Function at 0x4267d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x9a0
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov ebx, 0xae0e23a6
mov dword [esp + 0x998], eax
mov dword [esp + 0x994], ecx
mov dword [esp + 0x990], edx
mov dword [esp + 0x98c], esi
mov dword [esp + 0x988], edi
mov eax, dword [0x48ecdc]
add eax, 0x9df9c01d
mov dword [0x48ecdc], eax
mov eax, esp
mov dword [eax + 4], 8
mov dword [eax], 0x3afb
mov dword [esp + 0x128], ebx
call fcn.00415e90
mov dword [esp + 0x984], eax
mov eax, dword [0x498158]
mov ecx, eax
dec ecx
mov dword [0x498158], ecx
mov ecx, dword [esp + 0x128]
cmp ecx, eax
jne 0x426881
mov ax, word [0x483cf2]
movsx ecx, ax
add ecx, 0xa038bc34
mov edx, dword [0x48b92c]
or edx, ecx
mov dword [0x48b92c], edx
mov eax, dword [esp + 0x984]
mov ecx, dword [esp + 0x988]
mov edx, esp
mov dword [edx + 4], eax
mov dword [edx], ecx
call fcn.00455d30
mov dword [esp + 0x95c], eax
mov eax, dword [0x48b504]
mov ecx, eax
dec ecx
mov dword [0x48b504], ecx
mov ecx, 0xbb29d321
sub ecx, eax
mov eax, dword [0x499808]
or ecx, eax
or ecx, 0xd7d179d0
mov dword [0x499808], ecx
mov eax, dword [esp + 0x984]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 8
call fcn.004140f0
mov eax, dword [0x48b800]
dec eax
mov dword [0x48b800], eax
add eax, 0x925d5f14
cmp eax, 0x8bedfe9f
jl 0x426906
mov dword [0x498328], 0x4570a38c
cmp dword [esp + 0x95c], 0
jne 0x426b40
mov eax, dword [0x4940c4]
add eax, 0x4b97da
mov dword [0x4940c4], eax
cmp dword [esp + 0x998], 0
je 0x4269a5
mov eax, 0xe5d9bf52
mov ecx, dword [0x496978]
mov edx, ecx
inc edx
mov dword [0x496978], edx
mov edx, dword [0x49602c]
mov esi, edx
dec esi
mov dword [0x49602c], esi
add ecx, edx
cmp eax, ecx
je 0x426972
mov eax, dword [0x49a7b0]
xor eax, 0x2be3950b
mov dword [0x49a7b0], eax
jmp 0x426982
mov eax, dword [0x49bd64]
imul eax, eax, 0xbe3d460f
mov dword [0x48dcdc], eax
mov ecx, dword [esp + 0x990]
call fcn.0044fdf0
mov ecx, dword [0x49c628]
or ecx, 0x364aa389
mov dword [0x49c628], ecx
jmp 0x429249
mov eax, dword [0x499d18]
sar eax, 3
xor eax, 0x60871a
or eax, 0xf1f7001
mov ecx, dword [0x496f8c]
add ecx, eax
mov dword [0x496f8c], ecx
mov eax, dword [esp + 0x990]
mov ecx, dword [esp + 0x98c]
mov edx, esp
mov dword [edx + 4], eax
mov dword [edx], ecx
call fcn.00405c20
mov dword [esp + 0x958], eax
mov eax, dword [0x498b58]
imul eax, eax, 0x3b834aba
mov dword [0x498b58], eax
cmp dword [esp + 0x958], 0
jg 0x426b31
mov eax, 0xfebf7fdf
mov ecx, dword [0x498fc8]
imul ecx, ecx, 0x7deffff3
mov dword [0x498fc8], ecx
mov ecx, dword [esp + 0x990]
mov dword [esp + 0x124], eax
call fcn.0044fdf0
mov eax, dword [0x48d3c0]
mov ecx, dword [0x48a088]
mov edx, ecx
inc edx
mov dword [0x48a088], edx
imul eax, ecx
mov ecx, dword [esp + 0x124]
cmp ecx, eax
jge 0x426aa7
mov ax, word [0x480160]
mov cx, ax
dec ecx
mov dx, cx
mov word [0x480160], dx
movsx ecx, ax
or ecx, 0xba3ab8f5
cmp ecx, 0x28b65d65
jl 0x426aa2
mov eax, dword [0x48ba7c]
inc eax
mov dword [0x48ba7c], eax
xor eax, 0xcf3fc2cb
cmp eax, 0xd78c18f1
jle 0x426a9d
jmp 0x426a9d
jmp 0x426aa2
jmp 0x426b2c
mov eax, dword [0x491a6c]
sar eax, 3
mov ecx, dword [0x49ac14]
inc ecx
mov dword [0x49ac14], ecx
xor ecx, 0x57037544
or eax, ecx
cmp eax, 0x98728e38
jg 0x426af2
mov eax, dword [0x490420]
mov ecx, dword [0x497f5c]
inc ecx
and eax, ecx
mov dword [0x497f5c], ecx
and eax, 0xd27e34e1
mov dword [0x494cf8], eax
jmp 0x426b27
mov eax, dword [0x48afa8]
mov ecx, eax
dec ecx
mov dword [0x48afa8], ecx
mov ecx, dword [0x48e464]
mov edx, ecx
dec edx
mov dword [0x48e464], edx
and eax, ecx
mov si, word [0x482034]
mov cx, si
add ecx, eax
mov si, cx
mov word [0x482034], si
jmp 0x426b2c
jmp 0x426b31
mov dword [0x4971f8], 0xc172a004
jmp 0x429249
mov eax, dword [0x490240]
and eax, 0x4792b1
mov dword [0x490240], eax
mov eax, dword [0x49b830]
dec eax
mov dword [0x49b830], eax
and eax, 0x7e127070
cmp eax, 0x9b7bfcef
jl 0x426b82
mov ax, word [0x48153e]
mov cx, ax
add ecx, 0x6142a70b
mov ax, cx
mov word [0x48153e], ax
mov dword [0x494b4c], 0x28a06040
mov eax, dword [0x48dd34]
xor eax, 0x604040c2
mov dword [0x48dd34], eax
mov eax, dword [0x48dbc8]
inc eax
mov dword [0x48dbc8], eax
and eax, 0x184c4ff0
mov dword [0x48f388], eax
mov eax, dword [0x4998a4]
shl eax, 5
mov ecx, dword [0x4945d8]
and ecx, eax
mov dword [0x4945d8], ecx
mov eax, dword [0x497454]
add eax, 0xf7fddfbe
mov dword [0x497454], eax
lea ecx, [esp + 0x62c]
call fcn.004019e0
mov ecx, dword [0x4941ec]
mov edx, ecx
inc edx
mov dword [0x4941ec], edx
add ecx, 0x22ea66cb
mov dword [0x48ce04], ecx
mov si, word [0x486956]
mov cx, si
add ecx, 0xe85de67a
mov si, cx
mov word [0x486956], si
mov ecx, dword [0x49bcc8]
or ecx, 0x38201008
mov dword [0x49bcc8], ecx
mov ecx, dword [0x49a704]
xor ecx, 0x6007738e
mov edx, dword [0x496e50]
mov edi, edx
inc edi
mov dword [0x496e50], edi
cmp ecx, edx
mov dword [esp + 0x120], eax
jge 0x426c61
mov eax, dword [0x499e00]
xor eax, 0x8cc649f8
mov dword [0x499e00], eax
mov eax, 0x859e5168
mov dword [esp + 0x214], 0
mov dword [esp + 0x210], 0
mov ecx, dword [0x496244]
imul ecx, ecx, 0x859ee929
cmp eax, ecx
jne 0x426ca8
mov ax, word [0x481ddc]
mov cx, ax
add ecx, 0x5fb42205
mov ax, cx
mov word [0x481ddc], ax
mov eax, 0x4fee2b16
mov ecx, dword [0x4912f4]
xor ecx, 0xb750331b
mov dword [0x4912f4], ecx
mov dword [esp + 0x208], 0xffffffff
mov dword [esp + 0x204], 0xffffffff
mov ecx, dword [0x49a148]
cmp eax, ecx
jle 0x426cf8
mov ax, word [0x4847dc]
movsx ecx, ax
add ecx, 0xea8910c2
mov dword [0x48d8a4], ecx
mov dword [esp + 0x200], 0x50
mov ax, word [0x4842f0]
movsx ecx, ax
not ecx
or ecx, 0xfebf59f3
mov edx, dword [0x495184]
and edx, ecx
mov dword [0x495184], edx
mov byte [esp + 0x1ff], 0
mov ecx, dword [0x496060]
sar ecx, 4
mov edx, 0x3387ff85
sub edx, ecx
