Function at 0x40c860
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x130
mov eax, dword fs:[0x2c]
mov dword [esp + 0x10], ecx
push esi
push edi
mov ecx, dword [eax]
mov eax, dword [0x4d25a0]
mov edi, dword [ebp + 0xc]
mov dword [esp + 0x98], ecx
cmp eax, dword [ecx + 4]
jg 0x40defd
mov esi, dword [ebp + 0x10]
xor al, al
mov dword [esp + 0x3c], esi
mov dword [esp + 0x28], esi
xor esi, esi
push 8
mov word [esp + 0x5c], 1
mov byte [esp + 0x1b], al
mov dword [esp + 0x20], esi
mov dword [esp + 0x30], esi
mov dword [esp + 0xc], esi
mov dword [esp + 0x34], esi
mov word [esp + 0x38], 1
call fcn.0041feeb
mov ecx, dword [edi]
mov edx, eax
add esp, 4
mov dword [esp + 0x20], edx
mov dword [esp + 0x54], edx
mov dword [esp + 0x50], 1
mov dword [edx], 0x14
mov dword [edx + 4], esi
mov esi, dword [ebp + 8]
mov dword [esp + 0x10], 0x17
mov eax, dword [esi + 4]
mov eax, dword [eax + ecx*4]
mov ecx, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov dword [esp + 0x80], ecx
movsx eax, word [eax + 0xa]
mov dword [esp + 0x60], eax
mov eax, dword [ebp + 0x14]
mov ecx, dword [edi]
cmp ecx, eax
je case.0x40db56.4
mov edi, dword [esi + 4]
mov esi, dword [edi + ecx*4]
movzx eax, word [esi + 8]
mov edx, eax
cmp ax, 0x7f
je case.0x40db56.4
movsx eax, dx
cmp eax, 0x33
je 0x40c9ee
cmp eax, 0x4f
je case.0x40db56.4
cmp eax, 5
je 0x40ce40
cmp eax, 0x58
ja case.0x40db56.4
movzx eax, byte [eax + 0x40e0f8]
jmp dword [eax*4 + 0x40e08c]
mov eax, dword [esi]
cmp eax, 4
jl 0x40db45
cmp eax, 0x27
jge 0x40db45
mov esi, 0x14
mov dword [esp + 0x10], esi
jmp 0x40c980
mov cl, byte [esp + 0x17]
mov edx, dword [esp + 0x20]
test cl, cl
jne 0x40d03f
mov eax, edx
imul eax, dword [eax], 0x15
movzx eax, byte [eax + esi + 0x4b1840]
cmp eax, 3
jne 0x40cd66
cmp dword [esp + 0x2c], 1
jne 0x453923
mov eax, dword [esp + 0x30]
xor edi, edi
mov dword [esp + 8], eax
mov dword [esp + 0x24], edi
test eax, eax
jne 0x40d270
test edx, edx
je 0x40c9e4
jmp 0x40c9d0
mov esi, dword [edx + 4]
push 8
push edx
call fcn.0041fedd
add esp, 8
mov edx, esi
test esi, esi
jne 0x40c9d0
mov eax, edi
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10
mov esi, dword [esp + 0x1c]
mov dword [esp + 0x10], 0x16
test esi, esi
jne 0x40d218
mov edi, dword [esp + 0x3c]
cmp edi, 0x4d0290
je 0x40ca4b
mov eax, dword [edi + 0xc]
cmp eax, 4
je 0x40dacb
mov esi, dword [edi + 8]
test esi, esi
jne 0x40dadd
cmp eax, 5
jge 0x4533cd
push 0x4d0290
mov ecx, edi
mov dword [edi + 0xc], 1
mov dword [edi], 0
call fcn.0040e220
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 8]
inc esi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x2c], esi
cmp esi, 1
jne 0x40d25c
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x64], edx
cmp dword [0x4d23a0], 0
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
mov esi, dword [eax]
mov dword [esp + 0x44], esi
je 0x40db6f
xor al, al
test al, al
jne 0x40ceeb
cmp byte [0x4d23a9], al
jne 0x45356a
mov esi, dword [0x4d23a4]
cmp dword [esi], 0
je 0x40cee7
mov ecx, dword [esp + 0x98]
mov eax, dword [0x4d2560]
mov byte [esp + 0xf], 0
cmp eax, dword [ecx + 4]
jg 0x453577
mov dword [0x4d2580], 0
mov dword [0x4d257c], 0
mov dword [esp + 0x5c], 0x4d2564
mov dword [esp + 0x84], 0x4d2564
mov ecx, dword [esp + 0x44]
mov eax, dword [esi]
mov dword [esp + 0x7c], eax
mov ecx, dword [ecx + 4]
mov edx, dword [eax + 4]
mov dword [esp + 0x24], ecx
test ecx, ecx
je 0x4535ba
test edx, edx
je 0x4535c2
mov edi, dword [eax]
mov eax, dword [esp + 0x44]
mov eax, dword [eax]
mov dword [esp + 0x40], eax
cmp ecx, edx
jb 0x40cdd7
mov edx, ecx
test edx, edx
je 0x40cb64
movzx ecx, word [eax]
movzx eax, cx
mov dword [esp + 0x48], eax
movzx eax, word [edi]
mov dword [esp + 0x38], ecx
mov ecx, eax
mov dword [esp + 0x68], ecx
mov ecx, dword [esp + 0x38]
cmp cx, ax
jne 0x40cb68
mov eax, dword [esp + 0x40]
add edi, 2
add eax, 2
mov dword [esp + 0x40], eax
sub edx, 1
jne 0x40cb31
xor eax, eax
jmp 0x40cb77
mov eax, dword [esp + 0x68]
cmp word [esp + 0x48], ax
sbb eax, eax
and eax, 0xfffffffe
inc eax
test eax, eax
js 0x40cc29
jle 0x40ccab
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x7c]
mov edx, dword [eax + 0x1c]
test edx, edx
je 0x40ccb0
mov edi, dword [edx + 4]
cmp edi, ecx
ja 0x40d2bd
mov eax, dword [esp + 0x44]
mov ecx, dword [edx]
mov dword [esp + 0x68], ecx
mov dword [esp + 0x38], edi
mov eax, dword [eax]
mov dword [esp + 0x40], eax
test edi, edi
je 0x40cc02
jmp 0x40cbc0
movzx ecx, word [ecx]
movzx eax, cx
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x4c], ecx
movzx eax, word [eax]
mov ecx, eax
mov dword [esp + 0x48], ecx
mov ecx, dword [esp + 0x4c]
cmp cx, ax
jne 0x40ce0e
mov ecx, dword [esp + 0x68]
add dword [esp + 0x40], 2
add ecx, 2
sub dword [esp + 0x38], 1
mov dword [esp + 0x68], ecx
jne 0x40cbc0
cmp edi, dword [esp + 0x24]
jb 0x40ce20
mov edx, dword [esi]
mov ecx, dword [esp + 0x84]
mov dword [ecx + 0x1c], edx
mov edi, dword [esi]
mov dword [esp + 0x84], edi
mov eax, dword [edi + 0x1c]
jmp 0x40cd5f
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x7c]
mov edx, dword [eax + 0x18]
test edx, edx
je 0x40ccb0
mov eax, dword [edx + 4]
cmp ecx, eax
ja 0x40d301
mov eax, dword [esp + 0x44]
mov edi, dword [edx]
mov dword [esp + 0x68], ecx
mov eax, dword [eax]
mov dword [esp + 0x40], eax
test ecx, ecx
je 0x40cd44
jmp 0x40cc60
movzx ecx, word [eax]
movzx eax, cx
mov dword [esp + 0x4c], eax
movzx eax, word [edi]
mov dword [esp + 0x48], ecx
mov ecx, eax
mov dword [esp + 0x38], ecx
mov ecx, dword [esp + 0x48]
cmp cx, ax
je 0x40cd27
cmp word [esp + 0x4c], ax
jae 0x40cd4d
mov ecx, dword [esp + 0x7c]
mov eax, dword [edx + 0x1c]
mov dword [ecx + 0x18], eax
mov eax, dword [esi]
mov dword [edx + 0x1c], eax
mov dword [esi], edx
cmp dword [edx + 0x18], 0
je 0x40ccb0
jmp 0x40cd4f
mov byte [esp + 0xf], 1
cmp byte [esp + 0xf], 0
mov eax, dword [esi]
mov ecx, dword [esp + 0x84]
mov eax, dword [eax + 0x18]
mov dword [ecx + 0x1c], eax
mov eax, dword [esi]
mov ecx, dword [esp + 0x5c]
mov eax, dword [eax + 0x1c]
mov dword [ecx + 0x18], eax
mov ecx, dword [esi]
mov eax, dword [0x4d2580]
mov dword [ecx + 0x18], eax
mov ecx, dword [esi]
mov eax, dword [0x4d257c]
mov dword [ecx + 0x1c], eax
je 0x40cee7
mov eax, dword [esi]
test eax, eax
je 0x40cee7
mov eax, dword [eax + 0x14]
test eax, eax
je 0x40cee7
push dword [esp + 0x64]
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov ecx, dword [esp + 0x1c]
push eax
inc dword [edi]
