Function at 0x491770
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x90eeac]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x180]
cmp eax, dword [ecx + 8]
jbe 0x49416d
sub esp, 0x200
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.004716fb
mov ecx, dword [esp + 0x208]
mov edx, dword [esp + 0x204]
xor ebx, ebx
xor ebp, ebp
mov esi, 0xffffffff
xor edi, edi
mov ecx, 0xffffffff
mov dword [esp + 0xd4], ecx
mov ecx, 0xffffffff
mov dword [esp + 0x6c], ecx
xor ecx, ecx
mov dword [esp + 0xa0], ecx
xor ecx, ecx
mov byte [esp + 0x36], cl
xor edx, edx
mov byte [esp + 0x37], dl
mov edx, 0xffffffff
mov dword [esp + 0xac], edx
xor edx, edx
mov dword [esp + 0xb4], edx
xor edx, edx
mov dword [esp + 0xcc], edx
xor edx, edx
mov dword [esp + 0x18c], edx
xor ebx, ebx
mov dword [esp + 0x94], ebx
xor ebx, ebx
mov dword [esp + 0x8c], ebx
xor ebx, ebx
mov dword [esp + 0x1cc], ebx
mov ebx, dword [esp + 0x210]
mov dword [esp + 0x138], ebx
mov ebx, dword [esp + 0x20c]
mov dword [esp + 0x1e8], ebx
mov ecx, dword [esp + 0x208]
mov edx, dword [esp + 0x204]
xor ebx, ebx
jmp 0x491888
mov edx, dword [esp + 0x1bc]
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x74]
mov esi, dword [esp + 0x78]
mov dword [esp + 0x18c], eax
mov dword [esp + 0x138], edi
mov dword [esp + 0x1e8], ecx
mov ecx, dword [esp + 0x84]
mov edi, dword [esp + 0x188]
mov dword [esp + 0x70], ebx
mov dword [esp + 0x188], edi
mov dword [esp + 0x134], ecx
mov dword [esp + 0x1e4], edx
mov dword [esp + 0x74], ebp
mov dword [esp + 0x78], esi
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.0049ac00
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x134]
mov ebx, edx
sub ebx, ecx
mov ebp, dword [esp + 0x10]
mov esi, dword [esp + 8]
cmp edx, ebx
jb 0x494165
mov edx, dword [esp + 0xc]
cmp edx, ebx
ja 0x49415c
mov dword [esp + 0x88], ebp
mov dword [esp + 0x134], ebx
mov dword [esp + 0x84], ecx
mov dword [esp + 0x1bc], eax
mov dword [esp + 0x98], edx
mov dword [esp + 0x1d0], esi
mov eax, dword [esp + 0x1e8]
mov dword [esp], eax
mov eax, dword [esp + 0x138]
mov dword [esp + 4], eax
call fcn.004914c0
mov eax, dword [esp + 0x134]
mov ecx, dword [esp + 0x98]
sub eax, ecx
mov edx, eax
neg eax
sar eax, 0x1f
and eax, ecx
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1e4]
add eax, ebp
mov ebp, dword [esp + 0x10]
mov dword [esp + 0x1e8], ebp
mov esi, dword [esp + 0x14]
mov dword [esp + 0x80], esi
test ebx, ebx
jne 0x49386b
mov edi, dword [esp + 0x88]
test edi, edi
je 0x492889
mov dword [esp + 0x138], edx
mov dword [esp + 0x1c0], eax
mov ecx, edi
and edi, 0xffff
cmp edi, 0x106
jg 0x4921d1
cmp edi, 0x23
jg 0x491f71
cmp edi, 0x1c
jg 0x491ac3
cmp edi, 0x17
jne 0x491a8d
mov dword [esp + 0xd0], ebx
cmp esi, 3
jl 0x4919ec
cmp word [ebp], 0x5455
jne 0x4919ec
cmp byte [ebp + 2], 0x43
jne 0x4919ec
lea ecx, [esi - 3]
mov edi, ecx
neg ecx
sar ecx, 0x1f
and ecx, 3
mov eax, dword [0x8e1efc]
add ecx, ebp
jmp 0x49286d
mov dword [esp], ebp
mov dword [esp + 4], esi
call fcn.00494180
movzx eax, byte [esp + 0xc]
test al, al
je 0x491a62
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x80]
cmp ecx, edx
ja 0x494157
mov esi, edx
sub esi, ecx
mov eax, esi
neg eax
sar eax, 0x1f
and eax, ecx
mov edi, dword [esp + 0x1e8]
lea ebp, [eax + edi]
mov edx, dword [esp + 0x138]
mov eax, dword [esp + 0x18c]
mov dword [esp + 0x70], ecx
mov dword [esp + 0x188], edi
mov edi, esi
mov ecx, ebp
mov ebx, dword [esp + 0xd0]
mov ebp, dword [esp + 0x188]
mov esi, dword [esp + 0x80]
jmp 0x49286d
mov ebx, dword [0x8e2528]
mov edx, dword [esp + 0x138]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x49286d
cmp edi, 0x18
jl 0x492591
test esi, esi
je 0x491acc
cmp byte [ebp], 0x5a
jne 0x491acc
lea ecx, [esi - 1]
mov edi, ecx
neg ecx
sar ecx, 0x1f
and ecx, 1
add ecx, ebp
mov ebp, dword [0x8e1efc]
mov eax, ebp
mov ebp, dword [esp + 0x1e8]
jmp 0x49286d
cmp edi, 0x21
jg 0x491e61
cmp ecx, 0x1b
je 0x491ad6
cmp ecx, 0x20
jne 0x491b42
cmp esi, 6
jge 0x491af1
mov ebx, dword [0x8e2528]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x49286d
cmp byte [ebp + 3], 0x3a
je 0x491b0d
mov ebx, dword [0x8e2528]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x49286d
lea ecx, [esi - 6]
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 6
lea edi, [ebp + 1]
lea eax, [ebp + 4]
add ecx, ebp
mov dword [esp + 0xf8], eax
lea eax, [0x6b7dec]
mov dword [esp + 0x1c4], eax
mov eax, dword [esp + 0xf8]
jmp 0x491cfd
cmp ecx, 0x1f
je 0x491b4c
cmp ecx, 0x1a
jne 0x491ba6
cmp esi, 3
jge 0x491b67
mov ebx, dword [0x8e2528]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x49286d
lea ecx, [esi - 3]
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 3
lea edi, [ebp + 1]
add ecx, ebp
mov dword [esp + 0x108], eax
lea eax, [0x6b7dec]
mov dword [esp + 0x1c4], eax
lea eax, [0x6b7dec]
mov dword [esp + 0x1d4], eax
mov eax, dword [esp + 0x108]
jmp 0x491cf6
cmp ecx, 0x1c
je 0x491bb0
cmp ecx, 0x21
jne 0x491c2c
cmp esi, 9
jge 0x491bcb
mov ebx, dword [0x8e2528]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x49286d
cmp byte [ebp + 3], 0x3a
jne 0x491bd7
cmp byte [ebp + 6], 0x3a
je 0x491bed
mov ebx, dword [0x8e2528]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x49286d
lea ecx, [esi - 9]
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 9
lea edi, [ebp + 1]
lea eax, [ebp + 4]
lea edx, [ebp + 7]
add ecx, ebp
mov dword [esp + 0x1c4], edx
mov edx, dword [esp + 0x138]
mov dword [esp + 0x110], eax
mov eax, ecx
mov ecx, ebx
mov ebx, eax
mov eax, dword [esp + 0x110]
jmp 0x491cd8
cmp ecx, 0x19
je 0x491c36
cmp ecx, 0x1e
jne 0x491c8d
cmp esi, 7
jge 0x491c51
mov ebx, dword [0x8e2528]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x49286d
lea ecx, [esi - 7]
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 7
