Function at 0x428370
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x160
mov al, byte [ebp + 0xc]
mov edx, dword [ebp + 8]
mov esi, 0xb80bcc3c
and al, 1
mov byte [esp + 0x15b], al
mov dword [esp + 0x154], edx
mov dword [esp + 0x150], ecx
mov edx, dword [0x49d244]
add edx, 0x399e11
mov dword [0x49d244], edx
mov dword [esp + 0x14c], 0
mov edx, dword [0x4a8e30]
imul edx, edx, 0x66557cd7
and edx, 0x21e88190
mov edi, dword [0x49a4c8]
imul edi, edx
mov dword [0x49a4c8], edi
mov edx, esp
mov dword [edx], 0
mov dword [esp + 0xb0], esi
mov dword [esp + 0xac], ecx
call fcn.00450db0
mov dword [esp + 0x144], edx
mov dword [esp + 0x140], eax
mov bx, word [0x4aab2c]
movsx eax, bx
imul eax, eax, 0x547a72a8
add eax, 0xe67d7b80
mov ecx, dword [0x4a4d58]
imul ecx, eax
mov dword [0x4a4d58], ecx
mov byte [esp + 0x13f], 0
mov bx, word [0x4afa40]
movsx eax, bx
xor eax, 0xffffffff
mov ecx, dword [esp + 0xb0]
cmp ecx, eax
jl 0x42845f
mov dword [0x4a8624], 0x7a64a860
jmp 0x428480
mov ax, word [0x4b2efc]
movsx ecx, ax
add ecx, ecx
mov edx, dword [0x4a52ec]
and ecx, edx
mov edx, dword [0x499cac]
and edx, ecx
mov dword [0x499cac], edx
mov eax, dword [0x497624]
mov ecx, esp
mov edx, dword [esp + 0xac]
mov dword [ecx], edx
call eax
sub esp, 4
mov eax, dword [0x49dcf8]
or eax, 0xffdf777f
mov dword [0x49dcf8], eax
test byte [esp + 0x15b], 1
je 0x4285b0
mov eax, 0xa5ff77df
mov cx, word [0x4b3860]
movsx edx, cx
mov esi, dword [0x4a8388]
and edx, esi
cmp eax, edx
je 0x42850c
mov ax, word [0x4ad0b0]
movsx ecx, ax
imul ecx, ecx, 0x8ffaa80
mov edx, dword [0x4a8630]
mov esi, edx
dec esi
mov dword [0x4a8630], esi
cmp ecx, edx
jl 0x428507
mov eax, dword [0x49f4cc]
imul eax, eax, 0x606153d7
mov dword [0x49f4cc], eax
jmp 0x42850c
mov eax, dword [esp + 0xac]
add eax, 0x18
mov ecx, dword [esp + 0xac]
mov edx, dword [ecx + 0x18]
mov esi, dword [ecx + 0x1c]
mov dword [esp + 0xa8], eax
mov dword [esp + 0xa4], edx
mov dword [esp + 0xa0], esi
jmp 0x42853d
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0xa4]
xor edx, edx
mov dword [esp + 0x9c], eax
mov eax, ecx
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0x98], edx
mov edx, ecx
mov ebx, dword [esp + 0x98]
mov ecx, dword [esp + 0x98]
mov esi, dword [esp + 0xa8]
lock cmpxchg8b qword [esi]
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa0], edx
jne 0x42853d
jmp 0x428598
mov ax, word [0x4ac13c]
mov cx, ax
and ecx, 0x1ca5
mov ax, cx
mov word [0x4ac13c], ax
mov eax, 0xbceefb8f
mov ecx, dword [0x498b00]
add ecx, 0x2f7f522f
cmp eax, ecx
jge 0x4285e1
mov ax, word [0x4aee82]
mov cx, ax
imul ecx, ecx, 0x301eb70f
mov ax, cx
mov word [0x4aee82], ax
xor eax, eax
mov dword [esp + 0x94], eax
mov edx, dword [esp + 0x94]
mov ebx, dword [esp + 0x94]
mov ecx, dword [esp + 0x94]
mov esi, dword [esp + 0xac]
