Function at 0x4a1d30
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x110]
cmp eax, dword [ecx + 8]
jbe 0x4a49d0
sub esp, 0x190
xor ebx, ebx
mov dword [esp + 0x1ac], ebx
mov dword [esp + 0x1b0], ebx
mov dword [esp + 0x1b4], ebx
mov dword [esp + 0x1b8], ebx
xor ebx, ebx
mov dword [esp + 0x1bc], ebx
mov dword [esp + 0x1c0], ebx
mov ebx, dword [esp + 0x194]
mov dword [esp + 0x150], ebx
mov ebx, dword [esp + 0x198]
mov dword [esp + 0x154], ebx
mov ebx, dword [esp + 0x19c]
mov dword [esp + 0x120], ebx
mov ebx, dword [esp + 0x1a0]
mov dword [esp + 0x124], ebx
xor ebx, ebx
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xdc], ebx
mov byte [esp + 0x33], 0
mov byte [esp + 0x32], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x60], 1
mov dword [esp + 0x78], 1
mov dword [esp + 0x74], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x54], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x34], 0xffffffff
xor ebx, ebx
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], ebx
xor ebx, ebx
mov dword [esp + 0x118], ebx
mov dword [esp + 0x11c], ebx
mov ebx, dword [esp + 0x194]
mov dword [esp], ebx
mov ebx, dword [esp + 0x198]
mov dword [esp + 4], ebx
call fcn.0049d5b0
mov eax, dword [esp + 0x198]
mov esi, dword [esp + 8]
mov ebp, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x3c], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0xa0], ebx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xa4], ecx
mov edi, eax
sub eax, ecx
cmp eax, edi
ja 0x4a49c9
cmp ebp, eax
ja 0x4a49c9
mov edx, eax
sub edx, ebp
mov eax, dword [esp + 0x194]
cmp edx, 0
je 0x4a1eab
add eax, ebp
mov dword [esp + 0xac], edx
mov dword [esp + 0xa8], eax
mov ebx, dword [esp + 0x19c]
mov dword [esp], ebx
mov ebx, dword [esp + 0x1a0]
mov dword [esp + 4], ebx
mov dword [esp + 0xe0], esi
mov dword [esp + 8], esi
mov dword [esp + 0xe4], ebp
mov dword [esp + 0xc], ebp
call fcn.004a1ac0
mov edi, dword [esp + 0x3c]
mov esi, dword [esp + 0x10]
mov dword [esp + 0x19c], esi
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x1a0], ecx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x11c], ebx
mov ebx, dword [esp + 0x118]
cmp ebx, 0
je 0x4a207a
mov dword [esp], 0x5d7e80
call fcn.0040dd70
mov eax, dword [esp + 4]
mov dword [esp + 0x8c], eax
mov ebp, dword [esp + 0x154]
mov dword [eax + 4], ebp
mov ebp, dword [esp + 0x150]
cmp byte [0x6cfdd8], 0
jne 0x4a2062
mov dword [eax], ebp
mov ebp, dword [esp + 0x124]
mov dword [eax + 0xc], ebp
mov ebp, dword [esp + 0x120]
cmp byte [0x6cfdd8], 0
jne 0x4a2047
mov dword [eax + 8], ebp
mov ebp, dword [esp + 0xe4]
mov dword [eax + 0x14], ebp
mov ebp, dword [esp + 0xe0]
cmp byte [0x6cfdd8], 0
jne 0x4a202c
mov dword [eax + 0x10], ebp
mov ebp, dword [esp + 0x1a0]
mov dword [eax + 0x1c], ebp
mov ebp, dword [esp + 0x19c]
cmp byte [0x6cfdd8], 0
jne 0x4a2014
mov dword [eax + 0x18], ebp
xor ebp, ebp
mov dword [eax + 0x20], ebp
mov dword [eax + 0x24], ebp
mov ebx, dword [0x612780]
mov dword [esp + 0x1ac], ebx
mov ebx, dword [0x612784]
mov dword [esp + 0x1b0], ebx
mov ebx, dword [0x612788]
mov dword [esp + 0x1b4], ebx
mov ebx, dword [0x61278c]
mov dword [esp + 0x1b8], ebx
mov dword [esp + 0x1c0], eax
mov dword [esp + 0x1bc], 0x6a6d90
add esp, 0x190
ret
lea esi, [eax + 0x18]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040e740
mov eax, dword [esp + 0x8c]
jmp 0x4a1fbf
lea esi, [eax + 0x10]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040e740
mov eax, dword [esp + 0x8c]
jmp 0x4a1fa2
lea esi, [eax + 8]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040e740
mov eax, dword [esp + 0x8c]
jmp 0x4a1f81
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.0040e740
mov eax, dword [esp + 0x8c]
jmp 0x4a1f60
cmp edi, 0
jne 0x4a2e5f
cmp ecx, 0
je 0x4a2228
mov dword [esp], 0x5d7e80
call fcn.0040dd70
mov eax, dword [esp + 4]
mov dword [esp + 0x8c], eax
mov ebp, dword [esp + 0x154]
mov dword [eax + 4], ebp
mov ebp, dword [esp + 0x150]
cmp byte [0x6cfdd8], 0
jne 0x4a2210
mov dword [eax], ebp
mov ebp, dword [esp + 0x124]
mov dword [eax + 0xc], ebp
mov ebp, dword [esp + 0x120]
cmp byte [0x6cfdd8], 0
jne 0x4a21f5
mov dword [eax + 8], ebp
xor ebp, ebp
mov dword [eax + 0x10], ebp
mov dword [eax + 0x14], ebp
mov ebp, dword [esp + 0x1a0]
mov dword [eax + 0x1c], ebp
mov ebp, dword [esp + 0x19c]
cmp byte [0x6cfdd8], 0
jne 0x4a21e1
mov dword [eax + 0x18], ebp
mov dword [esp], 0
mov ebx, 0x5f0bb7
mov dword [esp + 4], ebx
mov dword [esp + 8], 0xe
mov ebx, dword [esp + 0x19c]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x1a0]
mov dword [esp + 0x10], ebx
call fcn.0043f280
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x8c]
cmp ebx, 0
je 0x4a21da
mov dword [esp + 0x14c], eax
mov dword [ebx + 0x24], eax
mov dword [esp + 0x148], ecx
cmp byte [0x6cfdd8], 0
jne 0x4a21c9
mov dword [ebx + 0x20], ecx
mov eax, dword [esp + 0x8c]
mov ebx, dword [0x612790]
mov dword [esp + 0x1ac], ebx
mov ebx, dword [0x612794]
mov dword [esp + 0x1b0], ebx
mov ebx, dword [0x612798]
mov dword [esp + 0x1b4], ebx
mov ebx, dword [0x61279c]
mov dword [esp + 0x1b8], ebx
mov dword [esp + 0x1c0], eax
mov dword [esp + 0x1bc], 0x6a6d90
add esp, 0x190
ret
lea esi, [ebx + 0x20]
mov dword [esp], esi
mov dword [esp + 4], ecx
call fcn.0040e740
jmp 0x4a2175
mov dword [ebx], eax
jmp 0x4a2158
lea esi, [eax + 0x18]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040e740
jmp 0x4a210d
lea esi, [eax + 8]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040e740
mov eax, dword [esp + 0x8c]
jmp 0x4a20e4
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.0040e740
mov eax, dword [esp + 0x8c]
jmp 0x4a20c3
cmp byte [esp + 0x32], 0
je 0x4a2e3a
mov ebx, dword [esp + 0x74]
cmp ebx, 0xc
jge 0x4a2e3a
mov ebx, dword [esp + 0x74]
add ebx, 0xc
mov dword [esp + 0x74], ebx
mov edi, dword [esp + 0x60]
mov ecx, dword [esp + 0x38]
cmp edi, 2
jne 0x4a2df0
mov ebp, ecx
sar ebp, 0x1f
and ebp, 3
mov ebx, ecx
add ebx, ebp
and ebx, 3
sub ebx, ebp
cmp ebx, 0
jne 0x4a22d7
mov dword [esp + 0x7c], ecx
mov eax, 0x51eb851f
mov ebx, edx
imul dword [esp + 0x7c]
