Function at 0x492120
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x95eda0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x180]
cmp eax, dword [ecx + 8]
jbe 0x494b1d
sub esp, 0x200
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.00471a5b
mov ecx, dword [esp + 0x208]
mov edx, dword [esp + 0x204]
xor ebx, ebx
xor ebp, ebp
mov esi, 0xffffffff
xor edi, edi
mov ecx, 0xffffffff
mov dword [esp + 0xd4], ecx
mov ecx, 0xffffffff
mov dword [esp + 0x6c], ecx
xor ecx, ecx
mov dword [esp + 0xa0], ecx
xor ecx, ecx
mov byte [esp + 0x36], cl
xor edx, edx
mov byte [esp + 0x37], dl
mov edx, 0xffffffff
mov dword [esp + 0xac], edx
xor edx, edx
mov dword [esp + 0xb4], edx
xor edx, edx
mov dword [esp + 0xcc], edx
xor edx, edx
mov dword [esp + 0x18c], edx
xor ebx, ebx
mov dword [esp + 0x94], ebx
xor ebx, ebx
mov dword [esp + 0x8c], ebx
xor ebx, ebx
mov dword [esp + 0x1cc], ebx
mov ebx, dword [esp + 0x210]
mov dword [esp + 0x138], ebx
mov ebx, dword [esp + 0x20c]
mov dword [esp + 0x1e8], ebx
mov ecx, dword [esp + 0x208]
mov edx, dword [esp + 0x204]
xor ebx, ebx
jmp 0x492238
mov edx, dword [esp + 0x1bc]
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x74]
mov esi, dword [esp + 0x78]
mov dword [esp + 0x18c], eax
mov dword [esp + 0x138], edi
mov dword [esp + 0x1e8], ecx
mov ecx, dword [esp + 0x84]
mov edi, dword [esp + 0x188]
mov dword [esp + 0x70], ebx
mov dword [esp + 0x188], edi
mov dword [esp + 0x134], ecx
mov dword [esp + 0x1e4], edx
mov dword [esp + 0x74], ebp
mov dword [esp + 0x78], esi
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.0049b5b0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x134]
mov ebx, edx
sub ebx, ecx
mov ebp, dword [esp + 0x10]
mov esi, dword [esp + 8]
cmp edx, ebx
jb 0x494b15
mov edx, dword [esp + 0xc]
cmp edx, ebx
ja 0x494b0c
mov dword [esp + 0x88], ebp
mov dword [esp + 0x134], ebx
mov dword [esp + 0x84], ecx
mov dword [esp + 0x1bc], eax
mov dword [esp + 0x98], edx
mov dword [esp + 0x1d0], esi
mov eax, dword [esp + 0x1e8]
mov dword [esp], eax
mov eax, dword [esp + 0x138]
mov dword [esp + 4], eax
call fcn.00491e70
mov eax, dword [esp + 0x134]
mov ecx, dword [esp + 0x98]
sub eax, ecx
mov edx, eax
neg eax
sar eax, 0x1f
and eax, ecx
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1e4]
add eax, ebp
mov ebp, dword [esp + 0x10]
mov dword [esp + 0x1e8], ebp
mov esi, dword [esp + 0x14]
mov dword [esp + 0x80], esi
test ebx, ebx
jne 0x49421b
mov edi, dword [esp + 0x88]
test edi, edi
je 0x493239
mov dword [esp + 0x138], edx
mov dword [esp + 0x1c0], eax
mov ecx, edi
and edi, 0xffff
cmp edi, 0x106
jg 0x492b81
cmp edi, 0x23
jg 0x492921
cmp edi, 0x1c
jg 0x492473
cmp edi, 0x17
jne 0x49243d
mov dword [esp + 0xd0], ebx
cmp esi, 3
jl 0x49239c
cmp word [ebp], 0x5455
jne 0x49239c
cmp byte [ebp + 2], 0x43
jne 0x49239c
lea ecx, [esi - 3]
mov edi, ecx
neg ecx
sar ecx, 0x1f
and ecx, 3
mov eax, dword [0x93203c]
add ecx, ebp
jmp 0x49321d
mov dword [esp], ebp
mov dword [esp + 4], esi
call fcn.00494b30
movzx eax, byte [esp + 0xc]
test al, al
je 0x492412
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x80]
cmp ecx, edx
ja 0x494b07
mov esi, edx
sub esi, ecx
mov eax, esi
neg eax
sar eax, 0x1f
and eax, ecx
mov edi, dword [esp + 0x1e8]
lea ebp, [eax + edi]
mov edx, dword [esp + 0x138]
mov eax, dword [esp + 0x18c]
mov dword [esp + 0x70], ecx
mov dword [esp + 0x188], edi
mov edi, esi
mov ecx, ebp
mov ebx, dword [esp + 0xd0]
mov ebp, dword [esp + 0x188]
mov esi, dword [esp + 0x80]
jmp 0x49321d
mov ebx, dword [0x932698]
mov edx, dword [esp + 0x138]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x49321d
cmp edi, 0x18
jl 0x492f41
test esi, esi
je 0x49247c
cmp byte [ebp], 0x5a
jne 0x49247c
lea ecx, [esi - 1]
mov edi, ecx
neg ecx
sar ecx, 0x1f
and ecx, 1
add ecx, ebp
mov ebp, dword [0x93203c]
mov eax, ebp
mov ebp, dword [esp + 0x1e8]
jmp 0x49321d
cmp edi, 0x21
jg 0x492811
cmp ecx, 0x1b
je 0x492486
cmp ecx, 0x20
jne 0x4924f2
cmp esi, 6
jge 0x4924a1
mov ebx, dword [0x932698]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x49321d
cmp byte [ebp + 3], 0x3a
je 0x4924bd
mov ebx, dword [0x932698]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x49321d
lea ecx, [esi - 6]
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 6
lea edi, [ebp + 1]
lea eax, [ebp + 4]
add ecx, ebp
mov dword [esp + 0xf8], eax
lea eax, [0x6f67ed]
mov dword [esp + 0x1c4], eax
mov eax, dword [esp + 0xf8]
jmp 0x4926ad
cmp ecx, 0x1f
je 0x4924fc
cmp ecx, 0x1a
jne 0x492556
cmp esi, 3
jge 0x492517
mov ebx, dword [0x932698]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x49321d
lea ecx, [esi - 3]
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 3
lea edi, [ebp + 1]
add ecx, ebp
mov dword [esp + 0x108], eax
lea eax, [0x6f67ed]
mov dword [esp + 0x1c4], eax
lea eax, [0x6f67ed]
mov dword [esp + 0x1d4], eax
mov eax, dword [esp + 0x108]
jmp 0x4926a6
cmp ecx, 0x1c
je 0x492560
cmp ecx, 0x21
jne 0x4925dc
cmp esi, 9
jge 0x49257b
mov ebx, dword [0x932698]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x49321d
cmp byte [ebp + 3], 0x3a
jne 0x492587
cmp byte [ebp + 6], 0x3a
je 0x49259d
mov ebx, dword [0x932698]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x49321d
lea ecx, [esi - 9]
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 9
lea edi, [ebp + 1]
lea eax, [ebp + 4]
lea edx, [ebp + 7]
add ecx, ebp
mov dword [esp + 0x1c4], edx
mov edx, dword [esp + 0x138]
mov dword [esp + 0x110], eax
mov eax, ecx
mov ecx, ebx
mov ebx, eax
mov eax, dword [esp + 0x110]
jmp 0x492688
cmp ecx, 0x19
je 0x4925e6
cmp ecx, 0x1e
jne 0x49263d
cmp esi, 7
jge 0x492601
mov ebx, dword [0x932698]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x49321d
lea ecx, [esi - 7]
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 7
