Function at 0x4066e0
Capabilities:
Hide graphical window
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x498d90
mov eax, dword fs:[0]
push eax
sub esp, 0x378
mov eax, dword [0x4ba858]
xor eax, esp
mov dword [esp + 0x374], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4ba858]
xor eax, esp
push eax
lea eax, [esp + 0x38c]
mov dword fs:[0], eax
mov esi, dword [esp + 0x39c]
mov ebx, dword [esp + 0x3a0]
mov ecx, dword [esp + 0x3a4]
xor ebp, ebp
xor edi, edi
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x20], ebp
mov eax, dword [esi]
add esi, 4
cmp eax, 0x3000903
mov dword [esp + 0x38], ebx
mov dword [esp + 0x34], ecx
ja 0x40cdb8
je 0x40cd6c
cmp eax, 0x1008002
ja 0x40868c
je 0x408681
cmp eax, 0x300201
ja 0x4073b3
je 0x40739c
cmp eax, 0x200101
ja 0x407026
je 0x40700f
cmp eax, 0x100f02
ja 0x406beb
je 0x406bb2
cmp eax, 0x100702
ja 0x4069f3
je 0x4069b4
cmp eax, 0x100302
ja 0x4068fd
je 0x4068db
cmp eax, 0x100002
je 0x412957
cmp eax, 0x100102
je 0x406869
cmp eax, 0x100202
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
cmp eax, 4
ja case.default.0x4109ad
jmp dword [eax*4 + 0x4160a8]
push 0
push 8
call fcn.00402a70
add esp, 8
jmp case.default.0x4109ad
push 0
push 0xb
call fcn.00402a70
add esp, 8
jmp case.default.0x4109ad
push 0
push 0xc
call fcn.00402a70
add esp, 8
jmp case.default.0x4109ad
push 0
push 0xd
call fcn.00402a70
add esp, 8
jmp case.default.0x4109ad
push 0
push 0xe
call fcn.00402a70
add esp, 8
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x14], edi
je 0x4068b0
test dword [0x6c77b0], 0x80000000
jne case.default.0x4109ad
mov eax, dword [0x4bcc70]
push 0
push 1
push 0x501
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
jmp case.default.0x4109ad
test dword [0x6c77b0], 0x80000000
je case.default.0x4109ad
mov ecx, dword [0x4bcc70]
push 0
push 0
push 0x501
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
jne case.default.0x4109ad
xor eax, eax
jmp 0x41607d
cmp eax, 0x100402
je 0x40697e
cmp eax, 0x100502
je 0x40694a
cmp eax, 0x100602
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
push 0
push edx
call fcn.004654c0
mov eax, dword [esp + 0x1c]
add esp, 8
mov dword [0x6cbbd8], eax
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
push 0xffffffffffffffff
push edx
call fcn.00465ba0
mov eax, dword [esp + 0x1c]
add esp, 8
mov dword [0x6cb798], eax
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
push edx
call fcn.00465820
mov eax, dword [esp + 0x18]
add esp, 4
mov dword [0x6c983c], eax
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x14], edi
je 0x4069e4
or dword [0x6c77b0], 0x800000
jmp case.default.0x4109ad
and dword [0x6c77b0], 0xff7fffff
jmp case.default.0x4109ad
cmp eax, 0x100b02
ja 0x406b1e
je 0x406ac3
cmp eax, 0x100802
je 0x406a87
cmp eax, 0x100902
je 0x406a4c
cmp eax, 0x100a02
jne 0x415de4
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
push eax
push 4
call fcn.00402fa0
add esp, 8
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
mov eax, dword [0x6c77b0]
shl edx, 4
xor edx, eax
and edx, 0xf0
xor eax, edx
mov dword [0x6c77b0], eax
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
mov eax, dword [0x6c77b0]
and edx, 0xf
shl edx, 0x14
and eax, 0xff8fffff
or edx, eax
mov dword [0x6c77b0], edx
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
and dword [0x6c77b0], 0xfff3ffff
sub eax, 1
je 0x406b0a
sub eax, 1
jne 0x406b14
or dword [0x6c77b0], 0x40000
call fcn.00465c00
jmp case.default.0x4109ad
or dword [0x6c77b0], 0x80000
call fcn.00465c00
jmp case.default.0x4109ad
cmp eax, 0x100c02
je 0x406b73
cmp eax, 0x100d02
je 0x406b57
cmp eax, 0x100e02
jne 0x415de4
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
jne 0x406a38
jmp 0x41607d
mov eax, dword [esi]
push 0x6cbd3c
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
jne 0x406b14
jmp 0x41607d
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x14], edi
je 0x406ba3
or dword [0x6c77b0], 0x10000000
jmp case.default.0x4109ad
and dword [0x6c77b0], 0xefffffff
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x14], edi
je 0x406bdf
or dword [0x6c984c], 1
jmp case.default.0x4109ad
and dword [0x6c984c], 0xfffffffe
jmp case.default.0x4109ad
cmp eax, 0x101702
ja 0x406e4a
je 0x406e11
cmp eax, 0x101302
ja 0x406d34
je 0x406d01
cmp eax, 0x101002
je 0x406cc8
cmp eax, 0x101102
je 0x406c94
cmp eax, 0x101202
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
cmp eax, dword [0x6cdde0]
je case.default.0x4109ad
test dword [0x6c77b0], 0x80000000
je 0x406c8a
mov edx, dword [0x4bcc70]
push edx
call fcn.004050a0
mov ecx, dword [0x4bcc70]
mov eax, dword [esp + 0x18]
push ecx
mov dword [0x6cdde0], eax
call fcn.004050a0
add esp, 8
jmp case.default.0x4109ad
mov dword [0x6cdde0], eax
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
push eax
push 0
mov dword [0x6cbdc8], eax
call fcn.0045e8e0
add esp, 8
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x14], edi
je 0x406cf5
or dword [0x6c984c], 2
jmp case.default.0x4109ad
and dword [0x6c984c], 0xfffffffd
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
and dword [0x6c77b0], 0xffffff0f
mov dword [0x6c6d30], eax
jmp case.default.0x4109ad
cmp eax, 0x101402
je 0x406dcf
cmp eax, 0x101502
je 0x406d90
cmp eax, 0x101602
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x14], edi
je 0x406d81
or dword [0x6cde28], 0x2000000
jmp case.default.0x4109ad
and dword [0x6cde28], 0xfdffffff
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x14], edi
je 0x406dc0
or dword [0x6cde28], 0x1000000
jmp case.default.0x4109ad
and dword [0x6cde28], 0xfeffffff
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [0x6cde28]
and dword [0x6c77b0], 0xf0ffffff
mov edx, eax
xor edx, dword [esp + 0x14]
and edx, 0xffffff
xor eax, edx
mov dword [0x6cde28], eax
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x14], edi
je 0x406e3e
or dword [0x6cdd10], 1
jmp case.default.0x4109ad
and dword [0x6cdd10], 0xfffffffe
jmp case.default.0x4109ad
cmp eax, 0x101b02
ja 0x406f6a
je 0x406f28
cmp eax, 0x101802
je 0x406eef
cmp eax, 0x101902
je 0x406eb7
cmp eax, 0x101a02
jne 0x415de4
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x14], edi
je 0x406ea8
or dword [0x6cde28], 0x4000000
jmp case.default.0x4109ad
and dword [0x6cde28], 0xfbffffff
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
push 0xfffffffffffffffe
push edx
call fcn.00465ba0
mov eax, dword [esp + 0x1c]
add esp, 8
mov dword [0x6c9728], eax
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x14], edi
je 0x406f1c
or dword [0x6cdd10], 2
jmp case.default.0x4109ad
and dword [0x6cdd10], 0xfffffffd
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
and dword [0x6c984c], 0xfffff0ff
test eax, eax
je case.default.0x4109ad
and eax, 0xf
shl eax, 8
or dword [0x6c984c], eax
jmp case.default.0x4109ad
cmp eax, 0x101c02
je 0x406fd7
cmp eax, 0x102002
je 0x406f92
cmp eax, 0x200001
jne 0x415de4
mov dword [0x6c77a8], 1
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
mov eax, dword [0x6c984c]
shl edx, 4
xor edx, eax
and edx, 0xf0
xor eax, edx
push 0xe
mov dword [0x6c984c], eax
call fcn.0045cea0
add esp, 4
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
push 1
push edx
call fcn.004654c0
mov eax, dword [esp + 0x1c]
add esp, 8
mov dword [0x6c9838], eax
jmp case.default.0x4109ad
mov ecx, dword [0x6c77b0]
and ecx, 0x80000000
mov dword [0x6c77a8], ecx
jmp case.default.0x4109ad
cmp eax, 0x201101
ja 0x4071ff
je 0x4071ee
cmp eax, 0x200901
ja 0x4070ff
je 0x4070e8
cmp eax, 0x200501
ja 0x407092
je 0x407083
cmp eax, 0x200201
je 0x407159
cmp eax, 0x200301
je 0x406f83
cmp eax, 0x200401
jne 0x415de4
mov edx, dword [0x6c983c]
mov dword [0x6c77a8], edx
jmp case.default.0x4109ad
mov eax, dword [0x6cb798]
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
cmp eax, 0x200601
je 0x4070d9
cmp eax, 0x200701
je 0x4070c2
cmp eax, 0x200801
jne 0x415de4
mov ecx, dword [0x6c77b0]
shr ecx, 0x14
and ecx, 7
mov dword [0x6c77a8], ecx
jmp case.default.0x4109ad
mov edx, dword [0x6c77b0]
shr edx, 0x17
and edx, 1
mov dword [0x6c77a8], edx
jmp case.default.0x4109ad
mov eax, dword [0x6cbbd8]
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
mov ecx, dword [0x6c77b0]
shr ecx, 4
and ecx, 0xf
mov dword [0x6c77a8], ecx
jmp case.default.0x4109ad
cmp eax, 0x200d01
ja 0x407198
je 0x407187
cmp eax, 0x200a01
je 0x407173
cmp eax, 0x200b01
je 0x40713c
cmp eax, 0x200c02
jne 0x415de4
mov edx, dword [0x6c77b0]
shr edx, 0x1c
and edx, 1
mov dword [0x6c77a8], edx
jmp case.default.0x4109ad
mov eax, dword [0x6c77b0]
shr eax, 0x12
and eax, 3
sub eax, ebp
je 0x407159
sub eax, 1
je 0x407164
sub eax, 1
je 0x406f83
mov dword [0x6c77a8], ebp
jmp case.default.0x4109ad
mov dword [0x6c77a8], 2
jmp case.default.0x4109ad
movzx eax, byte [0x6c77b3]
and eax, 0xf
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
mov ecx, dword [0x6cbd3c]
mov dword [0x6c77a8], ecx
jmp case.default.0x4109ad
cmp eax, 0x200e01
je 0x4071d9
cmp eax, 0x200f01
je 0x4071c7
cmp eax, 0x201001
jne 0x415de4
mov edx, dword [0x6c984c]
shr edx, 1
and edx, 1
mov dword [0x6c77a8], edx
jmp case.default.0x4109ad
mov eax, dword [0x6c984c]
and eax, 1
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
movzx ecx, byte [0x6c77b3]
and ecx, 0xf
mov dword [0x6c77a8], ecx
jmp case.default.0x4109ad
mov edx, dword [0x6cbdc8]
mov dword [0x6c77a8], edx
jmp case.default.0x4109ad
cmp eax, 0x201901
ja 0x4072e5
je 0x4072d4
cmp eax, 0x201501
ja 0x40727c
je 0x407268
cmp eax, 0x201201
je 0x407257
cmp eax, 0x201301
je 0x407246
cmp eax, 0x201401
jne 0x415de4
mov eax, dword [0x6cde28]
and eax, 0xffffff
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
mov ecx, dword [0x6c6d30]
mov dword [0x6c77a8], ecx
jmp case.default.0x4109ad
mov edx, dword [0x6cdde0]
mov dword [0x6c77a8], edx
jmp case.default.0x4109ad
movzx eax, byte [0x6cde2b]
and eax, 1
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
cmp eax, 0x201601
je 0x4072bf
cmp eax, 0x201701
je 0x4072ab
cmp eax, 0x201801
jne 0x415de4
mov ecx, dword [0x6cdd10]
shr ecx, 1
and ecx, 1
mov dword [0x6c77a8], ecx
jmp case.default.0x4109ad
mov edx, dword [0x6cdd10]
and edx, 1
mov dword [0x6c77a8], edx
jmp case.default.0x4109ad
mov eax, dword [0x6cde28]
shr eax, 0x19
and eax, 1
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
mov ecx, dword [0x6c9728]
mov dword [0x6c77a8], ecx
jmp case.default.0x4109ad
cmp eax, 0x202001
ja 0x40735b
je 0x407344
cmp eax, 0x201a01
je 0x40732d
cmp eax, 0x201b02
je 0x407318
cmp eax, 0x201c01
jne 0x415de4
mov edx, dword [0x6c9838]
mov dword [0x6c77a8], edx
jmp case.default.0x4109ad
mov eax, dword [0x6c984c]
shr eax, 8
and eax, 0xf
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
mov ecx, dword [0x6cde28]
shr ecx, 0x1a
and ecx, 1
mov dword [0x6c77a8], ecx
jmp case.default.0x4109ad
mov edx, dword [0x6c984c]
shr edx, 4
and edx, 0xf
mov dword [0x6c77a8], edx
jmp case.default.0x4109ad
cmp eax, 0x300001
je 0x407382
cmp eax, 0x300101
jne 0x415de4
mov eax, dword [0x6cde08]
shr eax, 0xb
and eax, 1
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
mov ecx, dword [0x6cde08]
and cl, 0xc3
neg cl
sbb ecx, ecx
neg ecx
mov dword [0x6c77a8], ecx
jmp case.default.0x4109ad
push 0
push 6
call fcn.00402fa0
add esp, 8
mov dword [0x4bc828], edi
jmp case.default.0x4109ad
cmp eax, 0x1000f03
ja 0x407d8b
je 0x407d39
cmp eax, 0x500302
ja 0x4079b2
je 0x40798e
cmp eax, 0x400301
ja 0x407508
je 0x4074e7
cmp eax, 0x300601
ja 0x40746c
je 0x40744e
cmp eax, 0x300301
je 0x40743d
cmp eax, 0x300401
je 0x407426
cmp eax, 0x300501
jne 0x415de4
and dword [0x6cdd10], 0xfffeffff
push 1
push 0x40000
call fcn.00433570
add esp, 8
jmp case.default.0x4109ad
movzx edx, word [0x6cdd12]
not edx
and edx, 1
mov dword [0x6c77a8], edx
jmp case.default.0x4109ad
push 0
push 5
call fcn.00402fa0
add esp, 8
jmp case.default.0x4109ad
or dword [0x6cdd10], 0x10000
push 0
push 0x40000
call fcn.00433570
add esp, 8
jmp case.default.0x4109ad
cmp eax, 0x400001
je 0x4074c6
cmp eax, 0x400101
je 0x4074a6
cmp eax, 0x400201
jne 0x415de4
lea eax, [esp + 0x154]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx ecx, word [esp + 0x15a]
mov dword [0x6c77a8], ecx
jmp case.default.0x4109ad
lea edx, [esp + 0x184]
push edx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [esp + 0x186]
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
lea ecx, [esp + 0x194]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx edx, word [esp + 0x194]
mov dword [0x6c77a8], edx
jmp case.default.0x4109ad
lea eax, [esp + 0x164]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx ecx, word [esp + 0x16c]
mov dword [0x6c77a8], ecx
jmp case.default.0x4109ad
cmp eax, 0x410103
ja 0x4078be
je 0x4075f9
cmp eax, 0x400401
je 0x4075d8
cmp eax, 0x400501
je 0x4075b7
cmp eax, 0x410002
jne 0x415de4
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edi, dword [esp + 0x14]
xor eax, eax
cmp edi, eax
je 0x4075a8
mov eax, 0xd1b71759
mul edi
shr edx, 0xd
mov dword [0x6c77e0], edx
mov eax, 0x51eb851f
mul edi
mov ecx, edx
shr ecx, 5
mov eax, ecx
imul ecx, ecx, 0x64
xor edx, edx
mov ebx, 0x64
div ebx
mov eax, edx
shl eax, 4
sub eax, edx
add eax, eax
add eax, eax
sub eax, ecx
add eax, edi
imul eax, eax, 0x3e8
mov dword [0x6c9850], eax
jmp case.default.0x4109ad
mov dword [0x6c77e0], eax
mov dword [0x6c9850], eax
jmp case.default.0x4109ad
lea ecx, [esp + 0x174]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx edx, word [esp + 0x180]
mov dword [0x6c77a8], edx
jmp case.default.0x4109ad
lea eax, [esp + 0x1a4]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx ecx, word [esp + 0x1ae]
mov dword [0x6c77a8], ecx
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x18]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
cmp eax, 4
ja case.default.0x4109ad
jmp dword [eax*4 + 0x4160bc]
mov eax, dword [esp + 0x18]
cmp eax, 3
ja case.default.0x4109ad
jmp dword [eax*4 + 0x4160d0]
mov edx, dword [0x6c9850]
mov dword [0x6c77a8], edx
jmp case.default.0x4109ad
mov ecx, dword [0x6c9850]
mov eax, 0x10624dd3
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x3e8
sub ecx, eax
mov dword [0x6c77a8], ecx
jmp case.default.0x4109ad
mov ecx, dword [0x6c9850]
mov eax, 0x45e7b273
imul ecx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xea60
sub ecx, eax
mov dword [0x6c77a8], ecx
jmp case.default.0x4109ad
mov ecx, dword [0x6c9850]
mov dword [0x6c77a8], ecx
jmp case.default.0x4109ad
mov eax, dword [esp + 0x18]
cmp eax, 3
ja case.default.0x4109ad
jmp dword [eax*4 + 0x4160e0]
mov ecx, dword [0x6c9850]
mov eax, 0x10624dd3
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
mov ecx, dword [0x6c9850]
mov eax, 0x10624dd3
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
cdq
mov ecx, 0x3c
idiv ecx
mov dword [0x6c77a8], edx
jmp case.default.0x4109ad
mov ecx, dword [0x6c77e0]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
add edx, edx
add edx, edx
add edx, edx
sub ecx, edx
mov edx, dword [0x6c9850]
imul ecx, ecx, 0xe10
mov eax, 0x10624dd3
imul edx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add ecx, edx
add eax, ecx
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
mov eax, dword [esp + 0x18]
sub eax, 0
je 0x4077fd
sub eax, 1
je 0x4077dc
sub eax, 1
jne case.default.0x4109ad
mov ecx, dword [0x6c77e0]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
add edx, edx
add edx, edx
add edx, edx
sub ecx, edx
mov edi, ecx
shl edi, 4
sub edi, ecx
mov ecx, dword [0x6c9850]
mov eax, 0x45e7b273
imul ecx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + edi*4]
mov dword [0x6c77a8], ecx
jmp case.default.0x4109ad
mov ecx, dword [0x6c9850]
mov eax, 0x45e7b273
imul ecx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
mov ecx, dword [0x6c9850]
mov eax, 0x45e7b273
imul ecx
sar edx, 0xe
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov dword [0x6c77a8], ecx
jmp case.default.0x4109ad
mov eax, dword [esp + 0x18]
sub eax, 0
je 0x40788d
sub eax, 1
je 0x407860
sub eax, 1
jne case.default.0x4109ad
mov ecx, dword [0x6c77e0]
mov eax, 0x30c30c31
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xa8
sub ecx, eax
mov dword [0x6c77a8], ecx
jmp case.default.0x4109ad
mov ecx, dword [0x6c77e0]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
add edx, edx
add edx, edx
add edx, edx
sub ecx, edx
mov dword [0x6c77a8], ecx
jmp case.default.0x4109ad
mov eax, dword [0x6c77e0]
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
mov ecx, dword [0x6c77e0]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov dword [0x6c77a8], ecx
jmp case.default.0x4109ad
cmp eax, 0x500001
je 0x407970
cmp eax, 0x500102
je 0x407923
cmp eax, 0x500202
jne 0x415de4
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x14], edi
je 0x40790f
mov eax, dword [0x4bcc70]
push 5
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp case.default.0x4109ad
mov ecx, dword [0x4bcc70]
push 0
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x14], edi
je 0x407955
mov eax, dword [0x4bcc70]
push eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp case.default.0x4109ad
mov ecx, dword [0x4bcc70]
push 2
push ecx
call dword [sym.imp.USER32.dll_GetWindow]
push eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp case.default.0x4109ad
mov edx, dword [0x4bcc70]
push 0
push 0xf020
push 0x112
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp case.default.0x4109ad
mov eax, dword [esi]
push eax
mov dword [esp + 0x18], eax
add esi, 4
call fcn.004022f0
add esp, 4
push eax
mov eax, dword [0x4bcc70]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
jmp case.default.0x4109ad
cmp eax, 0x1000703
ja 0x407b8b
je 0x407b59
cmp eax, 0x1000302
ja 0x407a54
je 0x407a18
cmp eax, 0x1000001
je 0x407a01
cmp eax, 0x1000101
je 0x4079f6
cmp eax, 0x1000202
jne 0x415de4
mov esi, dword [esi]
add esi, dword [0x4bc864]
jmp case.default.0x4109ad
mov dword [ebx], 7
jmp case.default.0x4109ad
push 0
push 0
call fcn.0046cbc0
add esp, 8
mov dword [ebx], 6
jmp case.default.0x4109ad
cmp dword [esi], ebp
je 0x412957
mov ecx, dword [0x4bbfc8]
push ecx
mov edx, esi
sub edx, dword [0x4bc864]
push 0
add edx, 4
push 0
push edx
call fcn.0046c300
add esp, 0x10
test eax, eax
je 0x412957
mov esi, dword [esi]
add esi, dword [0x4bc864]
jmp case.default.0x4109ad
cmp eax, 0x1000401
je 0x407b12
cmp eax, 0x1000502
je 0x407acd
cmp eax, 0x1000602
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov dword [ebx], 1
mov edi, dword [0x4bbfc8]
add edi, edi
add edi, edi
call fcn.004753b0
cmp dword [0x6cbd40], 0xffffffff
mov edx, dword [esp + 0x14]
mov dword [edi + 0x4bc400], eax
mov dword [edi + 0x4bbfa0], edx
je case.default.0x4109ad
push 1
call fcn.00402950
add esp, 4
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov dword [ebx], 2
mov edi, dword [0x4bbfc8]
add edi, edi
add edi, edi
call fcn.004753b0
mov edx, dword [esp + 0x14]
mov dword [edi + 0x4bc400], eax
mov dword [edi + 0x4bbfa0], edx
jmp case.default.0x4109ad
mov eax, dword [0x4bbfc8]
push 0x4bc82c
push 0x4bbfc8
push ebx
mov dword [esp + 0x20], eax
call fcn.0046c360
add esp, 0xc
test eax, eax
mov dword [esp + 0x28], eax
je 0x407b3f
mov ecx, dword [0x4bc864]
lea esi, [ecx + eax]
mov edx, dword [esp + 0x14]
cmp edx, dword [0x4bbfc8]
je case.default.0x4109ad
call fcn.00428720
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x14], edi
jne 0x412957
mov esi, dword [esi]
add esi, dword [0x4bc864]
jmp case.default.0x4109ad
cmp eax, 0x1000b02
ja 0x407c23
je 0x407c03
cmp eax, 0x1000801
je 0x407bec
cmp eax, 0x1000901
je case.default.0x4109ad
cmp eax, 0x1000a02
jne 0x415de4
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov dword [ebx], 0xc
mov eax, dword [esp + 0x14]
mov ecx, dword [0x4bbfc8]
mov dword [ecx*4 + 0x4bbfa0], eax
jmp case.default.0x4109ad
call fcn.004753c0
mov edx, dword [0x4bbfc8]
mov dword [edx*4 + 0x4bc840], eax
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
jne 0x40d9f8
jmp 0x41607d
cmp eax, 0x1000c03
je 0x407cef
cmp eax, 0x1000d02
je 0x407cb3
cmp eax, 0x1000e04
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [0x6cdde8], edx
mov dword [0x6cddec], eax
mov dword [0x6cddf0], ecx
jmp case.default.0x4109ad
mov edi, dword [esi]
push pe_nt_image_headers32
push 0
push 0x6c9738
mov dword [esp + 0x20], edi
add esi, 4
call fcn.00481ba0
push edi
call fcn.004022f0
add esp, 0x10
test eax, eax
je case.default.0x4109ad
push eax
push 0x6c9738
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x18]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov dword [eax*4 + 0x6c9858], edx
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [0x4bbfc8]
mov ecx, dword [eax*4 + 0x6cdd40]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov dword [ecx + eax*4], edx
jmp case.default.0x4109ad
cmp eax, 0x1001f01
ja 0x408235
je 0x408226
cmp eax, 0x1001702
ja 0x4080dd
je 0x4080ab
cmp eax, 0x1001302
ja 0x407f7b
je 0x407f19
cmp eax, 0x1001001
je 0x407e96
cmp eax, 0x1001102
je 0x407e2f
cmp eax, 0x1001201
jne 0x415de4
mov eax, dword [0x4bbfc8]
cmp eax, ebp
je case.default.0x4109ad
mov edi, 0x6cdd58
jmp 0x407df2
xor ebp, ebp
mov ecx, dword [edi]
cmp ecx, ebp
je 0x407e13
cmp dword [ecx + 0x420], eax
jb 0x407e13
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov eax, dword [0x4bbfc8]
mov dword [edi], 0
add edi, 4
cmp edi, 0x6cddd8
jl 0x407df0
shl eax, 5
push eax
call fcn.0043ac30
add esp, 4
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [ebx]
xor edi, edi
cmp dword [esp + 0x14], edi
mov dword [esp + 0x28], edx
jle case.default.0x4109ad
lea esp, [esp]
push 0x4bc82c
push 0x4bbfc8
push ebx
call fcn.0046c360
add esp, 0xc
test eax, eax
mov dword [esp + 0x18], eax
je case.default.0x4109ad
mov ecx, dword [0x4bc864]
add edi, 1
cmp edi, dword [esp + 0x14]
lea esi, [ecx + eax]
jl 0x407e60
jmp case.default.0x4109ad
mov edx, dword [0x4bbfc8]
push 0x4bc82c
lea ecx, [esp + 0x18]
mov dword [esp + 0x18], edx
mov eax, dword [ebx]
push ecx
push ebx
mov dword [esp + 0x34], eax
call fcn.0046c360
add esp, 0xc
test eax, eax
mov dword [esp + 0x18], eax
je case.default.0x4109ad
jmp 0x407ed0
mov edx, dword [0x4bc864]
lea esi, [edx + eax]
mov eax, dword [esp + 0x14]
cmp eax, dword [0x4bbfc8]
jne 0x407f05
push 0x4bc82c
lea ecx, [esp + 0x18]
push ecx
push ebx
call fcn.0046c360
add esp, 0xc
test eax, eax
mov dword [esp + 0x18], eax
jne 0x407ed0
jmp case.default.0x4109ad
call fcn.00428720
mov edx, dword [esp + 0x14]
mov dword [0x4bbfc8], edx
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
test eax, eax
je 0x4068f6
mov edx, dword [0x4bbfc8]
mov eax, dword [0x4bc82c]
sub esi, dword [0x4bc864]
mov ecx, dword [ebx]
push edx
push eax
push ecx
add esi, 4
push esi
call fcn.0046c300
add esp, 0x10
test eax, eax
je 0x4068f6
mov edx, dword [0x4bc864]
mov eax, dword [esp + 0x14]
lea esi, [edx + eax]
call fcn.00428720
add dword [0x4bbfc8], 1
mov dword [ebx], edi
jmp case.default.0x4109ad
cmp eax, 0x1001401
je 0x408034
cmp eax, 0x1001502
je 0x40800b
cmp eax, 0x1001604
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [0x6cddf8], edx
mov dword [0x6cddfc], eax
mov dword [0x6cde00], ecx
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
mov dword [0x6cddf4], eax
jmp case.default.0x4109ad
xor edi, edi
push edi
push edi
call fcn.0046cbc0
add esp, 8
call fcn.0046c290
mov dword [0x4bbfc8], edi
mov dword [ebx], edi
mov ecx, dword [0x6c77ac]
cmp ecx, edi
mov byte [0x4bc3f5], 0
mov byte [0x4bc3f4], 0
je 0x408072
push 1
call fcn.00402770
mov dword [0x6c77ac], edi
mov ecx, dword [0x6cdd58]
cmp ecx, edi
je 0x40808a
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [0x6cdd58], edi
mov ecx, dword [0x6c9734]
cmp ecx, edi
je case.default.0x4109ad
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [0x6c9734], edi
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
push edx
call fcn.00457ff0
add esp, 4
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
cmp eax, 0x1001b01
ja 0x4081dc
je 0x408157
cmp eax, 0x1001801
je 0x4081b0
cmp eax, 0x1001902
je 0x408182
cmp eax, 0x1001a04
jne 0x415de4
mov edi, dword [esi]
lea ecx, [esp + 0x18]
add esi, 4
mov dword [esp + 0x14], edi
mov eax, dword [esi]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x24]
add esi, 4
push edx
push eax
call section..text
add esp, 0x10
add esi, 4
cmp dword [esp + 0x1c], ebp
je 0x408161
push 0
push edi
call fcn.004022d0
add esp, 4
push eax
call fcn.0042de90
add esp, 8
call fcn.0042e0e0
call fcn.0042de70
jmp case.default.0x4109ad
xor eax, eax
cmp dword [esp + 0x18], eax
setne al
push eax
push edi
call fcn.004022d0
add esp, 4
push eax
call fcn.0042de90
add esp, 8
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
call fcn.004753b0
add eax, dword [esp + 0x14]
mov dword [0x4bc834], eax
jmp case.default.0x4109ad
call fcn.004753b0
cmp eax, dword [0x4bc834]
jb case.default.0x4109ad
mov edx, dword [0x4bcc70]
push 0xffffffffffffffff
push 0
push 0x202
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp case.default.0x4109ad
cmp eax, 0x1001c01
je 0x408215
cmp eax, 0x1001d01
je 0x408204
cmp eax, 0x1001e01
jne 0x415de4
mov eax, dword [0x6cddf0]
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
mov ecx, dword [0x6cddec]
mov dword [0x6c77a8], ecx
jmp case.default.0x4109ad
mov edx, dword [0x6cdde8]
mov dword [0x6c77a8], edx
jmp case.default.0x4109ad
mov eax, dword [0x6cddf4]
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
cmp eax, 0x1002701
ja 0x40838c
je 0x408382
cmp eax, 0x1002303
ja 0x4082f2
je 0x40829d
cmp eax, 0x1002001
je 0x40828e
cmp eax, 0x1002101
je 0x40827d
cmp eax, 0x1002201
jne 0x415de4
mov ecx, dword [0x6cde00]
mov dword [0x6c77a8], ecx
jmp case.default.0x4109ad
mov edx, dword [0x6cddfc]
mov dword [0x6c77a8], edx
jmp case.default.0x4109ad
mov eax, dword [0x6cddf8]
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
mov ecx, dword [esi]
add esi, 4
mov dword [esp + 0x14], ecx
mov edx, dword [esi]
add esi, 4
test dword [0x6c77b0], 0x80000000
mov dword [esp + 0x18], edx
je 0x4082c9
mov eax, dword [0x4bcc70]
push eax
call fcn.004050a0
add esp, 4
mov ecx, dword [esp + 0x18]
push ecx
call fcn.004022f0
mov edx, dword [esp + 0x18]
add esp, 4
push eax
push edx
call fcn.004022d0
add esp, 4
push eax
call fcn.0042e030
add esp, 8
jmp case.default.0x4109ad
cmp eax, 0x1002401
je 0x40835d
cmp eax, 0x1002501
je 0x408348
cmp eax, 0x1002602
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
call fcn.004753c0
mov edx, dword [0x4bbfc8]
mov ecx, dword [esp + 0x14]
add edx, ecx
sub eax, dword [edx*4 + 0x4bc840]
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
push 0x6c9738
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
test dword [0x6c77b0], 0x80000000
je 0x408378
mov edx, dword [0x4bcc70]
push edx
call fcn.004050a0
add esp, 4
call fcn.0042e0b0
jmp case.default.0x4109ad
call fcn.004288a0
jmp case.default.0x4109ad
cmp eax, 0x1003004
ja 0x408595
je 0x40849b
cmp eax, 0x1002803
je 0x408434
cmp eax, 0x1002903
je 0x4083e7
cmp eax, 0x1002a02
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
push edx
call fcn.0046cc60
add esp, 4
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
push eax
push ecx
call fcn.0046cbc0
add esp, 8
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x18]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x14], 0x1000d
jne case.default.0x4109ad
mov edx, dword [esp + 0x18]
push edx
call fcn.004022f0
add esp, 4
push eax
push 0x6c9738
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esi]
add esi, 4
mov dword [esp + 0x18], edx
mov eax, dword [esi]
add esi, 4
test eax, eax
mov dword [esp + 0x1c], eax
je case.default.0x4109ad
mov eax, dword [0x4bbfc8]
mov ecx, dword [0x4bc82c]
mov edx, dword [0x4bc838]
push eax
push ecx
mov eax, esi
sub eax, dword [0x4bc864]
push edx
push eax
call fcn.0046c300
add esp, 0x10
test eax, eax
je case.default.0x4109ad
mov ecx, dword [0x4bbfc8]
mov edx, dword [esp + 0x14]
push ecx
push edx
push 0xc8
push 0xffffffffffffffff
call fcn.0046c300
add esp, 0x10
test eax, eax
jne 0x408538
push 0x4bc82c
push 0x4bbfc8
push 0x4bc838
call fcn.0046c360
add esp, 0xc
jmp case.default.0x4109ad
mov eax, dword [0x4bc864]
mov ecx, dword [esp + 0x1c]
push pe_nt_image_headers32
push 0
push 0x6c9738
lea esi, [eax + ecx]
call fcn.00481ba0
mov edx, dword [esp + 0x24]
push edx
call fcn.004022f0
add esp, 0x10
test eax, eax
je 0x408572
push eax
push 0x6c9738
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
call fcn.004558e0
call fcn.00455930
and dword [0x6cde08], 0xffffefff
push 6
call fcn.0045cea0
add esp, 4
jmp case.default.0x4109ad
cmp eax, 0x1003101
je 0x4085d0
cmp eax, 0x1003201
jne 0x415de4
lea eax, [esp + 0x14]
push eax
push 0xc8
call fcn.0046c410
add esp, 8
test al, al
jne 0x40b245
mov dword [0x6c77a8], 0xffffffff
jmp case.default.0x4109ad
mov edx, dword [0x4bbfc8]
mov edi, 0xc8
cmp dword [0x4bc838], edi
mov dword [esp + 0x14], edx
je 0x408621
jmp 0x4085f0
lea eax, [esp + 0x18]
push eax
