Function at 0x404172
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
push esi
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x144]
mov edx, dword [ebp + 8]
xor eax, eax
mov al, byte [edx + ecx + 0x28]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
movsx ecx, word [ecx + 0x14]
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x140]
imul esi, ecx
imul esi, esi, 5
mov edx, dword [edx + eax*8 + 4]
add edx, esi
mov dword [ebp - 8], edx
cmp dword [ebp - 8], 0
jne 0x4041ba
jmp 0x404ec8
mov dword [ebp - 4], 0
jmp 0x4041d5
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
add ecx, 5
mov dword [ebp - 8], ecx
mov edx, dword [ebp + 8]
movsx eax, word [edx + 0x14]
cmp dword [ebp - 4], eax
jge 0x404ec8
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x20], 0
mov ecx, dword [ebp - 4]
imul ecx, ecx, 0xac
add ecx, 0x4164e0
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x1c]
xor eax, eax
mov al, byte [edx + 0x66]
mov ecx, dword [ebp + 8]
movsx edx, word [ecx + 0x20]
cmp eax, edx
jl 0x404238
mov dword [ebp - 0xc], 0x417a80
mov dword [ebp - 0x20], 0x417be0
mov eax, dword [ebp - 0x20]
mov dword [eax], 0
jmp 0x404296
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov dl, byte [ecx + 0x66]
imul edx, edx, 0x154
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
add ecx, edx
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x1c]
xor eax, eax
mov al, byte [edx]
mov ecx, dword [ebp - 0xc]
xor edx, edx
mov dl, byte [ecx + eax + 0x44]
cmp edx, 0x10
jl 0x40426f
mov dword [ebp - 0x20], 0x417be0
jmp 0x404289
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov cl, byte [eax]
mov edx, dword [ebp - 0xc]
xor eax, eax
mov al, byte [edx + ecx + 0x44]
mov ecx, dword [ebp - 0xc]
mov edx, dword [ecx + eax*4 + 4]
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x20], 0
jne 0x404296
mov dword [ebp - 0x20], 0x417be0
mov eax, dword [ebp - 8]
mov cl, byte [eax + 3]
mov byte [ebp - 0x14], cl
mov edx, dword [ebp - 8]
xor eax, eax
mov al, byte [edx + 4]
sar eax, 4
mov byte [ebp - 0x18], al
mov ecx, dword [ebp - 8]
xor edx, edx
mov dl, byte [ecx + 4]
and edx, 0xf
mov byte [ebp - 0x10], dl
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x1c]
mov dword [ecx + 0x1c], 0
mov edx, dword [ebp - 0x1c]
mov byte [edx + 2], 0
mov eax, dword [ebp - 0xc]
xor ecx, ecx
mov cl, byte [eax + 0x14c]
and ecx, 1
test ecx, ecx
je 0x40436d
mov edx, dword [ebp - 0x1c]
movsx eax, byte [edx + 0x3c]
test eax, eax
jne 0x40436d
push 2
mov ecx, dword [ebp - 0x1c]
add ecx, 0x38
push ecx
mov edx, dword [ebp - 0x1c]
add edx, 0x3c
push edx
mov eax, dword [ebp - 0x1c]
add eax, 0x30
push eax
mov ecx, dword [ebp - 0x1c]
add ecx, 0x34
push ecx
mov edx, dword [ebp - 0xc]
mov al, byte [edx + 0x146]
push eax
mov ecx, dword [ebp - 0xc]
mov dl, byte [ecx + 0x147]
push edx
mov eax, dword [ebp - 0xc]
mov cl, byte [eax + 0x148]
push ecx
mov edx, dword [ebp - 0xc]
add edx, 0xa4
push edx
mov eax, dword [ebp - 0xc]
xor ecx, ecx
mov cl, byte [eax + 0x144]
push ecx
mov edx, dword [ebp - 0xc]
mov al, byte [edx + 0x14c]
push eax
mov ecx, dword [ebp - 0x1c]
add ecx, 0x28
push ecx
mov edx, dword [ebp - 0x1c]
add edx, 0x2c
push edx
mov eax, dword [ebp - 0x1c]
push eax
call fcn.00402763
add esp, 0x38
mov ecx, dword [ebp - 0xc]
xor edx, edx
mov dl, byte [ecx + 0x14d]
and edx, 1
test edx, edx
je 0x404403
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0x54]
test ecx, ecx
jne 0x404403
push 4
mov edx, dword [ebp - 0x1c]
add edx, 0x50
push edx
mov eax, dword [ebp - 0x1c]
add eax, 0x54
push eax
mov ecx, dword [ebp - 0x1c]
add ecx, 0x48
push ecx
mov edx, dword [ebp - 0x1c]
add edx, 0x4c
push edx
mov eax, dword [ebp - 0xc]
mov cl, byte [eax + 0x149]
push ecx
mov edx, dword [ebp - 0xc]
mov al, byte [edx + 0x14a]
push eax
mov ecx, dword [ebp - 0xc]
mov dl, byte [ecx + 0x14b]
push edx
mov eax, dword [ebp - 0xc]
