Function at 0x497530
Capabilities:
Disable automatic windows recovery features
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x50]
cmp eax, dword [ecx + 8]
jbe 0x49822f
sub esp, 0xd0
mov edx, dword [esp + 0xd8]
test edx, edx
sete bl
mov ebp, dword [esp + 0xdc]
test ebp, ebp
xchg esi, ebx
sete bl
xchg esi, ebx
and esi, ebx
xchg esi, eax
test al, al
xchg esi, eax
jne 0x4979e7
mov ecx, dword [esp + 0xe0]
test ecx, ecx
jg 0x49764b
xor ebx, ebx
sub ebx, edx
and ebx, edx
mov eax, 0xb4ca8b09
mov esi, edx
mul ebx
xor edi, edi
sub edi, esi
mov edi, 0
sbb edi, ebp
mov eax, ecx
neg ecx
and edi, ebp
imul ebx, ebx, 0x3f79d71
add edx, ebx
imul ebx, edi, 0xb4ca8b09
add edx, ebx
shr edx, 0x1a
lea ebx, [0x618a80]
movzx edx, byte [ebx + edx]
cmp edx, ecx
jl 0x49764f
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
cmp ecx, 0x20
sbb eax, eax
mov edx, ebp
shr ebp, cl
and ebp, eax
mov dword [esp + 0xb0], ebp
mov dword [esp + 8], ebp
lea ebx, [ecx - 0x20]
mov dword [esp + 0xac], ebx
cmp ebx, 0x20
sbb edi, edi
neg ebx
cmp ebx, 0x20
sbb ebp, ebp
shr esi, cl
and esi, eax
mov ecx, ebx
mov eax, edx
shl edx, cl
and edx, ebp
or edx, esi
mov ecx, dword [esp + 0xac]
shr eax, cl
and eax, edi
or eax, edx
mov dword [esp + 4], eax
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x18], edx
mov dword [esp + 0x14], eax
mov word [esp + 0x1c], 1
call fcn.00498240
add esp, 0xd0
ret
mov eax, ecx
mov esi, edx
mov edx, dword [esp + 0xe4]
mov ebx, dword [edx]
lea ecx, [ebx - 0x20]
mov edi, ecx
neg ecx
cmp ecx, 0x20
sbb eax, eax
cmp edi, 0x20
sbb edx, edx
mov esi, 1
shr esi, cl
mov ecx, edi
mov edi, 1
shl edi, cl
and edi, edx
and esi, eax
or esi, edi
cmp ebp, esi
setne al
cmp ebx, 0x20
sbb edx, edx
mov ecx, ebx
mov esi, 1
shl esi, cl
and edx, esi
mov esi, dword [esp + 0xd8]
cmp esi, edx
setne dl
or edx, eax
test dl, dl
je 0x4976b6
mov eax, dword [esp + 0xe4]
mov edx, dword [esp + 0xe0]
jmp 0x4976d0
mov eax, dword [esp + 0xe4]
mov edx, dword [eax + 8]
sub edx, ecx
lea ecx, [edx + 1]
mov edx, dword [esp + 0xe0]
cmp edx, ecx
jne 0x49771d
mov ecx, esi
shl esi, 1
mov dword [esp + 0xb0], esi
mov ebx, esi
add esi, 0xffffffff
mov edi, ebx
add ebx, 1
shl ebp, 1
shr ecx, 0x1f
or ecx, ebp
mov ebp, edi
add edi, 0xffffffff
mov edi, ecx
adc ecx, 0xffffffff
add ebp, 1
mov ebp, edi
adc edi, 0
dec edx
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0xc8]
jmp 0x49776c
mov ecx, esi
shl esi, 2
mov dword [esp + 0xb0], esi
mov ebx, esi
add esi, 0xffffffff
mov edi, ebx
add ebx, 2
shl ebp, 2
shr ecx, 0x1e
or ecx, ebp
mov ebp, edi
add edi, 0xffffffff
mov edi, ecx
adc ecx, 0xffffffff
add ebp, 2
mov ebp, edi
adc edi, 0
add edx, 0xfffffffe
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0xc0]
test edx, edx
je 0x4979ab
mov dword [esp + 0x70], edx
mov dword [esp + 0x50], ecx
mov dword [esp + 0x2c], edi
