Function at 0x4b3810
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x104
push ebx
shr edx, 2
push ebp
mov ebp, dword [ecx + 0x10]
mov dword [esp + 0xec], edx
mov edx, dword [ecx + 0x18]
push esi
mov esi, dword [ecx]
mov dword [esp + 0x10c], edx
mov edx, dword [eax + 4]
cmp edx, dword [eax + 0x24]
lea ecx, [eax + 0x20]
push edi
lea edi, [eax + 0x40]
mov dword [esp + 0x70], ebp
mov ebx, eax
mov dword [esp + 0x58], ecx
mov dword [esp + 0x94], edi
jle 0x4b385a
mov ebx, ecx
mov dword [esp + 0x58], eax
mov ecx, eax
mov eax, dword [ecx + 4]
cmp eax, dword [edi + 4]
jle 0x4b3873
mov dword [esp + 0x58], edi
mov dword [esp + 0x94], ecx
mov edi, ecx
mov ecx, dword [esp + 0x58]
mov edx, dword [ebx + 4]
cmp edx, dword [ecx + 4]
jle 0x4b3885
mov eax, ebx
mov ebx, ecx
mov dword [esp + 0x58], eax
mov ecx, eax
mov eax, dword [ebx + 4]
lea edx, [eax + 0xffff]
mov eax, dword [edi + 4]
lea edi, [eax + 0xffff]
sar edx, 0x10
sar edi, 0x10
cmp edx, edi
mov dword [esp + 0x6c], edx
mov dword [esp + 0x98], edi
je 0x4b579c
mov ecx, dword [ecx + 4]
add ecx, 0xffff
sar ecx, 0x10
mov dword [esp + 0xa4], ecx
mov ecx, dword [ebx + 4]
sub eax, ecx
cdq
push edx
push eax
push 0x10000
push 0
call fcn.006372b0
mov edi, eax
mov eax, dword [esp + 0x94]
mov eax, dword [eax]
mov ecx, edx
mov edx, dword [ebx]
push ecx
sub eax, edx
mov dword [esp + 0x20], edx
cdq
push edi
push edx
push eax
mov dword [esp + 0x50], ecx
call fcn.0063a250
mov cl, 0x20
call fcn.00643e20
mov ecx, dword [esp + 0x94]
mov dword [esp + 0x108], eax
mov eax, dword [ecx + 8]
sub eax, dword [ebx + 8]
mov ecx, dword [esp + 0x40]
push ecx
cdq
push edi
push edx
push eax
call fcn.0063a250
mov cl, 0x20
call fcn.00643e20
mov edx, dword [esp + 0x94]
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x100], eax
mov eax, dword [edx + 0xc]
sub eax, dword [ebx + 0xc]
push ecx
cdq
push edi
push edx
push eax
call fcn.0063a250
mov cl, 0x20
call fcn.00643e20
mov edx, dword [esp + 0x94]
mov ecx, dword [esp + 0x40]
mov dword [esp + 0xf0], eax
mov eax, dword [edx + 0x10]
sub eax, dword [ebx + 0x10]
push ecx
cdq
push edi
push edx
push eax
call fcn.0063a250
mov cl, 0x20
call fcn.00643e20
mov edx, dword [esp + 0x94]
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x10c], eax
mov eax, dword [edx + 0x14]
sub eax, dword [ebx + 0x14]
push ecx
cdq
push edi
push edx
push eax
call fcn.0063a250
mov cl, 0x20
call fcn.00643e20
mov dword [esp + 0xfc], eax
mov edx, dword [esp + 0x94]
mov eax, dword [edx + 0x18]
sub eax, dword [ebx + 0x18]
mov ecx, dword [esp + 0x40]
push ecx
cdq
push edi
push edx
push eax
call fcn.0063a250
mov cl, 0x20
call fcn.00643e20
mov edx, dword [esp + 0x94]
mov ecx, dword [esp + 0x40]
mov dword [esp + 0xf8], eax
mov eax, dword [edx + 0x1c]
sub eax, dword [ebx + 0x1c]
push ecx
cdq
push edi
push edx
push eax
call fcn.0063a250
mov cl, 0x20
call fcn.00643e20
mov edx, dword [esp + 0x58]
mov dword [esp + 0x104], eax
mov eax, dword [edx + 4]
sub eax, dword [ebx + 4]
cdq
mov ecx, eax
mov eax, dword [esp + 0x108]
mov dword [esp + 0x50], edx
cdq
mov edi, eax
mov eax, dword [esp + 0x50]
push eax
push ecx
push edx
push edi
mov dword [esp + 0x5c], ecx
mov dword [esp + 0xb0], edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x58]
mov ecx, dword [ecx]
cmp ecx, eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x18], ecx
je 0x4b579c
mov eax, dword [esp + 0x6c]
shl eax, 0x10
sub eax, dword [ebx + 4]
cdq
push edx
mov dword [esp + 0x6c], edx
mov edx, dword [esp + 0xa4]
push eax
push edx
push edi
mov dword [esp + 0x74], eax
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
mov ecx, dword [ebx + 8]
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x68]
mov edi, eax
mov eax, dword [esp + 0x100]
add edi, dword [esp + 0x1c]
push ecx
mov ecx, dword [esp + 0x68]
cdq
push ecx
push edx
push eax
mov dword [esp + 0xe8], edi
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, dword [esp + 0x20]
mov ecx, dword [ebx + 0xc]
mov dword [esp + 0x34], ecx
mov ecx, dword [esp + 0x68]
push ecx
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0xf4]
cdq
push ecx
push edx
push eax
mov dword [esp + 0xbc], eax
mov dword [esp + 0xc0], edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, dword [esp + 0x34]
mov ecx, dword [ebx + 0x10]
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x68]
push ecx
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x110]
cdq
push ecx
push edx
push eax
mov dword [esp + 0xdc], eax
mov dword [esp + 0xe0], edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, dword [esp + 0x28]
mov ecx, dword [ebx + 0x14]
mov dword [esp + 0x2c], ecx
mov ecx, dword [esp + 0x68]
push ecx
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x100]
cdq
push ecx
push edx
push eax
mov dword [esp + 0xcc], eax
mov dword [esp + 0xd0], edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, dword [esp + 0x2c]
mov ecx, dword [ebx + 0x18]
mov dword [esp + 0x38], ecx
mov ecx, dword [esp + 0x68]
push ecx
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0xfc]
cdq
push ecx
push edx
