Function at 0x409950
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov dword [rsp + 0x10], edx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x58
mov edi, edx
mov r12, rcx
test rcx, rcx
je case.0x409a53.16211
cmp qword [rcx + 0x30], 0
je case.0x409a53.16211
cmp qword [rcx + 0x38], 0
je case.0x409a53.16211
mov rax, qword [rcx + 0x28]
test rax, rax
je case.0x409a53.16211
cmp qword [rax], rcx
jne case.0x409a53.16211
mov eax, dword [rax + 8]
sub eax, 0x3f34
cmp eax, 0x1f
ja case.0x409a53.16211
cmp qword [rcx + 0x10], 0
je case.0x409a53.16211
cmp qword [rcx], 0
jne 0x4099ca
cmp dword [rcx + 8], 0
jne case.0x409a53.16211
mov r13, qword [rcx + 0x28]
mov eax, dword [r13 + 8]
cmp eax, 0x3f3f
jne 0x4099e6
mov dword [r13 + 8], 0x3f40
mov eax, 0x3f40
mov r10d, dword [rcx + 0x18]
xor r15d, r15d
mov r9, qword [rcx + 0x10]
add eax, 0xffffc0cc
mov esi, dword [rcx + 8]
mov r8d, r10d
mov rbp, qword [rcx]
mov r14d, dword [r13 + 0x48]
mov ebx, dword [r13 + 0x4c]
mov qword [rsp + 0x40], r9
mov dword [rsp + 0xb8], r10d
mov dword [rsp + 0x38], esi
mov dword [rsp + 0xa0], r10d
mov dword [rsp + 0xb0], r15d
cmp eax, 0x1f
ja case.0x409a53.16211
cdqe
lea rcx, [0x00400000]
lea rdx, [r13 + 0x74]
lea r11, [r13 + 0x70]
mov ecx, dword [rcx + rax*4 + 0xb15c]
lea rax, [0x00400000]
add rcx, rax
jmp rcx
mov edx, dword [r13 + 0x10]
test edx, edx
jne 0x409a6a
mov dword [r13 + 8], 0x3f40
jmp 0x40a104
cmp ebx, 0x10
jae 0x409a90
nop
test esi, esi
je 0x40a2bb
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, 0x10
jb 0x409a70
test dl, 2
je 0x409af6
cmp r14d, 0x8b1f
jne 0x409af6
cmp dword [r13 + 0x30], 0
jne 0x409aad
mov dword [r13 + 0x30], 0xf
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.00408f90
mov dword [r13 + 0x20], eax
lea rdx, [rsp + 0x30]
mov byte [rsp + 0x30], r14b
mov r8d, 2
shr r14d, 8
mov byte [rsp + 0x31], r14b
mov ecx, dword [r13 + 0x20]
call fcn.00408f90
mov dword [r13 + 0x20], eax
mov r14d, r15d
mov ebx, r15d
mov dword [r13 + 8], 0x3f35
jmp 0x40a0f7
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x409b06
mov dword [rax + 0x40], 0xffffffff
test byte [r13 + 0x10], 1
je 0x409be4
movzx ecx, r14b
mov eax, r14d
shr eax, 8
shl ecx, 8
add ecx, eax
mov eax, 0x8421085
mul ecx
mov eax, ecx
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 4
imul eax, eax, 0x1f
cmp ecx, eax
jne 0x409be4
mov eax, r14d
and al, 0xf
cmp al, 8
je 0x409b5f
lea rax, [0x00431000]
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x40a104
mov eax, dword [r13 + 0x30]
add ebx, 0xfffffffc
shr r14d, 4
mov ecx, r14d
and ecx, 0xf
add ecx, 8
test eax, eax
jne 0x409b7d
mov dword [r13 + 0x30], ecx
mov eax, ecx
cmp ecx, 0xf
ja 0x409bcb
cmp ecx, eax
ja 0x409bcb
mov eax, 1
mov dword [r13 + 0x18], r15d
shl eax, cl
xor r8d, r8d
xor ecx, ecx
mov dword [r13 + 0x1c], eax
xor edx, edx
call fcn.00408ca0
shr r14d, 8
mov ebx, r15d
not r14d
mov dword [r13 + 0x20], eax
and r14d, 2
mov dword [r12 + 0x4c], eax
or r14d, 0x3f3d
mov dword [r13 + 8], r14d
mov r14d, r15d
jmp 0x40a0f7
lea rax, [0x00431020]
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x40a104
lea rax, [0x00430fe8]
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x40a104
cmp ebx, 0x10
jae 0x409c22
test esi, esi
je 0x40a2bb
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, 0x10
jb 0x409c02
mov dword [r13 + 0x18], r14d
cmp r14b, 8
je 0x409c45
lea rax, [0x00431000]
