Function at 0x407a44
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push edi
push esi
push ebp
push ebx
sub esp, 0xf8
mov dword [esp + 0x88], eax
mov edx, dword [0x872c84]
mov dword [esp + 0xb8], edx
mov ebp, dword [0x872c88]
mov esi, dword [0x872c74]
mov ecx, dword [0x872c78]
mov dword [esp + 0x7c], ecx
mov ebx, dword [0x872c68]
mov edx, dword [0x872c6c]
mov dword [esp + 0x40], edx
test eax, eax
jne 0x407a93
mov eax, ebp
call fcn.00407978
mov edx, 0x5774a0
mov ecx, dword [edx]
mov dword [esp + 0x50], ecx
mov edi, dword [edx + 4]
mov dword [esp + 0x54], edi
mov ecx, dword [edx + 8]
mov dword [esp + 0x58], ecx
mov ecx, dword [edx + 0xc]
mov dword [esp + 0x5c], ecx
mov ecx, dword [edx + 0x10]
mov dword [esp + 0x60], ecx
mov ecx, dword [edx + 0x14]
mov dword [esp + 0x64], ecx
mov ecx, dword [edx + 0x18]
mov dword [esp + 0x68], ecx
mov ecx, dword [edx + 0x1c]
mov dword [esp + 0x6c], ecx
mov ecx, dword [edx + 0x20]
mov dword [esp + 0x70], ecx
mov edx, dword [edx + 0x24]
mov dword [esp + 0x74], edx
mov ecx, ebx
xor edx, edx
mov dword [esp + 0x4c], edx
mov byte [ebp + 0x10e], 0
test ebx, ebx
jle 0x407b79
xor edi, edi
mov eax, 1
lea edx, [eax + eax]
add edx, edx
cmp ecx, dword [esp + edx + 0x50]
jg 0x407b11
inc eax
cmp eax, 0xa
jl 0x407afb
add eax, eax
lea edx, [eax + eax]
mov edx, dword [esp + edx + 0x4c]
mov eax, dword [0x59b7d0]
cmp edx, eax
jle 0x407b24
test eax, eax
jle 0x407b24
mov edx, eax
mov eax, dword [0x872c58]
cmp edx, eax
jle 0x407b33
test eax, eax
jle 0x407b33
mov edx, eax
cmp edx, esi
jle 0x407b3d
test esi, esi
jle 0x407b3d
mov edx, esi
cmp ebx, 0x200
jge 0x407b4e
cmp ecx, ebx
jne 0x407b4e
mov edx, 0x200
sub ecx, edx
mov dword [ebp + edi*4 + 0x118], edx
movzx edx, byte [ebp + 0x10e]
inc edx
mov byte [ebp + 0x10e], dl
movzx edi, dl
cmp edi, 0x20
je 0x408fd1
test ecx, ecx
jg 0x407af6
mov dword [esp + 0x4c], edx
mov eax, dword [esp + 0x40]
xor edx, edx
mov dword [esp + 0x38], edx
xor ecx, ecx
mov dword [esp + 0x9c], ecx
test eax, eax
jle 0x407c33
mov byte [ebp + 0x10f], 0
xor edi, edi
mov dword [esp + 0x78], esi
mov esi, dword [esp + 0x7c]
jmp 0x407bad
mov byte [ebp + 0x10f], cl
mov ecx, 1
lea edx, [ecx + ecx]
add edx, edx
cmp eax, dword [esp + edx + 0x50]
jg 0x407bc8
inc ecx
cmp ecx, 0xa
jl 0x407bb2
add ecx, ecx
lea edx, [ecx + ecx]
mov edx, dword [esp + edx + 0x4c]
mov ecx, dword [0x59b7d4]
cmp edx, ecx
jle 0x407bdc
test ecx, ecx
jle 0x407bdc
mov edx, ecx
mov ecx, dword [0x872c5c]
cmp edx, ecx
jle 0x407bec
test ecx, ecx
jle 0x407bec
mov edx, ecx
cmp edx, esi
jle 0x407bf6
test esi, esi
jle 0x407bf6
mov edx, esi
sub eax, edx
mov dword [ebp + edi*4 + 0x198], edx
movzx ecx, byte [ebp + 0x10f]
inc ecx
mov edx, ecx
movzx edi, cl
cmp edi, 0x20
je 0x408f9f
test eax, eax
jg 0x407ba7
mov dword [esp + 0x9c], edx
