Function at 0x4a5c40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x6c]
cmp eax, dword [ecx + 8]
jbe 0x4a7213
sub esp, 0xec
mov edi, esp
lea esi, [esp + 0xf0]
call fcn.0045277e
call fcn.004acba0
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x74], ecx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x70], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x54], ebx
mov ebp, dword [esp + 0x14]
mov dword [esp + 0xc8], ebp
mov esi, dword [esp + 0x110]
mov edi, dword [esp + 0x114]
mov esi, 0xffffffff
mov dword [esp + 0x34], esi
mov edi, 0xffffffff
mov dword [esp + 0x64], edi
xor edi, edi
mov dword [esp + 0x58], edi
xor esi, esi
mov dword [esp + 0x68], esi
xor esi, esi
mov dword [esp + 0x38], esi
xor esi, esi
mov dword [esp + 0x5c], esi
xor esi, esi
mov dword [esp + 0x48], esi
mov esi, dword [esp + 0x110]
mov edi, dword [esp + 0x114]
jmp 0x4a5d2a
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0xc8]
mov ebp, dword [esp + 0x3c]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x104], ecx
mov dword [esp + 0x108], edx
mov dword [esp + 0x10c], esi
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x70]
mov esi, dword [esp + 0xbc]
mov ebp, dword [esp + 0xc8]
test edi, edi
je 0x4a71e4
mov dword [esp], esi
mov dword [esp + 4], edi
call fcn.004a41e0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x40], edx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0xbc], ebx
mov ebp, dword [esp + 0xc]
test ebp, ebp
jne 0x4a7127
mov ecx, dword [esp + 0x104]
mov ebp, dword [esp + 0x108]
mov esi, dword [esp + 0x10c]
test eax, eax
je 0x4a710b
mov dword [esp + 0xd4], ecx
mov dword [esp + 0xb0], ebp
mov dword [esp + 0xac], esi
mov edi, edx
mov edx, dword [esp + 0x34]
test edx, edx
jge 0x4a5db0
test eax, 0x100
jne 0x4a70ac
mov dword [esp + 0x3c], edx
mov edx, dword [esp + 0x64]
test edx, edx
jge 0x4a5dc7
test eax, 0x200
jne 0x4a7017
mov dword [esp + 0x64], edx
and eax, 0xffff
cmp eax, 0x109
jg 0x4a6a0a
cmp eax, 0x103
jg 0x4a6667
cmp eax, 0x23
jg 0x4a6483
cmp eax, 0x17
je 0x4a6257
lea edx, [eax - 0x18]
cmp edx, 9
ja 0x4a61d1
mov edx, dword [esp + 0x6c]
test edx, edx
jne 0x4a61ca
mov eax, edx
mov edx, dword [esp + 0x44]
cmp edx, 0x18
jne 0x4a619c
mov dword [esp + 0xb4], eax
mov eax, 1
mov byte [esp + 0x2b], al
mov eax, dword [esp + 0xb4]
movzx edx, byte [esp + 0x2b]
test dl, dl
je 0x4a5e94
lea edx, [ebp + 1]
cmp edx, esi
ja 0x4a5e4f
mov byte [ecx + ebp], 0x5a
jmp 0x4a5cec
lea eax, [0x843ec0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
call fcn.0043d1d0
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea edx, [eax + 1]
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xbc]
mov ebp, dword [esp + 0xb0]
mov edi, dword [esp + 0x40]
jmp 0x4a5e46
mov edx, eax
mov eax, 0x88888889
imul edx
mov eax, ebx
mov ebx, dword [esp + 0x6c]
add edx, ebx
sar ebx, 0x1f
sar edx, 5
mov dword [esp + 0xa8], edx
sub edx, ebx
test edx, edx
jge 0x4a612f
lea edx, [ebp + 1]
cmp edx, esi
ja 0x4a60dd
mov byte [ecx + ebp], 0x2d
mov ebp, dword [esp + 0xa8]
sub ebx, ebp
mov ebp, dword [esp + 0x6c]
xchg ebp, ebx
neg ebx
xchg ebp, ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0xa8], ebp
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov eax, 0x88888889
imul ebx
lea ecx, [ebx + edx]
sar ebx, 0x1f
sar ecx, 5
sub ecx, ebx
