Function at 0x40ec40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xfc
mov eax, dword fs:[0x2c]
mov dword [esp + 0x18], ecx
push ebx
push esi
mov ecx, dword [eax]
mov eax, dword [0x4d2580]
push edi
mov edi, dword [ebp + 0xc]
mov dword [esp + 0x8c], ecx
cmp eax, dword [ecx + 4]
jg 0x40fe3a
mov ebx, dword [ebp + 0x10]
xor esi, esi
xor al, al
mov word [esp + 0x54], 1
push 8
mov byte [esp + 0x1f], al
mov dword [esp + 0x20], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x3c], esi
mov dword [esp + 0x30], esi
mov dword [esp + 0x14], esi
mov dword [esp + 0x34], esi
mov word [esp + 0x38], 1
call fcn.0041fddb
mov ecx, dword [edi]
mov edx, eax
add esp, 4
mov dword [esp + 0x20], edx
mov dword [esp + 0x50], edx
mov dword [esp + 0x4c], 1
mov dword [edx], 0x14
mov dword [edx + 4], esi
mov esi, dword [ebp + 8]
mov dword [esp + 0x14], 0x17
mov eax, dword [esi + 4]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x49c470]
mov dword [esp + 0x70], ecx
movsx eax, word [eax + 0xa]
mov dword [esp + 0x58], eax
mov eax, dword [ebp + 0x14]
mov ecx, dword [edi]
cmp ecx, eax
je case.0x40fb15.4
mov edi, dword [esi + 4]
mov esi, dword [edi + ecx*4]
movzx eax, word [esi + 8]
mov edx, eax
cmp ax, 0x7f
je case.0x40fb15.4
movsx eax, dx
cmp eax, 0x33
je 0x40edc0
cmp eax, 0x4f
je case.0x40fb15.4
cmp eax, 5
je 0x40f1d5
cmp eax, 0x58
ja case.0x40fb15.4
movzx eax, byte [eax + 0x40ffe4]
jmp dword [eax*4 + 0x40ff78]
mov eax, dword [esi]
cmp eax, 4
jl 0x40fb04
cmp eax, 0x27
jge 0x40fb04
mov ebx, 0x14
mov dword [esp + 0x14], ebx
mov cl, byte [esp + 0x1b]
mov edx, dword [esp + 0x20]
test cl, cl
jne 0x40f3b3
mov eax, edx
imul eax, dword [eax], 0x15
movzx eax, byte [eax + ebx + 0x4b1840]
cmp eax, 3
jne 0x40f100
cmp dword [esp + 0x2c], 1
jne 0x454c0b
mov eax, dword [esp + 0x30]
xor edi, edi
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], edi
test eax, eax
jne 0x40f5b9
test edx, edx
je 0x40edb5
mov esi, dword [edx + 4]
push 8
push edx
call fcn.0041fdcd
add esp, 8
mov edx, esi
test esi, esi
jne 0x40eda1
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov edi, dword [esp + 0x38]
mov dword [esp + 0x14], 0x16
test edi, edi
jne 0x40f562
cmp ebx, 0x4d02a0
je 0x40ee15
mov eax, dword [ebx + 0xc]
cmp eax, 4
je 0x40fa93
mov esi, dword [ebx + 8]
test esi, esi
jne 0x40faa5
cmp eax, 5
jge 0x45474b
push 0x4d02a0
mov ecx, ebx
mov dword [ebx + 0xc], 1
mov dword [ebx], 0
call fcn.004100e0
mov eax, dword [esp + 0x10]
inc edi
mov dword [esp + 0x38], edi
mov dword [esp + 0x2c], edi
cmp edi, 1
jne 0x40f5a2
mov dword [esp + 0x88], ebx
cmp dword [0x4d2380], 0
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
mov ebx, dword [eax]
mov dword [esp + 0x6c], ebx
je 0x40fb2e
xor al, al
test al, al
jne 0x40f272
cmp byte [0x4d2389], al
jne 0x4548f7
mov esi, dword [0x4d2384]
cmp dword [esi], 0
je 0x40f272
mov ecx, dword [esp + 0x8c]
mov eax, dword [0x4d2540]
mov byte [esp + 0x3f], 0
cmp eax, dword [ecx + 4]
jg 0x454904
mov dword [0x4d2560], 0
mov dword [0x4d255c], 0
mov dword [esp + 0x68], 0x4d2544
mov dword [esp + 0x64], 0x4d2544
lea esp, [esp]
mov eax, dword [esi]
mov ecx, dword [ebx + 4]
mov dword [esp + 0x60], eax
mov dword [esp + 0x48], ecx
mov edx, dword [eax + 4]
test ecx, ecx
je 0x454947
test edx, edx
je 0x45494f
mov edi, dword [eax]
mov ebx, dword [ebx]
cmp ecx, edx
jb 0x40f171
mov edx, ecx
test edx, edx
je 0x40ef15
movzx eax, word [ebx]
mov dword [esp + 0x44], eax
movzx eax, word [edi]
mov ecx, eax
mov dword [esp + 0x40], ecx
movzx ecx, word [ebx]
cmp cx, ax
jne 0x40ef19
add ebx, 2
add edi, 2
sub edx, 1
jne 0x40eef2
xor eax, eax
jmp 0x40ef28
mov eax, dword [esp + 0x40]
cmp word [esp + 0x44], ax
sbb eax, eax
and eax, 0xfffffffe
inc eax
test eax, eax
js 0x40efcc
jle 0x40f043
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x60]
mov ebx, dword [esp + 0x6c]
mov edx, dword [eax + 0x1c]
test edx, edx
je 0x40f048
mov edi, dword [edx + 4]
cmp edi, ecx
ja 0x40f605
mov eax, dword [edx]
mov ebx, dword [ebx]
mov dword [esp + 0x44], eax
mov dword [esp + 0x40], edi
test edi, edi
je 0x40efad
jmp 0x40ef70
movzx ecx, word [eax]
movzx eax, cx
mov dword [esp + 0x78], eax
movzx eax, word [ebx]
mov dword [esp + 0x74], ecx
mov ecx, eax
mov dword [esp + 0x5c], ecx
mov ecx, dword [esp + 0x74]
cmp cx, ax
jne 0x40f1a6
mov eax, dword [esp + 0x44]
add ebx, 2
add eax, 2
sub dword [esp + 0x40], 1
mov dword [esp + 0x44], eax
jne 0x40ef70
mov ecx, dword [esp + 0x48]
cmp edi, ecx
jb 0x40f1b5
mov edx, dword [esi]
mov ecx, dword [esp + 0x64]
mov dword [ecx + 0x1c], edx
mov ebx, dword [esi]
mov dword [esp + 0x64], ebx
mov eax, dword [ebx + 0x1c]
jmp 0x40f0f5
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x60]
mov ebx, dword [esp + 0x6c]
mov edx, dword [eax + 0x18]
test edx, edx
je 0x40f048
mov eax, dword [edx + 4]
cmp ecx, eax
ja 0x40f649
mov edi, dword [edx]
mov ebx, dword [ebx]
mov dword [esp + 0x44], ecx
test ecx, ecx
je 0x40f0db
lea ebx, [ebx]
movzx eax, word [ebx]
mov dword [esp + 0x74], eax
movzx eax, word [edi]
mov ecx, eax
mov dword [esp + 0x40], ecx
movzx ecx, word [ebx]
cmp cx, ax
je 0x40f0c3
cmp word [esp + 0x74], ax
jae 0x40f0e3
mov ecx, dword [esp + 0x60]
mov eax, dword [edx + 0x1c]
mov dword [ecx + 0x18], eax
mov eax, dword [esi]
mov dword [edx + 0x1c], eax
mov dword [esi], edx
cmp dword [edx + 0x18], 0
je 0x40f048
jmp 0x40f0e5
mov byte [esp + 0x3f], 1
cmp byte [esp + 0x3f], 0
mov eax, dword [esi]
mov ecx, dword [esp + 0x64]
