Function at 0x407954
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push edi
push esi
push ebp
push ebx
sub esp, 0xf8
mov dword [esp + 0x88], eax
mov edx, dword [0x836394]
mov dword [esp + 0xb8], edx
mov ebp, dword [0x836398]
mov esi, dword [0x836384]
mov ecx, dword [0x836388]
mov dword [esp + 0x7c], ecx
mov ebx, dword [0x836378]
mov edx, dword [0x83637c]
mov dword [esp + 0x40], edx
test eax, eax
jne 0x4079a3
mov eax, ebp
call fcn.00407888
mov edx, 0x5784a0
mov ecx, dword [edx]
mov dword [esp + 0x50], ecx
mov edi, dword [edx + 4]
mov dword [esp + 0x54], edi
mov ecx, dword [edx + 8]
mov dword [esp + 0x58], ecx
mov ecx, dword [edx + 0xc]
mov dword [esp + 0x5c], ecx
mov ecx, dword [edx + 0x10]
mov dword [esp + 0x60], ecx
mov ecx, dword [edx + 0x14]
mov dword [esp + 0x64], ecx
mov ecx, dword [edx + 0x18]
mov dword [esp + 0x68], ecx
mov ecx, dword [edx + 0x1c]
mov dword [esp + 0x6c], ecx
mov ecx, dword [edx + 0x20]
mov dword [esp + 0x70], ecx
mov edx, dword [edx + 0x24]
mov dword [esp + 0x74], edx
mov ecx, ebx
xor edx, edx
mov dword [esp + 0x4c], edx
mov byte [ebp + 0x10e], 0
test ebx, ebx
jle 0x407a89
xor edi, edi
mov eax, 1
lea edx, [eax + eax]
add edx, edx
cmp ecx, dword [esp + edx + 0x50]
jg 0x407a21
inc eax
cmp eax, 0xa
jl 0x407a0b
add eax, eax
lea edx, [eax + eax]
mov edx, dword [esp + edx + 0x4c]
mov eax, dword [0x59cce8]
cmp edx, eax
jle 0x407a34
test eax, eax
jle 0x407a34
mov edx, eax
mov eax, dword [0x836368]
cmp edx, eax
jle 0x407a43
test eax, eax
jle 0x407a43
mov edx, eax
cmp edx, esi
jle 0x407a4d
test esi, esi
jle 0x407a4d
mov edx, esi
cmp ebx, 0x200
jge 0x407a5e
cmp ecx, ebx
jne 0x407a5e
mov edx, 0x200
sub ecx, edx
mov dword [ebp + edi*4 + 0x118], edx
movzx edx, byte [ebp + 0x10e]
inc edx
mov byte [ebp + 0x10e], dl
movzx edi, dl
cmp edi, 0x20
je 0x408ee1
test ecx, ecx
jg 0x407a06
mov dword [esp + 0x4c], edx
mov eax, dword [esp + 0x40]
xor edx, edx
mov dword [esp + 0x38], edx
xor ecx, ecx
mov dword [esp + 0x9c], ecx
test eax, eax
jle 0x407b43
mov byte [ebp + 0x10f], 0
xor edi, edi
mov dword [esp + 0x78], esi
mov esi, dword [esp + 0x7c]
jmp 0x407abd
mov byte [ebp + 0x10f], cl
mov ecx, 1
lea edx, [ecx + ecx]
add edx, edx
cmp eax, dword [esp + edx + 0x50]
jg 0x407ad8
inc ecx
cmp ecx, 0xa
jl 0x407ac2
add ecx, ecx
lea edx, [ecx + ecx]
mov edx, dword [esp + edx + 0x4c]
mov ecx, dword [0x59ccec]
cmp edx, ecx
jle 0x407aec
test ecx, ecx
jle 0x407aec
mov edx, ecx
mov ecx, dword [0x83636c]
cmp edx, ecx
jle 0x407afc
test ecx, ecx
jle 0x407afc
mov edx, ecx
cmp edx, esi
jle 0x407b06
test esi, esi
jle 0x407b06
mov edx, esi
sub eax, edx
mov dword [ebp + edi*4 + 0x198], edx
movzx ecx, byte [ebp + 0x10f]
inc ecx
mov edx, ecx
movzx edi, cl
cmp edi, 0x20
je 0x408eaf
test eax, eax
jg 0x407ab7
mov dword [esp + 0x9c], edx