mov dword [esp + 0xa4], ecx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 2
call fcn.004a52e0
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x44]
cmp ebp, 0x1b
jne 0x4a60bb
lea esi, [edx + 1]
cmp esi, ecx
ja 0x4a6077
mov byte [ebx + edx], 0x3a
cmp ebp, 0x1f
je 0x4a5f54
cmp ebp, 0x1a
jne 0x4a6036
cmp ebp, 0x19
je 0x4a5f82
cmp ebp, 0x1e
je 0x4a5f82
cmp ebp, 0x21
je 0x4a5f82
cmp ebp, 0x1c
je 0x4a5f82
mov eax, dword [esp + 0x6c]
mov edi, dword [esp + 0x40]
mov edx, esi
mov esi, ecx
mov ecx, ebx
mov ebx, dword [esp + 0xbc]
jmp 0x4a5cec
cmp ebp, 0x21
jne 0x4a6026
lea edx, [esi + 1]
cmp edx, ecx
ja 0x4a5fe6
mov byte [ebx + esi], 0x3a
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov eax, dword [esp + 0xa8]
mov ecx, 0x88888889
imul ecx
mov ebx, dword [esp + 0xa8]
add edx, ebx
sar edx, 5
mov ebp, ebx
sar ebx, 0x1f
sub edx, ebx
imul edx, edx, 0x3c
sub ebp, edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], 2
call fcn.004a52e0
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
jmp 0x4a5f68
mov dword [esp + 0xa0], esi
lea eax, [0x843ec0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
call fcn.0043d1d0
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
lea edx, [eax + 1]
mov esi, dword [esp + 0xa0]
jmp 0x4a5f92
cmp ebp, 0x1c
je 0x4a5f8b
mov edx, esi
jmp 0x4a5f96
mov dword [esp], ebx
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov eax, dword [esp + 0xa4]
imul eax, eax, 0x3c
mov ecx, dword [esp + 0x30]
sub ecx, eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 2
call fcn.004a52e0
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x44]
jmp 0x4a5f54
mov dword [esp + 0x9c], edx
lea eax, [0x843ec0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], esi
call fcn.0043d1d0
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
lea esi, [eax + 1]
mov edx, dword [esp + 0x9c]
mov ebp, dword [esp + 0x44]
jmp 0x4a5f42
cmp ebp, 0x20
je 0x4a5f37
cmp ebp, 0x1c
je 0x4a5f37
cmp ebp, 0x21
je 0x4a5f37
mov esi, edx
jmp 0x4a5f46
mov dword [esp + 0xa4], ebx
lea eax, [0x843ec0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
call fcn.0043d1d0
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea edx, [eax + 1]
mov eax, dword [esp + 0xbc]
mov ebx, dword [esp + 0xa4]
mov ebp, dword [esp + 0xb0]
mov edi, dword [esp + 0x40]
jmp 0x4a5ec7
lea ebx, [ebp + 1]
cmp ebx, esi
ja 0x4a614d
mov byte [ecx + ebp], 0x2b
mov ebp, dword [esp + 0x6c]
mov ebp, edx
mov edx, ebx
mov ebx, ebp
mov ebp, dword [esp + 0x6c]
jmp 0x4a5ede
mov dword [esp + 0x98], edx
lea eax, [0x843ec0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.0043d1d0
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea ebx, [eax + 1]
mov eax, dword [esp + 0xbc]
mov edx, dword [esp + 0x98]
mov ebp, dword [esp + 0xb0]
mov edi, dword [esp + 0x40]
jmp 0x4a6136
cmp edx, 0x1b
je 0x4a5e1f
cmp edx, 0x19
je 0x4a5e1f
cmp edx, 0x1a
je 0x4a5e1f
cmp edx, 0x1c
sete dl
mov byte [esp + 0x2b], dl
mov edx, dword [esp + 0x44]
jmp 0x4a5e36
mov eax, edx
jmp 0x4a5e94
lea edx, [eax - 0x22]
cmp edx, 1
jbe 0x4a61e4
mov eax, dword [esp + 0x6c]
mov edx, ebp
jmp 0x4a5cec
lea edi, [esp + 0xd8]
mov edx, esi
lea esi, [esp + 0xf0]
call fcn.0045277e
nop
mov ecx, dword [esp + 0xd8]
mov ebx, dword [esp + 0xd4]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
and ecx, 0x3fffffff
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x44]
