Function at 0x4273e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0xaf0
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov dword [esp + 0xae8], eax
mov dword [esp + 0xae4], ecx
mov dword [esp + 0xae0], edx
mov dword [esp + 0xadc], esi
mov dword [esp + 0xad8], edi
mov bx, word [0x49d034]
movsx eax, bx
sar eax, 4
imul eax, eax, 0x264341b4
mov ecx, dword [0x490430]
add ecx, eax
mov dword [0x490430], ecx
mov eax, esp
mov dword [eax + 4], 8
mov dword [eax], 0x42a2
call fcn.00440380
mov dword [esp + 0xad4], eax
mov bx, word [0x4977cc]
mov ax, bx
inc eax
mov si, ax
mov word [0x4977cc], si
movsx eax, bx
mov ecx, dword [0x495f78]
mov edx, ecx
inc edx
mov dword [0x495f78], edx
lea eax, [eax + ecx + 0x1ecb1561]
mov dword [0x4957f0], eax
mov eax, dword [esp + 0xad4]
mov ecx, dword [esp + 0xad8]
mov edx, esp
mov dword [edx + 4], eax
mov dword [edx], ecx
call fcn.00455c10
mov dword [esp + 0xaac], eax
mov eax, dword [0x491e2c]
add eax, 0x2200010f
mov dword [0x491e2c], eax
mov eax, dword [esp + 0xad4]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 8
call fcn.00436780
mov eax, dword [0x490668]
xor eax, 0x218a
or eax, 0x9e25
mov si, word [0x497680]
mov cx, si
and ecx, eax
mov si, cx
mov word [0x497680], si
cmp dword [esp + 0xaac], 0
jne 0x42760f
mov ax, word [0x498ad2]
mov cx, ax
or ecx, 0x2371
mov ax, cx
mov word [0x498ad2], ax
cmp dword [esp + 0xae8], 0
je 0x42755f
mov eax, dword [0x492dfc]
add eax, 0x458c0e5e
mov dword [0x492dfc], eax
mov ecx, dword [esp + 0xae0]
call fcn.00411050
mov eax, dword [0x491eec]
and eax, 0x3fc9c1bf
mov dword [0x491eec], eax
jmp 0x429e10
mov ax, word [0x49ac2c]
mov cx, ax
imul ecx, ecx, 0xc0cd7700
mov ax, cx
mov word [0x49ac2c], ax
mov ecx, dword [esp + 0xae0]
mov edx, dword [esp + 0xadc]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
call fcn.00419c50
mov dword [esp + 0xaa8], eax
mov eax, dword [0x48afcc]
imul eax, eax, 0x9ce8caf7
mov dword [0x48afcc], eax
cmp dword [esp + 0xaa8], 0
jg 0x4275fa
mov eax, dword [0x490b24]
inc eax
mov dword [0x490b24], eax
imul eax, eax, 0xf3071e59
mov ecx, dword [0x4961ec]
not ecx
sub eax, ecx
mov ecx, dword [0x493308]
add ecx, eax
mov dword [0x493308], ecx
mov ecx, dword [esp + 0xae0]
call fcn.00411050
mov eax, dword [0x48e954]
add eax, 0xf77feffe
mov dword [0x48e954], eax
mov eax, dword [0x48ffdc]
imul eax, eax, 0x435f698f
mov dword [0x48ffdc], eax
jmp 0x429e10
mov eax, 0x23f1969e
mov cx, word [0x49b51e]
mov dx, cx
add edx, 0x2d43e52c
mov cx, dx
mov word [0x49b51e], cx
mov edx, dword [0x48acf8]
imul edx, edx, 0xe0e0a636
mov dword [0x48acf8], edx
mov edx, dword [0x48e5d4]
and edx, 0xf1c11f99
mov dword [0x48e5d4], edx
mov cx, word [0x49c9c0]
mov dx, cx
add edx, 0x104a2201
mov cx, dx
mov word [0x49c9c0], cx
mov edx, dword [0x48e294]
sar edx, 6
mov esi, dword [0x493cb4]
add esi, edx
mov dword [0x493cb4], esi
mov cx, word [0x497cfe]
mov dx, cx
inc edx
mov di, dx
mov word [0x497cfe], di
movsx edx, cx
add edx, 0xd512a022
or edx, 0x2f8c836c
mov esi, dword [0x48f1c4]
sub esi, edx
mov dword [0x48f1c4], esi
mov cx, word [0x49c9f0]
movsx edx, cx
imul edx, edx, 0x52730af1
mov cx, word [0x497bdc]
mov si, cx
inc esi
mov di, si
mov word [0x497bdc], di
movsx esi, cx
and edx, esi
mov esi, dword [0x492bd0]
xor esi, edx
mov dword [0x492bd0], esi
lea ecx, [esp + 0x67c]
mov dword [esp + 0x128], eax
call fcn.00401450
mov dword [0x48f490], 0x4b4bac60
mov di, word [0x49ba06]
movsx ecx, di
not ecx
or ecx, 0x15868c5a
and ecx, 0x7dafad7e
mov edx, dword [0x48d2c8]
imul edx, ecx
mov dword [0x48d2c8], edx
mov ecx, dword [0x493240]
mov edx, ecx
dec edx
mov dword [0x493240], edx
mov edx, dword [esp + 0x128]
cmp edx, ecx
mov dword [esp + 0x124], eax
jl 0x4277b8
mov eax, 0x3e654d9b
mov ecx, dword [0x4934d8]
cmp eax, ecx
jne 0x42778c
mov eax, 0xf15fcb03
mov ecx, dword [0x48aad8]
sub ecx, 0x266482ca
cmp eax, ecx
jle 0x427787
jmp 0x427787
jmp 0x4277b3
mov eax, dword [0x494c58]
dec eax
mov dword [0x494c58], eax
mov ecx, dword [0x48d9dc]
and ecx, 0xba225fa3
xor eax, ecx
mov ecx, dword [0x48b608]
and ecx, eax
mov dword [0x48b608], ecx
jmp 0x4277b8
mov eax, dword [0x492818]
imul eax, eax, 0xf7dcbc7c
mov dword [0x492818], eax
mov dword [esp + 0x214], 0
mov dword [esp + 0x210], 0
mov cx, word [0x497900]
mov ax, cx
and eax, 0x7f29
mov cx, ax
mov word [0x497900], cx
mov eax, dword [0x48bff0]
or eax, 0x5982eb23
mov edx, dword [0x491108]
and edx, eax
mov dword [0x491108], edx
mov dword [esp + 0x208], 0xffffffff
mov dword [esp + 0x204], 0xffffffff
mov eax, dword [0x491b54]
add eax, 0xb807b6a1
mov dword [0x491b54], eax
mov dword [esp + 0x200], 0x50
mov cx, word [0x497a1a]
mov ax, cx
add eax, 0xd1aff166
mov cx, ax
mov word [0x497a1a], cx
mov byte [esp + 0x1ff], 0
mov dword [0x493ab0], 0x24bc8188
mov eax, esp
mov dword [eax], 0
call fcn.00451a60
add eax, 0x258
adc edx, 0
mov dword [esp + 0x210], eax
mov dword [esp + 0x214], edx
mov eax, dword [0x494404]
add eax, 0xfee0dfd9
mov dword [0x494404], eax
mov byte [esp + 0x6b2], 0
mov eax, dword [0x491178]
dec eax
mov dword [0x491178], eax
mov edx, dword [0x48d690]
xor edx, eax
mov dword [0x48d690], edx
mov eax, dword [esp + 0xad8]
mov edx, esp
mov dword [edx], eax
call fcn.00452ac0
mov dword [esp + 0x220], eax
mov cx, word [0x49a526]
movsx eax, cx
mov edx, dword [0x4923ec]
add edx, eax
mov dword [0x4923ec], edx
cmp dword [esp + 0x220], 0x7f
jle 0x42792e
mov ax, word [0x497c40]
mov cx, ax
mov edx, ecx
inc edx
mov ax, dx
mov word [0x497c40], ax
and ecx, 0x4ff2
mov ax, word [0x4986d2]
mov dx, ax
xor edx, ecx
mov ax, dx
mov word [0x4986d2], ax
jmp 0x429cd6
mov ax, word [0x49be22]
mov cx, ax
add ecx, 0xbd720bb8
mov ax, cx
