Function at 0x40aec0
Capabilities:
Check os version
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x41eba8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x124
push ebx
push ebp
mov ebp, ecx
push esi
push edi
xor edi, edi
mov ecx, dword [ebp + 0x14]
mov eax, dword [ebp + 0x164]
inc ecx
cmp eax, 1
mov dword [esp + 0x28], ebp
mov dword [ebp + 0x14], ecx
mov dword [esp + 0x88], edi
mov dword [esp + 0x8c], edi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], edi
mov dword [esp + 0x38], edi
jne 0x40b188
mov eax, dword [esp + 0x148]
lea ecx, [esp + 0x18]
push eax
push ecx
mov ecx, ebp
call fcn.00411c30
mov esi, dword [eax]
mov dl, byte [esp + 0x23]
mov ebx, dword [eax + 4]
mov byte [esp + 0xd8], dl
mov dword [esp + 0xdc], edi
mov dword [esp + 0xe0], edi
mov dword [esp + 0xe4], edi
mov al, byte [esp + 0x23]
mov dword [esp + 0x13c], edi
mov byte [esp + 0xe8], al
mov dword [esp + 0xec], edi
mov dword [esp + 0xf0], edi
mov dword [esp + 0xf4], edi
lea ecx, [esp + 0x23]
mov byte [esp + 0x13c], 1
push ecx
lea ecx, [esp + 0xfc]
call fcn.004135d0
lea edx, [esp + 0x43]
lea ecx, [esp + 0x108]
push edx
mov byte [esp + 0x140], 2
call fcn.004135d0
mov al, byte [esp + 0x43]
mov dword [esp + 0x13c], 3
mov dword [esp + 0x11c], edi
mov dword [esp + 0x118], edi
mov dword [esp + 0x12c], edi
mov dword [esp + 0x128], edi
mov dword [esp + 0x124], edi
mov dword [esp + 0x120], edi
mov dword [esp + 0x130], edi
mov byte [esp + 0xa0], al
mov dword [esp + 0xa4], edi
mov dword [esp + 0xa8], edi
mov dword [esp + 0xac], edi
cmp esi, edi
mov byte [esp + 0x13c], 4
jle 0x40b076
mov edx, dword [esp + 0xa8]
lea ecx, [esp + 0x118]
push ecx
push 1
push edx
lea ecx, [esp + 0xac]
call fcn.00417150
mov ecx, dword [esp + 0xf0]
lea eax, [esp + 0x14]
push eax
push 1
xor edi, edi
push ecx
lea ecx, [esp + 0xf4]
mov dword [esp + 0x20], edi
call fcn.00414eb0
mov eax, dword [esp + 0x110]
lea edx, [esp + 0x14]
push edx
push 1
push eax
lea ecx, [esp + 0x114]
mov dword [esp + 0x20], edi
call fcn.00414eb0
dec esi
jne 0x40b015
xor edi, edi
cmp ebx, edi
jle 0x40b0be
mov esi, ebx
mov edx, dword [esp + 0xe0]
lea ecx, [esp + 0xa0]
push ecx
push 1
push edx
lea ecx, [esp + 0xe4]
call fcn.00414c20
mov ecx, dword [esp + 0x100]
lea eax, [esp + 0x14]
push eax
push 1
push ecx
lea ecx, [esp + 0x104]
mov dword [esp + 0x20], edi
call fcn.00414eb0
dec esi
jne 0x40b07e
mov ebp, dword [esp + 0x28]
lea edx, [esp + 0xd8]
push edx
push 1
mov eax, dword [ebp + 0xc]
lea ecx, [ebp + 4]
push eax
call fcn.004150c0
mov eax, dword [esp + 0xa4]
push eax
call sub.MFC42.DLL_operatordelete
add esp, 4
mov dword [esp + 0xa4], edi
mov dword [esp + 0xa8], edi
mov dword [esp + 0xac], edi
mov ecx, dword [esp + 0x110]
mov edx, dword [esp + 0x10c]
push ecx
push edx
lea ecx, [esp + 0x110]
mov dword [esp + 0x144], 7
call fcn.00413e20
mov eax, dword [esp + 0x10c]
push eax
call sub.MFC42.DLL_operatordelete
add esp, 4
lea ecx, [esp + 0xf8]
mov dword [esp + 0x10c], edi
mov dword [esp + 0x110], edi
mov dword [esp + 0x114], edi
mov byte [esp + 0x13c], 6
call fcn.00413940
lea ecx, [esp + 0xe8]