sar ecx, 0x10
mov dword [esp + 0x10], ecx
cmp eax, 0x23
sete al
mov byte [esp + 0x14], al
call fcn.004a55f0
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x20]
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xbc]
mov edi, dword [esp + 0x40]
jmp 0x4a5cec
mov edx, dword [esp + 0x54]
test edx, edx
je 0x4a62f8
lea eax, [edx + ebp]
mov dword [esp + 0x108], eax
cmp eax, esi
ja 0x4a62c2
mov dword [esp + 0x10c], esi
mov dword [esp + 0x104], ecx
lea eax, [ecx + ebp]
mov dword [esp], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.004529a0
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xbc]
mov edi, dword [esp + 0x40]
mov ecx, dword [esp + 0x104]
mov edx, dword [esp + 0x108]
mov esi, dword [esp + 0x10c]
jmp 0x4a5cec
lea edx, [0x843ec0]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], eax
call fcn.0043d1d0
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x54]
mov ebp, dword [esp + 0xb0]
jmp 0x4a6271
mov eax, 0x88888889
mov edx, dword [esp + 0x6c]
imul edx
mov eax, ebx
mov ebx, dword [esp + 0x6c]
add edx, ebx
sar ebx, 0x1f
sar edx, 5
mov dword [esp + 0xa8], edx
sub edx, ebx
test edx, edx
jge 0x4a641e
lea edx, [ebp + 1]
cmp edx, esi
ja 0x4a63cc
mov byte [ecx + ebp], 0x2d
mov ebp, dword [esp + 0xa8]
sub ebx, ebp
mov dword [esp + 0x2c], ebx
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov eax, 0x88888889
imul ebx
mov ecx, ebx
sar ebx, 0x1f
add edx, ecx
sar edx, 5
sub edx, ebx
mov dword [esp + 0xa8], edx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 2
call fcn.004a52e0
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xa8]
imul ecx, ecx, 0x3c
mov edx, dword [esp + 0x2c]
sub edx, ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 2
call fcn.004a52e0
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xbc]
mov edi, dword [esp + 0x40]
jmp 0x4a5cec
mov dword [esp + 0xa4], ebx
lea eax, [0x843ec0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
call fcn.0043d1d0
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea edx, [eax + 1]
mov eax, dword [esp + 0xbc]
mov ebx, dword [esp + 0xa4]
mov ebp, dword [esp + 0xb0]
mov edi, dword [esp + 0x40]
jmp 0x4a632d
lea ebx, [ebp + 1]
cmp ebx, esi
ja 0x4a6434
mov byte [ecx + ebp], 0x2b
mov ebp, edx
mov edx, ebx
mov ebx, ebp
jmp 0x4a633a
mov dword [esp + 0x94], edx
lea eax, [0x843ec0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.0043d1d0
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea ebx, [eax + 1]
mov eax, dword [esp + 0xbc]
mov edx, dword [esp + 0x94]
mov ebp, dword [esp + 0xb0]
mov edi, dword [esp + 0x40]
jmp 0x4a6425
cmp eax, 0x101
je 0x4a6598
cmp eax, 0x102
je 0x4a64e0
cmp eax, 0x103
jne 0x4a61d9
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.004a52e0
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xbc]
mov edi, dword [esp + 0x40]
jmp 0x4a5cec
mov eax, dword [esp + 0x58]
mov dword [esp], eax
call fcn.004ac740
mov edx, dword [esp + 8]
mov eax, dword [esp + 4]
cmp edx, 3
jb 0x4a7208
mov ecx, dword [esp + 0xb0]
lea edx, [ecx + 3]
mov ebx, dword [esp + 0xac]
cmp edx, ebx
ja 0x4a6546
mov ebp, dword [esp + 0xd4]
mov esi, ebp
movzx ebp, word [eax]
mov edi, ebp
movzx ebp, byte [eax + 2]
mov word [esi + ecx], di
xchg ebp, eax
mov byte [esi + ecx + 2], al
xchg ebp, eax
mov eax, dword [esp + 0x6c]