mov word [0x49be22], ax
mov ecx, dword [esp + 0xad8]
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [esp + 0x9d6]
mov dword [edx], ecx
call fcn.00455ca0
mov ecx, dword [0x48cb50]
xor ecx, 0xb2c678dc
mov dword [0x48cb50], ecx
mov ecx, dword [esp + 0x220]
sub ecx, 1
mov dword [esp + 0x21c], ecx
mov dword [esp + 0x120], eax
mov eax, dword [esp + 0x21c]
mov ecx, dword [esp + 0x220]
sub ecx, 6
cmp eax, ecx
jl 0x427b5b
mov ax, word [0x497984]
mov cx, ax
add ecx, 0xf9b1ebf
mov ax, cx
mov word [0x497984], ax
mov ecx, dword [esp + 0x21c]
movsx ecx, byte [esp + ecx + 0x9d6]
cmp ecx, 0x3a
jne 0x427b24
mov eax, 0x25ae8fae
mov ecx, dword [0x48db2c]
shl ecx, 6
mov edx, dword [0x48f680]
and ecx, edx
cmp eax, ecx
jg 0x427a00
mov eax, dword [0x493b6c]
and eax, 0x1d1a167f
mov dword [0x493b6c], eax
mov eax, 0x5ff5fdfd
mov ecx, dword [esp + 0x21c]
mov byte [esp + ecx + 0x9d6], 0
mov ecx, dword [0x48d290]
add ecx, 0x211003
mov dword [0x48d290], ecx
mov ecx, dword [esp + 0x21c]
mov dword [esp + 0x220], ecx
mov ecx, dword [0x494abc]
shl ecx, 8
mov dx, word [0x498fb6]
mov si, dx
xor ecx, esi
xor ecx, 0xe4f
mov dx, cx
mov word [0x498fb6], dx
mov ecx, dword [esp + 0x21c]
lea esi, [esp + 0x9d6]
lea ecx, [ecx + esi + 1]
mov esi, esp
mov dword [esi], ecx
mov dword [esp + 0x11c], eax
call fcn.00455bde
mov dword [esp + 0x200], eax
mov eax, dword [0x491c20]
add eax, 0x1f172a23
sub eax, 0x2974d6f2
mov ecx, dword [esp + 0x11c]
cmp ecx, eax
jle 0x427b15
mov eax, dword [0x48da0c]
mov ecx, eax
inc ecx
mov dword [0x48da0c], ecx
imul eax, eax, 0x7faea553
cmp eax, 0x3bd1393e
je 0x427ad3
mov eax, dword [0x48c3a0]
and eax, 0x5e78a6f7
mov dword [0x48c3a0], eax
jmp 0x427b10
mov eax, dword [0x492a90]
mov cx, word [0x49a498]
mov dx, cx
inc edx
mov si, dx
mov word [0x49a498], si
movsx edx, cx
add edx, 0xfb7cf9f
xor eax, edx
mov edx, dword [0x492d1c]
cmp eax, edx
je 0x427b0b
jmp 0x427b0b
jmp 0x427b10
jmp 0x427b1f
mov dword [0x48f208], 0xda7bfeef
jmp 0x427b5b
mov eax, dword [0x490e04]
mov ecx, eax
inc ecx
mov dword [0x490e04], ecx
add eax, 0x8427397a
mov ecx, dword [0x48b4b4]
and ecx, eax
mov dword [0x48b4b4], ecx
mov eax, dword [esp + 0x21c]
add eax, 0xffffffff
mov dword [esp + 0x21c], eax
jmp 0x42798a
mov eax, dword [0x48bd24]
imul eax, eax, 0xf82208f6
mov ecx, dword [0x4966b4]
or ecx, eax
mov dword [0x4966b4], ecx
mov dword [esp + 0x21c], 0
mov eax, dword [esp + 0x21c]
cmp eax, dword [esp + 0x220]
jg 0x427d24
mov eax, dword [0x48eb88]
mov ecx, dword [0x48cd80]
xor ecx, 0xffffffff
add eax, ecx
add eax, 0xe3f9a128
cmp eax, 0xd7fdfe6d
jne 0x427bf0
mov eax, 0x3dbbebf9
mov ecx, dword [0x4949c0]
inc ecx
mov dword [0x4949c0], ecx
add ecx, 0xe20678f5
cmp eax, ecx
jge 0x427beb
mov ax, word [0x49aad2]
mov cx, ax
imul ecx, ecx, 0x97dfffcd
mov ax, cx
mov word [0x49aad2], ax
jmp 0x427bf0
mov eax, dword [esp + 0x21c]
mov cl, byte [esp + eax + 0x9d6]
mov byte [esp + eax + 0x904], cl
mov eax, dword [0x48d05c]
inc eax
mov dword [0x48d05c], eax
mov dword [0x49577c], eax
mov eax, dword [esp + 0x21c]
movsx eax, byte [esp + eax + 0x904]
cmp eax, 0x2f
jne 0x427cf6
mov eax, dword [0x495094]
or eax, 0x6604e064
mov dword [0x48ef78], eax
mov eax, dword [esp + 0x21c]
mov byte [esp + eax + 0x904], 0
mov eax, dword [0x491e90]
add eax, 0x8d975f38
mov dword [0x491e90], eax
mov eax, dword [esp + 0x21c]
mov dword [esp + 0x218], eax
mov eax, dword [esp + 0x218]
cmp eax, dword [esp + 0x220]
jg 0x427ce7
mov eax, dword [0x48be68]
imul eax, eax, 0xbbdbf128
mov dword [0x48be68], eax
mov eax, dword [esp + 0x218]
mov cl, byte [esp + eax + 0x9d6]
mov edx, dword [esp + 0x21c]
sub eax, edx
mov byte [esp + eax + 0x6b2], cl
mov si, word [0x49b146]
mov ax, si
not eax
mov si, word [0x4997ba]
mov dx, si
and eax, edx
and eax, 0xe568
mov si, ax
mov word [0x4997ba], si
mov eax, dword [esp + 0x218]
add eax, 1
mov dword [esp + 0x218], eax
jmp 0x427c68
mov dword [0x48e428], 0xaa0c46c8
jmp 0x427d24
mov ax, word [0x499baa]
mov cx, ax
add ecx, 0xa8e35058
mov ax, cx
mov word [0x499baa], ax
mov eax, dword [esp + 0x21c]
add eax, 1
mov dword [esp + 0x21c], eax
jmp 0x427b7f
lea eax, [esp + 0x6b2]
mov ecx, dword [0x493bb8]
add ecx, 0xbb3cb0f1
mov dword [0x493bb8], ecx
mov ecx, esp
mov dword [ecx], eax
call fcn.00452ac0
mov ecx, dword [esp + 0xadc]
mov edx, esp
mov dword [edx], ecx
mov dword [esp + 0x118], eax
call fcn.00452ac0
mov ecx, dword [esp + 0x118]
add ecx, eax
cmp ecx, 0x1ff
jbe 0x427d9d
mov eax, dword [0x492204]
mov ecx, eax
dec ecx
mov dword [0x492204], ecx
and eax, 0xdd0e4395
xor eax, 0x2b56e5c1
mov ecx, dword [0x494c68]
or ecx, eax
mov dword [0x494c68], ecx
jmp 0x429cd6
mov eax, 0xeb256a69
mov cx, word [0x49a5d6]
movsx edx, cx
mov dword [0x495a3c], edx
mov edx, dword [esp + 0xadc]
mov esi, esp
mov dword [esi + 4], edx
lea edx, [esp + 0x6b2]
mov dword [esi], edx
mov dword [esp + 0x114], eax
call fcn.00455cb0
mov edx, dword [0x4918c0]
mov cx, word [0x49a24e]
mov si, cx
xor edx, esi
xor edx, 0x8c
mov cx, dx
mov word [0x49a24e], cx
mov dword [esp + 0x218], 0
mov cx, word [0x49cf4c]
mov dx, cx
mov esi, edx
inc esi
mov cx, si
mov word [0x49cf4c], cx
and edx, 0x4809
xor edx, 0x90d3
mov cx, word [0x49cbde]
mov si, cx
or esi, edx
mov cx, si
mov word [0x49cbde], cx
mov edx, esp
mov dword [edx + 4], 5
mov dword [edx], 0x3157
mov dword [esp + 0x110], eax
call fcn.00440380
mov dword [esp + 0xad0], eax
mov eax, dword [0x495230]
dec eax
mov dword [0x495230], eax
imul eax, eax, 0xc7de8d5f
or eax, 0x37f4c473
mov edx, dword [0x496dec]
and edx, eax
mov dword [0x496dec], edx
mov eax, dword [esp + 0xad0]
mov edx, esp
mov dword [edx], eax
lea ecx, [esp + 0x67c]
call fcn.00407750
sub esp, 4
mov ecx, dword [0x492dbc]
