Function at 0x4a1d20
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x19c]
cmp eax, dword [ecx + 8]
jbe 0x4a3df3
sub esp, 0x21c
lea edi, [esp]
lea esi, [esp + 0x220]
call fcn.0045e6de
call fcn.004a9140
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x90], ecx
mov edx, dword [esp + 0x24]
mov dword [esp + 0x94], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0xec], ebx
mov ebp, dword [esp + 0x14]
mov dword [esp + 0x204], ebp
mov esi, dword [esp + 0x244]
mov edi, dword [esp + 0x240]
mov esi, 0xffffffff
mov dword [esp + 0x3c], esi
mov edi, 0xffffffff
mov dword [esp + 0x80], edi
xor edi, edi
mov dword [esp + 0x74], edi
xor esi, esi
mov dword [esp + 0x84], esi
xor esi, esi
mov dword [esp + 0x40], esi
xor esi, esi
mov dword [esp + 0x78], esi
xor esi, esi
mov dword [esp + 0x64], esi
mov esi, dword [esp + 0x244]
mov edi, dword [esp + 0x240]
jmp 0x4a1e3d
mov eax, ecx
mov ecx, dword [esp + 0x90]
mov ebx, dword [esp + 0xec]
mov ebp, dword [esp + 0x204]
mov ebx, dword [esp + 0x44]
mov dword [esp + 0x3c], ebx
mov ebx, dword [esp + 0xe0]
mov dword [esp + 0x74], ebx
mov dword [esp + 0x23c], edi
mov dword [esp + 0x238], edx
mov dword [esp + 0x234], esi
mov edx, dword [esp + 0x94]
mov esi, dword [esp + 0x244]
mov edi, dword [esp + 0x240]
mov ebx, dword [esp + 0xec]
test esi, esi
je 0x4a3d2c
mov dword [esp], edi
mov dword [esp + 4], esi
call fcn.004a0680
mov eax, dword [esp + 0x14]
mov dword [esp + 0x240], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x244], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x60], edx
mov ebx, dword [esp + 0xc]
mov ebp, dword [esp + 8]
test ebx, ebx
jne 0x4a3c4f
mov ebx, dword [esp + 0x238]
mov ebp, dword [esp + 0x23c]
mov esi, dword [esp + 0x234]
test edx, edx
je 0x4a3c33
mov dword [esp + 0xe8], ebx
mov dword [esp + 0xe4], ebp
mov dword [esp + 0x200], esi
mov edi, ebp
mov ebp, dword [esp + 0x3c]
test ebp, ebp
jge 0x4a1ec7
test edx, 0x100
jne 0x4a3bc5
mov dword [esp + 0x100], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x100]
mov dword [esp + 0x44], ebp
mov ebp, dword [esp + 0x80]
test ebp, ebp
jge 0x4a1efb
test edx, 0x200
jne 0x4a3b2a
mov dword [esp + 0x80], ebp
and edx, 0xffff
cmp edx, 0x109
jg 0x4a34c2
cmp edx, 0x103
jg 0x4a2d59
cmp edx, 0x23
jg 0x4a272f
cmp edx, 0x17
je 0x4a24e7
lea ecx, [edx - 0x18]
cmp ecx, 9
ja 0x4a22c4
mov ecx, dword [esp + 0x8c]
test ecx, ecx
jne 0x4a22bb
mov edx, dword [esp + 0x60]
cmp edx, 0x18
jne 0x4a1fb1
lea edx, [ebx + 1]
cmp edi, edx
jb 0x4a1f66
mov byte [esi + ebx], 0x5a
jmp 0x4a1de2
lea eax, [0x5bec80]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], edx
call fcn.004450a0
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
lea edx, [eax + 1]
mov eax, dword [esp + 0x240]
mov ecx, dword [esp + 0x8c]
mov ebx, dword [esp + 0xe8]
mov ebp, dword [esp + 0x80]
jmp 0x4a1f5d
cmp edx, 0x1b
je 0x4a1f56
cmp edx, 0x19
je 0x4a1f56
cmp edx, 0x1a
je 0x4a1f56
cmp edx, 0x1c
je 0x4a1f56
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
mov dword [esp + 0xdc], edx
mov eax, ecx
sar ecx, 0x1f
sub edx, ecx
test edx, edx
jge 0x4a2253
lea edx, [ebx + 1]
cmp edi, edx
jb 0x4a21fe
mov byte [esi + ebx], 0x2d
mov ebx, dword [esp + 0xdc]
sub ecx, ebx
neg eax
mov dword [esp + 0x38], ecx
mov dword [esp + 0xdc], eax
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], edi
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
sar ecx, 0x1f
sub edx, ecx
mov dword [esp + 0xd8], edx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 2
call fcn.004a1520
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x60]
cmp ebp, 0x1b
jne 0x4a21dc
lea esi, [ecx + 1]
cmp edx, esi
jb 0x4a2198
mov byte [ebx + ecx], 0x3a
cmp ebp, 0x1f
je 0x4a2076
cmp ebp, 0x1a
jne 0x4a2157
cmp ebp, 0x19
je 0x4a20aa
cmp ebp, 0x1e
je 0x4a20aa
cmp ebp, 0x21
je 0x4a20aa
cmp ebp, 0x1c
je 0x4a20aa
mov eax, dword [esp + 0x240]
mov ecx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x80]
mov edi, edx
mov edx, esi
mov esi, ebx
jmp 0x4a1de2
cmp ebp, 0x21
jne 0x4a2147
lea ecx, [esi + 1]
cmp ecx, edx
ja 0x4a2107
mov byte [ebx + esi], 0x3a
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov eax, 0x88888889
mov ecx, dword [esp + 0xdc]
imul ecx
add edx, ecx
sar edx, 5
mov ebx, ecx
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x3c
sub ebx, ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 2
call fcn.004a1520
mov ebx, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
jmp 0x4a208a
mov dword [esp + 0xd4], esi
