Function at 0x4136d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0xcc
call sub.msvcrt.dll_localeconv
mov eax, dword [eax]
mov dword [esp], eax
mov dword [esp + 0x28], eax
call sub.msvcrt.dll_strlen
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0xe8]
fldz
mov dword [esp + 0xa4], 0
mov dword [esp + 0xb4], 0
fstp qword [esp + 0xb8]
mov eax, dword [eax]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0xe0]
mov edx, eax
mov dword [esp + 0xb0], eax
movzx eax, byte [edx]
cmp al, 0x2d
ja case.0x41373b.1
movzx ecx, al
jmp dword [ecx*4 + 0x48c7cc]
mov eax, dword [esp + 0xe0]
mov dword [esp + 0xa4], 6
xor edx, edx
mov dword [esp + 0x3c], 0
mov dword [esp + 0xb0], eax
mov ecx, dword [esp + 0xe4]
test ecx, ecx
je 0x413780
mov eax, dword [esp + 0xb0]
mov ebx, dword [esp + 0xe4]
mov dword [ebx], eax
mov eax, dword [esp + 0x3c]
test eax, eax
jne 0x4137d0
test edx, edx
je 0x4137b6
mov eax, dword [esp + 0x38]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [esp + 0xf0]
mov dword [esp], eax
call fcn.00418a20
mov eax, dword [esp + 0xb4]
mov dword [esp], eax
call fcn.00417e20
mov eax, dword [esp + 0xa4]
add esp, 0xcc
pop ebx
pop esi
pop edi
pop ebp
ret
or dword [esp + 0xa4], 8
jmp 0x413788
mov eax, edx
mov dword [esp + 0x3c], 0
add edx, 1
mov dword [esp + 0xb0], edx
movzx eax, byte [eax + 1]
test al, al
je case.0x41373b.0
cmp al, 0x30
mov dword [esp + 0x40], edx
mov dword [esp + 0x30], 0
je 0x4138d1
mov ebx, dword [esp + 0xe8]
movsx ecx, al
lea edx, [ecx - 0x30]
mov edi, dword [ebx + 0x10]
cmp edx, 9
mov dword [esp + 0x78], edi
ja 0x41392f
mov ebx, dword [esp + 0x40]
mov dword [esp + 0x20], 0
xor edi, edi
lea esi, [ebx + 1]
xor ebx, ebx
jmp 0x41387a
lea edx, [edi + edi*4]
movsx eax, al
lea edi, [eax + edx*2 - 0x30]
mov dword [esp + 0xb0], esi
movsx ecx, byte [esi]
add ebx, 1
mov edx, esi
lea esi, [esi + 1]
lea ebp, [ecx - 0x30]
mov eax, ecx
cmp ebp, 9
ja 0x413940
cmp ebx, 8
jle 0x413850
cmp ebx, 0xf
jg 0x41385a
mov ecx, dword [esp + 0x20]
movsx eax, al
lea edx, [ecx + ecx*4]
lea eax, [eax + edx*2 - 0x30]
mov dword [esp + 0x20], eax
jmp 0x41385a
add edx, 1
mov dword [esp + 0xb0], edx
movzx eax, byte [edx]
cmp al, 0x2d
jbe 0x413738
cmp al, 0x30
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], edx
mov dword [esp + 0x30], 0
jne 0x413814
movzx eax, byte [edx + 1]
cmp al, 0x58
je 0x414b2f
add edx, 1
cmp al, 0x78
je 0x414b2f
nop
lea esi, [esi]
mov ecx, edx
mov dword [esp + 0xb0], edx
add edx, 1
movzx eax, byte [edx - 1]
cmp al, 0x30
je 0x4138f0
xor edx, edx
test al, al
je 0x413765
mov dword [esp + 0x40], ecx
mov dword [esp + 0x30], 1
jmp 0x413814
mov eax, edx
mov dword [esp + 0x3c], 1
jmp 0x4137ea
mov edx, dword [esp + 0x40]
mov dword [esp + 0x20], 0
xor edi, edi
xor ebx, ebx
nop
mov eax, dword [esp + 0x28]
movsx ebp, byte [eax]
cmp ebp, ecx
je 0x413d50
mov dword [esp + 0x28], ebx
xor ebp, ebp
xor esi, esi
mov dword [esp + 0x50], 0
mov eax, ecx
and eax, 0xffffffdf
cmp eax, 0x45
je 0x413a60
xor eax, eax
mov edx, dword [esp + 0x28]
test edx, edx
jne 0x413be1
mov eax, dword [esp + 0x30]
or eax, ebp
jne 0x413bd5
mov eax, dword [esp + 0x50]
test eax, eax
jne 0x413b92
cmp ecx, 0x4e
je 0x4139b0
jle 0x413b89
cmp ecx, 0x69
je 0x414d97
cmp ecx, 0x6e
jne 0x413b92
lea esi, [esp + 0xb0]
mov dword [esp + 4], 0x48c7c9
mov dword [esp], esi
call fcn.004189d0
test eax, eax
je 0x413b92
mov eax, dword [esp + 0xe8]
mov ebx, dword [esp + 0xec]
mov edx, dword [esp + 0xb0]
mov dword [esp + 0xa4], 4
mov eax, dword [eax + 8]
mov dword [esp + 0x20], eax
add eax, 1
mov dword [ebx], eax
xor ebx, ebx
cmp byte [edx], 0x28
je 0x415182
lea esi, [esi]
lea edi, [edi]
mov edi, dword [esp + 0xec]
mov dword [edi], eax
mov edx, dword [esp + 0xb4]
test ebx, ebx
je 0x413765
mov esi, dword [esp + 0x78]
test esi, esi
jne 0x414151
mov eax, dword [esp + 0xa4]
mov ebx, dword [edx + 0x10]
