Function at 0x4a8370
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x150]
cmp eax, dword [ecx + 8]
jbe 0x4aa0b1
sub esp, 0x1d0
lea edi, [esp]
lea esi, [esp + 0x1d4]
call fcn.00464b1e
call fcn.004aef50
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x84], ecx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x80], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x68], ebx
mov ebp, dword [esp + 0x14]
mov dword [esp + 0x1b0], ebp
mov esi, dword [esp + 0x1f8]
mov edi, dword [esp + 0x1f4]
mov esi, 0xffffffff
mov dword [esp + 0x38], esi
mov edi, 0xffffffff
mov dword [esp + 0x74], edi
xor edi, edi
mov dword [esp + 0x6c], edi
xor esi, esi
mov dword [esp + 0x78], esi
xor esi, esi
mov dword [esp + 0x3c], esi
xor esi, esi
mov dword [esp + 0x70], esi
xor esi, esi
mov dword [esp + 0x58], esi
mov esi, dword [esp + 0x1f0]
mov dword [esp + 0xac], esi
mov edi, dword [esp + 0x1ec]
mov dword [esp + 0xa8], edi
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0x1e8]
mov dword [esp + 0x1b8], eax
mov esi, dword [esp + 0x1f8]
mov edi, dword [esp + 0x1f4]
mov eax, dword [esp + 0xc0]
jmp 0x4a8499
mov eax, ecx
mov ecx, dword [esp + 0x84]
mov ebp, dword [esp + 0x1b0]
mov esi, dword [esp + 0x50]
mov dword [esp + 0xac], ebx
mov dword [esp + 0xa8], edx
mov dword [esp + 0x1b8], edi
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x68]
mov edi, dword [esp + 0x1a4]
test esi, esi
je 0x4a9704
mov dword [esp], edi
mov dword [esp + 4], esi
call fcn.004a61d0
mov eax, dword [esp + 0x14]
mov dword [esp + 0x1a4], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x50], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x54], edx
mov ebx, dword [esp + 0xc]
mov ebp, dword [esp + 8]
test ebx, ebx
jne 0x4a84ee
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x1b8]
mov esi, dword [esp + 0xa8]
jmp 0x4a85a2
mov esi, dword [esp + 0xa8]
lea edi, [ebx + esi]
mov eax, dword [esp + 0xac]
cmp eax, edi
jae 0x4a8556
mov dword [esp + 0x60], ebx
mov dword [esp + 0x1ac], ebp
mov ecx, dword [esp + 0x1b8]
mov dword [esp], ecx
mov dword [esp + 4], edi
mov dword [esp + 8], eax
lea eax, [0x6873e0]
mov dword [esp + 0x10], eax
call fcn.0044af60
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x60]
mov ebp, dword [esp + 0x1ac]
mov esi, dword [esp + 0xa8]
mov dword [esp + 0x1b8], eax
mov eax, ecx
mov dword [esp + 0xac], edi
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0x1b8]
lea edx, [ecx + esi]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
call fcn.00464d30
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x54]
mov ebx, dword [esp + 0xa8]
mov ebp, dword [esp + 0x1b8]
mov esi, dword [esp + 0xac]
test edx, edx
je 0x4a9719
mov dword [esp + 0x1b4], ebp
mov dword [esp + 0xa4], esi
mov dword [esp + 0xa0], ebx
mov edi, ebp
mov ebp, dword [esp + 0x38]
test ebp, ebp
jge 0x4a8633
test edx, 0x100
je 0x4a8633
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x80]
mov dword [esp], ecx
mov byte [esp + 8], 1
call fcn.004b0580
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
inc ebx
mov esi, dword [esp + 0xa4]
mov edi, dword [esp + 0x1b4]
mov ebp, eax
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x78], edx
mov dword [esp + 0x3c], ebx
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x54]
mov ebx, dword [esp + 0xa0]
mov dword [esp + 0x38], ebp
mov ebp, dword [esp + 0x74]
test ebp, ebp
jge 0x4a86e7
test edx, 0x200
je 0x4a86e7
nop
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x80]
mov dword [esp], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x15180
call fcn.0045d440
mov eax, dword [esp + 0x10]
mov ecx, eax
mov eax, 0x91a2b3c5
imul ecx
lea eax, [edx + ecx]
sar eax, 0xb
mov edx, ecx
sar ecx, 0x1f
sub eax, ecx
imul ecx, eax, 0xe10
sub edx, ecx
mov ecx, eax
mov eax, 0x88888889
mov ebx, edx
imul edx
lea eax, [ebx + edx]
