Function at 0x4b3470
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x1a0
push ebx
mov ebx, dword [esp + 0x1ac]
push ebp
push esi
push edi
push ebx
push 0xc
lea eax, [esp + 0x140]
push 1
push eax
mov dword [esp + 0x110], 0
call dword [0x4d7e4c]
mov ecx, dword [esp + 0x14c]
mov ebp, dword [esp + 0xb4]
add esp, 0x10
lea eax, [ecx + 1]
and al, 0xfe
sub eax, 4
cmp eax, 8
mov dword [esp + 0x13c], eax
jbe 0x4b37a6
push ebx
push 8
lea edx, [esp + 0x1c]
push 1
push edx
call dword [0x4d7e4c]
add esp, 0x10
test eax, eax
je 0x4b3791
mov ecx, 4
mov edi, str.LIST
lea esi, [esp + 0x14]
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x4b3529
mov eax, dword [esp + 0x13c]
push 1
sub eax, 0xc
push 4
push ebx
mov dword [esp + 0x148], eax
call dword [0x4d7e48]
add esp, 0xc
lea ecx, [esp + 0x14]
push ebx
push 8
push 1
push ecx
call dword [0x4d7e4c]
add esp, 0x10
mov ecx, 4
mov edi, str.smpl
lea esi, [esp + 0x14]
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4b3573
mov eax, dword [esp + 0x18]
push eax
call dword [0x4d7e3c]
add esp, 4
mov dword [esp + 0xbc], eax
test eax, eax
je 0x4b375e
mov ecx, dword [esp + 0x18]
push ebx
push ecx
mov edx, eax
push 1
push edx
call dword [0x4d7e4c]
add esp, 0x10
jmp 0x4b375e
mov ecx, 4
mov edi, str.phdr
lea esi, [esp + 0x14]
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x4b35b8
mov ecx, dword [esp + 0x18]
push ecx
call dword [0x4d7e3c]
add esp, 4
mov dword [esp + 0x40], eax
test eax, eax
je 0x4b375e
mov edx, dword [esp + 0x18]
push ebx
push edx
push 1
push eax
call dword [0x4d7e4c]
add esp, 0x10
jmp 0x4b375e
mov ecx, 4
mov edi, str.pbag
lea esi, [esp + 0x14]
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4b35ff
mov eax, dword [esp + 0x18]
push eax
call dword [0x4d7e3c]
add esp, 4
mov dword [esp + 0x28], eax
test eax, eax
je 0x4b375e
mov ecx, dword [esp + 0x18]
push ebx
push ecx
mov edx, eax
push 1
push edx
call dword [0x4d7e4c]
add esp, 0x10
jmp 0x4b375e
mov ecx, 4
mov edi, str.pgen
lea esi, [esp + 0x14]
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x4b3642
mov ecx, dword [esp + 0x18]
push ecx
call dword [0x4d7e3c]
mov ebp, eax
add esp, 4
test ebp, ebp
je 0x4b375e
mov edx, dword [esp + 0x18]
push ebx
push edx
push 1
push ebp
call dword [0x4d7e4c]
add esp, 0x10
jmp 0x4b375e
mov ecx, 4
mov edi, str.inst
lea esi, [esp + 0x14]
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x4b3687
mov ecx, dword [esp + 0x18]
push ecx
call dword [0x4d7e3c]
add esp, 4
mov dword [esp + 0x54], eax
test eax, eax
je 0x4b375e
mov edx, dword [esp + 0x18]
push ebx
push edx
push 1
push eax
call dword [0x4d7e4c]
add esp, 0x10
jmp 0x4b375e
mov ecx, 4
mov edi, str.ibag
lea esi, [esp + 0x14]
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4b36ce
mov eax, dword [esp + 0x18]
push eax
call dword [0x4d7e3c]
add esp, 4
mov dword [esp + 0x44], eax
test eax, eax
je 0x4b375e
mov ecx, dword [esp + 0x18]
push ebx
push ecx
mov edx, eax
push 1
push edx
call dword [0x4d7e4c]
add esp, 0x10
jmp 0x4b375e
mov ecx, 4
mov edi, str.igen
lea esi, [esp + 0x14]
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x4b370c
mov ecx, dword [esp + 0x18]
push ecx
call dword [0x4d7e3c]
add esp, 4
mov dword [esp + 0x3c], eax
test eax, eax
je 0x4b375e
mov edx, dword [esp + 0x18]
push ebx
push edx
push 1
push eax
call dword [0x4d7e4c]
add esp, 0x10
jmp 0x4b375e
mov ecx, 4
mov edi, str.shdr
lea esi, [esp + 0x14]
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4b374d
mov eax, dword [esp + 0x18]
push eax
call dword [0x4d7e3c]
add esp, 4
mov dword [esp + 0xb4], eax
test eax, eax
je 0x4b375e
mov ecx, dword [esp + 0x18]
push ebx
push ecx
push 1
push eax
call dword [0x4d7e4c]
add esp, 0x10
