Function at 0x4397e0
Capabilities:
Check os version
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4877cb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x150
push ebx
push esi
push edi
mov edi, ecx
lea ecx, [esp + 0xa4]
mov dword [esp + 0x30], edi
call fcn.00430220
xor esi, esi
mov dword [esp + 0x164], esi
lea ecx, [esp + 0x7c]
call fcn.00430220
mov byte [esp + 0x164], 1
lea ecx, [esp + 0x64]
call fcn.00430220
mov byte [esp + 0x164], 2
inc dword [edi + 0x13c]
mov ebx, dword [edi + 0x13c]
mov dword [esp + 0x128], ebx
cmp dword [ebp + 0x18], esi
je 0x4399f3
mov eax, dword [ebp + 0x10]
push ecx
mov ecx, esp
mov dword [esp + 0x64], esp
push eax
call dword [0x490ae8]
mov byte [esp + 0x168], 3
lea ecx, [esp + 0xe8]
push ecx
mov byte [esp + 0x16c], 2
mov ecx, edi
call fcn.0042fbe0
mov ebx, dword [eax]
mov edx, dword [eax + 4]
mov ecx, 1
mov dword [esp + 0x34], ecx
mov dword [esp + 0x38], ecx
mov ecx, ebx
lea eax, [esp + 0x34]
mov dword [esp + 0x3c], ecx
push eax
lea ecx, [esp + 0xa8]
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], edx
mov dword [esp + 0x44], edx
call fcn.00434b40
lea edx, [esp + 0xa4]
lea ecx, [edi + 0x2b4]
push edx
call fcn.00439740
cmp ebx, esi
je 0x439b19
cmp dword [esp + 0x28], esi
je 0x439b19
lea ecx, [esp + 0xa4]
call fcn.00432c40
xor eax, eax
xor ecx, ecx
cmp ebx, esi
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], ecx
jle 0x439934
mov dword [esp + 0x20], esi
jmp 0x439910
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0xa8]
call fcn.00434b40
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x68]
call fcn.00434be0
sub ebx, 1
jne 0x439910
mov eax, dword [esp + 0x28]
cmp eax, esi
jle 0x4399d0
mov dword [esp + 0x20], esi
mov dword [esp + 0x14], eax
jmp 0x439950
lea edx, [esp + 0xa4]
push edx
lea ecx, [edi + 0x2b4]
call fcn.00439740
mov edx, dword [esp + 0x88]
cmp edx, esi
jne 0x439972
xor ecx, ecx
jmp 0x43997e
mov ecx, dword [esp + 0x90]
sub ecx, edx
sar ecx, 2
mov eax, dword [esp + 0x8c]
mov ebx, eax
sub ebx, edx
sar ebx, 2
cmp ebx, ecx
jae 0x43999e
mov dword [eax], esi
add eax, 4
mov dword [esp + 0x8c], eax
jmp 0x4399c9
mov ebx, eax
cmp edx, eax
jbe 0x4399aa
call dword [0x48fedc]
mov eax, dword [esp + 0x7c]
lea ecx, [esp + 0x20]
push ecx
push ebx
push eax
lea edx, [esp + 0xf0]
push edx
lea ecx, [esp + 0x8c]
call fcn.00433000
sub dword [esp + 0x14], 1
jne 0x439950
lea eax, [esp + 0x64]
lea ebx, [edi + 0x2cc]
push eax
mov ecx, ebx
call fcn.004395f0
lea ecx, [esp + 0x7c]
push ecx
mov ecx, ebx
call fcn.004395f0
jmp 0x439b15
mov ecx, dword [edi + 0x2c4]
sub ecx, dword [edi + 0x2c0]
mov esi, dword [edi + 0x138]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp esi, eax
jb 0x439a20
call dword [0x48fedc]
mov edx, dword [edi + 0x2c0]
lea ecx, [esi + esi*2]
lea eax, [edx + ecx*8]
push eax
lea ecx, [esp + 0xa8]
call fcn.00434a00
mov edx, dword [esp + 0xb4]
mov ecx, dword [esp + 0xb0]
sub edx, ecx
mov eax, 0x2aaaaaab
imul edx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x439a69
call dword [0x48fedc]
mov ecx, dword [esp + 0xb0]
mov edx, dword [ecx]
mov eax, dword [ecx + 4]
mov esi, dword [ecx + 0x10]
mov dword [esp + 0x38], eax
mov eax, dword [ecx + 8]
mov dword [esp + 0x34], edx
mov edx, dword [ecx + 0xc]
mov ecx, dword [ecx + 0x14]
mov dword [esp + 0x48], ecx
mov ecx, dword [edi + 0x2dc]
sub ecx, dword [edi + 0x2d8]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], edx
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
mov dword [esp + 0x44], esi
lea esi, [ebx + ebx]
add eax, edx
cmp esi, eax
jb 0x439abc
call dword [0x48fedc]
mov edx, dword [edi + 0x2d8]
lea ecx, [esi + esi*2]
lea eax, [edx + ecx*8]
push eax
lea ecx, [esp + 0x68]
call fcn.00432c90
mov ecx, dword [edi + 0x2dc]
sub ecx, dword [edi + 0x2d8]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
inc esi
add ecx, edx
cmp esi, ecx
jb 0x439afa
call dword [0x48fedc]
mov eax, dword [edi + 0x2d8]
lea edx, [esi + esi*2]
lea ecx, [eax + edx*8]
push ecx
lea ecx, [esp + 0x80]
call fcn.00432c90
xor esi, esi
mov ebx, dword [esp + 0x24]
inc dword [edi + 0x138]
mov eax, dword [edi + 0x138]
mov dword [esp + 0xbc], eax
cmp ebx, esi
je 0x43b64c
cmp dword [esp + 0x28], esi
je 0x43b64c
mov edx, dword [esp + 0x28]
add eax, edx
lea esi, [edi + 0x24]
push 0x49d294
mov ecx, esi
mov dword [edi + 0x138], eax
call dword [0x490e98]
lea ecx, [edi + 0x244]
push esi
call fcn.00435a70
push esi
mov ecx, edi
call fcn.0042d860
push esi
mov ecx, esi
call dword [0x490e6c]
push eax
mov ecx, edi
call fcn.004354b0
mov ebx, dword [ebp + 0x14]
mov eax, dword [ebx]
mov ecx, dword [ebx + 4]
mov edx, dword [ebx + 8]
mov dword [esp + 0x94], eax
mov eax, dword [ebx + 0xc]
mov dword [esp + 0x98], ecx
mov ecx, dword [ebx]
mov dword [esp + 0xa0], eax
mov eax, dword [ebx + 8]
mov dword [esp + 0xc0], ecx
mov ecx, dword [ebx + 0xc]
mov dword [esp + 0x9c], edx
mov edx, dword [ebx + 4]
mov dword [esp + 0xc8], eax
xor eax, eax
mov dword [esp + 0xcc], ecx
push 0x491cd4
lea ecx, [esp + 0xe4]
mov dword [esp + 0xc8], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0x50], eax
call dword [0x490ea0]
mov byte [esp + 0x164], 0xb
