Function at 0x49b9b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x140]
cmp eax, dword [ecx + 8]
jbe 0x49d4d4
sub esp, 0x1c0
lea edi, [esp]
lea esi, [esp + 0x1c4]
call fcn.0045f59e
call fcn.004a1cc0
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x80], ecx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x7c], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x64], ebx
mov ebp, dword [esp + 0x14]
mov dword [esp + 0x1a0], ebp
mov esi, dword [esp + 0x1e8]
mov edi, dword [esp + 0x1e4]
mov esi, 0xffffffff
mov dword [esp + 0x38], esi
mov edi, 0xffffffff
mov dword [esp + 0x70], edi
xor edi, edi
mov dword [esp + 0x68], edi
xor esi, esi
mov dword [esp + 0x74], esi
xor esi, esi
mov dword [esp + 0x3c], esi
xor esi, esi
mov dword [esp + 0x6c], esi
xor esi, esi
mov dword [esp + 0x54], esi
mov esi, dword [esp + 0x1e0]
mov dword [esp + 0xac], esi
mov edi, dword [esp + 0x1dc]
mov dword [esp + 0xa8], edi
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0x1d8]
mov dword [esp + 0x1a8], eax
mov esi, dword [esp + 0x1e8]
mov edi, dword [esp + 0x1e4]
mov eax, dword [esp + 0xb0]
jmp 0x49bad1
mov eax, ecx
mov ecx, dword [esp + 0x80]
mov esi, edi
mov edi, dword [esp + 0x194]
mov dword [esp + 0xac], ebx
mov dword [esp + 0xa8], edx
mov dword [esp + 0x1a8], ebp
mov edx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x64]
mov ebp, dword [esp + 0x1a0]
test esi, esi
je 0x49ccae
mov dword [esp], edi
mov dword [esp + 4], esi
call fcn.00499be0
mov eax, dword [esp + 0x14]
mov dword [esp + 0x194], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x4c], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x50], edx
mov ebx, dword [esp + 0xc]
mov ebp, dword [esp + 8]
test ebx, ebx
jne 0x49bb26
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x1a8]
mov esi, dword [esp + 0xa8]
jmp 0x49bbda
mov esi, dword [esp + 0xa8]
lea edi, [ebx + esi]
mov eax, dword [esp + 0xac]
cmp eax, edi
jae 0x49bb8e
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x19c], ebp
mov ecx, dword [esp + 0x1a8]
mov dword [esp], ecx
mov dword [esp + 4], edi
mov dword [esp + 8], eax
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x19c]
mov esi, dword [esp + 0xa8]
mov dword [esp + 0x1a8], eax
mov eax, ecx
mov dword [esp + 0xac], edi
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0x1a8]
lea edx, [ecx + esi]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
call fcn.0045f7b0
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x50]
mov ebx, dword [esp + 0xa8]
mov ebp, dword [esp + 0x1a8]
mov esi, dword [esp + 0xac]
test edx, edx
je 0x49ccc3
mov dword [esp + 0xa4], esi
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x1a4], ebp
mov edi, ecx
mov ecx, dword [esp + 0x38]
test ecx, ecx
jge 0x49bc68
test edx, 0x100
je 0x49bc68
mov eax, dword [esp + 0x80]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x7c]
mov dword [esp], ecx
mov byte [esp + 8], 1
call fcn.004a3110
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
inc ebx
mov ebp, dword [esp + 0x1a4]
mov esi, dword [esp + 0xa4]
mov edi, dword [esp + 0x4c]
mov dword [esp + 0x68], ecx
mov dword [esp + 0x74], edx
mov dword [esp + 0x3c], ebx
mov edx, dword [esp + 0x50]
mov ebx, dword [esp + 0xa0]
mov ecx, eax
mov eax, dword [esp + 0x194]
mov dword [esp + 0x38], ecx
mov ecx, dword [esp + 0x70]
test ecx, ecx
jge 0x49bd17
test edx, 0x200
je 0x49bd17
nop
mov eax, dword [esp + 0x80]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x7c]
