Function at 0x407970
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push edi
push esi
push ebp
push ebx
sub esp, 0xf8
mov dword [esp + 0x88], eax
mov edx, dword [0x874370]
mov dword [esp + 0xb8], edx
mov ebp, dword [0x874374]
mov esi, dword [0x874360]
mov ecx, dword [0x874364]
mov dword [esp + 0x7c], ecx
mov ebx, dword [0x874354]
mov edx, dword [0x874358]
mov dword [esp + 0x40], edx
test eax, eax
jne 0x4079bf
mov eax, ebp
call fcn.004078a4
mov edx, 0x5784a0
mov ecx, dword [edx]
mov dword [esp + 0x50], ecx
mov edi, dword [edx + 4]
mov dword [esp + 0x54], edi
mov ecx, dword [edx + 8]
mov dword [esp + 0x58], ecx
mov ecx, dword [edx + 0xc]
mov dword [esp + 0x5c], ecx
mov ecx, dword [edx + 0x10]
mov dword [esp + 0x60], ecx
mov ecx, dword [edx + 0x14]
mov dword [esp + 0x64], ecx
mov ecx, dword [edx + 0x18]
mov dword [esp + 0x68], ecx
mov ecx, dword [edx + 0x1c]
mov dword [esp + 0x6c], ecx
mov ecx, dword [edx + 0x20]
mov dword [esp + 0x70], ecx
mov edx, dword [edx + 0x24]
mov dword [esp + 0x74], edx
mov ecx, ebx
xor edx, edx
mov dword [esp + 0x4c], edx
mov byte [ebp + 0x10e], 0
test ebx, ebx
jle 0x407aa5
xor edi, edi
mov eax, 1
lea edx, [eax + eax]
add edx, edx
cmp ecx, dword [esp + edx + 0x50]
jg 0x407a3d
inc eax
cmp eax, 0xa
jl 0x407a27
add eax, eax
lea edx, [eax + eax]
mov edx, dword [esp + edx + 0x4c]
mov eax, dword [0x59ccec]
cmp edx, eax
jle 0x407a50
test eax, eax
jle 0x407a50
mov edx, eax
mov eax, dword [0x874344]
cmp edx, eax
jle 0x407a5f
test eax, eax
jle 0x407a5f
mov edx, eax
cmp edx, esi
jle 0x407a69
test esi, esi
jle 0x407a69
mov edx, esi
cmp ebx, 0x200
jge 0x407a7a
cmp ecx, ebx
jne 0x407a7a
mov edx, 0x200
sub ecx, edx
mov dword [ebp + edi*4 + 0x118], edx
movzx edx, byte [ebp + 0x10e]
inc edx
mov byte [ebp + 0x10e], dl
movzx edi, dl
cmp edi, 0x20
je 0x408efd
test ecx, ecx
jg 0x407a22
mov dword [esp + 0x4c], edx
mov eax, dword [esp + 0x40]
xor edx, edx
mov dword [esp + 0x38], edx
xor ecx, ecx
mov dword [esp + 0x9c], ecx
test eax, eax
jle 0x407b5f
mov byte [ebp + 0x10f], 0
xor edi, edi
mov dword [esp + 0x78], esi
mov esi, dword [esp + 0x7c]
jmp 0x407ad9
mov byte [ebp + 0x10f], cl
mov ecx, 1
lea edx, [ecx + ecx]
add edx, edx
cmp eax, dword [esp + edx + 0x50]
jg 0x407af4
inc ecx
cmp ecx, 0xa
jl 0x407ade
add ecx, ecx
lea edx, [ecx + ecx]
mov edx, dword [esp + edx + 0x4c]
mov ecx, dword [0x59ccf0]
cmp edx, ecx
jle 0x407b08
test ecx, ecx
jle 0x407b08
mov edx, ecx
mov ecx, dword [0x874348]
cmp edx, ecx
jle 0x407b18
test ecx, ecx
jle 0x407b18
mov edx, ecx
cmp edx, esi
jle 0x407b22
test esi, esi
jle 0x407b22
mov edx, esi
sub eax, edx
mov dword [ebp + edi*4 + 0x198], edx
movzx ecx, byte [ebp + 0x10f]
inc ecx
mov edx, ecx
movzx edi, cl
cmp edi, 0x20
je 0x408ecb
test eax, eax
jg 0x407ad3
mov dword [esp + 0x9c], edx