mov dword [esp + 0x38], ecx
mov esi, dword [esp + 0x78]
movzx edx, byte [ebp + 0x10e]
mov dword [esp + 0x4c], edx
movsx edx, byte [0x872418]
test edx, edx
je 0x407c5a
cmp byte [ebp + 0x10c], 2
je 0x40897b
mov edx, dword [esp + 0x9c]
mov byte [ebp + 0x10f], dl
jmp 0x407c67
mov edx, dword [esp + 0x9c]
mov byte [ebp + 0x10f], dl
mov edx, dword [esp + 0x4c]
movzx edx, dl
mov dword [esp + 0x9c], edx
mov ecx, dword [esp + 0x38]
movzx ecx, cl
mov dword [esp + 0x38], ecx
mov eax, dword [0x5b8b28]
test eax, eax
je 0x408f89
test eax, eax
je 0x408f72
mov eax, dword [0x5b8b2c]
test eax, eax
je 0x408f5d
test eax, eax
je 0x408f46
mov eax, dword [0x5b8b30]
test eax, eax
je 0x408f31
test eax, eax
je 0x408f1a
mov eax, dword [0x5b8b34]
test eax, eax
je 0x408f05
test eax, eax
je 0x408eee
mov eax, dword [0x5b8b38]
test eax, eax
je 0x408ed9
test eax, eax
je 0x408ec2
mov eax, dword [0x5b8b3c]
test eax, eax
je 0x408ead
test eax, eax
je 0x408e96
mov eax, dword [0x5b8b40]
test eax, eax
je 0x408e81
test eax, eax
je 0x408e6a
mov eax, dword [0x5b8b44]
test eax, eax
je 0x408e55
test eax, eax
je 0x408e3e
mov eax, dword [0x5b8b48]
test eax, eax
je 0x408e29
test eax, eax
je 0x408e12
xor edx, edx
mov dword [esp + 0x34], edx
mov dword [esp + 0xd8], edx
mov edi, dword [0x872bf4]
mov eax, dword [edi]
lea ecx, [esp + 0x34]
push edx
push ecx
push 2
push dword [0x59b7cc]
push 0x100
push 0x200
push edi
call dword [eax + 0x90]
test eax, eax
je 0x407d87
push 0x87d140
push 0x8782b0
call fcn.00423904
add esp, 8
mov edx, dword [esp + 0x38]
test edx, edx
jle 0x4088c0
mov edi, 1
mov dword [esp + 0xd4], edi
mov ecx, 1
mov dword [esp + 0xec], ecx
xor edx, edx
mov dword [esp + 0x4c], edx
xor edi, edi
mov edx, dword [esp + 0x38]
lea ecx, [edx - 1]
mov eax, dword [esp + 0x9c]
lea edx, [eax - 1]
mov dword [esp + 0x84], edx
lea eax, [eax + eax]
add eax, eax
xor edx, edx
mov dword [esp + 0x3c], eax
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x90], edi
mov dword [esp + 0xbc], ebx
mov dword [esp + 0x78], esi
mov dword [esp + 0xa4], ebp
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x90]
mov eax, dword [eax + ecx*4 + 0x198]
mov ebx, dword [esp + 0x9c]
test ebx, ebx
jle 0x408e06
xor esi, esi
xor ebp, ebp
mov ebx, dword [esp + 0x4c]
lea ecx, [ebx + eax]
mov edi, dword [esp + 0x40]
sub edi, ebx
add edi, ebx
mov dword [esp + 0xb4], edi
mov edi, dword [esp + 0xa4]
lea ebx, [edi + edx]
mov dword [esp + 0xf4], ebx
lea ebx, [eax - 1]
mov dword [esp + 0x80], ebx
xor ebx, ebx
lea edi, [edi + edx + 0x280]
mov dword [esp + 0xa0], edi
mov dword [esp + 0xc0], ecx
mov dword [esp + 0xe0], eax
mov dword [esp + 0x44], edx
mov edx, dword [esp + 0xec]
mov edi, dword [esp + 0xa4]
mov eax, dword [edi + ebp*4 + 0x118]
mov dword [esp + 0xdc], eax
lea edi, [eax + eax]
add edi, edi