lea eax, [0x5bec80]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.004450a0
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
lea ecx, [eax + 1]
mov esi, dword [esp + 0xd4]
jmp 0x4a20ba
cmp ebp, 0x1c
je 0x4a20b3
mov ecx, esi
jmp 0x4a20be
mov dword [esp], ebx
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov eax, dword [esp + 0xd8]
imul eax, eax, 0x3c
mov ecx, dword [esp + 0x38]
sub ecx, eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 2
call fcn.004a1520
mov ebx, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x60]
jmp 0x4a2076
mov dword [esp + 0xd0], ecx
lea eax, [0x5bec80]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], esi
call fcn.004450a0
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
lea esi, [eax + 1]
mov ecx, dword [esp + 0xd0]
mov ebp, dword [esp + 0x60]
jmp 0x4a2064
cmp ebp, 0x20
je 0x4a2059
cmp ebp, 0x1c
je 0x4a2059
cmp ebp, 0x21
je 0x4a2059
mov esi, ecx
jmp 0x4a2068
mov dword [esp + 0xd8], ecx
lea eax, [0x5bec80]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], edx
call fcn.004450a0
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
lea edx, [eax + 1]
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0xd8]
mov ebx, dword [esp + 0xe8]
mov ebp, dword [esp + 0x80]
jmp 0x4a1ff2
lea ecx, [ebx + 1]
cmp edi, ecx
jb 0x4a2269
mov byte [esi + ebx], 0x2b
mov ebx, edx
mov edx, ecx
mov ecx, ebx
jmp 0x4a2001
mov dword [esp + 0xcc], edx
lea eax, [0x5bec80]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ecx
call fcn.004450a0
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x8c]
mov edx, dword [esp + 0xcc]
mov ebx, dword [esp + 0xe8]
mov ebp, dword [esp + 0x80]
jmp 0x4a225a
mov edx, dword [esp + 0x60]
jmp 0x4a1fc5
cmp edx, 0x22
jl 0x4a24d9
mov dword [esp + 0xdc], edx
lea edi, [esp + 0x208]
lea esi, [esp + 0x220]
call fcn.0045e6de
nop
mov ecx, dword [esp + 0x208]
mov dword [esp + 0x10b], 0
mov dword [esp + 0x10c], 0
mov dword [esp + 0x110], 0
and ecx, 0x3fffffff
mov esi, 9
jmp 0x4a2344
mov ebp, edi
lea edi, [ecx + 0x30]
xchg edi, eax
mov byte [esp + esi + 0x10a], al
xchg edi, eax
mov eax, dword [esp + 0x240]
mov esi, ebp
mov ecx, edx
mov edx, dword [esp + 0xdc]
mov ebp, dword [esp + 0x80]
test esi, esi
jle 0x4a2366
lea edi, [esi - 1]
mov eax, 0xcccccccd
mul ecx
shr edx, 3
lea ebp, [edx + edx*4]
shl ebp, 1
sub ecx, ebp
cmp edi, 9
jb 0x4a231d
jmp 0x4a3d5c
mov esi, dword [esp + 0x60]
sar esi, 0x10
cmp esi, 9
jle 0x4a24cf
cmp edx, 0x23
mov ecx, 9
je 0x4a2384
jmp 0x4a23c4
mov ecx, esi
test ecx, ecx
jle 0x4a23a2
lea esi, [ecx - 1]
cmp esi, 9
jae 0x4a3d50
lea edi, [esp + ecx + 0x10a]
cmp byte [edi], 0x30
je 0x4a2382
test ecx, ecx
jne 0x4a23c4
mov ecx, dword [esp + 0xe4]
mov edx, dword [esp + 0x200]
mov edi, ecx
mov esi, edx
mov ecx, dword [esp + 0x8c]
mov edx, ebx
jmp 0x4a1de2
mov dword [esp + 0x70], ecx
lea esi, [ebx + 1]
mov edi, dword [esp + 0xe4]
cmp edi, esi
jb 0x4a247d
mov edx, dword [esp + 0x200]
mov byte [edx + ebx], 0x2e
cmp ecx, 9
ja 0x4a3d46
lea ebx, [ecx + esi]
mov dword [esp + 0x2c], ebx
cmp edi, ebx
jb 0x4a2440
mov dword [esp + 0x1ec], edx
mov dword [esp + 0x30], edi
lea eax, [edx + esi]
mov dword [esp], eax
lea eax, [esp + 0x10b]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0045e900
mov eax, dword [esp + 0x240]
mov ebp, dword [esp + 0x80]
mov ecx, dword [esp + 0x30]
mov ebx, dword [esp + 0x2c]
mov edx, dword [esp + 0x1ec]
jmp 0x4a23b2
mov dword [esp + 0x88], esi
lea eax, [0x5bec80]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebx
call fcn.004450a0
mov edx, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x70]
mov esi, dword [esp + 0x88]
jmp 0x4a23f9
lea eax, [0x5bec80]
mov dword [esp], eax
mov ecx, dword [esp + 0x200]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], esi
call fcn.004450a0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
lea esi, [eax + 1]
mov eax, dword [esp + 0x240]
mov ecx, dword [esp + 0x70]
mov ebx, dword [esp + 0xe8]
mov ebp, dword [esp + 0x80]
jmp 0x4a23e1
cmp edx, 0x23
mov ecx, esi
jmp 0x4a237e
mov ecx, dword [esp + 0x8c]
mov edx, ebx
jmp 0x4a1de2
mov edx, dword [esp + 0xec]
test edx, edx
je 0x4a2594
lea eax, [edx + ebx]
mov dword [esp + 0x238], eax
cmp edi, eax
jb 0x4a255b
mov dword [esp + 0x1fc], esi
mov dword [esp + 0x23c], edi
lea eax, [esi + ebx]
mov dword [esp], eax
mov eax, dword [esp + 0x204]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.0045e900
mov eax, dword [esp + 0x240]
mov ecx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x80]
