Function at 0x40bcf4
Capabilities:
Inspect section memory permissions

Disassembly:
sub esp, 0x1b8
push ebx
push ebp
push esi
push edi
xor ebp, ebp
push 0x80
lea eax, [esp + 0x4c]
push ebp
push eax
mov dword [esp + 0x20], 0xffffffff
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x34], ebp
call fcn.004269c0
mov ecx, dword [esp + 0x1dc]
mov al, byte [ecx]
add esp, 0xc
test al, al
mov dword [esp + 0x20], ebp
je 0x40c6d9
mov edx, dword [esp + 0x1d0]
mov al, byte [edx + ebp]
inc ebp
cmp al, 0x25
mov dword [esp + 0x1c], ebp
jne 0x40c6c8
mov ecx, edx
cmp byte [ecx + ebp], 0x25
jne 0x40bc59
inc ebp
jmp 0x40c6c8
mov esi, dword [esp + 0x1d0]
xor ebx, ebx
lea edi, [esp + 0x1c]
mov dword [esp + 0x2c], ebx
call fcn.0040bb60
xor ecx, ecx
cmp eax, 0xffffffff
setne cl
mov dword [esp + 0x10], eax
cmp ecx, ebx
mov dword [esp + 0x38], ecx
jne 0x40bc8b
mov eax, dword [esp + 0x20]
mov dword [esp + 0x10], eax
cmp eax, 0x40
jge 0x40c70a
cmp eax, dword [esp + 0x14]
jle 0x40bc9e
mov dword [esp + 0x14], eax
mov ebp, dword [esp + 0x1c]
mov edx, dword [esp + 0x1d0]
mov cl, byte [edx + ebp]
or eax, 0xffffffff
mov dword [esp + 0x24], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x34], eax
mov al, cl
mov dword [esp + 0x30], 0
call fcn.0040ba90
test eax, eax
je 0x40be0c
movsx eax, cl
inc ebp
add eax, 0xffffffe0
cmp eax, 0x5a
mov dword [esp + 0x1c], ebp
ja case.0x40bf1a.61
movzx edx, byte [eax + 0x40c9b8]
jmp dword [edx*4 + 0x40c958]
or ebx, 2
jmp case.0x40bced.90
or ebx, 4
jmp case.0x40bced.90
and ebx, 0xffffdfff
or ebx, 8
jmp case.0x40bced.90
or ebx, 0x10
jmp case.0x40bced.90
mov eax, dword [esp + 0x2c]
test eax, eax
jne 0x40bf21
mov eax, dword [esp + 0x1d0]
lea edx, [eax + ebp]
mov al, byte [edx]
cmp al, 0x2e
mov dword [esp + 0x2c], 1
je case.0x40bced.90
or ebx, 0x40000
cmp al, 0x2a
je 0x40bd6f
cmp al, 0x40
je 0x40bd6f
mov eax, 0xa
lea ecx, [esp + 0x3c]
call fcn.0040b940
mov ebp, dword [esp + 0x3c]
mov dword [esp + 0x24], eax
sub ebp, dword [esp + 0x1d0]
jmp case.0x40bced.90
mov esi, dword [esp + 0x1d0]
inc ebp
lea edi, [esp + 0x1c]
mov dword [esp + 0x1c], ebp
or ebx, 0x80000
call fcn.0040bb60
mov dword [esp + 0x24], eax
cmp eax, 0xffffffff
mov eax, dword [esp + 0x38]
jne 0x40bdb9
mov ecx, dword [esp + 0x20]
inc ecx
test eax, eax
mov dword [esp + 0x20], ecx
je 0x40bdaa
mov dword [esp + 0x24], ecx
jmp 0x40bdd8
mov eax, dword [esp + 0x10]
mov dword [esp + 0x24], eax
inc eax
mov dword [esp + 0x10], eax
jmp 0x40bdd8
test eax, eax
