Function at 0x406a00
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
push edi
push esi
sub esp, 0xf0
mov eax, dword [esp + 0x10c]
mov ecx, dword [esp + 0x108]
mov edx, dword [esp + 0x104]
mov esi, dword [esp + 0x100]
mov dword [esp + 0xe8], eax
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xe0], edx
mov dword [esp + 0xdc], esi
mov eax, dword [0x497680]
xor eax, 0x9448ce17
mov dword [0x497680], eax
mov eax, dword [0x498674]
add eax, 0x3097b617
or eax, 0xfe90f7fd
cmp eax, 0x62802404
jge 0x406a79
mov eax, dword [0x498bd0]
xor eax, 0xce20876f
mov dword [0x498bd0], eax
mov eax, dword [0x498494]
add eax, 0xc9ce3501
cmp eax, 0xc0a61008
jl 0x406aa6
mov ax, word [0x49ac5a]
mov cx, ax
add ecx, 0xba5f4d4f
mov ax, cx
mov word [0x49ac5a], ax
xor eax, eax
mov ecx, dword [esp + 0xe8]
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 0x68], eax
call fcn.0043c030
cmp eax, 0
jne 0x406adc
mov dword [esp + 0xec], 0xfffffff4
jmp 0x408428
mov ax, word [0x49ab4e]
movsx ecx, ax
mov edx, dword [0x499a0c]
add edx, ecx
mov dword [0x499a0c], edx
mov ecx, esp
lea edx, [esp + 0x8c]
mov dword [ecx + 0x10], edx
lea edx, [esp + 0x98]
mov dword [ecx + 0xc], edx
lea edx, [esp + 0xa4]
mov dword [ecx + 8], edx
lea edx, [esp + 0xb0]
mov dword [ecx + 4], edx
lea edx, [esp + 0xbc]
mov dword [ecx], edx
mov dword [ecx + 0x14], 0
call fcn.00445b80
mov ecx, dword [0x49988c]
inc ecx
mov dword [0x49988c], ecx
or ecx, 0xd614
mov ax, cx
mov word [0x49a048], ax
mov ecx, dword [esp + 0xe8]
mov edx, dword [esp + 0xe4]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00446170
cmp eax, 0
jge 0x406c40
mov eax, dword [0x499080]
imul eax, eax, 0x4e3fa613
mov dword [0x499080], eax
cmp dword [esp + 0xdc], 0
je 0x406bc6
xor eax, eax
mov ecx, dword [esp + 0xdc]
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 0x64], eax
call fcn.00401570
mov dword [esp + 0xd8], eax
cmp eax, 0
je 0x406bc1
jmp 0x4083cc
jmp 0x406bc6
mov eax, dword [0x499540]
imul eax, eax, 0x484b0a1f
mov ecx, dword [0x498210]
or ecx, eax
mov dword [0x498210], ecx
cmp dword [esp + 0xe0], 0
je 0x406c21
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0xe0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0044ade0
mov dword [esp + 0xd8], eax
cmp eax, 0
je 0x406c1c
jmp 0x4083cc
jmp 0x406c21
mov eax, dword [0x498cd8]
add eax, 0x26d5c19d
mov dword [0x498cd8], eax
mov dword [esp + 0xec], 0
jmp 0x408428
mov eax, 0x26ce91ed
mov ecx, dword [0x497abc]
xor ecx, 0xffffffff
imul ecx, ecx, 0xf7f82b33
cmp eax, ecx
jne 0x406cac
mov eax, 0x301c2c9d
mov ecx, dword [0x498360]
or ecx, 0xa9b9508a
cmp eax, ecx
jne 0x406c98
mov eax, 0xf04e350
mov ecx, dword [0x497808]
add ecx, 0x19e22045
cmp eax, ecx
jle 0x406c93
jmp 0x406c93
jmp 0x406ca7
mov eax, dword [0x499234]
add eax, 0x6e85b75f
mov dword [0x499234], eax
jmp 0x406cac
lea eax, [esp + 0xbc]
mov ecx, dword [esp + 0xe4]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0044ade0
mov dword [esp + 0xd8], eax
cmp eax, 0
je 0x406cdb
jmp 0x4083cc
lea eax, [esp + 0xb0]
mov ecx, dword [0x498034]
add ecx, 0x71aa912b
mov dword [0x498034], ecx
mov ecx, dword [esp + 0xe8]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0044ade0
mov dword [esp + 0xd8], eax
cmp eax, 0
je 0x406d1c
jmp 0x4083cc
lea eax, [esp + 0xa4]
mov ecx, dword [0x498780]
mov edx, dword [0x497770]
or edx, ecx
mov dword [0x497770], edx
mov dword [esp + 0xb0], 1
mov dword [esp + 0xbc], 1
mov ecx, dword [0x497cf4]
imul ecx, ecx, 0x114c1804
mov dword [0x497cf4], ecx
mov ecx, dword [esp + 0xe4]
mov ecx, dword [ecx + 4]
add ecx, 2