mov edx, dword [esp + 0x238]
mov edi, dword [esp + 0x23c]
mov esi, dword [esp + 0x1fc]
jmp 0x4a1de2
lea ecx, [0x5bec80]
mov dword [esp], ecx
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], eax
call fcn.004450a0
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
mov edx, dword [esp + 0xec]
mov ebx, dword [esp + 0xe8]
jmp 0x4a2504
mov eax, 0x88888889
mov edx, dword [esp + 0x8c]
imul edx
mov eax, ecx
mov ecx, dword [esp + 0x8c]
add edx, ecx
sar edx, 5
mov dword [esp + 0xdc], edx
sar ecx, 0x1f
sub edx, ecx
test edx, edx
jge 0x4a26c7
lea edx, [ebx + 1]
cmp edi, edx
jb 0x4a2672
mov byte [esi + ebx], 0x2d
mov ebx, dword [esp + 0xdc]
sub ecx, ebx
mov dword [esp + 0x34], ecx
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], edi
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
sar ecx, 0x1f
sub edx, ecx
mov dword [esp + 0xdc], edx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 2
call fcn.004a1520
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov ecx, dword [esp + 0xdc]
imul ecx, ecx, 0x3c
mov edx, dword [esp + 0x34]
sub edx, ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 2
call fcn.004a1520
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x240]
mov ecx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x80]
jmp 0x4a1de2
mov dword [esp + 0xd8], ecx
lea eax, [0x5bec80]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], edx
call fcn.004450a0
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
lea edx, [eax + 1]
mov eax, dword [esp + 0x244]
mov ecx, dword [esp + 0xd8]
mov ebx, dword [esp + 0xe8]
mov ebp, dword [esp + 0x80]
jmp 0x4a25cf
lea ecx, [ebx + 1]
cmp edi, ecx
jb 0x4a26dd
mov byte [esi + ebx], 0x2b
mov ebx, edx
mov edx, ecx
mov ecx, ebx
jmp 0x4a25dc
mov dword [esp + 0xc8], edx
lea eax, [0x5bec80]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ecx
call fcn.004450a0
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x244]
mov edx, dword [esp + 0xc8]
mov ebx, dword [esp + 0xe8]
mov ebp, dword [esp + 0x80]
jmp 0x4a26ce
cmp edx, 0x101
jne 0x4a29ee
mov edx, dword [esp + 0xe0]
lea ebp, [edx - 1]
cmp ebp, 0xb
jbe 0x4a29c7
mov ebp, edi
lea edi, [esp + 0x13c]
xor eax, eax
call fcn.0045e1fb
test edx, edx
sete cl
mov eax, edx
sar edx, 0x1f
test edx, edx
mov edi, esi
xchg esi, ebx
sete bl
xchg esi, ebx
and ecx, esi
test cl, cl
jne 0x4a29b3
mov ecx, eax
mov esi, 0x14
jmp 0x4a27a7
add edx, 0x30
mov byte [esp + ebp + 0x13b], dl
mov ebp, dword [esp + 0xe4]
mov edi, dword [esp + 0x200]
mov edx, ebx
mov ebx, dword [esp + 0xe8]
test edx, edx
xchg edi, ebx
seta bl
xchg edi, ebx
test eax, eax
xchg ebp, ebx
seta bl
xchg ebp, ebx
test edx, edx
sete bl
and ebx, ebp
or ebx, edi
test bl, bl
je 0x4a2891
mov dword [esp + 0x58], eax
mov dword [esp + 0x48], esi
mov ebx, eax
mov eax, 0xcccccccd
mov ebp, edx
mul edx
shr edx, 3
lea edi, [edx + edx*4]
shl edi, 1
sub ebp, edi
mov eax, 0x19999999
mov edi, edx
mul ebp
mov dword [esp + 0xc4], edx
mov dword [esp + 0xc0], eax
mov eax, 0xcccccccd
mul ebx
shr edx, 3
mov eax, edx
add edx, 0
mov dword [esp + 0xbc], edx
mov esi, dword [esp + 0xc0]
add esi, edx
lea edx, [eax + eax*4]
lea ebp, [ebp + ebp*2]
shl edx, 1
sub ebx, edx
lea edx, [ebx + ebp*2]
mov ebx, eax
mov eax, 0xcccccccd
mul edx
shr edx, 3
mov dword [esp + 0xb8], edx
mov ebp, esi
add esi, edx
mov eax, 0xa
mul esi
mov edx, dword [esp + 0x58]
sub edx, eax
add ebx, 0
adc edi, 0
mov ebx, dword [esp + 0xc0]
mov eax, esi
mov esi, dword [esp + 0xbc]
add ebx, esi
mov ebx, dword [esp + 0xc4]
adc ebx, edi
mov esi, dword [esp + 0xb8]
add ebp, esi
adc ebx, 0
mov ebp, dword [esp + 0x48]
lea esi, [ebp - 1]
cmp esi, 0x14
jb 0x4a2786
jmp 0x4a3db2
cmp esi, 0x14
ja 0x4a3da6
lea eax, [esp + 0x1a4]
mov dword [esp], eax
lea eax, [0x5ec1a7]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
lea ecx, [esi - 0x14]
neg ecx
mov edx, ecx
neg ecx
sar ecx, 0x1f
and esi, ecx
lea ecx, [esp + esi + 0x13c]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
lea ecx, [0x5eb2b7]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], 1
call fcn.00448460
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0xe8]
lea ebx, [ecx + edx]
mov dword [esp + 0x238], ebx
mov ebp, dword [esp + 0xe4]
cmp ebx, ebp
ja 0x4a2964
mov esi, dword [esp + 0x200]
mov dword [esp + 0x1fc], esi
mov dword [esp + 0x23c], ebp
add edx, esi
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0045e900
mov eax, dword [esp + 0x240]