not ecx
mov edx, dword [0x494478]
imul edx, ecx
shl edx, 7
or edx, 0xa9ee6701
mov ecx, dword [0x4939f0]
and ecx, edx
mov dword [0x4939f0], ecx
mov ecx, dword [esp + 0xad0]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], 5
mov dword [esp + 0x10c], eax
call fcn.00436780
mov eax, dword [0x494d24]
add eax, 0x52dc0e2a
mov ecx, dword [esp + 0x114]
cmp ecx, eax
jg 0x427f57
mov eax, 0x6ca040df
mov cx, word [0x498ece]
movsx edx, cx
sub edx, 0x7112e2c0
and edx, 0x5c091451
cmp eax, edx
je 0x427f52
mov eax, dword [0x493078]
shl eax, 4
or eax, 0x68261fd6
mov cx, word [0x498840]
mov dx, cx
dec edx
mov si, dx
mov word [0x498840], si
movsx edx, cx
cmp eax, edx
je 0x427f4d
jmp 0x427f4d
jmp 0x427f52
jmp 0x427f57
mov eax, dword [esp + 0xae0]
mov ecx, eax
call fcn.0040a200
cmp eax, 0
je 0x4281c6
mov ax, word [0x49ad40]
mov cx, ax
imul ecx, ecx, 0x3930e631
mov ax, cx
mov word [0x49ad40], ax
mov ecx, esp
mov dword [ecx + 4], 0xc
mov dword [ecx], 0x3dfd
call fcn.00440380
mov dword [esp + 0xacc], eax
mov eax, dword [0x494aec]
and eax, 0xadfa1cd6
mov dword [0x494aec], eax
mov ecx, dword [esp + 0xae0]
mov eax, dword [esp + 0xacc]
mov edx, esp
mov dword [edx], eax
lea eax, [esp + 0x1e8]
mov dword [esp + 0x108], ecx
mov ecx, eax
mov dword [esp + 0x104], eax
call fcn.0044e8e0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x104]
mov dword [ecx], edx
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x108]
mov dword [esp + 0x100], eax
call fcn.004440a0
sub esp, 8
mov dword [esp + 0x21c], eax
mov ecx, dword [esp + 0x104]
call fcn.00451a20
mov eax, dword [0x48cdd0]
and eax, 0x528a7960
mov ecx, dword [0x4963a4]
or ecx, eax
mov dword [0x4963a4], ecx
mov eax, dword [esp + 0xacc]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0xc
call fcn.00436780
mov eax, dword [0x49128c]
or eax, 0x7a0600d7
mov ecx, dword [0x49390c]
add ecx, eax
mov dword [0x49390c], ecx
cmp dword [esp + 0x21c], 0
jne 0x4281bc
mov ax, word [0x49a998]
movsx ecx, ax
sar ecx, 6
add ecx, 0xbcf802b5
and ecx, 0x9e24f0d1
mov edx, dword [0x493f80]
imul edx, ecx
mov dword [0x493f80], edx
mov dword [esp + 0x218], 1
mov ecx, dword [0x48d8e8]
mov ax, word [0x4992d6]
mov dx, ax
xor edx, ecx
mov ax, dx
mov word [0x4992d6], ax
mov ecx, dword [esp + 0xae0]
mov edx, esp
mov dword [edx], 0
mov dword [esp + 0xfc], ecx
call fcn.00444390
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xb
mov ecx, dword [esp + 0xfc]
call fcn.00446390
sub esp, 8
mov dword [0x4938e8], 0x5721bc85
mov ecx, esp
mov dword [ecx + 4], 6
mov dword [ecx], 0x34ba
mov dword [esp + 0xf8], eax
call fcn.00440380
mov dword [esp + 0xac8], eax
mov eax, dword [0x4944e0]
xor eax, 0xd4e
or eax, 0xe031
mov si, word [0x49b1e4]
mov cx, si
add ecx, eax
mov si, cx
mov word [0x49b1e4], si
mov eax, dword [esp + 0xac8]
mov ecx, esp
mov dword [ecx], eax
lea ecx, [esp + 0x67c]
call fcn.00407750
sub esp, 4
mov ecx, dword [0x48b514]
shl ecx, 2
or ecx, 0x95f4
mov si, word [0x49c0a0]
mov dx, si
xor edx, ecx
mov si, dx
mov word [0x49c0a0], si
mov ecx, dword [esp + 0xac8]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], 6
mov dword [esp + 0xf4], eax
call fcn.00436780
mov si, word [0x49841e]
mov ax, si
or eax, 0xa3c2
mov si, ax
mov word [0x49841e], si
mov dword [0x48e434], 0x22821904
mov eax, 0x4d506800
mov ecx, dword [0x48c454]
or ecx, 0x460d6249
mov dword [0x48c454], ecx
mov ecx, esp
lea edx, [esp + 0x6b2]
mov dword [ecx], edx
lea ecx, [esp + 0x1d4]
mov dword [esp + 0xf0], ecx
mov dword [esp + 0xec], eax
call fcn.00419620
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xf0]
mov dword [ecx], edx
lea ecx, [esp + 0x67c]
mov dword [esp + 0xe8], eax
call fcn.00448cd0
sub esp, 4
mov ecx, dword [esp + 0xf0]
mov dword [esp + 0xe4], eax
call fcn.0043a120
mov eax, dword [0x49165c]
mov ecx, 0xe1c32781
sub ecx, eax
mov eax, dword [0x4952a8]
sub eax, ecx
mov dword [0x4952a8], eax
mov eax, esp
mov dword [eax + 4], 0x32
mov dword [eax], 0x2828
call fcn.00440380
mov dword [esp + 0xac4], eax
mov eax, dword [0x4905d4]
dec eax
mov dword [0x4905d4], eax
mov ecx, dword [esp + 0xec]
cmp ecx, eax
jge 0x42829b
mov eax, dword [0x492580]
imul eax, eax, 0x6cb212f8
mov dword [0x492580], eax
jmp 0x4282be
mov ax, word [0x499668]
movsx ecx, ax
imul ecx, ecx, 0x71931477
add ecx, 0x186cd95d
mov edx, dword [0x49251c]
sub edx, ecx
mov dword [0x49251c], edx
mov eax, dword [esp + 0xac4]
mov ecx, esp
mov dword [ecx], eax
lea eax, [esp + 0x1c0]
mov ecx, eax
mov dword [esp + 0xe0], eax
call fcn.00419620
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xe0]
mov dword [ecx], edx
lea ecx, [esp + 0x67c]
mov dword [esp + 0xdc], eax
call fcn.00448cd0
sub esp, 4
mov ecx, dword [esp + 0xe0]
mov dword [esp + 0xd8], eax
call fcn.0043a120
mov si, word [0x49897c]
mov ax, si
imul eax, eax, 0xa0403406
mov si, ax
mov word [0x49897c], si
mov eax, dword [esp + 0xac4]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0x32
call fcn.00436780
mov eax, dword [0x4939e4]
mov ecx, dword [0x48c2b8]
dec ecx
mov dword [0x48c2b8], ecx
imul eax, ecx
xor eax, 0xe57f3db0
mov si, word [0x49c164]
movsx ecx, si
add ecx, 0xfab1ca0b
and ecx, 0x55ce5112
cmp eax, ecx
jle 0x428392
mov eax, dword [0x48d23c]
add eax, 0xb667c4b
mov dword [0x48d23c], eax
jmp 0x4283d6
mov eax, dword [0x48ba2c]
mov cx, word [0x4984f2]
mov dx, cx
dec edx
mov si, dx
mov word [0x4984f2], si
movsx edx, cx
imul eax, edx
xor eax, 0x16c95072
cmp eax, 0x5308000e
je 0x4283d1
mov eax, dword [0x48eb18]
xor eax, 0xd80d3eca
mov dword [0x48eb18], eax
jmp 0x4283d6
mov eax, 0x99d6c939
mov ecx, esp
lea edx, [esp + 0x904]
mov dword [ecx], edx
lea ecx, [esp + 0x1ac]
mov dword [esp + 0xd4], ecx
