Function at 0x40ec6c
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xfc
mov eax, dword fs:[0x2c]
mov dword [esp + 0x18], ecx
push ebx
push esi
mov ecx, dword [eax]
mov eax, dword [0x4d2580]
push edi
mov edi, dword [ebp + 0xc]
mov dword [esp + 0x8c], ecx
cmp eax, dword [ecx + 4]
add al, 0
add byte [eax], al
jg 0x40fe3a
mov ebx, dword [ebp + 0x10]
xor esi, esi
xor al, al
mov word [esp + 0x54], 1
push 8
mov byte [esp + 0x1f], al
mov dword [esp + 0x20], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x3c], esi
mov dword [esp + 0x30], esi
mov dword [esp + 0x14], esi
mov dword [esp + 0x34], esi
mov word [esp + 0x38], 1
call fcn.0041fddb
mov ecx, dword [edi]
mov edx, eax
add esp, 4
mov dword [esp + 0x20], edx
mov dword [esp + 0x50], edx
mov dword [esp + 0x4c], 1
mov dword [edx], 0x14
mov dword [edx + 4], esi
mov esi, dword [ebp + 8]
mov dword [esp + 0x14], 0x17
mov eax, dword [esi + 4]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x49c470]
mov dword [esp + 0x70], ecx
movsx eax, word [eax + 0xa]
mov dword [esp + 0x58], eax
mov eax, dword [ebp + 0x14]
mov ecx, dword [edi]
cmp ecx, eax
je case.0x40fb15.4
mov edi, dword [esi + 4]
mov esi, dword [edi + ecx*4]
movzx eax, word [esi + 8]
mov edx, eax
cmp ax, 0x7f
je case.0x40fb15.4
movsx eax, dx
cmp eax, 0x33
je 0x40edc0
cmp eax, 0x4f
je case.0x40fb15.4
cmp eax, 5
je 0x40f1d5
cmp eax, 0x58
ja case.0x40fb15.4
movzx eax, byte [eax + 0x40ffe4]
jmp dword [eax*4 + 0x40ff78]
mov eax, dword [esi]
cmp eax, 4
jl 0x40fb04
cmp eax, 0x27
jge 0x40fb04
mov ebx, 0x14
mov dword [esp + 0x14], ebx
mov cl, byte [esp + 0x1b]
mov edx, dword [esp + 0x20]
test cl, cl
jne 0x40f3b3
mov eax, edx
imul eax, dword [eax], 0x15
movzx eax, byte [eax + ebx + 0x4b1840]
cmp eax, 3
jne 0x40f100
cmp dword [esp + 0x2c], 1
jne 0x454c0b
and al, 0x2c
add dword [edi], ecx
test dword [esi + ebx*2 + 0x448b0004], eax
and al, 0x30
mov eax, dword [esp + 0x30]
xor edi, edi
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], edi
test eax, eax
jne 0x40f5b9
test edx, edx
je 0x40edb5
mov esi, dword [edx + 4]
push 8
push edx
call fcn.0041fdcd
add esp, 8
mov edx, esi
test esi, esi
jne 0x40eda1
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov edi, dword [esp + 0x38]
mov dword [esp + 0x14], 0x16
test edi, edi
jne 0x40f562
jl 0x40ede7
cmp bh, al
inc esp
and al, 0x14
push ss
add byte [eax], al
add byte [ebp - 0x717af001], al
pop es
add byte [eax], al
cmp ebx, 0x4d02a0
je 0x40ee15
mov eax, dword [ebx + 0xc]
cmp eax, 4
je 0x40fa93
add byte [ebx - 0x97af78d], cl
mov esi, dword [ebx + 8]
test esi, esi
jne 0x40faa5
cmp eax, 5
jge 0x45474b
push 0x4d02a0
mov ecx, ebx
mov dword [ebx + 0xc], 1
mov dword [ebx], 0
call fcn.004100e0
mov eax, dword [esp + 0x10]
inc edi
mov dword [esp + 0x38], edi
mov dword [esp + 0x2c], edi
cmp edi, 1
jne 0x40f5a2
pop es
add byte [eax], al
mov dword [esp + 0x88], ebx
cmp dword [0x4d2380], 0
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
mov ebx, dword [eax]
mov dword [esp + 0x6c], ebx
je 0x40fb2e
xor al, al
test al, al
jne 0x40f272
cmp byte [0x4d2389], al
jne 0x4548f7
mov esi, dword [0x4d2384]
cmp dword [esi], 0
je 0x40f272
mov ecx, dword [esp + 0x8c]
mov eax, dword [0x4d2540]
mov byte [esp + 0x3f], 0
cmp eax, dword [ecx + 4]
jg 0x454904
mov dword [0x4d2560], 0
mov dword [0x4d255c], 0
mov dword [esp + 0x68], 0x4d2544
mov dword [esp + 0x64], 0x4d2544
lea esp, [esp]
mov eax, dword [esi]
push es
mov ecx, dword [ebx + 4]
mov dword [esp + 0x60], eax
mov dword [esp + 0x48], ecx
mov edx, dword [eax + 4]
test ecx, ecx
je 0x454947
test edx, edx
je 0x45494f
mov edi, dword [eax]
mov ebx, dword [ebx]
cmp ecx, edx
jb 0x40f171
mov edx, ecx
test edx, edx
je 0x40ef15
movzx eax, word [ebx]
mov dword [esp + 0x44], eax
movzx eax, word [edi]
mov ecx, eax
mov dword [esp + 0x40], ecx
movzx ecx, word [ebx]
cmp cx, ax
jne 0x40ef19
add ebx, 2
add edi, 2
sub edx, 1
jne 0x40eef2
xor eax, eax
jmp 0x40ef28
mov eax, dword [esp + 0x40]
cmp word [esp + 0x44], ax
sbb eax, eax
and eax, 0xfffffffe
inc eax
test eax, eax
js 0x40efcc
jle 0x40f043
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x60]