lock cmpxchg8b qword [esi + 0x18]
mov ecx, dword [esp + 0x140]
mov ebx, dword [esp + 0x144]
sub ecx, eax
sbb ebx, edx
mov dword [esp + 0x90], ecx
mov dword [esp + 0x8c], ebx
jae 0x428733
jmp 0x428636
mov eax, 0x9e12efb
mov ecx, dword [0x4a698c]
inc ecx
mov dword [0x4a698c], ecx
add ecx, 0x9e5bddff
or ecx, 0xdf196e0e
cmp eax, ecx
jne 0x428679
mov eax, dword [0x49bd0c]
xor eax, 0xc017efb8
mov ecx, dword [0x49fc38]
and ecx, eax
mov dword [0x49fc38], ecx
jmp 0x4286bd
mov eax, 0x424402
mov ecx, dword [0x4a318c]
cmp eax, ecx
jne 0x4286a0
mov eax, dword [0x4aa078]
and eax, 0x19cba4a6
mov dword [0x4aa078], eax
jmp 0x4286b8
mov eax, dword [0x49e248]
xor eax, 0x8c216526
mov ecx, dword [0x4a841c]
sub ecx, eax
mov dword [0x4a841c], ecx
jmp 0x4286bd
mov eax, dword [esp + 0x154]
mov ecx, dword [esp + 0xac]
movsd xmm0, qword [ecx + 0x20]
movsd xmm1, qword [ecx + 0x28]
movsd qword [eax + 8], xmm1
movsd qword [eax], xmm0
mov eax, dword [0x4a56c8]
inc eax
mov dword [0x4a56c8], eax
xor eax, 0x1094c3ae
cmp eax, 0xb6603fa6
jge 0x428714
mov eax, dword [0x49a600]
sar eax, 8
add eax, 0x19db4a1a
mov ecx, dword [0x4aa19c]
and ecx, eax
mov dword [0x4aa19c], ecx
mov dword [esp + 0x14c], 1
mov eax, dword [0x4a10d0]
add eax, 0x2ac80233
mov dword [0x4a10d0], eax
jmp 0x4287ab
mov eax, 0xe6465c8c
mov cx, word [0x4b247a]
mov dx, cx
mov esi, edx
dec esi
mov cx, si
mov word [0x4b247a], cx
mov esi, dword [0x498c74]
mov edi, esi
inc edi
mov dword [0x498c74], edi
imul edx, esi
or edx, 0x699d
mov cx, word [0x4ae924]
mov si, cx
sub esi, edx
mov cx, si
mov word [0x4ae924], cx
mov byte [esp + 0x13f], 1
mov cx, word [0x4afa46]
movsx edx, cx
cmp eax, edx
jne 0x4287a6
mov eax, dword [0x4a3378]
add eax, 0xa1dd24bf
mov dword [0x4a3378], eax
jmp 0x4287ab
mov ax, word [0x4ab9f6]
mov cx, ax
imul ecx, ecx, 0xaf82ae81
mov ax, cx
mov word [0x4ab9f6], ax
mov ecx, dword [0x497628]
mov edx, esp
mov esi, dword [esp + 0xac]
mov dword [edx], esi
call ecx
sub esp, 4
mov ecx, dword [0x4a7a18]
mov edx, ecx
inc edx
mov dword [0x4a7a18], edx
add ecx, 0x797c0c71
mov edx, dword [0x4a7654]
and edx, ecx
mov dword [0x4a7654], edx
test byte [esp + 0x13f], 1
je 0x42980b
mov eax, 0x43694b65
mov cx, word [0x4b0b30]
movsx edx, cx
shr edx, 9
mov cx, word [0x4ad7c8]
mov si, cx
or edx, esi
or edx, 0x69de
mov cx, dx
mov word [0x4ad7c8], cx
mov dword [esp + 0x134], 0
mov dword [esp + 0x130], 0
mov edx, dword [0x4a0964]
sar edx, 3
or edx, 0xdc1a0e43
mov esi, dword [0x4a74c8]
xor esi, edx
mov dword [0x4a74c8], esi
mov dword [esp + 0x12c], 0
mov edx, dword [0x4a6b40]
inc edx
mov dword [0x4a6b40], edx
xor edx, 0x7ace1db6
mov esi, dword [0x4a939c]
sub esi, edx
mov dword [0x4a939c], esi
mov edx, esp
mov dword [edx + 4], 0x600
mov dword [edx], 0x649c
mov dword [esp + 0x88], eax
call fcn.00437eb0
mov dword [esp + 0x128], eax