push edi
push esi
call fcn.0040e320
test eax, eax
js 0x45381d
mov eax, dword [ebp + 0x14]
jmp 0x40c916
mov eax, dword [esp + 0x40]
add edi, 2
add eax, 2
sub dword [esp + 0x68], 1
mov dword [esp + 0x40], eax
jne 0x40cc60
mov ecx, dword [esp + 0x24]
cmp ecx, dword [edx + 4]
jb 0x40cc8f
mov edx, dword [esi]
mov ecx, dword [esp + 0x5c]
mov dword [ecx + 0x18], edx
mov edi, dword [esi]
mov dword [esp + 0x5c], edi
mov eax, dword [edi + 0x18]
mov dword [esi], eax
jmp 0x40caf3
cmp eax, 6
ja case.0x40cd6f.3
jmp dword [eax*4 + 0x40e154]
test cl, cl
jne 0x40d332
push 8
call fcn.0041feeb
mov ecx, dword [esp + 0x24]
add esp, 4
mov dword [esp + 0x20], eax
mov dword [esp + 0x54], eax
mov dword [eax], esi
mov dword [eax + 4], ecx
mov edi, dword [esp + 0x50]
inc edi
mov dword [esp + 0x50], edi
cmp esi, 7
je 0x40dbc7
cmp esi, 8
je 0x40dbc7
mov edi, dword [ebp + 0xc]
mov eax, dword [esp + 0x30]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x3c], eax
mov esi, dword [ebp + 8]
jmp 0x40cd1f
test edx, edx
je 0x40cb64
nop
movzx ecx, word [eax]
movzx eax, cx
mov dword [esp + 0x68], eax
movzx eax, word [edi]
mov dword [esp + 0x48], ecx
mov ecx, eax
mov dword [esp + 0x38], ecx
mov ecx, dword [esp + 0x48]
cmp cx, ax
je 0x40daaf
cmp word [esp + 0x68], ax
jmp 0x40cb71
mov eax, dword [esp + 0x48]
cmp word [esp + 0x88], ax
jae 0x40cc0c
mov ecx, dword [esp + 0x7c]
mov eax, dword [edx + 0x18]
mov dword [ecx + 0x1c], eax
mov eax, dword [esi]
mov dword [edx + 0x18], eax
mov dword [esi], edx
cmp dword [edx + 0x1c], 0
je 0x40ccb0
jmp 0x40cc0e
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x10], 0x16
test edx, edx
jne 0x40d343
mov edi, dword [esp + 0x3c]
cmp edi, 0x4d0290
je 0x40ce9d
mov eax, dword [edi + 0xc]
cmp eax, 4
je 0x40d2c4
mov esi, dword [edi + 8]
test esi, esi
jne 0x40d2d6
cmp eax, 5
jge 0x4531e9
push 0x4d0290
mov ecx, edi
mov dword [edi + 0xc], 1
mov dword [edi], 0
call fcn.0040e220
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 8]
mov eax, dword [ebp + 0xc]
inc edx
mov dword [esp + 0x1c], edx
mov dword [esp + 0x2c], edx
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov esi, dword [eax + ecx*4]
cmp edx, 1
jne 0x40d387
mov edi, dword [esp + 0x3c]
mov esi, dword [esi]
mov ecx, edi
call fcn.0040f6d0
mov eax, dword [ebp + 0x14]
mov dword [edi + 0xc], 1
mov dword [edi], esi
mov edi, dword [ebp + 0xc]
inc dword [edi]
mov esi, dword [ebp + 8]
jmp 0x40c916
mov esi, dword [esp + 0x44]
mov ecx, dword [0x4d2390]
mov dword [esp + 0x24], ecx
test ecx, ecx
je 0x4537f1
mov edx, dword [esp + 0x98]
mov eax, dword [0x4d2560]
mov byte [esp + 0xf], 0
cmp eax, dword [edx + 4]
jg 0x4535cf
mov dword [0x4d2580], 0
mov dword [0x4d257c], 0
mov dword [esp + 0x7c], 0x4d2564
mov dword [esp + 0x84], 0x4d2564
mov eax, dword [esi + 4]
mov edi, dword [ecx + 4]
mov dword [esp + 0x40], eax
test eax, eax
je 0x453618
test edi, edi
je 0x453620
mov edx, dword [ecx]
mov esi, dword [esi]
cmp eax, edi
jb 0x40cf9e
mov edi, eax
test edi, edi
je 0x40cf9a
lea esp, [esp]
movzx eax, word [esi]
mov dword [esp + 0x4c], eax
movzx eax, word [edx]
mov ecx, eax
mov dword [esp + 0x88], ecx
movzx ecx, word [esi]
cmp cx, ax
jne 0x40d144
add esi, 2
add edx, 2
sub edi, 1
jne 0x40cf70
xor eax, eax
jmp 0x40cfcc
test edi, edi
je 0x40cf9a
movzx eax, word [esi]
mov dword [esp + 0x4c], eax
movzx eax, word [edx]
mov ecx, eax
mov dword [esp + 0x88], ecx
movzx ecx, word [esi]
cmp cx, ax
je 0x40d30c
cmp word [esp + 0x4c], ax
sbb eax, eax
and eax, 0xfffffffe
inc eax
mov ecx, dword [esp + 0x24]
test eax, eax
js 0x40d155
jg 0x40d047
mov byte [esp + 0xf], 1
cmp byte [esp + 0xf], 0
mov eax, dword [ecx + 0x18]
mov edx, dword [esp + 0x84]
mov dword [edx + 0x1c], eax
mov eax, dword [0x4d2390]
mov edx, dword [esp + 0x7c]
mov eax, dword [eax + 0x1c]
mov dword [edx + 0x18], eax
mov ecx, dword [0x4d2390]
mov eax, dword [0x4d2580]
mov dword [ecx + 0x18], eax
mov ecx, dword [0x4d2390]
mov eax, dword [0x4d257c]
mov dword [ecx + 0x1c], eax
je 0x4537f1
mov eax, dword [0x4d2390]
test eax, eax
je 0x4537f1
mov eax, dword [eax + 0x14]
test eax, eax
jne 0x40ccff
jmp 0x4537f1
mov eax, dword [edx + 4]
jmp 0x40c992
mov eax, dword [esp + 0x40]
mov esi, dword [ecx + 0x1c]
lea edx, [ecx + 0x1c]
mov dword [esp + 0x48], edx
test esi, esi
je 0x40cfdf
mov edx, dword [esi + 4]
mov dword [esp + 0x5c], edx
cmp edx, eax
jbe 0x40d06a
mov edx, eax
mov dword [esp + 0x5c], eax
cmp dword [esp + 0x5c], 0
mov edi, edx
mov edx, dword [esp + 0x44]
mov esi, dword [esi]
mov edx, dword [edx]
jbe 0x40d0ae
jmp 0x40d080
movzx eax, word [esi]
mov dword [esp + 0x4c], eax
movzx eax, word [edx]
mov ecx, eax
mov dword [esp + 0x88], ecx
movzx ecx, word [esi]
cmp cx, ax
jne 0x40d0b6
add esi, 2
add edx, 2
sub edi, 1
jne 0x40d080
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x40]
cmp dword [esp + 0x5c], eax
jb 0x40d0c8
jmp 0x40d0eb
mov eax, dword [esp + 0x88]
cmp word [esp + 0x4c], ax
jae 0x40db1a
mov edx, dword [esp + 0x48]
mov ecx, dword [edx]
mov eax, dword [ecx + 0x18]
mov dword [edx], eax
mov eax, dword [0x4d2390]
mov dword [ecx + 0x18], eax
mov dword [0x4d2390], ecx
cmp dword [ecx + 0x1c], 0
je 0x40cfdf
mov edx, dword [esp + 0x84]
mov esi, dword [esp + 0x44]
mov dword [edx + 0x1c], ecx
mov edx, dword [0x4d2390]
mov dword [esp + 0x84], edx
mov ecx, dword [edx + 0x1c]
mov dword [esp + 0x24], ecx
mov dword [0x4d2390], ecx
jmp 0x40cf41
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x54]
push eax
call fcn.0040e7e0
test eax, eax
js 0x453823
mov al, byte [esp + 0x59]
mov ecx, dword [esp + 0x54]
mov byte [esp + 0x17], al
mov dword [esp + 0x20], ecx
jmp 0x40c980
mov eax, dword [esp + 0x88]
cmp word [esp + 0x4c], ax
jmp 0x40cfc6
mov eax, dword [esp + 0x40]
lea edx, [ecx + 0x18]
mov dword [esp + 0x48], edx
mov edx, dword [edx]
test edx, edx
je 0x40cfdf
mov esi, dword [edx + 4]
cmp eax, esi
ja 0x40dcb1
mov edi, dword [esp + 0x44]
mov esi, dword [edx]
mov dword [esp + 0x38], eax
mov edi, dword [edi]
test eax, eax
je 0x40d1b5
movzx eax, word [edi]
mov dword [esp + 0x4c], eax
movzx eax, word [esi]
mov ecx, eax
mov dword [esp + 0x88], ecx
movzx ecx, word [edi]
cmp cx, ax
jne 0x40d1bc
add edi, 2
add esi, 2
sub dword [esp + 0x38], 1
jne 0x40d185
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x40]
cmp eax, dword [edx + 4]
jb 0x40d1ce
jmp 0x40d1f1
mov eax, dword [esp + 0x88]
cmp word [esp + 0x4c], ax
jae 0x40dcbc
mov ecx, edx
mov edx, dword [esp + 0x48]
mov eax, dword [ecx + 0x1c]