mov dword [esp], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x15180
call fcn.004587d0
mov eax, dword [esp + 0x10]
mov ecx, eax
mov eax, 0x91a2b3c5
imul ecx
lea eax, [edx + ecx]
sar eax, 0xb
mov edx, ecx
sar ecx, 0x1f
sub eax, ecx
imul ecx, eax, 0xe10
sub edx, ecx
mov ecx, eax
mov eax, 0x88888889
mov ebx, edx
imul edx
lea eax, [ebx + edx]
sar eax, 5
mov edx, ebx
sar ebx, 0x1f
sub eax, ebx
imul ebx, eax, 0x3c
sub edx, ebx
mov ebx, dword [esp + 0xa0]
mov ebp, dword [esp + 0x1a4]
mov esi, dword [esp + 0xa4]
mov edi, dword [esp + 0x4c]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x54], edx
mov eax, dword [esp + 0x194]
mov edx, dword [esp + 0x50]
mov dword [esp + 0x70], ecx
and edx, 0xffff
cmp edx, 0x109
jg 0x49c6c7
cmp edx, 0x103
jg 0x49c3df
cmp edx, 0x23
jg 0x49c2a4
cmp edx, 0x17
je 0x49c09a
lea ecx, [edx - 0x18]
cmp ecx, 9
ja 0x49c02b
mov ecx, dword [esp + 0x60]
test ecx, ecx
jne 0x49bdca
mov edx, dword [esp + 0x50]
cmp edx, 0x18
je 0x49bd7c
cmp edx, 0x1b
je 0x49bd7c
cmp edx, 0x19
je 0x49bd7c
cmp edx, 0x1a
je 0x49bd7c
cmp edx, 0x1c
jne 0x49bdce
lea edx, [esi + 1]
cmp ebx, edx
jae 0x49bdc0
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov ebp, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 0x4c]
mov byte [edx + ebp - 1], 0x5a
jmp 0x49ba9b
mov edx, dword [esp + 0x50]
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
mov dword [esp + 0xac], edx
mov eax, ecx
sar ecx, 0x1f
sub edx, ecx
test edx, edx
jge 0x49be49
lea edx, [esi + 1]
cmp ebx, edx
jae 0x49be37
mov dword [esp + 0xa8], ecx
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov ebp, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0xa8]
mov edi, dword [esp + 0x4c]
mov byte [edx + ebp - 1], 0x2d
mov esi, dword [esp + 0xac]
sub ecx, esi
neg eax
jmp 0x49be99
lea ecx, [esi + 1]
cmp ebx, ecx
jae 0x49be8e
mov dword [esp + 0x34], edx
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov ebp, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x60]
mov edx, dword [esp + 0x34]
mov edi, dword [esp + 0x4c]
mov byte [ecx + ebp - 1], 0x2b
mov esi, edx
mov edx, ecx
mov ecx, esi
mov dword [esp + 0xac], ecx
mov dword [esp + 0x78], eax
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
sar ecx, 0x1f
sub edx, ecx
mov dword [esp + 0xa8], edx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 2
call fcn.0049a750
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x50]
cmp ebp, 0x1b
je 0x49befc
cmp ebp, 0x20
je 0x49befc
cmp ebp, 0x1c
je 0x49befc
cmp ebp, 0x21
jne 0x49bf38
inc ebx
cmp ecx, ebx
jae 0x49bf33
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x50]
mov byte [ebx + edx - 1], 0x3a
cmp ebp, 0x1f
je 0x49bf81
cmp ebp, 0x1a
je 0x49bf81
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov eax, dword [esp + 0xa8]
imul eax, eax, 0x3c
mov ecx, dword [esp + 0xac]
sub ecx, eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 2
call fcn.0049a750
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x50]
cmp ebp, 0x19
je 0x49bfcd
cmp ebp, 0x1e
je 0x49bfcd
cmp ebp, 0x21
je 0x49bf95
cmp ebp, 0x1c
jne 0x49c011
inc ebx
cmp ecx, ebx
jae 0x49bfc8
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov byte [ebx + edx - 1], 0x3a
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov eax, 0x88888889
mov ecx, dword [esp + 0x78]
imul ecx
add edx, ecx
sar edx, 5
mov ebx, ecx
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x3c
sub ebx, ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 2
call fcn.0049a750
