Function at 0x40af04
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push edi
push esi
push ebp
push ebx
sub esp, 0xf8
mov dword [esp + 0x88], eax
mov edx, dword [0x809c88]
mov dword [esp + 0xb8], edx
mov ebp, dword [0x809c8c]
mov ebx, dword [0x809c78]
mov ecx, dword [0x809c7c]
mov dword [esp + 0x7c], ecx
mov edx, dword [0x809c6c]
mov dword [esp + 0xbc], edx
mov edx, dword [0x809c70]
mov dword [esp + 0x44], edx
test eax, eax
jne 0x40af5a
mov eax, ebp
call fcn.0040a7ec
mov edx, 0x58e5e4
mov ecx, dword [edx]
mov dword [esp + 0x54], ecx
mov esi, dword [edx + 4]
mov dword [esp + 0x58], esi
mov edi, dword [edx + 8]
mov dword [esp + 0x5c], edi
mov ecx, dword [edx + 0xc]
mov dword [esp + 0x60], ecx
mov ecx, dword [edx + 0x10]
mov dword [esp + 0x64], ecx
mov ecx, dword [edx + 0x14]
mov dword [esp + 0x68], ecx
mov ecx, dword [edx + 0x18]
mov dword [esp + 0x6c], ecx
mov ecx, dword [edx + 0x1c]
mov dword [esp + 0x70], ecx
mov ecx, dword [edx + 0x20]
mov dword [esp + 0x74], ecx
mov edx, dword [edx + 0x24]
mov dword [esp + 0x78], edx
mov esi, dword [esp + 0xbc]
xor edx, edx
mov byte [ebp + 0xa6], 0
test esi, esi
jle 0x40b02a
xor ecx, ecx
mov edi, 1
lea edx, [edi + edi]
add edx, edx
cmp esi, dword [esp + edx + 0x54]
jg 0x40afd5
inc edi
cmp edi, 0xa
jl 0x40afbf
add edi, edi
lea edx, [edi + edi]
mov edi, dword [esp + edx + 0x50]
mov edx, dword [0x5b67d0]
cmp edi, edx
jle 0x40afe9
test edx, edx
jle 0x40afe9
mov edi, edx
mov edx, dword [0x809c5c]
cmp edi, edx
jle 0x40aff9
test edx, edx
jle 0x40aff9
mov edi, edx
cmp edi, ebx
jle 0x40b003
test ebx, ebx
jle 0x40b003
mov edi, ebx
sub esi, edi
mov dword [ebp + ecx*4 + 0xb0], edi
movzx edx, byte [ebp + 0xa6]
inc edx
mov byte [ebp + 0xa6], dl
movzx ecx, dl
cmp ecx, 0x20
je 0x40c456
test esi, esi
jg 0x40afba
mov esi, dword [esp + 0x44]
xor ecx, ecx
mov dword [esp + 0x38], ecx
xor ecx, ecx
mov dword [esp + 0x9c], ecx
test esi, esi
jle 0x40b0d8
mov byte [ebp + 0xa7], 0
xor edi, edi
mov eax, dword [esp + 0x7c]
jmp 0x40b05a
mov byte [ebp + 0xa7], dl
mov ecx, 1
lea edx, [ecx + ecx]
add edx, edx
cmp esi, dword [esp + edx + 0x54]
jg 0x40b075
inc ecx
cmp ecx, 0xa
jl 0x40b05f
add ecx, ecx
lea edx, [ecx + ecx]
mov edx, dword [esp + edx + 0x50]
mov ecx, dword [0x5b67d4]
cmp edx, ecx
jle 0x40b089
test ecx, ecx
jle 0x40b089
mov edx, ecx
mov ecx, dword [0x809c60]
cmp edx, ecx
jle 0x40b099
test ecx, ecx
jle 0x40b099
mov edx, ecx
cmp edx, eax
jle 0x40b0a3
test eax, eax
jle 0x40b0a3
mov edx, eax
sub esi, edx
mov dword [ebp + edi*4 + 0x130], edx
movzx edx, byte [ebp + 0xa7]
inc edx
mov ecx, edx
movzx edi, dl
cmp edi, 0x20
je 0x40c41f
test esi, esi
jg 0x40b054
mov dword [esp + 0x9c], ecx
mov dword [esp + 0x38], edx
movzx edx, byte [ebp + 0xa6]
movsx ecx, byte [0x809508]
test ecx, ecx
