Function at 0x407968
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push edi
push esi
push ebp
push ebx
sub esp, 0xf8
mov dword [esp + 0x88], eax
mov edx, dword [0x8423e0]
mov dword [esp + 0xb8], edx
mov ebp, dword [0x8423e4]
mov esi, dword [0x8423d0]
mov ecx, dword [0x8423d4]
mov dword [esp + 0x7c], ecx
mov ebx, dword [0x8423c4]
mov edx, dword [0x8423c8]
mov dword [esp + 0x40], edx
test eax, eax
jne 0x4079b7
mov eax, ebp
call fcn.0040789c
mov edx, 0x5944a0
mov ecx, dword [edx]
mov dword [esp + 0x50], ecx
mov edi, dword [edx + 4]
mov dword [esp + 0x54], edi
mov ecx, dword [edx + 8]
mov dword [esp + 0x58], ecx
mov ecx, dword [edx + 0xc]
mov dword [esp + 0x5c], ecx
mov ecx, dword [edx + 0x10]
mov dword [esp + 0x60], ecx
mov ecx, dword [edx + 0x14]
mov dword [esp + 0x64], ecx
mov ecx, dword [edx + 0x18]
mov dword [esp + 0x68], ecx
mov ecx, dword [edx + 0x1c]
mov dword [esp + 0x6c], ecx
mov ecx, dword [edx + 0x20]
mov dword [esp + 0x70], ecx
mov edx, dword [edx + 0x24]
mov dword [esp + 0x74], edx
mov ecx, ebx
xor edx, edx
mov dword [esp + 0x4c], edx
mov byte [ebp + 0x10e], 0
test ebx, ebx
jle 0x407a9d
xor edi, edi
mov eax, 1
lea edx, [eax + eax]
add edx, edx
cmp ecx, dword [esp + edx + 0x50]
jg 0x407a35
inc eax
cmp eax, 0xa
jl 0x407a1f
add eax, eax
lea edx, [eax + eax]
mov edx, dword [esp + edx + 0x4c]
mov eax, dword [0x5bcccc]
cmp edx, eax
jle 0x407a48
test eax, eax
jle 0x407a48
mov edx, eax
mov eax, dword [0x8423b4]
cmp edx, eax
jle 0x407a57
test eax, eax
jle 0x407a57
mov edx, eax
cmp edx, esi
jle 0x407a61
test esi, esi
jle 0x407a61
mov edx, esi
cmp ebx, 0x200
jge 0x407a72
cmp ecx, ebx
jne 0x407a72
mov edx, 0x200
sub ecx, edx
mov dword [ebp + edi*4 + 0x118], edx
movzx edx, byte [ebp + 0x10e]
inc edx
mov byte [ebp + 0x10e], dl
movzx edi, dl
cmp edi, 0x20
je 0x408ef5
test ecx, ecx
jg 0x407a1a
mov dword [esp + 0x4c], edx
mov eax, dword [esp + 0x40]
xor edx, edx
mov dword [esp + 0x38], edx
xor ecx, ecx
mov dword [esp + 0x9c], ecx
test eax, eax
jle 0x407b57
mov byte [ebp + 0x10f], 0
xor edi, edi
mov dword [esp + 0x78], esi
mov esi, dword [esp + 0x7c]
jmp 0x407ad1
mov byte [ebp + 0x10f], cl
mov ecx, 1
lea edx, [ecx + ecx]
add edx, edx
cmp eax, dword [esp + edx + 0x50]
jg 0x407aec
inc ecx
cmp ecx, 0xa
jl 0x407ad6
add ecx, ecx
lea edx, [ecx + ecx]
mov edx, dword [esp + edx + 0x4c]
mov ecx, dword [0x5bccd0]
cmp edx, ecx
jle 0x407b00
test ecx, ecx
jle 0x407b00
mov edx, ecx
mov ecx, dword [0x8423b8]
cmp edx, ecx
jle 0x407b10
test ecx, ecx
jle 0x407b10
mov edx, ecx
cmp edx, esi
jle 0x407b1a
test esi, esi
jle 0x407b1a
mov edx, esi
sub eax, edx
mov dword [ebp + edi*4 + 0x198], edx
movzx ecx, byte [ebp + 0x10f]
inc ecx
mov edx, ecx
movzx edi, cl
cmp edi, 0x20
je 0x408ec3
test eax, eax
jg 0x407acb
mov dword [esp + 0x9c], edx