add eax, 0xf4
push eax
mov ecx, dword [ebp - 0xc]
xor edx, edx
mov dl, byte [ecx + 0x145]
push edx
mov eax, dword [ebp - 0xc]
mov cl, byte [eax + 0x14d]
push ecx
mov edx, dword [ebp - 0x1c]
add edx, 0x40
push edx
mov eax, dword [ebp - 0x1c]
add eax, 0x44
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.00402763
add esp, 0x38
mov edx, dword [ebp - 0x1c]
movsx eax, byte [edx + 0x65]
test eax, eax
je 0x404449
mov ecx, dword [ebp - 0xc]
xor edx, edx
mov dx, word [ecx + 0x152]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x58]
sub ecx, edx
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0x58], ecx
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x58], 0
jge 0x40443b
mov ecx, dword [ebp - 0x1c]
mov dword [ecx + 0x58], 0
mov edx, dword [ebp - 0x1c]
mov al, byte [edx + 2]
or al, 2
mov ecx, dword [ebp - 0x1c]
mov byte [ecx + 2], al
mov edx, dword [ebp - 8]
xor eax, eax
mov al, byte [edx + 2]
sar eax, 4
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x24]
sub ecx, 6
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 0x24], 9
ja case.0x40446d.2
mov edx, dword [ebp - 0x24]
jmp dword [edx*4 + 0x404ecd]
mov eax, dword [ebp - 8]
xor ecx, ecx
mov cl, byte [eax + 2]
and ecx, 0xf
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x10]
sub eax, ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ecx + 0x10], eax
mov edx, dword [ebp - 0x1c]
cmp dword [edx + 0x10], 0
jge 0x4044a0
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x10], 0
mov ecx, dword [ebp - 0x1c]
mov dl, byte [ecx + 2]
or dl, 2
mov eax, dword [ebp - 0x1c]
mov byte [eax + 2], dl
jmp case.0x40446d.2
mov ecx, dword [ebp - 8]
xor edx, edx
mov dl, byte [ecx + 2]
and edx, 0xf
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x10]
add ecx, edx
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0x10], ecx
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x10], 0x40
jle 0x4044e0
mov ecx, dword [ebp - 0x1c]
mov dword [ecx + 0x10], 0x40
mov edx, dword [ebp - 0x1c]
mov al, byte [edx + 2]
or al, 2
mov ecx, dword [ebp - 0x1c]
mov byte [ecx + 2], al
jmp case.0x40446d.2
mov edx, dword [ebp - 8]
xor eax, eax
mov al, byte [edx + 2]
and eax, 0xf
mov ecx, dword [ebp - 0x1c]
mov byte [ecx + 0x87], al
mov edx, dword [ebp - 0x1c]
push edx
call fcn.0040227d
add esp, 4
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov dl, byte [eax + 0x85]
add dl, byte [ecx + 0x86]
mov eax, dword [ebp - 0x1c]
mov byte [eax + 0x85], dl
mov ecx, dword [ebp - 0x1c]
movsx edx, byte [ecx + 0x85]
cmp edx, 0x1f
jle 0x404552
mov eax, dword [ebp - 0x1c]
mov cl, byte [eax + 0x85]
sub cl, 0x40
mov edx, dword [ebp - 0x1c]
mov byte [edx + 0x85], cl
jmp case.0x40446d.2
mov eax, dword [ebp - 8]
xor ecx, ecx
mov cl, byte [eax + 2]
and ecx, 0xf
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x14]
sub eax, ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ecx + 0x14], eax
mov edx, dword [ebp - 0x1c]
mov al, byte [edx + 2]
or al, 4
mov ecx, dword [ebp - 0x1c]
mov byte [ecx + 2], al
jmp case.0x40446d.2
mov edx, dword [ebp - 8]
xor eax, eax
mov al, byte [edx + 2]
and eax, 0xf
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
add edx, eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x14], edx
mov ecx, dword [ebp - 0x1c]
mov dl, byte [ecx + 2]
or dl, 4
mov eax, dword [ebp - 0x1c]
mov byte [eax + 2], dl
jmp case.0x40446d.2
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.004021d0
add esp, 4
mov edx, dword [ebp - 0x14]
and edx, 0xff
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0x1d
ja case.0x4045d4.14
mov ecx, dword [ebp - 0x28]
xor eax, eax
mov al, byte [ecx + 0x404f31]
jmp dword [eax*4 + 0x404ef5]
mov edx, dword [ebp - 8]
xor eax, eax
mov al, byte [edx + 4]
test eax, eax
jle 0x4046f5
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x134]
cdq
mov ecx, 3
idiv ecx
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 1
