Function at 0x42a8b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0xa60
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov dword [esp + 0xa58], eax
mov dword [esp + 0xa54], ecx
mov dword [esp + 0xa50], edx
mov dword [esp + 0xa4c], esi
mov dword [esp + 0xa48], edi
mov bx, word [0x4b2b88]
mov ax, bx
dec eax
mov bx, ax
mov word [0x4b2b88], bx
xor eax, 0x4290
mov bx, word [0x4b0228]
mov cx, bx
sub ecx, eax
mov bx, cx
mov word [0x4b0228], bx
mov eax, esp
mov dword [eax + 4], 8
mov dword [eax], 0x4ae
call fcn.004489c0
mov dword [esp + 0xa44], eax
mov eax, dword [0x4a1684]
and eax, 0xff446fd3
mov ecx, dword [0x49e2e0]
or ecx, eax
mov dword [0x49e2e0], ecx
mov eax, dword [esp + 0xa44]
mov ecx, dword [esp + 0xa48]
mov edx, esp
mov dword [edx + 4], eax
mov dword [edx], ecx
call fcn.00455bd0
mov dword [esp + 0xa1c], eax
mov eax, dword [0x4a8088]
or eax, 0xe5175f9e
cmp eax, 0xde7981cc
jge 0x42a994
mov dword [0x4a37e0], 0xbd32a5a8
mov eax, dword [esp + 0xa44]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 8
call fcn.004073a0
mov eax, dword [0x4a481c]
shl eax, 0xa
mov ecx, 0x8c2ce333
sub ecx, eax
and ecx, 0x30f4b177
mov eax, dword [0x49f440]
imul eax, ecx
mov dword [0x49f440], eax
cmp dword [esp + 0xa1c], 0
jne 0x42ab4d
mov ax, word [0x4b5730]
mov cx, ax
add ecx, 0x9a9f208c
mov ax, cx
mov word [0x4b5730], ax
cmp dword [esp + 0xa58], 0
je 0x42aa31
mov eax, dword [0x4a3ed0]
xor eax, 0xcf327ea6
mov dword [0x4ade80], eax
mov ecx, dword [esp + 0xa50]
call fcn.00427af0
mov eax, dword [0x49fbfc]
imul eax, eax, 0x183c0456
mov dword [0x49fbfc], eax
jmp 0x42d35b
mov eax, 0xdc7ce26c
mov ecx, dword [0x49f9f4]
imul ecx, ecx, 0x22018304
mov dword [0x49f9f4], ecx
mov ecx, dword [esp + 0xa50]
mov edx, dword [esp + 0xa4c]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
mov dword [esp + 0x140], eax
call fcn.00444f50
mov dword [esp + 0xa18], eax
mov eax, dword [0x49ee98]
mov ecx, eax
dec ecx
mov dword [0x49ee98], ecx
or eax, 0xb8dec671
mov ecx, dword [esp + 0x140]
cmp ecx, eax
jl 0x42aac4
mov ax, word [0x4b5ecc]
movsx ecx, ax
mov edx, dword [0x49a4dc]
imul ecx, edx
cmp ecx, 0x46b1852c
je 0x42aabf
mov eax, dword [0x4a8a8c]
add eax, 0xd04abfd2
mov dword [0x4a8a8c], eax
jmp 0x42aac4
cmp dword [esp + 0xa18], 0
jg 0x42ab39
mov eax, dword [0x4a99b0]
inc eax
mov dword [0x4a99b0], eax
mov cx, word [0x4b2632]
mov dx, cx
inc edx
mov si, dx
mov word [0x4b2632], si
movsx edx, cx
cmp eax, edx
jle 0x42ab0c
mov eax, dword [0x49a75c]
or eax, 0xa9c143df
mov dword [0x49a75c], eax
mov ecx, dword [esp + 0xa50]
call fcn.00427af0
mov ecx, dword [0x4a7540]
mov eax, ecx
inc eax
mov dword [0x4a7540], eax
mov eax, dword [0x4adf0c]
and ecx, eax
and ecx, 0xfca140ae
mov dword [0x4adf0c], ecx
mov eax, dword [0x4aa8f0]
add eax, 0xb77e6fc1
mov dword [0x4aa8f0], eax
jmp 0x42d35b
mov eax, 0x93fdffdc
mov ecx, dword [0x4a5fd4]
or ecx, 0xa51b6408
mov dword [0x4a5fd4], ecx
mov ecx, dword [0x49d5e8]
mov edx, ecx
dec edx
mov dword [0x49d5e8], edx
mov edx, dword [0x4accfc]
or edx, ecx
mov dword [0x4accfc], edx
mov ecx, dword [0x49bb14]
xor ecx, 0xffffffff
cmp eax, ecx
jg 0x42abc0
mov ax, word [0x4b11ee]
mov cx, ax
and ecx, 0xee57
xor ecx, 0x13e4
mov ax, word [0x4b283e]
mov dx, ax
and edx, ecx
mov ax, dx
mov word [0x4b283e], ax
jmp 0x42ac21
mov eax, 0x3cf2117e
mov ecx, dword [0x4a763c]
inc ecx
mov dword [0x4a763c], ecx
or ecx, 0xd83e68ce
cmp eax, ecx
jle 0x42ac02
mov ax, word [0x4b45be]
mov cx, ax
mov ax, word [0x4b32b8]
mov dx, ax
add edx, ecx
mov ax, dx
mov word [0x4b32b8], ax
jmp 0x42ac1c
mov eax, dword [0x49cdec]
not eax
and eax, 0x2d797dac
mov ecx, dword [0x4a814c]
sub ecx, eax
mov dword [0x4a814c], ecx
jmp 0x42ac21
mov eax, 0xf39db64b
mov ecx, dword [0x49e5d0]
cmp eax, ecx
jg 0x42ac73
mov ax, word [0x4ae5ce]
mov cx, ax
inc ecx
mov ax, cx
mov word [0x4ae5ce], ax
imul ecx, ecx, 0x80688a04
mov edx, dword [0x4a9d70]
mov esi, edx
dec esi
mov dword [0x4a9d70], esi
add ecx, edx
mov ax, word [0x4b4b5c]
mov dx, ax
imul edx, ecx
mov ax, dx
mov word [0x4b4b5c], ax
mov eax, 0x861aa986
mov ecx, dword [0x49b468]
sar ecx, 1
cmp eax, ecx
jg 0x42aca4
mov eax, dword [0x49b3cc]
shl eax, 9
or eax, 0xe3cacec9
mov ecx, dword [0x4ab88c]
add ecx, eax
mov dword [0x4ab88c], ecx
mov eax, 0xebd62470
mov cx, word [0x4b3e92]
movsx edx, cx
not edx
or edx, 0x8b25c9
mov esi, dword [0x4a7950]
and esi, edx
mov dword [0x4a7950], esi
mov dword [0x4a687c], 0xe039cea4
lea ecx, [esp + 0x66c]
mov dword [esp + 0x13c], eax
call fcn.00424ca0
mov di, word [0x4b72c0]
movsx ecx, di
shl ecx, 4
add ecx, 0xa9b2f0f1
mov edx, dword [esp + 0x13c]
cmp edx, ecx
mov dword [esp + 0x138], eax
jle 0x42ad74
mov eax, dword [0x4a3bb4]
inc eax
mov dword [0x4a3bb4], eax
mov ecx, dword [0x4a960c]
and eax, ecx
mov ecx, dword [0x4a3c6c]
xor ecx, 0xffffffff
imul ecx, ecx, 0xccd3483d
cmp eax, ecx
jle 0x42ad60
mov eax, 0x4690868
mov cx, word [0x4b3b28]
movsx edx, cx
sub edx, 0xd8347a50
cmp eax, edx
jle 0x42ad5b
jmp 0x42ad5b
jmp 0x42ad6f
mov eax, dword [0x49ceec]
xor eax, 0x87587858
mov dword [0x49ceec], eax
jmp 0x42ad74
mov eax, 0x74a52075
mov cx, word [0x4b4ba2]
mov dx, cx
add edx, 0x7df4ef6b
mov cx, dx
mov word [0x4b4ba2], cx
mov edx, dword [0x4a47e8]
cmp eax, edx
jl 0x42adb5
mov eax, dword [0x49d99c]
or eax, 0xdcac1af6
mov dword [0x49d99c], eax
jmp 0x42adbf
mov dword [0x49c1f4], 0x391f3f3c
mov eax, 0x7e5db321
mov ecx, dword [0x4a7da8]
not ecx
mov edx, dword [0x49da98]
or edx, ecx
mov dword [0x49da98], edx
mov dword [esp + 0x22c], 0
mov dword [esp + 0x228], 0
mov ecx, dword [0x4a5fd4]
inc ecx
mov dword [0x4a5fd4], ecx
imul ecx, ecx, 0x1d354658
cmp eax, ecx
jne 0x42ae1e
mov eax, dword [0x4a3378]
mov ecx, dword [0x4aab68]
and ecx, eax
mov dword [0x4aab68], ecx
mov eax, dword [0x4a3aac]