mov dword [esp + 0x28], ebx
mov dword [esp + 0x98], ebp
mov dword [esp + 0x4c], esi
neg edx
imul edx, edx, 0x13441
sar edx, 0x12
mov dword [esp + 0x24], edx
inc edx
mov dword [esp + 0x30], edx
lea edi, [0x6162b8]
cmp eax, edi
jne 0x49784c
mov dword [esp], esi
mov eax, dword [esp + 0x70]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.00498730
mov eax, dword [esp + 0xc]
mov dword [esp + 0x7c], eax
movzx ecx, byte [esp + 0x14]
mov byte [esp + 0x21], cl
mov edx, dword [esp + 0x94]
mov dword [esp], edx
mov ebx, dword [esp + 0x70]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x30]
mov dword [esp + 8], ebp
call fcn.00498730
mov eax, dword [esp + 0xc]
mov dword [esp + 0x88], eax
movzx ecx, byte [esp + 0x14]
mov byte [esp + 0x22], cl
mov edx, dword [esp + 0x28]
mov dword [esp], edx
mov ebx, dword [esp + 0x70]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x30]
mov dword [esp + 8], ebx
call fcn.00498730
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
movzx edx, byte [esp + 0x14]
xor ebx, ebx
mov ebp, dword [esp + 0x7c]
xor esi, esi
mov edi, dword [esp + 0x88]
xor ebx, ebx
mov dword [esp + 0x78], ebx
jmp 0x497921
mov dword [esp + 4], ecx
mov dword [esp], esi
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
call fcn.00498840
movzx eax, byte [esp + 0x1c]
mov byte [esp + 0x21], al
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x80], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x84], edx
mov ebx, dword [esp + 0x98]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x94]
mov dword [esp], ebp
mov esi, dword [esp + 0x70]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x30]
mov dword [esp + 0xc], edi
call fcn.00498840
movzx eax, byte [esp + 0x1c]
mov byte [esp + 0x22], al
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x8c], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x90], edx
mov ebx, dword [esp + 0x2c]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x28]
mov dword [esp], ebp
mov esi, dword [esp + 0x70]
mov dword [esp + 8], esi
mov esi, dword [esp + 0x30]
mov dword [esp + 0xc], esi
call fcn.00498840
mov ecx, dword [esp + 0x18]
movzx edx, byte [esp + 0x1c]
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x80]
mov esi, dword [esp + 0x90]
mov edi, dword [esp + 0x8c]
mov dword [esp + 0x78], ebx
mov ebx, dword [esp + 0x84]
test ecx, ecx
jge 0x498216
mov dword [esp + 0x8c], edi
mov edi, dword [esp + 0x30]
cmp edi, 0x37
jle 0x497949
xor edx, edx
xor edx, edx
mov byte [esp + 0x22], dl
xor edx, edx
mov byte [esp + 0x21], dl
xor edx, edx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x74], eax
mov dword [esp + 0x90], esi
mov dword [esp + 0x80], ebp
mov esi, dword [esp + 0x24]
add esi, 0x19
cmp esi, 0x18
jae 0x49799f
mov byte [esp + 0x20], dl
mov esi, dword [esp + 0x4c]
test esi, esi