jne 0x40bdc6
mov edx, dword [esp + 0x24]
inc edx
mov dword [esp + 0x10], edx
mov eax, dword [esp + 0x30]
cmp eax, dword [esp + 0x14]
jle 0x40bdd8
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x14], ecx
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
cmp eax, edx
jle 0x40bde8
mov dword [esp + 0x14], eax
mov ebp, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1d0]
mov cl, byte [ecx + ebp]
mov al, cl
call fcn.0040ba90
test eax, eax
jne 0x40bcd2
mov edx, dword [esp + 0x1d0]
test ebx, 0x20000
mov esi, dword [esp + 0x1d4]
mov eax, dword [esp + 0x28]
je 0x40be4f
mov edi, dword [esp + 0x30]
inc word [esp + edi*2 + 0x48]
mov ecx, eax
imul ecx, ecx, 0x168
add ecx, esi
mov dword [esp + edi*4 + 0xc8], eax
mov dword [esp + 0x30], eax
inc eax
mov dword [ecx], 7
mov dword [ecx + 4], 0
mov dword [esp + 0x28], eax
test ebx, 0x80000
je 0x40be87
mov edi, dword [esp + 0x24]
inc word [esp + edi*2 + 0x48]
mov ecx, eax
imul ecx, ecx, 0x168
add ecx, esi
mov dword [esp + edi*4 + 0xc8], eax
mov dword [esp + 0x24], eax
inc eax
mov dword [ecx], 7
mov dword [ecx + 4], 0
mov dword [esp + 0x28], eax
test ebx, 0x200000
je 0x40bebf
mov edi, dword [esp + 0x18]
inc word [esp + edi*2 + 0x48]
mov ecx, eax
imul ecx, ecx, 0x168
add ecx, esi
mov dword [esp + edi*4 + 0xc8], eax
mov dword [esp + 0x18], eax
inc eax
mov dword [ecx], 7
mov dword [ecx + 4], 0
mov dword [esp + 0x28], eax
test ebx, 0x20000000
je 0x40bef7
mov edi, dword [esp + 0x34]
inc word [esp + edi*2 + 0x48]
mov ecx, eax
imul ecx, ecx, 0x168
add ecx, esi
mov dword [esp + edi*4 + 0xc8], eax
mov dword [esp + 0x34], eax
inc eax
mov dword [ecx], 7
mov dword [ecx + 4], 0
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + ecx*4 + 0xc8], eax
movsx ecx, byte [edx + ebp]
sub ecx, 0x3c
inc ebp
cmp ecx, 0x3c
ja case.0x40bf1a.61
movzx ecx, byte [ecx + 0x40ca7c]
jmp dword [ecx*4 + 0x40ca14]
cmp eax, 1
jne case.0x40bf1a.61
mov esi, dword [esp + 0x1d0]
mov al, byte [esi + ebp]
lea edx, [esi + ebp]
or ebx, 0x100000
cmp al, 0x2a
mov dword [esp + 0x2c], 2
je 0x40bf73
cmp al, 0x40
je 0x40bf73
mov eax, 0xa
lea ecx, [esp + 0x3c]
call fcn.0040b940
cmp eax, 0x24
mov dword [esp + 0x18], eax
jg case.0x40bf1a.61
mov ebp, dword [esp + 0x3c]
sub ebp, esi
jmp case.0x40bced.90
mov esi, dword [esp + 0x1d0]
inc ebp
lea edi, [esp + 0x1c]
mov dword [esp + 0x1c], ebp
or ebx, 0x200000
call fcn.0040bb60
mov dword [esp + 0x18], eax
cmp eax, 0xffffffff
mov eax, dword [esp + 0x38]
jne 0x40bfbd
