Function at 0x4b7e70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x98cddc]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x180]
cmp eax, dword [ecx + 8]
jbe 0x4ba86d
sub esp, 0x200
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.00471d4b
mov ecx, dword [esp + 0x208]
mov edx, dword [esp + 0x204]
xor ebx, ebx
xor ebp, ebp
mov esi, 0xffffffff
xor edi, edi
mov ecx, 0xffffffff
mov dword [esp + 0xd4], ecx
mov ecx, 0xffffffff
mov dword [esp + 0x6c], ecx
xor ecx, ecx
mov dword [esp + 0xa0], ecx
xor ecx, ecx
mov byte [esp + 0x36], cl
xor edx, edx
mov byte [esp + 0x37], dl
mov edx, 0xffffffff
mov dword [esp + 0xac], edx
xor edx, edx
mov dword [esp + 0xb4], edx
xor edx, edx
mov dword [esp + 0xcc], edx
xor edx, edx
mov dword [esp + 0x18c], edx
xor ebx, ebx
mov dword [esp + 0x94], ebx
xor ebx, ebx
mov dword [esp + 0x8c], ebx
xor ebx, ebx
mov dword [esp + 0x1cc], ebx
mov ebx, dword [esp + 0x210]
mov dword [esp + 0x138], ebx
mov ebx, dword [esp + 0x20c]
mov dword [esp + 0x1e8], ebx
mov ecx, dword [esp + 0x208]
mov edx, dword [esp + 0x204]
xor ebx, ebx
jmp 0x4b7f88
mov edx, dword [esp + 0x1bc]
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x74]
mov esi, dword [esp + 0x78]
mov dword [esp + 0x18c], eax
mov dword [esp + 0x138], edi
mov dword [esp + 0x1e8], ecx
mov ecx, dword [esp + 0x84]
mov edi, dword [esp + 0x188]
mov dword [esp + 0x70], ebx
mov dword [esp + 0x188], edi
mov dword [esp + 0x134], ecx
mov dword [esp + 0x1e4], edx
mov dword [esp + 0x74], ebp
mov dword [esp + 0x78], esi
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.004c2080
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x134]
mov ebx, edx
sub ebx, ecx
mov ebp, dword [esp + 0x10]
mov esi, dword [esp + 8]
cmp edx, ebx
jb 0x4ba865
mov edx, dword [esp + 0xc]
cmp edx, ebx
ja 0x4ba85c
mov dword [esp + 0x88], ebp
mov dword [esp + 0x134], ebx
mov dword [esp + 0x84], ecx
mov dword [esp + 0x1bc], eax
mov dword [esp + 0x98], edx
mov dword [esp + 0x1d0], esi
mov eax, dword [esp + 0x1e8]
mov dword [esp], eax
mov eax, dword [esp + 0x138]
mov dword [esp + 4], eax
call fcn.004b7bc0
mov eax, dword [esp + 0x134]
mov ecx, dword [esp + 0x98]
sub eax, ecx
mov edx, eax
neg eax
sar eax, 0x1f
and eax, ecx
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1e4]
add eax, ebp
mov ebp, dword [esp + 0x10]
mov dword [esp + 0x1e8], ebp
mov esi, dword [esp + 0x14]
mov dword [esp + 0x80], esi
test ebx, ebx
jne 0x4b9f6b
mov edi, dword [esp + 0x88]
test edi, edi
je 0x4b8f89
mov dword [esp + 0x138], edx
mov dword [esp + 0x1c0], eax
mov ecx, edi
and edi, 0xffff
cmp edi, 0x106
jg 0x4b88d1
cmp edi, 0x23
jg 0x4b8671
cmp edi, 0x1c
jg 0x4b81c3
cmp edi, 0x17
jne 0x4b818d
mov dword [esp + 0xd0], ebx
cmp esi, 3
jl 0x4b80ec
cmp word [ebp], 0x5455
jne 0x4b80ec
cmp byte [ebp + 2], 0x43
jne 0x4b80ec
lea ecx, [esi - 3]
mov edi, ecx
neg ecx
sar ecx, 0x1f
and ecx, 3
mov eax, dword [0x95f880]
add ecx, ebp
jmp 0x4b8f6d
mov dword [esp], ebp
mov dword [esp + 4], esi
call fcn.004ba880
movzx eax, byte [esp + 0xc]
test al, al
je 0x4b8162
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x80]
cmp ecx, edx
ja 0x4ba857
mov esi, edx
sub esi, ecx
mov eax, esi
neg eax
sar eax, 0x1f
and eax, ecx
mov edi, dword [esp + 0x1e8]
lea ebp, [eax + edi]
mov edx, dword [esp + 0x138]
mov eax, dword [esp + 0x18c]
mov dword [esp + 0x70], ecx
mov dword [esp + 0x188], edi
mov edi, esi
mov ecx, ebp
mov ebx, dword [esp + 0xd0]
mov ebp, dword [esp + 0x188]
mov esi, dword [esp + 0x80]
jmp 0x4b8f6d
mov ebx, dword [0x960180]
mov edx, dword [esp + 0x138]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x4b8f6d
cmp edi, 0x18
jl 0x4b8c91
test esi, esi
je 0x4b81cc
cmp byte [ebp], 0x5a
jne 0x4b81cc
lea ecx, [esi - 1]
mov edi, ecx
neg ecx
sar ecx, 0x1f
and ecx, 1
add ecx, ebp
mov ebp, dword [0x95f880]
mov eax, ebp
mov ebp, dword [esp + 0x1e8]
jmp 0x4b8f6d
cmp edi, 0x21
jg 0x4b8561
cmp ecx, 0x1b
je 0x4b81d6
cmp ecx, 0x20
jne 0x4b8242
cmp esi, 6
jge 0x4b81f1
mov ebx, dword [0x960180]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x4b8f6d
cmp byte [ebp + 3], 0x3a
je 0x4b820d
mov ebx, dword [0x960180]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x4b8f6d
lea ecx, [esi - 6]
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 6
lea edi, [ebp + 1]
lea eax, [ebp + 4]
add ecx, ebp
mov dword [esp + 0xf8], eax
lea eax, [0x727c36]
mov dword [esp + 0x1c4], eax
mov eax, dword [esp + 0xf8]
jmp 0x4b83fd
cmp ecx, 0x1f
je 0x4b824c
cmp ecx, 0x1a
jne 0x4b82a6
cmp esi, 3
jge 0x4b8267
mov ebx, dword [0x960180]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x4b8f6d
lea ecx, [esi - 3]
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 3
lea edi, [ebp + 1]
add ecx, ebp
mov dword [esp + 0x108], eax
lea eax, [0x727c36]
mov dword [esp + 0x1c4], eax
lea eax, [0x727c36]
mov dword [esp + 0x1d4], eax
mov eax, dword [esp + 0x108]
jmp 0x4b83f6
cmp ecx, 0x1c
je 0x4b82b0
cmp ecx, 0x21
jne 0x4b832c
cmp esi, 9
jge 0x4b82cb
mov ebx, dword [0x960180]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x4b8f6d
cmp byte [ebp + 3], 0x3a
jne 0x4b82d7
cmp byte [ebp + 6], 0x3a
je 0x4b82ed
mov ebx, dword [0x960180]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x4b8f6d
lea ecx, [esi - 9]
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 9
lea edi, [ebp + 1]
lea eax, [ebp + 4]
lea edx, [ebp + 7]
add ecx, ebp
mov dword [esp + 0x1c4], edx
mov edx, dword [esp + 0x138]
mov dword [esp + 0x110], eax
mov eax, ecx
mov ecx, ebx
mov ebx, eax
mov eax, dword [esp + 0x110]
jmp 0x4b83d8
cmp ecx, 0x19
je 0x4b8336
cmp ecx, 0x1e
jne 0x4b838d
cmp esi, 7
jge 0x4b8351
mov ebx, dword [0x960180]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x4b8f6d
lea ecx, [esi - 7]
