Function at 0x4add40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x288]
cmp eax, dword [ecx + 8]
jbe 0x4b1055
sub esp, 0x308
mov edx, dword [esp + 0x30c]
mov ebx, dword [edx + 0x18]
mov ebp, dword [edx + 0x1c]
cmp dword [edx + 0x33c], 1
jne 0x4ade50
movzx esi, byte [esp + 0x31c]
xchg esi, eax
test al, al
xchg esi, eax
jne 0x4ade58
mov edi, dword [0x5b9850]
mov ecx, dword [0x5b9854]
mov eax, dword [esp + 0x318]
cmp eax, ecx
jae 0x4b104f
shl eax, 4
mov ecx, dword [edi + eax]
mov esi, dword [edi + eax + 4]
mov edx, dword [edi + eax + 8]
mov edi, dword [edi + eax + 0xc]
sub ebx, edx
lea eax, [ecx + ebx - 1]
test ecx, ecx
je 0x4b104a
cmp ecx, 0xffffffff
je 0x4addd4
cdq
idiv ecx
jmp 0x4addd6
neg eax
sub ebp, edi
lea ecx, [esi + ebp - 1]
test esi, esi
je 0x4b1045
mov dword [esp + 0xe0], eax
mov eax, ecx
cmp esi, 0xffffffff
je 0x4addf7
cdq
idiv esi
jmp 0x4addf9
neg eax
mov ecx, dword [esp + 0xe0]
test ecx, ecx
je 0x4ade08
test eax, eax
jne 0x4ade3b
mov dword [esp + 0x320], 0
mov dword [esp + 0x324], 0
mov dword [esp + 0x328], 0
mov dword [esp + 0x32c], 0
add esp, 0x308
ret
mov edx, dword [esp + 0x30c]
movzx esi, byte [esp + 0x31c]
mov ebx, ecx
mov ebp, eax
jmp 0x4ade58
movzx esi, byte [esp + 0x31c]
mov dword [esp + 0xe0], ebx
mov dword [esp + 0x118], ebp
mov ecx, dword [edx + 0x30]
cmp ecx, 0xa
jg 0x4ae27b
cmp ecx, 5
jg 0x4ae082
lea edi, [ecx - 1]
cmp edi, 3
ja 0x4adfb7
mov eax, dword [edx + 0x20]
mov dword [esp + 0x120], eax
movzx ecx, byte [edx + 0x340]
test cl, cl
je 0x4adef6
test ebx, ebx
jge 0x4adea6
mov ecx, ebx
xor edi, edi
jmp 0x4adeac
mov ecx, ebx
xor ebx, ebx
mov edi, ecx
test ebp, ebp
jge 0x4adebf
mov dword [esp + 0x2b8], eax
xor eax, eax
mov dword [esp + 0x68], eax
jmp 0x4adece
xor ebp, ebp
mov ebp, dword [esp + 0x118]
mov dword [esp + 0x68], ebp
xor ebp, ebp
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], edi
mov eax, dword [esp + 0x68]
mov dword [esp + 0xc], eax
call fcn.00475df0
mov eax, dword [esp + 0x10]
lea ecx, [0x521ce4]
mov edx, eax
xor ebx, ebx
jmp 0x4adf4e
test ebx, ebx
jge 0x4adf00
mov ecx, ebx
xor edi, edi
jmp 0x4adf06
mov ecx, ebx
xor ebx, ebx
mov edi, ecx
test ebp, ebp
jge 0x4adf19
mov dword [esp + 0x2b0], eax
xor eax, eax
mov dword [esp + 0x64], eax
jmp 0x4adf28
xor ebp, ebp
mov ebp, dword [esp + 0x118]
mov dword [esp + 0x64], ebp
xor ebp, ebp
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], edi
mov eax, dword [esp + 0x64]
mov dword [esp + 0xc], eax
call fcn.00476490
mov eax, dword [esp + 0x10]
lea ecx, [0x521cac]
xor edx, edx
mov ebx, eax
mov ebp, dword [esp + 0x118]
movzx esi, byte [esp + 0x31c]
xor edi, edi
xor ebp, ebp
mov dword [esp + 0x2d4], ebp
xor esi, esi
mov dword [esp + 0x2e4], esi
xor ebp, ebp
mov dword [esp + 0x2c0], ebp
xor ebp, ebp
mov dword [esp + 0x2d8], ebp
mov dword [esp + 0x100], ecx
mov dword [esp + 0x2e0], eax
mov eax, ebx
mov ecx, edx
mov ebp, dword [esp + 0x118]
movzx esi, byte [esp + 0x31c]
mov edx, dword [esp + 0x30c]
mov ebx, dword [esp + 0xe0]
jmp 0x4ae73a
cmp ecx, 5
jne 0x4ae6f3
test ebx, ebx
jge 0x4adfca
mov eax, ebx
xor ecx, ecx
jmp 0x4adfd0
mov eax, ebx
xor ebx, ebx
mov ecx, eax
test ebp, ebp
jge 0x4adfd8
xor edi, edi
jmp 0x4adfe1
xor ebp, ebp
mov edi, dword [esp + 0x118]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
call fcn.00475df0
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x30c]
mov ebx, dword [esp + 0xe0]
mov ebp, dword [esp + 0x118]
movzx esi, byte [esp + 0x31c]
mov ecx, eax
xor edi, edi
xor eax, eax
mov dword [esp + 0x2d4], eax
xor edx, edx
mov dword [esp + 0x2e4], edx
xor ebx, ebx
mov dword [esp + 0x2c0], ebx
xor ebp, ebp
mov dword [esp + 0x2d8], ebp
lea esi, [0x521ce4]
mov dword [esp + 0x100], esi
mov dword [esp + 0x2e0], ecx
mov eax, 0x10
mov dword [esp + 0x120], eax
xor eax, eax
mov edx, dword [esp + 0x30c]
mov ebx, dword [esp + 0xe0]
mov ebp, dword [esp + 0x118]
movzx esi, byte [esp + 0x31c]
jmp 0x4ae73a
cmp ecx, 6
jne 0x4ae193
movzx eax, byte [edx + 0x340]
test al, al
je 0x4ae0db
test ebx, ebx
jge 0x4ae0a0
mov eax, ebx
xor ecx, ecx
jmp 0x4ae0a6
mov eax, ebx
xor ebx, ebx
mov ecx, eax
test ebp, ebp
jge 0x4ae0ae
xor edi, edi
jmp 0x4ae0b7
xor ebp, ebp
mov edi, dword [esp + 0x118]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
call fcn.00475df0
mov eax, dword [esp + 0x10]
lea ecx, [0x521ce4]
mov edx, eax
xor ebx, ebx
jmp 0x4ae11e
test ebx, ebx
jge 0x4ae0e5
mov eax, ebx
xor ecx, ecx
jmp 0x4ae0eb
mov eax, ebx
xor ebx, ebx
mov ecx, eax
test ebp, ebp
jge 0x4ae0f3
xor edi, edi
jmp 0x4ae0fc
xor ebp, ebp
mov edi, dword [esp + 0x118]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
call fcn.00475560
mov eax, dword [esp + 0x10]
lea ecx, [0x521d38]
xor edx, edx
mov ebx, eax
mov ebp, dword [esp + 0x118]
movzx esi, byte [esp + 0x31c]
mov edi, ebx
xor ebx, ebx
mov dword [esp + 0x2d4], ebx
xor ebp, ebp
mov dword [esp + 0x2e4], ebp
xor esi, esi
mov dword [esp + 0x2c0], esi
xor ebx, ebx
mov dword [esp + 0x2d8], ebx
mov dword [esp + 0x100], ecx
mov dword [esp + 0x2e0], eax
mov ebx, 0x18
mov dword [esp + 0x120], ebx
mov ebx, dword [esp + 0xe0]
xor eax, eax
mov ecx, edx
mov ebp, dword [esp + 0x118]
movzx esi, byte [esp + 0x31c]
mov edx, dword [esp + 0x30c]
jmp 0x4ae73a
mov eax, dword [edx + 0x20]
test ebx, ebx
jge 0x4ae1a0
mov ecx, ebx
xor edi, edi
jmp 0x4ae1a6
mov ecx, ebx
xor ebx, ebx
mov edi, ecx
mov dword [esp + 0x120], eax
test ebp, ebp
jge 0x4ae1c0
mov dword [esp + 0x2a8], eax
xor eax, eax
mov dword [esp + 0x60], eax
jmp 0x4ae1cf
xor ebp, ebp
mov ebp, dword [esp + 0x118]
mov dword [esp + 0x60], ebp
xor ebp, ebp
mov eax, dword [edx + 0x24]
mov ecx, dword [edx + 0x28]
mov esi, dword [edx + 0x2c]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], edi
mov ebx, dword [esp + 0x60]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], esi
call fcn.00476bd0
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x30c]
mov ebx, dword [esp + 0xe0]
mov ebp, dword [esp + 0x118]
movzx esi, byte [esp + 0x31c]
xor ecx, ecx
xor edi, edi
mov dword [esp + 0x2d4], eax
xor edx, edx
mov dword [esp + 0x2e4], edx
xor ebx, ebx
mov dword [esp + 0x2c0], ebx
xor ebp, ebp
mov dword [esp + 0x2d8], ebp
lea esi, [0x521d1c]
mov dword [esp + 0x100], esi
mov dword [esp + 0x2e0], eax
xor eax, eax
mov edx, dword [esp + 0x30c]
mov ebx, dword [esp + 0xe0]
mov ebp, dword [esp + 0x118]
movzx esi, byte [esp + 0x31c]
jmp 0x4ae73a
cmp ecx, 0xc
jg 0x4ae453
cmp ecx, 0xb
jne 0x4ae34f
test ebx, ebx
jge 0x4ae297
mov eax, ebx
xor ecx, ecx
jmp 0x4ae29d
mov eax, ebx
xor ebx, ebx
mov ecx, eax
test ebp, ebp
jge 0x4ae2a5
xor edi, edi
jmp 0x4ae2ae
xor ebp, ebp
mov edi, dword [esp + 0x118]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
call fcn.00475df0
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x30c]
mov ebx, dword [esp + 0xe0]
mov ebp, dword [esp + 0x118]
movzx esi, byte [esp + 0x31c]
mov ecx, eax
xor edi, edi
xor eax, eax
mov dword [esp + 0x2d4], eax
xor edx, edx
mov dword [esp + 0x2e4], edx
xor ebx, ebx
mov dword [esp + 0x2c0], ebx
xor ebp, ebp
mov dword [esp + 0x2d8], ebp
lea esi, [0x521ce4]
mov dword [esp + 0x100], esi
mov dword [esp + 0x2e0], ecx
mov eax, 0x20
mov dword [esp + 0x120], eax
xor eax, eax
mov edx, dword [esp + 0x30c]
mov ebx, dword [esp + 0xe0]
mov ebp, dword [esp + 0x118]
movzx esi, byte [esp + 0x31c]
jmp 0x4ae73a
movzx eax, byte [edx + 0x340]
test al, al
je 0x4ae39f
test ebx, ebx
jge 0x4ae364
mov eax, ebx
xor ecx, ecx
jmp 0x4ae36a
mov eax, ebx
xor ebx, ebx
mov ecx, eax
test ebp, ebp
jge 0x4ae372
xor edi, edi
jmp 0x4ae37b
xor ebp, ebp
mov edi, dword [esp + 0x118]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
call fcn.00476280
