Function at 0x42f890
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0xa40
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov dword [esp + 0xa38], eax
mov dword [esp + 0xa34], ecx
mov dword [esp + 0xa30], edx
mov dword [esp + 0xa2c], esi
mov dword [esp + 0xa28], edi
mov eax, dword [0x49eaa8]
xor eax, 0xc27d9ddc
mov dword [0x49eaa8], eax
mov eax, esp
mov dword [eax + 4], 8
mov dword [eax], 0x4cc
call fcn.00410180
mov dword [esp + 0xa24], eax
mov eax, dword [0x49dc88]
or eax, 0x3d7f07c
mov ecx, dword [0x4a6f68]
imul ecx, eax
mov dword [0x4a6f68], ecx
mov eax, dword [esp + 0xa24]
mov ecx, dword [esp + 0xa28]
mov edx, esp
mov dword [edx + 4], eax
mov dword [edx], ecx
call fcn.00455ae0
mov dword [esp + 0x9fc], eax
mov eax, dword [0x49be6c]
add eax, 0xff0fb8ab
mov dword [0x49be6c], eax
mov eax, dword [esp + 0xa24]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 8
call fcn.0044f050
mov bx, word [0x496834]
mov ax, bx
add eax, 0xf0c1e345
mov bx, ax
mov word [0x496834], bx
cmp dword [esp + 0x9fc], 0
jne 0x42fae7
mov dword [0x4ae860], 0x4b5c9f51
cmp dword [esp + 0xa38], 0
je 0x42fa13
mov eax, 0x84a39427
mov ecx, dword [0x4ab180]
mov dx, word [0x495398]
mov si, dx
dec esi
mov di, si
mov word [0x495398], di
movsx esi, dx
and ecx, esi
mov esi, dword [0x4ac7cc]
or ecx, esi
cmp eax, ecx
jg 0x42f9d9
mov dword [0x4abf80], 0x4745266c
mov ecx, dword [esp + 0xa30]
call fcn.0041ae80
mov ecx, dword [0x4af57c]
imul ecx, ecx, 0x6f76d3fc
mov eax, 0xce144975
sub eax, ecx
mov dx, word [0x492a6c]
mov cx, dx
or ecx, eax
mov dx, cx
mov word [0x492a6c], dx
jmp 0x4320e9
mov eax, 0xe7ad1141
mov ecx, dword [0x4a8948]
dec ecx
mov dword [0x4a8948], ecx
mov edx, dword [0x4a8ee0]
xor edx, ecx
mov dword [0x4a8ee0], edx
mov ecx, dword [esp + 0xa30]
mov edx, dword [esp + 0xa2c]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
mov dword [esp + 0x120], eax
call fcn.00426df0
mov dword [esp + 0x9f8], eax
mov eax, dword [0x49f89c]
sar eax, 1
mov ecx, dword [esp + 0x120]
cmp ecx, eax
jl 0x42fa7c
mov dword [0x4af624], 0xc832e4b0
cmp dword [esp + 0x9f8], 0
jg 0x42fac0
mov ax, word [0x49318a]
mov cx, ax
and ecx, 0x9a15
mov ax, cx
mov word [0x49318a], ax
mov ecx, dword [esp + 0xa30]
call fcn.0041ae80
mov ecx, dword [0x4a4678]
or ecx, 0x6e840163
mov dword [0x4a4678], ecx
mov ax, word [0x4943ae]
mov cx, ax
inc ecx
mov ax, cx
mov word [0x4943ae], ax
movsx ecx, ax
xor ecx, 0x4c9aac4a
mov dword [0x4ae594], ecx
jmp 0x4320e9
mov eax, 0x99f91b46
mov ecx, dword [0x49ff3c]
mov edx, ecx
dec edx
mov dword [0x49ff3c], edx
sub eax, ecx
cmp eax, 0x8c64c3a3
je 0x42fb4d
mov eax, dword [0x49b7a8]
inc eax
mov dword [0x49b7a8], eax
mov cx, word [0x4929ba]
mov dx, cx
mov esi, edx
inc esi
mov cx, si
mov word [0x4929ba], cx
add edx, 0x3eec34b1
xor eax, edx
mov cx, word [0x499f92]
mov dx, cx
add edx, eax
mov cx, dx
mov word [0x499f92], cx
jmp 0x42fb5c
mov eax, dword [0x49fc74]
and eax, 0x6afd3d1d
mov dword [0x49fc74], eax
mov eax, 0x22f8cfa2
mov cx, word [0x4918bc]
movsx edx, cx
cmp eax, edx
je 0x42fba0
mov ax, word [0x493e04]
movsx ecx, ax
shr ecx, 7
mov edx, dword [0x4aa910]
add ecx, edx
mov ax, word [0x49a25e]
mov dx, ax
add edx, ecx
mov ax, dx
mov word [0x49a25e], ax
jmp 0x42fbaf
mov eax, dword [0x49be2c]
add eax, 0x734ed07e
mov dword [0x49be2c], eax
mov eax, dword [0x4aaef4]
add eax, 0xb2b4f62b
mov dword [0x4aaef4], eax
mov eax, dword [0x4a1cc0]
add eax, 0xfaf7bdfb
mov dword [0x4a1cc0], eax
mov eax, dword [0x4af114]
and eax, 0x64b7c4d9
mov dword [0x4af114], eax
mov eax, dword [0x4a684c]
imul eax, eax, 0x1f5e7f6d
mov dword [0x4a684c], eax
mov eax, dword [0x4a778c]
inc eax
mov dword [0x4a778c], eax
mov dword [0x4a4028], eax
lea ecx, [esp + 0x64c]
call fcn.00412ee0
mov ecx, dword [0x4aeda4]
imul ecx, ecx, 0xe853183e
mov dword [0x4aeda4], ecx
mov ecx, dword [0x4ab3b0]
add ecx, 0xd7954608
or ecx, 0xe67522c1
mov edx, dword [0x4a06d4]
sub edx, ecx
mov dword [0x4a06d4], edx
mov ecx, dword [0x4ac2d8]
and ecx, 0xdf8717ad
mov dword [0x4ac2d8], ecx
mov si, word [0x494acc]
movsx ecx, si
not ecx
or ecx, 0x41c37809
and ecx, 0x43cb782b
mov edx, dword [0x4a5f0c]
imul edx, ecx
mov dword [0x4a5f0c], edx
mov dword [esp + 0x20c], 0
mov dword [esp + 0x208], 0
mov dword [0x49d440], 0x85df0ffe
mov dword [0x4b0708], 0xe5a66126
mov dword [esp + 0x200], 0xffffffff
mov dword [esp + 0x1fc], 0xffffffff
mov ecx, dword [0x4a02e4]
not ecx
imul ecx, ecx, 0xf92f1b57
add ecx, 0x3baecf9c
mov edx, dword [0x4a0adc]
or edx, ecx
mov dword [0x4a0adc], edx
mov dword [esp + 0x1f8], 0x50
mov si, word [0x491f9a]
mov cx, si
inc ecx
mov di, cx
mov word [0x491f9a], di
movsx ecx, si
add ecx, 0xf928f631
mov edx, dword [0x49ec68]
sub edx, ecx
mov dword [0x49ec68], edx
mov byte [esp + 0x1f7], 0
mov ecx, dword [0x4adb8c]
or ecx, 0xc93bdd3e
mov dword [0x4adb8c], ecx
mov ecx, esp
mov dword [ecx], 0
mov dword [esp + 0x11c], eax
call fcn.00451570
add eax, 0x258
adc edx, 0
mov dword [esp + 0x208], eax
mov dword [esp + 0x20c], edx
mov eax, dword [0x4ab830]
imul eax, eax, 0xa5dffcbd
mov dword [0x4ab830], eax
mov byte [esp + 0x680], 0
mov eax, dword [0x4a471c]
or eax, 0xd3a3613c
mov dword [0x4a471c], eax
mov eax, dword [esp + 0xa28]
mov ecx, esp
mov dword [ecx], eax
call fcn.00452920
mov dword [esp + 0x21c], eax
mov eax, dword [0x4aca00]
and eax, 0xe5484900
mov dword [0x4aca00], eax
cmp dword [esp + 0x21c], 0x7f
jle 0x42fdbf
mov eax, dword [0x4ad1c8]
and eax, 0xaf138987
mov dword [0x49cc8c], eax
jmp 0x431fe6
mov eax, 0x43233868