sar eax, 5
mov edx, ebx
sar ebx, 0x1f
sub eax, ebx
imul ebx, eax, 0x3c
sub edx, ebx
mov ebx, dword [esp + 0xa0]
mov esi, dword [esp + 0xa4]
mov edi, dword [esp + 0x1b4]
mov dword [esp + 0x70], eax
mov dword [esp + 0x58], edx
mov ebp, ecx
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x54]
mov dword [esp + 0x74], ebp
and edx, 0xffff
cmp edx, 0x109
jg 0x4a9101
cmp edx, 0x103
jg 0x4a8dea
cmp edx, 0x23
jg 0x4a8c8a
cmp edx, 0x17
je 0x4a8a79
lea ecx, [edx - 0x18]
cmp ecx, 9
ja 0x4a8a01
mov ecx, dword [esp + 0x64]
test ecx, ecx
jne 0x4a879c
mov edx, dword [esp + 0x54]
cmp edx, 0x18
je 0x4a874c
cmp edx, 0x1b
je 0x4a874c
cmp edx, 0x19
je 0x4a874c
cmp edx, 0x1a
je 0x4a874c
cmp edx, 0x1c
jne 0x4a87a0
lea edx, [esi + 1]
cmp ebx, edx
jae 0x4a8792
mov dword [esp], edi
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x6873e0]
mov dword [esp + 0x10], eax
call fcn.0044af60
mov ebp, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x64]
mov edi, ebp
mov ebp, dword [esp + 0x74]
mov byte [edx + edi - 1], 0x5a
jmp 0x4a845e
mov edx, dword [esp + 0x54]
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
mov dword [esp + 0xac], edx
mov eax, ecx
sar ecx, 0x1f
sub edx, ecx
test edx, edx
jge 0x4a881d
lea edx, [esi + 1]
cmp ebx, edx
jae 0x4a880b
mov dword [esp + 0xa8], ecx
mov dword [esp], edi
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x6873e0]
mov dword [esp + 0x10], eax
call fcn.0044af60
mov ebp, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0xa8]
mov edi, ebp
mov ebp, dword [esp + 0x74]
mov byte [edx + edi - 1], 0x2d
mov esi, dword [esp + 0xac]
sub ecx, esi
neg eax
jmp 0x4a886f
lea ecx, [esi + 1]
cmp ebx, ecx
jae 0x4a8864
mov dword [esp + 0x34], edx
mov dword [esp], edi
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x6873e0]
mov dword [esp + 0x10], eax
call fcn.0044af60
mov ebp, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x34]
mov edi, ebp
mov ebp, dword [esp + 0x74]
mov byte [ecx + edi - 1], 0x2b
mov esi, edx
mov edx, ecx
mov ecx, esi
mov dword [esp + 0xac], ecx
mov dword [esp + 0x7c], eax
mov dword [esp], edi
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
sar ecx, 0x1f
sub edx, ecx
mov dword [esp + 0xa8], edx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 2
call fcn.004a70c0
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x54]
cmp ebp, 0x1b
je 0x4a88d2
cmp ebp, 0x20
je 0x4a88d2
cmp ebp, 0x1c
je 0x4a88d2
cmp ebp, 0x21
jne 0x4a890e
inc ebx
cmp ecx, ebx
jae 0x4a8909
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x6873e0]
mov dword [esp + 0x10], eax
call fcn.0044af60
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x54]
mov byte [ebx + edx - 1], 0x3a
cmp ebp, 0x1f
je 0x4a8957
cmp ebp, 0x1a
je 0x4a8957
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov eax, dword [esp + 0xa8]
imul eax, eax, 0x3c
mov ecx, dword [esp + 0xac]
sub ecx, eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 2
call fcn.004a70c0
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x54]
cmp ebp, 0x19
je 0x4a89a3
cmp ebp, 0x1e
je 0x4a89a3
cmp ebp, 0x21
je 0x4a896b
cmp ebp, 0x1c
jne 0x4a89e7
inc ebx
cmp ecx, ebx
jae 0x4a899e
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x6873e0]
mov dword [esp + 0x10], eax
call fcn.0044af60
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov byte [ebx + edx - 1], 0x3a
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov eax, 0x88888889
mov ecx, dword [esp + 0x7c]
imul ecx
add edx, ecx
sar edx, 5
mov ebx, ecx
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x3c
sub ebx, ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 2
call fcn.004a70c0
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x1a4]
mov ebp, dword [esp + 0x74]
mov edi, edx
mov edx, ebx
mov ebx, ecx
mov ecx, dword [esp + 0x64]
jmp 0x4a845e
cmp edx, 0x22
jge 0x4a8a0f
mov ecx, dword [esp + 0x50]
