Function at 0x41f9b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x29c
mov eax, dword [0x691844]
xor eax, esp
mov dword [esp + 0x298], eax
push ebx
push esi
mov esi, ecx
xor eax, eax
push edi
mov dword [esp + 0x1c], esi
cmp dword [esi + 0xc], eax
je 0x421a99
mov ecx, dword [0x6a4eec]
mov edx, dword [0x6a4ef0]
mov ebx, dword [sym.imp.MSVCR90.dll_sprintf]
mov edi, 1
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x38], edx
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x30], edi
cmp word [esi + edi*2 + 0x10], 0
je 0x421a88
mov eax, edi
shl eax, 5
cmp dword [eax + esi + 0x1a4], 0
je 0x421a88
mov ecx, dword [0x693b54]
call fcn.00583950
test eax, eax
je 0x421a88
mov ecx, dword [0x693b54]
call fcn.00583960
test al, al
jne 0x41fa61
lea ecx, [edi + 0x1aa]
shl ecx, 4
cmp dword [ecx + esi], 0
jne 0x421a88
mov ecx, dword [0x693b54]
call fcn.00583980
test al, al
jne 0x41fa83
lea edx, [edi + 0x1aa]
shl edx, 4
cmp dword [edx + esi], 0
je 0x421a88
mov ecx, dword [0x693b54]
call fcn.005839a0
mov ecx, dword [0x693b54]
shl eax, 0x18
or eax, 0xffffff
mov dword [esp + 0x18], eax
call fcn.00583980
test al, al
jne 0x41fabc
lea eax, [edi + 0x1aa]
shl eax, 4
cmp dword [eax + esi], 0
je 0x421a88
mov ecx, dword [esp + 0x20]
fld dword [esi + 0x2d60]
fadd qword [0x5b15b0]
mov edx, dword [esp + 0x24]
imul ecx, ecx, 0x23
imul edx, edx, 0x23
mov dword [esp + 0x10], ecx
mov eax, edi
shl eax, 4
fiadd dword [esp + 0x10]
mov dword [esp + 0x10], edx
add eax, esi
cmp dword [eax + 0x1aa8], 0
mov dword [esp + 0x14], eax
fstp dword [esp + 0x28]
fild dword [esp + 0x10]
fadd dword [esi + 0x2d64]
fstp dword [esp + 0x2c]
je 0x41fbb2
cmp dword [eax + 0x1aa4], 0
fild dword [0x6a01b8]
je 0x41fb33
mov ecx, dword [0x6a01b8]
test ecx, ecx
jge 0x41fb2b
fadd dword [0x5af1c8]
fmul qword [0x5b15a8]
jmp 0x41fb49
mov edx, dword [0x6a01b8]
test edx, edx
jge 0x41fb43
fadd dword [0x5af1c8]
fmul qword [0x5b15a0]
call fcn.00599920
mov ecx, dword [esp + 0x14]
add dword [ecx + 0x1aac], eax
mov eax, ecx
mov ecx, dword [eax + 0x1aac]
cmp ecx, 0xff
jle 0x41fb7e
mov dword [eax + 0x1aac], 0xff
mov dword [eax + 0x1aa4], 0
jmp 0x41fb97
cmp ecx, 0x46
jge 0x41fb97
mov dword [eax + 0x1aac], 0x46
mov dword [eax + 0x1aa4], 1
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x1aac]
shl ecx, 0x18
or ecx, 0xffffff
push ecx
lea edx, [esp + 0x2c]
push edx
jmp 0x41fbbc
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x2c]
push ecx
fldz
push ecx
fstp dword [esp]
lea ecx, [edi + 0xd]
push 0
shl ecx, 5
push 0
add ecx, esi
call fcn.00429930
lea edx, [edi + 0x1aa]
shl edx, 4
cmp dword [edx + esi], 0
lea eax, [edx + esi]
mov dword [esp + 0x10], eax
jne 0x41fd05
cmp edi, dword [esi + 4]
jle 0x41fc1e
cmp edi, 0x85
je 0x41fc1e
cmp edi, 0x86
je 0x41fc1e
cmp edi, 0x87
je 0x41fc1e
cmp edi, 0xa5
je 0x41fc1e
cmp edi, 0xa6
jne 0x41fd05
mov eax, dword [esi + edi*4 + 0x2a40]
mov edx, dword [0x6a01bc]
mov ecx, dword [esi + edi*4 + 0x2720]
sub edx, eax
cmp ecx, edx
jbe 0x41fd05
sub ecx, dword [0x6a01bc]
add ecx, eax
mov eax, 0x10624dd3
mul ecx
shr edx, 6
push edx
lea eax, [esp + 0xd8]
push 0x5b1598
push eax
call ebx
add esp, 0xc
fld dword [esp + 0x2c]
push 0
fadd qword [0x5b1590]
push 0
call fcn.00599920
fld dword [esp + 0x30]
fadd qword [0x5af648]
push eax
call fcn.00599920
push eax
lea ecx, [esp + 0x50]
push ecx
call dword [sym.imp.USER32.dll_SetRect]
lea eax, [esp + 0xd4]
lea ecx, [eax + 1]
lea ebx, [ebx]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41fca0
push 0xff464646
sub eax, ecx
lea edx, [esp + 0x44]
push edx
push eax
lea eax, [esp + 0xe0]
push eax
push 2
mov ecx, 0x682a58
call fcn.004264c0
mov eax, 1
sub dword [esp + 0x40], eax
sub dword [esp + 0x44], eax
lea eax, [esp + 0xd4]
lea ecx, [eax + 1]
nop
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41fce0
sub eax, ecx
push 0xffffffffffffffff
lea ecx, [esp + 0x44]
push ecx
push eax
lea edx, [esp + 0xe0]
push edx
push 2
mov ecx, 0x682a58
call fcn.004264c0
mov eax, dword [esp + 0x20]
inc eax
cmp eax, dword [esi + 0x2d68]
mov dword [esp + 0x20], eax
jl 0x41fd22
inc dword [esp + 0x24]
mov dword [esp + 0x20], 0
push 0x7f
lea eax, [esp + 0xe5]
push 0
push eax
mov byte [esp + 0xec], 0
call sub.MSVCR90.dll_memset
add esp, 0xc
cmp dword [0x683144], 0
jne 0x421a6d
fild dword [esp + 0x3c]
fsub dword [esp + 0x28]
call fcn.00599920
fild dword [esp + 0x38]
mov dword [esp + 0x18], eax
fsub dword [esp + 0x2c]
call fcn.00599920
mov ecx, dword [esp + 0x18]
dec ecx
cmp ecx, 0x21
ja 0x421a6d
dec eax
cmp eax, 0x21
ja 0x421a6d
mov edx, dword [esp + 0x10]
cmp dword [edx], 0
je 0x421311
mov edi, dword [esp + 0x1c]