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 7
lea edi, [ebp + 1]
lea eax, [ebp + 3]
lea edx, [ebp + 5]
add ecx, ebp
mov dword [esp + 0x1c4], edx
mov edx, dword [esp + 0x138]
mov dword [esp + 0x120], eax
mov eax, ecx
mov ecx, ebx
mov ebx, eax
mov eax, dword [esp + 0x120]
jmp 0x4b83d8
cmp esi, 5
jge 0x4b83a8
mov ebx, dword [0x960180]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x4b8f6d
lea ecx, [esi - 5]
mov ebx, ecx
neg ebx
sar ebx, 0x1f
and ebx, 5
lea edi, [ebp + 1]
lea eax, [ebp + 3]
add ebx, ebp
mov dword [esp + 0x118], eax
lea eax, [0x727c36]
mov dword [esp + 0x1c4], eax
mov eax, dword [esp + 0x118]
mov dword [esp + 0x1d4], eax
mov eax, dword [esp + 0x1c0]
mov dword [esp + 0x100], ecx
mov ecx, ebx
mov ebx, dword [esp + 0x100]
mov eax, dword [esp + 0x1d4]
mov dword [esp + 0x1d4], eax
mov dword [esp + 0x134], ebx
mov dword [esp + 0x1e4], ecx
mov dword [esp], edi
mov dword [esp + 4], 2
mov byte [esp + 8], 1
call fcn.004b7ab0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xc8], ecx
test eax, eax
je 0x4b843e
xor edx, edx
jmp 0x4b846d
mov eax, dword [esp + 0x1d4]
mov dword [esp], eax
mov dword [esp + 4], 2
mov byte [esp + 8], 1
call fcn.004b7ab0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, eax
mov eax, ecx
mov ecx, dword [esp + 0xc8]
test eax, eax
je 0x4b8475
xor ebx, ebx
jmp 0x4b84b2
mov dword [esp + 0xb0], edx
mov eax, dword [esp + 0x1c4]
mov dword [esp], eax
mov dword [esp + 4], 2
mov byte [esp + 8], 1
call fcn.004b7ab0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0xb0]
mov ebx, eax
mov eax, ecx
mov ecx, dword [esp + 0xc8]
cmp ecx, 0x18
jle 0x4b84c4
mov ebp, 0x15
lea esi, [0x733743]
jmp 0x4b84d2
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x1cc]
cmp edx, 0x3c
jle 0x4b84e2
mov ebp, 0x17
lea esi, [0x734b5b]
cmp ebx, 0x3c
jle 0x4b84f2
mov ebp, 0x17
lea esi, [0x734b72]
imul ecx, ecx, 0x3c
add ecx, edx
imul ecx, ecx, 0x3c
mov edx, dword [esp + 0x1e8]
movzx edi, byte [edx]
add ecx, ebx
xchg edi, eax
cmp al, 0x2b
xchg edi, eax
je 0x4b851e
xchg edi, eax
cmp al, 0x2d
xchg edi, eax
jne 0x4b8518
neg ecx
jmp 0x4b851e
mov eax, dword [0x960180]
mov edx, dword [esp + 0x138]
mov dword [esp + 0x94], ebp
mov dword [esp + 0x6c], ecx
mov edi, dword [esp + 0x134]
mov ecx, dword [esp + 0x1e4]
mov ebx, eax
mov dword [esp + 0x1cc], esi
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov eax, dword [esp + 0x18c]
jmp 0x4b8f6d
cmp edi, 0x22
jne 0x4b8628
sar ecx, 0x10
and ecx, 0xfff
lea ebx, [ecx + 1]
cmp esi, ebx
jge 0x4b8590
mov ebx, dword [0x960180]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x4b8f6d
mov dword [esp + 0x64], ecx
mov dword [esp + 0xa4], ebx
lea eax, [0x7a3a00]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
call fcn.004c3450
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x64]
sub eax, ecx
lea esi, [eax - 1]
mov eax, esi
neg eax
sar eax, 0x1f
mov ecx, dword [esp + 0xa4]
and ecx, eax
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov edi, dword [esp + 0x18]
mov edx, dword [esp + 0x1e8]
add ecx, edx
mov edx, dword [esp + 0x138]
mov dword [esp + 0x94], edi
mov edi, esi
mov dword [esp + 0x1cc], ebx
mov dword [esp + 0xa0], eax
mov esi, dword [esp + 0x80]
mov eax, dword [esp + 0x18c]
mov ebx, ebp
mov ebp, dword [esp + 0x1e8]
jmp 0x4b8f6d
cmp edi, 0x23
jne 0x4b8c91
cmp esi, 2
jl 0x4b8661
movzx edi, byte [ebp]
xchg edi, eax
cmp al, 0x2e
xchg edi, eax
je 0x4b8648
xchg edi, eax
cmp al, 0x2c
xchg edi, eax
jne 0x4b8661
movzx edi, byte [ebp + 1]
xchg edi, eax
cmp al, 0x30
xchg edi, eax
jb 0x4b8661
xchg edi, eax
cmp al, 0x39
xchg edi, eax
ja 0x4b8661
xor ecx, ecx
jmp 0x4ba787
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x4b8f6d
cmp edi, 0x102
jg 0x4b875f
cmp edi, 0x101
je 0x4b86f8
cmp edi, 0x102
jne 0x4b8c91
mov eax, dword [0x960c98]
mov ecx, dword [0x960c9c]
mov edx, dword [0x960ca0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.004b4190
mov eax, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
inc eax
mov edx, dword [esp + 0x138]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
jmp 0x4b8f6d
mov eax, dword [0x960ca8]
mov ecx, dword [0x960cac]
mov edx, dword [0x960cb0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.004b4190
mov eax, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
inc eax
mov edx, dword [esp + 0x138]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
jmp 0x4b8f6d
cmp edi, 0x104
jle 0x4b8835
cmp edi, 0x105
je 0x4b87da
cmp edi, 0x106
jne 0x4b8c91
mov eax, dword [0x960c88]
mov ecx, dword [0x960c8c]
mov edx, dword [0x960c90]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.004b4190
mov ebp, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x138]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
jmp 0x4b8f6d
mov eax, dword [0x960c78]
mov ecx, dword [0x960c7c]
mov edx, dword [0x960c80]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.004b4190
mov ebp, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x138]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
jmp 0x4b8f6d
mov dword [esp], ebp
mov dword [esp + 4], esi
cmp ecx, 0x104
sete al
mov byte [esp + 8], al
call fcn.004b7ab0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0xc]
test eax, eax
je 0x4b886a
mov edx, dword [esp + 0x94]
mov ebx, dword [esp + 0x1cc]
jmp 0x4b888d
lea edx, [ecx - 1]
cmp edx, 0xb
jbe 0x4b887f
mov edx, 5
lea ebx, [0x7286f8]
jmp 0x4b888d
mov edx, dword [esp + 0x94]
mov ebx, dword [esp + 0x1cc]
mov ebp, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
mov dword [esp + 0x94], edx
mov dword [esp + 0xac], ecx
mov edi, esi
mov ecx, ebp
mov dword [esp + 0x1cc], ebx
mov edx, dword [esp + 0x138]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov ebx, eax
mov eax, dword [esp + 0x18c]
jmp 0x4b8f6d
