Function at 0x4ad660
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xb4
shr edx, 2
mov dword [esp + 0xa4], edx
mov edx, dword [ecx + 0x18]
push ebx
push ebp
mov ebp, dword [ecx + 0x10]
mov dword [esp + 0xb8], edx
lea edx, [eax + 0x40]
push esi
mov esi, dword [ecx]
lea ecx, [eax + 0x20]
mov dword [esp + 0x9c], edx
mov edx, dword [eax + 4]
cmp edx, dword [ecx + 4]
mov dword [esp + 0x50], ebp
mov ebx, eax
mov dword [esp + 0x5c], ecx
jle 0x4ad6a9
mov ebx, ecx
mov dword [esp + 0x5c], eax
mov ecx, eax
mov eax, dword [ecx + 4]
mov edx, dword [esp + 0x9c]
cmp eax, dword [edx + 4]
jle 0x4ad6cc
mov dword [esp + 0x9c], ecx
mov dword [esp + 0x5c], edx
mov ecx, edx
mov edx, dword [esp + 0x9c]
mov eax, dword [ebx + 4]
cmp eax, dword [ecx + 4]
jle 0x4ad6de
mov eax, ebx
mov ebx, ecx
mov dword [esp + 0x5c], eax
mov ecx, eax
mov eax, dword [ebx + 4]
add eax, 0xffff
sar eax, 0x10
mov dword [esp + 0x14], eax
mov eax, dword [edx + 4]
lea edx, [eax + 0xffff]
sar edx, 0x10
cmp dword [esp + 0x14], edx
mov dword [esp + 0x74], edx
je 0x4aecc3
mov ecx, dword [ecx + 4]
add ecx, 0xffff
sar ecx, 0x10
mov dword [esp + 0x24], ecx
mov ecx, dword [ebx + 4]
sub eax, ecx
cdq
push edx
push eax
push 0x10000
push 0
call fcn.006372b0
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x9c]
mov eax, dword [eax]
mov ecx, edx
mov edx, dword [ebx]
push ecx
mov dword [esp + 0x48], ecx
mov ecx, dword [esp + 0x44]
sub eax, edx
mov dword [esp + 0x14], edx
cdq
push ecx
push edx
push eax
call fcn.0063a250
mov cl, 0x20
call fcn.00643e20
mov edx, dword [esp + 0x9c]
mov ecx, dword [esp + 0x44]
mov dword [esp + 0xb4], eax
mov eax, dword [edx + 0x18]
sub eax, dword [ebx + 0x18]
push ecx
mov ecx, dword [esp + 0x44]
cdq
push ecx
push edx
push eax
call fcn.0063a250
mov cl, 0x20
call fcn.00643e20
mov edx, dword [esp + 0x9c]
mov ecx, dword [esp + 0x44]
mov dword [esp + 0xb8], eax
mov eax, dword [edx + 0x1c]
sub eax, dword [ebx + 0x1c]
push ecx
mov ecx, dword [esp + 0x44]
cdq
push ecx
push edx
push eax
call fcn.0063a250
mov cl, 0x20
call fcn.00643e20
mov edx, dword [esp + 0x5c]
mov dword [esp + 0xac], eax
mov eax, dword [edx + 4]
sub eax, dword [ebx + 4]
cdq
mov ecx, eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x44], edx
cdq
mov dword [esp + 0x84], edx
mov edx, dword [esp + 0x44]
push edx
push ecx
mov dword [esp + 0x48], ecx
mov ecx, dword [esp + 0x8c]
push ecx
push eax
mov dword [esp + 0x90], eax
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, dword [esp + 0x10]
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x28], eax
mov ecx, dword [edx]
cmp ecx, eax
mov dword [esp + 0xc], ecx
je 0x4aecc3
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x80]
shl eax, 0x10
sub eax, dword [ebx + 4]
cdq
push edx
push eax
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x8c]
push eax
push ecx
mov dword [esp + 0x7c], edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, dword [esp + 0x10]
mov ecx, dword [ebx + 0x18]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x6c]
push ecx
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0xbc]
cdq
push ecx
push edx
push eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x6c]
mov ebx, dword [ebx + 0x1c]
push ecx
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0xb0]
cdq
push ecx
push edx
push eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], edx
mov dword [esp + 0x70], ebx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, ebx
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0xc]
sub eax, dword [esp + 0x28]
cdq
push edx
push eax
push 0x10000
push 0
call fcn.006372b0
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x84], edx
mov edx, dword [esp + 0x44]
push edx
mov edx, dword [esp + 0x7c]