push 0x4bbfc8
push 0x4bc838
call fcn.0046c360
add esp, 0xc
test eax, eax
mov dword [esp + 0x28], eax
je 0x408619
cmp dword [0x4bc838], edi
jne 0x4085f0
jmp 0x408621
cmp dword [0x4bc838], edi
jne 0x40864b
push 0x4bc82c
push 0x4bbfc8
push 0x4bc838
call fcn.0046c360
mov ecx, dword [0x4bc864]
add esp, 0xc
test eax, eax
mov dword [esp + 0x28], eax
lea esi, [ecx + eax]
jne 0x408657
jmp 0x408651
mov esi, dword [0x4bc864]
mov dword [0x4bc838], ebp
mov edx, dword [esp + 0x14]
cmp edx, dword [0x4bbfc8]
je 0x408668
call fcn.00428720
push 7
call fcn.0045cea0
add esp, 4
and dword [0x6cde08], 0xffffefff
jmp case.default.0x4109ad
mov eax, dword [esi]
lea esi, [esi + eax*4 + 4]
jmp case.default.0x4109ad
cmp eax, 0x1060002
ja 0x40bd73
je 0x40bd2d
cmp eax, 0x1030806
ja 0x40a399
je 0x409f4e
cmp eax, 0x1020705
ja 0x4092e5
je 0x409280
cmp eax, 0x1020002
ja 0x408b8b
je 0x408a8e
cmp eax, 0x1010101
ja 0x4089b2
je 0x4088b6
sub eax, 0x1010005
je 0x40883b
sub eax, 1
je 0x4087bd
sub eax, 3
jne 0x415de4
mov ecx, dword [esi]
mov dword [0x6c77b8], ecx
mov edx, dword [esi + 4]
add esi, 4
mov dword [0x6c77b4], edx
mov eax, dword [esi + 4]
add esi, 4
push 0x6c77bc
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6c77c0
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6c77c4
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6c77c8
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6c77cc
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6c77d0
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
jne case.default.0x4109ad
jmp 0x41607d
mov eax, dword [esi]
mov dword [0x6c77b8], eax
mov ecx, dword [esi + 4]
add esi, 4
mov dword [0x6c77b4], ecx
mov eax, dword [esi + 4]
add esi, 4
push 0x6c77bc
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6c77c0
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6c77c4
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
xor eax, eax
mov dword [0x6c77c8], eax
mov dword [0x6c77cc], eax
mov dword [0x6c77d0], eax
jmp case.default.0x4109ad
mov edx, dword [esi]
xor edi, edi
mov dword [0x6c77b8], edx
add esi, 4
mov dword [0x6c77b4], edi
mov eax, dword [esi]
push 0x6c77bc
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6c77c0
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6c77c4
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov dword [0x6c77c8], edi
mov dword [0x6c77cc], edi
mov dword [0x6c77d0], edi
jmp case.default.0x4109ad
mov ecx, dword [0x6c9734]
cmp ecx, ebp
je 0x4088c8
mov eax, dword [ecx]
mov edx, dword [eax]
push 1
call edx
push 0x2834
call fcn.004813ee
add esp, 4
mov dword [esp + 0x30], eax
xor edi, edi
cmp eax, edi
mov dword [esp + 0x394], edi
je 0x4088f1
mov ecx, eax
call fcn.00421c00
mov edx, eax
jmp 0x4088f3
xor edx, edx
mov eax, dword [0x6c77b8]
push eax
mov dword [esp + 0x398], 0xffffffff
mov dword [0x6c9734], edx
mov dword [esp + 0xa0], edi
mov dword [esp + 0xa4], edi
call fcn.004022d0
mov ecx, dword [0x6c77b4]
push ecx
mov dword [esp + 0xb0], eax
call fcn.004022d0
mov ecx, dword [0x6c77c0]
mov dword [esp + 0xac], eax
mov eax, dword [0x6c77bc]
mov dword [esp + 0xb8], ecx
mov ecx, dword [0x6c77c8]
mov dword [esp + 0xb4], eax
mov eax, dword [0x6c77c4]
push ecx
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], edi
call fcn.004022d0
mov dword [esp + 0xc8], eax
mov eax, dword [0x6c77cc]
push eax
call fcn.004022d0
mov ecx, dword [0x6c77d0]
push ecx
mov dword [esp + 0xd4], eax
call fcn.004022d0
mov dword [esp + 0xd8], eax
add esp, 0x14
lea eax, [esp + 0x9c]
push eax
mov ecx, edx
call fcn.00421ce0
jmp case.default.0x4109ad
cmp eax, 0x1010203
je 0x408a4f
cmp eax, 0x1010301
je 0x408a02
cmp eax, 0x1010401
jne 0x415de4
mov ecx, dword [0x6c9734]
cmp ecx, ebp
je 0x4089e7
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [0x6c9734], edi
cmp dword [ebx], 0xb
jne 0x4089ee
mov dword [ebx], edi
call fcn.004560a0
and dword [0x6cde08], 0xffffefff
jmp case.default.0x4109ad
cmp dword [0x6c9734], ebp
je case.default.0x4109ad
test dword [0x6c984c], 0x200
push 0
je 0x408a20
push 8
jmp 0x408a22
push 7
call fcn.00402a70
mov ecx, dword [0x6c9734]
add esp, 8
call fcn.00421f90
mov dword [ebx], 0xb
call fcn.004558e0
and dword [0x6cde08], 0xffffefff
jmp case.default.0x4109ad
mov eax, dword [esi]
mov edi, dword [0x6c9734]
add esi, 4
mov dword [esp + 0x14], eax
mov edx, dword [esi]
add esi, 4
test edi, edi
mov dword [esp + 0x18], edx
je case.default.0x4109ad
push eax
call fcn.004022f0
add esp, 4
test eax, eax
je case.default.0x4109ad
push edx
push eax
mov ecx, edi
call fcn.00425150
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
cmp eax, 0x20
jb 0x408b1d
xor edi, edi
lea ebp, [edi + 1]
or ebx, 0xffffffff
lea ebx, [ebx]
mov ecx, dword [edi*4 + 0x6cdd58]
test ecx, ecx
je 0x408b11
mov edx, dword [ecx]
mov eax, dword [edx]
push ebp
call eax
push 0x444
call fcn.004813ee
add esp, 4
mov dword [esp + 0x30], eax
test eax, eax
mov dword [esp + 0x394], ebp
je 0x408b01
mov ecx, dword [0x4bbfc8]
push 0
push ecx
push edi
mov ecx, eax
call fcn.00422330
jmp 0x408b03
xor eax, eax
mov dword [esp + 0x394], ebx
mov dword [edi*4 + 0x6cdd58], eax
add edi, ebp
cmp edi, 0x20
jl 0x408ac0
jmp case.default.0x4109ad
mov ecx, dword [eax*4 + 0x6cdd58]
test ecx, ecx
je case.default.0x4109ad
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
push 0x444
call fcn.004813ee
add esp, 4
mov dword [esp + 0x30], eax
test eax, eax
mov dword [esp + 0x394], 2
je 0x408b79
mov ecx, dword [0x4bbfc8]
mov edx, dword [esp + 0x14]
push 0
push ecx
push edx
mov ecx, eax
call fcn.00422330
mov ecx, dword [esp + 0x14]
mov dword [ecx*4 + 0x6cdd58], eax
jmp case.default.0x4109ad
mov ecx, dword [esp + 0x14]
xor eax, eax
mov dword [ecx*4 + 0x6cdd58], eax
jmp case.default.0x4109ad
cmp eax, 0x1020304
ja 0x4090fb
je 0x409035
sub eax, 0x1020109
je 0x408ecc
sub eax, 1
je 0x408cca
sub eax, 0xf9
jne 0x415de4
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x18]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
cmp eax, 0x20
jb 0x408c52
mov ecx, dword [0x6cdd58]
test ecx, ecx
je 0x408c25
mov edx, dword [ecx]
mov eax, dword [esp + 0x18]
mov edx, dword [edx + 8]
push eax
call edx
mov dword [ebx], 0xf
call fcn.004558e0
and dword [0x6cde08], 0xffffefff
mov edi, 0x6cdd5c
lea ebx, [ebx]
mov ecx, dword [edi]
test ecx, ecx
je 0x408c42
mov eax, dword [ecx]
mov edx, dword [esp + 0x18]
mov eax, dword [eax + 8]
push edx
call eax
add edi, 4
cmp edi, 0x6cddd8
jl 0x408c30
jmp case.default.0x4109ad
test eax, eax
je 0x408c76
mov ecx, dword [eax*4 + 0x6cdd58]
test ecx, ecx
je case.default.0x4109ad
mov edx, dword [ecx]
mov eax, dword [esp + 0x18]
mov edx, dword [edx + 8]
push eax
call edx
jmp case.default.0x4109ad
cmp dword [0x6cdd58], edi
je case.default.0x4109ad
test dword [0x6c984c], 0x200
push 0
je 0x408c94
push 8
jmp 0x408c96
push 7
call fcn.00402a70
mov ecx, dword [0x6cdd58]
mov eax, dword [ecx]
mov edx, dword [esp + 0x20]
mov eax, dword [eax + 8]
add esp, 8
push edx
call eax
call fcn.004558e0
mov dword [ebx], 0xf
and dword [0x6cde08], 0xffffefff
jmp case.default.0x4109ad
xor eax, eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov eax, dword [esi]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x60]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x64]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x68]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x6c]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x70]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push eax
call fcn.004022d0
add esi, 4
mov dword [esp + 0x5c], eax
mov edx, dword [esi]
mov eax, dword [esp + 0x18]
add esp, 4
add esi, 4
cmp eax, 0x20
mov dword [esp + 0x74], edx
mov dword [esp + 0x54], edi
jb 0x408dfe
mov eax, 1
mov edi, edi
cmp dword [eax*4 + 0x6cdd58], edi
je 0x408df1
add eax, 1
cmp eax, 0x20
jl 0x408de0
cmp eax, 0x20
je case.default.0x4109ad
mov dword [esp + 0x14], eax
cmp dword [eax*4 + 0x6cdd58], edi
lea ecx, [eax*4 + 0x6cdd58]
jne 0x408e5f
push 0x444
call fcn.004813ee
add esp, 4
mov dword [esp + 0x30], eax
test eax, eax
mov dword [esp + 0x394], 3
je 0x408e45
mov ecx, dword [0x4bbfc8]
mov edx, dword [esp + 0x14]
push 0
push ecx
push edx
mov ecx, eax
call fcn.00422330
jmp 0x408e47
xor eax, eax
mov ecx, dword [esp + 0x14]
lea ecx, [ecx*4 + 0x6cdd58]
mov dword [esp + 0x394], 0xffffffff
mov dword [ecx], eax
mov ecx, dword [ecx]
test ecx, ecx
je case.default.0x4109ad
mov eax, dword [ecx]
mov eax, dword [eax + 4]
lea edx, [esp + 0x54]
push edx
mov edx, dword [esp + 0x1c]
push edx
call eax
cmp dword [0x4bbfc8], 0
mov dword [esp + 0x28], eax
jne case.default.0x4109ad
mov ecx, dword [esp + 0x34]
test byte [ecx], 1
je case.default.0x4109ad
cmp dword [0x6cb7a4], 0
je case.default.0x4109ad
mov edx, dword [esp + 0x14]
mov ecx, dword [edx*4 + 0x6cdd58]
push eax
call fcn.00422fd0
test eax, eax
je case.default.0x4109ad
push eax
call fcn.00404340
add esp, 4
jmp case.default.0x4109ad
xor eax, eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov eax, dword [esi]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x60]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x64]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x68]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x6c]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push eax
call fcn.004022d0
add esi, 4
mov dword [esp + 0x5c], eax
mov eax, dword [esi]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x18]
add esp, 4
add esi, 4
cmp eax, 0x20
mov dword [esp + 0x54], edi
jb 0x408fe3
mov eax, 1
cmp dword [eax*4 + 0x6cdd58], edi
je 0x408fd6
add eax, 1
cmp eax, 0x20
jl 0x408fc5
cmp eax, 0x20
je case.default.0x4109ad
mov dword [esp + 0x14], eax
cmp dword [eax*4 + 0x6cdd58], edi
lea ecx, [eax*4 + 0x6cdd58]
jne 0x408e5f
push 0x444
call fcn.004813ee
add esp, 4
mov dword [esp + 0x30], eax
test eax, eax
mov dword [esp + 0x394], 4
je 0x408e45
mov ecx, dword [0x4bbfc8]
mov edx, dword [esp + 0x14]
push 0
push ecx
push edx
mov ecx, eax
call fcn.00422330
jmp 0x408e47
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
cmp eax, 0x20
jae case.default.0x4109ad
mov ecx, dword [eax*4 + 0x6cdd58]
test ecx, ecx
je case.default.0x4109ad
mov eax, dword [esp + 0x1c]
sub eax, 0
je 0x4090ec
sub eax, 1
je 0x4090dd
sub eax, 1
jne case.default.0x4109ad
mov edx, dword [esp + 0x18]
push edx
call fcn.00422a60
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx*4 + 0x6cdd58]
push eax
call fcn.00425620
jmp case.default.0x4109ad
mov edx, dword [esp + 0x18]
push edx
call fcn.00422a60
jmp case.default.0x4109ad
mov eax, dword [esp + 0x18]
push eax
call fcn.00422a90
jmp case.default.0x4109ad
cmp eax, 0x1020402
je 0x409217
cmp eax, 0x1020502
je 0x4091da
cmp eax, 0x1020603
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esi]
mov eax, dword [esp + 0x14]
add esi, 4
cmp eax, 0x20
mov dword [esp + 0x18], edx
jb 0x409170
mov edi, 0x6cdd58
mov edi, edi
mov ecx, dword [edi]
test ecx, ecx
je 0x409160
mov eax, dword [ecx]
mov edx, dword [eax]
push 1
call edx
mov dword [edi], ebp
add edi, 4
cmp edi, 0x6cddd8
jl 0x409150
jmp case.default.0x4109ad
mov ecx, dword [eax*4 + 0x6cdd58]
test ecx, ecx
je 0x409183
mov eax, dword [ecx]
mov edx, dword [eax]
push 1
call edx
push 0x444
call fcn.004813ee
mov edx, eax
add esp, 4
mov dword [esp + 0x30], edx
test edx, edx
mov dword [esp + 0x394], 6
je 0x408b79
mov eax, dword [esp + 0x18]
push eax
call fcn.004022d0
mov ecx, dword [0x4bbfc8]
add esp, 4
push eax
mov eax, dword [esp + 0x18]
push ecx
push eax
mov ecx, edx
call fcn.00422330
mov ecx, dword [esp + 0x14]
mov dword [ecx*4 + 0x6cdd58], eax
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
mov ecx, dword [eax*4 + 0x6cdd58]
test ecx, ecx
je 0x40b287
call fcn.00422d50
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
cmp eax, 0x20
jb 0x40925b
mov edi, 0x6cdd58
mov ecx, dword [edi]
test ecx, ecx
je 0x40924b
call fcn.00422f10
add edi, 4
cmp edi, 0x6cddd8
jl 0x409240
jmp case.default.0x4109ad
mov ecx, dword [eax*4 + 0x6cdd58]
test ecx, ecx
je case.default.0x4109ad
call fcn.00422f10
cmp dword [esp + 0x14], edi
jne case.default.0x4109ad
mov dword [ebx], edi
jmp case.default.0x4109ad
xor eax, eax
lea edx, [esp + 0x14]
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov eax, dword [esi]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x18]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
jne 0x409436
jmp 0x41607d
cmp eax, 0x1030002
ja 0x409871
je 0x409839
cmp eax, 0x1020a05
ja 0x40954f
je 0x4094ae
cmp eax, 0x1020706
je 0x4093bb
cmp eax, 0x1020802
je 0x409385
cmp eax, 0x1020903
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
cmp eax, 0x20
jae case.default.0x4109ad
mov ecx, dword [eax*4 + 0x6cdd58]
test ecx, ecx
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
push eax
call fcn.00422590
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
xor edx, edx
cmp dword [eax*4 + 0x6cdd58], edx
setne dl
mov dword [0x6c77a8], edx
jmp case.default.0x4109ad
xor eax, eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov eax, dword [esi]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x70]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push eax
call fcn.004022d0
add esi, 4
mov dword [esp + 0x5c], eax
mov edx, dword [esi]
mov eax, dword [esp + 0x18]
add esp, 4
add esi, 4
cmp eax, 0x20
mov dword [esp + 0x74], edx
mov dword [esp + 0x54], 1
jae case.default.0x4109ad
mov ecx, dword [eax*4 + 0x6cdd58]
test ecx, ecx
je case.default.0x4109ad
mov eax, dword [ecx]
mov eax, dword [eax + 4]
lea edx, [esp + 0x54]
push edx
mov edx, dword [esp + 0x1c]
push edx
call eax
cmp dword [0x4bbfc8], edi
mov dword [esp + 0x28], eax
jne case.default.0x4109ad
mov ecx, dword [esp + 0x34]
test byte [ecx], 1
je case.default.0x4109ad
cmp dword [0x6cb7a4], edi
jmp 0x408e9f
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x20]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
cmp eax, 0x20
jae case.default.0x4109ad
mov ecx, dword [eax*4 + 0x6cdd58]
test ecx, ecx
je case.default.0x4109ad
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push eax
mov eax, dword [esp + 0x1c]
push edx
push eax
call fcn.00422740
jmp case.default.0x4109ad
cmp eax, 0x1020b04
je 0x4097a5
cmp eax, 0x1020c03
je 0x409711
cmp eax, 0x1020d0b
jne 0x415de4
xor eax, eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov eax, dword [esi]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x60]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x64]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x68]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x6c]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push eax
call fcn.004022d0
add esi, 4
mov dword [esp + 0x5c], eax
mov eax, dword [esi]
add esi, 4
mov dword [esp + 0x78], eax
mov ecx, dword [esi]
mov eax, dword [esp + 0x18]
add esp, 4
add esi, 8
cmp eax, 0x20
mov dword [esp + 0x78], ecx
mov dword [esp + 0x54], edi
jb 0x409690
mov eax, 1
cmp dword [eax*4 + 0x6cdd58], edi
je 0x409683
add eax, 1
cmp eax, 0x20
jl 0x409672
cmp eax, 0x20
je case.default.0x4109ad
mov dword [esp + 0x14], eax
cmp dword [eax*4 + 0x6cdd58], edi
lea ecx, [eax*4 + 0x6cdd58]
jne 0x4096f1
push 0x444
call fcn.004813ee
add esp, 4
mov dword [esp + 0x30], eax
test eax, eax
mov dword [esp + 0x394], 5
je 0x4096d7
mov edx, dword [0x4bbfc8]
mov ecx, dword [esp + 0x14]
push 0
push edx
push ecx
mov ecx, eax
call fcn.00422330
jmp 0x4096d9
xor eax, eax
mov ecx, dword [esp + 0x14]
lea ecx, [ecx*4 + 0x6cdd58]
mov dword [esp + 0x394], 0xffffffff
mov dword [ecx], eax
mov ecx, dword [ecx]
test ecx, ecx
je case.default.0x4109ad
mov edx, dword [ecx]
mov edx, dword [edx + 4]
lea eax, [esp + 0x54]
push eax
mov eax, dword [esp + 0x1c]
push eax
call edx
jmp 0x408e7a
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
cmp eax, 0x20
jae case.default.0x4109ad
mov ecx, dword [eax*4 + 0x6cdd58]
test ecx, ecx
je case.default.0x4109ad
cmp dword [0x4bc85c], edi
je case.default.0x4109ad
lea eax, [esp + 0x20]
push eax
mov eax, dword [esp + 0x1c]
lea edx, [esp + 0x20]
push edx
push eax
call fcn.00422fe0
test al, al
je case.default.0x4109ad
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push ecx
mov ecx, dword [0x4bc85c]
push edx
call fcn.00427c60
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
cmp eax, 0x20
jae case.default.0x4109ad
mov ecx, dword [eax*4 + 0x6cdd58]
test ecx, ecx
je case.default.0x4109ad
mov edx, dword [esp + 0x18]
push edx
call fcn.00422fd0
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x1c]
push 1
push ecx
push eax
call fcn.004325a0
add esp, 0xc
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
push eax
call fcn.0046b7a0
add esp, 4
neg eax
sbb eax, eax
neg eax
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
cmp eax, 0x1030405
ja 0x409a05
je 0x40992b
cmp eax, 0x1030102
je 0x4098dc
cmp eax, 0x1030202
je 0x4098aa
cmp eax, 0x1030301
jne 0x415de4
call fcn.0046b980
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
push edx
call fcn.0046b900
add esp, 4
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
push edx
call fcn.004064e0
add esp, 4
test eax, eax
je 0x40b287
mov eax, dword [0x6c9844]
push eax
call fcn.00402320
add esp, 4
mov esi, eax
mov dword [0x6c77a8], 1
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x20]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov ecx, dword [0x4bbfc8]
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
push 0
push eax
shl ecx, 5
add ecx, 0x1a
push ecx
push 0xffffffffffffffff
push 0
push edx
call fcn.0046b700
add esp, 8
push eax
call fcn.0043bed0
add esp, 0x14
test eax, eax
mov dword [0x6c77a8], eax
je case.default.0x4109ad
push eax
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
fild dword [esp + 0x20]
push 0
sub esp, 8
fstp dword [esp + 4]
fild dword [esp + 0x28]
fstp dword [esp]
push eax
call fcn.00436ac0
add esp, 0x10
jmp case.default.0x4109ad
cmp eax, 0x1030505
je 0x409e78
cmp eax, 0x1030606
je 0x409c9c
cmp eax, 0x1030706
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x20]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x2c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x18]
push edx
call fcn.0046e6d0
mov edi, eax
add esp, 4
test edi, edi
je case.default.0x4109ad
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
push edi
call fcn.0046e910
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x50]
push edx
push eax
call fcn.0046be50
add esp, 0x14
test eax, eax
je case.default.0x4109ad
mov eax, dword [esp + 0x2c]
cmp eax, 0xc
ja case.default.0x4109ad
movzx ecx, byte [eax + 0x41610c]
jmp dword [ecx*4 + 0x4160f0]
movzx edx, word [esp + 0x44]
push 1
push 4
push edx
push edi
call fcn.00472840
mov eax, dword [0x4b4074]
push eax
push edi
call fcn.00471370
movzx ecx, word [esp + 0x5e]
push 1
push 2
push ecx
push edi
call fcn.00472840
mov edx, dword [0x4b4074]
add edx, 4
push edx
push edi
call fcn.00471370
movzx eax, word [esp + 0x7a]
push 1
push 2
push eax
push edi
call fcn.00472840
mov ecx, dword [0x4b4074]
add esp, 0x40
add ecx, 8
push ecx
push edi
call fcn.00471370
add esp, 8
jmp case.default.0x4109ad
movzx eax, word [esp + 0x44]
xor edx, edx
mov ecx, 0x64
div ecx
push 1
push 2
push edx
push edi
call fcn.00472840
mov edx, dword [0x4b4074]
push edx
push edi
call fcn.00471370
add esp, 0x18
movzx eax, word [esp + 0x46]
push 1
push 2
push eax
push edi
call fcn.00472840
mov ecx, dword [0x4b4074]
add ecx, 4
push ecx
push edi
call fcn.00471370
movzx edx, word [esp + 0x62]
push 1
push 2
push edx
push edi
call fcn.00472840
mov eax, dword [0x4b4074]
add eax, 8
push eax
push edi
call fcn.00471370
add esp, 0x30
jmp case.default.0x4109ad
movzx ecx, word [esp + 0x44]
push 1
push 4
push ecx
push edi
call fcn.00472840
mov edx, dword [0x4b4074]
add edx, 0x12
push edx
push edi
call fcn.00471370
movzx eax, word [esp + 0x5e]
push 1
push 2
push eax
push edi
call fcn.00472840
mov ecx, dword [0x4b4074]
add ecx, 0x12
push ecx
push edi
call fcn.00471370
movzx edx, word [esp + 0x7a]
push 1
push 2
push edx
push edi
call fcn.00472840
add esp, 0x40
jmp case.default.0x4109ad
movzx eax, word [esp + 0x44]
xor edx, edx
mov ecx, 0x64
div ecx
push 1
push 2
push edx
push edi
call fcn.00472840
mov edx, dword [0x4b4074]
add edx, 0x12
push edx
push edi
call fcn.00471370
add esp, 0x18
movzx eax, word [esp + 0x46]
push 1
push 2
push eax
push edi
call fcn.00472840
mov ecx, dword [0x4b4074]
add ecx, 0x12
push ecx
push edi
call fcn.00471370
movzx edx, word [esp + 0x62]
push 1
push 2
push edx
push edi
call fcn.00472840
add esp, 0x28
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x20]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x2c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x18]
push edx
call fcn.0046e6d0
mov edi, eax
add esp, 4
test edi, edi
je case.default.0x4109ad
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
push edi
call fcn.0046e910
push 0x20
call fcn.004812ca
mov ebp, eax
add esp, 0x10
test ebp, ebp
je case.default.0x4109ad
mov edx, dword [esp + 0x14]
push 2
push ebp
push edx
call fcn.0046bf10
add esp, 0xc
test eax, eax
je case.0x409d83.4
mov eax, dword [esp + 0x2c]
cmp eax, 0xc
ja case.0x409d83.4
jmp dword [eax*4 + 0x41611c]
mov eax, dword [ebp]
push 1
push eax
push edi
call fcn.00472820
mov ecx, dword [0x4b4074]
push ecx
push edi
call fcn.00471370
add esp, 0x14
mov edx, dword [ebp + 4]
push 1
push edx
push edi
call fcn.00472820
mov eax, dword [0x4b4074]
add eax, 4
push eax
push edi
call fcn.00471370
add esp, 0x14
mov ecx, dword [ebp + 8]
push 1
push ecx
push edi
call fcn.00472820
mov edx, dword [0x4b4074]
add edx, 8
push edx
push edi
call fcn.00471370
add esp, 0x14
push ebp
call fcn.0048134d
add esp, 4
jmp case.default.0x4109ad
mov eax, dword [ebp + 8]
push 1
push eax
push edi
call fcn.00472820
mov ecx, dword [0x4b4074]
add ecx, 0xc
push ecx
push edi
call fcn.00471370
add esp, 0x14
push ebp
call fcn.0048134d
add esp, 4
jmp case.default.0x4109ad
mov edx, dword [ebp]
push 1
push edx
push edi
call fcn.00472820
mov eax, dword [0x4b4074]
add eax, 0x12
push eax
push edi
call fcn.00471370
add esp, 0x14
mov ecx, dword [ebp + 4]
push 1
push ecx
push edi
call fcn.00472820
mov edx, dword [0x4b4074]
add edx, 0x12
push edx
push edi
call fcn.00471370
add esp, 0x14
mov eax, dword [ebp + 8]
push 1
push eax
push edi
call fcn.00472820
add esp, 0xc
push ebp
call fcn.0048134d
add esp, 4
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x20]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x18]
push eax
call fcn.0046e6d0
mov ebp, eax
add esp, 4
test ebp, ebp
je case.default.0x4109ad
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push ecx
push edx
push ebp
call fcn.0046e910
push pe_nt_image_headers32
call fcn.004812ca
mov edi, eax
add esp, 0x10
test edi, edi
je case.default.0x4109ad
mov eax, dword [esp + 0x14]
push 1
push edi
push eax
call fcn.0046bf10
add esp, 0xc
test eax, eax
je 0x409f40
push edi
push ebp
call fcn.00471370
add esp, 8
push edi
call fcn.0048134d
add esp, 4
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x20]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x2c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x18]
push edx
call fcn.0046e6d0
mov edi, eax
add esp, 4
test edi, edi
je case.default.0x4109ad
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
push edi
call fcn.0046e910
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x50]
push edx
push eax
call fcn.0046be50
add esp, 0x14
test eax, eax
je case.default.0x4109ad
mov eax, dword [esp + 0x2c]
cmp eax, 0x1f
ja case.default.0x4109ad
movzx ecx, byte [eax + 0x416174]
jmp dword [ecx*4 + 0x416150]
movzx edx, word [esp + 0x4c]
push 1
push 2
push edx
push edi
call fcn.00472840
mov eax, dword [0x4b4074]
add eax, 0x1a
push eax
push edi
call fcn.00471370
movzx ecx, word [esp + 0x66]
push 1
push 2
push ecx
push edi
call fcn.00472840
mov edx, dword [0x4b4074]
add edx, 0x1e
push edx
push edi
call fcn.00471370
movzx eax, word [esp + 0x80]
push 1
push 2
push eax
push edi
call fcn.00472840
mov ecx, dword [0x4b4074]
add esp, 0x40
add ecx, 0x22
push ecx
push edi
call fcn.00471370
add esp, 8
jmp case.default.0x4109ad
movzx edx, word [esp + 0x4c]
push 1
push 2
push edx
push edi
call fcn.00472840
mov eax, dword [0x4b4074]
add eax, 0x1a
push eax
push edi
call fcn.00471370
movzx ecx, word [esp + 0x66]
push 1
push 2
push ecx
push edi
call fcn.00472840
mov edx, dword [0x4b4074]
add edx, 0x1e
push edx
push edi
call fcn.00471370
add esp, 0x30
jmp case.default.0x4109ad
cmp word [esp + 0x4c], 0xb
jbe 0x40a10b
mov eax, dword [0x4b4074]
add eax, 0x2c
push eax
push edi
call fcn.00471370
movzx ecx, word [esp + 0x54]
push 1
push 2
sub ecx, 0xc
push ecx
jmp 0x40a125
mov edx, dword [0x4b4074]
add edx, 0x26
push edx
push edi
call fcn.00471370
movzx eax, word [esp + 0x54]
push 1
push 2
push eax
push edi
call fcn.00472840
mov ecx, dword [0x4b4074]
add esp, 0x18
add ecx, 0x1a
push ecx
push edi
call fcn.00471370
movzx edx, word [esp + 0x56]
push 1
push 2
push edx
push edi
call fcn.00472840
mov eax, dword [0x4b4074]
add eax, 0x1e
push eax
push edi
call fcn.00471370
movzx ecx, word [esp + 0x70]
push 1
push 2
push ecx
push edi
call fcn.00472840
mov edx, dword [0x4b4074]
add edx, 0x22
push edx
push edi
call fcn.00471370
add esp, 0x38
jmp case.default.0x4109ad
cmp word [esp + 0x4c], 0xb
jbe 0x40a1ab
mov eax, dword [0x4b4074]
add eax, 0x2c
push eax
push edi
call fcn.00471370
movzx ecx, word [esp + 0x54]
push 1
push 2
sub ecx, 0xc
push ecx
jmp 0x40a1c5
mov edx, dword [0x4b4074]
add edx, 0x26
push edx
push edi
call fcn.00471370
movzx eax, word [esp + 0x54]
push 1
push 2
push eax
push edi
call fcn.00472840
mov ecx, dword [0x4b4074]
add esp, 0x18
add ecx, 0x1a
push ecx
push edi
call fcn.00471370
movzx edx, word [esp + 0x56]
push 1
push 2
push edx
push edi
call fcn.00472840
mov eax, dword [0x4b4074]
add eax, 0x1e
push eax
push edi
call fcn.00471370
add esp, 0x20
jmp case.default.0x4109ad
movzx ecx, word [esp + 0x4c]
push 1
push 2
push ecx
push edi
call fcn.00472840
mov edx, dword [0x4b4074]
add edx, 0x16
push edx
push edi
call fcn.00471370
movzx eax, word [esp + 0x66]
push 1
push 2
push eax
push edi
call fcn.00472840
mov ecx, dword [0x4b4074]
add ecx, 0x16
push ecx
push edi
call fcn.00471370
movzx edx, word [esp + 0x80]
push 1
push 2
push edx
push edi
call fcn.00472840
add esp, 0x40
jmp case.default.0x4109ad
movzx eax, word [esp + 0x4c]
push 1
push 2
push eax
push edi
call fcn.00472840
mov ecx, dword [0x4b4074]
add ecx, 0x16
push ecx
push edi
call fcn.00471370
movzx edx, word [esp + 0x66]
push 1
push 2
push edx
push edi
call fcn.00472840
add esp, 0x28
jmp case.default.0x4109ad
cmp word [esp + 0x4c], 0xb
jbe 0x40a2be
mov eax, dword [0x4b4074]
add eax, 0x38
push eax
push edi
call fcn.00471370
movzx ecx, word [esp + 0x54]
push 1
push 2
sub ecx, 0xc
push ecx
jmp 0x40a2d8
mov edx, dword [0x4b4074]
add edx, 0x32
push edx
push edi
call fcn.00471370
movzx eax, word [esp + 0x54]
push 1
push 2
push eax
push edi
call fcn.00472840
mov ecx, dword [0x4b4074]
add esp, 0x18
add ecx, 0x16
push ecx
push edi
call fcn.00471370
movzx edx, word [esp + 0x56]
push 1
push 2
push edx
push edi
call fcn.00472840
mov eax, dword [0x4b4074]
add eax, 0x16
push eax
push edi
call fcn.00471370
movzx ecx, word [esp + 0x70]
push 1
push 2
push ecx
push edi
call fcn.00472840
add esp, 0x30
jmp case.default.0x4109ad
cmp word [esp + 0x4c], 0xb
jbe 0x40a34f
mov edx, dword [0x4b4074]
add edx, 0x38
push edx
push edi
call fcn.00471370
movzx eax, word [esp + 0x54]
push 1
push 2
sub eax, 0xc
push eax
jmp 0x40a369
mov ecx, dword [0x4b4074]
add ecx, 0x32
push ecx
push edi
call fcn.00471370
movzx edx, word [esp + 0x54]
push 1
push 2
push edx
push edi
call fcn.00472840
mov eax, dword [0x4b4074]
add esp, 0x18
add eax, 0x16
push eax
push edi
call fcn.00471370
movzx ecx, word [esp + 0x56]
push 1
push 2
push ecx
push edi
call fcn.00472840
add esp, 0x18
jmp case.default.0x4109ad
cmp eax, 0x1040107
ja 0x40b483
je 0x40b2e4
cmp eax, 0x1031001
ja 0x40af56
je 0x40af4c
cmp eax, 0x1030c06
ja 0x40acf6
je 0x40a656
cmp eax, 0x1030903
je 0x40a61b
cmp eax, 0x1030a02
je 0x40a5ea
cmp eax, 0x1030b06
jne 0x415de4
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x18]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x1c]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x20]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x2c]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x18]
push eax
call fcn.0046e6d0
mov edi, eax
add esp, 4
test edi, edi
je case.default.0x4109ad
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push ecx
push edx
push edi
call fcn.0046e910
push 0x20
call fcn.004812ca
mov ebp, eax
add esp, 0x10
test ebp, ebp
je case.default.0x4109ad
mov eax, dword [esp + 0x14]
push 2
push ebp
push eax
call fcn.0046bf10
add esp, 0xc
test eax, eax