je 0x40b0ff
cmp byte [ebp + 0xa4], 2
je 0x40bdff
mov ecx, dword [esp + 0x9c]
mov byte [ebp + 0xa7], cl
jmp 0x40b10c
mov ecx, dword [esp + 0x9c]
mov byte [ebp + 0xa7], cl
movzx edx, dl
mov dword [esp + 0x9c], edx
mov ecx, dword [esp + 0x38]
movzx ecx, cl
mov dword [esp + 0x38], ecx
mov eax, dword [0x5d3c60]
test eax, eax
je 0x40c409
test eax, eax
je 0x40c3f2
mov eax, dword [0x5d3c64]
test eax, eax
je 0x40c3dd
test eax, eax
je 0x40c3c6
mov eax, dword [0x5d3c68]
test eax, eax
je 0x40c3b1
test eax, eax
je 0x40c39a
mov eax, dword [0x5d3c6c]
test eax, eax
je 0x40c385
test eax, eax
je 0x40c36e
mov eax, dword [0x5d3c70]
test eax, eax
je 0x40c359
test eax, eax
je 0x40c342
mov eax, dword [0x5d3c74]
test eax, eax
je 0x40c32d
test eax, eax
je 0x40c316
mov eax, dword [0x5d3c78]
test eax, eax
je 0x40c301
test eax, eax
je 0x40c2ea
mov eax, dword [0x5d3c7c]
test eax, eax
je 0x40c2d5
test eax, eax
je 0x40c2be
mov eax, dword [0x5d3c80]
test eax, eax
je 0x40c2a9
test eax, eax
je 0x40c292
xor edx, edx
mov dword [esp + 0x34], edx
mov dword [esp + 0xd8], edx
mov esi, dword [0x809bf8]
mov edi, dword [esi]
lea ecx, [esp + 0x34]
push edx
push ecx
push 2
push dword [0x5b67cc]
push 0x100
push 0x200
push esi
call dword [edi + 0x90]
test eax, eax
je 0x40b228
push 0x813e70
push 0x80f270
call fcn.00417454
add esp, 8
mov edx, dword [esp + 0x38]
test edx, edx
jle 0x40bd56
mov edi, 1
mov dword [esp + 0xd4], edi
mov edi, 1
xor ecx, ecx
mov dword [esp + 0x50], ecx
xor esi, esi
mov dword [esp + 0x8c], esi
lea esi, [edx - 1]
mov edx, dword [esp + 0x9c]
lea ecx, [edx - 1]
lea eax, [edx + edx]
add eax, eax
xor edx, edx
mov dword [esp + 0x40], eax
mov dword [esp + 0x84], ecx
mov dword [esp + 0x90], esi
mov dword [esp + 0xec], edi
mov dword [esp + 0x3c], ebx
mov dword [esp + 0xa4], ebp
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x8c]
mov eax, dword [eax + ecx*4 + 0x130]
mov ebx, dword [esp + 0x9c]
test ebx, ebx
jle 0x40c286
xor esi, esi
xor ebp, ebp
mov ebx, dword [esp + 0x50]
lea ecx, [ebx + eax]
mov edi, dword [esp + 0x44]
sub edi, ebx
add edi, ebx
mov dword [esp + 0xb4], edi
mov edi, dword [esp + 0xa4]
lea ebx, [edi + edx]
mov dword [esp + 0xf4], ebx
lea ebx, [eax - 1]
mov dword [esp + 0x80], ebx
xor ebx, ebx
lea edi, [edi + edx + 0x21c]
mov dword [esp + 0xa0], edi
mov dword [esp + 0xc0], ecx
mov dword [esp + 0xe0], eax
mov dword [esp + 0x48], edx
mov edx, dword [esp + 0xec]
mov edi, dword [esp + 0xa4]
mov eax, dword [edi + ebp*4 + 0xb0]
mov dword [esp + 0xdc], eax
lea edi, [eax + eax]
add edi, edi
mov ecx, dword [esp + 0xe0]
imul ecx, edi
cmp ecx, dword [0x5b6080]
jle 0x40b36a
mov dword [0x5b6080], ecx
push ecx
push dword [0x5d3c60]
mov dword [esp + 0xf4], edx
call fcn.0046b288
mov edx, dword [esp + 0xf4]
add esp, 8