xor ecx, ecx
and eax, 0xfffffff8
test ebx, ebx
setg cl
add ecx, ecx
or eax, ecx
test al, 0x30
jne 0x413bc0
mov dword [esp + 0xa4], eax
jmp 0x413765
mov eax, dword [esp + 0x28]
or eax, ebp
or eax, dword [esp + 0x30]
je 0x413b92
mov eax, dword [esp + 0xb0]
mov dword [esp + 0xe0], eax
add eax, 1
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0xe0]
movsx ecx, byte [eax + 1]
cmp cl, 0x2b
je 0x414cbd
cmp cl, 0x2d
je 0x414053
mov dword [esp + 0x48], 0
lea eax, [ecx - 0x30]
cmp eax, 9
ja 0x414180
cmp ecx, 0x30
jne 0x413ae2
mov eax, dword [esp + 0xb0]
add eax, 1
nop
lea esi, [esi]
mov dword [esp + 0xb0], eax
movsx ecx, byte [eax]
add eax, 1
cmp ecx, 0x30
je 0x413ad0
lea edx, [ecx - 0x31]
xor eax, eax
cmp edx, 8
ja 0x41396f
mov eax, dword [esp + 0xb0]
lea edx, [ecx - 0x30]
lea ecx, [eax + 1]
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], ecx
mov dword [esp + 0xb0], ecx
movsx ecx, byte [eax + 1]
lea eax, [ecx - 0x30]
cmp eax, 9
ja 0x413b5b
mov eax, dword [esp + 0x54]
mov dword [esp + 0x58], esi
mov dword [esp + 0x5c], ebp
add eax, 2
mov esi, esi
lea edi, [edi]
lea edx, [edx + edx*4]
mov dword [esp + 0xb0], eax
mov ebp, eax
add eax, 1
lea edx, [ecx + edx*2 - 0x30]
movsx ecx, byte [eax - 1]
lea esi, [ecx - 0x30]
cmp esi, 9
jbe 0x413b30
mov esi, dword [esp + 0x58]
mov dword [esp + 0x58], ebp
mov ebp, dword [esp + 0x5c]
mov eax, dword [esp + 0x58]
sub eax, dword [esp + 0x54]
cmp eax, 8
jg 0x414d8d
cmp edx, 0x4e1f
jg 0x414d8d
mov eax, dword [esp + 0x48]
neg eax
xor eax, edx
add eax, dword [esp + 0x48]
jmp 0x41396f
cmp ecx, 0x49
je 0x414d97
mov eax, dword [esp + 0xe0]
mov dword [esp + 0xa4], 6
mov edx, dword [esp + 0xb4]
mov dword [esp + 0xb0], eax
jmp 0x413765
or eax, 0x40
mov dword [esp + 0xa4], eax
call sub.msvcrt.dll__errno
mov dword [eax], 0x22
mov edx, dword [esp + 0xb4]
jmp 0x413765
sub eax, esi
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0xa4], 1
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0xe8]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x30], eax
and eax, 3
mov esi, eax
sub esi, ecx
cmp eax, 2
mov dword [esp + 0x68], esi
je 0x413c2c
lea esi, [ecx + 1]
cmp eax, 3
mov dword [esp + 0x68], esi
je 0x413c2c
test eax, eax
sete al
movzx eax, al
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x28]
test ebx, ebx
mov esi, 0x10
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], 0
fild qword [esp + 0x30]
cmove ebx, eax
cmp eax, 0x10
cmovle esi, eax
fst qword [esp + 0xb8]
cmp esi, 9
jle 0x413c82
fmul qword [esi*8 + 0x48c9b8]
mov eax, dword [esp + 0x20]
mov dword [esp + 0x24], 0
mov dword [esp + 0x20], eax
fild qword [esp + 0x20]
faddp st(1)
fstp qword [esp + 0xb8]
jmp 0x413c84
fstp st(0)
cmp dword [esp + 0x28], 0xf
jg 0x413df0
cmp dword [esp + 0x38], 0x35
jg 0x413df0
cmp dword [esp + 0x64], 0
je 0x414cd7
jle 0x41410b
cmp dword [esp + 0x64], 0x16
jg 0x414cf7
mov eax, dword [esp + 0x64]
mov edx, dword [eax*4 + 0x48c8c0]
mov eax, dword [esp + 0xb8]
test eax, eax
je 0x414df9
xor ecx, ecx
tzcnt ecx, eax
mov eax, 0x35
sub eax, ecx
mov ecx, dword [esp + 0x64]
fld qword [esp + 0xb8]
add eax, edx
cmp eax, 0x35
setle al
fmul qword [ecx*8 + 0x48ca00]
lea ecx, [esp + 0xa4]
movzx eax, al
mov dword [esp + 4], eax
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x68]
mov dword [esp + 8], ecx
fstp qword [esp + 0xb8]
mov eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0xec]
mov edx, dword [esp + 0xe8]
mov dword [esp], eax
lea eax, [esp + 0xb8]
call fcn.00413240
test eax, eax
jne 0x413bd5
xor eax, eax
jmp 0x413df4
mov esi, eax
movzx eax, byte [eax + 1]
test al, al
je 0x415047
cmp al, byte [edx + 1]
jne 0x41394f
mov dword [esp + 0x28], ebp
mov eax, 1
mov ebp, esi
jmp 0x413d7d
cmp cl, byte [edx + eax]
jne 0x413f70
add eax, 1
movzx ecx, byte [ebp + eax]
mov esi, eax
test cl, cl
jne 0x413d74
add edx, esi
