Function at 0x4257d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0xa30
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov ebx, 0x9abe8a5c
mov dword [esp + 0xa28], eax
mov dword [esp + 0xa24], ecx
mov dword [esp + 0xa20], edx
mov dword [esp + 0xa1c], esi
mov dword [esp + 0xa18], edi
mov eax, dword [0x4a06c8]
inc eax
mov dword [0x4a06c8], eax
mov ecx, dword [0x499880]
imul ecx, eax
mov dword [0x499880], ecx
mov eax, esp
mov dword [eax + 4], 8
mov dword [eax], 0x776
mov dword [esp + 0x128], ebx
call fcn.00437eb0
mov dword [esp + 0xa14], eax
mov eax, dword [0x4a8ab4]
dec eax
mov dword [0x4a8ab4], eax
mov ecx, dword [0x49bfd8]
and eax, ecx
xor eax, 0x89b8
mov si, word [0x4b3fa2]
mov cx, si
imul ecx, eax
mov si, cx
mov word [0x4b3fa2], si
mov eax, dword [esp + 0xa14]
mov ecx, dword [esp + 0xa18]
mov edx, esp
mov dword [edx + 4], eax
mov dword [edx], ecx
call fcn.00455490
mov dword [esp + 0x9ec], eax
mov eax, dword [0x49ce28]
sar eax, 2
and eax, 0xb84274c3
mov ecx, dword [esp + 0x128]
cmp ecx, eax
jne 0x4258e5
mov eax, dword [0x49fe74]
mov ecx, eax
dec ecx
mov dword [0x49fe74], ecx
add eax, 0xcf94e5d7
mov ecx, dword [0x4a4344]
imul ecx, eax
mov dword [0x4a4344], ecx
jmp 0x4258f4
mov eax, dword [0x4981a4]
add eax, 0x2a4a161e
mov dword [0x4981a4], eax
mov eax, dword [esp + 0xa14]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 8
call fcn.0044b770
mov eax, dword [0x4981e0]
imul eax, eax, 0xb0e60c66
mov dword [0x4981e0], eax
cmp dword [esp + 0x9ec], 0
jne 0x425bc4
mov ax, word [0x4ad286]
movsx ecx, ax
and ecx, 0x4448d132
or ecx, 0xf25bd9ff
cmp ecx, 0xb5bf5924
jge 0x42595a
mov eax, dword [0x4a789c]
imul eax, eax, 0xb7af50cc
mov dword [0x4a789c], eax
cmp dword [esp + 0xa28], 0
je 0x425a7a
mov eax, dword [0x4a6fa0]
dec eax
mov dword [0x4a6fa0], eax
mov cx, word [0x4b3014]
mov dx, cx
inc edx
mov si, dx
mov word [0x4b3014], si
movsx edx, cx
and edx, 0x9abfa4be
cmp eax, edx
je 0x4259a3
mov dword [0x4a274c], 0x282010a1
mov eax, 0xb56fa147
mov ecx, dword [esp + 0xa20]
mov dword [esp + 0x124], eax
call fcn.00414b10
mov eax, dword [0x49bd64]
mov ecx, dword [esp + 0x124]
cmp ecx, eax
je 0x425a42
mov eax, 0x6f9a4d51
mov ecx, dword [0x4aa32c]
dec ecx
mov dword [0x4aa32c], ecx
imul ecx, ecx, 0x19216c15
mov edx, dword [0x4a35ec]
sub ecx, edx
cmp eax, ecx
jne 0x425a0c
mov eax, dword [0x49ecb0]
imul eax, eax, 0xaa9c17c2
mov dword [0x498468], eax
jmp 0x425a3d
mov ax, word [0x4aec5c]
mov cx, ax
inc ecx
mov dx, cx
mov word [0x4aec5c], dx
movsx ecx, ax
imul ecx, ecx, 0xc64eeeb8
and ecx, 0xac14c360
mov esi, dword [0x4aa554]
or esi, ecx
mov dword [0x4aa554], esi
jmp 0x425a75
mov ax, word [0x4b3750]
movsx ecx, ax
shl ecx, 5
mov ax, word [0x4addb8]
mov dx, ax
dec edx
mov si, dx
mov word [0x4addb8], si
movsx edx, ax
sub ecx, edx
mov edx, dword [0x49b300]
sub edx, ecx
mov dword [0x49b300], edx
jmp 0x42816d
mov eax, 0x82b1fbf1
mov cx, word [0x4aabfa]
mov dx, cx
inc edx
mov si, dx
mov word [0x4aabfa], si
movsx edx, cx
mov edi, dword [0x4a2cd4]
imul edi, edi, 0x7c1670ca
or edx, edi
cmp eax, edx
jne 0x425ad1
mov ax, word [0x4ab678]
movsx ecx, ax
not ecx
add ecx, 0x3ee4ac0e
mov edx, dword [0x49ac0c]
sub edx, ecx
mov dword [0x49ac0c], edx
jmp 0x425b1c
mov eax, dword [0x497f7c]
xor eax, 0xc1e04203
cmp eax, 0x1ad484e8
jge 0x425b17
mov eax, dword [0x4a89e8]
mov ecx, eax
dec ecx
mov dword [0x4a89e8], ecx
add eax, 0xf581aaba
mov ecx, dword [0x4a5ba4]
xor eax, ecx
mov dx, word [0x4b1914]
mov cx, dx
add ecx, eax
mov dx, cx
mov word [0x4b1914], dx
jmp 0x425b1c
mov eax, dword [esp + 0xa20]
mov ecx, dword [esp + 0xa1c]
mov edx, esp
mov dword [edx + 4], eax
mov dword [edx], ecx
call fcn.004031f0
mov dword [esp + 0x9e8], eax
mov eax, dword [0x4a79f4]
dec eax
mov dword [0x4a79f4], eax
mov ecx, dword [0x49a9fc]
add ecx, 0x46828549
xor eax, ecx
mov dword [0x49b7c8], eax
cmp dword [esp + 0x9e8], 0
jg 0x425baa
mov ax, word [0x4abb50]
movsx ecx, ax
xor ecx, 0x29868010
or ecx, 0x56796ee4
mov edx, dword [0x4a7924]
add edx, ecx
mov dword [0x4a7924], edx
mov ecx, dword [esp + 0xa20]
call fcn.00414b10
mov ecx, dword [0x4a6630]
and ecx, 0xb02080aa
mov dword [0x4a6630], ecx
mov ax, word [0x4aafe2]
movsx ecx, ax
add ecx, 0xb64072b9
mov dword [0x4a85c4], ecx
jmp 0x42816d
mov eax, 0x22cd18e7
mov ecx, dword [0x49b530]
add ecx, 0xcbc2e759
mov edx, dword [0x4a8e78]
xor ecx, edx
xor ecx, 0x7f036176
mov dword [0x4a8e78], ecx
mov ecx, dword [0x4a7498]
mov edx, ecx
dec edx
mov dword [0x4a7498], edx
mov edx, dword [0x4a066c]
lea ecx, [ecx + edx + 0x380b78db]
mov dword [0x4a066c], ecx
mov ecx, dword [0x49e844]
imul ecx, ecx, 0xae57ce33
mov edx, dword [0x4a2b00]
or edx, ecx
mov dword [0x4a2b00], edx
mov ecx, dword [0x49ffe8]
mov edx, ecx
dec edx
mov dword [0x49ffe8], edx
and ecx, 0x401
mov si, word [0x4aac76]
mov dx, si
lea ecx, [edx + ecx + 0x9be]
mov si, cx
mov word [0x4aac76], si
mov ecx, dword [0x4a6bac]
shl ecx, 9
sub ecx, 0xde80707c
cmp eax, ecx
je 0x425c89
mov ax, word [0x4afee6]
mov cx, ax
imul ecx, ecx, 0x42000
mov ax, cx
mov word [0x4afee6], ax
jmp 0x425c98
mov eax, dword [0x4a5f74]
add eax, 0xc6a3c12d
mov dword [0x4a5f74], eax
mov eax, dword [0x49bb68]
mov ecx, dword [0x49a380]
mov edx, ecx
dec edx
mov dword [0x49a380], edx
mov edx, 0x9c8a6980
sub edx, ecx
or eax, edx
mov si, word [0x4abb7e]
mov cx, si
or ecx, eax
mov si, cx
mov word [0x4abb7e], si
mov eax, dword [0x4a39f0]
or eax, 0xee2fd332
mov dword [0x4a39f0], eax
lea ecx, [esp + 0x64c]
call fcn.00401b60
mov ecx, dword [0x49fb4c]
mov si, word [0x4b0c28]
mov dx, si
mov edi, edx
inc edi
mov si, di
mov word [0x4b0c28], si
xor ecx, edx
mov si, word [0x4b167a]
