Function at 0x475370
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x78]
cmp eax, dword [ecx + 8]
jbe 0x47651d
sub esp, 0xf8
mov edx, dword [esp + 0xfc]
mov ebx, dword [edx]
test ebx, ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
mov eax, ebx
mov ebx, dword [edx + 4]
test ebx, ebx
mov ecx, ebx
sete bl
and ebx, ebp
test bl, bl
jne 0x47646e
mov ebx, dword [edx + 8]
test ebx, ebx
jne 0x476459
mov ebp, dword [esp + 0x104]
mov esi, edx
mov edx, dword [ebp]
cmp edx, eax
mov eax, edx
sete dl
mov edi, ebx
mov ebx, dword [ebp + 4]
cmp ebx, ecx
mov ecx, ebx
sete bl
and ebx, edx
test bl, bl
je 0x476446
mov edx, dword [ebp + 8]
cmp edi, edx
jne 0x476433
movzx ebx, byte [ebp + 0xc]
cmp byte [esi + 0xc], bl
jne 0x476420
mov edi, ebp
mov ebp, dword [esp + 0x108]
cmp dword [ebp + 4], ecx
mov ecx, ebx
sete bl
cmp dword [ebp], eax
mov eax, edx
sete dl
and edx, ebx
test dl, dl
je 0x4755d7
cmp dword [ebp + 8], eax
jne 0x4755d7
cmp byte [ebp + 0xc], cl
jne 0x4755d7
lea edi, [esp + 0xe0]
xor eax, eax
call fcn.004663da
mov ecx, dword [esi]
mov edx, dword [esi + 4]
mov eax, 0x17
jmp 0x475468
mov byte [esp + eax + 0xe0], dl
dec eax
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0xfc]
mov edx, ebx
test ecx, ecx
seta bl
test edx, edx
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg edi, ebx
seta bl
xchg edi, ebx
and ebp, ebx
or ebp, edi
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x475543
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x48], eax
mov eax, ecx
mov ebp, 0xcccccccd
mov edi, edx
mul ebp
shr edx, 3
mov dword [esp + 0x84], edx
add edx, 0
mov dword [esp + 0x80], edx
mov eax, edi
mul ebp
shr edx, 3
mov dword [esp + 0x7c], edx
lea esi, [edx + edx*4]
shl esi, 1
sub edi, esi
mov eax, 0x19999999
mul edi
mov dword [esp + 0xc4], edx
mov esi, dword [esp + 0x80]
add esi, eax
mov ebx, dword [esp + 0x84]
lea edx, [ebx + ebx*4]
shl edx, 1
sub ecx, edx
lea edx, [edi + edi*2]
lea edx, [ecx + edx*2]
mov ecx, eax
mov eax, ebp
mul edx
shr edx, 3
mov edi, edx
add edx, esi
mov dword [esp + 0x18], edx
mov eax, 0xa
mul edx
mov edx, dword [esp + 0x1c]
sub edx, eax
add edx, 0x30
add ebx, 0
mov ebx, dword [esp + 0x7c]
adc ebx, 0
mov ebp, dword [esp + 0x80]
add ebp, ecx
mov ebp, dword [esp + 0xc4]
adc ebx, ebp
add edi, esi
adc ebx, 0
mov eax, dword [esp + 0x48]
cmp eax, 0x18
jb 0x475453
jmp 0x476512
lea edx, [eax - 0x17]
neg edx
mov ebx, dword [esp + 0x100]
xor ecx, ecx
jmp 0x475560
xchg ebp, eax
mov byte [esi + ecx], al
xchg ebp, eax
inc ecx
mov esi, dword [esp + 0xfc]
cmp edx, ecx
jle 0x47558a
lea ebp, [eax + ecx]
lea edi, [eax + ecx + 1]
cmp edi, 0x18
jae 0x476506
mov edi, dword [ebx + 4]
mov esi, dword [ebx]
movzx ebp, byte [esp + ebp + 0xe1]
cmp edi, ecx
ja 0x475553
jmp 0x4764fd
mov dword [ebx + 0xc], edx
mov dword [ebx + 0x10], edx
jmp 0x475595
mov dword [ebx + 0xc], eax
mov edx, dword [ebx + 0xc]
test edx, edx
jle 0x4755b8
mov ecx, dword [ebx + 4]
