Function at 0x48fc40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x3d4]
cmp eax, dword [ecx + 8]
jbe 0x492a17
sub esp, 0x454
lea edi, [esp + 0x470]
xor eax, eax
call fcn.00456d5b
mov ecx, dword [esp + 0x45c]
mov edx, dword [esp + 0x458]
xor ebx, ebx
xor ebp, ebp
mov esi, 0xffffffff
xor edi, edi
mov ecx, 0xffffffff
mov dword [esp + 0x94], ecx
mov ecx, 0xffffffff
mov dword [esp + 0xe8], ecx
xor ecx, ecx
mov dword [esp + 0xac], ecx
xor ecx, ecx
mov byte [esp + 0x37], cl
xor edx, edx
mov byte [esp + 0x36], dl
mov edx, 0xffffffff
mov dword [esp + 0x90], edx
xor edx, edx
mov dword [esp + 0x80], edx
xor edx, edx
mov dword [esp + 0xe0], edx
xor edx, edx
mov dword [esp + 0x3ec], edx
xor ebx, ebx
mov dword [esp + 0xd0], ebx
xor ebx, ebx
mov dword [esp + 0x98], ebx
xor ebx, ebx
mov dword [esp + 0x404], ebx
mov ebx, dword [esp + 0x464]
mov dword [esp + 0xfc], ebx
mov ebx, dword [esp + 0x460]
mov dword [esp + 0x414], ebx
mov ecx, dword [esp + 0x45c]
mov edx, dword [esp + 0x458]
xor ebx, ebx
jmp 0x48fd74
mov edx, dword [esp + 0x40c]
mov ebx, dword [esp + 0x88]
mov ebp, dword [esp + 0x84]
mov esi, dword [esp + 0xc4]
mov edi, dword [esp + 0x3e4]
mov dword [esp + 0x3ec], ecx
mov edx, dword [esp + 0x9c]
mov dword [esp + 0xfc], edx
mov dword [esp + 0x414], eax
mov ecx, dword [esp + 0xdc]
mov edx, dword [esp + 0x40c]
mov dword [esp + 0xf8], ecx
mov dword [esp + 0x410], edx
mov dword [esp + 0x84], ebp
mov dword [esp + 0x3e4], edi
mov dword [esp + 0x88], ebx
mov dword [esp + 0xc4], esi
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.0048b2b0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0xf8]
mov esi, ebp
sub ebp, ebx
mov edi, dword [esp + 0x14]
cmp esi, ebp
jb 0x492a0d
cmp edx, ebp
ja 0x492a04
mov dword [esp + 0x8c], eax
mov dword [esp + 0xf8], ebp
mov dword [esp + 0x3f8], ecx
mov dword [esp + 0xbc], edx
mov dword [esp + 0xdc], ebx
mov dword [esp + 0x40c], edi
mov eax, dword [esp + 0x414]
mov dword [esp], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 4], eax
call fcn.0048f990
mov eax, dword [esp + 0xf8]
mov ecx, dword [esp + 0xbc]
sub eax, ecx
mov edx, eax
neg eax
sar eax, 0x1f
and eax, ecx
mov ebx, dword [esp + 0x410]
add eax, ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x414], ebx
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov dword [esp + 0xa0], esi
test ebp, ebp
jne 0x4920fc
mov edi, dword [esp + 0x8c]
test edi, edi
je 0x490f09
mov dword [esp + 0xfc], edx
mov dword [esp + 0x400], eax
mov ecx, edi
and edi, 0xffff
cmp edi, 0x106
jg 0x490769
cmp edi, 0x23
jg 0x4904cd
cmp edi, 0x21
jg 0x4903a0
cmp edi, 0x17
jne 0x48ffcc
mov dword [esp + 0xb8], ebp
cmp esi, 3
jl 0x48ff03
cmp word [ebx], 0x5455
jne 0x48ff03
cmp byte [ebx + 2], 0x43
jne 0x48ff03
mov ecx, dword [0x70667c]
mov edi, eax
lea eax, [esi - 3]
mov dword [esp + 0xf8], eax
neg eax
sar eax, 0x1f
and eax, 3
add eax, ebx
mov dword [esp + 0x100], eax
mov eax, dword [esp + 0xf8]
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0x100]
jmp 0x490eed
mov dword [esp], ebx
mov dword [esp + 4], esi
call fcn.00492a30
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 8]
test al, al
je 0x48ff95
mov edx, dword [esp + 0xa0]
cmp ecx, edx
ja 0x4929ff
mov esi, edx
sub esi, ecx
mov eax, esi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, ecx
mov edi, dword [esp + 0x414]
lea ebx, [esi + edi]
mov edx, dword [esp + 0xfc]
mov esi, dword [esp + 0xa0]
mov edi, dword [esp + 0x400]
mov ebp, dword [esp + 0xb8]
mov dword [esp + 0x84], ecx
mov ebp, dword [esp + 0x414]
mov dword [esp + 0x3e4], ebp
mov dword [esp + 0x9c], eax
mov eax, ebx
mov ebx, ebp
mov ecx, dword [esp + 0x3ec]
mov ebp, dword [esp + 0xb8]
jmp 0x490eed
mov ebp, dword [0x707078]
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x414]
mov esi, dword [esp + 0xa0]
mov edi, dword [esp + 0x400]
mov ecx, dword [esp + 0x3ec]
mov dword [esp + 0x9c], esi
mov eax, ebx
jmp 0x490eed
cmp edi, 0x18
jl 0x490bc1
cmp ecx, 0x18
je 0x48ffe4
cmp ecx, 0x1a
je 0x48ffe4
cmp ecx, 0x1b
jne 0x490024
cmp esi, 1
jl 0x49001f
cmp byte [ebx], 0x5a
jne 0x49001f
lea eax, [esi - 1]
mov edi, eax
neg eax
sar eax, 0x1f
and eax, 1
add eax, ebx
mov edx, dword [0x70667c]
mov ecx, edx
mov dword [esp + 0x9c], edi
mov edx, dword [esp + 0xfc]
mov edi, dword [esp + 0x400]
jmp 0x490eed
cmp ecx, 0x1b
je 0x490029
cmp ecx, 0x20
jne 0x4900a5
cmp esi, 6
jge 0x49004b
mov ebp, dword [0x707078]
mov edi, eax
mov ecx, dword [esp + 0x3ec]
mov dword [esp + 0x9c], esi
mov eax, ebx
jmp 0x490eed
cmp byte [ebx + 3], 0x3a
je 0x49006e
mov ebp, dword [0x707078]
mov edi, eax
mov ecx, dword [esp + 0x3ec]
mov dword [esp + 0x9c], esi
mov eax, ebx
jmp 0x490eed
lea ecx, [ebx + 1]
lea ebp, [ebx + 4]
lea edi, [esi - 6]
mov dword [esp + 0xf8], edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edi, 6
add edi, ebx
mov dword [esp + 0x128], eax
lea eax, [0x76974e]
mov dword [esp + 0x408], eax
jmp 0x490288
cmp ecx, 0x1f
je 0x4900af
cmp ecx, 0x1a
jne 0x490114
cmp esi, 3
jge 0x4900d1
mov ebp, dword [0x707078]
mov edi, eax
mov ecx, dword [esp + 0x3ec]
mov dword [esp + 0x9c], esi
mov eax, ebx
jmp 0x490eed
lea ecx, [ebx + 1]
lea ebp, [esi - 3]
mov edi, ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, 3
add ebp, ebx
mov dword [esp + 0x130], eax
lea eax, [0x76974e]
mov dword [esp + 0x408], eax
lea eax, [0x76974e]
mov dword [esp + 0x3e0], eax
mov eax, dword [esp + 0x130]
jmp 0x490278
cmp ecx, 0x1c
je 0x490122
cmp ecx, 0x21
jne 0x4901a6
cmp esi, 9
jge 0x490144
mov ebp, dword [0x707078]
mov edi, eax
mov ecx, dword [esp + 0x3ec]
mov dword [esp + 0x9c], esi
mov eax, ebx
jmp 0x490eed
cmp byte [ebx + 3], 0x3a
jne 0x490150
cmp byte [ebx + 6], 0x3a
je 0x49016d
mov ebp, dword [0x707078]
mov edi, eax
mov ecx, dword [esp + 0x3ec]
mov dword [esp + 0x9c], esi
mov eax, ebx
jmp 0x490eed
lea ecx, [ebx + 1]
lea ebp, [ebx + 4]
lea edi, [ebx + 7]
lea eax, [esi - 9]
mov dword [esp + 0xf8], eax
neg eax
sar eax, 0x1f
and eax, 9
add eax, ebx
mov dword [esp + 0x408], edi
mov edx, eax
mov eax, dword [esp + 0x400]
mov edi, dword [esp + 0xfc]
jmp 0x490261
cmp ecx, 0x19
je 0x4901b0
cmp ecx, 0x1e
jne 0x490208
cmp esi, 7
jge 0x4901d2
mov ebp, dword [0x707078]
mov edi, eax
mov ecx, dword [esp + 0x3ec]
mov dword [esp + 0x9c], esi
mov eax, ebx
jmp 0x490eed
lea ecx, [ebx + 1]
lea ebp, [ebx + 3]
lea edi, [ebx + 5]
lea eax, [esi - 7]
mov dword [esp + 0xf8], eax
