Function at 0x4aa850
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x180]
cmp eax, dword [ecx + 8]
jbe 0x4ad251
sub esp, 0x200
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.00471acb
mov ecx, dword [esp + 0x208]
mov edx, dword [esp + 0x204]
xor ebx, ebx
xor ebp, ebp
mov esi, 0xffffffff
xor edi, edi
mov ecx, 0xffffffff
mov dword [esp + 0xd4], ecx
mov ecx, 0xffffffff
mov dword [esp + 0x6c], ecx
xor ecx, ecx
mov dword [esp + 0xa0], ecx
xor ecx, ecx
mov byte [esp + 0x36], cl
xor edx, edx
mov byte [esp + 0x37], dl
mov edx, 0xffffffff
mov dword [esp + 0xac], edx
xor edx, edx
mov dword [esp + 0xb4], edx
xor edx, edx
mov dword [esp + 0xcc], edx
xor edx, edx
mov dword [esp + 0x18c], edx
xor ebx, ebx
mov dword [esp + 0x94], ebx
xor ebx, ebx
mov dword [esp + 0x8c], ebx
xor ebx, ebx
mov dword [esp + 0x1cc], ebx
mov ebx, dword [esp + 0x210]
mov dword [esp + 0x138], ebx
mov ebx, dword [esp + 0x20c]
mov dword [esp + 0x1e8], ebx
mov ecx, dword [esp + 0x208]
mov edx, dword [esp + 0x204]
xor ebx, ebx
jmp 0x4aa968
mov edx, dword [esp + 0x1bc]
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x74]
mov esi, dword [esp + 0x78]
mov dword [esp + 0x18c], eax
mov dword [esp + 0x138], edi
mov dword [esp + 0x1e8], ecx
mov ecx, dword [esp + 0x84]
mov edi, dword [esp + 0x188]
mov dword [esp + 0x70], ebx
mov dword [esp + 0x188], edi
mov dword [esp + 0x134], ecx
mov dword [esp + 0x1e4], edx
mov dword [esp + 0x74], ebp
mov dword [esp + 0x78], esi
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.004b4a20
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x134]
mov ebx, edx
sub ebx, ecx
mov ebp, dword [esp + 0x10]
mov esi, dword [esp + 8]
cmp edx, ebx
jb 0x4ad249
mov edx, dword [esp + 0xc]
cmp edx, ebx
ja 0x4ad240
mov dword [esp + 0x88], ebp
mov dword [esp + 0x134], ebx
mov dword [esp + 0x84], ecx
mov dword [esp + 0x1bc], eax
mov dword [esp + 0x98], edx
mov dword [esp + 0x1d0], esi
mov eax, dword [esp + 0x1e8]
mov dword [esp], eax
mov eax, dword [esp + 0x138]
mov dword [esp + 4], eax
call fcn.004aa5a0
mov eax, dword [esp + 0x134]
mov ecx, dword [esp + 0x98]
sub eax, ecx
mov edx, eax
neg eax
sar eax, 0x1f
and eax, ecx
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1e4]
add eax, ebp
mov ebp, dword [esp + 0x10]
mov dword [esp + 0x1e8], ebp
mov esi, dword [esp + 0x14]
mov dword [esp + 0x80], esi
test ebx, ebx
jne 0x4ac94f
mov edi, dword [esp + 0x88]
test edi, edi
je 0x4ab96d
mov dword [esp + 0x138], edx
mov dword [esp + 0x1c0], eax
mov ecx, edi
and edi, 0xffff
cmp edi, 0x106
jg 0x4ab2ae
cmp edi, 0x23
jg 0x4ab04e
cmp edi, 0x21
jg 0x4aaf47
cmp edi, 0x17
jne 0x4aab6d
mov dword [esp + 0xd0], ebx
cmp esi, 3
jl 0x4aaacc
cmp word [ebp], 0x5455
jne 0x4aaacc
cmp byte [ebp + 2], 0x43
jne 0x4aaacc
lea ecx, [esi - 3]
mov edi, ecx
neg ecx
sar ecx, 0x1f
and ecx, 3
mov eax, dword [0x9133c0]
add ecx, ebp
jmp 0x4ab951
mov dword [esp], ebp
mov dword [esp + 4], esi
call fcn.004ad260
movzx eax, byte [esp + 0xc]
test al, al
je 0x4aab42
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x80]
cmp ecx, edx
ja 0x4ad23b
mov esi, edx
sub esi, ecx
mov eax, esi
neg eax
sar eax, 0x1f
and eax, ecx
mov edi, dword [esp + 0x1e8]
lea ebp, [eax + edi]
mov edx, dword [esp + 0x138]
mov eax, dword [esp + 0x18c]
mov ebx, dword [esp + 0xd0]
mov dword [esp + 0x70], ecx
mov dword [esp + 0x188], edi
mov edi, esi
mov ecx, ebp
mov ebp, dword [esp + 0x188]
mov esi, dword [esp + 0x80]
jmp 0x4ab951
mov ebx, dword [0x9139e0]
mov edx, dword [esp + 0x138]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x4ab951
cmp edi, 0x18
jl 0x4ab66e
cmp ecx, 0x18
je 0x4aab85
cmp ecx, 0x1a
je 0x4aab85
cmp ecx, 0x1b
jne 0x4aabb7
test esi, esi
je 0x4aabb2
cmp byte [ebp], 0x5a
jne 0x4aabb2
lea ecx, [esi - 1]
mov edi, ecx
neg ecx
sar ecx, 0x1f
and ecx, 1
add ecx, ebp
mov ebp, dword [0x9133c0]
mov eax, ebp
mov ebp, dword [esp + 0x1e8]
jmp 0x4ab951
cmp ecx, 0x1b
je 0x4aabbc
cmp ecx, 0x20
jne 0x4aac28
cmp esi, 6
jge 0x4aabd7
mov ebx, dword [0x9139e0]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x4ab951
cmp byte [ebp + 3], 0x3a
je 0x4aabf3
mov ebx, dword [0x9139e0]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x4ab951
lea ecx, [esi - 6]
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 6
lea edi, [ebp + 1]
lea eax, [ebp + 4]
add ecx, ebp
mov dword [esp + 0xf8], eax
lea eax, [0x71b247]
mov dword [esp + 0x1c4], eax
mov eax, dword [esp + 0xf8]
jmp 0x4aade3
cmp ecx, 0x1f
je 0x4aac32
cmp ecx, 0x1a
jne 0x4aac8c
cmp esi, 3
jge 0x4aac4d
mov ebx, dword [0x9139e0]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x4ab951
lea ecx, [esi - 3]
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 3
lea edi, [ebp + 1]
add ecx, ebp
mov dword [esp + 0x108], eax
lea eax, [0x71b247]
mov dword [esp + 0x1c4], eax
lea eax, [0x71b247]
mov dword [esp + 0x1d4], eax
mov eax, dword [esp + 0x108]
jmp 0x4aaddc
cmp ecx, 0x1c
je 0x4aac96
cmp ecx, 0x21
jne 0x4aad12
cmp esi, 9
jge 0x4aacb1
mov ebx, dword [0x9139e0]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x4ab951
cmp byte [ebp + 3], 0x3a
jne 0x4aacbd
cmp byte [ebp + 6], 0x3a
je 0x4aacd3
mov ebx, dword [0x9139e0]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x4ab951
lea ecx, [esi - 9]
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 9
lea edi, [ebp + 1]
lea eax, [ebp + 4]
lea edx, [ebp + 7]
add ecx, ebp
mov dword [esp + 0x1c4], edx
mov edx, dword [esp + 0x138]
mov dword [esp + 0x110], eax
mov eax, ecx
mov ecx, ebx
mov ebx, eax
mov eax, dword [esp + 0x110]
jmp 0x4aadbe
cmp ecx, 0x19
je 0x4aad1c
cmp ecx, 0x1e
jne 0x4aad73
cmp esi, 7
jge 0x4aad37
mov ebx, dword [0x9139e0]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x4ab951
lea ecx, [esi - 7]
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 7
