Function at 0x485e70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x98d270]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x3e4]
cmp eax, dword [ecx + 8]
jbe 0x488954
sub esp, 0x464
lea edi, [esp + 0x480]
xor eax, eax
call fcn.00468c2b
mov ecx, dword [esp + 0x46c]
mov edx, dword [esp + 0x468]
xor ebx, ebx
xor ebp, ebp
mov esi, 0xffffffff
xor edi, edi
mov ecx, 0xffffffff
mov dword [esp + 0xe8], ecx
mov ecx, 0xffffffff
mov dword [esp + 0x80], ecx
xor ecx, ecx
mov dword [esp + 0xb4], ecx
xor ecx, ecx
mov byte [esp + 0x36], cl
xor edx, edx
mov byte [esp + 0x37], dl
mov edx, 0xffffffff
mov dword [esp + 0xc0], edx
xor edx, edx
mov dword [esp + 0xc8], edx
xor edx, edx
mov dword [esp + 0xe0], edx
xor edx, edx
mov dword [esp + 0x3f4], edx
xor ebx, ebx
mov dword [esp + 0xa8], ebx
xor ebx, ebx
mov dword [esp + 0xa0], ebx
xor ebx, ebx
mov dword [esp + 0x40c], ebx
mov ebx, dword [esp + 0x474]
mov dword [esp + 0xfc], ebx
mov ebx, dword [esp + 0x470]
mov dword [esp + 0x424], ebx
mov ecx, dword [esp + 0x46c]
mov edx, dword [esp + 0x468]
xor ebx, ebx
jmp 0x485f94
mov edx, dword [esp + 0x3fc]
mov ebx, dword [esp + 0x88]
mov ebp, dword [esp + 0x84]
mov esi, dword [esp + 0x8c]
mov dword [esp + 0x3f4], eax
mov dword [esp + 0xfc], edi
mov dword [esp + 0x424], ecx
mov ecx, dword [esp + 0x98]
mov edi, dword [esp + 0x3f0]
mov dword [esp + 0x84], ebp
mov dword [esp + 0x3f0], edi
mov dword [esp + 0xf8], ecx
mov dword [esp + 0x420], edx
mov dword [esp + 0x88], ebx
mov dword [esp + 0x8c], esi
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.004816d0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0xf8]
mov edx, ecx
sub ecx, eax
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x10]
mov esi, dword [esp + 8]
cmp edx, ecx
jb 0x48894e
mov edx, dword [esp + 0xc]
cmp edx, ecx
ja 0x488947
mov dword [esp + 0x9c], ebp
mov dword [esp + 0xac], edx
mov dword [esp + 0xf8], ecx
mov dword [esp + 0x410], esi
mov dword [esp + 0x98], eax
mov dword [esp + 0x3fc], ebx
mov eax, dword [esp + 0x424]
mov dword [esp], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 4], eax
call fcn.00485bc0
mov eax, dword [esp + 0xf8]
mov ecx, dword [esp + 0xac]
sub eax, ecx
mov edx, eax
neg eax
sar eax, 0x1f
and eax, ecx
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x420]
add eax, ebp
mov ebp, dword [esp + 0x10]
mov dword [esp + 0x424], ebp
mov esi, dword [esp + 0x14]
mov dword [esp + 0x94], esi
test ebx, ebx
jne 0x4880f8
mov edi, dword [esp + 0x9c]
test edi, edi
je 0x486f50
mov dword [esp + 0xfc], edx
mov dword [esp + 0x400], eax
mov ecx, edi
and edi, 0xffff
cmp edi, 0x106
jg 0x486889
cmp edi, 0x23
jg 0x486629
cmp edi, 0x21
jg 0x48652b
cmp edi, 0x17
jne 0x4861a5
mov dword [esp + 0xe4], ebx
cmp esi, 3
jl 0x486101
cmp word [ebp], 0x5455
jne 0x486101
cmp byte [ebp + 2], 0x43
jne 0x486101
lea ecx, [esi - 3]
mov edi, ecx
neg ecx
sar ecx, 0x1f
and ecx, 3
mov eax, dword [0x95d66c]
add ecx, ebp
jmp 0x486f34
mov dword [esp], ebp
mov dword [esp + 4], esi
call fcn.00488960
movzx eax, byte [esp + 0xc]
test al, al
je 0x48617a
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x94]
cmp ecx, edx
ja 0x488942
mov esi, edx
sub esi, ecx
mov eax, esi
neg eax
sar eax, 0x1f
and eax, ecx
mov edi, dword [esp + 0x424]
lea ebp, [eax + edi]
mov edx, dword [esp + 0xfc]
mov eax, dword [esp + 0x3f4]
mov ebx, dword [esp + 0xe4]
mov dword [esp + 0x84], ecx
mov dword [esp + 0x3f0], edi
mov edi, esi
mov ecx, ebp
mov ebp, dword [esp + 0x3f0]
mov esi, dword [esp + 0x94]
jmp 0x486f34
mov ebx, dword [0x95d930]
mov edx, dword [esp + 0xfc]
mov ebp, dword [esp + 0x424]
mov esi, dword [esp + 0x94]
mov eax, dword [esp + 0x3f4]
mov edi, esi
mov ecx, ebp
jmp 0x486f34
cmp edi, 0x18
jl 0x486c54
cmp ecx, 0x18
je 0x4861bd
cmp ecx, 0x1a
je 0x4861bd
cmp ecx, 0x1b
jne 0x4861e6
test esi, esi
je 0x4861e1
cmp byte [ebp], 0x5a
jne 0x4861e1
lea ecx, [esi - 1]
mov edi, ecx
neg ecx
sar ecx, 0x1f
and ecx, 1
add ecx, ebp
mov eax, dword [0x95d66c]
jmp 0x486f34
cmp ecx, 0x1b
je 0x4861eb
cmp ecx, 0x20
jne 0x486257
cmp esi, 6
jge 0x486206
mov ebx, dword [0x95d930]
mov eax, dword [esp + 0x3f4]
mov edi, esi
mov ecx, ebp
jmp 0x486f34
cmp byte [ebp + 3], 0x3a
je 0x486222
mov ebx, dword [0x95d930]
mov eax, dword [esp + 0x3f4]
mov edi, esi
mov ecx, ebp
jmp 0x486f34
lea ecx, [esi - 6]
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 6
lea edi, [ebp + 1]
lea eax, [ebp + 4]
add ecx, ebp
mov dword [esp + 0x120], eax
lea eax, [0x70a57c]
mov dword [esp + 0x404], eax
mov eax, dword [esp + 0x120]
jmp 0x486412
cmp ecx, 0x1f
je 0x486261
cmp ecx, 0x1a
jne 0x4862bb
cmp esi, 3
jge 0x48627c
mov ebx, dword [0x95d930]
mov eax, dword [esp + 0x3f4]
mov edi, esi
mov ecx, ebp
jmp 0x486f34
lea ecx, [esi - 3]
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 3
lea edi, [ebp + 1]
add ecx, ebp
mov dword [esp + 0x130], eax
lea eax, [0x70a57c]
mov dword [esp + 0x404], eax
lea eax, [0x70a57c]
mov dword [esp + 0x414], eax
mov eax, dword [esp + 0x130]
jmp 0x48640b
cmp ecx, 0x1c
je 0x4862c5
cmp ecx, 0x21
jne 0x486341
cmp esi, 9
jge 0x4862e0
mov ebx, dword [0x95d930]
mov eax, dword [esp + 0x3f4]
mov edi, esi
mov ecx, ebp
jmp 0x486f34
cmp byte [ebp + 3], 0x3a
jne 0x4862ec
cmp byte [ebp + 6], 0x3a
je 0x486302
mov ebx, dword [0x95d930]
mov eax, dword [esp + 0x3f4]
mov edi, esi
mov ecx, ebp
jmp 0x486f34
lea ecx, [esi - 9]
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 9
lea edi, [ebp + 1]
lea eax, [ebp + 4]
lea edx, [ebp + 7]
add ecx, ebp
mov dword [esp + 0x404], edx
mov edx, dword [esp + 0xfc]
mov dword [esp + 0x138], eax
mov eax, ecx
mov ecx, ebx
mov ebx, eax
mov eax, dword [esp + 0x138]
jmp 0x4863ed
cmp ecx, 0x19
je 0x48634b
cmp ecx, 0x1e
jne 0x4863a2
cmp esi, 7
jge 0x486366
mov ebx, dword [0x95d930]
mov eax, dword [esp + 0x3f4]
mov edi, esi
mov ecx, ebp
jmp 0x486f34
lea ecx, [esi - 7]
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 7
lea edi, [ebp + 1]
lea eax, [ebp + 3]
lea edx, [ebp + 5]
add ecx, ebp
mov dword [esp + 0x404], edx
mov edx, dword [esp + 0xfc]