mov dx, si
imul edx, ecx
mov si, dx
mov word [0x4b167a], si
mov ecx, dword [0x4a76d4]
or ecx, 0x29255143
mov dword [0x4a76d4], ecx
mov si, word [0x4addc2]
mov cx, si
imul ecx, ecx, 0x2220810
mov si, cx
mov word [0x4addc2], si
mov ecx, dword [0x49d2f4]
dec ecx
mov dword [0x49d2f4], ecx
or ecx, 0x8e274bba
mov edx, dword [0x4a22a0]
sub edx, ecx
mov dword [0x4a22a0], edx
mov dword [esp + 0x214], 0
mov dword [esp + 0x210], 0
mov ecx, dword [0x49cff4]
mov si, word [0x4ad0e2]
mov dx, si
add edx, ecx
mov si, dx
mov word [0x4ad0e2], si
mov dword [0x4a7624], 0x72002081
mov dword [esp + 0x208], 0xffffffff
mov dword [esp + 0x204], 0xffffffff
mov ecx, dword [0x4a6784]
xor ecx, 0x6bace964
mov dword [0x4a6784], ecx
mov dword [esp + 0x200], 0x50
mov ecx, dword [0x49c250]
xor ecx, 0xa01a9db9
mov dword [0x49c250], ecx
mov byte [esp + 0x1ff], 0
mov si, word [0x4b0ad6]
mov cx, si
add ecx, 0xcaf0bf06
mov si, cx
mov word [0x4b0ad6], si
mov ecx, esp
mov dword [ecx], 0
mov dword [esp + 0x120], eax
call fcn.00450db0
add eax, 0x258
adc edx, 0
mov dword [esp + 0x210], eax
mov dword [esp + 0x214], edx
mov si, word [0x4b3fd0]
mov ax, si
inc eax
mov bx, ax
mov word [0x4b3fd0], bx
movsx eax, si
and eax, 0xef228f2d
cmp eax, 0xfefdbe5b
je 0x425e76
mov ax, word [0x4b128c]
mov cx, ax
or ecx, 0xeadb
mov ax, cx
mov word [0x4b128c], ax
mov eax, 0x4922ff93
mov byte [esp + 0x67c], 0
mov ecx, dword [0x4a4910]
and ecx, 0xff7f772d
mov dword [0x4a4910], ecx
mov ecx, dword [esp + 0xa18]
mov edx, esp
mov dword [edx], ecx
mov dword [esp + 0x11c], eax
call fcn.00452080
mov dword [esp + 0x220], eax
mov eax, dword [0x4a507c]
mov ecx, dword [esp + 0x11c]
cmp ecx, eax
jne 0x425f40
mov eax, dword [0x4a4efc]
shl eax, 9
imul eax, eax, 0xcdfc684b
or eax, 0xca229fbe
cmp eax, 0xbc6f9b2c
jl 0x425f2c
mov ax, word [0x4abac4]
movsx ecx, ax
mov edx, dword [0x49b2d8]
mov esi, edx
dec esi
mov dword [0x49b2d8], esi
and ecx, edx
mov ax, word [0x4b0c30]
mov dx, ax
inc edx
mov ax, dx
mov word [0x4b0c30], ax
movsx edx, ax
cmp ecx, edx
je 0x425f22
jmp 0x425f27
jmp 0x425f27
jmp 0x425f3b
mov eax, dword [0x49ec24]
or eax, 0x5a92d5fe
mov dword [0x49ec24], eax
jmp 0x425f4f
mov eax, dword [0x49c398]
or eax, 0xa3f2867
mov dword [0x49c398], eax
cmp dword [esp + 0x220], 0x7f
jle 0x425fe5
mov eax, 0x87f57f7a
mov cx, word [0x4acc8c]
mov dx, cx
inc edx
mov si, dx
mov word [0x4acc8c], si
movsx edx, cx
mov edi, dword [0x49f064]
dec edi
mov dword [0x49f064], edi
sub edx, edi
add edx, 0xaabf8f69
cmp eax, edx
jge 0x425fd1
mov eax, 0xee1e5a4
mov cx, word [0x4b1496]
mov dx, cx
inc edx
mov cx, dx
mov word [0x4b1496], cx
movsx edx, cx
cmp eax, edx
jne 0x425fcc
mov eax, dword [0x4a52a8]
imul eax, eax, 0x85c90d71
mov dword [0x4a52a8], eax
jmp 0x425fe0
mov eax, dword [0x49ce0c]
or eax, 0x6adf6f73
mov dword [0x49ce0c], eax
jmp 0x4280ca
mov eax, dword [0x4a9a1c]
xor eax, 0x880dc82e
mov dword [0x4a9a1c], eax
mov eax, dword [esp + 0xa18]
mov ecx, esp
mov dword [ecx + 4], eax
lea eax, [esp + 0x944]
mov dword [ecx], eax
call fcn.00455280
mov dx, word [0x4ae828]
mov cx, dx
mov esi, ecx
inc esi
mov dx, si
mov word [0x4ae828], dx
mov dx, word [0x4b2dac]
mov si, dx
lea ecx, [esi + ecx + 1]
mov dx, cx
mov word [0x4b2dac], dx
mov ecx, dword [esp + 0x220]
sub ecx, 1
mov dword [esp + 0x21c], ecx
mov dword [esp + 0x118], eax
mov eax, dword [esp + 0x21c]
mov ecx, dword [esp + 0x220]
sub ecx, 6
cmp eax, ecx
jl 0x42616f
mov eax, dword [0x4a26c8]
inc eax
mov dword [0x4a26c8], eax
add eax, 0xbabc4d55
cmp eax, 0x2285d55
jg 0x426098
mov eax, dword [0x4a0a48]
add eax, 0x4a087a7c
mov dword [0x4a0a48], eax
mov eax, dword [esp + 0x21c]
movsx eax, byte [esp + eax + 0x944]
cmp eax, 0x3a
jne 0x42613e
mov eax, dword [0x4a352c]
add eax, 0x60a74c9e
mov dword [0x4a352c], eax
mov eax, dword [esp + 0x21c]
mov byte [esp + eax + 0x944], 0
mov eax, dword [0x4a7bd0]
mov ecx, 0x5714896f
sub ecx, eax
mov dx, word [0x4b26aa]
mov ax, dx
add eax, ecx
mov dx, ax
mov word [0x4b26aa], dx
mov eax, dword [esp + 0x21c]
mov dword [esp + 0x220], eax
mov eax, dword [0x4a3740]
add eax, 0xfb400369
mov dword [0x4a74e8], eax
mov eax, dword [esp + 0x21c]
lea ecx, [esp + 0x944]
lea eax, [eax + ecx + 1]
mov ecx, esp
mov dword [ecx], eax
call fcn.004553da
mov dword [esp + 0x200], eax
mov dword [0x49efa8], 0x63cc1e2b
jmp 0x42616f
mov ax, word [0x4ab944]
movsx ecx, ax
sar ecx, 7
mov edx, dword [0x4a8340]
imul edx, ecx
mov dword [0x4a8340], edx
mov eax, dword [esp + 0x21c]
add eax, 0xffffffff
mov dword [esp + 0x21c], eax
jmp 0x426055
mov eax, 0x92f446ba
mov cx, word [0x4b12ae]
movsx edx, cx
sub eax, edx
cmp eax, 0x550c1007
je 0x42619f
mov eax, dword [0x4aa348]
xor eax, 0x45f1d745
mov dword [0x4aa348], eax
jmp 0x4261af
mov eax, dword [0x499270]
imul eax, eax, 0xffbbffff
mov dword [0x499270], eax
mov dword [esp + 0x21c], 0
mov eax, dword [esp + 0x21c]
cmp eax, dword [esp + 0x220]
jg 0x4263ea
mov ax, word [0x4ac49e]
movsx ecx, ax
xor ecx, 0xceec3c7f
mov edx, dword [0x499e2c]
add edx, ecx
mov dword [0x499e2c], edx
mov ecx, dword [esp + 0x21c]
mov bl, byte [esp + ecx + 0x944]
mov byte [esp + ecx + 0x8a0], bl
mov ecx, dword [0x49e8b0]
mov edx, ecx
dec edx
mov dword [0x49e8b0], edx
and ecx, 0x8b76ca7e
xor ecx, 0xbfcfc77d
cmp ecx, 0x2a2236b0
jle 0x426269
mov eax, 0xaa1c3c11
mov ecx, dword [0x49ca0c]
cmp eax, ecx
jl 0x426264
mov ax, word [0x4abaee]
mov cx, ax
inc ecx
mov dx, cx
mov word [0x4abaee], dx
movsx ecx, ax
mov esi, dword [0x4a9560]
lea ecx, [ecx + esi + 0x2f9fb22b]
mov dword [0x4a9560], ecx
jmp 0x42629f
mov eax, 0x399fadbe
mov ecx, dword [0x4a6dec]
shl ecx, 3
mov edx, dword [0x49d430]
shl edx, 0xa
imul ecx, edx