lea edi, [ebp + 1]
lea eax, [ebp + 3]
lea edx, [ebp + 5]
add ecx, ebp
mov dword [esp + 0x1c4], edx
mov edx, dword [esp + 0x138]
mov dword [esp + 0x120], eax
mov eax, ecx
mov ecx, ebx
mov ebx, eax
mov eax, dword [esp + 0x120]
jmp 0x492688
cmp esi, 5
jge 0x492658
mov ebx, dword [0x932698]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x49321d
lea ecx, [esi - 5]
mov ebx, ecx
neg ebx
sar ebx, 0x1f
and ebx, 5
lea edi, [ebp + 1]
lea eax, [ebp + 3]
add ebx, ebp
mov dword [esp + 0x118], eax
lea eax, [0x6f67ed]
mov dword [esp + 0x1c4], eax
mov eax, dword [esp + 0x118]
mov dword [esp + 0x1d4], eax
mov eax, dword [esp + 0x1c0]
mov dword [esp + 0x100], ecx
mov ecx, ebx
mov ebx, dword [esp + 0x100]
mov eax, dword [esp + 0x1d4]
mov dword [esp + 0x1d4], eax
mov dword [esp + 0x134], ebx
mov dword [esp + 0x1e4], ecx
mov dword [esp], edi
mov dword [esp + 4], 2
mov byte [esp + 8], 1
call fcn.00491d60
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xc8], ecx
test eax, eax
je 0x4926ee
xor edx, edx
jmp 0x49271d
mov eax, dword [esp + 0x1d4]
mov dword [esp], eax
mov dword [esp + 4], 2
mov byte [esp + 8], 1
call fcn.00491d60
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, eax
mov eax, ecx
mov ecx, dword [esp + 0xc8]
test eax, eax
je 0x492725
xor ebx, ebx
jmp 0x492762
mov dword [esp + 0xb0], edx
mov eax, dword [esp + 0x1c4]
mov dword [esp], eax
mov dword [esp + 4], 2
mov byte [esp + 8], 1
call fcn.00491d60
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0xb0]
mov ebx, eax
mov eax, ecx
mov ecx, dword [esp + 0xc8]
cmp ecx, 0x18
jle 0x492774
mov ebp, 0x15
lea esi, [0x6ff7a7]
jmp 0x492782
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x1cc]
cmp edx, 0x3c
jle 0x492792
mov ebp, 0x17
lea esi, [0x700b71]
cmp ebx, 0x3c
jle 0x4927a2
mov ebp, 0x17
lea esi, [0x700b88]
imul ecx, ecx, 0x3c
add ecx, edx
imul ecx, ecx, 0x3c
mov edx, dword [esp + 0x1e8]
movzx edi, byte [edx]
add ecx, ebx
xchg edi, eax
cmp al, 0x2b
xchg edi, eax
je 0x4927ce
xchg edi, eax
cmp al, 0x2d
xchg edi, eax
jne 0x4927c8
neg ecx
jmp 0x4927ce
mov eax, dword [0x932698]
mov edx, dword [esp + 0x138]
mov dword [esp + 0x94], ebp
mov dword [esp + 0x6c], ecx
mov edi, dword [esp + 0x134]
mov ecx, dword [esp + 0x1e4]
mov ebx, eax
mov dword [esp + 0x1cc], esi
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov eax, dword [esp + 0x18c]
jmp 0x49321d
cmp edi, 0x22
jne 0x4928d8
sar ecx, 0x10
and ecx, 0xfff
lea ebx, [ecx + 1]
cmp esi, ebx
jge 0x492840
mov ebx, dword [0x932698]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x49321d
mov dword [esp + 0x64], ecx
mov dword [esp + 0xa4], ebx
lea eax, [0x762348]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
call fcn.0049c980
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x64]
sub eax, ecx
lea esi, [eax - 1]
mov eax, esi
neg eax
sar eax, 0x1f
mov ecx, dword [esp + 0xa4]
and ecx, eax
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov edi, dword [esp + 0x18]
mov edx, dword [esp + 0x1e8]
add ecx, edx
mov edx, dword [esp + 0x138]
mov dword [esp + 0x94], edi
mov edi, esi
mov dword [esp + 0x1cc], ebx
mov dword [esp + 0xa0], eax
mov esi, dword [esp + 0x80]
mov eax, dword [esp + 0x18c]
mov ebx, ebp
mov ebp, dword [esp + 0x1e8]
jmp 0x49321d
cmp edi, 0x23
jne 0x492f41
cmp esi, 2
jl 0x492911
movzx edi, byte [ebp]
xchg edi, eax
cmp al, 0x2e
xchg edi, eax
je 0x4928f8
xchg edi, eax
cmp al, 0x2c
xchg edi, eax
jne 0x492911
movzx edi, byte [ebp + 1]
xchg edi, eax
cmp al, 0x30
xchg edi, eax
jb 0x492911
xchg edi, eax
cmp al, 0x39
xchg edi, eax
ja 0x492911
xor ecx, ecx
jmp 0x494a37
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x49321d
cmp edi, 0x102
jg 0x492a0f
cmp edi, 0x101
je 0x4929a8
cmp edi, 0x102
jne 0x492f41
mov eax, dword [0x932f80]
mov ecx, dword [0x932f84]
mov edx, dword [0x932f88]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.0048e440
mov eax, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
inc eax
mov edx, dword [esp + 0x138]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
jmp 0x49321d
mov eax, dword [0x932f90]
mov ecx, dword [0x932f94]
mov edx, dword [0x932f98]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.0048e440
mov eax, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
inc eax
mov edx, dword [esp + 0x138]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
jmp 0x49321d
cmp edi, 0x104
jle 0x492ae5
cmp edi, 0x105
je 0x492a8a
cmp edi, 0x106
jne 0x492f41
mov eax, dword [0x932f70]
mov ecx, dword [0x932f74]
mov edx, dword [0x932f78]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.0048e440
mov ebp, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x138]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
jmp 0x49321d
mov eax, dword [0x932f60]
mov ecx, dword [0x932f64]
mov edx, dword [0x932f68]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.0048e440
mov ebp, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x138]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
jmp 0x49321d
mov dword [esp], ebp
mov dword [esp + 4], esi
cmp ecx, 0x104
sete al
mov byte [esp + 8], al
call fcn.00491d60
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0xc]
test eax, eax
je 0x492b1a
mov edx, dword [esp + 0x94]
mov ebx, dword [esp + 0x1cc]
jmp 0x492b3d
lea edx, [ecx - 1]
cmp edx, 0xb
jbe 0x492b2f
mov edx, 5
lea ebx, [0x6f722d]
jmp 0x492b3d
mov edx, dword [esp + 0x94]
mov ebx, dword [esp + 0x1cc]
mov ebp, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
mov dword [esp + 0x94], edx
mov dword [esp + 0xac], ecx
mov edi, esi
mov ecx, ebp
mov dword [esp + 0x1cc], ebx
mov edx, dword [esp + 0x138]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov ebx, eax
mov eax, dword [esp + 0x18c]
jmp 0x49321d
cmp edi, 0x20c
jg 0x492e1d
cmp edi, 0x10b
jg 0x492c3d
cmp edi, 0x109
