Function at 0x4e8660
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x110]
cmp eax, dword [ecx + 8]
jbe 0x4e9d91
sub esp, 0x190
lea eax, [0x514240]
mov dword [esp], eax
call fcn.0040ba60
mov eax, dword [esp + 4]
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x198]
mov dword [esp], ecx
mov edx, dword [esp + 0x19c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x2e
mov dword [esp + 0x10], 0x2e
mov dword [esp + 0x14], 0x2e
call fcn.004883d0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
test eax, eax
jne 0x4e8e61
mov edx, dword [esp + 0xa0]
mov dword [esp + 0xbc], edx
mov dword [esp + 0xc0], 0x2e
mov dword [esp + 0xc4], 0x2e
mov edx, dword [esp + 0xbc]
mov ebx, dword [edx]
mov dword [esp + 0xc0], 0x2a
mov dword [esp + 0xc4], 0x2a
lea ebp, [edx + 4]
mov dword [esp + 0xbc], ebp
cmp ebx, 0x2014b50
jne 0x4e8e40
nop
movzx ebx, word [edx + 4]
mov dword [esp + 0xc0], 0x28
mov dword [esp + 0xc4], 0x28
add edx, 6
mov dword [esp + 0xbc], edx
mov edx, dword [esp + 0x194]
mov word [edx + 0x12], bx
mov ecx, dword [esp + 0xc0]
mov ebx, dword [esp + 0xbc]
mov ebp, dword [esp + 0xc4]
cmp ecx, 1
jbe 0x4e9d86
lea esi, [ecx - 2]
movzx edi, word [ebx]
mov dword [esp + 0xc0], esi
add ebp, 0xfffffffe
mov dword [esp + 0xc4], ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, 2
add ebx, ebp
mov dword [esp + 0xbc], ebx
mov word [edx + 0x14], di
mov ecx, dword [esp + 0xc0]
mov ebx, dword [esp + 0xbc]
mov ebp, dword [esp + 0xc4]
cmp ecx, 1
jbe 0x4e9d7c
lea esi, [ecx - 2]
movzx edi, word [ebx]
mov dword [esp + 0xc0], esi
add ebp, 0xfffffffe
mov dword [esp + 0xc4], ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, 2
add ebx, ebp
mov dword [esp + 0xbc], ebx
mov word [edx + 0x16], di
mov ecx, dword [esp + 0xc0]
mov ebx, dword [esp + 0xbc]
mov ebp, dword [esp + 0xc4]
cmp ecx, 1
jbe 0x4e9d72
lea esi, [ecx - 2]
movzx edi, word [ebx]
mov dword [esp + 0xc0], esi
add ebp, 0xfffffffe
mov dword [esp + 0xc4], ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, 2
add ebx, ebp
mov dword [esp + 0xbc], ebx
mov word [edx + 0x18], di
mov ecx, dword [esp + 0xc0]
mov ebx, dword [esp + 0xbc]
mov ebp, dword [esp + 0xc4]
cmp ecx, 1
jbe 0x4e9d68
lea esi, [ecx - 2]
movzx edi, word [ebx]
mov dword [esp + 0xc0], esi
add ebp, 0xfffffffe
mov dword [esp + 0xc4], ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, 2
add ebx, ebp
mov dword [esp + 0xbc], ebx
mov word [edx + 0x30], di
mov ecx, dword [esp + 0xc0]
mov ebx, dword [esp + 0xbc]
mov ebp, dword [esp + 0xc4]
cmp ecx, 1
jbe 0x4e9d5e
lea esi, [ecx - 2]
movzx edi, word [ebx]
mov dword [esp + 0xc0], esi
add ebp, 0xfffffffe
mov dword [esp + 0xc4], ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, 2
add ebx, ebp
mov dword [esp + 0xbc], ebx
mov word [edx + 0x32], di
mov ecx, dword [esp + 0xc0]
mov ebx, dword [esp + 0xbc]
mov ebp, dword [esp + 0xc4]
cmp ecx, 3
jbe 0x4e9d54
mov dword [esp + 0x8c], ebx
lea esi, [ecx - 4]
mov edi, dword [ebx]
mov dword [esp + 0xc0], esi
mov eax, ebp
add ebp, 0xfffffffc
mov dword [esp + 0xc4], ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, 4
add ebx, ebp
mov dword [esp + 0xbc], ebx
mov dword [edx + 0x34], edi
nop
cmp esi, 3
jbe 0x4e9d48
mov dword [esp + 0x9c], ebx
lea esi, [ecx - 8]
mov edi, dword [esp + 0x8c]
mov ebp, dword [ebp + edi]
mov dword [esp + 0xc0], esi
lea edi, [eax - 8]
mov dword [esp + 0xc4], edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edi, 4
