Function at 0x406c53
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1f8
push ebx
push esi
push edi
or dword [ebp - 0x20], 0xffffffff
mov byte [ebp - 0x1c1], 0
and dword [ebp - 0x10], 0
or dword [ebp - 0x18], 0xffffffff
push 0x80
push 0
lea eax, [ebp - 0x1bc]
push eax
call sub.CRTDLL.DLL_memset
add esp, 0xc
and dword [ebp - 4], 0
and dword [ebp - 0x138], 0
jmp 0x407782
mov eax, dword [ebp - 4]
inc dword [ebp - 4]
mov edx, dword [ebp + 0xc]
cmp byte [edx + eax], 0x25
jne 0x407782
mov eax, dword [ebp - 4]
mov edx, dword [ebp + 0xc]
cmp byte [edx + eax], 0x25
jne 0x406cbf
inc dword [ebp - 4]
jmp 0x407782
and dword [ebp - 8], 0
and dword [ebp - 0x13c], 0
lea eax, [ebp - 4]
push eax
push dword [ebp + 0xc]
call fcn.00406b89
add esp, 8
mov dword [ebp - 0x14], eax
xor eax, eax
cmp dword [ebp - 0x14], 0xffffffff
setne al
mov dword [ebp - 0x1c8], eax
or eax, eax
setne al
mov byte [ebp - 0x12d], al
test byte [ebp - 0x12d], 1
jne 0x406d08
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x40
jl 0x406d20
mov edi, dword [ebp - 4]
shl edi, 8
add edi, 3
mov eax, edi
neg eax
jmp 0x407f78
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x14], eax
jle 0x406d2e
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], eax
and dword [ebp - 0x24], 0
or dword [ebp - 0x134], 0xffffffff
or dword [ebp - 0x2c], 0xffffffff
or dword [ebp - 0x28], 0xffffffff
jmp 0x4072a4
mov eax, dword [ebp - 4]
inc dword [ebp - 4]
mov edx, dword [ebp + 0xc]
mov al, byte [edx + eax]
mov byte [ebp - 9], al
movsx eax, byte [ebp - 9]
cmp al, 0x5a
je 0x4072a4
ja 0x406d8f
cmp eax, 0x20
jl 0x407292
cmp eax, 0x40
jg 0x406d78
jmp dword [eax*4 + 0x40d074]
cmp eax, 0x49
je 0x407175
cmp eax, 0x4c
je 0x407130
jmp 0x407292
cmp eax, 0x71
je 0x40716a
cmp eax, 0x74
je 0x40714a
jg 0x406dc3
cmp eax, 0x68
je 0x4070cc
cmp eax, 0x6a
je 0x407159
cmp eax, 0x6c
je 0x4070fc
jmp 0x407292
cmp eax, 0x77
je 0x40723e
cmp eax, 0x7a
je 0x40713b
jmp 0x407292
test byte [ebp - 8], 0x40
je 0x4070e4
mov edi, dword [ebp - 4]
shl edi, 8
add edi, 2
mov eax, edi
neg eax
jmp 0x407f78
test byte [ebp - 8], 0x20
je 0x4070f3
or byte [ebp - 8], 0x40
jmp 0x4072a4
or byte [ebp - 8], 0x20
jmp 0x4072a4
test word [ebp - 8], 0x100
je 0x407116
mov edi, dword [ebp - 4]
shl edi, 8
add edi, 2
mov eax, edi
neg eax
jmp 0x407f78
test byte [ebp - 8], 0x80
je 0x407127
or word [ebp - 8], 0x100
jmp 0x4072a4
or byte [ebp - 8], 0x80
jmp 0x4072a4
or word [ebp - 8], 0x200
jmp 0x4072a4
or word [ebp - 8], 0x400
or byte [ebp - 8], 0x80
jmp 0x4072a4
or word [ebp - 8], 0x800
or byte [ebp - 8], 0x80
jmp 0x4072a4
or word [ebp - 8], 0x1000
or word [ebp - 8], 0x100
jmp 0x4072a4
or word [ebp - 8], 0x100
jmp 0x4072a4
test dword [ebp - 8], 0x40000000
je 0x407190
mov edi, dword [ebp - 4]
shl edi, 8
add edi, 2
mov eax, edi
neg eax
jmp 0x407f78
test dword [ebp - 8], 0x22001fe0
je 0x4071ab
mov edi, dword [ebp - 4]