lea edi, [ebp + 1]
lea eax, [ebp + 3]
lea edx, [ebp + 5]
add ecx, ebp
mov dword [esp + 0x1c4], edx
mov edx, dword [esp + 0x138]
mov dword [esp + 0x120], eax
mov eax, ecx
mov ecx, ebx
mov ebx, eax
mov eax, dword [esp + 0x120]
jmp 0x4aadbe
cmp esi, 5
jge 0x4aad8e
mov ebx, dword [0x9139e0]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x4ab951
lea ecx, [esi - 5]
mov ebx, ecx
neg ebx
sar ebx, 0x1f
and ebx, 5
lea edi, [ebp + 1]
lea eax, [ebp + 3]
add ebx, ebp
mov dword [esp + 0x118], eax
lea eax, [0x71b247]
mov dword [esp + 0x1c4], eax
mov eax, dword [esp + 0x118]
mov dword [esp + 0x1d4], eax
mov eax, dword [esp + 0x1c0]
mov dword [esp + 0x100], ecx
mov ecx, ebx
mov ebx, dword [esp + 0x100]
mov eax, dword [esp + 0x1d4]
mov dword [esp + 0x1d4], eax
mov dword [esp + 0x134], ebx
mov dword [esp + 0x1e4], ecx
mov dword [esp], edi
mov dword [esp + 4], 2
mov byte [esp + 8], 1
call fcn.004aa490
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xc8], ecx
test eax, eax
je 0x4aae24
xor edx, edx
jmp 0x4aae53
mov eax, dword [esp + 0x1d4]
mov dword [esp], eax
mov dword [esp + 4], 2
mov byte [esp + 8], 1
call fcn.004aa490
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, eax
mov eax, ecx
mov ecx, dword [esp + 0xc8]
test eax, eax
je 0x4aae5b
xor ebx, ebx
jmp 0x4aae98
mov dword [esp + 0xb0], edx
mov eax, dword [esp + 0x1c4]
mov dword [esp], eax
mov dword [esp + 4], 2
mov byte [esp + 8], 1
call fcn.004aa490
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0xb0]
mov ebx, eax
mov eax, ecx
mov ecx, dword [esp + 0xc8]
cmp ecx, 0x18
jle 0x4aaeaa
mov ebp, 0x15
lea esi, [0x721ca9]
jmp 0x4aaeb8
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x1cc]
cmp edx, 0x3c
jle 0x4aaec8
mov ebp, 0x17
lea esi, [0x722fa9]
cmp ebx, 0x3c
jle 0x4aaed8
mov ebp, 0x17
lea esi, [0x722fc0]
imul ecx, ecx, 0x3c
add ecx, edx
imul ecx, ecx, 0x3c
mov edx, dword [esp + 0x1e8]
movzx edi, byte [edx]
add ecx, ebx
xchg edi, eax
cmp al, 0x2b
xchg edi, eax
je 0x4aaf04
xchg edi, eax
cmp al, 0x2d
xchg edi, eax
jne 0x4aaefe
neg ecx
jmp 0x4aaf04
mov eax, dword [0x9139e0]
mov edx, dword [esp + 0x138]
mov dword [esp + 0x94], ebp
mov ebx, eax
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x1cc], esi
mov edi, dword [esp + 0x134]
mov ecx, dword [esp + 0x1e4]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov eax, dword [esp + 0x18c]
jmp 0x4ab951
cmp edi, 0x22
jne 0x4ab00e
sar ecx, 0x10
and ecx, 0xfff
lea ebx, [ecx + 1]
cmp esi, ebx
jge 0x4aaf76
mov ebx, dword [0x9139e0]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x4ab951
mov dword [esp + 0x64], ecx
mov dword [esp + 0xa4], ebx
lea eax, [0x78a4b0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
call fcn.004b5df0
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x64]
sub eax, ecx
lea esi, [eax - 1]
mov eax, esi
neg eax
sar eax, 0x1f
mov ecx, dword [esp + 0xa4]
and ecx, eax
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov edi, dword [esp + 0x18]
mov edx, dword [esp + 0x1e8]
add ecx, edx
mov edx, dword [esp + 0x138]
mov dword [esp + 0x94], edi
mov dword [esp + 0x1cc], ebx
mov edi, esi
mov dword [esp + 0xa0], eax
mov esi, dword [esp + 0x80]
mov eax, dword [esp + 0x18c]
mov ebx, ebp
mov ebp, dword [esp + 0x1e8]
jmp 0x4ab951
cmp esi, 2
jl 0x4ab03e
movzx edi, byte [ebp]
xchg edi, eax
cmp al, 0x2e
xchg edi, eax
je 0x4ab025
xchg edi, eax
cmp al, 0x2c
xchg edi, eax
jne 0x4ab03e
movzx edi, byte [ebp + 1]
xchg edi, eax
cmp al, 0x30
xchg edi, eax
jb 0x4ab03e
xchg edi, eax
cmp al, 0x39
xchg edi, eax
ja 0x4ab03e
xor ecx, ecx
jmp 0x4ad16b
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x4ab951
cmp edi, 0x102
jg 0x4ab13c
cmp edi, 0x101
je 0x4ab0d5
cmp edi, 0x102
jne 0x4ab66e
mov eax, dword [0x9143f8]
mov ecx, dword [0x9143fc]
mov edx, dword [0x914400]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.004a6b70
mov eax, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
inc eax
mov edx, dword [esp + 0x138]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
jmp 0x4ab951
mov eax, dword [0x914408]
mov ecx, dword [0x91440c]
mov edx, dword [0x914410]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.004a6b70
mov eax, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
inc eax
mov edx, dword [esp + 0x138]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
jmp 0x4ab951
cmp edi, 0x104
jle 0x4ab212
cmp edi, 0x105
je 0x4ab1b7
cmp edi, 0x106
jne 0x4ab66e
mov eax, dword [0x9143e8]
mov ecx, dword [0x9143ec]
mov edx, dword [0x9143f0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.004a6b70
mov ebp, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x138]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
jmp 0x4ab951
mov eax, dword [0x9143d8]
mov ecx, dword [0x9143dc]
mov edx, dword [0x9143e0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.004a6b70
mov ebp, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x138]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
jmp 0x4ab951
mov dword [esp], ebp
mov dword [esp + 4], esi
cmp ecx, 0x104
sete al
mov byte [esp + 8], al
call fcn.004aa490
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0xc]
test eax, eax
je 0x4ab247
mov edx, dword [esp + 0x94]
mov ebx, dword [esp + 0x1cc]
jmp 0x4ab26a
lea edx, [ecx - 1]
cmp edx, 0xb
jbe 0x4ab25c
mov edx, 5
lea ebx, [0x71b78e]
jmp 0x4ab26a
mov edx, dword [esp + 0x94]
mov ebx, dword [esp + 0x1cc]
mov ebp, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
mov dword [esp + 0x94], edx
mov dword [esp + 0xac], ecx
mov dword [esp + 0x1cc], ebx
mov edi, esi
mov ecx, ebp
mov edx, dword [esp + 0x138]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov ebx, eax
mov eax, dword [esp + 0x18c]
jmp 0x4ab951
cmp edi, 0x20c
jg 0x4ab54a
cmp edi, 0x10b