add ebx, edi
mov dword [esp + 0xbc], ebx
mov dword [edx + 0x38], ebp
nop
cmp esi, 3
jbe 0x4e9d3c
lea ebp, [ecx - 0xc]
mov esi, dword [esp + 0x9c]
mov esi, dword [esi + edi]
mov dword [esp + 0xc0], ebp
lea ebp, [eax - 0xc]
mov dword [esp + 0xc4], ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, 4
add ebx, ebp
mov dword [esp + 0xbc], ebx
mov dword [edx + 0x3c], esi
mov ebx, dword [edx + 0x38]
mov dword [edx + 0x40], ebx
mov dword [edx + 0x44], 0
mov dword [edx + 0x48], esi
mov dword [edx + 0x4c], 0
mov ecx, dword [esp + 0xc0]
mov ebx, dword [esp + 0xc4]
mov ebp, dword [esp + 0xbc]
cmp ecx, 1
jbe 0x4e9d32
lea esi, [ecx - 2]
movzx edi, word [ebp]
mov dword [esp + 0xc0], esi
mov eax, edi
lea edi, [ebx - 2]
mov dword [esp + 0xc4], edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edi, 2
lea edx, [ebp + edi]
mov dword [esp + 0xbc], edx
nop
nop
cmp esi, 1
jbe 0x4e9d26
lea esi, [ecx - 4]
movzx ebp, word [edi + ebp]
mov dword [esp + 0x88], ebp
mov dword [esp + 0xc0], esi
lea edi, [ebx - 4]
mov dword [esp + 0xc4], edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edi, 2
lea ebp, [edi + edx]
mov dword [esp + 0xbc], ebp
nop
nop
cmp esi, 1
jbe 0x4e9d1a
lea esi, [ecx - 6]
movzx edx, word [edi + edx]
mov dword [esp + 0xc0], esi
lea edi, [ebx - 6]
mov dword [esp + 0xc4], edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edi, 2
add ebp, edi
mov dword [esp + 0xbc], ebp
cmp esi, 4
jb 0x4e9d0e
mov dword [esp + 0x84], edx
lea esi, [ebx - 0xa]
mov edi, esi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, 4
lea edx, [esi + ebp]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xbc], edx
lea edx, [ecx - 0xa]
mov dword [esp + 0xc0], edx
mov dword [esp + 0xc4], edi
nop
cmp edx, 3
jbe 0x4e9d02
mov dword [esp + 0x54], ebx
lea edx, [ecx - 0xe]
mov ebp, dword [ebp + esi]
mov dword [esp + 0xc0], edx
lea esi, [ebx - 0xe]
mov dword [esp + 0xc4], esi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, 4
mov edi, dword [esp + 0x9c]
lea ebx, [edi + esi]
mov dword [esp + 0x9c], ebx
mov dword [esp + 0xbc], ebx
mov ebx, dword [esp + 0x194]
mov dword [ebx + 0x5c], ebp
nop
cmp edx, 3
jbe 0x4e9cf6
mov dword [esp + 0x80], eax
add ecx, 0xffffffee
mov edx, dword [edi + esi]
mov dword [esp + 0xc0], ecx
mov ecx, dword [esp + 0x54]
add ecx, 0xffffffee
mov dword [esp + 0xc4], ecx
neg ecx
sar ecx, 0x1f
and ecx, 4
mov ebp, dword [esp + 0x9c]
add ecx, ebp
mov dword [esp + 0xbc], ecx
mov dword [ebx + 0x6c], edx
mov dword [ebx + 0x70], 0
lea ecx, [0x516920]
mov dword [esp], ecx
mov ecx, dword [esp + 0x88]
lea edx, [eax + ecx]
mov dword [esp + 0x7c], edx
mov ebp, dword [esp + 0x84]
lea esi, [edx + ebp]
mov dword [esp + 0x50], esi
mov dword [esp + 4], esi
mov dword [esp + 8], esi
call fcn.00449470
mov eax, dword [esp + 0xc]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0x198]
mov dword [esp], ecx
mov ecx, dword [esp + 0x19c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x50]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], ecx
call fcn.004883d0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
test eax, eax
jne 0x4e8e2b
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x50]
cmp ecx, edx
ja 0x4e9cf1
mov dword [esp], 0
mov eax, dword [esp + 0x98]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0044d230
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edi, dword [esp + 0x194]
mov dword [edi + 4], ecx
mov ecx, dword [0x737a60]
