Function at 0x433990
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x9b0
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov dword [esp + 0x9a8], eax
mov dword [esp + 0x9a4], ecx
mov dword [esp + 0x9a0], edx
mov dword [esp + 0x99c], esi
mov dword [esp + 0x998], edi
mov bx, word [0x48e77a]
mov ax, bx
imul eax, eax, 0xbc75773
mov bx, ax
mov word [0x48e77a], bx
mov eax, esp
mov dword [eax + 4], 8
mov dword [eax], 0x4aac
call fcn.0044b9d0
mov dword [esp + 0x994], eax
mov eax, dword [0x48d1f0]
shl eax, 2
xor eax, 0x4003b60f
cmp eax, 0x914000
jl 0x433a36
mov ax, word [0x49080e]
mov cx, ax
imul ecx, ecx, 0x34d6ce21
mov ax, cx
mov word [0x49080e], ax
mov eax, dword [esp + 0x994]
mov ecx, dword [esp + 0x998]
mov edx, esp
mov dword [edx + 4], eax
mov dword [edx], ecx
call fcn.004560c0
mov dword [esp + 0x96c], eax
mov si, word [0x49326e]
movsx eax, si
cmp eax, 0x8468943b
jne 0x433aa5
mov eax, 0x89163c29
mov ecx, dword [0x48d548]
cmp eax, ecx
jge 0x433aa0
mov eax, dword [0x48804c]
mov ecx, eax
dec ecx
mov dword [0x48804c], ecx
and eax, 0xb20f0e0f
mov ecx, dword [0x48cf20]
xor ecx, eax
mov dword [0x48cf20], ecx
jmp 0x433abe
mov eax, dword [0x48514c]
mov ecx, dword [0x485cd4]
imul eax, ecx
imul eax, eax, 0x9f75c4bd
mov dword [0x485cd4], eax
mov eax, dword [esp + 0x994]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 8
call fcn.0041e2a0
mov eax, dword [0x48b450]
mov ecx, eax
dec ecx
mov dword [0x48b450], ecx
add eax, 0x1afa19ac
mov ecx, dword [0x48d6b0]
and ecx, eax
mov dword [0x48d6b0], ecx
cmp dword [esp + 0x96c], 0
jne 0x433c07
mov eax, dword [0x487650]
and eax, 0x73fbd99a
mov dword [0x487650], eax
cmp dword [esp + 0x9a8], 0
je 0x433b64
mov eax, dword [0x484fd4]
mov ecx, dword [0x483e44]
dec ecx
mov dword [0x483e44], ecx
imul eax, ecx
or eax, 0xd5cb908f
mov ecx, dword [0x48a44c]
and ecx, eax
mov dword [0x48a44c], ecx
mov ecx, dword [esp + 0x9a0]
call fcn.00450870
mov dword [0x486ee4], 0xd7e67fcf
jmp 0x436623
mov eax, dword [0x485370]
imul eax, eax, 0x52918aa0
mov dword [0x485370], eax
mov eax, dword [esp + 0x9a0]
mov ecx, dword [esp + 0x99c]
mov edx, esp
mov dword [edx + 4], eax
mov dword [edx], ecx
call fcn.00401350
mov dword [esp + 0x968], eax
mov eax, dword [0x48c72c]
mov ecx, eax
inc ecx
mov dword [0x48c72c], ecx
or eax, 0xd76bddeb
mov dword [0x48830c], eax
cmp dword [esp + 0x968], 0
jg 0x433bf1
mov ax, word [0x493cbc]
mov cx, ax
xor ecx, 0x9378
mov ax, cx
mov word [0x493cbc], ax
mov ecx, dword [esp + 0x9a0]
call fcn.00450870
mov ecx, dword [0x483978]
xor ecx, 0xe368bd9a
mov dword [0x483978], ecx
mov eax, dword [0x484638]
not eax
and eax, 0xaf57f6a8
mov dword [0x485a18], eax
jmp 0x436623
mov eax, dword [0x484d48]
add eax, 0x23db16
mov dword [0x484d48], eax
mov eax, dword [0x48aa20]
and eax, 0x441c7ec8
mov dword [0x48aa20], eax
mov eax, dword [0x484a48]
shl eax, 4
cmp eax, 0x7fa466b0
je 0x433c81
mov eax, dword [0x4876c8]
xor eax, 0xffffffff
and eax, 0x30f034ca
cmp eax, 0x8550f90d
jge 0x433c64
mov eax, dword [0x48b870]
xor eax, 0xfff9f147
mov dword [0x48b870], eax
jmp 0x433c7c
mov ax, word [0x491942]
mov cx, ax
or ecx, 0x2e5f
mov ax, cx
mov word [0x491942], ax
jmp 0x433c81
mov eax, 0x2ea06044
mov ecx, dword [0x48190c]
add ecx, 0x18d62992
xor ecx, 0x14a78049
mov edx, dword [0x483f40]
sub edx, ecx
mov dword [0x483f40], edx
mov dword [0x486f78], 0xbfffbbff
mov si, word [0x49089c]
mov cx, si
or ecx, 0x2e89
mov si, cx
mov word [0x49089c], si
mov ecx, dword [0x48da1c]
mov edx, ecx
inc edx
mov dword [0x48da1c], edx
cmp eax, ecx
je 0x433ceb
mov dword [0x48a210], 0xfbff3fdc
mov eax, 0x4004f8e8
lea ecx, [esp + 0x63c]
mov dword [esp + 0x138], eax
call fcn.00444120
mov ecx, dword [0x489c84]
add ecx, 0xd3e661fe
mov dword [0x489c84], ecx
mov ecx, dword [0x483074]
xor ecx, 0x84a3faf8
mov edx, dword [esp + 0x138]
cmp edx, ecx
mov dword [esp + 0x134], eax
jg 0x433d46
mov eax, dword [0x48d780]
add eax, 0x44229001
mov dword [0x48d780], eax
mov eax, 0x2c8a4087
mov ecx, dword [0x4874ec]
inc ecx
mov dword [0x4874ec], ecx
or ecx, 0x60c1
mov dx, word [0x4902c6]
mov si, dx
xor esi, ecx
mov dx, si
mov word [0x4902c6], dx
mov ecx, dword [0x482680]
xor ecx, 0xffffffff
cmp eax, ecx
jl 0x433da9
mov eax, dword [0x489f94]
mov ecx, eax
dec ecx
mov dword [0x489f94], ecx
mov ecx, dword [0x48a848]
and eax, ecx
mov ecx, dword [0x48a264]
or ecx, eax
mov dword [0x48a264], ecx
mov eax, 0xf33200f4
mov dword [esp + 0x224], 0
mov dword [esp + 0x220], 0
mov cx, word [0x4909b2]
mov dx, cx
add edx, 0x81862921
mov cx, dx
mov word [0x4909b2], cx
mov cx, word [0x48fb62]
movsx edx, cx
or edx, 0x6a0a17e
cmp eax, edx
jle 0x433e53
mov eax, 0xfb7415ad
mov ecx, dword [0x486218]
xor ecx, 0xffffffff
cmp eax, ecx
je 0x433e4e
mov eax, dword [0x487c58]
mov ecx, eax
inc ecx
mov dword [0x487c58], ecx
mov ecx, dword [0x484b88]
mov edx, ecx
dec edx
mov dword [0x484b88], edx
lea eax, [eax + ecx + 1]
mov ecx, dword [0x483594]
sar ecx, 0xa
add ecx, 0xc8e92b5c
cmp eax, ecx
je 0x433e49
jmp 0x433e49
jmp 0x433e4e
jmp 0x433e53
mov dword [esp + 0x218], 0xffffffff
mov dword [esp + 0x214], 0xffffffff
mov eax, dword [0x488a34]
imul eax, eax, 0x8e42c60
mov dword [0x488a34], eax
mov dword [esp + 0x210], 0x50
mov eax, dword [0x48c68c]
xor eax, 0x16366b19
mov ecx, dword [0x486c90]
inc ecx
mov dword [0x486c90], ecx
xor ecx, 0x4a7f8916
cmp eax, ecx
jge 0x433eb8
mov eax, dword [0x4886e0]
add eax, 0x419643
mov dword [0x4886e0], eax
mov byte [esp + 0x20f], 0
mov eax, dword [0x48b4ac]
or eax, 0x9df95d56
mov dword [0x48b4ac], eax
mov eax, esp
mov dword [eax], 0
call fcn.00450890
add eax, 0x258
adc edx, 0
mov dword [esp + 0x220], eax
mov dword [esp + 0x224], edx
mov eax, dword [0x485be0]
or eax, 0xc4040880
mov dword [0x485be0], eax
mov byte [esp + 0x668], 0
mov eax, dword [0x48ad9c]
imul eax, eax, 0xd7390db2
mov dword [0x48ad9c], eax
mov eax, dword [esp + 0x998]
mov edx, esp
mov dword [edx], eax
call fcn.00453000
mov dword [esp + 0x234], eax
mov cx, word [0x493daa]
mov ax, cx
or eax, 0x871c
mov cx, ax
