ecx
push edx
push eax
lea ecx, [esp + 0x3220]
call fcn.00407570
mov ecx, dword [ebx + 0x38]
movzx edx, byte [ecx + 0x6195]
neg edx
sbb edx, edx
and edx, 3
mov edi, 1
add edx, edi
push edx
push esi
lea ecx, [esp + 0xf164]
call fcn.004215a0
test al, al
je 0x4047c2
mov eax, dword [ebx + 0x38]
mov ecx, dword [eax + 0x6160]
or ecx, dword [eax + 0x6164]
jne 0x4046dc
cmp byte [esp + 0x1a058], cl
jne 0x4046c9
cmp dword [eax + 0x6148], ecx
jne 0x4046dc
cmp byte [eax + 0x6197], 0
je 0x40472e
cmp dword [esp + 0x1a054], 2
jne 0x40472e
lea ecx, [esp + 0xf15c]
call fcn.00421ee0
cmp eax, 0x14
jne 0x404709
test edx, edx
jne 0x404709
lea ecx, [esp + 0xf15c]
call fcn.004218b0
mov dword [esp + 0x1017c], edi
jmp 0x4047cf
mov eax, dword [ebx + 0x38]
mov edx, dword [eax + 0x6160]
or edx, dword [eax + 0x6164]
je 0x40472e
xor ecx, ecx
mov dword [eax + 0x6160], ecx
mov dword [eax + 0x6164], ecx
mov byte [ebx + 0x18e6], cl
push 0
lea ecx, [esp + 0xf160]
call fcn.00409d90
lea ecx, [esp + 0xf15c]
call fcn.00407460
test al, al
jne 0x404757
push esi
mov ecx, 0x47e198
call fcn.0041d150
lea ecx, [esp + 0xf15c]
call fcn.00409130
push 0
lea ecx, [esp + 0xf160]
call fcn.004072c0
test al, al
je 0x404781
push 4
mov ecx, 0x47e198
call fcn.0041cc60
lea ecx, [esp + 0xf15c]
call fcn.00407380
test al, al
je 0x40479d
push 3
mov ecx, 0x47e198
call fcn.0041cc60
mov al, byte [esp + 0x1a058]
mov byte [esp + 0xe110], al
test al, al
je 0x4048cb
push 0xd2e
call fcn.00440400
jmp 0x4048d0
cmp dword [esp + 0x1017c], edi
jne 0x4048b0
push edi
push esi
lea ecx, [esp + 0x321c]
mov byte [esp + 0xe15c], 1
call fcn.00421ce0
mov eax, dword [ebx + 0x38]
cmp word [eax + 0x1010], 0
je 0x404855
lea ecx, [esp + 0x11a4]
call fcn.00421560
mov ecx, dword [ebx + 0x38]
add ecx, 0x1010
push ecx
lea ecx, [esp + 0x11a8]
mov byte [esp + 0x2e864], 4
call fcn.00421ca0
push 0x7fffffff
push 0x7fffffff
lea edx, [esp + 0x321c]
push edx
lea ecx, [esp + 0x11b0]
call fcn.004221a0
lea ecx, [esp + 0x11a4]
mov dword [esp + 0xe11c], eax
mov byte [esp + 0x2e860], 3
call fcn.00421c70
mov eax, dword [ebx + 0x38]
cmp dword [eax + 0x6148], 0
je 0x404885
cmp dword [eax + 0x6134], 0
je 0x404885
push 0xd2e
mov byte [esp + 0xe114], 1
call fcn.00440400
push esi
push eax
push 0xd2a
jmp 0x4048d7
cmp byte [esp + 0xe110], 0
je 0x4048a2
push 0xd2e
call fcn.00440400
push esi
push eax
push 0xd2a
jmp 0x4048d7
push esi
mov eax, 0x463484
push eax
push 0xd2a
jmp 0x4048d7
push esi
push 0
mov ecx, 0x47e198
call fcn.0041d000
push 9
mov ecx, 0x47e198
call fcn.0041cc60
jmp 0x4048e5
mov eax, 0x463484
push esi
push eax
push 0xd2c
call fcn.00440400
push eax
call fcn.004177c0
add esp, 0xc
cmp dword [esp + 0xf160], 0xffffffff
mov eax, dword [esp + 0x130]
setne byte [esp + 0x17]
xor esi, esi
xor edi, edi
mov byte [esp + 0x14], 0
mov dword [esp + 0x3c], esi
cmp eax, esi
jbe 0x4049cc
mov edi, edi
push esi
lea ecx, [esp + 0xc8]
call fcn.00406bb0
cmp dword [eax + 0x2c], 2
je 0x40493a
push esi
lea ecx, [esp + 0xc8]
call fcn.00406bb0
cmp dword [eax + 0x2c], 3
jne 0x4049bc
push esi
lea ecx, [esp + 0xc8]
call fcn.00406bb0
mov ecx, dword [eax + 0xc]
cmp ecx, edi
jb 0x404970
ja 0x404959
mov edx, dword [eax + 8]
cmp edx, dword [esp + 0x3c]
jbe 0x404970
push esi
lea ecx, [esp + 0xc8]
call fcn.00406bb0
mov ecx, dword [eax + 8]
mov edi, dword [eax + 0xc]
mov dword [esp + 0x3c], ecx
push esi
lea ecx, [esp + 0xc8]
call fcn.00406bb0
mov edx, dword [eax + 8]
add dword [esp + 0xe144], edx
mov eax, dword [eax + 0xc]
push esi
adc dword [esp + 0xe14c], eax
lea ecx, [esp + 0xc8]
call fcn.00406bb0
mov ecx, dword [eax]
push ecx
lea ecx, [esp + 0x3218]
call fcn.004072a0
add dword [esp + 0xe14c], eax
adc dword [esp + 0xe150], 0
mov eax, dword [esp + 0x130]
inc esi
cmp esi, eax
jb 0x404910
cmp byte [esp + 0x17], 0
je 0x404ad9
test eax, eax
jne 0x4049ea
mov edx, dword [ebx + 0x38]
cmp byte [edx + 0x62b2], al
je 0x404b2d
lea ecx, [esp + 0x3214]
call fcn.004073c0
push 0
push 1
lea eax, [esp + 0xf164]
push eax
lea ecx, [esp + 0x3220]
call fcn.0040bc50
lea ecx, [esp + 0xe122]
push ecx
lea edx, [esp + 0x19]
push edx
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0xd0]
push ecx
lea edx, [esp + 0xf16c]
push edx
mov ecx, ebx
call fcn.004023e0
cmp byte [esp + 0x15], 0
je 0x404b2d
xor esi, esi
cmp dword [esp + 0x130], esi
jbe 0x404a71
lea ecx, [ecx]
push esi
lea ecx, [esp + 0xc8]
call fcn.00406bb0
cmp dword [eax + 0x2c], 4
jne 0x404b2d
inc esi
cmp esi, dword [esp + 0x130]
jb 0x404a50
mov eax, dword [ebx + 0x38]
cmp dword [eax + 0x6180], 0
jne 0x404b2d
push 0xa
mov ecx, 0x47e198
call fcn.0041ca60
lea ecx, [esp + 0x3214]
call fcn.004218b0
push 0xd4c
call fcn.00440400
push eax
call fcn.004177c0
add esp, 4
lea ecx, [esp + 0x3214]
mov byte [esp + 0x2e860], 2
call fcn.00407a50
lea ecx, [esp + 0xf15c]