test ecx, ecx
jne 0x4e8c62
mov dword [edi], eax
jmp 0x4e8c67
call fcn.004614c0
mov edx, dword [esp + 0x50]
mov ecx, dword [esp + 0x7c]
cmp edx, ecx
jb 0x4e9cec
mov eax, dword [esp + 0x80]
cmp eax, ecx
ja 0x4e9ce7
mov ebx, dword [esp + 0x88]
mov dword [edi + 0x54], ebx
sub edx, eax
mov dword [edi + 0x58], edx
mov ebx, dword [0x737a60]
neg edx
sar edx, 0x1f
and eax, edx
mov edx, dword [esp + 0x98]
add eax, edx
mov ebp, dword [esp + 0x84]
mov esi, ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ecx, ebp
add ecx, edx
test ebx, ebx
jne 0x4e8cca
mov dword [edi + 0x50], eax
jmp 0x4e8cd4
lea edx, [edi + 0x50]
mov edi, edx
call fcn.004614c0
mov dword [esp], 0
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
call fcn.0044d230
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x194]
mov dword [edx + 0xc], ecx
mov ecx, dword [0x737a60]
test ecx, ecx
jne 0x4e8d09
mov dword [edx + 8], eax
jmp 0x4e8d11
lea edi, [edx + 8]
call fcn.004614c0
mov eax, dword [edx]
mov ecx, dword [edx + 4]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004ebb00
movzx eax, byte [esp + 8]
mov byte [esp + 0x34], al
movzx ecx, byte [esp + 9]
mov byte [esp + 0x35], cl
mov edx, dword [esp + 0x194]
mov ebx, dword [edx + 8]
mov ebp, dword [edx + 0xc]
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.004ebb00
movzx eax, byte [esp + 8]
movzx ecx, byte [esp + 9]
movzx edx, byte [esp + 0x34]
test dl, dl
je 0x4e8d96
test al, al
je 0x4e8d96
movzx edx, byte [esp + 0x35]
test dl, dl
jne 0x4e8d71
test cl, cl
je 0x4e8d89
mov ecx, dword [esp + 0x194]
movzx edx, word [ecx + 0x16]
test dx, 0x800
sete dl
mov byte [ecx + 0x10], dl
jmp 0x4e8da1
mov ecx, dword [esp + 0x194]
mov byte [ecx + 0x10], 0
jmp 0x4e8da1
mov ecx, dword [esp + 0x194]
mov byte [ecx + 0x10], 1
mov edx, dword [ecx + 0x70]
mov ebx, dword [ecx + 0x3c]
mov ebp, dword [ecx + 0x38]
mov eax, edx
mov edx, dword [ecx + 0x6c]
lea edi, [esp + 0x168]
mov esi, eax
xor eax, eax
call fcn.004616cb
mov ecx, dword [esp + 0x194]
mov edi, edx
mov edx, dword [ecx + 0x50]
mov dword [esp + 0x9c], edx
mov edx, dword [ecx + 0x54]
mov ecx, dword [ecx + 0x58]
cmp ebx, 0xffffffff
sete bl
cmp ebp, 0xffffffff
xchg ebp, ebx
sete bl
xchg ebp, ebx
cmp edi, 0xffffffff
mov edi, ebx
sete bl
mov byte [esp + 0x39], bl
test esi, esi
mov esi, ebp
xchg ebp, ebx
sete bl
xchg ebp, ebx
mov ebx, dword [esp + 0x9c]
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xb4], edx
mov dword [esp + 0xb8], ecx
movzx ecx, byte [esp + 0x39]
and ebp, ecx
mov ecx, dword [esp + 0x194]
jmp 0x4e8e78
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0x1a4], edx
add esp, 0x190
ret
mov eax, dword [0x711c78]
mov ecx, dword [0x711c7c]
mov dword [esp + 0x1a0], eax
mov dword [esp + 0x1a4], ecx
add esp, 0x190
ret
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0x1a4], edx
add esp, 0x190
ret
mov ebp, edx
xchg esi, eax
mov byte [esp + 0x38], al
xchg esi, eax
xchg ebp, eax
mov byte [esp + 0x37], al
xchg ebp, eax
mov edx, dword [esp + 0xb8]
mov ebx, dword [esp + 0xb0]
mov ebp, dword [esp + 0xb4]
cmp ebp, 4
jl 0x4e9564
mov dword [esp + 0x9c], ebx
mov dword [esp + 0x88], edx
mov dword [esp + 0x84], ebp
nop
nop
add ebp, 0xfffffffe
movzx ebx, word [ebx]
mov word [esp + 0x3a], bx
mov dword [esp + 0xb4], ebp
lea ebx, [edx - 2]
mov dword [esp + 0xb8], ebx
mov ebx, dword [esp + 0x9c]
lea edx, [ebx + 2]
mov dword [esp + 0xb0], edx
nop
nop
cmp ebp, 1
jbe 0x4e9cdb
mov edx, dword [esp + 0x84]
