Function at 0x40ec40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xfc
mov eax, dword fs:[0x2c]
mov dword [esp + 0x18], ecx
push ebx
push esi
mov ecx, dword [eax]
mov eax, dword [0x4d2580]
push edi
mov edi, dword [ebp + 0xc]
mov dword [esp + 0x8c], ecx
mov word [esp + ecx*4], fs
add byte [eax], al
add byte [ebx], bh
add dword [eax + eax], 0x8f0f0000
les edx, [ecx]
add byte [eax], al
mov ebx, dword [ebp + 0x10]
xor esi, esi
xor al, al
mov word [esp + 0x54], 1
push 8
mov byte [esp + 0x1f], al
mov dword [esp + 0x20], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x3c], esi
mov dword [esp + 0x30], esi
mov dword [esp + 0x14], esi
mov dword [esp + 0x34], esi
mov word [esp + 0x38], 1
call fcn.0041fddb
mov ecx, dword [edi]
mov edx, eax
add esp, 4
mov dword [esp + 0x20], edx
mov dword [esp + 0x50], edx
mov dword [esp + 0x4c], 1
mov dword [edx], 0x14
mov dword [edx + 4], esi
mov esi, dword [ebp + 8]
mov dword [esp + 0x14], 0x17
mov eax, dword [esi + 4]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x49c470]
mov dword [esp + 0x70], ecx
movsx eax, word [eax + 0xa]
mov dword [esp + 0x58], eax
mov eax, dword [ebp + 0x14]
mov ecx, dword [edi]
cmp ecx, eax
je case.0x40fb15.4
mov edi, dword [esi + 4]
mov esi, dword [edi + ecx*4]
movzx eax, word [esi + 8]
mov edx, eax
cmp ax, 0x7f
je case.0x40fb15.4
movsx eax, dx
cmp eax, 0x33
je 0x40edc0
cmp eax, 0x4f
je case.0x40fb15.4
cmp eax, 5
je 0x40f1d5
cmp eax, 0x58
ja case.0x40fb15.4
movzx eax, byte [eax + 0x40ffe4]
jmp dword [eax*4 + 0x40ff78]
mov eax, dword [esi]
cmp eax, 4
jl 0x40fb04
cmp eax, 0x27
jge 0x40fb04
mov ebx, 0x14
mov dword [esp + 0x14], ebx
mov cl, byte [esp + 0x1b]
mov edx, dword [esp + 0x20]
test cl, cl
jne 0x40f3b3
mov eax, edx
imul eax, dword [eax], 0x15
movzx eax, byte [eax + ebx + 0x4b1840]
cmp eax, 3
jne 0x40f100
cmp dword [esp + 0x2c], 1
jne 0x454c0b
mov eax, dword [esp + 0x30]
xor edi, edi
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], edi
test eax, eax
jne 0x40f5b9
test edx, edx
je 0x40edb5
mov esi, dword [edx + 4]
push 8
push edx
call fcn.0041fdcd
add esp, 8
mov edx, esi
test esi, esi
jne 0x40eda1
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov edi, dword [esp + 0x38]
mov dword [esp + 0x14], 0x16
test edi, edi
jne 0x40f562
cmp ebx, 0x4d02a0
je 0x40ee15
mov eax, dword [ebx + 0xc]
cmp eax, 4
je 0x40fa93
mov esi, dword [ebx + 8]
test esi, esi
jne 0x40faa5
cmp eax, 5
jge 0x45474b
push 0x4d02a0
mov ecx, ebx
mov dword [ebx + 0xc], 1
mov dword [ebx], 0
call fcn.004100e0
mov eax, dword [esp + 0x10]
inc edi
mov dword [esp + 0x38], edi
mov dword [esp + 0x2c], edi
cmp edi, 1
jne 0x40f5a2
mov dword [esp + 0x88], ebx
cmp dword [0x4d2380], 0
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
mov ebx, dword [eax]
mov dword [esp + 0x6c], ebx
je 0x40fb2e
xor al, al
test al, al
jne 0x40f272
cmp byte [0x4d2389], al
jne 0x4548f7
mov esi, dword [0x4d2384]
cmp dword [esi], 0
je 0x40f272
mov ecx, dword [esp + 0x8c]
mov eax, dword [0x4d2540]
mov byte [esp + 0x3f], 0
cmp eax, dword [ecx + 4]
jg 0x454904
add al, 0
mov dword [0x4d2560], 0
mov dword [0x4d255c], 0
mov dword [esp + 0x68], 0x4d2544
mov dword [esp + 0x64], 0x4d2544
lea esp, [esp]
mov eax, dword [esi]
mov ecx, dword [ebx + 4]
mov dword [esp + 0x60], eax
mov dword [esp + 0x48], ecx
mov edx, dword [eax + 4]
test ecx, ecx
je 0x454947
test edx, edx
je 0x45494f
mov edi, dword [eax]
mov ebx, dword [ebx]
cmp ecx, edx
jb 0x40f171
mov edx, ecx
test edx, edx
je 0x40ef15
movzx eax, word [ebx]
mov dword [esp + 0x44], eax
movzx eax, word [edi]
mov ecx, eax
mov dword [esp + 0x40], ecx
movzx ecx, word [ebx]
cmp cx, ax
jne 0x40ef19
add ebx, 2
add edi, 2
sub edx, 1
jne 0x40eef2
xor eax, eax
jmp 0x40ef28
mov eax, dword [esp + 0x40]
cmp word [esp + 0x44], ax
sbb eax, eax
and eax, 0xfffffffe
inc eax
test eax, eax
js 0x40efcc
jle 0x40f043
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x60]
mov ebx, dword [esp + 0x6c]
mov edx, dword [eax + 0x1c]
test edx, edx
je 0x40f048
mov edi, dword [edx + 4]
cmp edi, ecx
ja 0x40f605
mov eax, dword [edx]
mov ebx, dword [ebx]
mov dword [esp + 0x44], eax
mov dword [esp + 0x40], edi
test edi, edi
je 0x40efad
jmp 0x40ef70
movzx ecx, word [eax]
movzx eax, cx
mov dword [esp + 0x78], eax