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x194]
mov edi, dword [esp + 0x4c]
mov ebp, edx
mov edx, ebx
mov ebx, ecx
mov ecx, dword [esp + 0x60]
jmp 0x49ba9b
cmp edx, 0x22
jge 0x49c039
mov ecx, dword [esp + 0x70]
jmp 0x49cb21
lea edi, [esp + 0x1ac]
mov eax, esi
lea esi, [esp + 0x1c4]
call fcn.0045f59e
nop
mov ecx, dword [esp + 0x1ac]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
and ecx, 0x3fffffff
mov dword [esp + 0xc], ecx
mov eax, dword [esp + 0x50]
mov dword [esp + 0x10], eax
call fcn.0049aad0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 0x4c]
mov edx, esi
jmp 0x49ba9b
mov edx, dword [esp + 0x64]
test edx, edx
je 0x49c13b
lea eax, [edx + esi]
cmp ebx, eax
jae 0x49c0e2
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov edx, dword [esp + 0x64]
mov esi, dword [esp + 0xa4]
mov dword [esp + 0x1a8], ebp
mov dword [esp + 0xac], eax
mov dword [esp + 0xa8], ebx
lea ecx, [ebp + esi]
mov dword [esp], ecx
mov ecx, dword [esp + 0x1a0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0045f7b0
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 0x4c]
mov edx, dword [esp + 0xac]
mov ebx, dword [esp + 0xa8]
mov ebp, dword [esp + 0x1a8]
jmp 0x49ba9b
mov eax, 0x88888889
mov edx, dword [esp + 0x60]
imul edx
mov eax, ecx
mov ecx, dword [esp + 0x60]
add edx, ecx
sar edx, 5
mov dword [esp + 0xac], edx
sar ecx, 0x1f
sub edx, ecx
test edx, edx
jge 0x49c1bc
lea edx, [esi + 1]
cmp ebx, edx
jae 0x49c1ac
mov dword [esp + 0xa8], ecx
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov ebp, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0xa8]
mov edi, dword [esp + 0x4c]
mov byte [edx + ebp - 1], 0x2d
mov esi, dword [esp + 0xac]
sub ecx, esi
jmp 0x49c20c
lea ecx, [esi + 1]
cmp ebx, ecx
jae 0x49c201
mov dword [esp + 0x30], edx
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov ebp, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x70]
mov edx, dword [esp + 0x30]
mov edi, dword [esp + 0x4c]
mov byte [ecx + ebp - 1], 0x2b
mov esi, edx
mov edx, ecx
mov ecx, esi
mov dword [esp + 0xac], ecx
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
sar ecx, 0x1f
sub edx, ecx
mov dword [esp + 0xa8], edx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 2
call fcn.0049a750
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov ecx, dword [esp + 0xa8]
imul ecx, ecx, 0x3c
mov edx, dword [esp + 0xac]
sub edx, ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 2
call fcn.0049a750
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 0x4c]
mov edx, esi
jmp 0x49ba9b
cmp edx, 0x101
jne 0x49c31c
mov edx, dword [esp + 0x68]
lea ecx, [edx - 1]
cmp ecx, 0xb
jbe 0x49c308
test edx, edx
sete cl
mov byte [esp + 0x29], cl
sar edx, 0x1f
test edx, edx
xchg ebp, ebx
sete bl
xchg ebp, ebx
lea edi, [esp + 0xe0]
xor eax, eax
call fcn.0045f0bb
movzx ecx, byte [esp + 0x29]
and ecx, ebp
test cl, cl
jne 0x49c2f6
mov ecx, dword [esp + 0x68]
mov eax, ecx
mov ebp, 0x14
jmp 0x49d4ac
mov byte [esp + 0xf3], 0x30
mov eax, 0x13
jmp 0x49d361
mov ecx, dword [0xe6dfc0]
lea ecx, [ecx + edx*8 - 8]
mov eax, dword [ecx + 4]
mov ecx, dword [ecx]
jmp 0x49d2c3
cmp edx, 0x102
jne 0x49c391
mov edx, dword [esp + 0x68]
lea ecx, [edx - 1]
cmp ecx, 0xb
ja 0x49c341
mov ecx, dword [0xe6dfc0]
lea ecx, [ecx + edx*8 - 8]
mov ecx, dword [ecx]
jmp 0x49d11e
test edx, edx
sete cl
mov byte [esp + 0x29], cl
sar edx, 0x1f
test edx, edx
xchg ebp, ebx
sete bl
xchg ebp, ebx
lea edi, [esp + 0xf4]
xor eax, eax
call fcn.0045f0bb