mov dword [esp + 0x38], ecx
mov esi, dword [esp + 0x78]
movzx edx, byte [ebp + 0x10e]
mov dword [esp + 0x4c], edx
movsx edx, byte [0x835b8c]
test edx, edx
je 0x407b6a
cmp byte [ebp + 0x10c], 2
je 0x40888b
mov edx, dword [esp + 0x9c]
mov byte [ebp + 0x10f], dl
jmp 0x407b77
mov edx, dword [esp + 0x9c]
mov byte [ebp + 0x10f], dl
mov edx, dword [esp + 0x4c]
movzx edx, dl
mov dword [esp + 0x9c], edx
mov ecx, dword [esp + 0x38]
movzx ecx, cl
mov dword [esp + 0x38], ecx
mov eax, dword [0x5ba028]
test eax, eax
je 0x408e99
test eax, eax
je 0x408e82
mov eax, dword [0x5ba02c]
test eax, eax
je 0x408e6d
test eax, eax
je 0x408e56
mov eax, dword [0x5ba030]
test eax, eax
je 0x408e41
test eax, eax
je 0x408e2a
mov eax, dword [0x5ba034]
test eax, eax
je 0x408e15
test eax, eax
je 0x408dfe
mov eax, dword [0x5ba038]
test eax, eax
je 0x408de9
test eax, eax
je 0x408dd2
mov eax, dword [0x5ba03c]
test eax, eax
je 0x408dbd
test eax, eax
je 0x408da6
mov eax, dword [0x5ba040]
test eax, eax
je 0x408d91
test eax, eax
je 0x408d7a
mov eax, dword [0x5ba044]
test eax, eax
je 0x408d65
test eax, eax
je 0x408d4e
mov eax, dword [0x5ba048]
test eax, eax
je 0x408d39
test eax, eax
je 0x408d22
xor edx, edx
mov dword [esp + 0x34], edx
mov dword [esp + 0xd8], edx
mov edi, dword [0x836304]
mov eax, dword [edi]
lea ecx, [esp + 0x34]
push edx
push ecx
push 2
push dword [0x59cce4]
push 0x100
push 0x200
push edi
call dword [eax + 0x90]
test eax, eax
je 0x407c97
push 0x840134
push 0x83b2b0
call fcn.0041fe58
add esp, 8
mov edx, dword [esp + 0x38]
test edx, edx
jle 0x4087d0
mov edi, 1
mov dword [esp + 0xd4], edi
mov ecx, 1
mov dword [esp + 0xec], ecx
xor edx, edx
mov dword [esp + 0x4c], edx
xor edi, edi
mov edx, dword [esp + 0x38]
lea ecx, [edx - 1]
mov eax, dword [esp + 0x9c]
lea edx, [eax - 1]
mov dword [esp + 0x84], edx
lea eax, [eax + eax]
add eax, eax
xor edx, edx
mov dword [esp + 0x3c], eax
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x90], edi
mov dword [esp + 0xbc], ebx
mov dword [esp + 0x78], esi
mov dword [esp + 0xa4], ebp
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x90]
mov eax, dword [eax + ecx*4 + 0x198]
mov ebx, dword [esp + 0x9c]
test ebx, ebx
jle 0x408d16
xor esi, esi
xor ebp, ebp
mov ebx, dword [esp + 0x4c]
lea ecx, [ebx + eax]
mov edi, dword [esp + 0x40]
sub edi, ebx
add edi, ebx
mov dword [esp + 0xb4], edi
mov edi, dword [esp + 0xa4]
lea ebx, [edi + edx]
mov dword [esp + 0xf4], ebx
lea ebx, [eax - 1]
mov dword [esp + 0x80], ebx
xor ebx, ebx
lea edi, [edi + edx + 0x280]
mov dword [esp + 0xa0], edi
mov dword [esp + 0xc0], ecx
mov dword [esp + 0xe0], eax
mov dword [esp + 0x44], edx
mov edx, dword [esp + 0xec]
mov edi, dword [esp + 0xa4]
mov eax, dword [edi + ebp*4 + 0x118]
mov dword [esp + 0xdc], eax
lea edi, [eax + eax]
add edi, edi