jmp 0x4a956d
mov eax, edi
lea edi, [esp + 0x1bc]
lea esi, [esp + 0x1d4]
call fcn.00464b1e
nop
mov ecx, dword [esp + 0x1bc]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
and ecx, 0x3fffffff
mov dword [esp + 0xc], ecx
mov eax, dword [esp + 0x54]
mov dword [esp + 0x10], eax
call fcn.004a7450
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x64]
mov edx, esi
mov edi, ebp
mov ebp, dword [esp + 0x74]
jmp 0x4a845e
mov edx, dword [esp + 0x68]
test edx, edx
je 0x4a8b1b
lea eax, [edx + esi]
cmp ebx, eax
jae 0x4a8ac3
mov dword [esp], edi
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
lea eax, [0x6873e0]
mov dword [esp + 0x10], eax
call fcn.0044af60
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov edx, dword [esp + 0x68]
mov esi, dword [esp + 0xa4]
mov edi, ebp
mov dword [esp + 0x1b8], edi
mov dword [esp + 0xac], eax
mov dword [esp + 0xa8], ebx
lea ecx, [edi + esi]
mov dword [esp], ecx
mov ecx, dword [esp + 0x1b0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00464d30
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x64]
mov ebp, dword [esp + 0x74]
mov ebx, dword [esp + 0xa8]
mov edx, dword [esp + 0xac]
mov edi, dword [esp + 0x1b8]
jmp 0x4a845e
mov eax, 0x88888889
mov edx, dword [esp + 0x64]
imul edx
mov eax, ecx
mov ecx, dword [esp + 0x64]
add edx, ecx
sar edx, 5
mov dword [esp + 0xac], edx
sar ecx, 0x1f
sub edx, ecx
test edx, edx
jge 0x4a8b9e
lea edx, [esi + 1]
cmp ebx, edx
jae 0x4a8b8e
mov dword [esp + 0xa8], ecx
mov dword [esp], edi
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x6873e0]
mov dword [esp + 0x10], eax
call fcn.0044af60
mov ebp, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0xa8]
mov edi, ebp
mov ebp, dword [esp + 0x74]
mov byte [edx + edi - 1], 0x2d
mov esi, dword [esp + 0xac]
sub ecx, esi
jmp 0x4a8bf0
lea ecx, [esi + 1]
cmp ebx, ecx
jae 0x4a8be5
mov dword [esp + 0x30], edx
mov dword [esp], edi
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x6873e0]
mov dword [esp + 0x10], eax
call fcn.0044af60
mov ebp, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x30]
mov edi, ebp
mov ebp, dword [esp + 0x74]
mov byte [ecx + edi - 1], 0x2b
mov esi, edx
mov edx, ecx
mov ecx, esi
mov dword [esp + 0xac], ecx
mov dword [esp], edi
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
sar ecx, 0x1f
sub edx, ecx
mov dword [esp + 0xa8], edx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 2
call fcn.004a70c0
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov ecx, dword [esp + 0xa8]
imul ecx, ecx, 0x3c
mov edx, dword [esp + 0xac]
sub edx, ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 2
call fcn.004a70c0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x64]
mov edx, esi
mov edi, ebp
mov ebp, dword [esp + 0x74]
jmp 0x4a845e
cmp edx, 0x101
jne 0x4a8d16
mov edx, dword [esp + 0x6c]
lea ebp, [edx - 1]
cmp ebp, 0xb
jbe 0x4a8cf4
test edx, edx
xchg ebp, ebx
sete bl
xchg ebp, ebx
sar edx, 0x1f
test edx, edx
sete cl
mov byte [esp + 0x29], cl
lea edi, [esp + 0xf0]
xor eax, eax
call fcn.0046463b
movzx ecx, byte [esp + 0x29]
and ebp, ecx
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x4a8ce2
mov ebp, dword [esp + 0x6c]
mov eax, ebp
mov ecx, 0x14
jmp 0x4a9fa0
mov byte [esp + 0x103], 0x30
mov eax, 0x13
jmp 0x4a9efc
mov edi, dword [0x8ad62c]
mov ebx, dword [0x8ad628]
cmp edi, ebp
jbe 0x4a9ef3
lea ebx, [ebx + edx*8 - 8]
mov ebp, dword [ebx]
mov ebx, dword [ebx + 4]
jmp 0x4a9e1f
cmp edx, 0x102
jne 0x4a8d9a
mov edx, ebp
mov ebp, dword [esp + 0x6c]
lea ebx, [ebp - 1]
cmp ebx, 0xb
ja 0x4a8d4e
mov edi, dword [0x8ad62c]
mov esi, dword [0x8ad628]
cmp edi, ebx
jbe 0x4a9e16
lea ebx, [esi + ebp*8 - 8]
mov esi, dword [ebx]
mov ebx, dword [ebx + 4]
jmp 0x4a9bf0
test ebp, ebp
sete bl
sar ebp, 0x1f
test ebp, ebp
sete cl
mov byte [esp + 0x29], cl
lea edi, [esp + 0x104]