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00421340
mov dword [esp + 0xd8], eax
cmp eax, 0
je 0x406d8d
jmp 0x4083cc
lea eax, [esp + 0xa4]
xor ecx, ecx
mov edx, dword [0x49924c]
or edx, 0x9a01f0dd
mov dword [0x49924c], edx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 0x60], ecx
call fcn.00401570
mov dword [esp + 0xd8], eax
cmp eax, 0
je 0x406dd1
jmp 0x4083cc
lea eax, [esp + 0x98]
mov ecx, 2
mov edx, dword [0x4979c0]
and edx, 0x1e7f234e
mov dword [0x4979c0], edx
mov dword [esp], eax
mov dword [esp + 4], 2
mov dword [esp + 0x5c], ecx
call fcn.00421340
mov dword [esp + 0xd8], eax
cmp eax, 0
je 0x406e18
jmp 0x4083cc
lea eax, [esp + 0x8c]
mov ecx, 3
mov edx, dword [0x498cf8]
shl edx, 4
mov esi, dword [0x4990ec]
and esi, edx
mov dword [0x4990ec], esi
mov dword [esp], eax
mov dword [esp + 4], 3
mov dword [esp + 0x58], ecx
call fcn.00421340
mov dword [esp + 0xd8], eax
cmp eax, 0
je 0x406e64
jmp 0x4083cc
mov eax, dword [0x4993a4]
add eax, 0x95720a6d
and eax, 0xae142be8
mov ecx, dword [0x49865c]
sub ecx, eax
mov dword [0x49865c], ecx
mov eax, esp
lea ecx, [esp + 0xb0]
mov dword [eax], ecx
call fcn.00444220
mov ecx, eax
sar ecx, 0x1f
shr ecx, 0x1b
mov edx, eax
add edx, ecx
and edx, 0xffffffe0
sub eax, edx
mov dword [esp + 0xc8], eax
mov eax, dword [0x498db0]
and eax, 0x2042c520
mov dword [0x498db0], eax
cmp dword [esp + 0xc8], 0x1f
jge 0x407063
mov eax, dword [0x497ff4]
xor eax, 0xc418209c
or eax, 0x11e1ca61
mov ecx, dword [0x497aa0]
or ecx, 0x4d158a53
cmp eax, ecx
je 0x406f01
mov ax, word [0x49ace8]
mov cx, ax
add ecx, 0x4a24499
mov ax, cx
mov word [0x49ace8], ax
lea eax, [esp + 0xbc]
mov ecx, dword [esp + 0xc8]
mov edx, 0x1f
sub edx, ecx
mov dword [esp + 0xc8], edx
mov dword [0x4986ac], 0xd9efd9ff
mov ecx, dword [esp + 0xc8]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0041f060
mov dword [esp + 0xd8], eax
cmp eax, 0
je 0x406f4f
jmp 0x4083cc
mov eax, dword [0x497b50]
mov ecx, eax
inc ecx
mov dword [0x497b50], ecx
xor eax, 0x3f865352
cmp eax, 0x19fbc04a
jne 0x406fbf
mov eax, 0xacc3940
mov ecx, dword [0x499380]
mov edx, ecx
inc edx
mov dword [0x499380], edx
mov edx, dword [0x498ee0]
mov esi, dword [0x497c74]
mov edi, esi
inc edi
mov dword [0x497c74], edi
xor edx, esi
or ecx, edx
cmp eax, ecx
je 0x406fba
mov ax, word [0x499c3a]
mov cx, ax
add ecx, 0x5972764f
mov ax, cx
mov word [0x499c3a], ax
jmp 0x407025
mov eax, dword [0x49787c]
mov ecx, dword [0x497924]
mov edx, ecx
dec edx
mov dword [0x497924], edx
add eax, ecx
and eax, 0x1437ee84
mov ecx, dword [0x498604]
inc ecx
mov dword [0x498604], ecx
mov si, word [0x499bea]
mov dx, si
inc edx
mov si, dx
mov word [0x499bea], si
movsx edx, si
add ecx, edx
cmp eax, ecx
je 0x407020
mov ax, word [0x49a68e]
movsx ecx, ax
mov edx, dword [0x499170]
add edx, ecx
mov dword [0x499170], edx
jmp 0x407025
lea eax, [esp + 0xb0]
mov ecx, dword [esp + 0xc8]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0041f060
mov dword [esp + 0xd8], eax
cmp eax, 0
je 0x407054
jmp 0x4083cc
mov dword [0x4985cc], 0xfb1f6beb
jmp 0x40706e
mov dword [esp + 0xc8], 0
mov eax, 0xc196eb21
mov ecx, dword [0x498474]
xor ecx, 0xc92418b5
mov dword [0x498474], ecx
mov ecx, dword [esp + 0xc0]
dec ecx
mov dword [esp + 0xd0], ecx
mov ecx, dword [0x499890]
and ecx, 0x15b06443
mov dword [0x499890], ecx
mov ecx, dword [esp + 0xb4]
dec ecx
mov dword [esp + 0xcc], ecx
mov ecx, dword [0x499390]
mov edx, ecx
dec edx
mov dword [0x499390], edx
and ecx, 0xd6bfd911
cmp eax, ecx
je 0x4070e6
mov eax, dword [0x499074]
add eax, 0x34307601
mov dword [0x499074], eax
jmp 0x4070f0
mov dword [0x497fa4], 0x70584f2c