mov dword [0x5d3c60], eax
test eax, eax
je 0x40be74
movsx eax, byte [0x809508]
test eax, eax
je 0x40b389
mov eax, dword [esp + 0xa4]
cmp byte [eax + 0xa4], 2
je 0x40b890
mov ecx, dword [esp + 0x90]
mov eax, dword [esp + 0x8c]
cmp eax, ecx
je 0x40b582
mov eax, dword [esp + 0x84]
cmp ebp, eax
je 0x40b46c
mov ecx, dword [esp + 0x50]
mov eax, dword [esp + 0xc0]
cmp ecx, eax
jge 0x40b890
xor eax, eax
mov dword [esp + 0xcc], eax
lea eax, [esi + esi]
add eax, eax
mov dword [esp + 0xd0], eax
mov eax, ecx
imul eax, dword [esp + 0xbc]
mov dword [esp + 0xac], ebx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov ebx, eax
mov ebp, ecx
mov esi, dword [esp + 0xcc]
mov edx, dword [esp + 0xb8]
mov eax, dword [edx + 0x90]
add eax, dword [esp + 0xd0]
lea edx, [ebx + ebx]
add edx, edx
add eax, edx
mov edx, esi
add edx, dword [0x5d3c60]
push edi
push eax
push edx
call dword [0x5d348c]
add esp, 0xc
add esi, edi
add ebx, dword [esp + 0xbc]
inc ebp
mov edx, dword [esp + 0xc0]
cmp ebp, edx
jl 0x40b407
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, dword [esp + 0xec]
jmp 0x40b890
mov ecx, dword [esp + 0xbc]
sub ecx, esi
add ecx, ecx
add ecx, ecx
mov dword [esp + 0xb0], ecx
mov ecx, dword [esp + 0x50]
mov eax, dword [esp + 0xc0]
cmp ecx, eax
jge 0x40b890
xor eax, eax
mov dword [esp + 0x4c], eax
mov eax, edi
sub eax, dword [esp + 0xb0]
mov dword [esp + 0xcc], eax
lea eax, [esi + esi]
add eax, eax
mov dword [esp + 0xc8], eax
mov eax, ecx
imul eax, dword [esp + 0xbc]
mov dword [esp + 0xd0], eax
mov dword [esp + 0xc4], edi
mov dword [esp + 0xac], ebx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov ebx, ecx
mov ebp, eax
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0xb0]
mov eax, dword [esp + 0xb8]
mov eax, dword [eax + 0x90]
add eax, dword [esp + 0xc8]
lea edx, [ebp + ebp]
add edx, edx
add eax, edx
mov edx, esi
add edx, dword [0x5d3c60]
push edi
push eax
push edx
call dword [0x5d348c]
mov edx, dword [0x5d3c60]
add edx, edi
add edx, esi
push dword [0x8090fc]
mov eax, dword [esp + 0xdc]
push eax
push edx
call dword [0x5d3488]
add esp, 0x18
add esi, dword [esp + 0xc4]
add ebp, dword [esp + 0xbc]
inc ebx
mov eax, dword [esp + 0xc0]
cmp ebx, eax
jl 0x40b4f8
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, dword [esp + 0xec]
jmp 0x40b890
mov eax, dword [esp + 0x84]
cmp ebp, eax
je 0x40b6e8
mov eax, dword [esp + 0x50]
mov dword [esp + 0xb0], eax
mov ecx, dword [esp + 0xb4]
cmp eax, ecx
jge 0x40be99
xor eax, eax
mov dword [esp + 0xa8], eax
lea ecx, [esi + esi]
add ecx, ecx
mov dword [esp + 0xcc], ecx
mov eax, dword [esp + 0xb0]
imul eax, dword [esp + 0xbc]
mov dword [esp + 0xc8], eax
mov dword [esp + 0xac], ebx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov ebx, dword [esp + 0xa8]
