Function at 0x4a3db0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x110]
cmp eax, dword [ecx + 8]
jbe 0x4a6a50
sub esp, 0x190
xor ebx, ebx
mov dword [esp + 0x1ac], ebx
mov dword [esp + 0x1b0], ebx
mov dword [esp + 0x1b4], ebx
mov dword [esp + 0x1b8], ebx
xor ebx, ebx
mov dword [esp + 0x1bc], ebx
mov dword [esp + 0x1c0], ebx
mov ebx, dword [esp + 0x194]
mov dword [esp + 0x150], ebx
mov ebx, dword [esp + 0x198]
mov dword [esp + 0x154], ebx
mov ebx, dword [esp + 0x19c]
mov dword [esp + 0x120], ebx
mov ebx, dword [esp + 0x1a0]
mov dword [esp + 0x124], ebx
xor ebx, ebx
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xdc], ebx
mov byte [esp + 0x33], 0
mov byte [esp + 0x32], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x60], 1
mov dword [esp + 0x78], 1
mov dword [esp + 0x74], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x54], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x34], 0xffffffff
xor ebx, ebx
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], ebx
xor ebx, ebx
mov dword [esp + 0x118], ebx
mov dword [esp + 0x11c], ebx
mov ebx, dword [esp + 0x194]
mov dword [esp], ebx
mov ebx, dword [esp + 0x198]
mov dword [esp + 4], ebx
call fcn.0049f630
mov eax, dword [esp + 0x198]
mov esi, dword [esp + 8]
mov ebp, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x3c], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0xa0], ebx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xa4], ecx
mov edi, eax
sub eax, ecx
cmp eax, edi
ja 0x4a6a49
cmp ebp, eax
ja 0x4a6a49
mov edx, eax
sub edx, ebp
mov eax, dword [esp + 0x194]
cmp edx, 0
je 0x4a3f2b
add eax, ebp
mov dword [esp + 0xac], edx
mov dword [esp + 0xa8], eax
mov ebx, dword [esp + 0x19c]
mov dword [esp], ebx
mov ebx, dword [esp + 0x1a0]
mov dword [esp + 4], ebx
mov dword [esp + 0xe0], esi
mov dword [esp + 8], esi
mov dword [esp + 0xe4], ebp
mov dword [esp + 0xc], ebp
call fcn.004a3b40
mov edi, dword [esp + 0x3c]
mov esi, dword [esp + 0x10]
mov dword [esp + 0x19c], esi
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x1a0], ecx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x11c], ebx
mov ebx, dword [esp + 0x118]
cmp ebx, 0
je 0x4a40fa
mov dword [esp], 0x5e0420
call fcn.0040fc90
mov eax, dword [esp + 4]
mov dword [esp + 0x8c], eax
mov ebp, dword [esp + 0x154]
mov dword [eax + 4], ebp
mov ebp, dword [esp + 0x150]
cmp byte [0x6dbe18], 0
jne 0x4a40e2
mov dword [eax], ebp
mov ebp, dword [esp + 0x124]
mov dword [eax + 0xc], ebp
mov ebp, dword [esp + 0x120]
cmp byte [0x6dbe18], 0
jne 0x4a40c7
mov dword [eax + 8], ebp
mov ebp, dword [esp + 0xe4]
mov dword [eax + 0x14], ebp
mov ebp, dword [esp + 0xe0]
cmp byte [0x6dbe18], 0
jne 0x4a40ac
mov dword [eax + 0x10], ebp
mov ebp, dword [esp + 0x1a0]
mov dword [eax + 0x1c], ebp
mov ebp, dword [esp + 0x19c]
cmp byte [0x6dbe18], 0
jne 0x4a4094
mov dword [eax + 0x18], ebp
xor ebp, ebp
mov dword [eax + 0x20], ebp
mov dword [eax + 0x24], ebp
mov ebx, dword [0x61c360]
mov dword [esp + 0x1ac], ebx
mov ebx, dword [0x61c364]
mov dword [esp + 0x1b0], ebx
mov ebx, dword [0x61c368]
mov dword [esp + 0x1b4], ebx
mov ebx, dword [0x61c36c]
mov dword [esp + 0x1b8], ebx
mov dword [esp + 0x1c0], eax
mov dword [esp + 0x1bc], 0x6b2d90
add esp, 0x190
ret
lea esi, [eax + 0x18]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.00410660
mov eax, dword [esp + 0x8c]
jmp 0x4a403f
lea esi, [eax + 0x10]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.00410660
mov eax, dword [esp + 0x8c]
jmp 0x4a4022
lea esi, [eax + 8]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.00410660
mov eax, dword [esp + 0x8c]
jmp 0x4a4001
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.00410660
mov eax, dword [esp + 0x8c]
jmp 0x4a3fe0
cmp edi, 0
jne 0x4a4edf
cmp ecx, 0
je 0x4a42a8
mov dword [esp], 0x5e0420
call fcn.0040fc90
mov eax, dword [esp + 4]
mov dword [esp + 0x8c], eax
mov ebp, dword [esp + 0x154]
mov dword [eax + 4], ebp
mov ebp, dword [esp + 0x150]
cmp byte [0x6dbe18], 0
jne 0x4a4290
mov dword [eax], ebp
mov ebp, dword [esp + 0x124]
mov dword [eax + 0xc], ebp
mov ebp, dword [esp + 0x120]
cmp byte [0x6dbe18], 0
jne 0x4a4275
mov dword [eax + 8], ebp
xor ebp, ebp
mov dword [eax + 0x10], ebp
mov dword [eax + 0x14], ebp
mov ebp, dword [esp + 0x1a0]
mov dword [eax + 0x1c], ebp
mov ebp, dword [esp + 0x19c]
cmp byte [0x6dbe18], 0
jne 0x4a4261
mov dword [eax + 0x18], ebp
mov dword [esp], 0
mov ebx, 0x5f974c
mov dword [esp + 4], ebx
mov dword [esp + 8], 0xe
mov ebx, dword [esp + 0x19c]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x1a0]
mov dword [esp + 0x10], ebx
call fcn.004411a0
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x8c]
cmp ebx, 0
je 0x4a425a
mov dword [esp + 0x14c], eax
mov dword [ebx + 0x24], eax
mov dword [esp + 0x148], ecx
cmp byte [0x6dbe18], 0
jne 0x4a4249
mov dword [ebx + 0x20], ecx
mov eax, dword [esp + 0x8c]
mov ebx, dword [0x61c370]
mov dword [esp + 0x1ac], ebx
mov ebx, dword [0x61c374]
mov dword [esp + 0x1b0], ebx
mov ebx, dword [0x61c378]
mov dword [esp + 0x1b4], ebx
mov ebx, dword [0x61c37c]
mov dword [esp + 0x1b8], ebx
mov dword [esp + 0x1c0], eax
mov dword [esp + 0x1bc], 0x6b2d90
add esp, 0x190
ret
lea esi, [ebx + 0x20]
mov dword [esp], esi
mov dword [esp + 4], ecx
call fcn.00410660
jmp 0x4a41f5
mov dword [ebx], eax
jmp 0x4a41d8
lea esi, [eax + 0x18]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.00410660
jmp 0x4a418d
lea esi, [eax + 8]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.00410660
mov eax, dword [esp + 0x8c]
jmp 0x4a4164
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.00410660
mov eax, dword [esp + 0x8c]
jmp 0x4a4143
cmp byte [esp + 0x32], 0
je 0x4a4eba
mov ebx, dword [esp + 0x74]
cmp ebx, 0xc
jge 0x4a4eba
mov ebx, dword [esp + 0x74]
add ebx, 0xc
mov dword [esp + 0x74], ebx
mov edi, dword [esp + 0x60]
mov ecx, dword [esp + 0x38]
cmp edi, 2
jne 0x4a4e70
mov ebp, ecx
sar ebp, 0x1f
and ebp, 3
mov ebx, ecx
add ebx, ebp
and ebx, 3
sub ebx, ebp
cmp ebx, 0
jne 0x4a4357
mov dword [esp + 0x7c], ecx
mov eax, 0x51eb851f
mov ebx, edx
imul dword [esp + 0x7c]