cmp eax, ecx
jge 0x42629a
mov eax, dword [0x4a6004]
and eax, 0xafebb8f3
mov dword [0x4a6004], eax
jmp 0x42629f
mov eax, dword [esp + 0x21c]
movsx eax, byte [esp + eax + 0x8a0]
cmp eax, 0x2f
jne 0x426392
mov eax, dword [0x49e478]
xor eax, 0x210d86dd
mov dword [0x49e478], eax
mov eax, dword [esp + 0x21c]
mov byte [esp + eax + 0x8a0], 0
mov dword [0x4a36b4], 0xad3ddfe6
mov eax, dword [esp + 0x21c]
mov dword [esp + 0x218], eax
mov eax, dword [esp + 0x218]
cmp eax, dword [esp + 0x220]
jg 0x426375
mov eax, 0x1f6b6ee0
mov ecx, dword [0x49fb28]
imul ecx, ecx, 0x1cbe310
mov dword [0x49fb28], ecx
mov ecx, dword [esp + 0x218]
mov dl, byte [esp + ecx + 0x944]
mov esi, dword [esp + 0x21c]
sub ecx, esi
mov byte [esp + ecx + 0x67c], dl
mov ecx, dword [0x4a38b4]
shl ecx, 4
cmp eax, ecx
jle 0x42635a
mov eax, dword [0x49c12c]
mov ecx, dword [0x4a6e40]
sub ecx, eax
mov dword [0x4a6e40], ecx
jmp 0x42635f
mov eax, dword [esp + 0x218]
add eax, 1
mov dword [esp + 0x218], eax
jmp 0x4262ed
mov ax, word [0x4ab0c4]
mov cx, ax
or ecx, 0x6ffb
mov ax, cx
mov word [0x4ab0c4], ax
jmp 0x4263ea
mov eax, 0x14323c00
mov ecx, dword [0x499b38]
xor ecx, 0xffffffff
add ecx, 0xc485c048
add ecx, 0x73661d3
cmp eax, ecx
jle 0x4263cf
mov eax, dword [0x4a0c60]
sar eax, 7
xor eax, 0x7534951e
mov ecx, dword [0x497a4c]
add ecx, eax
mov dword [0x497a4c], ecx
jmp 0x4263d4
mov eax, dword [esp + 0x21c]
add eax, 1
mov dword [esp + 0x21c], eax
jmp 0x4261ba
lea eax, [esp + 0x67c]
mov ecx, dword [0x49abe0]
and ecx, 0x8a6afd4
mov dword [0x49abe0], ecx
mov ecx, esp
mov dword [ecx], eax
call fcn.00452080
mov ecx, dword [esp + 0xa1c]
mov edx, esp
mov dword [edx], ecx
mov dword [esp + 0x114], eax
call fcn.00452080
mov ecx, dword [esp + 0x114]
add ecx, eax
cmp ecx, 0x1ff
jbe 0x426474
mov eax, 0x6f328f47
mov ecx, dword [0x4a1928]
imul ecx, ecx, 0x3145564
sub ecx, 0xb935abc6
cmp eax, ecx
jle 0x42646f
mov ax, word [0x4b155a]
mov cx, ax
and ecx, 0xe6da
mov ax, cx
mov word [0x4b155a], ax
jmp 0x4280ca
mov eax, dword [0x4a0a54]
add eax, 0xd31707da
mov dword [0x4a0a54], eax
mov eax, dword [esp + 0xa1c]
mov ecx, esp
mov dword [ecx + 4], eax
lea eax, [esp + 0x67c]
mov dword [ecx], eax
call fcn.00455290
mov ecx, dword [0x498ea0]
inc ecx
mov dword [0x498ea0], ecx
mov dword [0x4a893c], ecx
mov dword [esp + 0x218], 0
mov dx, word [0x4b2fdc]
movsx ecx, dx
lea ecx, [ecx*4 - 0x1179af1e]
mov esi, dword [0x4a865c]
xor ecx, esi
xor ecx, 0xec6cb24f
mov dword [0x4a865c], ecx
mov ecx, esp
mov dword [ecx + 4], 5
mov dword [ecx], 0x114a
mov dword [esp + 0x110], eax
call fcn.00437eb0
mov dword [esp + 0xa10], eax
mov dx, word [0x4b38d0]
mov ax, dx
xor eax, 0xf9f7
mov dx, ax
mov word [0x4b38d0], dx
mov eax, dword [esp + 0xa10]
mov ecx, esp
mov dword [ecx], eax
lea ecx, [esp + 0x64c]
call fcn.0042a7d0
sub esp, 4
mov ecx, dword [0x4a2198]
mov esi, ecx
inc esi
mov dword [0x4a2198], esi
add ecx, 0xcaa351d7
and ecx, 0x15843556
mov esi, dword [0x4a1f44]
imul esi, ecx
mov dword [0x4a1f44], esi
mov ecx, dword [esp + 0xa10]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], 5
mov dword [esp + 0x10c], eax
call fcn.0044b770
mov dx, word [0x4aace8]
movsx eax, dx
sar eax, 9
mov ecx, dword [0x4a5a84]
imul ecx, eax
mov dword [0x4a5a84], ecx
mov eax, dword [esp + 0xa20]
mov ecx, eax
call fcn.004396e0
cmp eax, 0
je 0x426825
mov dword [0x4a2484], 0x68d4163a
mov eax, esp
mov dword [eax + 4], 0xc
mov dword [eax], 0x5d7d
call fcn.00437eb0
mov dword [esp + 0xa0c], eax
mov cx, word [0x4b3fb6]
mov ax, cx
and eax, 0x4f7f
mov cx, ax
mov word [0x4b3fb6], cx
mov ecx, dword [esp + 0xa20]
mov eax, dword [esp + 0xa0c]
mov edx, esp
mov dword [edx], eax
lea eax, [esp + 0x1e8]
mov dword [esp + 0x108], ecx
mov ecx, eax
mov dword [esp + 0x104], eax
call fcn.0044e870
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x104]
mov dword [ecx], edx
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x108]
mov dword [esp + 0x100], eax
call fcn.00444d90
sub esp, 8
mov dword [esp + 0x21c], eax
mov ecx, dword [esp + 0x104]
call fcn.0041f990
mov si, word [0x4affe8]
movsx eax, si
mov ecx, dword [0x4a00f8]
mov edx, ecx
inc edx
mov dword [0x4a00f8], edx
add eax, ecx
mov ecx, dword [0x4a7034]
and eax, ecx
and eax, 0xa05c060d
mov dword [0x4a7034], eax
mov eax, dword [esp + 0xa0c]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0xc
call fcn.0044b770
mov eax, dword [0x498968]
add eax, 0x8f075890
mov dword [0x498968], eax
cmp dword [esp + 0x21c], 0
jne 0x4267fe
mov eax, dword [0x4a6470]
mov ecx, eax
dec ecx
mov dword [0x4a6470], ecx
mov dx, word [0x4af3e2]
mov cx, dx
lea eax, [eax + ecx - 0x63818ce2]
mov dx, ax
mov word [0x4af3e2], dx
mov dword [esp + 0x218], 1
mov eax, dword [0x4a5810]
sar eax, 7
mov dx, word [0x4ab716]
movsx ecx, dx
sub eax, ecx
mov ecx, dword [0x4a7fe8]
sar ecx, 4
cmp eax, ecx
jne 0x426723
mov eax, dword [0x4a1810]
and eax, 0xdab7faeb
mov dword [0x4a1810], eax
mov eax, dword [esp + 0xa20]
mov ecx, esp
mov dword [ecx], 0
mov ecx, eax
mov dword [esp + 0xfc], eax
call fcn.0041c080
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0xb
mov ecx, dword [esp + 0xfc]
call fcn.00437bc0
sub esp, 8
mov ecx, dword [0x49d994]
and ecx, 0xe0d99390
mov dword [0x49d994], ecx
mov ecx, esp
mov dword [ecx + 4], 6
mov dword [ecx], 0x62ba
mov dword [esp + 0xf8], eax
call fcn.00437eb0
mov dword [esp + 0xa08], eax
mov eax, dword [0x498350]
not eax
mov ecx, dword [0x49bf30]
or eax, ecx
or eax, 0xc16c6094
mov dword [0x49bf30], eax
mov eax, dword [esp + 0xa08]
mov ecx, esp
mov dword [ecx], eax
lea ecx, [esp + 0x64c]
call fcn.0042a7d0
sub esp, 4
mov ecx, dword [0x4a9008]
add ecx, 0xe08ce5b4
