Function at 0x406890
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x144
mov edx, dword [ebp + 8]
xor eax, eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0x58], eax
mov edx, dword [edx]
mov eax, edx
shr eax, 0xb
and eax, 1
mov dword [esp + 0x2c], edx
mov dword [esp + 0x38], eax
mov eax, edx
push ebx
mov ebx, dword [ebp + 0x10]
and edx, 1
shr eax, 9
push esi
mov esi, dword [ebp + 0xc]
and eax, 1
mov ebx, dword [ebx]
mov dword [esp + 0x104], eax
xor eax, 1
push edi
mov esi, dword [esi]
xor edi, edi
mov dword [esp + 0x114], eax
xor eax, eax
mov dword [esp + 0x68], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0xc8], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0x14], esi
mov dword [esp + 0xc0], esi
mov dword [esp + 0xf4], esi
mov dword [esp + 0x7c], 0
mov dword [esp + 0xcc], 0
mov dword [esp + 0x10], ebx
mov dword [esp + 0x1c], edi
mov dword [esp + 0x8c], edi
mov dword [esp + 0xa0], edi
mov dword [esp + 0x6c], edi
mov dword [esp + 0x78], edi
mov dword [esp + 0x60], 0xfffffffe
mov dword [esp + 0x70], 0xfffffffe
mov dword [esp + 0x5c], 0xfffffffe
mov dword [esp + 0x3c], 0xfffffffe
mov dword [esp + 0xb8], edx
mov dword [esp + 0xb0], 0x7fffffeb
jmp 0x406998
mov eax, dword [esp + 0x28]
mov edi, dword [esp + 0x1c]
movzx ecx, byte [ebx]
mov dword [esp + 0x24], ecx
test ecx, ecx
jne 0x4069ba
test eax, eax
je 0x4069ba
mov ebx, eax
xor eax, eax
mov dword [esp + 0x10], ebx
mov dword [esp + 0x28], eax
movzx ecx, byte [ebx]
mov dword [esp + 0x24], ecx
cmp dword [ebp + 0x34], 0
mov edx, dword [ebp + 0x30]
je 0x406a77
mov eax, dword [edx + 0x10]
mov ecx, dword [edx + 0x3c]
add eax, 0xffffff9c
add eax, ecx
cmp esi, eax
ja 0x40a7ff
mov eax, dword [esp + 0xc0]
cmp esi, eax
jae 0x4069eb
mov esi, eax
mov dword [esp + 0x14], esi
mov eax, dword [ebp + 0x34]
mov ecx, esi
sub ecx, dword [esp + 0xc0]
mov edx, dword [eax]
mov eax, dword [esp + 0xb0]
sub eax, edx
cmp eax, ecx
jl 0x40a7e8
sub edx, dword [esp + 0xc0]
mov eax, dword [ebp + 0x34]
add edx, esi
mov dword [eax], edx
test edi, edi
je 0x406a60
mov ecx, dword [esp + 0xf4]
cmp edi, ecx
jbe 0x406a6b
mov eax, esi
sub eax, edi
push eax
push edi
push ecx
call sub.MSVCRT.dll_memmove
mov eax, dword [esp + 0x100]
add esp, 0xc
mov ebx, dword [esp + 0x10]
sub eax, edi
mov edi, dword [esp + 0xf4]
add esi, eax
mov edx, dword [ebp + 0x30]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x14], esi
mov dword [esp + 0xc0], esi
jmp 0x406a86
mov esi, dword [esp + 0xf4]
mov dword [esp + 0x14], esi
mov edx, dword [ebp + 0x30]
mov dword [esp + 0xc0], esi
jmp 0x406a86
mov eax, dword [edx + 0x3c]
add eax, dword [edx + 0x10]
cmp dword [edx + 0x20], eax
ja 0x40ad10
mov ecx, dword [esp + 0x24]
test ecx, ecx
je 0x406bfa
cmp ecx, 0x5c
jne 0x406ab8
cmp byte [ebx + 1], 0x45
lea eax, [ebx + 1]
jne 0x406ab8
mov ebx, eax
mov dword [esp + 0x7c], 0
mov eax, dword [esp + 0x28]
inc ebx
mov dword [esp + 0x10], ebx
jmp 0x406998
cmp dword [esp + 0x7c], 0
je 0x406bd4
mov edi, dword [esp + 0xac]
test edi, edi
je 0x406b00
cmp dword [ebp + 0x34], 0
jne 0x406af5
movzx ecx, byte [edi + 2]
movzx eax, byte [edi + 3]
shl ecx, 8
or ecx, eax
sub ebx, ecx
sub ebx, dword [edx + 0x18]
mov eax, ebx
mov byte [edi + 5], bl
sar eax, 8
mov byte [edi + 4], al
mov ebx, dword [esp + 0x10]
mov dword [esp + 0xac], 0
test dword [esp + 0x38], 0x4000
mov ecx, dword [esp + 0x24]
je case.0x406e75.1
mov word [esi], 0xff76
mov eax, ebx
sub eax, dword [edx + 0x18]
sar eax, 8
mov byte [esi + 2], al
lea eax, [esi + 6]
sub bl, byte [edx + 0x18]
mov byte [esi + 3], bl
mov word [esi + 4], 0
mov ebx, dword [esp + 0x10]
mov dword [esp + 0xac], esi
mov dword [esp + 0x14], eax
cmp dword [esp + 0x44], 0
mov esi, 1
mov byte [esp + 0x84], cl
je 0x406b7a
cmp ecx, 0xc0
jb 0x406b7a
mov al, byte [ebx + 1]
inc ebx
and al, 0xc0
cmp al, 0x80
jne 0x406b7a
mov dword [esp + 0x10], ebx
movzx eax, byte [ebx]
inc ebx
mov byte [esp + esi + 0x84], al
inc esi
movzx eax, byte [ebx]
and al, 0xc0
cmp al, 0x80
je 0x406b61
mov ebx, dword [esp + 0x38]
mov edi, dword [ebp + 0x30]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x1c], edx
mov ecx, dword [edi + 0x20]
sub ecx, dword [edi + 0x10]
cmp dword [esp + 0x44], 0
mov dword [esp + 0x64], ecx
je 0x40a6c3
test bl, 1
je 0x40a6c3
movzx ebx, byte [esp + 0x84]
cmp ebx, 0xc0
jb 0x40a645
test bl, 0x20
jne 0x40a598
movzx eax, byte [esp + 0x85]
and ebx, 0x1f
jmp 0x40a63d
cmp ecx, 0x5c
jne 0x406bfa
cmp byte [ebx + 1], 0x51
lea eax, [ebx + 1]
jne 0x406bfa
mov ebx, eax
mov dword [esp + 0x7c], 1
mov eax, dword [esp + 0x28]
inc ebx
mov dword [esp + 0x10], ebx
jmp 0x406998
mov edi, dword [esp + 0x38]
and edi, 8
je 0x406c9a
mov eax, dword [edx + 0xc]
mov esi, ebx
test byte [eax + ecx], 1
je 0x406c24
inc ebx
mov dword [esp + 0x10], ebx
movzx ecx, byte [ebx]
mov dword [esp + 0x24], ecx
test byte [eax + ecx], 1
jne 0x406c12
cmp ecx, 0x23
jne 0x406c8e
inc ebx
mov dword [esp + 0x10], ebx
mov al, byte [ebx]
mov byte [esp + 0x43], al
test al, al
je 0x406c8e
jmp 0x406c40
mov edx, dword [edx + 0x84]
test edx, edx
je 0x406cee
mov eax, dword [ebp + 0x30]
mov ecx, dword [eax + 0x1c]
cmp ebx, ecx
jae 0x406d26
push dword [esp + 0x44]
add eax, 0x88
push eax
push ecx
push edx
push ebx
call fcn.0041ded0
mov ebx, dword [esp + 0x24]
add esp, 0x14
mov edx, dword [ebp + 0x30]
test eax, eax
je 0x406d28
add ebx, dword [edx + 0x88]
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0x24]
cmp ebx, esi
mov esi, dword [esp + 0x14]
ja 0x406990
cmp ecx, 0x28
jne 0x406d7b
cmp byte [ebx + 1], 0x3f
jne 0x406da7
cmp byte [ebx + 2], 0x23
jne 0x406da7
add ebx, 3
mov dword [esp + 0x10], ebx
mov al, byte [ebx]
test al, al
je 0x406cd7
cmp al, 0x29
je 0x406d60
inc ebx
mov dword [esp + 0x10], ebx
mov al, byte [ebx]
test al, al
jne 0x406cc4
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x12
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [ebp + 0x30]
mov eax, dword [edx + 0x1c]
mov ecx, dword [edx + 0x88]
sub eax, ecx
cmp ebx, eax
ja 0x406d28
mov al, byte [esp + 0x43]
cmp al, byte [edx + 0x8c]
jne 0x406d28
cmp ecx, 1
je 0x406c80
mov al, byte [ebx + 1]
cmp al, byte [edx + 0x8d]
je 0x406c80
jmp 0x406d28
mov edx, eax
inc ebx
cmp dword [esp + 0x44], 0
mov dword [esp + 0x10], ebx
je 0x406d4d
mov al, byte [ebx]
and al, 0xc0
cmp al, 0x80
jne 0x406d4d
lea esp, [esp]
inc ebx
mov dword [esp + 0x10], ebx
mov al, byte [ebx]
and al, 0xc0
cmp al, 0x80
je 0x406d40
mov al, byte [ebx]
mov byte [esp + 0x43], al
test al, al
jne 0x406c40
jmp 0x406c8a
cmp byte [ebx], 0
je 0x406cd7
mov edi, dword [esp + 0x1c]
inc ebx
mov eax, dword [esp + 0x28]
mov dword [esp + 0x10], ebx
jmp 0x406998
cmp ecx, 0x2a
je 0x406e0e
cmp ecx, 0x2b
je 0x406e0e
cmp ecx, 0x3f
je 0x406e0e
cmp ecx, 0x7b
jne 0x406da7
lea eax, [ebx + 1]
push eax
call fcn.0040ca60
add esp, 4
test eax, eax
jne 0x406e0e
mov ecx, dword [esp + 0xac]
xor edx, edx
mov eax, dword [esp + 0x28]
test ecx, ecx
je 0x406e17
test eax, eax
jne 0x406e17
mov eax, dword [esp + 0xc8]
dec dword [esp + 0xc8]
test eax, eax
jg 0x406e13
cmp dword [ebp + 0x34], edx
jne 0x406e05
mov eax, dword [esp + 0xac]
movzx ecx, byte [ecx + 2]
shl ecx, 8
movzx eax, byte [eax + 3]
or ecx, eax
mov eax, dword [ebp + 0x30]
sub ebx, ecx
mov ecx, dword [esp + 0xac]
sub ebx, dword [eax + 0x18]
mov eax, ebx
mov byte [ecx + 5], bl
sar eax, 8
mov byte [ecx + 4], al
mov ebx, dword [esp + 0x10]
mov dword [esp + 0xac], edx
jmp 0x406e13
mov edx, 1
mov eax, dword [esp + 0x28]
test dword [esp + 0x38], 0x4000
je 0x406e5e
test edx, edx
jne 0x406e5e
test eax, eax
jne 0x406e5e
mov byte [esi], 0x76
lea ecx, [esi + 1]
mov dword [esp + 0xac], esi
mov eax, ebx
mov esi, dword [ebp + 0x30]
mov byte [ecx], 0xff
sub eax, dword [esi + 0x18]
sar eax, 8
mov byte [ecx + 1], al
lea eax, [ecx + 5]
sub bl, byte [esi + 0x18]
mov byte [ecx + 2], bl
mov word [ecx + 3], dx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x14], eax
jmp 0x406e61
mov esi, dword [ebp + 0x30]
mov ecx, dword [esp + 0x24]
cmp ecx, 0x7c
ja case.0x406e75.1
movzx eax, byte [ecx + 0x40ad5c]
jmp dword [eax*4 + 0x40ad28]
xor edi, edi
test byte [esp + 0x38], 2
mov dword [esp + 0x1c], edi
je 0x406ebe
cmp dword [esp + 0x3c], 0xfffffffe
jne 0x406ea0
mov dword [esp + 0x3c], 0xffffffff
mov dword [esp + 0x70], 0xffffffff
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x28]
mov byte [esi], 0x1c
inc esi
mov ebx, dword [esp + 0x10]
inc ebx
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], ebx
jmp 0x406998
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x28]
mov byte [esi], 0x1b
inc esi
mov ebx, dword [esp + 0x10]
inc ebx
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], ebx
jmp 0x406998
mov esi, dword [esp + 0x14]
xor edi, edi
test byte [esp + 0x38], 2
mov dword [esp + 0x1c], edi
setne al
add al, 0x19
mov byte [esi], al
inc esi
mov ebx, dword [esp + 0x10]
mov eax, dword [esp + 0x28]
inc ebx
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], ebx
jmp 0x406998
mov edx, dword [esp + 0x3c]
cmp edx, 0xfffffffe
jne 0x406f19
or edx, 0xffffffff
mov dword [esp + 0x3c], edx
mov eax, dword [esp + 0x78]
mov ecx, dword [esi + 0x20]
sub ecx, dword [esi + 0x10]
mov edi, dword [esp + 0x14]
mov esi, edi
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x38]
shr eax, 2
and al, 1
mov dword [esp + 0x70], edx
or al, 0xc
mov dword [esp + 0x1c], edi
mov byte [esi], al
inc esi
mov ebx, dword [esp + 0x10]
mov eax, dword [esp + 0x28]
inc ebx
mov dword [esp + 0x64], ecx
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], ebx
jmp 0x406998
test dword [esi + 0x60], 0x2000000
je case.0x406e75.1
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x40
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 6
lea eax, [ebx + 1]
push 0x42c480
push eax
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
mov eax, dword [esp + 0x10]
jne 0x406fcb
mov esi, dword [esp + 0x14]
add eax, 7
mov ebx, str._b__w_
mov dword [esp + 0x28], eax
mov dword [esp + 0x10], ebx
jmp 0x406994
push 6
inc eax
push str._:_:__
push eax
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x406ffd
mov eax, dword [esp + 0x10]
mov ebx, str._b___w_
mov esi, dword [esp + 0x14]
add eax, 7
mov dword [esp + 0x28], eax
mov dword [esp + 0x10], ebx
jmp 0x406994
mov ebx, dword [esp + 0x10]
mov edx, dword [esi + 0x20]
sub edx, dword [esi + 0x10]
mov edi, dword [esp + 0x14]
mov al, byte [ebx + 1]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x64], edx
cmp al, 0x3a
je 0x407022
cmp al, 0x2e
je 0x407022
cmp al, 0x3d
jne 0x40703f
lea eax, [esp + 0x9c]
push eax
push ebx
call fcn.00405d30
mov ebx, dword [esp + 0x18]
add esp, 8
test eax, eax
jne 0x40a8de
xor ecx, ecx
mov dword [esp + 0x34], ecx
inc ebx
mov dword [esp + 0x10], ebx
movzx eax, byte [ebx]
mov dword [esp + 0x30], eax
cmp eax, 0x5c
jne 0x40707d
inc ebx
cmp byte [ebx], 0x45
je 0x407045
push 3
push 0x42c490
push ebx
call sub.MSVCRT.dll_strncmp
mov ebx, dword [esp + 0x1c]
add esp, 0xc
test eax, eax
jne 0x407093
mov ecx, dword [esp + 0x34]
add ebx, 3
jmp 0x407045
test ecx, ecx
jne 0x407144
cmp eax, 0x5e
jne 0x407144
lea ecx, [eax - 0x5d]
jmp 0x407041
mov eax, dword [esp + 0x30]
xor ecx, ecx
mov dword [esp + 0x50], ecx
mov dword [esp + 0x4c], ecx
lea ecx, [edi + 4]
mov edx, ecx
mov dword [esp + 0x2c], ecx
xor ecx, ecx
mov dword [esp + 0x20], edx
xor edi, edi
mov dword [esp + 0x60], ecx
mov dword [esp + 0x24], edi
mov dword [esp + 0x18], ecx
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xd4], ecx
mov dword [esp + 0xd8], ecx
mov dword [esp + 0xdc], ecx
mov dword [esp + 0xe0], ecx
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xec], ecx
test eax, eax
je 0x40a8c7
mov edi, edi
cmp dword [esp + 0x44], 0
je 0x407270
cmp eax, 0xc0
jb 0x407270