test ebx, ebx
mov dword [esp + 0xb0], edx
movsx ecx, byte [edx]
je 0x41407c
lea edx, [ecx - 0x30]
xor ebp, ebp
xor esi, esi
mov dword [esp + 0x28], ebx
cmp edx, 9
ja 0x413ddb
test edx, edx
lea eax, [ebp + 1]
mov ecx, edx
jne 0x414fab
mov edx, dword [esp + 0xb0]
mov ebp, eax
lea eax, [edx + 1]
mov dword [esp + 0xb0], eax
movsx ecx, byte [edx + 1]
lea edx, [ecx - 0x30]
cmp edx, 9
jbe 0x413daf
mov dword [esp + 0x50], 1
jmp 0x41395f
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x28]
sub edx, esi
add edx, eax
cmp edx, 0
jle 0x414bce
mov eax, edx
and eax, 0xf
je 0x413e21
fld qword [esp + 0xb8]
fmul qword [eax*8 + 0x48ca00]
fstp qword [esp + 0xb8]
and edx, 0xfffffff0
jne 0x413f90
fld qword [esp + 0xb8]
xor esi, esi
lea eax, [esp + 0xa8]
fstp qword [esp]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xac]
mov dword [esp + 8], eax
call fcn.004186e0
add esi, dword [esp + 0xac]
mov ecx, dword [esp + 0xa8]
mov ebp, dword [esp + 0x38]
mov dword [esp + 0xb4], eax
mov edx, esi
mov dword [esp + 0xac], esi
mov esi, ecx
sub esi, ebp
test esi, esi
jle 0x413ea0
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.00418b10
add esi, dword [esp + 0xac]
mov dword [esp + 0xa8], ebp
mov ecx, ebp
mov edx, esi
mov dword [esp + 0xac], esi
lea eax, [edx + ecx]
sub eax, dword [esp + 0x38]
mov esi, eax
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0xe8]
mov eax, dword [eax + 8]
mov dword [esp + 0x20], eax
add eax, 1
cmp esi, eax
jg 0x414af7
mov eax, dword [esp + 0xe8]
mov eax, dword [eax + 4]
cmp esi, eax
mov dword [esp + 0x50], eax
jge 0x414cca
mov esi, edx
sub esi, eax
cmp esi, 0
jle 0x4140da
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.004182a0
add dword [esp + 0xa8], esi
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x78]
test eax, eax
je 0x414195
mov eax, dword [esp + 0x80]
add eax, 1
cmp dword [esp + 0x50], eax
jle 0x414195
mov edx, dword [esp + 0xb4]
mov eax, dword [esp + 0xec]
mov ebx, dword [esp + 0x50]
mov dword [esp + 0xa4], 0x50
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [eax], ebx
jmp 0x413a28
mov ebp, dword [esp + 0x28]
xor esi, esi
mov dword [esp + 0x28], ebx
mov dword [esp + 0x50], 0
mov ecx, ebp
xor ebp, ebp
jmp 0x41395f
sar edx, 4
cmp edx, 0xf
jle 0x4150d4
fld qword [0x48cb20]
mov esi, edx
xor ebp, ebp
lea esi, [esi]
lea edi, [edi]
mov eax, dword [esp + 0xbc]
sub esi, 0x10
mov ecx, eax
and eax, 0x800fffff
or eax, 0x3ff00000
and ecx, 0x7ff00000
mov dword [esp + 0xbc], eax
shr ecx, 0x14
cmp esi, 0xf
fld qword [esp + 0xb8]
lea ebp, [ebp + ecx - 0x3ff]
fmul st(1)
fstp qword [esp + 0xb8]
jg 0x413fb0
fstp st(0)
and edx, 0xf
mov esi, ebp
mov eax, dword [esp + 0xbc]
mov ecx, eax
and eax, 0x800fffff
or eax, 0x3ff00000
and ecx, 0x7ff00000
shr ecx, 0x14
mov dword [esp + 0xbc], eax
xor eax, eax
test edx, edx
lea esi, [esi + ecx - 0x3ff]
fld qword [esp + 0xb8]
je 0x413e33
test dl, 1
je 0x414040
fmul qword [eax*8 + 0x48cb00]
add eax, 1
sar edx, 1
jne 0x414034
fst qword [esp + 0xb8]
jmp 0x413e33
mov dword [esp + 0x48], 1
mov eax, dword [esp + 0xe0]
add eax, 2
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0xe0]
movsx ecx, byte [eax + 2]
jmp 0x413aad
cmp ecx, 0x30
jne 0x41513c
lea eax, [edx + 1]
nop
lea esi, [esi]
mov dword [esp + 0xb0], eax
movsx ecx, byte [eax]
mov ebp, eax
sub ebp, edx
add eax, 1
cmp ecx, 0x30
je 0x414090
lea eax, [ecx - 0x31]
cmp eax, 8
ja 0x414d6a
mov eax, dword [esp + 0xb0]
lea esi, [ebp + 1]
sub ecx, 0x30
mov dword [esp + 0x28], 1
mov dword [esp + 0x40], eax
mov edx, eax
lea eax, [edi + edi*4]
xor ebp, ebp
lea edi, [ecx + eax*2]
jmp 0x413dc5
je 0x413f0d
add ecx, esi
test ecx, ecx
mov dword [esp + 0xa8], ecx
jle 0x4150fe
mov eax, dword [esp + 0xb4]
neg esi
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.00418b10
jmp 0x413f0d
mov ecx, dword [esp + 0x64]
cmp ecx, 0xffffffea
mov eax, ecx