push eax
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc8], edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x68]
mov ebx, dword [ebx + 0x1c]
push ecx
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x108]
cdq
push ecx
push edx
push eax
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], edx
mov dword [esp + 0x40], ebx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, ebx
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x18]
sub eax, dword [esp + 0x24]
cdq
push edx
push eax
push 0x10000
push 0
call fcn.006372b0
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0x40], edx
mov edx, dword [esp + 0x50]
push edx
mov edx, dword [esp + 0xa0]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x50]
push eax
push ecx
push edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
mov ebx, edx
mov edx, dword [esp + 0x58]
mov ecx, eax
mov eax, dword [edx + 8]
cdq
sub eax, ecx
sbb edx, ebx
mov ecx, eax
mov eax, dword [esp + 0x20]
mov ebx, edx
cdq
sub ecx, eax
mov eax, dword [esp + 0x3c]
sbb ebx, edx
mov edx, dword [esp + 0x40]
push edx
push eax
push ebx
push ecx
call fcn.0063a250
mov cl, 0x20
call fcn.00643e20
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x4c]
push ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 0xe8], eax
mov eax, dword [esp + 0xb4]
push edx
push eax
push ecx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
mov ebx, edx
mov edx, dword [esp + 0x58]
mov ecx, eax
mov eax, dword [edx + 0xc]
cdq
sub eax, ecx
sbb edx, ebx
mov ecx, eax
mov eax, dword [esp + 0x34]
mov ebx, edx
cdq
sub ecx, eax
mov eax, dword [esp + 0x3c]
sbb ebx, edx
mov edx, dword [esp + 0x40]
push edx
push eax
push ebx
push ecx
call fcn.0063a250
mov cl, 0x20
call fcn.00643e20
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x4c]
push ecx
mov ecx, dword [esp + 0xd0]
mov dword [esp + 0xf0], eax
mov eax, dword [esp + 0xd4]
push edx
push eax
push ecx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
mov ebx, edx
mov edx, dword [esp + 0x58]
mov ecx, eax
mov eax, dword [edx + 0x10]
cdq
sub eax, ecx
sbb edx, ebx
mov ecx, eax
mov eax, dword [esp + 0x28]
mov ebx, edx
cdq
sub ecx, eax
mov eax, dword [esp + 0x3c]
sbb ebx, edx
mov edx, dword [esp + 0x40]
push edx
push eax
push ebx
push ecx
call fcn.0063a250
mov cl, 0x20
call fcn.00643e20
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x4c]
push ecx
mov dword [esp + 0xec], eax
mov eax, dword [esp + 0xc4]
push edx
push eax
mov ecx, dword [esp + 0xc8]
push ecx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
mov ebx, edx
mov edx, dword [esp + 0x58]
mov ecx, eax
mov eax, dword [edx + 0x14]
cdq
sub eax, ecx
sbb edx, ebx
mov ecx, eax
mov eax, dword [esp + 0x2c]
mov ebx, edx
cdq
sub ecx, eax
mov eax, dword [esp + 0x3c]
sbb ebx, edx
mov edx, dword [esp + 0x40]
push edx
push eax
push ebx
push ecx
call fcn.0063a250
mov cl, 0x20
call fcn.00643e20
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x4c]
push ecx
mov ecx, dword [esp + 0xb8]
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0xbc]
push edx
push eax
push ecx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
mov ebx, edx
mov edx, dword [esp + 0x58]
mov ecx, eax
mov eax, dword [edx + 0x18]
cdq
sub eax, ecx
sbb edx, ebx
mov ecx, eax
mov eax, dword [esp + 0x38]
mov ebx, edx
cdq
sub ecx, eax
mov eax, dword [esp + 0x3c]
sbb ebx, edx
mov edx, dword [esp + 0x40]
push edx
push eax
push ebx
push ecx
call fcn.0063a250
mov cl, 0x20
call fcn.00643e20
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x4c]
push ecx
mov ecx, dword [esp + 0xc8]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0xcc]
push edx
push eax
push ecx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
mov ebx, edx
mov edx, dword [esp + 0x58]
mov ecx, eax
mov eax, dword [edx + 0x1c]
cdq
sub eax, ecx
sbb edx, ebx
mov ecx, eax
mov eax, dword [esp + 0x30]
mov ebx, edx
cdq
sub ecx, eax
mov eax, dword [esp + 0x3c]
sbb ebx, edx
mov edx, dword [esp + 0x40]
push edx
push eax
push ebx
push ecx
call fcn.0063a250
mov cl, 0x20
call fcn.00643e20
mov ecx, dword [esp + 0x6c]
mov edx, ecx
imul edx, dword [esp + 0xf4]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x118]
lea edx, [eax + edx*4]
mov eax, dword [esp + 0xa4]
sub eax, ecx
mov dword [esp + 0x78], edx
mov dword [esp + 0x48], eax
je 0x4b4ad6
mov eax, dword [esp + 0x18]
sub eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x4c]
cdq
mov ebx, eax
mov eax, dword [esp + 0x50]
push eax
push ecx
push 0x10000
push 0
mov ebp, edx
call fcn.006372b0
push edx
push eax
push ebp
push ebx
call fcn.0063a250
mov cl, 0x20
call fcn.00643e20
mov ecx, dword [esp + 0x68]
push ecx
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x18], eax
cdq
push ecx
push edx
push eax
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
mov edx, dword [esp + 0x58]
mov ebp, dword [esp + 0x70]
mov ecx, eax
mov eax, dword [edx]
mov edx, dword [esp + 0x24]
add ecx, dword [esp + 0x1c]
cmp edx, eax
jge 0x4b44e9
cmp dword [esp + 0x48], 0
jle 0x4b4ad6
mov eax, dword [esp + 0xe4]
cdq