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0x44]
push eax
push ecx
push edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
mov ebx, edx
mov edx, dword [esp + 0x5c]
mov ecx, eax
mov eax, dword [edx + 0x18]
cdq
sub eax, ecx
mov ecx, eax
mov eax, dword [esp + 0x18]
sbb edx, ebx
mov ebx, edx
cdq
sub ecx, eax
mov eax, dword [esp + 0x80]
sbb ebx, edx
mov edx, dword [esp + 0x84]
push edx
push eax
push ebx
push ecx
call fcn.0063a250
mov cl, 0x20
call fcn.00643e20
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
push ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0x90]
push edx
push eax
push ecx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
mov ebx, edx
mov edx, dword [esp + 0x5c]
mov ecx, eax
mov eax, dword [edx + 0x1c]
cdq
sub eax, ecx
sbb edx, ebx
mov ecx, eax
mov eax, dword [esp + 0x60]
mov ebx, edx
cdq
sub ecx, eax
mov eax, dword [esp + 0x80]
sbb ebx, edx
mov edx, dword [esp + 0x84]
push edx
push eax
push ebx
push ecx
call fcn.0063a250
mov cl, 0x20
call fcn.00643e20
mov ecx, dword [esp + 0x14]
mov edx, ecx
imul edx, dword [esp + 0xb0]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0xc4]
lea edx, [eax + edx*4]
mov eax, dword [esp + 0x24]
sub eax, ecx
mov dword [esp + 0x58], edx
mov dword [esp + 0x30], eax
je 0x4ae333
mov eax, dword [esp + 0xc]
sub eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x40]
cdq
mov ebx, eax
mov eax, dword [esp + 0x44]
push eax
push ecx
push 0x10000
push 0
mov ebp, edx
call fcn.006372b0
push edx
push eax
push ebp
push ebx
call fcn.0063a250
mov cl, 0x20
call fcn.00643e20
mov ecx, dword [esp + 0x6c]
push ecx
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x7c], eax
cdq
push ecx
push edx
push eax
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
mov edx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x50]
mov ecx, eax
mov eax, dword [edx]
mov edx, dword [esp + 0x28]
add ecx, dword [esp + 0x10]
cmp edx, eax
jge 0x4adebe
cmp dword [esp + 0x30], 0
jle 0x4ae333
mov eax, dword [esp + 0x98]
cdq
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0x6c], edx
cdq
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x38]
add ecx, 0xffff
add eax, 0xffff
mov dword [esp + 0x44], edx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x20], eax
mov ebx, dword [esp + 0x20]
mov ecx, dword [esp + 0x6c]
sub dword [esp + 0x30], 1
and ebx, 0xffff0000
push ecx
mov ecx, dword [esp + 0x6c]
mov eax, ebx
sub eax, dword [esp + 0x3c]
push ecx
cdq
push edx
push eax
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, dword [esp + 0x64]
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0xa4]
push edx
mov edx, dword [esp + 0xa4]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x44]
push eax
push ecx
push edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
mov edx, dword [esp + 0x58]
add eax, dword [esp + 0x54]
mov ecx, ebx
sar ecx, 0x10
lea ecx, [edx + ecx*4]
mov dword [esp + 0x88], ecx
mov ecx, dword [esp + 0x18]
and ecx, 0xffff0000
sub ecx, ebx
sar ecx, 0x10
test ecx, ecx
jle 0x4ade72
mov ebx, dword [esp + 0x34]
add eax, 0xffff8000
add ebx, 0xffff8000
mov dword [esp + 0xc], eax
mov dword [esp + 0x3c], ebx
jmp 0x4adb50
sub ecx, 1
mov dword [esp + 0x80], ecx
xor ecx, ecx
cmp ebx, ecx
jle 0x4adb7c
mov eax, ebx
and eax, 0xffff0000
mov dword [esp + 0x4c], eax
sar eax, 0x10
lea edx, [ebp - 1]
cmp eax, edx
mov eax, dword [esp + 0xc]
setl cl
jmp 0x4adb80
mov dword [esp + 0x4c], ecx
test eax, eax
mov dword [esp + 0x2c], ecx
jle 0x4adbb9
mov ecx, dword [esp + 0xbc]
mov edx, eax
and edx, 0xffff0000
xor ebx, ebx
mov eax, edx
sar eax, 0x10
add ecx, 0xffffffff
cmp eax, ecx
mov eax, dword [esp + 0xc]
setge bl
sub ebx, 1
and ebx, ebp
mov dword [esp + 0x48], ebx