mov word [0x493daa], cx
cmp dword [esp + 0x234], 0x7f
jle 0x433f77
mov eax, dword [0x482c04]
mov cx, word [0x4902e8]
mov dx, cx
xor edx, eax
mov cx, dx
mov word [0x4902e8], cx
jmp 0x436452
mov eax, 0x84002
mov ecx, dword [0x487a10]
sar ecx, 0xa
add ecx, 0x1ba02a56
xor ecx, 0x10748cd6
cmp eax, ecx
je 0x433fa8
mov eax, dword [0x4855c4]
and eax, 0x7447eeae
mov dword [0x4855c4], eax
mov eax, dword [esp + 0x998]
mov ecx, esp
mov dword [ecx + 4], eax
lea eax, [esp + 0x8e8]
mov dword [ecx], eax
call fcn.00456150
mov dword [0x4826d4], 0x84200001
mov ecx, dword [esp + 0x234]
sub ecx, 1
mov dword [esp + 0x230], ecx
mov dword [esp + 0x130], eax
mov eax, dword [esp + 0x230]
mov ecx, dword [esp + 0x234]
sub ecx, 6
cmp eax, ecx
jl 0x434187
mov eax, dword [0x487638]
or eax, 0x343e0723
mov dword [0x487638], eax
mov eax, dword [esp + 0x230]
movsx eax, byte [esp + eax + 0x8e8]
cmp eax, 0x3a
jne 0x4340de
mov eax, 0x8531b939
mov ecx, dword [0x484880]
imul ecx, ecx, 0x2a82b6e1
and ecx, 0xd5563e8b
cmp eax, ecx
jle 0x43404d
mov dword [0x4874ac], 0xa248f308
mov eax, dword [esp + 0x230]
mov byte [esp + eax + 0x8e8], 0
mov cx, word [0x49181e]
mov ax, cx
or eax, 0x7748
mov cx, ax
mov word [0x49181e], cx
mov eax, dword [esp + 0x230]
mov dword [esp + 0x234], eax
mov cx, word [0x491978]
mov ax, cx
xor eax, 0xc4e9
mov cx, ax
mov word [0x491978], cx
mov eax, dword [esp + 0x230]
lea edx, [esp + 0x8e8]
lea eax, [eax + edx + 1]
mov edx, esp
mov dword [edx], eax
call fcn.004562aa
mov dword [esp + 0x210], eax
mov eax, dword [0x48642c]
shl eax, 4
mov edx, 0x629c15de
sub edx, eax
mov eax, dword [0x4856c0]
and eax, edx
mov dword [0x4856c0], eax
jmp 0x434187
mov ax, word [0x48fab8]
movsx ecx, ax
cmp ecx, 0x65ba5caf
jge 0x43416c
mov eax, 0xc4fe95f
mov ecx, dword [0x48da8c]
mov edx, dword [0x487dfc]
sub edx, 0x2e111867
xor ecx, edx
cmp eax, ecx
jl 0x434131
mov ax, word [0x49267e]
mov cx, ax
imul ecx, ecx, 0xe4143594
mov ax, cx
mov word [0x49267e], ax
jmp 0x434167
mov eax, dword [0x489648]
not eax
mov ecx, dword [0x48d960]
mov edx, ecx
dec edx
mov dword [0x48d960], edx
mov edx, dword [0x485da8]
sub ecx, edx
or ecx, 0xfb535d96
cmp eax, ecx
jg 0x434162
jmp 0x434162
jmp 0x434167
jmp 0x43416c
jmp 0x434171
mov eax, dword [esp + 0x230]
add eax, 0xffffffff
mov dword [esp + 0x230], eax
jmp 0x433fe4
mov eax, dword [0x48516c]
add eax, 0xa399a430
mov dword [0x48516c], eax
mov dword [esp + 0x230], 0
mov eax, dword [esp + 0x230]
cmp eax, dword [esp + 0x234]
jg 0x43439e
mov eax, dword [0x4830dc]
mov cx, word [0x48f53a]
mov dx, cx
add edx, eax
mov cx, dx
mov word [0x48f53a], cx
mov eax, dword [esp + 0x230]
mov bl, byte [esp + eax + 0x8e8]
mov byte [esp + eax + 0x868], bl
mov eax, dword [0x485e24]
imul eax, eax, 0xd3eee293
mov dword [0x485e24], eax
mov eax, dword [esp + 0x230]
movsx eax, byte [esp + eax + 0x868]
cmp eax, 0x2f
jne 0x434371
mov eax, dword [0x48c1c8]
add eax, 0xcb236e69
mov dword [0x48c1c8], eax
mov eax, dword [esp + 0x230]
mov byte [esp + eax + 0x868], 0
mov cx, word [0x493116]
movsx eax, cx
cmp eax, 0x33514d6b
jl 0x43426a
mov ax, word [0x493b56]
mov cx, ax
inc ecx
mov ax, cx
mov word [0x493b56], ax
movsx ecx, ax
xor ecx, 0xe2b082ad
mov edx, dword [0x48674c]
and edx, ecx
mov dword [0x48674c], edx
mov eax, dword [esp + 0x230]
mov dword [esp + 0x22c], eax
mov eax, dword [esp + 0x22c]
cmp eax, dword [esp + 0x234]
jg 0x43435d
mov eax, 0x5001e001
mov ecx, dword [0x485f70]
dec ecx
mov dword [0x485f70], ecx
mov edx, dword [0x484650]
xor edx, 0xffffffff
xor edx, 0xb7d74b93
or ecx, edx
cmp eax, ecx
jge 0x4342f0
mov eax, 0xc4514b6d
mov ecx, dword [0x48a104]
sar ecx, 0xa
and ecx, 0x9787c539
cmp eax, ecx
jne 0x4342eb
mov ax, word [0x491574]
mov cx, ax
and ecx, 0xf4ab
mov ax, cx
mov word [0x491574], ax
jmp 0x43431a
mov eax, 0xbf86dc72
mov ecx, dword [0x4871c4]
sar ecx, 7
or ecx, 0x48a41804
cmp eax, ecx
jl 0x434315
mov word [0x49178e], 0x4504
jmp 0x43431a
mov eax, dword [esp + 0x22c]
mov cl, byte [esp + eax + 0x8e8]
mov edx, dword [esp + 0x230]
sub eax, edx
mov byte [esp + eax + 0x668], cl
mov eax, dword [0x48dd3c]
add eax, 0xdaffddd8
mov dword [0x48dd3c], eax
mov eax, dword [esp + 0x22c]
add eax, 1
mov dword [esp + 0x22c], eax
jmp 0x434278
mov eax, dword [0x48c4cc]
add eax, 0x85742bf0
mov dword [0x48c4cc], eax
jmp 0x43439e
mov eax, dword [0x48dbcc]
mov ecx, dword [0x482588]
xor eax, ecx
xor eax, 0x6012ac02
mov dword [0x482588], eax
mov eax, dword [esp + 0x230]
add eax, 1
mov dword [esp + 0x230], eax
jmp 0x4341a1
lea eax, [esp + 0x668]
mov dword [0x48ba44], 0x50f07c74
mov ecx, esp
mov dword [ecx], eax
call fcn.00453000
mov ecx, dword [esp + 0x99c]
mov edx, esp
mov dword [edx], ecx
mov dword [esp + 0x12c], eax
call fcn.00453000
mov ecx, dword [esp + 0x12c]
add ecx, eax
cmp ecx, 0x1ff
jbe 0x434435
mov eax, 0x7b3f3bdb
mov ecx, dword [0x486ef0]
sar ecx, 0xa
mov edx, dword [0x48abb4]
mov esi, edx
inc esi
mov dword [0x48abb4], esi
imul ecx, edx
cmp eax, ecx
je 0x434430
mov eax, dword [0x48541c]
mov cx, word [0x49164c]
movsx edx, cx
and eax, edx
and eax, 0x5b3c7d23
mov edx, dword [0x485df8]
add edx, eax
mov dword [0x485df8], edx
jmp 0x436452
mov eax, 0xf16520a6
mov ecx, dword [0x4887ec]
and ecx, 0x4d81f3ae
mov dword [0x4887ec], ecx
mov ecx, dword [esp + 0x99c]
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [esp + 0x668]
mov dword [edx], ecx
mov dword [esp + 0x128], eax
call fcn.00456160
mov si, word [0x491cb8]
mov cx, si
or ecx, 0x9107
mov si, cx
mov word [0x491cb8], si
mov dword [esp + 0x22c], 0
mov ecx, dword [0x484958]
mov edx, ecx
dec edx
mov dword [0x484958], edx
imul ecx, ecx, 0x760f4b7
sub ecx, 0x9e92a3f1
mov edx, dword [esp + 0x128]
cmp edx, ecx
mov dword [esp + 0x124], eax
jne 0x4344d3
mov eax, dword [0x485cf8]
imul eax, eax, 0x9040350
mov dword [0x485cf8], eax
mov eax, 0xca008be
mov ecx, esp
mov dword [ecx + 4], 5
mov dword [ecx], 0x7a4
mov dword [esp + 0x120], eax
call fcn.0044b9d0
mov dword [esp + 0x990], eax
mov eax, dword [0x4836a4]
mov ecx, dword [0x489444]