movzx eax, byte [ebx]
mov dword [esp + 0x30], eax
cmp eax, 0xc0
jb 0x407270
test al, 0x20
jne 0x4071a4
mov ecx, dword [esp + 0x30]
inc ebx
and ecx, 0x1f
shl ecx, 6
movzx eax, byte [ebx]
and eax, 0x3f
or eax, ecx
jmp 0x407268
cmp eax, 0x5d
jne 0x407097
test dword [esi + 0x60], 0x2000000
je 0x407097
mov esi, dword [esp + 0x14]
neg ecx
sbb cl, cl
and cl, 0x70
add cl, 0x9d
mov byte [esi], cl
inc esi
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x14], esi
cmp ecx, 0xfffffffe
jne 0x40717f
or ecx, 0xffffffff
mov dword [esp + 0x3c], ecx
mov ebx, dword [esp + 0x10]
mov eax, dword [esp + 0x78]
inc ebx
mov edi, dword [esp + 0x1c]
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x70], ecx
mov dword [esp + 0x10], ebx
jmp 0x406998
movzx ecx, byte [ebx + 1]
and ecx, 0x3f
test al, 0x10
jne 0x4071cb
and eax, 0xf
shl eax, 6
or ecx, eax
movzx eax, byte [ebx + 2]
shl ecx, 6
and eax, 0x3f
or eax, ecx
add ebx, 2
jmp 0x407264
test al, 8
jne 0x4071f4
and eax, 7
shl eax, 6
or ecx, eax
movzx eax, byte [ebx + 2]
and eax, 0x3f
shl ecx, 6
or ecx, eax
movzx eax, byte [ebx + 3]
shl ecx, 6
and eax, 0x3f
or eax, ecx
add ebx, 3
jmp 0x407264
test al, 4
jne 0x407229
and eax, 3
shl eax, 6
or ecx, eax
movzx eax, byte [ebx + 2]
and eax, 0x3f
shl ecx, 6
or ecx, eax
movzx eax, byte [ebx + 3]
and eax, 0x3f
shl ecx, 6
or ecx, eax
movzx eax, byte [ebx + 4]
shl ecx, 6
and eax, 0x3f
or eax, ecx
add ebx, 4
jmp 0x407264
and eax, 1
shl eax, 6
or ecx, eax
movzx eax, byte [ebx + 2]
and eax, 0x3f
shl ecx, 6
or ecx, eax
movzx eax, byte [ebx + 3]
and eax, 0x3f
shl ecx, 6
or ecx, eax
movzx eax, byte [ebx + 4]
and eax, 0x3f
shl ecx, 6
or ecx, eax
movzx eax, byte [ebx + 5]
shl ecx, 6
and eax, 0x3f
or eax, ecx
add ebx, 5
mov edx, dword [esp + 0x20]
mov dword [esp + 0x30], eax
mov dword [esp + 0x10], ebx
cmp dword [esp + 0x2c], edx
jbe 0x40727e
mov dword [esp + 0x4c], 1
cmp dword [ebp + 0x34], 0
je 0x40729a
mov ecx, dword [esp + 0x2c]
cmp ecx, edx
jbe 0x40729a
mov esi, dword [ebp + 0x34]
sub ecx, edx
mov dword [esp + 0x2c], edx
add dword [esi], ecx
mov esi, dword [ebp + 0x30]
cmp dword [esp + 0x7c], 0
je 0x4072c6
cmp eax, 0x5c
jne 0x4078cf
cmp byte [ebx + 1], 0x45
lea eax, [ebx + 1]
jne 0x4078cf
mov dword [esp + 0x7c], 0
mov ebx, eax
jmp 0x407bcf
cmp eax, 0x5b
jne 0x407551
mov al, byte [ebx + 1]
cmp al, 0x3a
je 0x4072e2
cmp al, 0x2e
je 0x4072e2
cmp al, 0x3d
jne 0x4078cf
lea eax, [esp + 0x9c]
push eax
push ebx
call fcn.00405d30
mov ebx, dword [esp + 0x18]
add esp, 8
test eax, eax
je 0x4078cf
mov eax, dword [esi + 8]
xor edi, edi
cmp byte [ebx + 1], 0x3a
mov dword [esp + 0x8c], edi
mov dword [esp + 0x90], eax
jne 0x40a83a
add ebx, 2
mov dword [esp + 0x10], ebx
cmp byte [ebx], 0x5e
jne 0x40733d
mov edi, 1
inc ebx
mov dword [esp + 0x8c], edi
mov dword [esp + 0x50], edi
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x9c]
sub eax, ebx
push eax
push ebx
call fcn.00405ce0
mov esi, eax
add esp, 8
test esi, esi
js 0x40a81f
mov ecx, dword [esp + 0x38]
test cl, 1
je 0x40736e
xor eax, eax
cmp esi, 2
setle al
dec eax
and esi, eax
test ecx, 0x20000000
je 0x407411
mov eax, edi
neg eax
sbb eax, eax
and eax, 0xe
add eax, esi
mov ebx, dword [eax*4 + 0x4407f0]
test ebx, ebx
je 0x4073a9
mov eax, dword [esp + 0x9c]
mov edi, dword [esp + 0x24]
inc eax
mov esi, dword [ebp + 0x30]
dec ebx
mov dword [esp + 0x28], eax
jmp 0x407bcb
mov eax, esi
sub eax, 8
je 0x407470
dec eax
je 0x407469
dec eax
je 0x407462
test edi, edi
je 0x407411
cmp dword [esp + 0x4c], 0
jne 0x4073da
mov eax, dword [esp + 0x9c]
cmp byte [eax + 2], 0x5d
je 0x407411
mov eax, dword [esp + 0x2c]
mov byte [eax], 2
mov eax, dword [esp + 0x2c]
inc eax
push eax
push 0x100
mov dword [esp + 0x34], eax
call fcn.0041d800
mov ecx, dword [esp + 0x34]
add ecx, eax
push ecx
push 0x10ffff
mov dword [esp + 0x3c], ecx
call fcn.0041d800
add esp, 0x10
add dword [esp + 0x2c], eax
mov ebx, dword [esp + 0x90]
lea eax, [esi + esi*2]
mov esi, dword [eax*4 + 0x42b1c8]
lea edi, [esp + 0x130]
mov edx, dword [eax*4 + 0x42b1cc]
add esi, ebx
mov ecx, 8
rep movsd dword es:[edi], dword [esi]
mov esi, dword [eax*4 + 0x42b1d0]
test edx, edx
js 0x4074d2
xor ecx, ecx
add edx, ebx
test esi, esi
js 0x4074c0
mov al, byte [edx + ecx]
or byte [esp + ecx + 0x130], al
inc ecx
cmp ecx, 0x20
jb 0x407450
jmp 0x4074d2
mov edx, 0xd
jmp 0x407475
mov edx, 0xc
jmp 0x407475
mov edx, 0xb
mov eax, dword [esp + 0x2c]
test edi, edi
mov ebx, dword [esp + 0x9c]
mov edi, dword [esp + 0x24]
setne cl
mov esi, dword [ebp + 0x30]
add cl, 3
mov byte [eax], cl
mov ecx, 1
mov eax, dword [esp + 0x2c]
inc eax
mov dword [esp + 0x18], ecx
mov dword [esp + 0x2c], eax
mov byte [eax], dl
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x20]
inc eax
mov dword [esp + 0x2c], eax
mov byte [eax], 0
inc dword [esp + 0x2c]
inc ebx
jmp 0x407bd3
mov al, byte [edx + ecx]
not al
and byte [esp + ecx + 0x130], al
inc ecx
cmp ecx, 0x20
jb 0x4074c0
test esi, esi
jns 0x4074d8
neg esi
cmp esi, 1
jne 0x4074e7
and byte [esp + 0x131], 0xc3
jmp 0x4074f4
cmp esi, 2
jne 0x4074f4
and byte [esp + 0x13b], 0x7f
xor ecx, ecx
cmp dword [esp + 0x8c], ecx
je 0x407520
nop
mov al, byte [esp + ecx + 0x130]
not al
or byte [esp + ecx + 0xd0], al
inc ecx
cmp ecx, 0x20
jb 0x407500
jmp 0x407534
mov al, byte [esp + ecx + 0x130]
or byte [esp + ecx + 0xd0], al
inc ecx
cmp ecx, 0x20
jb 0x407520
mov ebx, dword [esp + 0x9c]
mov edi, 1
mov esi, dword [ebp + 0x30]
inc ebx
mov dword [esp + 0x60], 2
jmp 0x407bc7
cmp eax, 0x5c
jne 0x4078cf
mov ebx, dword [ebp + 0x14]
lea eax, [esp + 0xf8]
push 1
push dword [esp + 0x3c]
push dword [esi + 0x40]
push ebx
push eax
lea eax, [esp + 0x24]
push eax
call fcn.00405510
add esp, 0x18
mov esi, eax
cmp dword [ebx], 0
jne 0x40a828
test esi, esi
jne 0x4075a2
mov edx, dword [esp + 0xf8]
mov ebx, dword [esp + 0x10]
mov esi, dword [ebp + 0x30]
mov dword [esp + 0x30], edx
jmp 0x4078d3
cmp esi, 5
jne 0x4075bc
mov ebx, dword [esp + 0x10]
mov edx, 8
mov esi, dword [ebp + 0x30]
mov dword [esp + 0x30], edx
jmp 0x4078d3
cmp esi, 0xc
je 0x40a869
cmp esi, 0x1a
jne 0x4075f5
mov ebx, dword [esp + 0x10]
cmp byte [ebx + 1], 0x5c
jne 0x4075e5
cmp byte [ebx + 2], 0x45
jne 0x4075e5
mov esi, dword [ebp + 0x30]
add ebx, 2
jmp 0x407bcb
mov esi, dword [ebp + 0x30]
mov dword [esp + 0x7c], 1
jmp 0x407bcb
cmp esi, 0x19
je 0x407661
mov eax, dword [ebp + 0x30]
inc edi
mov ecx, dword [esp + 0x60]
add ecx, 2
mov dword [esp + 0x24], edi
mov dword [esp + 0x60], ecx
mov edx, dword [eax + 8]
lea eax, [esi - 6]
cmp eax, 0x1c
ja case.0x407623.12
movzx eax, byte [eax + 0x40ae10]
jmp dword [eax*4 + 0x40addc]
mov ebx, dword [esi*4 + 0x440764]
mov eax, dword [esp + 0x10]
dec ebx
mov esi, dword [ebp + 0x30]
dec edi
mov dword [esp + 0x28], eax
jmp 0x407bc7
xor ecx, ecx
jmp 0x407650
mov al, byte [edx + ecx + 0x40]
or byte [esp + ecx + 0xd0], al
inc ecx
cmp ecx, 0x20
jb 0x407650
mov ebx, dword [esp + 0x10]
mov esi, dword [ebp + 0x30]
jmp 0x407bcb
mov dword [esp + 0x50], 1
xor ecx, ecx
jmp 0x407680
mov al, byte [edx + ecx + 0x40]
not al
or byte [esp + ecx + 0xd0], al
inc ecx
cmp ecx, 0x20
jb 0x407680
mov ebx, dword [esp + 0x10]
mov esi, dword [ebp + 0x30]
jmp 0x407bcb
xor ecx, ecx
mov al, byte [edx + ecx + 0xa0]
or byte [esp + ecx + 0xd0], al
inc ecx
cmp ecx, 0x20
jb 0x4076a1
mov ebx, dword [esp + 0x10]
mov esi, dword [ebp + 0x30]
jmp 0x407bcb
mov dword [esp + 0x50], 1
xor ecx, ecx
jmp 0x4076d0
mov al, byte [edx + ecx + 0xa0]
not al
or byte [esp + ecx + 0xd0], al
inc ecx
cmp ecx, 0x20
jb 0x4076d0
mov ebx, dword [esp + 0x10]
mov esi, dword [ebp + 0x30]
jmp 0x407bcb
lea eax, [esp + 0xd0]
xor esi, esi
sub edx, eax
lea ecx, [ecx]
lea ecx, [esp + 0xd0]
add ecx, esi
inc esi
mov al, byte [edx + ecx]
or byte [ecx], al
cmp esi, 0x20
jb 0x407700
mov ebx, dword [esp + 0x10]
mov esi, dword [ebp + 0x30]
jmp 0x407bcb
lea eax, [esp + 0xd0]
mov dword [esp + 0x50], 1
xor esi, esi
sub edx, eax
lea ecx, [esp + 0xd0]
add ecx, esi
inc esi
mov al, byte [edx + ecx]
not al
or byte [ecx], al
cmp esi, 0x20
jb 0x407733
mov ebx, dword [esp + 0x10]
mov esi, dword [ebp + 0x30]
jmp 0x407bcb
mov esi, dword [ebp + 0x30]
lea eax, [esp + 0x2c]
push 0xffffffffffffffff
push 0x42cf98
push esi
push dword [esp + 0x44]
push eax
lea eax, [esp + 0xe4]
push eax
call fcn.00404840
mov ebx, dword [esp + 0x28]
add esp, 0x18
jmp 0x407bcb
mov esi, dword [ebp + 0x30]
lea eax, [esp + 0x2c]
push 0x42cf98
push esi
push dword [esp + 0x40]
push eax
lea eax, [esp + 0xe0]
push eax
call fcn.00404990
mov ebx, dword [esp + 0x24]
add esp, 0x14
jmp 0x407bcb
mov esi, dword [ebp + 0x30]
lea eax, [esp + 0x2c]
push 0xffffffffffffffff
push 0x42cfe8
push esi
push dword [esp + 0x44]
push eax
lea eax, [esp + 0xe4]
push eax
call fcn.00404840
mov ebx, dword [esp + 0x28]
add esp, 0x18
jmp 0x407bcb
mov esi, dword [ebp + 0x30]
lea eax, [esp + 0x2c]
push 0x42cfe8
push esi
push dword [esp + 0x40]
push eax
lea eax, [esp + 0xe0]
push eax
call fcn.00404990
mov ebx, dword [esp + 0x24]
add esp, 0x14
jmp 0x407bcb
push ebx
lea eax, [esp + 0x110]
mov dword [esp + 0x114], 0
push eax
lea eax, [esp + 0x118]
mov dword [esp + 0x114], 0
push eax
lea eax, [esp + 0x134]
push eax
lea eax, [esp + 0x20]
push eax
call fcn.0040c7f0
add esp, 0x14
test eax, eax
je 0x40a828
xor eax, eax
mov edx, dword [esp + 0x20]
cmp esi, 0x10
mov esi, dword [ebp + 0x30]
sete al
cmp eax, dword [esp + 0x128]
mov eax, dword [esp + 0x2c]
sete cl
add cl, 3
mov byte [eax], cl
mov ecx, dword [esp + 0x2c]
movzx eax, byte [esp + 0x110]
inc ecx
mov dword [esp + 0x2c], ecx
mov byte [ecx], al
mov ecx, dword [esp + 0x2c]
movzx eax, byte [esp + 0x10c]
inc ecx
mov dword [esp + 0x2c], ecx
mov byte [ecx], al
mov ecx, 1
inc dword [esp + 0x2c]
dec edi
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x24], edi
jmp 0x407bd3
test byte [esp + 0x38], 0x40
jne 0x40a851
mov ebx, dword [esp + 0x10]
dec edi
mov esi, dword [ebp + 0x30]
sub ecx, 2
mov dword [esp + 0x60], ecx
movzx edx, byte [ebx]
mov dword [esp + 0x30], edx
jmp 0x4078d3
mov edx, dword [esp + 0x30]
cmp byte [ebx + 1], 0x5c
jne 0x4078fd
lea esp, [esp]
cmp byte [ebx + 2], 0x45
lea eax, [ebx + 2]
jne 0x4078fd
mov ebx, eax
mov dword [esp + 0x7c], 0
mov dword [esp + 0x10], ebx
cmp byte [ebx + 1], 0x5c
je 0x4078e0
mov ecx, ebx
cmp edx, 0xd
je 0x407909
cmp edx, 0xa
jne 0x407910
or dword [esi + 0x64], 0x800
cmp dword [esp + 0x7c], 0
jne 0x407b7a
cmp byte [ebx + 1], 0x2d
jne 0x407b7a
add ebx, 2
mov dword [esp + 0x10], ebx
cmp byte [ebx], 0x5c
jne 0x40797e
cmp byte [ebx + 1], 0x45
jne 0x407945
add ebx, 2
mov dword [esp + 0x10], ebx
cmp byte [ebx], 0x5c
je 0x407931
jmp 0x40797e
cmp byte [ebx], 0x5c
jne 0x40797e
lea ebx, [ebx]
cmp byte [ebx + 1], 0x51
jne 0x40797e
add ebx, 2
mov dword [esp + 0x10], ebx
cmp byte [ebx], 0x5c
jne 0x407976
cmp byte [ebx + 1], 0x45
jne 0x407976
add ebx, 2
mov dword [esp + 0x10], ebx
cmp byte [ebx], 0x5c
je 0x407950
jmp 0x40797e
mov dword [esp + 0x7c], 1
mov al, byte [ebx]
test al, al
je 0x407b74
cmp dword [esp + 0x7c], 0
jne 0x407997
cmp al, 0x5d
je 0x407b74
cmp dword [esp + 0x44], 0
movzx eax, al
mov dword [esp + 0x24], eax
mov dword [esp + 0xa4], eax
je 0x407aaa
cmp eax, 0xc0
jb 0x407aaa
test al, 0x20
jne 0x4079d7
mov ecx, dword [esp + 0x24]
inc ebx
and ecx, 0x1f
shl ecx, 6
movzx eax, byte [ebx]
and eax, 0x3f
or eax, ecx
jmp 0x407a9b
movzx ecx, byte [ebx + 1]
mov edx, dword [esp + 0x30]
and ecx, 0x3f
test al, 0x10
jne 0x407a02
and eax, 0xf
shl eax, 6
or ecx, eax
movzx eax, byte [ebx + 2]
shl ecx, 6
and eax, 0x3f
or eax, ecx
add ebx, 2
jmp 0x407a9b
test al, 8
jne 0x407a2b
and eax, 7
shl eax, 6
or ecx, eax
movzx eax, byte [ebx + 2]
and eax, 0x3f
shl ecx, 6
or ecx, eax
movzx eax, byte [ebx + 3]
shl ecx, 6
and eax, 0x3f
or eax, ecx
