Function at 0x48fc20
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x3d4]
cmp eax, dword [ecx + 8]
jbe 0x4929f7
sub esp, 0x454
lea edi, [esp + 0x470]
xor eax, eax
call fcn.00456d5b
mov ecx, dword [esp + 0x45c]
mov edx, dword [esp + 0x458]
xor ebx, ebx
xor ebp, ebp
mov esi, 0xffffffff
xor edi, edi
mov ecx, 0xffffffff
mov dword [esp + 0xc4], ecx
mov ecx, 0xffffffff
mov dword [esp + 0xd8], ecx
xor ecx, ecx
mov dword [esp + 0x90], ecx
xor ecx, ecx
mov byte [esp + 0x37], cl
xor edx, edx
mov byte [esp + 0x36], dl
mov edx, 0xffffffff
mov dword [esp + 0x94], edx
xor edx, edx
mov dword [esp + 0x8c], edx
xor edx, edx
mov dword [esp + 0xa4], edx
xor edx, edx
mov dword [esp + 0x40c], edx
xor ebx, ebx
mov dword [esp + 0xbc], ebx
xor ebx, ebx
mov dword [esp + 0xa8], ebx
xor ebx, ebx
mov dword [esp + 0x408], ebx
mov ebx, dword [esp + 0x464]
mov dword [esp + 0xfc], ebx
mov ebx, dword [esp + 0x460]
mov dword [esp + 0x414], ebx
mov ecx, dword [esp + 0x45c]
mov edx, dword [esp + 0x458]
xor ebx, ebx
jmp 0x48fd54
mov edx, dword [esp + 0x3e8]
mov ebx, dword [esp + 0xc0]
mov ebp, dword [esp + 0x80]
mov esi, dword [esp + 0x88]
mov edi, dword [esp + 0x3e0]
mov dword [esp + 0x40c], ecx
mov edx, dword [esp + 0x98]
mov dword [esp + 0xfc], edx
mov dword [esp + 0x414], eax
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x3e8]
mov dword [esp + 0xf8], ecx
mov dword [esp + 0x410], edx
mov dword [esp + 0x80], ebp
mov dword [esp + 0x3e0], edi
mov dword [esp + 0xc0], ebx
mov dword [esp + 0x88], esi
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.0048b290
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0xf8]
mov esi, ebp
sub ebp, ebx
mov edi, dword [esp + 0x14]
cmp esi, ebp
jb 0x4929ed
cmp edx, ebp
ja 0x4929e4
mov dword [esp + 0xd4], eax
mov dword [esp + 0xf8], ebp
mov dword [esp + 0x3fc], ecx
mov dword [esp + 0xb0], edx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x3e8], edi
mov eax, dword [esp + 0x414]
mov dword [esp], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 4], eax
call fcn.0048f970
mov eax, dword [esp + 0xf8]
mov ecx, dword [esp + 0xb0]
sub eax, ecx
mov edx, eax
neg eax
sar eax, 0x1f
and eax, ecx
mov ebx, dword [esp + 0x410]
add eax, ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x414], ebx
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov dword [esp + 0x9c], esi
test ebp, ebp
jne 0x4920dc
mov edi, dword [esp + 0xd4]
test edi, edi
je 0x490ee9
mov dword [esp + 0xfc], edx
mov dword [esp + 0x3e4], eax
mov ecx, edi
and edi, 0xffff
cmp edi, 0x106
jg 0x490749
cmp edi, 0x23
jg 0x4904ad
cmp edi, 0x21
jg 0x490380
cmp edi, 0x17
jne 0x48ffac
mov dword [esp + 0xdc], ebp
cmp esi, 3
jl 0x48fee3
cmp word [ebx], 0x5455
jne 0x48fee3
cmp byte [ebx + 2], 0x43
jne 0x48fee3
mov ecx, dword [0x706b24]
mov edi, eax
lea eax, [esi - 3]
mov dword [esp + 0xf8], eax
neg eax
sar eax, 0x1f
and eax, 3
add eax, ebx
mov dword [esp + 0x100], eax
mov eax, dword [esp + 0xf8]
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0x100]
jmp 0x490ecd
mov dword [esp], ebx
mov dword [esp + 4], esi
call fcn.00492a10
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 8]
test al, al
je 0x48ff75
mov edx, dword [esp + 0x9c]
cmp ecx, edx
ja 0x4929df
mov esi, edx
sub esi, ecx
mov eax, esi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, ecx
mov edi, dword [esp + 0x414]
lea ebx, [esi + edi]
mov edx, dword [esp + 0xfc]
mov esi, dword [esp + 0x9c]
mov edi, dword [esp + 0x3e4]
mov ebp, dword [esp + 0xdc]
mov dword [esp + 0x80], ecx
mov ebp, dword [esp + 0x414]
mov dword [esp + 0x3e0], ebp
mov dword [esp + 0x98], eax
mov eax, ebx
mov ebx, ebp
mov ecx, dword [esp + 0x40c]
mov ebp, dword [esp + 0xdc]
jmp 0x490ecd
mov ebp, dword [0x7073e0]
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x414]
mov esi, dword [esp + 0x9c]
mov edi, dword [esp + 0x3e4]
mov ecx, dword [esp + 0x40c]
mov dword [esp + 0x98], esi
mov eax, ebx
jmp 0x490ecd
cmp edi, 0x18
jl 0x490ba1
cmp ecx, 0x18
je 0x48ffc4
cmp ecx, 0x1a
je 0x48ffc4
cmp ecx, 0x1b
jne 0x490004
cmp esi, 1
jl 0x48ffff
cmp byte [ebx], 0x5a
jne 0x48ffff
lea eax, [esi - 1]
mov edi, eax
neg eax
sar eax, 0x1f
and eax, 1
add eax, ebx
mov edx, dword [0x706b24]
mov ecx, edx
mov dword [esp + 0x98], edi
mov edx, dword [esp + 0xfc]
mov edi, dword [esp + 0x3e4]
jmp 0x490ecd
cmp ecx, 0x1b
je 0x490009
cmp ecx, 0x20
jne 0x490085
cmp esi, 6
jge 0x49002b
mov ebp, dword [0x7073e0]
mov edi, eax
mov ecx, dword [esp + 0x40c]
mov dword [esp + 0x98], esi
mov eax, ebx
jmp 0x490ecd
cmp byte [ebx + 3], 0x3a
je 0x49004e
mov ebp, dword [0x7073e0]
mov edi, eax
mov ecx, dword [esp + 0x40c]
mov dword [esp + 0x98], esi
mov eax, ebx
jmp 0x490ecd
lea ecx, [ebx + 1]
lea ebp, [ebx + 4]
lea edi, [esi - 6]
mov dword [esp + 0xf8], edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edi, 6
add edi, ebx
mov dword [esp + 0x128], eax
lea eax, [0x7699ee]
mov dword [esp + 0x3f4], eax
jmp 0x490268
cmp ecx, 0x1f
je 0x49008f
cmp ecx, 0x1a
jne 0x4900f4
cmp esi, 3
jge 0x4900b1
mov ebp, dword [0x7073e0]
mov edi, eax
mov ecx, dword [esp + 0x40c]
mov dword [esp + 0x98], esi
mov eax, ebx
jmp 0x490ecd
lea ecx, [ebx + 1]
lea ebp, [esi - 3]
mov edi, ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, 3
add ebp, ebx
mov dword [esp + 0x130], eax
lea eax, [0x7699ee]
mov dword [esp + 0x3f4], eax
lea eax, [0x7699ee]
mov dword [esp + 0x3ec], eax
mov eax, dword [esp + 0x130]
jmp 0x490258
cmp ecx, 0x1c
je 0x490102
cmp ecx, 0x21
jne 0x490186
cmp esi, 9
jge 0x490124
mov ebp, dword [0x7073e0]
mov edi, eax
mov ecx, dword [esp + 0x40c]
mov dword [esp + 0x98], esi
mov eax, ebx
jmp 0x490ecd
cmp byte [ebx + 3], 0x3a
jne 0x490130
cmp byte [ebx + 6], 0x3a
je 0x49014d
mov ebp, dword [0x7073e0]
mov edi, eax
mov ecx, dword [esp + 0x40c]
mov dword [esp + 0x98], esi
mov eax, ebx
jmp 0x490ecd
lea ecx, [ebx + 1]
lea ebp, [ebx + 4]
lea edi, [ebx + 7]
lea eax, [esi - 9]
mov dword [esp + 0xf8], eax
neg eax
sar eax, 0x1f
and eax, 9
add eax, ebx
mov dword [esp + 0x3f4], edi
mov edx, eax
mov eax, dword [esp + 0x3e4]
mov edi, dword [esp + 0xfc]
jmp 0x490241
cmp ecx, 0x19
je 0x490190
cmp ecx, 0x1e
jne 0x4901e8
cmp esi, 7
jge 0x4901b2
mov ebp, dword [0x7073e0]
mov edi, eax
mov ecx, dword [esp + 0x40c]
mov dword [esp + 0x98], esi
mov eax, ebx
jmp 0x490ecd
lea ecx, [ebx + 1]