lea ebp, [edx - 4]
movzx edx, word [ebx + 2]
mov dword [esp + 0x80], edx
mov dword [esp + 0xb4], ebp
mov edx, dword [esp + 0x88]
add edx, 0xfffffffc
mov dword [esp + 0x7c], edx
mov dword [esp + 0xb8], edx
neg edx
sar edx, 0x1f
and edx, 2
mov dword [esp + 0x78], edx
lea edx, [ebx + edx + 2]
mov dword [esp + 0xb0], edx
mov ebx, dword [esp + 0x80]
cmp ebx, ebp
jg 0x4e9564
xchg edi, eax
mov byte [esp + 0x36], al
xchg edi, eax
mov ebp, dword [esp + 0x84]
sub ebp, ebx
add ebp, 0xfffffffc
mov dword [esp + 0xb4], ebp
mov ebp, dword [esp + 0x88]
sub ebp, ebx
add ebp, 0xfffffffc
mov dword [esp + 0xb8], ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, ebx
add ebp, edx
mov dword [esp + 0xb0], ebp
mov dword [esp + 0xa4], edx
mov dword [esp + 0xa8], ebx
mov ebp, dword [esp + 0x7c]
mov dword [esp + 0xac], ebp
movzx ebp, word [esp + 0x3a]
cmp bp, 0xa
ja 0x4e92b9
cmp bp, 1
jne 0x4e926e
mov byte [ecx + 0x74], 1
xchg edi, eax
test al, al
xchg edi, eax
je 0x4e90a4
mov edx, dword [esp + 0xa4]
mov ebx, dword [esp + 0xa8]
mov ebp, dword [esp + 0xac]
cmp ebx, 8
jl 0x4e9501
nop
add ebx, 0xfffffff8
mov edi, ebp
movzx ebp, byte [edx]
mov dword [esp + 0x74], ebp
movzx ebp, byte [edx + 1]
mov dword [esp + 0x70], ebp
movzx ebp, byte [edx + 2]
mov dword [esp + 0x6c], ebp
movzx ebp, byte [edx + 3]
mov dword [esp + 0x68], ebp
movzx ebp, byte [edx + 4]
mov dword [esp + 0x64], ebp
movzx ebp, byte [edx + 5]
mov dword [esp + 0x60], ebp
movzx ebp, byte [edx + 6]
mov dword [esp + 0x5c], ebp
movzx ebp, byte [edx + 7]
mov dword [esp + 0xa8], ebx
lea ebx, [edi - 8]
mov dword [esp + 0xac], ebx
neg ebx
sar ebx, 0x1f
and ebx, 8
add edx, ebx
mov dword [esp + 0xa4], edx
mov edx, dword [esp + 0x70]
mov ebx, edx
shl edx, 8
mov edi, ebp
mov ebp, dword [esp + 0x74]
or edx, ebp
mov ebp, dword [esp + 0x6c]
shl ebp, 0x10
or ebp, edx
mov edx, dword [esp + 0x68]
shl edx, 0x18
or edx, ebp
mov dword [ecx + 0x48], edx
shr ebx, 0x18
mov edx, dword [esp + 0x6c]
shr edx, 0x10
or edx, ebx
mov ebx, dword [esp + 0x68]
shr ebx, 8
or ebx, edx
mov edx, dword [esp + 0x64]
or edx, ebx
mov ebx, dword [esp + 0x60]
shl ebx, 8
or ebx, edx
mov edx, dword [esp + 0x5c]
shl edx, 0x10
or ebx, edx
shl edi, 0x18
or ebx, edi
mov dword [ecx + 0x4c], ebx
xchg esi, eax
test al, al
xchg esi, eax
je 0x4e9182
mov edx, dword [esp + 0xa4]
mov ebx, dword [esp + 0xa8]
mov ebp, dword [esp + 0xac]
cmp ebx, 8
jl 0x4e9522
nop
add ebx, 0xfffffff8
mov esi, ebp
movzx ebp, byte [edx]
mov edi, ebp
movzx ebp, byte [edx + 1]
mov dword [esp + 0x74], ebp
movzx ebp, byte [edx + 2]
mov dword [esp + 0x70], ebp
movzx ebp, byte [edx + 3]
mov dword [esp + 0x6c], ebp
movzx ebp, byte [edx + 4]
mov dword [esp + 0x68], ebp
movzx ebp, byte [edx + 5]
mov dword [esp + 0x64], ebp
movzx ebp, byte [edx + 6]
mov dword [esp + 0x60], ebp
movzx ebp, byte [edx + 7]
mov dword [esp + 0xa8], ebx
lea ebx, [esi - 8]
mov dword [esp + 0xac], ebx
neg ebx
sar ebx, 0x1f
and ebx, 8
add edx, ebx
mov dword [esp + 0xa4], edx
mov edx, dword [esp + 0x74]
mov ebx, edx
shl edx, 8
or edx, edi
mov esi, ebp
mov ebp, dword [esp + 0x70]
mov edi, ebp
shl ebp, 0x10
or ebp, edx
mov edx, dword [esp + 0x6c]
shl edx, 0x18
or edx, ebp
mov dword [ecx + 0x40], edx
shr ebx, 0x18
shr edi, 0x10
or edi, ebx
mov edx, dword [esp + 0x6c]
shr edx, 8
or edx, edi
mov ebx, dword [esp + 0x68]
or ebx, edx
mov edx, dword [esp + 0x64]
shl edx, 8
or edx, ebx
mov ebx, dword [esp + 0x60]