mov eax, dword [0x4aa700]
dec eax
mov dword [0x4aa700], eax
mov cx, word [0x4b1d7a]
mov dx, cx
and edx, eax
mov cx, dx
mov word [0x4b1d7a], cx
mov eax, dword [esp + 0x128]
mov bl, byte [eax]
mov byte [esp + 0x127], bl
mov eax, dword [0x4aa108]
and eax, 0x6a14f282
mov dword [0x4aa108], eax
mov eax, dword [0x49f1c8]
mov edx, eax
dec edx
mov dword [0x49f1c8], edx
add eax, 0xfa88bc1a
xor eax, 0xa759d93c
mov edx, dword [0x49e22c]
mov esi, dword [esp + 0x88]
sub esi, edx
cmp eax, esi
jle 0x428938
mov eax, dword [0x49b11c]
imul eax, eax, 0x7cb42e70
mov dword [0x49b11c], eax
mov eax, 0x68849913
xorps xmm0, xmm0
movaps xmmword [esp + 0x110], xmm0
mov ecx, dword [0x4a1a20]
or ecx, 0xccc22ebf
mov dword [0x4a1a20], ecx
mov word [esp + 0x110], 2
mov ecx, dword [0x49c64c]
mov edx, dword [0x4a60a4]
imul ecx, edx
mov edx, dword [0x4a18e4]
imul edx, ecx
mov dword [0x4a18e4], edx
mov ecx, dword [0x49b8b8]
mov edx, ecx
dec edx
mov dword [0x49b8b8], edx
mov si, word [0x4ab6de]
movsx edx, si
add ecx, edx
cmp eax, ecx
je 0x4289cd
mov eax, dword [0x4aa8b8]
not eax
imul eax, eax, 0x31dd45be
mov cx, word [0x4b4136]
mov dx, cx
add edx, eax
mov cx, dx
mov word [0x4b4136], cx
jmp 0x4289f0
mov ax, word [0x4ad89c]
movsx ecx, ax
xor ecx, 0x8840064a
or ecx, 0x65b06995
mov edx, dword [0x49eeb4]
sub edx, ecx
mov dword [0x49eeb4], edx
mov dword [esp + 0xfd], 0x13
mov eax, dword [0x49afb8]
imul eax, eax, 0x23f96877
mov dword [0x49afb8], eax
mov dword [esp + 0x101], 0
mov eax, dword [0x4a3ea8]
mov ecx, dword [0x4a2614]
or eax, ecx
or eax, 0xef0fd5d0
mov dword [0x4a2614], eax
mov dword [esp + 0x105], 7
mov eax, dword [0x4a8374]
imul eax, eax, 0xcdeee0
mov ecx, 0xfe5fb531
sub ecx, eax
mov dx, cx
mov word [0x4abd18], dx
mov byte [esp + 0x109], 3
mov eax, dword [0x49ae20]
add eax, 0x23a38eab
mov dword [0x49ae20], eax
lea eax, [esp + 0xe8]
mov ecx, eax
mov dword [esp + 0x84], eax
call fcn.0044e320
mov dx, word [0x4af432]
mov cx, dx
add ecx, 0x2fb1ce02
mov dx, cx
mov word [0x4af432], dx
movzx ecx, byte [esp + 0x127]
mov esi, esp
mov dword [esi], ecx
mov dword [esi + 4], 0
mov ecx, dword [esp + 0x84]
mov dword [esp + 0x80], eax
call fcn.00414ca0
sub esp, 8
mov eax, dword [0x4a9a30]
imul eax, eax, 0x9707957b
mov ecx, dword [0x4a588c]
xor ecx, eax
mov dword [0x4a588c], ecx
mov dword [esp + 0xe4], 0
mov eax, dword [esp + 0xe4]
movzx ecx, byte [esp + 0x127]
cmp eax, ecx
je 0x428bce
mov eax, dword [0x49f93c]
xor eax, 0xd6b0ff74
mov dword [0x49f93c], eax
mov eax, esp
lea ecx, [esp + 0xe4]
mov dword [eax], ecx
lea ecx, [esp + 0xe8]
call fcn.004087a0
sub esp, 4
mov eax, dword [0x4a56b8]
imul eax, eax, 0x858d416f
cmp eax, 0x995386a4
jl 0x428bb3
mov eax, 0x4f42cd1
mov ecx, dword [0x4a6a68]
sar ecx, 0xa
mov dx, word [0x4b3116]
movsx esi, dx
xor esi, 0xffffffff
