Function at 0x441910
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0xb40
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov ebx, 0x94f4c80a
mov dword [esp + 0xb38], eax
mov dword [esp + 0xb34], ecx
mov dword [esp + 0xb30], edx
mov dword [esp + 0xb2c], esi
mov dword [esp + 0xb28], edi
mov eax, dword [0x49a880]
sar eax, 5
add eax, 0x376fe3b6
mov ecx, dword [0x497074]
xor eax, ecx
xor eax, 0x637c8828
mov dword [0x497074], eax
mov eax, esp
mov dword [eax + 4], 8
mov dword [eax], 0x53a2
mov dword [esp + 0x120], ebx
call fcn.00418300
mov dword [esp + 0xb24], eax
mov eax, dword [0x49ae48]
shl eax, 7
and eax, 0xe1065dbd
mov ecx, dword [esp + 0x120]
cmp ecx, eax
jl 0x4419e8
mov eax, 0x203c77c1
mov ecx, dword [0x495800]
shl ecx, 9
and ecx, 0xa6f80400
mov edx, dword [0x4952b8]
sar edx, 4
and ecx, edx
cmp eax, ecx
jge 0x4419e3
mov word [0x49d31c], 0xdffb
jmp 0x4419e8
mov eax, dword [esp + 0xb24]
mov ecx, dword [esp + 0xb28]
mov edx, esp
mov dword [edx + 4], eax
mov dword [edx], ecx
call fcn.00455000
mov dword [esp + 0xafc], eax
mov eax, dword [0x4976ac]
add eax, 0x51800b83
mov dword [0x4976ac], eax
mov eax, dword [esp + 0xb24]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 8
call fcn.00437a50
mov eax, dword [0x4972bc]
add eax, 0xc2424d6a
mov dword [0x4972bc], eax
cmp dword [esp + 0xafc], 0
jne 0x441ba9
mov eax, dword [0x499ad4]
mov ecx, eax
inc ecx
mov dword [0x499ad4], ecx
add eax, 0x83db960c
and eax, 0xbbd4
mov dx, word [0x49c1fa]
mov cx, dx
imul ecx, eax
mov dx, cx
mov word [0x49c1fa], dx
cmp dword [esp + 0xb38], 0
je 0x441acb
mov ax, word [0x49d74a]
mov cx, ax
and ecx, 0x1683
mov ax, cx
mov word [0x49d74a], ax
mov ecx, dword [esp + 0xb30]
call fcn.00403c80
mov ecx, dword [0x49775c]
mov edx, dword [0x498fec]
lea ecx, [ecx + edx - 0x466c9666]
mov dword [0x498fec], ecx
jmp 0x44419e
mov eax, dword [0x498144]
add eax, 0xb6fa6013
mov dword [0x498144], eax
mov eax, dword [esp + 0xb30]
mov ecx, dword [esp + 0xb2c]
mov edx, esp
mov dword [edx + 4], eax
mov dword [edx], ecx
call fcn.0042b8f0
mov dword [esp + 0xaf8], eax
mov eax, dword [0x495b78]
or eax, 0x4d571f09
mov dword [0x495b78], eax
cmp dword [esp + 0xaf8], 0
jg 0x441b88
mov eax, 0xc9579bcf
mov cx, word [0x49cf48]
movsx edx, cx
and edx, 0xe6cd887e
cmp eax, edx
jne 0x441b56
mov eax, dword [0x495b04]
mov ecx, eax
dec ecx
mov dword [0x495b04], ecx
add eax, 0x2a48ef81
mov ecx, dword [0x497ec4]
xor ecx, eax
mov dword [0x497ec4], ecx
mov ecx, dword [esp + 0xb30]
call fcn.00403c80
mov ecx, dword [0x495340]
mov eax, ecx
dec eax
mov dword [0x495340], eax
mov dx, word [0x49cf60]
mov ax, dx
lea eax, [eax + ecx - 1]
mov dx, ax
mov word [0x49cf60], dx
mov ax, word [0x49ca16]
movsx ecx, ax
mov edx, 0xe14df3fd
sub edx, ecx
xor edx, 0x90243114
mov dword [0x496388], edx
jmp 0x44419e
mov eax, 0x2c8a4f59
mov ecx, dword [0x49ab7c]
mov edx, dword [0x49790c]
xor edx, ecx
mov dword [0x49790c], edx
mov dword [0x498224], 0x51102ba9
mov ecx, dword [0x497f34]
or ecx, 0xe4da1e8f
mov dword [0x497f34], ecx
mov ecx, dword [0x495884]
mov edx, ecx
inc edx
mov dword [0x495884], edx
sub eax, ecx
cmp eax, 0x77229586
jge 0x441c4b
mov eax, 0xcbf2afd9
mov ecx, dword [0x4989e8]
mov edx, ecx
inc edx
mov dword [0x4989e8], edx
mov si, word [0x49bd76]
mov dx, si
inc edx
mov di, dx
mov word [0x49bd76], di
movsx edx, si
sub edx, 0x8c4bb29a
or ecx, edx
cmp eax, ecx
je 0x441c46
mov eax, dword [0x495a90]
imul eax, eax, 0xe1fc920e
mov dword [0x495a90], eax
jmp 0x441c4b
mov eax, 0x1eeef819
mov ecx, dword [0x497470]
or ecx, 0x1ad1c38
cmp eax, ecx
jl 0x441c73
mov eax, dword [0x495670]
xor eax, 0xf5cca739
mov dword [0x495670], eax
mov eax, 0x7a37aba3
mov ecx, dword [0x498d98]
shl ecx, 0xa
mov dx, word [0x49d712]
movsx esi, dx
and ecx, esi
mov esi, dword [0x4957ac]
or esi, ecx
mov dword [0x4957ac], esi
mov ecx, dword [0x495954]
and ecx, 0x82941000
mov dword [0x495954], ecx
lea ecx, [esp + 0x68c]
mov dword [esp + 0x11c], eax
call fcn.0043d690
mov ecx, dword [0x497fe8]
imul ecx, ecx, 0x68888501
mov dword [0x497fe8], ecx
mov dx, word [0x49c5ae]
movsx ecx, dx
mov esi, dword [0x4970b4]
dec esi
mov dword [0x4970b4], esi
imul ecx, esi
shl ecx, 8
mov esi, dword [0x494b74]
or esi, ecx
mov dword [0x494b74], esi
mov ecx, dword [0x499944]
shl ecx, 4
add ecx, 0x9cb29d8
mov esi, dword [0x497dc8]
and esi, ecx
mov dword [0x497dc8], esi
mov ecx, dword [0x4957a8]
or ecx, 0xea60b037
mov dword [0x4957a8], ecx
mov dword [esp + 0x20c], 0
mov dword [esp + 0x208], 0
mov ecx, dword [0x499a68]
and ecx, 0x43df6b8f
mov dword [0x499a68], ecx
mov ecx, dword [0x496ec4]
and ecx, 0x4363a2a
mov esi, dword [esp + 0x11c]
cmp esi, ecx
mov dword [esp + 0x118], eax
jl 0x441d89
mov eax, dword [0x498768]
mov ecx, dword [0x499f98]
add ecx, eax
mov dword [0x499f98], ecx
mov dword [esp + 0x200], 0xffffffff
mov dword [esp + 0x1fc], 0xffffffff
mov eax, dword [0x4969e4]
mov ecx, eax
dec ecx
mov dword [0x4969e4], ecx
mov dx, word [0x49bbca]
movsx ecx, dx
not ecx
or eax, ecx
mov ecx, dword [0x497730]
and ecx, eax
mov dword [0x497730], ecx
mov dword [esp + 0x1f8], 0x50
mov eax, dword [0x495300]
imul eax, eax, 0xdcb78ff9
mov dword [0x495300], eax
mov byte [esp + 0x1f7], 0
mov dx, word [0x49bc04]
mov ax, dx
xor eax, 0x9c6
mov dx, ax
mov word [0x49bc04], dx
mov eax, esp
mov dword [eax], 0
call fcn.00450c50
add eax, 0x258
adc edx, 0
mov dword [esp + 0x208], eax
mov dword [esp + 0x20c], edx
mov eax, dword [0x497398]
mov ecx, dword [0x4971d0]
imul eax, ecx
shl eax, 8
mov dword [0x4971d0], eax