mov dword [esp + 0xd0], eax
call fcn.00419620
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xd4]
mov dword [ecx], edx
lea ecx, [esp + 0x67c]
mov dword [esp + 0xcc], eax
call fcn.00448cd0
sub esp, 4
mov ecx, dword [esp + 0xd4]
mov dword [esp + 0xc8], eax
call fcn.0043a120
mov si, word [0x499d36]
mov ax, si
dec eax
mov di, ax
mov word [0x499d36], di
movsx eax, si
and eax, 0x57d2130a
xor eax, 0x54ada99e
mov ecx, dword [esp + 0xd0]
cmp ecx, eax
jge 0x42847d
mov ax, word [0x499906]
movsx ecx, ax
and ecx, 0x59d0ee0c
mov dword [0x48fed4], ecx
cmp dword [esp + 0x218], 0
je 0x428725
mov eax, 0xfff88eed
mov ecx, dword [0x48fc6c]
imul ecx, ecx, 0x1a8df18b
mov dword [0x48fc6c], ecx
mov ecx, esp
mov dword [ecx + 4], 0x44
mov dword [ecx], 0x921
mov dword [esp + 0xc4], eax
call fcn.00440380
mov dword [esp + 0xac0], eax
mov eax, dword [0x48c004]
mov ecx, dword [0x490e90]
lea eax, [eax + ecx - 0x4718615d]
mov dword [0x490e90], eax
mov eax, dword [esp + 0xac0]
mov ecx, esp
mov dword [ecx], eax
lea eax, [esp + 0x198]
mov ecx, eax
mov dword [esp + 0xc0], eax
call fcn.00419620
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xc0]
mov dword [ecx], edx
lea ecx, [esp + 0x67c]
mov dword [esp + 0xbc], eax
call fcn.00448cd0
sub esp, 4
mov ecx, dword [esp + 0xc0]
mov dword [esp + 0xb8], eax
call fcn.0043a120
mov si, word [0x49815a]
mov ax, si
add eax, 0x9fda2deb
mov si, ax
mov word [0x49815a], si
mov eax, esp
mov dword [eax + 4], 3
mov dword [eax], 0x2992
call fcn.00440380
mov dword [esp + 0xabc], eax
mov eax, dword [0x48c2ac]
add eax, 0xcfc4fe3
mov dword [0x48c2ac], eax
mov eax, dword [esp + 0xac0]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0x44
call fcn.00436780
mov eax, dword [0x492b00]
mov ecx, dword [0x48d88c]
mov edx, ecx
inc edx
mov dword [0x48d88c], edx
imul eax, ecx
mov ecx, dword [0x493074]
imul ecx, eax
mov dword [0x493074], ecx
mov ecx, dword [esp + 0xae0]
call fcn.0040a200
mov ecx, dword [esp + 0xabc]
mov edx, esp
mov dword [edx + 8], eax
mov dword [edx + 4], ecx
lea eax, [esp + 0x22a]
mov dword [edx], eax
call fcn.00455f46
mov si, word [0x497f92]
movsx ecx, si
mov edx, dword [esp + 0xc4]
cmp edx, ecx
mov dword [esp + 0xb4], eax
jg 0x42861d
mov eax, dword [0x491bf4]
imul eax, eax, 0x9906f44c
mov ecx, dword [0x48af6c]
lea eax, [eax + ecx - 0x68b41454]
mov dword [0x48af6c], eax
jmp 0x42867c
mov ax, word [0x499a3a]
movsx ecx, ax
xor ecx, 0x4cb3a8e9
or ecx, 0x77f87b80
cmp ecx, 0xf2240532
jge 0x428668
mov eax, dword [0x48dc08]
mov ecx, eax
inc ecx
mov dword [0x48dc08], ecx
mov dx, word [0x49c04a]
mov cx, dx
imul ecx, eax
mov dx, cx
mov word [0x49c04a], dx
jmp 0x428677
mov eax, dword [0x493a18]
add eax, 0x169e4e18
mov dword [0x493a18], eax
jmp 0x42867c
mov eax, dword [esp + 0xabc]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 3
call fcn.00436780
mov eax, dword [0x492340]
imul eax, eax, 0xedfc8de6
mov dword [0x492340], eax
mov eax, esp
lea ecx, [esp + 0x22a]
mov dword [eax], ecx
lea eax, [esp + 0x184]
mov ecx, eax
mov dword [esp + 0xb0], eax
call fcn.00419620
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xb0]
mov dword [ecx], edx
lea ecx, [esp + 0x67c]
mov dword [esp + 0xac], eax
call fcn.00448cd0
sub esp, 4
mov ecx, dword [esp + 0xb0]
mov dword [esp + 0xa8], eax
call fcn.0043a120
mov si, word [0x49b1ba]
mov ax, si
dec eax
mov si, ax
mov word [0x49b1ba], si
movsx eax, si
add eax, 0xfbc07985
mov ecx, dword [0x49379c]
xor ecx, eax
mov dword [0x49379c], ecx
mov eax, 0x65677217
mov ecx, dword [0x4904ec]
imul ecx, ecx, 0x77ffdffe
mov dword [0x4904ec], ecx
mov ecx, esp
mov dword [ecx + 4], 5
mov dword [ecx], 0x15b
mov dword [esp + 0xa4], eax
call fcn.00440380
mov dword [esp + 0xab8], eax
mov eax, dword [0x48c84c]
xor eax, 0x98b4f56d
mov dword [0x48c84c], eax
mov eax, dword [esp + 0xab8]
mov ecx, esp
mov dword [ecx], eax
lea eax, [esp + 0x170]
mov ecx, eax
mov dword [esp + 0xa0], eax
call fcn.00419620
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xa0]
mov dword [ecx], edx
lea ecx, [esp + 0x67c]
mov dword [esp + 0x9c], eax
call fcn.00448cd0
sub esp, 4
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0x98], eax
call fcn.0043a120
mov eax, dword [0x48db1c]
shl eax, 5
mov ecx, dword [esp + 0xa4]
cmp ecx, eax
jge 0x428804
mov eax, dword [0x48c8a8]
mov ecx, eax
dec ecx
mov dword [0x48c8a8], ecx
mov ecx, dword [0x48b1d4]
shr ecx, 2
imul ecx, ecx, 0xae06f2dc
sub eax, ecx
mov dx, ax
mov word [0x49c30c], dx
mov eax, dword [esp + 0xab8]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 5
call fcn.00436780
mov dword [0x48f2cc], 0x52a48522
cmp dword [esp + 0x218], 0
je 0x42890b
mov eax, 0xfa3ffdff
mov ecx, dword [0x48b4d4]
cmp eax, ecx
jge 0x428892
mov eax, dword [0x496d48]
imul eax, eax, 0x327c1a81
mov ecx, dword [0x494e04]
mov edx, ecx
dec edx
mov dword [0x494e04], edx
mov si, word [0x49b666]
movsx edx, si
or ecx, edx
cmp eax, ecx
jle 0x428883
mov dword [0x48b7ec], 0xff3968d7
jmp 0x42888d
mov dword [0x48f304], 0xc6679123
jmp 0x428892
mov eax, dword [esp + 0xae0]
mov ecx, esp
mov dword [ecx], eax
lea ecx, [esp + 0x67c]
call fcn.00448cd0
sub esp, 4
mov dx, word [0x4989fc]
mov cx, dx
inc ecx
mov si, cx
mov word [0x4989fc], si
movsx ecx, dx
xor ecx, 0xf5fae4f3
mov edi, dword [0x48c220]
mov ebx, edi
inc ebx
mov dword [0x48c220], ebx
xor ecx, edi
cmp ecx, 0xe39f9d6c
mov dword [esp + 0x94], eax
jl 0x428906
mov ax, word [0x499b8a]
mov cx, ax
or ecx, 0xe27
mov ax, cx
mov word [0x499b8a], ax
jmp 0x42890b
mov eax, dword [0x491a38]
shl eax, 9
mov cx, word [0x49bad8]
mov dx, cx
or edx, eax
mov cx, dx
mov word [0x49bad8], cx
mov eax, dword [0x48a8ec]
mov edx, esp
lea esi, [esp + 0x904]
mov dword [edx], esi