push 0x491cd4
lea ecx, [esp + 0x130]
call dword [0x490ea0]
mov byte [esp + 0x164], 0xc
push 0x491cd4
lea ecx, [esp + 0xe0]
call dword [0x490ea0]
mov byte [esp + 0x164], 0xd
push 0x491cd4
lea ecx, [esp + 0x134]
call dword [0x490ea0]
mov byte [esp + 0x164], 0xe
push 0x491cd4
lea ecx, [esp + 0xdc]
call dword [0x490ea0]
mov byte [esp + 0x164], 0xf
mov ecx, dword [ebp + 0x10]
lea edx, [esp + 0xc]
push edx
lea eax, [esp + 0xdc]
push eax
push ecx
lea edx, [esp + 0x2c]
push edx
mov ecx, edi
call fcn.0042d9b0
lea ecx, [esp + 0x20]
call dword [0x490e9c]
push esi
lea eax, [esp + 0xdc]
push eax
lea ecx, [esp + 0xec]
push ecx
mov ecx, edi
call fcn.00432330
mov edx, dword [ebp + 0xc]
push edx
mov ecx, edi
call fcn.0042cee0
xor eax, eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], eax
cmp dword [ebp + 0x18], eax
jne 0x439f6b
xor esi, esi
cmp dword [esp + 0x24], eax
jle 0x439cea
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x74]
sub ecx, eax
sar ecx, 2
cmp esi, ecx
jb 0x439cdc
call dword [0x48fedc]
mov eax, dword [esp + 0x70]
mov edx, dword [eax + esi*4]
add dword [esp + 0x10], edx
inc esi
cmp esi, dword [esp + 0x24]
jl 0x439cc5
xor esi, esi
cmp dword [esp + 0x28], esi
jle 0x439d2b
mov eax, dword [esp + 0x88]
lea esp, [esp]
mov ecx, dword [esp + 0x8c]
sub ecx, eax
sar ecx, 2
cmp esi, ecx
jb 0x439d1d
call dword [0x48fedc]
mov eax, dword [esp + 0x88]
mov edx, dword [eax + esi*4]
add dword [esp + 0x1c], edx
inc esi
cmp esi, dword [esp + 0x28]
jl 0x439d00
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0x10]
sub eax, dword [esp + 0x94]
push 0
push ecx
push eax
lea edx, [esp + 0xe4]
push edx
mov ecx, edi
call fcn.0042e4c0
mov edx, dword [ebx + 8]
sub edx, dword [ebx]
mov ecx, eax
add ecx, dword [esp + 0x94]
mov eax, ecx
sub eax, dword [esp + 0x94]
mov dword [esp + 0x9c], ecx
cmp eax, edx
jge 0x439db8
mov eax, dword [edi + 0x68]
sub eax, 1
je 0x439d97
sub eax, 1
jne 0x439db8
mov eax, dword [esp + 0x94]
sub eax, ecx
push 0
add eax, edx
push eax
lea ecx, [esp + 0x9c]
push ecx
jmp 0x439db2
mov eax, dword [esp + 0x94]
sub eax, ecx
add eax, edx
cdq
sub eax, edx
push 0
sar eax, 1
push eax
lea edx, [esp + 0x9c]
push edx
call dword [0x490330]
cmp dword [edi + 0x70], 6
jne 0x439dcd
mov eax, dword [edi + 0x74]
mov ecx, dword [esp + 0x1c]
lea eax, [eax + eax*2]
lea eax, [ecx + eax*2]
jmp 0x439dd7
mov edx, dword [edi + 0x74]
mov eax, dword [esp + 0x1c]
lea eax, [eax + edx*2]
mov ecx, dword [esp + 0x98]
add ecx, eax
mov dword [esp + 0x1c], eax
mov eax, dword [edi + 0x60]
mov dword [esp + 0xa0], ecx
test eax, eax
jl 0x439e27
mov esi, dword [ebp + 0xc]
test esi, esi
jne 0x439dfd
xor ecx, ecx
jmp 0x439e00
mov ecx, dword [esi + 4]
mov edx, dword [edi + 0x58]
push 0
push 5
push edx
mov edx, dword [edi + 0x54]
push edx
mov edx, dword [edi + 0x48]
push edx
lea edx, [esp + 0xa8]
push edx
push eax
push ecx
lea ecx, [edi + 0xb8]
call fcn.004297f0
jmp 0x439e92
lea esi, [edi + 0x64]
mov ecx, esi
call dword [0x490aa0]
test al, al
jne 0x439e8f
push ecx
mov ecx, esp
mov dword [esp + 0x64], esp
push esi
call dword [0x490ae8]
mov byte [esp + 0x168], 0x10
mov eax, dword [esp + 0xa4]
sub eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0xa0]
sub ecx, dword [esp + 0x98]
mov esi, dword [ebp + 0xc]
push eax
mov eax, dword [esp + 0xa0]
push ecx
mov ecx, dword [esp + 0xa0]
push eax
push ecx
push esi
mov byte [esp + 0x17c], 0xf
mov ecx, edi
call fcn.0042e6d0
jmp 0x439e92
mov esi, dword [ebp + 0xc]
test esi, esi
je 0x439e99
mov esi, dword [esi + 4]
mov edx, dword [edi + 0x74]
mov eax, dword [edi + 0x70]
mov ecx, dword [edi + 0x50]
push edx
mov edx, dword [edi + 0x4c]
push eax
push ecx
push edx
lea eax, [esp + 0xa4]
push eax
push esi
lea ecx, [edi + 0xb8]
call fcn.00429d10
cmp dword [edi + 0x70], 6
mov eax, dword [edi + 0x74]
lea edx, [esp + 0x94]
jne 0x439ed0
lea eax, [eax + eax*2]
mov ecx, eax
neg ecx
push ecx
neg eax
push eax
push edx
call dword [0x4902c0]
mov eax, dword [esp + 0x9c]
sub eax, dword [esp + 0x94]
cmp dword [esp + 0x10], eax
jge 0x439f6b
sub eax, dword [esp + 0x10]
mov esi, dword [esp + 0x70]
cdq
idiv dword [esp + 0x24]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x74]
sub eax, esi
sar eax, 2
test eax, eax
ja 0x439f1b
call dword [0x48fedc]
mov esi, dword [esp + 0x70]
mov eax, dword [esp + 0x9c]
sub eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x24]
sub eax, dword [esp + 0x10]
cdq
idiv ecx
add dword [esi], edx
xor esi, esi
test ecx, ecx
jle 0x439f6b
lea esp, [esp]
mov edx, dword [esp + 0x74]
mov eax, dword [esp + 0x70]
sub edx, eax
sar edx, 2
cmp esi, edx
jb 0x439f5f
call dword [0x48fedc]
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
add dword [eax + esi*4], edx
inc esi
cmp esi, ecx
jl 0x439f40
mov esi, dword [esp + 0xc]
jmp 0x439f74
mov ebx, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
call dword [0x490b84]
cmp esi, eax
jge 0x43ada5
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x49d2c0
mov dword [esp + 0x20], esi
mov dword [esp + 0x1c], esi
call dword [0x490ea0]
mov byte [esp + 0x168], 0x11
mov esi, dword [ebp + 0x10]
lea eax, [esp + 0x1c]
push eax
push esi
mov byte [esp + 0x170], 0xf