mov byte [esp + 0x6c6], 0
mov eax, dword [0x4979d8]
add eax, 0xd1bcf4b3
mov si, word [0x49b244]
mov cx, si
inc ecx
mov di, cx
mov word [0x49b244], di
movsx ecx, si
cmp eax, ecx
jge 0x441e8d
mov ax, word [0x49e2fc]
mov cx, ax
xor ecx, 0x1836
mov ax, cx
mov word [0x49e2fc], ax
jmp 0x441eaf
mov eax, dword [0x497540]
sar eax, 4
imul eax, eax, 0xe2a25bea
mov ecx, 0x5394bfc2
sub ecx, eax
mov eax, dword [0x496204]
imul eax, ecx
mov dword [0x496204], eax
mov eax, dword [esp + 0xb28]
mov ecx, esp
mov dword [ecx], eax
call fcn.00451d60
mov dword [esp + 0x21c], eax
mov eax, dword [0x499a50]
mov ecx, eax
inc ecx
mov dword [0x499a50], ecx
add eax, 0xb4eb7d0d
mov ecx, dword [0x4964cc]
imul ecx, eax
mov dword [0x4964cc], ecx
cmp dword [esp + 0x21c], 0x7f
jle 0x441f0b
mov eax, dword [0x4957b4]
imul eax, eax, 0xdfb6db9f
mov dword [0x4957b4], eax
jmp 0x4440e8
mov eax, 0xdb8fe61d
mov ecx, dword [0x494c5c]
inc ecx
mov dword [0x494c5c], ecx
cmp eax, ecx
jle 0x441f35
mov eax, dword [0x49a2e4]
imul eax, eax, 0x715f50d2
mov dword [0x49a2e4], eax
mov eax, dword [esp + 0xb28]
mov ecx, esp
mov dword [ecx + 4], eax
lea eax, [esp + 0xa12]
mov dword [ecx], eax
call fcn.00454f00
mov ecx, dword [0x4989cc]
or ecx, 0xc0f4c061
mov dword [0x4989cc], ecx
mov ecx, dword [esp + 0x21c]
sub ecx, 1
mov dword [esp + 0x218], ecx
mov dword [esp + 0x114], eax
mov eax, dword [esp + 0x218]
mov ecx, dword [esp + 0x21c]
sub ecx, 6
cmp eax, ecx
jl 0x4420e9
mov eax, dword [0x494fc4]
mov ecx, eax
dec ecx
mov dword [0x494fc4], ecx
add eax, 0x97758a3a
mov dx, ax
mov word [0x49cd2a], dx
mov eax, dword [esp + 0x218]
movsx eax, byte [esp + eax + 0xa12]
cmp eax, 0x3a
jne 0x4420a2
mov eax, dword [0x49a54c]
add eax, 0x29ed81cf
mov dword [0x49a54c], eax
mov eax, dword [esp + 0x218]
mov byte [esp + eax + 0xa12], 0
mov cx, word [0x49cfc2]
mov ax, cx
dec eax
mov cx, ax
mov word [0x49cfc2], cx
movsx eax, cx
add eax, 0x25f5359e
mov edx, dword [0x49a63c]
xor eax, edx
xor eax, 0x38a20737
mov dword [0x49a63c], eax
mov eax, dword [esp + 0x218]
mov dword [esp + 0x21c], eax
mov eax, dword [0x499fd8]
or eax, 0x545a7fe5
mov dword [0x499fd8], eax
mov eax, dword [esp + 0x218]
lea edx, [esp + 0xa12]
lea eax, [eax + edx + 1]
mov edx, esp
mov dword [edx], eax
call fcn.00455291
mov dword [esp + 0x1f8], eax
mov eax, dword [0x4991f8]
xor eax, 0x167434a6
or eax, 0x5a47cc78
cmp eax, 0xa85d185c
jg 0x442081
mov eax, dword [0x499a60]
and eax, 0xddffefd9
mov dword [0x499a60], eax
jmp 0x44209d
mov eax, dword [0x499c74]
mov ecx, eax
dec ecx
mov dword [0x499c74], ecx
mov ecx, dword [0x49797c]
add ecx, eax
mov dword [0x49797c], ecx
jmp 0x4420e9
mov eax, 0xff6ab3dc
mov cx, word [0x49c6d8]
movsx edx, cx
or edx, 0x60fd70fd
cmp eax, edx
jl 0x4420ce
mov eax, dword [0x499dac]
add eax, 0x4a716191
mov dword [0x499dac], eax
jmp 0x4420d3
mov eax, dword [esp + 0x218]
add eax, 0xffffffff
mov dword [esp + 0x218], eax
jmp 0x441f79
mov eax, 0x80480102
mov cx, word [0x49c99e]
mov dx, cx
inc edx
mov si, dx
mov word [0x49c99e], si
movsx edx, cx
add edx, 0x59744dbc
mov edi, dword [0x49a888]
inc edi
mov dword [0x49a888], edi
add edx, edi
cmp eax, edx
je 0x442179
mov eax, 0x510a0400
mov ecx, dword [0x49924c]
sar ecx, 7
xor ecx, 0xcd43b0ee
xor ecx, 0xe8aebbc6
cmp eax, ecx
jg 0x442174
mov eax, dword [0x4987c4]
mov ecx, eax
inc ecx
mov dword [0x4987c4], ecx
mov ecx, dword [0x496364]
xor eax, ecx
inc ecx
mov dword [0x496364], ecx
mov ecx, dword [0x49892c]
xor eax, ecx
xor eax, 0x168652ff
mov dword [0x49892c], eax
jmp 0x442179
mov dword [esp + 0x218], 0
mov eax, dword [esp + 0x218]
cmp eax, dword [esp + 0x21c]
jg 0x44231d
mov ax, word [0x49c8f2]
mov cx, ax
mov edx, ecx
inc edx
mov ax, dx
mov word [0x49c8f2], ax
imul ecx, ecx, 0xf01abfe
mov edx, 0x77615297
sub edx, ecx
mov ax, word [0x49b968]
mov cx, ax
sub ecx, edx
mov ax, cx
mov word [0x49b968], ax
mov ecx, dword [esp + 0x218]
mov bl, byte [esp + ecx + 0xa12]
mov byte [esp + ecx + 0x92c], bl
mov ax, word [0x49d746]
mov cx, ax
xor ecx, 0x9fbd
mov ax, cx
mov word [0x49d746], ax
mov ecx, dword [esp + 0x218]
movsx ecx, byte [esp + ecx + 0x92c]
cmp ecx, 0x2f
jne 0x4422f8
mov eax, 0x6b7ced22
mov ecx, dword [0x49ac04]
inc ecx
mov dword [0x49ac04], ecx
sub ecx, 0xf33ecbb
cmp eax, ecx
jne 0x442242
mov eax, dword [0x4953c4]
and eax, 0x840cb
mov dword [0x4953c4], eax
mov eax, dword [esp + 0x218]
mov byte [esp + eax + 0x92c], 0
mov cx, word [0x49d8b6]
mov ax, cx
and eax, 0x7a4d
mov cx, ax
mov word [0x49d8b6], cx
mov eax, dword [esp + 0x218]
mov dword [esp + 0x214], eax
mov eax, dword [esp + 0x214]
cmp eax, dword [esp + 0x21c]
jg 0x4422e4
mov dword [0x49a6f0], 0xfecbff4f
mov eax, dword [esp + 0x214]
mov cl, byte [esp + eax + 0xa12]
mov edx, dword [esp + 0x218]
sub eax, edx
mov byte [esp + eax + 0x6c6], cl
mov eax, dword [0x49ab74]
lea eax, [eax + eax - 0x3885006f]
mov edx, dword [0x497030]
sub edx, eax
mov dword [0x497030], edx
mov eax, dword [esp + 0x214]
add eax, 1
mov dword [esp + 0x214], eax
jmp 0x442278
mov eax, dword [0x49701c]
or eax, 0xcff5d588
mov dword [0x49a858], eax
jmp 0x44231d
mov eax, dword [0x495324]
add eax, 0xd2bfa7fe
mov dword [0x495324], eax
mov eax, dword [esp + 0x218]
add eax, 1
mov dword [esp + 0x218], eax
jmp 0x442184
lea eax, [esp + 0x6c6]
mov ecx, dword [0x497070]
mov dx, word [0x49dd86]
mov si, dx
or ecx, esi
or ecx, 0x8683
mov dx, cx
mov word [0x49dd86], dx
mov ecx, esp
mov dword [ecx], eax
call fcn.00451d60
mov ecx, dword [esp + 0xb2c]
mov esi, esp
mov dword [esi], ecx
mov dword [esp + 0x110], eax
call fcn.00451d60