mov ecx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x80]
mov edx, dword [esp + 0x238]
mov edi, dword [esp + 0x23c]
mov esi, dword [esp + 0x1fc]
jmp 0x4a1de2
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x1f4], eax
lea eax, [0x5bec80]
mov dword [esp], eax
mov ecx, dword [esp + 0x200]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.004450a0
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0xe8]
jmp 0x4a2915
mov byte [esp + 0x14f], 0x30
mov ecx, eax
mov esi, 0x13
jmp 0x4a2891
mov esi, dword [0x74de10]
mov edi, dword [0x74de14]
cmp ebp, edi
jae 0x4a3dbe
lea ebp, [esi + edx*8 - 8]
mov esi, dword [ebp]
mov ebp, dword [ebp + 4]
mov ecx, ebp
mov eax, esi
jmp 0x4a28f2
cmp edx, 0x102
jne 0x4a2d04
mov edx, ebp
mov ebp, dword [esp + 0xe0]
lea esi, [ebp - 1]
cmp esi, 0xb
ja 0x4a2b27
mov edi, dword [0x74de14]
mov ebx, dword [0x74de10]
cmp esi, edi
jae 0x4a3de9
lea ebx, [ebx + ebp*8 - 8]
mov esi, dword [ebx]
mov ebx, dword [ebx + 4]
cmp ebx, 3
jb 0x4a3dc7
mov ebx, dword [esp + 0xe8]
lea edi, [ebx + 3]
mov eax, dword [esp + 0xe4]
cmp edi, eax
ja 0x4a2ab6
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0x200]
mov dword [esp + 0x1fc], eax
mov eax, dword [esp + 0xf8]
movzx ebx, word [esi]
mov word [esp + 0x2a], bx
movzx ebx, byte [esi + 2]
mov esi, ebx
mov ebx, dword [esp + 0xe8]
movzx ecx, word [esp + 0x2a]
mov edx, dword [esp + 0x1fc]
mov word [edx + ebx], cx
xchg esi, eax
mov byte [edx + ebx + 2], al
xchg esi, eax
mov ecx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x80]
mov edx, edi
mov edi, eax
mov esi, dword [esp + 0x1fc]
mov eax, dword [esp + 0x240]
jmp 0x4a1de2
mov dword [esp + 0xb4], edi
mov dword [esp + 0x1e4], esi
lea ecx, [0x5bec80]
mov dword [esp], ecx
mov edx, dword [esp + 0x200]
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edi
call fcn.004450a0
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x244]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0xe8]
mov ebp, dword [esp + 0xe0]
mov edi, dword [esp + 0xb4]
mov dword [esp + 0x1fc], esi
mov esi, dword [esp + 0x1e4]
jmp 0x4a2a66
mov esi, edi
lea edi, [esp + 0x150]
xor eax, eax
call fcn.0045e1fb
mov ecx, ebp
sar ebp, 0x1f
test ebp, ebp
mov eax, edx
sete dl
test ecx, ecx
mov edi, esi
xchg esi, ebx
sete bl
xchg esi, ebx
and esi, edx
xchg esi, eax
test al, al
xchg esi, eax
jne 0x4a2cf2
mov edx, ecx
mov esi, 0x14
jmp 0x4a2b8b
add edx, 0x30
mov byte [esp + ebx + 0x14f], dl
mov edx, dword [esp + 0xe0]
mov ebx, dword [esp + 0xe8]
mov edi, dword [esp + 0xe4]
mov esi, eax
mov eax, dword [esp + 0x80]
test ebp, ebp
sete dl
xchg edi, ebx
seta bl
xchg edi, ebx
test ecx, ecx
seta bl
and edx, ebx
or edx, edi
test dl, dl
je 0x4a2c70
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x54], esi
mov eax, 0xcccccccd
mul ecx
shr edx, 3
mov edi, edx
add edx, 0
mov dword [esp + 0xc4], edx
mov eax, 0xcccccccd
mul ebp
shr edx, 3
mov dword [esp + 0xc0], edx
lea ebx, [edx + edx*4]
shl ebx, 1
sub ebp, ebx
mov eax, 0x19999999
mul ebp
mov dword [esp + 0xbc], eax
mov ebx, dword [esp + 0xc4]
add eax, ebx
mov dword [esp + 0xc4], eax
lea ebp, [ebp + ebp*2]
lea esi, [edi + edi*4]
shl esi, 1
sub ecx, esi
lea ebp, [ecx + ebp*2]
mov ecx, eax
mov eax, ebp
mov esi, 0xcccccccd
mov ebp, edx
mul esi
shr edx, 3
mov dword [esp + 0xb8], edx
add ecx, edx
mov eax, 0xa
mul ecx
mov edx, dword [esp + 0x5c]
sub edx, eax
add edi, 0
mov edi, dword [esp + 0xc0]
adc edi, 0
mov esi, dword [esp + 0xbc]
add esi, ebx
adc ebp, edi
mov ebx, dword [esp + 0xc4]
mov esi, dword [esp + 0xb8]
add ebx, esi
adc ebp, 0
mov ebx, dword [esp + 0x54]
lea eax, [ebx - 1]
cmp eax, 0x14
jb 0x4a2b63
jmp 0x4a3ddf
cmp esi, 0x14
ja 0x4a3dd3
lea eax, [esp + 0x1c4]
mov dword [esp], eax
lea eax, [0x5ec1a7]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
lea ecx, [esi - 0x14]
neg ecx
mov edx, ecx
neg ecx
sar ecx, 0x1f
and esi, ecx
lea ecx, [esp + esi + 0x150]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
lea ecx, [0x5eb2b7]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], 1
call fcn.00448460
mov esi, dword [esp + 0x1c]
mov ebx, dword [esp + 0x20]
mov eax, dword [esp + 0x240]
mov ecx, dword [esp + 0x244]
mov edx, dword [esp + 0x80]
mov ebp, dword [esp + 0xe0]
jmp 0x4a2a2c
mov byte [esp + 0x163], 0x30
mov esi, 0x13
jmp 0x4a2c70
cmp edx, 0x103
jne 0x4a24d9
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov eax, dword [esp + 0xe0]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.004a1520
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x240]