mov ecx, edi
call fcn.0042e080
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x49d284
call dword [0x490ea0]
mov byte [esp + 0x168], 0x12
lea ecx, [esp + 0x18]
push ecx
push esi
mov byte [esp + 0x170], 0xf
mov ecx, edi
call fcn.0042e080
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x18], eax
jge 0x43ad6f
lea ebx, [edi + 0x24]
push 0x49d2c0
mov ecx, ebx
call dword [0x490e98]
push ebx
lea ecx, [edi + 0x244]
call fcn.00435a70
mov ecx, ebx
call dword [0x490e6c]
push ebx
push eax
mov ecx, edi
call fcn.00431f10
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call dword [0x490ea0]
mov byte [esp + 0x16c], 0x1c
mov byte [esp + 0x16c], 0xf
mov ecx, edi
call fcn.00434350
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0xbc]
mov ecx, dword [edi + 0x2c4]
sub ecx, dword [edi + 0x2c0]
lea esi, [edx + eax]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov dword [esp + 0x20], esi
cmp esi, ecx
jb 0x43a087
call dword [0x48fedc]
mov eax, dword [edi + 0x2c0]
lea edx, [esi + esi*2]
lea ecx, [eax + edx*8]
push ecx
lea ecx, [esp + 0xa8]
call fcn.00434a00
mov ecx, dword [ebp + 0x10]
lea edx, [esp + 0xc]
push edx
lea eax, [esp + 0xe4]
push eax
push ecx
lea edx, [esp + 0x140]
push edx
mov ecx, edi
mov dword [esp + 0x20], 0
call fcn.0042d9b0
lea ecx, [esp + 0x134]
call dword [0x490e9c]
push ebx
lea eax, [esp + 0xe4]
push eax
lea ecx, [esp + 0x158]
push ecx
mov ecx, edi
call fcn.00432330
mov edx, dword [ebp + 0xc]
push edx
mov ecx, edi
call fcn.0042cee0
mov esi, dword [esp + 0xc]
lea esp, [esp]
mov ecx, dword [ebp + 0x10]
call dword [0x490b84]
cmp esi, eax
jge 0x43acf7
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x49d2b8
mov dword [esp + 0x20], esi
mov dword [esp + 0x1c], esi
call dword [0x490ea0]
mov byte [esp + 0x168], 0x1d
mov esi, dword [ebp + 0x10]
lea eax, [esp + 0x1c]
push eax
push esi
mov byte [esp + 0x170], 0xf
mov ecx, edi
call fcn.0042e080
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x49d2b0
call dword [0x490ea0]
mov byte [esp + 0x168], 0x1e
lea ecx, [esp + 0x18]
push ecx
push esi
mov byte [esp + 0x170], 0xf
mov ecx, edi
call fcn.0042e080
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
cmp esi, eax
jge 0x43acbd
push 0x49d2b0
mov ecx, ebx
call dword [0x490e98]
push ebx
lea ecx, [edi + 0x244]
call fcn.00435a70
mov ecx, ebx
call dword [0x490e6c]
push ebx
push eax
mov ecx, edi
call fcn.00431f10
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call dword [0x490ea0]
mov byte [esp + 0x16c], 0x28
mov byte [esp + 0x16c], 0xf
mov ecx, edi
call fcn.00434350
mov ecx, dword [esp + 0xb4]
sub ecx, dword [esp + 0xb0]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
mov dword [esp + 0xc], esi
mov esi, dword [esp + 0x10]
add eax, edx
cmp esi, eax
jb 0x43a20a
call dword [0x48fedc]
mov edx, dword [esp + 0xb0]
lea ecx, [esi + esi*2]
lea eax, [edx + ecx*8]
mov edx, dword [eax + 4]
mov ecx, dword [eax]
mov dword [esp + 0x38], edx
mov edx, dword [eax + 8]
mov dword [esp + 0x3c], edx
mov edx, dword [eax + 0xc]
mov dword [esp + 0x40], edx
mov edx, dword [eax + 0x10]
mov eax, dword [eax + 0x14]
mov dword [esp + 0x34], ecx
mov dword [esp + 0x44], edx
mov dword [esp + 0x48], eax
test ecx, ecx
jge 0x43a293
mov ebx, dword [esp + 0x24]
dec ebx
lea esp, [esp]
cmp esi, ebx
jge 0x43a28f
inc esi
push esi
lea ecx, [esp + 0xa8]
call fcn.004311a0
mov edx, dword [eax + 4]
mov ecx, dword [eax]
mov dword [esp + 0x38], edx
mov edx, dword [eax + 8]
mov dword [esp + 0x3c], edx
mov edx, dword [eax + 0xc]
mov dword [esp + 0x40], edx
mov edx, dword [eax + 0x10]
mov eax, dword [eax + 0x14]
mov dword [esp + 0x34], ecx
mov dword [esp + 0x44], edx
mov dword [esp + 0x48], eax
test ecx, ecx
jl 0x43a250
mov dword [esp + 0x10], esi
mov eax, dword [ebp + 0x10]
lea ecx, [esp + 0xc]
push ecx
lea edx, [esp + 0xe4]
push edx
push eax
lea ecx, [esp + 0xdc]
push ecx
mov ecx, edi
call fcn.0042d9b0
lea ecx, [esp + 0xd0]
call dword [0x490e9c]
lea eax, [edi + 0x24]
push eax
lea edx, [esp + 0xe4]
push edx
lea eax, [esp + 0x148]
push eax
mov ecx, edi
call fcn.00432330
mov ecx, dword [eax + 4]
mov edx, dword [ebp + 0xc]
mov ebx, dword [eax]
mov dword [esp + 0xe8], ecx
push edx
mov ecx, edi
mov dword [esp + 0xe8], ebx
call fcn.0042cee0
cmp dword [ebp + 0x18], 0
je 0x43a6ed
cmp ebx, 1
mov eax, dword [esp + 0xe8]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], eax
jle 0x43a426
mov edi, dword [esp + 0x10]
mov eax, ebx
add eax, edi
inc edi
cmp edi, eax
mov dword [esp + 0xe4], eax
jge 0x43a426
lea esi, [edi + edi*2]
add esi, esi
add esi, esi
add esi, esi
lea esp, [esp]
mov ebx, dword [esp + 0xb4]
mov ecx, dword [esp + 0xb0]
mov edx, ebx
sub edx, ecx
mov eax, 0x2aaaaaab
imul edx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x43a37b
call dword [0x48fedc]
mov ebx, dword [esp + 0xb4]
mov ecx, dword [esp + 0xb0]
mov eax, dword [ecx + esi + 4]
mov edx, dword [ecx + esi]
mov dword [esp + 0xfc], eax
mov eax, dword [ecx + esi + 0xc]
mov dword [esp + 0x104], eax
mov eax, dword [ecx + esi + 0x14]
mov dword [esp + 0xf8], edx
mov edx, dword [ecx + esi + 8]
mov dword [esp + 0x10c], eax
mov dword [esp + 0x100], edx