mov edi, dword [esp + 0x40]
mov ecx, esi
mov esi, ebx
mov ebx, dword [esp + 0xbc]
jmp 0x4a5cec
mov dword [esp + 0x90], edx
mov dword [esp + 0xd0], eax
lea eax, [0x843ec0]
mov dword [esp], eax
mov ebp, dword [esp + 0xd4]
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0043d1d0
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0x90]
jmp 0x4a6519
mov eax, dword [esp + 0x58]
mov dword [esp], eax
call fcn.004ac740
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xb0]
lea ebx, [edx + eax]
mov dword [esp + 0x108], ebx
mov ebp, dword [esp + 0xac]
cmp ebx, ebp
ja 0x4a6618
mov esi, dword [esp + 0xd4]
mov dword [esp + 0x10c], ebp
mov dword [esp + 0x104], esi
add edx, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004529a0
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xbc]
mov edi, dword [esp + 0x40]
mov ecx, dword [esp + 0x104]
mov edx, dword [esp + 0x108]
mov esi, dword [esp + 0x10c]
jmp 0x4a5cec
mov dword [esp + 0x60], eax
mov dword [esp + 0xcc], ecx
lea eax, [0x843ec0]
mov dword [esp], eax
mov ecx, dword [esp + 0xd4]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.0043d1d0
mov ebp, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0xcc]
mov edx, dword [esp + 0xb0]
jmp 0x4a65cf
cmp eax, 0x106
jg 0x4a68d1
cmp eax, 0x104
je 0x4a6891
cmp eax, 0x105
jne 0x4a6798
mov eax, dword [esp + 0x70]
add eax, 0x15180
mov dword [esp], eax
mov eax, dword [esp + 0x74]
adc eax, 0
mov dword [esp + 4], eax
mov dword [esp + 8], 0x93a80
mov dword [esp + 0xc], 0
call fcn.0044caf0
mov eax, dword [esp + 0x10]
mov ecx, eax
mov eax, 0xc22e4507
imul ecx
mov eax, ecx
sar ecx, 0x1f
add eax, edx
sar eax, 0x10
sub eax, ecx
mov dword [esp], eax
call fcn.004ac840
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xb0]
lea ebx, [eax + edx]
mov dword [esp + 0x108], ebx
mov ebp, dword [esp + 0xac]
cmp ebx, ebp
ja 0x4a6749
mov esi, dword [esp + 0xd4]
mov dword [esp + 0x104], esi
mov dword [esp + 0x10c], ebp
add edx, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004529a0
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xbc]
mov edi, dword [esp + 0x40]
mov ecx, dword [esp + 0x104]
mov edx, dword [esp + 0x108]
mov esi, dword [esp + 0x10c]
jmp 0x4a5cec
mov dword [esp + 0x4c], eax
mov dword [esp + 0xc0], ecx
lea eax, [0x843ec0]
mov dword [esp], eax
mov ecx, dword [esp + 0xd4]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.0043d1d0
mov ebp, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0xc0]
mov edx, dword [esp + 0xb0]
jmp 0x4a6700
mov eax, dword [esp + 0x70]
add eax, 0x15180
mov dword [esp], eax
mov eax, dword [esp + 0x74]
adc eax, 0
mov dword [esp + 4], eax
mov dword [esp + 8], 0x93a80
mov dword [esp + 0xc], 0
call fcn.0044caf0
mov eax, dword [esp + 0x10]
mov ecx, eax
mov eax, 0xc22e4507
imul ecx
mov eax, ecx
sar ecx, 0x1f
add eax, edx
sar eax, 0x10
sub eax, ecx
mov dword [esp], eax
call fcn.004ac840
mov edx, dword [esp + 8]
mov eax, dword [esp + 4]
cmp edx, 3
jb 0x4a71fe
mov ecx, dword [esp + 0xb0]
lea edx, [ecx + 3]
mov ebx, dword [esp + 0xac]
cmp edx, ebx
ja 0x4a683f
mov ebp, dword [esp + 0xd4]
mov esi, ebp
movzx ebp, byte [eax + 2]
mov edi, ebp
movzx ebp, word [eax]
mov word [esi + ecx], bp
xchg edi, eax
mov byte [esi + ecx + 2], al
xchg edi, eax
mov eax, dword [esp + 0x6c]
mov edi, dword [esp + 0x40]
mov ecx, esi
mov esi, ebx
