Function at 0x4232e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0xb70
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov dword [esp + 0xb68], eax
mov dword [esp + 0xb64], ecx
mov dword [esp + 0xb60], edx
mov dword [esp + 0xb5c], esi
mov dword [esp + 0xb58], edi
mov eax, dword [0x4a922c]
and eax, 0xc0c80000
mov dword [0x4a922c], eax
mov eax, esp
mov dword [eax + 4], 8
mov dword [eax], 0x22eb
call fcn.00444b60
mov dword [esp + 0xb54], eax
mov eax, dword [0x4b1180]
mov ecx, eax
inc ecx
mov dword [0x4b1180], ecx
imul eax, eax, 0x15634575
xor eax, 0x5d46740
mov ecx, dword [0x4b28b0]
imul ecx, eax
mov dword [0x4b28b0], ecx
mov eax, dword [esp + 0xb54]
mov ecx, dword [esp + 0xb58]
mov edx, esp
mov dword [edx + 4], eax
mov dword [edx], ecx
call fcn.00455690
mov dword [esp + 0xb2c], eax
mov bx, word [0x4a1ce6]
mov ax, bx
and eax, 0x3f82
mov bx, ax
mov word [0x4a1ce6], bx
mov eax, dword [esp + 0xb54]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 8
call fcn.0044d6d0
mov eax, dword [0x4ae528]
mov ecx, eax
dec ecx
mov dword [0x4ae528], ecx
add eax, 0x9fb6a9c8
mov dword [0x4a559c], eax
cmp dword [esp + 0xb2c], 0
jne 0x423575
mov eax, dword [0x4a6274]
mov ecx, eax
dec ecx
mov dword [0x4a6274], ecx
mov ecx, dword [0x4a7d54]
and ecx, eax
mov dword [0x4a7d54], ecx
cmp dword [esp + 0xb68], 0
je 0x42344a
mov eax, dword [0x4aef3c]
shl eax, 6
or eax, 0x293db21e
mov ecx, dword [0x4a8c4c]
and ecx, eax
mov dword [0x4a8c4c], ecx
mov ecx, dword [esp + 0xb60]
call fcn.00428c00
mov dword [0x4b0f00], 0xfa4dcc58
jmp 0x425d1a
mov eax, dword [0x4a6cd0]
imul eax, eax, 0xbec86879
mov dword [0x4a6cd0], eax
mov eax, dword [esp + 0xb60]
mov ecx, dword [esp + 0xb5c]
mov edx, esp
mov dword [edx + 4], eax
mov dword [edx], ecx
call fcn.00438f80
mov dword [esp + 0xb28], eax
mov si, word [0x4a22d6]
mov ax, si
or eax, 0x6961
mov si, ax
mov word [0x4a22d6], si
cmp dword [esp + 0xb28], 0
jg 0x423545
mov eax, dword [0x4add14]
not eax
mov ecx, dword [0x4a6490]
and ecx, eax
mov dword [0x4a6490], ecx
mov ecx, dword [esp + 0xb60]
call fcn.00428c00
mov dx, word [0x49e498]
movsx eax, dx
xor eax, 0xffffffff
imul eax, eax, 0x6ad8220f
cmp eax, 0x2902e158
jne 0x423540
mov eax, 0xdcb2ee08
mov ecx, dword [0x4b05b0]
mov edx, ecx
dec edx
mov dword [0x4b05b0], edx
or ecx, 0x7b10c122
cmp eax, ecx
jge 0x42353b
mov eax, dword [0x4a5e10]
inc eax
mov dword [0x4a5e10], eax
mov cx, word [0x49e116]
movsx edx, cx
mov esi, dword [0x4b1e64]
mov edi, esi
dec edi
mov dword [0x4b1e64], edi
lea edx, [edx + esi - 1]
or eax, edx
mov edx, dword [0x4ab21c]
xor edx, eax
mov dword [0x4ab21c], edx
jmp 0x423540
jmp 0x423545
mov eax, 0xeeb910f5
mov ecx, dword [0x4a76d0]
shl ecx, 4
and ecx, 0xb8eb1296
cmp eax, ecx
jl 0x423570
mov eax, dword [0x4acc90]
add eax, 0xeb01bb73
mov dword [0x4acc90], eax
jmp 0x425d1a
mov eax, 0x3c2d3535
mov cx, word [0x49e444]
mov dx, cx
dec edx
mov cx, dx
mov word [0x49e444], cx
movsx edx, cx
imul edx, edx, 0xef0fdd56
mov esi, dword [0x4aad40]
mov edi, esi
dec edi
mov dword [0x4aad40], edi
or edx, esi
mov esi, dword [0x4b0b2c]
sub esi, edx
mov dword [0x4b0b2c], esi
mov edx, dword [0x4a9ed4]
add edx, 0x76da2e3a
xor edx, 0x8f74b2ad
mov esi, dword [0x4b25cc]
mov edi, esi
dec edi
mov dword [0x4b25cc], edi
sub eax, esi
cmp edx, eax
je 0x4235f2
mov eax, dword [0x4a91c8]
imul eax, eax, 0x16084d00
mov dword [0x4a91c8], eax
mov eax, 0xaea065c8
mov dword [0x4b0dd8], 0x95556ff6
mov dword [0x4af244], 0x58383583
mov ecx, dword [0x4aa654]
mov edx, ecx
dec edx
mov dword [0x4aa654], edx
add ecx, 0xeb799716
or ecx, 0xbb49909
cmp eax, ecx
jle 0x42364b
mov ax, word [0x4a15fa]
mov cx, ax
imul ecx, ecx, 0x9f2185fd
mov ax, cx
mov word [0x4a15fa], ax
jmp 0x4236b3
mov eax, 0x9ed24b00
mov cx, word [0x4a2084]
mov dx, cx
inc edx
mov cx, dx
mov word [0x4a2084], cx
movsx edx, cx
xor edx, 0x522a1f52
xor edx, 0x14b7a752
cmp eax, edx
jg 0x4236ae
mov eax, dword [0x4a5b90]
mov ecx, eax
dec ecx
mov dword [0x4a5b90], ecx
xor eax, 0xcddc98bf
or eax, 0x1998b00c
cmp eax, 0xbaf1d291
je 0x4236a4
jmp 0x4236a9
jmp 0x4236a9
jmp 0x4236ae
jmp 0x4236b3
mov eax, 0x22d96374
mov ecx, dword [0x4a7f90]
imul ecx, ecx, 0xf874977a
mov dword [0x4a7f90], ecx
mov dx, word [0x49de82]
movsx ecx, dx
sar ecx, 0xa
add ecx, 0x456df315
or ecx, 0x74f592c8
mov esi, dword [0x4a56b0]
and esi, ecx
mov dword [0x4a56b0], esi
lea ecx, [esp + 0x69c]
mov dword [esp + 0x128], eax
call fcn.0041fc70
mov ecx, dword [0x4afb44]
mov esi, dword [esp + 0x128]
cmp esi, ecx
mov dword [esp + 0x124], eax
jg 0x42372a
mov dword [0x4a6758], 0xfd0fdfea
mov eax, 0x5120fcb0
mov cx, word [0x4a1e7c]
mov dx, cx
add edx, 0xd1079985
mov cx, dx
mov word [0x4a1e7c], cx
mov edx, dword [0x4a8fd8]
mov esi, edx
inc esi
mov dword [0x4a8fd8], esi
xor edx, 0xaf1f
mov cx, dx
mov word [0x49ef18], cx
mov cx, word [0x49f69c]
mov dx, cx
and edx, 0xf055
mov cx, word [0x4a417c]
mov si, cx
add esi, edx
mov cx, si
mov word [0x4a417c], cx
mov dword [esp + 0x214], 0
mov dword [esp + 0x210], 0
mov edx, dword [0x4a5e48]
mov esi, edx
dec esi
mov dword [0x4a5e48], esi
xor edx, 0xa90e4278
mov esi, dword [0x4afa0c]
add esi, edx
mov dword [0x4afa0c], esi
mov cx, word [0x49fbba]
mov dx, cx
and edx, 0x9ec0
mov cx, dx
mov word [0x49fbba], cx
mov dword [esp + 0x208], 0xffffffff
mov dword [esp + 0x204], 0xffffffff
mov edx, dword [0x4aed00]
sar edx, 4
or edx, 0x6fe404fb
cmp eax, edx
jne 0x42381d
mov eax, dword [0x4a4be4]
add eax, 0xec067c8c
mov dword [0x4a4be4], eax
mov eax, 0xfed76efc
mov dword [esp + 0x200], 0x50
mov word [0x4a17d2], 0x2b9c
mov byte [esp + 0x1ff], 0
mov ecx, dword [0x4a87c4]
mov edx, ecx
dec edx
mov dword [0x4a87c4], edx
xor ecx, 0x3881bb54
cmp eax, ecx
jge 0x42386f