lea ebp, [ebx + 3]
lea edi, [ebx + 5]
lea eax, [esi - 7]
mov dword [esp + 0xf8], eax
neg eax
sar eax, 0x1f
and eax, 7
add eax, ebx
mov edx, eax
mov dword [esp + 0x3f4], edi
mov eax, dword [esp + 0x3e4]
mov edi, dword [esp + 0xfc]
jmp 0x490241
cmp esi, 5
jge 0x49020a
mov ebp, dword [0x7073e0]
mov edi, eax
mov ecx, dword [esp + 0x40c]
mov dword [esp + 0x98], esi
mov eax, ebx
jmp 0x490ecd
lea ecx, [ebx + 1]
lea ebp, [ebx + 3]
mov edi, edx
lea edx, [esi - 5]
mov dword [esp + 0xf8], edx
neg edx
sar edx, 0x1f
and edx, 5
add edx, ebx
mov dword [esp + 0x138], eax
lea eax, [0x7699ee]
mov dword [esp + 0x3f4], eax
mov eax, dword [esp + 0x138]
mov edi, dword [esp + 0xf8]
mov dword [esp + 0x3ec], ebp
mov ebp, edx
mov edx, dword [esp + 0xfc]
mov dword [esp + 0xf8], edi
mov edi, ebp
mov ebp, dword [esp + 0x3ec]
mov dword [esp + 0x3ec], ebp
mov dword [esp + 0x410], edi
mov dword [esp], ecx
mov dword [esp + 4], 2
mov byte [esp + 8], 1
call fcn.0048f860
mov eax, dword [esp + 0xc]
mov dword [esp + 0xe0], eax
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x4902a2
xor edx, edx
jmp 0x4902cf
mov eax, dword [esp + 0x3ec]
mov dword [esp], eax
mov dword [esp + 4], 2
mov byte [esp + 8], 1
call fcn.0048f860
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, eax
mov eax, dword [esp + 0xe0]
test ecx, ecx
je 0x4902d7
xor ebx, ebx
jmp 0x490312
mov dword [esp + 0xa0], edx
mov eax, dword [esp + 0x3f4]
mov dword [esp], eax
mov dword [esp + 4], 2
mov byte [esp + 8], 1
call fcn.0048f860
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0xa0]
mov ebx, eax
mov eax, dword [esp + 0xe0]
imul eax, eax, 0x3c
add eax, edx
imul eax, eax, 0x3c
add eax, ebx
mov edx, dword [esp + 0x414]
movzx ebx, byte [edx]
cmp bl, 0x2b
je 0x49033a
cmp bl, 0x2d
jne 0x490334
neg eax
jmp 0x49033a
mov ecx, dword [0x7073e0]
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x414]
mov esi, dword [esp + 0x9c]
mov edi, dword [esp + 0x3e4]
mov ebp, ecx
mov dword [esp + 0xd8], eax
mov ecx, dword [esp + 0xf8]
mov dword [esp + 0x98], ecx
mov eax, dword [esp + 0x410]
mov ecx, dword [esp + 0x40c]
jmp 0x490ecd
cmp edi, 0x22
jne 0x490467
sar ecx, 0x10
and ecx, 0xfff
lea ebp, [ecx + 1]
nop
cmp esi, ebp
jge 0x4903b7
mov ebp, dword [0x7073e0]
mov edi, eax
mov ecx, dword [esp + 0x40c]
mov dword [esp + 0x98], esi
mov eax, ebx
jmp 0x490ecd
mov dword [esp + 0x78], ecx
mov dword [esp + 0xe8], ebp
lea eax, [0x7ca568]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebp
call fcn.0049a800
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xe8]
cmp ebp, esi
jb 0x4929d6
mov edi, dword [esp + 0x78]
sub ebp, edi
dec ebp
mov edi, ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and esi, ebp
mov ebp, dword [esp + 0x414]
add esi, ebp
mov ebp, eax
mov dword [esp + 0x98], edi
mov eax, esi
mov dword [esp + 0xbc], ebx
mov dword [esp + 0x408], edx
mov dword [esp + 0x90], ecx
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x414]
mov esi, dword [esp + 0x9c]
mov edi, dword [esp + 0x3e4]
mov ecx, dword [esp + 0x40c]
jmp 0x490ecd
cmp esi, 2
jl 0x490496
movzx edi, byte [ebx]
xchg edi, eax
cmp al, 0x2e
xchg edi, eax
je 0x49047d
xchg edi, eax
cmp al, 0x2c
xchg edi, eax
jne 0x490496
movzx edi, byte [ebx + 1]
xchg edi, eax
cmp al, 0x30
xchg edi, eax
jb 0x490496
xchg edi, eax
cmp al, 0x39
xchg edi, eax
ja 0x490496
xor ecx, ecx
jmp 0x4928f2
mov edi, eax
mov ecx, dword [esp + 0x40c]
mov dword [esp + 0x98], esi
mov eax, ebx
jmp 0x490ecd
cmp edi, 0x102
jg 0x4905b3
cmp edi, 0x101
je 0x490540
cmp edi, 0x102
jne 0x490ba1
mov eax, dword [0x707c58]
mov ecx, dword [0x707c5c]
mov edx, dword [0x707c60]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
call fcn.0048c070
mov eax, dword [esp + 0x14]
inc eax
mov ebp, dword [esp + 0x20]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0xfc]
mov edi, dword [esp + 0x3e4]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x40c]
mov dword [esp + 0x98], esi
mov eax, ebx
mov ebx, dword [esp + 0x414]
mov esi, dword [esp + 0x9c]
jmp 0x490ecd
mov eax, dword [0x707c78]
mov ecx, dword [0x707c7c]
mov edx, dword [0x707c80]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
call fcn.0048c070
mov eax, dword [esp + 0x14]
inc eax
mov ebp, dword [esp + 0x20]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0xfc]
mov edi, dword [esp + 0x3e4]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x40c]
mov dword [esp + 0x98], esi
mov eax, ebx
mov ebx, dword [esp + 0x414]
mov esi, dword [esp + 0x9c]
jmp 0x490ecd
cmp edi, 0x104
jle 0x4906a1
cmp edi, 0x105
je 0x49063a
cmp edi, 0x106
jne 0x490ba1
mov eax, dword [0x707c88]
mov ecx, dword [0x707c8c]
mov edx, dword [0x707c90]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
call fcn.0048c070
mov ebp, dword [esp + 0x20]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0xfc]
mov edi, dword [esp + 0x3e4]
mov ecx, dword [esp + 0x40c]
mov dword [esp + 0x98], esi
mov eax, ebx
mov ebx, dword [esp + 0x414]
mov esi, dword [esp + 0x9c]
jmp 0x490ecd
mov eax, dword [0x707c68]
mov ecx, dword [0x707c6c]
mov edx, dword [0x707c70]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
call fcn.0048c070
mov ebp, dword [esp + 0x20]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0xfc]
mov edi, dword [esp + 0x3e4]
mov ecx, dword [esp + 0x40c]
mov dword [esp + 0x98], esi
mov eax, ebx
mov ebx, dword [esp + 0x414]
mov esi, dword [esp + 0x9c]
jmp 0x490ecd
cmp ecx, 0x104
sete al
mov dword [esp], ebx
mov dword [esp + 4], esi
mov byte [esp + 8], al
call fcn.0048f860
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
test ecx, ecx
je 0x4906de
mov ebp, dword [esp + 0xbc]
mov esi, dword [esp + 0x408]
jmp 0x490701
lea ebp, [eax - 1]
cmp ebp, 0xb
jbe 0x4906f3
mov ebp, 5
lea esi, [0x769f5a]
jmp 0x490701
mov ebp, dword [esp + 0xbc]
mov esi, dword [esp + 0x408]
mov edi, dword [esp + 0x3e4]
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], ebx
mov eax, edx
mov dword [esp + 0xbc], ebp
mov dword [esp + 0x408], esi
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x414]
mov esi, dword [esp + 0x9c]
mov ebp, ecx
mov ecx, dword [esp + 0x40c]
jmp 0x490ecd
cmp edi, 0x20c
jg 0x490a4b
cmp edi, 0x10b
jg 0x490814
cmp edi, 0x109
jle 0x49077d
mov ebp, esi
mov edi, ebx
xor ebx, ebx
mov dword [esp + 0xd0], ebx
mov ebx, edi
jmp 0x4927e2
cmp ecx, 0x108
jne 0x4907af