mov dword [esp + 0x38], ecx
mov esi, dword [esp + 0x78]
movzx edx, byte [ebp + 0x10e]
mov dword [esp + 0x4c], edx
movsx edx, byte [0x873b10]
test edx, edx
je 0x407b86
cmp byte [ebp + 0x10c], 2
je 0x4088a7
mov edx, dword [esp + 0x9c]
mov byte [ebp + 0x10f], dl
jmp 0x407b93
mov edx, dword [esp + 0x9c]
mov byte [ebp + 0x10f], dl
mov edx, dword [esp + 0x4c]
movzx edx, dl
mov dword [esp + 0x9c], edx
mov ecx, dword [esp + 0x38]
movzx ecx, cl
mov dword [esp + 0x38], ecx
mov eax, dword [0x5ba028]
test eax, eax
je 0x408eb5
test eax, eax
je 0x408e9e
mov eax, dword [0x5ba02c]
test eax, eax
je 0x408e89
test eax, eax
je 0x408e72
mov eax, dword [0x5ba030]
test eax, eax
je 0x408e5d
test eax, eax
je 0x408e46
mov eax, dword [0x5ba034]
test eax, eax
je 0x408e31
test eax, eax
je 0x408e1a
mov eax, dword [0x5ba038]
test eax, eax
je 0x408e05
test eax, eax
je 0x408dee
mov eax, dword [0x5ba03c]
test eax, eax
je 0x408dd9
test eax, eax
je 0x408dc2
mov eax, dword [0x5ba040]
test eax, eax
je 0x408dad
test eax, eax
je 0x408d96
mov eax, dword [0x5ba044]
test eax, eax
je 0x408d81
test eax, eax
je 0x408d6a
mov eax, dword [0x5ba048]
test eax, eax
je 0x408d55
test eax, eax
je 0x408d3e
xor edx, edx
mov dword [esp + 0x34], edx
mov dword [esp + 0xd8], edx
mov edi, dword [0x8742e0]
mov eax, dword [edi]
lea ecx, [esp + 0x34]
push edx
push ecx
push 2
push dword [0x59cce8]
push 0x100
push 0x200
push edi
call dword [eax + 0x90]
test eax, eax
je 0x407cb3
push 0x87e274
push 0x8792b0
call fcn.0046de64
add esp, 8
mov edx, dword [esp + 0x38]
test edx, edx
jle 0x4087ec
mov edi, 1
mov dword [esp + 0xd4], edi
mov ecx, 1
mov dword [esp + 0xec], ecx
xor edx, edx
mov dword [esp + 0x4c], edx
xor edi, edi
mov edx, dword [esp + 0x38]
lea ecx, [edx - 1]
mov eax, dword [esp + 0x9c]
lea edx, [eax - 1]
mov dword [esp + 0x84], edx
lea eax, [eax + eax]
add eax, eax
xor edx, edx
mov dword [esp + 0x3c], eax
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x90], edi
mov dword [esp + 0xbc], ebx
mov dword [esp + 0x78], esi
mov dword [esp + 0xa4], ebp
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x90]
mov eax, dword [eax + ecx*4 + 0x198]
mov ebx, dword [esp + 0x9c]
test ebx, ebx
jle 0x408d32
xor esi, esi
xor ebp, ebp
mov ebx, dword [esp + 0x4c]
lea ecx, [ebx + eax]
mov edi, dword [esp + 0x40]
sub edi, ebx
add edi, ebx
mov dword [esp + 0xb4], edi
mov edi, dword [esp + 0xa4]
lea ebx, [edi + edx]
mov dword [esp + 0xf4], ebx
lea ebx, [eax - 1]
mov dword [esp + 0x80], ebx
xor ebx, ebx
lea edi, [edi + edx + 0x280]
mov dword [esp + 0xa0], edi
mov dword [esp + 0xc0], ecx
mov dword [esp + 0xe0], eax
mov dword [esp + 0x44], edx
mov edx, dword [esp + 0xec]
mov edi, dword [esp + 0xa4]
mov eax, dword [edi + ebp*4 + 0x118]
mov dword [esp + 0xdc], eax
lea edi, [eax + eax]
add edi, edi