movzx eax, word [ebx]
mov dword [esp + 0x74], ecx
mov ecx, eax
mov dword [esp + 0x5c], ecx
mov ecx, dword [esp + 0x74]
cmp cx, ax
jne 0x40f1a6
mov eax, dword [esp + 0x44]
add ebx, 2
add eax, 2
sub dword [esp + 0x40], 1
mov dword [esp + 0x44], eax
jne 0x40ef70
mov ecx, dword [esp + 0x48]
cmp edi, ecx
jb 0x40f1b5
mov edx, dword [esi]
mov ecx, dword [esp + 0x64]
mov dword [ecx + 0x1c], edx
mov ebx, dword [esi]
mov dword [esp + 0x64], ebx
mov eax, dword [ebx + 0x1c]
jmp 0x40f0f5
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x60]
mov ebx, dword [esp + 0x6c]
mov edx, dword [eax + 0x18]
test edx, edx
je 0x40f048
mov eax, dword [edx + 4]
cmp ecx, eax
ja 0x40f649
mov edi, dword [edx]
mov ebx, dword [ebx]
mov dword [esp + 0x44], ecx
test ecx, ecx
je 0x40f0db
lea ebx, [ebx]
movzx eax, word [ebx]
mov dword [esp + 0x74], eax
movzx eax, word [edi]
mov ecx, eax
mov dword [esp + 0x40], ecx
movzx ecx, word [ebx]
cmp cx, ax
je 0x40f0c3
cmp word [esp + 0x74], ax
jae 0x40f0e3
mov ecx, dword [esp + 0x60]
mov eax, dword [edx + 0x1c]
mov dword [ecx + 0x18], eax
mov eax, dword [esi]
mov dword [edx + 0x1c], eax
mov dword [esi], edx
cmp dword [edx + 0x18], 0
je 0x40f048
jmp 0x40f0e5
mov byte [esp + 0x3f], 1
cmp byte [esp + 0x3f], 0
mov eax, dword [esi]
mov ecx, dword [esp + 0x64]
mov eax, dword [eax + 0x18]
mov dword [ecx + 0x1c], eax
mov eax, dword [esi]
mov ecx, dword [esp + 0x68]
mov eax, dword [eax + 0x1c]
mov dword [ecx + 0x18], eax
mov ecx, dword [esi]
mov eax, dword [0x4d2560]
mov dword [ecx + 0x18], eax
mov ecx, dword [esi]
mov eax, dword [0x4d255c]
mov dword [ecx + 0x1c], eax
je 0x40f272
mov eax, dword [esi]
test eax, eax
je 0x40f272
mov eax, dword [eax + 0x14]
test eax, eax
je 0x40f272
push dword [esp + 0x88]
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov ecx, dword [esp + 0x28]
push eax
inc dword [edi]
push edi
push esi
call fcn.004101e0
test eax, eax
js 0x454b05
mov ebx, dword [esp + 0x1c]
mov eax, dword [ebp + 0x14]
jmp 0x40ecf4
add ebx, 2
add edi, 2
sub dword [esp + 0x44], 1
jne 0x40f000
mov eax, dword [edx + 4]
mov ecx, dword [esp + 0x48]
cmp ecx, eax
jb 0x40f027
mov edx, dword [esi]
mov ecx, dword [esp + 0x68]
mov dword [ecx + 0x18], edx
mov ebx, dword [esi]
mov dword [esp + 0x68], ebx
mov eax, dword [ebx + 0x18]
mov ebx, dword [esp + 0x6c]
mov dword [esi], eax
jmp 0x40eec0
cmp eax, 6
ja case.0x40f109.3
jmp dword [eax*4 + 0x410040]
test cl, cl
jne 0x40f67a
push 8
call fcn.0041fddb
mov ecx, dword [esp + 0x24]
add esp, 4
mov dword [esp + 0x20], eax
mov dword [esp + 0x50], eax
mov dword [eax], ebx
mov dword [eax + 4], ecx
mov edi, dword [esp + 0x4c]
inc edi
mov dword [esp + 0x4c], edi
cmp ebx, 7
je 0x40fb88
cmp ebx, 8
je 0x40fb88
mov edi, dword [ebp + 0xc]
mov eax, dword [esp + 0x30]
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x1c], ebx
sub al, 0x89
pop esp
and al, 0x1c
mov dword [esp + 0x38], eax
mov esi, dword [ebp + 8]
jmp 0x40f0bb
test edx, edx
je 0x40ef15
pushfd
std
invalid
lea esp, [esp]
movzx eax, word [ebx]
mov dword [esp + 0x44], eax
movzx eax, word [edi]
mov ecx, eax
mov dword [esp + 0x40], ecx
dec esp
and al, 0x40
movzx ecx, word [ebx]
cmp cx, ax
je 0x40fa7f
cmp word [esp + 0x44], ax
jmp 0x40ef22
mov eax, dword [esp + 0x5c]
cmp word [esp + 0x78], ax
jae 0x40efb5
mov ecx, dword [esp + 0x60]
mov eax, dword [edx + 0x18]
mov dword [ecx + 0x1c], eax
mov eax, dword [esi]
mov dword [edx + 0x18], eax
mov dword [esi], edx
cmp dword [edx + 0x1c], 0
je 0x40f048
jmp 0x40efb7
mov edi, dword [esp + 0x38]
mov dword [esp + 0x14], 0x16
test edi, edi
jne 0x40f68b
cmp ebx, 0x4d02a0
je 0x40f22a
mov eax, dword [ebx + 0xc]
cmp eax, 4
je 0x40f60c
mov esi, dword [ebx + 8]
test esi, esi
jne 0x40f61e
cmp eax, 5
jge 0x454542
push 0x4d02a0
mov ecx, ebx
mov dword [ebx + 0xc], 1
mov dword [ebx], 0
call fcn.004100e0
mov edx, dword [esp + 0x10]
mov eax, dword [ebp + 0xc]
inc edi
mov dword [esp + 0x38], edi
mov dword [esp + 0x2c], edi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov esi, dword [eax + ecx*4]
cmp edi, 1
jne 0x40f6cb
mov edi, ebx
mov esi, dword [esi]
mov ecx, edi
call fcn.0040cfa0
mov eax, dword [ebp + 0x14]
mov dword [edi + 0xc], 1
mov dword [edi], esi
mov edi, dword [ebp + 0xc]
inc dword [edi]