mov dword [esp + 0x38], ecx
mov esi, dword [esp + 0x78]
movzx edx, byte [ebp + 0x10e]
mov dword [esp + 0x4c], edx
movsx edx, byte [0x841bfc]
test edx, edx
je 0x407b7e
cmp byte [ebp + 0x10c], 2
je 0x40889f
mov edx, dword [esp + 0x9c]
mov byte [ebp + 0x10f], dl
jmp 0x407b8b
mov edx, dword [esp + 0x9c]
mov byte [ebp + 0x10f], dl
mov edx, dword [esp + 0x4c]
movzx edx, dl
mov dword [esp + 0x9c], edx
mov ecx, dword [esp + 0x38]
movzx ecx, cl
mov dword [esp + 0x38], ecx
mov eax, dword [0x5da068]
test eax, eax
je 0x408ead
test eax, eax
je 0x408e96
mov eax, dword [0x5da06c]
test eax, eax
je 0x408e81
test eax, eax
je 0x408e6a
mov eax, dword [0x5da070]
test eax, eax
je 0x408e55
test eax, eax
je 0x408e3e
mov eax, dword [0x5da074]
test eax, eax
je 0x408e29
test eax, eax
je 0x408e12
mov eax, dword [0x5da078]
test eax, eax
je 0x408dfd
test eax, eax
je 0x408de6
mov eax, dword [0x5da07c]
test eax, eax
je 0x408dd1
test eax, eax
je 0x408dba
mov eax, dword [0x5da080]
test eax, eax
je 0x408da5
test eax, eax
je 0x408d8e
mov eax, dword [0x5da084]
test eax, eax
je 0x408d79
test eax, eax
je 0x408d62
mov eax, dword [0x5da088]
test eax, eax
je 0x408d4d
test eax, eax
je 0x408d36
xor edx, edx
mov dword [esp + 0x34], edx
mov dword [esp + 0xd8], edx
mov edi, dword [0x842350]
mov eax, dword [edi]
lea ecx, [esp + 0x34]
push edx
push ecx
push 2
push dword [0x5bccc8]
push 0x100
push 0x200
push edi
call dword [eax + 0x90]
test eax, eax
je 0x407cab
push 0x84c0b4
push 0x8472b0
call fcn.004a1aa0
add esp, 8
mov edx, dword [esp + 0x38]
test edx, edx
jle 0x4087e4
mov edi, 1
mov dword [esp + 0xd4], edi
mov ecx, 1
mov dword [esp + 0xec], ecx
xor edx, edx
mov dword [esp + 0x4c], edx
xor edi, edi
mov edx, dword [esp + 0x38]
lea ecx, [edx - 1]
mov eax, dword [esp + 0x9c]
lea edx, [eax - 1]
mov dword [esp + 0x84], edx
lea eax, [eax + eax]
add eax, eax
xor edx, edx
mov dword [esp + 0x3c], eax
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x90], edi
mov dword [esp + 0xbc], ebx
mov dword [esp + 0x78], esi
mov dword [esp + 0xa4], ebp
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x90]
mov eax, dword [eax + ecx*4 + 0x198]
mov ebx, dword [esp + 0x9c]
test ebx, ebx
jle 0x408d2a
xor esi, esi
xor ebp, ebp
mov ebx, dword [esp + 0x4c]
lea ecx, [ebx + eax]
mov edi, dword [esp + 0x40]
sub edi, ebx
add edi, ebx
mov dword [esp + 0xb4], edi
mov edi, dword [esp + 0xa4]
lea ebx, [edi + edx]
mov dword [esp + 0xf4], ebx
lea ebx, [eax - 1]
mov dword [esp + 0x80], ebx
xor ebx, ebx
lea edi, [edi + edx + 0x280]
mov dword [esp + 0xa0], edi
mov dword [esp + 0xc0], ecx
mov dword [esp + 0xe0], eax
mov dword [esp + 0x44], edx
mov edx, dword [esp + 0xec]
mov edi, dword [esp + 0xa4]
mov eax, dword [edi + ebp*4 + 0x118]
mov dword [esp + 0xdc], eax
lea edi, [eax + eax]
add edi, edi