mov ecx, dword [esp + 0xe0]
imul ecx, edi
cmp ecx, dword [0x59c080]
jle 0x407de4
mov dword [0x59c080], ecx
push ecx
push dword [0x5ba028]
mov dword [esp + 0xf4], edx
call fcn.0047072f
mov edx, dword [esp + 0xf4]
add esp, 8
mov dword [0x5ba028], eax
test eax, eax
je 0x408904
movsx eax, byte [0x835b8c]
test eax, eax
je 0x407e03
mov eax, dword [esp + 0xa4]
cmp byte [eax + 0x10c], 2
je 0x40830a
mov ecx, dword [esp + 0x8c]
mov eax, dword [esp + 0x90]
cmp eax, ecx
je 0x407ffc
mov eax, dword [esp + 0x84]
cmp ebp, eax
je 0x407ee6
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0xc0]
cmp ecx, eax
jge 0x40830a
xor eax, eax
mov dword [esp + 0xcc], eax
lea eax, [esi + esi]
add eax, eax
mov dword [esp + 0xd0], eax
mov eax, ecx
imul eax, dword [esp + 0xbc]
mov dword [esp + 0xac], ebx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov ebx, eax
mov ebp, ecx
mov esi, dword [esp + 0xcc]
mov edx, dword [esp + 0xb8]
mov eax, dword [edx + 0xc0]
add eax, dword [esp + 0xd0]
lea edx, [ebx + ebx]
add edx, edx
add eax, edx
mov edx, esi
add edx, dword [0x5ba028]
push edi
push eax
push edx
call dword [0x5b9a6c]
add esp, 0xc
add esi, edi
add ebx, dword [esp + 0xbc]
inc ebp
mov edx, dword [esp + 0xc0]
cmp ebp, edx
jl 0x407e81
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, dword [esp + 0xec]
jmp 0x40830a
mov ecx, dword [esp + 0xbc]
sub ecx, esi
add ecx, ecx
add ecx, ecx
mov dword [esp + 0xb0], ecx
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0xc0]
cmp ecx, eax
jge 0x40830a
xor eax, eax
mov dword [esp + 0x48], eax
mov eax, edi
sub eax, dword [esp + 0xb0]
mov dword [esp + 0xcc], eax
lea eax, [esi + esi]
add eax, eax
mov dword [esp + 0xc8], eax
mov eax, ecx
imul eax, dword [esp + 0xbc]
mov dword [esp + 0xd0], eax
mov dword [esp + 0xc4], edi
mov dword [esp + 0xac], ebx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov ebx, ecx
mov ebp, eax
mov esi, dword [esp + 0x48]
mov edi, dword [esp + 0xb0]
mov eax, dword [esp + 0xb8]
mov eax, dword [eax + 0xc0]
add eax, dword [esp + 0xc8]
lea edx, [ebp + ebp]
add edx, edx
add eax, edx
mov edx, esi
add edx, dword [0x5ba028]
push edi
push eax
push edx
call dword [0x5b9a6c]
mov edx, dword [0x5ba028]
add edx, edi
add edx, esi
push dword [0x83576c]
mov eax, dword [esp + 0xdc]
push eax
push edx
call dword [0x5b9a68]
add esp, 0x18
add esi, dword [esp + 0xc4]
add ebp, dword [esp + 0xbc]
inc ebx
mov eax, dword [esp + 0xc0]
cmp ebx, eax
jl 0x407f72
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, dword [esp + 0xec]
jmp 0x40830a
mov eax, dword [esp + 0x84]
cmp ebp, eax
je 0x408162
mov eax, dword [esp + 0x4c]
mov dword [esp + 0xb0], eax
mov ecx, dword [esp + 0xb4]
cmp eax, ecx
jge 0x408929
xor eax, eax
mov dword [esp + 0xa8], eax
lea ecx, [esi + esi]
add ecx, ecx
mov dword [esp + 0xcc], ecx