mov dword [esp + 0x7c], edx
mov edx, ebx
mov ebx, dword [esp + 0x7c]
sar ebx, 5
mov ebp, ecx
sar ebp, 0x1f
sub ebx, ebp
imul ebx, ebx, 0x64
mov ebp, ecx
sub ebp, ebx
cmp ebp, 0
jne 0x4a4eb0
mov dword [esp + 0x7c], ecx
mov eax, 0x51eb851f
imul dword [esp + 0x7c]
mov dword [esp + 0x7c], edx
mov ebx, dword [esp + 0x7c]
sar ebx, 7
mov ebp, ecx
sar ebp, 0x1f
sub ebx, ebp
imul ebx, ebx, 0x190
mov ebp, ecx
sub ebp, ebx
cmp ebp, 0
je 0x4a4eb0
xor eax, eax
cmp al, 0
je 0x4a4e70
mov eax, 0x1d
mov ebx, dword [esp + 0x78]
cmp eax, ebx
jge 0x4a4497
mov dword [esp], 0x5e0420
call fcn.0040fc90
mov eax, dword [esp + 4]
mov dword [esp + 0x8c], eax
mov ebp, dword [esp + 0x154]
mov dword [eax + 4], ebp
mov ebp, dword [esp + 0x150]
cmp byte [0x6dbe18], 0
jne 0x4a447f
mov dword [eax], ebp
mov ebp, dword [esp + 0x124]
mov dword [eax + 0xc], ebp
mov ebp, dword [esp + 0x120]
cmp byte [0x6dbe18], 0
jne 0x4a4464
mov dword [eax + 8], ebp
xor ebp, ebp
mov dword [eax + 0x10], ebp
mov dword [eax + 0x14], ebp
mov ebp, dword [esp + 0x1a0]
mov dword [eax + 0x1c], ebp
mov ebp, dword [esp + 0x19c]
cmp byte [0x6dbe18], 0
jne 0x4a444c
mov dword [eax + 0x18], ebp
mov ebp, 0x5faa3d
mov dword [eax + 0x20], ebp
mov dword [eax + 0x24], 0x12
mov ebx, dword [0x61c330]
mov dword [esp + 0x1ac], ebx
mov ebx, dword [0x61c334]
mov dword [esp + 0x1b0], ebx
mov ebx, dword [0x61c338]
mov dword [esp + 0x1b4], ebx
mov ebx, dword [0x61c33c]
mov dword [esp + 0x1b8], ebx
mov dword [esp + 0x1c0], eax
mov dword [esp + 0x1bc], 0x6b2d90
add esp, 0x190
ret
lea esi, [eax + 0x18]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.00410660
mov eax, dword [esp + 0x8c]
jmp 0x4a43f0
lea esi, [eax + 8]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.00410660
mov eax, dword [esp + 0x8c]
jmp 0x4a43cb
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.00410660
mov eax, dword [esp + 0x8c]
jmp 0x4a43aa
mov ebx, dword [esp + 0x80]
xor ebp, ebp
cmp ebx, ebp
je 0x4a4532
mov ebx, dword [esp + 0x38]
mov dword [esp], ebx
mov ebx, dword [esp + 0x60]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x78]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x74]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x68]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x54]
mov dword [esp + 0x18], ebx
mov ebx, dword [esp + 0x80]
mov dword [esp + 0x1c], ebx
call fcn.004a9030
mov ebp, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x1ac], ebp
mov dword [esp + 0x1b0], edx
mov dword [esp + 0x1b4], ecx
mov dword [esp + 0x1b8], eax
xor ebx, ebx
mov dword [esp + 0x1bc], ebx
mov dword [esp + 0x1c0], ebx
add esp, 0x190
ret
mov ebx, dword [esp + 0x34]
cmp ebx, 0xffffffff
je 0x4a4942
mov ebx, dword [esp + 0x38]
mov dword [esp], ebx
mov ebx, dword [esp + 0x60]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x78]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x74]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x68]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x54]
mov dword [esp + 0x18], ebx
mov ebx, dword [0x6c6870]
mov dword [esp + 0x1c], ebx
call fcn.004a9030
mov edx, dword [esp + 0x20]
mov ebp, dword [esp + 0x24]
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x188], ebx
mov ebx, dword [esp + 0x2c]
mov dword [esp + 0x18c], ebx
mov esi, edx
mov eax, dword [esp + 0x34]
cdq
mov ebx, eax
mov ecx, edx
mov eax, esi
mov edx, ebp
sub eax, ebx
sbb edx, ecx
mov ebx, dword [esp + 0x1a8]
mov dword [esp], ebx
mov dword [esp + 0x180], eax
mov dword [esp + 0x184], edx
add eax, 0x886e0900
adc edx, 0xfffffff1
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.004a9a00
mov esi, dword [esp + 0x9c]
mov edi, dword [esp + 0xc]
mov dword [esp + 0xf0], edi
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xf4], ecx
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x34]
cmp ebx, ebp
jne 0x4a4694
cmp esi, 0
je 0x4a4645
cmp ecx, esi
jne 0x4a4694
mov dword [esp], edi
mov dword [esp + 4], ecx
mov ebp, dword [esp + 0x98]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
call fcn.00453f60
mov esi, dword [esp + 0x9c]
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x4a4694
mov eax, dword [esp + 0x1a8]
mov ebx, dword [esp + 0x180]
mov dword [esp + 0x1ac], ebx
mov ebx, dword [esp + 0x184]
mov dword [esp + 0x1b0], ebx
mov ebx, dword [esp + 0x188]
mov dword [esp + 0x1b4], ebx
mov dword [esp + 0x1b8], eax
xor ebx, ebx
mov dword [esp + 0x1bc], ebx
mov dword [esp + 0x1c0], ebx
add esp, 0x190
ret
mov ebx, dword [esp + 0x98]
mov dword [esp + 0x100], ebx
mov dword [esp + 0x104], esi
mov ebx, dword [esp + 0x34]
mov dword [esp + 0x48], ebx
mov dword [esp], 0x5e2ae0
call fcn.0040fc90
mov ecx, dword [esp + 4]
mov edi, ecx
cmp ecx, 0
je 0x4a493b
xor eax, eax
call fcn.00454323
mov dword [esp + 0x90], ecx
mov ebp, dword [esp + 0x104]
mov dword [ecx + 4], ebp
mov ebp, dword [esp + 0x100]
cmp byte [0x6dbe18], 0
jne 0x4a492a
mov dword [ecx], ebp
mov dword [esp], 0x5be8a0
call fcn.0040fc90
mov eax, dword [esp + 4]
mov ebp, dword [0x61c340]
mov dword [eax], ebp
mov ebp, dword [0x61c344]
mov dword [eax + 4], ebp
mov ebp, dword [0x61c348]
mov dword [eax + 8], ebp
movzx ebp, byte [0x61c34c]
xchg ebp, ebx
mov byte [eax + 0xc], bl
xchg ebp, ebx
mov dword [esp + 0x94], eax
mov ebp, dword [esp + 0x104]
mov dword [eax + 4], ebp
mov ebp, dword [esp + 0x100]
cmp byte [0x6dbe18], 0
jne 0x4a4912
mov dword [eax], ebp
mov ecx, dword [esp + 0x48]
mov dword [eax + 8], ecx
mov edx, 1
mov ecx, 1
mov ebx, dword [esp + 0x90]
cmp ebx, 0
je 0x4a490b
mov dword [esp + 0x168], edx
mov dword [ebx + 0xc], edx
mov dword [esp + 0x16c], ecx
mov dword [ebx + 0x10], ecx
mov dword [esp + 0x164], eax
cmp byte [0x6dbe18], 0
jne 0x4a48f7
mov dword [ebx + 8], eax
mov dword [esp], 0x5be8e0
call fcn.0040fc90
mov ecx, dword [esp + 0x90]
mov eax, dword [esp + 4]
mov ebp, dword [0x61c0b0]
mov dword [eax], ebp
mov ebp, dword [0x61c0b4]
mov dword [eax + 4], ebp
movzx ebp, byte [0x61c0b8]
xchg ebp, ebx
mov byte [eax + 8], bl
xchg ebp, ebx
movzx ebp, byte [0x61c0b9]
xchg ebp, ebx
mov byte [eax + 9], bl
xchg ebp, ebx
movzx ebp, byte [0x61c0ba]