mov dword [esp + 0x7c], edx
mov edx, ebx
mov ebx, dword [esp + 0x7c]
sar ebx, 5
mov ebp, ecx
sar ebp, 0x1f
sub ebx, ebp
imul ebx, ebx, 0x64
mov ebp, ecx
sub ebp, ebx
cmp ebp, 0
jne 0x4a2e30
mov dword [esp + 0x7c], ecx
mov eax, 0x51eb851f
imul dword [esp + 0x7c]
mov dword [esp + 0x7c], edx
mov ebx, dword [esp + 0x7c]
sar ebx, 7
mov ebp, ecx
sar ebp, 0x1f
sub ebx, ebp
imul ebx, ebx, 0x190
mov ebp, ecx
sub ebp, ebx
cmp ebp, 0
je 0x4a2e30
xor eax, eax
cmp al, 0
je 0x4a2df0
mov eax, 0x1d
mov ebx, dword [esp + 0x78]
cmp eax, ebx
jge 0x4a2417
mov dword [esp], 0x5d7e80
call fcn.0040dd70
mov eax, dword [esp + 4]
mov dword [esp + 0x8c], eax
mov ebp, dword [esp + 0x154]
mov dword [eax + 4], ebp
mov ebp, dword [esp + 0x150]
cmp byte [0x6cfdd8], 0
jne 0x4a23ff
mov dword [eax], ebp
mov ebp, dword [esp + 0x124]
mov dword [eax + 0xc], ebp
mov ebp, dword [esp + 0x120]
cmp byte [0x6cfdd8], 0
jne 0x4a23e4
mov dword [eax + 8], ebp
xor ebp, ebp
mov dword [eax + 0x10], ebp
mov dword [eax + 0x14], ebp
mov ebp, dword [esp + 0x1a0]
mov dword [eax + 0x1c], ebp
mov ebp, dword [esp + 0x19c]
cmp byte [0x6cfdd8], 0
jne 0x4a23cc
mov dword [eax + 0x18], ebp
mov ebp, 0x5f1e98
mov dword [eax + 0x20], ebp
mov dword [eax + 0x24], 0x12
mov ebx, dword [0x612750]
mov dword [esp + 0x1ac], ebx
mov ebx, dword [0x612754]
mov dword [esp + 0x1b0], ebx
mov ebx, dword [0x612758]
mov dword [esp + 0x1b4], ebx
mov ebx, dword [0x61275c]
mov dword [esp + 0x1b8], ebx
mov dword [esp + 0x1c0], eax
mov dword [esp + 0x1bc], 0x6a6d90
add esp, 0x190
ret
lea esi, [eax + 0x18]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040e740
mov eax, dword [esp + 0x8c]
jmp 0x4a2370
lea esi, [eax + 8]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040e740
mov eax, dword [esp + 0x8c]
jmp 0x4a234b
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.0040e740
mov eax, dword [esp + 0x8c]
jmp 0x4a232a
mov ebx, dword [esp + 0x80]
xor ebp, ebp
cmp ebx, ebp
je 0x4a24b2
mov ebx, dword [esp + 0x38]
mov dword [esp], ebx
mov ebx, dword [esp + 0x60]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x78]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x74]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x68]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x54]
mov dword [esp + 0x18], ebx
mov ebx, dword [esp + 0x80]
mov dword [esp + 0x1c], ebx
call fcn.004a6fb0
mov ebp, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x1ac], ebp
mov dword [esp + 0x1b0], edx
mov dword [esp + 0x1b4], ecx
mov dword [esp + 0x1b8], eax
xor ebx, ebx
mov dword [esp + 0x1bc], ebx
mov dword [esp + 0x1c0], ebx
add esp, 0x190
ret
mov ebx, dword [esp + 0x34]
cmp ebx, 0xffffffff
je 0x4a28c2
mov ebx, dword [esp + 0x38]
mov dword [esp], ebx
mov ebx, dword [esp + 0x60]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x78]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x74]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x68]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x54]
mov dword [esp + 0x18], ebx
mov ebx, dword [0x6ba830]
mov dword [esp + 0x1c], ebx
call fcn.004a6fb0
mov edx, dword [esp + 0x20]
mov ebp, dword [esp + 0x24]
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x188], ebx
mov ebx, dword [esp + 0x2c]
mov dword [esp + 0x18c], ebx
mov esi, edx
mov eax, dword [esp + 0x34]
cdq
mov ebx, eax
mov ecx, edx
mov eax, esi
mov edx, ebp
sub eax, ebx
sbb edx, ecx
mov ebx, dword [esp + 0x1a8]
mov dword [esp], ebx
mov dword [esp + 0x180], eax
mov dword [esp + 0x184], edx
add eax, 0x886e0900
adc edx, 0xfffffff1
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.004a7980
mov esi, dword [esp + 0x9c]
mov edi, dword [esp + 0xc]
mov dword [esp + 0xf0], edi
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xf4], ecx
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x34]
cmp ebx, ebp
jne 0x4a2614
cmp esi, 0
je 0x4a25c5
cmp ecx, esi
jne 0x4a2614
mov dword [esp], edi
mov dword [esp + 4], ecx
mov ebp, dword [esp + 0x98]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
call fcn.00451ee0
mov esi, dword [esp + 0x9c]
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x4a2614
mov eax, dword [esp + 0x1a8]
mov ebx, dword [esp + 0x180]
mov dword [esp + 0x1ac], ebx
mov ebx, dword [esp + 0x184]
mov dword [esp + 0x1b0], ebx
mov ebx, dword [esp + 0x188]
mov dword [esp + 0x1b4], ebx
mov dword [esp + 0x1b8], eax
xor ebx, ebx
mov dword [esp + 0x1bc], ebx
mov dword [esp + 0x1c0], ebx
add esp, 0x190
ret
mov ebx, dword [esp + 0x98]
mov dword [esp + 0x100], ebx
mov dword [esp + 0x104], esi
mov ebx, dword [esp + 0x34]
mov dword [esp + 0x48], ebx
mov dword [esp], 0x5da540
call fcn.0040dd70
mov ecx, dword [esp + 4]
mov edi, ecx
cmp ecx, 0
je 0x4a28bb
xor eax, eax
call fcn.004522a3
mov dword [esp + 0x90], ecx
mov ebp, dword [esp + 0x104]
mov dword [ecx + 4], ebp
mov ebp, dword [esp + 0x100]
cmp byte [0x6cfdd8], 0
jne 0x4a28aa
mov dword [ecx], ebp
mov dword [esp], 0x5b6600
call fcn.0040dd70
mov eax, dword [esp + 4]
mov ebp, dword [0x612760]
mov dword [eax], ebp
mov ebp, dword [0x612764]
mov dword [eax + 4], ebp
mov ebp, dword [0x612768]
mov dword [eax + 8], ebp
movzx ebp, byte [0x61276c]
xchg ebp, ebx
mov byte [eax + 0xc], bl
xchg ebp, ebx
mov dword [esp + 0x94], eax
mov ebp, dword [esp + 0x104]
mov dword [eax + 4], ebp
mov ebp, dword [esp + 0x100]
cmp byte [0x6cfdd8], 0
jne 0x4a2892
mov dword [eax], ebp
mov ecx, dword [esp + 0x48]
mov dword [eax + 8], ecx
mov edx, 1
mov ecx, 1
mov ebx, dword [esp + 0x90]
cmp ebx, 0
je 0x4a288b
mov dword [esp + 0x168], edx
mov dword [ebx + 0xc], edx
mov dword [esp + 0x16c], ecx
mov dword [ebx + 0x10], ecx
mov dword [esp + 0x164], eax
cmp byte [0x6cfdd8], 0
jne 0x4a2877
mov dword [ebx + 8], eax
mov dword [esp], 0x5b6640
call fcn.0040dd70
mov ecx, dword [esp + 0x90]
mov eax, dword [esp + 4]
mov ebp, dword [0x6124d0]
mov dword [eax], ebp
mov ebp, dword [0x6124d4]
mov dword [eax + 4], ebp
movzx ebp, byte [0x6124d8]
xchg ebp, ebx
mov byte [eax + 8], bl
xchg ebp, ebx
movzx ebp, byte [0x6124d9]
xchg ebp, ebx
mov byte [eax + 9], bl
xchg ebp, ebx
movzx ebp, byte [0x6124da]