mov ecx, dword [esp + 0xe0]
imul ecx, edi
cmp ecx, dword [0x59b080]
jle 0x407ed4
mov dword [0x59b080], ecx
push ecx
push dword [0x5b8b28]
mov dword [esp + 0xf4], edx
call fcn.0046f1bf
mov edx, dword [esp + 0xf4]
add esp, 8
mov dword [0x5b8b28], eax
test eax, eax
je 0x4089f4
movsx eax, byte [0x872418]
test eax, eax
je 0x407ef3
mov eax, dword [esp + 0xa4]
cmp byte [eax + 0x10c], 2
je 0x4083fa
mov ecx, dword [esp + 0x8c]
mov eax, dword [esp + 0x90]
cmp eax, ecx
je 0x4080ec
mov eax, dword [esp + 0x84]
cmp ebp, eax
je 0x407fd6
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0xc0]
cmp ecx, eax
jge 0x4083fa
xor eax, eax
mov dword [esp + 0xcc], eax
lea eax, [esi + esi]
add eax, eax
mov dword [esp + 0xd0], eax
mov eax, ecx
imul eax, dword [esp + 0xbc]
mov dword [esp + 0xac], ebx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov ebx, eax
mov ebp, ecx
mov esi, dword [esp + 0xcc]
mov edx, dword [esp + 0xb8]
mov eax, dword [edx + 0xc0]
add eax, dword [esp + 0xd0]
lea edx, [ebx + ebx]
add edx, edx
add eax, edx
mov edx, esi
add edx, dword [0x5b8b28]
push edi
push eax
push edx
call dword [0x5b856c]
add esp, 0xc
add esi, edi
add ebx, dword [esp + 0xbc]
inc ebp
mov edx, dword [esp + 0xc0]
cmp ebp, edx
jl 0x407f71
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, dword [esp + 0xec]
jmp 0x4083fa
mov ecx, dword [esp + 0xbc]
sub ecx, esi
add ecx, ecx
add ecx, ecx
mov dword [esp + 0xb0], ecx
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0xc0]
cmp ecx, eax
jge 0x4083fa
xor eax, eax
mov dword [esp + 0x48], eax
mov eax, edi
sub eax, dword [esp + 0xb0]
mov dword [esp + 0xcc], eax
lea eax, [esi + esi]
add eax, eax
mov dword [esp + 0xc8], eax
mov eax, ecx
imul eax, dword [esp + 0xbc]
mov dword [esp + 0xd0], eax
mov dword [esp + 0xc4], edi
mov dword [esp + 0xac], ebx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov ebx, ecx
mov ebp, eax
mov esi, dword [esp + 0x48]
mov edi, dword [esp + 0xb0]
mov eax, dword [esp + 0xb8]
mov eax, dword [eax + 0xc0]
add eax, dword [esp + 0xc8]
lea edx, [ebp + ebp]
add edx, edx
add eax, edx
mov edx, esi
add edx, dword [0x5b8b28]
push edi
push eax
push edx
call dword [0x5b856c]
mov edx, dword [0x5b8b28]
add edx, edi
add edx, esi
push dword [0x872014]
mov eax, dword [esp + 0xdc]
push eax
push edx
call dword [0x5b8568]
add esp, 0x18
add esi, dword [esp + 0xc4]
add ebp, dword [esp + 0xbc]
inc ebx
mov eax, dword [esp + 0xc0]
cmp ebx, eax
jl 0x408062
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, dword [esp + 0xec]
jmp 0x4083fa
mov eax, dword [esp + 0x84]
cmp ebp, eax
je 0x408252
mov eax, dword [esp + 0x4c]
mov dword [esp + 0xb0], eax
mov ecx, dword [esp + 0xb4]
cmp eax, ecx
jge 0x408a19
xor eax, eax
mov dword [esp + 0xa8], eax
lea ecx, [esi + esi]
add ecx, ecx
mov dword [esp + 0xcc], ecx
mov eax, dword [esp + 0xb0]
