Function at 0x498190
Capabilities:
Disable automatic windows recovery features
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x50]
cmp eax, dword [ecx + 8]
jbe 0x498e8f
sub esp, 0xd0
mov edx, dword [esp + 0xd8]
test edx, edx
sete bl
mov ebp, dword [esp + 0xdc]
test ebp, ebp
xchg esi, ebx
sete bl
xchg esi, ebx
and esi, ebx
xchg esi, eax
test al, al
xchg esi, eax
jne 0x498647
mov ecx, dword [esp + 0xe0]
test ecx, ecx
jg 0x4982ab
xor ebx, ebx
sub ebx, edx
and ebx, edx
mov eax, 0xb4ca8b09
mov esi, edx
mul ebx
xor edi, edi
sub edi, esi
mov edi, 0
sbb edi, ebp
mov eax, ecx
neg ecx
and edi, ebp
imul ebx, ebx, 0x3f79d71
add edx, ebx
imul ebx, edi, 0xb4ca8b09
add edx, ebx
shr edx, 0x1a
lea ebx, [0x63ebe0]
movzx edx, byte [ebx + edx]
cmp edx, ecx
jl 0x4982af
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
cmp ecx, 0x20
sbb eax, eax
mov edx, ebp
shr ebp, cl
and ebp, eax
mov dword [esp + 0xb0], ebp
mov dword [esp + 8], ebp
lea ebx, [ecx - 0x20]
mov dword [esp + 0xac], ebx
cmp ebx, 0x20
sbb edi, edi
neg ebx
cmp ebx, 0x20
sbb ebp, ebp
shr esi, cl
and esi, eax
mov ecx, ebx
mov eax, edx
shl edx, cl
and edx, ebp
or edx, esi
mov ecx, dword [esp + 0xac]
shr eax, cl
and eax, edi
or eax, edx
mov dword [esp + 4], eax
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x18], edx
mov dword [esp + 0x14], eax
mov word [esp + 0x1c], 1
call fcn.00498ea0
add esp, 0xd0
ret
mov eax, ecx
mov esi, edx
mov edx, dword [esp + 0xe4]
mov ebx, dword [edx]
lea ecx, [ebx - 0x20]
mov edi, ecx
neg ecx
cmp ecx, 0x20
sbb eax, eax
cmp edi, 0x20
sbb edx, edx
mov esi, 1
shr esi, cl
mov ecx, edi
mov edi, 1
shl edi, cl
and edi, edx
and esi, eax
or esi, edi
cmp ebp, esi
setne al
cmp ebx, 0x20
sbb edx, edx
mov ecx, ebx
mov esi, 1
shl esi, cl
and edx, esi
mov esi, dword [esp + 0xd8]
cmp esi, edx
setne dl
or edx, eax
test dl, dl
je 0x498316
mov eax, dword [esp + 0xe4]
mov edx, dword [esp + 0xe0]
jmp 0x498330
mov eax, dword [esp + 0xe4]
mov edx, dword [eax + 8]
sub edx, ecx
lea ecx, [edx + 1]
mov edx, dword [esp + 0xe0]
cmp edx, ecx
jne 0x49837d
mov ecx, esi
shl esi, 1
mov dword [esp + 0xb0], esi
mov ebx, esi
add esi, 0xffffffff
mov edi, ebx
add ebx, 1
shl ebp, 1
shr ecx, 0x1f
or ecx, ebp
mov ebp, edi
add edi, 0xffffffff
mov edi, ecx
adc ecx, 0xffffffff
add ebp, 1
mov ebp, edi
adc edi, 0
dec edx
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0xc8]
jmp 0x4983cc
mov ecx, esi
shl esi, 2
mov dword [esp + 0xb0], esi
mov ebx, esi
add esi, 0xffffffff
mov edi, ebx
add ebx, 2
shl ebp, 2
shr ecx, 0x1e
or ecx, ebp
mov ebp, edi
add edi, 0xffffffff
mov edi, ecx
adc ecx, 0xffffffff
add ebp, 2
mov ebp, edi
adc edi, 0
add edx, 0xfffffffe
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0xc0]
test edx, edx
je 0x49860b
mov dword [esp + 0x70], edx
mov dword [esp + 0x50], ecx
mov dword [esp + 0x2c], edi
