Function at 0x48f830
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x64]
cmp eax, dword [ecx + 8]
jbe 0x490da5
sub esp, 0xe4
mov edi, esp
lea esi, [esp + 0xe8]
call fcn.0045667e
call fcn.00494e40
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x70], ecx
mov edx, dword [esp + 0x24]
mov dword [esp + 0x74], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x54], ebx
mov ebp, dword [esp + 0x14]
mov dword [esp + 0xc0], ebp
mov esi, dword [esp + 0x108]
mov edi, dword [esp + 0x10c]
mov esi, 0xffffffff
mov dword [esp + 0x30], esi
mov edi, 0xffffffff
mov dword [esp + 0x64], edi
xor edi, edi
mov dword [esp + 0x58], edi
xor esi, esi
mov dword [esp + 0x68], esi
xor esi, esi
mov dword [esp + 0x34], esi
xor esi, esi
mov dword [esp + 0x5c], esi
xor esi, esi
mov dword [esp + 0x48], esi
mov esi, dword [esp + 0x108]
mov edi, dword [esp + 0x10c]
jmp 0x48f91a
mov edx, dword [esp + 0x74]
mov esi, dword [esp + 0xb4]
mov esi, dword [esp + 0x38]
mov dword [esp + 0x30], esi
mov dword [esp + 0x104], ebx
mov dword [esp + 0x100], ecx
mov dword [esp + 0xfc], ebp
mov ecx, dword [esp + 0x70]
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0xc0]
mov esi, dword [esp + 0xb4]
test edi, edi
je 0x490d76
mov dword [esp], esi
mov dword [esp + 4], edi
call fcn.0048df00
mov eax, dword [esp + 0x10]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x3c], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0xb4], edx
mov ebx, dword [esp + 0xc]
mov ebp, dword [esp + 8]
test ebx, ebx
jne 0x490cba
mov ebx, dword [esp + 0x104]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0x100]
test eax, eax
je 0x490c9e
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xcc], ebp
mov dword [esp + 0xac], esi
mov edi, ecx
mov ecx, dword [esp + 0x30]
test ecx, ecx
jge 0x48f9a0
test eax, 0x100
jne 0x490c3f
mov dword [esp + 0x38], ecx
mov ecx, dword [esp + 0x64]
test ecx, ecx
jge 0x48f9b7
test eax, 0x200
jne 0x490bab
mov dword [esp + 0x64], ecx
and eax, 0xffff
cmp eax, 0x109
jg 0x4905ae
cmp eax, 0x103
jg 0x490207
cmp eax, 0x23
jg 0x490026
cmp eax, 0x17
je 0x48fe03
lea ecx, [eax - 0x18]
cmp ecx, 9
ja 0x48fd7f
mov ecx, dword [esp + 0x6c]
test ecx, ecx
jne 0x48fd74
mov eax, ecx
mov ecx, dword [esp + 0x40]
cmp ecx, 0x18
jne 0x48fa61
lea ecx, [esi + 1]
cmp ecx, ebx
ja 0x48fa1c
mov byte [ebp + esi], 0x5a
jmp 0x48f8dc
lea eax, [0x5000c0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.004401b0
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x3c]
jmp 0x48fa12
cmp ecx, 0x1b
je 0x48fa0b
cmp ecx, 0x19
je 0x48fa0b
cmp ecx, 0x1a
je 0x48fa0b
cmp ecx, 0x1c
je 0x48fa0b
mov eax, 0x88888889
mov edx, dword [esp + 0x6c]
imul edx
mov eax, edi
mov edi, dword [esp + 0x6c]
add edx, edi
sar edi, 0x1f
sar edx, 5
mov dword [esp + 0xa8], edx
sub edx, edi
test edx, edx
jge 0x48fd09
lea edx, [esi + 1]
cmp edx, ebx
ja 0x48fcba
mov byte [ebp + esi], 0x2d
mov esi, dword [esp + 0xa8]
sub edi, esi
mov esi, dword [esp + 0x6c]
xchg esi, ebx
neg ebx
xchg esi, ebx
mov dword [esp + 0x28], edi
mov dword [esp + 0xa8], esi
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov eax, 0x88888889
imul edi
lea ecx, [edi + edx]
sar edi, 0x1f
sar ecx, 5
sub ecx, edi
mov dword [esp + 0xa4], ecx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 2
call fcn.0048eee0
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x40]
cmp ebp, 0x1b
jne 0x48fc98
lea esi, [edx + 1]
cmp esi, ecx
ja 0x48fc54
mov byte [ebx + edx], 0x3a
cmp ebp, 0x1f
je 0x48fb38
cmp ebp, 0x1a
jne 0x48fc13
cmp ebp, 0x19
je 0x48fb66
cmp ebp, 0x1e
je 0x48fb66
cmp ebp, 0x21