mov dword [edx], eax
mov eax, dword [0x4d2390]
mov dword [ecx + 0x1c], eax
mov dword [0x4d2390], ecx
cmp dword [ecx + 0x18], 0
je 0x40cfdf
mov edx, dword [esp + 0x7c]
mov esi, dword [esp + 0x44]
mov dword [edx + 0x18], ecx
mov edx, dword [0x4d2390]
mov dword [esp + 0x7c], edx
mov ecx, dword [edx + 0x18]
mov dword [esp + 0x24], ecx
mov dword [0x4d2390], ecx
jmp 0x40cf41
cmp byte [esp + 0x35], 0
jne 0x40d8d0
push 0x18
call fcn.0041feeb
add esp, 4
mov esi, eax
mov ecx, esi
push 0x4d0290
mov dword [esi + 8], 0
call fcn.0040e220
mov eax, dword [esp + 8]
mov edi, esi
mov dword [esi + 0x10], eax
mov esi, dword [esp + 0x1c]
mov dword [esp + 8], edi
mov dword [esp + 0x30], edi
jmp 0x40ca4f
cmp byte [esp + 0x35], 0
jne 0x45355e
mov dword [esp + 0x64], edi
jmp 0x40ca69
mov edi, dword [esp + 8]
mov ecx, dword [edi + 8]
mov esi, dword [edi + 0x10]
mov dword [esp + 0x38], ecx
test ecx, ecx
jne 0x40dce5
mov eax, dword [edi + 0xc]
cmp eax, 5
jge 0x40de44
push 0x18
push edi
mov dword [edi + 0xc], 1
mov dword [edi], 0
call fcn.0041fedd
add esp, 8
mov edi, esi
test esi, esi
jne 0x40d274
mov edi, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
jmp 0x40c9c7
mov edi, ecx
jmp 0x40cba3
cmp dword [0x4d029c], 4
jne 0x40ce6c
jmp 0x4531b2
mov eax, dword [esi + 0xc]
dec dword [eax]
mov eax, dword [esi + 0xc]
cmp dword [eax], 0
je 0x4531cd
push 0x10
push esi
call fcn.0041fedd
mov eax, dword [edi + 0xc]
add esp, 8
mov dword [edi + 8], 0
jmp 0x40ce77
mov ecx, eax
mov dword [esp + 0x24], eax
jmp 0x40cc43
add esi, 2
add edx, 2
sub edi, 1
jne 0x40cfa2
jmp 0x40cf9a
lea eax, [ecx + 1]
mov esi, 0xd
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
jmp 0x40c974
xor al, al
mov dword [edx], esi
mov byte [esp + 0x17], al
mov byte [esp + 0x59], al
jmp 0x40cd99
cmp byte [esp + 0x35], 0
jne 0x40da3b
push 0x18
call fcn.0041feeb
add esp, 4
mov esi, eax
mov ecx, esi
push 0x4d0290
mov dword [esi + 8], 0
call fcn.0040e220
mov eax, dword [esp + 8]
mov edi, esi
mov edx, dword [esp + 0x1c]
mov dword [esi + 0x10], eax
mov dword [esp + 8], edi
mov dword [esp + 0x30], edi
jmp 0x40cea1
cmp byte [esp + 0x35], 0
je 0x40cec5
jmp 0x45338e
test cl, cl
je 0x40d91f
mov eax, dword [edx + 4]
cmp dword [eax], 0x12
je 0x40d425
test cl, cl
jne 0x40da33
mov eax, edx
cmp dword [eax], 0x14
je 0x4538c0
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x54]
push eax
call fcn.0040e7e0
test eax, eax
js 0x453823
mov edx, dword [esp + 0x54]
mov cl, byte [esp + 0x59]
mov dword [esp + 0x20], edx
jmp case.0x40cd6f.2
test ecx, ecx
je 0x40d401
mov eax, dword [edi + ecx*4 - 4]
movzx eax, word [eax + 8]
mov edx, eax
cmp ax, 0x48
je 0x452dc2
cmp dx, 0x4f
je 0x452dc2
lea eax, [ecx + 1]
mov esi, 0x12
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
jmp 0x40c974
lea eax, [ecx + 1]
mov esi, 0x13
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
jmp 0x40c974
test cl, cl
je 0x40d445
mov esi, dword [edx + 4]
push 8
push edx
call fcn.0041fedd
mov edx, esi
add esp, 8
mov esi, dword [esp + 0x10]
mov dword [esp + 0x20], edx
mov dword [esp + 0x54], edx
cmp byte [esp + 0x58], 0
je 0x45362d
mov al, 1
mov edi, dword [esp + 0x50]
dec edi
mov byte [esp + 0x59], al
mov byte [esp + 0x17], al
mov dword [esp + 0x50], edi
jmp 0x40cda2
lea eax, [ecx + 1]
mov esi, 1
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
jmp 0x40c974
mov esi, dword [esp + 0x1c]
mov dword [esp + 0x10], 0x16
test esi, esi
je 0x40dd51
cmp byte [esp + 0x35], 0
jne 0x40ddcc
push 0x18
call fcn.0041feeb
add esp, 4
mov esi, eax
mov ecx, esi
push 0x4d0290
mov dword [esi + 8], 0
call fcn.0040e220
mov eax, dword [esp + 8]
mov dword [esi + 0x10], eax
mov eax, esi
mov esi, dword [esp + 0x1c]
mov dword [esp + 8], eax
mov dword [esp + 0x30], eax
mov edi, dword [ebp + 0xc]
inc esi
mov edx, dword [ebp + 8]
mov dword [esp + 0x1c], esi
mov dword [esp + 0x2c], esi
mov ecx, dword [edi]
mov edx, dword [edx + 4]
mov eax, dword [edx + ecx*4 + 4]
cmp word [eax + 8], 0x47
jne 0x452aa1
cmp esi, 1
je 0x40dd64
cmp byte [esp + 0x35], 0
jne 0x452abd
mov edi, dword [esp + 8]
mov dword [esp + 0x6c], 0x49cc40
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov eax, dword [edx + ecx*4]
mov ecx, dword [esp + 0x98]
mov dword [esp + 0x40], edi
mov esi, dword [eax]
movsx eax, word [eax + 0xa]
mov dword [esp + 0x88], eax
mov eax, dword [0x4d2584]
mov dword [esp + 0x5c], esi
cmp eax, dword [ecx + 4]
jg 0x452ac9
cmp esi, dword [0x4d2588]
je 0x452b26
mov edi, dword [esp + 0x18]
push esi
lea ecx, [edi + 0x478]
call fcn.00411850
mov esi, dword [ebp + 0xc]
mov al, byte [eax + 0x20]
inc dword [esi]
mov ecx, dword [esi]
mov byte [esp + 0xf], al
mov eax, dword [ebp + 8]
mov edx, dword [eax + 4]
mov eax, dword [edx + ecx*4]
cmp word [eax + 8], 0x47
jne 0x45374f
lea eax, [ecx + 1]
xor ecx, ecx
mov dword [esp + 0x38], eax
mov dword [esp + 0x94], eax
mov edi, eax
mov dword [esi], eax
mov eax, dword [edx + edi*4]
movsx eax, word [eax + 8]
sub eax, 0x47
je 0x40da97
sub eax, 1
je 0x40d5cd
sub eax, 0x37
je 0x4536ea
lea eax, [edi + 1]
jmp 0x40d5a6
test ecx, ecx
jne 0x40da8e
lea eax, [edi + 1]
mov dword [esp + 0x64], ecx
mov dword [esi], eax
xor esi, esi
cmp dword [esp + 0x38], edi
jae 0x40d6d4
lea ebx, [ebx]
mov eax, dword [esp + 0x78]
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 1
cmp dword [esp + 0x74], eax
jne 0x40d656
add eax, eax
cmp eax, 8
jae 0x40d627
mov eax, 8
xor ecx, ecx
mov dword [esp + 0x78], eax
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0041ff1b
mov esi, eax
add esp, 4
mov eax, dword [esp + 0x70]
test eax, eax
jne 0x452b63
mov dword [esp + 0x70], esi
push 0x10
call fcn.0041feeb
mov esi, eax
add esp, 4
lea eax, [esp + 0xf0]
mov ecx, esi
push eax
mov dword [esi + 8], 0
call fcn.0040e220
mov edx, dword [esp + 0x74]
mov ecx, dword [esp + 0x70]
push edi
mov dword [ecx + edx*4], esi
mov ecx, dword [esp + 0x78]
mov eax, dword [esp + 0x74]
inc ecx
cmp byte [esp + 0x13], 0
mov dword [esp + 0x78], ecx
jne 0x40e03a
push dword [eax + ecx*4 - 4]
mov ecx, dword [esp + 0x20]
lea eax, [esp + 0x9c]
push eax
push dword [ebp + 8]
call fcn.0040c860
test eax, eax
js 0x453761
mov esi, dword [esp + 0x64]
mov ecx, dword [esp + 0x94]
inc esi
mov dword [esp + 0x64], esi
cmp ecx, edi
jne 0x40dd0d
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x5c]
push edi
lea ecx, [ecx + 0x478]
call fcn.00411850
cmp esi, dword [eax + 0x18]
jl 0x45371b
mov ecx, dword [esp + 0x18]
push edi