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0xec]
mov dword [esp + 0xc8], edx
cdq
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0xe8]
mov dword [esp + 0xb8], edx
cdq
mov dword [esp + 0xbc], eax
mov eax, dword [esp + 0xd4]
mov dword [esp + 0xc0], edx
cdq
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 0xd0], edx
cdq
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0xe0]
mov dword [esp + 0xb0], edx
cdq
mov dword [esp + 0x3c], eax
add ecx, 0xffff
lea eax, [edi + 0xffff]
mov dword [esp + 0x40], edx
mov dword [esp + 0x20], ecx
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0xc8]
sub dword [esp + 0x48], 1
and eax, 0xffff0000
mov dword [esp + 0x10], eax
sub eax, edi
cdq
push edx
mov ebx, eax
push ebx
mov dword [esp + 0x58], edx
mov edx, dword [esp + 0xcc]
push ecx
push edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, dword [esp + 0x84]
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0xb4]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x50]
push eax
push ebx
push ecx
push edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0xc0]
mov edx, dword [esp + 0xbc]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x50]
push eax
push ebx
push ecx
push edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0xcc]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x50]
push eax
push ebx
push ecx
push edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, dword [esp + 0x90]
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0xac]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x50]
push eax
push ebx
push ecx
push edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x50]
push eax
push ebx
push ecx
push edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
mov edx, dword [esp + 0x10]
add eax, dword [esp + 0x80]
mov ecx, edx
sar ecx, 0x10
mov ebx, dword [esp + 0x78]
lea ecx, [ebx + ecx*4]
mov dword [esp + 0x64], ecx
mov ecx, dword [esp + 0x20]
and ecx, 0xffff0000
sub ecx, edx
sar ecx, 0x10
test ecx, ecx
jle 0x4b445d
mov edi, dword [esp + 0x74]
lea ebx, [eax - 0x8000]
add edi, 0xffff8000
mov dword [esp + 0x18], ebx
mov dword [esp + 0x28], edi
sub ecx, 1
xor eax, eax
cmp edi, eax
mov dword [esp + 0x10], ecx
jle 0x4b4132
mov eax, edi
and eax, 0xffff0000
mov edx, eax
xor ebx, ebx
sar edx, 0x10
lea ecx, [ebp - 1]
cmp edx, ecx
setl bl
mov dword [esp + 0x60], ebx
mov ebx, dword [esp + 0x18]
jmp 0x4b4136
mov dword [esp + 0x60], eax
test ebx, ebx
jle 0x4b416b
mov edi, dword [esp + 0x110]
mov edx, ebx
and edx, 0xffff0000
add edi, 0xffffffff
xor ebx, ebx
mov ecx, edx
sar ecx, 0x10
cmp ecx, edi
mov edi, dword [esp + 0x28]
setge bl
sub ebx, 1
and ebx, ebp
mov dword [esp + 0x5c], ebx
mov ebx, dword [esp + 0x18]
jmp 0x4b4171
xor edx, edx
mov dword [esp + 0x5c], edx
mov ecx, edx
sar ecx, 0x10
imul ecx, ebp
mov ebp, eax
sar ebp, 0x10
add ecx, ebp
mov ebp, dword [esi + ecx*4]
mov dword [esp + 0xa8], ebp
mov ebp, dword [esp + 0x60]
add ebp, ecx
mov ebp, dword [esi + ebp*4]
sub edi, eax
mov dword [esp + 0x1c], ebp
mov ebp, dword [esp + 0x5c]
add ecx, ebp
mov ebp, dword [esi + ecx*4]
mov dword [esp + 0x74], ebp
mov ebp, dword [esp + 0x60]
add ecx, ebp
mov eax, ebx
sub eax, edx
mov ebx, dword [esp + 0xa8]
and eax, 0xfffe
add eax, 1
and edi, 0xfffe
add edi, 1
mov dword [esp + 0x54], edi
mov ebp, 0x10000
sub ebp, edi
mov edi, ebp
imul ebp, eax
mov edx, 0x10000
sub edx, eax
imul eax, dword [esp + 0x54]
imul edi, edx
imul edx, dword [esp + 0x54]
shr edx, 0x10
mov ecx, dword [esi + ecx*4]
shr ebx, 0x18
shr edi, 0x10
imul edi, ebx
mov ebx, dword [esp + 0x1c]
shr ebx, 0x18
imul edx, ebx
mov ebx, dword [esp + 0x74]
shr edx, 0x10
mov dword [esp + 0x60], edx
shr ebp, 0x10
shr eax, 0x10
mov edx, ebx
shr edx, 0x18
imul ebp, edx
mov edx, ecx
shr edx, 0x18
imul eax, edx
shr eax, 0x10
mov edx, eax
mov dword [esp + 0x54], edx
mov eax, ecx
and eax, 0xff0000
imul eax, edx
shr ebp, 0x10
mov edx, ebx
and edx, 0xff0000
imul edx, ebp
add eax, edx
mov edx, dword [esp + 0x1c]
and edx, 0xff0000
imul edx, dword [esp + 0x60]
add eax, edx
mov edx, dword [esp + 0xa8]
and edx, 0xff0000
shr edi, 0x10
imul edx, edi
mov dword [esp + 0x5c], ebp
add eax, edx
movzx ebp, cl
imul ebp, dword [esp + 0x54]
movzx edx, bl
and eax, 0xff0000ff
imul edx, dword [esp + 0x5c]
add ebp, edx
movzx edx, byte [esp + 0x1c]
imul edx, dword [esp + 0x60]
add ebp, edx
mov edx, dword [esp + 0xa8]
movzx ebx, dl
imul ebx, edi
and ecx, 0xff00
imul ecx, dword [esp + 0x54]
add ebp, ebx
mov ebx, dword [esp + 0x74]
and ebx, 0xff00
imul ebx, dword [esp + 0x5c]
add ecx, ebx
mov ebx, dword [esp + 0x1c]
and ebp, 0xff00
or eax, ebp
mov ebp, dword [esp + 0x60]
and ebx, 0xff00
and edx, 0xff00
imul ebx, ebp
imul edx, edi
add ecx, ebx
add ecx, edx
mov edx, dword [esp + 0x5c]
and ecx, 0xff0000
or eax, ecx
mov ecx, dword [esp + 0x54]
add ecx, edx
add ecx, ebp
add ecx, edi
mov edi, dword [esp + 0x6c]
mov ebx, dword [esp + 0x2c]
shl ecx, 0x18
and ecx, 0xff000000
shr eax, 8
or eax, ecx
mov ecx, eax
shr edi, 0x10
and ecx, 0xff0000
imul ecx, edi
movzx edi, al
shr ebx, 0x10