mov ecx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x80]
jmp 0x4a1de2
cmp edx, 0x106
jg 0x4a3368
cmp edx, 0x104
je 0x4a331f
cmp edx, 0x105
jne 0x4a3062
mov eax, dword [esp + 0x90]
add eax, 0x15180
mov edx, dword [esp + 0x94]
adc edx, 0
mov dword [esp + 4], edx
mov dword [esp], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x93a80
call fcn.004555a0
mov eax, dword [esp + 0x10]
mov ecx, eax
mov eax, 0xc22e4507
imul ecx
lea eax, [edx + ecx]
sar eax, 0x10
sar ecx, 0x1f
sub eax, ecx
cmp eax, 6
jbe 0x4a3041
mov dword [esp + 0xdc], eax
lea edi, [esp + 0x114]
xor eax, eax
call fcn.0045e1fb
mov ecx, dword [esp + 0xdc]
mov edx, ecx
sar ecx, 0x1f
test ecx, ecx
sete bl
test edx, edx
xchg ebp, ebx
sete bl
xchg ebp, ebx
and ebp, ebx
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x4a302f
mov eax, 0x14
jmp 0x4a2e22
lea ebp, [ecx + 0x30]
xchg ebp, eax
mov byte [esp + edx + 0x113], al
xchg ebp, eax
mov edx, ebx
mov ecx, esi
test ecx, ecx
seta bl
xchg ebp, ebx
sete bl
xchg ebp, ebx
test edx, edx
xchg esi, ebx
seta bl
xchg esi, ebx
and ebp, esi
or ebp, ebx
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4a2f0d
mov dword [esp + 0x50], eax
mov eax, 0xcccccccd
mov ebp, edx
mul edx
shr edx, 3
mov esi, edx
add edx, 0
mov dword [esp + 0xc4], edx
mov eax, ecx
mov edi, 0xcccccccd
mul edi
shr edx, 3
mov dword [esp + 0xc0], edx
lea ebx, [edx + edx*4]
shl ebx, 1
sub ecx, ebx
mov eax, 0x19999999
mul ecx
mov dword [esp + 0xbc], edx
mov dword [esp + 0xb8], eax
mov ebx, dword [esp + 0xc4]
add eax, ebx
lea edx, [esi + esi*4]
lea ebx, [ecx + ecx*2]
shl edx, 1
mov ecx, ebp
sub ebp, edx
lea edx, [ebp + ebx*2]
mov ebx, eax
mov eax, edi
mul edx
shr edx, 3
mov dword [esp + 0xb0], edx
mov ebp, ebx
add ebx, edx
mov eax, 0xa
mul ebx
sub ecx, eax
add esi, 0
mov edx, dword [esp + 0xc0]
adc edx, 0
mov esi, dword [esp + 0xb8]
mov edi, dword [esp + 0xc4]
add esi, edi
mov esi, dword [esp + 0xbc]
adc esi, edx
mov edx, dword [esp + 0xb0]
add ebp, edx
adc esi, 0
mov edx, dword [esp + 0x50]
lea eax, [edx - 1]
cmp eax, 0x14
jb 0x4a2e12
jmp 0x4a3d72
cmp eax, 0x14
ja 0x4a3d68
lea ecx, [esp + 0x164]
mov dword [esp], ecx
lea ecx, [0x5eca3f]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xa
lea edx, [eax - 0x14]
neg edx
mov ebx, edx
neg edx
sar edx, 0x1f
and eax, edx
lea eax, [esp + eax + 0x114]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebx
lea eax, [0x5eb2b7]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 1
call fcn.00448460
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0xe8]
lea ebx, [ecx + edx]
mov dword [esp + 0x238], ebx
mov ebp, dword [esp + 0xe4]
cmp ebx, ebp
ja 0x4a2fe0
mov esi, dword [esp + 0x200]
mov dword [esp + 0x234], esi
mov dword [esp + 0x23c], ebp
add edx, esi
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0045e900
mov eax, dword [esp + 0x240]
mov ecx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x80]
mov edx, dword [esp + 0x238]
mov edi, dword [esp + 0x23c]
mov esi, dword [esp + 0x234]
jmp 0x4a1de2
mov dword [esp + 0x1f0], eax
mov dword [esp + 0x68], ecx
lea eax, [0x5bec80]
mov dword [esp], eax
mov ecx, dword [esp + 0x200]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.004450a0
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x1f0]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0xe8]
jmp 0x4a2f91
mov byte [esp + 0x127], 0x30
mov eax, 0x13
jmp 0x4a2f0d
mov ecx, dword [0x74de04]
mov edx, dword [0x74de00]
cmp eax, ecx
jae 0x4a3d7c
lea edx, [edx + eax*8]
mov eax, dword [edx]
mov ecx, dword [edx + 4]
jmp 0x4a2f6e
mov eax, dword [esp + 0x90]
add eax, 0x15180
mov edx, dword [esp + 0x94]
adc edx, 0
mov dword [esp + 4], edx
mov dword [esp], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x93a80
call fcn.004555a0
mov eax, dword [esp + 0x10]
mov ecx, eax
mov eax, 0xc22e4507
imul ecx
lea eax, [edx + ecx]
sar eax, 0x10
sar ecx, 0x1f
sub eax, ecx
cmp eax, 6
ja 0x4a317f
mov ecx, dword [0x74de04]
mov ebx, dword [0x74de00]
cmp ecx, eax
jbe 0x4a3da1
lea eax, [ebx + eax*8]
mov ebx, dword [eax]
mov eax, dword [eax + 4]
cmp eax, 3
jb 0x4a3d81
mov eax, dword [esp + 0xe8]
lea ecx, [eax + 3]
mov edx, dword [esp + 0xe4]
cmp ecx, edx
ja 0x4a312a
mov ebp, dword [esp + 0x200]
mov esi, ebx
movzx ebx, word [ebx]
mov edi, ebx
movzx ebx, byte [esi + 2]
mov word [ebp + eax], di
mov byte [ebp + eax + 2], bl
mov eax, dword [esp + 0x240]
mov edi, edx
mov esi, ebp
mov ebp, dword [esp + 0x80]
mov edx, ecx
mov ecx, dword [esp + 0x8c]