mov byte [esp + 0x13c], 5
call fcn.00413940
lea ecx, [esp + 0xd8]
mov dword [esp + 0x13c], 0xffffffff
call fcn.004133a0
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
shl eax, 6
mov esi, eax
mov dword [esp + 0xd0], esi
add esi, ecx
mov cl, byte [esi]
mov byte [esp + 0x48], cl
mov ecx, esi
call fcn.00413970
cmp eax, edi
jge 0x40b1af
xor eax, eax
shl eax, 4
push eax
call sub.MFC42.DLL_operatornew
add esp, 4
mov dword [esp + 0x4c], eax
mov ecx, dword [esi + 8]
mov edx, dword [esi + 4]
push eax
push ecx
push edx
lea ecx, [esp + 0x54]
call fcn.004139d0
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], eax
lea edx, [esi + 0x10]
lea ecx, [esp + 0x58]
push edx
mov dword [esp + 0x140], 8
call fcn.004135f0
lea eax, [esi + 0x20]
lea ecx, [esp + 0x68]
push eax
mov byte [esp + 0x140], 9
call fcn.004135f0
add esi, 0x30
lea ecx, [esp + 0x78]
push esi
mov byte [esp + 0x140], 0xa
call fcn.004135f0
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x13c], 0xb
cmp ecx, edi
jne 0x40b234
mov dword [esp + 0x18], edi
jmp 0x40b241
mov eax, dword [esp + 0x60]
sub eax, ecx
sar eax, 2
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x6c]
cmp eax, edi
jne 0x40b24d
xor esi, esi
jmp 0x40b256
mov esi, dword [esp + 0x70]
sub esi, eax
sar esi, 2
lea ebx, [ebp + 0x3c]
push str.table
mov ecx, ebx
mov dword [esp + 0x20], esi
call fcn.0041dd56
push edi
mov ecx, ebp
call fcn.0040f240
mov eax, dword [ebx]
push ebx
push eax
mov ecx, ebp
call fcn.0040f210
lea ecx, [esp + 0xb0]
mov dword [esp + 0xd4], edi
call fcn.0041dd5c
mov eax, dword [esp + 0x148]
lea ecx, [esp + 0xd4]
lea edx, [esp + 0xb0]
push ecx
push edx
lea ecx, [esp + 0x1c]
push eax
push ecx
mov ecx, ebp
mov byte [esp + 0x14c], 0xc
call fcn.00411320
lea ecx, [esp + 0x14]
call sub.MFC42.DLL_CString::CString
lea edx, [esp + 0xb0]
lea eax, [esp + 0xbc]
push edx
push eax
mov ecx, ebp
call fcn.00411550
push 1
lea ecx, [esp + 0xc0]
push ebx
lea edx, [esp + 0xa8]
push ecx
push edx
mov ecx, ebp
mov byte [esp + 0x14c], 0xd
call fcn.004120c0
mov ecx, ebp
call fcn.0040f570
cmp dword [ebp + 0x164], 1
je 0x40b4eb
mov eax, dword [esp + 0x14c]
mov ebx, dword [esp + 0x5c]
cmp ebx, edi
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x38], eax
mov dword [esp + 0x30], eax
jne 0x40b339
xor eax, eax
jmp 0x40b342
mov eax, dword [esp + 0x60]
sub eax, ebx
sar eax, 2
mov edx, dword [ebp + 0xa8]
lea esi, [edx + eax - 1]
xor eax, eax
mov dword [esp + 0x10], esi
cmp ebx, edi
je 0x40b36d
mov ecx, dword [esp + 0x60]
sub ecx, ebx
sar ecx, 2
cmp eax, ecx
jae 0x40b36d
mov ecx, dword [ebx + eax*4]
add ecx, edx
add esi, ecx
inc eax
jmp 0x40b352
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x10], esi
cmp ecx, edi
jne 0x40b37d
xor eax, eax
jmp 0x40b386
mov eax, dword [esp + 0x70]
sub eax, ecx
sar eax, 2
add edx, eax
mov eax, dword [esp + 0x38]
lea edx, [eax + edx - 1]
xor eax, eax
mov dword [esp + 0x38], edx
cmp ecx, edi
je 0x40b3c3
mov edx, dword [esp + 0x70]
sub edx, ecx
sar edx, 2
cmp eax, edx
jae 0x40b3c3
mov edx, dword [ecx + eax*4]
mov esi, dword [ebp + 0xa8]
add edx, esi