neg eax
sar eax, 0x1f
and eax, 7
add eax, ebx
mov edx, eax
mov dword [esp + 0x408], edi
mov eax, dword [esp + 0x400]
mov edi, dword [esp + 0xfc]
jmp 0x490261
cmp esi, 5
jge 0x49022a
mov ebp, dword [0x707078]
mov edi, eax
mov ecx, dword [esp + 0x3ec]
mov dword [esp + 0x9c], esi
mov eax, ebx
jmp 0x490eed
lea ecx, [ebx + 1]
lea ebp, [ebx + 3]
mov edi, edx
lea edx, [esi - 5]
mov dword [esp + 0xf8], edx
neg edx
sar edx, 0x1f
and edx, 5
add edx, ebx
mov dword [esp + 0x138], eax
lea eax, [0x76974e]
mov dword [esp + 0x408], eax
mov eax, dword [esp + 0x138]
mov edi, dword [esp + 0xf8]
mov dword [esp + 0x3e0], ebp
mov ebp, edx
mov edx, dword [esp + 0xfc]
mov dword [esp + 0xf8], edi
mov edi, ebp
mov ebp, dword [esp + 0x3e0]
mov dword [esp + 0x3e0], ebp
mov dword [esp + 0x410], edi
mov dword [esp], ecx
mov dword [esp + 4], 2
mov byte [esp + 8], 1
call fcn.0048f880
mov eax, dword [esp + 0xc]
mov dword [esp + 0xd4], eax
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x4902c2
xor edx, edx
jmp 0x4902ef
mov eax, dword [esp + 0x3e0]
mov dword [esp], eax
mov dword [esp + 4], 2
mov byte [esp + 8], 1
call fcn.0048f880
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, eax
mov eax, dword [esp + 0xd4]
test ecx, ecx
je 0x4902f7
xor ebx, ebx
jmp 0x490332
mov dword [esp + 0xc8], edx
mov eax, dword [esp + 0x408]
mov dword [esp], eax
mov dword [esp + 4], 2
mov byte [esp + 8], 1
call fcn.0048f880
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0xc8]
mov ebx, eax
mov eax, dword [esp + 0xd4]
imul eax, eax, 0x3c
add eax, edx
imul eax, eax, 0x3c
add eax, ebx
mov edx, dword [esp + 0x414]
movzx ebx, byte [edx]
cmp bl, 0x2b
je 0x49035a
cmp bl, 0x2d
jne 0x490354
neg eax
jmp 0x49035a
mov ecx, dword [0x707078]
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x414]
mov esi, dword [esp + 0xa0]
mov edi, dword [esp + 0x400]
mov ebp, ecx
mov dword [esp + 0xe8], eax
mov ecx, dword [esp + 0xf8]
mov dword [esp + 0x9c], ecx
mov eax, dword [esp + 0x410]
mov ecx, dword [esp + 0x3ec]
jmp 0x490eed
cmp edi, 0x22
jne 0x490487
sar ecx, 0x10
and ecx, 0xfff
lea ebp, [ecx + 1]
nop
cmp esi, ebp
jge 0x4903d7
mov ebp, dword [0x707078]
mov edi, eax
mov ecx, dword [esp + 0x3ec]
mov dword [esp + 0x9c], esi
mov eax, ebx
jmp 0x490eed
mov dword [esp + 0x78], ecx
mov dword [esp + 0xcc], ebp
lea eax, [0x7c9f70]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebp
call fcn.0049a820
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0xa0]
mov esi, dword [esp + 0xcc]
cmp ebp, esi
jb 0x4929f6
mov edi, dword [esp + 0x78]
sub ebp, edi
dec ebp
mov edi, ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and esi, ebp
mov ebp, dword [esp + 0x414]
add esi, ebp
mov ebp, eax
mov dword [esp + 0x9c], edi
mov eax, esi
mov dword [esp + 0xd0], ebx
mov dword [esp + 0x404], edx
mov dword [esp + 0xac], ecx
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x414]
mov esi, dword [esp + 0xa0]
mov edi, dword [esp + 0x400]
mov ecx, dword [esp + 0x3ec]
jmp 0x490eed
cmp esi, 2
jl 0x4904b6
movzx edi, byte [ebx]
xchg edi, eax
cmp al, 0x2e
xchg edi, eax
je 0x49049d
xchg edi, eax
cmp al, 0x2c
xchg edi, eax
jne 0x4904b6
movzx edi, byte [ebx + 1]
xchg edi, eax
cmp al, 0x30
xchg edi, eax
jb 0x4904b6
xchg edi, eax
cmp al, 0x39
xchg edi, eax
ja 0x4904b6
xor ecx, ecx
jmp 0x492912
mov edi, eax
mov ecx, dword [esp + 0x3ec]
mov dword [esp + 0x9c], esi
mov eax, ebx
jmp 0x490eed
cmp edi, 0x102
jg 0x4905d3
cmp edi, 0x101
je 0x490560
cmp edi, 0x102
jne 0x490bc1
mov eax, dword [0x707c58]
mov ecx, dword [0x707c5c]
mov edx, dword [0x707c60]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
call fcn.0048c090
mov eax, dword [esp + 0x14]
inc eax
mov ebp, dword [esp + 0x20]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0xfc]
mov edi, dword [esp + 0x400]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x3ec]
mov dword [esp + 0x9c], esi
mov eax, ebx
mov ebx, dword [esp + 0x414]
mov esi, dword [esp + 0xa0]
jmp 0x490eed
mov eax, dword [0x707c48]
mov ecx, dword [0x707c4c]
mov edx, dword [0x707c50]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
call fcn.0048c090
mov eax, dword [esp + 0x14]
inc eax
mov ebp, dword [esp + 0x20]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0xfc]
mov edi, dword [esp + 0x400]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x3ec]
mov dword [esp + 0x9c], esi
mov eax, ebx
mov ebx, dword [esp + 0x414]
mov esi, dword [esp + 0xa0]
jmp 0x490eed
cmp edi, 0x104
jle 0x4906c1
cmp edi, 0x105
je 0x49065a
cmp edi, 0x106
jne 0x490bc1
mov eax, dword [0x707c68]
mov ecx, dword [0x707c6c]
mov edx, dword [0x707c70]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
call fcn.0048c090
mov ebp, dword [esp + 0x20]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0xfc]
mov edi, dword [esp + 0x400]
mov ecx, dword [esp + 0x3ec]
mov dword [esp + 0x9c], esi
mov eax, ebx
mov ebx, dword [esp + 0x414]
mov esi, dword [esp + 0xa0]
jmp 0x490eed
mov eax, dword [0x707c38]
mov ecx, dword [0x707c3c]
mov edx, dword [0x707c40]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
call fcn.0048c090
mov ebp, dword [esp + 0x20]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0xfc]
mov edi, dword [esp + 0x400]
mov ecx, dword [esp + 0x3ec]
mov dword [esp + 0x9c], esi
mov eax, ebx
mov ebx, dword [esp + 0x414]
mov esi, dword [esp + 0xa0]
jmp 0x490eed
cmp ecx, 0x104
sete al
mov dword [esp], ebx
mov dword [esp + 4], esi
mov byte [esp + 8], al
call fcn.0048f880
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
test ecx, ecx
je 0x4906fe
mov ebp, dword [esp + 0xd0]
mov esi, dword [esp + 0x404]
jmp 0x490721
lea ebp, [eax - 1]
cmp ebp, 0xb
jbe 0x490713
mov ebp, 5
lea esi, [0x769cba]
jmp 0x490721
mov ebp, dword [esp + 0xd0]
mov esi, dword [esp + 0x404]
mov edi, dword [esp + 0x400]
mov dword [esp + 0x90], eax
mov dword [esp + 0x9c], ebx
mov eax, edx
mov dword [esp + 0xd0], ebp
mov dword [esp + 0x404], esi
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x414]
mov esi, dword [esp + 0xa0]
mov ebp, ecx
mov ecx, dword [esp + 0x3ec]
jmp 0x490eed
cmp edi, 0x20c
jg 0x490a6b
cmp edi, 0x10b
jg 0x490834
cmp edi, 0x109
jle 0x49079d
mov ebp, esi
mov edi, ebx
xor ebx, ebx
mov dword [esp + 0xa8], ebx
mov ebx, edi
jmp 0x492802
cmp ecx, 0x108
jne 0x4907cf
test esi, esi
je 0x4907c9
cmp byte [ebx], 0x20
jne 0x4907c3
lea ebp, [esi - 1]