jg 0x4ab36a
cmp edi, 0x109
jle 0x4ab2e2
mov ebx, esi
mov edi, ebp
xor ebx, ebx
mov dword [esp + 0xc4], ebx
mov ebx, esi
jmp 0x4ad085
cmp ecx, 0x108
jne 0x4ab311
test esi, esi
je 0x4ab30b
cmp byte [ebp], 0x20
jne 0x4ab305
lea ebx, [esi - 1]
mov edi, ebx
neg ebx
sar ebx, 0x1f
and ebx, 1
add ebx, ebp
jmp 0x4ab315
mov edi, esi
mov ebx, ebp
jmp 0x4ab315
mov edi, esi
mov ebx, ebp
jmp 0x4ab315
mov edi, esi
mov ebx, ebp
mov dword [esp], ebx
mov dword [esp + 4], edi
cmp ecx, 0x109
sete al
mov byte [esp + 8], al
call fcn.004aa490
mov eax, dword [esp + 0xc]
mov ebp, dword [esp + 0x10]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x138]
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
jmp 0x4ab951
cmp edi, 0x113
jne 0x4ab406
cmp esi, 4
jl 0x4ab387
movzx ecx, byte [ebp]
add ecx, 0xffffffd0
cmp cl, 9
jbe 0x4ab39d
mov ebx, dword [0x9139e0]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x4ab951
lea eax, [0x78a4a8]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], 4
call fcn.004b5f70
mov eax, dword [esp + 0x80]
lea esi, [eax - 4]
mov ecx, esi
neg ecx
sar ecx, 0x1f
and ecx, 4
mov edx, dword [esp + 0x1e8]
lea ebp, [ecx + edx]
mov ecx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov edx, dword [esp + 0x138]
mov dword [esp + 0x74], ecx
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
jmp 0x4ab951
cmp edi, 0x114
jne 0x4ab4c3
cmp esi, 2
jge 0x4ab42d
mov ebx, dword [0x9139e0]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x4ab951
lea eax, [0x78a4a8]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], 2
call fcn.004b5f70
mov eax, dword [esp + 0x80]
lea ecx, [eax - 2]
mov edx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 2
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x1e8]
add ecx, ebp
mov esi, dword [esp + 0xc]
test ebx, ebx
je 0x4ab490
mov dword [esp + 0x74], esi
mov eax, dword [esp + 0x18c]
mov edi, edx
mov edx, dword [esp + 0x138]
mov esi, dword [esp + 0x80]
jmp 0x4ab951
cmp esi, 0x45
jl 0x4ab49d
add esi, 0x76c
jmp 0x4ab4a3
add esi, 0x7d0
mov dword [esp + 0x74], esi
mov eax, dword [esp + 0x18c]
mov edi, edx
mov edx, dword [esp + 0x138]
mov esi, dword [esp + 0x80]
jmp 0x4ab951
cmp edi, 0x20c
jne 0x4ab66e
mov dword [esp], ebp
mov dword [esp + 4], esi
mov byte [esp + 8], 0
call fcn.004aa490
mov eax, dword [esp + 0xc]
cmp eax, 0x18
jb 0x4ab4f6
mov ecx, 4
lea edx, [0x71b5b8]
jmp 0x4ab504
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x1cc]
mov ebp, dword [esp + 0x10]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov dword [esp + 0x94], ecx
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0x18c]
mov dword [esp + 0x1cc], edx
mov edi, esi
mov ecx, ebp
mov edx, dword [esp + 0x138]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
jmp 0x4ab951
cmp edi, 0x210
jle 0x4ab847
cmp edi, 0x212
jle 0x4ab67e
cmp edi, 0x215
jne 0x4ab5e8
cmp esi, 2
jge 0x4ab585
mov ebx, dword [0x9139e0]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x4ab951
lea ecx, [esi - 2]
mov edi, ecx
neg ecx
sar ecx, 0x1f
and ecx, 2
add ecx, ebp
cmp word [ebp], 0x4d41
jne 0x4ab5b5
mov dword [esp + 0xe8], eax
mov eax, 1
mov byte [esp + 0x37], al
mov eax, dword [esp + 0xe8]
jmp 0x4ab5dc
cmp word [ebp], 0x4d50
jne 0x4ab5d6
mov dword [esp + 0xf0], eax
mov eax, 1
mov byte [esp + 0x36], al
mov eax, dword [esp + 0xf0]
jmp 0x4ab5dc
mov ebx, dword [0x9139e0]
mov eax, dword [esp + 0x18c]
jmp 0x4ab951
cmp edi, 0x216
jne 0x4ab66e
cmp esi, 2
jge 0x4ab60b
mov ebx, dword [0x9139e0]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x4ab951
lea ecx, [esi - 2]
mov edi, ecx
neg ecx
sar ecx, 0x1f
and ecx, 2
add ecx, ebp
cmp word [ebp], 0x6d61
jne 0x4ab63b
mov dword [esp + 0xd8], eax
mov eax, 1
mov byte [esp + 0x37], al
mov eax, dword [esp + 0xd8]
jmp 0x4ab662
cmp word [ebp], 0x6d70
jne 0x4ab65c
mov dword [esp + 0xe0], eax
mov eax, 1
mov byte [esp + 0x36], al
mov eax, dword [esp + 0xe0]
jmp 0x4ab662
mov ebx, dword [0x9139e0]
mov eax, dword [esp + 0x18c]
jmp 0x4ab951
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x4ab951
mov dword [esp], ebp
mov dword [esp + 4], esi
cmp ecx, 0x212
sete al
mov byte [esp + 8], al
call fcn.004aa490
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x14]
test eax, eax
je 0x4ab6d7
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov dword [esp + 0x8c], edx
mov edi, ebx
mov edx, dword [esp + 0x138]
mov ebx, eax
mov eax, dword [esp + 0x18c]
jmp 0x4ab951
cmp edx, 0x3c
jb 0x4ab728
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov edi, 6
mov dword [esp + 0x94], edi
mov dword [esp + 0x8c], edx
lea ebp, [0x71b9d6]
mov dword [esp + 0x1cc], ebp
mov edi, ebx
mov edx, dword [esp + 0x138]
mov ebx, eax
mov ebp, dword [esp + 0x1e8]
mov eax, dword [esp + 0x18c]
jmp 0x4ab951
cmp ebx, 2
jl 0x4ab82d
movzx ebp, byte [ecx]
xchg ebp, eax
cmp al, 0x2e
xchg ebp, eax
je 0x4ab746
xchg ebp, eax
cmp al, 0x2c
xchg ebp, eax
jne 0x4ab813
movzx ebp, byte [ecx + 1]
add ebp, 0xffffffd0
xchg ebp, eax
cmp al, 9
xchg ebp, eax
jbe 0x4ab76e
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0xa0]
mov edi, dword [esp + 0x1cc]
jmp 0x4acfaf
mov dword [esp + 0x130], edx
mov dword [esp + 0x12c], eax
mov dword [esp + 0x90], ebx
mov dword [esp + 0x1c8], ecx
mov eax, dword [esp + 0x1bc]
mov dword [esp], eax
mov ecx, dword [esp + 0x84]
mov dword [esp + 4], ecx
call fcn.004b4a20
mov eax, dword [esp + 0x10]
and eax, 0xffff
cmp eax, 0x22
je 0x4ab7b7
cmp eax, 0x23
jne 0x4ab7fb
mov edx, dword [esp + 0x138]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov eax, dword [esp + 0x130]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x18c]
mov ebx, dword [esp + 0x12c]
mov edi, dword [esp + 0x90]
mov ecx, dword [esp + 0x1c8]
jmp 0x4ab951
mov eax, dword [esp + 0x1c8]