xchg ebp, ebx
mov byte [eax + 0xa], bl
xchg ebp, ebx
mov esi, 1
mov edx, 1
cmp ecx, 0
je 0x4a2870
mov dword [esp + 0x15c], esi
mov dword [ecx + 0x18], esi
mov dword [esp + 0x160], edx
mov dword [ecx + 0x1c], edx
mov dword [esp + 0x158], eax
cmp byte [0x6cfdd8], 0
jne 0x4a2855
mov dword [ecx + 0x14], eax
xor ebp, ebp
mov edx, 0x80000000
mov dword [ecx + 0x20], ebp
mov dword [ecx + 0x24], edx
mov ebp, 0xffffffff
mov edx, 0x7fffffff
mov dword [ecx + 0x28], ebp
mov dword [ecx + 0x2c], edx
cmp dword [ecx + 0xc], 0
jbe 0x4a284e
mov ebp, dword [ecx + 8]
mov dword [esp + 0x84], ecx
cmp byte [0x6cfdd8], 0
jne 0x4a2836
mov dword [ecx + 0x30], ebp
mov ebx, dword [esp + 0x180]
mov dword [esp + 0x1ac], ebx
mov ebx, dword [esp + 0x184]
mov dword [esp + 0x1b0], ebx
mov ebx, dword [esp + 0x188]
mov dword [esp + 0x1b4], ebx
mov dword [esp + 0x1b8], ecx
xor ebx, ebx
mov dword [esp + 0x1bc], ebx
mov dword [esp + 0x1c0], ebx
add esp, 0x190
ret
lea esi, [ecx + 0x30]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040e740
mov ecx, dword [esp + 0x84]
jmp 0x4a27ee
call fcn.00427bf0
ud2
lea esi, [ecx + 0x14]
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.0040e740
mov ecx, dword [esp + 0x90]
jmp 0x4a27b5
mov dword [ecx], eax
jmp 0x4a278a
lea esi, [ebx + 8]
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.0040e740
jmp 0x4a2725
mov dword [ebx], eax
jmp 0x4a26fa
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.0040e740
mov eax, dword [esp + 0x94]
jmp 0x4a26d9
mov dword [esp], ecx
mov dword [esp + 4], ebp
call fcn.0040e740
jmp 0x4a267a
mov dword [ecx], eax
jmp 0x4a264c
mov ebx, dword [esp + 0x9c]
cmp ebx, 0
je 0x4a2d66
mov ebx, dword [esp + 0x38]
mov dword [esp], ebx
mov ebx, dword [esp + 0x60]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x78]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x74]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x68]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x54]
mov dword [esp + 0x18], ebx
mov ebx, dword [0x6ba830]
mov dword [esp + 0x1c], ebx
call fcn.004a6fb0
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x178], ebx
mov ebx, dword [esp + 0x2c]
mov dword [esp + 0x17c], ebx
mov ebx, dword [esp + 0x1a8]
mov dword [esp], ebx
mov ebx, dword [esp + 0x98]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x9c]
mov dword [esp + 8], ebx
mov dword [esp + 0x170], eax
mov dword [esp + 0x174], edx
add eax, 0x886e0900
adc edx, 0xfffffff1
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
call fcn.004a7e80
mov ebp, dword [esp + 0x9c]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x4c], ecx
movzx ebx, byte [esp + 0x19]
cmp bl, 0
je 0x4a29f4
mov esi, dword [esp + 0x170]
mov ebp, dword [esp + 0x174]
mov eax, ecx
cdq
mov ebx, eax
mov ecx, edx
mov eax, esi
mov edx, ebp
sub eax, ebx
sbb edx, ecx
mov ecx, edx
mov edx, eax
mov eax, dword [esp + 0x1a8]
mov dword [esp + 0x1ac], edx
mov dword [esp + 0x1b0], ecx
mov ebx, dword [esp + 0x178]
mov dword [esp + 0x1b4], ebx
mov dword [esp + 0x1b8], eax
xor ebx, ebx
mov dword [esp + 0x1bc], ebx
mov dword [esp + 0x1c0], ebx
add esp, 0x190
ret
cmp ebp, 3
jle 0x4a2d5a
cmp ebp, 3
jb 0x4a2d5f
mov esi, dword [esp + 0x98]
mov eax, 3
cmp eax, 3
jne 0x4a2d5a
mov dword [esp + 0x128], esi
mov dword [esp], esi
mov dword [esp + 0x12c], eax
mov dword [esp + 4], eax
mov ebp, 0x5ee6b5
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 3
call fcn.00451ee0
mov ebp, dword [esp + 0x9c]
mov ecx, dword [esp + 0x4c]
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x4a2d5a
cmp ebp, 3
jb 0x4a2d53
mov ecx, ebp
sub ecx, 3
mov eax, dword [esp + 0x98]
cmp ecx, 0
je 0x4a2a7c
add eax, 3
mov dword [esp + 0x140], eax
mov dword [esp], eax
mov dword [esp + 0x144], ecx
mov dword [esp + 4], ecx
call fcn.0049f1a0
mov ebp, dword [esp + 0x9c]
mov ecx, dword [esp + 8]
imul ecx, ecx, 0xe10
mov ebx, dword [esp + 0x98]
mov dword [esp + 0xf8], ebx
mov dword [esp + 0xfc], ebp
mov dword [esp + 0x50], ecx
mov dword [esp], 0x5da540
call fcn.0040dd70
mov ecx, dword [esp + 4]
mov edi, ecx
cmp ecx, 0
je 0x4a2d4c
xor eax, eax
call fcn.004522a3
mov dword [esp + 0x90], ecx
mov ebp, dword [esp + 0xfc]
mov dword [ecx + 4], ebp
mov ebp, dword [esp + 0xf8]
cmp byte [0x6cfdd8], 0
jne 0x4a2d3b
mov dword [ecx], ebp
mov dword [esp], 0x5b6600
call fcn.0040dd70
mov eax, dword [esp + 4]
mov ebp, dword [0x612770]
mov dword [eax], ebp
mov ebp, dword [0x612774]
mov dword [eax + 4], ebp
mov ebp, dword [0x612778]
mov dword [eax + 8], ebp
movzx ebp, byte [0x61277c]
xchg ebp, ebx
mov byte [eax + 0xc], bl
xchg ebp, ebx
mov dword [esp + 0x94], eax
mov ebp, dword [esp + 0xfc]
mov dword [eax + 4], ebp
mov ebp, dword [esp + 0xf8]
cmp byte [0x6cfdd8], 0
jne 0x4a2d23
mov dword [eax], ebp
mov ecx, dword [esp + 0x50]
mov dword [eax + 8], ecx
mov edx, 1
mov ecx, 1
mov ebx, dword [esp + 0x90]
cmp ebx, 0
je 0x4a2d1c
mov dword [esp + 0x168], edx
mov dword [ebx + 0xc], edx
mov dword [esp + 0x16c], ecx
mov dword [ebx + 0x10], ecx
mov dword [esp + 0x164], eax
cmp byte [0x6cfdd8], 0
jne 0x4a2d08
mov dword [ebx + 8], eax
mov dword [esp], 0x5b6640
call fcn.0040dd70
mov ecx, dword [esp + 0x90]
mov eax, dword [esp + 4]
mov ebp, dword [0x6124e0]
mov dword [eax], ebp
mov ebp, dword [0x6124e4]
mov dword [eax + 4], ebp
movzx ebp, byte [0x6124e8]
xchg ebp, ebx
mov byte [eax + 8], bl
xchg ebp, ebx
movzx ebp, byte [0x6124e9]
xchg ebp, ebx
mov byte [eax + 9], bl
xchg ebp, ebx
movzx ebp, byte [0x6124ea]
xchg ebp, ebx
mov byte [eax + 0xa], bl
xchg ebp, ebx
mov esi, 1
mov edx, 1
cmp ecx, 0
je 0x4a2d01
mov dword [esp + 0x15c], esi
mov dword [ecx + 0x18], esi
mov dword [esp + 0x160], edx
mov dword [ecx + 0x1c], edx
mov dword [esp + 0x158], eax
cmp byte [0x6cfdd8], 0
jne 0x4a2ce6
mov dword [ecx + 0x14], eax
xor ebp, ebp
mov edx, 0x80000000
mov dword [ecx + 0x20], ebp
mov dword [ecx + 0x24], edx
mov ebp, 0xffffffff
mov edx, 0x7fffffff
mov dword [ecx + 0x28], ebp
mov dword [ecx + 0x2c], edx
mov eax, ecx
cmp dword [ecx + 0xc], 0
jbe 0x4a2cdf
mov ebp, dword [ecx + 8]
mov dword [esp + 0x88], ecx
cmp byte [0x6cfdd8], 0