add esi, 0xcda95ce9
xor ecx, esi
cmp eax, ecx
jl 0x428b92
mov eax, dword [0x49c9ac]
shl eax, 9
mov ecx, dword [0x49d59c]
add eax, ecx
and eax, 0xc05e674e
cmp eax, 0x3d80495d
jle 0x428b8d
jmp 0x428b8d
jmp 0x428bae
mov eax, dword [0x4a97e8]
mov cx, word [0x4b2b6c]
mov dx, cx
imul edx, eax
mov cx, dx
mov word [0x4b2b6c], cx
jmp 0x428bb3
jmp 0x428bb8
mov eax, dword [esp + 0xe4]
add eax, 1
mov dword [esp + 0xe4], eax
jmp 0x428ae7
mov eax, dword [0x4a2950]
shl eax, 5
mov cx, word [0x4af1ec]
mov dx, cx
dec edx
mov cx, dx
mov word [0x4af1ec], cx
movsx edx, cx
imul eax, edx
cmp eax, 0x40244041
jne 0x428c0b
mov eax, dword [0x4980c8]
add eax, 0x79eccee3
mov dword [0x4980c8], eax
mov eax, esp
lea ecx, [esp + 0xe8]
mov dword [eax], ecx
call fcn.00414b30
mov eax, dword [0x49c398]
and eax, 0xee104c71
mov dword [0x49c398], eax
mov dword [esp + 0xe0], 0
mov eax, dword [esp + 0xe0]
movzx ecx, byte [esp + 0x127]
cmp eax, ecx
je 0x42952c
mov eax, dword [0x49dd00]
xor eax, 0x53a61e46
mov dword [0x49dd00], eax
mov eax, dword [esp + 0xe0]
mov ecx, esp
mov dword [ecx], eax
lea eax, [esp + 0xe8]
mov ecx, eax
mov dword [esp + 0x7c], eax
call fcn.0042a870
sub esp, 4
mov eax, dword [eax]
lea eax, [eax + eax*2]
mov ecx, dword [esp + 0x128]
mov eax, dword [ecx + eax*2 + 1]
mov dword [esp + 0x114], eax
mov eax, dword [0x4a37f8]
or eax, 0xb5a0c164
mov dword [0x4a37f8], eax
mov eax, dword [esp + 0xe0]
mov ecx, esp
mov dword [ecx], eax
mov ecx, dword [esp + 0x7c]
call fcn.0042a870
sub esp, 4
mov eax, dword [eax]
lea eax, [eax + eax*2]
mov ecx, dword [esp + 0x128]
mov dx, word [ecx + eax*2 + 5]
mov word [esp + 0x112], dx
mov eax, dword [0x49e2f4]
xor eax, 0xaf7dff4d
mov dword [0x49e2f4], eax
lea ecx, [esp + 0xcc]
call fcn.00401b60
mov ecx, dword [0x4a7ef0]
and ecx, 0xecb6143b
mov esi, dword [0x4aa884]
imul esi, ecx
mov dword [0x4aa884], esi
mov ecx, dword [esp + 0x114]
mov dword [esp + 0x10a], ecx
mov ecx, dword [0x49b854]
add ecx, 0xac4e4f04
mov dword [0x49b854], ecx
mov dx, word [esp + 0x112]
mov word [esp + 0x10e], dx
mov ecx, dword [0x4a28b4]
mov esi, ecx
inc esi
mov dword [0x4a28b4], esi
cmp ecx, 0xfbfeffbf
mov dword [esp + 0x78], eax
je 0x428d65
mov eax, dword [0x4a460c]
xor eax, 0xd2bcfc70
mov dword [0x4a460c], eax
mov eax, esp
lea ecx, [esp + 0xfd]
mov dword [eax], ecx
mov dword [eax + 4], 0x13
lea ecx, [esp + 0xcc]
call fcn.00404c80
sub esp, 8
mov ecx, dword [0x4a5a6c]
or ecx, 0xe8002000
mov dword [0x4a5a6c], ecx
mov ecx, esp
lea edx, [esp + 0xcc]
mov dword [ecx + 4], edx
lea edx, [esp + 0x110]
mov dword [ecx], edx
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], 2
mov ecx, dword [esp + 0xac]
mov dword [esp + 0x74], eax
call fcn.00449480
sub esp, 0x10
cmp eax, 0
jg 0x428dfd
mov eax, dword [0x49d55c]
sar eax, 5
mov ecx, dword [0x4a2450]
or ecx, eax