test esi, esi
je 0x4907a9
cmp byte [ebx], 0x20
jne 0x4907a3
lea ebp, [esi - 1]
mov edi, ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, 1
add ebp, ebx
jmp 0x4907b3
mov edi, esi
mov ebp, ebx
jmp 0x4907b3
mov edi, esi
mov ebp, ebx
jmp 0x4907b3
mov edi, esi
mov ebp, ebx
cmp ecx, 0x109
sete al
mov dword [esp], ebp
mov dword [esp + 4], edi
mov byte [esp + 8], al
call fcn.0048f860
mov eax, dword [esp + 0xc]
mov ebp, dword [esp + 0x18]
mov ebx, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0xfc]
mov edi, dword [esp + 0x3e4]
mov dword [esp + 0xc4], eax
mov ecx, dword [esp + 0x40c]
mov dword [esp + 0x98], esi
mov eax, ebx
mov ebx, dword [esp + 0x414]
mov esi, dword [esp + 0x9c]
jmp 0x490ecd
cmp edi, 0x113
jne 0x4908cc
cmp esi, 4
jl 0x490831
nop
movzx ecx, byte [ebx]
add ecx, 0xffffffd0
cmp cl, 9
jbe 0x49084e
mov ebp, dword [0x7073e0]
mov edi, eax
mov ecx, dword [esp + 0x40c]
mov dword [esp + 0x98], esi
mov eax, ebx
jmp 0x490ecd
lea eax, [0x7ca570]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], 4
call fcn.0049a990
mov eax, dword [esp + 0x9c]
lea esi, [eax - 4]
mov ecx, esi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, 4
mov edx, dword [esp + 0x414]
lea ebx, [esi + edx]
mov ebp, dword [esp + 0xc]
mov esi, dword [esp + 0x10]
mov edx, dword [esp + 0xfc]
mov edi, dword [esp + 0x3e4]
mov dword [esp + 0xc0], ebp
mov ebp, esi
mov dword [esp + 0x98], ecx
mov eax, ebx
mov ebx, dword [esp + 0x414]
mov esi, dword [esp + 0x9c]
mov ecx, dword [esp + 0x40c]
jmp 0x490ecd
cmp edi, 0x114
jne 0x4909b6
cmp esi, 2
jge 0x4908fa
mov ebp, dword [0x7073e0]
mov edi, eax
mov ecx, dword [esp + 0x40c]
mov dword [esp + 0x98], esi
mov eax, ebx
jmp 0x490ecd
lea eax, [0x7ca570]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], 2
call fcn.0049a990
mov eax, dword [esp + 0x9c]
lea ecx, [eax - 2]
mov edx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 2
mov ebx, dword [esp + 0x414]
add ecx, ebx
mov ebp, dword [esp + 0xc]
mov esi, dword [esp + 0x10]
test esi, esi
je 0x490970
mov edi, dword [esp + 0x3e4]
mov dword [esp + 0xc0], ebp
mov ebp, esi
mov dword [esp + 0x98], edx
mov eax, ecx
mov edx, dword [esp + 0xfc]
mov esi, dword [esp + 0x9c]
mov ecx, dword [esp + 0x40c]
jmp 0x490ecd
cmp ebp, 0x45
jl 0x49097d
add ebp, 0x76c
jmp 0x490983
add ebp, 0x7d0
mov edi, dword [esp + 0x3e4]
mov dword [esp + 0xc0], ebp
mov ebp, esi
mov dword [esp + 0x98], edx
mov eax, ecx
mov edx, dword [esp + 0xfc]
mov esi, dword [esp + 0x9c]
mov ecx, dword [esp + 0x40c]
jmp 0x490ecd
cmp edi, 0x20c
jne 0x490ba1
mov dword [esp], ebx
mov dword [esp + 4], esi
mov byte [esp + 8], 0
call fcn.0048f860
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
cmp eax, 0x18
jb 0x4909f5
mov ebp, 4
lea esi, [0x769d79]
jmp 0x490a03
mov ebp, dword [esp + 0xbc]
mov esi, dword [esp + 0x408]
mov edi, dword [esp + 0x3e4]
mov dword [esp + 0xa4], eax
mov dword [esp + 0x98], ebx
mov eax, edx
mov dword [esp + 0xbc], ebp
mov dword [esp + 0x408], esi
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x414]
mov esi, dword [esp + 0x9c]
mov ebp, ecx
mov ecx, dword [esp + 0x40c]
jmp 0x490ecd
cmp edi, 0x210
jle 0x490da4
cmp edi, 0x212
jle 0x490bb8
cmp edi, 0x215
jne 0x490b02
cmp esi, 2
jge 0x490a91
mov ebp, dword [0x7073e0]
mov edi, eax
mov ecx, dword [esp + 0x40c]
mov dword [esp + 0x98], esi
mov eax, ebx
jmp 0x490ecd
lea ecx, [esi - 2]
mov edi, ecx
neg ecx
sar ecx, 0x1f
and ecx, 2
add ecx, ebx
cmp word [ebx], 0x4d41
jne 0x490ac0
mov dword [esp + 0x118], eax
mov eax, 1
mov byte [esp + 0x36], al
mov eax, dword [esp + 0x118]
jmp 0x490ae6
cmp word [ebx], 0x4d50
jne 0x490ae0
mov dword [esp + 0x120], eax
mov eax, 1
mov byte [esp + 0x37], al
mov eax, dword [esp + 0x120]
jmp 0x490ae6
mov ebp, dword [0x7073e0]
mov dword [esp + 0x98], edi
mov eax, ecx
mov edi, dword [esp + 0x3e4]
mov ecx, dword [esp + 0x40c]
jmp 0x490ecd
cmp edi, 0x216
jne 0x490ba1
cmp esi, 2
jge 0x490b30
mov ebp, dword [0x7073e0]
mov edi, eax
mov ecx, dword [esp + 0x40c]
mov dword [esp + 0x98], esi
mov eax, ebx
jmp 0x490ecd
lea ecx, [esi - 2]
mov edi, ecx
neg ecx
sar ecx, 0x1f
and ecx, 2
add ecx, ebx
cmp word [ebx], 0x6d61
jne 0x490b5f
mov dword [esp + 0x108], eax
mov eax, 1
mov byte [esp + 0x36], al
mov eax, dword [esp + 0x108]
jmp 0x490b85
cmp word [ebx], 0x6d70
jne 0x490b7f
mov dword [esp + 0x110], eax
mov eax, 1
mov byte [esp + 0x37], al
mov eax, dword [esp + 0x110]
jmp 0x490b85
mov ebp, dword [0x7073e0]
mov dword [esp + 0x98], edi
mov eax, ecx
mov edi, dword [esp + 0x3e4]
mov ecx, dword [esp + 0x40c]
jmp 0x490ecd
mov edi, eax
mov ecx, dword [esp + 0x40c]
mov dword [esp + 0x98], esi
mov eax, ebx
jmp 0x490ecd
cmp ecx, 0x212
sete al
mov dword [esp], ebx
mov dword [esp + 4], esi
mov byte [esp + 8], al
call fcn.0048f860
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x18]
test ebx, ebx
je 0x490c1f
mov esi, dword [esp + 0x9c]
mov edi, dword [esp + 0x3e4]
mov dword [esp + 0xa8], eax
mov ebp, ebx
mov dword [esp + 0x98], ecx
mov eax, edx
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x414]
mov ecx, dword [esp + 0x40c]
jmp 0x490ecd
cmp eax, 0x3c
jb 0x490c77
mov esi, dword [esp + 0x9c]
mov edi, dword [esp + 0x3e4]
mov dword [esp + 0xa8], eax
mov ebp, ebx
mov dword [esp + 0x98], ecx
mov eax, edx
mov edx, 6
mov dword [esp + 0xbc], edx
lea ebx, [0x76a1bb]
mov dword [esp + 0x408], ebx
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x414]
mov ecx, dword [esp + 0x40c]
jmp 0x490ecd
cmp ecx, 2
jl 0x490d8a
movzx ebp, byte [edx]
xchg ebp, eax
cmp al, 0x2e
xchg ebp, eax
je 0x490c95
xchg ebp, eax
cmp al, 0x2c
xchg ebp, eax
jne 0x490d70
movzx ebp, byte [edx + 1]
add ebp, 0xffffffd0
xchg ebp, eax
cmp al, 9
xchg ebp, eax
jbe 0x490cbd
mov ebp, dword [esp + 0xbc]
mov esi, dword [esp + 0x90]
mov edi, dword [esp + 0x408]
jmp 0x4926dc
mov dword [esp + 0xf4], eax
mov dword [esp + 0x3f8], edx
mov dword [esp + 0xf0], ebx
mov dword [esp + 0xac], ecx
mov eax, dword [esp + 0x3e8]
mov dword [esp], eax
mov ecx, dword [esp + 0x84]
mov dword [esp + 4], ecx
call fcn.0048b290
mov eax, dword [esp + 0x10]
and eax, 0xffff
cmp eax, 0x22
je 0x490d06
cmp eax, 0x23
jne 0x490d58
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x414]
mov esi, dword [esp + 0x9c]
mov edi, dword [esp + 0x3e4]
mov eax, dword [esp + 0xf4]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0x40c]