mov ecx, dword [esp + 0x90]
mov edx, 2
jmp 0x4acff1
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0xa0]
mov edi, dword [esp + 0x1cc]
jmp 0x4acfaf
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0xa0]
mov edi, dword [esp + 0x1cc]
jmp 0x4acfaf
cmp edi, 0x20e
jg 0x4ab8d3
mov dword [esp], ebp
mov dword [esp + 4], esi
cmp ecx, 0x20e
sete al
mov byte [esp + 8], al
call fcn.004aa490
mov eax, dword [esp + 0xc]
cmp eax, 0xc
jbe 0x4ab882
mov ecx, 4
lea edx, [0x71b5b8]
jmp 0x4ab890
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x1cc]
mov ebp, dword [esp + 0x10]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov dword [esp + 0x94], ecx
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0x18c]
mov dword [esp + 0x1cc], edx
mov edi, esi
mov ecx, ebp
mov edx, dword [esp + 0x138]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
jmp 0x4ab951
mov dword [esp], ebp
mov dword [esp + 4], esi
cmp ecx, 0x210
sete al
mov byte [esp + 8], al
call fcn.004aa490
mov eax, dword [esp + 0xc]
cmp eax, 0x3c
jb 0x4ab902
mov ecx, 6
lea edx, [0x71b9d0]
jmp 0x4ab910
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x1cc]
mov ebp, dword [esp + 0x10]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov dword [esp + 0x94], ecx
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0x18c]
mov dword [esp + 0x1cc], edx
mov edi, esi
mov ecx, ebp
mov edx, dword [esp + 0x138]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov ebp, dword [esp + 0x94]
test ebp, ebp
jne 0x4acd56
test ebx, ebx
je 0x4aa932
jmp 0x4acb84
test esi, esi
jne 0x4ac739
movzx edx, byte [esp + 0x36]
test dl, dl
je 0x4ab98f
mov edx, dword [esp + 0xcc]
cmp edx, 0xc
jge 0x4ab996
add edx, 0xc
jmp 0x4ab9a6
mov edx, dword [esp + 0xcc]
movzx ebx, byte [esp + 0x37]
test bl, bl
je 0x4ab9a6
cmp edx, 0xc
jne 0x4ab9a6
xor edx, edx
mov ebx, dword [esp + 0x78]
test ebx, ebx
jl 0x4abe4e
mov eax, dword [esp + 0x74]
test eax, 3
jne 0x4aba16
mov ebp, 0x51eb851f
mov ecx, edx
imul ebp
mov eax, dword [esp + 0x74]
mov esi, eax
sar esi, 0x1f
mov edi, edx
sar edx, 5
sub edx, esi
imul edx, edx, 0x64
cmp eax, edx
jne 0x4ab9ec
sar edi, 7
sub edi, esi
imul edx, edi, 0x190
cmp eax, edx
jne 0x4aba0e
cmp ebx, 0x3c
jne 0x4ab9ff
mov esi, ebx
mov edx, 2
mov ebx, 0x1d
jmp 0x4aba23
jle 0x4aba06
lea esi, [ebx - 1]
jmp 0x4aba08
mov esi, ebx
xor edx, edx
xor ebx, ebx
jmp 0x4aba23
mov esi, ebx
xor edx, edx
xor ebx, ebx
jmp 0x4aba23
mov ecx, edx
mov ebp, 0x51eb851f
mov esi, ebx
xor edx, edx
xor ebx, ebx
lea edi, [esi - 1]
cmp edi, 0x16c
jbe 0x4abb63
mov eax, dword [esp + 0x210]
test eax, eax
jne 0x4aba43
xor ecx, ecx
xor edx, edx
jmp 0x4aba9b
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.004661a0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x20c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x210]
mov dword [esp + 8], ecx
call fcn.004721c0
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x210]
cmp edx, eax
ja 0x4acb7f
mov dword [esp + 0x44], edx
mov dword [esp + 0x148], ecx
lea eax, [0x6ff1e0]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x208]
mov dword [eax + 4], ecx
mov ecx, dword [0x93f150]
test ecx, ecx
jne 0x4abadc
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x148]
jmp 0x4abaf4
call fcn.00471840
mov ecx, dword [esp + 0x204]
mov dword [edi], ecx
mov edx, dword [esp + 0x148]
mov dword [edi + 4], edx
mov dword [esp + 0x174], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x24], 0x1a
lea ecx, [0x724c38]
mov dword [eax + 0x20], ecx
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.00471acb
lea ecx, [0x78aea0]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x174]
mov dword [esp + 0x234], ecx
add esp, 0x200
ret
test edx, edx
jne 0x4abbbe
mov edx, eax
mov eax, 0x84210843
mov ebx, edx
imul edi
lea edx, [edx + esi - 1]
sar edx, 4
lea eax, [edx + 1]
cmp eax, 0xd
jae 0x4acb75
mov dword [esp + 0x138], ecx
lea edi, [0x8ee680]
lea ecx, [edi + edx*4 + 4]
cmp dword [ecx], esi
jge 0x4abb9d
lea eax, [edx + 2]
lea edx, [eax - 1]
cmp edx, 0xd
jae 0x4acb69
mov ecx, dword [edi + eax*4 - 4]
sub esi, ecx
mov ecx, dword [esp + 0x138]
mov edx, eax
mov ebx, esi
mov eax, dword [esp + 0x74]
mov esi, dword [esp + 0xac]
test esi, esi
jl 0x4abd06
cmp edx, esi
je 0x4abd06
mov eax, dword [esp + 0x210]
test eax, eax
jne 0x4abbe6
xor ecx, ecx
xor edx, edx
jmp 0x4abc3e
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.004661a0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x20c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x210]
mov dword [esp + 8], ecx
call fcn.004721c0
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x210]
cmp edx, eax
ja 0x4acb64
mov dword [esp + 0x40], edx
mov dword [esp + 0x144], ecx
lea eax, [0x6ff1e0]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x208]
mov dword [eax + 4], ecx
mov ecx, dword [0x93f150]
test ecx, ecx
jne 0x4abc7f
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x144]
jmp 0x4abc97
call fcn.00471840
mov ecx, dword [esp + 0x204]
mov dword [edi], ecx
mov edx, dword [esp + 0x144]
mov dword [edi + 4], edx
mov dword [esp + 0x170], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x40]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x24], 0x22
lea ecx, [0x728ff6]
mov dword [eax + 0x20], ecx
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.00471acb
lea ecx, [0x78aea0]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x170]
mov dword [esp + 0x234], ecx
add esp, 0x200
ret
mov esi, dword [esp + 0xd4]
test esi, esi
jl 0x4abe7d
cmp ebx, esi
je 0x4abe7d
mov eax, dword [esp + 0x210]
test eax, eax
jne 0x4abd2e
xor ecx, ecx
xor edx, edx
jmp 0x4abd86
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.004661a0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x20c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x210]