mov dword [0x4a2450], ecx
mov dword [esp + 0xc8], 7
jmp 0x4294d5
lea eax, [esp + 0xcc]
mov ecx, dword [0x4a69ec]
or ecx, 0xf7976631
mov dword [0x4a69ec], ecx
mov ecx, eax
call fcn.004396e0
cmp eax, 0x400
ja 0x428e4c
mov eax, dword [0x4a0334]
mov ecx, dword [0x4a4524]
imul ecx, eax
mov dword [0x4a4524], ecx
mov dword [esp + 0xc8], 7
jmp 0x4294d5
lea eax, [esp + 0xcc]
mov ecx, dword [0x497b24]
not ecx
mov edx, dword [0x49f438]
not edx
or ecx, edx
or ecx, 0x2cf11dca
mov edx, dword [0x49b544]
and edx, ecx
mov dword [0x49b544], edx
mov ecx, eax
call fcn.004396e0
cmp eax, 0x4000
jbe 0x428eb3
mov ax, word [0x4ab17e]
mov cx, ax
and ecx, 0x304d
mov ax, cx
mov word [0x4ab17e], ax
mov dword [esp + 0xc8], 7
jmp 0x4294d5
mov eax, dword [0x498afc]
sub eax, 0x2d7738ae
cmp eax, 0x118d94ec
jne 0x428eef
mov eax, dword [0x497c48]
mov ecx, eax
inc ecx
mov dword [0x497c48], ecx
mov ecx, 0xa4ead9a4
sub ecx, eax
and ecx, 0x7d342a19
mov eax, dword [0x4a7b74]
add eax, ecx
mov dword [0x4a7b74], eax
lea ecx, [esp + 0xcc]
call fcn.00439510
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov edx, dword [esp + 0x140]
mov esi, dword [esp + 0x144]
sub ecx, edx
sbb eax, esi
mov dword [esp + 0x70], eax
mov dword [esp + 0x6c], ecx
jae 0x428fc5
jmp 0x428f25
mov ax, word [0x4b0cda]
mov cx, ax
add ecx, 0x953bf8e2
mov ax, cx
mov word [0x4b0cda], ax
mov ecx, dword [esp + 0x12c]
inc ecx
mov dword [esp + 0x12c], ecx
mov ax, word [0x4af27c]
mov cx, ax
dec ecx
mov ax, cx
mov word [0x4af27c], ax
movsx ecx, ax
mov edx, dword [0x4a3040]
and edx, ecx
mov dword [0x4a3040], edx
cmp dword [esp + 0x12c], 3
jne 0x428fa6
mov ax, word [0x4b2cd6]
mov cx, ax
or ecx, 0x1c62
mov ax, cx
mov word [0x4b2cd6], ax
mov dword [esp + 0xc8], 5
jmp 0x4294d5
mov eax, dword [0x49c134]
add eax, 0xb7ff1f7c
mov dword [0x49c134], eax
mov dword [esp + 0xc8], 7
jmp 0x4294d5
mov eax, 0xf0cdc7f5
mov dword [0x4985f0], 0xa50aec85
mov dword [esp + 0x12c], 0
mov ecx, dword [0x4a125c]
and ecx, 0x11c802a8
mov dword [0x4a125c], ecx
lea ecx, [esp + 0xcc]
mov dword [esp + 0x68], eax
call fcn.00439510
movzx eax, word [eax + 8]
mov dword [esp + 0xc4], eax
mov eax, dword [0x4a45c0]
shl eax, 7
mov ecx, dword [esp + 0x68]
cmp ecx, eax
jne 0x429037
mov ax, word [0x4b134a]
movsx ecx, ax
not ecx
and ecx, 0xa0860100
mov dword [0x4aa080], ecx
lea eax, [esp + 0xcc]
imul ecx, dword [esp + 0xc4], 6
mov dword [esp + 0x64], ecx
mov ecx, eax
call fcn.004396e0
sub eax, 0x400
sub eax, 0xa
mov ecx, dword [esp + 0x64]
cmp ecx, eax
jbe 0x4290a5
mov ax, word [0x4b2f70]
mov cx, ax
dec ecx
mov ax, cx
mov word [0x4b2f70], ax
mov edx, dword [0x49ae04]
or ecx, edx
mov ax, word [0x4af5fa]
mov dx, ax
imul edx, ecx
mov ax, dx
mov word [0x4af5fa], ax
mov dword [esp + 0xc8], 7
jmp 0x4294d5
mov eax, dword [0x49eea0]
mov ecx, eax
dec ecx