movzx ecx, byte [esp + 0x29]
and ecx, ebp
test cl, cl
jne 0x49c37f
mov ecx, dword [esp + 0x68]
mov eax, ecx
mov ebp, 0x14
jmp 0x49d299
mov byte [esp + 0x107], 0x30
mov eax, 0x13
jmp 0x49d0a6
cmp edx, 0x103
jne 0x49cb21
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x68]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.0049a750
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 0x4c]
mov edx, esi
jmp 0x49ba9b
cmp edx, 0x106
jg 0x49c599
cmp edx, 0x104
je 0x49c557
cmp edx, 0x105
jne 0x49c4b1
mov eax, dword [esp + 0x7c]
add eax, 0x15180
mov edx, dword [esp + 0x80]
adc edx, 0
mov dword [esp + 4], edx
mov dword [esp], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x93a80
call fcn.004587d0
mov eax, dword [esp + 0x10]
mov ecx, eax
mov eax, 0xc22e4507
imul ecx
lea eax, [edx + ecx]
sar eax, 0x10
sar ecx, 0x1f
sub eax, ecx
cmp eax, 6
jbe 0x49c49e
mov dword [esp + 0xac], eax
mov ecx, eax
sar eax, 0x1f
test eax, eax
sete dl
test ecx, ecx
sete bl
lea edi, [esp + 0xb8]
mov ebp, eax
xor eax, eax
call fcn.0045f0bb
and ebx, edx
test bl, bl
jne 0x49c48c
mov eax, dword [esp + 0xac]
mov ecx, 0x14
jmp 0x49d080
mov byte [esp + 0xcb], 0x30
mov eax, 0x13
jmp 0x49cf5f
mov ecx, dword [0xe6dfb0]
lea eax, [ecx + eax*8]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
jmp 0x49ce9f
mov eax, dword [esp + 0x7c]
add eax, 0x15180
mov edx, dword [esp + 0x80]
adc edx, 0
mov dword [esp + 4], edx
mov dword [esp], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x93a80
call fcn.004587d0
mov eax, dword [esp + 0x10]
mov ecx, eax
mov eax, 0xc22e4507
imul ecx
lea eax, [edx + ecx]
sar eax, 0x10
sar ecx, 0x1f
sub eax, ecx
cmp eax, 6
ja 0x49c50d
mov ecx, dword [0xe6dfb0]
lea eax, [ecx + eax*8]
mov eax, dword [eax]
jmp 0x49cd33
test eax, eax
sete cl
mov byte [esp + 0x29], cl
mov edx, eax
sar eax, 0x1f
test eax, eax
sete bl
lea edi, [esp + 0xcc]
mov ebp, eax
xor eax, eax
call fcn.0045f0bb
movzx ecx, byte [esp + 0x29]
and ebx, ecx
test bl, bl
jne 0x49c545
mov eax, 0x14
jmp 0x49ce7b
mov byte [esp + 0xdf], 0x30
mov eax, 0x13
jmp 0x49ccdf
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x68]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.0049a750
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 0x4c]
mov edx, esi
jmp 0x49ba9b
cmp edx, 0x107
je 0x49c685
cmp edx, 0x108
jne 0x49c643
mov edx, dword [esp + 0x74]
cmp edx, 0xa
jge 0x49c605
inc esi
cmp ebx, esi
jae 0x49c600
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x74]
mov edi, dword [esp + 0x4c]
mov byte [esi + ebp - 1], 0x20
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 0
call fcn.0049a750
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 0x4c]
mov edx, esi
jmp 0x49ba9b
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.0049a750
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 0x4c]
mov edx, esi
jmp 0x49ba9b
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.0049a750
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 0x4c]
mov edx, esi
jmp 0x49ba9b
cmp edx, 0x20d
jg 0x49c989
cmp edx, 0x113
jg 0x49c869
cmp edx, 0x10a
je 0x49c783
cmp edx, 0x10b
je 0x49c741
cmp edx, 0x113
jne 0x49cb21
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x38]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 4
call fcn.0049a750
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 0x4c]
mov edx, esi
jmp 0x49ba9b
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 3
call fcn.0049a750
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 0x4c]