je 0x48fb66
cmp ebp, 0x1c
je 0x48fb66
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
mov ebp, ebx
mov ebx, ecx
mov ecx, esi
jmp 0x48f8dc
cmp ebp, 0x21
jne 0x48fc03
lea edx, [esi + 1]
cmp edx, ecx
ja 0x48fbc3
mov byte [ebx + esi], 0x3a
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov eax, 0x88888889
mov ecx, dword [esp + 0xa8]
imul ecx
add edx, ecx
mov ebx, ecx
sar ecx, 0x1f
sar edx, 5
sub edx, ecx
imul ecx, edx, 0x3c
sub ebx, ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 2
call fcn.0048eee0
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
jmp 0x48fb4c
mov dword [esp + 0xa0], esi
lea eax, [0x5000c0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
call fcn.004401b0
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
lea edx, [eax + 1]
mov esi, dword [esp + 0xa0]
jmp 0x48fb76
cmp ebp, 0x1c
je 0x48fb6f
mov edx, esi
jmp 0x48fb7a
mov dword [esp], ebx
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov eax, dword [esp + 0xa4]
imul eax, eax, 0x3c
mov ecx, dword [esp + 0x28]
sub ecx, eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 2
call fcn.0048eee0
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x40]
jmp 0x48fb38
mov dword [esp + 0x9c], edx
lea eax, [0x5000c0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], esi
call fcn.004401b0
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
lea esi, [eax + 1]
mov edx, dword [esp + 0x9c]
mov ebp, dword [esp + 0x40]
jmp 0x48fb26
cmp ebp, 0x20
je 0x48fb1b
cmp ebp, 0x1c
je 0x48fb1b
cmp ebp, 0x21
je 0x48fb1b
mov esi, edx
jmp 0x48fb2a
mov dword [esp + 0xa4], edi
lea eax, [0x5000c0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.004401b0
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea edx, [eax + 1]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x40]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0xa4]
jmp 0x48faaa
lea edi, [esi + 1]
cmp edi, ebx
ja 0x48fd28
mov byte [ebp + esi], 0x2b
mov esi, dword [esp + 0x6c]
mov esi, edx
mov edx, edi
mov edi, esi
mov esi, dword [esp + 0x6c]
jmp 0x48fac2
mov dword [esp + 0x98], edx
lea eax, [0x5000c0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edi
call fcn.004401b0
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea edi, [eax + 1]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x98]
mov esi, dword [esp + 0xac]
jmp 0x48fd10
mov eax, ecx
mov ecx, dword [esp + 0x40]
jmp 0x48fa75
lea ecx, [eax - 0x22]
cmp ecx, 1
jbe 0x48fd92
mov eax, dword [esp + 0x6c]
mov ecx, esi
jmp 0x48f8dc
lea edi, [esp + 0xd0]
lea esi, [esp + 0xe8]
call fcn.0045667e
nop
mov ecx, dword [esp + 0xd0]
mov dword [esp], ebp
mov edx, dword [esp + 0xac]
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
and ecx, 0x3fffffff
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x40]
sar ecx, 0x10
mov dword [esp + 0x10], ecx
cmp eax, 0x23
sete al
mov byte [esp + 0x14], al
call fcn.0048f1e0
mov ecx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x48f8dc
mov ecx, dword [esp + 0x54]
test ecx, ecx
je 0x48fea5
lea eax, [ecx + esi]
mov dword [esp + 0x100], eax
cmp eax, ebx
ja 0x48fe6f
mov dword [esp + 0x104], ebx
mov dword [esp + 0xfc], ebp
lea eax, [ebp + esi]
mov dword [esp], eax
mov eax, dword [esp + 0xc0]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004568a0
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
mov ebx, dword [esp + 0x104]
mov ecx, dword [esp + 0x100]
mov ebp, dword [esp + 0xfc]
jmp 0x48f8dc
lea ecx, [0x5000c0]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], eax
call fcn.004401b0