lea edi, [ebp + 1]
lea eax, [ebp + 3]
lea edx, [ebp + 5]
add ecx, ebp
mov dword [esp + 0x1c4], edx
mov edx, dword [esp + 0x138]
mov dword [esp + 0x120], eax
mov eax, ecx
mov ecx, ebx
mov ebx, eax
mov eax, dword [esp + 0x120]
jmp 0x491cd8
cmp esi, 5
jge 0x491ca8
mov ebx, dword [0x8e2528]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x49286d
lea ecx, [esi - 5]
mov ebx, ecx
neg ebx
sar ebx, 0x1f
and ebx, 5
lea edi, [ebp + 1]
lea eax, [ebp + 3]
add ebx, ebp
mov dword [esp + 0x118], eax
lea eax, [0x6b7dec]
mov dword [esp + 0x1c4], eax
mov eax, dword [esp + 0x118]
mov dword [esp + 0x1d4], eax
mov eax, dword [esp + 0x1c0]
mov dword [esp + 0x100], ecx
mov ecx, ebx
mov ebx, dword [esp + 0x100]
mov eax, dword [esp + 0x1d4]
mov dword [esp + 0x1d4], eax
mov dword [esp + 0x134], ebx
mov dword [esp + 0x1e4], ecx
mov dword [esp], edi
mov dword [esp + 4], 2
mov byte [esp + 8], 1
call fcn.004913b0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xc8], ecx
test eax, eax
je 0x491d3e
xor edx, edx
jmp 0x491d6d
mov eax, dword [esp + 0x1d4]
mov dword [esp], eax
mov dword [esp + 4], 2
mov byte [esp + 8], 1
call fcn.004913b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, eax
mov eax, ecx
mov ecx, dword [esp + 0xc8]
test eax, eax
je 0x491d75
xor ebx, ebx
jmp 0x491db2
mov dword [esp + 0xb0], edx
mov eax, dword [esp + 0x1c4]
mov dword [esp], eax
mov dword [esp + 4], 2
mov byte [esp + 8], 1
call fcn.004913b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0xb0]
mov ebx, eax
mov eax, ecx
mov ecx, dword [esp + 0xc8]
cmp ecx, 0x18
jle 0x491dc4
mov ebp, 0x15
lea esi, [0x6c06be]
jmp 0x491dd2
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x1cc]
cmp edx, 0x3c
jle 0x491de2
mov ebp, 0x17
lea esi, [0x6c1ab5]
cmp ebx, 0x3c
jle 0x491df2
mov ebp, 0x17
lea esi, [0x6c1acc]
imul ecx, ecx, 0x3c
add ecx, edx
imul ecx, ecx, 0x3c
mov edx, dword [esp + 0x1e8]
movzx edi, byte [edx]
add ecx, ebx
xchg edi, eax
cmp al, 0x2b
xchg edi, eax
je 0x491e1e
xchg edi, eax
cmp al, 0x2d
xchg edi, eax
jne 0x491e18
neg ecx
jmp 0x491e1e
mov eax, dword [0x8e2528]
mov edx, dword [esp + 0x138]
mov dword [esp + 0x94], ebp
mov dword [esp + 0x6c], ecx
mov edi, dword [esp + 0x134]
mov ecx, dword [esp + 0x1e4]
mov ebx, eax
mov dword [esp + 0x1cc], esi
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov eax, dword [esp + 0x18c]
jmp 0x49286d
cmp edi, 0x22
jne 0x491f28
sar ecx, 0x10
and ecx, 0xfff
lea ebx, [ecx + 1]
cmp esi, ebx
jge 0x491e90
mov ebx, dword [0x8e2528]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x49286d
mov dword [esp + 0x64], ecx
mov dword [esp + 0xa4], ebx
lea eax, [0x71cbb8]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
call fcn.0049bfd0
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x64]
sub eax, ecx
lea esi, [eax - 1]
mov eax, esi
neg eax
sar eax, 0x1f
mov ecx, dword [esp + 0xa4]
and ecx, eax
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov edi, dword [esp + 0x18]
mov edx, dword [esp + 0x1e8]
add ecx, edx
mov edx, dword [esp + 0x138]
mov dword [esp + 0x94], edi
mov edi, esi
mov dword [esp + 0x1cc], ebx
mov dword [esp + 0xa0], eax
mov esi, dword [esp + 0x80]
mov eax, dword [esp + 0x18c]
mov ebx, ebp
mov ebp, dword [esp + 0x1e8]
jmp 0x49286d
cmp edi, 0x23
jne 0x492591
cmp esi, 2
jl 0x491f61
movzx edi, byte [ebp]
xchg edi, eax
cmp al, 0x2e
xchg edi, eax
je 0x491f48
xchg edi, eax
cmp al, 0x2c
xchg edi, eax
jne 0x491f61
movzx edi, byte [ebp + 1]
xchg edi, eax
cmp al, 0x30
xchg edi, eax
jb 0x491f61
xchg edi, eax
cmp al, 0x39
xchg edi, eax
ja 0x491f61
xor ecx, ecx
jmp 0x494087
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x49286d
cmp edi, 0x102
jg 0x49205f
cmp edi, 0x101
je 0x491ff8
cmp edi, 0x102
jne 0x492591
mov eax, dword [0x8e2e58]
mov ecx, dword [0x8e2e5c]
mov edx, dword [0x8e2e60]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.0048da90
mov eax, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
inc eax
mov edx, dword [esp + 0x138]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
jmp 0x49286d
mov eax, dword [0x8e2e68]
mov ecx, dword [0x8e2e6c]
mov edx, dword [0x8e2e70]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.0048da90
mov eax, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
inc eax
mov edx, dword [esp + 0x138]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
jmp 0x49286d
cmp edi, 0x104
jle 0x492135
cmp edi, 0x105
je 0x4920da
cmp edi, 0x106
jne 0x492591
mov eax, dword [0x8e2e48]
mov ecx, dword [0x8e2e4c]
mov edx, dword [0x8e2e50]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.0048da90
mov ebp, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x138]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
jmp 0x49286d
mov eax, dword [0x8e2e38]
mov ecx, dword [0x8e2e3c]
mov edx, dword [0x8e2e40]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.0048da90
mov ebp, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x138]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
jmp 0x49286d
mov dword [esp], ebp
mov dword [esp + 4], esi
cmp ecx, 0x104
sete al
mov byte [esp + 8], al
call fcn.004913b0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0xc]
test eax, eax
je 0x49216a
mov edx, dword [esp + 0x94]
mov ebx, dword [esp + 0x1cc]
jmp 0x49218d
lea edx, [ecx - 1]
cmp edx, 0xb
jbe 0x49217f
mov edx, 5
lea ebx, [0x6b87b4]
jmp 0x49218d
mov edx, dword [esp + 0x94]
mov ebx, dword [esp + 0x1cc]
mov ebp, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
mov dword [esp + 0x94], edx
mov dword [esp + 0xac], ecx
mov edi, esi
mov ecx, ebp
mov dword [esp + 0x1cc], ebx
mov edx, dword [esp + 0x138]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov ebx, eax
mov eax, dword [esp + 0x18c]
jmp 0x49286d
cmp edi, 0x20c
jg 0x49246d
cmp edi, 0x10b
jg 0x49228d
cmp edi, 0x109
jle 0x492205
