Function at 0x425df0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0xa40
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov ebx, 0xed085d4e
mov dword [esp + 0xa38], eax
mov dword [esp + 0xa34], ecx
mov dword [esp + 0xa30], edx
mov dword [esp + 0xa2c], esi
mov dword [esp + 0xa28], edi
mov si, word [0x4933f0]
mov ax, si
add eax, 0xbc1cabdf
mov si, ax
mov word [0x4933f0], si
mov eax, esp
mov dword [eax + 4], 8
mov dword [eax], 0xdb8
mov dword [esp + 0x130], ebx
call fcn.00416c70
mov dword [esp + 0xa24], eax
mov si, word [0x492ac0]
mov ax, si
inc eax
mov si, ax
mov word [0x492ac0], si
movsx eax, si
add eax, 0xfa0e7fee
mov ecx, dword [0x4968b0]
mov edx, ecx
dec edx
mov dword [0x4968b0], edx
xor eax, ecx
mov ecx, dword [esp + 0x130]
cmp ecx, eax
jge 0x425ed3
mov ax, word [0x492520]
movsx ecx, ax
sar ecx, 7
add ecx, 0x9fe4a927
mov edx, dword [0x495230]
xor edx, ecx
mov dword [0x495230], edx
jmp 0x425ef7
mov eax, dword [0x494188]
dec eax
mov dword [0x494188], eax
imul eax, eax, 0x35f9fc4e
xor eax, 0xfcce77a
mov ecx, dword [0x49473c]
or ecx, eax
mov dword [0x49473c], ecx
mov eax, dword [esp + 0xa24]
mov ecx, dword [esp + 0xa28]
mov edx, esp
mov dword [edx + 4], eax
mov dword [edx], ecx
call fcn.004559e0
mov dword [esp + 0x9fc], eax
mov si, word [0x4926c4]
mov ax, si
inc eax
mov si, ax
mov word [0x4926c4], si
movsx eax, si
mov ecx, dword [0x494154]
sub ecx, eax
mov dword [0x494154], ecx
mov eax, dword [esp + 0xa24]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 8
call fcn.0044ad10
mov si, word [0x492ae6]
movsx eax, si
sar eax, 2
imul eax, eax, 0x2c170863
mov ecx, dword [0x4949c0]
xor ecx, eax
mov dword [0x4949c0], ecx
cmp dword [esp + 0x9fc], 0
jne 0x4260d5
mov eax, dword [0x494060]
mov ecx, eax
inc ecx
mov dword [0x494060], ecx
or eax, 0xbfdb3eff
mov ecx, dword [0x493804]
imul ecx, eax
mov dword [0x493804], ecx
cmp dword [esp + 0xa38], 0
je 0x426030
mov ax, word [0x492854]
mov cx, ax
add ecx, 0xfe499cbb
mov ax, cx
mov word [0x492854], ax
mov ecx, dword [esp + 0xa30]
call fcn.00433650
mov ecx, dword [0x493e04]
mov edx, dword [0x493f3c]
mov esi, edx
inc esi
mov dword [0x493f3c], esi
and ecx, edx
or ecx, 0x7f3582e0
cmp ecx, 0x6920b44b
jg 0x42602b
mov ax, word [0x49266c]
mov cx, ax
inc ecx
mov ax, cx
mov word [0x49266c], ax
movsx ecx, ax
add ecx, 0x9d8f8fc1
mov edx, dword [0x495474]
and edx, ecx
mov dword [0x495474], edx
jmp 0x4289f0
mov eax, dword [0x493c10]
mov ecx, eax
dec ecx
mov dword [0x493c10], ecx
mov dword [0x4950c4], eax
mov eax, dword [esp + 0xa30]
mov ecx, dword [esp + 0xa2c]
mov edx, esp
mov dword [edx + 4], eax
mov dword [edx], ecx
call fcn.0042c900
mov dword [esp + 0x9f8], eax
mov si, word [0x493098]
mov ax, si
add eax, 0xbae4d51a
mov si, ax
mov word [0x493098], si
cmp dword [esp + 0x9f8], 0
jg 0x4260c1
mov ax, word [0x491e1a]
mov cx, ax
imul ecx, ecx, 0xb40321e0
mov ax, cx
mov word [0x491e1a], ax
mov ecx, dword [esp + 0xa30]
call fcn.00433650
mov ecx, dword [0x4948c8]
imul ecx, ecx, 0xa6efb274
mov dword [0x4948c8], ecx
mov eax, dword [0x4945f4]
add eax, 0x8730c605
mov dword [0x4945f4], eax
jmp 0x4289f0
mov eax, 0x818f1756
mov cx, word [0x492b3e]
mov dx, cx
xor edx, 0x3fff
mov cx, dx
mov word [0x492b3e], cx
mov edx, dword [0x493b98]
mov esi, edx
inc esi
mov dword [0x493b98], esi
and edx, 0x600a400a
mov esi, dword [0x494a18]
or edx, esi
or edx, 0x89a5b1f4
mov dword [0x494a18], edx
mov edx, dword [0x495ec4]
and edx, 0xc65c1db8
mov dword [0x495ec4], edx
mov edx, dword [0x4941fc]
imul edx, edx, 0x6618e767
mov dword [0x4941fc], edx
mov cx, word [0x49344a]
mov dx, cx
or edx, 0xd7f6
mov cx, dx
mov word [0x49344a], cx
mov edx, dword [0x495518]
not edx
or edx, 0x14973e49
mov esi, dword [0x4957c8]
and esi, edx
mov dword [0x4957c8], esi
mov edx, dword [0x4953c8]
and edx, 0x33c44aac
mov esi, dword [0x49524c]
xor esi, edx
mov dword [0x49524c], esi
lea ecx, [esp + 0x65c]
mov dword [esp + 0x12c], eax
call fcn.0042dd90
mov dword [0x495970], 0x3f1e3b0b
mov dword [0x495fb4], 0x1a891806
mov ecx, dword [0x495ad4]
or ecx, 0x215f8908
mov dword [0x495ad4], ecx
mov ecx, dword [0x493d80]
xor ecx, 0xffffffff
and ecx, 0x8e0d0f0c
or ecx, 0xd578ca67
mov edx, dword [esp + 0x12c]
cmp edx, ecx
mov dword [esp + 0x128], eax
jg 0x426260
mov eax, 0xfb60e4f3
mov cx, word [0x4932ca]
mov dx, cx
dec edx
mov cx, dx
mov word [0x4932ca], cx
movsx edx, cx
imul edx, edx, 0xb4399154
imul edx, edx, 0x554fa2e4
cmp eax, edx
jle 0x426243
mov ax, word [0x4923aa]
mov cx, ax
and ecx, 0x1ae0
mov ax, cx
mov word [0x4923aa], ax
jmp 0x42625b
mov ax, word [0x492c02]
mov cx, ax
add ecx, 0xa5809
mov ax, cx
mov word [0x492c02], ax
jmp 0x426260
mov eax, 0x63406298
mov dword [esp + 0x21c], 0
mov dword [esp + 0x218], 0
mov ecx, dword [0x494728]
add ecx, 0x1fc5dafe
or ecx, 0xcb1a
mov dx, word [0x49229c]
mov si, dx
xor esi, ecx
mov dx, si
mov word [0x49229c], dx
mov dx, word [0x4929be]
movsx ecx, dx
not ecx
mov esi, dword [0x49521c]
imul esi, esi, 0x9f5afaa7
and ecx, esi
mov esi, dword [0x495f94]
sub esi, ecx
mov dword [0x495f94], esi
mov dword [esp + 0x210], 0xffffffff
mov dword [esp + 0x20c], 0xffffffff
mov dx, word [0x492882]
mov cx, dx
inc ecx
mov di, cx
mov word [0x492882], di
movsx ecx, dx
mov dx, word [0x493416]
movsx esi, dx
and esi, 0x21a85cf
xor ecx, esi
cmp eax, ecx
je 0x426327
mov eax, dword [0x495ecc]
add eax, 0x77b80f0b
mov dword [0x495ecc], eax
jmp 0x42634a
mov ax, word [0x492f3e]
mov cx, ax
mov ax, word [0x492728]
mov dx, ax
or ecx, edx
or ecx, 0xb351
mov ax, cx
mov word [0x492728], ax
mov dword [esp + 0x208], 0x50
mov eax, dword [0x4961a4]
imul eax, eax, 0xc7e17794
or eax, 0xa18c
mov cx, word [0x4925d4]
mov dx, cx
add edx, eax
mov cx, dx
mov word [0x4925d4], cx
mov byte [esp + 0x207], 0
mov eax, dword [0x493a8c]
xor eax, 0x9ffbfbef
mov dword [0x493a8c], eax
mov eax, esp
mov dword [eax], 0
call fcn.00451470
add eax, 0x258
adc edx, 0
mov dword [esp + 0x218], eax
mov dword [esp + 0x21c], edx
mov eax, dword [0x494ec4]