mov esi, dword [ebp + 8]
jmp 0x40ecf4
mov ebx, dword [0x4d2370]
test ebx, ebx
je 0x454ad9
mov ecx, dword [esp + 0x8c]
mov eax, dword [0x4d2540]
mov byte [esp + 0x3f], 0
cmp eax, dword [ecx + 4]
jg 0x45495c
and al, 0x3f
add byte [ebx], bh
add dword [eax + eax], 0x8f0f0000
mov edi, 0xc7000456
add eax, 0x4d2560
add byte [eax], al
add byte [eax], al
mov dword [0x4d2560], 0
mov dword [0x4d255c], 0
mov dword [esp + 0x60], 0x4d2544
mov dword [esp + 0x64], 0x4d2544
mov esi, dword [esp + 0x6c]
mov edi, dword [ebx + 4]
mov eax, dword [esi + 4]
mov dword [esp + 0x48], eax
test eax, eax
je 0x4549a1
test edi, edi
je 0x4549a9
mov edx, dword [ebx]
mov esi, dword [esi]
cmp eax, edi
jb 0x40f31b
mov edi, eax
test edi, edi
je 0x40f317
lea ecx, [ecx]
movzx eax, word [esi]
mov dword [esp + 0x5c], eax
movzx eax, word [edx]
mov ecx, eax
mov dword [esp + 0x78], ecx
movzx ecx, word [esi]
cmp cx, ax
jne 0x40f4a2
add esi, 2
add edx, 2
sub edi, 1
jne 0x40f2f0
xor eax, eax
jmp 0x40f347
test edi, edi
je 0x40f317
nop
movzx eax, word [esi]
mov dword [esp + 0x5c], eax
movzx eax, word [edx]
mov ecx, eax
mov dword [esp + 0x78], ecx
movzx ecx, word [esi]
cmp cx, ax
je 0x40f654
cmp word [esp + 0x5c], ax
sbb eax, eax
and eax, 0xfffffffe
inc eax
test eax, eax
js 0x40f4b0
jg 0x40f3bb
mov byte [esp + 0x3f], 1
cmp byte [esp + 0x3f], 0
mov ecx, dword [esp + 0x64]
mov eax, dword [ebx + 0x18]
mov dword [ecx + 0x1c], eax
mov eax, dword [0x4d2370]
mov ecx, dword [esp + 0x60]
mov eax, dword [eax + 0x1c]
mov dword [ecx + 0x18], eax
mov ecx, dword [0x4d2370]
mov eax, dword [0x4d2560]
mov dword [ecx + 0x18], eax
mov ecx, dword [0x4d2370]
mov eax, dword [0x4d255c]
mov dword [ecx + 0x1c], eax
je 0x454ad9
mov eax, dword [0x4d2370]
test eax, eax
je 0x454ad9
mov eax, dword [eax + 0x14]
test eax, eax
jne 0x40f094
jmp 0x454ad9
mov eax, dword [edx + 4]
jmp 0x40ed68
mov eax, dword [esp + 0x48]
mov esi, dword [esp + 0x6c]
lea ecx, [ebx + 0x1c]
mov dword [esp + 0x74], ecx
mov ecx, dword [ecx]
mov dword [esp + 0x40], ecx
test ecx, ecx
je 0x40f356
mov edx, dword [ecx + 4]
mov dword [esp + 0x68], edx
cmp edx, eax
jbe 0x40f3e5
mov edx, eax
mov dword [esp + 0x68], eax
cmp dword [esp + 0x68], 0
mov edi, edx
mov edx, dword [esi]
mov esi, dword [ecx]
jbe 0x40f41d
movzx eax, word [esi]
mov dword [esp + 0x5c], eax
movzx eax, word [edx]
mov ecx, eax
mov dword [esp + 0x78], ecx
movzx ecx, word [esi]
cmp cx, ax
jne 0x40f425
add esi, 2
add edx, 2
sub edi, 1
jne 0x40f3f2
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x40]
cmp dword [esp + 0x68], eax
jb 0x40f434
jmp 0x40f457
mov eax, dword [esp + 0x78]
cmp word [esp + 0x5c], ax
jae 0x40f457
mov ecx, dword [esp + 0x40]
mov ebx, ecx
mov ecx, dword [esp + 0x74]
mov eax, dword [ebx + 0x18]
mov dword [ecx], eax
mov eax, dword [0x4d2370]
mov dword [ebx + 0x18], eax
mov dword [0x4d2370], ebx
cmp dword [ebx + 0x1c], 0
je 0x40f356
mov ecx, dword [esp + 0x64]
mov dword [ecx + 0x1c], ebx
mov ecx, dword [0x4d2370]
mov dword [esp + 0x64], ecx
mov ebx, dword [ecx + 0x1c]
mov dword [0x4d2370], ebx
jmp 0x40f2c1
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x50]
push eax
call fcn.004106a0
test eax, eax
js 0x454b0b
mov al, byte [esp + 0x55]
mov ecx, dword [esp + 0x50]
mov byte [esp + 0x1b], al
mov dword [esp + 0x20], ecx
jmp 0x40ed56
mov eax, dword [esp + 0x78]
cmp word [esp + 0x5c], ax
jmp 0x40f341
mov eax, dword [esp + 0x48]
mov edx, dword [ebx + 0x18]
lea ecx, [ebx + 0x18]
mov dword [esp + 0x44], ecx
test edx, edx
je 0x40f356
mov esi, dword [edx + 4]
cmp eax, esi
ja 0x40fc63
mov edi, dword [esp + 0x6c]
mov esi, dword [edx]
mov dword [esp + 0x40], eax
mov edi, dword [edi]
test eax, eax
je 0x40f50e
movzx eax, word [edi]
mov dword [esp + 0x5c], eax
movzx eax, word [esi]
mov ecx, eax
mov dword [esp + 0x78], ecx
movzx ecx, word [edi]
cmp cx, ax
jne 0x40f515
add edi, 2
add esi, 2
sub dword [esp + 0x40], 1
jne 0x40f4e1
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
cmp eax, dword [edx + 4]
jb 0x40f524
jmp 0x40f543
mov eax, dword [esp + 0x78]
cmp word [esp + 0x5c], ax
jae 0x40f543
mov ecx, dword [esp + 0x44]
mov ebx, edx
mov eax, dword [ebx + 0x1c]
mov dword [ecx], eax
mov eax, dword [0x4d2370]
mov dword [ebx + 0x1c], eax
mov dword [0x4d2370], ebx