jle 0x492bb5
mov ebx, esi
mov edi, ebp
xor ebx, ebx
mov dword [esp + 0xc4], ebx
mov ebx, esi
jmp 0x494951
cmp ecx, 0x108
jne 0x492be4
test esi, esi
je 0x492bde
cmp byte [ebp], 0x20
jne 0x492bd8
lea ebx, [esi - 1]
mov edi, ebx
neg ebx
sar ebx, 0x1f
and ebx, 1
add ebx, ebp
jmp 0x492be8
mov edi, esi
mov ebx, ebp
jmp 0x492be8
mov edi, esi
mov ebx, ebp
jmp 0x492be8
mov edi, esi
mov ebx, ebp
mov dword [esp], ebx
mov dword [esp + 4], edi
cmp ecx, 0x109
sete al
mov byte [esp + 8], al
call fcn.00491d60
mov eax, dword [esp + 0xc]
mov ebp, dword [esp + 0x10]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x138]
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
jmp 0x49321d
cmp edi, 0x113
jne 0x492cd9
cmp esi, 4
jl 0x492c5a
movzx ecx, byte [ebp]
add ecx, 0xffffffd0
cmp cl, 9
jbe 0x492c70
mov ebx, dword [0x932698]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x49321d
lea eax, [0x762340]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], 4
call fcn.0049cb00
mov eax, dword [esp + 0x80]
lea esi, [eax - 4]
mov ecx, esi
neg ecx
sar ecx, 0x1f
and ecx, 4
mov edx, dword [esp + 0x1e8]
lea ebp, [ecx + edx]
mov ecx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov edx, dword [esp + 0x138]
mov dword [esp + 0x74], ecx
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
jmp 0x49321d
cmp edi, 0x114
jne 0x492d96
cmp esi, 2
jge 0x492d00
mov ebx, dword [0x932698]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x49321d
lea eax, [0x762340]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], 2
call fcn.0049cb00
mov eax, dword [esp + 0x80]
lea ecx, [eax - 2]
mov edx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 2
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x1e8]
add ecx, ebp
mov esi, dword [esp + 0xc]
test ebx, ebx
je 0x492d63
mov dword [esp + 0x74], esi
mov eax, dword [esp + 0x18c]
mov edi, edx
mov edx, dword [esp + 0x138]
mov esi, dword [esp + 0x80]
jmp 0x49321d
cmp esi, 0x45
jl 0x492d70
add esi, 0x76c
jmp 0x492d76
add esi, 0x7d0
mov dword [esp + 0x74], esi
mov eax, dword [esp + 0x18c]
mov edi, edx
mov edx, dword [esp + 0x138]
mov esi, dword [esp + 0x80]
jmp 0x49321d
cmp edi, 0x20c
jne 0x492f41
mov dword [esp], ebp
mov dword [esp + 4], esi
mov byte [esp + 8], 0
call fcn.00491d60
mov eax, dword [esp + 0xc]
cmp eax, 0x18
jb 0x492dc9
mov ecx, 4
lea edx, [0x6f6e8e]
jmp 0x492dd7
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x1cc]
mov ebp, dword [esp + 0x10]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov dword [esp + 0x94], ecx
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
mov dword [esp + 0x1cc], edx
mov edx, dword [esp + 0x138]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
jmp 0x49321d
cmp edi, 0x210
jle 0x493113
cmp edi, 0x212
jle 0x492f51
cmp edi, 0x215
jne 0x492ebb
cmp esi, 2
jge 0x492e58
mov ebx, dword [0x932698]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x49321d
lea ecx, [esi - 2]
mov edi, ecx
neg ecx
sar ecx, 0x1f
and ecx, 2
add ecx, ebp
cmp word [ebp], 0x4d41
jne 0x492e88
mov dword [esp + 0xe8], eax
mov eax, 1
mov byte [esp + 0x37], al
mov eax, dword [esp + 0xe8]
jmp 0x492eaf
cmp word [ebp], 0x4d50
jne 0x492ea9
mov dword [esp + 0xf0], eax
mov eax, 1
mov byte [esp + 0x36], al
mov eax, dword [esp + 0xf0]
jmp 0x492eaf
mov ebx, dword [0x932698]
mov eax, dword [esp + 0x18c]
jmp 0x49321d
cmp edi, 0x216
jne 0x492f41
cmp esi, 2
jge 0x492ede
mov ebx, dword [0x932698]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x49321d
lea ecx, [esi - 2]
mov edi, ecx
neg ecx
sar ecx, 0x1f
and ecx, 2
add ecx, ebp
cmp word [ebp], 0x6d61
jne 0x492f0e
mov dword [esp + 0xd8], eax
mov eax, 1
mov byte [esp + 0x37], al
mov eax, dword [esp + 0xd8]
jmp 0x492f35
cmp word [ebp], 0x6d70
jne 0x492f2f
mov dword [esp + 0xe0], eax
mov eax, 1
mov byte [esp + 0x36], al
mov eax, dword [esp + 0xe0]
jmp 0x492f35
mov ebx, dword [0x932698]
mov eax, dword [esp + 0x18c]
jmp 0x49321d
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x49321d
mov dword [esp], ebp
mov dword [esp + 4], esi
cmp ecx, 0x212
sete al
mov byte [esp + 8], al
call fcn.00491d60
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x14]
test eax, eax
je 0x492faa
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov dword [esp + 0x8c], edx
mov edi, ebx
mov ebx, eax
mov edx, dword [esp + 0x138]
mov eax, dword [esp + 0x18c]
jmp 0x49321d
cmp edx, 0x3c
jb 0x492ff4
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov edi, 6
mov dword [esp + 0x94], edi
mov dword [esp + 0x8c], edx
mov edi, ebx
mov ebx, eax
lea eax, [0x6f76b2]
mov dword [esp + 0x1cc], eax
mov edx, dword [esp + 0x138]
mov eax, dword [esp + 0x18c]
jmp 0x49321d
cmp ebx, 2
jl 0x4930f9
movzx ebp, byte [ecx]
xchg ebp, eax
cmp al, 0x2e
xchg ebp, eax
je 0x493012
xchg ebp, eax
cmp al, 0x2c
xchg ebp, eax
jne 0x4930df
movzx ebp, byte [ecx + 1]
add ebp, 0xffffffd0
xchg ebp, eax
cmp al, 9
xchg ebp, eax
jbe 0x49303a
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0xa0]
mov edi, dword [esp + 0x1cc]
jmp 0x49487b
mov dword [esp + 0x130], edx
mov dword [esp + 0x12c], eax
mov dword [esp + 0x90], ebx
mov dword [esp + 0x1c8], ecx
mov eax, dword [esp + 0x1bc]
mov dword [esp], eax
mov ecx, dword [esp + 0x84]
mov dword [esp + 4], ecx
call fcn.0049b5b0
mov eax, dword [esp + 0x10]
and eax, 0xffff
cmp eax, 0x22
je 0x493083
cmp eax, 0x23
jne 0x4930c7
mov edx, dword [esp + 0x138]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov eax, dword [esp + 0x130]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x18c]
mov edi, dword [esp + 0x90]
mov ecx, dword [esp + 0x1c8]
mov ebx, dword [esp + 0x12c]
jmp 0x49321d
mov eax, dword [esp + 0x1c8]
mov ecx, dword [esp + 0x90]
mov edx, 2
jmp 0x4948bd
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0xa0]
mov edi, dword [esp + 0x1cc]