imul eax, dword [esp + 0xbc]
mov dword [esp + 0xc8], eax
mov dword [esp + 0xac], ebx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov ebx, dword [esp + 0xa8]
mov ebp, eax
mov esi, dword [esp + 0xb0]
mov eax, dword [esp + 0xb8]
mov ecx, dword [eax + 0xc0]
add ecx, dword [esp + 0xcc]
lea edx, [ebp + ebp]
add edx, edx
add ecx, edx
mov eax, ebx
add eax, dword [0x5b8b28]
push edi
push ecx
push eax
call dword [0x5b856c]
add esp, 0xc
add ebx, edi
add ebp, dword [esp + 0xbc]
inc esi
mov eax, dword [esp + 0xb4]
cmp esi, eax
jl 0x40816c
mov dword [esp + 0xa8], ebx
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, dword [esp + 0xec]
mov ecx, dword [esp + 0xb4]
mov eax, dword [esp + 0xc0]
cmp ecx, eax
jge 0x4083fa
mov dword [esp + 0xac], ebx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov ebx, ecx
mov ebp, eax
mov esi, dword [esp + 0xa8]
mov eax, esi
add eax, dword [0x5b8b28]
push dword [0x872014]
push edi
push eax
call dword [0x5b8568]
add esp, 0xc
add esi, edi
inc ebx
cmp ebx, ebp
jl 0x408211
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, dword [esp + 0xec]
jmp 0x4083fa
mov eax, dword [esp + 0xbc]
sub eax, esi
add eax, eax
add eax, eax
mov dword [esp + 0xb0], eax
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0xd0], ecx
mov eax, dword [esp + 0xb4]
cmp ecx, eax
jge 0x408df8
xor eax, eax
mov dword [esp + 0xa8], eax
mov ecx, edi
sub ecx, dword [esp + 0xb0]
mov dword [esp + 0xc8], ecx
lea eax, [esi + esi]
add eax, eax
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0xd0]
imul eax, dword [esp + 0xbc]
mov dword [esp + 0x48], eax
mov dword [esp + 0xc4], edi
mov dword [esp + 0xac], ebx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov ebx, dword [esp + 0xa8]
mov ebp, eax
mov esi, dword [esp + 0xd0]
mov edi, dword [esp + 0xb0]
mov eax, dword [esp + 0xb8]
mov ecx, dword [eax + 0xc0]
add ecx, dword [esp + 0xcc]
lea edx, [ebp + ebp]
add edx, edx
add ecx, edx
mov eax, ebx
add eax, dword [0x5b8b28]
push edi
push ecx
push eax
call dword [0x5b856c]
mov edx, dword [0x5b8b28]
add edx, edi
add edx, ebx
push dword [0x872014]
mov eax, dword [esp + 0xd8]
push eax
push edx
call dword [0x5b8568]
add esp, 0x18
add ebx, dword [esp + 0xc4]
add ebp, dword [esp + 0xbc]
inc esi
mov eax, dword [esp + 0xb4]
cmp esi, eax
jl 0x4082f2
mov dword [esp + 0xa8], ebx
mov edi, dword [esp + 0xc4]
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, dword [esp + 0xec]
mov ecx, dword [esp + 0xb4]
mov eax, dword [esp + 0xc0]
cmp ecx, eax
jge 0x4083fa
mov dword [esp + 0xac], ebx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov ebx, ecx
mov ebp, eax
mov esi, dword [esp + 0xa8]
mov eax, esi
add eax, dword [0x5b8b28]
push dword [0x872014]
push edi
push eax
call dword [0x5b8568]
add esp, 0xc
add esi, edi
inc ebx