shl edi, 8
add edi, 2
mov eax, edi
neg eax
jmp 0x407f78
mov eax, dword [ebp - 4]
mov edx, dword [ebp + 0xc]
cmp byte [edx + eax], 0x36
jne 0x4071cb
cmp byte [eax + edx + 1], 0x34
jne 0x4071cb
mov dword [ebp - 0x28], 8
add dword [ebp - 4], 2
jmp 0x407235
mov eax, dword [ebp - 4]
mov edx, dword [ebp + 0xc]
cmp byte [edx + eax], 0x33
jne 0x4071eb
cmp byte [eax + edx + 1], 0x32
jne 0x4071eb
mov dword [ebp - 0x28], 4
add dword [ebp - 4], 2
jmp 0x407235
mov eax, dword [ebp - 4]
mov edx, dword [ebp + 0xc]
cmp byte [edx + eax], 0x31
jne 0x40720b
cmp byte [eax + edx + 1], 0x36
jne 0x40720b
mov dword [ebp - 0x28], 2
add dword [ebp - 4], 2
jmp 0x407235
mov eax, dword [ebp - 4]
mov edx, dword [ebp + 0xc]
cmp byte [edx + eax], 0x38
jne 0x407223
mov dword [ebp - 0x28], 1
inc dword [ebp - 4]
jmp 0x407235
mov edi, dword [ebp - 4]
shl edi, 8
add edi, 2
mov eax, edi
neg eax
jmp 0x407f78
or dword [ebp - 8], 0x40000000
jmp 0x4072a4
or dword [ebp - 8], 0x2000000
jmp 0x4072a4
mov edi, dword [ebp - 4]
shl edi, 8
add edi, 2
mov eax, edi
neg eax
jmp 0x407f78
mov eax, dword [ebp - 4]
mov edx, dword [ebp + 0xc]
movsx eax, byte [edx + eax]
push eax
call fcn.00406ae0
pop ecx
mov ebx, eax
or ebx, ebx
setne bl
test bl, 1
jne 0x406d46
test dword [ebp - 8], 0x20000
je 0x40730d
mov edi, dword [ebp - 0x24]
lea edi, [ebp + edi*2 - 0x1bc]
inc word [edi]
imul eax, dword [ebp - 0x10], 0x58
mov edx, dword [ebp + 0x10]
mov dword [edx + eax], 7
imul eax, dword [ebp - 0x10], 0x58
mov edx, dword [ebp + 0x10]
and dword [eax + edx + 4], 0
mov edi, dword [ebp - 0x24]
mov esi, dword [ebp - 0x10]
mov dword [ebp + edi*4 - 0x12c], esi
mov eax, esi
lea edx, [eax + 1]
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x24], eax
test dword [ebp - 8], 0x80000
je 0x40735e
mov edi, dword [ebp - 0x134]
lea edi, [ebp + edi*2 - 0x1bc]
inc word [edi]
imul eax, dword [ebp - 0x10], 0x58
mov edx, dword [ebp + 0x10]
mov dword [edx + eax], 7
imul eax, dword [ebp - 0x10], 0x58
mov edx, dword [ebp + 0x10]
and dword [eax + edx + 4], 0
mov edi, dword [ebp - 0x134]
mov esi, dword [ebp - 0x10]
mov dword [ebp + edi*4 - 0x12c], esi
mov eax, esi
lea edx, [eax + 1]
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x134], eax
test dword [ebp - 8], 0x200000
je 0x4073a6
mov edi, dword [ebp - 0x2c]
lea edi, [ebp + edi*2 - 0x1bc]
inc word [edi]
imul eax, dword [ebp - 0x10], 0x58
mov edx, dword [ebp + 0x10]
mov dword [edx + eax], 7
imul eax, dword [ebp - 0x10], 0x58
mov edx, dword [ebp + 0x10]
and dword [eax + edx + 4], 0
mov edi, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x10]
mov dword [ebp + edi*4 - 0x12c], esi
mov eax, esi
lea edx, [eax + 1]
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x2c], eax
test dword [ebp - 8], 0x20000000
je 0x4073ee
mov edi, dword [ebp - 0x28]
lea edi, [ebp + edi*2 - 0x1bc]
inc word [edi]
imul eax, dword [ebp - 0x10], 0x58