add edi, 0x2d6c
mov ecx, edi
call fcn.0042d1e0
mov eax, dword [esp + 0x10]
movzx ecx, word [eax]
push ecx
mov ecx, 0x69fe70
call fcn.004ae980
mov esi, eax
test esi, esi
je 0x421a80
push 0x3f
lea edx, [esp + 0x265]
push 0
push edx
mov byte [esp + 0x26c], 0
call sub.MSVCR90.dll_memset
lea eax, [esi + 2]
push eax
lea ecx, [esp + 0x270]
push 0x5b1588
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
push 0xf0f0f0
lea edx, [esp + 0x264]
push edx
mov ecx, edi
call fcn.0042cf80
push 0xffffffffffffffff
push 0x5af25f
mov ecx, edi
call fcn.0042cf80
push 0xff
lea eax, [esp + 0x165]
push 0
push eax
mov byte [esp + 0x16c], 0
call sub.MSVCR90.dll_memset
movzx eax, word [esi + 0x3a]
add esp, 0xc
test ax, ax
je 0x41ff34
mov ecx, 0x101
cmp word [esi + 0x28], cx
jne 0x41fe76
movzx edx, ax
push edx
push 0x573
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x58]
push eax
call ebx
add esp, 0xc
push 0x9bdeff
lea ecx, [esp + 0x54]
push ecx
mov ecx, edi
call fcn.0042cf80
movzx eax, word [esi + 0x28]
mov edx, 0x102
cmp ax, dx
je 0x41fe8e
mov ecx, 0x106
cmp ax, cx
jne 0x41febe
movzx edx, word [esi + 0x3a]
push edx
push 0x59d
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x58]
push eax
call ebx
add esp, 0xc
push 0x9bdeff
lea ecx, [esp + 0x54]
push ecx
mov ecx, edi
call fcn.0042cf80
mov edx, 0x103
cmp word [esi + 0x28], dx
jne 0x41fef9
movzx eax, word [esi + 0x3a]
push eax
push 0x581
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x58]
push ecx
call ebx
add esp, 0xc
push 0x9bdeff
lea edx, [esp + 0x54]
push edx
mov ecx, edi
call fcn.0042cf80
mov eax, 0x104
cmp word [esi + 0x28], ax
jne 0x41ff34
movzx ecx, word [esi + 0x3a]
push ecx
push 0x5be
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x58]
push edx
call ebx
add esp, 0xc
push 0x9bdeff
lea eax, [esp + 0x54]
push eax
mov ecx, edi
call fcn.0042cf80
movzx eax, word [esi + 0x3c]
test ax, ax
je 0x41fffe
mov ecx, 0x101
cmp word [esi + 0x28], cx
jne 0x41ff7b
movzx edx, ax
push edx
push 0x57b
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x58]
push eax
call ebx
add esp, 0xc
push 0x9bdeff
lea ecx, [esp + 0x54]
push ecx
mov ecx, edi
call fcn.0042cf80
movzx eax, word [esi + 0x28]
mov edx, 0x102
cmp ax, dx
je 0x41ff93
mov ecx, 0x106
cmp ax, cx
jne 0x41ffc3
movzx edx, word [esi + 0x3c]
push edx
push 0x59e
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x58]
push eax
call ebx
add esp, 0xc
push 0x9bdeff
lea ecx, [esp + 0x54]
push ecx
mov ecx, edi
call fcn.0042cf80
mov edx, 0x103
cmp word [esi + 0x28], dx
jne 0x41fffe
movzx eax, word [esi + 0x3c]
push eax
push 0x599
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x58]
push ecx
call ebx
add esp, 0xc
push 0x9bdeff
lea edx, [esp + 0x54]
push edx
mov ecx, edi
call fcn.0042cf80
movzx eax, word [esi + 0x3e]
test ax, ax
je 0x420103
mov ecx, 0x101
cmp word [esi + 0x28], cx
jne 0x420045
movzx edx, ax
push edx
push 0x596
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x58]
push eax
call ebx
add esp, 0xc
push 0x9bdeff
lea ecx, [esp + 0x54]
push ecx
mov ecx, edi
call fcn.0042cf80
movzx eax, word [esi + 0x28]
mov edx, 0x102
cmp ax, dx
je 0x42005d
mov ecx, 0x106
cmp ax, cx
jne 0x42008d
movzx edx, word [esi + 0x3e]
push edx
push 0x5a1
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x58]
push eax
call ebx
add esp, 0xc
push 0x9bdeff
lea ecx, [esp + 0x54]
push ecx
mov ecx, edi
call fcn.0042cf80
mov edx, 0x103
cmp word [esi + 0x28], dx
jne 0x4200c8
movzx eax, word [esi + 0x3e]
push eax
push 0x577
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x58]
push ecx
call ebx
add esp, 0xc
push 0x9bdeff
lea edx, [esp + 0x54]
push edx
mov ecx, edi
call fcn.0042cf80
mov eax, 0x104
cmp word [esi + 0x28], ax
jne 0x420103
movzx ecx, word [esi + 0x3e]
push ecx
push 0x574
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x58]
push edx
call ebx
add esp, 0xc
push 0x9bdeff
lea eax, [esp + 0x54]
push eax
mov ecx, edi
call fcn.0042cf80
cmp word [esi + 0x3e], 1
jne 0x420140
mov ecx, 0x107
cmp word [esi + 0x28], cx
jne 0x420140
push 0x57a
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x54]
push edx
call ebx
add esp, 8
push 0x9bdeff
lea eax, [esp + 0x54]
push eax
mov ecx, edi
call fcn.0042cf80
movzx eax, word [esi + 0x40]
test ax, ax
je 0x42020a
mov ecx, 0x101
cmp word [esi + 0x28], cx
jne 0x420187
movzx edx, ax
push edx
push 0x597
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x58]
push eax
call ebx
add esp, 0xc
push 0x9bdeff
lea ecx, [esp + 0x54]
push ecx
mov ecx, edi
call fcn.0042cf80
movzx eax, word [esi + 0x28]
mov edx, 0x102
cmp ax, dx
je 0x42019f
mov ecx, 0x106
cmp ax, cx
jne 0x4201cf