mov eax, dword [eax + 0x18]
mov dword [ecx + 0x1c], eax
mov eax, dword [esi]
mov ecx, dword [esp + 0x68]
mov eax, dword [eax + 0x1c]
mov dword [ecx + 0x18], eax
mov ecx, dword [esi]
mov eax, dword [0x4d2560]
mov dword [ecx + 0x18], eax
mov ecx, dword [esi]
mov eax, dword [0x4d255c]
mov dword [ecx + 0x1c], eax
je 0x40f272
mov eax, dword [esi]
test eax, eax
je 0x40f272
mov eax, dword [eax + 0x14]
test eax, eax
je 0x40f272
push dword [esp + 0x88]
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov ecx, dword [esp + 0x28]
push eax
inc dword [edi]
push edi
push esi
call fcn.004101e0
test eax, eax
js 0x454b05
mov ebx, dword [esp + 0x1c]
mov eax, dword [ebp + 0x14]
jmp 0x40ecf4
add ebx, 2
add edi, 2
sub dword [esp + 0x44], 1
jne 0x40f000
mov eax, dword [edx + 4]
mov ecx, dword [esp + 0x48]
cmp ecx, eax
jb 0x40f027
mov edx, dword [esi]
mov ecx, dword [esp + 0x68]
mov dword [ecx + 0x18], edx
mov ebx, dword [esi]
mov dword [esp + 0x68], ebx
mov eax, dword [ebx + 0x18]
mov ebx, dword [esp + 0x6c]
mov dword [esi], eax
jmp 0x40eec0
cmp eax, 6
ja case.0x40f109.3
jmp dword [eax*4 + 0x410040]
test cl, cl
jne 0x40f67a
push 8
call fcn.0041fddb
mov ecx, dword [esp + 0x24]
add esp, 4
mov dword [esp + 0x20], eax
mov dword [esp + 0x50], eax
mov dword [eax], ebx
mov dword [eax + 4], ecx
mov edi, dword [esp + 0x4c]
inc edi
mov dword [esp + 0x4c], edi
cmp ebx, 7
je 0x40fb88
cmp ebx, 8
je 0x40fb88
mov edi, dword [ebp + 0xc]
mov eax, dword [esp + 0x30]
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x38], eax
mov esi, dword [ebp + 8]
jmp 0x40f0bb
test edx, edx
je 0x40ef15
lea esp, [esp]
movzx eax, word [ebx]
mov dword [esp + 0x44], eax
movzx eax, word [edi]
mov ecx, eax
mov dword [esp + 0x40], ecx
movzx ecx, word [ebx]
cmp cx, ax
je 0x40fa7f
cmp word [esp + 0x44], ax
jmp 0x40ef22
mov eax, dword [esp + 0x5c]
cmp word [esp + 0x78], ax
jae 0x40efb5
mov ecx, dword [esp + 0x60]
mov eax, dword [edx + 0x18]
mov dword [ecx + 0x1c], eax
mov eax, dword [esi]
mov dword [edx + 0x18], eax
mov dword [esi], edx
cmp dword [edx + 0x1c], 0
je 0x40f048
jmp 0x40efb7
mov edi, dword [esp + 0x38]
mov dword [esp + 0x14], 0x16
test edi, edi
jne 0x40f68b
cmp ebx, 0x4d02a0
je 0x40f22a
mov eax, dword [ebx + 0xc]
cmp eax, 4
je 0x40f60c
mov esi, dword [ebx + 8]
test esi, esi
jne 0x40f61e
cmp eax, 5
jge 0x454542
push 0x4d02a0
mov ecx, ebx
mov dword [ebx + 0xc], 1
mov dword [ebx], 0
call fcn.004100e0
mov edx, dword [esp + 0x10]
mov eax, dword [ebp + 0xc]
inc edi
mov dword [esp + 0x38], edi
mov dword [esp + 0x2c], edi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov esi, dword [eax + ecx*4]
cmp edi, 1
jne 0x40f6cb
mov edi, ebx
mov esi, dword [esi]
mov ecx, edi
call fcn.0040cfa0
mov eax, dword [ebp + 0x14]
mov dword [edi + 0xc], 1
mov dword [edi], esi
mov edi, dword [ebp + 0xc]
inc dword [edi]
mov esi, dword [ebp + 8]
jmp 0x40ecf4
mov ebx, dword [0x4d2370]
test ebx, ebx
je 0x454ad9
mov ecx, dword [esp + 0x8c]
mov eax, dword [0x4d2540]
mov byte [esp + 0x3f], 0
cmp eax, dword [ecx + 4]
jg 0x45495c
mov dword [0x4d2560], 0
mov dword [0x4d255c], 0
mov dword [esp + 0x60], 0x4d2544
mov dword [esp + 0x64], 0x4d2544
mov esi, dword [esp + 0x6c]
mov edi, dword [ebx + 4]
mov eax, dword [esi + 4]
mov dword [esp + 0x48], eax
test eax, eax
je 0x4549a1
test edi, edi
je 0x4549a9
mov edx, dword [ebx]
mov esi, dword [esi]
cmp eax, edi
jb 0x40f31b
mov edi, eax
test edi, edi
je 0x40f317
lea ecx, [ecx]
movzx eax, word [esi]
mov dword [esp + 0x5c], eax
movzx eax, word [edx]
mov ecx, eax
mov dword [esp + 0x78], ecx
movzx ecx, word [esi]
cmp cx, ax
jne 0x40f4a2
add esi, 2
add edx, 2
sub edi, 1
jne 0x40f2f0
xor eax, eax
jmp 0x40f347
test edi, edi
je 0x40f317
nop
movzx eax, word [esi]
mov dword [esp + 0x5c], eax
movzx eax, word [edx]
mov ecx, eax
mov dword [esp + 0x78], ecx
movzx ecx, word [esi]
cmp cx, ax
je 0x40f654
cmp word [esp + 0x5c], ax
sbb eax, eax
and eax, 0xfffffffe
inc eax
test eax, eax
js 0x40f4b0
jg 0x40f3bb
mov byte [esp + 0x3f], 1
cmp byte [esp + 0x3f], 0
mov ecx, dword [esp + 0x64]
mov eax, dword [ebx + 0x18]
mov dword [ecx + 0x1c], eax
mov eax, dword [0x4d2370]
mov ecx, dword [esp + 0x60]
mov eax, dword [eax + 0x1c]
mov dword [ecx + 0x18], eax
mov ecx, dword [0x4d2370]
mov eax, dword [0x4d2560]
mov dword [ecx + 0x18], eax
mov ecx, dword [0x4d2370]
mov eax, dword [0x4d255c]
mov dword [ecx + 0x1c], eax
je 0x454ad9
mov eax, dword [0x4d2370]
test eax, eax
je 0x454ad9
mov eax, dword [eax + 0x14]
test eax, eax
jne 0x40f094
jmp 0x454ad9
mov eax, dword [edx + 4]
jmp 0x40ed68
mov eax, dword [esp + 0x48]
mov esi, dword [esp + 0x6c]
lea ecx, [ebx + 0x1c]
mov dword [esp + 0x74], ecx
mov ecx, dword [ecx]
mov dword [esp + 0x40], ecx
test ecx, ecx
je 0x40f356
mov edx, dword [ecx + 4]
mov dword [esp + 0x68], edx
cmp edx, eax
jbe 0x40f3e5
mov edx, eax
mov dword [esp + 0x68], eax
cmp dword [esp + 0x68], 0
mov edi, edx
mov edx, dword [esi]
mov esi, dword [ecx]
jbe 0x40f41d
movzx eax, word [esi]
mov dword [esp + 0x5c], eax
movzx eax, word [edx]
mov ecx, eax
mov dword [esp + 0x78], ecx
movzx ecx, word [esi]
cmp cx, ax
jne 0x40f425
add esi, 2
add edx, 2
sub edi, 1
jne 0x40f3f2
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x40]
cmp dword [esp + 0x68], eax
jb 0x40f434
jmp 0x40f457
mov eax, dword [esp + 0x78]
cmp word [esp + 0x5c], ax
jae 0x40f457
mov ecx, dword [esp + 0x40]
mov ebx, ecx
mov ecx, dword [esp + 0x74]
mov eax, dword [ebx + 0x18]