mov dword [esp + 0x28], ebx
mov dword [esp + 0x98], ebp
mov dword [esp + 0x4c], esi
neg edx
imul edx, edx, 0x13441
sar edx, 0x12
mov dword [esp + 0x24], edx
inc edx
mov dword [esp + 0x30], edx
lea edi, [0x63c310]
cmp eax, edi
jne 0x4984ac
mov dword [esp], esi
mov eax, dword [esp + 0x70]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.00499390
mov eax, dword [esp + 0xc]
mov dword [esp + 0x7c], eax
movzx ecx, byte [esp + 0x14]
mov byte [esp + 0x21], cl
mov edx, dword [esp + 0x94]
mov dword [esp], edx
mov ebx, dword [esp + 0x70]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x30]
mov dword [esp + 8], ebp
call fcn.00499390
mov eax, dword [esp + 0xc]
mov dword [esp + 0x88], eax
movzx ecx, byte [esp + 0x14]
mov byte [esp + 0x22], cl
mov edx, dword [esp + 0x28]
mov dword [esp], edx
mov ebx, dword [esp + 0x70]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x30]
mov dword [esp + 8], ebx
call fcn.00499390
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
movzx edx, byte [esp + 0x14]
xor ebx, ebx
mov ebp, dword [esp + 0x7c]
xor esi, esi
mov edi, dword [esp + 0x88]
xor ebx, ebx
mov dword [esp + 0x78], ebx
jmp 0x498581
mov dword [esp + 4], ecx
mov dword [esp], esi
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
call fcn.004994a0
movzx eax, byte [esp + 0x1c]
mov byte [esp + 0x21], al
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x80], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x84], edx
mov ebx, dword [esp + 0x98]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x94]
mov dword [esp], ebp
mov esi, dword [esp + 0x70]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x30]
mov dword [esp + 0xc], edi
call fcn.004994a0
movzx eax, byte [esp + 0x1c]
mov byte [esp + 0x22], al
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x8c], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x90], edx
mov ebx, dword [esp + 0x2c]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x28]
mov dword [esp], ebp
mov esi, dword [esp + 0x70]
mov dword [esp + 8], esi
mov esi, dword [esp + 0x30]
mov dword [esp + 0xc], esi
call fcn.004994a0
mov ecx, dword [esp + 0x18]
movzx edx, byte [esp + 0x1c]
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x80]
mov esi, dword [esp + 0x90]
mov edi, dword [esp + 0x8c]
mov dword [esp + 0x78], ebx
mov ebx, dword [esp + 0x84]
test ecx, ecx
jge 0x498e76
mov dword [esp + 0x8c], edi
mov edi, dword [esp + 0x30]
cmp edi, 0x37
jle 0x4985a9
xor edx, edx
xor edx, edx
mov byte [esp + 0x22], dl
xor edx, edx
mov byte [esp + 0x21], dl
xor edx, edx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x74], eax
mov dword [esp + 0x90], esi
mov dword [esp + 0x80], ebp
mov esi, dword [esp + 0x24]
add esi, 0x19
cmp esi, 0x18
jae 0x4985ff
mov byte [esp + 0x20], dl
mov esi, dword [esp + 0x4c]
test esi, esi