lea ecx, [ecx + 0x478]
call fcn.00411850
cmp esi, dword [eax + 0x1c]
jg 0x45371b
mov esi, dword [esp + 0x40]
mov ecx, esi
call fcn.0040f6d0
mov edx, dword [esp + 0x18]
mov dword [esi + 0xc], 1
mov dword [esi], 1
mov eax, dword [edx]
mov eax, dword [eax + 4]
add eax, edx
cmp byte [eax + 0xd], 0
mov ecx, dword [eax + 8]
jne 0x452b8e
mov dword [ecx + 0x14], 0
cmp byte [eax + 0xd], 0
mov ecx, dword [eax + 8]
jne 0x452b96
mov byte [ecx + 0x18], 0
mov eax, dword [edx]
mov edi, dword [eax + 4]
add edi, edx
cmp byte [edi + 0xd], 0
mov esi, dword [edi + 8]
jne 0x452b9e
lea ecx, [esi + 0x20]
call fcn.0040f6d0
mov dword [esi + 0x2c], 1
mov dword [esi + 0x20], 0
cmp byte [edi + 0xd], 0
mov eax, dword [edi + 8]
jne 0x452ba6
mov edi, dword [esp + 0x18]
push dword [esp + 0x5c]
mov byte [eax + 0x30], 0
lea ecx, [edi + 0x478]
call fcn.00411850
push dword [esp + 0x40]
mov edx, dword [eax + 0x10]
mov ecx, dword [eax + 0x14]
mov esi, dword [eax + 0xc]
lea eax, [esp + 0x70]
push eax
mov eax, dword [edi]
mov ecx, dword [ecx + eax]
add ecx, edx
add ecx, edi
call esi
mov dword [esp + 0x6c], 0x49cc40
test eax, eax
js 0x453769
xor edi, edi
cmp dword [esp + 0x74], edi
jbe 0x40d86e
lea esp, [esp]
mov eax, dword [esp + 0x70]
mov esi, dword [eax + edi*4]
test esi, esi
je 0x40d85c
mov ecx, dword [esi + 8]
mov dword [esp + 0x64], ecx
test ecx, ecx
je 0x40d834
mov eax, dword [ecx + 0xc]
dec dword [eax]
mov eax, dword [ecx + 0xc]
cmp dword [eax], 0
jne 0x40d822
push dword [ecx]
call fcn.0041ff24
mov eax, dword [esp + 0x68]
add esp, 4
push 4
push dword [eax + 0xc]
call fcn.0041fedd
mov ecx, dword [esp + 0x6c]
add esp, 8
push 0x10
push ecx
call fcn.0041fedd
add esp, 8
mov dword [esi + 8], 0
mov eax, dword [esi + 0xc]
cmp eax, 5
jge 0x40dec5
push 0x10
push esi
mov dword [esi + 0xc], 1
mov dword [esi], 0
call fcn.0041fedd
mov eax, dword [esp + 0x78]
add esp, 8
mov dword [eax + edi*4], 0
inc edi
cmp edi, dword [esp + 0x74]
jb 0x40d7e0
push dword [esp + 0x70]
mov dword [esp + 0x78], 0
call fcn.0041ff24
mov edi, dword [ebp + 0xc]
add esp, 4
mov eax, dword [esp + 0x18]
cmp dword [eax + 0xf8], 1
jne 0x40cdcf
jmp 0x45381d
mov eax, dword [esp + 0x10]
cmp eax, 0x16
jne 0x40db23
lea eax, [ecx + 1]
mov dword [esp + 0x10], 0xb
mov ecx, dword [ebp + 0xc]
mov esi, dword [esp + 0x10]
mov dword [ecx], eax
jmp 0x40c980
lea eax, [ecx + 1]
xor esi, esi
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
jmp 0x40c974
mov edi, dword [esp + 8]
cmp edi, 0x4d0290
je 0x40d915
mov eax, dword [edi + 0xc]
cmp eax, 4
je 0x40dfab
mov ecx, dword [edi + 8]
test ecx, ecx
jne 0x40dfbd
cmp eax, 5
jge 0x45349c
push 0x4d0290
mov ecx, edi
mov dword [edi + 0xc], 1
mov dword [edi], 0
call fcn.0040e220
mov byte [esp + 0x35], 0
jmp 0x40ca4f
mov eax, edx
jmp 0x40d3a2
mov edi, dword [esp + 0x1c]
mov dword [esp + 0x10], 0x16
test edi, edi
jne 0x40db76
mov esi, dword [esp + 0x3c]
cmp esi, 0x4d0290
je 0x40d963
cmp dword [esi + 0xc], 4
je 0x40e028
mov ecx, esi
call fcn.0040f6d0
push 0x4d0290
mov ecx, esi
call fcn.0040e220
mov esi, dword [esp + 8]
mov eax, dword [ebp + 0xc]
inc edi
mov edx, dword [ebp + 8]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x2c], edi
mov ecx, dword [eax]
mov eax, dword [edx + 4]
mov eax, dword [eax + ecx*4]
cmp edi, 1
jne 0x40dbb7
mov esi, dword [esp + 0x3c]
mov edi, dword [eax]
mov eax, dword [esi + 0xc]
mov ecx, dword [esi + 8]
cmp eax, 4
je 0x45292d
test ecx, ecx
jne 0x452940
cmp eax, 5
jge 0x452955
push 0x10
mov dword [esi], 0
mov dword [esi + 0xc], 4
call fcn.0041feeb
mov ecx, dword [edi]
add esp, 4
mov dword [eax], ecx
mov ecx, dword [edi + 4]
mov dword [eax + 4], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 8], ecx
mov ecx, dword [edi + 0xc]
mov dword [eax + 0xc], ecx
inc dword [ecx]
mov dword [esi + 8], eax
mov edi, dword [ebp + 0xc]
mov edx, dword [esp + 0x18]
inc dword [edi]
cmp byte [edx + 0xfe], 0
jne 0x452a1b
cmp byte [edx + 0xff], 0
mov esi, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
je 0x40c916
jmp 0x452a34
mov eax, dword [esp + 0x10]
cmp eax, 0x16
jne 0x40dcc5
mov dword [esp + 0x10], 0xc
mov esi, dword [esp + 0x10]
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
jmp 0x40c980
mov eax, dword [edx + 4]
jmp 0x40d3b1
mov edi, dword [esp + 8]
cmp edi, 0x4d0290
je 0x40da84
mov eax, dword [edi + 0xc]
cmp eax, 4
je 0x45329d
mov ecx, dword [edi + 8]
test ecx, ecx
jne 0x4532c5
cmp eax, 5
jge 0x4532da
push 0x4d0290
mov ecx, edi
mov dword [edi + 0xc], 1
mov dword [edi], 0
call fcn.0040e220
mov edx, dword [esp + 0x1c]
mov byte [esp + 0x35], 0
jmp 0x40cea1
dec ecx
lea eax, [edi + 1]
jmp 0x40d5a6
inc ecx
jmp 0x40d5c8
lea eax, [ecx + 1]
mov esi, 0xe
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
jmp 0x40c974
mov eax, dword [esp + 0x40]
add edi, 2
add eax, 2
mov dword [esp + 0x40], eax
sub edx, 1
jne 0x40cde0
jmp 0x40cb64
cmp dword [0x4d029c], 4
jne 0x40ca1a
jmp 0x453396
mov eax, dword [esi + 0xc]
dec dword [eax]
mov eax, dword [esi + 0xc]
cmp dword [eax], 0
je 0x4533b1
push 0x10
push esi
call fcn.0041fedd
mov eax, dword [edi + 0xc]
add esp, 8
mov dword [edi + 8], 0
jmp 0x40ca25
lea eax, [ecx + 1]
mov esi, 9
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
jmp 0x40c974
mov ecx, dword [esp + 0x24]
jmp 0x40d0eb
cmp eax, 0x13
je 0x40d8a8
lea eax, [ecx + 1]
mov dword [esp + 0x10], 0x11
mov ecx, dword [ebp + 0xc]
mov esi, dword [esp + 0x10]
mov dword [ecx], eax
jmp 0x40c980
dec eax
cmp eax, 0x29
ja case.0x40db56.4
movzx eax, byte [eax + 0x40e190]
jmp dword [eax*4 + 0x40e170]
lea eax, [ecx + 1]
mov esi, 7
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
jmp 0x40c974
mov al, 1
jmp 0x40ca8c
cmp byte [esp + 0x35], 0
je 0x40dd7f
mov esi, dword [esp + 8]
cmp esi, 0x4d0290
je 0x40dbad
cmp dword [0x4d029c], 4
je 0x40df9c
mov ecx, esi
call fcn.0040f6d0
push 0x4d0290
mov ecx, esi
call fcn.0040e220
mov byte [esp + 0x35], 0
jmp 0x40d967
cmp byte [esp + 0x35], 0
je 0x40d98b
jmp 0x452925
mov esi, dword [esp + 0x2c]
mov eax, dword [esp + 0x30]
mov dword [esp + 0x1c], esi
mov dword [esp + 8], eax
test esi, esi
je 0x453659
cmp esi, 1
mov esi, dword [esp + 0x28]
mov dword [esp + 0x3c], esi
jne 0x453661
mov eax, esi
push eax
lea ecx, [esp + 0x104]
mov dword [esp + 0x10c], 0
call fcn.0040e220
lea ecx, [esp + 0x100]
call fcn.0040a993
mov edx, dword [esp + 0x10]
test al, al
jne 0x40deb7
lea ecx, [esp + 0x100]
call fcn.0040a993
test al, al
jne 0x40dc9a
cmp edx, 7
jne 0x40dc9a