sub ecx, eax
mov dword [0x489444], ecx
mov eax, dword [esp + 0x990]
mov ecx, esp
mov dword [ecx], eax
lea ecx, [esp + 0x63c]
call fcn.00440d90
sub esp, 4
mov dx, word [0x4925b2]
movsx ecx, dx
shl ecx, 0xa
mov esi, dword [esp + 0x120]
cmp esi, ecx
mov dword [esp + 0x11c], eax
jg 0x434563
mov eax, dword [0x483960]
xor eax, 0xf1455bdc
mov ecx, dword [0x488a74]
imul ecx, eax
mov dword [0x488a74], ecx
mov eax, dword [esp + 0x990]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 5
call fcn.0041e2a0
mov dx, word [0x490c62]
mov ax, dx
inc eax
mov dx, ax
mov word [0x490c62], dx
movsx eax, dx
imul eax, eax, 0x8e81c28
mov ecx, dword [0x484ccc]
sub ecx, eax
mov dword [0x484ccc], ecx
mov eax, dword [esp + 0x9a0]
mov ecx, eax
call fcn.00411270
cmp eax, 0
je 0x43491e
mov eax, 0xecfa6545
mov dword [0x48cc40], 0xeae7048
mov ecx, esp
mov dword [ecx + 4], 0xc
mov dword [ecx], 0x3607
mov dword [esp + 0x118], eax
call fcn.0044b9d0
mov dword [esp + 0x98c], eax
mov eax, dword [0x485978]
inc eax
mov dword [0x485978], eax
mov ecx, dword [esp + 0x118]
cmp ecx, eax
jge 0x43463d
mov ax, word [0x48f5ca]
mov cx, ax
inc ecx
mov ax, cx
mov word [0x48f5ca], ax
imul ecx, ecx, 0xd929d82b
mov edx, dword [0x484964]
sub ecx, edx
mov ax, word [0x492c42]
mov dx, ax
or edx, ecx
mov ax, dx
mov word [0x492c42], ax
mov ecx, dword [esp + 0x9a0]
mov eax, dword [esp + 0x98c]
mov edx, esp
mov dword [edx], eax
lea eax, [esp + 0x1f8]
mov dword [esp + 0x114], ecx
mov ecx, eax
mov dword [esp + 0x110], eax
call fcn.0044d820
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x110]
mov dword [ecx], edx
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x114]
mov dword [esp + 0x10c], eax
call fcn.00449790
sub esp, 8
mov dword [esp + 0x230], eax
mov ecx, dword [esp + 0x110]
call fcn.004508b0
mov word [0x4929e6], 0xae1e
mov eax, dword [esp + 0x98c]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0xc
call fcn.0041e2a0
mov eax, dword [0x483128]
add eax, 0xe4d39f85
and eax, 0x343ea239
mov ecx, dword [0x48d5c0]
xor ecx, eax
mov dword [0x48d5c0], ecx
cmp dword [esp + 0x230], 0
jne 0x434900
mov ax, word [0x4937c0]
mov cx, ax
dec ecx
mov ax, cx
mov word [0x4937c0], ax
movsx ecx, ax
or ecx, 0xf0270743
mov edx, dword [0x4847c4]
dec edx
mov dword [0x4847c4], edx
imul edx, edx, 0x49f2e813
add edx, 0x9155c34b
cmp ecx, edx
jl 0x434745
mov eax, dword [0x483444]
xor eax, 0x6ed5d738
mov dword [0x483444], eax
jmp 0x43475e
mov eax, dword [0x48d8c4]
or eax, 0x60d7636b
mov ecx, dword [0x482148]
imul ecx, eax
mov dword [0x482148], ecx
mov eax, 0xde745a9d
mov dword [esp + 0x22c], 1
mov cx, word [0x492dd0]
movsx edx, cx
add edx, 0x93a9e46b
mov esi, dword [0x48c548]
dec esi
mov dword [0x48c548], esi
and edx, esi
cmp eax, edx
jne 0x4347a8
mov eax, dword [0x48c620]
mov ecx, dword [0x489af8]
add ecx, eax
mov dword [0x489af8], ecx
mov eax, dword [esp + 0x9a0]
mov ecx, esp
mov dword [ecx], 0
mov ecx, eax
mov dword [esp + 0x108], eax
call fcn.004508c0
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xb
mov ecx, dword [esp + 0x108]
call fcn.00431a50
sub esp, 8
mov dx, word [0x4903c0]
mov cx, dx
add ecx, 0xd4ecd38
mov dx, cx
mov word [0x4903c0], dx
mov ecx, esp
mov dword [ecx + 4], 6
mov dword [ecx], 0x3823
mov dword [esp + 0x104], eax
call fcn.0044b9d0
mov dword [esp + 0x988], eax
mov eax, dword [0x48dae0]
mov dx, word [0x48f03a]
mov cx, dx
imul ecx, eax
mov dx, cx
mov word [0x48f03a], dx
mov eax, dword [esp + 0x988]
mov ecx, esp
mov dword [ecx], eax
lea ecx, [esp + 0x63c]
call fcn.00440d90
sub esp, 4
mov ecx, dword [0x48804c]
and ecx, 0x48c20b27
cmp ecx, 0xbfc7ff0e
mov dword [esp + 0x100], eax
jl 0x4348da
mov eax, 0xea20d32a
mov cx, word [0x4916d0]
mov dx, cx
dec edx
mov cx, dx
mov word [0x4916d0], cx
movsx edx, cx
sub eax, edx
cmp eax, 0x4624b083
jne 0x4348ba
mov ax, word [0x490450]
mov cx, ax
xor ecx, 0x8765
mov ax, cx
mov word [0x490450], ax
jmp 0x4348d5
mov eax, dword [0x4894bc]
not eax
imul eax, eax, 0xa046bff5
mov ecx, dword [0x48378c]
add ecx, eax
mov dword [0x48378c], ecx
jmp 0x4348da
mov eax, dword [esp + 0x988]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 6
call fcn.0041e2a0
mov eax, dword [0x48ced4]
or eax, 0xdd1fa764
mov dword [0x48ced4], eax
mov eax, dword [0x487698]
imul eax, eax, 0xb7879c41
or eax, 0x42124e3a
mov ecx, dword [0x485f38]
xor ecx, eax
mov dword [0x485f38], ecx
mov eax, 0x859e90d5
mov ecx, dword [0x483fc8]
add ecx, 0x2fd91ac
mov dword [0x483fc8], ecx
mov ecx, esp
lea edx, [esp + 0x668]
mov dword [ecx], edx
lea ecx, [esp + 0x1e4]
mov dword [esp + 0xfc], ecx
mov dword [esp + 0xf8], eax
call fcn.00421cb0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xfc]
mov dword [ecx], edx
lea ecx, [esp + 0x63c]
mov dword [esp + 0xf4], eax
call fcn.0044f0b0
sub esp, 4
mov ecx, dword [esp + 0xfc]
mov dword [esp + 0xf0], eax
call fcn.004508f0
mov eax, dword [0x48cee8]
xor eax, 0x690fb59c
mov dword [0x48cee8], eax
mov eax, esp
mov dword [eax + 4], 0x32
mov dword [eax], 0x2043
call fcn.0044b9d0
mov dword [esp + 0x984], eax
mov eax, dword [0x487194]
mov ecx, eax
dec ecx
mov dword [0x487194], ecx
xor eax, 0x23d628d2
mov ecx, dword [esp + 0xf8]
cmp ecx, eax
je 0x4349fa
mov ax, word [0x49395c]
mov cx, ax
or ecx, 0xa5af
mov ax, cx
mov word [0x49395c], ax
jmp 0x434a09
mov eax, dword [0x487e30]
xor eax, 0xfee8fffa
mov dword [0x487e30], eax
mov eax, dword [esp + 0x984]
mov ecx, esp
mov dword [ecx], eax
lea eax, [esp + 0x1d0]
mov ecx, eax
mov dword [esp + 0xec], eax
call fcn.00421cb0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xec]
mov dword [ecx], edx
lea ecx, [esp + 0x63c]
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xe4], eax
call fcn.0044f0b0
sub esp, 4
mov ecx, dword [esp + 0xec]
mov dword [esp + 0xe0], eax
call fcn.004508f0
mov eax, dword [0x4876b0]
add eax, 0x77022f13
mov dword [0x4876b0], eax
mov eax, dword [esp + 0x984]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0x32
call fcn.0041e2a0
mov dword [0x48b584], 0xc3d5c8e
mov eax, esp