movzx edx, word [esi + 0x40]
push edx
push 0x59f
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x58]
push eax
call ebx
add esp, 0xc
push 0x9bdeff
lea ecx, [esp + 0x54]
push ecx
mov ecx, edi
call fcn.0042cf80
mov edx, 0x103
cmp word [esi + 0x28], dx
jne 0x42020a
movzx eax, word [esi + 0x40]
push eax
push 0x58d
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x58]
push ecx
call ebx
add esp, 0xc
push 0x9bdeff
lea edx, [esp + 0x54]
push edx
mov ecx, edi
call fcn.0042cf80
mov eax, dword [esi + 0x44]
test eax, eax
je 0x4202cd
mov ecx, 0x102
cmp word [esi + 0x28], cx
jne 0x42024c
push eax
push 0x575
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x58]
push edx
call ebx
add esp, 0xc
push 0x9bdeff
lea eax, [esp + 0x54]
push eax
mov ecx, edi
call fcn.0042cf80
movzx eax, word [esi + 0x28]
mov ecx, 0x103
cmp ax, cx
je 0x420264
mov edx, 0x106
cmp ax, dx
jne 0x420293
mov eax, dword [esi + 0x44]
push eax
push 0x58b
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x58]
push ecx
call ebx
add esp, 0xc
push 0x9bdeff
lea edx, [esp + 0x54]
push edx
mov ecx, edi
call fcn.0042cf80
mov eax, 0x104
cmp word [esi + 0x28], ax
jne 0x4202cd
mov ecx, dword [esi + 0x44]
push ecx
push 0x589
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x58]
push edx
call ebx
add esp, 0xc
push 0x9bdeff
lea eax, [esp + 0x54]
push eax
mov ecx, edi
call fcn.0042cf80
mov eax, dword [esi + 0x48]
test eax, eax
je 0x420352
mov ecx, 0x102
cmp word [esi + 0x28], cx
jne 0x42030b
push eax
push 0x588
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x58]
push edx
call ebx
add esp, 0xc
push 0x9bdeff
lea eax, [esp + 0x54]
push eax
mov ecx, edi
call fcn.0042cf80
movzx eax, word [esi + 0x28]
mov ecx, 0x103
cmp ax, cx
je 0x420323
mov edx, 0x106
cmp ax, dx
jne 0x420352
mov eax, dword [esi + 0x48]
push eax
push 0x58c
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x58]
push ecx
call ebx
add esp, 0xc
push 0x9bdeff
lea edx, [esp + 0x54]
push edx
mov ecx, edi
call fcn.0042cf80
movzx eax, word [esi + 0x4c]
test ax, ax
je 0x4203e1
mov ecx, 0x102
cmp word [esi + 0x28], cx
jne 0x420399
movzx edx, ax
push edx
push 0x594
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x58]
push eax
call ebx
add esp, 0xc
push 0x9bdeff
lea ecx, [esp + 0x54]
push ecx
mov ecx, edi
call fcn.0042cf80
movzx eax, word [esi + 0x28]
mov edx, 0x103
cmp ax, dx
je 0x4203b1
mov ecx, 0x106
cmp ax, cx
jne 0x4203e1
movzx edx, word [esi + 0x4c]
push edx
push 0x58a
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x58]
push eax
call ebx
add esp, 0xc
push 0x9bdeff
lea ecx, [esp + 0x54]
push ecx
mov ecx, edi
call fcn.0042cf80
movzx eax, word [esi + 0x68]
test ax, ax
je 0x42049e
mov edx, 0x102
cmp word [esi + 0x28], dx
jne 0x420428
movzx eax, ax
push eax
push 0x58e
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x58]
push ecx
call ebx
add esp, 0xc
push 0x9bdeff
lea edx, [esp + 0x54]
push edx
mov ecx, edi
call fcn.0042cf80
mov eax, 0x104
cmp word [esi + 0x28], ax
jne 0x420463
movzx ecx, word [esi + 0x68]
push ecx
push 0x598
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x58]
push edx
call ebx
add esp, 0xc
push 0x9bdeff
lea eax, [esp + 0x54]
push eax
mov ecx, edi
call fcn.0042cf80
mov ecx, 0x106
cmp word [esi + 0x28], cx
jne 0x42049e
movzx edx, word [esi + 0x68]
push edx
push 0x575
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x58]
push eax
call ebx
add esp, 0xc
push 0x9bdeff
lea ecx, [esp + 0x54]
push ecx
mov ecx, edi
call fcn.0042cf80
movzx eax, word [esi + 0x6a]
test ax, ax
je 0x42051c
mov edx, 0x102
cmp word [esi + 0x28], dx
jne 0x4204e1
movzx eax, ax
push eax
push 0x58f
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x58]
push ecx
call ebx
add esp, 0xc
push 0x9bdeff
lea edx, [esp + 0x54]
push edx
mov ecx, edi
call fcn.0042cf80
mov eax, 0x106
cmp word [esi + 0x28], ax
jne 0x42051c
movzx ecx, word [esi + 0x6a]
push ecx
push 0x588
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x58]
push edx
call ebx
add esp, 0xc
push 0x9bdeff
lea eax, [esp + 0x54]
push eax
mov ecx, edi
call fcn.0042cf80
movzx eax, word [esi + 0x6c]
test ax, ax
je 0x42059a
mov ecx, 0x102
cmp word [esi + 0x28], cx
jne 0x42055f
movzx edx, ax
push edx
push 0x590
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x58]
push eax
call ebx
add esp, 0xc
push 0x9bdeff
lea ecx, [esp + 0x54]
push ecx
mov ecx, edi
call fcn.0042cf80
mov edx, 0x106
cmp word [esi + 0x28], dx
jne 0x42059a
movzx eax, word [esi + 0x6c]
push eax
push 0x592
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x58]
push ecx
call ebx
add esp, 0xc
push 0x9bdeff
lea edx, [esp + 0x54]
push edx
mov ecx, edi