add eax, 0x395b7b93
mov edx, dword [0x496558]
imul edx, eax
mov dword [0x496558], edx
mov byte [esp + 0x689], 0
mov eax, dword [0x494e68]
imul eax, eax, 0x64a20320
or eax, 0x9de6b9f8
mov edx, dword [0x4968c0]
sub edx, eax
mov dword [0x4968c0], edx
mov eax, dword [esp + 0xa28]
mov edx, esp
mov dword [edx], eax
call fcn.004527b0
mov dword [esp + 0x22c], eax
mov eax, dword [0x4951d0]
mov cx, word [0x49347e]
movsx edx, cx
shl edx, 3
lea eax, [edx + eax*2]
mov edx, dword [0x494250]
imul edx, eax
mov dword [0x494250], edx
cmp dword [esp + 0x22c], 0x7f
jle 0x426479
mov eax, dword [0x493eb0]
shr eax, 4
mov ecx, dword [0x496814]
mov edx, ecx
dec edx
mov dword [0x496814], edx
mov edx, 0x5e0ca91
sub edx, ecx
xor eax, edx
mov si, word [0x492358]
mov cx, si
imul ecx, eax
mov si, cx
mov word [0x492358], si
jmp 0x428919
mov eax, dword [0x494e94]
mov ecx, eax
dec ecx
mov dword [0x494e94], ecx
add eax, 0x77cc345c
cmp eax, 0xbbaff7f2
je 0x4264af
mov ax, word [0x4932e6]
mov cx, ax
xor ecx, 0xbcd9
mov ax, cx
mov word [0x4932e6], ax
mov eax, dword [esp + 0xa28]
mov ecx, esp
mov dword [ecx + 4], eax
lea eax, [esp + 0x953]
mov dword [ecx], eax
call fcn.00455a70
mov ecx, dword [0x49679c]
not ecx
imul ecx, ecx, 0xabb0233b
mov dx, word [0x492abc]
mov si, dx
sub esi, ecx
mov dx, si
mov word [0x492abc], dx
mov ecx, dword [esp + 0x22c]
sub ecx, 1
mov dword [esp + 0x228], ecx
mov dword [esp + 0x124], eax
mov eax, dword [esp + 0x228]
mov ecx, dword [esp + 0x22c]
sub ecx, 6
cmp eax, ecx
jl 0x426699
mov eax, dword [0x493de4]
mov ecx, eax
inc ecx
mov dword [0x493de4], ecx
or eax, 0x39be0e44
mov dx, word [0x49286a]
movsx ecx, dx
mov dx, word [0x49240a]
movsx esi, dx
sub ecx, esi
or ecx, 0x4b814a9
cmp eax, ecx
je 0x426595
mov eax, 0xd7b575ff
mov cx, word [0x4935b2]
mov dx, cx
inc edx
mov si, dx
mov word [0x4935b2], si
movsx edx, cx
add edx, 0xb0909974
cmp eax, edx
jl 0x426590
mov eax, dword [0x494cc4]
imul eax, eax, 0x3887452
mov dword [0x494cc4], eax
jmp 0x426595
mov eax, dword [esp + 0x228]
movsx eax, byte [esp + eax + 0x953]
cmp eax, 0x3a
jne 0x426674
mov eax, 0xb1ea0512
mov ecx, dword [0x49587c]
sar ecx, 2
mov edx, dword [0x4969b0]
inc edx
mov dword [0x4969b0], edx
add edx, 0xc78e019a
and ecx, edx
cmp eax, ecx
jg 0x4265e2
mov dword [0x495770], 0xd7b5bda8
mov eax, dword [esp + 0x228]
mov byte [esp + eax + 0x953], 0
mov cx, word [0x492732]
mov ax, cx
and eax, 0xe7d8
mov cx, ax
mov word [0x492732], cx
mov eax, dword [esp + 0x228]
mov dword [esp + 0x22c], eax
mov eax, dword [0x496718]
xor eax, 0xcf611e6c
mov edx, dword [0x49666c]
and edx, eax
mov dword [0x49666c], edx
mov eax, dword [esp + 0x228]
lea edx, [esp + 0x953]
lea eax, [eax + edx + 1]
mov edx, esp
mov dword [edx], eax
call fcn.004559a8
mov dword [esp + 0x208], eax
mov cx, word [0x4932c4]
movsx eax, cx
or eax, 0x80c2410
mov edx, dword [0x49440c]
sub edx, eax
mov dword [0x49440c], edx
jmp 0x426699
mov eax, dword [0x494dd8]
add eax, 0xea9fc327
mov dword [0x494dd8], eax
mov eax, dword [esp + 0x228]
add eax, 0xffffffff
mov dword [esp + 0x228], eax
jmp 0x426505
mov ax, word [0x493606]
movsx ecx, ax
shl ecx, 7
add ecx, 0xe2e361e2
xor ecx, 0xff4de1f3
mov edx, dword [0x493ae4]
sar edx, 4
sub edx, 0x1f251e01
add edx, 0x43ce2e91
cmp ecx, edx
jl 0x4266e2
mov eax, dword [0x4940dc]
add eax, 0xf04a2155
mov dword [0x4940dc], eax
jmp 0x4266f4
mov eax, dword [0x49529c]
shl eax, 2
or eax, 0xc30a43e4
mov dword [0x495df0], eax
mov dword [esp + 0x228], 0
mov eax, dword [esp + 0x228]
cmp eax, dword [esp + 0x22c]
jg 0x4268d8
mov eax, 0xaffdfbef
mov ecx, dword [0x494c0c]
mov edx, dword [0x4948dc]
inc edx
mov dword [0x4948dc], edx
add edx, 0x601bdb92
and ecx, edx
cmp eax, ecx
jg 0x42674f
mov eax, dword [0x494584]
or eax, 0xa9443cbe
mov dword [0x494584], eax
jmp 0x42676c
mov ax, word [0x493426]
movsx ecx, ax
imul ecx, ecx, 0xb158da91
mov edx, dword [0x495570]
sub edx, ecx
mov dword [0x495570], edx
mov eax, dword [esp + 0x228]
mov cl, byte [esp + eax + 0x953]
mov byte [esp + eax + 0x8ae], cl
mov eax, dword [0x496470]
or eax, 0x3634b162
mov dword [0x496470], eax
mov eax, dword [esp + 0x228]
movsx eax, byte [esp + eax + 0x8ae]
cmp eax, 0x2f
jne 0x4268a1
mov eax, dword [0x49555c]
cmp eax, 0x8737ea85
jne 0x4267d3
mov eax, dword [0x494e88]
mov cx, word [0x493074]
mov dx, cx
xor edx, eax
mov cx, dx
mov word [0x493074], cx
mov eax, dword [esp + 0x228]
mov byte [esp + eax + 0x8ae], 0
mov cx, word [0x4925b2]
mov ax, cx
add eax, 0x271e4e66
mov cx, ax
mov word [0x4925b2], cx
mov eax, dword [esp + 0x228]
mov dword [esp + 0x224], eax
mov eax, dword [esp + 0x224]
cmp eax, dword [esp + 0x22c]
jg 0x42688d
mov eax, dword [0x496984]
mov ecx, eax
dec ecx
mov dword [0x496984], ecx
mov ecx, dword [0x496198]
sub eax, ecx
mov ecx, dword [0x494384]
or ecx, eax
mov dword [0x494384], ecx
mov eax, dword [esp + 0x224]
mov dl, byte [esp + eax + 0x953]
mov ecx, dword [esp + 0x228]
sub eax, ecx
mov byte [esp + eax + 0x689], dl
mov eax, dword [0x4946d8]
mov ecx, 0x33b09250
sub ecx, eax
mov eax, dword [0x4964f0]
or eax, ecx
mov dword [0x4964f0], eax
mov eax, dword [esp + 0x224]
add eax, 1
mov dword [esp + 0x224], eax
jmp 0x426809
mov eax, dword [0x494650]
add eax, 0xbd1b4aec
mov dword [0x494650], eax
jmp 0x4268d8
mov eax, dword [0x494000]
mov ecx, eax
inc ecx
mov dword [0x494000], ecx
add eax, 0x42696a5
mov ecx, dword [0x4958f0]
sub ecx, eax
mov dword [0x4958f0], ecx
mov eax, dword [esp + 0x228]
add eax, 1
mov dword [esp + 0x228], eax
jmp 0x4266ff
mov eax, 0xf67bf7ff
mov ecx, dword [0x494058]
cmp eax, ecx
jge 0x4268fa
mov eax, dword [0x49419c]
add eax, 0x5abbc4e2
mov dword [0x49419c], eax
lea eax, [esp + 0x689]
mov ecx, esp
mov dword [ecx], eax
call fcn.004527b0
mov ecx, dword [esp + 0xa2c]
mov edx, esp
mov dword [edx], ecx
mov dword [esp + 0x120], eax
call fcn.004527b0
mov ecx, dword [esp + 0x120]
add ecx, eax
cmp ecx, 0x1ff
jbe 0x42696d
mov ax, word [0x492834]
mov cx, ax
inc ecx
mov dx, cx
mov word [0x492834], dx