mov byte [esp + 0x2e860], 1
call fcn.00407a50
jmp 0x406615
mov ecx, dword [ebx + 0x38]
xor edx, edx
cmp byte [ecx + 0x6197], dl
push 0
setne dl
push 0
lea eax, [esp + 0xf164]
push eax
lea ecx, [esp + 0x3220]
add edx, 2
mov dword [esp + 0xe118], edx
call fcn.0040bc50
mov eax, dword [ebx + 0x38]
mov ecx, dword [eax + 0x6160]
mov eax, dword [eax + 0x6164]
mov edx, ecx
or edx, eax
je 0x404b2d
push eax
push ecx
lea eax, [esp + 0x321c]
push eax
call fcn.00452980
mov ecx, dword [esp + 0xe10c]
push ecx
mov ecx, dword [ebx + 0x38]
call fcn.00414260
xor esi, esi
cmp dword [esp + 0x130], esi
jbe 0x404ba0
jmp 0x404b50
mov edx, dword [ebx + 0x38]
cmp byte [edx + 0x6153], 0
je 0x404b6f
push esi
lea ecx, [esp + 0xc8]
call fcn.00406bb0
cmp dword [eax + 0x2c], 2
je 0x404b82
push esi
lea ecx, [esp + 0xc8]
call fcn.00406bb0
cmp dword [eax + 0x2c], 1
jne 0x404b96
push esi
lea ecx, [esp + 0xc8]
call fcn.00406bb0
mov dword [eax + 0x2c], 0
inc esi
cmp esi, dword [esp + 0x130]
jb 0x404b50
mov esi, dword [ebx + 0x38]
cmp word [esi + 0x73b0], 0
jne 0x404c41
cmp byte [esp + 0x17], 0
je 0x404bc2
cmp byte [esp + 0x1a058], 0
jne 0x404c41
cmp byte [esp + 0x16], 0
jne 0x404c41
mov eax, dword [esi + 0x6148]
test eax, eax
je 0x404be3
mov ecx, dword [esp + 0xe144]
mov edx, dword [esp + 0xe148]
jmp 0x404be9
mov ecx, dword [esp + 0x3c]
mov edx, edi
neg eax
sbb eax, eax
and eax, 0xe0000
add eax, 0x20000
cmp dword [esi + 0xc], eax
jbe 0x404c41
push 0
push 2
push edx
push ecx
call fcn.00453600
mov edi, eax
lea esp, [esp]
mov ecx, dword [ebx + 0x38]
mov eax, dword [ecx + 0xc]
xor esi, esi
cmp esi, edx
jb 0x404c41
ja 0x404c22
cmp eax, edi
jbe 0x404c41
shr dword [ecx + 0xc], 1
mov ecx, dword [ebx + 0x38]
mov eax, dword [ecx + 0x6148]
neg eax
sbb eax, eax
and eax, 0xe0000
add eax, 0x20000
cmp dword [ecx + 0xc], eax
ja 0x404c10
cmp dword [esp + 0xe10c], 2
mov ecx, 0x400000
jne 0x404c5b
mov eax, dword [ebx + 0x38]
cmp dword [eax + 0xc], ecx
jbe 0x404c5b
mov dword [eax + 0xc], ecx
mov eax, dword [ebx + 0x38]
xor edi, edi
cmp dword [eax + 0x6134], edi
jne 0x404c75
mov ecx, 0x20000
cmp dword [eax + 0xc], ecx
jbe 0x404c75
mov dword [eax + 0xc], ecx
cmp byte [esp + 0xe110], 0
je 0x404c8f
mov ecx, dword [ebx + 0x38]
cmp byte [ecx + 0x617d], 0
jne 0x404c8f
mov al, 1
jmp 0x404c91
xor al, al
push edi
push eax
lea ecx, [esp + 0xcc]
call fcn.00407260
mov edx, dword [ebx + 0x38]
cmp dword [edx + 0x61a0], edi
je 0x404ce3
cmp dword [esp + 0xe10c], 3
jne 0x404ce3
push 0xeac
call fcn.00440400
push eax
call fcn.004177c0
add esp, 4
lea eax, [esp + 0xc4]
push eax
mov ecx, ebx
call fcn.00402940
push 0x463480
call fcn.004177c0
add esp, 4
mov ecx, dword [ebx + 0x3c]
cmp ecx, edi
je 0x404cf2
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
cmp byte [esp + 0x17], 0
je 0x404d2d
cmp dword [esp + 0x1a054], 3
je 0x404d39
push 0x1b498
call fcn.00454220
add esp, 4
mov dword [esp + 0x24], eax
mov byte [esp + 0x2e860], 6
cmp eax, edi
je 0x404d63
lea ecx, [ebx + 0x58]
push ecx
mov ecx, eax
call fcn.0042fbd0
jmp 0x404d65
mov ecx, dword [ebx + 0x38]
cmp byte [ecx + 0x6197], 0
je 0x404d03
push 0x6228
call fcn.00454220
add esp, 4
mov dword [esp + 0x24], eax
mov byte [esp + 0x2e860], 5
cmp eax, edi
je 0x404d63
lea edx, [ebx + 0x58]
push edx
mov ecx, eax
call fcn.00429360
jmp 0x404d65
xor eax, eax
mov dword [ebx + 0x3c], eax
lea eax, [ebx + 0x58]
push eax
lea ecx, [esp + 0x1f0d0]
mov byte [esp + 0x2e864], 3
call fcn.004509f0
mov ecx, dword [ebx + 0x3c]
mov eax, dword [ebx + 0x38]
mov edx, dword [ecx]
mov eax, dword [eax + 0x83b0]
mov edx, dword [edx + 0x20]
push eax
mov byte [esp + 0x2e864], 7
call edx
mov eax, dword [ebx + 0x38]
mov ecx, dword [eax + 0x83b0]
mov dword [esp + 0x1f0e8], ecx
cmp ecx, 8
jb 0x404dbc
mov dword [esp + 0x1f0e8], 8
mov eax, dword [eax + 0xc]
mov ecx, dword [ebx + 0x3c]
mov edx, dword [ecx]
mov esi, eax
push eax
mov eax, dword [edx + 4]
call eax
test al, al
jne 0x404e06
mov edi, 0x100000
jmp 0x404de0
mov eax, dword [ebx + 0x38]
cmp dword [eax + 0xc], edi
jbe 0x404ea2
shr dword [eax + 0xc], 1
mov ecx, dword [ebx + 0x3c]
mov eax, dword [ebx + 0x38]
mov edx, dword [ecx]
mov eax, dword [eax + 0xc]
mov edx, dword [edx + 4]
push eax
call edx
test al, al
je 0x404de0
xor edi, edi
mov ecx, dword [ebx + 0x38]
mov eax, dword [ecx + 0xc]
cmp esi, eax
je 0x404e2b
shr eax, 0x14
push eax
shr esi, 0x14
push esi
push 0xebe
call fcn.00440400
push eax
call fcn.004177c0
add esp, 0xc
mov ecx, dword [ebx + 0x3c]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
lea esi, [ebx + 8]
push esi
call eax
cmp byte [esp + 0x1a058], 0
lea eax, [ebx + 0x58]
mov dword [esi + 0x24], ebx
mov ecx, dword [ebx + 0x38]
mov dword [esi + 0x2c], eax
lea edx, [esp + 0xf15c]
lea eax, [esp + 0x3214]
mov dword [esi + 0x28], ecx