mov dword [0x49eea0], ecx
mov ecx, dword [0x49bc1c]
sub ecx, eax
mov dword [0x49bc1c], ecx
mov byte [esp + 0xc3], 0
mov dx, word [0x4b2a0a]
mov ax, dx
or eax, 0x302
mov dx, ax
mov word [0x4b2a0a], dx
mov dword [esp + 0xbc], 0
mov eax, dword [esp + 0xbc]
cmp eax, dword [esp + 0xc4]
je 0x429205
lea eax, [esp + 0xcc]
mov ecx, dword [0x4a310c]
add ecx, ecx
mov dword [0x49b6fc], ecx
mov ecx, dword [esp + 0x114]
imul edx, dword [esp + 0xbc], 6
add edx, 0xa
mov dword [esp + 0x60], ecx
mov ecx, eax
mov dword [esp + 0x5c], edx
call fcn.00439510
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x5c]
cmp ecx, dword [eax + edx]
jne 0x4291e5
lea eax, [esp + 0xcc]
mov cx, word [0x4af36e]
mov dx, cx
add edx, 0xfb96f113
mov cx, dx
mov word [0x4af36e], cx
movzx edx, word [esp + 0x112]
imul esi, dword [esp + 0xbc], 6
add esi, 0xa
mov ecx, eax
mov dword [esp + 0x58], esi
mov dword [esp + 0x54], edx
call fcn.00439510
mov ecx, dword [esp + 0x58]
movzx eax, word [eax + ecx + 4]
mov edx, dword [esp + 0x54]
cmp edx, eax
jne 0x4291d6
mov eax, dword [0x49a1b0]
and eax, 0x35e396f6
mov dword [0x49a1b0], eax
mov byte [esp + 0xc3], 1
mov eax, dword [0x4a0924]
not eax
or eax, 0x52379707
mov ecx, dword [0x49d55c]
add ecx, eax
mov dword [0x49d55c], ecx
jmp 0x429205
mov eax, dword [0x49a3d4]
and eax, 0xec99fcb8
mov dword [0x49a3d4], eax
mov dword [0x4a6d6c], 0x849ea256
mov eax, dword [esp + 0xbc]
add eax, 1
mov dword [esp + 0xbc], eax
jmp 0x4290ed
mov eax, dword [0x49f514]
or eax, 0x4244379c
mov dword [0x49f514], eax
test byte [esp + 0xc3], 1
jne 0x42923b
mov word [0x4b1d46], 0xd646
mov dword [esp + 0xc8], 7
jmp 0x4294d5
mov eax, 0x403d0bf3
mov ecx, dword [0x4a6090]
cmp eax, ecx
jl 0x429289
mov eax, 0x413c3d3c
mov cx, word [0x4b03f8]
movsx edx, cx
not edx
add edx, 0x234c3848
mov esi, dword [0x4a7428]
sub edx, esi
cmp eax, edx
jge 0x429284
mov eax, dword [0x4a939c]
add eax, 0x67946843
mov dword [0x4a939c], eax
jmp 0x4292a1
mov ax, word [0x4b269c]
mov cx, ax
and ecx, 0x47c9
mov ax, cx
mov word [0x4b269c], ax
mov eax, esp
mov dword [eax + 4], 0x408
mov dword [eax], 0x2b79
call fcn.00437eb0
mov dword [esp + 0xb8], eax
mov eax, dword [0x4a88ac]
dec eax
mov dword [0x4a88ac], eax
imul eax, eax, 0x5b9ec859
or eax, 0x50e119d4
mov cx, word [0x4ad030]
movsx edx, cx
cmp eax, edx
je 0x4292f3
mov eax, dword [0x498934]
or eax, 0x7e7df7df
mov dword [0x498934], eax
mov eax, 0xdccf8adc
lea ecx, [esp + 0xcc]
mov dword [esp + 0x50], ecx
mov dword [esp + 0x4c], eax
call fcn.004396e0
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x48], eax
call fcn.00439510
mov ecx, dword [esp + 0xb8]
mov edx, esp
mov esi, dword [esp + 0x48]
mov dword [edx + 8], esi
mov dword [edx + 4], eax
mov dword [edx], ecx
call fcn.00443b30
mov dword [esp + 0xb4], eax
mov eax, dword [0x49c6fc]