add ebx, 3
jmp 0x407a9b
test al, 4
jne 0x407a60
and eax, 3
shl eax, 6
or ecx, eax
movzx eax, byte [ebx + 2]
and eax, 0x3f
shl ecx, 6
or ecx, eax
movzx eax, byte [ebx + 3]
and eax, 0x3f
shl ecx, 6
or ecx, eax
movzx eax, byte [ebx + 4]
shl ecx, 6
and eax, 0x3f
or eax, ecx
add ebx, 4
jmp 0x407a9b
and eax, 1
shl eax, 6
or ecx, eax
movzx eax, byte [ebx + 2]
and eax, 0x3f
shl ecx, 6
or ecx, eax
movzx eax, byte [ebx + 3]
and eax, 0x3f
shl ecx, 6
or ecx, eax
movzx eax, byte [ebx + 4]
and eax, 0x3f
shl ecx, 6
or ecx, eax
movzx eax, byte [ebx + 5]
shl ecx, 6
and eax, 0x3f
or eax, ecx
add ebx, 5
mov dword [esp + 0x24], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0x10], ebx
cmp dword [esp + 0x7c], 0
jne 0x407b4a
cmp eax, 0x5c
jne 0x407b19
mov ebx, dword [ebp + 0x14]
lea eax, [esp + 0xa4]
push 1
push dword [esp + 0x3c]
push dword [esi + 0x40]
push ebx
push eax
lea eax, [esp + 0x24]
push eax
call fcn.00405510
add esp, 0x18
cmp dword [ebx], 0
jne 0x40a828
test eax, eax
je 0x407b08
cmp eax, 5
jne 0x40a881
mov ebx, dword [esp + 0x10]
mov ecx, 8
mov edx, dword [esp + 0x30]
mov dword [esp + 0xa4], ecx
jmp 0x407b4e
mov ebx, dword [esp + 0x10]
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp + 0x30]
jmp 0x407b4e
cmp eax, 0x5b
jne 0x407b4a
mov al, byte [ebx + 1]
cmp al, 0x3a
je 0x407b2d
cmp al, 0x2e
je 0x407b2d
cmp al, 0x3d
jne 0x407b4a
lea eax, [esp + 0x9c]
push eax
push ebx
call fcn.00405d30
mov ebx, dword [esp + 0x18]
add esp, 8
test eax, eax
jne 0x40a899
mov ecx, dword [esp + 0x24]
cmp ecx, edx
jb 0x40a8b0
je 0x407b7a
mov dword [esp + 0x60], 2
cmp ecx, 0xd
je 0x407b6a
cmp ecx, 0xa
jne 0x407b71
or dword [esi + 0x64], 0x800
push ecx
jmp 0x407ba6
mov ebx, ecx
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x60]
cmp eax, 2
jge 0x407b88
inc eax
mov dword [esp + 0x60], eax
cmp dword [esp + 0x7c], 0
jne 0x407ba5
cmp dword [esp + 0x18], 0
jne 0x407ba5
cmp eax, 1
jne 0x407ba5
cmp byte [ebx + 1], 0x5d
je 0x407d5b
push edx
push edx
push esi
push dword [esp + 0x44]
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0xe4]
push eax
call fcn.00404c50
mov ebx, dword [esp + 0x28]
add esp, 0x18
add edi, eax
mov dword [esp + 0x24], edi
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
inc ebx
mov dword [esp + 0x10], ebx
movzx eax, byte [ebx]
mov dword [esp + 0x30], eax
test eax, eax
jne 0x407c0d
mov eax, dword [esp + 0x28]
test eax, eax
je 0x40a8c7
lea ebx, [eax + 1]
mov dword [esp + 0x28], 0
mov dword [esp + 0x10], ebx
movzx eax, byte [ebx]
mov dword [esp + 0x30], eax
test eax, eax
je 0x40a8c7
cmp eax, 0x5d
jne 0x407100
cmp dword [esp + 0x7c], 0
jne 0x407100
mov eax, 1
cmp dword [esp + 0x2c], edx
ja 0x407c30
mov eax, dword [esp + 0x4c]
mov ebx, dword [esp + 0x3c]
cmp ebx, 0xfffffffe
jne 0x407c40
or ebx, 0xffffffff
mov dword [esp + 0x3c], ebx
mov esi, dword [esp + 0x78]
mov dword [esp + 0x70], ebx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 0x8c], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 0xa0], esi
mov dword [esp + 0x60], ebx
test eax, eax
je 0x407eb4
mov eax, dword [esp + 0x38]
test ecx, ecx
mov ecx, dword [esp + 0x50]
jne 0x407c85
test ecx, ecx
je 0x407c85
test eax, 0x20000000
je 0x407eb8
cmp dword [esp + 0x44], 0
mov esi, dword [esp + 0x34]
je 0x407cd6
test ecx, ecx
je 0x407cd6
test esi, esi
jne 0x407cd6
test eax, 0x20000000
jne 0x407cd6
mov eax, dword [esp + 0x2c]
mov byte [eax], 2
mov eax, dword [esp + 0x2c]
inc eax
push eax
push 0x100
mov dword [esp + 0x34], eax
call fcn.0041d800
mov ecx, dword [esp + 0x34]
add ecx, eax
push ecx
push 0x10ffff
mov dword [esp + 0x3c], ecx
call fcn.0041d800
add esp, 0x10
add dword [esp + 0x2c], eax
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov byte [eax], 0
inc dword [esp + 0x2c]
test esi, esi
mov byte [ecx], 0x70
setne al
mov byte [ecx + 3], al
test ebx, ebx
je 0x407cfd
or al, 4
mov byte [ecx + 3], al
test edi, edi
jle 0x407e92
or byte [ecx + 3], 2
add ecx, 4
mov eax, dword [esp + 0x2c]
sub eax, ecx
mov dword [esp + 0x14], ecx
push eax
push ecx
lea eax, [ecx + 0x20]
push eax
call sub.MSVCRT.dll_memmove
add esp, 0xc
test esi, esi
je 0x407d3d
test ebx, ebx
jne 0x407d3d
xor ecx, ecx
mov edi, edi
not byte [esp + ecx + 0xd0]
inc ecx
cmp ecx, 0x20
jb 0x407d30
mov edi, dword [esp + 0x14]
lea esi, [esp + 0xd0]
mov ecx, 8
rep movsd dword es:[edi], dword [esi]
mov edx, dword [esp + 0x2c]
add edx, 0x20
jmp 0x407e96
mov eax, dword [esp + 0x6c]
inc ebx
mov esi, dword [esp + 0x34]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x60], eax
test esi, esi
je 0x407e5d
mov ecx, dword [esp + 0x3c]
cmp ecx, 0xfffffffe
jne 0x407d8f
or ecx, 0xffffffff
mov dword [esp + 0x3c], ecx
mov eax, dword [esp + 0x78]
mov ebx, dword [esp + 0x44]
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x70], ecx
test ebx, ebx
je 0x407e18
test al, 1
je 0x407e1a
mov eax, edx
cdq
and edx, 0x7f
add eax, edx
mov edx, dword [esp + 0x30]
sar eax, 7
movzx ecx, byte [eax + 0x42e878]
mov eax, edx
shl ecx, 7
and eax, 0x8000007f
jns 0x407dd5
dec eax
or eax, 0xffffff80
inc eax
add ecx, eax
movzx eax, word [ecx*2 + 0x430a78]
movzx eax, byte [eax*8 + 0x42d1fb]
test eax, eax
je 0x407e14
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
mov word [esi], 0x90f
mov byte [esi + 2], al
add esi, 3
mov ebx, dword [esp + 0x10]
mov eax, dword [esp + 0x28]
inc ebx
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], ebx
jmp 0x406998
mov eax, dword [esp + 0x38]
test al, 1
mov esi, dword [esp + 0x14]
setne al
add al, 0x1f
mov byte [esi], al
inc esi
test ebx, ebx
je 0x40a4dc
cmp edx, 0x7f
jbe 0x40a4dc
push esi
push edx
call fcn.0041d800
mov ebx, dword [esp + 0x18]
add esp, 8
mov edi, dword [esp + 0x1c]
add esi, eax
mov eax, dword [esp + 0x28]
inc ebx
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], ebx
jmp 0x406998
cmp dword [esp + 0x44], 0
je 0x407e81
cmp edx, 0x7f
jbe 0x407e81
lea eax, [esp + 0x84]
push eax
push edx
call fcn.0041d800
add esp, 8
mov esi, eax
jmp 0x406b7a
mov byte [esp + 0x84], dl
mov esi, 1
jmp 0x406b7a
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x1c]
mov eax, edx
sub eax, ecx
mov dword [esp + 0x14], edx
sar eax, 8
mov byte [ecx + 1], al
mov al, dl
sub al, cl
mov byte [ecx + 2], al
jmp case.default.0x408fe8
mov ecx, dword [esp + 0x50]
mov ebx, dword [ebp + 0x34]
test ebx, ebx
je 0x407ec7
mov eax, dword [esp + 0x2c]
sub eax, edx
add dword [ebx], eax
mov esi, dword [esp + 0x34]
cmp esi, ecx
mov edx, dword [esp + 0x14]
setne al
add al, 0x6e
mov byte [edx], al
test ebx, ebx
jne 0x407f00
test esi, esi
je 0x407eef
xor ecx, ecx
not byte [esp + ecx + 0xd0]
inc ecx
cmp ecx, 0x20
jb 0x407ee2
mov ecx, 8
lea esi, [esp + 0xd0]
lea edi, [edx + 1]
rep movsd dword es:[edi], dword [esi]
add edx, 0x21
mov dword [esp + 0x14], edx
jmp case.default.0x408fe8
test edx, edx
je case.0x406e75.1
mov edx, dword [ebp + 0x14]
lea eax, [esp + 0x80]
push edx
push eax
lea eax, [esp + 0x70]
push eax
lea eax, [ebx + 1]
push eax
call fcn.0040d970
add esp, 0x10
mov ebx, eax
cmp dword [edx], 0
mov dword [esp + 0x10], ebx
jne 0x40ad19
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x68]
jmp 0x407f73
xor ecx, ecx
or eax, 0xffffffff
jmp 0x407f65
mov ecx, 1
or eax, 0xffffffff
jmp 0x407f65
xor ecx, ecx
mov eax, 1
mov edx, dword [ebp + 0x14]
mov dword [esp + 0x68], ecx
mov dword [esp + 0x80], eax
mov esi, dword [esp + 0x1c]
mov dword [esp + 0x20], eax
test esi, esi
je 0x40a91c
test ecx, ecx
jne 0x407fb0
mov edx, dword [esp + 0xa0]
mov dword [esp + 0x78], edx
mov edx, dword [esp + 0x70]
mov dword [esp + 0x3c], edx
mov edx, dword [esp + 0x8c]
mov dword [esp + 0x6c], edx
mov edx, dword [esp + 0x60]
mov dword [esp + 0x5c], edx
mov edx, dword [ebp + 0x14]
sub ecx, eax
mov dword [esp + 0x4c], 0
neg ecx
mov dword [esp + 0x48], esi
sbb ecx, ecx
and ecx, 2
test edi, edi
mov edi, dword [ebp + 0x30]
mov dword [esp + 0xa8], ecx
je 0x4080a5
inc ebx
jmp 0x407fe0
mov ecx, dword [edi + 0xc]
movzx eax, byte [ebx]
test byte [eax + ecx], 1
je 0x407ffb
lea esp, [esp]
movzx eax, byte [ebx + 1]
inc ebx
test byte [eax + ecx], 1
jne 0x407ff0
cmp byte [ebx], 0x23
jne 0x40809d
mov al, byte [ebx + 1]
inc ebx
mov byte [esp + 0x43], al
test al, al
je 0x407fe0
mov edx, dword [edi + 0x84]
test edx, edx
je 0x408043
mov ecx, dword [edi + 0x1c]
cmp ebx, ecx
jae 0x40806e
push dword [esp + 0x44]
lea eax, [edi + 0x88]
push eax
push ecx
push edx
push ebx
call fcn.0041ded0
add esp, 0x14
test eax, eax
je 0x40806e
add ebx, dword [edi + 0x88]
jmp 0x407fe0
mov eax, dword [edi + 0x1c]
mov ecx, dword [edi + 0x88]
sub eax, ecx
cmp ebx, eax
ja 0x40806e
mov al, byte [esp + 0x43]
cmp al, byte [edi + 0x8c]
jne 0x40806e
cmp ecx, 1
je 0x40803b
mov al, byte [ebx + 1]
cmp al, byte [edi + 0x8d]
je 0x40803b
inc ebx
cmp dword [esp + 0x44], 0
je 0x40808a
mov al, byte [ebx]
and al, 0xc0
cmp al, 0x80
jne 0x40808a
mov edi, edi
mov al, byte [ebx + 1]
inc ebx
and al, 0xc0
cmp al, 0x80
je 0x408080
mov al, byte [ebx]
mov byte [esp + 0x43], al
test al, al
jne 0x408010
jmp 0x407fe0
mov edx, dword [ebp + 0x14]
dec ebx
mov dword [esp + 0x10], ebx
cmp byte [ebx + 1], 0x28
jne 0x4080ec
cmp byte [ebx + 2], 0x3f
jne 0x4080ec
cmp byte [ebx + 3], 0x23
jne 0x4080ec
add ebx, 4
mov dword [esp + 0x10], ebx
mov al, byte [ebx]
test al, al
je 0x4080d3
cmp al, 0x29
je 0x4080e7
inc ebx
mov dword [esp + 0x10], ebx
mov al, byte [ebx]
test al, al
jne 0x4080c4
mov eax, dword [ebp + 0x10]
mov dword [edx], 0x12
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp byte [ebx], 0
je 0x4080d3
mov cl, byte [ebx + 1]
cmp cl, 0x2b
jne 0x40810b
inc ebx
mov dword [esp + 0x18], 0
mov dword [esp + 0x4c], 1
mov dword [esp + 0x10], ebx
jmp 0x40812d
cmp cl, 0x3f
jne 0x408122
mov ecx, dword [esp + 0x114]
inc ebx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x10], ebx
jmp 0x40812d
mov eax, dword [esp + 0x108]
mov dword [esp + 0x18], eax
cmp byte [esi], 0x75
jne 0x4081b2
push 3
lea eax, [esi + 3]
push esi
push eax
call sub.MSVCRT.dll_memmove
mov word [esi], 0x81
add esp, 0xc
mov byte [esi + 2], 6
mov word [esi + 6], 0x78
mov byte [esi + 8], 6
mov esi, dword [esp + 0x14]
add esi, 6
mov dword [esp + 0xb4], 9
cmp dword [ebp + 0x34], 0
mov dword [esp + 0x14], esi
jne 0x4081ac
mov eax, dword [edi + 0x10]
mov edx, dword [edi + 0x20]
add eax, 2
cmp edx, eax
jb 0x4081ac
movzx ecx, byte [edx - 2]
movzx eax, byte [edx - 1]
shl ecx, 8
or ecx, eax
mov eax, dword [esp + 0x1c]
sub eax, dword [edi + 0x14]
inc eax
cmp ecx, eax
jne 0x4081ac
lea eax, [ecx + 3]
sar eax, 8
add cl, 3
mov byte [edx - 2], al
mov eax, dword [edi + 0x20]
mov byte [eax - 1], cl
mov ebx, dword [esp + 0x10]
jmp 0x4081b6
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
mov dl, byte [eax]
mov byte [esp + 0x43], dl
cmp dl, 0x1d
je 0x408950
cmp dl, 0x1e
je 0x408950
cmp dl, 0x1f
je 0x408950
cmp dl, 0x20
je 0x408950
cmp dl, 0x17
jae 0x4081fe
mov esi, 0x34
movzx ecx, dl
mov dword [esp + 0x34], esi
mov dword [esp + 0x24], ecx
jmp 0x408a13
cmp dl, 0x6e
je 0x4088c1
cmp dl, 0x6f
je 0x4088c1
cmp dl, 0x70
je 0x4088c1
cmp dl, 0x71
je 0x4088c1
cmp dl, 0x72
je 0x4088c1
cmp dl, 0x73
je 0x4088c1
cmp dl, 0x74
je 0x4088c1
cmp dl, 0x7d
jb 0x4088a1
cmp dl, 0x87
ja 0x4088a1
mov ecx, dword [esp + 0x1c]
mov eax, esi
mov esi, dword [esp + 0x64]
sub eax, ecx
mov dword [esp + 0x24], eax
xor eax, eax
mov dword [esp + 0x50], esi
mov dword [esp + 0x34], eax
mov dword [esp + 0x90], eax
cmp dl, 0x87
jne 0x40827f
cmp byte [ecx + 3], 0x91
je 0x4082ff
mov ecx, dword [esp + 0x68]
cmp dl, 0x81
jae 0x4082ab
test ecx, ecx
jg 0x4082ff
mov eax, dword [esp + 0x20]
test eax, eax
js 0x408299
cmp eax, 1
jle 0x4082af
mov eax, 1
mov dword [esp + 0x20], eax
mov dword [esp + 0x80], eax
jmp 0x4082af
mov eax, dword [esp + 0x20]