mov dword [esp + 0x148], eax
mov eax, ecx
mov ecx, ebx
mov ebx, eax
mov eax, dword [esp + 0x148]
jmp 0x4863ed
cmp esi, 5
jge 0x4863bd
mov ebx, dword [0x95d930]
mov eax, dword [esp + 0x3f4]
mov edi, esi
mov ecx, ebp
jmp 0x486f34
lea ecx, [esi - 5]
mov ebx, ecx
neg ebx
sar ebx, 0x1f
and ebx, 5
lea edi, [ebp + 1]
lea eax, [ebp + 3]
add ebx, ebp
mov dword [esp + 0x140], eax
lea eax, [0x70a57c]
mov dword [esp + 0x404], eax
mov eax, dword [esp + 0x140]
mov dword [esp + 0x414], eax
mov eax, dword [esp + 0x400]
mov dword [esp + 0x128], ecx
mov ecx, ebx
mov ebx, dword [esp + 0x128]
mov eax, dword [esp + 0x414]
mov dword [esp + 0x414], eax
mov dword [esp + 0xf8], ebx
mov dword [esp + 0x420], ecx
mov dword [esp], edi
mov dword [esp + 4], 2
mov byte [esp + 8], 1
call fcn.00485ab0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xdc], ecx
test eax, eax
je 0x486453
xor edx, edx
jmp 0x486482
mov eax, dword [esp + 0x414]
mov dword [esp], eax
mov dword [esp + 4], 2
mov byte [esp + 8], 1
call fcn.00485ab0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, eax
mov eax, ecx
mov ecx, dword [esp + 0xdc]
test eax, eax
je 0x48648a
xor ebx, ebx
jmp 0x4864c7
mov dword [esp + 0xc4], edx
mov eax, dword [esp + 0x404]
mov dword [esp], eax
mov dword [esp + 4], 2
mov byte [esp + 8], 1
call fcn.00485ab0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0xc4]
mov ebx, eax
mov eax, ecx
mov ecx, dword [esp + 0xdc]
imul ecx, ecx, 0x3c
add ecx, edx
imul ecx, ecx, 0x3c
mov edx, dword [esp + 0x424]
movzx ebp, byte [edx]
add ecx, ebx
xchg ebp, eax
cmp al, 0x2b
xchg ebp, eax
je 0x4864f3
xchg ebp, eax
cmp al, 0x2d
xchg ebp, eax
jne 0x4864ed
neg ecx
jmp 0x4864f3
mov eax, dword [0x95d930]
mov edx, dword [esp + 0xfc]
mov ebp, dword [esp + 0x424]
mov esi, dword [esp + 0x94]
mov ebx, eax
mov dword [esp + 0x80], ecx
mov edi, dword [esp + 0xf8]
mov ecx, dword [esp + 0x420]
mov eax, dword [esp + 0x3f4]
jmp 0x486f34
cmp edi, 0x22
jne 0x4865e9
sar ecx, 0x10
and ecx, 0xfff
lea ebx, [ecx + 1]
cmp esi, ebx
jge 0x48655a
mov ebx, dword [0x95d930]
mov eax, dword [esp + 0x3f4]
mov edi, esi
mov ecx, ebp
jmp 0x486f34
mov dword [esp + 0x78], ecx
mov dword [esp + 0xb8], ebx
lea eax, [0x773228]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
call fcn.00490bf0
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x78]
sub eax, ecx
lea esi, [eax - 1]
mov eax, esi
neg eax
sar eax, 0x1f
mov ecx, dword [esp + 0xb8]
and ecx, eax
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x10]
mov ebp, dword [esp + 0x424]
add ecx, ebp
mov edi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp + 0xa8], edx
mov dword [esp + 0x40c], edi
mov dword [esp + 0xb4], eax
mov edx, dword [esp + 0xfc]
mov eax, dword [esp + 0x3f4]
mov edi, esi
mov esi, dword [esp + 0x94]
jmp 0x486f34
cmp esi, 2
jl 0x486619
movzx edi, byte [ebp]
xchg edi, eax
cmp al, 0x2e
xchg edi, eax
je 0x486600
xchg edi, eax
cmp al, 0x2c
xchg edi, eax
jne 0x486619
movzx edi, byte [ebp + 1]
xchg edi, eax
cmp al, 0x30
xchg edi, eax
jb 0x486619
xchg edi, eax
cmp al, 0x39
xchg edi, eax
ja 0x486619
xor ecx, ecx
jmp 0x48887b
mov eax, dword [esp + 0x3f4]
mov edi, esi
mov ecx, ebp
jmp 0x486f34
cmp edi, 0x102
jg 0x486717
cmp edi, 0x101
je 0x4866b0
cmp edi, 0x102
jne 0x486c54
mov eax, dword [0x95e2a0]
mov ecx, dword [0x95e2a4]
mov edx, dword [0x95e2a8]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.00482480
mov eax, dword [esp + 0x14]
inc eax
mov ebx, dword [esp + 0x20]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0xfc]
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0x3f4]
mov edi, esi
mov ecx, ebp
mov ebp, dword [esp + 0x424]
mov esi, dword [esp + 0x94]
jmp 0x486f34
mov eax, dword [0x95e2b0]
mov ecx, dword [0x95e2b4]
mov edx, dword [0x95e2b8]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.00482480
mov eax, dword [esp + 0x14]
inc eax
mov ebx, dword [esp + 0x20]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0xfc]
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0x3f4]
mov edi, esi
mov ecx, ebp
mov ebp, dword [esp + 0x424]
mov esi, dword [esp + 0x94]
jmp 0x486f34
cmp edi, 0x104
jle 0x4867ed
cmp edi, 0x105
je 0x486792
cmp edi, 0x106
jne 0x486c54
mov eax, dword [0x95e290]
mov ecx, dword [0x95e294]
mov edx, dword [0x95e298]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.00482480
mov ebx, dword [esp + 0x20]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0xfc]
mov eax, dword [esp + 0x3f4]
mov edi, esi
mov ecx, ebp
mov ebp, dword [esp + 0x424]
mov esi, dword [esp + 0x94]
jmp 0x486f34
mov eax, dword [0x95e280]
mov ecx, dword [0x95e284]
mov edx, dword [0x95e288]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.00482480
mov ebx, dword [esp + 0x20]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0xfc]
mov eax, dword [esp + 0x3f4]
mov edi, esi
mov ecx, ebp
mov ebp, dword [esp + 0x424]
mov esi, dword [esp + 0x94]
jmp 0x486f34
mov dword [esp], ebp
mov dword [esp + 4], esi
cmp ecx, 0x104
sete al
mov byte [esp + 8], al
call fcn.00485ab0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0xc]
test eax, eax
je 0x486822
mov edx, dword [esp + 0xa8]
mov ebx, dword [esp + 0x40c]
jmp 0x486845
lea edx, [ecx - 1]
cmp edx, 0xb
jbe 0x486837
mov edx, 5
lea ebx, [0x70ae80]
jmp 0x486845
mov edx, dword [esp + 0xa8]
mov ebx, dword [esp + 0x40c]
mov ebp, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
mov dword [esp + 0xa8], edx
mov dword [esp + 0xc0], ecx
mov edi, esi
mov ecx, ebp
mov dword [esp + 0x40c], ebx
mov edx, dword [esp + 0xfc]
mov ebp, dword [esp + 0x424]
mov esi, dword [esp + 0x94]
mov ebx, eax
mov eax, dword [esp + 0x3f4]
jmp 0x486f34
cmp edi, 0x20c
jg 0x486b30
cmp edi, 0x10b
jg 0x486945
cmp edi, 0x109
jle 0x4868bd
mov ebx, esi
mov edi, ebp
xor ebx, ebx
mov dword [esp + 0xd8], ebx
mov ebx, esi
jmp 0x48878b
cmp ecx, 0x108
jne 0x4868ec
test esi, esi
je 0x4868e6
cmp byte [ebp], 0x20
jne 0x4868e0
lea ebx, [esi - 1]
mov edi, ebx
neg ebx
sar ebx, 0x1f
and ebx, 1
add ebx, ebp
jmp 0x4868f0
mov edi, esi
mov ebx, ebp
jmp 0x4868f0