je 0x404610
cmp dword [ebp - 0x2c], 2
je 0x40467d
jmp 0x4046e6
mov edx, dword [ebp + 8]
xor eax, eax
mov ax, word [edx + 0x22]
and eax, 1
test eax, eax
je 0x404634
mov ecx, dword [ebp - 0x18]
and ecx, 0xff
shl ecx, 6
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0x1c], ecx
jmp 0x40467b
mov eax, dword [ebp - 0x20]
movsx ecx, byte [eax + 0x11]
push ecx
mov edx, dword [ebp - 0x1c]
xor eax, eax
mov al, byte [edx + 0x67]
mov ecx, dword [ebp - 0x18]
and ecx, 0xff
add eax, ecx
push eax
call fcn.00402bd0
add esp, 8
mov esi, eax
mov edx, dword [ebp - 0x20]
movsx eax, byte [edx + 0x11]
push eax
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov dl, byte [ecx + 0x67]
push edx
call fcn.00402bd0
add esp, 8
sub esi, eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x1c], esi
jmp 0x4046e6
mov ecx, dword [ebp + 8]
xor edx, edx
mov dx, word [ecx + 0x22]
and edx, 1
test edx, edx
je 0x4046a0
mov eax, dword [ebp - 0x10]
and eax, 0xff
shl eax, 6
mov ecx, dword [ebp - 0x1c]
mov dword [ecx + 0x1c], eax
jmp 0x4046e6
mov edx, dword [ebp - 0x20]
movsx eax, byte [edx + 0x11]
push eax
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov dl, byte [ecx + 0x67]
mov eax, dword [ebp - 0x10]
and eax, 0xff
add edx, eax
push edx
call fcn.00402bd0
add esp, 8
mov esi, eax
mov ecx, dword [ebp - 0x20]
movsx edx, byte [ecx + 0x11]
push edx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov cl, byte [eax + 0x67]
push ecx
call fcn.00402bd0
add esp, 8
sub esi, eax
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0x1c], esi
mov eax, dword [ebp - 0x1c]
mov cl, byte [eax + 2]
or cl, 1
mov edx, dword [ebp - 0x1c]
mov byte [edx + 2], cl
jmp case.0x4045d4.14
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x1c], 0
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov dl, byte [ecx + 0x79]
shl edx, 2
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0xc]
sub ecx, edx
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0xc], ecx
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0xc], 0x38
jge 0x404730
mov ecx, dword [ebp - 0x1c]
mov dword [ecx + 0xc], 0x38
mov edx, dword [ebp - 0x1c]
mov al, byte [edx + 2]
or al, 1
mov ecx, dword [ebp - 0x1c]
mov byte [ecx + 2], al
jmp case.0x4045d4.14
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0x1c], 0
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov cl, byte [eax + 0x78]
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0xc]
lea ecx, [eax + ecx*4]
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0xc], ecx
mov eax, dword [ebp - 0x1c]
mov cl, byte [eax + 2]
or cl, 1
mov edx, dword [ebp - 0x1c]
mov byte [edx + 2], cl
jmp case.0x4045d4.14
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x1c], 0
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.004021d0
add esp, 4
jmp case.0x4045d4.14
mov edx, dword [ebp - 0x1c]
push edx
call fcn.0040227d
add esp, 4
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov dl, byte [eax + 0x85]
add dl, byte [ecx + 0x86]
mov eax, dword [ebp - 0x1c]
mov byte [eax + 0x85], dl
mov ecx, dword [ebp - 0x1c]
movsx edx, byte [ecx + 0x85]
cmp edx, 0x1f
jle 0x4047de
mov eax, dword [ebp - 0x1c]
mov cl, byte [eax + 0x85]
sub cl, 0x40
mov edx, dword [ebp - 0x1c]
mov byte [edx + 0x85], cl
jmp case.0x4045d4.14
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x1c], 0
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.004021d0
add esp, 4
mov edx, dword [ebp - 0x1c]
xor eax, eax
mov al, byte [edx + 0x7c]
sar eax, 4
mov byte [ebp - 0x18], al
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov dl, byte [ecx + 0x7c]
and edx, 0xf
mov byte [ebp - 0x10], dl
mov eax, dword [ebp - 0x18]
and eax, 0xff
test eax, eax
je 0x40484d
mov ecx, dword [ebp - 0x18]
and ecx, 0xff
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x10]
add eax, ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ecx + 0x10], eax