movsx ecx, ax
cmp ecx, 0x1865c062
jg 0x426968
mov eax, dword [0x4961d4]
or eax, 0x6cb1d921
mov dword [0x4961d4], eax
jmp 0x428919
mov eax, dword [0x49464c]
imul eax, eax, 0x7dfc6366
cmp eax, 0x40918748
jl 0x4269b9
mov ax, word [0x492c82]
mov cx, ax
inc ecx
mov dx, cx
mov word [0x492c82], dx
movsx ecx, ax
add ecx, 0xc27d1656
or ecx, 0xf7f8ecbf
mov esi, dword [0x495070]
add esi, ecx
mov dword [0x495070], esi
jmp 0x4269c9
mov eax, dword [0x49689c]
imul eax, eax, 0x550365fd
mov dword [0x49689c], eax
mov eax, 0xdffff7fb
mov ecx, dword [esp + 0xa2c]
mov edx, esp
mov dword [edx + 4], ecx
lea ecx, [esp + 0x689]
mov dword [edx], ecx
mov dword [esp + 0x11c], eax
call fcn.00455a80
mov ecx, dword [0x4955f4]
dec ecx
mov dword [0x4955f4], ecx
and ecx, 0x43a1ed64
mov edx, dword [esp + 0x11c]
cmp edx, ecx
mov dword [esp + 0x118], eax
jl 0x426a4b
mov eax, 0xf552eeec
mov ecx, dword [0x496434]
sar ecx, 8
cmp eax, ecx
jle 0x426a46
mov ax, word [0x4936b0]
mov cx, ax
add ecx, 0x17b7cb4e
mov ax, cx
mov word [0x4936b0], ax
jmp 0x426a4b
mov eax, 0xfffddcff
mov dword [esp + 0x224], 0
mov cx, word [0x492ede]
movsx edx, cx
cmp eax, edx
jne 0x426a81
mov eax, dword [0x495bb8]
and eax, 0xfe017d8c
mov dword [0x495bb8], eax
jmp 0x426a99
mov ax, word [0x4933a4]
mov cx, ax
xor ecx, 0xeefd
mov ax, cx
mov word [0x4933a4], ax
mov eax, 0xd37218c4
mov ecx, esp
mov dword [ecx + 4], 5
mov dword [ecx], 0x8b2
mov dword [esp + 0x114], eax
call fcn.00416c70
mov dword [esp + 0xa20], eax
mov dx, word [0x4926f8]
movsx eax, dx
sub eax, 0xc4c41f94
mov ecx, dword [esp + 0x114]
cmp ecx, eax
jle 0x426afb
mov ax, word [0x492f88]
mov cx, ax
imul ecx, ecx, 0xa14480
mov ax, cx
mov word [0x492f88], ax
jmp 0x426b0a
mov eax, dword [0x496254]
add eax, 0x320230c8
mov dword [0x496254], eax
mov eax, 0x2c3d5494
mov ecx, dword [esp + 0xa20]
mov edx, esp
mov dword [edx], ecx
lea ecx, [esp + 0x65c]
mov dword [esp + 0x110], eax
call fcn.0043a2b0
sub esp, 4
mov si, word [0x492fc2]
movsx ecx, si
mov edx, dword [esp + 0x110]
cmp edx, ecx
mov dword [esp + 0x10c], eax
jle 0x426b5f
mov eax, dword [0x49619c]
and eax, 0x7b1fae9a
mov dword [0x49619c], eax
mov eax, dword [esp + 0xa20]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 5
call fcn.0044ad10
mov eax, dword [0x495844]
mov ecx, eax
inc ecx
mov dword [0x495844], ecx
mov ecx, dword [0x494110]
dec ecx
mov dword [0x494110], ecx
add eax, ecx
cmp eax, 0xacbd67ff
jne 0x426bae
mov eax, dword [0x494d60]
imul eax, eax, 0x28953a62
mov dword [0x494d60], eax
mov eax, dword [esp + 0xa30]
mov ecx, eax
call fcn.00440290
cmp eax, 0
je 0x426e29
mov eax, dword [0x494ed4]
xor eax, 0x25f377f
mov dword [0x494ed4], eax
mov eax, esp
mov dword [eax + 4], 0xc
mov dword [eax], 0x3c18
call fcn.00416c70
mov dword [esp + 0xa1c], eax
mov dword [0x4945b8], 0xebe2b5fb
mov ecx, dword [esp + 0xa30]
mov eax, dword [esp + 0xa1c]
mov edx, esp
mov dword [edx], eax
lea eax, [esp + 0x1f0]
mov dword [esp + 0x108], ecx
mov ecx, eax
mov dword [esp + 0x104], eax
call fcn.0044f940
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x104]
mov dword [ecx], edx
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x108]
mov dword [esp + 0x100], eax
call fcn.00405480
sub esp, 8
mov dword [esp + 0x228], eax
mov ecx, dword [esp + 0x104]
call fcn.0043d110
mov eax, dword [0x495ec8]
not eax
add eax, 0x8095f570
and eax, 0xb8473e6f
mov ecx, dword [0x494abc]
sub ecx, eax
mov dword [0x494abc], ecx
mov eax, dword [esp + 0xa1c]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0xc
call fcn.0044ad10
mov dword [0x494d1c], 0xe5e4d986
cmp dword [esp + 0x228], 0
jne 0x426e03
mov eax, 0xa01b10a9
mov ecx, dword [0x493858]
mov edx, ecx
inc edx
mov dword [0x493858], edx
add ecx, 0x7bbc7f98
sub ecx, 0x90b63862
cmp eax, ecx
jge 0x426cea
mov eax, dword [0x495dfc]
or eax, 0xd92051aa
mov dword [0x495dfc], eax
mov dword [esp + 0x224], 1
mov eax, dword [0x493c10]
imul eax, eax, 0x82c41b48
mov dword [0x493c10], eax
mov eax, dword [esp + 0xa30]
mov ecx, esp
mov dword [ecx], 0
mov ecx, eax
mov dword [esp + 0xfc], eax
call fcn.0041d610
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xb
mov ecx, dword [esp + 0xfc]
call fcn.004356f0
sub esp, 8
mov ecx, dword [0x495944]
or ecx, 0x8c92c2a7
mov dword [0x495944], ecx
mov ecx, esp
mov dword [ecx + 4], 6
mov dword [ecx], 0x2b57
mov dword [esp + 0xf8], eax
call fcn.00416c70
mov dword [esp + 0xa18], eax
mov eax, dword [0x494054]
mov ecx, dword [0x4949e0]
dec ecx
mov dword [0x4949e0], ecx
imul ecx, ecx, 0x916b8a4e
mov edx, dword [0x495928]
add ecx, edx
cmp eax, ecx
je 0x426da5
mov dword [0x496404], 0x4b539b50
mov eax, dword [esp + 0xa18]
mov ecx, esp
mov dword [ecx], eax
lea ecx, [esp + 0x65c]
call fcn.0043a2b0
sub esp, 4
mov ecx, dword [0x494ad8]
dec ecx
mov dword [0x494ad8], ecx
mov edx, dword [0x4944c4]
imul edx, ecx
mov dword [0x4944c4], edx
mov ecx, dword [esp + 0xa18]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], 6
mov dword [esp + 0xf4], eax
call fcn.0044ad10
mov dword [0x494a4c], 0xb7b46dd8
mov ax, word [0x493256]
movsx ecx, ax
sar ecx, 9
add ecx, 0x9bd4bb44
and ecx, 0x33eca614
mov edx, dword [0x494730]
sub edx, ecx
mov dword [0x494730], edx
mov eax, 0x7bdc39b2
mov ecx, dword [0x493dc4]
mov edx, 0x49f999bd
sub edx, ecx
mov ecx, dword [0x4937d4]
xor edx, ecx
mov ecx, dword [0x495064]
add ecx, edx
mov dword [0x495064], ecx
mov ecx, esp
lea edx, [esp + 0x689]
mov dword [ecx], edx
lea ecx, [esp + 0x1dc]
mov dword [esp + 0xf0], ecx
mov dword [esp + 0xec], eax
call fcn.0041b790
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xf0]
mov dword [ecx], edx
lea ecx, [esp + 0x65c]
mov dword [esp + 0xe8], eax
call fcn.0043a840
sub esp, 4
mov ecx, dword [esp + 0xf0]
mov dword [esp + 0xe4], eax
call fcn.0043d120
mov eax, dword [0x49385c]
and eax, 0xa0e0d85c
or eax, 0xb671e7eb
mov ecx, dword [esp + 0xec]
cmp ecx, eax
jg 0x426ee3
mov ax, word [0x493496]
mov cx, ax
xor ecx, 0x1683
mov ax, cx
mov word [0x493496], ax