call fcn.0042cf80
movzx eax, word [esi + 0x6e]
test ax, ax
je 0x420657
mov ecx, 0x102
cmp word [esi + 0x28], cx
jne 0x4205e1
movzx edx, ax
push edx
push 0x57e
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x58]
push eax
call ebx
add esp, 0xc
push 0x9bdeff
lea ecx, [esp + 0x54]
push ecx
mov ecx, edi
call fcn.0042cf80
mov edx, 0x106
cmp word [esi + 0x28], dx
jne 0x42061c
movzx eax, word [esi + 0x6e]
push eax
push 0x593
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x58]
push ecx
call ebx
add esp, 0xc
push 0x9bdeff
lea edx, [esp + 0x54]
push edx
mov ecx, edi
call fcn.0042cf80
mov eax, 0x136
cmp word [esi + 0x28], ax
jne 0x420657
movzx ecx, word [esi + 0x6e]
push ecx
push 0x5aa
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x58]
push edx
call ebx
add esp, 0xc
push 0x9bdeff
lea eax, [esp + 0x54]
push eax
mov ecx, edi
call fcn.0042cf80
movzx eax, word [esi + 0x70]
test ax, ax
je 0x420714
mov ecx, 0x102
cmp word [esi + 0x28], cx
jne 0x42069e
movzx edx, ax
push edx
push 0x582
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x58]
push eax
call ebx
add esp, 0xc
push 0x9bdeff
lea ecx, [esp + 0x54]
push ecx
mov ecx, edi
call fcn.0042cf80
mov edx, 0x106
cmp word [esi + 0x28], dx
jne 0x4206d9
movzx eax, word [esi + 0x70]
push eax
push 0x591
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x58]
push ecx
call ebx
add esp, 0xc
push 0x9bdeff
lea edx, [esp + 0x54]
push edx
mov ecx, edi
call fcn.0042cf80
mov eax, 0x136
cmp word [esi + 0x28], ax
jne 0x420714
movzx ecx, word [esi + 0x70]
push ecx
push 0x5ab
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x58]
push edx
call ebx
add esp, 0xc
push 0x9bdeff
lea eax, [esp + 0x54]
push eax
mov ecx, edi
call fcn.0042cf80
movzx eax, word [esi + 0x72]
test ax, ax
je 0x420787
movzx ecx, ax
push ecx
push 0x578
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x58]
push edx
call ebx
add esp, 0xc
push 0x9bdeff
lea eax, [esp + 0x54]
push eax
mov ecx, edi
call fcn.0042cf80
mov ecx, 0x136
cmp word [esi + 0x28], cx
jne 0x420787
movzx edx, word [esi + 0x72]
push edx
push 0x5a8
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x58]
push eax
call ebx
add esp, 0xc
push 0x9bdeff
lea ecx, [esp + 0x54]
push ecx
mov ecx, edi
call fcn.0042cf80
movzx eax, word [esi + 0x74]
test ax, ax
je 0x420844
mov edx, 0x102
cmp word [esi + 0x28], dx
jne 0x4207ce
movzx eax, ax
push eax
push 0x573
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x58]
push ecx
call ebx
add esp, 0xc
push 0x9bdeff
lea edx, [esp + 0x54]
push edx
mov ecx, edi
call fcn.0042cf80
mov eax, 0x106
cmp word [esi + 0x28], ax
jne 0x420809
movzx ecx, word [esi + 0x74]
push ecx
push 0x59a
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x58]
push edx
call ebx
add esp, 0xc
push 0x9bdeff
lea eax, [esp + 0x54]
push eax
mov ecx, edi
call fcn.0042cf80
mov ecx, 0x136
cmp word [esi + 0x28], cx
jne 0x420844
movzx edx, word [esi + 0x74]
push edx
push 0x5a8
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x58]
push eax
call ebx
add esp, 0xc
push 0x9bdeff
lea ecx, [esp + 0x54]
push ecx
mov ecx, edi
call fcn.0042cf80
movzx eax, word [esi + 0x76]
test ax, ax
je 0x420901
mov edx, 0x102
cmp word [esi + 0x28], dx
jne 0x42088b
movzx eax, ax
push eax
push 0x595
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x58]
push ecx
call ebx
add esp, 0xc
push 0x9bdeff
lea edx, [esp + 0x54]
push edx
mov ecx, edi
call fcn.0042cf80
mov eax, 0x106
cmp word [esi + 0x28], ax
jne 0x4208c6
movzx ecx, word [esi + 0x76]
push ecx
push 0x50a
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x58]
push edx
call ebx
add esp, 0xc
push 0x9bdeff
lea eax, [esp + 0x54]
push eax
mov ecx, edi
call fcn.0042cf80
mov ecx, 0x136
cmp word [esi + 0x28], cx
jne 0x420901
movzx edx, word [esi + 0x76]
push edx
push 0x5a7
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x58]
push eax
call ebx
add esp, 0xc
push 0x9bdeff
lea ecx, [esp + 0x54]
push ecx
mov ecx, edi
call fcn.0042cf80
movzx eax, word [esi + 0x78]
test ax, ax
je 0x4209be
mov edx, 0x102
cmp word [esi + 0x28], dx
jne 0x420948
movzx eax, ax
push eax
push 0x5ac
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x58]
push ecx
call ebx
add esp, 0xc
push 0x9bdeff
lea edx, [esp + 0x54]
push edx
mov ecx, edi
call fcn.0042cf80
mov eax, 0x106
cmp word [esi + 0x28], ax
jne 0x420983
movzx ecx, word [esi + 0x78]
push ecx
push 0x57d
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x58]
push edx
call ebx
add esp, 0xc
push 0x9bdeff
lea eax, [esp + 0x54]
push eax
mov ecx, edi
call fcn.0042cf80
mov ecx, 0x136
cmp word [esi + 0x28], cx
jne 0x4209be
movzx edx, word [esi + 0x78]