jl 0x413df4
fld qword [esp + 0xb8]
neg eax
fdiv qword [eax*8 + 0x48ca00]
lea eax, [esp + 0xa4]
fstp qword [esp + 0xb8]
mov dword [esp + 4], 0
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 8], eax
jmp 0x413d18
mov dword [edx + 0x10], 0
mov dword [esp + 0xa4], 0x50
call sub.msvcrt.dll__errno
mov edx, dword [esp + 0xb4]
mov dword [eax], 0x22
jmp 0x413765
mov eax, dword [esp + 0xe0]
mov dword [esp + 0xb0], eax
xor eax, eax
jmp 0x41396f
mov eax, dword [esp + 0x50]
mov dword [esp + 0x30], 1
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.00418810
mov dword [esp + 0x6c], eax
add eax, 0xc
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x38]
add eax, 1
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x64]
mov edx, eax
neg edx
test eax, eax
mov eax, 0
cmovs eax, edx
xor ebx, ebx
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x68]
and eax, 1
mov dword [esp + 0x84], eax
jmp 0x4144a4
mov eax, dword [esp + 0x20]
mov dword [esp + 4], esi
mov dword [esp + 0x48], edx
mov dword [esp], eax
call fcn.004182a0
mov edx, dword [esp + 0x48]
mov dword [esp + 0x20], eax
test ebp, ebp
je 0x41424c
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], ebp
mov dword [esp + 0x48], edx
mov dword [esp], eax
call fcn.00418130
mov edx, dword [esp + 0x48]
mov dword [esp + 0x2c], eax
test edx, edx
jle 0x414264
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.004182a0
mov dword [esp + 0x2c], eax
test edi, edi
jle 0x41427c
mov eax, dword [esp + 0x28]
mov dword [esp + 4], edi
mov dword [esp], eax
call fcn.004182a0
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x20]
mov dword [esp], eax
call fcn.00418420
cmp dword [eax + 0x10], 1
mov ebp, eax
jle 0x414682
mov eax, dword [esp + 0x28]
mov ebx, dword [ebp + 0xc]
mov dword [ebp + 0xc], 0
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.004183d0
test eax, eax
jg 0x414610
mov edi, dword [esp + 0x68]
test edi, edi
je 0x414610
mov eax, dword [esp + 0x84]
xor eax, ebx
mov dword [esp + 0x5c], eax
je 0x414e16
test ebx, ebx
je 0x414875
fld1
mov dword [esp + 0xa4], 0x21
xor esi, esi
mov dword [esp + 0x7c], 0x20
mov dword [esp + 0x58], 0
fst qword [esp + 0x40]
fstp qword [esp + 0x48]
mov eax, dword [esp + 0xa8]
mov ebx, dword [esp + 0xac]
mov edx, dword [esp + 0x30]
add ebx, eax
mov dword [esp + 0x60], ebx
test edx, edx
jne 0x414332
cmp dword [esp + 0x38], eax
jg 0x414a30
lea eax, [esp + 0xa0]
movsd xmm0, qword [esp + 0x40]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x9c]
movsd qword [esp], xmm0
mov dword [esp + 8], eax
call fcn.004186e0
mov edi, eax
mov eax, dword [esp + 0x9c]
test eax, eax
js 0x414a65
je 0x414379
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.004182a0
mov edi, eax
mov eax, dword [esp + 0x58]
mov ebx, dword [esp + 0xb4]
mov dword [esp + 4], edi
test eax, eax
mov dword [esp], ebx
je 0x4147b0
call fcn.00418420
mov ecx, dword [esp + 0x30]
mov dword [esp + 0xb4], eax
mov edx, dword [ebx + 0x10]
test ecx, ecx
jne 0x414930
lea ecx, [edx - 1]
cmp ecx, dword [eax + 0x10]
jge 0x4143cd
add edx, 3
bsr ecx, dword [eax + edx*4 + 4]
bsr edx, dword [ebx + edx*4 + 4]
xor ecx, 0x1f
xor edx, 0x1f
cmp ecx, edx
jle 0x4143f0
mov edx, dword [esp + 0x50]
cmp dword [esp + 0x80], edx
jne 0x414820
sub dword [esp + 0xa8], 1
mov dword [esp + 0x30], 1
nop
mov dword [esp], edi
call fcn.00417e20
mov dword [esp], ebx
call fcn.00417e20
mov eax, dword [esp + 0x5c]
test eax, eax
jne 0x414690
test esi, esi
je 0x414462
mov eax, dword [esp + 0xa8]
add eax, dword [esp + 0xac]
cmp dword [esp + 0x60], eax
jne 0x414462
fld qword [esp + 0x40]
fmul qword [0x48c930]
fld qword [esp + 0x48]
fsub dword [0x48c924]
fld st(1)
fchs
fucompi st(1)
jbe 0x414a00
fstp st(0)
fld qword [esp + 0x48]
fucompi st(1)
fstp st(0)
ja 0x414a1e
jmp 0x414462
fstp st(0)
mov eax, dword [esp + 0x30]
test eax, eax
je 0x414857