jmp 0x4b375e
mov edx, dword [esp + 0x18]
push 1
push edx
push ebx
call dword [0x4d7e48]
add esp, 0xc
mov eax, dword [esp + 0x18]
push 1
and eax, 1
push eax
push ebx
call dword [0x4d7e48]
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x148]
add esp, 0xc
inc ecx
and ecx, 0xfffffffe
mov edx, 0xfffffff8
sub edx, ecx
add eax, edx
mov dword [esp + 0x13c], eax
cmp dword [esp + 0x13c], 8
ja 0x4b34c8
mov dword [esp + 0xa4], ebp
mov esi, dword [esp + 0x40]
mov ecx, 3
mov edi, 0x4e0a10
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x4b4bb6
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x24], ecx
mov edx, dword [esp + 0x24]
mov cx, word [edx + 0x16]
test cx, cx
je 0x4b37de
cmp cx, 0x80
jne 0x4b4b82
mov eax, dword [esp + 0x24]
mov ax, word [eax + 0x14]
cmp ax, 0x80
jae 0x4b4b82
mov ebx, ecx
and eax, 0xffff
and ebx, 0xffff
cmp cx, 0x80
mov dword [esp + 0x74], eax
jne 0x4b380d
mov ebx, 1
mov ecx, ebx
xor edx, edx
shl ecx, 7
add ecx, eax
lea eax, [ecx*4 + 0x605560]
mov dword [esp + 0x4c], eax
cmp dword [eax], edx
jne 0x4b3877
push 0x14a
call dword [0x4d7e3c]
mov edx, dword [esp + 0x50]
mov edi, eax
mov ecx, 0x52
xor eax, eax
mov dword [edx], edi
mov esi, dword [esp + 0x28]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [edx]
add esp, 4
mov dword [eax], 0x54534e49
mov ecx, dword [edx]
mov dword [ecx + 4], 0x142
mov eax, dword [edx]
mov byte [eax + 8], bl
mov ecx, dword [edx]
mov al, byte [esp + 0x74]
mov byte [ecx + 9], al
mov edi, dword [edx]
add edi, 0xa
mov ecx, 5
rep movsd dword es:[edi], dword [esi]
xor edx, edx
mov eax, dword [esp + 0x24]
xor ecx, ecx
xor esi, esi
mov dword [esp + 0x90], edx
mov cx, word [eax + 0x18]
mov si, word [eax + 0x3e]
cmp ecx, esi
mov dword [esp + 0xa0], edx
mov dword [esp + 0xc4], edx
mov dword [esp + 0xc8], edx
mov dword [esp + 0xb8], edx
mov dword [esp + 0x9c], edx
mov dword [esp + 0x98], edx
mov dword [esp + 0xcc], edx
mov dword [esp + 0xd8], edx
mov dword [esp + 0xd4], edx
mov dword [esp + 0xc0], edx
mov dword [esp + 0xdc], edx
mov dword [esp + 0x34], 0
mov dword [esp + 0xac], ecx
jge 0x4b4b82
mov edi, 0xffffd120
mov esi, dword [esp + 0x28]
xor eax, eax
xor ebx, ebx
mov ax, word [esi + ecx*4]
mov bx, word [esi + ecx*4 + 4]
cmp eax, ebx
mov dword [esp + 0x20], eax
jge 0x4b4b68
shl eax, 2
xor ecx, ecx
mov dword [esp + 0x18c], eax
mov cx, word [eax + ebp]
add ecx, 0xffffffe7
cmp ecx, 0x1b
ja case.0x4b3938.41
xor ebx, ebx
mov bl, byte [ecx + 0x4b4c7c]
jmp dword [ebx*4 + 0x4b4c38]
mov ax, word [eax + ebp + 2]
cmp ax, 0x1388
jge 0x4b3959
movsx ecx, ax
mov dword [esp + 0x90], ecx
jmp case.0x4b3938.41
mov dword [esp + 0x90], 0x1388
jmp case.0x4b3938.41
mov ax, word [eax + ebp + 2]
cmp ax, 0x1f40
jge 0x4b3983
movsx eax, ax
mov dword [esp + 0xc4], eax
jmp case.0x4b3938.41
mov dword [esp + 0xc4], 0x1f40
jmp case.0x4b3938.41
mov ax, word [eax + ebp + 2]
cmp ax, 0x1388
jge 0x4b39ad
movsx ecx, ax
mov dword [esp + 0xb8], ecx
jmp case.0x4b3938.41
mov dword [esp + 0xb8], 0x1388
jmp case.0x4b3938.41
mov ax, word [eax + ebp + 2]
cmp ax, 0x1f40
jge 0x4b39d7
movsx eax, ax
mov dword [esp + 0x98], eax
jmp case.0x4b3938.41
mov dword [esp + 0x98], 0x1f40
jmp case.0x4b3938.41
mov ax, word [eax + ebp + 2]
cmp ax, dx
jle 0x4b3a00
movsx ecx, ax
mov dword [esp + 0xd8], ecx
jmp case.0x4b3938.41
mov dword [esp + 0xd8], edx
jmp case.0x4b3938.41
mov ax, word [eax + ebp + 2]
cmp ax, 0x1f40
jge 0x4b3a26
movsx eax, ax
mov dword [esp + 0xc0], eax
jmp case.0x4b3938.41
mov dword [esp + 0xc0], 0x1f40
jmp case.0x4b3938.41
mov ax, word [eax + ebp + 2]
cmp ax, 0x1388
jge 0x4b3a50
movsx ecx, ax
mov dword [esp + 0xa0], ecx
jmp case.0x4b3938.41
mov dword [esp + 0xa0], 0x1388
jmp case.0x4b3938.41