mov ebx, esi
mov edi, ebp
xor ebx, ebx
mov dword [esp + 0xc4], ebx
mov ebx, esi
jmp 0x493fa1
cmp ecx, 0x108
jne 0x492234
test esi, esi
je 0x49222e
cmp byte [ebp], 0x20
jne 0x492228
lea ebx, [esi - 1]
mov edi, ebx
neg ebx
sar ebx, 0x1f
and ebx, 1
add ebx, ebp
jmp 0x492238
mov edi, esi
mov ebx, ebp
jmp 0x492238
mov edi, esi
mov ebx, ebp
jmp 0x492238
mov edi, esi
mov ebx, ebp
mov dword [esp], ebx
mov dword [esp + 4], edi
cmp ecx, 0x109
sete al
mov byte [esp + 8], al
call fcn.004913b0
mov eax, dword [esp + 0xc]
mov ebp, dword [esp + 0x10]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x138]
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
jmp 0x49286d
cmp edi, 0x113
jne 0x492329
cmp esi, 4
jl 0x4922aa
movzx ecx, byte [ebp]
add ecx, 0xffffffd0
cmp cl, 9
jbe 0x4922c0
mov ebx, dword [0x8e2528]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x49286d
lea eax, [0x71cbb0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], 4
call fcn.0049c150
mov eax, dword [esp + 0x80]
lea esi, [eax - 4]
mov ecx, esi
neg ecx
sar ecx, 0x1f
and ecx, 4
mov edx, dword [esp + 0x1e8]
lea ebp, [ecx + edx]
mov ecx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov edx, dword [esp + 0x138]
mov dword [esp + 0x74], ecx
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
jmp 0x49286d
cmp edi, 0x114
jne 0x4923e6
cmp esi, 2
jge 0x492350
mov ebx, dword [0x8e2528]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x49286d
lea eax, [0x71cbb0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], 2
call fcn.0049c150
mov eax, dword [esp + 0x80]
lea ecx, [eax - 2]
mov edx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 2
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x1e8]
add ecx, ebp
mov esi, dword [esp + 0xc]
test ebx, ebx
je 0x4923b3
mov dword [esp + 0x74], esi
mov eax, dword [esp + 0x18c]
mov edi, edx
mov edx, dword [esp + 0x138]
mov esi, dword [esp + 0x80]
jmp 0x49286d
cmp esi, 0x45
jl 0x4923c0
add esi, 0x76c
jmp 0x4923c6
add esi, 0x7d0
mov dword [esp + 0x74], esi
mov eax, dword [esp + 0x18c]
mov edi, edx
mov edx, dword [esp + 0x138]
mov esi, dword [esp + 0x80]
jmp 0x49286d
cmp edi, 0x20c
jne 0x492591
mov dword [esp], ebp
mov dword [esp + 4], esi
mov byte [esp + 8], 0
call fcn.004913b0
mov eax, dword [esp + 0xc]
cmp eax, 0x18
jb 0x492419
mov ecx, 4
lea edx, [0x6b8461]
jmp 0x492427
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x1cc]
mov ebp, dword [esp + 0x10]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov dword [esp + 0x94], ecx
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
mov dword [esp + 0x1cc], edx
mov edx, dword [esp + 0x138]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
jmp 0x49286d
cmp edi, 0x210
jle 0x492763
cmp edi, 0x212
jle 0x4925a1
cmp edi, 0x215
jne 0x49250b
cmp esi, 2
jge 0x4924a8
mov ebx, dword [0x8e2528]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x49286d
lea ecx, [esi - 2]
mov edi, ecx
neg ecx
sar ecx, 0x1f
and ecx, 2
add ecx, ebp
cmp word [ebp], 0x4d41
jne 0x4924d8
mov dword [esp + 0xe8], eax
mov eax, 1
mov byte [esp + 0x37], al
mov eax, dword [esp + 0xe8]
jmp 0x4924ff
cmp word [ebp], 0x4d50
jne 0x4924f9
mov dword [esp + 0xf0], eax
mov eax, 1
mov byte [esp + 0x36], al
mov eax, dword [esp + 0xf0]
jmp 0x4924ff
mov ebx, dword [0x8e2528]
mov eax, dword [esp + 0x18c]
jmp 0x49286d
cmp edi, 0x216
jne 0x492591
cmp esi, 2
jge 0x49252e
mov ebx, dword [0x8e2528]
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x49286d
lea ecx, [esi - 2]
mov edi, ecx
neg ecx
sar ecx, 0x1f
and ecx, 2
add ecx, ebp
cmp word [ebp], 0x6d61
jne 0x49255e
mov dword [esp + 0xd8], eax
mov eax, 1
mov byte [esp + 0x37], al
mov eax, dword [esp + 0xd8]
jmp 0x492585
cmp word [ebp], 0x6d70
jne 0x49257f
mov dword [esp + 0xe0], eax
mov eax, 1
mov byte [esp + 0x36], al
mov eax, dword [esp + 0xe0]
jmp 0x492585
mov ebx, dword [0x8e2528]
mov eax, dword [esp + 0x18c]
jmp 0x49286d
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
jmp 0x49286d
mov dword [esp], ebp
mov dword [esp + 4], esi
cmp ecx, 0x212
sete al
mov byte [esp + 8], al
call fcn.004913b0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x14]
test eax, eax
je 0x4925fa
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov dword [esp + 0x8c], edx
mov edi, ebx
mov ebx, eax
mov edx, dword [esp + 0x138]
mov eax, dword [esp + 0x18c]
jmp 0x49286d
cmp edx, 0x3c
jb 0x492644
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov edi, 6
mov dword [esp + 0x94], edi
mov dword [esp + 0x8c], edx
mov edi, ebx
mov ebx, eax
lea eax, [0x6b8c0c]
mov dword [esp + 0x1cc], eax
mov edx, dword [esp + 0x138]
mov eax, dword [esp + 0x18c]
jmp 0x49286d
cmp ebx, 2
jl 0x492749
movzx ebp, byte [ecx]
xchg ebp, eax
cmp al, 0x2e
xchg ebp, eax
je 0x492662
xchg ebp, eax
cmp al, 0x2c
xchg ebp, eax
jne 0x49272f
movzx ebp, byte [ecx + 1]
add ebp, 0xffffffd0
xchg ebp, eax
cmp al, 9
xchg ebp, eax
jbe 0x49268a
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0xa0]
mov edi, dword [esp + 0x1cc]
jmp 0x493ecb
mov dword [esp + 0x130], edx
mov dword [esp + 0x12c], eax
mov dword [esp + 0x90], ebx
mov dword [esp + 0x1c8], ecx
mov eax, dword [esp + 0x1bc]
mov dword [esp], eax
mov ecx, dword [esp + 0x84]
mov dword [esp + 4], ecx
call fcn.0049ac00
mov eax, dword [esp + 0x10]
and eax, 0xffff
cmp eax, 0x22
je 0x4926d3
cmp eax, 0x23
jne 0x492717
mov edx, dword [esp + 0x138]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov eax, dword [esp + 0x130]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x18c]
mov edi, dword [esp + 0x90]
mov ecx, dword [esp + 0x1c8]
mov ebx, dword [esp + 0x12c]
jmp 0x49286d
mov eax, dword [esp + 0x1c8]
mov ecx, dword [esp + 0x90]
mov edx, 2
jmp 0x493f0d
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0xa0]
mov edi, dword [esp + 0x1cc]