je case.default.0x4109ad
mov eax, dword [esp + 0x2c]
sub eax, 0
je 0x40a564
sub eax, 1
jne 0x40a5dc
mov eax, dword [ebp + 0xc]
cmp eax, 6
ja case.default.0x40a4e5
jmp dword [eax*4 + 0x416194]
mov ecx, dword [0x4b4074]
add ecx, 8
jmp 0x40a539
mov edx, dword [0x4b4074]
add edx, 4
push edx
jmp 0x40a53a
mov eax, dword [0x4b4074]
add eax, 0x3e
push eax
jmp 0x40a53a
mov ecx, dword [0x4b4074]
add ecx, 0x42
jmp 0x40a539
mov edx, dword [0x4b4074]
add edx, 0x46
push edx
jmp 0x40a53a
mov eax, dword [0x4b4074]
add eax, 0x4a
push eax
jmp 0x40a53a
mov ecx, dword [0x4b4074]
add ecx, 0x4e
push ecx
push edi
call fcn.00471370
add esp, 8
mov edx, dword [0x4b4074]
add edx, 0x52
push edx
push edi
call fcn.00471370
add esp, 8
push ebp
call fcn.0048134d
add esp, 4
jmp case.default.0x4109ad
mov eax, dword [ebp + 0xc]
cmp eax, 6
ja case.default.0x40a56c
jmp dword [eax*4 + 0x4161b0]
mov eax, dword [0x4b4074]
add eax, 8
jmp 0x40a5bf
mov ecx, dword [0x4b4074]
add ecx, 4
push ecx
jmp 0x40a5c0
mov edx, dword [0x4b4074]
add edx, 0x3e
push edx
jmp 0x40a5c0
mov eax, dword [0x4b4074]
add eax, 0x42
jmp 0x40a5bf
mov ecx, dword [0x4b4074]
add ecx, 0x46
push ecx
jmp 0x40a5c0
mov edx, dword [0x4b4074]
add edx, 0x4a
push edx
jmp 0x40a5c0
mov eax, dword [0x4b4074]
add eax, 0x4e
push eax
push edi
call fcn.00471370
add esp, 8
mov ecx, dword [0x4b4074]
add ecx, 0x52
push ecx
push edi
call fcn.00471370
add esp, 8
push ebp
call fcn.0048134d
add esp, 4
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
push 3
push 0
push eax
call fcn.0046bf10
add esp, 0xc
jmp case.default.0x4109ad
mov eax, dword [esi]
push 0x6cdd38
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cdd3c
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
jne case.default.0x4109ad
jmp 0x41607d
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x20]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x2c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x18]
push edx
call fcn.0046e6d0
mov edi, eax
add esp, 4
test edi, edi
je case.default.0x4109ad
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
push edi
call fcn.0046e910
push 0x20
call fcn.004812ca
mov ebp, eax
add esp, 0x10
test ebp, ebp
je case.default.0x4109ad
mov edx, dword [esp + 0x14]
push 2
push ebp
push edx
call fcn.0046bf10
add esp, 0xc
test eax, eax
je case.default.0x4109ad
mov eax, dword [esp + 0x2c]
cmp eax, 0x28
ja case.0x40a744.3
movzx eax, byte [eax + 0x41620c]
jmp dword [eax*4 + 0x4161cc]
mov ecx, dword [ebp + 0x10]
push 1
push 2
push ecx
push edi
call fcn.00472840
mov edx, dword [0x4b4074]
add edx, 0x1a
push edx
push edi
call fcn.00471370
mov eax, dword [ebp + 0x14]
push 1
push 2
push eax
push edi
call fcn.00472840
mov ecx, dword [0x4b4074]
add ecx, 0x1e
push ecx
push edi
call fcn.00471370
mov edx, dword [ebp + 0x18]
push 1
push 2
push edx
push edi
call fcn.00472840
mov eax, dword [0x4b4074]
add esp, 0x40
add eax, 0x22
jmp 0x40acde
mov ecx, dword [ebp + 0x10]
push 1
push 2
push ecx
push edi
call fcn.00472840
mov edx, dword [0x4b4074]
add edx, 0x1a
push edx
push edi
call fcn.00471370
mov eax, dword [ebp + 0x14]
push 1
push 2
push eax
push edi
call fcn.00472840
mov ecx, dword [0x4b4074]
add ecx, 0x1e
push ecx
push edi
call fcn.00471370
add esp, 0x30
push ebp
call fcn.0048134d
add esp, 4
jmp case.default.0x4109ad
mov edx, dword [ebp + 0x10]
push 1
push 2
push edx
push edi
call fcn.00472840
mov eax, dword [0x4b4074]
add eax, 0x1a
push eax
push edi
call fcn.00471370
add esp, 0x18
push ebp
call fcn.0048134d
add esp, 4
jmp case.default.0x4109ad
cmp dword [ebp + 0x10], 0xb
jbe 0x40a843
mov ecx, dword [0x4b4074]
add ecx, 0x2c
push ecx
push edi
call fcn.00471370
mov edx, dword [ebp + 0x10]
push 1
push 2
sub edx, 0xc
push edx
jmp 0x40a85a
mov eax, dword [0x4b4074]
add eax, 0x26
push eax
push edi
call fcn.00471370
mov ecx, dword [ebp + 0x10]
push 1
push 2
push ecx
push edi
call fcn.00472840
mov edx, dword [0x4b4074]
add esp, 0x18
add edx, 0x1a
push edx
push edi
call fcn.00471370
mov eax, dword [ebp + 0x14]
push 1
push 2
push eax
push edi
call fcn.00472840
mov ecx, dword [0x4b4074]
add ecx, 0x1e
push ecx
push edi
call fcn.00471370
mov edx, dword [ebp + 0x18]
push 1
push 2
push edx
push edi
call fcn.00472840
mov eax, dword [0x4b4074]
add eax, 0x22
push eax
push edi
call fcn.00471370
add esp, 0x38
push ebp
call fcn.0048134d
add esp, 4
jmp case.default.0x4109ad
cmp dword [ebp + 0x10], 0xb
jbe 0x40a8e2
mov ecx, dword [0x4b4074]
add ecx, 0x2c
push ecx
push edi
call fcn.00471370
mov edx, dword [ebp + 0x10]
push 1
push 2
sub edx, 0xc
push edx
jmp 0x40a8f9
mov eax, dword [0x4b4074]
add eax, 0x26
push eax
push edi
call fcn.00471370
mov ecx, dword [ebp + 0x10]
push 1
push 2
push ecx
push edi
call fcn.00472840
mov edx, dword [0x4b4074]
add esp, 0x18
add edx, 0x1a
push edx
push edi
call fcn.00471370
mov eax, dword [ebp + 0x14]
push 1
push 2
push eax
push edi
call fcn.00472840
mov ecx, dword [0x4b4074]
add ecx, 0x1e
push ecx
push edi
call fcn.00471370
add esp, 0x20
push ebp
call fcn.0048134d
add esp, 4
jmp case.default.0x4109ad
cmp dword [ebp + 0x10], 0xb
jbe 0x40a964
mov edx, dword [0x4b4074]
add edx, 0x2c
push edx
push edi
call fcn.00471370
mov eax, dword [ebp + 0x10]
push 1
push 2
sub eax, 0xc
push eax
jmp 0x40a97c
mov ecx, dword [0x4b4074]
add ecx, 0x26
push ecx
push edi
call fcn.00471370
mov edx, dword [ebp + 0x10]
push 1
push 2
push edx
push edi
call fcn.00472840
mov eax, dword [0x4b4074]
add esp, 0x18
add eax, 0x1a
jmp 0x40acde
cmp dword [ebp + 0x10], 0xb
jbe case.0x40ac37.10
mov ecx, dword [0x4b4074]
add ecx, 0x2c
push ecx
push edi
call fcn.00471370
add esp, 8
push ebp
call fcn.0048134d
add esp, 4
jmp case.default.0x4109ad
mov edx, dword [0x4b4074]
add edx, 0x26
push edx
push edi
call fcn.00471370
add esp, 8
push ebp
call fcn.0048134d
add esp, 4
jmp case.default.0x4109ad
mov eax, dword [ebp + 0x10]
push 1
push 2
push eax
push edi
call fcn.00472840
mov ecx, dword [0x4b4074]
add ecx, 0x16
push ecx
push edi
call fcn.00471370
mov edx, dword [ebp + 0x14]
push 1
push 2
push edx
push edi
call fcn.00472840
mov eax, dword [0x4b4074]
add eax, 0x16
push eax
push edi
call fcn.00471370
mov ecx, dword [ebp + 0x18]
push 1
push 2
push ecx
push edi
call fcn.00472840
add esp, 0x40
push ebp
call fcn.0048134d
add esp, 4
jmp case.default.0x4109ad
mov edx, dword [ebp + 0x10]
push 1
push 2
push edx
push edi
call fcn.00472840
mov eax, dword [0x4b4074]
add eax, 0x16
push eax
push edi
call fcn.00471370
mov ecx, dword [ebp + 0x14]
push 1
push 2
push ecx
push edi
call fcn.00472840
add esp, 0x28
push ebp
call fcn.0048134d
add esp, 4
jmp case.default.0x4109ad
mov edx, dword [ebp + 0x10]
push 1
push 2
push edx
push edi
call fcn.00472840
add esp, 0x10
push ebp
call fcn.0048134d
add esp, 4
jmp case.default.0x4109ad
cmp dword [ebp + 0x10], 0xb
jbe 0x40aab1
mov eax, dword [0x4b4074]
add eax, 0x38
push eax
push edi
call fcn.00471370
mov ecx, dword [ebp + 0x10]
push 1
push 2
sub ecx, 0xc
push ecx
jmp 0x40aac9
mov edx, dword [0x4b4074]
add edx, 0x32
push edx
push edi
call fcn.00471370
mov eax, dword [ebp + 0x10]
push 1
push 2
push eax
push edi
call fcn.00472840
mov ecx, dword [0x4b4074]
add esp, 0x18
add ecx, 0x16
push ecx
push edi
call fcn.00471370
mov edx, dword [ebp + 0x14]
push 1
push 2
push edx
push edi
call fcn.00472840
mov eax, dword [0x4b4074]
add eax, 0x16
push eax
push edi
call fcn.00471370
mov ecx, dword [ebp + 0x18]
push 1
push 2
push ecx
push edi
call fcn.00472840
add esp, 0x30
push ebp
call fcn.0048134d
add esp, 4
jmp case.default.0x4109ad
cmp dword [ebp + 0x10], 0xb
jbe 0x40ab41
mov edx, dword [0x4b4074]
add edx, 0x38
push edx
push edi
call fcn.00471370
mov eax, dword [ebp + 0x10]
push 1
push 2
sub eax, 0xc
push eax
jmp 0x40ab59
mov ecx, dword [0x4b4074]
add ecx, 0x32
push ecx
push edi
call fcn.00471370
mov edx, dword [ebp + 0x10]
push 1
push 2
push edx
push edi
call fcn.00472840
mov eax, dword [0x4b4074]
add esp, 0x18
add eax, 0x16
push eax
push edi
call fcn.00471370
mov ecx, dword [ebp + 0x14]
push 1
push 2
push ecx
push edi
call fcn.00472840
add esp, 0x18
push ebp
call fcn.0048134d
add esp, 4
jmp case.default.0x4109ad
cmp dword [ebp + 0x10], 0xb
jbe 0x40abc8
mov edx, dword [0x4b4074]
add edx, 0x38
push edx
push edi
call fcn.00471370
mov eax, dword [ebp + 0x10]
push 1
push 2
sub eax, 0xc
push eax
push edi
call fcn.00472840
add esp, 0x18
push ebp
call fcn.0048134d
add esp, 4
jmp case.default.0x4109ad
mov ecx, dword [0x4b4074]
add ecx, 0x32
push ecx
push edi
call fcn.00471370
mov edx, dword [ebp + 0x10]
push 1
push 2
push edx
push edi
call fcn.00472840
add esp, 0x18
push ebp
call fcn.0048134d
add esp, 4
jmp case.default.0x4109ad
cmp dword [ebp + 0x10], 0xb
jbe 0x40ac0a
mov eax, dword [0x4b4074]
add eax, 0x38
jmp 0x40acde
mov ecx, dword [0x4b4074]
add ecx, 0x32
push ecx
push edi
call fcn.00471370
add esp, 8
push ebp
call fcn.0048134d
add esp, 4
jmp case.default.0x4109ad
mov eax, dword [ebp + 0x18]
cmp eax, 0xb
ja case.0x40a744.3
jmp dword [eax*4 + 0x416238]
mov edx, dword [0x4b4074]
add edx, 0x56
push edx
push edi
call fcn.00471370
add esp, 8
push ebp
call fcn.0048134d
add esp, 4
jmp case.default.0x4109ad
mov eax, dword [0x4b4074]
add eax, 0x58
jmp 0x40acde
mov ecx, dword [0x4b4074]
add ecx, 0x5c
push ecx
push edi
call fcn.00471370
add esp, 8
push ebp
call fcn.0048134d
add esp, 4
jmp case.default.0x4109ad
mov edx, dword [0x4b4074]
add edx, 0x60
push edx
push edi
call fcn.00471370
add esp, 8
push ebp
call fcn.0048134d
add esp, 4
jmp case.default.0x4109ad
mov eax, dword [0x4b4074]
add eax, 0x68
jmp 0x40acde
mov ecx, dword [0x4b4074]
add ecx, 0x66
push ecx
push edi
call fcn.00471370
add esp, 8
push ebp
call fcn.0048134d
add esp, 4
jmp case.default.0x4109ad
mov eax, dword [0x4b4074]
add eax, 0x2c
push eax
push edi
call fcn.00471370
add esp, 8
push ebp
call fcn.0048134d
add esp, 4
jmp case.default.0x4109ad
cmp eax, 0x1030d02
je 0x40af1f
cmp eax, 0x1030e08
je 0x40ada1
cmp eax, 0x1030f03
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esi]
mov eax, dword [esp + 0x14]
push eax
mov dword [esp + 0x1c], edx
add esi, 4
call fcn.004064e0
add esp, 4
test eax, eax
je 0x40b287
mov ecx, dword [0x6c9844]
push ecx
call fcn.00402320
add esp, 4
cmp dword [esp + 0x18], edi
mov esi, eax
je 0x40ad92
mov edx, dword [0x4bbfc8]
sub eax, dword [0x4bc864]
push edx
push 0
push 0
push eax
call fcn.0046c300
add esp, 0x10
test eax, eax
je 0x40ad92
mov ecx, dword [esp + 0x18]
mov edx, dword [0x4bc864]
lea esi, [edx + ecx]
mov dword [0x6c77a8], 1
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x20]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x2c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x24]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x38]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
push 4
lea edx, [esp + 0x40]
push edx
push eax
call fcn.0046bf10
add esp, 0xc
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x3c]
push ecx
call fcn.00402320
add esp, 4
cmp dword [eax], 0x80000307
jne case.default.0x4109ad
mov ecx, dword [eax + 8]
add eax, 8
test ecx, ecx
mov dword [esp + 0x3c], ecx
mov ebp, dword [eax + 4]
je 0x40aedb
mov edx, dword [esp + 0x18]
push edx
call fcn.0046e6d0
mov edi, eax
add esp, 4
test edi, edi
je 0x40aedb
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
push edi
call fcn.0046e910
mov edx, dword [esp + 0x48]
push edx
call fcn.004022f0
push eax
push edi
call fcn.00471370
add esp, 0x18
test ebp, ebp
je case.default.0x4109ad
mov eax, dword [esp + 0x2c]
push eax
call fcn.0046e6d0
mov edi, eax
add esp, 4
test edi, edi
je case.default.0x4109ad
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x24]
push ecx
push edx
push edi
call fcn.0046e910
push ebp
call fcn.004022f0
push eax
push edi
call fcn.00471370
add esp, 0x18
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
push edx
call fcn.0046d4f0
add esp, 4
jmp case.default.0x4109ad
call fcn.0046b280
jmp case.default.0x4109ad
cmp eax, 0x1031402
ja 0x40b148
je 0x40b110
cmp eax, 0x1031103
je 0x40b07f
cmp eax, 0x1031203
je 0x40afdc
cmp eax, 0x1031303
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
push eax
push ecx
call fcn.0046c0a0
add esp, 8
neg al
sbb eax, eax
neg eax
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x18]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [0x4bbfc8]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
push 0
push edx
shl eax, 5
add eax, 0x1a
push eax
push 0xffffffffffffffff
push 0
push ecx
call fcn.0046b700
add esp, 8
push eax
call fcn.0043bed0
add esp, 0x14
test eax, eax
mov dword [0x6c77a8], eax
jne case.default.0x4109ad
mov eax, dword [0x4bbfc8]
mov edx, dword [esp + 0x14]
mov ecx, dword [0x6cdd3c]
push edx
mov edx, dword [0x6cdd38]
shl eax, 5
add eax, 0x1a
push eax
push ecx
push edx
push 0
call fcn.0043bf80
add esp, 0x14
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
push 0x104
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov edi, eax
test edi, edi
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
push edi
push eax
call fcn.0046b700
add esp, 8
call fcn.0046b790
push eax
call fcn.0046b770
mov ecx, dword [esp + 0x18]
push eax
push edi
push ecx
call fcn.004335b0
add esp, 4
push eax
call fcn.00434740
add esp, 0x10
push edi
call dword [sym.imp.KERNEL32.dll_GlobalHandle]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
push eax
call fcn.0046c160
add esp, 4
neg al
sbb eax, eax
neg eax
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
cmp eax, 0x1031503
je 0x40b292
cmp eax, 0x1031604
je 0x40b1d7
cmp eax, 0x1040002
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
cmp eax, 0xa
jb 0x40b1b0
mov edi, 0x6cbba8
mov edi, edi
mov ecx, dword [edi]
test ecx, ecx
je 0x40b1a0
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [edi], ebp
add edi, 4
cmp edi, 0x6cbbd0
jl 0x40b190
jmp case.default.0x4109ad
mov ecx, dword [eax*4 + 0x6cbba8]
test ecx, ecx
je case.default.0x4109ad
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov ecx, dword [esp + 0x14]
mov dword [ecx*4 + 0x6cbba8], edi
jmp case.default.0x4109ad
mov eax, dword [esi]
add esi, 4
mov dword [esp + 0x14], eax
mov edx, dword [esi]
add esi, 4
mov dword [esp + 0x18], edx
mov ecx, dword [esi]
push eax
mov dword [esp + 0x20], ecx
add esi, 4
call fcn.004064e0
add esp, 4
test eax, eax
je 0x40b254
mov edx, dword [0x6c9844]
push edx
call fcn.00402320
mov esi, eax
add esp, 4
test esi, esi
je 0x40b254
cmp dword [esp + 0x18], edi
je 0x40b245
mov eax, dword [0x4bbfc8]
push eax
push 0
mov ecx, esi
sub ecx, dword [0x4bc864]
push 0
push ecx
call fcn.0046c300
add esp, 0x10
test eax, eax
je 0x40b245
mov edx, dword [esp + 0x18]
mov eax, dword [0x4bc864]
lea esi, [eax + edx]
mov ecx, dword [esp + 0x14]
mov dword [0x6c77a8], ecx
jmp case.default.0x4109ad
cmp dword [esp + 0x1c], edi
je 0x40b287
mov edx, dword [0x4bbfc8]
push edx
push 0
mov eax, esi
sub eax, dword [0x4bc864]
push 0
push eax
call fcn.0046c300
add esp, 0x10
test eax, eax
je 0x40b287
mov ecx, dword [0x4bc864]
mov edx, dword [esp + 0x1c]
lea esi, [ecx + edx]
mov dword [0x6c77a8], edi
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
push eax
push ecx
call fcn.0046bbc0
add esp, 8
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
push 0xbc
lea edx, [esp + 0x1b8]
push 0
push edx
call fcn.00481ba0
mov eax, dword [esi]
lea ecx, [esp + 0x20]
push ecx
push eax
call section..text
add esp, 0x14
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x1b8]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x240]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x240], 1
jne 0x40b39d
mov edx, dword [esi]
mov dword [esp + 0x244], edx
add esi, 4
jmp 0x40b3bb
mov eax, dword [esi]
lea ecx, [esp + 0x244]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x14], 0xa
jae case.default.0x4109ad
mov edx, dword [esp + 0x18]
push edx
call fcn.004022d0
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
add esp, 4
test eax, eax
je 0x40b3e8
push eax
lea eax, [esp + 0x1c0]
push eax
call edi
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.004022d0
add esp, 4
test eax, eax
je 0x40b404
push eax
lea edx, [esp + 0x1f0]
push edx
call edi
mov ecx, dword [esp + 0x14]
cmp dword [ecx*4 + 0x6cbba8], ebp
lea ecx, [ecx*4 + 0x6cbba8]
jne 0x40b467
push 0x448
call fcn.004813ee
add esp, 4
mov dword [esp + 0x30], eax
mov dword [esp + 0x394], 7
test eax, eax
je 0x40b44d
mov ecx, dword [0x4bbfc8]
mov edx, dword [esp + 0x14]
push ecx
push edx
mov ecx, eax
call fcn.00423260
jmp 0x40b44f
xor eax, eax
mov ecx, dword [esp + 0x14]
lea ecx, [ecx*4 + 0x6cbba8]
mov dword [esp + 0x394], 0xffffffff
mov dword [ecx], eax
mov ecx, dword [ecx]
test ecx, ecx
je case.default.0x4109ad
lea eax, [esp + 0x1b4]
push eax
call fcn.00423380
jmp case.default.0x4109ad
cmp eax, 0x1050001
ja 0x40bbd0
je 0x40bb6c
cmp eax, 0x1040302
ja 0x40ba84
je 0x40ba4a
sub eax, 0x1040118
je 0x40b6e8
sub eax, 0xec
je 0x40b635
sub eax, 6
jne 0x415de4
push 0x58
push eax
lea ecx, [esp + 0x278]
push ecx
call fcn.00481ba0
mov eax, dword [esi]
lea edx, [esp + 0x20]
push edx
push eax
call section..text
add esp, 0x14
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x18]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x2a8]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x2ac]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x298]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x29c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x2a0]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x2a4]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x274]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
cmp dword [eax*4 + 0x6cbba8], edi
je case.default.0x4109ad
mov ecx, dword [esp + 0x18]
push ecx
mov dword [esp + 0x274], 1
call fcn.004022d0
add esp, 4
test eax, eax
je 0x40b618
push eax
lea edx, [esp + 0x27c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx*4 + 0x6cbba8]
lea eax, [esp + 0x270]
push eax
call fcn.00423b50
jmp case.default.0x4109ad
push 0x58
lea edx, [esp + 0x274]
push 0
push edx
call fcn.00481ba0
mov eax, dword [esi]
lea ecx, [esp + 0x20]
push ecx
push eax
call section..text
add esp, 0x14
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x274]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
cmp dword [edx*4 + 0x6cbba8], edi
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
push eax
call fcn.004022d0
add esp, 4
test eax, eax
je 0x40b6cb
push eax
lea ecx, [esp + 0x27c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [esp + 0x14]
mov ecx, dword [eax*4 + 0x6cbba8]
lea edx, [esp + 0x270]
push edx
call fcn.00423b50
jmp case.default.0x4109ad
push 0xbc
lea ecx, [esp + 0x1b8]
push 0
push ecx
call fcn.00481ba0
mov eax, dword [esi]
lea edx, [esp + 0x20]
push edx
push eax
call section..text
add esp, 0x14
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x18]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x1c]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x21c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x220]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1dc]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x1e0]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1e4]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x1e8]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x224]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x228]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x20c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x210]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x214]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x218]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x22c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x23c]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x238]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x230]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x234]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x1b8]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x240]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x240], 1
jne 0x40b99f
mov edx, dword [esi]
mov dword [esp + 0x244], edx
add esi, 4
jmp 0x40b9bd
mov eax, dword [esi]
lea ecx, [esp + 0x244]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
cmp dword [esp + 0x14], 0xa
jae case.default.0x4109ad
mov edx, dword [esp + 0x18]
push edx
call fcn.004022d0
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
add esp, 4
test eax, eax
je 0x40b9ea
push eax
lea eax, [esp + 0x1c0]
push eax
call edi
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.004022d0
add esp, 4
test eax, eax
je 0x40ba06
push eax
lea edx, [esp + 0x1f0]
push edx
call edi
mov ecx, dword [esp + 0x14]
cmp dword [ecx*4 + 0x6cbba8], ebp
lea ecx, [ecx*4 + 0x6cbba8]
mov dword [esp + 0x1b4], 0xf
jne 0x40b467
push 0x448
call fcn.004813ee
add esp, 4
mov dword [esp + 0x30], eax
mov dword [esp + 0x394], 8
jmp 0x40b434
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
mov ecx, dword [edx*4 + 0x6cbba8]
test ecx, ecx
je case.default.0x4109ad
push 1
call fcn.004245c0
jmp case.default.0x4109ad
cmp eax, 0x1040402
je 0x40bb34
cmp eax, 0x1040503
je 0x40badc
cmp eax, 0x1040602
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
mov eax, dword [edx*4 + 0x6cbba8]
test eax, eax
je case.default.0x4109ad
mov eax, dword [eax + 0x44]
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
mov ecx, dword [eax*4 + 0x6cbba8]
test ecx, ecx
je case.default.0x4109ad
mov edx, dword [esp + 0x18]
push edx
call fcn.00424410
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
mov ecx, dword [edx*4 + 0x6cbba8]
test ecx, ecx
je case.default.0x4109ad
call fcn.00424670
jmp case.default.0x4109ad
mov ecx, dword [0x4bc85c]
cmp ecx, ebp
je 0x40bb7d
push 1
call fcn.00402750
push 0x78
call fcn.004813ee
add esp, 4
mov dword [esp + 0x30], eax
test eax, eax
mov dword [esp + 0x394], 9
je 0x40bba3
mov ecx, eax
call fcn.00427910
jmp 0x40bba5
xor eax, eax
test eax, eax
mov dword [esp + 0x394], 0xffffffff
mov dword [0x4bc85c], eax
je case.default.0x4109ad
mov ecx, dword [0x4bcc70]
push ecx
mov ecx, eax
call fcn.00427960
jmp case.default.0x4109ad
cmp eax, 0x1050402
ja 0x40bc80
je 0x40bc48
cmp eax, 0x1050102
je 0x412957
cmp eax, 0x1050202
je 0x40bc0b
cmp eax, 0x1050301
jne 0x415de4
mov edx, dword [0x6cbbd4]
mov dword [0x6c77a8], edx
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov ecx, dword [0x4bc85c]
test ecx, ecx
mov eax, dword [esp + 0x14]
mov dword [0x6cbbd4], eax
je case.default.0x4109ad
push eax
call fcn.00427bf0
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov ecx, dword [0x4bc85c]
test ecx, ecx
je case.default.0x4109ad
mov eax, dword [esp + 0x14]
push eax
call fcn.00427c00
jmp case.default.0x4109ad
cmp eax, 0x1050504
je 0x40bcc0
cmp eax, 0x1051102
jne 0x415de4
mov eax, dword [esi]
mov ecx, dword [0x4bc85c]
add esi, 4
cmp ecx, ebp
mov dword [esp + 0x14], eax
je case.default.0x4109ad
mov edx, dword [0x58cfbc]
push eax
push edx
mov dword [0x6c6d38], eax
call fcn.00429170
jmp case.default.0x4109ad
mov edi, dword [esi]
lea ecx, [esp + 0x18]
add esi, 4
mov dword [esp + 0x14], edi
mov eax, dword [esi]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x1c]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [0x4bc85c]
test edx, edx
je case.default.0x4109ad
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
push eax
push ecx
push edi
call fcn.004022d0
add esp, 4
push eax
mov ecx, edx
call fcn.00427a00
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
cmp eax, 0xffffffff
jne 0x40bd5b
call fcn.00427590
jmp case.default.0x4109ad
push eax
call fcn.004275f0
mov eax, dword [esp + 0x18]
push eax
call fcn.00426750
add esp, 8
jmp case.default.0x4109ad
cmp eax, 0x2000b02
ja 0x40c81e
je 0x40c7da
cmp eax, 0x1810103
ja 0x40c6b4
je 0x40c5f3
cmp eax, 0x1060804
ja 0x40c479
je 0x40c3fa
cmp eax, 0x106040a
ja 0x40c2e0
je 0x40c18e
cmp eax, 0x1060107
je 0x40c0a5
cmp eax, 0x106020b
je 0x40bf2a
cmp eax, 0x106030c
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x20]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x2c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x24]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x38]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esi]
lea ecx, [esp + 0x34]
mov dword [esp + 0x3c], edx
mov eax, dword [esi + 4]
add esi, 4
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov ebp, dword [esi]
mov edx, dword [esp + 0x14]
mov ebx, dword [esi + 4]
add esi, 4
push edx
add esi, 4
call fcn.004267b0
mov edi, eax
add esp, 4
test edi, edi
je 0x4085c1
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x20]
push eax
mov eax, dword [esp + 0x20]
push ecx
mov ecx, dword [esp + 0x44]
push edx
push eax
push ecx
call fcn.004022d0
mov edx, dword [esp + 0x2c]
add esp, 4
push eax
push edx
mov ecx, edi
call fcn.00426400
cmp eax, 0xffffffff
mov dword [esp + 0x28], eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x38]
push ecx
push ebx
push ebp
push edx
push 1
jmp 0x40c2ca
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x20]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x2c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x24]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x38]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esi]
lea ecx, [esp + 0x34]
mov dword [esp + 0x3c], edx
mov eax, dword [esi + 4]
add esi, 4
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
mov ebp, dword [esi]
push edx
add esi, 4
call fcn.004267b0
mov edi, eax
add esp, 4
test edi, edi
je case.default.0x4109ad
mov eax, dword [esp + 0x3c]
push eax
call fcn.004022d0
add esp, 4
test eax, eax
je 0x40c07b
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x2c]
push ecx
mov ecx, dword [esp + 0x24]
push edx
mov edx, dword [esp + 0x24]
push ecx
push edx
push eax
mov eax, dword [esp + 0x2c]
push eax
mov ecx, edi
call fcn.00426400
cmp eax, 0xffffffff
mov dword [esp + 0x28], eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x38]
push ecx
push 0
push ebp
push edx
push 0
jmp 0x40c2ca
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x18]
push ecx
push 0
push ebp
push edx
push 3
push eax
mov ecx, edi
call fcn.00426530
mov ecx, dword [esp + 0x18]
mov dword [0x6c77a8], ecx
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
mov dword [esp + 0x18], eax
mov eax, dword [esi + 4]
add esi, 4
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x20]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x2c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x24]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
push eax
call fcn.004267b0
mov edx, eax
add esp, 4
test edx, edx
jne 0x40c160
mov ecx, dword [esp + 0x14]
push ecx
call fcn.00426750
mov edx, eax
add esp, 4
test edx, edx
je case.default.0x4109ad
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x2c]
push eax
mov eax, dword [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x24]
push eax
mov eax, dword [esp + 0x24]
push ecx
push eax
call fcn.004022d0
add esp, 4
push eax
mov ecx, edx
call fcn.00425e40
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x20]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x2c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x24]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov ebp, dword [esi]
mov eax, dword [esi + 4]
lea ecx, [esp + 0x3c]
add esi, 4
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x34]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
push eax
call fcn.004267b0
mov edi, eax
add esp, 4
test edi, edi
je case.default.0x4109ad
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x20]
push ecx
mov ecx, dword [esp + 0x20]
push edx
push eax
push ecx
push ebp
call fcn.004022d0
mov edx, dword [esp + 0x2c]
add esp, 4
push eax
push edx
mov ecx, edi
call fcn.00426400
cmp eax, 0xffffffff
mov dword [esp + 0x28], eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x34]
push ecx
push 0
push edx
push 3
push 2
push eax
mov ecx, edi
call fcn.00426530
mov eax, dword [esp + 0x28]
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
cmp eax, 0x1060502
je 0x40c398
cmp eax, 0x1060602
je 0x40c35c
cmp eax, 0x1060703
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
push eax
call fcn.004267b0
add esp, 4
test eax, eax
je case.default.0x4109ad
cmp dword [esp + 0x18], edi
setne cl
push ecx
mov ecx, eax
call fcn.004268d0
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
push eax
call fcn.004267b0
add esp, 4
test eax, eax
je case.default.0x4109ad
mov ecx, eax
call fcn.00426830
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
push edx
call fcn.004267b0
add esp, 4
test eax, eax
je 0x40c3dd
mov ecx, dword [0x6c77b0]
shr ecx, 0x1f
and ecx, 0xffffff01
push 0
push ecx
mov ecx, eax
call fcn.00426ff0
mov edx, dword [0x6c77b0]
shr edx, 0x1f
and edx, 0xffffff01