sete dl
mov ebp, dword [esp + 0x50]
test ebp, ebp
sete bl
xchg edi, ebx
neg ebx
xchg edi, ebx
mov dword [esp + 0x54], edi
and ebx, edx
test bl, bl
jne 0x498bcf
xor edx, edx
jmp 0x498aeb
movzx esi, byte [esp + 0x22]
movzx edi, byte [esp + 0x21]
jmp 0x498663
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], esi
mov dword [esp + 0x10], ebp
mov eax, dword [esp + 0x94]
mov dword [esp + 0xc], eax
mov dword [esp + 0x18], edi
mov dword [esp + 0x14], ebx
mov word [esp + 0x1c], 1
call fcn.00498ea0
add esp, 0xd0
ret
mov eax, dword [esp + 0xd4]
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
add esp, 0xd0
ret
mov byte [esp + 0x20], dl
xchg edi, eax
mov byte [esp + 0x21], al
xchg edi, eax
xchg esi, eax
mov byte [esp + 0x22], al
xchg esi, eax
neg ecx
mov dword [esp + 0xa8], ecx
cmp ecx, 0x20
sbb edi, edi
mov dword [esp + 0xb0], edi
mov esi, 1
shl esi, cl
and esi, edi
mov dword [esp + 0xac], esi
add esi, 0xffffffff
mov dword [esp + 0x6c], esi
lea edx, [ecx - 0x20]
mov dword [esp + 0xa4], edx
neg edx
cmp edx, 0x20
sbb eax, eax
mov dword [esp + 0xa0], eax
mov esi, dword [esp + 0xa4]
cmp esi, 0x20
sbb edi, edi
mov dword [esp + 0x9c], edi
mov ecx, edx
mov ebp, 1
shr ebp, cl
and ebp, eax
mov ecx, esi
mov eax, 1
shl eax, cl
and eax, edi
or eax, ebp
mov ebp, dword [esp + 0xac]
add ebp, 0xffffffff
adc eax, 0xffffffff
mov dword [esp + 0xbc], eax
mov ebp, ebx
shr ebx, cl
and ebx, edi
mov ecx, edx
shl ebp, cl
mov eax, dword [esp + 0xa0]
and ebp, eax
mov ecx, dword [esp + 0xa8]
mov edi, dword [esp + 0x80]
shr edi, cl
mov esi, dword [esp + 0xb0]
and edi, esi
or edi, ebp
or edi, ebx
mov dword [esp + 0xb0], edi
mov ebx, dword [esp + 0x84]
shr ebx, cl
and ebx, esi
mov dword [esp + 0xac], ebx
mov ecx, edx
mov ebx, dword [esp + 0x90]
shl ebx, cl
and ebx, eax
mov ecx, dword [esp + 0xa8]
mov edi, dword [esp + 0x8c]
shr edi, cl
and edi, esi
mov ecx, dword [esp + 0xa4]
mov ebp, dword [esp + 0x90]
shr ebp, cl
mov eax, dword [esp + 0x9c]
and ebp, eax
or edi, ebx
or edi, ebp
mov dword [esp + 0xa4], edi
mov ebx, ecx
mov ecx, dword [esp + 0xa8]
mov ebp, dword [esp + 0x90]
shr ebp, cl
and ebp, esi
mov dword [esp + 0x9c], ebp
mov ebp, dword [esp + 0xbc]
mov edi, dword [esp + 0x90]
and edi, ebp
mov dword [esp + 0x68], edi
mov edi, dword [esp + 0x6c]
mov ebp, dword [esp + 0x8c]
and ebp, edi
mov dword [esp + 0x64], ebp
mov ecx, ebx
mov ebp, dword [esp + 0x78]
mov ebx, ebp
shr ebp, cl
and ebp, eax
mov ecx, edx
mov eax, ebx
shl ebx, cl
mov edx, dword [esp + 0xa0]
and ebx, edx
mov ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0x74]
shr edx, cl
and edx, esi
or edx, ebx
or edx, ebp
mov ebx, eax
shr eax, cl
and eax, esi
mov ebp, dword [esp + 0x74]
and ebp, edi
mov esi, dword [esp + 0xbc]
and ebx, esi
movzx edi, byte [esp + 0x20]
xchg edi, eax
test al, al
xchg edi, eax