mov ecx, dword [esp + 0x4c]
cmp ecx, eax
jge 0x429368
mov ax, word [0x4b3fec]
mov cx, ax
xor ecx, 0x776
mov ax, cx
mov word [0x4b3fec], ax
jmp 0x429377
mov eax, dword [0x4a2250]
add eax, 0x89a1558f
mov dword [0x4a2250], eax
mov eax, dword [esp + 0xb8]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0x408
call fcn.0044b770
mov eax, dword [0x49d8bc]
imul eax, eax, 0xbef83dec
mov dword [0x49d8bc], eax
cmp dword [esp + 0xb4], 4
jle 0x4293d1
lea eax, [esp + 0xcc]
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x44], ecx
mov ecx, eax
call fcn.004396e0
mov ecx, dword [esp + 0x44]
cmp ecx, eax
jbe 0x429414
mov dword [0x49f068], 0x280020c
mov dword [esp + 0xb4], 0
mov eax, dword [0x49ffe0]
mov ecx, eax
inc ecx
mov dword [0x49ffe0], ecx
mov dx, word [0x4ab70e]
mov cx, dx
lea eax, [eax + ecx + 0x43ff92e8]
mov dx, ax
mov word [0x4ab70e], dx
jmp 0x429447
mov eax, dword [0x4a59b0]
and eax, 0xecf8d62d
mov dword [0x4a59b0], eax
mov eax, dword [esp + 0xb4]
add eax, 0xfffffffc
mov dword [esp + 0xb4], eax
mov eax, dword [0x49d5e0]
mov ecx, dword [0x4a6f14]
add ecx, eax
mov dword [0x4a6f14], ecx
mov dword [0x4a9e94], 0x261ccc03
mov eax, dword [esp + 0xb4]
imul ecx, dword [esp + 0xc4], 6
add ecx, 0xa
cmp eax, ecx
jge 0x429493
mov ax, word [0x4ac92c]
mov cx, ax
xor ecx, 0xdd6e
mov ax, cx
mov word [0x4ac92c], ax
mov dword [esp + 0xc8], 7
jmp 0x4294d5
mov eax, dword [0x49daa4]
and eax, 0x526be8cc
mov dword [0x49daa4], eax
lea ecx, [esp + 0xcc]
call fcn.00439510
movsd xmm0, qword [eax]
movsd qword [esp + 0x130], xmm0
mov eax, dword [0x4a2430]
xor eax, 0xefef2f6f
mov dword [0x4a2430], eax
mov dword [esp + 0xc8], 5
lea ecx, [esp + 0xcc]
call fcn.00449bc0
mov ecx, dword [esp + 0xc8]
mov eax, ecx
sub eax, 5
mov dword [esp + 0x40], ecx
mov dword [esp + 0x3c], eax
je 0x42952c
jmp 0x429500
mov eax, dword [esp + 0x40]
sub eax, 7
mov dword [esp + 0x38], eax
jne 0x42983e
jmp 0x429516
mov eax, dword [esp + 0xe0]
add eax, 1
mov dword [esp + 0xe0], eax
jmp 0x428c35
mov eax, dword [0x49ccc0]
mov ecx, eax
dec ecx
mov dword [0x49ccc0], ecx
mov ecx, 0x53c6ba34
sub ecx, eax
mov eax, dword [0x498e18]
and ecx, eax
and ecx, 0x85fd031d
mov dword [0x498e18], ecx
mov eax, esp
lea ecx, [esp + 0xfd]
mov dword [eax], ecx
mov dword [eax + 4], 0x13
call fcn.004238a0
mov eax, dword [0x49c3b8]
imul eax, eax, 0xd2a13440
mov ecx, dword [0x49f7d0]
add ecx, eax
mov dword [0x49f7d0], ecx
mov eax, dword [esp + 0x128]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0x600
call fcn.0044b770
mov eax, dword [0x4a8c20]
or eax, 0x11cff8fe
mov dword [0x4a8c20], eax
mov eax, dword [esp + 0x130]
mov ecx, dword [esp + 0x134]
or eax, ecx
mov dword [esp + 0x34], eax
je 0x4297e3
jmp 0x4295c9
mov eax, dword [0x4a6644]
add eax, 0x72400efc
mov dword [0x4a6644], eax
mov eax, dword [0x497624]