mov dword [0x4a9008], ecx
mov ecx, dword [esp + 0xa08]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], 6
mov dword [esp + 0xf4], eax
call fcn.0044b770
mov dword [0x4a6fb8], 0x824bbd6a
mov eax, dword [0x4a5360]
mov ecx, eax
inc ecx
mov dword [0x4a5360], ecx
imul eax, eax, 0x905efefd
and eax, 0x49344c5b
mov ecx, dword [0x49b334]
sub ecx, eax
mov dword [0x49b334], ecx
mov eax, 0x860e1b72
mov ecx, dword [0x49fe50]
mov edx, dword [0x4a4aa0]
inc edx
mov dword [0x4a4aa0], edx
add edx, 0x6aa447c7
or ecx, edx
cmp eax, ecx
jle 0x426868
mov eax, dword [0x49beec]
mov cx, word [0x4abb5c]
mov dx, cx
or edx, eax
mov cx, dx
mov word [0x4abb5c], cx
mov eax, 0x5ccbba89
mov ecx, esp
lea edx, [esp + 0x67c]
mov dword [ecx], edx
lea ecx, [esp + 0x1d4]
mov dword [esp + 0xf0], ecx
mov dword [esp + 0xec], eax
call fcn.0040e460
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xf0]
mov dword [ecx], edx
lea ecx, [esp + 0x64c]
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xe4], eax
call fcn.0042a8d0
sub esp, 4
mov ecx, dword [esp + 0xf0]
mov dword [esp + 0xe0], eax
call fcn.00449bc0
mov si, word [0x4b37ca]
movsx eax, si
mov ecx, dword [0x498ca8]
xor ecx, eax
mov dword [0x498ca8], ecx
mov eax, esp
mov dword [eax + 4], 0x32
mov dword [eax], 0x3b
call fcn.00437eb0
mov dword [esp + 0xa04], eax
mov si, word [0x4b18f2]
movsx eax, si
mov ecx, 0xe318b8bc
sub ecx, eax
and ecx, 0x906a2fc1
mov dword [0x4980bc], ecx
mov eax, dword [esp + 0xa04]
mov ecx, esp
mov dword [ecx], eax
lea eax, [esp + 0x1c0]
mov ecx, eax
mov dword [esp + 0xdc], eax
call fcn.0040e460
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xdc]
mov dword [ecx], edx
mov ecx, dword [esp + 0xe8]
mov dword [esp + 0xd8], eax
call fcn.0042a8d0
sub esp, 4
mov ecx, dword [esp + 0xdc]
mov dword [esp + 0xd4], eax
call fcn.00449bc0
mov eax, dword [0x4a9c10]
imul eax, eax, 0x540a3fa6
mov ecx, dword [esp + 0xec]
cmp ecx, eax
jne 0x426a30
mov eax, dword [0x49a15c]
not eax
imul eax, eax, 0x2073034b
or eax, 0xa566e58
mov ecx, dword [0x4a9374]
shl ecx, 7
sub ecx, 0xf58a6509
and ecx, 0x34a73676
cmp eax, ecx
jge 0x426a0e
mov eax, dword [0x4a681c]
mov ecx, eax
dec ecx
mov dword [0x4a681c], ecx
mov ecx, dword [0x49c0ac]
imul ecx, ecx, 0x11665f07
neg ecx
lea eax, [eax + ecx - 1]
mov ecx, dword [0x4a9094]
mov edx, dword [0x4a9034]
xor edx, 0xffffffff
xor ecx, edx
xor ecx, 0x72d68662
cmp eax, ecx
jg 0x426a04
jmp 0x426a09
jmp 0x426a09
jmp 0x426a2b
mov eax, dword [0x4a646c]
dec eax
mov dword [0x4a646c], eax
mov ecx, dword [0x497bd4]
or eax, ecx
or eax, 0xc3a38d
mov dword [0x497bd4], eax
jmp 0x426a30
mov eax, 0xb9f95e6a
mov ecx, dword [esp + 0xa04]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], 0x32
mov dword [esp + 0xd0], eax
call fcn.0044b770
mov eax, dword [0x49f654]
imul eax, eax, 0x1eb2f071
mov dword [0x49f654], eax
mov eax, esp
lea ecx, [esp + 0x8a0]
mov dword [eax], ecx
lea eax, [esp + 0x1ac]
mov ecx, eax
mov dword [esp + 0xcc], eax
call fcn.0040e460
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xcc]
mov dword [ecx], edx
lea ecx, [esp + 0x64c]
mov dword [esp + 0xc8], eax
call fcn.0042a8d0
sub esp, 4
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0xc4], eax
call fcn.00449bc0
mov eax, dword [0x49a384]
imul eax, eax, 0x2b051bab
sub eax, 0x747ce76c
mov ecx, dword [esp + 0xd0]
cmp ecx, eax
jl 0x426af1
mov ax, word [0x4b0398]
mov cx, ax
or ecx, 0xf86f
mov ax, cx
mov word [0x4b0398], ax
cmp dword [esp + 0x218], 0
je 0x426d7b
mov dword [0x4a055c], 0x988b1466
mov eax, esp
mov dword [eax + 4], 0x44
mov dword [eax], 0x1ff7
call fcn.00437eb0
mov dword [esp + 0xa00], eax
mov eax, dword [0x49ff10]
mov ecx, eax
inc ecx
mov dword [0x49ff10], ecx
add eax, 0x524dd516
xor eax, 0xc7da5737
mov ecx, dword [0x4a71bc]
and ecx, eax
mov dword [0x4a71bc], ecx
mov eax, dword [esp + 0xa00]
mov ecx, esp
mov dword [ecx], eax
lea eax, [esp + 0x198]
mov ecx, eax
mov dword [esp + 0xc0], eax
call fcn.0040e460
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xc0]
mov dword [ecx], edx
lea ecx, [esp + 0x64c]
mov dword [esp + 0xbc], eax
call fcn.0042a8d0
sub esp, 4
mov ecx, dword [esp + 0xc0]
mov dword [esp + 0xb8], eax
call fcn.00449bc0
mov eax, dword [0x49bab0]
and eax, 0xaeef4b50
mov dword [0x49bab0], eax
mov eax, esp
mov dword [eax + 4], 3
mov dword [eax], 0x29a4
call fcn.00437eb0
mov dword [esp + 0x9fc], eax
mov eax, dword [0x4a349c]
mov ecx, eax
dec ecx
mov dword [0x4a349c], ecx
mov ecx, dword [0x4a3460]
xor ecx, eax
mov dword [0x4a3460], ecx
mov eax, dword [esp + 0xa00]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0x44
call fcn.0044b770
mov dword [0x4a3b20], 0x98478614
mov ecx, dword [esp + 0xa20]
call fcn.004396e0
mov ecx, dword [esp + 0x9fc]
mov edx, esp
mov dword [edx + 8], eax
mov dword [edx + 4], ecx
lea eax, [esp + 0x228]
mov dword [edx], eax
call fcn.00455e67
mov si, word [0x4aabf8]
movsx ecx, si
sub ecx, 0xf665f041
xor ecx, 0x7b9d31d7
cmp ecx, 0xa7fb7e6c
mov dword [esp + 0xb4], eax
jge 0x426c7b
mov eax, dword [0x4a42d0]
mov ecx, eax
inc ecx
mov dword [0x4a42d0], ecx
mov ecx, dword [0x497830]
add ecx, eax
mov dword [0x497830], ecx
jmp 0x426c8a
mov eax, dword [0x4a38f4]
or eax, 0xc3d5bb99
mov dword [0x4a38f4], eax
mov eax, 0xc7df8b6b
mov ecx, dword [esp + 0x9fc]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], 3
mov dword [esp + 0xb0], eax
call fcn.0044b770
mov si, word [0x4b2468]
movsx eax, si
imul eax, eax, 0x2f1eb9ff
imul eax, eax, 0xf31bf705
mov ecx, dword [esp + 0xb0]
cmp ecx, eax
jl 0x426cee
mov eax, dword [0x49f34c]
and eax, 0xa
or eax, 0x5ff4
mov cx, ax
mov word [0x4ac046], cx
jmp 0x426d08
mov eax, dword [0x49e228]
shl eax, 4