cmp dword [ebx + 0x18], 0
je 0x40f356
mov ecx, dword [esp + 0x60]
mov dword [ecx + 0x18], ebx
mov ecx, dword [0x4d2370]
mov dword [esp + 0x60], ecx
mov ebx, dword [ecx + 0x18]
mov dword [0x4d2370], ebx
jmp 0x40f2c1
cmp byte [esp + 0x35], 0
jne 0x40f8b1
push 0x18
call fcn.0041fddb
add esp, 4
mov esi, eax
mov ecx, esi
push 0x4d02a0
mov dword [esi + 8], 0
call fcn.004100e0
mov eax, dword [esp + 0x10]
mov dword [esi + 0x10], eax
mov eax, esi
mov dword [esp + 0x10], eax
mov dword [esp + 0x30], eax
jmp 0x40ee19
cmp byte [esp + 0x35], 0
jne 0x4548ef
mov dword [esp + 0x88], eax
jmp 0x40ee32
mov edi, dword [esp + 0x10]
lea ecx, [ecx]
mov ebx, dword [edi + 8]
mov esi, dword [edi + 0x10]
test ebx, ebx
jne 0x40fc8e
mov eax, dword [edi + 0xc]
cmp eax, 5
jge 0x40fd9f
push 0x18
push edi
mov dword [edi + 0xc], 1
mov dword [edi], 0
call fcn.0041fdcd
add esp, 8
mov edi, esi
test esi, esi
jne 0x40f5c0
mov edi, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
and al, 0x20
jmp 0x40ed9d
mov edi, ecx
jmp 0x40ef58
cmp dword [0x4d02ac], 4
jne 0x40f1fd
jmp 0x45450b
mov eax, dword [esi + 0xc]
dec dword [eax]
mov eax, dword [esi + 0xc]
cmp dword [eax], 0
je 0x454526
push 0x10
push esi
call fcn.0041fdcd
mov eax, dword [ebx + 0xc]
add esp, 8
mov dword [ebx + 8], 0
jmp 0x40f208
mov ecx, eax
mov dword [esp + 0x48], eax
jmp 0x40efea
add esi, 2
add edx, 2
sub edi, 1
jne 0x40f320
jmp 0x40f317
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 0xd
mov dword [esi], eax
jmp 0x40ed52
xor al, al
mov dword [edx], ebx
mov byte [esp + 0x1b], al
mov byte [esp + 0x55], al
jmp 0x40f133
cmp byte [esp + 0x35], 0
jne 0x40fa1a
push 0x18
call fcn.0041fddb
add esp, 4
mov esi, eax
mov ecx, esi
push 0x4d02a0
mov dword [esi + 8], 0
call fcn.004100e0
mov eax, dword [esp + 0x10]
mov edx, esi
mov dword [esi + 0x10], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x30], edx
jmp 0x40f22e
cmp byte [esp + 0x35], 0
jne 0x45470c
mov edi, edx
jmp 0x40f250
test cl, cl
je 0x40f904
mov eax, dword [edx + 4]
cmp dword [eax], 0x12
je 0x40f76e
test cl, cl
jne 0x40fa12
mov eax, edx
cmp dword [eax], 0x14
je 0x454ba8
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x50]
push eax
call fcn.004106a0
test eax, eax
js 0x454b0b
mov edx, dword [esp + 0x50]
mov cl, byte [esp + 0x55]
mov dword [esp + 0x20], edx
jmp case.0x40f109.2
test ecx, ecx
je 0x40f74a
mov eax, dword [edi + ecx*4 - 4]
movzx eax, word [eax + 8]
mov edx, eax
cmp ax, 0x48
je 0x45411e
cmp dx, 0x4f
je 0x45411e
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 0x12
mov dword [esi], eax
jmp 0x40ed52
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 0x13
mov dword [esi], eax
jmp 0x40ed52
test cl, cl
je 0x40f78a
mov esi, dword [edx + 4]
push 8
push edx
call fcn.0041fdcd
mov edx, esi
add esp, 8
mov dword [esp + 0x20], edx
mov dword [esp + 0x50], edx
cmp byte [esp + 0x54], 0
je 0x4549b6
mov al, 1
mov edi, dword [esp + 0x4c]
dec edi
mov byte [esp + 0x55], al
mov byte [esp + 0x1b], al
mov dword [esp + 0x4c], edi
jmp 0x40f13c
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 1
mov dword [esi], eax
jmp 0x40ed52
xchg ebx, eax
cmc
invalid
mov esi, dword [esp + 0x38]
mov dword [esp + 0x14], 0x16
test esi, esi
je 0x40fcb6
cmp byte [esp + 0x35], 0
jne 0x40fd2f
push 0x18
call fcn.0041fddb
add esp, 4
mov esi, eax
mov ecx, esi
push 0x4d02a0
mov dword [esi + 8], 0
call fcn.004100e0
mov eax, dword [esp + 0x10]
mov dword [esi + 0x10], eax
mov eax, esi
mov esi, dword [esp + 0x38]
mov dword [esp + 0x10], eax
mov dword [esp + 0x30], eax
mov eax, dword [ebp + 8]
inc esi
mov edi, dword [ebp + 0xc]
mov dword [esp + 0x38], esi
mov dword [esp + 0x2c], esi
mov edx, dword [eax + 4]
mov ecx, dword [edi]
mov eax, dword [edx + ecx*4 + 4]
cmp word [eax + 8], 0x47
jne 0x453f51
cmp esi, 1
je 0x40fcc7
cmp byte [esp + 0x35], 0
mov eax, dword [esp + 0x10]
jne 0x453f6d
mov esi, dword [ebp + 8]
mov ecx, dword [esp + 0x24]
push eax
push edi
push esi
push 0
call fcn.00411310
test eax, eax
js 0x454b05
mov eax, dword [esp + 0x24]
cmp dword [eax + 0xfc], 1
jne 0x40f0bb
jmp 0x454b05
mov eax, dword [esp + 0x14]
cmp eax, 0x16
jne 0x40fae2
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov dword [esp + 0x14], 0xb
mov ebx, dword [esp + 0x14]