mov eax, dword [0x4a5850]
xor eax, 0x2fcc
mov cx, ax
mov word [0x4a0c74], cx
mov eax, 0x4c131df4
mov ecx, esp
mov dword [ecx], 0
mov dword [esp + 0x120], eax
call fcn.00451280
add eax, 0x258
adc edx, 0
mov dword [esp + 0x210], eax
mov dword [esp + 0x214], edx
mov eax, dword [0x4accb0]
imul eax, eax, 0x58814883
and eax, 0x8d654a83
mov ecx, dword [esp + 0x120]
cmp ecx, eax
jge 0x4238cc
mov eax, dword [0x4af16c]
and eax, 0x80c1749d
mov dword [0x4af16c], eax
mov byte [esp + 0x6d5], 0
mov eax, dword [0x4a75e0]
imul eax, eax, 0x3d82ef53
xor eax, 0x54194cc
mov ecx, dword [0x4a8048]
and ecx, eax
mov dword [0x4a8048], ecx
mov eax, dword [esp + 0xb58]
mov ecx, esp
mov dword [ecx], eax
call fcn.00452410
mov dword [esp + 0x220], eax
mov dword [0x4b1190], 0xefeaf5ef
cmp dword [esp + 0x220], 0x7f
jle 0x423940
mov eax, dword [0x4a813c]
shl eax, 0xa
mov ecx, dword [0x4a84ac]
and eax, ecx
and eax, 0xf554ac00
mov dword [0x4a84ac], eax
jmp 0x425c66
mov ax, word [0x49ee64]
mov cx, ax
or ecx, 0x8e1
mov ax, cx
mov word [0x49ee64], ax
mov ecx, dword [esp + 0xb58]
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [esp + 0xa37]
mov dword [edx], ecx
call fcn.004554d0
mov ecx, dword [0x4b1b5c]
and ecx, 0xf3dff8f9
mov dword [0x4b1b5c], ecx
mov ecx, dword [esp + 0x220]
sub ecx, 1
mov dword [esp + 0x21c], ecx
mov dword [esp + 0x11c], eax
mov eax, dword [esp + 0x21c]
mov ecx, dword [esp + 0x220]
sub ecx, 6
cmp eax, ecx
jl 0x423b53
mov dword [0x4b015c], 0x7268da3a
mov eax, dword [esp + 0x21c]
movsx eax, byte [esp + eax + 0xa37]
cmp eax, 0x3a
jne 0x423b2e
mov eax, 0xba845478
mov ecx, dword [0x4b1154]
xor ecx, 0xffffffff
sub ecx, 0xb5f6b62b
cmp eax, ecx
jl 0x4239fd
mov dword [0x4a8cc0], 0xdfbfefff
mov eax, dword [esp + 0x21c]
mov byte [esp + eax + 0xa37], 0
mov cx, word [0x49fab6]
mov ax, cx
inc eax
mov cx, ax
mov word [0x49fab6], cx
movsx eax, cx
mov edx, dword [0x4a5d0c]
sar edx, 1
sub eax, edx
mov edx, dword [0x4a4bfc]
xor edx, 0x8c81bded
cmp eax, edx
jne 0x423ac7
mov eax, 0x808a6264
mov ecx, dword [0x4b064c]
or ecx, 0xe87c316e
mov edx, dword [0x4a958c]
xor edx, 0xffffffff
sub eax, edx
and eax, 0x6b457abd
cmp ecx, eax
jl 0x423a80
mov eax, dword [0x4af54c]
imul eax, eax, 0x5ac24000
mov dword [0x4af54c], eax
jmp 0x423ac2
mov eax, dword [0x4a7a00]
mov ecx, eax
inc ecx
mov dword [0x4a7a00], ecx
mov ecx, 0xa381d85a
sub ecx, eax
mov dx, word [0x4a42b0]
movsx eax, dx
mov dx, word [0x4a08d0]
movsx esi, dx
or eax, esi
cmp ecx, eax
jle 0x423ab8
jmp 0x423abd
jmp 0x423abd
jmp 0x423ac2
jmp 0x423ac7
mov eax, dword [esp + 0x21c]
mov dword [esp + 0x220], eax
mov eax, dword [0x4b266c]
shl eax, 5
or eax, 0x4b96
mov cx, word [0x4a1370]
mov dx, cx
add edx, eax
mov cx, dx
mov word [0x4a1370], cx
mov eax, dword [esp + 0x21c]
lea edx, [esp + 0xa37]
lea eax, [eax + edx + 1]
mov edx, esp
mov dword [edx], eax
call fcn.0045562a
mov dword [esp + 0x200], eax
mov eax, dword [0x4a656c]
add eax, 0x7cbde829
mov dword [0x4a656c], eax
jmp 0x423b53
mov eax, dword [0x4af580]
and eax, 0xa7f53bd6
mov dword [0x4af580], eax
mov eax, dword [esp + 0x21c]
add eax, 0xffffffff
mov dword [esp + 0x21c], eax
jmp 0x42399c
mov eax, dword [0x4b0124]
imul eax, eax, 0xd7d5f6e
mov dword [0x4b0124], eax
mov dword [esp + 0x21c], 0
mov eax, dword [esp + 0x21c]
cmp eax, dword [esp + 0x220]
jg 0x423da4
mov eax, 0x7e195eb
mov cx, word [0x49f328]
movsx edx, cx
xor edx, 0x432fa28e
cmp eax, edx
jl 0x423bc0
mov eax, dword [0x4a9de0]
imul eax, eax, 0xfc407b6b
mov ecx, dword [0x4aa1dc]
sub eax, ecx
mov ecx, dword [0x4a95b0]
add ecx, eax
mov dword [0x4a95b0], ecx
mov eax, dword [esp + 0x21c]
mov cl, byte [esp + eax + 0xa37]
mov byte [esp + eax + 0x946], cl
mov dx, word [0x4a40e0]
mov ax, dx
dec eax
mov si, ax
mov word [0x4a40e0], si
movsx eax, dx
and eax, 0xac30ca00
cmp eax, 0xb136fdd7
jle 0x423c33
mov eax, 0xb6609dcd
mov ecx, dword [0x4b1400]
xor ecx, 0xffffffff
and ecx, 0x82f1a50f
xor ecx, 0x5e40846c
cmp eax, ecx
jne 0x423c2e
mov eax, dword [0x4a51e8]
and eax, 0x56a762ce
mov dword [0x4a51e8], eax
jmp 0x423c33
mov eax, dword [esp + 0x21c]
movsx eax, byte [esp + eax + 0x946]
cmp eax, 0x2f
jne 0x423d7f
mov eax, 0x832f3a94
mov ecx, dword [0x4b02d8]
sar ecx, 7
sub ecx, 0xf014321c
or ecx, 0xbfeac52e
cmp eax, ecx
jne 0x423c7c
mov eax, dword [0x4a6de8]
add eax, 0xf693625a
mov dword [0x4a6de8], eax
mov eax, dword [esp + 0x21c]
mov byte [esp + eax + 0x946], 0
mov cx, word [0x4a1742]
movsx eax, cx
add eax, 0x110bd909
xor eax, 0xf3e031a7
mov edx, dword [0x4a9168]
add edx, 0x2d3b1901
or edx, 0x7fb2a30d
cmp eax, edx
jne 0x423ce2
mov eax, dword [0x4abc2c]
mov ecx, eax
inc ecx
mov dword [0x4abc2c], ecx
add eax, 0x27798e69
mov dx, word [0x4a27d0]
mov cx, dx
xor ecx, eax
mov dx, cx
mov word [0x4a27d0], dx
mov eax, dword [esp + 0x21c]
mov dword [esp + 0x218], eax
mov eax, dword [esp + 0x218]
cmp eax, dword [esp + 0x220]
jg 0x423d62
mov ax, word [0x49e710]
movsx ecx, ax
mov edx, dword [0x4b2140]
imul edx, ecx
mov dword [0x4b2140], edx
mov ecx, dword [esp + 0x218]
mov bl, byte [esp + ecx + 0xa37]
mov edx, dword [esp + 0x21c]
sub ecx, edx
mov byte [esp + ecx + 0x6d5], bl
mov ecx, dword [0x4a5644]
or ecx, 0x83cc5e9c
mov dword [0x4a5644], ecx
mov eax, dword [esp + 0x218]
add eax, 1
mov dword [esp + 0x218], eax
jmp 0x423cf0
mov ax, word [0x4a280e]
mov cx, ax
add ecx, 0x7b0091bc
mov ax, cx
mov word [0x4a280e], ax
jmp 0x423da4
mov eax, dword [0x4ab568]
add eax, 0x5ccb8607
mov dword [0x4ab568], eax
mov eax, dword [esp + 0x21c]
add eax, 1
mov dword [esp + 0x21c], eax
jmp 0x423b6e
lea eax, [esp + 0x6d5]
mov ecx, dword [0x4abd40]
imul ecx, ecx, 0x97cde5e0
mov dword [0x4abd40], ecx
mov ecx, esp
mov dword [ecx], eax
call fcn.00452410
