Function at 0x4a1ad0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x110]
cmp eax, dword [ecx + 8]
jbe 0x4a4770
sub esp, 0x190
xor ebx, ebx
mov dword [esp + 0x1ac], ebx
mov dword [esp + 0x1b0], ebx
mov dword [esp + 0x1b4], ebx
mov dword [esp + 0x1b8], ebx
xor ebx, ebx
mov dword [esp + 0x1bc], ebx
mov dword [esp + 0x1c0], ebx
mov ebx, dword [esp + 0x194]
mov dword [esp + 0x150], ebx
mov ebx, dword [esp + 0x198]
mov dword [esp + 0x154], ebx
mov ebx, dword [esp + 0x19c]
mov dword [esp + 0x120], ebx
mov ebx, dword [esp + 0x1a0]
mov dword [esp + 0x124], ebx
xor ebx, ebx
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xdc], ebx
mov byte [esp + 0x33], 0
mov byte [esp + 0x32], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x60], 1
mov dword [esp + 0x78], 1
mov dword [esp + 0x74], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x54], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x34], 0xffffffff
xor ebx, ebx
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], ebx
xor ebx, ebx
mov dword [esp + 0x118], ebx
mov dword [esp + 0x11c], ebx
mov ebx, dword [esp + 0x194]
mov dword [esp], ebx
mov ebx, dword [esp + 0x198]
mov dword [esp + 4], ebx
call fcn.0049d350
mov eax, dword [esp + 0x198]
mov esi, dword [esp + 8]
mov ebp, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x3c], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0xa0], ebx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xa4], ecx
mov edi, eax
sub eax, ecx
cmp eax, edi
ja 0x4a4769
cmp ebp, eax
ja 0x4a4769
mov edx, eax
sub edx, ebp
mov eax, dword [esp + 0x194]
cmp edx, 0
je 0x4a1c4b
add eax, ebp
mov dword [esp + 0xac], edx
mov dword [esp + 0xa8], eax
mov ebx, dword [esp + 0x19c]
mov dword [esp], ebx
mov ebx, dword [esp + 0x1a0]
mov dword [esp + 4], ebx
mov dword [esp + 0xe0], esi
mov dword [esp + 8], esi
mov dword [esp + 0xe4], ebp
mov dword [esp + 0xc], ebp
call fcn.004a1860
mov edi, dword [esp + 0x3c]
mov esi, dword [esp + 0x10]
mov dword [esp + 0x19c], esi
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x1a0], ecx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x11c], ebx
mov ebx, dword [esp + 0x118]
cmp ebx, 0
je 0x4a1e1a
mov dword [esp], 0x5d7be0
call fcn.0040db10
mov eax, dword [esp + 4]
mov dword [esp + 0x8c], eax
mov ebp, dword [esp + 0x154]
mov dword [eax + 4], ebp
mov ebp, dword [esp + 0x150]
cmp byte [0x6cfdd8], 0
jne 0x4a1e02
mov dword [eax], ebp
mov ebp, dword [esp + 0x124]
mov dword [eax + 0xc], ebp
mov ebp, dword [esp + 0x120]
cmp byte [0x6cfdd8], 0
jne 0x4a1de7
mov dword [eax + 8], ebp
mov ebp, dword [esp + 0xe4]
mov dword [eax + 0x14], ebp
mov ebp, dword [esp + 0xe0]
cmp byte [0x6cfdd8], 0
jne 0x4a1dcc
mov dword [eax + 0x10], ebp
mov ebp, dword [esp + 0x1a0]
mov dword [eax + 0x1c], ebp
mov ebp, dword [esp + 0x19c]
cmp byte [0x6cfdd8], 0
jne 0x4a1db4
mov dword [eax + 0x18], ebp
xor ebp, ebp
mov dword [eax + 0x20], ebp
mov dword [eax + 0x24], ebp
mov ebx, dword [0x6124a0]
mov dword [esp + 0x1ac], ebx
mov ebx, dword [0x6124a4]
mov dword [esp + 0x1b0], ebx
mov ebx, dword [0x6124a8]
mov dword [esp + 0x1b4], ebx
mov ebx, dword [0x6124ac]
mov dword [esp + 0x1b8], ebx
mov dword [esp + 0x1c0], eax
mov dword [esp + 0x1bc], 0x6a6d90
add esp, 0x190
ret
lea esi, [eax + 0x18]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040e4e0
mov eax, dword [esp + 0x8c]
jmp 0x4a1d5f
lea esi, [eax + 0x10]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040e4e0
mov eax, dword [esp + 0x8c]
jmp 0x4a1d42
lea esi, [eax + 8]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040e4e0
mov eax, dword [esp + 0x8c]
jmp 0x4a1d21
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.0040e4e0
mov eax, dword [esp + 0x8c]
jmp 0x4a1d00
cmp edi, 0
jne 0x4a2bff
cmp ecx, 0
je 0x4a1fc8
mov dword [esp], 0x5d7be0
call fcn.0040db10
mov eax, dword [esp + 4]
mov dword [esp + 0x8c], eax
mov ebp, dword [esp + 0x154]
mov dword [eax + 4], ebp
mov ebp, dword [esp + 0x150]
cmp byte [0x6cfdd8], 0
jne 0x4a1fb0
mov dword [eax], ebp
mov ebp, dword [esp + 0x124]
mov dword [eax + 0xc], ebp
mov ebp, dword [esp + 0x120]
cmp byte [0x6cfdd8], 0
jne 0x4a1f95
mov dword [eax + 8], ebp
xor ebp, ebp
mov dword [eax + 0x10], ebp
mov dword [eax + 0x14], ebp
mov ebp, dword [esp + 0x1a0]
mov dword [eax + 0x1c], ebp
mov ebp, dword [esp + 0x19c]
cmp byte [0x6cfdd8], 0
jne 0x4a1f81
mov dword [eax + 0x18], ebp
mov dword [esp], 0
mov ebx, 0x5f090d
mov dword [esp + 4], ebx
mov dword [esp + 8], 0xe
mov ebx, dword [esp + 0x19c]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x1a0]
mov dword [esp + 0x10], ebx
call fcn.0043f020
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x8c]
cmp ebx, 0
je 0x4a1f7a
mov dword [esp + 0x14c], eax
mov dword [ebx + 0x24], eax
mov dword [esp + 0x148], ecx
cmp byte [0x6cfdd8], 0
jne 0x4a1f69
mov dword [ebx + 0x20], ecx
mov eax, dword [esp + 0x8c]
mov ebx, dword [0x6124b0]
mov dword [esp + 0x1ac], ebx
mov ebx, dword [0x6124b4]
mov dword [esp + 0x1b0], ebx
mov ebx, dword [0x6124b8]
mov dword [esp + 0x1b4], ebx
mov ebx, dword [0x6124bc]
mov dword [esp + 0x1b8], ebx
mov dword [esp + 0x1c0], eax
mov dword [esp + 0x1bc], 0x6a6d90
add esp, 0x190
ret
lea esi, [ebx + 0x20]
mov dword [esp], esi
mov dword [esp + 4], ecx
call fcn.0040e4e0
jmp 0x4a1f15
mov dword [ebx], eax
jmp 0x4a1ef8
lea esi, [eax + 0x18]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040e4e0
jmp 0x4a1ead
lea esi, [eax + 8]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040e4e0
mov eax, dword [esp + 0x8c]
jmp 0x4a1e84
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.0040e4e0
mov eax, dword [esp + 0x8c]
jmp 0x4a1e63
cmp byte [esp + 0x32], 0
je 0x4a2bda
mov ebx, dword [esp + 0x74]
cmp ebx, 0xc
jge 0x4a2bda
mov ebx, dword [esp + 0x74]
add ebx, 0xc
mov dword [esp + 0x74], ebx
mov edi, dword [esp + 0x60]
mov ecx, dword [esp + 0x38]
cmp edi, 2
jne 0x4a2b90
mov ebp, ecx
sar ebp, 0x1f
and ebp, 3
mov ebx, ecx
add ebx, ebp
and ebx, 3
sub ebx, ebp
cmp ebx, 0
jne 0x4a2077
mov dword [esp + 0x7c], ecx
mov eax, 0x51eb851f
mov ebx, edx
imul dword [esp + 0x7c]