cmp ebx, ebp
jl 0x4083be
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, dword [esp + 0xec]
movsx eax, byte [0x871fe0]
test eax, eax
je 0x40841e
movsx eax, byte [0x59b6fc]
test eax, eax
je 0x408417
mov ecx, 0x100005
jmp 0x408423
mov ecx, 5
jmp 0x408423
mov ecx, 5
movsx eax, byte [0x871fec]
test eax, eax
jne 0x4084a5
mov eax, dword [esp + 0x88]
test eax, eax
je 0x408443
mov edx, 1
jmp 0x408587
mov dword [esp + 0xa8], ecx
mov ecx, dword [0x872bf4]
mov eax, dword [ecx]
xor edi, edi
push edi
mov edx, dword [esp + 0xa4]
push edx
push edi
push dword [0x872bec]
mov edx, 1
push edx
push edx
mov edx, dword [esp + 0xf8]
push edx
mov edx, dword [esp + 0xf8]
push edx
push ecx
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0xcc], ecx
call dword [eax + 0x5c]
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0xd4], eax
mov edx, 1
jmp 0x408587
cmp edx, 1
jne 0x40851b
mov eax, dword [esp + 0x88]
test eax, eax
je 0x4084bf
mov edx, 2
jmp 0x408587
mov dword [esp + 0xa8], ecx
mov ecx, dword [0x872bf4]
mov eax, dword [ecx]
xor edi, edi
push edi
mov edx, dword [esp + 0xa4]
push edx
push edi
push dword [0x872bec]
push 1
push 2
mov edx, dword [esp + 0xf8]
push edx
mov edx, dword [esp + 0xf8]
push edx
push ecx
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0xcc], ecx
call dword [eax + 0x5c]
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0xd4], eax
mov edx, 2
jmp 0x408587
mov eax, dword [esp + 0x88]
test eax, eax
je 0x40852d
mov edx, 4
jmp 0x408587
mov dword [esp + 0xa8], ecx
mov ecx, dword [0x872bf4]
mov eax, dword [ecx]
xor edi, edi
push edi
mov edx, dword [esp + 0xa4]
push edx
push edi
push dword [0x872bec]
push 1
push 4
mov edx, dword [esp + 0xf8]
push edx
mov edx, dword [esp + 0xf8]
push edx
push ecx
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0xcc], ecx
call dword [eax + 0x5c]
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0xd4], eax
mov edx, 4
mov eax, dword [esp + 0xd4]
test eax, eax
jl 0x408dca
mov dword [esp + 0xf0], 0
mov eax, dword [0x5b8b28]
mov dword [esp + 0xc4], eax
movsx edi, byte [0x872418]
test edi, edi
je 0x4085ca
mov eax, dword [esp + 0xa4]
cmp byte [eax + 0x10c], 2
jne 0x4085ca
xor edx, edx
test edx, edx
jbe 0x40885b
xor edi, edi
mov dword [esp + 0xa8], ecx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov eax, dword [esp + 0xf4]
mov ebp, dword [eax + ebx + 0x280]
mov esi, dword [ebp]
lea edx, [esp + 0xf0]
push edx
push edi
push ebp
call dword [esi + 0x48]
test eax, eax
jne 0x40880a
mov eax, dword [0x872bf4]
mov ecx, edi
mov ebp, dword [esp + 0xdc]
sar ebp, cl
mov ecx, edi
mov esi, dword [esp + 0xe0]
sar esi, cl
mov ecx, dword [eax]
lea edx, [esp + 0xd8]
push 0
push edx
push 2
push dword [0x59b7cc]
push esi
push ebp
push eax
call dword [ecx + 0x90]
test eax, eax
je 0x408664
push 0x87d140