mov dword [esi + 0x20], edi
mov dword [esi + 4], edi
mov dword [esi + 8], edi
mov dword [esi + 0x18], edx
mov dword [esi + 0x1c], eax
mov byte [esp + 0x15], 0
mov byte [esp + 0x16], 0
je 0x404ee9
mov ecx, dword [ebx + 0x38]
cmp byte [ecx + 0x5124], 0
jne 0x404e8c
cmp byte [esp + 0x14], 0
je 0x404ec9
mov edx, dword [ebx + 0x48]
add dword [esp + 0xe144], edx
mov eax, dword [ebx + 0x4c]
adc dword [esp + 0xe148], eax
jmp 0x404ece
push 1
push section..data
lea ecx, [esp + 0x44]
call fcn.004533de
push 0x4668fc
lea eax, [esp + 0x40]
push eax
mov dword [esp + 0x44], vtable.std::bad_alloc.0
call fcn.00454183
mov byte [esp + 0x15], 1
push edi
lea ecx, [esp + 0xf160]
call fcn.0040c1e0
push edx
push eax
lea ecx, [esp + 0xf168]
call fcn.004075e0
xor esi, esi
mov dword [esp + 0x13c], esi
mov dword [esp + 0x140], edi
mov dword [esp + 0x144], edi
mov dword [esp + 0x148], edi
mov byte [esp + 0x2e860], 8
mov dword [esp + 0x4c], edi
mov dword [esp + 0x50], edi
mov dword [esp + 0x18], edi
cmp dword [esp + 0x130], edi
jbe 0x405e2a
jmp 0x404f30
mov ecx, dword [esp + 0x18]
push ecx
lea ecx, [esp + 0xc8]
call fcn.00406bb0
mov ecx, 0x14
mov esi, eax
lea edi, [esp + 0x54]
rep movsd dword es:[edi], dword [esi]
cmp dword [esp + 0x80], 0
je 0x405e0d
mov edi, dword [esp + 0x18]
mov esi, dword [esp + 0x90]
jmp 0x404f70
mov eax, dword [esp + 0x80]
cmp eax, 6
je 0x40587e
cmp eax, 5
je 0x4059cb
cmp eax, 4
je 0x405a71
push 0
lea ecx, [esp + 0x96a8]
call fcn.00425360
lea ecx, [esp + 0x116c]
call fcn.00446e10
lea ecx, [esp + 0x1174]
call fcn.00446e10
lea ecx, [esp + 0x117c]
call fcn.00446e10
lea ecx, [esp + 0x11a4]
call fcn.00421560
cmp byte [esp + 0xa1], 0
mov byte [esp + 0x2e860], 0xb
je 0x405019
cmp dword [esp + 0xe10c], 3
jne 0x405019
mov edx, dword [ebx + 0x38]
cmp byte [edx + 0x6189], 0
mov byte [esp + 0x13], 1
je 0x40501e
mov ecx, dword [esp + 0x54]
lea eax, [esp + 0x96a4]
push eax
push ecx
call fcn.0041ed10
cmp dword [esp + 0xa794], 0
jne 0x40501e
mov byte [esp + 0x13], 0
mov al, byte [esp + 0xa0]
test al, al
jne 0x405041
cmp byte [esp + 0x13], al
je 0x40503a
mov edx, dword [ebx + 0x38]
cmp byte [edx + 0x6189], al
jne 0x405041
mov byte [esp + 0x2a], 0
jmp 0x40505a
mov byte [esp + 0x2a], 1
test al, al
je 0x40505a
mov eax, dword [ebx + 0x38]
cmp dword [eax + 0x6158], 1
je 0x405df9
mov eax, dword [ebx + 0x38]
cmp word [eax + 0x73b0], 0
jne 0x4050a7
movzx ecx, byte [eax + 0x6189]
mov eax, dword [esp + 0x54]
push ecx
lea edx, [esp + 0x160]
push edx
push eax
call fcn.004245e0
cmp byte [esp + 0xa0], 0
mov byte [esp + 0x13], al
je 0x4050b7
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
push ecx
push edx
lea ecx, [esp + 0x1184]
call fcn.00446d50
jmp 0x4050b7
mov byte [esp + 0x13], 0
mov dword [esp + 0x11b0], 1
mov cl, byte [esp + 0x2a]
test cl, cl
jne 0x40523e
mov eax, dword [ebx + 0x38]
cmp word [eax + 0x73b0], 0
jne 0x40523e
cmp byte [esp + 0x13], cl
je 0x4050fa
movzx eax, byte [eax + 0x6195]
mov ecx, dword [esp + 0x54]
neg eax
sbb eax, eax
and eax, 4
push eax
push ecx
lea ecx, [esp + 0x11ac]
call fcn.004215a0
cmp dword [esp + 0x11a8], 0xffffffff
jne 0x40519b
mov edx, dword [esp + 0x54]
mov eax, dword [esp + 0x30]
push edx
push eax
mov ecx, 0x47e198
call fcn.0041cfd0
mov ecx, dword [esp + 0x5c]
sub dword [esp + 0xe144], ecx
mov edx, dword [esp + 0x60]
push edi
sbb dword [esp + 0xe14c], edx
lea ecx, [esp + 0xc8]
call fcn.00406bb0
inc dword [esp + 0x38]
mov dword [eax + 0x2c], 0
test esi, esi
jl 0x405df9
jg 0x405162
cmp dword [esp + 0x8c], 0
jbe 0x405df9
cmp dword [esp + 0x98], 0
jne 0x405df9
lea ecx, [esp + 0x11a4]
mov dword [esp + 0x80], 4
mov dword [ebx + 0x40], 0
mov byte [esp + 0x2e860], 8
call fcn.00421c70
jmp 0x404f70
cmp byte [esp + 0x13], 0
je 0x4051b6
lea ecx, [esp + 0x116c]
call fcn.00446d40
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], edx
cmp byte [esp + 0xa1], 0
jne 0x40525c
mov eax, dword [ebx + 0x38]
cmp byte [eax + 0x618a], 0
je 0x40525c
cmp dword [esp + 0xe10c], 3
jne 0x40525c
lea ecx, [esp + 0xa4]
push ecx
lea edx, [esp + 0x140]
push edx
lea eax, [esp + 0x11ac]
push eax
mov ecx, ebx
mov dword [esp + 0xb0], edi
call fcn.00402710
test al, al
je 0x40525c
mov edx, dword [esp + 0xa4]
push 0x800
lea ecx, [esp + 0xa79c]
push ecx
push edx
lea ecx, [esp + 0xd0]
mov dword [esp + 0xa7a0], 4
call fcn.00406bb0
push eax
mov eax, dword [ebx + 0x38]
push eax
jmp 0x4052c7
cmp byte [esp + 0xa1], 0
jne 0x405258
xor eax, eax
mov dword [esp + 0x115c], eax
mov dword [esp + 0x1160], eax
test cl, cl
jne 0x4052d1
cmp dword [esp + 0x9c], 0xffffffff
je 0x4052d1
cmp dword [esp + 0x11a8], 0xffffffff
je 0x40527c
lea ecx, [esp + 0x11a4]
call fcn.00421850
mov esi, dword [esp + 0x9c]
push esi
lea ecx, [esp + 0xc8]
call fcn.00406bb0
mov eax, dword [eax + 0x2c]
cmp eax, 2
