Function at 0x40c8f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0xb50
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov dword [esp + 0xb48], eax
mov dword [esp + 0xb44], ecx
mov dword [esp + 0xb40], edx
mov dword [esp + 0xb3c], esi
mov dword [esp + 0xb38], edi
mov eax, dword [0x491eec]
add eax, 0x744f424c
mov ecx, dword [0x493f40]
and ecx, eax
mov dword [0x493f40], ecx
mov eax, esp
mov dword [eax + 4], 8
mov dword [eax], 0x92c
call fcn.00448730
mov dword [esp + 0xb34], eax
mov eax, dword [0x49082c]
sar eax, 1
add eax, 0x10c4f53f
mov ecx, dword [0x4933b0]
xor ecx, eax
mov dword [0x4933b0], ecx
mov eax, dword [esp + 0xb34]
mov ecx, dword [esp + 0xb38]
mov edx, esp
mov dword [edx + 4], eax
mov dword [edx], ecx
call fcn.00455d70
mov dword [esp + 0xb0c], eax
mov bx, word [0x49a888]
movsx eax, bx
shl eax, 7
mov ecx, dword [0x4927a4]
or ecx, eax
mov dword [0x4927a4], ecx
mov eax, dword [esp + 0xb34]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 8
call fcn.0040a610
mov eax, dword [0x49712c]
sar eax, 3
imul eax, eax, 0x49c139c3
mov ecx, dword [0x494ca8]
xor ecx, eax
mov dword [0x494ca8], ecx
cmp dword [esp + 0xb0c], 0
jne 0x40cb4b
mov eax, dword [0x4928c4]
or eax, 0x75f60ec7
mov dword [0x4928c4], eax
cmp dword [esp + 0xb48], 0
je 0x40ca4b
mov dword [0x491fdc], 0xded6f7f7
mov ecx, dword [esp + 0xb40]
call fcn.0044a6d0
mov ax, word [0x498d60]
mov cx, ax
imul ecx, ecx, 0x40e2e48d
mov ax, cx
mov word [0x498d60], ax
jmp 0x40f29b
mov eax, dword [0x490fc4]
and eax, 0x15b6e0dd
mov dword [0x490fc4], eax
mov eax, dword [esp + 0xb40]
mov ecx, dword [esp + 0xb3c]
mov edx, esp
mov dword [edx + 4], eax
mov dword [edx], ecx
call fcn.004261a0
mov dword [esp + 0xb08], eax
mov eax, dword [0x496490]
mov ecx, dword [0x494234]
not ecx
lea eax, [ecx + eax*4 + 0xcfff55c]
mov ecx, dword [0x4955c8]
mov edx, dword [0x491cc4]
xor ecx, edx
cmp eax, ecx
jg 0x40cacc
mov eax, 0x9e37cf50
mov ecx, dword [0x4965f0]
cmp eax, ecx
je 0x40cac7
mov eax, dword [0x492f7c]
and eax, 0x80808008
mov dword [0x492f7c], eax
jmp 0x40cacc
cmp dword [esp + 0xb08], 0
jg 0x40cb1c
mov eax, dword [0x495384]
add eax, 0xffeff5b8
mov dword [0x495384], eax
mov ecx, dword [esp + 0xb40]
call fcn.0044a6d0
mov eax, dword [0x4964fc]
not eax
and eax, 0x2636
xor eax, 0xada9
mov dx, word [0x49af3a]
mov cx, dx
or ecx, eax
mov dx, cx
mov word [0x49af3a], dx
mov eax, 0x21546510
mov ecx, dword [0x493f00]
inc ecx
mov dword [0x493f00], ecx
cmp eax, ecx
je 0x40cb46
mov eax, dword [0x492410]
imul eax, eax, 0xa8e8b653
mov dword [0x492410], eax
jmp 0x40f29b
mov eax, 0x307673a1
mov ecx, dword [0x496af0]
add ecx, 0xacc183fc
mov dword [0x496af0], ecx
mov dx, word [0x49afae]
mov cx, dx
dec ecx
mov dx, cx
mov word [0x49afae], dx
movsx ecx, dx
add ecx, 0x46619a49
mov esi, dword [0x491a3c]
and esi, ecx
mov dword [0x491a3c], esi
mov ecx, dword [0x497724]
not ecx
mov dx, word [0x49ae42]
mov si, dx
or ecx, esi
or ecx, 0x7916
mov dx, cx
mov word [0x49ae42], dx
mov ecx, dword [0x490154]
mov esi, ecx
dec esi
mov dword [0x490154], esi
cmp eax, ecx
jle 0x40cbd8
mov eax, dword [0x493a60]
xor eax, 0x22440828
mov dword [0x493a60], eax
mov eax, 0x3800dd84
mov cx, word [0x499ffc]
movsx edx, cx
imul edx, edx, 0xdaa51901
imul edx, edx, 0x74a440e7
cmp eax, edx
jne 0x40cc0a
mov eax, dword [0x492be8]
and eax, 0x2581b71a
mov dword [0x492be8], eax
mov eax, 0x68649090
mov cx, word [0x49861a]
movsx edx, cx
sar edx, 8
cmp eax, edx
jg 0x40cc45
mov eax, dword [0x495114]
mov ecx, eax
inc ecx
mov dword [0x495114], ecx
and eax, 0xcf29c3d3
mov ecx, dword [0x496158]
xor ecx, eax
mov dword [0x496158], ecx
mov eax, 0xdf09c38b
mov ecx, dword [0x491f30]
and ecx, 0xe5306458
mov dword [0x491f30], ecx
lea ecx, [esp + 0x69c]
mov dword [esp + 0x130], eax
call fcn.00449b50
mov ecx, dword [0x4928e8]
mov dx, word [0x499666]
mov si, dx
lea ecx, [ecx + esi + 0x3bf2580c]
mov dx, cx
mov word [0x499666], dx
mov ecx, dword [0x4942f0]
add ecx, 0x28483005
mov dword [0x4942f0], ecx
mov ecx, dword [0x495810]
mov dx, word [0x49a43c]
mov si, dx
imul ecx, esi
imul ecx, ecx, 0x5b76b62f
mov dx, word [0x497f20]
mov si, dx
xor esi, ecx
mov dx, si
mov word [0x497f20], dx
mov ecx, dword [0x493f54]
add ecx, 0x9c0bfb12
mov dword [0x493f54], ecx
mov dword [esp + 0x21c], 0
mov dword [esp + 0x218], 0
mov ecx, dword [0x49255c]
mov esi, ecx
inc esi
mov dword [0x49255c], esi
mov esi, dword [0x490428]
lea ecx, [esi + ecx + 1]
mov dword [0x490428], ecx
mov ecx, dword [0x491dec]
imul ecx, ecx, 0x4a53da8c
mov dword [0x491dec], ecx
mov dword [esp + 0x210], 0xffffffff
mov dword [esp + 0x20c], 0xffffffff
mov ecx, dword [0x496bd0]
xor ecx, 0xbacfeba9
mov dword [0x496bd0], ecx
mov dword [esp + 0x208], 0x50
mov dx, word [0x497906]
mov cx, dx
add ecx, 0x24ff71fa
mov dx, cx
mov word [0x497906], dx
mov byte [esp + 0x207], 0
mov ecx, dword [0x49345c]
xor ecx, 0xffffffff
xor ecx, 0xbaeb4c4d
mov esi, dword [esp + 0x130]
cmp esi, ecx
mov dword [esp + 0x12c], eax
jg 0x40cdb8
mov eax, dword [0x497594]
and eax, 0x3f00a800
mov dword [0x497594], eax
jmp 0x40cdc2
mov dword [0x49324c], 0x3d7f7cf4
mov eax, esp
mov dword [eax], 0
call fcn.00451810
add eax, 0x258
adc edx, 0
mov dword [esp + 0x218], eax
mov dword [esp + 0x21c], edx
mov cx, word [0x4992e6]
mov ax, cx
and eax, 0x6cfb
mov cx, ax
mov word [0x4992e6], cx
mov byte [esp + 0x6ca], 0
mov dword [0x4946e8], 0x73208252
mov eax, dword [esp + 0xb38]
mov edx, esp
mov dword [edx], eax
call fcn.00452bb0
mov dword [esp + 0x228], eax
mov cx, word [0x499740]
mov ax, cx
inc eax
mov si, ax
mov word [0x499740], si
movsx eax, cx
mov edx, dword [0x495c84]
and eax, edx