mov ebx, dword [esp + 0xbc]
jmp 0x4a5cec
mov dword [esp + 0x8c], edx
mov dword [esp + 0xd0], eax
lea eax, [0x843ec0]
mov dword [esp], eax
mov ebp, dword [esp + 0xd4]
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0043d1d0
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0x8c]
jmp 0x4a6812
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.004a52e0
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xbc]
mov edi, dword [esp + 0x40]
jmp 0x4a5cec
cmp eax, 0x107
je 0x4a69ca
cmp eax, 0x108
jne 0x4a698a
mov eax, dword [esp + 0x68]
cmp eax, 0xa
jge 0x4a6983
lea edx, [ebp + 1]
cmp edx, esi
ja 0x4a693b
mov byte [ecx + ebp], 0x20
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.004a52e0
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xbc]
mov edi, dword [esp + 0x40]
jmp 0x4a5cec
lea eax, [0x843ec0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
call fcn.0043d1d0
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea edx, [eax + 1]
mov eax, dword [esp + 0x68]
mov ebx, dword [esp + 0xbc]
mov ebp, dword [esp + 0xb0]
mov edi, dword [esp + 0x40]
jmp 0x4a68fb
mov edx, ebp
jmp 0x4a68ff
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov eax, dword [esp + 0x68]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.004a52e0
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xbc]
mov edi, dword [esp + 0x40]
jmp 0x4a5cec
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov eax, dword [esp + 0x68]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.004a52e0
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xbc]
mov edi, dword [esp + 0x40]
jmp 0x4a5cec
cmp eax, 0x20d
jg 0x4a6ce4
cmp eax, 0x113
jg 0x4a6bc3
cmp eax, 0x10a
je 0x4a6abd
cmp eax, 0x10b
je 0x4a6a7d
cmp eax, 0x113
jne 0x4a61d9
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 4
call fcn.004a52e0
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xbc]
mov edi, dword [esp + 0x40]
jmp 0x4a5cec
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov eax, dword [esp + 0x38]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 3
call fcn.004a52e0
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xbc]
mov edi, dword [esp + 0x40]
jmp 0x4a5cec
mov eax, dword [esp + 0x38]
cmp eax, 0x64
jge 0x4a6ae9
lea edx, [ebp + 1]
cmp edx, esi
ja 0x4a6b7b
mov byte [ecx + ebp], 0x20
cmp eax, 0xa
jge 0x4a6b74
lea ebp, [edx + 1]
cmp ebp, esi
ja 0x4a6b25
mov byte [ecx + edx], 0x20
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.004a52e0
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xbc]
mov edi, dword [esp + 0x40]
jmp 0x4a5cec
mov dword [esp + 0x88], edx
lea eax, [0x843ec0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.0043d1d0
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea ebp, [eax + 1]
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x88]
mov ebx, dword [esp + 0xbc]
mov edi, dword [esp + 0x40]
jmp 0x4a6ae5
mov ebp, edx
jmp 0x4a6ae9
lea eax, [0x843ec0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
call fcn.0043d1d0
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea edx, [eax + 1]
mov eax, dword [esp + 0x38]
mov ebx, dword [esp + 0xbc]
mov ebp, dword [esp + 0xb0]
mov edi, dword [esp + 0x40]
jmp 0x4a6ad1
cmp eax, 0x114
je 0x4a6c86
cmp eax, 0x20c
je 0x4a6c4a
cmp eax, 0x20d
jne 0x4a61d9
mov eax, 0xaaaaaaab
imul edx
mov ebx, dword [esp + 0x64]