mov ebp, dword [esp + 0xf0]
mov eax, dword [esp + 0xac]
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0x3f8]
jmp 0x490ecd
mov edx, dword [esp + 0x3f8]
mov ecx, dword [esp + 0xac]
mov eax, 2
jmp 0x49272c
mov ebp, dword [esp + 0xbc]
mov esi, dword [esp + 0x90]
mov edi, dword [esp + 0x408]
jmp 0x4926dc
mov ebp, dword [esp + 0xbc]
mov esi, dword [esp + 0x90]
mov edi, dword [esp + 0x408]
jmp 0x4926dc
cmp edi, 0x20e
jg 0x490e41
cmp ecx, 0x20e
sete al
mov dword [esp], ebx
mov dword [esp + 4], esi
mov byte [esp + 8], al
call fcn.0048f860
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
cmp eax, 0xc
jbe 0x490deb
mov ebp, 4
lea esi, [0x769d79]
jmp 0x490df9
mov ebp, dword [esp + 0xbc]
mov esi, dword [esp + 0x408]
mov edi, dword [esp + 0x3e4]
mov dword [esp + 0xa4], eax
mov dword [esp + 0x98], ebx
mov eax, edx
mov dword [esp + 0xbc], ebp
mov dword [esp + 0x408], esi
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x414]
mov esi, dword [esp + 0x9c]
mov ebp, ecx
mov ecx, dword [esp + 0x40c]
jmp 0x490ecd
cmp ecx, 0x210
sete al
mov dword [esp], ebx
mov dword [esp + 4], esi
mov byte [esp + 8], al
call fcn.0048f860
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
cmp eax, 0x3c
jb 0x490e7c
mov ebp, 6
lea esi, [0x76a18b]
jmp 0x490e8a
mov ebp, dword [esp + 0xbc]
mov esi, dword [esp + 0x408]
mov edi, dword [esp + 0x3e4]
mov dword [esp + 0x8c], eax
mov dword [esp + 0x98], ebx
mov eax, edx
mov dword [esp + 0xbc], ebp
mov dword [esp + 0x408], esi
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x414]
mov esi, dword [esp + 0x9c]
mov ebp, ecx
mov ecx, dword [esp + 0x40c]
mov edi, dword [esp + 0xbc]
test edi, edi
jne 0x492494
test ebp, ebp
je 0x48fd07
jmp 0x4922cf
test esi, esi
jne 0x491ec7
movzx edx, byte [esp + 0x37]
test dl, dl
je 0x490f0b
mov edx, dword [esp + 0xa4]
cmp edx, 0xc
jge 0x490f12
add edx, 0xc
jmp 0x490f24
mov edx, dword [esp + 0xa4]
movzx ebp, byte [esp + 0x36]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x490f24
cmp edx, 0xc
jne 0x490f24
xor edx, edx
mov ebp, dword [esp + 0x88]
test ebp, ebp
jl 0x49154b
mov eax, dword [esp + 0xc0]
test eax, 3
jne 0x490fd1
mov edi, 0x51eb851f
mov ecx, edx
imul edi
mov dword [esp + 0xfc], edx
mov eax, dword [esp + 0xc0]
sar eax, 0x1f
sar edx, 5
sub edx, eax
imul edx, edx, 0x64
mov esi, dword [esp + 0xc0]
cmp esi, edx
jne 0x490f88
mov edx, dword [esp + 0xfc]
sar edx, 7
sub edx, eax
imul edx, edx, 0x190
cmp esi, edx
jne 0x490fc0
cmp ebp, 0x3c
jne 0x490f9b
mov edx, ebp
mov eax, 2
mov ebp, 0x1d
jmp 0x490fa8
jle 0x490fa2
lea edx, [ebp - 1]
jmp 0x490fa4
mov edx, ebp
xor eax, eax
xor ebp, ebp
mov esi, dword [esp + 0x9c]
mov edi, ebp
mov ebp, edx
mov edx, ecx
mov ecx, eax
mov eax, dword [esp + 0xc0]
jmp 0x490fd5
mov eax, esi
mov edx, ecx
mov esi, dword [esp + 0x9c]
xor ecx, ecx
xor edi, edi
jmp 0x490fd5
xor ecx, ecx
xor edi, edi
lea esi, [ebp - 1]
cmp esi, 0x16c
ja 0x4913ab
test ecx, ecx
jne 0x49103d
mov ecx, eax
mov eax, 0x84210843
mov edi, edx
imul esi
lea edx, [edx + ebp - 1]
sar edx, 4
lea eax, [edx + 1]
cmp eax, 0xd
jae 0x4922c5
lea esi, [0x6769c0]
lea ebx, [esi + edx*4 + 4]
cmp dword [ebx], ebp
jge 0x491017
lea eax, [edx + 2]
lea edx, [eax - 1]
cmp edx, 0xd
jae 0x4922b9
mov edx, dword [esi + eax*4 - 4]
sub ebp, edx
mov edx, edi
mov ebx, dword [esp + 0x414]
mov ecx, eax
mov edi, ebp
mov eax, dword [esp + 0xc0]
mov ebp, dword [esp + 0x94]
test ebp, ebp
jl 0x4911f4
cmp ecx, ebp
je 0x4911f4
nop
lea eax, [esp + 0x220]
mov dword [esp], eax
mov eax, dword [esp + 0x460]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x464]
mov dword [esp + 8], eax
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
nop
mov eax, dword [esp + 0xc]
mov dword [esp + 0x394], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x4c], ecx
lea edx, [esp + 0x200]
mov dword [esp], edx
mov edx, dword [esp + 0x414]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x9c]
mov dword [esp + 8], edx
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
mov eax, dword [esp + 0xc]
mov dword [esp + 0x390], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x48], ecx
lea edx, [0x7505c0]
mov dword [esp], edx
call fcn.0040b440
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x45c]
mov dword [edi + 4], eax
mov eax, dword [0x901e80]
test eax, eax
jne 0x49112f
mov ecx, dword [esp + 0x458]
mov dword [edi], ecx
jmp 0x49113b
mov eax, dword [esp + 0x458]
call fcn.00456ac0
mov ecx, dword [esp + 0x4c]
mov dword [edi + 0xc], ecx
mov ecx, dword [0x901e80]
test ecx, ecx
jne 0x491158
mov ecx, dword [esp + 0x394]
mov dword [edi + 8], ecx
jmp 0x49116d
lea ecx, [edi + 8]
mov eax, dword [esp + 0x394]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov dword [edi + 0x14], 0
mov dword [edi + 0x10], 0
mov ecx, dword [esp + 0x48]
mov dword [edi + 0x1c], ecx
mov ecx, dword [0x901e80]
test ecx, ecx
jne 0x491198
mov ecx, dword [esp + 0x390]
mov dword [edi + 0x18], ecx
jmp 0x4911ad
lea ecx, [edi + 0x18]
mov eax, dword [esp + 0x390]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov dword [esp + 0x3c8], edi
mov dword [edi + 0x24], 0x22
lea ecx, [0x7749f8]
mov dword [edi + 0x20], ecx
xor eax, eax
lea edi, [esp + 0x470]
call fcn.00456d5b
lea ecx, [0x7caa94]
mov dword [esp + 0x484], ecx
mov ecx, dword [esp + 0x3c8]
mov dword [esp + 0x488], ecx
add esp, 0x454
ret
mov ebp, dword [esp + 0xc4]
test ebp, ebp
jl 0x491574
cmp edi, ebp
je 0x491574
nop
lea eax, [esp + 0x1e0]
mov dword [esp], eax
mov eax, dword [esp + 0x460]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x464]
mov dword [esp + 8], eax
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
nop
mov eax, dword [esp + 0xc]
mov dword [esp + 0x38c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x44], ecx
lea edx, [esp + 0x1c0]
mov dword [esp], edx
mov edx, dword [esp + 0x414]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x9c]
mov dword [esp + 8], edx
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
mov eax, dword [esp + 0xc]
mov dword [esp + 0x388], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x40], ecx
lea edx, [0x7505c0]
mov dword [esp], edx
call fcn.0040b440
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x45c]
mov dword [edi + 4], eax
mov eax, dword [0x901e80]
test eax, eax
jne 0x4912e6
mov ecx, dword [esp + 0x458]