push 0x8782b0
call fcn.00423904
add esp, 8
cmp edi, 1
je 0x408d64
cmp edi, 2
je 0x408cf0
cmp edi, 3
je 0x408c7c
cmp edi, 4
je 0x408c08
cmp edi, 5
je 0x408b94
cmp edi, 6
je 0x408b20
cmp edi, 7
je 0x408ab5
cmp edi, 8
je 0x408a5f
mov edx, dword [esp + 0xd8]
mov dword [esp + 0xb0], edx
mov ecx, dword [edx]
lea eax, [esp + 0xe4]
push 0x2000
push 0
push eax
push edx
call dword [ecx + 0x34]
test eax, eax
jl 0x408a43
test esi, esi
jle 0x40872e
xor edx, edx
add ebp, ebp
add ebp, ebp
mov eax, dword [esp + 0xc4]
mov dword [esp + 0xd0], edi
mov dword [esp + 0xac], ebx
mov ebx, eax
mov edi, esi
mov esi, edx
mov ecx, esi
imul ecx, dword [esp + 0xe4]
add ecx, dword [esp + 0xe8]
push ebp
push ebx
push ecx
call dword [0x5b856c]
add esp, 0xc
add ebx, ebp
inc esi
cmp esi, edi
jl 0x4086fc
mov edi, dword [esp + 0xd0]
mov ebx, dword [esp + 0xac]
mov eax, dword [esp + 0xb0]
mov edx, dword [eax]
push eax
call dword [edx + 0x38]
test eax, eax
jl 0x408a27
xor eax, eax
test eax, eax
jne 0x4087da
movsx eax, byte [0x871fe0]
test eax, eax
jne 0x408795
mov edx, dword [0x872bf4]
mov ebp, dword [edx]
xor eax, eax
push eax
push dword [esp + 0xf4]
push eax
push dword [esp + 0xe4]
push edx
call dword [ebp + 0x78]
mov dword [esp + 0xd4], eax
test eax, eax
je 0x4087bc
push 0x87cdec
push 0x8782b0
call fcn.00423904
add esp, 8
jmp 0x4087bc
xor edx, edx
push dword [0x872014]
mov eax, dword [esp + 0xac]
push eax
push edx
push edx
push dword [esp + 0xe8]
push edx
push edx
push dword [esp + 0x10c]
call fcn.004b147f
mov eax, dword [esp + 0xf0]
test eax, eax
je 0x4087cd
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov dword [esp + 0xf0], 0
jmp 0x4087ec
push 0x87d288
push 0x87c810
call fcn.00409114
add esp, 8
mov eax, dword [esp + 0xd8]
test eax, eax
je 0x4087fd
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov dword [esp + 0xd8], 0
jmp 0x40881f
push edi
push 2
push 0x87ce40
push 0x8782b0
call fcn.00423904
add esp, 0x10
mov eax, dword [esp + 0xf0]
test eax, eax
je 0x408830
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov dword [esp + 0xf0], 0
inc edi
mov eax, dword [esp + 0xec]
cmp edi, eax
jb 0x4085f0
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, eax
mov eax, dword [esp + 0xdc]
lea esi, [esi + eax]
add ebx, 4
add dword [esp + 0xa0], 4
inc ebp
mov ecx, dword [esp + 0x9c]
cmp ebp, ecx
jl 0x407e78
mov dword [esp + 0xec], edx
mov ecx, dword [esp + 0xc0]
mov edx, dword [esp + 0x44]
mov dword [esp + 0x4c], ecx
add edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x90]
inc eax
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x38]
cmp eax, ecx
jl 0x407df6
mov esi, dword [esp + 0x78]
mov ebp, dword [esp + 0xa4]
fld dword [0x872c60]
fnstcw word [esp + 0x28]
movzx eax, word [esp + 0x28]
or eax, 0xc00
mov dword [esp + 0x30], eax