and eax, 0x50260854
mov dword [0x4a3aac], eax
mov dword [esp + 0x220], 0xffffffff
mov dword [esp + 0x21c], 0xffffffff
mov cx, word [0x4ae66c]
mov ax, cx
mov edx, eax
inc edx
mov cx, dx
mov word [0x4ae66c], cx
mov edx, dword [0x4a9cf0]
shr edx, 4
add edx, 0xf234d6b4
and eax, edx
mov cx, word [0x4b6072]
mov dx, cx
sub edx, eax
mov cx, dx
mov word [0x4b6072], cx
mov dword [esp + 0x218], 0x50
mov eax, dword [0x49c954]
mov edx, dword [0x49cab4]
xor eax, edx
not eax
mov dword [0x49cab4], eax
mov byte [esp + 0x217], 0
mov eax, dword [0x49c3a0]
mov edx, eax
dec edx
mov dword [0x49c3a0], edx
add eax, 0x2255e01b
mov edx, dword [0x49ef00]
imul edx, eax
mov dword [0x49ef00], edx
mov eax, esp
mov dword [eax], 0
call fcn.00451630
add eax, 0x258
adc edx, 0
mov dword [esp + 0x228], eax
mov dword [esp + 0x22c], edx
mov eax, dword [0x4a7eb0]
mov edx, dword [0x49e844]
or edx, 0xcff7bced
cmp eax, edx
jge 0x42af2c
mov eax, dword [0x49ac88]
mov ecx, eax
inc ecx
mov dword [0x49ac88], ecx
add eax, 0xf93508d6
mov ecx, dword [0x4a24f8]
xor ecx, eax
mov dword [0x4a24f8], ecx
jmp 0x42af3b
mov eax, dword [0x49e898]
xor eax, 0x40fe5337
mov dword [0x49e898], eax
mov byte [esp + 0x6a0], 0
mov dword [0x49c318], 0xdee3148c
mov eax, dword [esp + 0xa48]
mov ecx, esp
mov dword [ecx], eax
call fcn.004526b0
mov dword [esp + 0x23c], eax
mov dx, word [0x4b0842]
movsx eax, dx
xor eax, 0xe2c2d413
mov dword [0x4ac8f4], eax
cmp dword [esp + 0x23c], 0x7f
jle 0x42afca
mov eax, dword [0x49a908]
not eax
or eax, 0xd73eb19f
mov ecx, dword [0x4a0250]
sub ecx, 0x799e8aa7
and ecx, 0x506069b4
cmp eax, ecx
jle 0x42afc5
mov eax, dword [0x4a0a18]
not eax
mov ecx, dword [0x4a1b08]
or eax, ecx
or eax, 0x225ec63e
mov dword [0x4a6998], eax
jmp 0x42d1a1
mov eax, 0x20e18ad0
mov cx, word [0x4af196]
movsx edx, cx
or edx, 0x68b98707
cmp eax, edx
je 0x42b000
mov eax, dword [0x49c3a0]
mov ecx, dword [0x4a5750]
imul ecx, eax
mov dword [0x4a5750], ecx
jmp 0x42b046
mov eax, 0x365a8186
mov ecx, dword [0x49d73c]
mov edx, ecx
dec edx
mov dword [0x49d73c], edx
and ecx, 0xdc0f990b
cmp eax, ecx
jl 0x42b041
mov eax, dword [0x4acfa8]
not eax
add eax, 0xaeadecf6
or eax, 0x3b51864c
mov ecx, dword [0x4a0940]
add ecx, eax
mov dword [0x4a0940], ecx
jmp 0x42b046
mov eax, dword [esp + 0xa48]
mov ecx, esp
mov dword [ecx + 4], eax
lea eax, [esp + 0x970]
mov dword [ecx], eax
call fcn.00455770
mov ecx, dword [0x4a8920]
imul ecx, ecx, 0xd7ff7ffb
mov dword [0x4a8920], ecx
mov ecx, dword [esp + 0x23c]
sub ecx, 1
mov dword [esp + 0x238], ecx
mov dword [esp + 0x134], eax
mov eax, dword [esp + 0x238]
mov ecx, dword [esp + 0x23c]
sub ecx, 6
cmp eax, ecx
jl 0x42b1cc
mov eax, 0x8e751049
mov ecx, dword [0x4ac3b8]
dec ecx
mov dword [0x4ac3b8], ecx
mov dx, word [0x4b696a]
movsx esi, dx
sub ecx, esi
xor ecx, 0x8d4007cd
cmp eax, ecx
jg 0x42b0de
mov eax, dword [0x4a98bc]
and eax, 0x4128745
mov dword [0x4a98bc], eax
mov eax, dword [esp + 0x238]
movsx eax, byte [esp + eax + 0x970]
cmp eax, 0x3a
jne 0x42b19b
mov ax, word [0x4af6b4]
mov cx, ax
and ecx, 0xa6cb
mov ax, cx
mov word [0x4af6b4], ax
mov ecx, dword [esp + 0x238]
mov byte [esp + ecx + 0x970], 0
mov ax, word [0x4b2916]
mov cx, ax
and ecx, 0xfb3f
mov ax, cx
mov word [0x4b2916], ax
mov ecx, dword [esp + 0x238]
mov dword [esp + 0x23c], ecx
mov ecx, dword [0x4a4d70]
inc ecx
mov dword [0x4a4d70], ecx
mov ax, word [0x4b59c6]
mov dx, ax
or edx, ecx
mov ax, dx
mov word [0x4b59c6], ax
mov ecx, dword [esp + 0x238]
lea edx, [esp + 0x970]
lea ecx, [ecx + edx + 1]
mov edx, esp
mov dword [edx], ecx
call fcn.00455cbe
mov dword [esp + 0x218], eax
mov eax, dword [0x4a7584]
imul eax, eax, 0xbde58c98
mov dword [0x4a7584], eax
jmp 0x42b1cc
mov eax, dword [0x4ad9a8]
mov ecx, dword [0x49c8f4]
xor eax, ecx
mov ecx, dword [0x4ad510]
or ecx, eax
mov dword [0x4ad510], ecx
mov eax, dword [esp + 0x238]
add eax, 0xffffffff
mov dword [esp + 0x238], eax
jmp 0x42b08a
mov ax, word [0x4af85a]
mov cx, ax
or ecx, 0xa29e
mov ax, cx
mov word [0x4af85a], ax
mov dword [esp + 0x238], 0
mov eax, dword [esp + 0x238]
cmp eax, dword [esp + 0x23c]
jg 0x42b34e
mov eax, dword [0x4a65ac]
imul eax, eax, 0xb8ba1919
mov dword [0x4a65ac], eax
mov eax, dword [esp + 0x238]
mov cl, byte [esp + eax + 0x970]
mov byte [esp + eax + 0x8c8], cl
mov dword [0x4a88ac], 0x4b44125c
mov eax, dword [esp + 0x238]
movsx eax, byte [esp + eax + 0x8c8]
cmp eax, 0x2f
jne 0x42b309
mov ax, word [0x4b5962]
mov cx, ax
xor ecx, 0xd3a9
mov ax, cx
mov word [0x4b5962], ax
mov ecx, dword [esp + 0x238]
mov byte [esp + ecx + 0x8c8], 0
mov ecx, dword [0x4ad5b4]
not ecx
mov edx, dword [0x4a0354]
add edx, ecx
mov dword [0x4a0354], edx
mov ecx, dword [esp + 0x238]
mov dword [esp + 0x234], ecx
mov eax, dword [esp + 0x234]
cmp eax, dword [esp + 0x23c]
jg 0x42b2fb
mov eax, dword [0x4a4000]
add eax, 0x74585e82
mov dword [0x4a4000], eax
mov eax, dword [esp + 0x234]
mov cl, byte [esp + eax + 0x970]
mov edx, dword [esp + 0x238]
sub eax, edx
mov byte [esp + eax + 0x6a0], cl
mov eax, dword [0x4a5c14]
add eax, 0xbd3abd47
mov dword [0x4a5c14], eax
mov eax, dword [esp + 0x234]
add eax, 1
mov dword [esp + 0x234], eax
jmp 0x42b295
mov word [0x4b14f2], 0x511b
jmp 0x42b34e
mov ax, word [0x4b2472]
movsx ecx, ax
xor ecx, 0xb95a3fe9
cmp ecx, 0x606ae49e
jg 0x42b333
mov eax, dword [0x4acd14]
add eax, 0x80e79db2
mov dword [0x4acd14], eax
jmp 0x42b338
mov eax, dword [esp + 0x238]
add eax, 1
mov dword [esp + 0x238], eax
jmp 0x42b1ef
lea eax, [esp + 0x6a0]
mov ecx, dword [0x4a9484]
xor ecx, 0x1b1418e1
mov dword [0x4a9484], ecx
mov ecx, esp
mov dword [ecx], eax
call fcn.004526b0
mov ecx, dword [esp + 0xa4c]
mov edx, esp
mov dword [edx], ecx
mov dword [esp + 0x130], eax
call fcn.004526b0
mov ecx, dword [esp + 0x130]