mov eax, esp
mov dword [eax + 4], 0x32
mov dword [eax], 0xa88
call fcn.00416c70
mov dword [esp + 0xa14], eax
mov eax, dword [0x495a9c]
or eax, 0xc0ed4138
mov ecx, dword [0x4956e0]
sub ecx, eax
mov dword [0x4956e0], ecx
mov eax, dword [esp + 0xa14]
mov ecx, esp
mov dword [ecx], eax
lea eax, [esp + 0x1c8]
mov ecx, eax
mov dword [esp + 0xe0], eax
call fcn.0041b790
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xe0]
mov dword [ecx], edx
lea ecx, [esp + 0x65c]
mov dword [esp + 0xdc], eax
call fcn.0043a840
sub esp, 4
mov ecx, dword [esp + 0xe0]
mov dword [esp + 0xd8], eax
call fcn.0043d120
mov eax, dword [0x4961d0]
shl eax, 7
add eax, 0x8412f6a0
mov ecx, dword [0x493734]
imul ecx, eax
mov dword [0x493734], ecx
mov eax, dword [esp + 0xa14]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0x32
call fcn.0044ad10
mov si, word [0x491d84]
movsx eax, si
sar eax, 4
imul eax, eax, 0x9e442325
xor eax, 0x36cfe0f5
cmp eax, 0xbe545fd2
jne 0x426fcd
mov dword [0x493e70], 0xfbb7637f
mov eax, esp
lea ecx, [esp + 0x8ae]
mov dword [eax], ecx
lea eax, [esp + 0x1b4]
mov ecx, eax
mov dword [esp + 0xd4], eax
call fcn.0041b790
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xd4]
mov dword [ecx], edx
lea ecx, [esp + 0x65c]
mov dword [esp + 0xd0], eax
call fcn.0043a840
sub esp, 4
mov ecx, dword [esp + 0xd4]
mov dword [esp + 0xcc], eax
call fcn.0043d120
mov eax, dword [0x494e90]
shl eax, 6
add eax, 0x95ae598c
and eax, 0xd0625e88
mov ecx, dword [0x49657c]
xor ecx, eax
mov dword [0x49657c], ecx
cmp dword [esp + 0x224], 0
je 0x427290
mov eax, 0x52d0df9a
mov cx, word [0x4932ea]
mov dx, cx
imul edx, edx, 0x918704b0
mov cx, dx
mov word [0x4932ea], cx
mov edx, esp
mov dword [edx + 4], 0x44
mov dword [edx], 0x35d4
mov dword [esp + 0xc8], eax
call fcn.00416c70
mov dword [esp + 0xa10], eax
mov eax, dword [0x496524]
or eax, 0x742672ed
mov dword [0x496524], eax
mov eax, dword [esp + 0xa10]
mov edx, esp
mov dword [edx], eax
lea eax, [esp + 0x1a0]
mov ecx, eax
mov dword [esp + 0xc4], eax
call fcn.0041b790
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xc4]
mov dword [ecx], edx
lea ecx, [esp + 0x65c]
mov dword [esp + 0xc0], eax
call fcn.0043a840
sub esp, 4
mov ecx, dword [esp + 0xc4]
mov dword [esp + 0xbc], eax
call fcn.0043d120
mov si, word [0x4923b6]
mov ax, si
or eax, 0xfb26
mov si, ax
mov word [0x4923b6], si
mov eax, esp
mov dword [eax + 4], 3
mov dword [eax], 0x7a9
call fcn.00416c70
mov dword [esp + 0xa0c], eax
mov word [0x4928ea], 0xcea5
mov eax, dword [esp + 0xa10]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0x44
call fcn.0044ad10
mov eax, dword [0x494988]
add eax, 0xce6a8784
mov dword [0x494988], eax
mov ecx, dword [esp + 0xa30]
call fcn.00440290
mov ecx, dword [esp + 0xa0c]
mov edx, esp
mov dword [edx + 8], eax
mov dword [edx + 4], ecx
lea eax, [esp + 0x237]
mov dword [edx], eax
call fcn.00455c6b
mov ecx, dword [0x494278]
and ecx, 0xed4e521d
mov edx, dword [esp + 0xc8]
cmp edx, ecx
mov dword [esp + 0xb8], eax
jle 0x4271c8
mov eax, dword [0x495abc]
sar eax, 4
imul eax, eax, 0xa43407c
xor eax, 0x7eb69455
mov ecx, dword [0x4945ac]
and ecx, eax
mov dword [0x4945ac], ecx
mov eax, dword [esp + 0xa0c]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 3
call fcn.0044ad10
mov eax, dword [0x495484]
shl eax, 9
mov ecx, dword [0x4964f4]
sub eax, ecx
add eax, 0xd8073c28
mov dx, word [0x492e06]
movsx ecx, dx
imul ecx, ecx, 0xf87b259
mov esi, dword [0x494224]
mov edi, esi
dec edi
mov dword [0x494224], edi
add ecx, esi
cmp eax, ecx
jge 0x427226
mov word [0x4924dc], 0x9f2b
mov eax, esp
lea ecx, [esp + 0x237]
mov dword [eax], ecx
lea eax, [esp + 0x18c]
mov ecx, eax
mov dword [esp + 0xb4], eax
call fcn.0041b790
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xb4]
mov dword [ecx], edx
lea ecx, [esp + 0x65c]
mov dword [esp + 0xb0], eax
call fcn.0043a840
sub esp, 4
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0xac], eax
call fcn.0043d120
mov eax, dword [0x495018]
mov ecx, dword [0x496540]
and ecx, eax
mov dword [0x496540], ecx
mov ax, word [0x491f9a]
movsx ecx, ax
mov edx, dword [0x4965c8]
imul edx, ecx
shl edx, 2
mov ecx, dword [0x494280]
cmp edx, ecx
jle 0x4272d0
mov eax, dword [0x494860]
mov ecx, eax
inc ecx
mov dword [0x494860], ecx
mov ecx, dword [0x494440]
lea eax, [ecx + eax + 1]
mov dword [0x494440], eax
mov eax, 0x37fc0800
mov ecx, esp
mov dword [ecx + 4], 5
mov dword [ecx], 0x3bf9
mov dword [esp + 0xa8], eax
call fcn.00416c70
mov dword [esp + 0xa08], eax
mov eax, dword [0x495b28]
mov ecx, eax
dec ecx
mov dword [0x495b28], ecx
mov dword [0x49382c], eax
mov eax, dword [esp + 0xa08]
mov ecx, esp
mov dword [ecx], eax
lea eax, [esp + 0x178]
mov ecx, eax
mov dword [esp + 0xa4], eax
call fcn.0041b790
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xa4]
mov dword [ecx], edx
lea ecx, [esp + 0x65c]
mov dword [esp + 0xa0], eax
call fcn.0043a840
sub esp, 4
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x9c], eax
call fcn.0043d120
mov eax, dword [0x493a24]
mov si, word [0x4922b8]
movsx ecx, si
imul eax, ecx
sub eax, 0xaaf082df
mov ecx, dword [esp + 0xa8]
cmp ecx, eax
je 0x427396
mov eax, dword [0x495844]
xor eax, 0xfbefee6d
mov dword [0x495844], eax
mov eax, 0x8270bc
mov ecx, dword [esp + 0xa08]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], 5
mov dword [esp + 0x98], eax
call fcn.0044ad10
mov eax, dword [0x495384]
mov ecx, eax
dec ecx
mov dword [0x495384], ecx
xor eax, 0x914dacf9
or eax, 0xe9bd25f8
mov ecx, dword [esp + 0x98]
cmp ecx, eax
je 0x4273fd
mov ax, word [0x493124]
mov cx, ax
add ecx, 0xe5177d0
mov ax, cx
mov word [0x493124], ax
jmp 0x427415
mov ax, word [0x492c58]
mov cx, ax
add ecx, 0xa0b763cf
mov ax, cx
mov word [0x492c58], ax
cmp dword [esp + 0x224], 0
je 0x4274b1
mov eax, 0xf54c1093
mov cx, word [0x492254]
mov dx, cx
dec edx
mov cx, dx
mov word [0x492254], cx
movsx edx, cx
mov esi, dword [0x496510]
add edx, esi
cmp eax, edx
jge 0x427474
mov eax, dword [0x49577c]