and eax, 0xc3529a90
mov dword [0x495c84], eax
cmp dword [esp + 0x228], 0x7f
jle 0x40ce73
mov eax, dword [0x491938]
or eax, 0xaf6ff6a3
mov dword [0x491938], eax
jmp 0x40f1c5
mov eax, 0x9eff3ebd
mov ecx, dword [0x4953f0]
cmp eax, ecx
jg 0x40ced3
mov eax, dword [0x49773c]
sar eax, 3
add eax, 0x65369333
cmp eax, 0x59a45ffc
jge 0x40cece
mov eax, 0x29286b3
mov ecx, dword [0x4963e8]
dec ecx
mov dword [0x4963e8], ecx
sub ecx, 0x56ee6771
xor ecx, 0xafbc91ae
cmp eax, ecx
jg 0x40cec9
jmp 0x40cec9
jmp 0x40cece
jmp 0x40ced3
mov eax, dword [esp + 0xb38]
mov ecx, esp
mov dword [ecx + 4], eax
lea eax, [esp + 0xa1e]
mov dword [ecx], eax
call fcn.00455c70
mov ecx, dword [0x494954]
imul ecx, ecx, 0xc937c131
and ecx, 0xf7f1
mov dx, word [0x499a08]
mov si, dx
xor esi, ecx
mov dx, si
mov word [0x499a08], dx
mov ecx, dword [esp + 0x228]
sub ecx, 1
mov dword [esp + 0x224], ecx
mov dword [esp + 0x128], eax
mov eax, dword [esp + 0x224]
mov ecx, dword [esp + 0x228]
sub ecx, 6
cmp eax, ecx
jl 0x40d076
mov eax, 0xa9849102
mov ecx, dword [0x492948]
sub ecx, 0x74ae884c
cmp eax, ecx
jne 0x40cf7c
mov ax, word [0x4998b2]
movsx ecx, ax
xor ecx, 0xeb162425
mov edx, dword [0x497194]
sub edx, ecx
mov dword [0x497194], edx
mov eax, dword [esp + 0x224]
movsx eax, byte [esp + eax + 0xa1e]
cmp eax, 0x3a
jne 0x40d048
mov eax, dword [0x495378]
imul eax, eax, 0xde66d80b
mov ecx, dword [0x496a04]
sar ecx, 4
sub eax, ecx
mov dword [0x4939f8], eax
mov eax, dword [esp + 0x224]
mov byte [esp + eax + 0xa1e], 0
mov eax, dword [0x494c94]
imul eax, eax, 0x41f930b
mov dword [0x494c94], eax
mov eax, dword [esp + 0x224]
mov dword [esp + 0x228], eax
mov dx, word [0x49b082]
mov ax, dx
imul eax, eax, 0xbdfc98bf
mov dx, word [0x498142]
mov cx, dx
xor eax, ecx
xor eax, 0x10fe
mov dx, ax
mov word [0x498142], dx
mov eax, dword [esp + 0x224]
lea ecx, [esp + 0xa1e]
lea eax, [eax + ecx + 1]
mov ecx, esp
mov dword [ecx], eax
call fcn.00455e5e
mov dword [esp + 0x208], eax
mov eax, dword [0x497448]
lea eax, [eax*8 - 0x4cddd15a]
mov ecx, dword [0x4903b4]
and ecx, eax
mov dword [0x4903b4], ecx
jmp 0x40d076
mov ax, word [0x49a55a]
mov cx, ax
xor ecx, 0xd979
mov ax, cx
mov word [0x49a55a], ax
mov eax, dword [esp + 0x224]
add eax, 0xffffffff
mov dword [esp + 0x224], eax
jmp 0x40cf2d
mov eax, dword [0x4941e8]
mov ecx, dword [0x491fa8]
dec ecx
mov dword [0x491fa8], ecx
mov edx, dword [0x49517c]
dec edx
mov dword [0x49517c], edx
imul ecx, edx
cmp eax, ecx
jg 0x40d0d5
mov eax, 0x31ebbe43
mov ecx, dword [0x492340]
inc ecx
mov dword [0x492340], ecx
imul ecx, ecx, 0x96707ca3
cmp eax, ecx
jl 0x40d0d0
mov eax, dword [0x4964cc]
imul eax, eax, 0x93c44dda
mov dword [0x4964cc], eax
jmp 0x40d0d5
mov dword [esp + 0x224], 0
mov eax, dword [esp + 0x224]
cmp eax, dword [esp + 0x228]
jg 0x40d2c9
mov eax, dword [0x4912cc]
xor eax, 0xe9b3d996
mov dword [0x4912cc], eax
mov eax, dword [esp + 0x224]
mov cl, byte [esp + eax + 0xa1e]
mov byte [esp + eax + 0x934], cl
mov eax, dword [0x494f44]
add eax, 0x12b2f645
mov dword [0x494f44], eax
mov eax, dword [esp + 0x224]
movsx eax, byte [esp + eax + 0x934]
cmp eax, 0x2f
jne 0x40d221
mov eax, dword [0x4975c4]
mov ecx, eax
dec ecx
mov dword [0x4975c4], ecx
mov ecx, 0x686c792e
sub ecx, eax
mov eax, dword [0x492f40]
and ecx, eax
and ecx, 0xb8cca7d7
mov dword [0x492f40], ecx
mov eax, dword [esp + 0x224]
mov byte [esp + eax + 0x934], 0
mov eax, dword [0x4903ac]
or eax, 0x4edefa62
mov dword [0x4903ac], eax
mov eax, dword [esp + 0x224]
mov dword [esp + 0x220], eax
mov eax, dword [esp + 0x220]
cmp eax, dword [esp + 0x228]
jg 0x40d1f5
mov dword [0x4958e8], 0x3006d6b0
mov eax, dword [esp + 0x220]
mov cl, byte [esp + eax + 0xa1e]
mov edx, dword [esp + 0x224]
sub eax, edx
mov byte [esp + eax + 0x6ca], cl
mov eax, dword [0x49305c]
imul eax, eax, 0xbab853cc
mov dword [0x49305c], eax
mov eax, dword [esp + 0x220]
add eax, 1
mov dword [esp + 0x220], eax
jmp 0x40d193
mov eax, dword [0x493484]
mov ecx, eax
inc ecx
mov dword [0x493484], ecx
imul eax, eax, 0x6bca8b89
or eax, 0x4ccc5d27
mov ecx, dword [0x495dcc]
sub ecx, eax
mov dword [0x495dcc], ecx
jmp 0x40d2c9
mov eax, 0xdc159339
mov cx, word [0x49917c]
mov dx, cx
inc edx
mov si, dx
mov word [0x49917c], si
movsx edx, cx
cmp eax, edx
jle 0x40d2ae
mov eax, 0xf5638af
mov cx, word [0x49ab66]
mov dx, cx
inc edx
mov si, dx
mov word [0x49ab66], si
movsx edx, cx
mov cx, word [0x49abf4]
mov di, cx
inc edi
mov cx, di
mov word [0x49abf4], cx
movsx edi, cx
sub edx, edi
add edx, 0xfc4f203
cmp eax, edx
jl 0x40d2a9
mov eax, dword [0x4944b4]
dec eax
mov dword [0x4944b4], eax
and eax, 0x67d4412d
mov ecx, dword [0x496494]
sub ecx, eax
mov dword [0x496494], ecx
jmp 0x40d2ae
jmp 0x40d2b3
mov eax, dword [esp + 0x224]
add eax, 1
mov dword [esp + 0x224], eax
jmp 0x40d0e0
lea eax, [esp + 0x6ca]
mov ecx, dword [0x4961d4]
xor ecx, 0x387c785c
mov dword [0x4961d4], ecx
mov ecx, esp
mov dword [ecx], eax
call fcn.00452bb0
mov ecx, dword [esp + 0xb3c]
mov edx, esp
mov dword [edx], ecx
mov dword [esp + 0x124], eax
call fcn.00452bb0
mov ecx, dword [esp + 0x124]
add ecx, eax
cmp ecx, 0x1ff
jbe 0x40d383
mov eax, dword [0x4905c4]
not eax
imul eax, eax, 0x101b747f
mov ecx, dword [0x496618]
or eax, ecx
cmp eax, 0x6e95271f
jl 0x40d37e
mov eax, dword [0x4971f4]
mov cx, word [0x499cc8]
movsx edx, cx
sar edx, 6
xor eax, edx
xor eax, 0x895d817d
cmp eax, 0x5db62702
jg 0x40d369
mov word [0x49a11e], 0x30c1
jmp 0x40d379
mov eax, dword [0x4918e0]
imul eax, eax, 0x21e42d29
mov dword [0x4918e0], eax
jmp 0x40d37e
jmp 0x40f1c5
mov eax, dword [0x4923ec]
xor eax, 0xc6786b00
mov dword [0x4923ec], eax
mov eax, dword [esp + 0xb3c]