push edx
push 0x60f
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x58]
push eax
call ebx
add esp, 0xc
push 0x9bdeff
lea ecx, [esp + 0x54]
push ecx
mov ecx, edi
call fcn.0042cf80
cmp word [esi + 0x7a], 0
je 0x420a00
mov edx, 0x106
cmp word [esi + 0x28], dx
jne 0x420a00
movzx eax, word [esi + 0x78]
push eax
push 0x571
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x58]
push ecx
call ebx
add esp, 0xc
push 0x9bdeff
lea edx, [esp + 0x54]
push edx
mov ecx, edi
call fcn.0042cf80
movzx eax, word [esi + 0x80]
test ax, ax
je 0x420a46
mov ecx, 0x106
cmp word [esi + 0x28], cx
jne 0x420a46
movzx edx, ax
push edx
push 0x5a9
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x58]
push eax
call ebx
add esp, 0xc
push 0x9bdeff
lea ecx, [esp + 0x54]
push ecx
mov ecx, edi
call fcn.0042cf80
cmp word [esi + 0x84], 0
je 0x420ac4
mov edx, 0x102
cmp word [esi + 0x28], dx
jne 0x420a86
push 0x570
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x54]
push eax
call ebx
add esp, 8
push 0x9bdeff
lea ecx, [esp + 0x54]
push ecx
mov ecx, edi
call fcn.0042cf80
mov edx, 0x106
cmp word [esi + 0x28], dx
jne 0x420ac4
movzx eax, word [esi + 0x84]
push eax
push 0x579
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x58]
push ecx
call ebx
add esp, 0xc
push 0x9bdeff
lea edx, [esp + 0x54]
push edx
mov ecx, edi
call fcn.0042cf80
movzx eax, word [esi + 0x86]
test ax, ax
je 0x420b48
mov ecx, 0x102
cmp word [esi + 0x28], cx
jne 0x420b0a
movzx edx, ax
push edx
push 0x50a
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x58]
push eax
call ebx
add esp, 0xc
push 0x9bdeff
lea ecx, [esp + 0x54]
push ecx
mov ecx, edi
call fcn.0042cf80
mov edx, 0x106
cmp word [esi + 0x28], dx
jne 0x420b48
movzx eax, word [esi + 0x86]
push eax
push 0x5c2
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x58]
push ecx
call ebx
add esp, 0xc
push 0x9bdeff
lea edx, [esp + 0x54]
push edx
mov ecx, edi
call fcn.0042cf80
movzx eax, word [esi + 0x88]
test ax, ax
je 0x420bcc
mov ecx, 0x102
cmp word [esi + 0x28], cx
jne 0x420b8e
movzx edx, ax
push edx
push 0x56e
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x58]
push eax
call ebx
add esp, 0xc
push 0x9bdeff
lea ecx, [esp + 0x54]
push ecx
mov ecx, edi
call fcn.0042cf80
mov edx, 0x106
cmp word [esi + 0x28], dx
jne 0x420bcc
movzx eax, word [esi + 0x88]
push eax
push 0x691
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x58]
push ecx
call ebx
add esp, 0xc
push 0x9bdeff
lea edx, [esp + 0x54]
push edx
mov ecx, edi
call fcn.0042cf80
movzx eax, word [esi + 0xa4]
test ax, ax
je 0x420c12
mov ecx, 0x102
cmp word [esi + 0x28], cx
jne 0x420c12
movzx edx, ax
push edx
push 0x587
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x58]
push eax
call ebx
add esp, 0xc
push 0x9bdeff
lea ecx, [esp + 0x54]
push ecx
mov ecx, edi
call fcn.0042cf80
movzx eax, word [esi + 0xa6]
test ax, ax
je 0x420c96
mov edx, 0x102
cmp word [esi + 0x28], dx
jne 0x420c58
movzx eax, ax
push eax
push 0x58b
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x58]
push ecx
call ebx
add esp, 0xc
push 0x9bdeff
lea edx, [esp + 0x54]
push edx
mov ecx, edi
call fcn.0042cf80
mov eax, 0x106
cmp word [esi + 0x28], ax
jne 0x420c96
movzx ecx, word [esi + 0xa6]
push ecx
push 0x57f
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x58]
push edx
call ebx
add esp, 0xc
push 0x9bdeff
lea eax, [esp + 0x54]
push eax
mov ecx, edi
call fcn.0042cf80
movzx eax, word [esi + 0xa8]
test ax, ax
je 0x420d1a
mov ecx, 0x102
cmp word [esi + 0x28], cx
jne 0x420cdc
movzx edx, ax
push edx
push 0x58c
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x58]
push eax
call ebx
add esp, 0xc
push 0x9bdeff
lea ecx, [esp + 0x54]
push ecx
mov ecx, edi
call fcn.0042cf80
mov edx, 0x106
cmp word [esi + 0x28], dx
jne 0x420d1a
movzx eax, word [esi + 0xa8]
push eax
push 0x580
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x58]
push ecx
call ebx
add esp, 0xc
push 0x9bdeff
lea edx, [esp + 0x54]
push edx
mov ecx, edi
call fcn.0042cf80
movzx eax, word [esi + 0xaa]
test ax, ax
je 0x420d96
mov ecx, 0x102
cmp word [esi + 0x28], cx
jne 0x420d60
movzx edx, ax
push edx
push 0x58a
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x58]
push eax
call ebx
add esp, 0xc
push 0x9bdeff
lea ecx, [esp + 0x54]
push ecx
mov ecx, edi
call fcn.0042cf80
mov edx, 0x106
cmp word [esi + 0x28], dx
jne 0x420d96
push 0x570
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x54]
push eax
call ebx
add esp, 8
push 0x9bdeff
lea ecx, [esp + 0x54]
push ecx
mov ecx, edi
call fcn.0042cf80
movzx ecx, word [esi + 0xb8]
test cx, cx
je 0x420e1b
movzx eax, word [esi + 0x28]
mov edx, 0x101
cmp ax, dx