add edx, ebx
sar ebx, 0x1f
sar edx, 3
sub edx, ebx
lea edx, [edx + edx*2]
shl edx, 2
mov ebx, dword [esp + 0x64]
sub ebx, edx
test ebx, ebx
jne 0x4a6c46
mov edx, 0xc
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 0
call fcn.004a52e0
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xbc]
mov edi, dword [esp + 0x40]
jmp 0x4a5cec
mov edx, ebx
jmp 0x4a6c0a
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 2
call fcn.004a52e0
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xbc]
mov edi, dword [esp + 0x40]
jmp 0x4a5cec
mov edx, dword [esp + 0x3c]
test edx, edx
jge 0x4a6c90
neg edx
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov eax, 0x51eb851f
mov ecx, edx
imul edx
mov ebx, ecx
sar ecx, 0x1f
sar edx, 5
sub edx, ecx
imul ecx, edx, 0x64
sub ebx, ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 2
call fcn.004a52e0
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xbc]
mov edi, dword [esp + 0x40]
jmp 0x4a5cec
cmp eax, 0x210
jle 0x4a6f1f
cmp eax, 0x212
jle 0x4a6e98
cmp eax, 0x215
jne 0x4a6dcf
cmp edx, 0xc
jl 0x4a6d71
lea eax, [ebp + 2]
cmp eax, esi
ja 0x4a6d25
mov edx, 0x4d50
mov word [ecx + ebp], dx
mov edx, eax
mov eax, dword [esp + 0x6c]
jmp 0x4a5cec
mov dword [esp + 0x84], eax
lea edx, [0x843ec0]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], eax
call fcn.0043d1d0
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0xbc]
mov ebp, dword [esp + 0xb0]
mov edi, dword [esp + 0x40]
jmp 0x4a6d11
lea eax, [ebp + 2]
cmp eax, esi
ja 0x4a6d83
mov edx, 0x4d41
mov word [ecx + ebp], dx
jmp 0x4a6d1a
mov dword [esp + 0x80], eax
lea edx, [0x843ec0]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], eax
call fcn.0043d1d0
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x80]
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0xbc]
mov ebp, dword [esp + 0xb0]
mov edi, dword [esp + 0x40]
jmp 0x4a6d78
cmp eax, 0x216
jne 0x4a61d9
cmp edx, 0xc
jl 0x4a6e40
lea eax, [ebp + 2]
cmp eax, esi
ja 0x4a6dfa
mov edx, 0x6d70
mov word [ecx + ebp], dx
mov edx, eax
mov eax, dword [esp + 0x6c]
jmp 0x4a5cec
mov dword [esp + 0x7c], eax
lea edx, [0x843ec0]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], eax
call fcn.0043d1d0
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x7c]
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0xbc]
mov ebp, dword [esp + 0xb0]
mov edi, dword [esp + 0x40]
jmp 0x4a6de6
lea eax, [ebp + 2]
cmp eax, esi
ja 0x4a6e52
mov edx, 0x6d61
mov word [ecx + ebp], dx
jmp 0x4a6def
mov dword [esp + 0x78], eax
lea edx, [0x843ec0]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], eax
call fcn.0043d1d0
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x78]
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0xbc]
mov ebp, dword [esp + 0xb0]
mov edi, dword [esp + 0x40]
jmp 0x4a6e47
cmp eax, 0x211
jne 0x4a6edf
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov eax, dword [esp + 0x48]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.004a52e0
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xbc]
mov edi, dword [esp + 0x40]
jmp 0x4a5cec
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov eax, dword [esp + 0x48]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.004a52e0
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xbc]
mov edi, dword [esp + 0x40]
jmp 0x4a5cec