je 0x40529d
cmp eax, 3
jne 0x4052d1
push 0x800
lea ecx, [esp + 0xa79c]
push ecx
push esi
lea ecx, [esp + 0xd0]
mov dword [esp + 0xa7a0], 5
call fcn.00406bb0
mov edx, dword [ebx + 0x38]
push eax
push edx
call fcn.00401560
mov byte [esp + 0x2a], 1
mov eax, dword [esp + 0x54]
push eax
push 1
mov ecx, 0x47e1a8
call fcn.00414530
mov eax, dword [ebx + 0x38]
push 0x800
lea ecx, [esp + 0x96c8]
push ecx
lea edx, [esp + 0x5c]
push edx
push eax
call fcn.00401560
cmp byte [esp + 0x16], 0
je 0x40536c
lea ecx, [esp + 0xf15c]
call fcn.00407620
push 0
lea ecx, [esp + 0xf160]
mov esi, eax
mov edi, edx
call fcn.0040c1e0
push edx
push eax
lea ecx, [esp + 0xf168]
call fcn.004075e0
push 0
lea ecx, [esp + 0x1f0d0]
push ecx
push edi
push esi
lea edx, [esp + 0xf16c]
push edx
mov ecx, ebx
call fcn.00402140
mov edx, dword [ebx + 0x38]
mov edx, dword [edx + 0x6134]
mov ecx, dword [ebx + 0x3c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x10]
dec edx
push edx
lea edx, [esp + 0x1f0d0]
push edx
call eax
mov byte [ebx + 0x54], 1
xor edi, edi
cmp byte [esp + 0xe110], 0
mov byte [esp + 0x16], 0
mov byte [esp + 0x15], 0
je 0x40549b
mov eax, dword [ebx + 0x38]
mov ecx, dword [eax + 0x6148]
mov byte [esp + 0x14], 0
test cl, 2
je 0x4053b9
mov esi, dword [eax + 0x614c]
cmp esi, edi
jle 0x4053b9
cmp dword [esp + 0x1c], edi
jle 0x4053b9
mov eax, dword [esp + 0x1c]
cdq
idiv esi
test edx, edx
jne 0x4053b9
mov byte [esp + 0x14], 1
test cl, 4
je 0x405404
lea ecx, [esp + 0x96c4]
push ecx
call fcn.004313b0
mov esi, eax
cmp esi, edi
je 0x4053fa
lea edx, [esp + 0x2d7cc]
push edx
push esi
call fcn.00445ac0
test eax, eax
je 0x4053e8
mov byte [esp + 0x14], 1
push 0x40
push esi
lea eax, [esp + 0x2d7d4]
push eax
call fcn.00445b10
jmp 0x405404
xor ecx, ecx
mov word [esp + 0x2d7cc], cx
mov edx, dword [ebx + 0x38]
mov edx, dword [edx + 0x6148]
test dl, 8
jne 0x405466
lea ecx, [esp + 0x3232]
lea eax, [esp + 0x2d84c]
mov si, word [eax]
cmp si, word [ecx]
jne 0x405446
cmp si, di
je 0x405442
mov si, word [eax + 2]
cmp si, word [ecx + 2]
jne 0x405446
add eax, 4
add ecx, 4
cmp si, di
jne 0x405420
xor eax, eax
jmp 0x40544b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
je 0x405466
test dl, 0x10
jne 0x40546d
cmp dword [esp + 0x50], edi
jg 0x40546d
jl 0x405466
cmp dword [esp + 0x4c], 0x400000
ja 0x40546d
cmp byte [esp + 0x14], 0
je 0x40548b
cmp dword [esp + 0x1c], edi
jle 0x40548b
mov ecx, dword [ebx + 0x3c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x14]
call edx
mov byte [ebx + 0x54], 0
mov dword [esp + 0x4c], edi
mov dword [esp + 0x50], edi
jmp 0x40549b
mov eax, dword [esp + 0x5c]
add dword [esp + 0x4c], eax
mov ecx, dword [esp + 0x60]
adc dword [esp + 0x50], ecx
xor eax, eax
lea ecx, [ecx]
movzx ecx, word [esp + eax + 0x3232]
mov word [esp + eax + 0x2d84c], cx
add eax, 2
cmp cx, di
jne 0x4054a0
mov eax, dword [esp + 0x80]
cmp eax, 2
jne 0x4054d0
mov edx, dword [esp + 0x54]
push edx
push 0xd30
jmp 0x4054df
cmp eax, 3
jne 0x4054ed
mov eax, dword [esp + 0x54]
push eax
push 0xd32
call fcn.00440400
push eax
call fcn.004177c0
add esp, 8
mov eax, dword [ebx + 0x38]
cmp word [eax + 0x73b0], di
jne 0x405509
mov ecx, dword [esp + 0x116c]
or ecx, dword [esp + 0x1170]
jne 0x40551b
mov dword [esp + 0x115c], edi
mov dword [esp + 0x1160], 0x100
cmp dword [esp + 0xe10c], 3
mov edx, dword [esp + 0x115c]
mov ecx, dword [esp + 0x1160]
mov dword [esp + 0x96a8], 2
mov dword [esp + 0xa6f4], edx
mov dword [esp + 0xa6f8], ecx
mov dword [esp + 0xa6ec], edi
mov dword [esp + 0xa6f0], edi
jne 0x405562
mov edi, dword [eax + 0x6138]
jmp 0x405567
mov edi, 2
push edi
lea ecx, [esp + 0xa708]
call fcn.00424eb0
mov edx, dword [ebx + 0x38]
cmp byte [edx + 0x5124], 0
je 0x405623
cmp byte [esp + 0xa0], 0
jne 0x405623
mov esi, dword [esp + 0xe10c]
cmp esi, 3
jne 0x4055d9
push 0x10
lea eax, [esp + 0xa749]
push eax
call fcn.0041a190
cmp byte [esp + 0xe118], 0
mov esi, dword [esp + 0xe10c]
sete cl
mov dword [esp + 0xa780], 0xf
mov byte [esp + 0xa755], 1
mov byte [esp + 0xa75e], cl
mov edx, dword [esp + 0xe122]
mov eax, dword [esp + 0xe126]
mov ecx, dword [esp + 0xe12a]
mov dword [esp + 0xa735], edx
mov edx, dword [esp + 0xe12e]
mov byte [esp + 0xa72f], 1
mov byte [esp + 0xa734], 1
mov dword [esp + 0xa739], eax
mov dword [esp + 0xa73d], ecx
mov dword [esp + 0xa741], edx
jmp 0x40562a
mov esi, dword [esp + 0xe10c]
cmp esi, 3
sete al
dec al
and al, 0x1d
cmp byte [ebx + 0x54], 0
mov byte [esp + 0x96bd], al
mov eax, dword [ebx + 0x38]
mov ecx, dword [eax + 0xc]
mov dword [esp + 0xa788], ecx
je 0x405656
mov byte [esp + 0xa784], 1
cmp byte [esp + 0x13], 0
je 0x4056b5
mov edx, dword [esp + 0x116c]
mov ecx, dword [esp + 0x1170]
mov dword [esp + 0xa6d4], edx
mov edx, dword [esp + 0x117c]
mov dword [esp + 0xa6d8], ecx