call eax
sub esp, 4
mov dword [esp + 0x224], eax
mov eax, dword [0x4913e0]
imul eax, eax, 0xf8feb9bd
mov dword [0x4913e0], eax
cmp dword [esp + 0x224], 0
jne 0x42897c
mov eax, dword [0x495d94]
add eax, 0x132f885c
xor eax, 0x1fd2e46a
mov dword [0x4943d0], eax
jmp 0x429cd6
mov ax, word [0x49c8fe]
mov cx, ax
add ecx, 0x8924d221
mov ax, cx
mov word [0x49c8fe], ax
xorps xmm0, xmm0
movaps xmmword [esp + 0x690], xmm0
mov dword [0x492b68], 0x44930667
mov word [esp + 0x690], 2
mov ax, word [0x497c74]
movsx ecx, ax
mov edx, dword [0x49098c]
shl edx, 3
xor edx, 0x89aedba7
cmp ecx, edx
jne 0x4289e5
mov eax, dword [0x48fce4]
shl eax, 6
or eax, 0x73e77b57
mov dword [0x4900b8], eax
mov eax, dword [0x48a8f4]
mov ecx, dword [0x48a8f8]
mov edx, dword [esp + 0x224]
mov edx, dword [edx + 0xc]
mov edx, dword [edx]
mov edx, dword [edx]
mov dword [esp + 0x16c], edx
mov edx, dword [esp + 0x16c]
mov esi, esp
mov dword [esi], edx
mov dword [esp + 0x90], eax
call ecx
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [esp + 0x90]
call eax
sub esp, 4
mov dword [esp + 0x694], eax
mov eax, dword [0x48fbb0]
dec eax
mov dword [0x48fbb0], eax
or eax, 0x2fc25200
mov ecx, dword [0x491f60]
sar ecx, 3
cmp eax, ecx
jle 0x428ab2
mov ax, word [0x4983ba]
mov cx, ax
inc ecx
mov ax, cx
mov word [0x4983ba], ax
movsx ecx, ax
mov ax, word [0x49978c]
movsx edx, ax
imul ecx, edx
imul ecx, ecx, 0x2060311e
mov edx, dword [0x48ccf4]
cmp ecx, edx
jne 0x428aad
mov ax, word [0x498ce0]
mov cx, ax
inc ecx
mov dx, cx
mov word [0x498ce0], dx
movsx ecx, ax
imul ecx, ecx, 0x8a01396c
mov dword [0x4930f4], ecx
jmp 0x428b02
mov eax, 0x52408a39
mov ecx, dword [0x48ec98]
mov dx, word [0x4971a4]
movsx esi, dx
sub ecx, esi
add ecx, 0x61dfdca7
cmp eax, ecx
jne 0x428afd
mov eax, dword [0x48f2a4]
inc eax
mov dword [0x48f2a4], eax
xor eax, 0x2ec3
mov cx, word [0x4992dc]
mov dx, cx
add edx, eax
mov cx, dx
mov word [0x4992dc], cx
jmp 0x428b02
mov eax, dword [0x48a8f0]
movzx ecx, word [esp + 0x200]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov word [esp + 0x692], ax
mov ax, word [0x4973c6]
mov cx, ax
imul ecx, ecx, 0x6d7d414f
mov ax, word [0x49c2b0]
mov dx, ax
and edx, ecx
mov ax, dx
mov word [0x49c2b0], ax
cmp dword [esp + 0xae4], 0
je 0x428d1e
mov eax, dword [0x494628]
imul eax, eax, 0xc29b711
or eax, 0x15bc8117
mov ecx, dword [0x48aedc]
inc ecx
mov dword [0x48aedc], ecx
imul ecx, ecx, 0xf60e919c
and ecx, 0xac9cfee1
cmp eax, ecx
jge 0x428bd1
mov eax, 0xc1ef28f2
mov ecx, dword [0x490020]
mov edx, dword [0x4918ac]
shl edx, 1
and ecx, edx
cmp eax, ecx
jg 0x428bb4
mov eax, dword [0x48ba28]
and eax, 0x3fa262f3
mov dword [0x48ba28], eax
jmp 0x428bcc
mov ax, word [0x498376]
mov cx, ax
xor ecx, 0xc5e3
mov ax, cx
mov word [0x498376], ax
jmp 0x428bd1
mov eax, dword [esp + 0xae4]
mov ecx, 0x10624dd3
mul ecx
shr edx, 6
mov eax, esp
mov dword [eax + 4], edx
lea ecx, [esp + 0x690]
mov dword [eax], ecx
call fcn.0041b7a0
mov dword [esp + 0x6ac], eax
mov si, word [0x49a860]
mov ax, si
mov si, word [0x4988fc]
mov cx, si
xor ecx, eax
mov si, cx
mov word [0x4988fc], si
cmp dword [esp + 0x6ac], 0
jge 0x428c3e
mov eax, dword [0x491c4c]
add eax, 0xdd398107
mov dword [0x491c4c], eax
jmp 0x429cd6
mov eax, dword [0x493f44]
mov ecx, 0x78332578
sub ecx, eax
mov dx, word [0x49a1de]
mov ax, dx
or eax, ecx
mov dx, ax
mov word [0x49a1de], dx
mov eax, dword [0x48a90c]
mov ecx, dword [esp + 0x6ac]
mov esi, esp
lea edi, [esp + 0xae4]
mov dword [esi + 0xc], edi
mov dword [esi], ecx
mov dword [esi + 0x10], 4
mov dword [esi + 8], 0x1006
mov dword [esi + 4], 0xffff
mov dword [esp + 0x8c], edi
call eax
sub esp, 0x14
mov ecx, dword [0x48f6bc]
dec ecx
mov dword [0x48f6bc], ecx
and ecx, 0x9af3031c
mov esi, dword [0x48c674]
add esi, ecx
mov dword [0x48c674], esi
mov ecx, dword [0x48a90c]
mov esi, dword [esp + 0x6ac]
mov edi, esp
mov ebx, dword [esp + 0x8c]
mov dword [edi + 0xc], ebx
mov dword [edi], esi
mov dword [edi + 0x10], 4
mov dword [edi + 8], 0x1005
mov dword [edi + 4], 0xffff
mov dword [esp + 0x88], eax
call ecx
sub esp, 0x14
mov dx, word [0x499a1e]
mov cx, dx
imul ecx, ecx, 0xef67ca20
mov dx, cx
mov word [0x499a1e], dx
mov dword [esp + 0x84], eax
jmp 0x428e21
mov eax, dword [0x494e4c]
add eax, 0xfba5dd1d
mov dword [0x494e4c], eax
mov eax, dword [0x48a910]
mov ecx, esp
mov dword [ecx + 8], 6
mov dword [ecx + 4], 1
mov dword [ecx], 2
call eax
sub esp, 0xc
mov dword [esp + 0x6ac], eax
mov eax, dword [0x496ce0]
or eax, 0xabb1349c
mov dword [0x496ce0], eax
cmp dword [esp + 0x6ac], 0xffffffff
jne 0x428d95
mov eax, dword [0x4961f4]
inc eax
mov dword [0x4961f4], eax
xor eax, 0xefea292d
mov ecx, dword [0x490e58]
imul ecx, eax
mov dword [0x490e58], ecx
jmp 0x429cd6
lea eax, [esp + 0x690]
mov ecx, dword [0x495db4]
or ecx, 0x4e881425
mov dword [0x495db4], ecx
mov ecx, dword [0x48a8e8]
mov edx, dword [esp + 0x6ac]
mov esi, esp
mov dword [esi + 4], eax
mov dword [esi], edx
mov dword [esi + 8], 0x10
call ecx
sub esp, 0xc
cmp eax, 0xffffffff
jne 0x428dec
mov eax, dword [0x49398c]
imul eax, eax, 0x8fb62e96
mov dword [0x49398c], eax
jmp 0x429c69
mov eax, dword [0x48cdd4]
mov ecx, eax
inc ecx
mov dword [0x48cdd4], ecx
mov ecx, 0x9c6bb336
sub ecx, eax
mov eax, dword [0x491c98]
add eax, eax
xor ecx, eax
mov dx, word [0x49cd14]
mov ax, dx
imul eax, ecx
mov dx, ax
mov word [0x49cd14], dx
lea eax, [esp + 0x67c]
mov cx, word [0x4975aa]
mov dx, cx
inc edx
mov cx, dx
mov word [0x4975aa], cx
movsx edx, cx
imul edx, edx, 0x3faf3388
mov esi, dword [0x48ed08]
add esi, edx
mov dword [0x48ed08], esi
mov edx, dword [0x48a908]
lea esi, [esp + 0x67c]
mov ecx, esi
mov dword [esp + 0x80], eax
mov dword [esp + 0x7c], edx