push edx
call fcn.00426ed0
add esp, 4
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
push edx
call fcn.004267b0
add esp, 4
test eax, eax
je case.default.0x4109ad
cmp dword [esp + 0x1c], edi
mov edx, dword [esp + 0x18]
setne cl
push ecx
push edx
mov ecx, eax
call fcn.004269b0
jmp case.default.0x4109ad
cmp eax, 0x1800101
ja 0x40c5ac
je case.default.0x4109ad
cmp eax, 0x1070008
je 0x40c4d5
cmp eax, 0x1070102
je 0x40c4a8
cmp eax, 0x1800001
jne 0x415de4
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
push edx
call fcn.00429570
add esp, 4
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x18]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x20]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x2c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
mov edx, dword [0x4bbfc8]
mov ecx, dword [esi + 4]
push edx
mov edx, dword [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x34]
add esi, 4
push eax
mov eax, dword [esp + 0x28]
add ecx, eax
push ecx
mov ecx, dword [esp + 0x28]
add edx, ecx
push edx
push eax
mov eax, dword [esp + 0x2c]
push ecx
push eax
add esi, 4
call fcn.004294c0
add esp, 0x20
test eax, eax
je 0x4085c1
mov ecx, dword [esp + 0x14]
mov dword [0x6c77a8], ecx
jmp case.default.0x4109ad
cmp eax, 0x1800202
je 0x40c5d3
cmp eax, 0x1800302
je 0x4068db
cmp eax, 0x1810001
jne 0x415de4
call fcn.0045aa00
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
jne case.default.0x4109ad
jmp 0x41607d
mov edx, dword [esi]
add esi, 4
mov dword [esp + 0x14], edx
mov eax, dword [esi]
mov dword [esp + 0x18], eax
add esi, 4
call fcn.0045ce90
cmp eax, 0x66
ja case.0x40c616.4
movzx ecx, byte [eax + 0x416278]
jmp dword [ecx*4 + 0x416268]
cmp dword [esp + 0x18], edi
mov dword [0x6c77a8], edi
je case.default.0x4109ad
mov ecx, dword [0x4bbfc8]
push ecx
push 0
mov edx, esi
sub edx, dword [0x4bc864]
push 0
push edx
call fcn.0046c300
add esp, 0x10
test eax, eax
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
mov ecx, dword [0x4bc864]
lea esi, [ecx + eax]
jmp case.default.0x4109ad
mov edx, dword [0x6c9844]
push edx
call fcn.00402320
add esp, 4
mov esi, eax
cmp dword [esp + 0x14], edi
mov dword [0x6c77a8], 1
je case.default.0x4109ad
mov eax, dword [0x4bbfc8]
push eax
push 0
mov ecx, esi
sub ecx, dword [0x4bc864]
push 0
push ecx
call fcn.0046c300
add esp, 0x10
test eax, eax
je case.default.0x4109ad
mov eax, dword [esp + 0x14]
jmp 0x416072
cmp eax, 0x2000403
ja 0x40c7b0
je 0x40c969
cmp eax, 0x2000002
ja 0x40c78a
je 0x40c73b
cmp eax, 0x1820001
je 0x40c70e
cmp eax, 0x1820101
je 0x40c703
cmp eax, 0x1830001
jne 0x415de4
call fcn.00405ee0
test al, al
je case.default.0x4109ad
mov esi, dword [0x4bbfd0]
jmp case.default.0x4109ad
lea edx, [esi + 4]
push edx
push 0x3e9
jmp 0x40c717
lea edx, [esi + 4]
push edx
push 0x3e8
mov eax, dword [0x4bcc70]
mov ecx, dword [0x58cfbc]
push eax
push ecx
call fcn.004053a0
add esp, 0x10
test eax, eax
je case.default.0x4109ad
mov esi, eax
jmp case.default.0x4109ad
mov eax, dword [esi]
add esi, 4
sub eax, 1
je 0x40c777
sub eax, 1
je 0x40c764
sub eax, 1
jne case.default.0x4109ad
mov ecx, 0x7d0
mov edi, 0x6cbdd0
rep stosd dword es:[edi], eax
jmp case.default.0x4109ad
mov ecx, 0x7d0
xor eax, eax
mov edi, 0x6c9858
rep stosd dword es:[edi], eax
jmp case.default.0x4109ad
mov ecx, 0x7d0
xor eax, eax
mov edi, 0x6c77e8
rep stosd dword es:[edi], eax
jmp case.default.0x4109ad
cmp eax, 0x2000103
je 0x40c969
cmp eax, 0x2000203
je 0x40c969
cmp eax, 0x2000303
je 0x40c969
jmp 0x415de4
cmp eax, 0x2000802
ja 0x40c803
je 0x40c7da
cmp eax, 0x2000503
je 0x40c969
cmp eax, 0x2000603
je 0x40c969
cmp eax, 0x2000702
jne 0x415de4
mov eax, dword [esi - 4]
sub esi, 4
add esi, 4
mov dword [esp + 0x14], eax
mov ecx, dword [esi]
push ecx
push eax
add esi, 4
call fcn.00401150
add esp, 8
test eax, eax
jne case.default.0x4109ad
jmp 0x41607d
cmp eax, 0x2000903
je 0x40c969
cmp eax, 0x2000a03
je 0x40c969
jmp 0x415de4
cmp eax, 0x2010403
ja 0x40c936
je 0x40c969
cmp eax, 0x2001803
ja 0x40c8c3
je 0x40c8e9
cmp eax, 0x2001405
ja 0x40c8a9
je 0x40c862
cmp eax, 0x2001105
je 0x40c862
cmp eax, 0x2001205
je 0x40c862
cmp eax, 0x2001305
jne 0x415de4
mov eax, dword [esi - 4]
sub esi, 4
add esi, 4
mov dword [esp + 0x14], eax
mov ecx, dword [esi]
add esi, 4
mov dword [esp + 0x18], ecx
mov edx, dword [esi]
add esi, 4
mov dword [esp + 0x1c], edx
mov edi, dword [esi]
add esi, 4
mov dword [esp + 0x20], edi
mov ebx, dword [esi]
push ebx
push edi
push edx
push ecx
push eax
add esi, 4
call fcn.00401df0
add esp, 0x14
test eax, eax
jne case.default.0x4109ad
jmp 0x41607d
cmp eax, 0x2001505
je 0x40c862
cmp eax, 0x2001605
je 0x40c862
cmp eax, 0x2001703
je 0x40c8e9
jmp 0x415de4
cmp eax, 0x2010003
ja 0x40c91c
je 0x40c969
cmp eax, 0x2001905
je 0x40c862
cmp eax, 0x2001a05
je 0x40c862
cmp eax, 0x2001b03
jne 0x415de4
mov eax, dword [esi - 4]
sub esi, 4
add esi, 4
mov dword [esp + 0x14], eax
mov ecx, dword [esi]
add esi, 4
mov dword [esp + 0x18], ecx
mov edx, dword [esi]
push edx
push ecx
push eax
add esi, 4
call fcn.00401c80
add esp, 0xc
test eax, eax
jne case.default.0x4109ad
jmp 0x41607d
cmp eax, 0x2010103
je 0x40c969
cmp eax, 0x2010203
je 0x40c969
cmp eax, 0x2010303
je 0x40c969
jmp 0x415de4
cmp eax, 0x3000202
ja 0x40cbaf
je 0x40cb87
cmp eax, 0x2020002
ja 0x40c9c9
je 0x40c99c
cmp eax, 0x2010503
je 0x40c969
cmp eax, 0x2010603
je 0x40c969
cmp eax, 0x2010703
jne 0x415de4
mov eax, dword [esi - 4]
sub esi, 4
add esi, 4
mov dword [esp + 0x14], eax
mov ecx, dword [esi]
add esi, 4
mov dword [esp + 0x18], ecx
mov edx, dword [esi]
push edx
push ecx
push eax
add esi, 4
call fcn.00401310
add esp, 0xc
test eax, eax
jne case.default.0x4109ad
jmp 0x41607d
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
push eax
call fcn.0046c460
add esp, 4
jmp case.default.0x4109ad
cmp eax, 0x2020102
je 0x40cb5a
cmp eax, 0x300000b
je 0x40ca20
cmp eax, 0x3000102
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esp + 0x1c]
add esp, 8
add esi, 4
cmp eax, 0xffffffff
jne 0x40ca0c
call fcn.00472ab0
jmp case.default.0x4109ad
push eax
call fcn.0046e6d0
push eax
call fcn.00472a00
add esp, 8
jmp case.default.0x4109ad
push 0x54
lea edx, [esp + 0x104]
push 0
push edx
call fcn.00481ba0
mov eax, dword [esi]
lea ecx, [esp + 0x110]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x11c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x128]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x134]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x140]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x154]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x154]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
add esp, 0x44
lea edx, [esp + 0x11c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
add esi, 4
mov dword [esp + 0x1c], eax
mov dword [esp + 0x13c], eax
mov dword [esp + 0x138], eax
mov dword [esp + 0x134], eax
mov dword [esp + 0x130], eax
mov eax, 0x513974
lea ecx, [esp + 0x108]
add esi, 4
mov dword [esp + 0x14c], eax
mov dword [esp + 0x148], eax
mov dword [esp + 0x144], eax
mov dword [esp + 0x140], eax
mov eax, dword [esi]
push ecx
push eax
call section..text
mov eax, dword [0x4bbfc8]
mov edx, dword [0x4bcc6c]
push eax
lea ecx, [esp + 0x114]
push ecx
add esi, 4
mov dword [esp + 0x118], edx
call fcn.00472970
add esp, 0x18
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
push eax
call fcn.0046c500
add esp, 4
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edx, dword [esp + 0x1c]
push edx
add esi, 4
call fcn.0046e6d0
push eax
call fcn.00471730
add esp, 0x10
jmp case.default.0x4109ad
cmp eax, 0x3000604
ja 0x40cd05
je 0x40ccab
cmp eax, 0x3000303
je 0x40cc6c
cmp eax, 0x3000403
je 0x40cc21
cmp eax, 0x3000503
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
add esp, 0x10
push eax
push ecx
add esi, 4
call fcn.0046e6d0
add esp, 4
push eax
call fcn.0046e800
add esp, 8
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x24]
push edx
add esi, 4
call fcn.0046e6d0
add esp, 0x14
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x18]
push 1
push ecx
push eax
call fcn.00472820
add esp, 0xc
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
add esi, 4
push eax
mov dword [esp + 0x24], eax
add esi, 4
call fcn.004022f0
add esp, 0xc
push eax
mov eax, dword [esp + 0x18]
push eax
call fcn.0046e6d0
add esp, 4
push eax
call fcn.00471370
add esp, 8
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
add esp, 0x18
push edx
push eax
push ecx
add esi, 4
call fcn.0046e6d0
add esp, 4
push eax
call fcn.0046e910
add esp, 0xc
jmp case.default.0x4109ad
cmp eax, 0x3000702
je 0x40cd44
cmp eax, 0x3000802
jne 0x415de4
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esp + 0x1c]
push eax
add esi, 4
call fcn.0046b4e0
add esp, 0xc
neg eax
sbb eax, eax
neg eax
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edx, dword [esp + 0x1c]
push edx
add esi, 4
call fcn.0046e6d0
push eax
call fcn.00470a10
add esp, 0x10
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
add esp, 0x10
add esi, 4
cmp dword [esp + 0x18], edi
je 0x415eb2
mov eax, dword [esp + 0x14]
push eax
call fcn.0046e6d0
push eax
call fcn.0046f3d0
add esp, 8
mov dword [ebx], 3
jmp case.default.0x4109ad
cmp eax, 0x4040e02
ja 0x411da2
je 0x411d75
cmp eax, 0x4010f08
ja 0x40ef3a
je 0x40ee5d
cmp eax, 0x4001504
ja 0x40db7b
je 0x40db17
cmp eax, 0x4000603
ja 0x40d469
je 0x40d420
cmp eax, 0x3001704
ja 0x40d127
je 0x40d0cd
cmp eax, 0x3001303
ja 0x40cf84
je 0x40cf40
cmp eax, 0x3001003
je 0x40cf08
cmp eax, 0x3001103
je 0x40cea7
cmp eax, 0x3001206
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x84]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x90]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x9c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0xa8]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esp + 0x3c]
add esp, 0x28
lea edx, [esp + 0x7c]
push edx
push eax
jmp 0x40ceef
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
add esp, 0x10
mov dword [esp + 0x88], eax
mov dword [esp + 0x84], eax
mov dword [esp + 0x80], eax
mov dword [esp + 0x7c], eax
lea eax, [esp + 0x7c]
push eax
push ecx
add esi, 4
call fcn.0046e6d0
add esp, 4
push eax
call fcn.0046ef20
add esp, 8
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
push edx
push eax
add esi, 4
call fcn.0046e3d0
add esp, 0x18
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
add esp, 0x10
push eax
push ecx
add esi, 4
call fcn.0046e6d0
add esp, 4
push eax
call fcn.0046e740
add esp, 8
jmp case.default.0x4109ad
cmp eax, 0x3001403
je 0x40d089
cmp eax, 0x3001503
je 0x40d028
cmp eax, 0x3001606
jne 0x415de4
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x84]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x90]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x9c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0xa8]
add esi, 4
push edx
push eax
call section..text
mov ecx, dword [esp + 0x3c]
add esp, 0x28
lea eax, [esp + 0x7c]
push eax
push ecx
add esi, 4
call fcn.0046e6d0
add esp, 4
push eax
call fcn.0046ef70
add esp, 8
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esp + 0x28]
add esp, 0x10
lea edx, [esp + 0x7c]
mov dword [esp + 0x88], eax
mov dword [esp + 0x84], eax
mov dword [esp + 0x80], eax
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x14]
push edx
push eax
add esi, 4
call fcn.0046e6d0
add esp, 4
push eax
call fcn.0046ef70
add esp, 8
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
add esp, 0x10
push eax
push ecx
add esi, 4
call fcn.0046e6d0
add esp, 4
push eax
call fcn.0046e980
add esp, 8
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x2c]
add esp, 0x18
push eax
push ecx
push edx
add esi, 4
call fcn.0046e6d0
add esp, 4
push eax
call fcn.0046ee10
add esp, 0xc
jmp case.default.0x4109ad
cmp eax, 0x4000201
ja 0x40d313
je 0x40d2e7
cmp eax, 0x3001804
je 0x40d28d
cmp eax, 0x4000004
je 0x40d1d3
cmp eax, 0x4000102
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esp + 0x1c]
add esp, 8
add esi, 4
cmp eax, 0xffffffff
jne 0x40d199
mov edx, dword [esp + 0x34]
test byte [edx], 1
je 0x40d18f
mov ecx, dword [0x6cb7a4]
test ecx, ecx
je 0x40d18f
push 0
call fcn.0043d4d0
call fcn.0043acf0
jmp case.default.0x4109ad
push eax
call fcn.004335b0
mov edi, eax
add esp, 4
test edi, edi
je case.default.0x4109ad
mov eax, dword [esp + 0x34]
test byte [eax], 1
je 0x40d1c5
mov ecx, dword [0x6cb7a4]
test ecx, ecx
je 0x40d1c5
push edi
call fcn.0043d4d0
push edi
call fcn.0043ab90
add esp, 4
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edi, dword [esi + 4]
add esi, 4
lea edx, [esp + 0x24]
add esi, 4
mov dword [esp + 0x20], edi
mov eax, dword [esi]
push edx
push eax
call section..text
mov eax, dword [0x4bbfc8]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x2c]
add esp, 0x10
shl eax, 5
push eax
push ecx
push edx
push edi
add esi, 4
call fcn.004022d0
add esp, 4
push eax
call fcn.0043be30
mov edi, eax
add esp, 0x10
test edi, edi
je 0x407159
cmp dword [0x4bbfc8], ebp
jne 0x40d251
mov eax, dword [esp + 0x34]
test byte [eax], 1
je 0x40d251
cmp dword [0x6cb7a4], ebp
je 0x40d251
push edi
call fcn.00404340
add esp, 4
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0046b5b0
add esp, 4
test dword [0x6cdd10], 0x10000
je 0x40d27f
test dword [edi], 0x40000
je 0x40d27f
push 4
push 0
push edi
call fcn.00433470
add esp, 0xc
mov edx, dword [edi + 8]
mov dword [0x6c77a8], edx
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
add esp, 0x18
push edx
push eax
push ecx
add esi, 4
call fcn.0046e6d0
add esp, 4
push eax
call fcn.0046e9d0
add esp, 0xc
jmp case.default.0x4109ad
call fcn.0043acf0
mov edx, dword [esp + 0x34]
test byte [edx], 1
je case.default.0x4109ad
mov ecx, dword [0x6cb7a4]
test ecx, ecx
je case.default.0x4109ad
push 0
call fcn.0043d4d0
jmp case.default.0x4109ad
cmp eax, 0x4000304
je 0x40d3bc
cmp eax, 0x4000403
je 0x40d376
cmp eax, 0x4000503
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
add esp, 0x10
push 0
push eax
push ecx
add esi, 4
call fcn.004335b0
add esp, 4
push eax
call fcn.004325a0
add esp, 0xc
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
add esp, 0x10
push 0
push edx
push eax
add esi, 4
call fcn.004335b0
add esp, 4
push eax
call fcn.00436bd0
add esp, 0xc
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
fild dword [esp + 0x34]
mov edx, dword [esp + 0x2c]
add esp, 0x18
push 0
sub esp, 8
fstp dword [esp + 4]
add esi, 4
fild dword [esp + 0x24]
fstp dword [esp]
push edx
call fcn.004335b0
add esp, 4
push eax
call fcn.00436ac0
add esp, 0x10
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
fild dword [esp + 0x28]
mov eax, dword [esp + 0x24]
add esp, 0x10
push 0
push ecx
fstp dword [esp]
push eax
add esi, 4
call fcn.004335b0
add esp, 4
push eax
call fcn.00432ab0
add esp, 0xc
jmp case.default.0x4109ad
cmp eax, 0x4000d04
ja 0x40d7e9
je 0x40d785
cmp eax, 0x4000902
ja 0x40d65f
je 0x40d62e
cmp eax, 0x4000606
je 0x40d550
cmp eax, 0x4000703
je 0x40d507
cmp eax, 0x4000804
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
fild dword [esp + 0x34]
mov edx, dword [esp + 0x2c]
add esp, 0x10
fstp dword [esp + 4]
add esi, 4
fild dword [esp + 0x20]
fstp dword [esp]
push edx
call fcn.004335b0
add esp, 4
push eax
call fcn.00437040
add esp, 0xc
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
fild dword [esp + 0x28]
mov eax, dword [esp + 0x24]
add esp, 0x10
push 0
push ecx
fstp dword [esp]
push eax
add esi, 4
call fcn.004335b0
add esp, 4
push eax
call fcn.004320f0
add esp, 0xc
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x28
push 0
add esi, 4
sub esp, 0xc
cmp dword [esp + 0x3c], edi
je 0x40d5fc
fild dword [esp + 0x3c]
mov edx, dword [esp + 0x24]
fstp dword [esp + 0x40]
fild dword [esp + 0x30]
fld dword [esp + 0x40]
fld st(0)
fdivp st(2)
fxch st(1)
fstp dword [esp + 0x40]
fld dword [esp + 0x40]
fstp dword [esp + 8]
fild dword [esp + 0x2c]
fdiv st(1)
fstp dword [esp + 0x40]
fld dword [esp + 0x40]
fstp dword [esp + 4]
fidivr dword [esp + 0x28]
fstp dword [esp + 0x40]
fld dword [esp + 0x40]
fstp dword [esp]
push edx
jmp 0x40d618
fild dword [esp + 0x30]
mov eax, dword [esp + 0x24]
fstp dword [esp + 8]
fild dword [esp + 0x2c]
fstp dword [esp + 4]
fild dword [esp + 0x28]
fstp dword [esp]
push eax
call fcn.004335b0
add esp, 4
push eax
call fcn.00432d10
add esp, 0x14
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edx, dword [esp + 0x1c]
push edx
mov dword [esp + 0x34], eax
add esi, 4
call fcn.0046b570
add esp, 0xc
neg eax
sbb eax, eax
neg eax
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
cmp eax, 0x4000a0a
je 0x415852
cmp eax, 0x4000b03
je 0x40d708
cmp eax, 0x4000c06
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x94]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0xa0]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0xac]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0xb8]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esp + 0x3c]
add esp, 0x28
push 0
lea edx, [esp + 0x90]
push edx
push eax
add esi, 4
call fcn.004335b0
add esp, 4
push eax
call fcn.004338a0
add esp, 0xc
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov ecx, dword [esp + 0x28]
add esp, 0x10
add esi, 4
test ecx, ecx
jne 0x40d73d
mov ecx, 0xb
mov dword [esp + 0x18], ecx
mov eax, dword [0x4bbfc8]
shl eax, 5
add ecx, eax
push ecx
push eax
call fcn.00431b80
mov eax, dword [0x4bbfc8]
mov edx, dword [esp + 0x20]
shl eax, 5
lea ecx, [eax + edx]
push ecx
push eax
call fcn.0043ac80
mov edx, dword [0x4bbfc8]
mov eax, dword [esp + 0x24]
shl edx, 5
push edx
push eax
call fcn.0043c0e0
add esp, 0x18
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
fild dword [esp + 0x34]
mov edx, dword [esp + 0x2c]
add esp, 0x18
push 0
sub esp, 8
fstp dword [esp + 4]
add esi, 4
fild dword [esp + 0x24]
fstp dword [esp]
push edx
call fcn.004335b0
add esp, 4
push eax
call fcn.004322c0
add esp, 0x10
jmp case.default.0x4109ad
cmp eax, 0x4001105
ja 0x40d968
je 0x40d8f6
cmp eax, 0x4000e03
je 0x40d8b0
cmp eax, 0x4000f03
je 0x40d86d
cmp eax, 0x4001003
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x24]
push eax
add esi, 4
call fcn.004335b0
add esp, 0x14
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
push ecx
push edx
call fcn.004335b0
add esp, 4
push eax
call fcn.00431c50
add esp, 8
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x28]
add esp, 0x10
add esi, 4
test eax, eax
je case.default.0x4109ad
push eax
mov eax, dword [esp + 0x18]
push eax
call fcn.00433b10
add esp, 8
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
add esp, 0x10
push 3
push eax
push ecx
add esi, 4
call fcn.004335b0
add esp, 4
push eax
call fcn.00433470
add esp, 0xc
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x38]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
add esp, 0x20
push 0
push edx
mov edx, dword [esp + 0x1c]
push eax
push ecx
push edx
add esi, 4
call fcn.004335b0
add esp, 4
push eax
call fcn.00437110
add esp, 0x14
jmp case.default.0x4109ad
cmp eax, 0x4001204
je 0x40dab8
cmp eax, 0x4001306
je 0x40da07
cmp eax, 0x4001405
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edi, dword [esi + 4]
add esi, 4
lea edx, [esp + 0x24]
add esi, 4
mov dword [esp + 0x20], edi
mov eax, dword [esi]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x30]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x34]
add esp, 0x18
push edx
push edi
add esi, 4
call fcn.004022d0
add esp, 4
push eax
mov eax, dword [esp + 0x1c]
push eax
call fcn.0043c200
add esp, 0xc
test al, al
je 0x407159
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0046b5b0
add esp, 4
mov edx, dword [esp + 0x14]
mov dword [0x6c77a8], edx
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x28
add esi, 4
cmp dword [esp + 0x20], edi
je 0x40da6e
fild dword [esp + 0x1c]
fidiv dword [esp + 0x20]
jmp 0x40da80
mov edx, dword [esp + 0x1c]
fild dword [esp + 0x1c]
test edx, edx
jge 0x40da80
fadd dword [0x49a4d0]
mov eax, dword [esp + 0x2c]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
mov ecx, dword [esp + 0x14]
push 0
push eax
sub esp, 8
fstp dword [esp + 4]
fild dword [esp + 0x28]
fstp dword [esp]
push ecx
call fcn.004335b0
add esp, 4
push eax
call fcn.00433eb0
add esp, 0x14
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
fild dword [esp + 0x34]
mov eax, dword [esp + 0x2c]
add esp, 0x10
fstp dword [esp + 4]
add esi, 4
fild dword [esp + 0x20]
fstp dword [esp]
push eax
call fcn.004335b0
add esp, 4
push eax
call fcn.00433d80
add esp, 0xc
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
fild dword [esp + 0x34]
mov edx, dword [esp + 0x2c]
add esp, 0x18
push 0
sub esp, 8
fstp dword [esp + 4]
add esi, 4
fild dword [esp + 0x24]
fstp dword [esp]
push edx
call fcn.004335b0
add esp, 4
push eax
call fcn.00431ea0
add esp, 0x10
jmp case.default.0x4109ad
cmp eax, 0x4010605
ja 0x40e4c7
je 0x40e43e
cmp eax, 0x4010206
ja 0x40df6a
je 0x40dec1
cmp eax, 0x4001803
ja 0x40dd46
je 0x40dce3
sub eax, 0x4001604
je 0x40dc87
sub eax, 0x100
je 0x40dc24
sub eax, 1
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x34]
add esp, 0x20
push eax
mov eax, dword [esp + 0x1c]
push ecx
push edx
push 0xffffffffffffffff
push eax
jmp 0x40dc69
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
add esp, 0x18
push 0
push edx
push eax
push 0xffffffffffffffff
push ecx
add esi, 4
call fcn.004335b0
add esp, 4
push eax
call fcn.0043c1b0
add esp, 0x14
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x2c]
add esp, 0x18
push 0
push eax
push ecx
push edx
add esi, 4
call fcn.004335b0
add esp, 4
push eax
call fcn.00433a60
add esp, 0x10
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov ecx, dword [esp + 0x28]
mov eax, ecx
add esp, 0x10
add esi, 4
sub eax, 0
je 0x40dd28
sub eax, 1
je 0x40dd21
sub eax, 8
jne 0x40dd2e
lea ecx, [eax + 1]
jmp 0x40dd2a
mov ecx, 2
jmp 0x40dd2a
xor ecx, ecx
mov dword [esp + 0x18], ecx
mov eax, dword [esp + 0x14]
push ecx
push eax
call fcn.0043ad50
add esp, 8
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
cmp eax, 0x4010001
je 0x40de73
cmp eax, 0x4010103
je 0x40ddfc
cmp eax, 0x4010205
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
add esp, 0x20
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
push eax
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
fild dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
push 0
push 0
push 0
sub esp, 8
fstp dword [esp + 4]
fild dword [esp + 0x30]
fstp dword [esp]
push eax
push ecx
mov ecx, dword [0x6c77ac]
call fcn.0043c710
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
xor edx, edx
add esp, 0x10
add esi, 4
cmp dword [esp + 0x18], edx
sete dl
cmp dword [0x6c77ac], edi
mov dword [0x4b4004], edx
je case.default.0x4109ad
call fcn.004753b0
mov ecx, dword [esp + 0x14]
lea edx, [eax + ecx]
mov ecx, dword [0x6c77ac]
push edx
push eax
mov dword [esp + 0x30], eax
call fcn.00437440
test dword [0x6c77b0], 0x10000000
je 0x4141c1
mov dword [ebx], 5
jmp case.default.0x4109ad
mov ecx, dword [0x6c77ac]
cmp ecx, ebp
je 0x40de84
push 1
call fcn.00402770
push 0x1520
call fcn.004813ee
add esp, 4
mov dword [esp + 0x30], eax
test eax, eax
mov dword [esp + 0x394], 0xa
je 0x40deb5
mov ecx, eax
call fcn.00437410
mov dword [0x6c77ac], eax
jmp case.default.0x4109ad
xor eax, eax
mov dword [0x6c77ac], eax
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x28
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov edx, dword [esp + 0x18]
push edx
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x2c]
fild dword [esp + 0x20]
mov edx, dword [esp + 0x14]
push 1
push ecx
mov ecx, dword [0x6c77ac]
push 0
sub esp, 8
fstp dword [esp + 4]
fild dword [esp + 0x30]
fstp dword [esp]
push eax
push edx
call fcn.0043c710
jmp case.default.0x4109ad
cmp eax, 0x4010407
ja 0x40e2ac
je 0x40e1ea
sub eax, 0x4010307
je 0x40e123
sub eax, 1
je 0x40e048
sub eax, 0xfe
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x28
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov edx, dword [esp + 0x18]
push edx
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
fild dword [esp + 0x2c]
mov ecx, dword [0x6c77ac]
push 0
push 0
push 0
sub esp, 0xc
fstp dword [esp + 8]
fild dword [esp + 0x38]
fstp dword [esp + 4]
fild dword [esp + 0x34]
fstp dword [esp]
push eax
mov eax, dword [esp + 0x30]
push eax
call fcn.0043c880
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x68]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x38
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov edx, dword [esp + 0x18]
push edx
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x38]
fild dword [esp + 0x24]
mov edx, dword [esp + 0x14]
push 1
push ecx
mov ecx, dword [0x6c77ac]
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [esp + 0x48]
fstp dword [esp + 8]
fild dword [esp + 0x3c]
fstp dword [esp + 4]
fild dword [esp + 0x38]
fstp dword [esp]
push eax
push edx
call fcn.0043c780
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
add esp, 0x30
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
push eax
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
fild dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
push 0
push 0
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [esp + 0x48]
fstp dword [esp + 8]
fild dword [esp + 0x3c]
fstp dword [esp + 4]
fild dword [esp + 0x38]
fstp dword [esp]
push eax
push ecx
mov ecx, dword [0x6c77ac]
call fcn.0043c780
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x38]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x30
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov edx, dword [esp + 0x18]
push edx
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x24]
fild dword [esp + 0x2c]
mov edx, dword [esp + 0x14]
push 1
push ecx
mov ecx, dword [0x6c77ac]
push 0
sub esp, 0xc
fstp dword [esp + 8]
fild dword [esp + 0x38]
fstp dword [esp + 4]
fild dword [esp + 0x34]
fstp dword [esp]
push eax
push edx
call fcn.0043c880
jmp case.default.0x4109ad
sub eax, 0x4010504
je 0x40e3c9
sub eax, 1
je 0x40e340
sub eax, 0xff
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x18
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov edx, dword [esp + 0x18]
push edx
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
push 0
push 0
push ecx
mov ecx, dword [0x6c77ac]
push eax
push edx
call fcn.0043ca90
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
add esp, 0x20
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
push eax
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push 1
push ecx
mov ecx, dword [0x6c77ac]
push edx
push eax
mov eax, dword [esp + 0x24]
push eax
call fcn.0043ca20
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x18
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov edx, dword [esp + 0x18]
push edx
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
push 0
push 0
push ecx
mov ecx, dword [0x6c77ac]
push eax
push edx
call fcn.0043ca20
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
add esp, 0x20
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
push eax
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push 1
push ecx
mov ecx, dword [0x6c77ac]
push edx
push eax
mov eax, dword [esp + 0x24]
push eax
call fcn.0043ca90
jmp case.default.0x4109ad
cmp eax, 0x4010a08
ja 0x40eaf9
je 0x40ea2c
cmp eax, 0x4010809
ja 0x40e7e4
je 0x40e6f0
sub eax, 0x4010704
je 0x40e676
sub eax, 1
je 0x40e5e8
sub eax, 0x103
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x68]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x38
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov edx, dword [esp + 0x18]
push edx
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
fild dword [esp + 0x38]
push 0
push 0
mov ecx, dword [0x6c77ac]
push 1
sub esp, 0x14
fstp dword [esp + 0x10]
fild dword [esp + 0x44]
fstp dword [esp + 0xc]
fild dword [esp + 0x4c]
fstp dword [esp + 8]
fild dword [esp + 0x40]
fstp dword [esp + 4]
fild dword [esp + 0x3c]
fstp dword [esp]
push eax
mov eax, dword [esp + 0x38]
push eax
call fcn.0043cc80
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
add esp, 0x20
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
push eax
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x20]
fild dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
push 1
push ecx
push 0
push ecx
mov ecx, dword [0x6c77ac]
fstp dword [esp]
push eax
push edx
call fcn.0043cc10
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x18
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov edx, dword [esp + 0x18]
push edx
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
fild dword [esp + 0x1c]
push 0
push 0
push 0
push ecx
mov ecx, dword [0x6c77ac]
fstp dword [esp]
push eax
mov eax, dword [esp + 0x28]
push eax
call fcn.0043cc10
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x68]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x74]
add esi, 4