cmp eax, 0x20e
jne 0x4a6f90
mov eax, 0xaaaaaaab
imul edx
mov ebx, dword [esp + 0x64]
add edx, ebx
sar edx, 3
sar ebx, 0x1f
sub edx, ebx
lea edx, [edx + edx*2]
shl edx, 2
mov ebx, dword [esp + 0x64]
sub ebx, edx
test ebx, ebx
jne 0x4a6f8c
mov edx, 0xc
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 2
call fcn.004a52e0
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xbc]
mov edi, dword [esp + 0x40]
jmp 0x4a5cec
mov edx, ebx
jmp 0x4a6f50
cmp eax, 0x20f
jne 0x4a6fd7
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov eax, dword [esp + 0x5c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.004a52e0
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xbc]
mov edi, dword [esp + 0x40]
jmp 0x4a5cec
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov eax, dword [esp + 0x5c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.004a52e0
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xbc]
mov edi, dword [esp + 0x40]
jmp 0x4a5cec
mov eax, dword [esp + 0x70]
mov dword [esp], eax
mov ecx, dword [esp + 0x74]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x15180
mov dword [esp + 0xc], 0
call fcn.0044caf0
mov eax, dword [esp + 0x10]
mov ecx, eax
mov eax, 0x91a2b3c5
imul ecx
add edx, ecx
mov eax, ecx
sar ecx, 0x1f
sar edx, 0xb
sub edx, ecx
imul ecx, edx, 0xe10
sub eax, ecx
mov ecx, eax
mov eax, 0x88888889
mov ebx, edx
imul ecx
lea eax, [ecx + edx]
mov edx, ecx
sar ecx, 0x1f
sar eax, 5
sub eax, ecx
imul ecx, eax, 0x3c
sub edx, ecx
mov ecx, dword [esp + 0xd4]
mov ebp, dword [esp + 0xb0]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x40]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x48], edx
mov edx, ebx
mov eax, dword [esp + 0x44]
mov ebx, dword [esp + 0xbc]
jmp 0x4a5dc7
mov eax, dword [esp + 0x70]
mov dword [esp], eax
mov ecx, dword [esp + 0x74]
mov dword [esp + 4], ecx
mov byte [esp + 8], 1
call fcn.004ae900
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
inc ebx
mov ebp, dword [esp + 0xb0]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x40]
mov dword [esp + 0x58], eax
mov dword [esp + 0x68], ecx
mov dword [esp + 0x38], ebx
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0xd4]
mov ebx, dword [esp + 0xbc]
jmp 0x4a5db0
mov dword [esp + 0x118], ecx
mov dword [esp + 0x11c], ebp
mov dword [esp + 0x120], esi
add esp, 0xec
ret
mov esi, dword [esp + 0x108]
lea edi, [ebp + esi]
mov dword [esp + 0xa8], edi
mov edx, dword [esp + 0x10c]
cmp edi, edx
ja 0x4a718e
mov dword [esp + 0x10c], edx
mov eax, dword [esp + 0x104]
lea ebx, [eax + esi]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.004529a0
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0xbc]
mov ecx, dword [esp + 0x104]
mov ebp, dword [esp + 0xa8]
mov esi, dword [esp + 0x10c]
jmp 0x4a5d7e
mov dword [esp + 0xc4], ecx
mov dword [esp + 0x50], ebp
lea eax, [0x843ec0]
mov dword [esp], eax
mov ecx, dword [esp + 0x104]
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], edi
call fcn.0043d1d0
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc4]
mov ebp, dword [esp + 0x50]
mov esi, dword [esp + 0x108]
mov dword [esp + 0x104], eax
jmp 0x4a7144
mov esi, dword [esp + 0x10c]
mov ebp, dword [esp + 0x108]
mov ecx, dword [esp + 0x104]
jmp 0x4a710b
mov ecx, 3
call fcn.00452090
mov ecx, 3
call fcn.00452090
nop
call fcn.004507b0
jmp fcn.004a5c40