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x40a104
test r14d, 0xe000
je 0x409c67
lea rax, [0x00431038]
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x40a104
mov rdx, qword [r13 + 0x28]
mov ecx, r14d
shr ecx, 8
test rdx, rdx
je 0x409c7d
mov eax, ecx
and eax, 1
mov dword [rdx], eax
test dword [r13 + 0x18], 0x200
je 0x409caf
test byte [r13 + 0x10], 4
je 0x409caf
mov byte [rsp + 0x30], r14b
lea rdx, [rsp + 0x30]
mov byte [rsp + 0x31], cl
mov r8d, 2
mov ecx, dword [r13 + 0x20]
call fcn.00408f90
mov dword [r13 + 0x20], eax
mov r14d, r15d
mov dword [r13 + 8], 0x3f36
mov ebx, r15d
jmp 0x409cc4
cmp ebx, 0x20
jae 0x409ce4
test esi, esi
je 0x40a2bb
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, 0x20
jb 0x409cc4
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x409cf1
mov dword [rax + 4], r14d
test dword [r13 + 0x18], 0x200
je 0x409d3c
test byte [r13 + 0x10], 4
je 0x409d3c
mov eax, r14d
mov byte [rsp + 0x30], r14b
shr eax, 8
lea rdx, [rsp + 0x30]
mov byte [rsp + 0x31], al
mov r8d, 4
mov eax, r14d
shr r14d, 0x18
shr eax, 0x10
mov byte [rsp + 0x32], al
mov byte [rsp + 0x33], r14b
mov ecx, dword [r13 + 0x20]
call fcn.00408f90
mov dword [r13 + 0x20], eax
mov r14d, r15d
mov dword [r13 + 8], 0x3f37
mov ebx, r15d
jmp 0x409d51
cmp ebx, 0x10
jae 0x409d71
test esi, esi
je 0x40a2bb
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, 0x10
jb 0x409d51
mov rdx, qword [r13 + 0x28]
mov ecx, r14d
shr ecx, 8
test rdx, rdx
je 0x409d8e
movzx eax, r14b
mov dword [rdx + 8], eax
mov rax, qword [r13 + 0x28]
mov dword [rax + 0xc], ecx
test dword [r13 + 0x18], 0x200
je 0x409dc0
test byte [r13 + 0x10], 4
je 0x409dc0
mov byte [rsp + 0x30], r14b
lea rdx, [rsp + 0x30]
mov byte [rsp + 0x31], cl
mov r8d, 2
mov ecx, dword [r13 + 0x20]
call fcn.00408f90
mov dword [r13 + 0x20], eax
mov r14d, r15d
mov dword [r13 + 8], 0x3f38
mov ebx, r15d
test dword [r13 + 0x18], 0x400
je 0x409e50
cmp ebx, 0x10
jae 0x409e00
nop dword [rax]
test esi, esi
je 0x40a2bb
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, 0x10
jb 0x409de0
mov rax, qword [r13 + 0x28]
mov dword [r13 + 0x50], r14d
test rax, rax
je 0x409e11
mov dword [rax + 0x18], r14d
test dword [r13 + 0x18], 0x200
je 0x409e48
test byte [r13 + 0x10], 4
je 0x409e48
mov byte [rsp + 0x30], r14b
lea rdx, [rsp + 0x30]
shr r14d, 8
mov r8d, 2
mov byte [rsp + 0x31], r14b
mov ecx, dword [r13 + 0x20]
call fcn.00408f90
mov dword [r13 + 0x20], eax
mov r14d, r15d
mov ebx, r15d
jmp 0x409e5d
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x409e5d
mov qword [rax + 0x10], r15
mov dword [r13 + 8], 0x3f39
test dword [r13 + 0x18], 0x400
je 0x409f02
mov ecx, dword [r13 + 0x50]
mov edi, esi
cmp ecx, esi
cmovbe edi, ecx
test edi, edi
je 0x409efa
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x409ec7
mov r10, qword [rax + 0x10]
test r10, r10
je 0x409ec7
mov r9d, dword [rax + 0x18]
mov r8d, dword [rax + 0x1c]
sub r9d, ecx
cmp r9d, r8d
jae 0x409ec7
mov edx, r8d
lea ecx, [rdi + r9]
sub edx, r9d
mov eax, edi
cmp ecx, r8d
mov ecx, r9d
cmova eax, edx
add rcx, r10
mov r8d, eax
mov rdx, rbp
call fcn.0040ca50
test dword [r13 + 0x18], 0x200
je 0x409eeb
test byte [r13 + 0x10], 4
je 0x409eeb
mov ecx, dword [r13 + 0x20]
mov r8d, edi
mov rdx, rbp
call fcn.00408f90
mov dword [r13 + 0x20], eax
mov eax, edi
sub esi, edi
add rbp, rax
sub dword [r13 + 0x50], edi
mov ecx, dword [r13 + 0x50]
test ecx, ecx
jne 0x40a2bb
mov dword [r13 + 0x50], r15d