mov ecx, dword [esp + 0xb5c]
mov edx, esp
mov dword [edx], ecx
mov dword [esp + 0x118], eax
call fcn.00452410
mov ecx, dword [esp + 0x118]
add ecx, eax
cmp ecx, 0x1ff
jbe 0x423e3f
mov eax, 0x5ed428ac
mov ecx, dword [0x4b29dc]
cmp eax, ecx
je 0x423e19
mov eax, dword [0x4af120]
add eax, 0xc49998aa
mov dword [0x4af120], eax
jmp 0x423e3a
mov eax, dword [0x4af0bc]
add eax, 0xd3741cc7
mov cx, word [0x4a275e]
mov dx, cx
imul edx, eax
mov cx, dx
mov word [0x4a275e], cx
jmp 0x425c66
mov eax, 0xe5e57b96
mov ecx, dword [0x4b00a0]
inc ecx
mov dword [0x4b00a0], ecx
xor ecx, 0x1ca27d7b
cmp eax, ecx
jl 0x423e73
mov eax, dword [0x4ac754]
add eax, 0x8fcbb3ba
mov dword [0x4ac754], eax
jmp 0x423e8b
mov ax, word [0x4a2186]
mov cx, ax
add ecx, 0x5e9df116
mov ax, cx
mov word [0x4a2186], ax
mov eax, dword [esp + 0xb5c]
mov ecx, esp
mov dword [ecx + 4], eax
lea eax, [esp + 0x6d5]
mov dword [ecx], eax
call fcn.004554e0
mov ecx, dword [0x4b1110]
inc ecx
mov dword [0x4b1110], ecx
mov edx, dword [0x4a7148]
inc edx
mov dword [0x4a7148], edx
and ecx, edx
xor ecx, 0xc4471f21
mov edx, dword [0x4a4c2c]
add edx, 0x6ecc94df
mov si, word [0x4a1df4]
movsx edi, si
xor edi, 0xffffffff
add edx, edi
cmp ecx, edx
mov dword [esp + 0x114], eax
jne 0x423f11
mov eax, dword [0x4af87c]
add eax, 0x3fc95ac
mov ecx, dword [0x4a6de8]
or eax, ecx
mov ecx, dword [0x4b242c]
add ecx, eax
mov dword [0x4b242c], ecx
mov dword [esp + 0x218], 0
mov eax, dword [0x4a6904]
mov ecx, eax
inc ecx
mov dword [0x4a6904], ecx
add eax, 0x875a2540
mov ecx, dword [0x4a794c]
xor ecx, eax
mov dword [0x4a794c], ecx
mov eax, esp
mov dword [eax + 4], 5
mov dword [eax], 0xa83a
call fcn.00444b60
mov dword [esp + 0xb50], eax
mov eax, dword [0x4a9d24]
add eax, 0x897d92bc
mov dword [0x4a9d24], eax
mov eax, dword [esp + 0xb50]
mov ecx, esp
mov dword [ecx], eax
lea ecx, [esp + 0x69c]
call fcn.00428010
sub esp, 4
mov dx, word [0x49dd78]
mov cx, dx
or ecx, 0xc983
mov dx, cx
mov word [0x49dd78], dx
mov ecx, dword [esp + 0xb50]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], 5
mov dword [esp + 0x110], eax
call fcn.0044d6d0
mov eax, dword [0x4af4f4]
mov ecx, eax
inc ecx
mov dword [0x4af4f4], ecx
imul eax, eax, 0xaa70f20f
mov ecx, dword [0x4a7d34]
and ecx, eax
mov dword [0x4a7d34], ecx
mov eax, dword [esp + 0xb60]
mov ecx, eax
call fcn.0041af10
cmp eax, 0
je 0x424357
mov eax, 0xab6450f0
mov ecx, dword [0x4a4c0c]
xor ecx, 0x20a40197
mov dword [0x4a4c0c], ecx
mov ecx, esp
mov dword [ecx + 4], 0xc
mov dword [ecx], 0x8511
mov dword [esp + 0x10c], eax
call fcn.00444b60
mov dword [esp + 0xb4c], eax
mov eax, dword [0x4ab304]
xor eax, 0x485792d1
mov ecx, dword [esp + 0x10c]
cmp ecx, eax
jne 0x42405d
mov eax, dword [0x4ae468]
imul eax, eax, 0xcabb2b07
mov ecx, dword [0x4b1250]
or ecx, eax
mov dword [0x4b1250], ecx
mov eax, 0xe2e52c05
mov ecx, dword [esp + 0xb60]
mov edx, dword [esp + 0xb4c]
mov esi, esp
mov dword [esi], edx
lea edx, [esp + 0x1e8]
mov dword [esp + 0x108], ecx
mov ecx, edx
mov dword [esp + 0x104], eax
mov dword [esp + 0x100], edx
call fcn.0041c190
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x100]
mov dword [ecx], edx
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x108]
mov dword [esp + 0xfc], eax
call fcn.0042b470
sub esp, 8
mov dword [esp + 0x21c], eax
mov ecx, dword [esp + 0x100]
call fcn.00407410
mov eax, dword [0x4b0a1c]
dec eax
mov dword [0x4b0a1c], eax
mov ecx, dword [esp + 0x104]
cmp ecx, eax
jg 0x4240f8
mov word [0x49eeee], 0x3840
mov eax, dword [esp + 0xb4c]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0xc
call fcn.0044d6d0
mov eax, dword [0x4a6f0c]
add eax, 0x24f5ca9c
mov dword [0x4a6f0c], eax
cmp dword [esp + 0x21c], 0
jne 0x42434e
mov eax, 0xd7edcbbf
mov ecx, dword [0x4a75c0]
inc ecx
mov dword [0x4a75c0], ecx
and ecx, 0x13c9955f
mov edx, dword [0x4ae1fc]
add edx, ecx
mov dword [0x4ae1fc], edx
mov dword [esp + 0x218], 1
mov ecx, dword [0x4a60e0]
dec ecx
mov dword [0x4a60e0], ecx
and ecx, 0x8ad86d79
cmp eax, ecx
jle 0x42419b
mov eax, dword [0x4b08e0]
shl eax, 8
mov cx, word [0x49e652]
mov dx, cx
lea eax, [eax + edx + 0x5ca58d8e]
mov cx, ax
mov word [0x49e652], cx
mov eax, dword [esp + 0xb60]
mov ecx, esp
mov dword [ecx], 0
mov ecx, eax
mov dword [esp + 0xf8], eax
call fcn.00430e40
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xb
mov ecx, dword [esp + 0xf8]
call fcn.0042fa90
sub esp, 8
mov ecx, dword [0x4a7424]
add ecx, 0xe2d8d997
mov dword [0x4a7424], ecx
mov ecx, esp
mov dword [ecx + 4], 6
mov dword [ecx], 0x42c1
mov dword [esp + 0xf4], eax
call fcn.00444b60
mov dword [esp + 0xb48], eax
mov eax, dword [0x4a8900]
dec eax
mov dword [0x4a8900], eax
or eax, 0xc156b506
mov ecx, dword [0x4af13c]
mov edx, dword [0x4a5234]
inc edx
mov dword [0x4a5234], edx
and ecx, edx
cmp eax, ecx
jle 0x42426d
mov ax, word [0x4a2162]
mov cx, ax
shl ecx, 7
mov edx, dword [0x4ada54]
mov esi, edx
inc esi
mov dword [0x4ada54], esi
add edx, 0xb79e678
xor ecx, edx
mov ax, word [0x4a1ae6]
mov dx, ax
sub edx, ecx
mov ax, dx
mov word [0x4a1ae6], ax
mov eax, 0x2106600
mov ecx, dword [esp + 0xb48]
mov edx, esp
mov dword [edx], ecx
lea ecx, [esp + 0x69c]
mov dword [esp + 0xf0], eax
call fcn.00428010
sub esp, 4
mov ecx, dword [0x4a5364]
mov edx, dword [0x4afa2c]
shl edx, 2
imul edx, edx, 0x25f43909
and ecx, edx
mov edx, dword [esp + 0xf0]
cmp edx, ecx
mov dword [esp + 0xec], eax
jl 0x424307
mov eax, 0x1dfe4d79
mov ecx, dword [0x4a6f74]
shl ecx, 9
mov edx, dword [0x4ac184]
imul edx, edx, 0x46229853
xor ecx, edx
cmp eax, ecx
jle 0x424302
mov eax, dword [0x4ac2cc]
imul eax, eax, 0xbed7d000
or eax, 0x793a2978
mov ecx, dword [0x4a5124]
sub ecx, eax
mov dword [0x4a5124], ecx
jmp 0x424307