mov ecx, dword [esp + 0xe0]
imul ecx, edi
cmp ecx, dword [0x59c080]
jle 0x407e00
mov dword [0x59c080], ecx
push ecx
push dword [0x5ba028]
mov dword [esp + 0xf4], edx
call fcn.0047014f
mov edx, dword [esp + 0xf4]
add esp, 8
mov dword [0x5ba028], eax
test eax, eax
je 0x408920
movsx eax, byte [0x873b10]
test eax, eax
je 0x407e1f
mov eax, dword [esp + 0xa4]
cmp byte [eax + 0x10c], 2
je 0x408326
mov ecx, dword [esp + 0x8c]
mov eax, dword [esp + 0x90]
cmp eax, ecx
je 0x408018
mov eax, dword [esp + 0x84]
cmp ebp, eax
je 0x407f02
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0xc0]
cmp ecx, eax
jge 0x408326
xor eax, eax
mov dword [esp + 0xcc], eax
lea eax, [esi + esi]
add eax, eax
mov dword [esp + 0xd0], eax
mov eax, ecx
imul eax, dword [esp + 0xbc]
mov dword [esp + 0xac], ebx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov ebx, eax
mov ebp, ecx
mov esi, dword [esp + 0xcc]
mov edx, dword [esp + 0xb8]
mov eax, dword [edx + 0xc0]
add eax, dword [esp + 0xd0]
lea edx, [ebx + ebx]
add edx, edx
add eax, edx
mov edx, esi
add edx, dword [0x5ba028]
push edi
push eax
push edx
call dword [0x5b9a6c]
add esp, 0xc
add esi, edi
add ebx, dword [esp + 0xbc]
inc ebp
mov edx, dword [esp + 0xc0]
cmp ebp, edx
jl 0x407e9d
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, dword [esp + 0xec]
jmp 0x408326
mov ecx, dword [esp + 0xbc]
sub ecx, esi
add ecx, ecx
add ecx, ecx
mov dword [esp + 0xb0], ecx
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0xc0]
cmp ecx, eax
jge 0x408326
xor eax, eax
mov dword [esp + 0x48], eax
mov eax, edi
sub eax, dword [esp + 0xb0]
mov dword [esp + 0xcc], eax
lea eax, [esi + esi]
add eax, eax
mov dword [esp + 0xc8], eax
mov eax, ecx
imul eax, dword [esp + 0xbc]
mov dword [esp + 0xd0], eax
mov dword [esp + 0xc4], edi
mov dword [esp + 0xac], ebx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov ebx, ecx
mov ebp, eax
mov esi, dword [esp + 0x48]
mov edi, dword [esp + 0xb0]
mov eax, dword [esp + 0xb8]
mov eax, dword [eax + 0xc0]
add eax, dword [esp + 0xc8]
lea edx, [ebp + ebp]
add edx, edx
add eax, edx
mov edx, esi
add edx, dword [0x5ba028]
push edi
push eax
push edx
call dword [0x5b9a6c]
mov edx, dword [0x5ba028]
add edx, edi
add edx, esi
push dword [0x873710]
mov eax, dword [esp + 0xdc]
push eax
push edx
call dword [0x5b9a68]
add esp, 0x18
add esi, dword [esp + 0xc4]
add ebp, dword [esp + 0xbc]
inc ebx
mov eax, dword [esp + 0xc0]
cmp ebx, eax
jl 0x407f8e
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, dword [esp + 0xec]
jmp 0x408326
mov eax, dword [esp + 0x84]
cmp ebp, eax
je 0x40817e
mov eax, dword [esp + 0x4c]
mov dword [esp + 0xb0], eax
mov ecx, dword [esp + 0xb4]
cmp eax, ecx
jge 0x408945
xor eax, eax
mov dword [esp + 0xa8], eax
lea ecx, [esi + esi]
add ecx, ecx
mov dword [esp + 0xcc], ecx