mov dword [r13 + 8], 0x3f3a
test dword [r13 + 0x18], 0x800
je 0x409f9e
test esi, esi
je 0x40a2bb
mov edi, r15d
nop word [rax + rax]
mov eax, edi
inc edi
movzx r15d, byte [rax + rbp]
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x409f5c
mov rdx, qword [rax + 0x20]
test rdx, rdx
je 0x409f5c
mov ecx, dword [r13 + 0x50]
cmp ecx, dword [rax + 0x28]
jae 0x409f5c
mov byte [rcx + rdx], r15b
inc dword [r13 + 0x50]
test r15b, r15b
je 0x409f65
cmp edi, esi
jb 0x409f30
test dword [r13 + 0x18], 0x200
je 0x409f89
test byte [r13 + 0x10], 4
je 0x409f89
mov ecx, dword [r13 + 0x20]
mov r8d, edi
mov rdx, rbp
call fcn.00408f90
mov dword [r13 + 0x20], eax
mov eax, edi
sub esi, edi
add rbp, rax
test r15b, r15b
jne 0x40a2bb
xor r15d, r15d
jmp 0x409fab
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x409fab
mov qword [rax + 0x20], r15
mov dword [r13 + 0x50], r15d
mov dword [r13 + 8], 0x3f3b
test dword [r13 + 0x18], 0x1000
je 0x40a03e
test esi, esi
je 0x40a2bb
mov edi, r15d
nop dword [rax]
mov eax, edi
inc edi
movzx r15d, byte [rax + rbp]
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x409ffc
mov rdx, qword [rax + 0x30]
test rdx, rdx
je 0x409ffc
mov ecx, dword [r13 + 0x50]
cmp ecx, dword [rax + 0x38]
jae 0x409ffc
mov byte [rcx + rdx], r15b
inc dword [r13 + 0x50]
test r15b, r15b
je 0x40a005
cmp edi, esi
jb 0x409fd0
test dword [r13 + 0x18], 0x200
je 0x40a029
test byte [r13 + 0x10], 4
je 0x40a029
mov ecx, dword [r13 + 0x20]
mov r8d, edi
mov rdx, rbp
call fcn.00408f90
mov dword [r13 + 0x20], eax
mov eax, edi
sub esi, edi
add rbp, rax
test r15b, r15b
jne 0x40a2bb
xor r15d, r15d
jmp 0x40a04b
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x40a04b
mov qword [rax + 0x30], r15
mov r9, qword [rsp + 0x40]
mov r10d, dword [rsp + 0xb8]
mov dword [r13 + 8], 0x3f3c
mov edx, dword [r13 + 0x18]
bt edx, 9
jae 0x40a0bd
cmp ebx, 0x10
jae 0x40a090
nop
test esi, esi
je 0x40a2bb
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, 0x10
jb 0x40a070
test byte [r13 + 0x10], 4
je 0x40a0b7
movzx eax, word [r13 + 0x20]
cmp r14d, eax
je 0x40a0b7
lea rax, [0x00431058]
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x40a104
mov r14d, r15d
mov ebx, r15d
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x40a0da
sar edx, 9
and edx, 1
mov dword [rax + 0x3c], edx
mov rax, qword [r13 + 0x28]
mov dword [rax + 0x40], 1
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.00408f90
mov dword [r13 + 0x20], eax
mov dword [r12 + 0x4c], eax
mov dword [r13 + 8], 0x3f3f
mov r9, qword [rsp + 0x40]
mov r10d, dword [rsp + 0xb8]
mov eax, dword [r13 + 8]
sub eax, 0x3f34
cmp eax, 0x1f
ja case.0x409a53.16211
mov r8d, dword [rsp + 0xa0]
xor r15d, r15d
mov edi, dword [rsp + 0xa8]
jmp 0x409a31
cmp ebx, 0x20
jae 0x40a152
test esi, esi
je 0x40a2bb
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, 0x20
jb 0x40a132
mov ecx, r14d
mov eax, r14d
shl eax, 0x10
and ecx, 0xff00
add ecx, eax
mov ebx, r15d
mov eax, r14d
shl ecx, 8
shr eax, 8
and eax, 0xff00
shr r14d, 0x18
add eax, ecx
add eax, r14d
mov r14d, r15d
mov dword [r13 + 0x20], eax
mov dword [r12 + 0x4c], eax
mov dword [r13 + 8], 0x3f3e
cmp dword [r13 + 0x14], 0
je 0x40b004
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.00408ca0
mov r9, qword [rsp + 0x40]
lea r11, [r13 + 0x70]
mov r10d, dword [rsp + 0xb8]
lea rdx, [r13 + 0x74]
mov dword [r13 + 0x20], eax
mov dword [r12 + 0x4c], eax