mov edi, ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, 1
add ebp, ebx
jmp 0x4907d3
mov edi, esi
mov ebp, ebx
jmp 0x4907d3
mov edi, esi
mov ebp, ebx
jmp 0x4907d3
mov edi, esi
mov ebp, ebx
cmp ecx, 0x109
sete al
mov dword [esp], ebp
mov dword [esp + 4], edi
mov byte [esp + 8], al
call fcn.0048f880
mov eax, dword [esp + 0xc]
mov ebp, dword [esp + 0x18]
mov ebx, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0xfc]
mov edi, dword [esp + 0x400]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x3ec]
mov dword [esp + 0x9c], esi
mov eax, ebx
mov ebx, dword [esp + 0x414]
mov esi, dword [esp + 0xa0]
jmp 0x490eed
cmp edi, 0x113
jne 0x4908ec
cmp esi, 4
jl 0x490851
nop
movzx ecx, byte [ebx]
add ecx, 0xffffffd0
cmp cl, 9
jbe 0x49086e
mov ebp, dword [0x707078]
mov edi, eax
mov ecx, dword [esp + 0x3ec]
mov dword [esp + 0x9c], esi
mov eax, ebx
jmp 0x490eed
lea eax, [0x7c9f68]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], 4
call fcn.0049a9b0
mov eax, dword [esp + 0xa0]
lea esi, [eax - 4]
mov ecx, esi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, 4
mov edx, dword [esp + 0x414]
lea ebx, [esi + edx]
mov ebp, dword [esp + 0xc]
mov esi, dword [esp + 0x10]
mov edx, dword [esp + 0xfc]
mov edi, dword [esp + 0x400]
mov dword [esp + 0x88], ebp
mov ebp, esi
mov dword [esp + 0x9c], ecx
mov eax, ebx
mov ebx, dword [esp + 0x414]
mov esi, dword [esp + 0xa0]
mov ecx, dword [esp + 0x3ec]
jmp 0x490eed
cmp edi, 0x114
jne 0x4909d6
cmp esi, 2
jge 0x49091a
mov ebp, dword [0x707078]
mov edi, eax
mov ecx, dword [esp + 0x3ec]
mov dword [esp + 0x9c], esi
mov eax, ebx
jmp 0x490eed
lea eax, [0x7c9f68]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], 2
call fcn.0049a9b0
mov eax, dword [esp + 0xa0]
lea ecx, [eax - 2]
mov edx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 2
mov ebx, dword [esp + 0x414]
add ecx, ebx
mov ebp, dword [esp + 0xc]
mov esi, dword [esp + 0x10]
test esi, esi
je 0x490990
mov edi, dword [esp + 0x400]
mov dword [esp + 0x88], ebp
mov ebp, esi
mov dword [esp + 0x9c], edx
mov eax, ecx
mov edx, dword [esp + 0xfc]
mov esi, dword [esp + 0xa0]
mov ecx, dword [esp + 0x3ec]
jmp 0x490eed
cmp ebp, 0x45
jl 0x49099d
add ebp, 0x76c
jmp 0x4909a3
add ebp, 0x7d0
mov edi, dword [esp + 0x400]
mov dword [esp + 0x88], ebp
mov ebp, esi
mov dword [esp + 0x9c], edx
mov eax, ecx
mov edx, dword [esp + 0xfc]
mov esi, dword [esp + 0xa0]
mov ecx, dword [esp + 0x3ec]
jmp 0x490eed
cmp edi, 0x20c
jne 0x490bc1
mov dword [esp], ebx
mov dword [esp + 4], esi
mov byte [esp + 8], 0
call fcn.0048f880
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
cmp eax, 0x18
jb 0x490a15
mov ebp, 4
lea esi, [0x769ad9]
jmp 0x490a23
mov ebp, dword [esp + 0xd0]
mov esi, dword [esp + 0x404]
mov edi, dword [esp + 0x400]
mov dword [esp + 0xe0], eax
mov dword [esp + 0x9c], ebx
mov eax, edx
mov dword [esp + 0xd0], ebp
mov dword [esp + 0x404], esi
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x414]
mov esi, dword [esp + 0xa0]
mov ebp, ecx
mov ecx, dword [esp + 0x3ec]
jmp 0x490eed
cmp edi, 0x210
jle 0x490dc4
cmp edi, 0x212
jle 0x490bd8
cmp edi, 0x215
jne 0x490b22
cmp esi, 2
jge 0x490ab1
mov ebp, dword [0x707078]
mov edi, eax
mov ecx, dword [esp + 0x3ec]
mov dword [esp + 0x9c], esi
mov eax, ebx
jmp 0x490eed
lea ecx, [esi - 2]
mov edi, ecx
neg ecx
sar ecx, 0x1f
and ecx, 2
add ecx, ebx
cmp word [ebx], 0x4d41
jne 0x490ae0
mov dword [esp + 0x118], eax
mov eax, 1
mov byte [esp + 0x36], al
mov eax, dword [esp + 0x118]
jmp 0x490b06
cmp word [ebx], 0x4d50
jne 0x490b00
mov dword [esp + 0x120], eax
mov eax, 1
mov byte [esp + 0x37], al
mov eax, dword [esp + 0x120]
jmp 0x490b06
mov ebp, dword [0x707078]
mov dword [esp + 0x9c], edi
mov eax, ecx
mov edi, dword [esp + 0x400]
mov ecx, dword [esp + 0x3ec]
jmp 0x490eed
cmp edi, 0x216
jne 0x490bc1
cmp esi, 2
jge 0x490b50
mov ebp, dword [0x707078]
mov edi, eax
mov ecx, dword [esp + 0x3ec]
mov dword [esp + 0x9c], esi
mov eax, ebx
jmp 0x490eed
lea ecx, [esi - 2]
mov edi, ecx
neg ecx
sar ecx, 0x1f
and ecx, 2
add ecx, ebx
cmp word [ebx], 0x6d61
jne 0x490b7f
mov dword [esp + 0x108], eax
mov eax, 1
mov byte [esp + 0x36], al
mov eax, dword [esp + 0x108]
jmp 0x490ba5
cmp word [ebx], 0x6d70
jne 0x490b9f
mov dword [esp + 0x110], eax
mov eax, 1
mov byte [esp + 0x37], al
mov eax, dword [esp + 0x110]
jmp 0x490ba5
mov ebp, dword [0x707078]
mov dword [esp + 0x9c], edi
mov eax, ecx
mov edi, dword [esp + 0x400]
mov ecx, dword [esp + 0x3ec]
jmp 0x490eed
mov edi, eax
mov ecx, dword [esp + 0x3ec]
mov dword [esp + 0x9c], esi
mov eax, ebx
jmp 0x490eed
cmp ecx, 0x212
sete al
mov dword [esp], ebx
mov dword [esp + 4], esi
mov byte [esp + 8], al
call fcn.0048f880
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x18]
test ebx, ebx
je 0x490c3f
mov esi, dword [esp + 0xa0]
mov edi, dword [esp + 0x400]
mov dword [esp + 0x98], eax
mov ebp, ebx
mov dword [esp + 0x9c], ecx
mov eax, edx
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x414]
mov ecx, dword [esp + 0x3ec]
jmp 0x490eed
cmp eax, 0x3c
jb 0x490c97
mov esi, dword [esp + 0xa0]
mov edi, dword [esp + 0x400]
mov dword [esp + 0x98], eax
mov ebp, ebx
mov dword [esp + 0x9c], ecx
mov eax, edx
mov edx, 6
mov dword [esp + 0xd0], edx
lea ebx, [0x769f1b]
mov dword [esp + 0x404], ebx
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x414]
mov ecx, dword [esp + 0x3ec]
jmp 0x490eed
cmp ecx, 2
jl 0x490daa
movzx ebp, byte [edx]
xchg ebp, eax
cmp al, 0x2e
xchg ebp, eax
je 0x490cb5
xchg ebp, eax
cmp al, 0x2c
xchg ebp, eax
jne 0x490d90
movzx ebp, byte [edx + 1]
add ebp, 0xffffffd0
xchg ebp, eax
cmp al, 9
xchg ebp, eax
jbe 0x490cdd
mov ebp, dword [esp + 0xd0]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x404]
jmp 0x4926fc
mov dword [esp + 0xf4], eax
mov dword [esp + 0x3fc], edx
mov dword [esp + 0xf0], ebx
mov dword [esp + 0xc0], ecx
mov eax, dword [esp + 0x40c]
mov dword [esp], eax
mov ecx, dword [esp + 0xdc]
mov dword [esp + 4], ecx
call fcn.0048b2b0
mov eax, dword [esp + 0x10]
and eax, 0xffff
cmp eax, 0x22
je 0x490d26
cmp eax, 0x23
jne 0x490d78
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x414]
mov esi, dword [esp + 0xa0]
mov edi, dword [esp + 0x400]
mov eax, dword [esp + 0xf4]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0x3ec]
mov ebp, dword [esp + 0xf0]
mov eax, dword [esp + 0xc0]
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0x3fc]
jmp 0x490eed