mov edx, dword [ebp - 0x1c]
cmp dword [edx + 0x10], 0x40
jle 0x40484b
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x10], 0x40
jmp 0x404884
mov ecx, dword [ebp - 0x10]
and ecx, 0xff
test ecx, ecx
je 0x404884
mov edx, dword [ebp - 0x10]
and edx, 0xff
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x10]
sub ecx, edx
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0x10], ecx
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x10], 0
jge 0x404884
mov ecx, dword [ebp - 0x1c]
mov dword [ecx + 0x10], 0
mov edx, dword [ebp - 0x1c]
mov al, byte [edx + 2]
or al, 2
mov ecx, dword [ebp - 0x1c]
mov byte [ecx + 2], al
jmp case.0x4045d4.14
mov edx, dword [ebp - 0x1c]
push edx
call fcn.0040227d
add esp, 4
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov dl, byte [eax + 0x85]
add dl, byte [ecx + 0x86]
mov eax, dword [ebp - 0x1c]
mov byte [eax + 0x85], dl
mov ecx, dword [ebp - 0x1c]
movsx edx, byte [ecx + 0x85]
cmp edx, 0x1f
jle 0x4048e2
mov eax, dword [ebp - 0x1c]
mov cl, byte [eax + 0x85]
sub cl, 0x40
mov edx, dword [ebp - 0x1c]
mov byte [edx + 0x85], cl
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov cl, byte [eax + 0x7c]
sar ecx, 4
mov byte [ebp - 0x18], cl
mov edx, dword [ebp - 0x1c]
xor eax, eax
mov al, byte [edx + 0x7c]
and eax, 0xf
mov byte [ebp - 0x10], al
mov ecx, dword [ebp - 0x18]
and ecx, 0xff
test ecx, ecx
je 0x404937
mov edx, dword [ebp - 0x18]
and edx, 0xff
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x10]
add ecx, edx
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0x10], ecx
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x10], 0x40
jle 0x404935
mov ecx, dword [ebp - 0x1c]
mov dword [ecx + 0x10], 0x40
jmp 0x40496d
mov edx, dword [ebp - 0x10]
and edx, 0xff
test edx, edx
je 0x40496d
mov eax, dword [ebp - 0x10]
and eax, 0xff
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x10]
sub edx, eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x10], edx
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + 0x10], 0
jge 0x40496d
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0x10], 0
mov eax, dword [ebp - 0x1c]
mov cl, byte [eax + 2]
or cl, 2
mov edx, dword [ebp - 0x1c]
mov byte [edx + 2], cl
jmp case.0x4045d4.14
mov eax, dword [ebp - 0x1c]
push eax
call fcn.00402559
add esp, 4
jmp case.0x4045d4.14
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov dl, byte [ecx + 0x7c]
sar edx, 4
mov byte [ebp - 0x18], dl
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov cl, byte [eax + 0x7c]
and ecx, 0xf
mov byte [ebp - 0x10], cl
mov edx, dword [ebp - 0x18]
and edx, 0xff
test edx, edx
je 0x4049e6
mov eax, dword [ebp - 0x18]
and eax, 0xff
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x10]
add edx, eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x10], edx
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + 0x10], 0x40
jle 0x4049e4
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0x10], 0x40
jmp 0x404a1c
mov eax, dword [ebp - 0x10]
and eax, 0xff
test eax, eax
je 0x404a1c
mov ecx, dword [ebp - 0x10]
and ecx, 0xff
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x10]
sub eax, ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ecx + 0x10], eax
mov edx, dword [ebp - 0x1c]
cmp dword [edx + 0x10], 0
jge 0x404a1c
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x10], 0
mov ecx, dword [ebp - 0x1c]
mov dl, byte [ecx + 2]
or dl, 2
mov eax, dword [ebp - 0x1c]
mov byte [eax + 2], dl
jmp case.0x4045d4.14
mov cl, byte [ebp - 0x18]
mov byte [ebp - 0x30], cl
cmp byte [ebp - 0x30], 9
je 0x404a82
cmp byte [ebp - 0x30], 0xc
je 0x404a51
cmp byte [ebp - 0x30], 0xd
je 0x404adf
jmp 0x404b89
mov edx, dword [ebp - 0x10]
and edx, 0xff
mov eax, dword [ebp + 8]
cmp dword [eax + 0x134], edx
jne 0x404a7d
mov ecx, dword [ebp - 0x1c]
mov dword [ecx + 0x10], 0
mov edx, dword [ebp - 0x1c]
mov al, byte [edx + 2]