mov ecx, dword [esp + 0x110]
add ecx, eax
cmp ecx, 0x1ff
jbe 0x442390
mov eax, dword [0x49779c]
imul eax, eax, 0x9ed33054
mov dword [0x49779c], eax
jmp 0x4440e8
mov eax, 0x4d878974
mov cx, word [0x49d7f4]
movsx edx, cx
mov esi, dword [0x494e1c]
xor esi, edx
mov dword [0x494e1c], esi
mov edx, dword [esp + 0xb2c]
mov esi, esp
mov dword [esi + 4], edx
lea edx, [esp + 0x6c6]
mov dword [esi], edx
mov dword [esp + 0x10c], eax
call fcn.00454f10
mov edx, dword [0x496214]
shl edx, 5
and edx, 0x754d9dc5
mov esi, dword [esp + 0x10c]
cmp esi, edx
mov dword [esp + 0x108], eax
jl 0x442424
mov eax, dword [0x49752c]
shl eax, 3
mov ecx, 0xb5e42fca
sub ecx, eax
xor ecx, 0xd459
mov dx, word [0x49d5b4]
mov ax, dx
imul eax, ecx
mov dx, ax
mov word [0x49d5b4], dx
jmp 0x44242d
mov word [0x49b30c], 0x1833
mov dword [esp + 0x214], 0
mov eax, dword [0x49a8f4]
xor eax, 0x249589c7
mov dword [0x49a8f4], eax
mov eax, esp
mov dword [eax + 4], 5
mov dword [eax], 0x32ab
call fcn.00418300
mov dword [esp + 0xb20], eax
mov eax, dword [0x4972bc]
dec eax
mov dword [0x4972bc], eax
mov ecx, dword [0x4995e4]
sub ecx, eax
mov dword [0x4995e4], ecx
mov eax, dword [esp + 0xb20]
mov ecx, esp
mov dword [ecx], eax
lea ecx, [esp + 0x68c]
call fcn.0043ee60
sub esp, 4
mov ecx, dword [0x499014]
shl ecx, 4
add ecx, 0xede68d60
mov edx, dword [0x4978f0]
sub ecx, edx
mov edx, dword [0x49a754]
imul edx, ecx
mov dword [0x49a754], edx
mov ecx, dword [esp + 0xb20]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], 5
mov dword [esp + 0x104], eax
call fcn.00437a50
mov eax, dword [0x4978e8]
and eax, 0xf59d745a
mov dword [0x4978e8], eax
mov eax, dword [esp + 0xb30]
mov ecx, eax
call fcn.0042a190
cmp eax, 0
je 0x442891
mov eax, dword [0x4951cc]
and eax, 0x3c58d07f
mov dword [0x4951cc], eax
mov eax, esp
mov dword [eax + 4], 0xc
mov dword [eax], 0x46c
call fcn.00418300
mov dword [esp + 0xb1c], eax
mov eax, dword [0x498ffc]
mov ecx, eax
inc ecx
mov dword [0x498ffc], ecx
add eax, 0xcbfd131b
mov ecx, dword [0x497aa4]
xor eax, ecx
cmp eax, 0xe235797f
jge 0x4425a8
mov eax, 0xb13a4420
mov ecx, dword [0x4982f8]
xor ecx, 0xffffffff
and ecx, 0x56a7464
and ecx, 0x12fe81a0
cmp eax, ecx
je 0x4425a3
mov eax, dword [0x498de8]
imul eax, eax, 0x7154912b
and eax, 0xe2218533
mov cx, word [0x49d7b8]
movsx edx, cx
or edx, 0x243ea03c
cmp eax, edx
jl 0x44259e
jmp 0x44259e
jmp 0x4425a3
jmp 0x4425b7
mov eax, dword [0x497cc8]
or eax, 0xaba4462f
mov dword [0x497cc8], eax
mov ecx, dword [esp + 0xb30]
mov eax, dword [esp + 0xb1c]
mov edx, esp
mov dword [edx], eax
lea eax, [esp + 0x1e0]
mov dword [esp + 0x100], ecx
mov ecx, eax
mov dword [esp + 0xfc], eax
call fcn.00425cf0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xfc]
mov dword [ecx], edx
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x100]
mov dword [esp + 0xf8], eax
call fcn.00432270
sub esp, 8
mov dword [esp + 0x218], eax
mov ecx, dword [esp + 0xfc]
call fcn.0043fd00
mov eax, dword [0x4963e0]
and eax, 0xc2a905e5
cmp eax, 0xf2edff5b
je 0x44265b
mov eax, dword [0x495fd8]
imul eax, eax, 0xb6918a35
or eax, 0x95893ddd
mov ecx, dword [0x497348]
sub ecx, eax
mov dword [0x497348], ecx
jmp 0x442685
mov eax, dword [0x497d78]
mov ecx, eax
dec ecx
mov dword [0x497d78], ecx
mov ecx, dword [0x49a3b4]
imul ecx, ecx, 0x683f33db
sub eax, ecx
mov ecx, dword [0x49aa74]
xor ecx, eax
mov dword [0x49aa74], ecx
mov eax, dword [esp + 0xb1c]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0xc
call fcn.00437a50
mov eax, dword [0x497c6c]
sar eax, 4
imul eax, eax, 0xa96798b
xor eax, 0x6c7750fc
mov ecx, dword [0x499090]
sub ecx, eax
mov dword [0x499090], ecx
cmp dword [esp + 0x218], 0
jne 0x442828
mov eax, dword [0x4979a0]
mov ecx, eax
inc ecx
mov dword [0x4979a0], ecx
imul eax, eax, 0x4ae326b0
add eax, 0x8183ecd7
mov ecx, dword [0x498634]
and ecx, eax
mov dword [0x498634], ecx
mov dword [esp + 0x214], 1
mov eax, dword [0x496db0]
sar eax, 5
imul eax, eax, 0xc46aa13e
mov dx, word [0x49d53c]
mov cx, dx
inc ecx
mov dx, cx
mov word [0x49d53c], dx
movsx ecx, dx
and ecx, 0x4dbd7f75
xor ecx, 0x7c61843
cmp eax, ecx
je 0x442746
mov eax, dword [0x49a138]
add eax, 0xc554d6cc
mov dword [0x49a138], eax
mov eax, dword [esp + 0xb30]
mov ecx, esp
mov dword [ecx], 0
mov ecx, eax
mov dword [esp + 0xf4], eax
call fcn.0043ac00
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xb
mov ecx, dword [esp + 0xf4]
call fcn.0041d140
sub esp, 8
mov ecx, dword [0x499c1c]
not ecx
mov dword [0x496420], ecx
mov ecx, esp
mov dword [ecx + 4], 6
mov dword [ecx], 0x389d
mov dword [esp + 0xf0], eax
call fcn.00418300
mov dword [esp + 0xb18], eax
mov eax, dword [0x498fb0]
add eax, 0x600b021a
mov dword [0x498fb0], eax
mov eax, dword [esp + 0xb18]
mov ecx, esp
mov dword [ecx], eax
lea ecx, [esp + 0x68c]
call fcn.0043ee60
sub esp, 4
mov word [0x49dcc2], 0x222b
mov ecx, dword [esp + 0xb18]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], 6
mov dword [esp + 0xec], eax
call fcn.00437a50
mov si, word [0x49ce1e]
mov ax, si
shl eax, 6
and eax, 0x6bc0
mov si, word [0x49b686]
mov cx, si
sub ecx, eax
mov si, cx
mov word [0x49b686], si
mov eax, dword [0x4983ec]
sar eax, 1
and eax, 0xe3167404
or eax, 0x1cf2ad6b
cmp eax, 0xbfce11df
jg 0x44288c
mov eax, 0x3ae062d4
mov ecx, dword [0x49add4]
mov edx, ecx
inc edx
mov dword [0x49add4], edx
sub eax, ecx
cmp eax, 0x2211235b
jne 0x442887
mov eax, dword [0x499f58]
imul eax, eax, 0x2a86a077
mov cx, word [0x49e0e8]
mov dx, cx
or edx, eax
mov cx, dx
mov word [0x49e0e8], cx
jmp 0x44288c
jmp 0x442891