mov dword [esp + 0x7c], edx
mov edx, ebx
mov ebx, dword [esp + 0x7c]
sar ebx, 5
mov ebp, ecx
sar ebp, 0x1f
sub ebx, ebp
imul ebx, ebx, 0x64
mov ebp, ecx
sub ebp, ebx
cmp ebp, 0
jne 0x4a2bd0
mov dword [esp + 0x7c], ecx
mov eax, 0x51eb851f
imul dword [esp + 0x7c]
mov dword [esp + 0x7c], edx
mov ebx, dword [esp + 0x7c]
sar ebx, 7
mov ebp, ecx
sar ebp, 0x1f
sub ebx, ebp
imul ebx, ebx, 0x190
mov ebp, ecx
sub ebp, ebx
cmp ebp, 0
je 0x4a2bd0
xor eax, eax
cmp al, 0
je 0x4a2b90
mov eax, 0x1d
mov ebx, dword [esp + 0x78]
cmp eax, ebx
jge 0x4a21b7
mov dword [esp], 0x5d7be0
call fcn.0040db10
mov eax, dword [esp + 4]
mov dword [esp + 0x8c], eax
mov ebp, dword [esp + 0x154]
mov dword [eax + 4], ebp
mov ebp, dword [esp + 0x150]
cmp byte [0x6cfdd8], 0
jne 0x4a219f
mov dword [eax], ebp
mov ebp, dword [esp + 0x124]
mov dword [eax + 0xc], ebp
mov ebp, dword [esp + 0x120]
cmp byte [0x6cfdd8], 0
jne 0x4a2184
mov dword [eax + 8], ebp
xor ebp, ebp
mov dword [eax + 0x10], ebp
mov dword [eax + 0x14], ebp
mov ebp, dword [esp + 0x1a0]
mov dword [eax + 0x1c], ebp
mov ebp, dword [esp + 0x19c]
cmp byte [0x6cfdd8], 0
jne 0x4a216c
mov dword [eax + 0x18], ebp
mov ebp, 0x5f1bde
mov dword [eax + 0x20], ebp
mov dword [eax + 0x24], 0x12
mov ebx, dword [0x612470]
mov dword [esp + 0x1ac], ebx
mov ebx, dword [0x612474]
mov dword [esp + 0x1b0], ebx
mov ebx, dword [0x612478]
mov dword [esp + 0x1b4], ebx
mov ebx, dword [0x61247c]
mov dword [esp + 0x1b8], ebx
mov dword [esp + 0x1c0], eax
mov dword [esp + 0x1bc], 0x6a6d90
add esp, 0x190
ret
lea esi, [eax + 0x18]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040e4e0
mov eax, dword [esp + 0x8c]
jmp 0x4a2110
lea esi, [eax + 8]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040e4e0
mov eax, dword [esp + 0x8c]
jmp 0x4a20eb
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.0040e4e0
mov eax, dword [esp + 0x8c]
jmp 0x4a20ca
mov ebx, dword [esp + 0x80]
xor ebp, ebp
cmp ebx, ebp
je 0x4a2252
mov ebx, dword [esp + 0x38]
mov dword [esp], ebx
mov ebx, dword [esp + 0x60]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x78]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x74]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x68]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x54]
mov dword [esp + 0x18], ebx
mov ebx, dword [esp + 0x80]
mov dword [esp + 0x1c], ebx
call fcn.004a6d50
mov ebp, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x1ac], ebp
mov dword [esp + 0x1b0], edx
mov dword [esp + 0x1b4], ecx
mov dword [esp + 0x1b8], eax
xor ebx, ebx
mov dword [esp + 0x1bc], ebx
mov dword [esp + 0x1c0], ebx
add esp, 0x190
ret
mov ebx, dword [esp + 0x34]
cmp ebx, 0xffffffff
je 0x4a2662
mov ebx, dword [esp + 0x38]
mov dword [esp], ebx
mov ebx, dword [esp + 0x60]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x78]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x74]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x68]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x54]
mov dword [esp + 0x18], ebx
mov ebx, dword [0x6ba830]
mov dword [esp + 0x1c], ebx
call fcn.004a6d50
mov edx, dword [esp + 0x20]
mov ebp, dword [esp + 0x24]
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x188], ebx
mov ebx, dword [esp + 0x2c]
mov dword [esp + 0x18c], ebx
mov esi, edx
mov eax, dword [esp + 0x34]
cdq
mov ebx, eax
mov ecx, edx
mov eax, esi
mov edx, ebp
sub eax, ebx
sbb edx, ecx
mov ebx, dword [esp + 0x1a8]
mov dword [esp], ebx
mov dword [esp + 0x180], eax
mov dword [esp + 0x184], edx
add eax, 0x886e0900
adc edx, 0xfffffff1
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.004a7720
mov esi, dword [esp + 0x9c]
mov edi, dword [esp + 0xc]
mov dword [esp + 0xf0], edi
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xf4], ecx
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x34]
cmp ebx, ebp
jne 0x4a23b4
cmp esi, 0
je 0x4a2365
cmp ecx, esi
jne 0x4a23b4
mov dword [esp], edi
mov dword [esp + 4], ecx
mov ebp, dword [esp + 0x98]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
call fcn.00451c80
mov esi, dword [esp + 0x9c]
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x4a23b4
mov eax, dword [esp + 0x1a8]
mov ebx, dword [esp + 0x180]
mov dword [esp + 0x1ac], ebx
mov ebx, dword [esp + 0x184]
mov dword [esp + 0x1b0], ebx
mov ebx, dword [esp + 0x188]
mov dword [esp + 0x1b4], ebx
mov dword [esp + 0x1b8], eax
xor ebx, ebx
mov dword [esp + 0x1bc], ebx
mov dword [esp + 0x1c0], ebx
add esp, 0x190
ret
mov ebx, dword [esp + 0x98]
mov dword [esp + 0x100], ebx
mov dword [esp + 0x104], esi
mov ebx, dword [esp + 0x34]
mov dword [esp + 0x48], ebx
mov dword [esp], 0x5da2a0
call fcn.0040db10
mov ecx, dword [esp + 4]
mov edi, ecx
cmp ecx, 0
je 0x4a265b
xor eax, eax
call fcn.00452043
mov dword [esp + 0x90], ecx
mov ebp, dword [esp + 0x104]
mov dword [ecx + 4], ebp
mov ebp, dword [esp + 0x100]
cmp byte [0x6cfdd8], 0
jne 0x4a264a
mov dword [ecx], ebp
mov dword [esp], 0x5b6360
call fcn.0040db10
mov eax, dword [esp + 4]
mov ebp, dword [0x612480]
mov dword [eax], ebp
mov ebp, dword [0x612484]
mov dword [eax + 4], ebp
mov ebp, dword [0x612488]
mov dword [eax + 8], ebp
movzx ebp, byte [0x61248c]
xchg ebp, ebx
mov byte [eax + 0xc], bl
xchg ebp, ebx
mov dword [esp + 0x94], eax
mov ebp, dword [esp + 0x104]
mov dword [eax + 4], ebp
mov ebp, dword [esp + 0x100]
cmp byte [0x6cfdd8], 0
jne 0x4a2632
mov dword [eax], ebp
mov ecx, dword [esp + 0x48]
mov dword [eax + 8], ecx
mov edx, 1
mov ecx, 1
mov ebx, dword [esp + 0x90]
cmp ebx, 0
je 0x4a262b
mov dword [esp + 0x168], edx
mov dword [ebx + 0xc], edx
mov dword [esp + 0x16c], ecx
mov dword [ebx + 0x10], ecx
mov dword [esp + 0x164], eax
cmp byte [0x6cfdd8], 0
jne 0x4a2617
mov dword [ebx + 8], eax
mov dword [esp], 0x5b63a0
call fcn.0040db10
mov ecx, dword [esp + 0x90]
mov eax, dword [esp + 4]
mov ebp, dword [0x6121e8]
mov dword [eax], ebp
mov ebp, dword [0x6121ec]
mov dword [eax + 4], ebp
movzx ebp, byte [0x6121f0]
xchg ebp, ebx
mov byte [eax + 8], bl
xchg ebp, ebx
movzx ebp, byte [0x6121f1]
xchg ebp, ebx
mov byte [eax + 9], bl
xchg ebp, ebx
movzx ebp, byte [0x6121f2]