shl ebx, 0x10
or ebx, edx
shl esi, 0x18
or esi, ebx
mov dword [ecx + 0x44], esi
movzx edx, byte [esp + 0x37]
test dl, dl
je 0x4e9263
mov edx, dword [esp + 0xa4]
mov ebx, dword [esp + 0xa8]
mov ebp, dword [esp + 0xac]
cmp ebx, 8
jl 0x4e9543
nop
add ebx, 0xfffffff8
mov esi, ebp
movzx ebp, byte [edx]
mov edi, ebp
movzx ebp, byte [edx + 1]
mov dword [esp + 0x74], ebp
movzx ebp, byte [edx + 2]
mov dword [esp + 0x70], ebp
movzx ebp, byte [edx + 3]
mov dword [esp + 0x6c], ebp
movzx ebp, byte [edx + 4]
mov dword [esp + 0x68], ebp
movzx ebp, byte [edx + 5]
mov dword [esp + 0x64], ebp
movzx ebp, byte [edx + 6]
mov dword [esp + 0x60], ebp
movzx ebp, byte [edx + 7]
mov dword [esp + 0xa8], ebx
lea ebx, [esi - 8]
mov dword [esp + 0xac], ebx
neg ebx
sar ebx, 0x1f
and ebx, 8
add edx, ebx
mov dword [esp + 0xa4], edx
mov edx, dword [esp + 0x74]
mov ebx, edx
shl edx, 8
or edi, edx
mov edx, dword [esp + 0x70]
mov esi, edx
shl edx, 0x10
or edx, edi
mov edi, ebp
mov ebp, dword [esp + 0x6c]
shl ebp, 0x18
or ebp, edx
mov dword [ecx + 0x6c], ebp
shr ebx, 0x18
shr esi, 0x10
or ebx, esi
mov edx, dword [esp + 0x6c]
shr edx, 8
or edx, ebx
mov ebx, dword [esp + 0x68]
or ebx, edx
mov edx, dword [esp + 0x64]
shl edx, 8
or edx, ebx
mov ebx, dword [esp + 0x60]
shl ebx, 0x10
or ebx, edx
shl edi, 0x18
or edi, ebx
mov dword [ecx + 0x70], edi
xor edi, edi
xor esi, esi
xor edx, edx
jmp 0x4e8e76
cmp bp, 0xa
jne 0x4e94f7
cmp ebx, 4
jge 0x4e9287
movzx edx, byte [esp + 0x37]
jmp 0x4e8e76
nop
add ebx, 0xfffffffc
mov dword [esp + 0xa8], ebx
mov ebx, dword [esp + 0x88]
add ebx, 0xfffffff8
mov dword [esp + 0xac], ebx
neg ebx
sar ebx, 0x1f
and ebx, 4
add edx, ebx
mov dword [esp + 0xa4], edx
jmp 0x4e98b1
mov dword [esp + 0x94], edx
cmp bp, 0xd
je 0x4e93fb
cmp bp, 0x5455
jne 0x4e93f0
cmp ebx, 5
jge 0x4e92e1
mov edx, 1
jmp 0x4e9328
mov ebp, dword [esp + 0x78]
mov edx, dword [esp + 0x9c]
movzx edx, byte [edx + ebp + 2]
test dl, 1
sete dl
dec ebx
mov dword [esp + 0xa8], ebx
mov ebx, dword [esp + 0x88]
add ebx, 0xfffffffb
mov dword [esp + 0xac], ebx
neg ebx
sar ebx, 0x1f
and ebx, 1
mov ebp, dword [esp + 0x94]
add ebx, ebp
mov dword [esp + 0xa4], ebx
test dl, dl
je 0x4e9336
movzx edx, byte [esp + 0x37]
jmp 0x4e8e76
nop
mov edx, dword [esp + 0xa8]
mov ebx, dword [esp + 0xa4]
mov ebp, dword [esp + 0xac]
cmp edx, 3
jbe 0x4e98a5
add edx, 0xfffffffc
mov ecx, dword [ebx]
mov dword [esp + 0xa8], edx
lea edx, [ebp - 4]
mov dword [esp + 0xac], edx
neg edx
sar edx, 0x1f
and edx, 4
add edx, ebx
mov dword [esp + 0xa4], edx
add ecx, 0x7791f700
mov dword [esp + 0x74], ecx
adc eax, 0xe
mov edx, edi
lea edi, [esp + 0xc8]
mov ebx, eax
xor eax, eax
call fcn.004616cb
mov dword [esp + 0xcc], 0
mov ecx, dword [esp + 0x74]
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xd4], ebx
mov ecx, dword [0x6ebd00]
mov dword [esp + 0xd8], ecx
lea edi, [esp + 0x168]
lea esi, [esp + 0xc8]
call fcn.00461bae
mov ecx, dword [esp + 0x194]
mov edi, edx
movzx esi, byte [esp + 0x38]
movzx edx, byte [esp + 0x37]
jmp 0x4e8e76
cmp bp, 0x5855
jne 0x4e94f7
cmp ebx, 8
jge 0x4e940a
movzx edx, byte [esp + 0x37]
jmp 0x4e8e76
nop
lea ebp, [ebx - 4]
mov dword [esp + 0xa8], ebp
mov ebx, dword [esp + 0x88]
add ebx, 0xfffffff8
mov dword [esp + 0xac], ebx
neg ebx
sar ebx, 0x1f
and ebx, 4
add edx, ebx
mov dword [esp + 0xa4], edx
nop
nop
cmp ebp, 3
jbe 0x4e9899
mov dword [esp + 0x9c], edx
mov ebp, ecx
mov ecx, dword [esp + 0x80]
add ecx, 0xfffffff8