mov eax, dword [esp + 0xb48]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 6
call fcn.0044d6d0
mov dx, word [0x49ecf6]
mov ax, dx
dec eax
mov dx, ax
mov word [0x49ecf6], dx
xor eax, 0xd785
mov dx, word [0x4a317e]
mov cx, dx
and ecx, eax
mov dx, cx
mov word [0x4a317e], dx
mov word [0x49f4b0], 0x469a
mov eax, 0x11b5bd27
mov ecx, dword [0x4b0328]
mov dx, word [0x4a086a]
movsx esi, dx
shl esi, 6
xor ecx, esi
cmp eax, ecx
jne 0x4243d7
mov eax, 0x498832f
mov ecx, dword [0x4b2024]
imul ecx, ecx, 0x518cf404
and ecx, 0x7c127c09
cmp eax, ecx
jl 0x4243d2
mov ax, word [0x4a1c60]
movsx ecx, ax
mov edx, 0x744ad977
sub edx, ecx
xor edx, 0xc5c36026
mov ecx, dword [0x4b05a8]
add ecx, 0xa9e6de9
add ecx, 0xbea69f8a
cmp edx, ecx
je 0x4243cd
jmp 0x4243cd
jmp 0x4243d2
jmp 0x4243d7
mov eax, esp
lea ecx, [esp + 0x6d5]
mov dword [eax], ecx
lea eax, [esp + 0x1d4]
mov ecx, eax
mov dword [esp + 0xe8], eax
call fcn.0042c530
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xe8]
mov dword [ecx], edx
lea ecx, [esp + 0x69c]
mov dword [esp + 0xe4], eax
call fcn.0042d7a0
sub esp, 4
mov ecx, dword [esp + 0xe8]
mov dword [esp + 0xe0], eax
call fcn.00420620
mov eax, dword [0x4a9728]
mov ecx, dword [0x4aead4]
imul eax, ecx
imul eax, eax, 0xf73c878a
mov dword [0x4aead4], eax
mov eax, esp
mov dword [eax + 4], 0x32
mov dword [eax], 0x9653
call fcn.00444b60
mov dword [esp + 0xb44], eax
mov eax, dword [0x4a6254]
imul eax, eax, 0x4bc288b3
add eax, 0x663a5c46
mov ecx, dword [0x4a9318]
shl ecx, 3
add ecx, 0x234481d
cmp eax, ecx
je 0x424498
mov eax, dword [0x4aa114]
add eax, 0x70f8ef78
mov dword [0x4aa114], eax
mov eax, 0x5528780a
mov ecx, dword [esp + 0xb44]
mov edx, esp
mov dword [edx], ecx
lea ecx, [esp + 0x1c0]
mov dword [esp + 0xdc], ecx
mov dword [esp + 0xd8], eax
call fcn.0042c530
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xdc]
mov dword [ecx], edx
lea ecx, [esp + 0x69c]
mov dword [esp + 0xd4], eax
call fcn.0042d7a0
sub esp, 4
mov ecx, dword [esp + 0xdc]
mov dword [esp + 0xd0], eax
call fcn.00420620
mov eax, dword [0x4aba98]
mov ecx, eax
inc ecx
mov dword [0x4aba98], ecx
imul eax, eax, 0x6c9f0ba3
mov si, word [0x4a167a]
movsx ecx, si
sar ecx, 3
add eax, ecx
mov ecx, dword [0x4ae458]
sub ecx, eax
mov dword [0x4ae458], ecx
mov eax, dword [esp + 0xb44]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0x32
call fcn.0044d6d0
mov eax, dword [0x4aa2bc]
xor eax, 0xffffffff
and eax, 0x8d6444e2
mov ecx, dword [esp + 0xd8]
cmp ecx, eax
jle 0x424584
mov eax, dword [0x4a8524]
mov ecx, eax
dec ecx
mov dword [0x4a8524], ecx
imul eax, eax, 0x50d20495
mov ecx, dword [0x4a9ab8]
add ecx, eax
mov dword [0x4a9ab8], ecx
jmp 0x42459c
mov ax, word [0x4a2e48]
mov cx, ax
xor ecx, 0x59f9
mov ax, cx
mov word [0x4a2e48], ax
mov eax, esp
lea ecx, [esp + 0x946]
mov dword [eax], ecx
lea eax, [esp + 0x1ac]
mov ecx, eax
mov dword [esp + 0xcc], eax
call fcn.0042c530
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xcc]
mov dword [ecx], edx
lea ecx, [esp + 0x69c]
mov dword [esp + 0xc8], eax
call fcn.0042d7a0
sub esp, 4
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0xc4], eax
call fcn.00420620
mov si, word [0x49fb8c]
mov ax, si
inc eax
mov di, ax
mov word [0x49fb8c], di
movsx eax, si
and eax, 0x31bb181b
mov ecx, dword [0x4ae08c]
xor ecx, eax
mov dword [0x4ae08c], ecx
cmp dword [esp + 0x218], 0
je 0x4248ae
mov eax, 0x460e660d
mov dword [0x4ad060], 0xb7fed7a7
mov ecx, esp
mov dword [ecx + 4], 0x44
mov dword [ecx], 0x39fb
mov dword [esp + 0xc0], eax
call fcn.00444b60
mov dword [esp + 0xb40], eax
mov eax, dword [0x4a853c]
imul eax, eax, 0xfe252a80
add eax, 0xf16d1d48
mov ecx, dword [0x4ac788]
sub ecx, eax
mov dword [0x4ac788], ecx
mov eax, dword [esp + 0xb40]
mov ecx, esp
mov dword [ecx], eax
lea eax, [esp + 0x198]
mov ecx, eax
mov dword [esp + 0xbc], eax
call fcn.0042c530
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xbc]
mov dword [ecx], edx
lea ecx, [esp + 0x69c]
mov dword [esp + 0xb8], eax
call fcn.0042d7a0
sub esp, 4
mov ecx, dword [esp + 0xbc]
mov dword [esp + 0xb4], eax
call fcn.00420620
mov eax, dword [0x4b020c]
mov ecx, eax
dec ecx
mov dword [0x4b020c], ecx
imul eax, eax, 0x43cea539
add eax, 0x6f6934ea
mov ecx, dword [esp + 0xc0]
cmp ecx, eax
jge 0x424709
mov eax, dword [0x4a977c]
add eax, 0x668eacd0
mov dword [0x4a977c], eax
mov eax, esp
mov dword [eax + 4], 3
mov dword [eax], 0x39f6
call fcn.00444b60
mov dword [esp + 0xb3c], eax
mov cx, word [0x4a0b6c]
mov ax, cx
dec eax
mov dx, ax
mov word [0x4a0b6c], dx
movsx eax, cx
add eax, 0x29e739a6
mov dword [0x4af6d0], eax
mov eax, dword [esp + 0xb40]
mov esi, esp
mov dword [esi + 4], eax
mov dword [esi], 0x44
call fcn.0044d6d0
mov eax, dword [0x4b1964]
dec eax
mov dword [0x4b1964], eax
imul eax, eax, 0x47c65f50
or eax, 0x9a0d
mov cx, word [0x4a0ec4]
mov si, cx
add esi, eax
mov cx, si
mov word [0x4a0ec4], cx
mov ecx, dword [esp + 0xb60]
call fcn.0041af10
mov ecx, dword [esp + 0xb3c]
mov esi, esp
mov dword [esi + 8], eax
mov dword [esi + 4], ecx
lea eax, [esp + 0x22b]
mov dword [esi], eax
call fcn.00456048
mov dx, word [0x4a0958]
movsx ecx, dx
or ecx, 0xcf8bd188
and ecx, 0xfffbdf8d
mov dx, word [0x49e802]
movsx esi, dx
and esi, 0xaeca7646
cmp ecx, esi
mov dword [esp + 0xb0], eax
jl 0x4247fb
mov eax, dword [0x4acba8]
xor eax, 0xb23a5818
mov dword [0x4acba8], eax
jmp 0x424825
mov eax, dword [0x4ad070]
mov ecx, eax
inc ecx
mov dword [0x4ad070], ecx
or eax, 0xd33f
mov dx, word [0x49e798]
mov cx, dx
imul ecx, eax
mov dx, cx
mov word [0x49e798], dx
mov eax, dword [esp + 0xb3c]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 3
call fcn.0044d6d0
mov eax, dword [0x4b1444]
shr eax, 7
mov dx, ax
mov word [0x49e504], dx