mov ebp, eax
mov esi, dword [esp + 0xb0]
mov eax, dword [esp + 0xb8]
mov ecx, dword [eax + 0x90]
add ecx, dword [esp + 0xcc]
lea edx, [ebp + ebp]
add edx, edx
add ecx, edx
mov eax, ebx
add eax, dword [0x5d3c60]
push edi
push ecx
push eax
call dword [0x5d348c]
add esp, 0xc
add ebx, edi
add ebp, dword [esp + 0xbc]
inc esi
mov eax, dword [esp + 0xb4]
cmp esi, eax
jl 0x40b602
mov dword [esp + 0xa8], ebx
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, dword [esp + 0xec]
mov ecx, dword [esp + 0xb4]
mov eax, dword [esp + 0xc0]
cmp ecx, eax
jge 0x40b890
mov dword [esp + 0xac], ebx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov ebx, ecx
mov ebp, eax
mov esi, dword [esp + 0xa8]
mov eax, esi
add eax, dword [0x5d3c60]
push dword [0x8090fc]
push edi
push eax
call dword [0x5d3488]
add esp, 0xc
add esi, edi
inc ebx
cmp ebx, ebp
jl 0x40b6a7
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, dword [esp + 0xec]
jmp 0x40b890
mov eax, dword [esp + 0xbc]
sub eax, esi
add eax, eax
add eax, eax
mov dword [esp + 0xb0], eax
mov ecx, dword [esp + 0x50]
mov dword [esp + 0xd0], ecx
mov eax, dword [esp + 0xb4]
cmp ecx, eax
jge 0x40c278
xor eax, eax
mov dword [esp + 0xa8], eax
mov ecx, edi
sub ecx, dword [esp + 0xb0]
mov dword [esp + 0xc8], ecx
lea eax, [esi + esi]
add eax, eax
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0xd0]
imul eax, dword [esp + 0xbc]
mov dword [esp + 0x4c], eax
mov dword [esp + 0xc4], edi
mov dword [esp + 0xac], ebx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov ebx, dword [esp + 0xa8]
mov ebp, eax
mov esi, dword [esp + 0xd0]
mov edi, dword [esp + 0xb0]
mov eax, dword [esp + 0xb8]
mov ecx, dword [eax + 0x90]
add ecx, dword [esp + 0xcc]
lea edx, [ebp + ebp]
add edx, edx
add ecx, edx
mov eax, ebx
add eax, dword [0x5d3c60]
push edi
push ecx
push eax
call dword [0x5d348c]
mov edx, dword [0x5d3c60]
add edx, edi
add edx, ebx
push dword [0x8090fc]
mov eax, dword [esp + 0xd8]
push eax
push edx
call dword [0x5d3488]
add esp, 0x18
add ebx, dword [esp + 0xc4]
add ebp, dword [esp + 0xbc]
inc esi
mov eax, dword [esp + 0xb4]
cmp esi, eax
jl 0x40b788
mov dword [esp + 0xa8], ebx
mov edi, dword [esp + 0xc4]
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, dword [esp + 0xec]
mov ecx, dword [esp + 0xb4]
mov eax, dword [esp + 0xc0]
cmp ecx, eax
jge 0x40b890
mov dword [esp + 0xac], ebx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov ebx, ecx
mov ebp, eax
mov esi, dword [esp + 0xa8]
mov eax, esi
add eax, dword [0x5d3c60]
push dword [0x8090fc]
push edi
push eax
call dword [0x5d3488]
add esp, 0xc
add esi, edi
inc ebx
cmp ebx, ebp
jl 0x40b854
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, dword [esp + 0xec]
movsx eax, byte [0x8090d0]
test eax, eax
je 0x40b8b4