mov ecx, dword [0x4a7ba0]
mov edx, ecx
dec edx
mov dword [0x4a7ba0], edx
xor ecx, 0x97f07011
mov edx, dword [0x4a1e84]
or edx, ecx
mov dword [0x4a1e84], edx
mov ecx, dword [esp + 0xa28]
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [esp + 0x950]
mov dword [edx], ecx
mov dword [esp + 0x118], eax
call fcn.004559e0
mov ecx, dword [0x4a24bc]
and ecx, 0x334d3508
mov edx, dword [esp + 0x118]
cmp edx, ecx
mov dword [esp + 0x114], eax
jl 0x42fe59
mov eax, dword [0x4ae024]
dec eax
mov dword [0x4ae024], eax
mov ecx, dword [0x4a7848]
inc ecx
mov dword [0x4a7848], ecx
imul ecx, ecx, 0x40cbf996
xor eax, ecx
mov ecx, dword [0x4a6ec8]
imul ecx, eax
mov dword [0x4a6ec8], ecx
mov eax, dword [esp + 0x21c]
sub eax, 1
mov dword [esp + 0x218], eax
mov eax, dword [esp + 0x218]
mov ecx, dword [esp + 0x21c]
sub ecx, 6
cmp eax, ecx
jl 0x43003e
mov eax, dword [0x4a377c]
shr eax, 0xa
xor eax, 0x5220
mov cx, word [0x4942ce]
mov dx, cx
sub edx, eax
mov cx, dx
mov word [0x4942ce], cx
mov eax, dword [esp + 0x218]
movsx eax, byte [esp + eax + 0x950]
cmp eax, 0x3a
jne 0x43001e
mov eax, 0x93afbef0
mov cx, word [0x496742]
movsx edx, cx
cmp eax, edx
jle 0x42fee9
mov eax, dword [0x49ba0c]
or eax, 0xe15ddd8f
mov dword [0x49ba0c], eax
jmp 0x42ff0b
mov ax, word [0x495a74]
movsx ecx, ax
mov edx, dword [0x4afbc8]
sar edx, 8
and ecx, edx
mov edx, dword [0x49c484]
and edx, ecx
mov dword [0x49c484], edx
mov eax, dword [esp + 0x218]
mov byte [esp + eax + 0x950], 0
mov eax, dword [0x4aebec]
and eax, 0x21dab198
mov cx, word [0x490ed6]
movsx edx, cx
cmp eax, edx
jl 0x42ff49
mov eax, dword [0x4a019c]
mov ecx, dword [0x4aa738]
add ecx, eax
mov dword [0x4aa738], ecx
mov eax, 0xe25390db
mov ecx, dword [esp + 0x218]
mov dword [esp + 0x21c], ecx
mov dx, word [0x4984ac]
movsx ecx, dx
xor ecx, 0xffffffff
sub ecx, 0x3081934a
cmp eax, ecx
jg 0x42ffb7
mov eax, 0xfffdfda9
mov cx, word [0x497754]
movsx edx, cx
or edx, 0xa9fdf2d
cmp eax, edx
jle 0x42ffb2
mov eax, dword [0x4a1970]
inc eax
mov dword [0x4a1970], eax
xor eax, 0xee8c2b7d
mov ecx, dword [0x49fdf8]
or ecx, eax
mov dword [0x49fdf8], ecx
jmp 0x42ffe8
mov eax, dword [0x49e150]
mov ecx, dword [0x4a9134]
mov edx, ecx
inc edx
mov dword [0x4a9134], edx
lea eax, [eax + ecx + 0x3a3f2cfb]
mov si, word [0x493b68]
mov cx, si
or ecx, eax
mov si, cx
mov word [0x493b68], si
mov eax, dword [esp + 0x218]
lea ecx, [esp + 0x950]
lea eax, [eax + ecx + 1]
mov ecx, esp
mov dword [ecx], eax
call fcn.00455d6d
mov dword [esp + 0x1f8], eax
mov eax, dword [0x4b0430]
xor eax, 0x3f2b879
mov dword [0x4b0430], eax
jmp 0x43003e
mov dword [0x4ac2b4], 0xd8ae1514
mov eax, dword [esp + 0x218]
add eax, 0xffffffff
mov dword [esp + 0x218], eax
jmp 0x42fe6a
mov word [0x499164], 0x5f43
mov dword [esp + 0x218], 0
mov eax, dword [esp + 0x218]
cmp eax, dword [esp + 0x21c]
jg 0x43022e
mov ax, word [0x497af4]
mov cx, ax
imul ecx, ecx, 0x8e1ac1d6
mov ax, cx
mov word [0x497af4], ax
mov ecx, dword [esp + 0x218]
mov dl, byte [esp + ecx + 0x950]
mov byte [esp + ecx + 0x8a8], dl
mov ecx, dword [0x49da14]
xor ecx, 0xffffffff
imul ecx, ecx, 0x16dfb7eb
or ecx, 0x1d2f333f
cmp ecx, 0xbdfff3bc
jl 0x4300d7
mov eax, dword [0x49cb34]
mov ecx, 0x883c4698
sub ecx, eax
xor ecx, 0x1a9c2405
mov eax, dword [0x49cbb4]
and eax, ecx
mov dword [0x49cbb4], eax
jmp 0x4300e6
mov eax, dword [0x4a5df0]
xor eax, 0x53051f08
mov dword [0x4a5df0], eax
mov eax, dword [esp + 0x218]
movsx eax, byte [esp + eax + 0x8a8]
cmp eax, 0x2f
jne 0x430209
mov ax, word [0x497278]
mov cx, ax
not ecx
imul ecx, ecx, 0xb325d328
mov ax, word [0x4975cc]
mov dx, ax
lea ecx, [ecx + edx + 0x299323e8]
mov ax, cx
mov word [0x4975cc], ax
mov ecx, dword [esp + 0x218]
mov byte [esp + ecx + 0x8a8], 0
mov ecx, dword [0x4a17b8]
mov ax, word [0x496de4]
mov dx, ax
xor ecx, edx
not ecx
mov ax, cx
mov word [0x496de4], ax
mov ecx, dword [esp + 0x218]
mov dword [esp + 0x214], ecx
mov eax, dword [esp + 0x214]
cmp eax, dword [esp + 0x21c]
jg 0x4301e4
mov eax, dword [0x4a3a24]
mov cx, word [0x496610]
mov dx, cx
imul eax, edx
imul eax, eax, 0x399a8ad7
mov cx, ax
mov word [0x496610], cx
mov eax, dword [esp + 0x214]
mov bl, byte [esp + eax + 0x950]
mov edx, dword [esp + 0x218]
sub eax, edx
mov byte [esp + eax + 0x680], bl
mov cx, word [0x4946b0]
mov ax, cx
xor eax, 0x22a4
mov cx, ax
mov word [0x4946b0], cx
mov eax, dword [esp + 0x214]
add eax, 1
mov dword [esp + 0x214], eax
jmp 0x430161
mov ax, word [0x4982f2]
movsx ecx, ax
shr ecx, 6
mov ax, word [0x497074]
mov dx, ax
sub edx, ecx
mov ax, dx
mov word [0x497074], ax
jmp 0x43022e
mov eax, dword [0x49d494]
and eax, 0xee296af
mov dword [0x49d494], eax
mov eax, dword [esp + 0x218]
add eax, 1
mov dword [esp + 0x218], eax
jmp 0x430052
lea eax, [esp + 0x680]
mov ecx, dword [0x4abbc8]
add ecx, 0x91df51a0
mov dword [0x4abbc8], ecx
mov ecx, esp
mov dword [ecx], eax
call fcn.00452920
mov ecx, dword [esp + 0xa2c]
mov edx, esp
mov dword [edx], ecx
mov dword [esp + 0x110], eax
call fcn.00452920
mov ecx, dword [esp + 0x110]
add ecx, eax
cmp ecx, 0x1ff
jbe 0x430290
mov eax, dword [0x4a5af4]
and eax, 0x933fc257
mov dword [0x4a5af4], eax
jmp 0x431fe6
mov eax, 0xf5d0d63b
mov ecx, dword [0x4aee08]
sar ecx, 7
imul ecx, ecx, 0xeff8da34
mov dx, word [0x493310]
mov si, dx
inc esi
mov di, si
mov word [0x493310], di
movsx esi, dx
sub ecx, esi
cmp eax, ecx
jge 0x4302f3
mov eax, 0x9bbdf5e6
mov ecx, dword [0x4a8f64]
or ecx, 0xaf8fb53b
cmp eax, ecx
jle 0x4302ee
mov eax, dword [0x4a8de8]
xor eax, 0xdba1fa51