jmp 0x493ecb
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0xa0]
mov edi, dword [esp + 0x1cc]
jmp 0x493ecb
cmp edi, 0x20e
jg 0x4927ef
mov dword [esp], ebp
mov dword [esp + 4], esi
cmp ecx, 0x20e
sete al
mov byte [esp + 8], al
call fcn.004913b0
mov eax, dword [esp + 0xc]
cmp eax, 0xc
jbe 0x49279e
mov ecx, 4
lea edx, [0x6b8461]
jmp 0x4927ac
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x1cc]
mov ebp, dword [esp + 0x10]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov dword [esp + 0x94], ecx
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
mov dword [esp + 0x1cc], edx
mov edx, dword [esp + 0x138]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
jmp 0x49286d
mov dword [esp], ebp
mov dword [esp + 4], esi
cmp ecx, 0x210
sete al
mov byte [esp + 8], al
call fcn.004913b0
mov eax, dword [esp + 0xc]
cmp eax, 0x3c
jb 0x49281e
mov ecx, 6
lea edx, [0x6b8c06]
jmp 0x49282c
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x1cc]
mov ebp, dword [esp + 0x10]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov dword [esp + 0x94], ecx
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ecx, ebp
mov dword [esp + 0x1cc], edx
mov edx, dword [esp + 0x138]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov ebp, dword [esp + 0x94]
test ebp, ebp
jne 0x493c72
test ebx, ebx
je 0x491852
jmp 0x493aa0
test esi, esi
jne 0x493655
movzx edx, byte [esp + 0x36]
test dl, dl
je 0x4928ab
mov edx, dword [esp + 0xcc]
cmp edx, 0xc
jge 0x4928b2
add edx, 0xc
jmp 0x4928c2
mov edx, dword [esp + 0xcc]
movzx ebx, byte [esp + 0x37]
test bl, bl
je 0x4928c2
cmp edx, 0xc
jne 0x4928c2
xor edx, edx
mov ebx, dword [esp + 0x78]
test ebx, ebx
jl 0x492d6a
mov eax, dword [esp + 0x74]
test eax, 3
jne 0x492932
mov ebp, 0x51eb851f
mov ecx, edx
imul ebp
mov eax, dword [esp + 0x74]
mov esi, eax
sar esi, 0x1f
mov edi, edx
sar edx, 5
sub edx, esi
imul edx, edx, 0x64
cmp eax, edx
jne 0x492908
sar edi, 7
sub edi, esi
imul edx, edi, 0x190
cmp eax, edx
jne 0x49292a
cmp ebx, 0x3c
jne 0x49291b
mov esi, ebx
mov edx, 2
mov ebx, 0x1d
jmp 0x49293f
jle 0x492922
lea esi, [ebx - 1]
jmp 0x492924
mov esi, ebx
xor edx, edx
xor ebx, ebx
jmp 0x49293f
mov esi, ebx
xor edx, edx
xor ebx, ebx
jmp 0x49293f
mov ecx, edx
mov ebp, 0x51eb851f
mov esi, ebx
xor edx, edx
xor ebx, ebx
lea edi, [esi - 1]
cmp edi, 0x16c
jbe 0x492a7f
mov eax, dword [esp + 0x210]
test eax, eax
jne 0x49295f
xor ecx, ecx
xor edx, edx
jmp 0x4929b7
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.00466310
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x20c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x210]
mov dword [esp + 8], ecx
call fcn.00471df0
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x210]
cmp edx, eax
ja 0x493a9b
mov dword [esp + 0x44], edx
mov dword [esp + 0x148], ecx
lea eax, [0x69b440]
mov dword [esp], eax
call fcn.0040bdb0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x208]
mov dword [eax + 4], ecx
mov ecx, dword [0x90f128]
test ecx, ecx
jne 0x4929f8
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x148]
jmp 0x492a10
call fcn.00471470
mov ecx, dword [esp + 0x204]
mov dword [edi], ecx
mov edx, dword [esp + 0x148]
mov dword [edi + 4], edx
mov dword [esp + 0x174], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x24], 0x1a
lea ecx, [0x6c37aa]
mov dword [eax + 0x20], ecx
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.004716fb
lea ecx, [0x71d6e0]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x174]
mov dword [esp + 0x234], ecx
add esp, 0x200
ret
test edx, edx
jne 0x492ada
mov edx, eax
mov eax, 0x84210843
mov ebx, edx
imul edi
lea edx, [edx + esi - 1]
sar edx, 4
lea eax, [edx + 1]
cmp eax, 0xd
jae 0x493a91
mov dword [esp + 0x138], ecx
lea edi, [0x8aca40]
lea ecx, [edi + edx*4 + 4]
cmp dword [ecx], esi
jge 0x492ab9
lea eax, [edx + 2]
lea edx, [eax - 1]
cmp edx, 0xd
jae 0x493a85
mov ecx, dword [edi + eax*4 - 4]
sub esi, ecx
mov ecx, dword [esp + 0x138]
mov edx, eax
mov ebx, esi
mov eax, dword [esp + 0x74]
mov esi, dword [esp + 0xac]
test esi, esi
jl 0x492c22
cmp edx, esi
je 0x492c22
mov eax, dword [esp + 0x210]
test eax, eax
jne 0x492b02
xor ecx, ecx
xor edx, edx
jmp 0x492b5a
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.00466310
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x20c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x210]
mov dword [esp + 8], ecx
call fcn.00471df0
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x210]
cmp edx, eax
ja 0x493a80
mov dword [esp + 0x144], ecx
mov dword [esp + 0x40], edx
lea eax, [0x69b440]
mov dword [esp], eax
call fcn.0040bdb0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x208]
mov dword [eax + 4], ecx
mov ecx, dword [0x90f128]
test ecx, ecx
jne 0x492b9b
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x144]
jmp 0x492bb3
call fcn.00471470
mov ecx, dword [esp + 0x204]
mov dword [edi], ecx
mov edx, dword [esp + 0x144]
mov dword [edi + 4], edx
mov dword [esp + 0x170], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x40]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x24], 0x22
lea ecx, [0x6c79e8]
mov dword [eax + 0x20], ecx
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.004716fb
lea ecx, [0x71d6e0]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x170]
mov dword [esp + 0x234], ecx
add esp, 0x200
ret
mov esi, dword [esp + 0xd4]
test esi, esi
jl 0x492d99
cmp ebx, esi
je 0x492d99
mov eax, dword [esp + 0x210]
test eax, eax
jne 0x492c4a
xor ecx, ecx
xor edx, edx
jmp 0x492ca2
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.00466310
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x20c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x210]
mov dword [esp + 8], ecx
call fcn.00471df0
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x210]