mov edx, dword [ebp + 0x10]
mov dword [edx + eax], 7
imul eax, dword [ebp - 0x10], 0x58
mov edx, dword [ebp + 0x10]
and dword [eax + edx + 4], 0
mov edi, dword [ebp - 0x28]
mov esi, dword [ebp - 0x10]
mov dword [ebp + edi*4 - 0x12c], esi
mov eax, esi
lea edx, [eax + 1]
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x28], eax
mov edi, dword [ebp - 0x14]
mov esi, dword [ebp - 0x10]
mov dword [ebp + edi*4 - 0x12c], esi
mov eax, dword [ebp - 4]
inc dword [ebp - 4]
mov edx, dword [ebp + 0xc]
movsx eax, byte [edx + eax]
cmp al, 0x53
je 0x407480
ja 0x407427
cmp eax, 0x41
jl 0x4076dc
cmp eax, 0x47
jg 0x4076dc
jmp dword [eax*4 + 0x40d074]
cmp eax, 0x58
jl 0x4076dc
cmp eax, 0x75
jg 0x40743c
jmp dword [eax*4 + 0x40d034]
cmp eax, 0x78
je 0x407621
jmp 0x4076dc
or dword [ebp - 8], 0x2000000
test byte [ebp - 8], 0x80
je 0x407496
or dword [ebp - 8], 0x2000000
jmp 0x4074a3
test byte [ebp - 8], 0x20
je 0x4074a3
and dword [ebp - 8], 0xfdffffff
imul eax, dword [ebp - 0x10], 0x58
mov edx, dword [ebp + 0x10]
mov dword [edx + eax], 4
jmp 0x4076ee
or word [ebp - 8], 0x4000
and dword [ebp - 8], 0xffdfffff
mov dword [ebp - 0x2c], 0x10
imul eax, dword [ebp - 0x10], 0x58
mov edx, dword [ebp + 0x10]
mov dword [edx + eax], 1
jmp 0x4076ee
mov edi, dword [ebp - 4]
shl edi, 8
add edi, 2
mov eax, edi
neg eax
jmp 0x407f78
mov edi, dword [ebp - 0x14]
lea edi, [ebp + edi*2 - 0x1bc]
inc word [edi]
imul eax, dword [ebp - 0x10], 0x58
mov edx, dword [ebp + 0x10]
mov ecx, dword [ebp - 4]
mov dword [eax + edx + 0x18], ecx
imul eax, dword [ebp - 0x10], 0x58
mov edx, dword [ebp + 0x10]
mov ecx, dword [ebp - 8]
mov dword [eax + edx + 4], ecx
imul eax, dword [ebp - 0x10], 0x58
mov edx, dword [ebp + 0x10]
mov ecx, dword [ebp - 0x24]
mov dword [eax + edx + 8], ecx
imul eax, dword [ebp - 0x10], 0x58
mov edx, dword [ebp + 0x10]
mov ecx, dword [ebp - 0x134]
mov dword [eax + edx + 0xc], ecx
cmp dword [ebp - 0x2c], 0xffffffff
jne 0x407748
mov dword [ebp - 0x1d0], 0xa
jmp 0x407751
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1d0], eax
imul eax, dword [ebp - 0x10], 0x58
mov edx, dword [ebp + 0x10]
mov ecx, dword [ebp - 0x1d0]
mov dword [eax + edx + 0x10], ecx
imul eax, dword [ebp - 0x10], 0x58
mov edx, dword [ebp + 0x10]
mov ecx, dword [ebp - 0x28]
mov dword [eax + edx + 0x14], ecx
inc dword [ebp - 0x10]
test byte [ebp - 0x12d], 1
jne 0x407782
inc dword [ebp - 0x138]
mov eax, dword [ebp - 4]
mov edx, dword [ebp + 0xc]
cmp byte [edx + eax], 0
jne 0x406c98
and dword [ebp - 0x1c], 0
jmp 0x407f69
mov edi, dword [ebp - 0x1c]
mov edi, dword [ebp + edi*4 - 0x12c]
mov dword [ebp - 0x18], edi
imul eax, dword [ebp - 0x18], 0x58
add eax, dword [ebp + 0x10]
cmp dword [eax], 7
je 0x4077c1
test dword [eax + 4], 0x8000000
jne case.default.0x4077dc
imul eax, dword [ebp - 0x18], 0x58
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + eax]