cmp edi, 0x20c
jg 0x4b8b6d
cmp edi, 0x10b
jg 0x4b898d
cmp edi, 0x109
jle 0x4b8905
mov ebx, esi
mov edi, ebp
xor ebx, ebx
mov dword [esp + 0xc4], ebx
mov ebx, esi
jmp 0x4ba6a1
cmp ecx, 0x108
jne 0x4b8934
test esi, esi
je 0x4b892e
cmp byte [ebp], 0x20
jne 0x4b8928
lea ebx, [esi - 1]
mov edi, ebx
neg ebx
sar ebx, 0x1f
and ebx, 1
add ebx, ebp
jmp 0x4b8938
mov edi, esi
mov ebx, ebp
jmp 0x4b8938
mov edi, esi
mov ebx, ebp
jmp 0x4b8938
mov edi, esi
mov ebx, ebp
mov dword [esp], ebx
mov dword [esp + 4], edi
cmp ecx, 0x109
sete al
mov byte [esp + 8], al
call fcn.004b7ab0
mov eax, dword [esp + 0xc]
mov ebp, dword [esp + 0x10]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x138]
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
jmp 0x4b8f6d
cmp edi, 0x113
jne 0x4b8a29
cmp esi, 4
jl 0x4b89aa
movzx ecx, byte [ebp]
add ecx, 0xffffffd0
cmp cl, 9
jbe 0x4b89c0
mov ebx, dword [0x960180]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x4b8f6d
lea eax, [0x7a39f8]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], 4
call fcn.004c35d0
mov eax, dword [esp + 0x80]
lea esi, [eax - 4]
mov ecx, esi
neg ecx
sar ecx, 0x1f
and ecx, 4
mov edx, dword [esp + 0x1e8]
lea ebp, [ecx + edx]
mov ecx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov edx, dword [esp + 0x138]
mov dword [esp + 0x74], ecx
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
jmp 0x4b8f6d
cmp edi, 0x114
jne 0x4b8ae6
cmp esi, 2
jge 0x4b8a50
mov ebx, dword [0x960180]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x4b8f6d
lea eax, [0x7a39f8]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], 2
call fcn.004c35d0
mov eax, dword [esp + 0x80]
lea ecx, [eax - 2]
mov edx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 2
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x1e8]
add ecx, ebp
mov esi, dword [esp + 0xc]
test ebx, ebx
je 0x4b8ab3
mov dword [esp + 0x74], esi
mov eax, dword [esp + 0x18c]
mov edi, edx
mov edx, dword [esp + 0x138]
mov esi, dword [esp + 0x80]
jmp 0x4b8f6d
cmp esi, 0x45
jl 0x4b8ac0
add esi, 0x76c
jmp 0x4b8ac6
add esi, 0x7d0
mov dword [esp + 0x74], esi
mov eax, dword [esp + 0x18c]
mov edi, edx
mov edx, dword [esp + 0x138]
mov esi, dword [esp + 0x80]
jmp 0x4b8f6d
cmp edi, 0x20c
jne 0x4b8c91
mov dword [esp], ebp
mov dword [esp + 4], esi
mov byte [esp + 8], 0
call fcn.004b7ab0
mov eax, dword [esp + 0xc]
cmp eax, 0x18
jb 0x4b8b19
mov ecx, 4
lea edx, [0x7280e9]
jmp 0x4b8b27
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x1cc]
mov ebp, dword [esp + 0x10]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov dword [esp + 0x94], ecx
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
mov dword [esp + 0x1cc], edx
mov edx, dword [esp + 0x138]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
jmp 0x4b8f6d
cmp edi, 0x210
jle 0x4b8e63
cmp edi, 0x212
jle 0x4b8ca1
cmp edi, 0x215
jne 0x4b8c0b
cmp esi, 2
jge 0x4b8ba8
mov ebx, dword [0x960180]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x4b8f6d
lea ecx, [esi - 2]
mov edi, ecx
neg ecx
sar ecx, 0x1f
and ecx, 2
add ecx, ebp
cmp word [ebp], 0x4d41
jne 0x4b8bd8
mov dword [esp + 0xe8], eax
mov eax, 1
mov byte [esp + 0x37], al
mov eax, dword [esp + 0xe8]
jmp 0x4b8bff
cmp word [ebp], 0x4d50
jne 0x4b8bf9
mov dword [esp + 0xf0], eax
mov eax, 1
mov byte [esp + 0x36], al
mov eax, dword [esp + 0xf0]
jmp 0x4b8bff
mov ebx, dword [0x960180]
mov eax, dword [esp + 0x18c]
jmp 0x4b8f6d
cmp edi, 0x216
jne 0x4b8c91
cmp esi, 2
jge 0x4b8c2e
mov ebx, dword [0x960180]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x4b8f6d
lea ecx, [esi - 2]
mov edi, ecx
neg ecx
sar ecx, 0x1f
and ecx, 2
add ecx, ebp
cmp word [ebp], 0x6d61
jne 0x4b8c5e
mov dword [esp + 0xd8], eax
mov eax, 1
mov byte [esp + 0x37], al
mov eax, dword [esp + 0xd8]
jmp 0x4b8c85
cmp word [ebp], 0x6d70
jne 0x4b8c7f
mov dword [esp + 0xe0], eax
mov eax, 1
mov byte [esp + 0x36], al
mov eax, dword [esp + 0xe0]
jmp 0x4b8c85
mov ebx, dword [0x960180]
mov eax, dword [esp + 0x18c]
jmp 0x4b8f6d
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x4b8f6d
mov dword [esp], ebp
mov dword [esp + 4], esi
cmp ecx, 0x212
sete al
mov byte [esp + 8], al
call fcn.004b7ab0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x14]
test eax, eax
je 0x4b8cfa
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov dword [esp + 0x8c], edx
mov edi, ebx
mov ebx, eax
mov edx, dword [esp + 0x138]
mov eax, dword [esp + 0x18c]
jmp 0x4b8f6d
cmp edx, 0x3c
jb 0x4b8d44
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov edi, 6
mov dword [esp + 0x94], edi
mov dword [esp + 0x8c], edx
mov edi, ebx
mov ebx, eax
lea eax, [0x7291d5]
mov dword [esp + 0x1cc], eax
mov edx, dword [esp + 0x138]
mov eax, dword [esp + 0x18c]
jmp 0x4b8f6d
cmp ebx, 2
jl 0x4b8e49
movzx ebp, byte [ecx]
xchg ebp, eax
cmp al, 0x2e
xchg ebp, eax
je 0x4b8d62
xchg ebp, eax
cmp al, 0x2c
xchg ebp, eax
jne 0x4b8e2f
movzx ebp, byte [ecx + 1]
add ebp, 0xffffffd0
xchg ebp, eax
cmp al, 9
xchg ebp, eax
jbe 0x4b8d8a
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0xa0]
mov edi, dword [esp + 0x1cc]
jmp 0x4ba5cb
mov dword [esp + 0x130], edx
mov dword [esp + 0x12c], eax
mov dword [esp + 0x90], ebx
mov dword [esp + 0x1c8], ecx
mov eax, dword [esp + 0x1bc]
mov dword [esp], eax
mov ecx, dword [esp + 0x84]
mov dword [esp + 4], ecx
call fcn.004c2080
mov eax, dword [esp + 0x10]
and eax, 0xffff
cmp eax, 0x22
je 0x4b8dd3
cmp eax, 0x23
jne 0x4b8e17
mov edx, dword [esp + 0x138]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov eax, dword [esp + 0x130]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x18c]
mov edi, dword [esp + 0x90]
mov ecx, dword [esp + 0x1c8]
mov ebx, dword [esp + 0x12c]
jmp 0x4b8f6d
mov eax, dword [esp + 0x1c8]
mov ecx, dword [esp + 0x90]