mov ax, word [0x480328]
mov cx, ax
dec ecx
mov si, cx
mov word [0x480328], si
movsx ecx, ax
and ecx, 0xd41f40cd
cmp edx, ecx
jne 0x426da4
mov eax, 0x743a746d
mov cx, word [0x481284]
movsx edx, cx
mov esi, dword [0x48b178]
dec esi
mov dword [0x48b178], esi
xor edx, esi
mov esi, dword [0x492e18]
xor esi, 0xffffffff
xor edx, esi
cmp eax, edx
jl 0x426d9f
mov eax, dword [0x49c574]
add eax, 0xf2705e73
mov dword [0x49c574], eax
jmp 0x426da4
mov eax, esp
mov dword [eax], 0
call fcn.0044fba0
add eax, 0x258
adc edx, 0
mov dword [esp + 0x210], eax
mov dword [esp + 0x214], edx
mov eax, dword [0x495914]
or eax, 0x87646ebe
mov dword [0x495914], eax
mov byte [esp + 0x658], 0
mov eax, dword [0x493480]
shl eax, 5
or eax, 0x5a4dd46c
mov edx, dword [0x48f110]
add edx, eax
mov dword [0x48f110], edx
mov eax, dword [esp + 0x988]
mov edx, esp
mov dword [edx], eax
call fcn.004520c0
mov dword [esp + 0x224], eax
mov eax, dword [0x496568]
imul eax, eax, 0x11620801
mov dword [0x496568], eax
cmp dword [esp + 0x224], 0x7f
jle 0x426e42
mov eax, dword [0x499724]
xor eax, 0xc8fa6c07
mov dword [0x499724], eax
jmp 0x429137
mov eax, dword [0x498dd8]
mov ecx, eax
dec ecx
mov dword [0x498dd8], ecx
imul eax, eax, 0x950a2cf5
xor eax, 0x6ed0f06f
mov ecx, dword [0x4968a8]
or ecx, eax
mov dword [0x4968a8], ecx
mov eax, dword [esp + 0x988]
mov ecx, esp
mov dword [ecx + 4], eax
lea eax, [esp + 0x8d8]
mov dword [ecx], eax
call fcn.00455180
mov ecx, dword [0x499f20]
imul ecx, ecx, 0xcb3824e5
mov dword [0x499f20], ecx
mov ecx, dword [esp + 0x224]
sub ecx, 1
mov dword [esp + 0x220], ecx
mov dword [esp + 0x11c], eax
mov eax, dword [esp + 0x220]
mov ecx, dword [esp + 0x224]
sub ecx, 6
cmp eax, ecx
jl 0x427017
mov eax, dword [0x495728]
add eax, 0x56eadc4d
mov dword [0x495728], eax
mov eax, dword [esp + 0x220]
movsx eax, byte [esp + eax + 0x8d8]
cmp eax, 0x3a
jne 0x426fb0
mov eax, dword [0x48b174]
mov ecx, eax
inc ecx
mov dword [0x48b174], ecx
mov dx, word [0x482ed0]
mov cx, dx
inc ecx
mov dx, cx
mov word [0x482ed0], dx
movsx ecx, dx
lea eax, [eax + ecx + 1]
mov ecx, dword [0x49bdd0]
or ecx, eax
mov dword [0x49bdd0], ecx
mov eax, dword [esp + 0x220]
mov byte [esp + eax + 0x8d8], 0
mov eax, dword [0x48b86c]
lea eax, [eax + eax + 0xd561db1]
mov ecx, dword [0x489d0c]
imul ecx, eax
mov dword [0x489d0c], ecx
mov eax, dword [esp + 0x220]
mov dword [esp + 0x224], eax
mov dx, word [0x47ff00]
mov ax, dx
xor eax, 0xedba
mov dx, ax
mov word [0x47ff00], dx
mov eax, dword [esp + 0x220]
lea ecx, [esp + 0x8d8]
lea eax, [eax + ecx + 1]
mov ecx, esp
mov dword [ecx], eax
call fcn.00455e1e
mov dword [esp + 0x200], eax
mov eax, dword [0x496f60]
mov ecx, dword [0x4964f8]
xor ecx, eax
mov dword [0x4964f8], ecx
jmp 0x427017
mov eax, 0x13c70206
mov cx, word [0x4845f2]
movsx edx, cx
imul edx, edx, 0x87545c34
mov esi, dword [0x490d74]
mov edi, esi
inc edi
mov dword [0x490d74], edi
sub edx, esi
cmp eax, edx
jl 0x426ffc
mov eax, dword [0x48ed58]
imul eax, eax, 0x8fda3e00
xor eax, 0xb5d7c384
mov ecx, dword [0x490b30]
or ecx, eax
mov dword [0x490b30], ecx
jmp 0x427001
mov eax, dword [esp + 0x220]
add eax, 0xffffffff
mov dword [esp + 0x220], eax
jmp 0x426ead
mov eax, dword [0x48ee40]
add eax, 0x1da8dc87
mov dword [0x48ee40], eax
mov dword [esp + 0x220], 0
mov eax, dword [esp + 0x220]
cmp eax, dword [esp + 0x224]
jg 0x4271ee
mov eax, dword [0x48c4a8]
and eax, 0x53820d66
mov dword [0x48c4a8], eax
mov eax, dword [esp + 0x220]
mov cl, byte [esp + eax + 0x8d8]
mov byte [esp + eax + 0x858], cl
mov eax, dword [0x48db6c]
and eax, 0x675479f9
cmp eax, 0xf6a537df
jl 0x427096
mov ax, word [0x480e46]
mov cx, ax
and ecx, 0xf2f3
mov ax, cx
mov word [0x480e46], ax
mov eax, dword [esp + 0x220]
movsx eax, byte [esp + eax + 0x858]
cmp eax, 0x2f
jne 0x4271a7
mov dword [0x49a264], 0xa2ad6737
mov eax, dword [esp + 0x220]
mov byte [esp + eax + 0x858], 0
mov eax, dword [0x495b4c]
add eax, 0xac198521
mov dword [0x495b4c], eax
mov eax, dword [esp + 0x220]
mov dword [esp + 0x21c], eax
mov eax, dword [esp + 0x21c]
cmp eax, dword [esp + 0x224]
jg 0x42718a
mov eax, dword [0x48ba84]
mov ecx, eax
dec ecx
mov dword [0x48ba84], ecx
mov ecx, dword [0x493d20]
and ecx, eax
mov dword [0x493d20], ecx
mov eax, dword [esp + 0x21c]
mov dl, byte [esp + eax + 0x8d8]
mov ecx, dword [esp + 0x220]
sub eax, ecx
mov byte [esp + eax + 0x658], dl
mov si, word [0x4820e2]
movsx eax, si
cmp eax, 0xb95dbc0e
jne 0x427165
mov eax, dword [0x496374]
inc eax
mov dword [0x496374], eax
mov ecx, dword [0x49aeb0]
sub ecx, eax
mov dword [0x49aeb0], ecx
jmp 0x42716f
mov dword [0x48f9e8], 0xfe7f7877
jmp 0x427174
mov eax, dword [esp + 0x21c]
add eax, 1
mov dword [esp + 0x21c], eax
jmp 0x4270e4
mov ax, word [0x4860f6]
mov cx, ax
and ecx, 0x9ffb
mov ax, cx
mov word [0x4860f6], ax
jmp 0x4271ee
mov eax, dword [0x48eee8]
shl eax, 6
or eax, 0xff7a638b
cmp eax, 0x703a74bd
jle 0x4271d3
mov eax, dword [0x499a8c]
add eax, 0x7a126b7e
or eax, 0x11b25f21
mov dword [0x48f0b4], eax
jmp 0x4271d8
mov eax, dword [esp + 0x220]
add eax, 1
mov dword [esp + 0x220], eax
jmp 0x427031
mov eax, 0x4f17daa6
mov ecx, dword [0x496b44]
inc ecx
mov dword [0x496b44], ecx
cmp eax, ecx
jge 0x427246
mov eax, 0x3f2552d3
mov ecx, dword [0x48aa68]
xor ecx, 0xffffffff
cmp eax, ecx
jne 0x427232
mov eax, dword [0x491bcc]
and eax, 0xd3184b2a
mov dword [0x491bcc], eax
jmp 0x427241
mov eax, dword [0x499794]
add eax, 0xddfdaef9
mov dword [0x499794], eax
jmp 0x427246
lea eax, [esp + 0x658]
mov ecx, esp
mov dword [ecx], eax
call fcn.004520c0
mov ecx, dword [esp + 0x98c]
mov edx, esp
mov dword [edx], ecx
mov dword [esp + 0x118], eax
call fcn.004520c0
mov ecx, dword [esp + 0x118]
add ecx, eax
cmp ecx, 0x1ff
jbe 0x42729f
mov ax, word [0x48594e]
mov cx, ax
or ecx, 0x9d97
mov ax, cx
mov word [0x48594e], ax
jmp 0x429137