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0xcc]
sub eax, ecx
shl eax, 5
mov ecx, esp
mov dword [ecx + 4], eax
lea eax, [esp + 0xb0]
mov dword [ecx], eax
call fcn.0041f060
mov ecx, dword [0x498f18]
or ecx, 0xdf65cdd
mov dword [0x498f18], ecx
mov dword [esp + 0x54], eax
lea eax, [esp + 0xbc]
lea ecx, [esp + 0xb0]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0043bab0
cmp eax, 0
jl 0x407202
mov eax, dword [0x4995a4]
imul eax, eax, 0x1f813a16
mov dword [0x4995a4], eax
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0xcc]
sub eax, ecx
mov ecx, dword [esp + 0xac]
mov edx, dword [ecx + eax*4]
inc edx
mov dword [ecx + eax*4], edx
mov eax, dword [0x497b90]
and eax, 0x5bb90380
mov ecx, dword [0x4983b4]
add ecx, eax
mov dword [0x4983b4], ecx
mov eax, esp
lea ecx, [esp + 0xb0]
mov dword [eax + 8], ecx
lea ecx, [esp + 0xbc]
mov dword [eax + 4], ecx
mov dword [eax], ecx
call fcn.0044a9b0
mov ecx, dword [0x4995cc]
xor ecx, 0xdcdf25e5
cmp ecx, 0x7858e
mov dword [esp + 0x50], eax
jge 0x4071fd
mov eax, dword [0x4992b8]
inc eax
mov dword [0x4992b8], eax
and eax, 0xc8368c15
cmp eax, 0x2aae8b6c
jg 0x4071f8
mov eax, dword [0x4983dc]
add eax, 0x59770a8d
mov dword [0x4983dc], eax
jmp 0x4071fd
jmp 0x40712c
mov ax, word [0x49a050]
movsx ecx, ax
shl ecx, 0xa
mov edx, dword [0x498eec]
or ecx, edx
or ecx, 0x8fc0d6c6
mov dword [0x498eec], ecx
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0xcc]
sub ecx, edx
shl ecx, 5
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [esp + 0xb0]
mov dword [edx], ecx
call fcn.0044edb0
mov ecx, dword [0x4991f4]
or ecx, 0xfae380b0
mov edx, dword [0x498d14]
xor edx, ecx
mov dword [0x498d14], edx
mov ecx, dword [esp + 0xd0]
mov dword [esp + 0xd4], ecx
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0xd4]
cmp eax, dword [esp + 0xcc]
jle 0x4080fc
mov eax, dword [0x499714]
and eax, 0x90181008
mov dword [0x499714], eax
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0xc4]
mov eax, dword [ecx + eax*4]
mov ecx, dword [esp + 0xcc]
mov edx, dword [esp + 0xb8]
cmp eax, dword [edx + ecx*4]
jb 0x4072e3
mov eax, dword [esp + 0xd4]
sub eax, dword [esp + 0xcc]
sub eax, 1
mov ecx, dword [esp + 0xac]
mov dword [ecx + eax*4], 0xffffffff
jmp 0x4079bb
mov eax, 0xad34431f
mov cx, word [0x49a8e4]
mov dx, cx
and edx, 0x19fb
mov cx, dx
mov word [0x49a8e4], cx
mov edx, dword [0x499304]
mov esi, edx
dec esi
mov dword [0x499304], esi
cmp eax, edx
jge 0x407373
mov eax, 0x2a968eaf
mov ecx, dword [0x499158]
not ecx
mov edx, dword [0x499a98]
inc edx
mov dword [0x499a98], edx
or ecx, edx
cmp eax, ecx
jl 0x40736e
mov eax, 0xdb5fd21a
mov ecx, dword [0x498070]
mov edx, dword [0x499798]
add ecx, edx
mov si, word [0x49abbe]
movsx edx, si
or ecx, edx
cmp eax, ecx
je 0x407369
jmp 0x407369
jmp 0x40736e
jmp 0x407373
mov eax, 0xa7ed2fcb
mov ecx, dword [0x497dd4]
mov edx, ecx
dec edx
mov dword [0x497dd4], edx
or ecx, 0x7b2c
mov si, word [0x49a4ce]
mov dx, si
xor edx, ecx
mov si, dx
mov word [0x49a4ce], si
mov ecx, dword [esp + 0xcc]
mov edx, dword [esp + 0xb8]
mov ecx, dword [edx + ecx*4]
mov dword [esp + 0x70], ecx
mov si, word [0x49a512]
mov cx, si
or ecx, 0x1fca
mov si, cx
mov word [0x49a512], si
movzx ecx, word [esp + 0x70]
mov dword [esp + 0x78], ecx
mov ecx, dword [0x4979e0]
or ecx, 0xfd7813ed
cmp eax, ecx
jge 0x407415
mov eax, dword [0x498e48]
mov ecx, eax
dec ecx
mov dword [0x498e48], ecx
add eax, 0x9d6f312a
or eax, 0x5b2a468b
mov ecx, dword [0x497c2c]
xor ecx, eax
mov dword [0x497c2c], ecx
movzx eax, word [esp + 0x72]
mov dword [esp + 0x74], eax