or eax, eax
jl case.default.0x4077dc
cmp eax, 8
jg case.default.0x4077dc
jmp dword [eax*4 + 0x40d20c]
cmp dword [ebp + 0x18], 0
jne 0x4077fd
mov eax, dword [ebp + 0x14]
add eax, 4
mov dword [ebp + 0x14], eax
mov eax, dword [eax - 4]
mov dword [ebp - 0x1cc], eax
jmp 0x40780c
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp + 0x18]
mov edi, dword [esi + edi*4]
mov dword [ebp - 0x1cc], edi
imul edi, dword [ebp - 0x18], 0x58
mov esi, dword [ebp + 0x10]
mov ebx, dword [ebp - 0x1cc]
mov dword [edi + esi + 0x20], ebx
jmp case.default.0x4077dc
cmp dword [ebp + 0x18], 0
jne 0x40783c
mov eax, dword [ebp + 0x14]
add eax, 4
mov dword [ebp + 0x14], eax
mov eax, dword [eax - 4]
mov dword [ebp - 0x1cc], eax
jmp 0x40784b
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp + 0x18]
mov edi, dword [esi + edi*4]
mov dword [ebp - 0x1cc], edi
imul edi, dword [ebp - 0x18], 0x58
mov esi, dword [ebp + 0x10]
mov ebx, dword [ebp - 0x1cc]
mov dword [edi + esi + 0x20], ebx
jmp case.default.0x4077dc
cmp dword [ebp + 8], 2
jne 0x4078f3
cmp dword [ebp + 0x18], 0
jne 0x40788d
mov eax, dword [ebp + 0x14]
add eax, 4
mov dword [ebp + 0x14], eax
imul edx, dword [ebp - 0x18], 0x58
mov ecx, dword [ebp + 0x10]
mov eax, dword [eax - 4]
mov dword [edx + ecx + 0x20], eax
jmp case.default.0x4077dc
imul eax, dword [ebp - 0x18], 0x58
mov edx, dword [ebp + 0x10]
cmp dword [edx + eax], 3
jne 0x4078b3
imul edi, dword [ebp - 0x18], 0x58
mov esi, dword [ebp + 0x10]
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ebp + 0x18]
mov ebx, dword [edx + ebx*4]
mov dword [edi + esi + 0x20], ebx
jmp case.default.0x4077dc
imul eax, dword [ebp - 0x18], 0x58
mov edx, dword [ebp + 0x10]
test byte [eax + edx + 4], 0x20
je 0x4078da
imul edi, dword [ebp - 0x18], 0x58
mov esi, dword [ebp + 0x10]
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ebp + 0x18]
mov ebx, dword [edx + ebx*4]
mov dword [edi + esi + 0x20], ebx
jmp case.default.0x4077dc
imul edi, dword [ebp - 0x18], 0x58
mov esi, dword [ebp + 0x10]
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ebp + 0x18]
mov ebx, dword [edx + ebx*4]
mov dword [edi + esi + 0x20], ebx
jmp case.default.0x4077dc
imul eax, dword [ebp - 0x18], 0x58
mov edx, dword [ebp + 0x10]
test dword [eax + edx + 4], 0x60000000
je 0x407991
imul eax, dword [ebp - 0x18], 0x58
mov edx, dword [ebp + 0x10]
test dword [eax + edx + 4], 0x20000000
je 0x40792e
mov edi, dword [ebp + 0x10]
imul esi, dword [ebp - 0x18], 0x58
imul esi, dword [esi + edi + 0x14], 0x58
mov edi, dword [esi + edi + 0x20]
mov dword [ebp - 0x28], edi
jmp 0x40793c
imul eax, dword [ebp - 0x18], 0x58
mov edx, dword [ebp + 0x10]
mov eax, dword [eax + edx + 0x14]
mov dword [ebp - 0x28], eax
imul eax, dword [ebp - 0x18], 0x58
mov edx, dword [ebp + 0x10]
lea eax, [eax + edx + 4]
and dword [eax], 0xffffe27f
cmp dword [ebp - 0x28], 4
jle 0x407991
cmp dword [ebp - 0x28], 4