mov dword [esp + 0x30], 1
xor ebx, ebx
mov eax, dword [esp + 0x20]
mov dword [esp], eax
call fcn.00417e20
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
call fcn.00417e20
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call fcn.00417e20
mov dword [esp], ebp
call fcn.00417e20
mov edi, dword [esp + 0x6c]
mov ebp, 0
mov eax, dword [edi + 4]
mov dword [esp], eax
call fcn.00417d50
mov edx, dword [edi + 0x10]
mov edi, dword [esp + 0x70]
mov dword [esp + 0x2c], eax
add eax, 0xc
mov dword [esp], eax
lea edx, [edx*4 + 8]
mov dword [esp + 4], edi
mov dword [esp + 8], edx
call sub.msvcrt.dll_memcpy
mov eax, dword [esp + 0xb4]
mov eax, dword [eax + 4]
mov dword [esp], eax
call fcn.00417d50
mov edi, eax
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0xb4]
lea edx, [edi + 0xc]
mov ecx, dword [eax + 0x10]
add eax, 0xc
mov dword [esp], edx
mov dword [esp + 4], eax
lea ecx, [ecx*4 + 8]
mov dword [esp + 8], ecx
call sub.msvcrt.dll_memcpy
mov eax, dword [esp + 0xa8]
mov dword [esp], 1
mov esi, dword [esp + 0xac]
sub eax, ebx
mov dword [esp + 0x40], eax
add esi, ebx
call fcn.00417f80
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x64]
test eax, eax
cmovg ebp, eax
test esi, esi
js 0x414812
mov eax, dword [esp + 0x54]
lea edi, [eax + esi]
mov eax, ebp
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x74]
add esi, ecx
sub esi, dword [esp + 0x38]
sub edx, ecx
cmp dword [esp + 0x50], esi
jle 0x414578
sub esi, dword [esp + 0x50]
add edx, esi
lea esi, [edi + edx]
add edx, eax
mov eax, edx
cmp esi, edx
cmovle eax, esi
cmp eax, edi
cmovg eax, edi
test eax, eax
jle 0x414593
sub esi, eax
sub edx, eax
sub edi, eax
mov eax, dword [esp + 0x54]
test eax, eax
je 0x4145df
mov dword [esp + 4], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x58], edx
mov dword [esp], eax
call fcn.00418130
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 0x28], eax
mov dword [esp + 4], ecx
call fcn.00417fb0
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x48], eax
mov dword [esp], ecx
call fcn.00417e20
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x58]
mov dword [esp + 0x20], eax
sub esi, ebx
cmp esi, 0
jg 0x414210
je 0x41422c
mov eax, dword [esp + 0x20]
neg esi
mov dword [esp + 0x48], edx
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.00418b10
mov edx, dword [esp + 0x48]
jmp 0x41422c
test eax, eax
js 0x414e2d
je 0x414edd
mov eax, dword [esp + 0x28]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.00418910
fld dword [0x48c920]
fucompi st(1)
jb 0x414940
fstp st(0)
test ebx, ebx
jne 0x414aa0
mov dword [esp + 0x5c], 0
cmp dword [esp + 0x40], 1
jg 0x414661
mov ecx, dword [esp + 0x30]
test ecx, ecx
jne 0x415016
fld1
xor esi, esi
mov dword [esp + 0x7c], 0x10
mov dword [esp + 0x58], 1
fst qword [esp + 0x40]
fstp qword [esp + 0x48]
jmp 0x41430c
mov eax, dword [eax + 0x14]
test eax, eax
jne 0x41429c
lea esi, [esi]
mov eax, dword [esp + 0x30]
test eax, eax
je 0x414bac
mov eax, dword [esp + 0xac]
mov ebx, 1
mov edi, dword [esp + 0xec]
mov dword [edi], eax
mov eax, dword [esp + 0x20]
mov dword [esp], eax
call fcn.00417e20
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
call fcn.00417e20
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call fcn.00417e20
mov eax, dword [esp + 0x6c]
mov dword [esp], eax
call fcn.00417e20
mov dword [esp], ebp
call fcn.00417e20
mov eax, dword [esp + 0xe8]
mov edi, dword [esp + 0xac]
cmp dword [eax + 8], edi
jge 0x413a19
mov eax, dword [esp + 0xe8]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x20], eax
and eax, 3
cmp eax, 2
je 0x414f89
cmp eax, 3
je 0x414f9a
cmp eax, 1
je 0x414af9
mov eax, dword [esp + 0xb4]
mov dword [esp], eax
call fcn.00417e20
mov eax, dword [esp + 0xe8]
mov edi, dword [esp + 0xec]
mov dword [esp + 0xb4], 0
mov dword [esp + 0xa4], 0x11
mov eax, dword [eax + 8]
mov dword [edi], eax