mov eax, dword [esp + 0xb0]
imul eax, dword [esp + 0xbc]
mov dword [esp + 0xc8], eax
mov dword [esp + 0xac], ebx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov ebx, dword [esp + 0xa8]
mov ebp, eax
mov esi, dword [esp + 0xb0]
mov eax, dword [esp + 0xb8]
mov ecx, dword [eax + 0xc0]
add ecx, dword [esp + 0xcc]
lea edx, [ebp + ebp]
add edx, edx
add ecx, edx
mov eax, ebx
add eax, dword [0x5ba028]
push edi
push ecx
push eax
call dword [0x5b9a6c]
add esp, 0xc
add ebx, edi
add ebp, dword [esp + 0xbc]
inc esi
mov eax, dword [esp + 0xb4]
cmp esi, eax
jl 0x408098
mov dword [esp + 0xa8], ebx
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, dword [esp + 0xec]
mov ecx, dword [esp + 0xb4]
mov eax, dword [esp + 0xc0]
cmp ecx, eax
jge 0x408326
mov dword [esp + 0xac], ebx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov ebx, ecx
mov ebp, eax
mov esi, dword [esp + 0xa8]
mov eax, esi
add eax, dword [0x5ba028]
push dword [0x873710]
push edi
push eax
call dword [0x5b9a68]
add esp, 0xc
add esi, edi
inc ebx
cmp ebx, ebp
jl 0x40813d
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, dword [esp + 0xec]
jmp 0x408326
mov eax, dword [esp + 0xbc]
sub eax, esi
add eax, eax
add eax, eax
mov dword [esp + 0xb0], eax
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0xd0], ecx
mov eax, dword [esp + 0xb4]
cmp ecx, eax
jge 0x408d24
xor eax, eax
mov dword [esp + 0xa8], eax
mov ecx, edi
sub ecx, dword [esp + 0xb0]
mov dword [esp + 0xc8], ecx
lea eax, [esi + esi]
add eax, eax
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0xd0]
imul eax, dword [esp + 0xbc]
mov dword [esp + 0x48], eax
mov dword [esp + 0xc4], edi
mov dword [esp + 0xac], ebx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov ebx, dword [esp + 0xa8]
mov ebp, eax
mov esi, dword [esp + 0xd0]
mov edi, dword [esp + 0xb0]
mov eax, dword [esp + 0xb8]
mov ecx, dword [eax + 0xc0]
add ecx, dword [esp + 0xcc]
lea edx, [ebp + ebp]
add edx, edx
add ecx, edx
mov eax, ebx
add eax, dword [0x5ba028]
push edi
push ecx
push eax
call dword [0x5b9a6c]
mov edx, dword [0x5ba028]
add edx, edi
add edx, ebx
push dword [0x873710]
mov eax, dword [esp + 0xd8]
push eax
push edx
call dword [0x5b9a68]
add esp, 0x18
add ebx, dword [esp + 0xc4]
add ebp, dword [esp + 0xbc]
inc esi
mov eax, dword [esp + 0xb4]
cmp esi, eax
jl 0x40821e
mov dword [esp + 0xa8], ebx
mov edi, dword [esp + 0xc4]
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, dword [esp + 0xec]
mov ecx, dword [esp + 0xb4]
mov eax, dword [esp + 0xc0]
cmp ecx, eax
jge 0x408326
mov dword [esp + 0xac], ebx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov ebx, ecx
mov ebp, eax
mov esi, dword [esp + 0xa8]
mov eax, esi
add eax, dword [0x5ba028]
push dword [0x873710]
push edi
push eax
call dword [0x5b9a68]
add esp, 0xc
add esi, edi