imul edi, ebx
mov ebp, dword [esp + 0x30]
and ecx, 0xff0000ff
and edi, 0xff00
or ecx, edi
mov edi, dword [esp + 0x38]
and eax, 0xff00
shr edi, 0x10
imul eax, edi
and eax, 0xff0000
or ecx, eax
mov ebx, dword [esp + 0x64]
shr ecx, 8
mov eax, ecx
mov edi, ecx
and eax, 0xff0000
and edi, 0xff00
movzx ecx, cl
mov edx, ebp
shr edx, 0x10
imul eax, edx
imul edi, edx
imul ecx, edx
mov edx, dword [ebx]
and eax, 0xff0000ff
and edi, 0xff0000
or eax, edi
and ecx, 0xff00
or eax, ecx
shr eax, 8
mov ecx, edx
mov edi, eax
and edi, 0xff00ff
and ecx, 0xff00ff
and eax, 0xff00
and edx, 0xff00
add ecx, edi
add edx, eax
mov eax, ecx
mov edi, ecx
shr eax, 8
and eax, 1
shr edi, 0x18
imul eax, eax, 0xff
and edi, 1
imul edi, edi, 0xffff0000
add ebp, dword [esp + 0xe4]
or eax, edi
or eax, ecx
mov edi, dword [esp + 0x28]
add edi, dword [esp + 0xdc]
mov ecx, edx
shr ecx, 0x10
and ecx, 1
neg ecx
shl ecx, 8
or ecx, edx
mov edx, dword [esp + 0xec]
add dword [esp + 0x6c], edx
and eax, 0xffff00ff
and ecx, 0xff00
or eax, ecx
mov ecx, dword [esp + 0xd4]
add dword [esp + 0x2c], ecx
mov ecx, dword [esp + 0x10]
or eax, 0xff000000
mov dword [ebx], eax
mov eax, dword [esp + 0xe8]
add dword [esp + 0x38], eax
add ebx, 4
mov dword [esp + 0x64], ebx
mov ebx, dword [esp + 0x18]
add ebx, dword [esp + 0xe0]
test ecx, ecx
mov dword [esp + 0x30], ebp
mov ebp, dword [esp + 0x70]
mov dword [esp + 0x28], edi
mov dword [esp + 0x18], ebx
jg 0x4b4105
mov edi, dword [esp + 0xd8]
mov eax, dword [esp + 0x108]
add dword [esp + 0x34], eax
mov edx, dword [esp + 0x14]
add dword [esp + 0x20], edx
mov ecx, dword [esp + 0xf0]
mov edx, dword [esp + 0x10c]
add dword [esp + 0x8c], ecx
add dword [esp + 0x88], edx
mov ecx, dword [esp + 0xf8]
mov edx, dword [esp + 0x104]
add dword [esp + 0x7c], ecx
add dword [esp + 0x80], edx
add edi, eax
mov eax, dword [esp + 0xf4]
add eax, eax
add eax, eax
add dword [esp + 0x78], eax
mov eax, dword [esp + 0x100]
add dword [esp + 0x84], eax
mov eax, dword [esp + 0xfc]
add dword [esp + 0x90], eax
cmp dword [esp + 0x48], 0
mov dword [esp + 0xd8], edi
jg 0x4b3faa
jmp 0x4b4ad6
jle 0x4b4ad6
cmp dword [esp + 0x48], 0
jle 0x4b4ad6
mov eax, dword [esp + 0xe4]
cdq
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0xec]
mov dword [esp + 0xc8], edx
cdq
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0xe8]
mov dword [esp + 0xb8], edx
cdq
mov dword [esp + 0xbc], eax
mov eax, dword [esp + 0xd4]
mov dword [esp + 0xc0], edx
cdq
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 0xd0], edx
cdq
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0xe0]
mov dword [esp + 0xb0], edx
cdq
mov dword [esp + 0x3c], eax
lea eax, [edi + 0xffff]
add ecx, 0xffff
mov dword [esp + 0x40], edx
mov dword [esp + 0xa8], eax
mov dword [esp + 0x60], ecx
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0xc8]
sub dword [esp + 0x48], 1
and eax, 0xffff0000
mov dword [esp + 0x30], eax
sub eax, edi
cdq
push edx
mov ebx, eax
push ebx
mov dword [esp + 0xa8], edx
mov edx, dword [esp + 0xcc]
push ecx
push edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, dword [esp + 0x84]
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0xb4]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xa0]
push eax
push ebx
push ecx
push edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0xc0]
mov edx, dword [esp + 0xbc]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0xa0]
push eax
push ebx
push ecx
push edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0xcc]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0xa0]
push eax
push ebx
push ecx
push edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, dword [esp + 0x90]
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0xac]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0xa0]
push eax
push ebx
push ecx
push edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0xa0]
push eax
push ebx
push ecx
push edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
mov edx, dword [esp + 0x30]
add eax, dword [esp + 0x80]
mov ecx, edx
sar ecx, 0x10
mov ebx, dword [esp + 0x78]
lea ecx, [ebx + ecx*4]
mov dword [esp + 0x74], ecx
mov ecx, dword [esp + 0xa8]
and ecx, 0xffff0000
sub ecx, edx
sar ecx, 0x10
test ecx, ecx
jle 0x4b4a4c
mov edi, dword [esp + 0x64]
lea ebx, [eax - 0x8000]
add edi, 0xffff8000
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x54], edi
nop
sub ecx, 1
xor eax, eax
cmp edi, eax
mov dword [esp + 0x4c], ecx
jle 0x4b472d
mov eax, edi
and eax, 0xffff0000
mov edx, eax
xor ebx, ebx
sar edx, 0x10
lea ecx, [ebp - 1]
cmp edx, ecx
setl bl
mov dword [esp + 0x20], ebx
mov ebx, dword [esp + 0x1c]
jmp 0x4b4731
mov dword [esp + 0x20], eax
test ebx, ebx
jle 0x4b4766
mov edi, dword [esp + 0x110]
mov edx, ebx
and edx, 0xffff0000
add edi, 0xffffffff
xor ebx, ebx
mov ecx, edx
sar ecx, 0x10
cmp ecx, edi
mov edi, dword [esp + 0x54]
setge bl
sub ebx, 1
and ebx, ebp
mov dword [esp + 0x30], ebx
mov ebx, dword [esp + 0x1c]
jmp 0x4b476c
xor edx, edx
mov dword [esp + 0x30], edx
mov ecx, edx
sar ecx, 0x10
imul ecx, ebp
mov ebp, eax