mov ebx, dword [esp + 0x3c]
jmp 0x4adbbf
xor edx, edx
mov dword [esp + 0x48], edx
mov ecx, edx
sub ebx, dword [esp + 0x4c]
sar ecx, 0x10
imul ecx, ebp
mov ebp, dword [esp + 0x4c]
sar ebp, 0x10
add ecx, ebp
mov ebp, dword [esi + ecx*4]
sub eax, edx
mov dword [esp + 0x14], ebp
mov ebp, dword [esp + 0x2c]
add ebp, ecx
mov ebp, dword [esi + ebp*4]
mov dword [esp + 0x1c], ebp
mov ebp, dword [esp + 0x48]
add ecx, ebp
mov ebp, dword [esi + ecx*4]
mov dword [esp + 0x10], ebp
mov ebp, dword [esp + 0x2c]
and ebx, 0xfffe
add ebx, 1
and eax, 0xfffe
add eax, 1
add ebp, ecx
mov ecx, dword [esi + ebp*4]
mov dword [esp + 0x2c], ebx
mov ebp, 0x10000
sub ebp, ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x34], ebp
mov edx, 0x10000
sub edx, eax
imul ebp, edx
imul edx, dword [esp + 0x2c]
shr ebx, 0x18
shr edx, 0x10
shr ebp, 0x10
imul ebp, ebx
mov ebx, dword [esp + 0x1c]
shr ebx, 0x18
imul edx, ebx
mov ebx, dword [esp + 0x10]
shr edx, 0x10
mov dword [esp + 0x4c], edx
mov edx, dword [esp + 0x34]
imul edx, eax
imul eax, dword [esp + 0x2c]
shr edx, 0x10
shr ebx, 0x18
imul edx, ebx
shr eax, 0x10
mov ebx, ecx
shr ebx, 0x18
imul eax, ebx
shr eax, 0x10
mov ebx, eax
shr edx, 0x10
mov dword [esp + 0x2c], ebx
mov eax, ecx
and eax, 0xff0000
imul eax, ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x48], edx
and ebx, 0xff0000
imul ebx, edx
mov edx, dword [esp + 0x1c]
and edx, 0xff0000
imul edx, dword [esp + 0x4c]
add eax, ebx
movzx ebx, byte [esp + 0x10]
add eax, edx
mov edx, dword [esp + 0x14]
and edx, 0xff0000
shr ebp, 0x10
imul edx, ebp
add eax, edx
movzx edx, cl
imul edx, dword [esp + 0x2c]
and eax, 0xff0000ff
imul ebx, dword [esp + 0x48]
mov dword [esp + 0x60], ebp
add edx, ebx
movzx ebx, byte [esp + 0x1c]
imul ebx, dword [esp + 0x4c]
movzx ebp, byte [esp + 0x14]
add edx, ebx
mov ebx, dword [esp + 0x60]
imul ebp, ebx
add edx, ebp
and ecx, 0xff00
imul ecx, dword [esp + 0x2c]
and edx, 0xff00
or eax, edx
mov edx, dword [esp + 0x10]
mov ebp, dword [esp + 0x4c]
and edx, 0xff00
imul edx, dword [esp + 0x48]
add ecx, edx
mov edx, dword [esp + 0x1c]
and edx, 0xff00
imul edx, ebp
add ecx, edx
mov edx, dword [esp + 0x14]
and edx, 0xff00
imul edx, ebx
add ecx, edx
mov edx, dword [esp + 0x48]
and ecx, 0xff0000
or eax, ecx
mov ecx, dword [esp + 0x2c]
add ecx, edx
add ecx, ebp
add ecx, ebx
shr eax, 8
shl ecx, 0x18
and ecx, 0xff000000
or eax, ecx
mov ecx, eax
movzx ebx, al
imul ebx, dword [edi + 0xc]
mov edx, dword [edi]
and eax, 0xff00
imul eax, dword [edi + 8]
and ecx, 0xff0000
imul ecx, dword [edi + 4]
and eax, 0xff0000
and ecx, 0xff0000ff
and ebx, 0xff00
or ecx, ebx
or ecx, eax
mov ebp, dword [esp + 0x88]
shr ecx, 8
mov eax, ecx
and eax, 0xff0000
imul eax, edx
mov ebx, ecx
and ebx, 0xff00
imul ebx, edx
movzx ecx, cl
imul ecx, edx
mov edx, dword [ebp]
and eax, 0xff0000ff
and ebx, 0xff0000
or eax, ebx
and ecx, 0xff00
or eax, ecx
shr eax, 8
mov ebx, eax
and eax, 0xff00
mov ecx, edx
and ebx, 0xff00ff
and ecx, 0xff00ff
add ecx, ebx
and edx, 0xff00
add edx, eax
mov eax, ecx
shr eax, 8
and eax, 1
mov ebx, ecx
imul eax, eax, 0xff
shr ebx, 0x18
and ebx, 1
imul ebx, ebx, 0xffff0000
or eax, ebx
or eax, ecx
mov ebx, dword [esp + 0x3c]
add ebx, dword [esp + 0x98]
mov ecx, edx
shr ecx, 0x10
and ecx, 1
neg ecx
shl ecx, 8
and eax, 0xffff00ff
or ecx, edx
and ecx, 0xff00
or eax, ecx
mov ecx, dword [esp + 0x80]
or eax, 0xff000000
mov dword [ebp], eax
mov eax, dword [esp + 0xc]
add eax, dword [esp + 0x94]
add ebp, 4
test ecx, ecx
mov dword [esp + 0x88], ebp
mov ebp, dword [esp + 0x50]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0xc], eax
jg 0x4adb50
mov eax, dword [esp + 0xb4]
add dword [esp + 0x38], eax
add dword [esp + 0x20], eax
mov eax, dword [esp + 0xb0]
mov edx, dword [esp + 0x78]
mov ecx, dword [esp + 0xac]
add dword [esp + 0x18], edx
add dword [esp + 0x54], ecx
add eax, eax
add eax, eax
add dword [esp + 0x58], eax
mov eax, dword [esp + 0xb8]
add dword [esp + 0x64], eax
cmp dword [esp + 0x30], 0
jg 0x4ada96
jmp 0x4ae333
jle 0x4ae333
cmp dword [esp + 0x30], 0
jle 0x4ae333
mov eax, dword [esp + 0x98]
cdq
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0x6c], edx
cdq
mov dword [esp + 0x44], edx
mov edx, dword [esp + 0x38]
add edx, 0xffff
add ecx, 0xffff
mov dword [esp + 0x40], eax
mov dword [esp + 0x4c], edx
mov dword [esp + 0x2c], ecx
mov ebx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x6c]
sub dword [esp + 0x30], 1
and ebx, 0xffff0000
push ecx
mov ecx, dword [esp + 0x6c]
mov eax, ebx
sub eax, dword [esp + 0x3c]
push ecx
cdq
push edx
push eax
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, dword [esp + 0x64]
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0xa4]
push edx
mov edx, dword [esp + 0xa4]
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0x44]
push eax
push ecx
push edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
mov edx, dword [esp + 0x58]
add eax, dword [esp + 0x54]
mov ecx, ebx
sar ecx, 0x10
lea ecx, [edx + ecx*4]
mov dword [esp + 0x34], ecx
mov ecx, dword [esp + 0x4c]
and ecx, 0xffff0000
sub ecx, ebx
sar ecx, 0x10
test ecx, ecx
jle 0x4ae2ec
mov ebx, dword [esp + 0x80]
add eax, 0xffff8000
add ebx, 0xffff8000
mov dword [esp + 0x10], eax
mov dword [esp + 0x48], ebx
lea esp, [esp]
sub ecx, 1
mov dword [esp + 0x80], ecx
xor ecx, ecx
cmp ebx, ecx
jle 0x4adfec
mov eax, ebx
and eax, 0xffff0000
mov dword [esp + 0x20], eax
sar eax, 0x10
lea edx, [ebp - 1]
cmp eax, edx
mov eax, dword [esp + 0x10]
setl cl
jmp 0x4adff0
mov dword [esp + 0x20], ecx
test eax, eax
mov dword [esp + 0x18], ecx
jle 0x4ae02c
mov ecx, dword [esp + 0xbc]
mov edx, eax
and edx, 0xffff0000
xor ebx, ebx
mov eax, edx
sar eax, 0x10
add ecx, 0xffffffff
cmp eax, ecx
mov eax, dword [esp + 0x10]
setge bl
sub ebx, 1
and ebx, ebp
mov dword [esp + 0x88], ebx
mov ebx, dword [esp + 0x48]
jmp 0x4ae035
xor edx, edx
mov dword [esp + 0x88], edx
mov ecx, edx
sar ecx, 0x10
imul ecx, ebp
mov ebp, dword [esp + 0x20]
sar ebp, 0x10
add ecx, ebp
mov ebp, dword [esi + ecx*4]
mov dword [esp + 0x14], ebp
mov ebp, dword [esp + 0x18]
add ebp, ecx
mov ebp, dword [esi + ebp*4]
sub eax, edx
mov dword [esp + 0xc], ebp
mov ebp, dword [esp + 0x88]
add ecx, ebp
mov ebp, dword [esi + ecx*4]
mov dword [esp + 0x60], ebp
mov ebp, dword [esp + 0x18]
add ecx, ebp
mov ecx, dword [esi + ecx*4]
mov dword [esp + 0x18], ecx
mov ebp, dword [esp + 0x14]
mov ecx, ebx
sub ecx, dword [esp + 0x20]
and eax, 0xfffe
add eax, 1
and ecx, 0xfffe
add ecx, 1
mov dword [esp + 0x88], ecx
mov ebx, 0x10000
sub ebx, ecx
mov ecx, ebx
imul ebx, eax
mov edx, 0x10000
sub edx, eax
imul eax, dword [esp + 0x88]
imul ecx, edx
imul edx, dword [esp + 0x88]
shr edx, 0x10
shr ebp, 0x18
shr ecx, 0x10
imul ecx, ebp
mov ebp, dword [esp + 0xc]
shr ebp, 0x18
imul edx, ebp
mov ebp, dword [esp + 0x60]
shr edx, 0x10
mov dword [esp + 0x20], edx
shr ebx, 0x10
mov edx, ebp
shr edx, 0x18
imul ebx, edx
mov edx, dword [esp + 0x18]
shr ebx, 0x10
shr eax, 0x10
mov dword [esp + 0x1c], ebx
mov ebx, edx
shr ebx, 0x18
imul eax, ebx
shr eax, 0x10
mov ebx, eax
mov eax, edx
and eax, 0xff00
imul eax, ebx
mov edx, ebp
and edx, 0xff00
imul edx, dword [esp + 0x1c]
add eax, edx
mov edx, dword [esp + 0xc]
and edx, 0xff00
imul edx, dword [esp + 0x20]
add eax, edx
mov edx, dword [esp + 0x14]
and edx, 0xff00
shr ecx, 0x10
imul edx, ecx
add eax, edx
mov edx, dword [esp + 0x18]
and eax, 0xff0000
mov dword [esp + 0x3c], ebx
and edx, 0xff0000
imul edx, ebx
mov ebx, dword [esp + 0xc]
and ebx, 0xff0000
imul ebx, dword [esp + 0x20]
and ebp, 0xff0000
imul ebp, dword [esp + 0x1c]
add edx, ebp
add edx, ebx
mov ebx, dword [esp + 0x14]
and ebx, 0xff0000
imul ebx, ecx
add edx, ebx
movzx ebx, byte [esp + 0x18]
imul ebx, dword [esp + 0x3c]
movzx ebp, byte [esp + 0xc]
and edx, 0xff0000ff
or eax, edx
movzx edx, byte [esp + 0x60]
imul edx, dword [esp + 0x1c]
add ebx, edx
mov edx, dword [esp + 0x20]
imul ebp, edx
add ebx, ebp
movzx ebp, byte [esp + 0x14]
imul ebp, ecx
add ebx, ebp
mov ebp, dword [esp + 0x1c]
and ebx, 0xff00
or eax, ebx
mov ebx, dword [esp + 0x3c]
add ebx, ebp
add ebx, edx
add ebx, ecx
shr eax, 8
shl ebx, 0x18
and ebx, 0xff000000
or eax, ebx
mov ecx, eax
movzx ebx, al
imul ebx, dword [edi + 0xc]
mov edx, dword [edi]
and eax, 0xff00
imul eax, dword [edi + 8]
and ecx, 0xff0000
imul ecx, dword [edi + 4]
and eax, 0xff0000
and ecx, 0xff0000ff
and ebx, 0xff00
or ecx, ebx
or ecx, eax
mov ebp, dword [esp + 0x34]
shr ecx, 8
mov eax, ecx
and eax, 0xff0000
imul eax, edx
mov ebx, ecx
and ebx, 0xff00
imul ebx, edx
movzx ecx, cl
imul ecx, edx
mov edx, dword [ebp]
and eax, 0xff0000ff
and ebx, 0xff0000
or eax, ebx
and ecx, 0xff00
or eax, ecx
shr eax, 8
mov ebx, eax
and eax, 0xff00
mov ecx, edx
and ebx, 0xff00ff
and ecx, 0xff00ff
add ecx, ebx
and edx, 0xff00
add edx, eax
mov eax, ecx
shr eax, 8
and eax, 1
mov ebx, ecx
imul eax, eax, 0xff
shr ebx, 0x18
and ebx, 1
imul ebx, ebx, 0xffff0000
or eax, ebx
or eax, ecx
mov ebx, dword [esp + 0x48]
add ebx, dword [esp + 0x98]
mov ecx, edx
shr ecx, 0x10
and ecx, 1
neg ecx
shl ecx, 8
and eax, 0xffff00ff
or ecx, edx
and ecx, 0xff00
or eax, ecx
mov ecx, dword [esp + 0x80]
or eax, 0xff000000
mov dword [ebp], eax
mov eax, dword [esp + 0x10]
add eax, dword [esp + 0x94]
add ebp, 4
test ecx, ecx
mov dword [esp + 0x34], ebp
mov ebp, dword [esp + 0x50]
mov dword [esp + 0x48], ebx
mov dword [esp + 0x10], eax
jg 0x4adfc0
mov eax, dword [esp + 0xb4]
add dword [esp + 0x38], eax
add dword [esp + 0x4c], eax
mov eax, dword [esp + 0xb0]
mov edx, dword [esp + 0x78]
mov ecx, dword [esp + 0xac]
add dword [esp + 0x2c], edx
add dword [esp + 0x54], ecx
add eax, eax
add eax, eax
add dword [esp + 0x58], eax
mov eax, dword [esp + 0xb8]
add dword [esp + 0x64], eax
cmp dword [esp + 0x30], 0
jg 0x4adf07
mov eax, dword [esp + 0x74]
sub eax, dword [esp + 0x24]
mov dword [esp + 0x30], eax
je 0x4aecc3
mov eax, dword [esp + 0x5c]
mov ecx, dword [eax + 4]
mov ebx, dword [eax]
mov edx, dword [esp + 0x9c]
mov eax, dword [edx + 4]
sub eax, ecx
cdq
push edx
push eax
push 0x10000
push 0
mov dword [esp + 0x90], ecx
mov dword [esp + 0x1c], ebx
call fcn.006372b0
mov ecx, eax
mov eax, edx
mov edx, dword [esp + 0x9c]
mov dword [esp + 0x74], eax
mov eax, dword [edx]
sub eax, ebx
cdq
push edx
push eax
mov eax, dword [esp + 0x7c]
push eax
push ecx
call fcn.0063a250
mov cl, 0x20
call fcn.00643e20
mov ecx, eax
mov eax, dword [esp + 0x24]
shl eax, 0x10
sub eax, dword [esp + 0x80]
mov dword [esp + 0x4c], ecx
imul ecx
mov cl, 0x10
call fcn.00643e20
mov edx, dword [esp + 0x28]
mov ecx, eax
mov eax, ebx
add ecx, eax
cmp edx, eax
jge 0x4ae84a
cmp dword [esp + 0x30], 0
jle 0x4aecc3
mov eax, dword [esp + 0x98]
cdq
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0x6c], edx
cdq
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0x44], edx
lea edx, [eax*4]
mov eax, dword [esp + 0x38]
add ecx, 0xffff
add eax, 0xffff
mov dword [esp + 0x48], edx
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x20], eax
mov ebx, dword [esp + 0x20]
mov ecx, dword [esp + 0x6c]
sub dword [esp + 0x30], 1
and ebx, 0xffff0000
push ecx
mov ecx, dword [esp + 0x6c]
mov eax, ebx