movsx eax, byte [0x5b66e4]
test eax, eax
je 0x40b8ad
mov ecx, 0x100005
jmp 0x40b8b9
mov ecx, 5
jmp 0x40b8b9
mov ecx, 5
movsx eax, byte [0x8090dc]
test eax, eax
jne 0x40b93b
mov eax, dword [esp + 0x88]
test eax, eax
je 0x40b8d9
mov edx, 1
jmp 0x40ba1d
mov dword [esp + 0xa8], ecx
mov ecx, dword [0x809bf8]
mov eax, dword [ecx]
xor edi, edi
push edi
mov edx, dword [esp + 0xa4]
push edx
push edi
push dword [0x809bf0]
mov edx, 1
push edx
push edx
mov edx, dword [esp + 0xf8]
push edx
mov edx, dword [esp + 0xf8]
push edx
push ecx
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0xcc], ecx
call dword [eax + 0x5c]
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0xd4], eax
mov edx, 1
jmp 0x40ba1d
cmp edx, 1
jne 0x40b9b1
mov eax, dword [esp + 0x88]
test eax, eax
je 0x40b955
mov edx, 2
jmp 0x40ba1d
mov dword [esp + 0xa8], ecx
mov ecx, dword [0x809bf8]
mov eax, dword [ecx]
xor edi, edi
push edi
mov edx, dword [esp + 0xa4]
push edx
push edi
push dword [0x809bf0]
push 1
push 2
mov edx, dword [esp + 0xf8]
push edx
mov edx, dword [esp + 0xf8]
push edx
push ecx
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0xcc], ecx
call dword [eax + 0x5c]
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0xd4], eax
mov edx, 2
jmp 0x40ba1d
mov eax, dword [esp + 0x88]
test eax, eax
je 0x40b9c3
mov edx, 4
jmp 0x40ba1d
mov dword [esp + 0xa8], ecx
mov ecx, dword [0x809bf8]
mov eax, dword [ecx]
xor edi, edi
push edi
mov edx, dword [esp + 0xa4]
push edx
push edi
push dword [0x809bf0]
push 1
push 4
mov edx, dword [esp + 0xf8]
push edx
mov edx, dword [esp + 0xf8]
push edx
push ecx
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0xcc], ecx
call dword [eax + 0x5c]
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0xd4], eax
mov edx, 4
mov eax, dword [esp + 0xd4]
test eax, eax
jl 0x40c24a
mov dword [esp + 0xf0], 0
mov eax, dword [0x5d3c60]
mov dword [esp + 0xc4], eax
movsx edi, byte [0x809508]
test edi, edi
je 0x40ba60
mov eax, dword [esp + 0xa4]
cmp byte [eax + 0xa4], 2
jne 0x40ba60
xor edx, edx
test edx, edx
jbe 0x40bcf1
xor edi, edi
mov dword [esp + 0xa8], ecx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], esi
mov dword [esp + 0xec], edx
mov eax, dword [esp + 0xf4]
mov ebp, dword [eax + ebx + 0x21c]
mov esi, dword [ebp]
lea edx, [esp + 0xf0]
push edx
push edi
push ebp
call dword [esi + 0x48]
test eax, eax
jne 0x40bca0
mov eax, dword [0x809bf8]
mov ecx, edi
mov ebp, dword [esp + 0xdc]
sar ebp, cl
mov ecx, edi
mov esi, dword [esp + 0xe0]
sar esi, cl
mov ecx, dword [eax]
lea edx, [esp + 0xd8]
push 0
push edx
push 2
push dword [0x5b67cc]
push esi
push ebp
push eax
call dword [ecx + 0x90]
test eax, eax
je 0x40bafa
push 0x813e70
push 0x80f270
call fcn.00417454
add esp, 8
cmp edi, 1
je 0x40c1e4
cmp edi, 2
je 0x40c170