mov dword [r13 + 8], 0x3f3f
lea eax, [rdi - 5]
cmp eax, 1
jbe 0x40a2bb
cmp dword [r13 + 0xc], 0
je 0x40a1f8
mov ecx, ebx
mov dword [r13 + 8], 0x3f4e
and ecx, 7
shr r14d, cl
sub ebx, ecx
jmp 0x40a104
cmp ebx, 3
jae 0x40a220
nop dword [rax]
test esi, esi
je 0x40a2bb
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, 3
jb 0x40a200
mov eax, r14d
shr r14d, 1
and eax, 1
mov dword [r13 + 0xc], eax
mov eax, r14d
and eax, 3
je 0x40a358
sub eax, 1
je 0x40a280
sub eax, 1
je 0x40a26c
cmp eax, 1
jne 0x40a360
lea rax, [0x00431070]
shr r14d, 2
mov qword [r12 + 0x20], rax
add ebx, 0xfffffffd
mov dword [r13 + 8], 0x3f51
jmp 0x40a104
shr r14d, 2
add ebx, 0xfffffffd
mov dword [r13 + 8], 0x3f44
jmp 0x40a104
mov dword [r11], 9
lea rax, [0x00430740]
mov qword [r13 + 0x60], rax
lea rax, [0x00430f40]
mov qword [r13 + 0x68], rax
mov dword [rdx], 5
mov dword [r13 + 8], 0x3f47
cmp edi, 6
jne 0x40a360
shr r14d, 2
add ebx, 0xfffffffd
mov edi, dword [rsp + 0xa0]
mov r15d, dword [rsp + 0xb0]
mov ecx, dword [rsp + 0xa8]
mov rax, qword [rsp + 0x40]
mov qword [r12 + 0x10], rax
mov eax, dword [rsp + 0xb8]
mov dword [r12 + 0x18], eax
mov qword [r12], rbp
mov dword [r12 + 8], esi
cmp dword [r13 + 0x34], 0
mov dword [r13 + 0x48], r14d
mov dword [r13 + 0x4c], ebx
jne 0x40a329
cmp edi, dword [r12 + 0x18]
je 0x40b072
mov eax, dword [r13 + 8]
cmp eax, 0x3f51
jge 0x40b072
cmp eax, 0x3f4e
jl 0x40a329
cmp ecx, 4
je 0x40b072
mov rdx, qword [r12 + 0x10]
mov r8d, edi
sub r8d, dword [r12 + 0x18]
mov rcx, r12
call fcn.0040b510
test eax, eax
je 0x40b072
mov dword [r13 + 8], 0x3f52
mov eax, 0xfffffffc
jmp 0x40b149
mov dword [r13 + 8], 0x3f41
shr r14d, 2
add ebx, 0xfffffffd
jmp 0x40a104
mov ecx, ebx
and ecx, 7
shr r14d, cl
sub ebx, ecx
cmp ebx, 0x20
jae 0x40a3a0
nop dword [rax + rax]
test esi, esi
je 0x40a2bb
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, 0x20
jb 0x40a380
mov eax, r14d
movzx ecx, r14w
not eax
shr eax, 0x10
cmp ecx, eax
je 0x40a3c9
lea rax, [0x00431088]
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x40a104
mov dword [r13 + 0x50], ecx
mov r14d, r15d
mov dword [r13 + 8], 0x3f42
mov ebx, r15d
cmp edi, 6
je 0x40a2bb
mov dword [r13 + 8], 0x3f43
mov ecx, dword [r13 + 0x50]
test ecx, ecx
je 0x40a44e
cmp ecx, esi
mov eax, esi
mov r15d, r10d
cmovbe eax, ecx
cmp eax, r10d
cmovbe r15d, eax
test r15d, r15d
je 0x40a2bb
mov r8d, r15d
mov rdx, rbp
mov rcx, r9
mov edi, r15d
call fcn.0040ca50
mov r10d, dword [rsp + 0xb8]
sub esi, r15d
mov r9, qword [rsp + 0x40]
sub r10d, r15d
add r9, rdi
mov dword [rsp + 0xb8], r10d
add rbp, rdi
mov qword [rsp + 0x40], r9
sub dword [r13 + 0x50], r15d
jmp 0x40a104
mov dword [r13 + 8], 0x3f3f
jmp 0x40a104
cmp ebx, 0xe
jae 0x40a480
test esi, esi
je 0x40a2bb
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, 0xe
jb 0x40a460
mov ecx, r14d
add ebx, 0xfffffff2
shr r14d, 5
and ecx, 0x1f
mov edx, r14d
add ecx, 0x101
shr r14d, 5
and edx, 0x1f
mov eax, r14d
mov dword [r13 + 0x7c], ecx
and eax, 0xf
shr r14d, 4
add eax, 4
inc edx
mov dword [r13 + 0x80], edx
mov dword [r13 + 0x78], eax
cmp ecx, 0x11e
ja 0x40a5e1
cmp edx, 0x1e
ja 0x40a5e1
mov dword [r13 + 0x84], r15d
mov dword [r13 + 8], 0x3f45
mov eax, dword [r13 + 0x84]
lea rdx, [0x00400000]
cmp eax, dword [r13 + 0x78]
jae 0x40a553
cmp ebx, 3
jae 0x40a518
test esi, esi
je 0x40a2bb
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, 3
jb 0x40a4f8
mov eax, dword [r13 + 0x84]