sete dl
mov ebp, dword [esp + 0x50]
test ebp, ebp
sete bl
xchg edi, ebx
neg ebx
xchg edi, ebx
mov dword [esp + 0x54], edi
and ebx, edx
test bl, bl
jne 0x497f6f
xor edx, edx
jmp 0x497e8b
movzx esi, byte [esp + 0x22]
movzx edi, byte [esp + 0x21]
jmp 0x497a03
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], esi
mov dword [esp + 0x10], ebp
mov eax, dword [esp + 0x94]
mov dword [esp + 0xc], eax
mov dword [esp + 0x18], edi
mov dword [esp + 0x14], ebx
mov word [esp + 0x1c], 1
call fcn.00498240
add esp, 0xd0
ret
mov eax, dword [esp + 0xd4]
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
add esp, 0xd0
ret
mov byte [esp + 0x20], dl
xchg edi, eax
mov byte [esp + 0x21], al
xchg edi, eax
xchg esi, eax
mov byte [esp + 0x22], al
xchg esi, eax
neg ecx
mov dword [esp + 0xa8], ecx
cmp ecx, 0x20
sbb edi, edi
mov dword [esp + 0xb0], edi
mov esi, 1
shl esi, cl
and esi, edi
mov dword [esp + 0xac], esi
add esi, 0xffffffff
mov dword [esp + 0x6c], esi
lea edx, [ecx - 0x20]
mov dword [esp + 0xa4], edx
neg edx
cmp edx, 0x20
sbb eax, eax
mov dword [esp + 0xa0], eax
mov esi, dword [esp + 0xa4]
cmp esi, 0x20
sbb edi, edi
mov dword [esp + 0x9c], edi
mov ecx, edx
mov ebp, 1
shr ebp, cl
and ebp, eax
mov ecx, esi
mov eax, 1
shl eax, cl
and eax, edi
or eax, ebp
mov ebp, dword [esp + 0xac]
add ebp, 0xffffffff
adc eax, 0xffffffff
mov dword [esp + 0xbc], eax
mov ebp, ebx
shr ebx, cl
and ebx, edi
mov ecx, edx
shl ebp, cl
mov eax, dword [esp + 0xa0]
and ebp, eax
mov ecx, dword [esp + 0xa8]
mov edi, dword [esp + 0x80]
shr edi, cl
mov esi, dword [esp + 0xb0]
and edi, esi
or edi, ebp
or edi, ebx
mov dword [esp + 0xb0], edi
mov ebx, dword [esp + 0x84]
shr ebx, cl
and ebx, esi
mov dword [esp + 0xac], ebx
mov ecx, edx
mov ebx, dword [esp + 0x90]
shl ebx, cl
and ebx, eax
mov ecx, dword [esp + 0xa8]
mov edi, dword [esp + 0x8c]
shr edi, cl
and edi, esi
mov ecx, dword [esp + 0xa4]
mov ebp, dword [esp + 0x90]
shr ebp, cl
mov eax, dword [esp + 0x9c]
and ebp, eax
or edi, ebx
or edi, ebp
mov dword [esp + 0xa4], edi
mov ebx, ecx
mov ecx, dword [esp + 0xa8]
mov ebp, dword [esp + 0x90]
shr ebp, cl
and ebp, esi
mov dword [esp + 0x9c], ebp
mov ebp, dword [esp + 0xbc]
mov edi, dword [esp + 0x90]
and edi, ebp
mov dword [esp + 0x68], edi
mov edi, dword [esp + 0x6c]
mov ebp, dword [esp + 0x8c]
and ebp, edi
mov dword [esp + 0x64], ebp
mov ecx, ebx
mov ebp, dword [esp + 0x78]
mov ebx, ebp
shr ebp, cl
and ebp, eax
mov ecx, edx
mov eax, ebx
shl ebx, cl
mov edx, dword [esp + 0xa0]
and ebx, edx
mov ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0x74]
shr edx, cl
and edx, esi
or edx, ebx
or edx, ebp
mov ebx, eax
shr eax, cl
and eax, esi
mov ebp, dword [esp + 0x74]
and ebp, edi
mov esi, dword [esp + 0xbc]
and ebx, esi
movzx edi, byte [esp + 0x20]
xchg edi, eax
test al, al
xchg edi, eax