mov edx, dword [esp + 0x3fc]
mov ecx, dword [esp + 0xc0]
mov eax, 2
jmp 0x49274c
mov ebp, dword [esp + 0xd0]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x404]
jmp 0x4926fc
mov ebp, dword [esp + 0xd0]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x404]
jmp 0x4926fc
cmp edi, 0x20e
jg 0x490e61
cmp ecx, 0x20e
sete al
mov dword [esp], ebx
mov dword [esp + 4], esi
mov byte [esp + 8], al
call fcn.0048f880
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
cmp eax, 0xc
jbe 0x490e0b
mov ebp, 4
lea esi, [0x769ad9]
jmp 0x490e19
mov ebp, dword [esp + 0xd0]
mov esi, dword [esp + 0x404]
mov edi, dword [esp + 0x400]
mov dword [esp + 0xe0], eax
mov dword [esp + 0x9c], ebx
mov eax, edx
mov dword [esp + 0xd0], ebp
mov dword [esp + 0x404], esi
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x414]
mov esi, dword [esp + 0xa0]
mov ebp, ecx
mov ecx, dword [esp + 0x3ec]
jmp 0x490eed
cmp ecx, 0x210
sete al
mov dword [esp], ebx
mov dword [esp + 4], esi
mov byte [esp + 8], al
call fcn.0048f880
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
cmp eax, 0x3c
jb 0x490e9c
mov ebp, 6
lea esi, [0x769eeb]
jmp 0x490eaa
mov ebp, dword [esp + 0xd0]
mov esi, dword [esp + 0x404]
mov edi, dword [esp + 0x400]
mov dword [esp + 0x80], eax
mov dword [esp + 0x9c], ebx
mov eax, edx
mov dword [esp + 0xd0], ebp
mov dword [esp + 0x404], esi
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x414]
mov esi, dword [esp + 0xa0]
mov ebp, ecx
mov ecx, dword [esp + 0x3ec]
mov edi, dword [esp + 0xd0]
test edi, edi
jne 0x4924b4
test ebp, ebp
je 0x48fd27
jmp 0x4922ef
test esi, esi
jne 0x491ee7
movzx edx, byte [esp + 0x37]
test dl, dl
je 0x490f2b
mov edx, dword [esp + 0xe0]
cmp edx, 0xc
jge 0x490f32
add edx, 0xc
jmp 0x490f44
mov edx, dword [esp + 0xe0]
movzx ebp, byte [esp + 0x36]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x490f44
cmp edx, 0xc
jne 0x490f44
xor edx, edx
mov ebp, dword [esp + 0xc4]
test ebp, ebp
jl 0x49156b
mov eax, dword [esp + 0x88]
test eax, 3
jne 0x490ff1
mov edi, 0x51eb851f
mov ecx, edx
imul edi
mov dword [esp + 0xfc], edx
mov eax, dword [esp + 0x88]
sar eax, 0x1f
sar edx, 5
sub edx, eax
imul edx, edx, 0x64
mov esi, dword [esp + 0x88]
cmp esi, edx
jne 0x490fa8
mov edx, dword [esp + 0xfc]
sar edx, 7
sub edx, eax
imul edx, edx, 0x190
cmp esi, edx
jne 0x490fe0
cmp ebp, 0x3c
jne 0x490fbb
mov edx, ebp
mov eax, 2
mov ebp, 0x1d
jmp 0x490fc8
jle 0x490fc2
lea edx, [ebp - 1]
jmp 0x490fc4
mov edx, ebp
xor eax, eax
xor ebp, ebp
mov esi, dword [esp + 0xa0]
mov edi, ebp
mov ebp, edx
mov edx, ecx
mov ecx, eax
mov eax, dword [esp + 0x88]
jmp 0x490ff5
mov eax, esi
mov edx, ecx
mov esi, dword [esp + 0xa0]
xor ecx, ecx
xor edi, edi
jmp 0x490ff5
xor ecx, ecx
xor edi, edi
lea esi, [ebp - 1]
cmp esi, 0x16c
ja 0x4913cb
test ecx, ecx
jne 0x49105d
mov ecx, eax
mov eax, 0x84210843
mov edi, edx
imul esi
lea edx, [edx + ebp - 1]
sar edx, 4
lea eax, [edx + 1]
cmp eax, 0xd
jae 0x4922e5
lea esi, [0x676980]
lea ebx, [esi + edx*4 + 4]
cmp dword [ebx], ebp
jge 0x491037
lea eax, [edx + 2]
lea edx, [eax - 1]
cmp edx, 0xd
jae 0x4922d9
mov edx, dword [esi + eax*4 - 4]
sub ebp, edx
mov edx, edi
mov ebx, dword [esp + 0x414]
mov ecx, eax
mov edi, ebp
mov eax, dword [esp + 0x88]
mov ebp, dword [esp + 0x90]
test ebp, ebp
jl 0x491214
cmp ecx, ebp
je 0x491214
nop
lea eax, [esp + 0x220]
mov dword [esp], eax
mov eax, dword [esp + 0x460]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x464]
mov dword [esp + 8], eax
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
nop
mov eax, dword [esp + 0xc]
mov dword [esp + 0x394], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x4c], ecx
lea edx, [esp + 0x200]
mov dword [esp], edx
mov edx, dword [esp + 0x414]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xa0]
mov dword [esp + 8], edx
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
mov eax, dword [esp + 0xc]
mov dword [esp + 0x390], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x48], ecx
lea edx, [0x750160]
mov dword [esp], edx
call fcn.0040b440
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x45c]
mov dword [edi + 4], eax
mov eax, dword [0x900e70]
test eax, eax
jne 0x49114f
mov ecx, dword [esp + 0x458]
mov dword [edi], ecx
jmp 0x49115b
mov eax, dword [esp + 0x458]
call fcn.00456ac0
mov ecx, dword [esp + 0x4c]
mov dword [edi + 0xc], ecx
mov ecx, dword [0x900e70]
test ecx, ecx
jne 0x491178
mov ecx, dword [esp + 0x394]
mov dword [edi + 8], ecx
jmp 0x49118d
lea ecx, [edi + 8]
mov eax, dword [esp + 0x394]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov dword [edi + 0x14], 0
mov dword [edi + 0x10], 0
mov ecx, dword [esp + 0x48]
mov dword [edi + 0x1c], ecx
mov ecx, dword [0x900e70]
test ecx, ecx
jne 0x4911b8
mov ecx, dword [esp + 0x390]
mov dword [edi + 0x18], ecx
jmp 0x4911cd
lea ecx, [edi + 0x18]
mov eax, dword [esp + 0x390]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov dword [esp + 0x3c8], edi
mov dword [edi + 0x24], 0x22
lea ecx, [0x774758]
mov dword [edi + 0x20], ecx
xor eax, eax
lea edi, [esp + 0x470]
call fcn.00456d5b
lea ecx, [0x7ca71c]
mov dword [esp + 0x484], ecx
mov ecx, dword [esp + 0x3c8]
mov dword [esp + 0x488], ecx
add esp, 0x454
ret
mov ebp, dword [esp + 0x94]
test ebp, ebp
jl 0x491594
cmp edi, ebp
je 0x491594
nop
lea eax, [esp + 0x1e0]
mov dword [esp], eax
mov eax, dword [esp + 0x460]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x464]
mov dword [esp + 8], eax
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
nop
mov eax, dword [esp + 0xc]
mov dword [esp + 0x38c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x44], ecx
lea edx, [esp + 0x1c0]
mov dword [esp], edx
mov edx, dword [esp + 0x414]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xa0]
mov dword [esp + 8], edx
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
mov eax, dword [esp + 0xc]
mov dword [esp + 0x388], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x40], ecx
lea edx, [0x750160]
mov dword [esp], edx
call fcn.0040b440
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x45c]
mov dword [edi + 4], eax
mov eax, dword [0x900e70]
test eax, eax
jne 0x491306
mov ecx, dword [esp + 0x458]
mov dword [edi], ecx
jmp 0x491312
mov eax, dword [esp + 0x458]
call fcn.00456ac0
mov ecx, dword [esp + 0x44]
mov dword [edi + 0xc], ecx
mov ecx, dword [0x900e70]
test ecx, ecx
jne 0x49132f