je 0x498850
mov dword [esp + 0xb8], edx
mov dword [esp + 0xb4], eax
test ebx, ebx
xchg esi, ebx
seta bl
xchg esi, ebx
sete al
test ebp, ebp
seta dl
and eax, edx
or eax, esi
xchg edi, eax
test al, al
xchg edi, eax
mov edx, dword [esp + 0xb8]
mov esi, dword [esp + 0xbc]
mov edi, eax
mov eax, dword [esp + 0xb4]
jmp 0x498855
mov edi, 1
je 0x498886
test ebx, ebx
sete bl
test ebp, ebp
xchg ebp, ebx
sete bl
xchg ebp, ebx
and ebp, ebx
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x498886
mov ebx, dword [esp + 0xd8]
test ebx, 1
xchg edi, ebx
sete bl
xchg edi, ebx
and edi, 1
jmp 0x49888d
mov ebx, dword [esp + 0xd8]
xchg edi, eax
test al, al
xchg edi, eax
jne 0x498899
add edx, 0xffffffff
adc eax, 0xffffffff
mov dword [esp + 0x78], eax
mov dword [esp + 0x74], edx
movzx ebp, byte [esp + 0x22]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x498962
lea edi, [ecx - 0x21]
mov dword [esp + 0xa0], edi
cmp edi, 0x20
sbb edx, edx
xchg edi, ebx
neg ebx
xchg edi, ebx
cmp edi, 0x20
sbb eax, eax
mov ecx, dword [esp + 0xa0]
mov ebx, 1
shl ebx, cl
mov ecx, edi
mov edi, 1
shr edi, cl
and edi, eax
and ebx, edx
or ebx, edi
mov eax, dword [esp + 0x68]
cmp ebx, eax
sete dl
setb bl
mov edi, dword [esp + 0xa8]
lea ecx, [edi - 1]
cmp ecx, 0x20
sbb edi, edi
mov eax, 1
shl eax, cl
and eax, edi
mov edi, dword [esp + 0x64]
cmp eax, edi
mov ecx, ebp
xchg ebp, ebx
setb bl
xchg ebp, ebx
and ebp, edx
or ebp, ebx
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x498935
mov eax, dword [esp + 0xa4]
mov edx, 1
jmp 0x4989ec
cmp eax, edi
sete al
and eax, edx
test al, al
je 0x498954
mov eax, dword [esp + 0xa4]
test eax, 1
setne dl
jmp 0x4989ec
mov eax, dword [esp + 0xa4]
xor edx, edx
jmp 0x4989ec
lea edi, [ecx - 1]
cmp edi, 0x20
sbb eax, eax
lea ebx, [ecx - 0x21]
mov dword [esp + 0xa0], ebx
cmp ebx, 0x20
sbb ebp, ebp
mov dword [esp + 0xb8], ebp
neg ebx
cmp ebx, 0x20
sbb esi, esi
mov ecx, edi
mov ebp, dword [esp + 0x68]
shr ebp, cl
test eax, ebp
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg ebp, eax
mov byte [esp + 0x23], al
xchg ebp, eax
mov ebp, dword [esp + 0x64]
mov edi, ebp
shr ebp, cl
and ebp, eax
mov ecx, ebx
mov eax, dword [esp + 0x68]
mov ebx, eax
shl eax, cl
and eax, esi
or eax, ebp
mov ecx, dword [esp + 0xa0]
shr ebx, cl
mov esi, dword [esp + 0xb8]
and ebx, esi
or ebx, eax
cmp ebx, 1
sete al
movzx ebx, byte [esp + 0x23]
and eax, ebx
movzx ecx, byte [esp + 0x22]
mov esi, dword [esp + 0xbc]
mov edx, eax
mov eax, dword [esp + 0xa4]
movzx ebx, byte [esp + 0x21]
test bl, bl
je 0x498a46
mov ebx, dword [esp + 0x84]
test esi, ebx
sete bl
mov ebp, dword [esp + 0x80]
mov esi, dword [esp + 0x6c]
test esi, ebp
xchg ebp, ebx
sete bl
xchg ebp, ebx
and ebp, ebx
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x498a46
mov ebx, dword [esp + 0xd8]
test ebx, 1
sete bl