add ecx, eax
cmp ecx, 0x1ff
jbe 0x42b3b0
mov eax, dword [0x4a9bbc]
and eax, 0xae95e661
mov dword [0x4a9bbc], eax
jmp 0x42d1a1
mov eax, 0xde9f0198
mov ecx, dword [0x4a9eec]
shl ecx, 5
mov edx, dword [0x4a8d8c]
not edx
and ecx, edx
mov edx, dword [0x49e1fc]
or edx, ecx
mov dword [0x49e1fc], edx
mov ecx, dword [esp + 0xa4c]
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [esp + 0x6a0]
mov dword [edx], ecx
mov dword [esp + 0x12c], eax
call fcn.00455780
mov ecx, dword [0x4add94]
or ecx, 0x1e7cfe5d
mov edx, dword [esp + 0x12c]
cmp edx, ecx
mov dword [esp + 0x128], eax
jne 0x42b43d
mov eax, dword [0x4a1670]
shl eax, 6
mov ecx, dword [0x4a5190]
and ecx, 0x6fd3b077
or eax, ecx
mov ecx, dword [0x4abe64]
or ecx, eax
mov dword [0x4abe64], ecx
mov eax, 0x37234667
mov dword [esp + 0x234], 0
mov cx, word [0x4b5fd6]
movsx edx, cx
mov esi, dword [0x49b628]
dec esi
mov dword [0x49b628], esi
xor edx, esi
cmp eax, edx
jle 0x42b486
mov ax, word [0x4b6e9a]
mov cx, ax
imul ecx, ecx, 0x31d0aa52
mov ax, cx
mov word [0x4b6e9a], ax
mov eax, esp
mov dword [eax + 4], 5
mov dword [eax], 0x8d1b
call fcn.004489c0
mov dword [esp + 0xa40], eax
mov cx, word [0x4ae3a4]
mov ax, cx
add eax, 0x120c851
mov cx, ax
mov word [0x4ae3a4], cx
mov eax, dword [esp + 0xa40]
mov edx, esp
mov dword [edx], eax
lea ecx, [esp + 0x66c]
call fcn.0041e820
sub esp, 4
mov ecx, dword [0x4a2f48]
xor ecx, 0xac80fc0e
mov dword [0x4a2f48], ecx
mov ecx, dword [esp + 0xa40]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], 5
mov dword [esp + 0x124], eax
call fcn.004073a0
mov eax, dword [0x49d9c0]
add eax, 0x439cf7ed
mov dword [0x49d9c0], eax
mov eax, dword [esp + 0xa50]
mov ecx, eax
call fcn.0040ea90
cmp eax, 0
je 0x42b84d
mov eax, 0xd013c468
mov ecx, dword [0x49d46c]
add ecx, 0x78206967
mov dx, word [0x4b1cb8]
mov si, dx
or esi, ecx
mov dx, si
mov word [0x4b1cb8], dx
mov ecx, esp
mov dword [ecx + 4], 0xc
mov dword [ecx], 0x7f31
mov dword [esp + 0x120], eax
call fcn.004489c0
mov dword [esp + 0xa3c], eax
mov eax, dword [0x4acfd0]
mov ecx, eax
dec ecx
mov dword [0x4acfd0], ecx
imul eax, eax, 0x1fdf8b05
mov ecx, dword [esp + 0x120]
cmp ecx, eax
jg 0x42b5a5
mov eax, dword [0x4a1ebc]
or eax, 0xfc949df6
mov dword [0x4a1ebc], eax
mov eax, 0xa6e7a93b
mov ecx, dword [esp + 0xa50]
mov edx, dword [esp + 0xa3c]
mov esi, esp
mov dword [esi], edx
lea edx, [esp + 0x200]
mov dword [esp + 0x11c], ecx
mov ecx, edx
mov dword [esp + 0x118], eax
mov dword [esp + 0x114], edx
call fcn.0041b1f0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x114]
mov dword [ecx], edx
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x11c]
mov dword [esp + 0x110], eax
call fcn.00442360
sub esp, 8
mov dword [esp + 0x238], eax
mov ecx, dword [esp + 0x114]
call fcn.0041d260
mov eax, dword [0x4a371c]
imul eax, eax, 0x8b560861
mov dword [0x4a371c], eax
mov eax, dword [esp + 0xa3c]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0xc
call fcn.004073a0
mov eax, dword [0x49ea58]
sar eax, 6
mov ecx, dword [esp + 0x118]
cmp ecx, eax
je 0x42b66f
mov eax, dword [0x4a5c0c]
xor eax, 0x6cabbe01
mov dword [0x4a5c0c], eax
jmp 0x42b67e
mov eax, dword [0x4a9400]
xor eax, 0x29815606
mov dword [0x4a9400], eax
cmp dword [esp + 0x238], 0
jne 0x42b83d
mov ax, word [0x4b4924]
movsx ecx, ax
and ecx, 0x7e7fab7c
cmp ecx, 0x422000
jg 0x42b6bf
mov eax, dword [0x4a7fd8]
and eax, 0x2baec64f
mov ecx, dword [0x49dea4]
sub ecx, eax
mov dword [0x49dea4], ecx
mov eax, 0xffd5fe6f
mov dword [esp + 0x234], 1
mov ecx, dword [0x4adec8]
and ecx, 0xc00fc933
mov dword [0x4adec8], ecx
mov ecx, dword [esp + 0xa50]
mov edx, esp
mov dword [edx], 0
mov dword [esp + 0x10c], ecx
mov dword [esp + 0x108], eax
call fcn.0041e7f0
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xb
mov ecx, dword [esp + 0x10c]
call fcn.00448640
sub esp, 8
mov ecx, dword [0x4a788c]
mov edx, ecx
inc edx
mov dword [0x4a788c], edx
mov edx, dword [esp + 0x108]
cmp edx, ecx
mov dword [esp + 0x104], eax
jl 0x42b782
mov eax, 0xffa7df71
mov cx, word [0x4b182e]
movsx edx, cx
shl edx, 2
cmp eax, edx
je 0x42b77d
mov eax, dword [0x4a0668]
inc eax
mov dword [0x4a0668], eax
xor eax, 0x20dcd7ed
mov ecx, dword [0x4a8d18]
add ecx, eax
mov dword [0x4a8d18], ecx
jmp 0x42b782
mov eax, 0xfbfbfbef
mov ecx, esp
mov dword [ecx + 4], 6
mov dword [ecx], 0x9d7d
mov dword [esp + 0x100], eax
call fcn.004489c0
mov dword [esp + 0xa38], eax
mov eax, dword [0x4a6be8]
imul eax, eax, 0x880322d0
mov dword [0x4a6be8], eax
mov eax, dword [esp + 0xa38]
mov ecx, esp
mov dword [ecx], eax
lea ecx, [esp + 0x66c]
call fcn.0041e820
sub esp, 4
mov dx, word [0x4b0f52]
mov cx, dx
xor ecx, 0x60ca
mov dx, cx
mov word [0x4b0f52], dx
mov ecx, dword [esp + 0xa38]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], 6
mov dword [esp + 0xfc], eax
call fcn.004073a0
mov dx, word [0x4b0ce4]
movsx eax, dx
sub eax, 0x9b8025b9
mov ecx, dword [esp + 0x100]
cmp ecx, eax
jne 0x42b838
mov eax, dword [0x4a7d5c]
xor eax, 0x5710a8cf
mov dword [0x4a7d5c], eax
jmp 0x42b83d
mov eax, dword [0x4ad77c]
imul eax, eax, 0xb93eb943
mov dword [0x4ad77c], eax
mov eax, 0xc78b8796
mov cx, word [0x4b822e]
mov dx, cx
imul edx, edx, 0x2668a5a1
mov cx, dx
mov word [0x4b822e], cx
mov edx, esp
lea esi, [esp + 0x6a0]
mov dword [edx], esi
lea edx, [esp + 0x1ec]
mov ecx, edx
mov dword [esp + 0xf8], eax
mov dword [esp + 0xf4], edx
call fcn.00442980
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xf4]
mov dword [ecx], edx
lea ecx, [esp + 0x66c]
mov dword [esp + 0xf0], eax
call fcn.00433650
sub esp, 4
mov ecx, dword [esp + 0xf4]
mov dword [esp + 0xec], eax
call fcn.0043daf0
mov eax, dword [0x49bb88]
mov ecx, eax
inc ecx
mov dword [0x49bb88], ecx
add eax, 0x60e68ded
xor eax, 0xb30498b6
mov ecx, dword [0x4a1f38]