xchg ebp, ebx
mov byte [eax + 0xa], bl
xchg ebp, ebx
mov esi, 1
mov edx, 1
cmp ecx, 0
je 0x4a48f0
mov dword [esp + 0x15c], esi
mov dword [ecx + 0x18], esi
mov dword [esp + 0x160], edx
mov dword [ecx + 0x1c], edx
mov dword [esp + 0x158], eax
cmp byte [0x6dbe18], 0
jne 0x4a48d5
mov dword [ecx + 0x14], eax
xor ebp, ebp
mov edx, 0x80000000
mov dword [ecx + 0x20], ebp
mov dword [ecx + 0x24], edx
mov ebp, 0xffffffff
mov edx, 0x7fffffff
mov dword [ecx + 0x28], ebp
mov dword [ecx + 0x2c], edx
cmp dword [ecx + 0xc], 0
jbe 0x4a48ce
mov ebp, dword [ecx + 8]
mov dword [esp + 0x84], ecx
cmp byte [0x6dbe18], 0
jne 0x4a48b6
mov dword [ecx + 0x30], ebp
mov ebx, dword [esp + 0x180]
mov dword [esp + 0x1ac], ebx
mov ebx, dword [esp + 0x184]
mov dword [esp + 0x1b0], ebx
mov ebx, dword [esp + 0x188]
mov dword [esp + 0x1b4], ebx
mov dword [esp + 0x1b8], ecx
xor ebx, ebx
mov dword [esp + 0x1bc], ebx
mov dword [esp + 0x1c0], ebx
add esp, 0x190
ret
lea esi, [ecx + 0x30]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.00410660
mov ecx, dword [esp + 0x84]
jmp 0x4a486e
call fcn.00429b10
ud2
lea esi, [ecx + 0x14]
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.00410660
mov ecx, dword [esp + 0x90]
jmp 0x4a4835
mov dword [ecx], eax
jmp 0x4a480a
lea esi, [ebx + 8]
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.00410660
jmp 0x4a47a5
mov dword [ebx], eax
jmp 0x4a477a
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.00410660
mov eax, dword [esp + 0x94]
jmp 0x4a4759
mov dword [esp], ecx
mov dword [esp + 4], ebp
call fcn.00410660
jmp 0x4a46fa
mov dword [ecx], eax
jmp 0x4a46cc
mov ebx, dword [esp + 0x9c]
cmp ebx, 0
je 0x4a4de6
mov ebx, dword [esp + 0x38]
mov dword [esp], ebx
mov ebx, dword [esp + 0x60]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x78]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x74]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x68]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x54]
mov dword [esp + 0x18], ebx
mov ebx, dword [0x6c6870]
mov dword [esp + 0x1c], ebx
call fcn.004a9030
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x178], ebx
mov ebx, dword [esp + 0x2c]
mov dword [esp + 0x17c], ebx
mov ebx, dword [esp + 0x1a8]
mov dword [esp], ebx
mov ebx, dword [esp + 0x98]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x9c]
mov dword [esp + 8], ebx
mov dword [esp + 0x170], eax
mov dword [esp + 0x174], edx
add eax, 0x886e0900
adc edx, 0xfffffff1
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
call fcn.004a9f00
mov ebp, dword [esp + 0x9c]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x4c], ecx
movzx ebx, byte [esp + 0x19]
cmp bl, 0
je 0x4a4a74
mov esi, dword [esp + 0x170]
mov ebp, dword [esp + 0x174]
mov eax, ecx
cdq
mov ebx, eax
mov ecx, edx
mov eax, esi
mov edx, ebp
sub eax, ebx
sbb edx, ecx
mov ecx, edx
mov edx, eax
mov eax, dword [esp + 0x1a8]
mov dword [esp + 0x1ac], edx
mov dword [esp + 0x1b0], ecx
mov ebx, dword [esp + 0x178]
mov dword [esp + 0x1b4], ebx
mov dword [esp + 0x1b8], eax
xor ebx, ebx
mov dword [esp + 0x1bc], ebx
mov dword [esp + 0x1c0], ebx
add esp, 0x190
ret
cmp ebp, 3
jle 0x4a4dda
cmp ebp, 3
jb 0x4a4ddf
mov esi, dword [esp + 0x98]
mov eax, 3
cmp eax, 3
jne 0x4a4dda
mov dword [esp + 0x128], esi
mov dword [esp], esi
mov dword [esp + 0x12c], eax
mov dword [esp + 4], eax
mov ebp, 0x5f71f8
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 3
call fcn.00453f60
mov ebp, dword [esp + 0x9c]
mov ecx, dword [esp + 0x4c]
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x4a4dda
cmp ebp, 3
jb 0x4a4dd3
mov ecx, ebp
sub ecx, 3
mov eax, dword [esp + 0x98]
cmp ecx, 0
je 0x4a4afc
add eax, 3
mov dword [esp + 0x140], eax
mov dword [esp], eax
mov dword [esp + 0x144], ecx
mov dword [esp + 4], ecx
call fcn.004a1220
mov ebp, dword [esp + 0x9c]
mov ecx, dword [esp + 8]
imul ecx, ecx, 0xe10
mov ebx, dword [esp + 0x98]
mov dword [esp + 0xf8], ebx
mov dword [esp + 0xfc], ebp
mov dword [esp + 0x50], ecx
mov dword [esp], 0x5e2ae0
call fcn.0040fc90
mov ecx, dword [esp + 4]
mov edi, ecx
cmp ecx, 0
je 0x4a4dcc
xor eax, eax
call fcn.00454323
mov dword [esp + 0x90], ecx
mov ebp, dword [esp + 0xfc]
mov dword [ecx + 4], ebp
mov ebp, dword [esp + 0xf8]
cmp byte [0x6dbe18], 0
jne 0x4a4dbb
mov dword [ecx], ebp
mov dword [esp], 0x5be8a0
call fcn.0040fc90
mov eax, dword [esp + 4]
mov ebp, dword [0x61c350]
mov dword [eax], ebp
mov ebp, dword [0x61c354]
mov dword [eax + 4], ebp
mov ebp, dword [0x61c358]
mov dword [eax + 8], ebp
movzx ebp, byte [0x61c35c]
xchg ebp, ebx
mov byte [eax + 0xc], bl
xchg ebp, ebx
mov dword [esp + 0x94], eax
mov ebp, dword [esp + 0xfc]
mov dword [eax + 4], ebp
mov ebp, dword [esp + 0xf8]
cmp byte [0x6dbe18], 0
jne 0x4a4da3
mov dword [eax], ebp
mov ecx, dword [esp + 0x50]
mov dword [eax + 8], ecx
mov edx, 1
mov ecx, 1
mov ebx, dword [esp + 0x90]
cmp ebx, 0
je 0x4a4d9c
mov dword [esp + 0x168], edx
mov dword [ebx + 0xc], edx
mov dword [esp + 0x16c], ecx
mov dword [ebx + 0x10], ecx
mov dword [esp + 0x164], eax
cmp byte [0x6dbe18], 0
jne 0x4a4d88
mov dword [ebx + 8], eax
mov dword [esp], 0x5be8e0
call fcn.0040fc90
mov ecx, dword [esp + 0x90]
mov eax, dword [esp + 4]
mov ebp, dword [0x61c0c0]
mov dword [eax], ebp
mov ebp, dword [0x61c0c4]
mov dword [eax + 4], ebp
movzx ebp, byte [0x61c0c8]
xchg ebp, ebx
mov byte [eax + 8], bl
xchg ebp, ebx
movzx ebp, byte [0x61c0c9]
xchg ebp, ebx
mov byte [eax + 9], bl
xchg ebp, ebx
movzx ebp, byte [0x61c0ca]
xchg ebp, ebx
mov byte [eax + 0xa], bl
xchg ebp, ebx
mov esi, 1
mov edx, 1
cmp ecx, 0
je 0x4a4d81
mov dword [esp + 0x15c], esi
mov dword [ecx + 0x18], esi
mov dword [esp + 0x160], edx
mov dword [ecx + 0x1c], edx
mov dword [esp + 0x158], eax
cmp byte [0x6dbe18], 0
jne 0x4a4d66
mov dword [ecx + 0x14], eax
xor ebp, ebp
mov edx, 0x80000000
mov dword [ecx + 0x20], ebp
mov dword [ecx + 0x24], edx
mov ebp, 0xffffffff
mov edx, 0x7fffffff
mov dword [ecx + 0x28], ebp
mov dword [ecx + 0x2c], edx
mov eax, ecx
cmp dword [ecx + 0xc], 0
jbe 0x4a4d5f
mov ebp, dword [ecx + 8]
mov dword [esp + 0x88], ecx
cmp byte [0x6dbe18], 0
jne 0x4a4d47