mov ecx, dword [esp + 0x1180]
mov dword [esp + 0xa6e4], edx
mov edx, dword [esp + 0x1174]
mov dword [esp + 0xa6e8], ecx
mov ecx, dword [esp + 0x1178]
mov dword [esp + 0xa6dc], edx
mov dword [esp + 0xa6e0], ecx
xor edx, edx
jmp 0x4056e1
xor edx, edx
mov dword [esp + 0xa6d4], edx
mov dword [esp + 0xa6d8], edx
mov dword [esp + 0xa6e4], edx
mov dword [esp + 0xa6e8], edx
mov dword [esp + 0xa6dc], edx
mov dword [esp + 0xa6e0], edx
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x96c0], ecx
cmp esi, 2
je 0x4056fa
cmp dword [esp + 0xa794], edx
jne 0x405707
and ecx, 0xfffffbff
mov dword [esp + 0x96c0], ecx
cmp dword [esp + 0xa6f8], edx
movzx ecx, byte [esp + 0xa0]
mov byte [esp + 0xa785], cl
movzx ecx, byte [eax + 0x6134]
mov byte [esp + 0x96be], cl
jg 0x40574a
jl 0x40573c
cmp dword [esp + 0xa6f4], 0x80000000
ja 0x40574a
cmp word [eax + 0x73b0], dx
jne 0x40574a
cmp esi, 3
jne 0x405752
mov byte [esp + 0xa78d], 1
mov edx, dword [eax + 0x83b0]
push edx
push edi
lea ecx, [ebx + 0x249c]
call fcn.00424fe0
lea eax, [esp + 0x3214]
push eax
lea ecx, [esp + 0x11a8]
push ecx
lea esi, [ebx + 0x58]
mov ecx, esi
mov dword [esp + 0xa798], 0
call fcn.00437080
mov edx, dword [esp + 0x1160]
xor eax, eax
mov dword [ebx + 0x18f8], eax
mov dword [ebx + 0x18fc], eax
mov eax, dword [esp + 0x115c]
xor edi, edi
cmp byte [esp + 0x2a], 0
mov byte [ebx + 0xa8], 1
mov dword [esp + 0xa6fc], eax
mov dword [esp + 0xa700], edx
jne 0x405c8d
mov ecx, dword [ebx + 0x38]
cmp word [ecx + 0x73b0], di
jne 0x405c8d
lea edx, [esp + 0x2f]
push edx
lea eax, [esp + 0x32]
push eax
lea ecx, [esp + 0x2c]
push ecx
mov ecx, esi
call fcn.00436fa0
cmp byte [esp + 0x2e], 0
je 0x405ba1
mov edx, dword [esp + 0x54]
mov eax, dword [esp + 0x30]
push edx
push eax
mov ecx, 0x47e198
call fcn.0041cfd0
mov ecx, dword [esp + 0x5c]
sub dword [esp + 0xe144], ecx
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x60]
sbb dword [esp + 0xe148], edx
push eax
lea ecx, [esp + 0xc8]
call fcn.00406bb0
inc dword [esp + 0x38]
cmp dword [esp + 0x90], edi
mov dword [eax + 0x2c], edi
jl 0x405df9
jg 0x405857
cmp dword [esp + 0x8c], edi
jbe 0x405df9
lea ecx, [esp + 0x11a4]
mov dword [esp + 0x80], 4
mov dword [ebx + 0x40], edi
mov byte [esp + 0x2e860], 8
call fcn.00421c70
jmp 0x404f5c
mov edx, dword [esp + 0xf15c]
mov eax, dword [edx + 0xc]
lea ecx, [esp + 0xf15c]
mov dword [esp + 0x14c], ecx
call eax
mov esi, eax
mov edi, edx
mov dword [esp + 0x154], esi
mov dword [esp + 0x158], edi
mov ecx, dword [ebx + 0x3c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
mov byte [esp + 0x2e860], 9
call eax
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x8c]
push 0
push ecx
push edx
lea ecx, [esp + 0xf168]
call fcn.004075e0
lea ecx, [esp + 0xf15c]
call fcn.0040ea30
mov eax, dword [esp + 0x148c0]
cmp eax, 2
je 0x405951
cmp eax, 3
je 0x40595a
mov al, byte [esp + 0x1a060]
cmp al, byte [esp + 0xe118]
jne 0x4059a7
mov ecx, dword [esp + 0x1a048]
mov edx, dword [esp + 0x1a044]
push 0
push ecx
push edx
lea ecx, [esp + 0xf168]
call fcn.004075e0
mov eax, dword [esp + 0x1a04c]
sub eax, dword [esp + 0x1a044]
mov ecx, dword [esp + 0x1a050]
sbb ecx, dword [esp + 0x1a048]
lea edx, [esp + 0x3214]
push ecx
push eax
push edx
jmp 0x40599b
lea ecx, [esp + 0x155ec]
jmp 0x405961
lea ecx, [esp + 0x1792c]
push 0
push 0
push ecx
push eax
lea ecx, [esp + 0x3224]
call fcn.00409e90
lea ecx, [esp + 0xf15c]
call fcn.00407620
mov ecx, dword [esp + 0x1a04c]
sub ecx, eax
mov eax, dword [esp + 0x1a050]
sbb eax, edx
push eax
push ecx
lea ecx, [esp + 0x321c]
push ecx
lea ecx, [esp + 0xf168]
call fcn.004221a0
mov edx, dword [esp + 0xf15c]
mov eax, dword [edx + 8]
push 0
push edi
push esi
lea ecx, [esp + 0xf168]
mov byte [esp + 0x2e86c], 8
call eax
jmp 0x405e0d
mov edx, dword [esp + 0xf15c]
mov eax, dword [edx + 0xc]
lea ecx, [esp + 0xf15c]
mov dword [esp + 0xac], ecx
call eax
mov esi, eax
mov edi, edx
mov dword [esp + 0xb4], esi
mov dword [esp + 0xb8], edi
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x8c]
push 0
push ecx
push edx
lea ecx, [esp + 0xf168]
mov byte [esp + 0x2e86c], 0xa
call fcn.004075e0
lea ecx, [esp + 0xf15c]
call fcn.0040ea30
lea eax, [esp + 0x1560c]
push eax
push 0xd9a
call fcn.00440400
push eax
call fcn.004177c0
inc dword [esp + 0x28]
add esp, 8
call fcn.00446120
mov edx, dword [esp + 0xf15c]
mov eax, dword [edx + 8]
push 0
push edi
push esi
lea ecx, [esp + 0xf168]
mov byte [esp + 0x2e86c], 8
call eax
jmp 0x405e0d
cmp byte [esp + 0x1a058], 0
je 0x405adb
cmp byte [esp + 0x15], 0
jne 0x405adb
mov edx, dword [esp + 0x8c]
push 0
lea ecx, [esp + 0x1f0d0]
push ecx
push esi
push edx
lea eax, [esp + 0xf16c]
push eax
mov ecx, ebx
call fcn.00402140
mov ecx, dword [esp + 0x98]
mov eax, dword [ebx + 0x3c]
push ecx
push 0
lea edx, [esp + 0x1f0d4]
push edx