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0041b69c
test eax, eax
js 0x4538f4
cmp dword [esp + 0x10], 8
je 0x453674
cmp dword [esp + 0x1c], 1
jne 0x45368e
mov ecx, esi
call fcn.0040f6d0
mov byte [esi], 0
cmp byte [esp + 0x17], 0
mov dword [esi + 0xc], 9
jne 0x4536aa
mov eax, dword [esp + 0x20]
cmp byte [esp + 0x58], 0
je 0x4536cb
mov al, 1
dec edi
mov byte [esp + 0x59], al
mov byte [esp + 0x17], al
mov dword [esp + 0x50], edi
lea ecx, [esp + 0x100]
call fcn.0040f6d0
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
jmp 0x40cd1f
mov eax, esi
mov dword [esp + 0x40], esi
jmp 0x40d175
mov ecx, dword [esp + 0x24]
jmp 0x40d1f1
cmp eax, 0x13
je 0x40da1a
jmp 0x452d28
lea eax, [ecx + 1]
mov esi, 5
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
jmp 0x40c974
mov eax, dword [ecx + 0xc]
dec dword [eax]
mov eax, dword [ecx + 0xc]
cmp dword [eax], 0
je 0x40de20
push 0x10
push ecx
call fcn.0041fedd
add esp, 8
mov dword [edi + 8], 0
jmp 0x40d286
mov eax, dword [ebp + 8]
mov edx, dword [eax + 4]
mov eax, dword [edx + ecx*4]
cmp word [eax + 8], 0x40
jne 0x4536fa
lea eax, [ecx + 1]
cmp eax, edi
je 0x4536fa
lea ecx, [esp + 0xf0]
mov dword [esp + 0x94], eax
call fcn.0040f6d0
cmp dword [esp + 0x94], edi
jb 0x40d5f0
jmp 0x40d6d4
mov ecx, dword [esp + 0x3c]
push 0x4d0290
call fcn.0040a64f
jmp 0x40d4cd
mov edi, dword [esp + 0x3c]
jmp 0x40d508
lea eax, [ecx + 1]
mov esi, 2
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
jmp 0x40c974
push 0x18
call fcn.0041feeb
add esp, 4
mov esi, eax
mov ecx, esi
push 0x4d0290
mov dword [esi + 8], 0
call fcn.0040e220
mov eax, dword [esp + 8]
test eax, eax
jne 0x40deed
mov dword [esi + 0x10], eax
mov dword [esp + 8], esi
mov dword [esp + 0x30], esi
jmp 0x40d967
lea eax, [ecx + 1]
mov esi, 4
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
jmp 0x40c974
mov ecx, dword [esp + 8]
push 0x4d0290
call fcn.0040a64f
mov byte [esp + 0x35], 0
jmp 0x40d4cd
push 0x4d0290
lea ecx, [esp + 0x2c]
mov dword [esp + 0x14], 0x16
call fcn.0041dd03
lea ecx, [esp + 0x28]
call fcn.0041dd67
mov esi, eax
mov ecx, esi
call fcn.0040f6d0
mov dword [esi + 0xc], 9
mov byte [esi], 0
mov edi, dword [ebp + 0xc]
inc dword [edi]
jmp 0x40cdb7
push dword [ecx]
call fcn.0041ff24
mov eax, dword [esp + 0x3c]
add esp, 4
push 4
push dword [eax + 0xc]
call fcn.0041fedd
mov ecx, dword [esp + 0x40]
add esp, 8
jmp 0x40dcf6
sub eax, 5
cmp eax, 0xa
ja case.0x40de50.6
jmp dword [eax*4 + 0x40e1bc]
push 0x4d0290
lea ecx, [esp + 0x2c]
mov dword [esp + 0x14], 0x16
call fcn.0041dd03
lea ecx, [esp + 0x28]
call fcn.0041dd67
mov esi, eax
mov ecx, esi
call fcn.0040f6d0
mov edi, dword [ebp + 0xc]
mov dword [esi + 0xc], 9
mov byte [esi], 1
inc dword [edi]
jmp 0x40cdb7
lea eax, [ecx + 1]
mov esi, 3
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
jmp 0x40c974
lea eax, [ecx + 1]
mov esi, 8
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
jmp 0x40c974
cmp edx, 8
jne 0x40dc22
jmp 0x40dc37
sub eax, 5
cmp eax, 0xa
ja case.0x40ded1.6
jmp dword [eax*4 + 0x40e1e8]
mov ecx, dword [esi]
test ecx, ecx
je case.0x40ded1.6
push ecx
call fcn.0041dca2
jmp case.0x40ded1.6
mov dword [esi + 0x10], eax
mov dword [esp + 8], esi
mov dword [esp + 0x30], esi
jmp 0x40d967
push 0x4d25a0
call fcn.00420352
add esp, 4
cmp dword [0x4d25a0], 0xffffffff
jne 0x40c895
push 0x44258b
call fcn.004201b3
add esp, 4
push 0x4d25a0
call fcn.00420308
add esp, 4
jmp 0x40c895
push 0x4d0290
lea ecx, [esp + 0x2c]
mov dword [esp + 0x14], 0x16
call fcn.0041dd03
mov edi, dword [ebp + 0xc]
lea ecx, [esp + 0x28]
mov esi, dword [ebp + 8]
mov edx, dword [edi]
lea eax, [edx + 1]
mov dword [edi], eax
mov eax, dword [esi + 4]
mov edx, dword [eax + edx*4]
call fcn.0041dd67
mov ecx, dword [esp + 0x18]
push eax
push dword [edx]
call fcn.0041de28
test eax, eax
js 0x4537b4
mov eax, dword [esp + 0x30]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x3c], eax
mov eax, dword [ebp + 0x14]
jmp 0x40c916
cmp dword [esi + 0xc], 4
jne 0x40db9a
jmp 0x45290a
cmp dword [0x4d029c], 4
jne 0x40d8e8
jmp 0x453481
push ecx
call fcn.0041e07c
mov eax, dword [edi + 0xc]
mov dword [edi + 8], 0
jmp 0x40d8f3
push 0x4d0290
lea ecx, [esp + 0x2c]
mov dword [esp + 0x14], 0x16
call fcn.0041dd03
mov edi, dword [ebp + 0xc]
mov edx, dword [ebp + 8]
mov ecx, dword [edi]
mov eax, dword [edx + 4]
mov eax, dword [eax + ecx*4]
lea ecx, [esp + 0x28]
fld qword [eax]
fstp qword [esp + 0x88]
call fcn.0041dd67
mov esi, eax
mov ecx, esi
call fcn.0040f6d0
fld qword [esp + 0x88]
inc dword [edi]
fstp qword [esi]
mov dword [esi + 0xc], 3
jmp 0x40cdb7
cmp dword [0x4d029c], 4
jne 0x40d950
jmp 0x4528ef
push 0
push 0
push 0x100
push dword [eax + ecx*4 - 4]
mov ecx, dword [esp + 0x2c]
lea eax, [esp + 0xa8]
push eax
push dword [ebp + 8]
call fcn.0041e0ad
jmp 0x40d6b4
mov ecx, dword [esi]
test ecx, ecx
je case.0x40ded1.6
push ecx
call fcn.0041eb8b
jmp case.0x40ded1.6
mov ecx, dword [esi]
test ecx, ecx
je case.0x40ded1.6
mov eax, dword [ecx]
push 1
call dword [eax]
jmp case.0x40ded1.6
mov ecx, dword [esi + 8]
mov eax, dword [0x4d0298]
cmp ecx, eax
je 0x40d963
push eax
call fcn.0040a6e5
jmp 0x40d963
mov ecx, dword [esi + 8]
mov eax, dword [0x4d0298]
cmp ecx, eax
je 0x40dbad
push eax
call fcn.0040a6e5
jmp 0x40dbad
mov esi, dword [esi + 0x10]
jmp 0x40d98b
cmp ecx, edi
je 0x40d9df
push edi
call fcn.0040a6e5
jmp 0x40d9df
push ecx
call fcn.0041e07c
mov eax, dword [esi + 0xc]
mov dword [esi + 8], 0
jmp 0x40d9a4
sub eax, 5
cmp eax, 0xa
ja case.0x452961.6
jmp dword [eax*4 + 0x4539eb]
mov eax, dword [esi]
test eax, eax
je case.0x452961.6
push eax
call dword [esp + 0x84]
push 0x10
push dword [esi]
jmp 0x452a0e
mov eax, dword [esi]
mov dword [esp + 0x38], eax
test eax, eax
je case.0x452961.6
lea ecx, [eax + 8]
call fcn.004092c6
push 0x18
jmp 0x452a0a
mov eax, dword [esi]
mov dword [esp + 0x38], eax
test eax, eax
je case.0x452961.6
mov ecx, eax
call fcn.0041dcba
push 4
jmp 0x452a0a
mov eax, dword [esi]
push dword [eax + 4]
call fcn.0041ff24
add esp, 4
push 8
push dword [esi]
jmp 0x452a0e
mov ecx, dword [esi]
test ecx, ecx
je case.0x452961.6
push ecx
call fcn.0045fddd
jmp case.0x452961.6
mov ecx, dword [esi]
test ecx, ecx
je case.0x452961.6
mov eax, dword [ecx]
push 1
call dword [eax]
jmp case.0x452961.6
mov eax, dword [esi]
mov dword [esp + 0x38], eax
test eax, eax
je case.0x452961.6
mov ecx, eax
call fcn.004092c6
push 0x14
push dword [esp + 0x3c]
call fcn.0041fedd
add esp, 8