mov ecx, dword [0x49bb84]
or eax, ecx
or eax, 0xbdfa7a77
mov dword [0x49bb84], eax
mov eax, esp
lea ecx, [esp + 0x228]
mov dword [eax], ecx
lea eax, [esp + 0x184]
mov ecx, eax
mov dword [esp + 0xac], eax
call fcn.0040e460
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xac]
mov dword [ecx], edx
lea ecx, [esp + 0x64c]
mov dword [esp + 0xa8], eax
call fcn.0042a8d0
sub esp, 4
mov ecx, dword [esp + 0xac]
mov dword [esp + 0xa4], eax
call fcn.00449bc0
mov si, word [0x4af91c]
movsx eax, si
mov ecx, dword [0x4a684c]
lea eax, [eax + ecx - 0x19bd9d4b]
mov dword [0x4a684c], eax
mov eax, dword [0x49ea30]
or eax, 0x828
mov dword [0x49ea30], eax
mov eax, esp
mov dword [eax + 4], 5
mov dword [eax], 0x75fa
call fcn.00437eb0
mov dword [esp + 0x9f8], eax
mov eax, dword [0x49c370]
dec eax
mov dword [0x49c370], eax
mov ecx, dword [0x4a5fa0]
not ecx
and ecx, 0x3193e799
xor eax, ecx
mov ecx, dword [0x4a7be0]
and ecx, eax
mov dword [0x4a7be0], ecx
mov eax, dword [esp + 0x9f8]
mov ecx, esp
mov dword [ecx], eax
lea eax, [esp + 0x170]
mov ecx, eax
mov dword [esp + 0xa0], eax
call fcn.0040e460
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0xa0]
mov dword [ecx], edx
lea ecx, [esp + 0x64c]
mov dword [esp + 0x9c], eax
call fcn.0042a8d0
sub esp, 4
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0x98], eax
call fcn.00449bc0
mov si, word [0x4b0894]
movsx eax, si
imul eax, eax, 0x387931a8
xor eax, 0x71279681
cmp eax, 0x242ebe11
jl 0x426e76
mov eax, dword [0x49f7f4]
mov ecx, eax
inc ecx
mov dword [0x49f7f4], ecx
mov ecx, 0x326311d9
sub ecx, eax
mov dx, word [0x4b07ea]
movsx eax, dx
sar eax, 3
xor ecx, eax
mov eax, dword [0x49de8c]
imul eax, ecx
mov dword [0x49de8c], eax
mov eax, dword [esp + 0x9f8]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 5
call fcn.0044b770
mov eax, dword [0x4a3130]
add eax, 0xe8fb9efe
mov dword [0x4a3130], eax
cmp dword [esp + 0x218], 0
je 0x426f24
mov eax, 0xaa95f45
mov ecx, dword [0x49f228]
xor ecx, 0xf7845431
cmp eax, ecx
jge 0x426ee1
mov eax, dword [0x4a014c]
imul eax, eax, 0xe28f1687
xor eax, 0x369b62bd
mov ecx, dword [0x4a4c9c]
sub ecx, eax
mov dword [0x4a4c9c], ecx
mov eax, dword [esp + 0xa20]
mov ecx, esp
mov dword [ecx], eax
lea ecx, [esp + 0x64c]
call fcn.0042a8d0
sub esp, 4
mov ecx, dword [0x4a4210]
imul ecx, ecx, 0x9ec24b97
mov dx, word [0x4b24fa]
mov si, dx
or esi, ecx
mov dx, si
mov word [0x4b24fa], dx
mov dword [esp + 0x94], eax
mov eax, dword [0x4a5aac]
mov ecx, dword [0x49f614]
imul eax, ecx
add eax, 0x2de6604
mov ecx, dword [0x4a3d88]
xor ecx, eax
mov dword [0x4a3d88], ecx
mov eax, dword [0x4974cc]
mov ecx, esp
lea edx, [esp + 0x8a0]
mov dword [ecx], edx
call eax
sub esp, 4
mov dword [esp + 0x224], eax
mov eax, dword [0x4a905c]
imul eax, eax, 0x8d4a3ac6
mov dword [0x4a905c], eax
cmp dword [esp + 0x224], 0
jne 0x426fa1
mov eax, dword [0x499c2c]
imul eax, eax, 0x7d3ec169
mov ecx, dword [0x4a1d2c]
or eax, ecx
or eax, 0x10cefb34
mov dword [0x4a1d2c], eax
jmp 0x4280ca
mov eax, dword [0x4a4724]
imul eax, eax, 0x4e206210
mov dword [0x4a4724], eax
xorps xmm0, xmm0
movaps xmmword [esp + 0x660], xmm0
mov cx, word [0x4ab46c]
mov ax, cx
dec eax
mov cx, ax
mov word [0x4ab46c], cx
movsx eax, cx
mov edx, dword [0x4aa79c]
mov esi, dword [0x49e574]
imul edx, esi
cmp eax, edx
jge 0x427037
mov eax, 0x27d7d9d0
mov ecx, dword [0x4aa1e0]
add ecx, 0xeef32df8
cmp eax, ecx
jl 0x427032
mov eax, 0xfb7435d8
mov ecx, dword [0x4a8fb4]
and ecx, 0xd16e6037
or ecx, 0x1f26892d
cmp eax, ecx
jge 0x427028
jmp 0x42702d
jmp 0x42702d
jmp 0x427032
jmp 0x427037
mov eax, 0x8f5f0799
mov word [esp + 0x660], 2
mov ecx, dword [0x4a3bbc]
imul ecx, ecx, 0x4469a5ab
mov dx, word [0x4b3f40]
mov si, dx
xor esi, ecx
mov dx, si
mov word [0x4b3f40], dx
mov ecx, dword [0x4974d4]
mov esi, dword [0x4974d8]
mov edi, dword [esp + 0x224]
mov edi, dword [edi + 0xc]
mov edi, dword [edi]
mov edi, dword [edi]
mov dword [esp + 0x16c], edi
mov edi, dword [esp + 0x16c]
mov ebx, esp
mov dword [ebx], edi
mov dword [esp + 0x90], eax
mov dword [esp + 0x8c], ecx
call esi
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [esp + 0x8c]
call eax
sub esp, 4
mov dword [esp + 0x664], eax
mov dx, word [0x4b12da]
movsx eax, dx
imul eax, eax, 0x6f06dc2a
mov ecx, dword [0x4a46f8]
mov esi, ecx
inc esi
mov dword [0x4a46f8], esi
add eax, ecx
mov ecx, dword [0x49bfc0]
imul ecx, eax
mov dword [0x49bfc0], ecx
mov eax, dword [0x4974d0]
movzx ecx, word [esp + 0x200]
mov esi, esp
mov dword [esi], ecx
call eax
sub esp, 4
mov word [esp + 0x662], ax
mov ax, word [0x4b1d66]
movsx ecx, ax
shl ecx, 3
imul ecx, ecx, 0xe1b0e5d7
mov esi, dword [esp + 0x90]
cmp esi, ecx
je 0x427152
mov eax, dword [0x49fdf8]
xor eax, 0x2003
or eax, 0x36c
mov cx, word [0x4af738]
mov dx, cx
and edx, eax
mov cx, dx
mov word [0x4af738], cx
cmp dword [esp + 0xa24], 0
je 0x4272c0
mov ax, word [0x4afd7e]
mov cx, ax
or ecx, 0x9c92
mov ax, cx
mov word [0x4afd7e], ax
mov eax, dword [esp + 0xa24]
mov ecx, 0x10624dd3
mul ecx
shr edx, 6
mov eax, esp
mov dword [eax + 4], edx
lea ecx, [esp + 0x660]
mov dword [eax], ecx
call fcn.00418ad0
mov dword [esp + 0x678], eax
mov eax, dword [0x49dab0]
add eax, 0x704d0544
mov dword [0x49dab0], eax
cmp dword [esp + 0x678], 0
jge 0x4271ee
mov eax, 0x78fffffc
mov ecx, dword [0x49f4dc]
dec ecx
mov dword [0x49f4dc], ecx
cmp eax, ecx
jle 0x4271e9
mov eax, dword [0x4a198c]
add eax, 0x81060838
mov dword [0x4a198c], eax
jmp 0x4280ca
mov eax, dword [0x4a08cc]
add eax, 0xa378dc33
mov cx, ax
mov word [0x4aeb78], cx
mov eax, dword [0x4974ec]
mov edx, dword [esp + 0x678]
mov esi, esp
lea edi, [esp + 0xa24]
mov dword [esi + 0xc], edi