mov ecx, dword [esp + 0x38c]
mov dword [edi + 8], ecx
jmp 0x491344
lea ecx, [edi + 8]
mov eax, dword [esp + 0x38c]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov dword [edi + 0x14], 0
mov dword [edi + 0x10], 0
mov ecx, dword [esp + 0x40]
mov dword [edi + 0x1c], ecx
mov ecx, dword [0x900e70]
test ecx, ecx
jne 0x49136f
mov ecx, dword [esp + 0x388]
mov dword [edi + 0x18], ecx
jmp 0x491384
lea ecx, [edi + 0x18]
mov eax, dword [esp + 0x388]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov dword [esp + 0x3c4], edi
mov dword [edi + 0x24], 0x20
lea ecx, [0x7738fb]
mov dword [edi + 0x20], ecx
xor eax, eax
lea edi, [esp + 0x470]
call fcn.00456d5b
lea ecx, [0x7ca71c]
mov dword [esp + 0x484], ecx
mov ecx, dword [esp + 0x3c4]
mov dword [esp + 0x488], ecx
add esp, 0x454
ret
nop
lea eax, [esp + 0x260]
mov dword [esp], eax
mov eax, dword [esp + 0x460]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x464]
mov dword [esp + 8], eax
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
nop
mov eax, dword [esp + 0xc]
mov dword [esp + 0x39c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x54], ecx
lea edx, [esp + 0x240]
mov dword [esp], edx
mov edx, dword [esp + 0x414]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xa0]
mov dword [esp + 8], edx
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
mov eax, dword [esp + 0xc]
mov dword [esp + 0x398], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x50], ecx
lea edx, [0x750160]
mov dword [esp], edx
call fcn.0040b440
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x45c]
mov dword [edi + 4], eax
mov eax, dword [0x900e70]
test eax, eax
jne 0x4914a6
mov ecx, dword [esp + 0x458]
mov dword [edi], ecx
jmp 0x4914b2
mov eax, dword [esp + 0x458]
call fcn.00456ac0
mov ecx, dword [esp + 0x54]
mov dword [edi + 0xc], ecx
mov ecx, dword [0x900e70]
test ecx, ecx
jne 0x4914cf
mov ecx, dword [esp + 0x39c]
mov dword [edi + 8], ecx
jmp 0x4914e4
lea ecx, [edi + 8]
mov eax, dword [esp + 0x39c]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov dword [edi + 0x14], 0
mov dword [edi + 0x10], 0
mov ecx, dword [esp + 0x50]
mov dword [edi + 0x1c], ecx
mov ecx, dword [0x900e70]
test ecx, ecx
jne 0x49150f
mov ecx, dword [esp + 0x398]
mov dword [edi + 0x18], ecx
jmp 0x491524
lea ecx, [edi + 0x18]
mov eax, dword [esp + 0x398]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov dword [esp + 0x3cc], edi
mov dword [edi + 0x24], 0x1a
lea ecx, [0x77102d]
mov dword [edi + 0x20], ecx
xor eax, eax
lea edi, [esp + 0x470]
call fcn.00456d5b
lea ecx, [0x7ca71c]
mov dword [esp + 0x484], ecx
mov ecx, dword [esp + 0x3cc]
mov dword [esp + 0x488], ecx
add esp, 0x454
ret
mov ebp, dword [esp + 0x90]
test ebp, ebp
jge 0x49157b
mov ebp, 1
mov edi, dword [esp + 0x94]
test edi, edi
jge 0x49158b
mov edi, 1
mov eax, dword [esp + 0x88]
mov ecx, ebp
cmp edi, 1
jl 0x491625
cmp ecx, 2
jne 0x4915f2
test eax, 3
jne 0x4915ee
mov ebp, 0x51eb851f
mov esi, edx
imul ebp
mov dword [esp + 0xfc], edx
mov ebp, dword [esp + 0x88]
mov eax, ebp
sar ebp, 0x1f
sar edx, 5
sub edx, ebp
imul edx, edx, 0x64
cmp eax, edx
jne 0x4915e7
mov edx, dword [esp + 0xfc]
sar edx, 7
sub edx, ebp
imul edx, edx, 0x190
cmp eax, edx
jne 0x4915f4
mov ebp, 0x1d
jmp 0x49161d
mov esi, edx
jmp 0x4915f4
mov esi, edx
cmp ecx, 0xd
jae 0x4922cd
lea edx, [0x676980]
mov ebp, dword [edx + ecx*4]
lea ebx, [ecx - 1]
cmp ebx, 0xd
jae 0x4922c1
sub ebp, dword [edx + ecx*4 - 4]
mov ebx, dword [esp + 0x414]
cmp ebp, edi
jge 0x4917c5
nop
lea eax, [esp + 0x1a0]
mov dword [esp], eax
mov eax, dword [esp + 0x460]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x464]
mov dword [esp + 8], eax
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
nop
mov eax, dword [esp + 0xc]
mov dword [esp + 0x384], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x3c], ecx
lea edx, [esp + 0x180]
mov dword [esp], edx
mov edx, dword [esp + 0x414]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xa0]
mov dword [esp + 8], edx
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
mov eax, dword [esp + 0xc]
mov dword [esp + 0x380], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x38], ecx
lea edx, [0x750160]
mov dword [esp], edx
call fcn.0040b440
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x45c]
mov dword [edi + 4], eax
mov eax, dword [0x900e70]
test eax, eax
jne 0x491700
mov ecx, dword [esp + 0x458]
mov dword [edi], ecx
jmp 0x49170c
mov eax, dword [esp + 0x458]
call fcn.00456ac0
mov ecx, dword [esp + 0x3c]
mov dword [edi + 0xc], ecx
mov ecx, dword [0x900e70]
test ecx, ecx
jne 0x491729
mov ecx, dword [esp + 0x384]
mov dword [edi + 8], ecx
jmp 0x49173e
lea ecx, [edi + 8]
mov eax, dword [esp + 0x384]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov dword [edi + 0x14], 0
mov dword [edi + 0x10], 0
mov ecx, dword [esp + 0x38]
mov dword [edi + 0x1c], ecx
mov ecx, dword [0x900e70]
test ecx, ecx
jne 0x491769
mov ecx, dword [esp + 0x380]
mov dword [edi + 0x18], ecx
jmp 0x49177e
lea ecx, [edi + 0x18]
mov eax, dword [esp + 0x380]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov dword [esp + 0x3c0], edi
mov dword [edi + 0x24], 0x12
lea ecx, [0x76d20a]
mov dword [edi + 0x20], ecx
xor eax, eax
lea edi, [esp + 0x470]
call fcn.00456d5b
lea ecx, [0x7ca71c]
mov dword [esp + 0x484], ecx
mov ecx, dword [esp + 0x3c0]
mov dword [esp + 0x488], ecx
add esp, 0x454
ret
mov edx, dword [esp + 0x3ec]
test edx, edx
jne 0x491e6e
mov edx, dword [esp + 0xe8]
cmp edx, 0xffffffff
jne 0x491b79
mov edx, dword [esp + 0x84]
test edx, edx
je 0x491af9
mov edx, dword [0x70667c]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov eax, dword [esp + 0x80]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], edx
call fcn.00496010
lea edi, [esp + 0x418]
lea esi, [esp + 0x20]
call fcn.0045723e
nop
mov eax, dword [esp + 0x418]
mov ecx, dword [esp + 0x41c]
test ecx, 0x80000000
je 0x49187b
shl ecx, 1
mov edx, eax
shr eax, 0x1f
or eax, ecx
shl edx, 1
mov ecx, eax
shl eax, 1
shr edx, 0x1f
or edx, eax
shr ecx, 0x1f
add edx, 0xd7b17f80
adc ecx, 0xd
jmp 0x491889
mov edx, dword [esp + 0x420]
mov ecx, dword [esp + 0x424]
add edx, 0x886e0900
adc ecx, 0xfffffff1
mov eax, dword [esp + 0x46c]
mov dword [esp], eax
mov ebx, dword [esp + 0x3e4]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x84]
mov dword [esp + 8], ebp
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], edx
