Function at 0x4099f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, eax
push edi
push esi
mov esi, edx
push ebx
sub esp, 0xac
mov edx, dword [eax]
mov dword [esp + 0x30], ecx
test edx, edx
mov dword [esp + 0x74], 0
sete dl
test esi, esi
mov dword [esp + 0x78], 0
sete al
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
or dl, al
jne 0x40b3d8
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 0
call sub.msvcrt.dll_localeconv
mov eax, dword [eax]
mov dword [esp + 0x50], eax
call sub.msvcrt.dll_localeconv
mov ecx, dword [eax + 4]
mov dword [esp + 0x2c], ecx
test ecx, ecx
je 0x409a79
cmp byte [ecx], 0
mov eax, 0
cmovne eax, ecx
mov dword [esp + 0x2c], eax
movzx eax, byte [esi]
test al, al
je 0x40b3b7
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x34], 0
xor edi, edi
mov dword [esp + 0x18], 0
mov ebx, edi
mov dword [esp + 0x38], ecx
mov dword [esp + 0x24], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x4c], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x14], ebp
mov dword [esp + 0x10], esi
test al, al
js 0x409c60
mov eax, dword [esp + 0x10]
lea edi, [eax + 1]
movzx eax, byte [eax]
cmp al, 0x25
je 0x409cd8
movzx esi, al
mov dword [esp], esi
call sub.msvcrt.dll_isspace
test eax, eax
jne 0x409bc0
lea eax, [esp + 0x78]
mov dword [esp + 0x28], eax
mov edx, eax
mov eax, dword [esp + 0x14]
call fcn.00409900
mov ebx, eax
cmp eax, 0xffffffff
je 0x40b258
mov eax, dword [esp + 0x18]
test eax, eax
je 0x409b33
mov dword [esp], ebx
call sub.msvcrt.dll_isspace
test eax, eax
jne 0x409ff8
cmp esi, ebx
je 0x409cc0
mov ebp, dword [esp + 0x14]
test byte [ebp + 0x1004], 1
je 0x40a8f0
mov eax, dword [ebp + 0x1008]
sub dword [esp + 0x78], 1
mov dword [ebp + eax*4 + 4], ebx
add eax, 1
mov dword [ebp + 0x1008], eax
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x409b81
lea esi, [esi]
mov eax, ebx
mov ebx, dword [ebx + 4]
mov dword [esp], eax
call sub.msvcrt.dll_free
test ebx, ebx
jne 0x409b70
mov esi, dword [esp + 0x20]
mov dword [esp + 0x74], 0
test esi, esi
je 0x409ba1
mov eax, dword [esi]
mov dword [esp], eax
call sub.msvcrt.dll_free
mov dword [esi], 0
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call sub.msvcrt.dll_free
mov eax, dword [esp + 0x24]
add esp, 0xac
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 0x10], edi
mov dword [esp + 0x18], 1
mov eax, dword [esp + 0x10]
movzx eax, byte [eax]
test al, al
jne 0x409ad0
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
test ecx, ecx
je 0x409c31
lea esi, [esp + 0x78]
lea esi, [esi]
nop
mov edx, esi
mov eax, ebp
call fcn.00409900
mov dword [esp], eax
mov ebx, eax
call sub.msvcrt.dll_isspace
test eax, eax
jne 0x409bf0
cmp ebx, 0xffffffff
je 0x409c31
test byte [ebp + 0x1004], 1
je 0x40c190
mov eax, dword [ebp + 0x1008]
sub dword [esp + 0x78], 1
mov dword [ebp + eax*4 + 4], ebx
add eax, 1
mov dword [ebp + 0x1008], eax
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x409b81
lea esi, [esi]
mov eax, ebx
mov ebx, dword [ebx + 4]
mov dword [esp], eax
call sub.msvcrt.dll_free
test ebx, ebx
jne 0x409c40
jmp 0x409b81
mov esi, dword [esp + 0x10]
mov dword [esp], esi
call sub.msvcrt.dll_strlen
lea edx, [esp + 0x90]
mov dword [esp], esi
mov dword [esp + 8], edx
mov dword [esp + 4], eax
call fcn.00415e70
test eax, eax
jle 0x409ad8
mov edi, dword [esp + 0x10]
lea ebp, [esp + 0x78]
lea esi, [edi + eax]
mov eax, dword [esp + 0x14]
mov edx, ebp
call fcn.00409900
mov ebx, eax
cmp eax, 0xffffffff
je 0x40a909
movzx eax, byte [edi]
add edi, 1
cmp ebx, eax
jne 0x40a909
cmp edi, esi
jne 0x409c96
jmp 0x409cc8
mov dword [esp + 0x18], 0
mov dword [esp + 0x10], edi
jmp 0x409bcc
mov eax, dword [esp + 0x10]
mov dword [esp + 0x44], 0
movzx edx, byte [eax + 1]
mov eax, edx
sub edx, 0x30
cmp edx, 9
jbe 0x40a5b0
mov ecx, dword [esp + 0x2c]
xor ebp, ebp
jmp 0x409d23
cmp al, 0x27
je 0x409d38
cmp al, 0x49
jne 0x409d70
movzx eax, byte [edi + 1]
cmp al, 0x36
je 0x409d50
or ebp, 4
cmp al, 0x33
je 0x409d60
lea esi, [esi]
nop
add edi, 1
cmp al, 0x2a
jne 0x409d00
movzx eax, byte [edi + 1]
or ebp, 0x80
jmp 0x409d20
mov edx, ebp
movzx eax, byte [edi + 1]
or dh, 1
test ecx, ecx
cmovne ebp, edx
jmp 0x409d20
cmp byte [edi + 2], 0x34
je 0x409dc8
or ebp, 4
jmp 0x409d20
cmp byte [edi + 2], 0x32
jne 0x409d20
movzx eax, byte [edi + 3]
add edi, 2
jmp 0x409d20
movzx edx, al
xor esi, esi
lea ecx, [edx - 0x30]
cmp ecx, 9
ja 0x40b0b6
lea esi, [esi]
lea eax, [esi + esi*4]
add edi, 1
lea esi, [edx + eax*2 - 0x30]
movzx edx, byte [edi]
lea ecx, [edx - 0x30]
mov eax, edx
cmp ecx, 9
jbe 0x409d88
test esi, esi
mov edx, 0xffffffff
cmove esi, edx
test al, al
je 0x40b0c0
sub eax, 0x4c
cmp al, 0x2e
ja case.0x409dbb.1
movzx eax, al
jmp dword [eax*4 + 0x419cf4]
movzx eax, byte [edi + 3]
or ebp, 0xc
add edi, 2
jmp 0x409d20
movzx eax, byte [edi]
mov dword [esp + 0x48], edi
mov byte [esp + 0x28], al
lea esi, [esi]
nop
cmp byte [esp + 0x28], 0
je 0x40bbee
mov eax, dword [esp + 0x48]
add eax, 1
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x40a7b0
movzx ecx, byte [esp + 0x28]
cmp cl, 0x5b
jne 0x40a0a0
mov eax, ebp
mov ecx, ebp
and eax, 0x80
and ecx, 4
mov dword [esp + 0x54], eax
mov dword [esp + 0x18], ecx
jne 0x40ac71
mov edx, dword [esp + 0x54]
test edx, edx
jne 0x409edf
test ebp, 0x600
je 0x40c068
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x40c750
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
add eax, 4
mov dword [esp + 0x38], eax
mov dword [esp + 0x20], ecx
mov eax, dword [esp + 0x20]
test eax, eax
je 0x40c3d5
mov dword [esp], 0x64
call sub.msvcrt.dll_malloc
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x4c], eax
mov dword [ecx], eax
test eax, eax
je 0x40accc
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x409ead
mov edx, dword [ebx]
mov eax, ebx
lea ecx, [edx + 1]
cmp edx, 0x1f
jbe 0x409ec9
mov dword [esp], 0x88
call sub.msvcrt.dll_malloc
mov ecx, 1
xor edx, edx
mov dword [eax], 0
mov dword [eax + 4], ebx
mov dword [esp + 0x74], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x20]
mov dword [eax + edx*4 + 8], ecx
mov dword [esp + 0x40], 0x64
mov ebx, dword [esp + 0x48]
movzx eax, byte [ebx + 1]
lea edx, [ebx + 2]
cmp al, 0x5e
mov eax, 0x7fffffff
cmovne edx, dword [esp + 0x10]
sete byte [esp + 0x44]
test esi, esi
cmovs esi, eax
cmp dword [esp + 0x7c], 0xff
mov dword [esp + 0x10], edx
mov eax, dword [esp + 0x80]
ja 0x409f41
mov dword [esp + 0x7c], 0x100
mov edx, 0x100
test eax, eax
je 0x409f32
mov dword [esp], eax
call sub.msvcrt.dll_free
mov edx, dword [esp + 0x7c]
mov dword [esp], edx
call sub.msvcrt.dll_malloc
mov dword [esp + 0x80], eax
lea edi, [eax + 4]
mov dword [eax], 0
mov dword [eax + 0xfc], 0
and edi, 0xfffffffc
sub eax, edi
lea ecx, [eax + 0x100]
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x10]
lea edx, [ecx + 1]
movzx eax, byte [ecx]
cmp al, 0x5d
je 0x40b820
cmp al, 0x2d
je 0x40b820
mov dword [esp + 0x10], edx
test al, al
je 0x40a9bb
mov edx, dword [esp + 0x10]
jmp 0x409faf
mov ecx, dword [esp + 0x80]
mov byte [ecx + eax], 1
movzx eax, byte [edx - 1]
test al, al
je 0x40a9bb
cmp al, 0x5d
je 0x40b83f
add edx, 1
cmp al, 0x2d
jne 0x409f98
movzx ebx, byte [edx - 1]
cmp bl, 0x5d
je 0x409f98
test bl, bl
je 0x409f98
movzx ecx, byte [edx - 3]
cmp cl, bl
ja 0x409f98
jae 0x40c784
mov ebx, dword [esp + 0x80]
movzx eax, cl
add ecx, 1
mov byte [ebx + eax], 1
movzx eax, byte [edx - 1]
cmp al, cl
ja 0x409fd9
jmp 0x409fa7
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x10], esi
jmp 0x40a020
mov dword [esp], eax
call sub.msvcrt.dll_isspace
test eax, eax
je 0x40a8de
mov edx, ebx
mov eax, ebp
call fcn.00409900
mov esi, eax
cmp eax, 0xffffffff
jne 0x40a010
mov eax, dword [esp + 0x24]
test eax, eax
je 0x40a93e
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x40a059
lea esi, [esi]
mov eax, ebx
mov ebx, dword [ebx + 4]
mov dword [esp], eax
call sub.msvcrt.dll_free
test ebx, ebx
jne 0x40a048
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x74], 0
test ebx, ebx
je 0x409ba1
mov ebx, dword [esp + 0x20]
mov eax, dword [ebx]
mov dword [esp], eax
call sub.msvcrt.dll_free
mov dword [ebx], 0
jmp 0x409ba1
lea eax, [edi + 1]
or ebp, 4
mov dword [esp + 0x48], eax
movzx eax, byte [edi + 1]
mov byte [esp + 0x28], al
jmp 0x409df0
mov eax, ecx
and eax, 0xffffffdf
cmp al, 0x43
je 0x40a0b2
cmp cl, 0x6e
jne 0x40a7b0
movzx eax, byte [esp + 0x28]
cmp al, 0x63
je 0x40a620
cmp al, 0x73
jne 0x40a220
mov eax, ebp
and eax, 4
mov dword [esp + 0x18], eax
jne case.0x40a233.46
mov edi, ebp
and edi, 0x80
jne 0x40a17d
test ebp, 0x600
je 0x40bb24
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x40c289
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
add eax, 4
mov dword [esp + 0x38], eax
mov dword [esp + 0x20], ecx
mov eax, dword [esp + 0x20]
test eax, eax
je 0x40c3d5
mov dword [esp], 0x64
call sub.msvcrt.dll_malloc
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x4c], eax
mov dword [ecx], eax
test eax, eax
je 0x40accc
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x40a14b
mov edx, dword [ebx]
mov eax, ebx
lea ecx, [edx + 1]
cmp edx, 0x1f
jbe 0x40a167
mov dword [esp], 0x88
call sub.msvcrt.dll_malloc
mov ecx, 1
xor edx, edx
mov dword [eax], 0
mov dword [eax + 4], ebx
mov dword [esp + 0x74], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x40], 0x64
mov dword [eax + edx*4 + 8], ecx
lea eax, [esp + 0x78]
mov dword [esp + 0x28], eax
mov edx, eax
mov eax, dword [esp + 0x14]
call fcn.00409900
mov ebx, eax
cmp eax, 0xffffffff
je 0x40c468
mov eax, ebp
mov dword [esp + 0x44], edi
mov edi, dword [esp + 0x4c]
and eax, 0x600
mov dword [esp + 0x4c], ebp
mov ebp, dword [esp + 0x28]
mov dword [esp + 0x48], eax
jmp 0x40a1f1
mov ecx, dword [esp + 0x20]
mov edi, eax
mov edx, dword [ecx]
mov ecx, dword [esp + 0x40]
add ecx, edx
cmp eax, ecx
je 0x40badd
test esi, esi
jle 0x40a1db
sub esi, 1
je 0x40b438
mov eax, dword [esp + 0x14]
mov edx, ebp
call fcn.00409900
mov ebx, eax
cmp eax, 0xffffffff
je 0x40b438
mov dword [esp], ebx
call sub.msvcrt.dll_isspace
test eax, eax
jne 0x40bc68
mov ecx, dword [esp + 0x44]
test ecx, ecx
jne 0x40a1ce
mov edx, dword [esp + 0x48]
mov byte [edi], bl
lea eax, [edi + 1]
test edx, edx
jne 0x40a1b8
mov edi, eax
jmp 0x40a1ce
movzx eax, byte [esp + 0x28]
sub eax, 0x25
cmp al, 0x53
ja case.0x40a233.1
movzx eax, al
jmp dword [eax*4 + 0x419db0]
mov eax, ebp
and eax, 0x80
mov dword [esp + 0x18], eax
jne 0x40a2e4
test ebp, 0x600
je 0x40a9df
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x40bb9a
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
add eax, 4
mov dword [esp + 0x38], eax
mov dword [esp + 0x20], ecx
mov eax, dword [esp + 0x20]
test eax, eax
je 0x40c3d5
mov dword [esp], 0xc8
call sub.msvcrt.dll_malloc
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x3c], eax
mov dword [ecx], eax
test eax, eax
je 0x40accc
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x40a2b2
mov edx, dword [ebx]
mov eax, ebx
lea ecx, [edx + 1]
cmp edx, 0x1f
jbe 0x40a2ce
mov dword [esp], 0x88
call sub.msvcrt.dll_malloc
mov ecx, 1
xor edx, edx
mov dword [eax], 0
mov dword [eax + 4], ebx
mov dword [esp + 0x74], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x40], 0x64
mov dword [eax + edx*4 + 8], ecx
lea eax, [esp + 0x78]
mov dword [esp + 0x28], eax
mov edx, eax
mov eax, dword [esp + 0x14]
call fcn.00409900
mov ebx, eax
cmp eax, 0xffffffff
je 0x40c375
mov eax, ebp
mov dword [esp + 0x48], esi
lea edi, [esp + 0x98]
and eax, 0x600
mov dword [esp + 0x58], ebp
mov ebp, dword [esp + 0x14]
mov dword [esp + 0x98], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0x54], eax
mov dword [esp + 0x44], edi
mov edi, dword [esp + 0x28]
mov dword [esp], ebx
call sub.msvcrt.dll_isspace
test eax, eax
jne 0x40c3a3
mov edx, dword [esp + 0x18]
mov byte [esp + 0x8b], bl
test edx, edx
cmove eax, dword [esp + 0x3c]
mov esi, eax
mov eax, edi
mov edi, ebx
mov ebx, eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], 1
mov dword [esp], esi
mov dword [esp + 0xc], eax
lea eax, [esp + 0x8b]
mov dword [esp + 4], eax
call fcn.00415cd0
cmp eax, 0xfffffffe
jne 0x40b2a8
mov edx, ebx
mov eax, ebp
call fcn.00409900
mov edi, eax
cmp eax, 0xffffffff
je 0x40a8ae
mov byte [esp + 0x8b], al
jmp 0x40a368
cmp esi, 0xffffffff
mov eax, 1
cmove esi, eax
mov eax, ebp
and eax, 0x80
mov dword [esp + 0x18], eax
jne 0x40a46e
test ebp, 0x600
je 0x40a986
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x40bb62
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
add eax, 4
mov dword [esp + 0x38], eax
mov dword [esp + 0x20], ecx
mov eax, dword [esp + 0x20]
test eax, eax
je 0x40c3d5
cmp esi, 0x400
mov eax, 0x400
cmovle eax, esi
mov dword [esp + 0x40], eax
add eax, eax
mov dword [esp], eax
call sub.msvcrt.dll_malloc
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x3c], eax
mov dword [ecx], eax
test eax, eax
je 0x40accc
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x40a444
mov edx, dword [ebx]
mov eax, ebx
lea ecx, [edx + 1]
cmp edx, 0x1f
jbe 0x40a460
mov dword [esp], 0x88
call sub.msvcrt.dll_malloc
mov ecx, 1
xor edx, edx
mov dword [eax], 0
mov dword [eax + 4], ebx
mov dword [esp + 0x74], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x20]
mov dword [eax + edx*4 + 8], ecx
lea eax, [esp + 0x78]
mov dword [esp + 0x28], eax
mov edx, eax
mov eax, dword [esp + 0x14]
call fcn.00409900
mov ebx, eax
cmp eax, 0xffffffff
je 0x40c5ae
lea edi, [esp + 0x98]
mov dword [esp + 0x48], esi
and ebp, 0x600
mov dword [esp + 0x98], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0x54], ebp
mov ebp, dword [esp + 0x14]
mov dword [esp + 0x44], edi
mov edi, dword [esp + 0x28]
mov ecx, dword [esp + 0x18]
mov byte [esp + 0x8b], bl
test ecx, ecx
jne 0x40a550
mov edx, dword [esp + 0x54]
test edx, edx
je 0x40a550
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x40]
mov eax, dword [eax]
lea esi, [ecx + ecx]
lea ecx, [eax + esi]
cmp dword [esp + 0x3c], ecx
jne 0x40a550
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x3c], edi
mov edi, ebx
lea edx, [ecx - 1]
mov dword [esp + 0x28], edx
mov edx, dword [esp + 0x40]
cmp edx, ecx
mov ecx, dword [esp + 0x28]
cmovle ecx, edx
add edx, ecx
mov ecx, dword [esp + 0x40]
mov ebx, edx
add ecx, 1
mov dword [esp + 0x28], ecx
lea ecx, [ebx + ebx]
mov dword [esp], eax
mov dword [esp + 4], ecx
call sub.msvcrt.dll_realloc
test eax, eax
je 0x40cbf2
mov ecx, dword [esp + 0x20]
mov edx, ebx
mov ebx, edi
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x40], edx
mov dword [ecx], eax
add eax, esi
mov dword [esp + 0x3c], eax
lea esi, [esi]
mov eax, dword [esp + 0x18]
mov esi, 0
test eax, eax
mov eax, edi
cmove esi, dword [esp + 0x3c]
mov edi, ebx
mov ebx, eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], 1
mov dword [esp], esi
mov dword [esp + 0xc], eax
lea eax, [esp + 0x8b]
mov dword [esp + 4], eax
call fcn.00415cd0
cmp eax, 0xfffffffe
jne 0x40b350
mov edx, ebx
mov eax, ebp
call fcn.00409900
mov edi, eax
cmp eax, 0xffffffff
je 0x40a856
mov byte [esp + 0x8b], al
jmp 0x40a566
mov esi, dword [esp + 0x10]
mov dword [esp + 0x44], edx
lea ecx, [esi + 2]
movzx esi, byte [esi + 2]
mov edx, esi
movzx edx, dl
lea ebp, [edx - 0x30]
cmp ebp, 9
ja 0x40a601
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x44]
mov ebp, eax
lea esi, [esi]
lea esi, [esi]
add ecx, 1
lea eax, [edi + edi*4]
lea edi, [edx + eax*2 - 0x30]
movzx edx, byte [ecx]
lea esi, [edx - 0x30]
cmp esi, 9
jbe 0x40a5e0
mov dword [esp + 0x44], edi
mov edi, dword [esp + 0x10]
mov esi, edx
mov eax, ebp
mov edx, esi
cmp dl, 0x24
je 0x40b0e6
mov dword [esp + 0x44], 0
jmp 0x409cf6
test ebp, 4
jne case.0x40a233.30
cmp esi, 0xffffffff
mov eax, 1
cmove esi, eax
mov eax, ebp
and eax, 0x80
mov dword [esp + 0x18], eax
jne 0x40aede
mov edi, ebp
and edi, 0x600
je 0x40bc10
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x40c44c
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
add eax, 4
mov dword [esp + 0x38], eax
mov dword [esp + 0x20], ecx
mov ebx, dword [esp + 0x20]
test ebx, ebx
je 0x40c3d5
cmp esi, 0x400
mov eax, 0x400
cmovle eax, esi
mov dword [esp], eax
mov dword [esp + 0x40], eax
call sub.msvcrt.dll_malloc
mov ecx, eax
mov eax, dword [esp + 0x20]
mov dword [eax], ecx
test ecx, ecx
je 0x40c919
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x40a6bd
mov edx, dword [ebx]
mov eax, ebx
lea ebp, [edx + 1]
cmp edx, 0x1f
jbe 0x40a6e1
mov dword [esp], 0x88
mov ebp, 1
mov dword [esp + 0x28], ecx
call sub.msvcrt.dll_malloc
mov ecx, dword [esp + 0x28]
xor edx, edx
mov dword [eax], 0
mov dword [eax + 4], ebx
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x74], eax
mov dword [eax], ebp
mov dword [eax + edx*4 + 8], ebx
lea eax, [esp + 0x78]
mov dword [esp + 0x44], ecx
mov dword [esp + 0x28], eax
mov edx, eax
mov eax, dword [esp + 0x14]
call fcn.00409900
mov ecx, dword [esp + 0x44]
cmp eax, 0xffffffff
mov ebx, eax
je 0x40c76c
mov dword [esp + 0x44], edi
mov ebp, dword [esp + 0x14]
mov eax, ecx
jmp 0x40a750
sub esi, 1
mov byte [eax], bl
lea edi, [eax + 1]
test esi, esi
jle 0x40ba6e
mov edx, dword [esp + 0x28]
mov eax, ebp
call fcn.00409900
mov ebx, eax
cmp eax, 0xffffffff
je 0x40ba6e
mov eax, edi
mov edx, dword [esp + 0x44]
test edx, edx
je 0x40a728
mov ecx, dword [esp + 0x20]
mov edx, dword [ecx]
mov ecx, dword [esp + 0x40]
lea edi, [edx + ecx]
cmp eax, edi
jne 0x40a728
cmp ecx, esi
lea eax, [esi - 1]
mov dword [esp + 0x48], ebp
mov ebp, esi
cmovl eax, ecx
mov esi, ebx
lea edi, [ecx + eax]
add ecx, 1
mov ebx, ecx
mov dword [esp + 4], edi
mov dword [esp], edx
call sub.msvcrt.dll_realloc
test eax, eax
je 0x40cb64
mov ecx, dword [esp + 0x20]
mov ebx, esi
mov esi, ebp
mov ebp, dword [esp + 0x48]
mov dword [ecx], eax
add eax, dword [esp + 0x40]
mov dword [esp + 0x40], edi
jmp 0x40a728
call sub.msvcrt.dll__errno
mov edi, dword [eax]
call sub.msvcrt.dll__errno
mov dword [esp + 0x18], esi
mov esi, ebx
mov ebx, dword [esp + 0x14]
mov dword [eax], 0
jmp 0x40a7e0
mov dword [esp], eax
call sub.msvcrt.dll_isspace
test eax, eax
je 0x40b0f2
cmp esi, 0xffffffff
je 0x40a7f7
lea edx, [esp + 0x78]
mov eax, ebx
call fcn.00409900
mov esi, eax
cmp eax, 0xffffffff
jne 0x40a7d0
mov esi, dword [esp + 0x18]
jmp 0x40a814
mov dword [esp], 0xffffffff
call sub.msvcrt.dll_isspace
test eax, eax
je 0x40b297
call sub.msvcrt.dll__errno
cmp dword [eax], 4
jne 0x40a800
mov edi, dword [esp + 0x24]
test edi, edi
je 0x40a93e
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x40a059
lea esi, [esi]
lea esi, [esi]
mov eax, ebx
mov ebx, dword [ebx + 4]
mov dword [esp], eax
call sub.msvcrt.dll_free
test ebx, ebx
jne 0x40a840
jmp 0x40a059
call sub.msvcrt.dll__errno
mov ebx, dword [esp + 0x74]
mov dword [eax], 0x2a
test ebx, ebx
je 0x40a881
lea esi, [esi]
mov eax, ebx
mov ebx, dword [ebx + 4]
mov dword [esp], eax
call sub.msvcrt.dll_free
test ebx, ebx
jne 0x40a870
mov eax, dword [esp + 0x20]
mov dword [esp + 0x74], 0
test eax, eax
je 0x409ba1
mov esi, dword [esp + 0x20]
mov eax, dword [esi]
mov dword [esp], eax
call sub.msvcrt.dll_free
mov dword [esi], 0
jmp 0x409ba1
call sub.msvcrt.dll__errno
mov ebx, dword [esp + 0x74]
mov dword [eax], 0x2a
test ebx, ebx
je 0x40a059
lea esi, [esi]
mov eax, ebx
mov ebx, dword [ebx + 4]
mov dword [esp], eax
call sub.msvcrt.dll_free
test ebx, ebx
jne 0x40a8c8
jmp 0x40a059
mov ebx, esi
mov esi, dword [esp + 0x10]
jmp 0x409b33
mov eax, dword [ebp]
mov dword [esp], ebx
mov dword [esp + 4], eax
call sub.msvcrt.dll_ungetc
sub dword [esp + 0x78], 1
jmp 0x409b64
mov ebp, dword [esp + 0x14]
test byte [ebp + 0x1004], 1
je 0x40ac58
mov eax, dword [ebp + 0x1008]
sub dword [esp + 0x78], 1
mov dword [ebp + eax*4 + 4], ebx
add eax, 1
mov dword [ebp + 0x1008], eax
mov eax, dword [esp + 0x24]
test eax, eax
jne 0x40b08f
lea edx, [esp + 0x80]
lea eax, [esp + 0x74]
call fcn.00409770
mov dword [esp + 0x24], 0xffffffff
jmp 0x409bb0
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x40a059
lea esi, [esi]
mov eax, ebx
mov ebx, dword [ebx + 4]
mov dword [esp], eax
call sub.msvcrt.dll_free
test ebx, ebx
jne 0x40a970
jmp 0x40a059
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x40bbb6
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
add eax, 4
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], ecx
mov edi, dword [esp + 0x3c]
test edi, edi
jne 0x40a46e
jmp 0x40a9bb
fstp st(0)
jmp 0x40a9bb
fstp st(0)
jmp 0x40a9bb
fstp st(0)
lea eax, [esp + 0x80]
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x74]
mov dword [esp], eax
mov eax, dword [esp + 0x24]
call fcn.00409870
mov dword [esp + 0x24], eax
jmp 0x409bb0
mov edi, dword [esp + 0x44]
test edi, edi
jne 0x40bb7e
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
add eax, 4
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], ecx
mov ebx, dword [esp + 0x3c]
test ebx, ebx
jne 0x40a2e4
jmp 0x40a9bb
lea eax, [edi + 1]
or ebp, 0xc
mov dword [esp + 0x48], eax
movzx eax, byte [edi + 1]
mov byte [esp + 0x28], al
jmp 0x409df0
xor eax, eax
test esi, esi
setg al
sub esi, eax
lea eax, [esp + 0x78]
mov dword [esp + 0x28], eax
mov edx, eax
mov eax, dword [esp + 0x14]
call fcn.00409900
mov dword [esp + 0x60], eax
cmp eax, 0xffffffff
je 0x40c67c
mov eax, dword [esp + 0x60]
sub eax, 0x2b
and eax, 0xfffffffd
jne 0x40bab7
test esi, esi
je 0x40a9bb
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x14]
call fcn.00409900
mov ebx, eax
cmp eax, 0xffffffff
je 0x40a9bb
xor eax, eax
test esi, esi
setg al
sub esi, eax
mov dword [esp], ebx
call sub.msvcrt.dll_tolower
cmp eax, 0x6e
je 0x40c4fa
cmp eax, 0x69
je 0x40c0a0
mov byte [esp + 0x48], 0x65
mov dword [esp + 0x18], 0
test esi, esi
je 0x40aabd
cmp ebx, 0x30
je 0x40c495
mov byte [esp + 0x54], 0
mov byte [esp + 0x5c], 0
mov dword [esp + 0x58], ebp
mov ebp, dword [esp + 0x18]
nop
lea eax, [ebx - 0x30]
cmp eax, 9
jbe 0x40ab53
cmp byte [esp + 0x54], 0
je 0x40b000
mov ecx, dword [esp + 0x80]
movzx eax, byte [esp + 0x48]
cmp byte [ecx + ebp - 1], al
je 0x40b286
test esi, esi
mov eax, 0x7fffffff
cmovg eax, esi
cmp byte [esp + 0x5c], 0
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x50]
movzx eax, byte [eax]
je 0x40b131
test al, al
jne 0x40b06a
test esi, esi
jle 0x40ab72
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x14]
call fcn.00409900
mov ebx, eax
cmp eax, 0xffffffff
je 0x40b49a
mov esi, dword [esp + 0x18]
lea esi, [esi]
lea eax, [ebx - 0x30]
sub esi, 1
cmp eax, 9
ja 0x40aad8
mov ecx, dword [esp + 0x80]
mov eax, ebp
lea edx, [esp + 0x7c]
call fcn.004097f0
mov dword [esp + 0x80], eax
mov byte [eax + ebp], bl
add ebp, 1
test esi, esi
je 0x40b49a
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x14]
call fcn.00409900
mov ebx, eax
cmp eax, 0xffffffff
je 0x40b49a
test esi, esi
jg 0x40ab48
jmp 0x40aad0
movzx eax, byte [edi + 1]
mov byte [esp + 0x28], al
cmp al, 0x6c
je 0x40b421
lea eax, [edi + 1]
or ebp, 4
mov dword [esp + 0x48], eax
jmp 0x409df0
movzx eax, byte [edi + 1]
mov byte [esp + 0x28], al
cmp al, 0x6c
je 0x40b3f0
lea eax, [edi + 1]
or ebp, 0x400
mov dword [esp + 0x48], eax
jmp 0x409df0
movzx ecx, byte [edi + 1]
mov eax, ecx
mov byte [esp + 0x28], cl
and eax, 0xfffffff7
cmp al, 0x53
je 0x40abf6
cmp cl, 0x73
jne case.0x409dbb.1
lea eax, [edi + 1]
or ebp, 0x200
mov dword [esp + 0x48], eax
jmp 0x409df0
movzx eax, byte [edi + 1]
mov byte [esp + 0x28], al
cmp al, 0x68
je 0x40b40a
lea eax, [edi + 1]
or ebp, 2
mov dword [esp + 0x48], eax
jmp 0x409df0
lea eax, [edi + 1]
or ebp, 8
mov dword [esp + 0x48], eax
movzx eax, byte [edi + 1]
mov byte [esp + 0x28], al
jmp 0x409df0
movzx eax, byte [esp + 0x28]
sub eax, 0x58
cmp al, 0x20
ja case.0x40ac51.1
movzx eax, al
jmp dword [eax*4 + 0x419f00]
mov eax, dword [ebp]
mov dword [esp], ebx
mov dword [esp + 4], eax
call sub.msvcrt.dll_ungetc
sub dword [esp + 0x78], 1
jmp 0x40a932
test eax, eax
jne 0x409edf
test ebp, 0x600
je 0x40c15e
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x40c7fc
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
add eax, 4
mov dword [esp + 0x38], eax
mov dword [esp + 0x20], ecx
mov edi, dword [esp + 0x20]
test edi, edi
je 0x40c3d5
mov dword [esp], 0xc8
call sub.msvcrt.dll_malloc
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x3c], eax
mov dword [ecx], eax
test eax, eax
jne 0x409e99
mov eax, ebp
lea edx, [esp + 0x74]
test ah, 4
mov eax, 0xffffffff
cmove eax, dword [esp + 0x24]
mov ebx, eax
lea eax, [esp + 0x80]
mov dword [esp], eax
mov eax, ebx
call fcn.00409870
mov dword [esp + 0x24], eax
jmp 0x409bb0
mov dword [esp + 0x34], 0x10
lea eax, [esp + 0x78]
mov dword [esp + 0x28], eax
mov edx, eax
mov eax, dword [esp + 0x14]
call fcn.00409900
mov ebx, eax
cmp eax, 0xffffffff
je 0x40c468
lea eax, [eax - 0x2b]
mov dword [esp + 0x54], 0
and eax, 0xfffffffd
je 0x40bd2a
test esi, esi
setne dl
cmp ebx, 0x30
jne 0x40b57f
test dl, dl
je 0x40b57f
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x80]
lea ebx, [eax + 1]
mov dword [esp + 0x18], ebx
test esi, esi
jle 0x40bdf5
lea edi, [esp + 0x7c]
mov ebx, eax
sub esi, 1
mov edx, edi
call fcn.004097f0
mov edx, dword [esp + 0x28]
mov dword [esp + 0x80], eax
mov byte [eax + ebx], 0x30
mov eax, dword [esp + 0x14]
call fcn.00409900
mov ebx, eax
test esi, esi
jne 0x40be20
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0x18]
test ecx, ecx
mov dword [esp + 0x54], eax
jne 0x40adb4
mov dword [esp + 0x34], 8
cmp dword [esp + 0x54], 1
jne 0x40add0
mov eax, dword [esp + 0x80]
movzx eax, byte [eax]
sub eax, 0x2b
test al, 0xfd
je 0x40bad2
lea edi, [esp + 0x7c]
cmp ebx, 0xffffffff
je 0x40ae06
mov eax, dword [esp + 0x14]
test byte [eax + 0x1004], 1
je 0x40c84e
mov ecx, dword [esp + 0x14]
sub dword [esp + 0x78], 1
mov eax, dword [ecx + 0x1008]
mov dword [ecx + eax*4 + 4], ebx
add eax, 1
mov dword [ecx + 0x1008], eax
mov esi, dword [esp + 0x54]
mov ecx, dword [esp + 0x80]
mov edx, edi
mov edi, ebp
mov eax, esi
call fcn.004097f0
mov ecx, dword [esp + 0x34]
lea edx, [esp + 0x84]
mov dword [esp + 0x80], eax
mov byte [eax + esi], 0
mov eax, dword [esp + 0x80]
mov esi, ebp
mov dword [esp + 8], ecx
and esi, 0x10
mov dword [esp + 4], edx
mov dword [esp], eax
and edi, 8
je 0x40bac0
test esi, esi
je 0x40bf00
call fcn.0040ce40
mov dword [esp + 0x6c], edx
mov ecx, dword [esp + 0x84]
cmp dword [esp + 0x80], ecx
je 0x40a9bb
mov ecx, ebp
and ecx, 0x80
mov dword [esp + 0x18], ecx
jne 0x40af5b
test esi, esi
je 0x40be9f
test edi, edi
jne 0x40bdc4
test ebp, 4
jne 0x40c2a5
test ebp, 2
jne 0x40c893
and ebp, 1
je 0x40c8b0
cmp dword [esp + 0x44], 0
jne 0x40caa1
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx]
add ecx, 4
mov dword [esp + 0x38], ecx
mov byte [edx], al
add dword [esp + 0x24], 1
jmp 0x409bcc
lea eax, [esp + 0x78]
mov dword [esp + 0x28], eax
mov edx, eax
mov eax, dword [esp + 0x14]
call fcn.00409900
mov ebx, eax
cmp eax, 0xffffffff
je 0x40c76c
mov eax, ebx
mov edi, dword [esp + 0x28]
mov ebx, dword [esp + 0x14]
jmp 0x40af1e
mov edx, edi
mov eax, ebx
call fcn.00409900
cmp eax, 0xffffffff
je 0x40af25
sub esi, 1
test esi, esi
jg 0x40af10
mov dword [esp + 0x18], 0
mov ebx, eax
jmp 0x409bcc
lea eax, [esp + 0x78]
mov dword [esp + 0x28], eax
mov edx, eax
mov eax, dword [esp + 0x14]
call fcn.00409900
mov ebx, eax
cmp eax, 0xffffffff
je 0x40c468
cmp eax, 0x25
jne 0x40c92d
mov dword [esp + 0x18], 0
jmp 0x409bcc
mov eax, ebp
and eax, 0x80
mov dword [esp + 0x18], eax
jne 0x40af5b
mov eax, dword [esp + 0x78]
test ebp, 8
je 0x40be68
mov esi, dword [esp + 0x44]
test esi, esi
jne 0x40c434
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx]
add ecx, 4
mov dword [esp + 0x38], ecx
mov dword [edx], eax
mov dword [edx + 4], 0
jmp 0x409bcc
mov eax, ebp
mov dword [esp + 0x34], 0x10
and eax, 0xfffffff1
or eax, 0x24
mov ebp, eax
jmp case.0x40ac51.1
mov dword [esp + 0x34], 0
or ebp, 0x10
jmp case.0x40ac51.1
mov dword [esp + 0x34], 0xa
or ebp, 0x10
jmp case.0x40ac51.1
mov dword [esp + 0x34], 0xa
jmp case.0x40ac51.1
mov dword [esp + 0x34], 8
jmp case.0x40ac51.1
test byte [esp + 0x58], 0x40
je 0x40b017
mov dword [esp], ebx
call sub.msvcrt.dll_isxdigit
test eax, eax
jne 0x40ab53
test ebp, ebp
je 0x40aaf9
mov dword [esp], ebx
call sub.msvcrt.dll_tolower
cmp byte [esp + 0x48], al
jne 0x40aaf9
mov ecx, dword [esp + 0x80]
mov eax, ebp
lea edx, [esp + 0x7c]
call fcn.004097f0
movzx ecx, byte [esp + 0x48]
mov byte [esp + 0x54], 1
mov dword [esp + 0x80], eax
mov byte [esp + 0x5c], 1
mov byte [eax + ebp], cl
add ebp, 1
jmp 0x40ab72
je 0x40bfc9
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x40c1a9
mov edi, eax
movzx edx, byte [edi]
test dl, dl
jne 0x40c1a9
test esi, esi
cmovg esi, dword [esp + 0x18]
jmp 0x40ab72
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x40a059
lea esi, [esi]
nop
mov eax, ebx
mov ebx, dword [ebx + 4]
mov dword [esp], eax
call sub.msvcrt.dll_free
test ebx, ebx
jne 0x40b0a0
jmp 0x40a059
mov esi, 0xffffffff
jmp 0x409da9
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x40a881
lea esi, [esi]
mov eax, ebx
mov ebx, dword [ebx + 4]
mov dword [esp], eax
call sub.msvcrt.dll_free
test ebx, ebx
jne 0x40b0d0
jmp 0x40a881
movzx eax, byte [ecx + 1]
lea edi, [ecx + 1]
jmp 0x409cf6
mov ebx, esi
mov esi, dword [esp + 0x18]
call sub.msvcrt.dll__errno
mov dword [eax], edi
mov eax, dword [esp + 0x14]
test byte [eax + 0x1004], 1
je 0x40bbd2
mov ecx, dword [esp + 0x14]
sub dword [esp + 0x78], 1
mov eax, dword [ecx + 0x1008]
mov dword [ecx + eax*4 + 4], ebx
add eax, 1
mov dword [ecx + 0x1008], eax
jmp 0x40a0b2
movzx edx, al
mov edi, dword [esp + 0x50]
cmp edx, ebx
jne 0x40b194
mov dword [esp + 0x68], esi
mov eax, ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x64], ebp
mov ebp, dword [esp + 0x14]
nop
mov esi, edi
add edi, 1
cmp byte [edi], 0
je 0x40b1f0
test ebx, ebx
je 0x40bdb1
mov edx, dword [esp + 0x28]
mov eax, ebp
call fcn.00409900
cmp eax, 0xffffffff
je 0x40bd98
movzx esi, byte [edi]
sub ebx, 1
cmp eax, esi
je 0x40b150
mov dword [esp + 0x18], ebx
mov ebp, dword [esp + 0x64]
mov ebx, eax
mov eax, esi
mov esi, dword [esp + 0x68]
test al, al
je 0x40b1fe
test dword [esp + 0x58], 0x100
je 0x40b06a
mov eax, edi
sub eax, dword [esp + 0x50]
mov edi, dword [esp + 0x2c]
xor ecx, ecx
test eax, eax
jle 0x40b064
mov dword [esp + 0x64], ebx
mov ebx, dword [esp + 0x50]
mov dword [esp + 0x68], ebp
mov ebp, dword [esp + 0x2c]
jmp 0x40b1db
add edi, 1
mov ecx, edi
sub ecx, ebp
cmp ecx, eax
jge 0x40bfbb
movzx edx, byte [edi]
cmp dl, byte [ebx + ecx]
je 0x40b1cc
mov ebx, dword [esp + 0x64]
mov ebp, dword [esp + 0x68]
jmp 0x40b07b
mov ebp, dword [esp + 0x64]
mov esi, dword [esp + 0x68]
mov dword [esp + 0x18], ebx
mov ebx, eax
mov eax, dword [esp + 0x50]
mov edi, ebp
cmp byte [eax], 0
je 0x40b23d
sub eax, ebp
mov ebp, eax
lea esi, [esi]
mov ecx, dword [esp + 0x80]
lea edx, [esp + 0x7c]
mov eax, edi
call fcn.004097f0
mov edx, edi
add edi, 1
mov dword [esp + 0x80], eax
movzx ecx, byte [ebp + edi - 1]
mov byte [eax + edx], cl
cmp byte [ebp + edi], 0
jne 0x40b210
mov ebp, edi
test esi, esi
jle 0x40cc0b
mov byte [esp + 0x5c], 1
mov esi, dword [esp + 0x18]
jmp 0x40ab72
mov eax, dword [esp + 0x24]
test eax, eax
je 0x40a93e
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x40a881
mov eax, ebx
mov ebx, dword [ebx + 4]
mov dword [esp], eax
call sub.msvcrt.dll_free
test ebx, ebx
jne 0x40b270
jmp 0x40a881
lea eax, [ebx - 0x2b]
and eax, 0xfffffffd
jne 0x40aaf9
jmp 0x40ab5a
call sub.msvcrt.dll__errno
mov ebx, 0xffffffff
mov dword [eax], edi
jmp 0x40a0b2
mov ecx, ebx
mov ebx, edi
mov edi, ecx
cmp eax, 1
jne 0x40c5f8
mov eax, dword [esp + 0x18]
add dword [esp + 0x3c], 2
mov esi, dword [esp + 0x3c]
test eax, eax
jne 0x40b2e7
mov eax, dword [esp + 0x54]
test eax, eax
je 0x40b2e7
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x20]
lea ecx, [eax + eax]
mov eax, dword [edx]
add eax, ecx
cmp esi, eax
je 0x40c608
mov eax, dword [esp + 0x48]
test eax, eax
jle 0x40b2f8
sub eax, 1
mov dword [esp + 0x48], eax
je 0x40b30c
mov edx, edi
mov eax, ebp
call fcn.00409900
mov ebx, eax
cmp eax, 0xffffffff
jne 0x40a33e
mov ebp, dword [esp + 0x18]
test ebp, ebp
jne 0x40af5b
mov eax, dword [esp + 0x3c]
lea esi, [eax + 2]
mov word [eax], 0
mov eax, dword [esp + 0x40]
mov edx, esi
mov ecx, eax
add ecx, eax
mov eax, dword [esp + 0x20]
call fcn.00409730
add dword [esp + 0x24], 1
mov dword [esp + 0x3c], esi
mov dword [esp + 0x20], 0
jmp 0x409bcc
mov ecx, ebx
mov ebx, edi
mov edi, ecx
cmp eax, 1
jne 0x40c5f8
sub dword [esp + 0x48], 1
mov eax, dword [esp + 0x48]
add dword [esp + 0x3c], 2
test eax, eax
jle 0x40b385
mov edx, ecx
mov eax, ebp
call fcn.00409900
mov ebx, eax
cmp eax, 0xffffffff
jne 0x40a4c3
cmp dword [esp + 0x18], 0
jne 0x40af5b
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
mov ecx, eax
add ecx, eax
mov eax, dword [esp + 0x20]
call fcn.00409730
add dword [esp + 0x24], 1
mov dword [esp + 0x20], 0
jmp 0x409bcc
mov ebx, dword [esp + 0x74]
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 0
test ebx, ebx
jne 0x409c40
jmp 0x409ba1
call sub.msvcrt.dll__errno
mov dword [esp + 0x24], 0xffffffff
mov dword [eax], 0x16
jmp 0x409bb0
lea eax, [edi + 2]
or ebp, 0x404
mov dword [esp + 0x48], eax
movzx eax, byte [edi + 2]
mov byte [esp + 0x28], al
jmp 0x409df0
lea eax, [edi + 2]
or ebp, 1
mov dword [esp + 0x48], eax
movzx eax, byte [edi + 2]
mov byte [esp + 0x28], al
jmp 0x409df0
lea eax, [edi + 2]
or ebp, 0xc
mov dword [esp + 0x48], eax
movzx eax, byte [edi + 2]
mov byte [esp + 0x28], al
jmp 0x409df0
mov dword [esp + 0x4c], edi
mov edi, dword [esp + 0x44]
test edi, edi
jne 0x409bcc
mov eax, dword [esp + 0x4c]
mov byte [eax], 0
mov edi, dword [esp + 0x20]
lea esi, [eax + 1]
test edi, edi
je 0x40b47c
mov eax, dword [edi]
test eax, eax
je 0x40b47c
mov edx, esi
sub edx, eax
cmp dword [esp + 0x40], edx
je 0x40b47c
mov dword [esp + 4], edx
mov dword [esp], eax
call sub.msvcrt.dll_realloc
test eax, eax
je 0x40b47c
mov dword [edi], eax
add dword [esp + 0x24], 1
mov dword [esp + 0x18], 0
mov dword [esp + 0x4c], esi
mov dword [esp + 0x20], 0
jmp 0x409bcc
mov dword [esp + 0x18], ebp
mov ebp, dword [esp + 0x58]
mov eax, dword [esp + 0x18]
test eax, eax
je 0x40a9bb
test ebp, 0x40
je 0x40b4c1
cmp dword [esp + 0x18], 2
je 0x40a9bb
lea edi, [esp + 0x7c]
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x80]
mov edx, edi
mov eax, esi
call fcn.004097f0
mov dword [esp + 0x80], eax
mov byte [eax + esi], 0
mov esi, ebp
and esi, 0x80
test ebp, 8
jne 0x40bf0a
mov eax, dword [esp + 0x80]
lea edx, [esp + 0x84]
and ebp, 4
mov dword [esp + 4], edx
mov dword [esp], eax
je 0x40bf6b
call fcn.0040cd90
test esi, esi
jne 0x40bc40
mov eax, dword [esp + 0x84]
mov esi, dword [esp + 0x80]
cmp eax, esi
je 0x40a9b1
cmp dword [esp + 0x60], 0x2d
fstp qword [esp + 0x18]
fld qword [esp + 0x18]
jne 0x40b54a
fchs
mov ecx, dword [esp + 0x44]
test ecx, ecx
jne 0x40c737
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx]
add ecx, 4
mov dword [esp + 0x38], ecx
fstp qword [edx]
cmp eax, esi
je 0x40a9bb
add dword [esp + 0x24], 1
mov dword [esp + 0x18], 0
jmp 0x409bcc
cmp ebx, 0xffffffff
setne al
and eax, edx
mov edx, dword [esp + 0x34]
test edx, edx
jne 0x40b597
mov dword [esp + 0x34], 0xa
test al, al
je 0x40b63e
mov eax, ebp
mov dword [esp + 0x5c], ebp
mov ebp, dword [esp + 0x14]
and eax, 0x100
mov dword [esp + 0x48], esi
mov esi, dword [esp + 0x28]
mov dword [esp + 0x58], eax
jmp 0x40b627
lea eax, [ebx - 0x30]
cmp eax, 9
ja 0x40b6c8
lea eax, [ebx - 0x2f]
cmp eax, dword [esp + 0x34]
jg 0x40b6c8
mov eax, dword [esp + 0x54]
mov edi, eax
add eax, 1
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0x80]
lea edx, [esp + 0x7c]
mov eax, edi
call fcn.004097f0
mov edx, esi
mov dword [esp + 0x80], eax
mov byte [eax + edi], bl
mov edi, dword [esp + 0x48]
xor eax, eax
test edi, edi
setg al
sub edi, eax
mov eax, ebp
mov dword [esp + 0x48], edi
call fcn.00409900
mov ebx, eax
cmp eax, 0xffffffff
je 0x40b63a
test edi, edi
je 0x40b63a
cmp dword [esp + 0x34], 0x10
jne 0x40b5c0
mov dword [esp], ebx
call sub.msvcrt.dll_isxdigit
test eax, eax
jne 0x40b5d9
mov ebp, dword [esp + 0x5c]
mov eax, dword [esp + 0x54]
test eax, eax
jne 0x40adb4
test ebp, 0x20
je 0x40bad2
mov dword [esp], ebx
call sub.msvcrt.dll_tolower
cmp al, 0x28
jne 0x40bad2
mov esi, 0x419ce1
mov dword [esp + 0x18], ebp
mov edi, dword [esp + 0x14]
mov ebp, esi
mov esi, dword [esp + 0x28]
jmp 0x40b695
mov dword [esp], eax
call sub.msvcrt.dll_tolower
cmp byte [ebp], al
jne 0x40b6a5
add ebp, 1
cmp byte [ebp], 0
je 0x40c2e1
mov edx, esi
mov eax, edi
call fcn.00409900
mov ebx, eax
cmp eax, 0xffffffff
jne 0x40b67b
mov ebp, edi
mov edi, ebx
mov dword [esp], 0
mov ecx, dword [esp + 0x28]
mov edx, ebp
mov eax, edi
call fcn.00409990
jmp 0x40a9bb
cmp dword [esp + 0x34], 0xa
jne 0x40b63a
mov eax, dword [esp + 0x58]
test eax, eax
je 0x40b63a
mov edi, dword [esp + 0x2c]
mov eax, dword [esp + 0x48]
mov ecx, 0x7fffffff
movzx edx, byte [edi]
test eax, eax
cmovg ecx, eax
mov eax, edx
cmp ebx, edx
jne 0x40bd8f
mov dword [esp + 0x18], esi
mov eax, ebx
mov ebx, ecx
lea esi, [esi]
lea esi, [esi]
mov esi, edi
add edi, 1
cmp byte [edi], 0
je 0x40b800
test ebx, ebx
je 0x40b76b
mov edx, dword [esp + 0x18]
mov eax, ebp
call fcn.00409900
cmp eax, 0xffffffff
je 0x40b80d
movzx esi, byte [edi]
sub ebx, 1
cmp eax, esi
je 0x40b710
mov ecx, ebx
mov ebx, eax
mov eax, esi
mov esi, dword [esp + 0x18]
test al, al
jne 0x40ca98
mov eax, dword [esp + 0x48]
test eax, eax
cmovle ecx, eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x48], ecx
lea edi, [eax - 1]
jmp 0x40b5e6
mov ebx, eax
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x5c]
mov dword [esp + 0x28], eax
cmp edi, dword [esp + 0x2c]
jbe 0x40b63e
mov dword [esp], 0
mov ecx, dword [esp + 0x28]
mov eax, ebx
lea ebx, [edi - 1]
mov edx, dword [esp + 0x14]
call fcn.00409990
cmp dword [esp + 0x2c], ebx
jae 0x40c959
mov dword [esp + 0x18], edi
mov esi, ebx
mov edi, ebx
mov ebx, dword [esp + 0x14]
jmp 0x40b7d9
mov eax, dword [ebx + 0x1008]
sub dword [esp + 0x78], 1
mov dword [ebx + eax*4 + 4], ecx
add eax, 1
mov dword [ebx + 0x1008], eax
sub esi, 1
cmp esi, dword [esp + 0x2c]
je 0x40c948
movzx ecx, byte [esi]
test byte [ebx + 0x1004], 1
jne 0x40b7b4
mov eax, dword [ebx]
mov dword [esp], ecx
mov dword [esp + 4], eax
call sub.msvcrt.dll_ungetc
sub dword [esp + 0x78], 1
jmp 0x40b7cc
mov ecx, ebx
mov esi, dword [esp + 0x18]
mov ebx, eax
jmp 0x40b752
mov edx, esi
mov ecx, ebx
mov esi, dword [esp + 0x18]
mov ebx, eax
movzx eax, byte [edx + 1]
jmp 0x40b74a
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x80]
add ecx, 2
mov byte [edx + eax], 1
movzx eax, byte [ecx - 1]
mov dword [esp + 0x10], ecx
jmp 0x409f84
mov dword [esp + 0x10], edx
mov eax, dword [esp + 0x78]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x58], eax
test edx, edx
je 0x40b9d3
lea eax, [esp + 0x78]
mov dword [esp + 0x28], eax
mov edx, eax
mov eax, dword [esp + 0x14]
call fcn.00409900
mov ebx, eax
cmp eax, 0xffffffff
je 0x40c468
mov eax, ebp
lea edi, [esp + 0x98]
mov dword [esp + 0x64], ebp
mov edx, ebx
and eax, 0x600
mov ebx, dword [esp + 0x28]
mov ebp, dword [esp + 0x14]
mov dword [esp + 0x28], edi
mov dword [esp + 0x98], 0
mov edi, dword [esp + 0x54]
mov dword [esp + 0x9c], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x5c], eax
jmp 0x40b8dd
sub esi, 1
je 0x40bca2
mov edx, ebx
mov eax, ebp
call fcn.00409900
mov edx, eax
cmp eax, 0xffffffff
je 0x40bca2
mov eax, dword [esp + 0x80]
movzx ecx, byte [esp + 0x44]
cmp byte [eax + edx], cl
je 0x40c228
test edi, edi
jne 0x40b8c0
mov eax, dword [esp + 0x28]
mov dword [esp + 8], 1
mov byte [esp + 0x8b], dl
mov dword [esp + 0xc], eax
lea eax, [esp + 0x8b]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x18], edx
mov dword [esp], eax
call fcn.00415cd0
mov edx, dword [esp + 0x18]
cmp eax, 0xfffffffe
je 0x40bb58
mov eax, dword [esp + 0x5c]
add dword [esp + 0x3c], 2
test eax, eax
je 0x40b9c6
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x40]
mov dword [esp + 0x48], 0
mov ecx, dword [ecx]
add eax, eax
mov dword [esp + 0x60], eax
add eax, ecx
cmp dword [esp + 0x3c], eax
jne 0x40b8c0
mov eax, dword [esp + 0x60]
mov dword [esp + 0x48], ebx
mov ebx, edx
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x40]
add eax, 1
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x18]
mov dword [esp], ecx
add eax, eax
mov dword [esp + 4], eax
call sub.msvcrt.dll_realloc
test eax, eax
je 0x40cad1
mov ecx, dword [esp + 0x20]
mov edx, ebx
mov ebx, dword [esp + 0x48]
mov dword [esp + 0x48], 0
mov dword [ecx], eax
add eax, dword [esp + 0x60]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x40], eax
jmp 0x40b8c0
mov dword [esp + 0x48], 0
jmp 0x40b8c0
lea eax, [esp + 0x78]
mov dword [esp + 0x28], eax
mov edx, eax
mov eax, dword [esp + 0x14]
call fcn.00409900
mov ebx, eax
cmp eax, 0xffffffff
je 0x40c468
mov edi, ebp
mov dword [esp + 0x48], ebp
mov ebp, dword [esp + 0x28]
and edi, 0x600
mov dword [esp + 0x28], edi
mov edi, dword [esp + 0x4c]
jmp 0x40ba40
mov ecx, dword [esp + 0x20]
mov edi, eax
mov edx, dword [ecx]
mov ecx, dword [esp + 0x40]
add ecx, edx
cmp eax, ecx
je 0x40c021
sub esi, 1
je 0x40bd6c
mov eax, dword [esp + 0x14]
mov edx, ebp
call fcn.00409900
mov ebx, eax
cmp eax, 0xffffffff
je 0x40bd6c
mov eax, dword [esp + 0x80]
movzx ecx, byte [esp + 0x44]
cmp byte [eax + ebx], cl
je 0x40c1ec
mov eax, dword [esp + 0x54]
test eax, eax
jne 0x40ba21
mov byte [edi], bl
lea eax, [edi + 1]
mov edi, dword [esp + 0x28]
test edi, edi
jne 0x40ba0b
mov edi, eax
jmp 0x40ba21
mov eax, dword [esp + 0x20]
mov dword [esp + 0x4c], edi
test eax, eax
je 0x40b3a5
mov esi, dword [esp + 0x20]
mov eax, dword [esi]
test eax, eax
je 0x40b3a5
mov edx, dword [esp + 0x4c]
sub edx, eax
cmp dword [esp + 0x40], edx
je 0x40b3a5
mov dword [esp + 4], edx
mov dword [esp], eax
call sub.msvcrt.dll_realloc
test eax, eax
je 0x40b3a5
mov dword [esi], eax
jmp 0x40b3a5
mov ebx, dword [esp + 0x60]
jmp 0x40aa89
test esi, esi
je 0x40bdeb
call sub.msvcrt.dll_strtol
jmp 0x40ae63
mov ebp, dword [esp + 0x14]
mov edi, ebx
jmp 0x40b6a9
mov eax, dword [esp + 0x40]
mov dword [esp + 0x28], ebp
mov ebp, esi
mov esi, ebx
lea ecx, [eax + eax]
lea edi, [eax + 1]
mov ebx, ecx
mov dword [esp + 4], ebx
mov dword [esp], edx
call sub.msvcrt.dll_realloc
test eax, eax
je 0x40c961
mov edi, dword [esp + 0x40]
mov edx, dword [esp + 0x20]
mov ecx, ebx
mov ebx, esi
mov dword [esp + 0x40], ecx
mov esi, ebp
mov ebp, dword [esp + 0x28]
mov dword [edx], eax
add edi, eax
jmp 0x40a1ce
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x40c2c5
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
add eax, 4
mov dword [esp + 0x38], eax
mov dword [esp + 0x4c], ecx
mov ebx, dword [esp + 0x4c]
test ebx, ebx
jne 0x40a17d
jmp 0x40a9bb
add dword [esp + 0x48], 1
jmp 0x40b8c9
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x30]
sub edx, 1
lea eax, [ecx + edx*4]
cmove eax, ecx
mov eax, dword [eax]
mov dword [esp + 0x20], eax
jmp 0x40a3f6
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x30]
sub edx, 1
lea eax, [ecx + edx*4]
cmove eax, ecx
mov eax, dword [eax]
mov dword [esp + 0x3c], eax
jmp 0x40a9fc
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x30]
sub edx, 1
lea eax, [ecx + edx*4]
cmove eax, ecx
mov eax, dword [eax]
mov dword [esp + 0x20], eax
jmp 0x40a274
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x30]
sub edx, 1
lea eax, [ecx + edx*4]
cmove eax, ecx
mov eax, dword [eax]
mov dword [esp + 0x3c], eax
jmp 0x40a9a3
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
mov dword [esp], ebx
mov dword [esp + 4], eax
call sub.msvcrt.dll_ungetc
sub dword [esp + 0x78], 1
jmp 0x40a0b2
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x40a881
mov eax, ebx
mov ebx, dword [ebx + 4]
mov dword [esp], eax
call sub.msvcrt.dll_free
test ebx, ebx
jne 0x40bbfa
jmp 0x40a881
mov ecx, dword [esp + 0x44]
test ecx, ecx
jne 0x40c310
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
add eax, 4
mov dword [esp + 0x38], eax
test ecx, ecx
jne 0x40a6ef
jmp 0x40a9bb
fstp st(0)
jmp 0x40bc4a
fstp st(0)
jmp 0x40bc4a
fstp st(0)
mov eax, dword [esp + 0x84]
cmp dword [esp + 0x80], eax
jne 0x40af5b
jmp 0x40a9bb
mov eax, dword [esp + 0x14]
mov dword [esp + 0x4c], edi
mov edi, dword [esp + 0x44]
test byte [eax + 0x1004], 1
je 0x40c7e4
mov ecx, dword [esp + 0x14]
sub dword [esp + 0x78], 1
mov eax, dword [ecx + 0x1008]
mov dword [ecx + eax*4 + 4], ebx
add eax, 1
mov dword [ecx + 0x1008], eax
jmp 0x40b440
mov ebx, edx
mov esi, dword [esp + 0x48]
test esi, esi
jne 0x40c5f8
mov eax, dword [esp + 0x58]
cmp dword [esp + 0x78], eax
je 0x40a9bb
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x18], 0
test ecx, ecx
jne 0x409bcc
mov eax, dword [esp + 0x3c]
mov edi, dword [esp + 0x20]
xor edx, edx
mov word [eax], dx
lea esi, [eax + 2]
test edi, edi
je 0x40bd0c
mov eax, dword [edi]
test eax, eax
je 0x40bd0c
mov ecx, dword [esp + 0x40]
mov edx, esi
sub edx, eax
add ecx, ecx
cmp ecx, edx
je 0x40bd0c
mov dword [esp + 4], edx
mov dword [esp], eax
call sub.msvcrt.dll_realloc
test eax, eax
je 0x40bd0c
mov dword [edi], eax
add dword [esp + 0x24], 1
mov dword [esp + 0x18], 0
mov dword [esp + 0x3c], esi
mov dword [esp + 0x20], 0
jmp 0x409bcc
mov ecx, dword [esp + 0x80]
lea edi, [esp + 0x7c]
xor eax, eax
mov edx, edi
call fcn.004097f0
mov edx, dword [esp + 0x28]
mov dword [esp + 0x80], eax
mov byte [eax], bl
xor eax, eax
test esi, esi
setg al
sub esi, eax
mov eax, dword [esp + 0x14]
call fcn.00409900
mov dword [esp + 0x54], 1
mov ebx, eax
jmp 0x40ad3a
mov dword [esp + 0x4c], edi
mov eax, dword [esp + 0x78]
cmp eax, dword [esp + 0x58]
je 0x40a9bb
mov esi, dword [esp + 0x54]
test esi, esi
jne 0x409bcc
jmp 0x40b448
mov edi, dword [esp + 0x2c]
jmp 0x40b74a
mov dword [esp + 0x18], ebx
mov ebx, eax
mov eax, esi
mov ebp, dword [esp + 0x64]
mov esi, dword [esp + 0x68]
movzx eax, byte [eax + 1]
jmp 0x40b194
mov ebp, dword [esp + 0x64]
mov esi, dword [esp + 0x68]
mov dword [esp + 0x18], ebx
mov ebx, eax
jmp 0x40b198
mov edi, dword [esp + 0x44]
test edi, edi
jne 0x40c35c
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx]
add ecx, 4
mov dword [esp + 0x38], ecx
mov dword [edx], eax
mov eax, dword [esp + 0x6c]
mov dword [edx + 4], eax
jmp 0x40aed4
call sub.msvcrt.dll_strtoul
jmp 0x40ae63
mov ebx, dword [esp + 0x54]
lea edi, [esp + 0x7c]
mov edx, edi
mov eax, ebx
call fcn.004097f0
mov edx, dword [esp + 0x28]
mov dword [esp + 0x80], eax
mov byte [eax + ebx], 0x30
mov eax, dword [esp + 0x14]
call fcn.00409900
mov ebx, eax
mov dword [esp], ebx
call sub.msvcrt.dll_tolower
cmp eax, 0x78
je 0x40c3f7
cmp ebx, 0xffffffff
mov edi, dword [esp + 0x34]
setne al
test esi, esi
setne dl
and eax, edx
test edi, edi
jne 0x40be4e
mov dword [esp + 0x34], 8
test al, al
mov eax, dword [esp + 0x18]
mov dword [esp + 0x54], eax
jne 0x40b59f
jmp 0x40adb4
mov ecx, ebp
and ecx, 4
mov dword [esp + 0x18], ecx
je 0x40c25c
mov ecx, dword [esp + 0x44]
test ecx, ecx
jne 0x40c6eb
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx]
add ecx, 4
mov dword [esp + 0x38], ecx
mov dword [edx], eax
mov dword [esp + 0x18], 0
jmp 0x409bcc
test edi, edi
jne 0x40bdc4
test ebp, 4
jne 0x40c2a5
test ebp, 2
jne 0x40c893
and ebp, 1
je 0x40caf5
cmp dword [esp + 0x44], 0
je 0x40aec5
mov edx, dword [esp + 0x44]
xor ecx, ecx
jmp 0x40bee0
mov ecx, 1
sub edx, 1
jne 0x40bedb
mov esi, dword [esp + 0x30]
mov edx, dword [esp + 0x44]
test cl, cl
lea edx, [esi + edx*4 - 4]
cmove edx, esi
mov edx, dword [edx]
jmp 0x40aed2
call fcn.0040d130
jmp 0x40ae5f
lea eax, [esp + 0x84]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call fcn.0040cd90
test esi, esi
jne 0x40bc44
mov eax, dword [esp + 0x84]
mov esi, dword [esp + 0x80]
cmp eax, esi
je 0x40a9b5
cmp dword [esp + 0x60], 0x2d
jne 0x40bf4b
fchs
mov edi, dword [esp + 0x44]
test edi, edi
jne 0x40c878
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx]
add ecx, 4
mov dword [esp + 0x38], ecx
fstp xword [edx]
jmp 0x40b565
call fcn.0040ccf0
test esi, esi
jne 0x40bc48
mov eax, dword [esp + 0x84]
mov esi, dword [esp + 0x80]
cmp eax, esi
je 0x40a9b9
fld st(0)
mov edx, dword [esp + 0x44]
cmp dword [esp + 0x60], 0x2d
fchs
fcmovne st(0), st(1)
fstp st(1)
test edx, edx
jne 0x40c6d0
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx]
add ecx, 4
mov dword [esp + 0x38], ecx
fstp dword [edx]
jmp 0x40b565
mov ebx, dword [esp + 0x64]
mov ebp, dword [esp + 0x68]
jne 0x40b078
movzx eax, byte [edi]
mov edx, eax
cmp eax, ebx
jne 0x40b07b
mov eax, ebx
mov ebx, esi
mov esi, edi
add edi, 1
cmp byte [edi], 0
je 0x40caec
mov edx, dword [esp + 0x18]
test edx, edx
je 0x40c90a
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x14]
call fcn.00409900
cmp eax, 0xffffffff
je 0x40c8fb
movzx esi, byte [edi]
sub dword [esp + 0x18], 1
mov edx, esi
cmp eax, esi
je 0x40bfda
mov esi, ebx
mov ebx, eax
jmp 0x40b07b
mov eax, dword [esp + 0x40]
mov dword [esp + 0x4c], ebp
mov ebp, esi
mov esi, ebx
lea ecx, [eax + eax]
lea edi, [eax + 1]
mov ebx, ecx
mov dword [esp + 4], ebx
mov dword [esp], edx
call sub.msvcrt.dll_realloc
test eax, eax
je 0x40ca87
mov edi, dword [esp + 0x40]
mov edx, dword [esp + 0x20]
mov ecx, ebx
mov ebx, esi
mov dword [esp + 0x40], ecx
mov esi, ebp
mov ebp, dword [esp + 0x4c]
mov dword [edx], eax
add edi, eax
jmp 0x40ba21
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x40c6ab
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
add eax, 4
mov dword [esp + 0x38], eax
mov dword [esp + 0x4c], ecx
mov eax, dword [esp + 0x4c]
test eax, eax
jne 0x409edf
jmp 0x40a9bb
mov ecx, dword [esp + 0x80]
lea edi, [esp + 0x7c]
xor eax, eax
mov edx, edi
call fcn.004097f0
mov dword [esp + 0x18], ebp
mov dword [esp + 0x80], eax
mov byte [eax], bl
mov eax, 1
mov ebp, eax
jmp 0x40c128
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x14]
call fcn.00409900
mov ebx, eax
cmp eax, 0xffffffff
je 0x40c12c
mov dword [esp], eax
call sub.msvcrt.dll_tolower
mov edx, eax
movsx eax, byte [ebp + 0x419cea]
cmp edx, eax
jne 0x40c12c
xor eax, eax
test esi, esi
mov ecx, dword [esp + 0x80]
mov edx, edi
setg al
sub esi, eax
mov eax, ebp
call fcn.004097f0
cmp byte [ebp + 0x419ceb], 0
lea edx, [ebp + 1]
mov dword [esp + 0x80], eax
mov byte [eax + ebp], bl
je 0x40c78c
mov ebp, edx
test esi, esi
jne 0x40c0ca
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x40c145
mov eax, ebx
mov ebx, dword [ebx + 4]
mov dword [esp], eax
call sub.msvcrt.dll_free
test ebx, ebx
jne 0x40c134
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x74], 0
test ebx, ebx
jne 0x40a071
jmp 0x409ba1
mov ebx, dword [esp + 0x44]
test ebx, ebx
jne 0x40c5dc
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
add eax, 4
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], ecx
mov ecx, dword [esp + 0x3c]
test ecx, ecx
jne 0x409edf
jmp 0x40a9bb
mov eax, dword [ebp]
mov dword [esp], ebx
mov dword [esp + 4], eax
call sub.msvcrt.dll_ungetc
sub dword [esp + 0x78], 1
jmp 0x409c31
mov dword [esp + 0x18], ebp
mov ebp, dword [esp + 0x58]
cmp ebx, 0xffffffff
je 0x40b4a2
mov eax, dword [esp + 0x14]
test byte [eax + 0x1004], 1
je 0x40c818
mov ecx, dword [esp + 0x14]
sub dword [esp + 0x78], 1
mov eax, dword [ecx + 0x1008]
mov dword [ecx + eax*4 + 4], ebx
add eax, 1
mov dword [ecx + 0x1008], eax
jmp 0x40b4a2
mov eax, dword [esp + 0x14]
mov dword [esp + 0x4c], edi
test byte [eax + 0x1004], 1
je 0x40c830
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x78]
mov edx, dword [ecx + 0x1008]
sub eax, 1
mov dword [esp + 0x78], eax
mov dword [ecx + edx*4 + 4], ebx
add edx, 1
mov dword [ecx + 0x1008], edx
jmp 0x40bd74
mov eax, dword [esp + 0x14]
mov ebx, edx
test byte [eax + 0x1004], 1
je 0x40c704
mov ecx, dword [esp + 0x14]
sub dword [esp + 0x78], 1
mov eax, dword [ecx + 0x1008]
mov dword [ecx + eax*4 + 4], edx
add eax, 1
mov dword [ecx + 0x1008], eax
jmp 0x40bca4
test ebp, 2
je 0x40c328
mov edx, dword [esp + 0x44]
test edx, edx
jne 0x40cab8
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx]
add ecx, 4
mov dword [esp + 0x38], ecx
mov word [edx], ax
jmp 0x409bcc
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x30]
sub edx, 1
lea eax, [ecx + edx*4]
cmove eax, ecx
mov eax, dword [eax]
mov dword [esp + 0x20], eax
jmp 0x40a10d
mov esi, dword [esp + 0x44]
test esi, esi
jne 0x40c71c
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx]
add ecx, 4
mov dword [esp + 0x38], ecx
mov dword [edx], eax
jmp 0x40aed4
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x30]
sub edx, 1
lea eax, [ecx + edx*4]
cmove eax, ecx
mov eax, dword [eax]
mov dword [esp + 0x4c], eax
jmp 0x40bb41
mov ecx, dword [esp + 0x80]
lea edi, [esp + 0x7c]
xor eax, eax
mov ebp, dword [esp + 0x18]
mov edx, edi
call fcn.004097f0
mov dword [esp + 0x54], 1
mov dword [esp + 0x80], eax
mov byte [eax], 0x30
jmp 0x40ae06
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x30]
sub edx, 1
lea eax, [ecx + edx*4]
cmove eax, ecx
mov ecx, dword [eax]
jmp 0x40bc29
and ebp, 1
mov dword [esp + 0x18], ebp
je 0x40c65d
cmp dword [esp + 0x44], 0
jne 0x40cc15
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx]
add ecx, 4
mov dword [esp + 0x38], ecx
mov byte [edx], al
mov dword [esp + 0x18], 0
jmp 0x409bcc
mov esi, dword [esp + 0x30]
mov ecx, dword [esp + 0x44]
mov edx, esi
sub ecx, 1
je 0x40c36e
lea edx, [esi + ecx*4]
mov edx, dword [edx]
jmp 0x40bddd
mov ecx, dword [esp + 0x24]
test ecx, ecx
je 0x40a93e
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x40a059
mov eax, ebx
mov ebx, dword [ebx + 4]
mov dword [esp], eax
call sub.msvcrt.dll_free
test ebx, ebx
jne 0x40c38d
jmp 0x40a059
mov eax, dword [esp + 0x14]
test byte [eax + 0x1004], 1
je 0x40cbc8
mov ecx, dword [esp + 0x14]
sub dword [esp + 0x78], 1
mov eax, dword [ecx + 0x1008]
mov dword [ecx + eax*4 + 4], ebx
add eax, 1
mov dword [ecx + 0x1008], eax
jmp 0x40b30c
lea eax, [esp + 0x80]
xor ecx, ecx
lea edx, [esp + 0x74]
mov dword [esp], eax
mov eax, dword [esp + 0x24]
call fcn.00409870
mov dword [esp + 0x24], eax
jmp 0x409bb0
test byte [esp + 0x34], 0xa
jne 0x40c866
xor eax, eax
test esi, esi
mov edx, dword [esp + 0x28]
setg al
sub esi, eax
mov eax, dword [esp + 0x14]
call fcn.00409900
mov dword [esp + 0x34], 0x10
cmp eax, 0xffffffff
mov ebx, eax
setne al
test esi, esi
setne dl
and eax, edx
jmp 0x40be4e
mov ecx, dword [esp + 0x44]
mov esi, dword [esp + 0x30]
sub ecx, 1
lea edx, [esi + ecx*4]
cmove edx, esi
mov edx, dword [edx]
jmp 0x40af9e
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x30]
sub edx, 1
lea eax, [ecx + edx*4]
cmove eax, ecx
mov eax, dword [eax]
mov dword [esp + 0x20], eax
jmp 0x40a673
mov eax, dword [esp + 0x24]
mov edi, ebx
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x74]
test eax, eax
cmovne edi, eax
lea eax, [esp + 0x80]
mov dword [esp], eax
mov eax, edi
call fcn.00409870
mov dword [esp + 0x24], eax
jmp 0x409bb0
mov ecx, dword [esp + 0x80]
lea edi, [esp + 0x7c]
xor eax, eax
mov edx, edi
call fcn.004097f0
mov edx, dword [esp + 0x28]
mov dword [esp + 0x80], eax
mov byte [eax], 0x30
mov eax, dword [esp + 0x14]
call fcn.00409900
mov ebx, eax
test esi, esi
jle 0x40c4d7
sub esi, 1
mov dword [esp + 0x18], 1
je 0x40aabd
mov dword [esp], ebx
call sub.msvcrt.dll_tolower
cmp eax, 0x78
je 0x40cb79
mov byte [esp + 0x48], 0x65
mov dword [esp + 0x18], 1
jmp 0x40aabd
mov ecx, dword [esp + 0x80]
lea edi, [esp + 0x7c]
xor eax, eax
mov edx, edi
call fcn.004097f0
mov dword [esp + 0x48], ebp
mov dword [esp + 0x80], eax
mov byte [eax], bl
mov eax, 1
mov ebp, eax
jmp 0x40c588
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x14]
call fcn.00409900
mov ebx, eax
cmp eax, 0xffffffff
je 0x40c58c
mov dword [esp], eax
call sub.msvcrt.dll_tolower
mov edx, eax
movsx eax, byte [ebp + 0x419ce6]
cmp edx, eax
jne 0x40c58c
xor eax, eax
test esi, esi
mov ecx, dword [esp + 0x80]
mov edx, edi
setg al
sub esi, eax
mov eax, ebp
call fcn.004097f0
lea ecx, [ebp + 1]
cmp byte [ebp + 0x419ce7], 0
mov dword [esp + 0x80], eax
mov dword [esp + 0x18], ecx
mov byte [eax + ebp], bl
je 0x40c6c7
mov ebp, dword [esp + 0x18]
test esi, esi
jne 0x40c524
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x40c145
mov eax, ebx
mov ebx, dword [ebx + 4]
mov dword [esp], eax
call sub.msvcrt.dll_free
test ebx, ebx
jne 0x40c598
jmp 0x40c145
mov ebx, dword [esp + 0x24]
test ebx, ebx
je 0x40a93e
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x40a059
mov eax, ebx
mov ebx, dword [ebx + 4]
mov dword [esp], eax
call sub.msvcrt.dll_free
test ebx, ebx
jne 0x40c5c6
jmp 0x40a059
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x30]
sub edx, 1
lea eax, [ecx + edx*4]
cmove eax, ecx
mov eax, dword [eax]
mov dword [esp + 0x3c], eax
jmp 0x40c17b
call sub.msvcrt.dll__errno
mov dword [eax], 0x2a
jmp 0x40a9bb
mov eax, dword [esp + 0x40]
mov dword [esp + 0x28], ebp
mov esi, ecx
mov ebp, ebx
mov dword [esp + 0x3c], edi
mov edi, ecx
lea edx, [eax + 1]
mov ebx, edx
lea eax, [esi + esi]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x20]
mov eax, dword [eax]
mov dword [esp], eax
call sub.msvcrt.dll_realloc
test eax, eax
je 0x40cc2e
mov edx, dword [esp + 0x20]
mov ecx, edi
mov ebx, ebp
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x40], esi
mov ebp, dword [esp + 0x28]
mov dword [edx], eax
add eax, ecx
mov dword [esp + 0x3c], eax
jmp 0x40b2e7
cmp dword [esp + 0x44], 0
jne 0x40cb49
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx]
add ecx, 4
mov dword [esp + 0x38], ecx
mov dword [edx], eax
jmp 0x409bcc
mov eax, dword [esp + 0x24]
test eax, eax
cmove eax, dword [esp + 0x60]
mov ebx, eax
lea eax, [esp + 0x80]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
lea edx, [esp + 0x74]
mov eax, ebx
call fcn.00409870
mov dword [esp + 0x24], eax
jmp 0x409bb0
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x30]
sub edx, 1
lea eax, [ecx + edx*4]
cmove eax, ecx
mov eax, dword [eax]
mov dword [esp + 0x4c], eax
jmp 0x40c085
mov ebp, dword [esp + 0x48]
jmp 0x40b4c5
mov edi, dword [esp + 0x30]
mov ecx, dword [esp + 0x44]
mov edx, edi
sub ecx, 1
je 0x40c6e2
lea edx, [edi + ecx*4]
mov edx, dword [edx]
fstp dword [edx]
jmp 0x40b565
mov esi, dword [esp + 0x30]
mov ecx, dword [esp + 0x44]
mov edx, esi
sub ecx, 1
je 0x40c6fd
lea edx, [esi + ecx*4]
mov edx, dword [edx]
jmp 0x40be90
mov eax, dword [eax]
mov dword [esp], edx
mov dword [esp + 4], eax
call sub.msvcrt.dll_ungetc
sub dword [esp + 0x78], 1
jmp 0x40bca4
mov esi, dword [esp + 0x30]
mov ecx, dword [esp + 0x44]
mov edx, esi
sub ecx, 1
je 0x40c72e
lea edx, [esi + ecx*4]
mov edx, dword [edx]
mov dword [edx], eax
jmp 0x40aed4
mov edi, dword [esp + 0x30]
mov ecx, dword [esp + 0x44]
mov edx, edi
sub ecx, 1
je 0x40c749
lea edx, [edi + ecx*4]
mov edx, dword [edx]
jmp 0x40b563
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x30]
sub edx, 1
lea eax, [ecx + edx*4]
cmove eax, ecx
mov eax, dword [eax]
mov dword [esp + 0x20], eax
jmp 0x409e6f
cmp dword [esp + 0x24], 0
jne 0x40a9bb
mov dword [esp + 0x24], 0xffffffff
jmp 0x40a9bb
movzx eax, bl
jmp 0x409faf
mov dword [esp + 0x48], ebp
mov ebp, dword [esp + 0x18]
mov dword [esp + 0x18], edx
test esi, esi
je 0x40b4c5
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x14]
call fcn.00409900
mov ebx, eax
cmp eax, 0xffffffff
je 0x40b4c5
mov dword [esp], eax
call sub.msvcrt.dll_tolower
cmp eax, 0x69
je 0x40c976
mov dword [esp], 0
mov ecx, dword [esp + 0x28]
mov eax, ebx
mov edx, dword [esp + 0x14]
call fcn.00409990
jmp 0x40b4c5
mov eax, dword [eax]
mov dword [esp], ebx
mov dword [esp + 4], eax
call sub.msvcrt.dll_ungetc
sub dword [esp + 0x78], 1
jmp 0x40b440
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x30]
sub edx, 1
lea eax, [ecx + edx*4]
cmove eax, ecx
mov eax, dword [eax]
mov dword [esp + 0x20], eax
jmp 0x40aca2
mov eax, dword [eax]
mov dword [esp], ebx
mov dword [esp + 4], eax
call sub.msvcrt.dll_ungetc
sub dword [esp + 0x78], 1
jmp 0x40b4a2
mov eax, dword [eax]
mov dword [esp], ebx
mov dword [esp + 4], eax
call sub.msvcrt.dll_ungetc
mov eax, dword [esp + 0x78]
sub eax, 1
mov dword [esp + 0x78], eax
jmp 0x40bd74
mov eax, dword [eax]
mov dword [esp], ebx
mov dword [esp + 4], eax
call sub.msvcrt.dll_ungetc
sub dword [esp + 0x78], 1
jmp 0x40ae06
cmp ebx, 0xffffffff
setne al
test esi, esi
setne dl
and eax, edx
jmp 0x40be4e
mov edi, dword [esp + 0x30]
mov ecx, dword [esp + 0x44]
mov edx, edi
sub ecx, 1
je 0x40c88a
lea edx, [edi + ecx*4]
mov edx, dword [edx]
fstp xword [edx]
jmp 0x40b565
mov ecx, dword [esp + 0x44]
test ecx, ecx
jne 0x40c8e5
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx]
add ecx, 4
mov dword [esp + 0x38], ecx
mov word [edx], ax
jmp 0x40aed4
cmp dword [esp + 0x44], 0
je 0x40c2b1
mov edx, dword [esp + 0x44]
xor ecx, ecx
jmp 0x40c8c8
mov ecx, 1
sub edx, 1
jne 0x40c8c3
mov esi, dword [esp + 0x30]
mov edx, dword [esp + 0x44]
test cl, cl
lea edx, [esi + edx*4 - 4]
cmove edx, esi
mov edx, dword [edx]
jmp 0x40c730
mov esi, dword [esp + 0x30]
mov ecx, dword [esp + 0x44]
mov edx, esi
sub ecx, 1
je 0x40c8f7
lea edx, [esi + ecx*4]
mov edx, dword [edx]
jmp 0x40c8a8
mov ecx, esi
mov esi, ebx
mov ebx, eax
movzx edx, byte [ecx + 1]
jmp 0x40b07b
mov dword [esp + 0x18], ebp
mov ebx, eax
mov ebp, dword [esp + 0x58]
jmp 0x40c1ba
mov eax, ebp
test ah, 4
mov eax, 0xffffffff
cmove eax, dword [esp + 0x24]
jmp 0x40c687
mov ebp, dword [esp + 0x14]
mov ecx, dword [esp + 0x28]
mov dword [esp], 1
mov edx, ebp
call fcn.00409990
jmp 0x40a9bb
mov eax, dword [esp + 0x2c]
mov ebx, edi
mov edi, dword [esp + 0x18]
add eax, 1
sub eax, edi
add ebx, eax
movzx ebx, byte [ebx]
jmp 0x40b63e
cmp edi, ebx
jae 0x40ca32
mov eax, dword [esp + 0x20]
mov ebx, edi
mov edx, dword [eax]
jmp 0x40baf1
test esi, esi
jle 0x40c97d
sub esi, 1
mov ecx, dword [esp + 0x80]
mov eax, dword [esp + 0x18]
mov edx, edi
call fcn.004097f0
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x54], ebp
mov dword [esp + 0x80], eax
add ecx, 2
mov byte [eax + edx], bl
mov dword [esp + 0x48], 0x419cee
mov ebp, ecx
jmp 0x40c9b8
mov ebp, dword [esp + 0x18]
test esi, esi
je 0x40a9bb
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x14]
call fcn.00409900
mov ebx, eax
cmp eax, 0xffffffff
je 0x40a9bb
mov dword [esp], eax
call sub.msvcrt.dll_tolower
mov edx, eax
mov eax, dword [esp + 0x48]
movsx eax, byte [eax + 1]
cmp edx, eax
jne 0x40a9bb
test esi, esi
jle 0x40c9f9
sub esi, 1
mov ecx, dword [esp + 0x80]
mov edx, edi
mov eax, ebp
call fcn.004097f0
add dword [esp + 0x48], 1
lea ecx, [ebp + 1]
mov dword [esp + 0x80], eax
mov byte [eax + ebp], bl
mov eax, dword [esp + 0x48]
mov dword [esp + 0x18], ecx
cmp byte [eax + 1], 0
jne 0x40c9b4
mov ebp, dword [esp + 0x54]
jmp 0x40b4c5
mov eax, dword [esp + 0x4c]
test ah, 4
je 0x40ca67
or eax, 0xffffffff
lea edx, [esp + 0x80]
mov ecx, dword [esp + 0x20]
mov dword [esp], edx
lea edx, [esp + 0x74]
call fcn.00409870
mov dword [esp + 0x24], eax
jmp 0x409bb0
mov eax, dword [esp + 0x48]
test ah, 4
jne 0x40ca3b
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x40]
mov eax, dword [eax]
mov byte [eax + ecx - 1], 0
mov eax, dword [esp + 0x24]
mov dword [esp + 0x20], 0
add eax, 1
jmp 0x40ca3e
cmp edi, ebx
jae 0x40ca5e
mov eax, dword [esp + 0x20]
mov ebx, edi
mov edx, dword [eax]
jmp 0x40c035
mov ebp, dword [esp + 0x5c]
jmp 0x40b779
mov edx, dword [esp + 0x44]
xor ecx, ecx
jmp 0x40caae
mov ecx, 1
sub edx, 1
jne 0x40caa9
jmp 0x40bee5
mov esi, dword [esp + 0x30]
mov ecx, dword [esp + 0x44]
mov edx, esi
sub ecx, 1
je 0x40caca
lea edx, [esi + ecx*4]
mov edx, dword [edx]
jmp 0x40c281
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x18]
cmp eax, ecx
jae 0x40cb17
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x18], eax
mov ecx, dword [ecx]
jmp 0x40b983
mov esi, ebx
mov ebx, eax
jmp 0x40b083
cmp dword [esp + 0x44], 0
je 0x40c2b1
mov edx, dword [esp + 0x44]
xor ecx, ecx
jmp 0x40cb0d
mov ecx, 1
sub edx, 1
jne 0x40cb08
jmp 0x40c8cd
mov eax, dword [esp + 0x64]
test ah, 4
jne 0x40ca3b
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x40]
mov eax, dword [eax]
mov word [eax + ecx*2 - 2], 0
mov eax, dword [esp + 0x24]
mov dword [esp + 0x20], 0
add eax, 1
jmp 0x40ca3e
mov esi, dword [esp + 0x30]
mov ecx, dword [esp + 0x44]
mov edx, esi
sub ecx, 1
je 0x40cb5b
lea edx, [esi + ecx*4]
mov edx, dword [edx]
mov dword [edx], eax
jmp 0x409bcc
cmp ebx, edi
jae 0x40a93e
mov eax, dword [esp + 0x20]
mov edi, ebx
mov edx, dword [eax]
jmp 0x40a781
mov ecx, dword [esp + 0x80]
mov edx, edi
mov eax, 1
call fcn.004097f0
mov edx, dword [esp + 0x28]
mov dword [esp + 0x80], eax
mov byte [eax + 1], bl
mov eax, ebp
and ah, 0xfe
or eax, 0x40
mov ebp, eax
mov eax, dword [esp + 0x14]
call fcn.00409900
mov ebx, eax
test esi, esi
jle 0x40cbe0
mov byte [esp + 0x48], 0x70
sub esi, 1
mov dword [esp + 0x18], 2
jmp 0x40aabd
mov eax, dword [eax]
mov dword [esp], ebx
mov dword [esp + 4], eax
call sub.msvcrt.dll_ungetc
sub dword [esp + 0x78], 1
jmp 0x40b30c
mov byte [esp + 0x48], 0x70
mov dword [esp + 0x18], 2
jmp 0x40aabd
mov ecx, dword [esp + 0x28]
cmp ecx, ebx
jae 0x40a93e
mov eax, dword [esp + 0x20]
mov ebx, ecx
mov eax, dword [eax]
jmp 0x40a51d
mov byte [esp + 0x5c], 1
jmp 0x40ab72
mov esi, dword [esp + 0x30]
mov ecx, dword [esp + 0x44]
mov edx, esi
sub ecx, 1
je 0x40cc27
lea edx, [esi + ecx*4]
mov edx, dword [edx]
jmp 0x40c34d
cmp ebx, esi
jae 0x40cc39
mov esi, ebx
jmp 0x40c61f
mov eax, dword [esp + 0x58]
test ah, 4
je 0x40cb24
jmp 0x40ca3b