mov dword [esi], edx
mov dword [esi + 0x10], 4
mov dword [esi + 8], 0x1006
mov dword [esi + 4], 0xffff
mov dword [esp + 0x88], edi
call eax
sub esp, 0x14
mov edx, dword [0x497d1c]
mov esi, dword [0x4a14b0]
dec esi
mov dword [0x4a14b0], esi
and esi, 0x60dec5ba
or edx, esi
mov esi, dword [0x4a97a8]
xor esi, edx
mov dword [0x4a97a8], esi
mov edx, dword [0x4974ec]
mov esi, dword [esp + 0x678]
mov edi, esp
mov ebx, dword [esp + 0x88]
mov dword [edi + 0xc], ebx
mov dword [edi], esi
mov dword [edi + 0x10], 4
mov dword [edi + 8], 0x1005
mov dword [edi + 4], 0xffff
mov dword [esp + 0x84], eax
call edx
sub esp, 0x14
mov edx, dword [0x4a7a68]
or edx, 0x280244c7
mov dword [0x4a7a68], edx
mov dword [esp + 0x80], eax
jmp 0x4273a6
mov eax, dword [0x4a8050]
imul eax, eax, 0x34561f81
mov ecx, dword [0x49a120]
and ecx, eax
mov dword [0x49a120], ecx
mov eax, dword [0x4974f0]
mov ecx, esp
mov dword [ecx + 8], 6
mov dword [ecx + 4], 1
mov dword [ecx], 2
call eax
sub esp, 0xc
mov dword [esp + 0x678], eax
mov eax, dword [0x49abdc]
imul eax, eax, 0x5dc9ca7e
mov dword [0x49abdc], eax
cmp dword [esp + 0x678], 0xffffffff
jne 0x42732c
mov word [0x4abd9e], 0x48cb
jmp 0x4280ca
lea eax, [esp + 0x660]
mov ecx, dword [0x4a5ba8]
or ecx, 0xedbb4289
mov dword [0x4a5ba8], ecx
mov ecx, dword [0x4974c8]
mov edx, dword [esp + 0x678]
mov esi, esp
mov dword [esi + 4], eax
mov dword [esi], edx
mov dword [esi + 8], 0x10
call ecx
sub esp, 0xc
cmp eax, 0xffffffff
jne 0x427396
mov ax, word [0x4b0d08]
movsx ecx, ax
and ecx, 0xe9c6ab4
xor ecx, 0x698922c7
mov edx, dword [0x4a344c]
sub edx, ecx
mov dword [0x4a344c], edx
jmp 0x428047
mov eax, dword [0x4a99bc]
imul eax, eax, 0x1fe929ea
mov dword [0x4a99bc], eax
mov eax, dword [0x49d9f4]
and eax, 0xff4dddfd
mov dword [0x49d9f4], eax
mov eax, dword [0x4974e8]
lea ecx, [esp + 0x64c]
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x78], eax
call fcn.004396e0
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x74], eax
call fcn.00439510
mov ecx, dword [esp + 0x678]
mov edx, esp
mov esi, dword [esp + 0x74]
mov dword [edx + 8], esi
mov dword [edx + 4], eax
mov dword [edx], ecx
mov dword [edx + 0xc], 0
mov eax, dword [esp + 0x78]
call eax
sub esp, 0x10
mov dword [esp + 0x674], eax
mov eax, dword [0x49ec00]
inc eax
mov dword [0x49ec00], eax
mov ecx, dword [0x4a81f4]
sub eax, ecx
or eax, 0x72f01f38
cmp eax, 0x6bbfd9a7
jne 0x427442
mov ax, word [0x4b396e]
mov cx, ax
imul ecx, ecx, 0xdc7b2f02
mov ax, cx
mov word [0x4b396e], ax
lea eax, [esp + 0x64c]
mov ecx, dword [esp + 0x674]
mov dword [esp + 0x70], ecx
mov ecx, eax
call fcn.004396e0
mov ecx, dword [esp + 0x70]
cmp ecx, eax
jae 0x4274da
mov eax, 0x12d2b321
mov cx, word [0x4ab456]
movsx edx, cx
xor edx, 0xffffffff
cmp eax, edx
jge 0x4274b1
mov eax, 0x7c3824bc
mov ecx, dword [0x4a05b4]
cmp eax, ecx
je 0x4274ac
mov ax, word [0x4ae66c]
mov cx, ax
xor ecx, 0x420
mov ax, cx
mov word [0x4ae66c], ax
jmp 0x4274d5
mov ax, word [0x4b0950]
mov cx, ax
inc ecx
mov ax, cx
mov word [0x4b0950], ax
movsx ecx, ax
mov edx, dword [0x4a9468]
sub edx, ecx
mov dword [0x4a9468], edx
jmp 0x428047
mov ax, word [0x4b0d0c]
mov cx, ax
imul ecx, ecx, 0x10c6102e
mov ax, cx
mov word [0x4b0d0c], ax
mov ecx, dword [esp + 0xa20]
call fcn.00414b10
mov ecx, dword [0x4a6308]
mov edx, ecx
inc edx
mov dword [0x4a6308], edx
xor ecx, 0x20560812
or ecx, 0xdda1b0cd
mov dword [0x4a2114], ecx
mov eax, 0x67f7e652
mov ecx, dword [0x49e1ec]
cmp eax, ecx
jle 0x427546
mov eax, dword [0x4a25f4]
add eax, 0x8542001
mov dword [0x4a25f4], eax
jmp 0x42755e
mov eax, dword [0x4a3dbc]
mov ecx, eax
inc ecx
mov dword [0x4a3dbc], ecx
add eax, 0xd6d6283a
mov dword [0x4a9230], eax
mov eax, 0x65043039
mov ecx, dword [0x4974e0]
mov edx, dword [esp + 0x678]
mov esi, esp
lea edi, [esp + 0x228]
mov dword [esi + 4], edi
mov dword [esi], edx
mov dword [esi + 0xc], 0
mov dword [esi + 8], 0x400
mov dword [esp + 0x6c], eax
call ecx
sub esp, 0x10
mov dword [esp + 0x674], eax
mov eax, dword [0x4978bc]
mov ecx, eax
dec ecx
mov dword [0x4978bc], ecx
add eax, 0xacdfcc71
mov ecx, dword [0x4980f0]
sar ecx, 6
and eax, ecx
mov ecx, dword [esp + 0x6c]
cmp ecx, eax
jle 0x4275de
mov ax, word [0x4aaf40]
mov cx, ax
and ecx, 0x35ff
mov ax, cx
mov word [0x4aaf40], ax
cmp dword [esp + 0x674], 0
jle 0x42760f
mov eax, dword [esp + 0x210]
mov ecx, dword [esp + 0x214]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], eax
call fcn.0040f5d0
cmp eax, 0
je 0x427624
mov eax, dword [0x4a1ed0]
imul eax, eax, 0x9d7fe81c
mov dword [0x4a1ed0], eax
jmp 0x427e12
mov eax, dword [0x498120]
xor eax, 0xea591548
mov dword [0x498120], eax
mov eax, dword [esp + 0xa20]
mov ecx, eax
mov dword [esp + 0x68], eax
call fcn.004396e0
mov ecx, dword [esp + 0x674]
add eax, ecx
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x68]
call fcn.00401050
sub esp, 8
mov eax, dword [0x499c98]
xor eax, 0xb95bf13
mov dword [0x499c98], eax
mov eax, dword [esp + 0xa20]
mov ecx, eax
call fcn.00447b80
cmp eax, 0
jne 0x42769f
mov eax, dword [0x4a8ec8]
and eax, 0xe42b574c
mov dword [0x4a8ec8], eax
jmp 0x427e12
mov eax, 0x45108800
mov cx, word [0x4adbf2]
mov dx, cx
dec edx
mov si, dx
mov word [0x4adbf2], si
movsx edx, cx
and edx, 0x9c454574
cmp eax, edx
jne 0x4276e8
mov eax, dword [0x4a99fc]
imul eax, eax, 0x7607196e
or eax, 0xfbdc143d
mov ecx, dword [0x4a2530]
xor ecx, eax
mov dword [0x4a2530], ecx
mov ecx, dword [esp + 0xa20]
mov eax, dword [esp + 0x674]
mov edx, esp
mov dword [edx + 4], eax
lea eax, [esp + 0x228]
mov dword [edx], eax
call fcn.00404c80
sub esp, 8
mov ecx, dword [0x4a1928]
xor ecx, 0xd30e7d60
mov dword [0x4a1928], ecx