mov dword [esi], eax
jmp 0x40ed56
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
xor ebx, ebx
mov dword [esi], eax
jmp 0x40ed52
mov ecx, dword [esp + 0x10]
cmp ecx, 0x4d02a0
je 0x40f8fa
mov eax, dword [ecx + 0xc]
cmp eax, 4
je 0x40feea
mov ecx, dword [ecx + 8]
test ecx, ecx
jne 0x40fefc
cmp eax, 5
jge 0x454817
mov esi, dword [esp + 0x10]
mov ecx, esi
push 0x4d02a0
mov dword [esi + 0xc], 1
mov dword [esi], 0
call fcn.004100e0
mov byte [esp + 0x35], 0
jmp 0x40ee15
cmc
invalid
mov eax, edx
jmp 0x40f6eb
mov edi, dword [esp + 0x38]
mov dword [esp + 0x14], 0x16
test edi, edi
jne 0x40fb35
cmp ebx, 0x4d02a0
je 0x40f944
cmp dword [ebx + 0xc], 4
je 0x40ff65
mov ecx, ebx
call fcn.0040cfa0
push 0x4d02a0
mov ecx, ebx
call fcn.004100e0
mov edx, dword [esp + 0x10]
mov esi, dword [ebp + 0xc]
inc edi
mov eax, dword [ebp + 8]
mov dword [esp + 0x38], edi
mov dword [esp + 0x2c], edi
mov ecx, dword [esi]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
cmp edi, 1
jne 0x40fb76
mov esi, ebx
mov edi, dword [eax]
mov eax, dword [esi + 0xc]
mov ecx, dword [esi + 8]
cmp eax, 4
je 0x453dec
test ecx, ecx
jne 0x453dff
cmp eax, 5
jge 0x453e14
push 0x10
mov dword [esi], 0
mov dword [esi + 0xc], 4
call fcn.0041fddb
mov ecx, dword [edi]
add esp, 4
mov dword [eax], ecx
mov ecx, dword [edi + 4]
mov dword [eax + 4], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 8], ecx
mov ecx, dword [edi + 0xc]
mov dword [eax + 0xc], ecx
inc dword [ecx]
mov dword [esi + 8], eax
mov edi, dword [ebp + 0xc]
mov edx, dword [esp + 0x24]
inc dword [edi]
cmp byte [edx + 0x102], 0
jne 0x453ed3
cmp byte [edx + 0x103], 0
mov esi, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
je 0x40ecf4
jmp 0x453eec
mov eax, dword [esp + 0x14]
cmp eax, 0x16
jne 0x40fc6e
add bh, al
inc esp
and al, 0x14
or al, 0
add byte [eax], al
mov dword [esp + 0x14], 0xc
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, dword [esp + 0x14]
mov dword [esi], eax
jmp 0x40ed56
mov eax, dword [edx + 4]
jmp 0x40f6fa
mov ecx, dword [esp + 0x10]
cmp ecx, 0x4d02a0
je 0x40fa63
mov eax, dword [ecx + 0xc]
cmp eax, 4
je 0x4545f3
mov ecx, dword [ecx + 8]
test ecx, ecx
jne 0x45461b
cmp eax, 5
jge 0x454634
mov esi, dword [esp + 0x10]
mov ecx, esi
push 0x4d02a0
mov dword [esi + 0xc], 1
mov dword [esi], 0
call fcn.004100e0
mov byte [esp + 0x35], 0
jmp 0x40f22a
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 0xe
mov dword [esi], eax
jmp 0x40ed52
add ebx, 2
add edi, 2
sub edx, 1
jne 0x40f180
add dword [edi], ecx
test edx, esi
idiv bh
invalid
jmp 0x40ef15
cmp dword [0x4d02ac], 4
jne 0x40ede8
jmp 0x454714
mov eax, dword [esi + 0xc]
dec dword [eax]
mov eax, dword [esi + 0xc]
cmp dword [eax], 0
je 0x45472f
push 0x10
push esi
call fcn.0041fdcd
mov eax, dword [ebx + 0xc]
add esp, 8
mov dword [ebx + 8], 0
jmp 0x40edf3
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 9
mov dword [esi], eax
jmp 0x40ed52
cmp eax, 0x13
je 0x40f889
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov dword [esp + 0x14], 0x11
mov ebx, dword [esp + 0x14]
mov dword [esi], eax
jmp 0x40ed56
dec eax
cmp eax, 0x29
ja case.0x40fb15.4
movzx eax, byte [eax + 0x41007c]
jmp dword [eax*4 + 0x41005c]
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 7
mov dword [esi], eax
jmp 0x40ed52
mov al, 1
jmp 0x40ee55
cmp byte [esp + 0x35], 0
je 0x40fce0
mov esi, dword [esp + 0x10]
cmp esi, 0x4d02a0
je 0x40fb6c
cmp dword [0x4d02ac], 4
je 0x40fedb
mov ecx, esi
call fcn.0040cfa0
push 0x4d02a0
mov ecx, esi
call fcn.004100e0
mov byte [esp + 0x35], 0
jmp 0x40f944
cmp byte [esp + 0x35], 0
jne 0x453de4
mov esi, edx
jmp 0x40f96a
mov esi, dword [esp + 0x2c]
mov eax, dword [esp + 0x30]
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x38], esi
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], ebx
test esi, esi
je 0x4549de
cmp esi, 1
jne 0x4549e6
mov eax, ebx
push eax
lea ecx, [esp + 0xe4]
mov dword [esp + 0xec], 0
call fcn.004100e0
lea ecx, [esp + 0xe0]
call fcn.00401fba
mov ecx, dword [esp + 0x14]
test al, al
jne 0x40fe12
cmp ecx, 7
jne 0x40fc4c
push dword [ebp + 0xc]
mov eax, dword [ebp + 8]
push eax
call fcn.00419d2b
test eax, eax
js 0x454bdc
cmp dword [esp + 0x14], 8
je 0x4549f9
cmp esi, 1
jne 0x454a13
mov esi, ebx
mov ecx, esi