movzx ecx, r14w
and cx, 7
shr r14d, 3
add ebx, 0xfffffffd
movzx eax, word [rdx + rax*2 + 0x30fc0]
mov word [r13 + rax*2 + 0x90], cx
inc dword [r13 + 0x84]
mov eax, dword [r13 + 0x84]
cmp eax, dword [r13 + 0x78]
jb 0x40a4f3
cmp eax, 0x13
jae 0x40a57e
movzx eax, word [rdx + rax*2 + 0x30fc0]
mov word [r13 + rax*2 + 0x90], r15w
mov eax, dword [r13 + 0x84]
inc eax
mov dword [r13 + 0x84], eax
cmp eax, 0x13
jb 0x40a558
lea rax, [r13 + 0x550]
mov dword [r11], 7
lea r9, [r13 + 0x88]
mov qword [r13 + 0x60], rax
xor ecx, ecx
mov qword [r9], rax
lea rax, [r13 + 0x310]
mov qword [rsp + 0x28], rax
lea rdx, [r13 + 0x90]
mov qword [rsp + 0x20], r11
lea r8d, [rcx + 0x13]
call fcn.0040b620
mov dword [rsp + 0xb0], eax
test eax, eax
je 0x40a5fa
lea rax, [0x004310d0]
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x40a0f7
lea rax, [0x004310a8]
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x40a104
mov dword [r13 + 0x84], r15d
lea r11, [r13 + 0x70]
mov dword [r13 + 8], 0x3f46
mov eax, dword [r13 + 0x80]
add eax, dword [r13 + 0x7c]
cmp dword [r13 + 0x84], eax
jae 0x40a85d
nop word [rax + rax]
mov ecx, dword [r11]
mov r9d, 1
mov r10, qword [r13 + 0x60]
shl r9d, cl
dec r9d
mov eax, r14d
mov ecx, r9d
and rcx, rax
mov eax, dword [r10 + rcx*4]
mov r8d, eax
shr r8d, 8
mov edx, eax
movzx ecx, r8b
shr edx, 0x10
mov dword [rsp + 0x34], eax
cmp ecx, ebx
jbe 0x40a6ab
test esi, esi
je 0x40a2bb
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
mov eax, r9d
add ebx, 8
mov ecx, r14d
and rcx, rax
mov eax, dword [r10 + rcx*4]
mov r8d, eax
shr r8d, 8
mov ecx, eax
movzx edx, r8b
shr ecx, 0x10
mov dword [rsp + 0x34], eax
cmp edx, ebx
ja 0x40a668
movzx edx, cx
cmp dx, 0x10
jae 0x40a6e7
mov ecx, r8d
shr r14d, cl
mov ecx, eax
shr ecx, 8
movzx ecx, cl
sub ebx, ecx
shr eax, 0x10
mov ecx, dword [r13 + 0x84]
mov word [r13 + rcx*2 + 0x90], ax
inc dword [r13 + 0x84]
mov r8d, dword [r13 + 0x84]
jmp 0x40a833
jne 0x40a757
shr eax, 8
movzx edx, r8b
add edx, 2
movzx r9d, al
cmp ebx, edx
jae 0x40a71f
nop dword [rax + rax]
test esi, esi
je 0x40a2bb
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, edx
jb 0x40a700
mov eax, dword [r13 + 0x84]
mov ecx, r9d
shr r14d, cl
sub ebx, r9d
test eax, eax
je 0x40a849
mov edx, r14d
add ebx, 0xfffffffe
and edx, 3
shr r14d, 2
add edx, 3
dec eax
movzx r9d, word [r13 + rax*2 + 0x90]
jmp 0x40a7f6
movzx r9d, byte [rsp + 0x35]
cmp dx, 0x11
movzx edx, r8b
jne 0x40a7af
add edx, 3
cmp ebx, edx
jae 0x40a78f
nop
test esi, esi
je 0x40a2bb
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, edx
jb 0x40a770
mov ecx, r9d
mov eax, 0xfffffffd
shr r14d, cl
mov edx, r14d
shr r14d, 3
and edx, 7
add edx, 3
sub eax, r9d
mov r9d, r15d
jmp 0x40a7f4
add edx, 7
cmp ebx, edx
jae 0x40a7d5
test esi, esi
je 0x40a2bb
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, edx
jb 0x40a7b6
mov ecx, r9d
mov eax, 0xfffffff9
shr r14d, cl
mov edx, r14d
shr r14d, 7
and edx, 0x7f
add edx, 0xb
sub eax, r9d
movzx r9d, r15w
add ebx, eax
mov r8d, dword [r13 + 0x84]
mov eax, dword [r13 + 0x80]
add eax, dword [r13 + 0x7c]
lea ecx, [r8 + rdx]
cmp ecx, eax
ja 0x40a849
mov eax, r8d
mov word [r13 + rax*2 + 0x90], r9w
mov r8d, dword [r13 + 0x84]
lea r8d, [r8 + 1]
mov dword [r13 + 0x84], r8d
add edx, 0xffffffff
jne 0x40a810
mov eax, dword [r13 + 0x80]
add eax, dword [r13 + 0x7c]
cmp r8d, eax
jb 0x40a630
jmp 0x40a85d
lea rax, [0x004310f0]