mov ecx, dword [esp + 0xe0]
imul ecx, edi
cmp ecx, dword [0x5bc080]
jle 0x407df8
mov dword [0x5bc080], ecx
push ecx
push dword [0x5da068]
mov dword [esp + 0xf4], edx
call fcn.0047071f
mov edx, dword [esp + 0xf4]
add esp, 8
mov dword [0x5da068], eax
test eax, eax
je 0x408918
movsx eax, byte [0x841bfc]
test eax, eax
je 0x407e17
mov eax, dword [esp + 0xa4]
cmp byte [eax + 0x10c], 2
je 0x40831e
mov ecx, dword [esp + 0x8c]
mov eax, dword [esp + 0x90]
cmp eax, ecx
je 0x408010
mov eax, dword [esp + 0x84]
cmp ebp, eax
je 0x407efa
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0xc0]
cmp ecx, eax
jge 0x40831e
xor eax, eax
mov dword [esp + 0xcc], eax
lea eax, [esi + esi]
add eax, eax
mov dword [esp + 0xd0], eax
mov eax, ecx
imul eax, dword [esp + 0xbc]
mov dword [esp + 0xac], ebx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov ebx, eax
mov ebp, ecx
mov esi, dword [esp + 0xcc]
mov edx, dword [esp + 0xb8]
mov eax, dword [edx + 0xc0]
add eax, dword [esp + 0xd0]
lea edx, [ebx + ebx]
add edx, edx
add eax, edx
mov edx, esi
add edx, dword [0x5da068]
push edi
push eax
push edx
call dword [0x5d9aac]
add esp, 0xc
add esi, edi
add ebx, dword [esp + 0xbc]
inc ebp
mov edx, dword [esp + 0xc0]
cmp ebp, edx
jl 0x407e95
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, dword [esp + 0xec]
jmp 0x40831e
mov ecx, dword [esp + 0xbc]
sub ecx, esi
add ecx, ecx
add ecx, ecx
mov dword [esp + 0xb0], ecx
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0xc0]
cmp ecx, eax
jge 0x40831e
xor eax, eax
mov dword [esp + 0x48], eax
mov eax, edi
sub eax, dword [esp + 0xb0]
mov dword [esp + 0xcc], eax
lea eax, [esi + esi]
add eax, eax
mov dword [esp + 0xc8], eax
mov eax, ecx
imul eax, dword [esp + 0xbc]
mov dword [esp + 0xd0], eax
mov dword [esp + 0xc4], edi
mov dword [esp + 0xac], ebx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov ebx, ecx
mov ebp, eax
mov esi, dword [esp + 0x48]
mov edi, dword [esp + 0xb0]
mov eax, dword [esp + 0xb8]
mov eax, dword [eax + 0xc0]
add eax, dword [esp + 0xc8]
lea edx, [ebp + ebp]
add edx, edx
add eax, edx
mov edx, esi
add edx, dword [0x5da068]
push edi
push eax
push edx
call dword [0x5d9aac]
mov edx, dword [0x5da068]
add edx, edi
add edx, esi
push dword [0x8417ec]
mov eax, dword [esp + 0xdc]
push eax
push edx
call dword [0x5d9aa8]
add esp, 0x18
add esi, dword [esp + 0xc4]
add ebp, dword [esp + 0xbc]
inc ebx
mov eax, dword [esp + 0xc0]
cmp ebx, eax
jl 0x407f86
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, dword [esp + 0xec]
jmp 0x40831e
mov eax, dword [esp + 0x84]
cmp ebp, eax
je 0x408176
mov eax, dword [esp + 0x4c]
mov dword [esp + 0xb0], eax
mov ecx, dword [esp + 0xb4]
cmp eax, ecx
jge 0x40893d
xor eax, eax
mov dword [esp + 0xa8], eax
lea ecx, [esi + esi]
add ecx, ecx
mov dword [esp + 0xcc], ecx