cmp dword [esp + 0x208], 0
mov dword [esp + 0x64], eax
jge 0x427a02
mov eax, dword [0x49aefc]
mov ecx, dword [0x4a74d0]
inc ecx
mov dword [0x4a74d0], ecx
or eax, ecx
mov ecx, dword [0x4a98ec]
imul ecx, eax
mov dword [0x4a98ec], ecx
mov eax, esp
mov dword [eax + 4], 5
mov dword [eax], 0x75fa
call fcn.00437eb0
mov dword [esp + 0x9f4], eax
mov eax, dword [0x49fe58]
and eax, 0xfe89ddd8
mov dword [0x4a75f0], eax
mov ecx, dword [esp + 0xa20]
mov eax, dword [esp + 0x9f4]
mov edx, esp
mov dword [edx], eax
lea eax, [esp + 0x158]
mov dword [esp + 0x60], ecx
mov ecx, eax
mov dword [esp + 0x5c], eax
call fcn.0044e870
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x5c]
mov dword [ecx], edx
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x58], eax
call fcn.00444d90
sub esp, 8
mov dword [esp + 0x208], eax
mov ecx, dword [esp + 0x5c]
call fcn.0041f990
mov word [0x4ad3fc], 0xd6f3
mov eax, dword [esp + 0x9f4]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 5
call fcn.0044b770
mov eax, dword [0x4a23c4]
or eax, 0x76ff7836
mov dword [0x4a23c4], eax
cmp dword [esp + 0x208], 0
jl 0x4279f8
mov eax, dword [0x4a2ad4]
mov ecx, dword [0x4a6600]
shl ecx, 2
and eax, ecx
mov dx, word [0x4b224c]
mov cx, dx
or ecx, eax
mov dx, cx
mov word [0x4b224c], dx
mov eax, dword [esp + 0x208]
add eax, 4
mov dword [esp + 0x208], eax
mov eax, dword [0x49d764]
add eax, 0x2e5dcd5a
mov dword [0x49d764], eax
mov eax, dword [esp + 0xa20]
mov ecx, esp
mov dword [ecx], eax
call fcn.0041f210
mov dword [esp + 0x204], eax
mov eax, dword [0x4a7bb4]
not eax
mov ecx, dword [0x4a9c08]
inc ecx
mov dword [0x4a9c08], ecx
or eax, ecx
mov dx, word [0x4ad02e]
mov cx, dx
and ecx, eax
mov dx, cx
mov word [0x4ad02e], dx
cmp dword [esp + 0x204], 0
jge 0x4279e0
mov eax, dword [0x4a01f8]
sar eax, 2
and eax, 0xfa3bfb8a
cmp eax, 0xfdf9ffbf
jne 0x4278d2
mov eax, dword [0x499128]
xor eax, 0xf5e70be8
mov dword [0x499128], eax
mov eax, 0x5302a2c6
mov ecx, esp
mov dword [ecx + 4], 0xb
mov dword [ecx], 0x6f
mov dword [esp + 0x54], eax
call fcn.00437eb0
mov dword [esp + 0x9f0], eax
mov dx, word [0x4ac4c2]
movsx eax, dx
sar eax, 8
mov ecx, dword [0x499f00]
and ecx, eax
mov dword [0x499f00], ecx
mov ecx, dword [esp + 0xa20]
mov eax, dword [esp + 0x9f0]
mov esi, esp
mov dword [esi], eax
lea eax, [esp + 0x144]
mov dword [esp + 0x50], ecx
mov ecx, eax
mov dword [esp + 0x4c], eax
call fcn.0044e870
sub esp, 4
mov ecx, esp
mov esi, dword [esp + 0x4c]
mov dword [ecx], esi
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x48], eax
call fcn.00444d90
sub esp, 8
mov dword [esp + 0x674], eax
mov ecx, dword [esp + 0x4c]
call fcn.0041f990
mov eax, dword [0x49c7a0]
add eax, 0xd42348a5
mov dword [0x49c7a0], eax
mov eax, dword [esp + 0x9f0]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0xb
call fcn.0044b770
mov eax, dword [0x4a8620]
mov ecx, dword [esp + 0x54]
cmp ecx, eax
jg 0x4279af
mov eax, dword [0x4a74c4]
sar eax, 6
mov dword [0x4a6398], eax
cmp dword [esp + 0x674], 0
jl 0x4279d1
mov eax, dword [0x498940]
add eax, 0x4c14f1f1
mov dword [0x498940], eax
jmp 0x427e12
mov eax, dword [0x4a6de0]
and eax, 0x1d00a108
mov dword [0x4a6de0], eax
mov ax, word [0x4ab532]
mov cx, ax
or ecx, 0x6250
mov ax, cx
mov word [0x4ab532], ax
mov dword [0x498090], 0x32feac78
mov dword [0x4a6534], 0x11092840
cmp dword [esp + 0x204], 0
jl 0x427aa6
mov eax, dword [0x49c610]
add eax, 0x7fbbfdfe
mov dword [0x49c610], eax
mov eax, dword [esp + 0xa20]
mov ecx, eax
call fcn.004396e0
sub eax, dword [esp + 0x208]
cmp eax, dword [esp + 0x204]
jb 0x427a97
mov eax, dword [0x4a8a1c]
mov ecx, eax
dec ecx
mov dword [0x4a8a1c], ecx
mov ecx, 0xcac880d9
sub ecx, eax
mov dx, word [0x4b32e8]
movsx eax, dx
sar eax, 8
cmp ecx, eax
jl 0x427a92
mov eax, dword [0x4a2fb0]
add eax, eax
mov cx, word [0x4b1b02]
mov dx, cx
or edx, eax
mov cx, dx
mov word [0x4b1b02], cx
jmp 0x427e12
mov eax, dword [0x4a2b5c]
or eax, 0xf0a05cf
mov dword [0x4a2b5c], eax
mov eax, 0x6886034a
mov ecx, dword [0x4a240c]
xor ecx, 0xffffffff
add ecx, 0x34f754ba
cmp eax, ecx
jge 0x427ada
mov ax, word [0x4b1138]
mov cx, ax
add ecx, 0xb6002c08
mov ax, cx
mov word [0x4b1138], ax
cmp dword [esp + 0xa28], 0
je 0x427d39
test byte [esp + 0x1ff], 1
jne 0x427d39
mov eax, dword [0x49d028]
add eax, 0x52bd218
mov dword [0x49d028], eax
mov eax, dword [esp + 0xa20]
mov ecx, eax
call fcn.004396e0
cmp eax, 0x4000
jbe 0x427d2a
mov ax, word [0x4aa952]
mov cx, ax
add ecx, 0x6c010082
mov ax, cx
mov word [0x4aa952], ax
mov byte [esp + 0x1ff], 1
mov ax, word [0x4b11ac]
mov cx, ax
add ecx, 0x4000005
mov ax, cx
mov word [0x4b11ac], ax
mov ecx, dword [esp + 0xa20]
mov edx, esp
mov dword [edx], ecx
lea ecx, [esp + 0x130]
call fcn.00428240
sub esp, 4
mov ecx, dword [0x4a9788]
imul ecx, ecx, 0x2f6618a2
mov dword [0x4a9788], ecx
cmp dword [esp + 0x208], 0
mov dword [esp + 0x44], eax
jl 0x427bf6
mov eax, dword [0x49f384]
and eax, 0xf64f7fba
mov dword [0x49f384], eax
mov eax, dword [esp + 0x208]
mov ecx, esp
mov dword [ecx], 0
lea ecx, [esp + 0x130]
mov dword [esp + 0x40], ecx
mov dword [esp + 0x3c], eax
call fcn.0041c080
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x3c]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov ecx, dword [esp + 0x40]
call fcn.00437bc0
sub esp, 8
mov ecx, dword [0x49aed8]
imul ecx, ecx, 0xcfffdfff
mov dword [0x49aed8], ecx
mov dword [esp + 0x38], eax
lea eax, [esp + 0x130]
lea ecx, [esp + 0x8a0]
mov edx, dword [0x49db7c]
add edx, 0x14063802
mov dword [0x49db7c], edx
mov edx, dword [esp + 0xa28]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004015a0
cmp eax, 0
jne 0x427cb4
mov eax, dword [0x4a1104]