mov edx, dword [esp + 0x94]
mov edx, dword [edx + ebx]
mov dword [esp + 0xa8], ecx
mov ecx, dword [esp + 0x88]
add ecx, 0xfffffff4
mov dword [esp + 0xac], ecx
neg ecx
sar ecx, 0x1f
and ecx, 4
mov ebx, dword [esp + 0x9c]
add ecx, ebx
mov dword [esp + 0xa4], ecx
add edx, 0x7791f700
adc eax, 0xe
lea edi, [esp + 0xdc]
mov ebx, eax
xor eax, eax
call fcn.004616cb
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], edx
mov dword [esp + 0xe8], ebx
mov ecx, dword [0x6ebd00]
mov dword [esp + 0xec], ecx
lea edi, [esp + 0x168]
lea esi, [esp + 0xdc]
call fcn.00461bae
mov ecx, ebp
movzx edi, byte [esp + 0x36]
movzx esi, byte [esp + 0x38]
movzx edx, byte [esp + 0x37]
jmp 0x4e8e76
movzx edx, byte [esp + 0x37]
jmp 0x4e8e76
mov eax, dword [0x711c78]
mov ecx, dword [0x711c7c]
mov dword [esp + 0x1a0], eax
mov dword [esp + 0x1a4], ecx
add esp, 0x190
ret
mov eax, dword [0x711c78]
mov ecx, dword [0x711c7c]
mov dword [esp + 0x1a0], eax
mov dword [esp + 0x1a4], ecx
add esp, 0x190
ret
mov eax, dword [0x711c78]
mov ecx, dword [0x711c7c]
mov dword [esp + 0x1a0], eax
mov dword [esp + 0x1a4], ecx
add esp, 0x190
ret
movzx eax, word [ecx + 0x32]
movzx edx, word [ecx + 0x30]
mov word [esp], ax
mov word [esp + 2], dx
call fcn.004eb8d0
lea edi, [esp + 0x154]
lea esi, [esp + 4]
call fcn.00461bae
mov eax, dword [esp + 0x194]
lea edi, [eax + 0x1c]
mov dword [esp + 0x90], edi
mov ecx, dword [0x737a60]
test ecx, ecx
jne 0x4e95b3
lea esi, [esp + 0x154]
call fcn.00461bae
jmp 0x4e95d7
lea eax, [0x52f860]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x154]
mov dword [esp + 8], eax
call fcn.0040ffc0
mov eax, dword [esp + 0x194]
lea edi, [esp + 0x12c]
lea esi, [esp + 0x168]
call fcn.00461bae
mov ecx, dword [esp + 0x12c]
mov edx, dword [esp + 0x130]
test edx, 0x80000000
je 0x4e9624
shl edx, 1
mov ebx, ecx
shr ecx, 0x1f
or edx, ecx
mov ecx, ebx
shl ebx, 1
mov ebp, edx
shl edx, 1
shr ebx, 0x1f
or ebx, edx
shr ebp, 0x1f
add ebx, 0xd7b17f80
adc ebp, 0xd
jmp 0x4e9632
mov ebx, dword [esp + 0x134]
mov ebp, dword [esp + 0x138]
test ebp, ebp
sete dl
test ebx, ebx
sete bl
and ebx, edx
test bl, bl
je 0x4e964e
test ecx, 0x3fffffff
je 0x4e9831
lea edi, [esp + 0x118]
lea esi, [esp + 0x168]
call fcn.00461bae
nop
nop
mov ecx, dword [esp + 0x118]
mov edx, dword [esp + 0x11c]
test edx, 0x80000000
je 0x4e96bd
shl edx, 1
mov ebx, ecx
shr ecx, 0x1f
or ecx, edx
shl ebx, 1
mov edx, ecx
shl ecx, 1
shr ebx, 0x1f
or ebx, ecx
shr edx, 0x1f
add ebx, 0xd7b17f80
adc edx, 0xd
mov dword [esp + 0x120], ebx
mov dword [esp + 0x124], edx
and dword [esp + 0x118], 0x3fffffff
mov dword [esp + 0x11c], 0
mov dword [esp + 0x128], 0
mov ecx, dword [0x737a60]
test ecx, ecx
jne 0x4e96e7
mov edi, dword [esp + 0x90]
lea esi, [esp + 0x118]
call fcn.00461bae
jmp 0x4e9712
lea eax, [0x52f860]
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
lea ecx, [esp + 0x118]
mov dword [esp + 8], ecx
call fcn.0040ffc0
mov eax, dword [esp + 0x194]
movzx ecx, word [eax + 0x30]
test cx, cx
jne 0x4e9728
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4e9831
lea edi, [esp]
lea esi, [esp + 0x154]
call fcn.00461bae
lea edi, [esp + 0x14]
lea esi, [esp + 0x168]
call fcn.00461bae
call fcn.0049ddd0
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.004eb7e0
mov eax, dword [esp + 8]
lea edi, [esp + 0x104]
lea esi, [esp + 0x168]
call fcn.00461bae
test eax, eax
je 0x4e9881
nop
lea ecx, [0x6ef200]
cmp eax, ecx
jne 0x4e978c