je 0x497bf0
mov dword [esp + 0xb8], edx
mov dword [esp + 0xb4], eax
test ebx, ebx
xchg esi, ebx
seta bl
xchg esi, ebx
sete al
test ebp, ebp
seta dl
and eax, edx
or eax, esi
xchg edi, eax
test al, al
xchg edi, eax
mov edx, dword [esp + 0xb8]
mov esi, dword [esp + 0xbc]
mov edi, eax
mov eax, dword [esp + 0xb4]
jmp 0x497bf5
mov edi, 1
je 0x497c26
test ebx, ebx
sete bl
test ebp, ebp
xchg ebp, ebx
sete bl
xchg ebp, ebx
and ebp, ebx
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x497c26
mov ebx, dword [esp + 0xd8]
test ebx, 1
xchg edi, ebx
sete bl
xchg edi, ebx
and edi, 1
jmp 0x497c2d
mov ebx, dword [esp + 0xd8]
xchg edi, eax
test al, al
xchg edi, eax
jne 0x497c39
add edx, 0xffffffff
adc eax, 0xffffffff
mov dword [esp + 0x78], eax
mov dword [esp + 0x74], edx
movzx ebp, byte [esp + 0x22]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x497d02
lea edi, [ecx - 0x21]
mov dword [esp + 0xa0], edi
cmp edi, 0x20
sbb edx, edx
xchg edi, ebx
neg ebx
xchg edi, ebx
cmp edi, 0x20
sbb eax, eax
mov ecx, dword [esp + 0xa0]
mov ebx, 1
shl ebx, cl
mov ecx, edi
mov edi, 1
shr edi, cl
and edi, eax
and ebx, edx
or ebx, edi
mov eax, dword [esp + 0x68]
cmp ebx, eax
sete dl
setb bl
mov edi, dword [esp + 0xa8]
lea ecx, [edi - 1]
cmp ecx, 0x20
sbb edi, edi
mov eax, 1
shl eax, cl
and eax, edi
mov edi, dword [esp + 0x64]
cmp eax, edi
mov ecx, ebp
xchg ebp, ebx
setb bl
xchg ebp, ebx
and ebp, edx
or ebp, ebx
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x497cd5
mov eax, dword [esp + 0xa4]
mov edx, 1
jmp 0x497d8c
cmp eax, edi
sete al
and eax, edx
test al, al
je 0x497cf4
mov eax, dword [esp + 0xa4]
test eax, 1
setne dl
jmp 0x497d8c
mov eax, dword [esp + 0xa4]
xor edx, edx
jmp 0x497d8c
lea edi, [ecx - 1]
cmp edi, 0x20
sbb eax, eax
lea ebx, [ecx - 0x21]
mov dword [esp + 0xa0], ebx
cmp ebx, 0x20
sbb ebp, ebp
mov dword [esp + 0xb8], ebp
neg ebx
cmp ebx, 0x20
sbb esi, esi
mov ecx, edi
mov ebp, dword [esp + 0x68]
shr ebp, cl
test eax, ebp
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg ebp, eax
mov byte [esp + 0x23], al
xchg ebp, eax
mov ebp, dword [esp + 0x64]
mov edi, ebp
shr ebp, cl
and ebp, eax
mov ecx, ebx
mov eax, dword [esp + 0x68]
mov ebx, eax
shl eax, cl
and eax, esi
or eax, ebp
mov ecx, dword [esp + 0xa0]
shr ebx, cl
mov esi, dword [esp + 0xb8]
and ebx, esi
or ebx, eax
cmp ebx, 1
sete al
movzx ebx, byte [esp + 0x23]
and eax, ebx
movzx ecx, byte [esp + 0x22]
mov esi, dword [esp + 0xbc]
mov edx, eax
mov eax, dword [esp + 0xa4]
movzx ebx, byte [esp + 0x21]
test bl, bl
je 0x497de6
mov ebx, dword [esp + 0x84]
test esi, ebx
sete bl
mov ebp, dword [esp + 0x80]
mov esi, dword [esp + 0x6c]
test esi, ebp
xchg ebp, ebx
sete bl
xchg ebp, ebx
and ebp, ebx
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x497de6
mov ebx, dword [esp + 0xd8]
test ebx, 1
sete bl