mov eax, dword [esp + 0x10]
lea ecx, [0x521d00]
mov edx, eax
xor ebx, ebx
jmp 0x4ae3e2
test ebx, ebx
jge 0x4ae3a9
mov eax, ebx
xor ecx, ecx
jmp 0x4ae3af
mov eax, ebx
xor ebx, ebx
mov ecx, eax
test ebp, ebp
jge 0x4ae3b7
xor edi, edi
jmp 0x4ae3c0
xor ebp, ebp
mov edi, dword [esp + 0x118]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
call fcn.004767b0
mov eax, dword [esp + 0x10]
lea ecx, [0x521cc8]
xor edx, edx
mov ebx, eax
mov ebp, dword [esp + 0x118]
movzx esi, byte [esp + 0x31c]
xor edi, edi
xor ebp, ebp
mov dword [esp + 0x2d4], ebp
mov dword [esp + 0x2e4], ebx
xor esi, esi
mov dword [esp + 0x2c0], esi
mov dword [esp + 0x2d8], edx
mov dword [esp + 0x100], ecx
mov dword [esp + 0x2e0], eax
mov ebp, 0x10
mov dword [esp + 0x120], ebp
mov edx, dword [esp + 0x30c]
mov ebx, dword [esp + 0xe0]
xor eax, eax
xor ecx, ecx
mov ebp, dword [esp + 0x118]
movzx esi, byte [esp + 0x31c]
jmp 0x4ae73a
cmp ecx, 0xd
jne 0x4ae51e
test ebx, ebx
jge 0x4ae466
mov eax, ebx
xor ecx, ecx
jmp 0x4ae46c
mov eax, ebx
xor ebx, ebx
mov ecx, eax
test ebp, ebp
jge 0x4ae474
xor edi, edi
jmp 0x4ae47d
xor ebp, ebp
mov edi, dword [esp + 0x118]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
call fcn.00476280
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x30c]
mov ebx, dword [esp + 0xe0]
mov ebp, dword [esp + 0x118]
movzx esi, byte [esp + 0x31c]
xor ecx, ecx
xor edi, edi
xor edx, edx
mov dword [esp + 0x2d4], edx
xor ebx, ebx
mov dword [esp + 0x2e4], ebx
xor ebp, ebp
mov dword [esp + 0x2c0], ebp
mov dword [esp + 0x2d8], eax
lea esi, [0x521d00]
mov dword [esp + 0x100], esi
mov dword [esp + 0x2e0], eax
mov ecx, 0x20
mov dword [esp + 0x120], ecx
xor eax, eax
mov edx, dword [esp + 0x30c]
mov ebx, dword [esp + 0xe0]
mov ebp, dword [esp + 0x118]
movzx esi, byte [esp + 0x31c]
xor ecx, ecx
jmp 0x4ae73a
cmp ecx, 0xe
jne 0x4ae62b
movzx eax, byte [edx + 0x340]
test al, al
je 0x4ae577
test ebx, ebx
jge 0x4ae53c
mov eax, ebx
xor ecx, ecx
jmp 0x4ae542
mov eax, ebx
xor ebx, ebx
mov ecx, eax
test ebp, ebp
jge 0x4ae54a
xor edi, edi
jmp 0x4ae553
xor ebp, ebp
mov edi, dword [esp + 0x118]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
call fcn.00476280
mov eax, dword [esp + 0x10]
lea ecx, [0x521d00]
mov edx, eax
xor ebx, ebx
jmp 0x4ae5ba
test ebx, ebx
jge 0x4ae581
mov eax, ebx
xor ecx, ecx
jmp 0x4ae587
mov eax, ebx
xor ebx, ebx
mov ecx, eax
test ebp, ebp
jge 0x4ae58f
xor edi, edi
jmp 0x4ae598
xor ebp, ebp
mov edi, dword [esp + 0x118]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
call fcn.004759f0
mov eax, dword [esp + 0x10]
lea ecx, [0x521d54]
xor edx, edx
mov ebx, eax
mov ebp, dword [esp + 0x118]
movzx esi, byte [esp + 0x31c]
xor edi, edi
xor ebp, ebp
mov dword [esp + 0x2d4], ebp
xor esi, esi
mov dword [esp + 0x2e4], esi
mov dword [esp + 0x2c0], ebx
mov dword [esp + 0x2d8], edx
mov dword [esp + 0x100], ecx
mov dword [esp + 0x2e0], eax
mov ebp, 0x30
mov dword [esp + 0x120], ebp
mov edx, dword [esp + 0x30c]
mov ebx, dword [esp + 0xe0]
xor eax, eax
xor ecx, ecx
mov ebp, dword [esp + 0x118]
movzx esi, byte [esp + 0x31c]
jmp 0x4ae73a
cmp ecx, 0xf
jne 0x4ae6f3
test ebx, ebx
jge 0x4ae63e
mov eax, ebx
xor ecx, ecx
jmp 0x4ae644
mov eax, ebx
xor ebx, ebx
mov ecx, eax
test ebp, ebp
jge 0x4ae64c
xor edi, edi
jmp 0x4ae655
xor ebp, ebp
mov edi, dword [esp + 0x118]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
call fcn.00476280
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x30c]
mov ebx, dword [esp + 0xe0]
mov ebp, dword [esp + 0x118]
movzx esi, byte [esp + 0x31c]
xor ecx, ecx
xor edi, edi
xor edx, edx
mov dword [esp + 0x2d4], edx
xor ebx, ebx
mov dword [esp + 0x2e4], ebx
xor ebp, ebp
mov dword [esp + 0x2c0], ebp
mov dword [esp + 0x2d8], eax
lea esi, [0x521d00]
mov dword [esp + 0x100], esi
mov dword [esp + 0x2e0], eax
mov ecx, 0x40
mov dword [esp + 0x120], ecx
xor eax, eax
mov edx, dword [esp + 0x30c]
mov ebx, dword [esp + 0xe0]
mov ebp, dword [esp + 0x118]
movzx esi, byte [esp + 0x31c]
xor ecx, ecx
jmp 0x4ae73a
xor eax, eax
xor ecx, ecx
xor edi, edi
xor eax, eax
mov dword [esp + 0x2d4], eax
xor eax, eax
mov dword [esp + 0x2e4], eax
xor eax, eax
mov dword [esp + 0x2c0], eax
xor eax, eax
mov dword [esp + 0x2d8], eax
xor eax, eax
mov dword [esp + 0x100], eax
xor eax, eax
mov dword [esp + 0x2e0], eax
xor eax, eax
mov dword [esp + 0x120], eax
xor eax, eax
xchg esi, eax
test al, al
xchg esi, eax
jne 0x4ae892
mov dword [esp + 0x2c4], edi
mov esi, eax
mov eax, dword [esp + 0x120]
mul ebx
mov edi, dword [esp + 0x120]
sar edi, 0x1f
imul edi, ebx
add edx, edi
sar ebx, 0x1f
mov edi, dword [esp + 0x120]
imul ebx, edi
add edx, ebx
mov ebx, eax
add eax, 7
mov eax, edx
adc edx, 0
sar edx, 0x1f
shr edx, 0x1d
add edx, ebx
adc eax, 0
add edx, 7
adc eax, 0
shr edx, 3
mov ebx, eax
shl eax, 0x1d
or edx, eax
sar ebx, 3
add edx, 1
adc ebx, 0
mov eax, esi
lea esi, [edi + 7]
sar esi, 0x1f
shr esi, 0x1d
lea esi, [edi + esi + 7]
mov edi, edx
sar edx, 0x1f
cmp edx, ebx
jne 0x4ae85b
mov dword [esp + 0x134], edi
mov dword [esp + 0xe4], ebx
mov dword [esp + 0x2dc], ecx
mov dword [esp + 0x304], eax
mov dword [esp + 0x130], esi
lea eax, [0x4de9a0]
mov dword [esp], eax
mov dword [esp + 8], ebx
mov dword [esp + 4], edi
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], edi
call fcn.00447250
mov eax, dword [esp + 0x14]
mov dword [esp + 0x300], eax
lea ecx, [0x4de9a0]
mov dword [esp], ecx
mov ecx, dword [esp + 0xe4]
mov dword [esp + 8], ecx
mov edx, dword [esp + 0x134]
mov dword [esp + 4], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], edx
call fcn.00447250
mov eax, dword [esp + 0x130]
sar eax, 3
mov dword [esp + 0x11c], eax
mov ecx, dword [esp + 0x14]
xor edx, edx
xor ebx, ebx
mov ebp, dword [esp + 0x300]
jmp 0x4ae8e3
mov dword [esp + 0x320], 0
mov dword [esp + 0x324], 0
lea eax, [0x521b88]
mov dword [esp + 0x328], eax
lea eax, [0x52160c]
mov dword [esp + 0x32c], eax
add esp, 0x308
ret
mov eax, dword [esp + 0x100]
mov dword [esp + 0x320], eax
mov eax, dword [esp + 0x2e0]
mov dword [esp + 0x324], eax
mov dword [esp + 0x328], 0
mov dword [esp + 0x32c], 0
add esp, 0x308
ret
mov esi, dword [esp + 0xf4]
inc esi
mov eax, dword [esp + 0x11c]
mov edx, esi
mov ebp, dword [esp + 0x2f0]
mov esi, dword [esp + 0x118]
cmp edx, esi
jge 0x4af142
mov dword [esp + 0x2f0], ecx
mov dword [esp + 0x2fc], ebp
mov dword [esp + 0xf4], edx
mov dword [esp + 0xe8], ebx
nop
mov eax, dword [esp + 0x310]
mov dword [esp], eax
mov ecx, dword [esp + 0x314]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov edx, dword [esp + 0x134]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], edx
call fcn.004653e0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x20]
test eax, eax
jne 0x4af044
mov ebx, dword [esp + 0x134]
cmp ebx, 1
jb 0x4b1039
lea ecx, [ebx - 1]
mov ebp, ecx
neg ecx
sar ecx, 0x1f
and ecx, 1
mov esi, dword [esp + 0x2fc]
lea edi, [esi + ecx]
cmp ebx, 1
jb 0x4b102d
mov dword [esp + 0x130], ebp
mov dword [esp + 0x2f4], edi
mov eax, ebx
mov ebx, dword [esp + 0x2f0]
mov edx, ebx
add ebx, ecx
mov ecx, esi
movzx esi, byte [esi]
xchg esi, eax
cmp al, 1
xchg esi, eax
ja 0x4ae9cb
xchg esi, eax
test al, al
xchg esi, eax
je 0x4aea5f
mov ebx, dword [esp + 0x11c]
mov esi, ebx
jmp 0x4b1000
mov dword [esp + 0x2d0], ebx
xchg esi, eax
cmp al, 2
xchg esi, eax
jne 0x4ae9e0
xor esi, esi
jmp 0x4b0fc1
xchg esi, eax
cmp al, 3
xchg esi, eax
jne 0x4aea0a
mov esi, dword [esp + 0x11c]
mov dword [esp + 0x138], eax
xor eax, eax
mov dword [esp + 0x110], eax
mov eax, dword [esp + 0x138]
jmp 0x4b0edc
xchg esi, eax
cmp al, 4
xchg esi, eax
jne 0x4af00d
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], ebp
mov eax, dword [esp + 0x11c]