mov edx, 2
jmp 0x4ba60d
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0xa0]
mov edi, dword [esp + 0x1cc]
jmp 0x4ba5cb
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0xa0]
mov edi, dword [esp + 0x1cc]
jmp 0x4ba5cb
cmp edi, 0x20e
jg 0x4b8eef
mov dword [esp], ebp
mov dword [esp + 4], esi
cmp ecx, 0x20e
sete al
mov byte [esp + 8], al
call fcn.004b7ab0
mov eax, dword [esp + 0xc]
cmp eax, 0xc
jbe 0x4b8e9e
mov ecx, 4
lea edx, [0x7280e9]
jmp 0x4b8eac
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x1cc]
mov ebp, dword [esp + 0x10]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov dword [esp + 0x94], ecx
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
mov dword [esp + 0x1cc], edx
mov edx, dword [esp + 0x138]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
jmp 0x4b8f6d
mov dword [esp], ebp
mov dword [esp + 4], esi
cmp ecx, 0x210
sete al
mov byte [esp + 8], al
call fcn.004b7ab0
mov eax, dword [esp + 0xc]
cmp eax, 0x3c
jb 0x4b8f1e
mov ecx, 6
lea edx, [0x7291cf]
jmp 0x4b8f2c
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x1cc]
mov ebp, dword [esp + 0x10]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov dword [esp + 0x94], ecx
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
mov dword [esp + 0x1cc], edx
mov edx, dword [esp + 0x138]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov ebp, dword [esp + 0x94]
test ebp, ebp
jne 0x4ba372
test ebx, ebx
je 0x4b7f52
jmp 0x4ba1a0
test esi, esi
jne 0x4b9d55
movzx edx, byte [esp + 0x36]
test dl, dl
je 0x4b8fab
mov edx, dword [esp + 0xcc]
cmp edx, 0xc
jge 0x4b8fb2
add edx, 0xc
jmp 0x4b8fc2
mov edx, dword [esp + 0xcc]
movzx ebx, byte [esp + 0x37]
test bl, bl
je 0x4b8fc2
cmp edx, 0xc
jne 0x4b8fc2
xor edx, edx
mov ebx, dword [esp + 0x78]
test ebx, ebx
jl 0x4b946a
mov eax, dword [esp + 0x74]
test eax, 3
jne 0x4b9032
mov ebp, 0x51eb851f
mov ecx, edx
imul ebp
mov eax, dword [esp + 0x74]
mov esi, eax
sar esi, 0x1f
mov edi, edx
sar edx, 5
sub edx, esi
imul edx, edx, 0x64
cmp eax, edx
jne 0x4b9008
sar edi, 7
sub edi, esi
imul edx, edi, 0x190
cmp eax, edx
jne 0x4b902a
cmp ebx, 0x3c
jne 0x4b901b
mov esi, ebx
mov edx, 2
mov ebx, 0x1d
jmp 0x4b903f
jle 0x4b9022
lea esi, [ebx - 1]
jmp 0x4b9024
mov esi, ebx
xor edx, edx
xor ebx, ebx
jmp 0x4b903f
mov esi, ebx
xor edx, edx
xor ebx, ebx
jmp 0x4b903f
mov ecx, edx
mov ebp, 0x51eb851f
mov esi, ebx
xor edx, edx
xor ebx, ebx
lea edi, [esi - 1]
cmp edi, 0x16c
jbe 0x4b917f
mov eax, dword [esp + 0x210]
test eax, eax
jne 0x4b905f
xor ecx, ecx
xor edx, edx
jmp 0x4b90b7
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.004665d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x20c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x210]
mov dword [esp + 8], ecx
call fcn.00472440
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x210]
cmp edx, eax
ja 0x4ba19b
mov dword [esp + 0x44], edx
mov dword [esp + 0x148], ecx
lea eax, [0x706900]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x208]
mov dword [eax + 4], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x4b90f8
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x148]
jmp 0x4b9110
call fcn.00471ac0
mov ecx, dword [esp + 0x204]
mov dword [edi], ecx
mov edx, dword [esp + 0x148]
mov dword [edi + 4], edx
mov dword [esp + 0x174], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x24], 0x1a
lea ecx, [0x7369a9]
mov dword [eax + 0x20], ecx
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.00471d4b
lea ecx, [0x7a4920]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x174]
mov dword [esp + 0x234], ecx
add esp, 0x200
ret
test edx, edx
jne 0x4b91da
mov edx, eax
mov eax, 0x84210843
mov ebx, edx
imul edi
lea edx, [edx + esi - 1]
sar edx, 4
lea eax, [edx + 1]
cmp eax, 0xd
jae 0x4ba191
mov dword [esp + 0x138], ecx
lea edi, [0x931ca0]
lea ecx, [edi + edx*4 + 4]
cmp dword [ecx], esi
jge 0x4b91b9
lea eax, [edx + 2]
lea edx, [eax - 1]
cmp edx, 0xd
jae 0x4ba185
mov ecx, dword [edi + eax*4 - 4]
sub esi, ecx
mov ecx, dword [esp + 0x138]
mov edx, eax
mov ebx, esi
mov eax, dword [esp + 0x74]
mov esi, dword [esp + 0xac]
test esi, esi
jl 0x4b9322
cmp edx, esi
je 0x4b9322
mov eax, dword [esp + 0x210]
test eax, eax
jne 0x4b9202
xor ecx, ecx
xor edx, edx
jmp 0x4b925a
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.004665d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x20c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x210]
mov dword [esp + 8], ecx
call fcn.00472440
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x210]
cmp edx, eax
ja 0x4ba180
mov dword [esp + 0x144], ecx
mov dword [esp + 0x40], edx
lea eax, [0x706900]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x208]
mov dword [eax + 4], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x4b929b
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x144]
jmp 0x4b92b3
call fcn.00471ac0
mov ecx, dword [esp + 0x204]
mov dword [edi], ecx
mov edx, dword [esp + 0x144]
mov dword [edi + 4], edx
mov dword [esp + 0x170], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x40]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x24], 0x22
lea ecx, [0x73ae12]
mov dword [eax + 0x20], ecx
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.00471d4b
lea ecx, [0x7a4920]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x170]
mov dword [esp + 0x234], ecx
add esp, 0x200
ret
mov esi, dword [esp + 0xd4]
test esi, esi
jl 0x4b9499
cmp ebx, esi
je 0x4b9499
mov eax, dword [esp + 0x210]
test eax, eax
jne 0x4b934a
xor ecx, ecx
xor edx, edx
jmp 0x4b93a2
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.004665d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x20c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x210]
mov dword [esp + 8], ecx