or ecx, eax
mov dword [0x4a1f38], ecx
mov eax, esp
mov dword [eax + 4], 0x32
mov dword [eax], 0x9693
call fcn.004489c0
mov dword [esp + 0xa34], eax
mov eax, dword [0x4a35f0]
mov ecx, eax
inc ecx
mov dword [0x4a35f0], ecx
and eax, 0x4227d1d
mov ecx, dword [esp + 0xf8]
cmp ecx, eax
jle 0x42b95a
mov eax, 0x41981c44
mov ecx, dword [0x49c4c8]
add ecx, 0x4b4be77a
cmp eax, ecx
jne 0x42b955
mov eax, dword [0x49dc9c]
add eax, 0x46270828
mov dword [0x49dc9c], eax
jmp 0x42b99f
mov eax, 0xfdca909e
mov cx, word [0x4b5152]
mov dx, cx
inc edx
mov si, dx
mov word [0x4b5152], si
movsx edx, cx
mov edi, dword [0x4ae05c]
xor edi, 0xffffffff
and edx, edi
xor edx, 0x810b7dca
cmp eax, edx
jl 0x42b99a
mov dword [0x49f370], 0x9d7e01d6
jmp 0x42b99f
mov eax, 0x64d194b4
mov ecx, dword [esp + 0xa34]
mov edx, esp
mov dword [edx], ecx
lea ecx, [esp + 0x1d8]
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xe4], eax
call fcn.00442980
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xe8]
mov dword [ecx], edx
lea ecx, [esp + 0x66c]
mov dword [esp + 0xe0], eax
call fcn.00433650
sub esp, 4
mov ecx, dword [esp + 0xe8]
mov dword [esp + 0xdc], eax
call fcn.0043daf0
mov si, word [0x4b77fc]
movsx eax, si
mov ecx, dword [0x4a7cc8]
imul ecx, ecx, 0xe9517f70
xor eax, ecx
mov ecx, dword [esp + 0xe4]
cmp ecx, eax
jl 0x42ba6d
mov eax, 0x60c32376
mov ecx, dword [0x4ae194]
not ecx
mov edx, dword [0x4a5c8c]
sar edx, 3
add ecx, edx
add ecx, 0x94a4d4be
cmp eax, ecx
jne 0x42ba68
mov eax, dword [0x49d5e8]
sar eax, 3
xor eax, 0xbbbe0d4f
mov ecx, dword [0x4a1f70]
add ecx, eax
mov dword [0x4a1f70], ecx
jmp 0x42ba6d
mov eax, dword [esp + 0xa34]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0x32
call fcn.004073a0
mov dx, word [0x4b720c]
mov ax, dx
inc eax
mov si, ax
mov word [0x4b720c], si
movsx eax, dx
imul eax, eax, 0x3af858b5
mov ecx, dword [0x4a126c]
and ecx, eax
mov dword [0x4a126c], ecx
mov eax, esp
lea ecx, [esp + 0x8c8]
mov dword [eax], ecx
lea eax, [esp + 0x1c4]
mov ecx, eax
mov dword [esp + 0xd8], eax
call fcn.00442980
sub esp, 4
mov ecx, esp
mov edi, dword [esp + 0xd8]
mov dword [ecx], edi
lea ecx, [esp + 0x66c]
mov dword [esp + 0xd4], eax
call fcn.00433650
sub esp, 4
mov ecx, dword [esp + 0xd8]
mov dword [esp + 0xd0], eax
call fcn.0043daf0
mov eax, dword [0x4a995c]
and eax, 0xa5c5c37c
mov dword [0x4a995c], eax
cmp dword [esp + 0x234], 0
je 0x42bd65
mov eax, dword [0x4a569c]
mov ecx, eax
inc ecx
mov dword [0x4a569c], ecx
mov ecx, dword [0x49b3dc]
sub ecx, eax
mov dword [0x49b3dc], ecx
mov eax, esp
mov dword [eax + 4], 0x44
mov dword [eax], 0x8fac
call fcn.004489c0
mov dword [esp + 0xa30], eax
mov eax, dword [0x4a6f64]
add eax, 0x293791dc
mov dword [0x4a6f64], eax
mov eax, dword [esp + 0xa30]
mov ecx, esp
mov dword [ecx], eax
lea eax, [esp + 0x1b0]
mov ecx, eax
mov dword [esp + 0xcc], eax
call fcn.00442980
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xcc]
mov dword [ecx], edx
lea ecx, [esp + 0x66c]
mov dword [esp + 0xc8], eax
call fcn.00433650
sub esp, 4
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0xc4], eax
call fcn.0043daf0
mov word [0x4b1fa2], 0x2a15
mov eax, esp
mov dword [eax + 4], 3
mov dword [eax], 0x3009
call fcn.004489c0
mov dword [esp + 0xa2c], eax
mov eax, dword [0x4ad1dc]
cmp eax, 0xaf5ff85b
jl 0x42bc0d
mov eax, dword [0x4ab92c]
mov ecx, dword [0x49fd70]
and ecx, eax
mov dword [0x49fd70], ecx
jmp 0x42bc27
mov eax, dword [0x49f6c0]
not eax
and eax, 0xc63ebd7c
mov ecx, dword [0x4a0330]
or ecx, eax
mov dword [0x4a0330], ecx
mov eax, dword [esp + 0xa30]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0x44
call fcn.004073a0
mov eax, dword [0x49c380]
add eax, 0xc2d67eb1
mov ecx, dword [0x4a775c]
cmp eax, ecx
je 0x42bc65
mov eax, dword [0x49e980]
xor eax, 0x12aa2328
mov dword [0x49e980], eax
mov ecx, dword [esp + 0xa50]
call fcn.0040ea90
mov ecx, dword [esp + 0xa2c]
mov edx, esp
mov dword [edx + 8], eax
mov dword [edx + 4], ecx
lea eax, [esp + 0x244]
mov dword [edx], eax
mov dword [esp + 0xc0], eax
call fcn.004559ef
mov ecx, dword [0x49aa38]
or ecx, 0x1dc6
mov si, word [0x4b3e30]
mov dx, si
and edx, ecx
mov si, dx
mov word [0x4b3e30], si
mov ecx, dword [esp + 0xa2c]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], 3
mov dword [esp + 0xbc], eax
call fcn.004073a0
mov eax, dword [0x4a10c0]
mov ecx, dword [0x49f41c]
xor eax, ecx
xor eax, 0x3684ce3d
mov ecx, dword [0x4a1398]
or ecx, eax
mov dword [0x4a1398], ecx
mov eax, esp
mov ecx, dword [esp + 0xc0]
mov dword [eax], ecx
lea eax, [esp + 0x19c]
mov ecx, eax
mov dword [esp + 0xb8], eax
call fcn.00442980
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xb8]
mov dword [ecx], edx
lea ecx, [esp + 0x66c]
mov dword [esp + 0xb4], eax
call fcn.00433650
sub esp, 4
mov ecx, dword [esp + 0xb8]
mov dword [esp + 0xb0], eax
call fcn.0043daf0
mov si, word [0x4aea3a]
movsx eax, si
mov ecx, dword [0x4ae204]
imul ecx, eax
mov dword [0x4ae204], ecx
mov eax, 0x8ac09af9
mov cx, word [0x4b7934]
mov dx, cx
add edx, 0xbbd32594
mov cx, dx
mov word [0x4b7934], cx
mov edx, esp
mov dword [edx + 4], 5
mov dword [edx], 0x1bbc
mov dword [esp + 0xac], eax
call fcn.004489c0
mov dword [esp + 0xa28], eax
mov eax, dword [0x49c25c]
mov edx, dword [0x4a68b8]
xor eax, edx
mov edx, dword [esp + 0xac]
cmp edx, eax
jg 0x42bdd1
mov eax, dword [0x4a8710]
xor eax, 0xfebfffbf
mov dword [0x4a8710], eax
mov eax, dword [esp + 0xa28]
mov ecx, esp
mov dword [ecx], eax
lea eax, [esp + 0x188]
mov ecx, eax
mov dword [esp + 0xa8], eax
call fcn.00442980
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xa8]
mov dword [ecx], edx
lea ecx, [esp + 0x66c]
mov dword [esp + 0xa4], eax
call fcn.00433650
sub esp, 4
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0xa0], eax