mov dword [0x49807c], 0x84185e67
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0xc4]
mov eax, dword [ecx + eax*4]
mov ecx, dword [esp + 0x74]
xor edx, edx
div ecx
mov dword [esp + 0x84], eax
mov si, word [0x499bfe]
mov ax, si
inc eax
mov di, ax
mov word [0x499bfe], di
movsx eax, si
or eax, 0x2ea80672
and eax, 0xeeeb2ff6
mov si, word [0x49a8fa]
movsx ecx, si
add ecx, 0x3194517e
mov edx, dword [0x498f78]
mov ebx, edx
dec ebx
mov dword [0x498f78], ebx
sub ecx, edx
cmp eax, ecx
je 0x4074d0
mov eax, 0x8f0adf09
mov cx, word [0x49a32c]
movsx edx, cx
xor edx, 0x200dac
cmp eax, edx
jge 0x4074cb
mov eax, dword [0x4990c0]
sar eax, 8
or eax, 0x1f7efa7b
mov ecx, dword [0x49830c]
sub ecx, eax
mov dword [0x49830c], ecx
jmp 0x4074df
mov eax, dword [0x497864]
or eax, 0x55fdfc69
mov dword [0x497864], eax
mov eax, 0x79702aa1
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0xc4]
mov ecx, dword [edx + ecx*4]
mov edx, dword [esp + 0x74]
mov esi, dword [esp + 0x84]
imul edx, esi
sub ecx, edx
mov dword [esp + 0x7c], ecx
mov di, word [0x49aa98]
mov cx, di
xor ecx, 0xe75e
mov di, cx
mov word [0x49aa98], di
mov ecx, dword [esp + 0x7c]
shl ecx, 0x10
mov dword [esp + 0x7c], ecx
mov dword [0x499424], 0x9d06d841
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0xc4]
movzx ecx, word [edx + ecx*4 - 2]
mov edx, dword [esp + 0x7c]
or edx, ecx
mov dword [esp + 0x7c], edx
mov ecx, dword [0x499060]
add ecx, 0x15d603f0
mov dword [0x499060], ecx
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x78]
imul ecx, edx
mov dword [esp + 0x6c], ecx
mov ecx, dword [0x498c8c]
and ecx, 0xf73477aa
cmp eax, ecx
jle 0x4075a6
mov eax, dword [0x498860]
or eax, 0x8138100c
mov ecx, dword [0x498acc]
imul ecx, eax
mov dword [0x498acc], ecx
mov eax, dword [esp + 0x7c]
cmp eax, dword [esp + 0x6c]
jae 0x4076cb
mov eax, 0xff111499
mov ecx, dword [0x4976e8]
mov edx, dword [0x4990c4]
imul edx, ecx
mov dword [0x4990c4], edx
mov ecx, dword [esp + 0x84]
dec ecx
mov dword [esp + 0x84], ecx
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x7c]
add edx, ecx
mov dword [esp + 0x7c], edx
mov ecx, dword [0x49956c]
mov edx, dword [0x497f98]
or ecx, edx
cmp eax, ecx
jge 0x407622
mov eax, dword [0x4981b8]
inc eax
mov dword [0x4981b8], eax
mov cx, word [0x49aa66]
mov dx, cx
and edx, eax
mov cx, dx
mov word [0x49aa66], cx
jmp 0x407627
xor eax, eax
mov cl, al
mov eax, dword [esp + 0x7c]
cmp eax, dword [esp + 0x70]
mov byte [esp + 0x4b], cl
jb 0x40764c
mov eax, dword [esp + 0x7c]
cmp eax, dword [esp + 0x6c]
setb cl
mov byte [esp + 0x4b], cl
mov al, byte [esp + 0x4b]
test al, 1
jne 0x40765d
jmp 0x40767f
mov eax, dword [esp + 0x84]
add eax, 0xffffffff
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0x70]
add eax, dword [esp + 0x7c]
mov dword [esp + 0x7c], eax
jmp 0x407627
mov ax, word [0x49a17e]
movsx ecx, ax
cmp ecx, 0x8ffd5ff5
jl 0x4076a8
mov eax, dword [0x498d90]
add eax, 0xf8ece9d9
mov dword [0x498d90], eax
jmp 0x4076c6
mov eax, dword [0x4993a4]
inc eax
mov dword [0x4993a4], eax
or eax, 0x6ad3278
mov ecx, dword [0x49939c]
sub ecx, eax
mov dword [0x49939c], ecx
jmp 0x4076cb
mov eax, 0x3f7ffffc
mov cx, word [0x49a792]
movsx edx, cx
imul edx, edx, 0x2c16c775
mov cx, word [0x49a978]
movsx esi, cx
xor esi, 0xffffffff
and edx, esi
cmp eax, edx
je 0x407706
mov eax, dword [0x498514]
and eax, 0x97a3d417
mov dword [0x498514], eax
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x7c]
sub ecx, eax
mov dword [esp + 0x7c], ecx
mov eax, dword [0x499264]
mov ecx, dword [0x4977d4]
xor ecx, eax
mov dword [0x4977d4], ecx