mov dword [edi], ecx
jmp 0x4912f2
mov eax, dword [esp + 0x458]
call fcn.00456ac0
mov ecx, dword [esp + 0x44]
mov dword [edi + 0xc], ecx
mov ecx, dword [0x901e80]
test ecx, ecx
jne 0x49130f
mov ecx, dword [esp + 0x38c]
mov dword [edi + 8], ecx
jmp 0x491324
lea ecx, [edi + 8]
mov eax, dword [esp + 0x38c]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov dword [edi + 0x14], 0
mov dword [edi + 0x10], 0
mov ecx, dword [esp + 0x40]
mov dword [edi + 0x1c], ecx
mov ecx, dword [0x901e80]
test ecx, ecx
jne 0x49134f
mov ecx, dword [esp + 0x388]
mov dword [edi + 0x18], ecx
jmp 0x491364
lea ecx, [edi + 0x18]
mov eax, dword [esp + 0x388]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov dword [esp + 0x3c4], edi
mov dword [edi + 0x24], 0x20
lea ecx, [0x773b9b]
mov dword [edi + 0x20], ecx
xor eax, eax
lea edi, [esp + 0x470]
call fcn.00456d5b
lea ecx, [0x7caa94]
mov dword [esp + 0x484], ecx
mov ecx, dword [esp + 0x3c4]
mov dword [esp + 0x488], ecx
add esp, 0x454
ret
nop
lea eax, [esp + 0x260]
mov dword [esp], eax
mov eax, dword [esp + 0x460]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x464]
mov dword [esp + 8], eax
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
nop
mov eax, dword [esp + 0xc]
mov dword [esp + 0x39c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x54], ecx
lea edx, [esp + 0x240]
mov dword [esp], edx
mov edx, dword [esp + 0x414]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x9c]
mov dword [esp + 8], edx
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
mov eax, dword [esp + 0xc]
mov dword [esp + 0x398], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x50], ecx
lea edx, [0x7505c0]
mov dword [esp], edx
call fcn.0040b440
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x45c]
mov dword [edi + 4], eax
mov eax, dword [0x901e80]
test eax, eax
jne 0x491486
mov ecx, dword [esp + 0x458]
mov dword [edi], ecx
jmp 0x491492
mov eax, dword [esp + 0x458]
call fcn.00456ac0
mov ecx, dword [esp + 0x54]
mov dword [edi + 0xc], ecx
mov ecx, dword [0x901e80]
test ecx, ecx
jne 0x4914af
mov ecx, dword [esp + 0x39c]
mov dword [edi + 8], ecx
jmp 0x4914c4
lea ecx, [edi + 8]
mov eax, dword [esp + 0x39c]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov dword [edi + 0x14], 0
mov dword [edi + 0x10], 0
mov ecx, dword [esp + 0x50]
mov dword [edi + 0x1c], ecx
mov ecx, dword [0x901e80]
test ecx, ecx
jne 0x4914ef
mov ecx, dword [esp + 0x398]
mov dword [edi + 0x18], ecx
jmp 0x491504
lea ecx, [edi + 0x18]
mov eax, dword [esp + 0x398]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov dword [esp + 0x3cc], edi
mov dword [edi + 0x24], 0x1a
lea ecx, [0x7712cd]
mov dword [edi + 0x20], ecx
xor eax, eax
lea edi, [esp + 0x470]
call fcn.00456d5b
lea ecx, [0x7caa94]
mov dword [esp + 0x484], ecx
mov ecx, dword [esp + 0x3cc]
mov dword [esp + 0x488], ecx
add esp, 0x454
ret
mov ebp, dword [esp + 0x94]
test ebp, ebp
jge 0x49155b
mov ebp, 1
mov edi, dword [esp + 0xc4]
test edi, edi
jge 0x49156b
mov edi, 1
mov eax, dword [esp + 0xc0]
mov ecx, ebp
cmp edi, 1
jl 0x491605
cmp ecx, 2
jne 0x4915d2
test eax, 3
jne 0x4915ce
mov ebp, 0x51eb851f
mov esi, edx
imul ebp
mov dword [esp + 0xfc], edx
mov ebp, dword [esp + 0xc0]
mov eax, ebp
sar ebp, 0x1f
sar edx, 5
sub edx, ebp
imul edx, edx, 0x64
cmp eax, edx
jne 0x4915c7
mov edx, dword [esp + 0xfc]
sar edx, 7
sub edx, ebp
imul edx, edx, 0x190
cmp eax, edx
jne 0x4915d4
mov ebp, 0x1d
jmp 0x4915fd
mov esi, edx
jmp 0x4915d4
mov esi, edx
cmp ecx, 0xd
jae 0x4922ad
lea edx, [0x6769c0]
mov ebp, dword [edx + ecx*4]
lea ebx, [ecx - 1]
cmp ebx, 0xd
jae 0x4922a1
sub ebp, dword [edx + ecx*4 - 4]
mov ebx, dword [esp + 0x414]
cmp ebp, edi
jge 0x4917a5
nop
lea eax, [esp + 0x1a0]
mov dword [esp], eax
mov eax, dword [esp + 0x460]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x464]
mov dword [esp + 8], eax
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
nop
mov eax, dword [esp + 0xc]
mov dword [esp + 0x384], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x3c], ecx
lea edx, [esp + 0x180]
mov dword [esp], edx
mov edx, dword [esp + 0x414]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x9c]
mov dword [esp + 8], edx
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
mov eax, dword [esp + 0xc]
mov dword [esp + 0x380], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x38], ecx
lea edx, [0x7505c0]
mov dword [esp], edx
call fcn.0040b440
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x45c]
mov dword [edi + 4], eax
mov eax, dword [0x901e80]
test eax, eax
jne 0x4916e0
mov ecx, dword [esp + 0x458]
mov dword [edi], ecx
jmp 0x4916ec
mov eax, dword [esp + 0x458]
call fcn.00456ac0
mov ecx, dword [esp + 0x3c]
mov dword [edi + 0xc], ecx
mov ecx, dword [0x901e80]
test ecx, ecx
jne 0x491709
mov ecx, dword [esp + 0x384]
mov dword [edi + 8], ecx
jmp 0x49171e
lea ecx, [edi + 8]
mov eax, dword [esp + 0x384]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov dword [edi + 0x14], 0
mov dword [edi + 0x10], 0
mov ecx, dword [esp + 0x38]
mov dword [edi + 0x1c], ecx
mov ecx, dword [0x901e80]
test ecx, ecx
jne 0x491749
mov ecx, dword [esp + 0x380]
mov dword [edi + 0x18], ecx
jmp 0x49175e
lea ecx, [edi + 0x18]
mov eax, dword [esp + 0x380]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov dword [esp + 0x3c0], edi
mov dword [edi + 0x24], 0x12
lea ecx, [0x76d4aa]
mov dword [edi + 0x20], ecx
xor eax, eax
lea edi, [esp + 0x470]
call fcn.00456d5b
lea ecx, [0x7caa94]
mov dword [esp + 0x484], ecx
mov ecx, dword [esp + 0x3c0]
mov dword [esp + 0x488], ecx
add esp, 0x454
ret
mov edx, dword [esp + 0x40c]
test edx, edx
jne 0x491e4e
mov edx, dword [esp + 0xd8]
cmp edx, 0xffffffff
jne 0x491b59
mov edx, dword [esp + 0x80]
test edx, edx
je 0x491ad9
mov edx, dword [0x706b24]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], edx
call fcn.00495ff0
lea edi, [esp + 0x418]
lea esi, [esp + 0x20]
call fcn.0045723e
nop
mov eax, dword [esp + 0x418]
mov ecx, dword [esp + 0x41c]
test ecx, 0x80000000
je 0x49185b
shl ecx, 1
mov edx, eax
shr eax, 0x1f
or eax, ecx
shl edx, 1
mov ecx, eax
shl eax, 1
shr edx, 0x1f
or edx, eax
shr ecx, 0x1f
add edx, 0xd7b17f80
adc ecx, 0xd
jmp 0x491869
mov edx, dword [esp + 0x420]
mov ecx, dword [esp + 0x424]
add edx, 0x886e0900
adc ecx, 0xfffffff1
mov eax, dword [esp + 0x46c]