mov eax, dword [esp + 0xb0]
imul eax, dword [esp + 0xbc]
mov dword [esp + 0xc8], eax
mov dword [esp + 0xac], ebx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov ebx, dword [esp + 0xa8]
mov ebp, eax
mov esi, dword [esp + 0xb0]
mov eax, dword [esp + 0xb8]
mov ecx, dword [eax + 0xc0]
add ecx, dword [esp + 0xcc]
lea edx, [ebp + ebp]
add edx, edx
add ecx, edx
mov eax, ebx
add eax, dword [0x5da068]
push edi
push ecx
push eax
call dword [0x5d9aac]
add esp, 0xc
add ebx, edi
add ebp, dword [esp + 0xbc]
inc esi
mov eax, dword [esp + 0xb4]
cmp esi, eax
jl 0x408090
mov dword [esp + 0xa8], ebx
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, dword [esp + 0xec]
mov ecx, dword [esp + 0xb4]
mov eax, dword [esp + 0xc0]
cmp ecx, eax
jge 0x40831e
mov dword [esp + 0xac], ebx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov ebx, ecx
mov ebp, eax
mov esi, dword [esp + 0xa8]
mov eax, esi
add eax, dword [0x5da068]
push dword [0x8417ec]
push edi
push eax
call dword [0x5d9aa8]
add esp, 0xc
add esi, edi
inc ebx
cmp ebx, ebp
jl 0x408135
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, dword [esp + 0xec]
jmp 0x40831e
mov eax, dword [esp + 0xbc]
sub eax, esi
add eax, eax
add eax, eax
mov dword [esp + 0xb0], eax
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0xd0], ecx
mov eax, dword [esp + 0xb4]
cmp ecx, eax
jge 0x408d1c
xor eax, eax
mov dword [esp + 0xa8], eax
mov ecx, edi
sub ecx, dword [esp + 0xb0]
mov dword [esp + 0xc8], ecx
lea eax, [esi + esi]
add eax, eax
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0xd0]
imul eax, dword [esp + 0xbc]
mov dword [esp + 0x48], eax
mov dword [esp + 0xc4], edi
mov dword [esp + 0xac], ebx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov ebx, dword [esp + 0xa8]
mov ebp, eax
mov esi, dword [esp + 0xd0]
mov edi, dword [esp + 0xb0]
mov eax, dword [esp + 0xb8]
mov ecx, dword [eax + 0xc0]
add ecx, dword [esp + 0xcc]
lea edx, [ebp + ebp]
add edx, edx
add ecx, edx
mov eax, ebx
add eax, dword [0x5da068]
push edi
push ecx
push eax
call dword [0x5d9aac]
mov edx, dword [0x5da068]
add edx, edi
add edx, ebx
push dword [0x8417ec]
mov eax, dword [esp + 0xd8]
push eax
push edx
call dword [0x5d9aa8]
add esp, 0x18
add ebx, dword [esp + 0xc4]
add ebp, dword [esp + 0xbc]
inc esi
mov eax, dword [esp + 0xb4]
cmp esi, eax
jl 0x408216
mov dword [esp + 0xa8], ebx
mov edi, dword [esp + 0xc4]
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, dword [esp + 0xec]
mov ecx, dword [esp + 0xb4]
mov eax, dword [esp + 0xc0]
cmp ecx, eax
jge 0x40831e
mov dword [esp + 0xac], ebx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov ebx, ecx
mov ebp, eax
mov esi, dword [esp + 0xa8]
mov eax, esi
add eax, dword [0x5da068]
push dword [0x8417ec]
push edi
push eax
call dword [0x5d9aa8]
add esp, 0xc
add esi, edi
inc ebx
cmp ebx, ebp
jl 0x4082e2
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, dword [esp + 0xec]
movsx eax, byte [0x8417c0]
test eax, eax
je 0x408342
movsx eax, byte [0x5bcc00]
test eax, eax
je 0x40833b
mov ecx, 0x100005
jmp 0x408347
mov ecx, 5
jmp 0x408347
mov ecx, 5
movsx eax, byte [0x8417cc]
test eax, eax
jne 0x4083c9
mov eax, dword [esp + 0x88]
test eax, eax
je 0x408367
mov edx, 1
jmp 0x4084ab
mov dword [esp + 0xa8], ecx
mov ecx, dword [0x842350]
mov eax, dword [ecx]
xor edi, edi
push edi
mov edx, dword [esp + 0xa4]
push edx
push edi
push dword [0x842348]
mov edx, 1
push edx
push edx
mov edx, dword [esp + 0xf8]
push edx
mov edx, dword [esp + 0xf8]
push edx
push ecx
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0xcc], ecx
call dword [eax + 0x5c]
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0xd4], eax
mov edx, 1
jmp 0x4084ab
cmp edx, 1
jne 0x40843f
mov eax, dword [esp + 0x88]
test eax, eax
je 0x4083e3
mov edx, 2
jmp 0x4084ab
mov dword [esp + 0xa8], ecx
mov ecx, dword [0x842350]
mov eax, dword [ecx]
xor edi, edi
push edi
mov edx, dword [esp + 0xa4]
push edx
push edi
push dword [0x842348]
push 1
push 2
mov edx, dword [esp + 0xf8]
push edx
mov edx, dword [esp + 0xf8]
push edx
push ecx
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0xcc], ecx
call dword [eax + 0x5c]
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0xd4], eax
mov edx, 2
jmp 0x4084ab
mov eax, dword [esp + 0x88]
test eax, eax
je 0x408451
mov edx, 4
jmp 0x4084ab
mov dword [esp + 0xa8], ecx
mov ecx, dword [0x842350]
mov eax, dword [ecx]
xor edi, edi
push edi
mov edx, dword [esp + 0xa4]
push edx
push edi
push dword [0x842348]
push 1
push 4
mov edx, dword [esp + 0xf8]
push edx
mov edx, dword [esp + 0xf8]
push edx
push ecx
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0xcc], ecx
call dword [eax + 0x5c]
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0xd4], eax
mov edx, 4
mov eax, dword [esp + 0xd4]
test eax, eax
jl 0x408cee
mov dword [esp + 0xf0], 0
mov eax, dword [0x5da068]
mov dword [esp + 0xc4], eax
movsx edi, byte [0x841bfc]
test edi, edi
je 0x4084ee
mov eax, dword [esp + 0xa4]
cmp byte [eax + 0x10c], 2
jne 0x4084ee
xor edx, edx
test edx, edx
jbe 0x40877f
xor edi, edi
mov dword [esp + 0xa8], ecx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov eax, dword [esp + 0xf4]
mov ebp, dword [eax + ebx + 0x280]
mov esi, dword [ebp]
lea edx, [esp + 0xf0]
push edx
push edi
push ebp
call dword [esi + 0x48]
test eax, eax
jne 0x40872e
mov eax, dword [0x842350]
mov ecx, edi
mov ebp, dword [esp + 0xdc]
sar ebp, cl
mov ecx, edi
mov esi, dword [esp + 0xe0]
sar esi, cl
mov ecx, dword [eax]
lea edx, [esp + 0xd8]
push 0
push edx
push 2
push dword [0x5bccc8]
push esi
push ebp
push eax
call dword [ecx + 0x90]
test eax, eax
je 0x408588
push 0x84c0b4
push 0x8472b0
call fcn.004a1aa0
add esp, 8
cmp edi, 1
je 0x408c88
cmp edi, 2
je 0x408c14
cmp edi, 3
je 0x408ba0
cmp edi, 4
je 0x408b2c
cmp edi, 5
je 0x408ab8
cmp edi, 6
je 0x408a44
cmp edi, 7
je 0x4089d9
cmp edi, 8
je 0x408983
mov edx, dword [esp + 0xd8]
mov dword [esp + 0xb0], edx
mov ecx, dword [edx]
lea eax, [esp + 0xe4]
push 0x2000
push 0
push eax
push edx
call dword [ecx + 0x34]
test eax, eax
jl 0x408967
test esi, esi
jle 0x408652
xor edx, edx
add ebp, ebp
add ebp, ebp
mov eax, dword [esp + 0xc4]
mov dword [esp + 0xd0], edi
mov dword [esp + 0xac], ebx
mov ebx, eax
mov edi, esi
mov esi, edx
mov ecx, esi
imul ecx, dword [esp + 0xe4]
add ecx, dword [esp + 0xe8]
push ebp
push ebx
push ecx
call dword [0x5d9aac]
add esp, 0xc
add ebx, ebp
inc esi
cmp esi, edi
jl 0x408620
mov edi, dword [esp + 0xd0]
mov ebx, dword [esp + 0xac]
mov eax, dword [esp + 0xb0]
mov edx, dword [eax]
push eax
call dword [edx + 0x38]
test eax, eax
jl 0x40894b
xor eax, eax
test eax, eax
jne 0x4086fe
movsx eax, byte [0x8417c0]
test eax, eax
jne 0x4086b9
mov edx, dword [0x842350]
mov ebp, dword [edx]
xor eax, eax
push eax
push dword [esp + 0xf4]
push eax
push dword [esp + 0xe4]
push edx
call dword [ebp + 0x78]
mov dword [esp + 0xd4], eax
test eax, eax
je 0x4086e0
push 0x84bdac
push 0x8472b0
call fcn.004a1aa0
add esp, 8
jmp 0x4086e0
xor edx, edx
push dword [0x8417ec]
mov eax, dword [esp + 0xac]
push eax
push edx
push edx
push dword [esp + 0xe8]
push edx
push edx
push dword [esp + 0x10c]
call fcn.004ce867
mov eax, dword [esp + 0xf0]
test eax, eax
je 0x4086f1
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov dword [esp + 0xf0], 0
jmp 0x408710
push 0x84c208
push 0x84b930
call fcn.00409038
add esp, 8
mov eax, dword [esp + 0xd8]
test eax, eax
je 0x408721
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov dword [esp + 0xd8], 0
jmp 0x408743
push edi
push 2
push 0x84be00
push 0x8472b0
call fcn.004a1aa0
add esp, 0x10
mov eax, dword [esp + 0xf0]
test eax, eax
je 0x408754
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov dword [esp + 0xf0], 0
inc edi
mov eax, dword [esp + 0xec]
cmp edi, eax
jb 0x408514
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, eax
mov eax, dword [esp + 0xdc]
lea esi, [esi + eax]
add ebx, 4
add dword [esp + 0xa0], 4
inc ebp
mov ecx, dword [esp + 0x9c]
cmp ebp, ecx
jl 0x407d9c
mov dword [esp + 0xec], edx
mov ecx, dword [esp + 0xc0]
mov edx, dword [esp + 0x44]
mov dword [esp + 0x4c], ecx
add edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x90]
inc eax
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x38]
cmp eax, ecx
jl 0x407d1a
mov esi, dword [esp + 0x78]
mov ebp, dword [esp + 0xa4]
fld dword [0x8423bc]
fnstcw word [esp + 0x28]
movzx eax, word [esp + 0x28]
or eax, 0xc00
mov dword [esp + 0x30], eax
fldcw word [esp + 0x30]
fistp qword [ebp + 0x238]
fldcw word [esp + 0x28]
fld dword [0x8423c0]
fnstcw word [esp + 0x28]
movzx eax, word [esp + 0x28]
or eax, 0xc00
mov dword [esp + 0x30], eax
fldcw word [esp + 0x30]
fistp qword [ebp + 0x240]
fldcw word [esp + 0x28]
mov edi, dword [0x8423c4]
mov dword [ebp + 0x88], edi
mov edx, dword [0x8423c8]
mov dword [ebp + 0x8c], edx
mov dword [ebp + 0xf0], edi
mov dword [ebp + 0xf4], edx
xor ecx, ecx
mov byte [ebp + 0x10d], cl
mov dword [ebp + 0x110], esi
mov esi, dword [esp + 0x7c]
mov dword [ebp + 0x114], esi
mov dword [0x8423c4], ecx
mov dword [0x8423c8], ecx
mov dword [0x8423bc], ecx
mov dword [0x8423c0], ecx
mov eax, dword [esp + 0x34]
test eax, eax
je 0x408892
mov edx, dword [eax]
push eax
call dword [edx + 8]
xor eax, eax
add esp, 0xf8
pop ebx
pop ebp
pop esi
pop edi
ret
fild dword [0x841e68]
fnstcw word [esp + 0x28]
movzx eax, word [esp + 0x28]
or eax, 0xc00
mov dword [esp + 0x30], eax
fldcw word [esp + 0x30]
fistp dword [ebp + 0x118]
fldcw word [esp + 0x28]
fild dword [0x841e6c]
fnstcw word [esp + 0x28]
movzx eax, word [esp + 0x28]
or eax, 0xc00
mov dword [esp + 0x30], eax
fldcw word [esp + 0x30]
fistp dword [ebp + 0x198]
fldcw word [esp + 0x28]
mov edx, 1
mov dword [esp + 0x4c], edx
mov ecx, 1
mov byte [ebp + 0x10e], cl
mov edx, 1
mov dword [esp + 0x38], edx
mov edx, 1
mov byte [ebp + 0x10f], dl
jmp 0x407b8b
push 0x84c0a0
push 0x8472b0
mov dword [esp + 0xf4], edx
call fcn.00409038
mov edx, dword [esp + 0xf4]
add esp, 8
jmp 0x407df8
xor eax, eax
mov dword [esp + 0xa8], eax
jmp 0x4080f8
push 0x84c488
push 0x8472b0
call fcn.004a1aa0
add esp, 8
mov eax, 2
jmp 0x408669
push 0x84c474
push 0x8472b0
call fcn.004a1aa0
add esp, 8
mov eax, 1
jmp 0x408669
mov eax, dword [0x5da088]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xdc]
lea ecx, [edx - 1]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5da068]
xor ecx, ecx
call fcn.00408f24
jmp 0x4085d0
mov eax, dword [esp + 0xdc]
lea edx, [eax - 1]
mov dword [esp + 0xb0], edx
mov eax, dword [0x5da084]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5da068]
xor ecx, ecx
call fcn.00408f24
jmp 0x4085d0
mov eax, dword [esp + 0xdc]
lea edx, [eax - 1]
mov dword [esp + 0xb0], edx
mov eax, dword [0x5da080]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5da068]
xor ecx, ecx
call fcn.00408f24
cmp edi, 7
je 0x4089ea
jmp 0x4085d0
mov eax, dword [esp + 0xdc]
lea edx, [eax - 1]
mov dword [esp + 0xb0], edx
mov eax, dword [0x5da07c]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5da068]
xor ecx, ecx
call fcn.00408f24
cmp edi, 6
je 0x408a55
jmp 0x4085d0
mov eax, dword [esp + 0xdc]
lea edx, [eax - 1]
mov dword [esp + 0xb0], edx
mov eax, dword [0x5da078]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5da068]
xor ecx, ecx
call fcn.00408f24
cmp edi, 5
je 0x408ac9
jmp 0x4085d0
mov eax, dword [esp + 0xdc]
lea edx, [eax - 1]
mov dword [esp + 0xb0], edx
mov eax, dword [0x5da074]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5da068]
xor ecx, ecx
call fcn.00408f24
cmp edi, 4
je 0x408b3d
jmp 0x4085d0
mov eax, dword [esp + 0xdc]
lea edx, [eax - 1]
mov dword [esp + 0xb0], edx
mov eax, dword [0x5da070]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5da068]
xor ecx, ecx
call fcn.00408f24
cmp edi, 3
je 0x408bb1
jmp 0x4085d0
mov eax, dword [0x5da06c]
mov dword [esp + 0xc4], eax
mov edx, dword [esp + 0xdc]
lea ecx, [edx - 1]
mov dword [esp + 0xb0], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5da068]
xor ecx, ecx
call fcn.00408f24
cmp edi, 2
je 0x408c25
jmp 0x4085d0
push 0x84c0e0
push 0x8472b0
call fcn.00409038
push 0x84c1e0
push 0x8472b0
call fcn.004a1aa0
mov eax, 0xffffffff
add esp, 0x108
pop ebx
pop ebp
pop esi
pop edi
ret
xor eax, eax
mov dword [esp + 0xa8], eax
jmp 0x4082a9
mov ecx, dword [esp + 0x4c]
lea ecx, [ecx + eax]
jmp 0x4087b6
push 0x84c0a0
push 0x8472b0
call fcn.00409038
add esp, 8
jmp 0x407c61
push 0x100
call fcn.004704bc
pop ecx
mov dword [0x5da088], eax
jmp 0x407c59
push 0x84c0a0
push 0x8472b0
call fcn.00409038
add esp, 8
jmp 0x407c4c
push 0x400
call fcn.004704bc
pop ecx
mov dword [0x5da084], eax
jmp 0x407c44
push 0x84c0a0
push 0x8472b0
call fcn.00409038
add esp, 8
jmp 0x407c37
push 0x1000
call fcn.004704bc
pop ecx
mov dword [0x5da080], eax
jmp 0x407c2f
push 0x84c0a0
push 0x8472b0
call fcn.00409038
add esp, 8
jmp 0x407c22
push 0x4000
call fcn.004704bc
pop ecx
mov dword [0x5da07c], eax
jmp 0x407c1a
push 0x84c0a0
push 0x8472b0
call fcn.00409038
add esp, 8
jmp 0x407c0d
push 0x10000
call fcn.004704bc
pop ecx
mov dword [0x5da078], eax
jmp 0x407c05
push 0x84c0a0
push 0x8472b0
call fcn.00409038
add esp, 8
jmp 0x407bf8
push 0x40000
call fcn.004704bc
pop ecx
mov dword [0x5da074], eax
jmp 0x407bf0
push 0x84c0a0
push 0x8472b0
call fcn.00409038
add esp, 8
jmp 0x407be3
push 0x100000
call fcn.004704bc
pop ecx
mov dword [0x5da070], eax
jmp 0x407bdb
push 0x84c0a0
push 0x8472b0
call fcn.00409038
add esp, 8
jmp 0x407bce
push 0x400000
call fcn.004704bc
pop ecx
mov dword [0x5da06c], eax
jmp 0x407bc6
push 0x84c0a0
push 0x8472b0
call fcn.00409038
add esp, 8
jmp 0x407bb9
push dword [0x5bc080]
call fcn.004704bc
pop ecx
mov dword [0x5da068], eax
jmp 0x407bb1
mov dword [esp + 0x38], ecx
mov edx, ecx
mov byte [ebp + 0x10f], dl
push eax
mov eax, dword [esp + 0x44]
push eax
push ebx
push 0x84c06c
push 0x8472b0
call fcn.00409038
mov eax, 0xffffffff
add esp, 0x10c
pop ebx
pop ebp
pop esi
pop edi
ret
xor eax, eax
push eax
push eax
push 0x84c054
push eax
call dword [0x59441c]
mov eax, 0xffffffff
add esp, 0xf8
pop ebx
pop ebp
pop esi
pop edi
ret