xor eax, eax
nop
mov ecx, dword [esp + 0x104]
mov edx, dword [esp + 0x108]
test edx, 0x80000000
je 0x4e97e7
shl edx, 1
mov ebx, ecx
shr ecx, 0x1f
or ecx, edx
shl ebx, 1
mov edx, ecx
shl ecx, 1
shr ebx, 0x1f
or ebx, ecx
shr edx, 0x1f
add ebx, 0xd7b17f80
adc edx, 0xd
mov dword [esp + 0x10c], ebx
mov dword [esp + 0x110], edx
and dword [esp + 0x104], 0x3fffffff
mov dword [esp + 0x108], 0
mov dword [esp + 0x114], eax
mov eax, dword [0x737a60]
test eax, eax
jne 0x4e980d
mov edi, dword [esp + 0x90]
lea esi, [esp + 0x104]
call fcn.00461bae
jmp 0x4e9831
lea eax, [0x52f860]
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
lea eax, [esp + 0x104]
mov dword [esp + 8], eax
call fcn.0040ffc0
movzx eax, byte [esp + 0x38]
test al, al
jne 0x4e9843
movzx eax, byte [esp + 0x37]
test al, al
je 0x4e9864
mov eax, dword [0x711c78]
mov ecx, dword [0x711c7c]
mov dword [esp + 0x1a0], eax
mov dword [esp + 0x1a4], ecx
add esp, 0x190
ret
mov dword [esp + 0x1a0], 0
mov dword [esp + 0x1a4], 0
add esp, 0x190
ret
lea eax, [0x516760]
mov dword [esp], eax
lea eax, [0x57ab34]
mov dword [esp + 4], eax
call fcn.00434b50
mov eax, 3
mov ecx, ebp
call fcn.00461540
mov eax, 3
mov ecx, edx
call fcn.00461540
mov edx, dword [esp + 0xa4]
mov ebx, dword [esp + 0xa8]
mov ebp, dword [esp + 0xac]
cmp ebx, 4
jl 0x4e9cc5
mov dword [esp + 0x88], ebp
mov dword [esp + 0x9c], edx
movzx edx, word [edx]
mov word [esp + 0x3a], dx
nop
nop
lea edx, [ebx - 2]
mov dword [esp + 0xa8], edx
add ebp, 0xfffffffe
mov dword [esp + 0xac], ebp
mov ebp, dword [esp + 0x9c]
add ebp, 2
mov dword [esp + 0xa4], ebp
nop
nop
cmp edx, 1
jbe 0x4e9ccf
mov dword [esp + 0x84], ebx
lea edx, [ebx - 4]
mov dword [esp + 0x80], edx
mov ebp, dword [esp + 0x9c]
movzx ebx, word [ebp + 2]
mov dword [esp + 0xa8], edx
mov edx, dword [esp + 0x88]
add edx, 0xfffffffc
mov dword [esp + 0xac], edx
neg edx
sar edx, 0x1f
and edx, 2
mov dword [esp + 0x7c], edx
lea edx, [edx + ebp + 2]
mov dword [esp + 0xa4], edx
mov ebp, dword [esp + 0x80]
cmp ebx, ebp
jg 0x4e9cbb
nop
mov ebp, dword [esp + 0x84]
sub ebp, ebx
add ebp, 0xfffffffc
mov dword [esp + 0xa8], ebp
mov ebp, dword [esp + 0x88]
sub ebp, ebx
add ebp, 0xfffffffc
mov dword [esp + 0xac], ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, ebx
add edx, ebp
mov dword [esp + 0xa4], edx
movzx edx, word [esp + 0x3a]
cmp dx, 1
jne 0x4e98b1
cmp ebx, 0x18
jne 0x4e98b1
nop
nop
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x9c]
movzx edx, byte [ecx + eax + 2]
movzx ebx, byte [ecx + eax + 3]
mov ebp, ebx
shr ebx, 0x18
movzx esi, byte [ecx + eax + 4]
mov edi, esi
shr esi, 0x10
or ebx, esi
movzx esi, byte [ecx + eax + 5]
mov dword [esp + 0x74], esi
shr esi, 8
or ebx, esi
movzx esi, byte [ecx + eax + 6]
or esi, ebx
movzx ebx, byte [ecx + eax + 7]
shl ebx, 8
or ebx, esi
movzx esi, byte [ecx + eax + 8]
shl esi, 0x10
or esi, ebx
movzx eax, byte [ecx + eax + 9]
shl eax, 0x18
or eax, esi
mov dword [esp + 0x70], eax
mov dword [esp + 4], eax
shl ebp, 8
or edx, ebp
shl edi, 0x10
or edx, edi
mov ecx, dword [esp + 0x74]
shl ecx, 0x18
or ecx, edx
mov dword [esp + 0x74], ecx
mov dword [esp], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x989680
call fcn.0045bae0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x40], ecx
mov edx, dword [esp + 0x70]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x74]
mov dword [esp], edx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x989680