call fcn.00498e70
movzx eax, byte [esp + 0x18]
mov ecx, dword [esp + 0x14]
test al, al
jne 0x491a2b
mov eax, dword [esp + 0x84]
cmp eax, 3
jle 0x491926
mov edx, dword [esp + 0x3e4]
cmp word [edx], 0x4d47
jne 0x49192d
cmp byte [edx + 2], 0x54
jne 0x49192d
lea ecx, [0x7c9f68]
mov dword [esp], ecx
lea ecx, [edx + 3]
mov dword [esp + 4], ecx
lea ecx, [eax - 3]
mov dword [esp + 8], ecx
call fcn.0049a9b0
mov eax, dword [esp + 0xc]
imul ecx, eax, 0xe10
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x3e4]
jmp 0x49192d
mov edx, dword [esp + 0x3e4]
mov dword [esp + 0xe4], ecx
nop
lea ebx, [esp + 0x140]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xe4]
mov dword [esp + 8], eax
call fcn.004968b0
nop
mov eax, dword [esp + 0xc]
lea ecx, [0x70f660]
cmp eax, ecx
jne 0x491998
xor eax, eax
nop
mov ecx, dword [esp + 0x418]
mov edx, dword [esp + 0x41c]
test edx, 0x80000000
je 0x4919f4
shl edx, 1
mov ebx, ecx
shr ecx, 0x1f
or ecx, edx
shl ebx, 1
mov edx, ecx
shl ecx, 1
shr ebx, 0x1f
or ecx, ebx
shr edx, 0x1f
add ecx, 0xd7b17f80
adc edx, 0xd
nop
mov dword [esp + 0x420], ecx
mov dword [esp + 0x424], edx
and dword [esp + 0x418], 0x3fffffff
mov dword [esp + 0x41c], 0
mov dword [esp + 0x428], eax
lea edi, [esp + 0x470]
lea esi, [esp + 0x418]
call fcn.0045723e
mov dword [esp + 0x484], 0
mov dword [esp + 0x488], 0
add esp, 0x454
ret
mov eax, ecx
sar ecx, 0x1f
xor edx, edx
sub edx, eax
mov eax, 0
sbb eax, ecx
lea ecx, [esp + 0x418]
mov dword [esp], ecx
mov dword [esp + 8], eax
mov dword [esp + 4], edx
call fcn.00493740
nop
mov eax, dword [esp + 0x46c]
lea ecx, [0x70f660]
cmp eax, ecx
jne 0x491a66
xor eax, eax
nop
mov ecx, dword [esp + 0x418]
mov edx, dword [esp + 0x41c]
test edx, 0x80000000
je 0x491ac2
shl edx, 1
mov ebx, ecx
shr ecx, 0x1f
or ecx, edx
shl ebx, 1
mov edx, ecx
shl ecx, 1
shr ebx, 0x1f
or ecx, ebx
shr edx, 0x1f
add ecx, 0xd7b17f80
adc edx, 0xd
nop
mov dword [esp + 0x420], ecx
mov dword [esp + 0x424], edx
and dword [esp + 0x418], 0x3fffffff
mov dword [esp + 0x41c], 0
mov dword [esp + 0x428], eax
lea edi, [esp + 0x470]
lea esi, [esp + 0x418]
call fcn.0045723e
mov dword [esp + 0x484], 0
mov dword [esp + 0x488], 0
add esp, 0x454
ret
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov eax, dword [esp + 0x80]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x468]
mov dword [esp + 0x1c], eax
call fcn.00496010
lea edi, [esp + 0x440]
lea esi, [esp + 0x20]
call fcn.0045723e
lea edi, [esp + 0x470]
lea esi, [esp + 0x440]
call fcn.0045723e
mov dword [esp + 0x484], 0
mov dword [esp + 0x488], 0
add esp, 0x454
ret
mov edx, dword [0x70667c]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov eax, dword [esp + 0x80]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], edx
call fcn.00496010
mov eax, dword [esp + 0xe8]
mov ecx, eax
sar eax, 0x1f
xor edx, edx
sub edx, ecx
mov ebx, 0
sbb ebx, eax
lea edi, [esp + 0x42c]
lea esi, [esp + 0x20]
call fcn.0045723e
lea eax, [esp + 0x42c]
mov dword [esp], eax
mov dword [esp + 8], ebx
mov dword [esp + 4], edx
call fcn.00493740
nop
mov eax, dword [esp + 0x42c]
mov ecx, dword [esp + 0x430]
test ecx, 0x80000000
je 0x491c2f
shl ecx, 1
mov edx, eax
shr eax, 0x1f
or eax, ecx
shl edx, 1
mov ecx, eax
shl eax, 1
shr edx, 0x1f
or edx, eax
shr ecx, 0x1f
add edx, 0xd7b17f80
adc ecx, 0xd
jmp 0x491c3d
mov edx, dword [esp + 0x434]
mov ecx, dword [esp + 0x438]
add edx, 0x886e0900
adc ecx, 0xfffffff1
mov eax, dword [esp + 0x46c]
mov dword [esp], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
call fcn.00496ab0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xe8]
cmp dword [esp + 0x14], edx
jne 0x491cb8
mov ebx, dword [esp + 0x84]
test ebx, ebx
jne 0x491c84
mov eax, 1
jmp 0x491cc1
cmp ebx, eax
je 0x491c8c
xor eax, eax
jmp 0x491cc1
mov dword [esp], ecx
mov ecx, dword [esp + 0x3e4]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00403310
movzx eax, byte [esp + 0xc]
mov edx, dword [esp + 0xe8]
mov ebx, dword [esp + 0x84]
jmp 0x491cc1
mov ebx, dword [esp + 0x84]
xor eax, eax
test al, al
je 0x491d70
nop
mov eax, dword [esp + 0x46c]
lea ecx, [0x70f660]
cmp eax, ecx
jne 0x491cdd
xor eax, eax
nop
mov ecx, dword [esp + 0x42c]
mov edx, dword [esp + 0x430]
test edx, 0x80000000
je 0x491d39
shl edx, 1
mov ebx, ecx
shr ecx, 0x1f
or edx, ecx
shl ebx, 1
mov ecx, edx
shl edx, 1
shr ebx, 0x1f
or edx, ebx
shr ecx, 0x1f
add edx, 0xd7b17f80
adc ecx, 0xd
nop
mov dword [esp + 0x434], edx
mov dword [esp + 0x438], ecx
and dword [esp + 0x42c], 0x3fffffff
mov dword [esp + 0x430], 0
mov dword [esp + 0x43c], eax
lea edi, [esp + 0x470]
lea esi, [esp + 0x42c]
call fcn.0045723e
mov dword [esp + 0x484], 0
mov dword [esp + 0x488], 0
add esp, 0x454
ret
nop
lea eax, [esp + 0x160]
mov dword [esp], eax
mov eax, dword [esp + 0x3e4]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xe8]
mov dword [esp + 8], eax
call fcn.004968b0
nop
mov eax, dword [esp + 0xc]
lea ecx, [0x70f660]
cmp eax, ecx
jne 0x491ddb
xor eax, eax
nop
mov ecx, dword [esp + 0x42c]
mov edx, dword [esp + 0x430]
test edx, 0x80000000
je 0x491e37
shl edx, 1
mov ebx, ecx
shr ecx, 0x1f
or edx, ecx
shl ebx, 1
mov ecx, edx
shl edx, 1
shr ebx, 0x1f
or edx, ebx
shr ecx, 0x1f
add edx, 0xd7b17f80
adc ecx, 0xd
nop
mov dword [esp + 0x434], edx
mov dword [esp + 0x438], ecx
and dword [esp + 0x42c], 0x3fffffff
mov dword [esp + 0x430], 0
mov dword [esp + 0x43c], eax
lea edi, [esp + 0x470]
lea esi, [esp + 0x42c]
call fcn.0045723e
mov dword [esp + 0x484], 0
mov dword [esp + 0x488], 0
add esp, 0x454
ret
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov eax, dword [esp + 0x80]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], edx
call fcn.00496010
lea edi, [esp + 0x440]
lea esi, [esp + 0x20]
call fcn.0045723e
lea edi, [esp + 0x470]
lea esi, [esp + 0x440]
call fcn.0045723e
mov dword [esp + 0x484], 0
mov dword [esp + 0x488], 0
add esp, 0x454
ret
mov dword [esp], ebx
mov dword [esp + 4], esi
call fcn.0048f200
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp], 0
lea edx, [0x76baed]
mov dword [esp + 4], edx
mov dword [esp + 8], 0xe
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.00445480
nop
mov eax, dword [esp + 0x14]
mov dword [esp + 0x3f4], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xb4], ecx
lea edx, [esp + 0x320]
mov dword [esp], edx
mov edx, dword [esp + 0x460]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x464]