lea ecx, [esp + 0x868]
mov dword [eax], ecx
lea eax, [esp + 0x1bc]
mov ecx, eax
mov dword [esp + 0xdc], eax
call fcn.00421cb0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xdc]
mov dword [ecx], edx
mov ecx, dword [esp + 0xe8]
mov dword [esp + 0xd8], eax
call fcn.0044f0b0
sub esp, 4
mov ecx, dword [esp + 0xdc]
mov dword [esp + 0xd4], eax
call fcn.004508f0
mov eax, dword [0x4887b0]
imul eax, eax, 0x298c1ad4
mov dword [0x4887b0], eax
cmp dword [esp + 0x22c], 0
je 0x434d31
mov eax, 0x8e78649
mov ecx, dword [0x483590]
mov edx, dword [0x48238c]
sar edx, 1
or ecx, edx
mov edx, dword [0x48a1e8]
and edx, ecx
mov dword [0x48a1e8], edx
mov ecx, esp
mov dword [ecx + 4], 0x44
mov dword [ecx], 0x2077
mov dword [esp + 0xd0], eax
call fcn.0044b9d0
mov dword [esp + 0x980], eax
mov eax, dword [0x48a04c]
or eax, 0x1e525e3d
mov dword [0x48a04c], eax
mov eax, dword [esp + 0x980]
mov ecx, esp
mov dword [ecx], eax
lea eax, [esp + 0x1a8]
mov ecx, eax
mov dword [esp + 0xcc], eax
call fcn.00421cb0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xcc]
mov dword [ecx], edx
lea ecx, [esp + 0x63c]
mov dword [esp + 0xc8], eax
call fcn.0044f0b0
sub esp, 4
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0xc4], eax
call fcn.004508f0
mov eax, dword [0x48aa4c]
and eax, 0xab1c28b9
mov dword [0x48aa4c], eax
mov eax, esp
mov dword [eax + 4], 3
mov dword [eax], 0x1e4f
call fcn.0044b9d0
mov dword [esp + 0x97c], eax
mov eax, dword [0x48c660]
add eax, 0x8a136ed
mov dword [0x48c660], eax
mov eax, dword [esp + 0x980]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0x44
call fcn.0041e2a0
mov eax, dword [0x48914c]
sar eax, 9
or eax, 0x2852fd17
mov ecx, dword [esp + 0xd0]
cmp ecx, eax
jge 0x434c32
mov eax, dword [0x48b150]
xor eax, 0x2c969e8d
mov dword [0x48b150], eax
mov ecx, dword [esp + 0x9a0]
call fcn.00411270
mov ecx, dword [esp + 0x97c]
mov edx, esp
mov dword [edx + 8], eax
mov dword [edx + 4], ecx
lea eax, [esp + 0x23c]
mov dword [edx], eax
call fcn.004563de
mov si, word [0x491012]
mov cx, si
or ecx, 0xdc0a
mov si, cx
mov word [0x491012], si
mov ecx, dword [esp + 0x97c]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], 3
mov dword [esp + 0xc0], eax
call fcn.0041e2a0
mov eax, dword [0x48c3a8]
mov ecx, eax
inc ecx
mov dword [0x48c3a8], ecx
mov ecx, dword [0x48a6b8]
dec ecx
mov dword [0x48a6b8], ecx
and ecx, 0x3f93e2eb
cmp eax, ecx
je 0x434ccb
mov eax, dword [0x484054]
or eax, 0x757a1e31
mov dword [0x484054], eax
mov eax, esp
lea ecx, [esp + 0x23c]
mov dword [eax], ecx
lea eax, [esp + 0x194]
mov ecx, eax
mov dword [esp + 0xbc], eax
call fcn.00421cb0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xbc]
mov dword [ecx], edx
lea ecx, [esp + 0x63c]
mov dword [esp + 0xb8], eax
call fcn.0044f0b0
sub esp, 4
mov ecx, dword [esp + 0xbc]
mov dword [esp + 0xb4], eax
call fcn.004508f0
mov eax, dword [0x4824d4]
or eax, 0x6904b068
mov dword [0x4824d4], eax
mov eax, 0x51c4986a
mov ecx, dword [0x48cce4]
inc ecx
mov dword [0x48cce4], ecx
mov edx, dword [0x483a14]
and ecx, edx
and ecx, 0xdae00e86
mov dword [0x483a14], ecx
mov ecx, esp
mov dword [ecx + 4], 5
mov dword [ecx], 0x51d6
mov dword [esp + 0xb0], eax
call fcn.0044b9d0
mov dword [esp + 0x978], eax
mov eax, dword [0x488158]
xor eax, 0x5ae63ad3
mov ecx, dword [0x48923c]
sub ecx, eax
mov dword [0x48923c], ecx
mov eax, dword [esp + 0x978]
mov ecx, esp
mov dword [ecx], eax
lea eax, [esp + 0x180]
mov ecx, eax
mov dword [esp + 0xac], eax
call fcn.00421cb0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xac]
mov dword [ecx], edx
lea ecx, [esp + 0x63c]
mov dword [esp + 0xa8], eax
call fcn.0044f0b0
sub esp, 4
mov ecx, dword [esp + 0xac]
mov dword [esp + 0xa4], eax
call fcn.004508f0
mov eax, dword [0x48c148]
sar eax, 0xa
mov ecx, dword [esp + 0xb0]
cmp ecx, eax
je 0x434e0e
mov eax, dword [0x486fa0]
add eax, 0x5562388
mov dword [0x486fa0], eax
mov eax, dword [esp + 0x978]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 5
call fcn.0041e2a0
mov eax, dword [0x488788]
sar eax, 9
sub eax, 0x8b2b8820
cmp eax, 0xd64dbcd0
jle 0x434e5d
mov eax, dword [0x486f10]
sar eax, 3
add eax, 0xd91ed279
mov ecx, dword [0x487f44]
xor ecx, eax
mov dword [0x487f44], ecx
jmp 0x434e6d
mov eax, dword [0x48db44]
imul eax, eax, 0xba4ded32
mov dword [0x48db44], eax
cmp dword [esp + 0x22c], 0
je 0x434f31
mov eax, 0xfe7dffff
mov ecx, dword [0x48381c]
imul ecx, ecx, 0x4e24255a
mov edx, dword [0x482118]
and ecx, edx
and ecx, 0x1e31dd70
mov dword [0x482118], ecx
mov ecx, dword [esp + 0x9a0]
mov edx, esp
mov dword [edx], ecx
lea ecx, [esp + 0x63c]
mov dword [esp + 0xa0], eax
call fcn.0044f0b0
sub esp, 4
mov si, word [0x4902cc]
movsx ecx, si
add ecx, 0xee27c4f2
or ecx, 0xef829a2c
mov edx, dword [esp + 0xa0]
cmp edx, ecx
mov dword [esp + 0x9c], eax
jle 0x434f2c
mov eax, 0xa77fb0c5
mov ecx, dword [0x486e68]
add ecx, 0x8b2c7a2f
xor ecx, 0x492448b7
cmp eax, ecx
jle 0x434f27
mov eax, dword [0x48b2a0]
shl eax, 0xa
and eax, 0x44224000
mov ecx, dword [0x48951c]
add ecx, eax
mov dword [0x48951c], ecx
jmp 0x434f2c
jmp 0x434f31
mov eax, 0xee0a6d3a
mov ecx, dword [0x48a678]
and ecx, 0xa6729526
mov dword [0x48a678], ecx
mov ecx, dword [0x48150c]
mov edx, esp
lea esi, [esp + 0x868]
mov dword [edx], esi
mov dword [esp + 0x98], eax
call ecx
sub esp, 4
mov dword [esp + 0x238], eax
mov di, word [0x491df4]
mov ax, di
dec eax
mov bx, ax
mov word [0x491df4], bx
movsx eax, di
mov di, word [0x4922ba]
mov cx, di
dec ecx
mov bx, cx
mov word [0x4922ba], bx
movsx ecx, di
mov edx, dword [0x48b530]
mov esi, edx
inc esi
mov dword [0x48b530], esi
imul ecx, edx
and eax, ecx
mov ecx, dword [esp + 0x98]
cmp ecx, eax
jl 0x434fce
mov eax, dword [0x484dd4]
xor eax, 0xb77cf61
mov dword [0x484dd4], eax
cmp dword [esp + 0x238], 0
jne 0x434ff1
mov eax, dword [0x482ee8]
imul eax, eax, 0x2a4eb562
mov dword [0x482ee8], eax
jmp 0x436452
mov eax, dword [0x488918]
imul eax, eax, 0x78c12ed8
add eax, 0xbe065acf
mov ecx, dword [0x489694]
imul ecx, eax
mov dword [0x489694], ecx
xorps xmm0, xmm0
movaps xmmword [esp + 0x650], xmm0
mov dx, word [0x49288c]
mov ax, dx
dec eax
mov dx, ax
mov word [0x49288c], dx
movsx eax, dx
sub eax, 0x93c96f90
cmp eax, 0xcdbce22
jge 0x43509e
mov ax, word [0x4926fc]
movsx ecx, ax
add ecx, 0x18c6fa16
cmp ecx, 0x3831a15
jne 0x435086
mov eax, dword [0x483a14]
shl eax, 4
add eax, 0xdc946675
mov cx, word [0x48f3b6]
mov dx, cx
xor edx, eax
mov cx, dx
mov word [0x48f3b6], cx
jmp 0x435099
mov eax, dword [0x4850bc]
mov ecx, dword [0x487a68]
xor ecx, eax
mov dword [0x487a68], ecx
jmp 0x4350fe
mov eax, 0x2de4eeff
mov cx, word [0x49046e]
mov dx, cx
dec edx
mov cx, dx
mov word [0x49046e], cx
movsx edx, cx
sub edx, 0x3590e00e
and edx, 0x516e1466
cmp eax, edx
jg 0x4350f9
mov eax, dword [0x481f70]
inc eax
mov dword [0x481f70], eax
and eax, 0xdb09b58c
or eax, 0x3b2b8d39
cmp eax, 0xa578bea4
je 0x4350f4
jmp 0x4350f4
jmp 0x4350f9
jmp 0x4350fe
mov eax, 0x99e8c49c
mov word [esp + 0x650], 2
mov cx, word [0x490574]
movsx edx, cx
not edx
mov esi, dword [0x487168]
sar esi, 9
imul esi, esi, 0x38ac8094
add edx, esi
cmp eax, edx
jl 0x435145
mov eax, dword [0x48d5a0]
mov ecx, dword [0x482234]
or ecx, eax
mov dword [0x482234], ecx
mov eax, 0xc22ab42f
mov ecx, dword [0x481514]
mov edx, dword [0x481518]
mov esi, dword [esp + 0x238]
mov esi, dword [esi + 0xc]
mov esi, dword [esi]
mov esi, dword [esi]
mov dword [esp + 0x17c], esi
mov esi, dword [esp + 0x17c]
mov edi, esp
mov dword [edi], esi
mov dword [esp + 0x94], eax
mov dword [esp + 0x90], ecx
call edx
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [esp + 0x90]
call eax
sub esp, 4
mov dword [esp + 0x654], eax
mov eax, dword [0x48a488]
imul eax, eax, 0xcf4ba400
mov ecx, dword [0x481b34]
and ecx, eax
mov dword [0x481b34], ecx
mov eax, dword [0x481510]
movzx ecx, word [esp + 0x210]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov word [esp + 0x652], ax
mov ecx, dword [0x488b78]
mov edx, ecx
dec edx
mov dword [0x488b78], edx
or ecx, 0x8712139d
mov edx, dword [esp + 0x94]
cmp edx, ecx
jle 0x43524c
mov eax, 0xf37b9444
mov ecx, dword [0x48d340]
sar ecx, 2
and ecx, 0x14c854b3
and ecx, 0x3f442aa2
cmp eax, ecx
jg 0x435247
mov eax, dword [0x485518]
mov ecx, eax
inc ecx
mov dword [0x485518], ecx
xor eax, 0x191f
mov dx, word [0x4937a2]
mov cx, dx
imul ecx, eax
mov dx, cx
mov word [0x4937a2], dx
jmp 0x43525c
mov eax, dword [0x485dc8]
imul eax, eax, 0x538b425b
mov dword [0x485dc8], eax
cmp dword [esp + 0x9a4], 0
je 0x4354a2
mov eax, dword [0x48bda4]
add eax, 0xdd6b23c9
mov cx, word [0x490a30]
mov dx, cx
and edx, eax
mov cx, dx
mov word [0x490a30], cx
mov eax, dword [esp + 0x9a4]
mov edx, 0x10624dd3
mul edx
shr edx, 6
mov eax, esp
mov dword [eax + 4], edx
lea edx, [esp + 0x650]
mov dword [eax], edx
call fcn.0044d0b0
mov dword [esp + 0x664], eax
mov eax, dword [0x484458]
xor eax, 0x4f41cb39
mov edx, dword [0x483844]
and edx, eax
mov dword [0x483844], edx
cmp dword [esp + 0x664], 0
jge 0x435325
mov eax, 0x1045774a
mov ecx, dword [0x48c7ec]
imul ecx, ecx, 0x856445f
cmp eax, ecx
jne 0x435303
mov dword [0x48cd60], 0x4469a3bb
jmp 0x435320
mov ax, word [0x48fe9a]
movsx ecx, ax
xor ecx, 0x979cb6ea
mov edx, dword [0x48316c]
and edx, ecx
mov dword [0x48316c], edx
jmp 0x436452
mov eax, 0xc10d89e
mov ecx, dword [0x48818c]
dec ecx
mov dword [0x48818c], ecx
mov edx, dword [0x48d4b8]
xor ecx, edx
xor ecx, 0x43d3d4b2
cmp eax, ecx
jne 0x43536e
mov eax, dword [0x48b6ec]
mov ecx, eax
inc ecx
mov dword [0x48b6ec], ecx
and eax, 0x8c60dc60
mov ecx, dword [0x48a52c]
sub ecx, eax
mov dword [0x48a52c], ecx
mov eax, 0x71c62000
mov ecx, dword [0x48152c]
mov edx, dword [esp + 0x664]
mov esi, esp
lea edi, [esp + 0x9a4]
mov dword [esi + 0xc], edi
mov dword [esi], edx
mov dword [esi + 0x10], 4
mov dword [esi + 8], 0x1006
mov dword [esi + 4], 0xffff
mov dword [esp + 0x8c], eax
mov dword [esp + 0x88], edi
call ecx
sub esp, 0x14
mov ecx, dword [0x483ddc]
imul ecx, ecx, 0x10080c
mov dword [0x483ddc], ecx
mov ecx, dword [0x48152c]
mov edx, dword [esp + 0x664]
mov esi, esp
mov edi, dword [esp + 0x88]
mov dword [esi + 0xc], edi
mov dword [esi], edx
mov dword [esi + 0x10], 4
mov dword [esi + 8], 0x1005
mov dword [esi + 4], 0xffff
mov dword [esp + 0x84], eax
call ecx
sub esp, 0x14
mov bx, word [0x491cb8]
movsx ecx, bx
sar ecx, 7
mov bx, word [0x49347c]
movsx edx, bx
add edx, 0x32c33f4e
or ecx, edx
mov edx, dword [esp + 0x8c]
cmp edx, ecx
mov dword [esp + 0x80], eax
jne 0x435489
mov eax, dword [0x486820]
mov ecx, dword [0x48a6d0]
dec ecx
mov dword [0x48a6d0], ecx
sub eax, ecx
cmp eax, 0x2508c28
jne 0x435484
mov eax, 0x8415242
mov ecx, dword [0x4847f0]
mov edx, ecx
inc edx
mov dword [0x4847f0], edx
or ecx, 0xc92889e8
cmp eax, ecx
jne 0x43547f
jmp 0x43547f
jmp 0x435484
jmp 0x43549d
mov eax, dword [0x485518]
mov ecx, dword [0x48583c]
imul ecx, eax
mov dword [0x48583c], ecx
jmp 0x43560c
mov eax, 0x5d0f42fb
mov ecx, dword [0x48c79c]
mov edx, ecx
inc edx
mov dword [0x48c79c], edx
imul ecx, ecx, 0xe683bf95
or ecx, 0xc3b7f827
cmp eax, ecx
je 0x4354ed
mov ax, word [0x48f81e]
movsx ecx, ax
xor ecx, 0x4000a112
or ecx, 0x1f7a44a1
mov edx, dword [0x484484]
and edx, ecx
mov dword [0x484484], edx
mov eax, dword [0x481530]
mov ecx, esp
mov dword [ecx + 8], 6
mov dword [ecx + 4], 1
mov dword [ecx], 2
call eax
sub esp, 0xc
mov dword [esp + 0x664], eax
mov eax, dword [0x487808]
shl eax, 5
mov dx, word [0x49243e]
mov cx, dx
and ecx, eax
mov dx, cx
mov word [0x49243e], dx
cmp dword [esp + 0x664], 0xffffffff
jne 0x43554f
mov dword [0x487d58], 0x12680f51
jmp 0x436452
lea eax, [esp + 0x650]
mov ecx, dword [0x487168]
add ecx, 0x28b7e36c
mov dword [0x487168], ecx
mov ecx, dword [0x481508]
mov edx, dword [esp + 0x664]
mov esi, esp
mov dword [esi + 4], eax
mov dword [esi], edx
mov dword [esi + 8], 0x10
call ecx
sub esp, 0xc
cmp eax, 0xffffffff
jne 0x4355fd
mov eax, dword [0x4885a8]
imul eax, eax, 0x58a2c060
mov ecx, dword [0x489290]
imul ecx, ecx, 0xaca49727
mov edx, dword [0x485760]
inc edx
mov dword [0x485760], edx
and ecx, edx