jmp 0x4a1de2
mov dword [esp + 0xac], ecx
mov dword [esp + 0x1e8], ebx
lea ebx, [0x5bec80]
mov dword [esp], ebx
mov ebp, dword [esp + 0x200]
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.004450a0
mov ebp, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0xe8]
mov ecx, dword [esp + 0xac]
mov ebx, dword [esp + 0x1e8]
jmp 0x4a30f6
mov dword [esp + 0xdc], eax
lea edi, [esp + 0x128]
xor eax, eax
call fcn.0045e1fb
mov ecx, dword [esp + 0xdc]
mov edx, ecx
sar ecx, 0x1f
test ecx, ecx
sete bl
test edx, edx
xchg ebp, ebx
sete bl
xchg ebp, ebx
and ebp, ebx
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x4a3310
mov eax, 0x14
jmp 0x4a31d1
lea ebp, [ecx + 0x30]
xchg ebp, eax
mov byte [esp + edx + 0x127], al
xchg ebp, eax
mov edx, ebx
mov ecx, esi
test edx, edx
seta bl
test ecx, ecx
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg esi, ebx
seta bl
xchg esi, ebx
and ebp, ebx
or ebp, esi
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4a32aa
mov dword [esp + 0x4c], eax
mov eax, 0xcccccccd
mov ebp, edx
mul edx
shr edx, 3
mov esi, edx
add edx, 0
mov eax, 0xcccccccd
mov edi, edx
mul ecx
shr edx, 3
mov dword [esp + 0xc4], edx
lea ebx, [edx + edx*4]
shl ebx, 1
sub ecx, ebx
mov eax, 0x19999999
mul ecx
mov dword [esp + 0xc0], edx
mov dword [esp + 0xbc], eax
add eax, edi
lea ebx, [esi + esi*4]
lea edx, [ecx + ecx*2]
shl ebx, 1
mov ecx, ebp
sub ebp, ebx
lea edx, [ebp + edx*2]
mov ebx, eax
mov eax, 0xcccccccd
mul edx
shr edx, 3
mov dword [esp + 0xb8], edx
mov ebp, ebx
add ebx, edx
mov eax, 0xa
mul ebx
sub ecx, eax
add esi, 0
mov edx, dword [esp + 0xc4]
adc edx, 0
mov esi, dword [esp + 0xbc]
add esi, edi
mov esi, dword [esp + 0xc0]
adc esi, edx
mov edx, dword [esp + 0xb8]
add ebp, edx
adc esi, 0
mov edx, dword [esp + 0x4c]
lea eax, [edx - 1]
cmp eax, 0x14
jb 0x4a31c1
jmp 0x4a3d97
cmp eax, 0x14
ja 0x4a3d8d
lea ecx, [esp + 0x184]
mov dword [esp], ecx
lea ecx, [0x5eca3f]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xa
lea edx, [eax - 0x14]
neg edx
mov ebx, edx
neg edx
sar edx, 0x1f
and eax, edx
lea eax, [esp + eax + 0x128]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebx
lea eax, [0x5eb2b7]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 1
call fcn.00448460
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
jmp 0x4a30d1
mov byte [esp + 0x13b], 0x30
mov eax, 0x13
jmp 0x4a32aa
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov eax, dword [esp + 0xe0]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.004a1520
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x240]
mov ecx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x80]
jmp 0x4a1de2
cmp edx, 0x107
je 0x4a3479
cmp edx, 0x108
jne 0x4a3430
mov edx, dword [esp + 0x84]
cmp edx, 0xa
jge 0x4a3429
lea eax, [ebx + 1]
cmp eax, edi
ja 0x4a33dd
mov byte [esi + ebx], 0x20
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 0
call fcn.004a1520
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x240]
mov ecx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x80]
jmp 0x4a1de2
lea ecx, [0x5bec80]
mov dword [esp], ecx
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], eax
call fcn.004450a0
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
inc eax
mov ecx, dword [esp + 0x244]
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0xe8]
mov ebp, dword [esp + 0x80]
jmp 0x4a3397
mov eax, ebx
jmp 0x4a339b
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov eax, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.004a1520
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x240]
mov ecx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x80]
jmp 0x4a1de2
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov eax, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.004a1520
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x240]
mov ecx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x80]
jmp 0x4a1de2
cmp edx, 0x20d
jg 0x4a37c2
cmp edx, 0x113
jg 0x4a3696
cmp edx, 0x10a
je 0x4a3586
cmp edx, 0x10b
je 0x4a3540
cmp edx, 0x113
jne 0x4a24d9
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov eax, dword [esp + 0x44]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 4
call fcn.004a1520
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x240]
mov ecx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x80]
jmp 0x4a1de2
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov eax, dword [esp + 0x40]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 3
call fcn.004a1520
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x240]
mov ecx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x80]
jmp 0x4a1de2
mov edx, dword [esp + 0x40]
cmp edx, 0x64
jge 0x4a35b2
lea eax, [ebx + 1]
cmp eax, edi
ja 0x4a364d
mov byte [esi + ebx], 0x20
cmp edx, 0xa
jge 0x4a3646
lea ebx, [eax + 1]
cmp edi, ebx
jb 0x4a35f4
mov byte [esi + eax], 0x20
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 0
call fcn.004a1520
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x240]
mov ecx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x80]
jmp 0x4a1de2
mov dword [esp + 0xa8], eax
lea ecx, [0x5bec80]
mov dword [esp], ecx
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebx
call fcn.004450a0
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
lea ebx, [eax + 1]
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0x244]
mov edx, dword [esp + 0x40]
mov ebp, dword [esp + 0x80]
jmp 0x4a35ae
mov ebx, eax
jmp 0x4a35b2
lea ecx, [0x5bec80]
mov dword [esp], ecx
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], eax
call fcn.004450a0
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
inc eax
mov ecx, dword [esp + 0x244]
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0xe8]
mov ebp, dword [esp + 0x80]
jmp 0x4a359a
cmp edx, 0x114
je 0x4a375e
cmp edx, 0x20c
je 0x4a371c
cmp edx, 0x20d
jne 0x4a24d9
mov eax, 0xaaaaaaab
imul ebp
add edx, ebp
sar edx, 3
mov eax, ebp
sar ebp, 0x1f
sub edx, ebp
lea edx, [edx + edx*2]
shl edx, 2
sub eax, edx
test eax, eax
jne 0x4a36da
mov eax, 0xc
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.004a1520
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x240]
mov ecx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x80]
jmp 0x4a1de2
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], 2
call fcn.004a1520
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x240]
mov ecx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x80]
jmp 0x4a1de2
mov edx, dword [esp + 0x44]
test edx, edx
jge 0x4a3768
neg edx
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov eax, 0x51eb851f
mov ecx, edx
imul edx
sar edx, 5
mov ebx, ecx
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x64
sub ebx, ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 2
call fcn.004a1520
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x240]
mov ecx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x80]
jmp 0x4a1de2
cmp edx, 0x210
jle 0x4a3a28
cmp edx, 0x212
jle 0x4a3994
cmp edx, 0x215
jne 0x4a38b7
cmp ebp, 0xc
jl 0x4a3856
lea edx, [ebx + 2]
cmp edx, edi
ja 0x4a3804
mov word [esi + ebx], 0x4d50
mov ecx, dword [esp + 0x8c]
jmp 0x4a1de2
mov dword [esp + 0xa4], edx
lea eax, [0x5bec80]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], edx
call fcn.004450a0
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x240]
mov ecx, dword [esp + 0x244]
mov edx, dword [esp + 0xa4]
mov ebx, dword [esp + 0xe8]
mov ebp, dword [esp + 0x80]
jmp 0x4a37f2
lea edx, [ebx + 2]
cmp edx, edi
ja 0x4a3865
mov word [esi + ebx], 0x4d41
jmp 0x4a37f8
mov dword [esp + 0xa0], edx
lea eax, [0x5bec80]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], edx
call fcn.004450a0
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x240]
mov ecx, dword [esp + 0x244]
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0xe8]
mov ebp, dword [esp + 0x80]
jmp 0x4a385d
cmp edx, 0x216
jne 0x4a24d9
cmp ebp, 0xc
jl 0x4a3933
lea edx, [ebx + 2]
cmp edx, edi
ja 0x4a38e1
mov word [esi + ebx], 0x6d70
mov ecx, dword [esp + 0x8c]
jmp 0x4a1de2
mov dword [esp + 0x9c], edx
lea eax, [0x5bec80]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], edx
call fcn.004450a0
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x240]
mov ecx, dword [esp + 0x244]
mov edx, dword [esp + 0x9c]
mov ebx, dword [esp + 0xe8]
mov ebp, dword [esp + 0x80]
jmp 0x4a38cf
lea edx, [ebx + 2]
cmp edx, edi
ja 0x4a3942
mov word [esi + ebx], 0x6d61
jmp 0x4a38d5
mov dword [esp + 0x98], edx
lea eax, [0x5bec80]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], edx
call fcn.004450a0
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x240]
mov ecx, dword [esp + 0x244]
mov edx, dword [esp + 0x98]
mov ebx, dword [esp + 0xe8]
mov ebp, dword [esp + 0x80]
jmp 0x4a393a
cmp edx, 0x211
jne 0x4a39e2
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov eax, dword [esp + 0x64]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.004a1520
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x240]
mov ecx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x80]
jmp 0x4a1de2
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov eax, dword [esp + 0x64]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.004a1520
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x240]
mov ecx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x80]
jmp 0x4a1de2
cmp edx, 0x20e
jne 0x4a3a96
mov eax, 0xaaaaaaab
imul ebp
add edx, ebp
sar edx, 3
mov eax, ebp
sar ebp, 0x1f
sub edx, ebp
lea edx, [edx + edx*2]
shl edx, 2
sub eax, edx
test eax, eax
jne 0x4a3a54
mov eax, 0xc
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.004a1520
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x240]
mov ecx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x80]
jmp 0x4a1de2
cmp edx, 0x20f
jne 0x4a3ae4
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov eax, dword [esp + 0x78]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.004a1520
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x240]
mov ecx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x80]
jmp 0x4a1de2
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov eax, dword [esp + 0x78]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.004a1520
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x240]
mov ecx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x80]
jmp 0x4a1de2
mov eax, dword [esp + 0x94]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x90]
mov dword [esp], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x15180
call fcn.004555a0
mov eax, dword [esp + 0x10]
mov ecx, eax
mov eax, 0x91a2b3c5
imul ecx
lea ebp, [edx + ecx]
sar ebp, 0xb
mov eax, ecx
sar ecx, 0x1f
sub ebp, ecx
imul ecx, ebp, 0xe10
sub eax, ecx
mov ecx, eax
mov eax, 0x88888889
imul ecx
lea eax, [ecx + edx]
sar eax, 5
mov edx, ecx
sar ecx, 0x1f
sub eax, ecx
imul ecx, eax, 0x3c
sub edx, ecx
mov ecx, dword [esp + 0x244]
mov ebx, dword [esp + 0xe8]
mov esi, dword [esp + 0x200]
mov edi, dword [esp + 0xe4]
mov dword [esp + 0x78], eax
mov dword [esp + 0x64], edx
mov eax, dword [esp + 0x240]
mov edx, dword [esp + 0x60]
jmp 0x4a1efb
mov eax, dword [esp + 0x94]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x90]
mov dword [esp], ecx
mov byte [esp + 8], 1
call fcn.004aa740
mov ebp, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
inc edx
mov ebx, dword [esp + 0xe8]
mov esi, dword [esp + 0x200]
mov edi, dword [esp + 0xe4]
mov dword [esp + 0xe0], eax
mov dword [esp + 0x84], ecx
mov dword [esp + 0x40], edx
mov eax, dword [esp + 0x240]
mov ecx, dword [esp + 0x244]
mov edx, dword [esp + 0x60]
jmp 0x4a1ee0
mov dword [esp + 0x248], esi
mov dword [esp + 0x24c], ebx
mov dword [esp + 0x250], ebp
add esp, 0x21c
ret
mov esi, dword [esp + 0x238]
lea edi, [ebx + esi]
mov dword [esp + 0xdc], edi
mov eax, dword [esp + 0x23c]
cmp edi, eax
ja 0x4a3cd4
mov dword [esp + 0xf0], eax
mov eax, dword [esp + 0x234]
mov dword [esp + 0x1fc], eax
mov eax, dword [esp + 0xf0]
mov dword [esp + 0x23c], eax
mov ecx, dword [esp + 0x1fc]
lea edx, [ecx + esi]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
call fcn.0045e900
mov eax, dword [esp + 0x240]
mov ecx, dword [esp + 0x244]
mov edx, dword [esp + 0x60]
mov ebx, dword [esp + 0xdc]
mov ebp, dword [esp + 0x23c]
mov esi, dword [esp + 0x1fc]
jmp 0x4a1e94
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x1f8], ebp
lea ecx, [0x5bec80]
mov dword [esp], ecx
mov edx, dword [esp + 0x234]
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edi
call fcn.004450a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x6c]
mov ebp, dword [esp + 0x1f8]
mov esi, dword [esp + 0x238]
mov dword [esp + 0x1fc], eax
mov eax, ecx
jmp 0x4a3c87
mov ebx, dword [esp + 0x238]
mov ebp, dword [esp + 0x23c]
mov esi, dword [esp + 0x234]
jmp 0x4a3c33
mov edx, 9
call fcn.0045e010
mov eax, esi
mov ecx, 9
call fcn.0045dff0
mov eax, edi
mov ecx, 9
call fcn.0045dff0
mov ecx, 0x14
call fcn.0045e050
mov ecx, 0x14
call fcn.0045dff0
call fcn.0045dff0
mov ecx, 3
mov edx, eax
call fcn.0045e010
mov ecx, 0x14
call fcn.0045e050
mov ecx, 0x14
call fcn.0045dff0
call fcn.0045dff0
mov eax, esi
mov ecx, 0x14
call fcn.0045e050
mov eax, esi
mov ecx, 0x14
call fcn.0045dff0
mov eax, ebp
mov ecx, edi
call fcn.0045dff0
mov ecx, 3
mov edx, ebx
call fcn.0045e010
mov eax, esi
mov ecx, 0x14
call fcn.0045e050
mov ecx, 0x14
call fcn.0045dff0
mov eax, esi
mov ecx, edi
call fcn.0045dff0
nop
call fcn.0045ca10
jmp fcn.004a1d20