mov dword [ecx + 0x30], ebp
mov ebx, dword [esp + 0x170]
mov dword [esp + 0x1ac], ebx
mov ebx, dword [esp + 0x174]
mov dword [esp + 0x1b0], ebx
mov ebx, dword [esp + 0x178]
mov dword [esp + 0x1b4], ebx
mov dword [esp + 0x1b8], eax
xor ebx, ebx
mov dword [esp + 0x1bc], ebx
mov dword [esp + 0x1c0], ebx
add esp, 0x190
ret
lea esi, [ecx + 0x30]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.00410660
mov eax, dword [esp + 0x88]
jmp 0x4a4cff
call fcn.00429b10
ud2
lea esi, [ecx + 0x14]
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.00410660
mov ecx, dword [esp + 0x90]
jmp 0x4a4cc4
mov dword [ecx], eax
jmp 0x4a4c99
lea esi, [ebx + 8]
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.00410660
jmp 0x4a4c34
mov dword [ebx], eax
jmp 0x4a4c09
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.00410660
mov eax, dword [esp + 0x94]
jmp 0x4a4be8
mov dword [esp], ecx
mov dword [esp + 4], ebp
call fcn.00410660
jmp 0x4a4b89
mov dword [ecx], eax
jmp 0x4a4b5b
call fcn.00429b80
ud2
jmp 0x4a4b27
call fcn.00429b80
ud2
mov ebx, dword [esp + 0x38]
mov dword [esp], ebx
mov ebx, dword [esp + 0x60]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x78]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x74]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x68]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x54]
mov dword [esp + 0x18], ebx
mov ebx, dword [esp + 0x1a4]
mov dword [esp + 0x1c], ebx
call fcn.004a9030
mov ebp, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x1ac], ebp
mov dword [esp + 0x1b0], edx
mov dword [esp + 0x1b4], ecx
mov dword [esp + 0x1b8], eax
xor ebx, ebx
mov dword [esp + 0x1bc], ebx
mov dword [esp + 0x1c0], ebx
add esp, 0x190
ret
mov ebx, edi
mov ebp, 0x6b5a80
cmp edi, 0xd
jae 0x4a4ea9
shl ebx, 2
add ebp, ebx
mov ecx, dword [ebp]
mov ebx, edi
dec ebx
mov ebp, 0x6b5a80
cmp ebx, 0xd
jae 0x4a4ea2
shl ebx, 2
add ebp, ebx
mov ebx, dword [ebp]
mov eax, ecx
sub eax, ebx
jmp 0x4a4367
call fcn.00429b10
ud2
call fcn.00429b10
ud2
mov eax, 1
jmp 0x4a4359
cmp byte [esp + 0x33], 0
je 0x4a42cb
mov ebx, dword [esp + 0x74]
cmp ebx, 0xc
jne 0x4a42cb
mov dword [esp + 0x74], 0
jmp 0x4a42cb
mov ebx, dword [esp + 0xa0]
mov dword [esp + 0x194], ebx
mov ebx, dword [esp + 0xa4]
mov dword [esp + 0x198], ebx
xor ebx, ebx
mov dword [esp + 0xe8], ebx
mov dword [esp + 0xec], ebx
mov eax, edi
and eax, 0xffff
cmp eax, 0x103
jg 0x4a6018
cmp eax, 0x1c
jg 0x4a5c79
cmp eax, 0x18
jg 0x4a5c46
cmp eax, 0x16
jg 0x4a5c2f
cmp eax, 0x15
jne 0x4a53db
cmp ecx, 3
jl 0x4a5332
cmp ecx, 3
jb 0x4a53d4
mov eax, 3
cmp eax, 3
jne 0x4a5332
mov dword [esp + 0x128], esi
mov dword [esp], esi
mov dword [esp + 0x12c], eax
mov dword [esp + 4], eax
mov ebp, 0x5f729d
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 3
call fcn.00453f60
mov esi, dword [esp + 0x19c]
mov ecx, dword [esp + 0x1a0]
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x4a5332
mov ebx, dword [0x6c6870]
mov dword [esp + 0x80], ebx
cmp ecx, 3
jb 0x4a532b
sub ecx, 3
mov eax, esi
cmp ecx, 0
je 0x4a4fcb
add eax, 3
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0x19c], eax
mov ebx, dword [esp + 0xdc]
cmp ebx, 0
je 0x4a51ca
mov dword [esp], 0x5e0420
call fcn.0040fc90
mov eax, dword [esp + 4]
mov dword [esp + 0x8c], eax
mov ebp, dword [esp + 0x154]
mov dword [eax + 4], ebp
mov ebp, dword [esp + 0x150]
cmp byte [0x6dbe18], 0
jne 0x4a51b2
mov dword [eax], ebp
mov ebp, dword [esp + 0x124]
mov dword [eax + 0xc], ebp
mov ebp, dword [esp + 0x120]
cmp byte [0x6dbe18], 0
jne 0x4a5197
mov dword [eax + 8], ebp
mov ebp, dword [esp + 0xac]
mov dword [eax + 0x14], ebp
mov ebp, dword [esp + 0xa8]
cmp byte [0x6dbe18], 0
jne 0x4a517c
mov dword [eax + 0x10], ebp
mov ebp, dword [esp + 0x1a0]
mov dword [eax + 0x1c], ebp
mov ebp, dword [esp + 0x19c]
cmp byte [0x6dbe18], 0
jne 0x4a5168
mov dword [eax + 0x18], ebp
mov dword [esp], 0
mov ebx, 0x5f709b
mov dword [esp + 4], ebx
mov dword [esp + 8], 2
mov ebx, dword [esp + 0xd8]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0xdc]
mov dword [esp + 0x10], ebx
mov ebx, 0x5f9300
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], 0xd
call fcn.00441220
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov ebx, dword [esp + 0x8c]
cmp ebx, 0
je 0x4a5161
mov dword [esp + 0x144], ecx
mov dword [ebx + 0x24], ecx
mov dword [esp + 0x140], eax
cmp byte [0x6dbe18], 0
jne 0x4a5150
mov dword [ebx + 0x20], eax
mov eax, dword [esp + 0x8c]
mov ebx, dword [0x61c310]
mov dword [esp + 0x1ac], ebx
mov ebx, dword [0x61c314]
mov dword [esp + 0x1b0], ebx
mov ebx, dword [0x61c318]
mov dword [esp + 0x1b4], ebx
mov ebx, dword [0x61c31c]
mov dword [esp + 0x1b8], ebx
mov dword [esp + 0x1c0], eax
mov dword [esp + 0x1bc], 0x6b2d90
add esp, 0x190
ret
lea esi, [ebx + 0x20]
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.00410660
jmp 0x4a50fc
mov dword [ebx], eax
jmp 0x4a50df
lea esi, [eax + 0x18]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.00410660
jmp 0x4a5083
lea esi, [eax + 0x10]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.00410660
mov eax, dword [esp + 0x8c]
jmp 0x4a5062
lea esi, [eax + 8]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.00410660
mov eax, dword [esp + 0x8c]
jmp 0x4a5041
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.00410660
mov eax, dword [esp + 0x8c]
jmp 0x4a5020
mov ebx, dword [esp + 0x118]
cmp ebx, 0
je 0x4a3eae
mov dword [esp], 0x5e0420
call fcn.0040fc90
mov eax, dword [esp + 4]
mov dword [esp + 0x8c], eax
mov ebp, dword [esp + 0x154]
mov dword [eax + 4], ebp
mov ebp, dword [esp + 0x150]
cmp byte [0x6dbe18], 0
jne 0x4a5313
mov dword [eax], ebp
mov ebp, dword [esp + 0x124]
mov dword [eax + 0xc], ebp
mov ebp, dword [esp + 0x120]
cmp byte [0x6dbe18], 0
jne 0x4a52f8
mov dword [eax + 8], ebp
mov ebp, dword [esp + 0xac]
mov dword [eax + 0x14], ebp
mov ebp, dword [esp + 0xa8]
cmp byte [0x6dbe18], 0
jne 0x4a52dd
mov dword [eax + 0x10], ebp
mov ebp, dword [esp + 0x1a0]
mov dword [eax + 0x1c], ebp
mov ebp, dword [esp + 0x19c]
cmp byte [0x6dbe18], 0
jne 0x4a52c5
mov dword [eax + 0x18], ebp
xor ebp, ebp