jne 0x4a2cc7
mov dword [ecx + 0x30], ebp
mov ebx, dword [esp + 0x170]
mov dword [esp + 0x1ac], ebx
mov ebx, dword [esp + 0x174]
mov dword [esp + 0x1b0], ebx
mov ebx, dword [esp + 0x178]
mov dword [esp + 0x1b4], ebx
mov dword [esp + 0x1b8], eax
xor ebx, ebx
mov dword [esp + 0x1bc], ebx
mov dword [esp + 0x1c0], ebx
add esp, 0x190
ret
lea esi, [ecx + 0x30]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040e740
mov eax, dword [esp + 0x88]
jmp 0x4a2c7f
call fcn.00427bf0
ud2
lea esi, [ecx + 0x14]
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.0040e740
mov ecx, dword [esp + 0x90]
jmp 0x4a2c44
mov dword [ecx], eax
jmp 0x4a2c19
lea esi, [ebx + 8]
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.0040e740
jmp 0x4a2bb4
mov dword [ebx], eax
jmp 0x4a2b89
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.0040e740
mov eax, dword [esp + 0x94]
jmp 0x4a2b68
mov dword [esp], ecx
mov dword [esp + 4], ebp
call fcn.0040e740
jmp 0x4a2b09
mov dword [ecx], eax
jmp 0x4a2adb
call fcn.00427c60
ud2
jmp 0x4a2aa7
call fcn.00427c60
ud2
mov ebx, dword [esp + 0x38]
mov dword [esp], ebx
mov ebx, dword [esp + 0x60]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x78]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x74]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x68]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x54]
mov dword [esp + 0x18], ebx
mov ebx, dword [esp + 0x1a4]
mov dword [esp + 0x1c], ebx
call fcn.004a6fb0
mov ebp, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x1ac], ebp
mov dword [esp + 0x1b0], edx
mov dword [esp + 0x1b4], ecx
mov dword [esp + 0x1b8], eax
xor ebx, ebx
mov dword [esp + 0x1bc], ebx
mov dword [esp + 0x1c0], ebx
add esp, 0x190
ret
mov ebx, edi
mov ebp, 0x6a9a40
cmp edi, 0xd
jae 0x4a2e29
shl ebx, 2
add ebp, ebx
mov ecx, dword [ebp]
mov ebx, edi
dec ebx
mov ebp, 0x6a9a40
cmp ebx, 0xd
jae 0x4a2e22
shl ebx, 2
add ebp, ebx
mov ebx, dword [ebp]
mov eax, ecx
sub eax, ebx
jmp 0x4a22e7
call fcn.00427bf0
ud2
call fcn.00427bf0
ud2
mov eax, 1
jmp 0x4a22d9
cmp byte [esp + 0x33], 0
je 0x4a224b
mov ebx, dword [esp + 0x74]
cmp ebx, 0xc
jne 0x4a224b
mov dword [esp + 0x74], 0
jmp 0x4a224b
mov ebx, dword [esp + 0xa0]
mov dword [esp + 0x194], ebx
mov ebx, dword [esp + 0xa4]
mov dword [esp + 0x198], ebx
xor ebx, ebx
mov dword [esp + 0xe8], ebx
mov dword [esp + 0xec], ebx
mov eax, edi
and eax, 0xffff
cmp eax, 0x103
jg 0x4a3f98
cmp eax, 0x1c
jg 0x4a3bf9
cmp eax, 0x18
jg 0x4a3bc6
cmp eax, 0x16
jg 0x4a3baf
cmp eax, 0x15
jne 0x4a335b
cmp ecx, 3
jl 0x4a32b2
cmp ecx, 3
jb 0x4a3354
mov eax, 3
cmp eax, 3
jne 0x4a32b2
mov dword [esp + 0x128], esi
mov dword [esp], esi
mov dword [esp + 0x12c], eax
mov dword [esp + 4], eax
mov ebp, 0x5ee75a
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 3
call fcn.00451ee0
mov esi, dword [esp + 0x19c]
mov ecx, dword [esp + 0x1a0]
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x4a32b2
mov ebx, dword [0x6ba830]
mov dword [esp + 0x80], ebx
cmp ecx, 3
jb 0x4a32ab
sub ecx, 3
mov eax, esi
cmp ecx, 0
je 0x4a2f4b
add eax, 3
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0x19c], eax
mov ebx, dword [esp + 0xdc]
cmp ebx, 0
je 0x4a314a
mov dword [esp], 0x5d7e80
call fcn.0040dd70
mov eax, dword [esp + 4]
mov dword [esp + 0x8c], eax
mov ebp, dword [esp + 0x154]
mov dword [eax + 4], ebp
mov ebp, dword [esp + 0x150]
cmp byte [0x6cfdd8], 0
jne 0x4a3132
mov dword [eax], ebp
mov ebp, dword [esp + 0x124]
mov dword [eax + 0xc], ebp
mov ebp, dword [esp + 0x120]
cmp byte [0x6cfdd8], 0
jne 0x4a3117
mov dword [eax + 8], ebp
mov ebp, dword [esp + 0xac]
mov dword [eax + 0x14], ebp
mov ebp, dword [esp + 0xa8]
cmp byte [0x6cfdd8], 0
jne 0x4a30fc
mov dword [eax + 0x10], ebp
mov ebp, dword [esp + 0x1a0]
mov dword [eax + 0x1c], ebp
mov ebp, dword [esp + 0x19c]
cmp byte [0x6cfdd8], 0
jne 0x4a30e8
mov dword [eax + 0x18], ebp
mov dword [esp], 0
mov ebx, 0x5ee55a
mov dword [esp + 4], ebx
mov dword [esp + 8], 2
mov ebx, dword [esp + 0xd8]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0xdc]
mov dword [esp + 0x10], ebx
mov ebx, 0x5f076b
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], 0xd
call fcn.0043f300
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov ebx, dword [esp + 0x8c]
cmp ebx, 0
je 0x4a30e1
mov dword [esp + 0x144], ecx
mov dword [ebx + 0x24], ecx
mov dword [esp + 0x140], eax
cmp byte [0x6cfdd8], 0
jne 0x4a30d0
mov dword [ebx + 0x20], eax
mov eax, dword [esp + 0x8c]
mov ebx, dword [0x612730]
mov dword [esp + 0x1ac], ebx
mov ebx, dword [0x612734]
mov dword [esp + 0x1b0], ebx
mov ebx, dword [0x612738]
mov dword [esp + 0x1b4], ebx
mov ebx, dword [0x61273c]
mov dword [esp + 0x1b8], ebx
mov dword [esp + 0x1c0], eax
mov dword [esp + 0x1bc], 0x6a6d90
add esp, 0x190
ret
lea esi, [ebx + 0x20]
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.0040e740
jmp 0x4a307c
mov dword [ebx], eax
jmp 0x4a305f
lea esi, [eax + 0x18]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040e740
jmp 0x4a3003
lea esi, [eax + 0x10]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040e740
mov eax, dword [esp + 0x8c]
jmp 0x4a2fe2
lea esi, [eax + 8]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040e740
mov eax, dword [esp + 0x8c]
jmp 0x4a2fc1
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.0040e740
mov eax, dword [esp + 0x8c]
jmp 0x4a2fa0
mov ebx, dword [esp + 0x118]
cmp ebx, 0
je 0x4a1e2e
mov dword [esp], 0x5d7e80
call fcn.0040dd70
mov eax, dword [esp + 4]
mov dword [esp + 0x8c], eax
mov ebp, dword [esp + 0x154]
mov dword [eax + 4], ebp
mov ebp, dword [esp + 0x150]
cmp byte [0x6cfdd8], 0
jne 0x4a3293
mov dword [eax], ebp
mov ebp, dword [esp + 0x124]
mov dword [eax + 0xc], ebp
mov ebp, dword [esp + 0x120]
cmp byte [0x6cfdd8], 0
jne 0x4a3278
mov dword [eax + 8], ebp
mov ebp, dword [esp + 0xac]
mov dword [eax + 0x14], ebp
mov ebp, dword [esp + 0xa8]
cmp byte [0x6cfdd8], 0
jne 0x4a325d
mov dword [eax + 0x10], ebp
mov ebp, dword [esp + 0x1a0]
mov dword [eax + 0x1c], ebp
mov ebp, dword [esp + 0x19c]
cmp byte [0x6cfdd8], 0
jne 0x4a3245
mov dword [eax + 0x18], ebp