test ecx, ecx
jne 0x4083a7
push dword [esp + 0x64]
push edi
push dword [esp + 0x4c]
cmp eax, 1
jg 0x408348
mov eax, dword [esp + 0x20]
mov ebx, dword [esp + 0x28]
push 1
push ebx
mov byte [eax], cl
call fcn.00404e60
push dword [esp + 0x38]
lea edi, [ebx + 1]
push ebx
push edi
call sub.MSVCRT.dll_memmove
inc dword [esp + 0x34]
add esp, 0x20
mov edx, dword [esp + 0x20]
test edx, edx
jne 0x408328
mov byte [ebx], 0xa1
mov ebx, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
mov edi, dword [ebp + 0x30]
mov eax, dword [esp + 0xa8]
or dword [edi + 0x68], eax
xor edi, edi
mov eax, dword [esp + 0x28]
inc ebx
mov dword [esp + 0x1c], 0
mov dword [esp + 0x10], ebx
jmp 0x406998
mov al, byte [esp + 0x18]
sub al, 0x6e
mov dword [esp + 0x90], ebx
mov byte [ebx], al
dec edx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x1c], edi
mov edi, dword [ebp + 0x30]
jmp 0x40851c
mov ebx, dword [esp + 0x20]
push 4
push dword [esp + 0x2c]
mov byte [ebx], 0
call fcn.00404e60
push dword [esp + 0x38]
mov eax, dword [esp + 0x34]
push eax
add eax, 4
push eax
call sub.MSVCRT.dll_memmove
mov ecx, dword [esp + 0x3c]
add ebx, 4
mov al, byte [esp + 0x38]
add esp, 0x20
mov edx, dword [esp + 0x20]
sub al, 0x6e
mov dword [esp + 0x14], ebx
mov byte [ecx], al
mov byte [ecx + 1], 0x83
add ecx, 2
mov dword [esp + 0x34], ecx
mov word [ecx], 0
add ecx, 2
mov ebx, dword [esp + 0x10]
dec edx
mov dword [esp + 0x1c], ecx
jmp 0x40851c
cmp ecx, 1
jle 0x408512
mov edx, dword [ebp + 0x34]
test edx, edx
je 0x40841f
dec ecx
mov dword [esp + 0x50], ecx
fild dword [esp + 0x50]
imul ecx, dword [esp + 0xb4]
fstp qword [esp + 0x50]
fld qword [esp + 0x50]
fild dword [esp + 0xb4]
fstp qword [esp + 0x50]
fmul qword [esp + 0x50]
fcomp qword [0x42c540]
fnstsw ax
test ah, 0x41
je 0x40a901
mov eax, dword [esp + 0xb0]
mov edx, dword [edx]
sub eax, edx
cmp eax, ecx
jl 0x40a901
mov ebx, dword [esp + 0x10]
lea eax, [ecx + edx]
mov ecx, dword [ebp + 0x34]
mov edx, dword [esp + 0x80]
mov dword [ecx], eax
mov ecx, dword [esp + 0x68]
jmp 0x408516
cmp dword [esp + 0xcc], 0
je 0x408440
cmp dword [esp + 0x5c], 0
jge 0x408440
mov eax, dword [esp + 0x78]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x30], 1
cmp ecx, 1
jle 0x408512
mov ebx, dword [esp + 0x24]
mov esi, dword [edi + 0x20]
mov eax, dword [esp + 0x14]
sub esi, dword [edi + 0x10]
push ebx
push dword [esp + 0x20]
push eax
call sub.MSVCRT.dll_memcpy
mov eax, dword [edi + 0x3c]
add esp, 0xc
mov ecx, dword [ebp + 0x30]
sub eax, esi
add eax, dword [edi + 0x10]
mov edi, dword [esp + 0x50]
add eax, 0xffffff9c
add eax, edi
cmp dword [ecx + 0x20], eax
jbe 0x4084b1
push ecx
call fcn.0040b9a0
mov ecx, dword [ebp + 0x14]
add esp, 4
mov dword [ecx], eax
test eax, eax
jne 0x40a828
mov ecx, dword [ebp + 0x30]
mov eax, dword [ecx + 0x3c]
sub eax, esi
add eax, 0xffffff9c
add eax, dword [ecx + 0x10]
add eax, edi
cmp dword [ecx + 0x20], eax
ja 0x408486
mov eax, dword [ecx + 0x10]
lea edx, [edi + eax]
mov edi, dword [ebp + 0x30]
add eax, esi
cmp edx, eax
jae 0x4084f1
movzx ecx, byte [edx]
movzx eax, byte [edx + 1]
shl ecx, 8
or ecx, eax
mov eax, dword [edi + 0x20]
add ecx, ebx
sar ecx, 8
mov byte [eax], cl
mov cl, byte [edx + 1]
add edx, 2
mov eax, dword [edi + 0x20]
add cl, bl
mov byte [eax + 1], cl
add dword [edi + 0x20], 2
mov eax, dword [edi + 0x10]
add eax, esi
cmp edx, eax
jb 0x4084c0
mov eax, dword [esp + 0x30]
add dword [esp + 0x14], ebx
inc eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x50], esi
mov dword [esp + 0x30], eax
cmp eax, ecx
jl 0x408455
mov ebx, dword [esp + 0x10]
mov edx, dword [esp + 0x20]
test edx, edx
jle 0x408525
sub edx, ecx
mov dword [esp + 0x80], edx
test edx, edx
js 0x408749
cmp dword [ebp + 0x34], 0
je 0x4085ab
test edx, edx
jle 0x4085ab
mov ecx, dword [esp + 0xb4]
add ecx, 7
mov dword [esp + 0x90], ecx
fild dword [esp + 0x90]
imul ecx, edx
fstp qword [esp + 0x90]
fld qword [esp + 0x90]
fild dword [esp + 0x80]
sub ecx, 6
fstp qword [esp + 0x90]
fmul qword [esp + 0x90]
fcomp qword [0x42c540]
fnstsw ax
test ah, 0x41
je 0x40a901
mov ebx, dword [ebp + 0x34]
mov eax, dword [esp + 0xb0]
mov edx, dword [ebx]
sub eax, edx
cmp eax, ecx
jl 0x40a901
lea eax, [ecx + edx]
mov dword [ebx], eax
jmp 0x4086ef
lea eax, [edx - 1]
mov dword [esp + 0x50], eax
test eax, eax
js 0x4086f3
mov ecx, dword [esp + 0x18]
mov ebx, eax
mov eax, dword [esp + 0x24]
sub cl, 0x6e
mov dword [esp + 0x18], ecx
jmp 0x4085d3
mov edi, dword [ebp + 0x30]
mov edx, dword [ebp + 0x30]
mov edi, dword [edi + 0x20]
sub edi, dword [edx + 0x10]
mov edx, dword [esp + 0x14]
mov byte [edx], cl
inc edx
mov dword [esp + 0x14], edx
test ebx, ebx
je 0x408618
mov eax, dword [esp + 0x34]
mov byte [edx], 0x83
inc edx
test eax, eax
jne 0x4085fb
xor ecx, ecx
jmp 0x4085ff
mov ecx, edx
sub ecx, eax
mov eax, ecx
mov dword [esp + 0x34], edx
sar eax, 8
mov byte [edx], al
mov eax, dword [esp + 0x24]
mov byte [edx + 1], cl
add edx, 2
mov dword [esp + 0x14], edx
push eax
push dword [esp + 0x20]
push edx
call sub.MSVCRT.dll_memcpy
mov ecx, dword [ebp + 0x30]
add esp, 0xc
mov eax, dword [ecx + 0x3c]
sub eax, edi
add eax, 0xffffff9c
add eax, dword [ecx + 0x10]
add eax, esi
cmp dword [ecx + 0x20], eax
jbe 0x40866b
jmp 0x408640
push ecx
call fcn.0040b9a0
mov ecx, dword [ebp + 0x14]
add esp, 4
mov dword [ecx], eax
test eax, eax
jne 0x40a828
mov ecx, dword [ebp + 0x30]
mov eax, dword [ecx + 0x3c]
sub eax, edi
add eax, 0xffffff9c
add eax, dword [ecx + 0x10]
add eax, esi
cmp dword [ecx + 0x20], eax
ja 0x408640
mov eax, dword [ecx + 0x10]
lea edx, [esi + eax]
add eax, edi
cmp edx, eax
jae 0x4086d6
mov esi, ebx
neg esi
sbb esi, esi
and esi, 3
inc esi
neg ebx
sbb bl, bl
and bl, 3
inc bl
lea ebx, [ebx]
movzx ecx, byte [edx]
movzx eax, byte [edx + 1]
shl ecx, 8
or ecx, eax
mov eax, dword [ebp + 0x30]
add ecx, esi
add ecx, dword [esp + 0x24]
sar ecx, 8
mov eax, dword [eax + 0x20]
mov byte [eax], cl
mov cl, bl
mov eax, dword [ebp + 0x30]
add cl, byte [esp + 0x24]
add cl, byte [edx + 1]
add edx, 2
mov eax, dword [eax + 0x20]
mov byte [eax + 1], cl
mov eax, dword [ebp + 0x30]
add dword [eax + 0x20], 2
mov eax, dword [eax + 0x10]
add eax, edi
cmp edx, eax
jb 0x408690
mov ebx, dword [esp + 0x50]
mov eax, dword [esp + 0x24]
mov esi, edi
add dword [esp + 0x14], eax
dec ebx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x50], ebx
jns 0x4085d0
mov ebx, dword [esp + 0x10]
mov edi, dword [esp + 0x34]
mov esi, dword [esp + 0x14]
test edi, edi
je 0x408c70
mov ecx, esi
mov edx, esi
sub ecx, edi
inc ecx
sub edx, ecx
movzx esi, byte [edx + 1]
movzx eax, byte [edx + 2]
shl esi, 8
or esi, eax
jne 0x40871f
xor edi, edi
jmp 0x408721
sub edi, esi
mov esi, dword [esp + 0x14]
mov eax, ecx
sar eax, 8
mov byte [esi], 0x78
mov byte [esi + 1], al
mov byte [esi + 2], cl
add esi, 3
mov dword [esp + 0x14], esi
mov byte [edx + 1], al
mov byte [edx + 2], cl
test edi, edi
jne 0x408703
jmp 0x408c6c
mov edi, dword [esp + 0x14]
add edi, 0xfffffffd
mov esi, edi
movzx ecx, byte [edi + 1]
movzx eax, byte [edi + 2]
shl ecx, 8
or ecx, eax
sub esi, ecx
mov dword [esp + 0x34], esi
mov al, byte [esi]
cmp al, 0x81
je 0x40876f
cmp al, 0x82
jne 0x40877c
mov ebx, dword [esp + 0x4c]
test ebx, ebx
je 0x408780
mov byte [esi], 0x83
jmp 0x408790
mov ebx, dword [esp + 0x4c]
cmp al, 0x81
je 0x408890
cmp al, 0x82
je 0x408890
cmp dword [ebp + 0x34], 0
jne 0x4087c5
push 0
push dword [ebp + 0x30]
push dword [esp + 0x4c]
push edi
push esi
call fcn.0040b510
add esp, 0x14
test eax, eax
jne 0x4087fb
movzx ecx, byte [esi + 1]
movzx eax, byte [esi + 2]
shl ecx, 8
or ecx, eax
add esi, ecx
cmp byte [esi], 0x77
je 0x408796
mov esi, dword [esp + 0x34]
cmp byte [esi], 0x87
jne 0x4087e0
movzx ecx, byte [esi + 1]
movzx eax, byte [esi + 2]
shl ecx, 8
or ecx, eax
cmp byte [ecx + esi], 0x77
je 0x4087e0
mov byte [esi], 0x8c
test ebx, ebx
je 0x408883
mov al, byte [esi]
cmp al, 0x87
je 0x408804
cmp al, 0x8c
je 0x408804
inc al
mov byte [esi], al
mov byte [edi], 0x7b
jmp 0x40885d
mov esi, dword [esp + 0x34]
add byte [esi], 5
jmp 0x4087c5
push dword [esp + 0x64]
mov edi, dword [esp + 0x18]
mov ebx, edi
push dword [ebp + 0x30]
sub ebx, esi
push dword [esp + 0x4c]
mov byte [edi], 0
push 3
push esi
call fcn.00404e60
push ebx
lea eax, [esi + 3]
push esi
push eax
call sub.MSVCRT.dll_memmove
add ebx, 3
add esp, 0x20
cmp byte [esi], 0x87
setne al
dec al
and al, 0xfb
add al, 0x89
mov byte [esi], al
mov eax, ebx
mov byte [edi + 3], 0x7b
sar eax, 8
mov byte [edi + 4], al
mov byte [edi + 5], bl
add edi, 6
mov dword [esp + 0x14], edi
mov byte [esi + 1], al
mov byte [esi + 2], bl
mov eax, dword [esp + 0x90]
test eax, eax
je 0x40886b
mov byte [eax], 0x94
cmp dword [esp + 0x68], 2
mov ebx, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
jge 0x408c70
jmp 0x408303
mov eax, dword [esp + 0x18]
add al, 0x79
mov byte [edi], al
jmp 0x4082fb
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
add al, 0x79
mov byte [edi], al
jmp 0x408c6c
cmp dl, 0x9d
je 0x4082ff
mov eax, dword [ebp + 0x14]
mov dword [eax], 0xb
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [esp + 0x20]
test edx, edx
jne 0x4088d4
mov esi, eax
mov dword [esp + 0x14], esi
jmp 0x408303
mov ecx, dword [esp + 0x68]
test ecx, ecx
jne 0x408902
cmp edx, 0xffffffff
jne 0x4088ef
mov eax, dword [esp + 0x18]
add al, 0x62
mov byte [esi], al
inc esi
jmp 0x408c68
cmp edx, 1
jne 0x40891a
mov eax, dword [esp + 0x18]
add al, 0x66
mov byte [esi], al
inc esi
jmp 0x408c68
cmp ecx, 1
jne 0x40891a
cmp edx, 0xffffffff
jne 0x40891a
mov eax, dword [esp + 0x18]
add al, 0x64
mov byte [esi], al
inc esi
jmp 0x408c68
mov eax, dword [esp + 0x18]
add al, 0x68
mov byte [esi], al
mov eax, ecx
mov byte [esi + 2], cl
lea ecx, [edx + 1]
sar eax, 8
neg ecx
mov byte [esi + 1], al
sbb ecx, ecx
and ecx, edx
mov eax, ecx
mov byte [esi + 4], cl
sar eax, 8
mov byte [esi + 3], al
add esi, 5
mov dword [esp + 0x80], ecx
jmp 0x408c68
movzx eax, dl
sub eax, 0x1e
je 0x408980
dec eax
je 0x408979
dec eax
je 0x40896a
mov dword [esp + 0x34], 0
xor esi, esi
jmp 0x408989
mov dword [esp + 0x34], 0x27
mov esi, 0x27
jmp 0x408989
mov esi, 0x1a
jmp 0x408985
mov esi, 0xd
mov dword [esp + 0x34], esi
cmp dword [esp + 0x44], 0
je 0x4089e5
mov ecx, dword [esp + 0x14]
dec ecx
mov al, byte [ecx]
and al, 0xc0
cmp al, 0x80
jne 0x4089e5
mov al, byte [ecx]
and al, 0xc0
cmp al, 0x80
jne 0x4089af
mov al, byte [ecx - 1]
dec ecx
and al, 0xc0
cmp al, 0x80
je 0x4089a5
mov edi, dword [esp + 0x14]
mov eax, edi
sub eax, ecx
push eax
mov dword [esp + 0x28], eax
lea eax, [esp + 0x124]
push ecx
push eax
call sub.MSVCRT.dll_memcpy
mov ecx, dword [esp + 0x30]
add esp, 0xc
mov dl, byte [esp + 0x43]
or ecx, 0x10000000
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x24], ecx
jmp 0x408a17
mov eax, dword [esp + 0x14]
movzx ecx, byte [eax - 1]
mov dword [esp + 0x24], ecx
cmp dl, 0x1e
ja 0x408a0f
cmp dword [esp + 0x68], 1
jle 0x408a0f
mov eax, dword [edi + 0x68]
or eax, dword [esp + 0xb8]
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x1c]
mov edi, dword [esp + 0x14]
cmp dl, 0x10
je 0x408a2e
cmp dl, 0xf
je 0x408a2e
mov dword [esp + 0x30], 0xffffffff
or edx, 0xffffffff
jmp 0x408a3a
movzx edx, byte [eax + 1]
movzx eax, byte [eax + 2]
mov dword [esp + 0x30], eax
mov eax, edi
mov dword [esp + 0x50], edx
mov edi, dword [esp + 0x1c]
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x20]
test edi, edi
je 0x4082ff
add dword [esp + 0x18], esi
mov esi, dword [esp + 0x68]
test esi, esi
jne 0x408adc
mov eax, dword [esp + 0x18]
mov ebx, edi
cmp ebx, 0xffffffff
jne 0x408abb
add al, 0x21
mov ebx, dword [esp + 0x1c]
lea esi, [ebx + 1]
mov byte [ebx], al
mov ebx, dword [esp + 0x30]
cmp dword [esp + 0x44], 0
je 0x408c55