inc ebx
cmp ebx, ebp
jl 0x4082ea
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, dword [esp + 0xec]
movsx eax, byte [0x8736e0]
test eax, eax
je 0x40834a
movsx eax, byte [0x59cc1c]
test eax, eax
je 0x408343
mov ecx, 0x100005
jmp 0x40834f
mov ecx, 5
jmp 0x40834f
mov ecx, 5
movsx eax, byte [0x8736ec]
test eax, eax
jne 0x4083d1
mov eax, dword [esp + 0x88]
test eax, eax
je 0x40836f
mov edx, 1
jmp 0x4084b3
mov dword [esp + 0xa8], ecx
mov ecx, dword [0x8742e0]
mov eax, dword [ecx]
xor edi, edi
push edi
mov edx, dword [esp + 0xa4]
push edx
push edi
push dword [0x8742d8]
mov edx, 1
push edx
push edx
mov edx, dword [esp + 0xf8]
push edx
mov edx, dword [esp + 0xf8]
push edx
push ecx
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0xcc], ecx
call dword [eax + 0x5c]
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0xd4], eax
mov edx, 1
jmp 0x4084b3
cmp edx, 1
jne 0x408447
mov eax, dword [esp + 0x88]
test eax, eax
je 0x4083eb
mov edx, 2
jmp 0x4084b3
mov dword [esp + 0xa8], ecx
mov ecx, dword [0x8742e0]
mov eax, dword [ecx]
xor edi, edi
push edi
mov edx, dword [esp + 0xa4]
push edx
push edi
push dword [0x8742d8]
push 1
push 2
mov edx, dword [esp + 0xf8]
push edx
mov edx, dword [esp + 0xf8]
push edx
push ecx
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0xcc], ecx
call dword [eax + 0x5c]
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0xd4], eax
mov edx, 2
jmp 0x4084b3
mov eax, dword [esp + 0x88]
test eax, eax
je 0x408459
mov edx, 4
jmp 0x4084b3
mov dword [esp + 0xa8], ecx
mov ecx, dword [0x8742e0]
mov eax, dword [ecx]
xor edi, edi
push edi
mov edx, dword [esp + 0xa4]
push edx
push edi
push dword [0x8742d8]
push 1
push 4
mov edx, dword [esp + 0xf8]
push edx
mov edx, dword [esp + 0xf8]
push edx
push ecx
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0xcc], ecx
call dword [eax + 0x5c]
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0xd4], eax
mov edx, 4
mov eax, dword [esp + 0xd4]
test eax, eax
jl 0x408cf6
mov dword [esp + 0xf0], 0
mov eax, dword [0x5ba028]
mov dword [esp + 0xc4], eax
movsx edi, byte [0x873b10]
test edi, edi
je 0x4084f6
mov eax, dword [esp + 0xa4]
cmp byte [eax + 0x10c], 2
jne 0x4084f6
xor edx, edx
test edx, edx
jbe 0x408787
xor edi, edi
mov dword [esp + 0xa8], ecx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov eax, dword [esp + 0xf4]
mov ebp, dword [eax + ebx + 0x280]
mov esi, dword [ebp]
lea edx, [esp + 0xf0]
push edx
push edi
push ebp
call dword [esi + 0x48]
test eax, eax
jne 0x408736
mov eax, dword [0x8742e0]
mov ecx, edi
mov ebp, dword [esp + 0xdc]
sar ebp, cl
mov ecx, edi
mov esi, dword [esp + 0xe0]
sar esi, cl
mov ecx, dword [eax]
lea edx, [esp + 0xd8]
push 0
push edx
push 2
push dword [0x59cce8]
push esi
push ebp
push eax
call dword [ecx + 0x90]
test eax, eax
je 0x408590