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x54]
mov esi, dword [esp + 0xac]
jmp 0x48fe1d
mov eax, 0x88888889
mov ecx, dword [esp + 0x6c]
imul ecx
add edx, ecx
mov eax, ecx
sar ecx, 0x1f
sar edx, 5
mov dword [esp + 0xa8], edx
sub edx, ecx
test edx, edx
jge 0x48ffc3
lea edx, [esi + 1]
cmp edx, ebx
ja 0x48ff74
mov byte [ebp + esi], 0x2d
mov esi, dword [esp + 0xa8]
sub ecx, esi
mov dword [esp + 0x2c], ecx
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
sar ecx, 0x1f
sub edx, ecx
mov dword [esp + 0xa8], edx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 2
call fcn.0048eee0
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xa8]
imul ecx, ecx, 0x3c
mov edx, dword [esp + 0x2c]
sub edx, ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 2
call fcn.0048eee0
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x48f8dc
mov dword [esp + 0xa4], ecx
lea eax, [0x5000c0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.004401b0
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea edx, [eax + 1]
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0xa4]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x3c]
jmp 0x48fed6
lea ecx, [esi + 1]
cmp ecx, ebx
ja 0x48ffda
mov byte [ebp + esi], 0x2b
mov esi, edx
mov edx, ecx
mov ecx, esi
jmp 0x48fee4
mov dword [esp + 0x94], edx
lea eax, [0x5000c0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.004401b0
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0x94]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x3c]
jmp 0x48ffca
cmp eax, 0x101
je 0x490138
cmp eax, 0x102
je 0x490083
cmp eax, 0x103
jne 0x48fd87
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.0048eee0
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x48f8dc
mov eax, dword [esp + 0x58]
mov dword [esp], eax
call fcn.00494a70
mov edx, dword [esp + 8]
mov eax, dword [esp + 4]
cmp edx, 3
jb 0x490d9a
mov ecx, dword [esp + 0xac]
lea edx, [ecx + 3]
mov ebx, dword [esp + 0xb0]
cmp edx, ebx
ja 0x4900e6
mov ebp, dword [esp + 0xcc]
movzx esi, word [eax]
mov edi, esi
movzx esi, byte [eax + 2]
mov word [ebp + ecx], di
xchg esi, eax
mov byte [ebp + ecx + 2], al
xchg esi, eax
mov eax, dword [esp + 0x6c]
mov edi, dword [esp + 0x3c]
mov ecx, edx
mov edx, dword [esp + 0xb4]
jmp 0x48f8dc
mov dword [esp + 0x90], edx
mov dword [esp + 0xc8], eax
lea eax, [0x5000c0]
mov dword [esp], eax
mov ebp, dword [esp + 0xcc]
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.004401b0
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0xc8]
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0x90]
jmp 0x4900bc
mov eax, dword [esp + 0x58]
mov dword [esp], eax
call fcn.00494a70
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xac]
lea ebx, [edx + eax]
mov dword [esp + 0x100], ebx
mov ebp, dword [esp + 0xb0]
cmp ebx, ebp
ja 0x4901b8
mov esi, dword [esp + 0xcc]
mov dword [esp + 0x104], ebp
mov dword [esp + 0xfc], esi
add edx, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004568a0
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
mov ebx, dword [esp + 0x104]
mov ecx, dword [esp + 0x100]
mov ebp, dword [esp + 0xfc]
jmp 0x48f8dc
mov dword [esp + 0x60], eax
mov dword [esp + 0xc4], ecx
lea eax, [0x5000c0]
mov dword [esp], eax
mov ecx, dword [esp + 0xcc]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.004401b0
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0xc4]
mov edx, dword [esp + 0xac]
jmp 0x49016f
cmp eax, 0x106
jg 0x490474
cmp eax, 0x104
je 0x490434
cmp eax, 0x105
jne 0x490338
mov eax, dword [esp + 0x70]
add eax, 0x15180
mov dword [esp], eax
mov eax, dword [esp + 0x74]
adc eax, 0
mov dword [esp + 4], eax
mov dword [esp + 8], 0x93a80
mov dword [esp + 0xc], 0
call fcn.00450de0
mov eax, dword [esp + 0x10]
mov ecx, eax
mov eax, 0xc22e4507
imul ecx
mov eax, ecx
sar ecx, 0x1f
add eax, edx
sar eax, 0x10
sub eax, ecx
mov dword [esp], eax
call fcn.00494b70
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xac]
lea ebx, [edx + eax]
mov dword [esp + 0x100], ebx
mov ebp, dword [esp + 0xb0]
cmp ebx, ebp
ja 0x4902e9
mov esi, dword [esp + 0xcc]
mov dword [esp + 0x104], ebp
mov dword [esp + 0xfc], esi
add edx, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004568a0
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
mov ebx, dword [esp + 0x104]
mov ecx, dword [esp + 0x100]
mov ebp, dword [esp + 0xfc]
jmp 0x48f8dc
mov dword [esp + 0x4c], eax
mov dword [esp + 0xb8], ecx
lea eax, [0x5000c0]
mov dword [esp], eax
mov ecx, dword [esp + 0xcc]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.004401b0
mov ebp, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0xac]
jmp 0x4902a0
mov eax, dword [esp + 0x70]
add eax, 0x15180
mov dword [esp], eax
mov eax, dword [esp + 0x74]
adc eax, 0
mov dword [esp + 4], eax
mov dword [esp + 8], 0x93a80
mov dword [esp + 0xc], 0
call fcn.00450de0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x44], eax
mov ecx, 0xc22e4507
imul ecx
mov eax, dword [esp + 0x44]
mov ebx, eax
sar eax, 0x1f
add edx, ebx
sar edx, 0x10
sub edx, eax
mov dword [esp], edx
call fcn.00494b70
mov edx, dword [esp + 8]
mov eax, dword [esp + 4]
cmp edx, 3
jb 0x490d90
mov ecx, dword [esp + 0xac]
lea edx, [ecx + 3]
mov ebx, dword [esp + 0xb0]
cmp edx, ebx
ja 0x4903e2
mov ebp, dword [esp + 0xcc]
movzx esi, byte [eax + 2]
mov edi, esi
movzx esi, word [eax]
mov word [ebp + ecx], si
xchg edi, eax
mov byte [ebp + ecx + 2], al
xchg edi, eax
mov eax, dword [esp + 0x6c]
mov edi, dword [esp + 0x3c]
mov ecx, edx
mov edx, dword [esp + 0xb4]
jmp 0x48f8dc
mov dword [esp + 0x8c], edx
mov dword [esp + 0xc8], eax
lea eax, [0x5000c0]
mov dword [esp], eax
mov ebp, dword [esp + 0xcc]
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.004401b0
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0xc8]
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0x8c]
jmp 0x4903b8
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.0048eee0
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x48f8dc
cmp eax, 0x107
je 0x49056e
cmp eax, 0x108
jne 0x49052e
mov eax, dword [esp + 0x68]
cmp eax, 0xa
jge 0x490527
lea ecx, [esi + 1]
cmp ecx, ebx
ja 0x4904df
mov byte [ebp + esi], 0x20
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.0048eee0
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x48f8dc
lea eax, [0x5000c0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.004401b0
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x68]
mov edx, dword [esp + 0xb4]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x3c]
jmp 0x49049e
mov ecx, esi
jmp 0x4904a3
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x68]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.0048eee0
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x48f8dc
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x68]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.0048eee0
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x48f8dc
cmp eax, 0x20d
jg 0x49087e
cmp eax, 0x113
jg 0x490769
cmp eax, 0x10a
je 0x490661
cmp eax, 0x10b
je 0x490621
cmp eax, 0x113
jne 0x48fd87
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x38]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 4
call fcn.0048eee0
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x48f8dc
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x34]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 3
call fcn.0048eee0
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x48f8dc
mov eax, dword [esp + 0x34]
cmp eax, 0x64
jge 0x49068f
lea ecx, [esi + 1]
cmp ecx, ebx
ja 0x490721
mov byte [ebp + esi], 0x20
cmp eax, 0xa
jge 0x49071a
lea esi, [ecx + 1]
cmp esi, ebx
ja 0x4906cb
mov byte [ebp + ecx], 0x20
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.0048eee0
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x48f8dc
mov dword [esp + 0x88], ecx
lea eax, [0x5000c0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
call fcn.004401b0
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea esi, [eax + 1]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x49068a
mov esi, ecx
jmp 0x49068f
lea eax, [0x5000c0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.004401b0
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0xb4]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x3c]
jmp 0x490675
cmp eax, 0x114
je 0x490822
cmp eax, 0x20c
je 0x4907e6
cmp eax, 0x20d
jne 0x48fd87
mov eax, 0xaaaaaaab
imul ecx
add edx, ecx
mov eax, ecx
sar ecx, 0x1f
sar edx, 3
sub edx, ecx
lea ecx, [edx + edx*2]
shl ecx, 2
sub eax, ecx
test eax, eax
jne 0x4907aa
mov eax, 0xc
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.0048eee0
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x48f8dc
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 2
call fcn.0048eee0
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x48f8dc
mov ecx, dword [esp + 0x38]
test ecx, ecx
jge 0x49082c
neg ecx
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, 0x51eb851f
imul ecx
mov ebx, ecx
sar ecx, 0x1f
sar edx, 5
sub edx, ecx
imul ecx, edx, 0x64
sub ebx, ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 2
call fcn.0048eee0
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x48f8dc
cmp eax, 0x210
jle 0x490abd
cmp eax, 0x212
jle 0x490a36
cmp eax, 0x215
jne 0x49096b
cmp ecx, 0xc
jl 0x49090c
lea eax, [esi + 2]
cmp eax, ebx
ja 0x4908c0
mov ecx, 0x4d50
mov word [ebp + esi], cx
mov ecx, eax
mov eax, dword [esp + 0x6c]
jmp 0x48f8dc
mov dword [esp + 0x84], eax
lea ecx, [0x5000c0]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], eax
call fcn.004401b0
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0xb4]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x3c]
jmp 0x4908ab
lea eax, [esi + 2]
cmp eax, ebx
ja 0x49091f
mov ecx, 0x4d41
mov word [ebp + esi], cx
jmp 0x4908b5
mov dword [esp + 0x80], eax
lea ecx, [0x5000c0]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], eax
call fcn.004401b0
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0xb4]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x3c]
jmp 0x490913
cmp eax, 0x216
jne 0x48fd87
cmp ecx, 0xc
jl 0x4909dd
lea eax, [esi + 2]
cmp eax, ebx
ja 0x490997
mov ecx, 0x6d70
mov word [ebp + esi], cx
mov ecx, eax
mov eax, dword [esp + 0x6c]
jmp 0x48f8dc
mov dword [esp + 0x7c], eax
lea ecx, [0x5000c0]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], eax
call fcn.004401b0
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0xb4]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x3c]
jmp 0x490982
lea eax, [esi + 2]
cmp eax, ebx
ja 0x4909f0
mov ecx, 0x6d61
mov word [ebp + esi], cx
jmp 0x49098c
mov dword [esp + 0x78], eax
lea ecx, [0x5000c0]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], eax
call fcn.004401b0
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0xb4]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x3c]
jmp 0x4909e4
cmp eax, 0x211
jne 0x490a7d
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x48]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.0048eee0
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x48f8dc
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x48]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.0048eee0
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x48f8dc
cmp eax, 0x20e
jne 0x490b24
mov eax, 0xaaaaaaab
imul ecx
add edx, ecx
mov eax, ecx
sar ecx, 0x1f
sar edx, 3
sub edx, ecx
lea ecx, [edx + edx*2]
shl ecx, 2
sub eax, ecx
test eax, eax
jne 0x490ae8
mov eax, 0xc
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.0048eee0
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x48f8dc
cmp eax, 0x20f
jne 0x490b6b
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x5c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.0048eee0
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x48f8dc
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x5c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.0048eee0
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x48f8dc
mov eax, dword [esp + 0x70]
mov dword [esp], eax
mov ecx, dword [esp + 0x74]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x15180
mov dword [esp + 0xc], 0
call fcn.00450de0
mov eax, dword [esp + 0x10]
mov ecx, eax
mov eax, 0x91a2b3c5
imul ecx
lea eax, [ecx + edx]
sar eax, 0xb
mov edx, ecx
sar ecx, 0x1f
sub eax, ecx
imul ecx, eax, 0xe10
sub edx, ecx
mov ecx, eax
mov eax, 0x88888889
mov ebx, edx
imul edx
lea eax, [ebx + edx]
mov edx, ebx
sar ebx, 0x1f
sar eax, 5
sub eax, ebx
imul ebx, eax, 0x3c
sub edx, ebx
mov ebx, dword [esp + 0xb0]
mov ebp, dword [esp + 0xcc]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x48], edx
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0xb4]
jmp 0x48f9b7
mov eax, dword [esp + 0x70]
mov dword [esp], eax
mov ecx, dword [esp + 0x74]
mov dword [esp + 4], ecx
mov byte [esp + 8], 1
call fcn.00495340
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
inc ebx
mov ebp, dword [esp + 0xcc]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x58], eax
mov dword [esp + 0x68], edx
mov dword [esp + 0x34], ebx
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0xb4]
mov ebx, dword [esp + 0xb0]
jmp 0x48f9a0
mov dword [esp + 0x110], ebp
mov dword [esp + 0x114], esi
mov dword [esp + 0x118], ebx
add esp, 0xe4
ret
mov esi, dword [esp + 0x100]
lea edi, [ebx + esi]
mov dword [esp + 0xa8], edi
mov ecx, dword [esp + 0x104]
cmp edi, ecx
ja 0x490d20
mov dword [esp + 0x104], ecx
mov eax, dword [esp + 0xfc]
lea edx, [eax + esi]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
call fcn.004568a0
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0xb4]
mov ebx, dword [esp + 0x104]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0xa8]
jmp 0x48f96e
mov dword [esp + 0x50], ebx
mov dword [esp + 0xbc], ebp
lea eax, [0x5000c0]
mov dword [esp], eax
mov edx, dword [esp + 0xfc]
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edi
call fcn.004401b0
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
mov ebx, dword [esp + 0x50]
mov ebp, dword [esp + 0xbc]
mov esi, dword [esp + 0x100]
mov dword [esp + 0xfc], eax
jmp 0x490cd6
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0x100]
mov ebx, dword [esp + 0x104]
jmp 0x490c9e
mov ecx, 3
call fcn.00455fc0
mov ecx, 3
call fcn.00455fc0
nop
call fcn.004546e0
jmp fcn.0048f830