mov eax, 0x9f541c40
mov ecx, dword [0x49a534]
or ecx, 0x3141f4c1
cmp eax, ecx
jne 0x4428b4
mov eax, dword [0x4980c0]
mov dword [0x497a38], eax
mov eax, esp
lea ecx, [esp + 0x6c6]
mov dword [eax], ecx
lea eax, [esp + 0x1cc]
mov ecx, eax
mov dword [esp + 0xe8], eax
call fcn.0043f6b0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xe8]
mov dword [ecx], edx
lea ecx, [esp + 0x68c]
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xe0], eax
call fcn.0041a040
sub esp, 4
mov ecx, dword [esp + 0xe8]
mov dword [esp + 0xdc], eax
call fcn.0041e5d0
mov eax, dword [0x498e28]
sar eax, 2
imul eax, eax, 0xd25e4fc2
or eax, 0xa0375d40
mov ecx, dword [0x496a08]
sub ecx, eax
mov dword [0x496a08], ecx
mov eax, esp
mov dword [eax + 4], 0x32
mov dword [eax], 0x51b2
call fcn.00418300
mov dword [esp + 0xb14], eax
mov dword [0x49abac], 0x6b7fff3a
mov eax, dword [esp + 0xb14]
mov ecx, esp
mov dword [ecx], eax
lea eax, [esp + 0x1b8]
mov ecx, eax
mov dword [esp + 0xd8], eax
call fcn.0043f6b0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xd8]
mov dword [ecx], edx
mov ecx, dword [esp + 0xe4]
mov dword [esp + 0xd4], eax
call fcn.0041a040
sub esp, 4
mov ecx, dword [esp + 0xd8]
mov dword [esp + 0xd0], eax
call fcn.0041e5d0
mov si, word [0x49c3f0]
mov ax, si
add eax, 0xe4598bf6
mov si, ax
mov word [0x49c3f0], si
mov eax, dword [esp + 0xb14]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0x32
call fcn.00437a50
mov si, word [0x49ce0c]
mov ax, si
and eax, 0x7e15
mov ecx, dword [0x498d24]
mov edx, ecx
dec edx
mov dword [0x498d24], edx
xor eax, ecx
mov si, word [0x49d060]
mov cx, si
or ecx, eax
mov si, cx
mov word [0x49d060], si
mov eax, esp
lea ecx, [esp + 0x92c]
mov dword [eax], ecx
lea eax, [esp + 0x1a4]
mov ecx, eax
mov dword [esp + 0xcc], eax
call fcn.0043f6b0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xcc]
mov dword [ecx], edx
mov ecx, dword [esp + 0xe4]
mov dword [esp + 0xc8], eax
call fcn.0041a040
sub esp, 4
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0xc4], eax
call fcn.0041e5d0
mov eax, dword [0x4993e4]
mov ecx, 0xc15e8bad
sub ecx, eax
mov eax, dword [0x494d3c]
or eax, ecx
mov dword [0x494d3c], eax
cmp dword [esp + 0x214], 0
je 0x442de5
mov eax, 0xb4a8840a
mov ecx, dword [0x4996dc]
shl ecx, 9
or ecx, 0xf5d757ff
mov edx, dword [0x499cb8]
add edx, ecx
mov dword [0x499cb8], edx
mov ecx, esp
mov dword [ecx + 4], 0x44
mov dword [ecx], 0x3702
mov dword [esp + 0xc0], eax
call fcn.00418300
mov dword [esp + 0xb10], eax
mov eax, dword [0x499280]
sar eax, 3
mov ecx, dword [0x495d44]
lea eax, [eax + ecx + 0x79d8ea0e]
mov dword [0x495d44], eax
mov eax, dword [esp + 0xb10]
mov ecx, esp
mov dword [ecx], eax
lea eax, [esp + 0x190]
mov ecx, eax
mov dword [esp + 0xbc], eax
call fcn.0043f6b0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xbc]
mov dword [ecx], edx
lea ecx, [esp + 0x68c]
mov dword [esp + 0xb8], eax
call fcn.0041a040
sub esp, 4
mov ecx, dword [esp + 0xbc]
mov dword [esp + 0xb4], eax
call fcn.0041e5d0
mov si, word [0x49bdd6]
mov ax, si
add eax, 0x50ffd7fe
mov si, ax
mov word [0x49bdd6], si
mov eax, esp
mov dword [eax + 4], 3
mov dword [eax], 0x55e2
call fcn.00418300
mov dword [esp + 0xb0c], eax
mov eax, dword [0x49858c]
mov ecx, eax
inc ecx
mov dword [0x49858c], ecx
sub eax, 0xb1e17cc3
mov ecx, dword [esp + 0xc0]
cmp ecx, eax
jle 0x442bff
mov ax, word [0x49c226]
mov cx, ax
inc ecx
mov dx, cx
mov word [0x49c226], dx
movsx ecx, ax
add ecx, 0x8325fb62
mov ax, word [0x49b55c]
movsx esi, ax
or ecx, esi
cmp ecx, 0xed9274d6
je 0x442bfa
mov eax, dword [0x4950b8]
dec eax
mov dword [0x4950b8], eax
mov ecx, dword [0x499698]
dec ecx
mov dword [0x499698], ecx
sub eax, ecx
mov ecx, dword [0x497f50]
imul ecx, eax
mov dword [0x497f50], ecx
jmp 0x442c15
mov eax, dword [0x496c00]
sar eax, 4
mov ecx, dword [0x4974d0]
xor ecx, eax
mov dword [0x4974d0], ecx
mov eax, 0x54f647d8
mov ecx, dword [esp + 0xb10]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], 0x44
mov dword [esp + 0xb0], eax
call fcn.00437a50
mov si, word [0x49d2b4]
movsx eax, si
shl eax, 1
sub eax, 0xbe77312
mov ecx, dword [esp + 0xb0]
cmp ecx, eax
je 0x442cd2
mov eax, 0x57ab3428
mov ecx, dword [0x496e80]
mov edx, ecx
inc edx
mov dword [0x496e80], edx
imul ecx, ecx, 0x66c073a
imul ecx, ecx, 0x57c25b3f
cmp eax, ecx
je 0x442ca9
mov ax, word [0x49d5da]
mov cx, ax
imul ecx, ecx, 0x709bed3e
mov ax, word [0x49d262]
mov dx, ax
or edx, ecx
mov ax, dx
mov word [0x49d262], ax
jmp 0x442ccd
mov eax, 0xcb978ed5
mov ecx, dword [0x499630]
dec ecx
mov dword [0x499630], ecx
cmp eax, ecx
jg 0x442cc8
jmp 0x442cc8
jmp 0x442ccd
jmp 0x442cea
mov ax, word [0x49b26e]
mov cx, ax
or ecx, 0x1728
mov ax, cx
mov word [0x49b26e], ax
mov ecx, dword [esp + 0xb30]
call fcn.0042a190
mov ecx, dword [esp + 0xb0c]
mov edx, esp
mov dword [edx + 8], eax
mov dword [edx + 4], ecx
lea eax, [esp + 0x226]
mov dword [edx], eax
mov dword [esp + 0xac], eax
call fcn.0045518f
mov ecx, dword [0x49ae10]
and ecx, 0xc6b3bbc1
mov dword [0x49ae10], ecx
mov ecx, dword [esp + 0xb0c]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], 3
mov dword [esp + 0xa8], eax
call fcn.00437a50
mov eax, dword [0x495e6c]
xor eax, 0x763b8bc7
mov dword [0x495e6c], eax
mov eax, esp
mov ecx, dword [esp + 0xac]
mov dword [eax], ecx
lea eax, [esp + 0x17c]
mov ecx, eax
mov dword [esp + 0xa4], eax
call fcn.0043f6b0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xa4]
mov dword [ecx], edx
lea ecx, [esp + 0x68c]
mov dword [esp + 0xa0], eax
call fcn.0041a040
sub esp, 4