call fcn.00472440
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x210]
cmp edx, eax
ja 0x4ba17b
mov dword [esp + 0x3c], edx
mov dword [esp + 0x140], ecx
lea eax, [0x706900]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x208]
mov dword [eax + 4], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x4b93e3
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x140]
jmp 0x4b93fb
call fcn.00471ac0
mov ecx, dword [esp + 0x204]
mov dword [edi], ecx
mov edx, dword [esp + 0x140]
mov dword [edi + 4], edx
mov dword [esp + 0x16c], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x24], 0x20
lea ecx, [0x739bf1]
mov dword [eax + 0x20], ecx
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.00471d4b
lea ecx, [0x7a4920]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x16c]
mov dword [esp + 0x234], ecx
add esp, 0x200
ret
mov ebx, dword [esp + 0xac]
test ebx, ebx
jge 0x4b947a
mov ebx, 1
mov ebp, dword [esp + 0xd4]
test ebp, ebp
jge 0x4b948a
mov ebp, 1
mov eax, dword [esp + 0x74]
mov ecx, edx
mov edx, ebx
mov ebx, ebp
mov ebp, 0x51eb851f
test ebx, ebx
jle 0x4b950e
cmp edx, 2
jne 0x4b94e0
test eax, 3
jne 0x4b94da
mov esi, edx
imul ebp
mov ebp, dword [esp + 0x74]
mov edi, ebp
sar ebp, 0x1f
mov eax, edx
sar edx, 5
sub edx, ebp
imul edx, edx, 0x64
cmp edi, edx
jne 0x4b94d3
sar eax, 7
sub eax, ebp
imul edx, eax, 0x190
cmp edi, edx
jne 0x4b94e4
mov ebp, 0x1d
jmp 0x4b9506
mov esi, edx
mov edi, eax
jmp 0x4b94e4
mov esi, edx
mov edi, eax
cmp esi, 0xd
jae 0x4ba16f
lea eax, [esi - 1]
lea edx, [0x931ca0]
mov ebp, dword [edx + esi*4]
cmp eax, 0xd
jae 0x4ba165
sub ebp, dword [edx + esi*4 - 4]
cmp ebp, ebx
jge 0x4b963f
mov eax, dword [esp + 0x210]
test eax, eax
jne 0x4b951f
xor ecx, ecx
xor edx, edx
jmp 0x4b9577
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.004665d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x20c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x210]
mov dword [esp + 8], ecx
call fcn.00472440
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x210]
cmp edx, eax
ja 0x4ba160
mov dword [esp + 0x13c], ecx
mov dword [esp + 0x38], edx
lea eax, [0x706900]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x208]
mov dword [eax + 4], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x4b95b8
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x13c]
jmp 0x4b95d0
call fcn.00471ac0
mov ecx, dword [esp + 0x204]
mov dword [edi], ecx
mov edx, dword [esp + 0x13c]
mov dword [edi + 4], edx
mov dword [esp + 0x168], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x38]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x24], 0x12
lea ecx, [0x731780]
mov dword [eax + 0x20], ecx
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.00471d4b
lea ecx, [0x7a4920]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x168]
mov dword [esp + 0x234], ecx
add esp, 0x200
ret
mov eax, dword [esp + 0x18c]
test eax, eax
jne 0x4b9cdc
mov eax, dword [esp + 0x6c]
cmp eax, 0xffffffff
jne 0x4b99e6
mov eax, dword [esp + 0x70]
test eax, eax
je 0x4b9966
mov eax, dword [0x95f880]
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
call fcn.004bd960
lea edi, [esp + 0x194]
lea esi, [esp + 0x20]
call fcn.0047222e
mov eax, dword [esp + 0x198]
test eax, 0x80000000
je 0x4b96ed
mov ecx, dword [esp + 0x194]
shl eax, 1
mov edx, ecx
shl ecx, 1
shr edx, 0x1f
or edx, eax
mov eax, edx
shl edx, 1
shr ecx, 0x1f
or edx, ecx
shr eax, 0x1f
add edx, 0xd7b17f80
adc eax, 0xd
jmp 0x4b96fb
mov edx, dword [esp + 0x19c]
mov eax, dword [esp + 0x1a0]
mov ecx, dword [esp + 0x218]
mov dword [esp], ecx
mov ebx, dword [esp + 0x188]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x70]
mov dword [esp + 8], ebp
add edx, 0x886e0900
mov dword [esp + 0xc], edx
adc eax, 0xfffffff1
mov dword [esp + 0x10], eax
call fcn.004c0b50
movzx eax, byte [esp + 0x18]
mov ecx, dword [esp + 0x14]
test al, al
je 0x4b980c
lea eax, [esp + 0x194]
mov dword [esp], eax
mov eax, ecx
sar ecx, 0x1f
xor edx, edx
sub edx, eax
mov dword [esp + 4], edx
mov eax, 0
sbb eax, ecx
mov dword [esp + 8], eax
call fcn.004bb5f0
nop
mov eax, dword [esp + 0x218]
lea ecx, [0x969ce0]
cmp eax, ecx
jne 0x4b977a
xor eax, eax
mov ecx, dword [esp + 0x198]
nop
test ecx, 0x80000000
je 0x4b97d5
mov edx, dword [esp + 0x194]
mov ebx, edx
shl edx, 1
shl ecx, 1
shr ebx, 0x1f
or ebx, ecx
mov ecx, ebx
shl ebx, 1
shr edx, 0x1f
or edx, ebx
shr ecx, 0x1f
add edx, 0xd7b17f80
mov dword [esp + 0x19c], edx
adc ecx, 0xd
mov dword [esp + 0x1a0], ecx
and dword [esp + 0x194], 0x3fffffff
mov dword [esp + 0x198], 0
mov dword [esp + 0x1a4], eax
lea edi, [esp + 0x21c]
lea esi, [esp + 0x194]
call fcn.0047222e
mov dword [esp + 0x230], 0
mov dword [esp + 0x234], 0
add esp, 0x200
ret
mov eax, dword [esp + 0x70]
cmp eax, 3
jle 0x4b9853
mov edx, dword [esp + 0x188]
cmp word [edx], 0x4d47
jne 0x4b9853
cmp byte [edx + 2], 0x54
jne 0x4b9853
lea ecx, [0x7a39f8]
mov dword [esp], ecx
lea ecx, [edx + 3]
mov dword [esp + 4], ecx
lea ecx, [eax - 3]
mov dword [esp + 8], ecx
call fcn.004c35d0
mov eax, dword [esp + 0xc]
imul ecx, eax, 0xe10
mov eax, dword [esp + 0x70]
mov dword [esp + 0x9c], ecx
nop
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.004665d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x188]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x70]
mov dword [esp + 8], ecx
call fcn.00472440
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x70]
cmp edx, eax
ja 0x4ba15b
mov dword [esp], ecx
mov dword [esp + 4], edx
mov eax, dword [esp + 0x9c]
mov dword [esp + 8], eax
call fcn.004be700
mov eax, dword [esp + 0xc]
lea ecx, [0x969ce0]
cmp eax, ecx
jne 0x4b98d4
xor eax, eax
mov ecx, dword [esp + 0x198]
nop
test ecx, 0x80000000
je 0x4b992f
mov edx, dword [esp + 0x194]
mov ebx, edx
shl edx, 1
shl ecx, 1
shr ebx, 0x1f
or ecx, ebx
mov ebx, ecx
shl ecx, 1
shr ebx, 0x1f
shr edx, 0x1f
or edx, ecx
add edx, 0xd7b17f80
mov dword [esp + 0x19c], edx
adc ebx, 0xd
mov dword [esp + 0x1a0], ebx
and dword [esp + 0x194], 0x3fffffff
mov dword [esp + 0x198], 0
mov dword [esp + 0x1a4], eax
lea edi, [esp + 0x21c]
lea esi, [esp + 0x194]
call fcn.0047222e
mov dword [esp + 0x230], 0
mov dword [esp + 0x234], 0
add esp, 0x200
ret
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x214]
mov dword [esp + 0x1c], eax
call fcn.004bd960
lea edi, [esp + 0x1ec]
lea esi, [esp + 0x20]
call fcn.0047222e
lea edi, [esp + 0x21c]
lea esi, [esp + 0x1ec]
call fcn.0047222e
mov dword [esp + 0x230], 0
mov dword [esp + 0x234], 0
add esp, 0x200
ret
mov eax, dword [0x95f880]
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
call fcn.004bd960
lea edi, [esp + 0x1a8]
lea esi, [esp + 0x20]
call fcn.0047222e
lea eax, [esp + 0x1a8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov ecx, eax
sar eax, 0x1f
xor edx, edx
sub edx, ecx
mov dword [esp + 4], edx
mov edx, 0
sbb edx, eax
mov dword [esp + 8], edx
call fcn.004bb5f0
mov eax, dword [esp + 0x1ac]
test eax, 0x80000000
je 0x4b9a97
mov ecx, dword [esp + 0x1a8]
shl eax, 1
mov edx, ecx
shl ecx, 1
shr edx, 0x1f
or edx, eax
mov eax, edx
shl edx, 1
shr ecx, 0x1f
or ecx, edx
shr eax, 0x1f
add ecx, 0xd7b17f80
adc eax, 0xd
jmp 0x4b9aa5
mov ecx, dword [esp + 0x1b0]
mov eax, dword [esp + 0x1b4]
mov edx, dword [esp + 0x218]
mov dword [esp], edx
add ecx, 0x886e0900
mov dword [esp + 4], ecx
adc eax, 0xfffffff1
mov dword [esp + 8], eax
call fcn.004be910
mov eax, dword [esp + 0x6c]
cmp dword [esp + 0x14], eax
jne 0x4b9b16
mov ecx, dword [esp + 0x70]
test ecx, ecx
jne 0x4b9ade
mov edx, 1
jmp 0x4b9b1c
mov edx, dword [esp + 0x10]
cmp ecx, edx
je 0x4b9aea
xor edx, edx
jmp 0x4b9b1c
mov eax, dword [esp + 0xc]
mov dword [esp], eax
mov eax, dword [esp + 0x188]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00402e10
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x70]
mov edx, eax
mov eax, dword [esp + 0x6c]
jmp 0x4b9b1c
mov ecx, dword [esp + 0x70]
xor edx, edx
test dl, dl
je 0x4b9bca
nop
mov eax, dword [esp + 0x218]
lea ecx, [0x969ce0]
cmp eax, ecx
jne 0x4b9b38
xor eax, eax
mov ecx, dword [esp + 0x1ac]
nop
test ecx, 0x80000000
je 0x4b9b93
mov edx, dword [esp + 0x1a8]
mov ebx, edx
shl edx, 1
shl ecx, 1
shr ebx, 0x1f
or ecx, ebx
mov ebx, ecx
shl ecx, 1
shr edx, 0x1f
or ecx, edx
shr ebx, 0x1f
add ecx, 0xd7b17f80
mov dword [esp + 0x1b0], ecx
adc ebx, 0xd
mov dword [esp + 0x1b4], ebx
and dword [esp + 0x1a8], 0x3fffffff
mov dword [esp + 0x1ac], 0
mov dword [esp + 0x1b8], eax
lea edi, [esp + 0x21c]
lea esi, [esp + 0x1a8]
call fcn.0047222e
mov dword [esp + 0x230], 0
mov dword [esp + 0x234], 0
add esp, 0x200
ret
test ecx, ecx
jne 0x4b9bd4
xor edx, edx
xor ecx, ecx
jmp 0x4b9c2a
mov dword [esp], ecx
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.004665d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x188]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x70]
mov dword [esp + 8], ecx
call fcn.00472440
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x70]
cmp edx, eax
ja 0x4ba156
mov eax, dword [esp + 0x6c]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004be700
mov eax, dword [esp + 0xc]
lea ecx, [0x969ce0]
cmp eax, ecx
jne 0x4b9c4a
xor eax, eax
mov ecx, dword [esp + 0x1ac]
nop
test ecx, 0x80000000
je 0x4b9ca5
mov edx, dword [esp + 0x1a8]
mov ebx, edx
shl edx, 1
shl ecx, 1
shr ebx, 0x1f
or ecx, ebx
mov ebx, ecx
shl ecx, 1
shr ebx, 0x1f
shr edx, 0x1f
or edx, ecx
add edx, 0xd7b17f80
mov dword [esp + 0x1b0], edx
adc ebx, 0xd
mov dword [esp + 0x1b4], ebx
and dword [esp + 0x1a8], 0x3fffffff
mov dword [esp + 0x1ac], 0
mov dword [esp + 0x1b8], eax
lea edi, [esp + 0x21c]
lea esi, [esp + 0x1a8]
call fcn.0047222e
mov dword [esp + 0x230], 0
mov dword [esp + 0x234], 0
add esp, 0x200
ret
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
call fcn.004bd960
lea edi, [esp + 0x1ec]
lea esi, [esp + 0x20]
call fcn.0047222e
lea edi, [esp + 0x21c]
lea esi, [esp + 0x1ec]
call fcn.0047222e
mov dword [esp + 0x230], 0
mov dword [esp + 0x234], 0
add esp, 0x200
ret
mov dword [esp], ebp
mov dword [esp + 4], esi
call fcn.004b7430
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp], 0
lea edx, [0x72ee3b]
mov dword [esp + 4], edx
mov dword [esp + 8], 0xe
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.00450aa0
mov eax, dword [esp + 0x14]
mov dword [esp + 0x1dc], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xbc], ecx
mov edx, dword [esp + 0x210]
test edx, edx
jne 0x4b9db6
xor edx, edx
xor ebx, ebx
jmp 0x4b9e17
mov dword [esp], edx
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.004665d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x20c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x210]
mov dword [esp + 8], ecx
call fcn.00472440
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x210]
cmp edx, eax
ja 0x4ba151
mov edx, ecx
mov ebx, dword [esp + 0x210]
mov dword [esp + 0x58], ebx
mov dword [esp + 0x15c], edx
nop
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.004665d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x1e8]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x80]
mov dword [esp + 8], ecx
call fcn.00472440
mov eax, dword [esp + 0x1e0]
neg eax
mov edx, dword [esp + 0x80]
cmp edx, eax
ja 0x4ba14c
lea eax, [0x706900]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x208]
mov dword [eax + 4], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x4b9eb6
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x15c]
jmp 0x4b9ece
call fcn.00471ac0
mov ecx, dword [esp + 0x204]