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x74]
xor edx, edx
div ecx
mov dword [esp + 0x88], eax
mov eax, dword [0x4999fc]
imul eax, eax, 0x6060786e
mov dword [0x4999fc], eax
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x88]
imul ecx, edx
sub eax, ecx
mov dword [esp + 0x80], eax
mov eax, dword [0x4985cc]
and eax, 0x8550120
mov dword [0x4985cc], eax
mov eax, dword [esp + 0x80]
shl eax, 0x10
mov dword [esp + 0x80], eax
mov eax, dword [0x499afc]
add eax, 0x46415343
mov dword [0x499afc], eax
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0xc4]
movzx eax, word [ecx + eax*4 - 4]
mov ecx, dword [esp + 0x80]
or ecx, eax
mov dword [esp + 0x80], ecx
mov eax, dword [0x498338]
mov ecx, eax
dec ecx
mov dword [0x498338], ecx
mov ecx, 0x261fd1ac
sub ecx, eax
mov eax, dword [0x4985bc]
add ecx, eax
mov dword [0x498520], ecx
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x78]
imul eax, ecx
mov dword [esp + 0x6c], eax
mov eax, dword [0x498314]
and eax, 0x30653d5e
mov dword [0x498314], eax
mov eax, dword [esp + 0x80]
cmp eax, dword [esp + 0x6c]
jae 0x4078ed
mov eax, dword [0x49872c]
imul eax, eax, 0x204c800
mov dword [0x49872c], eax
mov eax, dword [esp + 0x88]
dec eax
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x80]
add ecx, eax
mov dword [esp + 0x80], ecx
mov eax, dword [0x499650]
sar eax, 9
or eax, 0x5cbc97a2
cmp eax, 0xf5fa9829
jge 0x407866
mov eax, dword [0x4988f4]
imul eax, eax, 0x9f5f48fc
mov dword [0x4988f4], eax
jmp 0x40786b
xor eax, eax
mov cl, al
mov eax, dword [esp + 0x80]
cmp eax, dword [esp + 0x70]
mov byte [esp + 0x4a], cl
jb 0x407896
mov eax, dword [esp + 0x80]
cmp eax, dword [esp + 0x6c]
setb cl
mov byte [esp + 0x4a], cl
mov al, byte [esp + 0x4a]
test al, 1
jne 0x4078a7
jmp 0x4078cf
mov eax, dword [esp + 0x88]
add eax, 0xffffffff
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x70]
add eax, dword [esp + 0x80]
mov dword [esp + 0x80], eax
jmp 0x40786b
mov eax, dword [0x498f64]
mov ecx, 0xc3015e47
sub ecx, eax
and ecx, 0xdd411964
mov eax, dword [0x49833c]
or eax, ecx
mov dword [0x49833c], eax
mov eax, 0x30b25422
mov ecx, dword [0x49981c]
add ecx, 0x40f82c6e
mov dword [0x49981c], ecx
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x80]
sub edx, ecx
mov dword [esp + 0x80], edx
mov ecx, dword [0x498e44]
sar ecx, 1
add ecx, 0x38ac5b3a
sub ecx, 0xd01169ff
cmp eax, ecx
jg 0x407944
mov eax, dword [0x498d1c]
or eax, 0x724485a2
mov dword [0x498d1c], eax
mov eax, dword [esp + 0x84]
shl eax, 0x10
mov ecx, dword [esp + 0x88]
or eax, ecx
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0xcc]
sub ecx, edx
mov edx, dword [esp + 0xac]
mov dword [edx + ecx*4 - 4], eax
mov eax, dword [0x497dc8]
inc eax
mov dword [0x497dc8], eax
cmp eax, 0x4d9af2f8
jge 0x4079b6
mov eax, 0x8f3e01f
mov ecx, dword [0x4983cc]
imul ecx, ecx, 0x3b45c1d9
cmp eax, ecx
jg 0x4079b1
mov eax, dword [0x498f3c]
imul eax, eax, 0x736427e3
mov dword [0x498f3c], eax
jmp 0x4079b6
jmp 0x4079bb
mov eax, dword [0x4993d8]
add eax, 0x244f44e5
mov dword [0x4993d8], eax
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0xcc]
sub eax, ecx
mov ecx, dword [esp + 0xac]
mov edx, dword [ecx + eax*4 - 4]
inc edx
mov dword [ecx + eax*4 - 4], edx
mov eax, dword [0x497a84]
imul eax, eax, 0xc8753dfb
add eax, 0xfc1617c4
mov ecx, dword [0x498e58]
or ecx, eax
mov dword [0x498e58], ecx
mov ax, word [0x49a8da]
mov cx, ax
mov edx, dword [0x497ce0]
mov esi, edx
dec esi
mov dword [0x497ce0], esi
lea ecx, [ecx + edx + 0x79401623]
mov ax, cx
mov word [0x49a24c], ax
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0xcc]
sub ecx, edx