push eax
lea ecx, [esp + 0x3224]
push ecx
lea edx, [esp + 0xf170]
push edx
mov ecx, ebx
call fcn.00403780
call fcn.00446120
jmp 0x405e0d
mov ecx, dword [ebx + 0x3c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x14]
call edx
mov eax, dword [esp + 0x8c]
push 0
push esi
push eax
lea ecx, [esp + 0xf168]
call fcn.004075e0
lea ecx, [esp + 0xf15c]
call fcn.0040ea30
lea ecx, [esp + 0x155ec]
push ecx
lea ecx, [esp + 0x96a8]
call fcn.00425440
mov eax, dword [esp + 0x98]
test eax, eax
je 0x405b37
push eax
lea edx, [esp + 0x96a8]
push edx
mov ecx, ebx
call fcn.00401670
lea ecx, [esp + 0xf15c]
call fcn.0040c100
test al, al
jne 0x405b52
mov al, byte [esp + 0x1a058]
mov byte [esp + 0x16], al
cmp byte [esp + 0x16], 0
je 0x405b6f
mov ecx, dword [ebx + 0x38]
mov eax, dword [ecx + 0xc]
cmp eax, dword [esp + 0xa788]
jbe 0x405b6f
mov dword [esp + 0xa788], eax
push 0
push 0
push 0
push 2
lea ecx, [esp + 0x3224]
call fcn.00409e90
lea edx, [esp + 0xf15c]
push edx
lea ecx, [esp + 0x3218]
call fcn.00407410
call fcn.00446120
jmp 0x405e0d
cmp byte [esp + 0x2f], 0
je 0x405bf6
mov ecx, dword [esp + 0x1160]
mov edx, dword [esp + 0x24]
xor eax, eax
cmp ecx, eax
mov eax, dword [esp + 0x115c]
ja 0x405bde
jb 0x405bc6
cmp eax, edx
jae 0x405bde
mov byte [esp + 0x34], 1
mov edx, dword [esp + 0x34]
push edx
push 1
push ecx
push eax
call fcn.00401710
jmp 0x405c7f
mov byte [esp + 0x34], 0
mov edx, dword [esp + 0x34]
push edx
push 1
push ecx
push eax
call fcn.00401710
jmp 0x405c7f
mov eax, dword [esp + 0x24]
xor ecx, ecx
mov esi, ecx
push esi
mov dword [esp + 0x1160], eax
mov edi, eax
add eax, 0x200
mov dword [esp + 0x1164], ecx
push 2
adc ecx, ecx
push ecx
push eax
call fcn.00453600
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], edx
cmp edx, esi
ja 0x405c3d
jb 0x405c31
cmp eax, edi
jae 0x405c3d
mov dword [esp + 0x3c], esi
mov dword [esp + 0x40], 0x40000000
mov edi, dword [esp + 0x3c]
mov esi, 1
xor eax, eax
mov edx, esi
add edx, 0xffffffff
mov ecx, eax
adc ecx, 0xffffffff
cmp dword [esp + 0x40], ecx
jb 0x405c71
ja 0x405c5e
cmp edi, edx
jb 0x405c71
shld eax, esi, 7
shl esi, 7
mov edx, esi
or edx, eax
jne 0x405c48
mov edx, dword [esp + 0x40]
jmp 0x405c7b
add esi, 0xffffffff
adc eax, 0xffffffff
mov edi, esi
mov edx, eax
mov eax, edi
xor edi, edi
mov dword [esp + 0xa700], edx
mov dword [esp + 0xa6fc], eax
mov ecx, dword [esp + 0xe10c]
inc dword [esp + 0x1c]
cmp ecx, 3
jne 0x405ca9
mov dword [ebx + 0x1920], eax
mov dword [ebx + 0x1924], edx
test byte [esp + 0x94], 1
jne 0x405cc2
mov eax, dword [ebx + 0x38]
cmp dword [eax + 0x6134], edi
je 0x405cc2
xor al, al
jmp 0x405cc4
mov al, 1
cmp byte [esp + 0x2a], 0
mov byte [esp + 0x14], al
jne 0x405cd3
test al, al
je 0x405cf8
mov edx, dword [ebx + 0x38]
mov byte [esp + 0x96be], 0
cmp byte [edx + 0x5124], 0
jne 0x405cf4
cmp ecx, 3
je 0x405cf4
mov byte [esp + 0x96bd], 0x14
test al, al
jne 0x405d24
mov ecx, dword [ebx + 0x3c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x1c]
call edx
xor ecx, ecx
add eax, dword [esp + 0xa6f4]
adc ecx, dword [esp + 0xa6f8]
mov dword [esp + 0xa8], ecx
js 0x405d2e
jg 0x405d24
cmp eax, 0x8000
jbe 0x405d2e
mov ecx, dword [ebx + 0x3c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
call eax
mov ecx, dword [esp + 0x2a]
mov edx, dword [esp + 0x54]
mov eax, dword [ebx + 0x3c]
push ecx
push 1
push edx
push eax
lea ecx, [esp + 0x11b4]
push ecx
lea esi, [ebx + 8]
mov ecx, esi
call fcn.00403560
cmp byte [esp + 0x2a], 0
jne 0x405dae
cmp byte [esp + 0x14], 0
je 0x405d7f
push edi
mov ecx, esi
call fcn.00403620
lea eax, [ebx + 0x58]
push eax
call fcn.00402660
push edi
mov ecx, esi
call fcn.00403050
mov dword [esi + 8], edi
mov dword [esi + 4], edi
jmp 0x405dae
mov eax, dword [ebx + 0x38]
mov ecx, dword [ebx + 0x3c]
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
lea esi, [eax + 0x62dc]
mov eax, dword [eax + 0x6134]
push esi
dec eax
push eax
movzx eax, byte [ebx + 0x54]
push eax
call edx
cmp byte [esp + 0xe110], 0
je 0x405db8
mov byte [ebx + 0x54], 1
cmp byte [esp + 0xe110], 0
jne 0x405dc2
mov ecx, dword [ebx + 0x3c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x14]
call edx
call fcn.00446120
mov eax, dword [ebx + 0x38]
cmp byte [eax + 0x6144], 0
mov esi, 0x463484
jne 0x405ddd
mov esi, 0x463470
push 0xd1c
call fcn.00440400
push eax
push esi
push 0x463464
call fcn.004177c0
add esp, 0xc
mov dword [ebx + 0x28], edi
lea ecx, [esp + 0x11a4]
mov byte [esp + 0x2e860], 8
call fcn.00421c70
mov eax, dword [esp + 0x18]
inc eax
mov dword [esp + 0x18], eax
cmp eax, dword [esp + 0x130]
jb 0x404f30
mov esi, dword [esp + 0x13c]
mov ecx, dword [ebx + 0x3c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
call eax
mov edi, dword [esp + 0x38]
test edi, edi
jle 0x405e73
push 6
mov ecx, 0x47e198
call fcn.0041ca60