jmp case.0x452961.6
lea ecx, [esp + 0x28]
call fcn.0041dd67
mov ecx, eax
call fcn.00487426
mov edx, dword [esp + 0x18]
jmp 0x40d9f5
lea ecx, [esp + 0x28]
call fcn.0041dd67
push eax
mov ecx, edx
call fcn.00487565
mov eax, dword [ebp + 0x14]
jmp 0x40c916
push 0x4d0290
lea ecx, [esp + 0x2c]
mov dword [esp + 0x14], 0x16
call fcn.0041dd03
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp + 8]
mov ecx, dword [eax]
mov eax, dword [edx + 4]
mov eax, dword [eax + ecx*4]
lea ecx, [esp + 0x28]
mov edi, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x38], eax
call fcn.0041dd67
mov esi, eax
mov ecx, esi
call fcn.0040f6d0
mov eax, dword [esp + 0x38]
mov dword [esi + 0xc], 2
mov dword [esi], edi
mov dword [esi + 4], eax
jmp 0x40de16
mov eax, dword [edx + ecx*4]
lea ecx, [esp + 0x28]
push dword [eax]
call fcn.0041dd67
mov ecx, eax
call fcn.004710ee
inc dword [edi]
jmp 0x40cdcf
mov eax, dword [esp + 8]
mov edi, dword [eax + 0x10]
jmp 0x40d508
push 0x4d2584
call fcn.00420352
add esp, 4
cmp dword [0x4d2584], 0xffffffff
jne 0x40d558
push str.CALL
lea ecx, [esp + 0x12c]
call fcn.0040970d
mov ecx, dword [0x4d23b4]
push dword [eax]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x128]
mov dword [0x4d2588], eax
call fcn.004092c6
push 0x4d2584
call fcn.00420308
add esp, 4
jmp 0x40d558
mov ecx, dword [esp + 0x18]
push edi
mov edi, dword [ebp + 0xc]
push edi
push dword [ebp + 8]
call fcn.00486edf
lea ecx, [esp + 0x6c]
mov dword [esp + 0x6c], 0x49cc40
mov esi, eax
call fcn.00467050
push dword [esp + 0x70]
call fcn.0041ff24
add esp, 4
test esi, esi
js 0x45381d
jmp 0x40d885
mov ecx, dword [esp + 0x74]
test ecx, ecx
je 0x40d652
shl ecx, 2
push ecx
push eax
push esi
call fcn.00420f30
add esp, 0xc
push dword [esp + 0x70]
call fcn.0041ff24
add esp, 4
jmp 0x40d652
mov ecx, dword [ecx + 0x38]
jmp 0x40d73a
mov ecx, dword [ecx + 0x38]
jmp 0x40d74e
mov esi, dword [esi + 0x38]
jmp 0x40d766
mov eax, dword [eax + 0x38]
jmp 0x40d789
mov eax, dword [esi]
test eax, eax
je case.0x40ded1.6
push eax
call dword [esp + 0x84]
push 0x10
push dword [esi]
call fcn.0041fedd
add esp, 8
jmp case.0x40ded1.6
mov eax, dword [esi]
push dword [eax + 4]
call fcn.0041ff24
add esp, 4
push 8
push dword [esi]
call fcn.0041fedd
add esp, 8
jmp case.0x40ded1.6
mov ecx, dword [esi]
test ecx, ecx
je case.0x40ded1.6
push ecx
call fcn.0045fddd
jmp case.0x40ded1.6
mov ecx, dword [esi]
test ecx, ecx
je case.0x40ded1.6
push ecx
call fcn.00470e06
jmp case.0x40ded1.6
push 0x4d0290
lea ecx, [esp + 0x2c]
mov dword [esp + 0x14], 0x16
call fcn.0041dd03
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov ecx, dword [edi]
mov edx, dword [esi + 4]
mov eax, dword [edx + ecx*4 + 4]
cmp word [eax + 8], 0x47
je 0x452cd3
mov eax, dword [edx + ecx*4]
mov ecx, dword [eax]
mov eax, dword [ecx]
mov dword [esp + 0xb0], eax
mov eax, dword [ecx + 4]
mov dword [esp + 0xb4], eax
mov eax, dword [ecx + 8]
mov dword [esp + 0xb8], eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xbc], eax
inc dword [eax]
lea eax, [esp + 0xb0]
push eax
call fcn.0041a6c4
test eax, eax
je 0x453783
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x2c]
call fcn.0041dd67
mov ecx, eax
call fcn.00471a58
inc dword [edi]
lea ecx, [esp + 0xb0]
call fcn.004092c6
mov eax, dword [esp + 0x30]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x3c], eax
jmp 0x40cd1f
lea eax, [esp + 0x9f]
push eax
lea ecx, [esp + 0x2c]
call fcn.0041dd67
mov ecx, dword [esp + 0x1c]
push eax
push edi
push esi
push 0
call fcn.0040fc70
test eax, eax
js 0x4537d0
mov eax, dword [esp + 0x18]
cmp dword [eax + 0xf8], 1
je 0x4537d0
mov eax, dword [esp + 0x30]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x3c], eax
jmp 0x40cd1f
mov dword [esp + 0x10], 0x10
jmp 0x40da22
cmp dword [esp + 0x1c], 0
mov dword [esp + 0x10], 0x16
sete al
test al, al
jne 0x4537e8
lea eax, [esp + 0xc0]
mov dword [esp + 0xc0], 0
push eax
lea ecx, [esp + 0x2c]
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 1
call fcn.0041dd67
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov ecx, dword [esp + 0x1c]
push eax
push edi
push esi
call fcn.0040e320
test eax, eax
js 0x4537da
lea eax, [esp + 0xc0]
push eax
lea ecx, [esp + 0x2c]
call fcn.0041dd67
mov ecx, eax
call fcn.0040a64f
lea ecx, [esp + 0xc0]
call fcn.0040f6d0
jmp 0x40cd1f
cmp dword [esp + 0x1c], 0
sete al
test al, al
jne 0x4537e8
lea eax, [esp + 0xd0]
mov dword [esp + 0xd0], 0
push eax
lea ecx, [esp + 0x2c]
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 1
call fcn.0041dd67
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov ecx, dword [esp + 0x1c]
push eax
push edi
push esi
call fcn.0040e320
test eax, eax
js 0x453811
lea eax, [esp + 0xd0]
push eax
lea ecx, [esp + 0x2c]
call fcn.0041dd67
mov ecx, eax
call fcn.0040a64f
lea ecx, [esp + 0xd0]
call fcn.0040f6d0
jmp 0x40cd1f
lea eax, [ecx + 1]
mov esi, 6
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
jmp 0x40c974
lea eax, [ecx + 1]
mov esi, 0xf
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
jmp 0x40c974
mov ecx, dword [esp + 0x20]
mov dl, byte [esp + 0x17]
test dl, dl
je 0x452e7c
mov eax, dword [ecx + 4]
jmp 0x452e7e
mov eax, ecx
cmp dword [eax], 0x14
je 0x452ebc
test dl, dl
je 0x452e8c
mov eax, dword [ecx + 4]
jmp 0x452e8e
mov eax, ecx
cmp dword [eax], 0x12
je 0x452ebc
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x54]
push eax
call fcn.0040e7e0
test eax, eax
js 0x453823
mov dl, byte [esp + 0x59]
mov ecx, dword [esp + 0x54]
mov byte [esp + 0x17], dl
mov dword [esp + 0x20], ecx
jmp 0x452e73
cmp dword [esp + 0x2c], 0
sete al
test al, al
jne 0x45384e
lea ecx, [esp + 0x28]
call fcn.0041dd67
mov ecx, eax
call fcn.0040a993
lea ecx, [esp + 0x28]
mov byte [esp + 0xf], al
call fcn.0041ba89
mov edi, dword [ebp + 0xc]
mov edx, dword [edi]
inc edx
cmp byte [esp + 0xf], 0
mov dword [edi], edx
jne 0x452f33
mov eax, dword [ebp + 8]
mov ecx, 1
mov esi, dword [eax + 4]
mov eax, dword [esi + edx*4]
movzx eax, word [eax + 8]
cmp ax, 0x57
jne 0x452f13
inc ecx
jmp 0x452f2c
cmp ax, 0x58
jne 0x452f1c
dec ecx
jmp 0x452f2c
cmp ax, 0x7f
je 0x452f33
cmp ax, 0x40
jne 0x452f2c
test ecx, ecx
je 0x452f33
inc edx
mov dword [edi], edx
test ecx, ecx
jne 0x452f03
mov dword [esp + 0x10], 0x12
jmp 0x40cdb7
cmp dword [esp + 0x1c], 0
sete al
test al, al
jne 0x4537e8
mov eax, dword [ebp + 0xc]
lea edx, [ecx + 1]
mov dword [esp + 0x10], 0x16
mov ecx, 1
mov dword [eax], edx
mov eax, dword [edi + edx*4]
mov esi, edx