mov ecx, dword [esp + 0x20]
inc ecx
test eax, eax
mov dword [esp + 0x20], ecx
je 0x40bfae
mov dword [esp + 0x18], ecx
jmp 0x40bfd6
mov eax, dword [esp + 0x10]
mov dword [esp + 0x18], eax
inc eax
mov dword [esp + 0x10], eax
jmp 0x40bfd6
test eax, eax
mov eax, dword [esp + 0x18]
jne 0x40bfcc
lea edx, [eax + 1]
mov dword [esp + 0x10], edx
cmp eax, dword [esp + 0x14]
jle 0x40bfd6
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x10]
cmp eax, dword [esp + 0x14]
jle 0x40bde8
jmp 0x40bde4
mov dword [esp + 0x1cc], 1
jmp 0x40c000
cmp dword [esp + 0x1cc], 1
jne 0x40c06f
mov esi, dword [esp + 0x1d0]
lea edi, [esp + 0x1c]
or ebx, 0x30000
call fcn.0040bb60
cmp eax, 0xffffffff
mov dword [esp + 0x30], eax
jne 0x40c04d
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x38]
inc ecx
test eax, eax
mov dword [esp + 0x20], ecx
je 0x40c03b
mov eax, ecx
mov dword [esp + 0x30], eax
jmp 0x40bdd8
mov eax, dword [esp + 0x10]
mov dword [esp + 0x30], eax
inc eax
mov dword [esp + 0x10], eax
jmp 0x40bdd8
mov ecx, dword [esp + 0x38]
test ecx, ecx
jne 0x40c05c
lea ecx, [eax + 1]
mov dword [esp + 0x10], ecx
cmp eax, dword [esp + 0x14]
jle 0x40bdd8
mov dword [esp + 0x14], eax
jmp 0x40bdd8
or ebx, 0x8000000
jmp case.0x40bced.90
test bl, 8
jne case.0x40bced.49
or ebx, 0x2000
mov esi, dword [esp + 0x1d0]
lea edx, [esi + ebp - 1]
mov eax, 0xa
lea ecx, [esp + 0x3c]
or ebx, 0x10000
call fcn.0040b940
mov ebp, dword [esp + 0x3c]
mov dword [esp + 0x30], eax
sub ebp, esi
jmp case.0x40bced.90
test bl, 0x40
jne case.0x40bf1a.61
test bl, 0x20
je 0x40c0c9
or ebx, 0x40
jmp case.0x40bced.90
or ebx, 0x20
jmp case.0x40bced.90
test bh, 1
jne case.0x40bf1a.61
test bl, bl
jns 0x40c0e9
or ebx, 0x100
jmp case.0x40bced.90
or ebx, 0x80
jmp case.0x40bced.90
or ebx, 0x200
jmp case.0x40bced.90
or ebx, 0x480
jmp case.0x40bced.90
or ebx, 0x880
jmp case.0x40bced.90
or ebx, 0x1100
jmp case.0x40bced.90
test ebx, 0x40000000
jne case.0x40bf1a.61
test ebx, 0x22001fe0
jne case.0x40bf1a.61
mov ecx, dword [esp + 0x1d0]
mov al, byte [ecx + ebp]
cmp al, 0x36
jne 0x40c163
cmp byte [ecx + ebp + 1], 0x34
jne 0x40c163
add ebp, 2
mov dword [esp + 0x34], 8
or ebx, 0x40000000
jmp case.0x40bced.90
cmp al, 0x33
jne 0x40c184
cmp byte [ecx + ebp + 1], 0x32
jne 0x40c184
add ebp, 2
mov dword [esp + 0x34], 4
or ebx, 0x40000000
jmp case.0x40bced.90
cmp al, 0x31
jne 0x40c1a5
cmp byte [ecx + ebp + 1], 0x36
jne 0x40c1a5
add ebp, 2
mov dword [esp + 0x34], 2
or ebx, 0x40000000
jmp case.0x40bced.90