cmp edi, 1
jle 0x405e54
push 0xd48
jmp 0x405e59
push 0xd4a
call fcn.00440400
push eax
push edi
push 0xd46
call fcn.00440400
push eax
call fcn.004177c0
add esp, 0xc
cmp dword [esp + 0x1c], 0
jne 0x405ed2
cmp dword [esp + 0x20], 0
jne 0x405ed2
push 0xd4c
call fcn.00440400
push eax
call fcn.004177c0
add esp, 4
push 0xa
mov ecx, 0x47e198
call fcn.0041ca60
lea ecx, [esp + 0x3214]
call fcn.004218b0
test esi, esi
je 0x405eb9
push esi
call fcn.00453634
add esp, 4
lea ecx, [esp + 0x1f0cc]
mov byte [esp + 0x2e860], 3
call fcn.0044dd60
jmp 0x404aac
cmp byte [esp + 0x17], 0
je 0x405eef
lea ecx, [esp + 0xf15c]
push ecx
lea ecx, [esp + 0x3218]
call fcn.0040aa60
jmp 0x405eff
push 0
push 0
lea ecx, [esp + 0x321c]
call fcn.0040b0b0
test esi, esi
je 0x405f0c
push esi
call fcn.00453634
add esp, 4
lea ecx, [esp + 0x1f0cc]
mov byte [esp + 0x2e860], 3
call fcn.0044dd60
lea edx, [esp + 0x3232]
push edx
push 0
mov ecx, 0x47e1a8
call fcn.00414530
mov eax, dword [ebx + 0x38]
movzx esi, word [eax + 0x639c]
add eax, 0x639c
test si, si
je 0x405f72
xor ecx, ecx
cmp si, 0x40
sete cl
lea edx, [esp + 0x3232]
dec ecx
and eax, ecx
push eax
push edx
call fcn.004462f0
test al, al
jne 0x405f72
push 2
mov ecx, 0x47e198
call fcn.0041cc60
mov eax, dword [ebx + 0x38]
cmp byte [eax + 0x6150], 0
je 0x40609c
push 0xd42
call fcn.00440400
push eax
call fcn.004177c0
add esp, 4
cmp dword [esp + 0x130], 0
mov dword [esp + 0x20], 0
jbe 0x40609c
jmp 0x405fb0
mov ecx, dword [esp + 0x20]
push ecx
lea ecx, [esp + 0xc8]
call fcn.00406bb0
mov esi, eax
mov ecx, 0x14
lea edi, [esp + 0x54]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 0x80]
cmp eax, 2
je 0x405fe3
cmp eax, 3
jne 0x406086
lea ecx, [esp + 0x116c]
call fcn.00446e10
lea ecx, [esp + 0x1174]
call fcn.00446e10
lea ecx, [esp + 0x117c]
call fcn.00446e10
mov esi, dword [esp + 0x54]
push 0
lea edx, [esp + 0x160]
push edx
push esi
call fcn.004245e0
test al, al
je 0x406086
lea ecx, [esp + 0x116c]
call fcn.00446d40
cmp eax, dword [esp + 0x6c]
jne 0x406086
cmp edx, dword [esp + 0x70]
jne 0x406086
mov eax, dword [esp + 0x115c]
cmp eax, dword [esp + 0x5c]
jne 0x406086
mov ecx, dword [esp + 0x1160]
cmp ecx, dword [esp + 0x60]
jne 0x406086
cmp byte [esp + 0xa0], 0
jne 0x406086
mov edx, dword [esp + 0x64]
and edx, 0xffffffdf
push edx
push esi
call fcn.00422630
test al, al
jne 0x406086
push esi
push 0xe76
call fcn.00440400
push eax
mov eax, dword [esp + 0x38]
push eax
call fcn.00418100
add esp, 0xc
mov eax, dword [esp + 0x20]
inc eax
mov dword [esp + 0x20], eax
cmp eax, dword [esp + 0x130]
jb 0x405fb0
cmp word [esp + 0xe156], 0
lea eax, [esp + 0xe156]
jne 0x4060b5
lea eax, [esp + 0x3232]
mov ecx, dword [ebx + 0x38]
push 0x800
push eax
add ecx, 0x93e2
push ecx
mov dword [esp + 0x28], eax
call fcn.00445b10
mov edx, dword [ebx + 0x38]
cmp byte [edx + 0x62d9], 0
je 0x406314
mov ecx, dword [ebx + 0x3c]
test ecx, ecx
je 0x4060ed
mov eax, dword [ecx]
mov edx, dword [eax]
push 1
call edx
push 0xa5b0
mov dword [ebx + 0x3c], 0
call fcn.00454220
add esp, 4
mov dword [esp + 0x24], eax
mov byte [esp + 0x2e860], 0xc
test eax, eax
je 0x40611a
mov ecx, eax
call fcn.00415260
jmp 0x40611c
xor eax, eax
mov byte [eax + 0x62d9], 1
mov ecx, dword [ebx + 0x38]
mov edx, dword [ecx + 0x83b0]
mov dword [eax + 0x83b0], edx
mov dword [eax + 0x739c], 1
mov ecx, dword [ebx + 0x38]
movzx edx, byte [ecx + 0x6144]
mov byte [eax + 0x6144], dl
mov ecx, dword [ebx + 0x38]
movzx edx, byte [ecx + 0x6152]
mov byte [eax + 0x6152], dl
mov ecx, dword [ebx + 0x38]
movzx edx, byte [ecx + 0x6195]
mov byte [eax + 0x6195], dl
mov ecx, 0x463460
mov dword [esp + 0x18], eax
sub eax, ecx
mov byte [esp + 0x2e860], 3
lea edx, [eax + 0x83c2]
movzx eax, word [ecx]
mov word [ecx + edx], ax
add ecx, 2
test ax, ax
jne 0x406185
mov esi, dword [ebx + 0x38]
mov edi, dword [esp + 0x18]
add esi, 0x5024
add edi, 0x5024
mov ecx, 0x40
rep movsd dword es:[edi], dword [esi]
mov byte [esp + 0x15], al
mov eax, dword [esp + 0x1c]
push eax
movsw word es:[edi], word [esi]
call fcn.00422cb0
mov esi, dword [esp + 0x1c]
test al, al
jne 0x406200
mov edi, 0x2e
jmp 0x4061d0
mov ecx, dword [ebx + 0x38]
cmp word [ecx + 0x639c], di
je 0x4061fb
push esi
call fcn.004522b0
test al, al
sete al
mov byte [esp + 0x15], al
cmp al, 1
je 0x406200
push esi
call fcn.00422cb0
test al, al
je 0x4061d0
jmp 0x406200
mov byte [esp + 0x15], 1
cmp byte [esp + 0x15], 0
mov byte [esp + 0x14], 0
jne 0x406296
push esi
mov esi, dword [esp + 0x1c]
mov ecx, esi
call fcn.004140f0
push 0x46345c
lea ecx, [esi + 0xa3e4]
call fcn.00445e80
mov edx, dword [0x47e19c]
push 0x5c38
mov dword [esp + 0x28], edx
call fcn.00454220
add esp, 4
mov dword [esp + 0x34], eax
mov byte [esp + 0x2e860], 0xd
test eax, eax
je 0x40625f
push esi
mov ecx, eax
call fcn.0041f270