je 0x420dec
mov edx, 0x102
cmp ax, dx
je 0x420dec
mov edx, 0x104
cmp ax, dx
je 0x420dec
mov edx, 0x105
cmp ax, dx
je 0x420dec
mov edx, 0x106
cmp ax, dx
je 0x420dec
mov edx, 0x108
cmp ax, dx
je 0x420dec
mov edx, 0x136
cmp ax, dx
jne 0x420e1b
movzx eax, cx
push eax
push 0x692
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x58]
push ecx
call ebx
add esp, 0xc
push 0x9bdeff
lea edx, [esp + 0x54]
push edx
mov ecx, edi
call fcn.0042cf80
cmp dword [esi + 0x2c], 1
jne 0x420e74
movzx eax, word [esi + 0x28]
mov ecx, 0x108
cmp ax, cx
je 0x420e39
mov edx, 0x12c
cmp ax, dx
jne 0x420e74
push 0x5b9
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
push 0x56f
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x58]
push eax
call ebx
add esp, 0xc
push 0x9bdeff
lea ecx, [esp + 0x54]
push ecx
mov ecx, edi
call fcn.0042cf80
cmp dword [esi + 0x2c], 0
jne 0x420f2c
movzx eax, word [esi + 0x28]
mov edx, 0x108
cmp ax, dx
je 0x420e9a
mov ecx, 0x12c
cmp ax, cx
jne 0x420f2c
cmp word [esi + 0xc0], 0xb
mov ecx, 0x6a0f60
jne 0x420ef6
test byte [edi + 0x322], 1
jne 0x420ed4
push 0x5b9
call fcn.004d6bc0
push eax
push 0x56f
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x58]
push edx
jmp 0x420f16
push 0x5b8
call fcn.004d6bc0
push eax
push 0x56f
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x58]
push eax
jmp 0x420f16
push 0x5b8
call fcn.004d6bc0
push eax
push 0x56f
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x58]
push ecx
call ebx
add esp, 0xc
push 0x9bdeff
lea edx, [esp + 0x54]
push edx
mov ecx, edi
call fcn.0042cf80
cmp word [esi + 0x82], 0
jne 0x420fe8
movzx eax, word [esi + 0x28]
mov ecx, 0x108
cmp ax, cx
je 0x420f56
mov edx, 0x12c
cmp ax, dx
jne 0x420fe8
cmp word [esi + 0xc0], 0xb
mov ecx, 0x6a0f60
jne 0x420fb2
test byte [edi + 0x322], 1
jne 0x420f90
push 0x5b9
call fcn.004d6bc0
push eax
push 0x56f
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x58]
push eax
jmp 0x420fd2
push 0x5b8
call fcn.004d6bc0
push eax
push 0x56f
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x58]
push ecx
jmp 0x420fd2
push 0x5b8
call fcn.004d6bc0
push eax
push 0x56f
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x58]
push edx
call ebx
add esp, 0xc
push 0x9bdeff
lea eax, [esp + 0x54]
push eax
mov ecx, edi
call fcn.0042cf80
cmp word [esi + 0x82], 1
jne 0x421045
movzx eax, word [esi + 0x28]
mov ecx, 0x108
cmp ax, cx
je 0x42100a
mov edx, 0x12c
cmp ax, dx
jne 0x421045
push 0x5b9
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
push 0x56f
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x58]
push eax
call ebx
add esp, 0xc
push 0x9bdeff
lea ecx, [esp + 0x54]
push ecx
mov ecx, edi
call fcn.0042cf80
mov edx, dword [esp + 0x10]
mov eax, dword [edx]
push eax
mov ecx, 0x69fe70
call fcn.004af2e0
test eax, eax
je 0x421a46
mov ecx, dword [esi + 0x30]
cmp ecx, 1
jne 0x421159
mov ecx, dword [eax + 0x28]
push 0xf0f0f0
mov dword [esp + 0x1c], ecx
push 0x2fe
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
mov ecx, edi
call fcn.0042cf80
mov eax, dword [esp + 0x18]
mov edx, eax
shr edx, 6
mov ecx, eax
shr ecx, 0xc
and edx, 0x3f
push edx
and ecx, 0x3f
push ecx
mov edx, eax
mov ecx, eax
shr edx, 0x12
shr ecx, 0x18
and edx, 0x3f
push edx
and ecx, 0xf
push ecx
shr eax, 0x1c
add eax, 0xf
push eax
push 0x2ff
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x178]
push edx
call ebx
add esp, 0x1c
push 0xffc800
lea eax, [esp + 0x164]
push eax
mov ecx, edi
call fcn.0042cf80
mov ecx, 0x104
cmp word [esi + 0x28], cx
jne 0x421a46
cmp word [esi + 0x3e], 0
je 0x421a46
push 0xffffffffffffffff
push 0x5af25f
mov ecx, edi
call fcn.0042cf80
mov edx, dword [0x69e254]
movsx eax, byte [edx + 0x58f]
push eax
push 0x2da
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x168]
push ecx
call ebx
add esp, 0xc
push 0xffc800
lea edx, [esp + 0x164]
push edx
mov ecx, edi
call fcn.0042cf80
jmp 0x421a46
cmp ecx, 2
jne 0x421280
mov ecx, dword [eax + 0x28]
mov eax, 0x31b5d43b
mul ecx
shr edx, 0x18
mov dword [esp + 0x10], edx
imul edx, edx, 0x5265c00
sub ecx, edx
mov eax, 0x4a90be59
imul ecx
sar edx, 0x14
mov esi, edx
shr esi, 0x1f
add esi, edx
mov eax, esi
imul eax, eax, 0x36ee80
sub ecx, eax
mov eax, 0x45e7b273
imul ecx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
push 0xf0f0f0
add eax, edx
push 0x300
mov ecx, 0x6a0f60
mov dword [esp + 0x1c], eax
call fcn.004d6bc0
push eax
mov ecx, edi
call fcn.0042cf80
cmp dword [esp + 0x10], 0
je 0x4211f9
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
inc ecx
push ecx
push esi
push edx
push 0x301
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x170]
push eax
call ebx