mov edx, esi
jmp 0x49ba9b
mov edx, dword [esp + 0x3c]
cmp edx, 0x64
jge 0x49c82b
inc esi
cmp ebx, esi
jae 0x49c7d6
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x3c]
mov edi, dword [esp + 0x4c]
mov byte [esi + ebp - 1], 0x20
cmp edx, 0xa
jge 0x49c82b
inc esi
cmp ebx, esi
jae 0x49c826
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x3c]
mov edi, dword [esp + 0x4c]
mov byte [esi + ebp - 1], 0x20
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 0
call fcn.0049a750
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 0x4c]
mov edx, esi
jmp 0x49ba9b
cmp edx, 0x114
je 0x49c929
cmp edx, 0x20c
je 0x49c8eb
cmp edx, 0x20d
jne 0x49cb21
mov eax, 0xaaaaaaab
imul ecx
add edx, ecx
sar edx, 3
mov eax, ecx
sar ecx, 0x1f
sub edx, ecx
lea ecx, [edx + edx*2]
shl ecx, 2
sub eax, ecx
test eax, eax
jne 0x49c8ad
mov eax, 0xc
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.0049a750
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 0x4c]
mov edx, esi
jmp 0x49ba9b
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 2
call fcn.0049a750
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 0x4c]
mov edx, esi
jmp 0x49ba9b
mov edx, dword [esp + 0x38]
test edx, edx
jge 0x49c933
neg edx
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, 0x51eb851f
mov ecx, edx
imul edx
sar edx, 5
mov ebx, ecx
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x64
sub ebx, ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 2
call fcn.0049a750
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 0x4c]
mov edx, esi
jmp 0x49ba9b
cmp edx, 0x210
jle 0x49cbb8
cmp edx, 0x212
jle 0x49cb2c
cmp edx, 0x215
jne 0x49ca61
cmp ecx, 0xc
jl 0x49ca06
lea edx, [esi + 2]
cmp ebx, edx
jae 0x49c9fd
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 2
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov ebp, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x70]
mov esi, dword [esp + 0xa4]
mov edi, dword [esp + 0x4c]
mov word [ebp + esi], 0x4d50
jmp 0x49ca58
lea edx, [esi + 2]
cmp ebx, edx
jae 0x49ca51
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 2
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov ebp, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x70]
mov esi, dword [esp + 0xa4]
mov edi, dword [esp + 0x4c]
mov word [ebp + esi], 0x4d41
mov ecx, dword [esp + 0x60]
jmp 0x49ba9b
cmp edx, 0x216
jne 0x49cb21
cmp ecx, 0xc
jl 0x49cac6
lea edx, [esi + 2]
cmp ebx, edx
jae 0x49cabd
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 2
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov ebp, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x70]
mov esi, dword [esp + 0xa4]
mov edi, dword [esp + 0x4c]
mov word [ebp + esi], 0x6d70
jmp 0x49cb18
lea edx, [esi + 2]
cmp ebx, edx
jae 0x49cb11
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 2
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov ebp, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x70]
mov esi, dword [esp + 0xa4]
mov edi, dword [esp + 0x4c]
mov word [ebp + esi], 0x6d61
mov ecx, dword [esp + 0x60]
jmp 0x49ba9b
mov ecx, dword [esp + 0x60]
mov edx, esi
jmp 0x49ba9b
cmp edx, 0x211
jne 0x49cb76
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x54]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.0049a750
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 0x4c]
mov edx, esi
jmp 0x49ba9b
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x54]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.0049a750