push edx
push eax
call section..text
add esp, 0x40
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
push eax
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x3c]
fild dword [esp + 0x38]
push 1
mov edx, dword [esp + 0x18]
push ecx
mov ecx, dword [0x6c77ac]
push 1
sub esp, 0x14
fstp dword [esp + 0x10]
fild dword [esp + 0x44]
fstp dword [esp + 0xc]
fild dword [esp + 0x4c]
fstp dword [esp + 8]
fild dword [esp + 0x40]
fstp dword [esp + 4]
fild dword [esp + 0x3c]
fstp dword [esp]
push eax
push edx
call fcn.0043cc80
jmp case.default.0x4109ad
sub eax, 0x4010906
je 0x40e97e
sub eax, 1
je 0x40e8bc
sub eax, 0x100
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
add esp, 0x30
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
push eax
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x2c]
push 0
push 0
push 0
push ecx
mov ecx, dword [esp + 0x30]
push edx
mov edx, dword [esp + 0x30]
push ecx
mov ecx, dword [0x6c77ac]
push edx
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.0043ce80
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
add esp, 0x30
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
push eax
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x24]
fild dword [esp + 0x2c]
mov edx, dword [esp + 0x14]
push 1
push ecx
mov ecx, dword [0x6c77ac]
push 0
sub esp, 0xc
fstp dword [esp + 8]
fild dword [esp + 0x38]
fstp dword [esp + 4]
fild dword [esp + 0x34]
fstp dword [esp]
push eax
push edx
call fcn.0043ce10
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x28
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov edx, dword [esp + 0x18]
push edx
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
fild dword [esp + 0x2c]
mov ecx, dword [0x6c77ac]
push 0
push 0
push 0
sub esp, 0xc
fstp dword [esp + 8]
fild dword [esp + 0x38]
fstp dword [esp + 4]
fild dword [esp + 0x34]
fstp dword [esp]
push eax
mov eax, dword [esp + 0x30]
push eax
call fcn.0043ce10
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x68]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x38
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov edx, dword [esp + 0x18]
push edx
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x24]
push 1
push ecx
mov ecx, dword [esp + 0x34]
push 0
push edx
mov edx, dword [esp + 0x30]
push ecx
mov ecx, dword [esp + 0x30]
push edx
mov edx, dword [esp + 0x2c]
push ecx
mov ecx, dword [0x6c77ac]
push eax
push edx
call fcn.0043ce80
jmp case.default.0x4109ad
cmp eax, 0x4010d05
ja 0x40eca7
je 0x40ec1c
cmp eax, 0x4010b03
je 0x40ebd4
cmp eax, 0x4010c02
je 0x40eba2
cmp eax, 0x4010d04
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x18
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov edx, dword [esp + 0x18]
push edx
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
push 0
push 0
push 0
push ecx
mov ecx, dword [0x6c77ac]
push eax
push edx
call fcn.0043cf00
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov ecx, dword [0x6c77ac]
add esp, 8
add esi, 4
test ecx, ecx
je case.default.0x4109ad
mov edx, dword [esp + 0x14]
push 0
push edx
call fcn.0043b9d0
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov ecx, dword [0x6c77ac]
add esp, 0x10
add esi, 4
test ecx, ecx
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
push 1
push eax
push edx
call fcn.0043cfe0
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
add esp, 0x20
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
push eax
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push 1
push ecx
mov ecx, dword [0x6c77ac]
push 0
push edx
push eax
mov eax, dword [esp + 0x28]
push eax
call fcn.0043cf00
jmp case.default.0x4109ad
sub eax, 0x4010e07
je 0x40ed96
sub eax, 1
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x68]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x38
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov edx, dword [esp + 0x18]
push edx
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x38]
fild dword [esp + 0x24]
mov edx, dword [esp + 0x14]
push 1
push ecx
mov ecx, dword [0x6c77ac]
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [esp + 0x48]
fstp dword [esp + 8]
fild dword [esp + 0x3c]
fstp dword [esp + 4]
fild dword [esp + 0x38]
fstp dword [esp]
push eax
push edx
call fcn.0043c800
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
add esp, 0x30
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
push eax
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
fild dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
push 0
push 0
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [esp + 0x48]
fstp dword [esp + 8]
fild dword [esp + 0x3c]
fstp dword [esp + 4]
fild dword [esp + 0x38]
fstp dword [esp]
push eax
push ecx
mov ecx, dword [0x6c77ac]
call fcn.0043c800
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x38]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x68]
add esi, 4
push edx
push eax
call section..text
add esp, 0x38
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
push eax
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x38]
fild dword [esp + 0x24]
mov edx, dword [esp + 0x14]
push 0
push 0
push 0
push ecx
mov ecx, dword [0x6c77ac]
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [esp + 0x4c]
fstp dword [esp + 8]
fild dword [esp + 0x40]
fstp dword [esp + 4]
fild dword [esp + 0x3c]
fstp dword [esp]
push eax
push edx
call fcn.0043c970
jmp case.default.0x4109ad
cmp eax, 0x4020406
ja 0x410bb6
je 0x410aac
cmp eax, 0x4011705
ja 0x40fbdf
je 0x40fb4a
cmp eax, 0x4011307
ja 0x40f4e9
je 0x40f422
cmp eax, 0x4011105
ja 0x40f245
je 0x40f1b8
sub eax, 0x4010f09
je 0x40f0c7
sub eax, 0xfc
je 0x40f03c
sub eax, 1
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x28
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov edx, dword [esp + 0x18]
push edx
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x20]
push 1
push ecx
mov ecx, dword [esp + 0x24]
push edx
mov edx, dword [esp + 0x20]
push ecx
mov ecx, dword [0x6c77ac]
push eax
push edx
call fcn.0043cb00
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
add esp, 0x20
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
push eax
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push 0
push 0
push ecx
mov ecx, dword [0x6c77ac]
push edx
push eax
mov eax, dword [esp + 0x28]
push eax
call fcn.0043cb00
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x68]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x74]
add esi, 4
push edx
push eax
call section..text
add esp, 0x40
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
push eax
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x3c]
fild dword [esp + 0x24]
mov edx, dword [esp + 0x38]
push 1
push ecx
mov ecx, dword [0x6c77ac]
push 0
push edx
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [esp + 0x4c]
fstp dword [esp + 8]
fild dword [esp + 0x40]
fstp dword [esp + 4]
fild dword [esp + 0x3c]
fstp dword [esp]
push eax
mov eax, dword [esp + 0x38]
push eax
call fcn.0043c970
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
add esp, 0x20
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
push eax
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push 0
push 0
push ecx
push edx
push 0
mov ecx, dword [0x6c77ac]
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.0043cb80
jmp case.default.0x4109ad
sub eax, 0x4011106
je 0x40f381
sub eax, 0xff
je 0x40f305
sub eax, 1
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x28
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov edx, dword [esp + 0x18]
push edx
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x20]
push 1
push ecx
mov ecx, dword [esp + 0x24]
push edx
mov edx, dword [esp + 0x20]
push ecx
mov ecx, dword [0x6c77ac]
push 1
push eax
push edx
call fcn.0043cb80
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
add esp, 0x20
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
push eax
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push 0
push 0
push ecx
push edx
push 1
jmp 0x40f22f
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x28
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov edx, dword [esp + 0x18]
push edx
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x20]
push 1
push ecx
mov ecx, dword [esp + 0x24]
push edx
mov edx, dword [esp + 0x20]
push ecx
mov ecx, dword [0x6c77ac]
push 0
push eax
push edx
call fcn.0043cb80
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
add esp, 0x30
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
push eax
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
fild dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
push 0
push 0
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [esp + 0x48]
fstp dword [esp + 8]
fild dword [esp + 0x3c]
fstp dword [esp + 4]
fild dword [esp + 0x38]
fstp dword [esp]
push eax
push ecx
mov ecx, dword [0x6c77ac]
call fcn.0043d020
jmp case.default.0x4109ad
cmp eax, 0x4011508
ja 0x40f8dd
je 0x40f7fd
sub eax, 0x4011308
je 0x40f722
sub eax, 0x101
je 0x40f629
sub eax, 1
jne 0x415de4
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x38]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x68]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x74]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
add esp, 0x40
lea edx, [esp + 0x34]
add esi, 4
push edx
push eax
call section..text
add esp, 8
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
push eax
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x34]
fild dword [esp + 0x3c]
push 1
push ecx
push 0
sub esp, 0x18
fstp dword [esp + 0x14]
mov edx, dword [esp + 0x38]
fild dword [esp + 0x5c]
mov ecx, dword [0x6c77ac]
fstp dword [esp + 0x10]
fild dword [esp + 0x48]
fstp dword [esp + 0xc]
fild dword [esp + 0x50]
fstp dword [esp + 8]
fild dword [esp + 0x44]
fstp dword [esp + 4]
fild dword [esp + 0x40]
fstp dword [esp]
push eax
push edx
call fcn.0043d0c0
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x68]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x74]
add esi, 4
push edx
push eax
call section..text
add esp, 0x40
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
push eax
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
fild dword [esp + 0x3c]
push 0
push 0
mov ecx, dword [esp + 0x1c]
push 0
sub esp, 0x18
fstp dword [esp + 0x14]
fild dword [esp + 0x5c]
fstp dword [esp + 0x10]
fild dword [esp + 0x48]
fstp dword [esp + 0xc]
fild dword [esp + 0x50]
fstp dword [esp + 8]
fild dword [esp + 0x44]
fstp dword [esp + 4]
fild dword [esp + 0x40]
fstp dword [esp]
push eax
push ecx
mov ecx, dword [0x6c77ac]
call fcn.0043d0c0
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x38]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x68]
add esi, 4
push edx
push eax
call section..text
add esp, 0x38
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
push eax
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x38]
fild dword [esp + 0x24]
mov edx, dword [esp + 0x14]
push 1
push ecx
mov ecx, dword [0x6c77ac]
push 0
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [esp + 0x48]
fstp dword [esp + 8]
fild dword [esp + 0x3c]
fstp dword [esp + 4]
fild dword [esp + 0x38]
fstp dword [esp]
push eax
push edx
call fcn.0043d020
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x68]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x38
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov edx, dword [esp + 0x18]
push edx
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
fild dword [esp + 0x38]
push 0
push 0
mov ecx, dword [0x6c77ac]
push 1
sub esp, 0x14
fstp dword [esp + 0x10]
fild dword [esp + 0x44]
fstp dword [esp + 0xc]
fild dword [esp + 0x4c]
fstp dword [esp + 8]
fild dword [esp + 0x40]
fstp dword [esp + 4]
fild dword [esp + 0x3c]
fstp dword [esp]
push eax
mov eax, dword [esp + 0x38]
push eax
call fcn.0043cd20
jmp case.default.0x4109ad
sub eax, 0x4011509
je 0x40fa56
sub eax, 0xfd
je 0x40f9b3
sub eax, 1
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
add esp, 0x30
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
push eax
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x2c]
push 1
push ecx
mov ecx, dword [esp + 0x28]
push 0
push edx
mov edx, dword [esp + 0x2c]
push ecx
mov ecx, dword [0x6c77ac]
push edx
push eax
mov eax, dword [esp + 0x30]
push eax
call fcn.0043d1c0
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x28
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov edx, dword [esp + 0x18]
push edx
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x20]
push 0
push 0
push 0
push ecx
mov ecx, dword [esp + 0x2c]
push edx
mov edx, dword [esp + 0x28]
push ecx
mov ecx, dword [0x6c77ac]
push eax
push edx
call fcn.0043d1c0
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x68]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x74]
add esi, 4
push edx
push eax
call section..text
add esp, 0x40
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
push eax
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x3c]
fild dword [esp + 0x38]
push 1
mov edx, dword [esp + 0x18]
push ecx
mov ecx, dword [0x6c77ac]
push 1
sub esp, 0x14
fstp dword [esp + 0x10]
fild dword [esp + 0x44]
fstp dword [esp + 0xc]
fild dword [esp + 0x4c]
fstp dword [esp + 8]
fild dword [esp + 0x40]
fstp dword [esp + 4]
fild dword [esp + 0x3c]
fstp dword [esp]
push eax
push edx
call fcn.0043cd20
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
add esp, 0x20
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
push eax
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
fild dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
push 0
push 0
push 0
sub esp, 8
fstp dword [esp + 4]
fild dword [esp + 0x30]
fstp dword [esp]
push eax
push ecx
mov ecx, dword [0x6c77ac]
call fcn.0043d230
jmp case.default.0x4109ad
cmp eax, 0x4012204
ja 0x4101fe
je 0x410184
cmp eax, 0x4012006
ja 0x40ff33
je 0x40fe85
sub eax, 0x4011706
je 0x40fddc
sub eax, 0x101
je 0x40fd08
sub eax, 1
jne 0x415de4
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x38]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x68]
add esi, 4
push edx
push eax
call section..text
add esp, 0x38
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
push eax
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
cmp dword [esp + 0x2c], edi
je 0x40fcca
fild dword [esp + 0x20]
fidiv dword [esp + 0x2c]
jmp 0x40fcce
fild dword [esp + 0x20]
mov ecx, dword [esp + 0x38]
fstp dword [esp + 0x30]
mov edx, dword [esp + 0x24]
fld dword [esp + 0x30]
push 1
push ecx
mov ecx, dword [0x6c77ac]
push 0
push edx
sub esp, 8
fstp dword [esp + 4]
fild dword [esp + 0x34]
fstp dword [esp]
push eax
mov eax, dword [esp + 0x30]
push eax
call fcn.0043d2a0
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
add esp, 0x30
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
push eax
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
cmp dword [esp + 0x2c], edi
je 0x40fda1
fild dword [esp + 0x20]
fidiv dword [esp + 0x2c]
jmp 0x40fda5
fild dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
mov edx, dword [esp + 0x14]
push 0
push 0
push 0
push ecx
mov ecx, dword [0x6c77ac]
sub esp, 8
fstp dword [esp + 4]
fild dword [esp + 0x34]
fstp dword [esp]
push eax
push edx
call fcn.0043d2a0
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x28
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov edx, dword [esp + 0x18]
push edx
call fcn.004335b0
add esp, 4
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x2c]
fild dword [esp + 0x20]
mov edx, dword [esp + 0x14]
push 1
push ecx
mov ecx, dword [0x6c77ac]
push 0
sub esp, 8
fstp dword [esp + 4]
fild dword [esp + 0x30]
fstp dword [esp]
push eax
push edx
call fcn.0043d230
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x28
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov edx, dword [esp + 0x18]
push edx
call fcn.00460390
add esp, 4
test eax, eax
je case.default.0x4109ad
fild dword [esp + 0x2c]
mov ecx, dword [0x6c77ac]
push 1
push 0
push 0
sub esp, 0xc
fstp dword [esp + 8]
fild dword [esp + 0x38]
fstp dword [esp + 4]
fild dword [esp + 0x34]
fstp dword [esp]
push eax
mov eax, dword [esp + 0x30]
push eax
call fcn.0043d310
jmp case.default.0x4109ad
sub eax, 0x4012007
je 0x4100c2
sub eax, 0xff
je 0x410014
sub eax, 1
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
add esp, 0x30
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
push eax
call fcn.00460390
add esp, 4
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x24]
fild dword [esp + 0x2c]
mov edx, dword [esp + 0x14]
push 1
push ecx
mov ecx, dword [0x6c77ac]
push 0
sub esp, 0xc
fstp dword [esp + 8]
fild dword [esp + 0x38]
fstp dword [esp + 4]
fild dword [esp + 0x34]
fstp dword [esp]
push eax
push edx
call fcn.0043d370
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x28
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov edx, dword [esp + 0x18]
push edx
call fcn.00460390
add esp, 4
test eax, eax
je case.default.0x4109ad
fild dword [esp + 0x2c]
mov ecx, dword [0x6c77ac]
push 1
push 0
push 0
sub esp, 0xc
fstp dword [esp + 8]
fild dword [esp + 0x38]
fstp dword [esp + 4]
fild dword [esp + 0x34]
fstp dword [esp]
push eax
mov eax, dword [esp + 0x30]
push eax
call fcn.0043d370
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
add esp, 0x30
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
push eax
call fcn.00460390
add esp, 4
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x24]
fild dword [esp + 0x2c]
mov edx, dword [esp + 0x14]
push 1
push ecx
mov ecx, dword [0x6c77ac]
push 0
sub esp, 0xc
fstp dword [esp + 8]
fild dword [esp + 0x38]
fstp dword [esp + 4]
fild dword [esp + 0x34]
fstp dword [esp]
push eax
push edx
call fcn.0043d310
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x18
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov edx, dword [esp + 0x18]
push edx
call fcn.00460390
add esp, 4
test eax, eax
je case.default.0x4109ad
fild dword [esp + 0x1c]
push 1
push 0
push 0
push ecx
mov ecx, dword [0x6c77ac]
fstp dword [esp]
push eax
mov eax, dword [esp + 0x28]
push eax
call fcn.0043d3e0
jmp case.default.0x4109ad
cmp eax, 0x4020101
ja 0x41070d
je 0x410696
cmp eax, 0x4012205
je 0x410608
cmp eax, 0x4018004
je 0x4105a8
cmp eax, 0x4020005
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
mov ebx, dword [esp + 0x1c]
add esi, 4
add esp, 8
cmp eax, 0x40000001
jne 0x410273
cmp ebx, 5
ja case.default.0x410256
jmp dword [ebx*4 + 0x4162e0]
mov edi, 7
mov dword [esp + 0x18], edi
jmp case.default.0x410256
mov edi, 4
mov dword [esp + 0x18], edi
jmp case.default.0x410256
lea edx, [esp + 0x18]
push edx
push eax
call section..text
mov edi, dword [esp + 0x20]
add esp, 8
mov eax, dword [esi + 4]
add esi, 4
cmp eax, 0x40000001
mov ecx, 0x3e8
jne 0x4102b3
cmp ebx, 5
ja case.default.0x41029c
jmp dword [ebx*4 + 0x4162f8]
mov dword [esp + 0x1c], 0x14
jmp case.default.0x41029c
mov dword [esp + 0x1c], ecx
jmp case.default.0x41029c
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
mov eax, dword [esi + 4]
add esi, 4
cmp eax, 0x40000001
jne 0x4102f8
cmp ebx, 5
ja case.default.0x4102d3
jmp dword [ebx*4 + 0x416310]
mov ebp, 0x3e8
mov dword [esp + 0x20], ebp
jmp case.default.0x4102d3
xor ebp, ebp
mov dword [esp + 0x20], ebp
jmp case.default.0x4102d3
mov ebp, 1
mov dword [esp + 0x20], ebp
jmp case.default.0x4102d3
lea edx, [esp + 0x20]
push edx
push eax
call section..text
mov ebp, dword [esp + 0x28]
add esp, 8
add esi, 4
cmp ebx, 5
ja case.default.0x4109ad
jmp dword [ebx*4 + 0x416328]
test dword [0x6c77b0], 0x10000000
mov eax, dword [esp + 0x1c]
mov dword [0x6c7798], 3
mov dword [0x6c779c], edi
mov dword [0x6c77a0], eax
mov dword [0x6c77a4], ebp
je case.default.0x4109ad
mov ecx, dword [esp + 0x34]
test byte [ecx], 2
jne 0x410366
push str.snow.epa
call fcn.00464570
mov edi, dword [esp + 0x1c]
add esp, 4
cmp edi, 0x64
jb 0x41037e
push 0xf0
push 8
call fcn.00464650
mov edi, dword [esp + 0x20]
add esp, 8
mov eax, 0x51eb851f
mul edi
shr edx, 5
imul edx, edx, 0x64
sub edi, edx
cmp edi, 8
ja case.default.0x410396
jmp dword [edi*4 + 0x416340]
push 0x20
push 5
call fcn.00464650
push 0x3c
jmp 0x410413
push 0x80
push 5
call fcn.00464650
push 0x3c
jmp 0x410413
push pe_nt_image_headers32
push 5
call fcn.00464650
push 0x3c
jmp 0x410413
push 0x20
push 5
call fcn.00464650
push 0x78
jmp 0x410413
push 0x80
push 5
call fcn.00464650
push 0x78
jmp 0x410413
push pe_nt_image_headers32
push 5
call fcn.00464650
push 0x78
jmp 0x410413
push 0x20
jmp 0x410407
push 0x80
jmp 0x410407
push pe_nt_image_headers32
push 5
call fcn.00464650
push 0xf0
push 4
call fcn.00464650
add esp, 0x10
mov edx, dword [esp + 0x1c]
push edx
push 3
call fcn.00464650
mov eax, dword [esp + 0x28]
push eax
push 7
call fcn.00464650
mov edi, dword [esp + 0x44]
add esp, 0x10
test byte [edi], 2
jne 0x41044b
push 0x64
call fcn.00464d80
add esp, 4
or dword [edi], 2
jmp case.default.0x4109ad
mov ecx, dword [0x6c77ac]
test ecx, ecx
je 0x410464
push 1
call fcn.00402770
push 0x1520
call fcn.004813ee
add esp, 4
mov dword [esp + 0x30], eax
test eax, eax
mov dword [esp + 0x394], 0xb
je 0x41048d
mov ecx, eax
call fcn.00437410
jmp 0x41048f
xor eax, eax
test eax, eax
mov dword [esp + 0x394], 0xffffffff
mov dword [0x6c77ac], eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x18]
test ecx, ecx
jne 0x4104b8
mov ecx, 4
mov dword [esp + 0x18], ecx
mov edi, dword [esp + 0x1c]
test edi, edi
jne 0x4104c9
mov edi, 0x3e8
mov dword [esp + 0x1c], edi
mov edx, dword [esp + 0x20]
cmp edx, 1
jne 0x4104db
mov edx, 0xffffff
mov dword [esp + 0x20], edx
push 0
push 0
push edx
push edi
push ecx
push 0
mov ecx, eax
call fcn.0043cda0
mov edi, eax
call fcn.004753b0
mov ecx, dword [0x6c77ac]
add edi, eax
push edi
push eax
mov dword [esp + 0x30], eax
call fcn.00437440
mov ecx, dword [esp + 0x38]
mov dword [ecx], 5
jmp case.default.0x4109ad
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x1c]
push edx
push eax
push 0
push ebp
push ecx
push edi
push 0x80010000
call fcn.004038c0
add esp, 0x1c
jmp case.default.0x4109ad
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x1c]
push edx
push eax
push 0
push ebp
push ecx
push edi
push 0x80020000
call fcn.004038c0
add esp, 0x1c
jmp case.default.0x4109ad
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x1c]
push edx
push eax
push 0
push ebp
push ecx
push edi
push 0x80030000
call fcn.004038c0
add esp, 0x1c
jmp case.default.0x4109ad
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x1c]
push edx
push eax
push 0
push ebp
push ecx
push edi
push 0x80040000
call fcn.004038c0
add esp, 0x1c
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov ecx, dword [0x6c77ac]
add esp, 0x18
add esi, 4
test ecx, ecx
je case.default.0x4109ad
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push 1
push eax
mov eax, dword [esp + 0x1c]
push 0
push edx
push eax
call fcn.0043d430
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
add esp, 0x20
add esi, 4
cmp dword [0x6c77ac], edi
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
push eax
call fcn.00460390
add esp, 4
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x20]
fild dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
push 1
push ecx
push 0
push ecx
mov ecx, dword [0x6c77ac]
fstp dword [esp]
push eax
push edx
call fcn.0043d3e0
jmp case.default.0x4109ad
test byte [ecx], 1
je 0x4106b5
mov eax, ecx
push eax
push ebx
push 0
push 0
push 0
push 0
push 0
call fcn.004038c0
mov ecx, dword [esp + 0x50]
add esp, 0x1c
test byte [ecx], 2
je 0x4106c8
call fcn.00464630
call fcn.00464d30
mov ecx, dword [esp + 0x34]
test byte [ecx], 4
je 0x4106db
call fcn.00462210
call fcn.004627a0
mov ecx, dword [esp + 0x34]
test byte [ecx], 8
je 0x4106ee
call fcn.00463480
call fcn.00463c60
mov ecx, dword [esp + 0x34]
xor eax, eax
mov dword [0x6c7788], eax
mov dword [0x6c7798], eax
mov dword [0x6cdecc], eax
mov dword [0x6cdeec], eax
mov dword [ecx], eax
mov dword [ebx], eax
jmp case.default.0x4109ad
cmp eax, 0x4020204
je 0x410910
cmp eax, 0x4020305
je 0x41081a
cmp eax, 0x4020405
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
mov dword [0x6cdef0], eax
mov eax, dword [esp + 0x40]
mov dword [0x6cdf08], edi
mov edi, dword [esp + 0x54]
add esp, 0x20
add esi, 4
mov dword [0x6cdeec], 1
mov dword [0x6cdef4], ecx
mov dword [0x6cdef8], edx
mov dword [0x6cdefc], eax
mov dword [0x6cdf00], 0xc8
mov dword [0x6cdf04], 0x7d0
test byte [edi], 4
jne 0x4107cc
call fcn.004621b0
mov ecx, dword [esp + 0x14]
push ecx
push 3
call fcn.00462230
mov edx, dword [esp + 0x20]
push edx
push 5
call fcn.00462230
push 0x7d0
push 4
call fcn.00462230
mov eax, dword [esp + 0x34]
push eax
push 9
call fcn.00462230
mov ecx, dword [esp + 0x40]
push ecx
push 0xa
call fcn.00462230
push 0
call fcn.004632c0
add esp, 0x2c
or dword [edi], 4
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x38]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x3c]
mov dword [0x6cded0], edx
mov edx, dword [esp + 0x40]
add esp, 0x20
add esi, 4
mov dword [0x6cdecc], eax
sub eax, 1
mov dword [0x6cded4], ecx
mov dword [0x6cded8], edx
je 0x4108b7
sub eax, 1
je 0x41089d
sub eax, 1
jne 0x4108d6
push str.sakura3.epa
jmp 0x4108bc
push str.sakura2.epa
call fcn.004633e0
push 0x384
push 3
call fcn.004634a0
push 0
jmp 0x4108cc
push 0x49a468
call fcn.004633e0
push 0
push 3
call fcn.004634a0
push 0xa
push 8
call fcn.004634a0
add esp, 0x14
mov eax, dword [esp + 0x20]
push eax
push 5
call fcn.004634a0
mov ecx, dword [esp + 0x24]
push ecx
push 4
call fcn.004634a0
mov edx, dword [esp + 0x28]
push edx
push 9
call fcn.004634a0
push 0x64
call fcn.00463cb0
mov eax, dword [esp + 0x50]
add esp, 0x1c
or dword [eax], 8
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov ecx, dword [esi + 4]
mov eax, dword [esp + 0x28]
add esi, 4
add esp, 0x10
add esi, 4
cmp eax, 0xd
mov dword [esp + 0x1c], ecx
ja case.0x410947.0
jmp dword [eax*4 + 0x416364]
mov eax, 3
jmp 0x41099c
mov eax, 0x1e
jmp 0x41099c
mov eax, 0xa
jmp 0x41099c
mov eax, dword [0x4bbfc8]
shl eax, 5
add eax, 7
jmp 0x41099c
mov eax, dword [0x4bbfc8]
shl eax, 5
add eax, 3
jmp 0x41099c
mov eax, dword [0x4bbfc8]
shl eax, 5
add eax, 0x1e
jmp 0x41099c
mov eax, dword [0x4bbfc8]
shl eax, 5
add eax, 0xa
jmp 0x41099c
mov eax, 7
mov edx, dword [esp + 0x14]
cmp edx, 9
mov dword [esp + 0x18], eax
ja case.default.0x4109ad
jmp dword [edx*4 + 0x41639c]
push 0x1e
call fcn.0043abe0
push 7
call fcn.0043abe0
push 3
call fcn.0043abe0
push 0xa
call fcn.0043abe0
add esp, 0x10
jmp case.default.0x4109ad
push 0
push eax
push 0x60608
call fcn.0043bfd0
add esp, 0xc
jmp case.default.0x4109ad
push 0
push eax
push 0xffffffffffffffff
push 4
call fcn.0043bf30
add esp, 0x10
jmp case.default.0x4109ad
push 0
push eax
or ecx, 0xff000000
push ecx
push 3
call fcn.0043bf30
add esp, 0x10
jmp case.default.0x4109ad
push 0
push eax
or ecx, 0xff000000
push ecx
push 1
call fcn.0043bf30
add esp, 0x10
jmp case.default.0x4109ad
push 0
push eax
or ecx, 0xff000000
push ecx
push 5
call fcn.0043bf30
add esp, 0x10
jmp case.default.0x4109ad
push 0
push eax
or ecx, 0xff000000
push ecx
push 6
call fcn.0043bf30
add esp, 0x10
jmp case.default.0x4109ad
push 0
push eax
or ecx, 0xff000000
push ecx
push 2
call fcn.0043bf30
add esp, 0x10
jmp case.default.0x4109ad
push 0
push eax
or ecx, 0xff000000
push ecx
push 7
call fcn.0043bf30
add esp, 0x10
jmp case.default.0x4109ad
push 0
push eax
push 0x60508
call fcn.0043bfd0
add esp, 0xc
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
mov ebx, dword [esp + 0x5c]
mov dword [0x6cdef0], edx
mov edx, dword [esp + 0x48]
mov edi, 0xc8
add esp, 0x28
add esi, 4
mov dword [0x6cdeec], 1
mov dword [0x6cdef4], eax
mov dword [0x6cdef8], ecx
mov dword [0x6cdefc], edx
mov dword [0x6cdf00], edi
mov dword [0x6cdf04], 0x7d0
mov dword [0x6cdf08], ebp
test byte [ebx], 4
jne 0x410b5d
call fcn.004621b0
mov eax, dword [esp + 0x14]
push eax
push 3
call fcn.00462230
mov ecx, dword [esp + 0x20]
push ecx
push 5
call fcn.00462230
mov edx, dword [esp + 0x2c]
push edx
push 9
call fcn.00462230
mov eax, dword [esp + 0x38]
push eax
push 0xa
call fcn.00462230
push edi
push 7
call fcn.00462230
push 0x7d0
push 4
call fcn.00462230
mov ecx, dword [esp + 0x5c]
push ecx
call fcn.004632c0
add esp, 0x34
or dword [ebx], 4
jmp case.default.0x4109ad
cmp eax, 0x4031604
ja 0x411746
je 0x4116f3
cmp eax, 0x4030502
ja 0x411370
je 0x41134e
cmp eax, 0x403010e
ja 0x41111c
je 0x410f78
cmp eax, 0x4020408
je 0x410e3d
cmp eax, 0x4020507
je 0x410d9f
cmp eax, 0x403000a
jne 0x415de4
call fcn.004606e0
mov eax, dword [esi]
lea edx, [esp + 0x24]
push edx
push eax
call section..text
add esi, 4
call fcn.0045f580
fild dword [esp + 0x2c]
fld qword [0x49a4c8]
lea ecx, [esp + 0x2c]
push ecx
fdiv st(1), st(0)
fxch st(1)
fstp dword [eax]
mov eax, dword [esi]
push eax
call section..text
fidivr dword [esp + 0x34]
add esi, 4
fstp dword [esp + 0x40]