cmp al, 0x38
jne case.0x40bf1a.61
inc ebp
mov dword [esp + 0x34], 1
or ebx, 0x40000000
jmp case.0x40bced.90
or ebx, 0x2000000
jmp case.0x40bced.90
or ebx, 0x1000000
jmp case.0x40bced.90
or ebx, 1
mov dword [esp + 0x40], 1
jmp case.0x40bced.90
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x38]
or ebx, 0x20000000
inc ecx
test eax, eax
mov dword [esp + 0x20], ecx
je 0x40c204
mov dword [esp + 0x34], ecx
jmp 0x40c211
mov eax, dword [esp + 0x10]
mov dword [esp + 0x34], eax
inc eax
mov dword [esp + 0x10], eax
mov edx, dword [esp + 0x10]
cmp edx, dword [esp + 0x14]
jle case.0x40bced.90
mov eax, edx
mov dword [esp + 0x14], eax
jmp case.0x40bced.90
or ebx, 0x1000
jmp case.0x40bced.90
or ebx, 0x2000000
test bl, bl
jns 0x40c259
mov edx, eax
or ebx, 0x2000000
imul edx, edx, 0x168
mov dword [edx + esi], 3
jmp 0x40c5d7
test bl, 0x20
je 0x40c264
and ebx, 0xfdffffff
mov edx, eax
imul edx, edx, 0x168
mov dword [edx + esi], 3
jmp 0x40c5d7
or ebx, 0x2000000
test bl, bl
jns 0x40c29c
mov ecx, eax
or ebx, 0x2000000
imul ecx, ecx, 0x168
mov dword [ecx + esi], 4
jmp 0x40c5d7
test bl, 0x20
je 0x40c2a7
and ebx, 0xfdffffff
mov ecx, eax
imul ecx, ecx, 0x168
mov dword [ecx + esi], 4
jmp 0x40c5d7
cmp dword [esp + 0x1cc], 2
jne 0x40c5d7
mov ecx, eax
imul ecx, ecx, 0x168
mov dword [ecx + esi], 8
cmp byte [edx + ebp], 0x5e
mov edi, 1
jne 0x40c2e4
inc ebp
cmp byte [edx + ebp], 0x5d
jne 0x40c2eb
inc ebp
cmp byte [edx + ebp], 0x2d
jne 0x40c2f2
inc ebp
mov cl, byte [edx + ebp]
test cl, cl
je 0x40c5d7
lea ecx, [ecx]
cmp cl, 0x5b
jne 0x40c308
inc edi
jmp 0x40c312
cmp cl, 0x5d
jne 0x40c312
dec edi
test edi, edi
jle 0x40c320
mov cl, byte [edx + ebp + 1]
inc ebp
test cl, cl
jne 0x40c300
jmp 0x40c5d7
inc ebp
jmp 0x40c5d7
mov ecx, eax
or ebx, 0x4000
imul ecx, ecx, 0x168
mov dword [ecx + esi], 1
jmp 0x40c5d7
mov edx, eax
and ebx, 0xffdfffff
imul edx, edx, 0x168
mov dword [esp + 0x18], 0xa
mov dword [edx + esi], 1
jmp 0x40c5d7
and ebx, 0xffdfffff
mov ecx, eax
or ebx, 0x4000
imul ecx, ecx, 0x168
mov dword [esp + 0x18], 8
mov dword [ecx + esi], 1
jmp 0x40c5d7
or ebx, 0x8000
and ebx, 0xffdfffff
or ebx, 0x2000
mov dword [esp + 0x18], 2
mov edx, eax
imul edx, edx, 0x168
mov dword [edx + esi], 1
jmp 0x40c5d7
or ebx, 0x8000
and ebx, 0xffdfffff
mov ecx, eax
or ebx, 0x4000
imul ecx, ecx, 0x168
mov dword [esp + 0x18], 0x10
mov dword [ecx + esi], 1
jmp 0x40c5d7
or ebx, 0x8000
mov edx, eax
or ebx, 0x400000
imul edx, edx, 0x168
mov dword [edx + esi], 2
jmp 0x40c5d7