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x9c], eax
call fcn.0041e5d0
mov eax, dword [0x4973cc]
shl eax, 5
or eax, 0x546f1a8b
cmp eax, 0xc002000
jle 0x442de0
mov ax, word [0x49cc74]
mov cx, ax
add ecx, 0x39e3a35b
mov ax, cx
mov word [0x49cc74], ax
jmp 0x442de5
mov dword [0x49a0e8], 0xf32be239
mov eax, esp
mov dword [eax + 4], 5
mov dword [eax], 0x3f6f
call fcn.00418300
mov dword [esp + 0xb08], eax
mov word [0x49c980], 0xc634
mov eax, dword [esp + 0xb08]
mov ecx, esp
mov dword [ecx], eax
lea eax, [esp + 0x168]
mov ecx, eax
mov dword [esp + 0x98], eax
call fcn.0043f6b0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x98]
mov dword [ecx], edx
lea ecx, [esp + 0x68c]
mov dword [esp + 0x94], eax
call fcn.0041a040
sub esp, 4
mov ecx, dword [esp + 0x98]
mov dword [esp + 0x90], eax
call fcn.0041e5d0
mov eax, dword [0x497948]
add eax, 0x5bb7cd0a
mov dword [0x497948], eax
mov eax, dword [esp + 0xb08]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 5
call fcn.00437a50
mov eax, dword [0x497e6c]
imul eax, eax, 0xdce40d44
mov dword [0x497e6c], eax
cmp dword [esp + 0x214], 0
je 0x442ef0
mov eax, dword [0x494d50]
add eax, 0x200b3068
mov dword [0x494d50], eax
mov eax, dword [esp + 0xb30]
mov ecx, esp
mov dword [ecx], eax
lea ecx, [esp + 0x68c]
call fcn.0041a040
sub esp, 4
mov ecx, dword [0x49b010]
and ecx, 0x10344b0a
mov dword [0x49b010], ecx
mov dword [esp + 0x8c], eax
mov eax, dword [0x49a96c]
imul eax, eax, 0xf61892e0
mov dword [0x49a96c], eax
mov eax, dword [0x4948ac]
mov ecx, esp
lea edx, [esp + 0x92c]
mov dword [ecx], edx
call eax
sub esp, 4
mov dword [esp + 0x220], eax
mov word [0x49c74a], 0xbbff
cmp dword [esp + 0x220], 0
jne 0x442f47
mov eax, dword [0x497f04]
and eax, 0xa0c0d400
mov dword [0x497f04], eax
jmp 0x4440e8
mov eax, 0x9045478
mov ecx, dword [0x496414]
xor ecx, 0x9a34f5f6
mov dword [0x496414], ecx
xorps xmm0, xmm0
movaps xmmword [esp + 0x6a0], xmm0
mov dx, word [0x49cd76]
movsx ecx, dx
imul ecx, ecx, 0x778f9445
cmp eax, ecx
je 0x442f9a
mov eax, dword [0x498244]
add eax, 0x201729b6
mov ecx, dword [0x496580]
imul ecx, eax
mov dword [0x496580], ecx
mov word [esp + 0x6a0], 2
mov ax, word [0x49d2b0]
mov cx, ax
add ecx, 0x4d6bdf79
mov ax, cx
mov word [0x49d2b0], ax
mov ecx, dword [0x4948b4]
mov edx, dword [0x4948b8]
mov esi, dword [esp + 0x220]
mov esi, dword [esi + 0xc]
mov esi, dword [esi]
mov esi, dword [esi]
mov dword [esp + 0x164], esi
mov esi, dword [esp + 0x164]
mov edi, esp
mov dword [edi], esi
mov dword [esp + 0x88], ecx
call edx
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [esp + 0x88]
call eax
sub esp, 4
mov dword [esp + 0x6a4], eax
mov eax, dword [0x495e64]
xor eax, 0xee32268e
mov dword [0x495e64], eax
mov eax, dword [0x4948b0]
movzx ecx, word [esp + 0x1f8]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov word [esp + 0x6a2], ax
mov dword [0x4997e8], 0x2600120
cmp dword [esp + 0xb34], 0
je 0x4431da
mov eax, dword [0x49857c]
cmp eax, 0xdfffffff
jl 0x44306f
mov eax, dword [0x495948]
add eax, 0xf56036d1
mov dword [0x495948], eax
mov eax, dword [esp + 0xb34]
mov ecx, 0x10624dd3
mul ecx
shr edx, 6
mov eax, esp
mov dword [eax + 4], edx
lea ecx, [esp + 0x6a0]
mov dword [eax], ecx
call fcn.00415ca0
mov dword [esp + 0x6c0], eax
mov eax, dword [0x498fe8]
or eax, 0x520af7aa
mov dword [0x498fe8], eax
cmp dword [esp + 0x6c0], 0
jge 0x4430df
mov eax, dword [0x4984d8]
shr eax, 7
or eax, 0x859c
mov cx, word [0x49d63a]
mov dx, cx
add edx, eax
mov cx, dx
mov word [0x49d63a], cx
jmp 0x4440e8
mov ax, word [0x49cc08]
movsx ecx, ax
not ecx
imul ecx, ecx, 0xcd5abe7c
mov edx, dword [0x49943c]
or edx, ecx
mov dword [0x49943c], edx
mov ecx, dword [0x4948cc]
mov edx, dword [esp + 0x6c0]
mov esi, esp
lea edi, [esp + 0xb34]
mov dword [esi + 0xc], edi
mov dword [esi], edx
mov dword [esi + 0x10], 4
mov dword [esi + 8], 0x1006
mov dword [esi + 4], 0xffff
mov dword [esp + 0x84], edi
call ecx
sub esp, 0x14
mov ecx, dword [0x497ac8]
mov edx, dword [0x4967f8]
add edx, ecx
mov dword [0x4967f8], edx
mov ecx, dword [0x4948cc]
mov edx, dword [esp + 0x6c0]
mov esi, esp
mov edi, dword [esp + 0x84]
mov dword [esi + 0xc], edi
mov dword [esi], edx
mov dword [esi + 0x10], 4
mov dword [esi + 8], 0x1005
mov dword [esi + 4], 0xffff
mov dword [esp + 0x80], eax
call ecx
sub esp, 0x14
mov ecx, dword [0x49514c]
sar ecx, 2
imul ecx, ecx, 0xe7322dc2
add ecx, 0x70ffb68a
mov edx, dword [0x494ab4]
xor edx, 0x6bc9e6ed
or edx, 0x30797aad
cmp ecx, edx
mov dword [esp + 0x7c], eax
jg 0x4431d5
mov ax, word [0x49ba1c]
mov cx, ax
imul ecx, ecx, 0x3646f2f4
mov ax, cx
mov word [0x49ba1c], ax
jmp 0x4432ef
mov eax, dword [0x498b4c]
dec eax
mov dword [0x498b4c], eax
mov ecx, dword [0x49614c]
and eax, ecx
and eax, 0x533e7be5
mov dword [0x49614c], eax
mov eax, dword [0x4948d0]
mov ecx, esp
mov dword [ecx + 8], 6
mov dword [ecx + 4], 1
mov dword [ecx], 2
call eax
sub esp, 0xc
mov dword [esp + 0x6c0], eax
mov eax, dword [0x499864]
imul eax, eax, 0xf3b862d
mov dword [0x499864], eax
cmp dword [esp + 0x6c0], 0xffffffff
jne 0x443250
mov eax, dword [0x494c48]
or eax, 0xb543ff68
mov dword [0x494c48], eax
jmp 0x4440e8
lea eax, [esp + 0x6a0]
mov ecx, dword [0x49ac3c]
mov edx, ecx
inc edx
mov dword [0x49ac3c], edx
add ecx, 0xf34720b1
xor ecx, 0xb2a61b3c
mov edx, dword [0x499d4c]
and edx, ecx
mov dword [0x499d4c], edx
mov ecx, dword [0x4948a8]
mov edx, dword [esp + 0x6c0]
mov esi, esp
mov dword [esi + 4], eax
mov dword [esi], edx
mov dword [esi + 8], 0x10
call ecx
sub esp, 0xc
cmp eax, 0xffffffff
jne 0x4432c9
