Function at 0x4ace80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x9aee30]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x1a4]
cmp eax, dword [ecx + 8]
jbe 0x4af6f7
sub esp, 0x224
lea edi, [esp + 0x240]
xor eax, eax
call fcn.0046cb2b
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x228]
xor ebx, ebx
xor ebp, ebp
xor esi, esi
mov edi, 0xffffffff
mov ecx, 0xffffffff
mov dword [esp + 0x88], ecx
mov ecx, 0xffffffff
mov dword [esp + 0xd8], ecx
xor ecx, ecx
mov dword [esp + 0xbc], ecx
xor ecx, ecx
mov byte [esp + 0x37], cl
xor edx, edx
mov byte [esp + 0x36], dl
mov edx, 0xffffffff
mov dword [esp + 0x8c], edx
xor edx, edx
mov dword [esp + 0xa8], edx
xor edx, edx
mov dword [esp + 0xc8], edx
xor edx, edx
mov dword [esp + 0x1b8], edx
xor ebx, ebx
mov dword [esp + 0x9c], ebx
xor ebx, ebx
mov dword [esp + 0xac], ebx
xor ebx, ebx
mov dword [esp + 0x1bc], ebx
mov ebx, dword [esp + 0x234]
mov dword [esp + 0x14c], ebx
mov ebx, dword [esp + 0x230]
mov dword [esp + 0x20c], ebx
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x228]
xor ebx, ebx
jmp 0x4acfa4
mov edx, dword [esp + 0x1f4]
mov ebx, dword [esp + 0xc4]
mov ebp, dword [esp + 0x84]
mov esi, dword [esp + 0x1b4]
mov dword [esp + 0x1b8], eax
mov dword [esp + 0x14c], edi
mov dword [esp + 0x20c], ecx
mov ecx, dword [esp + 0xcc]
mov edi, dword [esp + 0xa0]
mov dword [esp + 0x148], ecx
mov dword [esp + 0x208], edx
mov dword [esp + 0x1b4], esi
mov dword [esp + 0xc4], ebx
mov dword [esp + 0xa0], edi
mov dword [esp + 0x84], ebp
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.004a8460
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x148]
mov ebx, edx
sub ebx, ecx
mov ebp, dword [esp + 0x10]
mov esi, dword [esp + 8]
cmp edx, ebx
jb 0x4af6ef
mov edx, dword [esp + 0xc]
cmp edx, ebx
ja 0x4af6e6
mov dword [esp + 0x94], ebp
mov dword [esp + 0x148], ebx
mov dword [esp + 0xcc], ecx
mov dword [esp + 0x1f4], eax
mov dword [esp + 0xa4], edx
mov dword [esp + 0x1c0], esi
mov eax, dword [esp + 0x20c]
mov dword [esp], eax
mov eax, dword [esp + 0x14c]
mov dword [esp + 4], eax
call fcn.004acbd0
mov eax, dword [esp + 0x148]
mov ecx, dword [esp + 0xa4]
sub eax, ecx
mov edx, eax
neg eax
sar eax, 0x1f
and eax, ecx
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x208]
add eax, ebp
mov ebp, dword [esp + 0x10]
mov dword [esp + 0x20c], ebp
mov esi, dword [esp + 0x14]
mov dword [esp + 0xb4], esi
test ebx, ebx
jne 0x4aefa4
mov edi, dword [esp + 0x94]
test edi, edi
je 0x4adf6e
mov dword [esp + 0x14c], edx
mov dword [esp + 0x1fc], eax
mov ecx, edi
and edi, 0xffff
cmp edi, 0x106
jg 0x4ad8aa
cmp edi, 0x23
jg 0x4ad64a
cmp edi, 0x21
jg 0x4ad542
cmp edi, 0x17
jne 0x4ad1bc
mov dword [esp + 0x98], ebx
cmp esi, 3
jl 0x4ad111
cmp word [ebp], 0x5455
jne 0x4ad111
cmp byte [ebp + 2], 0x43
jne 0x4ad111
lea ecx, [esi - 3]
mov edi, ecx
neg ecx
sar ecx, 0x1f
and ecx, 3
mov eax, dword [0x964434]
add ecx, ebp
jmp 0x4adf52
mov dword [esp], ebp
mov dword [esp + 4], esi
call fcn.004af710
movzx eax, byte [esp + 0xc]
test al, al
je 0x4ad191
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xb4]
cmp ecx, edx
ja 0x4af6e1
mov esi, edx
sub esi, ecx
mov eax, esi
neg eax
sar eax, 0x1f
and eax, ecx
mov edx, dword [esp + 0x20c]
lea ebp, [eax + edx]
mov edx, dword [esp + 0x14c]
mov eax, dword [esp + 0x1b8]
mov ebx, dword [esp + 0x98]
mov dword [esp + 0x84], ecx
mov edi, dword [esp + 0x20c]
mov dword [esp + 0x1b4], edi
mov ecx, ebp
mov edi, esi
mov ebp, dword [esp + 0x20c]
mov esi, dword [esp + 0xb4]
jmp 0x4adf52
mov ebx, dword [0x964a20]
mov edx, dword [esp + 0x14c]
mov ebp, dword [esp + 0x20c]
mov esi, dword [esp + 0xb4]
mov eax, dword [esp + 0x1b8]
mov ecx, ebp
mov edi, esi
jmp 0x4adf52
cmp edi, 0x18
jl 0x4adc76
cmp ecx, 0x18
je 0x4ad1d4
cmp ecx, 0x1a
je 0x4ad1d4
cmp ecx, 0x1b
jne 0x4ad1fd
test esi, esi
je 0x4ad1f8
cmp byte [ebp], 0x5a
jne 0x4ad1f8
lea ecx, [esi - 1]
mov edi, ecx
neg ecx
sar ecx, 0x1f
and ecx, 1
add ecx, ebp
mov eax, dword [0x964434]
jmp 0x4adf52
cmp ecx, 0x1b
je 0x4ad202
cmp ecx, 0x20
jne 0x4ad26e
cmp esi, 6
jge 0x4ad21d
mov ebx, dword [0x964a20]
mov eax, dword [esp + 0x1b8]
mov ecx, ebp
mov edi, esi
jmp 0x4adf52
cmp byte [ebp + 3], 0x3a
je 0x4ad239
mov ebx, dword [0x964a20]
mov eax, dword [esp + 0x1b8]
mov ecx, ebp
mov edi, esi
jmp 0x4adf52
lea ecx, [esi - 6]
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 6
lea edi, [ebp + 1]
lea eax, [ebp + 4]
add ecx, ebp
mov dword [esp + 0x10c], eax
lea eax, [0x6cf9ed]
mov dword [esp + 0x1f8], eax
mov eax, dword [esp + 0x10c]
jmp 0x4ad429
cmp ecx, 0x1f
je 0x4ad278
cmp ecx, 0x1a
jne 0x4ad2d2
cmp esi, 3
jge 0x4ad293
mov ebx, dword [0x964a20]
mov eax, dword [esp + 0x1b8]
mov ecx, ebp
mov edi, esi
jmp 0x4adf52
lea ecx, [esi - 3]
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 3
lea edi, [ebp + 1]
add ecx, ebp
mov dword [esp + 0x11c], eax
lea eax, [0x6cf9ed]
mov dword [esp + 0x1c4], eax
lea eax, [0x6cf9ed]
mov dword [esp + 0x1f8], eax
mov eax, dword [esp + 0x11c]
jmp 0x4ad422
cmp ecx, 0x1c
je 0x4ad2dc
cmp ecx, 0x21
jne 0x4ad358
cmp esi, 9
jge 0x4ad2f7
mov ebx, dword [0x964a20]
mov eax, dword [esp + 0x1b8]
mov ecx, ebp
mov edi, esi
jmp 0x4adf52
cmp byte [ebp + 3], 0x3a
jne 0x4ad303
cmp byte [ebp + 6], 0x3a
je 0x4ad319
mov ebx, dword [0x964a20]
mov eax, dword [esp + 0x1b8]
mov ecx, ebp
mov edi, esi
jmp 0x4adf52
lea ecx, [esi - 9]
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 9
lea edi, [ebp + 1]
lea eax, [ebp + 4]
lea edx, [ebp + 7]
add ecx, ebp
mov dword [esp + 0x1f8], edx
mov edx, dword [esp + 0x14c]
mov dword [esp + 0x124], eax
mov eax, ecx
mov ecx, ebx
mov ebx, eax
mov eax, dword [esp + 0x124]
jmp 0x4ad404
cmp ecx, 0x19
je 0x4ad362
cmp ecx, 0x1e
jne 0x4ad3b9
cmp esi, 7
jge 0x4ad37d
mov ebx, dword [0x964a20]
mov eax, dword [esp + 0x1b8]
mov ecx, ebp
mov edi, esi
jmp 0x4adf52