mov ebx, dword [esp + 0x6c]
mov edx, dword [eax + 0x1c]
test edx, edx
je 0x40f048
mov edi, dword [edx + 4]
cmp edi, ecx
ja 0x40f605
mov eax, dword [edx]
mov ebx, dword [ebx]
mov dword [esp + 0x44], eax
mov dword [esp + 0x40], edi
test edi, edi
je 0x40efad
jmp 0x40ef70
movzx ecx, word [eax]
movzx eax, cx
mov dword [esp + 0x78], eax
movzx eax, word [ebx]
mov dword [esp + 0x74], ecx
mov ecx, eax
mov dword [esp + 0x5c], ecx
mov ecx, dword [esp + 0x74]
cmp cx, ax
jne 0x40f1a6
mov eax, dword [esp + 0x44]
add ebx, 2
add eax, 2
sub dword [esp + 0x40], 1
mov dword [esp + 0x44], eax
jne 0x40ef70
mov ecx, dword [esp + 0x48]
cmp edi, ecx
jb 0x40f1b5
mov edx, dword [esi]
mov ecx, dword [esp + 0x64]
mov dword [ecx + 0x1c], edx
mov ebx, dword [esi]
mov dword [esp + 0x64], ebx
mov eax, dword [ebx + 0x1c]
jmp 0x40f0f5
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x60]
mov ebx, dword [esp + 0x6c]
mov edx, dword [eax + 0x18]
test edx, edx
je 0x40f048
mov eax, dword [edx + 4]
cmp ecx, eax
ja 0x40f649
mov edi, dword [edx]
mov ebx, dword [ebx]
mov dword [esp + 0x44], ecx
test ecx, ecx
je 0x40f0db
lea ebx, [ebx]
movzx eax, word [ebx]
mov dword [esp + 0x74], eax
movzx eax, word [edi]
mov ecx, eax
mov dword [esp + 0x40], ecx
movzx ecx, word [ebx]
cmp cx, ax
je 0x40f0c3
cmp word [esp + 0x74], ax
jae 0x40f0e3
mov ecx, dword [esp + 0x60]
mov eax, dword [edx + 0x1c]
mov dword [ecx + 0x18], eax
mov eax, dword [esi]
mov dword [edx + 0x1c], eax
mov dword [esi], edx
cmp dword [edx + 0x18], 0
je 0x40f048
jmp 0x40f0e5
mov byte [esp + 0x3f], 1
cmp byte [esp + 0x3f], 0
mov eax, dword [esi]
mov ecx, dword [esp + 0x64]
mov eax, dword [eax + 0x18]
mov dword [ecx + 0x1c], eax
mov eax, dword [esi]
mov ecx, dword [esp + 0x68]
mov eax, dword [eax + 0x1c]
mov dword [ecx + 0x18], eax
mov ecx, dword [esi]
mov eax, dword [0x4d2560]
mov dword [ecx + 0x18], eax
mov ecx, dword [esi]
mov eax, dword [0x4d255c]
mov dword [ecx + 0x1c], eax
je 0x40f272
mov eax, dword [esi]
test eax, eax
je 0x40f272
mov eax, dword [eax + 0x14]
test eax, eax
je 0x40f272
push dword [esp + 0x88]
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov ecx, dword [esp + 0x28]
push eax
inc dword [edi]
push edi
push esi
call fcn.004101e0
test eax, eax
js 0x454b05
mov ebx, dword [esp + 0x1c]
mov eax, dword [ebp + 0x14]
jmp 0x40ecf4
add ebx, 2
add edi, 2
sub dword [esp + 0x44], 1
jne 0x40f000
mov eax, dword [edx + 4]
mov ecx, dword [esp + 0x48]
cmp ecx, eax
jb 0x40f027
mov edx, dword [esi]
mov ecx, dword [esp + 0x68]
and al, 0x68
mov dword [ecx + 0x18], edx
mov ebx, dword [esi]
mov dword [esp + 0x68], ebx
mov eax, dword [ebx + 0x18]
mov ebx, dword [esp + 0x6c]
mov dword [esi], eax
jmp 0x40eec0
cmp eax, 6
ja case.0x40f109.3
jmp dword [eax*4 + 0x410040]
test cl, cl
jne 0x40f67a
push 8
call fcn.0041fddb
mov ecx, dword [esp + 0x24]
add esp, 4
mov dword [esp + 0x20], eax
mov dword [esp + 0x50], eax
mov dword [eax], ebx
mov dword [eax + 4], ecx
mov edi, dword [esp + 0x4c]
inc edi
mov dword [esp + 0x4c], edi
cmp ebx, 7
je 0x40fb88
cmp ebx, 8
je 0x40fb88
mov edi, dword [ebp + 0xc]
mov eax, dword [esp + 0x30]
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x38], eax
mov esi, dword [ebp + 8]
jmp 0x40f0bb
test edx, edx
je 0x40ef15
lea esp, [esp]
add byte [eax], al
add byte [edi], cl
mov bh, 3
movzx eax, word [ebx]
mov dword [esp + 0x44], eax
movzx eax, word [edi]
mov ecx, eax
mov dword [esp + 0x40], ecx
movzx ecx, word [ebx]
cmp cx, ax
je 0x40fa7f
enter 0xffffffffffff840f, 0xffffffffffffffe3
or byte [eax], al
add byte [esi + 0x39], ah
inc esp
and al, 0x44
cmp word [esp + 0x44], ax
jmp 0x40ef22
mov eax, dword [esp + 0x5c]
cmp word [esp + 0x78], ax
jae 0x40efb5
mov ecx, dword [esp + 0x60]
mov eax, dword [edx + 0x18]
mov dword [ecx + 0x1c], eax
mov eax, dword [esi]
mov dword [edx + 0x18], eax
mov dword [esi], edx
cmp dword [edx + 0x1c], 0
je 0x40f048
jmp 0x40efb7
mov edi, dword [esp + 0x38]
mov dword [esp + 0x14], 0x16
test edi, edi
jne 0x40f68b
cmp ebx, 0x4d02a0
je 0x40f22a
mov eax, dword [ebx + 0xc]
cmp eax, 4
je 0x40f60c
mov esi, dword [ebx + 8]
test esi, esi