fldcw word [esp + 0x30]
fistp qword [ebp + 0x238]
fldcw word [esp + 0x28]
fld dword [0x872c64]
fnstcw word [esp + 0x28]
movzx eax, word [esp + 0x28]
or eax, 0xc00
mov dword [esp + 0x30], eax
fldcw word [esp + 0x30]
fistp qword [ebp + 0x240]
fldcw word [esp + 0x28]
mov edi, dword [0x872c68]
mov dword [ebp + 0x88], edi
mov edx, dword [0x872c6c]
mov dword [ebp + 0x8c], edx
mov dword [ebp + 0xf0], edi
mov dword [ebp + 0xf4], edx
xor ecx, ecx
mov byte [ebp + 0x10d], cl
mov dword [ebp + 0x110], esi
mov esi, dword [esp + 0x7c]
mov dword [ebp + 0x114], esi
mov dword [0x872c68], ecx
mov dword [0x872c6c], ecx
mov dword [0x872c60], ecx
mov dword [0x872c64], ecx
mov eax, dword [esp + 0x34]
test eax, eax
je 0x40896e
mov edx, dword [eax]
push eax
call dword [edx + 8]
xor eax, eax
add esp, 0xf8
pop ebx
pop ebp
pop esi
pop edi
ret
fild dword [0x8726c0]
fnstcw word [esp + 0x28]
movzx eax, word [esp + 0x28]
or eax, 0xc00
mov dword [esp + 0x30], eax
fldcw word [esp + 0x30]
fistp dword [ebp + 0x118]
fldcw word [esp + 0x28]
fild dword [0x8726c4]
fnstcw word [esp + 0x28]
movzx eax, word [esp + 0x28]
or eax, 0xc00
mov dword [esp + 0x30], eax
fldcw word [esp + 0x30]
fistp dword [ebp + 0x198]
fldcw word [esp + 0x28]
mov edx, 1
mov dword [esp + 0x4c], edx
mov ecx, 1
mov byte [ebp + 0x10e], cl
mov edx, 1
mov dword [esp + 0x38], edx
mov edx, 1
mov byte [ebp + 0x10f], dl
jmp 0x407c67
push 0x87d12c
push 0x8782b0
mov dword [esp + 0xf4], edx
call fcn.00409114
mov edx, dword [esp + 0xf4]
add esp, 8
jmp 0x407ed4
xor eax, eax
mov dword [esp + 0xa8], eax
jmp 0x4081d4
push 0x87d508
push 0x8782b0
call fcn.00423904
add esp, 8
mov eax, 2
jmp 0x408745
push 0x87d4f4
push 0x8782b0
call fcn.00423904
add esp, 8
mov eax, 1
jmp 0x408745
mov eax, dword [0x5b8b48]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xdc]
lea ecx, [edx - 1]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5b8b28]
xor ecx, ecx
call fcn.00409000
jmp 0x4086ac
mov eax, dword [esp + 0xdc]
lea edx, [eax - 1]
mov dword [esp + 0xb0], edx
mov eax, dword [0x5b8b44]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5b8b28]
xor ecx, ecx
call fcn.00409000
jmp 0x4086ac
mov eax, dword [esp + 0xdc]
lea edx, [eax - 1]
mov dword [esp + 0xb0], edx
mov eax, dword [0x5b8b40]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5b8b28]
xor ecx, ecx
call fcn.00409000
cmp edi, 7
je 0x408ac6
jmp 0x4086ac
mov eax, dword [esp + 0xdc]
lea edx, [eax - 1]
mov dword [esp + 0xb0], edx
mov eax, dword [0x5b8b3c]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5b8b28]
xor ecx, ecx
call fcn.00409000
cmp edi, 6
je 0x408b31
jmp 0x4086ac
mov eax, dword [esp + 0xdc]
lea edx, [eax - 1]
mov dword [esp + 0xb0], edx
mov eax, dword [0x5b8b38]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5b8b28]
xor ecx, ecx
call fcn.00409000