sar ebp, 0x10
add ecx, ebp
mov ebp, dword [esi + ecx*4]
mov dword [esp + 0x34], ebp
mov ebp, dword [esp + 0x20]
add ebp, ecx
mov ebp, dword [esi + ebp*4]
sub edi, eax
mov dword [esp + 0x18], ebp
mov ebp, dword [esp + 0x30]
add ecx, ebp
mov ebp, dword [esi + ecx*4]
mov dword [esp + 0x64], ebp
mov ebp, dword [esp + 0x20]
add ecx, ebp
mov eax, ebx
sub eax, edx
mov ebx, dword [esp + 0x34]
and eax, 0xfffe
add eax, 1
and edi, 0xfffe
add edi, 1
mov dword [esp + 0x30], edi
mov ebp, 0x10000
sub ebp, edi
mov edi, ebp
imul ebp, eax
mov edx, 0x10000
sub edx, eax
imul eax, dword [esp + 0x30]
imul edi, edx
imul edx, dword [esp + 0x30]
shr edx, 0x10
mov ecx, dword [esi + ecx*4]
shr ebx, 0x18
shr edi, 0x10
imul edi, ebx
mov ebx, dword [esp + 0x18]
shr ebx, 0x18
imul edx, ebx
mov ebx, dword [esp + 0x64]
shr edx, 0x10
mov dword [esp + 0x20], edx
shr ebp, 0x10
shr eax, 0x10
mov edx, ebx
shr edx, 0x18
imul ebp, edx
mov edx, ecx
shr edx, 0x18
imul eax, edx
shr eax, 0x10
mov edx, eax
mov dword [esp + 0x28], edx
mov eax, ecx
and eax, 0xff0000
imul eax, edx
shr ebp, 0x10
mov edx, ebx
and edx, 0xff0000
imul edx, ebp
add eax, edx
mov edx, dword [esp + 0x18]
and edx, 0xff0000
imul edx, dword [esp + 0x20]
add eax, edx
mov edx, dword [esp + 0x34]
and edx, 0xff0000
shr edi, 0x10
imul edx, edi
mov dword [esp + 0x2c], ebp
add eax, edx
movzx ebp, cl
imul ebp, dword [esp + 0x28]
movzx edx, bl
and eax, 0xff0000ff
imul edx, dword [esp + 0x2c]
add ebp, edx
movzx edx, byte [esp + 0x18]
imul edx, dword [esp + 0x20]
add ebp, edx
mov edx, dword [esp + 0x34]
movzx ebx, dl
imul ebx, edi
and ecx, 0xff00
imul ecx, dword [esp + 0x28]
add ebp, ebx
mov ebx, dword [esp + 0x64]
and ebx, 0xff00
imul ebx, dword [esp + 0x2c]
add ecx, ebx
mov ebx, dword [esp + 0x18]
and ebp, 0xff00
or eax, ebp
mov ebp, dword [esp + 0x20]
and ebx, 0xff00
and edx, 0xff00
imul ebx, ebp
imul edx, edi
add ecx, ebx
add ecx, edx
mov edx, dword [esp + 0x2c]
and ecx, 0xff0000
or eax, ecx
mov ecx, dword [esp + 0x28]
add ecx, edx
add ecx, ebp
add ecx, edi
mov edi, dword [esp + 0x38]
mov ebx, dword [esp + 0x5c]
shl ecx, 0x18
and ecx, 0xff000000
shr eax, 8
or eax, ecx
mov ecx, eax
shr edi, 0x10
and ecx, 0xff0000
imul ecx, edi
movzx edi, al
shr ebx, 0x10
imul edi, ebx
mov ebp, dword [esp + 0x10]
and ecx, 0xff0000ff
and edi, 0xff00
or ecx, edi
mov edi, dword [esp + 0x6c]
and eax, 0xff00
shr edi, 0x10
imul eax, edi
and eax, 0xff0000
or ecx, eax
mov ebx, dword [esp + 0x74]
shr ecx, 8
mov eax, ecx
mov edi, ecx
and eax, 0xff0000
and edi, 0xff00
movzx ecx, cl
mov edx, ebp
shr edx, 0x10
imul eax, edx
imul edi, edx
imul ecx, edx
mov edx, dword [ebx]
and eax, 0xff0000ff
and edi, 0xff0000
or eax, edi
and ecx, 0xff00
or eax, ecx
shr eax, 8
mov ecx, edx
mov edi, eax
and edi, 0xff00ff
and ecx, 0xff00ff
and eax, 0xff00
and edx, 0xff00
add ecx, edi
add edx, eax
mov eax, ecx
mov edi, ecx
shr eax, 8
and eax, 1
shr edi, 0x18
imul eax, eax, 0xff
and edi, 1
imul edi, edi, 0xffff0000
add ebp, dword [esp + 0xe4]
or eax, edi
or eax, ecx
mov edi, dword [esp + 0x54]
add edi, dword [esp + 0xdc]
mov ecx, edx
shr ecx, 0x10
and ecx, 1
neg ecx
shl ecx, 8
or ecx, edx
mov edx, dword [esp + 0xec]
add dword [esp + 0x38], edx
and eax, 0xffff00ff
and ecx, 0xff00
or eax, ecx
mov ecx, dword [esp + 0xd4]
add dword [esp + 0x5c], ecx
mov ecx, dword [esp + 0x4c]
or eax, 0xff000000
mov dword [ebx], eax
mov eax, dword [esp + 0xe8]
add dword [esp + 0x6c], eax
add ebx, 4
mov dword [esp + 0x74], ebx
mov ebx, dword [esp + 0x1c]
add ebx, dword [esp + 0xe0]
test ecx, ecx
mov dword [esp + 0x10], ebp
mov ebp, dword [esp + 0x70]
mov dword [esp + 0x54], edi
mov dword [esp + 0x1c], ebx
jg 0x4b4700
mov edi, dword [esp + 0xd8]
mov eax, dword [esp + 0x108]
add dword [esp + 0xa8], eax
mov edx, dword [esp + 0x14]
add dword [esp + 0x60], edx
mov ecx, dword [esp + 0xf0]
mov edx, dword [esp + 0x10c]
add dword [esp + 0x8c], ecx
add dword [esp + 0x88], edx
mov ecx, dword [esp + 0xf8]
mov edx, dword [esp + 0x104]
add dword [esp + 0x7c], ecx
add dword [esp + 0x80], edx
add edi, eax
mov eax, dword [esp + 0xf4]
add eax, eax
add eax, eax
add dword [esp + 0x78], eax
mov eax, dword [esp + 0x100]
add dword [esp + 0x84], eax
mov eax, dword [esp + 0xfc]
add dword [esp + 0x90], eax
cmp dword [esp + 0x48], 0
mov dword [esp + 0xd8], edi
jg 0x4b458f
mov eax, dword [esp + 0x98]
sub eax, dword [esp + 0xa4]
mov dword [esp + 0x48], eax
je 0x4b579c
mov eax, dword [esp + 0x58]
mov ecx, dword [eax + 4]
mov ebx, dword [eax]
mov eax, dword [esp + 0x94]
mov eax, dword [eax + 4]
sub eax, ecx
cdq
push edx
push eax
push 0x10000
push 0
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x28], ebx
call fcn.006372b0
mov ecx, eax
mov eax, edx
mov edx, dword [esp + 0x94]
mov dword [esp + 0x98], eax
mov eax, dword [edx]
sub eax, ebx
cdq
push edx
push eax
mov eax, dword [esp + 0xa0]
push eax
push ecx
call fcn.0063a250
mov cl, 0x20
call fcn.00643e20
mov ecx, eax
mov eax, dword [esp + 0xa4]
shl eax, 0x10
sub eax, dword [esp + 0x4c]
mov dword [esp + 0xa8], ecx
imul ecx
mov cl, 0x10