jne 0x40f61e
cmp eax, 5
jge 0x454542
push 0x4d02a0
mov ecx, ebx
mov dword [ebx + 0xc], 1
mov dword [ebx], 0
call fcn.004100e0
mov edx, dword [esp + 0x10]
mov eax, dword [ebp + 0xc]
inc edi
mov dword [esp + 0x38], edi
mov dword [esp + 0x2c], edi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov esi, dword [eax + ecx*4]
cmp edi, 1
jne 0x40f6cb
inc ebp
or byte [ebx + 0x348b0440], cl
mov byte [ebx - 0x7af0fe01], al
jge 0x40f250
add byte [eax], al
mov edi, ebx
mov esi, dword [esi]
mov ecx, edi
call fcn.0040cfa0
mov eax, dword [ebp + 0x14]
mov dword [edi + 0xc], 1
mov dword [edi], esi
mov edi, dword [ebp + 0xc]
inc dword [edi]
mov esi, dword [ebp + 8]
jmp 0x40ecf4
mov ebx, dword [0x4d2370]
test ebx, ebx
je 0x454ad9
mov ecx, dword [esp + 0x8c]
mov eax, dword [0x4d2540]
mov byte [esp + 0x3f], 0
cmp eax, dword [ecx + 4]
jg 0x45495c
mov dword [0x4d2560], 0
mov dword [0x4d255c], 0
mov dword [esp + 0x60], 0x4d2544
mov dword [esp + 0x64], 0x4d2544
mov esi, dword [esp + 0x6c]
mov edi, dword [ebx + 4]
mov eax, dword [esi + 4]
mov dword [esp + 0x48], eax
inc esi
add al, 0x89
inc esp
and al, 0x48
test eax, eax
je 0x4549a1
test edi, edi
je 0x4549a9
mov edx, dword [ebx]
mov esi, dword [esi]
cmp eax, edi
jb 0x40f31b
mov edi, eax
test edi, edi
je 0x40f317
lea ecx, [ecx]
movzx eax, word [esi]
mov dword [esp + 0x5c], eax
movzx eax, word [edx]
mov ecx, eax
mov dword [esp + 0x78], ecx
movzx ecx, word [esi]
cmp cx, ax
jne 0x40f4a2
add byte [ebx - 0x3d7cfd3a], al
add al, byte [ebx - 0x268afe11]
add esi, 2
add edx, 2
sub edi, 1
jne 0x40f2f0
xor eax, eax
jmp 0x40f347
test edi, edi
je 0x40f317
nop
movzx eax, word [esi]
mov dword [esp + 0x5c], eax
movzx eax, word [edx]
mov ecx, eax
mov dword [esp + 0x78], ecx
movzx ecx, word [esi]
cmp cx, ax
je 0x40f654
cmp word [esp + 0x5c], ax
sbb eax, eax
and eax, 0xfffffffe
inc eax
test eax, eax
js 0x40f4b0
jg 0x40f3bb
mov byte [esp + 0x3f], 1
cmp byte [esp + 0x3f], 0
mov ecx, dword [esp + 0x64]
mov eax, dword [ebx + 0x18]
mov dword [ecx + 0x1c], eax
mov eax, dword [0x4d2370]
mov ecx, dword [esp + 0x60]
mov eax, dword [eax + 0x1c]
mov dword [ecx + 0x18], eax
mov ecx, dword [0x4d2370]
mov eax, dword [0x4d2560]
mov dword [ecx + 0x18], eax
mov ecx, dword [0x4d2370]
mov eax, dword [0x4d255c]
mov dword [ecx + 0x1c], eax
je 0x454ad9
mov eax, dword [0x4d2370]
test eax, eax
je 0x454ad9
mov eax, dword [eax + 0x14]
test eax, eax
jne 0x40f094
jmp 0x454ad9
mov eax, dword [edx + 4]
jmp 0x40ed68
mov eax, dword [esp + 0x48]
mov esi, dword [esp + 0x6c]
lea ecx, [ebx + 0x1c]
mov dword [esp + 0x74], ecx
mov ecx, dword [ecx]
mov dword [esp + 0x40], ecx
test ecx, ecx
je 0x40f356
mov edx, dword [ecx + 4]
mov dword [esp + 0x68], edx
cmp edx, eax
jbe 0x40f3e5
mov edx, eax
mov dword [esp + 0x68], eax
cmp dword [esp + 0x68], 0
mov edi, edx
mov edx, dword [esi]
mov esi, dword [ecx]
jbe 0x40f41d
xor dword [esi + 0x2b], esi
movzx eax, word [esi]
mov dword [esp + 0x5c], eax
movzx eax, word [edx]
mov ecx, eax
mov dword [esp + 0x78], ecx
movzx ecx, word [esi]
cmp cx, ax
jne 0x40f425
add esi, 2
add edx, 2
sub edi, 1
jne 0x40f3f2
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x40]
cmp dword [esp + 0x68], eax
jb 0x40f434
jmp 0x40f457
mov eax, dword [esp + 0x78]
cmp word [esp + 0x5c], ax
jae 0x40f457
mov ecx, dword [esp + 0x40]
mov ebx, ecx
mov ecx, dword [esp + 0x74]
mov eax, dword [ebx + 0x18]
mov dword [ecx], eax
mov eax, dword [0x4d2370]
mov dword [ebx + 0x18], eax
mov dword [0x4d2370], ebx
cmp dword [ebx + 0x1c], 0
je 0x40f356
mov ecx, dword [esp + 0x64]
mov dword [ecx + 0x1c], ebx
mov ecx, dword [0x4d2370]
mov dword [esp + 0x64], ecx
mov ebx, dword [ecx + 0x1c]
mov dword [0x4d2370], ebx
jmp 0x40f2c1
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x50]
push eax
call fcn.004106a0
test eax, eax
js 0x454b0b
mov al, byte [esp + 0x55]
mov ecx, dword [esp + 0x50]
mov byte [esp + 0x1b], al
mov dword [esp + 0x20], ecx
jmp 0x40ed56
mov eax, dword [esp + 0x78]
cmp word [esp + 0x5c], ax
jmp 0x40f341
mov eax, dword [esp + 0x48]
mov edx, dword [ebx + 0x18]
lea ecx, [ebx + 0x18]
mov dword [esp + 0x44], ecx