mov eax, esp
lea ecx, [esp + 0x22b]
mov dword [eax], ecx
lea eax, [esp + 0x184]
mov ecx, eax
mov dword [esp + 0xac], eax
call fcn.0042c530
sub esp, 4
mov ecx, esp
mov esi, dword [esp + 0xac]
mov dword [ecx], esi
lea ecx, [esp + 0x69c]
mov dword [esp + 0xa8], eax
call fcn.0042d7a0
sub esp, 4
mov ecx, dword [esp + 0xac]
mov dword [esp + 0xa4], eax
call fcn.00420620
mov word [0x4a15da], 0x137f
mov eax, dword [0x4abe78]
mov ecx, eax
inc ecx
mov dword [0x4abe78], ecx
imul eax, eax, 0x12f91d4c
mov dx, word [0x49f7da]
mov cx, dx
mov esi, ecx
dec esi
mov dx, si
mov word [0x49f7da], dx
lea eax, [eax + ecx - 1]
mov dx, word [0x49de84]
mov cx, dx
imul ecx, eax
mov dx, cx
mov word [0x49de84], dx
mov eax, esp
mov dword [eax + 4], 5
mov dword [eax], 0xb6e1
call fcn.00444b60
mov dword [esp + 0xb38], eax
mov eax, dword [0x4a7728]
add eax, 0x7f126287
mov dword [0x4a7728], eax
mov eax, dword [esp + 0xb38]
mov ecx, esp
mov dword [ecx], eax
lea eax, [esp + 0x170]
mov ecx, eax
mov dword [esp + 0xa0], eax
call fcn.0042c530
sub esp, 4
mov ecx, esp
mov esi, dword [esp + 0xa0]
mov dword [ecx], esi
lea ecx, [esp + 0x69c]
mov dword [esp + 0x9c], eax
call fcn.0042d7a0
sub esp, 4
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0x98], eax
call fcn.00420620
mov word [0x4a31c6], 0x2bdd
mov eax, dword [esp + 0xb38]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 5
call fcn.0044d6d0
mov eax, dword [0x4ac060]
lea eax, [eax + eax - 0x1e123170]
mov ecx, dword [0x4a6ea4]
or ecx, eax
mov dword [0x4a6ea4], ecx
cmp dword [esp + 0x218], 0
je 0x424a18
mov ax, word [0x4a0a22]
mov cx, ax
dec ecx
mov ax, cx
mov word [0x4a0a22], ax
movsx ecx, ax
imul ecx, ecx, 0x6489c3a1
xor ecx, 0x16f33f66
mov dword [0x4a68c8], ecx
mov ecx, dword [esp + 0xb60]
mov edx, esp
mov dword [edx], ecx
lea ecx, [esp + 0x69c]
call fcn.0042d7a0
sub esp, 4
mov ecx, dword [0x4a9564]
add ecx, 0xc320f62c
mov dword [0x4a9564], ecx
mov dword [esp + 0x94], eax
mov eax, 0x9e690b5
mov ecx, dword [0x4aaf94]
add ecx, 0xc876bcfc
mov edx, dword [0x4a9b58]
imul edx, ecx
mov dword [0x4a9b58], edx
mov ecx, dword [0x49d7cc]
mov edx, esp
lea esi, [esp + 0x946]
mov dword [edx], esi
mov dword [esp + 0x90], eax
call ecx
sub esp, 4
mov dword [esp + 0x224], eax
mov di, word [0x49ea6e]
mov ax, di
dec eax
mov bx, ax
mov word [0x49ea6e], bx
movsx eax, di
mov ecx, dword [esp + 0x90]
cmp ecx, eax
jne 0x424a98
mov eax, dword [0x4af260]
imul eax, eax, 0x69fc9fff
mov dword [0x4af260], eax
jmp 0x424ab0
mov eax, dword [0x4a4a0c]
add eax, 0x231f2707
mov ecx, dword [0x4b0ef0]
or ecx, eax
mov dword [0x4b0ef0], ecx
cmp dword [esp + 0x224], 0
jne 0x424ae3
mov eax, dword [0x4b0ef4]
xor eax, 0x6534
mov cx, word [0x4a08f6]
mov dx, cx
sub edx, eax
mov cx, dx
mov word [0x4a08f6], cx
jmp 0x425c66
mov eax, 0x1660113
mov ecx, dword [0x4ad424]
sar ecx, 0xa
add ecx, 0x71af8a4a
sub ecx, 0xd47bd3f8
cmp eax, ecx
jne 0x424b23
mov eax, dword [0x4afc74]
shr eax, 1
mov ecx, dword [0x4b07c4]
or eax, ecx
or eax, 0xd51011bd
mov dword [0x4b07c4], eax
jmp 0x424b33
mov eax, dword [0x4a83a8]
imul eax, eax, 0x2c227161
mov dword [0x4a83a8], eax
xorps xmm0, xmm0
movaps xmmword [esp + 0x6b0], xmm0
mov eax, dword [0x4aa0ec]
imul eax, eax, 0xab9148ec
mov dword [0x4aa0ec], eax
mov word [esp + 0x6b0], 2
mov dword [0x4ac6f0], 0xaf5d8e0a
mov eax, dword [0x49d7d4]
mov ecx, dword [0x49d7d8]
mov edx, dword [esp + 0x224]
mov edx, dword [edx + 0xc]
mov edx, dword [edx]
mov edx, dword [edx]
mov dword [esp + 0x16c], edx
mov edx, dword [esp + 0x16c]
mov esi, esp
mov dword [esi], edx
mov dword [esp + 0x8c], eax
call ecx
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [esp + 0x8c]
call eax
sub esp, 4
mov dword [esp + 0x6b4], eax
mov eax, dword [0x4ae19c]
or eax, 0xd7668e45
mov dword [0x4ae19c], eax
mov eax, dword [0x49d7d0]
movzx ecx, word [esp + 0x200]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov word [esp + 0x6b2], ax
mov ecx, dword [0x4af894]
not ecx
imul ecx, ecx, 0x9ef6a388
or ecx, 0x57ffa94
mov edx, dword [0x4ad0ac]
add edx, ecx
mov dword [0x4ad0ac], edx
cmp dword [esp + 0xb64], 0
je 0x424d8c
mov eax, 0xc6aeb782
mov cx, word [0x4a0674]
mov dx, cx
inc edx
mov cx, dx
mov word [0x4a0674], cx
movsx edx, cx
cmp eax, edx
jg 0x424c4a
mov ax, word [0x49eb88]
mov cx, ax
and ecx, 0xa73a
mov ax, cx
mov word [0x49eb88], ax
mov eax, dword [esp + 0xb64]
mov ecx, 0x10624dd3
mul ecx
shr edx, 6
mov eax, esp
mov dword [eax + 4], edx
lea ecx, [esp + 0x6b0]
mov dword [eax], ecx
call fcn.0042cd60
mov dword [esp + 0x6d0], eax
mov eax, dword [0x4ab770]
imul eax, eax, 0x4b8936a8
mov dword [0x4ab770], eax
cmp dword [esp + 0x6d0], 0
jge 0x424ca8
mov eax, dword [0x4a94cc]
imul eax, eax, 0x8fed5c7f
mov dword [0x4a94cc], eax
jmp 0x425c66
mov eax, dword [0x4a72dc]
mov ecx, eax
inc ecx
mov dword [0x4a72dc], ecx
imul eax, eax, 0x5226f69a
mov ecx, dword [0x4ac1dc]
and ecx, eax
mov dword [0x4ac1dc], ecx
mov eax, dword [0x49d7ec]
mov ecx, dword [esp + 0x6d0]
mov edx, esp
lea esi, [esp + 0xb64]
mov dword [edx + 0xc], esi
mov dword [edx], ecx
mov dword [edx + 0x10], 4
mov dword [edx + 8], 0x1006
mov dword [edx + 4], 0xffff
mov dword [esp + 0x88], esi
call eax
sub esp, 0x14
mov ecx, dword [0x4a5e38]
or ecx, 0x36215ec1
mov dword [0x4a5e38], ecx
mov ecx, dword [0x49d7ec]
mov edx, dword [esp + 0x6d0]
mov esi, esp
mov edi, dword [esp + 0x88]
mov dword [esi + 0xc], edi
mov dword [esi], edx
mov dword [esi + 0x10], 4
mov dword [esi + 8], 0x1005
mov dword [esi + 4], 0xffff
mov dword [esp + 0x84], eax
call ecx
sub esp, 0x14
mov ecx, dword [0x4ab85c]
sub ecx, 0x9d14e58d
cmp ecx, 0x77dfd4fc
mov dword [esp + 0x80], eax
jge 0x424d87
mov eax, dword [0x4b1170]
mov ecx, dword [0x4a634c]