mov dword [esp + 8], ecx
call fcn.004721c0
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x210]
cmp edx, eax
ja 0x4acb5f
mov dword [esp + 0x3c], edx
mov dword [esp + 0x140], ecx
lea eax, [0x6ff1e0]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x208]
mov dword [eax + 4], ecx
mov ecx, dword [0x93f150]
test ecx, ecx
jne 0x4abdc7
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x140]
jmp 0x4abddf
call fcn.00471840
mov ecx, dword [esp + 0x204]
mov dword [edi], ecx
mov edx, dword [esp + 0x140]
mov dword [edi + 4], edx
mov dword [esp + 0x16c], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x24], 0x20
lea ecx, [0x728019]
mov dword [eax + 0x20], ecx
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.00471acb
lea ecx, [0x78aea0]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x16c]
mov dword [esp + 0x234], ecx
add esp, 0x200
ret
mov ebx, dword [esp + 0xac]
test ebx, ebx
jge 0x4abe5e
mov ebx, 1
mov ebp, dword [esp + 0xd4]
test ebp, ebp
jge 0x4abe6e
mov ebp, 1
mov eax, dword [esp + 0x74]
mov ecx, edx
mov edx, ebx
mov ebx, ebp
mov ebp, 0x51eb851f
test ebx, ebx
jle 0x4abef2
cmp edx, 2
jne 0x4abec4
test eax, 3
jne 0x4abebe
mov esi, edx
imul ebp
mov ebp, dword [esp + 0x74]
mov edi, ebp
sar ebp, 0x1f
mov eax, edx
sar edx, 5
sub edx, ebp
imul edx, edx, 0x64
cmp edi, edx
jne 0x4abeb7
sar eax, 7
sub eax, ebp
imul edx, eax, 0x190
cmp edi, edx
jne 0x4abec8
mov ebp, 0x1d
jmp 0x4abeea
mov esi, edx
mov edi, eax
jmp 0x4abec8
mov esi, edx
mov edi, eax
cmp esi, 0xd
jae 0x4acb53
lea eax, [esi - 1]
lea edx, [0x8ee680]
mov ebp, dword [edx + esi*4]
cmp eax, 0xd
jae 0x4acb49
sub ebp, dword [edx + esi*4 - 4]
cmp ebp, ebx
jge 0x4ac023
mov eax, dword [esp + 0x210]
test eax, eax
jne 0x4abf03
xor ecx, ecx
xor edx, edx
jmp 0x4abf5b
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.004661a0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x20c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x210]
mov dword [esp + 8], ecx
call fcn.004721c0
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x210]
cmp edx, eax
ja 0x4acb44
mov dword [esp + 0x38], edx
mov dword [esp + 0x13c], ecx
lea eax, [0x6ff1e0]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x208]
mov dword [eax + 4], ecx
mov ecx, dword [0x93f150]
test ecx, ecx
jne 0x4abf9c
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x13c]
jmp 0x4abfb4
call fcn.00471840
mov ecx, dword [esp + 0x204]
mov dword [edi], ecx
mov edx, dword [esp + 0x13c]
mov dword [edi + 4], edx
mov dword [esp + 0x168], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x38]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x24], 0x12
lea ecx, [0x7200ae]
mov dword [eax + 0x20], ecx
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.00471acb
lea ecx, [0x78aea0]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x168]
mov dword [esp + 0x234], ecx
add esp, 0x200
ret
mov eax, dword [esp + 0x18c]
test eax, eax
jne 0x4ac6c0
mov eax, dword [esp + 0x6c]
cmp eax, 0xffffffff
jne 0x4ac3ca
mov eax, dword [esp + 0x70]
test eax, eax
je 0x4ac34a
mov eax, dword [0x9133c0]
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
call fcn.004b0300
lea edi, [esp + 0x194]
lea esi, [esp + 0x20]
call fcn.00471fae
mov eax, dword [esp + 0x198]
test eax, 0x80000000
je 0x4ac0d1
mov ecx, dword [esp + 0x194]
shl eax, 1
mov edx, ecx
shl ecx, 1
shr edx, 0x1f
or edx, eax
mov eax, edx
shl edx, 1
shr ecx, 0x1f
or ecx, edx
shr eax, 0x1f
add ecx, 0xd7b17f80
adc eax, 0xd
jmp 0x4ac0df
mov ecx, dword [esp + 0x19c]
mov eax, dword [esp + 0x1a0]
mov edx, dword [esp + 0x218]
mov dword [esp], edx
mov ebx, dword [esp + 0x188]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x70]
mov dword [esp + 8], ebp
add ecx, 0x886e0900
mov dword [esp + 0xc], ecx
adc eax, 0xfffffff1
mov dword [esp + 0x10], eax
call fcn.004b34f0
movzx eax, byte [esp + 0x18]
mov ecx, dword [esp + 0x14]
test al, al
je 0x4ac1f0
lea eax, [esp + 0x194]
mov dword [esp], eax
mov eax, ecx
sar ecx, 0x1f
xor edx, edx
sub edx, eax
mov dword [esp + 4], edx
mov eax, 0
sbb eax, ecx
mov dword [esp + 8], eax
call fcn.004adf90
nop
mov eax, dword [esp + 0x218]
lea ecx, [0x91c120]
cmp eax, ecx
jne 0x4ac15e
xor eax, eax
mov ecx, dword [esp + 0x198]
nop
test ecx, 0x80000000
je 0x4ac1b9
mov edx, dword [esp + 0x194]
mov ebx, edx
shl edx, 1
shl ecx, 1
shr ebx, 0x1f
or ecx, ebx
mov ebx, ecx
shl ecx, 1
shr edx, 0x1f
or edx, ecx
shr ebx, 0x1f
add edx, 0xd7b17f80
mov dword [esp + 0x19c], edx
adc ebx, 0xd
mov dword [esp + 0x1a0], ebx
and dword [esp + 0x194], 0x3fffffff
mov dword [esp + 0x198], 0
mov dword [esp + 0x1a4], eax
lea edi, [esp + 0x21c]
lea esi, [esp + 0x194]
call fcn.00471fae
mov dword [esp + 0x230], 0
mov dword [esp + 0x234], 0
add esp, 0x200
ret
mov eax, dword [esp + 0x70]
cmp eax, 3
jle 0x4ac237
mov edx, dword [esp + 0x188]
cmp word [edx], 0x4d47
jne 0x4ac237
cmp byte [edx + 2], 0x54
jne 0x4ac237
lea ecx, [0x78a4a8]
mov dword [esp], ecx
lea ecx, [edx + 3]
mov dword [esp + 4], ecx
lea ecx, [eax - 3]
mov dword [esp + 8], ecx
call fcn.004b5f70
mov eax, dword [esp + 0xc]
imul ecx, eax, 0xe10
mov eax, dword [esp + 0x70]
mov dword [esp + 0x9c], ecx
nop
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.004661a0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x188]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x70]
mov dword [esp + 8], ecx
call fcn.004721c0
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x70]
cmp edx, eax
ja 0x4acb3f
mov dword [esp], ecx
mov dword [esp + 4], edx
mov eax, dword [esp + 0x9c]
mov dword [esp + 8], eax
call fcn.004b10a0
mov eax, dword [esp + 0xc]
lea ecx, [0x91c120]
cmp eax, ecx
jne 0x4ac2b8
xor eax, eax
mov ecx, dword [esp + 0x198]