mov eax, dword [0x491100]
imul eax, eax, 0xc671eb9b
mov dword [0x491100], eax
mov eax, dword [esp + 0x98c]
mov ecx, esp
mov dword [ecx + 4], eax
lea eax, [esp + 0x658]
mov dword [ecx], eax
call fcn.00455190
mov dword [0x499864], 0x342c611a
mov dword [esp + 0x21c], 0
mov ecx, dword [0x497c80]
mov edx, ecx
dec edx
mov dword [0x497c80], edx
add ecx, 0x1e521e2
mov si, word [0x481b92]
mov dx, si
xor edx, ecx
mov si, dx
mov word [0x481b92], si
mov ecx, esp
mov dword [ecx + 4], 5
mov dword [ecx], 0x3189
mov dword [esp + 0x114], eax
call fcn.00415e90
mov dword [esp + 0x980], eax
mov si, word [0x4865c8]
mov ax, si
inc eax
mov di, ax
mov word [0x4865c8], di
movsx eax, si
mov ecx, dword [0x48da98]
inc ecx
mov dword [0x48da98], ecx
imul eax, ecx
xor eax, 0xddb92cf6
cmp eax, 0x32108bc7
jl 0x42738a
mov eax, dword [0x495e84]
mov ecx, eax
dec ecx
mov dword [0x495e84], ecx
imul eax, eax, 0xf04be95f
add eax, 0xc29234ac
mov ecx, dword [0x4977a0]
sub ecx, eax
mov dword [0x4977a0], ecx
mov eax, dword [esp + 0x980]
mov ecx, esp
mov dword [ecx], eax
lea ecx, [esp + 0x62c]
call fcn.00403330
sub esp, 4
mov dx, word [0x484320]
mov cx, dx
dec ecx
mov si, cx
mov word [0x484320], si
movsx ecx, dx
add ecx, 0x594fc952
mov dx, word [0x480f4e]
movsx edi, dx
cmp ecx, edi
mov dword [esp + 0x110], eax
je 0x4273ea
mov eax, dword [0x48fe84]
xor eax, 0x202709ed
mov dword [0x48fe84], eax
mov eax, dword [esp + 0x980]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 5
call fcn.004140f0
mov eax, dword [0x49b2a4]
or eax, 0x384ad1a8
mov dword [0x49b2a4], eax
mov eax, dword [esp + 0x990]
mov ecx, eax
call fcn.0043ffe0
cmp eax, 0
je 0x4276d5
mov eax, 0x274b0d8c
mov ecx, dword [0x48ea54]
add ecx, 0x7061b5b5
mov dword [0x48ea54], ecx
mov ecx, esp
mov dword [ecx + 4], 0xc
mov dword [ecx], 0x2e2
mov dword [esp + 0x10c], eax
call fcn.00415e90
mov dword [esp + 0x97c], eax
mov eax, dword [0x4967c0]
imul eax, eax, 0x2c1c7d45
imul eax, eax, 0xde22a1ee
mov ecx, dword [esp + 0x10c]
cmp ecx, eax
je 0x4274bf
mov eax, 0x381c99fa
mov ecx, dword [0x493364]
imul ecx, ecx, 0xa546b47
cmp eax, ecx
je 0x4274ba
mov eax, dword [0x499894]
sar eax, 3
imul eax, eax, 0xa81df3c3
xor eax, 0xd8c97b43
mov ecx, dword [0x494a14]
sub ecx, eax
mov dword [0x494a14], ecx
jmp 0x4274bf
mov ecx, dword [esp + 0x990]
mov eax, dword [esp + 0x97c]
mov edx, esp
mov dword [edx], eax
lea eax, [esp + 0x1e8]
mov dword [esp + 0x108], ecx
mov ecx, eax
mov dword [esp + 0x104], eax
call fcn.00417130
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x104]
mov dword [ecx], edx
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x108]
mov dword [esp + 0x100], eax
call fcn.0043dfb0
sub esp, 8
mov dword [esp + 0x220], eax
mov ecx, dword [esp + 0x104]
call fcn.0044fb90
mov eax, dword [0x496864]
mov ecx, dword [0x491358]
lea eax, [eax + ecx - 0x60702ac0]
mov dword [0x491358], eax
mov eax, dword [esp + 0x97c]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0xc
call fcn.004140f0
mov eax, dword [0x49a140]
imul eax, eax, 0x9d0d3c16
mov ecx, dword [0x493570]
dec ecx
mov dword [0x493570], ecx
xor eax, ecx
mov ecx, dword [0x48c2e0]
add ecx, eax
mov dword [0x48c2e0], ecx
cmp dword [esp + 0x220], 0
jne 0x4276bd
mov eax, dword [0x4933ec]
dec eax
mov dword [0x4933ec], eax
mov ecx, dword [0x49271c]
mov edx, ecx
dec edx
mov dword [0x49271c], edx
add ecx, 0xde5a7008
xor eax, ecx
mov ecx, dword [0x49423c]
imul ecx, eax
mov dword [0x49423c], ecx
mov dword [esp + 0x21c], 1
mov eax, dword [0x48e2dc]
add eax, 0x67978625
mov dword [0x48e2dc], eax
mov eax, dword [esp + 0x990]
mov ecx, esp
mov dword [ecx], 0
mov ecx, eax
mov dword [esp + 0xfc], eax
call fcn.0044fd30
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xb
mov ecx, dword [esp + 0xfc]
call fcn.00419b30
sub esp, 8
mov si, word [0x4851b8]
movsx ecx, si
imul ecx, ecx, 0x17660c00
or ecx, 0x161d13fe
mov edx, dword [0x49bebc]
and edx, ecx
mov dword [0x49bebc], edx
mov ecx, esp
mov dword [ecx + 4], 6
mov dword [ecx], 0x2b72
mov dword [esp + 0xf8], eax
call fcn.00415e90
mov dword [esp + 0x978], eax
mov dword [0x48acd0], 0xff7fe7fb
mov eax, dword [esp + 0x978]
mov ecx, esp
mov dword [ecx], eax
lea ecx, [esp + 0x62c]
call fcn.00403330
sub esp, 4
mov ecx, dword [0x48b6c4]
or ecx, 0xa90a3fbe
mov dword [0x48b6c4], ecx
mov ecx, dword [esp + 0x978]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], 6
mov dword [esp + 0xf4], eax
call fcn.004140f0
mov eax, dword [0x49a484]
xor eax, 0x9e9659c
mov dword [0x49a484], eax
mov ax, word [0x4884f2]
mov cx, ax
add ecx, 0xea6fc77d
mov ax, cx
mov word [0x4884f2], ax
mov eax, 0xdbf4a908
mov ecx, dword [0x489cf8]
inc ecx
mov dword [0x489cf8], ecx
sub ecx, 0xfadee347
cmp eax, ecx
jne 0x427713
mov eax, dword [0x48def0]
shl eax, 6
mov cx, word [0x486eb6]
mov dx, cx
xor edx, eax
mov cx, dx
mov word [0x486eb6], cx
mov eax, esp
lea ecx, [esp + 0x658]
mov dword [eax], ecx
lea eax, [esp + 0x1d4]
mov ecx, eax
mov dword [esp + 0xf0], eax
call fcn.00432eb0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xf0]
mov dword [ecx], edx
lea ecx, [esp + 0x62c]
mov dword [esp + 0xec], eax
call fcn.0041d0b0
sub esp, 4
mov ecx, dword [esp + 0xf0]
mov dword [esp + 0xe8], eax
call fcn.0044fae0
mov si, word [0x488f06]
movsx eax, si
xor eax, 0xffffffff
add eax, 0x8bd325a9
xor eax, 0x7ac9e4ba
cmp eax, 0x50c6743c
jg 0x4277f3
mov eax, 0x37fcfbff
mov ecx, dword [0x49c120]
mov edx, dword [0x494358]
mov esi, edx
inc esi
mov dword [0x494358], esi
mov esi, dword [0x4958c8]
mov edi, esi
dec edi
mov dword [0x4958c8], edi
imul edx, esi
and ecx, edx
cmp eax, ecx
jne 0x4277ee
mov eax, 0x689e8677
mov ecx, dword [0x48d264]
mov edx, ecx
inc edx
mov dword [0x48d264], edx
or ecx, 0x3669c8e
cmp eax, ecx
jl 0x4277e9
jmp 0x4277e9
jmp 0x4277ee
jmp 0x4277f3
mov eax, esp