sar eax, 9
sub eax, 0x9e480917
and eax, 0xbb06ac0e
cmp eax, 0x4dcc511e
je 0x427c5d
mov dword [0x4a7ec0], 0x2202280
mov dword [esp + 0x208], 0xffffffff
mov eax, dword [0x4a3d18]
mov ecx, eax
inc ecx
mov dword [0x4a3d18], ecx
and eax, 0xbb6a
mov dx, ax
mov word [0x4b37c8], dx
mov ecx, dword [esp + 0xa20]
call fcn.00414b10
mov eax, dword [0x499d88]
mov ecx, dword [0x4a3e0c]
or ecx, eax
mov dword [0x4a3e0c], ecx
mov dword [esp + 0x12c], 0xd
jmp 0x427ceb
mov eax, dword [0x49ee40]
mov ecx, dword [0x498de4]
and eax, ecx
mov dx, word [0x4b016e]
mov cx, dx
inc ecx
mov dx, cx
mov word [0x4b016e], dx
movsx ecx, dx
and eax, ecx
mov dword [0x4a0348], eax
mov dword [esp + 0x12c], 0
lea ecx, [esp + 0x130]
call fcn.00449bc0
mov ecx, dword [esp + 0x12c]
test ecx, ecx
mov dword [esp + 0x34], ecx
je 0x427d25
jmp 0x427d0f
mov eax, dword [esp + 0x34]
sub eax, 0xd
mov dword [esp + 0x30], eax
je 0x427e12
jmp 0x428175
jmp 0x427d2a
mov eax, dword [0x4a5164]
or eax, 0x2f7570f2
mov dword [0x4a5164], eax
mov eax, dword [0x4a287c]
mov ecx, dword [0x4a64ac]
and eax, ecx
and eax, 0x5c81f5ef
mov dword [0x4a64ac], eax
cmp dword [esp + 0xa24], 0x3acd
jne 0x427dfe
mov eax, dword [0x4aa878]
inc eax
mov dword [0x4aa878], eax
or eax, 0x4acf7afd
mov dword [0x4989b4], eax
mov eax, dword [esp + 0xa20]
mov ecx, eax
call fcn.004396e0
cmp eax, 0x500000
jbe 0x427d9e
mov dword [0x49958c], 0x2ead79c
jmp 0x427e12
mov eax, dword [0x4a6290]
xor eax, 0xffffffff
add eax, 0xfdd85af6
cmp eax, 0x421e0
je 0x427df9
mov eax, dword [0x499ef4]
mov ecx, eax
inc ecx
mov dword [0x499ef4], ecx
mov dx, word [0x4ad2d6]
mov cx, dx
mov esi, ecx
inc esi
mov dx, si
mov word [0x4ad2d6], dx
add ecx, 0x4168e652
xor eax, ecx
mov dx, word [0x4acc02]
mov cx, dx
or ecx, eax
mov dx, cx
mov word [0x4acc02], dx
jmp 0x427dfe
mov eax, dword [0x4a0728]
xor eax, 0x78a0606a
mov dword [0x4a0728], eax
jmp 0x42751f
mov eax, 0xff745644
mov ecx, dword [0x4aa65c]
mov edx, ecx
inc edx
mov dword [0x4aa65c], edx
or ecx, 0xd51e443
cmp eax, ecx
jle 0x427e44
mov eax, dword [0x4a07f4]
imul eax, eax, 0x2434420
mov dword [0x4a07f4], eax
cmp dword [esp + 0x208], 0
jl 0x427f08
mov eax, dword [0x49974c]
cmp eax, 0xa9965d37
jne 0x427ea3
mov ax, word [0x4b3f26]
movsx ecx, ax
sar ecx, 0xa
xor ecx, 0x8024120a
cmp ecx, 0x2f8d5008
jl 0x427e8f
mov dword [0x4991f4], 0xb7161680
jmp 0x427e9e
mov eax, dword [0x4a831c]
or eax, 0xc3cd6c7a
mov dword [0x4a831c], eax
jmp 0x427ea3
mov eax, dword [esp + 0xa20]
mov ecx, dword [esp + 0x208]
mov edx, esp
mov dword [edx], 0
mov dword [esp + 0x2c], ecx
mov ecx, eax
mov dword [esp + 0x28], eax
call fcn.0041c080
sub esp, 4
mov ecx, esp
mov edx, dword [esp + 0x2c]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov ecx, dword [esp + 0x28]
call fcn.00437bc0
sub esp, 8
mov ecx, dword [0x49e594]
and ecx, 0x805c
mov si, word [0x4ac72e]
mov dx, si
sub edx, ecx
mov si, dx
mov word [0x4ac72e], si
mov dword [esp + 0x24], eax
mov ax, word [0x4b4012]
movsx ecx, ax
neg ecx
mov edx, dword [0x4a8564]
lea ecx, [edx + ecx + 0x5d19b5b3]
mov dword [0x4a8564], ecx
cmp dword [esp + 0xa28], 0
je 0x428027
test byte [esp + 0x1ff], 1
jne 0x428027
lea eax, [esp + 0x8a0]
mov ecx, dword [0x4996bc]
xor ecx, 0x40088420
or ecx, 0xbde773dd
mov edx, dword [0x49cd20]
xor edx, ecx
mov dword [0x49cd20], edx
mov ecx, dword [esp + 0xa28]
mov edx, dword [esp + 0xa20]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004015a0
cmp eax, 0
jne 0x428018
mov eax, 0x3ff78313
mov ecx, dword [0x4a7dd4]
add ecx, 0x6282a4a
mov dword [0x4a7dd4], ecx
mov ecx, dword [esp + 0xa20]
mov dword [esp + 0x20], eax
call fcn.00414b10
mov dx, word [0x4acebe]
movsx eax, dx
mov ecx, dword [0x4a8fa0]
dec ecx
mov dword [0x4a8fa0], ecx
imul eax, ecx
mov ecx, dword [esp + 0x20]
cmp ecx, eax
jl 0x427ff1
mov eax, dword [0x49d9c4]
and eax, 0x21b3f4a1
mov dword [0x49d9c4], eax
jmp 0x428013
mov eax, dword [0x49a814]
shl eax, 0xa
mov ecx, 0xe64b31c0
sub ecx, eax
and ecx, 0xa7092880
mov eax, dword [0x4aa6b8]
imul eax, ecx
mov dword [0x4aa6b8], eax
jmp 0x428018
mov eax, dword [0x4a33f0]
and eax, 0x95bb8bce
mov dword [0x4a33f0], eax
mov eax, dword [0x4976e0]
sar eax, 0xa
xor eax, 0x1832082
or eax, 0x7c74df54
mov ecx, dword [0x4a7a28]
sub ecx, eax
mov dword [0x4a7a28], ecx
mov eax, dword [0x4974f8]
mov ecx, dword [esp + 0x678]
mov edx, esp
mov dword [edx], ecx
mov dword [edx + 4], 2
call eax
sub esp, 8
mov ecx, dword [0x49eed0]
mov edx, ecx
inc edx
mov dword [0x49eed0], edx
or ecx, 0xa23b
mov si, word [0x4b0b88]
mov dx, si
xor edx, ecx
mov si, dx
mov word [0x4b0b88], si
mov ecx, dword [0x4974c4]
mov edx, dword [esp + 0x678]
mov edi, esp
mov dword [edi], edx
mov dword [esp + 0x1c], eax
call ecx
sub esp, 4
mov si, word [0x4af6dc]
movsx ecx, si
xor ecx, 0xa931ee01
mov edx, dword [0x4a2048]
add edx, ecx
mov dword [0x4a2048], edx
mov dword [esp + 0x18], eax
mov eax, esp
lea ecx, [esp + 0x8a0]
mov dword [eax], ecx
mov dword [eax + 4], 0xa4
call fcn.004238a0
mov eax, dword [0x49cf28]
add eax, 0x927e6acd
mov dword [0x49cf28], eax
mov eax, esp
lea ecx, [esp + 0x944]
mov dword [eax], ecx
mov dword [eax + 4], 0xa4
call fcn.004238a0
mov eax, dword [0x4a4ec8]
add eax, 0xf79b11dd
mov dword [0x4a4ec8], eax
mov eax, esp
lea ecx, [esp + 0x67c]
mov dword [eax], ecx
mov dword [eax + 4], 0x224
call fcn.004238a0
mov eax, dword [0x4a5180]
mov ecx, dword [0x4a8f48]
sub ecx, eax
mov dword [0x4a8f48], ecx
mov eax, esp
lea ecx, [esp + 0x228]
mov dword [eax], ecx
mov dword [eax + 4], 0x424
call fcn.004238a0
mov dword [0x4a56e4], 0x4d46d30b
lea ecx, [esp + 0x64c]
call fcn.00449bc0
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
int3