mov ax, word [eax + ebp + 2]
cmp ax, 0x1f40
jge 0x4b3a7a
movsx eax, ax
mov dword [esp + 0xc8], eax
jmp case.0x4b3938.41
mov dword [esp + 0xc8], 0x1f40
jmp case.0x4b3938.41
mov ax, word [eax + ebp + 2]
cmp ax, 0x1388
jge 0x4b3aa4
movsx ecx, ax
mov dword [esp + 0x9c], ecx
jmp case.0x4b3938.41
mov dword [esp + 0x9c], 0x1388
jmp case.0x4b3938.41
mov ax, word [eax + ebp + 2]
cmp ax, 0x1f40
jge 0x4b3ace
movsx eax, ax
mov dword [esp + 0xcc], eax
jmp case.0x4b3938.41
mov dword [esp + 0xcc], 0x1f40
jmp case.0x4b3938.41
mov ax, word [eax + ebp + 2]
cmp ax, dx
jle 0x4b3af7
movsx ecx, ax
mov dword [esp + 0xd4], ecx
jmp case.0x4b3938.41
mov dword [esp + 0xd4], edx
jmp case.0x4b3938.41
mov ax, word [eax + ebp + 2]
cmp ax, 0x1f40
jge 0x4b3b1d
movsx eax, ax
mov dword [esp + 0xdc], eax
jmp case.0x4b3938.41
mov dword [esp + 0xdc], 0x1f40
jmp case.0x4b3938.41
lea eax, [eax + ebp + 2]
mov dword [esp + 0x124], edx
mov dword [esp + 0x30], eax
mov dword [esp + 0x12c], edx
movsx eax, word [eax]
mov dword [esp + 0x130], edx
mov dword [esp + 0xec], edx
lea ecx, [eax + eax*4]
mov dword [esp + 0xf4], edx
mov dword [esp + 0x108], edx
mov dword [esp + 0xe8], edx
mov dword [esp + 0xe4], edx
lea edx, [eax + ecx*2]
mov eax, dword [esp + 0x54]
xor ecx, ecx
mov dword [esp + 0x134], edi
mov dword [esp + 0xe0], edi
mov cx, word [eax + edx*2 + 0x14]
lea eax, [eax + edx*2]
xor edx, edx
mov dword [esp + 0x10c], edi
mov dx, word [eax + 0x2a]
mov dword [esp + 0xfc], edi
cmp ecx, edx
mov dword [esp + 0x114], edi
mov dword [esp + 0x104], edi
mov dword [esp + 0x110], edi
mov dword [esp + 0x11c], edi
mov dword [esp + 0x118], edi
mov dword [esp + 0x128], edi
mov dword [esp + 0x74], edi
mov dword [esp + 0xf0], edi
mov dword [esp + 0x68], ecx
jge 0x4b4ab7
mov ebp, dword [esp + 0x3c]
mov ebx, ecx
mov eax, dword [esp + 0x124]
mov ecx, dword [esp + 0x12c]
mov edx, dword [esp + 0x134]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x130]
mov dword [esp + 0xa8], ecx
mov ecx, dword [esp + 0xec]
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0xf4]
mov dword [esp + 0x88], ecx
mov ecx, dword [esp + 0x108]
mov dword [esp + 0xd0], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x10c]
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x104]
mov dword [esp + 0x8c], edx
mov edx, dword [esp + 0xfc]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x11c]
mov dword [esp + 0x64], ecx
mov ecx, dword [esp + 0x110]
mov dword [esp + 0x50], edx
mov edx, dword [esp + 0x114]
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x118]
mov dword [esp + 0x84], ecx
mov ecx, dword [esp + 0xe4]
mov dword [esp + 0x6c], edx
mov edx, dword [esp + 0x128]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0xf0]
mov dword [esp + 0x58], ecx
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x48], edx
mov edx, dword [esp + 0xe8]
mov dword [esp + 0x60], eax
mov dword [esp + 0x80], ecx
mov dword [esp + 0x70], edx
mov edx, dword [esp + 0x34]
mov ecx, 0x12
xor eax, eax
lea edi, [esp + 0x144]
rep stosd dword es:[edi], eax
push 0x9e
mov dword [esp + 0x20], edx
mov dword [esp + 0x30], 0
mov dword [esp + 0x124], 0
mov dword [esp + 0xfc], 1
mov dword [esp + 0x148], 0x504d4153
mov dword [esp + 0x14c], 0x40
call dword [0x4d7e3c]
mov edi, eax
mov ecx, 0x27
xor eax, eax
mov dword [esp + 0x188], edi
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [esp + 0x48]
xor ecx, ecx
xor edx, edx
add esp, 4
mov cx, word [eax + ebx*4]
mov dx, word [eax + ebx*4 + 4]
cmp ecx, edx
jge 0x4b4992
xor eax, eax
mov ax, word [ebp + ecx*4]
cmp eax, 0x3a
ja case.0x4b3d7d.35
xor edx, edx
mov dl, byte [eax + 0x4b4d28]
jmp dword [edx*4 + 0x4b4c98]
movsx eax, word [ebp + ecx*4 + 2]