and ebx, 1
test bl, bl
je 0x498a46
test cl, cl
mov ebp, dword [esp + 0xb0]
mov ebx, dword [esp + 0xac]
jmp 0x498a5c
mov ebp, dword [esp + 0xb0]
add ebp, 1
mov ebx, dword [esp + 0xac]
adc ebx, 0
test cl, cl
je 0x498a74
mov ecx, dword [esp + 0x68]
test ecx, ecx
sete cl
test edi, edi
xchg esi, ebx
sete bl
xchg esi, ebx
and esi, ecx
jmp 0x498a76
xor esi, esi
mov ecx, dword [esp + 0xd4]
mov dword [esp], ecx
mov dword [esp + 8], ebx
mov dword [esp + 4], ebp
mov ebx, dword [esp + 0x9c]
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0x14], eax
xchg esi, eax
mov byte [esp + 0x1c], al
xchg esi, eax
mov byte [esp + 0x1d], dl
call fcn.00498ea0
mov eax, dword [esp + 0xd4]
mov ecx, dword [eax + 0x10]
mov edx, dword [esp + 0x24]
sub ecx, edx
dec ecx
mov dword [eax + 0x10], ecx
add esp, 0xd0
ret
mov eax, ebx
mov ebx, dword [esp + 0x60]
lea edx, [ebx + 1]
mov edi, dword [esp + 0x54]
mov esi, dword [esp + 0x9c]
mov ebp, eax
mov eax, dword [esp + 0x74]
cmp edx, edi
jge 0x498bcf
mov dword [esp + 0x60], edx
mov dword [esp + 0x48], ebp
mov dword [esp + 0x3c], esi
mov eax, 0xcccccccd
mul ebp
shr edx, 2
mov dword [esp + 0xb0], edx
lea ebx, [edx + edx*4]
sub ebp, ebx
mov eax, 0x33333333
mul ebp
mov dword [esp + 0xac], edx
mov dword [esp + 0xa4], eax
mov eax, 0xcccccccd
mul esi
shr edx, 2
mov eax, edx
add edx, 0
mov ebx, dword [esp + 0xa4]
add ebx, edx
lea edi, [eax + eax*4]
sub esi, edi
add ebp, esi
mov esi, eax
mov eax, 0xcccccccd
mov edi, edx
mul ebp
shr edx, 2
mov dword [esp + 0xa0], edx
mov ebp, ebx
add ebx, edx
mov dword [esp + 0x9c], ebx
mov eax, 5
mul ebx
add esi, 0
mov esi, dword [esp + 0xb0]
adc esi, 0
mov ebx, dword [esp + 0xa4]
add ebx, edi
mov ebx, dword [esp + 0xac]
adc ebx, esi
mov esi, dword [esp + 0xa0]
add ebp, esi
adc ebx, 0
mov ebp, dword [esp + 0x3c]
cmp eax, ebp
xchg ebp, ebx
setne bl
xchg ebp, ebx
lea esi, [ebx + ebx*4]
add edx, esi
mov esi, dword [esp + 0x48]
cmp esi, edx
setne dl
or edx, ebp
test dl, dl
je 0x498ad1
mov eax, dword [esp + 0x74]
mov edi, dword [esp + 0x54]
movzx edx, byte [esp + 0x21]
jmp 0x498bd4
mov edx, 1
mov byte [esp + 0x21], dl
mov ebx, dword [esp + 0x94]
test ebx, ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
mov esi, dword [esp + 0x98]
test esi, esi
sete dl
and edx, ebp
test dl, dl
jne 0x498d17
xor edx, edx
jmp 0x498c15
mov eax, ebp
mov ebp, dword [esp + 0x5c]
lea edx, [ebp + 1]
mov edi, dword [esp + 0x54]
mov esi, eax
mov eax, dword [esp + 0x74]
cmp edx, edi
jge 0x498d17
mov dword [esp + 0x5c], edx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x44], esi
mov eax, 0xcccccccd
mul ebx
shr edx, 2
mov dword [esp + 0xb0], edx
add edx, 0
mov dword [esp + 0xac], edx
mov eax, 0xcccccccd
mul esi
shr edx, 2
mov dword [esp + 0xa4], edx
lea ebp, [edx + edx*4]
sub esi, ebp
mov eax, 0x33333333
mul esi
mov dword [esp + 0xa0], edx