xchg ebp, ebx
mov byte [eax + 0xa], bl
xchg ebp, ebx
mov esi, 1
mov edx, 1
cmp ecx, 0
je 0x4a2610
mov dword [esp + 0x15c], esi
mov dword [ecx + 0x18], esi
mov dword [esp + 0x160], edx
mov dword [ecx + 0x1c], edx
mov dword [esp + 0x158], eax
cmp byte [0x6cfdd8], 0
jne 0x4a25f5
mov dword [ecx + 0x14], eax
xor ebp, ebp
mov edx, 0x80000000
mov dword [ecx + 0x20], ebp
mov dword [ecx + 0x24], edx
mov ebp, 0xffffffff
mov edx, 0x7fffffff
mov dword [ecx + 0x28], ebp
mov dword [ecx + 0x2c], edx
cmp dword [ecx + 0xc], 0
jbe 0x4a25ee
mov ebp, dword [ecx + 8]
mov dword [esp + 0x84], ecx
cmp byte [0x6cfdd8], 0
jne 0x4a25d6
mov dword [ecx + 0x30], ebp
mov ebx, dword [esp + 0x180]
mov dword [esp + 0x1ac], ebx
mov ebx, dword [esp + 0x184]
mov dword [esp + 0x1b0], ebx
mov ebx, dword [esp + 0x188]
mov dword [esp + 0x1b4], ebx
mov dword [esp + 0x1b8], ecx
xor ebx, ebx
mov dword [esp + 0x1bc], ebx
mov dword [esp + 0x1c0], ebx
add esp, 0x190
ret
lea esi, [ecx + 0x30]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040e4e0
mov ecx, dword [esp + 0x84]
jmp 0x4a258e
call fcn.00427990
ud2
lea esi, [ecx + 0x14]
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.0040e4e0
mov ecx, dword [esp + 0x90]
jmp 0x4a2555
mov dword [ecx], eax
jmp 0x4a252a
lea esi, [ebx + 8]
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.0040e4e0
jmp 0x4a24c5
mov dword [ebx], eax
jmp 0x4a249a
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.0040e4e0
mov eax, dword [esp + 0x94]
jmp 0x4a2479
mov dword [esp], ecx
mov dword [esp + 4], ebp
call fcn.0040e4e0
jmp 0x4a241a
mov dword [ecx], eax
jmp 0x4a23ec
mov ebx, dword [esp + 0x9c]
cmp ebx, 0
je 0x4a2b06
mov ebx, dword [esp + 0x38]
mov dword [esp], ebx
mov ebx, dword [esp + 0x60]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x78]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x74]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x68]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x54]
mov dword [esp + 0x18], ebx
mov ebx, dword [0x6ba830]
mov dword [esp + 0x1c], ebx
call fcn.004a6d50
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x178], ebx
mov ebx, dword [esp + 0x2c]
mov dword [esp + 0x17c], ebx
mov ebx, dword [esp + 0x1a8]
mov dword [esp], ebx
mov ebx, dword [esp + 0x98]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x9c]
mov dword [esp + 8], ebx
mov dword [esp + 0x170], eax
mov dword [esp + 0x174], edx
add eax, 0x886e0900
adc edx, 0xfffffff1
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
call fcn.004a7c20
mov ebp, dword [esp + 0x9c]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x4c], ecx
movzx ebx, byte [esp + 0x19]
cmp bl, 0
je 0x4a2794
mov esi, dword [esp + 0x170]
mov ebp, dword [esp + 0x174]
mov eax, ecx
cdq
mov ebx, eax
mov ecx, edx
mov eax, esi
mov edx, ebp
sub eax, ebx
sbb edx, ecx
mov ecx, edx
mov edx, eax
mov eax, dword [esp + 0x1a8]
mov dword [esp + 0x1ac], edx
mov dword [esp + 0x1b0], ecx
mov ebx, dword [esp + 0x178]
mov dword [esp + 0x1b4], ebx
mov dword [esp + 0x1b8], eax
xor ebx, ebx
mov dword [esp + 0x1bc], ebx
mov dword [esp + 0x1c0], ebx
add esp, 0x190
ret
cmp ebp, 3
jle 0x4a2afa
cmp ebp, 3
jb 0x4a2aff
mov esi, dword [esp + 0x98]
mov eax, 3
cmp eax, 3
jne 0x4a2afa
mov dword [esp + 0x128], esi
mov dword [esp], esi
mov dword [esp + 0x12c], eax
mov dword [esp + 4], eax
mov ebp, 0x5ee415
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 3
call fcn.00451c80
mov ebp, dword [esp + 0x9c]
mov ecx, dword [esp + 0x4c]
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x4a2afa
cmp ebp, 3
jb 0x4a2af3
mov ecx, ebp
sub ecx, 3
mov eax, dword [esp + 0x98]
cmp ecx, 0
je 0x4a281c
add eax, 3
mov dword [esp + 0x140], eax
mov dword [esp], eax
mov dword [esp + 0x144], ecx
mov dword [esp + 4], ecx
call fcn.0049ef40
mov ebp, dword [esp + 0x9c]
mov ecx, dword [esp + 8]
imul ecx, ecx, 0xe10
mov ebx, dword [esp + 0x98]
mov dword [esp + 0xf8], ebx
mov dword [esp + 0xfc], ebp
mov dword [esp + 0x50], ecx
mov dword [esp], 0x5da2a0
call fcn.0040db10
mov ecx, dword [esp + 4]
mov edi, ecx
cmp ecx, 0
je 0x4a2aec
xor eax, eax
call fcn.00452043
mov dword [esp + 0x90], ecx
mov ebp, dword [esp + 0xfc]
mov dword [ecx + 4], ebp
mov ebp, dword [esp + 0xf8]
cmp byte [0x6cfdd8], 0
jne 0x4a2adb
mov dword [ecx], ebp
mov dword [esp], 0x5b6360
call fcn.0040db10
mov eax, dword [esp + 4]
mov ebp, dword [0x612490]
mov dword [eax], ebp
mov ebp, dword [0x612494]
mov dword [eax + 4], ebp
mov ebp, dword [0x612498]
mov dword [eax + 8], ebp
movzx ebp, byte [0x61249c]
xchg ebp, ebx
mov byte [eax + 0xc], bl
xchg ebp, ebx
mov dword [esp + 0x94], eax
mov ebp, dword [esp + 0xfc]
mov dword [eax + 4], ebp
mov ebp, dword [esp + 0xf8]
cmp byte [0x6cfdd8], 0
jne 0x4a2ac3
mov dword [eax], ebp
mov ecx, dword [esp + 0x50]
mov dword [eax + 8], ecx
mov edx, 1
mov ecx, 1
mov ebx, dword [esp + 0x90]
cmp ebx, 0
je 0x4a2abc
mov dword [esp + 0x168], edx
mov dword [ebx + 0xc], edx
mov dword [esp + 0x16c], ecx
mov dword [ebx + 0x10], ecx
mov dword [esp + 0x164], eax
cmp byte [0x6cfdd8], 0
jne 0x4a2aa8
mov dword [ebx + 8], eax
mov dword [esp], 0x5b63a0
call fcn.0040db10
mov ecx, dword [esp + 0x90]
mov eax, dword [esp + 4]
mov ebp, dword [0x6121f8]
mov dword [eax], ebp
mov ebp, dword [0x6121fc]
mov dword [eax + 4], ebp
movzx ebp, byte [0x612200]
xchg ebp, ebx
mov byte [eax + 8], bl
xchg ebp, ebx
movzx ebp, byte [0x612201]
xchg ebp, ebx
mov byte [eax + 9], bl
xchg ebp, ebx
movzx ebp, byte [0x612202]
xchg ebp, ebx
mov byte [eax + 0xa], bl
xchg ebp, ebx
mov esi, 1
mov edx, 1
cmp ecx, 0
je 0x4a2aa1
mov dword [esp + 0x15c], esi
mov dword [ecx + 0x18], esi
mov dword [esp + 0x160], edx
mov dword [ecx + 0x1c], edx
mov dword [esp + 0x158], eax
cmp byte [0x6cfdd8], 0
jne 0x4a2a86
mov dword [ecx + 0x14], eax
xor ebp, ebp
mov edx, 0x80000000
mov dword [ecx + 0x20], ebp
mov dword [ecx + 0x24], edx
mov ebp, 0xffffffff
mov edx, 0x7fffffff
mov dword [ecx + 0x28], ebp
mov dword [ecx + 0x2c], edx
mov eax, ecx
cmp dword [ecx + 0xc], 0
jbe 0x4a2a7f
mov ebp, dword [ecx + 8]
mov dword [esp + 0x88], ecx
cmp byte [0x6cfdd8], 0