cmp eax, ecx
jne 0x4355f8
mov eax, dword [0x48c208]
shl eax, 4
cmp eax, 0xeffdda6d
je 0x4355f3
mov eax, dword [0x4832d0]
imul eax, eax, 0x9a0f5b8d
mov cx, word [0x4900e8]
mov dx, cx
or edx, eax
mov cx, dx
mov word [0x4900e8], cx
jmp 0x4355f8
jmp 0x4363d4
mov eax, dword [0x489144]
or eax, 0x55d1f18
mov dword [0x489144], eax
lea eax, [esp + 0x63c]
mov ecx, dword [0x489adc]
add ecx, 0x1256cac3
mov dword [0x489adc], ecx
mov ecx, dword [0x481528]
lea edx, [esp + 0x63c]
mov dword [esp + 0x7c], ecx
mov ecx, edx
mov dword [esp + 0x78], eax
mov dword [esp + 0x74], edx
call fcn.00411270
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x70], eax
call fcn.00450900
mov ecx, dword [esp + 0x664]
mov edx, esp
mov esi, dword [esp + 0x70]
mov dword [edx + 8], esi
mov dword [edx + 4], eax
mov dword [edx], ecx
mov dword [edx + 0xc], 0
mov eax, dword [esp + 0x7c]
call eax
sub esp, 0x10
mov dword [esp + 0x660], eax
mov eax, dword [0x482774]
add eax, 0xb27853af
mov dword [0x482774], eax
mov eax, dword [esp + 0x660]
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x6c], eax
call fcn.00411270
mov ecx, dword [esp + 0x6c]
cmp ecx, eax
jae 0x4356c1
mov eax, dword [0x48a7d8]
add eax, 0x12288025
mov dword [0x48a7d8], eax
jmp 0x4363d4
mov eax, dword [0x48d554]
mov ecx, dword [0x48637c]
not ecx
or eax, ecx
mov ecx, dword [0x487b40]
xor ecx, eax
mov dword [0x487b40], ecx
mov ecx, dword [esp + 0x9a0]
call fcn.00450870
mov eax, dword [0x4848dc]
or eax, 0xdd5e0ecb
cmp eax, 0x7fa1f01a
jle 0x43570e
mov eax, dword [0x4845a8]
add eax, 0x9de051bd
mov dword [0x4845a8], eax
jmp 0x435713
mov eax, dword [0x48c13c]
mov ecx, eax
inc ecx
mov dword [0x48c13c], ecx
mov ecx, dword [0x48c464]
or eax, ecx
mov dword [0x485c10], eax
mov eax, dword [0x481520]
mov ecx, dword [esp + 0x664]
mov edx, esp
lea esi, [esp + 0x23c]
mov dword [edx + 4], esi
mov dword [edx], ecx
mov dword [edx + 0xc], 0
mov dword [edx + 8], 0x400
call eax
sub esp, 0x10
mov dword [esp + 0x660], eax
mov dword [0x48500c], 0xa7ffec32
cmp dword [esp + 0x660], 0
jle 0x43579d
mov eax, dword [esp + 0x220]
mov ecx, dword [esp + 0x224]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], eax
call fcn.00406ce0
cmp eax, 0
je 0x4357d8
mov eax, 0x6725df49
mov ecx, dword [0x487a20]
cmp eax, ecx
jg 0x4357d3
mov eax, dword [0x488ad4]
not eax
add eax, 0x4c2ebc1
mov cx, word [0x48ffd8]
mov dx, cx
imul edx, eax
mov cx, dx
mov word [0x48ffd8], cx
jmp 0x436225
mov eax, 0xb25ae8e4
mov ecx, dword [0x48d76c]
dec ecx
mov dword [0x48d76c], ecx
xor ecx, 0x7410974d
xor ecx, 0x38cb5545
cmp eax, ecx
jl 0x435807
mov word [0x49381c], 0xefd9
mov eax, dword [esp + 0x9a0]
mov ecx, eax
mov dword [esp + 0x68], eax
call fcn.00411270
mov ecx, dword [esp + 0x660]
add eax, ecx
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x68]
call fcn.00404890
sub esp, 8
mov eax, dword [0x483d40]
inc eax
mov dword [0x483d40], eax
mov ecx, dword [0x482154]
or eax, ecx
mov ecx, dword [0x48b470]
add ecx, eax
mov dword [0x48b470], ecx
mov eax, dword [esp + 0x9a0]
mov ecx, eax
call fcn.00450910
cmp eax, 0
jne 0x4358a1
mov ax, word [0x493fb8]
mov cx, ax
dec ecx
mov dx, cx
mov word [0x493fb8], dx
movsx ecx, ax
and ecx, 0x31309b00
mov esi, dword [0x48969c]
sub esi, ecx
mov dword [0x48969c], esi
jmp 0x436225
mov eax, dword [0x487664]
dec eax
mov dword [0x487664], eax
and eax, 0x7433ef78
mov ecx, dword [0x481cc4]
xor ecx, eax
mov dword [0x481cc4], ecx
mov ecx, dword [esp + 0x9a0]
mov eax, dword [esp + 0x660]
mov edx, esp
mov dword [edx + 4], eax
lea eax, [esp + 0x23c]
mov dword [edx], eax
call fcn.004035f0
sub esp, 8
mov ecx, dword [0x489d24]
imul ecx, ecx, 0x9b86ff81
mov dword [0x489d24], ecx
cmp dword [esp + 0x218], 0
mov dword [esp + 0x64], eax
jge 0x435d0c
mov eax, 0x6b23f3c9
mov ecx, dword [0x486c80]
mov edx, dword [0x481930]
mov esi, edx
dec esi
mov dword [0x481930], esi
mov di, word [0x48fea6]
mov si, di
inc esi
mov bx, si
mov word [0x48fea6], bx
movsx esi, di
xor edx, esi
or ecx, edx
cmp eax, ecx
jle 0x43595d
mov ax, word [0x491250]
mov cx, ax
xor ecx, 0x4086
mov ax, cx
mov word [0x491250], ax
mov eax, 0xea6c5ee9
mov ecx, esp
mov dword [ecx + 4], 5
mov dword [ecx], 0x51d6
mov dword [esp + 0x60], eax
call fcn.0044b9d0
mov dword [esp + 0x974], eax
mov eax, dword [0x485a60]
sar eax, 0xa
mov ecx, dword [0x483e34]
imul ecx, eax
mov dword [0x483e34], ecx
mov ecx, dword [esp + 0x9a0]
mov eax, dword [esp + 0x974]
mov edx, esp
mov dword [edx], eax
lea eax, [esp + 0x168]
mov dword [esp + 0x5c], ecx
mov ecx, eax
mov dword [esp + 0x58], eax
call fcn.0044d820
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x58]
mov dword [ecx], edx
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x54], eax
call fcn.00449790
sub esp, 8
mov dword [esp + 0x218], eax
mov ecx, dword [esp + 0x58]
call fcn.004508b0
mov eax, dword [0x4839c4]
mov ecx, eax
inc ecx
mov dword [0x4839c4], ecx
add eax, 0x53500030
mov ecx, dword [esp + 0x60]
cmp ecx, eax
je 0x435a50
mov eax, 0xf4f6e44e
mov ecx, dword [0x486734]
xor ecx, 0x3ab7e637
cmp eax, ecx
jge 0x435a4b
mov eax, dword [0x483cb8]
imul eax, eax, 0x34633c54
mov cx, word [0x48ef56]
mov dx, cx
xor edx, eax
mov cx, dx
mov word [0x48ef56], cx
jmp 0x435a73
mov eax, dword [0x484424]
inc eax
mov dword [0x484424], eax
xor eax, 0x1200500
or eax, 0x5a5ffaf9
mov ecx, dword [0x48cc7c]
sub ecx, eax
mov dword [0x48cc7c], ecx
mov eax, dword [esp + 0x974]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 5
call fcn.0041e2a0
mov eax, dword [0x486e38]
imul eax, eax, 0x438ed210
mov dword [0x486e38], eax
cmp dword [esp + 0x218], 0
jl 0x435cfd
mov eax, 0xea915473
mov cx, word [0x491cfe]
mov dx, cx
dec edx
mov si, dx
mov word [0x491cfe], si
movsx edx, cx
mov edi, dword [0x485c9c]
and edx, edi
mov edi, dword [0x485514]
add edi, edx
mov dword [0x485514], edi
mov edx, dword [esp + 0x218]
add edx, 4
mov dword [esp + 0x218], edx
mov edx, dword [0x486068]
cmp eax, edx
jge 0x435b09
mov eax, dword [0x487f70]
xor eax, 0x8991af8c
mov dword [0x487f70], eax
mov eax, dword [esp + 0x9a0]
mov ecx, esp
mov dword [ecx], eax
call fcn.0041dcf0
mov dword [esp + 0x214], eax
mov eax, dword [0x48a150]
mov ecx, dword [0x48c6fc]
xor eax, ecx
xor eax, 0xadcd35ec
mov dword [0x48c6fc], eax
cmp dword [esp + 0x214], 0
jge 0x435ced
mov eax, dword [0x4857ac]
mov cx, word [0x48edca]
movsx edx, cx
xor edx, 0xffffffff
add edx, 0xca92ab5e
cmp eax, edx
je 0x435b88
mov eax, dword [0x487ef0]
sar eax, 0xa
mov ecx, dword [0x48b67c]
and eax, ecx
mov ecx, dword [0x4863a0]
xor ecx, eax
mov dword [0x4863a0], ecx
jmp 0x435ba0
mov ax, word [0x4904ec]
mov cx, ax
or ecx, 0xcd83
mov ax, cx
mov word [0x4904ec], ax
mov eax, 0xd22a6ec3
mov ecx, esp
mov dword [ecx + 4], 0xb
mov dword [ecx], 0x1ea9
mov dword [esp + 0x50], eax
call fcn.0044b9d0
mov dword [esp + 0x970], eax
mov eax, dword [0x48b3b0]
mov dx, word [0x493f64]
movsx ecx, dx
and eax, ecx
mov ecx, dword [esp + 0x50]
cmp ecx, eax
jle 0x435bf9
mov ax, word [0x491520]
mov cx, ax
add ecx, 0x8984db96
mov ax, cx
mov word [0x491520], ax
mov ecx, dword [esp + 0x9a0]
mov eax, dword [esp + 0x970]
mov edx, esp
mov dword [edx], eax
lea eax, [esp + 0x154]
mov dword [esp + 0x4c], ecx
mov ecx, eax
mov dword [esp + 0x48], eax
call fcn.0044d820
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x48]
mov dword [ecx], edx
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x44], eax
call fcn.00449790
sub esp, 8
mov dword [esp + 0x660], eax
mov ecx, dword [esp + 0x48]
call fcn.004508b0
mov eax, dword [0x48cc54]
or eax, 0xea4bbb7e
mov dword [0x48cc54], eax
mov eax, dword [esp + 0x970]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0xb
call fcn.0041e2a0
mov dword [0x4871cc], 0xf2988eec
cmp dword [esp + 0x660], 0
jl 0x435cde
mov eax, 0x7325f5b7
mov ecx, dword [0x484f98]
sar ecx, 5
cmp eax, ecx
jne 0x435cca
mov eax, dword [0x489a3c]
not eax
mov cx, word [0x48fbc6]
mov dx, cx
imul edx, eax
mov cx, dx
mov word [0x48fbc6], cx
jmp 0x435cd9
mov eax, dword [0x489d40]
xor eax, 0xa5a6269c
mov dword [0x489d40], eax
jmp 0x436225
mov eax, dword [0x48c8e0]
or eax, 0x466bb4ec
mov dword [0x48c8e0], eax
mov eax, dword [0x48b720]
imul eax, eax, 0x6dfdef47
mov dword [0x48b720], eax
mov eax, dword [0x48631c]
xor eax, 0xf644545a
mov dword [0x48631c], eax
mov eax, 0xc0002109
mov cx, word [0x493bec]
mov dx, cx
dec edx
mov cx, dx
mov word [0x493bec], cx
movsx edx, cx
mov esi, dword [0x481ee0]
imul edx, esi
cmp eax, edx
jne 0x435d63
mov eax, dword [0x48762c]
inc eax
mov dword [0x48762c], eax
mov ecx, dword [0x48d2c0]
not ecx
imul eax, ecx
mov ecx, dword [0x481e2c]
xor ecx, eax
mov dword [0x481e2c], ecx
jmp 0x435d73
mov eax, dword [0x4859b0]
imul eax, eax, 0xfeffbea3
mov dword [0x4859b0], eax
cmp dword [esp + 0x214], 0
jl 0x435e36
mov ax, word [0x48f830]
mov cx, ax
add ecx, 0xcf129d8c
mov ax, cx
mov word [0x48f830], ax
mov ecx, dword [esp + 0x9a0]
call fcn.00411270
sub eax, dword [esp + 0x218]
cmp eax, dword [esp + 0x214]
jb 0x435dd1
mov eax, dword [0x4819fc]
mov ecx, dword [0x484328]
add ecx, eax
mov dword [0x484328], ecx
jmp 0x436225
mov eax, 0x62418081
mov ecx, dword [0x48a444]
xor ecx, 0xffffffff
cmp eax, ecx
jge 0x435e04
mov eax, dword [0x48cf64]
and eax, 0xf184d868
mov ecx, dword [0x481e48]
add ecx, eax
mov dword [0x481e48], ecx
jmp 0x435e31
mov eax, dword [0x486628]
or eax, 0x86de97f8
cmp eax, 0x76435e7c
jl 0x435e2c
mov eax, dword [0x48c45c]
mov ecx, dword [0x48bdd4]
add ecx, eax
mov dword [0x48bdd4], ecx
jmp 0x435e31
jmp 0x435e36
mov ax, word [0x48f716]
mov cx, ax
dec ecx
mov ax, cx
mov word [0x48f716], ax
movsx ecx, ax
add ecx, 0xa822fc7d
mov edx, dword [0x48c7f4]
or edx, ecx
mov dword [0x48c7f4], edx
cmp dword [esp + 0x9a8], 0
je 0x43613b
test byte [esp + 0x20f], 1
jne 0x43613b
mov eax, dword [0x486900]
xor eax, 0x62ddbf35
mov dword [0x486900], eax
mov eax, dword [esp + 0x9a0]
mov ecx, eax
call fcn.00411270
cmp eax, 0x4000
jbe 0x4360fb
mov eax, dword [0x484724]
or eax, 0x4f262465
mov dword [0x484724], eax
mov byte [esp + 0x20f], 1
mov cx, word [0x48fe8c]
mov ax, cx
mov edx, eax
inc edx
mov cx, dx
mov word [0x48fe8c], cx
add eax, 0x4ab4f125
mov cx, word [0x49098e]
mov dx, cx
xor edx, eax
mov cx, dx
mov word [0x49098e], cx
mov eax, dword [esp + 0x9a0]
mov edx, esp
mov dword [edx], eax
lea ecx, [esp + 0x140]
call fcn.0041c2b0
sub esp, 4
mov si, word [0x491798]
mov cx, si
or ecx, 0x9248
mov si, cx
mov word [0x491798], si
cmp dword [esp + 0x218], 0
mov dword [esp + 0x40], eax
jl 0x435fa0
mov ax, word [0x492c50]
mov cx, ax
add ecx, 0xcaa75a10
mov ax, cx
mov word [0x492c50], ax
mov ecx, dword [esp + 0x218]
mov edx, esp
mov dword [edx], 0
lea edx, [esp + 0x140]
mov dword [esp + 0x3c], ecx
mov ecx, edx
mov dword [esp + 0x38], edx
call fcn.004508c0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x3c]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov ecx, dword [esp + 0x38]
call fcn.00431a50
sub esp, 8
mov ecx, dword [0x486cf8]
imul ecx, ecx, 0xe2a6cd16
mov dword [0x486cf8], ecx
mov dword [esp + 0x34], eax
mov eax, dword [0x48be24]
inc eax
mov dword [0x48be24], eax
cmp eax, 0xe8978a9e
jg 0x435ff6
mov eax, 0x693aa116
mov ecx, dword [0x485e94]
mov edx, dword [0x484608]
shl edx, 7
add ecx, edx
cmp eax, ecx
jge 0x435ff1
mov ax, word [0x491644]
movsx ecx, ax
xor ecx, 0x93dd6737
mov edx, dword [0x489108]
add edx, ecx
mov dword [0x489108], edx
jmp 0x435ff6
lea eax, [esp + 0x140]
lea ecx, [esp + 0x868]
mov edx, dword [esp + 0x9a8]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.0042ec70
cmp eax, 0
jne 0x4360a7
mov eax, 0xff1c627e
mov ecx, dword [0x487c10]
xor ecx, 0x15b0597c
mov dword [0x487c10], ecx
mov dword [esp + 0x218], 0xffffffff
mov ecx, dword [0x4892a0]
imul ecx, ecx, 0xf3d2222a
imul ecx, ecx, 0xaf04cb28
cmp eax, ecx
jge 0x43606f
mov eax, dword [0x4872b0]
add eax, 0x49082010
mov dword [0x4872b0], eax
mov ecx, dword [esp + 0x9a0]
call fcn.00450870
mov ecx, dword [0x48c838]
shl ecx, 5
mov eax, dword [0x4827d4]
xor ecx, eax
xor ecx, 0xf3d8a061
mov dword [0x4827d4], ecx