mov dword [esp + 0x18], eax
call fcn.004ac770
mov eax, dword [esp + 0x134]
mov ecx, dword [esp + 0x2fc]
mov edx, dword [esp + 0x2f0]
mov ebp, dword [esp + 0x130]
mov edi, dword [esp + 0x2f4]
mov ebx, dword [esp + 0x30c]
mov esi, dword [ebx + 0x30]
cmp esi, 7
jg 0x4aed8d
cmp esi, 3
jg 0x4aeb99
cmp esi, 1
jne 0x4aead9
movzx esi, byte [ebx + 0x340]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4aeab6
movzx esi, byte [ebx + 0x342]
xchg esi, eax
mov byte [esp + 0x2a], al
xchg esi, eax
mov dword [esp + 0x158], eax
xor eax, eax
mov dword [esp + 0xdc], eax
mov eax, dword [esp + 0x158]
jmp 0x4b0d5c
mov esi, dword [esp + 0xe0]
mov dword [esp + 0x168], eax
xor eax, eax
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0x168]
jmp 0x4b0bc7
cmp esi, 2
jne 0x4aeb37
movzx esi, byte [ebx + 0x340]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4aeb14
movzx esi, byte [ebx + 0x342]
xchg esi, eax
mov byte [esp + 0x29], al
xchg esi, eax
mov dword [esp + 0x188], eax
xor eax, eax
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0x188]
jmp 0x4b0a50
mov esi, dword [esp + 0xe0]
mov dword [esp + 0x198], eax
xor eax, eax
mov dword [esp + 0xd0], eax
mov eax, dword [esp + 0x198]
jmp 0x4b08bd
cmp esi, 3
jne 0x4aeffa
movzx esi, byte [ebx + 0x340]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4aeb76
movzx esi, byte [ebx + 0x342]
xchg esi, eax
mov byte [esp + 0x28], al
xchg esi, eax
mov dword [esp + 0x1b8], eax
xor eax, eax
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0x1b8]
jmp 0x4b073b
mov esi, dword [esp + 0xe0]
mov dword [esp + 0x1c8], eax
xor eax, eax
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0x1c8]
jmp 0x4b05b4
cmp esi, 5
jg 0x4aec7b
cmp esi, 4
jne 0x4aec58
movzx esi, byte [ebx + 0x340]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4aebe1
movzx esi, byte [ebx + 0x342]
xchg esi, eax
mov byte [esp + 0x27], al
xchg esi, eax
mov dword [esp + 0x1e0], eax
xor eax, eax
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x1e0]
jmp 0x4b0512
mov esi, dword [esp + 0x304]
mov ebx, dword [esi + 4]
mov edx, dword [esi]
mov esi, dword [esi + 8]
mov edi, dword [esp + 0xe8]
cmp edi, ebx
ja 0x4b0475
sub ebx, edi
sub esi, edi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, edi
add edx, esi
cmp ebx, ebp
jg 0x4aec16
mov ebp, ebx
mov ebx, dword [esp + 0x2f4]
cmp edx, ebx
je 0x4aec46
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
call fcn.0045efc0
mov eax, dword [esp + 0x134]
mov ecx, dword [esp + 0x2fc]
mov edi, dword [esp + 0xe8]
mov edx, dword [esp + 0x304]
mov ebp, dword [edx + 0xc]
lea ebx, [edi + ebp]
jmp 0x4b0469
mov esi, dword [esp + 0xe0]
mov dword [esp + 0x1e8], eax
xor eax, eax
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0x1e8]
jmp 0x4b041b
cmp esi, 6
jne 0x4aed6a
movzx esi, byte [ebx + 0x340]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4aed0f
mov esi, dword [esp + 0x2dc]
mov edx, dword [esi + 4]
mov dword [esp + 0xf0], edx
mov esi, dword [esi]
mov dword [esp + 0x2cc], esi
movzx esi, byte [ebx + 0x342]
xchg esi, eax
mov byte [esp + 0x2b], al
xchg esi, eax
movzx edx, byte [ebx + 0x344]
mov byte [esp + 0x2c], dl
movzx edx, byte [ebx + 0x346]
mov byte [esp + 0x2d], dl
mov dword [esp + 0x208], eax
xor eax, eax
mov dword [esp + 0xbc], eax
mov eax, dword [esp + 0xe8]
mov dword [esp + 0x108], eax
mov dword [esp + 0x200], ecx
xor ecx, ecx
mov dword [esp + 0xfc], ecx
mov eax, dword [esp + 0x208]
mov ecx, dword [esp + 0x200]
jmp 0x4b020b
mov esi, dword [esp + 0x2c4]
mov edx, dword [esi + 4]
mov dword [esp + 0xec], edx
mov esi, dword [esi]
mov dword [esp + 0x2c8], esi
mov dword [esp + 0x218], eax
xor eax, eax
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0xe8]
mov dword [esp + 0x104], eax
mov dword [esp + 0x210], ecx
xor ecx, ecx
mov dword [esp + 0xf8], ecx
mov eax, dword [esp + 0x218]
mov ecx, dword [esp + 0x210]
jmp 0x4b00a8
mov esi, dword [esp + 0xe0]
mov dword [esp + 0x228], eax
xor eax, eax
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0x228]
jmp 0x4afec4
cmp esi, 0xb
jg 0x4aee92
cmp esi, 9
jg 0x4aede6
cmp esi, 8
jne 0x4aedc3
mov esi, dword [esp + 0xe0]
mov dword [esp + 0x238], eax
xor eax, eax
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0x238]
jmp 0x4afd04
mov esi, dword [esp + 0xe0]
mov dword [esp + 0x248], eax
xor eax, eax
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x248]
jmp 0x4afb48
cmp esi, 0xa
jne 0x4aee1b
mov esi, dword [esp + 0x2d4]
cmp dword [esi + 0x24], 0x100
je 0x4afa18
mov dword [esp + 0x250], eax
xor eax, eax
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0x250]
jmp 0x4afab8
mov esi, dword [esp + 0x2dc]
mov ebx, dword [esi + 4]
mov edx, dword [esi]
mov esi, dword [esi + 8]
mov edi, dword [esp + 0xe8]
cmp edi, ebx
ja 0x4afa0f
sub ebx, edi
sub esi, edi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, edi
add edx, esi
cmp ebx, ebp
jg 0x4aee50
mov ebp, ebx
mov ebx, dword [esp + 0x2f4]
cmp edx, ebx
je 0x4aee80
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
call fcn.0045efc0
mov eax, dword [esp + 0x134]
mov ecx, dword [esp + 0x2fc]
mov edi, dword [esp + 0xe8]
mov edx, dword [esp + 0x2dc]
mov ebp, dword [edx + 0xc]
lea ebx, [edi + ebp]
jmp 0x4ae8cb
cmp esi, 0xd
jg 0x4aef2e
cmp esi, 0xc
jne 0x4aef0b
movzx esi, byte [ebx + 0x340]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4aeee8
movzx esi, byte [ebx + 0x341]
shl esi, 8
movzx ebx, byte [ebx + 0x342]
or ebx, esi
mov word [esp + 0x46], bx
mov esi, dword [esp + 0xe0]
mov dword [esp + 0x268], eax
xor eax, eax
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0x268]
jmp 0x4af98f
mov esi, dword [esp + 0xe0]
mov dword [esp + 0x270], eax
xor eax, eax
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x270]
jmp 0x4af8ae
mov esi, dword [esp + 0xe0]
mov dword [esp + 0x278], eax
xor eax, eax
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0x278]
jmp 0x4af787
cmp esi, 0xe
jne 0x4aefd2
movzx esi, byte [ebx + 0x340]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4aefaf
movzx esi, byte [ebx + 0x341]
shl esi, 8
movzx edx, byte [ebx + 0x342]
or edx, esi
mov word [esp + 0x48], dx
movzx esi, byte [ebx + 0x343]
shl esi, 8
movzx edx, byte [ebx + 0x344]
or edx, esi
mov word [esp + 0x4a], dx
movzx esi, byte [ebx + 0x345]
shl esi, 8
movzx ebx, byte [ebx + 0x346]
or ebx, esi
mov word [esp + 0x4c], bx
mov esi, dword [esp + 0xe0]
mov dword [esp + 0x290], eax
xor eax, eax
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0x290]
jmp 0x4af57c
mov esi, dword [esp + 0xe0]
mov dword [esp + 0x298], eax
xor eax, eax
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x298]
jmp 0x4af3f8
cmp esi, 0xf
jne 0x4aeffa
mov esi, dword [esp + 0xe0]
mov dword [esp + 0x2a0], eax
xor eax, eax
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x2a0]
jmp 0x4af224
mov edx, dword [esp + 0x2dc]
mov ebx, dword [esp + 0xe8]
jmp 0x4ae8cb
mov dword [esp + 0x320], 0
mov dword [esp + 0x324], 0
lea eax, [0x521b74]
mov dword [esp + 0x328], eax
lea eax, [0x5215cc]
mov dword [esp + 0x32c], eax
add esp, 0x308
ret
mov dword [esp + 0x2fc], ebx
mov dword [esp + 0x2ec], ebp
mov eax, dword [0x5be054]
cmp dword [0x5be050], ecx
je 0x4af064
xor eax, eax
jmp 0x4af0a3
mov dword [esp + 0x2e8], edx
mov dword [esp + 0x2f8], ecx
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00403590
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x2f8]
mov edx, dword [esp + 0x2e8]
mov ebx, dword [esp + 0x2fc]
mov ebp, dword [esp + 0x2ec]
test al, al
jne 0x4af0e0
mov eax, dword [0x5be07c]
cmp dword [0x5be078], ecx
je 0x4af0b9
xor eax, eax
jmp 0x4af0dc
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00403590
movzx eax, byte [esp + 0xc]
mov ebx, dword [esp + 0x2fc]
mov ebp, dword [esp + 0x2ec]
test al, al
je 0x4af117
mov dword [esp + 0x320], 0
mov dword [esp + 0x324], 0
lea eax, [0x521b74]
mov dword [esp + 0x328], eax
lea eax, [0x5215b4]
mov dword [esp + 0x32c], eax
add esp, 0x308
ret
mov dword [esp + 0x320], 0
mov dword [esp + 0x324], 0
mov dword [esp + 0x328], ebx
mov dword [esp + 0x32c], ebp
add esp, 0x308
ret
mov eax, dword [esp + 0x100]
mov dword [esp + 0x320], eax
mov eax, dword [esp + 0x2e0]
mov dword [esp + 0x324], eax
mov dword [esp + 0x328], 0
mov dword [esp + 0x32c], 0
add esp, 0x308
ret
lea eax, [edi + edx*8 + 7]
movzx eax, byte [eax]
mov ecx, dword [esp + 0x2d8]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov ebp, dword [esp + 0xf4]
mov dword [esp + 8], ebp
movzx esi, word [esp + 0x4e]
mov word [esp + 0xc], si
movzx esi, word [esp + 0x54]
mov word [esp + 0xe], si
movzx esi, word [esp + 0x5a]
mov word [esp + 0x10], si
shl ebx, 8
or eax, ebx
mov word [esp + 0x12], ax
call fcn.004760e0
mov eax, dword [esp + 0x90]
inc eax
mov ecx, dword [esp + 0xe0]
mov edx, dword [esp + 0x2d8]
mov ebx, dword [esp + 0xf4]
mov ebp, dword [esp + 0x130]
mov esi, dword [esp + 0x2f4]
mov ecx, dword [esp + 0x2fc]
mov edx, dword [esp + 0x2f0]
mov ebx, dword [esp + 0x30c]
mov esi, dword [esp + 0xe0]
mov edi, dword [esp + 0x2f4]
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x90]
cmp ebx, esi
jge 0x4af2f0
shl ebx, 3
cmp ebx, ebp
jae 0x4af342
mov dword [esp + 0x12c], ebx
mov edx, dword [esp + 0x90]
lea esi, [edi + edx*8]
movzx esi, byte [esi]
inc ebx
cmp ebx, ebp
jae 0x4af339
shl esi, 8
lea ebx, [edi + edx*8 + 1]
movzx ebx, byte [ebx]
or ebx, esi
mov word [esp + 0x4e], bx
mov esi, dword [esp + 0x12c]
lea ebx, [esi + 2]
cmp ebx, ebp
jae 0x4af330
lea ebx, [edi + edx*8 + 2]
movzx ebx, byte [ebx]
add esi, 3
cmp esi, ebp
jae 0x4af327
shl ebx, 8
lea esi, [edi + edx*8 + 3]
movzx esi, byte [esi]
or esi, ebx
mov word [esp + 0x54], si
mov ebx, dword [esp + 0x12c]
lea esi, [ebx + 4]
cmp esi, ebp
jae 0x4af31e
lea esi, [edi + edx*8 + 4]
movzx esi, byte [esi]
add ebx, 5
cmp ebx, ebp
jae 0x4af315
shl esi, 8
lea ebx, [edi + edx*8 + 5]
movzx ebx, byte [ebx]
or ebx, esi
mov word [esp + 0x5a], bx
mov esi, dword [esp + 0x12c]
lea ebx, [esi + 6]
cmp ebx, ebp
jae 0x4af30c
lea ebx, [edi + edx*8 + 6]
movzx ebx, byte [ebx]
add esi, 7
cmp esi, ebp
jb 0x4af17b
jmp 0x4af303
mov edx, dword [esp + 0x2dc]
mov ebx, dword [esp + 0xe8]
jmp 0x4ae8cb
mov eax, esi
mov ecx, ebp
call fcn.0045e750
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
mov eax, esi
mov ecx, ebp
call fcn.0045e750
mov eax, esi
mov ecx, ebp
call fcn.0045e750
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
lea eax, [edi + esi*2 + 5]
movzx eax, byte [eax]
mov ecx, dword [esp + 0x2c0]
mov dword [esp], ecx
mov edx, dword [esp + 0x94]
mov dword [esp + 4], edx
mov ebp, dword [esp + 0xf4]
mov dword [esp + 8], ebp
movzx esi, word [esp + 0x50]
mov word [esp + 0xc], si
movzx esi, word [esp + 0x56]
mov word [esp + 0xe], si
shl ebx, 8
or eax, ebx
mov word [esp + 0x10], ax
mov word [esp + 0x12], 0xffff
call fcn.00475850
mov eax, dword [esp + 0x94]
inc eax
mov ecx, dword [esp + 0xe0]
mov edx, dword [esp + 0x2c0]
mov ebx, dword [esp + 0x2f4]
mov ebp, dword [esp + 0x130]
mov esi, dword [esp + 0xf4]
mov ecx, dword [esp + 0x2fc]
mov edx, dword [esp + 0x2f0]
mov ebx, dword [esp + 0x30c]
mov esi, dword [esp + 0xe0]
mov edi, dword [esp + 0x2f4]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x94]
cmp ebx, esi
jge 0x4af498
lea edx, [ebx + ebx*2]
mov dword [esp + 0x12c], edx
shl edx, 1
cmp edx, ebp
jae 0x4af4d8
mov dword [esp + 0x128], edx
mov esi, dword [esp + 0x12c]
lea ebx, [edi + esi*2]
movzx ebx, byte [ebx]
inc edx
cmp edx, ebp
jae 0x4af4cf
shl ebx, 8
lea edx, [edi + esi*2 + 1]
movzx edx, byte [edx]
or edx, ebx
mov word [esp + 0x50], dx
mov ebx, dword [esp + 0x128]
lea edx, [ebx + 2]
cmp edx, ebp
jae 0x4af4c6
lea edx, [edi + esi*2 + 2]
movzx edx, byte [edx]
add ebx, 3
cmp ebx, ebp
jae 0x4af4bd
shl edx, 8
lea ebx, [edi + esi*2 + 3]
movzx ebx, byte [ebx]
or ebx, edx
mov word [esp + 0x56], bx
mov edx, dword [esp + 0x128]
lea ebx, [edx + 4]
cmp ebx, ebp
jae 0x4af4b4
lea ebx, [edi + esi*2 + 4]
movzx ebx, byte [ebx]
add edx, 5
cmp edx, ebp
jb 0x4af34b
jmp 0x4af4ab
mov edx, dword [esp + 0x2dc]
mov ebx, dword [esp + 0xe8]
jmp 0x4ae8cb
mov eax, edx
mov ecx, ebp
call fcn.0045e750
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
mov eax, edx
mov ecx, ebp
call fcn.0045e750
mov eax, edx
mov ecx, ebp
call fcn.0045e750
mov eax, edx
mov ecx, ebp
call fcn.0045e750
mov ecx, dword [esp + 0x2d8]
mov dword [esp], ecx
mov ebp, dword [esp + 0x98]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xf4]
mov dword [esp + 8], esi
mov word [esp + 0xc], dx
mov word [esp + 0xe], ax
mov word [esp + 0x10], bx
movzx eax, word [esp + 0x5c]
mov word [esp + 0x12], ax
call fcn.004760e0
mov eax, dword [esp + 0x98]
inc eax
mov ecx, dword [esp + 0xe0]
mov edx, dword [esp + 0x2d8]
movzx ebx, word [esp + 0x48]
mov ebp, dword [esp + 0x130]
mov esi, dword [esp + 0x2f4]
mov edi, dword [esp + 0xf4]
mov ecx, dword [esp + 0x2fc]
movzx edx, word [esp + 0x4a]
movzx ebx, word [esp + 0x4c]
mov esi, dword [esp + 0xe0]
mov edi, dword [esp + 0x2f4]
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x98]
cmp ebx, esi
jge 0x4af6a6
lea esi, [ebx + ebx*2]
mov dword [esp + 0x12c], esi
shl esi, 1
cmp esi, ebp
jae 0x4af6df
mov dword [esp + 0x128], esi
mov ebx, dword [esp + 0x12c]
lea edx, [edi + ebx*2]
movzx edx, byte [edx]
inc esi
cmp esi, ebp
jae 0x4af6d6
shl edx, 8
lea esi, [edi + ebx*2 + 1]
movzx esi, byte [esi]
or esi, edx
mov word [esp + 0x52], si
mov edx, dword [esp + 0x128]
lea esi, [edx + 2]
cmp esi, ebp
jae 0x4af6cd
lea esi, [edi + ebx*2 + 2]
movzx esi, byte [esi]
add edx, 3
cmp edx, ebp
jae 0x4af6c4
shl esi, 8
lea edx, [edi + ebx*2 + 3]
movzx edx, byte [edx]
or edx, esi
mov word [esp + 0x58], dx
mov esi, dword [esp + 0x128]
lea edx, [esi + 4]
cmp edx, ebp
jae 0x4af6bb
lea edx, [edi + ebx*2 + 4]
movzx edx, byte [edx]
add esi, 5
cmp esi, ebp
jae 0x4af6b2
shl edx, 8
lea ebx, [edi + ebx*2 + 5]
movzx ebx, byte [ebx]
or ebx, edx
movzx edx, word [esp + 0x52]
movzx esi, word [esp + 0x48]
cmp dx, si
jne 0x4af67d
movzx eax, word [esp + 0x58]
movzx ecx, word [esp + 0x4a]
cmp ax, cx
jne 0x4af676
movzx ecx, word [esp + 0x4c]
cmp bx, cx
jne 0x4af687
mov word [esp + 0x280], ax
xor eax, eax
mov word [esp + 0x5c], ax
movzx eax, word [esp + 0x280]
jmp 0x4af4e1
movzx ecx, word [esp + 0x4c]
jmp 0x4af687
movzx eax, word [esp + 0x58]
movzx ecx, word [esp + 0x4c]
mov word [esp + 0x288], ax
mov eax, 0xffffffff
mov word [esp + 0x5c], ax
movzx eax, word [esp + 0x288]
jmp 0x4af4e1
mov edx, dword [esp + 0x2f0]
jmp 0x4af498
mov eax, esi
mov ecx, ebp
call fcn.0045e750
mov eax, edx
mov ecx, ebp
call fcn.0045e750
mov eax, edx
mov ecx, ebp
call fcn.0045e750
mov eax, esi
mov ecx, ebp
call fcn.0045e750
mov eax, esi
mov ecx, ebp
call fcn.0045e750
mov eax, esi
mov ecx, ebp
call fcn.0045e750
lea eax, [edi + edx*4 + 3]
movzx eax, byte [eax]
mov ecx, dword [esp + 0x2d8]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov ebp, dword [esp + 0xf4]
mov dword [esp + 8], ebp
movzx esi, word [esp + 0x44]
mov word [esp + 0xc], si
mov word [esp + 0xe], si
mov word [esp + 0x10], si
shl ebx, 8
or eax, ebx
mov word [esp + 0x12], ax
call fcn.004760e0
mov eax, dword [esp + 0x9c]
inc eax
mov ecx, dword [esp + 0xe0]
mov edx, dword [esp + 0x2d8]
mov ebx, dword [esp + 0x2f4]
mov ebp, dword [esp + 0x130]
mov esi, dword [esp + 0xf4]
mov ecx, dword [esp + 0x2fc]
mov edx, dword [esp + 0x2f0]
mov ebx, dword [esp + 0x30c]
mov esi, dword [esp + 0xe0]
mov edi, dword [esp + 0x2f4]
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x9c]
cmp ebx, esi
jge 0x4af7e5
shl ebx, 2
cmp ebx, ebp
jae 0x4af813
mov dword [esp + 0x12c], ebx
mov edx, dword [esp + 0x9c]
lea esi, [edi + edx*4]
movzx esi, byte [esi]
inc ebx
cmp ebx, ebp
jae 0x4af80a
shl esi, 8
lea ebx, [edi + edx*4 + 1]
movzx ebx, byte [ebx]
or ebx, esi
mov word [esp + 0x44], bx
mov esi, dword [esp + 0x12c]
lea ebx, [esi + 2]
cmp ebx, ebp
jae 0x4af801
lea ebx, [edi + edx*4 + 2]
movzx ebx, byte [ebx]
add esi, 3
cmp esi, ebp
jb 0x4af6e8
jmp 0x4af7f8
mov edx, dword [esp + 0x2dc]
mov ebx, dword [esp + 0xe8]
jmp 0x4ae8cb
mov eax, esi
mov ecx, ebp
call fcn.0045e750
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
lea eax, [edi + edx*2 + 1]
movzx eax, byte [eax]
mov ecx, dword [esp + 0x2e4]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xf4]
mov dword [esp + 8], ebx
shl esi, 8
or eax, esi
mov word [esp + 0xc], ax
call fcn.004766f0
mov eax, dword [esp + 0xa0]
inc eax
mov ecx, dword [esp + 0xe0]
mov edx, dword [esp + 0x2e4]
mov ebx, dword [esp + 0x130]
mov ebp, dword [esp + 0xf4]
mov esi, dword [esp + 0x2f4]
mov ecx, dword [esp + 0x2fc]
mov edx, dword [esp + 0x2f0]
mov ebx, dword [esp + 0x30c]
mov ebp, dword [esp + 0x130]
mov esi, dword [esp + 0xe0]
mov edi, dword [esp + 0x2f4]
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0xa0]
cmp ebx, esi
jge 0x4af8d7
shl ebx, 1
cmp ebx, ebp
jae 0x4af8f3
mov edx, dword [esp + 0xa0]
lea esi, [edi + edx*2]
movzx esi, byte [esi]
inc ebx
cmp ebx, ebp
jb 0x4af81c
jmp 0x4af8ea
mov edx, dword [esp + 0x2dc]
mov ebx, dword [esp + 0xe8]
jmp 0x4ae8cb
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
mov eax, dword [esp + 0x2d8]
mov dword [esp], eax
mov dword [esp + 4], esi
mov ecx, dword [esp + 0xf4]
mov dword [esp + 8], ecx
mov word [esp + 0xc], dx
mov word [esp + 0xe], dx
mov word [esp + 0x10], dx
movzx edx, word [esp + 0x5e]
mov word [esp + 0x12], dx
call fcn.004760e0
mov eax, dword [esp + 0xa4]
inc eax
mov ecx, dword [esp + 0xe0]
mov edx, dword [esp + 0x2d8]
movzx ebx, word [esp + 0x46]
mov ebp, dword [esp + 0xf4]
mov esi, dword [esp + 0x2f4]
mov edi, dword [esp + 0x130]
mov ecx, dword [esp + 0x2fc]
mov edx, dword [esp + 0x2f0]
mov ebp, edi
mov esi, dword [esp + 0xe0]
mov edi, dword [esp + 0x2f4]
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0x134]
mov edx, dword [esp + 0xa4]
cmp edx, esi
jge 0x4af9f1
shl edx, 1
cmp edx, ebp
jae 0x4afa06
mov esi, dword [esp + 0xa4]
lea ebx, [edi + esi*2]
movzx ebx, byte [ebx]
inc edx
cmp edx, ebp
jae 0x4af9fd
shl ebx, 8
lea edx, [edi + esi*2 + 1]
movzx edx, byte [edx]
or edx, ebx
movzx ebx, word [esp + 0x46]
cmp dx, bx
jne 0x4af9db
mov dword [esp + 0x258], eax
xor eax, eax
mov word [esp + 0x5e], ax
jmp 0x4af8fc
mov dword [esp + 0x260], eax
mov eax, 0xffffffff
mov word [esp + 0x5e], ax
jmp 0x4af8fc
mov edx, dword [esp + 0x2f0]
jmp 0x4af8d7
mov eax, edx
mov ecx, ebp
call fcn.0045e750
mov eax, edx
mov ecx, ebp
call fcn.0045e750
mov eax, edi
mov ecx, ebx
call fcn.0045e7b0
mov ebx, dword [esi + 4]
mov edx, dword [esi]
mov esi, dword [esi + 8]
mov edi, dword [esp + 0xe8]
cmp edi, ebx
ja 0x4afa8b
sub ebx, edi
sub esi, edi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, edi
add edx, esi
cmp ebx, ebp
jg 0x4afa42
mov ebp, ebx
mov ebx, dword [esp + 0x2f4]
cmp edx, ebx
je 0x4afa72
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
call fcn.0045efc0
mov eax, dword [esp + 0x134]
mov ecx, dword [esp + 0x2fc]
mov edi, dword [esp + 0xe8]
mov ebp, dword [esp + 0x2d4]
mov esi, dword [ebp + 0xc]
lea ebx, [edi + esi]
mov edx, dword [esp + 0x2dc]
jmp 0x4ae8cb
mov eax, edi
mov ecx, ebx
call fcn.0045e7b0
inc ebx
mov ebp, dword [esp + 0xe0]
mov edi, dword [esp + 0x2f4]
mov ebp, dword [esp + 0x130]
mov dword [esp + 0xa8], ebx
mov ebx, dword [esp + 0x30c]
mov ebx, dword [esp + 0xa8]
mov edi, dword [esp + 0xe0]
cmp ebx, edi
jge 0x4afafd
mov edi, dword [esi + 0x28]
mov esi, dword [esi + 0x24]
cmp ebx, ebp
jae 0x4afb19
mov ebp, dword [esp + 0x2f4]
movzx ebp, byte [ebx + ebp]
cmp esi, ebp
jg 0x4afaf4
inc ebp
cmp edi, ebp
jb 0x4afb10
mov esi, dword [esp + 0x2d4]
mov dword [esi + 0x24], ebp
jmp 0x4afa94
mov esi, dword [esp + 0x2d4]
jmp 0x4afa94
mov ebx, dword [esp + 0x30c]
mov edi, dword [esp + 0x2f4]
jmp 0x4afa18
mov ecx, ebp
mov edx, edi
call fcn.0045e790
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
lea ebx, [esi + 2]
mov esi, dword [esp + 0xe0]
mov edi, dword [esp + 0x2d4]
mov edi, dword [esp + 0x2f4]
mov dword [esp + 0xac], ebx
mov ebx, dword [esp + 0x30c]
mov ebx, dword [esp + 0xac]
cmp ebx, esi
jge 0x4afb93
shr ebx, 0x1f
mov esi, dword [esp + 0xac]
add ebx, esi
sar ebx, 1
cmp ebx, ebp
jae 0x4afcd5
movzx ebx, byte [ebx + edi]
mov dword [esp + 0x240], eax
xor eax, eax
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x240]
jmp 0x4afbce
mov ebp, dword [esp + 0x130]
mov esi, dword [esp + 0xac]
jmp 0x4afb22
mov edx, dword [esp + 0x2dc]
mov ebx, dword [esp + 0xe8]
jmp 0x4ae8cb
mov ebx, dword [esp + 0x6c]
inc ebx
movzx ebp, byte [esp + 0x34]
shl ebp, 4
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x2f4]
mov dword [esp + 0x6c], ebx
mov ebx, ebp
mov ebp, dword [esp + 0x130]
mov edi, dword [esp + 0x6c]
cmp edi, 2
jge 0x4afb22
lea ebp, [edi + esi]
mov esi, dword [esp + 0xe0]
cmp esi, ebp
jle 0x4afb83
mov byte [esp + 0x34], bl
shr bl, 4
mov byte [esp + 0x2f], bl
mov esi, dword [esp + 0x2d4]
mov edi, dword [esi + 0x28]
movzx ebx, bl
cmp dword [esi + 0x24], ebx
jg 0x4afc12
inc ebx
cmp edi, ebx
jb 0x4afccc
mov dword [esi + 0x24], ebx
mov ebx, dword [esi + 0x10]
mov edi, dword [esi + 0x14]
mov dword [esp + 0x12c], edi
mov edi, dword [esi + 0x18]
mov esi, dword [esi + 0x1c]
cmp ebx, ebp
jg 0x4afcb7
cmp edi, ebp
jle 0x4afcab
mov dword [esp + 0x128], ebx
mov edi, dword [esp + 0xf4]
mov ebx, dword [esp + 0x12c]
cmp edi, ebx
jl 0x4afba6
cmp edi, esi
jge 0x4afba6
mov dword [esp + 0x12c], ebp
nop
mov esi, dword [esp + 0x2d4]
mov ebp, dword [esi + 4]
mov dword [esp + 0x124], ebp
mov ebp, dword [esi]
sub edi, ebx
imul edi, dword [esi + 0xc]
mov ebx, dword [esp + 0x12c]
mov esi, dword [esp + 0x128]
sub ebx, esi
add ebx, edi
mov esi, dword [esp + 0x124]
cmp esi, ebx
jbe 0x4afcc3
movzx esi, byte [esp + 0x2f]
xchg esi, eax
mov byte [ebp + ebx], al
xchg esi, eax
mov edi, dword [esp + 0xf4]
jmp 0x4afba6
mov edi, dword [esp + 0xf4]
jmp 0x4afba6
mov edi, dword [esp + 0xf4]
jmp 0x4afba6
mov eax, ebx
mov ecx, esi
call fcn.0045e750
mov ecx, ebx
mov edx, edi
call fcn.0045e790
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
lea ebx, [esi + 4]
mov esi, dword [esp + 0xe0]
mov edi, dword [esp + 0x2d4]
mov edi, dword [esp + 0x2f4]
mov dword [esp + 0xb0], ebx
mov ebx, dword [esp + 0x30c]
mov ebx, dword [esp + 0xb0]
cmp ebx, esi
jge 0x4afd53
sar ebx, 0x1f
shr ebx, 0x1e
mov esi, dword [esp + 0xb0]
add ebx, esi
sar ebx, 2
cmp ebx, ebp
jae 0x4afe95
movzx ebx, byte [ebx + edi]
mov dword [esp + 0x230], eax
xor eax, eax
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x230]
jmp 0x4afd8e
mov ebp, dword [esp + 0x130]
mov esi, dword [esp + 0xb0]
jmp 0x4afcde
mov edx, dword [esp + 0x2dc]
mov ebx, dword [esp + 0xe8]
jmp 0x4ae8cb
mov ebx, dword [esp + 0x70]
inc ebx
movzx ebp, byte [esp + 0x35]
shl ebp, 2
mov esi, dword [esp + 0xb0]
mov edi, dword [esp + 0x2f4]
mov dword [esp + 0x70], ebx
mov ebx, ebp
mov ebp, dword [esp + 0x130]
mov edi, dword [esp + 0x70]
cmp edi, 4
jge 0x4afcde
lea ebp, [edi + esi]
mov esi, dword [esp + 0xe0]
cmp esi, ebp
jle 0x4afd43
mov byte [esp + 0x35], bl
shr bl, 6
mov byte [esp + 0x30], bl
mov esi, dword [esp + 0x2d4]
mov edi, dword [esi + 0x28]