cmp edx, eax
ja 0x493a7b
mov dword [esp + 0x3c], edx
mov dword [esp + 0x140], ecx
lea eax, [0x69b440]
mov dword [esp], eax
call fcn.0040bdb0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x208]
mov dword [eax + 4], ecx
mov ecx, dword [0x90f128]
test ecx, ecx
jne 0x492ce3
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x140]
jmp 0x492cfb
call fcn.00471470
mov ecx, dword [esp + 0x204]
mov dword [edi], ecx
mov edx, dword [esp + 0x140]
mov dword [edi + 4], edx
mov dword [esp + 0x16c], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x24], 0x20
lea ecx, [0x6c6905]
mov dword [eax + 0x20], ecx
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.004716fb
lea ecx, [0x71d6e0]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x16c]
mov dword [esp + 0x234], ecx
add esp, 0x200
ret
mov ebx, dword [esp + 0xac]
test ebx, ebx
jge 0x492d7a
mov ebx, 1
mov ebp, dword [esp + 0xd4]
test ebp, ebp
jge 0x492d8a
mov ebp, 1
mov eax, dword [esp + 0x74]
mov ecx, edx
mov edx, ebx
mov ebx, ebp
mov ebp, 0x51eb851f
test ebx, ebx
jle 0x492e0e
cmp edx, 2
jne 0x492de0
test eax, 3
jne 0x492dda
mov esi, edx
imul ebp
mov ebp, dword [esp + 0x74]
mov edi, ebp
sar ebp, 0x1f
mov eax, edx
sar edx, 5
sub edx, ebp
imul edx, edx, 0x64
cmp edi, edx
jne 0x492dd3
sar eax, 7
sub eax, ebp
imul edx, eax, 0x190
cmp edi, edx
jne 0x492de4
mov ebp, 0x1d
jmp 0x492e06
mov esi, edx
mov edi, eax
jmp 0x492de4
mov esi, edx
mov edi, eax
cmp esi, 0xd
jae 0x493a6f
lea eax, [esi - 1]
lea edx, [0x8aca40]
mov ebp, dword [edx + esi*4]
cmp eax, 0xd
jae 0x493a65
sub ebp, dword [edx + esi*4 - 4]
cmp ebp, ebx
jge 0x492f3f
mov eax, dword [esp + 0x210]
test eax, eax
jne 0x492e1f
xor ecx, ecx
xor edx, edx
jmp 0x492e77
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.00466310
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x20c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x210]
mov dword [esp + 8], ecx
call fcn.00471df0
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x210]
cmp edx, eax
ja 0x493a60
mov dword [esp + 0x13c], ecx
mov dword [esp + 0x38], edx
lea eax, [0x69b440]
mov dword [esp], eax
call fcn.0040bdb0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x208]
mov dword [eax + 4], ecx
mov ecx, dword [0x90f128]
test ecx, ecx
jne 0x492eb8
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x13c]
jmp 0x492ed0
call fcn.00471470
mov ecx, dword [esp + 0x204]
mov dword [edi], ecx
mov edx, dword [esp + 0x13c]
mov dword [edi + 4], edx
mov dword [esp + 0x168], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x38]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x24], 0x12
lea ecx, [0x6be8a1]
mov dword [eax + 0x20], ecx
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.004716fb
lea ecx, [0x71d6e0]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x168]
mov dword [esp + 0x234], ecx
add esp, 0x200
ret
mov eax, dword [esp + 0x18c]
test eax, eax
jne 0x4935dc
mov eax, dword [esp + 0x6c]
cmp eax, 0xffffffff
jne 0x4932e6
mov eax, dword [esp + 0x70]
test eax, eax
je 0x493266
mov eax, dword [0x8e1efc]
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
call fcn.00496b10
lea edi, [esp + 0x194]
lea esi, [esp + 0x20]
call fcn.00471bde
mov eax, dword [esp + 0x198]
test eax, 0x80000000
je 0x492fed
mov ecx, dword [esp + 0x194]
shl eax, 1
mov edx, ecx
shl ecx, 1
shr edx, 0x1f
or edx, eax
mov eax, edx
shl edx, 1
shr ecx, 0x1f
or edx, ecx
shr eax, 0x1f
add edx, 0xd7b17f80
adc eax, 0xd
jmp 0x492ffb
mov edx, dword [esp + 0x19c]
mov eax, dword [esp + 0x1a0]
mov ecx, dword [esp + 0x218]
mov dword [esp], ecx
mov ebx, dword [esp + 0x188]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x70]
mov dword [esp + 8], ebp
add edx, 0x886e0900
mov dword [esp + 0xc], edx
adc eax, 0xfffffff1
mov dword [esp + 0x10], eax
call fcn.004996d0
movzx eax, byte [esp + 0x18]
mov ecx, dword [esp + 0x14]
test al, al
je 0x49310c
lea eax, [esp + 0x194]
mov dword [esp], eax
mov eax, ecx
sar ecx, 0x1f
xor edx, edx
sub edx, eax
mov dword [esp + 4], edx
mov eax, 0
sbb eax, ecx
mov dword [esp + 8], eax
call fcn.00494ef0
nop
mov eax, dword [esp + 0x218]
lea ecx, [0x8ebb80]
cmp eax, ecx
jne 0x49307a
xor eax, eax
mov ecx, dword [esp + 0x198]
nop
test ecx, 0x80000000
je 0x4930d5
mov edx, dword [esp + 0x194]
mov ebx, edx
shl edx, 1
shl ecx, 1
shr ebx, 0x1f
or ebx, ecx
mov ecx, ebx
shl ebx, 1
shr edx, 0x1f
or edx, ebx
shr ecx, 0x1f
add edx, 0xd7b17f80
mov dword [esp + 0x19c], edx
adc ecx, 0xd
mov dword [esp + 0x1a0], ecx
and dword [esp + 0x194], 0x3fffffff
mov dword [esp + 0x198], 0
mov dword [esp + 0x1a4], eax
lea edi, [esp + 0x21c]
lea esi, [esp + 0x194]
call fcn.00471bde
mov dword [esp + 0x230], 0
mov dword [esp + 0x234], 0
add esp, 0x200
ret
mov eax, dword [esp + 0x70]
cmp eax, 3
jle 0x493153
mov edx, dword [esp + 0x188]
cmp word [edx], 0x4d47
jne 0x493153
cmp byte [edx + 2], 0x54
jne 0x493153
lea ecx, [0x71cbb0]
mov dword [esp], ecx
lea ecx, [edx + 3]
mov dword [esp + 4], ecx
lea ecx, [eax - 3]
mov dword [esp + 8], ecx
call fcn.0049c150
mov eax, dword [esp + 0xc]
imul ecx, eax, 0xe10
mov eax, dword [esp + 0x70]
mov dword [esp + 0x9c], ecx
nop
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.00466310
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x188]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x70]
mov dword [esp + 8], ecx
call fcn.00471df0
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x70]
cmp edx, eax
ja 0x493a5b
mov dword [esp], ecx
mov dword [esp + 4], edx
mov eax, dword [esp + 0x9c]
mov dword [esp + 8], eax
call fcn.00497280
mov eax, dword [esp + 0xc]
lea ecx, [0x8ebb80]
cmp eax, ecx
jne 0x4931d4
xor eax, eax
mov ecx, dword [esp + 0x198]
nop
test ecx, 0x80000000
je 0x49322f
mov edx, dword [esp + 0x194]
mov ebx, edx
shl edx, 1