call fcn.0043daf0
mov eax, dword [0x4a660c]
lea eax, [eax*4 + 0x696efd8b]
mov ecx, dword [0x4a2bf0]
or eax, ecx
cmp eax, 0x4028068
jne 0x42be97
mov eax, dword [0x4ab34c]
add eax, 0xd0441ec1
or eax, 0x71742109
cmp eax, 0xed92129c
jg 0x42be83
mov eax, dword [0x4a2304]
add eax, 0x657bdc4a
xor eax, 0xfd98d83b
mov ecx, dword [0x4a449c]
add ecx, eax
mov dword [0x4a449c], ecx
jmp 0x42be92
mov eax, dword [0x4a2730]
xor eax, 0x1a2e681
mov dword [0x4a2730], eax
jmp 0x42be97
mov eax, dword [esp + 0xa28]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 5
call fcn.004073a0
mov eax, dword [0x4acff0]
shr eax, 7
xor eax, 0xa8c5
mov dx, word [0x4ae9d6]
mov cx, dx
sub ecx, eax
mov dx, cx
mov word [0x4ae9d6], dx
cmp dword [esp + 0x234], 0
je 0x42bfa1
mov eax, 0x57ab501c
mov cx, word [0x4b4e36]
mov dx, cx
or edx, 0x8b4f
mov cx, dx
mov word [0x4b4e36], cx
mov edx, dword [esp + 0xa50]
mov esi, esp
mov dword [esi], edx
lea ecx, [esp + 0x66c]
mov dword [esp + 0x9c], eax
call fcn.00433650
sub esp, 4
mov ecx, dword [0x4a884c]
mov edx, ecx
inc edx
mov dword [0x4a884c], edx
imul ecx, ecx, 0xb4fe1631
sub ecx, 0x7632f8e9
mov edx, dword [esp + 0x9c]
cmp edx, ecx
mov dword [esp + 0x98], eax
jl 0x42bf9c
mov eax, dword [0x4a9ff8]
inc eax
mov dword [0x4a9ff8], eax
and eax, 0x5ae828ee
cmp eax, 0xb5eb1ef2
jle 0x42bf97
mov eax, 0xc4d8e783
mov ecx, dword [0x49ed98]
mov edx, ecx
inc edx
mov dword [0x49ed98], edx
xor ecx, 0x900c012
cmp eax, ecx
je 0x42bf92
jmp 0x42bf92
jmp 0x42bf97
jmp 0x42bf9c
jmp 0x42bfa1
mov ax, word [0x4af826]
movsx ecx, ax
not ecx
or ecx, 0x3432ce3a
mov edx, dword [0x4ab064]
xor edx, ecx
mov dword [0x4ab064], edx
mov ecx, dword [0x499fcc]
mov edx, esp
lea esi, [esp + 0x8c8]
mov dword [edx], esi
call ecx
sub esp, 4
mov dword [esp + 0x240], eax
mov eax, dword [0x4a85f0]
add eax, 0x8004402
mov dword [0x4a85f0], eax
cmp dword [esp + 0x240], 0
jne 0x42c047
mov eax, dword [0x4a8c6c]
or eax, 0x7de952e1
cmp eax, 0x88e16f5c
jle 0x42c023
mov eax, dword [0x4a4080]
add eax, 0x25400992
mov dword [0x4a4080], eax
jmp 0x42c042
mov eax, dword [0x4a3edc]
sar eax, 2
add eax, 0xe433671e
mov ecx, dword [0x49cb08]
xor eax, ecx
xor eax, 0x82eda5ba
mov dword [0x49cb08], eax
jmp 0x42d1a1
mov eax, dword [0x4a8004]
and eax, 0x5a010240
mov dword [0x4a8004], eax
xorps xmm0, xmm0
movaps xmmword [esp + 0x680], xmm0
mov cx, word [0x4b0fa8]
mov ax, cx
add eax, 0x3cc89d65
mov cx, ax
mov word [0x4b0fa8], cx
mov word [esp + 0x680], 2
mov eax, dword [0x4abdf4]
xor eax, 0xba55fd92
mov dword [0x4abdf4], eax
mov eax, dword [0x499fd4]
mov edx, dword [0x499fd8]
mov esi, dword [esp + 0x240]
mov esi, dword [esi + 0xc]
mov esi, dword [esi]
mov esi, dword [esi]
mov dword [esp + 0x184], esi
mov esi, dword [esp + 0x184]
mov edi, esp
mov dword [edi], esi
mov dword [esp + 0x94], eax
call edx
sub esp, 4
mov edx, esp
mov dword [edx], eax
mov eax, dword [esp + 0x94]
call eax
sub esp, 4
mov dword [esp + 0x684], eax
mov eax, dword [0x49a9e0]
or eax, 0x11084406
mov dword [0x49a9e0], eax
mov eax, dword [0x499fd0]
movzx edx, word [esp + 0x218]
mov esi, esp
mov dword [esi], edx
call eax
sub esp, 4
mov word [esp + 0x682], ax
mov edx, dword [0x4a265c]
xor edx, 0xfae33520
mov dword [0x4a265c], edx
cmp dword [esp + 0xa54], 0
je 0x42c26e
mov word [0x4b36e8], 0xc037
mov eax, dword [esp + 0xa54]
mov ecx, 0x10624dd3
mul ecx
shr edx, 6
mov eax, esp
mov dword [eax + 4], edx
lea ecx, [esp + 0x680]
mov dword [eax], ecx
call fcn.004102f0
mov dword [esp + 0x69c], eax
mov si, word [0x4b530a]
mov ax, si
imul eax, eax, 0xea2481e9
mov si, ax
mov word [0x4b530a], si
cmp dword [esp + 0x69c], 0
jge 0x42c19e
mov eax, dword [0x4a0f44]
and eax, 0x54000e0e
mov dword [0x4a0f44], eax
jmp 0x42d1a1
mov eax, dword [0x4a11bc]
or eax, 0x658b973e
mov dword [0x4a11bc], eax
mov eax, dword [0x499fec]
mov ecx, dword [esp + 0x69c]
mov edx, esp
lea esi, [esp + 0xa54]
mov dword [edx + 0xc], esi
mov dword [edx], ecx
mov dword [edx + 0x10], 4
mov dword [edx + 8], 0x1006
mov dword [edx + 4], 0xffff
mov dword [esp + 0x90], esi
call eax
sub esp, 0x14
mov ecx, dword [0x4a3d74]
add ecx, 0x7eb33275
mov dword [0x4a3d74], ecx
mov ecx, dword [0x499fec]
mov edx, dword [esp + 0x69c]
mov esi, esp
mov edi, dword [esp + 0x90]
mov dword [esi + 0xc], edi
mov dword [esi], edx
mov dword [esi + 0x10], 4
mov dword [esi + 8], 0x1005
mov dword [esi + 4], 0xffff
mov dword [esp + 0x8c], eax
call ecx
sub esp, 0x14
mov bx, word [0x4aee00]
mov cx, bx
inc ecx
mov si, cx
mov word [0x4aee00], si
movsx ecx, bx
xor ecx, 0x83c655a0
mov edx, dword [0x49b294]
sub edx, ecx
mov dword [0x49b294], edx
mov dword [esp + 0x88], eax
jmp 0x42c390
mov eax, 0x31340089
mov ecx, dword [0x49dfd4]
cmp eax, ecx
jle 0x42c29a
mov eax, dword [0x49e014]
xor eax, 0x1480682a
mov ecx, dword [0x49d77c]
imul ecx, eax
mov dword [0x49d77c], ecx
mov eax, dword [0x499ff0]
mov ecx, esp
mov dword [ecx + 8], 6
mov dword [ecx + 4], 1
mov dword [ecx], 2
call eax
sub esp, 0xc
mov dword [esp + 0x69c], eax
mov eax, dword [0x4a3cb0]
and eax, 0xb56b99e2
mov dword [0x4a3cb0], eax
cmp dword [esp + 0x69c], 0xffffffff
jne 0x42c2fb
mov ax, word [0x4b3fd8]
mov cx, ax
imul ecx, ecx, 0x87cfb13e
mov ax, cx
mov word [0x4b3fd8], ax
jmp 0x42d1a1
mov eax, dword [0x4a48ec]
sub eax, 0x6fbd5f1d
cmp eax, 0x7ade5fde
jge 0x42c31a
mov dword [0x49cd7c], 0x8d7a3d39
lea eax, [esp + 0x680]
mov ecx, dword [0x499fc8]
mov edx, dword [esp + 0x69c]
mov esi, esp
mov dword [esi + 4], eax
mov dword [esi], edx
mov dword [esi + 8], 0x10
call ecx
sub esp, 0xc
cmp eax, 0xffffffff
jne 0x42c366
mov eax, dword [0x4a1f4c]
mov ecx, dword [0x4a2610]
xor eax, ecx
xor eax, 0x87834b6e
mov dword [0x4a2610], eax
jmp 0x42d115
mov eax, dword [0x4a5630]
mov ecx, dword [0x49bd14]
mov edx, ecx