mov ecx, esp
mov dword [ecx + 4], eax
lea eax, [esp + 0x6ca]
mov dword [ecx], eax
call fcn.00455c80
mov ecx, dword [0x493b40]
mov edx, dword [0x492e18]
and edx, ecx
mov dword [0x492e18], edx
mov dword [esp + 0x220], 0
mov ecx, dword [0x4900a4]
mov edx, ecx
dec edx
mov dword [0x4900a4], edx
imul ecx, ecx, 0x742207b4
and ecx, 0x393b5840
mov dword [0x4934c4], ecx
mov ecx, esp
mov dword [ecx + 4], 5
mov dword [ecx], 0x490c
mov dword [esp + 0x120], eax
call fcn.00448730
mov dword [esp + 0xb30], eax
mov eax, dword [0x492b48]
add eax, 0x58dfefbf
mov dword [0x492b48], eax
mov eax, dword [esp + 0xb30]
mov ecx, esp
mov dword [ecx], eax
lea ecx, [esp + 0x69c]
call fcn.004320a0
sub esp, 4
mov ecx, dword [0x490550]
and ecx, 0x7ec6ddfe
mov dword [0x490550], ecx
mov ecx, dword [esp + 0xb30]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], 5
mov dword [esp + 0x11c], eax
call fcn.0040a610
mov eax, dword [0x494d40]
mov dword [0x491654], eax
mov eax, dword [esp + 0xb40]
mov ecx, eax
call fcn.00441cb0
cmp eax, 0
je 0x40d759
mov eax, dword [0x493c4c]
add eax, 0xb08aa75c
mov dword [0x493c4c], eax
mov eax, esp
mov dword [eax + 4], 0xc
mov dword [eax], 0x2b17
call fcn.00448730
mov dword [esp + 0xb2c], eax
mov cx, word [0x49815c]
mov ax, cx
inc eax
mov cx, ax
mov word [0x49815c], cx
movsx eax, cx
and eax, 0x32583a12
mov edx, dword [0x49397c]
xor edx, eax
mov dword [0x49397c], edx
mov ecx, dword [esp + 0xb40]
mov eax, dword [esp + 0xb2c]
mov edx, esp
mov dword [edx], eax
lea eax, [esp + 0x1f0]
mov dword [esp + 0x118], ecx
mov ecx, eax
mov dword [esp + 0x114], eax
call fcn.00432780
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x114]
mov dword [ecx], edx
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x118]
mov dword [esp + 0x110], eax
call fcn.00428c70
sub esp, 8
mov dword [esp + 0x224], eax
mov ecx, dword [esp + 0x114]
call fcn.004233f0
mov si, word [0x497b66]
mov ax, si
add eax, 0x76082d97
mov si, ax
mov word [0x497b66], si
mov eax, dword [esp + 0xb2c]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0xc
call fcn.0040a610
mov eax, dword [0x490360]
imul eax, eax, 0x1015128e
mov dword [0x490360], eax
cmp dword [esp + 0x224], 0
jne 0x40d74a
mov eax, dword [0x49195c]
or eax, 0x8674c6c5
mov dword [0x49195c], eax
mov dword [esp + 0x220], 1
mov eax, dword [0x490660]
mov ecx, dword [0x4972e8]
sar ecx, 8
sub eax, ecx
mov ecx, dword [0x493f90]
and ecx, eax
mov dword [0x493f90], ecx
mov eax, dword [esp + 0xb40]
mov ecx, esp
mov dword [ecx], 0
mov ecx, eax
mov dword [esp + 0x10c], eax
call fcn.00442400
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xb
mov ecx, dword [esp + 0x10c]
call fcn.00415710
sub esp, 8
mov ecx, dword [0x491990]
sar ecx, 0xa
xor ecx, 0x4e21242
or ecx, 0xf0156599
mov edx, dword [0x490a84]
or edx, 0x3422bb3b
cmp ecx, edx
mov dword [esp + 0x108], eax
jle 0x40d648
mov eax, dword [0x495ca4]
add eax, 0xa7fe7859
mov dword [0x495ca4], eax
mov eax, 0xbdab2f09
mov ecx, esp
mov dword [ecx + 4], 6
mov dword [ecx], 0x3c10
mov dword [esp + 0x104], eax
call fcn.00448730
mov dword [esp + 0xb28], eax
mov eax, dword [0x496150]
or eax, 0x1ed760dd
mov ecx, dword [esp + 0x104]
cmp ecx, eax
jge 0x40d6c0
mov eax, dword [0x493734]
mov ecx, eax
inc ecx
mov dword [0x493734], ecx
add eax, 0x804f8ebc
xor eax, 0xa933a9ee
cmp eax, 0x47dd32d5
jle 0x40d6bb
mov eax, dword [0x492158]
imul eax, eax, 0xc746ed4e
mov dword [0x492158], eax
jmp 0x40d6c0
mov eax, dword [esp + 0xb28]
mov ecx, esp
mov dword [ecx], eax
lea ecx, [esp + 0x69c]
call fcn.004320a0
sub esp, 4
mov ecx, dword [0x4953d0]
mov edx, ecx
inc edx
mov dword [0x4953d0], edx
mov edx, 0x89fa17b4
sub edx, ecx
mov ecx, dword [0x496b70]
add ecx, edx
mov dword [0x496b70], ecx
mov ecx, dword [esp + 0xb28]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], 6
mov dword [esp + 0x100], eax
call fcn.0040a610
mov eax, dword [0x495c10]
mov ecx, eax
inc ecx
mov dword [0x495c10], ecx
add eax, 0x2f9fdde0
or eax, 0x7c8e
mov si, word [0x497ba4]
mov cx, si
xor ecx, eax
mov si, cx
mov word [0x497ba4], si
mov eax, dword [0x491d98]
add eax, 0x51bec837
mov dword [0x491d98], eax
mov eax, 0x94d0a81f
mov ecx, dword [0x4926d0]
mov edx, ecx
dec edx
mov dword [0x4926d0], edx
xor ecx, 0x87c9d00b
mov edx, dword [0x495410]
or edx, ecx
mov dword [0x495410], edx
mov ecx, esp
lea edx, [esp + 0x6ca]
mov dword [ecx], edx
lea ecx, [esp + 0x1dc]
mov dword [esp + 0xfc], ecx
mov dword [esp + 0xf8], eax
call fcn.0044a960
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xfc]
mov dword [ecx], edx
lea ecx, [esp + 0x69c]
mov dword [esp + 0xf4], ecx
mov dword [esp + 0xf0], eax
call fcn.00446310
sub esp, 4
mov ecx, dword [esp + 0xfc]
mov dword [esp + 0xec], eax
call fcn.00428b20
mov eax, dword [0x490258]
not eax
imul eax, eax, 0xd76e8492
and eax, 0x5a362124
mov ecx, dword [0x496b44]
add ecx, eax
mov dword [0x496b44], ecx
mov eax, esp
mov dword [eax + 4], 0x32
mov dword [eax], 0x4284
call fcn.00448730
mov dword [esp + 0xb24], eax
mov eax, dword [0x493930]
mov ecx, eax
dec ecx
mov dword [0x493930], ecx
and eax, 0x15000b14
mov ecx, dword [0x495e2c]
lea eax, [ecx + eax + 0x8e9e48b]
mov dword [0x495e2c], eax
mov eax, dword [esp + 0xb24]
mov ecx, esp
mov dword [ecx], eax
lea eax, [esp + 0x1c8]
mov ecx, eax
mov dword [esp + 0xe8], eax
call fcn.0044a960
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xe8]
mov dword [ecx], edx
mov ecx, dword [esp + 0xf4]
mov dword [esp + 0xe4], eax
call fcn.00446310
sub esp, 4
mov ecx, dword [esp + 0xe8]
mov dword [esp + 0xe0], eax
call fcn.00428b20
mov dword [0x493ff8], 0xadbfafdf