fld dword [esp + 0x40]
fstp dword [esp + 0x40]
call fcn.0045f580
fld dword [esp + 0x40]
lea edx, [esp + 0x34]
fstp dword [eax + 4]
mov eax, dword [esi]
push edx
push eax
call section..text
fild dword [esp + 0x3c]
add esi, 4
fdiv qword [0x49a4c8]
fstp dword [esp + 0x48]
fld dword [esp + 0x48]
fstp dword [esp + 0x48]
call fcn.0045f580
fld dword [esp + 0x48]
lea ecx, [esp + 0x3c]
fstp dword [eax + 8]
mov eax, dword [esi]
push ecx
push eax
call section..text
fild dword [esp + 0x44]
add esi, 4
fdiv qword [0x49a4c8]
fstp dword [esp + 0x50]
fld dword [esp + 0x50]
fstp dword [esp + 0x50]
call fcn.0045f580
fld dword [esp + 0x50]
lea edx, [esp + 0x44]
fstp dword [eax + 0xc]
mov eax, dword [esi]
push edx
push eax
call section..text
fild dword [esp + 0x4c]
add esi, 4
fdiv qword [0x49a4c8]
fstp dword [esp + 0x58]
fld dword [esp + 0x58]
fstp dword [esp + 0x58]
call fcn.0045f580
fld dword [esp + 0x58]
lea ecx, [esp + 0x4c]
fstp dword [eax + 0x10]
mov eax, dword [esi]
push ecx
push eax
call section..text
fild dword [esp + 0x54]
add esi, 4
fdiv qword [0x49a4c8]
fstp dword [esp + 0x60]
fld dword [esp + 0x60]
fstp dword [esp + 0x60]
call fcn.0045f580
fld dword [esp + 0x60]
lea edx, [esp + 0x54]
fstp dword [eax + 0x14]
mov eax, dword [esi]
push edx
push eax
call section..text
fild dword [esp + 0x5c]
add esi, 4
fstp dword [esp + 0x68]
call fcn.0045f580
fld dword [esp + 0x68]
lea ecx, [esp + 0x5c]
fstp dword [eax + 0x18]
mov eax, dword [esi]
push ecx
push eax
call section..text
fild dword [esp + 0x64]
add esp, 0x40
add esi, 4
fstp dword [esp + 0x30]
call fcn.0045f580
fld dword [esp + 0x30]
lea edx, [esp + 0x24]
fstp dword [eax + 0x1c]
mov eax, dword [esi]
push edx
push eax
call section..text
fild dword [esp + 0x2c]
add esp, 8
add esi, 4
fstp dword [esp + 0x30]
call fcn.0045f580
fld dword [esp + 0x30]
fstp dword [eax + 0x20]
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x5c]
push eax
mov eax, dword [esp + 0x54]
push ebx
push ecx
mov ecx, dword [esp + 0x58]
push edx
mov edx, dword [esp + 0x54]
or edx, 0xffff8000
push eax
shl edx, 0x10
or edx, dword [esp + 0x5c]
push ecx
push edx
add esi, 4
call fcn.004038c0
add esp, 0x4c
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x68]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x74]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x5c]
mov edi, dword [esp + 0x6c]
mov ebp, dword [esp + 0x64]
mov ebx, dword [esp + 0x74]
mov dword [0x6cdef0], eax
mov eax, dword [esp + 0x60]
mov dword [0x6cdef4], ecx
mov ecx, dword [esp + 0x78]
add esp, 0x40
add esi, 4
mov dword [0x6cdeec], 1
mov dword [0x6cdef8], edx
mov dword [0x6cdefc], eax
mov dword [0x6cdf00], edi
mov dword [0x6cdf04], ebp
mov dword [0x6cdf08], ecx
test byte [ebx], 4
jne 0x410f23
call fcn.004621b0
mov edx, dword [esp + 0x14]
push edx
push 3
call fcn.00462230
mov eax, dword [esp + 0x20]
push eax
push 5
call fcn.00462230
mov ecx, dword [esp + 0x2c]
push ecx
push 9
call fcn.00462230
mov edx, dword [esp + 0x38]
push edx
push 0xa
call fcn.00462230
push edi
push 7
call fcn.00462230
push ebp
push 4
call fcn.00462230
mov eax, dword [esp + 0x6c]
push eax
call fcn.004632c0
add esp, 0x34
or dword [ebx], 4
jmp case.default.0x4109ad
push 0xc0
lea ecx, [esp + 0x2cc]
push 0
push ecx
call fcn.00481ba0
mov eax, dword [esi]
lea edx, [esp + 0x20]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
add esi, 4
push eax
call fcn.004022d0
add esp, 0x18
push eax
lea eax, [esp + 0x2cc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [esi + 4]
lea ecx, [esp + 0x24]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x2c]
lea ecx, [esp + 0x2c]
add esi, 4
mov dword [esp + 0x350], edx
mov eax, dword [esi]
push ecx
push eax
call section..text
fild dword [esp + 0x34]
lea edx, [esp + 0x34]
add esi, 4
fstp dword [esp + 0x35c]
mov eax, dword [esi]
push edx
push eax
call section..text
fild dword [esp + 0x3c]
lea ecx, [esp + 0x3c]
add esi, 4
fstp dword [esp + 0x368]
mov eax, dword [esi]
push ecx
push eax
call section..text
fild dword [esp + 0x44]
lea edx, [esp + 0x44]
add esi, 4
fstp dword [esp + 0x374]
mov eax, dword [esi]
push edx
push eax
call section..text
fild dword [esp + 0x4c]
lea ecx, [esp + 0x4c]
add esi, 4
fstp dword [esp + 0x380]
mov eax, dword [esi]
push ecx
push eax
call section..text
fild dword [esp + 0x54]
lea edx, [esp + 0x54]
add esi, 4
fstp dword [esp + 0x38c]
mov eax, dword [esi]
push edx
push eax
call section..text
fild dword [esp + 0x5c]
add esi, 4
lea ecx, [esp + 0x5c]
fstp dword [esp + 0x398]
mov eax, dword [esi]
push ecx
push eax
call section..text
fild dword [esp + 0x64]
add esp, 0x40
fld qword [0x49a4c8]
lea edx, [esp + 0x24]
add esi, 4
fdiv st(1), st(0)
push edx
fxch st(1)
fstp dword [esp + 0x374]
mov eax, dword [esi]
push eax
call section..text
fild dword [esp + 0x2c]
lea ecx, [esp + 0x2c]
add esi, 4
fdiv st(1)
push ecx
fstp dword [esp + 0x380]
mov eax, dword [esi]
push eax
call section..text
fild dword [esp + 0x34]
lea edx, [esp + 0x34]
add esi, 4
fdiv st(1)
push edx
fstp dword [esp + 0x38c]
mov eax, dword [esi]
push eax
call section..text
fidivr dword [esp + 0x3c]
mov ecx, dword [esp + 0x2c]
lea eax, [esp + 0x2e0]
push eax
push ecx
add esi, 4
fstp dword [esp + 0x39c]
call fcn.0045fbf0
add esp, 0x20
neg al
sbb eax, eax
and eax, dword [esp + 0x14]
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
cmp eax, 0x4030210
je 0x411171
cmp eax, 0x4030302
je 0x41113f
cmp eax, 0x4030401
jne 0x415de4
call fcn.004618d0
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
call fcn.00460770
mov eax, dword [esp + 0x14]
test eax, eax
je case.default.0x4109ad
push eax
call fcn.00460ac0
add esp, 4
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
fild dword [esp + 0x34]
lea ecx, [esp + 0x34]
add esi, 4
fstp dword [esp + 0xd8]
mov eax, dword [esi]
push ecx
push eax
call section..text
fild dword [esp + 0x3c]
lea edx, [esp + 0x3c]
add esi, 4
fstp dword [esp + 0xe4]
mov eax, dword [esi]
push edx
push eax
call section..text
fild dword [esp + 0x44]
lea ecx, [esp + 0x44]
add esi, 4
fstp dword [esp + 0xf0]
mov eax, dword [esi]
push ecx
push eax
call section..text
fild dword [esp + 0x4c]
fld qword [0x49a4c0]
lea edx, [esp + 0x4c]
add esi, 4
fdiv st(1), st(0)
push edx
fld qword [0x49a4b8]
fmul st(2), st(0)
fxch st(2)
fstp dword [esp + 0x100]
mov eax, dword [esi]
push eax
call section..text
fild dword [esp + 0x54]
lea ecx, [esp + 0x54]
add esi, 4
fdiv st(1)
push ecx
fmul st(2)
fstp dword [esp + 0x10c]
mov eax, dword [esi]
push eax
call section..text
fidivr dword [esp + 0x5c]
lea edx, [esp + 0x5c]
add esi, 4
push edx
fmulp st(1)
fstp dword [esp + 0x118]
mov eax, dword [esi]
push eax
call section..text
fild dword [esp + 0x64]
add esp, 0x40
lea ecx, [esp + 0x24]
add esi, 4
fstp dword [esp + 0xe0]
mov eax, dword [esi]
push ecx
push eax
call section..text
fild dword [esp + 0x2c]
add esi, 4
lea edx, [esp + 0x2c]
fstp dword [esp + 0xf0]
mov eax, dword [esi]
push edx
push eax
call section..text
fild dword [esp + 0x34]
lea ecx, [esp + 0x34]
add esi, 4
fstp dword [esp + 0xf4]
mov eax, dword [esi]
push ecx
push eax
call section..text
fild dword [esp + 0x3c]
lea edx, [esp + 0x3c]
add esi, 4
fstp dword [esp + 0x104]
mov eax, dword [esi]
push edx
push eax
call section..text
fild dword [esp + 0x44]
lea ecx, [esp + 0x44]
add esi, 4
fstp dword [esp + 0x110]
mov eax, dword [esi]
push ecx
push eax
call section..text
fild dword [esp + 0x4c]
fld qword [0x49a4b0]
lea edx, [esp + 0x4c]
add esi, 4
fdiv st(1), st(0)
push edx
fxch st(1)
fstp dword [esp + 0x124]
mov eax, dword [esi]
push eax
call section..text
fidivr dword [esp + 0x54]
lea ecx, [esp + 0x54]
add esi, 4
push ecx
fstp dword [esp + 0x128]
mov eax, dword [esi]
push eax
call section..text
fild dword [esp + 0x5c]
mov eax, dword [esp + 0x4c]
lea edx, [esp + 0x100]
fdiv qword [0x49a4a8]
push edx
push eax
add esi, 4
fstp dword [esp + 0x13c]
call fcn.004603b0
add esp, 0x40
neg al
sbb eax, eax
and eax, dword [esp + 0x14]
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edx, dword [esp + 0x1c]
push edx
add esi, 4
call fcn.00460ac0
add esp, 0xc
jmp case.default.0x4109ad
cmp eax, 0x4031205
ja 0x41159b
je 0x4114fa
cmp eax, 0x4030606
je 0x411480
cmp eax, 0x4031005
je 0x41140f
cmp eax, 0x4031105
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
fild dword [esp + 0x40]
mov eax, dword [esp + 0x34]
add esp, 0x14
fstp dword [esp + 8]
add esi, 4
fild dword [esp + 0x28]
fstp dword [esp + 4]
fild dword [esp + 0x24]
fstp dword [esp]
push 0
push eax
call fcn.004604b0
add esp, 0x14
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
fild dword [esp + 0x40]
mov eax, dword [esp + 0x34]
add esp, 0x14
fstp dword [esp + 8]
add esi, 4
fild dword [esp + 0x28]
fstp dword [esp + 4]
fild dword [esp + 0x24]
fstp dword [esp]
push 1
push eax
call fcn.004604b0
add esp, 0x14
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x54]
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
push edx
mov edx, dword [esp + 0x44]
push eax
mov eax, dword [esp + 0x44]
push ecx
push edx
push eax
add esi, 4
call fcn.0045fc70
add esp, 0x3c
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
fild dword [esp + 0x40]
fld qword [0x49a4b8]
add esp, 0x14
mov eax, dword [esp + 0x20]
fmul st(1), st(0)
add esi, 4
fld qword [0x49a4c0]
fdiv st(2), st(0)
fxch st(2)
fstp dword [esp + 0x3c]
fld dword [esp + 0x3c]
fstp dword [esp + 8]
fild dword [esp + 0x28]
fmul st(1)
fdiv st(2)
fstp dword [esp + 0x3c]
fld dword [esp + 0x3c]
fstp dword [esp + 4]
fimul dword [esp + 0x24]
fdivrp st(1)
fstp dword [esp + 0x3c]
fld dword [esp + 0x3c]
fstp dword [esp]
push 1
push eax
call fcn.004604f0
add esp, 0x14
jmp case.default.0x4109ad
cmp eax, 0x4031305
je 0x411652
cmp eax, 0x4031403
je 0x411605
cmp eax, 0x4031505
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
fild dword [esp + 0x28]
mov eax, dword [esp + 0x24]
add esp, 0xc
fdiv qword [0x49a4a8]
add esi, 4
fstp dword [esp + 0x34]
fld dword [esp + 0x34]
fstp dword [esp]
push 0
push eax
call fcn.00460530
add esp, 0xc
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
fild dword [esp + 0x28]
mov eax, dword [esp + 0x24]
add esp, 0xc
fdiv qword [0x49a4a8]
add esi, 4
fstp dword [esp + 0x34]
fld dword [esp + 0x34]
fstp dword [esp]
push 1
push eax
call fcn.00460530
add esp, 0xc
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
fild dword [esp + 0x40]
fld qword [0x49a4b8]
add esp, 0x14
mov eax, dword [esp + 0x20]
fmul st(1), st(0)
add esi, 4
fld qword [0x49a4c0]
fdiv st(2), st(0)
fxch st(2)
fstp dword [esp + 0x3c]
fld dword [esp + 0x3c]
fstp dword [esp + 8]
fild dword [esp + 0x28]
fmul st(1)
fdiv st(2)
fstp dword [esp + 0x3c]
fld dword [esp + 0x3c]
fstp dword [esp + 4]
fimul dword [esp + 0x24]
fdivrp st(1)
fstp dword [esp + 0x3c]
fld dword [esp + 0x3c]
fstp dword [esp]
push 0
push eax
call fcn.004604f0
add esp, 0x14
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
fild dword [esp + 0x34]
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x2c]
add esp, 0x14
fstp dword [esp]
push edx
push eax
add esi, 4
call fcn.00460560
add esp, 0xc
jmp case.default.0x4109ad
cmp eax, 0x4040703
ja 0x411a68
je 0x411a40
cmp eax, 0x4040302
ja 0x411916
je 0x4118e3
cmp eax, 0x4040004
je 0x411882
cmp eax, 0x4040103
je 0x41183c
cmp eax, 0x4040207
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x48]
push eax
add esi, 4
call fcn.004335b0
add esp, 0x34
test eax, eax
je 0x40b287
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x30]
push edx
mov edx, dword [esp + 0x28]
push ecx
mov ecx, dword [esp + 0x28]
push edx
push ecx
push eax
call fcn.00452bc0
add esp, 0x18
test eax, eax
je 0x40b287
mov edx, dword [esp + 0x14]
mov dword [0x6c77a8], edx
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
mov edx, dword [esp + 0x1c]
add esp, 8
add esi, 4
push edx
push eax
mov dword [esp + 0x20], eax
add esi, 4
call fcn.004022d0
add esp, 4
push eax
call fcn.00452830
add esp, 8
neg eax
sbb eax, eax
and eax, dword [esp + 0x14]
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
push edx
push eax
push ecx
push 0
push 0
push 0
add esi, 4
call fcn.00452bc0
add esp, 0x30
neg eax
sbb eax, eax
and eax, dword [esp + 0x14]
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esp + 0x1c]
push eax
add esi, 4
call fcn.00452740
add esp, 0xc
test eax, eax
je case.default.0x4109ad
push eax
call fcn.00452770
add esp, 4
jmp case.default.0x4109ad
cmp eax, 0x4040404
je 0x4119e1
cmp eax, 0x4040504
je 0x411982
cmp eax, 0x4040603
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
add esp, 0x10
push 0
mov eax, dword [esp + 0x1c]
push eax
add esi, 4
call fcn.00452740
mov ecx, dword [esp + 0x1c]
add esp, 4
push eax
push ecx
call fcn.00452740
add esp, 4
push eax
call fcn.00452f00
add esp, 0xc
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x2c]
push eax
add esi, 4
call fcn.00452740
add esp, 0x1c
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push ecx
push edx
push eax
call fcn.00453150
add esp, 0xc
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x2c]
push edx
add esi, 4
call fcn.00452740
add esp, 0x1c
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push ecx
push edx
push eax
call fcn.004530e0
add esp, 0xc
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
add esp, 0x10
push 2
jmp 0x411956
cmp eax, 0x4040b05
ja 0x411bee
je 0x411b81
cmp eax, 0x4040803
je 0x411b59
cmp eax, 0x4040905
je 0x411ae0
cmp eax, 0x4040a03
jne 0x415de4
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x24]
push edx
add esi, 4
call fcn.00452740
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
push eax
call fcn.004335b0
add esp, 4
push eax
call fcn.00452e60
add esp, 8
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
add esp, 0x20
push eax
push ecx
push edx
add esi, 4
call fcn.004335b0
add esp, 4
push eax
mov eax, dword [esp + 0x20]
push eax
call fcn.00452740
add esp, 4
push eax
call fcn.00452d50
add esp, 0x10
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
add esp, 0x10
push 1
jmp 0x411956
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov edi, dword [esi + 4]
add esi, 4
lea ecx, [esp + 0x24]
add esi, 4
mov dword [esp + 0x20], edi
mov eax, dword [esi]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x30]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
add esp, 0x18
push eax
push ecx
push edi
add esi, 4
call fcn.004022d0
mov edx, dword [esp + 0x20]
add esp, 4
push eax
push edx
call fcn.00452740
add esp, 4
push eax
call fcn.004531c0
add esp, 0x10
jmp case.default.0x4109ad
cmp eax, 0x4040c02
je 0x411d2f
cmp eax, 0x4040d0b
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x68]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x74]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
add esp, 0x40
lea ecx, [esp + 0x34]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [0x6c9844]
push eax
add esi, 4
call fcn.00402320
add esp, 0x14
test eax, eax
je case.default.0x4109ad
cmp dword [eax], 0x80000307
jne case.default.0x4109ad
mov eax, dword [eax + 0xc]
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x34]
push ecx
mov ecx, dword [esp + 0x40]
push edx
mov edx, dword [esp + 0x40]
push ecx
mov ecx, dword [esp + 0x30]
push edx
mov edx, dword [esp + 0x3c]
push ecx
mov ecx, dword [esp + 0x34]
push edx
mov edx, dword [esp + 0x34]
push ecx
mov ecx, dword [esp + 0x34]
push edx
push ecx
push eax
call fcn.004022f0
mov edx, dword [esp + 0x3c]
add esp, 4
push eax
push edx
call fcn.00452740
add esp, 4
push eax
call fcn.004537e0
add esp, 0x2c
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edx, dword [esp + 0x1c]
push edx
add esi, 4
call fcn.00452740
add esp, 0xc
test eax, eax
je case.default.0x4109ad
mov ecx, dword [eax + 0xc]
lea edx, [ecx*4]
push edx
mov edx, dword [eax + 0x10]
mov eax, dword [eax + 0x18]
push edx
push ecx
push eax
call fcn.004347c0
add esp, 0x10
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edx, dword [esp + 0x1c]
push edx
add esi, 4
call fcn.00452740
add esp, 0xc
neg eax
sbb eax, eax
neg eax
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
cmp eax, 0x6010103
ja 0x412f12
je 0x412ee6
cmp eax, 0x5020102
ja 0x41281b
je 0x4127f7
cmp eax, 0x5000201
ja 0x41230d
je 0x4122ce
cmp eax, 0x4050303
ja 0x4120f4
je 0x4120b0
cmp eax, 0x4041206
ja 0x411fc4
je 0x411f41
cmp eax, 0x4041003
je 0x411ef8
cmp eax, 0x404110b
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x68]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x74]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
add esp, 0x40
lea ecx, [esp + 0x34]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x4c]
add esp, 0x10
push eax
mov eax, dword [esp + 0x3c]
push ecx
mov ecx, dword [esp + 0x2c]
push edx
mov edx, dword [esp + 0x38]
push eax
mov eax, dword [esp + 0x30]
push ecx
mov ecx, dword [esp + 0x30]
push edx
mov edx, dword [esp + 0x30]
push eax
push ecx
push edx
add esi, 4
push 0x6c9738
mov eax, dword [esp + 0x3c]
push eax
jmp 0x411d19
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x24]
push eax
add esi, 4
call fcn.00452740
add esp, 0x14
test eax, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x18]
push ecx
push eax
call fcn.00453c50
add esp, 8
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov edi, dword [esi + 4]
add esi, 4
lea ecx, [esp + 0x24]
add esi, 4
mov dword [esp + 0x20], edi
mov eax, dword [esi]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x30]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x44]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
add esp, 0x20
push edx
push eax
push ecx
push edi
add esi, 4
call fcn.004022d0
mov edx, dword [esp + 0x24]
add esp, 4
push eax
push edx
call fcn.00452740
add esp, 4
push eax
call fcn.00453210
add esp, 0x14
jmp case.default.0x4109ad
cmp eax, 0x4050104
je 0x41205b
cmp eax, 0x4050203
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esp + 0x30]
add esp, 0x18
add esi, 4
cmp eax, 0xffffffff
jne 0x412038
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
push edx
push eax
call fcn.004335b0
add esp, 4
push eax
call fcn.00436060
add esp, 8
jmp case.default.0x4109ad
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
push ecx
push 0
push eax
push edx
call fcn.004335b0
add esp, 4
push eax
call fcn.004360d0
add esp, 0x10
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
add esi, 4
push eax
mov dword [esp + 0x30], eax
add esi, 4
call fcn.004022d0
mov ecx, dword [esp + 0x28]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
push eax
push ecx
call fcn.004335b0
add esp, 4
push eax
call fcn.004361f0
add esp, 0xc
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
add esp, 0x10
push edx
push eax
add esi, 4
call fcn.004335b0
add esp, 4
push eax
call fcn.004361c0
add esp, 8
jmp case.default.0x4109ad
cmp eax, 0x4060304
ja 0x4121f9
je 0x41219f
cmp eax, 0x4060103
je 0x41215b
cmp eax, 0x4060203
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
add esp, 0x10
push eax
push ecx
add esi, 4
call fcn.004335b0
add esp, 4
push eax
call fcn.00434170
add esp, 8
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
add esp, 0x10
push edx
push eax
add esi, 4
call fcn.004335b0
add esp, 4
push eax
call fcn.00434130
add esp, 8
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
add esp, 0x18
push edx
push eax
push ecx
add esi, 4
call fcn.004335b0
add esp, 4
push eax
call fcn.00434180
add esp, 0xc
jmp case.default.0x4109ad
cmp eax, 0x5000003
je 0x41224a
cmp eax, 0x5000102
jne 0x415de4
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esp + 0x1c]
add esp, 8
add esi, 4
test eax, eax
je 0x41223a
push eax
call fcn.00465760
add esp, 4
mov dword [0x6cb79c], edi
jmp case.default.0x4109ad
call fcn.00465700
mov dword [0x6cb79c], edi
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov ecx, dword [0x6cb79c]
mov eax, dword [esp + 0x24]
and ecx, 0x7fffffff
add esp, 0x10
add esi, 4
cmp ecx, eax
je case.default.0x4109ad
mov edx, dword [esp + 0x18]
push edx
push eax
call fcn.004022d0
add esp, 4
push eax
call fcn.004655d0
call fcn.00465640
mov eax, dword [esp + 0x1c]
push eax
call fcn.0046b5b0
add esp, 0xc
cmp dword [esp + 0x18], edi
mov eax, dword [esp + 0x14]
mov dword [0x6cb79c], eax
je case.default.0x4109ad
or eax, 0x80000000
mov dword [0x6cb79c], eax
jmp case.default.0x4109ad
cmp dword [0x6cb79c], ebp
je case.default.0x4109ad
push 0
push 0
call fcn.004657c0
mov eax, 0x40000000
add esp, 8
test dword [0x6cb79c], eax
je 0x4122fe
or dword [0x6cb79c], eax
jmp case.default.0x4109ad
and dword [0x6cb79c], 0xbfffffff
jmp case.default.0x4109ad
cmp eax, 0x5010102
ja 0x412557
je 0x412533
cmp eax, 0x5000504
ja 0x4123ea
je 0x41236d
cmp eax, 0x5000302
je 0x412350
cmp eax, 0x5000402
jne 0x415de4
add esi, 4
mov dword [0x6c972c], edi
call fcn.00465c00
jmp case.default.0x4109ad
mov eax, dword [esi]
push 0x6c972c
push eax
call section..text
add esp, 8
add esi, 4
call fcn.00465c00
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [0x6cb79c]
mov eax, dword [esp + 0x2c]
and edx, 0xfffffff
add esp, 0x18
add esi, 4
cmp edx, eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x1c]
push ecx
push eax
call fcn.004022d0
add esp, 4
push eax
call fcn.004655d0
mov edx, dword [esp + 0x20]
push edx
call fcn.004656a0
mov eax, dword [esp + 0x20]
push eax
call fcn.0046b5b0
add esp, 0x10
jmp 0x4122ac
cmp eax, 0x5010004
je 0x41246c
cmp eax, 0x5010101
jne 0x415de4
push 0
push 0xffffffffffffffff
call fcn.004654f0
add esp, 8
or eax, 0xffffffff
mov dword [0x6c6d3c], eax
mov dword [0x6c6d40], eax
mov dword [0x6c6d44], eax
mov dword [0x6c6d48], eax
mov dword [0x6c6d4c], eax
mov dword [0x6c6d50], eax
mov dword [0x6c6d54], eax
mov dword [0x6c6d58], eax
mov dword [0x6c6d5c], eax
xor eax, eax
mov dword [0x6cdd14], eax
mov dword [0x6cdd18], eax
mov dword [0x6cdd1c], eax
mov dword [0x6cdd20], eax
mov dword [0x6cdd24], eax
mov dword [0x6cdd28], eax
mov dword [0x6cdd2c], eax
mov dword [0x6cdd30], eax
mov dword [0x6cdd34], eax
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x2c]
add esp, 0x18
push 0
push edx
push 0xffffffffffffffff
push eax
add esi, 4
call fcn.004022d0
add esp, 4
push eax
call fcn.00465290
add esp, 0x10
cmp eax, 0xffffffff
mov dword [0x6c77a8], eax
je 0x4124d8
mov ecx, dword [esp + 0x18]
push ecx
push eax
call fcn.00465520
add esp, 8
mov edx, dword [esp + 0x14]
push edx
call fcn.0046b5b0
add esp, 4
cmp dword [esp + 0x18], edi
je case.default.0x4109ad
cmp dword [0x4bbfc8], edi
jne case.default.0x4109ad
xor eax, eax
lea ecx, [ecx]
cmp dword [eax*4 + 0x6cdd14], edi
je 0x412516
add eax, 1
cmp eax, 9
jl 0x412500
jmp case.default.0x4109ad
mov ecx, dword [esp + 0x14]
mov edx, dword [0x6c77a8]
mov dword [eax*4 + 0x6cdd14], ecx
mov dword [eax*4 + 0x6c6d3c], edx
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edx, dword [esp + 0x1c]
push edx
push 0xffffffffffffffff
add esi, 4
call fcn.004654f0
add esp, 0x10
jmp 0x412408
cmp eax, 0x5020004
ja 0x412725
je 0x412683
cmp eax, 0x5010103
je 0x412615
cmp eax, 0x5020003
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x24]
add esp, 0x10
add esi, 4
test eax, eax
je 0x412603
lea ecx, [esp + 0x40]
push ecx
push eax
call fcn.004022d0
add esp, 4
push eax
call fcn.0046c970
add esp, 8
test eax, eax
mov dword [esp + 0x28], eax
je 0x412603
mov edx, dword [0x6cb798]
mov ecx, dword [esp + 0x18]
imul edx, eax
mov eax, 0xd1b71759
mul edx
mov eax, dword [esp + 0x40]
push 0
shr edx, 0xd
push edx
push eax
mov dword [esp + 0x34], edx
mov edx, dword [esp + 0x20]
push ecx
push edx
call fcn.004022d0
add esp, 4
push eax
call fcn.00465ca0
add esp, 0x14
mov eax, dword [esp + 0x14]
push eax
call fcn.00455770
add esp, 4
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
push eax
push ecx
add esi, 4
call fcn.004654f0
mov ecx, dword [esp + 0x2c]
add esp, 0x18
test ecx, ecx
js 0x412408
xor eax, eax
cmp dword [eax*4 + 0x6c6d3c], ecx
je 0x41266c
add eax, 1
cmp eax, 9
jl 0x412656
jmp case.default.0x4109ad
mov dword [eax*4 + 0x6cdd14], edi
mov dword [eax*4 + 0x6c6d3c], 0xffffffff
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x2c]
add esp, 0x18
add esi, 4
test eax, eax
je case.default.0x4109ad
lea ecx, [esp + 0x40]
push ecx
push eax
call fcn.004022d0
add esp, 4
push eax
call fcn.0046c970
add esp, 8
test eax, eax
je case.default.0x4109ad
mov edx, dword [0x6cb798]
mov ecx, dword [esp + 0x40]
imul edx, eax
mov eax, 0xd1b71759
mul edx
mov eax, dword [esp + 0x1c]
push eax
mov eax, dword [esp + 0x18]
shr edx, 0xd
push edx
mov dword [esp + 0x30], edx
mov edx, dword [esp + 0x20]
push ecx
push edx
push eax
call fcn.004022d0
add esp, 4
push eax
call fcn.00465ca0
add esp, 0x14
jmp case.default.0x4109ad
cmp eax, 0x5020005
je 0x412748
cmp eax, 0x5020101
jne 0x415de4
push 0xffffffffffffffff
push 0
call fcn.00465ae0
add esp, 8
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edi, dword [esi + 4]
add esi, 4
lea edx, [esp + 0x24]
add esi, 4
mov dword [esp + 0x20], edi
mov eax, dword [esi]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x30]
add esi, 4
push ecx
push eax
call section..text
add esp, 0x18
add esi, 4
cmp dword [esp + 0x14], ebp
je 0x4127e5
lea edx, [esp + 0x40]
push edx
push edi
call fcn.004022d0
add esp, 4
push eax
call fcn.0046c970
add esp, 8
test eax, eax
mov dword [esp + 0x28], eax
je 0x4127e5
mov ecx, dword [0x6cb798]
imul ecx, eax
mov eax, 0xd1b71759
mul ecx
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
push 0
shr edx, 0xd
push edx
mov dword [esp + 0x30], edx
mov edx, dword [esp + 0x1c]
push edx
push eax
push ecx
call fcn.004022d0
add esp, 4
push eax
call fcn.00465ca0
add esp, 0x14
mov edx, dword [esp + 0x18]
push edx
call fcn.00455770
add esp, 4
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edx, dword [esp + 0x1c]
push 0xffffffffffffffff
push edx
add esi, 4
call fcn.00465ae0
add esp, 0x10
jmp case.default.0x4109ad
cmp eax, 0x5050004
ja 0x412afe
je 0x412a9f
cmp eax, 0x5020502
ja 0x41295f
je 0x41293f
cmp eax, 0x5020403
ja 0x4128ae
je 0x41286c
cmp eax, 0x5020201
je 0x412862
cmp eax, 0x5020301
jne 0x415de4
call fcn.0046c800
jmp case.default.0x4109ad
call fcn.00465b40
jmp case.default.0x4109ad
mov edi, dword [esi]
lea ecx, [esp + 0x18]
add esi, 4
mov dword [esp + 0x14], edi
mov eax, dword [esi]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x18]
push 0xffffffffffffffff
push edx
push edi
call fcn.004022d0
add esp, 4
push eax
call fcn.0046c820
add esp, 0xc
jmp case.default.0x4109ad
cmp eax, 0x5020404
je 0x4128df
cmp eax, 0x5020501
jne 0x415de4
push 0x44
call fcn.004813ee
mov edi, eax
add esp, 4
test edi, edi
je case.default.0x4109ad
push edi
call fcn.004557c0
jmp 0x415ee4
mov eax, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edi, dword [esi]
lea edx, [esp + 0x18]
add esi, 4
mov dword [esp + 0x14], edi
mov eax, dword [esi]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
push eax
push ecx
push edi
call fcn.004022d0
add esp, 4
push eax
call fcn.0046c820
add esp, 0xc
jmp case.default.0x4109ad
mov eax, dword [esi]
push eax
call fcn.004022d0
push 0
push eax
call fcn.0046c8f0
add esp, 0xc
mov dword [0x6c77a8], eax
add esi, 4
jmp case.default.0x4109ad
cmp eax, 0x5030101
ja 0x412a38
je 0x412a22
sub eax, 0x5030002
je 0x4129de
sub eax, 1
jne 0x415de4
mov edx, dword [esi]
lea ecx, [esp + 0x18]
mov dword [esp + 0x14], edx
mov eax, dword [esi + 4]
add esi, 4
push ecx
push eax
call section..text
add esp, 8
add esi, 4
cmp dword [esp + 0x18], edi
jne 0x4129a8
call fcn.00465700
mov edx, dword [esp + 0x14]
push edx
call fcn.004022d0
push eax
call fcn.00403190
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x1c]
push eax
call fcn.0046b5b0
add esp, 0xc
cmp dword [esp + 0x28], edi
je case.default.0x4109ad
mov dword [ebx], 0xd
jmp case.default.0x4109ad
mov ecx, dword [esi]
mov dword [esp + 0x14], ecx
add esi, 4
call fcn.00465700
mov edx, dword [esp + 0x14]
push edx
call fcn.004022d0
push eax
call fcn.00403190
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x1c]
push eax
call fcn.0046b5b0
add esp, 0xc
cmp dword [esp + 0x28], edi
je case.default.0x4109ad
mov dword [ebx], 0xd
jmp case.default.0x4109ad
call fcn.0045ea60
push 0
call fcn.00434170
add esp, 4
mov dword [ebx], edi
jmp case.default.0x4109ad
cmp eax, 0x5040002
je 0x412a6e
cmp eax, 0x5040102
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edx, dword [esp + 0x1c]
push 0xfffffffffffffffe
push edx
add esi, 4
call fcn.00465ae0
add esp, 0x10
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esp + 0x1c]
add esp, 8
add esi, 4
test eax, eax
je case.default.0x4109ad
mov edx, dword [0x6c9728]
push 0
push edx
push 0xfffffffffffffffe
push 0xffffffffffffffff
jmp 0x41270e
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edi, dword [esi + 4]
add esi, 4
lea edx, [esp + 0x24]
add esi, 4
mov dword [esp + 0x20], edi
mov eax, dword [esi]
push edx
push eax
call section..text