push 0x87e274
push 0x8792b0
call fcn.0046de64
add esp, 8
cmp edi, 1
je 0x408c90
cmp edi, 2
je 0x408c1c
cmp edi, 3
je 0x408ba8
cmp edi, 4
je 0x408b34
cmp edi, 5
je 0x408ac0
cmp edi, 6
je 0x408a4c
cmp edi, 7
je 0x4089e1
cmp edi, 8
je 0x40898b
mov edx, dword [esp + 0xd8]
mov dword [esp + 0xb0], edx
mov ecx, dword [edx]
lea eax, [esp + 0xe4]
push 0x2000
push 0
push eax
push edx
call dword [ecx + 0x34]
test eax, eax
jl 0x40896f
test esi, esi
jle 0x40865a
xor edx, edx
add ebp, ebp
add ebp, ebp
mov eax, dword [esp + 0xc4]
mov dword [esp + 0xd0], edi
mov dword [esp + 0xac], ebx
mov ebx, eax
mov edi, esi
mov esi, edx
mov ecx, esi
imul ecx, dword [esp + 0xe4]
add ecx, dword [esp + 0xe8]
push ebp
push ebx
push ecx
call dword [0x5b9a6c]
add esp, 0xc
add ebx, ebp
inc esi
cmp esi, edi
jl 0x408628
mov edi, dword [esp + 0xd0]
mov ebx, dword [esp + 0xac]
mov eax, dword [esp + 0xb0]
mov edx, dword [eax]
push eax
call dword [edx + 0x38]
test eax, eax
jl 0x408953
xor eax, eax
test eax, eax
jne 0x408706
movsx eax, byte [0x8736e0]
test eax, eax
jne 0x4086c1
mov edx, dword [0x8742e0]
mov ebp, dword [edx]
xor eax, eax
push eax
push dword [esp + 0xf4]
push eax
push dword [esp + 0xe4]
push edx
call dword [ebp + 0x78]
mov dword [esp + 0xd4], eax
test eax, eax
je 0x4086e8
push 0x87df74
push 0x8792b0
call fcn.0046de64
add esp, 8
jmp 0x4086e8
xor edx, edx
push dword [0x873710]
mov eax, dword [esp + 0xac]
push eax
push edx
push edx
push dword [esp + 0xe8]
push edx
push edx
push dword [esp + 0x10c]
call fcn.004b240f
mov eax, dword [esp + 0xf0]
test eax, eax
je 0x4086f9
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov dword [esp + 0xf0], 0
jmp 0x408718
push 0x87e3c8
push 0x87db10
call fcn.00409040
add esp, 8
mov eax, dword [esp + 0xd8]
test eax, eax
je 0x408729
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov dword [esp + 0xd8], 0
jmp 0x40874b
push edi
push 2
push 0x87dfc0
push 0x8792b0
call fcn.0046de64
add esp, 0x10
mov eax, dword [esp + 0xf0]
test eax, eax
je 0x40875c
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov dword [esp + 0xf0], 0
inc edi
mov eax, dword [esp + 0xec]
cmp edi, eax
jb 0x40851c
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, eax
mov eax, dword [esp + 0xdc]
lea esi, [esi + eax]
add ebx, 4
add dword [esp + 0xa0], 4
inc ebp
mov ecx, dword [esp + 0x9c]
cmp ebp, ecx
jl 0x407da4
mov dword [esp + 0xec], edx
mov ecx, dword [esp + 0xc0]
mov edx, dword [esp + 0x44]
mov dword [esp + 0x4c], ecx
add edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x90]
inc eax
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x38]
cmp eax, ecx
jl 0x407d22
mov esi, dword [esp + 0x78]
mov ebp, dword [esp + 0xa4]
fld dword [0x87434c]
fnstcw word [esp + 0x28]
movzx eax, word [esp + 0x28]
or eax, 0xc00
mov dword [esp + 0x30], eax