mov dword [esp + 8], edx
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
nop
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3b4], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x6c], ecx
lea edx, [esp + 0x300]
mov dword [esp], edx
mov edx, dword [esp + 0x414]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xa0]
mov dword [esp + 8], edx
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3b0], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x68], ecx
lea edx, [0x750160]
mov dword [esp], edx
call fcn.0040b440
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x45c]
mov dword [edi + 4], eax
mov eax, dword [0x900e70]
test eax, eax
jne 0x492012
mov ecx, dword [esp + 0x458]
mov dword [edi], ecx
jmp 0x49201e
mov eax, dword [esp + 0x458]
call fcn.00456ac0
mov ecx, dword [esp + 0x6c]
mov dword [edi + 0xc], ecx
mov ecx, dword [0x900e70]
test ecx, ecx
jne 0x49203b
mov ecx, dword [esp + 0x3b4]
mov dword [edi + 8], ecx
jmp 0x492050
lea ecx, [edi + 8]
mov eax, dword [esp + 0x3b4]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov dword [edi + 0x14], 0
mov dword [edi + 0x10], 0
mov ecx, dword [esp + 0x68]
mov dword [edi + 0x1c], ecx
mov ecx, dword [0x900e70]
test ecx, ecx
jne 0x49207b
mov ecx, dword [esp + 0x3b0]
mov dword [edi + 0x18], ecx
jmp 0x492090
lea ecx, [edi + 0x18]
mov eax, dword [esp + 0x3b0]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov ecx, dword [esp + 0xb4]
mov dword [edi + 0x24], ecx
mov ecx, dword [0x900e70]
test ecx, ecx
jne 0x4920b0
mov ecx, dword [esp + 0x3f4]
mov dword [edi + 0x20], ecx
jmp 0x4920c5
lea ecx, [edi + 0x20]
mov eax, dword [esp + 0x3f4]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov dword [esp + 0x3d8], edi
xor eax, eax
lea edi, [esp + 0x470]
call fcn.00456d5b
lea ecx, [0x7ca71c]
mov dword [esp + 0x484], ecx
mov ecx, dword [esp + 0x3d8]
mov dword [esp + 0x488], ecx
add esp, 0x454
ret
nop
lea eax, [esp + 0x360]
mov dword [esp], eax
mov eax, dword [esp + 0x460]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x464]
mov dword [esp + 8], eax
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
nop
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3bc], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x74], ecx
lea edx, [esp + 0x340]
mov dword [esp], edx
mov edx, dword [esp + 0x414]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xa0]
mov dword [esp + 8], edx
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3b8], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x70], ecx
lea edx, [0x750160]
mov dword [esp], edx
call fcn.0040b440
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x45c]
mov dword [edi + 4], eax
mov eax, dword [0x900e70]
test eax, eax
jne 0x4921d7
mov ecx, dword [esp + 0x458]
mov dword [edi], ecx
jmp 0x4921e3
mov eax, dword [esp + 0x458]
call fcn.00456ac0
mov ecx, dword [esp + 0x74]
mov dword [edi + 0xc], ecx
mov ecx, dword [0x900e70]
test ecx, ecx
jne 0x492200
mov ecx, dword [esp + 0x3bc]
mov dword [edi + 8], ecx
jmp 0x492215
lea ecx, [edi + 8]
mov eax, dword [esp + 0x3bc]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov ecx, dword [esp + 0xbc]
mov dword [edi + 0x14], ecx
mov ecx, dword [0x900e70]
test ecx, ecx
jne 0x492235
mov ecx, dword [esp + 0x3f8]
mov dword [edi + 0x10], ecx
jmp 0x49224a
lea ecx, [edi + 0x10]
mov eax, dword [esp + 0x3f8]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov ecx, dword [esp + 0x70]
mov dword [edi + 0x1c], ecx
mov ecx, dword [0x900e70]
test ecx, ecx
jne 0x492267
mov ecx, dword [esp + 0x3b8]
mov dword [edi + 0x18], ecx
jmp 0x49227c
lea ecx, [edi + 0x18]
mov eax, dword [esp + 0x3b8]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov dword [esp + 0x3dc], edi
mov dword [edi + 0x24], 0
mov dword [edi + 0x20], 0
xor eax, eax
lea edi, [esp + 0x470]
call fcn.00456d5b
lea ecx, [0x7ca71c]
mov dword [esp + 0x484], ecx
mov ecx, dword [esp + 0x3dc]
mov dword [esp + 0x488], ecx
add esp, 0x454
ret
mov eax, ebx
mov ecx, 0xd
call fcn.00456b40
mov eax, ecx
mov ecx, 0xd
call fcn.00456b40
mov eax, edx
mov ecx, 0xd
call fcn.00456b40
mov ecx, 0xd
call fcn.00456b40
nop
lea eax, [esp + 0x2a0]
mov dword [esp], eax
mov eax, dword [esp + 0x460]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x464]
mov dword [esp + 8], eax
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
nop
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3a4], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x5c], ecx
lea edx, [esp + 0x280]
mov dword [esp], edx
mov edx, dword [esp + 0x414]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xa0]
mov dword [esp + 8], edx
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3a0], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x58], ecx
lea edx, [0x750160]
mov dword [esp], edx
call fcn.0040b440
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x45c]
mov dword [edi + 4], eax
mov eax, dword [0x900e70]
test eax, eax
jne 0x4923ca
mov ecx, dword [esp + 0x458]
mov dword [edi], ecx
jmp 0x4923d6
mov eax, dword [esp + 0x458]
call fcn.00456ac0
mov ecx, dword [esp + 0x5c]
mov dword [edi + 0xc], ecx
mov ecx, dword [0x900e70]
test ecx, ecx
jne 0x4923f3
mov ecx, dword [esp + 0x3a4]
mov dword [edi + 8], ecx
jmp 0x492408
lea ecx, [edi + 8]
mov eax, dword [esp + 0x3a4]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov ecx, dword [esp + 0xfc]
mov dword [edi + 0x14], ecx
mov ecx, dword [0x900e70]
test ecx, ecx
jne 0x492428
mov ecx, dword [esp + 0x400]
mov dword [edi + 0x10], ecx
jmp 0x49243d
lea ecx, [edi + 0x10]
mov eax, dword [esp + 0x400]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov ecx, dword [esp + 0x58]
mov dword [edi + 0x1c], ecx
mov ecx, dword [0x900e70]
test ecx, ecx
jne 0x49245a
mov ecx, dword [esp + 0x3a0]
mov dword [edi + 0x18], ecx
jmp 0x49246f
lea ecx, [edi + 0x18]
mov eax, dword [esp + 0x3a0]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov dword [esp + 0x3d0], edi
mov dword [edi + 0x24], 0
mov dword [edi + 0x20], 0
xor eax, eax
lea edi, [esp + 0x470]
call fcn.00456d5b
lea ecx, [0x7ca71c]
mov dword [esp + 0x484], ecx
mov ecx, dword [esp + 0x3d0]
mov dword [esp + 0x488], ecx
add esp, 0x454
ret
mov dword [esp + 0x3e8], eax
mov dword [esp], 0
lea eax, [0x769760]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov eax, dword [esp + 0x404]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edi