cmp edi, 3
je 0x40c0fc
cmp edi, 4
je 0x40c088
cmp edi, 5
je 0x40c014
cmp edi, 6
je 0x40bfa0
cmp edi, 7
je 0x40bf35
cmp edi, 8
je 0x40bedf
mov edx, dword [esp + 0xd8]
mov dword [esp + 0xb0], edx
mov ecx, dword [edx]
lea eax, [esp + 0xe4]
push 0x2000
push 0
push eax
push edx
call dword [ecx + 0x34]
test eax, eax
jl 0x40bec3
test esi, esi
jle 0x40bbc4
xor edx, edx
add ebp, ebp
add ebp, ebp
mov eax, dword [esp + 0xc4]
mov dword [esp + 0xd0], edi
mov dword [esp + 0xac], ebx
mov ebx, eax
mov edi, esi
mov esi, edx
mov ecx, esi
imul ecx, dword [esp + 0xe4]
add ecx, dword [esp + 0xe8]
push ebp
push ebx
push ecx
call dword [0x5d348c]
add esp, 0xc
add ebx, ebp
inc esi
cmp esi, edi
jl 0x40bb92
mov edi, dword [esp + 0xd0]
mov ebx, dword [esp + 0xac]
mov eax, dword [esp + 0xb0]
mov edx, dword [eax]
push eax
call dword [edx + 0x38]
test eax, eax
jl 0x40bea7
xor eax, eax
test eax, eax
jne 0x40bc70
movsx eax, byte [0x8090d0]
test eax, eax
jne 0x40bc2b
mov edx, dword [0x809bf8]
mov ebp, dword [edx]
xor eax, eax
push eax
push dword [esp + 0xf4]
push eax
push dword [esp + 0xe4]
push edx
call dword [ebp + 0x78]
mov dword [esp + 0xd4], eax
test eax, eax
je 0x40bc52
push 0x813af4
push 0x80f270
call fcn.00417454
add esp, 8
jmp 0x40bc52
xor edx, edx
push dword [0x8090fc]
mov eax, dword [esp + 0xac]
push eax
push edx
push edx
push dword [esp + 0xe8]
push edx
push edx
push dword [esp + 0x10c]
call fcn.004c9013
mov eax, dword [esp + 0xf0]
test eax, eax
je 0x40bc63
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov dword [esp + 0xf0], 0
jmp 0x40bc82
push 0x813fc8
push 0x81365c
call fcn.0040c598
add esp, 8
mov eax, dword [esp + 0xd8]
test eax, eax
je 0x40bc93
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov dword [esp + 0xd8], 0
jmp 0x40bcb5
push edi
push 2
push 0x813b40
push 0x80f270
call fcn.00417454
add esp, 0x10
mov eax, dword [esp + 0xf0]
test eax, eax
je 0x40bcc6
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov dword [esp + 0xf0], 0
inc edi
mov eax, dword [esp + 0xec]
cmp edi, eax
jb 0x40ba86
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
mov edx, eax
mov eax, dword [esp + 0xdc]
lea esi, [esi + eax]
add ebx, 4
add dword [esp + 0xa0], 4
inc ebp
mov ecx, dword [esp + 0x9c]
cmp ebp, ecx
jl 0x40b30e
mov dword [esp + 0xec], edx
mov ecx, dword [esp + 0xc0]
mov edx, dword [esp + 0x48]
mov dword [esp + 0x50], ecx
add edx, dword [esp + 0x40]
mov eax, dword [esp + 0x8c]
inc eax
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 0x38]
cmp eax, ecx
jl 0x40b28c
mov ebx, dword [esp + 0x3c]
mov ebp, dword [esp + 0xa4]
fld dword [0x809c64]
fnstcw word [esp + 0x28]
movzx eax, word [esp + 0x28]
or eax, 0xc00
mov dword [esp + 0x30], eax
fldcw word [esp + 0x30]
fistp qword [ebp + 0x1d0]
fldcw word [esp + 0x28]