mov dword [esp], eax
mov ebx, dword [esp + 0x3e0]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x80]
mov dword [esp + 8], ebp
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], edx
call fcn.00498e50
movzx eax, byte [esp + 0x18]
mov ecx, dword [esp + 0x14]
test al, al
jne 0x491a0b
mov eax, dword [esp + 0x80]
cmp eax, 3
jle 0x491906
mov edx, dword [esp + 0x3e0]
cmp word [edx], 0x4d47
jne 0x49190d
cmp byte [edx + 2], 0x54
jne 0x49190d
lea ecx, [0x7ca570]
mov dword [esp], ecx
lea ecx, [edx + 3]
mov dword [esp + 4], ecx
lea ecx, [eax - 3]
mov dword [esp + 8], ecx
call fcn.0049a990
mov eax, dword [esp + 0xc]
imul ecx, eax, 0xe10
mov eax, dword [esp + 0x80]
mov edx, dword [esp + 0x3e0]
jmp 0x49190d
mov edx, dword [esp + 0x3e0]
mov dword [esp + 0xe4], ecx
nop
lea ebx, [esp + 0x140]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xe4]
mov dword [esp + 8], eax
call fcn.00496890
nop
mov eax, dword [esp + 0xc]
lea ecx, [0x70f660]
cmp eax, ecx
jne 0x491978
xor eax, eax
nop
mov ecx, dword [esp + 0x418]
mov edx, dword [esp + 0x41c]
test edx, 0x80000000
je 0x4919d4
shl edx, 1
mov ebx, ecx
shr ecx, 0x1f
or ecx, edx
shl ebx, 1
mov edx, ecx
shl ecx, 1
shr ebx, 0x1f
or ecx, ebx
shr edx, 0x1f
add ecx, 0xd7b17f80
adc edx, 0xd
nop
mov dword [esp + 0x420], ecx
mov dword [esp + 0x424], edx
and dword [esp + 0x418], 0x3fffffff
mov dword [esp + 0x41c], 0
mov dword [esp + 0x428], eax
lea edi, [esp + 0x470]
lea esi, [esp + 0x418]
call fcn.0045723e
mov dword [esp + 0x484], 0
mov dword [esp + 0x488], 0
add esp, 0x454
ret
mov eax, ecx
sar ecx, 0x1f
xor edx, edx
sub edx, eax
mov eax, 0
sbb eax, ecx
lea ecx, [esp + 0x418]
mov dword [esp], ecx
mov dword [esp + 8], eax
mov dword [esp + 4], edx
call fcn.00493720
nop
mov eax, dword [esp + 0x46c]
lea ecx, [0x70f660]
cmp eax, ecx
jne 0x491a46
xor eax, eax
nop
mov ecx, dword [esp + 0x418]
mov edx, dword [esp + 0x41c]
test edx, 0x80000000
je 0x491aa2
shl edx, 1
mov ebx, ecx
shr ecx, 0x1f
or ecx, edx
shl ebx, 1
mov edx, ecx
shl ecx, 1
shr ebx, 0x1f
or ecx, ebx
shr edx, 0x1f
add ecx, 0xd7b17f80
adc edx, 0xd
nop
mov dword [esp + 0x420], ecx
mov dword [esp + 0x424], edx
and dword [esp + 0x418], 0x3fffffff
mov dword [esp + 0x41c], 0
mov dword [esp + 0x428], eax
lea edi, [esp + 0x470]
lea esi, [esp + 0x418]
call fcn.0045723e
mov dword [esp + 0x484], 0
mov dword [esp + 0x488], 0
add esp, 0x454
ret
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x468]
mov dword [esp + 0x1c], eax
call fcn.00495ff0
lea edi, [esp + 0x440]
lea esi, [esp + 0x20]
call fcn.0045723e
lea edi, [esp + 0x470]
lea esi, [esp + 0x440]
call fcn.0045723e
mov dword [esp + 0x484], 0
mov dword [esp + 0x488], 0
add esp, 0x454
ret
mov edx, dword [0x706b24]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], edx
call fcn.00495ff0
mov eax, dword [esp + 0xd8]
mov ecx, eax
sar eax, 0x1f
xor edx, edx
sub edx, ecx
mov ebx, 0
sbb ebx, eax
lea edi, [esp + 0x42c]
lea esi, [esp + 0x20]
call fcn.0045723e
lea eax, [esp + 0x42c]
mov dword [esp], eax
mov dword [esp + 8], ebx
mov dword [esp + 4], edx
call fcn.00493720
nop
mov eax, dword [esp + 0x42c]
mov ecx, dword [esp + 0x430]
test ecx, 0x80000000
je 0x491c0f
shl ecx, 1
mov edx, eax
shr eax, 0x1f
or eax, ecx
shl edx, 1
mov ecx, eax
shl eax, 1
shr edx, 0x1f
or edx, eax
shr ecx, 0x1f
add edx, 0xd7b17f80
adc ecx, 0xd
jmp 0x491c1d
mov edx, dword [esp + 0x434]
mov ecx, dword [esp + 0x438]
add edx, 0x886e0900
adc ecx, 0xfffffff1
mov eax, dword [esp + 0x46c]
mov dword [esp], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
call fcn.00496a90
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xd8]
cmp dword [esp + 0x14], edx
jne 0x491c98
mov ebx, dword [esp + 0x80]
test ebx, ebx
jne 0x491c64
mov eax, 1
jmp 0x491ca1
cmp ebx, eax
je 0x491c6c
xor eax, eax
jmp 0x491ca1
mov dword [esp], ecx
mov ecx, dword [esp + 0x3e0]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00403310
movzx eax, byte [esp + 0xc]
mov edx, dword [esp + 0xd8]
mov ebx, dword [esp + 0x80]
jmp 0x491ca1
mov ebx, dword [esp + 0x80]
xor eax, eax
test al, al
je 0x491d50
nop
mov eax, dword [esp + 0x46c]
lea ecx, [0x70f660]
cmp eax, ecx
jne 0x491cbd
xor eax, eax
nop
mov ecx, dword [esp + 0x42c]
mov edx, dword [esp + 0x430]
test edx, 0x80000000
je 0x491d19
shl edx, 1
mov ebx, ecx
shr ecx, 0x1f
or edx, ecx
shl ebx, 1
mov ecx, edx
shl edx, 1
shr ebx, 0x1f
or edx, ebx
shr ecx, 0x1f
add edx, 0xd7b17f80
adc ecx, 0xd
nop
mov dword [esp + 0x434], edx
mov dword [esp + 0x438], ecx
and dword [esp + 0x42c], 0x3fffffff
mov dword [esp + 0x430], 0
mov dword [esp + 0x43c], eax
lea edi, [esp + 0x470]
lea esi, [esp + 0x42c]
call fcn.0045723e
mov dword [esp + 0x484], 0
mov dword [esp + 0x488], 0
add esp, 0x454
ret
nop
lea eax, [esp + 0x160]
mov dword [esp], eax
mov eax, dword [esp + 0x3e0]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xd8]
mov dword [esp + 8], eax
call fcn.00496890
nop
mov eax, dword [esp + 0xc]
lea ecx, [0x70f660]
cmp eax, ecx
jne 0x491dbb
xor eax, eax
nop
mov ecx, dword [esp + 0x42c]
mov edx, dword [esp + 0x430]
test edx, 0x80000000
je 0x491e17
shl edx, 1
mov ebx, ecx
shr ecx, 0x1f
or edx, ecx
shl ebx, 1
mov ecx, edx
shl edx, 1
shr ebx, 0x1f
or edx, ebx
shr ecx, 0x1f
add edx, 0xd7b17f80
adc ecx, 0xd
nop
mov dword [esp + 0x434], edx
mov dword [esp + 0x438], ecx
and dword [esp + 0x42c], 0x3fffffff
mov dword [esp + 0x430], 0
mov dword [esp + 0x43c], eax
lea edi, [esp + 0x470]
lea esi, [esp + 0x42c]
call fcn.0045723e
mov dword [esp + 0x484], 0
mov dword [esp + 0x488], 0
add esp, 0x454
ret
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], edx
call fcn.00495ff0
lea edi, [esp + 0x440]
lea esi, [esp + 0x20]
call fcn.0045723e
lea edi, [esp + 0x470]
lea esi, [esp + 0x440]
call fcn.0045723e
mov dword [esp + 0x484], 0
mov dword [esp + 0x488], 0
add esp, 0x454
ret
mov dword [esp], ebx
mov dword [esp + 4], esi
call fcn.0048f1e0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp], 0
lea edx, [0x76bd8d]
mov dword [esp + 4], edx
mov dword [esp + 8], 0xe
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.00445480
nop
mov eax, dword [esp + 0x14]
mov dword [esp + 0x404], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xb8], ecx
lea edx, [esp + 0x320]
mov dword [esp], edx
mov edx, dword [esp + 0x460]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x464]