test edx, edx
je 0x40f356
mov esi, dword [edx + 4]
cmp eax, esi
ja 0x40fc63
mov edi, dword [esp + 0x6c]
mov esi, dword [edx]
mov dword [esp + 0x40], eax
mov edi, dword [edi]
test eax, eax
je 0x40f50e
movzx eax, word [edi]
mov dword [esp + 0x5c], eax
movzx eax, word [esi]
mov ecx, eax
mov dword [esp + 0x78], ecx
movzx ecx, word [edi]
cmp cx, ax
jne 0x40f515
add edi, 2
add esi, 2
sub dword [esp + 0x40], 1
jne 0x40f4e1
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
cmp eax, dword [edx + 4]
jb 0x40f524
jmp 0x40f543
mov eax, dword [esp + 0x78]
cmp word [esp + 0x5c], ax
jae 0x40f543
mov ecx, dword [esp + 0x44]
mov ebx, edx
mov eax, dword [ebx + 0x1c]
mov dword [ecx], eax
mov eax, dword [0x4d2370]
mov dword [ebx + 0x1c], eax
mov dword [0x4d2370], ebx
cmp dword [ebx + 0x18], 0
je 0x40f356
mov ecx, dword [esp + 0x60]
mov dword [ecx + 0x18], ebx
mov ecx, dword [0x4d2370]
mov dword [esp + 0x60], ecx
mov ebx, dword [ecx + 0x18]
mov dword [0x4d2370], ebx
jmp 0x40f2c1
cmp byte [esp + 0x35], 0
jne 0x40f8b1
push 0x18
call fcn.0041fddb
add esp, 4
mov esi, eax
mov ecx, esi
push 0x4d02a0
mov dword [esi + 8], 0
call fcn.004100e0
mov eax, dword [esp + 0x10]
mov dword [esi + 0x10], eax
mov eax, esi
mov dword [esp + 0x10], eax
mov dword [esp + 0x30], eax
jmp 0x40ee19
cmp byte [esp + 0x35], 0
jne 0x4548ef
mov dword [esp + 0x88], eax
jmp 0x40ee32
mov edi, dword [esp + 0x10]
lea ecx, [ecx]
mov ebx, dword [edi + 8]
mov esi, dword [edi + 0x10]
test ebx, ebx
jne 0x40fc8e
mov eax, dword [edi + 0xc]
cmp eax, 5
jge 0x40fd9f
push 0x18
push edi
mov dword [edi + 0xc], 1
mov dword [edi], 0
call fcn.0041fdcd
add esp, 8
mov edi, esi
test esi, esi
jne 0x40f5c0
mov edi, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
jmp 0x40ed9d
mov edi, ecx
jmp 0x40ef58
cmp dword [0x4d02ac], 4
jne 0x40f1fd
jmp 0x45450b
mov eax, dword [esi + 0xc]
dec dword [eax]
mov eax, dword [esi + 0xc]
cmp dword [eax], 0
je 0x454526
push 0x10
push esi
call fcn.0041fdcd
mov eax, dword [ebx + 0xc]
add esp, 8
mov dword [ebx + 8], 0
jmp 0x40f208
mov ecx, eax
mov dword [esp + 0x48], eax
jmp 0x40efea
add esi, 2
add edx, 2
sub edi, 1
jne 0x40f320
jmp 0x40f317
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 0xd
mov dword [esi], eax
jmp 0x40ed52
xor al, al
mov dword [edx], ebx
mov byte [esp + 0x1b], al
mov byte [esp + 0x55], al
jmp 0x40f133
cmp byte [esp + 0x35], 0
jne 0x40fa1a
push 0x18
call fcn.0041fddb
add esp, 4
mov esi, eax
mov ecx, esi
push 0x4d02a0
mov dword [esi + 8], 0
call fcn.004100e0
mov eax, dword [esp + 0x10]
mov edx, esi
mov dword [esi + 0x10], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x30], edx
jmp 0x40f22e
cmp byte [esp + 0x35], 0
jne 0x45470c
mov edi, edx
jmp 0x40f250
test cl, cl
je 0x40f904
mov eax, dword [edx + 4]
cmp dword [eax], 0x12
je 0x40f76e
test cl, cl
jne 0x40fa12
mov eax, edx
cmp dword [eax], 0x14
je 0x454ba8
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x50]
push eax
call fcn.004106a0
test eax, eax
js 0x454b0b
mov edx, dword [esp + 0x50]
mov cl, byte [esp + 0x55]
mov dword [esp + 0x20], edx
jmp case.0x40f109.2
test ecx, ecx
je 0x40f74a
mov eax, dword [edi + ecx*4 - 4]
movzx eax, word [eax + 8]
mov edx, eax
cmp ax, 0x48
je 0x45411e
cmp dx, 0x4f
je 0x45411e
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 0x12
mov dword [esi], eax
jmp 0x40ed52
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 0x13
mov dword [esi], eax
jmp 0x40ed52
test cl, cl
je 0x40f78a
mov esi, dword [edx + 4]
push 8
push edx
call fcn.0041fdcd
mov edx, esi
add esp, 8
mov dword [esp + 0x20], edx
mov dword [esp + 0x50], edx
cmp byte [esp + 0x54], 0
je 0x4549b6
mov al, 1
mov edi, dword [esp + 0x4c]
dec edi
mov byte [esp + 0x55], al
mov byte [esp + 0x1b], al
mov dword [esp + 0x4c], edi
jmp 0x40f13c
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 1
mov dword [esi], eax
jmp 0x40ed52
mov esi, dword [esp + 0x38]
mov dword [esp + 0x14], 0x16
test esi, esi
je 0x40fcb6
cmp byte [esp + 0x35], 0
jne 0x40fd2f
push 0x18
call fcn.0041fddb
add esp, 4
mov esi, eax
mov ecx, esi
push 0x4d02a0
mov dword [esi + 8], 0
call fcn.004100e0