call fcn.00643e20
mov edx, dword [esp + 0x24]
mov ecx, eax
mov eax, ebx
add ecx, eax
cmp edx, eax
jge 0x4b5190
cmp dword [esp + 0x48], 0
jle 0x4b579c
mov eax, dword [esp + 0xe4]
cdq
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0xec]
mov dword [esp + 0xc8], edx
cdq
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0xe8]
mov dword [esp + 0xb8], edx
cdq
mov dword [esp + 0xbc], eax
mov eax, dword [esp + 0xd4]
mov dword [esp + 0xc0], edx
cdq
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 0xd0], edx
cdq
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0xe0]
mov dword [esp + 0xb0], edx
cdq
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0xf4]
mov dword [esp + 0x40], edx
lea edx, [eax*4]
add ecx, 0xffff
lea eax, [edi + 0xffff]
mov dword [esp + 0x6c], edx
mov dword [esp + 0x38], ecx
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0xc8]
sub dword [esp + 0x48], 1
and eax, 0xffff0000
mov dword [esp + 0x98], eax
sub eax, edi
cdq
push edx
mov ebx, eax
push ebx
mov dword [esp + 0xa8], edx
mov edx, dword [esp + 0xcc]
push ecx
push edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, dword [esp + 0x84]
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0xb4]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0xa0]
push eax
push ebx
push ecx
push edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0xc0]
mov edx, dword [esp + 0xbc]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0xa0]
push eax
push ebx
push ecx
push edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0xcc]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0xa0]
push eax
push ebx
push ecx
push edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, dword [esp + 0x90]
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0xac]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0xa0]
push eax
push ebx
push ecx
push edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0xa0]
push eax
push ebx
push ecx
push edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
mov edx, dword [esp + 0x98]
add eax, dword [esp + 0x80]
mov ecx, edx
sar ecx, 0x10
mov ebx, dword [esp + 0x78]
lea ecx, [ebx + ecx*4]
mov dword [esp + 0x64], ecx
mov ecx, dword [esp + 0x38]
and ecx, 0xffff0000
sub ecx, edx
sar ecx, 0x10
test ecx, ecx
jle 0x4b5102
mov edx, dword [esp + 0x4c]
add eax, 0xffff8000
add edx, 0xffff8000
mov dword [esp + 0x54], eax
mov dword [esp + 0x5c], edx
jmp 0x4b4da0
sub ecx, 1
xor edi, edi
cmp edx, edi
mov dword [esp + 0x60], ecx
jle 0x4b4dce
mov ecx, edx
and ecx, 0xffff0000
xor ebx, ebx
mov dword [esp + 0x24], ecx
lea edi, [ebp - 1]
sar ecx, 0x10
cmp ecx, edi
setl bl
mov edi, ebx
mov dword [esp + 0x14], ebx
jmp 0x4b4dd6
mov dword [esp + 0x24], edi
mov dword [esp + 0x14], edi
xor ecx, ecx
cmp eax, ecx
jle 0x4b4e0e
mov edi, dword [esp + 0x110]
mov ecx, eax
and ecx, 0xffff0000
add edi, 0xffffffff
xor ebx, ebx
mov dword [esp + 0xa4], ecx
sar ecx, 0x10
cmp ecx, edi
mov edi, dword [esp + 0x14]
setge bl
sub ebx, 1
and ebx, ebp
mov dword [esp + 0x10], ebx
jmp 0x4b4e19
mov dword [esp + 0xa4], ecx
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0xa4]
mov ebx, dword [esp + 0x24]
sub edx, dword [esp + 0x24]
sub eax, dword [esp + 0xa4]
sar ebx, 0x10
sar ecx, 0x10
imul ecx, ebp
add ecx, ebx
mov ebx, dword [esi + ecx*4]
lea ebp, [ecx + edi]
mov ebp, dword [esi + ebp*4]
mov dword [esp + 0x1c], ebp
mov ebp, dword [esp + 0x10]
add ecx, ebp
mov ebp, dword [esi + ecx*4]
and edx, 0xfffe
add edx, 1
and eax, 0xfffe
add eax, 1
add edi, ecx
mov ecx, dword [esi + edi*4]
mov dword [esp + 0x18], ebp
mov dword [esp + 0x14], ebx
mov dword [esp + 0x4c], edx
shr ebx, 0x18
mov edi, 0x10000
sub edi, edx
mov dword [esp + 0x98], edi
mov ebp, 0x10000
sub ebp, eax
imul edx, ebp
imul edi, ebp
mov ebp, eax
imul eax, dword [esp + 0x4c]
imul ebp, dword [esp + 0x98]
shr edx, 0x10
shr edi, 0x10
imul edi, ebx
mov ebx, dword [esp + 0x1c]
shr ebx, 0x18
imul edx, ebx
mov ebx, dword [esp + 0x18]
shr ebx, 0x18
shr eax, 0x10
shr ebp, 0x10
imul ebp, ebx
mov ebx, ecx
shr ebx, 0x18
imul eax, ebx
shr eax, 0x10
mov ebx, eax
mov dword [esp + 0x24], ebx
mov eax, ecx
and eax, 0xff0000
imul eax, ebx
mov ebx, dword [esp + 0x18]
and ebx, 0xff0000
shr ebp, 0x10
imul ebx, ebp
add eax, ebx
mov ebx, dword [esp + 0x1c]
shr edx, 0x10
mov dword [esp + 0x10], edx
and ebx, 0xff0000
imul ebx, edx
mov edx, dword [esp + 0x14]
and edx, 0xff0000
shr edi, 0x10
imul edx, edi
add eax, ebx
add eax, edx
movzx edx, byte [esp + 0x18]
movzx ebx, cl
imul edx, ebp
imul ebx, dword [esp + 0x24]
add ebx, edx
movzx edx, byte [esp + 0x1c]
imul edx, dword [esp + 0x10]
and eax, 0xff0000ff
mov dword [esp + 0x30], ebp
add ebx, edx
mov edx, dword [esp + 0x14]
movzx ebp, dl
imul ebp, edi
and ecx, 0xff00
imul ecx, dword [esp + 0x24]
add ebx, ebp
mov ebp, dword [esp + 0x10]
and ebx, 0xff00
or eax, ebx
mov ebx, dword [esp + 0x18]
and ebx, 0xff00
imul ebx, dword [esp + 0x30]
add ecx, ebx
mov ebx, dword [esp + 0x1c]
and edx, 0xff00
imul edx, edi
and ebx, 0xff00
imul ebx, ebp
add ecx, ebx
add ecx, edx