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
cmp dword [r13 + 8], 0x3f51
je 0x40a0f7
cmp word [r13 + 0x290], 0
jne 0x40a88f
lea rax, [0x00431110]
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x40a0f7
mov r8d, dword [r13 + 0x7c]
lea rax, [r13 + 0x550]
lea r15, [r13 + 0x310]
mov qword [r13 + 0x88], rax
mov qword [rsp + 0x28], r15
lea rdx, [r13 + 0x90]
lea r9, [r13 + 0x88]
mov qword [rsp + 0x20], r11
mov ecx, 1
mov qword [r13 + 0x60], rax
mov dword [r11], 9
call fcn.0040b620
mov dword [rsp + 0xb0], eax
test eax, eax
je 0x40a8f9
lea rax, [0x00431138]
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x40a0f7
mov rax, qword [r13 + 0x88]
lea rcx, [r13 + 0x74]
mov r8d, dword [r13 + 0x80]
lea r9, [r13 + 0x88]
mov qword [r13 + 0x68], rax
mov eax, dword [r13 + 0x7c]
mov dword [rcx], 6
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], rcx
mov ecx, 2
lea rdx, [rax*2 + 0x90]
add rdx, r13
call fcn.0040b620
mov dword [rsp + 0xb0], eax
mov r15d, eax
test eax, eax
je 0x40a966
lea rax, [0x00431158]
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x40a0f7
mov ecx, dword [rsp + 0xa8]
mov dword [r13 + 8], 0x3f47
cmp ecx, 6
je 0x40b066
mov r9, qword [rsp + 0x40]
lea r11, [r13 + 0x70]
mov r8d, dword [rsp + 0xa0]
xor r15d, r15d
mov r10d, dword [rsp + 0xb8]
mov dword [r13 + 8], 0x3f48
cmp esi, 6
jb 0x40aa1c
cmp r10d, 0x102
jb 0x40aa1c
mov qword [r12 + 0x10], r9
mov edx, r8d
mov dword [r12 + 0x18], r10d
mov rcx, r12
mov qword [r12], rbp
mov dword [r12 + 8], esi
mov dword [r13 + 0x48], r14d
mov dword [r13 + 0x4c], ebx
call fcn.00409450
cmp dword [r13 + 8], 0x3f3f
mov r9, qword [r12 + 0x10]
mov r10d, dword [r12 + 0x18]
mov rbp, qword [r12]
mov esi, dword [r12 + 8]
mov r14d, dword [r13 + 0x48]
mov ebx, dword [r13 + 0x4c]
mov qword [rsp + 0x40], r9
mov dword [rsp + 0xb8], r10d
jne 0x40a104
mov dword [r13 + 0x1be4], 0xffffffff
jmp 0x40a104
mov ecx, dword [r11]
mov edx, 1
mov r9, qword [r13 + 0x60]
shl edx, cl
dec edx
mov eax, r14d
mov ecx, edx
and rcx, rax
mov dword [r13 + 0x1be4], r15d
mov eax, dword [r9 + rcx*4]
mov ecx, eax
shr ecx, 8
movzx ecx, cl
cmp ecx, ebx
jbe 0x40aa83
nop dword [rax + rax]
test esi, esi
je 0x40a2bb
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
mov eax, edx
add ebx, 8
mov ecx, r14d
and rcx, rax
mov eax, dword [r9 + rcx*4]
mov ecx, eax
shr ecx, 8
movzx ecx, cl
cmp ecx, ebx
ja 0x40aa50
test al, al
je 0x40ab21
test al, 0xf0
jne 0x40ab21
mov ecx, eax
mov r10d, eax
shr ecx, 8
mov r11d, 1
movzx r8d, cl
movzx ecx, al
add ecx, r8d
shr r10d, 0x10
shl r11d, cl
mov ecx, r8d
lea eax, [r11 - 1]
and eax, r14d
shr eax, cl
add eax, r10d
mov eax, dword [r9 + rax*4]
mov ecx, eax
shr ecx, 8
movzx edx, cl
add edx, r8d
cmp edx, ebx
jbe 0x40ab11
test esi, esi
je 0x40a2bb
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
mov ecx, r8d
lea eax, [r11 - 1]
inc rbp
and eax, r14d
add ebx, 8
shr eax, cl
add eax, r10d
mov eax, dword [r9 + rax*4]
mov ecx, eax
shr ecx, 8
movzx edx, cl
add edx, r8d
cmp edx, ebx
ja 0x40aad4
mov ecx, r8d
mov dword [r13 + 0x1be4], r8d
shr r14d, cl
sub ebx, r8d
mov ecx, eax
shr ecx, 8
movzx ecx, cl
add dword [r13 + 0x1be4], ecx
sub ebx, ecx
shr r14d, cl
mov ecx, eax
shr ecx, 0x10
mov dword [r13 + 0x50], ecx
test al, al
jne 0x40ab4f
mov dword [r13 + 8], 0x3f4d
jmp 0x40a0f7
test al, 0x20
je 0x40ab63
mov dword [r13 + 0x1be4], 0xffffffff
jmp 0x40a0ef
test al, 0x40
je 0x40ab80
lea rax, [0x00430718]