call fcn.0040cfa0
mov byte [esi], 0
cmp byte [esp + 0x1b], 0
mov dword [esi + 0xc], 9
jne 0x454a2f
mov eax, dword [esp + 0x20]
cmp byte [esp + 0x54], 0
je 0x454a50
mov al, 1
dec edi
mov byte [esp + 0x55], al
mov byte [esp + 0x1b], al
mov dword [esp + 0x4c], edi
lea ecx, [esp + 0xe0]
call fcn.0040cfa0
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
jmp 0x40f0bb
mov eax, esi
mov dword [esp + 0x48], esi
jmp 0x40f4d1
cmp eax, 0x13
je 0x40f9f9
jmp 0x454084
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 5
mov dword [esi], eax
jmp 0x40ed52
mov eax, dword [ebx + 0xc]
dec dword [eax]
mov eax, dword [ebx + 0xc]
cmp dword [eax], 0
je 0x40fd83
push 0x10
push ebx
call fcn.0041fdcd
add esp, 8
mov dword [edi + 8], 0
jmp 0x40f5ce
push 0x4d02a0
mov ecx, ebx
call fcn.0040aceb
jmp 0x40f812
mov eax, ebx
jmp 0x40f84d
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 2
mov dword [esi], eax
jmp 0x40ed52
push 0x18
call fcn.0041fddb
add esp, 4
mov esi, eax
mov ecx, esi
push 0x4d02a0
mov dword [esi + 8], 0
call fcn.004100e0
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x40fe28
mov edx, esi
mov dword [esi + 0x10], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x30], edx
jmp 0x40f948
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 4
mov dword [esi], eax
jmp 0x40ed52
mov ecx, dword [esp + 0x10]
push 0x4d02a0
call fcn.0040aceb
mov byte [esp + 0x35], 0
jmp 0x40f812
push 0x4d02a0
lea ecx, [esp + 0x2c]
mov dword [esp + 0x18], 0x16
call fcn.0041ceb1
lea ecx, [esp + 0x28]
call fcn.0041cf15
mov esi, eax
mov ecx, esi
call fcn.0040cfa0
mov dword [esi + 0xc], 9
mov byte [esi], 0
mov edi, dword [ebp + 0xc]
inc dword [edi]
jmp 0x40f151
push dword [ebx]
call fcn.0041fe14
add esp, 4
push 4
push dword [ebx + 0xc]
call fcn.0041fdcd
add esp, 8
jmp 0x40fc9f
sub eax, 5
cmp eax, 0xa
ja case.0x40fdab.6
jmp dword [eax*4 + 0x4100a8]
push 0x4d02a0
lea ecx, [esp + 0x2c]
mov dword [esp + 0x18], 0x16
call fcn.0041ceb1
lea ecx, [esp + 0x28]
call fcn.0041cf15
mov esi, eax
mov ecx, esi
call fcn.0040cfa0
mov edi, dword [ebp + 0xc]
mov dword [esi + 0xc], 9
mov byte [esi], 1
inc dword [edi]
jmp 0x40f151
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 3
mov dword [esi], eax
jmp 0x40ed52
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 8
mov dword [esi], eax
jmp 0x40ed52
cmp ecx, 8
je 0x40fbe8
test al, al
jne 0x40fc4c
jmp 0x40fbe3
mov edx, esi
mov dword [esi + 0x10], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x30], edx
jmp 0x40f948
push 0x4d2580
call fcn.00420242
add esp, 4
cmp dword [0x4d2580], 0xffffffff
jne 0x40ec76
push 0x44247b
call fcn.004200a3
add esp, 4
push 0x4d2580
call fcn.004201f8
add esp, 4
jmp 0x40ec76
push 0x4d02a0
lea ecx, [esp + 0x2c]
mov dword [esp + 0x18], 0x16
call fcn.0041ceb1
mov edi, dword [ebp + 0xc]
lea ecx, [esp + 0x28]
mov esi, dword [ebp + 8]
mov edx, dword [edi]
lea eax, [edx + 1]
mov dword [edi], eax
mov eax, dword [esi + 4]
mov edx, dword [eax + edx*4]
call fcn.0041cf15
mov ebx, dword [esp + 0x24]
mov ecx, ebx
push eax
push dword [edx]
call fcn.0041cf92
test eax, eax
js 0x454a9e
mov eax, dword [esp + 0x30]
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x38], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x1c], ebx
jmp 0x40ecf4
cmp dword [esi + 0xc], 4
jne 0x40fb59
jmp 0x453dc9
cmp dword [0x4d02ac], 4
jne 0x40f8c9
jmp 0x4547fc
push ecx
call fcn.0041d1e6
mov eax, dword [esp + 0x10]
mov dword [eax + 8], 0
mov eax, dword [eax + 0xc]
jmp 0x40f8d4
push 0x4d02a0
lea ecx, [esp + 0x2c]
mov dword [esp + 0x18], 0x16
call fcn.0041ceb1
mov edi, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov ecx, dword [edi]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
lea ecx, [esp + 0x28]
fld qword [eax]
fstp qword [esp + 0x78]
call fcn.0041cf15
mov esi, eax
mov ecx, esi
call fcn.0040cfa0
fld qword [esp + 0x78]
inc dword [edi]
fstp qword [esi]
mov dword [esi + 0xc], 3
jmp 0x40f151
cmp dword [0x4d02ac], 4
jne 0x40f931
jmp 0x453dae
or ebp, eax
inc eax
add byte [edi], dh
cmp dword [ebp], eax
or ebp, eax
inc eax
add byte [ebx + 0x39], bl
inc ebp
add byte [edi - 0x58ffbac7], al
cmp dword [ebp], eax
sar dword [ecx], cl
inc ebp
add bl, dl
cmp dword [ebp], eax
mov ebp, 0x8b0a4539
dec ebx
or byte [ecx + 0x4d02a8], ah