mov ecx, dword [0x495168]
mov edx, ecx
dec edx
mov dword [0x495168], edx
add eax, ecx
mov ecx, dword [0x4960f4]
sub ecx, eax
mov dword [0x4960f4], ecx
mov eax, dword [esp + 0xa30]
mov ecx, esp
mov dword [ecx], eax
lea ecx, [esp + 0x65c]
call fcn.0043a840
sub esp, 4
mov ecx, dword [0x496194]
mov edx, dword [0x494170]
or ecx, edx
mov edx, dword [0x495ad8]
add edx, ecx
mov dword [0x495ad8], edx
mov dword [esp + 0x94], eax
mov eax, dword [0x494380]
imul eax, eax, 0x6e460a00
mov cx, word [0x49263e]
movsx edx, cx
xor edx, 0xffffffff
imul edx, edx, 0x829a57f7
cmp eax, edx
jg 0x427513
mov eax, dword [0x4956a0]
mov ecx, eax
inc ecx
mov dword [0x4956a0], ecx
mov ecx, dword [0x494fa4]
inc ecx
mov dword [0x494fa4], ecx
add eax, ecx
cmp eax, 0x7a058bc0
jle 0x42750e
mov eax, dword [0x494478]
add eax, 0x731a9232
mov dword [0x494478], eax
jmp 0x427585
mov eax, 0xc4a3e5ca
mov ecx, dword [0x4955cc]
mov dx, word [0x492c80]
mov si, dx
inc esi
mov dx, si
mov word [0x492c80], dx
movsx esi, dx
and ecx, esi
mov esi, dword [0x495770]
shl esi, 5
xor ecx, esi
cmp eax, ecx
jge 0x427580
mov eax, 0x5c651686
mov cx, word [0x492174]
mov dx, cx
inc edx
mov si, dx
mov word [0x492174], si
movsx edx, cx
or edx, 0xbf0da5a0
cmp eax, edx
jne 0x42757b
jmp 0x42757b
jmp 0x427580
jmp 0x427585
mov eax, dword [0x491bac]
mov ecx, esp
lea edx, [esp + 0x8ae]
mov dword [ecx], edx
call eax
sub esp, 4
mov dword [esp + 0x230], eax
mov eax, dword [0x494ce0]
xor eax, 0x2cf68b21
mov ecx, dword [0x49614c]
and ecx, eax
mov dword [0x49614c], ecx
cmp dword [esp + 0x230], 0
jne 0x4275e4
mov eax, dword [0x496564]
or eax, 0x70919244
mov ecx, dword [0x494128]
and ecx, eax
mov dword [0x494128], ecx
jmp 0x428919
mov eax, dword [0x495474]
and eax, 0x1404a290
mov dword [0x495474], eax
xorps xmm0, xmm0
movaps xmmword [esp + 0x670], xmm0
mov eax, dword [0x496458]
xor eax, 0x1238b6fb
mov dword [0x494d28], eax
mov word [esp + 0x670], 2
mov cx, word [0x49361c]
mov ax, cx
or eax, 0x1484
mov cx, ax
mov word [0x49361c], cx
mov eax, dword [0x491bb4]
mov edx, dword [0x491bb8]
mov esi, dword [esp + 0x230]
mov esi, dword [esi + 0xc]
mov esi, dword [esi]
mov esi, dword [esi]
mov dword [esp + 0x174], esi
mov esi, dword [esp + 0x174]
mov edi, esp
mov dword [edi], esi
mov dword [esp + 0x90], eax
call edx
sub esp, 4
mov edx, esp
mov dword [edx], eax
mov eax, dword [esp + 0x90]
call eax
sub esp, 4
mov dword [esp + 0x674], eax
mov eax, dword [0x495848]
mov edx, dword [0x493c30]
xor edx, 0xd79ace4d
cmp eax, edx
jge 0x4276ce
mov eax, dword [0x494798]
mov ecx, eax
inc ecx
mov dword [0x494798], ecx
mov dx, word [0x49216e]
movsx ecx, dx
or eax, ecx
mov cx, dx
inc ecx
mov dx, cx
mov word [0x49216e], dx
or eax, 0xbbc8a979
mov dword [0x493ee4], eax
jmp 0x4276fc
mov eax, dword [0x494718]
mov ecx, eax
dec ecx
mov dword [0x494718], ecx
mov dx, word [0x493634]
movsx ecx, dx
imul eax, ecx
add eax, 0xba9683b5
mov ecx, dword [0x495680]
or ecx, eax
mov dword [0x495680], ecx
mov eax, dword [0x491bb0]
movzx ecx, word [esp + 0x208]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov word [esp + 0x672], ax
mov ecx, dword [0x493758]
add ecx, 0x97ff66d0
mov dword [0x493758], ecx
cmp dword [esp + 0xa34], 0
je 0x427919
mov eax, 0xc189d79b
mov ecx, dword [0x496844]
mov edx, dword [0x4941f0]
mov esi, edx
dec esi
mov dword [0x4941f0], esi
and edx, 0x39d0a9f4
xor ecx, edx
mov edx, dword [0x4962d0]
add edx, ecx
mov dword [0x4962d0], edx
mov ecx, dword [esp + 0xa34]
mov edx, 0x10624dd3
mov dword [esp + 0x8c], eax
mov eax, ecx
mul edx
shr edx, 6
mov eax, esp
mov dword [eax + 4], edx
lea ecx, [esp + 0x670]
mov dword [eax], ecx
call fcn.00418a40
mov dword [esp + 0x684], eax
mov eax, dword [0x495740]
mov ecx, dword [0x4948d4]
xor eax, ecx
or eax, 0x478f3283
mov ecx, dword [esp + 0x8c]
cmp ecx, eax
jge 0x4277eb
mov ax, word [0x49329c]
mov cx, ax
inc ecx
mov dx, cx
mov word [0x49329c], dx
movsx ecx, ax
neg ecx
mov esi, dword [0x4947a4]
lea ecx, [esi + ecx - 0x710165e9]
mov dword [0x4947a4], ecx
cmp dword [esp + 0x684], 0
jge 0x42784e
mov eax, 0x75f0b9d1
mov cx, word [0x492e78]
mov dx, cx
inc edx
mov cx, dx
mov word [0x492e78], cx
movsx edx, cx
add edx, 0x2adc839a
and edx, 0x810fbc4a
cmp eax, edx
jle 0x427849
mov eax, dword [0x496718]
inc eax
mov dword [0x496718], eax
mov ecx, dword [0x494538]
imul eax, ecx
imul eax, eax, 0xed698fcb
mov dword [0x494538], eax
jmp 0x428919
mov dword [0x4944b8], 0x20418001
mov eax, dword [0x491bcc]
mov ecx, dword [esp + 0x684]
mov edx, esp
lea esi, [esp + 0xa34]
mov dword [edx + 0xc], esi
mov dword [edx], ecx
mov dword [edx + 0x10], 4
mov dword [edx + 8], 0x1006
mov dword [edx + 4], 0xffff
mov dword [esp + 0x88], esi
call eax
sub esp, 0x14
mov di, word [0x492c1e]
mov cx, di
inc ecx
mov bx, cx
mov word [0x492c1e], bx
movsx ecx, di
add ecx, 0x1f222f9f
mov edx, dword [0x494cf8]
and edx, ecx
mov dword [0x494cf8], edx
mov ecx, dword [0x491bcc]
mov edx, dword [esp + 0x684]
mov esi, esp
mov edi, dword [esp + 0x88]
mov dword [esi + 0xc], edi
mov dword [esi], edx
mov dword [esi + 0x10], 4
mov dword [esi + 8], 0x1005
mov dword [esi + 4], 0xffff
mov dword [esp + 0x84], eax
call ecx
sub esp, 0x14
mov ecx, dword [0x494b94]
imul ecx, ecx, 0xe068446a
mov dword [0x494b94], ecx
mov dword [esp + 0x80], eax
jmp 0x427ad0
mov eax, dword [0x493e3c]
mov ecx, eax
inc ecx
mov dword [0x493e3c], ecx
sub eax, 0xdcea41b0
and eax, 0x67c2bc42
cmp eax, 0xdaffff5f
jg 0x427999
mov eax, dword [0x49518c]
not eax
add eax, 0x289712bc
or eax, 0x6fb759cc
mov ecx, dword [0x49594c]
inc ecx
mov dword [0x49594c], ecx
and ecx, 0x45ab6d37
cmp eax, ecx
jl 0x427994
mov eax, dword [0x494bac]
dec eax
mov dword [0x494bac], eax
mov ecx, dword [0x494990]
mov edx, ecx
dec edx
mov dword [0x494990], edx
imul ecx, ecx, 0x97684904
xor eax, ecx
mov si, ax
mov word [0x4934e0], si
jmp 0x427999
mov eax, dword [0x491bd0]
mov ecx, esp
mov dword [ecx + 8], 6
mov dword [ecx + 4], 1
mov dword [ecx], 2
call eax
sub esp, 0xc