mov edx, dword [esp + 0x30]
and ecx, 0xff0000
or eax, ecx
mov ecx, dword [esp + 0x24]
add ecx, edx
add ecx, ebp
add ecx, edi
mov edi, dword [esp + 0x20]
mov ebx, dword [esp + 0x28]
shl ecx, 0x18
shr eax, 8
and ecx, 0xff000000
or eax, ecx
mov ecx, eax
shr edi, 0x10
and ecx, 0xff0000
imul ecx, edi
movzx edi, al
shr ebx, 0x10
imul edi, ebx
mov ebp, dword [esp + 0x74]
and ecx, 0xff0000ff
and edi, 0xff00
or ecx, edi
mov edi, dword [esp + 0x34]
and eax, 0xff00
shr edi, 0x10
imul eax, edi
and eax, 0xff0000
or ecx, eax
mov ebx, dword [esp + 0x64]
shr ecx, 8
mov eax, ecx
and eax, 0xff0000
mov edi, ecx
and edi, 0xff00
movzx ecx, cl
mov edx, ebp
shr edx, 0x10
imul eax, edx
imul edi, edx
imul ecx, edx
mov edx, dword [ebx]
and eax, 0xff0000ff
and edi, 0xff0000
or eax, edi
and ecx, 0xff00
or eax, ecx
shr eax, 8
mov edi, eax
mov ecx, edx
and eax, 0xff00
and edi, 0xff00ff
and ecx, 0xff00ff
and edx, 0xff00
add edx, eax
add ecx, edi
mov eax, ecx
shr eax, 8
and eax, 1
imul eax, eax, 0xff
mov edi, ecx
shr edi, 0x18
and edi, 1
imul edi, edi, 0xffff0000
add ebp, dword [esp + 0xe4]
or eax, edi
or eax, ecx
mov ecx, edx
shr ecx, 0x10
and ecx, 1
neg ecx
shl ecx, 8
or ecx, edx
mov edx, dword [esp + 0xec]
add dword [esp + 0x20], edx
mov edx, dword [esp + 0x5c]
add edx, dword [esp + 0xdc]
and eax, 0xffff00ff
and ecx, 0xff00
or eax, ecx
mov ecx, dword [esp + 0xd4]
add dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x60]
or eax, 0xff000000
mov dword [ebx], eax
mov eax, dword [esp + 0xe8]
add dword [esp + 0x34], eax
mov eax, dword [esp + 0x54]
add eax, dword [esp + 0xe0]
add ebx, 4
test ecx, ecx
mov dword [esp + 0x74], ebp
mov ebp, dword [esp + 0x70]
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
mov dword [esp + 0x54], eax
jg 0x4b4da0
mov edi, dword [esp + 0xd8]
mov eax, dword [esp + 0x108]
add dword [esp + 0x2c], eax
mov edx, dword [esp + 0xa8]
add dword [esp + 0x38], edx
mov ecx, dword [esp + 0x100]
mov edx, dword [esp + 0xf0]
add dword [esp + 0x84], ecx
add dword [esp + 0x8c], edx
mov ecx, dword [esp + 0xfc]
mov edx, dword [esp + 0xf8]
add dword [esp + 0x90], ecx
add dword [esp + 0x7c], edx
add edi, eax
mov eax, dword [esp + 0x6c]
add dword [esp + 0x78], eax
mov eax, dword [esp + 0x10c]
add dword [esp + 0x88], eax
mov eax, dword [esp + 0x104]
add dword [esp + 0x80], eax
cmp dword [esp + 0x48], 0
mov dword [esp + 0xd8], edi
jg 0x4b4c29
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x104
ret
jle 0x4b579c
cmp dword [esp + 0x48], 0
jle 0x4b579c
mov eax, dword [esp + 0xe4]
cdq
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0xec]
mov dword [esp + 0xc8], edx
cdq
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0xe8]
mov dword [esp + 0xb8], edx
cdq
mov dword [esp + 0xbc], eax
mov eax, dword [esp + 0xd4]
mov dword [esp + 0xc0], edx
cdq
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 0xd0], edx
cdq
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0xe0]
mov dword [esp + 0xb0], edx
cdq
mov dword [esp + 0x40], edx
mov edx, dword [esp + 0xf4]
mov dword [esp + 0x3c], eax
lea eax, [edx*4]
lea edx, [edi + 0xffff]
add ecx, 0xffff
mov dword [esp + 0x6c], eax
mov dword [esp + 0x2c], edx
mov dword [esp + 0x38], ecx
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0xc4]
sub dword [esp + 0x48], 1
and eax, 0xffff0000
mov dword [esp + 0x98], eax
sub eax, edi
cdq
push edx
mov ebx, eax
mov eax, dword [esp + 0xcc]
push ebx
push eax
push ecx
mov dword [esp + 0xb0], edx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, dword [esp + 0x84]
mov edx, dword [esp + 0xa0]
mov ecx, dword [esp + 0xb4]
push edx
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0xbc]
push ebx
push eax
push ecx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, dword [esp + 0x8c]
mov edx, dword [esp + 0xa0]
mov ecx, dword [esp + 0xbc]
push edx
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0xc4]
push ebx
push eax
push ecx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, dword [esp + 0x88]
mov edx, dword [esp + 0xa0]
mov ecx, dword [esp + 0xcc]
push edx
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0xd4]
push ebx
push eax
push ecx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, dword [esp + 0x90]
mov edx, dword [esp + 0xa0]
mov ecx, dword [esp + 0xac]
push edx
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0xb4]
push ebx
push eax
push ecx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
add eax, dword [esp + 0x7c]
mov edx, dword [esp + 0xa0]
mov ecx, dword [esp + 0x3c]
push edx
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x44]
push ebx
push eax
push ecx
call fcn.0063a250
mov cl, 0x10
call fcn.00643e20
mov edx, dword [esp + 0x98]
add eax, dword [esp + 0x80]
mov ecx, edx
sar ecx, 0x10
mov ebx, dword [esp + 0x78]
lea ecx, [ebx + ecx*4]
mov dword [esp + 0x64], ecx
mov ecx, dword [esp + 0x2c]
and ecx, 0xffff0000
sub ecx, edx
sar ecx, 0x10
test ecx, ecx
jle 0x4b5719
mov edx, dword [esp + 0x4c]
add eax, 0xffff8000
add edx, 0xffff8000
mov dword [esp + 0x54], eax
mov dword [esp + 0x5c], edx
sub ecx, 1
xor edi, edi