mov edx, dword [esp + 0xac]
mov esi, dword [edx + ecx*4 - 4]
dec esi
mov dword [edx + ecx*4 - 4], esi
mov ecx, dword [0x497fd0]
mov edx, dword [0x49799c]
or ecx, edx
or ecx, 0x809bc65
mov edx, dword [0x49920c]
or edx, 0x14180d4f
cmp ecx, edx
jne 0x407a87
mov dword [0x499a74], 0x17e7e876
jmp 0x407ac8
mov eax, 0xffdefff7
mov ecx, dword [0x49991c]
shl ecx, 8
xor ecx, 0x75841000
cmp eax, ecx
jge 0x407ac3
mov eax, dword [0x4981a0]
imul eax, eax, 0xd1c0d9ab
cmp eax, 0x2c1d8931
jl 0x407abe
jmp 0x407abe
jmp 0x407ac3
jmp 0x407ac8
lea eax, [esp + 0x98]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 0x44], ecx
call fcn.00401570
mov dword [esp + 0xd8], eax
cmp eax, 0
je 0x407afa
jmp 0x4083cc
mov eax, dword [0x498f0c]
and eax, 0xabbe73da
mov dword [0x498f0c], eax
cmp dword [esp + 0xcc], 1
jge 0x407b22
xor eax, eax
mov dword [esp + 0x40], eax
jmp 0x407b3a
mov eax, dword [esp + 0xcc]
sub eax, 1
mov ecx, dword [esp + 0xb8]
mov eax, dword [ecx + eax*4]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x40]
mov ecx, 0xb839448b
mov edx, dword [esp + 0xa0]
mov dword [edx], eax
mov eax, dword [0x4977bc]
add eax, 0x688682c2
mov edx, dword [0x497f54]
dec edx
mov dword [0x497f54], edx
or eax, edx
cmp ecx, eax
jge 0x407b8a
mov ax, word [0x49a396]
mov cx, ax
or ecx, 0xbe56
mov ax, cx
mov word [0x49a396], ax
jmp 0x407b99
mov eax, dword [0x4987f8]
add eax, 0xd9a1ce9
mov dword [0x4987f8], eax
lea eax, [esp + 0x98]
mov ecx, dword [esp + 0xcc]
mov edx, dword [esp + 0xb8]
mov ecx, dword [edx + ecx*4]
mov edx, dword [esp + 0xa0]
mov dword [edx + 4], ecx
mov ecx, dword [0x499a94]
mov edx, ecx
dec edx
mov dword [0x499a94], edx
mov edx, dword [0x4981ec]
imul ecx, edx
imul ecx, ecx, 0x5bafb93c
mov dword [0x4981ec], ecx
mov ecx, dword [esp + 0xd4]
sub ecx, dword [esp + 0xcc]
sub ecx, 1
mov edx, dword [esp + 0xac]
mov ecx, dword [edx + ecx*4]
mov dword [esp], eax
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00439c00
mov dword [esp + 0xd8], eax
cmp eax, 0
je 0x407c1f
jmp 0x4083cc
mov ax, word [0x49a3a4]
mov cx, ax
dec ecx
mov dx, cx
mov word [0x49a3a4], dx
movsx ecx, ax
mov esi, dword [0x497c9c]
shl esi, 6
cmp ecx, esi
jg 0x407c57
mov eax, dword [0x498fb8]
imul eax, eax, 0x7f879df9
mov dword [0x498fb8], eax
lea eax, [esp + 0x8c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 0x3c], ecx
call fcn.00401570
mov dword [esp + 0xd8], eax
cmp eax, 0
je 0x407c89
jmp 0x4083cc
mov ax, word [0x499be4]
mov cx, ax
add ecx, 0xfc884d69
mov ax, cx
mov word [0x499be4], ax
cmp dword [esp + 0xd4], 2
jge 0x407cba
xor eax, eax
mov dword [esp + 0x38], eax
jmp 0x407cd2
mov eax, dword [esp + 0xd4]
sub eax, 2
mov ecx, dword [esp + 0xc4]
mov eax, dword [ecx + eax*4]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x94]
mov dword [ecx], eax
mov dx, word [0x49a6ae]
mov ax, dx
inc eax
mov si, ax
mov word [0x49a6ae], si
movsx eax, dx
and eax, 0xd23d72c7
mov ecx, dword [0x4981a4]
xor eax, ecx
xor eax, 0xe84295c6
mov dword [0x4981a4], eax
cmp dword [esp + 0xd4], 1
jge 0x407d27
xor eax, eax
mov dword [esp + 0x34], eax
jmp 0x407d3f
mov eax, dword [esp + 0xd4]
sub eax, 1
mov ecx, dword [esp + 0xc4]
mov eax, dword [ecx + eax*4]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x94]
mov dword [ecx + 4], eax
mov dword [0x498408], 0x58268c62
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0xc4]
mov eax, dword [ecx + eax*4]
mov ecx, dword [esp + 0x94]
mov dword [ecx + 8], eax
mov eax, dword [0x497ba4]
sar eax, 6
mov ecx, dword [0x498e88]
imul eax, ecx
imul eax, eax, 0x7b606fed
mov dword [0x498e88], eax
lea eax, [esp + 0x98]