mov dword [0x4a8de8], eax
jmp 0x430302
mov eax, dword [0x49dc44]
xor eax, 0x5923be3
mov dword [0x49dc44], eax
mov eax, dword [esp + 0xa2c]
mov ecx, esp
mov dword [ecx + 4], eax
lea eax, [esp + 0x680]
mov dword [ecx], eax
call fcn.004559f0
mov ecx, dword [0x4af924]
imul ecx, ecx, 0xc4e849c6
mov dword [0x4af924], ecx
mov dword [esp + 0x214], 0
mov ecx, dword [0x4a37d0]
imul ecx, ecx, 0xefd3bf4c
mov dword [0x4a37d0], ecx
mov ecx, esp
mov dword [ecx + 4], 5
mov dword [ecx], 0x3cbe
mov dword [esp + 0x10c], eax
call fcn.00410180
mov dword [esp + 0xa20], eax
mov eax, dword [0x4a5e90]
xor eax, 0xf3654bc6
mov dword [0x4a5e90], eax
mov eax, dword [esp + 0xa20]
mov ecx, esp
mov dword [ecx], eax
lea ecx, [esp + 0x64c]
call fcn.004322a0
sub esp, 4
mov ecx, dword [0x49f168]
and ecx, 0x82052c00
mov edx, dword [0x49e878]
xor edx, ecx
mov dword [0x49e878], edx
mov ecx, dword [esp + 0xa20]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], 5
mov dword [esp + 0x108], eax
call fcn.0044f050
mov eax, dword [0x49ff7c]
mov ecx, eax
inc ecx
mov dword [0x49ff7c], ecx
or eax, 0x989f931f
mov dword [0x4a9154], eax
mov eax, dword [esp + 0xa30]
mov ecx, eax
call fcn.00439540
cmp eax, 0
je 0x43073f
mov eax, 0xff00672e
mov ecx, dword [0x4a2f20]
mov edx, 0x39ca4afa
sub edx, ecx
or edx, 0x25dde425
mov ecx, dword [0x4a82a4]
add ecx, edx
mov dword [0x4a82a4], ecx
mov ecx, esp
mov dword [ecx + 4], 0xc
mov dword [ecx], 0x4357
mov dword [esp + 0x104], eax
call fcn.00410180
mov dword [esp + 0xa1c], eax
mov eax, dword [0x4afbc0]
mov ecx, dword [esp + 0x104]
cmp ecx, eax
jge 0x4304b1
mov eax, dword [0x49e43c]
not eax
mov cx, word [0x495b8c]
movsx edx, cx
cmp eax, edx
jl 0x430499
mov ax, word [0x4912b4]
movsx ecx, ax
sar ecx, 9
mov edx, dword [0x4a594c]
sub ecx, edx
mov edx, dword [0x4a8c08]
and edx, ecx
mov dword [0x4a8c08], edx
jmp 0x4304ac
mov eax, dword [0x4ae560]
mov ecx, eax
dec ecx
mov dword [0x4ae560], ecx
mov dword [0x49c8ec], eax
jmp 0x4304b1
mov ecx, dword [esp + 0xa30]
mov eax, dword [esp + 0xa1c]
mov edx, esp
mov dword [edx], eax
lea eax, [esp + 0x1e0]
mov dword [esp + 0x100], ecx
mov ecx, eax
mov dword [esp + 0xfc], eax
call fcn.00432be0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xfc]
mov dword [ecx], edx
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x100]
mov dword [esp + 0xf8], eax
call fcn.0041ed60
sub esp, 8
mov dword [esp + 0x218], eax
mov ecx, dword [esp + 0xfc]
call fcn.00435820
mov eax, dword [0x4a6af4]
dec eax
mov dword [0x4a6af4], eax
mov ecx, dword [0x4a7474]
xor eax, ecx
xor eax, 0x1ffbbf2c
mov dword [0x4a7474], eax
mov eax, dword [esp + 0xa1c]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0xc
call fcn.0044f050
mov eax, dword [0x49ef9c]
inc eax
mov dword [0x49ef9c], eax
or eax, 0xad232e3d
or eax, 0xa1750d96
cmp eax, 0x3fd1ccac
jne 0x430580
mov eax, dword [0x4a0e0c]
and eax, 0x1020580
mov dword [0x4a0e0c], eax
cmp dword [esp + 0x218], 0
jne 0x430730
mov eax, dword [0x4ad314]
and eax, 0xfada64a4
mov cx, word [0x498406]
movsx edx, cx
sar edx, 1
or eax, edx
mov dword [0x49fc90], eax
mov dword [esp + 0x214], 1
mov eax, dword [0x4a20d4]
imul eax, eax, 0x12db7aaf
xor eax, 0xbf18cf28
cmp eax, 0x180d089c
jne 0x430614
mov eax, dword [0x4ae7f8]
dec eax
mov dword [0x4ae7f8], eax
imul eax, eax, 0x151375b0
mov ecx, dword [0x4a0cbc]
xor ecx, 0xffffffff
cmp eax, ecx
jle 0x43060f
mov eax, dword [0x4a3df0]
sar eax, 2
add eax, 0x48d01f6d
mov ecx, dword [0x4a80a0]
imul ecx, eax
mov dword [0x4a80a0], ecx
jmp 0x430614
mov eax, 0x67e87abb
mov ecx, dword [esp + 0xa30]
mov edx, esp
mov dword [edx], 0
mov dword [esp + 0xf4], ecx
mov dword [esp + 0xf0], eax
call fcn.0041d710
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xb
mov ecx, dword [esp + 0xf4]
call fcn.00414210
sub esp, 8
mov ecx, dword [0x49df24]
imul ecx, ecx, 0x8816420d
mov dword [0x49df24], ecx
mov ecx, esp
mov dword [ecx + 4], 6
mov dword [ecx], 0xe6
mov dword [esp + 0xec], eax
call fcn.00410180
mov dword [esp + 0xa18], eax
mov eax, dword [0x4a0be8]
xor eax, 0xbdc6ddbd
mov dword [0x4a0be8], eax
mov eax, dword [esp + 0xa18]
mov ecx, esp
mov dword [ecx], eax
lea ecx, [esp + 0x64c]
call fcn.004322a0
sub esp, 4
mov ecx, dword [0x4ab304]
add ecx, 0x6c627301
mov dword [0x4ab304], ecx
mov ecx, dword [esp + 0xa18]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], 6
mov dword [esp + 0xe8], eax
call fcn.0044f050
mov eax, dword [0x4a8b14]
mov si, word [0x494398]
mov cx, si
inc ecx
mov di, cx
mov word [0x494398], di
movsx ecx, si
or eax, ecx
mov ecx, dword [esp + 0xf0]
cmp ecx, eax
jle 0x43072b
mov ax, word [0x491052]
mov cx, ax
or ecx, 0x7cfb
mov ax, cx
mov word [0x491052], ax
jmp 0x430730
mov eax, dword [0x4ac9c0]
add eax, 0x6469310a
mov dword [0x4ac9c0], eax
mov eax, dword [0x4a0728]
imul eax, eax, 0x5c30b509
and eax, 0xf5b2db73
cmp eax, 0x7b5029fb
je 0x43076a
mov eax, dword [0x49db1c]
imul eax, eax, 0x26f7e792
mov dword [0x49db1c], eax
mov eax, 0xb4fa0dc4
mov ecx, esp
lea edx, [esp + 0x680]
mov dword [ecx], edx
lea ecx, [esp + 0x1cc]
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xe0], eax
call fcn.0041abb0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xe4]
mov dword [ecx], edx
lea ecx, [esp + 0x64c]
mov dword [esp + 0xdc], eax
call fcn.00442200
sub esp, 4
mov ecx, dword [esp + 0xe4]
mov dword [esp + 0xd8], eax
call fcn.004383d0
mov eax, dword [0x4b05f0]
add eax, 0x7c6f2ff1
mov dword [0x4b05f0], eax
mov eax, esp
mov dword [eax + 4], 0x32