mov dword [esp + 0x684], eax
mov dword [0x494dcc], 0xb07df79e
cmp dword [esp + 0x684], 0xffffffff
jne 0x4279ed
mov eax, dword [0x4960c0]
imul eax, eax, 0xb5fdab2f
mov dword [0x4960c0], eax
jmp 0x428919
mov eax, 0xb489ae0c
mov ecx, dword [0x495dcc]
and ecx, 0x6d9049d6
mov edx, dword [0x495000]
and ecx, edx
cmp eax, ecx
jg 0x427a22
mov eax, dword [0x4953a0]
and eax, 0xb9fffd73
mov dword [0x4953a0], eax
jmp 0x427a4f
mov eax, dword [0x4952d4]
xor eax, 0xffffffff
and eax, 0x44dcb5e5
cmp eax, 0x94ff5ac2
jge 0x427a4a
mov eax, dword [0x4945f0]
imul eax, eax, 0x46024182
mov dword [0x4945f0], eax
jmp 0x427a4f
lea eax, [esp + 0x670]
mov ecx, dword [0x491ba8]
mov edx, dword [esp + 0x684]
mov esi, esp
mov dword [esi + 4], eax
mov dword [esi], edx
mov dword [esi + 8], 0x10
call ecx
sub esp, 0xc
cmp eax, 0xffffffff
jne 0x427ac0
mov eax, 0x6e8ba1b8
mov ecx, dword [0x4941dc]
and ecx, 0x3cd58129
cmp eax, ecx
jg 0x427abb
mov eax, dword [0x494690]
mov cx, word [0x4927aa]
movsx edx, cx
shl edx, 2
xor eax, edx
mov edx, dword [0x494b08]
imul edx, eax
mov dword [0x494b08], edx
jmp 0x4288c3
mov eax, dword [0x494a60]
imul eax, eax, 0x4309e8c8
mov dword [0x494a60], eax
lea eax, [esp + 0x65c]
mov ecx, dword [0x493ae0]
mov edx, ecx
dec edx
mov dword [0x493ae0], edx
add ecx, 0x59d58c95
mov si, word [0x493280]
mov dx, si
and ecx, edx
and ecx, 0x30bd
mov si, cx
mov word [0x493280], si
mov ecx, dword [0x491bc8]
lea edx, [esp + 0x65c]
mov dword [esp + 0x7c], ecx
mov ecx, edx
mov dword [esp + 0x78], eax
mov dword [esp + 0x74], edx
call fcn.00440290
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x70], eax
call fcn.00439b80
mov ecx, dword [esp + 0x684]
mov edx, esp
mov edi, dword [esp + 0x70]
mov dword [edx + 8], edi
mov dword [edx + 4], eax
mov dword [edx], ecx
mov dword [edx + 0xc], 0
mov eax, dword [esp + 0x7c]
call eax
sub esp, 0x10
mov dword [esp + 0x680], eax
mov si, word [0x492d1e]
mov ax, si
xor eax, 0x614e
mov si, ax
mov word [0x492d1e], si
mov eax, dword [esp + 0x680]
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x6c], eax
call fcn.00440290
mov ecx, dword [esp + 0x6c]
cmp ecx, eax
jae 0x427bfb
mov eax, dword [0x495e54]
mov ecx, 0xb8635a3b
sub ecx, eax
mov eax, dword [0x49462c]
sub ecx, eax
mov eax, dword [0x495660]
shl eax, 5
xor eax, 0x9436e424
cmp ecx, eax
jne 0x427be7
mov eax, dword [0x49514c]
mov ecx, dword [0x493824]
mov edx, ecx
dec edx
mov dword [0x493824], edx
or eax, ecx
or eax, 0x95adb707
mov dword [0x4942d8], eax
jmp 0x427bf6
mov eax, dword [0x495e8c]
add eax, 0xf65ee9f6
mov dword [0x49650c], eax
jmp 0x4288c3
mov eax, dword [0x496818]
dec eax
mov dword [0x496818], eax
mov ecx, dword [0x495e08]
mov edx, ecx
dec edx
mov dword [0x495e08], edx
sub eax, ecx
add eax, 0xa1708472
mov ecx, dword [0x4942a8]
or ecx, eax
mov dword [0x4942a8], ecx
mov ecx, dword [esp + 0xa30]
call fcn.00433650
mov eax, dword [0x493a94]
or eax, 0xb9d1689d
mov dword [0x49641c], eax
mov eax, dword [0x49634c]
not eax
imul eax, eax, 0xbace2c54
mov cx, word [0x49355a]
mov dx, cx
inc edx
mov cx, dx
mov word [0x49355a], cx
sub eax, edx
mov cx, word [0x492208]
mov dx, cx
imul edx, eax
mov cx, dx
mov word [0x492208], cx
mov eax, dword [0x491bc0]
mov edx, dword [esp + 0x684]
mov esi, esp
lea edi, [esp + 0x237]
mov dword [esi + 4], edi
mov dword [esi], edx
mov dword [esi + 0xc], 0
mov dword [esi + 8], 0x400
call eax
sub esp, 0x10
mov dword [esp + 0x680], eax
mov cx, word [0x492796]
movsx eax, cx
add eax, 0x1e1c4081
mov edx, dword [0x495d9c]
add edx, 0xbd09e76d
cmp eax, edx
je 0x427ceb
mov eax, dword [0x494b84]
xor eax, 0x7317673d
mov dword [0x494b84], eax
jmp 0x427d15
mov eax, 0xb5bdcfb7
mov ecx, dword [0x495ef4]
shl ecx, 6
cmp eax, ecx
jle 0x427d10
mov eax, dword [0x495990]
add eax, 0xffb17fb2
mov dword [0x495990], eax
jmp 0x427d15
cmp dword [esp + 0x680], 0
jle 0x427d46
mov eax, dword [esp + 0x218]
mov ecx, dword [esp + 0x21c]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], eax
call fcn.0044f4f0
cmp eax, 0
je 0x427d5a
mov eax, dword [0x494168]
add eax, 0x42000401
mov dword [0x494168], eax
jmp 0x4286fb
mov eax, dword [0x494198]
mov ecx, 0x2289200f
sub ecx, eax
mov eax, dword [0x4939a4]
xor eax, 0x7834df6
cmp ecx, eax
jge 0x427d8c
mov eax, dword [0x493960]
or eax, 0xeb45740a
mov dword [0x493960], eax
jmp 0x427da4
mov eax, dword [0x495be0]
or eax, 0xe1c67844
mov ecx, dword [0x493d3c]
and ecx, eax
mov dword [0x493d3c], ecx
mov eax, dword [esp + 0xa30]
mov ecx, eax
mov dword [esp + 0x68], eax
call fcn.00440290
mov ecx, dword [esp + 0x680]
add eax, ecx
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x68]
call fcn.0044a450
sub esp, 8
mov eax, dword [0x494d98]
sar eax, 0xa
mov ecx, dword [0x493938]
sar ecx, 4
add eax, ecx
sub eax, 0x85cd367
cmp eax, 0xb290c924
jge 0x427e23
mov ax, word [0x49273a]
mov cx, ax
inc ecx
mov ax, cx
mov word [0x49273a], ax
movsx ecx, ax
mov edx, dword [0x4959cc]
and ecx, edx
and ecx, 0xc139b50c
mov dword [0x4959cc], ecx
mov eax, dword [esp + 0xa30]
mov ecx, eax
call fcn.004164c0
cmp eax, 0
jne 0x427e4f
mov eax, dword [0x4958c8]
imul eax, eax, 0xf5ff7fff
mov dword [0x4958c8], eax
jmp 0x4286fb
mov eax, dword [0x493f64]
xor eax, 0x2fff90ef
mov dword [0x493f64], eax
mov ecx, dword [esp + 0xa30]
mov eax, dword [esp + 0x680]
mov edx, esp
mov dword [edx + 4], eax
lea eax, [esp + 0x237]
mov dword [edx], eax
call fcn.00413580
sub esp, 8
mov ecx, dword [0x4965d8]
xor ecx, 0xfffefeff
mov dword [0x4965d8], ecx
cmp dword [esp + 0x210], 0
mov dword [esp + 0x64], eax
jge 0x428299
mov eax, 0x36c33e7b
mov ecx, dword [0x493cc4]
dec ecx
mov dword [0x493cc4], ecx
sub eax, ecx
cmp eax, 0x25035a6c
jge 0x427ee2
mov ax, word [0x493266]
mov cx, ax
add ecx, 0xf66325ed
mov ax, cx
mov word [0x493266], ax
jmp 0x427f03
mov eax, dword [0x4938a0]
mov ecx, dword [0x493a28]
mov edx, ecx
dec edx
mov dword [0x493a28], edx
add ecx, 0x4f34d959
and eax, ecx
mov dword [0x494a74], eax
mov eax, esp
mov dword [eax + 4], 5
mov dword [eax], 0x3bf9