mov esi, dword [esp + 0x38]
add esi, edx
inc eax
mov dword [esp + 0x38], esi
mov esi, dword [esp + 0x10]
jmp 0x40b396
mov ecx, dword [ebp + 0x88]
mov eax, 6
cmp ecx, eax
je 0x40b3da
mov eax, dword [ebp + 0x8c]
shl eax, 1
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x14]
add esi, eax
add ecx, eax
mov eax, dword [esp + 0x14c]
mov dword [esp + 0x10], esi
mov dword [esp + 0x38], ecx
mov eax, dword [eax + 8]
sub eax, edx
cmp esi, eax
mov dword [esp + 0x3c], eax
jge 0x40b4d5
mov edx, dword [esp + 0x80]
mov esi, eax
mov eax, dword [esp + 0x10]
sub esi, eax
mov eax, dword [esp + 0x7c]
xor edi, edi
mov dword [esp + 0x24], edi
test eax, eax
je 0x40b441
mov ecx, edx
sub ecx, eax
sar ecx, 2
cmp dword [esp + 0x24], ecx
jae 0x40b441
mov ecx, dword [esp + 0x24]
cmp dword [eax + ecx*4], 0
jne 0x40b43b
inc edi
inc dword [esp + 0x24]
jmp 0x40b41f
xor ecx, ecx
test eax, eax
je 0x40b48e
mov eax, edx
sub eax, dword [esp + 0x7c]
sar eax, 2
cmp ecx, eax
jae 0x40b48e
test edi, edi
jle 0x40b48e
mov eax, dword [esp + 0x7c]
cmp dword [eax + ecx*4], 0
jne 0x40b48b
mov eax, esi
cdq
idiv edi
mov edx, dword [ebx + ecx*4]
add edx, eax
sub esi, eax
mov dword [ebx + ecx*4], edx
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x5c]
dec edi
add edx, eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x80]
inc ecx
jmp 0x40b443
mov ecx, dword [esp + 0x3c]
mov eax, dword [esp + 0x10]
cmp eax, ecx
jge 0x40b4d5
mov eax, dword [ebp + 0x80]
dec eax
je 0x40b4bc
dec eax
jne 0x40b4d5
mov edx, dword [esp + 0x14c]
mov ecx, dword [esp + 0x10]
mov eax, dword [edx + 8]
sub eax, ecx
mov dword [esp + 0x2c], eax
jmp 0x40b4d5
mov eax, dword [esp + 0x3c]
mov edi, dword [esp + 0x10]
mov ecx, dword [esp + 0x2c]
sub eax, edi
cdq
sub eax, edx
sar eax, 1
add ecx, eax
mov dword [esp + 0x2c], ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x2c]
mov esi, dword [esp + 0x1c]
add eax, ecx
mov dword [esp + 0x34], eax
xor edi, edi
jmp 0x40b4ef
mov ebx, dword [esp + 0x5c]
cmp dword [ebp + 0x164], edi
jne 0x40b5cb
mov eax, dword [ebp + 0x78]
cmp eax, edi
jl 0x40b52b
mov edx, dword [ebp + 0x70]
mov ecx, dword [ebp + 0x6c]
push edi
push 5
push edx
mov edx, dword [ebp + 0x60]
push ecx
lea ecx, [esp + 0x3c]
push edx
mov edx, dword [ebp + 0x15c]
push ecx
push eax
push edx
lea ecx, [ebp + 0xd0]
call fcn.004070c0
jmp 0x40b56c
mov ecx, dword [ebp + 0x7c]
lea eax, [ebp + 0x7c]
cmp dword [ecx - 8], edi
je 0x40b570
push ecx
mov ecx, esp
mov dword [esp + 0xa4], esp
push eax
call sub.MFC42.DLL_CString::CString_2
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
sub edx, eax
push edx
mov edx, dword [esp + 0x3c]
sub edx, ecx
push edx
push eax
mov eax, dword [ebp + 0x15c]
push ecx
push eax
mov ecx, ebp
call fcn.00412e30
mov ebx, dword [esp + 0x5c]
mov ecx, dword [ebp + 0x8c]
cmp ecx, edi
jle 0x40b5cb
cmp dword [ebp + 0x144], edi
je 0x40b5a0
mov edx, dword [ebp + 0x68]
mov eax, dword [ebp + 0x64]
push ecx
mov ecx, dword [ebp + 0x88]
push ecx
push edx
mov edx, dword [ebp + 0x15c]
lea ecx, [esp + 0x38]
push eax
push ecx
push edx
jmp 0x40b5bc
mov eax, dword [ebp + 0x148]
push ecx