xor ebp, ebp
mov dword [eax + 0x20], ebp
mov dword [eax + 0x24], ebp
mov ebx, dword [0x612740]
mov dword [esp + 0x1ac], ebx
mov ebx, dword [0x612744]
mov dword [esp + 0x1b0], ebx
mov ebx, dword [0x612748]
mov dword [esp + 0x1b4], ebx
mov ebx, dword [0x61274c]
mov dword [esp + 0x1b8], ebx
mov dword [esp + 0x1c0], eax
mov dword [esp + 0x1bc], 0x6a6d90
add esp, 0x190
ret
lea esi, [eax + 0x18]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040e740
mov eax, dword [esp + 0x8c]
jmp 0x4a31f0
lea esi, [eax + 0x10]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040e740
mov eax, dword [esp + 0x8c]
jmp 0x4a31d3
lea esi, [eax + 8]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040e740
mov eax, dword [esp + 0x8c]
jmp 0x4a31b2
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.0040e740
mov eax, dword [esp + 0x8c]
jmp 0x4a3191
call fcn.00427c60
ud2
mov dword [esp], esi
mov dword [esp + 4], ecx
call fcn.004a49e0
mov edi, dword [esp + 0x1a0]
mov eax, dword [esp + 8]
movzx ebx, byte [esp + 0xc]
cmp bl, 0
jne 0x4a32f2
mov ebx, dword [0x6be780]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6be784]
mov dword [esp + 0x11c], ebx
jmp 0x4a2f59
cmp eax, edi
ja 0x4a334d
mov ebp, dword [esp + 0x19c]
mov esi, eax
mov ecx, eax
cmp eax, edi
ja 0x4a3346
mov edx, edi
sub edx, eax
mov eax, dword [esp + 0x19c]
cmp edx, 0
je 0x4a3317
add eax, ecx
mov dword [esp + 0x98], ebp
mov dword [esp + 0x9c], esi
mov dword [esp + 0x148], eax
mov dword [esp + 0x19c], eax
mov dword [esp + 0x14c], edx
mov dword [esp + 0x1a0], edx
jmp 0x4a2f59
call fcn.00427c60
ud2
call fcn.00427c60
ud2
call fcn.00427c60
ud2
cmp eax, 0x16
jne 0x4a2f59
cmp edi, 0x16
je 0x4a3b57
cmp edi, 0x18
je 0x4a3b57
cmp edi, 0x19
je 0x4a3b57
xor ebx, ebx
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xb4], ebx
xor ebx, ebx
mov dword [esp + 0x110], ebx
mov dword [esp + 0x114], ebx
xor ebx, ebx
mov dword [esp + 0x108], ebx
mov dword [esp + 0x10c], ebx
xor ebx, ebx
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xbc], ebx
cmp edi, 0x19
je 0x4a3a08
cmp edi, 0x1e
je 0x4a3a08
cmp edi, 0x1d
je 0x4a3921
cmp edi, 0x18
je 0x4a3921
cmp edi, 0x1a
je 0x4a3779
cmp edi, 0x1f
je 0x4a3779
cmp edi, 0x17
je 0x4a3649
cmp edi, 0x1c
je 0x4a3649
cmp ecx, 5
jge 0x4a342b
mov ebx, dword [0x6be780]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6be784]
mov dword [esp + 0x11c], ebx
jmp 0x4a2f59
cmp ecx, 1
jb 0x4a3642
mov dword [esp + 0x14c], 1
mov dword [esp + 0x148], esi
cmp ecx, 3
jb 0x4a363b
mov ebx, esi
inc ebx
mov dword [esp + 0x144], 2
mov dword [esp + 0x140], ebx
cmp ecx, 5
jb 0x4a3634
mov edx, esi
add edx, 3
mov ebp, 2
cmp ecx, 5
jb 0x4a362d
sub ecx, 5
mov eax, esi
cmp ecx, 0
je 0x4a348d
add eax, 5
mov edi, ecx
mov esi, eax
mov ebx, dword [esp + 0x148]
mov dword [esp + 0xb0], ebx
mov ebx, dword [esp + 0x14c]
mov dword [esp + 0xb4], ebx
mov ecx, dword [esp + 0x140]
mov eax, dword [esp + 0x144]
mov dword [esp + 0x108], edx
mov dword [esp + 0x10c], ebp
mov ebx, 0x5ee54e
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xbc], 2
mov dword [esp + 0x19c], esi
mov dword [esp + 0x1a0], edi
mov dword [esp + 0x64], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x110], ecx
mov dword [esp], ecx
mov dword [esp + 0x114], eax
mov dword [esp + 4], eax
call fcn.0049f1a0
mov ebx, dword [esp + 8]
mov dword [esp + 0x70], ebx
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x11c], ebx
mov ebx, dword [esp + 0x118]
cmp ebx, 0
jne 0x4a357a
mov ebx, dword [esp + 0x108]
mov dword [esp], ebx
mov ebx, dword [esp + 0x10c]
mov dword [esp + 4], ebx
call fcn.0049f1a0
mov ebx, dword [esp + 8]
mov dword [esp + 0x64], ebx
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x11c], ebx
mov ebx, dword [esp + 0x118]
cmp ebx, 0
jne 0x4a35be
mov ebx, dword [esp + 0xb8]
mov dword [esp], ebx
mov ebx, dword [esp + 0xbc]
mov dword [esp + 4], ebx
call fcn.0049f1a0
mov ebx, dword [esp + 8]
mov dword [esp + 0x40], ebx
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x11c], ebx
mov ecx, dword [esp + 0x70]
imul ecx, ecx, 0x3c
add ecx, dword [esp + 0x64]
imul ecx, ecx, 0x3c
add ecx, dword [esp + 0x40]
mov dword [esp + 0x34], ecx
cmp dword [esp + 0xb4], 0
jbe 0x4a3626
mov ebx, dword [esp + 0xb0]
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 0x2b
xchg ebp, eax
je 0x4a2f59
xchg ebp, eax
cmp al, 0x2d
xchg ebp, eax
jne 0x4a3607
mov ebx, ecx
neg ebx
mov dword [esp + 0x34], ebx
jmp 0x4a2f59
mov ebx, dword [0x6be780]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6be784]
mov dword [esp + 0x11c], ebx
jmp 0x4a2f59
call fcn.00427bf0
ud2
call fcn.00427c60
ud2
call fcn.00427c60
ud2
call fcn.00427c60
ud2
call fcn.00427c60
ud2
cmp ecx, 7
jge 0x4a366d
mov ebx, dword [0x6be780]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6be784]
mov dword [esp + 0x11c], ebx
jmp 0x4a2f59
cmp ecx, 1
jb 0x4a3772
mov dword [esp + 0x134], 1
mov edi, esi
cmp ecx, 3
jb 0x4a376b
mov ebx, esi
inc ebx
mov dword [esp + 0x14c], 2
mov dword [esp + 0x148], ebx
cmp ecx, 5
jb 0x4a3764
mov ebx, esi
add ebx, 3
mov dword [esp + 0x144], 2
mov dword [esp + 0x140], ebx
cmp ecx, 7
jb 0x4a375d
mov edx, esi
add edx, 5
mov ebp, 2
cmp ecx, 7
jb 0x4a3756
sub ecx, 7
mov eax, esi
cmp ecx, 0
je 0x4a36e6
add eax, 7
mov dword [esp + 0x13c], ecx
mov esi, eax
mov dword [esp + 0xb0], edi
mov ebx, dword [esp + 0x134]
mov dword [esp + 0xb4], ebx
mov ecx, dword [esp + 0x148]
mov eax, dword [esp + 0x14c]
mov ebx, dword [esp + 0x140]
mov dword [esp + 0x108], ebx
mov ebx, dword [esp + 0x144]
mov dword [esp + 0x10c], ebx
mov dword [esp + 0xb8], edx
mov dword [esp + 0xbc], ebp
mov dword [esp + 0x19c], esi
mov ebx, dword [esp + 0x13c]
mov dword [esp + 0x1a0], ebx
jmp 0x4a34ee
call fcn.00427c60
ud2
call fcn.00427c60
ud2
call fcn.00427c60
ud2
call fcn.00427c60
ud2
call fcn.00427c60
ud2
cmp ecx, 9
jge 0x4a379d
mov ebx, dword [0x6be780]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6be784]
mov dword [esp + 0x11c], ebx
jmp 0x4a2f59
cmp ecx, 3
jbe 0x4a391a
mov ebx, esi
add ebx, 3
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 0x3a
xchg ebp, eax