mov edx, dword [ecx + esi + 0x10]
sub ebx, ecx
mov dword [esp + 0x108], edx
mov eax, 0x2aaaaaab
imul ebx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x43a3e0
call dword [0x48fedc]
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0x104]
lea eax, [ecx + esi]
or ecx, 0xffffffff
mov dword [eax], ecx
or ecx, ecx
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x100]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x108]
mov dword [eax + 0xc], edx
mov edx, dword [esp + 0x10c]
inc edi
add esi, 0x18
cmp edi, dword [esp + 0xe4]
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], edx
jl 0x43a340
mov edi, dword [esp + 0xe8]
cmp edi, 1
jle 0x43a69a
push 4
call fcn.0047e8e4
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
mov byte [esp + 0x164], 0x2a
xor ecx, ecx
cmp eax, ecx
je 0x43a461
lea edx, [esp + 0x110]
mov dword [eax], edx
jmp 0x43a463
xor eax, eax
mov byte [esp + 0x164], 0xf
mov dword [esp + 0x110], eax
mov byte [esp + 0x164], 0x2c
mov dword [esp + 0x11c], ecx
mov dword [esp + 0x120], ecx
mov dword [esp + 0x124], ecx
mov byte [esp + 0x164], 0x2e
mov eax, dword [esp + 0x4c]
add edi, eax
inc eax
cmp eax, edi
jge 0x43a64f
mov ecx, dword [esp + 0xbc]
mov esi, dword [esp + 0x10]
add ecx, eax
mov dword [esp + 0x2c], ecx
lea esi, [esi + esi*2]
lea ecx, [ecx + ecx*2]
add esi, esi
add ecx, ecx
add esi, esi
add ecx, ecx
add ecx, ecx
add esi, esi
sub edi, eax
mov dword [esp + 0x18], ecx
mov dword [esp + 0x14], edi
jmp 0x43a4e0
mov edi, dword [esp + 0x30]
mov ecx, dword [edi + 0x2c4]
sub ecx, dword [edi + 0x2c0]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [esp + 0x2c], eax
jb 0x43a50d
call dword [0x48fedc]
mov ecx, dword [edi + 0x2c0]
add ecx, dword [esp + 0x18]
push ecx
lea ecx, [esp + 0x114]
call fcn.00434a00
mov edi, dword [esp + 0x120]
mov ecx, dword [esp + 0x11c]
mov edx, edi
sub edx, ecx
mov eax, 0x2aaaaaab
imul edx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [esp + 0x10], eax
jb 0x43a561
call dword [0x48fedc]
mov edi, dword [esp + 0x120]
mov ecx, dword [esp + 0x11c]
mov edx, dword [ecx + esi]
mov eax, dword [ecx + esi + 4]
mov ebx, dword [ecx + esi + 8]
mov dword [esp + 0xfc], eax
mov eax, dword [ecx + esi + 0x10]
mov dword [esp + 0xf8], edx
mov edx, dword [ecx + esi + 0xc]
mov dword [esp + 0x108], eax
mov dword [esp + 0x104], edx
mov edx, dword [ecx + esi + 0x14]
sub edi, ecx
mov dword [esp + 0x10c], edx
mov eax, 0x2aaaaaab
imul edi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [esp + 0x10], eax
jb 0x43a5c1
call dword [0x48fedc]
mov ecx, dword [esp + 0x11c]
mov edx, dword [esp + 0x108]
mov edi, dword [esp + 0x30]
lea eax, [ecx + esi]
or ecx, 0xffffffff
mov dword [eax], ecx
or ecx, ecx
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x104]
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x10c]
mov dword [eax + 0x10], edx
mov dword [eax + 0x14], ecx
mov ecx, dword [edi + 0x2c4]
sub ecx, dword [edi + 0x2c0]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [esp + 0x2c], eax
jb 0x43a61c
call dword [0x48fedc]
lea ecx, [esp + 0x110]
push ecx
mov ecx, dword [edi + 0x2c0]
mov edi, dword [esp + 0x1c]
add ecx, edi
call fcn.00434a00
mov eax, 1
add dword [esp + 0x2c], eax
add edi, 0x18
sub dword [esp + 0x14], eax
mov dword [esp + 0x18], edi
jne 0x43a4e0
mov byte [esp + 0x164], 0x2f
mov eax, dword [esp + 0x11c]
xor esi, esi
cmp eax, esi
je 0x43a66d
push eax
call fcn.0047e8ee
add esp, 4
mov dword [esp + 0x11c], esi
mov dword [esp + 0x120], esi
mov dword [esp + 0x124], esi
mov byte [esp + 0x164], 0xf
mov edx, dword [esp + 0x110]
push edx
call fcn.0047e8ee
add esp, 4
xor ecx, ecx
push ecx
push ecx
xor eax, eax
push ecx
mov dword [esp + 0x48], eax
push ecx
lea eax, [esp + 0xd0]
push eax
mov dword [esp + 0x54], ecx
call dword [0x4901f4]
mov ecx, dword [esp + 0xc0]
mov edx, dword [esp + 0xc4]
mov eax, dword [esp + 0xc8]
mov edi, dword [esp + 0x30]
mov dword [esp + 0x50], ecx
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0x54], edx
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], ecx
jmp 0x43a982
mov edx, dword [esp + 0x98]
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0x94]
mov dword [esp + 0xc4], edx
mov edx, dword [esp + 0xa0]
xor ebx, ebx
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0xc0], ecx
mov dword [esp + 0xcc], edx
test esi, esi
jle 0x43a75d
nop
mov ecx, dword [esp + 0x74]
sub ecx, eax
sar ecx, 2
cmp ebx, ecx
jb 0x43a747
call dword [0x48fedc]
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0xc0]
add ecx, dword [eax + ebx*4]
inc ebx
cmp ebx, esi
mov dword [esp + 0xc0], ecx
jl 0x43a730
xor ebx, ebx
cmp dword [esp + 0x34], ebx
mov dword [esp + 0xc8], ecx
jle 0x43a7ad
lea edx, [esi*4]
mov dword [esp + 0x14], edx
mov ecx, dword [esp + 0x74]
sub ecx, eax
sar ecx, 2
lea edx, [ebx + esi]
cmp edx, ecx
jb 0x43a791
call dword [0x48fedc]
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x14]
mov edx, dword [eax + ecx]
add dword [esp + 0xc8], edx
inc ebx
add ecx, 4
cmp ebx, dword [esp + 0x34]
mov dword [esp + 0x14], ecx
jl 0x43a777
mov ebx, dword [esp + 0x4c]
mov ecx, dword [esp + 0x88]
xor esi, esi
test ebx, ebx
jle 0x43a7ec