mov eax, dword [esp + 0xb24]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0x32
call fcn.0040a610
mov si, word [0x498f28]
movsx eax, si
mov ecx, dword [esp + 0xf8]
cmp ecx, eax
jg 0x40d8ed
mov ax, word [0x49b080]
mov cx, ax
xor ecx, 0x5041
mov ax, cx
mov word [0x49b080], ax
mov eax, esp
lea ecx, [esp + 0x934]
mov dword [eax], ecx
lea eax, [esp + 0x1b4]
mov ecx, eax
mov dword [esp + 0xdc], eax
call fcn.0044a960
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xdc]
mov dword [ecx], edx
lea ecx, [esp + 0x69c]
mov dword [esp + 0xd8], eax
call fcn.00446310
sub esp, 4
mov ecx, dword [esp + 0xdc]
mov dword [esp + 0xd4], eax
call fcn.00428b20
mov word [0x499052], 0xa036
cmp dword [esp + 0x220], 0
je 0x40dcd8
mov eax, 0xba1685ee
mov word [0x49a836], 0xfffe
mov ecx, esp
mov dword [ecx + 4], 0x44
mov dword [ecx], 0x1985
mov dword [esp + 0xd0], eax
call fcn.00448730
mov dword [esp + 0xb20], eax
mov eax, dword [0x490f1c]
add eax, 0x27bf64bf
mov dword [0x490f1c], eax
mov eax, dword [esp + 0xb20]
mov ecx, esp
mov dword [ecx], eax
lea eax, [esp + 0x1a0]
mov ecx, eax
mov dword [esp + 0xcc], eax
call fcn.0044a960
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xcc]
mov dword [ecx], edx
lea ecx, [esp + 0x69c]
mov dword [esp + 0xc8], eax
call fcn.00446310
sub esp, 4
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0xc4], eax
call fcn.00428b20
mov eax, dword [0x496c24]
mov ecx, dword [esp + 0xd0]
cmp ecx, eax
je 0x40da4a
mov ax, word [0x49b2ec]
movsx ecx, ax
not ecx
mov edx, dword [0x493b60]
mov esi, edx
inc esi
mov dword [0x493b60], esi
xor edx, 0xbe7ad9ec
cmp ecx, edx
jne 0x40da45
mov eax, dword [0x494934]
and eax, 0xcf8c70d7
mov ecx, dword [0x496dfc]
xor ecx, eax
mov dword [0x496dfc], ecx
jmp 0x40da4a
mov eax, 0x25bfff6b
mov ecx, esp
mov dword [ecx + 4], 3
mov dword [ecx], 0x1c6e
mov dword [esp + 0xc0], eax
call fcn.00448730
mov dword [esp + 0xb1c], eax
mov eax, dword [0x495458]
mov ecx, dword [esp + 0xc0]
cmp ecx, eax
jne 0x40da9d
mov ax, word [0x498a32]
mov cx, ax
add ecx, 0x22810062
mov ax, cx
mov word [0x498a32], ax
mov eax, 0x9d1edcfa
mov ecx, dword [esp + 0xb20]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], 0x44
mov dword [esp + 0xbc], eax
call fcn.0040a610
mov eax, dword [0x49039c]
mov ecx, eax
inc ecx
mov dword [0x49039c], ecx
mov ecx, dword [0x495f78]
and eax, ecx
and eax, 0x65ea0e69
mov dword [0x495f78], eax
mov ecx, dword [esp + 0xb40]
call fcn.00441cb0
mov ecx, dword [esp + 0xb1c]
mov edx, esp
mov dword [edx + 8], eax
mov dword [edx + 4], ecx
lea eax, [esp + 0x232]
mov dword [edx], eax
call fcn.00455f92
mov ecx, dword [0x491be8]
not ecx
mov edx, dword [0x4940d0]
dec edx
mov dword [0x4940d0], edx
add ecx, edx
xor ecx, 0x8ca7ac6
mov edx, dword [esp + 0xbc]
cmp edx, ecx
mov dword [esp + 0xb8], eax
jg 0x40db50
mov eax, dword [0x49682c]
xor eax, 0x96655ccb
mov dword [0x49682c], eax
jmp 0x40dbc2
mov eax, 0x73b3d672
mov ecx, dword [0x4931d0]
sar ecx, 8
add ecx, 0xf9b3ae9b
mov dx, word [0x49823e]
mov si, dx
dec esi
mov di, si
mov word [0x49823e], di
movsx esi, dx
and ecx, esi
cmp eax, ecx
jg 0x40dbbd
mov eax, 0x2b145404
mov ecx, dword [0x492898]
mov edx, ecx
inc edx
mov dword [0x492898], edx
imul ecx, ecx, 0x973cfc87
or ecx, 0x9aec815b
cmp eax, ecx
jne 0x40dbb3
jmp 0x40dbb8
jmp 0x40dbb8
jmp 0x40dbbd
jmp 0x40dbc2
mov eax, 0x474045a9
mov ecx, dword [esp + 0xb1c]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], 3
mov dword [esp + 0xb4], eax
call fcn.0040a610
mov eax, dword [0x493f48]
and eax, 0x90ad3e8e
mov dword [0x493f48], eax
mov eax, esp
lea ecx, [esp + 0x232]
mov dword [eax], ecx
lea eax, [esp + 0x18c]
mov ecx, eax
mov dword [esp + 0xb0], eax
call fcn.0044a960
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xb0]
mov dword [ecx], edx
lea ecx, [esp + 0x69c]
mov dword [esp + 0xac], eax
call fcn.00446310
sub esp, 4
mov ecx, dword [esp + 0xb0]
mov dword [esp + 0xa8], eax
call fcn.00428b20
mov eax, dword [0x491f44]
inc eax
mov dword [0x491f44], eax
and eax, 0xb08fac0e
and eax, 0x5442e2be
mov ecx, dword [esp + 0xb4]
cmp ecx, eax
jg 0x40dcbb
mov eax, 0x6261d2c9
mov ecx, dword [0x4966c8]
inc ecx
mov dword [0x4966c8], ecx
cmp eax, ecx
jle 0x40dcb6
mov ax, word [0x4981aa]
mov cx, ax
inc ecx
mov ax, cx
mov word [0x4981aa], ax
and ecx, 0x5f47
mov ax, word [0x49ab04]
mov dx, ax
or edx, ecx
mov ax, dx
mov word [0x49ab04], ax
jmp 0x40dcd3
mov ax, word [0x4983a6]
mov cx, ax
or ecx, 0xf7f
mov ax, cx
mov word [0x4983a6], ax
jmp 0x40dcd8
mov eax, dword [0x492218]
sar eax, 6
or eax, 0x75108873
mov ecx, dword [0x494e40]
add ecx, eax
mov dword [0x494e40], ecx
mov eax, esp
mov dword [eax + 4], 5
mov dword [eax], 0x4038
call fcn.00448730
mov dword [esp + 0xb18], eax
mov eax, dword [0x490278]
imul eax, eax, 0xd2feb44d
mov dword [0x490278], eax
mov eax, dword [esp + 0xb18]
mov ecx, esp
mov dword [ecx], eax
lea eax, [esp + 0x178]
mov ecx, eax
mov dword [esp + 0xa4], eax
call fcn.0044a960
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xa4]
mov dword [ecx], edx
lea ecx, [esp + 0x69c]
mov dword [esp + 0xa0], eax
call fcn.00446310
sub esp, 4
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x9c], eax
call fcn.00428b20
mov si, word [0x4986fe]
mov ax, si
add eax, 0x98e2afa
mov si, ax
mov word [0x4986fe], si
mov eax, dword [esp + 0xb18]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 5
call fcn.0040a610
mov si, word [0x49b020]
mov ax, si
inc eax
mov si, ax
mov word [0x49b020], si
movsx eax, si
xor eax, 0xdb6d014
cmp eax, 0x3108e187
jg 0x40dded
mov eax, dword [0x4944dc]
and eax, 0x4d12
mov cx, word [0x499b08]
mov dx, cx
add edx, eax
mov cx, dx
mov word [0x499b08], cx