mov dword [edi], ecx
mov edx, dword [esp + 0x15c]
mov dword [edi + 4], edx
mov dword [eax], ecx
mov ecx, dword [esp + 0x58]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov ecx, dword [esp + 0x80]
mov dword [eax + 0x1c], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x4b9f0c
mov ecx, dword [esp + 0x1e0]
mov edx, dword [esp + 0x1dc]
jmp 0x4b9f24
call fcn.00471ac0
mov ecx, dword [esp + 0x1e0]
mov dword [edi], ecx
mov edx, dword [esp + 0x1dc]
mov dword [edi + 4], edx
mov dword [esp + 0x180], eax
mov dword [eax + 0x18], ecx
mov ecx, dword [esp + 0xbc]
mov dword [eax + 0x24], ecx
mov dword [eax + 0x20], edx
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.00471d4b
lea ecx, [0x7a4920]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x180]
mov dword [esp + 0x234], ecx
add esp, 0x200
ret
mov eax, dword [esp + 0x210]
test eax, eax
jne 0x4b9f7c
xor eax, eax
xor edx, edx
jmp 0x4b9fee
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.004665d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x20c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x210]
mov dword [esp + 8], ecx
call fcn.00472440
mov eax, dword [esp + 0x1e0]
neg eax
mov edx, dword [esp + 0x210]
cmp edx, eax
ja 0x4ba147
mov ecx, dword [esp + 0x98]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov eax, dword [esp + 0x1e0]
mov dword [esp + 0x60], edx
mov dword [esp + 0x164], eax
test esi, esi
jne 0x4ba003
xor ebx, ebx
xor ebp, ebp
jmp 0x4ba05f
mov dword [esp], esi
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.004665d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x1e8]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x80]
mov dword [esp + 8], ecx
call fcn.00472440
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x80]
cmp edx, eax
ja 0x4ba142
mov ebx, ecx
mov ebp, edx
mov dword [esp + 0x5c], ebp
mov dword [esp + 0x160], ebx
lea eax, [0x706900]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x208]
mov dword [eax + 4], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x4ba0ae
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x164]
mov ebx, dword [esp + 0x1d0]
mov ebp, dword [esp + 0x160]
jmp 0x4ba0da
call fcn.00471ae0
mov ecx, dword [esp + 0x204]
mov dword [edi], ecx
mov edx, dword [esp + 0x164]
mov dword [edi + 4], edx
mov ebx, dword [esp + 0x1d0]
mov dword [edi + 8], ebx
mov ebp, dword [esp + 0x160]
mov dword [edi + 0xc], ebp
mov dword [esp + 0x184], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x60]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov ecx, dword [esp + 0x98]
mov dword [eax + 0x14], ecx
mov dword [eax + 0x10], ebx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 0x1c], ecx
mov dword [eax + 0x18], ebp
mov dword [eax + 0x24], 0
mov dword [eax + 0x20], 0
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.00471d4b
lea ecx, [0x7a4920]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x184]
mov dword [esp + 0x234], ecx
add esp, 0x200
ret
call fcn.00462450
call fcn.00462450
call fcn.00462450
call fcn.00462450
call fcn.00462450
call fcn.00462450
call fcn.00462450
mov ecx, 0xd
call fcn.00471b30
mov eax, esi
mov ecx, 0xd
call fcn.00471b30
call fcn.00462450
call fcn.00462450
mov eax, edx
mov ecx, 0xd
call fcn.00471b30
mov ecx, 0xd
call fcn.00471b30
call fcn.00462450
mov eax, dword [esp + 0x210]
test eax, eax
jne 0x4ba1b1
xor ecx, ecx
xor eax, eax
jmp 0x4ba21e
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.004665d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x20c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x210]
mov dword [esp + 8], ecx
call fcn.00472440
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x210]
cmp edx, eax
ja 0x4ba5c6
mov edx, dword [esp + 0x138]
mov esi, dword [esp + 0x80]
mov eax, dword [esp + 0x210]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x150], ecx
test esi, esi
jne 0x4ba233
xor ebx, ebx
xor ebp, ebp
jmp 0x4ba28f
mov dword [esp], esi
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.004665d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x1e8]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x80]
mov dword [esp + 8], ecx
call fcn.00472440
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x80]
cmp edx, eax
ja 0x4ba5c1
mov ebx, ecx
mov ebp, edx
mov dword [esp + 0x14c], ebx
mov dword [esp + 0x48], ebp
lea eax, [0x706900]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x208]
mov dword [eax + 4], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x4ba2de
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x150]
mov ebx, dword [esp + 0x1c0]
mov ebp, dword [esp + 0x14c]
jmp 0x4ba30a
call fcn.00471ae0
mov ecx, dword [esp + 0x204]
mov dword [edi], ecx
mov edx, dword [esp + 0x150]
mov dword [edi + 4], edx
mov ebx, dword [esp + 0x1c0]
mov dword [edi + 8], ebx
mov ebp, dword [esp + 0x14c]
mov dword [edi + 0xc], ebp
mov dword [esp + 0x178], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x4c]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov ecx, dword [esp + 0x138]
mov dword [eax + 0x14], ecx
mov dword [eax + 0x10], ebx
mov ecx, dword [esp + 0x48]
mov dword [eax + 0x1c], ecx
mov dword [eax + 0x18], ebp
mov dword [eax + 0x24], 0
mov dword [eax + 0x20], 0
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.00471d4b
lea ecx, [0x7a4920]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x178]
mov dword [esp + 0x234], ecx
add esp, 0x200
ret
mov dword [esp + 0x7c], edi
mov dword [esp + 0x190], ecx
mov dword [esp], 0
lea eax, [0x727c10]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov eax, dword [esp + 0x1cc]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebp
lea eax, [0x72e3f7]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0xd
call fcn.00450b40