mov dword [eax + 0x20], ebp
mov dword [eax + 0x24], ebp
mov ebx, dword [0x61c320]
mov dword [esp + 0x1ac], ebx
mov ebx, dword [0x61c324]
mov dword [esp + 0x1b0], ebx
mov ebx, dword [0x61c328]
mov dword [esp + 0x1b4], ebx
mov ebx, dword [0x61c32c]
mov dword [esp + 0x1b8], ebx
mov dword [esp + 0x1c0], eax
mov dword [esp + 0x1bc], 0x6b2d90
add esp, 0x190
ret
lea esi, [eax + 0x18]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.00410660
mov eax, dword [esp + 0x8c]
jmp 0x4a5270
lea esi, [eax + 0x10]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.00410660
mov eax, dword [esp + 0x8c]
jmp 0x4a5253
lea esi, [eax + 8]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.00410660
mov eax, dword [esp + 0x8c]
jmp 0x4a5232
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.00410660
mov eax, dword [esp + 0x8c]
jmp 0x4a5211
call fcn.00429b80
ud2
mov dword [esp], esi
mov dword [esp + 4], ecx
call fcn.004a6a60
mov edi, dword [esp + 0x1a0]
mov eax, dword [esp + 8]
movzx ebx, byte [esp + 0xc]
cmp bl, 0
jne 0x4a5372
mov ebx, dword [0x6ca7c0]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6ca7c4]
mov dword [esp + 0x11c], ebx
jmp 0x4a4fd9
cmp eax, edi
ja 0x4a53cd
mov ebp, dword [esp + 0x19c]
mov esi, eax
mov ecx, eax
cmp eax, edi
ja 0x4a53c6
mov edx, edi
sub edx, eax
mov eax, dword [esp + 0x19c]
cmp edx, 0
je 0x4a5397
add eax, ecx
mov dword [esp + 0x98], ebp
mov dword [esp + 0x9c], esi
mov dword [esp + 0x148], eax
mov dword [esp + 0x19c], eax
mov dword [esp + 0x14c], edx
mov dword [esp + 0x1a0], edx
jmp 0x4a4fd9
call fcn.00429b80
ud2
call fcn.00429b80
ud2
call fcn.00429b80
ud2
cmp eax, 0x16
jne 0x4a4fd9
cmp edi, 0x16
je 0x4a5bd7
cmp edi, 0x18
je 0x4a5bd7
cmp edi, 0x19
je 0x4a5bd7
xor ebx, ebx
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xb4], ebx
xor ebx, ebx
mov dword [esp + 0x110], ebx
mov dword [esp + 0x114], ebx
xor ebx, ebx
mov dword [esp + 0x108], ebx
mov dword [esp + 0x10c], ebx
xor ebx, ebx
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xbc], ebx
cmp edi, 0x19
je 0x4a5a88
cmp edi, 0x1e
je 0x4a5a88
cmp edi, 0x1d
je 0x4a59a1
cmp edi, 0x18
je 0x4a59a1
cmp edi, 0x1a
je 0x4a57f9
cmp edi, 0x1f
je 0x4a57f9
cmp edi, 0x17
je 0x4a56c9
cmp edi, 0x1c
je 0x4a56c9
cmp ecx, 5
jge 0x4a54ab
mov ebx, dword [0x6ca7c0]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6ca7c4]
mov dword [esp + 0x11c], ebx
jmp 0x4a4fd9
cmp ecx, 1
jb 0x4a56c2
mov dword [esp + 0x14c], 1
mov dword [esp + 0x148], esi
cmp ecx, 3
jb 0x4a56bb
mov ebx, esi
inc ebx
mov dword [esp + 0x144], 2
mov dword [esp + 0x140], ebx
cmp ecx, 5
jb 0x4a56b4
mov edx, esi
add edx, 3
mov ebp, 2
cmp ecx, 5
jb 0x4a56ad
sub ecx, 5
mov eax, esi
cmp ecx, 0
je 0x4a550d
add eax, 5
mov edi, ecx
mov esi, eax
mov ebx, dword [esp + 0x148]
mov dword [esp + 0xb0], ebx
mov ebx, dword [esp + 0x14c]
mov dword [esp + 0xb4], ebx
mov ecx, dword [esp + 0x140]
mov eax, dword [esp + 0x144]
mov dword [esp + 0x108], edx
mov dword [esp + 0x10c], ebp
mov ebx, 0x5f708f
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xbc], 2
mov dword [esp + 0x19c], esi
mov dword [esp + 0x1a0], edi
mov dword [esp + 0x64], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x110], ecx
mov dword [esp], ecx
mov dword [esp + 0x114], eax
mov dword [esp + 4], eax
call fcn.004a1220
mov ebx, dword [esp + 8]
mov dword [esp + 0x70], ebx
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x11c], ebx
mov ebx, dword [esp + 0x118]
cmp ebx, 0
jne 0x4a55fa
mov ebx, dword [esp + 0x108]
mov dword [esp], ebx
mov ebx, dword [esp + 0x10c]
mov dword [esp + 4], ebx
call fcn.004a1220
mov ebx, dword [esp + 8]
mov dword [esp + 0x64], ebx
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x11c], ebx
mov ebx, dword [esp + 0x118]
cmp ebx, 0
jne 0x4a563e
mov ebx, dword [esp + 0xb8]
mov dword [esp], ebx
mov ebx, dword [esp + 0xbc]
mov dword [esp + 4], ebx
call fcn.004a1220
mov ebx, dword [esp + 8]
mov dword [esp + 0x40], ebx
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x11c], ebx
mov ecx, dword [esp + 0x70]
imul ecx, ecx, 0x3c
add ecx, dword [esp + 0x64]
imul ecx, ecx, 0x3c
add ecx, dword [esp + 0x40]
mov dword [esp + 0x34], ecx
cmp dword [esp + 0xb4], 0
jbe 0x4a56a6
mov ebx, dword [esp + 0xb0]
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 0x2b
xchg ebp, eax
je 0x4a4fd9
xchg ebp, eax
cmp al, 0x2d
xchg ebp, eax
jne 0x4a5687
mov ebx, ecx
neg ebx
mov dword [esp + 0x34], ebx
jmp 0x4a4fd9
mov ebx, dword [0x6ca7c0]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6ca7c4]
mov dword [esp + 0x11c], ebx
jmp 0x4a4fd9
call fcn.00429b10
ud2
call fcn.00429b80
ud2
call fcn.00429b80
ud2
call fcn.00429b80
ud2
call fcn.00429b80
ud2
cmp ecx, 7
jge 0x4a56ed
mov ebx, dword [0x6ca7c0]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6ca7c4]
mov dword [esp + 0x11c], ebx
jmp 0x4a4fd9
cmp ecx, 1
jb 0x4a57f2
mov dword [esp + 0x134], 1
mov edi, esi
cmp ecx, 3
jb 0x4a57eb
mov ebx, esi
inc ebx
mov dword [esp + 0x14c], 2
mov dword [esp + 0x148], ebx
cmp ecx, 5
jb 0x4a57e4
mov ebx, esi
add ebx, 3
mov dword [esp + 0x144], 2
mov dword [esp + 0x140], ebx
cmp ecx, 7
jb 0x4a57dd
mov edx, esi
add edx, 5
mov ebp, 2
cmp ecx, 7
jb 0x4a57d6
sub ecx, 7
mov eax, esi
cmp ecx, 0
je 0x4a5766
add eax, 7
mov dword [esp + 0x13c], ecx
mov esi, eax
mov dword [esp + 0xb0], edi
mov ebx, dword [esp + 0x134]
mov dword [esp + 0xb4], ebx
mov ecx, dword [esp + 0x148]
mov eax, dword [esp + 0x14c]
mov ebx, dword [esp + 0x140]
mov dword [esp + 0x108], ebx
mov ebx, dword [esp + 0x144]
mov dword [esp + 0x10c], ebx
mov dword [esp + 0xb8], edx
mov dword [esp + 0xbc], ebp
mov dword [esp + 0x19c], esi
mov ebx, dword [esp + 0x13c]
mov dword [esp + 0x1a0], ebx
jmp 0x4a556e
call fcn.00429b80
ud2
call fcn.00429b80
ud2
call fcn.00429b80
ud2
call fcn.00429b80
ud2
call fcn.00429b80
ud2
cmp ecx, 9
jge 0x4a581d
mov ebx, dword [0x6ca7c0]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6ca7c4]
mov dword [esp + 0x11c], ebx
jmp 0x4a4fd9
cmp ecx, 3
jbe 0x4a599a
mov ebx, esi
add ebx, 3
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 0x3a
xchg ebp, eax
jne 0x4a5974
cmp ecx, 6