jne 0x4a2a67
mov dword [ecx + 0x30], ebp
mov ebx, dword [esp + 0x170]
mov dword [esp + 0x1ac], ebx
mov ebx, dword [esp + 0x174]
mov dword [esp + 0x1b0], ebx
mov ebx, dword [esp + 0x178]
mov dword [esp + 0x1b4], ebx
mov dword [esp + 0x1b8], eax
xor ebx, ebx
mov dword [esp + 0x1bc], ebx
mov dword [esp + 0x1c0], ebx
add esp, 0x190
ret
lea esi, [ecx + 0x30]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040e4e0
mov eax, dword [esp + 0x88]
jmp 0x4a2a1f
call fcn.00427990
ud2
lea esi, [ecx + 0x14]
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.0040e4e0
mov ecx, dword [esp + 0x90]
jmp 0x4a29e4
mov dword [ecx], eax
jmp 0x4a29b9
lea esi, [ebx + 8]
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.0040e4e0
jmp 0x4a2954
mov dword [ebx], eax
jmp 0x4a2929
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.0040e4e0
mov eax, dword [esp + 0x94]
jmp 0x4a2908
mov dword [esp], ecx
mov dword [esp + 4], ebp
call fcn.0040e4e0
jmp 0x4a28a9
mov dword [ecx], eax
jmp 0x4a287b
call fcn.00427a00
ud2
jmp 0x4a2847
call fcn.00427a00
ud2
mov ebx, dword [esp + 0x38]
mov dword [esp], ebx
mov ebx, dword [esp + 0x60]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x78]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x74]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x68]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x54]
mov dword [esp + 0x18], ebx
mov ebx, dword [esp + 0x1a4]
mov dword [esp + 0x1c], ebx
call fcn.004a6d50
mov ebp, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x1ac], ebp
mov dword [esp + 0x1b0], edx
mov dword [esp + 0x1b4], ecx
mov dword [esp + 0x1b8], eax
xor ebx, ebx
mov dword [esp + 0x1bc], ebx
mov dword [esp + 0x1c0], ebx
add esp, 0x190
ret
mov ebx, edi
mov ebp, 0x6a9a40
cmp edi, 0xd
jae 0x4a2bc9
shl ebx, 2
add ebp, ebx
mov ecx, dword [ebp]
mov ebx, edi
dec ebx
mov ebp, 0x6a9a40
cmp ebx, 0xd
jae 0x4a2bc2
shl ebx, 2
add ebp, ebx
mov ebx, dword [ebp]
mov eax, ecx
sub eax, ebx
jmp 0x4a2087
call fcn.00427990
ud2
call fcn.00427990
ud2
mov eax, 1
jmp 0x4a2079
cmp byte [esp + 0x33], 0
je 0x4a1feb
mov ebx, dword [esp + 0x74]
cmp ebx, 0xc
jne 0x4a1feb
mov dword [esp + 0x74], 0
jmp 0x4a1feb
mov ebx, dword [esp + 0xa0]
mov dword [esp + 0x194], ebx
mov ebx, dword [esp + 0xa4]
mov dword [esp + 0x198], ebx
xor ebx, ebx
mov dword [esp + 0xe8], ebx
mov dword [esp + 0xec], ebx
mov eax, edi
and eax, 0xffff
cmp eax, 0x103
jg 0x4a3d38
cmp eax, 0x1c
jg 0x4a3999
cmp eax, 0x18
jg 0x4a3966
cmp eax, 0x16
jg 0x4a394f
cmp eax, 0x15
jne 0x4a30fb
cmp ecx, 3
jl 0x4a3052
cmp ecx, 3
jb 0x4a30f4
mov eax, 3
cmp eax, 3
jne 0x4a3052
mov dword [esp + 0x128], esi
mov dword [esp], esi
mov dword [esp + 0x12c], eax
mov dword [esp + 4], eax
mov ebp, 0x5ee4ba
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 3
call fcn.00451c80
mov esi, dword [esp + 0x19c]
mov ecx, dword [esp + 0x1a0]
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x4a3052
mov ebx, dword [0x6ba830]
mov dword [esp + 0x80], ebx
cmp ecx, 3
jb 0x4a304b
sub ecx, 3
mov eax, esi
cmp ecx, 0
je 0x4a2ceb
add eax, 3
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0x19c], eax
mov ebx, dword [esp + 0xdc]
cmp ebx, 0
je 0x4a2eea
mov dword [esp], 0x5d7be0
call fcn.0040db10
mov eax, dword [esp + 4]
mov dword [esp + 0x8c], eax
mov ebp, dword [esp + 0x154]
mov dword [eax + 4], ebp
mov ebp, dword [esp + 0x150]
cmp byte [0x6cfdd8], 0
jne 0x4a2ed2
mov dword [eax], ebp
mov ebp, dword [esp + 0x124]
mov dword [eax + 0xc], ebp
mov ebp, dword [esp + 0x120]
cmp byte [0x6cfdd8], 0
jne 0x4a2eb7
mov dword [eax + 8], ebp
mov ebp, dword [esp + 0xac]
mov dword [eax + 0x14], ebp
mov ebp, dword [esp + 0xa8]
cmp byte [0x6cfdd8], 0
jne 0x4a2e9c
mov dword [eax + 0x10], ebp
mov ebp, dword [esp + 0x1a0]
mov dword [eax + 0x1c], ebp
mov ebp, dword [esp + 0x19c]
cmp byte [0x6cfdd8], 0
jne 0x4a2e88
mov dword [eax + 0x18], ebp
mov dword [esp], 0
mov ebx, 0x5ee2ba
mov dword [esp + 4], ebx
mov dword [esp + 8], 2
mov ebx, dword [esp + 0xd8]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0xdc]
mov dword [esp + 0x10], ebx
mov ebx, 0x5f04c1
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], 0xd
call fcn.0043f0a0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov ebx, dword [esp + 0x8c]
cmp ebx, 0
je 0x4a2e81
mov dword [esp + 0x144], ecx
mov dword [ebx + 0x24], ecx
mov dword [esp + 0x140], eax
cmp byte [0x6cfdd8], 0
jne 0x4a2e70
mov dword [ebx + 0x20], eax
mov eax, dword [esp + 0x8c]
mov ebx, dword [0x612450]
mov dword [esp + 0x1ac], ebx
mov ebx, dword [0x612454]
mov dword [esp + 0x1b0], ebx
mov ebx, dword [0x612458]
mov dword [esp + 0x1b4], ebx
mov ebx, dword [0x61245c]
mov dword [esp + 0x1b8], ebx
mov dword [esp + 0x1c0], eax
mov dword [esp + 0x1bc], 0x6a6d90
add esp, 0x190
ret
lea esi, [ebx + 0x20]
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.0040e4e0
jmp 0x4a2e1c
mov dword [ebx], eax
jmp 0x4a2dff
lea esi, [eax + 0x18]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040e4e0
jmp 0x4a2da3
lea esi, [eax + 0x10]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040e4e0
mov eax, dword [esp + 0x8c]
jmp 0x4a2d82
lea esi, [eax + 8]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040e4e0
mov eax, dword [esp + 0x8c]
jmp 0x4a2d61
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.0040e4e0
mov eax, dword [esp + 0x8c]
jmp 0x4a2d40
mov ebx, dword [esp + 0x118]
cmp ebx, 0
je 0x4a1bce
mov dword [esp], 0x5d7be0
call fcn.0040db10
mov eax, dword [esp + 4]
mov dword [esp + 0x8c], eax
mov ebp, dword [esp + 0x154]
mov dword [eax + 4], ebp
mov ebp, dword [esp + 0x150]
cmp byte [0x6cfdd8], 0
jne 0x4a3033
mov dword [eax], ebp
mov ebp, dword [esp + 0x124]
mov dword [eax + 0xc], ebp
mov ebp, dword [esp + 0x120]
cmp byte [0x6cfdd8], 0
jne 0x4a3018
mov dword [eax + 8], ebp
mov ebp, dword [esp + 0xac]
mov dword [eax + 0x14], ebp
mov ebp, dword [esp + 0xa8]
cmp byte [0x6cfdd8], 0
jne 0x4a2ffd
mov dword [eax + 0x10], ebp
mov ebp, dword [esp + 0x1a0]
mov dword [eax + 0x1c], ebp
mov ebp, dword [esp + 0x19c]
cmp byte [0x6cfdd8], 0
jne 0x4a2fe5
mov dword [eax + 0x18], ebp