test ecx, 0x10000000
je 0x408c55
and ecx, 7
lea eax, [esp + 0x120]
push ecx
push eax
push esi
mov dword [esp + 0x30], ecx
call sub.MSVCRT.dll_memcpy
mov edx, dword [esp + 0x5c]
add esp, 0xc
add esi, dword [esp + 0x24]
jmp 0x408c58
cmp ebx, 1
jne 0x408ac4
add al, 0x25
jmp 0x408a71
mov esi, dword [esp + 0x1c]
add al, 0x27
mov byte [esi], al
mov eax, ebx
sar eax, 8
mov byte [esi + 1], al
mov byte [esi + 2], bl
add esi, 3
jmp 0x408a7a
cmp esi, 1
jne 0x408b22
cmp edi, 0xffffffff
jne 0x408aee
mov eax, dword [esp + 0x18]
add al, 0x23
jmp 0x408a71
mov esi, eax
mov dword [esp + 0x14], esi
cmp edi, 1
je 0x408303
mov ebx, dword [esp + 0x18]
lea esi, [eax + 1]
add bl, 0x27
mov byte [eax], bl
mov ebx, dword [esp + 0x20]
lea eax, [ebx - 1]
dec bl
sar eax, 8
mov byte [esi], al
mov byte [esi + 1], bl
add esi, 2
jmp 0x408a7a
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x34]
lea esi, [ebx + 1]
add al, 0x29
mov byte [ebx], al
mov ebx, dword [esp + 0x68]
mov eax, ebx
sar eax, 8
mov byte [esi], al
mov eax, dword [esp + 0x20]
mov byte [esi + 1], bl
add esi, 2
mov dword [esp + 0x14], esi
test eax, eax
jns 0x408bbb
cmp dword [esp + 0x44], 0
je 0x408b9a
test ecx, 0x10000000
je 0x408b9a
mov ebx, dword [esp + 0x14]
lea eax, [esp + 0x120]
mov esi, ecx
and esi, 7
push esi
push eax
push ebx
call sub.MSVCRT.dll_memcpy
mov ecx, dword [esp + 0x30]
add esp, 0xc
mov edx, dword [esp + 0x50]
add ebx, esi
mov dword [esp + 0x14], ebx
mov esi, ebx
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x30]
add al, 0x21
mov byte [esi], al
inc esi
jmp 0x408a7e
mov byte [esi], cl
inc esi
test edx, edx
js 0x408b88
mov ebx, dword [esp + 0x30]
mov eax, dword [esp + 0x18]
mov byte [esi], dl
add al, 0x21
mov byte [esi + 1], bl
add esi, 2
mov byte [esi], al
inc esi
jmp 0x408a7e
cmp eax, ebx
je 0x408a7a
cmp dword [esp + 0x44], 0
je 0x408c03
test ecx, 0x10000000
je 0x408c03
mov ebx, dword [esp + 0x14]
lea eax, [esp + 0x120]
mov esi, ecx
and esi, 7
push esi
push eax
push ebx
call sub.MSVCRT.dll_memcpy
mov ecx, dword [esp + 0x30]
add esp, 0xc
mov edx, dword [esp + 0x50]
add ebx, esi
mov eax, dword [esp + 0x20]
mov esi, ebx
mov dword [esp + 0x14], ebx
jmp 0x408c06
mov byte [esi], cl
inc esi
mov ebx, dword [esp + 0x30]
test edx, edx
js 0x408c16
mov byte [esi], dl
mov byte [esi + 1], bl
add esi, 2
sub eax, dword [esp + 0x68]
mov dword [esp + 0x20], eax
cmp eax, 1
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x18]
jne 0x408c38
add al, 0x25
mov byte [esi], al
inc esi
jmp 0x408a7e
add al, 0x27
mov byte [esi], al
mov eax, dword [esp + 0x20]
sar eax, 8
mov byte [esi + 1], al
mov eax, dword [esp + 0x20]
mov byte [esi + 2], al
add esi, 3
jmp 0x408a7e
mov byte [esi], cl
inc esi
mov dword [esp + 0x14], esi
test edx, edx
js 0x408c6c
mov byte [esi], dl
mov byte [esi + 1], bl
add esi, 2
mov dword [esp + 0x14], esi
mov ebx, dword [esp + 0x10]
cmp dword [esp + 0x4c], 0
je 0x408dba
mov eax, dword [esp + 0x48]
movzx edx, byte [eax]
lea eax, [edx - 0x1d]
cmp eax, 0x53
ja case.0x408c95.33
movzx eax, byte [eax + 0x40ae44]
jmp dword [eax*4 + 0x40ae30]
mov eax, dword [esp + 0x48]
mov al, byte [eax + 3]
cmp al, 0x10
je 0x408cbc
cmp al, 0xf
je 0x408cbc
movzx eax, byte [edx + 0x42cef0]
xor ecx, ecx
add eax, ecx
add dword [esp + 0x48], eax
jmp case.0x408c95.33
movzx eax, byte [edx + 0x42cef0]
mov ecx, 2
add eax, ecx
add dword [esp + 0x48], eax
jmp case.0x408c95.33
movzx eax, byte [edx + 0x42cef0]
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
add edx, eax
mov dword [esp + 0x48], edx
test ecx, ecx
je 0x408d23
mov al, byte [edx - 1]
cmp al, 0xc0
jb 0x408d23
movzx eax, al
and eax, 0x3f
movzx eax, byte [eax + 0x42c5b0]
add dword [esp + 0x48], eax
jmp 0x408d23
add dword [esp + 0x48], 0x21
jmp case.0x408c95.33
mov edx, dword [esp + 0x48]
movzx ecx, byte [edx + 1]
movzx eax, byte [edx + 2]
shl ecx, 8
or ecx, eax
add dword [esp + 0x48], ecx
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x48]
mov eax, esi
sub eax, edx
mov dword [esp + 0x90], eax
test eax, eax
jle 0x4082ff
movzx eax, byte [edx]
cmp eax, 0x76
jae 0x408d53
mov al, byte [eax + 0x42c3e0]
test al, al
je 0x408d53
mov byte [edx], al
jmp 0x4082fb
push dword [esp + 0x64]
mov edi, dword [ebp + 0x30]
push edi
push ecx
mov byte [esi], 0
push 3
push dword [esp + 0x58]
call fcn.00404e60
mov ebx, dword [esp + 0xa4]
mov eax, dword [esp + 0x5c]
push ebx
push eax
add eax, 3
push eax
call sub.MSVCRT.dll_memmove
mov eax, dword [esp + 0x68]
add ebx, 3
mov ecx, ebx
add esp, 0x20
sar ecx, 8
mov byte [eax], 0x81
mov byte [esi + 3], 0x78
mov byte [esi + 4], cl
mov byte [esi + 5], bl
add esi, 6
mov eax, dword [esp + 0x48]
mov dword [esp + 0x14], esi
mov byte [eax + 1], cl
mov eax, dword [esp + 0x48]
mov byte [eax + 2], bl
mov ebx, dword [esp + 0x10]
jmp 0x408306
mov edi, dword [ebp + 0x30]
mov esi, dword [esp + 0x14]
jmp 0x408306
inc ebx
mov dword [esp + 0x10], ebx
mov dl, byte [ebx]
cmp dl, 0x2a
jne 0x409007
lea eax, [ebx + 1]
mov dword [esp + 0x90], eax
mov al, byte [eax]
cmp al, 0x3a
je 0x408df6
movzx ecx, al
mov eax, dword [esi + 0xc]
test byte [ecx + eax], 2
je 0x409007
mov eax, dword [ebp + 0x30]
xor esi, esi
mov edx, dword [esp + 0x90]
mov edi, 0x42b0a0
mov ebx, edx
mov dword [esp + 0x4c], 0
mov dword [esp + 0x10], ebx
mov ecx, dword [eax + 0xc]
mov dword [esp + 0x50], esi
movzx eax, byte [ebx]
mov dword [esp + 0x1c], esi
test byte [eax + ecx], 2
je 0x408e3e
lea esp, [esp]
inc ebx
mov dword [esp + 0x10], ebx
movzx eax, byte [ebx]
test byte [eax + ecx], 2
jne 0x408e30
mov eax, ebx
sub eax, edx
cmp byte [ebx], 0x3a
mov dword [esp + 0x34], eax
jne 0x408e86
inc ebx
mov dword [esp + 0x10], ebx
mov esi, ebx
mov dword [esp + 0x50], ebx
mov al, byte [ebx]
test al, al
je 0x408e6f
lea esp, [esp]
cmp al, 0x29
je 0x408e6f
inc ebx
mov dword [esp + 0x10], ebx
mov al, byte [ebx]
test al, al
jne 0x408e60
mov eax, ebx
sub eax, esi
mov dword [esp + 0x4c], eax
cmp eax, 0xff
ja 0x40a930
mov eax, dword [esp + 0x34]
cmp byte [ebx], 0x29
jne 0x40a998
xor ebx, ebx
mov esi, 0x42b0d0
cmp eax, dword [esi]
jne 0x408eb0
push eax
push edi
push edx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
je 0x408ec9
mov edx, dword [esp + 0x90]
inc edi
inc ebx
add edi, dword [esi]
add esi, 0xc
cmp esi, str._b__w_
jge 0x40a97d
mov eax, dword [esp + 0x34]
jmp 0x408e96
lea eax, [ebx + ebx*2]
mov ecx, dword [eax*4 + 0x42b0d4]
cmp ecx, 0x9e
jne 0x408f5e
cmp dword [esp + 0x4c], 0
jne 0x40a947
mov edi, dword [ebp + 0x30]
mov ecx, dword [edi + 0x24]
mov dword [edi + 0x6c], 1
test ecx, ecx
je 0x408f2f
mov edi, dword [esp + 0x14]
mov eax, dword [ebp + 0x34]
test eax, eax
je 0x408f0b
add dword [eax], 3
jmp 0x408f22
mov byte [edi], 0xa0
movzx eax, byte [ecx + 5]
mov byte [edi + 1], al
movzx eax, byte [ecx + 4]
mov byte [edi + 2], al
add edi, 3
mov eax, dword [ebp + 0x34]
mov ecx, dword [ecx]
test ecx, ecx
jne 0x408f02
mov dword [esp + 0x14], edi
mov edi, dword [ebp + 0x30]
cmp dword [edi + 0x5c], 0
mov ecx, dword [esp + 0x14]
setg al
add al, 0x9e
movzx esi, al
mov byte [ecx], al
inc ecx
cmp dword [esp + 0x3c], 0xfffffffe
mov dword [esp + 0x14], ecx
jne 0x408fd9
mov dword [esp + 0x3c], 0xffffffff
jmp 0x408fd9
mov ebx, dword [esp + 0x4c]
test ebx, ebx
jne 0x408f80
test ecx, ecx
js 0x40a962
mov al, cl
mov ecx, dword [esp + 0x14]
movzx esi, al
mov byte [ecx], al
inc ecx
mov dword [esp + 0x14], ecx
jmp 0x408fd6
cmp dword [eax*4 + 0x42b0d8], 0
jl 0x40a947
mov edx, dword [esp + 0x14]
mov al, byte [eax*4 + 0x42b0d8]
movzx esi, al
mov byte [edx], al
mov eax, dword [ebp + 0x34]
test eax, eax
je 0x408fb0
add dword [eax], ebx
mov byte [edx + 1], 0
add edx, 2
jmp 0x408fce
push ebx
push dword [esp + 0x54]
mov byte [edx + 1], bl
add edx, 2
push edx
mov dword [esp + 0x20], edx
call sub.MSVCRT.dll_memcpy
mov edx, dword [esp + 0x20]
add esp, 0xc
add edx, ebx
mov byte [edx], 0
inc edx
mov dword [esp + 0x14], edx
mov edi, dword [ebp + 0x30]
lea eax, [esi - 0x96]
cmp eax, 5
ja case.default.0x408fe8
jmp dword [eax*4 + 0x40ae98]
or dword [edi + 0x64], 0x1000
jmp case.default.0x408fe8
mov dword [edi + 0x70], 1
jmp case.default.0x408fe8
mov eax, dword [esp + 0x38]
mov dword [esp + 0x30], eax
mov eax, dword [esi + 0x20]
sub eax, dword [esi + 0x10]
mov dword [esp + 0x20], 0
mov dword [esp + 0x18], 0x85
mov dword [esp + 0x64], eax
mov dword [esp + 0x50], 0
cmp dl, 0x3f
jne 0x4098d1
inc ebx
mov dword [esp + 0x10], ebx
mov dl, byte [ebx]
movzx eax, dl
add eax, 0xffffffdf
cmp eax, 0x5b
ja case.0x409057.34
movzx eax, byte [eax + 0x40aee8]
jmp dword [eax*4 + 0x40aeb0]
mov dword [esp + 0x50], 1
mov dword [esi + 0x7c], 1
mov ecx, 0x83
inc ebx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x10], ebx
jmp 0x409c04
cmp byte [ebx + 1], 0x3f
mov ecx, 0x87
mov edx, ebx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x9c], edx
jne 0x4090dc
cmp byte [ebx + 2], 0x43
jne 0x4090dc
mov al, byte [ebx + 3]
mov ecx, 3
cmp al, 0x30
jb 0x4090bd
lea ebx, [ebx]
cmp al, 0x39
ja 0x4090bd
mov al, byte [ecx + ebx + 1]
inc ecx
cmp al, 0x30
jae 0x4090b0
cmp byte [ecx + ebx], 0x29
jne 0x4090cf
lea edx, [ebx + 1]
add edx, ecx
mov dword [esp + 0x9c], edx
cmp byte [edx], 0x28
jne 0x40a9af
mov ecx, dword [esp + 0x18]
cmp byte [edx + 1], 0x3f
jne 0x40910b
mov al, byte [edx + 2]
cmp al, 0x3d
je 0x4090fc
cmp al, 0x21
je 0x4090fc
cmp al, 0x3c
jne 0x40910b
mov al, byte [edx + 3]
cmp al, 0x3d
je 0x4090fc
cmp al, 0x21
jne 0x40910b
mov dword [esi + 0x80], 1
jmp 0x409c04
mov eax, dword [esp + 0x14]
or esi, 0xffffffff
xor ecx, ecx
or edi, esi
xor edx, edx
mov dword [esp + 0x24], ecx
mov byte [eax + 3], 0x8d
mov eax, 3
mov ebx, dword [esp + 0x10]
inc ebx
mov dword [esp + 0x20], eax
mov dword [esp + 0x10], ebx
mov al, byte [ebx]
cmp al, 0x52
jne 0x409157
cmp byte [ebx + 1], 0x26
jne 0x409157
mov eax, dword [esp + 0x14]
add ebx, 2
mov dword [esp + 0x10], ebx
mov dword [esp + 0x34], esi
mov byte [eax + 3], 0x8f
mov ebx, dword [esp + 0x10]
jmp 0x40916c
cmp al, 0x3c
jne 0x409224
mov dword [esp + 0x34], 0x3e
inc ebx
mov dword [esp + 0x10], ebx
mov al, byte [ebx]
cmp al, 0x30
jb 0x40917a
cmp al, 0x39
jbe 0x40a9f6
mov ecx, dword [ebp + 0x30]
movzx eax, al
mov ecx, dword [ecx + 0xc]
test byte [eax + ecx], 0x10
je 0x40a9af
mov dword [esp + 0x24], ebx
inc ebx
mov dword [esp + 0x10], ebx
movzx eax, byte [ebx]
test byte [eax + ecx], 0x10
je 0x4091ae
nop
inc ebx
mov dword [esp + 0x10], ebx
movzx eax, byte [ebx]
test byte [eax + ecx], 0x10
jne 0x4091a0
mov ecx, dword [esp + 0x24]
mov edi, ebx
sub edi, ecx
cmp dword [ebp + 0x34], edx
je 0x4091c3
mov dword [esp + 0x20], 5
cmp dword [esp + 0x34], edx
jle 0x4091da
mov al, byte [ebx]
inc ebx
mov dword [esp + 0x10], ebx
cmp al, byte [esp + 0x34]
jne 0x40aa3f
mov al, byte [ebx]
inc ebx
mov dword [esp + 0x10], ebx
cmp al, 0x29
jne 0x40aa3f
cmp dword [ebp + 0x34], 0
jne 0x409bfd
test esi, esi
js 0x4092e1
test edx, edx
jle 0x40aa0d
test esi, esi
je 0x4092a5
cmp esi, 0x2d
mov esi, dword [ebp + 0x30]
jne 0x4092a0
mov eax, dword [esi + 0x40]
sub eax, edx
lea edx, [eax + 1]
jmp 0x4092a8
cmp al, 0x27
jne 0x409235
mov dword [esp + 0x34], 0x27
jmp 0x409167
mov dword [esp + 0x34], ecx
cmp al, 0x2d
je 0x409255
cmp al, 0x2b
je 0x409255
cmp al, 0x30
jb 0x40917a
cmp al, 0x39
ja 0x40916c
xor esi, esi
jmp 0x409265
movzx esi, al
inc ebx
mov dword [esp + 0x10], ebx
test esi, esi
js 0x40916c
mov al, byte [ebx]
cmp al, 0x30
jb 0x4091da
nop
cmp al, 0x39
ja 0x4091da
cmp edx, 0xccccccb
jg 0x40a9c6
movzx eax, al
lea edx, [edx + edx*4]
inc ebx
lea edx, [edx - 0x18]
mov dword [esp + 0x10], ebx
lea edx, [eax + edx*2]
mov al, byte [ebx]
cmp al, 0x30
jae 0x409270
jmp 0x4091da
add edx, dword [esi + 0x40]
jmp 0x4092a8
mov esi, dword [ebp + 0x30]
test edx, edx
jle 0x40aa28