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 0x4c]
mov edx, esi
jmp 0x49ba9b
cmp edx, 0x20e
jne 0x49cc22
mov eax, 0xaaaaaaab
imul ecx
add edx, ecx
sar edx, 3
mov eax, ecx
sar ecx, 0x1f
sub edx, ecx
lea ecx, [edx + edx*2]
shl ecx, 2
sub eax, ecx
test eax, eax
jne 0x49cbe4
mov eax, 0xc
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.0049a750
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 0x4c]
mov edx, esi
jmp 0x49ba9b
cmp edx, 0x20f
jne 0x49cc6c
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.0049a750
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 0x4c]
mov edx, esi
jmp 0x49ba9b
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.0049a750
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 0x4c]
mov edx, esi
jmp 0x49ba9b
mov ebx, dword [esp + 0xac]
mov esi, dword [esp + 0xa8]
mov ebp, dword [esp + 0x1a8]
mov dword [esp + 0x1ec], ebp
mov dword [esp + 0x1f0], esi
mov dword [esp + 0x1f4], ebx
add esp, 0x1c0
ret
lea ecx, [esp + 0x128]
mov dword [esp], ecx
lea ecx, [0x6741ed]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xa
lea edx, [eax - 0x14]
neg edx
mov ebx, edx
neg edx
sar edx, 0x1f
and eax, edx
lea eax, [esp + eax + 0xcc]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebx
lea eax, [0x6d1368]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 1
call fcn.0044adc0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0xa4]
lea edx, [ecx + 3]
mov ebx, dword [esp + 0xa0]
cmp ebx, edx
jb 0x49cd51
mov ebp, dword [esp + 0x1a4]
jmp 0x49cd9b
mov dword [esp + 0x188], eax
mov eax, dword [esp + 0x1a4]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 3
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov ebp, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x188]
mov ecx, dword [esp + 0xa4]
movzx esi, word [eax]
mov edi, esi
movzx esi, byte [eax + 2]
mov word [ebp + ecx], di
xchg esi, eax
mov byte [ebp + ecx + 2], al
xchg esi, eax
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 0x4c]
jmp 0x49ba9b
mov dword [esp + 0x44], edx
mov ecx, eax
mov eax, 0xcccccccd
mov ebx, edx
mul ebp
shr edx, 3
lea esi, [edx + edx*4]
shl esi, 1
sub ebp, esi
mov eax, 0x19999999
mov esi, edx
mul ebp
mov dword [esp + 0x9c], edx
mov dword [esp + 0x98], eax
mov edi, eax
mov eax, 0xcccccccd
mul ebx
shr edx, 3
mov eax, ecx
lea ecx, [edx + edx*4]
shl ecx, 1
sub ebx, ecx
lea ecx, [ebp + ebp*2]
lea ecx, [ebx + ecx*2]
mov ebx, eax
mov eax, 0xcccccccd
mov ebp, edx
mul ecx
shr edx, 3
mov dword [esp + 0x94], edx
mov ecx, ebp
add ebp, 0
add edi, ebp
mov dword [esp + 0x90], edi
add edi, edx
mov eax, 0xa
mul edi
mov edx, edi
mov edi, dword [esp + 0x44]
sub edi, eax
add ecx, 0
adc esi, 0
mov ecx, dword [esp + 0x98]
add ecx, ebp
mov ebp, dword [esp + 0x9c]
adc ebp, esi
mov ecx, dword [esp + 0x90]
mov esi, dword [esp + 0x94]
add ecx, esi
adc ebp, 0
lea ecx, [edi + 0x30]
mov byte [esp + ebx + 0xcb], cl
lea eax, [ebx - 1]
test ebp, ebp
sete cl
test edx, edx
seta bl
test ebp, ebp
xchg esi, ebx
seta bl
xchg esi, ebx
and ecx, ebx
or ecx, esi
test cl, cl
jne 0x49cdc3
jmp 0x49ccdf
mov edx, dword [esp + 0xa4]
lea ebx, [ecx + edx]
mov ebp, dword [esp + 0xa0]
cmp ebp, ebx
jb 0x49cebd
mov esi, dword [esp + 0x1a4]
jmp 0x49cf0f
mov dword [esp + 0x58], ecx
mov dword [esp + 0x198], eax
mov eax, dword [esp + 0x1a4]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ecx
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0xa4]
mov esi, ebp
mov ebp, eax