cmp edi, 5
je 0x408ba5
jmp 0x4086ac
mov eax, dword [esp + 0xdc]
lea edx, [eax - 1]
mov dword [esp + 0xb0], edx
mov eax, dword [0x5b8b34]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5b8b28]
xor ecx, ecx
call fcn.00409000
cmp edi, 4
je 0x408c19
jmp 0x4086ac
mov eax, dword [esp + 0xdc]
lea edx, [eax - 1]
mov dword [esp + 0xb0], edx
mov eax, dword [0x5b8b30]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5b8b28]
xor ecx, ecx
call fcn.00409000
cmp edi, 3
je 0x408c8d
jmp 0x4086ac
mov eax, dword [0x5b8b2c]
mov dword [esp + 0xc4], eax
mov edx, dword [esp + 0xdc]
lea ecx, [edx - 1]
mov dword [esp + 0xb0], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5b8b28]
xor ecx, ecx
call fcn.00409000
cmp edi, 2
je 0x408d01
jmp 0x4086ac
push 0x87d160
push 0x8782b0
call fcn.00409114
push 0x87d260
push 0x8782b0
call fcn.00423904
mov eax, 0xffffffff
add esp, 0x108
pop ebx
pop ebp
pop esi
pop edi
ret
xor eax, eax
mov dword [esp + 0xa8], eax
jmp 0x408385
mov ecx, dword [esp + 0x4c]
lea ecx, [ecx + eax]
jmp 0x408892
push 0x87d12c
push 0x8782b0
call fcn.00409114
add esp, 8
jmp 0x407d3d
push 0x100
call fcn.0046ef5c
pop ecx
mov dword [0x5b8b48], eax
jmp 0x407d35
push 0x87d12c
push 0x8782b0
call fcn.00409114
add esp, 8
jmp 0x407d28
push 0x400
call fcn.0046ef5c
pop ecx
mov dword [0x5b8b44], eax
jmp 0x407d20
push 0x87d12c
push 0x8782b0
call fcn.00409114
add esp, 8
jmp 0x407d13
push 0x1000
call fcn.0046ef5c
pop ecx
mov dword [0x5b8b40], eax
jmp 0x407d0b
push 0x87d12c
push 0x8782b0
call fcn.00409114
add esp, 8
jmp 0x407cfe
push 0x4000
call fcn.0046ef5c
pop ecx
mov dword [0x5b8b3c], eax
jmp 0x407cf6
push 0x87d12c
push 0x8782b0
call fcn.00409114
add esp, 8
jmp 0x407ce9
push 0x10000
call fcn.0046ef5c
pop ecx
mov dword [0x5b8b38], eax
jmp 0x407ce1
push 0x87d12c
push 0x8782b0
call fcn.00409114
add esp, 8
jmp 0x407cd4
push 0x40000
call fcn.0046ef5c
pop ecx
mov dword [0x5b8b34], eax
jmp 0x407ccc
push 0x87d12c
push 0x8782b0
call fcn.00409114
add esp, 8
jmp 0x407cbf
push 0x100000
call fcn.0046ef5c
pop ecx
mov dword [0x5b8b30], eax
jmp 0x407cb7
push 0x87d12c
push 0x8782b0
call fcn.00409114
add esp, 8
jmp 0x407caa
push 0x400000
call fcn.0046ef5c
pop ecx
mov dword [0x5b8b2c], eax
jmp 0x407ca2
push 0x87d12c
push 0x8782b0
call fcn.00409114
add esp, 8
jmp 0x407c95
push dword [0x59b080]
call fcn.0046ef5c
pop ecx
mov dword [0x5b8b28], eax
jmp 0x407c8d
mov dword [esp + 0x38], ecx
mov edx, ecx
mov byte [ebp + 0x10f], dl
push eax
mov eax, dword [esp + 0x44]
push eax
push ebx
push 0x87d0f8
push 0x8782b0
call fcn.00409114
mov eax, 0xffffffff
add esp, 0x10c
pop ebx
pop ebp
pop esi
pop edi
ret
xor eax, eax
push eax
push eax
push 0x87d0e0
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
mov eax, 0xffffffff
add esp, 0xf8
pop ebx
pop ebp
pop esi
pop edi
ret