mov dword [eax], 0x3e50
call fcn.00410180
mov dword [esp + 0xa14], eax
mov eax, dword [0x4ae370]
mov ecx, dword [esp + 0xe0]
sub ecx, eax
cmp ecx, 0xfffef55c
jge 0x430833
mov eax, dword [0x4aa614]
not eax
add eax, 0xb9720e0a
xor eax, 0x69b97c46
mov ecx, dword [0x4ac06c]
and ecx, eax
mov dword [0x4ac06c], ecx
jmp 0x430842
mov eax, dword [0x4a3218]
add eax, 0x9f4ea4da
mov dword [0x4a3218], eax
mov eax, dword [esp + 0xa14]
mov ecx, esp
mov dword [ecx], eax
lea eax, [esp + 0x1b8]
mov ecx, eax
mov dword [esp + 0xd4], eax
call fcn.0041abb0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xd4]
mov dword [ecx], edx
lea ecx, [esp + 0x64c]
mov dword [esp + 0xd0], eax
call fcn.00442200
sub esp, 4
mov ecx, dword [esp + 0xd4]
mov dword [esp + 0xcc], eax
call fcn.004383d0
mov eax, dword [0x4a6460]
mov ecx, eax
dec ecx
mov dword [0x4a6460], ecx
mov ecx, 0x7e6f8e2a
sub ecx, eax
mov eax, dword [0x4ab19c]
dec eax
mov dword [0x4ab19c], eax
add eax, 0x390b3db6
cmp ecx, eax
jge 0x4308eb
mov eax, dword [0x49b8d0]
mov ecx, dword [0x4aef84]
sub eax, ecx
or eax, 0xf015d2db
mov ecx, dword [0x4a613c]
xor ecx, eax
mov dword [0x4a613c], ecx
jmp 0x430903
mov ax, word [0x491608]
mov cx, ax
xor ecx, 0x387d
mov ax, cx
mov word [0x491608], ax
mov eax, dword [esp + 0xa14]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0x32
call fcn.0044f050
mov eax, dword [0x49c030]
mov ecx, dword [0x4a45b8]
sub ecx, eax
mov dword [0x4a45b8], ecx
mov eax, esp
lea ecx, [esp + 0x8a8]
mov dword [eax], ecx
lea eax, [esp + 0x1a4]
mov ecx, eax
mov dword [esp + 0xc8], eax
call fcn.0041abb0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xc8]
mov dword [ecx], edx
lea ecx, [esp + 0x64c]
mov dword [esp + 0xc4], eax
call fcn.00442200
sub esp, 4
mov ecx, dword [esp + 0xc8]
mov dword [esp + 0xc0], eax
call fcn.004383d0
mov eax, dword [0x4a1488]
shr eax, 7
mov si, word [0x4942ca]
mov cx, si
sub ecx, eax
mov si, cx
mov word [0x4942ca], si
cmp dword [esp + 0x214], 0
je 0x430c43
mov eax, 0xbff8d5c3
mov ecx, dword [0x4a3c84]
cmp eax, ecx
jg 0x430a0b
mov eax, 0x85a343f0
mov cx, word [0x49b586]
movsx edx, cx
sub edx, 0x4109cb84
cmp eax, edx
jle 0x430a06
mov eax, dword [0x49f9c8]
imul eax, eax, 0x71c5b85f
mov ecx, dword [0x4af5b4]
mov edx, ecx
inc edx
mov dword [0x4af5b4], edx
xor eax, ecx
mov si, ax
mov word [0x492452], si
jmp 0x430a29
mov eax, dword [0x4a4e98]
imul eax, eax, 0x34eca9e3
add eax, 0xe634d1cd
mov ecx, dword [0x4a752c]
xor ecx, eax
mov dword [0x4a752c], ecx
mov eax, esp
mov dword [eax + 4], 0x44
mov dword [eax], 0x10f6
call fcn.00410180
mov dword [esp + 0xa10], eax
mov eax, dword [0x4a1b40]
add eax, 0x8000454
mov dword [0x4a1b40], eax
mov eax, dword [esp + 0xa10]
mov ecx, esp
mov dword [ecx], eax
lea eax, [esp + 0x190]
mov ecx, eax
mov dword [esp + 0xbc], eax
call fcn.0041abb0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xbc]
mov dword [ecx], edx
lea ecx, [esp + 0x64c]
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xb4], eax
call fcn.00442200
sub esp, 4
mov ecx, dword [esp + 0xbc]
mov dword [esp + 0xb0], eax
call fcn.004383d0
mov eax, dword [0x4a00c0]
dec eax
mov dword [0x4a00c0], eax
mov ecx, dword [0x4ac854]
xor eax, ecx
mov ecx, dword [0x4a5bdc]
xor ecx, eax
mov dword [0x4a5bdc], ecx
mov eax, esp
mov dword [eax + 4], 3
mov dword [eax], 0x1eb
call fcn.00410180
mov dword [esp + 0xa0c], eax
mov eax, dword [0x4a84e4]
mov ecx, eax
inc ecx
mov dword [0x4a84e4], ecx
add eax, 0x9cdbbb33
mov ecx, dword [0x49c60c]
imul ecx, eax
mov dword [0x49c60c], ecx
mov eax, dword [esp + 0xa10]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0x44
call fcn.0044f050
mov si, word [0x4998d6]
mov ax, si
dec eax
mov si, ax
mov word [0x4998d6], si
movsx eax, si
mov ecx, dword [0x4a348c]
and ecx, eax
mov dword [0x4a348c], ecx
mov ecx, dword [esp + 0xa30]
call fcn.00439540
mov ecx, dword [esp + 0xa0c]
mov edx, esp
mov dword [edx + 8], eax
mov dword [edx + 4], ecx
lea eax, [esp + 0x224]
mov dword [edx], eax
mov dword [esp + 0xac], eax
call fcn.00455ea1
mov ecx, dword [0x4adef4]
mov si, word [0x494228]
mov dx, si
sub edx, ecx
mov si, dx
mov word [0x494228], si
mov ecx, dword [esp + 0xa0c]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], 3
mov dword [esp + 0xa8], eax
call fcn.0044f050
mov eax, dword [0x4abab0]
mov ecx, eax
inc ecx
mov dword [0x4abab0], ecx
imul eax, eax, 0xdac83763
or eax, 0xcb6db904
mov ecx, dword [0x4a5394]
and ecx, eax
mov dword [0x4a5394], ecx
mov eax, esp
mov ecx, dword [esp + 0xac]
mov dword [eax], ecx
lea eax, [esp + 0x17c]
mov ecx, eax
mov dword [esp + 0xa4], eax
call fcn.0041abb0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xa4]
mov dword [ecx], edx
mov ecx, dword [esp + 0xb8]
mov dword [esp + 0xa0], eax
call fcn.00442200
sub esp, 4
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x9c], eax
call fcn.004383d0
mov eax, dword [0x4a8e48]
or eax, 0x818f0788
mov dword [0x4a8e48], eax
mov eax, dword [0x4afeec]
or eax, 0x966bb30a
mov dword [0x4afeec], eax
mov eax, esp
mov dword [eax + 4], 5
mov dword [eax], 0x1297
call fcn.00410180
mov dword [esp + 0xa08], eax
mov eax, dword [0x49f994]
shl eax, 6
mov ecx, dword [0x49c518]
or ecx, eax
mov dword [0x49c518], ecx
mov eax, dword [esp + 0xa08]
mov ecx, esp
mov dword [ecx], eax
lea eax, [esp + 0x168]
mov ecx, eax
mov dword [esp + 0x98], eax
call fcn.0041abb0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x98]
mov dword [ecx], edx
lea ecx, [esp + 0x64c]
mov dword [esp + 0x94], eax
call fcn.00442200