jmp 0x49487b
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0xa0]
mov edi, dword [esp + 0x1cc]
jmp 0x49487b
cmp edi, 0x20e
jg 0x49319f
mov dword [esp], ebp
mov dword [esp + 4], esi
cmp ecx, 0x20e
sete al
mov byte [esp + 8], al
call fcn.00491d60
mov eax, dword [esp + 0xc]
cmp eax, 0xc
jbe 0x49314e
mov ecx, 4
lea edx, [0x6f6e8e]
jmp 0x49315c
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x1cc]
mov ebp, dword [esp + 0x10]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov dword [esp + 0x94], ecx
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
mov dword [esp + 0x1cc], edx
mov edx, dword [esp + 0x138]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
jmp 0x49321d
mov dword [esp], ebp
mov dword [esp + 4], esi
cmp ecx, 0x210
sete al
mov byte [esp + 8], al
call fcn.00491d60
mov eax, dword [esp + 0xc]
cmp eax, 0x3c
jb 0x4931ce
mov ecx, 6
lea edx, [0x6f76ac]
jmp 0x4931dc
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x1cc]
mov ebp, dword [esp + 0x10]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov dword [esp + 0x94], ecx
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
mov dword [esp + 0x1cc], edx
mov edx, dword [esp + 0x138]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov ebp, dword [esp + 0x94]
test ebp, ebp
jne 0x494622
test ebx, ebx
je 0x492202
jmp 0x494450
test esi, esi
jne 0x494005
movzx edx, byte [esp + 0x36]
test dl, dl
je 0x49325b
mov edx, dword [esp + 0xcc]
cmp edx, 0xc
jge 0x493262
add edx, 0xc
jmp 0x493272
mov edx, dword [esp + 0xcc]
movzx ebx, byte [esp + 0x37]
test bl, bl
je 0x493272
cmp edx, 0xc
jne 0x493272
xor edx, edx
mov ebx, dword [esp + 0x78]
test ebx, ebx
jl 0x49371a
mov eax, dword [esp + 0x74]
test eax, 3
jne 0x4932e2
mov ebp, 0x51eb851f
mov ecx, edx
imul ebp
mov eax, dword [esp + 0x74]
mov esi, eax
sar esi, 0x1f
mov edi, edx
sar edx, 5
sub edx, esi
imul edx, edx, 0x64
cmp eax, edx
jne 0x4932b8
sar edi, 7
sub edi, esi
imul edx, edi, 0x190
cmp eax, edx
jne 0x4932da
cmp ebx, 0x3c
jne 0x4932cb
mov esi, ebx
mov edx, 2
mov ebx, 0x1d
jmp 0x4932ef
jle 0x4932d2
lea esi, [ebx - 1]
jmp 0x4932d4
mov esi, ebx
xor edx, edx
xor ebx, ebx
jmp 0x4932ef
mov esi, ebx
xor edx, edx
xor ebx, ebx
jmp 0x4932ef
mov ecx, edx
mov ebp, 0x51eb851f
mov esi, ebx
xor edx, edx
xor ebx, ebx
lea edi, [esi - 1]
cmp edi, 0x16c
jbe 0x49342f
mov eax, dword [esp + 0x210]
test eax, eax
jne 0x49330f
xor ecx, ecx
xor edx, edx
jmp 0x493367
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.00466670
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x20c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x210]
mov dword [esp + 8], ecx
call fcn.00472150
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x210]
cmp edx, eax
ja 0x49444b
mov dword [esp + 0x44], edx
mov dword [esp + 0x148], ecx
lea eax, [0x6d1300]
mov dword [esp], eax
call fcn.0040c000
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x208]
mov dword [eax + 4], ecx
mov ecx, dword [0x95f020]
test ecx, ecx
jne 0x4933a8
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x148]
jmp 0x4933c0
call fcn.004717d0
mov ecx, dword [esp + 0x204]
mov dword [edi], ecx
mov edx, dword [esp + 0x148]
mov dword [edi + 4], edx
mov dword [esp + 0x174], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x24], 0x1a
lea ecx, [0x7028c2]
mov dword [eax + 0x20], ecx
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.00471a5b
lea ecx, [0x762e70]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x174]
mov dword [esp + 0x234], ecx
add esp, 0x200
ret
test edx, edx
jne 0x49348a
mov edx, eax
mov eax, 0x84210843
mov ebx, edx
imul edi
lea edx, [edx + esi - 1]
sar edx, 4
lea eax, [edx + 1]
cmp eax, 0xd
jae 0x494441
mov dword [esp + 0x138], ecx
lea edi, [0x9058c0]
lea ecx, [edi + edx*4 + 4]
cmp dword [ecx], esi
jge 0x493469
lea eax, [edx + 2]
lea edx, [eax - 1]
cmp edx, 0xd
jae 0x494435
mov ecx, dword [edi + eax*4 - 4]
sub esi, ecx
mov ecx, dword [esp + 0x138]
mov edx, eax
mov ebx, esi
mov eax, dword [esp + 0x74]
mov esi, dword [esp + 0xac]
test esi, esi
jl 0x4935d2
cmp edx, esi
je 0x4935d2
mov eax, dword [esp + 0x210]
test eax, eax
jne 0x4934b2
xor ecx, ecx
xor edx, edx
jmp 0x49350a
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.00466670
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x20c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x210]
mov dword [esp + 8], ecx
call fcn.00472150
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x210]
cmp edx, eax
ja 0x494430
mov dword [esp + 0x144], ecx
mov dword [esp + 0x40], edx
lea eax, [0x6d1300]
mov dword [esp], eax
call fcn.0040c000
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x208]
mov dword [eax + 4], ecx
mov ecx, dword [0x95f020]
test ecx, ecx
jne 0x49354b
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x144]
jmp 0x493563
call fcn.004717d0
mov ecx, dword [esp + 0x204]
mov dword [edi], ecx
mov edx, dword [esp + 0x144]
mov dword [edi + 4], edx
mov dword [esp + 0x170], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x40]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x24], 0x22
lea ecx, [0x70690d]
mov dword [eax + 0x20], ecx
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.00471a5b
lea ecx, [0x762e70]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x170]
mov dword [esp + 0x234], ecx
add esp, 0x200
ret
mov esi, dword [esp + 0xd4]
test esi, esi
jl 0x493749
cmp ebx, esi
je 0x493749
mov eax, dword [esp + 0x210]
test eax, eax
jne 0x4935fa
xor ecx, ecx
xor edx, edx
jmp 0x493652
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.00466670
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x20c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x210]
mov dword [esp + 8], ecx
call fcn.00472150
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x210]