mov dword [ecx], eax
mov eax, dword [0x4d2370]
mov dword [ebx + 0x18], eax
mov dword [0x4d2370], ebx
cmp dword [ebx + 0x1c], 0
je 0x40f356
mov ecx, dword [esp + 0x64]
mov dword [ecx + 0x1c], ebx
mov ecx, dword [0x4d2370]
mov dword [esp + 0x64], ecx
mov ebx, dword [ecx + 0x1c]
mov dword [0x4d2370], ebx
jmp 0x40f2c1
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x50]
push eax
call fcn.004106a0
test eax, eax
js 0x454b0b
mov al, byte [esp + 0x55]
mov ecx, dword [esp + 0x50]
mov byte [esp + 0x1b], al
mov dword [esp + 0x20], ecx
jmp 0x40ed56
mov eax, dword [esp + 0x78]
cmp word [esp + 0x5c], ax
jmp 0x40f341
mov eax, dword [esp + 0x48]
mov edx, dword [ebx + 0x18]
lea ecx, [ebx + 0x18]
mov dword [esp + 0x44], ecx
test edx, edx
je 0x40f356
mov esi, dword [edx + 4]
cmp eax, esi
ja 0x40fc63
mov edi, dword [esp + 0x6c]
mov esi, dword [edx]
mov dword [esp + 0x40], eax
mov edi, dword [edi]
test eax, eax
je 0x40f50e
movzx eax, word [edi]
mov dword [esp + 0x5c], eax
movzx eax, word [esi]
mov ecx, eax
mov dword [esp + 0x78], ecx
movzx ecx, word [edi]
cmp cx, ax
jne 0x40f515
add edi, 2
add esi, 2
sub dword [esp + 0x40], 1
jne 0x40f4e1
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
cmp eax, dword [edx + 4]
jb 0x40f524
jmp 0x40f543
mov eax, dword [esp + 0x78]
cmp word [esp + 0x5c], ax
jae 0x40f543
mov ecx, dword [esp + 0x44]
mov ebx, edx
mov eax, dword [ebx + 0x1c]
mov dword [ecx], eax
mov eax, dword [0x4d2370]
mov dword [ebx + 0x1c], eax
mov dword [0x4d2370], ebx
cmp dword [ebx + 0x18], 0
je 0x40f356
mov ecx, dword [esp + 0x60]
mov dword [ecx + 0x18], ebx
mov ecx, dword [0x4d2370]
mov dword [esp + 0x60], ecx
mov ebx, dword [ecx + 0x18]
mov dword [0x4d2370], ebx
jmp 0x40f2c1
cmp byte [esp + 0x35], 0
jne 0x40f8b1
push 0x18
call fcn.0041fddb
add esp, 4
mov esi, eax
mov ecx, esi
push 0x4d02a0
mov dword [esi + 8], 0
call fcn.004100e0
mov eax, dword [esp + 0x10]
mov dword [esi + 0x10], eax
mov eax, esi
mov dword [esp + 0x10], eax
mov dword [esp + 0x30], eax
jmp 0x40ee19
cmp byte [esp + 0x35], 0
jne 0x4548ef
mov dword [esp + 0x88], eax
jmp 0x40ee32
mov edi, dword [esp + 0x10]
lea ecx, [ecx]
mov ebx, dword [edi + 8]
mov esi, dword [edi + 0x10]
test ebx, ebx
jne 0x40fc8e
mov eax, dword [edi + 0xc]
cmp eax, 5
jge 0x40fd9f
push 0x18
push edi
mov dword [edi + 0xc], 1
mov dword [edi], 0
call fcn.0041fdcd
add esp, 8
mov edi, esi
test esi, esi
jne 0x40f5c0
mov edi, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
jmp 0x40ed9d
mov edi, ecx
jmp 0x40ef58
cmp dword [0x4d02ac], 4
jne 0x40f1fd
jmp 0x45450b
mov eax, dword [esi + 0xc]
dec dword [eax]
mov eax, dword [esi + 0xc]
cmp dword [eax], 0
je 0x454526
push 0x10
push esi
call fcn.0041fdcd
mov eax, dword [ebx + 0xc]
add esp, 8
mov dword [ebx + 8], 0
jmp 0x40f208
mov ecx, eax
mov dword [esp + 0x48], eax
jmp 0x40efea
add esi, 2
add edx, 2
sub edi, 1
jne 0x40f320
jmp 0x40f317
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 0xd
mov dword [esi], eax
jmp 0x40ed52
xor al, al
mov dword [edx], ebx
mov byte [esp + 0x1b], al
mov byte [esp + 0x55], al
jmp 0x40f133
cmp byte [esp + 0x35], 0
jne 0x40fa1a
push 0x18
call fcn.0041fddb
add esp, 4
mov esi, eax
mov ecx, esi
push 0x4d02a0
mov dword [esi + 8], 0
call fcn.004100e0
mov eax, dword [esp + 0x10]
mov edx, esi
mov dword [esi + 0x10], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x30], edx
jmp 0x40f22e
cmp byte [esp + 0x35], 0
jne 0x45470c
mov edi, edx
jmp 0x40f250
test cl, cl
je 0x40f904
mov eax, dword [edx + 4]
cmp dword [eax], 0x12
je 0x40f76e
test cl, cl
jne 0x40fa12
mov eax, edx
cmp dword [eax], 0x14
je 0x454ba8
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x50]
push eax
call fcn.004106a0
test eax, eax
js 0x454b0b
mov edx, dword [esp + 0x50]
mov cl, byte [esp + 0x55]
mov dword [esp + 0x20], edx
jmp case.0x40f109.2
test ecx, ecx
je 0x40f74a
mov eax, dword [edi + ecx*4 - 4]
movzx eax, word [eax + 8]
mov edx, eax
cmp ax, 0x48
je 0x45411e
cmp dx, 0x4f
je 0x45411e
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 0x12
mov dword [esi], eax
jmp 0x40ed52
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 0x13
mov dword [esi], eax
jmp 0x40ed52
test cl, cl
je 0x40f78a
mov esi, dword [edx + 4]
push 8
push edx
call fcn.0041fdcd
mov edx, esi
add esp, 8
mov dword [esp + 0x20], edx
mov dword [esp + 0x50], edx
cmp byte [esp + 0x54], 0
je 0x4549b6
mov al, 1
mov edi, dword [esp + 0x4c]
dec edi
mov byte [esp + 0x55], al
mov byte [esp + 0x1b], al
mov dword [esp + 0x4c], edi
jmp 0x40f13c
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 1
mov dword [esi], eax
jmp 0x40ed52
mov esi, dword [esp + 0x38]
mov dword [esp + 0x14], 0x16
test esi, esi
je 0x40fcb6
cmp byte [esp + 0x35], 0
jne 0x40fd2f
push 0x18
call fcn.0041fddb
add esp, 4
mov esi, eax
mov ecx, esi
push 0x4d02a0
mov dword [esi + 8], 0
call fcn.004100e0
mov eax, dword [esp + 0x10]
mov dword [esi + 0x10], eax
mov eax, esi
mov esi, dword [esp + 0x38]
mov dword [esp + 0x10], eax
mov dword [esp + 0x30], eax
mov eax, dword [ebp + 8]
inc esi
mov edi, dword [ebp + 0xc]
mov dword [esp + 0x38], esi
mov dword [esp + 0x2c], esi
mov edx, dword [eax + 4]
mov ecx, dword [edi]
mov eax, dword [edx + ecx*4 + 4]
cmp word [eax + 8], 0x47
jne 0x453f51
cmp esi, 1
je 0x40fcc7
cmp byte [esp + 0x35], 0
mov eax, dword [esp + 0x10]
jne 0x453f6d
mov esi, dword [ebp + 8]
mov ecx, dword [esp + 0x24]
push eax
push edi
push esi
push 0
call fcn.00411310