mov eax, dword [esp + 0x198]
mov dword [esp + 0xac], ebp
mov dword [esp + 0xa8], ebx
mov dword [esp + 0x1a8], esi
add edx, esi
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0045f7b0
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 0x4c]
mov edx, dword [esp + 0xa8]
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x1a8]
jmp 0x49ba9b
lea ecx, [esp + 0x108]
mov dword [esp], ecx
lea ecx, [0x6741ed]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xa
lea edx, [eax - 0x14]
neg edx
mov ebx, edx
neg edx
sar edx, 0x1f
and eax, edx
lea eax, [esp + eax + 0xb8]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebx
lea eax, [0x6d1368]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 1
call fcn.0044adc0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
jmp 0x49ce9f
mov dword [esp + 0x40], eax
mov edx, eax
mov eax, 0xcccccccd
mov ebx, edx
mul ebp
shr edx, 3
lea esi, [edx + edx*4]
shl esi, 1
sub ebp, esi
mov eax, 0x19999999
mov esi, edx
mul ebp
mov dword [esp + 0x9c], edx
mov dword [esp + 0x98], eax
mov edi, eax
mov eax, 0xcccccccd
mul ebx
shr edx, 3
mov dword [esp + 0x94], edx
mov eax, esi
lea esi, [edx + edx*4]
shl esi, 1
sub ebx, esi
lea esi, [ebp + ebp*2]
lea ebx, [ebx + esi*2]
mov ebp, eax
mov eax, ebx
mov esi, 0xcccccccd
mov ebx, edx
mul esi
shr edx, 3
mov dword [esp + 0x90], edx
add ebx, 0
add edi, ebx
mov dword [esp + 0x8c], edi
add edi, edx
mov eax, 0xa
mul edi
mov edx, dword [esp + 0x94]
add edx, 0
adc ebp, 0
mov edx, dword [esp + 0x98]
add edx, ebx
mov edx, dword [esp + 0x9c]
adc ebp, edx
mov edx, dword [esp + 0x8c]
mov ebx, dword [esp + 0x90]
add edx, ebx
adc ebp, 0
mov edx, dword [esp + 0x40]
sub edx, eax
add edx, 0x30
mov byte [esp + ecx + 0xb7], dl
dec ecx
mov eax, edi
test eax, eax
seta dl
test ebp, ebp
seta bl
xchg esi, ebx
sete bl
xchg esi, ebx
and esi, edx
or esi, ebx
xchg esi, eax
test al, al
xchg esi, eax
jne 0x49cfbc
mov eax, ecx
jmp 0x49cf5f
lea ecx, [esp + 0x168]
mov dword [esp], ecx
lea ecx, [0x6739b1]
mov dword [esp + 4], ecx
mov dword [esp + 8], 8
lea edx, [eax - 0x14]
neg edx
mov ebx, edx
neg edx
sar edx, 0x1f
and eax, edx
lea eax, [esp + eax + 0xf4]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebx
lea eax, [0x6d1368]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 1
call fcn.0044adc0
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x194]
mov edx, dword [esp + 0x68]
mov ebx, dword [esp + 0xa0]
mov ebp, dword [esp + 0x1a4]
mov esi, dword [esp + 0xa4]
mov edi, dword [esp + 0x4c]
lea eax, [esi + 3]
cmp ebx, eax
jae 0x49d170
mov dword [esp + 0x190], ecx
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 3
lea eax, [0x63efa0]
mov dword [esp + 0x10], eax
call fcn.00447550
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x190]
mov edx, dword [esp + 0x68]
mov esi, dword [esp + 0xa4]
mov edi, dword [esp + 0x4c]
movzx esi, word [ecx]
mov word [esp + 0x2a], si
movzx esi, byte [ecx + 2]
mov ecx, esi
mov esi, dword [esp + 0xa4]
movzx edx, word [esp + 0x2a]
mov word [ebp + esi], dx
mov byte [ebp + esi + 2], cl
mov ecx, dword [esp + 0x60]
mov edx, eax
mov eax, dword [esp + 0x194]
jmp 0x49ba9b
mov eax, edx
mov edi, 0xcccccccd
mov esi, edx
mul edi
shr edx, 3
mov dword [esp + 0x9c], edx
lea edi, [edx + edx*4]
shl edi, 1
sub esi, edi
mov eax, 0x19999999
mul esi
mov dword [esp + 0x98], edx
mov dword [esp + 0x94], eax
mov eax, ecx
mov edi, 0xcccccccd
mul edi
shr edx, 3
mov dword [esp + 0x90], edx
lea edi, [edx + edx*4]
shl edi, 1
mov eax, ecx