cmp dword [esp + 0x220], 0
je 0x40de5d
mov ax, word [0x4995b4]
mov cx, ax
mov edx, ecx
dec edx
mov ax, dx
mov word [0x4995b4], ax
add ecx, 0x190c86ce
mov ax, word [0x499100]
mov dx, ax
or edx, ecx
mov ax, dx
mov word [0x499100], ax
mov ecx, dword [esp + 0xb40]
mov edx, esp
mov dword [edx], ecx
lea ecx, [esp + 0x69c]
call fcn.00446310
sub esp, 4
mov ecx, dword [0x491774]
and ecx, 0x8df73e43
mov dword [0x491774], ecx
mov dword [esp + 0x98], eax
mov ax, word [0x49826e]
movsx ecx, ax
mov edx, 0x6d5986ae
sub edx, ecx
mov ecx, dword [0x4947e8]
sub ecx, edx
mov dword [0x4947e8], ecx
mov ecx, dword [0x48fdac]
mov edx, esp
lea esi, [esp + 0x934]
mov dword [edx], esi
call ecx
sub esp, 4
mov dword [esp + 0x22c], eax
mov di, word [0x499968]
mov ax, di
or eax, 0x813d
mov di, ax
mov word [0x49a3e0], di
cmp dword [esp + 0x22c], 0
jne 0x40defe
mov eax, 0xf231281f
mov ecx, dword [0x495ebc]
sar ecx, 2
add ecx, 0x98115518
cmp eax, ecx
je 0x40def9
mov ax, word [0x4998d0]
movsx ecx, ax
add ecx, 0x5ad3f79f
mov edx, dword [0x495934]
imul edx, ecx
mov dword [0x495934], edx
jmp 0x40f1c5
mov eax, 0x303ed68d
mov cx, word [0x49a50e]
mov dx, cx
inc edx
mov cx, dx
mov word [0x49a50e], cx
movsx edx, cx
imul edx, edx, 0xbd2814f1
or edx, 0x95e8d20c
mov esi, dword [0x496458]
add esi, edx
mov dword [0x496458], esi
xorps xmm0, xmm0
movaps xmmword [esp + 0x6b0], xmm0
mov cx, word [0x49a662]
movsx edx, cx
add edx, edx
and edx, 0x6dbccd8
mov esi, dword [0x4912f0]
sub esi, edx
mov dword [0x4912f0], esi
mov word [esp + 0x6b0], 2
mov cx, word [0x497ca6]
movsx edx, cx
imul edx, edx, 0x2de00719
cmp eax, edx
jle 0x40dfb0
mov eax, dword [0x496ba8]
mov ecx, eax
dec ecx
mov dword [0x496ba8], ecx
add eax, 0x8698b6
and eax, 0x516
mov dx, word [0x4980a2]
mov cx, dx
add ecx, eax
mov dx, cx
mov word [0x4980a2], dx
mov eax, dword [0x48fdb4]
mov ecx, dword [0x48fdb8]
mov edx, dword [esp + 0x22c]
mov edx, dword [edx + 0xc]
mov edx, dword [edx]
mov edx, dword [edx]
mov dword [esp + 0x174], edx
mov edx, dword [esp + 0x174]
mov esi, esp
mov dword [esi], edx
mov dword [esp + 0x94], eax
call ecx
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [esp + 0x94]
call eax
sub esp, 4
mov dword [esp + 0x6b4], eax
mov di, word [0x49a1ea]
movsx eax, di
mov ecx, dword [0x491580]
add ecx, eax
mov dword [0x491580], ecx
mov eax, dword [0x48fdb0]
movzx ecx, word [esp + 0x208]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov word [esp + 0x6b2], ax
mov ecx, dword [0x493e48]
mov ax, word [0x49af24]
mov dx, ax
imul edx, ecx
mov ax, dx
mov word [0x49af24], ax
cmp dword [esp + 0xb44], 0
je 0x40e1b4
mov ax, word [0x49a868]
movsx ecx, ax
xor ecx, 0xa617814d
mov dword [0x495498], ecx
mov eax, dword [esp + 0xb44]
mov ecx, 0x10624dd3
mul ecx
shr edx, 6
mov eax, esp
mov dword [eax + 4], edx
lea ecx, [esp + 0x6b0]
mov dword [eax], ecx
call fcn.00442540
mov dword [esp + 0x6c4], eax
mov si, word [0x49a40a]
mov ax, si
mov ecx, eax
inc ecx
mov si, cx
mov word [0x49a40a], si
add eax, 0x447585a4
mov si, word [0x4995b0]
mov cx, si
sub ecx, eax
mov si, cx
mov word [0x4995b0], si
cmp dword [esp + 0x6c4], 0
jge 0x40e0f1
mov eax, dword [0x4913dc]
add eax, 0x8d22a0c8
mov dword [0x4913dc], eax
jmp 0x40f1c5
mov eax, dword [0x49346c]
imul eax, eax, 0x9e56f0b7
mov dword [0x49346c], eax
mov eax, dword [0x48fdcc]
mov ecx, dword [esp + 0x6c4]
mov edx, esp
lea esi, [esp + 0xb44]
mov dword [edx + 0xc], esi
mov dword [edx], ecx
mov dword [edx + 0x10], 4
mov dword [edx + 8], 0x1006
mov dword [edx + 4], 0xffff
mov dword [esp + 0x90], esi
call eax
sub esp, 0x14
mov di, word [0x49a4c2]
mov cx, di
shl ecx, 0xa
mov edx, 0xfe959b
sub edx, ecx
mov di, dx
mov word [0x49a174], di
mov ecx, dword [0x48fdcc]
mov edx, dword [esp + 0x6c4]
mov esi, esp
mov ebx, dword [esp + 0x90]
mov dword [esi + 0xc], ebx
mov dword [esi], edx
mov dword [esi + 0x10], 4
mov dword [esi + 8], 0x1005
mov dword [esi + 4], 0xffff
mov dword [esp + 0x8c], eax
call ecx
sub esp, 0x14
mov ecx, dword [0x491fa8]
add ecx, 0x9ef526aa
mov dword [0x491fa8], ecx
mov dword [esp + 0x88], eax
jmp 0x40e2b9
mov eax, dword [0x49662c]
or eax, 0xf162d17f
mov dword [0x49662c], eax
mov eax, dword [0x48fdd0]
mov ecx, esp
mov dword [ecx + 8], 6
mov dword [ecx + 4], 1
mov dword [ecx], 2
call eax
sub esp, 0xc
mov dword [esp + 0x6c4], eax
mov eax, dword [0x491654]
mov ecx, eax
dec ecx
mov dword [0x491654], ecx
and eax, 0x6edb3431
xor eax, 0xf967d35b
mov ecx, dword [0x491688]
and ecx, eax
mov dword [0x491688], ecx
cmp dword [esp + 0x6c4], 0xffffffff
jne 0x40e233
mov eax, dword [0x4920a0]
imul eax, eax, 0x43108820
mov dword [0x4920a0], eax
jmp 0x40f1c5
lea eax, [esp + 0x6b0]
mov ecx, dword [0x4968bc]
mov edx, ecx
dec edx
mov dword [0x4968bc], edx
mov edx, dword [0x4906bc]
sub ecx, edx
xor ecx, 0x1f63
mov si, word [0x49900e]
mov dx, si
add edx, ecx
mov si, dx
mov word [0x49900e], si
mov ecx, dword [0x48fda8]
mov edx, dword [esp + 0x6c4]
mov edi, esp
mov dword [edi + 4], eax
mov dword [edi], edx
mov dword [edi + 8], 0x10
call ecx
sub esp, 0xc
cmp eax, 0xffffffff
jne 0x40e2aa
mov eax, dword [0x49084c]
and eax, 0x2d044140
mov dword [0x49084c], eax
jmp 0x40f120
mov eax, dword [0x495c70]
add eax, 0x7103c02d
mov dword [0x495c70], eax
mov eax, 0x7e215cd3
mov ecx, dword [0x490bb0]
mov edx, ecx
dec edx
mov dword [0x490bb0], edx
mov edx, 0xc0b5f833
sub edx, ecx
mov ecx, dword [0x4951c8]
sub ecx, edx
mov dword [0x4951c8], ecx
mov ecx, dword [0x48fdc8]
lea edx, [esp + 0x69c]
mov dword [esp + 0x84], ecx
mov ecx, edx
mov dword [esp + 0x80], eax
mov dword [esp + 0x7c], edx
call fcn.00441cb0
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x78], eax