call fcn.0045bc60
mov eax, dword [esp + 0x10]
mov ecx, eax
mov eax, 0x64
mul ecx
mov dword [esp + 0x74], edx
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x70], ecx
mov ebx, dword [0x6ebd04]
mov dword [esp], 0x641
mov dword [esp + 4], 1
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], ebx
call fcn.0049e870
lea edi, [esp + 0x17c]
lea esi, [esp + 0x20]
call fcn.00461bae
lea edi, [esp + 0x140]
lea esi, [esp + 0x17c]
call fcn.00461bae
mov eax, dword [esp + 0x70]
imul eax, eax, 0x64
mov ecx, dword [esp + 0x74]
add eax, ecx
nop
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x144]
test edx, 0x80000000
je 0x4e9b56
shl edx, 1
mov ebx, ecx
shr ecx, 0x1f
or edx, ecx
shl ebx, 1
mov ecx, edx
shl edx, 1
shr ebx, 0x1f
or ebx, edx
shr ecx, 0x1f
add ebx, 0xd7b17f80
adc ecx, 0xd
jmp 0x4e9b64
mov ebx, dword [esp + 0x148]
mov ecx, dword [esp + 0x14c]
mov edx, dword [esp + 0x3c]
add ebx, edx
mov edx, dword [esp + 0x40]
adc ecx, edx
mov edx, ebx
add ebx, 0x886e0900
mov dword [esp + 0x44], ebx
mov ebp, ecx
adc ecx, 0xfffffff1
mov dword [esp + 0x48], ecx
test eax, eax
mov esi, ebp
xchg ebp, ebx
setl bl
xchg ebp, ebx
mov edi, edx
mov edx, dword [esp + 0x4c]
cmp edx, 0x3b9aca00
setae cl
test eax, eax
sete dl
setg bl
and ecx, edx
or ebx, ecx
or ebp, ebx
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x4e9bc4
mov ebx, dword [esp + 0x4c]
mov edi, dword [esp + 0x48]
mov esi, dword [esp + 0x44]
jmp 0x4e9c47
mov dword [esp + 0x74], edi
mov dword [esp + 0x58], esi
mov dword [esp + 0x70], eax
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x4c]
mov dword [esp], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x3b9aca00
call fcn.0045bae0
mov eax, dword [esp + 0x10]
mov ecx, eax
mov eax, 0x3b9aca00
mul ecx
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x74]
add ecx, ebp
mov ebp, dword [esp + 0x58]
adc ebp, ebx
mov esi, ecx
add ecx, 0x886e0900
mov edi, ebp
adc ebp, 0xfffffff1
imul ebx, ebx, 0x3b9aca00
add edx, ebx
mov ebx, dword [esp + 0x4c]
sub ebx, eax
mov eax, dword [esp + 0x70]
sbb eax, edx
test eax, eax
jge 0x4e9c43
add ebx, 0x3b9aca00
add esi, 0x886e08ff
adc edi, 0xfffffff1
jmp 0x4e9c47
mov edi, ebp
mov esi, ecx
add esi, 0x7791f700
adc edi, 0xe
mov dword [esp + 0x58], edi
xor eax, eax
lea edi, [esp + 0xf0]
call fcn.004616cb
mov dword [esp + 0xf0], ebx
sar ebx, 0x1f
mov dword [esp + 0xf4], ebx
mov dword [esp + 0xf8], esi
mov ecx, dword [esp + 0x58]
mov dword [esp + 0xfc], ecx
mov ecx, dword [0x6ebd00]
mov dword [esp + 0x100], ecx
lea edi, [esp + 0x168]
lea esi, [esp + 0xf0]
call fcn.00461bae
mov ecx, dword [esp + 0x194]
movzx esi, byte [esp + 0x38]
movzx edi, byte [esp + 0x36]
jmp 0x4e98b1
movzx edx, byte [esp + 0x37]
jmp 0x4e8e76
movzx edx, byte [esp + 0x37]
jmp 0x4e8e76
mov eax, 1
mov ecx, edx
call fcn.00461540
mov eax, 1
mov ecx, ebp
call fcn.00461540
call fcn.004615a0
call fcn.00461580
call fcn.00461580
mov eax, 3
mov ecx, edx
call fcn.00461540
mov eax, 3
mov ecx, edx
call fcn.00461540
mov eax, 4
mov ecx, esi
call fcn.004615a0
mov eax, 1
mov ecx, esi
call fcn.00461540
mov eax, 1
mov ecx, esi
call fcn.00461540
mov eax, 1
call fcn.00461540
mov eax, 3
mov ecx, esi
call fcn.00461540
mov eax, 3
mov ecx, esi
call fcn.00461540
mov eax, 3
call fcn.00461540
mov eax, 1
call fcn.00461540
mov eax, 1
call fcn.00461540
mov eax, 1
call fcn.00461540
mov eax, 1
call fcn.00461540
mov eax, 1
call fcn.00461540
nop
call fcn.004600b0
jmp fcn.004e8660