sar ecx, 2
sub eax, ecx
mov dword [0x4a7c28], eax
jmp 0x424e8c
mov eax, dword [0x4adfa0]
shr eax, 6
add eax, 0x26031155
mov ecx, dword [0x4ae2b4]
inc ecx
mov dword [0x4ae2b4], ecx
and eax, ecx
mov dx, word [0x4a2090]
mov cx, dx
imul ecx, eax
mov dx, cx
mov word [0x4a2090], dx
mov eax, dword [0x49d7f0]
mov ecx, esp
mov dword [ecx + 8], 6
mov dword [ecx + 4], 1
mov dword [ecx], 2
call eax
sub esp, 0xc
mov dword [esp + 0x6d0], eax
mov eax, dword [0x4b0890]
mov ecx, dword [0x4b214c]
add ecx, eax
mov dword [0x4b214c], ecx
cmp dword [esp + 0x6d0], 0xffffffff
jne 0x424e1b
mov eax, dword [0x4a4c94]
add eax, 0x2ee87dbc
mov dword [0x4a4c94], eax
jmp 0x425c66
lea eax, [esp + 0x6b0]
mov ecx, dword [0x4a66d8]
mov edx, dword [0x4a7c4c]
lea ecx, [edx + ecx*4]
mov dword [0x4a7c4c], ecx
mov ecx, dword [0x49d7c8]
mov edx, dword [esp + 0x6d0]
mov esi, esp
mov dword [esi + 4], eax
mov dword [esi], edx
mov dword [esi + 8], 0x10
call ecx
sub esp, 0xc
cmp eax, 0xffffffff
jne 0x424e7d
mov ax, word [0x4a1026]
mov cx, ax
and ecx, 0xd643
mov ax, cx
mov word [0x4a1026], ax
jmp 0x425bcb
mov eax, dword [0x4a9a14]
add eax, 0xb3e5fa44
mov dword [0x4a9a14], eax
mov ax, word [0x49eff6]
movsx ecx, ax
mov edx, dword [0x4ae2a8]
sub ecx, edx
mov edx, dword [0x4a61f0]
inc edx
mov dword [0x4a61f0], edx
xor ecx, edx
mov edx, dword [0x4a6988]
or edx, ecx
mov dword [0x4a6988], edx
mov ecx, dword [0x49d7e8]
lea edx, [esp + 0x69c]
mov dword [esp + 0x7c], ecx
mov ecx, edx
mov dword [esp + 0x78], edx
call fcn.0041af10
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x74], eax
call fcn.0042e190
mov ecx, dword [esp + 0x6d0]
mov edx, esp
mov esi, dword [esp + 0x74]
mov dword [edx + 8], esi
mov dword [edx + 4], eax
mov dword [edx], ecx
mov dword [edx + 0xc], 0
mov eax, dword [esp + 0x7c]
call eax
sub esp, 0x10
mov dword [esp + 0x6cc], eax
mov eax, dword [0x4a9838]
mov ecx, eax
dec ecx
mov dword [0x4a9838], ecx
or eax, 0x3f554e9e
mov ecx, dword [0x4acccc]
mov edx, ecx
inc edx
mov dword [0x4acccc], edx
cmp eax, ecx
jle 0x424f73
mov ax, word [0x49da02]
movsx ecx, ax
mov edx, dword [0x4a6454]
mov esi, edx
inc esi
mov dword [0x4a6454], esi
or edx, 0x20c88800
cmp ecx, edx
jge 0x424f6e
mov eax, dword [0x4ac42c]
and eax, 0x8002000
mov dword [0x4ac42c], eax
jmp 0x424f73
lea eax, [esp + 0x69c]
mov ecx, dword [esp + 0x6cc]
mov dword [esp + 0x70], ecx
mov ecx, eax
call fcn.0041af10
mov ecx, dword [esp + 0x70]
cmp ecx, eax
jae 0x424fc8
mov eax, dword [0x4ac990]
mov ecx, eax
dec ecx
mov dword [0x4ac990], ecx
mov ecx, 0x52393903
sub ecx, eax
mov dx, word [0x49e710]
mov ax, dx
or eax, ecx
mov dx, ax
mov word [0x49e710], dx
jmp 0x425bcb
mov eax, 0x11100030
mov ecx, dword [0x4a8f30]
xor ecx, 0x6ebbdfff
mov dword [0x4a8f30], ecx
mov ecx, dword [esp + 0xb60]
mov dword [esp + 0x6c], eax
call fcn.00428c00
mov eax, dword [0x4ac6ac]
xor eax, 0xeed99f57
mov ecx, dword [esp + 0x6c]
cmp ecx, eax
jne 0x42502c
mov eax, 0x23c9e2ee
mov ecx, dword [0x4b1d40]
or ecx, 0xb3d67310
cmp eax, ecx
jge 0x425027
mov word [0x4a2fe6], 0xea07
jmp 0x42503b
mov eax, dword [0x4aa39c]
and eax, 0x932223d7
mov dword [0x4aa39c], eax
jmp 0x425040
mov eax, dword [0x4a6978]
imul eax, eax, 0x451b0a44
mov dword [0x4a6978], eax
mov eax, dword [0x49d7e0]
mov ecx, dword [esp + 0x6d0]
mov edx, esp
lea esi, [esp + 0x22b]
mov dword [edx + 4], esi
mov dword [edx], ecx
mov dword [edx + 0xc], 0
mov dword [edx + 8], 0x400
call eax
sub esp, 0x10
mov dword [esp + 0x6cc], eax
mov di, word [0x49f4c6]
mov ax, di
and eax, 0x87a0
mov di, ax
mov word [0x49f4c6], di
cmp dword [esp + 0x6cc], 0
jle 0x4250ce
mov eax, dword [esp + 0x210]
mov ecx, dword [esp + 0x214]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], eax
call fcn.0041fcd0
cmp eax, 0
je 0x4250eb
mov ax, word [0x4a3cb2]
mov cx, ax
and ecx, 0xebe1
mov ax, cx
mov word [0x4a3cb2], ax
jmp 0x425a0b
mov eax, dword [0x4b2398]
add eax, 0x17704f2d
mov dword [0x4b2398], eax
mov eax, dword [esp + 0xb60]
mov ecx, eax
mov dword [esp + 0x68], eax
call fcn.0041af10
mov ecx, dword [esp + 0x6cc]
add eax, ecx
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x68]
call fcn.00426f70
sub esp, 8
mov eax, dword [0x4ab7d0]
mov dx, word [0x4a3c76]
mov cx, dx
dec ecx
mov si, cx
mov word [0x4a3c76], si
movsx ecx, dx
imul eax, ecx
mov ecx, dword [0x4a9368]
xor ecx, eax
mov dword [0x4a9368], ecx
mov eax, dword [esp + 0xb60]
mov ecx, eax
call fcn.0041fb90
cmp eax, 0
jne 0x4251a4
mov eax, dword [0x4ad5fc]
inc eax
mov dword [0x4ad5fc], eax
mov ecx, dword [0x4a69dc]
xor eax, ecx
xor eax, 0x1701
mov dx, word [0x49f470]
mov cx, dx
sub ecx, eax
mov dx, cx
mov word [0x49f470], dx
jmp 0x425a0b
mov eax, 0x1c7b682a
mov cx, word [0x4a37de]
movsx edx, cx
mov esi, dword [0x4a6534]
mov edi, esi
inc edi
mov dword [0x4a6534], edi
xor edx, esi
cmp eax, edx
jg 0x425226
mov eax, dword [0x4aeee8]
shl eax, 7
mov ecx, dword [0x4a7204]
inc ecx
mov dword [0x4a7204], ecx
add ecx, 0xcaf54955
or ecx, 0x83b2de9f
cmp eax, ecx
jge 0x425212
mov ax, word [0x4a4760]
mov cx, ax
add ecx, 0x22ec6f5c
mov ax, cx
mov word [0x4a4760], ax
jmp 0x425221
mov eax, dword [0x4abbfc]
or eax, 0xfbd956f9
mov dword [0x4abbfc], eax
jmp 0x425226
mov ecx, dword [esp + 0xb60]
mov eax, dword [esp + 0x6cc]
mov edx, esp
mov dword [edx + 4], eax
lea eax, [esp + 0x22b]
mov dword [edx], eax
call fcn.0044ee00
sub esp, 8
mov ecx, dword [0x4b188c]
xor ecx, 0x59637c2c
mov dword [0x4b188c], ecx
cmp dword [esp + 0x208], 0
mov dword [esp + 0x64], eax
jge 0x425597
mov eax, dword [0x4af884]
add eax, 0x3a214d5e
mov dword [0x4af884], eax
mov eax, esp
mov dword [eax + 4], 5
mov dword [eax], 0xb6e1
call fcn.00444b60
mov dword [esp + 0xb34], eax
mov dword [0x4a98cc], 0x3bf5116a