sub eax, dword [esp + 0x3c]
push ecx
cdq
push edx
push eax
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, dword [esp + 0x64]
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0xa4]
push edx
mov edx, dword [esp + 0xa4]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x44]
push eax
push ecx
push edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
mov edx, dword [esp + 0x58]
add eax, dword [esp + 0x54]
mov ecx, ebx
sar ecx, 0x10
lea ecx, [edx + ecx*4]
mov dword [esp + 0x60], ecx
mov ecx, dword [esp + 0x3c]
and ecx, 0xffff0000
sub ecx, ebx
sar ecx, 0x10
test ecx, ecx
jle 0x4ae800
mov ebx, dword [esp + 0x74]
add eax, 0xffff8000
add ebx, 0xffff8000
mov dword [esp + 0x10], eax
mov dword [esp + 0x88], ebx
mov edi, edi
sub ecx, 1
xor edx, edx
cmp ebx, edx
mov dword [esp + 0x2c], ecx
jle 0x4ae501
mov eax, ebx
and eax, 0xffff0000
mov dword [esp + 0x28], eax
xor ecx, ecx
sar eax, 0x10
lea edx, [ebp - 1]
cmp eax, edx
mov eax, dword [esp + 0x10]
setl cl
mov edx, ecx
mov dword [esp + 0x78], ecx
jmp 0x4ae509
mov dword [esp + 0x28], edx
mov dword [esp + 0x78], edx
test eax, eax
jle 0x4ae53d
mov edx, dword [esp + 0xbc]
and eax, 0xffff0000
add edx, 0xffffffff
mov dword [esp + 0x24], eax
sar eax, 0x10
xor ecx, ecx
cmp eax, edx
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x78]
setge cl
sub ecx, 1
and ecx, ebp
mov dword [esp + 0x34], ecx
jmp 0x4ae54d
mov dword [esp + 0x24], 0
mov dword [esp + 0x34], 0
mov ecx, dword [esp + 0x24]
sub ebx, dword [esp + 0x28]
sub eax, dword [esp + 0x24]
sar ecx, 0x10
imul ecx, ebp
mov ebp, dword [esp + 0x28]
sar ebp, 0x10
add ecx, ebp
mov ebp, dword [esi + ecx*4]
mov dword [esp + 0x1c], ebp
lea ebp, [ecx + edx]
mov ebp, dword [esi + ebp*4]
mov dword [esp + 0x14], ebp
mov ebp, dword [esp + 0x34]
and ebx, 0xfffe
add ebx, 1
add ecx, ebp
mov ebp, dword [esi + ecx*4]
add ecx, edx
and eax, 0xfffe
add eax, 1
mov dword [esp + 0xc], ebp
mov dword [esp + 0x78], ebx
mov ebp, 0x10000
sub ebp, ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x74], ebp
mov edx, 0x10000
sub edx, eax
imul ebp, edx
imul edx, dword [esp + 0x78]
shr ebx, 0x18
shr edx, 0x10
shr ebp, 0x10
imul ebp, ebx
mov ebx, dword [esp + 0x14]
shr ebx, 0x18
imul edx, ebx
mov ebx, dword [esp + 0xc]
mov ecx, dword [esi + ecx*4]
shr edx, 0x10
mov dword [esp + 0x28], edx
mov edx, dword [esp + 0x74]
imul edx, eax
imul eax, dword [esp + 0x78]
shr edx, 0x10
shr ebx, 0x18
imul edx, ebx
shr eax, 0x10
mov ebx, ecx
shr ebx, 0x18
imul eax, ebx
shr eax, 0x10
mov ebx, eax
shr edx, 0x10
mov dword [esp + 0x24], ebx
mov dword [esp + 0x18], edx
mov eax, ecx
and eax, 0xff0000
imul eax, ebx
mov ebx, dword [esp + 0xc]
and ebx, 0xff0000
imul ebx, edx
mov edx, dword [esp + 0x14]
and edx, 0xff0000
imul edx, dword [esp + 0x28]
add eax, ebx
movzx ebx, byte [esp + 0xc]
imul ebx, dword [esp + 0x18]
add eax, edx
mov edx, dword [esp + 0x1c]
and edx, 0xff0000
shr ebp, 0x10
imul edx, ebp
add eax, edx
movzx edx, cl
imul edx, dword [esp + 0x24]
and eax, 0xff0000ff
add edx, ebx
movzx ebx, byte [esp + 0x14]
mov dword [esp + 0x80], ebp
imul ebx, dword [esp + 0x28]
movzx ebp, byte [esp + 0x1c]
add edx, ebx
mov ebx, dword [esp + 0x80]
imul ebp, ebx
add edx, ebp
and ecx, 0xff00
imul ecx, dword [esp + 0x24]
and edx, 0xff00
or eax, edx
mov edx, dword [esp + 0xc]
mov ebp, dword [esp + 0x28]
and edx, 0xff00
imul edx, dword [esp + 0x18]
add ecx, edx
mov edx, dword [esp + 0x14]
and edx, 0xff00
imul edx, ebp
add ecx, edx
mov edx, dword [esp + 0x1c]
and edx, 0xff00
imul edx, ebx
add ecx, edx
mov edx, dword [esp + 0x18]
and ecx, 0xff0000
or eax, ecx
mov ecx, dword [esp + 0x24]
add ecx, edx
add ecx, ebp
add ecx, ebx
shr eax, 8
shl ecx, 0x18
and ecx, 0xff000000
or eax, ecx
mov ecx, eax
movzx ebx, al
imul ebx, dword [edi + 0xc]
mov edx, dword [edi]
and eax, 0xff00
imul eax, dword [edi + 8]
and ecx, 0xff0000
imul ecx, dword [edi + 4]
and ebx, 0xff00
and eax, 0xff0000
and ecx, 0xff0000ff
or ecx, ebx
or ecx, eax
mov ebp, dword [esp + 0x60]
shr ecx, 8
mov eax, ecx
and eax, 0xff0000
imul eax, edx
mov ebx, ecx
and ebx, 0xff00
imul ebx, edx
movzx ecx, cl
imul ecx, edx
mov edx, dword [ebp]
and eax, 0xff0000ff
and ebx, 0xff0000
or eax, ebx
and ecx, 0xff00
or eax, ecx
shr eax, 8
mov ebx, eax
and ebx, 0xff00ff
and eax, 0xff00
mov ecx, edx
and ecx, 0xff00ff
add ecx, ebx
and edx, 0xff00
add edx, eax
mov eax, ecx
shr eax, 8
mov ebx, ecx
shr ebx, 0x18
and eax, 1
and ebx, 1
imul eax, eax, 0xff
imul ebx, ebx, 0xffff0000
or eax, ebx
or eax, ecx
mov ebx, dword [esp + 0x88]
add ebx, dword [esp + 0x98]
mov ecx, edx
shr ecx, 0x10
and ecx, 1
neg ecx
shl ecx, 8
and eax, 0xffff00ff
or ecx, edx
and ecx, 0xff00
or eax, ecx
mov ecx, dword [esp + 0x2c]
or eax, 0xff000000
mov dword [ebp], eax
mov eax, dword [esp + 0x10]
add eax, dword [esp + 0x94]
add ebp, 4
test ecx, ecx
mov dword [esp + 0x60], ebp
mov ebp, dword [esp + 0x50]
mov dword [esp + 0x88], ebx
mov dword [esp + 0x10], eax
jg 0x4ae4d0
mov eax, dword [esp + 0xb4]
mov edx, dword [esp + 0x4c]
add dword [esp + 0x38], eax
add dword [esp + 0x20], eax
add dword [esp + 0x3c], edx
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0xac]
add dword [esp + 0x58], eax
add dword [esp + 0x64], ecx
add dword [esp + 0x54], edx
cmp dword [esp + 0x30], 0
jg 0x4ae41f
pop esi
pop ebp
pop ebx
add esp, 0xb4
ret
jle 0x4aecc3
cmp dword [esp + 0x30], 0
jle 0x4aecc3
mov eax, dword [esp + 0x98]
cdq
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0x6c], edx
cdq
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0x44], edx
lea edx, [eax*4]
mov eax, dword [esp + 0x38]
add eax, 0xffff
add ecx, 0xffff
mov dword [esp + 0x48], edx
mov dword [esp + 0x20], eax
mov dword [esp + 0x3c], ecx
mov ebx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x6c]
sub dword [esp + 0x30], 1
and ebx, 0xffff0000
push ecx
mov ecx, dword [esp + 0x6c]
mov eax, ebx
sub eax, dword [esp + 0x3c]
push ecx
cdq
push edx
push eax
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, dword [esp + 0x64]
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0xa4]
push edx
mov edx, dword [esp + 0xa4]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x44]
push eax
push ecx
push edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
mov edx, dword [esp + 0x58]
add eax, dword [esp + 0x54]
mov ecx, ebx
sar ecx, 0x10
lea ecx, [edx + ecx*4]
mov dword [esp + 0x60], ecx
mov ecx, dword [esp + 0x20]
and ecx, 0xffff0000
sub ecx, ebx
sar ecx, 0x10
test ecx, ecx
jle 0x4aec83
mov ebx, dword [esp + 0x74]
add eax, 0xffff8000
add ebx, 0xffff8000
mov dword [esp + 0x10], eax
mov dword [esp + 0x88], ebx
sub ecx, 1
xor edx, edx
cmp ebx, edx
mov dword [esp + 0x2c], ecx
jle 0x4ae984
mov eax, ebx
and eax, 0xffff0000
mov dword [esp + 0x28], eax
xor ecx, ecx
sar eax, 0x10
lea edx, [ebp - 1]
cmp eax, edx
mov eax, dword [esp + 0x10]
setl cl
mov edx, ecx
mov dword [esp + 0x78], ecx
jmp 0x4ae98c
mov dword [esp + 0x28], edx
mov dword [esp + 0x78], edx
test eax, eax
jle 0x4ae9c0
mov edx, dword [esp + 0xbc]
and eax, 0xffff0000
add edx, 0xffffffff
mov dword [esp + 0x24], eax
sar eax, 0x10
xor ecx, ecx
cmp eax, edx
mov edx, dword [esp + 0x78]
mov eax, dword [esp + 0x10]
setge cl
sub ecx, 1
and ecx, ebp
mov dword [esp + 0x34], ecx
jmp 0x4ae9d0
mov dword [esp + 0x24], 0
mov dword [esp + 0x34], 0
mov ecx, dword [esp + 0x24]
sub ebx, dword [esp + 0x28]
sub eax, dword [esp + 0x24]
sar ecx, 0x10
imul ecx, ebp
mov ebp, dword [esp + 0x28]
sar ebp, 0x10
add ecx, ebp
mov ebp, dword [esi + ecx*4]
mov dword [esp + 0x1c], ebp
lea ebp, [ecx + edx]
mov ebp, dword [esi + ebp*4]
mov dword [esp + 0x14], ebp
mov ebp, dword [esp + 0x34]
and ebx, 0xfffe
add ebx, 1
add ecx, ebp
mov ebp, dword [esi + ecx*4]
add ecx, edx
and eax, 0xfffe
add eax, 1
mov dword [esp + 0xc], ebp
mov dword [esp + 0x78], ebx
mov ebp, 0x10000
sub ebp, ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x74], ebp
mov edx, 0x10000
sub edx, eax
imul ebp, edx
imul edx, dword [esp + 0x78]
shr ebx, 0x18
shr edx, 0x10
shr ebp, 0x10
imul ebp, ebx
mov ebx, dword [esp + 0x14]
shr ebx, 0x18
imul edx, ebx
mov ebx, dword [esp + 0xc]
mov ecx, dword [esi + ecx*4]
shr edx, 0x10
mov dword [esp + 0x28], edx
mov edx, dword [esp + 0x74]
imul edx, eax
imul eax, dword [esp + 0x78]
shr edx, 0x10
shr ebx, 0x18
imul edx, ebx
shr eax, 0x10
mov ebx, ecx
shr ebx, 0x18
imul eax, ebx
shr eax, 0x10
mov ebx, eax
shr edx, 0x10
mov dword [esp + 0x24], ebx
mov dword [esp + 0x18], edx
mov eax, ecx
and eax, 0xff0000
imul eax, ebx
mov ebx, dword [esp + 0xc]
and ebx, 0xff0000
imul ebx, edx
mov edx, dword [esp + 0x14]
and edx, 0xff0000
imul edx, dword [esp + 0x28]
add eax, ebx
movzx ebx, byte [esp + 0xc]
imul ebx, dword [esp + 0x18]
add eax, edx
mov edx, dword [esp + 0x1c]
and edx, 0xff0000
shr ebp, 0x10
imul edx, ebp
add eax, edx
movzx edx, cl
imul edx, dword [esp + 0x24]
and eax, 0xff0000ff
add edx, ebx
movzx ebx, byte [esp + 0x14]
mov dword [esp + 0x80], ebp
imul ebx, dword [esp + 0x28]
movzx ebp, byte [esp + 0x1c]
add edx, ebx
mov ebx, dword [esp + 0x80]
imul ebp, ebx
add edx, ebp
and ecx, 0xff00
imul ecx, dword [esp + 0x24]
and edx, 0xff00
or eax, edx
mov edx, dword [esp + 0xc]
mov ebp, dword [esp + 0x28]
and edx, 0xff00
imul edx, dword [esp + 0x18]
add ecx, edx
mov edx, dword [esp + 0x14]
and edx, 0xff00
imul edx, ebp
add ecx, edx
mov edx, dword [esp + 0x1c]
and edx, 0xff00
imul edx, ebx
add ecx, edx
mov edx, dword [esp + 0x18]
and ecx, 0xff0000
or eax, ecx
mov ecx, dword [esp + 0x24]
add ecx, edx
add ecx, ebp
add ecx, ebx
shr eax, 8
shl ecx, 0x18
and ecx, 0xff000000
or eax, ecx
movzx ecx, al
imul ecx, dword [edi + 0xc]
mov ebx, eax
mov edx, dword [edi]
and ebx, 0xff00
imul ebx, dword [edi + 8]
and eax, 0xff0000
imul eax, dword [edi + 4]
and ebx, 0xff0000
and eax, 0xff0000ff
and ecx, 0xff00
or ecx, ebx
or ecx, eax
mov ebp, dword [esp + 0x60]
shr ecx, 8
mov eax, ecx
and eax, 0xff0000
imul eax, edx
mov ebx, ecx
and ebx, 0xff00
imul ebx, edx
movzx ecx, cl
imul ecx, edx
mov edx, dword [ebp]
and eax, 0xff0000ff
and ebx, 0xff0000
or eax, ebx
and ecx, 0xff00
or eax, ecx
shr eax, 8
mov ebx, eax
and ebx, 0xff00ff
and eax, 0xff00
mov ecx, edx
and ecx, 0xff00ff
add ecx, ebx
and edx, 0xff00
add edx, eax
mov eax, ecx
shr eax, 8
mov ebx, ecx
shr ebx, 0x18
and eax, 1
and ebx, 1
imul eax, eax, 0xff
imul ebx, ebx, 0xffff0000
or eax, ebx
or eax, ecx
mov ebx, dword [esp + 0x88]
add ebx, dword [esp + 0x98]
mov ecx, edx
shr ecx, 0x10
and ecx, 1
neg ecx
shl ecx, 8
and eax, 0xffff00ff
or ecx, edx
and ecx, 0xff00
or eax, ecx
mov ecx, dword [esp + 0x2c]
or eax, 0xff000000
mov dword [ebp], eax
mov eax, dword [esp + 0x10]
add eax, dword [esp + 0x94]
add ebp, 4
test ecx, ecx
mov dword [esp + 0x60], ebp
mov ebp, dword [esp + 0x50]
mov dword [esp + 0x88], ebx
mov dword [esp + 0x10], eax
jg 0x4ae953
mov eax, dword [esp + 0xb4]
mov edx, dword [esp + 0x4c]
add dword [esp + 0x38], eax
add dword [esp + 0x20], eax
add dword [esp + 0x3c], edx
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0xac]
add dword [esp + 0x58], eax
add dword [esp + 0x64], ecx
add dword [esp + 0x54], edx
cmp dword [esp + 0x30], 0
jg 0x4ae8a4
pop esi
pop ebp
pop ebx
add esp, 0xb4
ret