mov eax, dword [esp + 0xe8]
mov edi, dword [esp + 0xf0]
mov ecx, dword [eax]
lea eax, [ecx + 0x1f]
sar eax, 5
lea edx, [edi + eax*4]
mov eax, edi
cmp edi, edx
jae 0x414791
add eax, 4
mov dword [eax - 4], 0xffffffff
cmp edx, eax
ja 0x414783
and ecx, 0x1f
je 0x4147a2
mov eax, 0x20
sub eax, ecx
mov ecx, eax
shr dword [edx - 4], cl
xor edx, edx
jmp 0x413a20
call fcn.00418c70
mov edx, dword [eax + 0x10]
mov dword [esp + 0xb4], eax
lea ecx, [edx - 1]
cmp ecx, dword [ebx + 0x10]
jge 0x4147e2
add edx, 3
bsr ecx, dword [eax + edx*4 + 4]
bsr edx, dword [ebx + edx*4 + 4]
xor ecx, 0x1f
xor edx, 0x1f
cmp ecx, edx
jge 0x4143f0
mov edx, dword [esp + 0x30]
test edx, edx
je 0x414ad0
mov eax, dword [esp + 0xa8]
add eax, 1
cmp dword [esp + 0x38], eax
mov dword [esp + 0xa8], eax
setne al
movzx eax, al
mov dword [esp + 0x30], eax
jmp 0x4143f0
mov eax, ebp
mov edi, dword [esp + 0x54]
sub eax, esi
jmp 0x41455c
mov dword [esp + 4], 1
mov dword [esp], eax
call fcn.004182a0
mov dword [esp], edi
mov dword [esp + 0xb4], eax
sub dword [esp + 0xac], 1
sub dword [esp + 0x80], 1
call fcn.00417e20
mov dword [esp], ebx
call fcn.00417e20
mov eax, dword [esp + 0xb4]
mov dword [esp], eax
call fcn.00418c30
mov dword [esp + 0x30], 0
mov ebx, eax
jmp 0x414478
mov edi, dword [esp + 0x50]
cmp dword [esp + 0x80], edi
mov dword [esp + 0xa4], 0x11
je 0x41464e
xor ecx, ecx
cmp dword [esp + 0x38], 0x1f
mov edx, dword [esp + 0xb4]
mov eax, dword [esp + 0x38]
jle 0x4148d7
mov esi, dword [edx + 0x14]
test esi, esi
jne 0x41464e
mov eax, dword [esp + 0x38]
xor ecx, ecx
jmp 0x4148cc
mov ebx, dword [edx + ecx*4 + 0x14]
test ebx, ebx
jne 0x41464e
sub eax, 0x20
add ecx, 1
cmp eax, 0x1f
jg 0x4148c0
cmp eax, 1
jle 0x4148f8
lea esi, [edx + ecx*4]
xor ecx, ecx
sub eax, 1
mov ebx, dword [esi + 0x14]
tzcnt ecx, ebx
shr ebx, cl
cmp eax, ecx
mov dword [esi + 0x14], ebx
jg 0x41464e
mov eax, dword [esp + 0x80]
mov dword [esp], edx
sub eax, 1
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
mov dword [esp + 0xa8], eax
call fcn.00413640
mov dword [esp + 0xb4], eax
jmp 0x414690
mov dword [esp + 0x30], 1
jmp 0x4143f0
fld dword [0x48c924]
cmp ebx, 1
sbb eax, eax
fmul st(1), st(0)
and eax, 0x10
add eax, 0x10
mov dword [esp + 0x7c], eax
xor eax, eax
cmp ebx, 1
setb al
fld st(1)
mov dword [esp + 0x58], eax
fstp qword [esp + 0x48]
fld qword [0x48c928]
fucompi st(2)
jbe 0x414a80
fld st(1)
mov eax, dword [esp + 0x68]
fstp qword [esp + 0x40]
cmp eax, 1
cvttsd2si esi, qword [esp + 0x40]
mov dword [esp + 0x40], esi
fild dword [esp + 0x40]
fsub st(2), st(0)
fxch st(2)
fst qword [esp + 0x48]
je 0x414d79
cmp eax, 2
jne 0x414b99
fstp st(0)
fstp st(0)
test byte [esp + 0x58], 1
jne 0x414ba3
fldz
fld qword [esp + 0x48]
fucompi st(1)
fstp st(0)
jbe 0x414ba3
fstp st(0)
jmp 0x4149ce
fstp st(0)
add esi, 1
mov eax, 0x30
sub eax, dword [esp + 0x7c]
mov dword [esp + 0x40], esi
fild dword [esp + 0x40]
fstp qword [esp + 0x40]
mov dword [esp + 0x7c], eax
mov dword [esp + 0x5c], 0
jmp 0x41430c
fucompi st(1)
jbe 0x414460
fsubr dword [0x48c91c]
fld qword [esp + 0x48]
fxch st(1)
fucompi st(1)
fstp st(0)
jbe 0x414462
mov eax, dword [esp + 0x7c]
or dword [esp + 0xa4], eax
jmp 0x414690
mov edi, dword [esp + 0x38]
mov ebx, edi
sub ebx, eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.004182a0
sub dword [esp + 0xac], ebx
mov dword [esp + 0xb4], eax
mov dword [esp + 0xa8], edi
jmp 0x414332
neg eax
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.00418b10
jmp 0x414379
fstp st(0)
fstp st(0)
movsd xmm1, qword [esp + 0x48]
xor esi, esi
movsd qword [esp + 0x40], xmm1
jmp 0x4149ea
fld1
xor esi, esi
mov dword [esp + 0x7c], 0x20
mov dword [esp + 0x5c], 0
mov dword [esp + 0x58], 0
fst qword [esp + 0x40]
fstp qword [esp + 0x48]
jmp 0x41430c
mov dword [esp + 4], 1
mov dword [esp], eax
xor esi, esi
call fcn.00418b10
add dword [esp + 0xac], 1