add dword [esp + 0x188], eax
jmp case.0x4b3d7d.35
movsx edx, word [ebp + ecx*4 + 2]
add dword [esp + 0x174], edx
jmp case.0x4b3d7d.35
movsx eax, word [ebp + ecx*4 + 2]
add dword [esp + 0x178], eax
jmp case.0x4b3d7d.35
movsx edx, word [ebp + ecx*4 + 2]
add dword [esp + 0x17c], edx
jmp case.0x4b3d7d.35
movsx eax, word [ebp + ecx*4 + 2]
mov edx, dword [esp + 0x188]
shl eax, 0xf
add edx, eax
mov dword [esp + 0x188], edx
jmp case.0x4b3d7d.35
movsx edx, word [ebp + ecx*4 + 2]
mov dword [esp + 0x88], edx
jmp case.0x4b3d7d.35
movsx edx, word [ebp + ecx*4 + 2]
shl edx, 8
mov eax, 0x51eb851f
imul edx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [esp + 0x2c], edx
fild dword [esp + 0x2c]
fstp dword [esp + 0x2c]
jmp case.0x4b3d7d.35
movsx edx, word [ebp + ecx*4 + 2]
mov eax, dword [esp + 0x174]
shl edx, 0xf
add eax, edx
mov dword [esp + 0x174], eax
jmp case.0x4b3d7d.35
movsx eax, word [ebp + ecx*4 + 2]
mov dword [esp + 0x20], eax
jmp case.0x4b3d7d.35
movsx edx, word [ebp + ecx*4 + 2]
or byte [esp + 0x170], 0x20
mov dword [esp + 0xa8], edx
jmp case.0x4b3d7d.35
movsx eax, word [ebp + ecx*4 + 2]
mov dword [esp + 0x8c], eax
jmp case.0x4b3d7d.35
movsx edx, word [ebp + ecx*4 + 2]
mov dword [esp + 0x94], edx
jmp case.0x4b3d7d.35
movsx eax, word [ebp + ecx*4 + 2]
mov dword [esp + 0xd0], eax
jmp case.0x4b3d7d.35
movsx edx, word [ebp + ecx*4 + 2]
mov dword [esp + 0xb0], edx
jmp case.0x4b3d7d.35
mov eax, 0x1388
cmp word [ebp + ecx*4 + 2], ax
jge 0x4b3ec9
mov eax, dword [esp + 0x18c]
movsx edx, word [eax + ebp + 2]
mov dword [esp + 0x5c], edx
jmp case.0x4b3d7d.35
mov dword [esp + 0x5c], eax
jmp case.0x4b3d7d.35
mov ax, word [ebp + ecx*4 + 2]
cmp ax, 0x1f40
jge 0x4b3ee9
movsx eax, ax
mov dword [esp + 0x6c], eax
jmp case.0x4b3d7d.35
mov dword [esp + 0x6c], 0x1f40
jmp case.0x4b3d7d.35
mov ax, word [ebp + ecx*4 + 2]
cmp ax, 0x1388
jge 0x4b3f10
movsx edx, ax
mov dword [esp + 0x84], edx
jmp case.0x4b3d7d.35
mov dword [esp + 0x84], 0x1388
jmp case.0x4b3d7d.35
mov ax, word [ebp + ecx*4 + 2]
cmp ax, 0x1f40
jge 0x4b3f37
movsx eax, ax
mov dword [esp + 0x78], eax
jmp case.0x4b3d7d.35
mov dword [esp + 0x78], 0x1f40
jmp case.0x4b3d7d.35
mov ax, word [ebp + ecx*4 + 2]
test ax, ax
jle 0x4b3f5a
movsx edx, ax
mov dword [esp + 0x70], edx
jmp case.0x4b3d7d.35
mov dword [esp + 0x70], 0
jmp case.0x4b3d7d.35
mov ax, word [ebp + ecx*4 + 2]
cmp ax, 0x1f40
jge 0x4b3f81
movsx eax, ax
mov dword [esp + 0x80], eax
jmp case.0x4b3d7d.35
mov dword [esp + 0x80], 0x1f40
jmp case.0x4b3d7d.35
mov ax, word [ebp + ecx*4 + 2]
cmp ax, 0x1388
jge 0x4b3fa8
movsx edx, ax
mov dword [esp + 0x50], edx
jmp case.0x4b3d7d.35
mov dword [esp + 0x50], 0x1388
jmp case.0x4b3d7d.35
mov ax, word [ebp + ecx*4 + 2]
cmp ax, 0x1f40
jge 0x4b3fcc
movsx eax, ax
mov dword [esp + 0x64], eax
jmp case.0x4b3d7d.35
mov dword [esp + 0x64], 0x1f40
jmp case.0x4b3d7d.35
mov ax, word [ebp + ecx*4 + 2]
cmp ax, 0x1388
jge 0x4b3ff0
movsx edx, ax
mov dword [esp + 0x7c], edx
jmp case.0x4b3d7d.35
mov dword [esp + 0x7c], 0x1388
jmp case.0x4b3d7d.35
mov ax, word [ebp + ecx*4 + 2]
cmp ax, 0x1f40
jge 0x4b4014
movsx eax, ax
mov dword [esp + 0x48], eax
jmp case.0x4b3d7d.35
mov dword [esp + 0x48], 0x1f40
jmp case.0x4b3d7d.35
mov ax, word [ebp + ecx*4 + 2]
test ax, ax
jle 0x4b4037
movsx edx, ax
mov dword [esp + 0x58], edx
jmp case.0x4b3d7d.35
mov dword [esp + 0x58], 0
jmp case.0x4b3d7d.35
mov ax, word [ebp + ecx*4 + 2]
cmp ax, 0x1f40
jge 0x4b405b
movsx eax, ax
mov dword [esp + 0x60], eax
jmp case.0x4b3d7d.35
mov dword [esp + 0x60], 0x1f40
jmp case.0x4b3d7d.35
movsx edx, word [ebp + ecx*4 + 2]
mov eax, edx
sar edx, 8
and eax, 0x7f
and edx, 0x7f
cmp eax, edx
jg case.0x4b3d7d.35
mov edx, dword [esp + 0x4c]