nop
test ecx, 0x80000000
je 0x4ac313
mov edx, dword [esp + 0x194]
mov ebx, edx
shl edx, 1
shl ecx, 1
shr ebx, 0x1f
or ecx, ebx
mov ebx, ecx
shl ecx, 1
shr ebx, 0x1f
shr edx, 0x1f
or edx, ecx
add edx, 0xd7b17f80
mov dword [esp + 0x19c], edx
adc ebx, 0xd
mov dword [esp + 0x1a0], ebx
and dword [esp + 0x194], 0x3fffffff
mov dword [esp + 0x198], 0
mov dword [esp + 0x1a4], eax
lea edi, [esp + 0x21c]
lea esi, [esp + 0x194]
call fcn.00471fae
mov dword [esp + 0x230], 0
mov dword [esp + 0x234], 0
add esp, 0x200
ret
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x214]
mov dword [esp + 0x1c], eax
call fcn.004b0300
lea edi, [esp + 0x1ec]
lea esi, [esp + 0x20]
call fcn.00471fae
lea edi, [esp + 0x21c]
lea esi, [esp + 0x1ec]
call fcn.00471fae
mov dword [esp + 0x230], 0
mov dword [esp + 0x234], 0
add esp, 0x200
ret
mov eax, dword [0x9133c0]
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
call fcn.004b0300
lea edi, [esp + 0x1a8]
lea esi, [esp + 0x20]
call fcn.00471fae
lea eax, [esp + 0x1a8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov ecx, eax
sar eax, 0x1f
xor edx, edx
sub edx, ecx
mov dword [esp + 4], edx
mov edx, 0
sbb edx, eax
mov dword [esp + 8], edx
call fcn.004adf90
mov eax, dword [esp + 0x1ac]
test eax, 0x80000000
je 0x4ac47b
mov ecx, dword [esp + 0x1a8]
shl eax, 1
mov edx, ecx
shl ecx, 1
shr edx, 0x1f
or edx, eax
mov eax, edx
shl edx, 1
shr ecx, 0x1f
or edx, ecx
shr eax, 0x1f
add edx, 0xd7b17f80
adc eax, 0xd
jmp 0x4ac489
mov edx, dword [esp + 0x1b0]
mov eax, dword [esp + 0x1b4]
mov ecx, dword [esp + 0x218]
mov dword [esp], ecx
add edx, 0x886e0900
mov dword [esp + 4], edx
adc eax, 0xfffffff1
mov dword [esp + 8], eax
call fcn.004b12b0
mov eax, dword [esp + 0x6c]
cmp dword [esp + 0x14], eax
jne 0x4ac4fa
mov ecx, dword [esp + 0x70]
test ecx, ecx
jne 0x4ac4c2
mov edx, 1
jmp 0x4ac500
mov edx, dword [esp + 0x10]
cmp ecx, edx
je 0x4ac4ce
xor edx, edx
jmp 0x4ac500
mov eax, dword [esp + 0xc]
mov dword [esp], eax
mov eax, dword [esp + 0x188]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00402d90
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x70]
mov edx, eax
mov eax, dword [esp + 0x6c]
jmp 0x4ac500
mov ecx, dword [esp + 0x70]
xor edx, edx
test dl, dl
je 0x4ac5ae
nop
mov eax, dword [esp + 0x218]
lea ecx, [0x91c120]
cmp eax, ecx
jne 0x4ac51c
xor eax, eax
mov ecx, dword [esp + 0x1ac]
nop
test ecx, 0x80000000
je 0x4ac577
mov edx, dword [esp + 0x1a8]
shl ecx, 1
mov ebx, edx
shl edx, 1
shr ebx, 0x1f
or ecx, ebx
mov ebx, ecx
shl ecx, 1
shr edx, 0x1f
or ecx, edx
shr ebx, 0x1f
add ecx, 0xd7b17f80
mov dword [esp + 0x1b0], ecx
adc ebx, 0xd
mov dword [esp + 0x1b4], ebx
and dword [esp + 0x1a8], 0x3fffffff
mov dword [esp + 0x1ac], 0
mov dword [esp + 0x1b8], eax
lea edi, [esp + 0x21c]
lea esi, [esp + 0x1a8]
call fcn.00471fae
mov dword [esp + 0x230], 0
mov dword [esp + 0x234], 0
add esp, 0x200
ret
test ecx, ecx
jne 0x4ac5b8
xor edx, edx
xor ecx, ecx
jmp 0x4ac60e
mov dword [esp], ecx
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.004661a0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x188]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x70]
mov dword [esp + 8], ecx
call fcn.004721c0
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x70]
cmp edx, eax
ja 0x4acb3a
mov eax, dword [esp + 0x6c]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004b10a0
mov eax, dword [esp + 0xc]
lea ecx, [0x91c120]
cmp eax, ecx
jne 0x4ac62e
xor eax, eax
mov ecx, dword [esp + 0x1ac]
nop
test ecx, 0x80000000
je 0x4ac689
mov edx, dword [esp + 0x1a8]
mov ebx, edx
shl edx, 1
shl ecx, 1
shr ebx, 0x1f
or ecx, ebx
mov ebx, ecx
shl ecx, 1
shr ebx, 0x1f
shr edx, 0x1f
or edx, ecx
add edx, 0xd7b17f80
mov dword [esp + 0x1b0], edx
adc ebx, 0xd
mov dword [esp + 0x1b4], ebx
and dword [esp + 0x1a8], 0x3fffffff
mov dword [esp + 0x1ac], 0
mov dword [esp + 0x1b8], eax
lea edi, [esp + 0x21c]
lea esi, [esp + 0x1a8]
call fcn.00471fae
mov dword [esp + 0x230], 0
mov dword [esp + 0x234], 0
add esp, 0x200
ret
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
call fcn.004b0300
lea edi, [esp + 0x1ec]
lea esi, [esp + 0x20]
call fcn.00471fae
lea edi, [esp + 0x21c]
lea esi, [esp + 0x1ec]
call fcn.00471fae
mov dword [esp + 0x230], 0
mov dword [esp + 0x234], 0
add esp, 0x200
ret
mov dword [esp], ebp
mov dword [esp + 4], esi
call fcn.004a9e10
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp], 0
lea edx, [0x71e3e7]
mov dword [esp + 4], edx
mov dword [esp + 8], 0xe
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.00450670
mov eax, dword [esp + 0x14]
mov dword [esp + 0x1dc], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xbc], ecx
mov edx, dword [esp + 0x210]
test edx, edx
jne 0x4ac79a
xor edx, edx
xor ebx, ebx
jmp 0x4ac7fb
mov dword [esp], edx
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.004661a0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x20c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x210]
mov dword [esp + 8], ecx
call fcn.004721c0
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x210]
cmp edx, eax
ja 0x4acb35
mov edx, ecx
mov ebx, dword [esp + 0x210]
mov dword [esp + 0x58], ebx
mov dword [esp + 0x15c], edx
nop
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.004661a0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x1e8]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x80]
mov dword [esp + 8], ecx
call fcn.004721c0
mov eax, dword [esp + 0x1e0]
neg eax
mov edx, dword [esp + 0x80]
cmp edx, eax
ja 0x4acb30
lea eax, [0x6ff1e0]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x208]
mov dword [eax + 4], ecx
mov ecx, dword [0x93f150]
test ecx, ecx
jne 0x4ac89a
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x15c]
jmp 0x4ac8b2
call fcn.00471840