mov edi, esi
mov ebx, ebp
jmp 0x4868f0
mov edi, esi
mov ebx, ebp
mov dword [esp], ebx
mov dword [esp + 4], edi
cmp ecx, 0x109
sete al
mov byte [esp + 8], al
call fcn.00485ab0
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0xfc]
mov dword [esp + 0xe8], eax
mov eax, dword [esp + 0x3f4]
mov edi, esi
mov ecx, ebp
mov ebp, dword [esp + 0x424]
mov esi, dword [esp + 0x94]
jmp 0x486f34
cmp edi, 0x113
jne 0x4869e6
cmp esi, 4
jl 0x486962
movzx ecx, byte [ebp]
add ecx, 0xffffffd0
cmp cl, 9
jbe 0x486978
mov ebx, dword [0x95d930]
mov eax, dword [esp + 0x3f4]
mov edi, esi
mov ecx, ebp
jmp 0x486f34
lea eax, [0x773220]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], 4
call fcn.00490d80
mov eax, dword [esp + 0x94]
lea esi, [eax - 4]
mov ecx, esi
neg ecx
sar ecx, 0x1f
and ecx, 4
mov edx, dword [esp + 0x424]
lea ebp, [ecx + edx]
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xfc]
mov dword [esp + 0x88], ebx
mov eax, dword [esp + 0x3f4]
mov ebx, ecx
mov edi, esi
mov ecx, ebp
mov ebp, dword [esp + 0x424]
mov esi, dword [esp + 0x94]
jmp 0x486f34
cmp edi, 0x114
jne 0x486aa9
cmp esi, 2
jge 0x486a0d
mov ebx, dword [0x95d930]
mov eax, dword [esp + 0x3f4]
mov edi, esi
mov ecx, ebp
jmp 0x486f34
lea eax, [0x773220]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], 2
call fcn.00490d80
mov eax, dword [esp + 0x94]
lea ecx, [eax - 2]
mov edx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 2
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x424]
add ecx, ebp
mov esi, dword [esp + 0xc]
test ebx, ebx
je 0x486a73
mov dword [esp + 0x88], esi
mov eax, dword [esp + 0x3f4]
mov edi, edx
mov edx, dword [esp + 0xfc]
mov esi, dword [esp + 0x94]
jmp 0x486f34
cmp esi, 0x45
jl 0x486a80
add esi, 0x76c
jmp 0x486a86
add esi, 0x7d0
mov dword [esp + 0x88], esi
mov eax, dword [esp + 0x3f4]
mov edi, edx
mov edx, dword [esp + 0xfc]
mov esi, dword [esp + 0x94]
jmp 0x486f34
cmp edi, 0x20c
jne 0x486c54
mov dword [esp], ebp
mov dword [esp + 4], esi
mov byte [esp + 8], 0
call fcn.00485ab0
mov eax, dword [esp + 0xc]
cmp eax, 0x18
jb 0x486adc
mov ecx, 4
lea edx, [0x70ab55]
jmp 0x486aea
mov ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0x40c]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x3f4]
mov edi, esi
mov ecx, ebp
mov dword [esp + 0x40c], edx
mov edx, dword [esp + 0xfc]
mov ebp, dword [esp + 0x424]
mov esi, dword [esp + 0x94]
jmp 0x486f34
cmp edi, 0x210
jle 0x486e2a
cmp edi, 0x212
jle 0x486c64
cmp edi, 0x215
jne 0x486bce
cmp esi, 2
jge 0x486b6b
mov ebx, dword [0x95d930]
mov eax, dword [esp + 0x3f4]
mov edi, esi
mov ecx, ebp
jmp 0x486f34
lea ecx, [esi - 2]
mov edi, ecx
neg ecx
sar ecx, 0x1f
and ecx, 2
add ecx, ebp
cmp word [ebp], 0x4d41
jne 0x486b9b
mov dword [esp + 0x110], eax
mov eax, 1
mov byte [esp + 0x37], al
mov eax, dword [esp + 0x110]
jmp 0x486bc2
cmp word [ebp], 0x4d50
jne 0x486bbc
mov dword [esp + 0x118], eax
mov eax, 1
mov byte [esp + 0x36], al
mov eax, dword [esp + 0x118]
jmp 0x486bc2
mov ebx, dword [0x95d930]
mov eax, dword [esp + 0x3f4]
jmp 0x486f34
cmp edi, 0x216
jne 0x486c54
cmp esi, 2
jge 0x486bf1
mov ebx, dword [0x95d930]
mov eax, dword [esp + 0x3f4]
mov edi, esi
mov ecx, ebp
jmp 0x486f34
lea ecx, [esi - 2]
mov edi, ecx
neg ecx
sar ecx, 0x1f
and ecx, 2
add ecx, ebp
cmp word [ebp], 0x6d61
jne 0x486c21
mov dword [esp + 0x100], eax
mov eax, 1
mov byte [esp + 0x37], al
mov eax, dword [esp + 0x100]
jmp 0x486c48
cmp word [ebp], 0x6d70
jne 0x486c42
mov dword [esp + 0x108], eax
mov eax, 1
mov byte [esp + 0x36], al
mov eax, dword [esp + 0x108]
jmp 0x486c48
mov ebx, dword [0x95d930]
mov eax, dword [esp + 0x3f4]
jmp 0x486f34
mov eax, dword [esp + 0x3f4]
mov edi, esi
mov ecx, ebp
jmp 0x486f34
mov dword [esp], ebp
mov dword [esp + 4], esi
cmp ecx, 0x212
sete al
mov byte [esp + 8], al
call fcn.00485ab0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
test eax, eax
je 0x486cbf
mov ebp, dword [esp + 0x424]
mov esi, dword [esp + 0x94]
mov dword [esp + 0xa0], ecx
mov edi, ebx
mov ecx, edx
mov edx, dword [esp + 0xfc]
mov ebx, eax
mov eax, dword [esp + 0x3f4]
jmp 0x486f34
cmp ecx, 0x3c
jb 0x486d0b
mov ebp, dword [esp + 0x424]
mov esi, dword [esp + 0x94]
mov edi, 6
mov dword [esp + 0xa8], edi
mov dword [esp + 0xa0], ecx
mov edi, ebx
mov ecx, edx
lea edx, [0x70b268]
mov dword [esp + 0x40c], edx
mov edx, dword [esp + 0xfc]
mov ebx, eax
mov eax, dword [esp + 0x3f4]
jmp 0x486f34
cmp ebx, 2
jl 0x486e10
movzx ebp, byte [edx]
xchg ebp, eax
cmp al, 0x2e
xchg ebp, eax
je 0x486d29
xchg ebp, eax
cmp al, 0x2c
xchg ebp, eax
jne 0x486df6
movzx ebp, byte [edx + 1]
add ebp, 0xffffffd0
xchg ebp, eax
cmp al, 9
xchg ebp, eax
jbe 0x486d51
mov ebp, dword [esp + 0xa8]
mov esi, dword [esp + 0xb4]
mov edi, dword [esp + 0x40c]
jmp 0x4886bf
mov dword [esp + 0xf4], ecx
mov dword [esp + 0x408], edx
mov dword [esp + 0xa4], ebx
mov dword [esp + 0xf0], eax
mov eax, dword [esp + 0x3fc]
mov dword [esp], eax
mov ecx, dword [esp + 0x98]
mov dword [esp + 4], ecx
call fcn.004816d0
mov eax, dword [esp + 0x10]
and eax, 0xffff
cmp eax, 0x22
je 0x486d9a
cmp eax, 0x23
jne 0x486dde
mov edx, dword [esp + 0xfc]
mov ebp, dword [esp + 0x424]
mov esi, dword [esp + 0x94]
mov eax, dword [esp + 0xf4]
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x3f4]
mov ebx, dword [esp + 0xf0]
mov edi, dword [esp + 0xa4]
mov ecx, dword [esp + 0x408]
jmp 0x486f34
mov eax, dword [esp + 0x408]
mov ecx, dword [esp + 0xa4]
mov edx, 2
jmp 0x488703
mov ebp, dword [esp + 0xa8]
mov esi, dword [esp + 0xb4]
mov edi, dword [esp + 0x40c]
jmp 0x4886bf
mov ebp, dword [esp + 0xa8]
mov esi, dword [esp + 0xb4]
mov edi, dword [esp + 0x40c]
jmp 0x4886bf
cmp edi, 0x20e
jg 0x486eb6
mov dword [esp], ebp
mov dword [esp + 4], esi
cmp ecx, 0x20e
sete al
mov byte [esp + 8], al
call fcn.00485ab0
mov eax, dword [esp + 0xc]
cmp eax, 0xc
jbe 0x486e65
mov ecx, 4
lea edx, [0x70ab55]
jmp 0x486e73
mov ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0x40c]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x3f4]
mov edi, esi
mov ecx, ebp