mov eax, dword [esp + 0x10]
mov dword [esi + 0x10], eax
mov eax, esi
mov esi, dword [esp + 0x38]
mov dword [esp + 0x10], eax
mov dword [esp + 0x30], eax
mov eax, dword [ebp + 8]
inc esi
mov edi, dword [ebp + 0xc]
mov dword [esp + 0x38], esi
mov dword [esp + 0x2c], esi
mov edx, dword [eax + 4]
mov ecx, dword [edi]
mov eax, dword [edx + ecx*4 + 4]
cmp word [eax + 8], 0x47
jne 0x453f51
cmp esi, 1
je 0x40fcc7
cmp byte [esp + 0x35], 0
mov eax, dword [esp + 0x10]
jne 0x453f6d
mov esi, dword [ebp + 8]
mov ecx, dword [esp + 0x24]
push eax
push edi
push esi
push 0
call fcn.00411310
test eax, eax
js 0x454b05
mov eax, dword [esp + 0x24]
cmp dword [eax + 0xfc], 1
jne 0x40f0bb
jmp 0x454b05
mov eax, dword [esp + 0x14]
cmp eax, 0x16
jne 0x40fae2
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov dword [esp + 0x14], 0xb
mov ebx, dword [esp + 0x14]
mov dword [esi], eax
jmp 0x40ed56
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
xor ebx, ebx
mov dword [esi], eax
jmp 0x40ed52
mov ecx, dword [esp + 0x10]
cmp ecx, 0x4d02a0
je 0x40f8fa
mov eax, dword [ecx + 0xc]
cmp eax, 4
je 0x40feea
mov ecx, dword [ecx + 8]
test ecx, ecx
jne 0x40fefc
cmp eax, 5
jge 0x454817
mov esi, dword [esp + 0x10]
mov ecx, esi
push 0x4d02a0
mov dword [esi + 0xc], 1
mov dword [esi], 0
call fcn.004100e0
mov byte [esp + 0x35], 0
jmp 0x40ee15
mov eax, edx
jmp 0x40f6eb
invalid
mov edi, dword [esp + 0x38]
mov dword [esp + 0x14], 0x16
test edi, edi
jne 0x40fb35
cmp ebx, 0x4d02a0
je 0x40f944
cmp dword [ebx + 0xc], 4
je 0x40ff65
mov ecx, ebx
call fcn.0040cfa0
push 0x4d02a0
mov ecx, ebx
call fcn.004100e0
mov edx, dword [esp + 0x10]
mov esi, dword [ebp + 0xc]
inc edi
mov eax, dword [ebp + 8]
mov dword [esp + 0x38], edi
mov dword [esp + 0x2c], edi
mov ecx, dword [esi]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
cmp edi, 1
jne 0x40fb76
mov esi, ebx
mov edi, dword [eax]
mov eax, dword [esi + 0xc]
mov ecx, dword [esi + 8]
cmp eax, 4
je 0x453dec
dec esi
or byte [ebx - 0x7bf0fb08], al
jno 0x40f9bd
add al, 0
test ecx, ecx
jne 0x453dff
cmp eax, 5
jge 0x453e14
push 0x10
mov dword [esi], 0
mov dword [esi + 0xc], 4
call fcn.0041fddb
mov ecx, dword [edi]
add esp, 4
mov dword [eax], ecx
mov ecx, dword [edi + 4]
mov dword [eax + 4], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 8], ecx
mov ecx, dword [edi + 0xc]
mov dword [eax + 0xc], ecx
inc dword [ecx]
mov dword [esi + 8], eax
mov edi, dword [ebp + 0xc]
mov edx, dword [esp + 0x24]
or al, 0xff
add dword [ecx + 0x7d8b0846], ecx
or al, 0x8b
push esp
or byte [ebx + 0x548b0c7d], cl
and al, 0x24
inc dword [edi]
cmp byte [edx + 0x102], 0
jne 0x453ed3
cmp byte [edx + 0x103], 0
mov esi, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
je 0x40ecf4
jmp 0x453eec
mov eax, dword [esp + 0x14]
cmp eax, 0x16
jne 0x40fc6e
mov dword [esp + 0x14], 0xc
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, dword [esp + 0x14]
mov dword [esi], eax
add byte [ebx + 0x418d0c75], cl
add dword [ebx - 0x76ebdba4], ecx
push es
jmp 0x40ed56
mov eax, dword [edx + 4]
jmp 0x40f6fa
mov ecx, dword [esp + 0x10]
cmp ecx, 0x4d02a0
je 0x40fa63
mov eax, dword [ecx + 0xc]
cmp eax, 4
je 0x4545f3
mov ecx, dword [ecx + 8]
test ecx, ecx
jne 0x45461b
cmp eax, 5
jge 0x454634
mov esi, dword [esp + 0x10]
mov ecx, esi
push 0x4d02a0
mov dword [esi + 0xc], 1
mov dword [esi], 0
call fcn.004100e0
mov byte [esp + 0x35], 0
jmp 0x40f22a
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 0xe
add dword [ebx + 0xe], edi
mov dword [esi], eax
jmp 0x40ed52
add ebx, 2
add edi, 2
sub edx, 1
jne 0x40f180
jmp 0x40ef15
xor ah, 0xff
inc dword [ebx + 0x4d02ac3d]
add byte [edi + ecx], al
test dword [eax - 0xd], ecx
invalid
cmp dword [0x4d02ac], 4
jne 0x40ede8
jmp 0x454714
mov eax, dword [esi + 0xc]
dec dword [eax]
mov eax, dword [esi + 0xc]
cmp dword [eax], 0
je 0x45472f
push 0x10
push esi
call fcn.0041fdcd
mov eax, dword [ebx + 0xc]
add esp, 8
mov dword [ebx + 8], 0
jmp 0x40edf3
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 9
mov dword [esi], eax
jmp 0x40ed52
cmp eax, 0x13
je 0x40f889
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov dword [esp + 0x14], 0x11