mov dword [esp + 0x78], esi
call fcn.0040a200
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x74], eax
call fcn.004188b0
mov ecx, dword [esp + 0x6ac]
mov edx, esp
mov esi, dword [esp + 0x74]
mov dword [edx + 8], esi
mov dword [edx + 4], eax
mov dword [edx], ecx
mov dword [edx + 0xc], 0
mov eax, dword [esp + 0x7c]
call eax
sub esp, 0x10
mov dword [esp + 0x6a8], eax
mov eax, dword [0x493898]
mov ecx, 0x56ee526f
sub ecx, eax
xor ecx, 0xa257
mov di, word [0x49bd84]
mov ax, di
imul eax, ecx
mov di, ax
mov word [0x49bd84], di
mov eax, dword [esp + 0x6a8]
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x70], eax
call fcn.0040a200
mov ecx, dword [esp + 0x70]
cmp ecx, eax
jae 0x428f69
mov eax, 0x40609e64
mov ecx, dword [0x4955d8]
sub ecx, 0xfabc161b
cmp eax, ecx
jg 0x428f54
mov eax, dword [0x496170]
dec eax
mov dword [0x496170], eax
imul eax, eax, 0x4c43e612
imul eax, eax, 0xb7bf9abe
cmp eax, 0x8d52b48c
jg 0x428f4f
mov ax, word [0x499226]
mov cx, ax
add ecx, 0x54e23b8a
mov ax, cx
mov word [0x499226], ax
jmp 0x428f64
mov eax, dword [0x495fb0]
imul eax, eax, 0xa626c3e9
mov dword [0x495fb0], eax
jmp 0x429c69
mov eax, dword [0x491e78]
inc eax
mov dword [0x491e78], eax
imul eax, eax, 0x6bc09e8e
cmp eax, 0x95fff3dd
jg 0x428f94
mov eax, dword [0x4944dc]
or eax, 0xd804b720
mov dword [0x4944dc], eax
mov ecx, dword [esp + 0xae0]
call fcn.00411050
mov ecx, dword [0x493318]
or ecx, 0x328b71c
mov dword [0x493318], ecx
mov eax, 0x9e264708
mov ecx, dword [0x48d920]
and ecx, 0x5912041f
cmp eax, ecx
je 0x428fdf
mov eax, dword [0x48d9b0]
add eax, 0xae35eee8
mov dword [0x48d9b0], eax
jmp 0x429006
mov eax, dword [0x48d338]
mov ecx, eax
dec ecx
mov dword [0x48d338], ecx
imul eax, eax, 0x90dc85ec
add eax, 0xb570b16b
mov ecx, dword [0x493b1c]
sub ecx, eax
mov dword [0x493b1c], ecx
mov eax, dword [0x48a900]
mov ecx, dword [esp + 0x6ac]
mov edx, esp
lea esi, [esp + 0x22a]
mov dword [edx + 4], esi
mov dword [edx], ecx
mov dword [edx + 0xc], 0
mov dword [edx + 8], 0x400
call eax
sub esp, 0x10
mov dword [esp + 0x6a8], eax
mov eax, dword [0x49138c]
mov ecx, dword [0x490588]
mov edx, ecx
and edx, 0xeefca735
xor eax, edx
dec ecx
mov dword [0x490588], ecx
not eax
mov ecx, dword [0x48e3bc]
imul ecx, eax
mov dword [0x48e3bc], ecx
cmp dword [esp + 0x6a8], 0
jle 0x429098
mov eax, dword [esp + 0x210]
mov ecx, dword [esp + 0x214]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], eax
call fcn.0042d3f0
cmp eax, 0
je 0x4290ac
mov eax, dword [0x4958dc]
and eax, 0x176702b8
mov dword [0x4958dc], eax
jmp 0x429b08
mov dword [0x4907c8], 0x9c977f47
mov eax, dword [esp + 0xae0]
mov ecx, eax
mov dword [esp + 0x6c], eax
call fcn.0040a200
mov ecx, dword [esp + 0x6a8]
add eax, ecx
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x6c]
call fcn.0044bb80
sub esp, 8
mov dx, word [0x498c70]
mov ax, dx
add eax, 0x4bb6290e
mov dx, ax
mov word [0x498c70], dx
mov eax, dword [esp + 0xae0]
mov ecx, eax
call fcn.0044a940
cmp eax, 0
jne 0x42916c
mov eax, 0xefeaed9c
mov ecx, dword [0x49321c]
dec ecx
mov dword [0x49321c], ecx
and ecx, 0x6a3f906e
cmp eax, ecx
jge 0x429155
mov eax, dword [0x492b84]
and eax, 0x57bbe75e
mov ecx, dword [0x48d1bc]
sub ecx, eax
mov dword [0x48d1bc], ecx
jmp 0x429167
mov eax, dword [0x4930cc]
mov ecx, 0xc256058d
sub ecx, eax
mov dword [0x48cb84], ecx
jmp 0x429b08
mov eax, 0xb1263b3a
mov ecx, dword [0x492e14]
imul ecx, ecx, 0xf01529e2
mov dword [0x492e14], ecx
mov ecx, dword [esp + 0xae0]
mov edx, dword [esp + 0x6a8]
mov esi, esp
mov dword [esi + 4], edx
lea edx, [esp + 0x22a]
mov dword [esi], edx
mov dword [esp + 0x68], eax
call fcn.00447170
sub esp, 8
mov ecx, dword [0x48d424]
inc ecx
mov dword [0x48d424], ecx
xor ecx, 0xd04a1b16
mov edx, dword [esp + 0x68]
cmp edx, ecx
mov dword [esp + 0x64], eax
jne 0x4291fb
mov eax, dword [0x4903bc]
cmp eax, 0x349811ac
je 0x4291f6
mov ax, word [0x49b576]
mov cx, ax
or ecx, 0xaf2
mov ax, cx
mov word [0x49b576], ax
jmp 0x429241
mov eax, 0xf84253c4
mov cx, word [0x49921a]
movsx edx, cx
imul edx, edx, 0x87a49b84
mov cx, word [0x49b61c]
movsx esi, cx
add edx, esi
cmp eax, edx
jg 0x42923c
mov ax, word [0x497608]
mov cx, ax
add ecx, 0xb33c13ca
mov ax, cx
mov word [0x497608], ax
jmp 0x429241
cmp dword [esp + 0x208], 0
jge 0x429659
mov eax, dword [0x4905bc]
and eax, 0x59d6e480
mov ecx, dword [0x48e59c]
shl ecx, 5
or ecx, 0xe23bdb49
cmp eax, ecx
jge 0x429286
mov eax, dword [0x492d88]
sar eax, 7
mov ecx, dword [0x48dd5c]
and ecx, eax
mov dword [0x48dd5c], ecx
mov eax, esp
mov dword [eax + 4], 5
mov dword [eax], 0x15b
call fcn.00440380
mov dword [esp + 0xab4], eax
mov eax, dword [0x4969b0]
add eax, 0x7c993aab
mov dword [0x4969b0], eax
mov ecx, dword [esp + 0xae0]
mov eax, dword [esp + 0xab4]
mov edx, esp
mov dword [edx], eax
lea eax, [esp + 0x158]
mov dword [esp + 0x60], ecx
mov ecx, eax
mov dword [esp + 0x5c], eax
call fcn.0044e8e0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x5c]
mov dword [ecx], edx
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x58], eax
call fcn.004440a0
sub esp, 8
mov dword [esp + 0x208], eax
mov ecx, dword [esp + 0x5c]
call fcn.00451a20
mov si, word [0x49b1b2]
mov ax, si
imul eax, eax, 0x52daf95a
mov si, ax
mov word [0x49b1b2], si
mov eax, dword [esp + 0xab4]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 5
call fcn.00436780
mov eax, dword [0x4930f0]
xor eax, 0xd3ad2a8e
mov ecx, dword [0x492aa8]
add ecx, eax
mov dword [0x492aa8], ecx
cmp dword [esp + 0x208], 0
jl 0x429641
mov eax, 0xc08f6219
mov ecx, dword [0x495a8c]
cmp eax, ecx
je 0x42938c
mov ax, word [0x499550]
mov cx, ax
or ecx, 0xbc73
mov ax, cx
mov word [0x499550], ax