and ebx, 1
test bl, bl
je 0x497de6
test cl, cl
mov ebp, dword [esp + 0xb0]
mov ebx, dword [esp + 0xac]
jmp 0x497dfc
mov ebp, dword [esp + 0xb0]
add ebp, 1
mov ebx, dword [esp + 0xac]
adc ebx, 0
test cl, cl
je 0x497e14
mov ecx, dword [esp + 0x68]
test ecx, ecx
sete cl
test edi, edi
xchg esi, ebx
sete bl
xchg esi, ebx
and esi, ecx
jmp 0x497e16
xor esi, esi
mov ecx, dword [esp + 0xd4]
mov dword [esp], ecx
mov dword [esp + 8], ebx
mov dword [esp + 4], ebp
mov ebx, dword [esp + 0x9c]
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0x14], eax
xchg esi, eax
mov byte [esp + 0x1c], al
xchg esi, eax
mov byte [esp + 0x1d], dl
call fcn.00498240
mov eax, dword [esp + 0xd4]
mov ecx, dword [eax + 0x10]
mov edx, dword [esp + 0x24]
sub ecx, edx
dec ecx
mov dword [eax + 0x10], ecx
add esp, 0xd0
ret
mov eax, ebx
mov ebx, dword [esp + 0x60]
lea edx, [ebx + 1]
mov edi, dword [esp + 0x54]
mov esi, dword [esp + 0x9c]
mov ebp, eax
mov eax, dword [esp + 0x74]
cmp edx, edi
jge 0x497f6f
mov dword [esp + 0x60], edx
mov dword [esp + 0x48], ebp
mov dword [esp + 0x3c], esi
mov eax, 0xcccccccd
mul ebp
shr edx, 2
mov dword [esp + 0xb0], edx
lea ebx, [edx + edx*4]
sub ebp, ebx
mov eax, 0x33333333
mul ebp
mov dword [esp + 0xac], edx
mov dword [esp + 0xa4], eax
mov eax, 0xcccccccd
mul esi
shr edx, 2
mov eax, edx
add edx, 0
mov ebx, dword [esp + 0xa4]
add ebx, edx
lea edi, [eax + eax*4]
sub esi, edi
add ebp, esi
mov esi, eax
mov eax, 0xcccccccd
mov edi, edx
mul ebp
shr edx, 2
mov dword [esp + 0xa0], edx
mov ebp, ebx
add ebx, edx
mov dword [esp + 0x9c], ebx
mov eax, 5
mul ebx
add esi, 0
mov esi, dword [esp + 0xb0]
adc esi, 0
mov ebx, dword [esp + 0xa4]
add ebx, edi
mov ebx, dword [esp + 0xac]
adc ebx, esi
mov esi, dword [esp + 0xa0]
add ebp, esi
adc ebx, 0
mov ebp, dword [esp + 0x3c]
cmp eax, ebp
xchg ebp, ebx
setne bl
xchg ebp, ebx
lea esi, [ebx + ebx*4]
add edx, esi
mov esi, dword [esp + 0x48]
cmp esi, edx
setne dl
or edx, ebp
test dl, dl
je 0x497e71
mov eax, dword [esp + 0x74]
mov edi, dword [esp + 0x54]
movzx edx, byte [esp + 0x21]
jmp 0x497f74
mov edx, 1
mov byte [esp + 0x21], dl
mov ebx, dword [esp + 0x94]
test ebx, ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
mov esi, dword [esp + 0x98]
test esi, esi
sete dl
and edx, ebp
test dl, dl
jne 0x4980b7
xor edx, edx
jmp 0x497fb5
mov eax, ebp
mov ebp, dword [esp + 0x5c]
lea edx, [ebp + 1]
mov edi, dword [esp + 0x54]
mov esi, eax
mov eax, dword [esp + 0x74]
cmp edx, edi
jge 0x4980b7
mov dword [esp + 0x5c], edx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x44], esi
mov eax, 0xcccccccd
mul ebx
shr edx, 2
mov dword [esp + 0xb0], edx
add edx, 0
mov dword [esp + 0xac], edx
mov eax, 0xcccccccd
mul esi
shr edx, 2
mov dword [esp + 0xa4], edx
lea ebp, [edx + edx*4]
sub esi, ebp
mov eax, 0x33333333
mul esi
mov dword [esp + 0xa0], edx