mov ebx, dword [esp + 0x14]
mov dword [esi], eax
jmp 0x40ed56
dec eax
cmp eax, 0x29
ja case.0x40fb15.4
movzx eax, byte [eax + 0x41007c]
jmp dword [eax*4 + 0x41005c]
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 7
mov dword [esi], eax
jmp 0x40ed52
mov al, 1
jmp 0x40ee55
cmp byte [esp + 0x35], 0
je 0x40fce0
mov esi, dword [esp + 0x10]
cmp esi, 0x4d02a0
je 0x40fb6c
cmp dword [0x4d02ac], 4
je 0x40fedb
mov ecx, esi
call fcn.0040cfa0
push 0x4d02a0
mov ecx, esi
call fcn.004100e0
mov byte [esp + 0x35], 0
jmp 0x40f944
cmp byte [esp + 0x35], 0
jne 0x453de4
mov esi, edx
jmp 0x40f96a
mov esi, dword [esp + 0x2c]
mov eax, dword [esp + 0x30]
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x38], esi
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], ebx
test esi, esi
je 0x4549de
cmp esi, 1
jne 0x4549e6
mov eax, ebx
push eax
lea ecx, [esp + 0xe4]
mov dword [esp + 0xec], 0
call fcn.004100e0
lea ecx, [esp + 0xe0]
call fcn.00401fba
mov ecx, dword [esp + 0x14]
test al, al
jne 0x40fe12
cmp ecx, 7
jne 0x40fc4c
push dword [ebp + 0xc]
mov eax, dword [ebp + 8]
push eax
call fcn.00419d2b
test eax, eax
js 0x454bdc
cmp dword [esp + 0x14], 8
je 0x4549f9
cmp esi, 1
jne 0x454a13
mov esi, ebx
mov ecx, esi
call fcn.0040cfa0
mov byte [esi], 0
cmp byte [esp + 0x1b], 0
mov dword [esi + 0xc], 9
jne 0x454a2f
mov eax, dword [esp + 0x20]
cmp byte [esp + 0x54], 0
je 0x454a50
mov al, 1
dec edi
mov byte [esp + 0x55], al
add dword [edi - 0x78], ecx
inc esp
and al, 0x55
mov byte [esp + 0x1b], al
mov dword [esp + 0x4c], edi
lea ecx, [esp + 0xe0]
call fcn.0040cfa0
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
jmp 0x40f0bb
mov eax, esi
mov dword [esp + 0x48], esi
jmp 0x40f4d1
cmp eax, 0x13
je 0x40f9f9
jmp 0x454084
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 5
mov dword [esi], eax
jmp 0x40ed52
mov eax, dword [ebx + 0xc]
dec dword [eax]
mov eax, dword [ebx + 0xc]
cmp dword [eax], 0
je 0x40fd83
push 0x10
push ebx
call fcn.0041fdcd
add esp, 8
mov dword [edi + 8], 0
jmp 0x40f5ce
push 0x4d02a0
mov ecx, ebx
call fcn.0040aceb
jmp 0x40f812
mov eax, ebx
jmp 0x40f84d
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 2
mov dword [esi], eax
jmp 0x40ed52
push 0x18
call fcn.0041fddb
add esp, 4
mov esi, eax
mov ecx, esi
push 0x4d02a0
mov dword [esi + 8], 0
call fcn.004100e0
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x40fe28
mov edx, esi
mov dword [esi + 0x10], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x30], edx
jmp 0x40f948
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 4
mov dword [esi], eax
jmp 0x40ed52
mov ecx, dword [esp + 0x10]
push 0x4d02a0
call fcn.0040aceb
mov byte [esp + 0x35], 0
jmp 0x40f812
push 0x4d02a0
lea ecx, [esp + 0x2c]
mov dword [esp + 0x18], 0x16
call fcn.0041ceb1
lea ecx, [esp + 0x28]
call fcn.0041cf15
mov esi, eax
mov ecx, esi
call fcn.0040cfa0
mov dword [esi + 0xc], 9
mov byte [esi], 0
mov edi, dword [ebp + 0xc]
inc dword [edi]
jmp 0x40f151
push dword [ebx]
call fcn.0041fe14
add esp, 4
push 4
push dword [ebx + 0xc]
call fcn.0041fdcd
add esp, 8
jmp 0x40fc9f
sub eax, 5
cmp eax, 0xa
ja 0x40f5da
jmp dword [eax*4 + 0x4100a8]
push 0x4d02a0
lea ecx, [esp + 0x2c]
mov dword [esp + 0x18], 0x16
call fcn.0041ceb1
lea ecx, [esp + 0x28]
call fcn.0041cf15
mov esi, eax
mov ecx, esi
call fcn.0040cfa0
mov edi, dword [ebp + 0xc]
mov dword [esi + 0xc], 9
mov byte [esi], 1
inc dword [edi]
jmp 0x40f151
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 3
mov dword [esi], eax
jmp 0x40ed52
mov esi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov ebx, 8
mov dword [esi], eax
jmp 0x40ed52
cmp ecx, 8
je 0x40fbe8
test al, al
jne 0x40fc4c
jmp 0x40fbe3
mov edx, esi
mov dword [esi + 0x10], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x30], edx
jmp 0x40f948
push 0x4d2580
call fcn.00420242
add esp, 4
cmp dword [0x4d2580], 0xffffffff
jne 0x40ec76
push 0x44247b
call fcn.004200a3
add esp, 4
push 0x4d2580
call fcn.004201f8
add esp, 4
jmp 0x40ec76
push 0x4d02a0
lea ecx, [esp + 0x2c]
mov dword [esp + 0x18], 0x16
call fcn.0041ceb1
mov edi, dword [ebp + 0xc]