mov eax, dword [esp + 0xb0]
imul eax, dword [esp + 0xbc]
mov dword [esp + 0xc8], eax
mov dword [esp + 0xac], ebx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov ebx, dword [esp + 0xa8]
mov ebp, eax
mov esi, dword [esp + 0xb0]
mov eax, dword [esp + 0xb8]
mov ecx, dword [eax + 0xc0]
add ecx, dword [esp + 0xcc]
lea edx, [ebp + ebp]
add edx, edx
add ecx, edx
mov eax, ebx
add eax, dword [0x5ba028]
push edi
push ecx
push eax
call dword [0x5b9a6c]
add esp, 0xc
add ebx, edi
add ebp, dword [esp + 0xbc]
inc esi
mov eax, dword [esp + 0xb4]
cmp esi, eax
jl 0x40807c
mov dword [esp + 0xa8], ebx
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, dword [esp + 0xec]
mov ecx, dword [esp + 0xb4]
mov eax, dword [esp + 0xc0]
cmp ecx, eax
jge 0x40830a
mov dword [esp + 0xac], ebx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov ebx, ecx
mov ebp, eax
mov esi, dword [esp + 0xa8]
mov eax, esi
add eax, dword [0x5ba028]
push dword [0x83576c]
push edi
push eax
call dword [0x5b9a68]
add esp, 0xc
add esi, edi
inc ebx
cmp ebx, ebp
jl 0x408121
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, dword [esp + 0xec]
jmp 0x40830a
mov eax, dword [esp + 0xbc]
sub eax, esi
add eax, eax
add eax, eax
mov dword [esp + 0xb0], eax
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0xd0], ecx
mov eax, dword [esp + 0xb4]
cmp ecx, eax
jge 0x408d08
xor eax, eax
mov dword [esp + 0xa8], eax
mov ecx, edi
sub ecx, dword [esp + 0xb0]
mov dword [esp + 0xc8], ecx
lea eax, [esi + esi]
add eax, eax
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0xd0]
imul eax, dword [esp + 0xbc]
mov dword [esp + 0x48], eax
mov dword [esp + 0xc4], edi
mov dword [esp + 0xac], ebx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov ebx, dword [esp + 0xa8]
mov ebp, eax
mov esi, dword [esp + 0xd0]
mov edi, dword [esp + 0xb0]
mov eax, dword [esp + 0xb8]
mov ecx, dword [eax + 0xc0]
add ecx, dword [esp + 0xcc]
lea edx, [ebp + ebp]
add edx, edx
add ecx, edx
mov eax, ebx
add eax, dword [0x5ba028]
push edi
push ecx
push eax
call dword [0x5b9a6c]
mov edx, dword [0x5ba028]
add edx, edi
add edx, ebx
push dword [0x83576c]
mov eax, dword [esp + 0xd8]
push eax
push edx
call dword [0x5b9a68]
add esp, 0x18
add ebx, dword [esp + 0xc4]
add ebp, dword [esp + 0xbc]
inc esi
mov eax, dword [esp + 0xb4]
cmp esi, eax
jl 0x408202
mov dword [esp + 0xa8], ebx
mov edi, dword [esp + 0xc4]
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, dword [esp + 0xec]
mov ecx, dword [esp + 0xb4]
mov eax, dword [esp + 0xc0]
cmp ecx, eax
jge 0x40830a
mov dword [esp + 0xac], ebx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov ebx, ecx
mov ebp, eax
mov esi, dword [esp + 0xa8]
mov eax, esi
add eax, dword [0x5ba028]
push dword [0x83576c]
push edi
push eax
call dword [0x5b9a68]
add esp, 0xc
add esi, edi