movzx eax, word [eax + 8]
cmp ax, 0x47
jne 0x452f77
inc ecx
jmp 0x452f93
cmp ax, 0x48
jne 0x452f80
dec ecx
jmp 0x452f93
cmp ax, 0x7f
je 0x452fa1
cmp ax, 0x40
jne 0x452f93
mov esi, edx
cmp ecx, 1
je 0x452fa1
mov esi, dword [ebp + 0xc]
inc edx
mov eax, edx
mov dword [esi], edx
mov esi, eax
test ecx, ecx
jne 0x452f65
mov eax, dword [edi + esi*4 - 4]
mov edi, dword [ebp + 0xc]
cmp word [eax + 8], 0x48
mov eax, dword [ebp + 0x14]
jne 0x40cedf
test ecx, ecx
jne 0x40cedf
lea eax, [esi - 1]
mov dword [edi], eax
jmp 0x40cdcf
lea eax, [ecx + 1]
mov esi, 0xa
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
jmp 0x40c974
sub esp, 0x10
mov dword [esp + 0x20], 0x16
mov ecx, esp
push str.Default
call fcn.0040970d
push 0xffffffffffffffff
push 0x29
jmp 0x453012
sub esp, 0x10
mov dword [esp + 0x20], 0x16
mov ecx, esp
push 0x49cc04
call fcn.0040970d
push 0
push 0x2a
lea ecx, [esp + 0x128]
call fcn.0041b0e9
push 0x4d0290
lea ecx, [esp + 0x2c]
call fcn.0041dd03
lea eax, [esp + 0x110]
push eax
lea ecx, [esp + 0x2c]
call fcn.0041dd67
mov ecx, eax
call fcn.0041b08c
mov edi, dword [ebp + 0xc]
lea ecx, [esp + 0x118]
inc dword [edi]
call fcn.004092c6
jmp 0x40cdb7
mov dword [esp + 0xa0], 0
mov dl, 1
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 1
mov byte [esp + 0xf], dl
test ecx, ecx
je 0x4530b5
mov eax, dword [edi + ecx*4 - 4]
movzx eax, word [eax + 8]
cmp ax, 0x48
je 0x453099
cmp ax, 0x4f
jne 0x4530b5
lea ecx, [esp + 0x28]
call fcn.0041dd67
push eax
lea ecx, [esp + 0xa4]
call fcn.0040a64f
xor dl, dl
mov byte [esp + 0xf], dl
lea ecx, [esp + 0xa0]
call fcn.00485444
test al, al
jne 0x45310a
test dl, dl
je 0x453866
mov ecx, dword [esp + 0x18]
cmp byte [ecx + 0x175], 0
mov eax, dword [ecx + 0x170]
je 0x4530e3
mov eax, dword [eax + 0x10]
push eax
lea ecx, [esp + 0xa4]
call fcn.0040a64f
lea ecx, [esp + 0xa0]
call fcn.00485444
test al, al
jne 0x45310a
mov edx, 0xa7
jmp 0x45386b
mov edi, dword [ebp + 0xc]
lea eax, [esp + 0xe0]
mov esi, dword [ebp + 8]
mov ecx, dword [esp + 0x18]
push eax
lea eax, [esp + 0xa4]
mov dword [esp + 0xe4], 0
push eax
push edi
push esi
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 1
call fcn.00487972
test eax, eax
js 0x45388b
cmp byte [esp + 0xf], 0
mov dword [esp + 0x10], 0x16
jne 0x45316c
lea ecx, [esp + 0x28]
call fcn.0041ba89
lea eax, [esp + 0xe0]
push eax
lea ecx, [esp + 0x2c]
call fcn.0041dd03
lea ecx, [esp + 0xe0]
call fcn.0040f6d0
lea ecx, [esp + 0xa0]
call fcn.0040f6d0
mov eax, dword [esp + 0x30]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x3c], eax
jmp 0x40cd1f
mov ecx, dword [edi + 8]
mov eax, dword [0x4d0298]
cmp ecx, eax
je 0x40ce9d
push eax
call fcn.0040a6e5
jmp 0x40ce99
push dword [esi]
call fcn.0041ff24
add esp, 4
push 4
push dword [esi + 0xc]
call fcn.0041fedd
add esp, 8
jmp 0x40d2e7
sub eax, 5
cmp eax, 0xa
ja case.0x4531f5.6
jmp dword [eax*4 + 0x453a17]
mov eax, dword [edi]
test eax, eax
je case.0x4531f5.6
push eax
call dword [esp + 0x84]
push 0x10
push dword [edi]
jmp 0x453290
mov esi, dword [edi]
test esi, esi
je case.0x4531f5.6
lea ecx, [esi + 8]
call fcn.004092c6
push 0x18
jmp 0x45328f
mov esi, dword [edi]
test esi, esi
je case.0x4531f5.6
mov ecx, esi
call fcn.0041dcba
push 4
jmp 0x45328f
mov eax, dword [edi]
push dword [eax + 4]
call fcn.0041ff24
add esp, 4
push 8
push dword [edi]
jmp 0x453290
mov ecx, dword [edi]
test ecx, ecx
je case.0x4531f5.6
push ecx
call fcn.0045fddd
jmp case.0x4531f5.6
mov ecx, dword [edi]
test ecx, ecx
je case.0x4531f5.6
mov eax, dword [ecx]
push 1
call dword [eax]
jmp case.0x4531f5.6
mov esi, dword [edi]
test esi, esi
je case.0x4531f5.6
mov ecx, esi
call fcn.004092c6
push 0x14
push esi
call fcn.0041fedd
add esp, 8
jmp case.0x4531f5.6
cmp dword [0x4d029c], 4
jne 0x40da53
mov ecx, dword [edi + 8]
mov eax, dword [0x4d0298]
cmp ecx, eax
je 0x40da84
push eax
call fcn.0040a6e5
jmp 0x40da80
push ecx
call fcn.0041e07c
mov eax, dword [edi + 0xc]
mov dword [edi + 8], 0
jmp 0x40da5e
sub eax, 5
cmp eax, 0xa
ja case.0x4532e6.6
jmp dword [eax*4 + 0x453a43]
mov eax, dword [edi]
test eax, eax
je case.0x4532e6.6
push eax
call dword [esp + 0x84]
push 0x10
push dword [edi]
jmp 0x453381
mov esi, dword [edi]
test esi, esi
je case.0x4532e6.6
lea ecx, [esi + 8]
call fcn.004092c6
push 0x18
jmp 0x453380
mov esi, dword [edi]
test esi, esi
je case.0x4532e6.6
mov ecx, esi
call fcn.0041dcba
push 4
jmp 0x453380
mov eax, dword [edi]
push dword [eax + 4]
call fcn.0041ff24
add esp, 4
push 8
push dword [edi]
jmp 0x453381
mov ecx, dword [edi]
test ecx, ecx
je case.0x4532e6.6
push ecx
call fcn.0045fddd
jmp case.0x4532e6.6
mov ecx, dword [edi]
test ecx, ecx
je case.0x4532e6.6
mov eax, dword [ecx]
push 1
call dword [eax]
jmp case.0x4532e6.6
mov esi, dword [edi]
test esi, esi
je case.0x4532e6.6
mov ecx, esi
call fcn.004092c6
push 0x14
push esi
call fcn.0041fedd
add esp, 8
jmp case.0x4532e6.6
mov edi, dword [edi + 0x10]
jmp 0x40cec5
mov ecx, dword [edi + 8]
mov eax, dword [0x4d0298]
cmp ecx, eax
je 0x40ca4b
push eax
call fcn.0040a6e5
jmp 0x40ca4b
push dword [esi]
call fcn.0041ff24
add esp, 4
push 4
push dword [esi + 0xc]
call fcn.0041fedd
add esp, 8
jmp 0x40daee
sub eax, 5
cmp eax, 0xa
ja case.0x4533d9.6
jmp dword [eax*4 + 0x453a6f]
mov eax, dword [edi]
test eax, eax
je case.0x4533d9.6
push eax
call dword [esp + 0x84]
push 0x10
push dword [edi]
jmp 0x453474
mov esi, dword [edi]
test esi, esi
je case.0x4533d9.6
lea ecx, [esi + 8]
call fcn.004092c6
push 0x18
jmp 0x453473
mov esi, dword [edi]
test esi, esi
je case.0x4533d9.6
mov ecx, esi
call fcn.0041dcba
push 4
jmp 0x453473
mov eax, dword [edi]
push dword [eax + 4]
call fcn.0041ff24
add esp, 4
push 8
push dword [edi]
jmp 0x453474
mov ecx, dword [edi]
test ecx, ecx
je case.0x4533d9.6
push ecx
call fcn.0045fddd
jmp case.0x4533d9.6
mov ecx, dword [edi]
test ecx, ecx
je case.0x4533d9.6
mov eax, dword [ecx]
push 1
call dword [eax]
jmp case.0x4533d9.6
mov esi, dword [edi]
test esi, esi
je case.0x4533d9.6
mov ecx, esi
call fcn.004092c6
push 0x14
push esi
call fcn.0041fedd
add esp, 8
jmp case.0x4533d9.6
mov ecx, dword [edi + 8]
mov eax, dword [0x4d0298]
cmp ecx, eax
je 0x40d915
push eax
call fcn.0040a6e5
jmp 0x40d915
sub eax, 5
cmp eax, 0xa
ja case.0x4534a8.6
jmp dword [eax*4 + 0x453a9b]
mov eax, dword [edi]
test eax, eax
je case.0x4534a8.6
push eax
call dword [esp + 0x84]
push 0x10
push dword [edi]
call fcn.0041fedd
add esp, 8
jmp case.0x4534a8.6
mov esi, dword [edi]