mov edi, edi
mov eax, dword [esp + 0x8c]
sub eax, ecx
sar eax, 2
cmp esi, eax
jb 0x43a7dd
call dword [0x48fedc]
mov ecx, dword [esp + 0x88]
mov edx, dword [ecx + esi*4]
add dword [esp + 0xc4], edx
inc esi
cmp esi, ebx
jl 0x43a7c0
mov eax, dword [esp + 0xc4]
xor esi, esi
cmp dword [esp + 0x38], esi
mov dword [esp + 0xcc], eax
jle 0x43a856
lea edx, [ebx*4]
mov dword [esp + 0x14], edx
jmp 0x43a814
mov ebx, dword [esp + 0x4c]
mov edx, dword [esp + 0x8c]
sub edx, ecx
sar edx, 2
add ebx, esi
cmp ebx, edx
jb 0x43a83a
call dword [0x48fedc]
mov ecx, dword [esp + 0x88]
mov eax, dword [esp + 0xcc]
mov edx, dword [esp + 0x14]
add eax, dword [ecx + edx]
inc esi
add edx, 4
cmp esi, dword [esp + 0x38]
mov dword [esp + 0xcc], eax
mov dword [esp + 0x14], edx
jl 0x43a810
mov ecx, dword [esp + 0xc0]
sub eax, dword [edi + 0x98]
mov edx, dword [esp + 0xc8]
mov esi, dword [edi + 0x8c]
mov ebx, dword [esp + 0xc0]
sub edx, dword [edi + 0x90]
mov dword [esp + 0x50], ecx
mov ecx, dword [esp + 0xc4]
add ecx, dword [edi + 0x94]
mov dword [esp + 0x5c], eax
mov eax, dword [edi + 0x60]
add esi, ebx
mov dword [esp + 0x50], esi
mov dword [esp + 0x54], ecx
mov dword [esp + 0x58], edx
test eax, eax
jl 0x43a8d1
mov edx, dword [edi + 0x58]
mov ecx, dword [edi + 0x54]
push 0
push 5
push edx
mov edx, dword [edi + 0x48]
push ecx
push edx
lea ecx, [esp + 0x64]
push ecx
mov ecx, dword [ebp + 0xc]
push eax
call fcn.00403b10
push eax
lea ecx, [edi + 0xb8]
call fcn.004297f0
mov edx, dword [edi + 0x70]
mov eax, dword [edi + 0x50]
mov ecx, dword [edi + 0x4c]
mov esi, 1
push esi
push edx
push eax
push ecx
mov ecx, dword [ebp + 0xc]
lea edx, [esp + 0x60]
push edx
call fcn.00403b10
push eax
lea ecx, [edi + 0xb8]
call fcn.00429d10
cmp dword [edi + 0x74], 0
mov eax, dword [esp + 0x5c]
je 0x43a92f
cmp dword [edi + 0x70], 6
jne 0x43a921
mov ecx, 3
add dword [esp + 0x50], ecx
add dword [esp + 0x54], ecx
sub dword [esp + 0x58], ecx
sub eax, ecx
jmp 0x43a92f
add dword [esp + 0x50], esi
add dword [esp + 0x54], esi
sub dword [esp + 0x58], esi
sub eax, esi
mov ecx, dword [edi + 0x88]
mov edx, dword [edi + 0x80]
mov esi, dword [edi + 0x84]
mov ebx, dword [edi + 0x7c]
add dword [esp + 0x50], ebx
add dword [esp + 0x54], esi
sub dword [esp + 0x58], edx
sub eax, ecx
mov ecx, dword [edi + 0x6c]
sub ecx, 1
mov dword [esp + 0x5c], eax
je 0x43a96d
sub ecx, 1
jne 0x43a982
sub eax, dword [esp + 0x40]
mov dword [esp + 0x54], eax
jmp 0x43a982
mov ecx, dword [esp + 0x54]
sub eax, ecx
sub eax, dword [esp + 0x40]
cdq
sub eax, edx
sar eax, 1
add ecx, eax
mov dword [esp + 0x54], ecx
mov esi, dword [esp + 0xc]
mov dword [esp + 0x2c], 0
mov ecx, dword [ebp + 0x10]
call dword [0x490b84]
cmp esi, eax
jge 0x43abb6
push ecx
mov ecx, esp
mov dword [esp + 0x10], esp
push 0x49e6f0
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], esi
call dword [0x490ea0]
mov byte [esp + 0x168], 0x31
mov ebx, dword [ebp + 0x10]
lea eax, [esp + 0x18]
push eax
push ebx
mov byte [esp + 0x170], 0xf
mov ecx, edi
call fcn.0042e080
push ecx
mov ecx, esp
mov dword [esp + 0x10], esp
push 0x49d294
call dword [0x490ea0]
mov byte [esp + 0x168], 0x32
lea ecx, [esp + 0x1c]
push ecx
push ebx
mov byte [esp + 0x170], 0xf
mov ecx, edi
call fcn.0042e080
mov eax, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
cmp eax, ebx
mov dword [esp + 0x18], eax
jl 0x43aa1c
mov dword [esp + 0x18], ebx
xor ecx, ecx
xor edx, edx
cmp dword [esp + 0x18], esi
mov dword [esp + 0xf0], ecx
mov dword [esp + 0xf4], edx
jle 0x43aaae
mov ebx, dword [esp + 0x18]
mov ecx, dword [ebp + 0x10]
mov edx, ebx
sub edx, esi
push edx
push esi
lea eax, [esp + 0xf4]
push eax
call dword [0x4905c0]
mov byte [esp + 0x164], 0x33
push eax
lea ecx, [esp + 0xe0]
call dword [0x490e64]
mov byte [esp + 0x164], 0xf
lea ecx, [esp + 0xec]
call dword [0x490e9c]
mov ecx, dword [ebp + 0x18]
push ecx
mov ecx, dword [ebp + 0xc]
lea edx, [esp + 0x54]
push edx
lea eax, [esp + 0xe4]
push eax
push ecx
lea edx, [esp + 0x148]
push edx
mov ecx, edi
call fcn.00436300
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov esi, ebx
mov dword [esp + 0xc], esi
jmp 0x43ab93
cmp ebx, eax
jge 0x43ab43
mov ecx, dword [ebp + 0x10]
lea eax, [esp + 0xc]
push eax
push ecx
mov ecx, edi
mov dword [esp + 0x14], ebx
call fcn.0042f2a0
mov esi, dword [esp + 0xc]
mov ecx, dword [ebp + 0x10]
mov edx, esi
sub edx, ebx
push edx
push ebx
lea eax, [esp + 0x68]
push eax
call dword [0x4905c0]
mov byte [esp + 0x164], 0x34
push eax
lea ecx, [esp + 0xe0]
call dword [0x490e64]
mov byte [esp + 0x164], 0xf
lea ecx, [esp + 0x60]
call dword [0x490e9c]
mov ecx, dword [ebp + 0x18]
push ecx
mov ecx, dword [ebp + 0xc]
lea edx, [esp + 0x54]
push edx
lea eax, [esp + 0xe4]
push eax
push ecx
lea edx, [esp + 0x158]
push edx
mov ecx, edi
call fcn.004397e0
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0xf0], ecx
mov dword [esp + 0xf4], edx
jmp 0x43ab85
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x49d104
mov dword [esp + 0x34], 1
mov dword [esp + 0x14], eax
call dword [0x490ea0]
mov byte [esp + 0x168], 0x35
mov ecx, dword [ebp + 0x10]
lea eax, [esp + 0x10]
push eax
push ecx
mov byte [esp + 0x170], 0xf