jg 0x407969
imul eax, dword [ebp - 0x18], 0x58
mov edx, dword [ebp + 0x10]
lea eax, [eax + edx + 4]
or byte [eax], 0x80
jmp 0x407991
cmp dword [ebp - 0x28], 8
jg 0x407981
imul eax, dword [ebp - 0x18], 0x58
mov edx, dword [ebp + 0x10]
lea eax, [eax + edx + 4]
or word [eax], 0x100
jmp 0x407991
imul eax, dword [ebp - 0x18], 0x58
mov edx, dword [ebp + 0x10]
lea eax, [eax + edx + 4]
or word [eax], 0x1000
imul eax, dword [ebp - 0x18], 0x58
mov edx, dword [ebp + 0x10]
test word [eax + edx + 4], 0x400
je 0x4079fa
cmp dword [ebp + 0x18], 0
jne 0x4079c3
mov edi, dword [ebp + 0x14]
add edi, 4
mov dword [ebp + 0x14], edi
mov eax, dword [edi - 4]
xor edx, edx
mov dword [ebp - 0x1d4], edx
mov dword [ebp - 0x1d8], eax
jmp 0x4079dc
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp + 0x18]
mov edi, dword [esi + edi*4]
mov eax, dword [edi]
xor edx, edx
mov dword [ebp - 0x1d4], edx
mov dword [ebp - 0x1d8], eax
imul edi, dword [ebp - 0x18], 0x58
add edi, dword [ebp + 0x10]
mov edx, dword [ebp - 0x1d4]
mov eax, dword [ebp - 0x1d8]
mov dword [edi + 0x24], edx
mov dword [edi + 0x20], eax
jmp case.default.0x4077dc
imul eax, dword [ebp - 0x18], 0x58
mov edx, dword [ebp + 0x10]
test word [eax + edx + 4], 0x800
je 0x407a63
cmp dword [ebp + 0x18], 0
jne 0x407a2c
mov edi, dword [ebp + 0x14]
add edi, 4
mov dword [ebp + 0x14], edi
mov eax, dword [edi - 4]
xor edx, edx
mov dword [ebp - 0x1dc], edx
mov dword [ebp - 0x1e0], eax
jmp 0x407a45
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp + 0x18]
mov edi, dword [esi + edi*4]
mov eax, dword [edi]
xor edx, edx
mov dword [ebp - 0x1dc], edx
mov dword [ebp - 0x1e0], eax
imul edi, dword [ebp - 0x18], 0x58
add edi, dword [ebp + 0x10]
mov edx, dword [ebp - 0x1dc]
mov eax, dword [ebp - 0x1e0]
mov dword [edi + 0x24], edx
mov dword [edi + 0x20], eax
jmp case.default.0x4077dc
imul eax, dword [ebp - 0x18], 0x58
mov edx, dword [ebp + 0x10]
test word [eax + edx + 4], 0x1000
je 0x407ad0
cmp dword [ebp + 0x18], 0
jne 0x407a98
mov edi, dword [ebp + 0x14]
add edi, 8
mov dword [ebp + 0x14], edi
add edi, 0xfffffff8
mov edx, dword [edi + 4]
mov eax, dword [edi]
mov dword [ebp - 0x1e4], edx
mov dword [ebp - 0x1e8], eax
jmp 0x407ab2
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp + 0x18]
mov edi, dword [esi + edi*4]
mov edx, dword [edi + 4]
mov eax, dword [edi]
mov dword [ebp - 0x1e4], edx
mov dword [ebp - 0x1e8], eax
imul edi, dword [ebp - 0x18], 0x58
add edi, dword [ebp + 0x10]
mov edx, dword [ebp - 0x1e4]
mov eax, dword [ebp - 0x1e8]
mov dword [edi + 0x24], edx
mov dword [edi + 0x20], eax
jmp case.default.0x4077dc
imul eax, dword [ebp - 0x18], 0x58
mov edx, dword [ebp + 0x10]
test word [eax + edx + 4], 0x100
je 0x407b3d
cmp dword [ebp + 0x18], 0
jne 0x407b05
mov edi, dword [ebp + 0x14]
add edi, 8
mov dword [ebp + 0x14], edi
add edi, 0xfffffff8
mov edx, dword [edi + 4]