shl ecx, 1
shr ebx, 0x1f
or ecx, ebx
mov ebx, ecx
shl ecx, 1
shr ebx, 0x1f
shr edx, 0x1f
or edx, ecx
add edx, 0xd7b17f80
mov dword [esp + 0x19c], edx
adc ebx, 0xd
mov dword [esp + 0x1a0], ebx
and dword [esp + 0x194], 0x3fffffff
mov dword [esp + 0x198], 0
mov dword [esp + 0x1a4], eax
lea edi, [esp + 0x21c]
lea esi, [esp + 0x194]
call fcn.00471bde
mov dword [esp + 0x230], 0
mov dword [esp + 0x234], 0
add esp, 0x200
ret
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x214]
mov dword [esp + 0x1c], eax
call fcn.00496b10
lea edi, [esp + 0x1ec]
lea esi, [esp + 0x20]
call fcn.00471bde
lea edi, [esp + 0x21c]
lea esi, [esp + 0x1ec]
call fcn.00471bde
mov dword [esp + 0x230], 0
mov dword [esp + 0x234], 0
add esp, 0x200
ret
mov eax, dword [0x8e1efc]
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
call fcn.00496b10
lea edi, [esp + 0x1a8]
lea esi, [esp + 0x20]
call fcn.00471bde
lea eax, [esp + 0x1a8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov ecx, eax
sar eax, 0x1f
xor edx, edx
sub edx, ecx
mov dword [esp + 4], edx
mov edx, 0
sbb edx, eax
mov dword [esp + 8], edx
call fcn.00494ef0
mov eax, dword [esp + 0x1ac]
test eax, 0x80000000
je 0x493397
mov ecx, dword [esp + 0x1a8]
shl eax, 1
mov edx, ecx
shl ecx, 1
shr edx, 0x1f
or edx, eax
mov eax, edx
shl edx, 1
shr ecx, 0x1f
or ecx, edx
shr eax, 0x1f
add ecx, 0xd7b17f80
adc eax, 0xd
jmp 0x4933a5
mov ecx, dword [esp + 0x1b0]
mov eax, dword [esp + 0x1b4]
mov edx, dword [esp + 0x218]
mov dword [esp], edx
add ecx, 0x886e0900
mov dword [esp + 4], ecx
adc eax, 0xfffffff1
mov dword [esp + 8], eax
call fcn.00497490
mov eax, dword [esp + 0x6c]
cmp dword [esp + 0x14], eax
jne 0x493416
mov ecx, dword [esp + 0x70]
test ecx, ecx
jne 0x4933de
mov edx, 1
jmp 0x49341c
mov edx, dword [esp + 0x10]
cmp ecx, edx
je 0x4933ea
xor edx, edx
jmp 0x49341c
mov eax, dword [esp + 0xc]
mov dword [esp], eax
mov eax, dword [esp + 0x188]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00402430
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x70]
mov edx, eax
mov eax, dword [esp + 0x6c]
jmp 0x49341c
mov ecx, dword [esp + 0x70]
xor edx, edx
test dl, dl
je 0x4934ca
nop
mov eax, dword [esp + 0x218]
lea ecx, [0x8ebb80]
cmp eax, ecx
jne 0x493438
xor eax, eax
mov ecx, dword [esp + 0x1ac]
nop
test ecx, 0x80000000
je 0x493493
mov edx, dword [esp + 0x1a8]
mov ebx, edx
shl edx, 1
shl ecx, 1
shr ebx, 0x1f
or ecx, ebx
mov ebx, ecx
shl ecx, 1
shr edx, 0x1f
or ecx, edx
shr ebx, 0x1f
add ecx, 0xd7b17f80
mov dword [esp + 0x1b0], ecx
adc ebx, 0xd
mov dword [esp + 0x1b4], ebx
and dword [esp + 0x1a8], 0x3fffffff
mov dword [esp + 0x1ac], 0
mov dword [esp + 0x1b8], eax
lea edi, [esp + 0x21c]
lea esi, [esp + 0x1a8]
call fcn.00471bde
mov dword [esp + 0x230], 0
mov dword [esp + 0x234], 0
add esp, 0x200
ret
test ecx, ecx
jne 0x4934d4
xor edx, edx
xor ecx, ecx
jmp 0x49352a
mov dword [esp], ecx
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.00466310
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x188]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x70]
mov dword [esp + 8], ecx
call fcn.00471df0
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x70]
cmp edx, eax
ja 0x493a56
mov eax, dword [esp + 0x6c]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00497280
mov eax, dword [esp + 0xc]
lea ecx, [0x8ebb80]
cmp eax, ecx
jne 0x49354a
xor eax, eax
mov ecx, dword [esp + 0x1ac]
nop
test ecx, 0x80000000
je 0x4935a5
mov edx, dword [esp + 0x1a8]
mov ebx, edx
shl edx, 1
shl ecx, 1
shr ebx, 0x1f
or ecx, ebx
mov ebx, ecx
shl ecx, 1
shr ebx, 0x1f
shr edx, 0x1f
or edx, ecx
add edx, 0xd7b17f80
mov dword [esp + 0x1b0], edx
adc ebx, 0xd
mov dword [esp + 0x1b4], ebx
and dword [esp + 0x1a8], 0x3fffffff
mov dword [esp + 0x1ac], 0
mov dword [esp + 0x1b8], eax
lea edi, [esp + 0x21c]
lea esi, [esp + 0x1a8]
call fcn.00471bde
mov dword [esp + 0x230], 0
mov dword [esp + 0x234], 0
add esp, 0x200
ret
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
call fcn.00496b10
lea edi, [esp + 0x1ec]
lea esi, [esp + 0x20]
call fcn.00471bde
lea edi, [esp + 0x21c]
lea esi, [esp + 0x1ec]
call fcn.00471bde
mov dword [esp + 0x230], 0
mov dword [esp + 0x234], 0
add esp, 0x200
ret
mov dword [esp], ebp
mov dword [esp + 4], esi
call fcn.00490d30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp], 0
lea edx, [0x6bc5e9]
mov dword [esp + 4], edx
mov dword [esp + 8], 0xe
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.004507b0
mov eax, dword [esp + 0x14]
mov dword [esp + 0x1dc], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xbc], ecx
mov edx, dword [esp + 0x210]
test edx, edx
jne 0x4936b6
xor edx, edx
xor ebx, ebx
jmp 0x493717
mov dword [esp], edx
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.00466310
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x20c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x210]
mov dword [esp + 8], ecx
call fcn.00471df0
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x210]
cmp edx, eax
ja 0x493a51
mov edx, ecx
mov ebx, dword [esp + 0x210]
mov dword [esp + 0x58], ebx
mov dword [esp + 0x15c], edx
nop
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.00466310
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x1e8]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x80]
mov dword [esp + 8], ecx
call fcn.00471df0
mov eax, dword [esp + 0x1e0]
neg eax
mov edx, dword [esp + 0x80]
cmp edx, eax
ja 0x493a4c
lea eax, [0x69b440]
mov dword [esp], eax
call fcn.0040bdb0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x208]
mov dword [eax + 4], ecx
mov ecx, dword [0x90f128]
test ecx, ecx
jne 0x4937b6
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x15c]
jmp 0x4937ce
call fcn.00471470
mov ecx, dword [esp + 0x204]
mov dword [edi], ecx
mov edx, dword [esp + 0x15c]