mov ecx, edi
call fcn.0042b540
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 0xf0]
mov eax, dword [esp + 0xf4]
cmp dword [ebp + 0x18], 0
je 0x43aba7
cmp dword [esp + 0x3c], ecx
jg 0x43aba3
mov dword [esp + 0x3c], ecx
add dword [esp + 0x40], eax
add dword [esp + 0x54], eax
cmp dword [esp + 0x2c], 0
je 0x43a98e
cmp dword [ebp + 0x18], 0
je 0x43ac84
mov ebx, dword [edi + 0x90]
add ebx, dword [edi + 0x8c]
mov edx, dword [edi + 0x98]
add edx, dword [edi + 0x94]
add ebx, dword [edi + 0x80]
add edx, dword [edi + 0x88]
add ebx, dword [edi + 0x7c]
add edx, dword [edi + 0x84]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x40]
add ecx, edx
add ebx, eax
cmp dword [edi + 0x74], 0
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
je 0x43ac1f
cmp dword [edi + 0x70], 6
jne 0x43ac15
add ebx, 6
add ecx, 6
jmp 0x43ac1b
add ebx, 2
add ecx, 2
mov dword [esp + 0x48], ecx
mov edx, dword [esp + 0xb4]
sub edx, dword [esp + 0xb0]
mov eax, 0x2aaaaaab
imul edx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, eax
mov eax, dword [esp + 0x10]
cmp eax, edx
jb 0x43ac56
call dword [0x48fedc]
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0xb0]
lea eax, [eax + eax*2]
lea eax, [edx + eax*8]
mov edx, dword [esp + 0x34]
mov dword [eax], edx
mov edx, dword [esp + 0x38]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x3c]
mov dword [eax + 8], edx
mov edx, dword [esp + 0x40]
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], ebx
mov dword [eax + 0x14], ecx
mov eax, dword [esp + 0x34]
add dword [esp + 0x10], eax
lea ebx, [edi + 0x24]
push 0x49d2b0
mov ecx, ebx
call dword [0x490e98]
push 1
mov ecx, edi
call fcn.00435e60
test eax, eax
je 0x43a100
mov ecx, dword [ebp + 0xc]
push ecx
mov ecx, edi
call fcn.0042cee0
jmp 0x43a100
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x49d104
mov dword [esp + 0x14], eax
call dword [0x490ea0]
mov byte [esp + 0x168], 0x36
mov eax, dword [ebp + 0x10]
lea edx, [esp + 0x10]
push edx
push eax
mov byte [esp + 0x170], 0xf
mov ecx, edi
call fcn.0042b540
mov esi, dword [esp + 0xc]
mov ecx, dword [edi + 0x2c4]
sub ecx, dword [edi + 0x2c0]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp dword [esp + 0x20], ecx
jb 0x43ad20
call dword [0x48fedc]
mov eax, dword [esp + 0x20]
mov ecx, dword [edi + 0x2c0]
lea edx, [esp + 0xa4]
lea eax, [eax + eax*2]
push edx
lea ecx, [ecx + eax*8]
call fcn.00434a00
inc dword [esp + 0x4c]
push 0x49d2c0
mov ecx, ebx
call dword [0x490e98]
push 1
mov ecx, edi
call fcn.00435e60
test eax, eax
je 0x439f71
mov edx, dword [ebp + 0xc]
push edx
mov ecx, edi
call fcn.0042cee0
jmp 0x439f71
push ecx
mov ecx, esp
mov dword [esp + 0x64], esp
push 0x49d104
mov dword [esp + 0x14], eax
call dword [0x490ea0]
mov byte [esp + 0x168], 0x37
mov ecx, dword [ebp + 0x10]
lea eax, [esp + 0x10]
push eax
push ecx
mov byte [esp + 0x170], 0xf
mov ecx, edi
call fcn.0042b540
xor eax, eax
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], eax
cmp dword [ebp + 0x18], eax
je 0x43b4e8
mov eax, 1
cmp dword [esp + 0x24], eax
mov dword [esp + 0xc], eax
jl 0x43b0ad
cmp dword [esp + 0x28], 0
mov dword [esp + 0x4c], 0
jle 0x43b09a
mov eax, dword [esp + 0xbc]
lea eax, [eax + eax*2]
add eax, eax
add eax, eax
add eax, eax
mov dword [esp + 0x14], eax
jmp 0x43ae00
mov ecx, dword [edi + 0x2c4]
sub ecx, dword [edi + 0x2c0]
mov eax, 0x2aaaaaab
imul ecx
mov ecx, dword [esp + 0x4c]
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [esp + 0xbc]
add ecx, edx
cmp ecx, eax
jb 0x43ae34
call dword [0x48fedc]
mov eax, dword [edi + 0x2c0]
add eax, dword [esp + 0x14]
lea ecx, [esp + 0xa4]
push eax
call fcn.00434a00
cmp dword [esp + 0x24], 0
mov dword [esp + 0x10], 0
jle 0x43b082
mov ecx, dword [esp + 0xc]
mov ebx, dword [esp + 0x74]
xor eax, eax
lea edx, [ecx*4 - 4]
mov ecx, dword [esp + 0x70]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x2c], edx
nop
mov esi, dword [esp + 0xb0]
mov edx, dword [esp + 0xb4]
sub edx, esi
mov eax, 0x2aaaaaab
imul edx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [esp + 0x10], eax
jb 0x43aebc
call dword [0x48fedc]
mov esi, dword [esp + 0xb0]
mov ebx, dword [esp + 0x74]
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x18]
mov edx, dword [esi + eax]
mov dword [esp + 0x34], edx
mov edx, dword [esi + eax + 4]
mov dword [esp + 0x38], edx
mov edx, dword [esi + eax + 8]
mov dword [esp + 0x3c], edx
mov edx, dword [esi + eax + 0xc]
mov dword [esp + 0x40], edx
mov edx, dword [esi + eax + 0x10]
mov eax, dword [esi + eax + 0x14]
mov dword [esp + 0x44], edx
mov edx, dword [esp + 0x34]
mov dword [esp + 0x48], eax
cmp edx, dword [esp + 0xc]
jne 0x43b05d
cmp dword [esp + 0xc], 1
jne 0x43af73
mov esi, dword [esp + 0x10]
mov eax, ebx
sub eax, ecx
sar eax, 2
cmp esi, eax
jb 0x43af21
call dword [0x48fedc]
mov ebx, dword [esp + 0x74]
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x1c]
cmp dword [ecx + edx], eax
jle 0x43af50
mov eax, ebx
sub eax, ecx
sar eax, 2
cmp esi, eax
jb 0x43af47
call dword [0x48fedc]
mov ebx, dword [esp + 0x74]
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x1c]
mov esi, dword [ecx + edx]
jmp 0x43af52
mov esi, eax