lea ecx, [esp + 0x8c]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0043bab0
cmp eax, 0
jg 0x407a08
lea eax, [esp + 0x98]
lea ecx, [esp + 0xb0]
mov edx, dword [0x498160]
imul edx, edx, 0x785e592
mov dword [0x498160], edx
mov edx, dword [esp + 0xd4]
sub edx, dword [esp + 0xcc]
sub edx, 1
mov esi, dword [esp + 0xac]
mov edx, dword [esi + edx*4]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00439c00
mov dword [esp + 0xd8], eax
cmp eax, 0
je 0x407e11
jmp 0x4083cc
lea eax, [esp + 0x98]
mov ecx, dword [0x4999bc]
imul ecx, ecx, 0xf1241991
mov dword [0x4999bc], ecx
mov ecx, dword [esp + 0xd4]
sub ecx, dword [esp + 0xcc]
sub ecx, 1
shl ecx, 5
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0041f060
mov dword [esp + 0xd8], eax
cmp eax, 0
je 0x407e5f
jmp 0x4083cc
lea eax, [esp + 0xbc]
lea ecx, [esp + 0x98]
mov edx, dword [0x49837c]
xor edx, 0xe09a0008
mov dword [0x49837c], edx
mov dword [esp], eax
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0044a9b0
mov dword [esp + 0xd8], eax
cmp eax, 0
je 0x407ea4
jmp 0x4083cc
lea eax, [esp + 0xbc]
xor ecx, ecx
mov edx, dword [0x4981c8]
inc edx
mov dword [0x4981c8], edx
mov esi, dword [0x498674]
or esi, edx
mov dword [0x498674], esi
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 0x30], ecx
call fcn.0043c030
cmp eax, 0
jge 0x4080c2
lea eax, [esp + 0x98]
lea ecx, [esp + 0xb0]
mov dx, word [0x499e8e]
mov si, dx
add esi, 0xdecddc62
mov dx, si
mov word [0x499e8e], dx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0044ade0
mov dword [esp + 0xd8], eax
cmp eax, 0
je 0x407f2e
jmp 0x4083cc
lea eax, [esp + 0x98]
mov ecx, dword [0x497838]
sar ecx, 3
add ecx, 0xc1eaabab
mov edx, dword [0x498764]
sub edx, ecx
mov dword [0x498764], edx
mov ecx, dword [esp + 0xd4]
sub ecx, dword [esp + 0xcc]
sub ecx, 1
shl ecx, 5
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0041f060
mov dword [esp + 0xd8], eax
cmp eax, 0
je 0x407f87
jmp 0x4083cc
mov eax, 0x200226
mov ecx, dword [0x49897c]
imul ecx, ecx, 0x9c500fde
and ecx, 0xde6e9cca
cmp eax, ecx
jle 0x407fcc
mov eax, dword [0x4991d8]
not eax
mov ecx, dword [0x498cb8]
sar ecx, 4
imul ecx, ecx, 0x807b026b
add eax, ecx
mov ecx, dword [0x499780]
and ecx, eax
mov dword [0x499780], ecx
lea eax, [esp + 0xbc]
lea ecx, [esp + 0x98]
mov dword [esp], eax
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00432eb0
mov dword [esp + 0xd8], eax
cmp eax, 0
je 0x407fff
jmp 0x4083cc
mov eax, dword [0x4990a4]
add eax, 0xc30131e7
mov ecx, dword [0x49855c]
and ecx, 0xeeb816f1
mov edx, dword [0x498914]
xor ecx, edx
cmp eax, ecx
jl 0x40803d
mov ax, word [0x499ee4]
mov cx, ax
xor ecx, 0x2adc
mov ax, cx
mov word [0x499ee4], ax
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0xcc]
sub eax, ecx
mov ecx, dword [esp + 0xac]
mov edx, dword [ecx + eax*4 - 4]
dec edx
mov dword [ecx + eax*4 - 4], edx
mov eax, dword [0x499a5c]
shl eax, 6
imul eax, eax, 0xcc5725e0
cmp eax, 0x67855e25
jg 0x40808a
mov eax, dword [0x498704]
and eax, 0xa0cabfea
mov dword [0x498704], eax
jmp 0x4080bd
mov eax, 0x8b9bf29b
mov ecx, dword [0x498dd0]
or ecx, 0x6a6382b5
cmp eax, ecx
jge 0x4080b8
mov eax, dword [0x498a58]
dec eax
mov dword [0x498a58], eax
or eax, 0x620bdfeb
mov dword [0x498270], eax
jmp 0x4080bd
jmp 0x4080c2
mov eax, dword [0x498980]
dec eax
mov dword [0x498980], eax
imul eax, eax, 0x7bd2d888
add eax, 0x97c928a7
mov ecx, dword [0x4981d8]
and ecx, eax
mov dword [0x4981d8], ecx
mov eax, dword [esp + 0xd4]
add eax, 0xffffffff
mov dword [esp + 0xd4], eax
jmp 0x407274
mov eax, dword [0x497e28]
dec eax
mov dword [0x497e28], eax