jbe 0x4a5993
mov ebx, esi
add ebx, 6
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 0x3a
xchg ebp, eax
jne 0x4a5974
cmp ecx, 1
jb 0x4a596d
mov dword [esp + 0x13c], 1
mov dword [esp + 0x138], esi
cmp ecx, 3
jb 0x4a5966
mov edi, esi
inc edi
mov dword [esp + 0x134], 2
cmp ecx, 6
jb 0x4a595f
mov ebx, esi
add ebx, 4
mov dword [esp + 0x14c], 2
mov dword [esp + 0x148], ebx
cmp ecx, 9
jb 0x4a5958
mov ebx, esi
add ebx, 7
mov dword [esp + 0x144], 2
mov dword [esp + 0x140], ebx
cmp ecx, 9
jb 0x4a5951
sub ecx, 9
mov eax, esi
cmp ecx, 0
je 0x4a58dd
add eax, 9
mov ebp, ecx
mov edx, eax
mov ebx, dword [esp + 0x138]
mov dword [esp + 0xb0], ebx
mov ebx, dword [esp + 0x13c]
mov dword [esp + 0xb4], ebx
mov ecx, edi
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x148]
mov dword [esp + 0x108], ebx
mov ebx, dword [esp + 0x14c]
mov dword [esp + 0x10c], ebx
mov ebx, dword [esp + 0x140]
mov dword [esp + 0xb8], ebx
mov ebx, dword [esp + 0x144]
mov dword [esp + 0xbc], ebx
mov dword [esp + 0x19c], edx
mov dword [esp + 0x1a0], ebp
jmp 0x4a556e
call fcn.00429b80
ud2
call fcn.00429b80
ud2
call fcn.00429b80
ud2
call fcn.00429b80
ud2
call fcn.00429b80
ud2
mov ebx, dword [0x6ca7c0]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6ca7c4]
mov dword [esp + 0x11c], ebx
jmp 0x4a4fd9
call fcn.00429b10
ud2
call fcn.00429b10
ud2
cmp ecx, 3
jge 0x4a59c5
mov ebx, dword [0x6ca7c0]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6ca7c4]
mov dword [esp + 0x11c], ebx
jmp 0x4a4fd9
cmp ecx, 1
jb 0x4a5a81
mov dword [esp + 0x14c], 1
mov dword [esp + 0x148], esi
cmp ecx, 3
jb 0x4a5a7a
mov edi, esi
inc edi
mov dword [esp + 0x13c], 2
cmp ecx, 3
jb 0x4a5a73
sub ecx, 3
mov eax, esi
cmp ecx, 0
je 0x4a5a09
add eax, 3
mov ebp, ecx
mov edx, eax
mov ebx, dword [esp + 0x148]
mov dword [esp + 0xb0], ebx
mov ebx, dword [esp + 0x14c]
mov dword [esp + 0xb4], ebx
mov ecx, edi
mov eax, dword [esp + 0x13c]
mov ebx, 0x5f708f
mov dword [esp + 0x108], ebx
mov dword [esp + 0x10c], 2
mov ebx, 0x5f708f
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xbc], 2
mov dword [esp + 0x19c], edx
mov dword [esp + 0x1a0], ebp
jmp 0x4a556e
call fcn.00429b80
ud2
call fcn.00429b80
ud2
call fcn.00429b80
ud2
cmp ecx, 6
jge 0x4a5aac
mov ebx, dword [0x6ca7c0]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6ca7c4]
mov dword [esp + 0x11c], ebx
jmp 0x4a4fd9
cmp ecx, 3
jbe 0x4a5bd0
mov ebx, esi
add ebx, 3
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 0x3a
xchg ebp, eax
je 0x4a5ae3
mov ebx, dword [0x6ca7c0]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6ca7c4]
mov dword [esp + 0x11c], ebx
jmp 0x4a4fd9
cmp ecx, 1
jb 0x4a5bc9
mov dword [esp + 0x144], 1
mov dword [esp + 0x140], esi
cmp ecx, 3
jb 0x4a5bc2
mov ebx, esi
inc ebx
mov dword [esp + 0x14c], 2
mov dword [esp + 0x148], ebx
cmp ecx, 6
jb 0x4a5bbb
mov edi, esi
add edi, 4
mov dword [esp + 0x13c], 2
cmp ecx, 6
jb 0x4a5bb4
sub ecx, 6
mov eax, esi
cmp ecx, 0
je 0x4a5b47
add eax, 6
mov ebp, ecx
mov edx, eax
mov ebx, dword [esp + 0x140]
mov dword [esp + 0xb0], ebx
mov ebx, dword [esp + 0x144]
mov dword [esp + 0xb4], ebx
mov ecx, dword [esp + 0x148]
mov eax, dword [esp + 0x14c]
mov dword [esp + 0x108], edi
mov ebx, dword [esp + 0x13c]
mov dword [esp + 0x10c], ebx
mov ebx, 0x5f708f
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xbc], 2
mov dword [esp + 0x19c], edx
mov dword [esp + 0x1a0], ebp
jmp 0x4a556e
call fcn.00429b80
ud2
call fcn.00429b80
ud2
call fcn.00429b80
ud2
call fcn.00429b80
ud2
call fcn.00429b10
ud2
cmp ecx, 1
jl 0x4a53ff
cmp ecx, 0
jbe 0x4a5c28
movzx ebp, byte [esi]
xchg ebp, eax
cmp al, 0x5a
xchg ebp, eax
jne 0x4a53ff
cmp ecx, 1
jb 0x4a5c21
dec ecx
mov eax, esi
cmp ecx, 0
je 0x4a5c01
inc eax
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0x19c], eax
mov ebx, dword [0x6c6870]
mov dword [esp + 0x80], ebx
jmp 0x4a4fd9
call fcn.00429b80
ud2
call fcn.00429b10
ud2
cmp eax, 0x17
je 0x4a53e4
cmp eax, 0x18
je 0x4a53e4
jmp 0x4a4fd9
cmp eax, 0x1a
jg 0x4a5c62
cmp eax, 0x19
je 0x4a53e4
cmp eax, 0x1a
je 0x4a53e4
jmp 0x4a4fd9
cmp eax, 0x1b
je 0x4a53e4
cmp eax, 0x1c
je 0x4a53e4
jmp 0x4a4fd9
cmp eax, 0x20
jg 0x4a5d5c
cmp eax, 0x1e
jg 0x4a5c9e
cmp eax, 0x1d
je 0x4a53e4
cmp eax, 0x1e
je 0x4a53e4
jmp 0x4a4fd9
cmp eax, 0x1f
je 0x4a53e4
cmp eax, 0x20
jne 0x4a4fd9
mov eax, edi
sar eax, 0x10
inc eax
cmp ecx, eax
jge 0x4a5cd9
mov ebx, dword [0x6ca7c0]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6ca7c4]
mov dword [esp + 0x11c], ebx
jmp 0x4a4fd9
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 0x58], eax
mov dword [esp + 8], eax
call fcn.004a6e10
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x54], ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0xd8], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0xdc], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x11c], ebx
mov ecx, dword [esp + 0x58]
mov eax, dword [esp + 0x1a0]
cmp ecx, eax
ja 0x4a5d55
mov edx, eax
sub edx, ecx
mov eax, dword [esp + 0x19c]
cmp edx, 0
je 0x4a5d42
add eax, ecx
mov dword [esp + 0x1a0], edx
mov dword [esp + 0x19c], eax
jmp 0x4a4fd9
call fcn.00429b80
ud2
cmp eax, 0x101
jg 0x4a5f25
cmp eax, 0x21
jne 0x4a5eb7
cmp ecx, 2
jl 0x4a5e9d
cmp ecx, 0
jbe 0x4a5eb0
movzx ebp, byte [esi]
xchg ebp, eax
cmp al, 0x2e
xchg ebp, eax
jne 0x4a5e9d
cmp ecx, 1
jbe 0x4a5ea9
mov ebx, esi
inc ebx
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 0x30
xchg ebp, eax
jb 0x4a5e9d
cmp ecx, 1
jbe 0x4a5ea2
mov ebx, esi
inc ebx
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 0x39
xchg ebp, eax
ja 0x4a5e9d
xor eax, eax
cmp eax, 9
jge 0x4a5e08
mov ebp, eax
inc ebp
cmp ebp, ecx
jge 0x4a5e08
mov ebx, eax
inc ebx
cmp ebx, ecx
jae 0x4a5e96
mov ebp, esi
add ebp, ebx
movzx ebx, byte [ebp]
cmp bl, 0x30
jb 0x4a5e08
mov ebx, eax
inc ebx
cmp ebx, ecx
jae 0x4a5e8f
mov ebp, esi
add ebp, ebx
movzx ebx, byte [ebp]
cmp bl, 0x39
ja 0x4a5e08
inc eax
cmp eax, 9
jl 0x4a5dcb
mov dword [esp], esi
mov dword [esp + 4], ecx
mov ebx, eax
mov dword [esp + 0x6c], eax
inc ebx
mov dword [esp + 8], ebx
call fcn.004a6e10