or al, 2
mov ecx, dword [ebp - 0x1c]
mov byte [ecx + 2], al
jmp 0x404b89
mov edx, dword [ebp - 0x10]
and edx, 0xff
test edx, edx
jne 0x404a94
jmp 0x404b89
mov ecx, dword [ebp - 0x10]
and ecx, 0xff
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x134]
cdq
idiv ecx
test edx, edx
jne 0x404ada
mov eax, dword [ebp - 0x1c]
mov cl, byte [eax + 2]
or cl, 8
mov edx, dword [ebp - 0x1c]
mov byte [edx + 2], cl
mov eax, dword [ebp - 0x1c]
mov cl, byte [eax + 2]
or cl, 2
mov edx, dword [ebp - 0x1c]
mov byte [edx + 2], cl
mov eax, dword [ebp - 0x1c]
mov cl, byte [eax + 2]
or cl, 1
mov edx, dword [ebp - 0x1c]
mov byte [edx + 2], cl
jmp 0x404b89
mov eax, dword [ebp - 0x10]
and eax, 0xff
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x134], eax
jne 0x404b4d
mov edx, dword [ebp - 0x20]
push edx
mov eax, dword [ebp - 0x1c]
push eax
call fcn.00403120
add esp, 8
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x68]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0x1c]
mov dl, byte [ecx + 2]
or dl, 1
mov eax, dword [ebp - 0x1c]
mov byte [eax + 2], dl
mov ecx, dword [ebp - 8]
xor edx, edx
mov dl, byte [ecx + 2]
test edx, edx
je 0x404b3c
mov eax, dword [ebp - 8]
mov cl, byte [eax + 2]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
call fcn.00402939
add esp, 8
mov eax, dword [ebp - 0x1c]
mov cl, byte [eax + 2]
or cl, 8
mov edx, dword [ebp - 0x1c]
mov byte [edx + 2], cl
jmp 0x404b89
mov eax, dword [ebp - 0x1c]
mov cl, byte [eax + 2]
and cl, 0xfd
mov edx, dword [ebp - 0x1c]
mov byte [edx + 2], cl
mov eax, dword [ebp - 0x1c]
mov cl, byte [eax + 2]
and cl, 0xfe
mov edx, dword [ebp - 0x1c]
mov byte [edx + 2], cl
mov eax, dword [ebp - 0x1c]
mov cl, byte [eax + 2]
and cl, 0xfb
mov edx, dword [ebp - 0x1c]
mov byte [edx + 2], cl
mov eax, dword [ebp - 0x1c]
mov cl, byte [eax + 2]
and cl, 0xf7
mov edx, dword [ebp - 0x1c]
mov byte [edx + 2], cl
jmp case.0x4045d4.14
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov cl, byte [eax + 0x7f]
test ecx, ecx
jne 0x404b9f
jmp case.0x4045d4.14
mov edx, dword [ebp - 0x1c]
xor eax, eax
mov al, byte [edx + 0x7f]
mov ecx, eax
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x134]
cdq
idiv ecx
test edx, edx
jne 0x404d41
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov cl, byte [eax + 0x7e]
test ecx, ecx
je 0x404d32
mov edx, dword [ebp - 0x1c]
xor eax, eax
mov al, byte [edx + 0x7e]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
sub ecx, 1
mov dword [ebp - 0x34], ecx
cmp dword [ebp - 0x34], 0xe
ja case.0x404bee.7
mov edx, dword [ebp - 0x34]
jmp dword [edx*4 + 0x404f4f]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x10]
sub ecx, 1
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0x10], ecx
jmp case.0x404bee.7
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x10]
sub ecx, 2
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0x10], ecx
jmp case.0x404bee.7
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x10]
sub ecx, 4
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0x10], ecx
jmp case.0x404bee.7
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x10]
sub ecx, 8
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0x10], ecx
jmp case.0x404bee.7
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x10]
sub ecx, 0x10
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0x10], ecx
jmp case.0x404bee.7
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x10]
shl eax, 1
cdq
mov ecx, 3
idiv ecx
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0x10], eax
jmp case.0x404bee.7
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x10]
sar ecx, 1
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0x10], ecx
jmp case.0x404bee.7
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x10]
add ecx, 1
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0x10], ecx
jmp case.0x404bee.7