call fcn.0044a7d0
mov ecx, dword [esp + 0x6c4]
mov edx, esp
mov esi, dword [esp + 0x78]
mov dword [edx + 8], esi
mov dword [edx + 4], eax
mov dword [edx], ecx
mov dword [edx + 0xc], 0
mov eax, dword [esp + 0x84]
call eax
sub esp, 0x10
mov dword [esp + 0x6c0], eax
mov eax, dword [0x4920a0]
xor eax, 0x90e4a267
xor eax, 0xf6ccc1b7
mov ecx, dword [esp + 0x80]
cmp ecx, eax
jg 0x40e388
mov ax, word [0x497e92]
mov cx, ax
mov edx, dword [0x493378]
not edx
lea ecx, [ecx + edx + 0x3e2f6146]
mov ax, cx
mov word [0x49af60], ax
jmp 0x40e3a1
mov eax, dword [0x494d04]
or eax, 0xf6efe319
mov ecx, dword [0x493a38]
imul ecx, eax
mov dword [0x493a38], ecx
lea eax, [esp + 0x69c]
mov ecx, dword [esp + 0x6c0]
mov dword [esp + 0x74], ecx
mov ecx, eax
call fcn.00441cb0
mov ecx, dword [esp + 0x74]
cmp ecx, eax
jae 0x40e3da
mov eax, dword [0x4968dc]
and eax, 0xc6498c06
mov dword [0x4968dc], eax
jmp 0x40f120
mov ax, word [0x49a064]
mov cx, ax
dec ecx
mov ax, cx
mov word [0x49a064], ax
movsx ecx, ax
add ecx, 0x7f8e0b7f
mov edx, dword [0x492510]
sar edx, 1
mov esi, dword [0x493260]
sub edx, esi
cmp ecx, edx
jge 0x40e441
mov eax, dword [0x493fc4]
mov ecx, eax
dec ecx
mov dword [0x493fc4], ecx
mov ecx, dword [0x496a4c]
mov edx, ecx
inc edx
mov dword [0x496a4c], edx
lea eax, [eax + ecx - 0x7866bf7d]
mov ecx, dword [0x493740]
imul ecx, eax
mov dword [0x493740], ecx
mov ecx, dword [esp + 0xb40]
call fcn.0044a6d0
mov ecx, dword [0x493e88]
add ecx, 0x135e483e
cmp ecx, 0x4c484a4e
jne 0x40e482
mov ax, word [0x498c70]
mov cx, ax
add ecx, 0x18b12174
mov ax, cx
mov word [0x498c70], ax
jmp 0x40e49a
mov ax, word [0x497f00]
mov cx, ax
imul ecx, ecx, 0x7e6b24cf
mov ax, cx
mov word [0x497f00], ax
jmp 0x40e49f
mov eax, dword [0x493aec]
mov ecx, dword [0x490af8]
lea eax, [eax + ecx + 0x21446527]
mov dword [0x490af8], eax
mov eax, dword [0x48fdc0]
mov ecx, dword [esp + 0x6c4]
mov edx, esp
lea esi, [esp + 0x232]
mov dword [edx + 4], esi
mov dword [edx], ecx
mov dword [edx + 0xc], 0
mov dword [edx + 8], 0x400
call eax
sub esp, 0x10
mov dword [esp + 0x6c0], eax
mov eax, dword [0x4907d0]
or eax, 0xa406f572
mov dword [0x4907d0], eax
cmp dword [esp + 0x6c0], 0
jle 0x40e52a
mov eax, dword [esp + 0x218]
mov ecx, dword [esp + 0x21c]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], eax
call fcn.00423ad0
cmp eax, 0
je 0x40e5b6
mov ax, word [0x49ab04]
movsx ecx, ax
xor ecx, 0x2f84c52e
cmp ecx, 0x8493084e
jg 0x40e5b1
mov eax, 0x4a4bf801
mov cx, word [0x49ae94]
movsx edx, cx
cmp eax, edx
jge 0x40e591
mov eax, 0xdc60fc03
mov cx, word [0x499de0]
mov dx, cx
inc edx
mov si, dx
mov word [0x499de0], si
movsx edx, cx
sub edx, 0xb89c4456
cmp eax, edx
jge 0x40e58c
jmp 0x40e58c
jmp 0x40e5ac
mov eax, dword [0x490558]
mov cx, word [0x498de0]
mov dx, cx
xor edx, eax
mov cx, dx
mov word [0x498de0], cx
jmp 0x40e5b1
jmp 0x40ef13
mov eax, 0x8ba5be16
mov cx, word [0x49847c]
mov dx, cx
inc edx
mov si, dx
mov word [0x49847c], si
movsx edx, cx
cmp eax, edx
jle 0x40e5f0
mov eax, dword [0x492b98]
dec eax
mov dword [0x492b98], eax
xor eax, 0x849dad19
mov dword [0x494ad4], eax
mov eax, dword [esp + 0xb40]
mov ecx, eax
mov dword [esp + 0x70], eax
call fcn.00441cb0
mov ecx, dword [esp + 0x6c0]
add eax, ecx
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x70]
call fcn.00434250
sub esp, 8
mov eax, dword [0x4937cc]
xor eax, 0x6da47123
mov dword [0x4937cc], eax
mov eax, dword [esp + 0xb40]
mov ecx, eax
call fcn.0042e200
cmp eax, 0
jne 0x40e701
mov eax, dword [0x493144]
mov ecx, 0xbe56c6b7
sub ecx, eax
mov dx, word [0x499a3e]
movsx eax, dx
sar eax, 7
xor eax, 0xa9d30cce
or eax, 0x8f20f5a7
cmp ecx, eax
jge 0x40e6a0
mov ax, word [0x49a8c4]
movsx ecx, ax
mov ax, word [0x49a370]
movsx edx, ax
sub ecx, edx
or ecx, 0x186e4966
mov edx, dword [0x495570]
add edx, ecx
mov dword [0x495570], edx
jmp 0x40e6fc
mov eax, dword [0x4940ac]
inc eax
mov dword [0x4940ac], eax
cmp eax, 0xdbc14af9
jl 0x40e6ca
mov eax, dword [0x4974a4]
or eax, 0x147b0693
mov dword [0x4974a4], eax
jmp 0x40e6f7
mov eax, dword [0x4929b4]
mov ecx, eax
inc ecx
mov dword [0x4929b4], ecx
add eax, 0x57e8ad15
xor eax, 0x5d8aaf4f
cmp eax, 0x1a93b952
jg 0x40e6f2
jmp 0x40e6f2
jmp 0x40e6f7
jmp 0x40e6fc
jmp 0x40ef13
mov eax, dword [0x492b3c]
mov ecx, eax
inc ecx
mov dword [0x492b3c], ecx
add eax, 0xebcbd5c
mov dx, word [0x4998ae]
mov cx, dx
or ecx, eax
mov dx, cx
mov word [0x4998ae], dx
mov ecx, dword [esp + 0xb40]
mov eax, dword [esp + 0x6c0]
mov esi, esp
mov dword [esi + 4], eax
lea eax, [esp + 0x232]
mov dword [esi], eax
call fcn.00451490
sub esp, 8
mov ecx, dword [0x4944e4]
or ecx, 0xdaefff5f
mov dword [0x4944e4], ecx
cmp dword [esp + 0x210], 0
mov dword [esp + 0x6c], eax
jge 0x40eabb
mov eax, dword [0x4906c4]
xor eax, 0xffffffff
and eax, 0xc1002080
cmp eax, 0xf9013cf0
jge 0x40e799
mov eax, dword [0x492b40]
add eax, 0x9ebd960f
mov dword [0x492b40], eax
mov eax, 0x7ef5ad2d
mov ecx, esp
mov dword [ecx + 4], 5
mov dword [ecx], 0x4038
mov dword [esp + 0x68], eax
call fcn.00448730
mov dword [esp + 0xb14], eax
mov dx, word [0x49aaee]
movsx eax, dx
or eax, 0x9b6c89ab
mov ecx, dword [0x4953d8]
add ecx, eax
mov dword [0x4953d8], ecx
mov ecx, dword [esp + 0xb40]
mov eax, dword [esp + 0xb14]
mov esi, esp
mov dword [esi], eax
lea eax, [esp + 0x160]
mov dword [esp + 0x64], ecx
mov ecx, eax
mov dword [esp + 0x60], eax
call fcn.00432780
sub esp, 4
mov ecx, esp
mov esi, dword [esp + 0x60]
mov dword [ecx], esi
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x5c], eax
call fcn.00428c70
sub esp, 8
mov dword [esp + 0x210], eax
mov ecx, dword [esp + 0x60]
call fcn.004233f0