mov ecx, dword [esp + 0xb60]
mov eax, dword [esp + 0xb34]
mov edx, esp
mov dword [edx], eax
lea eax, [esp + 0x158]
mov dword [esp + 0x60], ecx
mov ecx, eax
mov dword [esp + 0x5c], eax
call fcn.0041c190
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x5c]
mov dword [ecx], edx
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x58], eax
call fcn.0042b470
sub esp, 8
mov dword [esp + 0x208], eax
mov ecx, dword [esp + 0x5c]
call fcn.00407410
mov eax, dword [0x4a8908]
add eax, 0xee48f94c
mov dword [0x4a8908], eax
mov eax, dword [esp + 0xb34]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 5
call fcn.0044d6d0
mov si, word [0x49dc32]
mov ax, si
dec eax
mov si, ax
mov word [0x49dc32], si
imul eax, eax, 0x2aa5af44
mov ecx, 0xcee96f87
sub ecx, eax
mov si, cx
mov word [0x49f722], si
cmp dword [esp + 0x208], 0
jl 0x42557a
mov eax, 0xea4002db
mov ecx, dword [0x4ae668]
dec ecx
mov dword [0x4ae668], ecx
and ecx, 0x9bb3fbaa
cmp eax, ecx
jl 0x42538b
mov eax, dword [0x4a839c]
xor eax, 0x65c2db62
mov dword [0x4a839c], eax
mov eax, dword [esp + 0x208]
add eax, 4
mov dword [esp + 0x208], eax
mov dword [0x4a54f8], 0x1a223915
mov eax, dword [esp + 0xb60]
mov ecx, esp
mov dword [ecx], eax
call fcn.0044ce30
mov dword [esp + 0x204], eax
mov eax, dword [0x4ae394]
mov ecx, eax
dec ecx
mov dword [0x4ae394], ecx
or eax, 0x4020ae0c
cmp eax, 0x379ca447
jge 0x4253ef
mov eax, dword [0x4aafe0]
mov ecx, dword [0x4a4b70]
imul ecx, eax
mov dword [0x4a4b70], ecx
cmp dword [esp + 0x204], 0
jge 0x425561
mov eax, 0x5894248a
mov dword [0x4b0ae8], 0x33564fac
mov ecx, esp
mov dword [ecx + 4], 0xb
mov dword [ecx], 0xaea4
mov dword [esp + 0x54], eax
call fcn.00444b60
mov dword [esp + 0xb30], eax
mov dx, word [0x49fb16]
mov ax, dx
dec eax
mov dx, ax
mov word [0x49fb16], dx
movsx eax, dx
mov ecx, dword [0x4a77a8]
mov esi, ecx
dec esi
mov dword [0x4a77a8], esi
add eax, ecx
mov ecx, dword [0x4ad46c]
dec ecx
mov dword [0x4ad46c], ecx
sub eax, ecx
mov ecx, dword [esp + 0x54]
cmp ecx, eax
jle 0x4254a2
mov eax, dword [0x4a5d08]
mov ecx, eax
dec ecx
mov dword [0x4a5d08], ecx
xor eax, 0xb0a1d57
cmp eax, 0xeffbaffc
jle 0x42549d
mov eax, dword [0x4ae598]
imul eax, eax, 0xc77625ff
mov dword [0x4ae598], eax
jmp 0x4254a2
mov ecx, dword [esp + 0xb60]
mov eax, dword [esp + 0xb30]
mov edx, esp
mov dword [edx], eax
lea eax, [esp + 0x144]
mov dword [esp + 0x50], ecx
mov ecx, eax
mov dword [esp + 0x4c], eax
call fcn.0041c190
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x4c]
mov dword [ecx], edx
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x48], eax
call fcn.0042b470
sub esp, 8
mov dword [esp + 0x6cc], eax
mov ecx, dword [esp + 0x4c]
call fcn.00407410
mov eax, dword [0x4ad6f0]
and eax, 0xff1f9ad6
mov dword [0x4ad6f0], eax
mov eax, dword [esp + 0xb30]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0xb
call fcn.0044d6d0
mov eax, dword [0x4ae430]
imul eax, eax, 0xc153a537
mov dword [0x4ae430], eax
cmp dword [esp + 0x6cc], 0
jl 0x42554f
mov dword [0x4af270], 0xfcfeeff8
jmp 0x425a0b
mov eax, dword [0x4adeec]
sar eax, 7
xor eax, 0x8b202272
mov dword [0x4abc44], eax
mov eax, dword [0x4a58d4]
imul eax, eax, 0x58f4e705
mov ecx, dword [0x4a8598]
and ecx, eax
mov dword [0x4a8598], ecx
mov ax, word [0x4a066c]
movsx ecx, ax
and ecx, 0x7fe0e9c7
mov edx, dword [0x4b1644]
sub edx, ecx
mov dword [0x4b1644], edx
mov ax, word [0x4a40f2]
mov cx, ax
and ecx, 0xa4e4
mov ax, cx
mov word [0x4a40f2], ax
cmp dword [esp + 0x204], 0
jl 0x425634
mov eax, dword [0x4ac570]
mov ecx, eax
inc ecx
mov dword [0x4ac570], ecx
add eax, 0x164d5d6a
xor eax, 0xa786
mov dx, word [0x49dc56]
mov cx, dx
or ecx, eax
mov dx, cx
mov word [0x49dc56], dx
mov eax, dword [esp + 0xb60]
mov ecx, eax
call fcn.0041af10
sub eax, dword [esp + 0x208]
cmp eax, dword [esp + 0x204]
jb 0x425625
mov eax, dword [0x4a8dd0]
mov ecx, dword [0x4b1244]
add ecx, eax
mov dword [0x4b1244], ecx
jmp 0x425a0b
mov eax, dword [0x4a962c]
or eax, 0x4d625106
mov dword [0x4a962c], eax
mov eax, dword [0x4aaef4]
add eax, 0xc85f5037
mov dword [0x4aaef4], eax
cmp dword [esp + 0xb68], 0
je 0x425903
test byte [esp + 0x1ff], 1
jne 0x425903
mov eax, dword [0x4ab428]
xor eax, 0xd8667217
mov dword [0x4ab428], eax
mov eax, dword [esp + 0xb60]
mov ecx, eax
call fcn.0041af10
cmp eax, 0x4000
jbe 0x4258bb
mov ax, word [0x4a22c4]
mov cx, ax
add ecx, 0xe75d1aa
mov ax, cx
mov word [0x4a22c4], ax
mov byte [esp + 0x1ff], 1
mov ecx, dword [0x4b13d4]
add ecx, 0xda3ba318
mov ax, word [0x49dade]
mov dx, ax
xor ecx, edx
xor ecx, 0xdedf
mov ax, cx
mov word [0x49dade], ax
mov ecx, dword [esp + 0xb60]
mov edx, esp
mov dword [edx], ecx
lea ecx, [esp + 0x130]
call fcn.0043b110
sub esp, 4
mov si, word [0x4a3ea0]
mov cx, si
and ecx, 0x36ae
mov si, cx
mov word [0x4a3ea0], si
cmp dword [esp + 0x208], 0
mov dword [esp + 0x44], eax
jl 0x42578d
mov ax, word [0x4a0d04]
movsx ecx, ax
add ecx, 0xf987dba8
mov dword [0x4aabf8], ecx
mov ecx, dword [esp + 0x208]
mov edx, esp
mov dword [edx], 0
lea edx, [esp + 0x130]
mov dword [esp + 0x40], ecx
mov ecx, edx
mov dword [esp + 0x3c], edx
call fcn.00430e40
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x40]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov ecx, dword [esp + 0x3c]
call fcn.0042fa90
sub esp, 8
mov ecx, dword [0x4aa224]
imul ecx, ecx, 0xf2eeb3f3
mov si, word [0x49fe60]
mov dx, si
add edx, ecx
mov si, dx
mov word [0x49fe60], si
mov dword [esp + 0x38], eax
lea eax, [esp + 0x130]
lea ecx, [esp + 0x946]
mov dx, word [0x4a46cc]
mov si, dx
or esi, 0x8f9f
mov dx, si
mov word [0x4a46cc], dx
mov esi, dword [esp + 0xb68]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
call fcn.004445c0
cmp eax, 0