movzx ebx, bl
cmp dword [esi + 0x24], ebx
jg 0x4afdd2
inc ebx
cmp edi, ebx
jb 0x4afe8c
mov dword [esi + 0x24], ebx
mov ebx, dword [esi + 0x10]
mov edi, dword [esi + 0x14]
mov dword [esp + 0x12c], edi
mov edi, dword [esi + 0x18]
mov esi, dword [esi + 0x1c]
cmp ebx, ebp
jg 0x4afe77
cmp edi, ebp
jle 0x4afe6b
mov dword [esp + 0x128], ebx
mov edi, dword [esp + 0xf4]
mov ebx, dword [esp + 0x12c]
cmp edi, ebx
jl 0x4afd66
cmp edi, esi
jge 0x4afd66
mov dword [esp + 0x12c], ebp
nop
mov esi, dword [esp + 0x2d4]
mov ebp, dword [esi + 4]
mov dword [esp + 0x124], ebp
mov ebp, dword [esi]
sub edi, ebx
imul edi, dword [esi + 0xc]
mov ebx, dword [esp + 0x12c]
mov esi, dword [esp + 0x128]
sub ebx, esi
add ebx, edi
mov esi, dword [esp + 0x124]
cmp esi, ebx
jbe 0x4afe83
movzx esi, byte [esp + 0x30]
xchg esi, eax
mov byte [ebp + ebx], al
xchg esi, eax
mov edi, dword [esp + 0xf4]
jmp 0x4afd66
mov edi, dword [esp + 0xf4]
jmp 0x4afd66
mov edi, dword [esp + 0xf4]
jmp 0x4afd66
mov eax, ebx
mov ecx, esi
call fcn.0045e750
mov ecx, ebx
mov edx, edi
call fcn.0045e790
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
lea ebx, [esi + 8]
mov esi, dword [esp + 0xe0]
mov edi, dword [esp + 0x2d4]
mov edi, dword [esp + 0x2f4]
mov dword [esp + 0xb4], ebx
mov ebx, dword [esp + 0x30c]
mov ebx, dword [esp + 0xb4]
cmp ebx, esi
jge 0x4aff13
sar ebx, 0x1f
shr ebx, 0x1d
mov esi, dword [esp + 0xb4]
add ebx, esi
sar ebx, 3
cmp ebx, ebp
jae 0x4b0054
movzx ebx, byte [ebx + edi]
mov dword [esp + 0x220], eax
xor eax, eax
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x220]
jmp 0x4aff4d
mov ebp, dword [esp + 0x130]
mov esi, dword [esp + 0xb4]
jmp 0x4afe9e
mov edx, dword [esp + 0x2dc]
mov ebx, dword [esp + 0xe8]
jmp 0x4ae8cb
mov ebx, dword [esp + 0x74]
inc ebx
movzx ebp, byte [esp + 0x36]
shl ebp, 1
mov esi, dword [esp + 0xb4]
mov edi, dword [esp + 0x2f4]
mov dword [esp + 0x74], ebx
mov ebx, ebp
mov ebp, dword [esp + 0x130]
mov edi, dword [esp + 0x74]
cmp edi, 8
jge 0x4afe9e
lea ebp, [edi + esi]
mov esi, dword [esp + 0xe0]
cmp esi, ebp
jle 0x4aff03
mov byte [esp + 0x36], bl
shr bl, 7
mov byte [esp + 0x31], bl
mov esi, dword [esp + 0x2d4]
mov edi, dword [esi + 0x28]
movzx ebx, bl
cmp dword [esi + 0x24], ebx
jg 0x4aff91
inc ebx
cmp edi, ebx
jb 0x4b004b
mov dword [esi + 0x24], ebx
mov ebx, dword [esi + 0x10]
mov edi, dword [esi + 0x14]
mov dword [esp + 0x12c], edi
mov edi, dword [esi + 0x18]
mov esi, dword [esi + 0x1c]
cmp ebx, ebp
jg 0x4b0036
cmp edi, ebp
jle 0x4b002a
mov dword [esp + 0x128], ebx
mov edi, dword [esp + 0xf4]
mov ebx, dword [esp + 0x12c]
cmp edi, ebx
jl 0x4aff26
cmp edi, esi
jge 0x4aff26
mov dword [esp + 0x12c], ebp
nop
mov esi, dword [esp + 0x2d4]
mov ebp, dword [esi + 4]
mov dword [esp + 0x124], ebp
mov ebp, dword [esi]
sub edi, ebx
imul edi, dword [esi + 0xc]
mov ebx, dword [esp + 0x12c]
mov esi, dword [esp + 0x128]
sub ebx, esi
add ebx, edi
mov esi, dword [esp + 0x124]
cmp esi, ebx
jbe 0x4b0042
movzx esi, byte [esp + 0x31]
xchg esi, eax
mov byte [ebp + ebx], al
xchg esi, eax
mov edi, dword [esp + 0xf4]
jmp 0x4aff26
mov edi, dword [esp + 0xf4]
jmp 0x4aff26
mov edi, dword [esp + 0xf4]
jmp 0x4aff26
mov eax, ebx
mov ecx, esi
call fcn.0045e750
mov ecx, ebx
mov edx, edi
call fcn.0045e790
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
mov byte [edi + ebp + 3], 0xff
mov edx, dword [esp + 0xb8]
inc edx
add edi, 4
add ebx, 3
mov ebp, dword [esp + 0x130]
mov esi, dword [esp + 0x2c8]
mov dword [esp + 0xb8], edx
mov dword [esp + 0x104], edi
mov dword [esp + 0xf8], ebx
mov edx, dword [esp + 0xec]
mov ebx, dword [esp + 0x30c]
mov edi, dword [esp + 0x2f4]
mov ebx, dword [esp + 0xb8]
mov esi, dword [esp + 0xe0]
cmp ebx, esi
jge 0x4b0159
mov esi, dword [esp + 0xf8]
cmp esi, ebp
jae 0x4b01ae
movzx ebx, byte [esi + edi]
mov edi, dword [esp + 0x104]
cmp edi, edx
jae 0x4b01a5
mov edx, dword [esp + 0x2c8]
mov byte [edx + edi], bl
lea ebx, [esi + 1]
cmp ebx, ebp
jae 0x4b019c
lea ebx, [edi + 1]
mov ebp, dword [esp + 0x2f4]
movzx ebp, byte [esi + ebp + 1]
mov esi, dword [esp + 0xec]
cmp esi, ebx
jbe 0x4b0193
xchg ebp, eax
mov byte [edi + edx + 1], al
xchg ebp, eax
mov ebx, dword [esp + 0xf8]
lea ebp, [ebx + 2]
mov edx, dword [esp + 0x130]
cmp ebp, edx
jae 0x4b018a
lea ebp, [edi + 2]
mov edx, dword [esp + 0x2f4]
movzx edx, byte [ebx + edx + 2]
cmp esi, ebp
jbe 0x4b0181
mov ebp, dword [esp + 0x2c8]
mov byte [edi + ebp + 2], dl
lea edx, [edi + 3]
cmp esi, edx
ja 0x4b005d
jmp 0x4b0178
mov edx, dword [esp + 0x2c4]
mov ebx, dword [edx + 0xc]
mov ebp, dword [esp + 0xe8]
add ebx, ebp
mov edx, dword [esp + 0x2dc]
jmp 0x4ae8cb
mov eax, edx
mov ecx, esi
call fcn.0045e750
mov eax, ebp
mov ecx, esi
call fcn.0045e750
mov eax, ebp
mov ecx, edx
call fcn.0045e750
mov eax, ebx
mov ecx, esi
call fcn.0045e750
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
mov eax, edi
mov ecx, edx
call fcn.0045e750
mov eax, esi
mov ecx, ebp
call fcn.0045e750
movzx esi, byte [esp + 0x42]
xchg esi, eax
mov byte [ebp + ebx + 3], al
xchg esi, eax
mov esi, dword [esp + 0xbc]
inc esi
add ebp, 4
mov edi, dword [esp + 0xfc]
add edi, 3
movzx edx, byte [esp + 0x2d]
mov ebx, dword [esp + 0x30c]
mov dword [esp + 0xbc], esi
mov dword [esp + 0x108], ebp
mov dword [esp + 0xfc], edi
mov ebp, dword [esp + 0x130]
movzx esi, byte [esp + 0x2b]
mov edi, dword [esp + 0x2f4]
mov ebx, dword [esp + 0xbc]
mov edx, dword [esp + 0xe0]
cmp ebx, edx
jge 0x4b0316
mov edx, dword [esp + 0xfc]
cmp edx, ebp
jae 0x4b0374
movzx ebx, byte [edx + edi]
mov byte [esp + 0x2e], bl
lea ebx, [edx + 1]
cmp ebx, ebp
jae 0x4b036b
movzx ebx, byte [edx + edi + 1]
mov byte [esp + 0x32], bl
lea ebx, [edx + 2]
cmp ebx, ebp
jae 0x4b0362
movzx ebx, byte [edx + edi + 2]
movzx edi, byte [esp + 0x2e]
xchg edi, eax
xchg esi, ebx
cmp al, bl
xchg esi, ebx
xchg edi, eax
jne 0x4b02a7
movzx esi, byte [esp + 0x32]
movzx ebp, byte [esp + 0x2c]
xchg esi, eax
xchg ebp, ebx
cmp al, bl
xchg ebp, ebx
xchg esi, eax
jne 0x4b02a0
movzx ebp, byte [esp + 0x2d]
xchg ebp, eax
cmp bl, al
xchg ebp, eax
jne 0x4b02b1
mov dword [esp + 0x1f0], eax
xor eax, eax
mov byte [esp + 0x42], al
mov eax, dword [esp + 0x1f0]
jmp 0x4b02c8
movzx ebp, byte [esp + 0x2d]
jmp 0x4b02b1
movzx ebp, byte [esp + 0x2d]
movzx esi, byte [esp + 0x32]
mov dword [esp + 0x1f8], eax
mov eax, 0xffffffff
mov byte [esp + 0x42], al
mov eax, dword [esp + 0x1f8]
mov ebp, dword [esp + 0x108]
mov edx, dword [esp + 0xf0]
cmp ebp, edx
jae 0x4b0359
mov byte [esp + 0x37], bl
mov ebx, dword [esp + 0x2cc]
xchg edi, eax
mov byte [ebx + ebp], al
xchg edi, eax
lea edi, [ebp + 1]
cmp edx, edi
jbe 0x4b0350
xchg esi, eax
mov byte [ebp + ebx + 1], al
xchg esi, eax
lea esi, [ebp + 2]
cmp edx, esi
jbe 0x4b0347
movzx esi, byte [esp + 0x37]
xchg esi, eax
mov byte [ebp + ebx + 2], al
xchg esi, eax
lea esi, [ebp + 3]
cmp edx, esi
ja 0x4b01b7
jmp 0x4b033e
mov ebp, dword [esp + 0x2dc]
mov edi, dword [ebp + 0xc]
mov ebp, dword [esp + 0xe8]
add ebp, edi
mov edx, dword [esp + 0x2c4]
mov esi, dword [esp + 0xe0]
mov ebx, ebp
jmp 0x4b016c
mov eax, esi
mov ecx, edx
call fcn.0045e750
mov eax, esi
mov ecx, edx
call fcn.0045e750
mov eax, edi
mov ecx, edx
call fcn.0045e750
mov eax, ebp
mov ecx, edx
call fcn.0045e750
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
mov eax, edx
mov ecx, ebp
call fcn.0045e750
lea eax, [edi + edx*2 + 1]
movzx eax, byte [eax]
mov ecx, dword [esp + 0x2dc]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xf4]
mov dword [esp + 8], ebx
xchg esi, eax
mov byte [esp + 0xc], al
xchg esi, eax
xchg esi, eax
mov byte [esp + 0xd], al
xchg esi, eax
xchg esi, eax
mov byte [esp + 0xe], al
xchg esi, eax
mov byte [esp + 0xf], al
call fcn.00475ca0
mov eax, dword [esp + 0xc0]
inc eax
mov ecx, dword [esp + 0xe0]
mov edx, dword [esp + 0x2dc]
mov ebx, dword [esp + 0x130]
mov ebp, dword [esp + 0xf4]
mov esi, dword [esp + 0x2f4]
mov ecx, dword [esp + 0x2fc]
mov edx, dword [esp + 0x2f0]
mov ebx, dword [esp + 0x30c]
mov ebp, dword [esp + 0x130]
mov esi, dword [esp + 0xe0]
mov edi, dword [esp + 0x2f4]
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0xc0]
cmp ebx, esi
jge 0x4b0444
shl ebx, 1
cmp ebx, ebp
jae 0x4b0460
mov edx, dword [esp + 0xc0]
lea esi, [edi + edx*2]
movzx esi, byte [esi]
inc ebx
cmp ebx, ebp
jb 0x4b037d
jmp 0x4b0457
mov edx, dword [esp + 0x2dc]
mov ebx, dword [esp + 0xe8]
jmp 0x4ae8cb
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
mov edx, dword [esp + 0x2dc]
jmp 0x4ae8cb
mov eax, edi
mov ecx, ebx
call fcn.0045e7b0
mov ecx, dword [esp + 0x2dc]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov edx, dword [esp + 0xf4]
mov dword [esp + 8], edx
mov byte [esp + 0xc], al
mov byte [esp + 0xd], al
mov byte [esp + 0xe], al
movzx eax, byte [esp + 0x3e]
mov byte [esp + 0xf], al
call fcn.00475ca0
mov eax, dword [esp + 0xc4]
inc eax
mov ecx, dword [esp + 0xe0]
mov edx, dword [esp + 0x2dc]
movzx ebx, byte [esp + 0x27]
mov ebp, dword [esp + 0xf4]
mov esi, dword [esp + 0x2f4]
mov edi, dword [esp + 0x130]
mov ecx, dword [esp + 0x2fc]
mov edx, dword [esp + 0x2f0]
mov ebx, dword [esp + 0x30c]
mov ebp, edi
movzx esi, byte [esp + 0x27]
mov edi, dword [esp + 0x2f4]
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0xc4]
mov edx, dword [esp + 0xe0]
cmp ebx, edx
jge 0x4b056b
cmp ebx, ebp
jae 0x4b057e
movzx eax, byte [ebx + edi]
xchg esi, ebx
cmp al, bl
xchg esi, ebx
jne 0x4b054e
mov byte [esp + 0x1d0], al
xor eax, eax
mov byte [esp + 0x3e], al
movzx eax, byte [esp + 0x1d0]
jmp 0x4b047e
mov byte [esp + 0x1d8], al
mov eax, 0xffffffff
mov byte [esp + 0x3e], al
movzx eax, byte [esp + 0x1d8]
jmp 0x4b047e
mov edx, dword [esp + 0x304]
mov ebx, dword [esp + 0xe8]
jmp 0x4b0469
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
add edx, 2
mov ebx, dword [esp + 0x304]
mov edi, dword [esp + 0xf4]
mov ebx, dword [esp + 0x30c]
mov edi, dword [esp + 0x2f4]
mov dword [esp + 0xc8], edx
mov edx, dword [esp + 0x2f0]
mov ebx, dword [esp + 0xc8]
cmp ebx, esi
jge 0x4b05f8
shr ebx, 0x1f
mov edx, dword [esp + 0xc8]
add ebx, edx
sar ebx, 1
cmp ebx, ebp
jae 0x4b0705
movzx ebx, byte [ebx + edi]
mov dword [esp + 0x1c0], eax
xor eax, eax
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x1c0]
jmp 0x4b0641
mov ebp, dword [esp + 0x130]
jmp 0x4b0587
mov edx, dword [esp + 0x2dc]
mov ebx, dword [esp + 0xe8]
jmp 0x4ae8cb
mov edx, dword [esp + 0x78]
inc edx
movzx ebx, byte [esp + 0x38]
shl ebx, 4
mov ebp, dword [esp + 0xc8]
mov edi, dword [esp + 0xe0]
mov ebp, dword [esp + 0x130]
mov esi, edi
mov edi, dword [esp + 0x2f4]
mov dword [esp + 0x78], edx
mov edx, dword [esp + 0xc8]
mov edi, dword [esp + 0x78]
cmp edi, 2
jge 0x4b0587
lea ebp, [edi + edx]
cmp esi, ebp
jle 0x4b05ef
mov byte [esp + 0x38], bl
shr bl, 4
mov byte [esp + 0x43], bl
shl ebx, 4
movzx esi, byte [esp + 0x43]
add ebx, esi
mov byte [esp + 0x33], bl
mov esi, dword [esp + 0x304]
mov ebx, dword [esi + 0x10]
mov edx, dword [esi + 0x14]
mov edi, dword [esi + 0x18]
mov esi, dword [esi + 0x1c]
cmp ebx, ebp
jg 0x4b06e9
cmp edi, ebp
jle 0x4b06e0
mov edi, dword [esp + 0xf4]
cmp edi, edx
jl 0x4b06f0
cmp edi, esi
jge 0x4b06f0
mov dword [esp + 0x12c], ebx
nop
mov esi, dword [esp + 0x304]
mov ebx, dword [esi + 4]
mov dword [esp + 0x128], ebx
mov ebx, dword [esi]
sub edi, edx
imul edi, dword [esi + 0xc]
mov edx, dword [esp + 0x12c]
sub ebp, edx
lea edx, [ebp + edi]
mov ebp, dword [esp + 0x128]
cmp ebp, edx
jbe 0x4b06fc
movzx ebp, byte [esp + 0x33]
xchg ebp, eax
mov byte [ebx + edx], al
xchg ebp, eax
jmp 0x4b060b
mov edi, dword [esp + 0xf4]
jmp 0x4b06f0
mov edi, dword [esp + 0xf4]
mov esi, dword [esp + 0x304]
jmp 0x4b060b
mov eax, edx
mov ecx, ebp
call fcn.0045e750
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
lea ebx, [esi + 2]
mov esi, dword [esp + 0x2dc]
movzx edi, byte [esp + 0x28]
mov edx, dword [esp + 0x2f0]
mov esi, edi
mov edi, dword [esp + 0x2f4]
mov dword [esp + 0xcc], ebx
mov ebx, dword [esp + 0x30c]
mov ebx, dword [esp + 0xcc]
mov edx, dword [esp + 0xe0]
cmp ebx, edx
jge 0x4b0780
shr ebx, 0x1f
mov esi, dword [esp + 0xcc]
add ebx, esi
sar ebx, 1
cmp ebx, ebp
jae 0x4b0887
movzx ebx, byte [ebx + edi]
mov dword [esp + 0x1b0], eax
xor eax, eax
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x1b0]
jmp 0x4b081b
mov edx, dword [esp + 0x2f0]
mov esi, dword [esp + 0xe0]
jmp 0x4b05f8
mov ecx, dword [esp + 0x2dc]
mov dword [esp], ecx
mov dword [esp + 4], edi
mov edx, dword [esp + 0xf4]
mov dword [esp + 8], edx
mov byte [esp + 0xc], al
mov byte [esp + 0xd], al
mov byte [esp + 0xe], al
movzx eax, byte [esp + 0x3f]
mov byte [esp + 0xf], al
call fcn.00475ca0
mov eax, dword [esp + 0x7c]
inc eax
movzx ebx, byte [esp + 0x39]
shl ebx, 4
mov ecx, dword [esp + 0xcc]
mov edx, dword [esp + 0xe0]
mov ebp, dword [esp + 0x2dc]
movzx esi, byte [esp + 0x28]
mov edi, dword [esp + 0xf4]
mov ecx, dword [esp + 0x2fc]
mov ebp, dword [esp + 0x130]
mov esi, dword [esp + 0xcc]
mov edi, dword [esp + 0x2f4]
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x134]
mov edi, dword [esp + 0x7c]
cmp edi, 2
jge 0x4b070e
add edi, esi
cmp edx, edi
jle 0x4b070e
mov byte [esp + 0x39], bl
shr bl, 4
mov byte [esp + 0x43], bl
shl ebx, 4
movzx eax, byte [esp + 0x43]
add eax, ebx
movzx ebx, byte [esp + 0x28]
cmp bl, al
jne 0x4b086a
mov byte [esp + 0x1a0], al
xor eax, eax
mov byte [esp + 0x3f], al
movzx eax, byte [esp + 0x1a0]
jmp 0x4b0793
mov byte [esp + 0x1a8], al
mov eax, 0xffffffff
mov byte [esp + 0x3f], al
movzx eax, byte [esp + 0x1a8]
jmp 0x4b0793
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
add edx, 4
mov ebx, dword [esp + 0x304]
mov edi, dword [esp + 0xf4]
mov ebx, dword [esp + 0x30c]
mov edi, dword [esp + 0x2f4]
mov dword [esp + 0xd0], edx
mov edx, dword [esp + 0x2f0]
mov ebx, dword [esp + 0xd0]
cmp ebx, esi
jge 0x4b0908
sar ebx, 0x1f
shr ebx, 0x1e
mov edx, dword [esp + 0xd0]
add ebx, edx
sar ebx, 2
cmp ebx, ebp
jae 0x4b0a1a
movzx ebx, byte [ebx + edi]
mov dword [esp + 0x190], eax
xor eax, eax
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x190]
jmp 0x4b0959
mov ebp, dword [esp + 0x130]
jmp 0x4b0890
mov edx, dword [esp + 0x2dc]
mov ebx, dword [esp + 0xe8]
jmp 0x4ae8cb
mov edx, dword [esp + 0x80]
inc edx
shl edi, 2
mov ebx, dword [esp + 0xd0]
mov ebp, dword [esp + 0xe0]
mov ebp, dword [esp + 0x130]
mov esi, dword [esp + 0xe0]
mov dword [esp + 0x80], edx
mov ebx, edi
mov edx, dword [esp + 0xd0]
mov edi, dword [esp + 0x2f4]
mov edi, dword [esp + 0x80]
cmp edi, 4
jge 0x4b0890
lea ebp, [edi + edx]
cmp esi, ebp
jle 0x4b08ff
mov byte [esp + 0x3a], bl
mov esi, dword [esp + 0x304]
mov edx, dword [esi + 0x10]
mov ebx, dword [esi + 0x14]
mov edi, dword [esi + 0x18]
mov esi, dword [esi + 0x1c]
cmp edx, ebp
jg 0x4b09f9
cmp edi, ebp
jle 0x4b09f0
mov edi, dword [esp + 0xf4]
cmp edi, ebx
jl 0x4b0a00
cmp edi, esi
jge 0x4b0a00
mov dword [esp + 0x12c], edx
nop
mov esi, dword [esp + 0x304]
mov edx, dword [esi + 4]
mov dword [esp + 0x128], edx
mov edx, dword [esi]
sub edi, ebx
imul edi, dword [esi + 0xc]
mov ebx, dword [esp + 0x12c]
sub ebp, ebx
lea ebx, [ebp + edi]
mov ebp, dword [esp + 0x128]
cmp ebp, ebx
jbe 0x4b0a11
movzx ebp, byte [esp + 0x3a]
mov edi, ebp
xchg ebp, eax
shr al, 6
xchg ebp, eax
imul ebp, ebp, 0x55
xchg ebp, eax
mov byte [edx + ebx], al
xchg ebp, eax
jmp 0x4b091b
mov edi, dword [esp + 0xf4]
jmp 0x4b0a00
mov edi, dword [esp + 0xf4]
mov esi, dword [esp + 0x304]
movzx edi, byte [esp + 0x3a]
jmp 0x4b091b
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
lea ebx, [esi + 4]
mov esi, dword [esp + 0x2dc]
movzx edi, byte [esp + 0x29]
mov edx, dword [esp + 0x2f0]
mov esi, edi
mov edi, dword [esp + 0x2f4]
mov dword [esp + 0xd4], ebx
mov ebx, dword [esp + 0x30c]
mov ebx, dword [esp + 0xd4]
mov edx, dword [esp + 0xe0]
cmp ebx, edx
jge 0x4b0a9c
sar ebx, 0x1f
shr ebx, 0x1e
mov esi, dword [esp + 0xd4]
add ebx, esi
sar ebx, 2
cmp ebx, ebp
jae 0x4b0b91
movzx ebx, byte [ebx + edi]
mov dword [esp + 0x180], eax
xor eax, eax
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0x180]
jmp 0x4b0b3d
mov edx, dword [esp + 0x2f0]
mov esi, dword [esp + 0xe0]
jmp 0x4b0908
mov eax, dword [esp + 0x2dc]
mov dword [esp], eax
mov dword [esp + 4], edi
mov ecx, dword [esp + 0xf4]
mov dword [esp + 8], ecx
mov byte [esp + 0xc], bl
mov byte [esp + 0xd], bl
mov byte [esp + 0xe], bl
movzx edx, byte [esp + 0x40]
mov byte [esp + 0xf], dl
call fcn.00475ca0
mov eax, dword [esp + 0x84]
inc eax
movzx ebx, byte [esp + 0x3b]
shl ebx, 2
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0xe0]
mov ebp, dword [esp + 0x2dc]
movzx esi, byte [esp + 0x29]
mov edi, dword [esp + 0xf4]
mov ecx, dword [esp + 0x2fc]
mov ebp, dword [esp + 0x130]
mov esi, dword [esp + 0xd4]
mov edi, dword [esp + 0x2f4]
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0x134]
mov edi, dword [esp + 0x84]
cmp edi, 4
jge 0x4b0a23
add edi, esi
cmp edx, edi
jle 0x4b0a23
mov byte [esp + 0x3b], bl
shr bl, 6
imul ebx, ebx, 0x55
movzx eax, byte [esp + 0x29]
cmp al, bl
jne 0x4b0b7c
mov byte [esp + 0x170], al
xor eax, eax
mov byte [esp + 0x40], al
jmp 0x4b0aaf
mov byte [esp + 0x178], al
mov eax, 0xffffffff
mov byte [esp + 0x40], al
jmp 0x4b0aaf
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
add edx, 8
mov ebx, dword [esp + 0x304]
mov edi, dword [esp + 0xf4]
mov ebx, dword [esp + 0x30c]
mov edi, dword [esp + 0x2f4]
mov dword [esp + 0xd8], edx
mov edx, dword [esp + 0x2f0]
mov ebx, dword [esp + 0xd8]
cmp ebx, esi
jge 0x4b0c12
sar ebx, 0x1f
shr ebx, 0x1d
mov edx, dword [esp + 0xd8]
add ebx, edx
sar ebx, 3
cmp ebx, ebp
jae 0x4b0d26
movzx ebx, byte [ebx + edi]
mov dword [esp + 0x160], eax
xor eax, eax
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x160]
jmp 0x4b0c62
mov ebp, dword [esp + 0x130]
jmp 0x4b0b9a
mov edx, dword [esp + 0x2dc]
mov ebx, dword [esp + 0xe8]
jmp 0x4ae8cb
mov edx, dword [esp + 0x88]
inc edx
shl edi, 1
mov ebx, dword [esp + 0xd8]
mov ebp, dword [esp + 0xe0]
mov ebp, dword [esp + 0x130]
mov esi, dword [esp + 0xe0]
mov dword [esp + 0x88], edx
mov ebx, edi
mov edx, dword [esp + 0xd8]
mov edi, dword [esp + 0x2f4]
mov edi, dword [esp + 0x88]
cmp edi, 8
jge 0x4b0b9a
lea ebp, [edi + edx]
cmp esi, ebp
jle 0x4b0c09
mov byte [esp + 0x3c], bl
mov esi, dword [esp + 0x304]
mov edx, dword [esi + 0x10]
mov ebx, dword [esi + 0x14]
mov edi, dword [esi + 0x18]
mov esi, dword [esi + 0x1c]
cmp edx, ebp
jg 0x4b0d05
cmp edi, ebp
jle 0x4b0cfc
mov edi, dword [esp + 0xf4]
cmp edi, ebx
jl 0x4b0d0c
cmp edi, esi
jge 0x4b0d0c
mov dword [esp + 0x12c], edx
nop
mov esi, dword [esp + 0x304]
mov edx, dword [esi + 4]
mov dword [esp + 0x128], edx
mov edx, dword [esi]
sub edi, ebx
imul edi, dword [esi + 0xc]
mov ebx, dword [esp + 0x12c]
sub ebp, ebx
lea ebx, [ebp + edi]
mov ebp, dword [esp + 0x128]
cmp ebp, ebx
jbe 0x4b0d1d
movzx ebp, byte [esp + 0x3c]
mov edi, ebp
xchg ebp, eax
shr al, 7
xchg ebp, eax
xchg ebp, ebx
neg ebx
xchg ebp, ebx
xchg ebp, eax
mov byte [edx + ebx], al
xchg ebp, eax
jmp 0x4b0c25
mov edi, dword [esp + 0xf4]
jmp 0x4b0d0c
mov edi, dword [esp + 0xf4]
mov esi, dword [esp + 0x304]
movzx edi, byte [esp + 0x3c]
jmp 0x4b0c25
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
lea ebx, [esi + 8]
mov esi, dword [esp + 0x2dc]
movzx edi, byte [esp + 0x2a]
mov edx, dword [esp + 0x2f0]
mov esi, edi
mov edi, dword [esp + 0x2f4]
mov dword [esp + 0xdc], ebx
mov ebx, dword [esp + 0x30c]
mov ebx, dword [esp + 0xdc]
mov edx, dword [esp + 0xe0]
cmp ebx, edx
jge 0x4b0da8
sar ebx, 0x1f
shr ebx, 0x1d
mov esi, dword [esp + 0xdc]
add ebx, esi
sar ebx, 3
cmp ebx, ebp
jae 0x4b0e9b
movzx ebx, byte [ebx + edi]
mov dword [esp + 0x150], eax
xor eax, eax
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x150]
jmp 0x4b0e48
mov edx, dword [esp + 0x2f0]
mov esi, dword [esp + 0xe0]
jmp 0x4b0c12
mov eax, dword [esp + 0x2dc]
mov dword [esp], eax
mov dword [esp + 4], edi
mov ecx, dword [esp + 0xf4]
mov dword [esp + 8], ecx
mov byte [esp + 0xc], bl
mov byte [esp + 0xd], bl
mov byte [esp + 0xe], bl
movzx edx, byte [esp + 0x41]
mov byte [esp + 0xf], dl
call fcn.00475ca0
mov eax, dword [esp + 0x8c]
inc eax
movzx ebx, byte [esp + 0x3d]
shl ebx, 1
mov ecx, dword [esp + 0xdc]
mov edx, dword [esp + 0xe0]
mov ebp, dword [esp + 0x2dc]
movzx esi, byte [esp + 0x2a]
mov edi, dword [esp + 0xf4]
mov ecx, dword [esp + 0x2fc]
mov ebp, dword [esp + 0x130]
mov esi, dword [esp + 0xdc]
mov edi, dword [esp + 0x2f4]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x134]
mov edi, dword [esp + 0x8c]
cmp edi, 8
jge 0x4b0d2f
add edi, esi
cmp edx, edi
jle 0x4b0d2f
mov byte [esp + 0x3d], bl
shr bl, 7
neg ebx
movzx eax, byte [esp + 0x2a]
cmp al, bl
jne 0x4b0e86
mov byte [esp + 0x140], al
xor eax, eax
mov byte [esp + 0x41], al
jmp 0x4b0dbb
mov byte [esp + 0x148], al
mov eax, 0xffffffff
mov byte [esp + 0x41], al
jmp 0x4b0dbb
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
mov eax, dword [esp + 0x2d0]
movzx ecx, byte [ebx + eax]
shr cl, 1
add ecx, ebp
mov byte [edi + ebx], cl
lea ecx, [ebx + 1]
mov ebp, dword [esp + 0x130]
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x2d0]
mov dword [esp + 0x110], ecx
mov ecx, dword [esp + 0x2fc]
mov ebx, dword [esp + 0x110]
cmp ebx, esi
jge 0x4b0efa
cmp ebx, ebp
jae 0x4b0fa0
movzx ebp, byte [ebx + edi]
jb 0x4b0ea4
jmp 0x4b0f92
mov ebx, dword [esp + 0x2d0]
jmp 0x4b0f42
mov eax, dword [esp + 0x2d0]
movzx ecx, byte [ebx + eax]
add ecx, esi
mov esi, ecx
shr ecx, 0x1f
add ecx, esi
sar ecx, 1
movzx esi, byte [esp + 0x43]
add ecx, esi
mov byte [edi + ebx], cl
lea esi, [ebx + 1]
mov ecx, dword [esp + 0x11c]
mov eax, dword [esp + 0x134]
mov ecx, dword [esp + 0x2fc]
mov ebx, dword [esp + 0x2d0]
cmp esi, ebp
jge 0x4aea5f
jae 0x4b0f89
mov dword [esp + 0x10c], esi
movzx ebx, byte [esi + edi]
mov byte [esp + 0x43], bl
mov ebx, dword [esp + 0x11c]
sub esi, ebx
cmp esi, ebp
jae 0x4b0f80
movzx esi, byte [esi + edi]
mov ebx, dword [esp + 0x10c]
cmp ebx, ebp
jb 0x4b0f03
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
mov eax, esi
mov ecx, ebp
call fcn.0045e750
mov eax, esi
mov ecx, ebp
call fcn.0045e750
mov eax, ebx
mov ecx, dword [esp + 0x130]
call fcn.0045e750
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
movzx eax, byte [esi + edi]
add eax, ebx
mov byte [edi + esi], al
inc esi
mov ebx, dword [esp + 0x2d0]
mov eax, dword [esp + 0x134]
cmp esi, ebp
jge 0x4aea5f
movzx ebx, byte [esi + ebx]
jb 0x4b0fa9
mov eax, esi
mov ecx, ebp
call fcn.0045e750
mov eax, dword [esp + 0x2f4]
movzx ebx, byte [ebx + eax]
add ebx, edi
mov edi, dword [esp + 0x114]
mov byte [eax + edi], bl
lea ebx, [edi + 1]
mov eax, dword [esp + 0x134]
mov edi, dword [esp + 0x2f4]
cmp ebx, ebp
jge 0x4aea5f
jae 0x4b1024
mov dword [esp + 0x114], ebx
movzx edi, byte [ebx + edi]
sub ebx, esi
cmp ebx, ebp
jb 0x4b0fd8
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
mov eax, ebx
mov ecx, ebp
call fcn.0045e750
mov eax, 1
xor ecx, ecx
call fcn.0045e7b0
mov eax, 1
xor ecx, ecx
call fcn.0045e7b0
call fcn.00432fb0
call fcn.00432fb0
call fcn.0045e750
nop
call fcn.0045d2c0
jmp fcn.004add40