lea ecx, [esp + 0x28]
mov esi, dword [ebp + 8]
mov edx, dword [edi]
lea eax, [edx + 1]
mov dword [edi], eax
mov eax, dword [esi + 4]
mov edx, dword [eax + edx*4]
call fcn.0041cf15
mov ebx, dword [esp + 0x24]
mov ecx, ebx
push eax
push dword [edx]
call fcn.0041cf92
test eax, eax
js 0x454a9e
mov eax, dword [esp + 0x30]
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x38], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x1c], ebx
jmp 0x40ecf4
cmp dword [esi + 0xc], 4
jne 0x40fb59
jmp 0x453dc9
cmp dword [0x4d02ac], 4
jne 0x40f8c9
jmp 0x4547fc
push ecx
call fcn.0041d1e6
mov eax, dword [esp + 0x10]
mov dword [eax + 8], 0
mov eax, dword [eax + 0xc]
jmp 0x40f8d4
push 0x4d02a0
lea ecx, [esp + 0x2c]
mov dword [esp + 0x18], 0x16
call fcn.0041ceb1
mov edi, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov ecx, dword [edi]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
lea ecx, [esp + 0x28]
fld qword [eax]
fstp qword [esp + 0x78]
call fcn.0041cf15
mov esi, eax
mov ecx, esi
call fcn.0040cfa0
fld qword [esp + 0x78]
inc dword [edi]
fstp qword [esi]
mov dword [esi + 0xc], 3
jmp 0x40f151
cmp dword [0x4d02ac], 4
jne 0x40f931
jmp 0x453dae
jno 0x453de9
inc ebp
add byte [ebx], cl
call 0xe8503df8
inc eax
add byte [edi], dh
cmp dword [ebp], eax
or ebp, eax
inc eax
add byte [ebx + 0x39], bl
inc ebp
add byte [edi - 0x58ffbac7], al
cmp dword [ebp], eax
sar dword [ecx], cl
inc ebp
add byte [edi - 0x2cffbac7], ah
cmp dword [ebp], eax
sar dword [ecx], cl
inc ebp
add byte [ebp - 0x74ffbac7], bh
add bl, dl
cmp dword [ebp], eax
mov ebp, 0x8b004539
dec ebx
or byte [ecx + 0x4d02a8], ah
cmp ecx, eax
je 0x40f970
call dword [eax - 0x18]
push eax
call fcn.0040a8f3
jmp 0x40f970
add ebp, dword [ebx - 5]
invalid
je 0x40fb98
push eax
call fcn.0040a8f3
jmp 0x40fb98
jle 0x453dd1
sti
invalid
mov eax, dword [ecx]
push 1
call dword [eax]
jmp 0x40f9b8
adc al, 0x53
call 0x6741fdf9
cmp dword [esi], 8
mov ebx, dword [esp + 0x1c]
jmp 0x40f9b8
nop
cld
dec dword [ebx + 0x374fe8c8]
add eax, dword [eax]
mov edx, dword [esp + 0x24]
jmp 0x40fa00
add al, 0x8b
add al, 0x88
lea ecx, [esp + 0x28]
mov edi, dword [eax]
mov ebx, dword [eax + 4]
call fcn.0041cf41
mov esi, eax
mov ecx, esi
call fcn.0040cfcc
mov dword [esi + 0xc], 0x302
mov dword [esi], edi
inc esi
or al, 2
add eax, dword [eax]
add byte [ecx + 0x45e893e], cl
mov dword [esi + 4], ebx
mov dword [esi + 4], ebx
jmp 0x40fda5
add byte [eax], al
cmp dword [ebx + 0xfc], 1
je 0x1c4ae4
xlatb
invalid
xlatb
dec dword [ebx - 0x74cfdbbc]
pop esp
and al, 0x28
mov eax, dword [esp + 0x30]
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x38], eax
mov dword [esp + 0x1c], ebx
jmp 0x40f0e7
or dword [eax], eax
add byte [ebp + 0xb02484], cl
or byte [eax], al
push eax
lea ecx, [esp + 0x2c]
call fcn.0041cf41
mov ecx, eax
call fcn.0040ad17
lea ecx, [esp + 0x800b0]
call fcn.0040cfcc
jmp 0x40f0e7
or dword [eax], eax
add byte [ebp + 0xc02484], cl
or byte [eax], al
push eax
lea ecx, [esp + 0x2c]
call fcn.0041cf41
cld
dec dword [ebx + 0x6b59e8c8]
sti
dec dword [ebp + 0xc0248c]
or byte [eax], al
cld
dec dword [ebx + 0x6b59e8c8]
sti
dec dword [ebp + 0xc0248c]
or byte [eax], al
call fcn.0040cfcc
jmp 0x40f0e7
invalid
mov eax, dword [esi + edx*4]
movzx eax, word [eax + 8]
cmp ax, 0x57
jne 0x454296
inc ecx
jmp 0x4542af
cmp ax, 0x58
cmp eax, 0x58
jne 0x45429f
dec ecx
jmp 0x4542af
cmp ax, 0x7f
je 0x4542b6
cmp ax, 0x40
jne 0x4542af
test ecx, ecx
je 0x4542b6
inc edx
mov dword [edi], edx
test ecx, ecx
jne 0x454286
mov dword [esp + 0x14], 0xffd712
jmp 0x40f17d
invalid
inc ebp
adc al, 0xf
test dword [ecx - 0x51], ebx
sti
inc dword [ebp + 0x51850fc9]
scasd eax, dword es:[edi]
sti
dec dword [ebp + 0x789ff46]
jmp 0x40f195
lea eax, [ecx + 1]
mov ebx, 0x8000a
mov dword [esi], eax
jmp 0x40ed7e
and al, 0xf0
add byte [eax], cl
add byte [eax - 0x73], dl
dec esp
and al, 0x2c
call fcn.0041cf41
mov ecx, eax
call fcn.0041a58e
mov edi, dword [ebp + 0xc]
lea ecx, [esp + 0x7e0ff3f8]
inc dword [edi]
call fcn.004098bb
jmp 0x40f17d
mov bh, bl
dec dword [ebp + 0x90248c]
or byte [eax], al
call fcn.0040cfcc
mov eax, dword [esp + 0x30]