sub esp, 4
mov ecx, dword [esp + 0x98]
mov dword [esp + 0x90], eax
call fcn.004383d0
mov si, word [0x497d9a]
movsx eax, si
and eax, 0x22c6a56c
mov ecx, dword [0x4aefe0]
sub ecx, eax
mov dword [0x4aefe0], ecx
mov eax, dword [esp + 0xa08]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 5
call fcn.0044f050
mov eax, dword [0x4a33a4]
imul eax, eax, 0x21ca5d00
mov si, word [0x49b534]
movsx ecx, si
imul ecx, ecx, 0x51a8b98
cmp eax, ecx
jg 0x430d5b
mov eax, 0xdcfdaf9f
mov ecx, dword [0x4a7cac]
sar ecx, 2
cmp eax, ecx
jl 0x430d56
mov eax, dword [0x4ab800]
xor eax, 0x84024
mov dword [0x4ab800], eax
jmp 0x430d5b
cmp dword [esp + 0x214], 0
je 0x430dec
mov eax, 0x82bcff22
mov ecx, dword [0x4a4194]
not ecx
mov dx, word [0x4933b2]
mov si, dx
dec esi
mov dx, si
mov word [0x4933b2], dx
movsx esi, dx
xor ecx, esi
cmp eax, ecx
jle 0x430da7
mov eax, dword [0x49e8ec]
and eax, 0xf509dce
mov dword [0x49e8ec], eax
mov eax, dword [esp + 0xa30]
mov ecx, esp
mov dword [ecx], eax
lea ecx, [esp + 0x64c]
call fcn.00442200
sub esp, 4
mov ecx, dword [0x49e0c0]
mov edx, ecx
dec edx
mov dword [0x49e0c0], edx
mov edx, 0x3290c8cb
sub edx, ecx
mov ecx, dword [0x4aca88]
and ecx, edx
mov dword [0x4aca88], ecx
mov dword [esp + 0x8c], eax
mov eax, dword [0x4a5808]
imul eax, eax, 0x87a19a1a
mov dword [0x4a5808], eax
mov eax, dword [0x490c0c]
mov ecx, esp
lea edx, [esp + 0x8a8]
mov dword [ecx], edx
call eax
sub esp, 4
mov dword [esp + 0x220], eax
mov si, word [0x491db6]
mov ax, si
or eax, 0xb292
mov si, ax
mov word [0x491db6], si
cmp dword [esp + 0x220], 0
jne 0x430eb8
mov eax, dword [0x4ac008]
mov ecx, eax
dec ecx
mov dword [0x4ac008], ecx
and eax, 0xeae788e8
cmp eax, 0xbb4114b6
jl 0x430e7f
mov ax, word [0x4963ac]
mov cx, ax
mov ax, word [0x4923c6]
mov dx, ax
xor edx, ecx
mov ax, dx
mov word [0x4923c6], ax
jmp 0x430eb3
mov ax, word [0x49a72c]
mov cx, ax
mov edx, ecx
inc edx
mov ax, dx
mov word [0x49a72c], ax
mov ax, word [0x49166e]
mov dx, ax
xor ecx, edx
mov ax, cx
movsx ecx, ax
mov edx, dword [0x4a085c]
sub edx, ecx
mov dword [0x4a085c], edx
jmp 0x431fe6
mov eax, dword [0x4ae47c]
imul eax, eax, 0xefb27829
mov dword [0x4ae47c], eax
xorps xmm0, xmm0
movaps xmmword [esp + 0x660], xmm0
mov eax, dword [0x4a03d4]
add eax, 0x51820004
mov dword [0x4a03d4], eax
mov word [esp + 0x660], 2
mov eax, dword [0x49c9b0]
mov ecx, dword [0x4a8ba4]
imul eax, ecx
shl eax, 3
mov ecx, dword [0x4b05ac]
and ecx, eax
mov dword [0x4b05ac], ecx
mov eax, dword [0x490c14]
mov ecx, dword [0x490c18]
mov edx, dword [esp + 0x220]
mov edx, dword [edx + 0xc]
mov edx, dword [edx]
mov edx, dword [edx]
mov dword [esp + 0x164], edx
mov edx, dword [esp + 0x164]
mov esi, esp
mov dword [esi], edx
mov dword [esp + 0x88], eax
call ecx
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [esp + 0x88]
call eax
sub esp, 4
mov dword [esp + 0x664], eax
mov di, word [0x491c76]
mov ax, di
inc eax
mov bx, ax
mov word [0x491c76], bx
movsx eax, di
mov ecx, dword [0x4ac5e8]
inc ecx
mov dword [0x4ac5e8], ecx
imul ecx, ecx, 0x8a0a2eea
add eax, ecx
mov ecx, dword [0x4a5d94]
and ecx, eax
mov dword [0x4a5d94], ecx
mov eax, dword [0x490c10]
movzx ecx, word [esp + 0x1f8]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov word [esp + 0x662], ax
mov ecx, dword [0x4a9518]
mov edx, dword [0x4a82c0]
mov esi, dword [0x4a9b60]
mov edi, esi
inc edi
mov dword [0x4a9b60], edi
imul edx, esi
cmp ecx, edx
jge 0x430ff0
mov ax, word [0x494cd8]
mov cx, ax
add ecx, 0x2204151
mov ax, cx
mov word [0x494cd8], ax
cmp dword [esp + 0xa34], 0
je 0x43115c
mov eax, dword [0x4aa14c]
or eax, 0xd0dc1eb3
mov dword [0x4aa14c], eax
mov eax, dword [esp + 0xa34]
mov ecx, 0x10624dd3
mul ecx
shr edx, 6
mov eax, esp
mov dword [eax + 4], edx
lea ecx, [esp + 0x660]
mov dword [eax], ecx
call fcn.004138d0
mov dword [esp + 0x67c], eax
mov eax, dword [0x49cd34]
or eax, 0xed240ea1
or eax, 0xd7133c1c
cmp eax, 0xe4fa25e0
jg 0x43106a
mov ax, word [0x4974dc]
mov cx, ax
xor ecx, 0xcc7
mov ax, cx
mov word [0x4974dc], ax
cmp dword [esp + 0x67c], 0
jge 0x43108d
mov eax, dword [0x4a2894]
imul eax, eax, 0xc12d8575
mov dword [0x4a2894], eax
jmp 0x431fe6
mov eax, dword [0x4afd58]
xor eax, 0x77905fe
mov dword [0x4afd58], eax
mov eax, dword [0x490c2c]
mov ecx, dword [esp + 0x67c]
mov edx, esp
lea esi, [esp + 0xa34]
mov dword [edx + 0xc], esi
mov dword [edx], ecx
mov dword [edx + 0x10], 4
mov dword [edx + 8], 0x1006
mov dword [edx + 4], 0xffff
call eax
sub esp, 0x14
mov ecx, dword [0x4a8a4c]
mov edx, dword [0x4a1580]
and ecx, edx
xor ecx, 0x8d674c8b
cmp ecx, 0x88673020
mov dword [esp + 0x84], eax
jg 0x43110a
mov eax, dword [0x4a55f8]
mov ecx, dword [0x4af848]
sub ecx, eax
mov dword [0x4af848], ecx
mov eax, dword [0x490c2c]
mov ecx, dword [esp + 0x67c]
mov edx, esp
lea esi, [esp + 0xa34]
mov dword [edx + 0xc], esi
mov dword [edx], ecx
mov dword [edx + 0x10], 4
mov dword [edx + 8], 0x1005
mov dword [edx + 4], 0xffff
call eax
sub esp, 0x14
mov ecx, dword [0x4aa4f8]
xor ecx, 0xd852a16a
mov dword [0x4aa4f8], ecx
mov dword [esp + 0x80], eax
jmp 0x4312cc
mov eax, 0x4bc20c
mov cx, word [0x49278a]
movsx edx, cx
shl edx, 3
mov esi, dword [0x4a34b4]
sar esi, 4
and esi, 0xd9d98d5e
xor edx, esi
cmp eax, edx
jg 0x4311e4
mov eax, 0x33bb00bc
mov ecx, dword [0x49cd4c]
inc ecx
mov dword [0x49cd4c], ecx
imul ecx, ecx, 0x53074581
cmp eax, ecx
jle 0x4311df
mov ax, word [0x495f96]
mov cx, ax
inc ecx
mov ax, cx
mov word [0x495f96], ax
mov ax, word [0x4999f8]
mov dx, ax