mov ecx, dword [esp + 0x204]
mov dword [edi], ecx
mov edx, dword [esp + 0x15c]
mov dword [edi + 4], edx
mov dword [eax], ecx
mov ecx, dword [esp + 0x58]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov ecx, dword [esp + 0x80]
mov dword [eax + 0x1c], ecx
mov ecx, dword [0x93f150]
test ecx, ecx
jne 0x4ac8f0
mov ecx, dword [esp + 0x1e0]
mov edx, dword [esp + 0x1dc]
jmp 0x4ac908
call fcn.00471840
mov ecx, dword [esp + 0x1e0]
mov dword [edi], ecx
mov edx, dword [esp + 0x1dc]
mov dword [edi + 4], edx
mov dword [esp + 0x180], eax
mov dword [eax + 0x18], ecx
mov ecx, dword [esp + 0xbc]
mov dword [eax + 0x24], ecx
mov dword [eax + 0x20], edx
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.00471acb
lea ecx, [0x78aea0]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x180]
mov dword [esp + 0x234], ecx
add esp, 0x200
ret
mov eax, dword [esp + 0x210]
test eax, eax
jne 0x4ac960
xor eax, eax
xor edx, edx
jmp 0x4ac9d2
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.004661a0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x20c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x210]
mov dword [esp + 8], ecx
call fcn.004721c0
mov eax, dword [esp + 0x1e0]
neg eax
mov edx, dword [esp + 0x210]
cmp edx, eax
ja 0x4acb2b
mov ecx, dword [esp + 0x98]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov eax, dword [esp + 0x1e0]
mov dword [esp + 0x60], edx
mov dword [esp + 0x164], eax
test esi, esi
jne 0x4ac9e7
xor ebx, ebx
xor ebp, ebp
jmp 0x4aca43
mov dword [esp], esi
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.004661a0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x1e8]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x80]
mov dword [esp + 8], ecx
call fcn.004721c0
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x80]
cmp edx, eax
ja 0x4acb26
mov ebx, ecx
mov ebp, edx
mov dword [esp + 0x5c], ebp
mov dword [esp + 0x160], ebx
lea eax, [0x6ff1e0]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x208]
mov dword [eax + 4], ecx
mov ecx, dword [0x93f150]
test ecx, ecx
jne 0x4aca92
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x164]
mov ebx, dword [esp + 0x1d0]
mov ebp, dword [esp + 0x160]
jmp 0x4acabe
call fcn.00471860
mov ecx, dword [esp + 0x204]
mov dword [edi], ecx
mov edx, dword [esp + 0x164]
mov dword [edi + 4], edx
mov ebx, dword [esp + 0x1d0]
mov dword [edi + 8], ebx
mov ebp, dword [esp + 0x160]
mov dword [edi + 0xc], ebp
mov dword [esp + 0x184], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x60]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov ecx, dword [esp + 0x98]
mov dword [eax + 0x14], ecx
mov dword [eax + 0x10], ebx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 0x1c], ecx
mov dword [eax + 0x18], ebp
mov dword [eax + 0x24], 0
mov dword [eax + 0x20], 0
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.00471acb
lea ecx, [0x78aea0]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x184]
mov dword [esp + 0x234], ecx
add esp, 0x200
ret
call fcn.00462020
call fcn.00462020
call fcn.00462020
call fcn.00462020
call fcn.00462020
call fcn.00462020
call fcn.00462020
mov ecx, 0xd
call fcn.004718b0
mov eax, esi
mov ecx, 0xd
call fcn.004718b0
call fcn.00462020
call fcn.00462020
mov eax, edx
mov ecx, 0xd
call fcn.004718b0
mov ecx, 0xd
call fcn.004718b0
call fcn.00462020
mov eax, dword [esp + 0x210]
test eax, eax
jne 0x4acb95
xor ecx, ecx
xor eax, eax
jmp 0x4acc02
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.004661a0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x20c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x210]
mov dword [esp + 8], ecx
call fcn.004721c0
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x210]
cmp edx, eax
ja 0x4acfaa
mov edx, dword [esp + 0x138]
mov esi, dword [esp + 0x80]
mov eax, dword [esp + 0x210]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x150], ecx
test esi, esi
jne 0x4acc17
xor ebx, ebx
xor ebp, ebp
jmp 0x4acc73
mov dword [esp], esi
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.004661a0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x1e8]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x80]
mov dword [esp + 8], ecx
call fcn.004721c0
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x80]
cmp edx, eax
ja 0x4acfa5
mov ebx, ecx
mov ebp, edx
mov dword [esp + 0x48], ebp
mov dword [esp + 0x14c], ebx
lea eax, [0x6ff1e0]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x208]
mov dword [eax + 4], ecx
mov ecx, dword [0x93f150]
test ecx, ecx
jne 0x4accc2
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x150]
mov ebx, dword [esp + 0x1c0]
mov ebp, dword [esp + 0x14c]
jmp 0x4accee
call fcn.00471860
mov ecx, dword [esp + 0x204]
mov dword [edi], ecx
mov edx, dword [esp + 0x150]
mov dword [edi + 4], edx
mov ebx, dword [esp + 0x1c0]
mov dword [edi + 8], ebx
mov ebp, dword [esp + 0x14c]
mov dword [edi + 0xc], ebp
mov dword [esp + 0x178], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x4c]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov ecx, dword [esp + 0x138]
mov dword [eax + 0x14], ecx
mov dword [eax + 0x10], ebx
mov ecx, dword [esp + 0x48]
mov dword [eax + 0x1c], ecx
mov dword [eax + 0x18], ebp
mov dword [eax + 0x24], 0
mov dword [eax + 0x20], 0
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.00471acb
lea ecx, [0x78aea0]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x178]
mov dword [esp + 0x234], ecx
add esp, 0x200
ret
mov dword [esp + 0x7c], edi
mov dword [esp + 0x190], ecx
mov dword [esp], 0
lea eax, [0x71b217]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov eax, dword [esp + 0x1cc]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebp
lea eax, [0x71dd02]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0xd