xor ebp, ebp
mov dword [eax + 0x20], ebp
mov dword [eax + 0x24], ebp
mov ebx, dword [0x612460]
mov dword [esp + 0x1ac], ebx
mov ebx, dword [0x612464]
mov dword [esp + 0x1b0], ebx
mov ebx, dword [0x612468]
mov dword [esp + 0x1b4], ebx
mov ebx, dword [0x61246c]
mov dword [esp + 0x1b8], ebx
mov dword [esp + 0x1c0], eax
mov dword [esp + 0x1bc], 0x6a6d90
add esp, 0x190
ret
lea esi, [eax + 0x18]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040e4e0
mov eax, dword [esp + 0x8c]
jmp 0x4a2f90
lea esi, [eax + 0x10]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040e4e0
mov eax, dword [esp + 0x8c]
jmp 0x4a2f73
lea esi, [eax + 8]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040e4e0
mov eax, dword [esp + 0x8c]
jmp 0x4a2f52
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.0040e4e0
mov eax, dword [esp + 0x8c]
jmp 0x4a2f31
call fcn.00427a00
ud2
mov dword [esp], esi
mov dword [esp + 4], ecx
call fcn.004a4780
mov edi, dword [esp + 0x1a0]
mov eax, dword [esp + 8]
movzx ebx, byte [esp + 0xc]
cmp bl, 0
jne 0x4a3092
mov ebx, dword [0x6be780]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6be784]
mov dword [esp + 0x11c], ebx
jmp 0x4a2cf9
cmp eax, edi
ja 0x4a30ed
mov ebp, dword [esp + 0x19c]
mov esi, eax
mov ecx, eax
cmp eax, edi
ja 0x4a30e6
mov edx, edi
sub edx, eax
mov eax, dword [esp + 0x19c]
cmp edx, 0
je 0x4a30b7
add eax, ecx
mov dword [esp + 0x98], ebp
mov dword [esp + 0x9c], esi
mov dword [esp + 0x148], eax
mov dword [esp + 0x19c], eax
mov dword [esp + 0x14c], edx
mov dword [esp + 0x1a0], edx
jmp 0x4a2cf9
call fcn.00427a00
ud2
call fcn.00427a00
ud2
call fcn.00427a00
ud2
cmp eax, 0x16
jne 0x4a2cf9
cmp edi, 0x16
je 0x4a38f7
cmp edi, 0x18
je 0x4a38f7
cmp edi, 0x19
je 0x4a38f7
xor ebx, ebx
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xb4], ebx
xor ebx, ebx
mov dword [esp + 0x110], ebx
mov dword [esp + 0x114], ebx
xor ebx, ebx
mov dword [esp + 0x108], ebx
mov dword [esp + 0x10c], ebx
xor ebx, ebx
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xbc], ebx
cmp edi, 0x19
je 0x4a37a8
cmp edi, 0x1e
je 0x4a37a8
cmp edi, 0x1d
je 0x4a36c1
cmp edi, 0x18
je 0x4a36c1
cmp edi, 0x1a
je 0x4a3519
cmp edi, 0x1f
je 0x4a3519
cmp edi, 0x17
je 0x4a33e9
cmp edi, 0x1c
je 0x4a33e9
cmp ecx, 5
jge 0x4a31cb
mov ebx, dword [0x6be780]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6be784]
mov dword [esp + 0x11c], ebx
jmp 0x4a2cf9
cmp ecx, 1
jb 0x4a33e2
mov dword [esp + 0x14c], 1
mov dword [esp + 0x148], esi
cmp ecx, 3
jb 0x4a33db
mov ebx, esi
inc ebx
mov dword [esp + 0x144], 2
mov dword [esp + 0x140], ebx
cmp ecx, 5
jb 0x4a33d4
mov edx, esi
add edx, 3
mov ebp, 2
cmp ecx, 5
jb 0x4a33cd
sub ecx, 5
mov eax, esi
cmp ecx, 0
je 0x4a322d
add eax, 5
mov edi, ecx
mov esi, eax
mov ebx, dword [esp + 0x148]
mov dword [esp + 0xb0], ebx
mov ebx, dword [esp + 0x14c]
mov dword [esp + 0xb4], ebx
mov ecx, dword [esp + 0x140]
mov eax, dword [esp + 0x144]
mov dword [esp + 0x108], edx
mov dword [esp + 0x10c], ebp
mov ebx, 0x5ee2ae
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xbc], 2
mov dword [esp + 0x19c], esi
mov dword [esp + 0x1a0], edi
mov dword [esp + 0x64], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x110], ecx
mov dword [esp], ecx
mov dword [esp + 0x114], eax
mov dword [esp + 4], eax
call fcn.0049ef40
mov ebx, dword [esp + 8]
mov dword [esp + 0x70], ebx
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x11c], ebx
mov ebx, dword [esp + 0x118]
cmp ebx, 0
jne 0x4a331a
mov ebx, dword [esp + 0x108]
mov dword [esp], ebx
mov ebx, dword [esp + 0x10c]
mov dword [esp + 4], ebx
call fcn.0049ef40
mov ebx, dword [esp + 8]
mov dword [esp + 0x64], ebx
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x11c], ebx
mov ebx, dword [esp + 0x118]
cmp ebx, 0
jne 0x4a335e
mov ebx, dword [esp + 0xb8]
mov dword [esp], ebx
mov ebx, dword [esp + 0xbc]
mov dword [esp + 4], ebx
call fcn.0049ef40
mov ebx, dword [esp + 8]
mov dword [esp + 0x40], ebx
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x11c], ebx
mov ecx, dword [esp + 0x70]
imul ecx, ecx, 0x3c
add ecx, dword [esp + 0x64]
imul ecx, ecx, 0x3c
add ecx, dword [esp + 0x40]
mov dword [esp + 0x34], ecx
cmp dword [esp + 0xb4], 0
jbe 0x4a33c6
mov ebx, dword [esp + 0xb0]
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 0x2b
xchg ebp, eax
je 0x4a2cf9
xchg ebp, eax
cmp al, 0x2d
xchg ebp, eax
jne 0x4a33a7
mov ebx, ecx
neg ebx
mov dword [esp + 0x34], ebx
jmp 0x4a2cf9
mov ebx, dword [0x6be780]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6be784]
mov dword [esp + 0x11c], ebx
jmp 0x4a2cf9
call fcn.00427990
ud2
call fcn.00427a00
ud2
call fcn.00427a00
ud2
call fcn.00427a00
ud2
call fcn.00427a00
ud2
cmp ecx, 7
jge 0x4a340d
mov ebx, dword [0x6be780]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6be784]
mov dword [esp + 0x11c], ebx
jmp 0x4a2cf9
cmp ecx, 1
jb 0x4a3512
mov dword [esp + 0x134], 1
mov edi, esi
cmp ecx, 3
jb 0x4a350b
mov ebx, esi
inc ebx
mov dword [esp + 0x14c], 2
mov dword [esp + 0x148], ebx
cmp ecx, 5
jb 0x4a3504
mov ebx, esi
add ebx, 3
mov dword [esp + 0x144], 2
mov dword [esp + 0x140], ebx
cmp ecx, 7
jb 0x4a34fd
mov edx, esi
add edx, 5
mov ebp, 2
cmp ecx, 7
jb 0x4a34f6
sub ecx, 7
mov eax, esi
cmp ecx, 0
je 0x4a3486
add eax, 7
mov dword [esp + 0x13c], ecx
mov esi, eax
mov dword [esp + 0xb0], edi
mov ebx, dword [esp + 0x134]
mov dword [esp + 0xb4], ebx
mov ecx, dword [esp + 0x148]
mov eax, dword [esp + 0x14c]
mov ebx, dword [esp + 0x140]
mov dword [esp + 0x108], ebx
mov ebx, dword [esp + 0x144]
mov dword [esp + 0x10c], ebx
mov dword [esp + 0xb8], edx
mov dword [esp + 0xbc], ebp
mov dword [esp + 0x19c], esi
mov ebx, dword [esp + 0x13c]
mov dword [esp + 0x1a0], ebx
jmp 0x4a328e
call fcn.00427a00
ud2
call fcn.00427a00
ud2
call fcn.00427a00
ud2
call fcn.00427a00
ud2
call fcn.00427a00
ud2
cmp ecx, 9
jge 0x4a353d
mov ebx, dword [0x6be780]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6be784]
mov dword [esp + 0x11c], ebx
jmp 0x4a2cf9
cmp ecx, 3
jbe 0x4a36ba
mov ebx, esi
add ebx, 3
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 0x3a
xchg ebp, eax
jne 0x4a3694
cmp ecx, 6
jbe 0x4a36b3
mov ebx, esi
add ebx, 6
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 0x3a
xchg ebp, eax
jne 0x4a3694
cmp ecx, 1
jb 0x4a368d
mov dword [esp + 0x13c], 1
mov dword [esp + 0x138], esi
cmp ecx, 3
jb 0x4a3686
mov edi, esi
inc edi
mov dword [esp + 0x134], 2
cmp ecx, 6
jb 0x4a367f
mov ebx, esi
add ebx, 4
mov dword [esp + 0x14c], 2
mov dword [esp + 0x148], ebx
cmp ecx, 9
jb 0x4a3678
mov ebx, esi
add ebx, 7
mov dword [esp + 0x144], 2
mov dword [esp + 0x140], ebx
cmp ecx, 9
jb 0x4a3671
sub ecx, 9
mov eax, esi
cmp ecx, 0
je 0x4a35fd
add eax, 9
mov ebp, ecx
mov edx, eax
mov ebx, dword [esp + 0x138]
mov dword [esp + 0xb0], ebx
mov ebx, dword [esp + 0x13c]
mov dword [esp + 0xb4], ebx
mov ecx, edi
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x148]
mov dword [esp + 0x108], ebx
mov ebx, dword [esp + 0x14c]
mov dword [esp + 0x10c], ebx
mov ebx, dword [esp + 0x140]
mov dword [esp + 0xb8], ebx
mov ebx, dword [esp + 0x144]
mov dword [esp + 0xbc], ebx
mov dword [esp + 0x19c], edx
mov dword [esp + 0x1a0], ebp
jmp 0x4a328e
call fcn.00427a00
ud2
call fcn.00427a00
ud2
call fcn.00427a00
ud2
call fcn.00427a00
ud2
call fcn.00427a00
ud2
mov ebx, dword [0x6be780]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6be784]
mov dword [esp + 0x11c], ebx
jmp 0x4a2cf9
call fcn.00427990
ud2
call fcn.00427990
ud2
cmp ecx, 3
jge 0x4a36e5
mov ebx, dword [0x6be780]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6be784]
mov dword [esp + 0x11c], ebx
jmp 0x4a2cf9
cmp ecx, 1
jb 0x4a37a1
mov dword [esp + 0x14c], 1
mov dword [esp + 0x148], esi
cmp ecx, 3
jb 0x4a379a
mov edi, esi
inc edi
mov dword [esp + 0x13c], 2
cmp ecx, 3
jb 0x4a3793
sub ecx, 3
mov eax, esi
cmp ecx, 0
je 0x4a3729
add eax, 3
mov ebp, ecx
mov edx, eax
mov ebx, dword [esp + 0x148]
mov dword [esp + 0xb0], ebx
mov ebx, dword [esp + 0x14c]
mov dword [esp + 0xb4], ebx
mov ecx, edi
mov eax, dword [esp + 0x13c]
mov ebx, 0x5ee2ae
mov dword [esp + 0x108], ebx
mov dword [esp + 0x10c], 2
mov ebx, 0x5ee2ae
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xbc], 2
mov dword [esp + 0x19c], edx
mov dword [esp + 0x1a0], ebp
jmp 0x4a328e
call fcn.00427a00
ud2
call fcn.00427a00
ud2
call fcn.00427a00
ud2
cmp ecx, 6
jge 0x4a37cc
mov ebx, dword [0x6be780]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6be784]
mov dword [esp + 0x11c], ebx
jmp 0x4a2cf9
cmp ecx, 3
jbe 0x4a38f0
mov ebx, esi
add ebx, 3
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 0x3a
xchg ebp, eax
je 0x4a3803
mov ebx, dword [0x6be780]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6be784]
mov dword [esp + 0x11c], ebx
jmp 0x4a2cf9
cmp ecx, 1
jb 0x4a38e9
mov dword [esp + 0x144], 1
mov dword [esp + 0x140], esi
cmp ecx, 3
jb 0x4a38e2
mov ebx, esi
inc ebx
mov dword [esp + 0x14c], 2
mov dword [esp + 0x148], ebx
cmp ecx, 6
jb 0x4a38db
mov edi, esi
add edi, 4
mov dword [esp + 0x13c], 2
cmp ecx, 6
jb 0x4a38d4
sub ecx, 6
mov eax, esi
cmp ecx, 0
je 0x4a3867
add eax, 6
mov ebp, ecx
mov edx, eax
mov ebx, dword [esp + 0x140]
mov dword [esp + 0xb0], ebx
mov ebx, dword [esp + 0x144]
mov dword [esp + 0xb4], ebx
mov ecx, dword [esp + 0x148]
mov eax, dword [esp + 0x14c]
mov dword [esp + 0x108], edi
mov ebx, dword [esp + 0x13c]
mov dword [esp + 0x10c], ebx
mov ebx, 0x5ee2ae
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xbc], 2
mov dword [esp + 0x19c], edx
mov dword [esp + 0x1a0], ebp
jmp 0x4a328e
call fcn.00427a00
ud2
call fcn.00427a00
ud2
call fcn.00427a00
ud2
call fcn.00427a00
ud2
call fcn.00427990
ud2
cmp ecx, 1
jl 0x4a311f
cmp ecx, 0
jbe 0x4a3948
movzx ebp, byte [esi]
xchg ebp, eax
cmp al, 0x5a
xchg ebp, eax
jne 0x4a311f
cmp ecx, 1
jb 0x4a3941
dec ecx
mov eax, esi
cmp ecx, 0
je 0x4a3921
inc eax
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0x19c], eax
mov ebx, dword [0x6ba830]
mov dword [esp + 0x80], ebx
jmp 0x4a2cf9
call fcn.00427a00
ud2
call fcn.00427990
ud2
cmp eax, 0x17
je 0x4a3104
cmp eax, 0x18
je 0x4a3104
jmp 0x4a2cf9
cmp eax, 0x1a
jg 0x4a3982
cmp eax, 0x19
je 0x4a3104
cmp eax, 0x1a
je 0x4a3104
jmp 0x4a2cf9
cmp eax, 0x1b
je 0x4a3104
cmp eax, 0x1c
je 0x4a3104
jmp 0x4a2cf9
cmp eax, 0x20
jg 0x4a3a7c
cmp eax, 0x1e
jg 0x4a39be
cmp eax, 0x1d
je 0x4a3104
cmp eax, 0x1e
je 0x4a3104
jmp 0x4a2cf9
cmp eax, 0x1f
je 0x4a3104
cmp eax, 0x20
jne 0x4a2cf9
mov eax, edi
sar eax, 0x10
inc eax
cmp ecx, eax
jge 0x4a39f9
mov ebx, dword [0x6be780]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6be784]
mov dword [esp + 0x11c], ebx
jmp 0x4a2cf9
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 0x58], eax
mov dword [esp + 8], eax
call fcn.004a4b30
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x54], ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0xd8], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0xdc], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x11c], ebx
mov ecx, dword [esp + 0x58]
mov eax, dword [esp + 0x1a0]
cmp ecx, eax
ja 0x4a3a75
mov edx, eax
sub edx, ecx
mov eax, dword [esp + 0x19c]
cmp edx, 0
je 0x4a3a62
add eax, ecx
mov dword [esp + 0x1a0], edx
mov dword [esp + 0x19c], eax
jmp 0x4a2cf9
call fcn.00427a00
ud2
cmp eax, 0x101
jg 0x4a3c45
cmp eax, 0x21
jne 0x4a3bd7
cmp ecx, 2
jl 0x4a3bbd
cmp ecx, 0
jbe 0x4a3bd0
movzx ebp, byte [esi]
xchg ebp, eax
cmp al, 0x2e
xchg ebp, eax
jne 0x4a3bbd
cmp ecx, 1
jbe 0x4a3bc9
mov ebx, esi
inc ebx
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 0x30
xchg ebp, eax
jb 0x4a3bbd
cmp ecx, 1
jbe 0x4a3bc2
mov ebx, esi
inc ebx
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 0x39
xchg ebp, eax
ja 0x4a3bbd
xor eax, eax
cmp eax, 9
jge 0x4a3b28
mov ebp, eax
inc ebp
cmp ebp, ecx
jge 0x4a3b28
mov ebx, eax
inc ebx
cmp ebx, ecx
jae 0x4a3bb6
mov ebp, esi
add ebp, ebx
movzx ebx, byte [ebp]
cmp bl, 0x30
jb 0x4a3b28
mov ebx, eax
inc ebx
cmp ebx, ecx
jae 0x4a3baf
mov ebp, esi
add ebp, ebx
movzx ebx, byte [ebp]
cmp bl, 0x39
ja 0x4a3b28
inc eax
cmp eax, 9
jl 0x4a3aeb
mov dword [esp], esi
mov dword [esp + 4], ecx
mov ebx, eax
mov dword [esp + 0x6c], eax
inc ebx
mov dword [esp + 8], ebx
call fcn.004a4b30
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x54], ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0xd8], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0xdc], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x11c], ebx
mov ecx, dword [esp + 0x6c]
inc ecx
mov eax, dword [esp + 0x1a0]
cmp ecx, eax
ja 0x4a3ba8
mov edx, eax
sub edx, ecx
mov eax, dword [esp + 0x19c]
cmp edx, 0
je 0x4a3b95
add eax, ecx
mov dword [esp + 0x1a0], edx
mov dword [esp + 0x19c], eax
jmp 0x4a2cf9
call fcn.00427a00
ud2
call fcn.00427990
ud2
call fcn.00427990
ud2
jmp 0x4a2cf9
call fcn.00427990
ud2
call fcn.00427990
ud2
call fcn.00427990
ud2
cmp eax, 0x101
jne 0x4a2cf9
mov ebx, dword [0x6baef8]
mov dword [esp], ebx
mov ebx, dword [0x6baefc]
mov dword [esp + 4], ebx
mov ebx, dword [0x6baf00]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ecx
call fcn.0049eb20
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x60], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x19c], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x11c], ebx
jmp 0x4a2cf9
cmp eax, 0x102
jne 0x4a3caf
mov ebx, dword [0x6baf18]
mov dword [esp], ebx
mov ebx, dword [0x6baf1c]
mov dword [esp + 4], ebx
mov ebx, dword [0x6baf20]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ecx
call fcn.0049eb20
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x60], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x19c], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x11c], ebx
jmp 0x4a2cf9
cmp eax, 0x103
jne 0x4a2cf9
mov dword [esp], esi
mov dword [esp + 4], ecx
cmp edi, 0x104
je 0x4a3d31
mov byte [esp + 8], 0
call fcn.004a1630
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x19c], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x11c], ebx
mov dword [esp + 0x60], eax
cmp eax, 0
jle 0x4a3d15
cmp eax, 0xc
jle 0x4a2cf9
mov ebx, 0x5eea13
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xdc], 5
jmp 0x4a2cf9
mov byte [esp + 8], 1
jmp 0x4a3cce
cmp eax, 0x112
jg 0x4a4101
cmp eax, 0x107
jg 0x4a3efc
cmp eax, 0x105
jg 0x4a3dc6
cmp eax, 0x104
je 0x4a3cba
cmp eax, 0x105
jne 0x4a2cf9
mov ebx, dword [0x6baee8]
mov dword [esp], ebx
mov ebx, dword [0x6baeec]
mov dword [esp + 4], ebx
mov ebx, dword [0x6baef0]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ecx
call fcn.0049eb20
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x19c], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x11c], ebx
jmp 0x4a2cf9
cmp eax, 0x106
jne 0x4a3e28
mov ebx, dword [0x6baf08]
mov dword [esp], ebx
mov ebx, dword [0x6baf0c]
mov dword [esp + 4], ebx
mov ebx, dword [0x6baf10]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ecx
call fcn.0049eb20
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x19c], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x11c], ebx
jmp 0x4a2cf9
cmp eax, 0x107
jne 0x4a2cf9
cmp edi, 0x108
jne 0x4a3e67
cmp ecx, 0
jle 0x4a3e67
cmp ecx, 0
jbe 0x4a3ef5
movzx ebp, byte [esi]
xchg ebp, eax
cmp al, 0x20
xchg ebp, eax
jne 0x4a3e67
cmp ecx, 1
jb 0x4a3eee
dec ecx
mov eax, esi
cmp ecx, 0
je 0x4a3e65
inc eax
mov esi, eax
mov dword [esp + 0x19c], esi
mov dword [esp], esi
mov dword [esp + 0x1a0], ecx
mov dword [esp + 4], ecx
cmp edi, 0x109
je 0x4a3ee7
mov byte [esp + 8], 0
call fcn.004a1630
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x19c], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x11c], ebx
mov dword [esp + 0x78], eax
cmp eax, 0
jge 0x4a2cf9
mov ebx, 0x5ee4f3
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xdc], 3
jmp 0x4a2cf9
mov byte [esp + 8], 1
jmp 0x4a3e89
call fcn.00427a00
ud2
call fcn.00427990
ud2
cmp eax, 0x109
jg 0x4a3f1e
cmp eax, 0x108
je 0x4a3e33
cmp eax, 0x109
je 0x4a3e33
jmp 0x4a2cf9
cmp eax, 0x111
jne 0x4a4027
cmp ecx, 4
jl 0x4a3fda
mov dword [esp + 0xc8], esi
xor eax, eax
mov dword [esp + 0xcc], ecx
cmp ecx, eax
jg 0x4a3ff9
xor eax, eax
cmp al, 0
je 0x4a3fda
cmp ecx, 4
jb 0x4a3fd3
mov edx, 4
mov ebp, esi
cmp ecx, 4
jb 0x4a3fcc
sub ecx, 4
mov eax, esi
cmp ecx, 0
je 0x4a3f73
add eax, 4
mov dword [esp + 0x148], ebp
mov dword [esp + 0x14c], edx
mov dword [esp + 0x19c], eax
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0xe8], ebp
mov dword [esp], ebp
mov dword [esp + 0xec], edx
mov dword [esp + 4], edx
call fcn.0049ef40
mov ebx, dword [esp + 8]
mov dword [esp + 0x38], ebx
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x11c], ebx
jmp 0x4a2cf9
call fcn.00427a00
ud2
call fcn.00427a00
ud2
mov ebx, dword [0x6be780]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6be784]
mov dword [esp + 0x11c], ebx
jmp 0x4a2cf9
cmp eax, ecx
jae 0x4a4020
mov ebp, esi
add ebp, eax
movzx ebx, byte [ebp]
cmp bl, 0x30
jb 0x4a4019
cmp bl, 0x39
ja 0x4a4019
mov eax, 1
jmp 0x4a3f4c
xor eax, eax
jmp 0x4a3f4c
call fcn.00427990
ud2
cmp eax, 0x112
jne 0x4a2cf9
cmp ecx, 2
jge 0x4a4056
mov ebx, dword [0x6be780]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6be784]
mov dword [esp + 0x11c], ebx
jmp 0x4a2cf9
cmp ecx, 2
jb 0x4a40fa
mov edx, 2
mov ebp, esi
cmp ecx, 2
jb 0x4a40f3
sub ecx, 2
mov eax, esi
cmp ecx, 0
je 0x4a407c
add eax, 2
mov dword [esp + 0x148], ebp
mov dword [esp + 0x14c], edx
mov dword [esp + 0x19c], eax
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0xe8], ebp
mov dword [esp], ebp
mov dword [esp + 0xec], edx
mov dword [esp + 4], edx
call fcn.0049ef40
mov eax, dword [esp + 8]
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x11c], ebx
cmp eax, 0x45
jl 0x4a40e2
mov ebx, eax
add ebx, 0x76c
mov dword [esp + 0x38], ebx
jmp 0x4a2cf9
mov ebx, eax
add ebx, 0x7d0
mov dword [esp + 0x38], ebx
jmp 0x4a2cf9
call fcn.00427a00
ud2
call fcn.00427a00
ud2
cmp eax, 0x20d
jg 0x4a42aa
cmp eax, 0x20b
jg 0x4a4216
cmp eax, 0x20a
jne 0x4a418d
mov dword [esp], esi
mov dword [esp + 4], ecx
mov byte [esp + 8], 0
call fcn.004a1630
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x19c], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x11c], ebx
mov dword [esp + 0x74], eax
cmp eax, 0
jl 0x4a4171
cmp eax, 0x18
jl 0x4a2cf9
mov ebx, 0x5ee794
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xdc], 4
jmp 0x4a2cf9
cmp eax, 0x20b
jne 0x4a2cf9
mov dword [esp], esi
mov dword [esp + 4], ecx
cmp edi, 0x20c
je 0x4a420f
mov byte [esp + 8], 0
call fcn.004a1630
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x19c], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x11c], ebx
mov dword [esp + 0x74], eax
cmp eax, 0
jl 0x4a41f3
cmp eax, 0xc
jle 0x4a2cf9
mov ebx, 0x5ee794
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xdc], 4
jmp 0x4a2cf9
mov byte [esp + 8], 1
jmp 0x4a41ac
cmp eax, 0x20c
je 0x4a4198
cmp eax, 0x20d
jne 0x4a2cf9
mov dword [esp], esi
mov dword [esp + 4], ecx
cmp edi, 0x20e
je 0x4a42a3
mov byte [esp + 8], 0
call fcn.004a1630
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x19c], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x11c], ebx
mov dword [esp + 0x68], eax
cmp eax, 0
jl 0x4a4287
cmp eax, 0x3c
jl 0x4a2cf9
mov ebx, 0x5eec7c
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xdc], 6
jmp 0x4a2cf9
mov byte [esp + 8], 1
jmp 0x4a4240
cmp eax, 0x20f
jg 0x4a44fc
cmp eax, 0x20e
je 0x4a422c
cmp eax, 0x20f
jne 0x4a2cf9
mov dword [esp], esi
mov dword [esp + 4], ecx
cmp edi, 0x210
je 0x4a44f2
mov byte [esp + 8], 0
call fcn.004a1630
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x19c], edx
mov eax, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x11c], ebx
mov dword [esp + 0x44], ecx
cmp ecx, 0
jl 0x4a44d6
cmp ecx, 0x3c
jge 0x4a44d6
mov dword [esp + 0x1a0], eax
cmp eax, 2
jl 0x4a449c
cmp eax, 0
jbe 0x4a44cf
movzx ebp, byte [edx]
xchg ebp, eax
cmp al, 0x2e
xchg ebp, eax
jne 0x4a449c
mov dword [esp + 0xd0], edx
mov ecx, eax
mov eax, 1
mov dword [esp + 0xd4], ecx
cmp ecx, eax
jg 0x4a44a1
xor eax, eax
cmp al, 0
je 0x4a449c
mov ebx, dword [esp + 0x194]
mov dword [esp], ebx
mov ebx, dword [esp + 0x198]
mov dword [esp + 4], ebx
call fcn.0049d350
mov esi, dword [esp + 0x1a0]
mov eax, dword [esp + 0x10]
and eax, 0xffff
cmp eax, 0x20
je 0x4a2cf9
cmp eax, 0x21
je 0x4a2cf9
mov eax, 2
cmp eax, esi
jge 0x4a43e4
mov edi, dword [esp + 0x19c]
mov dword [esp + 0xc0], edi
mov dword [esp + 0xc4], esi
cmp esi, eax
jg 0x4a446e
xor ecx, ecx
cmp cl, 0
je 0x4a43e4
inc eax
cmp eax, esi
jl 0x4a43bb
mov ebx, dword [esp + 0x19c]
mov dword [esp], ebx
mov dword [esp + 4], esi
mov dword [esp + 0x5c], eax
mov dword [esp + 8], eax
call fcn.004a4b30
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x54], ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0xd8], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0xdc], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x11c], ebx
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x1a0]
cmp ecx, eax
ja 0x4a4467
mov edx, eax
sub edx, ecx
mov eax, dword [esp + 0x19c]
cmp edx, 0
je 0x4a4454
add eax, ecx
mov dword [esp + 0x1a0], edx
mov dword [esp + 0x19c], eax
jmp 0x4a2cf9
call fcn.00427a00
ud2
cmp eax, esi
jae 0x4a4495
mov ebp, edi
add ebp, eax
movzx ebx, byte [ebp]
cmp bl, 0x30
jb 0x4a448e
cmp bl, 0x39
ja 0x4a448e
mov ecx, 1
jmp 0x4a43da
xor ecx, ecx
jmp 0x4a43da
call fcn.00427990
ud2
jmp 0x4a2cf9
cmp eax, ecx
jae 0x4a44c8
mov ebp, edx
add ebp, eax
movzx ebx, byte [ebp]
cmp bl, 0x30
jb 0x4a44c1
cmp bl, 0x39
ja 0x4a44c1
mov eax, 1
jmp 0x4a436d
xor eax, eax
jmp 0x4a436d
call fcn.00427990
ud2
call fcn.00427990
ud2
mov ebx, 0x5eec8e
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xdc], 6
jmp 0x4a4327
mov byte [esp + 8], 1
jmp 0x4a42e3
cmp eax, 0x210
je 0x4a42cb
cmp eax, 0x213
jne 0x4a4638
cmp ecx, 2
jge 0x4a4536
mov ebx, dword [0x6be780]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6be784]
mov dword [esp + 0x11c], ebx
jmp 0x4a2cf9
cmp ecx, 2
jb 0x4a4631
mov edx, 2
mov ebp, esi
cmp ecx, 2
jb 0x4a462a
sub ecx, 2
mov eax, esi
cmp ecx, 0
je 0x4a455c
add eax, 2
mov dword [esp + 0x19c], eax
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0xe8], ebp
mov esi, ebp
mov dword [esp + 0x148], ebp
mov dword [esp + 0xec], edx
mov eax, edx
cmp edx, 2
jne 0x4a45ce
mov dword [esp], esi
mov dword [esp + 0x14c], eax
mov dword [esp + 4], eax
mov ebp, 0x5ee2c4
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 2
call fcn.00451c80
mov esi, dword [esp + 0x148]
mov eax, dword [esp + 0x14c]
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x4a45ce
mov byte [esp + 0x33], 1
jmp 0x4a2cf9
mov dword [esp + 0x14c], eax
cmp eax, 2
jne 0x4a460b
mov dword [esp], esi
mov dword [esp + 4], eax
mov ebp, 0x5ee2ee
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 2
call fcn.00451c80
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x4a460b
mov byte [esp + 0x32], 1
jmp 0x4a2cf9
mov ebx, dword [0x6be780]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6be784]
mov dword [esp + 0x11c], ebx
jmp 0x4a2cf9
call fcn.00427a00
ud2
call fcn.00427a00
ud2
cmp eax, 0x214
jne 0x4a2cf9
cmp ecx, 2
jge 0x4a4667
mov ebx, dword [0x6be780]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6be784]
mov dword [esp + 0x11c], ebx
jmp 0x4a2cf9
cmp ecx, 2
jb 0x4a4762
mov edx, 2
mov ebp, esi
cmp ecx, 2
jb 0x4a475b
sub ecx, 2
mov eax, esi
cmp ecx, 0
je 0x4a468d
add eax, 2
mov dword [esp + 0x19c], eax
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0xe8], ebp
mov esi, ebp
mov dword [esp + 0x148], ebp
mov dword [esp + 0xec], edx
mov eax, edx
cmp edx, 2
jne 0x4a46ff
mov dword [esp], esi
mov dword [esp + 0x14c], eax
mov dword [esp + 4], eax
mov ebp, 0x5ee332
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 2
call fcn.00451c80
mov esi, dword [esp + 0x148]
mov eax, dword [esp + 0x14c]
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x4a46ff
mov byte [esp + 0x33], 1
jmp 0x4a2cf9
mov dword [esp + 0x14c], eax
cmp eax, 2
jne 0x4a473c
mov dword [esp], esi
mov dword [esp + 4], eax
mov ebp, 0x5ee340
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 2
call fcn.00451c80
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x4a473c
mov byte [esp + 0x32], 1
jmp 0x4a2cf9
mov ebx, dword [0x6be780]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6be784]
mov dword [esp + 0x11c], ebx
jmp 0x4a2cf9
call fcn.00427a00
ud2
call fcn.00427a00
ud2
call fcn.00427a00
ud2
call fcn.0044ff60
jmp fcn.004a1ad0