or ebx, 0x8000
mov ecx, eax
or ebx, 0x800000
imul ecx, ecx, 0x168
mov dword [ecx + esi], 2
jmp 0x40c5d7
or ebx, 0x8000
mov edx, eax
imul edx, edx, 0x168
mov dword [edx + esi], 2
jmp 0x40c5d7
mov ecx, eax
or ebx, 0x80
imul ecx, ecx, 0x168
mov dword [ecx + esi], 5
jmp 0x40c5d7
mov edx, eax
imul edx, edx, 0x168
mov dword [edx + esi], 6
jmp 0x40c5d7
or ebx, 0x8000
mov ecx, eax
imul ecx, ecx, 0x168
mov dword [esp + 0x18], 0x10
mov dword [ecx + esi], 2
jmp 0x40c5d7
mov edx, eax
imul edx, edx, 0x168
mov dword [edx + esi], 9
jmp 0x40c5d7
mov ecx, eax
imul ecx, ecx, 0x168
lea edi, [ecx + esi]
lea ecx, [edi + 0x28]
mov dword [esp + 0x44], ecx
mov byte [ecx], 0
lea ecx, [edx + ebp]
mov edx, ecx
mov dword [edi], 0xa
mov dword [esp + 0x3c], edx
mov cl, byte [ecx]
test cl, cl
mov dword [esp + 0x1c], 1
mov dword [esp + 0x2c], edi
je case.0x40bf1a.61
lea ebx, [ebx]
inc ebp
cmp cl, 0x3e
je 0x40c554
cmp cl, 0x3a
jne 0x40c531
mov ecx, dword [esp + 0x1d0]
mov esi, ebp
sub esi, edx
add esi, ecx
cmp esi, 0x40
mov dword [esp + 0x1c], 0
jbe 0x40c50a
mov esi, 0x40
mov edi, dword [esp + 0x44]
mov ecx, edx
call fcn.0040b880
mov edx, dword [esp + 0x1d0]
mov esi, dword [esp + 0x1d4]
mov eax, dword [esp + 0x28]
mov edi, dword [esp + 0x2c]
add edx, ebp
mov dword [esp + 0x3c], edx
mov ecx, dword [esp + 0x1d0]
mov cl, byte [ecx + ebp]
test cl, cl
jne 0x40c4e0
pop edi
shl ebp, 8
mov eax, 0xfffffffe
pop esi
sub eax, ebp
pop ebp
pop ebx
add esp, 0x1b8
ret
mov ecx, dword [esp + 0x1c]
test ecx, ecx
je 0x40c5a4
mov ecx, dword [esp + 0x10]
inc eax
inc word [esp + ecx*2 + 0x48]
mov dword [edi], 7
mov dword [edi + 0x18], ebp
mov dword [edi + 4], 0x8000000
mov edi, eax
imul edi, edi, 0x168
add esi, edi
inc ecx
mov dword [esp + 0x28], eax
mov dword [esp + ecx*4 + 0xc8], eax
cmp ecx, dword [esp + 0x14]
mov dword [esp + 0x2c], esi
mov dword [esi], 0xa
mov dword [esp + 0x10], ecx
jle 0x40c5a4
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x1d0]
mov esi, ebp
sub esi, edx
add esi, ecx
cmp esi, 0x100
jbe 0x40c5be
mov esi, 0x100
mov edi, dword [esp + 0x2c]
add edi, 0x68
mov ecx, edx
call fcn.0040b880
mov esi, dword [esp + 0x1d4]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x10]
inc word [esp + ecx*2 + 0x48]
lea ecx, [esp + ecx*2 + 0x48]
mov ecx, dword [esp + 0x40]
test ecx, ecx
je 0x40c680
test bl, 1
jne 0x40c680
lea ecx, [eax - 1]
test ecx, ecx
jl 0x40c680
mov edx, ecx
imul edx, edx, 0x168
add edx, esi
mov dword [esp + 0x2c], edx
mov edi, dword [edx]
cmp edi, 7
je 0x40c630
test byte [edx + 4], 1
je 0x40c630
mov edx, eax
imul edx, edx, 0x168
cmp edi, dword [edx + esi]
je 0x40c641
mov edx, dword [esp + 0x2c]
dec ecx
sub edx, 0x168
test ecx, ecx
mov dword [esp + 0x2c], edx
jge 0x40c612
jmp 0x40c680
imul ecx, ecx, 0x168
mov edx, dword [ecx + esi + 4]
add ecx, esi
and edx, 0xfffffffe
or ebx, edx
mov edx, dword [esp + 0x30]
test edx, edx
jne 0x40c661
mov edx, dword [ecx + 8]
mov dword [esp + 0x30], edx
mov edi, dword [esp + 0x24]
or edx, 0xffffffff
cmp edi, edx
jne 0x40c673
mov edi, dword [ecx + 0xc]
mov dword [esp + 0x24], edi
cmp dword [esp + 0x18], edx
jne 0x40c680
mov ecx, dword [ecx + 0x10]
mov dword [esp + 0x18], ecx
mov edx, eax
imul edx, edx, 0x168
lea ecx, [edx + esi]
mov edx, dword [esp + 0x30]
mov dword [ecx + 8], edx
mov edx, dword [esp + 0x24]
mov dword [ecx + 0xc], edx
mov edx, dword [esp + 0x18]
cmp edx, 0xffffffff
mov dword [ecx + 0x18], ebp
mov dword [ecx + 4], ebx
jne 0x40c6ad
mov edx, 0xa
inc eax
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x38]
test eax, eax
mov dword [ecx + 0x10], edx
mov edx, dword [esp + 0x34]
mov dword [ecx + 0x14], edx
jne 0x40c6c8
inc dword [esp + 0x20]
mov eax, dword [esp + 0x1d0]
cmp byte [eax + ebp], 0
jne 0x40bc34
mov eax, dword [esp + 0x14]
xor edx, edx
test eax, eax
mov dword [esp + 0x40], edx
jl 0x40c917
mov ebp, dword [esp + 0x1dc]
mov ecx, dword [esp + 0x1d8]
lea eax, [esp + 0xc8]
sub eax, ebp
mov ebx, ebp
mov dword [esp + 0x44], eax
jmp 0x40c730
mov ecx, dword [esp + 0x1c]
pop edi
pop esi
shl ecx, 8
mov eax, 0xfffffffd
pop ebp
sub eax, ecx
pop ebx
add esp, 0x1b8
ret
mov eax, dword [esp + 0x44]
jmp 0x40c730
cmp word [esp + edx*2 + 0x48], 1
jne 0x40c924
mov eax, dword [eax + ebx]
mov edx, dword [esp + 0x1d4]
imul eax, eax, 0x168
mov edi, dword [eax + edx]
cmp edi, 7
lea esi, [eax + edx]
je 0x40c764
test dword [esi + 4], 0x8000000
jne case.0x40c774.2
cmp edi, 0xa
ja case.0x40c774.2
movzx eax, byte [edi + 0x40cacc]
jmp dword [eax*4 + 0x40cabc]
cmp dword [esp + 0x1cc], 2
jne 0x40c7b7
test ebp, ebp
jne 0x40c79b
mov eax, dword [ecx]
add eax, 4
mov dword [ecx], eax
mov edx, dword [eax - 4]
mov dword [esi + 0x20], edx
jmp case.0x40c774.2
cmp edi, 3
jne 0x40c7a7
mov eax, dword [ebx]
jmp 0x40c8fc
test byte [esi + 4], 0x20
je 0x40c7a0
mov edx, dword [ebx]
mov dword [esi + 0x20], edx
jmp case.0x40c774.2
mov eax, dword [esi + 4]
test eax, 0x60000000
je 0x40c804
test eax, 0x20000000
mov edx, dword [esi + 0x14]
je 0x40c7e3
mov ebp, dword [esp + 0x1d4]
imul edx, edx, 0x168
mov edx, dword [edx + ebp + 0x20]
mov ebp, dword [esp + 0x1dc]
and eax, 0xffffe27f
cmp edx, 4
mov dword [esi + 4], eax
jle 0x40c804
cmp edx, 8
jg 0x40c7fc
or eax, 0x100
jmp 0x40c801
or eax, 0x1000
mov dword [esi + 4], eax
mov eax, dword [esi + 4]
test ah, 4
je 0x40c82c
test ebp, ebp
jne 0x40c821
mov eax, dword [ecx]
add eax, 4
mov dword [ecx], eax
mov eax, dword [eax - 4]
xor edx, edx
jmp 0x40c8f9
mov eax, dword [ebx]
mov eax, dword [eax]
xor edx, edx
jmp 0x40c8f9
test ah, 8
je 0x40c848
test ebp, ebp
jne 0x40c8f4
mov eax, dword [ecx]
add eax, 4
mov dword [ecx], eax
mov eax, dword [eax - 4]
jmp 0x40c8f8
test ah, 0x10
je 0x40c869
test ebp, ebp
jne 0x40c887
mov eax, dword [ecx]
add eax, 8
mov dword [ecx], eax
mov edx, dword [eax - 8]
mov eax, dword [eax - 4]
mov dword [esi + 0x20], edx
mov dword [esi + 0x24], eax
jmp case.0x40c774.2
test ah, 1
je 0x40c896
test ebp, ebp
jne 0x40c887
mov eax, dword [ecx]
add eax, 8
mov dword [ecx], eax
mov edx, dword [eax - 8]
mov eax, dword [eax - 4]
mov dword [esi + 0x20], edx
mov dword [esi + 0x24], eax
jmp case.0x40c774.2
mov eax, dword [ebx]
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esi + 0x20], edx
mov dword [esi + 0x24], eax
jmp case.0x40c774.2
test al, al
jns 0x40c8aa
test ebp, ebp
jne 0x40c8f4
mov eax, dword [ecx]
add eax, 4
mov dword [ecx], eax
mov eax, dword [eax - 4]
jmp 0x40c8f8
test ebp, ebp
jne 0x40c8ba
mov eax, dword [ecx]
add eax, 4
mov dword [ecx], eax
mov eax, dword [eax - 4]
jmp 0x40c8f8
cmp edi, 3
jne 0x40c8c6
mov eax, dword [ebx]
movsx eax, byte [eax]
jmp 0x40c8f8
test al, 0x20
je 0x40c8d1
mov edx, dword [ebx]
movsx eax, word [edx]
jmp 0x40c8f8
mov eax, dword [ebx]
mov eax, dword [eax]
jmp 0x40c8f8
test dword [esi + 4], 0x8000000
je 0x40c89a
test ebp, ebp
jne 0x40c7a0
mov eax, dword [ecx]
add eax, 4
mov dword [ecx], eax
mov eax, dword [eax - 4]
jmp 0x40c8fc
mov edx, dword [ebx]
mov eax, dword [edx]
cdq
mov dword [esi + 0x24], edx
mov dword [esi + 0x20], eax
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x14]
inc edx
add ebx, 4
cmp edx, eax
mov dword [esp + 0x40], edx
jle 0x40c723
pop edi
pop esi
pop ebp
mov eax, edx
pop ebx
add esp, 0x1b8
ret
cmp word [esp + edx*2 + 0x48], 0
jne 0x40c941
pop edi
pop esi
shl edx, 8
mov eax, 0xfffffffb
pop ebp
sub eax, edx
pop ebx
add esp, 0x1b8
ret
pop edi
pop esi
shl edx, 8
mov eax, 0xfffffffc
pop ebp
sub eax, edx
pop ebx
add esp, 0x1b8
ret