and ecx, edx
and ecx, 0x7a3e
mov ax, word [0x49551c]
mov dx, ax
sub edx, ecx
mov ax, dx
mov word [0x49551c], ax
jmp 0x4311e4
mov eax, dword [0x490c30]
mov ecx, esp
mov dword [ecx + 8], 6
mov dword [ecx + 4], 1
mov dword [ecx], 2
call eax
sub esp, 0xc
mov dword [esp + 0x67c], eax
mov eax, dword [0x4a1924]
add eax, 0xe7bbf5a2
mov dword [0x4a1924], eax
cmp dword [esp + 0x67c], 0xffffffff
jne 0x431265
mov eax, dword [0x4a0a4c]
sar eax, 7
mov ecx, dword [0x4ae4a4]
add eax, ecx
mov dx, word [0x498620]
mov cx, dx
inc ecx
mov si, cx
mov word [0x498620], si
movsx ecx, dx
add eax, ecx
mov ecx, dword [0x4a2c2c]
add ecx, eax
mov dword [0x4a2c2c], ecx
jmp 0x431fe6
lea eax, [esp + 0x660]
mov dword [0x4ade88], 0xa036b99d
mov ecx, dword [0x490c08]
mov edx, dword [esp + 0x67c]
mov esi, esp
mov dword [esi + 4], eax
mov dword [esi], edx
mov dword [esi + 8], 0x10
call ecx
sub esp, 0xc
cmp eax, 0xffffffff
jne 0x4312bc
mov ax, word [0x498b76]
mov cx, ax
imul ecx, ecx, 0x25ca731a
mov ax, cx
mov word [0x498b76], ax
jmp 0x431f0a
mov eax, dword [0x4a9f04]
imul eax, eax, 0xe4a576ea
mov dword [0x4a9f04], eax
mov eax, dword [0x4a5a1c]
xor eax, 0x37a76e82
mov cx, word [0x4911d8]
movsx edx, cx
and edx, 0x5033bbc2
cmp eax, edx
jne 0x43134a
mov eax, dword [0x49f444]
mov ecx, eax
inc ecx
mov dword [0x49f444], ecx
mov ecx, 0x8c6152e
sub ecx, eax
mov dx, word [0x49122a]
mov ax, dx
inc eax
mov si, ax
mov word [0x49122a], si
movsx eax, dx
xor ecx, eax
cmp ecx, 0x61ef7933
jge 0x431345
mov eax, dword [0x4a859c]
sar eax, 4
xor eax, 0x187c042
mov ecx, dword [0x4ac5a8]
imul ecx, eax
mov dword [0x4ac5a8], ecx
jmp 0x43134a
lea eax, [esp + 0x64c]
mov ecx, dword [0x490c28]
lea edx, [esp + 0x64c]
mov dword [esp + 0x7c], ecx
mov ecx, edx
mov dword [esp + 0x78], eax
mov dword [esp + 0x74], edx
call fcn.00439540
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x70], eax
call fcn.0041c5a0
mov ecx, dword [esp + 0x67c]
mov edx, esp
mov esi, dword [esp + 0x70]
mov dword [edx + 8], esi
mov dword [edx + 4], eax
mov dword [edx], ecx
mov dword [edx + 0xc], 0
mov eax, dword [esp + 0x7c]
call eax
sub esp, 0x10
mov dword [esp + 0x678], eax
mov eax, dword [0x4ab960]
add eax, 0x69ca66e1
and eax, 0x4a5aad6b
mov ecx, dword [0x4a01d4]
or ecx, eax
mov dword [0x4a01d4], ecx
mov eax, dword [esp + 0x678]
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x6c], eax
call fcn.00439540
mov ecx, dword [esp + 0x6c]
cmp ecx, eax
jae 0x4313fc
mov eax, dword [0x4ae28c]
imul eax, eax, 0x5b33e58d
mov dword [0x4a412c], eax
jmp 0x431f0a
mov ax, word [0x49a630]
mov cx, ax
add ecx, 0xa0102a2
mov ax, cx
mov word [0x49a630], ax
mov ecx, dword [esp + 0xa30]
call fcn.0041ae80
mov ecx, dword [0x4a968c]
xor ecx, 0x949ee5d0
mov dword [0x4a968c], ecx
mov ax, word [0x496e7c]
mov cx, ax
xor ecx, 0x2061
mov ax, cx
mov word [0x496e7c], ax
mov ecx, dword [0x490c20]
mov edx, dword [esp + 0x67c]
mov esi, esp
lea edi, [esp + 0x224]
mov dword [esi + 4], edi
mov dword [esi], edx
mov dword [esi + 0xc], 0
mov dword [esi + 8], 0x400
call ecx
sub esp, 0x10
mov dword [esp + 0x678], eax
mov bx, word [0x4991c6]
mov ax, bx
add eax, 0xbe519927
mov bx, ax
mov word [0x4991c6], bx
cmp dword [esp + 0x678], 0
jle 0x4314c9
mov eax, dword [esp + 0x208]
mov ecx, dword [esp + 0x20c]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], eax
call fcn.00445bf0
cmp eax, 0
je 0x4314dd
mov eax, dword [0x4a3b30]
add eax, 0x3bb62802
mov dword [0x4a3b30], eax
jmp 0x431d67
mov eax, dword [0x4a38ac]
or eax, 0x890d8c4
mov dword [0x4a38ac], eax
mov eax, dword [esp + 0xa30]
mov ecx, eax
mov dword [esp + 0x68], eax
call fcn.00439540
mov ecx, dword [esp + 0x678]
add eax, ecx
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x68]
call fcn.0041d210
sub esp, 8
mov dx, word [0x49345c]
mov ax, dx
and eax, 0x737c
mov dx, ax
mov word [0x49345c], dx
mov eax, dword [esp + 0xa30]
mov ecx, eax
call fcn.0042ee70
cmp eax, 0
jne 0x43159f
mov eax, 0x9cc0ccc3
mov ecx, dword [0x4a1348]
mov edx, ecx
dec edx
mov dword [0x4a1348], edx
imul ecx, ecx, 0x15595dbb
add ecx, 0xa93a92aa
cmp eax, ecx
jle 0x43158a
mov eax, dword [0x4afff4]
xor eax, 0xc04311
mov dword [0x4afff4], eax
jmp 0x43159a
mov eax, dword [0x4a34b0]
imul eax, eax, 0x2ffdadbf
mov dword [0x4a34b0], eax
jmp 0x431d67
mov ax, word [0x4983e6]
mov cx, ax
inc ecx
mov dx, cx
mov word [0x4983e6], dx
movsx ecx, ax
add ecx, 0x6c5b0029
cmp ecx, 0xc77e1378
jg 0x43160b
mov eax, dword [0x49e5d4]
add eax, 0x8bfbf439
and eax, 0xac7bcc5c
cmp eax, 0x8d39b608
jg 0x431606
mov eax, dword [0x4a9160]
add eax, 0x473a6f06
sub eax, 0x9831b4cb
cmp eax, 0xd9b82286
jge 0x431601
jmp 0x431601
jmp 0x431606
jmp 0x43160b
mov ecx, dword [esp + 0xa30]
mov eax, dword [esp + 0x678]
mov edx, esp
mov dword [edx + 4], eax
lea eax, [esp + 0x224]
mov dword [edx], eax
call fcn.00426aa0
sub esp, 8
mov si, word [0x497b54]
mov cx, si
dec ecx
mov si, cx
mov word [0x497b54], si
movsx ecx, si
and ecx, 0x804000
or ecx, 0xff6f3ded
mov edx, dword [0x4b0264]
xor edx, ecx
mov dword [0x4b0264], edx
cmp dword [esp + 0x200], 0
mov dword [esp + 0x64], eax
jge 0x4319db
mov eax, dword [0x4a7460]
shl eax, 7
cmp eax, 0xc5e34d83
jl 0x43169c
mov eax, dword [0x49e8f0]
not eax
add eax, 0xc63e9cb8
mov cx, ax
mov word [0x4920f6], cx
mov eax, esp
mov dword [eax + 4], 5
mov dword [eax], 0x1297
call fcn.00410180
mov dword [esp + 0xa04], eax
mov eax, dword [0x4a3768]
add eax, 0x9e63117a
mov dword [0x4a3768], eax
mov ecx, dword [esp + 0xa30]
mov eax, dword [esp + 0xa04]