dec edx
mov dword [0x49bd14], edx
and eax, ecx
or eax, 0xd369094b
mov ecx, dword [0x4a3f2c]
imul ecx, eax
mov dword [0x4a3f2c], ecx
mov eax, 0x4ee0832a
mov ecx, dword [0x4a7c54]
sar ecx, 1
sub ecx, 0x4f8a4cac
cmp eax, ecx
je 0x42c3bc
mov eax, dword [0x49bee4]
imul eax, eax, 0x94d8123c
mov dword [0x49bee4], eax
mov eax, dword [0x499fe8]
lea ecx, [esp + 0x66c]
mov dword [esp + 0x84], ecx
mov dword [esp + 0x80], eax
call fcn.0040ea90
mov ecx, dword [esp + 0x84]
mov dword [esp + 0x7c], eax
call fcn.00442da0
mov ecx, dword [esp + 0x69c]
mov edx, esp
mov esi, dword [esp + 0x7c]
mov dword [edx + 8], esi
mov dword [edx + 4], eax
mov dword [edx], ecx
mov dword [edx + 0xc], 0
mov eax, dword [esp + 0x80]
call eax
sub esp, 0x10
mov dword [esp + 0x698], eax
mov di, word [0x4b1306]
mov ax, di
inc eax
mov di, ax
mov word [0x4b1306], di
movsx eax, di
add eax, 0x67772abf
xor eax, 0x36e4ecbb
mov ecx, dword [0x49b198]
xor ecx, 0xffffffff
xor ecx, 0x8591e495
cmp eax, ecx
jle 0x42c4a0
mov eax, 0x2d436b9b
mov ecx, dword [0x4a29d0]
imul ecx, ecx, 0xe2491665
and ecx, 0xb6b6ff6d
cmp eax, ecx
jl 0x42c49b
mov eax, 0x735bbd06
mov cx, word [0x4b51ac]
movsx edx, cx
xor edx, 0xffffffff
cmp eax, edx
je 0x42c491
jmp 0x42c496
jmp 0x42c496
jmp 0x42c49b
jmp 0x42c4a0
lea eax, [esp + 0x66c]
mov ecx, dword [esp + 0x698]
mov dword [esp + 0x78], ecx
mov ecx, eax
call fcn.0040ea90
mov ecx, dword [esp + 0x78]
cmp ecx, eax
jae 0x42c561
mov eax, 0x52585b67
mov cx, word [0x4b67b4]
mov dx, cx
inc edx
mov si, dx
mov word [0x4b67b4], si
movsx edx, cx
xor edx, 0xae5321ca
or edx, 0xf1f66cfb
cmp eax, edx
jle 0x42c55c
mov eax, dword [0x4a7084]
sar eax, 9
imul eax, eax, 0x6e155040
mov ecx, dword [0x49f128]
mov edx, ecx
dec edx
mov dword [0x49f128], edx
add ecx, 0xf5120c89
or ecx, 0x58ea3883
cmp eax, ecx
jge 0x42c557
mov eax, 0xd387b884
mov ecx, dword [0x4a7ecc]
inc ecx
mov dword [0x4a7ecc], ecx
sub ecx, 0x8b124171
or ecx, 0x6e6e2a5d
cmp eax, ecx
je 0x42c552
jmp 0x42c552
jmp 0x42c557
jmp 0x42c55c
jmp 0x42d115
mov ax, word [0x4b603a]
movsx ecx, ax
sar ecx, 2
mov edx, dword [0x4aa180]
dec edx
mov dword [0x4aa180], edx
or ecx, edx
or ecx, 0xa1607212
mov edx, dword [0x4a3eb4]
sub edx, ecx
mov dword [0x4a3eb4], edx
mov ecx, dword [esp + 0xa50]
call fcn.00427af0
mov ecx, dword [0x4a63bc]
mov edx, dword [0x4aad5c]
imul edx, ecx
shl edx, 0xf
add edx, 0x896decb8
mov ecx, dword [0x4aa1c8]
sub ecx, edx
mov dword [0x4aa1c8], ecx
mov eax, dword [0x4a0a44]
sar eax, 8
imul eax, eax, 0xb3ca7609
or eax, 0x5316de15
mov ecx, dword [0x4a1f3c]
imul ecx, eax
mov dword [0x4a1f3c], ecx
mov eax, dword [0x499fe0]
mov ecx, dword [esp + 0x69c]
mov edx, esp
lea esi, [esp + 0x244]
mov dword [edx + 4], esi
mov dword [edx], ecx
mov dword [edx + 0xc], 0
mov dword [edx + 8], 0x400
call eax
sub esp, 0x10
mov dword [esp + 0x698], eax
mov eax, dword [0x4a1650]
xor eax, 0xf3ebffaf
mov dword [0x4a1650], eax
cmp dword [esp + 0x698], 0
jle 0x42c658
mov eax, dword [esp + 0x228]
mov ecx, dword [esp + 0x22c]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], eax
call fcn.00413c10
cmp eax, 0
je 0x42c67a
mov ax, word [0x4b1c1a]
mov cx, ax
inc ecx
mov dx, cx
mov word [0x4b1c1a], dx
movsx ecx, ax
mov dword [0x4a342c], ecx
jmp 0x42cf32
mov eax, dword [0x4a5930]
and eax, 0x561a17c9
mov dword [0x4a5930], eax
mov eax, dword [esp + 0xa50]
mov ecx, eax
mov dword [esp + 0x74], eax
call fcn.0040ea90
mov ecx, dword [esp + 0x698]
add eax, ecx
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x74]
call fcn.00440c80
sub esp, 8
mov eax, dword [0x4aa44c]
add eax, 0x7ab0c058
mov dword [0x4aa44c], eax
mov eax, dword [esp + 0xa50]
mov ecx, eax
call fcn.00428f50
cmp eax, 0
jne 0x42c6f5
mov eax, dword [0x4a7598]
xor eax, 0x82a45af
mov dword [0x4a7598], eax
jmp 0x42cf32
mov eax, 0xc4fcad56
mov ecx, dword [0x4a8354]
add ecx, 0xb6e46834
mov dword [0x4a8354], ecx
mov ecx, dword [esp + 0xa50]
mov edx, dword [esp + 0x698]
mov esi, esp
mov dword [esi + 4], edx
lea edx, [esp + 0x244]
mov dword [esi], edx
mov dword [esp + 0x70], eax
call fcn.0043def0
sub esp, 8
mov di, word [0x4b3750]
mov cx, di
dec ecx
mov di, cx
mov word [0x4b3750], di
movsx ecx, di
mov edx, dword [esp + 0x70]
cmp edx, ecx
mov dword [esp + 0x6c], eax
je 0x42c76b
mov eax, dword [0x49b530]
or eax, 0xdad2f65
mov dword [0x49b530], eax
cmp dword [esp + 0x220], 0
jge 0x42caf0
mov eax, dword [0x49bef8]
mov ecx, eax
inc ecx
mov dword [0x49bef8], ecx
add eax, 0xaf906bf8
mov ecx, dword [0x4a3f74]
xor ecx, eax
mov dword [0x4a3f74], ecx
mov eax, esp
mov dword [eax + 4], 5
mov dword [eax], 0x1bbc
call fcn.004489c0
mov dword [esp + 0xa24], eax
mov eax, dword [0x4ae218]
xor eax, 0x4a3ead7f
mov ecx, dword [0x4a04a0]
or ecx, eax
mov dword [0x4a04a0], ecx
mov ecx, dword [esp + 0xa50]
mov eax, dword [esp + 0xa24]
mov edx, esp
mov dword [edx], eax
lea eax, [esp + 0x170]
mov dword [esp + 0x68], ecx
mov ecx, eax
mov dword [esp + 0x64], eax
call fcn.0041b1f0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x64]
mov dword [ecx], edx
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x60], eax
call fcn.00442360
sub esp, 8
mov dword [esp + 0x220], eax
mov ecx, dword [esp + 0x64]
call fcn.0041d260
mov si, word [0x4b11f8]
movsx eax, si
mov ecx, dword [0x4ab18c]
sub ecx, eax
mov dword [0x4ab18c], ecx
mov eax, dword [esp + 0xa24]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 5
call fcn.004073a0
mov eax, dword [0x49f9ec]
mov ecx, eax
inc ecx
mov dword [0x49f9ec], ecx
add eax, 0x2a32fa8f
xor eax, 0xd51b
mov si, word [0x4afbc0]
mov cx, si
sub ecx, eax
mov si, cx
mov word [0x4afbc0], si
cmp dword [esp + 0x220], 0
jl 0x42cad0
mov eax, 0x5e08f85f
mov cx, word [0x4b668e]
mov dx, cx
dec edx
mov cx, dx
mov word [0x4b668e], cx
movsx edx, cx