mov eax, dword [edi]
mov dword [ebp - 0x1ec], edx
mov dword [ebp - 0x1f0], eax
jmp 0x407b1f
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp + 0x18]
mov edi, dword [esi + edi*4]
mov edx, dword [edi + 4]
mov eax, dword [edi]
mov dword [ebp - 0x1ec], edx
mov dword [ebp - 0x1f0], eax
imul edi, dword [ebp - 0x18], 0x58
add edi, dword [ebp + 0x10]
mov edx, dword [ebp - 0x1ec]
mov eax, dword [ebp - 0x1f0]
mov dword [edi + 0x24], edx
mov dword [edi + 0x20], eax
jmp case.default.0x4077dc
imul eax, dword [ebp - 0x18], 0x58
mov edx, dword [ebp + 0x10]
test byte [eax + edx + 4], 0x80
je 0x407ba4
cmp dword [ebp + 0x18], 0
jne 0x407b6d
mov edi, dword [ebp + 0x14]
add edi, 4
mov dword [ebp + 0x14], edi
mov eax, dword [edi - 4]
xor edx, edx
mov dword [ebp - 0x1f4], edx
mov dword [ebp - 0x1f8], eax
jmp 0x407b86
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp + 0x18]
mov edi, dword [esi + edi*4]
mov eax, dword [edi]
xor edx, edx
mov dword [ebp - 0x1f4], edx
mov dword [ebp - 0x1f8], eax
imul edi, dword [ebp - 0x18], 0x58
add edi, dword [ebp + 0x10]
mov edx, dword [ebp - 0x1f4]
mov eax, dword [ebp - 0x1f8]
mov dword [edi + 0x24], edx
mov dword [edi + 0x20], eax
jmp case.default.0x4077dc
cmp dword [ebp + 0x18], 0
jne 0x407bc7
mov edi, dword [ebp + 0x14]
add edi, 4
mov dword [ebp + 0x14], edi
imul esi, dword [ebp - 0x18], 0x58
add esi, dword [ebp + 0x10]
mov eax, dword [edi - 4]
xor edx, edx
mov dword [esi + 0x24], edx
mov dword [esi + 0x20], eax
jmp 0x407c3a
imul eax, dword [ebp - 0x18], 0x58
mov edx, dword [ebp + 0x10]
cmp dword [edx + eax], 3
jne 0x407bf3
imul edi, dword [ebp - 0x18], 0x58
add edi, dword [ebp + 0x10]
mov esi, dword [ebp - 0x1c]
mov ebx, dword [ebp + 0x18]
mov esi, dword [ebx + esi*4]
movsx esi, byte [esi]
mov eax, esi
xor edx, edx
mov dword [edi + 0x24], edx
mov dword [edi + 0x20], eax
jmp 0x407c3a
imul eax, dword [ebp - 0x18], 0x58
mov edx, dword [ebp + 0x10]
test byte [eax + edx + 4], 0x20
je 0x407c20
imul edi, dword [ebp - 0x18], 0x58
add edi, dword [ebp + 0x10]
mov esi, dword [ebp - 0x1c]
mov ebx, dword [ebp + 0x18]
mov esi, dword [ebx + esi*4]
movsx esi, word [esi]
mov eax, esi
xor edx, edx
mov dword [edi + 0x24], edx
mov dword [edi + 0x20], eax
jmp 0x407c3a
imul edi, dword [ebp - 0x18], 0x58
add edi, dword [ebp + 0x10]
mov esi, dword [ebp - 0x1c]
mov ebx, dword [ebp + 0x18]
mov esi, dword [ebx + esi*4]
mov eax, dword [esi]
xor edx, edx
mov dword [edi + 0x24], edx
mov dword [edi + 0x20], eax
imul eax, dword [ebp - 0x18], 0x58
mov edx, dword [ebp + 0x10]
mov eax, dword [eax + edx + 4]
test al, 0x40
je 0x407c6a
test ax, 0x4000
je 0x407c6a
imul edi, dword [ebp - 0x18], 0x58
mov esi, dword [ebp + 0x10]
lea edi, [edi + esi + 0x20]
mov edx, dword [edi + 4]
movzx eax, byte [edi]
and edx, 0
mov dword [edi], eax
mov eax, edi
mov dword [eax + 4], edx
imul eax, dword [ebp - 0x18], 0x58