mov eax, dword [0x4953d0]
inc eax
mov dword [0x4953d0], eax
or eax, 0x4902d7a9
mov ecx, dword [esp + 0x68]
cmp ecx, eax
jge 0x40e864
mov eax, dword [0x495f7c]
add eax, 0xc08c077d
mov dword [0x495f7c], eax
jmp 0x40e88c
mov eax, dword [0x4971bc]
xor eax, 0xffffffff
imul eax, eax, 0xf0ae165e
cmp eax, 0x62af4e39
je 0x40e887
mov dword [0x4932a0], 0x61b27922
jmp 0x40e88c
mov eax, dword [esp + 0xb14]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 5
call fcn.0040a610
mov eax, dword [0x492620]
add eax, 0x6288513f
mov dword [0x492620], eax
cmp dword [esp + 0x210], 0
jl 0x40eab2
mov eax, 0xe80a20a8
mov word [0x49a6be], 0x3b6b
mov ecx, dword [esp + 0x210]
add ecx, 4
mov dword [esp + 0x210], ecx
mov ecx, dword [0x4976a4]
not ecx
mov edx, dword [0x491604]
mov esi, edx
dec esi
mov dword [0x491604], esi
xor ecx, edx
cmp eax, ecx
jne 0x40e90f
mov eax, dword [0x493c50]
and eax, 0xd15d1076
mov dword [0x493c50], eax
mov eax, dword [esp + 0xb40]
mov ecx, esp
mov dword [ecx], eax
call fcn.00408500
mov dword [esp + 0x20c], eax
mov eax, dword [0x48fff0]
mov ecx, dword [0x4945ec]
add ecx, eax
mov dword [0x4945ec], ecx
cmp dword [esp + 0x20c], 0
jge 0x40ea92
mov eax, dword [0x492c0c]
add eax, 0x12000439
mov dword [0x492c0c], eax
mov eax, esp
mov dword [eax + 4], 0xb
mov dword [eax], 0x2ac2
call fcn.00448730
mov dword [esp + 0xb10], eax
mov cx, word [0x498b40]
mov ax, cx
inc eax
mov dx, ax
mov word [0x498b40], dx
movsx eax, cx
mov esi, dword [0x491ff0]
sub esi, eax
mov dword [0x491ff0], esi
mov ecx, dword [esp + 0xb40]
mov eax, dword [esp + 0xb10]
mov esi, esp
mov dword [esi], eax
lea eax, [esp + 0x14c]
mov dword [esp + 0x58], ecx
mov ecx, eax
mov dword [esp + 0x54], eax
call fcn.00432780
sub esp, 4
mov ecx, esp
mov esi, dword [esp + 0x54]
mov dword [ecx], esi
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x50], eax
call fcn.00428c70
sub esp, 8
mov dword [esp + 0x6c0], eax
mov ecx, dword [esp + 0x54]
call fcn.004233f0
mov eax, dword [0x496738]
and eax, 0xffec6b7f
mov dword [0x496738], eax
mov eax, dword [esp + 0xb10]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0xb
call fcn.0040a610
mov dx, word [0x49b25e]
movsx eax, dx
mov ecx, dword [0x491c44]
and eax, ecx
mov ecx, dword [0x494fd4]
and eax, ecx
and eax, 0x28dc884
mov dword [0x494fd4], eax
cmp dword [esp + 0x6c0], 0
jl 0x40ea69
mov eax, dword [0x491228]
add eax, eax
xor eax, 0x447f1f8b
mov ecx, dword [0x49583c]
imul ecx, eax
mov dword [0x49583c], ecx
jmp 0x40ef13
mov eax, dword [0x496978]
not eax
mov cx, word [0x49a4ac]
movsx edx, cx
not edx
add edx, 0xcd23cb87
and eax, edx
mov edx, dword [0x496384]
xor edx, eax
mov dword [0x496384], edx
mov eax, dword [0x490da8]
add eax, 0xe056ad2c
mov cx, word [0x49b2ae]
mov dx, cx
or edx, eax
mov cx, dx
mov word [0x49b2ae], cx
mov word [0x49b18e], 0xa30e
mov ax, word [0x498170]
mov cx, ax
xor ecx, 0x31e1
mov ax, cx
mov word [0x498170], ax
cmp dword [esp + 0x20c], 0
jl 0x40eb56
mov eax, dword [0x49350c]
add eax, 0x840a2381
mov dword [0x49350c], eax
mov eax, dword [esp + 0xb40]
mov ecx, eax
call fcn.00441cb0
sub eax, dword [esp + 0x210]
cmp eax, dword [esp + 0x20c]
jb 0x40eb47
mov eax, 0x34308be9
mov ecx, dword [0x490134]
dec ecx
mov dword [0x490134], ecx
add ecx, 0xd2a8c76f
add ecx, 0x9d7264e1
cmp eax, ecx
jge 0x40eb42
mov dword [0x492634], 0x814f1d15
jmp 0x40ef13
mov eax, dword [0x493cfc]
add eax, 0xa5b34af6
mov dword [0x493cfc], eax
mov ax, word [0x499678]
mov cx, ax
add ecx, 0x9337217d
or ecx, 0xdd95
mov ax, word [0x49ac38]
mov dx, ax
and edx, ecx
mov ax, dx
mov word [0x49ac38], ax
cmp dword [esp + 0xb48], 0
je 0x40ee55
test byte [esp + 0x207], 1
jne 0x40ee55
mov ax, word [0x498d02]
mov cx, ax
mov edx, ecx
dec edx
mov ax, dx
mov word [0x498d02], ax
mov ax, word [0x49a544]
mov dx, ax
and ecx, edx
and ecx, 0xfc2a
mov ax, cx
mov word [0x49a544], ax
mov ecx, dword [esp + 0xb40]
call fcn.00441cb0
cmp eax, 0x4000
jbe 0x40ee38
mov eax, dword [0x492140]
mov ecx, dword [0x4900f0]
mov edx, ecx
inc edx
mov dword [0x4900f0], edx
add ecx, 0xad39f671
or eax, ecx
mov ecx, dword [0x4926c4]
sub ecx, eax
mov dword [0x4926c4], ecx
mov byte [esp + 0x207], 1
mov eax, dword [0x4921ec]
add eax, 0x3a8ff4f4
mov si, word [0x499ecc]
mov cx, si
sub ecx, eax
mov si, cx
mov word [0x499ecc], si
mov eax, dword [esp + 0xb40]
mov ecx, esp
mov dword [ecx], eax
lea ecx, [esp + 0x138]
call fcn.00414f80
sub esp, 4
mov ecx, dword [0x494dcc]
xor ecx, 0xcc86dbfd
mov dword [0x494dcc], ecx
cmp dword [esp + 0x210], 0
mov dword [esp + 0x4c], eax
jl 0x40ecd4
mov eax, dword [0x494d58]
imul eax, eax, 0x180d4921
mov dword [0x494d58], eax
mov eax, dword [esp + 0x210]
mov ecx, esp
mov dword [ecx], 0
lea ecx, [esp + 0x138]
mov dword [esp + 0x48], ecx
mov dword [esp + 0x44], eax
call fcn.00442400
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x44]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov ecx, dword [esp + 0x48]
call fcn.00415710
sub esp, 8
mov ecx, dword [0x492118]
or ecx, 0xf6ecd586
mov dword [0x492118], ecx
mov dword [esp + 0x40], eax
lea eax, [esp + 0x138]
lea ecx, [esp + 0x934]
mov dx, word [0x499a90]
mov si, dx
xor esi, 0x5440
mov dx, si
mov word [0x499a90], dx
mov esi, dword [esp + 0xb48]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
call fcn.0040f930
cmp eax, 0
jne 0x40ede5
mov eax, dword [0x4953f0]
not eax
imul eax, eax, 0x6cf2f26a
mov ecx, dword [0x490f3c]
xor ecx, 0xffffffff
cmp eax, ecx
jg 0x40ed49
mov eax, dword [0x494cb4]
add eax, 0x2741348d
mov dword [0x494cb4], eax
mov eax, 0xcffffee4
mov dword [esp + 0x210], 0xffffffff
mov ecx, dword [0x497788]
add ecx, 0xf2932f2a
mov edx, dword [0x494b70]