mov eax, dword [esp + 0x208]
add eax, 4
mov dword [esp + 0x208], eax
mov eax, dword [0x48cacc]
mov cx, word [0x49b664]
mov dx, cx
dec edx
mov si, dx
mov word [0x49b664], si
movsx edx, cx
imul eax, edx
add eax, 0x8ee940f9
mov dword [0x48b274], eax
mov eax, dword [esp + 0xae0]
mov edx, esp
mov dword [edx], eax
call fcn.0043bbe0
mov dword [esp + 0x204], eax
mov dword [0x49656c], 0xf74b303b
cmp dword [esp + 0x204], 0
jge 0x429632
mov eax, dword [0x48eb38]
mov ecx, eax
inc ecx
mov dword [0x48eb38], ecx
add eax, 0x20843439
mov dx, word [0x49b23a]
mov cx, dx
inc ecx
mov dx, cx
mov word [0x49b23a], dx
movsx ecx, dx
cmp eax, ecx
jle 0x42943e
mov eax, dword [0x492e00]
imul eax, eax, 0xd731dbcb
mov dword [0x492e00], eax
jmp 0x429456
mov ax, word [0x49958e]
mov cx, ax
imul ecx, ecx, 0x6430a117
mov ax, cx
mov word [0x49958e], ax
mov eax, esp
mov dword [eax + 4], 0xb
mov dword [eax], 0x111f
call fcn.00440380
mov dword [esp + 0xab0], eax
mov eax, dword [0x48fba4]
shl eax, 0xa
add eax, 0x101d0f62
mov dword [0x4904b0], eax
mov ecx, dword [esp + 0xae0]
mov eax, dword [esp + 0xab0]
mov edx, esp
mov dword [edx], eax
lea eax, [esp + 0x144]
mov dword [esp + 0x54], ecx
mov ecx, eax
mov dword [esp + 0x50], eax
call fcn.0044e8e0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x50]
mov dword [ecx], edx
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x4c], eax
call fcn.004440a0
sub esp, 8
mov dword [esp + 0x6a8], eax
mov ecx, dword [esp + 0x50]
call fcn.00451a20
mov si, word [0x49a014]
mov ax, si
dec eax
mov di, ax
mov word [0x49a014], di
movsx eax, si
xor eax, 0xa6fd6de8
cmp eax, 0x89db2b6b
jg 0x429539
mov eax, 0xfd7a1162
mov cx, word [0x49baa0]
movsx edx, cx
cmp eax, edx
jl 0x429534
mov eax, dword [0x48e0ec]
xor eax, 0xf914d66c
mov ecx, dword [0x491f84]
sub ecx, eax
mov dword [0x491f84], ecx
jmp 0x429539
mov eax, dword [esp + 0xab0]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0xb
call fcn.00436780
mov dx, word [0x49b350]
movsx eax, dx
shl eax, 9
and eax, 0x4d59e200
mov dx, word [0x49bcca]
mov cx, dx
inc ecx
mov si, cx
mov word [0x49bcca], si
movsx ecx, dx
or eax, ecx
cmp eax, 0x9b3dc19c
jge 0x4295bf
mov eax, 0xd69662ff
mov ecx, dword [0x48f120]
mov edx, dword [0x494980]
mov esi, edx
dec esi
mov dword [0x494980], esi
sub ecx, edx
cmp eax, ecx
jl 0x4295ba
mov eax, dword [0x48dc40]
and eax, 0xade0ea95
mov dword [0x48dc40], eax
jmp 0x4295bf
cmp dword [esp + 0x6a8], 0
jl 0x4295f3
mov eax, dword [0x48ffac]
mov ecx, eax
inc ecx
mov dword [0x48ffac], ecx
xor eax, 0x8b89cd53
mov ecx, dword [0x490770]
sub ecx, eax
mov dword [0x490770], ecx
jmp 0x429b08
mov eax, 0x583d895
mov cx, word [0x499752]
mov dx, cx
dec edx
mov si, dx
mov word [0x499752], si
movsx edx, cx
or edx, 0x32dfce97
cmp eax, edx
jge 0x42962d
mov eax, dword [0x4928dc]
xor eax, 0x92bb1371
mov dword [0x4928dc], eax
jmp 0x429632
mov eax, dword [0x490930]
or eax, 0x8295fee2
mov dword [0x490930], eax
mov eax, dword [0x48af28]
mov ecx, 0xd2967943
sub ecx, eax
mov eax, dword [0x48db74]
and eax, ecx
mov dword [0x48db74], eax
mov eax, dword [0x48b514]
sar eax, 6
imul eax, eax, 0xa73f36b1
mov cx, word [0x49b3f4]
movsx edx, cx
not edx
add eax, edx
mov edx, dword [0x490d94]
sub edx, eax
mov dword [0x490d94], edx
cmp dword [esp + 0x204], 0
jl 0x429759
mov ax, word [0x498aea]
mov cx, ax
add ecx, 0x43aa3021
mov ax, cx
mov word [0x498aea], ax
mov ecx, dword [esp + 0xae0]
call fcn.0040a200
sub eax, dword [esp + 0x208]
cmp eax, dword [esp + 0x204]
jb 0x429702
mov eax, dword [0x48d7ac]
mov cx, word [0x4980f0]
movsx edx, cx
imul eax, edx
mov dx, cx
dec edx
mov cx, dx
mov word [0x4980f0], cx
imul eax, eax, 0x96ce003e
mov edx, dword [0x48b354]
xor edx, eax
mov dword [0x48b354], edx
jmp 0x429b08
mov eax, 0x15ac7b4a
mov ecx, dword [0x494d64]
sub eax, ecx
cmp eax, 0x29c6857
jg 0x429754
mov eax, 0xf1044cdf
mov cx, word [0x498920]
movsx edx, cx
add edx, 0x89ac0520
cmp eax, edx
jle 0x42974f
mov ax, word [0x49caec]
mov cx, ax
or ecx, 0x281a
mov ax, cx
mov word [0x49caec], ax
jmp 0x429754
jmp 0x429759
mov ax, word [0x49c128]
mov cx, ax
add ecx, 0xe082db0f
mov ax, cx
mov word [0x49c128], ax
cmp dword [esp + 0xae8], 0
je 0x429a3d
test byte [esp + 0x1ff], 1
jne 0x429a3d
mov eax, dword [0x493928]
imul eax, eax, 0xef13e5a7
mov dword [0x493928], eax
mov eax, dword [esp + 0xae0]
mov ecx, eax
call fcn.0040a200
cmp eax, 0x4000
jbe 0x429a33
mov eax, 0x5fa4979
mov ecx, dword [0x48e438]
add ecx, 0xed49f24b
or ecx, 0xeb81efff
cmp eax, ecx
jne 0x42980e
mov eax, dword [0x490984]
or eax, 0xbc46e9ce
mov cx, word [0x497cf2]
movsx edx, cx
shl edx, 8
and edx, 0xcf449b4e
cmp eax, edx
jl 0x429809
mov eax, dword [0x494934]
add eax, 0xdafb91cf
mov dword [0x494934], eax
jmp 0x42980e
mov byte [esp + 0x1ff], 1
mov word [0x4983d8], 0xeee0
mov eax, dword [esp + 0xae0]
mov ecx, esp
mov dword [ecx], eax
lea ecx, [esp + 0x130]
call fcn.00439cb0
sub esp, 4
mov dx, word [0x498e70]
movsx ecx, dx
shl ecx, 2
mov esi, dword [0x4926cc]
xor ecx, esi
xor ecx, 0x6e77c1c7
mov dword [0x4926cc], ecx
cmp dword [esp + 0x208], 0
mov dword [esp + 0x48], eax
jl 0x429922
mov eax, dword [0x48bc68]
mov ecx, eax
inc ecx
mov dword [0x48bc68], ecx
mov ecx, 0xcd02724a
sub ecx, eax
mov eax, dword [0x4919b4]
imul eax, eax, 0xdb8a4f30
add eax, 0x747dab25
cmp ecx, eax
jge 0x4298a8
mov eax, dword [0x48bb84]
and eax, 0x6b710451
mov dword [0x48bb84], eax
mov eax, dword [esp + 0x208]
mov ecx, esp
mov dword [ecx], 0
lea ecx, [esp + 0x130]
mov dword [esp + 0x44], ecx
mov dword [esp + 0x40], eax
call fcn.00444390
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x40]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov ecx, dword [esp + 0x44]