add dword [esp + 0x80], 1
jmp 0x4143f0
xor ebx, ebx
mov eax, dword [esp + 0xb4]
mov dword [esp + 0xa4], 0xa3
mov dword [eax + 0x10], 0
call sub.msvcrt.dll__errno
mov dword [eax], 0x22
mov eax, dword [esp + 0xe8]
mov eax, dword [eax + 8]
add eax, 1
jmp 0x413a10
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x10], eax
lea eax, [esp + 0xb4]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xec]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xe8]
mov dword [esp + 4], eax
lea eax, [esp + 0xb0]
mov dword [esp], eax
call fcn.00418df0
cmp eax, 6
mov dword [esp + 0xa4], eax
mov edx, dword [esp + 0xb4]
jne 0x413765
mov eax, dword [esp + 0xe0]
mov dword [esp + 0x3c], 0
mov dword [esp + 0xb0], eax
jmp 0x413765
fucompi st(1)
fstp st(0)
jae 0x4149cc
fstp qword [esp + 0x40]
jmp 0x4149ea
mov eax, dword [esp + 0xa8]
mov ebx, dword [esp + 0x38]
sub ebx, eax
cmp ebx, 0
jne 0x414d33
mov eax, dword [esp + 0xac]
jmp 0x4146a8
je 0x413e2a
neg edx
mov eax, edx
and eax, 0xf
je 0x414bf2
fld qword [esp + 0xb8]
fdiv qword [eax*8 + 0x48ca00]
fstp qword [esp + 0xb8]
and edx, 0xfffffff0
je 0x413e2a
sar edx, 4
cmp edx, 0xf
mov ebp, edx
jle 0x4151c9
fld qword [0x48cae0]
mov ecx, edx
xor esi, esi
mov eax, dword [esp + 0xbc]
sub ecx, 0x10
mov edx, eax
and eax, 0x800fffff
or eax, 0x3ff00000
and edx, 0x7ff00000
mov dword [esp + 0xbc], eax
shr edx, 0x14
cmp ecx, 0xf
fld qword [esp + 0xb8]
lea esi, [esi + edx - 0x3ff]
fmul st(1)
fstp qword [esp + 0xb8]
jg 0x414c13
fstp st(0)
and ebp, 0xf
mov edx, dword [esp + 0xbc]
mov eax, edx
and eax, 0x7ff00000
shr eax, 0x14
lea esi, [esi + eax - 0x3ff]
mov eax, edx
and eax, 0x800fffff
or eax, 0x3ff00000
mov dword [esp + 0xbc], eax
xor eax, eax
test ebp, ebp
fld qword [esp + 0xb8]
jle 0x413e33
lea esi, [esi]
lea edi, [edi]
test ebp, 1
je 0x414caf
fmul qword [eax*8 + 0x48cac0]
sar ebp, 1
add eax, 1
test ebp, ebp
jg 0x414ca0
jmp 0x414047
mov dword [esp + 0x48], 0
jmp 0x41405b
mov dword [esp + 0x30], 0
jmp 0x4141a8
lea eax, [esp + 0xa4]
mov dword [esp + 4], 1
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 8], eax
jmp 0x413d18
mov edx, 0x25
sub edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x64]
mov eax, ecx
cmp ecx, edx
jg 0x413df4
mov eax, 0xf
sub eax, dword [esp + 0x28]
fld qword [esp + 0xb8]
fmul qword [eax*8 + 0x48ca00]
sub ecx, eax
fmul qword [ecx*8 + 0x48ca00]
jmp 0x41412a
jle 0x415051
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.004182a0
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0xac]
sub eax, ebx
xor ebx, ebx
mov dword [esp + 0xac], eax
jmp 0x4146a8
mov dword [esp + 0x28], 0
xor esi, esi
jmp 0x413ddb
fstp st(0)
fstp st(0)
test byte [esp + 0x58], 1
jne 0x4149b8
jmp 0x414ba3
mov edx, 0x4e1f
jmp 0x413b78
lea ebx, [esp + 0xb0]
mov dword [esp + 4], 0x48c7c0
mov dword [esp], ebx
call fcn.004189d0
test eax, eax
je 0x413b92
mov dword [esp + 4], str.inity
mov dword [esp], ebx
sub dword [esp + 0xb0], 1
call fcn.004189d0
test eax, eax
jne 0x414dda
add dword [esp + 0xb0], 1
mov eax, dword [esp + 0xe8]
mov dword [esp + 0xa4], 3
xor ebx, ebx
mov eax, dword [eax + 8]
add eax, 1
jmp 0x413a10
mov ecx, dword [esp + 0xbc]
mov eax, 0x15
or ecx, 0x100000
tzcnt ecx, ecx
sub eax, ecx
jmp 0x413cdd
cmp ebx, 1
sbb eax, eax
and eax, 0x10
add eax, 0x11
mov dword [esp + 0xa4], eax
jmp 0x414690
cmp ebx, 1
sbb eax, eax
and eax, 0x10
add eax, 0x11
test ebx, ebx
mov dword [esp + 0xa4], eax
jne 0x414690
cmp dword [esp + 0x40], 1
jg 0x414690
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x414690
mov ebx, dword [esp + 0x80]
cmp dword [esp + 0x50], ebx
je 0x414690
mov dword [esp], ebp
mov dword [esp + 4], 1
call fcn.004182a0
mov ebp, eax
mov eax, dword [esp + 0x28]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.004183d0
test eax, eax
jle 0x414bac
mov dword [esp + 0xa4], 0x11
mov dword [esp + 0x30], 0