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
add esp, 0x10
push 0
push eax
push ecx
push edi
add esi, 4
call fcn.004022d0
add esp, 4
push eax
call fcn.00465290
mov edx, dword [esp + 0x28]
push edx
mov dword [0x6c77a8], eax
call fcn.0046b5b0
add esp, 0x14
jmp case.default.0x4109ad
cmp eax, 0x5060204
ja 0x412cf7
je 0x412cae
cmp eax, 0x5050303
ja 0x412c23
je 0x412beb
cmp eax, 0x5050102
je 0x412bac
cmp eax, 0x5050204
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x2c]
push edx
push eax
add esi, 4
call fcn.00465520
add esp, 0x20
cmp dword [esp + 0x18], edi
je case.default.0x4109ad
cmp dword [0x4bbfc8], edi
jne case.default.0x4109ad
xor eax, eax
cmp dword [eax*4 + 0x6cdd14], edi
je 0x412516
add eax, 1
cmp eax, 9
jl 0x412b92
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edx, dword [esp + 0x1c]
push 0
push edx
add esi, 4
call fcn.004654f0
mov ecx, dword [esp + 0x24]
add esp, 0x10
xor eax, eax
cmp dword [eax*4 + 0x6c6d3c], ecx
je 0x41266c
add eax, 1
cmp eax, 9
jl 0x412bd1
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
push eax
push ecx
add esi, 4
call fcn.00465570
add esp, 0x18
jmp case.default.0x4109ad
cmp eax, 0x5060004
je 0x412c59
cmp eax, 0x5060102
jne 0x415de4
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esp + 0x1c]
push 0
push eax
add esi, 4
call fcn.004654f0
add esp, 0x10
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edi, dword [esi + 4]
add esi, 4
lea edx, [esp + 0x24]
add esi, 4
mov dword [esp + 0x20], edi
mov eax, dword [esi]
push edx
push eax
call section..text
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
add esp, 0x10
push 1
push eax
push ecx
push edi
add esi, 4
call fcn.004022d0
add esp, 4
push eax
call fcn.00465290
add esp, 0x10
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
push eax
push ecx
add esi, 4
call fcn.00465520
add esp, 0x20
jmp case.default.0x4109ad
cmp eax, 0x6000104
ja 0x412e9e
je 0x412dc5
cmp eax, 0x5060404
je 0x412d5c
cmp eax, 0x6000003
jne 0x415de4
mov edi, dword [esi]
lea edx, [esp + 0x18]
add esi, 4
mov dword [esp + 0x14], edi
mov eax, dword [esi]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x18]
push edi
push eax
call fcn.0046cb10
add esp, 8
neg al
sbb eax, eax
neg eax
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
mov edi, dword [esi]
lea ecx, [esp + 0x18]
add esi, 4
mov dword [esp + 0x14], edi
mov eax, dword [esi]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x24]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x2c]
add esp, 0x10
push 1
push eax
push 0xffffffffffffffff
push edi
add esi, 4
call fcn.004022d0
add esp, 4
push eax
call fcn.00465290
add esp, 0x10
cmp eax, 0xffffffff
mov dword [0x6c77a8], eax
je case.default.0x4109ad
mov ecx, dword [esp + 0x18]
push ecx
push eax
call fcn.00465520
add esp, 8
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x30]
push eax
add esi, 4
call fcn.0046cd80
add esp, 0x1c
test eax, eax
mov dword [esp + 0x18], eax
je case.default.0x4109ad
mov ecx, dword [0x4bbfc8]
mov edx, dword [esp + 0x14]
shl ecx, 5
push ecx
mov ecx, dword [esp + 0x20]
push edx
push ecx
push eax
call fcn.004022d0
add esp, 4
push eax
call fcn.0043be30
mov edi, eax
add esp, 0x10
test edi, edi
je 0x407159
cmp dword [0x4bbfc8], ebp
jne 0x412e62
mov edx, dword [esp + 0x34]
test byte [edx], 1
je 0x412e62
cmp dword [0x6cb7a4], ebp
je 0x412e62
push edi
call fcn.00404340
add esp, 4
mov eax, dword [esp + 0x18]
push eax
call fcn.0046b5b0
add esp, 4
test dword [0x6cdd10], 0x10000
je 0x412e90
test dword [edi], 0x40000
je 0x412e90
push 4
push 0
push edi
call fcn.00433470
add esp, 0xc
mov ecx, dword [edi + 8]
mov dword [0x6c77a8], ecx
jmp case.default.0x4109ad
sub eax, 0x6010001
je 0x412ed7
sub eax, 2
jne 0x415de4
mov edi, dword [esi]
lea edx, [esp + 0x18]
add esi, 4
mov dword [esp + 0x14], edi
mov eax, dword [esi]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
jne 0x412d3e
jmp 0x41607d
push 0
call fcn.0046dfe0
add esp, 4
jmp case.default.0x4109ad
mov eax, dword [esi]
add esi, 4
mov dword [esp + 0x14], eax
mov ecx, dword [esi]
mov dword [esp + 0x18], ecx
push 0
push ecx
push eax
add esi, 4
call fcn.004022f0
add esp, 4
push eax
call fcn.0046cb60
add esp, 0xc
jmp case.default.0x4109ad
cmp eax, 0x80030005
ja 0x414dd4
je 0x414d59
cmp eax, 0x80010c04
ja 0x4146fc
je 0x414277
cmp eax, 0x80010204
ja 0x413f50
je 0x413e30
cmp eax, 0x80000307
ja 0x413724
je 0x4130c5
cmp eax, 0x80000104
ja 0x413004
je 0x412fb0
cmp eax, 0x6010104
je 0x412f92
cmp eax, 0x6010202
jne 0x415de4
mov eax, dword [esi]
push eax
mov dword [esp + 0x18], eax
add esi, 4
call fcn.004022f0
push eax
call fcn.0046dfe0
add esp, 8
jmp case.default.0x4109ad
mov eax, dword [esi]
add esi, 4
mov dword [esp + 0x14], eax
mov ecx, dword [esi]
add esi, 4
mov dword [esp + 0x18], ecx
mov edx, dword [esi]
mov dword [esp + 0x1c], edx
push edx
jmp 0x412ef7
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
add esp, 0x18
add esi, 4
mov dword [eax*4 + 0x6cde14], edx
mov dword [eax*4 + 0x6cde30], ecx
jmp case.default.0x4109ad
cmp eax, 0x80000202
jne 0x415de4
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov edi, dword [0x4bbfc8]
add edi, edi
add esi, 4
add edi, edi
call fcn.004753b0
lea ecx, [edi + 0x4bbfa0]
mov dword [edi + 0x4bc400], eax
mov eax, dword [esi]
push ecx
push eax
call section..text
add esp, 0x10
add esi, 4
test dword [0x6cde08], 0x800
je 0x413090
mov eax, dword [0x6cde0c]
cmp eax, 0xffffffff
je 0x413090
mov edx, dword [0x4bbfc8]
shl edx, 5
push edx
push 0
push 0xffffffffffffffff
push eax
call fcn.004022d0
add esp, 4
push eax
call fcn.0043bde0
mov dword [0x4bc828], ebp
add esp, 0x10
mov dword [ebx], 1
jmp case.default.0x4109ad
mov eax, dword [0x6cbd40]
cmp eax, 0xffffffff
je 0x4130ba
mov ecx, dword [0x4bbfc8]
shl ecx, 5
push ecx
push 0
push 0xffffffffffffffff
push eax
call fcn.004022d0
add esp, 4
push eax
call fcn.0043bde0
add esp, 0x10
mov dword [ebx], 1
jmp case.default.0x4109ad
cmp byte [0x4bc3f5], 0
je 0x4130d6
sub esi, 4
jmp case.default.0x4109ad
mov edx, dword [esi]
mov dword [esp + 0x14], edx
mov eax, dword [esi + 4]
add esi, 4
mov dword [esp + 0x18], eax
mov ecx, dword [esi + 4]
add esi, 4
mov dword [esp + 0x1c], ecx
mov edi, dword [esi + 4]
add esi, 4
add esi, 4
mov dword [esp + 0x20], edi
mov ebp, dword [esi]
mov eax, dword [esi + 4]
lea edx, [esp + 0x24]
add esi, 4
push edx
push eax
mov dword [esp + 0x34], ebp
call section..text
push edi
add esi, 4
call fcn.0046d4f0
add esp, 0xc
test byte [0x6c77e4], 1
je 0x4131fc
mov edi, dword [esp + 0x24]
mov eax, dword [edi*4 + 0x6cde30]
push eax
call fcn.0046e6d0
mov ebp, eax
add esp, 4
test ebp, ebp
je case.default.0x4109ad
push ebp
call fcn.0046e960
add esp, 4
test eax, eax
je 0x413161
push ebp
call fcn.0046e8b0
add esp, 4
push ebp
call fcn.0046f470
mov eax, dword [esp + 0x1c]
add esp, 4
xor ebx, ebx
test eax, eax
je 0x413195
push 1
push eax
call fcn.004022f0
add esp, 4
push eax
call fcn.0041b3e0
push eax
push ebp
call fcn.00471370
mov ebx, eax
mov eax, dword [esp + 0x28]
add esp, 0x10
mov ecx, dword [esp + 0x1c]
test ecx, ecx
je 0x4131b3
push ecx
call fcn.004022f0
push eax
push ebp
call fcn.00471370
add esp, 0xc
add ebx, eax
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4131d3
push 2
push eax
call fcn.004022f0
add esp, 4
push eax
call fcn.0041b3e0
push eax
call fcn.0046cdb0
add esp, 0xc
jmp 0x4131d5
xor eax, eax
mov ecx, dword [esp + 0x14]
mov edx, dword [edi*4 + 0x6cde30]
push 1
push ecx
push edx
push eax
push 0
call fcn.00455d10
push 1
push ebp
call fcn.0046e800
add esp, 0x1c
jmp 0x4134e4
xor edi, edi
test ebp, 0x2000000
je 0x413382
lea ebx, [ebx]
mov eax, dword [edi + 0x6cde14]
push eax
call fcn.0046e6d0
push eax
call fcn.00471730
mov ecx, dword [edi + 0x6cde30]
push ecx
call fcn.0046e6d0
push eax
call fcn.00471730
add edi, 4
add esp, 0x10
cmp edi, 0x14
jl 0x413210
mov ebp, dword [esp + 0x24]
mov edx, dword [ebp*4 + 0x6cde14]
lea ebx, [ebp*4 + 0x6cde14]
push edx
call fcn.0046e6d0
mov edi, eax
add esp, 4
test edi, edi
je 0x4132bb
cmp dword [esp + 0x18], 0
je 0x4132bb
push 0
push edi
call fcn.0046e800
push edi
call fcn.0046e9b0
or eax, 0x10000
push eax
push edi
mov dword [esp + 0x3c], eax
call fcn.0046e980
mov eax, dword [esp + 0x2c]
add esp, 0x14
push 1
push eax
call fcn.004022f0
add esp, 4
push eax
call fcn.0041b3e0
push eax
push edi
call fcn.00471370
mov eax, dword [esp + 0x38]
and eax, 0xfffeffff
push eax
push edi
mov dword [esp + 0x40], eax
call fcn.0046e980
add esp, 0x18
mov ecx, dword [ebp*4 + 0x6cde30]
lea ebp, [ebp*4 + 0x6cde30]
push ecx
call fcn.0046e6d0
mov edi, eax
add esp, 4
test edi, edi
je 0x413325
cmp dword [esp + 0x1c], 0
je 0x413331
push 0
push edi
call fcn.0046e800
push edi
call fcn.0046e9b0
or eax, 0x10000
push eax
push edi
mov dword [esp + 0x3c], eax
call fcn.0046e980
mov edx, dword [esp + 0x30]
push edx
call fcn.004022f0
push eax
push edi
call fcn.00471370
mov eax, dword [esp + 0x48]
and eax, 0xfffeffff
push eax
push edi
mov dword [esp + 0x50], eax
call fcn.0046e980
add esp, 0x28
cmp dword [esp + 0x1c], 0
je 0x413331
mov ebp, dword [ebp]
jmp 0x413334
or ebp, 0xffffffff
mov eax, dword [esp + 0x18]
test eax, eax
je 0x413361
push 2
push eax
call fcn.004022f0
add esp, 4
push eax
call fcn.0041b3e0
push eax
call fcn.0046cdb0
add esp, 0xc
cmp dword [esp + 0x18], 0
je 0x413363
mov ecx, dword [ebx]
jmp 0x413366
xor eax, eax
or ecx, 0xffffffff
mov edx, dword [esp + 0x14]
push 0
push edx
push ebp
push eax
push ecx
call fcn.00455d10
add esp, 0x14
call fcn.00456320
jmp case.default.0x4109ad
mov eax, dword [edi + 0x6cde14]
push eax
call fcn.0046e6d0
push eax
call fcn.00471730
mov ecx, dword [edi + 0x6cde30]
push ecx
call fcn.0046e6d0
push eax
call fcn.00471730
add edi, 4
add esp, 0x10
cmp edi, 0x14
jl 0x413382
mov ebp, dword [esp + 0x24]
mov edx, dword [ebp*4 + 0x6cde14]
lea eax, [ebp*4 + 0x6cde14]
push edx
mov dword [esp + 0x38], eax
call fcn.0046e6d0
mov edi, eax
add esp, 4
test edi, edi
je 0x41340e
mov eax, dword [esp + 0x18]
test eax, eax
je 0x413403
push 1
push eax
call fcn.004022f0
add esp, 4
push eax
call fcn.0041b3e0
push eax
push edi
call fcn.00471370
push 1
push edi
call fcn.0046e800
add esp, 0x18
jmp 0x41340e
push 0
push edi
call fcn.0046e800
add esp, 8
mov eax, dword [ebp*4 + 0x6cde30]
lea ebx, [ebp*4 + 0x6cde30]
push eax
call fcn.0046e6d0
mov ebp, eax
add esp, 4
test ebp, ebp
je 0x413482
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x41346d
push eax
call fcn.004022f0
push eax
push ebp
call fcn.00471370
add esp, 0xc
test edi, edi
mov dword [esp + 0x30], eax
je 0x413460
test dword [edi + 0x4c], 0x200
je 0x413460
push 0
push ebp
push edi
call fcn.0046f820
add esp, 0xc
push 1
push ebp
call fcn.0046e800
add esp, 8
jmp 0x41348a
push 0
push ebp
mov dword [esp + 0x38], 0
call fcn.0046e800
add esp, 8
jmp 0x41348a
mov dword [esp + 0x30], 0
cmp dword [esp + 0x1c], 0
je 0x413495
mov edi, dword [ebx]
jmp 0x413498
or edi, 0xffffffff
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4134c9
push 2
push eax
call fcn.004022f0
add esp, 4
push eax
call fcn.0041b3e0
push eax
call fcn.0046cdb0
add esp, 0xc
cmp dword [esp + 0x18], 0
je 0x4134cb
mov ecx, dword [esp + 0x34]
mov ecx, dword [ecx]
jmp 0x4134ce
xor eax, eax
or ecx, 0xffffffff
mov edx, dword [esp + 0x14]
push 0
push edx
push edi
push eax
push ecx
call fcn.00455d10
mov ebx, dword [esp + 0x44]
add esp, 0x14
push 0
push 1
call fcn.00405940
mov eax, dword [esp + 0x28]
push eax
call fcn.0046b4e0
add esp, 0xc
test eax, eax
jne 0x413549
test dword [0x6c984c], 0x100
je 0x41352e
push 1
push 9
call fcn.00402a70
push 0
push 8
call fcn.00402a70
mov ecx, dword [esp + 0x30]
add esp, 0x10
push ecx
call fcn.0046b510
add esp, 4
jmp 0x413555
push 0
push 9
call fcn.00402a70
mov ecx, dword [esp + 0x28]
add esp, 8
push ecx
call fcn.0046b510
add esp, 4
jmp 0x413555
push 0
push 0xa
call fcn.00402a70
add esp, 8
mov eax, dword [esp + 0x14]
test eax, eax
je 0x413610
lea edx, [esp + 0x40]
push edx
push eax
call fcn.004022d0
add esp, 4
push eax
call fcn.0046c970
add esp, 8
test eax, eax
mov dword [esp + 0x28], eax
je 0x413610
mov ecx, dword [0x6cb798]
imul ecx, eax
mov eax, 0xd1b71759
mul ecx
mov eax, dword [0x6c77b0]
shr edx, 0xd
test eax, 0x800000
mov dword [esp + 0x28], edx
je 0x4135e0
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x4135e0
push ecx
call fcn.004022f0
push eax
push 4
call fcn.00433330
mov edx, dword [esp + 0x34]
add esp, 0xc
test eax, eax
je 0x4135db
mov ecx, dword [esp + 0x40]
push 0
push edx
push ecx
push eax
call fcn.00433390
add esp, 4
jmp 0x4135ee
mov eax, dword [0x6c77b0]
mov ecx, dword [esp + 0x40]
push 0
push edx
shr eax, 0x14
push ecx
and eax, 7
mov edx, dword [esp + 0x20]
push eax
push edx
call fcn.004022d0
add esp, 4
push eax
call fcn.00465ca0
add esp, 0x14
test eax, eax
je 0x413612
add eax, 0xc8
jmp 0x413612
xor eax, eax
test dword [0x6cde08], 0x800
je 0x41362c
push ebx
push eax
push 1
call fcn.00402790
add esp, 0xc
jmp 0x41364b
mov edi, dword [0x4bbfc8]
add edi, edi
add edi, edi
call fcn.004753b0
mov dword [edi + 0x4bc400], eax
mov dword [edi + 0x4bbfa0], 0xffffffff
mov eax, dword [esp + 0x2c]
and eax, 0xff0000
cmp eax, 0x20000
ja 0x4136e0
je 0x41369d
test eax, eax
je 0x413684
cmp eax, 0x10000
jne case.default.0x4109ad
call fcn.0046f430
mov eax, dword [esp + 0x38]
mov dword [eax], 4
jmp case.default.0x4109ad
call fcn.00456320
call fcn.0046f430
mov ecx, dword [esp + 0x38]
mov dword [ecx], 8
jmp case.default.0x4109ad
test byte [0x6c77b0], 0xf0
jne 0x4136c8
cmp dword [0x6c6d30], 0
jne 0x4136c8
call fcn.00456320
call fcn.0046f430
mov edx, dword [esp + 0x38]
mov dword [edx], 8
jmp case.default.0x4109ad
push ebp
call fcn.0046f3d0
mov eax, dword [esp + 0x3c]
add esp, 4
mov dword [eax], 3
jmp case.default.0x4109ad
cmp eax, 0x30000
jne case.default.0x4109ad
test byte [0x6c77b0], 0xf0
jne 0x41370c
cmp dword [0x6c6d30], 0
jne 0x41370c
mov ecx, dword [esp + 0x38]
mov dword [ecx], 4
jmp case.default.0x4109ad
push ebp
call fcn.0046f3d0
mov edx, dword [esp + 0x3c]
add esp, 4
mov dword [edx], 4
jmp case.default.0x4109ad
cmp eax, 0x80010102
ja 0x413c7a
je 0x413ad9
cmp eax, 0x80000406
je 0x413746
cmp eax, 0x80010004
jmp 0x415de2
mov eax, dword [esi]
mov dword [esp + 0x14], eax
mov ecx, dword [esi + 4]
add esi, 4
mov dword [esp + 0x18], ecx
mov edx, dword [esi + 4]
add esi, 4
mov dword [esp + 0x1c], edx
mov eax, dword [esi + 4]
add esi, 4
lea ecx, [esp + 0x2c]
mov dword [esp + 0x20], eax
mov eax, dword [esi + 4]
add esi, 4
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test byte [0x6c77e4], 1
je 0x413808
mov edi, dword [esp + 0x2c]
mov edx, dword [edi*4 + 0x6cde30]
push edx
call fcn.0046e6d0
mov ebp, eax
add esp, 4
test ebp, ebp
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
xor ebx, ebx
test eax, eax
je 0x4137c8
push eax
call fcn.004022f0
push eax
push ebp
call fcn.00471370
add esp, 0xc
mov ebx, eax
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x4137e2
push eax
call fcn.004022f0
push eax
push ebp
call fcn.00471370
add esp, 0xc
add ebx, eax
mov eax, dword [esp + 0x14]
mov ecx, dword [edi*4 + 0x6cde30]
push 1
push eax
push ecx
push 0xffffffffffffffff
call fcn.00455e00
push 1
push ebp
call fcn.0046e800
add esp, 0x18
jmp 0x41390a
mov ebx, dword [esp + 0x2c]
mov edx, dword [ebx*4 + 0x6cde14]
lea eax, [ebx*4 + 0x6cde14]
push edx
mov dword [esp + 0x34], eax
call fcn.0046e6d0
mov ebp, eax
add esp, 4
test ebp, ebp
je 0x413888
cmp dword [esp + 0x18], edi
je 0x41387d
mov edi, 0x6cde14
mov eax, dword [edi]
push eax
call fcn.0046e6d0
push eax
call fcn.00471730
add edi, 4
add esp, 8
cmp edi, 0x6cde28
jl 0x413838
mov ecx, dword [esp + 0x18]
push 1
push ecx
call fcn.004022f0
add esp, 4
push eax
call fcn.0041b3e0
push eax
push ebp
call fcn.00471370
push 1
push ebp
call fcn.0046e800
add esp, 0x18
jmp 0x413888
push 0
push ebp
call fcn.0046e800
add esp, 8
mov edx, dword [ebx*4 + 0x6cde30]
lea edi, [ebx*4 + 0x6cde30]
push edx
call fcn.0046e6d0
mov ebp, eax
add esp, 4
test ebp, ebp
je 0x4138d7
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x4138c9
push eax
call fcn.004022f0
push eax
push ebp
call fcn.00471370
push 1
push ebp
mov ebx, eax
call fcn.0046e800
add esp, 0x14
jmp 0x4138d9
xor ebx, ebx
push ebx
push ebp
call fcn.0046e800
add esp, 8
jmp 0x4138d9
xor ebx, ebx
cmp dword [esp + 0x1c], 0
je 0x4138e4
mov ecx, dword [edi]
jmp 0x4138e7
or ecx, 0xffffffff
cmp dword [esp + 0x18], 0
je 0x4138f6
mov eax, dword [esp + 0x30]
mov eax, dword [eax]
jmp 0x4138f9
or eax, 0xffffffff
mov edx, dword [esp + 0x14]
push 0
push edx
push ecx
push eax
call fcn.00455e00
add esp, 0x10
mov edi, dword [esp + 0x38]
push 0
push 1
call fcn.00405940
mov eax, dword [esp + 0x1c]
add esp, 8
test eax, eax
je 0x4139df
lea ecx, [esp + 0x40]
push ecx
push eax
call fcn.004022d0
add esp, 4
push eax
call fcn.0046c970
add esp, 8
test eax, eax
mov dword [esp + 0x28], eax
je 0x4139df
mov edx, dword [0x6cb798]
imul edx, eax
mov eax, 0xd1b71759
mul edx
mov eax, dword [0x6c77b0]
shr edx, 0xd
test eax, 0x800000
mov dword [esp + 0x28], edx
je 0x4139af
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x4139af
push ecx
call fcn.004022f0
push eax
push 4
call fcn.00433330
add esp, 0xc
test eax, eax
je 0x4139a6
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x40]
push 0
push ecx
push edx
push eax
call fcn.00433390
add esp, 4
push eax
mov eax, dword [esp + 0x24]
push eax
jmp 0x4139c3
mov edx, dword [esp + 0x28]
mov eax, dword [0x6c77b0]
mov ecx, dword [esp + 0x40]
push 0
push edx
mov edx, dword [esp + 0x1c]
shr eax, 0x14
push ecx
and eax, 7
push eax
push edx
call fcn.004022d0
add esp, 4
push eax
call fcn.00465ca0
add esp, 0x14
test eax, eax
je 0x4139e1
add eax, 0xc8
jmp 0x4139e1
xor eax, eax
test dword [0x6cde08], 0x800
je 0x4139fb
push ebx
push eax
push 2
call fcn.00402790
add esp, 0xc
jmp 0x413a1e
mov edi, dword [0x4bbfc8]
add edi, edi
add edi, edi
call fcn.004753b0
mov dword [edi + 0x4bc400], eax
mov dword [edi + 0x4bbfa0], 0xffffffff
mov edi, dword [esp + 0x38]
mov eax, dword [esp + 0x20]
and eax, 0xff0000
cmp eax, 0x20000
ja 0x413a8a
je 0x413a64
test eax, eax
je 0x413a4f
cmp eax, 0x10000
jne case.default.0x4109ad
call fcn.0046f430
mov dword [edi], 4
jmp case.default.0x4109ad
call fcn.00456320
call fcn.0046f430
mov dword [edi], 8
jmp case.default.0x4109ad
test byte [0x6c77b0], 0xf0
jne 0x413a76
cmp dword [0x6c6d30], 0
je 0x413a4f
push ebp
call fcn.0046f3d0
add esp, 4
mov dword [edi], 3
jmp case.default.0x4109ad
cmp eax, 0x30000
jne case.default.0x4109ad
test byte [0x6c77b0], 0xf0
jne 0x413ac5
cmp dword [0x6c6d30], 0
jne 0x413ac5
cmp dword [0x6cbd40], 0xffffffff
je 0x413aba
push 1
call fcn.00402950
add esp, 4
mov dword [edi], 4
jmp case.default.0x4109ad
push ebp
call fcn.0046f3d0
add esp, 4
mov dword [edi], 4
jmp case.default.0x4109ad
mov eax, dword [0x4bbfc8]
cmp dword [eax*4 + 0x4bbfd8], ebp
je 0x413b5b
lea ecx, [esp + 0x28]
shl eax, 5
push ecx
add eax, 4
xor ebx, ebx
push eax
mov dword [esp + 0x30], ebx
call fcn.004336a0
mov edi, eax
add esp, 8
cmp edi, ebx
je 0x413b4f
mov ebp, dword [esp + 0x34]
nop
test byte [ebp], 1
je 0x413b26
mov ecx, dword [0x6cb7a4]
cmp ecx, ebx
je 0x413b26
push edi
call fcn.0043d4d0
push edi
call fcn.0043ab90
mov eax, dword [0x4bbfc8]
lea edx, [esp + 0x2c]
shl eax, 5
push edx
add eax, 4
push eax
mov dword [esp + 0x34], ebx
call fcn.004336a0
mov edi, eax
add esp, 0xc
cmp edi, ebx
jne 0x413b10
mov eax, dword [0x4bbfc8]
mov dword [eax*4 + 0x4bbfd8], ebx
xor ebx, ebx
cmp dword [eax*4 + 0x4bbfb4], ebx
je 0x413bdf
lea ecx, [esp + 0x28]
shl eax, 5
push ecx
add eax, 1
push eax
mov dword [esp + 0x30], ebx
call fcn.004336a0
mov edi, eax
add esp, 8
cmp edi, ebx
je 0x413bd3
jmp 0x413b90
mov edx, dword [esp + 0x34]
test byte [edx], 1
je 0x413ba9
mov ecx, dword [0x6cb7a4]
cmp ecx, ebx
je 0x413ba9
push edi
call fcn.0043d4d0
push edi
call fcn.0043ab90
mov ecx, dword [0x4bbfc8]
lea eax, [esp + 0x2c]
shl ecx, 5
push eax
add ecx, 1
push ecx
mov dword [esp + 0x34], ebx
call fcn.004336a0
mov edi, eax
add esp, 0xc
cmp edi, ebx
jne 0x413b90
mov eax, dword [0x4bbfc8]
mov dword [eax*4 + 0x4bbfb4], ebx
mov ecx, dword [esi]
push ebx
shl eax, 5
push ebx
add eax, 1
push eax
push 0xffffffffffffffff
push ecx
mov dword [esp + 0x28], ecx
add esi, 4
call fcn.004022d0
add esp, 4
push eax
call fcn.0043bed0
add esp, 0x14
cmp eax, ebx
mov dword [esp + 0x28], eax
je 0x413c6f
cmp dword [0x4bbfc8], ebx
jne 0x413c35
mov edx, dword [esp + 0x34]
test byte [edx], 1
je 0x413c35
cmp dword [0x6cb7a4], ebx
je 0x413c35
push eax
call fcn.004335b0
push eax
call fcn.00404340
add esp, 8
mov eax, dword [esp + 0x14]
push eax
call fcn.0046b570
add esp, 4
test eax, eax
jne 0x413c60
mov ecx, dword [esp + 0x14]
push ecx
call fcn.0046b5b0
add esp, 4
cmp dword [0x4bbfc8], ebx
jne 0x413c60
call fcn.0046b280
mov edx, dword [esp + 0x28]
mov dword [0x6c77a8], edx
jmp case.default.0x4109ad
mov dword [0x6c77a8], ebx
jmp case.default.0x4109ad
cmp eax, 0x80010104
jne 0x415de4
mov edi, dword [0x4bbfc8]
cmp dword [edi*4 + 0x4bbfd8], ebp
je 0x413d0d
lea eax, [esp + 0x28]
shl edi, 5
push eax
add edi, 4
xor ebx, ebx
push edi
mov dword [esp + 0x30], ebx
call fcn.004336a0
mov edi, eax
add esp, 8
cmp edi, ebx
je 0x413d00
mov ebp, dword [esp + 0x34]
lea esp, [esp]
test byte [ebp], 1
je 0x413cd6
mov ecx, dword [0x6cb7a4]
cmp ecx, ebx
je 0x413cd6
push edi
call fcn.0043d4d0
push edi
call fcn.0043ab90
mov edx, dword [0x4bbfc8]
lea ecx, [esp + 0x2c]
shl edx, 5
push ecx
add edx, 4
push edx
mov dword [esp + 0x34], ebx
call fcn.004336a0
mov edi, eax
add esp, 0xc
cmp edi, ebx
jne 0x413cc0
mov edi, dword [0x4bbfc8]
mov dword [edi*4 + 0x4bbfd8], ebx
xor ebx, ebx
cmp dword [edi*4 + 0x4bbfb4], ebx
je 0x413d8d
lea eax, [esp + 0x28]
shl edi, 5
push eax
add edi, 1
push edi
mov dword [esp + 0x30], ebx
call fcn.004336a0
mov edi, eax
add esp, 8
cmp edi, ebx
je 0x413d80
mov ebp, dword [esp + 0x34]
mov edi, edi
test byte [ebp], 1
je 0x413d56
mov ecx, dword [0x6cb7a4]
cmp ecx, ebx
je 0x413d56
push edi
call fcn.0043d4d0
push edi
call fcn.0043ab90
mov edx, dword [0x4bbfc8]
lea ecx, [esp + 0x2c]
shl edx, 5
push ecx
add edx, 1
push edx
mov dword [esp + 0x34], ebx
call fcn.004336a0
mov edi, eax
add esp, 0xc
cmp edi, ebx
jne 0x413d40
mov edi, dword [0x4bbfc8]
mov dword [edi*4 + 0x4bbfb4], ebx
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov ebp, dword [esi + 4]
add esi, 4
lea edx, [esp + 0x24]
add esi, 4
mov dword [esp + 0x20], ebp
mov eax, dword [esi]
push edx
push eax
call section..text
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x2c]
add esp, 0x10
push ebx
push eax
shl edi, 5
add edi, 1
push edi
push ecx
push ebp
add esi, 4
call fcn.004022d0
add esp, 4
push eax
call fcn.0043bed0
add esp, 0x14
cmp eax, ebx
mov dword [esp + 0x28], eax
je 0x413c6f
cmp dword [0x4bbfc8], ebx
jne 0x413e12
mov edx, dword [esp + 0x34]
test byte [edx], 1
je 0x413e12
cmp dword [0x6cb7a4], ebx
je 0x413e12
push eax
call fcn.004335b0
push eax
call fcn.00404340
add esp, 8
mov eax, dword [esp + 0x18]
push eax
call fcn.0046b570
add esp, 4
test eax, eax
jne 0x413c60
mov ecx, dword [esp + 0x18]
jmp 0x413c4a
mov edi, dword [0x4bbfc8]
xor ebx, ebx
cmp dword [edi*4 + 0x4bbfd8], ebp
je 0x413eaf
lea eax, [esp + 0x28]
shl edi, 5
push eax
add edi, 4
push edi
mov dword [esp + 0x30], ebx
call fcn.004336a0
mov edi, eax
add esp, 8
cmp edi, ebx
je 0x413ea2
nop
mov ecx, dword [esp + 0x34]
test byte [ecx], 1
je 0x413e79
mov ecx, dword [0x6cb7a4]
cmp ecx, ebx
je 0x413e79
push edi
call fcn.0043d4d0
push edi
call fcn.0043ab90
mov eax, dword [0x4bbfc8]
lea edx, [esp + 0x2c]
shl eax, 5
push edx
add eax, 4
push eax
mov dword [esp + 0x34], ebx
call fcn.004336a0
mov edi, eax
add esp, 0xc
cmp edi, ebx
jne 0x413e60
mov edi, dword [0x4bbfc8]
mov dword [edi*4 + 0x4bbfd8], ebx
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov ebp, dword [esi + 4]
add esi, 4
lea edx, [esp + 0x24]
add esi, 4
mov dword [esp + 0x20], ebp
mov eax, dword [esi]
push edx
push eax
call section..text
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x2c]
add esp, 0x10
push ebx
push eax
shl edi, 5
add edi, 4
push edi
push ecx
push ebp
add esi, 4
call fcn.004022d0
add esp, 4
push eax
call fcn.0043bed0
add esp, 0x14
cmp eax, ebx
mov dword [esp + 0x28], eax
je 0x413c6f
cmp dword [0x4bbfc8], ebx
jne 0x413f34
mov edx, dword [esp + 0x34]
test byte [edx], 1
je 0x413f34
cmp dword [0x6cb7a4], ebx
je 0x413f34
push eax
call fcn.004335b0
push eax
call fcn.00404340
add esp, 8
mov eax, dword [esp + 0x18]
push eax
call fcn.0046b5b0
mov ecx, dword [esp + 0x2c]
add esp, 4
mov dword [0x6c77a8], ecx
jmp case.default.0x4109ad
cmp eax, 0x80010705
ja 0x414463
je 0x414317
cmp eax, 0x80010504
ja 0x41426c
je 0x4141d9
cmp eax, 0x80010304
je 0x414031
cmp eax, 0x80010404
jne 0x415de4
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [0x4bbfc8]
mov ecx, 1
add esp, 0x18
add esi, 4
test dword [0x6c77b0], 0x10000000
mov dword [eax*4 + 0x4bbfd8], ecx
mov dword [eax*4 + 0x4bbfb4], ecx
je 0x415eb2
mov eax, dword [esp + 0x14]
test eax, eax
je 0x415eb2
test byte [0x6cde08], 0xf
je 0x414006
cmp dword [0x4b4004], edi
jne 0x415eb2
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push ecx
push edx
push eax
call fcn.004342e0
mov ecx, dword [0x4bbfc8]
mov dword [ecx*4 + 0x4bc400], eax
add esp, 0xc
mov dword [ebx], 0xa
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov ecx, dword [0x6c77ac]
add esp, 0x18
add esi, 4
cmp dword [esp + 0x14], edi
jne 0x414120
test ecx, ecx
je 0x414081
push 1
call fcn.00402770
push 0x1520
call fcn.004813ee
add esp, 4
mov dword [esp + 0x30], eax
test eax, eax
mov dword [esp + 0x394], 0xc
je 0x4140aa
mov ecx, eax
call fcn.00437410
jmp 0x4140ac
xor eax, eax
test eax, eax
mov dword [esp + 0x394], 0xffffffff
mov dword [0x6c77ac], eax
je case.default.0x4109ad
lea eax, [esp + 0x28]
push eax
xor edi, edi
push 4
mov dword [esp + 0x30], edi
call fcn.004336a0
add esp, 8
test eax, eax
je 0x41410e
lea ecx, [ecx]
mov ecx, dword [esp + 0x18]
push 0
push 0
push 0
push ecx
mov ecx, dword [0x6c77ac]
push eax
push edi
call fcn.0043cf00
lea edx, [esp + 0x28]
push edx
push 4
add edi, 1
call fcn.004336a0
add esp, 8
test eax, eax
jne 0x4140e0
call fcn.004753b0
mov ecx, dword [esp + 0x1c]
lea edx, [eax + ecx]
push edx
jmp 0x4141a1
test ecx, ecx
je 0x41412b
push 1
call fcn.00402770
push 0x1520
call fcn.004813ee
add esp, 4
mov dword [esp + 0x30], eax
test eax, eax
mov dword [esp + 0x394], 0xd
je 0x414154
mov ecx, eax
call fcn.00437410
jmp 0x414156
xor eax, eax
test eax, eax
mov dword [esp + 0x394], 0xffffffff
mov dword [0x6c77ac], eax
je case.default.0x4109ad
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
push 0
push 0
push 0
push eax
push ecx
call fcn.004335b0
mov ecx, dword [0x6c77ac]
add esp, 4
push eax
push 0
call fcn.0043cf00
call fcn.004753b0
mov edx, dword [esp + 0x1c]
lea ecx, [eax + edx]
push ecx
mov ecx, dword [0x6c77ac]
push eax
mov dword [esp + 0x30], eax
call fcn.00437440
test dword [0x6c77b0], 0x10000000
jne 0x40de68
mov ecx, dword [0x6c77ac]
push 0xffffffffffffffff
call fcn.0043d630
mov dword [ebx], 8
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [0x4bbfc8]
mov ecx, 1
add esp, 0x18
add esi, 4
test dword [0x6c77b0], 0x10000000
mov dword [eax*4 + 0x4bbfd8], ecx
mov dword [eax*4 + 0x4bbfb4], ecx
je 0x415eb2
mov eax, dword [esp + 0x14]
test eax, eax
je 0x415eb2
test byte [0x6cde08], 0xf
je 0x414257
cmp dword [0x4b4004], edi
jne 0x415eb2
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push ecx
push edx
push eax
call fcn.00434330
jmp 0x414016
cmp eax, 0x80010604
jne 0x415de4
mov edi, dword [esi]
lea ecx, [esp + 0x18]
add esi, 4
mov dword [esp + 0x14], edi
mov eax, dword [esi]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x24]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x2c]
add esp, 0x10
add esi, 4
test al, 4
mov edx, 1
jne 0x4142c5
mov ecx, dword [0x4bbfc8]
mov dword [ecx*4 + 0x4bbfd8], edx
mov dword [ecx*4 + 0x4bbfb4], edx
mov cl, al
not cl
movzx ecx, cl
and ecx, edx
test dword [0x6c77b0], 0x10000000
mov dword [0x4b4004], ecx
je 0x415eb2
test edi, edi
je 0x4146f5
test byte [0x6cde08], 0xf
je 0x4142fd
test ecx, ecx
jne 0x415eb2
mov edx, dword [esp + 0x18]
push eax
push edx
push edi
call fcn.004022d0
add esp, 4
push eax
call fcn.00434380
jmp 0x414016
mov edi, dword [0x4bbfc8]
xor ebx, ebx
cmp dword [edi*4 + 0x4bbfd8], ebp
je 0x414396
lea edx, [esp + 0x28]
shl edi, 5
push edx
add edi, 4
push edi
mov dword [esp + 0x30], ebx
call fcn.004336a0
mov edi, eax
add esp, 8
cmp edi, ebx
je 0x414389
mov eax, dword [esp + 0x34]
test byte [eax], 1
je 0x41435f
mov ecx, dword [0x6cb7a4]
cmp ecx, ebx
je 0x41435f
push edi
call fcn.0043d4d0
push edi
call fcn.0043ab90
mov edx, dword [0x4bbfc8]
lea ecx, [esp + 0x2c]
shl edx, 5
push ecx
add edx, 4
push edx
mov dword [esp + 0x34], ebx