mov dword [eax + 4], 0x32
mov dword [eax], 0x2c
call fcn.00415e90
mov dword [esp + 0x974], eax
mov word [0x4883f0], 0xfdbf
mov eax, dword [esp + 0x974]
mov ecx, esp
mov dword [ecx], eax
lea eax, [esp + 0x1c0]
mov ecx, eax
mov dword [esp + 0xe4], eax
call fcn.00432eb0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xe4]
mov dword [ecx], edx
lea ecx, [esp + 0x62c]
mov dword [esp + 0xe0], ecx
mov dword [esp + 0xdc], eax
call fcn.0041d0b0
sub esp, 4
mov ecx, dword [esp + 0xe4]
mov dword [esp + 0xd8], eax
call fcn.0044fae0
mov si, word [0x484f56]
mov ax, si
xor eax, 0x1250
mov si, ax
mov word [0x484f56], si
mov eax, dword [esp + 0x974]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0x32
call fcn.004140f0
mov eax, dword [0x493eb4]
imul eax, eax, 0xf0fa2743
mov dword [0x493eb4], eax
mov eax, esp
lea ecx, [esp + 0x858]
mov dword [eax], ecx
lea eax, [esp + 0x1ac]
mov ecx, eax
mov dword [esp + 0xd4], eax
call fcn.00432eb0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xd4]
mov dword [ecx], edx
mov ecx, dword [esp + 0xe0]
mov dword [esp + 0xd0], eax
call fcn.0041d0b0
sub esp, 4
mov ecx, dword [esp + 0xd4]
mov dword [esp + 0xcc], eax
call fcn.0044fae0
mov eax, dword [0x498790]
xor eax, 0xffffffff
sub eax, 0x973a8d4b
cmp eax, 0xdb3c5dfe
jle 0x427974
mov eax, 0x2000c498
mov ecx, dword [0x490640]
mov edx, dword [0x495734]
mov esi, edx
inc esi
mov dword [0x495734], esi
imul ecx, edx
or ecx, 0xa12d232a
cmp eax, ecx
jne 0x42796f
mov eax, dword [0x48c684]
mov ecx, eax
inc ecx
mov dword [0x48c684], ecx
mov ecx, dword [0x49ba98]
or eax, ecx
or eax, 0x354044ad
mov dword [0x49ba98], eax
jmp 0x427974
cmp dword [esp + 0x21c], 0
je 0x427b6a
mov eax, dword [0x498180]
not eax
mov ecx, dword [0x498308]
sub ecx, eax
mov dword [0x498308], ecx
mov eax, esp
mov dword [eax + 4], 0x44
mov dword [eax], 0x1011
call fcn.00415e90
mov dword [esp + 0x970], eax
mov eax, dword [0x48efe0]
add eax, 0xffbefdfd
mov dword [0x48efe0], eax
mov eax, dword [esp + 0x970]
mov ecx, esp
mov dword [ecx], eax
lea eax, [esp + 0x198]
mov ecx, eax
mov dword [esp + 0xc8], eax
call fcn.00432eb0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xc8]
mov dword [ecx], edx
lea ecx, [esp + 0x62c]
mov dword [esp + 0xc4], eax
call fcn.0041d0b0
sub esp, 4
mov ecx, dword [esp + 0xc8]
mov dword [esp + 0xc0], eax
call fcn.0044fae0
mov eax, dword [0x493a3c]
and eax, 0xff795cbf
mov dword [0x493a3c], eax
mov eax, esp
mov dword [eax + 4], 3
mov dword [eax], 0x28c
call fcn.00415e90
mov dword [esp + 0x96c], eax
mov eax, dword [0x48e9b0]
or eax, 0x3cb34898
mov dword [0x48e9b0], eax
mov eax, dword [esp + 0x970]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0x44
call fcn.004140f0
mov eax, dword [0x49becc]
xor eax, 0x54bfa05a
mov dword [0x49becc], eax
mov ecx, dword [esp + 0x990]
call fcn.0043ffe0
mov ecx, dword [esp + 0x96c]
mov edx, esp
mov dword [edx + 8], eax
mov dword [edx + 4], ecx
lea eax, [esp + 0x22c]
mov dword [edx], eax
call fcn.00455b58
mov ecx, dword [0x498534]
add ecx, 0xe43c4db
mov dword [0x498534], ecx
mov ecx, dword [esp + 0x96c]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], 3
mov dword [esp + 0xbc], eax
call fcn.004140f0
mov eax, dword [0x48ff90]
xor eax, 0xffffffff
and eax, 0x624cd0e4
cmp eax, 0xdd688bfd
je 0x427b00
mov ax, word [0x487656]
mov cx, ax
and ecx, 0x93c8
mov ax, cx
mov word [0x487656], ax
mov eax, esp
lea ecx, [esp + 0x22c]
mov dword [eax], ecx
lea eax, [esp + 0x184]
mov ecx, eax
mov dword [esp + 0xb8], eax
call fcn.00432eb0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xb8]
mov dword [ecx], edx
lea ecx, [esp + 0x62c]
mov dword [esp + 0xb4], eax
call fcn.0041d0b0
sub esp, 4
mov ecx, dword [esp + 0xb8]
mov dword [esp + 0xb0], eax
call fcn.0044fae0
mov eax, dword [0x49ae4c]
mov ecx, dword [0x499338]
add ecx, eax
mov dword [0x499338], ecx
mov eax, dword [0x492944]
not eax
mov ecx, dword [0x494b6c]
inc ecx
mov dword [0x494b6c], ecx
mov edx, dword [0x48dfec]
mov esi, edx
inc esi
mov dword [0x48dfec], esi
imul ecx, edx
sub eax, ecx
mov ecx, dword [0x48a898]
and ecx, eax
mov dword [0x48a898], ecx
mov eax, esp
mov dword [eax + 4], 5
mov dword [eax], 0x3f56
call fcn.00415e90
mov dword [esp + 0x968], eax
mov eax, dword [0x496878]
and eax, 0xef763e5e
mov dword [0x496878], eax
mov eax, dword [esp + 0x968]
mov ecx, esp
mov dword [ecx], eax
lea eax, [esp + 0x170]
mov ecx, eax
mov dword [esp + 0xac], eax
call fcn.00432eb0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xac]
mov dword [ecx], edx
lea ecx, [esp + 0x62c]
mov dword [esp + 0xa8], eax
call fcn.0041d0b0
sub esp, 4
mov ecx, dword [esp + 0xac]
mov dword [esp + 0xa4], eax
call fcn.0044fae0
mov eax, dword [0x499238]
add eax, 0x66292cc4
cmp eax, 0x4e77ee3a
jg 0x427c46
mov eax, dword [0x498990]
imul eax, eax, 0x8e77b531
mov dword [0x498990], eax
mov eax, 0xbfefbbd7
mov ecx, dword [esp + 0x968]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], 5
mov dword [esp + 0xa0], eax
call fcn.004140f0
mov si, word [0x485484]
movsx eax, si
sar eax, 1
mov ecx, dword [esp + 0xa0]
cmp ecx, eax
jge 0x427c94
mov eax, dword [0x491d34]
and eax, 0xa23b20d6
mov dword [0x491d34], eax
cmp dword [esp + 0x21c], 0
je 0x427d07
mov ax, word [0x4826a4]
mov cx, ax
dec ecx
mov ax, cx
mov word [0x4826a4], ax
movsx ecx, ax
and ecx, 0x7ba123c8
mov edx, dword [0x496600]
xor edx, ecx
mov dword [0x496600], edx
mov ecx, dword [esp + 0x990]
mov edx, esp
mov dword [edx], ecx
lea ecx, [esp + 0x62c]
call fcn.0041d0b0
sub esp, 4
mov ecx, dword [0x49382c]
imul ecx, ecx, 0x9bbe8cfd
mov edx, dword [0x499008]
or edx, ecx
mov dword [0x499008], edx
mov dword [esp + 0x9c], eax
mov eax, 0xfa7f4f4c
mov ecx, dword [0x4938c4]
add ecx, 0x54e265
mov dword [0x4938c4], ecx
mov ecx, dword [0x47f9ac]
mov edx, esp
lea esi, [esp + 0x858]