shl edx, 3
sub ecx, edx
cmp eax, ecx
jl 0x40ed99
mov eax, dword [0x4921b4]
imul eax, eax, 0x8c8d5f4
mov cx, word [0x499f68]
mov dx, cx
sub edx, eax
mov cx, dx
mov word [0x499f68], cx
mov eax, 0x9eec1922
mov ecx, dword [esp + 0xb40]
mov dword [esp + 0x3c], eax
call fcn.0044a6d0
mov eax, dword [0x492330]
dec eax
mov dword [0x492330], eax
mov ecx, dword [esp + 0x3c]
cmp ecx, eax
jl 0x40edd5
mov eax, dword [0x495e2c]
imul eax, eax, 0x649c0202
mov dword [0x495e2c], eax
mov dword [esp + 0x134], 0xd
jmp 0x40edf9
mov word [0x499052], 0xce5c
mov dword [esp + 0x134], 0
lea ecx, [esp + 0x138]
call fcn.00428b20
mov ecx, dword [esp + 0x134]
test ecx, ecx
mov dword [esp + 0x38], ecx
je 0x40ee33
jmp 0x40ee1d
mov eax, dword [esp + 0x38]
sub eax, 0xd
mov dword [esp + 0x34], eax
je 0x40ef13
jmp 0x40f2a3
jmp 0x40ee38
mov eax, dword [0x496a14]
add eax, 0x50e562df
xor eax, 0x1fb88183
mov ecx, dword [0x49637c]
or ecx, eax
mov dword [0x49637c], ecx
mov eax, dword [0x4930ac]
xor eax, 0x88d9f25c
mov dword [0x4930ac], eax
cmp dword [esp + 0xb44], 0x3b13
jne 0x40eee6
mov eax, dword [0x492994]
mov ecx, dword [0x4974ac]
or eax, ecx
or eax, 0x28c1c755
mov ecx, dword [0x496790]
imul ecx, eax
mov dword [0x496790], ecx
mov eax, dword [esp + 0xb40]
mov ecx, eax
call fcn.00441cb0
cmp eax, 0x500000
jbe 0x40eec3
mov eax, dword [0x493328]
add eax, 0xf7cb8f4b
mov dword [0x493328], eax
jmp 0x40ef13
mov ax, word [0x4999b2]
mov cx, ax
mov ax, word [0x498548]
mov dx, ax
xor ecx, edx
xor ecx, 0x31a4
mov ax, cx
mov word [0x498548], ax
mov eax, 0x5df10d67
mov ecx, dword [0x49372c]
add ecx, 0x9ee6795
add ecx, 0xa2bf48f3
cmp eax, ecx
je 0x40ef0e
mov word [0x49ade0], 0x271a
jmp 0x40e49f
mov ax, word [0x499f5e]
mov cx, ax
xor ecx, 0xd2c7
mov ax, cx
mov word [0x499f5e], ax
cmp dword [esp + 0x210], 0
jl 0x40ef9d
mov eax, dword [0x494f64]
add eax, 0x7cebd5c7
mov dword [0x494f64], eax
mov eax, dword [esp + 0xb40]
mov ecx, dword [esp + 0x210]
mov edx, esp
mov dword [edx], 0
mov dword [esp + 0x30], ecx
mov ecx, eax
mov dword [esp + 0x2c], eax
call fcn.00442400
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x30]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov ecx, dword [esp + 0x2c]
call fcn.00415710
sub esp, 8
mov ecx, dword [0x495a88]
and ecx, 0x3beeffdb
mov dword [0x495a88], ecx
mov dword [esp + 0x28], eax
mov eax, dword [0x497204]
add eax, 0xfbdbdfee
mov dword [0x497204], eax
cmp dword [esp + 0xb48], 0
je 0x40f0c7
test byte [esp + 0x207], 1
jne 0x40f0c7
lea eax, [esp + 0x934]
mov ecx, dword [0x4969a0]
or ecx, 0x68dff456
mov dword [0x4969a0], ecx
mov ecx, dword [esp + 0xb48]
mov edx, dword [esp + 0xb40]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0040f930
cmp eax, 0
jne 0x40f0a0
mov eax, dword [0x491b90]
add eax, 0x78e24f07
mov dword [0x491b90], eax
mov ecx, dword [esp + 0xb40]
call fcn.0044a6d0
mov eax, dword [0x4931e0]
mov ecx, eax
dec ecx
mov dword [0x4931e0], ecx
and eax, 0x2d032048
cmp eax, 0x2b32e142
jge 0x40f08c
mov eax, 0xe9f84297
mov ecx, dword [0x491ba4]
shl ecx, 9
cmp eax, ecx
jg 0x40f087
mov eax, dword [0x496ae4]
imul eax, eax, 0xb4dcfbf
mov ecx, dword [0x492710]
dec ecx
mov dword [0x492710], ecx
xor ecx, 0x13cc8112
cmp eax, ecx
jne 0x40f082
jmp 0x40f082
jmp 0x40f087
jmp 0x40f09b
mov eax, dword [0x49033c]
add eax, 0x29020101
mov dword [0x49033c], eax
jmp 0x40f0a0
mov eax, 0x10450022
mov ecx, dword [0x490a08]
or ecx, 0xe000400
cmp eax, ecx
jne 0x40f0c2
mov word [0x49afde], 0x115a
jmp 0x40f0c7
mov eax, 0x8c3968d8
mov cx, word [0x49856e]
movsx edx, cx
cmp eax, edx
jge 0x40f11b
mov eax, 0xf7df77dc
mov cx, word [0x49abf0]
movsx edx, cx
sar edx, 9
imul edx, edx, 0x9e1e650f
cmp eax, edx
je 0x40f116
mov ax, word [0x49a22c]
mov cx, ax
and ecx, 0xfcf2
mov ax, cx
mov word [0x49a22c], ax
jmp 0x40f11b
jmp 0x40f120
mov eax, 0x27ac7997
mov ecx, dword [0x48fdd8]
mov edx, dword [esp + 0x6c4]
mov esi, esp
mov dword [esi], edx
mov dword [esi + 4], 2
mov dword [esp + 0x24], eax
call ecx
sub esp, 8
mov ecx, dword [0x4929d4]
or ecx, 0xdc95ff21
mov edx, dword [esp + 0x24]
cmp edx, ecx
mov dword [esp + 0x20], eax
jge 0x40f195
mov ax, word [0x498490]
mov cx, ax
inc ecx
mov ax, cx
mov word [0x498490], ax
movsx ecx, ax
mov edx, dword [0x492854]
inc edx
mov dword [0x492854], edx
and ecx, edx
mov edx, dword [0x492b90]
or edx, ecx
mov dword [0x492b90], edx
mov eax, dword [0x48fda4]
mov ecx, dword [esp + 0x6c4]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov ecx, dword [0x494ce0]
not ecx
mov edx, dword [0x4946cc]
imul edx, ecx
mov dword [0x4946cc], edx
mov dword [esp + 0x1c], eax
mov eax, esp
lea ecx, [esp + 0x934]
mov dword [eax], ecx
mov dword [eax + 4], 0xea
call fcn.0042f280
mov eax, dword [0x496230]
mov ecx, eax
inc ecx
mov dword [0x496230], ecx
mov ecx, dword [0x495080]
xor ecx, eax
mov dword [0x495080], ecx
mov eax, esp
lea ecx, [esp + 0xa1e]
mov dword [eax], ecx
mov dword [eax + 4], 0xea
call fcn.0042f280
mov eax, dword [0x4958a0]
mov ecx, eax
dec ecx
mov dword [0x4958a0], ecx
mov ecx, 0xb2f05b6e
sub ecx, eax
mov eax, dword [0x492e18]
imul eax, ecx
mov dword [0x492e18], eax
mov eax, esp
lea ecx, [esp + 0x6ca]
mov dword [eax], ecx
mov dword [eax + 4], 0x26a
call fcn.0042f280
mov word [0x49b214], 0x410
mov eax, esp
lea ecx, [esp + 0x232]
mov dword [eax], ecx
mov dword [eax + 4], 0x46a
call fcn.0042f280
mov eax, dword [0x490990]
sar eax, 8
mov ecx, 0xb75b4903
sub ecx, eax
mov dx, word [0x499ec6]
movsx eax, dx
and ecx, eax
mov eax, dword [0x497210]
xor eax, ecx
mov dword [0x497210], eax
lea ecx, [esp + 0x69c]
call fcn.00428b20
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
int3