call fcn.00446390
sub esp, 8
mov ecx, dword [0x48aafc]
dec ecx
mov dword [0x48aafc], ecx
imul ecx, ecx, 0x9566d337
xor ecx, 0x4b85382e
cmp ecx, 0x28192db1
mov dword [esp + 0x3c], eax
jge 0x42991d
mov eax, dword [0x48c924]
or eax, 0x67435ad6
mov dword [0x48c924], eax
jmp 0x429922
lea eax, [esp + 0x130]
lea ecx, [esp + 0x904]
mov edx, dword [0x4919dc]
not edx
or edx, 0x5b18
mov si, dx
mov word [0x49b27c], si
mov edx, dword [esp + 0xae8]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004077d0
cmp eax, 0
jne 0x4299d9
mov dword [0x48cffc], 0x8d18d86
mov dword [esp + 0x208], 0xffffffff
mov ax, word [0x498e92]
mov cx, ax
dec ecx
mov ax, cx
mov word [0x498e92], ax
movsx ecx, ax
xor ecx, 0x42a914
or ecx, 0xffbd506b
mov dword [0x494b84], ecx
mov ecx, dword [esp + 0xae0]
call fcn.00411050
mov ax, word [0x49ad06]
mov cx, ax
imul ecx, ecx, 0xbefe72ca
mov ax, cx
mov word [0x49ad06], ax
mov dword [esp + 0x12c], 0xd
jmp 0x4299f4
mov eax, dword [0x4927fc]
inc eax
mov dword [0x4927fc], eax
mov dword [0x495cf4], eax
mov dword [esp + 0x12c], 0
lea ecx, [esp + 0x130]
call fcn.0043a120
mov ecx, dword [esp + 0x12c]
test ecx, ecx
mov dword [esp + 0x38], ecx
je 0x429a2e
jmp 0x429a18
mov eax, dword [esp + 0x38]
sub eax, 0xd
mov dword [esp + 0x34], eax
je 0x429b08
jmp 0x429e18
jmp 0x429a33
mov dword [0x48e3fc], 0x9d518153
mov eax, dword [0x494dfc]
mov ecx, eax
dec ecx
mov dword [0x494dfc], ecx
mov ecx, dword [0x490b74]
xor ecx, eax
mov dword [0x490b74], ecx
cmp dword [esp + 0xae4], 0x3afb
jne 0x429af7
mov eax, dword [0x48fb0c]
mov cx, word [0x49cae0]
movsx edx, cx
xor edx, 0xffffffff
and eax, edx
cmp eax, 0x37b59f20
jne 0x429aa6
mov eax, dword [0x48c140]
dec eax
mov dword [0x48c140], eax
mov ecx, dword [0x48b484]
xor eax, ecx
xor eax, 0x50ca6603
mov dword [0x48b484], eax
mov eax, dword [esp + 0xae0]
mov ecx, eax
call fcn.0040a200
cmp eax, 0x500000
jbe 0x429adc
mov ax, word [0x4987f8]
mov cx, ax
xor ecx, 0x651f
mov ax, cx
mov word [0x4987f8], ax
jmp 0x429b08
mov eax, dword [0x490150]
shl eax, 5
or eax, 0xa4502fd
mov ecx, dword [0x48bdc8]
add ecx, eax
mov dword [0x48bdc8], ecx
mov eax, dword [0x48accc]
not eax
mov dword [0x490e3c], eax
jmp 0x428fb2
mov eax, dword [0x48ce84]
shl eax, 7
xor eax, 0x73e4046f
mov ecx, dword [0x48d35c]
or ecx, eax
mov dword [0x48d35c], ecx
cmp dword [esp + 0x208], 0
jl 0x429b95
mov eax, dword [0x4916c8]
add eax, 0x70771212
mov dword [0x4916c8], eax
mov eax, dword [esp + 0xae0]
mov ecx, dword [esp + 0x208]
mov edx, esp
mov dword [edx], 0
mov dword [esp + 0x30], ecx
mov ecx, eax
mov dword [esp + 0x2c], eax
call fcn.00444390
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x30]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov ecx, dword [esp + 0x2c]
call fcn.00446390
sub esp, 8
mov ecx, dword [0x48c184]
add ecx, 0x102c4d00
mov dword [0x48c184], ecx
mov dword [esp + 0x28], eax
mov eax, dword [0x493418]
not eax
mov ecx, dword [0x4945c8]
imul ecx, eax
mov dword [0x4945c8], ecx
cmp dword [esp + 0xae8], 0
je 0x429c59
test byte [esp + 0x1ff], 1
jne 0x429c59
lea eax, [esp + 0x904]
mov cx, word [0x49c422]
mov dx, cx
and edx, 0xa021
mov cx, dx
mov word [0x49c422], cx
mov edx, dword [esp + 0xae8]
mov esi, dword [esp + 0xae0]
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004077d0
cmp eax, 0
jne 0x429c4a
mov ax, word [0x49827a]
mov cx, ax
add ecx, 0x49ccd289
mov ax, cx
mov word [0x49827a], ax
mov ecx, dword [esp + 0xae0]
call fcn.00411050
mov ecx, dword [0x48b8c8]
shl ecx, 2
mov edx, dword [0x492140]
xor edx, ecx
mov dword [0x492140], edx
mov eax, dword [0x49109c]
or eax, 0xd40e96ab
mov dword [0x49109c], eax
mov eax, dword [0x493a38]
imul eax, eax, 0x2586937b
mov dword [0x493a38], eax
mov eax, dword [0x48a918]
mov ecx, dword [esp + 0x6ac]
mov edx, esp
mov dword [edx], ecx
mov dword [edx + 4], 2
call eax
sub esp, 8
mov ecx, dword [0x493510]
and ecx, 0x90024800
mov dword [0x490800], ecx
mov ecx, dword [0x48a8e4]
mov edx, dword [esp + 0x6ac]
mov esi, esp
mov dword [esi], edx
mov dword [esp + 0x24], eax
call ecx
sub esp, 4
mov ecx, dword [0x491824]
dec ecx
mov dword [0x491824], ecx
and ecx, 0xa8380049
mov edx, dword [0x48d6d4]
xor edx, ecx
mov dword [0x48d6d4], edx
mov dword [esp + 0x20], eax
mov eax, 0xd34eec3a
mov ecx, esp
lea edx, [esp + 0x904]
mov dword [ecx], edx
mov dword [ecx + 4], 0xd2
mov dword [esp + 0x1c], eax
call fcn.0044a860
mov si, word [0x49a25c]
movsx eax, si
or eax, 0x6bbbd31f
mov ecx, dword [esp + 0x1c]
cmp ecx, eax
jle 0x429d5a
mov eax, 0x4c1d480e
mov ecx, dword [0x491174]
and ecx, 0xdb4a1f68
cmp eax, ecx
jne 0x429d55
mov eax, dword [0x495f8c]
mov ecx, eax
dec ecx
mov dword [0x495f8c], ecx
add eax, 0xf9c1bb
mov ecx, dword [0x48fe60]
cmp eax, ecx
jl 0x429d50
jmp 0x429d50
jmp 0x429d55
jmp 0x429d5a
mov eax, 0x2b1e982
mov ecx, esp
lea edx, [esp + 0x9d6]
mov dword [ecx], edx
mov dword [ecx + 4], 0xd2
mov dword [esp + 0x18], eax
call fcn.0044a860
mov eax, dword [0x48cce8]
add eax, 0xf6647ad
mov dword [0x48cce8], eax
mov eax, esp
lea ecx, [esp + 0x6b2]
mov dword [eax], ecx
mov dword [eax + 4], 0x252
call fcn.0044a860
mov eax, dword [0x495810]
and eax, 0xe8108b02
mov dword [0x495810], eax
mov eax, esp
lea ecx, [esp + 0x22a]
mov dword [eax], ecx
mov dword [eax + 4], 0x452
call fcn.0044a860
mov eax, dword [0x495278]
xor eax, 0xffffffff
mov ecx, dword [esp + 0x18]
cmp ecx, eax
jg 0x429dee
mov eax, dword [0x49345c]
add eax, 0xf370eb64
mov dword [0x49345c], eax
jmp 0x429e04
mov eax, dword [0x48b81c]
dec eax
mov dword [0x48b81c], eax
imul eax, eax, 0x606e9241
mov dword [0x493b40], eax
lea ecx, [esp + 0x67c]
call fcn.0043a120
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
int3