fldcw word [esp + 0x30]
fistp qword [ebp + 0x238]
fldcw word [esp + 0x28]
fld dword [0x874350]
fnstcw word [esp + 0x28]
movzx eax, word [esp + 0x28]
or eax, 0xc00
mov dword [esp + 0x30], eax
fldcw word [esp + 0x30]
fistp qword [ebp + 0x240]
fldcw word [esp + 0x28]
mov edi, dword [0x874354]
mov dword [ebp + 0x88], edi
mov edx, dword [0x874358]
mov dword [ebp + 0x8c], edx
mov dword [ebp + 0xf0], edi
mov dword [ebp + 0xf4], edx
xor ecx, ecx
mov byte [ebp + 0x10d], cl
mov dword [ebp + 0x110], esi
mov esi, dword [esp + 0x7c]
mov dword [ebp + 0x114], esi
mov dword [0x874354], ecx
mov dword [0x874358], ecx
mov dword [0x87434c], ecx
mov dword [0x874350], ecx
mov eax, dword [esp + 0x34]
test eax, eax
je 0x40889a
mov edx, dword [eax]
push eax
call dword [edx + 8]
xor eax, eax
add esp, 0xf8
pop ebx
pop ebp
pop esi
pop edi
ret
fild dword [0x873dac]
fnstcw word [esp + 0x28]
movzx eax, word [esp + 0x28]
or eax, 0xc00
mov dword [esp + 0x30], eax
fldcw word [esp + 0x30]
fistp dword [ebp + 0x118]
fldcw word [esp + 0x28]
fild dword [0x873db0]
fnstcw word [esp + 0x28]
movzx eax, word [esp + 0x28]
or eax, 0xc00
mov dword [esp + 0x30], eax
fldcw word [esp + 0x30]
fistp dword [ebp + 0x198]
fldcw word [esp + 0x28]
mov edx, 1
mov dword [esp + 0x4c], edx
mov ecx, 1
mov byte [ebp + 0x10e], cl
mov edx, 1
mov dword [esp + 0x38], edx
mov edx, 1
mov byte [ebp + 0x10f], dl
jmp 0x407b93
push 0x87e260
push 0x8792b0
mov dword [esp + 0xf4], edx
call fcn.00409040
mov edx, dword [esp + 0xf4]
add esp, 8
jmp 0x407e00
xor eax, eax
mov dword [esp + 0xa8], eax
jmp 0x408100
push 0x87e648
push 0x8792b0
call fcn.0046de64
add esp, 8
mov eax, 2
jmp 0x408671
push 0x87e634
push 0x8792b0
call fcn.0046de64
add esp, 8
mov eax, 1
jmp 0x408671
mov eax, dword [0x5ba048]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xdc]
lea ecx, [edx - 1]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5ba028]
xor ecx, ecx
call fcn.00408f2c
jmp 0x4085d8
mov eax, dword [esp + 0xdc]
lea edx, [eax - 1]
mov dword [esp + 0xb0], edx
mov eax, dword [0x5ba044]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5ba028]
xor ecx, ecx
call fcn.00408f2c
jmp 0x4085d8
mov eax, dword [esp + 0xdc]
lea edx, [eax - 1]
mov dword [esp + 0xb0], edx
mov eax, dword [0x5ba040]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5ba028]
xor ecx, ecx
call fcn.00408f2c
cmp edi, 7
je 0x4089f2
jmp 0x4085d8
mov eax, dword [esp + 0xdc]
lea edx, [eax - 1]
mov dword [esp + 0xb0], edx
mov eax, dword [0x5ba03c]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5ba028]
xor ecx, ecx
call fcn.00408f2c
cmp edi, 6
je 0x408a5d
jmp 0x4085d8
mov eax, dword [esp + 0xdc]
lea edx, [eax - 1]
mov dword [esp + 0xb0], edx
mov eax, dword [0x5ba038]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5ba028]
xor ecx, ecx