mov ecx, dword [ebp + 0x88]
lea edx, [esp + 0x30]
push ecx
push eax
push eax
mov eax, dword [ebp + 0x15c]
push edx
push eax
lea ecx, [ebp + 0xd0]
call fcn.00408060
mov ebx, dword [esp + 0x5c]
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x98], eax
mov eax, dword [ebp + 0x164]
mov dword [esp + 0x94], edx
mov edx, dword [esp + 0x38]
cmp eax, 1
mov dword [esp + 0x90], ecx
mov dword [esp + 0x9c], edx
je 0x40b65b
cmp dword [ebp + 0x88], 6
jne 0x40b61c
add ecx, 3
mov eax, 3
mov dword [esp + 0x90], ecx
jmp 0x40b62b
mov eax, dword [ebp + 0x8c]
add ecx, eax
mov dword [esp + 0x90], ecx
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x98]
add ecx, eax
sub edx, eax
mov dword [esp + 0x94], ecx
mov ecx, dword [esp + 0x9c]
sub ecx, eax
mov dword [esp + 0x98], edx
mov dword [esp + 0x9c], ecx
cmp dword [esp + 0x18], edi
je 0x40b7bd
cmp esi, edi
je 0x40b7bd
lea ecx, [esp + 0xc8]
mov dword [esp + 0x24], edi
call fcn.0041dd5c
lea ecx, [esp + 0xc4]
mov byte [esp + 0x13c], 0xe
call fcn.0041dd5c
lea ecx, [esp + 0xb4]
mov byte [esp + 0x13c], 0xf
call fcn.0041dd5c
mov eax, dword [esp + 0x1c]
xor esi, esi
cmp eax, edi
mov byte [esp + 0x13c], 0x10
jle 0x40b779
mov ebx, dword [esp + 0x148]
push ecx
mov ecx, esp
mov dword [esp + 0xa4], esp
push 0x425164
call sub.MFC42.DLL_CString::CString_1
lea edx, [esp + 0x28]
mov ecx, ebp
push edx
push ebx
call fcn.004117f0
cmp eax, edi
je 0x40b76c
mov eax, dword [esp + 0x24]
lea ecx, [esp + 0x3c]
push ecx
push ebx
mov ecx, ebp
mov dword [esp + 0x44], eax
call fcn.00411f30
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x24]
sub edx, eax
mov ecx, ebx
push edx
push eax
lea eax, [esp + 0xd4]
push eax
call sub.MFC42.DLL_CString::Mid
push eax
lea ecx, [esp + 0xb8]
mov byte [esp + 0x140], 0x11
call fcn.0041de40
lea ecx, [esp + 0xcc]
mov byte [esp + 0x13c], 0x10
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x48]
push esi
lea edx, [esp + 0x94]
push ecx
lea eax, [esp + 0xbc]
push edx
push eax
mov ecx, ebp
call fcn.0040c130
mov ecx, dword [esp + 0x3c]
add ecx, 5
mov dword [esp + 0x24], ecx
mov eax, dword [esp + 0x1c]
inc esi
cmp esi, eax
jl 0x40b6c2
lea ecx, [esp + 0xb4]
mov byte [esp + 0x13c], 0xf
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xc4]
mov byte [esp + 0x13c], 0xe
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xc8]
mov byte [esp + 0x13c], 0xd
call sub.MFC42.DLL_CString::CString
mov ebx, dword [esp + 0x5c]
mov esi, dword [esp + 0x1c]
cmp dword [ebp + 0x164], edi
je 0x40bb08
mov eax, dword [esp + 0x18]
mov ebp, 1
cmp eax, ebp
jl 0x40b955
jmp 0x40b7e0
mov esi, dword [esp + 0x1c]
cmp esi, edi
jle 0x40b948
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x44], edi
mov dword [esp + 0x14], edx
jmp 0x40b7f8
xor edi, edi
cmp dword [esp + 0x18], edi
jle 0x40b92c
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x44]
xor esi, esi
xor edi, edi
lea edx, [eax + ecx + 4]
mov ecx, dword [esp + 0x18]
lea eax, [ebp*4]
mov dword [esp + 0xa0], edx
mov dword [esp + 0x10], esi
mov dword [esp + 0xb8], eax
mov dword [esp + 0xc0], ecx
jmp 0x40b83c
mov esi, dword [esp + 0x10]