add esp, 0x14
jmp 0x421267
test esi, esi
je 0x421223
mov ecx, dword [esp + 0x14]
inc ecx
push ecx
push esi
push 0x302
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x16c]
push edx
call ebx
add esp, 0x10
jmp 0x421267
cmp dword [esp + 0x14], 0
mov ecx, 0x6a0f60
je 0x42124f
mov eax, dword [esp + 0x14]
inc eax
push eax
push 0x303
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x168]
push ecx
call ebx
add esp, 0xc
jmp 0x421267
push 0x304
call fcn.004d6bc0
push eax
lea edx, [esp + 0x164]
push edx
call ebx
add esp, 8
push 0xffc800
lea eax, [esp + 0x164]
push eax
mov ecx, edi
call fcn.0042cf80
jmp 0x421a46
cmp ecx, 4
jne 0x421a46
mov ecx, 0x104
cmp word [esi + 0x28], cx
jne 0x421a46
cmp word [esi + 0x3e], 0
je 0x421a46
push 0xffc800
push 0x2ed
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
mov ecx, edi
call fcn.0042cf80
push 0xffffffffffffffff
push 0x5af25f
mov ecx, edi
call fcn.0042cf80
mov edx, dword [0x69e254]
movsx eax, byte [edx + 0x58f]
push eax
push 0x2da
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x168]
push ecx
call ebx
add esp, 0xc
push 0xffc800
lea edx, [esp + 0x164]
push edx
mov ecx, edi
call fcn.0042cf80
jmp 0x421a46
cmp edi, 0x7f
jne 0x421498
lea ecx, [esi + 0x2d6c]
call fcn.0042d1e0
mov eax, dword [0x6a38e8]
mov ecx, 0x6a38dc
mov dword [esp + 0x10], 0
mov dword [0x6a38f0], eax
call fcn.0041f760
mov edi, eax
test edi, edi
je 0x42148c
jmp 0x421350
cmp dword [edi + 0x218], 0
je 0x42146e
mov ecx, edi
call fcn.004f34e0
push eax
mov ecx, 0x6a3890
call fcn.004f5840
mov cl, byte [edi + 0x21c]
cmp cl, 1
je 0x4213af
cmp cl, 2
je 0x4213af
cmp cl, 3
jne 0x4213eb
mov ecx, 0x6a0f60
test eax, eax
je 0x421395
push eax
push 0x480
jmp 0x4213d8
push 0x5af25f
push 0x480
call fcn.004d6bc0
push eax
lea edx, [esp + 0xe8]
push edx
jmp 0x4213e6
mov ecx, 0x6a0f60
test eax, eax
je 0x4213ce
push eax
push 0x482
call fcn.004d6bc0
push eax
lea eax, [esp + 0xe8]
push eax
jmp 0x4213e6
push 0x5af25f
push 0x482
call fcn.004d6bc0
push eax
lea ecx, [esp + 0xe8]
push ecx
call ebx
add esp, 0xc
push 0xf0f0f0
lea edx, [esp + 0xe4]
push edx
lea ecx, [esi + 0x2d6c]
call fcn.0042cf80
mov eax, dword [edi + 0x21d]
mov ecx, eax
shl ecx, 0x14
mov edx, eax
mov esi, eax
shr ecx, 0x1a
push ecx
shl edx, 0xe
mov edi, eax
shr edx, 0x1a
push edx
shl esi, 8
shl edi, 4
shr esi, 0x1a
push esi
shr edi, 0x1c
push edi
shr eax, 0x1c
push eax
push 0x2ff
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0xf8]
push eax
call ebx
mov esi, dword [esp + 0x38]
add esp, 0x1c
push 0xffc800
lea ecx, [esp + 0xe4]
push ecx
lea ecx, [esi + 0x2d6c]
call fcn.0042cf80
inc dword [esp + 0x10]
mov ecx, 0x6a38dc
call fcn.0041f760
mov edi, eax
test edi, edi
jne 0x421350
cmp dword [esp + 0x10], eax
jne 0x421a46
mov ecx, esi
call fcn.0041f4b0
jmp 0x421a46
cmp edi, dword [esi + 4]
jg 0x421566
mov edx, dword [esi + 8]
mov eax, dword [edx + edi*4]
lea ecx, [esi + 0x2d6c]
push eax
call fcn.0042d710
mov eax, dword [0x6a01bc]
sub eax, dword [esi + edi*4 + 0x2a40]
mov ecx, dword [esi + edi*4 + 0x2720]
mov dword [esp + 0x10], eax
cmp eax, ecx
jae 0x421a46
sub ecx, eax
cmp ecx, 0xea60
jb 0x421515
mov eax, ecx
xor edx, edx
mov ecx, 0xea60
div ecx
mov ecx, eax
mov eax, 0x10624dd3
mul edx
shr edx, 6
inc edx
push edx
push ecx
push 0x553
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0xec]
push edx
call ebx
add esp, 0x10
jmp 0x42153e
mov eax, 0x10624dd3
mul ecx
shr edx, 6
inc edx
push edx
push 0x245
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0xe8]
push eax
call ebx
add esp, 0xc
push 0xffc800
lea ecx, [esp + 0xe4]
push ecx
lea ecx, [esi + 0x2d6c]
call fcn.0042cf80
mov edx, dword [esi + edi*4 + 0x2720]
sub edx, dword [esp + 0x10]
jmp 0x421a30
cmp edi, 0x85
je 0x42192c
cmp edi, 0x86
je 0x42192c
cmp edi, 0x87
je 0x42192c
cmp edi, 0x8c
je 0x4217e9
cmp edi, 0x8d
je 0x4217e9
cmp edi, 0x8e
je 0x4217e9
cmp edi, 0x8f
je 0x4217e9
cmp edi, 0x94
jne 0x4217a5
lea edi, [esi + 0x2d6c]
mov ecx, edi
call fcn.0042d1e0
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0xd8]
push 0xffc800
push edx
mov ecx, edi
call fcn.0042cf80
push 0xffffffffffffffff
push 0x5af25f
mov ecx, edi
call fcn.0042cf80
push 0xff
lea eax, [esp + 0x165]
push 0
push eax
mov byte [esp + 0x16c], 0
call sub.MSVCR90.dll_memset
add esp, 0xc
push 1
mov ecx, 0x6855f8
call fcn.004cba60
test eax, eax
je 0x421664
push 1
mov ecx, 0x6855f8
call fcn.004cba60
push eax
push 0x587
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x168]
push ecx
call ebx
add esp, 0xc
push 0xf0f0f0
lea edx, [esp + 0x164]
push edx
mov ecx, edi
call fcn.0042cf80
push 2
mov ecx, 0x6855f8
call fcn.004cba60
test eax, eax
je 0x4216b2
push 2
mov ecx, 0x6855f8
call fcn.004cba60
push eax
push 0x578
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x168]
push eax
call ebx
add esp, 0xc
push 0xf0f0f0
lea ecx, [esp + 0x164]
push ecx
mov ecx, edi
call fcn.0042cf80
push 3
mov ecx, 0x6855f8
call fcn.004cba60
test eax, eax
je 0x421700
push 3
mov ecx, 0x6855f8
call fcn.004cba60
push eax
push 0x57d
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0x168]
push edx
call ebx
add esp, 0xc
push 0xf0f0f0
lea eax, [esp + 0x164]
push eax
mov ecx, edi
call fcn.0042cf80
push 4
mov ecx, 0x6855f8
call fcn.004cba60
test eax, eax
je 0x42174e
push 4
mov ecx, 0x6855f8
call fcn.004cba60
push eax
push 0x57e
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0x168]
push ecx
call ebx
add esp, 0xc
push 0xf0f0f0
lea edx, [esp + 0x164]
push edx
mov ecx, edi
call fcn.0042cf80
push 5
mov ecx, 0x6855f8
call fcn.004cba60
test eax, eax
je 0x421a46
push 5
mov ecx, 0x6855f8
call fcn.004cba60
push eax
push 0x58f
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0x168]
push eax
call ebx
add esp, 0xc
push 0xf0f0f0
lea ecx, [esp + 0x164]
push ecx
mov ecx, edi
call fcn.0042cf80
jmp 0x421a46
cmp edi, 0xa5
je 0x4217b9
cmp edi, 0xa6
jne 0x421a46
lea ecx, [esi + 0x2d6c]
call fcn.0042d1e0
push 0xf0f0f0
push 0x68b
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esi + 0x2d6c]
call fcn.0042cf80
jmp 0x4214b3
lea ecx, [esi + 0x2d6c]
mov dword [esp + 0x18], ecx
call fcn.0042d1e0
call fcn.00404ba0
add edi, 0xffffff74
xor esi, esi
cmp edi, 3
ja case.default.0x42180a
jmp dword [edi*4 + 0x421ab0]
xor esi, esi
jmp 0x42183e
mov esi, 1
jmp 0x42183e
mov esi, 2
jmp 0x42183e
mov esi, 3
jmp 0x42183e
push 0
push 0x457
push str..StatusIconDlg.cpp
call fcn.00527110
add esp, 0xc
push 0x7f
lea ecx, [esp + 0x55]
push 0
push ecx
mov byte [esp + 0x5c], 0
call sub.MSVCR90.dll_memset
add esp, 0xc
lea edx, [esp + 0x50]
push edx
push esi
call fcn.00404ba0
mov ecx, eax
call fcn.005049b0
lea eax, [esp + 0x50]
push eax
push 0x565
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0xe8]
push ecx
call ebx
mov edi, dword [esp + 0x24]
add esp, 0xc
push 0xffc800
lea edx, [esp + 0xe4]
push edx
mov ecx, edi
call fcn.0042cf80
push esi
call fcn.00404ba0
mov ecx, eax
call fcn.00504960
push 0xf0f0f0
push 0x2fe
mov ecx, 0x6a0f60
mov esi, eax
call fcn.004d6bc0
push eax
mov ecx, edi
call fcn.0042cf80
mov eax, esi
shr eax, 6
and eax, 0x3f
push eax
mov ecx, esi
shr ecx, 0xc
mov edx, esi
and ecx, 0x3f
push ecx
mov eax, esi
shr edx, 0x12
and edx, 0x3f
push edx
shr eax, 0x18
and eax, 0xf
push eax
shr esi, 0x1c
add esi, 0xf
push esi
push 0x2ff
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esp + 0xf8]
push ecx
call ebx
add esp, 0x1c
push 0xffc800
lea edx, [esp + 0xe4]
push edx
mov ecx, edi
call fcn.0042cf80
jmp 0x421a46
lea ecx, [esi + 0x2d6c]
call fcn.0042d1e0
mov eax, edi
sub eax, 0x85
je 0x421962
sub eax, 1
je 0x421956
sub eax, 1
jne 0x421982
push 0xf0f0f0
push 0x54d
jmp 0x42196c
push 0xf0f0f0
push 0x54c
jmp 0x42196c
push 0xf0f0f0
push 0x54e
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea ecx, [esi + 0x2d6c]
call fcn.0042cf80
mov eax, dword [0x6a01bc]
sub eax, dword [esi + edi*4 + 0x2a40]
mov ecx, dword [esi + edi*4 + 0x2720]
mov dword [esp + 0x18], eax
cmp eax, ecx
jae 0x421a46
sub ecx, eax
cmp ecx, 0xea60
jb 0x4219e4
mov eax, ecx
xor edx, edx
mov ecx, 0xea60
div ecx
mov ecx, eax
mov eax, 0x10624dd3
mul edx
shr edx, 6
inc edx
push edx
push ecx
push 0x553
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea edx, [esp + 0xec]
push edx
call ebx
add esp, 0x10
jmp 0x421a0d
mov eax, 0x10624dd3
mul ecx
shr edx, 6
inc edx
push edx
push 0x245
mov ecx, 0x6a0f60
call fcn.004d6bc0
push eax
lea eax, [esp + 0xe8]
push eax
call ebx
add esp, 0xc
push 0xffc800
lea ecx, [esp + 0xe4]
push ecx
lea ecx, [esi + 0x2d6c]
call fcn.0042cf80
mov edx, dword [esi + edi*4 + 0x2720]
sub edx, dword [esp + 0x18]
cmp edx, 0x1388
ja 0x421a46
mov eax, dword [esp + 0x14]
mov dword [eax + 0x1aa8], 1
mov ecx, dword [esp + 0x3c]
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x38]
mov edi, dword [esp + 0x30]
lea eax, [esi + 0x2d6c]
add ecx, 0x22
add edx, 0x1c
mov dword [eax + 0x38], ecx
mov dword [eax + 0x3c], edx
mov dword [0x683140], eax
mov eax, dword [esp + 0x34]
inc eax
cmp eax, dword [esi + 0x2f34]
mov dword [esp + 0x34], eax
jge 0x421a99
jmp 0x421a88
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x30]
inc edi
cmp edi, 0xc8
mov dword [esp + 0x30], edi
jl 0x41fa0d
mov ecx, dword [esp + 0x2a4]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.005997a8
mov esp, ebp
pop ebp
ret