test eax, eax
js 0x454b05
mov eax, dword [esp + 0x24]
cmp dword [eax + 0xfc], 1
jne 0x40f0bb
jmp 0x454b05
mov eax, dword [esp + 0x14]
cmp eax, 0x16
jne 0x40fae2
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov dword [esp + 0x14], 0xb
mov ebx, dword [esp + 0x14]
mov dword [esi], eax
jmp 0x40ed56
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
xor ebx, ebx
mov dword [esi], eax
jmp 0x40ed52
mov ecx, dword [esp + 0x10]
cmp ecx, 0x4d02a0
je 0x40f8fa
mov eax, dword [ecx + 0xc]
cmp eax, 4
je 0x40feea
mov ecx, dword [ecx + 8]
test ecx, ecx
jne 0x40fefc
cmp eax, 5
jge 0x454817
mov esi, dword [esp + 0x10]
mov ecx, esi
push 0x4d02a0
mov dword [esi + 0xc], 1
mov dword [esi], 0
call fcn.004100e0
mov byte [esp + 0x35], 0
jmp 0x40ee15
mov eax, edx
jmp 0x40f6eb
mov edi, dword [esp + 0x38]
mov dword [esp + 0x14], 0x16
test edi, edi
jne 0x40fb35
cmp ebx, 0x4d02a0
je 0x40f944
cmp dword [ebx + 0xc], 4
je 0x40ff65
mov ecx, ebx
call fcn.0040cfa0
push 0x4d02a0
mov ecx, ebx
call fcn.004100e0
mov edx, dword [esp + 0x10]
mov esi, dword [ebp + 0xc]
inc edi
mov eax, dword [ebp + 8]
mov dword [esp + 0x38], edi
mov dword [esp + 0x2c], edi
mov ecx, dword [esi]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
cmp edi, 1
jne 0x40fb76
mov esi, ebx
mov edi, dword [eax]
mov eax, dword [esi + 0xc]
mov ecx, dword [esi + 8]
cmp eax, 4
je 0x453dec
test ecx, ecx
jne 0x453dff
cmp eax, 5
jge 0x453e14
push 0x10
mov dword [esi], 0
mov dword [esi + 0xc], 4
call fcn.0041fddb
mov ecx, dword [edi]
add esp, 4
mov dword [eax], ecx
mov ecx, dword [edi + 4]
mov dword [eax + 4], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 8], ecx
mov ecx, dword [edi + 0xc]
mov dword [eax + 0xc], ecx
inc dword [ecx]
mov dword [esi + 8], eax
mov edi, dword [ebp + 0xc]
mov edx, dword [esp + 0x24]
inc dword [edi]
cmp byte [edx + 0x102], 0
jne 0x453ed3
cmp byte [edx + 0x103], 0
mov esi, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
je 0x40ecf4
jmp 0x453eec
mov eax, dword [esp + 0x14]
cmp eax, 0x16
jne 0x40fc6e
mov dword [esp + 0x14], 0xc
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, dword [esp + 0x14]
mov dword [esi], eax
jmp 0x40ed56
mov eax, dword [edx + 4]
jmp 0x40f6fa
mov ecx, dword [esp + 0x10]
cmp ecx, 0x4d02a0
je 0x40fa63
mov eax, dword [ecx + 0xc]
cmp eax, 4
je 0x4545f3
mov ecx, dword [ecx + 8]
test ecx, ecx
jne 0x45461b
cmp eax, 5
jge 0x454634
mov esi, dword [esp + 0x10]
mov ecx, esi
push 0x4d02a0
mov dword [esi + 0xc], 1
mov dword [esi], 0
call fcn.004100e0
mov byte [esp + 0x35], 0
jmp 0x40f22a
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 0xe
mov dword [esi], eax
jmp 0x40ed52
add ebx, 2
add edi, 2
sub edx, 1
jne 0x40f180
jmp 0x40ef15
cmp dword [0x4d02ac], 4
jne 0x40ede8
jmp 0x454714
mov eax, dword [esi + 0xc]
dec dword [eax]
mov eax, dword [esi + 0xc]
cmp dword [eax], 0
je 0x45472f
push 0x10
push esi
call fcn.0041fdcd
mov eax, dword [ebx + 0xc]
add esp, 8
mov dword [ebx + 8], 0
jmp 0x40edf3
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 9
mov dword [esi], eax
jmp 0x40ed52
cmp eax, 0x13
je 0x40f889
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov dword [esp + 0x14], 0x11
mov ebx, dword [esp + 0x14]
mov dword [esi], eax
jmp 0x40ed56
dec eax
cmp eax, 0x29
ja case.0x40fb15.4
movzx eax, byte [eax + 0x41007c]
jmp dword [eax*4 + 0x41005c]
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 7
mov dword [esi], eax
jmp 0x40ed52
mov al, 1
jmp 0x40ee55
cmp byte [esp + 0x35], 0
je 0x40fce0
mov esi, dword [esp + 0x10]
cmp esi, 0x4d02a0
je 0x40fb6c
cmp dword [0x4d02ac], 4
je 0x40fedb
mov ecx, esi
call fcn.0040cfa0
push 0x4d02a0
mov ecx, esi
call fcn.004100e0
mov byte [esp + 0x35], 0
jmp 0x40f944
cmp byte [esp + 0x35], 0
jne 0x453de4
mov esi, edx
jmp 0x40f96a
mov esi, dword [esp + 0x2c]
mov eax, dword [esp + 0x30]
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x38], esi
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], ebx
test esi, esi
je 0x4549de
cmp esi, 1
jne 0x4549e6
mov eax, ebx
push eax
lea ecx, [esp + 0xe4]
mov dword [esp + 0xec], 0
call fcn.004100e0
lea ecx, [esp + 0xe0]
call fcn.00401fba
mov ecx, dword [esp + 0x14]
test al, al
jne 0x40fe12
cmp ecx, 7
jne 0x40fc4c
push dword [ebp + 0xc]
mov eax, dword [ebp + 8]
push eax
call fcn.00419d2b
test eax, eax
js 0x454bdc
cmp dword [esp + 0x14], 8
je 0x4549f9
cmp esi, 1
jne 0x454a13
mov esi, ebx
mov ecx, esi
call fcn.0040cfa0
mov byte [esi], 0
cmp byte [esp + 0x1b], 0
mov dword [esi + 0xc], 9
jne 0x454a2f
mov eax, dword [esp + 0x20]
cmp byte [esp + 0x54], 0
je 0x454a50
mov al, 1
dec edi
mov byte [esp + 0x55], al
mov byte [esp + 0x1b], al
mov dword [esp + 0x4c], edi
lea ecx, [esp + 0xe0]
call fcn.0040cfa0
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
jmp 0x40f0bb
mov eax, esi
mov dword [esp + 0x48], esi
jmp 0x40f4d1
cmp eax, 0x13
je 0x40f9f9
jmp 0x454084
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 5
mov dword [esi], eax
jmp 0x40ed52
mov eax, dword [ebx + 0xc]
dec dword [eax]
mov eax, dword [ebx + 0xc]
cmp dword [eax], 0
je 0x40fd83
push 0x10
push ebx
call fcn.0041fdcd
add esp, 8
mov dword [edi + 8], 0
jmp 0x40f5ce
push 0x4d02a0
mov ecx, ebx
call fcn.0040aceb
jmp 0x40f812
mov eax, ebx
jmp 0x40f84d
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 2
mov dword [esi], eax
jmp 0x40ed52
push 0x18
call fcn.0041fddb
add esp, 4
mov esi, eax
mov ecx, esi
push 0x4d02a0
mov dword [esi + 8], 0
call fcn.004100e0