mov dword [edx], esi
mov dword [esp + 0x98], eax
call ecx
sub esp, 4
mov dword [esp + 0x228], eax
mov eax, dword [0x494d9c]
dec eax
mov dword [0x494d9c], eax
imul eax, eax, 0x695e1a5a
mov ecx, dword [esp + 0x98]
sub ecx, eax
cmp ecx, 0xf3e130ee
jge 0x427d77
mov eax, dword [0x48d320]
xor eax, 0xa84923a7
mov dword [0x48d320], eax
cmp dword [esp + 0x228], 0
jne 0x427d99
mov eax, dword [0x48a120]
and eax, 0x834d83de
mov dword [0x48a120], eax
jmp 0x429137
mov eax, dword [0x498b60]
sar eax, 2
add eax, 0x57e2d11b
mov ecx, dword [0x4997c8]
cmp eax, ecx
jle 0x427dc8
mov eax, dword [0x49aa60]
and eax, 0x44c73382
mov dword [0x49aa60], eax
jmp 0x427dd7
mov eax, dword [0x49c578]
add eax, 0x1d00e1ce
mov dword [0x49c578], eax
xorps xmm0, xmm0
movaps xmmword [esp + 0x640], xmm0
mov ax, word [0x48256c]
movsx ecx, ax
imul ecx, ecx, 0x835b88ce
xor ecx, 0x98a15d2d
cmp ecx, 0x42088008
jg 0x427e23
mov eax, dword [0x49742c]
and eax, 0x1e5b
mov cx, word [0x4809bc]
mov dx, cx
add edx, eax
mov cx, dx
mov word [0x4809bc], cx
mov word [esp + 0x640], 2
mov eax, dword [0x49bc38]
dec eax
mov dword [0x49bc38], eax
mov ecx, dword [0x48ac0c]
add ecx, 0xd22b5770
and eax, ecx
mov ecx, dword [0x48f47c]
imul ecx, eax
mov dword [0x48f47c], ecx
mov eax, dword [0x47f9b4]
mov ecx, dword [0x47f9b8]
mov edx, dword [esp + 0x228]
mov edx, dword [edx + 0xc]
mov edx, dword [edx]
mov edx, dword [edx]
mov dword [esp + 0x16c], edx
mov edx, dword [esp + 0x16c]
mov esi, esp
mov dword [esi], edx
mov dword [esp + 0x94], eax
call ecx
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [esp + 0x94]
call eax
sub esp, 4
mov dword [esp + 0x644], eax
mov eax, dword [0x495380]
mov ecx, dword [0x48d818]
imul ecx, eax
mov dword [0x48d818], ecx
mov eax, dword [0x47f9b0]
movzx ecx, word [esp + 0x200]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov word [esp + 0x642], ax
mov ecx, dword [0x492390]
and ecx, 0x6a0235bb
mov dword [0x492390], ecx
cmp dword [esp + 0x994], 0
je 0x42809a
mov eax, 0xeebdf51f
mov ecx, dword [0x49a518]
or ecx, 0xe08b1a06
mov dword [0x49a518], ecx
mov ecx, dword [esp + 0x994]
mov edx, 0x10624dd3
mov dword [esp + 0x90], eax
mov eax, ecx
mul edx
shr edx, 6
mov eax, esp
mov dword [eax + 4], edx
lea ecx, [esp + 0x640]
mov dword [eax], ecx
call fcn.00403400
mov dword [esp + 0x654], eax
mov eax, dword [0x48f050]
sar eax, 1
add eax, 0x3d953852
xor eax, 0x5ddef00c
mov ecx, dword [esp + 0x90]
cmp ecx, eax
jge 0x427f83
mov eax, 0x1f251a3d
mov ecx, dword [0x49a850]
cmp eax, ecx
jg 0x427f7e
mov dword [0x49beac], 0x7cfeffff
jmp 0x427f83
cmp dword [esp + 0x654], 0
jge 0x427fd2
mov eax, 0x722cd997
mov ecx, dword [0x49526c]
mov edx, ecx
inc edx
mov dword [0x49526c], edx
mov edx, dword [0x48c560]
sub ecx, edx
cmp eax, ecx
jl 0x427fcd
mov ax, word [0x4800ec]
mov cx, ax
add ecx, 0xe2bec05a
mov ax, cx
mov word [0x4800ec], ax
jmp 0x429137
mov eax, dword [0x491a08]
add eax, 0x2092821b
mov dword [0x491a08], eax
mov eax, dword [0x47f9cc]
mov ecx, dword [esp + 0x654]
mov edx, esp
lea esi, [esp + 0x994]
mov dword [edx + 0xc], esi
mov dword [edx], ecx
mov dword [edx + 0x10], 4
mov dword [edx + 8], 0x1006
mov dword [edx + 4], 0xffff
call eax
sub esp, 0x14
mov ecx, dword [0x493a54]
inc ecx
mov dword [0x493a54], ecx
mov di, word [0x481c8c]
movsx edx, di
xor ecx, edx
cmp ecx, 0x95e99b6b
mov dword [esp + 0x8c], eax
je 0x428050
mov eax, dword [0x49ade0]
xor eax, 0xe5d5a921
mov dword [0x49ade0], eax
mov eax, dword [0x47f9cc]
mov ecx, dword [esp + 0x654]
mov edx, esp
lea esi, [esp + 0x994]
mov dword [edx + 0xc], esi
mov dword [edx], ecx
mov dword [edx + 0x10], 4
mov dword [edx + 8], 0x1005
mov dword [edx + 4], 0xffff
call eax
sub esp, 0x14
mov dword [0x496818], 0xb8838c11
mov dword [esp + 0x88], eax
jmp 0x428227
mov eax, 0xd3a78030
mov ecx, dword [0x49a1c0]
xor ecx, 0x5e56e545
mov dword [0x49a1c0], ecx
mov ecx, dword [0x47f9d0]
mov edx, esp
mov dword [edx + 8], 6
mov dword [edx + 4], 1
mov dword [edx], 2
mov dword [esp + 0x84], eax
call ecx
sub esp, 0xc
mov dword [esp + 0x654], eax
mov si, word [0x4833e2]
mov ax, si
dec eax
mov si, ax
mov word [0x4833e2], si
movsx eax, si
mov ecx, dword [0x49620c]
and eax, ecx
mov ecx, dword [esp + 0x84]
cmp ecx, eax
jle 0x42812d
mov eax, dword [0x489fec]
and eax, 0x4045ce18
mov ecx, dword [0x494a64]
imul ecx, eax
mov dword [0x494a64], ecx
jmp 0x428194
mov eax, dword [0x4916ac]
add eax, 0x9bcde657
mov ecx, dword [0x4952c8]
add ecx, 0xebf187bf
cmp eax, ecx
je 0x42815f
mov eax, dword [0x49bca8]
and eax, 0x5db72171
mov dword [0x49bca8], eax
jmp 0x42818f
mov eax, dword [0x49715c]
mov ecx, eax
dec ecx
mov dword [0x49715c], ecx
imul eax, eax, 0xa5c65c2
or eax, 0xab73
mov dx, word [0x4801c8]
mov cx, dx
imul ecx, eax
mov dx, cx
mov word [0x4801c8], dx
jmp 0x428194
cmp dword [esp + 0x654], 0xffffffff
jne 0x4281b6
mov eax, dword [0x4945a8]
and eax, 0xf02ca996
mov dword [0x4945a8], eax
jmp 0x429137
lea eax, [esp + 0x640]
mov cx, word [0x489486]
mov dx, cx
xor edx, 0x6796
mov cx, dx
mov word [0x489486], cx
mov edx, dword [0x47f9a8]
mov esi, dword [esp + 0x654]
mov edi, esp
mov dword [edi + 4], eax
mov dword [edi], esi
mov dword [edi + 8], 0x10
call edx
sub esp, 0xc
cmp eax, 0xffffffff
jne 0x428217
mov eax, dword [0x48d0ac]
mov ecx, 0xd583ee63
sub ecx, eax
mov dword [0x49b894], ecx
jmp 0x4290a0
mov eax, dword [0x48d0dc]
imul eax, eax, 0x85e03139
mov dword [0x48d0dc], eax
mov eax, dword [0x48db5c]
mov cx, word [0x484422]
movsx edx, cx
xor edx, 0xffffffff
cmp eax, edx
je 0x42824b
mov eax, dword [0x4979e4]
mov dword [0x497410], eax
lea eax, [esp + 0x62c]
mov ecx, dword [0x47f9c8]
lea edx, [esp + 0x62c]
mov dword [esp + 0x80], ecx
mov ecx, edx
mov dword [esp + 0x7c], eax
mov dword [esp + 0x78], edx
call fcn.0043ffe0
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x74], eax