mov edx, dword [esp + 0xa0]
mov ecx, dword [edx]
cmp dword [ecx + edi], ebp
jne 0x40b8fc
cmp ebp, 1
jne 0x40b880
mov eax, dword [ebx + esi]
mov edx, dword [ecx + edi + 0x10]
cmp eax, edx
jg 0x40b860
mov eax, edx
mov dword [ebx + esi], eax
mov eax, dword [ecx + edi + 0x18]
test eax, eax
je 0x40b8f4
mov eax, dword [esp + 0x7c]
mov dword [eax + esi], 1
mov ebx, dword [esp + 0x5c]
jmp 0x40b8fc
xor edx, edx
test ebp, ebp
jle 0x40b8ad
mov eax, esi
mov esi, ebp
add edx, dword [ebx + eax]
cmp dword [ecx + edi + 0x18], 0
je 0x40b8a3
mov ebx, dword [esp + 0x7c]
mov dword [ebx + eax], 1
mov ebx, dword [esp + 0x5c]
add eax, 4
dec esi
jne 0x40b88a
mov esi, dword [esp + 0x10]
cmp edx, dword [ecx + edi + 8]
jge 0x40b8fc
mov ecx, dword [ecx + edi + 0x10]
sub ecx, edx
mov eax, ecx
cdq
idiv ebp
mov esi, eax
mov eax, ecx
cdq
idiv ebp
mov eax, dword [esp + 0xb8]
mov ecx, dword [ebx + eax - 4]
add ecx, edx
test ebp, ebp
mov dword [ebx + eax - 4], ecx
jle 0x40b8f4
mov eax, dword [esp + 0x10]
mov edx, ebp
mov ecx, dword [esp + 0x5c]
add eax, 4
mov ebx, dword [ecx + eax - 4]
add ebx, esi
dec edx
mov dword [ecx + eax - 4], ebx
jne 0x40b8e0
mov ebx, dword [esp + 0x5c]
mov esi, dword [esp + 0x10]
mov ecx, dword [esp + 0xb8]
mov eax, dword [esp + 0xc0]
add edi, 0x1c
add esi, 4
add ecx, 4
dec eax
mov dword [esp + 0x10], esi
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xc0], eax
jne 0x40b838
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x14]
add ecx, 0x10
dec eax
mov dword [esp + 0x44], ecx
mov dword [esp + 0x14], eax
jne 0x40b7f6
xor edi, edi
mov eax, dword [esp + 0x18]
inc ebp
cmp ebp, eax
jle 0x40b7dc
mov eax, dword [esp + 0x1c]
mov edi, 1
cmp eax, edi
jl 0x40ba7a
mov ecx, dword [esp + 0x1c]
xor ebx, ebx
cmp ecx, ebx
jle 0x40ba71
mov eax, dword [esp + 0x18]
mov dword [esp + 0x44], ebx
test eax, eax
jle 0x40ba5d
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x44]
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], eax
lea ecx, [ecx + edx + 4]
mov dword [esp + 0xa0], ecx
mov edx, dword [esp + 0xa0]
mov eax, dword [esp + 0x10]
mov esi, dword [edx]
cmp dword [esi + eax + 4], edi
jne 0x40ba3b
cmp edi, 1
jne 0x40b9d9
mov edx, dword [esp + 0x6c]
mov ecx, dword [esp + 0x10]
mov eax, dword [edx + ebx*4]
mov ecx, dword [esi + ecx + 0x14]
cmp eax, ecx
jg 0x40b9d4
mov eax, ecx
mov dword [edx + ebx*4], eax
jmp 0x40ba3b
xor eax, eax
test edi, edi
jle 0x40b9f2
mov edx, dword [esp + 0x6c]
lea ecx, [edx + ebx*4]
mov edx, edi
mov ebp, dword [ecx]
add ecx, 4
add eax, ebp
dec edx
jne 0x40b9e8
mov ecx, dword [esp + 0x10]
mov ecx, dword [esi + ecx + 0x14]
cmp eax, ecx
jge 0x40ba3b
sub ecx, eax
lea esi, [ebx*4]
mov eax, ecx
cdq
idiv edi
mov ebp, eax
mov eax, ecx
cdq
idiv edi
mov eax, dword [esp + 0x6c]
mov ecx, dword [eax + esi]
add ecx, edx
test edi, edi
mov dword [eax + esi], ecx
jle 0x40ba3b
mov eax, esi
mov edx, edi
mov ecx, dword [esp + 0x6c]
add eax, 4
mov esi, dword [ecx + eax - 4]
add esi, ebp
dec edx
mov dword [ecx + eax - 4], esi
jne 0x40ba27
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
add ecx, 0x1c