add al, 0x50
lea eax, [esi + eax*4]
mov ebx, 0xe850cae9
add ebp, dword [ebx - 0x17]
retf 0x7be9
add byte [ebx - 0x575ef7b2], cl
add cl, byte [ebp]
add al, 0x50
lea eax, [ebx + edx*4]
mov ebp, 0xe850cae9
call 0xea10276e
mov byte [ebp + 0x728b00fb], bh
adc cl, ch
jle 0x453dc9
sti
invalid
retf 0xfbbb
mov edx, 0x1e8b00fb
test ebx, ebx
je 0x453eee
mov ecx, ebx
call fcn.004098b3
push 0x14
push ebx
call 0x8c41fdf1
or dword [ebx + 0x245c8b08], 0x1c
mov ecx, dword [eax]
mov ebx, dword [esp + 0x1c]
jmp 0x40f9b0
add eax, dword [eax]
mov edx, dword [esp + 0x24]
jmp 0x40f9f8
mov edi, dword [eax]
mov ebx, dword [eax + 4]
call fcn.0041cf39
mov esi, eax
mov ecx, esi
call 0x140cfc4
mov dword [esi + 0xc], 0xa8b02
mov dword [esi], edi
mov dword [esi + 4], ebx
jmp 0x140fd9d
mov eax, dword [edx + ecx*4]
lea ecx, [esp + 0x28]
push dword [eax]
call fcn.0048cf39
mov ecx, eax
call fcn.00471179
inc dword [edi]
jmp 0x140f18d
add dword [edi], ecx
test byte [ecx + 0xa], dl
add byte [ebp + 0x3024448b], cl
mov ebx, dword [esp + 0x28]
and al, 0x28
and al, 0x28
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x38], eax
mov dword [esp + 0x1c], ebx
jmp 0x140f0df
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x2c]
call fcn.0048cf39
mov ecx, eax
call fcn.0040ad0f
lea ecx, [esp + 0x8b00b0]
call 0xcb2ecfc4
jmp 0x40f0df
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x2c]
call fcn.0048cf39
mov ecx, eax
call fcn.0040ad0f
dec dword [ebp + 0xc0248c]
mov eax, dword [eax]
dec dword [ebp + 0xc0248c]
mov eax, dword [eax]
call 0xcb2ecfc4
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 0x8b0006
mov dword [esi], eax
jmp 0x40ed76
mov eax, dword [esi + edx*4]
movzx eax, word [eax + 8]
cmp ax, 0x57
jne 0x45428e
inc ecx
jmp 0x4542a7
cmp ax, 0x58
jne case.0x40ed32.88
dec ecx
jmp 0x4542a7
cmp ax, 0x7f
je 0x4542ae
cmp ax, 0x40
jne 0x4542a7
test ecx, ecx
je 0x4542ae
inc edx
mov dword [edi], edx
test ecx, ecx
jne 0x45427e
mov dword [esp + 0x14], 0xc5758b12
jmp 0x40f175
sbb al, 0x8b
jge 0x454333
cmp word [eax + 8], 0x48
mov eax, dword [ebp + 0x14]
jne 0x40f28e
sti
push dword [ebx]
xor eax, eax
test dword [ebp + 0xfbaf51], 0x89ff468d
pop es
xor eax, eax
test dword [ebp + 0xfbaf51], 0x89ff468d
pop es
jmp 0x40f18d
mov dword [esi], eax
jmp 0x40ed76
and al, 0x2c
call fcn.0048cf39
mov ecx, eax
call fcn.0048a586
mov edi, dword [ebp + 0xc]
lea ecx, [esp - 0x178a0008]
inc dword [edi]
call 0xcb2e98b3
jmp 0x140f175
mov eax, dword [eax]
call fcn.0040cfc4
mov eax, dword [esp + 0x30]
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x38], eax
mov dword [esp + 0x1c], ebx
jmp 0x40f0df
arpl bx, di
invalid
lodsb al, byte [esi]
sti
dec dword [ebx + 0xff68d33]
test byte [0x8bfffbac], dh
into
call fcn.004098b3
push 0x14
push esi
call 0x8c41fdf1
or dword [ebx - 0x53e116f8], 0xfffffffb
inc dword [ebp + 0x4d02ac3d]
dec ebp
add byte [edi + ecx], al
test dword [edx], esi
mov ah, 0xfb
add byte [ebx - 0x575ef7b7], cl
add cl, byte [ebp]
add al, 0x50
lea eax, [ebx + edx*2]
mov ah, 0xfb
add byte [eax - 0x18], dl
mov cl, 0x62
sti
invalid
push eax
call fcn.0040a8eb
jmp 0x40fa87
inc esp
and al, 0x10
mov esi, dword [eax]
xor dh, dh
je 0x140fa6a
test byte [ecx - 0x4d], dl
sti
add byte [ebx + 0x5193e8ce], cl
sti
jmp [edx + 0x14]
mov ecx, esi
call fcn.004098b3
push 0x14
push esi
call 0x8c41fdf1
or dword [ebx - 0x4cc516f8], 0xfffffffb
add byte [ebx + 0x3ce9107a], cl
stosd dword es:[edi], eax
sti
dec dword [ebx - 0x575ef7b5]
add cl, byte [ebp]
add al, 0x50
lea eax, [ecx + esi*8]
cmpsb byte [esi], byte es:[edi]
sti
add byte [eax - 0x18], dl
popfd
popal
sti
invalid
cmpsb byte [esi], byte es:[edi]
sti
dec dword [ebx + 0xff68d33]
test byte [edi], dl
cmpsb byte [esi], byte es:[edi]
sti
add byte [ebx + 0x50a3e8ce], cl
sti
jmp [edx + 0x14]
mov eax, dword [ebx + 0xe9088b]
cmpsb byte [esi], byte es:[edi]
sti
add byte [ebx - 0x575ef7b7], cl
add cl, byte [ebp]
add al, 0x50
lea eax, [esi + ebp*8]
mov al, 0xfb
add byte [eax - 0x18], dl
mov ch, 0x60
sti
invalid
inc esp
and al, 0x10
mov esi, dword [eax]
xor dh, dh
je 0x40f901
test byte [0x8bfffbb0], al
into
mov ecx, esi
call fcn.004098b3
push 0x14
push esi
adc al, 0x56
call 0x8c41fdf1
or dword [ebx - 0x501116f8], 0xfffffffb