call fcn.0044fe10
mov ecx, dword [esp + 0x654]
mov edx, esp
mov esi, dword [esp + 0x74]
mov dword [edx + 8], esi
mov dword [edx + 4], eax
mov dword [edx], ecx
mov dword [edx + 0xc], 0
mov eax, dword [esp + 0x80]
call eax
sub esp, 0x10
mov dword [esp + 0x650], eax
mov eax, dword [0x496bbc]
add eax, 0xc5951caf
mov dword [0x496bbc], eax
mov eax, dword [esp + 0x650]
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x70], eax
call fcn.0043ffe0
mov ecx, dword [esp + 0x70]
cmp ecx, eax
jae 0x4282f4
mov eax, dword [0x490a44]
add eax, 0x326889cb
mov dword [0x490a44], eax
jmp 0x4290a0
mov eax, dword [0x48a260]
shr eax, 1
and eax, 0x330f85c7
mov ecx, dword [0x48fef8]
sub ecx, eax
mov dword [0x48fef8], ecx
mov ecx, dword [esp + 0x990]
call fcn.0044fdf0
mov dx, word [0x4866ca]
mov ax, dx
xor eax, 0xbba2
mov dx, ax
mov word [0x4866ca], dx
mov eax, dword [0x48f890]
or eax, 0x2e2a9cf5
mov dword [0x48f890], eax
mov eax, dword [0x47f9c0]
mov ecx, dword [esp + 0x654]
mov edx, esp
lea esi, [esp + 0x22c]
mov dword [edx + 4], esi
mov dword [edx], ecx
mov dword [edx + 0xc], 0
mov dword [edx + 8], 0x400
call eax
sub esp, 0x10
mov dword [esp + 0x650], eax
mov eax, dword [0x494d78]
sar eax, 5
mov ecx, dword [0x4991d4]
dec ecx
mov dword [0x4991d4], ecx
or ecx, 0xe1e55922
cmp eax, ecx
je 0x4283a8
mov eax, dword [0x48de10]
or eax, 0x6628b77
mov dword [0x48de10], eax
cmp dword [esp + 0x650], 0
jle 0x4283d9
mov eax, dword [esp + 0x210]
mov ecx, dword [esp + 0x214]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], eax
call fcn.0043e9c0
cmp eax, 0
je 0x428410
mov eax, dword [0x494b14]
xor eax, 0x9623d011
cmp eax, 0x67d1bce3
jle 0x42840b
mov ax, word [0x481526]
movsx ecx, ax
or ecx, 0x3b2fde65
mov edx, dword [0x496a8c]
add edx, ecx
mov dword [0x496a8c], edx
jmp 0x428f17
mov eax, dword [0x48e060]
not eax
mov ecx, dword [0x497a70]
sub eax, ecx
cmp eax, 0x618d6d83
jle 0x428443
mov eax, dword [0x49aec4]
or eax, 0xc76097b7
mov ecx, dword [0x496a84]
imul ecx, eax
mov dword [0x496a84], ecx
mov eax, dword [esp + 0x990]
mov ecx, eax
mov dword [esp + 0x6c], eax
call fcn.0043ffe0
mov ecx, dword [esp + 0x650]
add eax, ecx
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x6c]
call fcn.004158d0
sub esp, 8
mov dx, word [0x486ef2]
mov ax, dx
xor eax, 0x108b
mov dx, ax
mov word [0x486ef2], dx
mov eax, dword [esp + 0x990]
mov ecx, eax
call fcn.004502d0
cmp eax, 0
jne 0x4284e0
mov eax, 0x17025536
mov ecx, dword [0x489954]
mov dx, word [0x4860fe]
movsx esi, dx
mov edi, dword [0x49464c]
add esi, edi
and ecx, esi
cmp eax, ecx
jne 0x4284db
mov eax, dword [0x48f294]
and eax, 0xffefffdb
mov dword [0x48f294], eax
jmp 0x428f17
mov eax, dword [0x492f2c]
mov ecx, eax
dec ecx
mov dword [0x492f2c], ecx
or eax, 0x40c66e38
cmp eax, 0xa738dd1f
je 0x428516
mov eax, dword [0x497fe8]
xor eax, 0x9885df30
mov ecx, dword [0x494260]
and ecx, eax
mov dword [0x494260], ecx
mov ecx, dword [esp + 0x990]
mov eax, dword [esp + 0x650]
mov edx, esp
mov dword [edx + 4], eax
lea eax, [esp + 0x22c]
mov dword [edx], eax
call fcn.00409390
sub esp, 8
mov ecx, dword [0x48a1c8]
mov edx, dword [0x4922fc]
add edx, 0x26996788
and ecx, edx
mov edx, dword [0x498124]
imul edx, ecx
mov dword [0x498124], edx
cmp dword [esp + 0x208], 0
mov dword [esp + 0x68], eax
jge 0x4289ef
mov eax, dword [0x4919e8]
add eax, 0x82200530
mov dword [0x4919e8], eax
mov eax, esp
mov dword [eax + 4], 5
mov dword [eax], 0x3f56
call fcn.00415e90
mov dword [esp + 0x964], eax
mov eax, dword [0x48f03c]
mov ecx, eax
inc ecx
mov dword [0x48f03c], ecx
mov ecx, dword [0x491160]
xor ecx, eax
mov dword [0x491160], ecx
mov ecx, dword [esp + 0x990]
mov eax, dword [esp + 0x964]
mov edx, esp
mov dword [edx], eax
lea eax, [esp + 0x158]
mov dword [esp + 0x64], ecx
mov ecx, eax
mov dword [esp + 0x60], eax
call fcn.00417130
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x60]
mov dword [ecx], edx
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x5c], eax
call fcn.0043dfb0
sub esp, 8
mov dword [esp + 0x208], eax
mov ecx, dword [esp + 0x60]
call fcn.0044fb90
mov eax, dword [0x48aa9c]
imul eax, eax, 0x22f489a7
mov dword [0x48d7a8], eax
mov eax, dword [esp + 0x964]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 5
call fcn.004140f0
mov eax, dword [0x49533c]
add eax, 0xa9d13271
mov dword [0x49533c], eax
cmp dword [esp + 0x208], 0
jl 0x42895c
mov eax, dword [0x491ec4]
add eax, 0x1fe5132a
mov cx, word [0x4845fa]
mov dx, cx
sub edx, eax
mov cx, dx
mov word [0x4845fa], cx
mov eax, dword [esp + 0x208]
add eax, 4
mov dword [esp + 0x208], eax
mov eax, dword [0x490d00]
or eax, 0x4281cdcf
mov dword [0x490d00], eax
mov eax, dword [esp + 0x990]
mov edx, esp
mov dword [edx], eax
call fcn.00412e80
mov dword [esp + 0x204], eax
mov cx, word [0x4839ba]
mov ax, cx
dec eax
mov cx, ax
mov word [0x4839ba], cx
movsx eax, cx
mov edx, dword [0x48d310]
mov esi, dword [0x48ead4]
mov edi, esi
inc edi
mov dword [0x48ead4], edi
add edx, esi
cmp eax, edx
jle 0x4286f9
mov ax, word [0x481160]
mov cx, ax
or ecx, 0x5cf8
mov ax, cx
mov word [0x481160], ax
cmp dword [esp + 0x204], 0
jge 0x4288fc
mov eax, 0x87562edf
mov ecx, dword [0x49a230]
and ecx, 0xc98c8065
mov dword [0x49a230], ecx
mov ecx, esp
mov dword [ecx + 4], 0xb
mov dword [ecx], 0x3f05
mov dword [esp + 0x58], eax
call fcn.00415e90
mov dword [esp + 0x960], eax
mov eax, dword [0x48a164]
mov dx, word [0x485d56]
mov cx, dx
dec ecx
mov dx, cx
mov word [0x485d56], dx
movsx ecx, dx
xor eax, ecx
mov ecx, dword [esp + 0x58]
cmp ecx, eax
je 0x4287cc
mov eax, dword [0x48d234]
inc eax
mov dword [0x48d234], eax
mov ecx, dword [0x496fa4]
dec ecx
mov dword [0x496fa4], ecx
add eax, ecx
and eax, 0xed94856b
cmp eax, 0xd4e85c82
jle 0x4287c7
mov eax, 0x467a014d
mov cx, word [0x4831da]
mov dx, cx
dec edx