inc ebx
cmp ebx, ebp
jl 0x4082ce
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, dword [esp + 0xec]
movsx eax, byte [0x835740]
test eax, eax
je 0x40832e
movsx eax, byte [0x59cc1c]
test eax, eax
je 0x408327
mov ecx, 0x100005
jmp 0x408333
mov ecx, 5
jmp 0x408333
mov ecx, 5
movsx eax, byte [0x83574c]
test eax, eax
jne 0x4083b5
mov eax, dword [esp + 0x88]
test eax, eax
je 0x408353
mov edx, 1
jmp 0x408497
mov dword [esp + 0xa8], ecx
mov ecx, dword [0x836304]
mov eax, dword [ecx]
xor edi, edi
push edi
mov edx, dword [esp + 0xa4]
push edx
push edi
push dword [0x8362fc]
mov edx, 1
push edx
push edx
mov edx, dword [esp + 0xf8]
push edx
mov edx, dword [esp + 0xf8]
push edx
push ecx
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0xcc], ecx
call dword [eax + 0x5c]
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0xd4], eax
mov edx, 1
jmp 0x408497
cmp edx, 1
jne 0x40842b
mov eax, dword [esp + 0x88]
test eax, eax
je 0x4083cf
mov edx, 2
jmp 0x408497
mov dword [esp + 0xa8], ecx
mov ecx, dword [0x836304]
mov eax, dword [ecx]
xor edi, edi
push edi
mov edx, dword [esp + 0xa4]
push edx
push edi
push dword [0x8362fc]
push 1
push 2
mov edx, dword [esp + 0xf8]
push edx
mov edx, dword [esp + 0xf8]
push edx
push ecx
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0xcc], ecx
call dword [eax + 0x5c]
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0xd4], eax
mov edx, 2
jmp 0x408497
mov eax, dword [esp + 0x88]
test eax, eax
je 0x40843d
mov edx, 4
jmp 0x408497
mov dword [esp + 0xa8], ecx
mov ecx, dword [0x836304]
mov eax, dword [ecx]
xor edi, edi
push edi
mov edx, dword [esp + 0xa4]
push edx
push edi
push dword [0x8362fc]
push 1
push 4
mov edx, dword [esp + 0xf8]
push edx
mov edx, dword [esp + 0xf8]
push edx
push ecx
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0xcc], ecx
call dword [eax + 0x5c]
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0xd4], eax
mov edx, 4
mov eax, dword [esp + 0xd4]
test eax, eax
jl 0x408cda
mov dword [esp + 0xf0], 0
mov eax, dword [0x5ba028]
mov dword [esp + 0xc4], eax
movsx edi, byte [0x835b8c]
test edi, edi
je 0x4084da
mov eax, dword [esp + 0xa4]
cmp byte [eax + 0x10c], 2
jne 0x4084da
xor edx, edx
test edx, edx
jbe 0x40876b
xor edi, edi
mov dword [esp + 0xa8], ecx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov eax, dword [esp + 0xf4]
mov ebp, dword [eax + ebx + 0x280]
mov esi, dword [ebp]
lea edx, [esp + 0xf0]
push edx
push edi
push ebp
call dword [esi + 0x48]
test eax, eax
jne 0x40871a
mov eax, dword [0x836304]
mov ecx, edi
mov ebp, dword [esp + 0xdc]
sar ebp, cl
mov ecx, edi
mov esi, dword [esp + 0xe0]
sar esi, cl
mov ecx, dword [eax]
lea edx, [esp + 0xd8]
push 0
push edx
push 2
push dword [0x59cce4]
push esi
push ebp
push eax
call dword [ecx + 0x90]
test eax, eax
je 0x408574