sub ecx, edi
lea edi, [esi + esi*2]
lea edi, [ecx + edi*2]
mov ecx, eax
mov eax, 0xcccccccd
mov esi, edx
mul edi
shr edx, 3
mov dword [esp + 0x8c], edx
add esi, 0
mov edi, dword [esp + 0x94]
add edi, esi
mov dword [esp + 0x88], edi
add edi, edx
mov eax, 0xa
mul edi
mov edx, edi
mov edi, dword [esp + 0x90]
add edi, 0
mov edi, dword [esp + 0x9c]
adc edi, 0
mov dword [esp + 0x84], edi
mov edi, dword [esp + 0x94]
add edi, esi
mov edi, dword [esp + 0x98]
mov esi, dword [esp + 0x84]
adc edi, esi
mov esi, edi
mov edi, dword [esp + 0x88]
mov ebx, dword [esp + 0x8c]
add edi, ebx
adc esi, 0
sub ecx, eax
lea edi, [ecx + 0x30]
xchg edi, eax
mov byte [esp + ebp + 0xf3], al
xchg edi, eax
dec ebp
mov eax, dword [esp + 0x68]
mov ebx, dword [esp + 0xa0]
mov ecx, edx
mov edx, esi
mov esi, dword [esp + 0xa4]
test edx, edx
xchg edi, ebx
sete bl
xchg edi, ebx
seta bl
test ecx, ecx
xchg esi, ebx
seta bl
xchg esi, ebx
and edi, esi
or edi, ebx
xchg edi, eax
test al, al
xchg edi, eax
jne 0x49d1a5
mov eax, ebp
jmp 0x49d0a6
lea edx, [eax + esi]
cmp ebx, edx
jae 0x49d311
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x2c], eax
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
lea ecx, [0x63efa0]
mov dword [esp + 0x10], ecx
call fcn.00447550
mov ebp, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x18c]
mov esi, dword [esp + 0xa4]
mov dword [esp + 0x1a8], ebp
mov dword [esp + 0xac], edx
mov dword [esp + 0xa8], ebx
add esi, ebp
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0045f7b0
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 0x4c]
mov edx, dword [esp + 0xac]
mov ebx, dword [esp + 0xa8]
mov ebp, dword [esp + 0x1a8]
jmp 0x49ba9b
lea ecx, [esp + 0x148]
mov dword [esp], ecx
lea ecx, [0x6739b1]
mov dword [esp + 4], ecx
mov dword [esp + 8], 8
lea edx, [eax - 0x14]
neg edx
mov ebx, edx
neg edx
sar edx, 0x1f
and eax, edx
lea eax, [esp + eax + 0xe0]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebx
lea eax, [0x6d1368]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 1
call fcn.0044adc0
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x68]
mov ebx, dword [esp + 0xa0]
mov ebp, dword [esp + 0x1a4]
mov esi, dword [esp + 0xa4]
mov edi, dword [esp + 0x4c]
jmp 0x49d2c3
mov dword [esp + 0x48], ecx
mov ebx, eax
mov eax, 0xcccccccd
mov esi, edx
mul edx
shr edx, 3
mov dword [esp + 0x9c], edx
lea edi, [edx + edx*4]
shl edi, 1
sub esi, edi
mov eax, 0x19999999
mul esi
mov dword [esp + 0x98], edx
mov dword [esp + 0x94], eax
lea edi, [esi + esi*2]
mov esi, eax
mov eax, 0xcccccccd
mul ecx
shr edx, 3
mov eax, edi
lea edi, [edx + edx*4]
shl edi, 1
sub ecx, edi
lea edi, [ecx + eax*2]
mov eax, 0xcccccccd
mov ecx, edx
mul edi
shr edx, 3
mov dword [esp + 0x90], edx
mov edi, ecx
add ecx, 0
add esi, ecx
mov dword [esp + 0x8c], esi
add esi, edx
mov eax, 0xa
mul esi
add edi, 0
mov edx, dword [esp + 0x9c]
adc edx, 0
mov edi, dword [esp + 0x94]
add edi, ecx
mov edi, dword [esp + 0x98]
adc edx, edi
mov edi, dword [esp + 0x8c]
mov ecx, dword [esp + 0x90]
add edi, ecx
adc edx, 0
mov edi, dword [esp + 0x48]
sub edi, eax
add edi, 0x30
xchg edi, eax
mov byte [esp + ebp + 0xdf], al
xchg edi, eax
dec ebp
mov eax, ebx
mov ebx, dword [esp + 0xa0]
mov ecx, esi
mov esi, dword [esp + 0xa4]
test ecx, ecx
xchg edi, ebx
seta bl
xchg edi, ebx
test edx, edx
sete bl
xchg esi, ebx
seta bl
xchg esi, ebx
and ebx, edi
or ebx, esi
test bl, bl
jne 0x49d3db
mov eax, ebp
jmp 0x49d361
call fcn.0045dbb0
jmp fcn.0049b9b0