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x40fe28
mov edx, esi
mov dword [esi + 0x10], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x30], edx
jmp 0x40f948
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 4
mov dword [esi], eax
jmp 0x40ed52
mov ecx, dword [esp + 0x10]
push 0x4d02a0
call fcn.0040aceb
mov byte [esp + 0x35], 0
jmp 0x40f812
push 0x4d02a0
lea ecx, [esp + 0x2c]
mov dword [esp + 0x18], 0x16
call fcn.0041ceb1
lea ecx, [esp + 0x28]
call fcn.0041cf15
mov esi, eax
mov ecx, esi
call fcn.0040cfa0
mov dword [esi + 0xc], 9
mov byte [esi], 0
mov edi, dword [ebp + 0xc]
inc dword [edi]
jmp 0x40f151
push dword [ebx]
call fcn.0041fe14
add esp, 4
push 4
push dword [ebx + 0xc]
call fcn.0041fdcd
add esp, 8
jmp 0x40fc9f
sub eax, 5
cmp eax, 0xa
ja case.0x40fdab.6
jmp dword [eax*4 + 0x4100a8]
push 0x4d02a0
lea ecx, [esp + 0x2c]
mov dword [esp + 0x18], 0x16
call fcn.0041ceb1
lea ecx, [esp + 0x28]
call fcn.0041cf15
mov esi, eax
mov ecx, esi
call fcn.0040cfa0
mov edi, dword [ebp + 0xc]
mov dword [esi + 0xc], 9
mov byte [esi], 1
inc dword [edi]
jmp 0x40f151
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 3
mov dword [esi], eax
jmp 0x40ed52
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 8
mov dword [esi], eax
jmp 0x40ed52
cmp ecx, 8
je 0x40fbe8
test al, al
jne 0x40fc4c
jmp 0x40fbe3
mov edx, esi
mov dword [esi + 0x10], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x30], edx
jmp 0x40f948
push 0x4d2580
call fcn.00420242
add esp, 4
cmp dword [0x4d2580], 0xffffffff
jne 0x40ec76
push 0x44247b
call fcn.004200a3
add esp, 4
push 0x4d2580
call fcn.004201f8
add esp, 4
jmp 0x40ec76
push 0x4d02a0
lea ecx, [esp + 0x2c]
mov dword [esp + 0x18], 0x16
call fcn.0041ceb1
mov edi, dword [ebp + 0xc]
lea ecx, [esp + 0x28]
mov esi, dword [ebp + 8]
mov edx, dword [edi]
lea eax, [edx + 1]
mov dword [edi], eax
mov eax, dword [esi + 4]
mov edx, dword [eax + edx*4]
call fcn.0041cf15
mov ebx, dword [esp + 0x24]
mov ecx, ebx
push eax
push dword [edx]
call fcn.0041cf92
test eax, eax
js 0x454a9e
mov eax, dword [esp + 0x30]
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x38], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x1c], ebx
jmp 0x40ecf4
cmp dword [esi + 0xc], 4
jne 0x40fb59
jmp 0x453dc9
cmp dword [0x4d02ac], 4
jne 0x40f8c9
jmp 0x4547fc
push ecx
call fcn.0041d1e6
mov eax, dword [esp + 0x10]
mov dword [eax + 8], 0
mov eax, dword [eax + 0xc]
jmp 0x40f8d4
push 0x4d02a0
lea ecx, [esp + 0x2c]
mov dword [esp + 0x18], 0x16
call fcn.0041ceb1
mov edi, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov ecx, dword [edi]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
lea ecx, [esp + 0x28]
fld qword [eax]
fstp qword [esp + 0x78]
call fcn.0041cf15
mov esi, eax
mov ecx, esi
call fcn.0040cfa0
fld qword [esp + 0x78]
inc dword [edi]
fstp qword [esi]
mov dword [esi + 0xc], 3
jmp 0x40f151
cmp dword [0x4d02ac], 4
jne 0x40f931
jmp 0x453dae
mov ecx, dword [ebx + 8]
mov eax, dword [0x4d02a8]
cmp ecx, eax
je 0x40f944
push eax
call fcn.0040a8c7
jmp 0x40f944
mov ecx, dword [esi + 8]
mov eax, dword [0x4d02a8]
cmp ecx, eax
je 0x40fb6c
push eax
call fcn.0040a8c7
jmp 0x40fb6c
mov esi, dword [edx + 0x10]
jmp 0x40f96a
cmp ecx, edi
je 0x40f9be
push edi
call fcn.0040a8c7
jmp 0x40f9be
push ecx
call fcn.0041d1e6
mov eax, dword [esi + 0xc]
mov dword [esi + 8], 0
jmp 0x40f983
sub eax, 5
cmp eax, 0xa
ja case.0x453e20.6
jmp dword [eax*4 + 0x454cce]
mov eax, dword [esi]
test eax, eax
je case.0x453e20.6
push eax
call dword [esp + 0x74]
push 0x10
push dword [esi]
call fcn.0041fdcd
add esp, 8
jmp case.0x453e20.6
mov ebx, dword [esi]
test ebx, ebx
je 0x453eca
lea ecx, [ebx + 8]
call fcn.0040988f
push 0x18
jmp 0x453ec1
mov ebx, dword [esi]
test ebx, ebx
je 0x453eca
mov ecx, ebx
call fcn.0041ce17
push 4
jmp 0x453ec1
mov eax, dword [esi]
push dword [eax + 4]
call fcn.0041fe14
add esp, 4
push 8
push dword [esi]
call fcn.0041fdcd
add esp, 8
jmp case.0x453e20.6
mov ecx, dword [esi]
test ecx, ecx
je case.0x453e20.6
push ecx
call fcn.0045fd59
jmp case.0x453e20.6
mov ecx, dword [esi]
test ecx, ecx
je case.0x453e20.6
mov eax, dword [ecx]
push 1
call dword [eax]
jmp case.0x453e20.6
mov ebx, dword [esi]
test ebx, ebx
je 0x453eca
mov ecx, ebx
call fcn.0040988f
push 0x14
push ebx
call fcn.0041fdcd
add esp, 8
mov ebx, dword [esp + 0x1c]
jmp case.0x453e20.6
lea ecx, [esp + 0x28]
call fcn.0041cf15
mov ecx, eax
call fcn.00487632
mov edx, dword [esp + 0x24]
jmp 0x40f9d4
lea ecx, [esp + 0x28]
call fcn.0041cf15
push eax
mov ecx, edx
call fcn.00487771
mov eax, dword [ebp + 0x14]
jmp 0x40ecf4
push 0x4d02a0
lea ecx, [esp + 0x2c]
mov dword [esp + 0x18], 0x16
call fcn.0041ceb1
mov esi, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov ecx, dword [esi]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
lea ecx, [esp + 0x28]
mov edi, dword [eax]
mov ebx, dword [eax + 4]
call fcn.0041cf15
mov esi, eax
mov ecx, esi
call fcn.0040cfa0
mov dword [esi + 0xc], 2
mov dword [esi], edi
mov dword [esi + 4], ebx
jmp 0x40fd79
mov eax, dword [edx + ecx*4]
lea ecx, [esp + 0x28]
push dword [eax]
call fcn.0041cf15
mov ecx, eax
call fcn.00471155
inc dword [edi]
jmp 0x40f169
mov eax, dword [eax + 0x10]
jmp 0x40f84d
push 0x4d02a0
lea ecx, [esp + 0x2c]
mov dword [esp + 0x18], 0x16
call fcn.0041ceb1
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov ecx, dword [edi]
mov edx, dword [esi + 4]
mov eax, dword [edx + ecx*4 + 4]