mov esi, dword [0x49cc8c]
xor edx, esi
mov esi, dword [0x4a9cbc]
add esi, edx
mov dword [0x4a9cbc], esi
mov edx, dword [esp + 0x220]
add edx, 4
mov dword [esp + 0x220], edx
mov edx, dword [0x4a05a4]
add edx, 0x57f196c7
mov dword [0x4a05a4], edx
mov edx, dword [esp + 0xa50]
mov esi, esp
mov dword [esi], edx
mov dword [esp + 0x5c], eax
call fcn.0040d660
mov dword [esp + 0x21c], eax
mov eax, dword [0x49cd80]
sub eax, 0xf76be1c7
xor eax, 0xf1e6c86
mov edx, dword [esp + 0x5c]
cmp edx, eax
jle 0x42c931
mov eax, dword [0x49a57c]
mov ecx, dword [0x4ac7dc]
sub ecx, eax
mov dword [0x4ac7dc], ecx
cmp dword [esp + 0x21c], 0
jge 0x42ca80
mov eax, 0x197a9b06
mov cx, word [0x4b2c40]
movsx edx, cx
cmp eax, edx
jl 0x42c960
mov dword [0x4a2bf8], 0x61433efd
mov eax, esp
mov dword [eax + 4], 0xb
mov dword [eax], 0x780c
call fcn.004489c0
mov dword [esp + 0xa20], eax
mov cx, word [0x4b36fc]
mov ax, cx
add eax, 0xe85692c4
mov cx, ax
mov word [0x4b36fc], cx
mov ecx, dword [esp + 0xa50]
mov eax, dword [esp + 0xa20]
mov edx, esp
mov dword [edx], eax
lea eax, [esp + 0x15c]
mov dword [esp + 0x58], ecx
mov ecx, eax
mov dword [esp + 0x54], eax
call fcn.0041b1f0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x54]
mov dword [ecx], edx
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x50], eax
call fcn.00442360
sub esp, 8
mov dword [esp + 0x698], eax
mov ecx, dword [esp + 0x54]
call fcn.0041d260
mov eax, dword [0x4ac4ec]
and eax, 0xc402b81a
mov ecx, dword [0x4a08f4]
xor ecx, eax
mov dword [0x4a08f4], ecx
mov eax, dword [esp + 0xa20]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0xb
call fcn.004073a0
mov dword [0x4aa9b4], 0xf651b6b2
cmp dword [esp + 0x698], 0
jl 0x42ca68
mov eax, 0x4d3260a5
mov ecx, dword [0x4ad998]
add ecx, 0xb4f78b58
or ecx, 0x4a2b70a5
cmp eax, ecx
jne 0x42ca63
mov eax, dword [0x4a22ec]
xor eax, 0x7cf1858
mov dword [0x4a22ec], eax
jmp 0x42cf32
mov ax, word [0x4af92e]
mov cx, ax
and ecx, 0xdc6b
mov ax, cx
mov word [0x4af92e], ax
mov eax, dword [0x49b854]
inc eax
mov dword [0x49b854], eax
xor eax, 0xedcc3f88
mov ecx, dword [0x4aa060]
mov edx, ecx
inc edx
mov dword [0x4aa060], edx
and ecx, 0xb12ff103
or ecx, 0x21154e17
cmp eax, ecx
jg 0x42cacb
mov eax, dword [0x4a9144]
mov ecx, eax
inc ecx
mov dword [0x4a9144], ecx
add eax, 0xe9c1d192
mov dword [0x4a4778], eax
jmp 0x42cad0
mov eax, dword [0x4a00f8]
not eax
imul eax, eax, 0x1618a3df
xor eax, 0x3bd31e8e
mov ecx, dword [0x4a3b7c]
and ecx, eax
mov dword [0x4a3b7c], ecx
mov ax, word [0x4b4b02]
mov cx, ax
imul ecx, ecx, 0x180400
mov ax, cx
mov word [0x4b4b02], ax
cmp dword [esp + 0x21c], 0
jl 0x42cbc1
mov eax, 0x6461d1ad
mov ecx, dword [0x4a39e8]
inc ecx
mov dword [0x4a39e8], ecx
cmp eax, ecx
je 0x42cb48
mov ax, word [0x4b79b0]
mov cx, ax
imul ecx, ecx, 0x3d2050bf
mov ax, cx
mov word [0x4b79b0], ax
mov eax, dword [esp + 0xa50]
mov ecx, eax
call fcn.0040ea90
sub eax, dword [esp + 0x220]
cmp eax, dword [esp + 0x21c]
jb 0x42cb87
mov ax, word [0x4b32f4]
mov cx, ax
add ecx, 0x460abbcc
mov ax, cx
mov word [0x4b32f4], ax
jmp 0x42cf32
mov eax, dword [0x4abfa8]
mov cx, word [0x4b1172]
mov dx, cx
dec edx
mov cx, dx
mov word [0x4b1172], cx
movsx edx, cx
imul eax, edx
cmp eax, 0x93516180
jle 0x42cbbc
mov eax, dword [0x49d960]
mov dword [0x49d960], eax
jmp 0x42cbc1
mov eax, dword [0x49c6a0]
imul eax, eax, 0x5a9214
mov dword [0x49c6a0], eax
cmp dword [esp + 0xa58], 0
je 0x42ce6b
test byte [esp + 0x217], 1
jne 0x42ce6b
mov eax, dword [0x4a7a9c]
inc eax
mov dword [0x4a7a9c], eax
mov cx, word [0x4aee96]
mov dx, cx
xor edx, eax
mov cx, dx
mov word [0x4aee96], cx
mov eax, dword [esp + 0xa50]
mov ecx, eax
call fcn.0040ea90
cmp eax, 0x4000
jbe 0x42ce4d
mov eax, 0x6eecc636
mov cx, word [0x4b7ac6]
mov dx, cx
and edx, 0xcf99
mov cx, word [0x4b1912]
mov si, cx
or esi, edx
mov cx, si
mov word [0x4b1912], cx
mov byte [esp + 0x217], 1
mov edx, dword [0x49cdf8]
sar edx, 5
sub eax, edx
or eax, 0x8c4d8479
cmp eax, 0xf3812d21
je 0x42cc84
mov eax, dword [0x4aaaa4]
and eax, 0x87889c8e
mov dword [0x4aaaa4], eax
mov eax, dword [esp + 0xa50]
mov ecx, esp
mov dword [ecx], eax
lea ecx, [esp + 0x148]
call fcn.004165b0
sub esp, 4
mov ecx, dword [0x4a1ab4]
and ecx, 0x5787323f
mov dword [0x4a1ab4], ecx
cmp dword [esp + 0x220], 0
mov dword [esp + 0x4c], eax
jl 0x42cd48
mov eax, dword [0x4a10d8]
shl eax, 2
mov ecx, dword [0x49d3dc]
dec ecx
mov dword [0x49d3dc], ecx
imul ecx, ecx, 0x52dc6e28
and eax, ecx
mov ecx, dword [0x49a6f0]
and ecx, eax
mov dword [0x49a6f0], ecx
mov eax, dword [esp + 0x220]
mov ecx, esp
mov dword [ecx], 0
lea ecx, [esp + 0x148]
mov dword [esp + 0x48], ecx
mov dword [esp + 0x44], eax
call fcn.0041e7f0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x44]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov ecx, dword [esp + 0x48]
call fcn.00448640
sub esp, 8
mov ecx, dword [0x4a45c8]
or ecx, 0xa78bebcd
mov edx, dword [0x4a3724]
sub edx, ecx
mov dword [0x4a3724], edx
mov dword [esp + 0x40], eax
lea eax, [esp + 0x148]
lea ecx, [esp + 0x8c8]
mov edx, dword [0x49d108]
and edx, 0xaf9fdd86
mov dword [0x49d108], edx
mov edx, dword [esp + 0xa58]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.0044c530
cmp eax, 0
jne 0x42cdeb
mov eax, dword [0x4aa02c]
imul eax, eax, 0x285e6e17
mov ecx, dword [0x4aa374]
lea eax, [eax + ecx + 0x14febc8b]
mov dword [0x4aa374], eax
mov dword [esp + 0x220], 0xffffffff
mov eax, dword [0x4acaa4]
imul eax, eax, 0xd0d2e10c
mov dword [0x4acaa4], eax
mov ecx, dword [esp + 0xa50]
call fcn.00427af0
mov eax, dword [0x4a9da8]
xor eax, 0xaccd94b
mov dword [0x4a9da8], eax
mov dword [esp + 0x144], 0xd
jmp 0x42ce0e
mov ax, word [0x4b1cec]
mov cx, ax
or ecx, 0xa184
mov ax, cx
mov word [0x4b1cec], ax
mov dword [esp + 0x144], 0