mov si, dx
mov word [0x4831da], si
movsx edx, cx
sub edx, 0xd855bf0b
cmp eax, edx
jge 0x4287c2
jmp 0x4287c2
jmp 0x4287c7
jmp 0x4287d6
mov dword [0x48af80], 0x802a1084
mov ecx, dword [esp + 0x990]
mov eax, dword [esp + 0x960]
mov edx, esp
mov dword [edx], eax
lea eax, [esp + 0x144]
mov dword [esp + 0x54], ecx
mov ecx, eax
mov dword [esp + 0x50], eax
call fcn.00417130
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x50]
mov dword [ecx], edx
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x4c], eax
call fcn.0043dfb0
sub esp, 8
mov dword [esp + 0x650], eax
mov ecx, dword [esp + 0x50]
call fcn.0044fb90
mov eax, dword [0x48ac78]
xor eax, 0xdf8905ff
mov dword [0x48ac78], eax
mov eax, dword [esp + 0x960]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0xb
call fcn.004140f0
mov eax, dword [0x496d38]
mov ecx, eax
inc ecx
mov dword [0x496d38], ecx
xor eax, 0x6164d11c
mov ecx, dword [0x48f94c]
shl ecx, 3
cmp eax, ecx
jle 0x4288a2
mov eax, dword [0x493600]
and eax, 0xb1e7e9d3
mov ecx, dword [0x497874]
sar ecx, 0xa
or eax, ecx
mov ecx, dword [0x4945e4]
and ecx, eax
mov dword [0x4945e4], ecx
jmp 0x4288c2
mov eax, dword [0x4902c0]
xor eax, 0xf70a
mov cx, word [0x483c76]
mov dx, cx
sub edx, eax
mov cx, dx
mov word [0x483c76], cx
cmp dword [esp + 0x650], 0
jl 0x4288ed
mov ax, word [0x48323e]
mov cx, ax
xor ecx, 0x2b3c
mov ax, cx
mov word [0x48323e], ax
jmp 0x428f17
mov eax, dword [0x498fd0]
add eax, 0xffffdf78
mov dword [0x498fd0], eax
mov eax, dword [0x48e774]
dec eax
mov dword [0x48e774], eax
and eax, 0xf1a499c
mov ecx, dword [0x489550]
inc ecx
mov dword [0x489550], ecx
or eax, ecx
cmp eax, 0x5f8847b4
jne 0x428957
mov eax, 0x26c0000
mov cx, word [0x48740c]
movsx edx, cx
and edx, 0x32e8c74c
cmp eax, edx
je 0x428952
mov eax, dword [0x4953ec]
add eax, 0xe3af4f4f
mov dword [0x4953ec], eax
jmp 0x428957
jmp 0x42895c
mov eax, 0x544febbc
mov ecx, dword [0x48c474]
mov edx, dword [0x4918e0]
imul ecx, edx
cmp eax, ecx
jl 0x4289d2
mov eax, 0x9eeb76fe
mov ecx, dword [0x4970a0]
sar ecx, 3
cmp eax, ecx
jl 0x4289a2
mov eax, dword [0x4895d4]
or eax, 0x271a4b60
mov dword [0x4895d4], eax
jmp 0x4289cd
mov eax, 0x6f1ab9ec
mov ecx, dword [0x491d00]
xor ecx, 0xffffffff
imul ecx, ecx, 0x90695a52
cmp eax, ecx
jge 0x4289c3
jmp 0x4289c8
jmp 0x4289c8
jmp 0x4289cd
jmp 0x4289ea
mov ax, word [0x48639a]
mov cx, ax
add ecx, 0x1d7738d7
mov ax, cx
mov word [0x48639a], ax
jmp 0x4289ef
mov eax, dword [0x48c068]
inc eax
mov dword [0x48c068], eax
add eax, 0x7b459779
cmp eax, 0xc3aec1e
jge 0x428a23
mov ax, word [0x48743c]
movsx ecx, ax
mov edx, dword [0x495500]
xor ecx, edx
not ecx
mov dword [0x495500], ecx
cmp dword [esp + 0x204], 0
jl 0x428aae
mov eax, dword [0x48bce4]
add eax, 0xe5ea7eb
xor eax, 0x69ae6d49
mov ecx, dword [0x495998]
sub ecx, eax
mov dword [0x495998], ecx
mov eax, dword [esp + 0x990]
mov ecx, eax
call fcn.0043ffe0
sub eax, dword [esp + 0x208]
cmp eax, dword [esp + 0x204]
jb 0x428a8d
mov ax, word [0x482012]
mov cx, ax
xor ecx, 0x4961
mov ax, cx
mov word [0x482012], ax
jmp 0x428f17
mov eax, dword [0x497994]
mov ecx, eax
dec ecx
mov dword [0x497994], ecx
add eax, 0x5b6083a0
mov ecx, dword [0x49a808]
sub ecx, eax
mov dword [0x49a808], ecx
mov eax, dword [0x4925fc]
sar eax, 5
imul eax, eax, 0xffef7ffe
xor eax, 0x12683fd8
mov ecx, dword [0x4918d4]
and ecx, eax
mov dword [0x4918d4], ecx
cmp dword [esp + 0x998], 0
je 0x428e4a
test byte [esp + 0x1ff], 1
jne 0x428e4a
mov eax, dword [0x492808]
not eax
or eax, 0xf806c5b4
mov ecx, dword [0x48cb48]
add ecx, eax
mov dword [0x48cb48], ecx
mov eax, dword [esp + 0x990]
mov ecx, eax
call fcn.0043ffe0
cmp eax, 0x4000
jbe 0x428e3b
mov ax, word [0x484744]
mov cx, ax
xor ecx, 0xd28f
mov ax, cx
mov word [0x484744], ax
mov byte [esp + 0x1ff], 1
mov ax, word [0x489140]
movsx ecx, ax
shl ecx, 2
mov edx, dword [0x492058]
mov esi, edx
dec esi
mov dword [0x492058], esi
imul edx, edx, 0x4a21c0bb
cmp ecx, edx
jg 0x428b89
mov eax, dword [0x489a3c]
mov ecx, eax
inc ecx
mov dword [0x489a3c], ecx
add eax, 0x9aa6d026
mov ecx, dword [0x499b98]
imul ecx, eax
mov dword [0x499b98], ecx
mov eax, dword [esp + 0x990]
mov ecx, esp
mov dword [ecx], eax
lea ecx, [esp + 0x130]
call fcn.0041aea0
sub esp, 4
mov dx, word [0x486e24]
movsx ecx, dx
imul ecx, ecx, 0x7495b8a0
mov esi, dword [0x4897d0]
add esi, ecx
mov dword [0x4897d0], esi
cmp dword [esp + 0x208], 0
mov dword [esp + 0x48], eax
jl 0x428c5f
mov eax, dword [0x48bb84]
mov ecx, eax
inc ecx
mov dword [0x48bb84], ecx
mov ecx, dword [0x49b88c]
shl ecx, 7
add ecx, 0x61a180ef
and eax, ecx
cmp eax, 0xf7befb96
je 0x428c0c
mov eax, dword [0x498b9c]
or eax, 0x8740400
mov dword [0x498b9c], eax
mov eax, dword [esp + 0x208]
mov ecx, esp
mov dword [ecx], 0
lea ecx, [esp + 0x130]
mov dword [esp + 0x44], ecx
mov dword [esp + 0x40], eax
call fcn.0044fd30
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x40]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov ecx, dword [esp + 0x44]
call fcn.00419b30
sub esp, 8
mov ecx, dword [0x4964bc]
add ecx, 0x20166092
mov dword [0x4964bc], ecx
mov dword [esp + 0x3c], eax
mov eax, 0x415860d0
mov ecx, dword [0x48d7fc]
mov edx, ecx
inc edx
mov dword [0x48d7fc], edx
add ecx, 0x9748f630
mov edx, dword [0x48fa84]
mov esi, edx
dec esi
mov dword [0x48fa84], esi
add ecx, edx
cmp eax, ecx
jg 0x428d2b
mov ax, word [0x48411e]
movsx ecx, ax
shl ecx, 6
add ecx, 0x2941865e
mov edx, dword [0x48cc98]
mov esi, edx
dec esi
mov dword [0x48cc98], esi
mov esi, dword [0x4990fc]
sar esi, 0xa
add edx, esi
and edx, 0x90f8ecc4
cmp ecx, edx
jg 0x428cfc
mov ax, word [0x482f36]
movsx ecx, ax
and ecx, 0x43e72853
mov edx, dword [0x4935e0]
shl edx, 3
imul edx, edx, 0x6c344280
cmp ecx, edx
jg 0x428cf7
jmp 0x428cf7
jmp 0x428d26
mov ax, word [0x484b18]
mov cx, ax
inc ecx
mov ax, cx