inc eax
mov esi, dword [edx]
mov dl, byte [esi + 0x148]
mov byte [esi + eax + 0x29], dl
mov dx, word [ebp + ecx*4 + 2]
sar edx, 8
and edx, 0x7f
cmp eax, edx
jle 0x4b4080
jmp case.0x4b3d7d.35
movsx eax, word [ebp + ecx*4 + 2]
mov edx, dword [esp + 0x178]
shl eax, 0xf
add edx, eax
mov dword [esp + 0x178], edx
jmp case.0x4b3d7d.35
mov ax, word [ebp + ecx*4 + 2]
test ax, ax
jle 0x4b40d8
movsx edx, ax
mov dword [esp + 0x38], edx
jmp case.0x4b3d7d.35
mov dword [esp + 0x38], 0
jmp case.0x4b3d7d.35
movsx eax, word [ebp + ecx*4 + 2]
mov edx, dword [esp + 0x17c]
shl eax, 0xf
add edx, eax
mov dword [esp + 0x17c], edx
jmp case.0x4b3d7d.35
movsx edx, word [ebp + ecx*4 + 2]
mov dword [esp + 0x10], edx
fild dword [esp + 0x10]
fsubr dword [esp + 0x1c]
jmp 0x4b497a
movsx eax, word [ebp + ecx*4 + 2]
fld dword [esp + 0x1c]
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fmul qword [0x4c7db0]
fsubp st(1)
jmp 0x4b497a
mov edx, dword [esp + 0x3c]
mov dword [esp + 0xf8], 0
movsx eax, word [edx + ecx*4 + 2]
lea ebx, [edx + ecx*4 + 2]
mov edx, dword [esp + 0xb4]
lea ecx, [eax + eax*2]
shl ecx, 3
sub ecx, eax
test byte [edx + ecx*2 + 0x2d], 0x80
lea ebp, [edx + ecx*2]
jne 0x4b490b
mov eax, dword [esp + 0x38]
mov ecx, 5
mov esi, ebp
lea edi, [esp + 0x14c]
test eax, eax
rep movsd dword es:[edi], dword [esi]
jle 0x4b41b3
fld qword [0x4c7db8]
fild dword [esp + 0x38]
fmul qword [0x4c7dc0]
fmul qword [0x4c7dc8]
call fcn.004b9e20
fmul qword [0x4c7dd0]
call fcn.004b78c0
mov word [esp + 0x16e], ax
jmp 0x4b41bd
mov word [esp + 0x16e], 0x7fff
mov ecx, dword [esp + 0xa8]
mov eax, 0x10624dd3
shl ecx, 0xe
imul ecx
sar edx, 5
mov eax, edx
mov esi, dword [esp + 0x174]
shr eax, 0x1f
mov edi, dword [esp + 0x178]
or byte [esp + 0x170], 4
lea ecx, [edx + eax + 0x4000]
mov eax, dword [ebp + 0x14]
mov edx, dword [ebp + 0x18]
mov word [esp + 0x16c], cx
mov ecx, dword [ebp + 0x1c]
sub edx, eax
add esi, edx
mov edx, dword [ebp + 0x20]
sub ecx, eax
mov dword [esp + 0x174], esi
add edi, ecx
mov ecx, dword [esp + 0x17c]
sub edx, eax
mov eax, dword [esp + 0x120]
xor esi, esi
add ecx, edx
cmp eax, esi
mov dword [esp + 0x178], edi
movsx eax, byte [ebp + 0x29]
mov dword [esp + 0x17c], ecx
je 0x4b42a3
fld dword [esp + 0x1c]
fld qword [0x4c7dd8]
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fmul qword [0x4c7db0]
fsubp st(2)
fxch st(1)
fsubr qword [0x4c7de0]
fmul qword [0x4c7de8]
call fcn.004b9e20
mov ecx, dword [ebp + 0x24]
mov edx, dword [esp + 0x180]
mov dword [esp + 0x19c], esi
mov dword [esp + 0x198], ecx
fild qword [esp + 0x198]
mov dword [esp + 0x1a8], edx
mov dword [esp + 0x1ac], esi
fild qword [esp + 0x1a8]
jmp 0x4b4315
fld qword [0x4c7dd8]
xor ecx, ecx
mov dword [esp + 0x10], eax
mov cl, byte [ebp + 0x28]
fild dword [esp + 0x10]
mov dword [esp + 0x10], ecx
fild dword [esp + 0x10]
fxch st(1)
fmul qword [0x4c7db0]
fxch st(1)
fadd dword [esp + 0x1c]
fxch st(1)
fsubp st(1)
fsubr qword [0x4c7de0]
fmul qword [0x4c7de8]
call fcn.004b9e20
mov edx, dword [ebp + 0x24]
mov eax, dword [esp + 0x180]
mov dword [esp + 0x1a4], esi
mov dword [esp + 0x1a0], edx
fild qword [esp + 0x1a0]
mov dword [esp + 0x190], eax
mov dword [esp + 0x194], esi
fild qword [esp + 0x190]
fxch st(1)
fmulp st(2)
faddp st(1)
call fcn.004b78c0
mov ebp, dword [esp + 0x174]
mov esi, dword [esp + 0x188]
mov dword [esp + 0x180], eax
lea ecx, [ebp + ebp + 0x40]
push ecx
call dword [0x4d7e3c]
mov edx, eax
lea ecx, [ebp + ebp]
movsx eax, word [ebx]
fld qword [0x4c7dd8]
fild dword [esp + 0xd4]
add esp, 4
mov dword [esp + 0x188], edx
lea edi, [eax + eax*2]
shl edi, 3
sub edi, eax
mov eax, dword [esp + 0xb4]
fmul qword [0x4c7df0]
mov eax, dword [eax + edi*2 + 0x14]
mov edi, edx