jne 0x425862
mov eax, 0x97e2968c
mov ecx, dword [0x4ab9c8]
and ecx, 0xf53ab7a5
mov dword [0x4ab9c8], ecx
mov dword [esp + 0x208], 0xffffffff
mov ecx, dword [0x4ab310]
mov edx, ecx
inc edx
mov dword [0x4ab310], edx
mov si, word [0x4a2d1c]
movsx edx, si
add ecx, edx
sub ecx, 0x6e88adb3
cmp eax, ecx
jl 0x42583c
mov ax, word [0x4a39a2]
mov cx, ax
inc ecx
mov ax, cx
mov word [0x4a39a2], ax
movsx ecx, ax
mov dword [0x4a94a0], ecx
mov ecx, dword [esp + 0xb60]
call fcn.00428c00
mov dword [0x4a7fc4], 0x2b6a764e
mov dword [esp + 0x12c], 0xd
jmp 0x42587c
mov eax, dword [0x4b25d8]
add eax, 0xa3341464
mov dword [0x4b25d8], eax
mov dword [esp + 0x12c], 0
lea ecx, [esp + 0x130]
call fcn.00420620
mov ecx, dword [esp + 0x12c]
test ecx, ecx
mov dword [esp + 0x34], ecx
je 0x4258b6
jmp 0x4258a0
mov eax, dword [esp + 0x34]
sub eax, 0xd
mov dword [esp + 0x30], eax
je 0x425a0b
jmp 0x425d22
jmp 0x4258bb
mov eax, 0x1f77ef8f
mov ecx, dword [0x4abb7c]
dec ecx
mov dword [0x4abb7c], ecx
mov edx, dword [0x4ad704]
imul edx, edx, 0x872be8e7
and ecx, edx
cmp eax, ecx
jl 0x4258fe
mov eax, dword [0x4ab8b8]
shl eax, 4
add eax, 0x8fe9acc8
mov ecx, dword [0x4aa434]
and ecx, eax
mov dword [0x4aa434], ecx
jmp 0x425903
mov eax, dword [0x4a8ee4]
add eax, 0x828c32de
mov dword [0x4a8ee4], eax
cmp dword [esp + 0xb64], 0x3b1a
jne 0x4259c4
mov eax, dword [0x4a4f6c]
xor eax, 0xffffffff
cmp eax, 0xd8da1c20
jg 0x425968
mov ax, word [0x49f5f0]
movsx ecx, ax
shl ecx, 9
mov edx, dword [0x4a82a4]
mov esi, edx
inc esi
mov dword [0x4a82a4], esi
mov esi, 0x1d271731
sub esi, edx
and ecx, esi
mov edx, dword [0x4b0f6c]
and edx, ecx
mov dword [0x4b0f6c], edx
mov eax, dword [esp + 0xb60]
mov ecx, eax
call fcn.0041af10
cmp eax, 0x500000
jbe 0x4259b0
mov ax, word [0x4a3bde]
mov cx, ax
dec ecx
mov ax, cx
mov word [0x4a3bde], ax
movsx ecx, ax
mov edx, dword [0x4a80f0]
or ecx, edx
or ecx, 0x6d9ebdf3
mov dword [0x4a80f0], ecx
jmp 0x425a0b
mov eax, dword [0x4ab63c]
xor eax, 0xbdfa
mov cx, ax
mov word [0x49f26a], cx
mov eax, dword [0x4a531c]
sar eax, 9
or eax, 0xf835ecdd
cmp eax, 0xb532a9c2
jl 0x425a06
mov ax, word [0x49f13c]
mov cx, ax
dec ecx
mov ax, cx
mov word [0x49f13c], ax
movsx ecx, ax
add ecx, 0x86fa7c11
mov edx, dword [0x4afcb4]
xor edx, ecx
mov dword [0x4afcb4], edx
jmp 0x425040
mov dword [0x4a82bc], 0x335c4ceb
cmp dword [esp + 0x208], 0
jl 0x425aa0
mov eax, dword [0x4acd94]
shl eax, 0xa
add eax, 0x66bb7ce9
and eax, 0xcd7bba3a
mov ecx, dword [0x4a6f80]
or ecx, eax
mov dword [0x4a6f80], ecx
mov eax, dword [esp + 0xb60]
mov ecx, dword [esp + 0x208]
mov edx, esp
mov dword [edx], 0
mov dword [esp + 0x2c], ecx
mov ecx, eax
mov dword [esp + 0x28], eax
call fcn.00430e40
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x2c]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov ecx, dword [esp + 0x28]
call fcn.0042fa90
sub esp, 8
mov si, word [0x4a0d82]
mov cx, si
add ecx, 0x7eedf9bf
mov si, cx
mov word [0x4a0d82], si
mov dword [esp + 0x24], eax
mov eax, dword [0x4ae4b8]
mov ecx, dword [0x4a6d4c]
shl ecx, 7
add ecx, 0x6272b88
cmp eax, ecx
jl 0x425aeb
mov ax, word [0x4a13fa]
mov cx, ax
mov edx, ecx
inc edx
mov ax, dx
mov word [0x4a13fa], ax
add ecx, 0x79f12ad4
mov ax, word [0x49f82c]
mov dx, ax
or edx, ecx
mov ax, dx
mov word [0x49f82c], ax
cmp dword [esp + 0xb68], 0
je 0x425ba9
test byte [esp + 0x1ff], 1
jne 0x425ba9
lea eax, [esp + 0x946]
mov word [0x4a0cca], 0xd9e1
mov ecx, dword [esp + 0xb68]
mov edx, dword [esp + 0xb60]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004445c0
cmp eax, 0
jne 0x425b9a
mov ax, word [0x49e506]
movsx ecx, ax
add ecx, 0x2e8c981b
and ecx, 0xd7a4cb95
mov edx, dword [0x4aa980]
imul edx, ecx
mov dword [0x4aa980], edx
mov ecx, dword [esp + 0xb60]
call fcn.00428c00
mov ecx, dword [0x4b0ecc]
mov edx, 0xce43ffea
sub edx, ecx
mov ecx, dword [0x4b06bc]
shr ecx, 9
sub edx, ecx
mov ax, word [0x4a23ca]
mov cx, ax
xor ecx, edx
mov ax, cx
mov word [0x4a23ca], ax
mov eax, dword [0x4a8c44]
add eax, 0xce613c03
mov dword [0x4a8c44], eax
mov eax, dword [0x4b0e00]
mov ecx, dword [0x4ae6cc]
add ecx, 0xcc060b7
or eax, ecx
mov ecx, dword [0x4b0978]
imul ecx, eax
mov dword [0x4b0978], ecx
mov eax, 0xb9141c18
mov ecx, dword [0x49d7f8]
mov edx, dword [esp + 0x6d0]
mov esi, esp
mov dword [esi], edx
mov dword [esi + 4], 2
mov dword [esp + 0x20], eax
call ecx
sub esp, 8
mov ecx, dword [0x4a9e0c]
mov edx, dword [esp + 0x20]
cmp edx, ecx
mov dword [esp + 0x1c], eax
jne 0x425c2c
mov eax, dword [0x4a52e0]
mov cx, word [0x4a2156]
mov dx, cx
inc edx
mov cx, dx
mov word [0x4a2156], cx
movsx edx, cx
imul eax, edx
mov dword [0x4a7d88], eax
mov eax, dword [0x49d7c4]
mov ecx, dword [esp + 0x6d0]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov ecx, dword [0x4ad854]
mov si, word [0x4a2bc8]
mov dx, si
lea ecx, [ecx + edx - 0x767dda5b]
mov si, cx
mov word [0x4a2bc8], si
mov dword [esp + 0x18], eax
mov eax, esp
lea ecx, [esp + 0x946]
mov dword [eax], ecx
mov dword [eax + 4], 0xf1
call fcn.004034a0
mov dx, word [0x4a133a]
mov ax, dx
imul eax, eax, 0x59e88976
mov dx, ax
mov word [0x4a133a], dx
mov eax, esp
lea ecx, [esp + 0xa37]
mov dword [eax], ecx
mov dword [eax + 4], 0xf1
call fcn.004034a0
mov eax, dword [0x4ac40c]
add eax, 0x204e801c
mov dword [0x4ac40c], eax
mov eax, esp
lea ecx, [esp + 0x6d5]
mov dword [eax], ecx
mov dword [eax + 4], 0x271
call fcn.004034a0
mov dword [0x4a9158], 0xb06c1331
mov eax, esp
lea ecx, [esp + 0x22b]
mov dword [eax], ecx
mov dword [eax + 4], 0x471
call fcn.004034a0
mov dx, word [0x4a175c]
mov ax, dx
add eax, 0xf6aee1c5
mov dx, ax
mov word [0x4a175c], dx
lea ecx, [esp + 0x69c]
call fcn.00420620
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
int3