xor eax, 0x3a49bb02
mov ecx, dword [0x497c14]
sub ecx, eax
mov dword [0x497c14], ecx
cmp dword [esp + 0xdc], 0
je 0x4081b8
mov ax, word [0x49a146]
mov cx, ax
inc ecx
mov ax, cx
mov word [0x49a146], ax
mov ax, word [0x49a770]
mov dx, ax
imul edx, ecx
mov ax, dx
mov word [0x49a770], ax
mov ecx, dword [esp + 0xdc]
mov edx, esp
lea esi, [esp + 0xa4]
mov dword [edx + 4], esi
mov dword [edx], ecx
call fcn.0044ade0
mov ecx, dword [0x499388]
add ecx, 0x136181f4
mov dword [0x499388], ecx
mov ecx, dword [esp + 0xe4]
mov ecx, dword [ecx]
mov edx, dword [esp + 0xe8]
mov edx, dword [edx]
imul ecx, edx
mov edx, dword [esp + 0xdc]
mov dword [edx], ecx
mov di, word [0x49a2fc]
mov cx, di
imul ecx, ecx, 0x2c000
mov di, cx
mov word [0x49a2fc], di
mov dword [esp + 0x2c], eax
mov eax, 0x366bfc79
mov cx, word [0x49ad2e]
mov dx, cx
dec edx
mov si, dx
mov word [0x49ad2e], si
movsx edx, cx
mov edi, dword [0x497cc4]
imul edx, edi
cmp eax, edx
je 0x408214
mov eax, dword [0x497c4c]
mov ecx, eax
dec ecx
mov dword [0x497c4c], ecx
or eax, 0xaf9b
mov dx, word [0x49a166]
mov cx, dx
add ecx, eax
mov dx, cx
mov word [0x49a166], dx
jmp 0x408223
mov eax, dword [0x498264]
add eax, 0x577bbfea
mov dword [0x498264], eax
cmp dword [esp + 0xe0], 0
je 0x4083b9
mov eax, dword [0x4991b8]
imul eax, eax, 0xc3a0d3b9
mov ecx, dword [0x497d0c]
add ecx, 0x2bf9f4ce
add ecx, 0x133cc3f8
cmp eax, ecx
je 0x408260
mov dword [0x497eb0], 0x66cb1117
mov eax, 0x77dfefb1
mov ecx, dword [esp + 0xc8]
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [esp + 0xbc]
mov dword [edx], ecx
mov dword [esp + 0x28], eax
call fcn.0044edb0
mov ecx, dword [0x498288]
inc ecx
mov dword [0x498288], ecx
mov edx, dword [esp + 0x28]
cmp edx, ecx
mov dword [esp + 0x24], eax
jle 0x4082b8
mov ax, word [0x49a380]
mov cx, ax
and ecx, 0x97bf
mov ax, cx
mov word [0x49a380], ax
mov eax, 0xbcb98fcb
mov ecx, dword [esp + 0xe0]
mov edx, esp
lea esi, [esp + 0xbc]
mov dword [edx + 4], esi
mov dword [edx], ecx
mov dword [esp + 0x20], eax
call fcn.0044ade0
mov di, word [0x49a154]
mov cx, di
and ecx, 0xefaf
mov di, cx
mov word [0x49a154], di
mov ecx, dword [esp + 0xe4]
mov ecx, dword [ecx]
mov edx, dword [esp + 0xe0]
mov dword [edx], ecx
mov di, word [0x49a636]
mov cx, di
dec ecx
mov di, cx
mov word [0x49a636], di
movsx ecx, di
mov edx, dword [esp + 0x20]
cmp edx, ecx
mov dword [esp + 0x1c], eax
jge 0x408351
mov eax, dword [0x498fcc]
shl eax, 8
mov ecx, dword [0x498104]
and eax, ecx
mov ecx, dword [0x498cb0]
xor eax, ecx
xor eax, 0xf67ed49c
mov dword [0x498cb0], eax
xor eax, eax
mov ecx, dword [esp + 0xe0]
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 0x18], eax
call fcn.0043c030
cmp eax, 0
jne 0x408384
mov eax, dword [esp + 0xe0]
mov dword [eax], 1
mov ax, word [0x499b20]
mov cx, ax
inc ecx
mov dx, cx
mov word [0x499b20], dx
movsx ecx, ax
mov esi, dword [0x497e2c]
mov edi, esi
dec edi
mov dword [0x497e2c], edi
mov edi, 0xc363e506
sub edi, esi
xor ecx, edi
mov dword [0x498c9c], ecx
mov eax, dword [0x4991c0]
mov ecx, dword [0x498954]
xor ecx, eax
mov dword [0x498954], ecx
mov eax, esp
lea ecx, [esp + 0x8c]
mov dword [eax + 0x10], ecx
lea ecx, [esp + 0x98]
mov dword [eax + 0xc], ecx
lea ecx, [esp + 0xa4]
mov dword [eax + 8], ecx
lea ecx, [esp + 0xb0]
mov dword [eax + 4], ecx
lea ecx, [esp + 0xbc]
mov dword [eax], ecx
mov dword [eax + 0x14], 0
call fcn.00442540
mov eax, dword [0x4980a8]
or eax, 0x66002400
mov dword [0x4980a8], eax
mov eax, dword [esp + 0xd8]
mov dword [esp + 0xec], eax
mov eax, dword [esp + 0xec]
add esp, 0xf0
pop esi
pop edi
pop ebx
ret