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x1d8], eax
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xb8], ecx
mov edx, dword [esp + 0x210]
test edx, edx
jne 0x4ba3e3
xor edx, edx
xor ebx, ebx
jmp 0x4ba455
mov dword [esp], edx
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.004665d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x20c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x210]
mov dword [esp + 8], ecx
call fcn.00472440
mov eax, dword [esp + 0x1e0]
neg eax
mov edx, dword [esp + 0x210]
cmp edx, eax
ja 0x4ba5bc
mov eax, dword [esp + 0x1d8]
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0x1e0]
mov ebx, dword [esp + 0x210]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x158], edx
mov ebp, dword [esp + 0x7c]
test ebp, ebp
jne 0x4ba46e
xor ebp, ebp
xor esi, esi
jmp 0x4ba4c4
mov dword [esp], ebp
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.004665d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x190]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x7c]
mov dword [esp + 8], ecx
call fcn.00472440
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x7c]
cmp edx, eax
ja 0x4ba5b7
mov ebp, ecx
mov esi, edx
mov dword [esp + 0x50], esi
mov dword [esp + 0x154], ebp
lea eax, [0x706900]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x208]
mov dword [eax + 4], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x4ba51a
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x158]
mov ebx, dword [esp + 0x1c0]
mov ebp, dword [esp + 0x154]
mov esi, dword [esp + 0x1d8]
jmp 0x4ba550
call fcn.00471af0
mov ecx, dword [esp + 0x204]
mov dword [edi], ecx
mov edx, dword [esp + 0x158]
mov dword [edi + 4], edx
mov ebx, dword [esp + 0x1c0]
mov dword [edi + 8], ebx
mov ebp, dword [esp + 0x154]
mov dword [edi + 0xc], ebp
mov esi, dword [esp + 0x1d8]
mov dword [edi + 0x10], esi
mov dword [esp + 0x17c], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x54]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov ecx, dword [esp + 0x138]
mov dword [eax + 0x14], ecx
mov dword [eax + 0x10], ebx
mov ecx, dword [esp + 0x50]
mov dword [eax + 0x1c], ecx
mov dword [eax + 0x18], ebp
mov ecx, dword [esp + 0xb8]
mov dword [eax + 0x24], ecx
mov dword [eax + 0x20], esi
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.00471d4b
lea ecx, [0x7a4920]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x17c]
mov dword [esp + 0x234], ecx
add esp, 0x200
ret
call fcn.00462450
call fcn.00462450
call fcn.00462450
call fcn.00462450
mov dword [esp + 0x94], ebp
mov dword [esp + 0x8c], edx
mov dword [esp + 0x1cc], edi
mov dword [esp + 0xa0], esi
mov edx, dword [esp + 0x138]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov edi, ebx
mov ebx, eax
mov eax, dword [esp + 0x18c]
jmp 0x4b8f6d
inc edx
cmp edx, ecx
jge 0x4ba61d
movzx ebx, byte [edx + eax]
add ebx, 0xffffffd0
cmp bl, 9
jbe 0x4ba60c
mov dword [esp + 0xa8], edx
lea ebx, [0x7a3a00]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.004c3450
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0x90]
cmp eax, ecx
ja 0x4ba68d
sub ecx, eax
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and eax, ecx
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x18]
mov edx, dword [esp + 0x1c8]
add eax, edx
mov edx, dword [esp + 0x130]
mov edx, eax
mov eax, ecx
mov ecx, edx
mov edx, dword [esp + 0x130]
jmp 0x4ba5cb
call fcn.00471b90
inc edi
mov dword [esp + 0xc4], edi
mov edi, dword [esp + 0x1e8]
mov edi, dword [esp + 0xc4]
cmp edi, 2
jge 0x4ba6de
cmp ecx, 0x10a
jne 0x4ba692
test esi, esi
je 0x4ba692
cmp byte [ebp], 0x20
jne 0x4ba692
dec esi
mov dword [esp + 0x134], esi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, 1
add ebp, esi
mov esi, dword [esp + 0x134]
jmp 0x4ba692
xor edi, edi
xor edi, edi
mov dword [esp + 0x68], edi
xor edi, edi
jmp 0x4ba70a
mov edx, dword [esp + 0x68]
lea edx, [edx + edx*4]
movzx eax, al
inc edi
lea eax, [eax + edx*2]
mov edx, dword [esp + 0x138]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x1c0]
cmp edi, 3
jge 0x4ba72a
cmp edi, esi
jge 0x4ba726
movzx eax, byte [edi + ebp]
add eax, 0xffffffd0
cmp al, 9
jbe 0x4ba6ea
mov eax, dword [esp + 0x1c0]
test edi, edi
je 0x4ba737
cmp ecx, 0x10b
jne 0x4ba741
cmp edi, 3
je 0x4ba741
mov ecx, dword [0x960180]
xor edi, edi
jmp 0x4ba758
cmp edi, esi
ja 0x4ba77c
sub esi, edi
mov ecx, esi
neg ecx
sar ecx, 0x1f
and ecx, edi
add ebp, ecx
mov edi, dword [esp + 0x68]
xor ecx, ecx
mov dword [esp + 0x78], edi
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ebx, ecx
mov esi, dword [esp + 0x80]
mov ecx, ebp
mov ebp, dword [esp + 0x1e8]
jmp 0x4b8f6d
mov eax, edi
mov ecx, esi
call fcn.00471b90
mov ecx, ebx
mov dword [esp + 0xc0], ecx
lea ebx, [ecx + 1]
cmp esi, ebx
jle 0x4ba7ae
jbe 0x4ba84e
movzx edi, byte [ecx + ebp + 1]
xchg edi, eax
cmp al, 0x30
xchg edi, eax
jb 0x4ba7ae
xchg edi, eax
cmp al, 0x39
xchg edi, eax
jbe 0x4ba785
mov dword [esp + 0x128], ebx
lea eax, [0x7a3a00]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
call fcn.004c3450
mov ecx, dword [esp + 0x80]
mov eax, dword [esp + 0x128]
cmp ecx, eax
jb 0x4ba849
mov edx, dword [esp + 0xc0]
sub ecx, edx
lea edi, [ecx - 1]
mov ecx, edi
neg ecx
sar ecx, 0x1f
and eax, ecx
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1e8]
add eax, esi
mov esi, dword [esp + 0x80]
mov dword [esp + 0x94], ebp
mov dword [esp + 0x1cc], ebx
mov dword [esp + 0xa0], ecx
mov ebp, dword [esp + 0x1e8]
mov ecx, eax
mov ebx, edx
mov edx, dword [esp + 0x138]
mov eax, dword [esp + 0x18c]
jmp 0x4b8f6d
call fcn.00471b90
mov eax, ebx
mov ecx, esi
call fcn.00471b30
call fcn.00471b50
mov eax, edx
mov ecx, ebx
call fcn.00471b90
mov ecx, ebx
call fcn.00471b50
nop
call fcn.004706b0
jmp fcn.004b7e70