cmp edx, dword [esi + 0x44]
jg 0x40aa28
mov edi, dword [esp + 0x14]
mov eax, edx
mov ecx, dword [esp + 0x18]
sar eax, 8
mov byte [edi + 4], al
mov byte [edi + 5], dl
mov ebx, dword [esp + 0x10]
cmp edx, dword [esi + 0x4c]
jle 0x409c08
mov dword [esi + 0x4c], edx
jmp 0x409c08
mov eax, dword [ebp + 0x30]
xor esi, esi
mov edx, dword [eax + 0x2c]
mov dword [esp + 0x74], edx
cmp dword [eax + 0x30], esi
jle 0x40932d
mov ebx, edx
push edi
lea eax, [ebx + 2]
push eax
push ecx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x40930c
cmp byte [ebx + edi + 2], al
je 0x409322
mov eax, dword [ebp + 0x30]
inc esi
mov ecx, dword [esp + 0x24]
add ebx, dword [eax + 0x34]
mov dword [esp + 0x74], ebx
cmp esi, dword [eax + 0x30]
jl 0x4092f4
jmp 0x409325
mov eax, dword [ebp + 0x30]
mov ebx, dword [esp + 0x10]
mov edx, dword [esp + 0x74]
mov ecx, dword [eax + 0x30]
cmp esi, ecx
jge 0x409407
mov eax, dword [esp + 0x74]
mov ebx, 1
movzx edx, byte [edx]
shl edx, 8
mov dword [esp + 0xa8], esi
inc esi
movzx eax, byte [eax + 1]
or edx, eax
mov eax, dword [ebp + 0x30]
mov dword [esp + 0x90], edx
cmp edx, dword [eax + 0x4c]
jle 0x409367
mov dword [eax + 0x4c], edx
cmp esi, ecx
jge 0x4093e8
mov ecx, dword [esp + 0x74]
add ecx, dword [eax + 0x34]
push edi
mov dword [esp + 0x78], ecx
lea eax, [ecx + 2]
push eax
push dword [esp + 0x2c]
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x4093a3
mov ecx, dword [esp + 0x74]
cmp byte [ecx + edi + 2], al
jne 0x4093a3
mov eax, dword [ebp + 0x30]
inc esi
inc ebx
cmp esi, dword [eax + 0x30]
jl 0x409373
cmp ebx, 1
jle 0x4093e1
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0xa8]
mov eax, ecx
add dword [esp + 0x20], 2
mov esi, dword [ebp + 0x30]
sar eax, 8
mov byte [edi + 4], al
mov eax, ebx
sar eax, 8
inc byte [edi + 3]
mov byte [edi + 5], cl
mov ecx, dword [esp + 0x18]
mov byte [edi + 6], al
mov byte [edi + 7], bl
mov ebx, dword [esp + 0x10]
jmp 0x409c08
mov edx, dword [esp + 0x90]
mov edi, dword [esp + 0x14]
mov eax, edx
mov ecx, dword [esp + 0x18]
mov esi, dword [ebp + 0x30]
sar eax, 8
mov byte [edi + 4], al
mov byte [edi + 5], dl
mov ebx, dword [esp + 0x10]
jmp 0x409c08
cmp dword [esp + 0x34], 0
jne 0x40aa28
mov eax, dword [esp + 0x24]
cmp byte [eax], 0x52
jne 0x409484
xor ecx, ecx
lea edx, [ecx + 1]
cmp edi, edx
jle 0x40945c
mov al, byte [edx + eax]
cmp al, 0x30
jb 0x40aa28
cmp al, 0x39
ja 0x40aa28
cmp ecx, 0xccccccb
jg 0x40a9df
movzx eax, al
lea ecx, [ecx + ecx*4]
lea ecx, [ecx - 0x18]
inc edx
lea ecx, [eax + ecx*2]
mov eax, dword [esp + 0x24]
cmp edx, edi
jl 0x409424
test ecx, ecx
jne 0x409461
mov ecx, 0xffff
mov edi, dword [esp + 0x14]
mov eax, ecx
mov esi, dword [ebp + 0x30]
sar eax, 8
mov byte [edi + 5], cl
mov ecx, dword [esp + 0x18]
mov byte [edi + 3], 0x8f
mov byte [edi + 4], al
mov ebx, dword [esp + 0x10]
jmp 0x409c08
cmp edi, 6
jne 0x40aa28
push edi
push str.DEFINE
push eax
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x40aa24
mov edi, dword [esp + 0x14]
lea edx, [eax + 1]
mov ecx, dword [esp + 0x18]
mov esi, dword [ebp + 0x30]
mov byte [edi + 3], 0x91
mov ebx, dword [esp + 0x10]
jmp 0x409c0c
inc dword [esi + 0x5c]
mov ecx, 0x7d
inc ebx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x10], ebx
jmp 0x409c04
inc ebx
mov dword [esp + 0x10], ebx
cmp byte [ebx], 0x29
jne 0x409526
mov al, byte [ebx + 1]
cmp al, 0x2a
je 0x409526
cmp al, 0x2b
je 0x409526
cmp al, 0x3f
je 0x409526
cmp al, 0x7b
jne 0x409502
lea eax, [ebx + 2]
push eax
call fcn.0040ca60
add esp, 4
test eax, eax
jne 0x409526
mov esi, dword [esp + 0x14]
xor edi, edi
mov eax, dword [esp + 0x28]
mov dword [esp + 0x1c], edi
mov byte [esi], 0x9d
inc esi
mov ebx, dword [esp + 0x10]
inc ebx
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], ebx
jmp 0x406998
inc dword [esi + 0x5c]
mov ecx, 0x7e
mov dword [esp + 0x18], ecx
jmp 0x409c04
mov cl, byte [ebx + 1]
mov al, cl
cmp al, 0x21
je 0x40966c
cmp al, 0x3d
je 0x409654
mov eax, dword [esi + 0xc]
movzx ecx, cl
test byte [ecx + eax], 0x10
je 0x40aa57
xor eax, eax
cmp dl, 0x3c
setne al
inc ebx
dec eax
mov dword [esp + 0x10], ebx
and eax, 0x17
mov esi, ebx
add eax, 0x27
mov dword [esp + 0x90], esi
mov dword [esp + 0xa8], eax
mov al, byte [ebx]
cmp al, 0x30
jb 0x40958e
cmp al, 0x39
jbe 0x40a9f6
mov edi, dword [ebp + 0x30]
movzx eax, al
mov ecx, dword [edi + 0xc]
test byte [eax + ecx], 0x10
je 0x4095ae
lea ecx, [ecx]
inc ebx
mov dword [esp + 0x10], ebx
movzx eax, byte [ebx]
test byte [eax + ecx], 0x10
jne 0x4095a0
mov edx, ebx
sub edx, esi
cmp dword [ebp + 0x34], 0
mov dword [esp + 0x34], edx
je 0x40984e
mov eax, dword [edi + 0x40]
inc eax
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0xa8]
cmp byte [ebx], al
jne 0x40ab1c
mov ecx, dword [edi + 0x30]
cmp ecx, 0x2710
jge 0x40ab05
lea eax, [edx + 3]
cmp eax, dword [edi + 0x34]
jle 0x4095fa
mov dword [edi + 0x34], eax
cmp edx, 0x20
jg 0x40aa9d
mov esi, dword [edi + 0x28]
xor edi, edi
test ecx, ecx
jle 0x4097ab
cmp edx, dword [esi + 4]
jne 0x409786
push edx
push dword [esi]
push dword [esp + 0x98]
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x409786
mov eax, dword [esp + 0x4c]
cmp dword [esi + 8], eax
je 0x4097a7
test dword [esp + 0x38], 0x80000
je 0x40aab4
mov eax, dword [ebp + 0x30]
mov dword [eax + 0x78], 1
jmp 0x409796
inc dword [esi + 0x5c]
mov ecx, 0x7f
add ebx, 2
mov dword [esp + 0x18], ecx
mov dword [esp + 0x10], ebx
jmp 0x409c04
inc dword [esi + 0x5c]
mov ecx, pe_nt_image_headers32
add ebx, 2
mov dword [esp + 0x18], ecx
mov dword [esp + 0x10], ebx
jmp 0x409c04
mov ecx, 0x81
inc ebx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x10], ebx
jmp 0x409c04
mov edx, dword [esp + 0x14]
xor ecx, ecx
mov eax, edx
mov dword [esp + 0xc8], 1
mov dword [esp + 0xac], eax
mov byte [edx], 0x76
mov ebx, dword [esp + 0x10]
inc ebx
mov dword [esp + 0x10], ebx
mov al, byte [ebx]
cmp al, 0x30
jb 0x4096ea
cmp al, 0x39
ja 0x4096ea
lea ecx, [ecx + ecx*4]
movzx eax, al
lea ecx, [ecx - 0x18]
inc ebx
mov dword [esp + 0x10], ebx
lea ecx, [eax + ecx*2]
cmp ecx, 0xff
jg 0x40aa6f
mov al, byte [ebx]
cmp al, 0x30
jae 0x4096c3
cmp byte [ebx], 0x29
jne 0x40aa86
mov byte [edx + 1], cl
xor edi, edi
mov eax, dword [esp + 0x10]
sub eax, dword [esi + 0x18]
inc eax
mov dword [esp + 0x1c], edi
sar eax, 8
mov byte [edx + 2], al
mov al, byte [esp + 0x10]
sub al, byte [esi + 0x18]
inc al
mov word [edx + 4], 0
mov byte [edx + 3], al
add edx, 6
mov ebx, dword [esp + 0x10]
mov esi, edx
mov eax, dword [esp + 0x28]
inc ebx
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], ebx
jmp 0x406998
inc ebx
mov dword [esp + 0x10], ebx
mov dl, byte [ebx]
cmp dl, 0x3d
je 0x409768
cmp dl, 0x3e
je 0x409768
cmp dl, 0x3c
je case.0x409057.39
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x29
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edi, dword [ebp + 0x14]
xor ecx, ecx
cmp dl, 0x3e
mov dword [esp + 0x24], 0x29
sete cl
mov dword [esp + 0x50], ecx
mov esi, ecx
jmp 0x409f96
mov eax, dword [esp + 0x4c]
cmp dword [esi + 8], eax
je 0x40aacf
mov eax, dword [ebp + 0x30]
mov edx, dword [esp + 0x34]
inc edi
add esi, 0xc
cmp edi, dword [eax + 0x30]
jl 0x409607
mov ebx, dword [esp + 0x10]
mov esi, dword [ebp + 0x30]
mov eax, dword [esi + 0x30]
cmp edi, eax
jl 0x409850
mov ecx, dword [esi + 0x38]
cmp eax, ecx
jl 0x409810
lea edi, [ecx + ecx]
lea eax, [edi + edi*2]
shl eax, 2
push eax
call dword [0x4407c8]
mov esi, eax
add esp, 4
test esi, esi
je 0x40aaea
mov ebx, dword [ebp + 0x30]
mov ecx, dword [ebx + 0x38]
lea ecx, [ecx + ecx*2]
shl ecx, 2
push ecx
push dword [ebx + 0x28]
push esi
call sub.MSVCRT.dll_memcpy
add esp, 0xc
cmp dword [ebx + 0x38], 0x14
jle 0x409808
push dword [ebx + 0x28]
call dword [0x4407cc]
add esp, 4
mov dword [ebx + 0x28], esi
mov esi, ebx
mov dword [esi + 0x38], edi
mov eax, dword [esi + 0x30]
mov edx, dword [esp + 0x90]
lea ecx, [eax + eax*2]
mov eax, dword [esi + 0x28]
mov dword [eax + ecx*4], edx
mov eax, dword [esi + 0x30]
mov edx, dword [esp + 0x34]
lea ecx, [eax + eax*2]
mov eax, dword [esi + 0x28]
mov dword [eax + ecx*4 + 4], edx
mov eax, dword [esi + 0x30]
mov edx, dword [esp + 0x4c]
lea ecx, [eax + eax*2]
mov eax, dword [esi + 0x28]
mov dword [eax + ecx*4 + 8], edx
inc dword [esi + 0x30]
mov ebx, dword [esp + 0x10]
jmp 0x409850
mov esi, edi
inc ebx
mov dword [esp + 0x10], ebx
inc dword [esi + 0x40]
mov edx, 2
mov eax, dword [esi + 0x40]
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
shr eax, 8
mov byte [edi + 3], al
mov al, byte [esi + 0x40]
mov byte [edi + 4], al
mov ebx, dword [esp + 0x10]
jmp 0x409c0c
mov edi, dword [ebp + 0x14]
mov esi, 1
mov dword [esp + 0x24], 0x29
mov dword [esp + 0x50], esi
jmp 0x409f96
inc ebx
xor edx, edx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x18], edx
cmp byte [ebx], 0x29
je 0x40a114
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x1d
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edi, dword [ebp + 0x14]
mov dword [esp + 0x24], 0x29
jmp 0x409a2e
test dword [esp + 0x38], 0x1000
je 0x409855
mov ecx, 0x83
mov dword [esp + 0x18], ecx
jmp 0x409c04
mov edi, dword [ebp + 0x14]
lea eax, [esp + 0xf8]
push 0
mov dword [esp + 0xa0], ebx
mov ebx, dword [esp + 0x3c]
push ebx
push dword [esi + 0x40]
push edi
push eax
lea eax, [esp + 0x24]
push eax
call fcn.00405510
add esp, 0x18
mov edx, eax
cmp dword [edi], 0
mov dword [esp + 0x18], edx
jne 0x40a828
test edx, edx
jne 0x409965
cmp dword [esp + 0x44], eax
mov eax, dword [esp + 0xf8]
je 0x409954
cmp eax, 0x7f
jbe 0x409954
lea ecx, [esp + 0x84]
push ecx
push eax
call fcn.0041d800
add esp, 8
mov esi, eax
jmp 0x406b7e
mov byte [esp + 0x84], al
mov esi, 1
jmp 0x406b7e
mov ecx, dword [esp + 0x3c]
cmp ecx, 0xfffffffe
jne 0x40997d
lea eax, [edx - 6]
cmp eax, 0x10
ja 0x40997d
or ecx, 0xffffffff
mov dword [esp + 0x3c], ecx
mov eax, dword [esp + 0x78]
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x70], ecx
mov dword [esp + 0x60], eax
cmp edx, 0x1b
jne 0x409f49
mov ebx, dword [esp + 0x10]
xor ecx, ecx
mov eax, dword [esi + 0x20]
inc ebx
sub eax, dword [esi + 0x10]
lea edx, [ebx + 1]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x64], eax
cmp byte [ebx], 0x3c
setne cl
xor eax, eax
dec ecx
mov dword [esp + 0x20], eax
and ecx, 0x17
mov dword [esp + 0x50], eax
movzx eax, byte [edx]
add ecx, 0x27
mov dword [esp + 0x24], ecx
cmp eax, 0x2b
je 0x409a00
cmp eax, 0x2d
je 0x409a00
cmp eax, 0x30
jb 0x4099f2
cmp eax, 0x39
jbe 0x409a00
mov esi, 1
mov dword [esp + 0x50], esi
jmp 0x409f96
mov al, byte [ebx + 2]
lea ecx, [ebx + 2]
cmp al, 0x30
jb 0x409a1c
lea ebx, [ebx]
cmp al, 0x39
ja 0x409a1c
mov al, byte [ecx + 1]
inc ecx
cmp al, 0x30
jae 0x409a10
mov eax, dword [esp + 0x24]
cmp byte [ecx], al
jne 0x40ac1b
mov ebx, edx
mov dword [esp + 0x10], ebx
mov dl, byte [ebx]
movzx esi, dl
cmp esi, 0x2b
jne 0x409ad3
inc ebx
mov dword [esp + 0x10], ebx
mov al, byte [ebx]
cmp al, 0x30
jb 0x40ab33
cmp al, 0x39
ja 0x40ab33
mov al, byte [ebx]
xor edx, edx
mov dword [esp + 0x18], edx
cmp al, 0x30
jb 0x409a8b
nop
cmp al, 0x39
ja 0x409a8b
cmp edx, 0xccccccb
jg 0x40abc3
movzx eax, al
lea edx, [edx + edx*4]
inc ebx
lea edx, [edx - 0x18]
mov dword [esp + 0x10], ebx
lea edx, [eax + edx*2]
mov al, byte [ebx]
mov dword [esp + 0x18], edx
cmp al, 0x30
jae 0x409a60
mov eax, dword [esp + 0x24]
cmp byte [ebx], al
jne 0x40ac07
cmp esi, 0x2d
jne 0x409f29
test edx, edx
je 0x40abf3
mov esi, dword [ebp + 0x30]
mov eax, dword [esi + 0x40]
sub eax, edx
lea edx, [eax + 1]
mov dword [esp + 0x18], edx
test edx, edx
jg 0x40a114
mov eax, dword [ebp + 0x10]
mov dword [edi], 0xf
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp esi, 0x2d
jne 0x409a53
mov cl, byte [ebx + 1]
lea eax, [ebx + 1]
cmp cl, 0x30
jb case.0x409057.34