mov ebp, dword [ebx]
lea eax, [edx - 1]
cmp ecx, eax
jbe 0x4764f8
lea ebp, [edx + ebp - 1]
cmp byte [ebp], 0x30
je 0x475592
test edx, edx
jne 0x4755c1
mov dword [ebx + 0x10], 0
movzx eax, byte [esi + 0xc]
mov byte [ebx + 0x14], al
mov byte [esp + 0x10c], 1
add esp, 0xf8
ret
mov edx, dword [ebp + 4]
test edx, edx
sete bl
mov eax, edi
mov edi, dword [ebp]
test edi, edi
mov ecx, edi
xchg edi, ebx
sete bl
xchg edi, ebx
and edi, ebx
xchg edi, eax
test al, al
xchg edi, eax
je 0x476261
mov ecx, dword [esi + 8]
mov edx, dword [ebp + 8]
cmp ecx, edx
jle 0x476258
sub ecx, edx
cmp ecx, 0x20
sbb edx, edx
mov ebx, dword [esi]
mov dword [esp + 0x84], ebx
mov edi, dword [esi + 4]
shl ebx, cl
and ebx, edx
mov dword [esi], ebx
lea ebx, [ecx - 0x20]
mov dword [esp + 0x80], ebx
neg ebx
cmp ebx, 0x20
sbb eax, eax
mov dword [esp + 0x7c], eax
mov ebp, dword [esp + 0x80]
cmp ebp, 0x20
sbb esi, esi
shl edi, cl
mov ecx, ebp
mov eax, dword [esp + 0x84]
mov ebp, eax
shl eax, cl
and eax, esi
and edi, edx
mov ecx, ebx
shr ebp, cl
mov edx, dword [esp + 0x7c]
and ebp, edx
or ebp, edi
or eax, ebp
mov edx, dword [esp + 0xfc]
mov dword [edx + 4], eax
mov eax, dword [esp + 0x108]
mov ebx, dword [eax + 8]
mov dword [edx + 8], ebx
mov ebx, dword [esp + 0x104]
mov ecx, dword [ebx + 8]
mov ebp, dword [eax + 8]
cmp ecx, ebp
jle 0x47624a
sub ecx, ebp
mov dword [esp + 0xc0], ecx
cmp ecx, 0x20
sbb ebp, ebp
mov dword [esp + 0x84], ebp
mov esi, dword [ebx]
mov dword [esp + 0x80], esi
mov edi, dword [ebx + 4]
shl esi, cl
and esi, ebp
mov dword [ebx], esi
lea esi, [ecx - 0x20]
mov dword [esp + 0x7c], esi
xchg esi, ebx
neg ebx
xchg esi, ebx
cmp esi, 0x20
sbb edx, edx
mov eax, dword [esp + 0x7c]
cmp eax, 0x20
sbb ebx, ebx
mov ecx, eax
mov ebp, dword [esp + 0x80]
mov eax, ebp
shl ebp, cl
and ebp, ebx
mov ecx, esi
shr eax, cl
and eax, edx
mov ecx, dword [esp + 0xc0]
shl edi, cl
mov edx, dword [esp + 0x84]
and edi, edx
or eax, edi
or ebp, eax
mov eax, dword [esp + 0x104]
mov dword [eax + 4], ebp
mov edx, dword [esp + 0x108]
mov ebx, dword [edx + 8]
mov dword [eax + 8], ebx
mov dword [esp], eax
mov ecx, dword [esp + 0xfc]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00474820
mov eax, dword [esp + 0x108]
mov ecx, dword [eax]
add ecx, 1
mov edx, dword [esp + 0xc]
mov dword [esp + 0x6c], edx
mov ebx, dword [eax + 4]
mov dword [eax], ecx
adc ebx, 0
mov dword [eax + 4], ebx
mov ecx, dword [esp + 0x104]
mov ebx, dword [ecx]
mov dword [esp + 0x84], ebx
add ebx, 0xffffffff
mov esi, dword [ecx + 4]
mov dword [esp + 0x80], esi
mov dword [ecx], ebx
adc esi, 0xffffffff
mov dword [ecx + 4], esi
mov ecx, dword [eax + 8]
neg ecx
mov dword [esp + 0xc0], ecx
lea esi, [ecx - 0x20]
mov dword [esp + 0x7c], esi
cmp esi, 0x20
sbb edi, edi
mov dword [esp + 0xc4], edi
xchg esi, ebx
neg ebx
xchg esi, ebx
cmp esi, 0x20
sbb edx, edx
mov dword [esp + 0xbc], edx
cmp ecx, 0x20
sbb ebx, ebx
mov dword [esp + 0xb8], ebx
mov ebp, dword [eax + 4]
mov dword [esp + 0xb4], ebp
mov ecx, dword [esp + 0x7c]
shr ebp, cl
and ebp, edi
mov ecx, esi
mov edi, dword [esp + 0xb4]
shl edi, cl
and edi, edx
mov eax, dword [eax]
mov dword [esp + 0xb0], eax
mov ecx, dword [esp + 0xc0]
shr eax, cl
and eax, ebx
or eax, edi
or eax, ebp
mov dword [esp + 0xac], eax
mov ebp, eax
shl eax, cl
and eax, ebx
mov edi, dword [esp + 0xb0]
sub edi, eax
mov dword [esp + 0x64], edi
mov edi, dword [esp + 0xb0]
mov ebx, dword [esp + 0x84]
sub edi, ebx
mov dword [esp + 0x84], edi
add edi, 1
mov dword [esp + 0x54], edi
mov edi, dword [esp + 0xfc]
mov ecx, dword [edi]
mov dword [esp + 0xa8], ecx
mov edi, dword [esp + 0xb0]
sub edi, ecx
mov dword [esp + 0x30], edi
mov ecx, dword [esp + 0x7c]
shl ebp, cl
mov edi, dword [esp + 0xc4]
and ebp, edi
mov ecx, esi
mov edi, dword [esp + 0xac]
shr edi, cl
and edi, edx
or ebp, edi
mov edi, dword [esp + 0xb0]
sub edi, eax
mov eax, dword [esp + 0xb4]
mov edi, eax
sbb eax, ebp
mov dword [esp + 0xa4], eax
mov ebp, dword [esp + 0xb0]
sub ebp, ebx
mov ebx, dword [esp + 0x80]
mov ebp, edi
sbb edi, ebx
mov dword [esp + 0xa0], edi
mov ebx, dword [esp + 0x84]
add ebx, 1
adc edi, 0
mov dword [esp + 0x9c], edi
mov ebx, dword [esp + 0xfc]
mov ebx, dword [ebx + 4]
mov edi, dword [esp + 0xb0]
mov eax, dword [esp + 0xa8]
sub edi, eax
sbb ebp, ebx
mov dword [esp + 0x98], ebp
mov eax, dword [esp + 0xac]
xor ebx, ebx
xor edi, edi
mov ecx, 1
mov dword [esp + 0x38], ecx
mov ecx, esi
jmp 0x475909
mov eax, 0xa
mul ebp
inc ebx
mov ebp, dword [esp + 0x3c]
lea ebp, [ebp + ebp*4]
lea edi, [edx + ebp*2]
mov edx, dword [esp + 0xbc]
mov ebp, dword [esp + 0x98]
mov esi, ecx
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0xac]
cmp ebx, 0x14
jge 0x476243
mov dword [esp + 0x3c], edi
mov ebp, dword [esp + 0x38]
cmp ebp, eax
seta dl
test edi, edi
xchg esi, ebx
sete bl
xchg esi, ebx
xchg edi, ebx
seta bl
xchg edi, ebx
and esi, edx
or edi, esi
xchg edi, eax
test al, al
xchg edi, eax
je 0x4758db
mov dword [esp + 0x58], ebx
mov edx, dword [esp + 0xa4]
mov ebp, dword [esp + 0xc0]
mov esi, dword [esp + 0x100]
mov edi, dword [esp + 0x54]
mov dword [esp + 0xd8], eax
xor eax, eax
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0xd8]
jmp 0x47599f
mov edx, dword [esp + 0x60]
inc edx
mov ebx, dword [esp + 0xa4]
mov esi, dword [esp + 0xc0]
mov ebx, dword [esp + 0x58]
mov ebp, esi
mov esi, dword [esp + 0x100]
mov edi, dword [esp + 0x54]
mov dword [esp + 0x60], edx
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0xa4]
mov edi, dword [esp + 0x60]
cmp edi, ebx
jge 0x475cd9
sub ebx, edi
lea edx, [ebx - 1]
cmp edx, 0x14
jae 0x4764d2
lea edx, [0xa8c540]
lea ebx, [edx + ebx*8 - 8]
mov edx, dword [ebx]
mov ebx, dword [ebx + 4]
test edx, edx
je 0x4764cd
mov dword [esp + 0x40], ebx
mov dword [esp + 0x5c], eax
mov ebx, edx
xor edx, edx
div ebx
mov edx, dword [esi + 4]
mov esi, dword [esi]
cmp edx, edi
jbe 0x4764c4
mov dword [esp + 0x80], ebx
mov edx, eax
imul eax, ebx
mov ebx, dword [esp + 0x5c]
sub ebx, eax
mov dword [esp + 0x5c], ebx
mov eax, ecx
mov ecx, ebp
shl ebx, cl
mov ebp, dword [esp + 0xb8]
and ebx, ebp
mov dword [esp + 0xb4], ebx
mov ebp, dword [esp + 0x64]
add ebx, ebp
mov dword [esp + 0x74], ebx
add edx, 0x30
mov byte [esi + edi], dl
mov ecx, dword [esp + 0x7c]
mov esi, dword [esp + 0x5c]
shl esi, cl
mov edx, dword [esp + 0xc4]
and esi, edx
mov ecx, eax
mov edx, dword [esp + 0x5c]
shr edx, cl
mov edi, dword [esp + 0xbc]
and edx, edi
or edx, esi
mov esi, dword [esp + 0xb4]
add esi, ebp
mov esi, dword [esp + 0xa4]
adc edx, esi
mov dword [esp + 0x94], edx
mov esi, dword [esp + 0x54]
cmp esi, ebx
seta bl
mov esi, dword [esp + 0x9c]
cmp esi, edx
sete dl
xchg esi, ebx
seta bl
xchg esi, ebx
and edx, ebx
or esi, edx
xchg esi, eax
test al, al
xchg esi, eax
je 0x47596c
mov edx, dword [esp + 0x60]
inc edx
mov ebx, dword [esp + 0x100]
mov dword [ebx + 0xc], edx
mov edx, dword [esp + 0x6c]
mov ebp, dword [esp + 0x58]
add edx, ebp
mov dword [ebx + 0x10], edx
mov edx, dword [esp + 0xfc]
movzx edx, byte [edx + 0xc]
mov byte [ebx + 0x14], dl
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x80]
mov ebp, edx
shl edx, cl
mov esi, dword [esp + 0xc4]
and edx, esi
mov ecx, eax
mov esi, ebp
shr ebp, cl
and ebp, edi
mov ecx, dword [esp + 0xc0]
mov edi, dword [esp + 0x40]
shl edi, cl
mov eax, ebx
mov ebx, dword [esp + 0xb8]
and edi, ebx
or edi, ebp
or edx, edi
test edx, edx
xchg ebp, ebx
sete bl
xchg ebp, ebx
shl esi, cl
and esi, ebx
cmp esi, 4
setb bl
and ebx, ebp
test bl, bl
jne 0x475cd2
mov dword [esp + 0x28], edx
mov dword [esp + 0x24], esi
mov ebp, dword [esp + 0x98]
mov edi, dword [esp + 0x30]
mov ebx, dword [esp + 0x74]
mov ecx, dword [esp + 0x94]
jmp 0x475b5e
mov ebx, dword [esp + 0x24]
mov edi, dword [esp + 0x74]
add ebx, edi
movzx eax, byte [esi + edx - 1]
dec eax
mov byte [esi + edx - 1], al
mov esi, dword [esp + 0x24]
add edi, esi
mov edx, dword [esp + 0x28]
adc ecx, edx
mov edi, dword [esp + 0x30]
mov eax, dword [esp + 0x100]
mov dword [esp + 0x74], ebx
shr esi, 1
shl edx, 0x1f
or edx, esi
mov dword [esp + 0x80], edx
mov esi, edx
add edx, ebx
mov dword [esp + 0x7c], edx
add edx, 2
mov dword [esp + 0xc4], edx
mov edx, dword [esp + 0x28]
shr edx, 1
mov dword [esp + 0xbc], edx
add esi, ebx
adc edx, ecx
mov esi, dword [esp + 0x7c]
add esi, 2
adc edx, 0
cmp ebp, edx
xchg esi, ebx
seta bl
xchg esi, ebx
mov ebx, dword [esp + 0xc4]
cmp ebx, edi
setb bl
cmp ebp, edx
sete dl
and edx, ebx
or esi, edx
xchg esi, eax
test al, al
xchg esi, eax
je 0x475bd9
mov edx, dword [eax]
mov ebx, dword [eax + 4]
mov esi, dword [eax + 0xc]
lea edi, [esi - 1]
cmp edi, ebx
jb 0x475b33
jmp 0x4764bb
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x74]
mov esi, edx
add edx, ebx
mov dword [esp + 0x7c], edx
mov edx, dword [esp + 0x80]
add edx, edi
mov dword [esp + 0xc4], edx
add edx, 2
add esi, ebx
mov esi, dword [esp + 0x28]
adc esi, ecx
mov ebx, dword [esp + 0x80]
add ebx, edi
mov ebx, dword [esp + 0xbc]
adc ebp, ebx
mov ebx, dword [esp + 0xc4]
add ebx, 2
adc ebp, 0
cmp esi, ebp
setb bl
xchg ebp, ebx
sete bl
xchg ebp, ebx
mov esi, dword [esp + 0x7c]
cmp esi, edx
setbe dl
and ebp, edx
or ebp, ebx
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x475c52
xor eax, eax
mov byte [esp + 0x10c], al
add esp, 0xf8
ret
test ecx, ecx
sete dl
mov ebx, dword [esp + 0x74]
cmp ebx, 2
xchg ebp, ebx
setb bl
xchg ebp, ebx
and ebp, edx
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x475c71
xor eax, eax
jmp 0x475c44
mov edx, dword [esp + 0x84]
add edx, 0xffffffff
mov ebp, dword [esp + 0xa0]
adc ebp, 0xffffffff
cmp ecx, ebp
xchg ebp, ebx
seta bl
xchg ebp, ebx
xchg esi, ebx
sete bl
xchg esi, ebx
cmp ebx, edx
seta dl
and edx, esi
or edx, ebp
test dl, dl
jne 0x475c6d
cmp dword [eax + 0xc], 1
jne 0x475cc8
mov ecx, dword [eax + 4]
mov edx, dword [eax]
test ecx, ecx
jbe 0x4764b4
cmp byte [edx], 0x30
jne 0x475cc8
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov eax, 1
jmp 0x475c44
xor eax, eax
jmp 0x475c44
mov dword [esp + 0x84], ecx
mov dword [esi + 0xc], ebx
mov eax, ebp
mov ebp, dword [esp + 0x6c]
add ebx, ebp
mov dword [esi + 0x10], ebx
mov ebx, dword [esp + 0xfc]
movzx ebx, byte [ebx + 0xc]
mov byte [esi + 0x14], bl
mov ebx, dword [esp + 0xb8]
mov ebp, dword [esp + 0xbc]
mov edi, dword [esp + 0x54]
mov dword [esp + 0xd0], eax
mov eax, 1
mov dword [esp + 0x4c], eax
xor eax, eax
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0xd0]
jmp 0x475d7d
mov ebx, dword [esp + 0xb8]
mov eax, dword [esp + 0x84]
mov esi, dword [esp + 0x100]
mov edi, dword [esp + 0xc0]
mov eax, edi
mov ecx, dword [esp + 0x84]
mov edi, dword [esp + 0x54]
mov edx, ebp
mov ebp, dword [esp + 0x70]
mov dword [esp + 0x64], ebp
mov ebp, dword [esp + 0xb0]
mov dword [esp + 0x4c], ebp
mov ebp, dword [esp + 0xb4]
mov dword [esp + 0x50], ebp
mov ebp, dword [esp + 0xbc]
mov dword [esp + 0x68], edx
mov eax, 0xa
mov edi, dword [esp + 0x64]
mul edi
mov dword [esp + 0x80], edx
mov dword [esp + 0x64], eax
mov edi, eax
mov eax, 0xa
mov esi, dword [esp + 0x4c]
mul esi
mov esi, dword [esp + 0x68]
lea esi, [esi + esi*4]
mov ebp, dword [esp + 0x80]
lea ebp, [ebp + esi*2]
mov dword [esp + 0x80], ebp
mov esi, dword [esp + 0x50]
lea esi, [esi + esi*4]
lea edx, [edx + esi*2]
mov dword [esp + 0xb4], edx
mov esi, ecx
mov ecx, dword [esp + 0xc0]
shr edi, cl
and edi, ebx
mov ecx, esi
shl ebp, cl
mov edx, dword [esp + 0xbc]
and ebp, edx
or ebp, edi
mov ecx, dword [esp + 0x7c]
mov edi, dword [esp + 0x80]
shr edi, cl
mov edx, dword [esp + 0xc4]
and edi, edx
or edi, ebp
mov ebp, dword [esp + 0x100]
mov edx, dword [ebp + 4]
mov esi, dword [ebp]
mov ebp, dword [ebp + 0xc]
cmp ebp, edx
jae 0x4764ab
mov dword [esp + 0xb0], eax
mov dword [esp + 0xac], edi
mov ecx, dword [esp + 0xc0]
shl edi, cl
and edi, ebx
mov dword [esp + 0xa8], edi
mov edx, dword [esp + 0x64]
sub edx, edi
mov dword [esp + 0x70], edx
mov eax, dword [esp + 0x4c]
mov edx, dword [esp + 0x54]
mul edx
mov dword [esp + 0x90], edx
mov edx, 0xa
mul edx
mov dword [esp + 0x8c], edx
mov edx, dword [esp + 0xac]
lea edi, [edx + 0x30]
xchg edi, eax
mov byte [esi + ebp], al
xchg edi, eax
mov ebp, dword [esp + 0x100]
inc dword [ebp + 0xc]
mov esi, edx
sar edx, 0x1f
shl edx, cl
and edx, ebx
mov ecx, dword [esp + 0x84]
shr esi, cl
mov ebp, dword [esp + 0xbc]
and esi, ebp
or edx, esi
mov ecx, dword [esp + 0x7c]
mov ebp, dword [esp + 0xac]
shl ebp, cl
mov esi, dword [esp + 0xc4]
and ebp, esi
or edx, ebp
mov ebp, dword [esp + 0x64]
mov esi, dword [esp + 0xa8]
sub ebp, esi
mov ebp, dword [esp + 0x80]
sbb ebp, edx
mov edx, dword [esp + 0x9c]
mov esi, dword [esp + 0x4c]
imul edx, esi
mov esi, dword [esp + 0x50]
mov ebx, dword [esp + 0x54]
imul esi, ebx
mov ebx, dword [esp + 0x90]
add ebx, esi
add edx, ebx
lea edx, [edx + edx*4]
mov ebx, dword [esp + 0x8c]
lea edx, [ebx + edx*2]
mov dword [esp + 0x80], edx
cmp ebp, edx
setb bl
xchg esi, ebx
sete bl
xchg esi, ebx
mov edx, dword [esp + 0x70]
cmp edx, eax
xchg edi, ebx
setb bl
xchg edi, ebx
and edi, esi
or edi, ebx
xchg edi, eax
test al, al
xchg edi, eax
je 0x475d2d
mov dword [esp + 0x88], ebp
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x4c]
mov esi, dword [esp + 0x30]
mul esi
mov dword [esp + 0xac], edx
mov ebx, 0xa
mul ebx
mov ebx, ecx
mov ecx, dword [esp + 0x84]
mov ebp, 1
shr ebp, cl
mov ecx, ebx
mov edi, 1
shl edi, cl
mov ebx, dword [esp + 0xbc]
and ebp, ebx
mov ebx, dword [esp + 0xc4]
and edi, ebx
or edi, ebp
mov dword [esp + 0x84], edi
mov ebx, dword [esp + 0xb4]
shl ebx, 2
mov ebp, dword [esp + 0xb0]
shr ebp, 0x1e
or ebp, ebx
cmp edi, ebp
setb bl
xchg ebp, ebx
sete bl
xchg ebp, ebx
mov ecx, dword [esp + 0xc0]
mov edi, 1
shl edi, cl
mov ecx, ebx
mov ebx, dword [esp + 0xb8]
and edi, ebx
mov dword [esp + 0x20], edi
mov ebx, dword [esp + 0xb0]
shl ebx, 2
cmp edi, ebx
setb bl
mov byte [esp + 0x13], bl
mov edi, dword [esp + 0x4c]
mov ebx, dword [esp + 0x98]
imul edi, ebx
mov ebx, dword [esp + 0x50]
imul ebx, esi
mov esi, dword [esp + 0xac]
add ebx, esi
add ebx, edi
lea ebx, [ebx + ebx*4]
lea edx, [edx + ebx*2]
mov ebx, dword [esp + 0xb4]
shl ebx, 1
mov esi, dword [esp + 0xb0]
mov edi, esi
shr esi, 0x1f
or esi, ebx
movzx ebx, byte [esp + 0x13]
and ebx, ebp
or ebx, ecx
test bl, bl
jne 0x47623c
mov dword [esp + 0xc4], edx
mov dword [esp + 0xbc], esi
shl edi, 1
mov dword [esp + 0x2c], edi
mov ebx, dword [esp + 0x84]
mov ecx, dword [esp + 0x20]
mov ebp, dword [esp + 0x100]
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0xc8]
jmp 0x4760af
mov edx, dword [esp + 0x20]
mov esi, edx
add edx, ebp
movzx ecx, byte [edi + ebx - 1]
dec ecx
mov byte [edi + ebx - 1], cl
add ebp, esi
mov ebp, dword [esp + 0x84]
mov ecx, dword [esp + 0x78]
adc ecx, ebp
mov ebx, dword [esp + 0xc4]
mov edi, dword [esp + 0x100]
mov ebx, ebp
mov ebp, edi
mov esi, dword [esp + 0xbc]
mov edi, dword [esp + 0x2c]
mov dword [esp + 0x78], ecx
mov dword [esp + 0x70], edx
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0xc4]
shr ecx, 1
shl ebx, 0x1f
or ebx, ecx
mov dword [esp + 0xb8], ebx
mov ecx, ebp
mov ebp, dword [esp + 0x70]
add ebx, ebp
add edi, ebx
mov dword [esp + 0xb4], edi
mov edi, dword [esp + 0x84]
shr edi, 1
mov dword [esp + 0xb0], edi
mov edx, dword [esp + 0xb8]
add edx, ebp
mov edx, dword [esp + 0x78]
adc edi, edx
mov edx, dword [esp + 0x2c]
add ebx, edx
adc edi, esi
mov ebx, dword [esp + 0xc4]
cmp ebx, edi
xchg edi, ebx
seta bl
xchg edi, ebx
sete bl
mov esi, dword [esp + 0xb4]
cmp eax, esi
xchg esi, ebx
seta bl
xchg esi, ebx
and esi, ebx
or esi, edi
xchg esi, eax
test al, al
xchg esi, eax
je 0x47613a
mov ebx, dword [ecx]
mov esi, dword [ecx + 4]
mov edi, dword [ecx + 0xc]
lea edx, [edi - 1]
cmp esi, edx
ja 0x47605e
jmp 0x4764a2
mov ebx, dword [esp + 0x20]
mov esi, ebx
add ebx, ebp
mov edi, dword [esp + 0xb8]
add edi, eax
add edx, edi
add esi, ebp
mov esi, dword [esp + 0x84]
mov ebp, dword [esp + 0x78]
adc esi, ebp
mov ebp, dword [esp + 0xb8]
add ebp, eax
mov ebp, dword [esp + 0xb0]
mov eax, edx
mov edx, dword [esp + 0xc4]
adc ebp, edx
mov edx, dword [esp + 0x2c]
add edi, edx
mov edi, dword [esp + 0xbc]
adc ebp, edi
cmp esi, ebp
xchg ebp, ebx
setb bl
xchg ebp, ebx
xchg esi, ebx
sete bl
xchg esi, ebx
cmp ebx, eax
setbe bl
and esi, ebx
or esi, ebp
xchg esi, eax
test al, al
xchg esi, eax
je 0x4761b5
xor eax, eax
mov byte [esp + 0x10c], al
add esp, 0xf8
ret
mov ebx, dword [esp + 0x78]
cmp ebx, edi
xchg ebp, ebx
setb bl
xchg ebp, ebx
xchg esi, ebx
sete bl
xchg esi, ebx
mov eax, ebx
mov ebx, dword [esp + 0x70]
cmp ebx, edx
setb bl
and ebx, esi
or ebx, ebp
test bl, bl
je 0x4761e0
xor eax, eax
jmp 0x4761a7
mov ebx, dword [esp + 0x7c]
sub ebx, edx
mov edx, dword [esp + 0x80]
sbb edx, edi
cmp eax, edx
seta dl
xchg ebp, ebx
sete bl
xchg ebp, ebx
mov esi, dword [esp + 0x70]
cmp esi, ebx
seta bl
and ebx, ebp
or ebx, edx
test bl, bl
jne 0x4761dc
cmp dword [ecx + 0xc], 1
jne 0x476232
mov edx, dword [ecx + 4]
mov ebx, dword [ecx]
test edx, edx
jbe 0x476499
cmp byte [ebx], 0x30
jne 0x476232
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov eax, 1
jmp 0x4761a7
xor eax, eax
jmp 0x4761a7
xor ebx, ebx
jmp 0x475939
mov eax, ebx
mov edx, dword [esp + 0x108]
jmp 0x475714
mov eax, ebp
mov edx, esi
jmp 0x47567b
cmp edx, 1
sete bl
xchg edi, ebx
seta bl
xchg edi, ebx
nop
and ebx, 1
or ebx, edi
test bl, bl
je 0x47640d
mov ebx, edx
xor edi, edi
mov edx, 0x20
mov dword [esp + 0x44], edx
mov edx, ebx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x14], edi
test edi, edi
seta bl
cmp edx, 0x10000
xchg ebp, ebx
setae bl
xchg ebp, ebx
test edi, edi
xchg edi, ebx
sete bl
xchg edi, ebx
and edi, ebp
or edi, ebx
xchg edi, eax
test al, al
xchg edi, eax
je 0x476400
shr edx, 0x10
mov edi, dword [esp + 0x14]
mov ebx, edi
shl edi, 0x10
or edx, edi
shr ebx, 0x10
mov ebp, dword [esp + 0x44]
add ebp, 0x10
mov dword [esp + 0x14], ebx
mov dword [esp + 0x44], ebp
cmp edx, 0x100
xchg edi, ebx
setae bl
xchg edi, ebx
test ebx, ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
seta bl
and ebp, edi
or ebx, ebp
test bl, bl
je 0x4763f3
shr edx, 8
mov ebx, dword [esp + 0x14]
mov edi, ebx
shl ebx, 0x18
or edx, ebx
shr edi, 8
mov ebx, edi
mov edi, dword [esp + 0x44]
lea ebp, [edi + 8]
test ebx, ebx
jne 0x4764ea
cmp edx, 0x100
jae 0x4764de
mov dword [esp + 0x80], ecx
lea ebx, [0xa8d460]
movzx edx, byte [ebx + edx]
mov dword [esp + 0xc0], edx
lea ebx, [edx + ebp - 0x40]
neg ebx
mov dword [esp + 0x34], ebx
cmp ebx, 0x20
sbb edi, edi
mov dword [esp + 0x7c], edi
mov ecx, ebx
mov edx, dword [esp + 0x80]
shl edx, cl
and edx, edi
mov edi, dword [esp + 0x108]
mov dword [edi], edx
lea edx, [ecx - 0x20]
mov dword [esp + 0xc4], edx
cmp edx, 0x20
sbb edi, edi
neg edx
cmp edx, 0x20
sbb ebx, ebx
mov dword [esp + 0xbc], ebx
mov ecx, dword [esp + 0xc4]
mov ebx, dword [esp + 0x80]
shl ebx, cl
and ebx, edi
mov ecx, edx
mov edi, dword [esp + 0x80]
shr edi, cl
mov edx, dword [esp + 0xbc]
and edi, edx
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x84]
shl edx, cl
mov ecx, ebx
mov ebx, dword [esp + 0x7c]
and edx, ebx
or edx, edi
or ecx, edx
mov edx, dword [esp + 0x108]
mov dword [edx + 4], ecx
mov ebx, dword [edx + 8]
mov edi, dword [esp + 0xc0]
add edi, ebp
lea ebx, [edi + ebx - 0x40]
mov dword [edx + 8], ebx
mov ebp, edx
jmp 0x4755fb
mov ebp, dword [esp + 0x44]
mov ebx, dword [esp + 0x14]
jmp 0x47631e
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x44]
jmp 0x4762d7
mov ebx, edx
mov edi, ebx
mov edx, ecx
xor ecx, ecx
mov dword [esp + 0x44], ecx
mov ecx, edx
jmp 0x47628b
mov ebp, dword [esp + 0x108]
mov edi, dword [esp + 0x104]
jmp 0x4755d7
mov ebp, dword [esp + 0x108]
mov edi, dword [esp + 0x104]
jmp 0x4755d7
mov ebp, dword [esp + 0x108]
mov edi, dword [esp + 0x104]
jmp 0x4755d7
mov ebp, dword [esp + 0x108]
mov esi, edx
mov edi, dword [esp + 0x104]
jmp 0x4755d7
mov eax, dword [esp + 0x100]
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
movzx ecx, byte [edx + 0xc]
mov byte [eax + 0x14], cl
mov byte [esp + 0x10c], 1
add esp, 0xf8
ret
xor eax, eax
mov ecx, edx
call fcn.004661b0
mov eax, edx
mov ecx, esi
call fcn.004661b0
mov eax, ebp
mov ecx, edx
call fcn.004661b0
xor eax, eax
call fcn.004661b0
mov eax, edi
mov ecx, ebx
call fcn.004661b0
mov eax, edi
mov ecx, edx
call fcn.004661b0
call fcn.00433db0
mov eax, edx
mov ecx, 0x14
call fcn.004661b0
mov eax, edx
mov ecx, 0x100
call fcn.004661c0
mov esi, ebx
mov eax, edx
mov ecx, 0x100
call fcn.004662a0
call fcn.004661b0
mov eax, ecx
mov ecx, edi
call fcn.004661b0
mov eax, edi
mov ecx, 0x18
call fcn.004661b0
mov ecx, 0x18
call fcn.004661b0
nop
call fcn.00464bd0
jmp fcn.00475370