add eax, esi
mov esi, dword [esp + 0xbc]
lea esi, [esi + eax*2]
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 0x10
lea edi, [edx + ebp*2]
rep stosd dword es:[edi], eax
call fcn.004b9e20
fmul qword [0x4c7df8]
call fcn.004b78c0
mov esi, dword [esp + 0x184]
mov ecx, dword [esp + 0x88]
shl ecx, 8
mov word [esi + 1], ax
mov eax, 0x51eb851f
imul ecx
fld qword [0x4c7dd8]
fild dword [esp + 0xb0]
fmul qword [0x4c7df0]
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov word [esi + 3], dx
call fcn.004b9e20
fmul qword [0x4c7e00]
fmul qword [0x4c7e08]
call fcn.004b78c0
fld qword [0x4c7dd8]
fild dword [esp + 0x8c]
mov word [esi + 5], ax
fmul qword [0x4c7df0]
call fcn.004b9e20
fmul qword [0x4c7df8]
call fcn.004b78c0
fld qword [0x4c7db8]
fild dword [esp + 0x20]
mov word [esi + 8], ax
fmul qword [0x4c7e10]
call fcn.004b9e20
fsub qword [0x4c7e18]
fmul qword [0x4c7dd0]
call fcn.004b78c0
fld qword [0x4c7dd8]
fild dword [esp + 0x94]
mov word [esi + 0xa], ax
fmul qword [0x4c7df0]
call fcn.004b9e20
fmul qword [0x4c7e00]
fmul qword [0x4c7e08]
call fcn.004b78c0
mov edx, dword [esp + 0x50]
mov word [esi + 0xc], ax
mov eax, dword [esp + 0xa0]
mov byte [esi + 0xe], 3
add eax, edx
mov byte [esi + 0x10], 4
cmp eax, 0x1388
mov byte [esi + 0x11], 4
mov dword [esp + 0x10], eax
jge 0x4b44d5
fld qword [0x4c7dd8]
fild dword [esp + 0x10]
fmul qword [0x4c7df0]
call fcn.004b9e20
fmul qword [0x4c7df8]
call fcn.004b78c0
mov word [esi + 0x18], ax
mov ebx, 0x4650
jmp 0x4b44de
mov ebx, 0x4650
mov word [esi + 0x18], bx
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0xc8]
lea eax, [ecx + edx]
cmp eax, 0x1f40
mov dword [esp + 0x10], eax
jge 0x4b451d
fld qword [0x4c7dd8]
fild dword [esp + 0x10]
fmul qword [0x4c7df0]
call fcn.004b9e20
fmul qword [0x4c7df8]
call fcn.004b78c0
mov word [esi + 0x1c], ax
jmp 0x4b4523
mov word [esi + 0x1c], 0x8e70
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x9c]
add eax, ecx
cmp eax, 0x1388
mov dword [esp + 0x10], eax
jge 0x4b4561
fld qword [0x4c7dd8]
fild dword [esp + 0x10]
fmul qword [0x4c7df0]
call fcn.004b9e20
fmul qword [0x4c7df8]
call fcn.004b78c0
mov word [esi + 0x20], ax
jmp 0x4b4565
mov word [esi + 0x20], bx
mov edx, dword [esp + 0x48]
mov eax, dword [esp + 0xcc]
add eax, edx
cmp eax, 0x1f40
mov dword [esp + 0x10], eax
jge 0x4b45bb
fld qword [0x4c7dd8]
fild dword [esp + 0x10]
fmul qword [0x4c7df0]
call fcn.004b9e20
fld qword [0x4c7db8]
fldln2
fxch st(2)
fmul qword [0x4c7df8]
fxch st(2)
fxch st(1)
fyl2x
fmul qword [0x4c7e20]
fdivp st(1)
call fcn.004b78c0
mov word [esi + 0x24], ax
jmp 0x4b45c1
mov word [esi + 0x24], 0x24b8
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0xd4]
mov edi, 0x7fff
lea eax, [ecx + edx]
mov word [esi + 0x1e], di
test eax, eax
mov word [esi + 0x22], di
jle 0x4b460c
fld qword [0x4c7db8]
neg eax
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fmul qword [0x4c7e10]
call fcn.004b9e20
fmul qword [0x4c7dd0]
call fcn.004b78c0
mov word [esi + 0x26], ax
jmp 0x4b4610
mov word [esi + 0x26], di
movsx ecx, word [esi + 0x26]
mov eax, edi
xor edx, edx
mov dx, word [esi + 0x24]
sub eax, ecx
imul eax, edx
cdq
and edx, edi
mov ecx, dword [esp + 0x60]
add eax, edx
mov edx, dword [esp + 0xdc]
sar eax, 0xf
mov word [esi + 0x24], ax
mov ax, word [esi + 0x18]
add word [esi + 0x1c], ax
mov ax, word [esi + 0x1c]
add word [esi + 0x20], ax
mov ax, word [esi + 0x20]
add word [esi + 0x24], ax
lea eax, [ecx + edx]
cmp eax, 0xffffe2b4
mov dword [esp + 0x10], eax
jle 0x4b46a2
fld qword [0x4c7dd8]
fild dword [esp + 0x10]
fmul qword [0x4c7df0]
call fcn.004b9e20
fld qword [0x4c7db8]
fldln2
fxch st(2)
fmul qword [0x4c7df8]
fxch st(2)
fxch st(1)
fyl2x
fmul qword [0x4c7e20]