mov edx, dword [ebp + 0x10]
mov eax, dword [eax + edx + 4]
test al, 0x20
je case.default.0x4077dc
test ax, 0x4000
je case.default.0x4077dc
imul edi, dword [ebp - 0x18], 0x58
mov esi, dword [ebp + 0x10]
lea edi, [edi + esi + 0x20]
mov edx, dword [edi + 4]
movzx eax, word [edi]
and edx, 0
mov dword [edi], eax
mov eax, edi
mov dword [eax + 4], edx
jmp case.default.0x4077dc
imul eax, dword [ebp - 0x18], 0x58
mov edx, dword [ebp + 0x10]
test dword [eax + edx + 4], 0x8000000
je 0x407cf7
cmp dword [ebp + 0x18], 0
jne 0x407cd2
mov eax, dword [ebp + 0x14]
add eax, 4
mov dword [ebp + 0x14], eax
mov eax, dword [eax - 4]
mov dword [ebp - 0x1d0], eax
jmp 0x407ce1
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp + 0x18]
mov edi, dword [esi + edi*4]
mov dword [ebp - 0x1d0], edi
imul edi, dword [ebp - 0x18], 0x58
mov esi, dword [ebp + 0x10]
mov ebx, dword [ebp - 0x1d0]
mov dword [edi + esi + 0x20], ebx
jmp case.default.0x4077dc
cmp dword [ebp + 0x18], 0
jne 0x407d18
mov edi, dword [ebp + 0x14]
add edi, 4
mov dword [ebp + 0x14], edi
mov eax, dword [edi - 4]
cdq
mov dword [ebp - 0x1d4], edx
mov dword [ebp - 0x1d8], eax
jmp 0x407d30
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp + 0x18]
mov edi, dword [esi + edi*4]
mov eax, dword [edi]
cdq
mov dword [ebp - 0x1d4], edx
mov dword [ebp - 0x1d8], eax
imul edi, dword [ebp - 0x18], 0x58
add edi, dword [ebp + 0x10]
mov edx, dword [ebp - 0x1d4]
mov eax, dword [ebp - 0x1d8]
mov dword [edi + 0x24], edx
mov dword [edi + 0x20], eax
jmp case.default.0x4077dc
cmp dword [ebp + 8], 2
jne 0x407e56
imul eax, dword [ebp - 0x18], 0x58
mov edx, dword [ebp + 0x10]
test word [eax + edx + 4], 0x280
jne 0x407d76
imul eax, dword [ebp - 0x18], 0x58
mov edx, dword [ebp + 0x10]
lea eax, [eax + edx + 4]
or byte [eax], 0x20
imul eax, dword [ebp - 0x18], 0x58
mov edx, dword [ebp + 0x10]
mov eax, dword [eax + edx + 4]
test al, 0x80
jne 0x407d8b
test ax, 0x200
je 0x407dca
cmp dword [ebp + 0x18], 0
jne 0x407da5
mov eax, dword [ebp + 0x14]
add eax, 4
mov dword [ebp + 0x14], eax
mov eax, dword [eax - 4]
mov dword [ebp - 0x1dc], eax
jmp 0x407db4
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp + 0x18]
mov edi, dword [esi + edi*4]
mov dword [ebp - 0x1dc], edi
imul edi, dword [ebp - 0x18], 0x58
mov esi, dword [ebp + 0x10]
mov ebx, dword [ebp - 0x1dc]
mov dword [edi + esi + 0x20], ebx
jmp case.default.0x4077dc
cmp dword [ebp + 0x18], 0
jne 0x407e16
imul eax, dword [ebp - 0x18], 0x58
mov edx, dword [ebp + 0x10]
test byte [eax + edx + 4], 0x20
je 0x407dfa
mov eax, dword [ebp + 0x14]
add eax, 4
mov dword [ebp + 0x14], eax
imul edx, dword [ebp - 0x18], 0x58
mov ecx, dword [ebp + 0x10]
mov eax, dword [eax - 4]
mov dword [edx + ecx + 0x20], eax
jmp case.default.0x4077dc
mov eax, dword [ebp + 0x14]
add eax, 4
mov dword [ebp + 0x14], eax
imul edx, dword [ebp - 0x18], 0x58
mov ecx, dword [ebp + 0x10]