add byte [ebx - 0x4916efc0], cl
lodsb al, byte [esi]
sti
add byte [ecx + 0x4d2384], ah
mov esi, dword [eax + 8]
jmp 0x40ee93
dec ebp
add byte [ebx + 0x6be90870], cl
movsd dword es:[edi], dword [esi]
sti
jmp [eax + 0x40]
call fcn.0040a985
push 0x442449
call 0x8c4200c7
or dword [ebx + 0x25406804], 0x4d
inc esp
add al, ch
jno 0x45490b
cld
mov eax, dword [ebx + 0x4068048b]
and eax, 0xb9e8004d
mov eax, 0x8b838bfc
add al, 0xe9
dec ebp
add al, ch
mov ecx, 0x838bfcb8
mov eax, dword [ecx + ebp*8]
dec esi
movsd dword es:[edi], dword [esi]
sti
add byte [ebp - 0x767af02e], al
cmpsb byte [esi], byte es:[edi]
sti
push dword [ebx]
sal bh, 0x85
jmp 0x45491e
dec ecx
and al, 0x44
add al, ch
sbb eax, 0x838bfcb7
mov eax, dword [eax + ebp*2]
inc eax
mov eax, dword [ebx + 0x4068048b]
and eax, 0x65e8004d
mov eax, 0x8b838bfc
add al, 0x8b
sbb eax, 0x4d2370
jmp 0x40f2c1
mov eax, dword [ebx + 0x1d8b048b]
jo 0x4549e1
dec ebp
add cl, ch
cld
test al, 0xfb
inc dword [ebp + 0xb850fff]
stosd dword es:[edi], eax
sti
test byte [ebp + 0x1285fe30], cl
stosb byte es:[edi], al
sti
invalid
jmp 0x40f303
or byte [edx - 0x18], dl
or al, 0xb4
cld
mov ecx, dword [ebx + 0x80085c6]
mov dword [esp + 0x20], eax
mov dword [esp + 0x50], eax
xor al, al
jmp 0x40f7bb
mov byte [ebp + 0x44890800], 0x24
and byte [ecx + 0x32502444], cl
shr cl, 0xc2
lodsd eax, dword [esi]
sti
dec dword [ebx - 0x16b3db84]
pop esi
cmpsd dword [esi], dword es:[edi]
sti
dec dword [ebx - 0x7c16f383]
cmpsd dword [esi], dword es:[edi]
sti
inc dword [eax + 0x35247c]
je 0x140fbd7
mov edi, dword [esp + 0x4c]
jmp 0x40f160
sti
add byte [ebx - 0x4516efc0], cl
mov cl, 0xfb
dec dword [ebp - 0x17d7dbb4]
adc eax, dword [ebp - 0xf740004]
mov ecx, esi
call fcn.0040cfc4
mov eax, dword [eax + 0x10]
jmp 0x40fbd7
mov byte [esi], 1
jmp 0x40fc40
mov cl, 0xfb
add byte [ebx + 0x6a20244c], cl
or byte [ecx - 0x75], dl
jno 0x454a61
call 0x8c41fdf1
mov eax, esi
test dword [eax], eax
or byte [ecx - 0x76dfdbbc], cl
inc esp
and al, 0x50
mov ecx, dword [ebx + 0x80085c6]
mov dword [esp + 0x20], eax
mov dword [esp + 0x50], eax
jmp 0x140fc56
mov edi, 0x68500a40
test dword [edi + edi*8 + 0x75], edi
call fcn.004735c0
lea ecx, [esp + 0xa0]
call 0x14098b3
mov edx, dword [esp + 0x30]
mov dword [esp + 0x10], edx
jmp 0x454b29
ljmp 0x3024:0x548b0001
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
movsx eax, word [eax + 0xa]
push eax
push 0x79
mov ecx, dword [esp + 0x2c]
call fcn.004735c0
jmp 0x454b29
mov edx, dword [esp + 0x20]
jmp 0x454b4e
mov eax, dword [esp + 0x10]
or edi, 0xffffffff
jmp 0x40edb5
mov ecx, dword [esp + 0x24]
movsx eax, word [eax + 0xa]
push eax
push 0x6e
call fcn.004735c0
lea ecx, [esp + 0x75ff00d0]
mov word [eax + edx*8], fs
add bh, bh
jne 0x454b9f
or dword [ebx + edi*8 + 0x248c8dff], eax
nop
invalid
mov eax, dword [eax]
mov word [eax + edx*8], fs
add bh, bh
jne 0x454b9f
or dword [ebx + edi*8 + 0x248c8dff], eax
nop
add byte [ebx - 0x7c021800], cl
sti
invalid
test bl, bh
dec dword [ebp + 0x90248c]
mov eax, dword [eax]
call fcn.0040cfc4
jmp 0x454b29
push dword [esp + 0x58]
push 0x6b
jmp 0x454be2
push dword [esp + 0x58]
push 0x6d
mov ecx, dword [esp + 0x2c]
call fcn.004735c0
mov edx, dword [esp + 0x30]
mov dword [esp + 0x10], edx
jmp 0x454b29
mov cl, 0xe9
add dword [eax], eax
or edi, 0xffffffff
lea ecx, [esp - 0x3a8a7420]
mov dword [esp + 0x1c], edi
call 0x140cfc4
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x10]
inc esp
and al, 0x10
inc esp
and al, 0x10
jmp 0x40edb9
fdivp st(6)
sbb byte [ebx - 0x17cff875], cl
je 0x8c40f5fe
push eax
call dword [esp + 0x74]
push 0x10
push dword [edi]
call 0x8c41fdf1
or dword [ebx - 0x566c16f8], 0xfffffffb
dec dword [ebx - 0x83fccf1]
test byte [ecx + 0x51fffba9], cl
mov dword [ecx - 0x17ae0005], ebp
daa
cwde
cld
invalid
jmp 0x40f5fe
mov dword [ecx - 0x17ae0005], ebp
daa
cwde
cld
invalid
invalid
push dword [edi]
call 0x8c41fdf1
or dword [ebx - 0x56b416f8], 0xfffffffb
dec dword [ebx - 0x83fccf1]
test byte [ecx - 0x57], al
inc ecx
test eax, 0xe851fffb
inc ecx
test eax, 0xe851fffb
mov edx, 0xe9008bb0
test eax, 0xf8bfffb
xor eax, eax
test dword [esp + ebp - 0x74000457], 0xff016a01
adc cl, ch
and dword [ecx + 0xf8bfffb], ebp
xor eax, eax
test dword [edi + edx + 0x51fffba9], 0x1c1a4e8
invalid