mov edi, eax
jmp 0x406261
xor edi, edi
push esi
mov ecx, edi
mov byte [esp + 0x2e864], 3
call fcn.00420cd0
test edi, edi
je 0x406285
mov ecx, edi
call fcn.0041f350
push edi
call fcn.0045349c
add esp, 4
mov eax, dword [esp + 0x24]
cmp eax, dword [0x47e19c]
setne byte [esp + 0x14]
jmp 0x40629a
mov esi, dword [esp + 0x18]
mov eax, dword [esi + 0xa554]
test eax, eax
je 0x4062ad
push eax
call fcn.00453634
add esp, 4
mov eax, dword [esi + 0xa4f8]
test eax, eax
je 0x4062c0
push eax
call fcn.00453634
add esp, 4
mov eax, dword [esi + 0xa49c]
test eax, eax
je 0x4062d3
push eax
call fcn.00453634
add esp, 4
mov eax, dword [esi + 0xa440]
test eax, eax
je 0x4062e6
push eax
call fcn.00453634
add esp, 4
mov eax, dword [esi + 0xa3e4]
test eax, eax
je 0x4062f9
push eax
call fcn.00453634
add esp, 4
mov ecx, esi
call fcn.00427030
push esi
call fcn.0045349c
add esp, 4
cmp byte [esp + 0x14], 0
jne 0x404aac
mov ecx, dword [ebp + 0x10]
cmp word [ecx], 0x4d
je 0x40632d
mov edx, dword [ebx + 0x38]
cmp byte [edx + 0x6196], 0
je 0x4065ab
push 1
push 0
lea ecx, [esp + 0xcc]
call fcn.00407260
mov esi, dword [esp + 0x130]
or edi, 0xffffffff
lea ecx, [esp + 0xac]
dec esi
mov dword [esp + 0x34], edi
mov dword [esp + 0x24], edi
call fcn.00423a00
mov ecx, dword [ebx + 0x38]
cmp byte [ecx + 0x619a], 0
mov byte [esp + 0x2e860], 0xe
mov byte [esp + 0x15], 0
je 0x4063b4
call fcn.004149e0
test al, al
jne 0x4063b4
cmp dword [esp + 0x38], 0
jne 0x4063b4
mov eax, dword [ebx + 0x38]
cmp byte [eax + 0x6153], 0
jne 0x4063b4
cmp byte [eax + 0x6154], 0
jne 0x4063b4
mov edi, dword [esp + 0x130]
mov byte [esp + 0x15], 1
xor esi, esi
mov dword [esp + 0x34], edi
mov dword [esp + 0x24], 1
mov dword [esp + 0x20], esi
cmp esi, edi
je 0x406597
mov eax, dword [esp + 0x20]
push eax
lea ecx, [esp + 0xc8]
call fcn.00406bb0
mov esi, eax
mov ecx, 0x14
lea edi, [esp + 0x54]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 0x80]
cmp eax, 2
je 0x4063f3
cmp eax, 3
jne 0x406581
mov ecx, dword [ebx + 0x38]
cmp byte [ecx + 0x619a], 0
mov esi, dword [esp + 0x54]
jne 0x406417
mov edx, dword [esp + 0x64]
push edx
call fcn.004225b0
test al, al
jne 0x406417
push esi
call fcn.00422dd0
mov eax, dword [ebp + 0x10]
cmp word [eax + 2], 0x46
setne al
cmp byte [esp + 0xa0], 0
je 0x4064c2
test al, al
je 0x406581
mov eax, dword [ebx + 0x38]
mov cl, byte [eax + 0x619a]
test cl, cl
je 0x40647d
cmp byte [esp + 0x15], 0
je 0x40647d
push esi
call fcn.00422cb0
test al, al
je 0x406581
push esi
lea ecx, [esp + 0xb0]
call fcn.00423a40
lea ecx, [esp + 0xac]
call fcn.00422f20
mov byte [esp + 0x13], 1
jmp 0x406509
cmp byte [eax + 0x6199], 0
je 0x4064aa
push esi
call fcn.00422930
test al, al
je 0x406498
push esi
call fcn.00422f80
jmp 0x406505
push 0x91
mov byte [esp + 0x17], 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x406509
test cl, cl
je 0x4064ba
lea ecx, [esp + 0xac]
call fcn.00422f20
push esi
call fcn.004227d0
jmp 0x406505
mov eax, dword [ebx + 0x38]
cmp byte [eax + 0x619a], 0
push esi
je 0x4064f0
call fcn.00422cb0
test al, al
je 0x406581
push esi
lea ecx, [esp + 0xb0]
call fcn.00423a40
mov byte [esp + 0x13], 1
jmp 0x406509
cmp byte [eax + 0x6199], 0
je 0x406500
call fcn.00423b30
jmp 0x406505
call fcn.00422750
mov byte [esp + 0x13], al
xor ecx, ecx
cmp byte [esp + 0xa0], cl
push esi
setne cl
lea ecx, [ecx*8 + 0xd3c]
push ecx
call fcn.00440400
push eax
call fcn.004177c0
add esp, 8
cmp byte [esp + 0x13], 0
je 0x406548
push 0xd3e
call fcn.00440400
push eax
call fcn.004177c0
add esp, 4
jmp 0x406581
push 0xd40
call fcn.00440400
push eax
call fcn.004177c0
add esp, 4
push esi
push 0xe8e
call fcn.00440400
push eax
lea edx, [esp + 0x323a]
push edx
call fcn.00418100
add esp, 0xc
mov ecx, 0x47e198
call fcn.0041cc80
mov eax, dword [esp + 0x20]
add eax, dword [esp + 0x24]
mov dword [esp + 0x20], eax
cmp eax, dword [esp + 0x34]
jne 0x4063c0
lea ecx, [esp + 0xac]
mov byte [esp + 0x2e860], 3
call fcn.00423a20
cmp byte [esp + 0xe111], 0
je 0x4065d4
mov eax, dword [ebx + 0x38]
cmp dword [eax + 0x6140], 0
je 0x4065d4
lea ecx, [esp + 0xe156]
push ecx
push eax
call fcn.0043ae80
jmp 0x404aac
mov edx, dword [ebx + 0x38]
cmp byte [edx + 0x6146], 0
jne 0x404aac
push 0xd1e
jmp 0x404a9e
cmp ecx, 3
jne 0x406606
push 0xeac
call fcn.00440400
push eax
call fcn.004177c0
add esp, 4
lea eax, [esp + 0xc4]
push eax
mov ecx, ebx
call fcn.00402940
mov eax, dword [esp + 0x120]
test eax, eax
je 0x406629
push eax
call fcn.00453634
add esp, 4
mov eax, dword [esp + 0xc4]
test eax, eax
je 0x40663d
push eax
call fcn.00453634
add esp, 4
lea ecx, [esp + 0x1b0a4]
mov dword [esp + 0x2e860], 0xffffffff
call fcn.00442980
mov ecx, dword [esp + 0x2e858]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x2e840]
xor ecx, esp
call fcn.0045334a
mov esp, ebp
pop ebp
ret 0xc