cmp word [eax + 8], 0x47
je 0x454031
mov eax, dword [edx + ecx*4]
mov ebx, dword [esp + 0x24]
mov ecx, dword [eax]
mov eax, dword [ecx]
mov dword [esp + 0xa0], eax
mov eax, dword [ecx + 4]
mov dword [esp + 0xa4], eax
mov eax, dword [ecx + 8]
mov dword [esp + 0xa8], eax
mov eax, dword [ecx + 0xc]
mov ecx, ebx
mov dword [esp + 0xac], eax
inc dword [eax]
lea eax, [esp + 0xa0]
push eax
call fcn.0041e300
test eax, eax
je 0x454a6f
lea eax, [esp + 0xa0]
push eax
lea ecx, [esp + 0x2c]
call fcn.0041cf15
mov ecx, eax
call fcn.00471abf
inc dword [edi]
lea ecx, [esp + 0xa0]
call fcn.0040988f
mov eax, dword [esp + 0x30]
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x38], eax
mov dword [esp + 0x1c], ebx
jmp 0x40f0bb
lea eax, [esp + 0x87]
push eax
lea ecx, [esp + 0x2c]
call fcn.0041cf15
mov ebx, dword [esp + 0x28]
mov ecx, ebx
push eax
push edi
push esi
push 0
call fcn.0040bf40
test eax, eax
js 0x454ab8
cmp dword [ebx + 0xfc], 1
je 0x454ab8
mov eax, dword [esp + 0x30]
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x38], eax
mov dword [esp + 0x1c], ebx
jmp 0x40f0bb
mov dword [esp + 0x14], 0x10
jmp 0x40fa01
cmp dword [esp + 0x38], 0
mov dword [esp + 0x14], 0x16
sete al
test al, al
jne 0x454ad0
lea eax, [esp + 0xb0]
mov dword [esp + 0xb0], 0
push eax
lea ecx, [esp + 0x2c]
mov dword [esp + 0xbc], 0
mov dword [esp + 0xc0], 1
call fcn.0041cf15
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov ecx, dword [esp + 0x28]
push eax
push edi
push esi
call fcn.004101e0
test eax, eax
js 0x454ac2
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x2c]
call fcn.0041cf15
mov ecx, eax
call fcn.0040aceb
lea ecx, [esp + 0xb0]
call fcn.0040cfa0
jmp 0x40f0bb
cmp dword [esp + 0x38], 0
sete al
test al, al
jne 0x454ad0
lea eax, [esp + 0xc0]
mov dword [esp + 0xc0], 0
push eax
lea ecx, [esp + 0x2c]
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 1
call fcn.0041cf15
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov ecx, dword [esp + 0x28]
push eax
push edi
push esi
call fcn.004101e0
test eax, eax
js 0x454af9
lea eax, [esp + 0xc0]
push eax
lea ecx, [esp + 0x2c]
call fcn.0041cf15
mov ecx, eax
call fcn.0040aceb
lea ecx, [esp + 0xc0]
call fcn.0040cfa0
jmp 0x40f0bb
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 6
mov dword [esi], eax
jmp 0x40ed52
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 0xf
mov dword [esi], eax
jmp 0x40ed52
mov ecx, dword [esp + 0x20]
mov dl, byte [esp + 0x1b]
test dl, dl
je 0x4541d8
mov eax, dword [ecx + 4]
jmp 0x4541da
mov eax, ecx
cmp dword [eax], 0x14
je 0x454218
test dl, dl
je 0x4541e8
mov eax, dword [ecx + 4]
jmp 0x4541ea
mov eax, ecx
cmp dword [eax], 0x12
je 0x454218
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x50]
push eax
call fcn.004106a0
test eax, eax
js 0x454b0b
mov dl, byte [esp + 0x55]
mov ecx, dword [esp + 0x50]
mov byte [esp + 0x1b], dl
mov dword [esp + 0x20], ecx
jmp 0x4541cf
cmp dword [esp + 0x2c], 0
sete al
test al, al
jne 0x454b36
lea ecx, [esp + 0x28]
call fcn.0041cf15
mov ecx, eax
call fcn.00401fba
lea ecx, [esp + 0x28]
mov bl, al
call fcn.0041ac27
mov edi, dword [ebp + 0xc]
mov edx, dword [edi]
inc edx
mov dword [edi], edx
test bl, bl
jne 0x45428a
mov eax, dword [ebp + 8]
mov ecx, 1
mov esi, dword [eax + 4]
mov eax, dword [esi + edx*4]
movzx eax, word [eax + 8]
cmp ax, 0x57
jne 0x45426a
inc ecx
jmp 0x454283
cmp ax, 0x58
jne 0x454273
dec ecx
jmp 0x454283
cmp ax, 0x7f
je 0x45428a
cmp ax, 0x40
jne 0x454283
test ecx, ecx
je 0x45428a
inc edx
mov dword [edi], edx
test ecx, ecx
jne 0x45425a
mov dword [esp + 0x14], 0x12
jmp 0x40f151
cmp dword [esp + 0x38], 0
sete al
test al, al
jne 0x454ad0
mov esi, dword [ebp + 0xc]
lea edx, [ecx + 1]
mov dword [esp + 0x14], 0x16
mov ecx, 1
mov ebx, edx
mov dword [esi], edx
mov eax, dword [edi + edx*4]
movzx eax, word [eax + 8]
cmp ax, 0x47
jne 0x4542ce
inc ecx
jmp 0x4542ea
cmp ax, 0x48
jne 0x4542d7
dec ecx
jmp 0x4542ea
mov esi, ebx
cmp ax, 0x7f
je 0x4542f8
cmp ax, 0x40
jne 0x4542ea
cmp ecx, 1
je 0x4542f8
mov eax, dword [ebp + 0xc]
inc edx
mov ebx, edx
mov esi, ebx
mov dword [eax], edx
test ecx, ecx
jne 0x4542be
mov eax, dword [edi + esi*4 - 4]
mov ebx, dword [esp + 0x1c]
mov edi, dword [ebp + 0xc]
cmp word [eax + 8], 0x48
mov eax, dword [ebp + 0x14]
jne 0x40f26a
test ecx, ecx
jne 0x40f26a
lea eax, [esi - 1]
mov dword [edi], eax
jmp 0x40f169
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 0xa
mov dword [esi], eax
jmp 0x40ed52
sub esp, 0x10
mov dword [esp + 0x24], 0x16
mov ecx, esp
push 0x4c6a6c
call fcn.00409cb3
push 0xffffffffffffffff
push 0x29
jmp 0x45436d
sub esp, 0x10
mov dword [esp + 0x24], 0x16
mov ecx, esp
push 0x49cc08
call fcn.00409cb3
push 0
push 0x2a
lea ecx, [esp + 0x108]
call fcn.0041a5bf
push 0x4d02a0
lea ecx, [esp + 0x2c]
call fcn.0041ceb1
lea eax, [esp + 0xf0]
push eax
lea ecx, [esp + 0x2c]
call fcn.0041cf15
mov ecx, eax
call fcn.0041a562
mov edi, dword [ebp + 0xc]
lea ecx, [esp + 0xf8]
inc dword [edi]
call fcn.0040988f
jmp 0x40f151
mov dword [esp + 0x90], 0
mov bl, 1
mov dword [esp + 0x98], 0
mov dword [esp + 0x9c], 1
test ecx, ecx
je 0x454408
mov eax, dword [edi + ecx*4 - 4]
movzx eax, word [eax + 8]
cmp ax, 0x48
je 0x4543f0
cmp ax, 0x4f
jne 0x454408
lea ecx, [esp + 0x28]
call fcn.0041cf15
push eax
lea ecx, [esp + 0x94]
call fcn.0040aceb
xor bl, bl
lea ecx, [esp + 0x90]
call fcn.004855f9
test al, al
jne 0x454466
test bl, bl
je 0x454b4e
mov ecx, dword [esp + 0x24]