mov dword [esp + 0x9c], eax
mov ebp, dword [esp + 0xac]
add eax, ebp
mov dword [esp + 0xac], eax
mov edi, dword [esp + 0xb0]
lea edx, [edi + edi*4]
sub ebx, edx
lea edx, [ebx + esi]
mov ebx, eax
mov eax, edx
mov esi, 0xcccccccd
mul esi
shr edx, 2
mov dword [esp + 0xb0], edx
add ebx, edx
mov eax, ebx
mov esi, 5
mul esi
add edi, 0
mov edi, dword [esp + 0xa4]
adc edi, 0
mov esi, dword [esp + 0x9c]
add esi, ebp
mov ebp, dword [esp + 0xa0]
adc ebp, edi
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0xb0]
add esi, edi
adc ebp, 0
lea esi, [ebp + ebp*4]
add edx, esi
mov esi, dword [esp + 0x44]
cmp esi, edx
setne dl
mov esi, dword [esp + 0x38]
cmp eax, esi
xchg esi, ebx
setne bl
xchg esi, ebx
or esi, edx
xchg esi, eax
test al, al
xchg esi, eax
je 0x498c02
mov eax, dword [esp + 0x74]
mov edi, dword [esp + 0x54]
movzx edx, byte [esp + 0x22]
jmp 0x498d1c
mov edx, 1
mov byte [esp + 0x22], dl
mov ebx, dword [esp + 0x2c]
test ebx, ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
mov esi, dword [esp + 0x28]
test esi, esi
sete dl
and ebp, edx
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x498d42
xor edx, edx
jmp 0x498d79
mov edx, 1
mov ebx, dword [esp + 0x84]
mov ebp, dword [esp + 0x80]
movzx esi, byte [esp + 0x22]
movzx edi, byte [esp + 0x21]
jmp 0x498663
mov eax, ebp
mov ebp, dword [esp + 0x58]
lea edx, [ebp + 1]
mov edi, dword [esp + 0x54]
mov esi, ebx
mov ebx, eax
mov eax, dword [esp + 0x74]
cmp edx, edi
jge 0x498d42
mov dword [esp + 0x58], edx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x34], esi
mov eax, 0xcccccccd
mul esi
shr edx, 2
mov dword [esp + 0xb0], edx
add edx, 0
mov dword [esp + 0xac], edx
mov eax, 0xcccccccd
mul ebx
shr edx, 2
mov dword [esp + 0xa4], edx
lea ebp, [edx + edx*4]
sub ebx, ebp
mov eax, 0x33333333
mul ebx
mov dword [esp + 0xa0], edx
mov dword [esp + 0x9c], eax
mov ebp, dword [esp + 0xac]
add eax, ebp
mov dword [esp + 0xac], eax
mov edi, dword [esp + 0xb0]
lea edx, [edi + edi*4]
sub esi, edx
lea edx, [esi + ebx]
mov ebx, eax
mov eax, edx
mov esi, 0xcccccccd
mul esi
shr edx, 2
mov dword [esp + 0xb0], edx
add ebx, edx
mov eax, ebx
mov esi, 5
mul esi
add edi, 0
mov edi, dword [esp + 0xa4]
adc edi, 0
mov esi, dword [esp + 0x9c]
add esi, ebp
mov ebp, dword [esp + 0xa0]
adc ebp, edi
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0xb0]
add esi, edi
adc ebp, 0
lea esi, [ebp + ebp*4]
add edx, esi
mov esi, dword [esp + 0x40]
cmp esi, edx
setne dl
mov esi, dword [esp + 0x34]
cmp eax, esi
xchg esi, ebx
setne bl
xchg esi, ebx
or esi, edx
xchg esi, eax
test al, al
xchg esi, eax
je 0x498d64
mov eax, dword [esp + 0x74]
movzx edx, byte [esp + 0x20]
jmp 0x498d47
lea eax, [0x5474c0]
mov dword [esp], eax
lea eax, [0x59a6dc]
mov dword [esp + 4], eax
call fcn.00433350
nop
call fcn.0045e080
jmp fcn.00498190