cmp cl, 0x39
ja case.0x409057.34
mov ebx, eax
mov dword [esp + 0x10], ebx
jmp 0x409a53
xor eax, eax
lea ecx, [esp + 0x118]
xor esi, esi
mov dword [esp + 0x104], eax
mov dword [esp + 0x118], esi
cmp dl, 0x29
je 0x409b96
lea esp, [esp]
cmp dl, 0x3a
je 0x409b88
movzx eax, dl
inc ebx
sub eax, 0x2d
mov dword [esp + 0x10], ebx
cmp eax, 0x4b
ja case.0x409b40.46
movzx eax, byte [eax + 0x40af68]
jmp dword [eax*4 + 0x40af44]
lea ecx, [esp + 0x104]
jmp 0x409b81
mov eax, dword [ebp + 0x30]
or dword [ecx], 0x80000
or dword [eax + 0x64], 0x400
jmp 0x409b81
or dword [ecx], 1
jmp 0x409b81
or dword [ecx], 2
jmp 0x409b81
or dword [ecx], 4
jmp 0x409b81
or dword [ecx], 8
jmp 0x409b81
or dword [ecx], 0x200
jmp 0x409b81
or dword [ecx], 0x40
mov dl, byte [ebx]
cmp dl, 0x29
jne 0x409b20
mov esi, dword [esp + 0x118]
mov eax, dword [esp + 0x104]
or esi, dword [esp + 0x38]
not eax
and esi, eax
cmp byte [ebx], 0x29
mov dword [esp + 0x30], esi
jne 0x409bed
mov eax, esi
mov dword [esp + 0x38], esi
shr eax, 9
xor edi, edi
and eax, 1
mov dword [esp + 0x1c], edi
mov dword [esp + 0x108], eax
xor eax, 1
mov dword [esp + 0x114], eax
mov eax, esi
and eax, 1
inc ebx
mov dword [esp + 0xb8], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0x10], ebx
mov dword [eax], esi
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x28]
jmp 0x406998
mov ecx, 0x83
inc ebx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x10], ebx
jmp 0x409c01
mov ecx, dword [esp + 0x18]
mov esi, dword [ebp + 0x30]
mov edi, dword [esp + 0x14]
mov edx, dword [esp + 0x20]
inc dword [esi + 0x58]
cmp dword [esi + 0x58], 0xfa
jg 0x40abac
lea eax, [ecx - 0x7d]
cmp eax, 3
ja 0x409c41
cmp dword [esi + 0x80], 0
je 0x409c41
mov dword [esp + 0x1c], 0
mov dword [esi + 0x80], 0
jmp 0x409c4f
mov eax, dword [esi + 0x20]
sub eax, dword [esi + 0x10]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x64], eax
mov byte [edi], cl
mov dword [esp + 0x48], edi
mov edi, dword [esi + 0x68]
mov esi, dword [esi + 0x40]
mov dword [esp + 0xb4], 0
cmp ecx, 0x7f
je 0x409c77
cmp ecx, 0x80
je 0x409c77
xor ecx, ecx
jmp 0x409c7c
mov ecx, 1
mov eax, dword [ebp + 0x34]
lea ebx, [esp + 0xb4]
neg eax
sbb eax, eax
and eax, ebx
mov ebx, dword [esp + 0x18]
push eax
push dword [ebp + 0x30]
lea eax, [esp + 0xcc]
push dword [ebp + 0x28]
push eax
lea eax, [esp + 0x100]
push eax
lea eax, [esp + 0xd0]
push eax
lea eax, [esp + 0x114]
push eax
xor eax, eax
cmp ebx, 0x87
sete al
add eax, dword [ebp + 0x2c]
push eax
push edx
push dword [esp + 0x74]
lea eax, [esp + 0x38]
push ecx
push dword [ebp + 0x14]
push eax
lea eax, [esp + 0x7c]
push eax
push dword [esp + 0x68]
call fcn.0040afc0
add esp, 0x3c
test eax, eax
je 0x40a828
mov eax, dword [ebp + 0x30]
dec dword [eax + 0x58]
cmp ebx, 0x81
jne 0x409d81
cmp dword [eax + 0x40], esi
ja 0x409d0b
mov eax, dword [esp + 0x14]
mov byte [eax], 0x82
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0xc4]
mov ebx, dword [esp + 0x10]
cmp byte [ebx], 0x29
jne 0x40ab95
mov esi, dword [ebp + 0x34]
test esi, esi
je 0x409e0c
mov edx, dword [esi]
mov esi, dword [esp + 0xb4]
mov ecx, dword [esp + 0xb0]
sub ecx, edx
lea eax, [esi - 6]
cmp ecx, eax
jl 0x40a7e8
mov ecx, dword [ebp + 0x34]
lea eax, [esi - 6]
mov esi, dword [esp + 0x14]
add eax, edx
mov edi, dword [esp + 0x1c]
mov dword [ecx], eax
mov eax, dword [esp + 0x28]
mov dword [esi + 1], 0x780300
mov byte [esi + 5], 3
add esi, 6
mov ebx, dword [esp + 0x10]
inc ebx
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], ebx
jmp 0x406998
cmp ebx, 0x7d
jl 0x409d91
cmp ebx, 0x80
jg 0x409d91
dec dword [eax + 0x5c]
cmp ebx, 0x87
jne 0x409d0b
cmp dword [ebp + 0x34], 0
jne 0x409d0b
mov ebx, dword [esp + 0x14]
xor esi, esi
mov edx, ebx
nop
movzx ecx, byte [edx + 1]
inc esi
movzx eax, byte [edx + 2]
shl ecx, 8
or ecx, eax
add edx, ecx
cmp byte [edx], 0x78
jne 0x409db0
cmp byte [ebx + 3], 0x91
jne 0x409dde
cmp esi, 1
jg 0x40ab5f
mov edx, 0x91
jmp 0x409d0f
cmp esi, 2
jg 0x40ab7a
cmp esi, 1
jne 0x409d0b
mov edx, dword [esp + 0x18]
or eax, 0xffffffff
or ecx, eax
mov dword [esp + 0xc4], eax
mov dword [esp + 0xbc], ecx
jmp 0x409d16
mov esi, dword [esp + 0x48]
mov dword [esp + 0x14], esi
cmp edx, 0x91
je 0x40a7d6
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x8c], ecx
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x60], ecx
mov ecx, dword [esp + 0x78]
mov dword [esp + 0xa0], ecx
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x70], ecx
mov ecx, dword [esp + 0xbc]
mov dword [esp + 0xcc], 0
cmp edx, 0x81
jl 0x409eef
cmp dword [esp + 0x3c], 0xfffffffe
jne 0x409ea5
test ecx, ecx
js 0x409e93
mov edx, dword [esp + 0xfc]
mov dword [esp + 0x78], edx
mov dword [esp + 0x3c], ecx
mov dword [esp + 0xcc], 1
mov dword [esp + 0x70], 0xffffffff
jmp 0x409ec6
mov dword [esp + 0x3c], 0xffffffff
mov dword [esp + 0x70], 0xffffffff
jmp 0x409ec6
test ecx, ecx
js 0x409ec6
test eax, eax
jns 0x409ece
mov eax, dword [esp + 0xfc]
mov dword [esp + 0xf0], eax
mov eax, ecx
or eax, edi
mov dword [esp + 0xc4], eax
test eax, eax
js 0x40a7d6
mov ecx, dword [esp + 0xf0]
inc ebx
mov edi, dword [esp + 0x1c]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x10], ebx
jmp 0x406998
cmp edx, 0x7d
jne 0x40a7d6
test eax, eax
js 0x40a7d6
test ecx, ecx
js 0x40a7d6
mov ecx, dword [esp + 0xf0]
inc ebx
mov edi, dword [esp + 0x1c]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x10], ebx
jmp 0x406998
cmp esi, 0x2b
jne 0x40a111
test edx, edx
je 0x40abf3
mov esi, dword [ebp + 0x30]
add edx, dword [esi + 0x40]
mov dword [esp + 0x18], edx
jmp 0x40a114
cmp edx, 0x1c
jne 0x40a379
mov ebx, dword [esp + 0x10]
mov al, byte [ebx + 1]
cmp al, 0x3c
je 0x409f69
cmp al, 0x27
je 0x409f69
cmp al, 0x7b
jne 0x40ac2f
inc ebx
xor esi, esi
mov dword [esp + 0x10], ebx
mov dword [esp + 0x50], esi
mov al, byte [ebx]
cmp al, 0x3c
jne 0x409f84
mov dword [esp + 0x24], 0x3e
jmp 0x409f96
xor ecx, ecx
cmp al, 0x27
setne cl
dec ecx
and ecx, 0xffffffaa
add ecx, 0x7d
mov dword [esp + 0x24], ecx
inc ebx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x34], ebx
mov al, byte [ebx]
cmp al, 0x30
jb 0x409fad
cmp al, 0x39
jbe 0x40ac43
mov edx, dword [ebp + 0x30]
movzx eax, al
mov ecx, dword [edx + 0xc]
test byte [eax + ecx], 0x10
je 0x409fce
lea esp, [esp]
inc ebx
mov dword [esp + 0x10], ebx
movzx eax, byte [ebx]
test byte [eax + ecx], 0x10
jne 0x409fc0
mov ecx, dword [esp + 0x34]
mov edi, ebx
sub edi, ecx
cmp dword [ebp + 0x34], 0
je 0x40a09a
xor edx, edx
mov dword [esp + 0x18], edx
test edi, edi
je 0x40ac57
mov eax, dword [esp + 0x24]
cmp byte [ebx], al
jne 0x40ab1c
cmp edi, 0x20
jg 0x40aa9d
mov ebx, dword [ebp + 0x30]
test esi, esi
jne 0x40a00d
inc dword [ebx + 0x54]
mov esi, dword [ebp + 0x34]
add dword [esi], 0xe
cmp dword [ebx + 0x7c], edx
je 0x40a01b
add dword [esi], 0xc
mov eax, dword [ebp + 0x30]
mov esi, dword [ebx + 0x28]
xor ebx, ebx
cmp dword [eax + 0x30], edx
jle 0x40a104
lea esp, [esp]
cmp edi, dword [esi + 4]
jne 0x40a086
push edi
push dword [esi]
push ecx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x40a07b
mov edx, dword [esi + 8]
mov dword [esp + 0x18], edx
cmp dword [esp + 0x50], eax
jne 0x40a111
mov ecx, dword [ebp + 0x30]
mov ecx, dword [ecx + 0x24]
test ecx, ecx
je 0x40a07f
movzx eax, word [ecx + 4]
cmp eax, edx
je 0x40a070
mov ecx, dword [ecx]
test ecx, ecx
jne 0x40a060
jmp 0x40a07f
mov eax, 1
mov word [ecx + 6], ax
jmp 0x40a07f
mov edx, dword [esp + 0x18]
mov eax, dword [ebp + 0x30]
mov ecx, dword [esp + 0x34]
inc ebx
add esi, 0xc
mov dword [esp + 0xa8], ebx
cmp ebx, dword [eax + 0x30]
jl 0x40a030
mov esi, ebx
jmp 0x40a106
mov eax, dword [edx + 0x2c]
xor esi, esi
mov dword [esp + 0x74], eax
cmp esi, dword [edx + 0x30]
jge 0x40aa28
mov ebx, eax
mov edi, edi
push edi
lea eax, [ebx + 2]
push eax
push ecx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x40a0c8
cmp byte [ebx + edi + 2], al
je 0x40a0de
mov edx, dword [ebp + 0x30]
inc esi
mov ecx, dword [esp + 0x34]
add ebx, dword [edx + 0x34]
mov dword [esp + 0x74], ebx
cmp esi, dword [edx + 0x30]
jl 0x40a0b0
jmp 0x40a0e1
mov edx, dword [ebp + 0x30]
mov ebx, dword [esp + 0x10]
mov eax, dword [esp + 0x74]
cmp esi, dword [edx + 0x30]
jge 0x40aa28
movzx edx, byte [eax]
movzx eax, byte [eax + 1]
shl edx, 8
or edx, eax
mov dword [esp + 0x18], edx
jmp 0x40a106
xor esi, esi
cmp dword [esp + 0x50], 0
je 0x40a227
mov esi, dword [ebp + 0x30]
mov eax, dword [esi + 0x20]
sub eax, dword [esi + 0x10]
cmp dword [ebp + 0x34], 0
mov edi, dword [esp + 0x14]
mov ebx, dword [esi + 0x14]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x64], eax
jne 0x40a1d9
mov byte [edi], 0
test edx, edx
je 0x40a150
push edx
push dword [esp + 0x48]
push dword [esi + 0x14]
call fcn.004046f0
mov edx, dword [esp + 0x24]
add esp, 0xc
mov ebx, eax
test ebx, ebx
jne 0x40a1ab
cmp edx, dword [esi + 0x44]
jg 0x40ac6e
mov eax, dword [esi + 0x10]
mov ebx, dword [esi + 0x14]
add eax, 0xffffff9c
add eax, dword [esi + 0x3c]
add ebx, edx
cmp dword [esi + 0x20], eax
jb 0x40a186
push esi
call fcn.0040b9a0
mov ecx, dword [ebp + 0x14]
add esp, 4
mov dword [ecx], eax
test eax, eax
jne 0x40a828
mov edx, dword [esp + 0x14]
mov ecx, edx
sub ecx, dword [esi + 0x14]
mov eax, dword [esi + 0x20]
inc ecx
sar ecx, 8
mov byte [eax], cl
mov cl, dl
sub cl, byte [esi + 0x14]
mov eax, dword [esi + 0x20]
inc cl
mov byte [eax + 1], cl
add dword [esi + 0x20], 2
jmp 0x40a1dd
movzx ecx, byte [ebx + 1]
movzx eax, byte [ebx + 2]
shl ecx, 8
or ecx, eax
jne 0x40a1d9
cmp dword [ebp + 0x2c], ecx
jg 0x40a1d9
push esi
push dword [esp + 0x48]
push dword [ebp + 0x28]
push edi
push ebx
call fcn.0040b4c0
add esp, 0x14
test eax, eax
jne 0x40ac89
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x3c]
mov eax, ebx
mov byte [edx], 0x75
sub eax, dword [esi + 0x14]
sar eax, 8
mov byte [edx + 1], al
sub bl, byte [esi + 0x14]
mov byte [edx + 2], bl
add edx, 3
mov dword [esp + 0x14], edx
mov dword [esp + 0xcc], 0
cmp ecx, 0xfffffffe
jne 0x40a213
or ecx, 0xffffffff
mov dword [esp + 0x3c], ecx
mov eax, dword [esp + 0x78]
mov dword [esp + 0xa0], eax
mov dword [esp + 0x70], ecx
jmp case.default.0x408fe8
cmp dword [ebp + 0x34], 0
jne 0x40a389
mov edi, dword [ebp + 0x30]
cmp dword [edi + 0x78], 0
je 0x40a3eb
mov ecx, dword [edi + 0x34]
mov ebx, 1
mov eax, dword [esp + 0x74]
add ecx, eax
mov edi, dword [edi + 0x30]
mov dword [esp + 0x90], esi
inc esi
mov dword [esp + 0x4c], ecx
cmp esi, edi
jge 0x40a389
add eax, 2
mov dword [esp + 0xa8], eax
lea ecx, [ecx]
add ecx, 2
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40a293
test dl, dl
je 0x40a28f
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40a293
add eax, 2
add ecx, 2
test dl, dl
jne 0x40a273
xor eax, eax
jmp 0x40a298
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40a2b7
mov eax, dword [ebp + 0x30]
inc esi
mov ecx, dword [esp + 0x4c]
inc ebx
add ecx, dword [eax + 0x34]
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x4c], ecx
cmp esi, edi
jl 0x40a270
cmp ebx, 1
jle 0x40a385
cmp dword [esp + 0x3c], 0xfffffffe
jne 0x40a2cf
mov dword [esp + 0x3c], 0xffffffff
mov edi, dword [ebp + 0x30]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x90]
mov esi, dword [esp + 0x4c]
mov eax, dword [edi + 0x20]
sub eax, dword [edi + 0x10]
test byte [esp + 0x38], 1
mov dword [esp + 0x64], eax
setne al
mov dword [esp + 0x1c], edx
add al, 0x73
mov byte [edx], al
mov eax, ecx
shr eax, 8
mov byte [edx + 1], al
mov eax, ebx
mov byte [edx + 2], cl
sar eax, 8
mov byte [edx + 4], bl
mov ebx, dword [esp + 0x74]
mov byte [edx + 3], al
add edx, 5
mov dword [esp + 0x14], edx
cmp ebx, esi
jae 0x40a771
movzx edx, byte [ebx]
movzx eax, byte [ebx + 1]
shl edx, 8
or edx, eax
mov eax, 1
cmp edx, 0x20
jge 0x40a33e
mov ecx, edx