mov dword [esp + 0x9c], eax
mov ebp, dword [esp + 0xac]
add eax, ebp
mov dword [esp + 0xac], eax
mov edi, dword [esp + 0xb0]
lea edx, [edi + edi*4]
sub ebx, edx
lea edx, [ebx + esi]
mov ebx, eax
mov eax, edx
mov esi, 0xcccccccd
mul esi
shr edx, 2
mov dword [esp + 0xb0], edx
add ebx, edx
mov eax, ebx
mov esi, 5
mul esi
add edi, 0
mov edi, dword [esp + 0xa4]
adc edi, 0
mov esi, dword [esp + 0x9c]
add esi, ebp
mov ebp, dword [esp + 0xa0]
adc ebp, edi
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0xb0]
add esi, edi
adc ebp, 0
lea esi, [ebp + ebp*4]
add edx, esi
mov esi, dword [esp + 0x44]
cmp esi, edx
setne dl
mov esi, dword [esp + 0x38]
cmp eax, esi
xchg esi, ebx
setne bl
xchg esi, ebx
or esi, edx
xchg esi, eax
test al, al
xchg esi, eax
je 0x497fa2
mov eax, dword [esp + 0x74]
mov edi, dword [esp + 0x54]
movzx edx, byte [esp + 0x22]
jmp 0x4980bc
mov edx, 1
mov byte [esp + 0x22], dl
mov ebx, dword [esp + 0x2c]
test ebx, ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
mov esi, dword [esp + 0x28]
test esi, esi
sete dl
and ebp, edx
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x4980e2
xor edx, edx
jmp 0x498119
mov edx, 1
mov ebx, dword [esp + 0x84]
mov ebp, dword [esp + 0x80]
movzx esi, byte [esp + 0x22]
movzx edi, byte [esp + 0x21]
jmp 0x497a03
mov eax, ebp
mov ebp, dword [esp + 0x58]
lea edx, [ebp + 1]
mov edi, dword [esp + 0x54]
mov esi, ebx
mov ebx, eax
mov eax, dword [esp + 0x74]
cmp edx, edi
jge 0x4980e2
mov dword [esp + 0x58], edx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x34], esi
mov eax, 0xcccccccd
mul esi
shr edx, 2
mov dword [esp + 0xb0], edx
add edx, 0
mov dword [esp + 0xac], edx
mov eax, 0xcccccccd
mul ebx
shr edx, 2
mov dword [esp + 0xa4], edx
lea ebp, [edx + edx*4]
sub ebx, ebp
mov eax, 0x33333333
mul ebx
mov dword [esp + 0xa0], edx
mov dword [esp + 0x9c], eax
mov ebp, dword [esp + 0xac]
add eax, ebp
mov dword [esp + 0xac], eax
mov edi, dword [esp + 0xb0]
lea edx, [edi + edi*4]
sub esi, edx
lea edx, [esi + ebx]
mov ebx, eax
mov eax, edx
mov esi, 0xcccccccd
mul esi
shr edx, 2
mov dword [esp + 0xb0], edx
add ebx, edx
mov eax, ebx
mov esi, 5
mul esi
add edi, 0
mov edi, dword [esp + 0xa4]
adc edi, 0
mov esi, dword [esp + 0x9c]
add esi, ebp
mov ebp, dword [esp + 0xa0]
adc ebp, edi
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0xb0]
add esi, edi
adc ebp, 0
lea esi, [ebp + ebp*4]
add edx, esi
mov esi, dword [esp + 0x40]
cmp esi, edx
setne dl
mov esi, dword [esp + 0x34]
cmp eax, esi
xchg esi, ebx
setne bl
xchg esi, ebx
or esi, edx
xchg esi, eax
test al, al
xchg esi, eax
je 0x498104
mov eax, dword [esp + 0x74]
movzx edx, byte [esp + 0x20]
jmp 0x4980e7
lea eax, [0x535040]
mov dword [esp], eax
lea eax, [0x57d9d4]
mov dword [esp + 4], eax
call fcn.004332d0
nop
call fcn.0045e000
jmp fcn.00497530