cmp edx, edi
mov dword [esp + 0x60], ecx
jle 0x4b53e5
mov ecx, edx
and ecx, 0xffff0000
xor ebx, ebx
mov dword [esp + 0x24], ecx
lea edi, [ebp - 1]
sar ecx, 0x10
cmp ecx, edi
setl bl
mov edi, ebx
mov dword [esp + 0x14], ebx
jmp 0x4b53ed
mov dword [esp + 0x24], edi
mov dword [esp + 0x14], edi
xor ecx, ecx
cmp eax, ecx
jle 0x4b5425
mov edi, dword [esp + 0x110]
mov ecx, eax
and ecx, 0xffff0000
add edi, 0xffffffff
xor ebx, ebx
mov dword [esp + 0xa4], ecx
sar ecx, 0x10
cmp ecx, edi
mov edi, dword [esp + 0x14]
setge bl
sub ebx, 1
and ebx, ebp
mov dword [esp + 0x10], ebx
jmp 0x4b5430
mov dword [esp + 0xa4], ecx
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0xa4]
mov ebx, dword [esp + 0x24]
sub edx, dword [esp + 0x24]
sub eax, dword [esp + 0xa4]
sar ebx, 0x10
sar ecx, 0x10
imul ecx, ebp
add ecx, ebx
mov ebx, dword [esi + ecx*4]
lea ebp, [ecx + edi]
mov ebp, dword [esi + ebp*4]
mov dword [esp + 0x1c], ebp
mov ebp, dword [esp + 0x10]
add ecx, ebp
mov ebp, dword [esi + ecx*4]
and edx, 0xfffe
add edx, 1
and eax, 0xfffe
add eax, 1
add edi, ecx
mov ecx, dword [esi + edi*4]
mov dword [esp + 0x18], ebp
mov dword [esp + 0x14], ebx
mov dword [esp + 0x4c], edx
shr ebx, 0x18
mov edi, 0x10000
sub edi, edx
mov dword [esp + 0x98], edi
mov ebp, 0x10000
sub ebp, eax
imul edx, ebp
imul edi, ebp
mov ebp, eax
imul eax, dword [esp + 0x4c]
imul ebp, dword [esp + 0x98]
shr edx, 0x10
shr edi, 0x10
imul edi, ebx
mov ebx, dword [esp + 0x1c]
shr ebx, 0x18
imul edx, ebx
mov ebx, dword [esp + 0x18]
shr ebx, 0x18
shr eax, 0x10
shr ebp, 0x10
imul ebp, ebx
mov ebx, ecx
shr ebx, 0x18
imul eax, ebx
shr eax, 0x10
mov ebx, eax
mov dword [esp + 0x24], ebx
mov eax, ecx
and eax, 0xff0000
imul eax, ebx
mov ebx, dword [esp + 0x18]
and ebx, 0xff0000
shr ebp, 0x10
imul ebx, ebp
add eax, ebx
mov ebx, dword [esp + 0x1c]
shr edx, 0x10
mov dword [esp + 0x10], edx
and ebx, 0xff0000
imul ebx, edx
mov edx, dword [esp + 0x14]
and edx, 0xff0000
shr edi, 0x10
imul edx, edi
add eax, ebx
add eax, edx
movzx edx, byte [esp + 0x18]
movzx ebx, cl
imul edx, ebp
imul ebx, dword [esp + 0x24]
add ebx, edx
movzx edx, byte [esp + 0x1c]
imul edx, dword [esp + 0x10]
and eax, 0xff0000ff
mov dword [esp + 0x30], ebp
add ebx, edx
mov edx, dword [esp + 0x14]
movzx ebp, dl
imul ebp, edi
and ecx, 0xff00
imul ecx, dword [esp + 0x24]
add ebx, ebp
mov ebp, dword [esp + 0x10]
and ebx, 0xff00
or eax, ebx
mov ebx, dword [esp + 0x18]
and ebx, 0xff00
imul ebx, dword [esp + 0x30]
add ecx, ebx
mov ebx, dword [esp + 0x1c]
and edx, 0xff00
imul edx, edi
and ebx, 0xff00
imul ebx, ebp
add ecx, ebx
add ecx, edx
mov edx, dword [esp + 0x30]
and ecx, 0xff0000
or eax, ecx
mov ecx, dword [esp + 0x24]
add ecx, edx
add ecx, ebp
add ecx, edi
mov edi, dword [esp + 0x20]
mov ebx, dword [esp + 0x28]
shl ecx, 0x18
shr eax, 8
and ecx, 0xff000000
or eax, ecx
mov ecx, eax
shr edi, 0x10
and ecx, 0xff0000
imul ecx, edi
movzx edi, al
shr ebx, 0x10
imul edi, ebx
mov ebp, dword [esp + 0x74]
and ecx, 0xff0000ff
and edi, 0xff00
or ecx, edi
mov edi, dword [esp + 0x34]
and eax, 0xff00
shr edi, 0x10
imul eax, edi
and eax, 0xff0000
or ecx, eax
mov ebx, dword [esp + 0x64]
shr ecx, 8
mov eax, ecx
and eax, 0xff0000
mov edi, ecx
and edi, 0xff00
movzx ecx, cl
mov edx, ebp
shr edx, 0x10
imul eax, edx
imul edi, edx
imul ecx, edx
mov edx, dword [ebx]
and eax, 0xff0000ff
and edi, 0xff0000
or eax, edi
and ecx, 0xff00
or eax, ecx
shr eax, 8
mov edi, eax
mov ecx, edx
and eax, 0xff00
and edi, 0xff00ff
and ecx, 0xff00ff
and edx, 0xff00
add edx, eax
add ecx, edi
mov eax, ecx
shr eax, 8
and eax, 1
imul eax, eax, 0xff
mov edi, ecx
shr edi, 0x18
and edi, 1
imul edi, edi, 0xffff0000
add ebp, dword [esp + 0xe4]
or eax, edi
or eax, ecx
mov ecx, edx
shr ecx, 0x10
and ecx, 1
neg ecx
shl ecx, 8
or ecx, edx
mov edx, dword [esp + 0xec]
add dword [esp + 0x20], edx
mov edx, dword [esp + 0x5c]
add edx, dword [esp + 0xdc]
and eax, 0xffff00ff
and ecx, 0xff00
or eax, ecx
mov ecx, dword [esp + 0xd4]
add dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x60]
or eax, 0xff000000
mov dword [ebx], eax
mov eax, dword [esp + 0xe8]
add dword [esp + 0x34], eax
mov eax, dword [esp + 0x54]
add eax, dword [esp + 0xe0]
add ebx, 4
test ecx, ecx
mov dword [esp + 0x74], ebp
mov ebp, dword [esp + 0x70]
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
mov dword [esp + 0x54], eax
jg 0x4b53b7
mov edi, dword [esp + 0xd8]
mov eax, dword [esp + 0x108]
add dword [esp + 0x2c], eax
mov edx, dword [esp + 0xa8]
add dword [esp + 0x38], edx
mov ecx, dword [esp + 0x100]
mov edx, dword [esp + 0xf0]
add dword [esp + 0x84], ecx
add dword [esp + 0x8c], edx
mov ecx, dword [esp + 0xfc]
mov edx, dword [esp + 0xf8]
add dword [esp + 0x90], ecx
add dword [esp + 0x7c], edx
add edi, eax
mov eax, dword [esp + 0x6c]
add dword [esp + 0x78], eax
mov eax, dword [esp + 0x10c]
add dword [esp + 0x88], eax
mov eax, dword [esp + 0x104]
add dword [esp + 0x80], eax
cmp dword [esp + 0x48], 0
mov dword [esp + 0xd8], edi
jg 0x4b5245
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x104
ret