mov edx, esp
mov dword [edx], eax
lea eax, [esp + 0x150]
mov dword [esp + 0x60], ecx
mov ecx, eax
mov dword [esp + 0x5c], eax
call fcn.00432be0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x5c]
mov dword [ecx], edx
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x58], eax
call fcn.0041ed60
sub esp, 8
mov dword [esp + 0x200], eax
mov ecx, dword [esp + 0x5c]
call fcn.00435820
mov eax, dword [0x4ad828]
or eax, 0xbd12cbd2
mov ecx, dword [0x4ae270]
sub ecx, eax
mov dword [0x4ae270], ecx
mov eax, dword [esp + 0xa04]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 5
call fcn.0044f050
mov dword [0x49ba40], 0x9a851ce6
cmp dword [esp + 0x200], 0
jl 0x431994
mov ax, word [0x490e54]
movsx ecx, ax
and ecx, 0xd0a1d1cb
cmp ecx, 0xd5bdb670
jle 0x43178c
mov dword [0x4a646c], 0x77f78f3c
mov eax, dword [esp + 0x200]
add eax, 4
mov dword [esp + 0x200], eax
mov eax, dword [0x4a8aa8]
mov ecx, eax
dec ecx
mov dword [0x4a8aa8], ecx
add eax, 0xcbca8054
mov ecx, dword [0x4a2240]
xor ecx, eax
mov dword [0x4a2240], ecx
mov eax, dword [esp + 0xa30]
mov ecx, esp
mov dword [ecx], eax
call fcn.0040e120
mov dword [esp + 0x1fc], eax
mov eax, dword [0x4a567c]
and eax, 0xb654bb89
mov ecx, dword [0x4aac38]
xor ecx, eax
mov dword [0x4aac38], ecx
cmp dword [esp + 0x1fc], 0
jge 0x431959
mov eax, dword [0x4a6ae4]
add eax, 0xeff8db43
mov dword [0x4a6ae4], eax
mov eax, esp
mov dword [eax + 4], 0xb
mov dword [eax], 0x8f8
call fcn.00410180
mov dword [esp + 0xa00], eax
mov eax, dword [0x4acd98]
imul eax, eax, 0x23a71c08
mov dword [0x4acd98], eax
mov ecx, dword [esp + 0xa30]
mov eax, dword [esp + 0xa00]
mov edx, esp
mov dword [edx], eax
lea eax, [esp + 0x13c]
mov dword [esp + 0x54], ecx
mov ecx, eax
mov dword [esp + 0x50], eax
call fcn.00432be0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x50]
mov dword [ecx], edx
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x4c], eax
call fcn.0041ed60
sub esp, 8
mov dword [esp + 0x678], eax
mov ecx, dword [esp + 0x50]
call fcn.00435820
mov eax, dword [0x49f1fc]
xor eax, 0xfaf
mov si, word [0x4926d8]
mov cx, si
mov edx, ecx
inc edx
mov si, dx
mov word [0x4926d8], si
or eax, ecx
mov si, word [0x4917da]
mov cx, si
or ecx, eax
mov si, cx
mov word [0x4917da], si
mov eax, dword [esp + 0xa00]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0xb
call fcn.0044f050
mov eax, dword [0x4ac678]
add eax, 0x8f720986
mov ecx, dword [0x4a046c]
xor ecx, eax
mov dword [0x4a046c], ecx
cmp dword [esp + 0x678], 0
jl 0x431922
mov ax, word [0x4947b4]
mov cx, ax
and ecx, 0xb1d5
mov ax, cx
mov word [0x4947b4], ax
jmp 0x431d67
mov eax, 0x37382053
mov ecx, dword [0x4a9fec]
sar ecx, 5
sub ecx, 0x8bec0055
and ecx, 0x7b25ca67
cmp eax, ecx
jg 0x431954
mov eax, dword [0x4a622c]
imul eax, eax, 0xe1c6dc4a
mov dword [0x4a622c], eax
jmp 0x431959
mov eax, dword [0x4a18fc]
inc eax
mov dword [0x4a18fc], eax
or eax, 0x1acb5bcb
cmp eax, 0xa83d2887
jne 0x43198f
mov eax, dword [0x49e67c]
shr eax, 3
and eax, 0xc018230
mov ecx, dword [0x4ab600]
or ecx, eax
mov dword [0x4ab600], ecx
jmp 0x431994
mov eax, dword [0x49e300]
not eax
imul eax, eax, 0x6c560e4
mov ecx, dword [0x4a873c]
xor ecx, 0xffffffff
xor ecx, 0xe9edd766
or ecx, 0x4ee8f860
cmp eax, ecx
jne 0x4319d6
mov eax, dword [0x4a48ac]
mov ecx, 0x39b7481f
sub ecx, eax
mov eax, dword [0x4a55d0]
and eax, ecx
mov dword [0x4a55d0], eax
jmp 0x4319db
mov dword [0x4a6a7c], 0x38c37a93
cmp dword [esp + 0x1fc], 0
jl 0x431a5a
mov ax, word [0x493ae4]
mov cx, ax
mov ax, word [0x49574e]
mov dx, ax
imul ecx, edx
shl ecx, 7
mov ax, cx
mov word [0x49574e], ax
mov ecx, dword [esp + 0xa30]
call fcn.00439540
sub eax, dword [esp + 0x200]
cmp eax, dword [esp + 0x1fc]
jb 0x431a48
mov eax, dword [0x4a07f8]
add eax, 0xbfc5ec8a
mov dword [0x4a07f8], eax
jmp 0x431d67
mov eax, dword [0x4ac4cc]
shl eax, 9
xor eax, 0x8ad273f4
mov dword [0x4adbf8], eax
mov dword [0x4acd58], 0x7f5becd9
cmp dword [esp + 0xa38], 0
je 0x431cb8
test byte [esp + 0x1f7], 1
jne 0x431cb8
mov eax, dword [0x4b01c8]
xor eax, 0xc4030000
mov ecx, dword [0x4ad1bc]
imul ecx, eax
mov dword [0x4ad1bc], ecx
mov eax, dword [esp + 0xa30]
mov ecx, eax
call fcn.00439540
cmp eax, 0x4000
jbe 0x431ca0
mov dword [0x4a6d58], 0x3fc601c5
mov byte [esp + 0x1f7], 1
mov eax, dword [0x4a7194]
add eax, 0xf4cf46a1
mov ecx, dword [0x4a9004]
and ecx, eax
mov dword [0x4a9004], ecx
mov eax, dword [esp + 0xa30]
mov ecx, esp
mov dword [ecx], eax
lea ecx, [esp + 0x128]
call fcn.00438370
sub esp, 4
mov ecx, dword [0x4aa510]
add ecx, 0xf2a7d951
mov dword [0x4aa510], ecx
cmp dword [esp + 0x200], 0
mov dword [esp + 0x48], eax
jl 0x431ba2
mov eax, 0x60108080
mov ecx, dword [0x4ad8f4]
dec ecx
mov dword [0x4ad8f4], ecx
imul ecx, ecx, 0xbe71938c
xor ecx, 0x5c683c4b
cmp eax, ecx
jge 0x431b4f
mov eax, dword [0x4a1a48]
xor eax, 0xb800011
mov dword [0x4a1a48], eax
mov eax, dword [esp + 0x200]
mov ecx, esp
mov dword [ecx], 0
lea ecx, [esp + 0x128]
mov dword [esp + 0x44], ecx
mov dword [esp + 0x40], eax
call fcn.0041d710
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x40]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov ecx, dword [esp + 0x44]
call fcn.00414210
sub esp, 8
mov ecx, dword [0x4a4930]
xor ecx, 0x7cf32aad
mov dword [0x4a4930], ecx
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x128]
lea ecx, [esp + 0x8a8]
mov dword [0x49e650], 0xff9d6a21
mov edx, dword [esp + 0xa38]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.0044cfc0
cmp eax, 0
jne 0x431c47