fld dword [0x809c68]
fnstcw word [esp + 0x28]
movzx eax, word [esp + 0x28]
or eax, 0xc00
mov dword [esp + 0x30], eax
fldcw word [esp + 0x30]
fistp qword [ebp + 0x1d8]
fldcw word [esp + 0x28]
mov esi, dword [0x809c6c]
mov dword [ebp + 0x78], esi
mov edi, dword [0x809c70]
mov dword [ebp + 0x7c], edi
xor edx, edx
mov byte [ebp + 0xa5], dl
mov dword [ebp + 0xa8], ebx
mov ebx, dword [esp + 0x7c]
mov dword [ebp + 0xac], ebx
mov dword [0x809c6c], edx
mov dword [0x809c70], edx
mov dword [0x809c64], edx
mov dword [0x809c68], edx
mov eax, dword [esp + 0x34]
test eax, eax
je 0x40bdf2
mov edx, dword [eax]
push eax
call dword [edx + 8]
xor eax, eax
add esp, 0xf8
pop ebx
pop ebp
pop esi
pop edi
ret
fild dword [0x80973c]
fnstcw word [esp + 0x28]
movzx eax, word [esp + 0x28]
or eax, 0xc00
mov dword [esp + 0x30], eax
fldcw word [esp + 0x30]
fistp dword [ebp + 0xb0]
fldcw word [esp + 0x28]
fild dword [0x809740]
fnstcw word [esp + 0x28]
movzx eax, word [esp + 0x28]
or eax, 0xc00
mov dword [esp + 0x30], eax
fldcw word [esp + 0x30]
fistp dword [ebp + 0x130]
fldcw word [esp + 0x28]
mov edx, 1
mov ecx, 1
mov byte [ebp + 0xa6], cl
mov ecx, 1
mov dword [esp + 0x38], ecx
mov ecx, 1
mov byte [ebp + 0xa7], cl
jmp 0x40b10c
push 0x813e5c
push 0x80f270
mov dword [esp + 0xf4], edx
call fcn.0040c598
mov edx, dword [esp + 0xf4]
add esp, 8
jmp 0x40b36a
xor eax, eax
mov dword [esp + 0xa8], eax
jmp 0x40b66a
push 0x814248
push 0x80f270
call fcn.00417454
add esp, 8
mov eax, 2
jmp 0x40bbdb
push 0x814234
push 0x80f270
call fcn.00417454
add esp, 8
mov eax, 1
jmp 0x40bbdb
mov eax, dword [0x5d3c80]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xdc]
lea ecx, [edx - 1]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5d3c60]
xor ecx, ecx
call fcn.0040c484
jmp 0x40bb42
mov eax, dword [esp + 0xdc]
lea edx, [eax - 1]
mov dword [esp + 0xb0], edx
mov eax, dword [0x5d3c7c]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5d3c60]
xor ecx, ecx
call fcn.0040c484
jmp 0x40bb42
mov eax, dword [esp + 0xdc]
lea edx, [eax - 1]
mov dword [esp + 0xb0], edx
mov eax, dword [0x5d3c78]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5d3c60]
xor ecx, ecx
call fcn.0040c484
cmp edi, 7
je 0x40bf46
jmp 0x40bb42
mov eax, dword [esp + 0xdc]
lea edx, [eax - 1]
mov dword [esp + 0xb0], edx
mov eax, dword [0x5d3c74]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5d3c60]
xor ecx, ecx
call fcn.0040c484
cmp edi, 6
je 0x40bfb1
jmp 0x40bb42
mov eax, dword [esp + 0xdc]
lea edx, [eax - 1]
mov dword [esp + 0xb0], edx
mov eax, dword [0x5d3c70]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5d3c60]
xor ecx, ecx
call fcn.0040c484
cmp edi, 5
je 0x40c025
jmp 0x40bb42
mov eax, dword [esp + 0xdc]
lea edx, [eax - 1]
mov dword [esp + 0xb0], edx