lea ecx, [esp + 0x148]
call fcn.0043daf0
mov ecx, dword [esp + 0x144]
test ecx, ecx
mov dword [esp + 0x3c], ecx
je 0x42ce48
jmp 0x42ce32
mov eax, dword [esp + 0x3c]
sub eax, 0xd
mov dword [esp + 0x38], eax
je 0x42cf32
jmp 0x42d363
jmp 0x42ce4d
mov eax, dword [0x49e11c]
dec eax
mov dword [0x49e11c], eax
and eax, 0x7ff81622
mov ecx, dword [0x4a8c60]
or ecx, eax
mov dword [0x4a8c60], ecx
mov eax, 0xb6787b5f
mov cx, word [0x4b487e]
movsx edx, cx
xor edx, 0xffffffff
add edx, 0x353d53d5
xor edx, 0xb7a832d0
cmp eax, edx
jle 0x42cea9
mov eax, dword [0x4ab768]
add eax, 0xa980d65e
mov ecx, dword [0x49ec60]
sub ecx, eax
mov dword [0x49ec60], ecx
cmp dword [esp + 0xa54], 0x3ad1
jne 0x42cf1e
mov ax, word [0x4aec30]
movsx ecx, ax
xor ecx, 0x7cb0fa7d
mov edx, dword [0x4a2084]
or edx, ecx
mov dword [0x4a2084], edx
mov ecx, dword [esp + 0xa50]
call fcn.0040ea90
cmp eax, 0x500000
jbe 0x42cf0b
mov ax, word [0x4b12f4]
mov cx, ax
add ecx, 0xea616aaa
mov ax, cx
mov word [0x4b12f4], ax
jmp 0x42cf32
mov eax, dword [0x4a06dc]
mov ecx, eax
inc ecx
mov dword [0x4a06dc], ecx
mov dword [0x4ac5d4], eax
mov eax, dword [0x4ac160]
add eax, 0x8dffffd6
mov dword [0x4ac160], eax
jmp 0x42c5c2
mov eax, dword [0x49ff58]
imul eax, eax, 0x9b7941ad
add eax, 0xba44cc6
mov cx, word [0x4b627c]
mov dx, cx
sub edx, eax
mov cx, dx
mov word [0x4b627c], cx
cmp dword [esp + 0x220], 0
jl 0x42cfd9
mov ax, word [0x4b14ba]
mov cx, ax
xor ecx, 0xea12
mov ax, cx
mov word [0x4b14ba], ax
mov ecx, dword [esp + 0xa50]
mov edx, dword [esp + 0x220]
mov esi, esp
mov dword [esi], 0
mov dword [esp + 0x34], ecx
mov dword [esp + 0x30], edx
call fcn.0041e7f0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x30]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov ecx, dword [esp + 0x34]
call fcn.00448640
sub esp, 8
mov di, word [0x4af68a]
mov cx, di
add ecx, 0x8b75c079
mov di, cx
mov word [0x4af68a], di
mov dword [esp + 0x2c], eax
mov eax, dword [0x4ab208]
add eax, 0x1d07b2b5
mov dword [0x4ab208], eax
cmp dword [esp + 0xa58], 0
je 0x42d0f8
test byte [esp + 0x217], 1
jne 0x42d0f8
lea eax, [esp + 0x8c8]
mov cx, word [0x4b1bf8]
mov dx, cx
mov esi, dword [0x4a4e70]
shr esi, 0xa
xor esi, 0x4113
or edx, esi
mov cx, word [0x4b015a]
mov si, cx
add esi, edx
mov cx, si
mov word [0x4b015a], cx
mov edx, dword [esp + 0xa58]
mov esi, dword [esp + 0xa50]
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.0044c530
cmp eax, 0
jne 0x42d093
mov eax, dword [0x49eea0]
xor eax, 0x8420ac40
mov dword [0x49eea0], eax
mov ecx, dword [esp + 0xa50]
call fcn.00427af0
mov eax, dword [0x4a6988]
not eax
mov ecx, dword [0x4ad24c]
or ecx, eax
mov dword [0x4ad24c], ecx
mov eax, 0x3306c3db
mov ecx, dword [0x4ac39c]
shl ecx, 6
mov edx, dword [0x4a1930]
mov esi, edx
dec esi
mov dword [0x4a1930], esi
or ecx, edx
cmp eax, ecx
jle 0x42d0f3
mov eax, dword [0x4ace08]
imul eax, eax, 0x11333bd8
and eax, 0x3c2f1128
mov ecx, dword [0x49a4a4]
inc ecx
mov dword [0x49a4a4], ecx
cmp eax, ecx
jge 0x42d0ee
mov eax, dword [0x4a3f9c]
or eax, 0xd9028210
mov dword [0x4a3f9c], eax
jmp 0x42d0f3
jmp 0x42d0f8
mov ax, word [0x4b137a]
movsx ecx, ax
and ecx, 0x3cc0b670
mov edx, dword [0x4a54c8]
or edx, ecx
mov dword [0x4a54c8], edx
mov eax, dword [0x499ff8]
mov ecx, dword [esp + 0x69c]
mov edx, esp
mov dword [edx], ecx
mov dword [edx + 4], 2
call eax
sub esp, 8
mov ecx, dword [0x49e2b4]
mov si, word [0x4b2386]
mov dx, si
lea ecx, [ecx + edx + 0x56390f16]
mov si, cx
mov word [0x4b2386], si
mov ecx, dword [0x499fc4]
mov edx, dword [esp + 0x69c]
mov edi, esp
mov dword [edi], edx
mov dword [esp + 0x28], eax
call ecx
sub esp, 4
mov ecx, dword [0x49fb18]
mov edx, ecx
inc edx
mov dword [0x49fb18], edx
xor ecx, 0x408
or ecx, 0x9a57
mov si, word [0x4b2ed8]
mov dx, si
add edx, ecx
mov si, dx
mov word [0x4b2ed8], si
mov dword [esp + 0x24], eax
mov eax, 0xe9451598
mov ecx, esp
lea edx, [esp + 0x8c8]
mov dword [ecx], edx
mov dword [ecx + 4], 0xa8
mov dword [esp + 0x20], eax
call fcn.0041de80
mov eax, dword [0x4ab900]
sar eax, 9
mov ecx, dword [esp + 0x20]
cmp ecx, eax
jge 0x42d1ed
mov ax, word [0x4b55a2]
mov cx, ax
xor ecx, 0xdfde
mov ax, cx
mov word [0x4b55a2], ax
mov eax, 0xd849f490
mov ecx, esp
lea edx, [esp + 0x970]
mov dword [ecx], edx
mov dword [ecx + 4], 0xa8
mov dword [esp + 0x1c], eax
call fcn.0041de80
mov eax, dword [0x4a5e84]
inc eax
mov dword [0x4a5e84], eax
mov ecx, dword [0x4a7774]
sar ecx, 2
sub eax, ecx
mov ecx, dword [esp + 0x1c]
cmp ecx, eax
jge 0x42d26d
mov eax, dword [0x4a1910]
xor eax, 0xffffffff
xor eax, 0x551099a8
cmp eax, 0x82d4499d
je 0x42d268
mov eax, dword [0x49b1d8]
add eax, 0xf08ff7e9
mov cx, word [0x4b06ac]
mov dx, cx
imul edx, eax
mov cx, dx
mov word [0x4b06ac], cx
jmp 0x42d26d
mov eax, 0x8ac33d64
mov ecx, esp
lea edx, [esp + 0x6a0]
mov dword [ecx], edx
mov dword [ecx + 4], 0x228
mov dword [esp + 0x18], eax
call fcn.0041de80
mov si, word [0x4b78be]
movsx eax, si
sar eax, 4
mov ecx, dword [esp + 0x18]
cmp ecx, eax
je 0x42d2cb
mov eax, dword [0x4ab994]
and eax, 0x6ba3
mov cx, word [0x4b41d4]
mov dx, cx
xor edx, eax
mov cx, dx
mov word [0x4b41d4], cx
jmp 0x42d31f
mov eax, 0x4b2e40e9
mov cx, word [0x4b0cd4]
movsx edx, cx
sub eax, edx
cmp eax, 0xffffffff
jle 0x42d2f9
mov eax, dword [0x4ac4b4]
and eax, 0xf217f350
mov dword [0x4ac4b4], eax
jmp 0x42d31a
mov eax, 0x3fcddf72
mov cx, word [0x4b1c6e]
movsx edx, cx
cmp eax, edx
jle 0x42d315
jmp 0x42d315
jmp 0x42d31a
jmp 0x42d31f
mov eax, esp
lea ecx, [esp + 0x244]
mov dword [eax], ecx
mov dword [eax + 4], 0x428
call fcn.0041de80
mov eax, dword [0x4a7a34]
xor eax, 0xcd832d3d
mov ecx, dword [0x4a81cc]
imul ecx, eax
mov dword [0x4a81cc], ecx
lea ecx, [esp + 0x66c]
call fcn.0043daf0
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
int3