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x10]
add ecx, 2
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0x10], ecx
jmp case.0x404bee.7
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x10]
add ecx, 4
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0x10], ecx
jmp case.0x404bee.7
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x10]
add ecx, 8
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0x10], ecx
jmp case.0x404bee.7
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x10]
add ecx, 0x10
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0x10], ecx
jmp case.0x404bee.7
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x10]
imul eax, eax, 3
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [ebp - 0x1c]
mov dword [ecx + 0x10], eax
jmp case.0x404bee.7
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x10]
shl eax, 1
mov ecx, dword [ebp - 0x1c]
mov dword [ecx + 0x10], eax
mov edx, dword [ebp - 0x1c]
cmp dword [edx + 0x10], 0x40
jle 0x404d10
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x10], 0x40
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + 0x10], 0
jge 0x404d23
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0x10], 0
mov eax, dword [ebp - 0x1c]
mov cl, byte [eax + 2]
or cl, 2
mov edx, dword [ebp - 0x1c]
mov byte [edx + 2], cl
mov eax, dword [ebp - 0x1c]
mov cl, byte [eax + 2]
or cl, 8
mov edx, dword [ebp - 0x1c]
mov byte [edx + 2], cl
jmp case.0x4045d4.14
mov eax, dword [ebp + 8]
xor ecx, ecx
mov cl, byte [eax + 0x130]
sar ecx, 4
mov byte [ebp - 0x18], cl
mov edx, dword [ebp + 8]
xor eax, eax
mov al, byte [edx + 0x130]
and eax, 0xf
mov byte [ebp - 0x10], al
mov ecx, dword [ebp - 0x18]
and ecx, 0xff
test ecx, ecx
je 0x404dad
mov edx, dword [ebp - 0x18]
and edx, 0xff
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x12c]
add ecx, edx
mov edx, dword [ebp + 8]
mov dword [edx + 0x12c], ecx
mov eax, dword [ebp + 8]
cmp dword [eax + 0x12c], 0x40
jle 0x404dab
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x12c], 0x40
jmp 0x404def
mov edx, dword [ebp - 0x10]
and edx, 0xff
test edx, edx
je 0x404def
mov eax, dword [ebp - 0x10]
and eax, 0xff
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x12c]
sub edx, eax
mov eax, dword [ebp + 8]
mov dword [eax + 0x12c], edx
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x12c], 0
jge 0x404def
mov edx, dword [ebp + 8]
mov dword [edx + 0x12c], 0
jmp case.0x4045d4.14
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov cl, byte [eax + 0x7d]
sar ecx, 4
mov byte [ebp - 0x18], cl
mov edx, dword [ebp - 0x1c]
xor eax, eax
mov al, byte [edx + 0x7d]
and eax, 0xf
mov byte [ebp - 0x10], al
mov ecx, dword [ebp - 0x18]
and ecx, 0xff
test ecx, ecx
je 0x404e4c
mov edx, dword [ebp - 0x18]
and edx, 0xff
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x14]
add ecx, edx
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0x14], ecx
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x14], 0xff
jle 0x404e4a
mov ecx, dword [ebp - 0x1c]
mov dword [ecx + 0x14], 0xff
jmp 0x404e82
mov edx, dword [ebp - 0x10]
and edx, 0xff
test edx, edx
je 0x404e82
mov eax, dword [ebp - 0x10]
and eax, 0xff
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
sub edx, eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x14], edx
mov ecx, dword [ebp - 0x1c]
cmp dword [ecx + 0x14], 0
jge 0x404e82
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0x14], 0
mov eax, dword [ebp - 0x1c]
mov cl, byte [eax + 2]
or cl, 4
mov edx, dword [ebp - 0x1c]
mov byte [edx + 2], cl
jmp case.0x4045d4.14
mov eax, dword [ebp - 0x1c]
push eax
call fcn.00402cf1
add esp, 4
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
call fcn.004023ad
add esp, 8
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x20]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
call fcn.00402d74
add esp, 0xc
jmp 0x4041c3
pop esi
mov esp, ebp
pop ebp
ret