push 0x840134
push 0x83b2b0
call fcn.0041fe58
add esp, 8
cmp edi, 1
je 0x408c74
cmp edi, 2
je 0x408c00
cmp edi, 3
je 0x408b8c
cmp edi, 4
je 0x408b18
cmp edi, 5
je 0x408aa4
cmp edi, 6
je 0x408a30
cmp edi, 7
je 0x4089c5
cmp edi, 8
je 0x40896f
mov edx, dword [esp + 0xd8]
mov dword [esp + 0xb0], edx
mov ecx, dword [edx]
lea eax, [esp + 0xe4]
push 0x2000
push 0
push eax
push edx
call dword [ecx + 0x34]
test eax, eax
jl 0x408953
test esi, esi
jle 0x40863e
xor edx, edx
add ebp, ebp
add ebp, ebp
mov eax, dword [esp + 0xc4]
mov dword [esp + 0xd0], edi
mov dword [esp + 0xac], ebx
mov ebx, eax
mov edi, esi
mov esi, edx
mov ecx, esi
imul ecx, dword [esp + 0xe4]
add ecx, dword [esp + 0xe8]
push ebp
push ebx
push ecx
call dword [0x5b9a6c]
add esp, 0xc
add ebx, ebp
inc esi
cmp esi, edi
jl 0x40860c
mov edi, dword [esp + 0xd0]
mov ebx, dword [esp + 0xac]
mov eax, dword [esp + 0xb0]
mov edx, dword [eax]
push eax
call dword [edx + 0x38]
test eax, eax
jl 0x408937
xor eax, eax
test eax, eax
jne 0x4086ea
movsx eax, byte [0x835740]
test eax, eax
jne 0x4086a5
mov edx, dword [0x836304]
mov ebp, dword [edx]
xor eax, eax
push eax
push dword [esp + 0xf4]
push eax
push dword [esp + 0xe4]
push edx
call dword [ebp + 0x78]
mov dword [esp + 0xd4], eax
test eax, eax
je 0x4086cc
push 0x83fe34
push 0x83b2b0
call fcn.0041fe58
add esp, 8
jmp 0x4086cc
xor edx, edx
push dword [0x83576c]
mov eax, dword [esp + 0xac]
push eax
push edx
push edx
push dword [esp + 0xe8]
push edx
push edx
push dword [esp + 0x10c]
call fcn.004b2a0f
mov eax, dword [esp + 0xf0]
test eax, eax
je 0x4086dd
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov dword [esp + 0xf0], 0
jmp 0x4086fc
push 0x840288
push 0x83f9d0
call fcn.00409024
add esp, 8
mov eax, dword [esp + 0xd8]
test eax, eax
je 0x40870d
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov dword [esp + 0xd8], 0
jmp 0x40872f
push edi
push 2
push 0x83fe80
push 0x83b2b0
call fcn.0041fe58
add esp, 0x10
mov eax, dword [esp + 0xf0]
test eax, eax
je 0x408740
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov dword [esp + 0xf0], 0
inc edi
mov eax, dword [esp + 0xec]
cmp edi, eax
jb 0x408500
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, eax
mov eax, dword [esp + 0xdc]
lea esi, [esi + eax]
add ebx, 4
add dword [esp + 0xa0], 4
inc ebp
mov ecx, dword [esp + 0x9c]
cmp ebp, ecx
jl 0x407d88
mov dword [esp + 0xec], edx
mov ecx, dword [esp + 0xc0]
mov edx, dword [esp + 0x44]
mov dword [esp + 0x4c], ecx
add edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x90]
inc eax
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x38]
cmp eax, ecx
jl 0x407d06
mov esi, dword [esp + 0x78]
mov ebp, dword [esp + 0xa4]
fld dword [0x836370]
fnstcw word [esp + 0x28]
movzx eax, word [esp + 0x28]
or eax, 0xc00
mov dword [esp + 0x30], eax