sub ebx, ecx
sar ebx, 2
cmp dword [esp + 0x10], ebx
jb 0x43af67
call dword [0x48fedc]
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x1c]
mov dword [ecx + eax], esi
jmp 0x43b055
xor eax, eax
xor esi, esi
cmp dword [esp + 0xc], esi
mov dword [esp + 0x30], eax
jle 0x43afc5
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x20], edx
mov edx, dword [esp + 0x10]
mov eax, ebx
sub eax, ecx
sar eax, 2
add edx, esi
cmp edx, eax
jb 0x43afa8
call dword [0x48fedc]
mov ebx, dword [esp + 0x74]
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x30]
add eax, dword [ecx + edx]
inc esi
add edx, 4
cmp esi, dword [esp + 0xc]
mov dword [esp + 0x30], eax
mov dword [esp + 0x20], edx
jl 0x43af89
cmp eax, dword [esp + 0x3c]
jge 0x43b05d
mov eax, dword [esp + 0x44]
sub eax, dword [esp + 0x30]
mov esi, dword [esp + 0xc]
cdq
idiv esi
sub ebx, ecx
sar ebx, 2
mov dword [esp + 0xec], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x60], edx
lea edx, [eax + esi - 1]
cmp edx, ebx
jb 0x43b004
call dword [0x48fedc]
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x60]
add dword [ecx + eax], edx
xor ebx, ebx
cmp dword [esp + 0xc], ebx
jle 0x43b055
mov esi, dword [esp + 0x1c]
jmp 0x43b020
mov ecx, dword [esp + 0x74]
mov eax, dword [esp + 0x70]
mov edx, dword [esp + 0x10]
sub ecx, eax
sar ecx, 2
add edx, ebx
cmp edx, ecx
jb 0x43b041
call dword [0x48fedc]
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0xec]
add dword [eax + esi], ecx
inc ebx
add esi, 4
cmp ebx, dword [esp + 0xc]
jl 0x43b020
mov ebx, dword [esp + 0x74]
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x10]
add dword [esp + 0x18], 0x18
mov edx, 4
add dword [esp + 0x1c], edx
add dword [esp + 0x2c], edx
inc eax
cmp eax, dword [esp + 0x24]
mov dword [esp + 0x10], eax
jl 0x43ae80
mov eax, dword [esp + 0x4c]
add dword [esp + 0x14], 0x18
inc eax
cmp eax, dword [esp + 0x28]
mov dword [esp + 0x4c], eax
jl 0x43ae00
mov eax, dword [esp + 0xc]
inc eax
cmp eax, dword [esp + 0x24]
mov dword [esp + 0xc], eax
jle 0x43add1
mov eax, 1
cmp dword [esp + 0x28], eax
mov dword [esp + 0xc], eax
jl 0x43b3b3
cmp dword [esp + 0x28], 0
mov dword [esp + 0x10], 0
jle 0x43b3a0
mov eax, dword [esp + 0xbc]
lea esi, [eax + eax*2]
add esi, esi
add esi, esi
add esi, esi
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], esi
jmp 0x43b104
mov esi, dword [esp + 0x18]
mov ecx, dword [edi + 0x2c4]
sub ecx, dword [edi + 0x2c0]
mov eax, 0x2aaaaaab
imul ecx
mov ecx, dword [esp + 0x10]
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [esp + 0xbc]
add ecx, edx
cmp ecx, eax
jb 0x43b138
call dword [0x48fedc]
mov eax, dword [edi + 0x2c0]
add eax, esi
push eax
lea ecx, [esp + 0xa8]
call fcn.00434a00
cmp dword [esp + 0x24], 0
mov dword [esp + 0x14], 0
jle 0x43b383
mov esi, dword [esp + 0x8c]
mov ecx, dword [esp + 0x88]
mov dword [esp + 0x30], 0
jmp 0x43b180
mov edx, dword [esp + 0xb4]
mov ebx, dword [esp + 0xb0]
sub edx, ebx
mov eax, 0x2aaaaaab
imul edx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [esp + 0x14], eax
jb 0x43b1c2
call dword [0x48fedc]
mov ebx, dword [esp + 0xb0]
mov esi, dword [esp + 0x8c]
mov ecx, dword [esp + 0x88]
mov eax, dword [esp + 0x30]
mov edx, dword [ebx + eax]
mov dword [esp + 0x34], edx
mov edx, dword [ebx + eax + 4]
mov dword [esp + 0x38], edx
mov edx, dword [ebx + eax + 8]
mov dword [esp + 0x3c], edx
mov edx, dword [ebx + eax + 0xc]
mov dword [esp + 0x40], edx
mov edx, dword [ebx + eax + 0x10]
mov eax, dword [ebx + eax + 0x14]
mov dword [esp + 0x44], edx
mov edx, dword [esp + 0x38]
mov dword [esp + 0x48], eax
cmp edx, dword [esp + 0xc]
jne 0x43b36b
mov eax, dword [esp + 0xc]
cmp eax, 1
jne 0x43b28a
mov ebx, dword [esp + 0x10]
mov eax, esi
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x43b22f
call dword [0x48fedc]
mov esi, dword [esp + 0x8c]
mov ecx, dword [esp + 0x88]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x1c]
cmp dword [ecx + edx], eax
jle 0x43b264
mov eax, esi
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x43b25b
call dword [0x48fedc]
mov esi, dword [esp + 0x8c]
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0x1c]
mov ebx, dword [ecx + edx]
jmp 0x43b266
mov ebx, eax
sub esi, ecx
sar esi, 2
cmp dword [esp + 0x10], esi
jb 0x43b27e
call dword [0x48fedc]
mov ecx, dword [esp + 0x88]
mov eax, dword [esp + 0x1c]
mov dword [ecx + eax], ebx
jmp 0x43b35d
xor edx, edx
xor ebx, ebx
mov dword [esp + 0x20], edx
test eax, eax
jle 0x43b2e0
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x2c], edx
mov edx, dword [esp + 0x10]
mov eax, esi
sub eax, ecx
sar eax, 2
add edx, ebx
cmp edx, eax
jb 0x43b2c3
call dword [0x48fedc]
mov esi, dword [esp + 0x8c]
mov ecx, dword [esp + 0x88]
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x20]
add edx, dword [ecx + eax]
inc ebx
add eax, 4
cmp ebx, dword [esp + 0xc]
mov dword [esp + 0x20], edx
mov dword [esp + 0x2c], eax
jl 0x43b29e
cmp edx, dword [esp + 0x48]
jge 0x43b36b
mov eax, dword [esp + 0x48]
sub eax, edx
cdq
idiv dword [esp + 0xc]
sub esi, ecx
sar esi, 2
mov ebx, edx
mov dword [esp + 0x60], eax
cmp dword [esp + 0x10], esi
jb 0x43b313
call dword [0x48fedc]
mov ecx, dword [esp + 0x88]