mov dword [esp + 8], edx
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
nop
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3b4], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x6c], ecx
lea edx, [esp + 0x300]
mov dword [esp], edx
mov edx, dword [esp + 0x414]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x9c]
mov dword [esp + 8], edx
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3b0], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x68], ecx
lea edx, [0x7505c0]
mov dword [esp], edx
call fcn.0040b440
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x45c]
mov dword [edi + 4], eax
mov eax, dword [0x901e80]
test eax, eax
jne 0x491ff2
mov ecx, dword [esp + 0x458]
mov dword [edi], ecx
jmp 0x491ffe
mov eax, dword [esp + 0x458]
call fcn.00456ac0
mov ecx, dword [esp + 0x6c]
mov dword [edi + 0xc], ecx
mov ecx, dword [0x901e80]
test ecx, ecx
jne 0x49201b
mov ecx, dword [esp + 0x3b4]
mov dword [edi + 8], ecx
jmp 0x492030
lea ecx, [edi + 8]
mov eax, dword [esp + 0x3b4]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov dword [edi + 0x14], 0
mov dword [edi + 0x10], 0
mov ecx, dword [esp + 0x68]
mov dword [edi + 0x1c], ecx
mov ecx, dword [0x901e80]
test ecx, ecx
jne 0x49205b
mov ecx, dword [esp + 0x3b0]
mov dword [edi + 0x18], ecx
jmp 0x492070
lea ecx, [edi + 0x18]
mov eax, dword [esp + 0x3b0]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov ecx, dword [esp + 0xb8]
mov dword [edi + 0x24], ecx
mov ecx, dword [0x901e80]
test ecx, ecx
jne 0x492090
mov ecx, dword [esp + 0x404]
mov dword [edi + 0x20], ecx
jmp 0x4920a5
lea ecx, [edi + 0x20]
mov eax, dword [esp + 0x404]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov dword [esp + 0x3d8], edi
xor eax, eax
lea edi, [esp + 0x470]
call fcn.00456d5b
lea ecx, [0x7caa94]
mov dword [esp + 0x484], ecx
mov ecx, dword [esp + 0x3d8]
mov dword [esp + 0x488], ecx
add esp, 0x454
ret
nop
lea eax, [esp + 0x360]
mov dword [esp], eax
mov eax, dword [esp + 0x460]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x464]
mov dword [esp + 8], eax
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
nop
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3bc], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x74], ecx
lea edx, [esp + 0x340]
mov dword [esp], edx
mov edx, dword [esp + 0x414]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x9c]
mov dword [esp + 8], edx
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3b8], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x70], ecx
lea edx, [0x7505c0]
mov dword [esp], edx
call fcn.0040b440
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x45c]
mov dword [edi + 4], eax
mov eax, dword [0x901e80]
test eax, eax
jne 0x4921b7
mov ecx, dword [esp + 0x458]
mov dword [edi], ecx
jmp 0x4921c3
mov eax, dword [esp + 0x458]
call fcn.00456ac0
mov ecx, dword [esp + 0x74]
mov dword [edi + 0xc], ecx
mov ecx, dword [0x901e80]
test ecx, ecx
jne 0x4921e0
mov ecx, dword [esp + 0x3bc]
mov dword [edi + 8], ecx
jmp 0x4921f5
lea ecx, [edi + 8]
mov eax, dword [esp + 0x3bc]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov ecx, dword [esp + 0xb0]
mov dword [edi + 0x14], ecx
mov ecx, dword [0x901e80]
test ecx, ecx
jne 0x492215
mov ecx, dword [esp + 0x3fc]
mov dword [edi + 0x10], ecx
jmp 0x49222a
lea ecx, [edi + 0x10]
mov eax, dword [esp + 0x3fc]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov ecx, dword [esp + 0x70]
mov dword [edi + 0x1c], ecx
mov ecx, dword [0x901e80]
test ecx, ecx
jne 0x492247
mov ecx, dword [esp + 0x3b8]
mov dword [edi + 0x18], ecx
jmp 0x49225c
lea ecx, [edi + 0x18]
mov eax, dword [esp + 0x3b8]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov dword [esp + 0x3dc], edi
mov dword [edi + 0x24], 0
mov dword [edi + 0x20], 0
xor eax, eax
lea edi, [esp + 0x470]
call fcn.00456d5b
lea ecx, [0x7caa94]
mov dword [esp + 0x484], ecx
mov ecx, dword [esp + 0x3dc]
mov dword [esp + 0x488], ecx
add esp, 0x454
ret
mov eax, ebx
mov ecx, 0xd
call fcn.00456b40
mov eax, ecx
mov ecx, 0xd
call fcn.00456b40
mov eax, edx
mov ecx, 0xd
call fcn.00456b40
mov ecx, 0xd
call fcn.00456b40
nop
lea eax, [esp + 0x2a0]
mov dword [esp], eax
mov eax, dword [esp + 0x460]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x464]
mov dword [esp + 8], eax
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
nop
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3a4], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x5c], ecx
lea edx, [esp + 0x280]
mov dword [esp], edx
mov edx, dword [esp + 0x414]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x9c]
mov dword [esp + 8], edx
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3a0], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x58], ecx
lea edx, [0x7505c0]
mov dword [esp], edx
call fcn.0040b440
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x45c]
mov dword [edi + 4], eax
mov eax, dword [0x901e80]
test eax, eax
jne 0x4923aa
mov ecx, dword [esp + 0x458]
mov dword [edi], ecx
jmp 0x4923b6
mov eax, dword [esp + 0x458]
call fcn.00456ac0
mov ecx, dword [esp + 0x5c]
mov dword [edi + 0xc], ecx
mov ecx, dword [0x901e80]
test ecx, ecx
jne 0x4923d3
mov ecx, dword [esp + 0x3a4]
mov dword [edi + 8], ecx
jmp 0x4923e8
lea ecx, [edi + 8]
mov eax, dword [esp + 0x3a4]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov ecx, dword [esp + 0xfc]
mov dword [edi + 0x14], ecx
mov ecx, dword [0x901e80]
test ecx, ecx
jne 0x492408
mov ecx, dword [esp + 0x3e4]
mov dword [edi + 0x10], ecx
jmp 0x49241d
lea ecx, [edi + 0x10]
mov eax, dword [esp + 0x3e4]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov ecx, dword [esp + 0x58]
mov dword [edi + 0x1c], ecx
mov ecx, dword [0x901e80]
test ecx, ecx
jne 0x49243a
mov ecx, dword [esp + 0x3a0]
mov dword [edi + 0x18], ecx
jmp 0x49244f
lea ecx, [edi + 0x18]
mov eax, dword [esp + 0x3a0]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov dword [esp + 0x3d0], edi
mov dword [edi + 0x24], 0
mov dword [edi + 0x20], 0
xor eax, eax
lea edi, [esp + 0x470]
call fcn.00456d5b
lea ecx, [0x7caa94]
mov dword [esp + 0x484], ecx
mov ecx, dword [esp + 0x3d0]
mov dword [esp + 0x488], ecx
add esp, 0x454
ret
mov dword [esp + 0x3f0], eax
mov dword [esp], 0