call fcn.00450710
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x1d8], eax
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xb8], ecx
mov edx, dword [esp + 0x210]
test edx, edx
jne 0x4acdc7
xor edx, edx
xor ebx, ebx
jmp 0x4ace39
mov dword [esp], edx
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.004661a0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x20c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x210]
mov dword [esp + 8], ecx
call fcn.004721c0
mov eax, dword [esp + 0x1e0]
neg eax
mov edx, dword [esp + 0x210]
cmp edx, eax
ja 0x4acfa0
mov eax, dword [esp + 0x1d8]
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0x1e0]
mov ebx, dword [esp + 0x210]
mov dword [esp + 0x158], edx
mov dword [esp + 0x54], ebx
mov ebp, dword [esp + 0x7c]
test ebp, ebp
jne 0x4ace52
xor ebp, ebp
xor esi, esi
jmp 0x4acea8
mov dword [esp], ebp
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.004661a0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x190]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x7c]
mov dword [esp + 8], ecx
call fcn.004721c0
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x7c]
cmp edx, eax
ja 0x4acf9b
mov ebp, ecx
mov esi, edx
mov dword [esp + 0x154], ebp
mov dword [esp + 0x50], esi
lea eax, [0x6ff1e0]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x208]
mov dword [eax + 4], ecx
mov ecx, dword [0x93f150]
test ecx, ecx
jne 0x4acefe
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x158]
mov ebx, dword [esp + 0x1c0]
mov ebp, dword [esp + 0x154]
mov esi, dword [esp + 0x1d8]
jmp 0x4acf34
call fcn.00471870
mov ecx, dword [esp + 0x204]
mov dword [edi], ecx
mov edx, dword [esp + 0x158]
mov dword [edi + 4], edx
mov ebx, dword [esp + 0x1c0]
mov dword [edi + 8], ebx
mov ebp, dword [esp + 0x154]
mov dword [edi + 0xc], ebp
mov esi, dword [esp + 0x1d8]
mov dword [edi + 0x10], esi
mov dword [esp + 0x17c], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x54]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov ecx, dword [esp + 0x138]
mov dword [eax + 0x14], ecx
mov dword [eax + 0x10], ebx
mov ecx, dword [esp + 0x50]
mov dword [eax + 0x1c], ecx
mov dword [eax + 0x18], ebp
mov ecx, dword [esp + 0xb8]
mov dword [eax + 0x24], ecx
mov dword [eax + 0x20], esi
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.00471acb
lea ecx, [0x78aea0]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x17c]
mov dword [esp + 0x234], ecx
add esp, 0x200
ret
call fcn.00462020
call fcn.00462020
call fcn.00462020
call fcn.00462020
mov dword [esp + 0x94], ebp
mov dword [esp + 0x8c], edx
mov dword [esp + 0x1cc], edi
mov edi, ebx
mov dword [esp + 0xa0], esi
mov edx, dword [esp + 0x138]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov ebx, eax
mov eax, dword [esp + 0x18c]
jmp 0x4ab951
inc edx
cmp edx, ecx
jge 0x4ad001
movzx ebx, byte [edx + eax]
add ebx, 0xffffffd0
cmp bl, 9
jbe 0x4acff0
mov dword [esp + 0xa8], edx
lea ebx, [0x78a4b0]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.004b5df0
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0x90]
cmp eax, ecx
ja 0x4ad071
sub ecx, eax
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and eax, ecx
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x18]
mov edx, dword [esp + 0x1c8]
add eax, edx
mov edx, dword [esp + 0x130]
mov edx, eax
mov eax, ecx
mov ecx, edx
mov edx, dword [esp + 0x130]
jmp 0x4acfaf
call fcn.00471910
inc edi
mov dword [esp + 0xc4], edi
mov edi, dword [esp + 0x1e8]
mov edi, dword [esp + 0xc4]
cmp edi, 2
jge 0x4ad0c2
cmp ecx, 0x10a
jne 0x4ad076
test esi, esi
je 0x4ad076
cmp byte [ebp], 0x20
jne 0x4ad076
dec esi
mov dword [esp + 0x134], esi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, 1
add ebp, esi
mov esi, dword [esp + 0x134]
jmp 0x4ad076
xor edi, edi
xor edi, edi
mov dword [esp + 0x68], edi
xor edi, edi
jmp 0x4ad0ee
mov edx, dword [esp + 0x68]
lea edx, [edx + edx*4]
movzx eax, al
inc edi
lea eax, [eax + edx*2]
mov edx, dword [esp + 0x138]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x1c0]
cmp edi, 3
jge 0x4ad10e
cmp edi, esi
jge 0x4ad10a
movzx eax, byte [edi + ebp]
add eax, 0xffffffd0
cmp al, 9
jbe 0x4ad0ce
mov eax, dword [esp + 0x1c0]
test edi, edi
je 0x4ad11b
cmp ecx, 0x10b
jne 0x4ad125
cmp edi, 3
je 0x4ad125
mov ecx, dword [0x9139e0]
xor edi, edi
jmp 0x4ad13c
cmp edi, esi
ja 0x4ad160
sub esi, edi
mov ecx, esi
neg ecx
sar ecx, 0x1f
and ecx, edi
add ebp, ecx
mov edi, dword [esp + 0x68]
xor ecx, ecx
mov dword [esp + 0x78], edi
mov eax, dword [esp + 0x18c]
mov ebx, ecx
mov edi, esi
mov ecx, ebp
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
jmp 0x4ab951
mov eax, edi
mov ecx, esi
call fcn.00471910
mov ecx, ebx
mov dword [esp + 0xc0], ecx
lea ebx, [ecx + 1]
cmp esi, ebx
jle 0x4ad192
jbe 0x4ad232
movzx edi, byte [ecx + ebp + 1]
xchg edi, eax
cmp al, 0x30
xchg edi, eax
jb 0x4ad192
xchg edi, eax
cmp al, 0x39
xchg edi, eax
jbe 0x4ad169
mov dword [esp + 0x128], ebx
lea eax, [0x78a4b0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
call fcn.004b5df0
mov ecx, dword [esp + 0x80]
mov eax, dword [esp + 0x128]
cmp ecx, eax
jb 0x4ad22d
mov edx, dword [esp + 0xc0]
sub ecx, edx
lea edi, [ecx - 1]
mov ecx, edi
neg ecx
sar ecx, 0x1f
and eax, ecx
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1e8]
add eax, esi
mov esi, dword [esp + 0x80]
mov dword [esp + 0x94], ebp
mov dword [esp + 0x1cc], ebx
mov dword [esp + 0xa0], ecx
mov ebp, dword [esp + 0x1e8]
mov ebx, edx
mov ecx, eax
mov edx, dword [esp + 0x138]
mov eax, dword [esp + 0x18c]
jmp 0x4ab951
call fcn.00471910
mov eax, ebx
mov ecx, esi
call fcn.004718b0
call fcn.004718d0
mov eax, edx
mov ecx, ebx
call fcn.00471910
mov ecx, ebx
call fcn.004718d0
nop
call fcn.00470430
jmp fcn.004aa850