mov ecx, esp
mov edx, dword [esp + 0xac]
mov dword [ecx], edx
call eax
sub esp, 4
mov eax, dword [0x49bb80]
xor eax, 0x9322d6f8
mov dword [0x49bb80], eax
movsd xmm0, qword [esp + 0x110]
movsd xmm1, qword [esp + 0x118]
mov eax, dword [esp + 0xac]
movsd qword [eax + 0x28], xmm1
movsd qword [eax + 0x20], xmm0
mov dword [0x4a9234], 0x1b3dba21
mov ebx, dword [esp + 0x130]
mov ecx, dword [esp + 0x134]
add eax, 0x18
mov edx, dword [esp + 0xac]
mov esi, dword [edx + 0x18]
mov edi, dword [edx + 0x1c]
mov dword [esp + 0x30], eax
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x28], ecx
mov dword [esp + 0x24], esi
mov dword [esp + 0x20], edi
jmp 0x429660
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x1c], eax
mov eax, ecx
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
mov esi, dword [esp + 0x30]
lock cmpxchg8b qword [esi]
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], edx
jne 0x429660
jmp 0x429695
mov eax, 0xbffbf6f6
mov ecx, dword [0x4a1378]
mov edx, 0xdc25a688
sub edx, ecx
mov ecx, dword [0x4a0118]
sar ecx, 1
or edx, ecx
mov ecx, dword [0x49edf0]
add ecx, edx
mov dword [0x49edf0], ecx
mov ecx, dword [0x497628]
mov edx, esp
mov esi, dword [esp + 0xac]
mov dword [edx], esi
mov dword [esp + 0x18], eax
call ecx
sub esp, 4
mov eax, dword [0x4a033c]
mov ecx, dword [esp + 0x18]
cmp ecx, eax
jg 0x429712
mov eax, 0x67a49c6d
mov ecx, dword [0x4a79ec]
cmp eax, ecx
je 0x42970d
mov eax, dword [0x49dfb0]
imul eax, eax, 0xb622c0c8
mov dword [0x49dfb0], eax
jmp 0x429733
mov eax, dword [0x499288]
mov ecx, eax
inc ecx
mov dword [0x499288], ecx
xor eax, 0xaf7f0f93
mov ecx, dword [0x4aa660]
or ecx, eax
mov dword [0x4aa660], ecx
mov eax, 0x88e85e97
mov ecx, dword [esp + 0x154]
movsd xmm0, qword [esp + 0x110]
movsd xmm1, qword [esp + 0x118]
movsd qword [ecx + 8], xmm1
movsd qword [ecx], xmm0
mov ecx, dword [0x4a6644]
and ecx, 0xa673b82d
cmp eax, ecx
jg 0x429790
mov eax, dword [0x4a7a04]
add eax, eax
mov cx, word [0x4b14e4]
mov dx, cx
or eax, edx
or eax, 0x83fd
mov cx, ax
mov word [0x4b14e4], cx
mov eax, 0xc05d206
mov dword [esp + 0x14c], 1
mov ecx, dword [0x4aa1c4]
sub eax, ecx
cmp eax, 0xb2ab62ee
je 0x4297de
mov ax, word [0x4b01a0]
mov cx, ax
inc ecx
mov dx, cx
mov word [0x4b01a0], dx
movsx ecx, ax
and ecx, 0xd1932977
mov esi, dword [0x4a0618]
add esi, ecx
mov dword [0x4a0618], esi
jmp 0x4297e3
mov eax, dword [0x4a4540]
mov ecx, eax
inc ecx
mov dword [0x4a4540], ecx
mov ecx, dword [0x49b830]
or ecx, eax
mov dword [0x49b830], ecx
lea ecx, [esp + 0xe8]
call fcn.00450a30
mov eax, dword [0x49f668]
mov ecx, eax
inc ecx
mov dword [0x49f668], ecx
mov ecx, 0x805db48b
sub ecx, eax
mov eax, dword [0x4a5c5c]
imul eax, ecx
mov dword [0x4a5c5c], eax
mov eax, dword [esp + 0x14c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 8
int3