cmp dword [ecx + 0x170], 0
je 0x45444c
cmp byte [ecx + 0x179], 0
mov eax, dword [ecx + 0x174]
je 0x45443f
mov eax, dword [eax + 0x10]
push eax
lea ecx, [esp + 0x94]
call fcn.0040aceb
lea ecx, [esp + 0x90]
call fcn.004855f9
test al, al
jne 0x454466
mov edx, 0xa7
jmp 0x454b53
mov edi, dword [ebp + 0xc]
lea eax, [esp + 0xd0]
mov esi, dword [ebp + 8]
mov ecx, dword [esp + 0x24]
push eax
lea eax, [esp + 0x94]
mov dword [esp + 0xd4], 0
push eax
push edi
push esi
mov dword [esp + 0xe8], 0
mov dword [esp + 0xec], 1
call fcn.00487b7e
test eax, eax
js 0x454b73
mov dword [esp + 0x14], 0x16
test bl, bl
jne 0x4544c5
lea ecx, [esp + 0x28]
call fcn.0041ac27
lea eax, [esp + 0xd0]
push eax
lea ecx, [esp + 0x2c]
call fcn.0041ceb1
lea ecx, [esp + 0xd0]
call fcn.0040cfa0
lea ecx, [esp + 0x90]
call fcn.0040cfa0
mov eax, dword [esp + 0x30]
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x38], eax
mov dword [esp + 0x1c], ebx
jmp 0x40f0bb
mov ecx, dword [ebx + 8]
mov eax, dword [0x4d02a8]
cmp ecx, eax
je 0x40f22a
push eax
call fcn.0040a8c7
jmp 0x40f22a
push dword [esi]
call fcn.0041fe14
add esp, 4
push 4
push dword [esi + 0xc]
call fcn.0041fdcd
add esp, 8
jmp 0x40f62f
sub eax, 5
cmp eax, 0xa
ja case.0x45454e.6
jmp dword [eax*4 + 0x454cfa]
mov eax, dword [ebx]
test eax, eax
je case.0x45454e.6
push eax
call dword [esp + 0x74]
push 0x10
push dword [ebx]
jmp 0x4545e6
mov esi, dword [ebx]
test esi, esi
je case.0x45454e.6
lea ecx, [esi + 8]
call fcn.0040988f
push 0x18
jmp 0x4545e5
mov esi, dword [ebx]
test esi, esi
je case.0x45454e.6
mov ecx, esi
call fcn.0041ce17
push 4
jmp 0x4545e5
mov eax, dword [ebx]
push dword [eax + 4]
call fcn.0041fe14
add esp, 4
push 8
push dword [ebx]
jmp 0x4545e6
mov ecx, dword [ebx]
test ecx, ecx
je case.0x45454e.6
push ecx
call fcn.0045fd59
jmp case.0x45454e.6
mov ecx, dword [ebx]
test ecx, ecx
je case.0x45454e.6
mov eax, dword [ecx]
push 1
call dword [eax]
jmp case.0x45454e.6
mov esi, dword [ebx]
test esi, esi
je case.0x45454e.6
mov ecx, esi
call fcn.0040988f
push 0x14
push esi
call fcn.0041fdcd
add esp, 8
jmp case.0x45454e.6
cmp dword [0x4d02ac], 4
jne 0x40fa32
mov ecx, dword [ecx + 8]
mov eax, dword [0x4d02a8]
cmp ecx, eax
je 0x40fa63
push eax
call fcn.0040a8c7
jmp 0x40fa63
push ecx
call fcn.0041d1e6
mov eax, dword [esp + 0x10]
mov dword [eax + 8], 0
mov eax, dword [eax + 0xc]
jmp 0x40fa3d
sub eax, 5
cmp eax, 0xa
ja case.0x454640.6
jmp dword [eax*4 + 0x454d26]
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
test eax, eax
je case.0x454640.6
push eax
call dword [esp + 0x74]
mov eax, dword [esp + 0x10]
push 0x10
push dword [eax]
jmp 0x4546ff
mov eax, dword [esp + 0x10]
mov esi, dword [eax]
test esi, esi
je case.0x454640.6
lea ecx, [esi + 8]
call fcn.0040988f
push 0x18
jmp 0x4546fe
mov eax, dword [esp + 0x10]
mov esi, dword [eax]
test esi, esi
je case.0x454640.6
mov ecx, esi
call fcn.0041ce17
push 4
jmp 0x4546fe
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
push dword [eax + 4]
call fcn.0041fe14
mov eax, dword [esp + 0x14]
add esp, 4
push 8
push dword [eax]
jmp 0x4546ff
mov ecx, dword [esp + 0x10]
mov ecx, dword [ecx]
test ecx, ecx
je case.0x454640.6
push ecx
call fcn.0045fd59
jmp case.0x454640.6
mov ecx, dword [esp + 0x10]
mov ecx, dword [ecx]
test ecx, ecx
je case.0x454640.6
mov eax, dword [ecx]
push 1
call dword [eax]
jmp case.0x454640.6
mov eax, dword [esp + 0x10]
mov esi, dword [eax]
test esi, esi
je case.0x454640.6
mov ecx, esi
call fcn.0040988f
push 0x14
push esi
call fcn.0041fdcd
add esp, 8
jmp case.0x454640.6
mov edi, dword [edx + 0x10]
jmp 0x40f250
mov ecx, dword [ebx + 8]
mov eax, dword [0x4d02a8]
cmp ecx, eax
je 0x40ee15
push eax
call fcn.0040a8c7
jmp 0x40ee15
push dword [esi]
call fcn.0041fe14
add esp, 4
push 4
push dword [esi + 0xc]
call fcn.0041fdcd
add esp, 8
jmp 0x40fab6
sub eax, 5
cmp eax, 0xa
ja case.0x454757.6
jmp dword [eax*4 + 0x454d52]
mov eax, dword [ebx]
test eax, eax
je case.0x454757.6
push eax
call dword [esp + 0x74]
push 0x10
push dword [ebx]
jmp 0x4547ef
mov esi, dword [ebx]
test esi, esi
je case.0x454757.6
lea ecx, [esi + 8]
call fcn.0040988f
push 0x18
jmp 0x4547ee
mov esi, dword [ebx]
test esi, esi
je case.0x454757.6
mov ecx, esi
call fcn.0041ce17
push 4
jmp 0x4547ee
mov eax, dword [ebx]
push dword [eax + 4]
call fcn.0041fe14
add esp, 4
push 8
push dword [ebx]
jmp 0x4547ef
mov ecx, dword [ebx]
test ecx, ecx
je case.0x454757.6
push ecx
call fcn.0045fd59
jmp case.0x454757.6
mov ecx, dword [ebx]
test ecx, ecx
je case.0x454757.6
mov eax, dword [ecx]
push 1
call dword [eax]
jmp case.0x454757.6
mov esi, dword [ebx]
test esi, esi
je case.0x454757.6
mov ecx, esi
call fcn.0040988f
push 0x14
push esi
call fcn.0041fdcd
add esp, 8
jmp case.0x454757.6
mov ecx, dword [ecx + 8]
mov eax, dword [0x4d02a8]
cmp ecx, eax
je 0x40f8fa
push eax
call fcn.0040a8c7
jmp 0x40f8fa
sub eax, 5
cmp eax, 0xa
ja case.0x454823.6
jmp dword [eax*4 + 0x454d7e]
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
test eax, eax
je case.0x454823.6
push eax
call dword [esp + 0x74]
mov eax, dword [esp + 0x10]
push 0x10
push dword [eax]
jmp 0x4548e2
mov eax, dword [esp + 0x10]
mov esi, dword [eax]
test esi, esi
je case.0x454823.6
lea ecx, [esi + 8]
call fcn.0040988f
push 0x18
jmp 0x4548e1
mov eax, dword [esp + 0x10]
mov esi, dword [eax]
test esi, esi
je case.0x454823.6
mov ecx, esi
call fcn.0041ce17
push 4
jmp 0x4548e1
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