lea ecx, [esi - 7]
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 7
lea edi, [ebp + 1]
lea eax, [ebp + 3]
lea edx, [ebp + 5]
add ecx, ebp
mov dword [esp + 0x1f8], edx
mov edx, dword [esp + 0x14c]
mov dword [esp + 0x134], eax
mov eax, ecx
mov ecx, ebx
mov ebx, eax
mov eax, dword [esp + 0x134]
jmp 0x4ad404
cmp esi, 5
jge 0x4ad3d4
mov ebx, dword [0x964a20]
mov eax, dword [esp + 0x1b8]
mov ecx, ebp
mov edi, esi
jmp 0x4adf52
lea ecx, [esi - 5]
mov ebx, ecx
neg ebx
sar ebx, 0x1f
and ebx, 5
lea edi, [ebp + 1]
lea eax, [ebp + 3]
add ebx, ebp
mov dword [esp + 0x12c], eax
lea eax, [0x6cf9ed]
mov dword [esp + 0x1f8], eax
mov eax, dword [esp + 0x12c]
mov dword [esp + 0x1c4], eax
mov eax, dword [esp + 0x1fc]
mov dword [esp + 0x114], ecx
mov ecx, ebx
mov ebx, dword [esp + 0x114]
mov eax, dword [esp + 0x1c4]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x148], ebx
mov dword [esp + 0x208], ecx
mov dword [esp], edi
mov dword [esp + 4], 2
mov byte [esp + 8], 1
call fcn.004acac0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xc0], ecx
test eax, eax
je 0x4ad46a
xor edx, edx
jmp 0x4ad499
mov eax, dword [esp + 0x1c4]
mov dword [esp], eax
mov dword [esp + 4], 2
mov byte [esp + 8], 1
call fcn.004acac0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, eax
mov eax, ecx
mov ecx, dword [esp + 0xc0]
test eax, eax
je 0x4ad4a1
xor ebx, ebx
jmp 0x4ad4de
mov dword [esp + 0xd4], edx
mov eax, dword [esp + 0x1f8]
mov dword [esp], eax
mov dword [esp + 4], 2
mov byte [esp + 8], 1
call fcn.004acac0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0xd4]
mov ebx, eax
mov eax, ecx
mov ecx, dword [esp + 0xc0]
imul ecx, ecx, 0x3c
add ecx, edx
imul ecx, ecx, 0x3c
mov edx, dword [esp + 0x20c]
movzx ebp, byte [edx]
add ecx, ebx
xchg ebp, eax
cmp al, 0x2b
xchg ebp, eax
je 0x4ad50a
xchg ebp, eax
cmp al, 0x2d
xchg ebp, eax
jne 0x4ad504
neg ecx
jmp 0x4ad50a
mov eax, dword [0x964a20]
mov edx, dword [esp + 0x14c]
mov ebp, dword [esp + 0x20c]
mov esi, dword [esp + 0xb4]
mov ebx, eax
mov dword [esp + 0xd8], ecx
mov ecx, dword [esp + 0x208]
mov edi, dword [esp + 0x148]
mov eax, dword [esp + 0x1b8]
jmp 0x4adf52
cmp edi, 0x22
jne 0x4ad60a
sar ecx, 0x10
and ecx, 0xfff
lea ebx, [ecx + 1]
nop
cmp esi, ebx
jge 0x4ad572
mov ebx, dword [0x964a20]
mov eax, dword [esp + 0x1b8]
mov ecx, ebp
mov edi, esi
jmp 0x4adf52
mov dword [esp + 0x78], ecx
mov dword [esp + 0x90], ebx
lea eax, [0x748820]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
call fcn.004b8180
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0x78]
sub eax, ecx
lea esi, [eax - 1]
mov eax, esi
neg eax
sar eax, 0x1f
mov ecx, dword [esp + 0x90]
and ecx, eax
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov edi, dword [esp + 0x18]
mov edx, dword [esp + 0x20c]
add ecx, edx
mov edx, dword [esp + 0x14c]
mov dword [esp + 0x9c], edi
mov edi, esi
mov dword [esp + 0x1bc], ebx
mov dword [esp + 0xbc], eax
mov esi, dword [esp + 0xb4]
mov eax, dword [esp + 0x1b8]
mov ebx, ebp
mov ebp, dword [esp + 0x20c]
jmp 0x4adf52
cmp esi, 2
jl 0x4ad63a
movzx edi, byte [ebp]
xchg edi, eax
cmp al, 0x2e
xchg edi, eax
je 0x4ad621
xchg edi, eax
cmp al, 0x2c
xchg edi, eax
jne 0x4ad63a
movzx edi, byte [ebp + 1]
xchg edi, eax
cmp al, 0x30
xchg edi, eax
jb 0x4ad63a
xchg edi, eax
cmp al, 0x39
xchg edi, eax
ja 0x4ad63a
xor ecx, ecx
jmp 0x4af611
mov eax, dword [esp + 0x1b8]
mov ecx, ebp
mov edi, esi
jmp 0x4adf52
cmp edi, 0x102
jg 0x4ad738
cmp edi, 0x101
je 0x4ad6d1
cmp edi, 0x102
jne 0x4adc76
mov eax, dword [0x965440]
mov ecx, dword [0x965444]
mov edx, dword [0x965448]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.004a9210
mov eax, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
inc eax
mov edx, dword [esp + 0x14c]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x1b8]
mov ecx, ebp
mov edi, esi
mov ebp, dword [esp + 0x20c]
mov esi, dword [esp + 0xb4]
jmp 0x4adf52
mov eax, dword [0x965450]
mov ecx, dword [0x965454]
mov edx, dword [0x965458]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.004a9210
mov eax, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
inc eax
mov edx, dword [esp + 0x14c]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x1b8]
mov ecx, ebp
mov edi, esi
mov ebp, dword [esp + 0x20c]
mov esi, dword [esp + 0xb4]
jmp 0x4adf52
cmp edi, 0x104
jle 0x4ad80e
cmp edi, 0x105
je 0x4ad7b3
cmp edi, 0x106
jne 0x4adc76
mov eax, dword [0x965430]
mov ecx, dword [0x965434]
mov edx, dword [0x965438]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.004a9210
mov ebp, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x14c]
mov eax, dword [esp + 0x1b8]
mov ecx, ebp
mov edi, esi
mov ebp, dword [esp + 0x20c]
mov esi, dword [esp + 0xb4]
jmp 0x4adf52
mov eax, dword [0x965420]
mov ecx, dword [0x965424]
mov edx, dword [0x965428]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.004a9210
mov ebp, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x14c]
mov eax, dword [esp + 0x1b8]
mov ecx, ebp
mov edi, esi
mov ebp, dword [esp + 0x20c]
mov esi, dword [esp + 0xb4]
jmp 0x4adf52
mov dword [esp], ebp
mov dword [esp + 4], esi
cmp ecx, 0x104
sete al
mov byte [esp + 8], al
call fcn.004acac0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0xc]
test eax, eax
je 0x4ad843
mov edx, dword [esp + 0x9c]
mov ebx, dword [esp + 0x1bc]
jmp 0x4ad866
lea edx, [ecx - 1]
cmp edx, 0xb
jbe 0x4ad858
mov edx, 5
lea ebx, [0x6d02aa]
jmp 0x4ad866
mov edx, dword [esp + 0x9c]
mov ebx, dword [esp + 0x1bc]
mov ebp, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
mov dword [esp + 0x9c], edx
mov dword [esp + 0x8c], ecx
mov ecx, ebp
mov edi, esi
mov dword [esp + 0x1bc], ebx
mov edx, dword [esp + 0x14c]
mov ebp, dword [esp + 0x20c]
mov esi, dword [esp + 0xb4]
mov ebx, eax
mov eax, dword [esp + 0x1b8]
jmp 0x4adf52
cmp edi, 0x20c
jg 0x4adb52
cmp edi, 0x10b
jg 0x4ad966
cmp edi, 0x109