shl eax, cl
or dword [edi + 0x50], eax
cmp edx, dword [edi + 0x4c]
jle 0x40a349
mov dword [edi + 0x4c], edx
mov ecx, dword [edi + 0x24]
test ecx, ecx
je 0x40a369
movzx eax, word [ecx + 4]
cmp eax, edx
je 0x40a360
mov ecx, dword [ecx]
test ecx, ecx
jne 0x40a350
jmp 0x40a369
mov eax, 1
mov word [ecx + 6], ax
add ebx, dword [edi + 0x34]
cmp ebx, esi
jb 0x40a324
mov dword [esp + 0x74], ebx
jmp case.default.0x408fe8
test edx, edx
jns 0x40a44e
neg edx
jmp 0x40a394
mov edx, dword [esp + 0x18]
mov esi, dword [ebp + 0x30]
mov ecx, dword [esp + 0x3c]
mov ebx, dword [esp + 0x38]
cmp ecx, 0xfffffffe
jne 0x40a3a9
mov dword [esp + 0x3c], 0xffffffff
mov dword [esp + 0x70], 0xffffffff
mov eax, dword [esi + 0x20]
sub eax, dword [esi + 0x10]
test bl, 1
mov ecx, dword [esp + 0x14]
mov edi, ecx
mov dword [esp + 0x64], eax
setne al
add al, 0x71
mov dword [esp + 0x1c], edi
mov byte [ecx], al
mov eax, edx
sar eax, 8
mov byte [ecx + 1], al
mov byte [ecx + 2], dl
add ecx, 3
mov dword [esp + 0x14], ecx
cmp edx, 0x20
jge 0x40a3ef
mov ebx, 1
mov ecx, edx
mov eax, ebx
shl eax, cl
jmp 0x40a3f6
mov esi, edi
jmp 0x40a38c
mov eax, 1
mov ebx, eax
or dword [esi + 0x50], eax
cmp edx, dword [esi + 0x4c]
jle 0x40a401
mov dword [esi + 0x4c], edx
mov ecx, dword [esi + 0x24]
test ecx, ecx
je 0x40a775
lea esp, [esp]
movzx eax, word [ecx + 4]
cmp eax, edx
je 0x40a434
mov ecx, dword [ecx]
test ecx, ecx
jne 0x40a410
mov ebx, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
inc ebx
mov eax, dword [esp + 0x28]
mov dword [esp + 0x10], ebx
jmp 0x406998
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x28]
mov word [ecx + 6], bx
mov ebx, dword [esp + 0x10]
inc ebx
mov dword [esp + 0x10], ebx
jmp 0x406998
cmp edx, 0xf
je 0x40a4f9
cmp edx, 0x10
je 0x40a4f9
cmp edx, 5
je 0x40a46f
cmp edx, 4
je 0x40a46f
cmp edx, 1
jne 0x40a47c
cmp dword [esi + 0x48], 0
jne 0x40a47c
mov dword [esi + 0x48], 1
lea ebx, [edx - 0x1d]
cmp ebx, 5
ja 0x40a4a7
mov ebx, dword [ebx*4 + 0x4407d8]
mov eax, dword [esp + 0x10]
dec ebx
mov esi, dword [esp + 0x14]
inc eax
mov edi, dword [esp + 0x1c]
inc ebx
mov dword [esp + 0x28], eax
mov dword [esp + 0x10], ebx
jmp 0x406998
mov ecx, 0x10
lea eax, [edx - 6]
cmp ecx, eax
sbb ecx, ecx
not ecx
and ecx, dword [esp + 0x14]
mov dword [esp + 0x1c], ecx
mov ecx, dword [esi + 0x20]
sub ecx, dword [esi + 0x10]
cmp dword [esp + 0x44], 0
mov dword [esp + 0x64], ecx
jne 0x40a4d8
cmp edx, 0xe
jne 0x40a4d8
mov edx, 0xd
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x28]
mov byte [esi], dl
inc esi
mov ebx, dword [esp + 0x10]
inc ebx
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], ebx
jmp 0x406998
push edi
lea eax, [esp + 0x104]
mov dword [esp + 0x120], 0
push eax
lea eax, [esp + 0x124]
mov dword [esp + 0x108], 0
push eax
lea eax, [esp + 0x138]
push eax
lea eax, [esp + 0x20]
push eax
call fcn.0040c7f0
add esp, 0x14
test eax, eax
je 0x40a828
mov edx, dword [esi + 0x20]
xor eax, eax
sub edx, dword [esi + 0x10]
cmp dword [esp + 0x18], 0x10
mov edi, dword [esp + 0x14]
mov esi, edi
sete al
mov dword [esp + 0x1c], edi
cmp eax, dword [esp + 0x12c]
mov dword [esp + 0x64], edx
setne al
add al, 0xf
mov byte [esi], al
movzx eax, byte [esp + 0x11c]
mov byte [esi + 1], al
movzx eax, byte [esp + 0x100]
mov byte [esi + 2], al
add esi, 3
mov ebx, dword [esp + 0x10]
mov eax, dword [esp + 0x28]
inc ebx
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], ebx
jmp 0x406998
movzx ecx, byte [esp + 0x85]
movzx eax, byte [esp + 0x86]
and ecx, 0x3f
test bl, 0x10
jne 0x40a5bd
and ebx, 0xf
shl ebx, 6
or ebx, ecx
jmp 0x40a63d
and eax, 0x3f
test bl, 8
jne 0x40a5dc
and ebx, 7
shl ebx, 6
or ebx, ecx
shl ebx, 6
or ebx, eax
movzx eax, byte [esp + 0x87]
jmp 0x40a63d
test bl, 4
jne 0x40a608
and ebx, 3
shl ebx, 6
or ebx, ecx
shl ebx, 6
or ebx, eax
movzx eax, byte [esp + 0x87]
and eax, 0x3f
shl ebx, 6
or ebx, eax
movzx eax, byte [esp + 0x88]
jmp 0x40a63d
and ebx, 1
shl ebx, 6
or ebx, ecx
shl ebx, 6
or ebx, eax
movzx eax, byte [esp + 0x87]
and eax, 0x3f
shl ebx, 6
or ebx, eax
movzx eax, byte [esp + 0x88]
and eax, 0x3f
shl ebx, 6
or ebx, eax
movzx eax, byte [esp + 0x89]
and eax, 0x3f
shl ebx, 6
or ebx, eax
mov eax, ebx
cdq
and edx, 0x7f
add eax, edx
sar eax, 7
movzx eax, byte [eax + 0x42e878]
shl eax, 7
and ebx, 0x8000007f
jns 0x40a667
dec ebx
or ebx, 0xffffff80
inc ebx
mov edx, dword [esp + 0x14]
add eax, ebx
movzx eax, word [eax*2 + 0x430a78]
movzx eax, byte [eax*8 + 0x42d1fb]
test eax, eax
je 0x40a6c3
mov edi, dword [esp + 0x1c]
mov word [edx], 0x910
mov byte [edx + 2], al
add edx, 3
cmp dword [esp + 0x3c], 0xfffffffe
mov dword [esp + 0x14], edx
jne 0x40a775
mov ebx, dword [esp + 0x10]
mov esi, edx
mov eax, dword [esp + 0x28]
inc ebx
mov dword [esp + 0x70], 0xffffffff
mov dword [esp + 0x3c], 0xffffffff
mov dword [esp + 0x10], ebx
jmp 0x406998
test byte [esp + 0x38], 1
setne al
xor ecx, ecx
add al, 0x1d
mov byte [edx], al
inc edx
mov dword [esp + 0x14], edx
test esi, esi
je 0x40a6f3
lea ebx, [ebx]
mov al, byte [esp + ecx + 0x84]
inc ecx
mov byte [edx], al
inc edx
cmp ecx, esi
jb 0x40a6e0
mov dword [esp + 0x14], edx
mov al, byte [esp + 0x84]
cmp al, 0xd
je 0x40a702
cmp al, 0xa
jne 0x40a709
or dword [edi + 0x64], 0x800
mov ecx, dword [esp + 0x3c]
cmp ecx, 0xfffffffe
jne 0x40a78b
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x8c], ecx
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x70], 0xffffffff
mov dword [esp + 0x60], ecx
cmp esi, 1
je 0x40a755
cmp dword [esp + 0xb8], 0
je 0x40a755
mov dword [esp + 0x5c], 0xffffffff
mov dword [esp + 0x3c], 0xffffffff
jmp case.default.0x408fe8
movzx eax, al
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x3c], eax
cmp esi, 1
je 0x40a771
mov ecx, dword [edi + 0x68]
jmp 0x40a7c2
mov edi, dword [esp + 0x1c]
mov ebx, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
inc ebx
mov eax, dword [esp + 0x28]
mov dword [esp + 0x10], ebx
jmp 0x406998
mov eax, dword [esp + 0x78]
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x70], ecx
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x60], ecx
cmp esi, 1
je 0x40a7bd
test eax, eax
jne case.default.0x408fe8
mov ecx, dword [edi + 0x68]
or ecx, eax
movzx edx, byte [edx - 1]
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x6c], edx
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x10]
mov edi, dword [esp + 0x1c]
inc ebx
mov eax, dword [esp + 0x28]
mov dword [esp + 0x10], ebx
jmp 0x406998
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x14
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
add ecx, dword [edx + 0x10]
cmp esi, ecx
mov ecx, dword [ebp + 0x14]
sbb eax, eax
and eax, 0x23
add eax, 0x34
mov dword [ecx], eax
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x1e
mov eax, dword [ebp + 0x10]
mov ebx, dword [esp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x1f
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov dword [ebx], 7
mov ebx, dword [esp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov dword [ebx], 0x47
mov ebx, dword [esp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov dword [ebx], 0x53
mov ebx, dword [esp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x53
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 8
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 6
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp + 0x14]
xor eax, eax
cmp byte [ebx + 1], 0x3a
setne al
dec eax
and eax, 0xffffffee
add eax, 0x1f
mov dword [ecx], eax
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov ebx, dword [esp + 0x10]
mov dword [eax], 0x14
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov dword [edx], 9
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x4b
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov ebx, dword [esp + 0x10]
mov dword [eax], 0x3b
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov ebx, dword [esp + 0x10]
mov dword [eax], 0x42
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov ebx, dword [esp + 0x10]
mov dword [eax], 0x3c
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x3c
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x1c
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov al, byte [ebx]
cmp al, 0x30
jb 0x40a9df
lea esp, [esp]
cmp al, 0x39
ja 0x40a9df
inc ebx
mov dword [esp + 0x10], ebx
mov al, byte [ebx]
cmp al, 0x30
jae 0x40a9d0
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x3d
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x54
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x23
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ebx, dword [esp + 0x10]
mov eax, dword [ebp + 0x14]
mov dword [eax], 0xf
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
dec ebx
mov dword [eax], 0x1a
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
inc ebx
mov dword [eax], 0x18
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x26
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x27
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x30
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov ebx, dword [esp + 0x10]
mov dword [eax], 0x2b
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov ebx, dword [esp + 0x10]
mov dword [eax], 0x41
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov ebx, dword [esp + 0x10]
mov dword [eax], 0x15
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x31
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x2a
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov dword [edi], 0x3f
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
dec ebx
mov dword [eax], 0xc
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov ebx, dword [esp + 0x10]
mov dword [eax], 0x36
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov ebx, dword [esp + 0x10]
mov dword [eax], 0x1b
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0xe
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x52
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov al, byte [ebx]
cmp al, 0x30
jb 0x40abdf
lea esp, [esp]
cmp al, 0x39
ja 0x40abdf
inc ebx
mov dword [esp + 0x10], ebx
mov al, byte [ebx]
cmp al, 0x30
jae 0x40abd0
mov eax, dword [ebp + 0x10]
mov dword [edi], 0x3d
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov dword [edi], 0x3a
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov dword [edi], 0x1d
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov dword [edi], 0x39
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov dword [edi], 0x45
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov dword [edi], 0x54
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x3e
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov ebx, dword [esp + 0x10]
mov dword [eax], 0xf
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov ebx, dword [esp + 0x10]
mov dword [eax], 0x28
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x18]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x14]
mov esi, dword [ebp + 0x34]
mov dword [eax], ecx
mov eax, dword [ebp + 0x1c]
mov ecx, dword [esp + 0x3c]
mov dword [eax], ecx
mov eax, dword [ebp + 0x20]
mov ecx, dword [esp + 0x6c]
mov dword [eax], ecx
mov eax, dword [ebp + 0x24]
mov ecx, dword [esp + 0x5c]
mov dword [eax], ecx
mov eax, dword [ebp + 0xc]
mov dword [eax], edx
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
test esi, esi
je 0x40ad04
mov ecx, dword [esi]
mov eax, edx
mov edi, dword [esp + 0xc0]
sub eax, edi
sub dword [esp + 0xb0], ecx
cmp dword [esp + 0xb0], eax
jl 0x40a7e8
sub ecx, edi
add ecx, edx
mov dword [esi], ecx
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x34
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov dword [eax], ebx
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret