Function at 0x40aee0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x144
mov edx, dword [ebp + 8]
xor eax, eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0x58], eax
mov edx, dword [edx]
mov eax, edx
shr eax, 0xb
and eax, 1
mov dword [esp + 0x2c], edx
mov dword [esp + 0x38], eax
mov eax, edx
push ebx
mov ebx, dword [ebp + 0x10]
and edx, 1
shr eax, 9
push esi
mov esi, dword [ebp + 0xc]
and eax, 1
mov ebx, dword [ebx]
mov dword [esp + 0x104], eax
xor eax, 1
push edi
mov esi, dword [esi]
xor edi, edi
mov dword [esp + 0x114], eax
xor eax, eax
mov dword [esp + 0x68], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0xc8], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0x14], esi
mov dword [esp + 0xc0], esi
mov dword [esp + 0xf4], esi
mov dword [esp + 0x7c], 0
mov dword [esp + 0xcc], 0
mov dword [esp + 0x10], ebx
mov dword [esp + 0x1c], edi
mov dword [esp + 0x8c], edi
mov dword [esp + 0xa0], edi
mov dword [esp + 0x6c], edi
mov dword [esp + 0x78], edi
mov dword [esp + 0x60], 0xfffffffe
mov dword [esp + 0x70], 0xfffffffe
mov dword [esp + 0x5c], 0xfffffffe
mov dword [esp + 0x3c], 0xfffffffe
mov dword [esp + 0xb8], edx
mov dword [esp + 0xb0], 0x7fffffeb
jmp 0x40afe8
mov eax, dword [esp + 0x28]
mov edi, dword [esp + 0x1c]
movzx ecx, byte [ebx]
mov dword [esp + 0x24], ecx
test ecx, ecx
jne 0x40b00a
test eax, eax
je 0x40b00a
mov ebx, eax
xor eax, eax
mov dword [esp + 0x10], ebx
mov dword [esp + 0x28], eax
movzx ecx, byte [ebx]
mov dword [esp + 0x24], ecx
cmp dword [ebp + 0x34], 0
mov edx, dword [ebp + 0x30]
je 0x40b0c7
mov eax, dword [edx + 0x10]
mov ecx, dword [edx + 0x3c]
add eax, 0xffffff9c
add eax, ecx
cmp esi, eax
ja 0x40ee4f
mov eax, dword [esp + 0xc0]
cmp esi, eax
jae 0x40b03b
mov esi, eax
mov dword [esp + 0x14], esi
mov eax, dword [ebp + 0x34]
mov ecx, esi
sub ecx, dword [esp + 0xc0]
mov edx, dword [eax]
mov eax, dword [esp + 0xb0]
sub eax, edx
cmp eax, ecx
jl 0x40ee38
sub edx, dword [esp + 0xc0]
mov eax, dword [ebp + 0x34]
add edx, esi
mov dword [eax], edx
test edi, edi
je 0x40b0b0
mov ecx, dword [esp + 0xf4]
cmp edi, ecx
jbe 0x40b0bb
mov eax, esi
sub eax, edi
push eax
push edi
push ecx
call sub.MSVCRT.dll_memmove
mov eax, dword [esp + 0x100]
add esp, 0xc
mov ebx, dword [esp + 0x10]
sub eax, edi
mov edi, dword [esp + 0xf4]
add esi, eax
mov edx, dword [ebp + 0x30]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x14], esi
mov dword [esp + 0xc0], esi
jmp 0x40b0d6
mov esi, dword [esp + 0xf4]
mov dword [esp + 0x14], esi
mov edx, dword [ebp + 0x30]
mov dword [esp + 0xc0], esi
jmp 0x40b0d6
mov eax, dword [edx + 0x3c]
add eax, dword [edx + 0x10]
cmp dword [edx + 0x20], eax
ja 0x40f360
mov ecx, dword [esp + 0x24]
test ecx, ecx
je 0x40b24a
cmp ecx, 0x5c
jne 0x40b108
cmp byte [ebx + 1], 0x45
lea eax, [ebx + 1]
jne 0x40b108
mov ebx, eax
mov dword [esp + 0x7c], 0
mov eax, dword [esp + 0x28]
inc ebx
mov dword [esp + 0x10], ebx
jmp 0x40afe8
cmp dword [esp + 0x7c], 0
je 0x40b224
mov edi, dword [esp + 0xac]
test edi, edi
je 0x40b150
cmp dword [ebp + 0x34], 0
jne 0x40b145
movzx ecx, byte [edi + 2]
movzx eax, byte [edi + 3]
shl ecx, 8
or ecx, eax
sub ebx, ecx
sub ebx, dword [edx + 0x18]
mov eax, ebx
mov byte [edi + 5], bl
sar eax, 8
mov byte [edi + 4], al
mov ebx, dword [esp + 0x10]
mov dword [esp + 0xac], 0
test dword [esp + 0x38], 0x4000
mov ecx, dword [esp + 0x24]
je case.0x40b4c5.1
mov word [esi], 0xff76
mov eax, ebx
sub eax, dword [edx + 0x18]
sar eax, 8
mov byte [esi + 2], al
lea eax, [esi + 6]
sub bl, byte [edx + 0x18]
mov byte [esi + 3], bl
mov word [esi + 4], 0
mov ebx, dword [esp + 0x10]
mov dword [esp + 0xac], esi
mov dword [esp + 0x14], eax
cmp dword [esp + 0x44], 0
mov esi, 1
mov byte [esp + 0x84], cl
je 0x40b1ca
cmp ecx, 0xc0
jb 0x40b1ca
mov al, byte [ebx + 1]
inc ebx
and al, 0xc0
cmp al, 0x80
jne 0x40b1ca
mov dword [esp + 0x10], ebx
movzx eax, byte [ebx]
inc ebx
mov byte [esp + esi + 0x84], al
inc esi
movzx eax, byte [ebx]
and al, 0xc0
cmp al, 0x80
je 0x40b1b1
mov ebx, dword [esp + 0x38]
mov edi, dword [ebp + 0x30]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x1c], edx
mov ecx, dword [edi + 0x20]
sub ecx, dword [edi + 0x10]
cmp dword [esp + 0x44], 0
mov dword [esp + 0x64], ecx
je 0x40ed13
test bl, 1
je 0x40ed13
movzx ebx, byte [esp + 0x84]
cmp ebx, 0xc0
jb 0x40ec95
test bl, 0x20
jne 0x40ebe8
movzx eax, byte [esp + 0x85]
and ebx, 0x1f
jmp 0x40ec8d
cmp ecx, 0x5c
jne 0x40b24a
cmp byte [ebx + 1], 0x51
lea eax, [ebx + 1]
jne 0x40b24a
mov ebx, eax
mov dword [esp + 0x7c], 1
mov eax, dword [esp + 0x28]
inc ebx
mov dword [esp + 0x10], ebx
jmp 0x40afe8
mov edi, dword [esp + 0x38]
and edi, 8
je 0x40b2ea
mov eax, dword [edx + 0xc]
mov esi, ebx
test byte [eax + ecx], 1
je 0x40b274
inc ebx
mov dword [esp + 0x10], ebx
movzx ecx, byte [ebx]
mov dword [esp + 0x24], ecx
test byte [eax + ecx], 1
jne 0x40b262
cmp ecx, 0x23
jne 0x40b2de
inc ebx
mov dword [esp + 0x10], ebx
mov al, byte [ebx]
mov byte [esp + 0x43], al
test al, al
je 0x40b2de
jmp 0x40b290
mov edx, dword [edx + 0x84]
test edx, edx
je 0x40b33e
mov eax, dword [ebp + 0x30]
mov ecx, dword [eax + 0x1c]
cmp ebx, ecx
jae 0x40b376
push dword [esp + 0x44]
add eax, 0x88
push eax
push ecx
push edx
push ebx
call fcn.00422520
mov ebx, dword [esp + 0x24]
add esp, 0x14
mov edx, dword [ebp + 0x30]
test eax, eax
je 0x40b378
add ebx, dword [edx + 0x88]
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0x24]
cmp ebx, esi
mov esi, dword [esp + 0x14]
ja 0x40afe0
cmp ecx, 0x28
jne 0x40b3cb
cmp byte [ebx + 1], 0x3f
jne 0x40b3f7
cmp byte [ebx + 2], 0x23
jne 0x40b3f7
add ebx, 3
mov dword [esp + 0x10], ebx
mov al, byte [ebx]
test al, al
je 0x40b327
cmp al, 0x29
je 0x40b3b0
inc ebx
mov dword [esp + 0x10], ebx
mov al, byte [ebx]
test al, al
jne 0x40b314
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x12
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [ebp + 0x30]
mov eax, dword [edx + 0x1c]
mov ecx, dword [edx + 0x88]
sub eax, ecx
cmp ebx, eax
ja 0x40b378
mov al, byte [esp + 0x43]
cmp al, byte [edx + 0x8c]
jne 0x40b378
cmp ecx, 1
je 0x40b2d0
mov al, byte [ebx + 1]
cmp al, byte [edx + 0x8d]
je 0x40b2d0
jmp 0x40b378
mov edx, eax
inc ebx
cmp dword [esp + 0x44], 0
mov dword [esp + 0x10], ebx
je 0x40b39d
mov al, byte [ebx]
and al, 0xc0
cmp al, 0x80
jne 0x40b39d
lea esp, [esp]
inc ebx
mov dword [esp + 0x10], ebx
mov al, byte [ebx]
and al, 0xc0
cmp al, 0x80
je 0x40b390
mov al, byte [ebx]
mov byte [esp + 0x43], al
test al, al
jne 0x40b290
jmp 0x40b2da
cmp byte [ebx], 0
je 0x40b327
mov edi, dword [esp + 0x1c]
inc ebx
mov eax, dword [esp + 0x28]
mov dword [esp + 0x10], ebx
jmp 0x40afe8
cmp ecx, 0x2a
je 0x40b45e
cmp ecx, 0x2b
je 0x40b45e
cmp ecx, 0x3f
je 0x40b45e
cmp ecx, 0x7b
jne 0x40b3f7
lea eax, [ebx + 1]
push eax
call fcn.004110b0
add esp, 4
test eax, eax
jne 0x40b45e
mov ecx, dword [esp + 0xac]
xor edx, edx
mov eax, dword [esp + 0x28]
test ecx, ecx
je 0x40b467
test eax, eax
jne 0x40b467
mov eax, dword [esp + 0xc8]
dec dword [esp + 0xc8]
test eax, eax
jg 0x40b463
cmp dword [ebp + 0x34], edx
jne 0x40b455
mov eax, dword [esp + 0xac]
movzx ecx, byte [ecx + 2]
shl ecx, 8
movzx eax, byte [eax + 3]
or ecx, eax
mov eax, dword [ebp + 0x30]
sub ebx, ecx
mov ecx, dword [esp + 0xac]
sub ebx, dword [eax + 0x18]
mov eax, ebx
mov byte [ecx + 5], bl
sar eax, 8
mov byte [ecx + 4], al
mov ebx, dword [esp + 0x10]
mov dword [esp + 0xac], edx
jmp 0x40b463
mov edx, 1
mov eax, dword [esp + 0x28]
test dword [esp + 0x38], 0x4000
je 0x40b4ae
test edx, edx
jne 0x40b4ae
test eax, eax
jne 0x40b4ae
mov byte [esi], 0x76
lea ecx, [esi + 1]
mov dword [esp + 0xac], esi
mov eax, ebx
mov esi, dword [ebp + 0x30]
mov byte [ecx], 0xff
sub eax, dword [esi + 0x18]
sar eax, 8
mov byte [ecx + 1], al
lea eax, [ecx + 5]
sub bl, byte [esi + 0x18]
mov byte [ecx + 2], bl
mov word [ecx + 3], dx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x14], eax
jmp 0x40b4b1
mov esi, dword [ebp + 0x30]
mov ecx, dword [esp + 0x24]
cmp ecx, 0x7c
ja case.0x40b4c5.1
movzx eax, byte [ecx + 0x40f3ac]
jmp dword [eax*4 + 0x40f378]
xor edi, edi
test byte [esp + 0x38], 2
mov dword [esp + 0x1c], edi
je 0x40b50e
cmp dword [esp + 0x3c], 0xfffffffe
jne 0x40b4f0
mov dword [esp + 0x3c], 0xffffffff
mov dword [esp + 0x70], 0xffffffff
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x28]
mov byte [esi], 0x1c
inc esi
mov ebx, dword [esp + 0x10]
inc ebx
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], ebx
jmp 0x40afe8
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x28]
mov byte [esi], 0x1b
inc esi
mov ebx, dword [esp + 0x10]
inc ebx
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], ebx
jmp 0x40afe8
mov esi, dword [esp + 0x14]
xor edi, edi
test byte [esp + 0x38], 2
mov dword [esp + 0x1c], edi
setne al
add al, 0x19
mov byte [esi], al
inc esi
mov ebx, dword [esp + 0x10]
mov eax, dword [esp + 0x28]
inc ebx
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], ebx
jmp 0x40afe8
mov edx, dword [esp + 0x3c]
cmp edx, 0xfffffffe
jne 0x40b569
or edx, 0xffffffff
mov dword [esp + 0x3c], edx
mov eax, dword [esp + 0x78]
mov ecx, dword [esi + 0x20]
sub ecx, dword [esi + 0x10]
mov edi, dword [esp + 0x14]
mov esi, edi
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x38]
shr eax, 2
and al, 1
mov dword [esp + 0x70], edx
or al, 0xc
mov dword [esp + 0x1c], edi
mov byte [esi], al
inc esi
mov ebx, dword [esp + 0x10]
mov eax, dword [esp + 0x28]
inc ebx
mov dword [esp + 0x64], ecx
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], ebx
jmp 0x40afe8
test dword [esi + 0x60], 0x2000000
je case.0x40b4c5.1
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x40
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 6
lea eax, [ebx + 1]
push 0x478200
push eax
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
mov eax, dword [esp + 0x10]
jne 0x40b61b
mov esi, dword [esp + 0x14]
add eax, 7
mov ebx, str._b__w_
mov dword [esp + 0x28], eax
mov dword [esp + 0x10], ebx
jmp 0x40afe4
push 6
inc eax
push str._:_:__
push eax
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x40b64d
mov eax, dword [esp + 0x10]
mov ebx, str._b___w_
mov esi, dword [esp + 0x14]
add eax, 7
mov dword [esp + 0x28], eax
mov dword [esp + 0x10], ebx
jmp 0x40afe4
mov ebx, dword [esp + 0x10]
mov edx, dword [esi + 0x20]
sub edx, dword [esi + 0x10]
mov edi, dword [esp + 0x14]
mov al, byte [ebx + 1]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x64], edx
cmp al, 0x3a
je 0x40b672
cmp al, 0x2e
je 0x40b672
cmp al, 0x3d
jne 0x40b68f
lea eax, [esp + 0x9c]
push eax
push ebx
call fcn.0040a380
mov ebx, dword [esp + 0x18]
add esp, 8
test eax, eax
jne 0x40ef2e
xor ecx, ecx
mov dword [esp + 0x34], ecx
inc ebx
mov dword [esp + 0x10], ebx
movzx eax, byte [ebx]
mov dword [esp + 0x30], eax
cmp eax, 0x5c
jne 0x40b6cd
inc ebx
cmp byte [ebx], 0x45
je 0x40b695
push 3
push 0x478210
push ebx
call sub.MSVCRT.dll_strncmp
mov ebx, dword [esp + 0x1c]
add esp, 0xc
test eax, eax
jne 0x40b6e3
mov ecx, dword [esp + 0x34]
add ebx, 3
jmp 0x40b695
test ecx, ecx
jne 0x40b794
cmp eax, 0x5e
jne 0x40b794
lea ecx, [eax - 0x5d]
jmp 0x40b691
mov eax, dword [esp + 0x30]
xor ecx, ecx
mov dword [esp + 0x50], ecx
mov dword [esp + 0x4c], ecx
lea ecx, [edi + 4]
mov edx, ecx
mov dword [esp + 0x2c], ecx
xor ecx, ecx
mov dword [esp + 0x20], edx
xor edi, edi
mov dword [esp + 0x60], ecx
mov dword [esp + 0x24], edi
mov dword [esp + 0x18], ecx
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xd4], ecx
mov dword [esp + 0xd8], ecx
mov dword [esp + 0xdc], ecx
mov dword [esp + 0xe0], ecx
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xec], ecx
test eax, eax
je 0x40ef17
mov edi, edi
cmp dword [esp + 0x44], 0
je 0x40b8c0
cmp eax, 0xc0
jb 0x40b8c0
movzx eax, byte [ebx]
mov dword [esp + 0x30], eax
cmp eax, 0xc0
jb 0x40b8c0
test al, 0x20
jne 0x40b7f4
mov ecx, dword [esp + 0x30]
inc ebx
and ecx, 0x1f
shl ecx, 6
movzx eax, byte [ebx]
and eax, 0x3f
or eax, ecx
jmp 0x40b8b8
cmp eax, 0x5d
jne 0x40b6e7
test dword [esi + 0x60], 0x2000000
je 0x40b6e7
mov esi, dword [esp + 0x14]
neg ecx
sbb cl, cl
and cl, 0x70
add cl, 0x9d
mov byte [esi], cl
inc esi
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x14], esi
cmp ecx, 0xfffffffe
jne 0x40b7cf
or ecx, 0xffffffff
mov dword [esp + 0x3c], ecx
mov ebx, dword [esp + 0x10]
mov eax, dword [esp + 0x78]
inc ebx
mov edi, dword [esp + 0x1c]
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x70], ecx
mov dword [esp + 0x10], ebx
jmp 0x40afe8
movzx ecx, byte [ebx + 1]
and ecx, 0x3f
test al, 0x10
jne 0x40b81b
and eax, 0xf
shl eax, 6
or ecx, eax
movzx eax, byte [ebx + 2]
shl ecx, 6
and eax, 0x3f
or eax, ecx
add ebx, 2
jmp 0x40b8b4
test al, 8
jne 0x40b844
and eax, 7
shl eax, 6
or ecx, eax
movzx eax, byte [ebx + 2]
and eax, 0x3f
shl ecx, 6
or ecx, eax
movzx eax, byte [ebx + 3]
shl ecx, 6
and eax, 0x3f
or eax, ecx
add ebx, 3
jmp 0x40b8b4
test al, 4
jne 0x40b879
and eax, 3
shl eax, 6
or ecx, eax
movzx eax, byte [ebx + 2]
and eax, 0x3f
shl ecx, 6
or ecx, eax
movzx eax, byte [ebx + 3]
and eax, 0x3f
shl ecx, 6
or ecx, eax
movzx eax, byte [ebx + 4]
shl ecx, 6
and eax, 0x3f
or eax, ecx
add ebx, 4
jmp 0x40b8b4
and eax, 1
shl eax, 6
or ecx, eax
movzx eax, byte [ebx + 2]
and eax, 0x3f
shl ecx, 6
or ecx, eax
movzx eax, byte [ebx + 3]
and eax, 0x3f
shl ecx, 6
or ecx, eax
movzx eax, byte [ebx + 4]
and eax, 0x3f
shl ecx, 6
or ecx, eax
movzx eax, byte [ebx + 5]
shl ecx, 6
and eax, 0x3f
or eax, ecx
add ebx, 5
mov edx, dword [esp + 0x20]
mov dword [esp + 0x30], eax
mov dword [esp + 0x10], ebx
cmp dword [esp + 0x2c], edx
jbe 0x40b8ce
mov dword [esp + 0x4c], 1
cmp dword [ebp + 0x34], 0
je 0x40b8ea
mov ecx, dword [esp + 0x2c]
cmp ecx, edx
jbe 0x40b8ea
mov esi, dword [ebp + 0x34]
sub ecx, edx
mov dword [esp + 0x2c], edx
add dword [esi], ecx
mov esi, dword [ebp + 0x30]
cmp dword [esp + 0x7c], 0
je 0x40b916
cmp eax, 0x5c
jne 0x40bf1f
cmp byte [ebx + 1], 0x45
lea eax, [ebx + 1]
jne 0x40bf1f
mov dword [esp + 0x7c], 0
mov ebx, eax
jmp 0x40c21f
cmp eax, 0x5b
jne 0x40bba1
mov al, byte [ebx + 1]
cmp al, 0x3a
je 0x40b932
cmp al, 0x2e
je 0x40b932
cmp al, 0x3d
jne 0x40bf1f
lea eax, [esp + 0x9c]
push eax
push ebx
call fcn.0040a380
mov ebx, dword [esp + 0x18]
add esp, 8
test eax, eax
je 0x40bf1f
mov eax, dword [esi + 8]
xor edi, edi
cmp byte [ebx + 1], 0x3a
mov dword [esp + 0x8c], edi
mov dword [esp + 0x90], eax
jne 0x40ee8a
add ebx, 2
mov dword [esp + 0x10], ebx
cmp byte [ebx], 0x5e
jne 0x40b98d
mov edi, 1
inc ebx
mov dword [esp + 0x8c], edi
mov dword [esp + 0x50], edi
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x9c]
sub eax, ebx
push eax
push ebx
call fcn.0040a330
mov esi, eax
add esp, 8
test esi, esi
js 0x40ee6f
mov ecx, dword [esp + 0x38]
test cl, 1
je 0x40b9be
xor eax, eax
cmp esi, 2
setle al
dec eax
and esi, eax
test ecx, 0x20000000
je 0x40ba61
mov eax, edi
neg eax
sbb eax, eax
and eax, 0xe
add eax, esi
mov ebx, dword [eax*4 + 0x4977e8]
test ebx, ebx
je 0x40b9f9
mov eax, dword [esp + 0x9c]
mov edi, dword [esp + 0x24]
inc eax
mov esi, dword [ebp + 0x30]
dec ebx
mov dword [esp + 0x28], eax
jmp 0x40c21b
mov eax, esi
sub eax, 8
je 0x40bac0
dec eax
je 0x40bab9
dec eax
je 0x40bab2
test edi, edi
je 0x40ba61
cmp dword [esp + 0x4c], 0
jne 0x40ba2a
mov eax, dword [esp + 0x9c]
cmp byte [eax + 2], 0x5d
je 0x40ba61
mov eax, dword [esp + 0x2c]
mov byte [eax], 2
mov eax, dword [esp + 0x2c]
inc eax
push eax
push 0x100
mov dword [esp + 0x34], eax
call fcn.00421e50
mov ecx, dword [esp + 0x34]
add ecx, eax
push ecx
push 0x10ffff
mov dword [esp + 0x3c], ecx
call fcn.00421e50
add esp, 0x10
add dword [esp + 0x2c], eax
mov ebx, dword [esp + 0x90]
lea eax, [esi + esi*2]
mov esi, dword [eax*4 + 0x476f48]
lea edi, [esp + 0x130]
mov edx, dword [eax*4 + 0x476f4c]
add esi, ebx
mov ecx, 8
rep movsd dword es:[edi], dword [esi]
mov esi, dword [eax*4 + 0x476f50]
test edx, edx
js 0x40bb22
xor ecx, ecx
add edx, ebx
test esi, esi
js 0x40bb10
mov al, byte [edx + ecx]
or byte [esp + ecx + 0x130], al
inc ecx
cmp ecx, 0x20
jb 0x40baa0
jmp 0x40bb22
mov edx, 0xd
jmp 0x40bac5
mov edx, 0xc
jmp 0x40bac5
mov edx, 0xb
mov eax, dword [esp + 0x2c]
test edi, edi
mov ebx, dword [esp + 0x9c]
mov edi, dword [esp + 0x24]
setne cl
mov esi, dword [ebp + 0x30]
add cl, 3
mov byte [eax], cl
mov ecx, 1
mov eax, dword [esp + 0x2c]
inc eax
mov dword [esp + 0x18], ecx
mov dword [esp + 0x2c], eax
mov byte [eax], dl
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x20]
inc eax
mov dword [esp + 0x2c], eax
mov byte [eax], 0
inc dword [esp + 0x2c]
inc ebx
jmp 0x40c223
mov al, byte [edx + ecx]
not al
and byte [esp + ecx + 0x130], al
inc ecx
cmp ecx, 0x20
jb 0x40bb10
test esi, esi
jns 0x40bb28
neg esi
cmp esi, 1
jne 0x40bb37
and byte [esp + 0x131], 0xc3
jmp 0x40bb44
cmp esi, 2
jne 0x40bb44
and byte [esp + 0x13b], 0x7f
xor ecx, ecx
cmp dword [esp + 0x8c], ecx
je 0x40bb70
nop
mov al, byte [esp + ecx + 0x130]
not al
or byte [esp + ecx + 0xd0], al
inc ecx
cmp ecx, 0x20
jb 0x40bb50
jmp 0x40bb84
mov al, byte [esp + ecx + 0x130]
or byte [esp + ecx + 0xd0], al
inc ecx
cmp ecx, 0x20
jb 0x40bb70
mov ebx, dword [esp + 0x9c]
mov edi, 1
mov esi, dword [ebp + 0x30]
inc ebx
mov dword [esp + 0x60], 2
jmp 0x40c217
cmp eax, 0x5c
jne 0x40bf1f
mov ebx, dword [ebp + 0x14]
lea eax, [esp + 0xf8]
push 1
push dword [esp + 0x3c]
push dword [esi + 0x40]
push ebx
push eax
lea eax, [esp + 0x24]
push eax
call fcn.00409b60
add esp, 0x18
mov esi, eax
cmp dword [ebx], 0
jne 0x40ee78
test esi, esi
jne 0x40bbf2
mov edx, dword [esp + 0xf8]
mov ebx, dword [esp + 0x10]
mov esi, dword [ebp + 0x30]
mov dword [esp + 0x30], edx
jmp 0x40bf23
cmp esi, 5
jne 0x40bc0c
mov ebx, dword [esp + 0x10]
mov edx, 8
mov esi, dword [ebp + 0x30]
mov dword [esp + 0x30], edx
jmp 0x40bf23
cmp esi, 0xc
je 0x40eeb9
cmp esi, 0x1a
jne 0x40bc45
mov ebx, dword [esp + 0x10]
cmp byte [ebx + 1], 0x5c
jne 0x40bc35
cmp byte [ebx + 2], 0x45
jne 0x40bc35
mov esi, dword [ebp + 0x30]
add ebx, 2
jmp 0x40c21b
mov esi, dword [ebp + 0x30]
mov dword [esp + 0x7c], 1
jmp 0x40c21b
cmp esi, 0x19
je 0x40bcb1
mov eax, dword [ebp + 0x30]
inc edi
mov ecx, dword [esp + 0x60]
add ecx, 2
mov dword [esp + 0x24], edi
mov dword [esp + 0x60], ecx
mov edx, dword [eax + 8]
lea eax, [esi - 6]
cmp eax, 0x1c
ja case.0x40bc73.12
movzx eax, byte [eax + 0x40f460]
jmp dword [eax*4 + 0x40f42c]
mov ebx, dword [esi*4 + 0x49775c]
mov eax, dword [esp + 0x10]
dec ebx
mov esi, dword [ebp + 0x30]
dec edi
mov dword [esp + 0x28], eax
jmp 0x40c217
xor ecx, ecx
jmp 0x40bca0
mov al, byte [edx + ecx + 0x40]
or byte [esp + ecx + 0xd0], al
inc ecx
cmp ecx, 0x20
jb 0x40bca0
mov ebx, dword [esp + 0x10]
mov esi, dword [ebp + 0x30]
jmp 0x40c21b
mov dword [esp + 0x50], 1
xor ecx, ecx
jmp 0x40bcd0
mov al, byte [edx + ecx + 0x40]
not al
or byte [esp + ecx + 0xd0], al
inc ecx
cmp ecx, 0x20
jb 0x40bcd0
mov ebx, dword [esp + 0x10]
mov esi, dword [ebp + 0x30]
jmp 0x40c21b
xor ecx, ecx
mov al, byte [edx + ecx + 0xa0]
or byte [esp + ecx + 0xd0], al
inc ecx
cmp ecx, 0x20
jb 0x40bcf1
mov ebx, dword [esp + 0x10]
mov esi, dword [ebp + 0x30]
jmp 0x40c21b
mov dword [esp + 0x50], 1
xor ecx, ecx
jmp 0x40bd20
mov al, byte [edx + ecx + 0xa0]
not al
or byte [esp + ecx + 0xd0], al
inc ecx
cmp ecx, 0x20
jb 0x40bd20
mov ebx, dword [esp + 0x10]
mov esi, dword [ebp + 0x30]
jmp 0x40c21b
lea eax, [esp + 0xd0]
xor esi, esi
sub edx, eax
lea ecx, [ecx]
lea ecx, [esp + 0xd0]
add ecx, esi
inc esi
mov al, byte [edx + ecx]
or byte [ecx], al
cmp esi, 0x20
jb 0x40bd50
mov ebx, dword [esp + 0x10]
mov esi, dword [ebp + 0x30]
jmp 0x40c21b
lea eax, [esp + 0xd0]
mov dword [esp + 0x50], 1
xor esi, esi
sub edx, eax
lea ecx, [esp + 0xd0]
add ecx, esi
inc esi
mov al, byte [edx + ecx]
not al
or byte [ecx], al
cmp esi, 0x20
jb 0x40bd83
mov ebx, dword [esp + 0x10]
mov esi, dword [ebp + 0x30]
jmp 0x40c21b
mov esi, dword [ebp + 0x30]
lea eax, [esp + 0x2c]
push 0xffffffffffffffff
push 0x478d18
push esi
push dword [esp + 0x44]
push eax
lea eax, [esp + 0xe4]
push eax
call fcn.00408e90
mov ebx, dword [esp + 0x28]
add esp, 0x18
jmp 0x40c21b
mov esi, dword [ebp + 0x30]
lea eax, [esp + 0x2c]
push 0x478d18
push esi
push dword [esp + 0x40]
push eax
lea eax, [esp + 0xe0]
push eax
call fcn.00408fe0
mov ebx, dword [esp + 0x24]
add esp, 0x14
jmp 0x40c21b
mov esi, dword [ebp + 0x30]
lea eax, [esp + 0x2c]
push 0xffffffffffffffff
push 0x478d68
push esi
push dword [esp + 0x44]
push eax
lea eax, [esp + 0xe4]
push eax
call fcn.00408e90
mov ebx, dword [esp + 0x28]
add esp, 0x18
jmp 0x40c21b
mov esi, dword [ebp + 0x30]
lea eax, [esp + 0x2c]
push 0x478d68
push esi
push dword [esp + 0x40]
push eax
lea eax, [esp + 0xe0]
push eax
call fcn.00408fe0
mov ebx, dword [esp + 0x24]
add esp, 0x14
jmp 0x40c21b
push ebx
lea eax, [esp + 0x110]
mov dword [esp + 0x114], 0
push eax
lea eax, [esp + 0x118]
mov dword [esp + 0x114], 0
push eax
lea eax, [esp + 0x134]
push eax
lea eax, [esp + 0x20]
push eax
call fcn.00410e40
add esp, 0x14
test eax, eax
je 0x40ee78
xor eax, eax
mov edx, dword [esp + 0x20]
cmp esi, 0x10
mov esi, dword [ebp + 0x30]
sete al
cmp eax, dword [esp + 0x128]
mov eax, dword [esp + 0x2c]
sete cl
add cl, 3
mov byte [eax], cl
mov ecx, dword [esp + 0x2c]
movzx eax, byte [esp + 0x110]
inc ecx
mov dword [esp + 0x2c], ecx
mov byte [ecx], al
mov ecx, dword [esp + 0x2c]
movzx eax, byte [esp + 0x10c]
inc ecx
mov dword [esp + 0x2c], ecx
mov byte [ecx], al
mov ecx, 1
inc dword [esp + 0x2c]
dec edi
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x24], edi
jmp 0x40c223
test byte [esp + 0x38], 0x40
jne 0x40eea1
mov ebx, dword [esp + 0x10]
dec edi
mov esi, dword [ebp + 0x30]
sub ecx, 2
mov dword [esp + 0x60], ecx
movzx edx, byte [ebx]
mov dword [esp + 0x30], edx
jmp 0x40bf23
mov edx, dword [esp + 0x30]
cmp byte [ebx + 1], 0x5c
jne 0x40bf4d
lea esp, [esp]
cmp byte [ebx + 2], 0x45
lea eax, [ebx + 2]
jne 0x40bf4d
mov ebx, eax
mov dword [esp + 0x7c], 0
mov dword [esp + 0x10], ebx
cmp byte [ebx + 1], 0x5c
je 0x40bf30
mov ecx, ebx
cmp edx, 0xd
je 0x40bf59
cmp edx, 0xa
jne 0x40bf60
or dword [esi + 0x64], 0x800
cmp dword [esp + 0x7c], 0
jne 0x40c1ca
cmp byte [ebx + 1], 0x2d
jne 0x40c1ca
add ebx, 2
mov dword [esp + 0x10], ebx
cmp byte [ebx], 0x5c
jne 0x40bfce
cmp byte [ebx + 1], 0x45
jne 0x40bf95
add ebx, 2
mov dword [esp + 0x10], ebx
cmp byte [ebx], 0x5c
je 0x40bf81
jmp 0x40bfce
cmp byte [ebx], 0x5c
jne 0x40bfce
lea ebx, [ebx]
cmp byte [ebx + 1], 0x51
jne 0x40bfce
add ebx, 2
mov dword [esp + 0x10], ebx
cmp byte [ebx], 0x5c
jne 0x40bfc6
cmp byte [ebx + 1], 0x45
jne 0x40bfc6
add ebx, 2
mov dword [esp + 0x10], ebx
cmp byte [ebx], 0x5c
je 0x40bfa0
jmp 0x40bfce
mov dword [esp + 0x7c], 1
mov al, byte [ebx]
test al, al
je 0x40c1c4
cmp dword [esp + 0x7c], 0
jne 0x40bfe7
cmp al, 0x5d
je 0x40c1c4
cmp dword [esp + 0x44], 0
movzx eax, al
mov dword [esp + 0x24], eax
mov dword [esp + 0xa4], eax
je 0x40c0fa
cmp eax, 0xc0
jb 0x40c0fa
test al, 0x20
jne 0x40c027
mov ecx, dword [esp + 0x24]
inc ebx
and ecx, 0x1f
shl ecx, 6
movzx eax, byte [ebx]
and eax, 0x3f
or eax, ecx
jmp 0x40c0eb
movzx ecx, byte [ebx + 1]
mov edx, dword [esp + 0x30]
and ecx, 0x3f
test al, 0x10
jne 0x40c052
and eax, 0xf
shl eax, 6
or ecx, eax
movzx eax, byte [ebx + 2]
shl ecx, 6
and eax, 0x3f
or eax, ecx
add ebx, 2
jmp 0x40c0eb
test al, 8
jne 0x40c07b
and eax, 7
shl eax, 6
or ecx, eax
movzx eax, byte [ebx + 2]
and eax, 0x3f
shl ecx, 6
or ecx, eax
movzx eax, byte [ebx + 3]
shl ecx, 6
and eax, 0x3f
or eax, ecx
add ebx, 3
jmp 0x40c0eb
test al, 4
jne 0x40c0b0
and eax, 3
shl eax, 6
or ecx, eax
movzx eax, byte [ebx + 2]
and eax, 0x3f
shl ecx, 6
or ecx, eax
movzx eax, byte [ebx + 3]
and eax, 0x3f
shl ecx, 6
or ecx, eax
movzx eax, byte [ebx + 4]
shl ecx, 6
and eax, 0x3f
or eax, ecx
add ebx, 4
jmp 0x40c0eb
and eax, 1
shl eax, 6
or ecx, eax
movzx eax, byte [ebx + 2]
and eax, 0x3f
shl ecx, 6
or ecx, eax
movzx eax, byte [ebx + 3]
and eax, 0x3f
shl ecx, 6
or ecx, eax
movzx eax, byte [ebx + 4]
and eax, 0x3f
shl ecx, 6
or ecx, eax
movzx eax, byte [ebx + 5]
shl ecx, 6
and eax, 0x3f
or eax, ecx
add ebx, 5
mov dword [esp + 0x24], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0x10], ebx
cmp dword [esp + 0x7c], 0
jne 0x40c19a
cmp eax, 0x5c
jne 0x40c169
mov ebx, dword [ebp + 0x14]
lea eax, [esp + 0xa4]
push 1
push dword [esp + 0x3c]
push dword [esi + 0x40]
push ebx
push eax
lea eax, [esp + 0x24]
push eax
call fcn.00409b60
add esp, 0x18
cmp dword [ebx], 0
jne 0x40ee78
test eax, eax
je 0x40c158
cmp eax, 5
jne 0x40eed1
mov ebx, dword [esp + 0x10]
mov ecx, 8
mov edx, dword [esp + 0x30]
mov dword [esp + 0xa4], ecx
jmp 0x40c19e
mov ebx, dword [esp + 0x10]
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp + 0x30]
jmp 0x40c19e
cmp eax, 0x5b
jne 0x40c19a
mov al, byte [ebx + 1]
cmp al, 0x3a
je 0x40c17d
cmp al, 0x2e
je 0x40c17d
cmp al, 0x3d
jne 0x40c19a
lea eax, [esp + 0x9c]
push eax
push ebx
call fcn.0040a380
mov ebx, dword [esp + 0x18]
add esp, 8
test eax, eax
jne 0x40eee9
mov ecx, dword [esp + 0x24]
cmp ecx, edx
jb 0x40ef00
je 0x40c1ca
mov dword [esp + 0x60], 2
cmp ecx, 0xd
je 0x40c1ba
cmp ecx, 0xa
jne 0x40c1c1
or dword [esi + 0x64], 0x800
push ecx
jmp 0x40c1f6
mov ebx, ecx
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x60]
cmp eax, 2
jge 0x40c1d8
inc eax
mov dword [esp + 0x60], eax
cmp dword [esp + 0x7c], 0
jne 0x40c1f5
cmp dword [esp + 0x18], 0
jne 0x40c1f5
cmp eax, 1
jne 0x40c1f5
cmp byte [ebx + 1], 0x5d
je 0x40c3ab
push edx
push edx
push esi
push dword [esp + 0x44]
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0xe4]
push eax
call fcn.004092a0
mov ebx, dword [esp + 0x28]
add esp, 0x18
add edi, eax
mov dword [esp + 0x24], edi
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
inc ebx
mov dword [esp + 0x10], ebx
movzx eax, byte [ebx]
mov dword [esp + 0x30], eax
test eax, eax
jne 0x40c25d
mov eax, dword [esp + 0x28]
test eax, eax
je 0x40ef17
lea ebx, [eax + 1]
mov dword [esp + 0x28], 0
mov dword [esp + 0x10], ebx
movzx eax, byte [ebx]
mov dword [esp + 0x30], eax
test eax, eax
je 0x40ef17
cmp eax, 0x5d
jne 0x40b750
cmp dword [esp + 0x7c], 0
jne 0x40b750
mov eax, 1
cmp dword [esp + 0x2c], edx
ja 0x40c280
mov eax, dword [esp + 0x4c]
mov ebx, dword [esp + 0x3c]
cmp ebx, 0xfffffffe
jne 0x40c290
or ebx, 0xffffffff
mov dword [esp + 0x3c], ebx
mov esi, dword [esp + 0x78]
mov dword [esp + 0x70], ebx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 0x8c], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 0xa0], esi
mov dword [esp + 0x60], ebx
test eax, eax
je 0x40c504
mov eax, dword [esp + 0x38]
test ecx, ecx
mov ecx, dword [esp + 0x50]
jne 0x40c2d5
test ecx, ecx
je 0x40c2d5
test eax, 0x20000000
je 0x40c508
cmp dword [esp + 0x44], 0
mov esi, dword [esp + 0x34]
je 0x40c326
test ecx, ecx
je 0x40c326
test esi, esi
jne 0x40c326
test eax, 0x20000000
jne 0x40c326
mov eax, dword [esp + 0x2c]
mov byte [eax], 2
mov eax, dword [esp + 0x2c]
inc eax
push eax
push 0x100
mov dword [esp + 0x34], eax
call fcn.00421e50
mov ecx, dword [esp + 0x34]
add ecx, eax
push ecx
push 0x10ffff
mov dword [esp + 0x3c], ecx
call fcn.00421e50
add esp, 0x10
add dword [esp + 0x2c], eax
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov byte [eax], 0
inc dword [esp + 0x2c]
test esi, esi
mov byte [ecx], 0x70
setne al
mov byte [ecx + 3], al
test ebx, ebx
je 0x40c34d
or al, 4
mov byte [ecx + 3], al
test edi, edi
jle 0x40c4e2
or byte [ecx + 3], 2
add ecx, 4
mov eax, dword [esp + 0x2c]
sub eax, ecx
mov dword [esp + 0x14], ecx
push eax
push ecx
lea eax, [ecx + 0x20]
push eax
call sub.MSVCRT.dll_memmove
add esp, 0xc
test esi, esi
je 0x40c38d
test ebx, ebx
jne 0x40c38d
xor ecx, ecx
mov edi, edi
not byte [esp + ecx + 0xd0]
inc ecx
cmp ecx, 0x20
jb 0x40c380
mov edi, dword [esp + 0x14]
lea esi, [esp + 0xd0]
mov ecx, 8
rep movsd dword es:[edi], dword [esi]
mov edx, dword [esp + 0x2c]
add edx, 0x20
jmp 0x40c4e6
mov eax, dword [esp + 0x6c]
inc ebx
mov esi, dword [esp + 0x34]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x60], eax
test esi, esi
je 0x40c4ad
mov ecx, dword [esp + 0x3c]
cmp ecx, 0xfffffffe
jne 0x40c3df
or ecx, 0xffffffff
mov dword [esp + 0x3c], ecx
mov eax, dword [esp + 0x78]
mov ebx, dword [esp + 0x44]
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x70], ecx
test ebx, ebx
je 0x40c468
test al, 1
je 0x40c46a
mov eax, edx
cdq
and edx, 0x7f
add eax, edx
mov edx, dword [esp + 0x30]
sar eax, 7
movzx ecx, byte [eax + 0x47a5f8]
mov eax, edx
shl ecx, 7
and eax, 0x8000007f
jns 0x40c425
dec eax
or eax, 0xffffff80
inc eax
add ecx, eax
movzx eax, word [ecx*2 + 0x47c7f8]
movzx eax, byte [eax*8 + 0x478f7b]
test eax, eax
je 0x40c464
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
mov word [esi], 0x90f
mov byte [esi + 2], al
add esi, 3
mov ebx, dword [esp + 0x10]
mov eax, dword [esp + 0x28]
inc ebx
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], ebx
jmp 0x40afe8
mov eax, dword [esp + 0x38]
test al, 1
mov esi, dword [esp + 0x14]
setne al
add al, 0x1f
mov byte [esi], al
inc esi
test ebx, ebx
je 0x40eb2c
cmp edx, 0x7f
jbe 0x40eb2c
push esi
push edx
call fcn.00421e50
mov ebx, dword [esp + 0x18]
add esp, 8
mov edi, dword [esp + 0x1c]
add esi, eax
mov eax, dword [esp + 0x28]
inc ebx
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], ebx
jmp 0x40afe8
cmp dword [esp + 0x44], 0
je 0x40c4d1
cmp edx, 0x7f
jbe 0x40c4d1
lea eax, [esp + 0x84]
push eax
push edx
call fcn.00421e50
add esp, 8
mov esi, eax
jmp 0x40b1ca
mov byte [esp + 0x84], dl
mov esi, 1
jmp 0x40b1ca
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x1c]
mov eax, edx
sub eax, ecx
mov dword [esp + 0x14], edx
sar eax, 8
mov byte [ecx + 1], al
mov al, dl
sub al, cl
mov byte [ecx + 2], al
jmp case.default.0x40d638
mov ecx, dword [esp + 0x50]
mov ebx, dword [ebp + 0x34]
test ebx, ebx
je 0x40c517
mov eax, dword [esp + 0x2c]
sub eax, edx
add dword [ebx], eax
mov esi, dword [esp + 0x34]
cmp esi, ecx
mov edx, dword [esp + 0x14]
setne al
add al, 0x6e
mov byte [edx], al
test ebx, ebx
jne 0x40c550
test esi, esi
je 0x40c53f
xor ecx, ecx
not byte [esp + ecx + 0xd0]
inc ecx
cmp ecx, 0x20
jb 0x40c532
mov ecx, 8
lea esi, [esp + 0xd0]
lea edi, [edx + 1]
rep movsd dword es:[edi], dword [esi]
add edx, 0x21
mov dword [esp + 0x14], edx
jmp case.default.0x40d638
test edx, edx
je case.0x40b4c5.1
mov edx, dword [ebp + 0x14]
lea eax, [esp + 0x80]
push edx
push eax
lea eax, [esp + 0x70]
push eax
lea eax, [ebx + 1]
push eax
call fcn.00411fc0
add esp, 0x10
mov ebx, eax
cmp dword [edx], 0
mov dword [esp + 0x10], ebx
jne 0x40f369
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x68]
jmp 0x40c5c3
xor ecx, ecx
or eax, 0xffffffff
jmp 0x40c5b5
mov ecx, 1
or eax, 0xffffffff
jmp 0x40c5b5
xor ecx, ecx
mov eax, 1
mov edx, dword [ebp + 0x14]
mov dword [esp + 0x68], ecx
mov dword [esp + 0x80], eax
mov esi, dword [esp + 0x1c]
mov dword [esp + 0x20], eax
test esi, esi
je 0x40ef6c
test ecx, ecx
jne 0x40c600
mov edx, dword [esp + 0xa0]
mov dword [esp + 0x78], edx
mov edx, dword [esp + 0x70]
mov dword [esp + 0x3c], edx
mov edx, dword [esp + 0x8c]
mov dword [esp + 0x6c], edx
mov edx, dword [esp + 0x60]
mov dword [esp + 0x5c], edx
mov edx, dword [ebp + 0x14]
sub ecx, eax
mov dword [esp + 0x4c], 0
neg ecx
mov dword [esp + 0x48], esi
sbb ecx, ecx
and ecx, 2
test edi, edi
mov edi, dword [ebp + 0x30]
mov dword [esp + 0xa8], ecx
je 0x40c6f5
inc ebx
jmp 0x40c630
mov ecx, dword [edi + 0xc]
movzx eax, byte [ebx]
test byte [eax + ecx], 1
je 0x40c64b
lea esp, [esp]
movzx eax, byte [ebx + 1]
inc ebx
test byte [eax + ecx], 1
jne 0x40c640
cmp byte [ebx], 0x23
jne 0x40c6ed
mov al, byte [ebx + 1]
inc ebx
mov byte [esp + 0x43], al
test al, al
je 0x40c630
mov edx, dword [edi + 0x84]
test edx, edx
je 0x40c693
mov ecx, dword [edi + 0x1c]
cmp ebx, ecx
jae 0x40c6be
push dword [esp + 0x44]
lea eax, [edi + 0x88]
push eax
push ecx
push edx
push ebx
call fcn.00422520
add esp, 0x14
test eax, eax
je 0x40c6be
add ebx, dword [edi + 0x88]
jmp 0x40c630
mov eax, dword [edi + 0x1c]
mov ecx, dword [edi + 0x88]
sub eax, ecx
cmp ebx, eax
ja 0x40c6be
mov al, byte [esp + 0x43]
cmp al, byte [edi + 0x8c]
jne 0x40c6be
cmp ecx, 1
je 0x40c68b
mov al, byte [ebx + 1]
cmp al, byte [edi + 0x8d]
je 0x40c68b
inc ebx
cmp dword [esp + 0x44], 0
je 0x40c6da
mov al, byte [ebx]
and al, 0xc0
cmp al, 0x80
jne 0x40c6da
mov edi, edi
mov al, byte [ebx + 1]
inc ebx
and al, 0xc0
cmp al, 0x80
je 0x40c6d0
mov al, byte [ebx]
mov byte [esp + 0x43], al
test al, al
jne 0x40c660
jmp 0x40c630
mov edx, dword [ebp + 0x14]
dec ebx
mov dword [esp + 0x10], ebx
cmp byte [ebx + 1], 0x28
jne 0x40c73c
cmp byte [ebx + 2], 0x3f
jne 0x40c73c
cmp byte [ebx + 3], 0x23
jne 0x40c73c
add ebx, 4
mov dword [esp + 0x10], ebx
mov al, byte [ebx]
test al, al
je 0x40c723
cmp al, 0x29
je 0x40c737
inc ebx
mov dword [esp + 0x10], ebx
mov al, byte [ebx]
test al, al
jne 0x40c714
mov eax, dword [ebp + 0x10]
mov dword [edx], 0x12
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp byte [ebx], 0
je 0x40c723
mov cl, byte [ebx + 1]
cmp cl, 0x2b
jne 0x40c75b
inc ebx
mov dword [esp + 0x18], 0
mov dword [esp + 0x4c], 1
mov dword [esp + 0x10], ebx
jmp 0x40c77d
cmp cl, 0x3f
jne 0x40c772
mov ecx, dword [esp + 0x114]
inc ebx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x10], ebx
jmp 0x40c77d
mov eax, dword [esp + 0x108]
mov dword [esp + 0x18], eax
cmp byte [esi], 0x75
jne 0x40c802
push 3
lea eax, [esi + 3]
push esi
push eax
call sub.MSVCRT.dll_memmove
mov word [esi], 0x81
add esp, 0xc
mov byte [esi + 2], 6
mov word [esi + 6], 0x78
mov byte [esi + 8], 6
mov esi, dword [esp + 0x14]
add esi, 6
mov dword [esp + 0xb4], 9
cmp dword [ebp + 0x34], 0
mov dword [esp + 0x14], esi
jne 0x40c7fc
mov eax, dword [edi + 0x10]
mov edx, dword [edi + 0x20]
add eax, 2
cmp edx, eax
jb 0x40c7fc
movzx ecx, byte [edx - 2]
movzx eax, byte [edx - 1]
shl ecx, 8
or ecx, eax
mov eax, dword [esp + 0x1c]
sub eax, dword [edi + 0x14]
inc eax
cmp ecx, eax
jne 0x40c7fc
lea eax, [ecx + 3]
sar eax, 8
add cl, 3
mov byte [edx - 2], al
mov eax, dword [edi + 0x20]
mov byte [eax - 1], cl
mov ebx, dword [esp + 0x10]
jmp 0x40c806
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
mov dl, byte [eax]
mov byte [esp + 0x43], dl
cmp dl, 0x1d
je 0x40cfa0
cmp dl, 0x1e
je 0x40cfa0
cmp dl, 0x1f
je 0x40cfa0
cmp dl, 0x20
je 0x40cfa0
cmp dl, 0x17
jae 0x40c84e
mov esi, 0x34
movzx ecx, dl
mov dword [esp + 0x34], esi
mov dword [esp + 0x24], ecx
jmp 0x40d063
cmp dl, 0x6e
je 0x40cf11
cmp dl, 0x6f
je 0x40cf11
cmp dl, 0x70
je 0x40cf11
cmp dl, 0x71
je 0x40cf11
cmp dl, 0x72
je 0x40cf11
cmp dl, 0x73
je 0x40cf11
cmp dl, 0x74
je 0x40cf11
cmp dl, 0x7d
jb 0x40cef1
cmp dl, 0x87
ja 0x40cef1
mov ecx, dword [esp + 0x1c]
mov eax, esi
mov esi, dword [esp + 0x64]
sub eax, ecx
mov dword [esp + 0x24], eax
xor eax, eax
mov dword [esp + 0x50], esi
mov dword [esp + 0x34], eax
mov dword [esp + 0x90], eax
cmp dl, 0x87
jne 0x40c8cf
cmp byte [ecx + 3], 0x91
je 0x40c94f
mov ecx, dword [esp + 0x68]
cmp dl, 0x81
jae 0x40c8fb
test ecx, ecx
jg 0x40c94f
mov eax, dword [esp + 0x20]
test eax, eax
js 0x40c8e9
cmp eax, 1
jle 0x40c8ff
mov eax, 1
mov dword [esp + 0x20], eax
mov dword [esp + 0x80], eax
jmp 0x40c8ff
mov eax, dword [esp + 0x20]
test ecx, ecx
jne 0x40c9f7
push dword [esp + 0x64]
push edi
push dword [esp + 0x4c]
cmp eax, 1
jg 0x40c998
mov eax, dword [esp + 0x20]
mov ebx, dword [esp + 0x28]
push 1
push ebx
mov byte [eax], cl
call fcn.004094b0
push dword [esp + 0x38]
lea edi, [ebx + 1]
push ebx
push edi
call sub.MSVCRT.dll_memmove
inc dword [esp + 0x34]
add esp, 0x20
mov edx, dword [esp + 0x20]
test edx, edx
jne 0x40c978
mov byte [ebx], 0xa1
mov ebx, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
mov edi, dword [ebp + 0x30]
mov eax, dword [esp + 0xa8]
or dword [edi + 0x68], eax
xor edi, edi
mov eax, dword [esp + 0x28]
inc ebx
mov dword [esp + 0x1c], 0
mov dword [esp + 0x10], ebx
jmp 0x40afe8
mov al, byte [esp + 0x18]
sub al, 0x6e
mov dword [esp + 0x90], ebx
mov byte [ebx], al
dec edx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x1c], edi
mov edi, dword [ebp + 0x30]
jmp 0x40cb6c
mov ebx, dword [esp + 0x20]
push 4
push dword [esp + 0x2c]
mov byte [ebx], 0
call fcn.004094b0
push dword [esp + 0x38]
mov eax, dword [esp + 0x34]
push eax
add eax, 4
push eax
call sub.MSVCRT.dll_memmove
mov ecx, dword [esp + 0x3c]
add ebx, 4
mov al, byte [esp + 0x38]
add esp, 0x20
mov edx, dword [esp + 0x20]
sub al, 0x6e
mov dword [esp + 0x14], ebx
mov byte [ecx], al
mov byte [ecx + 1], 0x83
add ecx, 2
mov dword [esp + 0x34], ecx
mov word [ecx], 0
add ecx, 2
mov ebx, dword [esp + 0x10]
dec edx
mov dword [esp + 0x1c], ecx
jmp 0x40cb6c
cmp ecx, 1
jle 0x40cb62
mov edx, dword [ebp + 0x34]
test edx, edx
je 0x40ca6f
dec ecx
mov dword [esp + 0x50], ecx
fild dword [esp + 0x50]
imul ecx, dword [esp + 0xb4]
fstp qword [esp + 0x50]
fld qword [esp + 0x50]
fild dword [esp + 0xb4]
fstp qword [esp + 0x50]
fmul qword [esp + 0x50]
fcomp qword [0x4782c0]
fnstsw ax
test ah, 0x41
je 0x40ef51
mov eax, dword [esp + 0xb0]
mov edx, dword [edx]
sub eax, edx
cmp eax, ecx
jl 0x40ef51
mov ebx, dword [esp + 0x10]
lea eax, [ecx + edx]
mov ecx, dword [ebp + 0x34]
mov edx, dword [esp + 0x80]
mov dword [ecx], eax
mov ecx, dword [esp + 0x68]
jmp 0x40cb66
cmp dword [esp + 0xcc], 0
je 0x40ca90
cmp dword [esp + 0x5c], 0
jge 0x40ca90
mov eax, dword [esp + 0x78]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x30], 1
cmp ecx, 1
jle 0x40cb62
mov ebx, dword [esp + 0x24]
mov esi, dword [edi + 0x20]
mov eax, dword [esp + 0x14]
sub esi, dword [edi + 0x10]
push ebx
push dword [esp + 0x20]
push eax
call sub.MSVCRT.dll_memcpy
mov eax, dword [edi + 0x3c]
add esp, 0xc
mov ecx, dword [ebp + 0x30]
sub eax, esi
add eax, dword [edi + 0x10]
mov edi, dword [esp + 0x50]
add eax, 0xffffff9c
add eax, edi
cmp dword [ecx + 0x20], eax
jbe 0x40cb01
push ecx
call fcn.0040fff0
mov ecx, dword [ebp + 0x14]
add esp, 4
mov dword [ecx], eax
test eax, eax
jne 0x40ee78
mov ecx, dword [ebp + 0x30]
mov eax, dword [ecx + 0x3c]
sub eax, esi
add eax, 0xffffff9c
add eax, dword [ecx + 0x10]
add eax, edi
cmp dword [ecx + 0x20], eax
ja 0x40cad6
mov eax, dword [ecx + 0x10]
lea edx, [edi + eax]
mov edi, dword [ebp + 0x30]
add eax, esi
cmp edx, eax
jae 0x40cb41
movzx ecx, byte [edx]
movzx eax, byte [edx + 1]
shl ecx, 8
or ecx, eax
mov eax, dword [edi + 0x20]
add ecx, ebx
sar ecx, 8
mov byte [eax], cl
mov cl, byte [edx + 1]
add edx, 2
mov eax, dword [edi + 0x20]
add cl, bl
mov byte [eax + 1], cl
add dword [edi + 0x20], 2
mov eax, dword [edi + 0x10]
add eax, esi
cmp edx, eax
jb 0x40cb10
mov eax, dword [esp + 0x30]
add dword [esp + 0x14], ebx
inc eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x50], esi
mov dword [esp + 0x30], eax
cmp eax, ecx
jl 0x40caa5
mov ebx, dword [esp + 0x10]
mov edx, dword [esp + 0x20]
test edx, edx
jle 0x40cb75
sub edx, ecx
mov dword [esp + 0x80], edx
test edx, edx
js 0x40cd99
cmp dword [ebp + 0x34], 0
je 0x40cbfb
test edx, edx
jle 0x40cbfb
mov ecx, dword [esp + 0xb4]
add ecx, 7
mov dword [esp + 0x90], ecx
fild dword [esp + 0x90]
imul ecx, edx
fstp qword [esp + 0x90]
fld qword [esp + 0x90]
fild dword [esp + 0x80]
sub ecx, 6
fstp qword [esp + 0x90]
fmul qword [esp + 0x90]
fcomp qword [0x4782c0]
fnstsw ax
test ah, 0x41
je 0x40ef51
mov ebx, dword [ebp + 0x34]
mov eax, dword [esp + 0xb0]
mov edx, dword [ebx]
sub eax, edx
cmp eax, ecx
jl 0x40ef51
lea eax, [ecx + edx]
mov dword [ebx], eax
jmp 0x40cd3f
lea eax, [edx - 1]
mov dword [esp + 0x50], eax
test eax, eax
js 0x40cd43
mov ecx, dword [esp + 0x18]
mov ebx, eax
mov eax, dword [esp + 0x24]
sub cl, 0x6e
mov dword [esp + 0x18], ecx
jmp 0x40cc23
mov edi, dword [ebp + 0x30]
mov edx, dword [ebp + 0x30]
mov edi, dword [edi + 0x20]
sub edi, dword [edx + 0x10]
mov edx, dword [esp + 0x14]
mov byte [edx], cl
inc edx
mov dword [esp + 0x14], edx
test ebx, ebx
je 0x40cc68
mov eax, dword [esp + 0x34]
mov byte [edx], 0x83
inc edx
test eax, eax
jne 0x40cc4b
xor ecx, ecx
jmp 0x40cc4f
mov ecx, edx
sub ecx, eax
mov eax, ecx
mov dword [esp + 0x34], edx
sar eax, 8
mov byte [edx], al
mov eax, dword [esp + 0x24]
mov byte [edx + 1], cl
add edx, 2
mov dword [esp + 0x14], edx
push eax
push dword [esp + 0x20]
push edx
call sub.MSVCRT.dll_memcpy
mov ecx, dword [ebp + 0x30]
add esp, 0xc
mov eax, dword [ecx + 0x3c]
sub eax, edi
add eax, 0xffffff9c
add eax, dword [ecx + 0x10]
add eax, esi
cmp dword [ecx + 0x20], eax
jbe 0x40ccbb
jmp 0x40cc90
push ecx
call fcn.0040fff0
mov ecx, dword [ebp + 0x14]
add esp, 4
mov dword [ecx], eax
test eax, eax
jne 0x40ee78
mov ecx, dword [ebp + 0x30]
mov eax, dword [ecx + 0x3c]
sub eax, edi
add eax, 0xffffff9c
add eax, dword [ecx + 0x10]
add eax, esi
cmp dword [ecx + 0x20], eax
ja 0x40cc90
mov eax, dword [ecx + 0x10]
lea edx, [esi + eax]
add eax, edi
cmp edx, eax
jae 0x40cd26
mov esi, ebx
neg esi
sbb esi, esi
and esi, 3
inc esi
neg ebx
sbb bl, bl
and bl, 3
inc bl
lea ebx, [ebx]
movzx ecx, byte [edx]
movzx eax, byte [edx + 1]
shl ecx, 8
or ecx, eax
mov eax, dword [ebp + 0x30]
add ecx, esi
add ecx, dword [esp + 0x24]
sar ecx, 8
mov eax, dword [eax + 0x20]
mov byte [eax], cl
mov cl, bl
mov eax, dword [ebp + 0x30]
add cl, byte [esp + 0x24]
add cl, byte [edx + 1]
add edx, 2
mov eax, dword [eax + 0x20]
mov byte [eax + 1], cl
mov eax, dword [ebp + 0x30]
add dword [eax + 0x20], 2
mov eax, dword [eax + 0x10]
add eax, edi
cmp edx, eax
jb 0x40cce0
mov ebx, dword [esp + 0x50]
mov eax, dword [esp + 0x24]
mov esi, edi
add dword [esp + 0x14], eax
dec ebx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x50], ebx
jns 0x40cc20
mov ebx, dword [esp + 0x10]
mov edi, dword [esp + 0x34]
mov esi, dword [esp + 0x14]
test edi, edi
je 0x40d2c0
mov ecx, esi
mov edx, esi
sub ecx, edi
inc ecx
sub edx, ecx
movzx esi, byte [edx + 1]
movzx eax, byte [edx + 2]
shl esi, 8
or esi, eax
jne 0x40cd6f
xor edi, edi
jmp 0x40cd71
sub edi, esi
mov esi, dword [esp + 0x14]
mov eax, ecx
sar eax, 8
mov byte [esi], 0x78
mov byte [esi + 1], al
mov byte [esi + 2], cl
add esi, 3
mov dword [esp + 0x14], esi
mov byte [edx + 1], al
mov byte [edx + 2], cl
test edi, edi
jne 0x40cd53
jmp 0x40d2bc
mov edi, dword [esp + 0x14]
add edi, 0xfffffffd
mov esi, edi
movzx ecx, byte [edi + 1]
movzx eax, byte [edi + 2]
shl ecx, 8
or ecx, eax
sub esi, ecx
mov dword [esp + 0x34], esi
mov al, byte [esi]
cmp al, 0x81
je 0x40cdbf
cmp al, 0x82
jne 0x40cdcc
mov ebx, dword [esp + 0x4c]
test ebx, ebx
je 0x40cdd0
mov byte [esi], 0x83
jmp 0x40cde0
mov ebx, dword [esp + 0x4c]
cmp al, 0x81
je 0x40cee0
cmp al, 0x82
je 0x40cee0
cmp dword [ebp + 0x34], 0
jne 0x40ce15
push 0
push dword [ebp + 0x30]
push dword [esp + 0x4c]
push edi
push esi
call fcn.0040fb60
add esp, 0x14
test eax, eax
jne 0x40ce4b
movzx ecx, byte [esi + 1]
movzx eax, byte [esi + 2]
shl ecx, 8
or ecx, eax
add esi, ecx
cmp byte [esi], 0x77
je 0x40cde6
mov esi, dword [esp + 0x34]
cmp byte [esi], 0x87
jne 0x40ce30
movzx ecx, byte [esi + 1]
movzx eax, byte [esi + 2]
shl ecx, 8
or ecx, eax
cmp byte [ecx + esi], 0x77
je 0x40ce30
mov byte [esi], 0x8c
test ebx, ebx
je 0x40ced3
mov al, byte [esi]
cmp al, 0x87
je 0x40ce54
cmp al, 0x8c
je 0x40ce54
inc al
mov byte [esi], al
mov byte [edi], 0x7b
jmp 0x40cead
mov esi, dword [esp + 0x34]
add byte [esi], 5
jmp 0x40ce15
push dword [esp + 0x64]
mov edi, dword [esp + 0x18]
mov ebx, edi
push dword [ebp + 0x30]
sub ebx, esi
push dword [esp + 0x4c]
mov byte [edi], 0
push 3
push esi
call fcn.004094b0
push ebx
lea eax, [esi + 3]
push esi
push eax
call sub.MSVCRT.dll_memmove
add ebx, 3
add esp, 0x20
cmp byte [esi], 0x87
setne al
dec al
and al, 0xfb
add al, 0x89
mov byte [esi], al
mov eax, ebx
mov byte [edi + 3], 0x7b
sar eax, 8
mov byte [edi + 4], al
mov byte [edi + 5], bl
add edi, 6
mov dword [esp + 0x14], edi
mov byte [esi + 1], al
mov byte [esi + 2], bl
mov eax, dword [esp + 0x90]
test eax, eax
je 0x40cebb
mov byte [eax], 0x94
cmp dword [esp + 0x68], 2
mov ebx, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
jge 0x40d2c0
jmp 0x40c953
mov eax, dword [esp + 0x18]
add al, 0x79
mov byte [edi], al
jmp 0x40c94b
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
add al, 0x79
mov byte [edi], al
jmp 0x40d2bc
cmp dl, 0x9d
je 0x40c94f
mov eax, dword [ebp + 0x14]
mov dword [eax], 0xb
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [esp + 0x20]
test edx, edx
jne 0x40cf24
mov esi, eax
mov dword [esp + 0x14], esi
jmp 0x40c953
mov ecx, dword [esp + 0x68]
test ecx, ecx
jne 0x40cf52
cmp edx, 0xffffffff
jne 0x40cf3f
mov eax, dword [esp + 0x18]
add al, 0x62
mov byte [esi], al
inc esi
jmp 0x40d2b8
cmp edx, 1
jne 0x40cf6a
mov eax, dword [esp + 0x18]
add al, 0x66
mov byte [esi], al
inc esi
jmp 0x40d2b8
cmp ecx, 1
jne 0x40cf6a
cmp edx, 0xffffffff
jne 0x40cf6a
mov eax, dword [esp + 0x18]
add al, 0x64
mov byte [esi], al
inc esi
jmp 0x40d2b8
mov eax, dword [esp + 0x18]
add al, 0x68
mov byte [esi], al
mov eax, ecx
mov byte [esi + 2], cl
lea ecx, [edx + 1]
sar eax, 8
neg ecx
mov byte [esi + 1], al
sbb ecx, ecx
and ecx, edx
mov eax, ecx
mov byte [esi + 4], cl
sar eax, 8
mov byte [esi + 3], al
add esi, 5
mov dword [esp + 0x80], ecx
jmp 0x40d2b8
movzx eax, dl
sub eax, 0x1e
je 0x40cfd0
dec eax
je 0x40cfc9
dec eax
je 0x40cfba
mov dword [esp + 0x34], 0
xor esi, esi
jmp 0x40cfd9
mov dword [esp + 0x34], 0x27
mov esi, 0x27
jmp 0x40cfd9
mov esi, 0x1a
jmp 0x40cfd5
mov esi, 0xd
mov dword [esp + 0x34], esi
cmp dword [esp + 0x44], 0
je 0x40d035
mov ecx, dword [esp + 0x14]
dec ecx
mov al, byte [ecx]
and al, 0xc0
cmp al, 0x80
jne 0x40d035
mov al, byte [ecx]
and al, 0xc0
cmp al, 0x80
jne 0x40cfff
mov al, byte [ecx - 1]
dec ecx
and al, 0xc0
cmp al, 0x80
je 0x40cff5
mov edi, dword [esp + 0x14]
mov eax, edi
sub eax, ecx
push eax
mov dword [esp + 0x28], eax
lea eax, [esp + 0x124]
push ecx
push eax
call sub.MSVCRT.dll_memcpy
mov ecx, dword [esp + 0x30]
add esp, 0xc
mov dl, byte [esp + 0x43]
or ecx, 0x10000000
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x24], ecx
jmp 0x40d067
mov eax, dword [esp + 0x14]
movzx ecx, byte [eax - 1]
mov dword [esp + 0x24], ecx
cmp dl, 0x1e
ja 0x40d05f
cmp dword [esp + 0x68], 1
jle 0x40d05f
mov eax, dword [edi + 0x68]
or eax, dword [esp + 0xb8]
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x1c]
mov edi, dword [esp + 0x14]
cmp dl, 0x10
je 0x40d07e
cmp dl, 0xf
je 0x40d07e
mov dword [esp + 0x30], 0xffffffff
or edx, 0xffffffff
jmp 0x40d08a
movzx edx, byte [eax + 1]
movzx eax, byte [eax + 2]
mov dword [esp + 0x30], eax
mov eax, edi
mov dword [esp + 0x50], edx
mov edi, dword [esp + 0x1c]
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x20]
test edi, edi
je 0x40c94f
add dword [esp + 0x18], esi
mov esi, dword [esp + 0x68]
test esi, esi
jne 0x40d12c
mov eax, dword [esp + 0x18]
mov ebx, edi
cmp ebx, 0xffffffff
jne 0x40d10b
add al, 0x21
mov ebx, dword [esp + 0x1c]
lea esi, [ebx + 1]
mov byte [ebx], al
mov ebx, dword [esp + 0x30]
cmp dword [esp + 0x44], 0
je 0x40d2a5
test ecx, 0x10000000
je 0x40d2a5
and ecx, 7
lea eax, [esp + 0x120]
push ecx
push eax
push esi
mov dword [esp + 0x30], ecx
call sub.MSVCRT.dll_memcpy
mov edx, dword [esp + 0x5c]
add esp, 0xc
add esi, dword [esp + 0x24]
jmp 0x40d2a8
cmp ebx, 1
jne 0x40d114
add al, 0x25
jmp 0x40d0c1
mov esi, dword [esp + 0x1c]
add al, 0x27
mov byte [esi], al
mov eax, ebx
sar eax, 8
mov byte [esi + 1], al
mov byte [esi + 2], bl
add esi, 3
jmp 0x40d0ca
cmp esi, 1
jne 0x40d172
cmp edi, 0xffffffff
jne 0x40d13e
mov eax, dword [esp + 0x18]
add al, 0x23
jmp 0x40d0c1
mov esi, eax
mov dword [esp + 0x14], esi
cmp edi, 1
je 0x40c953
mov ebx, dword [esp + 0x18]
lea esi, [eax + 1]
add bl, 0x27
mov byte [eax], bl
mov ebx, dword [esp + 0x20]
lea eax, [ebx - 1]
dec bl
sar eax, 8
mov byte [esi], al
mov byte [esi + 1], bl
add esi, 2
jmp 0x40d0ca
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x34]
lea esi, [ebx + 1]
add al, 0x29
mov byte [ebx], al
mov ebx, dword [esp + 0x68]
mov eax, ebx
sar eax, 8
mov byte [esi], al
mov eax, dword [esp + 0x20]
mov byte [esi + 1], bl
add esi, 2
mov dword [esp + 0x14], esi
test eax, eax
jns 0x40d20b
cmp dword [esp + 0x44], 0
je 0x40d1ea
test ecx, 0x10000000
je 0x40d1ea
mov ebx, dword [esp + 0x14]
lea eax, [esp + 0x120]
mov esi, ecx
and esi, 7
push esi
push eax
push ebx
call sub.MSVCRT.dll_memcpy
mov ecx, dword [esp + 0x30]
add esp, 0xc
mov edx, dword [esp + 0x50]
add ebx, esi
mov dword [esp + 0x14], ebx
mov esi, ebx
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x30]
add al, 0x21
mov byte [esi], al
inc esi
jmp 0x40d0ce
mov byte [esi], cl
inc esi
test edx, edx
js 0x40d1d8
mov ebx, dword [esp + 0x30]
mov eax, dword [esp + 0x18]
mov byte [esi], dl
add al, 0x21
mov byte [esi + 1], bl
add esi, 2
mov byte [esi], al
inc esi
jmp 0x40d0ce
cmp eax, ebx
je 0x40d0ca
cmp dword [esp + 0x44], 0
je 0x40d253
test ecx, 0x10000000
je 0x40d253
mov ebx, dword [esp + 0x14]
lea eax, [esp + 0x120]
mov esi, ecx
and esi, 7
push esi
push eax
push ebx
call sub.MSVCRT.dll_memcpy
mov ecx, dword [esp + 0x30]
add esp, 0xc
mov edx, dword [esp + 0x50]
add ebx, esi
mov eax, dword [esp + 0x20]
mov esi, ebx
mov dword [esp + 0x14], ebx
jmp 0x40d256
mov byte [esi], cl
inc esi
mov ebx, dword [esp + 0x30]
test edx, edx
js 0x40d266
mov byte [esi], dl
mov byte [esi + 1], bl
add esi, 2
sub eax, dword [esp + 0x68]
mov dword [esp + 0x20], eax
cmp eax, 1
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x18]
jne 0x40d288
add al, 0x25
mov byte [esi], al
inc esi
jmp 0x40d0ce
add al, 0x27
mov byte [esi], al
mov eax, dword [esp + 0x20]
sar eax, 8
mov byte [esi + 1], al
mov eax, dword [esp + 0x20]
mov byte [esi + 2], al
add esi, 3
jmp 0x40d0ce
mov byte [esi], cl
inc esi
mov dword [esp + 0x14], esi
test edx, edx
js 0x40d2bc
mov byte [esi], dl
mov byte [esi + 1], bl
add esi, 2
mov dword [esp + 0x14], esi
mov ebx, dword [esp + 0x10]
cmp dword [esp + 0x4c], 0
je 0x40d40a
mov eax, dword [esp + 0x48]
movzx edx, byte [eax]
lea eax, [edx - 0x1d]
cmp eax, 0x53
ja case.0x40d2e5.33
movzx eax, byte [eax + 0x40f494]
jmp dword [eax*4 + 0x40f480]
mov eax, dword [esp + 0x48]
mov al, byte [eax + 3]
cmp al, 0x10
je 0x40d30c
cmp al, 0xf
je 0x40d30c
movzx eax, byte [edx + 0x478c70]
xor ecx, ecx
add eax, ecx
add dword [esp + 0x48], eax
jmp case.0x40d2e5.33
movzx eax, byte [edx + 0x478c70]
mov ecx, 2
add eax, ecx
add dword [esp + 0x48], eax
jmp case.0x40d2e5.33
movzx eax, byte [edx + 0x478c70]
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
add edx, eax
mov dword [esp + 0x48], edx
test ecx, ecx
je 0x40d373
mov al, byte [edx - 1]
cmp al, 0xc0
jb 0x40d373
movzx eax, al
and eax, 0x3f
movzx eax, byte [eax + 0x478330]
add dword [esp + 0x48], eax
jmp 0x40d373
add dword [esp + 0x48], 0x21
jmp case.0x40d2e5.33
mov edx, dword [esp + 0x48]
movzx ecx, byte [edx + 1]
movzx eax, byte [edx + 2]
shl ecx, 8
or ecx, eax
add dword [esp + 0x48], ecx
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x48]
mov eax, esi
sub eax, edx
mov dword [esp + 0x90], eax
test eax, eax
jle 0x40c94f
movzx eax, byte [edx]
cmp eax, 0x76
jae 0x40d3a3
mov al, byte [eax + 0x478160]
test al, al
je 0x40d3a3
mov byte [edx], al
jmp 0x40c94b
push dword [esp + 0x64]
mov edi, dword [ebp + 0x30]
push edi
push ecx
mov byte [esi], 0
push 3
push dword [esp + 0x58]
call fcn.004094b0
mov ebx, dword [esp + 0xa4]
mov eax, dword [esp + 0x5c]
push ebx
push eax
add eax, 3
push eax
call sub.MSVCRT.dll_memmove
mov eax, dword [esp + 0x68]
add ebx, 3
mov ecx, ebx
add esp, 0x20
sar ecx, 8
mov byte [eax], 0x81
mov byte [esi + 3], 0x78
mov byte [esi + 4], cl
mov byte [esi + 5], bl
add esi, 6
mov eax, dword [esp + 0x48]
mov dword [esp + 0x14], esi
mov byte [eax + 1], cl
mov eax, dword [esp + 0x48]
mov byte [eax + 2], bl
mov ebx, dword [esp + 0x10]
jmp 0x40c956
mov edi, dword [ebp + 0x30]
mov esi, dword [esp + 0x14]
jmp 0x40c956
inc ebx
mov dword [esp + 0x10], ebx
mov dl, byte [ebx]
cmp dl, 0x2a
jne 0x40d657
lea eax, [ebx + 1]
mov dword [esp + 0x90], eax
mov al, byte [eax]
cmp al, 0x3a
je 0x40d446
movzx ecx, al
mov eax, dword [esi + 0xc]
test byte [ecx + eax], 2
je 0x40d657
mov eax, dword [ebp + 0x30]
xor esi, esi
mov edx, dword [esp + 0x90]
mov edi, 0x476e20
mov ebx, edx
mov dword [esp + 0x4c], 0
mov dword [esp + 0x10], ebx
mov ecx, dword [eax + 0xc]
mov dword [esp + 0x50], esi
movzx eax, byte [ebx]
mov dword [esp + 0x1c], esi
test byte [eax + ecx], 2
je 0x40d48e
lea esp, [esp]
inc ebx
mov dword [esp + 0x10], ebx
movzx eax, byte [ebx]
test byte [eax + ecx], 2
jne 0x40d480
mov eax, ebx
sub eax, edx
cmp byte [ebx], 0x3a
mov dword [esp + 0x34], eax
jne 0x40d4d6
inc ebx
mov dword [esp + 0x10], ebx
mov esi, ebx
mov dword [esp + 0x50], ebx
mov al, byte [ebx]
test al, al
je 0x40d4bf
lea esp, [esp]
cmp al, 0x29
je 0x40d4bf
inc ebx
mov dword [esp + 0x10], ebx
mov al, byte [ebx]
test al, al
jne 0x40d4b0
mov eax, ebx
sub eax, esi
mov dword [esp + 0x4c], eax
cmp eax, 0xff
ja 0x40ef80
mov eax, dword [esp + 0x34]
cmp byte [ebx], 0x29
jne 0x40efe8
xor ebx, ebx
mov esi, 0x476e50
cmp eax, dword [esi]
jne 0x40d500
push eax
push edi
push edx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
je 0x40d519
mov edx, dword [esp + 0x90]
inc edi
inc ebx
add edi, dword [esi]
add esi, 0xc
cmp esi, str._b__w_
jge 0x40efcd
mov eax, dword [esp + 0x34]
jmp 0x40d4e6
lea eax, [ebx + ebx*2]
mov ecx, dword [eax*4 + 0x476e54]
cmp ecx, 0x9e
jne 0x40d5ae
cmp dword [esp + 0x4c], 0
jne 0x40ef97
mov edi, dword [ebp + 0x30]
mov ecx, dword [edi + 0x24]
mov dword [edi + 0x6c], 1
test ecx, ecx
je 0x40d57f
mov edi, dword [esp + 0x14]
mov eax, dword [ebp + 0x34]
test eax, eax
je 0x40d55b
add dword [eax], 3
jmp 0x40d572
mov byte [edi], 0xa0
movzx eax, byte [ecx + 5]
mov byte [edi + 1], al
movzx eax, byte [ecx + 4]
mov byte [edi + 2], al
add edi, 3
mov eax, dword [ebp + 0x34]
mov ecx, dword [ecx]
test ecx, ecx
jne 0x40d552
mov dword [esp + 0x14], edi
mov edi, dword [ebp + 0x30]
cmp dword [edi + 0x5c], 0
mov ecx, dword [esp + 0x14]
setg al
add al, 0x9e
movzx esi, al
mov byte [ecx], al
inc ecx
cmp dword [esp + 0x3c], 0xfffffffe
mov dword [esp + 0x14], ecx
jne 0x40d629
mov dword [esp + 0x3c], 0xffffffff
jmp 0x40d629
mov ebx, dword [esp + 0x4c]
test ebx, ebx
jne 0x40d5d0
test ecx, ecx
js 0x40efb2
mov al, cl
mov ecx, dword [esp + 0x14]
movzx esi, al
mov byte [ecx], al
inc ecx
mov dword [esp + 0x14], ecx
jmp 0x40d626
cmp dword [eax*4 + 0x476e58], 0
jl 0x40ef97
mov edx, dword [esp + 0x14]
mov al, byte [eax*4 + 0x476e58]
movzx esi, al
mov byte [edx], al
mov eax, dword [ebp + 0x34]
test eax, eax
je 0x40d600
add dword [eax], ebx
mov byte [edx + 1], 0
add edx, 2
jmp 0x40d61e
push ebx
push dword [esp + 0x54]
mov byte [edx + 1], bl
add edx, 2
push edx
mov dword [esp + 0x20], edx
call sub.MSVCRT.dll_memcpy
mov edx, dword [esp + 0x20]
add esp, 0xc
add edx, ebx
mov byte [edx], 0
inc edx
mov dword [esp + 0x14], edx
mov edi, dword [ebp + 0x30]
lea eax, [esi - 0x96]
cmp eax, 5
ja case.default.0x40d638
jmp dword [eax*4 + 0x40f4e8]
or dword [edi + 0x64], 0x1000
jmp case.default.0x40d638
mov dword [edi + 0x70], 1
jmp case.default.0x40d638
mov eax, dword [esp + 0x38]
mov dword [esp + 0x30], eax
mov eax, dword [esi + 0x20]
sub eax, dword [esi + 0x10]
mov dword [esp + 0x20], 0
mov dword [esp + 0x18], 0x85
mov dword [esp + 0x64], eax
mov dword [esp + 0x50], 0
cmp dl, 0x3f
jne 0x40df21
inc ebx
mov dword [esp + 0x10], ebx
mov dl, byte [ebx]
movzx eax, dl
add eax, 0xffffffdf
cmp eax, 0x5b
ja case.0x40d6a7.34
movzx eax, byte [eax + 0x40f538]
jmp dword [eax*4 + 0x40f500]
mov dword [esp + 0x50], 1
mov dword [esi + 0x7c], 1
mov ecx, 0x83
inc ebx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x10], ebx
jmp 0x40e254
cmp byte [ebx + 1], 0x3f
mov ecx, 0x87
mov edx, ebx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x9c], edx
jne 0x40d72c
cmp byte [ebx + 2], 0x43
jne 0x40d72c
mov al, byte [ebx + 3]
mov ecx, 3
cmp al, 0x30
jb 0x40d70d
lea ebx, [ebx]
cmp al, 0x39
ja 0x40d70d
mov al, byte [ecx + ebx + 1]
inc ecx
cmp al, 0x30
jae 0x40d700
cmp byte [ecx + ebx], 0x29
jne 0x40d71f
lea edx, [ebx + 1]
add edx, ecx
mov dword [esp + 0x9c], edx
cmp byte [edx], 0x28
jne 0x40efff
mov ecx, dword [esp + 0x18]
cmp byte [edx + 1], 0x3f
jne 0x40d75b
mov al, byte [edx + 2]
cmp al, 0x3d
je 0x40d74c
cmp al, 0x21
je 0x40d74c
cmp al, 0x3c
jne 0x40d75b
mov al, byte [edx + 3]
cmp al, 0x3d
je 0x40d74c
cmp al, 0x21
jne 0x40d75b
mov dword [esi + 0x80], 1
jmp 0x40e254
mov eax, dword [esp + 0x14]
or esi, 0xffffffff
xor ecx, ecx
or edi, esi
xor edx, edx
mov dword [esp + 0x24], ecx
mov byte [eax + 3], 0x8d
mov eax, 3
mov ebx, dword [esp + 0x10]
inc ebx
mov dword [esp + 0x20], eax
mov dword [esp + 0x10], ebx
mov al, byte [ebx]
cmp al, 0x52
jne 0x40d7a7
cmp byte [ebx + 1], 0x26
jne 0x40d7a7
mov eax, dword [esp + 0x14]
add ebx, 2
mov dword [esp + 0x10], ebx
mov dword [esp + 0x34], esi
mov byte [eax + 3], 0x8f
mov ebx, dword [esp + 0x10]
jmp 0x40d7bc
cmp al, 0x3c
jne 0x40d874
mov dword [esp + 0x34], 0x3e
inc ebx
mov dword [esp + 0x10], ebx
mov al, byte [ebx]
cmp al, 0x30
jb 0x40d7ca
cmp al, 0x39
jbe 0x40f046
mov ecx, dword [ebp + 0x30]
movzx eax, al
mov ecx, dword [ecx + 0xc]
test byte [eax + ecx], 0x10
je 0x40efff
mov dword [esp + 0x24], ebx
inc ebx
mov dword [esp + 0x10], ebx
movzx eax, byte [ebx]
test byte [eax + ecx], 0x10
je 0x40d7fe
nop
inc ebx
mov dword [esp + 0x10], ebx
movzx eax, byte [ebx]
test byte [eax + ecx], 0x10
jne 0x40d7f0
mov ecx, dword [esp + 0x24]
mov edi, ebx
sub edi, ecx
cmp dword [ebp + 0x34], edx
je 0x40d813
mov dword [esp + 0x20], 5
cmp dword [esp + 0x34], edx
jle 0x40d82a
mov al, byte [ebx]
inc ebx
mov dword [esp + 0x10], ebx
cmp al, byte [esp + 0x34]
jne 0x40f08f
mov al, byte [ebx]
inc ebx
mov dword [esp + 0x10], ebx
cmp al, 0x29
jne 0x40f08f
cmp dword [ebp + 0x34], 0
jne 0x40e24d
test esi, esi
js 0x40d931
test edx, edx
jle 0x40f05d
test esi, esi
je 0x40d8f5
cmp esi, 0x2d
mov esi, dword [ebp + 0x30]
jne 0x40d8f0
mov eax, dword [esi + 0x40]
sub eax, edx
lea edx, [eax + 1]
jmp 0x40d8f8
cmp al, 0x27
jne 0x40d885
mov dword [esp + 0x34], 0x27
jmp 0x40d7b7
mov dword [esp + 0x34], ecx
cmp al, 0x2d
je 0x40d8a5
cmp al, 0x2b
je 0x40d8a5
cmp al, 0x30
jb 0x40d7ca
cmp al, 0x39
ja 0x40d7bc
xor esi, esi
jmp 0x40d8b5
movzx esi, al
inc ebx
mov dword [esp + 0x10], ebx
test esi, esi
js 0x40d7bc
mov al, byte [ebx]
cmp al, 0x30
jb 0x40d82a
nop
cmp al, 0x39
ja 0x40d82a
cmp edx, 0xccccccb
jg 0x40f016
movzx eax, al
lea edx, [edx + edx*4]
inc ebx
lea edx, [edx - 0x18]
mov dword [esp + 0x10], ebx
lea edx, [eax + edx*2]
mov al, byte [ebx]
cmp al, 0x30
jae 0x40d8c0
jmp 0x40d82a
add edx, dword [esi + 0x40]
jmp 0x40d8f8
mov esi, dword [ebp + 0x30]
test edx, edx
jle 0x40f078
cmp edx, dword [esi + 0x44]
jg 0x40f078
mov edi, dword [esp + 0x14]
mov eax, edx
mov ecx, dword [esp + 0x18]
sar eax, 8
mov byte [edi + 4], al
mov byte [edi + 5], dl
mov ebx, dword [esp + 0x10]
cmp edx, dword [esi + 0x4c]
jle 0x40e258
mov dword [esi + 0x4c], edx
jmp 0x40e258
mov eax, dword [ebp + 0x30]
xor esi, esi
mov edx, dword [eax + 0x2c]
mov dword [esp + 0x74], edx
cmp dword [eax + 0x30], esi
jle 0x40d97d
mov ebx, edx
push edi
lea eax, [ebx + 2]
push eax
push ecx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x40d95c
cmp byte [ebx + edi + 2], al
je 0x40d972
mov eax, dword [ebp + 0x30]
inc esi
mov ecx, dword [esp + 0x24]
add ebx, dword [eax + 0x34]
mov dword [esp + 0x74], ebx
cmp esi, dword [eax + 0x30]
jl 0x40d944
jmp 0x40d975
mov eax, dword [ebp + 0x30]
mov ebx, dword [esp + 0x10]
mov edx, dword [esp + 0x74]
mov ecx, dword [eax + 0x30]
cmp esi, ecx
jge 0x40da57
mov eax, dword [esp + 0x74]
mov ebx, 1
movzx edx, byte [edx]
shl edx, 8
mov dword [esp + 0xa8], esi
inc esi
movzx eax, byte [eax + 1]
or edx, eax
mov eax, dword [ebp + 0x30]
mov dword [esp + 0x90], edx
cmp edx, dword [eax + 0x4c]
jle 0x40d9b7
mov dword [eax + 0x4c], edx
cmp esi, ecx
jge 0x40da38
mov ecx, dword [esp + 0x74]
add ecx, dword [eax + 0x34]
push edi
mov dword [esp + 0x78], ecx
lea eax, [ecx + 2]
push eax
push dword [esp + 0x2c]
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x40d9f3
mov ecx, dword [esp + 0x74]
cmp byte [ecx + edi + 2], al
jne 0x40d9f3
mov eax, dword [ebp + 0x30]
inc esi
inc ebx
cmp esi, dword [eax + 0x30]
jl 0x40d9c3
cmp ebx, 1
jle 0x40da31
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0xa8]
mov eax, ecx
add dword [esp + 0x20], 2
mov esi, dword [ebp + 0x30]
sar eax, 8
mov byte [edi + 4], al
mov eax, ebx
sar eax, 8
inc byte [edi + 3]
mov byte [edi + 5], cl
mov ecx, dword [esp + 0x18]
mov byte [edi + 6], al
mov byte [edi + 7], bl
mov ebx, dword [esp + 0x10]
jmp 0x40e258
mov edx, dword [esp + 0x90]
mov edi, dword [esp + 0x14]
mov eax, edx
mov ecx, dword [esp + 0x18]
mov esi, dword [ebp + 0x30]
sar eax, 8
mov byte [edi + 4], al
mov byte [edi + 5], dl
mov ebx, dword [esp + 0x10]
jmp 0x40e258
cmp dword [esp + 0x34], 0
jne 0x40f078
mov eax, dword [esp + 0x24]
cmp byte [eax], 0x52
jne 0x40dad4
xor ecx, ecx
lea edx, [ecx + 1]
cmp edi, edx
jle 0x40daac
mov al, byte [edx + eax]
cmp al, 0x30
jb 0x40f078
cmp al, 0x39
ja 0x40f078
cmp ecx, 0xccccccb
jg 0x40f02f
movzx eax, al
lea ecx, [ecx + ecx*4]
lea ecx, [ecx - 0x18]
inc edx
lea ecx, [eax + ecx*2]
mov eax, dword [esp + 0x24]
cmp edx, edi
jl 0x40da74
test ecx, ecx
jne 0x40dab1
mov ecx, 0xffff
mov edi, dword [esp + 0x14]
mov eax, ecx
mov esi, dword [ebp + 0x30]
sar eax, 8
mov byte [edi + 5], cl
mov ecx, dword [esp + 0x18]
mov byte [edi + 3], 0x8f
mov byte [edi + 4], al
mov ebx, dword [esp + 0x10]
jmp 0x40e258
cmp edi, 6
jne 0x40f078
push edi
push str.DEFINE
push eax
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x40f074
mov edi, dword [esp + 0x14]
lea edx, [eax + 1]
mov ecx, dword [esp + 0x18]
mov esi, dword [ebp + 0x30]
mov byte [edi + 3], 0x91
mov ebx, dword [esp + 0x10]
jmp 0x40e25c
inc dword [esi + 0x5c]
mov ecx, 0x7d
inc ebx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x10], ebx
jmp 0x40e254
inc ebx
mov dword [esp + 0x10], ebx
cmp byte [ebx], 0x29
jne 0x40db76
mov al, byte [ebx + 1]
cmp al, 0x2a
je 0x40db76
cmp al, 0x2b
je 0x40db76
cmp al, 0x3f
je 0x40db76
cmp al, 0x7b
jne 0x40db52
lea eax, [ebx + 2]
push eax
call fcn.004110b0
add esp, 4
test eax, eax
jne 0x40db76
mov esi, dword [esp + 0x14]
xor edi, edi
mov eax, dword [esp + 0x28]
mov dword [esp + 0x1c], edi
mov byte [esi], 0x9d
inc esi
mov ebx, dword [esp + 0x10]
inc ebx
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], ebx
jmp 0x40afe8
inc dword [esi + 0x5c]
mov ecx, 0x7e
mov dword [esp + 0x18], ecx
jmp 0x40e254
mov cl, byte [ebx + 1]
mov al, cl
cmp al, 0x21
je 0x40dcbc
cmp al, 0x3d
je 0x40dca4
mov eax, dword [esi + 0xc]
movzx ecx, cl
test byte [ecx + eax], 0x10
je 0x40f0a7
xor eax, eax
cmp dl, 0x3c
setne al
inc ebx
dec eax
mov dword [esp + 0x10], ebx
and eax, 0x17
mov esi, ebx
add eax, 0x27
mov dword [esp + 0x90], esi
mov dword [esp + 0xa8], eax
mov al, byte [ebx]
cmp al, 0x30
jb 0x40dbde
cmp al, 0x39
jbe 0x40f046
mov edi, dword [ebp + 0x30]
movzx eax, al
mov ecx, dword [edi + 0xc]
test byte [eax + ecx], 0x10
je 0x40dbfe
lea ecx, [ecx]
inc ebx
mov dword [esp + 0x10], ebx
movzx eax, byte [ebx]
test byte [eax + ecx], 0x10
jne 0x40dbf0
mov edx, ebx
sub edx, esi
cmp dword [ebp + 0x34], 0
mov dword [esp + 0x34], edx
je 0x40de9e
mov eax, dword [edi + 0x40]
inc eax
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0xa8]
cmp byte [ebx], al
jne 0x40f16c
mov ecx, dword [edi + 0x30]
cmp ecx, 0x2710
jge 0x40f155
lea eax, [edx + 3]
cmp eax, dword [edi + 0x34]
jle 0x40dc4a
mov dword [edi + 0x34], eax
cmp edx, 0x20
jg 0x40f0ed
mov esi, dword [edi + 0x28]
xor edi, edi
test ecx, ecx
jle 0x40ddfb
cmp edx, dword [esi + 4]
jne 0x40ddd6
push edx
push dword [esi]
push dword [esp + 0x98]
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x40ddd6
mov eax, dword [esp + 0x4c]
cmp dword [esi + 8], eax
je 0x40ddf7
test dword [esp + 0x38], 0x80000
je 0x40f104
mov eax, dword [ebp + 0x30]
mov dword [eax + 0x78], 1
jmp 0x40dde6
inc dword [esi + 0x5c]
mov ecx, 0x7f
add ebx, 2
mov dword [esp + 0x18], ecx
mov dword [esp + 0x10], ebx
jmp 0x40e254
inc dword [esi + 0x5c]
mov ecx, pe_nt_image_headers32
add ebx, 2
mov dword [esp + 0x18], ecx
mov dword [esp + 0x10], ebx
jmp 0x40e254
mov ecx, 0x81
inc ebx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x10], ebx
jmp 0x40e254
mov edx, dword [esp + 0x14]
xor ecx, ecx
mov eax, edx
mov dword [esp + 0xc8], 1
mov dword [esp + 0xac], eax
mov byte [edx], 0x76
mov ebx, dword [esp + 0x10]
inc ebx
mov dword [esp + 0x10], ebx
mov al, byte [ebx]
cmp al, 0x30
jb 0x40dd3a
cmp al, 0x39
ja 0x40dd3a
lea ecx, [ecx + ecx*4]
movzx eax, al
lea ecx, [ecx - 0x18]
inc ebx
mov dword [esp + 0x10], ebx
lea ecx, [eax + ecx*2]
cmp ecx, 0xff
jg 0x40f0bf
mov al, byte [ebx]
cmp al, 0x30
jae 0x40dd13
cmp byte [ebx], 0x29
jne 0x40f0d6
mov byte [edx + 1], cl
xor edi, edi
mov eax, dword [esp + 0x10]
sub eax, dword [esi + 0x18]
inc eax
mov dword [esp + 0x1c], edi
sar eax, 8
mov byte [edx + 2], al
mov al, byte [esp + 0x10]
sub al, byte [esi + 0x18]
inc al
mov word [edx + 4], 0
mov byte [edx + 3], al
add edx, 6
mov ebx, dword [esp + 0x10]
mov esi, edx
mov eax, dword [esp + 0x28]
inc ebx
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], ebx
jmp 0x40afe8
inc ebx
mov dword [esp + 0x10], ebx
mov dl, byte [ebx]
cmp dl, 0x3d
je 0x40ddb8
cmp dl, 0x3e
je 0x40ddb8
cmp dl, 0x3c
je case.0x40d6a7.39
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x29
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edi, dword [ebp + 0x14]
xor ecx, ecx
cmp dl, 0x3e
mov dword [esp + 0x24], 0x29
sete cl
mov dword [esp + 0x50], ecx
mov esi, ecx
jmp 0x40e5e6
mov eax, dword [esp + 0x4c]
cmp dword [esi + 8], eax
je 0x40f11f
mov eax, dword [ebp + 0x30]
mov edx, dword [esp + 0x34]
inc edi
add esi, 0xc
cmp edi, dword [eax + 0x30]
jl 0x40dc57
mov ebx, dword [esp + 0x10]
mov esi, dword [ebp + 0x30]
mov eax, dword [esi + 0x30]
cmp edi, eax
jl 0x40dea0
mov ecx, dword [esi + 0x38]
cmp eax, ecx
jl 0x40de60
lea edi, [ecx + ecx]
lea eax, [edi + edi*2]
shl eax, 2
push eax
call dword [0x4977bc]
mov esi, eax
add esp, 4
test esi, esi
je 0x40f13a
mov ebx, dword [ebp + 0x30]
mov ecx, dword [ebx + 0x38]
lea ecx, [ecx + ecx*2]
shl ecx, 2
push ecx
push dword [ebx + 0x28]
push esi
call sub.MSVCRT.dll_memcpy
add esp, 0xc
cmp dword [ebx + 0x38], 0x14
jle 0x40de58
push dword [ebx + 0x28]
call dword [0x4977c0]
add esp, 4
mov dword [ebx + 0x28], esi
mov esi, ebx
mov dword [esi + 0x38], edi
mov eax, dword [esi + 0x30]
mov edx, dword [esp + 0x90]
lea ecx, [eax + eax*2]
mov eax, dword [esi + 0x28]
mov dword [eax + ecx*4], edx
mov eax, dword [esi + 0x30]
mov edx, dword [esp + 0x34]
lea ecx, [eax + eax*2]
mov eax, dword [esi + 0x28]
mov dword [eax + ecx*4 + 4], edx
mov eax, dword [esi + 0x30]
mov edx, dword [esp + 0x4c]
lea ecx, [eax + eax*2]
mov eax, dword [esi + 0x28]
mov dword [eax + ecx*4 + 8], edx
inc dword [esi + 0x30]
mov ebx, dword [esp + 0x10]
jmp 0x40dea0
mov esi, edi
inc ebx
mov dword [esp + 0x10], ebx
inc dword [esi + 0x40]
mov edx, 2
mov eax, dword [esi + 0x40]
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
shr eax, 8
mov byte [edi + 3], al
mov al, byte [esi + 0x40]
mov byte [edi + 4], al
mov ebx, dword [esp + 0x10]
jmp 0x40e25c
mov edi, dword [ebp + 0x14]
mov esi, 1
mov dword [esp + 0x24], 0x29
mov dword [esp + 0x50], esi
jmp 0x40e5e6
inc ebx
xor edx, edx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x18], edx
cmp byte [ebx], 0x29
je 0x40e764
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x1d
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edi, dword [ebp + 0x14]
mov dword [esp + 0x24], 0x29
jmp 0x40e07e
test dword [esp + 0x38], 0x1000
je 0x40dea5
mov ecx, 0x83
mov dword [esp + 0x18], ecx
jmp 0x40e254
mov edi, dword [ebp + 0x14]
lea eax, [esp + 0xf8]
push 0
mov dword [esp + 0xa0], ebx
mov ebx, dword [esp + 0x3c]
push ebx
push dword [esi + 0x40]
push edi
push eax
lea eax, [esp + 0x24]
push eax
call fcn.00409b60
add esp, 0x18
mov edx, eax
cmp dword [edi], 0
mov dword [esp + 0x18], edx
jne 0x40ee78
test edx, edx
jne 0x40dfb5
cmp dword [esp + 0x44], eax
mov eax, dword [esp + 0xf8]
je 0x40dfa4
cmp eax, 0x7f
jbe 0x40dfa4
lea ecx, [esp + 0x84]
push ecx
push eax
call fcn.00421e50
add esp, 8
mov esi, eax
jmp 0x40b1ce
mov byte [esp + 0x84], al
mov esi, 1
jmp 0x40b1ce
mov ecx, dword [esp + 0x3c]
cmp ecx, 0xfffffffe
jne 0x40dfcd
lea eax, [edx - 6]
cmp eax, 0x10
ja 0x40dfcd
or ecx, 0xffffffff
mov dword [esp + 0x3c], ecx
mov eax, dword [esp + 0x78]
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x70], ecx
mov dword [esp + 0x60], eax
cmp edx, 0x1b
jne 0x40e599
mov ebx, dword [esp + 0x10]
xor ecx, ecx
mov eax, dword [esi + 0x20]
inc ebx
sub eax, dword [esi + 0x10]
lea edx, [ebx + 1]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x64], eax
cmp byte [ebx], 0x3c
setne cl
xor eax, eax
dec ecx
mov dword [esp + 0x20], eax
and ecx, 0x17
mov dword [esp + 0x50], eax
movzx eax, byte [edx]
add ecx, 0x27
mov dword [esp + 0x24], ecx
cmp eax, 0x2b
je 0x40e050
cmp eax, 0x2d
je 0x40e050
cmp eax, 0x30
jb 0x40e042
cmp eax, 0x39
jbe 0x40e050
mov esi, 1
mov dword [esp + 0x50], esi
jmp 0x40e5e6
mov al, byte [ebx + 2]
lea ecx, [ebx + 2]
cmp al, 0x30
jb 0x40e06c
lea ebx, [ebx]
cmp al, 0x39
ja 0x40e06c
mov al, byte [ecx + 1]
inc ecx
cmp al, 0x30
jae 0x40e060
mov eax, dword [esp + 0x24]
cmp byte [ecx], al
jne 0x40f26b
mov ebx, edx
mov dword [esp + 0x10], ebx
mov dl, byte [ebx]
movzx esi, dl
cmp esi, 0x2b
jne 0x40e123
inc ebx
mov dword [esp + 0x10], ebx
mov al, byte [ebx]
cmp al, 0x30
jb 0x40f183
cmp al, 0x39
ja 0x40f183
mov al, byte [ebx]
xor edx, edx
mov dword [esp + 0x18], edx
cmp al, 0x30
jb 0x40e0db
nop
cmp al, 0x39
ja 0x40e0db
cmp edx, 0xccccccb
jg 0x40f213
movzx eax, al
lea edx, [edx + edx*4]
inc ebx
lea edx, [edx - 0x18]
mov dword [esp + 0x10], ebx
lea edx, [eax + edx*2]
mov al, byte [ebx]
mov dword [esp + 0x18], edx
cmp al, 0x30
jae 0x40e0b0
mov eax, dword [esp + 0x24]
cmp byte [ebx], al
jne 0x40f257
cmp esi, 0x2d
jne 0x40e579
test edx, edx
je 0x40f243
mov esi, dword [ebp + 0x30]
mov eax, dword [esi + 0x40]
sub eax, edx
lea edx, [eax + 1]
mov dword [esp + 0x18], edx
test edx, edx
jg 0x40e764
mov eax, dword [ebp + 0x10]
mov dword [edi], 0xf
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp esi, 0x2d
jne 0x40e0a3
mov cl, byte [ebx + 1]
lea eax, [ebx + 1]
cmp cl, 0x30
jb case.0x40d6a7.34
cmp cl, 0x39
ja case.0x40d6a7.34
mov ebx, eax
mov dword [esp + 0x10], ebx
jmp 0x40e0a3
xor eax, eax
lea ecx, [esp + 0x118]
xor esi, esi
mov dword [esp + 0x104], eax
mov dword [esp + 0x118], esi
cmp dl, 0x29
je 0x40e1e6
lea esp, [esp]
cmp dl, 0x3a
je 0x40e1d8
movzx eax, dl
inc ebx
sub eax, 0x2d
mov dword [esp + 0x10], ebx
cmp eax, 0x4b
ja case.0x40e190.46
movzx eax, byte [eax + 0x40f5b8]
jmp dword [eax*4 + 0x40f594]
lea ecx, [esp + 0x104]
jmp 0x40e1d1
mov eax, dword [ebp + 0x30]
or dword [ecx], 0x80000
or dword [eax + 0x64], 0x400
jmp 0x40e1d1
or dword [ecx], 1
jmp 0x40e1d1
or dword [ecx], 2
jmp 0x40e1d1
or dword [ecx], 4
jmp 0x40e1d1
or dword [ecx], 8
jmp 0x40e1d1
or dword [ecx], 0x200
jmp 0x40e1d1
or dword [ecx], 0x40
mov dl, byte [ebx]
cmp dl, 0x29
jne 0x40e170
mov esi, dword [esp + 0x118]
mov eax, dword [esp + 0x104]
or esi, dword [esp + 0x38]
not eax
and esi, eax
cmp byte [ebx], 0x29
mov dword [esp + 0x30], esi
jne 0x40e23d
mov eax, esi
mov dword [esp + 0x38], esi
shr eax, 9
xor edi, edi
and eax, 1
mov dword [esp + 0x1c], edi
mov dword [esp + 0x108], eax
xor eax, 1
mov dword [esp + 0x114], eax
mov eax, esi
and eax, 1
inc ebx
mov dword [esp + 0xb8], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0x10], ebx
mov dword [eax], esi
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x28]
jmp 0x40afe8
mov ecx, 0x83
inc ebx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x10], ebx
jmp 0x40e251
mov ecx, dword [esp + 0x18]
mov esi, dword [ebp + 0x30]
mov edi, dword [esp + 0x14]
mov edx, dword [esp + 0x20]
inc dword [esi + 0x58]
cmp dword [esi + 0x58], 0xfa
jg 0x40f1fc
lea eax, [ecx - 0x7d]
cmp eax, 3
ja 0x40e291
cmp dword [esi + 0x80], 0
je 0x40e291
mov dword [esp + 0x1c], 0
mov dword [esi + 0x80], 0
jmp 0x40e29f
mov eax, dword [esi + 0x20]
sub eax, dword [esi + 0x10]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x64], eax
mov byte [edi], cl
mov dword [esp + 0x48], edi
mov edi, dword [esi + 0x68]
mov esi, dword [esi + 0x40]
mov dword [esp + 0xb4], 0
cmp ecx, 0x7f
je 0x40e2c7
cmp ecx, 0x80
je 0x40e2c7
xor ecx, ecx
jmp 0x40e2cc
mov ecx, 1
mov eax, dword [ebp + 0x34]
lea ebx, [esp + 0xb4]
neg eax
sbb eax, eax
and eax, ebx
mov ebx, dword [esp + 0x18]
push eax
push dword [ebp + 0x30]
lea eax, [esp + 0xcc]
push dword [ebp + 0x28]
push eax
lea eax, [esp + 0x100]
push eax
lea eax, [esp + 0xd0]
push eax
lea eax, [esp + 0x114]
push eax
xor eax, eax
cmp ebx, 0x87
sete al
add eax, dword [ebp + 0x2c]
push eax
push edx
push dword [esp + 0x74]
lea eax, [esp + 0x38]
push ecx
push dword [ebp + 0x14]
push eax
lea eax, [esp + 0x7c]
push eax
push dword [esp + 0x68]
call fcn.0040f610
add esp, 0x3c
test eax, eax
je 0x40ee78
mov eax, dword [ebp + 0x30]
dec dword [eax + 0x58]
cmp ebx, 0x81
jne 0x40e3d1
cmp dword [eax + 0x40], esi
ja 0x40e35b
mov eax, dword [esp + 0x14]
mov byte [eax], 0x82
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0xc4]
mov ebx, dword [esp + 0x10]
cmp byte [ebx], 0x29
jne 0x40f1e5
mov esi, dword [ebp + 0x34]
test esi, esi
je 0x40e45c
mov edx, dword [esi]
mov esi, dword [esp + 0xb4]
mov ecx, dword [esp + 0xb0]
sub ecx, edx
lea eax, [esi - 6]
cmp ecx, eax
jl 0x40ee38
mov ecx, dword [ebp + 0x34]
lea eax, [esi - 6]
mov esi, dword [esp + 0x14]
add eax, edx
mov edi, dword [esp + 0x1c]
mov dword [ecx], eax
mov eax, dword [esp + 0x28]
mov dword [esi + 1], 0x780300
mov byte [esi + 5], 3
add esi, 6
mov ebx, dword [esp + 0x10]
inc ebx
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], ebx
jmp 0x40afe8
cmp ebx, 0x7d
jl 0x40e3e1
cmp ebx, 0x80
jg 0x40e3e1
dec dword [eax + 0x5c]
cmp ebx, 0x87
jne 0x40e35b
cmp dword [ebp + 0x34], 0
jne 0x40e35b
mov ebx, dword [esp + 0x14]
xor esi, esi
mov edx, ebx
nop
movzx ecx, byte [edx + 1]
inc esi
movzx eax, byte [edx + 2]
shl ecx, 8
or ecx, eax
add edx, ecx
cmp byte [edx], 0x78
jne 0x40e400
cmp byte [ebx + 3], 0x91
jne 0x40e42e
cmp esi, 1
jg 0x40f1af
mov edx, 0x91
jmp 0x40e35f
cmp esi, 2
jg 0x40f1ca
cmp esi, 1
jne 0x40e35b
mov edx, dword [esp + 0x18]
or eax, 0xffffffff
or ecx, eax
mov dword [esp + 0xc4], eax
mov dword [esp + 0xbc], ecx
jmp 0x40e366
mov esi, dword [esp + 0x48]
mov dword [esp + 0x14], esi
cmp edx, 0x91
je 0x40ee26
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x8c], ecx
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x60], ecx
mov ecx, dword [esp + 0x78]
mov dword [esp + 0xa0], ecx
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x70], ecx
mov ecx, dword [esp + 0xbc]
mov dword [esp + 0xcc], 0
cmp edx, 0x81
jl 0x40e53f
cmp dword [esp + 0x3c], 0xfffffffe
jne 0x40e4f5
test ecx, ecx
js 0x40e4e3
mov edx, dword [esp + 0xfc]
mov dword [esp + 0x78], edx
mov dword [esp + 0x3c], ecx
mov dword [esp + 0xcc], 1
mov dword [esp + 0x70], 0xffffffff
jmp 0x40e516
mov dword [esp + 0x3c], 0xffffffff
mov dword [esp + 0x70], 0xffffffff
jmp 0x40e516
test ecx, ecx
js 0x40e516
test eax, eax
jns 0x40e51e
mov eax, dword [esp + 0xfc]
mov dword [esp + 0xf0], eax
mov eax, ecx
or eax, edi
mov dword [esp + 0xc4], eax
test eax, eax
js 0x40ee26
mov ecx, dword [esp + 0xf0]
inc ebx
mov edi, dword [esp + 0x1c]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x10], ebx
jmp 0x40afe8
cmp edx, 0x7d
jne 0x40ee26
test eax, eax
js 0x40ee26
test ecx, ecx
js 0x40ee26
mov ecx, dword [esp + 0xf0]
inc ebx
mov edi, dword [esp + 0x1c]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x10], ebx
jmp 0x40afe8
cmp esi, 0x2b
jne 0x40e761
test edx, edx
je 0x40f243
mov esi, dword [ebp + 0x30]
add edx, dword [esi + 0x40]
mov dword [esp + 0x18], edx
jmp 0x40e764
cmp edx, 0x1c
jne 0x40e9c9
mov ebx, dword [esp + 0x10]
mov al, byte [ebx + 1]
cmp al, 0x3c
je 0x40e5b9
cmp al, 0x27
je 0x40e5b9
cmp al, 0x7b
jne 0x40f27f
inc ebx
xor esi, esi
mov dword [esp + 0x10], ebx
mov dword [esp + 0x50], esi
mov al, byte [ebx]
cmp al, 0x3c
jne 0x40e5d4
mov dword [esp + 0x24], 0x3e
jmp 0x40e5e6
xor ecx, ecx
cmp al, 0x27
setne cl
dec ecx
and ecx, 0xffffffaa
add ecx, 0x7d
mov dword [esp + 0x24], ecx
inc ebx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x34], ebx
mov al, byte [ebx]
cmp al, 0x30
jb 0x40e5fd
cmp al, 0x39
jbe 0x40f293
mov edx, dword [ebp + 0x30]
movzx eax, al
mov ecx, dword [edx + 0xc]
test byte [eax + ecx], 0x10
je 0x40e61e
lea esp, [esp]
inc ebx
mov dword [esp + 0x10], ebx
movzx eax, byte [ebx]
test byte [eax + ecx], 0x10
jne 0x40e610
mov ecx, dword [esp + 0x34]
mov edi, ebx
sub edi, ecx
cmp dword [ebp + 0x34], 0
je 0x40e6ea
xor edx, edx
mov dword [esp + 0x18], edx
test edi, edi
je 0x40f2a7
mov eax, dword [esp + 0x24]
cmp byte [ebx], al
jne 0x40f16c
cmp edi, 0x20
jg 0x40f0ed
mov ebx, dword [ebp + 0x30]
test esi, esi
jne 0x40e65d
inc dword [ebx + 0x54]
mov esi, dword [ebp + 0x34]
add dword [esi], 0xe
cmp dword [ebx + 0x7c], edx
je 0x40e66b
add dword [esi], 0xc
mov eax, dword [ebp + 0x30]
mov esi, dword [ebx + 0x28]
xor ebx, ebx
cmp dword [eax + 0x30], edx
jle 0x40e754
lea esp, [esp]
cmp edi, dword [esi + 4]
jne 0x40e6d6
push edi
push dword [esi]
push ecx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x40e6cb
mov edx, dword [esi + 8]
mov dword [esp + 0x18], edx
cmp dword [esp + 0x50], eax
jne 0x40e761
mov ecx, dword [ebp + 0x30]
mov ecx, dword [ecx + 0x24]
test ecx, ecx
je 0x40e6cf
movzx eax, word [ecx + 4]
cmp eax, edx
je 0x40e6c0
mov ecx, dword [ecx]
test ecx, ecx
jne 0x40e6b0
jmp 0x40e6cf
mov eax, 1
mov word [ecx + 6], ax
jmp 0x40e6cf
mov edx, dword [esp + 0x18]
mov eax, dword [ebp + 0x30]
mov ecx, dword [esp + 0x34]
inc ebx
add esi, 0xc
mov dword [esp + 0xa8], ebx
cmp ebx, dword [eax + 0x30]
jl 0x40e680
mov esi, ebx
jmp 0x40e756
mov eax, dword [edx + 0x2c]
xor esi, esi
mov dword [esp + 0x74], eax
cmp esi, dword [edx + 0x30]
jge 0x40f078
mov ebx, eax
mov edi, edi
push edi
lea eax, [ebx + 2]
push eax
push ecx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x40e718
cmp byte [ebx + edi + 2], al
je 0x40e72e
mov edx, dword [ebp + 0x30]
inc esi
mov ecx, dword [esp + 0x34]
add ebx, dword [edx + 0x34]
mov dword [esp + 0x74], ebx
cmp esi, dword [edx + 0x30]
jl 0x40e700
jmp 0x40e731
mov edx, dword [ebp + 0x30]
mov ebx, dword [esp + 0x10]
mov eax, dword [esp + 0x74]
cmp esi, dword [edx + 0x30]
jge 0x40f078
movzx edx, byte [eax]
movzx eax, byte [eax + 1]
shl edx, 8
or edx, eax
mov dword [esp + 0x18], edx
jmp 0x40e756
xor esi, esi
cmp dword [esp + 0x50], 0
je 0x40e877
mov esi, dword [ebp + 0x30]
mov eax, dword [esi + 0x20]
sub eax, dword [esi + 0x10]
cmp dword [ebp + 0x34], 0
mov edi, dword [esp + 0x14]
mov ebx, dword [esi + 0x14]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x64], eax
jne 0x40e829
mov byte [edi], 0
test edx, edx
je 0x40e7a0
push edx
push dword [esp + 0x48]
push dword [esi + 0x14]
call fcn.00408d40
mov edx, dword [esp + 0x24]
add esp, 0xc
mov ebx, eax
test ebx, ebx
jne 0x40e7fb
cmp edx, dword [esi + 0x44]
jg 0x40f2be
mov eax, dword [esi + 0x10]
mov ebx, dword [esi + 0x14]
add eax, 0xffffff9c
add eax, dword [esi + 0x3c]
add ebx, edx
cmp dword [esi + 0x20], eax
jb 0x40e7d6
push esi
call fcn.0040fff0
mov ecx, dword [ebp + 0x14]
add esp, 4
mov dword [ecx], eax
test eax, eax
jne 0x40ee78
mov edx, dword [esp + 0x14]
mov ecx, edx
sub ecx, dword [esi + 0x14]
mov eax, dword [esi + 0x20]
inc ecx
sar ecx, 8
mov byte [eax], cl
mov cl, dl
sub cl, byte [esi + 0x14]
mov eax, dword [esi + 0x20]
inc cl
mov byte [eax + 1], cl
add dword [esi + 0x20], 2
jmp 0x40e82d
movzx ecx, byte [ebx + 1]
movzx eax, byte [ebx + 2]
shl ecx, 8
or ecx, eax
jne 0x40e829
cmp dword [ebp + 0x2c], ecx
jg 0x40e829
push esi
push dword [esp + 0x48]
push dword [ebp + 0x28]
push edi
push ebx
call fcn.0040fb10
add esp, 0x14
test eax, eax
jne 0x40f2d9
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x3c]
mov eax, ebx
mov byte [edx], 0x75
sub eax, dword [esi + 0x14]
sar eax, 8
mov byte [edx + 1], al
sub bl, byte [esi + 0x14]
mov byte [edx + 2], bl
add edx, 3
mov dword [esp + 0x14], edx
mov dword [esp + 0xcc], 0
cmp ecx, 0xfffffffe
jne 0x40e863
or ecx, 0xffffffff
mov dword [esp + 0x3c], ecx
mov eax, dword [esp + 0x78]
mov dword [esp + 0xa0], eax
mov dword [esp + 0x70], ecx
jmp case.default.0x40d638
cmp dword [ebp + 0x34], 0
jne 0x40e9d9
mov edi, dword [ebp + 0x30]
cmp dword [edi + 0x78], 0
je 0x40ea3b
mov ecx, dword [edi + 0x34]
mov ebx, 1
mov eax, dword [esp + 0x74]
add ecx, eax
mov edi, dword [edi + 0x30]
mov dword [esp + 0x90], esi
inc esi
mov dword [esp + 0x4c], ecx
cmp esi, edi
jge 0x40e9d9
add eax, 2
mov dword [esp + 0xa8], eax
lea ecx, [ecx]
add ecx, 2
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40e8e3
test dl, dl
je 0x40e8df
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40e8e3
add eax, 2
add ecx, 2
test dl, dl
jne 0x40e8c3
xor eax, eax
jmp 0x40e8e8
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40e907
mov eax, dword [ebp + 0x30]
inc esi
mov ecx, dword [esp + 0x4c]
inc ebx
add ecx, dword [eax + 0x34]
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x4c], ecx
cmp esi, edi
jl 0x40e8c0
cmp ebx, 1
jle 0x40e9d5
cmp dword [esp + 0x3c], 0xfffffffe
jne 0x40e91f
mov dword [esp + 0x3c], 0xffffffff
mov edi, dword [ebp + 0x30]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x90]
mov esi, dword [esp + 0x4c]
mov eax, dword [edi + 0x20]
sub eax, dword [edi + 0x10]
test byte [esp + 0x38], 1
mov dword [esp + 0x64], eax
setne al
mov dword [esp + 0x1c], edx
add al, 0x73
mov byte [edx], al
mov eax, ecx
shr eax, 8
mov byte [edx + 1], al
mov eax, ebx
mov byte [edx + 2], cl
sar eax, 8
mov byte [edx + 4], bl
mov ebx, dword [esp + 0x74]
mov byte [edx + 3], al
add edx, 5
mov dword [esp + 0x14], edx
cmp ebx, esi
jae 0x40edc1
movzx edx, byte [ebx]
movzx eax, byte [ebx + 1]
shl edx, 8
or edx, eax
mov eax, 1
cmp edx, 0x20
jge 0x40e98e
mov ecx, edx
shl eax, cl
or dword [edi + 0x50], eax
cmp edx, dword [edi + 0x4c]
jle 0x40e999
mov dword [edi + 0x4c], edx
mov ecx, dword [edi + 0x24]
test ecx, ecx
je 0x40e9b9
movzx eax, word [ecx + 4]
cmp eax, edx
je 0x40e9b0
mov ecx, dword [ecx]
test ecx, ecx
jne 0x40e9a0
jmp 0x40e9b9
mov eax, 1
mov word [ecx + 6], ax
add ebx, dword [edi + 0x34]
cmp ebx, esi
jb 0x40e974
mov dword [esp + 0x74], ebx
jmp case.default.0x40d638
test edx, edx
jns 0x40ea9e
neg edx
jmp 0x40e9e4
mov edx, dword [esp + 0x18]
mov esi, dword [ebp + 0x30]
mov ecx, dword [esp + 0x3c]
mov ebx, dword [esp + 0x38]
cmp ecx, 0xfffffffe
jne 0x40e9f9
mov dword [esp + 0x3c], 0xffffffff
mov dword [esp + 0x70], 0xffffffff
mov eax, dword [esi + 0x20]
sub eax, dword [esi + 0x10]
test bl, 1
mov ecx, dword [esp + 0x14]
mov edi, ecx
mov dword [esp + 0x64], eax
setne al
add al, 0x71
mov dword [esp + 0x1c], edi
mov byte [ecx], al
mov eax, edx
sar eax, 8
mov byte [ecx + 1], al
mov byte [ecx + 2], dl
add ecx, 3
mov dword [esp + 0x14], ecx
cmp edx, 0x20
jge 0x40ea3f
mov ebx, 1
mov ecx, edx
mov eax, ebx
shl eax, cl
jmp 0x40ea46
mov esi, edi
jmp 0x40e9dc
mov eax, 1
mov ebx, eax
or dword [esi + 0x50], eax
cmp edx, dword [esi + 0x4c]
jle 0x40ea51
mov dword [esi + 0x4c], edx
mov ecx, dword [esi + 0x24]
test ecx, ecx
je 0x40edc5
lea esp, [esp]
movzx eax, word [ecx + 4]
cmp eax, edx
je 0x40ea84
mov ecx, dword [ecx]
test ecx, ecx
jne 0x40ea60
mov ebx, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
inc ebx
mov eax, dword [esp + 0x28]
mov dword [esp + 0x10], ebx
jmp 0x40afe8
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x28]
mov word [ecx + 6], bx
mov ebx, dword [esp + 0x10]
inc ebx
mov dword [esp + 0x10], ebx
jmp 0x40afe8
cmp edx, 0xf
je 0x40eb49
cmp edx, 0x10
je 0x40eb49
cmp edx, 5
je 0x40eabf
cmp edx, 4
je 0x40eabf
cmp edx, 1
jne 0x40eacc
cmp dword [esi + 0x48], 0
jne 0x40eacc
mov dword [esi + 0x48], 1
lea ebx, [edx - 0x1d]
cmp ebx, 5
ja 0x40eaf7
mov ebx, dword [ebx*4 + 0x4977d0]
mov eax, dword [esp + 0x10]
dec ebx
mov esi, dword [esp + 0x14]
inc eax
mov edi, dword [esp + 0x1c]
inc ebx
mov dword [esp + 0x28], eax
mov dword [esp + 0x10], ebx
jmp 0x40afe8
mov ecx, 0x10
lea eax, [edx - 6]
cmp ecx, eax
sbb ecx, ecx
not ecx
and ecx, dword [esp + 0x14]
mov dword [esp + 0x1c], ecx
mov ecx, dword [esi + 0x20]
sub ecx, dword [esi + 0x10]
cmp dword [esp + 0x44], 0
mov dword [esp + 0x64], ecx
jne 0x40eb28
cmp edx, 0xe
jne 0x40eb28
mov edx, 0xd
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x28]
mov byte [esi], dl
inc esi
mov ebx, dword [esp + 0x10]
inc ebx
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], ebx
jmp 0x40afe8
push edi
lea eax, [esp + 0x104]
mov dword [esp + 0x120], 0
push eax
lea eax, [esp + 0x124]
mov dword [esp + 0x108], 0
push eax
lea eax, [esp + 0x138]
push eax
lea eax, [esp + 0x20]
push eax
call fcn.00410e40
add esp, 0x14
test eax, eax
je 0x40ee78
mov edx, dword [esi + 0x20]
xor eax, eax
sub edx, dword [esi + 0x10]
cmp dword [esp + 0x18], 0x10
mov edi, dword [esp + 0x14]
mov esi, edi
sete al
mov dword [esp + 0x1c], edi
cmp eax, dword [esp + 0x12c]
mov dword [esp + 0x64], edx
setne al
add al, 0xf
mov byte [esi], al
movzx eax, byte [esp + 0x11c]
mov byte [esi + 1], al
movzx eax, byte [esp + 0x100]
mov byte [esi + 2], al
add esi, 3
mov ebx, dword [esp + 0x10]
mov eax, dword [esp + 0x28]
inc ebx
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], ebx
jmp 0x40afe8
movzx ecx, byte [esp + 0x85]
movzx eax, byte [esp + 0x86]
and ecx, 0x3f
test bl, 0x10
jne 0x40ec0d
and ebx, 0xf
shl ebx, 6
or ebx, ecx
jmp 0x40ec8d
and eax, 0x3f
test bl, 8
jne 0x40ec2c
and ebx, 7
shl ebx, 6
or ebx, ecx
shl ebx, 6
or ebx, eax
movzx eax, byte [esp + 0x87]
jmp 0x40ec8d
test bl, 4
jne 0x40ec58
and ebx, 3
shl ebx, 6
or ebx, ecx
shl ebx, 6
or ebx, eax
movzx eax, byte [esp + 0x87]
and eax, 0x3f
shl ebx, 6
or ebx, eax
movzx eax, byte [esp + 0x88]
jmp 0x40ec8d
and ebx, 1
shl ebx, 6
or ebx, ecx
shl ebx, 6
or ebx, eax
movzx eax, byte [esp + 0x87]
and eax, 0x3f
shl ebx, 6
or ebx, eax
movzx eax, byte [esp + 0x88]
and eax, 0x3f
shl ebx, 6
or ebx, eax
movzx eax, byte [esp + 0x89]
and eax, 0x3f
shl ebx, 6
or ebx, eax
mov eax, ebx
cdq
and edx, 0x7f
add eax, edx
sar eax, 7
movzx eax, byte [eax + 0x47a5f8]
shl eax, 7
and ebx, 0x8000007f
jns 0x40ecb7
dec ebx
or ebx, 0xffffff80
inc ebx
mov edx, dword [esp + 0x14]
add eax, ebx
movzx eax, word [eax*2 + 0x47c7f8]
movzx eax, byte [eax*8 + 0x478f7b]
test eax, eax
je 0x40ed13
mov edi, dword [esp + 0x1c]
mov word [edx], 0x910
mov byte [edx + 2], al
add edx, 3
cmp dword [esp + 0x3c], 0xfffffffe
mov dword [esp + 0x14], edx
jne 0x40edc5
mov ebx, dword [esp + 0x10]
mov esi, edx
mov eax, dword [esp + 0x28]
inc ebx
mov dword [esp + 0x70], 0xffffffff
mov dword [esp + 0x3c], 0xffffffff
mov dword [esp + 0x10], ebx
jmp 0x40afe8
test byte [esp + 0x38], 1
setne al
xor ecx, ecx
add al, 0x1d
mov byte [edx], al
inc edx
mov dword [esp + 0x14], edx
test esi, esi
je 0x40ed43
lea ebx, [ebx]
mov al, byte [esp + ecx + 0x84]
inc ecx
mov byte [edx], al
inc edx
cmp ecx, esi
jb 0x40ed30
mov dword [esp + 0x14], edx
mov al, byte [esp + 0x84]
cmp al, 0xd
je 0x40ed52
cmp al, 0xa
jne 0x40ed59
or dword [edi + 0x64], 0x800
mov ecx, dword [esp + 0x3c]
cmp ecx, 0xfffffffe
jne 0x40eddb
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x8c], ecx
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x70], 0xffffffff
mov dword [esp + 0x60], ecx
cmp esi, 1
je 0x40eda5
cmp dword [esp + 0xb8], 0
je 0x40eda5
mov dword [esp + 0x5c], 0xffffffff
mov dword [esp + 0x3c], 0xffffffff
jmp case.default.0x40d638
movzx eax, al
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x3c], eax
cmp esi, 1
je 0x40edc1
mov ecx, dword [edi + 0x68]
jmp 0x40ee12
mov edi, dword [esp + 0x1c]
mov ebx, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
inc ebx
mov eax, dword [esp + 0x28]
mov dword [esp + 0x10], ebx
jmp 0x40afe8
mov eax, dword [esp + 0x78]
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x70], ecx
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x60], ecx
cmp esi, 1
je 0x40ee0d
test eax, eax
jne case.default.0x40d638
mov ecx, dword [edi + 0x68]
or ecx, eax
movzx edx, byte [edx - 1]
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x6c], edx
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x10]
mov edi, dword [esp + 0x1c]
inc ebx
mov eax, dword [esp + 0x28]
mov dword [esp + 0x10], ebx
jmp 0x40afe8
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x14
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
add ecx, dword [edx + 0x10]
cmp esi, ecx
mov ecx, dword [ebp + 0x14]
sbb eax, eax
and eax, 0x23
add eax, 0x34
mov dword [ecx], eax
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x1e
mov eax, dword [ebp + 0x10]
mov ebx, dword [esp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x1f
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov dword [ebx], 7
mov ebx, dword [esp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov dword [ebx], 0x47
mov ebx, dword [esp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov dword [ebx], 0x53
mov ebx, dword [esp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x53
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 8
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 6
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp + 0x14]
xor eax, eax
cmp byte [ebx + 1], 0x3a
setne al
dec eax
and eax, 0xffffffee
add eax, 0x1f
mov dword [ecx], eax
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov ebx, dword [esp + 0x10]
mov dword [eax], 0x14
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov dword [edx], 9
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x4b
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov ebx, dword [esp + 0x10]
mov dword [eax], 0x3b
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov ebx, dword [esp + 0x10]
mov dword [eax], 0x42
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov ebx, dword [esp + 0x10]
mov dword [eax], 0x3c
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x3c
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x1c
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov al, byte [ebx]
cmp al, 0x30
jb 0x40f02f
lea esp, [esp]
cmp al, 0x39
ja 0x40f02f
inc ebx
mov dword [esp + 0x10], ebx
mov al, byte [ebx]
cmp al, 0x30
jae 0x40f020
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x3d
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x54
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x23
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ebx, dword [esp + 0x10]
mov eax, dword [ebp + 0x14]
mov dword [eax], 0xf
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
dec ebx
mov dword [eax], 0x1a
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
inc ebx
mov dword [eax], 0x18
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x26
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x27
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x30
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov ebx, dword [esp + 0x10]
mov dword [eax], 0x2b
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov ebx, dword [esp + 0x10]
mov dword [eax], 0x41
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov ebx, dword [esp + 0x10]
mov dword [eax], 0x15
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x31
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x2a
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov dword [edi], 0x3f
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
dec ebx
mov dword [eax], 0xc
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov ebx, dword [esp + 0x10]
mov dword [eax], 0x36
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov ebx, dword [esp + 0x10]
mov dword [eax], 0x1b
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0xe
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x52
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov al, byte [ebx]
cmp al, 0x30
jb 0x40f22f
lea esp, [esp]
cmp al, 0x39
ja 0x40f22f
inc ebx
mov dword [esp + 0x10], ebx
mov al, byte [ebx]
cmp al, 0x30
jae 0x40f220
mov eax, dword [ebp + 0x10]
mov dword [edi], 0x3d
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov dword [edi], 0x3a
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov dword [edi], 0x1d
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov dword [edi], 0x39
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov dword [edi], 0x45
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov dword [edi], 0x54
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x3e
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov ebx, dword [esp + 0x10]
mov dword [eax], 0xf
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov ebx, dword [esp + 0x10]
mov dword [eax], 0x28
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x18]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x14]
mov esi, dword [ebp + 0x34]
mov dword [eax], ecx
mov eax, dword [ebp + 0x1c]
mov ecx, dword [esp + 0x3c]
mov dword [eax], ecx
mov eax, dword [ebp + 0x20]
mov ecx, dword [esp + 0x6c]
mov dword [eax], ecx
mov eax, dword [ebp + 0x24]
mov ecx, dword [esp + 0x5c]
mov dword [eax], ecx
mov eax, dword [ebp + 0xc]
mov dword [eax], edx
mov eax, dword [ebp + 0x10]
mov dword [eax], ebx
test esi, esi
je 0x40f354
mov ecx, dword [esi]
mov eax, edx
mov edi, dword [esp + 0xc0]
sub eax, edi
sub dword [esp + 0xb0], ecx
cmp dword [esp + 0xb0], eax
jl 0x40ee38
sub ecx, edi
add ecx, edx
mov dword [esi], ecx
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [eax], 0x34
mov eax, dword [ebp + 0x10]
pop edi
pop esi
mov dword [eax], ebx
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret