Function at 0x4661e6
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x1f8
push esi
push edi
xor edi, edi
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x20], 0x8ec0ae97
inc edi
xor eax, eax
mov dword [esp + 0x30], edi
mov byte [esp + 0xf], al
mov esi, edx
mov dword [esp + 0x9c], esi
cmp byte [esp + 0xf], al
je 0x466234
push 0x1b02
push 0x70c
push 0x1e01
push eax
call dword [0xaac270]
xor eax, eax
mov dword [esp + 0x20], eax
jmp 0x4662cd
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], eax
jmp 0x46625a
mov ecx, dword [esp + 0x10]
mov dword [esp + ecx*4 + 0x1d8], 0x86cce57b
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 2
jl 0x466247
mov dword [esp + 0x18], edi
cmp dword [esp + 0x18], eax
jl 0x466286
mov byte [esp + 0xf], al
cmp byte [esp + 0xf], 0
je 0x466280
push eax
push eax
call dword [0xaac294]
xor eax, eax
dec dword [esp + 0x18]
jns 0x46626b
mov dword [esp + 0x18], edi
cmp dword [esp + 0x18], eax
jl 0x4662c9
mov dword [esp + 0x2c], 0x276b87d0
mov dword [esp + 0x2c], edi
cmp dword [esp + 0x2c], eax
jl 0x4662c3
mov byte [esp + 0xf], al
cmp byte [esp + 0xf], 0
je 0x4662bd
push eax
call dword [0xaac454]
push eax
call dword [0xaac470]
xor eax, eax
dec dword [esp + 0x2c]
jns 0x4662a2
dec dword [esp + 0x18]
jns 0x466290
inc dword [esp + 0x20]
cmp dword [esp + 0x20], 6
je 0x46623d
mov ecx, dword [0xaaa6a4]
test cl, 1
jne 0x466362
push eax
or ecx, edi
mov dword [0xaaa6b0], eax
push eax
mov dword [0xaaa6a4], ecx
mov dword [0xaaa6b4], eax
call fcn.00403fe2
mov ecx, eax
mov dword [0xaaa6cc], 0x3f800000
mov dword [0xaaa6b0], ecx
xor eax, eax
mov dword [esp + 0xcc], ecx
lea ecx, [esp + 0xcc]
push ecx
push 0x10
push eax
mov dword [0xaaa6b8], eax
mov ecx, 0xaaa6b8
mov dword [0xaaa6c0], eax
mov dword [0xaaa6bc], eax
lea eax, [esp + 0x1cc]
push eax
call fcn.00403d18
push 0x4af315
mov dword [0xaaa6c4], 7
mov dword [0xaaa6c8], 8
call fcn.0048b5ef
pop ecx
mov dword [esp + 0x18], 0x24a8c6a5
mov dword [esp + 0x18], 0xffffffef
cmp dword [esp + 0x18], 0x1a
jge 0x4663b5
xor eax, eax
mov byte [esp + 0xf], al
cmp byte [esp + 0xf], 0
je 0x46638f
push eax
call dword [0xaac308]
xor eax, eax
mov byte [esp + 0xf], al
cmp byte [esp + 0xf], 0
je 0x4663aa
push edi
push 0x13e9
push eax
push eax
call dword [0xaac290]
xor eax, eax
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 0x1a
jl 0x46637b
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0xd4]
mov dword [esp + 0x18], eax
imul eax, dword [esp + 0x3c], 0x2710
push 2
add eax, esi
mov dword [esp + 0x84], eax
mov dword [esp + 0x2c], 0x5020f89b
mov dword [esp + 0x24], 0xffffffff
call fcn.00433a68
mov dword [esp + 0x1c], 0xfffffffb
xor eax, eax
mov dword [esp + 0x24], 0xbdfadf62
mov dword [esp + 0x2c], 0xb8b78acc
mov dword [esp + 0x18], eax
push 0xfffffffffffffffc
pop ecx
mov dword [esp + 0x30], ecx
mov dword [esp + 0x24], ecx
mov dword [esp + 0x30], edi
mov dword [esp + 0x10], 0xd17017a6
mov dword [esp + 0x2c], 8
mov dword [esp + 0x14], eax
jmp 0x466445
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0xd4]
mov dword [ecx + edx*4], 0xca9f
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 2
jl 0x46642f
mov dword [esp + 0x14], eax
jmp 0x466462
mov ecx, dword [esp + 0x14]
mov dword [esp + ecx*4 + 0x74], 0x4309642e
inc dword [esp + 0x14]
cmp dword [esp + 0x14], edi
jl 0x466452
mov byte [esp + 0xf], al
cmp byte [esp + 0xf], al
je 0x46647b
push eax
call dword [0xaac0cc]
xor eax, eax
mov ecx, dword [esp + 0x20]
cmp dword [esp + 0x20], eax
jne 0x466489
mov ecx, dword [esp + 0x20]
inc dword [esp + 0x10]
xor edx, edx
mov ecx, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov ecx, dword [esp + 0x18]
mov ecx, dword [esp + 0xd4]
cmp dword [ecx], 0x4028
sete dl
mov dword [esp + 0x74], edx
mov dword [esp + 0x2c], eax
cmp dword [esp + 0x2c], eax
jne 0x4664c1
mov edx, eax
cmp dword [esp + 0x1c], eax
je 0x4664c3
mov edx, edi
mov ecx, dword [esp + 0x18]
sub edx, ecx
mov ecx, dword [esp + 0x28]
dec dword [esp + 0x28]
cmp ecx, edx
jg 0x4665e4
mov dword [esp + 0x14], eax
mov dword [esp + 0x28], edi
mov dword [esp + 0x18], 0x80555f25
mov dword [esp + 0x18], 0x1d979388
mov byte [esp + 0xf], al
cmp byte [esp + 0xf], 0
je 0x466514
push 0x2fb
push eax
push eax
push eax
push eax
call dword [0xaac454]
push eax
call dword [0xaac318]
xor eax, eax
mov esi, edi
cmp dword [esp + 0x14], eax
jne 0x46651e
mov esi, eax
mov eax, dword [esp + 0x28]
xor edx, edx
mov eax, dword [esp + 0x28]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
cmp ecx, eax
setg dl
xor ecx, ecx
mov dword [esp + 0x18], edx
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x14]
cmp eax, 0x903b
setne cl
mov dword [esp + 0x74], ecx
mov edx, dword [esp + 0x2c]
imul edx, ecx
xor ecx, ecx
sub edx, dword [esp + 0x10]
sub edx, dword [esp + 0x20]
mov eax, dword [esp + 0x28]
dec edx
cmp edx, eax
setg cl
xor edx, edx
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0xd4]
mov eax, dword [esp + 0x18]
cmp eax, dword [ecx + 4]
setne dl
cmp edx, dword [esp + 0x14]
jg 0x466593
mov eax, dword [esp + 0x24]
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x2c], esi
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x10]
neg edx
sbb edx, edx
inc edx
neg eax
sbb eax, eax
inc eax
sub edx, eax
mov eax, dword [esp + 0x14]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
inc eax
cmp edx, eax
mov eax, dword [esp + 0x14]
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [esp + 0x14]
setg dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [esp + 0x24], ecx
mov eax, dword [esp + 0x24]
mov dword [esp + 0x14], eax
jmp 0x466612
mov dword [esp + 0x20], eax
jmp 0x46660c
mov byte [esp + 0xf], al
cmp byte [esp + 0xf], 0
je 0x466608
push 0x1fad
push 0x255b
push eax
call dword [0xaac434]
xor eax, eax
inc dword [esp + 0x20]
cmp dword [esp + 0x20], eax
jle 0x4665ea
lea ecx, [esp + 0xd4]
call fcn.00433b3a
lea eax, [esp + 0x80]
push eax
call fcn.00468005
push 2
lea ecx, [esp + 0xa4]
mov esi, dword [eax]
mov dword [esp + 0x1c], 0xb26bdde0
mov dword [esp + 0x2c], esi
call fcn.00433a68
xor eax, eax
mov dword [esp + 0x10], eax
jmp 0x466662
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0xa0]
or dword [ecx + edx*4], 0xffffffff
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 2
jl 0x46664f
mov dword [esp + 0x18], 0xfffffff2
cmp dword [esp + 0x18], 0xfffffffb
jle 0x4667d2
mov dword [esp + 0x14], 7
mov dword [esp + 0x30], eax
mov dword [esp + 0x30], 0xffffffff
mov dword [esp + 0x30], 0x7f05f432
mov byte [esp + 0xf], al
cmp byte [esp + 0xf], 0
je 0x4666b2
call dword [0xaac454]
push eax
call dword [0xaac410]
xor eax, eax
mov dword [esp + 0x14], eax
jmp 0x4667b5
mov dword [esp + 0x10], eax
jmp 0x4666d4
mov ecx, dword [esp + 0x10]
mov dword [esp + ecx*4 + 0x1e0], 0xffffffff
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 4
jl 0x4666c1
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0xa0]
cmp dword [ecx + edx*4], eax
jne 0x4667bf
mov ecx, dword [esp + 0x14]
xor edx, edx
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0xa0]
cmp dword [edi + ecx*4], 1
sete dl
xor ecx, ecx
cmp edx, dword [edi + esi*4]
mov esi, dword [esp + 0x14]
setl cl
xor edx, edx
cmp ecx, 0xf90a
mov ecx, dword [esp + 0x24]
setle dl
add edx, dword [edi + ecx*4]
mov ecx, dword [esp + 0x14]
add ecx, edx
mov dword [esp + 0x24], edx
mov edx, dword [esp + 0x14]
add esi, ecx
mov ecx, dword [esp + 0xa0]
mov dword [ecx + edx*4], esi
je 0x466799
mov dword [esp + 0x30], 0x3f23
xor edi, edi
mov dword [esp + 0x30], 0x5486b6fe
inc edi
mov dword [esp + 0x30], 0xf4a0426a
mov dword [esp + 0x30], 0x9b8fa48a
mov dword [esp + 0x24], 0xf8ab
mov dword [esp + 0x10], eax
jmp 0x46678d
mov ecx, dword [esp + 0x10]
mov dword [esp + ecx*4 + 0x194], 0xfb8eb5ea
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edi
jl 0x46677a
dec dword [esp + 0x24]
jmp 0x4667b1
mov byte [esp + 0xf], al
cmp byte [esp + 0xf], 0
je 0x4667ae
push eax
push eax
call dword [0xaac228]
xor eax, eax
xor edi, edi
inc edi
inc dword [esp + 0x14]
cmp dword [esp + 0x14], edi
jle 0x4666bb
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 0xfffffffb
jg 0x46667c
mov esi, dword [esp + 0x28]
lea ecx, [esp + 0xa0]
call fcn.00433b3a
test esi, esi
je 0x466822
mov dword [esp + 0x18], 5
inc dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0xbc], esi
mov dword [esp + 0x18], eax
jmp 0x466816
mov byte [esp + 0xf], al
cmp byte [esp + 0xf], 0
je 0x466812
push eax
push eax
call dword [0xaac01c]
xor eax, eax
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 0x15
jle 0x4667fd
jmp 0x467f81
mov eax, dword [0xaaa6a4]
test al, 2
jne 0x4668b0
or eax, 2
mov dword [0xaaa6a4], eax
xor eax, eax
push eax
push eax
mov dword [0xaaa6d0], eax
mov dword [0xaaa6d4], eax
call fcn.00403fe2
mov ecx, eax
mov dword [0xaaa6ec], 0x3f800000
mov dword [0xaaa6d0], ecx
xor eax, eax
mov dword [esp + 0xb8], ecx
lea ecx, [esp + 0xb8]
push ecx
push 0x10
push eax
mov dword [0xaaa6d8], eax
mov ecx, 0xaaa6d8
mov dword [0xaaa6e0], eax
mov dword [0xaaa6dc], eax
lea eax, [esp + 0x1c8]
push eax
call fcn.00403d18
push 0x4af310
mov dword [0xaaa6e4], 7
mov dword [0xaaa6e8], 8
call fcn.0048b5ef
pop ecx
mov dword [esp + 0x14], edi
lea ecx, [esp + 0xf8]
mov dword [esp + 0x18], 0x6cd04cd0
push 2
call fcn.00433a68
xor eax, eax
mov dword [esp + 0x24], 0xfc5c2f00
mov dword [esp + 0x10], eax
jmp 0x4668f0
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0xf8]
mov dword [ecx + edx*4], 0x3efe
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 2
jl 0x4668da
mov ecx, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
cmp dword [esp + 0x14], 0xffffffff
sbb ecx, ecx
inc ecx
cmp ecx, dword [esp + 0x18]
je 0x466931
mov edx, eax
cmp dword [esp + 0x18], eax
je 0x466933
mov edx, edi
mov ecx, dword [esp + 0x14]
sub edx, ecx
cmp edx, 0xfff7
jae 0x4669b4
mov byte [esp + 0xf], al
cmp byte [esp + 0xf], al
je 0x46695d
push eax
push 0x1eb7
push eax
push eax
push eax
push eax
call dword [0xaac28c]
xor eax, eax
mov byte [esp + 0xf], al
cmp byte [esp + 0xf], 0
je 0x46696f
push eax
call dword [0xaac268]
xor esi, esi
lea ecx, [esp + 0xf8]
call fcn.00433b3a
xorps xmm0, xmm0
lea ecx, [esp + 0x17c]
movdqu xmmword [esp + 0x8c], xmm0
mov dword [esp + 0x20], 0x7c203980
push 4
call fcn.00433a68
mov dword [esp + 0x24], edi
mov dword [esp + 0x30], 0xffffffff
mov dword [esp + 0x10], esi
jmp 0x466a74
push 2
lea ecx, [esp + 0x144]
call fcn.00433a68
xor esi, esi
mov dword [esp + 0x28], esi
mov dword [esp + 0x10], esi
jmp 0x4669e4
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x140]
mov dword [eax + ecx*4], 0x9130
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 2
jl 0x4669ce
mov ecx, dword [esp + 0x18]
xor edx, edx
mov eax, dword [esp + 0xf8]
mov dword [esp + 0x2c], eax
mov dword [eax + 4], edi
mov eax, dword [esp + 0x14]
cmp ecx, eax
mov edi, dword [esp + 0x140]
setl dl
xor ecx, ecx
add edx, dword [esp + 0x24]
inc ecx
mov eax, dword [esp + 0x14]
imul edx, dword [edi + 4]
sub ecx, edx
xor edx, edx
sub ecx, eax
mov eax, dword [esp + 0x24]
cmp ecx, eax
mov eax, dword [esp + 0x18]
setg dl
xor ecx, ecx
add edx, dword [edi + 4]
cmp eax, edx
mov eax, dword [esp + 0x2c]
setge cl
mov dword [esp + 0x28], ecx
lea ecx, [esp + 0x140]
mov eax, dword [eax + 4]
mov dword [esp + 0x18], eax
call fcn.00433b3a
xor edi, edi
inc edi
jmp 0x466971
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x17c]
mov dword [eax + ecx*4], 0x39ba095a
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 4
jl 0x466a5e
mov ecx, dword [esp + 0x20]
xor edx, edx
imul ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x20]
push 0xfffffffffffffff6
cmp eax, ecx
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x24]
setne dl
add eax, 8
add eax, ecx
xor ecx, ecx
cmp edx, eax
mov eax, dword [esp + 0x180]
setge cl
mov dword [eax + 0xc], ecx
mov dword [esp + 0x24], esi
pop ecx
jmp 0x466b02
mov dword [esp + 0x30], ecx
mov dword [esp + 0x30], 0xfffffffc
mov dword [esp + 0x30], 0x65c2dd7
mov dword [esp + 0x30], edi
mov dword [esp + 0x30], 0xffffffff
mov dword [esp + 0x30], 0x7509cb0b
mov dword [esp + 0x10], esi
jmp 0x466af3
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x1d0], ecx
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 2
jl 0x466ae4
inc dword [esp + 0x24]
inc dword [esp + 0x20]
cmp dword [esp + 0x20], 3
jle 0x466ab6
lea ecx, [esp + 0x17c]
call fcn.00433b3a
lea eax, [esp + 0x3c]
push eax
call fcn.00468067
xor edx, edx
mov edi, dword [eax]
mov dword [esp + 0x14], 0x98e64e6d
mov dword [esp + 0x10], 0x8f4727ca
mov dword [esp + 0x18], 0xffffffff
mov dword [esp + 0x20], 0x8ee1d110
mov dword [esp + 0x18], 0x89a278c0
mov dword [esp + 0x1c], 0xfffffff9
mov dword [esp + 0x24], 0xfffffffe
mov dword [esp + 0x28], 0x5f321ee0
mov dword [esp + 0x18], 0xffffffff
mov eax, dword [esp + 0x10]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
cmp eax, ecx
mov dword [esp + 0x2c], edi
setne dl
sub edx, dword [esp + 0x14]
mov dword [esp + 0x20], edx
xor edx, edx
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x10]
cmp ecx, eax
setle dl
mov dword [esp + 0x18], edx
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x1c]
mov eax, dword [esp + 0x10]
mov dword [esp + 0x1c], 3
mov eax, dword [esp + 0x10]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x28]
mov dword [esp + 0x28], eax
mov edx, dword [esp + 0x28]
sub edx, dword [esp + 0x20]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
sub edx, dword [esp + 0x18]
sub edx, dword [esp + 0x14]
mov eax, dword [esp + 0x24]
cmp edx, eax
setne cl
cmp ecx, 0xffff
sbb eax, eax
xor edx, edx
neg eax
sub eax, dword [esp + 0x18]
cmp eax, 4
mov eax, dword [esp + 0x24]
setl dl
sub edx, 0xa9c4ad15
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setl cl
mov dword [esp + 0x18], ecx
xor ecx, ecx
mov eax, dword [esp + 0x18]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x20]
cmp eax, 1
setge cl
cmp byte [ebp + 0xc], 0
mov dword [esp + 0x18], ecx
jne 0x466c41
test edi, edi
jne 0x467226
push 3
pop esi
mov dword [esp + 0x10], 0x979b
lea ecx, [esp + 0x14c]
mov dword [esp + 0x24], 0x373b2c57
mov dword [esp + 0x18], 0x593f
push esi
call fcn.00433a68
push esi
lea ecx, [esp + 0x168]
call fcn.00433a68
xor edi, edi
mov dword [esp + 0x28], 0x5616d21b
inc edi
lea ecx, [esp + 0x134]
push edi
call fcn.00433a68
xor eax, eax
mov dword [esp + 0x1c], eax
jmp 0x466ca6
mov ecx, dword [esp + 0x1c]
mov dword [esp + ecx*4 + 0x40], 6
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], edi
jl 0x466c96
mov dword [esp + 0x1c], eax
jmp 0x466cc4
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14c]
mov dword [ecx + edx*4], eax
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], esi
jl 0x466cb2
mov dword [esp + 0x1c], eax
jmp 0x466ce6
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x164]
mov dword [ecx + edx*4], 0x30054750
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], esi
jl 0x466cd0
mov dword [esp + 0x1c], eax
jmp 0x466d08
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x134]
mov dword [ecx + edx*4], 0xfffffff6
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], edi
jl 0x466cf2
mov ecx, dword [esp + 0x10]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x10]
sub edx, ecx
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x10]
neg edx
sbb edx, edx
inc edx
sub ecx, edx
sub esi, ecx
mov ecx, dword [esp + 0x18]
neg esi
sbb esi, esi
xor edx, edx
inc esi
cmp esi, ecx
setne dl
add edx, dword [esp + 0x18]
jne 0x466d47
mov ecx, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
xor edx, edx
cmp ecx, 0xb489
mov ecx, dword [esp + 0x14c]
setle dl
add edx, dword [ecx + 8]
je 0x466d6a
mov ecx, edi
cmp dword [esp + 0x40], eax
jne 0x466d6c
mov ecx, eax
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x164]
neg edx
sbb edx, edx
neg edx
mov dword [eax], ecx
xor ecx, ecx
mov eax, dword [esp + 0x18]
cmp edx, eax
mov eax, dword [esp + 0x134]
sete cl
mov dword [eax], ecx
lea ecx, [esp + 0x134]
call fcn.00433b3a
lea ecx, [esp + 0x164]
call fcn.00433b3a
lea ecx, [esp + 0x14c]
call fcn.00433b3a
mov dl, byte [ebp + 0xc]
lea eax, [esp + 0x1f0]
mov ecx, dword [esp + 0x3c]
push eax
call fcn.00433ddb
mov esi, eax
lea edi, [esp + 0x90]
pop ecx
push 3
lea ecx, [esp + 0x50]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop edi
push edi
call fcn.00433a68
mov dword [esp + 0x14], 0x2971c1e
xor eax, eax
mov dword [esp + 0x20], 0x7617c0ec
mov dword [esp + 0x28], 0xffff
mov dword [esp + 0x10], eax
jmp 0x466e19
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x4c]
mov dword [ecx + edx*4], 0xa049
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edi
jl 0x466e06
mov dword [esp + 0x14], 2
cmp dword [esp + 0x14], eax
jl 0x46703e
mov edi, dword [esp + 0x4c]
mov dword [esp + 0x20], 0xb058efa9
mov dword [esp + 0x18], 0xfffffff7
mov dword [esp + 0x10], eax
jmp 0x466e5b
mov ecx, dword [esp + 0x10]
mov dword [esp + ecx*4 + 0x78], 0xc6548aa
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 2
jl 0x466e4b
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x4c]
cmp dword [ecx + edx*4], eax
je 0x466e90
mov ecx, dword [esp + 0x14]
xor edx, edx
mov ecx, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
cmp ecx, 0xffffffff
mov ecx, dword [esp + 0x4c]
setg dl
add edx, dword [ecx]
je 0x466e90
xor ecx, ecx
inc ecx
jmp 0x466e92
mov ecx, eax
add ecx, 0x6b5b3847
je 0x466eac
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x4c]
cmp dword [ecx + edx*4], eax
je 0x466eac
xor esi, esi
inc esi
jmp 0x466eae
mov esi, eax
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x4c]
push 0
cmp esi, dword [ecx + edx*4]
pop ecx
setge cl
add ecx, 0x4fda
mov dword [esp + 0x20], ecx
mov edx, dword [esp + 0x7c]
mov ecx, dword [esp + 0x20]
cmp ecx, edx
mov ecx, dword [esp + 0x4c]
push 0
pop edx
setg dl
cmp edx, dword [ecx]
mov ecx, dword [esp + 0x78]
push 0
pop edx
setne dl
add ecx, edx
cmp ecx, dword [esp + 0x14]
jne 0x466efc
cmp dword [esp + 0x20], eax
je 0x466efc
xor esi, esi
inc esi
jmp 0x466efe
mov esi, eax
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x4c]
push 0
cmp esi, dword [ecx + edx*4]
pop ecx
setne cl
sub ecx, dword [edi + 8]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x20], ecx
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x4c]
cmp edx, dword [ecx]
jl 0x467029
xor eax, eax
lea ecx, [esp + 0x110]
inc eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x24], eax
push 3
call fcn.00433a68
xor eax, eax
mov dword [esp + 0x10], eax
jmp 0x466f67
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x110]
or dword [ecx + edx*4], 0xffffffff
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 3
jl 0x466f54
mov dword [esp + 0x18], eax
jmp 0x46700e
mov dword [esp + 0x20], 2
cmp dword [esp + 0x20], eax
jl 0x467002
mov esi, dword [esp + 0x110]
mov dword [esp + 0x24], 0xffffffff
mov dword [esp + 0x24], 1
cmp dword [esp + 0x7c], eax
je 0x466fc2
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
cmp edx, ecx
push 0
pop ecx
setge cl
imul ecx, dword [esp + 0x1c]
add ecx, dword [esp + 0x7c]
je 0x466fc2
xor edx, edx
inc edx
jmp 0x466fc4
mov edx, eax
mov ecx, dword [esp + 0x1c]
imul ecx, edx
xor edx, edx
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x14]
cmp ecx, 0x8f4
setl dl
xor ecx, ecx
cmp edx, 0x5063f373
setg cl
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x24]
mov dword [esi + 4], ecx
dec dword [esp + 0x20]
jns 0x466f8c
mov dword [esp + 0x20], 0xffffffff
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 2
jle 0x466f77
lea ecx, [esp + 0x110]
call fcn.00433b3a
xor eax, eax
jmp 0x467031
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x18], ecx
dec dword [esp + 0x14]
jns 0x466e35
push 3
pop edi
mov eax, dword [esp + 0x20]
xor ecx, ecx
mov eax, dword [esp + 0x14]
or esi, 0xffffffff
mov eax, dword [esp + 0x28]
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x20]
cmp eax, esi
setl cl
mov dword [esp + 0x20], ecx
lea ecx, [esp + 0x4c]
call fcn.00433b3a
cmp byte [ebp + 0xc], 0
je 0x467220
cmp dword [esp + 0x94], 0
je 0x467220
mov dword [esp + 0x30], esi
lea ecx, [esp + 0x198]
mov dword [esp + 0x30], esi
push edi
call fcn.00433a68
push edi
lea ecx, [esp + 0x1b4]
call fcn.00433a68
xor eax, eax
mov dword [esp + 0x24], 0xdbbe5689
mov dword [esp + 0x14], eax
jmp 0x4670cd
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x198]
mov dword [ecx + edx*4], 0x4a8b108f
inc dword [esp + 0x14]
cmp dword [esp + 0x14], edi
jl 0x4670b7
mov dword [esp + 0x14], eax
jmp 0x4670eb
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x1b0]
mov dword [ecx + edx*4], esi
inc dword [esp + 0x14]
cmp dword [esp + 0x14], edi
jl 0x4670d9
mov byte [esp + 0xf], al
cmp byte [esp + 0xf], al
je 0x46712a
push 0xa49
push 0x84b
push 0x17d7
push 0x315
push 0x1c00
push 0x2e
call dword [0xaac454]
push eax
call dword [0xaac430]
push eax
call dword [0xaac0b8]
dec dword [esp + 0x24]
lea ecx, [esp + 0x1b0]
call fcn.00433b3a
lea ecx, [esp + 0x198]
call fcn.00433b3a
mov eax, dword [esp + 0x98]
xor esi, esi
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], 1
mov dword [esp + 0xc0], eax
mov dword [esp + 0x10], esi
jmp 0x46717b
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0xac], 0xfffffff9
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edi
jl 0x467168
mov dword [esp + 0x20], esi
jmp 0x467205
mov dword [esp + 0x24], 0xfffffffb
xor edx, edx
mov dword [esp + 0x28], 0x6de0184d
mov eax, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
mov eax, dword [esp + eax*4 + 0xac]
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + eax*4 + 0xac]
mov eax, dword [esp + 0xac]
cmp eax, ecx
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
setle dl
imul ecx, edx
xor edx, edx
cmp ecx, eax
mov eax, dword [esp + 0x20]
setl dl
xor ecx, ecx
mov eax, dword [esp + eax*4 + 0xac]
cmp edx, eax
setl cl
xor edx, edx
mov dword [esp + 0x24], ecx
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + eax*4 + 0xac]
mov eax, dword [esp + 0x24]
cmp ecx, eax
setg dl
mov dword [esp + 0x28], edx
inc dword [esp + 0x20]
cmp dword [esp + 0x20], 2
jle 0x467187
mov eax, dword [esp + 0x94]
mov dword [esp + 0xc4], eax
jmp 0x467222
xor esi, esi
mov edi, dword [esp + 0x2c]
mov dword [esp + 0x18], 0x37b1891f
lea ecx, [esp + 0x1a4]
mov dword [esp + 0x10], 0x1078932
push 3
call fcn.00433a68
mov dword [esp + 0x14], esi
jmp 0x46725d
mov eax, dword [esp + 0x14]
mov dword [esp + eax*4 + 0x1c4], 0xffffffff
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 3
jl 0x46724a
push 3
mov dword [esp + 0x18], esi
pop esi
jmp 0x467283
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x1a4]
mov dword [eax + ecx*4], 0x7110
inc dword [esp + 0x14]
cmp dword [esp + 0x14], esi
jl 0x46726d
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x1a4]
mov eax, dword [esp + 0x18]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov dword [esp + 0x18], eax
imul eax, dword [esp + 0x18], 0x6ce
mov dword [esp + 0x1c8], eax
call fcn.00433b3a
test edi, edi
jne 0x4676fa
cmp dword [esp + 0x8c], edi
jle 0x4676fa
mov dword [esp + 0x20], 0x7f37
xor eax, eax
mov dword [esp + 0x14], 0xb63e8e1b
mov dword [esp + 0x1c], 0xcdead9ba
mov dword [esp + 0x10], eax
jmp 0x467314
mov ecx, dword [esp + 0x10]
mov dword [esp + ecx*4 + 0x104], 1
inc dword [esp + 0x10]
cmp dword [esp + 0x10], esi
jl 0x467301
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x1c], ecx
cmp dword [esp + 0x1c], eax
jne 0x467334
mov ecx, dword [esp + 0x14]
imul ecx, dword [esp + 0x14], 0x7a32
test ecx, ecx
je 0x467344
mov ecx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
xor edx, edx
mov ecx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
cmp ecx, 1
setl dl
cmp edx, 0xffffffff
je 0x467361
mov ecx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
cmp edx, ecx
push 0
pop ecx
setne cl
mov dword [esp + 0x10c], ecx
cmp dword [esp + 0x14], eax
je 0x467466
push 2
mov dword [esp + 0x24], eax
pop edi
jmp 0x46745a
push 4
lea ecx, [esp + 0x12c]
call fcn.00433a68
xor eax, eax
mov dword [esp + 0x10], eax
jmp 0x4673be
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x128]
mov dword [ecx + edx*4], 0x642e5f0e
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 4
jl 0x4673a8
mov dword [esp + 0x14], edi
cmp dword [esp + 0x14], eax
jl 0x4673ed
mov byte [esp + 0xf], al
cmp byte [esp + 0xf], 0
je 0x4673e3
push eax
call dword [0xaac488]
xor eax, eax
mov dword [esp + 0x1c], eax
dec dword [esp + 0x14]
jns 0x4673cf
mov dword [esp + 0x1c], edi
cmp dword [esp + 0x1c], eax
jl 0x46741c
mov dword [esp + 0x14], eax
jmp 0x467410
mov ecx, dword [esp + 0x14]
mov dword [esp + ecx*4 + 0x104], 0x16309070
inc dword [esp + 0x14]
cmp dword [esp + 0x14], esi
jl 0x4673fd
dec dword [esp + 0x1c]
jns 0x4673f7
mov dword [esp + 0x14], edi
cmp dword [esp + 0x14], eax
jl 0x46744a
mov dword [esp + 0x1c], eax
cmp dword [esp + 0x1c], edi
jg 0x467444
mov ecx, dword [esp + 0x128]
inc dword [ecx + 4]
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], edi
jle 0x467437
dec dword [esp + 0x14]
jns 0x467426
lea ecx, [esp + 0x128]
call fcn.00433b3a
inc dword [esp + 0x20]
cmp dword [esp + 0x20], edi
jle 0x467392
jmp 0x4674af
mov dword [esp + 0x1c], 2
cmp dword [esp + 0x1c], eax
jl 0x4674af
mov ecx, dword [esp + 0x1c]
cmp dword [esp + ecx*4 + 0x104], eax
jne 0x4674af
mov byte [esp + 0xf], al
cmp byte [esp + 0xf], 0
je 0x4674a9
push eax
push 0x7fa
push eax
call dword [0xaac454]
push eax
call dword [0xaac430]
push eax
call dword [0xaac07c]
xor eax, eax
dec dword [esp + 0x1c]
jns 0x467474
mov edi, dword [esp + 0x8c]
mov dword [esp + 0x18], 5
inc dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x18], eax
jmp 0x4674e3
mov byte [esp + 0xf], al
cmp byte [esp + 0xf], 0
je 0x4674df
push eax
push eax
call dword [0xaac01c]
xor eax, eax
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 0x15
jle 0x4674ca
mov esi, dword [esp + 0x90]
test esi, esi
je 0x4676fa
test edi, edi
je 0x4676fa
push 3
lea ecx, [esp + 0xe4]
call fcn.00433a68
xor eax, eax
mov dword [esp + 0x10], eax
jmp 0x46752d
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0xe0]
mov dword [ecx + edx*4], 0xb9b55bb2
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 3
jl 0x467517
mov ecx, dword [esp + 0xe0]
mov dword [ecx], eax
push 4
mov dword [esp + 0x14], 0x5010f7a7
pop edx
mov dword [esp + 0x24], edx
mov dword [esp + 0x10], eax
jmp 0x46755e
mov ecx, dword [esp + 0x10]
mov dword [esp + ecx*4 + 0x48], edx
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 1
jl 0x467552
inc dword [esp + 0x48]
mov dword [esp + 0x10], 0x13
jmp 0x46757f
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x24], ecx
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0x18
jne 0x467573
mov edx, dword [esp + 0xe0]
dec dword [edx]
cmp dword [edx], 0xffffffe4
jge 0x46753d
lea ecx, [esp + 0xe0]
call fcn.00433b3a
mov ecx, esi
call fcn.00465e04
mov dword [esp + 0x14], 0x279c4185
xor edx, edx
inc edx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x10], edx
mov edi, eax
xor eax, eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x24], 0x8c9dffbe
mov dword [esp + 0x24], 0xfffffff7
mov dword [esp + 0x24], 3
mov dword [esp + 0x10], eax
jmp 0x4675f7
mov ecx, dword [esp + 0x10]
mov dword [esp + ecx*4 + 0x84], 0x4dd
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 2
jl 0x4675e4
mov ecx, dword [esp + 0x14]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x18]
cmp ecx, dword [esp + 0x14]
jl 0x46761d
cmp dword [esp + 0x88], eax
jne 0x46761f
mov edx, eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x24], edx
mov ecx, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
mov ecx, dword [esp + 0x88]
mov ecx, dword [esp + 0x28]
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
sub esi, 0xfffffff9
neg esi
sbb esi, esi
xor edx, edx
inc esi
cmp ecx, esi
mov ecx, dword [esp + 0x14]
setle dl
mov dword [esp + 0x24], edx
xor edx, edx
cmp dword [esp + 0x24], ecx
setne dl
mov dword [esp + 0x14], edx
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x14]
sub edx, ecx
mov ecx, 0xe40424b9
neg edx
sbb edx, edx
inc edx
cmp ecx, edx
sbb ecx, ecx
neg ecx
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x24]
sub ecx, dword [esp + 0x88]
jne 0x4676ac
cmp dword [esp + 0x88], eax
jne 0x4676ac
cmp dword [esp + 0x10], eax
jne 0x4676ac
mov ecx, eax
jmp 0x4676af
xor ecx, ecx
inc ecx
mov dword [esp + 0x24], ecx
mov dword [esp + 0x18], 1
cmp dword [esp + 0x18], eax
jl 0x4676ee
mov dword [esp + 0x14], 1
cmp dword [esp + 0x14], eax
jl 0x4676e8
mov byte [esp + 0xf], al
cmp byte [esp + 0xf], 0
je 0x4676e2
call dword [0xaac404]
xor eax, eax
dec dword [esp + 0x14]
jns 0x4676cf
dec dword [esp + 0x18]
jns 0x4676c1
lea eax, [esp + 0x3c]
push eax
call fcn.00468067
mov dword [eax], edi
mov dword [esp + 0x18], 0x3342eb9
push 3
pop edi
mov dword [esp + 0x14], edi
mov dword [esp + 0x20], 0x2c4df8e3
mov dword [esp + 0x18], 0xf
cmp dword [esp + 0x18], 0xffffffe4
jg 0x46799a
xor eax, eax
mov dword [esp + 0x24], 0xfffffff8
mov dword [esp + 0x10], eax
jmp 0x467744
mov ecx, dword [esp + 0x10]
mov dword [esp + ecx*4 + 0x64], 0x28d9ba5f
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 4
jl 0x467734
mov byte [esp + 0xf], al
cmp byte [esp + 0xf], 0
je 0x467767
push 1
call dword [0xaac454]
push eax
call dword [0xaac3f4]
xor eax, eax
cmp dword [esp + 0x14], eax
je 0x467771
mov ecx, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
mov ecx, dword [esp + 0x68]
mov ecx, dword [esp + 0x14]
mov ecx, dword [esp + 0x64]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x6c]
cmp edx, ecx
push 0
pop ecx
setne cl
mov dword [esp + 0x20], ecx
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x64]
cmp edx, ecx
mov ecx, dword [esp + 0x68]
push 0
pop edx
setl dl
cmp edx, ecx
push 0
pop ecx
setle cl
xor edx, edx
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x64]
cmp dword [esp + 0x24], ecx
push 0
setne dl
mov dword [esp + 0x28], edx
mov edx, dword [esp + 0x1c]
add edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x70]
cmp edx, ecx
pop ecx
setle cl
cmp ecx, dword [esp + 0x18]
jg 0x46780c
mov dword [esp + 0x24], 0x8eaf6082
inc dword [esp + 0x24]
mov byte [esp + 0xf], al
cmp byte [esp + 0xf], 0
je 0x46798b
call dword [0xaac258]
xor eax, eax
jmp 0x46798b
push 6
mov dword [esp + 0x20], 8
pop ecx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x38], ecx
cmp dword [esp + 0x1c], eax
je 0x467839
mov ecx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
cmp dword [esp + 0x20], eax
je 0x46784e
cmp dword [esp + 0x10], eax
je 0x46784e
xor edi, edi
inc edi
jmp 0x467850
mov edi, eax
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x68]
imul edx, ecx
mov ecx, dword [esp + 0x18]
push 0
cmp ecx, edx
pop ecx
setge cl
xor edx, edx
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x18]
cmp edi, ecx
mov ecx, dword [esp + 0x28]
setl dl
sub ecx, edx
neg ecx
push 3
sbb ecx, ecx
xor edx, edx
inc ecx
mov dword [esp + 0x2c], ecx
mov ecx, dword [esp + 0x6c]
cmp dword [esp + 0x2c], ecx
pop edi
setne dl
mov dword [esp + 0x24], edx
mov dword [esp + 0x14], eax
jmp 0x467981
mov dword [esp + 0x30], 0x6f6ec374
mov dword [esp + 0x24], eax
mov dword [esp + 0x1c], eax
jmp 0x467973
mov dword [esp + 0x28], eax
mov dword [esp + 0x10], eax
jmp 0x467965
mov dword [esp + 0x30], 0x2ec28784
mov dword [esp + 0x20], edi
cmp dword [esp + 0x20], eax
jl 0x4678e6
mov ecx, dword [esp + 0x14]
cmp dword [esp + ecx*4 + 0x64], eax
jne 0x4678e6
dec dword [esp + 0x20]
jns 0x4678d6
mov ecx, dword [esp + 0x1c]
cmp dword [esp + ecx*4 + 0x64], eax
jne 0x46795a
inc dword [esp + 0x28]
xor edx, edx
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
neg esi
cmp ecx, esi
setne dl
cmp edx, 0xffffffff
je 0x467915
cmp dword [esp + 0x28], eax
je 0x467915
xor edx, edx
inc edx
jmp 0x467917
mov edx, eax
mov ecx, dword [esp + 0x14]
sub ecx, edx
sub ecx, 0x4e0c42ef
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x1c]
mov ecx, dword [esp + ecx*4 + 0x64]
test ecx, ecx
mov ecx, dword [esp + 0x20]
setne dl
neg ecx
mov dword [esp + 0x38], edx
xor edx, edx
cmp dword [esp + 0x38], ecx
setle dl
cmp edx, 0x5364
jge 0x46795a
mov ecx, eax
jmp 0x46795d
xor ecx, ecx
inc ecx
mov dword [esp + 0x38], ecx
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edi
jle 0x4678c4
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], edi
jle 0x4678b7
inc dword [esp + 0x14]
cmp dword [esp + 0x14], edi
jle 0x4678a2
dec dword [esp + 0x18]
cmp dword [esp + 0x18], 0xffffffe4
jle 0x467726
lea ecx, [esp + 0x8c]
call fcn.0043533d
push edi
lea ecx, [esp + 0x5c]
call fcn.00433a68
mov dword [esp + 0x1c], 0x46df37d4
xor esi, esi
mov dword [esp + 0x28], 0xfffffffc
inc esi
mov dword [esp + 0x18], 0x79a1d127
xor eax, eax
mov dword [esp + 0x18], esi
mov dword [esp + 0x10], eax
jmp 0x4679ea
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x58]
mov dword [ecx + edx*4], 0xfffffff8
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edi
jl 0x4679d7
mov edi, dword [esp + 0x58]
mov dword [esp + 0x1c], eax
jmp 0x467c7a
mov dword [esp + 0x14], 0xfffffffc
mov dword [esp + 0x14], eax
jmp 0x467c6b
mov dword [esp + 0x10], 0x85faafe3
mov dword [esp + 0x38], esi
mov dword [esp + 0xd0], eax
mov dword [esp + 0x30], 0x72a6
mov dword [esp + 0x10], eax
jmp 0x467b5f
mov dword [esp + 0x20], 0xf3d37a5b
mov dword [esp + 0x44], 0x75b167d3
mov dword [esp + 0x24], 0xfae7a486
mov byte [esp + 0xf], al
cmp byte [esp + 0xf], 0
je 0x467a65
push eax
call dword [0xaac454]
push eax
call dword [0xaac400]
xor eax, eax
mov dword [esp + 0x20], 2
cmp dword [esp + 0x20], eax
jl 0x467b5b
push 4
lea ecx, [esp + 0x15c]
call fcn.00433a68
xor eax, eax
mov dword [esp + 0x24], esi
mov dword [esp + 0x18], eax
jmp 0x467aa4
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x158]
or dword [ecx + edx*4], 0xffffffff
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 4
jl 0x467a91
mov dword [esp + 0x28], 0xc8959310
mov ecx, dword [esp + 0x14]
mov ecx, dword [esp + 0x38]
mov ecx, dword [esp + 0x28]
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x58]
mov dword [ecx + edx*4], 0x530c4e2b
mov edx, 0xacf3b1d5
mov ecx, dword [esp + 0x1c]
sub edx, ecx
cmp edx, dword [esp + 0x14]
je 0x467aee
mov ecx, eax
cmp dword [esp + 0x14], eax
je 0x467af0
mov ecx, esi
mov eax, dword [esp + 0x24]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
add ecx, dword [esp + 0x1c]
neg ecx
sbb ecx, ecx
neg ecx
lea eax, [ecx + 0x415dc592]
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x14]
cmp ecx, eax
mov eax, dword [esp + 0x28]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [esp + 0x24]
setge cl
mov dword [esp + 0x18], ecx
xor ecx, ecx
cmp dword [esp + 0x18], eax
setg cl
mov dword [esp + 0x24], ecx
lea ecx, [esp + 0x158]
call fcn.00433b3a
dec dword [esp + 0x20]
jns 0x467a77
xor eax, eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 2
jle 0x467a32
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x58]
push 0
cmp dword [ecx + edx*4], eax
pop ecx
setne cl
xor edx, edx
cmp ecx, dword [edi + 4]
mov ecx, dword [esp + 0x14]
setle dl
add ecx, edx
je 0x467c49
mov dword [esp + 0x44], 0xffffffff
cmp dword [esp + 0x14], eax
je 0x467bad
mov ecx, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x58]
mov dword [ecx + edx*4], eax
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x58]
cmp dword [ecx + edx*4], eax
jne 0x467c35
mov ecx, dword [esp + 0x14]
imul ecx, dword [esp + 0x14], 0x43c6
test ecx, ecx
jne 0x467bdc
mov ecx, eax
cmp dword [edi + 4], eax
je 0x467bde
mov ecx, esi
imul ecx, ecx, 0x5251
xor edx, edx
cmp ecx, 0xffffffff
setg dl
mov dword [esp + 0x18], edx
cmp dword [esp + 0x18], eax
jne 0x467bfa
mov ecx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
cmp ecx, edx
push 0
pop ecx
setle cl
cmp ecx, 0xfffffffe
jne 0x467c19
cmp dword [esp + 0x18], eax
jne 0x467c1b
mov esi, eax
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x58]
push 0
cmp dword [ecx + edx*4], esi
pop ecx
sete cl
cmp ecx, dword [esp + 0x14]
je 0x467c3f
xor esi, esi
inc esi
cmp dword [esp + 0x44], eax
je 0x467c3f
mov ecx, esi
jmp 0x467c44
xor esi, esi
mov ecx, eax
inc esi
mov dword [edi + 4], ecx
jmp 0x467c67
mov dword [esp + 0x18], eax
jmp 0x467c60
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x58]
cmp dword [ecx + edx*4], eax
jne 0x467c67
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 2
jle 0x467c4f
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 2
jle 0x467a0e
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], 2
jle 0x4679fd
lea ecx, [esp + 0x58]
call fcn.00433b3a
mov edi, dword [esp + 0x2c]
test edi, edi
je 0x467d8d
push 3
lea ecx, [esp + 0x18c]
call fcn.00433a68
xor esi, esi
mov dword [esp + 0x30], 0xffffffff
mov dword [esp + 0x28], esi
lea ecx, [esp + 0x170]
push 1
call fcn.00433a68
push 3
mov dword [esp + 0x24], esi
pop edx
jmp 0x467ce3
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x188]
mov dword [eax + ecx*4], 2
inc dword [esp + 0x20]
cmp dword [esp + 0x20], edx
jl 0x467ccd
mov dword [esp + 0x20], esi
jmp 0x467d01
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x170]
mov dword [eax + ecx*4], edx
inc dword [esp + 0x20]
cmp dword [esp + 0x20], 1
jl 0x467cef
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x188]
sub edx, 0xfffffff8
neg edx
sbb edx, edx
xor ecx, ecx
mov dword [eax], 7
inc edx
mov eax, dword [esp + 0x28]
cmp edx, eax
setge cl
xor edx, edx
cmp ecx, 0x96e6
setl dl
xor eax, eax
test edx, edx
sets al
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x170]
mov dword [eax], ecx
lea ecx, [esp + 0x170]
call fcn.00433b3a
lea ecx, [esp + 0x188]
call fcn.00433b3a
mov edx, dword [esp + 0x9c]
mov ecx, edi
call fcn.00465f56
mov esi, eax
lea eax, [esp + 0x80]
push eax
mov dword [esp + 0xc0], esi
call fcn.00468005
mov dword [eax], esi
push 8
mov dword [esp + 0x14], 0x4d9e
lea ecx, [esp + 0xf0]
pop esi
mov dword [esp + 0x18], esi
xor edi, edi
mov dword [esp + 0x28], 0xbd2f23d
inc edi
mov dword [esp + 0x24], 0xffffffff
mov dword [esp + 0x20], 0xfaa9
mov dword [esp + 0x2c], edi
push 3
call fcn.00433a68
mov dword [esp + 0x24], 0x60039c1d
lea ecx, [esp + 0x11c]
push 2
call fcn.00433a68
xor eax, eax
mov dword [esp + 0x1c], eax
jmp 0x467df7
mov ecx, dword [esp + 0x1c]
mov dword [esp + ecx*4 + 0x34], 0xfffffff7
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], edi
jl 0x467de7
mov dword [esp + 0x1c], eax
jmp 0x467e19
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0xec]
mov dword [ecx + edx*4], 0x87e52695
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], 3
jl 0x467e03
mov dword [esp + 0x1c], eax
jmp 0x467e35
mov ecx, dword [esp + 0x1c]
mov dword [esp + ecx*4 + 0xc8], esi
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], edi
jl 0x467e26
mov dword [esp + 0x1c], eax
jmp 0x467e54
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x11c]
or dword [ecx + edx*4], 0xffffffff
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], 2
jl 0x467e41
mov byte [esp + 0xf], al
cmp byte [esp + 0xf], al
je 0x467e6d
call dword [0xaac29c]
xor eax, eax
mov ecx, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
add ecx, 0xd058
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x24], ecx
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x18]
cmp edx, ecx
push 0
pop ecx
setne cl
cmp ecx, dword [esp + 0x20]
jle 0x467eb1
mov esi, eax
cmp dword [esp + 0x34], eax
je 0x467eb3
mov esi, edi
mov ecx, dword [esp + 0x18]
xor edx, edx
cmp ecx, esi
setle dl
cmp edx, dword [esp + 0x34]
jle 0x467ecc
mov ecx, edi
cmp dword [esp + 0x18], eax
jne 0x467ece
mov ecx, eax
dec ecx
cmp ecx, 0x689
jle 0x467edf
mov esi, eax
cmp dword [esp + 0x10], eax
je 0x467ee1
mov esi, edi
mov ecx, dword [esp + 0x34]
xor edx, edx
cmp esi, ecx
mov ecx, dword [esp + 0x34]
setge dl
sub edx, ecx
mov dword [esp + 0x2c], edx
xor edx, edx
mov ecx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
mov ecx, dword [esp + 0x34]
mov ecx, dword [esp + 0x34]
cmp ecx, edi
mov ecx, dword [esp + 0xec]
setl dl
sub edx, dword [ecx]
neg edx
sbb edx, edx
inc edx
mov dword [esp + 0xc8], edx
mov ecx, dword [esp + 0x18]
add ecx, 0x88dd
add ecx, edx
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x24]
mov ecx, dword [esp + 0x34]
mov ecx, dword [esp + 0x18]
mov ecx, dword [esp + 0xec]
cmp dword [ecx + 4], edi
jl 0x467f52
mov ecx, dword [esp + 0x28]
cmp dword [esp + 0x2c], eax
jne 0x467f5e
cmp dword [esp + 0x34], eax
je 0x467f60
mov eax, edi
mov ecx, dword [esp + 0x11c]
mov dword [ecx], eax
lea ecx, [esp + 0x11c]
call fcn.00433b3a
lea ecx, [esp + 0xec]
call fcn.00433b3a
mov eax, dword [ebp + 8]
lea esi, [esp + 0xbc]
mov edi, eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop edi
pop esi
mov esp, ebp
pop ebp
ret