call fcn.00408f2c
cmp edi, 5
je 0x408ad1
jmp 0x4085d8
mov eax, dword [esp + 0xdc]
lea edx, [eax - 1]
mov dword [esp + 0xb0], edx
mov eax, dword [0x5ba034]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5ba028]
xor ecx, ecx
call fcn.00408f2c
cmp edi, 4
je 0x408b45
jmp 0x4085d8
mov eax, dword [esp + 0xdc]
lea edx, [eax - 1]
mov dword [esp + 0xb0], edx
mov eax, dword [0x5ba030]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5ba028]
xor ecx, ecx
call fcn.00408f2c
cmp edi, 3
je 0x408bb9
jmp 0x4085d8
mov eax, dword [0x5ba02c]
mov dword [esp + 0xc4], eax
mov edx, dword [esp + 0xdc]
lea ecx, [edx - 1]
mov dword [esp + 0xb0], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5ba028]
xor ecx, ecx
call fcn.00408f2c
cmp edi, 2
je 0x408c2d
jmp 0x4085d8
push 0x87e2a0
push 0x8792b0
call fcn.00409040
push 0x87e3a0
push 0x8792b0
call fcn.0046de64
mov eax, 0xffffffff
add esp, 0x108
pop ebx
pop ebp
pop esi
pop edi
ret
xor eax, eax
mov dword [esp + 0xa8], eax
jmp 0x4082b1
mov ecx, dword [esp + 0x4c]
lea ecx, [ecx + eax]
jmp 0x4087be
push 0x87e260
push 0x8792b0
call fcn.00409040
add esp, 8
jmp 0x407c69
push 0x100
call fcn.0046feec
pop ecx
mov dword [0x5ba048], eax
jmp 0x407c61
push 0x87e260
push 0x8792b0
call fcn.00409040
add esp, 8
jmp 0x407c54
push 0x400
call fcn.0046feec
pop ecx
mov dword [0x5ba044], eax
jmp 0x407c4c
push 0x87e260
push 0x8792b0
call fcn.00409040
add esp, 8
jmp 0x407c3f
push 0x1000
call fcn.0046feec
pop ecx
mov dword [0x5ba040], eax
jmp 0x407c37
push 0x87e260
push 0x8792b0
call fcn.00409040
add esp, 8
jmp 0x407c2a
push 0x4000
call fcn.0046feec
pop ecx
mov dword [0x5ba03c], eax
jmp 0x407c22
push 0x87e260
push 0x8792b0
call fcn.00409040
add esp, 8
jmp 0x407c15
push 0x10000
call fcn.0046feec
pop ecx
mov dword [0x5ba038], eax
jmp 0x407c0d
push 0x87e260
push 0x8792b0
call fcn.00409040
add esp, 8
jmp 0x407c00
push 0x40000
call fcn.0046feec
pop ecx
mov dword [0x5ba034], eax
jmp 0x407bf8
push 0x87e260
push 0x8792b0
call fcn.00409040
add esp, 8
jmp 0x407beb
push 0x100000
call fcn.0046feec
pop ecx
mov dword [0x5ba030], eax
jmp 0x407be3
push 0x87e260
push 0x8792b0
call fcn.00409040
add esp, 8
jmp 0x407bd6
push 0x400000
call fcn.0046feec
pop ecx
mov dword [0x5ba02c], eax
jmp 0x407bce
push 0x87e260
push 0x8792b0
call fcn.00409040
add esp, 8
jmp 0x407bc1
push dword [0x59c080]
call fcn.0046feec
pop ecx
mov dword [0x5ba028], eax
jmp 0x407bb9
mov dword [esp + 0x38], ecx
mov edx, ecx
mov byte [ebp + 0x10f], dl
push eax
mov eax, dword [esp + 0x44]
push eax
push ebx
push 0x87e22c
push 0x8792b0
call fcn.00409040
mov eax, 0xffffffff
add esp, 0x10c
pop ebx
pop ebp
pop esi
pop edi
ret
xor eax, eax
push eax
push eax
push 0x87e214
push eax
call dword [0x578418]
mov eax, 0xffffffff
add esp, 0xf8
pop ebx
pop ebp
pop esi
pop edi
ret