jle 0x4ad8de
mov ebx, esi
mov edi, ebp
xor ebx, ebx
mov dword [esp + 0xe0], ebx
mov ebx, esi
jmp 0x4af521
cmp ecx, 0x108
jne 0x4ad90d
test esi, esi
je 0x4ad907
cmp byte [ebp], 0x20
jne 0x4ad901
lea ebx, [esi - 1]
mov edi, ebx
neg ebx
sar ebx, 0x1f
and ebx, 1
add ebx, ebp
jmp 0x4ad911
mov edi, esi
mov ebx, ebp
jmp 0x4ad911
mov edi, esi
mov ebx, ebp
jmp 0x4ad911
mov edi, esi
mov ebx, ebp
mov dword [esp], ebx
mov dword [esp + 4], edi
cmp ecx, 0x109
sete al
mov byte [esp + 8], al
call fcn.004acac0
mov eax, dword [esp + 0xc]
mov ebp, dword [esp + 0x10]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x14c]
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x1b8]
mov ecx, ebp
mov edi, esi
mov ebp, dword [esp + 0x20c]
mov esi, dword [esp + 0xb4]
jmp 0x4adf52
cmp edi, 0x113
jne 0x4ada08
cmp esi, 4
jl 0x4ad984
movzx ecx, byte [ebp]
add ecx, 0xffffffd0
nop
cmp cl, 9
jbe 0x4ad99a
mov ebx, dword [0x964a20]
mov eax, dword [esp + 0x1b8]
mov ecx, ebp
mov edi, esi
jmp 0x4adf52
lea eax, [0x748818]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], 4
call fcn.004b8300
mov eax, dword [esp + 0xb4]
lea esi, [eax - 4]
mov ecx, esi
neg ecx
sar ecx, 0x1f
and ecx, 4
mov edx, dword [esp + 0x20c]
lea ebp, [ecx + edx]
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14c]
mov dword [esp + 0xc4], ebx
mov eax, dword [esp + 0x1b8]
mov ebx, ecx
mov ecx, ebp
mov edi, esi
mov ebp, dword [esp + 0x20c]
mov esi, dword [esp + 0xb4]
jmp 0x4adf52
cmp edi, 0x114
jne 0x4adacb
cmp esi, 2
jge 0x4ada2f
mov ebx, dword [0x964a20]
mov eax, dword [esp + 0x1b8]
mov ecx, ebp
mov edi, esi
jmp 0x4adf52
lea eax, [0x748818]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], 2
call fcn.004b8300
mov eax, dword [esp + 0xb4]
lea ecx, [eax - 2]
mov edx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 2
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x20c]
add ecx, ebp
mov esi, dword [esp + 0xc]
test ebx, ebx
je 0x4ada95
mov dword [esp + 0xc4], esi
mov eax, dword [esp + 0x1b8]
mov edi, edx
mov edx, dword [esp + 0x14c]
mov esi, dword [esp + 0xb4]
jmp 0x4adf52
cmp esi, 0x45
jl 0x4adaa2
add esi, 0x76c
jmp 0x4adaa8
add esi, 0x7d0
mov dword [esp + 0xc4], esi
mov eax, dword [esp + 0x1b8]
mov edi, edx
mov edx, dword [esp + 0x14c]
mov esi, dword [esp + 0xb4]
jmp 0x4adf52
cmp edi, 0x20c
jne 0x4adc76
mov dword [esp], ebp
mov dword [esp + 4], esi
mov byte [esp + 8], 0
call fcn.004acac0
mov eax, dword [esp + 0xc]
cmp eax, 0x18
jb 0x4adafe
mov ecx, 4
lea edx, [0x6cffe4]
jmp 0x4adb0c
mov ecx, dword [esp + 0x9c]
mov edx, dword [esp + 0x1bc]
mov ebp, dword [esp + 0x10]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov dword [esp + 0x9c], ecx
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0x1b8]
mov ecx, ebp
mov edi, esi
mov dword [esp + 0x1bc], edx
mov edx, dword [esp + 0x14c]
mov ebp, dword [esp + 0x20c]
mov esi, dword [esp + 0xb4]
jmp 0x4adf52
cmp edi, 0x210
jle 0x4ade48
cmp edi, 0x212
jle 0x4adc86
cmp edi, 0x215
jne 0x4adbf0
cmp esi, 2
jge 0x4adb8d
mov ebx, dword [0x964a20]
mov eax, dword [esp + 0x1b8]
mov ecx, ebp
mov edi, esi
jmp 0x4adf52
lea ecx, [esi - 2]
mov edi, ecx
neg ecx
sar ecx, 0x1f
and ecx, 2
add ecx, ebp
cmp word [ebp], 0x4d41
jne 0x4adbbd
mov dword [esp + 0xfc], eax
mov eax, 1
mov byte [esp + 0x36], al
mov eax, dword [esp + 0xfc]
jmp 0x4adbe4
cmp word [ebp], 0x4d50
jne 0x4adbde
mov dword [esp + 0x104], eax
mov eax, 1
mov byte [esp + 0x37], al
mov eax, dword [esp + 0x104]
jmp 0x4adbe4
mov ebx, dword [0x964a20]
mov eax, dword [esp + 0x1b8]
jmp 0x4adf52
cmp edi, 0x216
jne 0x4adc76
cmp esi, 2
jge 0x4adc13
mov ebx, dword [0x964a20]
mov eax, dword [esp + 0x1b8]
mov ecx, ebp
mov edi, esi
jmp 0x4adf52
lea ecx, [esi - 2]
mov edi, ecx
neg ecx
sar ecx, 0x1f
and ecx, 2
add ecx, ebp
cmp word [ebp], 0x6d61
jne 0x4adc43
mov dword [esp + 0xec], eax
mov eax, 1
mov byte [esp + 0x36], al
mov eax, dword [esp + 0xec]
jmp 0x4adc6a
cmp word [ebp], 0x6d70
jne 0x4adc64
mov dword [esp + 0xf4], eax
mov eax, 1
mov byte [esp + 0x37], al
mov eax, dword [esp + 0xf4]
jmp 0x4adc6a
mov ebx, dword [0x964a20]
mov eax, dword [esp + 0x1b8]
jmp 0x4adf52
mov eax, dword [esp + 0x1b8]
mov ecx, ebp
mov edi, esi
jmp 0x4adf52
mov dword [esp], ebp
mov dword [esp + 4], esi
cmp ecx, 0x212
sete al
mov byte [esp + 8], al
call fcn.004acac0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x14]
test eax, eax
je 0x4adcdf
mov ebp, dword [esp + 0x20c]
mov esi, dword [esp + 0xb4]
mov dword [esp + 0xac], edx
mov edi, ebx
mov edx, dword [esp + 0x14c]
mov ebx, eax
mov eax, dword [esp + 0x1b8]
jmp 0x4adf52
cmp edx, 0x3c
jb 0x4add29
mov ebp, dword [esp + 0x20c]
mov esi, dword [esp + 0xb4]
mov edi, 6
mov dword [esp + 0x9c], edi
mov dword [esp + 0xac], edx
mov edi, ebx
lea ebx, [0x6d0660]
mov dword [esp + 0x1bc], ebx
mov edx, dword [esp + 0x14c]
mov ebx, eax
mov eax, dword [esp + 0x1b8]
jmp 0x4adf52
cmp ebx, 2
jl 0x4ade2e
movzx ebp, byte [ecx]
xchg ebp, eax
cmp al, 0x2e
xchg ebp, eax
je 0x4add47
xchg ebp, eax
cmp al, 0x2c
xchg ebp, eax
jne 0x4ade14
movzx ebp, byte [ecx + 1]
add ebp, 0xffffffd0
xchg ebp, eax
cmp al, 9
xchg ebp, eax
jbe 0x4add6f
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xbc]
mov edi, dword [esp + 0x1bc]
jmp 0x4af44b
mov dword [esp + 0x144], edx
mov dword [esp + 0x80], ebx
mov dword [esp + 0x140], eax
mov dword [esp + 0x1b0], ecx
mov eax, dword [esp + 0x1f4]
mov dword [esp], eax
mov ecx, dword [esp + 0xcc]
mov dword [esp + 4], ecx
call fcn.004a8460
mov eax, dword [esp + 0x10]
and eax, 0xffff
cmp eax, 0x22
je 0x4addb8
cmp eax, 0x23
jne 0x4addfc
mov edx, dword [esp + 0x14c]
mov ebp, dword [esp + 0x20c]
mov esi, dword [esp + 0xb4]
mov eax, dword [esp + 0x144]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x1b8]
mov ebx, dword [esp + 0x140]
mov ecx, dword [esp + 0x1b0]
mov edi, dword [esp + 0x80]
jmp 0x4adf52
mov eax, dword [esp + 0x1b0]
mov ecx, dword [esp + 0x80]
mov edx, 2
jmp 0x4af48d
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xbc]
mov edi, dword [esp + 0x1bc]
jmp 0x4af44b
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xbc]
mov edi, dword [esp + 0x1bc]
jmp 0x4af44b
cmp edi, 0x20e
jg 0x4aded4
mov dword [esp], ebp
mov dword [esp + 4], esi
cmp ecx, 0x20e
sete al
mov byte [esp + 8], al
call fcn.004acac0
mov eax, dword [esp + 0xc]
cmp eax, 0xc
jbe 0x4ade83
mov ecx, 4
lea edx, [0x6cffe4]
jmp 0x4ade91
mov ecx, dword [esp + 0x9c]
mov edx, dword [esp + 0x1bc]
mov ebp, dword [esp + 0x10]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov dword [esp + 0x9c], ecx
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0x1b8]
mov ecx, ebp
mov edi, esi
mov dword [esp + 0x1bc], edx
mov edx, dword [esp + 0x14c]
mov ebp, dword [esp + 0x20c]
mov esi, dword [esp + 0xb4]
jmp 0x4adf52
mov dword [esp], ebp
mov dword [esp + 4], esi
cmp ecx, 0x210
sete al
mov byte [esp + 8], al
call fcn.004acac0
mov eax, dword [esp + 0xc]
cmp eax, 0x3c
jb 0x4adf03
mov ecx, 6
lea edx, [0x6d0576]
jmp 0x4adf11
mov ecx, dword [esp + 0x9c]
mov edx, dword [esp + 0x1bc]
mov ebp, dword [esp + 0x10]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov dword [esp + 0x9c], ecx
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0x1b8]
mov ecx, ebp
mov edi, esi
mov dword [esp + 0x1bc], edx
mov edx, dword [esp + 0x14c]
mov ebp, dword [esp + 0x20c]
mov esi, dword [esp + 0xb4]
mov edx, dword [esp + 0x9c]
test edx, edx
jne 0x4af280
test ebx, ebx
je 0x4acf65
jmp 0x4af128
test esi, esi
jne 0x4aedec
movzx edx, byte [esp + 0x37]
test dl, dl
je 0x4adf90
mov edx, dword [esp + 0xc8]
cmp edx, 0xc
jge 0x4adf97
add edx, 0xc
jmp 0x4adfa7
mov edx, dword [esp + 0xc8]
movzx ebx, byte [esp + 0x36]
test bl, bl
je 0x4adfa7
cmp edx, 0xc
jne 0x4adfa7
xor edx, edx
mov dword [esp + 0xc8], edx
mov ebx, dword [esp + 0xa0]
test ebx, ebx
jl 0x4ae4d9
mov eax, dword [esp + 0xc4]
test eax, 3
jne 0x4ae033
mov esi, 0x51eb851f
mov ecx, edx
imul esi
mov dword [esp + 0x14c], edx
mov eax, dword [esp + 0xc4]
mov edi, eax
sar edi, 0x1f
sar edx, 5
sub edx, edi
imul edx, edx, 0x64
cmp eax, edx
jne 0x4ae009
mov edx, dword [esp + 0x14c]
sar edx, 7
sub edx, edi
imul edx, edx, 0x190
cmp eax, edx
jne 0x4ae02b
cmp ebx, 0x3c
jne 0x4ae01c
mov edi, ebx
mov edx, 2
mov ebx, 0x1d
jmp 0x4ae040
jle 0x4ae023
lea edi, [ebx - 1]
jmp 0x4ae025
mov edi, ebx
xor edx, edx
xor ebx, ebx
jmp 0x4ae040
mov edi, ebx
xor edx, edx
xor ebx, ebx
jmp 0x4ae040
mov ecx, edx
mov esi, 0x51eb851f
mov edi, ebx
xor edx, edx
xor ebx, ebx
lea ecx, [edi - 1]
cmp ecx, 0x16c
jbe 0x4ae1a6
nop
mov eax, dword [esp + 0x230]
test eax, eax
jne 0x4ae061
lea eax, [0x9aece0]
mov dword [esp], 0
mov dword [esp + 4], eax
mov eax, dword [esp + 0x234]
mov dword [esp + 8], eax
call fcn.00454610
nop
mov eax, dword [esp + 0x10]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0x20c]
test ecx, ecx
jne 0x4ae096
lea ecx, [0x9aece0]
mov eax, dword [esp + 0xc]
mov dword [esp + 0x16c], eax
mov dword [esp], 0
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
call fcn.00454610
mov eax, dword [esp + 0xc]
mov dword [esp + 0x168], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x50], ecx
lea edx, [0x6b3d60]
mov dword [esp], edx
call fcn.0040d2a0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x22c]
mov dword [eax + 4], ecx
mov ecx, dword [0x9aef70]
test ecx, ecx
jne 0x4ae102
mov ecx, dword [esp + 0x228]
mov edx, dword [esp + 0x16c]
jmp 0x4ae11a
call fcn.0046c8a0
mov ecx, dword [esp + 0x228]
mov dword [edi], ecx
mov edx, dword [esp + 0x16c]
mov dword [edi + 4], edx
mov dword [eax], ecx
mov ecx, dword [esp + 0x54]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov ecx, dword [esp + 0x50]
mov dword [eax + 0x1c], ecx
mov ecx, dword [0x9aef70]
test ecx, ecx
jne 0x4ae14e
mov ecx, dword [esp + 0x168]
jmp 0x4ae15c
call fcn.0046c890
mov ecx, dword [esp + 0x168]
mov dword [edi], ecx
mov dword [esp + 0x19c], eax
mov dword [eax + 0x18], ecx
mov dword [eax + 0x24], 0x1a
lea ecx, [0x6d925c]
mov dword [eax + 0x20], ecx
lea edi, [esp + 0x240]
xor eax, eax
call fcn.0046cb2b
lea ecx, [0x7496e8]
mov dword [esp + 0x254], ecx
mov ecx, dword [esp + 0x19c]
mov dword [esp + 0x258], ecx
add esp, 0x224
ret
test edx, edx
jne 0x4ae1fd
mov edx, eax
mov eax, 0x84210843
mov ebx, edx
imul ecx
lea edx, [edx + edi - 1]
sar edx, 4
lea eax, [edx + 1]
cmp eax, 0xd
jae 0x4af11e
lea ebp, [0x93f480]
lea ecx, [ebp + edx*4 + 4]
cmp dword [ecx], edi
jge 0x4ae1d9
lea eax, [edx + 2]
lea edx, [eax - 1]
cmp edx, 0xd
jae 0x4af112
mov ecx, dword [ebp + eax*4 - 4]
sub edi, ecx
mov ebp, dword [esp + 0x20c]
mov edx, eax
mov ebx, edi
mov eax, dword [esp + 0xc4]
mov edi, dword [esp + 0x8c]
test edi, edi
jl 0x4ae36b
cmp edx, edi
je 0x4ae36b
nop
mov eax, dword [esp + 0x230]
test eax, eax
jne 0x4ae226
lea eax, [0x9aece0]
mov dword [esp], 0
mov dword [esp + 4], eax
mov eax, dword [esp + 0x234]
mov dword [esp + 8], eax
call fcn.00454610
nop
mov eax, dword [esp + 0x10]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0x20c]
test ecx, ecx
jne 0x4ae25b
lea ecx, [0x9aece0]
mov eax, dword [esp + 0xc]
mov dword [esp + 0x164], eax
mov dword [esp], 0
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
call fcn.00454610
mov eax, dword [esp + 0xc]
mov dword [esp + 0x160], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x48], ecx
lea edx, [0x6b3d60]
mov dword [esp], edx
call fcn.0040d2a0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x22c]
mov dword [eax + 4], ecx
mov ecx, dword [0x9aef70]
test ecx, ecx
jne 0x4ae2c7
mov ecx, dword [esp + 0x228]
mov edx, dword [esp + 0x164]
jmp 0x4ae2df
call fcn.0046c8a0
mov ecx, dword [esp + 0x228]
mov dword [edi], ecx
mov edx, dword [esp + 0x164]
mov dword [edi + 4], edx
mov dword [eax], ecx
mov ecx, dword [esp + 0x4c]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov ecx, dword [esp + 0x48]
mov dword [eax + 0x1c], ecx
mov ecx, dword [0x9aef70]
test ecx, ecx
jne 0x4ae313
mov ecx, dword [esp + 0x160]
jmp 0x4ae321
call fcn.0046c890
mov ecx, dword [esp + 0x160]
mov dword [edi], ecx
mov dword [esp + 0x198], eax
mov dword [eax + 0x18], ecx
mov dword [eax + 0x24], 0x22
lea ecx, [0x6dd526]
mov dword [eax + 0x20], ecx
lea edi, [esp + 0x240]
xor eax, eax
call fcn.0046cb2b
lea ecx, [0x7496e8]
mov dword [esp + 0x254], ecx
mov ecx, dword [esp + 0x198]
mov dword [esp + 0x258], ecx
add esp, 0x224
ret
mov edi, dword [esp + 0x88]
test edi, edi
jl 0x4ae509
cmp ebx, edi
je 0x4ae509
nop
mov eax, dword [esp + 0x230]
test eax, eax
jne 0x4ae394
lea eax, [0x9aece0]
mov dword [esp], 0
mov dword [esp + 4], eax
mov eax, dword [esp + 0x234]
mov dword [esp + 8], eax
call fcn.00454610
nop
mov eax, dword [esp + 0x10]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0x20c]
test ecx, ecx
jne 0x4ae3c9
lea ecx, [0x9aece0]
mov eax, dword [esp + 0xc]
mov dword [esp + 0x15c], eax
mov dword [esp], 0
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
call fcn.00454610
mov eax, dword [esp + 0xc]
mov dword [esp + 0x158], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x40], ecx
lea edx, [0x6b3d60]
mov dword [esp], edx
call fcn.0040d2a0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x22c]
mov dword [eax + 4], ecx
mov ecx, dword [0x9aef70]
test ecx, ecx
jne 0x4ae435
mov ecx, dword [esp + 0x228]
mov edx, dword [esp + 0x15c]
jmp 0x4ae44d
call fcn.0046c8a0
mov ecx, dword [esp + 0x228]
mov dword [edi], ecx
mov edx, dword [esp + 0x15c]
mov dword [edi + 4], edx
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov ecx, dword [esp + 0x40]
mov dword [eax + 0x1c], ecx
mov ecx, dword [0x9aef70]
test ecx, ecx
jne 0x4ae481
mov ecx, dword [esp + 0x158]
jmp 0x4ae48f
call fcn.0046c890
mov ecx, dword [esp + 0x158]
mov dword [edi], ecx
mov dword [esp + 0x194], eax
mov dword [eax + 0x18], ecx
mov dword [eax + 0x24], 0x20
lea ecx, [0x6dc38f]
mov dword [eax + 0x20], ecx
lea edi, [esp + 0x240]
xor eax, eax
call fcn.0046cb2b
lea ecx, [0x7496e8]
mov dword [esp + 0x254], ecx
mov ecx, dword [esp + 0x194]
mov dword [esp + 0x258], ecx
add esp, 0x224
ret
mov ebx, dword [esp + 0x8c]
test ebx, ebx
jge 0x4ae4e9
mov ebx, 1
mov esi, dword [esp + 0x88]
test esi, esi
jge 0x4ae4f9
mov esi, 1
mov eax, dword [esp + 0xc4]
mov edx, ebx
mov ebx, esi
mov esi, 0x51eb851f
test ebx, ebx
jle 0x4ae581
cmp edx, 2
jne 0x4ae553
test eax, 3
jne 0x4ae54d
mov ecx, edx
imul esi
mov esi, dword [esp + 0xc4]
mov edi, esi
sar esi, 0x1f
mov eax, edx
sar edx, 5
sub edx, esi
imul edx, edx, 0x64
cmp edi, edx
jne 0x4ae546
sar eax, 7
sub eax, esi
imul edx, eax, 0x190
cmp edi, edx
jne 0x4ae557
mov esi, 0x1d
jmp 0x4ae579
mov ecx, edx
mov edi, eax
jmp 0x4ae557
mov ecx, edx
mov edi, eax
cmp ecx, 0xd
jae 0x4af106
lea eax, [ecx - 1]
lea edx, [0x93f480]
mov esi, dword [edx + ecx*4]
cmp eax, 0xd
jae 0x4af0fc
sub esi, dword [edx + ecx*4 - 4]
cmp esi, ebx
jge 0x4ae6d8
nop
mov eax, dword [esp + 0x230]
test eax, eax
jne 0x4ae593
lea eax, [0x9aece0]
mov dword [esp], 0
mov dword [esp + 4], eax
mov eax, dword [esp + 0x234]
mov dword [esp + 8], eax
call fcn.00454610
nop
mov eax, dword [esp + 0x10]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x20c]
test ecx, ecx
jne 0x4ae5c8
lea ecx, [0x9aece0]
mov eax, dword [esp + 0xc]
mov dword [esp + 0x154], eax
mov dword [esp], 0
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
call fcn.00454610
mov eax, dword [esp + 0xc]
mov dword [esp + 0x150], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x38], ecx
lea edx, [0x6b3d60]
mov dword [esp], edx
call fcn.0040d2a0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x22c]
mov dword [eax + 4], ecx
mov ecx, dword [0x9aef70]
test ecx, ecx
jne 0x4ae634
mov ecx, dword [esp + 0x228]
mov edx, dword [esp + 0x154]
jmp 0x4ae64c
call fcn.0046c8a0
mov ecx, dword [esp + 0x228]
mov dword [edi], ecx
mov edx, dword [esp + 0x154]
mov dword [edi + 4], edx
mov dword [eax], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov ecx, dword [esp + 0x38]
mov dword [eax + 0x1c], ecx
mov ecx, dword [0x9aef70]
test ecx, ecx
jne 0x4ae680
mov ecx, dword [esp + 0x150]
jmp 0x4ae68e
call fcn.0046c890
mov ecx, dword [esp + 0x150]
mov dword [edi], ecx
mov dword [esp + 0x190], eax
mov dword [eax + 0x18], ecx
mov dword [eax + 0x24], 0x12
lea ecx, [0x6d4980]
mov dword [eax + 0x20], ecx
lea edi, [esp + 0x240]
xor eax, eax
call fcn.0046cb2b
lea ecx, [0x7496e8]
mov dword [esp + 0x254], ecx
mov ecx, dword [esp + 0x190]
mov dword [esp + 0x258], ecx
add esp, 0x224
ret
mov eax, dword [esp + 0x1b8]
test eax, eax
jne 0x4aed6c
mov eax, dword [esp + 0xd8]
cmp eax, 0xffffffff
jne 0x4aea84
mov eax, dword [esp + 0x84]
test eax, eax
je 0x4ae9fd
mov eax, dword [0x964434]
mov dword [esp], edi
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov ecx, dword [esp + 0xc8]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0xac]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0xbc]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
call fcn.004b2e20
lea edi, [esp + 0x1c8]
lea esi, [esp + 0x20]
call fcn.0046d00e
mov eax, dword [esp + 0x1cc]
nop
test eax, 0x80000000
je 0x4ae794
mov ecx, dword [esp + 0x1c8]
mov edx, ecx
shl ecx, 1
shl eax, 1
shr edx, 0x1f
or edx, eax
mov eax, edx
shl edx, 1
shr ecx, 0x1f
or ecx, edx
shr eax, 0x1f
add ecx, 0xd7b17f80
adc eax, 0xd
jmp 0x4ae7a2
mov ecx, dword [esp + 0x1d0]
mov eax, dword [esp + 0x1d4]
mov edx, dword [esp + 0x23c]
mov dword [esp], edx
mov ebx, dword [esp + 0x1b4]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x84]
mov dword [esp + 8], ebp
add ecx, 0x886e0900
mov dword [esp + 0xc], ecx
adc eax, 0xfffffff1
mov dword [esp + 0x10], eax
call fcn.004b6020
movzx eax, byte [esp + 0x18]