mov eax, dword [eax - 4]
mov dword [edx + ecx + 0x20], eax
jmp case.default.0x4077dc
imul eax, dword [ebp - 0x18], 0x58
mov edx, dword [ebp + 0x10]
test byte [eax + edx + 4], 0x20
je 0x407e3d
imul edi, dword [ebp - 0x18], 0x58
mov esi, dword [ebp + 0x10]
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ebp + 0x18]
mov ebx, dword [edx + ebx*4]
mov dword [edi + esi + 0x20], ebx
jmp case.default.0x4077dc
imul edi, dword [ebp - 0x18], 0x58
mov esi, dword [ebp + 0x10]
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ebp + 0x18]
mov ebx, dword [edx + ebx*4]
mov dword [edi + esi + 0x20], ebx
jmp case.default.0x4077dc
imul eax, dword [ebp - 0x18], 0x58
mov edx, dword [ebp + 0x10]
test word [eax + edx + 4], 0x200
je 0x407ea7
cmp dword [ebp + 0x18], 0
jne 0x407e80
mov eax, dword [ebp + 0x14]
add eax, 0xc
mov dword [ebp + 0x14], eax
fld xword [eax - 0xc]
fstp xword [ebp - 0x1e8]
jmp 0x407e91
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp + 0x18]
mov edi, dword [esi + edi*4]
fld xword [edi]
fstp xword [ebp - 0x1e8]
imul edi, dword [ebp - 0x18], 0x58
mov esi, dword [ebp + 0x10]
fld xword [ebp - 0x1e8]
fstp xword [edi + esi + 0x20]
jmp case.default.0x4077dc
imul eax, dword [ebp - 0x18], 0x58
mov edx, dword [ebp + 0x10]
test word [eax + edx + 4], 0x100
je 0x407f0b
cmp dword [ebp + 0x18], 0
jne 0x407ee9
mov edi, dword [ebp + 0x14]
add edi, 0x38
mov dword [ebp - 0x1ec], edi
mov dword [ebp + 0x14], edi
imul esi, dword [ebp - 0x18], 0x58
mov ebx, dword [ebp + 0x10]
lea edi, [esi + ebx + 0x20]
mov esi, dword [ebp - 0x1ec]
lea esi, [esi - 0x38]
mov ecx, 0xe
rep movsd dword es:[edi], dword [esi]
jmp case.default.0x4077dc
push 0x38
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp + 0x18]
lea edi, [esi + edi*4]
push edi
imul edi, dword [ebp - 0x18], 0x58
mov esi, dword [ebp + 0x10]
lea edi, [edi + esi + 0x20]
push edi
call sub.CRTDLL.DLL_memcpy
add esp, 0xc
jmp case.default.0x4077dc
cmp dword [ebp + 0x18], 0
jne 0x407f2a
mov eax, dword [ebp + 0x14]
add eax, 8
mov dword [ebp + 0x14], eax
imul edx, dword [ebp - 0x18], 0x58
mov ecx, dword [ebp + 0x10]
fld qword [eax - 8]
fstp xword [edx + ecx + 0x20]
jmp case.default.0x4077dc
imul eax, dword [ebp - 0x18], 0x58
mov edx, dword [ebp + 0x10]
test byte [eax + edx + 4], 0x20
je 0x407f50
imul edi, dword [ebp - 0x18], 0x58
mov esi, dword [ebp + 0x10]
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ebp + 0x18]
mov ebx, dword [edx + ebx*4]
fld dword [ebx]
fstp xword [edi + esi + 0x20]
jmp case.default.0x4077dc
imul edi, dword [ebp - 0x18], 0x58
mov esi, dword [ebp + 0x10]
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ebp + 0x18]
mov ebx, dword [edx + ebx*4]
fld qword [ebx]
fstp xword [edi + esi + 0x20]
inc dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x1c], eax
jle 0x40779b
mov eax, dword [ebp - 0x1c]
pop edi
pop esi
pop ebx
leave
ret