fldcw word [esp + 0x30]
fistp qword [ebp + 0x238]
fldcw word [esp + 0x28]
fld dword [0x836374]
fnstcw word [esp + 0x28]
movzx eax, word [esp + 0x28]
or eax, 0xc00
mov dword [esp + 0x30], eax
fldcw word [esp + 0x30]
fistp qword [ebp + 0x240]
fldcw word [esp + 0x28]
mov edi, dword [0x836378]
mov dword [ebp + 0x88], edi
mov edx, dword [0x83637c]
mov dword [ebp + 0x8c], edx
mov dword [ebp + 0xf0], edi
mov dword [ebp + 0xf4], edx
xor ecx, ecx
mov byte [ebp + 0x10d], cl
mov dword [ebp + 0x110], esi
mov esi, dword [esp + 0x7c]
mov dword [ebp + 0x114], esi
mov dword [0x836378], ecx
mov dword [0x83637c], ecx
mov dword [0x836370], ecx
mov dword [0x836374], ecx
mov eax, dword [esp + 0x34]
test eax, eax
je 0x40887e
mov edx, dword [eax]
push eax
call dword [edx + 8]
xor eax, eax
add esp, 0xf8
pop ebx
pop ebp
pop esi
pop edi
ret
fild dword [0x835e18]
fnstcw word [esp + 0x28]
movzx eax, word [esp + 0x28]
or eax, 0xc00
mov dword [esp + 0x30], eax
fldcw word [esp + 0x30]
fistp dword [ebp + 0x118]
fldcw word [esp + 0x28]
fild dword [0x835e1c]
fnstcw word [esp + 0x28]
movzx eax, word [esp + 0x28]
or eax, 0xc00
mov dword [esp + 0x30], eax
fldcw word [esp + 0x30]
fistp dword [ebp + 0x198]
fldcw word [esp + 0x28]
mov edx, 1
mov dword [esp + 0x4c], edx
mov ecx, 1
mov byte [ebp + 0x10e], cl
mov edx, 1
mov dword [esp + 0x38], edx
mov edx, 1
mov byte [ebp + 0x10f], dl
jmp 0x407b77
push 0x840120
push 0x83b2b0
mov dword [esp + 0xf4], edx
call fcn.00409024
mov edx, dword [esp + 0xf4]
add esp, 8
jmp 0x407de4
xor eax, eax
mov dword [esp + 0xa8], eax
jmp 0x4080e4
push 0x840508
push 0x83b2b0
call fcn.0041fe58
add esp, 8
mov eax, 2
jmp 0x408655
push 0x8404f4
push 0x83b2b0
call fcn.0041fe58
add esp, 8
mov eax, 1
jmp 0x408655
mov eax, dword [0x5ba048]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xdc]
lea ecx, [edx - 1]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5ba028]
xor ecx, ecx
call fcn.00408f10
jmp 0x4085bc
mov eax, dword [esp + 0xdc]
lea edx, [eax - 1]
mov dword [esp + 0xb0], edx
mov eax, dword [0x5ba044]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5ba028]
xor ecx, ecx
call fcn.00408f10
jmp 0x4085bc
mov eax, dword [esp + 0xdc]
lea edx, [eax - 1]
mov dword [esp + 0xb0], edx
mov eax, dword [0x5ba040]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5ba028]
xor ecx, ecx
call fcn.00408f10
cmp edi, 7
je 0x4089d6
jmp 0x4085bc
mov eax, dword [esp + 0xdc]
lea edx, [eax - 1]
mov dword [esp + 0xb0], edx
mov eax, dword [0x5ba03c]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5ba028]
xor ecx, ecx
call fcn.00408f10
cmp edi, 6
je 0x408a41
jmp 0x4085bc
mov eax, dword [esp + 0xdc]
lea edx, [eax - 1]
mov dword [esp + 0xb0], edx
mov eax, dword [0x5ba038]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5ba028]
xor ecx, ecx