mov eax, dword [0x498ba8]
mov cx, word [0x49e2ac]
mov dx, cx
xor edx, eax
mov cx, dx
mov word [0x49e2ac], cx
jmp 0x444074
mov ax, word [0x49cd44]
mov cx, ax
dec ecx
mov dx, cx
mov word [0x49cd44], dx
movsx ecx, ax
mov esi, dword [0x495d0c]
imul esi, ecx
mov dword [0x495d0c], esi
lea eax, [esp + 0x68c]
mov ecx, dword [0x499308]
mov dx, word [0x49c0c8]
movsx esi, dx
xor ecx, esi
or ecx, 0x1a7fa7da
mov dword [0x4955f0], ecx
mov ecx, dword [0x4948c8]
lea esi, [esp + 0x68c]
mov dword [esp + 0x78], ecx
mov ecx, esi
mov dword [esp + 0x74], eax
mov dword [esp + 0x70], esi
call fcn.0042a190
mov ecx, dword [esp + 0x70]
mov dword [esp + 0x6c], eax
call fcn.00403ca0
mov ecx, dword [esp + 0x6c0]
mov esi, esp
mov edi, dword [esp + 0x6c]
mov dword [esi + 8], edi
mov dword [esi + 4], eax
mov dword [esi], ecx
mov dword [esi + 0xc], 0
mov eax, dword [esp + 0x78]
call eax
sub esp, 0x10
mov dword [esp + 0x6bc], eax
mov word [0x49dcc0], 0x9025
mov eax, dword [esp + 0x6bc]
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x68], eax
call fcn.0042a190
mov ecx, dword [esp + 0x68]
cmp ecx, eax
jae 0x4433b3
mov ax, word [0x49c3e6]
mov cx, ax
and ecx, 0xe6dd
mov ax, cx
mov word [0x49c3e6], ax
jmp 0x444074
mov eax, 0x13c00a0
mov cx, word [0x49c452]
movsx edx, cx
mov esi, dword [0x496ed8]
imul edx, esi
imul edx, edx, 0x8e8b4f3b
mov dword [0x496ed8], edx
mov ecx, dword [esp + 0xb30]
mov dword [esp + 0x64], eax
call fcn.00403c80
mov eax, dword [0x49a66c]
mov ecx, dword [0x4984d4]
mov edx, ecx
dec edx
mov dword [0x4984d4], edx
sub eax, ecx
mov ecx, dword [esp + 0x64]
cmp ecx, eax
jl 0x443433
mov eax, 0xd2eed81e
mov ecx, dword [0x49927c]
sar ecx, 9
cmp eax, ecx
jge 0x44342e
mov eax, dword [0x49b084]
add eax, 0xc3d6185b
mov dword [0x49b084], eax
jmp 0x443433
jmp 0x443438
mov eax, dword [0x499658]
sar eax, 3
or eax, 0x74b32f43
mov ecx, dword [0x497064]
xor ecx, eax
mov dword [0x497064], ecx
mov eax, dword [0x4948c0]
mov ecx, dword [esp + 0x6c0]
mov edx, esp
lea esi, [esp + 0x226]
mov dword [edx + 4], esi
mov dword [edx], ecx
mov dword [edx + 0xc], 0
mov dword [edx + 8], 0x400
call eax
sub esp, 0x10
mov dword [esp + 0x6bc], eax
mov eax, dword [0x4992dc]
add eax, 0xccc1d095
mov dword [0x4992dc], eax
cmp dword [esp + 0x6bc], 0
jle 0x4434c7
mov eax, dword [esp + 0x208]
mov ecx, dword [esp + 0x20c]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], eax
call fcn.0043dbb0
cmp eax, 0
je 0x443500
mov eax, 0xa0856c67
mov ecx, dword [0x499980]
sar ecx, 2
sub ecx, 0xd5711395
cmp eax, ecx
jg 0x4434fb
mov ax, word [0x49b742]
mov cx, ax
add ecx, 0x9b232f52
mov ax, cx
mov word [0x49b742], ax
jmp 0x443eec
mov ax, word [0x49cdc8]
movsx ecx, ax
mov edx, 0x143dcd22
sub edx, ecx
mov ecx, dword [0x4966b0]
imul ecx, edx
mov dword [0x4966b0], ecx
mov ecx, dword [esp + 0xb30]
mov dword [esp + 0x60], ecx
call fcn.0042a190
mov ecx, dword [esp + 0x6bc]
add eax, ecx
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x60]
call fcn.00440470
sub esp, 8
mov si, word [0x49cec8]
movsx eax, si
imul eax, eax, 0x73f006f1
mov ecx, dword [0x494d30]
and ecx, eax
mov dword [0x494d30], ecx
mov eax, dword [esp + 0xb30]
mov ecx, eax
call fcn.0043ad70
cmp eax, 0
jne 0x44359f
mov eax, dword [0x498ccc]
sar eax, 7
mov ecx, dword [0x497370]
and ecx, eax
mov dword [0x497370], ecx
jmp 0x443eec
mov dword [0x4988d8], 0xfbffbfff
mov ecx, dword [esp + 0xb30]
mov eax, dword [esp + 0x6bc]
mov edx, esp
mov dword [edx + 4], eax
lea eax, [esp + 0x226]
mov dword [edx], eax
call fcn.0044fc80
sub esp, 8
mov dword [0x498ab8], 0x1d871f1e
cmp dword [esp + 0x200], 0
mov dword [esp + 0x5c], eax
jge 0x44392d
mov dword [0x496a08], 0xfd1de9f7
mov eax, esp
mov dword [eax + 4], 5
mov dword [eax], 0x3f6f
call fcn.00418300
mov dword [esp + 0xb04], eax
mov eax, dword [0x49a478]
imul eax, eax, 0x8ea2616c
mov dword [0x49a478], eax
mov ecx, dword [esp + 0xb30]
mov eax, dword [esp + 0xb04]
mov edx, esp
mov dword [edx], eax
lea eax, [esp + 0x150]
mov dword [esp + 0x58], ecx
mov ecx, eax
mov dword [esp + 0x54], eax
call fcn.00425cf0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x54]
mov dword [ecx], edx
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x50], eax
call fcn.00432270
sub esp, 8
mov dword [esp + 0x200], eax
mov ecx, dword [esp + 0x54]
call fcn.0043fd00
mov eax, dword [0x4951a0]
mov ecx, eax
dec ecx
mov dword [0x4951a0], ecx
add eax, 0xad1f8dec
mov ecx, dword [0x495d98]
imul ecx, eax
mov dword [0x495d98], ecx
mov eax, dword [esp + 0xb04]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 5
call fcn.00437a50
mov eax, dword [0x496c40]
or eax, 0x9cc3e31c
mov dword [0x496c40], eax
cmp dword [esp + 0x200], 0
jl 0x44391e
mov eax, dword [0x499010]
mov ecx, eax
dec ecx
mov dword [0x499010], ecx
mov ecx, dword [0x4961e4]
mov edx, ecx
dec edx
mov dword [0x4961e4], edx
mov si, word [0x49d808]
movsx edx, si
sar edx, 1
imul ecx, edx
add eax, ecx
mov ecx, dword [0x499f2c]
mov edx, ecx
dec edx
mov dword [0x499f2c], edx
and ecx, 0x80bbd59d
xor ecx, 0x15d5900d
cmp eax, ecx
jne 0x443729
mov dword [0x4985bc], 0x9dd4bba9
mov eax, dword [esp + 0x200]
add eax, 4
mov dword [esp + 0x200], eax
mov eax, dword [0x4952ac]
add eax, 0xf5f78b80
mov dword [0x4952ac], eax
mov eax, dword [esp + 0xb30]
mov ecx, esp
mov dword [ecx], eax
call fcn.00410ba0
mov dword [esp + 0x1fc], eax
mov eax, dword [0x495bf4]
mov ecx, eax
inc ecx
mov dword [0x495bf4], ecx
and eax, 0xe7974625
mov dword [0x4991b0], eax
cmp dword [esp + 0x1fc], 0
jge 0x443906
mov eax, 0x52ce28e1
mov ecx, dword [0x4976e8]