push dword [eax + 4]
call fcn.0041fe14
mov eax, dword [esp + 0x14]
add esp, 4
push 8
push dword [eax]
jmp 0x4548e2
mov ecx, dword [esp + 0x10]
mov ecx, dword [ecx]
test ecx, ecx
je case.0x454823.6
push ecx
call fcn.0045fd59
jmp case.0x454823.6
mov ecx, dword [esp + 0x10]
mov ecx, dword [ecx]
test ecx, ecx
je case.0x454823.6
mov eax, dword [ecx]
push 1
call dword [eax]
jmp case.0x454823.6
mov eax, dword [esp + 0x10]
mov esi, dword [eax]
test esi, esi
je case.0x454823.6
mov ecx, esi
call fcn.0040988f
push 0x14
push esi
call fcn.0041fdcd
add esp, 8
jmp case.0x454823.6
mov eax, dword [eax + 0x10]
jmp 0x40f5ad
mov eax, dword [0x4d2384]
mov esi, dword [eax + 8]
jmp 0x40ee6f
push 0x4d2540
call fcn.00420242
add esp, 4
cmp dword [0x4d2540], 0xffffffff
jne 0x40ee95
mov ecx, 0x4d2544
call fcn.0040a961
push 0x442449
call fcn.004200a3
add esp, 4
push 0x4d2540
call fcn.004201f8
add esp, 4
jmp 0x40ee95
test edx, edx
jne 0x40efd8
test ecx, ecx
jne 0x40ef42
jmp 0x40eee0
push 0x4d2540
call fcn.00420242
add esp, 4
cmp dword [0x4d2540], 0xffffffff
jne 0x454996
mov ecx, 0x4d2544
call fcn.0040a961
push 0x442449
call fcn.004200a3
add esp, 4
push 0x4d2540
call fcn.004201f8
add esp, 4
mov ebx, dword [0x4d2370]
jmp 0x40f29d
test edi, edi
jne 0x40f4b4
test eax, eax
jne 0x40f3c3
jmp 0x40f2df
mov esi, dword [edx + 4]
push 8
push edx
call fcn.0041fdcd
mov eax, esi
add esp, 8
mov dword [esp + 0x20], eax
mov dword [esp + 0x50], eax
xor al, al
jmp 0x40f797
mov edi, dword [esp + 0x4c]
jmp 0x40f13c
mov edi, dword [ebp + 0xc]
jmp 0x40f169
cmp byte [esp + 0x35], 0
je 0x40fbb3
mov eax, dword [eax + 0x10]
jmp 0x40fbb3
lea ecx, [esp + 0x28]
call fcn.0041cf15
mov esi, eax
mov ecx, esi
call fcn.0040cfa0
mov byte [esi], 1
jmp 0x40fc1c
cmp byte [esp + 0x35], 0
je 0x454a26
mov eax, dword [esp + 0x10]
mov esi, dword [eax + 0x10]
jmp 0x40fc12
mov esi, dword [esp + 0x10]
jmp 0x40fc12
mov ecx, dword [esp + 0x20]
push 8
push ecx
mov esi, dword [ecx + 4]
call fcn.0041fdcd
mov eax, esi
add esp, 8
mov dword [esp + 0x20], eax
mov dword [esp + 0x50], eax
jmp 0x40fc32
mov esi, dword [eax + 4]
push 8
push eax
call fcn.0041fdcd
mov eax, esi
add esp, 8
mov dword [esp + 0x20], eax
mov dword [esp + 0x50], eax
xor al, al
jmp 0x40fc3f
mov ecx, dword [edi]
mov eax, dword [esi + 4]
mov eax, dword [eax + ecx*4]
mov ecx, ebx
movsx eax, word [eax + 0xa]
push eax
push 0x85
call fcn.0047359c
lea ecx, [esp + 0xa0]
call fcn.0040988f
mov edx, dword [esp + 0x30]
mov dword [esp + 0x10], edx
jmp 0x454b05
mov ecx, dword [edi]
mov eax, dword [esi + 4]
mov eax, dword [eax + ecx*4 - 4]
mov ecx, ebx
movsx eax, word [eax + 0xa]
push eax
push 0x86
call fcn.0047359c
mov edx, dword [esp + 0x30]
mov dword [esp + 0x10], edx
jmp 0x454b05
lea ecx, [esp + 0xb0]
call fcn.0040cfa0
jmp 0x454b05
movsx eax, word [esi + 0xa]
push eax
push 0x6e
jmp 0x454aee
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
movsx eax, word [eax + 0xa]
push eax
push 0x79
mov ecx, dword [esp + 0x2c]
call fcn.0047359c
jmp 0x454b05
lea ecx, [esp + 0xc0]
call fcn.0040cfa0
mov edx, dword [esp + 0x20]
jmp 0x454b2a
push dword [esp + 0x58]
mov ecx, dword [esp + 0x28]
push 0x6e
call fcn.0047359c
mov edx, dword [esp + 0x50]
mov edi, dword [esp + 0x30]
mov dword [esp + 0x20], edx
mov dword [esp + 0x10], edi
mov eax, dword [esp + 0x10]
or edi, 0xffffffff
jmp 0x40ed91
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
movsx eax, word [eax + 0xa]
push eax
jmp 0x454c0f
mov edx, 0xa9
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
mov ecx, dword [esp + 0x24]
movzx eax, word [eax + 0xa]
cwde
push eax
push edx
call fcn.0047359c
jmp 0x454b97
mov ecx, dword [edi]
mov eax, dword [esi + 4]
mov eax, dword [eax + ecx*4]
mov ecx, dword [esp + 0x24]
movsx eax, word [eax + 0xa]
push eax
push 0x6e
call fcn.0047359c
lea ecx, [esp + 0xd0]
call fcn.0040cfa0
lea ecx, [esp + 0x90]
call fcn.0040cfa0
jmp 0x454b05
push dword [esp + 0x58]
push 0x6d
jmp 0x454c11
push dword [esp + 0x58]
push 0x6b
jmp 0x454bbe
push dword [esp + 0x58]
push 0x6d
mov ecx, dword [esp + 0x2c]
call fcn.0047359c
mov edx, dword [esp + 0x30]
mov dword [esp + 0x10], edx
jmp 0x454b05
push dword [esp + 0x58]
push 0x6c
jmp 0x454bbe
push dword [esp + 0x58]
mov ecx, dword [esp + 0x28]
push 0x6e
call fcn.0047359c
or edi, 0xffffffff
lea ecx, [esp + 0xe0]
mov dword [esp + 0x1c], edi
call fcn.0040cfa0
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x10]
jmp 0x40ed95
push dword [esp + 0x58]
push 0x6e
mov ecx, dword [esp + 0x2c]
call fcn.0047359c
mov edx, dword [esp + 0x30]
mov dword [esp + 0x10], edx
jmp 0x454b05
mov eax, dword [edi]
test eax, eax
je case.0x40fdab.6
push eax
call dword [esp + 0x74]
push 0x10
push dword [edi]
call fcn.0041fdcd
add esp, 8
jmp case.0x40fdab.6
mov ecx, dword [edi]
test ecx, ecx
je case.0x40fdab.6
push ecx
call fcn.0041e47e
jmp case.0x40fdab.6
mov ecx, dword [edi]
test ecx, ecx
je case.0x40fdab.6
push ecx
call fcn.0041cdff
jmp case.0x40fdab.6
mov eax, dword [edi]
push dword [eax + 4]
call fcn.0041fe14
add esp, 4
push 8
push dword [edi]
call fcn.0041fdcd
add esp, 8
jmp case.0x40fdab.6
mov ecx, dword [edi]
test ecx, ecx
je case.0x40fdab.6
push ecx
call fcn.0045fd59
jmp case.0x40fdab.6
mov ecx, dword [edi]
test ecx, ecx
je case.0x40fdab.6
mov eax, dword [ecx]
push 1
call dword [eax]
jmp case.0x40fdab.6
mov ecx, dword [edi]
test ecx, ecx
je case.0x40fdab.6
push ecx
call fcn.00470e6d
jmp case.0x40fdab.6