mov eax, dword [esp + 0x38]
sub dword [esp + 0xac], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb4]
mov dword [esp], eax
call fcn.00413640
mov dword [esp + 0xb4], eax
jmp 0x414690
test ebx, ebx
je 0x41506d
mov edi, dword [esp + 0x30]
test edi, edi
je 0x41512c
mov ecx, dword [esp + 0xa8]
mov esi, dword [esp + 0xb4]
mov edx, ecx
lea eax, [esi + 0x14]
sar edx, 5
lea edx, [eax + edx*4]
cmp eax, edx
jae 0x414f31
cmp dword [esi + 0x14], 0xffffffff
lea eax, [esi + 0x18]
je 0x414f2d
jmp 0x41512c
add eax, 4
cmp dword [eax - 4], 0xffffffff
jne 0x41512c
cmp edx, eax
ja 0x414f20
and ecx, 0x1f
je 0x414f48
or edx, 0xffffffff
shl edx, cl
or edx, dword [eax]
mov eax, edx
add eax, 1
jne 0x41512c
mov eax, dword [esp + 0x38]
mov ebx, dword [esp + 0x50]
mov dword [esi + 0x10], 1
mov dword [esi + 0x14], 1
mov dword [esp + 0xa8], 1
mov dword [esp + 0xa4], 0x21
lea eax, [eax + ebx - 1]
mov dword [esp + 0xac], eax
mov eax, 1
jmp 0x414bb3
mov ebp, dword [esp + 0x3c]
test ebp, ebp
je 0x414af9
jmp 0x41472c
mov edi, dword [esp + 0x3c]
test edi, edi
jne 0x414af9
jmp 0x41472c
add esi, eax
cmp eax, 1
mov eax, dword [esp + 0x28]
je 0x414ff6
add ebp, eax
mov dword [esp + 0x50], esi
mov dword [esp + 0x48], ebx
mov dword [esp + 0x28], ebp
mov esi, dword [esp + 0x20]
jmp 0x414fd3
lea edi, [edi + edi*4]
add edi, edi
cmp eax, ebp
je 0x414fea
add eax, 1
lea ebx, [eax - 1]
cmp ebx, 8
jle 0x414fca
cmp eax, 0x10
jg 0x414fcf
lea esi, [esi + esi*4]
add esi, esi
jmp 0x414fcf
mov dword [esp + 0x20], esi
mov ebx, dword [esp + 0x48]
mov esi, dword [esp + 0x50]
mov eax, dword [esp + 0x28]
lea ebp, [eax + 1]
cmp eax, 8
mov dword [esp + 0x28], ebp
jg 0x4150db
mov edx, dword [esp + 0xb0]
jmp 0x4140cd
mov edx, dword [esp + 0xb4]
mov dword [esp + 0x30], 1
mov eax, dword [esp + 0x50]
mov dword [edx + 0x10], 0
mov dword [esp + 0xa4], 0x50
mov dword [esp + 0xac], eax
jmp 0x414690
mov esi, 1
jmp 0x413d8b
mov eax, ebx
neg eax
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb4]
mov dword [esp], eax
call fcn.00418b10
jmp 0x414d53
cmp dword [esp + 0x40], 1
je 0x415143
mov dword [esp + 0xa4], 0x21
mov esi, dword [esp + 0x30]
test esi, esi
jne 0x415099
mov edi, dword [esp + 0x38]
cmp dword [esp + 0x40], edi
jl 0x414bac
mov edx, dword [esp + 0xb4]
mov eax, dword [edx + 0x14]
test al, 1
je 0x414690
test ebx, ebx
jne 0x4151d0
cmp dword [esp + 0x40], 1
je 0x415025
sub eax, 1
mov dword [esp + 0xa4], 0x11
mov dword [edx + 0x14], eax
jmp 0x414690
xor esi, esi
jmp 0x413ff9
cmp dword [esp + 0x28], 0x10
jg 0x4150f0
mov eax, dword [esp + 0x20]
lea eax, [eax + eax*4]
lea eax, [edx + eax*2]
mov dword [esp + 0x20], eax
mov edx, dword [esp + 0xb0]
xor ebp, ebp
jmp 0x413dc5
cmp ecx, 0xffffffff
jl 0x413f38
mov eax, dword [esp + 0xb4]
mov dword [esp + 0xa8], 1
mov dword [eax + 0x10], 1
mov dword [eax + 0x14], 1
jmp 0x413f0d
mov dword [esp + 0xa4], 0x11
jmp 0x415083
xor ebp, ebp
jmp 0x4140a6
mov ebx, dword [esp + 0x80]
cmp dword [esp + 0x50], ebx
jne 0x4151b9
mov eax, dword [esp + 0xb4]
mov dword [esp + 0xa4], 0x21
cmp dword [eax + 0x10], 1
jne 0x414690
cmp dword [eax + 0x14], 1
mov eax, dword [esp + 0x40]
cmovne eax, dword [esp + 0x78]
mov dword [esp + 0x78], eax
jmp 0x414690
mov eax, dword [esp + 0xf0]
mov dword [esp], esi
mov dword [esp + 8], eax
mov eax, dword [esp + 0xe8]
mov dword [esp + 4], eax
call fcn.00419770
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0xe8]
mov eax, dword [eax + 8]
add eax, 1
jmp 0x413a10
mov dword [esp + 0xa4], 1
jmp 0x414eac
xor esi, esi
jmp 0x414c5a
mov dword [esp], edx
call fcn.004131a0
mov ecx, dword [eax + 0x10]
mov edx, dword [esp + 0xa8]
mov dword [esp + 0xb4], eax
bsr ecx, dword [eax + ecx*4 + 0x10]
mov eax, edx
neg eax
and eax, 0x1f
xor ecx, 0x1f
cmp ecx, eax
je 0x415206
add edx, 1
mov dword [esp + 0xa8], edx
mov dword [esp + 0xa4], 0x21
jmp 0x414690