dec eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], eax
jne 0x40b9a3
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x44]
inc ebx
add esi, 0x10
cmp ebx, ecx
mov dword [esp + 0x44], esi
jl 0x40b97c
inc edi
cmp edi, ecx
jle 0x40b966
mov ebp, dword [esp + 0x28]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x5c]
mov eax, dword [ebp + 0xa8]
test edx, edx
lea esi, [eax + edx - 1]
lea edi, [eax + ecx - 1]
jle 0x40bab6
mov ecx, ebx
mov dword [esp + 0x28], edx
mov edx, eax
add edx, dword [ecx]
add ecx, 4
add esi, edx
mov edx, dword [esp + 0x28]
dec edx
mov dword [esp + 0x28], edx
jne 0x40baa2
mov ecx, dword [esp + 0x1c]
test ecx, ecx
jle 0x40bade
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x28], edx
mov edx, eax
add edx, dword [ecx]
add ecx, 4
add edi, edx
mov edx, dword [esp + 0x28]
dec edx
mov dword [esp + 0x28], edx
jne 0x40baca
mov eax, dword [ebp + 0x88]
cmp eax, 6
mov eax, dword [ebp + 0x8c]
jne 0x40baf2
lea eax, [eax + eax*2]
shl eax, 1
add esi, eax
add edi, eax
mov dword [esp + 0x88], esi
mov dword [esp + 0x8c], edi
jmp 0x40bb2a
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
sub eax, edx
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x38]
sub eax, ecx
mov dword [esp + 0x8c], eax
mov eax, dword [ebp + 8]
mov ecx, dword [esp + 0xd0]
mov esi, dword [esp + 0x4c]
add eax, ecx
lea edx, [esp + 0x48]
mov dword [esp + 0x10], eax
cmp eax, edx
je 0x40bcb9
mov ecx, dword [esp + 0x50]
test esi, esi
jne 0x40bb56
xor edx, edx
jmp 0x40bb5d
mov edx, ecx
sub edx, esi
sar edx, 4
mov edi, dword [esp + 0x10]
mov ebx, dword [edi + 4]
test ebx, ebx
jne 0x40bb6c
xor eax, eax
jmp 0x40bb74
mov eax, dword [edi + 8]
sub eax, ebx
sar eax, 4
cmp edx, eax
ja 0x40bbec
cmp esi, ecx
mov edi, ecx
je 0x40bb98
push esi
mov ecx, ebx
call fcn.004186c0
add esi, 0x10
add ebx, 0x10
cmp esi, edi
jne 0x40bb7e
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x4c]
mov eax, dword [esp + 0x10]
mov edi, dword [eax + 8]
cmp ebx, edi
je 0x40bbbb
push 0
mov ecx, ebx
call fcn.004185d0
add ebx, 0x10
cmp ebx, edi
jne 0x40bba3
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x4c]
test esi, esi
jne 0x40bbd3
mov ecx, dword [esp + 0x10]
xor eax, eax
shl eax, 4
add eax, dword [ecx + 4]
mov dword [ecx + 8], eax
jmp 0x40bcb5
sub ecx, esi
sar ecx, 4
mov eax, ecx
mov ecx, dword [esp + 0x10]
shl eax, 4
add eax, dword [ecx + 4]
mov dword [ecx + 8], eax
jmp 0x40bcb5
test esi, esi
jne 0x40bbf4
xor edx, edx
jmp 0x40bbfb
mov edx, ecx
sub edx, esi
sar edx, 4
test ebx, ebx
jne 0x40bc03
xor eax, eax
jmp 0x40bc0b
mov eax, dword [edi + 0xc]
sub eax, ebx
sar eax, 4
cmp edx, eax
ja 0x40bc67
test ebx, ebx
jne 0x40bc17
xor eax, eax
jmp 0x40bc1f
mov eax, dword [edi + 8]
sub eax, ebx
sar eax, 4
shl eax, 4
add eax, esi
mov edi, eax
cmp esi, edi
je 0x40bc40
push esi
mov ecx, ebx
call fcn.004186c0
add esi, 0x10
add ebx, 0x10
cmp esi, edi
jne 0x40bc2a
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x10]
mov edx, dword [esi + 8]
push edx
push ecx
push edi
mov ecx, esi
call fcn.004139d0
lea ecx, [esp + 0x48]
call fcn.00413970
mov ecx, dword [esi + 4]
shl eax, 4
add eax, ecx
mov dword [esi + 8], eax
jmp 0x40bcb5
mov eax, dword [edi + 8]
mov ecx, edi
push eax
push ebx
call fcn.00413990
mov eax, dword [edi + 4]
push eax
call sub.MFC42.DLL_operatordelete
add esp, 4
lea ecx, [esp + 0x48]
call fcn.00413970
test eax, eax
jge 0x40bc8e
xor eax, eax
shl eax, 4
push eax
call sub.MFC42.DLL_operatornew
add esp, 4
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x4c]
push eax
push ecx
push edx
mov ecx, edi
call fcn.004139d0
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
mov ebx, dword [esp + 0x5c]
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x58]
lea esi, [eax + 0x10]
cmp esi, ecx
je 0x40bdf5
test ebx, ebx
jne 0x40bcd8
mov eax, dword [esp + 0x60]
xor edi, edi
jmp 0x40bce3
mov eax, dword [esp + 0x60]
mov edi, eax
sub edi, ebx
sar edi, 2
mov ecx, dword [esi + 4]
test ecx, ecx
jne 0x40bcee
xor edx, edx
jmp 0x40bcf6
mov edx, dword [esi + 8]
sub edx, ecx
sar edx, 2
cmp edi, edx
ja 0x40bd3d
cmp ebx, eax
je 0x40bd14
mov edx, dword [ebx]
add ebx, 4
mov dword [ecx], edx
add ecx, 4
cmp ebx, eax
jne 0x40bcfe
mov eax, dword [esp + 0x60]
mov ebx, dword [esp + 0x5c]
xor edi, edi
cmp ebx, edi
jne 0x40bd2a
mov ecx, dword [esi + 4]
xor eax, eax
lea edx, [ecx + eax*4]
mov dword [esi + 8], edx
jmp 0x40bdf7
mov ecx, dword [esi + 4]
sub eax, ebx
sar eax, 2
lea edx, [ecx + eax*4]
mov dword [esi + 8], edx
jmp 0x40bdf7
xor edi, edi
cmp ebx, edi
jne 0x40bd47
xor eax, eax
jmp 0x40bd4c
sub eax, ebx
sar eax, 2
cmp ecx, edi
jne 0x40bd54
xor edx, edx
jmp 0x40bd5c
mov edx, dword [esi + 0xc]
sub edx, ecx
sar edx, 2
cmp eax, edx
ja 0x40bda1
mov ecx, esi
call fcn.004137f0
mov ecx, dword [esp + 0x5c]
lea ebx, [ebx + eax*4]
mov eax, dword [esi + 4]
push eax
push ebx
push ecx
call fcn.00417db0
mov edx, dword [esi + 8]
mov eax, dword [esp + 0x6c]
add esp, 0xc
mov ecx, esi
push edx
push eax
push ebx
call fcn.00413a30
lea ecx, [esp + 0x58]
call fcn.004137f0
mov ecx, dword [esi + 4]
lea edx, [ecx + eax*4]
mov dword [esi + 8], edx
jmp 0x40bdf7
mov eax, dword [esi + 8]
push eax
push ecx
mov ecx, esi
call fcn.00413e20
mov eax, dword [esi + 4]
push eax
call sub.MFC42.DLL_operatordelete
add esp, 4
lea ecx, [esp + 0x58]
call fcn.004137f0
cmp eax, edi
jge 0x40bdc8
xor eax, eax
lea ecx, [eax*4]
push ecx
call sub.MFC42.DLL_operatornew
add esp, 4
mov dword [esi + 4], eax
mov edx, dword [esp + 0x60]
mov ecx, esi
push eax
mov eax, dword [esp + 0x60]
push edx
push eax
call fcn.00413a30
mov dword [esi + 8], eax
mov dword [esi + 0xc], eax
jmp 0x40bdf7
xor edi, edi
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x68]
lea esi, [ecx + 0x20]
cmp esi, edx
je 0x40bf23
mov ebx, dword [esp + 0x6c]
cmp ebx, edi
jne 0x40be16
xor edx, edx
jmp 0x40be1f
mov edx, dword [esp + 0x70]
sub edx, ebx
sar edx, 2
mov ecx, dword [esi + 4]
cmp ecx, edi
jne 0x40be2a
xor eax, eax
jmp 0x40be32
mov eax, dword [esi + 8]
sub eax, ecx
sar eax, 2
cmp edx, eax
ja 0x40be73
mov edx, dword [esp + 0x70]
mov eax, ebx
cmp ebx, edx
je 0x40be4e
mov edi, dword [eax]
add eax, 4
mov dword [ecx], edi
add ecx, 4
cmp eax, edx
jne 0x40be40
mov eax, dword [esi + 8]
push eax
push ecx
mov ecx, esi
call fcn.00413e20
lea ecx, [esp + 0x68]
call fcn.004137f0
mov ecx, dword [esi + 4]
xor edi, edi
lea edx, [ecx + eax*4]
mov dword [esi + 8], edx
jmp 0x40bf23
mov ecx, esi
call fcn.00413a10
lea ecx, [esp + 0x68]
mov ebx, eax
call fcn.004137f0
cmp eax, ebx
ja 0x40bece
mov ebx, dword [esp + 0x6c]
mov ecx, esi
call fcn.004137f0
mov ecx, dword [esp + 0x6c]
lea ebx, [ebx + eax*4]
mov eax, dword [esi + 4]
push eax
push ebx
push ecx
call fcn.00417db0
mov edx, dword [esi + 8]
mov eax, dword [esp + 0x7c]
add esp, 0xc
mov ecx, esi
push edx
push eax
push ebx
call fcn.00413a30
lea ecx, [esp + 0x68]
call fcn.004137f0
mov ecx, dword [esi + 4]
lea edx, [ecx + eax*4]
mov dword [esi + 8], edx
jmp 0x40bf23
mov eax, dword [esi + 8]
mov ecx, dword [esi + 4]
push eax
push ecx
mov ecx, esi
call fcn.00413e20
mov eax, dword [esi + 4]
push eax
call sub.MFC42.DLL_operatordelete
add esp, 4
lea ecx, [esp + 0x68]
call fcn.004137f0
cmp eax, edi
jge 0x40bef8
xor eax, eax
lea edx, [eax*4]
push edx
call sub.MFC42.DLL_operatornew
add esp, 4
mov dword [esi + 4], eax
mov ecx, dword [esp + 0x6c]
push eax
mov eax, dword [esp + 0x74]
push eax
push ecx
mov ecx, esi
call fcn.00413a30
mov dword [esi + 8], eax
mov dword [esi + 0xc], eax
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x78]
push edx
lea ecx, [eax + 0x30]
call fcn.00413660
push str.table
lea ecx, [ebp + 0x3c]
call fcn.0041dd56
push 1
mov ecx, ebp
call fcn.0040f240
test eax, eax
je 0x40bf55
mov ecx, ebp
call fcn.0040f570
mov ebx, dword [esp + 0x144]
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0x8c]
mov byte [esp + 0x13c], 0xc
mov dword [ebx], ecx
lea ecx, [esp + 0xbc]
mov dword [ebx + 4], edx
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xb0]
mov byte [esp + 0x13c], 0xb
call sub.MFC42.DLL_CString::CString
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x13c], 0xffffffff
push eax
call sub.MFC42.DLL_operatordelete
mov ecx, dword [esp + 0x70]
mov dword [esp + 0x80], edi
push ecx
mov dword [esp + 0x88], edi
mov dword [esp + 0x8c], edi
call sub.MFC42.DLL_operatordelete
mov edx, dword [esp + 0x64]
mov dword [esp + 0x74], edi
push edx
mov dword [esp + 0x7c], edi
mov dword [esp + 0x80], edi
call sub.MFC42.DLL_operatordelete
mov eax, dword [esp + 0x5c]
mov esi, dword [esp + 0x58]
add esp, 0xc
cmp esi, eax
mov dword [esp + 0x5c], edi
mov dword [esp + 0x60], edi
mov dword [esp + 0x64], edi
mov ebp, eax
je 0x40c047
add esi, 4
mov ebx, dword [esi + 4]
mov edi, dword [esi]
cmp edi, ebx
je 0x40c01d
push edi
lea ecx, [esi - 4]
call fcn.00404b90
add edi, 0x1c
cmp edi, ebx
jne 0x40c00d
mov eax, dword [esi]
push eax
call sub.MFC42.DLL_operatordelete
xor eax, eax
add esp, 4
mov dword [esi], eax
mov dword [esi + 4], eax
mov dword [esi + 8], eax
add esi, 0x10
lea ecx, [esi - 4]
cmp ecx, ebp
jne 0x40c004
mov esi, dword [esp + 0x4c]
mov ebx, dword [esp + 0x144]
push esi
call sub.MFC42.DLL_operatordelete
mov ecx, dword [esp + 0x138]
add esp, 4
mov eax, ebx
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x130
ret 0xc