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x38], eax
mov dword [esp + 0x1c], ebx
jmp 0x40f0e7
test byte [edi], cl
lodsd eax, dword [esi]
sti
call dword [eax - 0x18]
cmpsb byte [esi], byte es:[edi]
arpl bx, di
invalid
mov eax, dword [ecx]
push 1
call dword [eax]
jmp 0x40f23d
push ds
lodsb al, byte [esi]
sti
inc dword [ebx + 0x4d02ac3d]
add byte [edi + ecx], al
test dword [edx], esi
mov ah, 0xfb
dec dword [ebx - 0x575ef7b7]
add cl, byte [ebp]
cmp ecx, eax
je 0x40fa8f
push eax
call fcn.0040a8f3
jmp 0x40fa8f
call dword [eax]
jmp 0x40fa72
inc esp
and al, 0x10
mov esi, dword [eax]
test byte [edi], 0x84
push ecx
mov bl, 0xfb
dec dword [ebx + 0x5193e8ce]
sti
jmp [edx + 0x14]
cmp word [esi], 8
jmp 0x40fa72
test cl, dh
cmpsb byte [esi], byte es:[edi]
sti
call dword [eax - 0x18]
popfd
popal
sti
invalid
mov eax, dword [ecx]
push 1
call dword [eax]
jmp 0x40ee28
jmp [edx + 0x14]
call dword [eax]
jmp 0x40f909
inc esp
and al, 0x10
mov esi, dword [eax]
test byte [edi], 0x84
add eax, 0x8bfffbb0
into
mov ecx, esi
call fcn.004098bb
push 0x14
push esi
call 0x6741fdf9
cmp dword [esi], 8
jmp 0x40f909
movsd dword es:[edi], dword [esi]
sti
invalid
call fcn.0040a98d
push 0x442449
call 0x674200cf
cmp dword [esi], 4
cld
cmp word [esi], 4
push 0x4d2540
call 0x67420224
cmp dword [esi], 4
jmp 0x40eec1
dec ebp
add al, ch
in eax, 0x5f
sti
jmp [eax + 0x49]
dec ecx
and al, 0x44
add al, ch
sbb eax, 0x8366fcb7
add al, 0x68
inc eax
and eax, 0x65e8004d
mov eax, 0x3e8366fc
add al, 0x8b
sbb eax, 0x4d2370
jmp 0x40f2c9
test eax, eax
jne 0x40f3ef
jmp 0x40f30b
sub dword [ecx + 0x728bfffb], ebp
add al, 0x6a
or byte [edx - 0x18], dl
or al, 0xb4
cld
mov ax, si
cmp dword [esi], 8
mov dword [esp + 0x20], eax
mov dword [esp + 0x50], eax
push eax
xor al, al
jmp 0x40f7c3
mov edi, dword [ebp + 0xc]
jmp 0x40f195
jl 0x454a39
xor eax, 0xc2840f00
mov cl, 0xfb
dec dword [ebx - 0x4516efc0]
mov cl, 0xfb
dec dword [ebp - 0x17d7dbb4]
adc eax, dword [ebp - 0xf740004]
mov ecx, esi
call fcn.0040cfcc
mov byte [esi], 1
jmp 0x40fc48
invalid
add ecx, ebp
or dword [edx + 0x7c80fffb], esi
and al, 0x35
add byte [esp + ecx - 0x75], dh
inc esp
and al, 0x10
mov esi, dword [eax + 0x10]
jmp 0x40fc3e
sti
dec dword [ebx - 0x16efdb8c]
jecxz 0x454a0a
sti
dec dword [ebx + 0x6a20244c]
or byte [ecx - 0x75], dl
jno 0x454a69
call 0x6741fdf9
mov eax, esi
mov ax, si
cmp dword [esi], 8
mov dword [esp + 0x20], eax
mov dword [esp + 0x50], eax
jmp 0x40fc5e
inc esi
add al, 0x8b
add al, 0x88
mov ecx, ebx
movsx eax, word [eax + 0xa]
push eax
push 0x4482b85
call fcn.004735c8
mov edi, 0x68500a40
test dword [ebx], ebp
dec eax
add al, 0xe8
adc al, 0xeb
add dword [eax], eax
lea ecx, [esp + 0xa0]
call fcn.004098bb
mov edx, dword [esp + 0x30]
mov dword [esp + 0x10], edx
jmp 0x454b31
push eax
push 0x86
call fcn.004735c8
mov edx, dword [esp + 0x30]
mov dword [esp + 0x10], edx
jmp 0x454b31
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
movsx eax, word [eax + 0xa]
push eax
push 0x79
mov ecx, dword [esp + 0x2c]
inc ebp
or byte [ebx + 0x48b0440], cl
mov byte [edi], cl
mov edi, 0x6a500a40
jns 0x454aa6
dec esp
and al, 0x2c
call fcn.004735c8
jmp 0x454b31
mov edx, dword [esp + 0x20]
jmp 0x454b56
mov eax, dword [esp + 0x10]
or edi, 0xffffffff
jmp 0x40edbd
dec esp
and al, 0x24
movsx eax, word [eax + 0xa]
push eax
push 0x6e
call fcn.004735c8
lea ecx, [esp + 0x44800d0]
mov word [eax + edx*8], fs
add byte [eax + 4], cl
mov word [eax + edx*8], fs
add byte [eax + 4], cl
call fcn.0040cfcc
lea ecx, [esp + 0x80090]
call fcn.0040cfcc
jmp 0x454b31
push dword [esp + 0x58]
push 0x6d
jmp 0x454c3d
push dword [esp + 0x58]
push 0x6b
jmp 0x454bea
mov ecx, dword [esp + 0x2c]
call fcn.004735c8
mov edx, dword [esp + 0x30]
mov dword [esp + 0x10], edx
jmp 0x454b31
pop eax
mov ecx, dword [esp + 0x28]
push 0x6e
call fcn.004735c8
or edi, 0xffffffff
lea ecx, [esp + 0xffd7e0]
mov dword [esp + 0x1c], edi
call fcn.0040cfcc
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x10]
jmp 0x40edc1
mov ecx, dword [esp + 0x2c]
call fcn.004735c8
mov edx, dword [esp + 0x30]
mov dword [esp + 0x10], edx
jmp 0x66564b31