mov word [0x484b18], ax
movsx ecx, ax
mov edx, dword [0x496a94]
or ecx, edx
or ecx, 0x26f15440
mov dword [0x496a94], ecx
jmp 0x428d2b
lea eax, [esp + 0x130]
lea ecx, [esp + 0x858]
mov edx, dword [esp + 0x998]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.0044d1e0
cmp eax, 0
jne 0x428de1
mov eax, 0x14014cd0
mov ecx, 0x708c1ae3
mov edx, dword [0x4914ac]
shl edx, 0xa
mov esi, dword [0x496ae8]
sub ecx, esi
and edx, ecx
cmp eax, edx
je 0x428d92
mov eax, dword [0x48f0c0]
or eax, 0x9f5b
mov cx, ax
mov word [0x485220], cx
mov dword [esp + 0x208], 0xffffffff
mov eax, dword [0x496130]
add eax, 0xb781b55d
mov dword [0x496130], eax
mov ecx, dword [esp + 0x990]
call fcn.0044fdf0
mov dx, word [0x488a1e]
mov ax, dx
add eax, 0xde8a87ba
mov dx, ax
mov word [0x488a1e], dx
mov dword [esp + 0x12c], 0xd
jmp 0x428dfc
mov eax, dword [0x48b2d8]
imul eax, eax, 0xafcffd4f
mov dword [0x48b2d8], eax
mov dword [esp + 0x12c], 0
lea ecx, [esp + 0x130]
call fcn.0044fae0
mov ecx, dword [esp + 0x12c]
test ecx, ecx
mov dword [esp + 0x38], ecx
je 0x428e36
jmp 0x428e20
mov eax, dword [esp + 0x38]
sub eax, 0xd
mov dword [esp + 0x34], eax
je 0x428f17
jmp 0x429251
jmp 0x428e3b
mov eax, dword [0x48cb44]
add eax, 0xaa3b5bce
mov dword [0x48cb44], eax
mov eax, dword [0x497a98]
add eax, 0xfcfffbfa
mov dword [0x497a98], eax
cmp dword [esp + 0x994], 0x3aa6
jne 0x428f03
mov eax, 0xcf3140d8
mov ecx, dword [0x498bac]
mov edx, dword [0x496c18]
mov esi, edx
inc esi
mov dword [0x496c18], esi
sub ecx, edx
cmp eax, ecx
jge 0x428e9d
mov eax, dword [0x49014c]
xor eax, 0x744c1f8e
mov dword [0x490b34], eax
mov eax, dword [esp + 0x990]
mov ecx, eax
call fcn.0043ffe0
cmp eax, 0x500000
jbe 0x428ed7
mov eax, dword [0x4985b4]
mov ecx, dword [0x498148]
sub eax, ecx
mov ecx, dword [0x48bfdc]
add ecx, ecx
or eax, ecx
mov dword [0x48f518], eax
jmp 0x428f17
mov ax, word [0x48862e]
mov cx, ax
inc ecx
mov dx, cx
mov word [0x48862e], dx
movsx ecx, ax
mov esi, 0x9464f596
sub esi, ecx
mov ecx, dword [0x48f73c]
sub ecx, esi
mov dword [0x48f73c], ecx
mov eax, dword [0x4922e4]
add eax, 0x1ebd076
mov dword [0x4922e4], eax
jmp 0x428333
mov eax, dword [0x498a64]
add eax, 0x5e01f555
mov dword [0x498a64], eax
cmp dword [esp + 0x208], 0
jl 0x428fa5
mov eax, dword [0x49b6fc]
inc eax
mov dword [0x49b6fc], eax
xor eax, 0x44c81902
mov dword [0x49b794], eax
mov eax, dword [esp + 0x990]
mov ecx, dword [esp + 0x208]
mov edx, esp
mov dword [edx], 0
mov dword [esp + 0x30], ecx
mov ecx, eax
mov dword [esp + 0x2c], eax
call fcn.0044fd30
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x30]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov ecx, dword [esp + 0x2c]
call fcn.00419b30
sub esp, 8
mov ecx, dword [0x48c31c]
mov edx, dword [0x4910a4]
lea ecx, [ecx + edx + 0x55e0942b]
mov dword [0x4910a4], ecx
mov dword [esp + 0x28], eax
mov eax, dword [0x489b20]
add eax, 0x1289ef12
mov dword [0x489b20], eax
cmp dword [esp + 0x998], 0
je 0x42907d
test byte [esp + 0x1ff], 1
jne 0x42907d
lea eax, [esp + 0x858]
mov ecx, dword [0x49c77c]
or ecx, 0x5c75b8ad
mov edx, dword [0x49669c]
and edx, ecx
mov dword [0x49669c], edx
mov ecx, dword [esp + 0x998]
mov edx, dword [esp + 0x990]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0044d1e0
cmp eax, 0
jne 0x429059
mov eax, dword [0x490a40]
imul eax, eax, 0x2529a2c1
and eax, 0x580d
mov cx, word [0x481e5c]
mov dx, cx
xor edx, eax
mov cx, dx
mov word [0x481e5c], cx
mov ecx, dword [esp + 0x990]
call fcn.0044fdf0
mov eax, dword [0x48958c]
add eax, 0x39953b9f
mov dword [0x48958c], eax
mov eax, dword [0x497a74]
mov ecx, eax
dec ecx
mov dword [0x497a74], ecx
mov ecx, dword [0x4907d0]
add eax, ecx
mov ecx, dword [0x497d3c]
xor ecx, eax
mov dword [0x497d3c], ecx
mov ax, word [0x484bae]
mov cx, ax
mov ax, word [0x485cf8]
mov dx, ax
or ecx, edx
or ecx, 0x18da
mov ax, cx
mov word [0x485cf8], ax
mov eax, 0xf4504c63
mov ecx, dword [0x47f9d8]
mov edx, dword [esp + 0x654]
mov esi, esp
mov dword [esi], edx
mov dword [esi + 4], 2
mov dword [esp + 0x24], eax
call ecx
sub esp, 8
mov ecx, dword [0x496838]
sar ecx, 5
add ecx, 0xc31f56c7
mov edx, dword [esp + 0x24]
cmp edx, ecx
mov dword [esp + 0x20], eax
jge 0x4290f4
mov eax, dword [0x48f828]
or eax, 0x43b14ce4
mov dword [0x49a12c], eax
mov eax, dword [0x47f9a4]
mov ecx, dword [esp + 0x654]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov ecx, dword [0x498140]
mov edx, dword [0x48db04]
and edx, 0x3f08
xor ecx, edx
mov si, word [0x487a08]
mov dx, si
or edx, ecx
mov si, dx
mov word [0x487a08], si
mov dword [esp + 0x1c], eax
mov eax, 0x3f300c61
mov ecx, esp
lea edx, [esp + 0x858]
mov dword [ecx], edx
mov dword [ecx + 4], 0x80
mov dword [esp + 0x18], eax
call fcn.00419200
mov eax, dword [0x489a70]
xor eax, 0x815cda2e
mov dword [0x489a70], eax
mov eax, esp
lea ecx, [esp + 0x8d8]
mov dword [eax], ecx
mov dword [eax + 4], 0x80
call fcn.00419200
mov si, word [0x486968]
mov ax, si
or eax, 0xfc62
mov si, ax
mov word [0x486968], si
mov eax, esp
lea ecx, [esp + 0x658]
mov dword [eax], ecx
mov dword [eax + 4], 0x200
call fcn.00419200
mov eax, dword [0x48fc80]
sar eax, 9
mov ecx, dword [esp + 0x18]
cmp ecx, eax
jge 0x429217
mov eax, 0x97402a67
mov cx, word [0x482670]
mov dx, cx
inc edx
mov cx, dx
mov word [0x482670], cx
movsx edx, cx
mov esi, dword [0x4954f8]
dec esi
mov dword [0x4954f8], esi
sub esi, 0x26c5a929
or edx, esi
cmp eax, edx
jle 0x429212
mov ax, word [0x489358]
movsx ecx, ax
mov edx, dword [0x4978b4]
add edx, ecx
mov dword [0x4978b4], edx
jmp 0x429217
mov eax, esp
lea ecx, [esp + 0x22c]
mov dword [eax], ecx
mov dword [eax + 4], 0x400
call fcn.00419200
mov eax, dword [0x4895f8]
add eax, 0x4061515
mov dword [0x4895f8], eax
lea ecx, [esp + 0x62c]
call fcn.0044fae0
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
int3