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x40a0f7
movzx ecx, al
and ecx, 0xf
mov dword [r13 + 8], 0x3f49
mov dword [r13 + 0x58], ecx
mov edx, dword [r13 + 0x58]
test edx, edx
je 0x40abdd
cmp ebx, edx
jae 0x40abbf
nop
test esi, esi
je 0x40a2bb
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, edx
jb 0x40aba0
mov ecx, edx
mov eax, 1
shl eax, cl
sub ebx, edx
dec eax
and eax, r14d
shr r14d, cl
add dword [r13 + 0x50], eax
add dword [r13 + 0x1be4], edx
mov eax, dword [r13 + 0x50]
lea rdx, [r13 + 0x74]
mov dword [r13 + 0x1be8], eax
mov dword [r13 + 8], 0x3f4a
mov ecx, dword [rdx]
mov edx, 1
mov r9, qword [r13 + 0x68]
shl edx, cl
dec edx
mov eax, r14d
mov ecx, edx
and rcx, rax
mov eax, dword [r9 + rcx*4]
mov ecx, eax
shr ecx, 8
movzx ecx, cl
cmp ecx, ebx
jbe 0x40ac53
nop dword [rax + rax]
test esi, esi
je 0x40a2bb
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
mov eax, edx
add ebx, 8
mov ecx, r14d
and rcx, rax
mov eax, dword [r9 + rcx*4]
mov ecx, eax
shr ecx, 8
movzx ecx, cl
cmp ecx, ebx
ja 0x40ac20
test al, 0xf0
jne 0x40aced
mov ecx, eax
mov r10d, eax
shr ecx, 8
mov r11d, 1
movzx r8d, cl
movzx ecx, al
add ecx, r8d
shr r10d, 0x10
shl r11d, cl
mov ecx, r8d
lea eax, [r11 - 1]
and eax, r14d
shr eax, cl
add eax, r10d
mov eax, dword [r9 + rax*4]
mov ecx, eax
shr ecx, 8
movzx edx, cl
add edx, r8d
cmp edx, ebx
jbe 0x40acdd
nop dword [rax]
test esi, esi
je 0x40a2bb
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
mov ecx, r8d
lea eax, [r11 - 1]
inc rbp
and eax, r14d
add ebx, 8
shr eax, cl
add eax, r10d
mov eax, dword [r9 + rax*4]
mov ecx, eax
shr ecx, 8
movzx edx, cl
add edx, r8d
cmp edx, ebx
ja 0x40aca0
mov ecx, r8d
sub ebx, r8d
shr r14d, cl
add dword [r13 + 0x1be4], r8d
mov r9, qword [rsp + 0x40]
mov ecx, eax
mov r10d, dword [rsp + 0xb8]
shr ecx, 8
movzx ecx, cl
add dword [r13 + 0x1be4], ecx
sub ebx, ecx
shr r14d, cl
test al, 0x40
je 0x40ad2b
lea rax, [0x00430700]
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x40a104
mov r8d, dword [rsp + 0xa0]
mov ecx, eax
shr ecx, 0x10
mov dword [r13 + 0x54], ecx
movzx ecx, al
and ecx, 0xf
mov dword [r13 + 8], 0x3f4b
mov dword [r13 + 0x58], ecx
mov edx, dword [r13 + 0x58]
test edx, edx
je 0x40ad9d
cmp ebx, edx
jae 0x40ad7f
nop word [rax + rax]
test esi, esi
je 0x40a2bb
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, edx
jb 0x40ad60
mov ecx, edx
mov eax, 1
shl eax, cl
sub ebx, edx
dec eax
and eax, r14d
shr r14d, cl
add dword [r13 + 0x54], eax
add dword [r13 + 0x1be4], edx
mov dword [r13 + 8], 0x3f4c
test r10d, r10d
je 0x40a2bb
mov ecx, dword [r13 + 0x54]
mov eax, r8d
sub eax, r10d
cmp ecx, eax
jbe 0x40ae13
sub ecx, eax
cmp ecx, dword [r13 + 0x38]
jbe 0x40ade7
cmp dword [r13 + 0x1be0], 0
je 0x40ade7
lea rax, [0x004306e0]
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x40a104
mov eax, dword [r13 + 0x3c]
mov r8, qword [r13 + 0x40]
cmp ecx, eax
jbe 0x40adfd
mov edx, dword [r13 + 0x34]
sub ecx, eax
sub edx, ecx
jmp 0x40ae01
sub eax, ecx
mov edx, eax
mov eax, dword [r13 + 0x50]
add rdx, r8
cmp ecx, eax
mov r8d, eax
cmovbe r8d, ecx
jmp 0x40ae20
mov eax, dword [r13 + 0x50]
mov rdx, r9
sub rdx, rcx
mov r8d, eax
cmp r8d, r10d
mov ecx, r10d
cmovbe ecx, r8d
sub r10d, ecx
sub eax, ecx
mov dword [rsp + 0xb8], r10d
sub rdx, r9
mov dword [r13 + 0x50], eax
nop
movzx eax, byte [rdx + r9]
mov byte [r9], al
inc r9
add ecx, 0xffffffff
jne 0x40ae40
mov qword [rsp + 0x40], r9