jne 0x4a38f4
cmp ecx, 6
jbe 0x4a3913
mov ebx, esi
add ebx, 6
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 0x3a
xchg ebp, eax
jne 0x4a38f4
cmp ecx, 1
jb 0x4a38ed
mov dword [esp + 0x13c], 1
mov dword [esp + 0x138], esi
cmp ecx, 3
jb 0x4a38e6
mov edi, esi
inc edi
mov dword [esp + 0x134], 2
cmp ecx, 6
jb 0x4a38df
mov ebx, esi
add ebx, 4
mov dword [esp + 0x14c], 2
mov dword [esp + 0x148], ebx
cmp ecx, 9
jb 0x4a38d8
mov ebx, esi
add ebx, 7
mov dword [esp + 0x144], 2
mov dword [esp + 0x140], ebx
cmp ecx, 9
jb 0x4a38d1
sub ecx, 9
mov eax, esi
cmp ecx, 0
je 0x4a385d
add eax, 9
mov ebp, ecx
mov edx, eax
mov ebx, dword [esp + 0x138]
mov dword [esp + 0xb0], ebx
mov ebx, dword [esp + 0x13c]
mov dword [esp + 0xb4], ebx
mov ecx, edi
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x148]
mov dword [esp + 0x108], ebx
mov ebx, dword [esp + 0x14c]
mov dword [esp + 0x10c], ebx
mov ebx, dword [esp + 0x140]
mov dword [esp + 0xb8], ebx
mov ebx, dword [esp + 0x144]
mov dword [esp + 0xbc], ebx
mov dword [esp + 0x19c], edx
mov dword [esp + 0x1a0], ebp
jmp 0x4a34ee
call fcn.00427c60
ud2
call fcn.00427c60
ud2
call fcn.00427c60
ud2
call fcn.00427c60
ud2
call fcn.00427c60
ud2
mov ebx, dword [0x6be780]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6be784]
mov dword [esp + 0x11c], ebx
jmp 0x4a2f59
call fcn.00427bf0
ud2
call fcn.00427bf0
ud2
cmp ecx, 3
jge 0x4a3945
mov ebx, dword [0x6be780]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6be784]
mov dword [esp + 0x11c], ebx
jmp 0x4a2f59
cmp ecx, 1
jb 0x4a3a01
mov dword [esp + 0x14c], 1
mov dword [esp + 0x148], esi
cmp ecx, 3
jb 0x4a39fa
mov edi, esi
inc edi
mov dword [esp + 0x13c], 2
cmp ecx, 3
jb 0x4a39f3
sub ecx, 3
mov eax, esi
cmp ecx, 0
je 0x4a3989
add eax, 3
mov ebp, ecx
mov edx, eax
mov ebx, dword [esp + 0x148]
mov dword [esp + 0xb0], ebx
mov ebx, dword [esp + 0x14c]
mov dword [esp + 0xb4], ebx
mov ecx, edi
mov eax, dword [esp + 0x13c]
mov ebx, 0x5ee54e
mov dword [esp + 0x108], ebx
mov dword [esp + 0x10c], 2
mov ebx, 0x5ee54e
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xbc], 2
mov dword [esp + 0x19c], edx
mov dword [esp + 0x1a0], ebp
jmp 0x4a34ee
call fcn.00427c60
ud2
call fcn.00427c60
ud2
call fcn.00427c60
ud2
cmp ecx, 6
jge 0x4a3a2c
mov ebx, dword [0x6be780]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6be784]
mov dword [esp + 0x11c], ebx
jmp 0x4a2f59
cmp ecx, 3
jbe 0x4a3b50
mov ebx, esi
add ebx, 3
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 0x3a
xchg ebp, eax
je 0x4a3a63
mov ebx, dword [0x6be780]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6be784]
mov dword [esp + 0x11c], ebx
jmp 0x4a2f59
cmp ecx, 1
jb 0x4a3b49
mov dword [esp + 0x144], 1
mov dword [esp + 0x140], esi
cmp ecx, 3
jb 0x4a3b42
mov ebx, esi
inc ebx
mov dword [esp + 0x14c], 2
mov dword [esp + 0x148], ebx
cmp ecx, 6
jb 0x4a3b3b
mov edi, esi
add edi, 4
mov dword [esp + 0x13c], 2
cmp ecx, 6
jb 0x4a3b34
sub ecx, 6
mov eax, esi
cmp ecx, 0
je 0x4a3ac7
add eax, 6
mov ebp, ecx
mov edx, eax
mov ebx, dword [esp + 0x140]
mov dword [esp + 0xb0], ebx
mov ebx, dword [esp + 0x144]
mov dword [esp + 0xb4], ebx
mov ecx, dword [esp + 0x148]
mov eax, dword [esp + 0x14c]
mov dword [esp + 0x108], edi
mov ebx, dword [esp + 0x13c]
mov dword [esp + 0x10c], ebx
mov ebx, 0x5ee54e
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xbc], 2
mov dword [esp + 0x19c], edx
mov dword [esp + 0x1a0], ebp
jmp 0x4a34ee
call fcn.00427c60
ud2
call fcn.00427c60
ud2
call fcn.00427c60
ud2
call fcn.00427c60
ud2
call fcn.00427bf0
ud2
cmp ecx, 1
jl 0x4a337f
cmp ecx, 0
jbe 0x4a3ba8
movzx ebp, byte [esi]
xchg ebp, eax
cmp al, 0x5a
xchg ebp, eax
jne 0x4a337f
cmp ecx, 1
jb 0x4a3ba1
dec ecx
mov eax, esi
cmp ecx, 0
je 0x4a3b81
inc eax
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0x19c], eax
mov ebx, dword [0x6ba830]
mov dword [esp + 0x80], ebx
jmp 0x4a2f59
call fcn.00427c60
ud2
call fcn.00427bf0
ud2
cmp eax, 0x17
je 0x4a3364
cmp eax, 0x18
je 0x4a3364
jmp 0x4a2f59
cmp eax, 0x1a
jg 0x4a3be2
cmp eax, 0x19
je 0x4a3364
cmp eax, 0x1a
je 0x4a3364
jmp 0x4a2f59
cmp eax, 0x1b
je 0x4a3364
cmp eax, 0x1c
je 0x4a3364
jmp 0x4a2f59
cmp eax, 0x20
jg 0x4a3cdc
cmp eax, 0x1e
jg 0x4a3c1e
cmp eax, 0x1d
je 0x4a3364
cmp eax, 0x1e
je 0x4a3364
jmp 0x4a2f59
cmp eax, 0x1f
je 0x4a3364
cmp eax, 0x20
jne 0x4a2f59
mov eax, edi
sar eax, 0x10
inc eax
cmp ecx, eax
jge 0x4a3c59
mov ebx, dword [0x6be780]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6be784]
mov dword [esp + 0x11c], ebx
jmp 0x4a2f59
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 0x58], eax
mov dword [esp + 8], eax
call fcn.004a4d90
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x54], ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0xd8], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0xdc], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x11c], ebx
mov ecx, dword [esp + 0x58]
mov eax, dword [esp + 0x1a0]
cmp ecx, eax
ja 0x4a3cd5
mov edx, eax
sub edx, ecx
mov eax, dword [esp + 0x19c]
cmp edx, 0
je 0x4a3cc2
add eax, ecx
mov dword [esp + 0x1a0], edx
mov dword [esp + 0x19c], eax
jmp 0x4a2f59
call fcn.00427c60
ud2
cmp eax, 0x101
jg 0x4a3ea5
cmp eax, 0x21
jne 0x4a3e37
cmp ecx, 2
jl 0x4a3e1d
cmp ecx, 0
jbe 0x4a3e30
movzx ebp, byte [esi]
xchg ebp, eax
cmp al, 0x2e
xchg ebp, eax
jne 0x4a3e1d
cmp ecx, 1
jbe 0x4a3e29
mov ebx, esi
inc ebx
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 0x30
xchg ebp, eax
jb 0x4a3e1d
cmp ecx, 1
jbe 0x4a3e22
mov ebx, esi
inc ebx
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 0x39
xchg ebp, eax
ja 0x4a3e1d
xor eax, eax
cmp eax, 9
jge 0x4a3d88
mov ebp, eax
inc ebp
cmp ebp, ecx
jge 0x4a3d88
mov ebx, eax
inc ebx
cmp ebx, ecx
jae 0x4a3e16
mov ebp, esi
add ebp, ebx
movzx ebx, byte [ebp]
cmp bl, 0x30
jb 0x4a3d88
mov ebx, eax
inc ebx
cmp ebx, ecx
jae 0x4a3e0f
mov ebp, esi
add ebp, ebx
movzx ebx, byte [ebp]
cmp bl, 0x39
ja 0x4a3d88
inc eax
cmp eax, 9
jl 0x4a3d4b
mov dword [esp], esi
mov dword [esp + 4], ecx
mov ebx, eax
mov dword [esp + 0x6c], eax
inc ebx
mov dword [esp + 8], ebx
call fcn.004a4d90