mov eax, dword [0x5d3c6c]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5d3c60]
xor ecx, ecx
call fcn.0040c484
cmp edi, 4
je 0x40c099
jmp 0x40bb42
mov eax, dword [esp + 0xdc]
lea edx, [eax - 1]
mov dword [esp + 0xb0], edx
mov eax, dword [0x5d3c68]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc], 0
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5d3c60]
xor ecx, ecx
call fcn.0040c484
cmp edi, 3
je 0x40c10d
jmp 0x40bb42
mov eax, dword [0x5d3c64]
mov dword [esp + 0xc4], eax
mov edx, dword [esp + 0xdc]
lea ecx, [edx - 1]
mov dword [esp + 0xb0], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov edx, dword [0x5d3c60]
xor ecx, ecx
call fcn.0040c484
cmp edi, 2
je 0x40c181
jmp 0x40bb42
push 0x813ea0
push 0x80f270
call fcn.0040c598
push 0x813fa0
push 0x80f270
call fcn.00417454
mov eax, 0xffffffff
add esp, 0x108
pop ebx
pop ebp
pop esi
pop edi
ret
xor eax, eax
mov dword [esp + 0xa8], eax
jmp 0x40b81b
mov ecx, dword [esp + 0x50]
lea ecx, [ecx + eax]
jmp 0x40bd28
push 0x813e5c
push 0x80f270
call fcn.0040c598
add esp, 8
jmp 0x40b1de
push 0x100
call fcn.0046adec
pop ecx
mov dword [0x5d3c80], eax
jmp 0x40b1d6
push 0x813e5c
push 0x80f270
call fcn.0040c598
add esp, 8
jmp 0x40b1c9
push 0x400
call fcn.0046adec
pop ecx
mov dword [0x5d3c7c], eax
jmp 0x40b1c1
push 0x813e5c
push 0x80f270
call fcn.0040c598
add esp, 8
jmp 0x40b1b4
push 0x1000
call fcn.0046adec
pop ecx
mov dword [0x5d3c78], eax
jmp 0x40b1ac
push 0x813e5c
push 0x80f270
call fcn.0040c598
add esp, 8
jmp 0x40b19f
push 0x4000
call fcn.0046adec
pop ecx
mov dword [0x5d3c74], eax
jmp 0x40b197
push 0x813e5c
push 0x80f270
call fcn.0040c598
add esp, 8
jmp 0x40b18a
push 0x10000
call fcn.0046adec
pop ecx
mov dword [0x5d3c70], eax
jmp 0x40b182
push 0x813e5c
push 0x80f270
call fcn.0040c598
add esp, 8
jmp 0x40b175
push 0x40000
call fcn.0046adec
pop ecx
mov dword [0x5d3c6c], eax
jmp 0x40b16d
push 0x813e5c
push 0x80f270
call fcn.0040c598
add esp, 8
jmp 0x40b160
push 0x100000
call fcn.0046adec
pop ecx
mov dword [0x5d3c68], eax
jmp 0x40b158
push 0x813e5c
push 0x80f270
call fcn.0040c598
add esp, 8
jmp 0x40b14b
push 0x400000
call fcn.0046adec
pop ecx
mov dword [0x5d3c64], eax
jmp 0x40b143
push 0x813e5c
push 0x80f270
call fcn.0040c598
add esp, 8
jmp 0x40b136
push dword [0x5b6080]
call fcn.0046adec
pop ecx
mov dword [0x5d3c60], eax
jmp 0x40b12e
mov dword [esp + 0x38], edx
mov byte [ebp + 0xa7], dl
push esi
mov eax, dword [esp + 0x48]
push eax
mov ecx, dword [esp + 0xc4]
push ecx
push 0x813e28
push 0x80f270
call fcn.0040c598
mov eax, 0xffffffff
add esp, 0x10c
pop ebx
pop ebp
pop esi
pop edi
ret
xor eax, eax
push eax
push eax
push 0x813e10
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
mov eax, 0xffffffff
add esp, 0xf8
pop ebx
pop ebp
pop esi
pop edi
ret