cmp dword [r13 + 0x50], ecx
jne 0x40a104
mov dword [r13 + 8], 0x3f48
jmp 0x40a104
test r10d, r10d
je 0x40a2bb
movzx eax, byte [r13 + 0x50]
mov byte [r9], al
inc r9
dec r10d
mov qword [rsp + 0x40], r9
mov dword [rsp + 0xb8], r10d
mov dword [r13 + 8], 0x3f48
jmp 0x40a104
cmp dword [r13 + 0x10], 0
je 0x40af8f
cmp ebx, 0x20
jae 0x40aed0
nop dword [rax]
test esi, esi
je 0x40a2bb
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, 0x20
jb 0x40aeb0
sub r8d, r10d
add dword [r12 + 0x1c], r8d
add dword [r13 + 0x24], r8d
test byte [r13 + 0x10], 4
je 0x40af1e
test r8d, r8d
je 0x40af1e
mov ecx, dword [r13 + 0x20]
mov rdx, r9
mov eax, r8d
sub rdx, rax
cmp dword [r13 + 0x18], 0
je 0x40af03
call fcn.00408f90
jmp 0x40af08
call fcn.00408ca0
mov r9, qword [rsp + 0x40]
mov r10d, dword [rsp + 0xb8]
mov dword [r13 + 0x20], eax
mov dword [r12 + 0x4c], eax
test byte [r13 + 0x10], 4
mov edi, r10d
mov dword [rsp + 0xa0], r10d
je 0x40af7f
cmp dword [r13 + 0x18], 0
mov ecx, r14d
jne 0x40af60
and ecx, 0xff00
mov eax, r14d
shl eax, 0x10
add ecx, eax
mov eax, r14d
shr eax, 8
and eax, 0xff00
shl ecx, 8
add ecx, eax
mov eax, r14d
shr eax, 0x18
add ecx, eax
cmp ecx, dword [r13 + 0x20]
je 0x40af7f
lea rax, [0x00431170]
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x40a104
mov r14d, r15d
mov dword [r13 + 8], 0x3f4f
mov ebx, r15d
jmp 0x40afa7
mov edi, dword [rsp + 0xa0]
mov dword [r13 + 8], 0x3f4f
jmp 0x40afa7
mov edi, dword [rsp + 0xa0]
mov edx, dword [r13 + 0x10]
test edx, edx
je 0x40b02f
cmp dword [r13 + 0x18], 0
je 0x40b02f
cmp ebx, 0x20
jae 0x40afe0
nop
test esi, esi
je 0x40a2c2
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, 0x20
jb 0x40afc0
test dl, 4
je 0x40b029
cmp r14d, dword [r13 + 0x24]
je 0x40b029
lea rax, [0x00431188]
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x40a104
mov qword [r12 + 0x10], r9
mov eax, 2
mov dword [r12 + 0x18], r10d
mov qword [r12], rbp
mov dword [r12 + 8], esi
mov dword [r13 + 0x48], r14d
mov dword [r13 + 0x4c], ebx
jmp 0x40b149
mov r14d, r15d
mov ebx, r15d
mov dword [r13 + 8], 0x3f50
mov r15d, 1
jmp 0x40a2ca
mov edi, dword [rsp + 0xa0]
mov r15d, 1
jmp 0x40a2ca
mov edi, dword [rsp + 0xa0]
mov r15d, 0xfffffffd
jmp 0x40a2ca
mov edi, dword [rsp + 0xa0]
jmp 0x40a2d1
sub edi, dword [r12 + 0x18]
mov r10d, dword [rsp + 0x38]
sub r10d, dword [r12 + 8]
add dword [r12 + 0xc], r10d
add dword [r12 + 0x1c], edi
add dword [r13 + 0x24], edi
test byte [r13 + 0x10], 4
mov dword [rsp + 0x38], r10d
je 0x40b0d1
test edi, edi
je 0x40b0d1
mov rdx, qword [r12 + 0x10]
mov r8d, edi
mov ecx, dword [r13 + 0x20]
mov eax, edi
sub rdx, rax
cmp dword [r13 + 0x18], 0
je 0x40b0be
call fcn.00408f90
jmp 0x40b0c3
call fcn.00408ca0
mov r10d, dword [rsp + 0x38]
mov dword [r13 + 0x20], eax
mov dword [r12 + 0x4c], eax
mov edx, dword [r13 + 8]
cmp edx, 0x3f47
je 0x40b0ed
cmp edx, 0x3f42
je 0x40b0ed
xor r9d, r9d
mov r8d, r9d
jmp 0x40b0f6
mov r8d, 0x100
xor r9d, r9d
mov eax, dword [r13 + 0xc]
neg eax
mov eax, 0x80
sbb ecx, ecx
and ecx, 0x40
cmp edx, 0x3f3f
cmove r9d, eax
lea eax, [r8 + rcx]
add r9d, eax
add r9d, dword [r13 + 0x4c]
mov dword [r12 + 0x48], r9d
test r10d, r10d
jne 0x40b129
test edi, edi
je 0x40b133
cmp dword [rsp + 0xa8], 4
jne 0x40b13f
test r15d, r15d
mov eax, 0xfffffffb
cmove r15d, eax
mov eax, r15d
jmp 0x40b149
mov eax, 0xfffffffe
add rsp, 0x58
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret