Function at 0x4b1460
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x1a0
push ebx
mov ebx, dword [esp + 0x1ac]
push ebp
push esi
push edi
push ebx
push 0xc
lea eax, [esp + 0x140]
push 1
push eax
mov dword [esp + 0x110], 0
call dword [0x4d44d4]
mov ecx, dword [esp + 0x14c]
mov ebp, dword [esp + 0xb4]
add esp, 0x10
lea eax, [ecx + 1]
and al, 0xfe
sub eax, 4
cmp eax, 8
mov dword [esp + 0x13c], eax
jbe 0x4b1796
push ebx
push 8
lea edx, [esp + 0x1c]
push 1
push edx
call dword [0x4d44d4]
add esp, 0x10
test eax, eax
je 0x4b1781
mov ecx, 4
mov edi, str.LIST
lea esi, [esp + 0x14]
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x4b1519
mov eax, dword [esp + 0x13c]
push 1
sub eax, 0xc
push 4
push ebx
mov dword [esp + 0x148], eax
call dword [0x4d44d0]
add esp, 0xc
lea ecx, [esp + 0x14]
push ebx
push 8
push 1
push ecx
call dword [0x4d44d4]
add esp, 0x10
mov ecx, 4
mov edi, str.smpl
lea esi, [esp + 0x14]
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4b1563
mov eax, dword [esp + 0x18]
push eax
call dword [0x4d44c4]
add esp, 4
mov dword [esp + 0xbc], eax
test eax, eax
je 0x4b174e
mov ecx, dword [esp + 0x18]
push ebx
push ecx
mov edx, eax
push 1
push edx
call dword [0x4d44d4]
add esp, 0x10
jmp 0x4b174e
mov ecx, 4
mov edi, str.phdr
lea esi, [esp + 0x14]
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x4b15a8
mov ecx, dword [esp + 0x18]
push ecx
call dword [0x4d44c4]
add esp, 4
mov dword [esp + 0x40], eax
test eax, eax
je 0x4b174e
mov edx, dword [esp + 0x18]
push ebx
push edx
push 1
push eax
call dword [0x4d44d4]
add esp, 0x10
jmp 0x4b174e
mov ecx, 4
mov edi, str.pbag
lea esi, [esp + 0x14]
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4b15ef
mov eax, dword [esp + 0x18]
push eax
call dword [0x4d44c4]
add esp, 4
mov dword [esp + 0x28], eax
test eax, eax
je 0x4b174e
mov ecx, dword [esp + 0x18]
push ebx
push ecx
mov edx, eax
push 1
push edx
call dword [0x4d44d4]
add esp, 0x10
jmp 0x4b174e
mov ecx, 4
mov edi, str.pgen
lea esi, [esp + 0x14]
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x4b1632
mov ecx, dword [esp + 0x18]
push ecx
call dword [0x4d44c4]
mov ebp, eax
add esp, 4
test ebp, ebp
je 0x4b174e
mov edx, dword [esp + 0x18]
push ebx
push edx
push 1
push ebp
call dword [0x4d44d4]
add esp, 0x10
jmp 0x4b174e
mov ecx, 4
mov edi, str.inst
lea esi, [esp + 0x14]
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x4b1677
mov ecx, dword [esp + 0x18]
push ecx
call dword [0x4d44c4]
add esp, 4
mov dword [esp + 0x54], eax
test eax, eax
je 0x4b174e
mov edx, dword [esp + 0x18]
push ebx
push edx
push 1
push eax
call dword [0x4d44d4]
add esp, 0x10
jmp 0x4b174e
mov ecx, 4
mov edi, str.ibag
lea esi, [esp + 0x14]
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4b16be
mov eax, dword [esp + 0x18]
push eax
call dword [0x4d44c4]
add esp, 4
mov dword [esp + 0x44], eax
test eax, eax
je 0x4b174e
mov ecx, dword [esp + 0x18]
push ebx
push ecx
mov edx, eax
push 1
push edx
call dword [0x4d44d4]
add esp, 0x10
jmp 0x4b174e
mov ecx, 4
mov edi, str.igen
lea esi, [esp + 0x14]
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x4b16fc
mov ecx, dword [esp + 0x18]
push ecx
call dword [0x4d44c4]
add esp, 4
mov dword [esp + 0x3c], eax
test eax, eax
je 0x4b174e
mov edx, dword [esp + 0x18]
push ebx
push edx
push 1
push eax
call dword [0x4d44d4]
add esp, 0x10
jmp 0x4b174e
mov ecx, 4
mov edi, str.shdr
lea esi, [esp + 0x14]
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4b173d
mov eax, dword [esp + 0x18]
push eax
call dword [0x4d44c4]
add esp, 4
mov dword [esp + 0xb4], eax
test eax, eax
je 0x4b174e
mov ecx, dword [esp + 0x18]
push ebx
push ecx
push 1
push eax
call dword [0x4d44d4]
add esp, 0x10
jmp 0x4b174e
mov edx, dword [esp + 0x18]
push 1
push edx
push ebx
call dword [0x4d44d0]
add esp, 0xc
mov eax, dword [esp + 0x18]
push 1
and eax, 1
push eax
push ebx
call dword [0x4d44d0]
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x148]
add esp, 0xc
inc ecx
and ecx, 0xfffffffe
mov edx, 0xfffffff8
sub edx, ecx
add eax, edx
mov dword [esp + 0x13c], eax
cmp dword [esp + 0x13c], 8
ja 0x4b14b8
mov dword [esp + 0xa4], ebp
mov esi, dword [esp + 0x40]
mov ecx, 3
mov edi, 0x4dd0a0
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x4b2ba6
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x24], ecx
mov edx, dword [esp + 0x24]
mov cx, word [edx + 0x16]
test cx, cx
je 0x4b17ce
cmp cx, 0x80
jne 0x4b2b72
mov eax, dword [esp + 0x24]
mov ax, word [eax + 0x14]
cmp ax, 0x80
jae 0x4b2b72
mov ebx, ecx
and eax, 0xffff
and ebx, 0xffff
cmp cx, 0x80
mov dword [esp + 0x74], eax
jne 0x4b17fd
mov ebx, 1
mov ecx, ebx
xor edx, edx
shl ecx, 7
add ecx, eax
lea eax, [ecx*4 + 0x628b80]
mov dword [esp + 0x4c], eax
cmp dword [eax], edx
jne 0x4b1867
push 0x14a
call dword [0x4d44c4]
mov edx, dword [esp + 0x50]
mov edi, eax
mov ecx, 0x52
xor eax, eax
mov dword [edx], edi
mov esi, dword [esp + 0x28]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [edx]
add esp, 4
mov dword [eax], 0x54534e49
mov ecx, dword [edx]
mov dword [ecx + 4], 0x142
mov eax, dword [edx]
mov byte [eax + 8], bl
mov ecx, dword [edx]
mov al, byte [esp + 0x74]
mov byte [ecx + 9], al
mov edi, dword [edx]
add edi, 0xa
mov ecx, 5
rep movsd dword es:[edi], dword [esi]
xor edx, edx
mov eax, dword [esp + 0x24]
xor ecx, ecx
xor esi, esi
mov dword [esp + 0x90], edx
mov cx, word [eax + 0x18]
mov si, word [eax + 0x3e]
cmp ecx, esi
mov dword [esp + 0xa0], edx
mov dword [esp + 0xc4], edx
mov dword [esp + 0xc8], edx
mov dword [esp + 0xb8], edx
mov dword [esp + 0x9c], edx
mov dword [esp + 0x98], edx
mov dword [esp + 0xcc], edx
mov dword [esp + 0xd8], edx
mov dword [esp + 0xd4], edx
mov dword [esp + 0xc0], edx
mov dword [esp + 0xdc], edx
mov dword [esp + 0x34], 0
mov dword [esp + 0xac], ecx
jge 0x4b2b72
mov edi, 0xffffd120
mov esi, dword [esp + 0x28]
xor eax, eax
xor ebx, ebx
mov ax, word [esi + ecx*4]
mov bx, word [esi + ecx*4 + 4]
cmp eax, ebx
mov dword [esp + 0x20], eax
jge 0x4b2b58
shl eax, 2
xor ecx, ecx
mov dword [esp + 0x18c], eax
mov cx, word [eax + ebp]
add ecx, 0xffffffe7
cmp ecx, 0x1b
ja case.0x4b1928.41
xor ebx, ebx
mov bl, byte [ecx + 0x4b2c6c]
jmp dword [ebx*4 + 0x4b2c28]
mov ax, word [eax + ebp + 2]
cmp ax, 0x1388
jge 0x4b1949
movsx ecx, ax
mov dword [esp + 0x90], ecx
jmp case.0x4b1928.41
mov dword [esp + 0x90], 0x1388
jmp case.0x4b1928.41
mov ax, word [eax + ebp + 2]
cmp ax, 0x1f40
jge 0x4b1973
movsx eax, ax
mov dword [esp + 0xc4], eax
jmp case.0x4b1928.41
mov dword [esp + 0xc4], 0x1f40
jmp case.0x4b1928.41
mov ax, word [eax + ebp + 2]
cmp ax, 0x1388
jge 0x4b199d
movsx ecx, ax
mov dword [esp + 0xb8], ecx
jmp case.0x4b1928.41
mov dword [esp + 0xb8], 0x1388
jmp case.0x4b1928.41
mov ax, word [eax + ebp + 2]
cmp ax, 0x1f40
jge 0x4b19c7
movsx eax, ax
mov dword [esp + 0x98], eax
jmp case.0x4b1928.41
mov dword [esp + 0x98], 0x1f40
jmp case.0x4b1928.41
mov ax, word [eax + ebp + 2]
cmp ax, dx
jle 0x4b19f0
movsx ecx, ax
mov dword [esp + 0xd8], ecx
jmp case.0x4b1928.41
mov dword [esp + 0xd8], edx
jmp case.0x4b1928.41
mov ax, word [eax + ebp + 2]
cmp ax, 0x1f40
jge 0x4b1a16
movsx eax, ax
mov dword [esp + 0xc0], eax
jmp case.0x4b1928.41
mov dword [esp + 0xc0], 0x1f40
jmp case.0x4b1928.41
mov ax, word [eax + ebp + 2]
cmp ax, 0x1388
jge 0x4b1a40
movsx ecx, ax
mov dword [esp + 0xa0], ecx
jmp case.0x4b1928.41
mov dword [esp + 0xa0], 0x1388
jmp case.0x4b1928.41
mov ax, word [eax + ebp + 2]
cmp ax, 0x1f40
jge 0x4b1a6a
movsx eax, ax
mov dword [esp + 0xc8], eax
jmp case.0x4b1928.41
mov dword [esp + 0xc8], 0x1f40
jmp case.0x4b1928.41
mov ax, word [eax + ebp + 2]
cmp ax, 0x1388
jge 0x4b1a94
movsx ecx, ax
mov dword [esp + 0x9c], ecx
jmp case.0x4b1928.41
mov dword [esp + 0x9c], 0x1388
jmp case.0x4b1928.41
mov ax, word [eax + ebp + 2]
cmp ax, 0x1f40
jge 0x4b1abe
movsx eax, ax
mov dword [esp + 0xcc], eax
jmp case.0x4b1928.41
mov dword [esp + 0xcc], 0x1f40
jmp case.0x4b1928.41
mov ax, word [eax + ebp + 2]
cmp ax, dx
jle 0x4b1ae7
movsx ecx, ax
mov dword [esp + 0xd4], ecx
jmp case.0x4b1928.41
mov dword [esp + 0xd4], edx
jmp case.0x4b1928.41
mov ax, word [eax + ebp + 2]
cmp ax, 0x1f40
jge 0x4b1b0d
movsx eax, ax
mov dword [esp + 0xdc], eax
jmp case.0x4b1928.41
mov dword [esp + 0xdc], 0x1f40
jmp case.0x4b1928.41
lea eax, [eax + ebp + 2]
mov dword [esp + 0x124], edx
mov dword [esp + 0x30], eax
mov dword [esp + 0x12c], edx
movsx eax, word [eax]
mov dword [esp + 0x130], edx
mov dword [esp + 0xec], edx
lea ecx, [eax + eax*4]
mov dword [esp + 0xf4], edx
mov dword [esp + 0x108], edx
mov dword [esp + 0xe8], edx
mov dword [esp + 0xe4], edx
lea edx, [eax + ecx*2]
mov eax, dword [esp + 0x54]
xor ecx, ecx
mov dword [esp + 0x134], edi
mov dword [esp + 0xe0], edi
mov cx, word [eax + edx*2 + 0x14]
lea eax, [eax + edx*2]
xor edx, edx
mov dword [esp + 0x10c], edi
mov dx, word [eax + 0x2a]
mov dword [esp + 0xfc], edi
cmp ecx, edx
mov dword [esp + 0x114], edi
mov dword [esp + 0x104], edi
mov dword [esp + 0x110], edi
mov dword [esp + 0x11c], edi
mov dword [esp + 0x118], edi
mov dword [esp + 0x128], edi
mov dword [esp + 0x74], edi
mov dword [esp + 0xf0], edi
mov dword [esp + 0x68], ecx
jge 0x4b2aa7
mov ebp, dword [esp + 0x3c]
mov ebx, ecx
mov eax, dword [esp + 0x124]
mov ecx, dword [esp + 0x12c]
mov edx, dword [esp + 0x134]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x130]
mov dword [esp + 0xa8], ecx
mov ecx, dword [esp + 0xec]
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0xf4]
mov dword [esp + 0x88], ecx
mov ecx, dword [esp + 0x108]
mov dword [esp + 0xd0], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x10c]
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x104]
mov dword [esp + 0x8c], edx
mov edx, dword [esp + 0xfc]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x11c]
mov dword [esp + 0x64], ecx
mov ecx, dword [esp + 0x110]
mov dword [esp + 0x50], edx
mov edx, dword [esp + 0x114]
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x118]
mov dword [esp + 0x84], ecx
mov ecx, dword [esp + 0xe4]
mov dword [esp + 0x6c], edx
mov edx, dword [esp + 0x128]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0xf0]
mov dword [esp + 0x58], ecx
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x48], edx
mov edx, dword [esp + 0xe8]
mov dword [esp + 0x60], eax
mov dword [esp + 0x80], ecx
mov dword [esp + 0x70], edx
mov edx, dword [esp + 0x34]
mov ecx, 0x12
xor eax, eax
lea edi, [esp + 0x144]
rep stosd dword es:[edi], eax
push 0x9e
mov dword [esp + 0x20], edx
mov dword [esp + 0x30], 0
mov dword [esp + 0x124], 0
mov dword [esp + 0xfc], 1
mov dword [esp + 0x148], 0x504d4153
mov dword [esp + 0x14c], 0x40
call dword [0x4d44c4]
mov edi, eax
mov ecx, 0x27
xor eax, eax
mov dword [esp + 0x188], edi
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [esp + 0x48]
xor ecx, ecx
xor edx, edx
add esp, 4
mov cx, word [eax + ebx*4]
mov dx, word [eax + ebx*4 + 4]
cmp ecx, edx
jge 0x4b2982
xor eax, eax
mov ax, word [ebp + ecx*4]
cmp eax, 0x3a
ja case.0x4b1d6d.35
xor edx, edx
mov dl, byte [eax + 0x4b2d18]
jmp dword [edx*4 + 0x4b2c88]
movsx eax, word [ebp + ecx*4 + 2]
add dword [esp + 0x188], eax
jmp case.0x4b1d6d.35
movsx edx, word [ebp + ecx*4 + 2]
add dword [esp + 0x174], edx
jmp case.0x4b1d6d.35
movsx eax, word [ebp + ecx*4 + 2]
add dword [esp + 0x178], eax
jmp case.0x4b1d6d.35
movsx edx, word [ebp + ecx*4 + 2]
add dword [esp + 0x17c], edx
jmp case.0x4b1d6d.35
movsx eax, word [ebp + ecx*4 + 2]
mov edx, dword [esp + 0x188]
shl eax, 0xf
add edx, eax
mov dword [esp + 0x188], edx
jmp case.0x4b1d6d.35
movsx edx, word [ebp + ecx*4 + 2]
mov dword [esp + 0x88], edx
jmp case.0x4b1d6d.35
movsx edx, word [ebp + ecx*4 + 2]
shl edx, 8
mov eax, 0x51eb851f
imul edx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [esp + 0x2c], edx
fild dword [esp + 0x2c]
fstp dword [esp + 0x2c]
jmp case.0x4b1d6d.35
movsx edx, word [ebp + ecx*4 + 2]
mov eax, dword [esp + 0x174]
shl edx, 0xf
add eax, edx
mov dword [esp + 0x174], eax
jmp case.0x4b1d6d.35
movsx eax, word [ebp + ecx*4 + 2]
mov dword [esp + 0x20], eax
jmp case.0x4b1d6d.35
movsx edx, word [ebp + ecx*4 + 2]
or byte [esp + 0x170], 0x20
mov dword [esp + 0xa8], edx
jmp case.0x4b1d6d.35
movsx eax, word [ebp + ecx*4 + 2]
mov dword [esp + 0x8c], eax
jmp case.0x4b1d6d.35
movsx edx, word [ebp + ecx*4 + 2]
mov dword [esp + 0x94], edx
jmp case.0x4b1d6d.35
movsx eax, word [ebp + ecx*4 + 2]
mov dword [esp + 0xd0], eax
jmp case.0x4b1d6d.35
movsx edx, word [ebp + ecx*4 + 2]
mov dword [esp + 0xb0], edx
jmp case.0x4b1d6d.35
mov eax, 0x1388
cmp word [ebp + ecx*4 + 2], ax
jge 0x4b1eb9
mov eax, dword [esp + 0x18c]
movsx edx, word [eax + ebp + 2]
mov dword [esp + 0x5c], edx
jmp case.0x4b1d6d.35
mov dword [esp + 0x5c], eax
jmp case.0x4b1d6d.35
mov ax, word [ebp + ecx*4 + 2]
cmp ax, 0x1f40
jge 0x4b1ed9
movsx eax, ax
mov dword [esp + 0x6c], eax
jmp case.0x4b1d6d.35
mov dword [esp + 0x6c], 0x1f40
jmp case.0x4b1d6d.35
mov ax, word [ebp + ecx*4 + 2]
cmp ax, 0x1388
jge 0x4b1f00
movsx edx, ax
mov dword [esp + 0x84], edx
jmp case.0x4b1d6d.35
mov dword [esp + 0x84], 0x1388
jmp case.0x4b1d6d.35
mov ax, word [ebp + ecx*4 + 2]
cmp ax, 0x1f40
jge 0x4b1f27
movsx eax, ax
mov dword [esp + 0x78], eax
jmp case.0x4b1d6d.35
mov dword [esp + 0x78], 0x1f40
jmp case.0x4b1d6d.35
mov ax, word [ebp + ecx*4 + 2]
test ax, ax
jle 0x4b1f4a
movsx edx, ax
mov dword [esp + 0x70], edx
jmp case.0x4b1d6d.35
mov dword [esp + 0x70], 0
jmp case.0x4b1d6d.35
mov ax, word [ebp + ecx*4 + 2]
cmp ax, 0x1f40
jge 0x4b1f71
movsx eax, ax
mov dword [esp + 0x80], eax
jmp case.0x4b1d6d.35
mov dword [esp + 0x80], 0x1f40
jmp case.0x4b1d6d.35
mov ax, word [ebp + ecx*4 + 2]
cmp ax, 0x1388
jge 0x4b1f98
movsx edx, ax
mov dword [esp + 0x50], edx
jmp case.0x4b1d6d.35
mov dword [esp + 0x50], 0x1388
jmp case.0x4b1d6d.35
mov ax, word [ebp + ecx*4 + 2]
cmp ax, 0x1f40
jge 0x4b1fbc
movsx eax, ax
mov dword [esp + 0x64], eax
jmp case.0x4b1d6d.35
mov dword [esp + 0x64], 0x1f40
jmp case.0x4b1d6d.35
mov ax, word [ebp + ecx*4 + 2]
cmp ax, 0x1388
jge 0x4b1fe0
movsx edx, ax
mov dword [esp + 0x7c], edx
jmp case.0x4b1d6d.35
mov dword [esp + 0x7c], 0x1388
jmp case.0x4b1d6d.35
mov ax, word [ebp + ecx*4 + 2]
cmp ax, 0x1f40
jge 0x4b2004
movsx eax, ax
mov dword [esp + 0x48], eax
jmp case.0x4b1d6d.35
mov dword [esp + 0x48], 0x1f40
jmp case.0x4b1d6d.35
mov ax, word [ebp + ecx*4 + 2]
test ax, ax
jle 0x4b2027
movsx edx, ax
mov dword [esp + 0x58], edx
jmp case.0x4b1d6d.35
mov dword [esp + 0x58], 0
jmp case.0x4b1d6d.35
mov ax, word [ebp + ecx*4 + 2]
cmp ax, 0x1f40
jge 0x4b204b
movsx eax, ax
mov dword [esp + 0x60], eax
jmp case.0x4b1d6d.35
mov dword [esp + 0x60], 0x1f40
jmp case.0x4b1d6d.35
movsx edx, word [ebp + ecx*4 + 2]
mov eax, edx
sar edx, 8
and eax, 0x7f
and edx, 0x7f
cmp eax, edx
jg case.0x4b1d6d.35
mov edx, dword [esp + 0x4c]
inc eax
mov esi, dword [edx]
mov dl, byte [esi + 0x148]
mov byte [esi + eax + 0x29], dl
mov dx, word [ebp + ecx*4 + 2]
sar edx, 8
and edx, 0x7f
cmp eax, edx
jle 0x4b2070
jmp case.0x4b1d6d.35
movsx eax, word [ebp + ecx*4 + 2]
mov edx, dword [esp + 0x178]
shl eax, 0xf
add edx, eax
mov dword [esp + 0x178], edx
jmp case.0x4b1d6d.35
mov ax, word [ebp + ecx*4 + 2]
test ax, ax
jle 0x4b20c8
movsx edx, ax
mov dword [esp + 0x38], edx
jmp case.0x4b1d6d.35
mov dword [esp + 0x38], 0
jmp case.0x4b1d6d.35
movsx eax, word [ebp + ecx*4 + 2]
mov edx, dword [esp + 0x17c]
shl eax, 0xf
add edx, eax
mov dword [esp + 0x17c], edx
jmp case.0x4b1d6d.35
movsx edx, word [ebp + ecx*4 + 2]
mov dword [esp + 0x10], edx
fild dword [esp + 0x10]
fsubr dword [esp + 0x1c]
jmp 0x4b296a
movsx eax, word [ebp + ecx*4 + 2]
fld dword [esp + 0x1c]
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fmul qword [0x4c3d98]
fsubp st(1)
jmp 0x4b296a
mov edx, dword [esp + 0x3c]
mov dword [esp + 0xf8], 0
movsx eax, word [edx + ecx*4 + 2]
lea ebx, [edx + ecx*4 + 2]
mov edx, dword [esp + 0xb4]
lea ecx, [eax + eax*2]
shl ecx, 3
sub ecx, eax
test byte [edx + ecx*2 + 0x2d], 0x80
lea ebp, [edx + ecx*2]
jne 0x4b28fb
mov eax, dword [esp + 0x38]
mov ecx, 5
mov esi, ebp
lea edi, [esp + 0x14c]
test eax, eax
rep movsd dword es:[edi], dword [esi]
jle 0x4b21a3
fld qword [0x4c3da0]
fild dword [esp + 0x38]
fmul qword [0x4c3da8]
fmul qword [0x4c3db0]
call fcn.004b77b0
fmul qword [0x4c3db8]
call fcn.004b5864
mov word [esp + 0x16e], ax
jmp 0x4b21ad
mov word [esp + 0x16e], 0x7fff
mov ecx, dword [esp + 0xa8]
mov eax, 0x10624dd3
shl ecx, 0xe
imul ecx
sar edx, 5
mov eax, edx
mov esi, dword [esp + 0x174]
shr eax, 0x1f
mov edi, dword [esp + 0x178]
or byte [esp + 0x170], 4
lea ecx, [edx + eax + 0x4000]
mov eax, dword [ebp + 0x14]
mov edx, dword [ebp + 0x18]
mov word [esp + 0x16c], cx
mov ecx, dword [ebp + 0x1c]
sub edx, eax
add esi, edx
mov edx, dword [ebp + 0x20]
sub ecx, eax
mov dword [esp + 0x174], esi
add edi, ecx
mov ecx, dword [esp + 0x17c]
sub edx, eax
mov eax, dword [esp + 0x120]
xor esi, esi
add ecx, edx
cmp eax, esi
mov dword [esp + 0x178], edi
movsx eax, byte [ebp + 0x29]
mov dword [esp + 0x17c], ecx
je 0x4b2293
fld dword [esp + 0x1c]
fld qword [0x4c3dc0]
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fmul qword [0x4c3d98]
fsubp st(2)
fxch st(1)
fsubr qword [0x4c3dc8]
fmul qword [0x4c3dd0]
call fcn.004b77b0
mov ecx, dword [ebp + 0x24]
mov edx, dword [esp + 0x180]
mov dword [esp + 0x19c], esi
mov dword [esp + 0x198], ecx
fild qword [esp + 0x198]
mov dword [esp + 0x1a8], edx
mov dword [esp + 0x1ac], esi
fild qword [esp + 0x1a8]
jmp 0x4b2305
fld qword [0x4c3dc0]
xor ecx, ecx
mov dword [esp + 0x10], eax
mov cl, byte [ebp + 0x28]
fild dword [esp + 0x10]
mov dword [esp + 0x10], ecx
fild dword [esp + 0x10]
fxch st(1)
fmul qword [0x4c3d98]
fxch st(1)
fadd dword [esp + 0x1c]
fxch st(1)
fsubp st(1)
fsubr qword [0x4c3dc8]
fmul qword [0x4c3dd0]
call fcn.004b77b0
mov edx, dword [ebp + 0x24]
mov eax, dword [esp + 0x180]
mov dword [esp + 0x1a4], esi
mov dword [esp + 0x1a0], edx
fild qword [esp + 0x1a0]
mov dword [esp + 0x190], eax
mov dword [esp + 0x194], esi
fild qword [esp + 0x190]
fxch st(1)
fmulp st(2)
faddp st(1)
call fcn.004b5864
mov ebp, dword [esp + 0x174]
mov esi, dword [esp + 0x188]
mov dword [esp + 0x180], eax
lea ecx, [ebp + ebp + 0x40]
push ecx
call dword [0x4d44c4]
mov edx, eax
lea ecx, [ebp + ebp]
movsx eax, word [ebx]
fld qword [0x4c3dc0]
fild dword [esp + 0xd4]
add esp, 4
mov dword [esp + 0x188], edx
lea edi, [eax + eax*2]
shl edi, 3
sub edi, eax
mov eax, dword [esp + 0xb4]
fmul qword [0x4c3dd8]
mov eax, dword [eax + edi*2 + 0x14]
mov edi, edx
add eax, esi
mov esi, dword [esp + 0xbc]
lea esi, [esi + eax*2]
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 0x10
lea edi, [edx + ebp*2]
rep stosd dword es:[edi], eax
call fcn.004b77b0
fmul qword [0x4c3de0]
call fcn.004b5864
mov esi, dword [esp + 0x184]
mov ecx, dword [esp + 0x88]
shl ecx, 8
mov word [esi + 1], ax
mov eax, 0x51eb851f
imul ecx
fld qword [0x4c3dc0]
fild dword [esp + 0xb0]
fmul qword [0x4c3dd8]
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov word [esi + 3], dx
call fcn.004b77b0
fmul qword [0x4c3de8]
fmul qword [0x4c3df0]
call fcn.004b5864
fld qword [0x4c3dc0]
fild dword [esp + 0x8c]
mov word [esi + 5], ax
fmul qword [0x4c3dd8]
call fcn.004b77b0
fmul qword [0x4c3de0]
call fcn.004b5864
fld qword [0x4c3da0]
fild dword [esp + 0x20]
mov word [esi + 8], ax
fmul qword [0x4c3df8]
call fcn.004b77b0
fsub qword [0x4c3e00]
fmul qword [0x4c3db8]
call fcn.004b5864
fld qword [0x4c3dc0]
fild dword [esp + 0x94]
mov word [esi + 0xa], ax
fmul qword [0x4c3dd8]
call fcn.004b77b0
fmul qword [0x4c3de8]
fmul qword [0x4c3df0]
call fcn.004b5864
mov edx, dword [esp + 0x50]
mov word [esi + 0xc], ax
mov eax, dword [esp + 0xa0]
mov byte [esi + 0xe], 3
add eax, edx
mov byte [esi + 0x10], 4
cmp eax, 0x1388
mov byte [esi + 0x11], 4
mov dword [esp + 0x10], eax
jge 0x4b24c5
fld qword [0x4c3dc0]
fild dword [esp + 0x10]
fmul qword [0x4c3dd8]
call fcn.004b77b0
fmul qword [0x4c3de0]
call fcn.004b5864
mov word [esi + 0x18], ax
mov ebx, 0x4650
jmp 0x4b24ce
mov ebx, 0x4650
mov word [esi + 0x18], bx
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0xc8]
lea eax, [ecx + edx]
cmp eax, 0x1f40
mov dword [esp + 0x10], eax
jge 0x4b250d
fld qword [0x4c3dc0]
fild dword [esp + 0x10]
fmul qword [0x4c3dd8]
call fcn.004b77b0
fmul qword [0x4c3de0]
call fcn.004b5864
mov word [esi + 0x1c], ax
jmp 0x4b2513
mov word [esi + 0x1c], 0x8e70
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x9c]
add eax, ecx
cmp eax, 0x1388
mov dword [esp + 0x10], eax
jge 0x4b2551
fld qword [0x4c3dc0]
fild dword [esp + 0x10]
fmul qword [0x4c3dd8]
call fcn.004b77b0
fmul qword [0x4c3de0]
call fcn.004b5864
mov word [esi + 0x20], ax
jmp 0x4b2555
mov word [esi + 0x20], bx
mov edx, dword [esp + 0x48]
mov eax, dword [esp + 0xcc]
add eax, edx
cmp eax, 0x1f40
mov dword [esp + 0x10], eax
jge 0x4b25ab
fld qword [0x4c3dc0]
fild dword [esp + 0x10]
fmul qword [0x4c3dd8]
call fcn.004b77b0
fld qword [0x4c3da0]
fldln2
fxch st(2)
fmul qword [0x4c3de0]
fxch st(2)
fxch st(1)
fyl2x
fmul qword [0x4c3e08]
fdivp st(1)
call fcn.004b5864
mov word [esi + 0x24], ax
jmp 0x4b25b1
mov word [esi + 0x24], 0x24b8
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0xd4]
mov edi, 0x7fff
lea eax, [ecx + edx]
mov word [esi + 0x1e], di
test eax, eax
mov word [esi + 0x22], di
jle 0x4b25fc
fld qword [0x4c3da0]
neg eax
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fmul qword [0x4c3df8]
call fcn.004b77b0
fmul qword [0x4c3db8]
call fcn.004b5864
mov word [esi + 0x26], ax
jmp 0x4b2600
mov word [esi + 0x26], di
movsx ecx, word [esi + 0x26]
mov eax, edi
xor edx, edx
mov dx, word [esi + 0x24]
sub eax, ecx
imul eax, edx
cdq
and edx, edi
mov ecx, dword [esp + 0x60]
add eax, edx
mov edx, dword [esp + 0xdc]
sar eax, 0xf
mov word [esi + 0x24], ax
mov ax, word [esi + 0x18]
add word [esi + 0x1c], ax
mov ax, word [esi + 0x1c]
add word [esi + 0x20], ax
mov ax, word [esi + 0x20]
add word [esi + 0x24], ax
lea eax, [ecx + edx]
cmp eax, 0xffffe2b4
mov dword [esp + 0x10], eax
jle 0x4b2692
fld qword [0x4c3dc0]
fild dword [esp + 0x10]
fmul qword [0x4c3dd8]
call fcn.004b77b0
fld qword [0x4c3da0]
fldln2
fxch st(2)
fmul qword [0x4c3de0]
fxch st(2)
fxch st(1)
fyl2x
fmul qword [0x4c3e08]
fdivp st(1)
fdivr qword [0x4c3db8]
call fcn.004b5864
mov word [esi + 0x3c], ax
jmp 0x4b2696
mov word [esi + 0x3c], di
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x90]
add eax, ecx
mov byte [esi + 0x3e], 3
mov byte [esi + 0x40], 4
cmp eax, 0x1388
mov byte [esi + 0x41], 4
mov dword [esp + 0x10], eax
jge 0x4b26e0
fld qword [0x4c3dc0]
fild dword [esp + 0x10]
fmul qword [0x4c3dd8]
call fcn.004b77b0
fmul qword [0x4c3de0]
call fcn.004b5864
mov word [esi + 0x48], ax
jmp 0x4b26e4
mov word [esi + 0x48], bx
mov edx, dword [esp + 0x6c]
mov eax, dword [esp + 0xc4]
add eax, edx
cmp eax, 0x1f40
mov dword [esp + 0x10], eax
jge 0x4b2722
fld qword [0x4c3dc0]
fild dword [esp + 0x10]
fmul qword [0x4c3dd8]
call fcn.004b77b0
fmul qword [0x4c3de0]
call fcn.004b5864
mov word [esi + 0x4c], ax
jmp 0x4b2728
mov word [esi + 0x4c], 0x8e70
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0xb8]
lea eax, [ecx + edx]
cmp eax, 0x1388
mov dword [esp + 0x10], eax
jge 0x4b276a
fld qword [0x4c3dc0]
fild dword [esp + 0x10]
fmul qword [0x4c3dd8]
call fcn.004b77b0
fmul qword [0x4c3de0]
call fcn.004b5864
mov word [esi + 0x50], ax
jmp 0x4b276e
mov word [esi + 0x50], bx
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x98]
add eax, ecx
cmp eax, 0x1f40
mov dword [esp + 0x10], eax
jge 0x4b27c4
fld qword [0x4c3dc0]
fild dword [esp + 0x10]
fmul qword [0x4c3dd8]
call fcn.004b77b0
fld qword [0x4c3da0]
fldln2
fxch st(2)
fmul qword [0x4c3de0]
fxch st(2)
fxch st(1)
fyl2x
fmul qword [0x4c3e08]
fdivp st(1)
call fcn.004b5864
mov word [esi + 0x54], ax
jmp 0x4b27ca
mov word [esi + 0x54], 0x24b8
fld dword [esp + 0x2c]
call fcn.004b5864
mov edx, dword [esp + 0x70]
mov ecx, dword [esp + 0xd8]
add ecx, edx
mov word [esi + 0x4e], ax
test ecx, ecx
mov word [esi + 0x52], ax
jle 0x4b2810
fld qword [0x4c3da0]
neg ecx
mov dword [esp + 0x10], ecx
fild dword [esp + 0x10]
fmul qword [0x4c3df8]
call fcn.004b77b0
fmul dword [esp + 0x2c]
call fcn.004b5864
movsx edx, ax
mov word [esi + 0x56], ax
mov eax, edi
xor ecx, ecx
sub eax, edx
mov cx, word [esi + 0x54]
imul eax, ecx
cdq
and edx, edi
mov ecx, dword [esp + 0xc0]
add eax, edx
sar eax, 0xf
mov word [esi + 0x54], ax
mov dx, word [esi + 0x48]
add word [esi + 0x4c], dx
mov ax, word [esi + 0x4c]
add word [esi + 0x50], ax
mov ax, word [esi + 0x50]
add word [esi + 0x54], ax
mov eax, dword [esp + 0x80]
add eax, ecx
cmp eax, 0xffffe2b4
mov dword [esp + 0x10], eax
jle 0x4b28a7
fld qword [0x4c3dc0]
fild dword [esp + 0x10]
fmul qword [0x4c3dd8]
call fcn.004b77b0
fld qword [0x4c3da0]
fldln2
fxch st(2)
fmul qword [0x4c3de0]
fxch st(2)
fxch st(1)
fyl2x
fmul qword [0x4c3e08]
fdivp st(1)
fdivr qword [0x4c3db8]
call fcn.004b5864
mov word [esi + 0x6c], ax
jmp 0x4b28ab
mov word [esi + 0x6c], di
mov ebx, dword [esp + 0x4c]
xor eax, eax
mov ecx, dword [ebx]
mov ax, word [ecx + 0x148]
lea edx, [eax + eax*8]
lea eax, [edx*8 + 0x192]
push eax
push ecx
call dword [0x4d44c8]
xor ecx, ecx
mov dword [ebx], eax
mov cx, word [eax + 0x148]
lea esi, [esp + 0x14c]
add esp, 8
lea ecx, [ecx + ecx*8]
lea edi, [eax + ecx*8 + 0x14a]
mov ecx, 0x12
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebx]
inc word [eax + 0x148]
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x68]
mov ebp, dword [esp + 0x3c]
xor ecx, ecx
mov cx, word [edx + eax*4 + 4]
mov ebx, eax
jmp case.0x4b1d6d.35
cmp word [ebp + ecx*4 + 2], 2
jne 0x4b2921
mov word [ebp + ecx*4 + 2], 0
mov ax, word [ebp + ecx*4 + 2]
mov si, word [esp + 0x170]
mov dl, al
and edx, 1
not al
shl edx, 3
and eax, 2
or si, dx
shl eax, 6
or si, ax
mov word [esp + 0x170], si
jmp case.0x4b1d6d.35
movsx eax, word [ebp + ecx*4 + 2]
mov dword [esp + 0x10], eax
mov dword [esp + 0x120], 1
fild dword [esp + 0x10]
fadd dword [esp + 0x1c]
fstp dword [esp + 0x1c]
mov eax, dword [esp + 0x44]
xor edx, edx
inc ecx
mov dx, word [eax + ebx*4 + 4]
cmp ecx, edx
jl 0x4b1d55
mov eax, dword [esp + 0xf8]
test eax, eax
je 0x4b2a82
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0xa8]
mov eax, dword [esp + 0xd0]
mov dword [esp + 0x124], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 0x12c], edx
mov edx, dword [esp + 0x88]
mov dword [esp + 0x134], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x130], ecx
mov ecx, dword [esp + 0x94]
mov dword [esp + 0xec], edx
mov edx, dword [esp + 0x20]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0xf4], ecx
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x108], edx
mov edx, dword [esp + 0x64]
mov dword [esp + 0xfc], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x10c], ecx
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x104], edx
mov edx, dword [esp + 0x84]
mov dword [esp + 0x114], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x11c], ecx
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x110], edx
mov edx, dword [esp + 0x58]
mov dword [esp + 0x128], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0x118], ecx
mov ecx, dword [esp + 0x60]
mov dword [esp + 0xe4], edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0xe8], eax
mov dword [esp + 0xf0], ecx
mov dword [esp + 0x74], edx
mov eax, dword [esp + 0x30]
inc ebx
mov dword [esp + 0x68], ebx
movsx eax, word [eax]
lea ecx, [eax + eax*4]
lea edx, [eax + ecx*2]
mov ecx, dword [esp + 0x54]
xor eax, eax
mov ax, word [ecx + edx*2 + 0x2a]
cmp ebx, eax
jl 0x4b1bdd
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0xac]
mov ebp, dword [esp + 0xa4]
xor eax, eax
mov ax, word [edx + ecx*4 + 4]
mov edi, 0xffffd120
mov dword [esp + 0x20], eax
xor edx, edx
jmp case.0x4b1928.41
movsx ecx, word [eax + ebp + 2]
lea esi, [eax + ebp + 2]
mov eax, ecx
sar ecx, 8
and eax, 0x7f
and ecx, 0x7f
cmp eax, ecx
jg case.0x4b1928.41
mov ecx, dword [esp + 0x4c]
inc eax
mov ecx, dword [ecx]
mov bl, byte [ecx + 0x148]
mov byte [ecx + eax + 0x29], bl
mov cx, word [esi]
sar ecx, 8
and ecx, 0x7f
cmp eax, ecx
jle 0x4b2ae5
jmp case.0x4b1928.41
movsx eax, word [eax + ebp + 2]
mov dword [esp + 0x30], eax
fild dword [esp + 0x30]
fsubr dword [esp + 0x34]
jmp 0x4b2b31
movsx ecx, word [eax + ebp + 2]
fld dword [esp + 0x34]
mov dword [esp + 0x30], ecx
fild dword [esp + 0x30]
fmul qword [0x4c3d98]
fsubp st(1)
fstp dword [esp + 0x34]
mov ebx, dword [esp + 0x28]
mov ecx, dword [esp + 0xac]
mov eax, dword [esp + 0x20]
xor esi, esi
mov si, word [ebx + ecx*4 + 4]
inc eax
cmp eax, esi
mov dword [esp + 0x20], eax
jl 0x4b1904
mov esi, dword [esp + 0x24]
xor eax, eax
inc ecx
mov ax, word [esi + 0x3e]
mov dword [esp + 0xac], ecx
cmp ecx, eax
jl 0x4b18e7
mov eax, dword [esp + 0x100]
mov edi, 0x4dd0a0
inc eax
mov dword [esp + 0x100], eax
lea ecx, [eax + eax*8]
lea edx, [eax + ecx*2]
mov eax, dword [esp + 0x40]
mov ecx, 3
lea esi, [eax + edx*2]
xor edx, edx
mov dword [esp + 0x24], esi
repe cmpsb byte [esi], byte es:[edi]
jne 0x4b17b6
mov eax, dword [esp + 0xb4]
push eax
call dword [0x4d44cc]
mov ecx, dword [esp + 0x40]
add esp, 4
push ecx
call dword [0x4d44cc]
add esp, 4
push ebp
call dword [0x4d44cc]
mov edx, dword [esp + 0x48]
add esp, 4
push edx
call dword [0x4d44cc]
mov eax, dword [esp + 0x2c]
add esp, 4
push eax
call dword [0x4d44cc]
mov ecx, dword [esp + 0x44]
add esp, 4
push ecx
call dword [0x4d44cc]
mov edx, dword [esp + 0x58]
add esp, 4
push edx
call dword [0x4d44cc]
mov eax, dword [esp + 0xc0]
add esp, 4
push eax
call dword [0x4d44cc]
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1a0
ret