lea eax, [0x769a00]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov eax, dword [esp + 0x408]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edi
lea eax, [0x76b866]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0xd
call fcn.00445520
nop
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x400], eax
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xb4], ecx
lea edx, [esp + 0x2e0]
mov dword [esp], edx
mov edx, dword [esp + 0x460]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x464]
mov dword [esp + 8], edx
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
nop
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3ac], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x64], ecx
lea edx, [esp + 0x2c0]
mov dword [esp], edx
mov edx, dword [esp + 0x3f0]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x98]
mov dword [esp + 8], edx
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3a8], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x60], ecx
lea edx, [0x7505c0]
mov dword [esp], edx
call fcn.0040b440
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x45c]
mov dword [edi + 4], eax
mov eax, dword [0x901e80]
test eax, eax
jne 0x4925cb
mov ecx, dword [esp + 0x458]
mov dword [edi], ecx
jmp 0x4925d7
mov eax, dword [esp + 0x458]
call fcn.00456ac0
mov ecx, dword [esp + 0x64]
mov dword [edi + 0xc], ecx
mov ecx, dword [0x901e80]
test ecx, ecx
jne 0x4925f4
mov ecx, dword [esp + 0x3ac]
mov dword [edi + 8], ecx
jmp 0x492609
lea ecx, [edi + 8]
mov eax, dword [esp + 0x3ac]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov ecx, dword [esp + 0xfc]
mov dword [edi + 0x14], ecx
mov ecx, dword [0x901e80]
test ecx, ecx
jne 0x492629
mov ecx, dword [esp + 0x3e4]
mov dword [edi + 0x10], ecx
jmp 0x49263e
lea ecx, [edi + 0x10]
mov eax, dword [esp + 0x3e4]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov ecx, dword [esp + 0x60]
mov dword [edi + 0x1c], ecx
mov ecx, dword [0x901e80]
test ecx, ecx
jne 0x49265b
mov ecx, dword [esp + 0x3a8]
mov dword [edi + 0x18], ecx
jmp 0x492670
lea ecx, [edi + 0x18]
mov eax, dword [esp + 0x3a8]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov ecx, dword [esp + 0xb4]
mov dword [edi + 0x24], ecx
mov ecx, dword [0x901e80]
test ecx, ecx
jne 0x492690
mov ecx, dword [esp + 0x400]
mov dword [edi + 0x20], ecx
jmp 0x4926a5
lea ecx, [edi + 0x20]
mov eax, dword [esp + 0x400]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov dword [esp + 0x3d4], edi
xor eax, eax
lea edi, [esp + 0x470]
call fcn.00456d5b
lea ecx, [0x7caa94]
mov dword [esp + 0x484], ecx
mov ecx, dword [esp + 0x3d4]
mov dword [esp + 0x488], ecx
add esp, 0x454
ret
mov dword [esp + 0xa8], eax
mov dword [esp + 0x98], ecx
mov eax, edx
mov dword [esp + 0xbc], ebp
mov dword [esp + 0x408], edi
mov dword [esp + 0x90], esi
mov edx, dword [esp + 0xfc]
mov esi, dword [esp + 0x9c]
mov edi, dword [esp + 0x3e4]
mov ecx, dword [esp + 0x40c]
mov ebp, ebx
mov ebx, dword [esp + 0x414]
jmp 0x490ecd
inc eax
cmp eax, ecx
jge 0x492742
jae 0x4927ce
movzx ebx, byte [eax + edx]
add ebx, 0xffffffd0
cmp bl, 9
jbe 0x49272b
mov dword [esp + 0xc8], eax
lea ebx, [0x7ca568]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.0049a800
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0xc8]
mov esi, dword [esp + 0xac]
cmp ebp, esi
ja 0x4927c5
sub esi, ebp
mov edi, esi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and ebp, esi
mov esi, dword [esp + 0x3f8]
add ebp, esi
mov esi, eax
mov eax, dword [esp + 0xf4]
mov eax, ebp
mov ebp, edx
mov edx, eax
mov eax, dword [esp + 0xf4]
mov eax, ecx
mov ecx, edi
mov edi, eax
mov eax, dword [esp + 0xf4]
jmp 0x4926dc
mov eax, ebp
mov ecx, esi
call fcn.00456ba0
call fcn.00456b40
inc edx
mov dword [esp + 0xd0], edx
mov edx, dword [esp + 0xfc]
mov edx, dword [esp + 0xd0]
cmp edx, 2
jge 0x49281e
cmp ecx, 0x10a
jne 0x4927d3
test esi, esi
je 0x4927d3
cmp byte [ebx], 0x20
jne 0x4927d3
dec esi
mov dword [esp + 0xf8], esi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, 1
add ebx, esi
mov esi, dword [esp + 0xf8]
jmp 0x4927d3
xor edx, edx
xor edx, edx
mov dword [esp + 0x7c], edx
xor edx, edx
jmp 0x49284d
inc edx
mov eax, dword [esp + 0x7c]
lea eax, [eax + eax*4]
xchg ebp, eax
movzx eax, al
xchg ebp, eax
lea eax, [ebp + eax*2]
mov ebp, dword [esp + 0x9c]
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x3e4]
cmp edx, 3
jge 0x492875
cmp edx, esi
jge 0x492871
jae 0x4928e7
movzx ebp, byte [edx + ebx]
add ebp, 0xffffffd0
xchg ebp, eax
cmp al, 9
xchg ebp, eax
jbe 0x49282a
mov ebp, dword [esp + 0x9c]
test edx, edx
je 0x492882
cmp ecx, 0x10b
jne 0x49288c
cmp edx, 3
je 0x49288c
mov ecx, dword [0x7073e0]
xor edx, edx
jmp 0x4928a9
cmp edx, esi
ja 0x4928de
sub esi, edx
mov ecx, esi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, edx
add ebx, esi
mov esi, ecx
mov edx, dword [esp + 0x7c]
xor ecx, ecx
mov edi, eax
mov dword [esp + 0x88], edx
mov ebp, ecx
mov dword [esp + 0x98], esi
mov eax, ebx
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x414]
mov esi, dword [esp + 0x9c]
mov ecx, dword [esp + 0x40c]
jmp 0x490ecd
mov eax, edx
mov ecx, esi
call fcn.00456ba0
mov eax, edx
mov ecx, esi
call fcn.00456b40
mov ecx, ebp
mov dword [esp + 0xcc], ecx
lea ebp, [ecx + 1]
cmp esi, ebp
jle 0x492919
jbe 0x4929cd
movzx edi, byte [ecx + ebx + 1]
xchg edi, eax
cmp al, 0x30
xchg edi, eax
jb 0x492919
xchg edi, eax
cmp al, 0x39
xchg edi, eax
jbe 0x4928f0
mov dword [esp + 0xec], ebp
lea eax, [0x7ca568]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebp
call fcn.0049a800
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xec]
cmp ebp, esi
jb 0x4929c4
mov edi, dword [esp + 0xcc]
sub ebp, edi
dec ebp
mov edi, ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and esi, ebp
mov ebp, dword [esp + 0x414]
add esi, ebp
mov ebp, eax
mov dword [esp + 0x98], edi
mov eax, esi
mov dword [esp + 0xbc], ebx
mov dword [esp + 0x408], edx
mov dword [esp + 0x90], ecx
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x414]
mov esi, dword [esp + 0x9c]
mov edi, dword [esp + 0x3e4]
mov ecx, dword [esp + 0x40c]
jmp 0x490ecd
mov eax, esi
mov ecx, ebp
call fcn.00456ba0
mov eax, ebp
mov ecx, esi
call fcn.00456b40
mov eax, esi
mov ecx, ebp
call fcn.00456ba0
call fcn.00456b60
mov eax, edx
mov ecx, ebp
call fcn.00456ba0
mov ecx, ebp
mov edx, esi
call fcn.00456b60
nop
call fcn.00455690
jmp fcn.0048fc20