call fcn.00416c70
mov dword [esp + 0xa04], eax
mov cx, word [0x492bd2]
mov ax, cx
add eax, 0xcb48abbf
mov cx, ax
mov word [0x492bd2], cx
mov ecx, dword [esp + 0xa30]
mov eax, dword [esp + 0xa04]
mov edx, esp
mov dword [edx], eax
lea eax, [esp + 0x160]
mov dword [esp + 0x60], ecx
mov ecx, eax
mov dword [esp + 0x5c], eax
call fcn.0044f940
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x5c]
mov dword [ecx], edx
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x58], eax
call fcn.00405480
sub esp, 8
mov dword [esp + 0x210], eax
mov ecx, dword [esp + 0x5c]
call fcn.0043d110
mov eax, dword [0x4968f0]
shl eax, 6
cmp eax, 0xcea7495b
jge 0x427fb3
mov eax, dword [0x4939e8]
or eax, 0xeeb686c4
mov dword [0x4939e8], eax
mov eax, dword [esp + 0xa04]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 5
call fcn.0044ad10
mov eax, dword [0x4937a8]
add eax, 0xa8fe9e74
mov dword [0x4937a8], eax
cmp dword [esp + 0x210], 0
jl 0x42828a
mov eax, dword [0x49614c]
shl eax, 0xa
cmp eax, 0x35adffee
jne 0x428012
mov ax, word [0x493168]
mov cx, ax
imul ecx, ecx, 0xb2f60814
mov ax, cx
mov word [0x493168], ax
mov eax, 0xbdaffbff
mov ecx, dword [esp + 0x210]
add ecx, 4
mov dword [esp + 0x210], ecx
mov dx, word [0x4927aa]
movsx ecx, dx
cmp eax, ecx
jl 0x428087
mov eax, 0x2725ebdd
mov cx, word [0x4920f4]
movsx edx, cx
or edx, 0x10dd7f4b
cmp eax, edx
je 0x42806b
mov ax, word [0x492982]
movsx ecx, ax
mov dword [0x4952f4], ecx
jmp 0x428082
mov eax, dword [0x493aec]
mov ecx, dword [0x494170]
and eax, ecx
and eax, 0xa5075994
mov dword [0x494170], eax
jmp 0x42809e
mov eax, dword [0x4955c0]
mov ecx, dword [0x493b1c]
xor eax, ecx
xor eax, 0xf382452e
mov dword [0x493b1c], eax
mov eax, 0xd0e81539
mov ecx, dword [esp + 0xa30]
mov edx, esp
mov dword [edx], ecx
mov dword [esp + 0x54], eax
call fcn.0044e370
mov dword [esp + 0x20c], eax
mov eax, dword [0x49416c]
sub eax, 0x5189bad0
add eax, 0x9c4999c5
mov ecx, dword [esp + 0x54]
cmp ecx, eax
jle 0x4280e8
mov eax, dword [0x495c68]
or eax, 0x4005ac6f
mov dword [0x495c68], eax
cmp dword [esp + 0x20c], 0
jge 0x42826d
mov dword [0x49457c], 0x56e49ad9
mov eax, esp
mov dword [eax + 4], 0xb
mov dword [eax], 0x3c97
call fcn.00416c70
mov dword [esp + 0xa00], eax
mov dword [0x493948], 0x2b643d09
mov ecx, dword [esp + 0xa30]
mov eax, dword [esp + 0xa00]
mov edx, esp
mov dword [edx], eax
lea eax, [esp + 0x14c]
mov dword [esp + 0x50], ecx
mov ecx, eax
mov dword [esp + 0x4c], eax
call fcn.0044f940
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x4c]
mov dword [ecx], edx
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x48], eax
call fcn.00405480
sub esp, 8
mov dword [esp + 0x680], eax
mov ecx, dword [esp + 0x4c]
call fcn.0043d110
mov eax, dword [0x4956b0]
sar eax, 6
mov ecx, dword [0x4942bc]
inc ecx
mov dword [0x4942bc], ecx
and ecx, 0xf3002395
xor eax, ecx
mov ecx, dword [0x494720]
and ecx, eax
mov dword [0x494720], ecx
mov eax, dword [esp + 0xa00]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0xb
call fcn.0044ad10
mov eax, dword [0x4938c0]
imul eax, eax, 0x8b9fdd3b
mov dword [0x4938c0], eax
cmp dword [esp + 0x680], 0
jl 0x42820f
mov ax, word [0x492db0]
mov cx, ax
dec ecx
mov ax, cx
mov word [0x492db0], ax
movsx ecx, ax
mov edx, 0xd7f1477c
sub edx, ecx
mov ecx, dword [0x495874]
sub ecx, edx
mov dword [0x495874], ecx
jmp 0x4286fb
mov eax, 0xf7bdbbef
mov cx, word [0x493330]
movsx edx, cx
sar edx, 0xa
mov cx, word [0x492570]
movsx esi, cx
sub edx, esi
cmp eax, edx
jg 0x428268
mov eax, 0x2028200
mov ecx, dword [0x4941f8]
and ecx, 0xab82c778
and ecx, 0x8fe434c4
cmp eax, ecx
jne 0x428263
mov eax, dword [0x4951f0]
xor eax, 0xf29231ec
mov dword [0x4951f0], eax
jmp 0x428268
jmp 0x42826d
mov eax, dword [0x494560]
imul eax, eax, 0xfa83c175
mov ecx, dword [0x495a60]
and eax, ecx
and eax, 0x3e32ceca
mov dword [0x495a60], eax
mov eax, dword [0x494e60]
xor eax, 0x2dc1b277
mov dword [0x494e60], eax
mov dword [0x495dec], 0xf3d85478
cmp dword [esp + 0x20c], 0
jl 0x428312
mov dword [0x495c34], 0x1806c00
mov eax, dword [esp + 0xa30]
mov ecx, eax
call fcn.00440290
sub eax, dword [esp + 0x210]
cmp eax, dword [esp + 0x20c]
jb 0x428303
mov eax, dword [0x493c74]
imul eax, eax, 0xc5cd59ea
mov cx, word [0x4923d8]
mov dx, cx
xor edx, eax
mov cx, dx
mov word [0x4923d8], cx
jmp 0x4286fb
mov eax, dword [0x494a30]
xor eax, 0xc64e959c
mov dword [0x494a30], eax
mov eax, dword [0x49632c]
imul eax, eax, 0xf828f704
mov ecx, dword [0x4965dc]
mov edx, ecx
dec edx
mov dword [0x4965dc], edx
or eax, ecx
mov si, word [0x4933f8]
mov cx, si
or ecx, eax
mov si, cx
mov word [0x4933f8], si
cmp dword [esp + 0xa38], 0
je 0x42864f
test byte [esp + 0x207], 1
jne 0x42864f
mov eax, dword [0x495554]
add eax, 0xaf9f39da
mov dword [0x495554], eax
mov eax, dword [esp + 0xa30]
mov ecx, eax
call fcn.00440290
cmp eax, 0x4000
jbe 0x42862e
mov eax, dword [0x4938bc]
mov ecx, eax
inc ecx
mov dword [0x4938bc], ecx
mov ecx, 0xa78afd3b
sub ecx, eax
mov dword [0x494ae8], ecx
mov byte [esp + 0x207], 1
mov eax, dword [0x4966c0]
mov dx, word [0x491e8e]
mov cx, dx
and eax, ecx
mov dx, word [0x492bfe]
mov cx, dx
and ecx, eax
mov dx, cx
mov word [0x492bfe], dx
mov eax, dword [esp + 0xa30]
mov ecx, esp
mov dword [ecx], eax
lea ecx, [esp + 0x138]
call fcn.0040d760
sub esp, 4
mov ecx, dword [0x49543c]
dec ecx
mov dword [0x49543c], ecx
or ecx, 0x10f83400
mov esi, dword [0x4947c8]
add esi, ecx
mov dword [0x4947c8], esi
cmp dword [esp + 0x210], 0
mov dword [esp + 0x44], eax
jl 0x4284b3
mov eax, dword [0x495548]
mov ecx, eax
inc ecx
mov dword [0x495548], ecx
mov ecx, 0x7e494c04
sub ecx, eax
mov eax, dword [0x493ec0]
or ecx, eax
or ecx, 0xd5ee6df7
mov dword [0x493ec0], ecx
mov eax, dword [esp + 0x210]
mov ecx, esp
mov dword [ecx], 0
lea ecx, [esp + 0x138]
mov dword [esp + 0x40], ecx
mov dword [esp + 0x3c], eax
call fcn.0041d610
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x3c]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov ecx, dword [esp + 0x40]