shr ecx, 8
and ecx, 0x59a5
mov dx, word [0x49e1ca]
mov si, dx
sub esi, ecx
mov dx, si
mov word [0x49e1ca], dx
mov ecx, esp
mov dword [ecx + 4], 0xb
mov dword [ecx], 0x4712
mov dword [esp + 0x4c], eax
call fcn.00418300
mov dword [esp + 0xb00], eax
mov dx, word [0x49cbac]
movsx eax, dx
add eax, 0x18a6c0ba
mov ecx, dword [0x49802c]
xor ecx, eax
mov dword [0x49802c], ecx
mov ecx, dword [esp + 0xb30]
mov eax, dword [esp + 0xb00]
mov esi, esp
mov dword [esi], eax
lea eax, [esp + 0x13c]
mov dword [esp + 0x48], ecx
mov ecx, eax
mov dword [esp + 0x44], eax
call fcn.00425cf0
sub esp, 4
mov ecx, esp
mov esi, dword [esp + 0x44]
mov dword [ecx], esi
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x40], eax
call fcn.00432270
sub esp, 8
mov dword [esp + 0x6bc], eax
mov ecx, dword [esp + 0x44]
call fcn.0043fd00
mov eax, dword [0x4982c4]
mov dx, word [0x49e288]
mov cx, dx
imul eax, ecx
imul eax, eax, 0xf791a478
mov dx, ax
mov word [0x49e288], dx
mov eax, dword [esp + 0xb00]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0xb
call fcn.00437a50
mov eax, dword [0x498fe0]
dec eax
mov dword [0x498fe0], eax
and eax, 0x67fc7e4e
mov ecx, dword [esp + 0x4c]
cmp ecx, eax
jle 0x4438aa
mov dword [0x494e4c], 0x6e5d44cf
jmp 0x4438b9
mov eax, dword [0x495130]
add eax, 0xae9b6da4
mov dword [0x495130], eax
cmp dword [esp + 0x6bc], 0
jl 0x4438f6
mov eax, 0x10b124d
mov ecx, dword [0x49569c]
dec ecx
mov dword [0x49569c], ecx
and ecx, 0x8ad82770
cmp eax, ecx
jge 0x4438f1
mov dword [0x497498], 0x7b68253c
jmp 0x443eec
mov eax, dword [0x497688]
imul eax, eax, 0xaedf5fde
mov dword [0x497688], eax
mov ax, word [0x49d0ca]
mov cx, ax
xor ecx, 0x8008
mov ax, cx
mov word [0x49d0ca], ax
mov eax, dword [0x494d9c]
or eax, 0x470f0d9d
mov dword [0x494d9c], eax
mov eax, 0x5b547afe
mov ecx, dword [0x497f84]
mov edx, dword [0x498654]
mov esi, edx
dec esi
mov dword [0x498654], esi
imul ecx, edx
cmp eax, ecx
je 0x443966
mov eax, dword [0x499090]
and eax, 0xa3b8278a
mov dword [0x499090], eax
jmp 0x443975
mov eax, dword [0x49ad78]
and eax, 0x20e69b91
mov dword [0x49ad78], eax
cmp dword [esp + 0x1fc], 0
jl 0x443a81
mov eax, 0xe93d9270
mov ecx, dword [0x498528]
sar ecx, 3
mov edx, dword [0x496818]
mov esi, edx
dec esi
mov dword [0x496818], esi
add ecx, edx
cmp eax, ecx
jne 0x4439dd
mov eax, dword [0x49aca4]
mov ecx, eax
inc ecx
mov dword [0x49aca4], ecx
and eax, 0x4000
or eax, 0xb623
mov dx, word [0x49c5ba]
mov cx, dx
sub ecx, eax
mov dx, cx
mov word [0x49c5ba], dx
jmp 0x4439ec
mov eax, dword [0x49540c]
add eax, 0xd5cbabde
mov dword [0x49540c], eax
mov eax, dword [esp + 0xb30]
mov ecx, eax
call fcn.0042a190
sub eax, dword [esp + 0x200]
cmp eax, dword [esp + 0x1fc]
jb 0x443a2b
mov ax, word [0x49b8c4]
mov cx, ax
and ecx, 0x4161
mov ax, cx
mov word [0x49b8c4], ax
jmp 0x443eec
mov eax, 0x7c2abeff
mov ecx, dword [0x494f40]
mov edx, ecx
inc edx
mov dword [0x494f40], edx
mov edx, dword [0x498058]
mov esi, edx
dec esi
mov dword [0x498058], esi
and ecx, edx
cmp eax, ecx
jg 0x443a6c
mov eax, dword [0x499fa8]
add eax, 0xbbab064e
mov dword [0x499fa8], eax
jmp 0x443a7c
mov eax, dword [0x49a144]
imul eax, eax, 0xbd28ae0b
mov dword [0x49a144], eax
jmp 0x443a81
mov eax, 0x6eb8e041
mov ecx, dword [0x497d38]
add ecx, 0xe375e80b
or ecx, 0x6b9e623a
mov dx, word [0x49c6de]
mov si, dx
inc esi
mov dx, si
mov word [0x49c6de], dx
movsx esi, dx
sub eax, esi
cmp ecx, eax
jne 0x443ada
mov ax, word [0x49c750]
movsx ecx, ax
shl ecx, 5
xor ecx, 0x481cbe56
mov edx, dword [0x497714]
or edx, ecx
mov dword [0x497714], edx
cmp dword [esp + 0xb38], 0
je 0x443e00
test byte [esp + 0x1f7], 1
jne 0x443e00
mov eax, dword [0x4956f4]
and eax, 0x35d6d7a1
mov dword [0x4956f4], eax
mov eax, dword [esp + 0xb30]
mov ecx, eax
call fcn.0042a190
cmp eax, 0x4000
jbe 0x443df1
mov ax, word [0x49c6aa]
mov cx, ax
imul ecx, ecx, 0x29c01fa2
mov ax, cx
mov word [0x49c6aa], ax
mov byte [esp + 0x1f7], 1
mov ecx, dword [0x498aec]
xor ecx, 0x348c807c
or ecx, 0xc2636303
mov edx, dword [0x498724]
xor edx, ecx
mov dword [0x498724], edx
mov ecx, dword [esp + 0xb30]
mov edx, esp
mov dword [edx], ecx
lea ecx, [esp + 0x128]
call fcn.00418880
sub esp, 4
mov ecx, dword [0x496958]
mov edx, ecx
dec edx
mov dword [0x496958], edx
mov edx, dword [0x4988a4]
and ecx, edx
and ecx, 0x2b364835
mov edx, dword [0x49761c]
sub edx, ecx
mov dword [0x49761c], edx
cmp dword [esp + 0x200], 0
mov dword [esp + 0x3c], eax
jl 0x443c71
mov dword [0x4995dc], 0xedd50c38
mov eax, dword [esp + 0x200]
mov ecx, esp
mov dword [ecx], 0
lea ecx, [esp + 0x128]
mov dword [esp + 0x38], ecx
mov dword [esp + 0x34], eax
call fcn.0043ac00
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x34]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov ecx, dword [esp + 0x38]
call fcn.0041d140
sub esp, 8
mov ecx, dword [0x4953c8]
mov edx, ecx
dec edx
mov dword [0x4953c8], edx
mov edx, dword [0x49a1a0]
inc edx
mov dword [0x49a1a0], edx
add edx, 0xd420faaf
xor edx, 0x943d7fa5
cmp ecx, edx
mov dword [esp + 0x30], eax
jne 0x443c6c
mov eax, dword [0x497070]
imul eax, eax, 0xe0f7f95b
xor eax, 0x212d89de
mov ecx, dword [0x49a604]
sar ecx, 0xa
or ecx, 0xf8de37c6
cmp eax, ecx
jge 0x443c67
mov eax, dword [0x4964fc]
imul eax, eax, 0xeec85859
mov dword [0x4964fc], eax
jmp 0x443c6c
jmp 0x443c71
mov eax, 0x59df93ff
mov ecx, dword [0x4966c0]
not ecx
mov edx, dword [0x49a7f8]
sub ecx, edx
cmp eax, ecx
jle 0x443ce1
mov eax, dword [0x49670c]
sar eax, 2
mov ecx, dword [0x4954e8]
or eax, ecx
mov ecx, dword [0x49a080]
dec ecx