lea eax, [0x76b5c6]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0xd
call fcn.00445520
nop
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x3f0], eax
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xb0], ecx
lea edx, [esp + 0x2e0]
mov dword [esp], edx
mov edx, dword [esp + 0x460]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x464]
mov dword [esp + 8], edx
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
nop
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3ac], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x64], ecx
lea edx, [esp + 0x2c0]
mov dword [esp], edx
mov edx, dword [esp + 0x3e8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x9c]
mov dword [esp + 8], edx
call fcn.004458f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00445730
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3a8], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x60], ecx
lea edx, [0x750160]
mov dword [esp], edx
call fcn.0040b440
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x45c]
mov dword [edi + 4], eax
mov eax, dword [0x900e70]
test eax, eax
jne 0x4925eb
mov ecx, dword [esp + 0x458]
mov dword [edi], ecx
jmp 0x4925f7
mov eax, dword [esp + 0x458]
call fcn.00456ac0
mov ecx, dword [esp + 0x64]
mov dword [edi + 0xc], ecx
mov ecx, dword [0x900e70]
test ecx, ecx
jne 0x492614
mov ecx, dword [esp + 0x3ac]
mov dword [edi + 8], ecx
jmp 0x492629
lea ecx, [edi + 8]
mov eax, dword [esp + 0x3ac]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov ecx, dword [esp + 0xfc]
mov dword [edi + 0x14], ecx
mov ecx, dword [0x900e70]
test ecx, ecx
jne 0x492649
mov ecx, dword [esp + 0x400]
mov dword [edi + 0x10], ecx
jmp 0x49265e
lea ecx, [edi + 0x10]
mov eax, dword [esp + 0x400]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov ecx, dword [esp + 0x60]
mov dword [edi + 0x1c], ecx
mov ecx, dword [0x900e70]
test ecx, ecx
jne 0x49267b
mov ecx, dword [esp + 0x3a8]
mov dword [edi + 0x18], ecx
jmp 0x492690
lea ecx, [edi + 0x18]
mov eax, dword [esp + 0x3a8]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov ecx, dword [esp + 0xb0]
mov dword [edi + 0x24], ecx
mov ecx, dword [0x900e70]
test ecx, ecx
jne 0x4926b0
mov ecx, dword [esp + 0x3f0]
mov dword [edi + 0x20], ecx
jmp 0x4926c5
lea ecx, [edi + 0x20]
mov eax, dword [esp + 0x3f0]
mov edx, edi
mov edi, ecx
call fcn.00456ac0
mov edi, edx
mov dword [esp + 0x3d4], edi
xor eax, eax
lea edi, [esp + 0x470]
call fcn.00456d5b
lea ecx, [0x7ca71c]
mov dword [esp + 0x484], ecx
mov ecx, dword [esp + 0x3d4]
mov dword [esp + 0x488], ecx
add esp, 0x454
ret
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], ecx
mov eax, edx
mov dword [esp + 0xd0], ebp
mov dword [esp + 0x404], edi
mov dword [esp + 0xac], esi
mov edx, dword [esp + 0xfc]
mov esi, dword [esp + 0xa0]
mov edi, dword [esp + 0x400]
mov ecx, dword [esp + 0x3ec]
mov ebp, ebx
mov ebx, dword [esp + 0x414]
jmp 0x490eed
inc eax
cmp eax, ecx
jge 0x492762
jae 0x4927ee
movzx ebx, byte [eax + edx]
add ebx, 0xffffffd0
cmp bl, 9
jbe 0x49274b
mov dword [esp + 0xd8], eax
lea ebx, [0x7c9f70]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.0049a820
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0xd8]
mov esi, dword [esp + 0xc0]
cmp ebp, esi
ja 0x4927e5
sub esi, ebp
mov edi, esi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and ebp, esi
mov esi, dword [esp + 0x3fc]
add ebp, esi
mov esi, eax
mov eax, dword [esp + 0xf4]
mov eax, ebp
mov ebp, edx
mov edx, eax
mov eax, dword [esp + 0xf4]
mov eax, ecx
mov ecx, edi
mov edi, eax
mov eax, dword [esp + 0xf4]
jmp 0x4926fc
mov eax, ebp
mov ecx, esi
call fcn.00456ba0
call fcn.00456b40
inc edx
mov dword [esp + 0xa8], edx
mov edx, dword [esp + 0xfc]
mov edx, dword [esp + 0xa8]
cmp edx, 2
jge 0x49283e
cmp ecx, 0x10a
jne 0x4927f3
test esi, esi
je 0x4927f3
cmp byte [ebx], 0x20
jne 0x4927f3
dec esi
mov dword [esp + 0xf8], esi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, 1
add ebx, esi
mov esi, dword [esp + 0xf8]
jmp 0x4927f3
xor edx, edx
xor edx, edx
mov dword [esp + 0x7c], edx
xor edx, edx
jmp 0x49286d
inc edx
mov eax, dword [esp + 0x7c]
lea eax, [eax + eax*4]
xchg ebp, eax
movzx eax, al
xchg ebp, eax
lea eax, [ebp + eax*2]
mov ebp, dword [esp + 0xa0]
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x400]
cmp edx, 3
jge 0x492895
cmp edx, esi
jge 0x492891
jae 0x492907
movzx ebp, byte [edx + ebx]
add ebp, 0xffffffd0
xchg ebp, eax
cmp al, 9
xchg ebp, eax
jbe 0x49284a
mov ebp, dword [esp + 0xa0]
test edx, edx
je 0x4928a2
cmp ecx, 0x10b
jne 0x4928ac
cmp edx, 3
je 0x4928ac
mov ecx, dword [0x707078]
xor edx, edx
jmp 0x4928c9
cmp edx, esi
ja 0x4928fe
sub esi, edx
mov ecx, esi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, edx
add ebx, esi
mov esi, ecx
mov edx, dword [esp + 0x7c]
xor ecx, ecx
mov edi, eax
mov dword [esp + 0xc4], edx
mov ebp, ecx
mov dword [esp + 0x9c], esi
mov eax, ebx
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x414]
mov esi, dword [esp + 0xa0]
mov ecx, dword [esp + 0x3ec]
jmp 0x490eed
mov eax, edx
mov ecx, esi
call fcn.00456ba0
mov eax, edx
mov ecx, esi
call fcn.00456b40
mov ecx, ebp
mov dword [esp + 0xa4], ecx
lea ebp, [ecx + 1]
cmp esi, ebp
jle 0x492939
jbe 0x4929ed
movzx edi, byte [ecx + ebx + 1]
xchg edi, eax
cmp al, 0x30
xchg edi, eax
jb 0x492939
xchg edi, eax
cmp al, 0x39
xchg edi, eax
jbe 0x492910
mov dword [esp + 0xec], ebp
lea eax, [0x7c9f70]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebp
call fcn.0049a820
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0xa0]
mov esi, dword [esp + 0xec]
cmp ebp, esi
jb 0x4929e4
mov edi, dword [esp + 0xa4]
sub ebp, edi
dec ebp
mov edi, ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and esi, ebp
mov ebp, dword [esp + 0x414]
add esi, ebp
mov ebp, eax
mov dword [esp + 0x9c], edi
mov eax, esi
mov dword [esp + 0xd0], ebx
mov dword [esp + 0x404], edx
mov dword [esp + 0xac], ecx
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x414]
mov esi, dword [esp + 0xa0]
mov edi, dword [esp + 0x400]
mov ecx, dword [esp + 0x3ec]
jmp 0x490eed
mov eax, esi
mov ecx, ebp
call fcn.00456ba0
mov eax, ebp
mov ecx, esi
call fcn.00456b40
mov eax, esi
mov ecx, ebp
call fcn.00456ba0
call fcn.00456b60
mov eax, edx
mov ecx, ebp
call fcn.00456ba0
mov ecx, ebp
mov edx, esi
call fcn.00456b60
nop
call fcn.00455690
jmp fcn.0048fc40