mov ax, word [0x493c0a]
mov cx, ax
or ecx, 0x73e9
mov ax, cx
mov word [0x493c0a], ax
mov dword [esp + 0x200], 0xffffffff
mov ecx, dword [0x49d548]
mov edx, ecx
dec edx
mov dword [0x49d548], edx
add ecx, 0xd05e89bd
mov edx, dword [0x49c640]
imul edx, ecx
mov dword [0x49c640], edx
mov ecx, dword [esp + 0xa30]
call fcn.0041ae80
mov dword [0x4a5df0], 0x3eaed0ca
mov dword [esp + 0x124], 0xd
jmp 0x431c61
mov eax, dword [0x4a5cc4]
or eax, 0x2ffcd67e
mov dword [0x4a5cc4], eax
mov dword [esp + 0x124], 0
lea ecx, [esp + 0x128]
call fcn.004383d0
mov ecx, dword [esp + 0x124]
test ecx, ecx
mov dword [esp + 0x38], ecx
je 0x431c9b
jmp 0x431c85
mov eax, dword [esp + 0x38]
sub eax, 0xd
mov dword [esp + 0x34], eax
je 0x431d67
jmp 0x4320f1
jmp 0x431ca0
mov ax, word [0x493f06]
mov cx, ax
add ecx, 0x78105128
mov ax, cx
mov word [0x493f06], ax
mov ax, word [0x4941d8]
mov cx, ax
xor ecx, 0x25b1
mov ax, cx
mov word [0x4941d8], ax
cmp dword [esp + 0xa34], 0x3ad1
jne 0x431d26
mov eax, dword [0x4acd20]
or eax, 0x6737f635
mov dword [0x4acd20], eax
mov eax, dword [esp + 0xa30]
mov ecx, eax
call fcn.00439540
cmp eax, 0x500000
jbe 0x431d1d
mov eax, dword [0x4ac688]
or eax, 0x38e03305
mov dword [0x4ac688], eax
jmp 0x431d67
mov word [0x49404e], 0x3846
mov eax, dword [0x49b830]
shl eax, 6
imul eax, eax, 0x35211bc9
cmp eax, 0x50058922
jge 0x431d53
mov eax, dword [0x4ab580]
add eax, 0x404026
mov dword [0x4ab580], eax
jmp 0x431d62
mov eax, dword [0x4a6bb8]
add eax, 0xcf4c198b
mov dword [0x4a6bb8], eax
jmp 0x431432
mov eax, dword [0x4a3344]
add eax, 0xfa91216e
mov dword [0x4a3344], eax
cmp dword [esp + 0x200], 0
jl 0x431e22
mov ax, word [0x496242]
mov cx, ax
add ecx, 0xef8bf000
mov ax, cx
mov word [0x496242], ax
mov ecx, dword [esp + 0xa30]
mov edx, dword [esp + 0x200]
mov esi, esp
mov dword [esi], 0
mov dword [esp + 0x30], ecx
mov dword [esp + 0x2c], edx
call fcn.0041d710
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x2c]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov ecx, dword [esp + 0x30]
call fcn.00414210
sub esp, 8
mov di, word [0x493470]
movsx ecx, di
imul ecx, ecx, 0xc2f7e129
cmp ecx, 0xb2f6ed9a
mov dword [esp + 0x28], eax
jl 0x431e0d
mov eax, dword [0x4a766c]
xor eax, 0xd1a1296d
mov dword [0x4a766c], eax
jmp 0x431e1d
mov eax, dword [0x49f0c8]
imul eax, eax, 0xd4f457b3
mov dword [0x49f0c8], eax
jmp 0x431e22
mov eax, dword [0x49dd08]
shl eax, 6
and eax, 0x903ee000
mov dword [0x4aaf28], eax
cmp dword [esp + 0xa38], 0
je 0x431efb
test byte [esp + 0x1f7], 1
jne 0x431efb
lea eax, [esp + 0x8a8]
mov ecx, dword [0x4a40a8]
lea ecx, [ecx + ecx - 0x20745a90]
xor ecx, 0x88
mov dx, word [0x498ec0]
mov si, dx
imul esi, ecx
mov dx, si
mov word [0x498ec0], dx
mov ecx, dword [esp + 0xa38]
mov esi, dword [esp + 0xa30]
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0044cfc0
cmp eax, 0
jne 0x431eec
mov eax, dword [0x4a56c8]
and eax, 0x6fcf0edb
mov dword [0x4a56c8], eax
mov ecx, dword [esp + 0xa30]
call fcn.0041ae80
mov eax, dword [0x4ada4c]
mov ecx, dword [0x4aaae8]
and ecx, 0x344d
or eax, ecx
mov dx, word [0x496064]
mov cx, dx
and ecx, eax
mov dx, cx
mov word [0x496064], dx
mov eax, dword [0x4a20ac]
add eax, 0x3bbf7bff
mov dword [0x4a20ac], eax
mov eax, dword [0x4adfc4]
add eax, 0x7f6a6c5c
mov dword [0x4adfc4], eax
mov eax, dword [0x490c38]
mov ecx, dword [esp + 0x67c]
mov edx, esp
mov dword [edx], ecx
mov dword [edx + 4], 2
call eax
sub esp, 8
mov ecx, dword [0x4a77b8]
mov edx, ecx
dec edx
mov dword [0x4a77b8], edx
mov edx, dword [0x4a42b4]
inc edx
mov dword [0x4a42b4], edx
add edx, 0x3c9fa9f3
xor ecx, edx
cmp ecx, 0x2d8574e3
mov dword [esp + 0x24], eax
jle 0x431f7d
mov eax, dword [0x4a3f5c]
add eax, 0x43fe5bd3
xor eax, 0x198353f7
mov ecx, dword [0x49d824]
imul ecx, eax
mov dword [0x49d824], ecx
jmp 0x431fbb
mov eax, dword [0x4aa010]
imul eax, eax, 0xea7509fd
xor eax, 0x587ff40b
cmp eax, 0xc8dc2591
jle 0x431fb6
mov eax, dword [0x4a77bc]
imul eax, eax, 0xdf1f8076
xor eax, 0x9a3816af
mov ecx, dword [0x4a6bfc]
and ecx, eax
mov dword [0x4a6bfc], ecx
jmp 0x431fbb
mov eax, dword [0x490c04]
mov ecx, dword [esp + 0x67c]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov ecx, dword [0x49f878]
xor ecx, 0xf75eedef
mov dword [0x49f878], ecx
mov dword [esp + 0x20], eax
mov eax, 0xe9d9ed76
mov ecx, esp
lea edx, [esp + 0x8a8]
mov dword [ecx], edx
mov dword [ecx + 4], 0xa8
mov dword [esp + 0x1c], eax
call fcn.00427ea0
mov si, word [0x498372]
mov ax, si
add eax, 0x7d4930a7
mov si, ax
mov word [0x498372], si
mov eax, esp
lea ecx, [esp + 0x950]
mov dword [eax], ecx
mov dword [eax + 4], 0xa8
call fcn.00427ea0
mov eax, dword [0x49e844]
inc eax
mov dword [0x49e844], eax
imul eax, eax, 0x974f5660
mov ecx, dword [esp + 0x1c]
cmp ecx, eax
je 0x432067
mov eax, dword [0x4a49dc]
or eax, 0x66a259e
mov dword [0x4a49dc], eax
jmp 0x432076
mov eax, dword [0x4a5a7c]
add eax, 0x963c80c2
mov dword [0x4a5a7c], eax
mov eax, 0xdbbb044a
mov ecx, esp
lea edx, [esp + 0x680]
mov dword [ecx], edx
mov dword [ecx + 4], 0x228
mov dword [esp + 0x18], eax
call fcn.00427ea0
mov eax, dword [0x4a449c]
inc eax
mov dword [0x4a449c], eax
mov ecx, dword [esp + 0x18]
cmp ecx, eax
jge 0x4320bc
mov eax, dword [0x4ab2dc]
xor eax, 0x40090591
mov dword [0x4ab2dc], eax
mov eax, esp
lea ecx, [esp + 0x224]
mov dword [eax], ecx
mov dword [eax + 4], 0x428
call fcn.00427ea0
mov dword [0x4afbec], 0xc9053eff
lea ecx, [esp + 0x64c]
call fcn.004383d0
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
int3