call fcn.00408f10
cmp edi, 5
je 0x408ab5
jmp 0x4085bc
mov eax, dword [esp + 0xdc]
lea edx, [eax - 1]
mov dword [esp + 0xb0], edx
mov eax, dword [0x5ba034]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5ba028]
xor ecx, ecx
call fcn.00408f10
cmp edi, 4
je 0x408b29
jmp 0x4085bc
mov eax, dword [esp + 0xdc]
lea edx, [eax - 1]
mov dword [esp + 0xb0], edx
mov eax, dword [0x5ba030]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5ba028]
xor ecx, ecx
call fcn.00408f10
cmp edi, 3
je 0x408b9d
jmp 0x4085bc
mov eax, dword [0x5ba02c]
mov dword [esp + 0xc4], eax
mov edx, dword [esp + 0xdc]
lea ecx, [edx - 1]
mov dword [esp + 0xb0], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5ba028]
xor ecx, ecx
call fcn.00408f10
cmp edi, 2
je 0x408c11
jmp 0x4085bc
push 0x840160
push 0x83b2b0
call fcn.00409024
push 0x840260
push 0x83b2b0
call fcn.0041fe58
mov eax, 0xffffffff
add esp, 0x108
pop ebx
pop ebp
pop esi
pop edi
ret
xor eax, eax
mov dword [esp + 0xa8], eax
jmp 0x408295
mov ecx, dword [esp + 0x4c]
lea ecx, [ecx + eax]
jmp 0x4087a2
push 0x840120
push 0x83b2b0
call fcn.00409024
add esp, 8
jmp 0x407c4d
push 0x100
call fcn.004704cc
pop ecx
mov dword [0x5ba048], eax
jmp 0x407c45
push 0x840120
push 0x83b2b0
call fcn.00409024
add esp, 8
jmp 0x407c38
push 0x400
call fcn.004704cc
pop ecx
mov dword [0x5ba044], eax
jmp 0x407c30
push 0x840120
push 0x83b2b0
call fcn.00409024
add esp, 8
jmp 0x407c23
push 0x1000
call fcn.004704cc
pop ecx
mov dword [0x5ba040], eax
jmp 0x407c1b
push 0x840120
push 0x83b2b0
call fcn.00409024
add esp, 8
jmp 0x407c0e
push 0x4000
call fcn.004704cc
pop ecx
mov dword [0x5ba03c], eax
jmp 0x407c06
push 0x840120
push 0x83b2b0
call fcn.00409024
add esp, 8
jmp 0x407bf9
push 0x10000
call fcn.004704cc
pop ecx
mov dword [0x5ba038], eax
jmp 0x407bf1
push 0x840120
push 0x83b2b0
call fcn.00409024
add esp, 8
jmp 0x407be4
push 0x40000
call fcn.004704cc
pop ecx
mov dword [0x5ba034], eax
jmp 0x407bdc
push 0x840120
push 0x83b2b0
call fcn.00409024
add esp, 8
jmp 0x407bcf
push 0x100000
call fcn.004704cc
pop ecx
mov dword [0x5ba030], eax
jmp 0x407bc7
push 0x840120
push 0x83b2b0
call fcn.00409024
add esp, 8
jmp 0x407bba
push 0x400000
call fcn.004704cc
pop ecx
mov dword [0x5ba02c], eax
jmp 0x407bb2
push 0x840120
push 0x83b2b0
call fcn.00409024
add esp, 8
jmp 0x407ba5
push dword [0x59c080]
call fcn.004704cc
pop ecx
mov dword [0x5ba028], eax
jmp 0x407b9d
mov dword [esp + 0x38], ecx
mov edx, ecx
mov byte [ebp + 0x10f], dl
push eax
mov eax, dword [esp + 0x44]
push eax
push ebx
push 0x8400ec
push 0x83b2b0
call fcn.00409024
mov eax, 0xffffffff
add esp, 0x10c
pop ebx
pop ebp
pop esi
pop edi
ret
xor eax, eax
push eax
push eax
push 0x8400d4
push eax
call dword [0x57841c]
mov eax, 0xffffffff
add esp, 0xf8
pop ebx
pop ebp
pop esi
pop edi
ret