call fcn.004336a0
mov edi, eax
add esp, 0xc
cmp edi, ebx
jne 0x414346
mov edi, dword [0x4bbfc8]
mov dword [edi*4 + 0x4bbfd8], ebx
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov ebp, dword [esi + 4]
add esi, 4
lea edx, [esp + 0x24]
add esi, 4
mov dword [esp + 0x20], ebp
mov eax, dword [esi]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x30]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x2c]
add esp, 0x18
push ebx
push edx
shl edi, 5
add edi, 4
push edi
push 0xffffffffffffffff
push ebp
add esi, 4
call fcn.004022d0
add esp, 4
push eax
call fcn.0043bed0
push eax
mov dword [esp + 0x40], eax
call fcn.004335b0
mov edi, eax
add esp, 0x18
cmp edi, ebx
je 0x413c6f
fild dword [esp + 0x20]
push ebx
sub esp, 8
fstp dword [esp + 4]
fild dword [esp + 0x28]
fstp dword [esp]
push edi
call fcn.00436f40
add esp, 0x10
cmp dword [0x4bbfc8], ebx
jne 0x414447
mov eax, dword [esp + 0x34]
test byte [eax], 1
je 0x414447
cmp dword [0x6cb7a4], ebx
je 0x414447
push edi
call fcn.00404340
add esp, 4
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0046b5b0
mov edx, dword [esp + 0x2c]
add esp, 4
mov dword [0x6c77a8], edx
jmp case.default.0x4109ad
cmp eax, 0x80010a04
ja 0x4146eb
je 0x414638
cmp eax, 0x80010804
je 0x41456a
cmp eax, 0x80010906
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov ecx, dword [esp + 0x44]
add esp, 0x28
add esi, 4
test cl, 4
mov edi, 1
jne 0x414502
mov eax, dword [0x4bbfc8]
mov dword [eax*4 + 0x4bbfd8], edi
mov dword [eax*4 + 0x4bbfb4], edi
mov edx, dword [esp + 0x2c]
mov al, dl
not al
movzx eax, al
and eax, edi
test dword [0x6c77b0], 0x10000000
mov dword [0x4b4004], eax
je 0x415eb2
test byte [0x6cde08], 0xf
je 0x414539
test eax, eax
je 0x414539
test dl, 2
jmp 0x415eab
mov eax, dword [esp + 0x18]
push edx
mov edx, dword [esp + 0x24]
push edx
push ecx
mov ecx, dword [esp + 0x20]
push eax
push ecx
call fcn.004343d0
mov edx, dword [0x4bbfc8]
mov dword [edx*4 + 0x4bc400], eax
add esp, 0x14
mov dword [ebx], 0x13
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov cl, byte [esp + 0x34]
add esp, 0x18
add esi, 4
test cl, 4
mov edx, 1
jne 0x4145c0
mov eax, dword [0x4bbfc8]
mov dword [eax*4 + 0x4bbfd8], edx
mov dword [eax*4 + 0x4bbfb4], edx
mov al, cl
not al
movzx eax, al
and eax, edx
test dword [0x6c77b0], 0x10000000
mov dword [0x4b4004], eax
je 0x415eb2
cmp dword [esp + 0x18], edi
je 0x415ea8
test byte [0x6cde08], 0xf
je 0x4145f9
test eax, eax
jne 0x415eb2
mov ecx, dword [esp + 0x14]
push ecx
call fcn.00446400
mov edx, dword [esp + 0x20]
mov eax, dword [0x4bbfc8]
mov ecx, dword [esp + 0x1c]
push edx
push eax
push ecx
push 0x3e9
call fcn.00434230
add esp, 0x14
mov edx, dword [0x4bbfc8]
mov dword [edx*4 + 0x4bc400], eax
mov dword [ebx], 0xa
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov cl, byte [esp + 0x34]
add esp, 0x18
add esi, 4
test cl, 4
mov edx, 1
jne 0x41468e
mov eax, dword [0x4bbfc8]
mov dword [eax*4 + 0x4bbfd8], edx
mov dword [eax*4 + 0x4bbfb4], edx
mov al, cl
not al
movzx eax, al
and eax, edx
test dword [0x6c77b0], 0x10000000
mov dword [0x4b4004], eax
je 0x415eb2
cmp dword [esp + 0x18], edi
je 0x415ea8
test byte [0x6cde08], 0xf
je 0x4146c7
test eax, eax
jne 0x415eb2
mov ecx, dword [esp + 0x14]
push ecx
call fcn.00446400
mov edx, dword [esp + 0x20]
mov eax, dword [0x4bbfc8]
mov ecx, dword [esp + 0x1c]
push edx
push eax
push ecx
push 0x3ea
jmp 0x414618
cmp eax, 0x80010b04
jmp 0x415de2
test al, 2
jmp 0x415eab
cmp eax, 0x80020701
ja 0x414a59
je 0x414a4a
cmp eax, 0x80020201
ja 0x414970
je 0x414959
cmp eax, 0x80020003
ja 0x414937
je 0x414885
cmp eax, 0x80010d04
je 0x4147cd
cmp eax, 0x80020002
jne 0x415de4
mov eax, dword [esi]
push 0
push 0
push 0xd
push 0xffffffffffffffff
push eax
mov dword [esp + 0x28], eax
add esi, 4
call fcn.004022d0
add esp, 4
push eax
call fcn.0043bed0
add esp, 0x14
test eax, eax
mov dword [esp + 0x28], eax
je 0x40b287
push eax
call fcn.004335b0
mov edi, eax
push edi
call fcn.00432850
mov edx, dword [0x6c77dc]
push edx
push edi
call fcn.004328b0
push 4
push 0
push edi
call fcn.00433470
add esp, 0x1c
cmp dword [0x4bbfc8], ebp
jne 0x4147be
mov eax, dword [esp + 0x34]
test byte [eax], 1
je 0x4147be
cmp dword [0x6cb7a4], ebp
je 0x4147be
push edi
call fcn.00404340
add esp, 4
mov ecx, dword [esp + 0x28]
mov dword [0x6c77a8], ecx
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov ecx, dword [esp + 0x34]
add esp, 0x18
add esi, 4
test cl, 4
mov edx, 1
jne 0x414823
mov eax, dword [0x4bbfc8]
mov dword [eax*4 + 0x4bbfd8], edx
mov dword [eax*4 + 0x4bbfb4], edx
mov al, cl
not al
movzx eax, al
and eax, edx
test dword [0x6c77b0], 0x10000000
mov dword [0x4b4004], eax
je 0x415eb2
test byte [0x6cde08], 0xf
je 0x414852
test eax, eax
jne 0x415eb2
mov edx, dword [esp + 0x14]
push ecx
mov ecx, dword [esp + 0x1c]
push ecx
push edx
call fcn.00476770
mov ecx, dword [0x4bbfc8]
add esp, 0xc
test eax, eax
mov dword [ecx*4 + 0x4bc400], eax
je case.default.0x4109ad
mov dword [ebx], 0xa
jmp case.default.0x4109ad
mov edi, dword [esi]
lea edx, [esp + 0x18]
add esi, 4
mov dword [esp + 0x14], edi
mov eax, dword [esi]
push edx
push eax
call section..text
add esp, 8
xor eax, eax
add esi, 4
cmp dword [esp + 0x18], eax
push 0
setne al
push 0
lea eax, [eax + eax + 0xb]
push eax
push 0xffffffffffffffff
push edi
call fcn.004022d0
add esp, 4
push eax
call fcn.0043bed0
add esp, 0x14
test eax, eax
mov dword [esp + 0x28], eax
je 0x407159
push eax
call fcn.004335b0
mov edi, eax
push edi
call fcn.00432850
mov ecx, dword [0x6c77dc]
push ecx
push edi
call fcn.004328b0
push 4
push 0
push edi
call fcn.00433470
add esp, 0x1c
cmp dword [0x4bbfc8], ebp
jne 0x40c2d2
mov edx, dword [esp + 0x34]
test byte [edx], 1
je 0x40c2d2
cmp dword [0x6cb7a4], ebp
je 0x40c2d2
push edi
call fcn.00404340
mov eax, dword [esp + 0x2c]
add esp, 4
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
cmp eax, 0x80020101
jne 0x415de4
push 1
push 1
call fcn.00405940
add esp, 8
mov dword [ebx], 8
jmp case.default.0x4109ad
push 1
push 0
call fcn.00405940
add esp, 8
mov dword [ebx], 8
jmp case.default.0x4109ad
cmp eax, 0x80020501
ja 0x4149ec
je 0x4149db
cmp eax, 0x80020302
je 0x4149b9
cmp eax, 0x80020402
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
mov dword [0x6cdde4], edx
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edx, dword [esp + 0x1c]
add esp, 8
add esi, 4
mov dword [0x6cbd40], edx
jmp case.default.0x4109ad
push 0xf
push 0xb
call fcn.0043ac80
add esp, 8
jmp case.default.0x4109ad
cmp eax, 0x80020602
jne 0x415de4
mov eax, dword [esi]
push 0
push 0
push 0x16
push 0xffffffffffffffff
push eax
mov dword [esp + 0x28], eax
add esi, 4
call fcn.004022d0
add esp, 4
push eax
call fcn.0043bed0
add esp, 0x14
test eax, eax
mov dword [esp + 0x28], eax
je 0x40b287
push 4
push 0
push eax
call fcn.004335b0
add esp, 4
push eax
call fcn.00433470
mov eax, dword [esp + 0x34]
add esp, 0xc
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
push 0x16
call fcn.0043abe0
add esp, 4
jmp case.default.0x4109ad
cmp eax, 0x80020c03
ja 0x414c6b
je 0x414c03
cmp eax, 0x80020a02
ja 0x414b5e
je 0x414af0
cmp eax, 0x80020802
je 0x414a9c
cmp eax, 0x80020901
jne 0x415de4
push 0x17
call fcn.0043abe0
add esp, 4
jmp case.default.0x4109ad
mov eax, dword [esi]
push 0
push 0
push 0x17
push 0xffffffffffffffff
push eax
mov dword [esp + 0x28], eax
add esi, 4
call fcn.004022d0
add esp, 4
push eax
call fcn.0043bed0
add esp, 0x14
test eax, eax
mov dword [esp + 0x28], eax
je 0x40b287
push 4
push 0
push eax
call fcn.004335b0
add esp, 4
push eax
call fcn.00433470
mov ecx, dword [esp + 0x34]
add esp, 0xc
mov dword [0x6c77a8], ecx
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test dword [0x6c77b0], 0x10000000
mov dword [0x4b4004], 1
je 0x414959
mov ecx, dword [0x6c77ac]
test ecx, ecx
je 0x414b2e
push 1
call fcn.00402770
push 0x1520
call fcn.004813ee
add esp, 4
mov dword [esp + 0x30], eax
test eax, eax
mov dword [esp + 0x394], 0xe
je 0x414cdf
mov ecx, eax
call fcn.00437410
jmp 0x414ce1
cmp eax, 0x80020b02
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edx, dword [esp + 0x1c]
lea eax, [esp + 0x30]
push eax
xor edi, edi
push 0xb
add esi, 4
mov dword [0x6c77dc], edx
mov dword [esp + 0x38], edi
call fcn.004336a0
add esp, 0x10
cmp eax, edi
je 0x414bbe
lea esp, [esp]
mov ecx, dword [esp + 0x14]
push ecx
push eax
call fcn.004328b0
lea edx, [esp + 0x30]
push edx
push 0xb
call fcn.004336a0
add esp, 0x10
cmp eax, edi
jne 0x414ba0
lea eax, [esp + 0x28]
push eax
push 0xd
mov dword [esp + 0x30], edi
call fcn.004336a0
add esp, 8
cmp eax, edi
je case.default.0x4109ad
lea esp, [esp]
mov ecx, dword [esp + 0x14]
push ecx
push eax
call fcn.004328b0
lea edx, [esp + 0x30]
push edx
push 0xd
call fcn.004336a0
add esp, 0x10
cmp eax, edi
jne 0x414be0
jmp case.default.0x4109ad
mov edi, dword [esi]
lea ecx, [esp + 0x18]
add esi, 4
mov dword [esp + 0x14], edi
mov eax, dword [esi]
push ecx
push eax
call section..text
add esp, 8
xor edx, edx
add esi, 4
cmp dword [esp + 0x18], edx
push 0
setne dl
push 0
lea edx, [edx + edx + 0xc]
push edx
push 0xffffffffffffffff
push edi
call fcn.004022d0
add esp, 4
push eax
call fcn.0043bed0
add esp, 0x14
test eax, eax
mov dword [esp + 0x28], eax
je 0x407159
push eax
call fcn.004335b0
push 4
mov edi, eax
push 0
push edi
call fcn.00433470
add esp, 0x10
jmp 0x41479c
cmp eax, 0x80020d01
je 0x414d4a
cmp eax, 0x80020e02
je 0x414d28
cmp eax, 0x80021202
jne 0x415de4
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov ecx, dword [0x6c77ac]
add esp, 8
add esi, 4
test ecx, ecx
mov dword [0x4b4004], edi
je 0x414cb6
push 1
call fcn.00402770
push 0x1520
call fcn.004813ee
add esp, 4
mov dword [esp + 0x30], eax
test eax, eax
mov dword [esp + 0x394], 0xf
je 0x414cdf
mov ecx, eax
call fcn.00437410
jmp 0x414ce1
xor eax, eax
mov dword [0x6c77ac], eax
mov eax, dword [esp + 0x14]
push eax
push 1
mov dword [esp + 0x39c], 0xffffffff
call fcn.00403210
add esp, 8
call fcn.004753b0
mov ecx, dword [esp + 0x14]
lea edx, [eax + ecx]
mov ecx, dword [0x6c77ac]
push edx
push eax
mov dword [esp + 0x30], eax
call fcn.00437440
mov dword [ebx], 0x12
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edx, dword [esp + 0x1c]
add esp, 8
add esi, 4
mov dword [0x6cde0c], edx
jmp case.default.0x4109ad
mov eax, dword [0x6c77dc]
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
mov eax, dword [esi]
push 0x6cbbdc
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbbe0
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbbe4
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbbe8
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov dword [0x6cbbec], 0xffffffff
jmp case.default.0x4109ad
cmp eax, 0x80050102
ja 0x4154dd
je 0x4154b0
cmp eax, 0x80030901
ja 0x41504d
je 0x415037
cmp eax, 0x80030401
ja 0x414f8a
je 0x414f09
cmp eax, 0x80030201
ja 0x414ee6
je 0x414ece
cmp eax, 0x80030006
je 0x414e42
cmp eax, 0x80030101
jne 0x415de4
call fcn.00405cf0
test al, al
je case.default.0x4109ad
mov esi, dword [0x4bbfd0]
jmp case.default.0x4109ad
mov eax, dword [esi]
push 0x6cbbdc
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbbe0
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbbe4
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbbe8
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbbec
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
jne case.default.0x4109ad
jmp 0x41607d
cmp byte [0x4bc3f5], 0
je case.default.0x4109ad
mov dword [ebx], 0x65
jmp case.default.0x4109ad
cmp eax, 0x80030301
jne 0x415de4
cmp byte [0x4bc3f5], 0
je case.default.0x4109ad
mov dword [ebx], 0x66
jmp case.default.0x4109ad
cmp byte [0x4bc3f5], 0
je case.default.0x4109ad
push 0x44
call fcn.004813ee
mov edi, eax
add esp, 4
test edi, edi
je case.default.0x4109ad
push edi
call fcn.00454d60
add esp, 4
test al, al
je 0x414f7c
cmp dword [edi], ebp
je 0x414f7c
mov edx, dword [edi + 4]
lea ecx, [esp + 0x40]
push ecx
push edx
call fcn.0046c970
add esp, 8
test eax, eax
mov dword [esp + 0x28], eax
je 0x414f7c
mov ecx, dword [0x6cb798]
imul ecx, eax
mov eax, 0xd1b71759
mul ecx
shr edx, 0xd
push edx
mov dword [esp + 0x2c], edx
mov edx, dword [esp + 0x44]
push edx
push 0xffffffffffffffff
push edi
call fcn.004659e0
add esp, 0x10
push edi
call fcn.00481352
add esp, 4
jmp case.default.0x4109ad
cmp eax, 0x80030701
ja 0x41500f
je 0x415000
cmp eax, 0x80030501
je 0x41501a
cmp eax, 0x80030602
jne 0x415de4
mov eax, dword [esi]
push 0
push 0
push 0x14
push 0xffffffffffffffff
push eax
mov dword [esp + 0x28], eax
add esi, 4
call fcn.004022d0
add esp, 4
push eax
call fcn.0043bed0
add esp, 0x14
test eax, eax
mov dword [esp + 0x28], eax
je 0x40b287
push 4
push 0
push eax
call fcn.004335b0
add esp, 4
push eax
call fcn.00433470
mov eax, dword [esp + 0x34]
add esp, 0xc
mov dword [0x6c77a8], eax
jmp case.default.0x4109ad
push 0x14
call fcn.0043abe0
add esp, 4
jmp case.default.0x4109ad
cmp eax, 0x80030801
jne 0x415de4
cmp byte [0x4bc3f5], 0
je case.default.0x4109ad
call fcn.00405c20
mov esi, dword [0x4bbfd0]
jmp case.default.0x4109ad
xor ecx, ecx
cmp byte [0x4bc3f5], cl
setne cl
mov dword [0x6c77a8], ecx
jmp case.default.0x4109ad
cmp eax, 0x80040101
ja 0x415411
je 0x415405
cmp eax, 0x80030c05
ja 0x415353
je 0x4152d3
cmp eax, 0x80030a01
je 0x4152bf
add eax, 0x7ffcf4ec
cmp eax, 1
ja 0x415de4
mov eax, dword [esi]
push 0x6cbd48
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd4c
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd50
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd54
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd58
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd5c
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd60
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd64
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd68
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd6c
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd70
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd74
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd78
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd7c
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd80
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd84
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd88
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd8c
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd90
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd94
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [0x6cde34]
push edx
call fcn.00454450
push 0
call fcn.00454e20
add esp, 8
jmp case.default.0x4109ad
call fcn.00456160
push 7
call fcn.0045cea0
add esp, 4
jmp case.default.0x4109ad
mov edi, dword [esi]
lea ecx, [esp + 0x18]
add esi, 4
mov dword [esp + 0x14], edi
mov eax, dword [esi]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x1c]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x20]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
push edx
push eax
push ecx
push edi
call fcn.004022d0
add esp, 4
push eax
call fcn.004544a0
add esp, 0x10
jmp case.default.0x4109ad
cmp eax, 0x80030d07
jne 0x415de4
mov eax, dword [esi]
push 0x6cbd98
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd9c
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbda0
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbda4
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbda8
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbdac
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
jne case.default.0x4109ad
jmp 0x41607d
or dword [0x6c77e4], 1
jmp case.default.0x4109ad
cmp eax, 0x80040201
je 0x4154a4
cmp eax, 0x80040301
je 0x415463
cmp eax, 0x80050005
jne 0x415de4
mov eax, dword [esi]
add esi, 4
mov dword [esp + 0x14], eax
mov ecx, dword [esi]
add esi, 4
mov dword [esp + 0x18], ecx
mov edx, dword [esi]
add esi, 4
mov dword [esp + 0x1c], edx
mov edi, dword [esi]
push edi
push edx
push ecx
push eax
mov dword [esp + 0x30], edi
add esi, 4
call fcn.004524c0
add esp, 0x10
jmp case.default.0x4109ad
xor edi, edi
jmp 0x415470
mov edx, dword [edi + 0x6cde14]
push edx
call fcn.0046e6d0
push eax
call fcn.00471730
mov eax, dword [edi + 0x6cde30]
push eax
call fcn.0046e6d0
push eax
call fcn.00471730
add edi, 4
add esp, 0x10
cmp edi, 0x14
jl 0x415470
jmp case.default.0x4109ad
and dword [0x6c77e4], 0xfffffffe
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esp + 0x14]
push edx
call fcn.00452480
add esp, 4
jmp case.default.0x4109ad
cmp eax, 0xf0000201
ja 0x4159cb
je 0x41597a
cmp eax, 0x80060301
ja 0x415710
je 0x4156c2
cmp eax, 0x80060104
ja 0x41566e
je 0x4155b5
cmp eax, 0x80050202
je 0x415578
cmp eax, 0x80050302
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
test eax, eax
je 0x415569
push eax
call fcn.004753b0
push eax
push 0
call fcn.00451ba0
add esp, 0xc
test al, al
je case.default.0x4109ad
mov dword [ebx], 0x14
jmp case.default.0x4109ad
push 0
call fcn.00452020
add esp, 4
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4155a6
push eax
call fcn.004753b0
push eax
push 1
jmp 0x41554e
push 1
call fcn.00452020
add esp, 4
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edx, dword [esi + 4]
add esi, 4
lea ecx, [esp + 0x24]
mov dword [esp + 0x20], edx
mov eax, dword [esi + 4]
add esi, 4
push ecx
push eax
call section..text
lea edx, [esp + 0x38]
push edx
push 0x11
xor ebx, ebx
push 0xf
add esi, 4
mov dword [esp + 0x44], ebx
call fcn.00433730
mov ebp, dword [esp + 0x50]
mov edi, eax
add esp, 0x1c
cmp edi, ebx
je 0x415638
test byte [ebp], 1
je 0x415617
mov ecx, dword [0x6cb7a4]
cmp ecx, ebx
je 0x415617
push edi
call fcn.0043d4d0
push edi
call fcn.0043ab90
lea eax, [esp + 0x2c]
push eax
push 0x11
push 0xf
mov dword [esp + 0x38], ebx
call fcn.00433730
mov edi, eax
add esp, 0x10
cmp edi, ebx
jne 0x415601
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
push ebp
push ebx
push ecx
push edx
push eax
call fcn.004022d0
add esp, 4
push eax
call fcn.00405b70
mov ecx, dword [esp + 0x2c]
push ecx
mov dword [0x6c77a8], eax
call fcn.0046b5b0
add esp, 0x18
jmp case.default.0x4109ad
cmp eax, 0x80060201
jne 0x415de4
lea edx, [esp + 0x28]
push edx
push 0x11
push 0xf
mov dword [esp + 0x34], edi
call fcn.00433730
add esp, 0xc
test eax, eax
je 0x4156b1
push 3
push 1
push eax
call fcn.00433470
lea eax, [esp + 0x34]
push eax
push 0x11
push 0xf
call fcn.00433730
add esp, 0x18
test eax, eax
jne 0x415692
push 1
push 1
call fcn.00403570
add esp, 8
jmp case.default.0x4109ad
lea ecx, [esp + 0x28]
push ecx
push 0x11
push 0xf
mov dword [esp + 0x34], edi
call fcn.00433730
add esp, 0xc
test eax, eax
je 0x4156ff
jmp 0x4156e0
push 3
push 0
push eax
call fcn.00433470
lea edx, [esp + 0x34]
push edx
push 0x11
push 0xf
call fcn.00433730
add esp, 0x18
test eax, eax
jne 0x4156e0
push 0
push 1
call fcn.00403570
add esp, 8
jmp case.default.0x4109ad
cmp eax, 0xf000000a
ja 0x415933
je 0x415852
cmp eax, 0x80060401
je 0x4157f1
cmp eax, 0x80060504
jne 0x415de4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov edx, dword [esi + 4]
add esi, 4
lea ecx, [esp + 0x24]
mov dword [esp + 0x20], edx
mov eax, dword [esi + 4]
add esi, 4
push ecx
push eax
call section..text
lea edx, [esp + 0x38]
push edx
push 0x11
xor ebx, ebx
push 0xf
add esi, 4
mov dword [esp + 0x44], ebx
call fcn.00433730
mov ebp, dword [esp + 0x50]
mov edi, eax
add esp, 0x1c
cmp edi, ebx
je 0x4157ba
test byte [ebp], 1
je 0x415799
mov ecx, dword [0x6cb7a4]
cmp ecx, ebx
je 0x415799
push edi
call fcn.0043d4d0
push edi
call fcn.0043ab90
lea eax, [esp + 0x2c]
push eax
push 0x11
push 0xf
mov dword [esp + 0x38], ebx
call fcn.00433730
mov edi, eax
add esp, 0x10
cmp edi, ebx
jne 0x415783
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
push ebp
push 1
push ecx
push edx
push eax
call fcn.004022d0
add esp, 4
push eax
call fcn.00405b70
mov ecx, dword [esp + 0x2c]
push ecx
mov dword [0x6c77a8], eax
call fcn.0046b5b0
add esp, 0x18
jmp case.default.0x4109ad
lea edx, [esp + 0x28]
push edx
push 0x11
xor ebx, ebx
push 0xf
mov dword [esp + 0x34], ebx
call fcn.00433730
mov edi, eax
add esp, 0xc
cmp edi, ebx
je case.default.0x4109ad
mov ebp, dword [esp + 0x34]
test byte [ebp], 1
je 0x41582c
mov ecx, dword [0x6cb7a4]
cmp ecx, ebx
je 0x41582c
push edi
call fcn.0043d4d0
push edi
call fcn.0043ab90
lea eax, [esp + 0x2c]
push eax
push 0x11
push 0xf
mov dword [esp + 0x38], ebx
call fcn.00433730
mov edi, eax
add esp, 0x10
cmp edi, ebx
jne 0x415816
jmp case.default.0x4109ad
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x20]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x2c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x38]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x68]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x74]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
add esp, 0x40
lea ecx, [esp + 0x34]
add esi, 4
push ecx
push eax
call section..text
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x40]
add esp, 8
push edx
mov edx, dword [esp + 0x28]
push eax
mov eax, dword [esp + 0x34]
push ecx
mov ecx, dword [esp + 0x2c]
push edx
mov edx, dword [esp + 0x2c]
push eax
mov eax, dword [esp + 0x2c]
push ecx
mov ecx, dword [esp + 0x2c]
push edx
push eax
push ecx
add esi, 4
call fcn.004335b0
add esp, 4
push eax
call fcn.004347d0
add esp, 0x24
jmp case.default.0x4109ad
cmp eax, 0xf0000101
jne 0x415de4
call fcn.004621b0
push pe_nt_image_headers32
push 5
call fcn.00462230
push 0x7d0
push 4
call fcn.00462230
push 0
push 3
call fcn.00462230
push 0
call fcn.004632c0
mov eax, dword [esp + 0x50]
add esp, 0x1c
or dword [eax], 4
jmp case.default.0x4109ad
push 0x49a468
mov dword [0x6cdecc], 1
call fcn.004633e0
push pe_nt_image_headers32
push 5
call fcn.004634a0
push 0x3c
push 4
call fcn.004634a0
push 0
push 3
call fcn.004634a0
push 0xa
push 8
call fcn.004634a0
push 0x64
call fcn.00463cb0
mov eax, dword [esp + 0x5c]
add esp, 0x28
or dword [eax], 8
jmp case.default.0x4109ad
cmp eax, 0xf0020209
ja 0x415dc7
je 0x415cf0
cmp eax, 0xf002000f
ja 0x415cdb
je 0x415b52
cmp eax, 0xf0000301
je 0x415b32
cmp eax, 0xf0000308
jne 0x415de4
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x38]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x4c]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x4c]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x68]
add esi, 4
push edx
push eax
call section..text
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x54]
mov edi, dword [esp + 0x64]
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x70]
mov dword [0x6cded0], eax
mov eax, dword [esp + 0x58]
push str.sys_leaf.epa
add esi, 4
mov dword [0x6cdecc], 0x64
mov dword [0x6cded4], ecx
mov dword [0x6cded8], edx
mov dword [0x6cdedc], eax
mov dword [0x6cdee0], edi
mov dword [0x6cdee4], ebx
mov dword [0x6cdee8], ebp
call fcn.004633e0
mov ecx, dword [esp + 0x50]
push ecx
push 3
call fcn.004634a0
mov edx, dword [esp + 0x5c]
add esp, 0x44
push edx
push 9
call fcn.004634a0
mov eax, dword [esp + 0x24]
push eax
push 4
call fcn.004634a0
mov ecx, dword [esp + 0x30]
push ecx
push 8
call fcn.004634a0
push edi
push 0xa
call fcn.004634a0
push ebx
push 0xb
call fcn.004634a0
push ebp
push 5
call fcn.004634a0
push 0x64
call fcn.00463cb0
mov eax, dword [esp + 0x68]
add esp, 0x34
or dword [eax], 8
jmp case.default.0x4109ad
fld1
push ecx
fstp dword [esp]
push 0x10
push 0x10
push 0x40
push pe_nt_image_headers32
push 0
call fcn.004618e0
add esp, 0x18
jmp case.default.0x4109ad
mov eax, dword [esi]
push 0x6cbd48
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd4c
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd50
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd54
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd58
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd5c
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd60
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd64
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd68
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd6c
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd70
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd74
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd78
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
push 0x6cbd7c
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
push 0
call fcn.00454e20
add esp, 4
jmp case.default.0x4109ad
cmp eax, 0xf0020101
jne 0x415de4
call fcn.004544d0
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x18]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x1c]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea ecx, [esp + 0x20]
push ecx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov eax, dword [esi]
lea edx, [esp + 0x2c]
push edx
push eax
call section..text
add esp, 8
add esi, 4
test eax, eax
je 0x4068f6
mov edx, dword [esi]
mov eax, dword [esi + 4]
add esi, 4
mov ecx, dword [esi + 4]
add esi, 4
push ecx
push eax
mov dword [esp + 0x30], ecx
add esi, 4
call fcn.004022d0
add esp, 4
push eax
push edx
call fcn.004022d0
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
add esp, 4
push eax
mov eax, dword [esp + 0x38]
push eax
mov eax, dword [esp + 0x28]
push ecx
mov ecx, dword [esp + 0x28]
push edx
push eax
push ecx
call fcn.00454500
add esp, 0x20
jmp case.default.0x4109ad
cmp eax, 0xf0020302
je 0x415f36
cmp eax, 0xf0020401
je 0x415ebd
cmp eax, 0xff010004
je 0x415dfb
movzx eax, byte [esi - 4]
sub esi, 4
cmp eax, ebp
je 0x4068f6
lea esi, [esi + eax*4]
jmp case.default.0x4109ad
mov eax, dword [esi]
lea edx, [esp + 0x14]
push edx
push eax
call section..text
mov eax, dword [esi + 4]
lea ecx, [esp + 0x20]
add esi, 4
push ecx
push eax
call section..text
mov eax, dword [esi + 4]
lea edx, [esp + 0x2c]
add esi, 4
push edx
push eax
call section..text
mov ecx, dword [esp + 0x34]
mov edi, dword [0x4bbfc8]
add esp, 0x18
add esi, 4
test cl, 4
mov ebp, 1
jne 0x415e52
mov dword [edi*4 + 0x4bbfd8], ebp
mov dword [edi*4 + 0x4bbfb4], ebp
mov al, cl
not al
movzx edx, al
and edx, ebp
test dword [0x6c77b0], 0x10000000
mov dword [0x4b4004], edx
je 0x415eb2
mov eax, dword [esp + 0x14]
cmp eax, 0x64
jb 0x415e82
mov dword [esp + 0x18], eax
mov eax, ebp
mov dword [esp + 0x14], eax
jmp 0x415e86
test eax, eax
je 0x415ea8
test byte [0x6cde08], 0xf
je 0x415e93
test edx, edx
jne 0x415eb2
push ecx
mov ecx, dword [esp + 0x1c]
push edi
push ecx
push eax
call fcn.00434230
add esp, 0x10
jmp 0x414620
test cl, 2
je 0x415eb2
call fcn.004754e0
mov dword [ebx], 8
jmp case.default.0x4109ad
cmp byte [0x4bc3f5], 0
je case.default.0x4109ad
push 0x44
call fcn.004813ee
mov edi, eax
add esp, 4
test edi, edi
je case.default.0x4109ad
push edi
call fcn.004558a0
add esp, 4
test al, al
je 0x414f7c
cmp dword [edi], ebp
je 0x414f7c
mov ecx, dword [edi + 4]
lea eax, [esp + 0x40]
push eax
push ecx
call fcn.0046c970
add esp, 8
test eax, eax
mov dword [esp + 0x28], eax
je 0x414f7c
mov edx, dword [0x6cb798]
imul edx, eax
mov eax, 0xd1b71759
mul edx
mov eax, dword [esp + 0x40]
shr edx, 0xd
push edx
mov dword [esp + 0x2c], edx
push eax
jmp 0x414f71
mov ecx, dword [esi]
mov dword [esp + 0x28], ecx
add esi, 4
call fcn.00455850
mov dword [esp + 0x14], eax
call fcn.00455870
mov edi, eax
test edi, edi
je case.default.0x4109ad
call fcn.00405c20
push 0
push edi
call fcn.0046dac0
add esp, 8
test eax, eax
je case.default.0x4109ad
mov edx, dword [esp + 0x14]
push edx
call fcn.00456070
push 0
push 0xffffffffffffffff
mov dword [0x4bbfc8], ebp
call fcn.00404520
mov ecx, dword [esp + 0x40]
mov dword [ecx], eax
mov eax, dword [0x6cb79c]
add esp, 0xc
test eax, eax
je 0x415fd9
mov edx, eax
shr edx, 0x1f
and edx, 1
and eax, 0xfffffff
push edx
push eax
call fcn.004022d0
add esp, 4
push eax
call fcn.004655d0
add esp, 8
call fcn.00465640
test dword [0x6cb79c], 0x40000000
je 0x415fde
push 0
push 0
call fcn.004657c0
add esp, 8
jmp 0x415fde
call fcn.00465700
push 0
push 0xffffffffffffffff
call fcn.004654f0
add esp, 8
xor esi, esi
lea esp, [esp]
mov eax, dword [esi + 0x6cdd14]
test eax, eax
je 0x416022
mov ecx, dword [esi + 0x6c6d3c]
push 1
push 0
push 3
push ecx
push eax
call fcn.004022d0
add esp, 4
push eax
call fcn.00465290
add esp, 0x10
push eax
call fcn.00465520
add esp, 8
add esi, 4
cmp esi, 0x24
jl 0x415ff0
mov edx, dword [0x6c9844]
push edx
mov byte [0x4bc3f5], 0
mov byte [0x4bc3f4], 0
call fcn.00402320
add esp, 4
cmp dword [esp + 0x28], ebp
mov esi, eax
je case.default.0x4109ad
mov eax, dword [0x4bbfc8]
push eax
push 0
mov ecx, esi
sub ecx, dword [0x4bc864]
push 0
push ecx
call fcn.0046c300
add esp, 0x10
test eax, eax
je case.default.0x4109ad
mov eax, dword [esp + 0x28]
mov edx, dword [0x4bc864]
lea esi, [edx + eax]
mov eax, esi
mov ecx, dword [esp + 0x38c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x374]
xor ecx, esp
call fcn.0048181f
add esp, 0x384
ret