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x54], ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0xd8], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0xdc], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x11c], ebx
mov ecx, dword [esp + 0x6c]
inc ecx
mov eax, dword [esp + 0x1a0]
cmp ecx, eax
ja 0x4a3e08
mov edx, eax
sub edx, ecx
mov eax, dword [esp + 0x19c]
cmp edx, 0
je 0x4a3df5
add eax, ecx
mov dword [esp + 0x1a0], edx
mov dword [esp + 0x19c], eax
jmp 0x4a2f59
call fcn.00427c60
ud2
call fcn.00427bf0
ud2
call fcn.00427bf0
ud2
jmp 0x4a2f59
call fcn.00427bf0
ud2
call fcn.00427bf0
ud2
call fcn.00427bf0
ud2
cmp eax, 0x101
jne 0x4a2f59
mov ebx, dword [0x6baef8]
mov dword [esp], ebx
mov ebx, dword [0x6baefc]
mov dword [esp + 4], ebx
mov ebx, dword [0x6baf00]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ecx
call fcn.0049ed80
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x60], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x19c], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x11c], ebx
jmp 0x4a2f59
cmp eax, 0x102
jne 0x4a3f0f
mov ebx, dword [0x6baf18]
mov dword [esp], ebx
mov ebx, dword [0x6baf1c]
mov dword [esp + 4], ebx
mov ebx, dword [0x6baf20]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ecx
call fcn.0049ed80
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x60], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x19c], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x11c], ebx
jmp 0x4a2f59
cmp eax, 0x103
jne 0x4a2f59
mov dword [esp], esi
mov dword [esp + 4], ecx
cmp edi, 0x104
je 0x4a3f91
mov byte [esp + 8], 0
call fcn.004a1890
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x19c], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x11c], ebx
mov dword [esp + 0x60], eax
cmp eax, 0
jle 0x4a3f75
cmp eax, 0xc
jle 0x4a2f59
mov ebx, 0x5eecb3
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xdc], 5
jmp 0x4a2f59
mov byte [esp + 8], 1
jmp 0x4a3f2e
cmp eax, 0x112
jg 0x4a4361
cmp eax, 0x107
jg 0x4a415c
cmp eax, 0x105
jg 0x4a4026
cmp eax, 0x104
je 0x4a3f1a
cmp eax, 0x105
jne 0x4a2f59
mov ebx, dword [0x6baee8]
mov dword [esp], ebx
mov ebx, dword [0x6baeec]
mov dword [esp + 4], ebx
mov ebx, dword [0x6baef0]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ecx
call fcn.0049ed80
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x19c], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x11c], ebx
jmp 0x4a2f59
cmp eax, 0x106
jne 0x4a4088
mov ebx, dword [0x6baf08]
mov dword [esp], ebx
mov ebx, dword [0x6baf0c]
mov dword [esp + 4], ebx
mov ebx, dword [0x6baf10]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ecx
call fcn.0049ed80
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x19c], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x11c], ebx
jmp 0x4a2f59
cmp eax, 0x107
jne 0x4a2f59
cmp edi, 0x108
jne 0x4a40c7
cmp ecx, 0
jle 0x4a40c7
cmp ecx, 0
jbe 0x4a4155
movzx ebp, byte [esi]
xchg ebp, eax
cmp al, 0x20
xchg ebp, eax
jne 0x4a40c7
cmp ecx, 1
jb 0x4a414e
dec ecx
mov eax, esi
cmp ecx, 0
je 0x4a40c5
inc eax
mov esi, eax
mov dword [esp + 0x19c], esi
mov dword [esp], esi
mov dword [esp + 0x1a0], ecx
mov dword [esp + 4], ecx
cmp edi, 0x109
je 0x4a4147
mov byte [esp + 8], 0
call fcn.004a1890
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x19c], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x11c], ebx
mov dword [esp + 0x78], eax
cmp eax, 0
jge 0x4a2f59
mov ebx, 0x5ee793
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xdc], 3
jmp 0x4a2f59
mov byte [esp + 8], 1
jmp 0x4a40e9
call fcn.00427c60
ud2
call fcn.00427bf0
ud2
cmp eax, 0x109
jg 0x4a417e
cmp eax, 0x108
je 0x4a4093
cmp eax, 0x109
je 0x4a4093
jmp 0x4a2f59
cmp eax, 0x111
jne 0x4a4287
cmp ecx, 4
jl 0x4a423a
mov dword [esp + 0xc8], esi
xor eax, eax
mov dword [esp + 0xcc], ecx
cmp ecx, eax
jg 0x4a4259
xor eax, eax
cmp al, 0
je 0x4a423a
cmp ecx, 4
jb 0x4a4233
mov edx, 4
mov ebp, esi
cmp ecx, 4
jb 0x4a422c
sub ecx, 4
mov eax, esi
cmp ecx, 0
je 0x4a41d3
add eax, 4
mov dword [esp + 0x148], ebp
mov dword [esp + 0x14c], edx
mov dword [esp + 0x19c], eax
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0xe8], ebp
mov dword [esp], ebp
mov dword [esp + 0xec], edx
mov dword [esp + 4], edx
call fcn.0049f1a0
mov ebx, dword [esp + 8]
mov dword [esp + 0x38], ebx
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x11c], ebx
jmp 0x4a2f59
call fcn.00427c60
ud2
call fcn.00427c60
ud2
mov ebx, dword [0x6be780]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6be784]
mov dword [esp + 0x11c], ebx
jmp 0x4a2f59
cmp eax, ecx
jae 0x4a4280
mov ebp, esi
add ebp, eax
movzx ebx, byte [ebp]
cmp bl, 0x30
jb 0x4a4279
cmp bl, 0x39
ja 0x4a4279
mov eax, 1
jmp 0x4a41ac
xor eax, eax
jmp 0x4a41ac
call fcn.00427bf0
ud2
cmp eax, 0x112
jne 0x4a2f59
cmp ecx, 2
jge 0x4a42b6
mov ebx, dword [0x6be780]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6be784]
mov dword [esp + 0x11c], ebx
jmp 0x4a2f59
cmp ecx, 2
jb 0x4a435a
mov edx, 2
mov ebp, esi
cmp ecx, 2
jb 0x4a4353
sub ecx, 2
mov eax, esi
cmp ecx, 0
je 0x4a42dc
add eax, 2
mov dword [esp + 0x148], ebp
mov dword [esp + 0x14c], edx
mov dword [esp + 0x19c], eax
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0xe8], ebp
mov dword [esp], ebp
mov dword [esp + 0xec], edx
mov dword [esp + 4], edx
call fcn.0049f1a0
mov eax, dword [esp + 8]
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x11c], ebx
cmp eax, 0x45
jl 0x4a4342
mov ebx, eax
add ebx, 0x76c
mov dword [esp + 0x38], ebx
jmp 0x4a2f59
mov ebx, eax
add ebx, 0x7d0
mov dword [esp + 0x38], ebx
jmp 0x4a2f59
call fcn.00427c60
ud2
call fcn.00427c60
ud2
cmp eax, 0x20d
jg 0x4a450a
cmp eax, 0x20b
jg 0x4a4476
cmp eax, 0x20a
jne 0x4a43ed
mov dword [esp], esi
mov dword [esp + 4], ecx
mov byte [esp + 8], 0
call fcn.004a1890
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x19c], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x11c], ebx
mov dword [esp + 0x74], eax
cmp eax, 0
jl 0x4a43d1
cmp eax, 0x18
jl 0x4a2f59
mov ebx, 0x5eea34
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xdc], 4
jmp 0x4a2f59