test esi, esi
je 0x453555
lea ecx, [esi + 8]
call fcn.004092c6
push 0x18
jmp 0x45354c
mov esi, dword [edi]
test esi, esi
je 0x453555
mov ecx, esi
call fcn.0041dcba
push 4
jmp 0x45354c
mov eax, dword [edi]
push dword [eax + 4]
call fcn.0041ff24
add esp, 4
push 8
push dword [edi]
call fcn.0041fedd
add esp, 8
jmp case.0x4534a8.6
mov ecx, dword [edi]
test ecx, ecx
je case.0x4534a8.6
push ecx
call fcn.0045fddd
jmp case.0x4534a8.6
mov ecx, dword [edi]
test ecx, ecx
je case.0x4534a8.6
mov eax, dword [ecx]
push 1
call dword [eax]
jmp case.0x4534a8.6
mov esi, dword [edi]
test esi, esi
je 0x453555
mov ecx, esi
call fcn.004092c6
push 0x14
push esi
call fcn.0041fedd
add esp, 8
mov esi, dword [esp + 0x1c]
jmp case.0x4534a8.6
mov eax, dword [edi + 0x10]
mov dword [esp + 0x64], eax
jmp 0x40ca69
mov eax, dword [0x4d23a4]
mov esi, dword [eax + 8]
jmp 0x40caa6
push 0x4d2560
call fcn.00420352
add esp, 4
cmp dword [0x4d2560], 0xffffffff
jne 0x40cacc
mov ecx, 0x4d2564
call fcn.0040a567
push 0x442559
call fcn.004201b3
add esp, 4
push 0x4d2560
call fcn.00420308
add esp, 4
jmp 0x40cacc
test edx, edx
jne 0x40cc31
test ecx, ecx
jne 0x40cb8d
jmp 0x40cb17
push 0x4d2560
call fcn.00420352
add esp, 4
cmp dword [0x4d2560], 0xffffffff
jne 0x453609
mov ecx, 0x4d2564
call fcn.0040a567
push 0x442559
call fcn.004201b3
add esp, 4
push 0x4d2560
call fcn.00420308
add esp, 4
mov ecx, dword [0x4d2390]
mov dword [esp + 0x24], ecx
jmp 0x40cf1a
test edi, edi
jne 0x40d159
test eax, eax
jne 0x40d04b
jmp 0x40cf5b
mov esi, dword [edx + 4]
push 8
push edx
call fcn.0041fedd
mov eax, esi
add esp, 8
mov esi, dword [esp + 0x10]
mov dword [esp + 0x20], eax
mov dword [esp + 0x54], eax
xor al, al
jmp 0x40d452
mov edi, dword [esp + 0x50]
jmp 0x40cda2
mov edi, dword [ebp + 0xc]
jmp 0x40cdc7
cmp byte [esp + 0x35], 0
je 0x40dbf2
mov eax, dword [eax + 0x10]
jmp 0x40dbf2
lea ecx, [esp + 0x28]
call fcn.0041dd67
mov esi, eax
mov ecx, esi
call fcn.0040f6d0
mov byte [esi], 1
jmp 0x40dc6a
cmp byte [esp + 0x35], 0
je 0x4536a1
mov eax, dword [esp + 8]
mov esi, dword [eax + 0x10]
jmp 0x40dc60
mov esi, dword [esp + 8]
jmp 0x40dc60
mov ecx, dword [esp + 0x20]
push 8
push ecx
mov esi, dword [ecx + 4]
call fcn.0041fedd
mov eax, esi
add esp, 8
mov dword [esp + 0x20], eax
mov dword [esp + 0x54], eax
jmp 0x40dc80
mov esi, dword [eax + 4]
push 8
push eax
call fcn.0041fedd
mov eax, esi
add esp, 8
mov dword [esp + 0x20], eax
mov dword [esp + 0x54], eax
xor al, al
jmp 0x40dc8d
mov eax, dword [ebp + 8]
mov ecx, dword [esp + 0x18]
mov eax, dword [eax + 4]
mov eax, dword [eax + edi*4 - 4]
jmp 0x453755
mov eax, dword [edx + ecx*4]
mov ecx, dword [esp + 0x18]
movsx eax, word [eax + 0xa]
push eax
push 0x6f
call fcn.00473535
lea ecx, [esp + 0xf0]
call fcn.0040f6d0
jmp 0x453761
push dword [esp + 0x88]
mov ecx, dword [esp + 0x1c]
push 0x70
call fcn.00473535
lea ecx, [esp + 0x6c]
mov dword [esp + 0x6c], 0x49cc40
call fcn.00467050
push dword [esp + 0x70]
call fcn.0041ff24
add esp, 4
jmp 0x45381d
mov eax, dword [edx + ecx*4 - 4]
mov ecx, edi
movsx eax, word [eax + 0xa]
push eax
push 0x6f
call fcn.00473535
mov dword [esp + 0x6c], 0x49cc40
lea ecx, [esp + 0x6c]
call fcn.00467050
push dword [esp + 0x70]
call fcn.0041ff24
add esp, 4
jmp 0x45381d
mov ecx, dword [edi]
mov eax, dword [esi + 4]
mov eax, dword [eax + ecx*4]
mov ecx, dword [esp + 0x18]
movsx eax, word [eax + 0xa]
push eax
push 0x85
call fcn.00473535
lea ecx, [esp + 0xb0]
call fcn.004092c6
mov edx, dword [esp + 0x30]
mov dword [esp + 8], edx
jmp 0x45381d
mov ecx, dword [edi]
mov eax, dword [esi + 4]
mov eax, dword [eax + ecx*4 - 4]
mov ecx, dword [esp + 0x18]
movsx eax, word [eax + 0xa]
push eax
push 0x86
call fcn.00473535
mov edx, dword [esp + 0x30]
mov dword [esp + 8], edx
jmp 0x45381d
lea ecx, [esp + 0xc0]
call fcn.0040f6d0
jmp 0x45381d
movsx eax, word [esi + 0xa]
push eax
push 0x6e
jmp 0x453806
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
movsx eax, word [eax + 0xa]
push eax
push 0x79
mov ecx, dword [esp + 0x20]
call fcn.00473535
jmp 0x45381d
lea ecx, [esp + 0xd0]
call fcn.0040f6d0
mov edx, dword [esp + 0x20]
jmp 0x453842
push dword [esp + 0x60]
mov ecx, dword [esp + 0x1c]
push 0x6e
call fcn.00473535
mov edx, dword [esp + 0x54]
mov edi, dword [esp + 0x30]
mov dword [esp + 0x20], edx
mov dword [esp + 8], edi
mov eax, dword [esp + 8]
or edi, 0xffffffff
jmp 0x40c9bb
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
movsx eax, word [eax + 0xa]
push eax
jmp 0x453927
mov edx, 0xa9
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
mov ecx, dword [esp + 0x18]
movzx eax, word [eax + 0xa]
cwde
push eax
push edx
call fcn.00473535
jmp 0x4538af
mov ecx, dword [edi]
mov eax, dword [esi + 4]
mov eax, dword [eax + ecx*4]
mov ecx, dword [esp + 0x18]
movsx eax, word [eax + 0xa]
push eax
push 0x6e
call fcn.00473535
lea ecx, [esp + 0xe0]
call fcn.0040f6d0
lea ecx, [esp + 0xa0]
call fcn.0040f6d0
jmp 0x45381d
push dword [esp + 0x60]
push 0x6d
jmp 0x453929
push dword [esp + 0x60]
push 0x6b
jmp 0x4538d6
push dword [esp + 0x60]
push 0x6d
mov ecx, dword [esp + 0x20]
call fcn.00473535
mov edx, dword [esp + 0x30]
mov dword [esp + 8], edx
jmp 0x45381d
push dword [esp + 0x60]
push 0x6c
jmp 0x4538d6
push dword [esp + 0x60]
mov ecx, dword [esp + 0x1c]
push 0x6e
call fcn.00473535
or edi, 0xffffffff
lea ecx, [esp + 0x100]
mov dword [esp + 0x24], edi
call fcn.0040f6d0
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 8]
jmp 0x40c9bf
push dword [esp + 0x60]
push 0x6e
mov ecx, dword [esp + 0x20]
call fcn.00473535
mov edx, dword [esp + 0x30]
mov dword [esp + 8], edx
jmp 0x45381d
mov eax, dword [edi]
test eax, eax
je case.0x40de50.6
push eax
call dword [esp + 0x84]
push 0x10
push dword [edi]
call fcn.0041fedd
add esp, 8
jmp case.0x40de50.6
mov ecx, dword [edi]
test ecx, ecx
je case.0x40de50.6
push ecx
call fcn.0041eb8b
jmp case.0x40de50.6
mov ecx, dword [edi]
test ecx, ecx
je case.0x40de50.6
push ecx
call fcn.0041dca2
jmp case.0x40de50.6
mov eax, dword [edi]
push dword [eax + 4]
call fcn.0041ff24
add esp, 4
push 8
push dword [edi]
call fcn.0041fedd
add esp, 8
jmp case.0x40de50.6
mov ecx, dword [edi]
test ecx, ecx
je case.0x40de50.6
push ecx
call fcn.0045fddd
jmp case.0x40de50.6
mov ecx, dword [edi]
test ecx, ecx
je case.0x40de50.6
mov eax, dword [ecx]
push 1
call dword [eax]
jmp case.0x40de50.6
mov ecx, dword [edi]
test ecx, ecx
je case.0x40de50.6
push ecx
call fcn.00470e06
jmp case.0x40de50.6