cmp edx, eax
ja 0x49442b
mov dword [esp + 0x3c], edx
mov dword [esp + 0x140], ecx
lea eax, [0x6d1300]
mov dword [esp], eax
call fcn.0040c000
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x208]
mov dword [eax + 4], ecx
mov ecx, dword [0x95f020]
test ecx, ecx
jne 0x493693
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x140]
jmp 0x4936ab
call fcn.004717d0
mov ecx, dword [esp + 0x204]
mov dword [edi], ecx
mov edx, dword [esp + 0x140]
mov dword [edi + 4], edx
mov dword [esp + 0x16c], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x24], 0x20
lea ecx, [0x70588c]
mov dword [eax + 0x20], ecx
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.00471a5b
lea ecx, [0x762e70]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x16c]
mov dword [esp + 0x234], ecx
add esp, 0x200
ret
mov ebx, dword [esp + 0xac]
test ebx, ebx
jge 0x49372a
mov ebx, 1
mov ebp, dword [esp + 0xd4]
test ebp, ebp
jge 0x49373a
mov ebp, 1
mov eax, dword [esp + 0x74]
mov ecx, edx
mov edx, ebx
mov ebx, ebp
mov ebp, 0x51eb851f
test ebx, ebx
jle 0x4937be
cmp edx, 2
jne 0x493790
test eax, 3
jne 0x49378a
mov esi, edx
imul ebp
mov ebp, dword [esp + 0x74]
mov edi, ebp
sar ebp, 0x1f
mov eax, edx
sar edx, 5
sub edx, ebp
imul edx, edx, 0x64
cmp edi, edx
jne 0x493783
sar eax, 7
sub eax, ebp
imul edx, eax, 0x190
cmp edi, edx
jne 0x493794
mov ebp, 0x1d
jmp 0x4937b6
mov esi, edx
mov edi, eax
jmp 0x493794
mov esi, edx
mov edi, eax
cmp esi, 0xd
jae 0x49441f
lea eax, [esi - 1]
lea edx, [0x9058c0]
mov ebp, dword [edx + esi*4]
cmp eax, 0xd
jae 0x494415
sub ebp, dword [edx + esi*4 - 4]
cmp ebp, ebx
jge 0x4938ef
mov eax, dword [esp + 0x210]
test eax, eax
jne 0x4937cf
xor ecx, ecx
xor edx, edx
jmp 0x493827
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.00466670
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x20c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x210]
mov dword [esp + 8], ecx
call fcn.00472150
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x210]
cmp edx, eax
ja 0x494410
mov dword [esp + 0x13c], ecx
mov dword [esp + 0x38], edx
lea eax, [0x6d1300]
mov dword [esp], eax
call fcn.0040c000
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x208]
mov dword [eax + 4], ecx
mov ecx, dword [0x95f020]
test ecx, ecx
jne 0x493868
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x13c]
jmp 0x493880
call fcn.004717d0
mov ecx, dword [esp + 0x204]
mov dword [edi], ecx
mov edx, dword [esp + 0x13c]
mov dword [edi + 4], edx
mov dword [esp + 0x168], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x38]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x24], 0x12
lea ecx, [0x6fd81e]
mov dword [eax + 0x20], ecx
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.00471a5b
lea ecx, [0x762e70]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x168]
mov dword [esp + 0x234], ecx
add esp, 0x200
ret
mov eax, dword [esp + 0x18c]
test eax, eax
jne 0x493f8c
mov eax, dword [esp + 0x6c]
cmp eax, 0xffffffff
jne 0x493c96
mov eax, dword [esp + 0x70]
test eax, eax
je 0x493c16
mov eax, dword [0x93203c]
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
call fcn.004974c0
lea edi, [esp + 0x194]
lea esi, [esp + 0x20]
call fcn.00471f3e
mov eax, dword [esp + 0x198]
test eax, 0x80000000
je 0x49399d
mov ecx, dword [esp + 0x194]
shl eax, 1
mov edx, ecx
shl ecx, 1
shr edx, 0x1f
or edx, eax
mov eax, edx
shl edx, 1
shr ecx, 0x1f
or edx, ecx
shr eax, 0x1f
add edx, 0xd7b17f80
adc eax, 0xd
jmp 0x4939ab
mov edx, dword [esp + 0x19c]
mov eax, dword [esp + 0x1a0]
mov ecx, dword [esp + 0x218]
mov dword [esp], ecx
mov ebx, dword [esp + 0x188]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x70]
mov dword [esp + 8], ebp
add edx, 0x886e0900
mov dword [esp + 0xc], edx
adc eax, 0xfffffff1
mov dword [esp + 0x10], eax
call fcn.0049a080
movzx eax, byte [esp + 0x18]
mov ecx, dword [esp + 0x14]
test al, al
je 0x493abc
lea eax, [esp + 0x194]
mov dword [esp], eax
mov eax, ecx
sar ecx, 0x1f
xor edx, edx
sub edx, eax
mov dword [esp + 4], edx
mov eax, 0
sbb eax, ecx
mov dword [esp + 8], eax
call fcn.004958a0
nop
mov eax, dword [esp + 0x218]
lea ecx, [0x93bd80]
cmp eax, ecx
jne 0x493a2a
xor eax, eax
mov ecx, dword [esp + 0x198]
nop
test ecx, 0x80000000
je 0x493a85
mov edx, dword [esp + 0x194]
mov ebx, edx
shl edx, 1
shl ecx, 1
shr ebx, 0x1f
or ebx, ecx
mov ecx, ebx
shl ebx, 1
shr edx, 0x1f
or edx, ebx
shr ecx, 0x1f
add edx, 0xd7b17f80
mov dword [esp + 0x19c], edx
adc ecx, 0xd
mov dword [esp + 0x1a0], ecx
and dword [esp + 0x194], 0x3fffffff
mov dword [esp + 0x198], 0
mov dword [esp + 0x1a4], eax
lea edi, [esp + 0x21c]
lea esi, [esp + 0x194]
call fcn.00471f3e
mov dword [esp + 0x230], 0
mov dword [esp + 0x234], 0
add esp, 0x200
ret
mov eax, dword [esp + 0x70]
cmp eax, 3
jle 0x493b03
mov edx, dword [esp + 0x188]
cmp word [edx], 0x4d47
jne 0x493b03
cmp byte [edx + 2], 0x54
jne 0x493b03
lea ecx, [0x762340]
mov dword [esp], ecx
lea ecx, [edx + 3]
mov dword [esp + 4], ecx
lea ecx, [eax - 3]
mov dword [esp + 8], ecx
call fcn.0049cb00
mov eax, dword [esp + 0xc]
imul ecx, eax, 0xe10
mov eax, dword [esp + 0x70]
mov dword [esp + 0x9c], ecx
nop
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.00466670
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x188]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x70]
mov dword [esp + 8], ecx
call fcn.00472150
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x70]
cmp edx, eax
ja 0x49440b
mov dword [esp], ecx
mov dword [esp + 4], edx
mov eax, dword [esp + 0x9c]
mov dword [esp + 8], eax
call fcn.00497c30
mov eax, dword [esp + 0xc]
lea ecx, [0x93bd80]
cmp eax, ecx
jne 0x493b84
xor eax, eax
mov ecx, dword [esp + 0x198]
nop
test ecx, 0x80000000
je 0x493bdf
mov edx, dword [esp + 0x194]
mov ebx, edx
shl edx, 1
shl ecx, 1
shr ebx, 0x1f
or ecx, ebx
mov ebx, ecx
shl ecx, 1
shr ebx, 0x1f
shr edx, 0x1f
or edx, ecx
add edx, 0xd7b17f80
mov dword [esp + 0x19c], edx
adc ebx, 0xd
mov dword [esp + 0x1a0], ebx
and dword [esp + 0x194], 0x3fffffff
mov dword [esp + 0x198], 0
mov dword [esp + 0x1a4], eax
lea edi, [esp + 0x21c]
lea esi, [esp + 0x194]
call fcn.00471f3e
mov dword [esp + 0x230], 0
mov dword [esp + 0x234], 0
add esp, 0x200
ret
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x214]
mov dword [esp + 0x1c], eax
call fcn.004974c0
lea edi, [esp + 0x1ec]
lea esi, [esp + 0x20]
call fcn.00471f3e
lea edi, [esp + 0x21c]
lea esi, [esp + 0x1ec]
call fcn.00471f3e
mov dword [esp + 0x230], 0
mov dword [esp + 0x234], 0
add esp, 0x200
ret
mov eax, dword [0x93203c]
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
call fcn.004974c0
lea edi, [esp + 0x1a8]
lea esi, [esp + 0x20]
call fcn.00471f3e
lea eax, [esp + 0x1a8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov ecx, eax
sar eax, 0x1f
xor edx, edx
sub edx, ecx
mov dword [esp + 4], edx
mov edx, 0
sbb edx, eax
mov dword [esp + 8], edx
call fcn.004958a0
mov eax, dword [esp + 0x1ac]
test eax, 0x80000000
je 0x493d47
mov ecx, dword [esp + 0x1a8]
shl eax, 1
mov edx, ecx
shl ecx, 1
shr edx, 0x1f
or edx, eax
mov eax, edx
shl edx, 1
shr ecx, 0x1f
or ecx, edx
shr eax, 0x1f
add ecx, 0xd7b17f80
adc eax, 0xd
jmp 0x493d55
mov ecx, dword [esp + 0x1b0]
mov eax, dword [esp + 0x1b4]
mov edx, dword [esp + 0x218]
mov dword [esp], edx
add ecx, 0x886e0900
mov dword [esp + 4], ecx
adc eax, 0xfffffff1
mov dword [esp + 8], eax
call fcn.00497e40
mov eax, dword [esp + 0x6c]
cmp dword [esp + 0x14], eax
jne 0x493dc6
mov ecx, dword [esp + 0x70]
test ecx, ecx
jne 0x493d8e
mov edx, 1
jmp 0x493dcc
mov edx, dword [esp + 0x10]
cmp ecx, edx
je 0x493d9a
xor edx, edx
jmp 0x493dcc
mov eax, dword [esp + 0xc]
mov dword [esp], eax
mov eax, dword [esp + 0x188]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004024a0
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x70]
mov edx, eax
mov eax, dword [esp + 0x6c]
jmp 0x493dcc
mov ecx, dword [esp + 0x70]
xor edx, edx
test dl, dl
je 0x493e7a
nop
mov eax, dword [esp + 0x218]
lea ecx, [0x93bd80]
cmp eax, ecx
jne 0x493de8
xor eax, eax
mov ecx, dword [esp + 0x1ac]
nop
test ecx, 0x80000000
je 0x493e43
mov edx, dword [esp + 0x1a8]
mov ebx, edx
shl edx, 1
shl ecx, 1
shr ebx, 0x1f
or ecx, ebx
mov ebx, ecx
shl ecx, 1
shr edx, 0x1f
or ecx, edx
shr ebx, 0x1f
add ecx, 0xd7b17f80
mov dword [esp + 0x1b0], ecx
adc ebx, 0xd
mov dword [esp + 0x1b4], ebx
and dword [esp + 0x1a8], 0x3fffffff
mov dword [esp + 0x1ac], 0
mov dword [esp + 0x1b8], eax
lea edi, [esp + 0x21c]
lea esi, [esp + 0x1a8]
call fcn.00471f3e
mov dword [esp + 0x230], 0
mov dword [esp + 0x234], 0
add esp, 0x200
ret
test ecx, ecx
jne 0x493e84
xor edx, edx
xor ecx, ecx
jmp 0x493eda
mov dword [esp], ecx
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.00466670
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x188]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x70]
mov dword [esp + 8], ecx
call fcn.00472150
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x70]
cmp edx, eax
ja 0x494406
mov eax, dword [esp + 0x6c]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00497c30
mov eax, dword [esp + 0xc]
lea ecx, [0x93bd80]
cmp eax, ecx
jne 0x493efa
xor eax, eax
mov ecx, dword [esp + 0x1ac]
nop
test ecx, 0x80000000
je 0x493f55
mov edx, dword [esp + 0x1a8]
mov ebx, edx
shl edx, 1
shl ecx, 1
shr ebx, 0x1f
or ecx, ebx
mov ebx, ecx
shl ecx, 1
shr ebx, 0x1f
shr edx, 0x1f
or edx, ecx
add edx, 0xd7b17f80
mov dword [esp + 0x1b0], edx
adc ebx, 0xd
mov dword [esp + 0x1b4], ebx
and dword [esp + 0x1a8], 0x3fffffff
mov dword [esp + 0x1ac], 0
mov dword [esp + 0x1b8], eax
lea edi, [esp + 0x21c]
lea esi, [esp + 0x1a8]
call fcn.00471f3e
mov dword [esp + 0x230], 0
mov dword [esp + 0x234], 0
add esp, 0x200
ret
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
call fcn.004974c0
lea edi, [esp + 0x1ec]
lea esi, [esp + 0x20]
call fcn.00471f3e
lea edi, [esp + 0x21c]
lea esi, [esp + 0x1ec]
call fcn.00471f3e
mov dword [esp + 0x230], 0
mov dword [esp + 0x234], 0
add esp, 0x200
ret
mov dword [esp], ebp
mov dword [esp + 4], esi
call fcn.004916e0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp], 0
lea edx, [0x6fb46e]
mov dword [esp + 4], edx
mov dword [esp + 8], 0xe
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.00450a00
mov eax, dword [esp + 0x14]
mov dword [esp + 0x1dc], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xbc], ecx
mov edx, dword [esp + 0x210]
test edx, edx
jne 0x494066
xor edx, edx
xor ebx, ebx
jmp 0x4940c7
mov dword [esp], edx
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.00466670
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x20c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x210]
mov dword [esp + 8], ecx
call fcn.00472150
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x210]
cmp edx, eax
ja 0x494401
mov edx, ecx
mov ebx, dword [esp + 0x210]
mov dword [esp + 0x58], ebx
mov dword [esp + 0x15c], edx
nop
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.00466670
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x1e8]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x80]
mov dword [esp + 8], ecx
call fcn.00472150
mov eax, dword [esp + 0x1e0]
neg eax
mov edx, dword [esp + 0x80]
cmp edx, eax
ja 0x4943fc
lea eax, [0x6d1300]
mov dword [esp], eax
call fcn.0040c000
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x208]
mov dword [eax + 4], ecx
mov ecx, dword [0x95f020]
test ecx, ecx
jne 0x494166
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x15c]
jmp 0x49417e
call fcn.004717d0
mov ecx, dword [esp + 0x204]
mov dword [edi], ecx
mov edx, dword [esp + 0x15c]
mov dword [edi + 4], edx
mov dword [eax], ecx
mov ecx, dword [esp + 0x58]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov ecx, dword [esp + 0x80]
mov dword [eax + 0x1c], ecx
mov ecx, dword [0x95f020]
test ecx, ecx
jne 0x4941bc
mov ecx, dword [esp + 0x1e0]
mov edx, dword [esp + 0x1dc]
jmp 0x4941d4
call fcn.004717d0
mov ecx, dword [esp + 0x1e0]
mov dword [edi], ecx
mov edx, dword [esp + 0x1dc]
mov dword [edi + 4], edx
mov dword [esp + 0x180], eax
mov dword [eax + 0x18], ecx
mov ecx, dword [esp + 0xbc]
mov dword [eax + 0x24], ecx
mov dword [eax + 0x20], edx
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.00471a5b
lea ecx, [0x762e70]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x180]
mov dword [esp + 0x234], ecx
add esp, 0x200
ret
mov eax, dword [esp + 0x210]
test eax, eax
jne 0x49422c
xor eax, eax
xor edx, edx
jmp 0x49429e
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.00466670
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x20c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x210]
mov dword [esp + 8], ecx
call fcn.00472150
mov eax, dword [esp + 0x1e0]
neg eax
mov edx, dword [esp + 0x210]
cmp edx, eax
ja 0x4943f7
mov ecx, dword [esp + 0x98]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov eax, dword [esp + 0x1e0]
mov dword [esp + 0x60], edx
mov dword [esp + 0x164], eax
test esi, esi
jne 0x4942b3
xor ebx, ebx
xor ebp, ebp
jmp 0x49430f
mov dword [esp], esi
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.00466670
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x1e8]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x80]
mov dword [esp + 8], ecx
call fcn.00472150
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x80]
cmp edx, eax
ja 0x4943f2
mov ebx, ecx
mov ebp, edx
mov dword [esp + 0x5c], ebp
mov dword [esp + 0x160], ebx
lea eax, [0x6d1300]
mov dword [esp], eax
call fcn.0040c000
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x208]
mov dword [eax + 4], ecx
mov ecx, dword [0x95f020]
test ecx, ecx
jne 0x49435e
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x164]
mov ebx, dword [esp + 0x1d0]
mov ebp, dword [esp + 0x160]
jmp 0x49438a
call fcn.004717f0
mov ecx, dword [esp + 0x204]
mov dword [edi], ecx
mov edx, dword [esp + 0x164]
mov dword [edi + 4], edx
mov ebx, dword [esp + 0x1d0]
mov dword [edi + 8], ebx
mov ebp, dword [esp + 0x160]
mov dword [edi + 0xc], ebp
mov dword [esp + 0x184], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x60]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov ecx, dword [esp + 0x98]
mov dword [eax + 0x14], ecx
mov dword [eax + 0x10], ebx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 0x1c], ecx
mov dword [eax + 0x18], ebp
mov dword [eax + 0x24], 0
mov dword [eax + 0x20], 0
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.00471a5b
lea ecx, [0x762e70]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x184]
mov dword [esp + 0x234], ecx
add esp, 0x200
ret
call fcn.004623b0
call fcn.004623b0
call fcn.004623b0
call fcn.004623b0
call fcn.004623b0
call fcn.004623b0
call fcn.004623b0
mov ecx, 0xd
call fcn.00471840
mov eax, esi
mov ecx, 0xd
call fcn.00471840
call fcn.004623b0
call fcn.004623b0
mov eax, edx
mov ecx, 0xd
call fcn.00471840
mov ecx, 0xd
call fcn.00471840
call fcn.004623b0
mov eax, dword [esp + 0x210]
test eax, eax
jne 0x494461
xor ecx, ecx
xor eax, eax
jmp 0x4944ce
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.00466670
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x20c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x210]
mov dword [esp + 8], ecx
call fcn.00472150
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x210]
cmp edx, eax
ja 0x494876
mov edx, dword [esp + 0x138]
mov esi, dword [esp + 0x80]
mov eax, dword [esp + 0x210]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x150], ecx
test esi, esi
jne 0x4944e3
xor ebx, ebx
xor ebp, ebp
jmp 0x49453f
mov dword [esp], esi
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.00466670
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x1e8]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x80]
mov dword [esp + 8], ecx
call fcn.00472150
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x80]
cmp edx, eax
ja 0x494871
mov ebx, ecx
mov ebp, edx
mov dword [esp + 0x14c], ebx
mov dword [esp + 0x48], ebp
lea eax, [0x6d1300]
mov dword [esp], eax
call fcn.0040c000
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x208]
mov dword [eax + 4], ecx
mov ecx, dword [0x95f020]
test ecx, ecx
jne 0x49458e
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x150]
mov ebx, dword [esp + 0x1c0]
mov ebp, dword [esp + 0x14c]
jmp 0x4945ba
call fcn.004717f0
mov ecx, dword [esp + 0x204]
mov dword [edi], ecx
mov edx, dword [esp + 0x150]
mov dword [edi + 4], edx
mov ebx, dword [esp + 0x1c0]
mov dword [edi + 8], ebx
mov ebp, dword [esp + 0x14c]
mov dword [edi + 0xc], ebp
mov dword [esp + 0x178], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x4c]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov ecx, dword [esp + 0x138]
mov dword [eax + 0x14], ecx
mov dword [eax + 0x10], ebx
mov ecx, dword [esp + 0x48]
mov dword [eax + 0x1c], ecx
mov dword [eax + 0x18], ebp
mov dword [eax + 0x24], 0
mov dword [eax + 0x20], 0
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.00471a5b
lea ecx, [0x762e70]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x178]
mov dword [esp + 0x234], ecx
add esp, 0x200
ret
mov dword [esp + 0x7c], edi
mov dword [esp + 0x190], ecx
mov dword [esp], 0
lea eax, [0x6f67df]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov eax, dword [esp + 0x1cc]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebp
lea eax, [0x6fa98b]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0xd
call fcn.00450aa0
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x1d8], eax
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xb8], ecx
mov edx, dword [esp + 0x210]
test edx, edx
jne 0x494693
xor edx, edx
xor ebx, ebx
jmp 0x494705
mov dword [esp], edx
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.00466670
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x20c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x210]
mov dword [esp + 8], ecx
call fcn.00472150
mov eax, dword [esp + 0x1e0]
neg eax
mov edx, dword [esp + 0x210]
cmp edx, eax
ja 0x49486c
mov eax, dword [esp + 0x1d8]
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0x1e0]
mov ebx, dword [esp + 0x210]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x158], edx
mov ebp, dword [esp + 0x7c]
test ebp, ebp
jne 0x49471e
xor ebp, ebp
xor esi, esi
jmp 0x494774
mov dword [esp], ebp
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.00466670
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x190]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x7c]
mov dword [esp + 8], ecx
call fcn.00472150
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x7c]
cmp edx, eax
ja 0x494867
mov ebp, ecx
mov esi, edx
mov dword [esp + 0x50], esi
mov dword [esp + 0x154], ebp
lea eax, [0x6d1300]
mov dword [esp], eax
call fcn.0040c000
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x208]
mov dword [eax + 4], ecx
mov ecx, dword [0x95f020]
test ecx, ecx
jne 0x4947ca
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x158]
mov ebx, dword [esp + 0x1c0]
mov ebp, dword [esp + 0x154]
mov esi, dword [esp + 0x1d8]
jmp 0x494800
call fcn.00471800
mov ecx, dword [esp + 0x204]
mov dword [edi], ecx
mov edx, dword [esp + 0x158]
mov dword [edi + 4], edx
mov ebx, dword [esp + 0x1c0]
mov dword [edi + 8], ebx
mov ebp, dword [esp + 0x154]
mov dword [edi + 0xc], ebp
mov esi, dword [esp + 0x1d8]
mov dword [edi + 0x10], esi
mov dword [esp + 0x17c], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x54]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov ecx, dword [esp + 0x138]
mov dword [eax + 0x14], ecx
mov dword [eax + 0x10], ebx
mov ecx, dword [esp + 0x50]
mov dword [eax + 0x1c], ecx
mov dword [eax + 0x18], ebp
mov ecx, dword [esp + 0xb8]
mov dword [eax + 0x24], ecx
mov dword [eax + 0x20], esi
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.00471a5b
lea ecx, [0x762e70]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x17c]
mov dword [esp + 0x234], ecx
add esp, 0x200
ret
call fcn.004623b0
call fcn.004623b0
call fcn.004623b0
call fcn.004623b0
mov dword [esp + 0x94], ebp
mov dword [esp + 0x8c], edx
mov dword [esp + 0x1cc], edi
mov dword [esp + 0xa0], esi
mov edx, dword [esp + 0x138]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov edi, ebx
mov ebx, eax
mov eax, dword [esp + 0x18c]
jmp 0x49321d
inc edx
cmp edx, ecx
jge 0x4948cd
movzx ebx, byte [edx + eax]
add ebx, 0xffffffd0
cmp bl, 9
jbe 0x4948bc
mov dword [esp + 0xa8], edx
lea ebx, [0x762348]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.0049c980
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0x90]
cmp eax, ecx
ja 0x49493d
sub ecx, eax
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and eax, ecx
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x18]
mov edx, dword [esp + 0x1c8]
add eax, edx
mov edx, dword [esp + 0x130]
mov edx, eax
mov eax, ecx
mov ecx, edx
mov edx, dword [esp + 0x130]
jmp 0x49487b
call fcn.004718a0
inc edi
mov dword [esp + 0xc4], edi
mov edi, dword [esp + 0x1e8]
mov edi, dword [esp + 0xc4]
cmp edi, 2
jge 0x49498e
cmp ecx, 0x10a
jne 0x494942
test esi, esi
je 0x494942
cmp byte [ebp], 0x20
jne 0x494942
dec esi
mov dword [esp + 0x134], esi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, 1
add ebp, esi
mov esi, dword [esp + 0x134]
jmp 0x494942
xor edi, edi
xor edi, edi
mov dword [esp + 0x68], edi
xor edi, edi
jmp 0x4949ba
mov edx, dword [esp + 0x68]
lea edx, [edx + edx*4]
movzx eax, al
inc edi
lea eax, [eax + edx*2]
mov edx, dword [esp + 0x138]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x1c0]
cmp edi, 3
jge 0x4949da
cmp edi, esi
jge 0x4949d6
movzx eax, byte [edi + ebp]
add eax, 0xffffffd0
cmp al, 9
jbe 0x49499a
mov eax, dword [esp + 0x1c0]
test edi, edi
je 0x4949e7
cmp ecx, 0x10b
jne 0x4949f1
cmp edi, 3
je 0x4949f1
mov ecx, dword [0x932698]
xor edi, edi
jmp 0x494a08
cmp edi, esi
ja 0x494a2c
sub esi, edi
mov ecx, esi
neg ecx
sar ecx, 0x1f
and ecx, edi
add ebp, ecx
mov edi, dword [esp + 0x68]
xor ecx, ecx
mov dword [esp + 0x78], edi
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ebx, ecx
mov esi, dword [esp + 0x80]
mov ecx, ebp
mov ebp, dword [esp + 0x1e8]
jmp 0x49321d
mov eax, edi
mov ecx, esi
call fcn.004718a0
mov ecx, ebx
mov dword [esp + 0xc0], ecx
lea ebx, [ecx + 1]
cmp esi, ebx
jle 0x494a5e
jbe 0x494afe
movzx edi, byte [ecx + ebp + 1]
xchg edi, eax
cmp al, 0x30
xchg edi, eax
jb 0x494a5e
xchg edi, eax
cmp al, 0x39
xchg edi, eax
jbe 0x494a35
mov dword [esp + 0x128], ebx
lea eax, [0x762348]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
call fcn.0049c980
mov ecx, dword [esp + 0x80]
mov eax, dword [esp + 0x128]
cmp ecx, eax
jb 0x494af9
mov edx, dword [esp + 0xc0]
sub ecx, edx
lea edi, [ecx - 1]
mov ecx, edi
neg ecx
sar ecx, 0x1f
and eax, ecx
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1e8]
add eax, esi
mov esi, dword [esp + 0x80]
mov dword [esp + 0x94], ebp
mov dword [esp + 0x1cc], ebx
mov dword [esp + 0xa0], ecx
mov ebp, dword [esp + 0x1e8]
mov ecx, eax
mov ebx, edx
mov edx, dword [esp + 0x138]
mov eax, dword [esp + 0x18c]
jmp 0x49321d
call fcn.004718a0
mov eax, ebx
mov ecx, esi
call fcn.00471840
call fcn.00471860
mov eax, edx
mov ecx, ebx
call fcn.004718a0
mov ecx, ebx
call fcn.00471860
nop
call fcn.004703c0
jmp fcn.00492120