cmp eax, 0x20b
jne 0x4a2f59
mov dword [esp], esi
mov dword [esp + 4], ecx
cmp edi, 0x20c
je 0x4a446f
mov byte [esp + 8], 0
call fcn.004a1890
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x19c], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x11c], ebx
mov dword [esp + 0x74], eax
cmp eax, 0
jl 0x4a4453
cmp eax, 0xc
jle 0x4a2f59
mov ebx, 0x5eea34
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xdc], 4
jmp 0x4a2f59
mov byte [esp + 8], 1
jmp 0x4a440c
cmp eax, 0x20c
je 0x4a43f8
cmp eax, 0x20d
jne 0x4a2f59
mov dword [esp], esi
mov dword [esp + 4], ecx
cmp edi, 0x20e
je 0x4a4503
mov byte [esp + 8], 0
call fcn.004a1890
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x19c], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x11c], ebx
mov dword [esp + 0x68], eax
cmp eax, 0
jl 0x4a44e7
cmp eax, 0x3c
jl 0x4a2f59
mov ebx, 0x5eef1c
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xdc], 6
jmp 0x4a2f59
mov byte [esp + 8], 1
jmp 0x4a44a0
cmp eax, 0x20f
jg 0x4a475c
cmp eax, 0x20e
je 0x4a448c
cmp eax, 0x20f
jne 0x4a2f59
mov dword [esp], esi
mov dword [esp + 4], ecx
cmp edi, 0x210
je 0x4a4752
mov byte [esp + 8], 0
call fcn.004a1890
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x19c], edx
mov eax, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x11c], ebx
mov dword [esp + 0x44], ecx
cmp ecx, 0
jl 0x4a4736
cmp ecx, 0x3c
jge 0x4a4736
mov dword [esp + 0x1a0], eax
cmp eax, 2
jl 0x4a46fc
cmp eax, 0
jbe 0x4a472f
movzx ebp, byte [edx]
xchg ebp, eax
cmp al, 0x2e
xchg ebp, eax
jne 0x4a46fc
mov dword [esp + 0xd0], edx
mov ecx, eax
mov eax, 1
mov dword [esp + 0xd4], ecx
cmp ecx, eax
jg 0x4a4701
xor eax, eax
cmp al, 0
je 0x4a46fc
mov ebx, dword [esp + 0x194]
mov dword [esp], ebx
mov ebx, dword [esp + 0x198]
mov dword [esp + 4], ebx
call fcn.0049d5b0
mov esi, dword [esp + 0x1a0]
mov eax, dword [esp + 0x10]
and eax, 0xffff
cmp eax, 0x20
je 0x4a2f59
cmp eax, 0x21
je 0x4a2f59
mov eax, 2
cmp eax, esi
jge 0x4a4644
mov edi, dword [esp + 0x19c]
mov dword [esp + 0xc0], edi
mov dword [esp + 0xc4], esi
cmp esi, eax
jg 0x4a46ce
xor ecx, ecx
cmp cl, 0
je 0x4a4644
inc eax
cmp eax, esi
jl 0x4a461b
mov ebx, dword [esp + 0x19c]
mov dword [esp], ebx
mov dword [esp + 4], esi
mov dword [esp + 0x5c], eax
mov dword [esp + 8], eax
call fcn.004a4d90
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x54], ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0xd8], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0xdc], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x11c], ebx
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x1a0]
cmp ecx, eax
ja 0x4a46c7
mov edx, eax
sub edx, ecx
mov eax, dword [esp + 0x19c]
cmp edx, 0
je 0x4a46b4
add eax, ecx
mov dword [esp + 0x1a0], edx
mov dword [esp + 0x19c], eax
jmp 0x4a2f59
call fcn.00427c60
ud2
cmp eax, esi
jae 0x4a46f5
mov ebp, edi
add ebp, eax
movzx ebx, byte [ebp]
cmp bl, 0x30
jb 0x4a46ee
cmp bl, 0x39
ja 0x4a46ee
mov ecx, 1
jmp 0x4a463a
xor ecx, ecx
jmp 0x4a463a
call fcn.00427bf0
ud2
jmp 0x4a2f59
cmp eax, ecx
jae 0x4a4728
mov ebp, edx
add ebp, eax
movzx ebx, byte [ebp]
cmp bl, 0x30
jb 0x4a4721
cmp bl, 0x39
ja 0x4a4721
mov eax, 1
jmp 0x4a45cd
xor eax, eax
jmp 0x4a45cd
call fcn.00427bf0
ud2
call fcn.00427bf0
ud2
mov ebx, 0x5eef2e
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xdc], 6
jmp 0x4a4587
mov byte [esp + 8], 1
jmp 0x4a4543
cmp eax, 0x210
je 0x4a452b
cmp eax, 0x213
jne 0x4a4898
cmp ecx, 2
jge 0x4a4796
mov ebx, dword [0x6be780]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6be784]
mov dword [esp + 0x11c], ebx
jmp 0x4a2f59
cmp ecx, 2
jb 0x4a4891
mov edx, 2
mov ebp, esi
cmp ecx, 2
jb 0x4a488a
sub ecx, 2
mov eax, esi
cmp ecx, 0
je 0x4a47bc
add eax, 2
mov dword [esp + 0x19c], eax
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0xe8], ebp
mov esi, ebp
mov dword [esp + 0x148], ebp
mov dword [esp + 0xec], edx
mov eax, edx
cmp edx, 2
jne 0x4a482e
mov dword [esp], esi
mov dword [esp + 0x14c], eax
mov dword [esp + 4], eax
mov ebp, 0x5ee564
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 2
call fcn.00451ee0
mov esi, dword [esp + 0x148]
mov eax, dword [esp + 0x14c]
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x4a482e
mov byte [esp + 0x33], 1
jmp 0x4a2f59
mov dword [esp + 0x14c], eax
cmp eax, 2
jne 0x4a486b
mov dword [esp], esi
mov dword [esp + 4], eax
mov ebp, 0x5ee58e
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 2
call fcn.00451ee0
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x4a486b
mov byte [esp + 0x32], 1
jmp 0x4a2f59
mov ebx, dword [0x6be780]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6be784]
mov dword [esp + 0x11c], ebx
jmp 0x4a2f59
call fcn.00427c60
ud2
call fcn.00427c60
ud2
cmp eax, 0x214
jne 0x4a2f59
cmp ecx, 2
jge 0x4a48c7
mov ebx, dword [0x6be780]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6be784]
mov dword [esp + 0x11c], ebx
jmp 0x4a2f59
cmp ecx, 2
jb 0x4a49c2
mov edx, 2
mov ebp, esi
cmp ecx, 2
jb 0x4a49bb
sub ecx, 2
mov eax, esi
cmp ecx, 0
je 0x4a48ed
add eax, 2
mov dword [esp + 0x19c], eax
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0xe8], ebp
mov esi, ebp
mov dword [esp + 0x148], ebp
mov dword [esp + 0xec], edx
mov eax, edx
cmp edx, 2
jne 0x4a495f
mov dword [esp], esi
mov dword [esp + 0x14c], eax
mov dword [esp + 4], eax
mov ebp, 0x5ee5d2
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 2
call fcn.00451ee0
mov esi, dword [esp + 0x148]
mov eax, dword [esp + 0x14c]
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x4a495f
mov byte [esp + 0x33], 1
jmp 0x4a2f59
mov dword [esp + 0x14c], eax
cmp eax, 2
jne 0x4a499c
mov dword [esp], esi
mov dword [esp + 4], eax
mov ebp, 0x5ee5e0
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 2
call fcn.00451ee0
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x4a499c
mov byte [esp + 0x32], 1
jmp 0x4a2f59
mov ebx, dword [0x6be780]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6be784]
mov dword [esp + 0x11c], ebx
jmp 0x4a2f59
call fcn.00427c60
ud2
call fcn.00427c60
ud2
call fcn.00427c60
ud2
call fcn.004501c0
jmp fcn.004a1d30