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x54], ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0xd8], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0xdc], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x11c], ebx
mov ecx, dword [esp + 0x6c]
inc ecx
mov eax, dword [esp + 0x1a0]
cmp ecx, eax
ja 0x4a5e88
mov edx, eax
sub edx, ecx
mov eax, dword [esp + 0x19c]
cmp edx, 0
je 0x4a5e75
add eax, ecx
mov dword [esp + 0x1a0], edx
mov dword [esp + 0x19c], eax
jmp 0x4a4fd9
call fcn.00429b80
ud2
call fcn.00429b10
ud2
call fcn.00429b10
ud2
jmp 0x4a4fd9
call fcn.00429b10
ud2
call fcn.00429b10
ud2
call fcn.00429b10
ud2
cmp eax, 0x101
jne 0x4a4fd9
mov ebx, dword [0x6c6f38]
mov dword [esp], ebx
mov ebx, dword [0x6c6f3c]
mov dword [esp + 4], ebx
mov ebx, dword [0x6c6f40]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ecx
call fcn.004a0e00
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x60], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x19c], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x11c], ebx
jmp 0x4a4fd9
cmp eax, 0x102
jne 0x4a5f8f
mov ebx, dword [0x6c6f58]
mov dword [esp], ebx
mov ebx, dword [0x6c6f5c]
mov dword [esp + 4], ebx
mov ebx, dword [0x6c6f60]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ecx
call fcn.004a0e00
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x60], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x19c], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x11c], ebx
jmp 0x4a4fd9
cmp eax, 0x103
jne 0x4a4fd9
mov dword [esp], esi
mov dword [esp + 4], ecx
cmp edi, 0x104
je 0x4a6011
mov byte [esp + 8], 0
call fcn.004a3910
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x19c], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x11c], ebx
mov dword [esp + 0x60], eax
cmp eax, 0
jle 0x4a5ff5
cmp eax, 0xc
jle 0x4a4fd9
mov ebx, 0x5f77f6
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xdc], 5
jmp 0x4a4fd9
mov byte [esp + 8], 1
jmp 0x4a5fae
cmp eax, 0x112
jg 0x4a63e1
cmp eax, 0x107
jg 0x4a61dc
cmp eax, 0x105
jg 0x4a60a6
cmp eax, 0x104
je 0x4a5f9a
cmp eax, 0x105
jne 0x4a4fd9
mov ebx, dword [0x6c6f28]
mov dword [esp], ebx
mov ebx, dword [0x6c6f2c]
mov dword [esp + 4], ebx
mov ebx, dword [0x6c6f30]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ecx
call fcn.004a0e00
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x19c], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x11c], ebx
jmp 0x4a4fd9
cmp eax, 0x106
jne 0x4a6108
mov ebx, dword [0x6c6f48]
mov dword [esp], ebx
mov ebx, dword [0x6c6f4c]
mov dword [esp + 4], ebx
mov ebx, dword [0x6c6f50]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ecx
call fcn.004a0e00
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x19c], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x11c], ebx
jmp 0x4a4fd9
cmp eax, 0x107
jne 0x4a4fd9
cmp edi, 0x108
jne 0x4a6147
cmp ecx, 0
jle 0x4a6147
cmp ecx, 0
jbe 0x4a61d5
movzx ebp, byte [esi]
xchg ebp, eax
cmp al, 0x20
xchg ebp, eax
jne 0x4a6147
cmp ecx, 1
jb 0x4a61ce
dec ecx
mov eax, esi
cmp ecx, 0
je 0x4a6145
inc eax
mov esi, eax
mov dword [esp + 0x19c], esi
mov dword [esp], esi
mov dword [esp + 0x1a0], ecx
mov dword [esp + 4], ecx
cmp edi, 0x109
je 0x4a61c7
mov byte [esp + 8], 0
call fcn.004a3910
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x19c], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x11c], ebx
mov dword [esp + 0x78], eax
cmp eax, 0
jge 0x4a4fd9
mov ebx, 0x5f72d6
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xdc], 3
jmp 0x4a4fd9
mov byte [esp + 8], 1
jmp 0x4a6169
call fcn.00429b80
ud2
call fcn.00429b10
ud2
cmp eax, 0x109
jg 0x4a61fe
cmp eax, 0x108
je 0x4a6113
cmp eax, 0x109
je 0x4a6113
jmp 0x4a4fd9
cmp eax, 0x111
jne 0x4a6307
cmp ecx, 4
jl 0x4a62ba
mov dword [esp + 0xc8], esi
xor eax, eax
mov dword [esp + 0xcc], ecx
cmp ecx, eax
jg 0x4a62d9
xor eax, eax
cmp al, 0
je 0x4a62ba
cmp ecx, 4
jb 0x4a62b3
mov edx, 4
mov ebp, esi
cmp ecx, 4
jb 0x4a62ac
sub ecx, 4
mov eax, esi
cmp ecx, 0
je 0x4a6253
add eax, 4
mov dword [esp + 0x148], ebp
mov dword [esp + 0x14c], edx
mov dword [esp + 0x19c], eax
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0xe8], ebp
mov dword [esp], ebp
mov dword [esp + 0xec], edx
mov dword [esp + 4], edx
call fcn.004a1220
mov ebx, dword [esp + 8]
mov dword [esp + 0x38], ebx
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x11c], ebx
jmp 0x4a4fd9
call fcn.00429b80
ud2
call fcn.00429b80
ud2
mov ebx, dword [0x6ca7c0]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6ca7c4]
mov dword [esp + 0x11c], ebx
jmp 0x4a4fd9
cmp eax, ecx
jae 0x4a6300
mov ebp, esi
add ebp, eax
movzx ebx, byte [ebp]
cmp bl, 0x30
jb 0x4a62f9
cmp bl, 0x39
ja 0x4a62f9
mov eax, 1
jmp 0x4a622c
xor eax, eax
jmp 0x4a622c
call fcn.00429b10
ud2
cmp eax, 0x112
jne 0x4a4fd9
cmp ecx, 2
jge 0x4a6336
mov ebx, dword [0x6ca7c0]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6ca7c4]
mov dword [esp + 0x11c], ebx
jmp 0x4a4fd9
cmp ecx, 2
jb 0x4a63da
mov edx, 2
mov ebp, esi
cmp ecx, 2
jb 0x4a63d3
sub ecx, 2
mov eax, esi
cmp ecx, 0
je 0x4a635c
add eax, 2
mov dword [esp + 0x148], ebp
mov dword [esp + 0x14c], edx
mov dword [esp + 0x19c], eax
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0xe8], ebp
mov dword [esp], ebp
mov dword [esp + 0xec], edx
mov dword [esp + 4], edx
call fcn.004a1220
mov eax, dword [esp + 8]
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x11c], ebx
cmp eax, 0x45
jl 0x4a63c2
mov ebx, eax
add ebx, 0x76c
mov dword [esp + 0x38], ebx
jmp 0x4a4fd9
mov ebx, eax
add ebx, 0x7d0
mov dword [esp + 0x38], ebx
jmp 0x4a4fd9
call fcn.00429b80
ud2
call fcn.00429b80
ud2
cmp eax, 0x20d
jg 0x4a658a
cmp eax, 0x20b
jg 0x4a64f6
cmp eax, 0x20a
jne 0x4a646d
mov dword [esp], esi
mov dword [esp + 4], ecx
mov byte [esp + 8], 0
call fcn.004a3910
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x19c], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x11c], ebx
mov dword [esp + 0x74], eax
cmp eax, 0
jl 0x4a6451
cmp eax, 0x18
jl 0x4a4fd9
mov ebx, 0x5f7577
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xdc], 4
jmp 0x4a4fd9
cmp eax, 0x20b
jne 0x4a4fd9
mov dword [esp], esi