mov dword [esp + 0x13c], 0xd
jmp 0x4360bc
mov dword [0x485dfc], 0x46102a40
mov dword [esp + 0x13c], 0
lea ecx, [esp + 0x140]
call fcn.004508f0
mov ecx, dword [esp + 0x13c]
test ecx, ecx
mov dword [esp + 0x30], ecx
je 0x4360f6
jmp 0x4360e0
mov eax, dword [esp + 0x30]
sub eax, 0xd
mov dword [esp + 0x2c], eax
je 0x436225
jmp 0x43662b
jmp 0x4360fb
mov ax, word [0x4928b4]
mov cx, ax
inc ecx
mov ax, cx
mov word [0x4928b4], ax
movsx ecx, ax
cmp ecx, 0x40008000
jg 0x436136
mov eax, dword [0x4833ac]
imul eax, eax, 0xc57d8d8e
mov ecx, dword [0x48cb5c]
or ecx, eax
mov dword [0x48cb5c], ecx
jmp 0x43613b
mov ax, word [0x48fa8c]
movsx ecx, ax
shr ecx, 7
mov ax, word [0x490994]
mov dx, ax
or edx, ecx
mov ax, dx
mov word [0x490994], ax
cmp dword [esp + 0x9a4], 0x3aa6
jne 0x436204
mov eax, 0x8d4717bf
mov ecx, dword [0x487ee4]
sar ecx, 9
mov edx, dword [0x4819c0]
add ecx, edx
cmp eax, ecx
jne 0x4361b0
mov eax, dword [0x48c208]
mov ecx, eax
dec ecx
mov dword [0x48c208], ecx
add eax, 0x712e3d0e
mov ecx, dword [0x484bf0]
or ecx, eax
mov dword [0x484bf0], ecx
jmp 0x4361bf
mov eax, dword [0x484d70]
and eax, 0x76432f
mov dword [0x484d70], eax
mov eax, dword [esp + 0x9a0]
mov ecx, eax
call fcn.00411270
cmp eax, 0x500000
jbe 0x4361f5
mov ax, word [0x48e926]
mov cx, ax
imul ecx, ecx, 0xc6335250
mov ax, cx
mov word [0x48e926], ax
jmp 0x436225
mov eax, dword [0x48853c]
or eax, 0xefbcba33
mov dword [0x48853c], eax
mov eax, dword [0x48adcc]
and eax, 0x608500
mov ecx, dword [0x482578]
or eax, ecx
or eax, 0x95151a21
mov dword [0x482578], eax
jmp 0x435713
mov eax, 0x12b40aee
mov ecx, dword [0x488d14]
dec ecx
mov dword [0x488d14], ecx
cmp eax, ecx
jge 0x43625c
mov ax, word [0x493036]
mov cx, ax
xor ecx, 0xf36c
mov ax, cx
mov word [0x493036], ax
jmp 0x43626b
mov eax, dword [0x487714]
xor eax, 0x4c575bca
mov dword [0x487714], eax
cmp dword [esp + 0x218], 0
jl 0x4362dd
mov eax, dword [0x482544]
add eax, 0xcb773f38
mov dword [0x482544], eax
mov eax, dword [esp + 0x9a0]
mov ecx, dword [esp + 0x218]
mov edx, esp
mov dword [edx], 0
mov dword [esp + 0x28], ecx
mov ecx, eax
mov dword [esp + 0x24], eax
call fcn.004508c0
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x28]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov ecx, dword [esp + 0x24]
call fcn.00431a50
sub esp, 8
mov ecx, dword [0x484424]
or ecx, 0x2722cbc
mov dword [0x484424], ecx
mov dword [esp + 0x20], eax
mov eax, dword [0x48c4a8]
or eax, 0x875165e0
mov dword [0x48c4a8], eax
cmp dword [esp + 0x9a8], 0
je 0x436398
test byte [esp + 0x20f], 1
jne 0x436398
lea eax, [esp + 0x868]
mov ecx, dword [0x483f74]
xor ecx, 0xd79599d8
mov dword [0x483f74], ecx
mov ecx, dword [esp + 0x9a8]
mov edx, dword [esp + 0x9a0]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0042ec70
cmp eax, 0
jne 0x436377
mov dword [0x4878c0], 0xab8c39e0
mov ecx, dword [esp + 0x9a0]
call fcn.00450870
mov ecx, dword [0x48a884]
inc ecx
mov dword [0x48a884], ecx
mov eax, dword [0x485820]
or eax, ecx
mov dword [0x485820], eax
mov eax, dword [0x488e08]
mov ecx, eax
inc ecx
mov dword [0x488e08], ecx
xor eax, 0x75ba30a5
mov ecx, dword [0x484fcc]
or ecx, eax
mov dword [0x484fcc], ecx
mov eax, 0x21c3f82e
mov ecx, dword [0x48d988]
mov edx, ecx
dec edx
mov dword [0x48d988], edx
sub ecx, 0xed67e385
xor ecx, 0xc9262f71
cmp eax, ecx
jg 0x4363cf
mov eax, dword [0x48c750]
and eax, 0x671abc04
mov dword [0x48c750], eax
jmp 0x4363d4
mov eax, 0x2316c2ea
mov ecx, dword [0x481538]
mov edx, dword [esp + 0x664]
mov esi, esp
mov dword [esi], edx
mov dword [esi + 4], 2
mov dword [esp + 0x1c], eax
call ecx
sub esp, 8
mov ecx, dword [0x483edc]
mov edx, dword [0x482944]
shl edx, 5
and ecx, edx
mov edx, dword [esp + 0x1c]
cmp edx, ecx
mov dword [esp + 0x18], eax
jg 0x436425
mov dword [0x4857fc], 0xfb990dd6
mov eax, dword [0x481504]
mov ecx, dword [esp + 0x664]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov ecx, dword [0x4856dc]
mov edx, dword [0x488228]
add edx, ecx
mov dword [0x488228], edx
mov dword [esp + 0x14], eax
mov eax, esp
lea ecx, [esp + 0x868]
mov dword [eax], ecx
mov dword [eax + 4], 0x80
call fcn.0041bac0
mov dx, word [0x48de2c]
movsx eax, dx
shl eax, 0xa
add eax, 0x2f58efb9
xor eax, 0x64438298
mov ecx, dword [0x488e50]
mov esi, ecx
dec esi
mov dword [0x488e50], esi
cmp eax, ecx
jge 0x4364cc
mov eax, dword [0x489dc4]
sar eax, 2
add eax, 0x737e1d99
cmp eax, 0x2811888
jle 0x4364c7
mov ax, word [0x48f600]
mov cx, ax
imul ecx, ecx, 0x33dfef3f
mov ax, cx
mov word [0x48f600], ax
jmp 0x4364db
mov eax, dword [0x4894c8]
or eax, 0x55fbf3bb
mov dword [0x4894c8], eax
mov eax, esp
lea ecx, [esp + 0x8e8]
mov dword [eax], ecx
mov dword [eax + 4], 0x80
call fcn.0041bac0
mov eax, dword [0x486bc4]
add eax, 0x8a9071a1
and eax, 0xdd85d68f
cmp eax, 0x9705d760
jge 0x436529
mov eax, dword [0x481a44]
or eax, 0x71b791d0
mov ecx, dword [0x48621c]
xor ecx, eax
mov dword [0x48621c], ecx
jmp 0x436541
mov ax, word [0x48fe96]
mov cx, ax
add ecx, 0x23107d70
mov ax, cx
mov word [0x48fe96], ax
mov eax, esp
lea ecx, [esp + 0x668]
mov dword [eax], ecx
mov dword [eax + 4], 0x200
call fcn.0041bac0
mov dx, word [0x490cd0]
mov ax, dx
not eax
imul eax, eax, 0xeec12017
mov dx, word [0x492f34]
mov cx, dx
add ecx, eax
mov dx, cx
mov word [0x492f34], dx
mov eax, esp
lea ecx, [esp + 0x23c]
mov dword [eax], ecx
mov dword [eax + 4], 0x400
call fcn.0041bac0
mov eax, dword [0x48c474]
mov dx, word [0x491e92]
mov cx, dx
dec ecx
mov si, cx
mov word [0x491e92], si
movsx ecx, dx
imul ecx, ecx, 0xca7129e8
cmp eax, ecx
jne 0x4365ed
mov eax, dword [0x48c640]
mov ecx, eax
inc ecx
mov dword [0x48c640], ecx
mov ecx, dword [0x48dd28]
not ecx
sub eax, ecx
mov ecx, dword [0x4825cc]
or ecx, eax
mov dword [0x4825cc], ecx
jmp 0x436617
mov eax, dword [0x48773c]
mov ecx, eax
inc ecx
mov dword [0x48773c], ecx
add eax, 0x2fea9358
mov dx, word [0x490e96]
mov cx, dx
imul ecx, eax
mov dx, cx
mov word [0x490e96], dx
lea ecx, [esp + 0x63c]
call fcn.004508f0
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
int3