fdivp st(1)
fdivr qword [0x4c7dd0]
call fcn.004b78c0
mov word [esi + 0x3c], ax
jmp 0x4b46a6
mov word [esi + 0x3c], di
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x90]
add eax, ecx
mov byte [esi + 0x3e], 3
mov byte [esi + 0x40], 4
cmp eax, 0x1388
mov byte [esi + 0x41], 4
mov dword [esp + 0x10], eax
jge 0x4b46f0
fld qword [0x4c7dd8]
fild dword [esp + 0x10]
fmul qword [0x4c7df0]
call fcn.004b9e20
fmul qword [0x4c7df8]
call fcn.004b78c0
mov word [esi + 0x48], ax
jmp 0x4b46f4
mov word [esi + 0x48], bx
mov edx, dword [esp + 0x6c]
mov eax, dword [esp + 0xc4]
add eax, edx
cmp eax, 0x1f40
mov dword [esp + 0x10], eax
jge 0x4b4732
fld qword [0x4c7dd8]
fild dword [esp + 0x10]
fmul qword [0x4c7df0]
call fcn.004b9e20
fmul qword [0x4c7df8]
call fcn.004b78c0
mov word [esi + 0x4c], ax
jmp 0x4b4738
mov word [esi + 0x4c], 0x8e70
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0xb8]
lea eax, [ecx + edx]
cmp eax, 0x1388
mov dword [esp + 0x10], eax
jge 0x4b477a
fld qword [0x4c7dd8]
fild dword [esp + 0x10]
fmul qword [0x4c7df0]
call fcn.004b9e20
fmul qword [0x4c7df8]
call fcn.004b78c0
mov word [esi + 0x50], ax
jmp 0x4b477e
mov word [esi + 0x50], bx
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x98]
add eax, ecx
cmp eax, 0x1f40
mov dword [esp + 0x10], eax
jge 0x4b47d4
fld qword [0x4c7dd8]
fild dword [esp + 0x10]
fmul qword [0x4c7df0]
call fcn.004b9e20
fld qword [0x4c7db8]
fldln2
fxch st(2)
fmul qword [0x4c7df8]
fxch st(2)
fxch st(1)
fyl2x
fmul qword [0x4c7e20]
fdivp st(1)
call fcn.004b78c0
mov word [esi + 0x54], ax
jmp 0x4b47da
mov word [esi + 0x54], 0x24b8
fld dword [esp + 0x2c]
call fcn.004b78c0
mov edx, dword [esp + 0x70]
mov ecx, dword [esp + 0xd8]
add ecx, edx
mov word [esi + 0x4e], ax
test ecx, ecx
mov word [esi + 0x52], ax
jle 0x4b4820
fld qword [0x4c7db8]
neg ecx
mov dword [esp + 0x10], ecx
fild dword [esp + 0x10]
fmul qword [0x4c7e10]
call fcn.004b9e20
fmul dword [esp + 0x2c]
call fcn.004b78c0
movsx edx, ax
mov word [esi + 0x56], ax
mov eax, edi
xor ecx, ecx
sub eax, edx
mov cx, word [esi + 0x54]
imul eax, ecx
cdq
and edx, edi
mov ecx, dword [esp + 0xc0]
add eax, edx
sar eax, 0xf
mov word [esi + 0x54], ax
mov dx, word [esi + 0x48]
add word [esi + 0x4c], dx
mov ax, word [esi + 0x4c]
add word [esi + 0x50], ax
mov ax, word [esi + 0x50]
add word [esi + 0x54], ax
mov eax, dword [esp + 0x80]
add eax, ecx
cmp eax, 0xffffe2b4
mov dword [esp + 0x10], eax
jle 0x4b48b7
fld qword [0x4c7dd8]
fild dword [esp + 0x10]
fmul qword [0x4c7df0]
call fcn.004b9e20
fld qword [0x4c7db8]
fldln2
fxch st(2)
fmul qword [0x4c7df8]
fxch st(2)
fxch st(1)
fyl2x
fmul qword [0x4c7e20]
fdivp st(1)
fdivr qword [0x4c7dd0]
call fcn.004b78c0
mov word [esi + 0x6c], ax
jmp 0x4b48bb
mov word [esi + 0x6c], di
mov ebx, dword [esp + 0x4c]
xor eax, eax
mov ecx, dword [ebx]
mov ax, word [ecx + 0x148]
lea edx, [eax + eax*8]
lea eax, [edx*8 + 0x192]
push eax
push ecx
call dword [0x4d7e40]
xor ecx, ecx
mov dword [ebx], eax
mov cx, word [eax + 0x148]
lea esi, [esp + 0x14c]
add esp, 8
lea ecx, [ecx + ecx*8]
lea edi, [eax + ecx*8 + 0x14a]
mov ecx, 0x12
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebx]
inc word [eax + 0x148]
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x68]
mov ebp, dword [esp + 0x3c]
xor ecx, ecx
mov cx, word [edx + eax*4 + 4]
mov ebx, eax
jmp case.0x4b3d7d.35
cmp word [ebp + ecx*4 + 2], 2
jne 0x4b4931
mov word [ebp + ecx*4 + 2], 0
mov ax, word [ebp + ecx*4 + 2]
mov si, word [esp + 0x170]
mov dl, al
and edx, 1
not al
shl edx, 3
and eax, 2
or si, dx
shl eax, 6
or si, ax
mov word [esp + 0x170], si
jmp case.0x4b3d7d.35
movsx eax, word [ebp + ecx*4 + 2]
mov dword [esp + 0x10], eax
mov dword [esp + 0x120], 1