mov dword [esp + 4], ecx
cmp edi, 0x20c
je 0x4a64ef
mov byte [esp + 8], 0
call fcn.004a3910
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x19c], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x11c], ebx
mov dword [esp + 0x74], eax
cmp eax, 0
jl 0x4a64d3
cmp eax, 0xc
jle 0x4a4fd9
mov ebx, 0x5f7577
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xdc], 4
jmp 0x4a4fd9
mov byte [esp + 8], 1
jmp 0x4a648c
cmp eax, 0x20c
je 0x4a6478
cmp eax, 0x20d
jne 0x4a4fd9
mov dword [esp], esi
mov dword [esp + 4], ecx
cmp edi, 0x20e
je 0x4a6583
mov byte [esp + 8], 0
call fcn.004a3910
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x19c], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x11c], ebx
mov dword [esp + 0x68], eax
cmp eax, 0
jl 0x4a6567
cmp eax, 0x3c
jl 0x4a4fd9
mov ebx, 0x5f7a7c
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xdc], 6
jmp 0x4a4fd9
mov byte [esp + 8], 1
jmp 0x4a6520
cmp eax, 0x20f
jg 0x4a67dc
cmp eax, 0x20e
je 0x4a650c
cmp eax, 0x20f
jne 0x4a4fd9
mov dword [esp], esi
mov dword [esp + 4], ecx
cmp edi, 0x210
je 0x4a67d2
mov byte [esp + 8], 0
call fcn.004a3910
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x19c], edx
mov eax, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x11c], ebx
mov dword [esp + 0x44], ecx
cmp ecx, 0
jl 0x4a67b6
cmp ecx, 0x3c
jge 0x4a67b6
mov dword [esp + 0x1a0], eax
cmp eax, 2
jl 0x4a677c
cmp eax, 0
jbe 0x4a67af
movzx ebp, byte [edx]
xchg ebp, eax
cmp al, 0x2e
xchg ebp, eax
jne 0x4a677c
mov dword [esp + 0xd0], edx
mov ecx, eax
mov eax, 1
mov dword [esp + 0xd4], ecx
cmp ecx, eax
jg 0x4a6781
xor eax, eax
cmp al, 0
je 0x4a677c
mov ebx, dword [esp + 0x194]
mov dword [esp], ebx
mov ebx, dword [esp + 0x198]
mov dword [esp + 4], ebx
call fcn.0049f630
mov esi, dword [esp + 0x1a0]
mov eax, dword [esp + 0x10]
and eax, 0xffff
cmp eax, 0x20
je 0x4a4fd9
cmp eax, 0x21
je 0x4a4fd9
mov eax, 2
cmp eax, esi
jge 0x4a66c4
mov edi, dword [esp + 0x19c]
mov dword [esp + 0xc0], edi
mov dword [esp + 0xc4], esi
cmp esi, eax
jg 0x4a674e
xor ecx, ecx
cmp cl, 0
je 0x4a66c4
inc eax
cmp eax, esi
jl 0x4a669b
mov ebx, dword [esp + 0x19c]
mov dword [esp], ebx
mov dword [esp + 4], esi
mov dword [esp + 0x5c], eax
mov dword [esp + 8], eax
call fcn.004a6e10
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x54], ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0xd8], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0xdc], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x118], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x11c], ebx
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x1a0]
cmp ecx, eax
ja 0x4a6747
mov edx, eax
sub edx, ecx
mov eax, dword [esp + 0x19c]
cmp edx, 0
je 0x4a6734
add eax, ecx
mov dword [esp + 0x1a0], edx
mov dword [esp + 0x19c], eax
jmp 0x4a4fd9
call fcn.00429b80
ud2
cmp eax, esi
jae 0x4a6775
mov ebp, edi
add ebp, eax
movzx ebx, byte [ebp]
cmp bl, 0x30
jb 0x4a676e
cmp bl, 0x39
ja 0x4a676e
mov ecx, 1
jmp 0x4a66ba
xor ecx, ecx
jmp 0x4a66ba
call fcn.00429b10
ud2
jmp 0x4a4fd9
cmp eax, ecx
jae 0x4a67a8
mov ebp, edx
add ebp, eax
movzx ebx, byte [ebp]
cmp bl, 0x30
jb 0x4a67a1
cmp bl, 0x39
ja 0x4a67a1
mov eax, 1
jmp 0x4a664d
xor eax, eax
jmp 0x4a664d
call fcn.00429b10
ud2
call fcn.00429b10
ud2
mov ebx, 0x5f7a8e
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xdc], 6
jmp 0x4a6607
mov byte [esp + 8], 1
jmp 0x4a65c3
cmp eax, 0x210
je 0x4a65ab
cmp eax, 0x213
jne 0x4a6918
cmp ecx, 2
jge 0x4a6816
mov ebx, dword [0x6ca7c0]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6ca7c4]
mov dword [esp + 0x11c], ebx
jmp 0x4a4fd9
cmp ecx, 2
jb 0x4a6911
mov edx, 2
mov ebp, esi
cmp ecx, 2
jb 0x4a690a
sub ecx, 2
mov eax, esi
cmp ecx, 0
je 0x4a683c
add eax, 2
mov dword [esp + 0x19c], eax
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0xe8], ebp
mov esi, ebp
mov dword [esp + 0x148], ebp
mov dword [esp + 0xec], edx
mov eax, edx
cmp edx, 2
jne 0x4a68ae
mov dword [esp], esi
mov dword [esp + 0x14c], eax
mov dword [esp + 4], eax
mov ebp, 0x5f70a5
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 2
call fcn.00453f60
mov esi, dword [esp + 0x148]
mov eax, dword [esp + 0x14c]
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x4a68ae
mov byte [esp + 0x33], 1
jmp 0x4a4fd9
mov dword [esp + 0x14c], eax
cmp eax, 2
jne 0x4a68eb
mov dword [esp], esi
mov dword [esp + 4], eax
mov ebp, 0x5f70d1
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 2
call fcn.00453f60
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x4a68eb
mov byte [esp + 0x32], 1
jmp 0x4a4fd9
mov ebx, dword [0x6ca7c0]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6ca7c4]
mov dword [esp + 0x11c], ebx
jmp 0x4a4fd9
call fcn.00429b80
ud2
call fcn.00429b80
ud2
cmp eax, 0x214
jne 0x4a4fd9
cmp ecx, 2
jge 0x4a6947
mov ebx, dword [0x6ca7c0]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6ca7c4]
mov dword [esp + 0x11c], ebx
jmp 0x4a4fd9
cmp ecx, 2
jb 0x4a6a42
mov edx, 2
mov ebp, esi
cmp ecx, 2
jb 0x4a6a3b
sub ecx, 2
mov eax, esi
cmp ecx, 0
je 0x4a696d
add eax, 2
mov dword [esp + 0x19c], eax
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0xe8], ebp
mov esi, ebp
mov dword [esp + 0x148], ebp
mov dword [esp + 0xec], edx
mov eax, edx
cmp edx, 2
jne 0x4a69df
mov dword [esp], esi
mov dword [esp + 0x14c], eax
mov dword [esp + 4], eax
mov ebp, 0x5f7115
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 2
call fcn.00453f60
mov esi, dword [esp + 0x148]
mov eax, dword [esp + 0x14c]
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x4a69df
mov byte [esp + 0x33], 1
jmp 0x4a4fd9
mov dword [esp + 0x14c], eax
cmp eax, 2
jne 0x4a6a1c
mov dword [esp], esi
mov dword [esp + 4], eax
mov ebp, 0x5f7123
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 2
call fcn.00453f60
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x4a6a1c
mov byte [esp + 0x32], 1
jmp 0x4a4fd9
mov ebx, dword [0x6ca7c0]
mov dword [esp + 0x118], ebx
mov ebx, dword [0x6ca7c4]
mov dword [esp + 0x11c], ebx
jmp 0x4a4fd9
call fcn.00429b80
ud2
call fcn.00429b80
ud2
call fcn.00429b80
ud2
call fcn.00452240
jmp fcn.004a3db0