mov ecx, dword [esp + 0x14]
test al, al
jne 0x4ae92f
mov eax, dword [esp + 0x84]
cmp eax, 3
jle 0x4ae83f
mov edx, dword [esp + 0x1b4]
cmp word [edx], 0x4d47
jne 0x4ae846
cmp byte [edx + 2], 0x54
jne 0x4ae846
lea ecx, [0x748818]
mov dword [esp], ecx
lea ecx, [edx + 3]
mov dword [esp + 4], ecx
lea ecx, [eax - 3]
mov dword [esp + 8], ecx
call fcn.004b8300
mov eax, dword [esp + 0xc]
imul ecx, eax, 0xe10
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x1b4]
jmp 0x4ae846
mov edx, dword [esp + 0x1b4]
mov dword [esp + 0xd0], ecx
nop
test edx, edx
jne 0x4ae858
lea edx, [0x9aece0]
mov dword [esp], 0
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00454610
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xd0]
mov dword [esp + 8], eax
call fcn.004b3bc0
mov eax, dword [esp + 0xc]
nop
lea ecx, [0x96c7a0]
cmp eax, ecx
jne 0x4ae89c
xor eax, eax
mov ecx, dword [esp + 0x1cc]
nop
test ecx, 0x80000000
je 0x4ae8f8
mov edx, dword [esp + 0x1c8]
shl ecx, 1
mov ebx, edx
shl edx, 1
shr ebx, 0x1f
or ecx, ebx
mov ebx, ecx
shl ecx, 1
shr edx, 0x1f
or edx, ecx
shr ebx, 0x1f
nop
add edx, 0xd7b17f80
mov dword [esp + 0x1d0], edx
adc ebx, 0xd
mov dword [esp + 0x1d4], ebx
and dword [esp + 0x1c8], 0x3fffffff
mov dword [esp + 0x1cc], 0
mov dword [esp + 0x1d8], eax
lea edi, [esp + 0x240]
lea esi, [esp + 0x1c8]
call fcn.0046d00e
mov dword [esp + 0x254], 0
mov dword [esp + 0x258], 0
add esp, 0x224
ret
lea eax, [esp + 0x1c8]
mov dword [esp], eax
mov eax, ecx
sar ecx, 0x1f
xor edx, edx
sub edx, eax
mov dword [esp + 4], edx
mov eax, 0
sbb eax, ecx
mov dword [esp + 8], eax
call fcn.004b0560
nop
mov eax, dword [esp + 0x23c]
lea ecx, [0x96c7a0]
cmp eax, ecx
jne 0x4ae96a
xor eax, eax
mov ecx, dword [esp + 0x1cc]
nop
test ecx, 0x80000000
je 0x4ae9c6
mov edx, dword [esp + 0x1c8]
shl ecx, 1
mov ebx, edx
shl edx, 1
shr ebx, 0x1f
or ecx, ebx
mov ebx, ecx
shl ecx, 1
shr edx, 0x1f
or edx, ecx
shr ebx, 0x1f
nop
add edx, 0xd7b17f80
mov dword [esp + 0x1d0], edx
adc ebx, 0xd
mov dword [esp + 0x1d4], ebx
and dword [esp + 0x1c8], 0x3fffffff
mov dword [esp + 0x1cc], 0
mov dword [esp + 0x1d8], eax
lea edi, [esp + 0x240]
lea esi, [esp + 0x1c8]
call fcn.0046d00e
mov dword [esp + 0x254], 0
mov dword [esp + 0x258], 0
add esp, 0x224
ret
mov dword [esp], edi
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov eax, dword [esp + 0xc8]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x238]
mov dword [esp + 0x1c], eax
call fcn.004b2e20
lea edi, [esp + 0x210]
lea esi, [esp + 0x20]
call fcn.0046d00e
lea edi, [esp + 0x240]
lea esi, [esp + 0x210]
call fcn.0046d00e
mov dword [esp + 0x254], 0
mov dword [esp + 0x258], 0
add esp, 0x224
ret
mov eax, dword [0x964434]
mov dword [esp], edi
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov ecx, dword [esp + 0xc8]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0xac]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0xbc]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
call fcn.004b2e20
lea edi, [esp + 0x1dc]
lea esi, [esp + 0x20]
call fcn.0046d00e
lea eax, [esp + 0x1dc]
mov dword [esp], eax
mov eax, dword [esp + 0xd8]
mov ecx, eax
sar eax, 0x1f
xor edx, edx
sub edx, ecx
mov dword [esp + 4], edx
mov edx, 0
sbb edx, eax
mov dword [esp + 8], edx
call fcn.004b0560
mov eax, dword [esp + 0x1e0]
nop
test eax, 0x80000000
je 0x4aeb40
mov ecx, dword [esp + 0x1dc]
mov edx, ecx
shl ecx, 1
shl eax, 1
shr edx, 0x1f
or edx, eax
mov eax, edx
shl edx, 1
shr ecx, 0x1f
or ecx, edx
shr eax, 0x1f
add ecx, 0xd7b17f80
adc eax, 0xd
jmp 0x4aeb4e
mov ecx, dword [esp + 0x1e4]
mov eax, dword [esp + 0x1e8]
mov edx, dword [esp + 0x23c]
mov dword [esp], edx
add ecx, 0x886e0900
mov dword [esp + 4], ecx
adc eax, 0xfffffff1
mov dword [esp + 8], eax
call fcn.004b3dd0
mov eax, dword [esp + 0xd8]
cmp dword [esp + 0x14], eax
jne 0x4aebcb
mov ecx, dword [esp + 0x84]
test ecx, ecx
jne 0x4aeb8d
mov edx, 1
jmp 0x4aebd4
mov edx, dword [esp + 0x10]
cmp ecx, edx
je 0x4aeb99
xor edx, edx
jmp 0x4aebd4
mov eax, dword [esp + 0xc]
mov dword [esp], eax
mov eax, dword [esp + 0x1b4]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00403200
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x84]
mov edx, eax
mov eax, dword [esp + 0xd8]
jmp 0x4aebd4
mov ecx, dword [esp + 0x84]
xor edx, edx
test dl, dl
je 0x4aec83
nop
mov eax, dword [esp + 0x23c]
lea ecx, [0x96c7a0]
cmp eax, ecx
jne 0x4aebf0
xor eax, eax
mov ecx, dword [esp + 0x1e0]
nop
test ecx, 0x80000000
je 0x4aec4c
mov edx, dword [esp + 0x1dc]
shl ecx, 1
mov ebx, edx
shl edx, 1
shr ebx, 0x1f
or ebx, ecx
mov ecx, ebx
shl ebx, 1
shr edx, 0x1f
or ebx, edx
shr ecx, 0x1f
nop
add ebx, 0xd7b17f80
mov dword [esp + 0x1e4], ebx
adc ecx, 0xd
mov dword [esp + 0x1e8], ecx
and dword [esp + 0x1dc], 0x3fffffff
mov dword [esp + 0x1e0], 0
mov dword [esp + 0x1ec], eax
lea edi, [esp + 0x240]
lea esi, [esp + 0x1dc]
call fcn.0046d00e
mov dword [esp + 0x254], 0
mov dword [esp + 0x258], 0
add esp, 0x224
ret
nop
mov edx, dword [esp + 0x1b4]
test edx, edx
jne 0x4aec95
lea edx, [0x9aece0]
mov dword [esp], 0
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00454610
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xd8]
mov dword [esp + 8], eax
call fcn.004b3bc0
mov eax, dword [esp + 0xc]
nop
lea ecx, [0x96c7a0]
cmp eax, ecx
jne 0x4aecd9
xor eax, eax
mov ecx, dword [esp + 0x1e0]
nop
test ecx, 0x80000000
je 0x4aed35
mov edx, dword [esp + 0x1dc]
shl ecx, 1
mov ebx, edx
shl edx, 1
shr ebx, 0x1f
or ebx, ecx
mov ecx, ebx
shl ebx, 1
shr edx, 0x1f
or ebx, edx
shr ecx, 0x1f
nop
add ebx, 0xd7b17f80
mov dword [esp + 0x1e4], ebx
adc ecx, 0xd
mov dword [esp + 0x1e8], ecx
and dword [esp + 0x1dc], 0x3fffffff
mov dword [esp + 0x1e0], 0
mov dword [esp + 0x1ec], eax
lea edi, [esp + 0x240]
lea esi, [esp + 0x1dc]
call fcn.0046d00e
mov dword [esp + 0x254], 0
mov dword [esp + 0x258], 0
add esp, 0x224
ret
mov dword [esp], edi
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov ecx, dword [esp + 0xc8]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0xac]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0xbc]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
call fcn.004b2e20
lea edi, [esp + 0x210]
lea esi, [esp + 0x20]
call fcn.0046d00e
lea edi, [esp + 0x240]
lea esi, [esp + 0x210]
call fcn.0046d00e
mov dword [esp + 0x254], 0
mov dword [esp + 0x258], 0
add esp, 0x224
ret
mov dword [esp], ebp
mov dword [esp + 4], esi
call fcn.004ac440
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp], 0
lea edx, [0x6d2dbd]
mov dword [esp + 4], edx
mov dword [esp + 8], 0xe
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.00454370
mov eax, dword [esp + 0x14]
mov dword [esp + 0x204], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xe8], ecx
nop
mov edx, dword [esp + 0x230]
test edx, edx
jne 0x4aee4e
lea edx, [0x9aece0]
mov dword [esp], 0
mov dword [esp + 4], edx
mov eax, dword [esp + 0x234]
mov dword [esp + 8], eax
call fcn.00454610
nop
mov eax, dword [esp + 0x10]
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0x20c]
test ecx, ecx
jne 0x4aee83
lea ecx, [0x9aece0]
mov eax, dword [esp + 0xc]
mov dword [esp + 0x184], eax
mov dword [esp], 0
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 8], ecx
call fcn.00454610
mov eax, dword [esp + 0xc]
mov dword [esp + 0x180], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x68], ecx
lea edx, [0x6b3d60]
mov dword [esp], edx
call fcn.0040d2a0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x22c]
mov dword [eax + 4], ecx
mov ecx, dword [0x9aef70]
test ecx, ecx
jne 0x4aeef2
mov ecx, dword [esp + 0x228]
mov edx, dword [esp + 0x184]
jmp 0x4aef0a
call fcn.0046c8a0
mov ecx, dword [esp + 0x228]
mov dword [edi], ecx
mov edx, dword [esp + 0x184]
mov dword [edi + 4], edx
mov dword [eax], ecx
mov ecx, dword [esp + 0x6c]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov ecx, dword [esp + 0x68]
mov dword [eax + 0x1c], ecx
mov ecx, dword [0x9aef70]
test ecx, ecx
jne 0x4aef45
mov ecx, dword [esp + 0x180]
mov edx, dword [esp + 0x204]
jmp 0x4aef5d
call fcn.0046c8a0
mov ecx, dword [esp + 0x180]
mov dword [edi], ecx
mov edx, dword [esp + 0x204]
mov dword [edi + 4], edx
mov dword [esp + 0x1a8], eax
mov dword [eax + 0x18], ecx
mov ecx, dword [esp + 0xe8]
mov dword [eax + 0x24], ecx
mov dword [eax + 0x20], edx
lea edi, [esp + 0x240]
xor eax, eax
call fcn.0046cb2b
lea ecx, [0x7496e8]
mov dword [esp + 0x254], ecx
mov ecx, dword [esp + 0x1a8]
mov dword [esp + 0x258], ecx
add esp, 0x224
ret
nop
mov eax, dword [esp + 0x230]
test eax, eax
jne 0x4aefb6
lea eax, [0x9aece0]
mov dword [esp], 0
mov dword [esp + 4], eax
mov eax, dword [esp + 0x234]
mov dword [esp + 8], eax
call fcn.00454610
nop
mov eax, dword [esp + 0x10]
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 0x20c]
test ecx, ecx
jne 0x4aefeb
lea ecx, [0x9aece0]
mov eax, dword [esp + 0xc]
mov dword [esp + 0x18c], eax
mov dword [esp], 0
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 8], ecx
call fcn.00454610
mov eax, dword [esp + 0xc]
mov dword [esp + 0x188], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x70], ecx
lea edx, [0x6b3d60]
mov dword [esp], edx
call fcn.0040d2a0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x22c]
mov dword [eax + 4], ecx
mov ecx, dword [0x9aef70]
test ecx, ecx
jne 0x4af068
mov ecx, dword [esp + 0x228]
mov edx, dword [esp + 0x18c]
mov ebx, dword [esp + 0x1c0]
mov ebp, dword [esp + 0x188]
jmp 0x4af094
call fcn.0046c8c0
mov ecx, dword [esp + 0x228]
mov dword [edi], ecx
mov edx, dword [esp + 0x18c]
mov dword [edi + 4], edx
mov ebx, dword [esp + 0x1c0]
mov dword [edi + 8], ebx
mov ebp, dword [esp + 0x188]
mov dword [edi + 0xc], ebp
mov dword [esp + 0x1ac], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x74]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov ecx, dword [esp + 0xa4]
mov dword [eax + 0x14], ecx
mov dword [eax + 0x10], ebx
mov ecx, dword [esp + 0x70]
mov dword [eax + 0x1c], ecx
mov dword [eax + 0x18], ebp
mov dword [eax + 0x24], 0
mov dword [eax + 0x20], 0
lea edi, [esp + 0x240]
xor eax, eax
call fcn.0046cb2b
lea ecx, [0x7496e8]
mov dword [esp + 0x254], ecx
mov ecx, dword [esp + 0x1ac]
mov dword [esp + 0x258], ecx
add esp, 0x224
ret
mov ecx, 0xd
call fcn.0046c910
mov eax, ecx
mov ecx, 0xd
call fcn.0046c910
mov eax, edx
mov ecx, 0xd
call fcn.0046c910
mov ecx, 0xd
call fcn.0046c910
nop
mov eax, dword [esp + 0x230]
test eax, eax
jne 0x4af13a
lea eax, [0x9aece0]
mov dword [esp], 0
mov dword [esp + 4], eax
mov eax, dword [esp + 0x234]
mov dword [esp + 8], eax
call fcn.00454610
nop
mov eax, dword [esp + 0x10]
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 0x20c]
test ecx, ecx
jne 0x4af16f
lea ecx, [0x9aece0]
mov eax, dword [esp + 0xc]
mov dword [esp + 0x174], eax
mov dword [esp], 0
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 8], ecx
call fcn.00454610
mov eax, dword [esp + 0xc]
mov dword [esp + 0x170], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x58], ecx
lea edx, [0x6b3d60]
mov dword [esp], edx
call fcn.0040d2a0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x22c]
mov dword [eax + 4], ecx
mov ecx, dword [0x9aef70]
test ecx, ecx
jne 0x4af1ec
mov ecx, dword [esp + 0x228]
mov edx, dword [esp + 0x174]
mov ebx, dword [esp + 0x1fc]
mov ebp, dword [esp + 0x170]
jmp 0x4af218
call fcn.0046c8c0
mov ecx, dword [esp + 0x228]
mov dword [edi], ecx
mov edx, dword [esp + 0x174]
mov dword [edi + 4], edx
mov ebx, dword [esp + 0x1fc]
mov dword [edi + 8], ebx
mov ebp, dword [esp + 0x170]
mov dword [edi + 0xc], ebp
mov dword [esp + 0x1a0], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov ecx, dword [esp + 0x14c]
mov dword [eax + 0x14], ecx
mov dword [eax + 0x10], ebx
mov ecx, dword [esp + 0x58]
mov dword [eax + 0x1c], ecx
mov dword [eax + 0x18], ebp
mov dword [eax + 0x24], 0
mov dword [eax + 0x20], 0
lea edi, [esp + 0x240]
xor eax, eax
call fcn.0046cb2b
lea ecx, [0x7496e8]
mov dword [esp + 0x254], ecx
mov ecx, dword [esp + 0x1a0]
mov dword [esp + 0x258], ecx
add esp, 0x224
ret
mov dword [esp + 0xb0], edi
mov dword [esp + 0x1f0], ecx
mov dword [esp], 0
lea eax, [0x6cf9dd]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov eax, dword [esp + 0x1bc]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
lea eax, [0x6d2792]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0xd
call fcn.00454410
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x200], eax
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xe4], ecx
nop
mov edx, dword [esp + 0x230]
test edx, edx
jne 0x4af2f5
lea edx, [0x9aece0]
mov dword [esp], 0
mov dword [esp + 4], edx
mov eax, dword [esp + 0x234]
mov dword [esp + 8], eax
call fcn.00454610
nop
mov eax, dword [esp + 0x10]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x1f0]
test ecx, ecx
jne 0x4af32a
lea ecx, [0x9aece0]
mov eax, dword [esp + 0xc]
mov dword [esp + 0x17c], eax
mov dword [esp], 0
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 8], ecx
call fcn.00454610
mov eax, dword [esp + 0xc]
mov dword [esp + 0x178], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x60], ecx
lea edx, [0x6b3d60]
mov dword [esp], edx
call fcn.0040d2a0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x22c]
mov dword [eax + 4], ecx
mov ecx, dword [0x9aef70]
test ecx, ecx
jne 0x4af3ae
mov ecx, dword [esp + 0x228]
mov edx, dword [esp + 0x17c]
mov ebx, dword [esp + 0x1fc]
mov ebp, dword [esp + 0x178]
mov esi, dword [esp + 0x200]
jmp 0x4af3e4
call fcn.0046c8d0
mov ecx, dword [esp + 0x228]
mov dword [edi], ecx
mov edx, dword [esp + 0x17c]
mov dword [edi + 4], edx
mov ebx, dword [esp + 0x1fc]
mov dword [edi + 8], ebx
mov ebp, dword [esp + 0x178]
mov dword [edi + 0xc], ebp
mov esi, dword [esp + 0x200]
mov dword [edi + 0x10], esi
mov dword [esp + 0x1a4], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x64]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov ecx, dword [esp + 0x14c]
mov dword [eax + 0x14], ecx
mov dword [eax + 0x10], ebx
mov ecx, dword [esp + 0x60]
mov dword [eax + 0x1c], ecx
mov dword [eax + 0x18], ebp
mov ecx, dword [esp + 0xe4]
mov dword [eax + 0x24], ecx
mov dword [eax + 0x20], esi
lea edi, [esp + 0x240]
xor eax, eax
call fcn.0046cb2b
lea ecx, [0x7496e8]
mov dword [esp + 0x254], ecx
mov ecx, dword [esp + 0x1a4]
mov dword [esp + 0x258], ecx
add esp, 0x224
ret
mov dword [esp + 0x9c], ebp
mov dword [esp + 0xac], edx
mov dword [esp + 0x1bc], edi
mov dword [esp + 0xbc], esi
mov edx, dword [esp + 0x14c]
mov ebp, dword [esp + 0x20c]
mov esi, dword [esp + 0xb4]
mov edi, ebx
mov ebx, eax
mov eax, dword [esp + 0x1b8]
jmp 0x4adf52
inc edx
cmp edx, ecx
jge 0x4af49d
movzx ebx, byte [edx + eax]
add ebx, 0xffffffd0
cmp bl, 9
jbe 0x4af48c
mov dword [esp + 0xb8], edx
lea ebx, [0x748820]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.004b8180
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0x80]
cmp eax, ecx
ja 0x4af50d
sub ecx, eax
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and eax, ecx
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x18]
mov edx, dword [esp + 0x1b0]
add eax, edx
mov edx, dword [esp + 0x144]
mov edx, eax
mov eax, ecx
mov ecx, edx
mov edx, dword [esp + 0x144]
jmp 0x4af44b
call fcn.0046c970
inc edx
mov dword [esp + 0xe0], edx
mov edx, dword [esp + 0x14c]
mov edx, dword [esp + 0xe0]
cmp edx, 2
jge 0x4af55e
cmp ecx, 0x10a
jne 0x4af512
test esi, esi
je 0x4af512
cmp byte [ebp], 0x20
jne 0x4af512
dec esi
mov dword [esp + 0x148], esi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, 1
add ebp, esi
mov esi, dword [esp + 0x148]
jmp 0x4af512
xor edx, edx
xor edx, edx
mov dword [esp + 0x7c], edx
xor edx, edx
jmp 0x4af58a
mov ebx, dword [esp + 0x7c]
lea ebx, [ebx + ebx*4]
movzx eax, al
inc edx
lea eax, [eax + ebx*2]
mov ebx, dword [esp + 0xb4]
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x1fc]
cmp edx, 3
jge 0x4af5aa
cmp edx, esi
jge 0x4af5a6
movzx eax, byte [edx + ebp]
add eax, 0xffffffd0
cmp al, 9
jbe 0x4af56a
mov eax, dword [esp + 0x1fc]
test edx, edx
je 0x4af5b7
cmp ecx, 0x10b
jne 0x4af5c1
cmp edx, 3
je 0x4af5c1
mov ecx, dword [0x964a20]
xor edx, edx
jmp 0x4af5d8
cmp edx, esi
ja 0x4af606
sub esi, edx
mov ecx, esi
neg ecx
sar ecx, 0x1f
and ecx, edx
add ebp, ecx
mov edx, dword [esp + 0x7c]
xor ecx, ecx
mov dword [esp + 0xa0], edx
mov eax, dword [esp + 0x1b8]
mov ebx, ecx
mov ecx, ebp
mov edi, esi
mov edx, dword [esp + 0x14c]
mov ebp, dword [esp + 0x20c]
mov esi, dword [esp + 0xb4]
jmp 0x4adf52
mov eax, edx
mov ecx, esi
call fcn.0046c970
mov ecx, ebx
mov dword [esp + 0xdc], ecx
lea ebx, [ecx + 1]
cmp esi, ebx
jle 0x4af638
jbe 0x4af6d8
movzx edi, byte [ecx + ebp + 1]
xchg edi, eax
cmp al, 0x30
xchg edi, eax
jb 0x4af638
xchg edi, eax
cmp al, 0x39
xchg edi, eax
jbe 0x4af60f
mov dword [esp + 0x13c], ebx
lea eax, [0x748820]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
call fcn.004b8180
mov ecx, dword [esp + 0xb4]
mov eax, dword [esp + 0x13c]
cmp ecx, eax
jb 0x4af6d3
mov edx, dword [esp + 0xdc]
sub ecx, edx
lea edi, [ecx - 1]
mov ecx, edi
neg ecx
sar ecx, 0x1f
and eax, ecx
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x20c]
add eax, esi
mov esi, dword [esp + 0xb4]
mov dword [esp + 0x9c], ebp
mov dword [esp + 0x1bc], ebx
mov dword [esp + 0xbc], ecx
mov ebp, dword [esp + 0x20c]
mov ebx, edx
mov ecx, eax
mov edx, dword [esp + 0x14c]
mov eax, dword [esp + 0x1b8]
jmp 0x4adf52
call fcn.0046c970
mov eax, ebx
mov ecx, esi
call fcn.0046c910
call fcn.0046c930
mov eax, edx
mov ecx, ebx
call fcn.0046c970
mov ecx, ebx
call fcn.0046c930
nop
call fcn.0046b490
jmp fcn.004ace80