mov dword [edi + 4], edx
mov dword [eax], ecx
mov ecx, dword [esp + 0x58]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov ecx, dword [esp + 0x80]
mov dword [eax + 0x1c], ecx
mov ecx, dword [0x90f128]
test ecx, ecx
jne 0x49380c
mov ecx, dword [esp + 0x1e0]
mov edx, dword [esp + 0x1dc]
jmp 0x493824
call fcn.00471470
mov ecx, dword [esp + 0x1e0]
mov dword [edi], ecx
mov edx, dword [esp + 0x1dc]
mov dword [edi + 4], edx
mov dword [esp + 0x180], eax
mov dword [eax + 0x18], ecx
mov ecx, dword [esp + 0xbc]
mov dword [eax + 0x24], ecx
mov dword [eax + 0x20], edx
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.004716fb
lea ecx, [0x71d6e0]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x180]
mov dword [esp + 0x234], ecx
add esp, 0x200
ret
mov eax, dword [esp + 0x210]
test eax, eax
jne 0x49387c
xor eax, eax
xor edx, edx
jmp 0x4938ee
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.00466310
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x20c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x210]
mov dword [esp + 8], ecx
call fcn.00471df0
mov eax, dword [esp + 0x1e0]
neg eax
mov edx, dword [esp + 0x210]
cmp edx, eax
ja 0x493a47
mov ecx, dword [esp + 0x98]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov eax, dword [esp + 0x1e0]
mov dword [esp + 0x60], edx
mov dword [esp + 0x164], eax
test esi, esi
jne 0x493903
xor ebx, ebx
xor ebp, ebp
jmp 0x49395f
mov dword [esp], esi
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.00466310
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x1e8]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x80]
mov dword [esp + 8], ecx
call fcn.00471df0
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x80]
cmp edx, eax
ja 0x493a42
mov ebx, ecx
mov ebp, edx
mov dword [esp + 0x5c], ebp
mov dword [esp + 0x160], ebx
lea eax, [0x69b440]
mov dword [esp], eax
call fcn.0040bdb0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x208]
mov dword [eax + 4], ecx
mov ecx, dword [0x90f128]
test ecx, ecx
jne 0x4939ae
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x164]
mov ebx, dword [esp + 0x1d0]
mov ebp, dword [esp + 0x160]
jmp 0x4939da
call fcn.00471490
mov ecx, dword [esp + 0x204]
mov dword [edi], ecx
mov edx, dword [esp + 0x164]
mov dword [edi + 4], edx
mov ebx, dword [esp + 0x1d0]
mov dword [edi + 8], ebx
mov ebp, dword [esp + 0x160]
mov dword [edi + 0xc], ebp
mov dword [esp + 0x184], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x60]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov ecx, dword [esp + 0x98]
mov dword [eax + 0x14], ecx
mov dword [eax + 0x10], ebx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 0x1c], ecx
mov dword [eax + 0x18], ebp
mov dword [eax + 0x24], 0
mov dword [eax + 0x20], 0
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.004716fb
lea ecx, [0x71d6e0]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x184]
mov dword [esp + 0x234], ecx
add esp, 0x200
ret
call fcn.00462160
call fcn.00462160
call fcn.00462160
call fcn.00462160
call fcn.00462160
call fcn.00462160
call fcn.00462160
mov ecx, 0xd
call fcn.004714e0
mov eax, esi
mov ecx, 0xd
call fcn.004714e0
call fcn.00462160
call fcn.00462160
mov eax, edx
mov ecx, 0xd
call fcn.004714e0
mov ecx, 0xd
call fcn.004714e0
call fcn.00462160
mov eax, dword [esp + 0x210]
test eax, eax
jne 0x493ab1
xor ecx, ecx
xor eax, eax
jmp 0x493b1e
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.00466310
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x20c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x210]
mov dword [esp + 8], ecx
call fcn.00471df0
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x210]
cmp edx, eax
ja 0x493ec6
mov edx, dword [esp + 0x138]
mov esi, dword [esp + 0x80]
mov eax, dword [esp + 0x210]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x150], ecx
test esi, esi
jne 0x493b33
xor ebx, ebx
xor ebp, ebp
jmp 0x493b8f
mov dword [esp], esi
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.00466310
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x1e8]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x80]
mov dword [esp + 8], ecx
call fcn.00471df0
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x80]
cmp edx, eax
ja 0x493ec1
mov ebx, ecx
mov ebp, edx
mov dword [esp + 0x14c], ebx
mov dword [esp + 0x48], ebp
lea eax, [0x69b440]
mov dword [esp], eax
call fcn.0040bdb0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x208]
mov dword [eax + 4], ecx
mov ecx, dword [0x90f128]
test ecx, ecx
jne 0x493bde
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x150]
mov ebx, dword [esp + 0x1c0]
mov ebp, dword [esp + 0x14c]
jmp 0x493c0a
call fcn.00471490
mov ecx, dword [esp + 0x204]
mov dword [edi], ecx
mov edx, dword [esp + 0x150]
mov dword [edi + 4], edx
mov ebx, dword [esp + 0x1c0]
mov dword [edi + 8], ebx
mov ebp, dword [esp + 0x14c]
mov dword [edi + 0xc], ebp
mov dword [esp + 0x178], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x4c]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov ecx, dword [esp + 0x138]
mov dword [eax + 0x14], ecx
mov dword [eax + 0x10], ebx
mov ecx, dword [esp + 0x48]
mov dword [eax + 0x1c], ecx
mov dword [eax + 0x18], ebp
mov dword [eax + 0x24], 0
mov dword [eax + 0x20], 0
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.004716fb
lea ecx, [0x71d6e0]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x178]
mov dword [esp + 0x234], ecx
add esp, 0x200
ret
mov dword [esp + 0x7c], edi
mov dword [esp + 0x190], ecx
mov dword [esp], 0
lea eax, [0x6b7dde]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov eax, dword [esp + 0x1cc]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebp
lea eax, [0x6bbb20]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0xd
call fcn.00450850