mov dword [esp + 0x40c], edx
mov edx, dword [esp + 0xfc]
mov ebp, dword [esp + 0x424]
mov esi, dword [esp + 0x94]
jmp 0x486f34
mov dword [esp], ebp
mov dword [esp + 4], esi
cmp ecx, 0x210
sete al
mov byte [esp + 8], al
call fcn.00485ab0
mov eax, dword [esp + 0xc]
cmp eax, 0x3c
jb 0x486ee5
mov ecx, 6
lea edx, [0x70b262]
jmp 0x486ef3
mov ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0x40c]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0x3f4]
mov edi, esi
mov ecx, ebp
mov dword [esp + 0x40c], edx
mov edx, dword [esp + 0xfc]
mov ebp, dword [esp + 0x424]
mov esi, dword [esp + 0x94]
mov edx, dword [esp + 0xa8]
test edx, edx
jne 0x48848a
test ebx, ebx
je 0x485f55
jmp 0x4882d8
test esi, esi
jne 0x487ef6
movzx edx, byte [esp + 0x36]
test dl, dl
je 0x486f72
mov edx, dword [esp + 0xe0]
cmp edx, 0xc
jge 0x486f79
add edx, 0xc
jmp 0x486f89
mov edx, dword [esp + 0xe0]
movzx ebx, byte [esp + 0x37]
test bl, bl
je 0x486f89
cmp edx, 0xc
jne 0x486f89
xor edx, edx
mov ebx, dword [esp + 0x8c]
test ebx, ebx
jl 0x48758d
mov eax, dword [esp + 0x88]
test eax, 3
jne 0x487036
mov edi, 0x51eb851f
mov ecx, edx
imul edi
mov dword [esp + 0xfc], edx
mov eax, dword [esp + 0x88]
sar eax, 0x1f
sar edx, 5
sub edx, eax
imul edx, edx, 0x64
mov esi, dword [esp + 0x88]
cmp esi, edx
jne 0x486fed
mov edx, dword [esp + 0xfc]
sar edx, 7
sub edx, eax
imul edx, edx, 0x190
cmp esi, edx
jne 0x487025
cmp ebx, 0x3c
jne 0x487000
mov edx, ebx
mov eax, 2
mov ebx, 0x1d
jmp 0x48700d
jle 0x487007
lea edx, [ebx - 1]
jmp 0x487009
mov edx, ebx
xor eax, eax
xor ebx, ebx
mov esi, dword [esp + 0x94]
mov edi, ebx
mov ebx, edx
mov edx, ecx
mov ecx, eax
mov eax, dword [esp + 0x88]
jmp 0x48703a
mov eax, esi
mov edx, ecx
mov esi, dword [esp + 0x94]
xor ecx, ecx
xor edi, edi
jmp 0x48703a
xor ecx, ecx
xor edi, edi
lea esi, [ebx - 1]
cmp esi, 0x16c
ja 0x4873f9
test ecx, ecx
jne 0x4870a3
mov ecx, eax
mov eax, 0x84210843
mov edi, edx
imul esi
lea edx, [edx + ebx - 1]
sar edx, 4
lea eax, [edx + 1]
cmp eax, 0xd
jae 0x4882ce
lea esi, [0x9369c0]
lea ebp, [esi + edx*4 + 4]
cmp dword [ebp], ebx
jge 0x48707d
lea eax, [edx + 2]
lea edx, [eax - 1]
cmp edx, 0xd
jae 0x4882c2
mov edx, dword [esi + eax*4 - 4]
sub ebx, edx
mov edx, edi
mov ebp, dword [esp + 0x424]
mov ecx, eax
mov edi, ebx
mov eax, dword [esp + 0x88]
mov ebx, dword [esp + 0xc0]
test ebx, ebx
jl 0x48724e
cmp ecx, ebx
je 0x48724e
nop
lea eax, [esp + 0x230]
mov dword [esp], eax
mov eax, dword [esp + 0x470]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x474]
mov dword [esp + 8], eax
call fcn.00452050
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00451eb0
nop
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3a4], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x4c], ecx
lea edx, [esp + 0x210]
mov dword [esp], edx
mov edx, dword [esp + 0x424]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x94]
mov dword [esp + 8], edx
call fcn.00452050
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00451eb0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3a0], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x48], ecx
lea edx, [0x6e6fe0]
mov dword [esp], edx
call fcn.0040c4f0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x46c]
mov dword [eax + 4], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
jne 0x487193
mov ecx, dword [esp + 0x468]
jmp 0x4871a1
call fcn.00468990
mov ecx, dword [esp + 0x468]
mov dword [edi], ecx
mov dword [eax], ecx
mov ecx, dword [esp + 0x4c]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
jne 0x4871bd
mov ecx, dword [esp + 0x3a4]
jmp 0x4871cb
call fcn.00468990
mov ecx, dword [esp + 0x3a4]
mov dword [edi], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov ecx, dword [esp + 0x48]
mov dword [eax + 0x1c], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
jne 0x4871f6
mov ecx, dword [esp + 0x3a0]
jmp 0x487204
call fcn.00468990
mov ecx, dword [esp + 0x3a0]
mov dword [edi], ecx
mov dword [esp + 0x3d8], eax
mov dword [eax + 0x18], ecx
mov dword [eax + 0x24], 0x22
lea ecx, [0x719d50]
mov dword [eax + 0x20], ecx
lea edi, [esp + 0x480]
xor eax, eax
call fcn.00468c2b
lea ecx, [0x773c1c]
mov dword [esp + 0x494], ecx
mov ecx, dword [esp + 0x3d8]
mov dword [esp + 0x498], ecx
add esp, 0x464
ret
mov ebx, dword [esp + 0xe8]
test ebx, ebx
jl 0x4875b6
cmp edi, ebx
je 0x4875b6
nop
lea eax, [esp + 0x1f0]
mov dword [esp], eax
mov eax, dword [esp + 0x470]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x474]
mov dword [esp + 8], eax
call fcn.00452050
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00451eb0
nop
mov eax, dword [esp + 0xc]
mov dword [esp + 0x39c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x44], ecx
lea edx, [esp + 0x1d0]
mov dword [esp], edx
mov edx, dword [esp + 0x424]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x94]
mov dword [esp + 8], edx
call fcn.00452050
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00451eb0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x398], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x40], ecx
lea edx, [0x6e6fe0]
mov dword [esp], edx
call fcn.0040c4f0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x46c]
mov dword [eax + 4], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
jne 0x48733e
mov ecx, dword [esp + 0x468]
jmp 0x48734c
call fcn.00468990
mov ecx, dword [esp + 0x468]
mov dword [edi], ecx
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
jne 0x487368
mov ecx, dword [esp + 0x39c]
jmp 0x487376
call fcn.00468990
mov ecx, dword [esp + 0x39c]
mov dword [edi], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov ecx, dword [esp + 0x40]
mov dword [eax + 0x1c], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
jne 0x4873a1
mov ecx, dword [esp + 0x398]
jmp 0x4873af
call fcn.00468990
mov ecx, dword [esp + 0x398]
mov dword [edi], ecx
mov dword [esp + 0x3d4], eax
mov dword [eax + 0x18], ecx
mov dword [eax + 0x24], 0x20
lea ecx, [0x718c0f]
mov dword [eax + 0x20], ecx
lea edi, [esp + 0x480]
xor eax, eax
call fcn.00468c2b
lea ecx, [0x773c1c]
mov dword [esp + 0x494], ecx
mov ecx, dword [esp + 0x3d4]
mov dword [esp + 0x498], ecx
add esp, 0x464
ret
nop
lea eax, [esp + 0x270]
mov dword [esp], eax
mov eax, dword [esp + 0x470]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x474]
mov dword [esp + 8], eax
call fcn.00452050
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00451eb0
nop
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3ac], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x54], ecx
lea edx, [esp + 0x250]
mov dword [esp], edx
mov edx, dword [esp + 0x424]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x94]
mov dword [esp + 8], edx
call fcn.00452050
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00451eb0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3a8], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x50], ecx
lea edx, [0x6e6fe0]
mov dword [esp], edx
call fcn.0040c4f0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x46c]
mov dword [eax + 4], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
jne 0x4874d2
mov ecx, dword [esp + 0x468]
jmp 0x4874e0
call fcn.00468990
mov ecx, dword [esp + 0x468]
mov dword [edi], ecx
mov dword [eax], ecx
mov ecx, dword [esp + 0x54]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
jne 0x4874fc
mov ecx, dword [esp + 0x3ac]
jmp 0x48750a
call fcn.00468990
mov ecx, dword [esp + 0x3ac]
mov dword [edi], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov ecx, dword [esp + 0x50]
mov dword [eax + 0x1c], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
jne 0x487535
mov ecx, dword [esp + 0x3a8]
jmp 0x487543
call fcn.00468990
mov ecx, dword [esp + 0x3a8]
mov dword [edi], ecx
mov dword [esp + 0x3dc], eax
mov dword [eax + 0x18], ecx
mov dword [eax + 0x24], 0x1a
lea ecx, [0x7159ea]
mov dword [eax + 0x20], ecx
lea edi, [esp + 0x480]
xor eax, eax
call fcn.00468c2b
lea ecx, [0x773c1c]
mov dword [esp + 0x494], ecx
mov ecx, dword [esp + 0x3dc]
mov dword [esp + 0x498], ecx
add esp, 0x464
ret
mov ebx, dword [esp + 0xc0]
test ebx, ebx
jge 0x48759d
mov ebx, 1
mov edi, dword [esp + 0xe8]
test edi, edi
jge 0x4875ad
mov edi, 1
mov eax, dword [esp + 0x88]
mov ecx, ebx
test edi, edi
jle 0x487648
cmp ecx, 2
jne 0x487613
test eax, 3
jne 0x48760f
mov ebx, 0x51eb851f
mov esi, edx
imul ebx
mov dword [esp + 0xfc], edx
mov ebx, dword [esp + 0x88]
mov eax, ebx
sar ebx, 0x1f
sar edx, 5
sub edx, ebx
imul edx, edx, 0x64
cmp eax, edx
jne 0x487608
mov edx, dword [esp + 0xfc]
sar edx, 7
sub edx, ebx
imul edx, edx, 0x190
cmp eax, edx
jne 0x487615
mov edx, 0x1d
jmp 0x487640
mov esi, edx
jmp 0x487615
mov esi, edx
cmp ecx, 0xd
jae 0x4882b6
lea edx, [ecx - 1]
lea ebx, [0x9369c0]
mov ebp, dword [ebx + ecx*4]
cmp edx, 0xd
jae 0x4882aa
sub ebp, dword [ebx + ecx*4 - 4]
mov edx, ebp
mov ebp, dword [esp + 0x424]
cmp edx, edi
jge 0x4877dc
nop
lea eax, [esp + 0x1b0]
mov dword [esp], eax
mov eax, dword [esp + 0x470]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x474]
mov dword [esp + 8], eax
call fcn.00452050
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00451eb0
nop
mov eax, dword [esp + 0xc]
mov dword [esp + 0x394], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x3c], ecx
lea edx, [esp + 0x190]
mov dword [esp], edx
mov edx, dword [esp + 0x424]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x94]
mov dword [esp + 8], edx
call fcn.00452050
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00451eb0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x390], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x38], ecx
lea edx, [0x6e6fe0]
mov dword [esp], edx
call fcn.0040c4f0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x46c]
mov dword [eax + 4], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
jne 0x487721
mov ecx, dword [esp + 0x468]
jmp 0x48772f
call fcn.00468990
mov ecx, dword [esp + 0x468]
mov dword [edi], ecx
mov dword [eax], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
jne 0x48774b
mov ecx, dword [esp + 0x394]
jmp 0x487759
call fcn.00468990
mov ecx, dword [esp + 0x394]
mov dword [edi], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov ecx, dword [esp + 0x38]
mov dword [eax + 0x1c], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
jne 0x487784
mov ecx, dword [esp + 0x390]
jmp 0x487792
call fcn.00468990
mov ecx, dword [esp + 0x390]
mov dword [edi], ecx
mov dword [esp + 0x3d0], eax
mov dword [eax + 0x18], ecx
mov dword [eax + 0x24], 0x12
lea ecx, [0x710b0c]
mov dword [eax + 0x20], ecx
lea edi, [esp + 0x480]
xor eax, eax
call fcn.00468c2b
lea ecx, [0x773c1c]
mov dword [esp + 0x494], ecx
mov ecx, dword [esp + 0x3d0]
mov dword [esp + 0x498], ecx
add esp, 0x464
ret
mov edx, dword [esp + 0x3f4]
test edx, edx
jne 0x487e7d
mov edx, dword [esp + 0x80]
cmp edx, 0xffffffff
jne 0x487b8b
mov edx, dword [esp + 0x84]
test edx, edx
je 0x487b0b
mov edx, dword [0x95d66c]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], edx
call fcn.0048bde0
lea edi, [esp + 0x428]
lea esi, [esp + 0x20]
call fcn.0046910e
mov eax, dword [esp + 0x42c]
test eax, 0x80000000
je 0x487890
mov ecx, dword [esp + 0x428]
mov edx, ecx
shl ecx, 1
shl eax, 1
shr edx, 0x1f
or edx, eax
mov eax, edx
shl edx, 1
shr ecx, 0x1f
or ecx, edx
shr eax, 0x1f
add ecx, 0xd7b17f80
adc eax, 0xd
jmp 0x48789e
mov ecx, dword [esp + 0x430]
mov eax, dword [esp + 0x434]
mov edx, dword [esp + 0x47c]
mov dword [esp], edx
mov ebx, dword [esp + 0x3f0]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x84]
mov dword [esp + 8], ebp
add ecx, 0x886e0900
adc eax, 0xfffffff1
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
call fcn.0048e960
movzx eax, byte [esp + 0x18]
mov ecx, dword [esp + 0x14]
test al, al
jne 0x487a3e
mov eax, dword [esp + 0x84]
cmp eax, 3
jle 0x48793b
mov edx, dword [esp + 0x3f0]
cmp word [edx], 0x4d47
jne 0x487942
cmp byte [edx + 2], 0x54
jne 0x487942
lea ecx, [0x773220]
mov dword [esp], ecx
lea ecx, [edx + 3]
mov dword [esp + 4], ecx
lea ecx, [eax - 3]
mov dword [esp + 8], ecx
call fcn.00490d80
mov eax, dword [esp + 0xc]
imul ecx, eax, 0xe10
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x3f0]
jmp 0x487942
mov edx, dword [esp + 0x3f0]
mov dword [esp + 0xb0], ecx
nop
lea ebx, [esp + 0x150]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00452050
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00451eb0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xb0]
mov dword [esp + 8], eax
call fcn.0048c560
mov eax, dword [esp + 0xc]
lea ecx, [0x964a60]
cmp eax, ecx
jne 0x4879ac
xor eax, eax
mov ecx, dword [esp + 0x42c]
nop
test ecx, 0x80000000
je 0x487a07
mov edx, dword [esp + 0x428]
shl ecx, 1
mov ebx, edx
shl edx, 1
shr ebx, 0x1f
or ebx, ecx
mov ecx, ebx
shl ebx, 1
shr ecx, 0x1f
shr edx, 0x1f
or edx, ebx
add edx, 0xd7b17f80
mov dword [esp + 0x430], edx
adc ecx, 0xd
mov dword [esp + 0x434], ecx
and dword [esp + 0x428], 0x3fffffff
mov dword [esp + 0x42c], 0
mov dword [esp + 0x438], eax
lea edi, [esp + 0x480]
lea esi, [esp + 0x428]
call fcn.0046910e
mov dword [esp + 0x494], 0
mov dword [esp + 0x498], 0
add esp, 0x464
ret
lea eax, [esp + 0x428]
mov dword [esp], eax
mov eax, ecx
sar ecx, 0x1f
xor edx, edx
sub edx, eax
mov eax, 0
sbb eax, ecx
mov dword [esp + 8], eax
mov dword [esp + 4], edx
call fcn.00489950
nop
mov eax, dword [esp + 0x47c]
lea ecx, [0x964a60]
cmp eax, ecx
jne 0x487a79
xor eax, eax
mov ecx, dword [esp + 0x42c]
nop
test ecx, 0x80000000
je 0x487ad4
mov edx, dword [esp + 0x428]
shl ecx, 1
mov ebx, edx
shl edx, 1
shr ebx, 0x1f
or ebx, ecx
mov ecx, ebx
shl ebx, 1
shr ecx, 0x1f
shr edx, 0x1f
or ebx, edx
add ebx, 0xd7b17f80
mov dword [esp + 0x430], ebx
adc ecx, 0xd
mov dword [esp + 0x434], ecx
and dword [esp + 0x428], 0x3fffffff
mov dword [esp + 0x42c], 0
mov dword [esp + 0x438], eax
lea edi, [esp + 0x480]
lea esi, [esp + 0x428]
call fcn.0046910e
mov dword [esp + 0x494], 0
mov dword [esp + 0x498], 0
add esp, 0x464
ret
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x478]
mov dword [esp + 0x1c], eax
call fcn.0048bde0
lea edi, [esp + 0x450]
lea esi, [esp + 0x20]
call fcn.0046910e
lea edi, [esp + 0x480]
lea esi, [esp + 0x450]
call fcn.0046910e
mov dword [esp + 0x494], 0
mov dword [esp + 0x498], 0
add esp, 0x464
ret
mov edx, dword [0x95d66c]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], edx
call fcn.0048bde0
lea edi, [esp + 0x43c]
lea esi, [esp + 0x20]
call fcn.0046910e
lea eax, [esp + 0x43c]
mov dword [esp], eax
mov eax, dword [esp + 0x80]
mov ecx, eax
sar eax, 0x1f
xor edx, edx
sub edx, ecx
mov ebx, 0
sbb ebx, eax
mov dword [esp + 8], ebx
mov dword [esp + 4], edx
call fcn.00489950
mov eax, dword [esp + 0x440]
test eax, 0x80000000
je 0x487c3f
mov ecx, dword [esp + 0x43c]
mov edx, ecx
shl ecx, 1
shl eax, 1
shr edx, 0x1f
or edx, eax
mov eax, edx
shl edx, 1
shr eax, 0x1f
shr ecx, 0x1f
or edx, ecx
add edx, 0xd7b17f80
adc eax, 0xd
jmp 0x487c4d
mov edx, dword [esp + 0x444]
mov eax, dword [esp + 0x448]
mov ecx, dword [esp + 0x47c]
mov dword [esp], ecx
add edx, 0x886e0900
adc eax, 0xfffffff1
mov dword [esp + 8], eax
mov dword [esp + 4], edx
call fcn.0048c770
mov eax, dword [esp + 0x80]
cmp dword [esp + 0x14], eax
jne 0x487cca
mov ecx, dword [esp + 0x84]
test ecx, ecx
jne 0x487c8c
mov edx, 1
jmp 0x487cd3
mov edx, dword [esp + 0x10]
cmp ecx, edx
je 0x487c98
xor edx, edx
jmp 0x487cd3
mov eax, dword [esp + 0xc]
mov dword [esp], eax
mov eax, dword [esp + 0x3f0]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00403500
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x84]
mov edx, eax
mov eax, dword [esp + 0x80]
jmp 0x487cd3
mov ecx, dword [esp + 0x84]
xor edx, edx
test dl, dl
je 0x487d81
nop
mov eax, dword [esp + 0x47c]
lea ecx, [0x964a60]
cmp eax, ecx
jne 0x487cef
xor eax, eax
mov ecx, dword [esp + 0x440]
nop
test ecx, 0x80000000
je 0x487d4a
mov edx, dword [esp + 0x43c]
mov ebx, edx
shl edx, 1
shl ecx, 1
shr ebx, 0x1f
or ebx, ecx
mov ecx, ebx
shl ebx, 1
shr ecx, 0x1f
shr edx, 0x1f
or ebx, edx
add ebx, 0xd7b17f80
mov dword [esp + 0x444], ebx
adc ecx, 0xd
mov dword [esp + 0x448], ecx
and dword [esp + 0x43c], 0x3fffffff
mov dword [esp + 0x440], 0
mov dword [esp + 0x44c], eax
lea edi, [esp + 0x480]
lea esi, [esp + 0x43c]
call fcn.0046910e
mov dword [esp + 0x494], 0
mov dword [esp + 0x498], 0
add esp, 0x464
ret
nop
lea eax, [esp + 0x170]
mov dword [esp], eax
mov eax, dword [esp + 0x3f0]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00452050
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00451eb0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
call fcn.0048c560
mov eax, dword [esp + 0xc]
lea ecx, [0x964a60]
cmp eax, ecx
jne 0x487deb
xor eax, eax
mov ecx, dword [esp + 0x440]
nop
test ecx, 0x80000000
je 0x487e46
mov edx, dword [esp + 0x43c]
shl ecx, 1
mov ebx, edx
shl edx, 1
shr ebx, 0x1f
or ebx, ecx
mov ecx, ebx
shl ebx, 1
shr ecx, 0x1f
shr edx, 0x1f
or ebx, edx
add ebx, 0xd7b17f80
mov dword [esp + 0x444], ebx
adc ecx, 0xd
mov dword [esp + 0x448], ecx
and dword [esp + 0x43c], 0x3fffffff
mov dword [esp + 0x440], 0
mov dword [esp + 0x44c], eax
lea edi, [esp + 0x480]
lea esi, [esp + 0x43c]
call fcn.0046910e
mov dword [esp + 0x494], 0
mov dword [esp + 0x498], 0
add esp, 0x464
ret
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], edx
call fcn.0048bde0
lea edi, [esp + 0x450]
lea esi, [esp + 0x20]
call fcn.0046910e
lea edi, [esp + 0x480]
lea esi, [esp + 0x450]
call fcn.0046910e
mov dword [esp + 0x494], 0
mov dword [esp + 0x498], 0
add esp, 0x464
ret
mov dword [esp], ebp
mov dword [esp + 4], esi
call fcn.00485430
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp], 0
lea edx, [0x70e9f8]
mov dword [esp + 4], edx
mov dword [esp + 8], 0xe
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.00451c10
nop
mov eax, dword [esp + 0x14]
mov dword [esp + 0x41c], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xd0], ecx
lea edx, [esp + 0x330]
mov dword [esp], edx
mov edx, dword [esp + 0x470]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x474]
mov dword [esp + 8], edx
call fcn.00452050
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00451eb0
nop
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3c4], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x6c], ecx
lea edx, [esp + 0x310]
mov dword [esp], edx
mov edx, dword [esp + 0x424]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x94]
mov dword [esp + 8], edx
call fcn.00452050
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00451eb0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3c0], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x68], ecx
lea edx, [0x6e6fe0]
mov dword [esp], edx
call fcn.0040c4f0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x46c]
mov dword [eax + 4], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
jne 0x48801f
mov ecx, dword [esp + 0x468]
jmp 0x48802d
call fcn.00468990
mov ecx, dword [esp + 0x468]
mov dword [edi], ecx
mov dword [eax], ecx
mov ecx, dword [esp + 0x6c]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
jne 0x488049
mov ecx, dword [esp + 0x3c4]
jmp 0x488057
call fcn.00468990
mov ecx, dword [esp + 0x3c4]
mov dword [edi], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov ecx, dword [esp + 0x68]
mov dword [eax + 0x1c], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
jne 0x488082
mov ecx, dword [esp + 0x3c0]
jmp 0x488090
call fcn.00468990
mov ecx, dword [esp + 0x3c0]
mov dword [edi], ecx
mov dword [eax + 0x18], ecx
mov ecx, dword [esp + 0xd0]
mov dword [eax + 0x24], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
jne 0x4880b0
mov ecx, dword [esp + 0x41c]
jmp 0x4880be
call fcn.00468990
mov ecx, dword [esp + 0x41c]
mov dword [edi], ecx
mov dword [esp + 0x3e8], eax
mov dword [eax + 0x20], ecx
lea edi, [esp + 0x480]
xor eax, eax
call fcn.00468c2b
lea ecx, [0x773c1c]
mov dword [esp + 0x494], ecx
mov ecx, dword [esp + 0x3e8]
mov dword [esp + 0x498], ecx
add esp, 0x464
ret
nop
lea eax, [esp + 0x370]
mov dword [esp], eax
mov eax, dword [esp + 0x470]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x474]
mov dword [esp + 8], eax
call fcn.00452050
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00451eb0
nop
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3cc], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x74], ecx
lea edx, [esp + 0x350]
mov dword [esp], edx
mov edx, dword [esp + 0x424]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x94]
mov dword [esp + 8], edx
call fcn.00452050
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00451eb0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3c8], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x70], ecx
lea edx, [0x6e6fe0]
mov dword [esp], edx
call fcn.0040c4f0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x46c]
mov dword [eax + 4], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
jne 0x4881d1
mov ecx, dword [esp + 0x468]
jmp 0x4881df
call fcn.00468990
mov ecx, dword [esp + 0x468]
mov dword [edi], ecx
mov dword [eax], ecx
mov ecx, dword [esp + 0x74]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
jne 0x4881fb
mov ecx, dword [esp + 0x3cc]
jmp 0x488209
call fcn.00468990
mov ecx, dword [esp + 0x3cc]
mov dword [edi], ecx
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0xac]
mov dword [eax + 0x14], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
jne 0x488229
mov ecx, dword [esp + 0x410]
jmp 0x488237
call fcn.00468990
mov ecx, dword [esp + 0x410]
mov dword [edi], ecx
mov dword [eax + 0x10], ecx
mov ecx, dword [esp + 0x70]
mov dword [eax + 0x1c], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
jne 0x488254
mov ecx, dword [esp + 0x3c8]
jmp 0x488262
call fcn.00468990
mov ecx, dword [esp + 0x3c8]
mov dword [edi], ecx
mov dword [esp + 0x3ec], eax
mov dword [eax + 0x18], ecx
mov dword [eax + 0x24], 0
mov dword [eax + 0x20], 0
lea edi, [esp + 0x480]
xor eax, eax
call fcn.00468c2b
lea ecx, [0x773c1c]
mov dword [esp + 0x494], ecx
mov ecx, dword [esp + 0x3ec]
mov dword [esp + 0x498], ecx
add esp, 0x464
ret
mov eax, edx
mov ecx, 0xd
call fcn.00468a00
mov eax, ecx
mov ecx, 0xd
call fcn.00468a00
mov eax, edx
mov ecx, 0xd
call fcn.00468a00
mov ecx, 0xd
call fcn.00468a00
nop
lea eax, [esp + 0x2b0]
mov dword [esp], eax
mov eax, dword [esp + 0x470]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x474]
mov dword [esp + 8], eax
call fcn.00452050
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00451eb0
nop
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3b4], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x5c], ecx
lea edx, [esp + 0x290]
mov dword [esp], edx
mov edx, dword [esp + 0x424]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x94]
mov dword [esp + 8], edx
call fcn.00452050
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00451eb0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3b0], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x58], ecx
lea edx, [0x6e6fe0]
mov dword [esp], edx
call fcn.0040c4f0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x46c]
mov dword [eax + 4], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
jne 0x4883b1
mov ecx, dword [esp + 0x468]
jmp 0x4883bf
call fcn.00468990
mov ecx, dword [esp + 0x468]
mov dword [edi], ecx
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
jne 0x4883db
mov ecx, dword [esp + 0x3b4]
jmp 0x4883e9
call fcn.00468990
mov ecx, dword [esp + 0x3b4]
mov dword [edi], ecx
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0xfc]
mov dword [eax + 0x14], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
jne 0x488409
mov ecx, dword [esp + 0x400]
jmp 0x488417
call fcn.00468990
mov ecx, dword [esp + 0x400]
mov dword [edi], ecx
mov dword [eax + 0x10], ecx
mov ecx, dword [esp + 0x58]
mov dword [eax + 0x1c], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
jne 0x488434
mov ecx, dword [esp + 0x3b0]
jmp 0x488442
call fcn.00468990
mov ecx, dword [esp + 0x3b0]
mov dword [edi], ecx
mov dword [esp + 0x3e0], eax
mov dword [eax + 0x18], ecx
mov dword [eax + 0x24], 0
mov dword [eax + 0x20], 0
lea edi, [esp + 0x480]
xor eax, eax
call fcn.00468c2b
lea ecx, [0x773c1c]
mov dword [esp + 0x494], ecx
mov ecx, dword [esp + 0x3e0]
mov dword [esp + 0x498], ecx
add esp, 0x464
ret
mov dword [esp + 0x3f8], ecx
mov dword [esp + 0x90], edi
mov dword [esp], 0
lea eax, [0x70a57e]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov eax, dword [esp + 0x40c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
lea eax, [0x70df58]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0xd
call fcn.00451cb0
nop
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x418], eax
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xcc], ecx
lea edx, [esp + 0x2f0]
mov dword [esp], edx
mov edx, dword [esp + 0x470]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x474]
mov dword [esp + 8], edx
call fcn.00452050
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00451eb0
nop
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3bc], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x64], ecx
lea edx, [esp + 0x2d0]
mov dword [esp], edx
mov edx, dword [esp + 0x3f8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x90]
mov dword [esp + 8], edx
call fcn.00452050
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00451eb0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3b8], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x60], ecx
lea edx, [0x6e6fe0]
mov dword [esp], edx
call fcn.0040c4f0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x46c]
mov dword [eax + 4], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
jne 0x4885c6
mov ecx, dword [esp + 0x468]
jmp 0x4885d4
call fcn.00468990
mov ecx, dword [esp + 0x468]
mov dword [edi], ecx
mov dword [eax], ecx
mov ecx, dword [esp + 0x64]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
jne 0x4885f0
mov ecx, dword [esp + 0x3bc]
jmp 0x4885fe
call fcn.00468990
mov ecx, dword [esp + 0x3bc]
mov dword [edi], ecx
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0xfc]
mov dword [eax + 0x14], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
jne 0x48861e
mov ecx, dword [esp + 0x400]
jmp 0x48862c
call fcn.00468990
mov ecx, dword [esp + 0x400]
mov dword [edi], ecx
mov dword [eax + 0x10], ecx
mov ecx, dword [esp + 0x60]
mov dword [eax + 0x1c], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
jne 0x488649
mov ecx, dword [esp + 0x3b8]
jmp 0x488657
call fcn.00468990
mov ecx, dword [esp + 0x3b8]
mov dword [edi], ecx
mov dword [eax + 0x18], ecx
mov ecx, dword [esp + 0xcc]
mov dword [eax + 0x24], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
jne 0x488677
mov ecx, dword [esp + 0x418]
jmp 0x488685
call fcn.00468990
mov ecx, dword [esp + 0x418]
mov dword [edi], ecx
mov dword [esp + 0x3e4], eax
mov dword [eax + 0x20], ecx
lea edi, [esp + 0x480]
xor eax, eax
call fcn.00468c2b
lea ecx, [0x773c1c]
mov dword [esp + 0x494], ecx
mov ecx, dword [esp + 0x3e4]
mov dword [esp + 0x498], ecx
add esp, 0x464
ret
mov dword [esp + 0xa8], ebp
mov dword [esp + 0xa0], ecx
mov ecx, edx
mov dword [esp + 0x40c], edi
mov dword [esp + 0xb4], esi
mov edx, dword [esp + 0xfc]
mov ebp, dword [esp + 0x424]
mov esi, dword [esp + 0x94]
mov edi, ebx
mov ebx, eax
mov eax, dword [esp + 0x3f4]
jmp 0x486f34
inc edx
cmp edx, ecx
jge 0x488713
movzx ebx, byte [edx + eax]
add ebx, 0xffffffd0
cmp bl, 9
jbe 0x488702
mov dword [esp + 0xbc], edx
lea ebx, [0x773228]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.00490bf0
mov eax, dword [esp + 0xbc]
mov ecx, dword [esp + 0xa4]
cmp eax, ecx
ja 0x488777
sub ecx, eax
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and eax, ecx
mov esi, dword [esp + 0x10]
mov ecx, dword [esp + 0x408]
lea edx, [eax + ecx]
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0xf4]
jmp 0x4886bf
call fcn.00468a60
inc edx
mov dword [esp + 0xd8], edx
mov edx, dword [esp + 0xfc]
mov edx, dword [esp + 0xd8]
cmp edx, 2
jge 0x4887c8
cmp ecx, 0x10a
jne 0x48877c
test esi, esi
je 0x48877c
cmp byte [ebp], 0x20
jne 0x48877c
dec esi
mov dword [esp + 0xf8], esi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, 1
add ebp, esi
mov esi, dword [esp + 0xf8]
jmp 0x48877c
xor edx, edx
xor edx, edx
mov dword [esp + 0x7c], edx
xor edx, edx
jmp 0x4887f4
mov ebx, dword [esp + 0x7c]
lea ebx, [ebx + ebx*4]
movzx eax, al
inc edx
lea eax, [eax + ebx*2]
mov ebx, dword [esp + 0x94]
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x400]
cmp edx, 3
jge 0x488814
cmp edx, esi
jge 0x488810
movzx eax, byte [edx + ebp]
add eax, 0xffffffd0
cmp al, 9
jbe 0x4887d4
mov eax, dword [esp + 0x400]
test edx, edx
je 0x488821
cmp ecx, 0x10b
jne 0x48882b
cmp edx, 3
je 0x48882b
mov ecx, dword [0x95d930]
xor edx, edx
jmp 0x488842
cmp edx, esi
ja 0x488870
sub esi, edx
mov ecx, esi
neg ecx
sar ecx, 0x1f
and ecx, edx
add ebp, ecx
mov edx, dword [esp + 0x7c]
xor ecx, ecx
mov dword [esp + 0x8c], edx
mov eax, dword [esp + 0x3f4]
mov ebx, ecx
mov edi, esi
mov ecx, ebp
mov edx, dword [esp + 0xfc]
mov ebp, dword [esp + 0x424]
mov esi, dword [esp + 0x94]
jmp 0x486f34
mov eax, edx
mov ecx, esi
call fcn.00468a60
mov ecx, ebx
mov dword [esp + 0xd4], ecx
lea ebx, [ecx + 1]
cmp esi, ebx
jle 0x4888a2
jbe 0x488939
movzx edi, byte [ecx + ebp + 1]
xchg edi, eax
cmp al, 0x30
xchg edi, eax
jb 0x4888a2
xchg edi, eax
cmp al, 0x39
xchg edi, eax
jbe 0x488879
mov dword [esp + 0xec], ebx
lea eax, [0x773228]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
call fcn.00490bf0
mov ecx, dword [esp + 0x94]
mov eax, dword [esp + 0xec]
cmp ecx, eax
jb 0x488934
mov edx, dword [esp + 0xd4]
sub ecx, edx
lea edi, [ecx - 1]
mov ecx, edi
neg ecx
sar ecx, 0x1f
and eax, ecx
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x10]
mov ebp, dword [esp + 0x424]
add eax, ebp
mov edx, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov dword [esp + 0xa8], esi
mov dword [esp + 0x40c], edx
mov dword [esp + 0xb4], ecx
mov edx, dword [esp + 0xfc]
mov esi, dword [esp + 0x94]
mov ecx, eax
mov eax, dword [esp + 0x3f4]
jmp 0x486f34
call fcn.00468a60
mov eax, ebx
mov ecx, esi
call fcn.00468a00
call fcn.00468a20
mov eax, edx
call fcn.00468a60
call fcn.00468a20
nop
call fcn.00467590
jmp fcn.00485e70