fild dword [esp + 0x10]
fadd dword [esp + 0x1c]
fstp dword [esp + 0x1c]
mov eax, dword [esp + 0x44]
xor edx, edx
inc ecx
mov dx, word [eax + ebx*4 + 4]
cmp ecx, edx
jl 0x4b3d65
mov eax, dword [esp + 0xf8]
test eax, eax
je 0x4b4a92
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0xa8]
mov eax, dword [esp + 0xd0]
mov dword [esp + 0x124], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 0x12c], edx
mov edx, dword [esp + 0x88]
mov dword [esp + 0x134], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x130], ecx
mov ecx, dword [esp + 0x94]
mov dword [esp + 0xec], edx
mov edx, dword [esp + 0x20]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0xf4], ecx
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x108], edx
mov edx, dword [esp + 0x64]
mov dword [esp + 0xfc], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x10c], ecx
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x104], edx
mov edx, dword [esp + 0x84]
mov dword [esp + 0x114], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x11c], ecx
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x110], edx
mov edx, dword [esp + 0x58]
mov dword [esp + 0x128], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0x118], ecx
mov ecx, dword [esp + 0x60]
mov dword [esp + 0xe4], edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0xe8], eax
mov dword [esp + 0xf0], ecx
mov dword [esp + 0x74], edx
mov eax, dword [esp + 0x30]
inc ebx
mov dword [esp + 0x68], ebx
movsx eax, word [eax]
lea ecx, [eax + eax*4]
lea edx, [eax + ecx*2]
mov ecx, dword [esp + 0x54]
xor eax, eax
mov ax, word [ecx + edx*2 + 0x2a]
cmp ebx, eax
jl 0x4b3bed
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0xac]
mov ebp, dword [esp + 0xa4]
xor eax, eax
mov ax, word [edx + ecx*4 + 4]
mov edi, 0xffffd120
mov dword [esp + 0x20], eax
xor edx, edx
jmp case.0x4b3938.41
movsx ecx, word [eax + ebp + 2]
lea esi, [eax + ebp + 2]
mov eax, ecx
sar ecx, 8
and eax, 0x7f
and ecx, 0x7f
cmp eax, ecx
jg case.0x4b3938.41
mov ecx, dword [esp + 0x4c]
inc eax
mov ecx, dword [ecx]
mov bl, byte [ecx + 0x148]
mov byte [ecx + eax + 0x29], bl
mov cx, word [esi]
sar ecx, 8
and ecx, 0x7f
cmp eax, ecx
jle 0x4b4af5
jmp case.0x4b3938.41
movsx eax, word [eax + ebp + 2]
mov dword [esp + 0x30], eax
fild dword [esp + 0x30]
fsubr dword [esp + 0x34]
jmp 0x4b4b41
movsx ecx, word [eax + ebp + 2]
fld dword [esp + 0x34]
mov dword [esp + 0x30], ecx
fild dword [esp + 0x30]
fmul qword [0x4c7db0]
fsubp st(1)
fstp dword [esp + 0x34]
mov ebx, dword [esp + 0x28]
mov ecx, dword [esp + 0xac]
mov eax, dword [esp + 0x20]
xor esi, esi
mov si, word [ebx + ecx*4 + 4]
inc eax
cmp eax, esi
mov dword [esp + 0x20], eax
jl 0x4b3914
mov esi, dword [esp + 0x24]
xor eax, eax
inc ecx
mov ax, word [esi + 0x3e]
mov dword [esp + 0xac], ecx
cmp ecx, eax
jl 0x4b38f7
mov eax, dword [esp + 0x100]
mov edi, 0x4e0a10
inc eax
mov dword [esp + 0x100], eax
lea ecx, [eax + eax*8]
lea edx, [eax + ecx*2]
mov eax, dword [esp + 0x40]
mov ecx, 3
lea esi, [eax + edx*2]
xor edx, edx
mov dword [esp + 0x24], esi
repe cmpsb byte [esi], byte es:[edi]
jne 0x4b37c6
mov eax, dword [esp + 0xb4]
push eax
call dword [0x4d7e44]
mov ecx, dword [esp + 0x40]
add esp, 4
push ecx
call dword [0x4d7e44]
add esp, 4
push ebp
call dword [0x4d7e44]
mov edx, dword [esp + 0x48]
add esp, 4
push edx
call dword [0x4d7e44]
mov eax, dword [esp + 0x2c]
add esp, 4
push eax
call dword [0x4d7e44]
mov ecx, dword [esp + 0x44]
add esp, 4
push ecx
call dword [0x4d7e44]
mov edx, dword [esp + 0x58]
add esp, 4
push edx
call dword [0x4d7e44]
mov eax, dword [esp + 0xc0]
add esp, 4
push eax
call dword [0x4d7e44]
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1a0
ret