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x1d8], eax
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xb8], ecx
mov edx, dword [esp + 0x210]
test edx, edx
jne 0x493ce3
xor edx, edx
xor ebx, ebx
jmp 0x493d55
mov dword [esp], edx
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.00466310
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x20c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x210]
mov dword [esp + 8], ecx
call fcn.00471df0
mov eax, dword [esp + 0x1e0]
neg eax
mov edx, dword [esp + 0x210]
cmp edx, eax
ja 0x493ebc
mov eax, dword [esp + 0x1d8]
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0x1e0]
mov ebx, dword [esp + 0x210]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x158], edx
mov ebp, dword [esp + 0x7c]
test ebp, ebp
jne 0x493d6e
xor ebp, ebp
xor esi, esi
jmp 0x493dc4
mov dword [esp], ebp
mov dword [esp + 4], 0
mov byte [esp + 8], 0
call fcn.00466310
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x190]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x7c]
mov dword [esp + 8], ecx
call fcn.00471df0
mov eax, dword [esp + 0x1e0]
mov ecx, eax
neg eax
mov edx, dword [esp + 0x7c]
cmp edx, eax
ja 0x493eb7
mov ebp, ecx
mov esi, edx
mov dword [esp + 0x50], esi
mov dword [esp + 0x154], ebp
lea eax, [0x69b440]
mov dword [esp], eax
call fcn.0040bdb0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x208]
mov dword [eax + 4], ecx
mov ecx, dword [0x90f128]
test ecx, ecx
jne 0x493e1a
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x158]
mov ebx, dword [esp + 0x1c0]
mov ebp, dword [esp + 0x154]
mov esi, dword [esp + 0x1d8]
jmp 0x493e50
call fcn.004714a0
mov ecx, dword [esp + 0x204]
mov dword [edi], ecx
mov edx, dword [esp + 0x158]
mov dword [edi + 4], edx
mov ebx, dword [esp + 0x1c0]
mov dword [edi + 8], ebx
mov ebp, dword [esp + 0x154]
mov dword [edi + 0xc], ebp
mov esi, dword [esp + 0x1d8]
mov dword [edi + 0x10], esi
mov dword [esp + 0x17c], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x54]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov ecx, dword [esp + 0x138]
mov dword [eax + 0x14], ecx
mov dword [eax + 0x10], ebx
mov ecx, dword [esp + 0x50]
mov dword [eax + 0x1c], ecx
mov dword [eax + 0x18], ebp
mov ecx, dword [esp + 0xb8]
mov dword [eax + 0x24], ecx
mov dword [eax + 0x20], esi
lea edi, [esp + 0x21c]
xor eax, eax
call fcn.004716fb
lea ecx, [0x71d6e0]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x17c]
mov dword [esp + 0x234], ecx
add esp, 0x200
ret
call fcn.00462160
call fcn.00462160
call fcn.00462160
call fcn.00462160
mov dword [esp + 0x94], ebp
mov dword [esp + 0x8c], edx
mov dword [esp + 0x1cc], edi
mov dword [esp + 0xa0], esi
mov edx, dword [esp + 0x138]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x80]
mov edi, ebx
mov ebx, eax
mov eax, dword [esp + 0x18c]
jmp 0x49286d
inc edx
cmp edx, ecx
jge 0x493f1d
movzx ebx, byte [edx + eax]
add ebx, 0xffffffd0
cmp bl, 9
jbe 0x493f0c
mov dword [esp + 0xa8], edx
lea ebx, [0x71cbb8]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.0049bfd0
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0x90]
cmp eax, ecx
ja 0x493f8d
sub ecx, eax
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and eax, ecx
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x18]
mov edx, dword [esp + 0x1c8]
add eax, edx
mov edx, dword [esp + 0x130]
mov edx, eax
mov eax, ecx
mov ecx, edx
mov edx, dword [esp + 0x130]
jmp 0x493ecb
call fcn.00471540
inc edi
mov dword [esp + 0xc4], edi
mov edi, dword [esp + 0x1e8]
mov edi, dword [esp + 0xc4]
cmp edi, 2
jge 0x493fde
cmp ecx, 0x10a
jne 0x493f92
test esi, esi
je 0x493f92
cmp byte [ebp], 0x20
jne 0x493f92
dec esi
mov dword [esp + 0x134], esi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, 1
add ebp, esi
mov esi, dword [esp + 0x134]
jmp 0x493f92
xor edi, edi
xor edi, edi
mov dword [esp + 0x68], edi
xor edi, edi
jmp 0x49400a
mov edx, dword [esp + 0x68]
lea edx, [edx + edx*4]
movzx eax, al
inc edi
lea eax, [eax + edx*2]
mov edx, dword [esp + 0x138]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x1c0]
cmp edi, 3
jge 0x49402a
cmp edi, esi
jge 0x494026
movzx eax, byte [edi + ebp]
add eax, 0xffffffd0
cmp al, 9
jbe 0x493fea
mov eax, dword [esp + 0x1c0]
test edi, edi
je 0x494037
cmp ecx, 0x10b
jne 0x494041
cmp edi, 3
je 0x494041
mov ecx, dword [0x8e2528]
xor edi, edi
jmp 0x494058
cmp edi, esi
ja 0x49407c
sub esi, edi
mov ecx, esi
neg ecx
sar ecx, 0x1f
and ecx, edi
add ebp, ecx
mov edi, dword [esp + 0x68]
xor ecx, ecx
mov dword [esp + 0x78], edi
mov eax, dword [esp + 0x18c]
mov edi, esi
mov ebx, ecx
mov esi, dword [esp + 0x80]
mov ecx, ebp
mov ebp, dword [esp + 0x1e8]
jmp 0x49286d
mov eax, edi
mov ecx, esi
call fcn.00471540
mov ecx, ebx
mov dword [esp + 0xc0], ecx
lea ebx, [ecx + 1]
cmp esi, ebx
jle 0x4940ae
jbe 0x49414e
movzx edi, byte [ecx + ebp + 1]
xchg edi, eax
cmp al, 0x30
xchg edi, eax
jb 0x4940ae
xchg edi, eax
cmp al, 0x39
xchg edi, eax
jbe 0x494085
mov dword [esp + 0x128], ebx
lea eax, [0x71cbb8]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
call fcn.0049bfd0
mov ecx, dword [esp + 0x80]
mov eax, dword [esp + 0x128]
cmp ecx, eax
jb 0x494149
mov edx, dword [esp + 0xc0]
sub ecx, edx
lea edi, [ecx - 1]
mov ecx, edi
neg ecx
sar ecx, 0x1f
and eax, ecx
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1e8]
add eax, esi
mov esi, dword [esp + 0x80]
mov dword [esp + 0x94], ebp
mov dword [esp + 0x1cc], ebx
mov dword [esp + 0xa0], ecx
mov ebp, dword [esp + 0x1e8]
mov ecx, eax
mov ebx, edx
mov edx, dword [esp + 0x138]
mov eax, dword [esp + 0x18c]
jmp 0x49286d
call fcn.00471540
mov eax, ebx
mov ecx, esi
call fcn.004714e0
call fcn.00471500
mov eax, edx
mov ecx, ebx
call fcn.00471540
mov ecx, ebx
call fcn.00471500
nop
call fcn.00470060
jmp fcn.00491770