mov dword [0x49a080], ecx
imul ecx, ecx, 0x82524ecb
cmp eax, ecx
jge 0x443ccd
mov eax, dword [0x4968ec]
xor eax, 0x3ab020ef
mov dword [0x4968ec], eax
jmp 0x443cdc
mov eax, dword [0x499e84]
xor eax, 0xacc08b2c
mov dword [0x499e84], eax
jmp 0x443ce1
lea eax, [esp + 0x128]
lea ecx, [esp + 0x92c]
mov edx, dword [esp + 0xb38]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004501f0
cmp eax, 0
jne 0x443d7e
mov eax, dword [0x494c5c]
imul eax, eax, 0x8f50af3c
mov dword [0x494c5c], eax
mov dword [esp + 0x200], 0xffffffff
mov eax, dword [0x497b5c]
inc eax
mov dword [0x497b5c], eax
and eax, 0x22ed5338
mov ecx, dword [0x498848]
sub ecx, eax
mov dword [0x498848], ecx
mov ecx, dword [esp + 0xb30]
call fcn.00403c80
mov dx, word [0x49ca3c]
mov ax, dx
imul eax, eax, 0xdd544a60
mov dx, ax
mov word [0x49ca3c], dx
mov dword [esp + 0x124], 0xd
jmp 0x443db2
mov eax, 0x9a9857ac
mov ecx, dword [0x496578]
inc ecx
mov dword [0x496578], ecx
cmp eax, ecx
jne 0x443da7
mov eax, dword [0x49740c]
or eax, 0xc5e63beb
mov dword [0x49740c], eax
mov dword [esp + 0x124], 0
lea ecx, [esp + 0x128]
call fcn.0041e5d0
mov ecx, dword [esp + 0x124]
test ecx, ecx
mov dword [esp + 0x2c], ecx
je 0x443dec
jmp 0x443dd6
mov eax, dword [esp + 0x2c]
sub eax, 0xd
mov dword [esp + 0x28], eax
je 0x443eec
jmp 0x4441a6
jmp 0x443df1
mov eax, dword [0x497300]
xor eax, 0xc15f4059
mov dword [0x497300], eax
mov eax, dword [0x49807c]
and eax, 0xab901a38
mov cx, word [0x49e26a]
mov dx, cx
inc edx
mov si, dx
mov word [0x49e26a], si
movsx edx, cx
cmp eax, edx
jle 0x443e3e
mov eax, dword [0x4998a0]
add eax, 0x204a9820
mov dword [0x4998a0], eax
jmp 0x443e4d
mov eax, dword [0x495a98]
or eax, 0xa98e6490
mov dword [0x495a98], eax
cmp dword [esp + 0xb34], 0x3b0f
jne 0x443ecc
mov eax, 0x8e1d1ef9
mov ecx, dword [0x499910]
inc ecx
mov dword [0x499910], ecx
cmp eax, ecx
jg 0x443e87
mov eax, dword [0x4970f8]
xor eax, 0x1a1e021
mov dword [0x4970f8], eax
mov eax, dword [esp + 0xb30]
mov ecx, eax
call fcn.0042a190
cmp eax, 0x500000
jbe 0x443eb4
mov eax, dword [0x495c0c]
add eax, 0x3bccc33c
mov dword [0x49675c], eax
jmp 0x443eec
mov ax, word [0x49c22e]
mov cx, ax
xor ecx, 0xe7bf
mov ax, cx
mov word [0x49c22e], ax
mov eax, dword [0x496d44]
mov ecx, dword [0x4993b4]
sar ecx, 3
add ecx, 0xe0f9d289
xor eax, ecx
mov dword [0x499820], eax
jmp 0x443438
mov eax, dword [0x49959c]
add eax, 0x114855
mov dword [0x49959c], eax
cmp dword [esp + 0x200], 0
jl 0x443f7a
mov eax, dword [0x498f10]
mov ecx, eax
dec ecx
mov dword [0x498f10], ecx
mov ecx, dword [0x497394]
add ecx, eax
mov dword [0x497394], ecx
mov eax, dword [esp + 0xb30]
mov ecx, dword [esp + 0x200]
mov edx, esp
mov dword [edx], 0
mov dword [esp + 0x24], ecx
mov ecx, eax
mov dword [esp + 0x20], eax
call fcn.0043ac00
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x24]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov ecx, dword [esp + 0x20]
call fcn.0041d140
sub esp, 8
mov ecx, dword [0x49775c]
imul ecx, ecx, 0x1e51775a
mov dword [0x49775c], ecx
mov dword [esp + 0x1c], eax
mov eax, dword [0x494e9c]
mov ecx, eax
dec ecx
mov dword [0x494e9c], ecx
imul eax, eax, 0x27a75586
cmp eax, 0xcfc8de2a
jge 0x443fa8
mov eax, dword [0x4953fc]
xor eax, 0x736c6c2a
mov dword [0x4953fc], eax
cmp dword [esp + 0xb38], 0
je 0x44405c
test byte [esp + 0x1f7], 1
jne 0x44405c
lea eax, [esp + 0x92c]
mov ecx, dword [0x498844]
add ecx, 0xeed0f3f0
mov edx, dword [0x497724]
or edx, ecx
mov dword [0x497724], edx
mov ecx, dword [esp + 0xb38]
mov edx, dword [esp + 0xb30]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004501f0
cmp eax, 0
jne 0x44404d
mov eax, dword [0x497ee8]
mov ecx, eax
dec ecx
mov dword [0x497ee8], ecx
imul eax, eax, 0x16facb7a
mov ecx, dword [0x49570c]
and eax, ecx
and eax, 0xed9857cc
mov dword [0x49570c], eax
mov ecx, dword [esp + 0xb30]
call fcn.00403c80
mov eax, dword [0x499c9c]
xor eax, 0x3f94ec7f
mov dword [0x499c9c], eax
mov eax, dword [0x49789c]
or eax, 0x3273a69e
mov dword [0x49ab18], eax
mov ax, word [0x49bf0c]
mov cx, ax
or ecx, 0x643b
mov ax, cx
mov word [0x49bf0c], ax
mov eax, dword [0x4948d8]
mov ecx, dword [esp + 0x6c0]
mov edx, esp
mov dword [edx], ecx
mov dword [edx + 4], 2
call eax
sub esp, 8
mov ecx, dword [0x495138]
shl ecx, 9
mov edx, dword [0x498500]
or edx, ecx
mov dword [0x498500], edx
mov ecx, dword [0x4948a4]
mov edx, dword [esp + 0x6c0]
mov esi, esp
mov dword [esi], edx
mov dword [esp + 0x18], eax
call ecx
sub esp, 4
mov ecx, dword [0x497b9c]
mov edx, ecx
inc edx
mov dword [0x497b9c], edx
imul ecx, ecx, 0x6568cd12
mov edx, dword [0x49a098]
or edx, ecx
mov dword [0x49a098], edx
mov dword [esp + 0x14], eax
mov eax, esp
lea ecx, [esp + 0x92c]
mov dword [eax], ecx
mov dword [eax + 4], 0xe6
call fcn.0041e600
mov dword [0x499b44], 0xbb2e9465
mov eax, esp
lea ecx, [esp + 0xa12]
mov dword [eax], ecx
mov dword [eax + 4], 0xe6
call fcn.0041e600
mov eax, dword [0x4953a0]
dec eax
mov dword [0x4953a0], eax
mov ecx, dword [0x4965b8]
xor ecx, eax
mov dword [0x4965b8], ecx
mov eax, esp
lea ecx, [esp + 0x6c6]
mov dword [eax], ecx
mov dword [eax + 4], 0x266
call fcn.0041e600
mov eax, dword [0x499590]
mov ecx, eax
inc ecx
mov dword [0x499590], ecx
mov ecx, dword [0x494ea4]
xor ecx, eax
mov dword [0x494ea4], ecx
mov eax, esp
lea ecx, [esp + 0x226]
mov dword [eax], ecx
mov dword [eax + 4], 0x466
call fcn.0041e600
mov eax, dword [0x4997a0]
add eax, 0x15e028d0
mov dword [0x4997a0], eax
lea ecx, [esp + 0x68c]
call fcn.0041e5d0
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
int3