call fcn.004356f0
sub esp, 8
mov ecx, dword [0x495aac]
shr ecx, 3
add ecx, 0x339a2fc4
or ecx, 0x1c1d
mov si, word [0x491e86]
mov dx, si
and edx, ecx
mov si, dx
mov word [0x491e86], si
mov dword [esp + 0x38], eax
lea eax, [esp + 0x138]
lea ecx, [esp + 0x8ae]
mov edx, dword [0x494950]
and edx, 0xaec2e2a9
mov dword [0x494950], edx
mov edx, dword [esp + 0xa38]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004179e0
cmp eax, 0
jne 0x428573
mov eax, dword [0x494cec]
mov ecx, eax
inc ecx
mov dword [0x494cec], ecx
xor eax, 0xd16d257e
mov ecx, dword [0x495e5c]
imul ecx, eax
mov dword [0x495e5c], ecx
mov dword [esp + 0x210], 0xffffffff
mov eax, dword [0x495850]
xor eax, 0x2bd0a726
cmp eax, 0xbc6fb95f
jge 0x428545
mov eax, dword [0x49672c]
imul eax, eax, 0x90f837eb
mov dword [0x49672c], eax
mov ecx, dword [esp + 0xa30]
call fcn.00433650
mov ecx, dword [0x4953bc]
imul ecx, ecx, 0x2cf24c33
mov dword [0x4953bc], ecx
mov dword [esp + 0x134], 0xd
jmp 0x4285ef
mov eax, 0x9d3ebdbe
mov ecx, dword [0x4954d4]
imul ecx, ecx, 0xcbfca11c
cmp eax, ecx
jge 0x4285e4
mov eax, 0xda6ef1d8
mov ecx, dword [0x495744]
cmp eax, ecx
jle 0x4285c7
mov ax, word [0x4933bc]
movsx ecx, ax
imul ecx, ecx, 0x99a4e500
add ecx, 0x1286c24
mov edx, dword [0x4966bc]
xor edx, ecx
mov dword [0x4966bc], edx
jmp 0x4285df
mov eax, dword [0x494d34]
mov ecx, 0x1b5748ac
sub ecx, eax
mov eax, dword [0x494f84]
sub eax, ecx
mov dword [0x494f84], eax
jmp 0x4285e4
mov dword [esp + 0x134], 0
lea ecx, [esp + 0x138]
call fcn.0043d120
mov ecx, dword [esp + 0x134]
test ecx, ecx
mov dword [esp + 0x34], ecx
je 0x428629
jmp 0x428613
mov eax, dword [esp + 0x34]
sub eax, 0xd
mov dword [esp + 0x30], eax
je 0x4286fb
jmp 0x4289f8
jmp 0x42862e
mov eax, dword [0x495bf8]
shl eax, 3
mov ecx, 0xd76cef13
sub ecx, eax
and ecx, 0x17207356
mov eax, dword [0x495cc0]
xor eax, ecx
mov dword [0x495cc0], eax
mov eax, dword [0x493d5c]
inc eax
mov dword [0x493d5c], eax
and eax, 0x872e5ccd
mov ecx, dword [0x495bdc]
or ecx, eax
mov dword [0x495bdc], ecx
cmp dword [esp + 0xa34], 0x3ace
jne 0x4286d1
mov ax, word [0x493472]
mov cx, ax
or ecx, 0xd52d
mov ax, cx
mov word [0x493472], ax
mov ecx, dword [esp + 0xa30]
call fcn.00440290
cmp eax, 0x500000
jbe 0x4286c1
mov eax, dword [0x494470]
add eax, 0xf9fef7b5
mov dword [0x494470], eax
jmp 0x4286fb
mov eax, dword [0x495004]
imul eax, eax, 0x8c38a358
mov dword [0x495004], eax
mov eax, 0x67413083
mov ecx, dword [0x495af8]
xor ecx, 0xffffffff
cmp eax, ecx
jg 0x4286f6
mov eax, dword [0x493da0]
or eax, 0xbe5e02e2
mov dword [0x493da0], eax
jmp 0x427c45
mov eax, dword [0x495230]
sar eax, 7
cmp eax, 0x84307a74
jg 0x428725
mov eax, dword [0x494ed8]
mov ecx, dword [0x496840]
lea eax, [eax + ecx + 0x75ac41cf]
mov dword [0x496840], eax
cmp dword [esp + 0x210], 0
jl 0x4287b4
mov ax, word [0x492890]
mov cx, ax
mov ax, word [0x492a5a]
mov dx, ax
xor edx, ecx
mov ax, dx
movsx ecx, ax
mov edx, dword [0x493a8c]
xor ecx, edx
xor ecx, 0xdbbb8502
mov dword [0x493a8c], ecx
mov ecx, dword [esp + 0xa30]
mov edx, dword [esp + 0x210]
mov esi, esp
mov dword [esi], 0
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x28], edx
call fcn.0041d610
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x28]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov ecx, dword [esp + 0x2c]
call fcn.004356f0
sub esp, 8
mov ecx, dword [0x49564c]
add ecx, 0x216d06fc
mov dword [0x49564c], ecx
mov dword [esp + 0x24], eax
mov eax, dword [0x4945a8]
shl eax, 0xa
add eax, 0x272d60c4
and eax, 0x3a3ac0b8
mov ecx, dword [0x495a70]
xor ecx, eax
mov dword [0x495a70], ecx
cmp dword [esp + 0xa38], 0
je 0x4288b4
test byte [esp + 0x207], 1
jne 0x4288b4
mov eax, 0xf14b09
mov ecx, dword [0x496648]
dec ecx
mov dword [0x496648], ecx
mov dx, word [0x492f60]
movsx esi, dx
and ecx, esi
cmp eax, ecx
jg 0x42882b
mov eax, dword [0x494898]
imul eax, eax, 0x2112b698
mov dword [0x494898], eax
jmp 0x42883a
mov eax, dword [0x494820]
xor eax, 0xd7b51eaa
mov dword [0x494820], eax
lea eax, [esp + 0x8ae]
mov ecx, dword [esp + 0xa38]
mov edx, dword [esp + 0xa30]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004179e0
cmp eax, 0
jne 0x4288a5
mov ax, word [0x492d10]
mov cx, ax
or ecx, 0x58e
mov ax, cx
mov word [0x492d10], ax
mov ecx, dword [esp + 0xa30]
call fcn.00433650
mov ecx, dword [0x49585c]
inc ecx
mov dword [0x49585c], ecx
and ecx, 0xfd8e755a
mov dword [0x495ba0], ecx
mov eax, dword [0x494720]
and eax, 0xe1c5a59f
mov dword [0x494720], eax
mov eax, dword [0x495398]
and eax, 0xc63d6eef
mov dword [0x495398], eax
mov eax, dword [0x491bd8]
mov ecx, dword [esp + 0x684]
mov edx, esp
mov dword [edx], ecx
mov dword [edx + 4], 2
call eax
sub esp, 8
mov ecx, dword [0x495494]
or ecx, 0xcf8f77fd
mov dword [0x495494], ecx
mov ecx, dword [0x491ba4]
mov edx, dword [esp + 0x684]
mov esi, esp
mov dword [esi], edx
mov dword [esp + 0x20], eax
call ecx
sub esp, 4
mov dword [0x494a2c], 0x2504b40e
mov dword [esp + 0x1c], eax
mov eax, esp
lea ecx, [esp + 0x8ae]
mov dword [eax], ecx
mov dword [eax + 4], 0xa5
call fcn.004199c0
mov dx, word [0x4924c4]
mov ax, dx
xor eax, 0x5400
mov dx, ax
mov word [0x4924c4], dx
mov eax, esp
lea ecx, [esp + 0x953]
mov dword [eax], ecx
mov dword [eax + 4], 0xa5
call fcn.004199c0
mov eax, dword [0x4950e4]
add eax, 0x1c148048
mov dword [0x4950e4], eax
mov eax, esp
lea ecx, [esp + 0x689]
mov dword [eax], ecx
mov dword [eax + 4], 0x225
call fcn.004199c0
mov eax, dword [0x4947f0]
mov ecx, eax
dec ecx
mov dword [0x4947f0], ecx
add eax, 0xf25e2190
mov ecx, dword [0x496508]
and ecx, eax
mov dword [0x496508], ecx
mov eax, esp
lea ecx, [esp + 0x237]
mov dword [eax], ecx
mov dword [eax + 4], 0x425
call fcn.004199c0
mov eax, dword [0x4946a0]
imul eax, eax, 0x4fab1256
mov dx, word [0x49356a]
mov cx, dx
and eax, ecx
and eax, 0xf586
mov dx, ax
mov word [0x49356a], dx
lea ecx, [esp + 0x65c]
call fcn.0043d120
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
int3