mov esi, dword [esp + 0x1c]
add dword [ecx + esi], ebx
xor ebx, ebx
cmp dword [esp + 0xc], ebx
jle 0x43b35d
mov ecx, dword [esp + 0x8c]
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x10]
sub ecx, eax
sar ecx, 2
add edx, ebx
cmp edx, ecx
jb 0x43b34c
call dword [0x48fedc]
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x60]
add dword [eax + esi], ecx
inc ebx
add esi, 4
cmp ebx, dword [esp + 0xc]
jl 0x43b322
mov esi, dword [esp + 0x8c]
mov ecx, dword [esp + 0x88]
mov eax, dword [esp + 0x14]
add dword [esp + 0x30], 0x18
inc eax
cmp eax, dword [esp + 0x24]
mov dword [esp + 0x14], eax
jl 0x43b180
mov eax, dword [esp + 0x10]
add dword [esp + 0x18], 0x18
add dword [esp + 0x1c], 4
inc eax
cmp eax, dword [esp + 0x28]
mov dword [esp + 0x10], eax
jl 0x43b100
mov eax, dword [esp + 0xc]
inc eax
cmp eax, dword [esp + 0x28]
mov dword [esp + 0xc], eax
jle 0x43b0c0
mov ecx, dword [edi + 0x2dc]
sub ecx, dword [edi + 0x2d8]
mov esi, dword [esp + 0x128]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add esi, esi
add eax, edx
cmp esi, eax
jb 0x43b3e3
call dword [0x48fedc]
mov eax, dword [edi + 0x2d8]
lea ecx, [esp + 0x64]
lea edx, [esi + esi*2]
push ecx
lea ecx, [eax + edx*8]
call fcn.00432c90
mov ecx, dword [edi + 0x2dc]
sub ecx, dword [edi + 0x2d8]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
inc esi
add ecx, edx
cmp esi, ecx
jb 0x43b421
call dword [0x48fedc]
mov ecx, dword [edi + 0x2d8]
lea edx, [esp + 0x7c]
lea eax, [esi + esi*2]
push edx
lea ecx, [ecx + eax*8]
call fcn.00432c90
xor esi, esi
cmp dword [esp + 0x24], esi
jle 0x43b478
mov eax, dword [esp + 0x70]
mov ebx, dword [esp + 0xd0]
lea ebx, [ebx]
mov edx, dword [esp + 0x74]
sub edx, eax
sar edx, 2
cmp esi, edx
jb 0x43b467
call dword [0x48fedc]
mov eax, dword [esp + 0x70]
add ebx, dword [eax + esi*4]
inc esi
cmp esi, dword [esp + 0x24]
jl 0x43b450
mov dword [esp + 0xd0], ebx
mov ebx, dword [esp + 0xd4]
xor esi, esi
cmp dword [esp + 0x28], esi
jle 0x43b4b7
mov eax, dword [esp + 0x88]
mov edi, edi
mov ecx, dword [esp + 0x8c]
sub ecx, eax
sar ecx, 2
cmp esi, ecx
jb 0x43b4ad
call dword [0x48fedc]
mov eax, dword [esp + 0x88]
add ebx, dword [eax + esi*4]
inc esi
cmp esi, dword [esp + 0x28]
jl 0x43b490
cmp dword [edi + 0x70], 6
mov eax, dword [edi + 0x74]
mov ecx, dword [esp + 0xd0]
jne 0x43b4ca
lea eax, [eax + eax*2]
add eax, eax
push 1
add ecx, eax
push ecx
push 0
lea edx, [esp + 0xe4]
push edx
mov ecx, edi
add ebx, eax
call fcn.0042e4c0
mov esi, eax
jmp 0x43b4fa
mov esi, dword [ebx + 8]
mov eax, dword [esp + 0x1c]
sub esi, dword [ebx]
mov dword [esp + 0xd4], eax
mov ebx, eax
push 0x49d294
lea ecx, [edi + 0x24]
call dword [0x490e98]
push 1
mov ecx, edi
call fcn.00435e60
test eax, eax
je 0x43b520
mov ecx, dword [ebp + 0xc]
push ecx
mov ecx, edi
call fcn.0042cee0
mov edi, dword [ebp + 8]
mov dword [edi], esi
mov dword [edi + 4], ebx
mov byte [esp + 0x164], 0xe
lea ecx, [esp + 0xd8]
call dword [0x490e9c]
mov byte [esp + 0x164], 0xd
lea ecx, [esp + 0x130]
call dword [0x490e9c]
mov byte [esp + 0x164], 0xc
lea ecx, [esp + 0xdc]
call dword [0x490e9c]
mov byte [esp + 0x164], 0xb
lea ecx, [esp + 0x12c]
call dword [0x490e9c]
mov byte [esp + 0x164], 2
lea ecx, [esp + 0xe0]
call dword [0x490e9c]
mov byte [esp + 0x164], 0x38
mov eax, dword [esp + 0x70]
xor esi, esi
cmp eax, esi
je 0x43b5ac
push eax
call fcn.0047e8ee
add esp, 4
mov dword [esp + 0x70], esi
mov dword [esp + 0x74], esi
mov dword [esp + 0x78], esi
mov byte [esp + 0x164], 1
mov edx, dword [esp + 0x64]
push edx
call fcn.0047e8ee
add esp, 4
mov byte [esp + 0x164], 0x3a
mov eax, dword [esp + 0x88]
cmp eax, esi
je 0x43b5e9
push eax
call fcn.0047e8ee
add esp, 4
mov dword [esp + 0x88], esi
mov dword [esp + 0x8c], esi
mov dword [esp + 0x90], esi
mov byte [esp + 0x164], 0
mov eax, dword [esp + 0x7c]
push eax
call fcn.0047e8ee
add esp, 4
mov dword [esp + 0x164], 0x3c
mov eax, dword [esp + 0xb0]
cmp eax, esi
je 0x43b632
push eax
call fcn.0047e8ee
add esp, 4
mov dword [esp + 0xb0], esi
mov dword [esp + 0xb4], esi
mov dword [esp + 0xb8], esi
jmp 0x43b708
mov edi, dword [ebp + 8]
mov dword [edi], esi
mov dword [edi + 4], esi
mov byte [esp + 0x164], 4
mov eax, dword [esp + 0x70]
cmp eax, esi
je 0x43b66d
push eax
call fcn.0047e8ee
add esp, 4
mov dword [esp + 0x70], esi
mov dword [esp + 0x74], esi
mov dword [esp + 0x78], esi
mov byte [esp + 0x164], 1
mov edx, dword [esp + 0x64]
push edx
call fcn.0047e8ee
add esp, 4
mov byte [esp + 0x164], 6
mov eax, dword [esp + 0x88]
cmp eax, esi
je 0x43b6aa
push eax
call fcn.0047e8ee
add esp, 4
mov dword [esp + 0x88], esi
mov dword [esp + 0x8c], esi
mov dword [esp + 0x90], esi
mov byte [esp + 0x164], 0
mov eax, dword [esp + 0x7c]
push eax
call fcn.0047e8ee
add esp, 4
mov dword [esp + 0x164], 8
mov eax, dword [esp + 0xb0]
cmp eax, esi
je 0x43b6f3
push eax
call fcn.0047e8ee
add esp, 4
mov dword [esp + 0xb0], esi
mov dword [esp + 0xb4], esi
mov dword [esp + 0xb8], esi
mov dword [esp + 0x164], 0xffffffff
mov ecx, dword [esp + 0xa4]
push ecx
call fcn.0047e8ee
mov ecx, dword [esp + 0x160]
add esp, 4
mov eax, edi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0x14