xor eax, eax
call fcn.0046463b
movzx ecx, byte [esp + 0x29]
and ebx, ecx
test bl, bl
jne 0x4a8d88
mov ebx, dword [esp + 0x6c]
mov eax, ebx
mov ecx, 0x14
jmp 0x4a9d13
mov byte [esp + 0x117], 0x30
mov eax, 0x13
jmp 0x4a9b7c
cmp edx, 0x103
jne 0x4a956d
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.004a70c0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x64]
mov edx, esi
mov edi, ebp
mov ebp, dword [esp + 0x74]
jmp 0x4a845e
cmp edx, 0x106
jg 0x4a8fcb
cmp edx, 0x104
je 0x4a8f87
cmp edx, 0x105
jne 0x4a8ec8
mov eax, dword [esp + 0x80]
add eax, 0x15180
mov edx, dword [esp + 0x84]
adc edx, 0
mov dword [esp + 4], edx
mov dword [esp], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x93a80
call fcn.0045d440
mov eax, dword [esp + 0x10]
mov ecx, eax
mov eax, 0xc22e4507
imul ecx
lea eax, [edx + ecx]
sar eax, 0x10
sar ecx, 0x1f
sub eax, ecx
cmp eax, 6
jbe 0x4a8ea7
test eax, eax
sete cl
mov byte [esp + 0x29], cl
mov edx, eax
sar eax, 0x1f
test eax, eax
sete bl
lea edi, [esp + 0xc8]
mov ebp, eax
xor eax, eax
call fcn.0046463b
movzx ecx, byte [esp + 0x29]
and ebx, ecx
test bl, bl
jne 0x4a8e95
mov eax, 0x14
jmp 0x4a9a88
mov byte [esp + 0xdb], 0x30
mov eax, 0x13
jmp 0x4a9a10
mov ecx, dword [0x8ad61c]
mov edx, dword [0x8ad618]
cmp ecx, eax
jbe 0x4a9a0b
lea eax, [edx + eax*8]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
jmp 0x4a994b
mov eax, dword [esp + 0x80]
add eax, 0x15180
mov edx, dword [esp + 0x84]
adc edx, 0
mov dword [esp + 4], edx
mov dword [esp], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x93a80
call fcn.0045d440
mov eax, dword [esp + 0x10]
mov ecx, eax
mov eax, 0xc22e4507
imul ecx
lea eax, [edx + ecx]
sar eax, 0x10
sar ecx, 0x1f
sub eax, ecx
cmp eax, 6
ja 0x4a8f38
mov ecx, dword [0x8ad61c]
mov ebx, dword [0x8ad618]
cmp ecx, eax
jbe 0x4a9946
lea eax, [ebx + eax*8]
mov ebx, dword [eax]
mov eax, dword [eax + 4]
jmp 0x4a9796
mov dword [esp + 0xac], eax
mov ecx, eax
sar eax, 0x1f
test eax, eax
sete dl
test ecx, ecx
sete bl
lea edi, [esp + 0xdc]
mov ebp, eax
xor eax, eax
call fcn.0046463b
and ebx, edx
test bl, bl
jne 0x4a8f75
mov eax, dword [esp + 0xac]
mov ecx, 0x14
jmp 0x4a985f
mov byte [esp + 0xef], 0x30
mov eax, 0x13
jmp 0x4a9735
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.004a70c0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x64]
mov edx, esi
mov edi, ebp
mov ebp, dword [esp + 0x74]
jmp 0x4a845e
cmp edx, 0x107
je 0x4a90bd
cmp edx, 0x108
jne 0x4a9079
mov edx, dword [esp + 0x78]
cmp edx, 0xa
jge 0x4a9039
inc esi
cmp ebx, esi
jae 0x4a9034
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x6873e0]
mov dword [esp + 0x10], eax
call fcn.0044af60
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x78]
mov edi, ebp
mov ebp, dword [esp + 0x74]
mov byte [esi + edi - 1], 0x20
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 0
call fcn.004a70c0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x64]
mov edx, esi
mov edi, ebp
mov ebp, dword [esp + 0x74]
jmp 0x4a845e
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x78]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.004a70c0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x64]
mov edx, esi
mov edi, ebp
mov ebp, dword [esp + 0x74]
jmp 0x4a845e
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x78]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.004a70c0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x64]
mov edx, esi
mov edi, ebp
mov ebp, dword [esp + 0x74]
jmp 0x4a845e
cmp edx, 0x20d
jg 0x4a93d1
cmp edx, 0x113
jg 0x4a92ab
cmp edx, 0x10a
je 0x4a91c1
cmp edx, 0x10b
je 0x4a917d
cmp edx, 0x113
jne 0x4a956d
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x38]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 4
call fcn.004a70c0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x64]
mov edx, esi
mov edi, ebp
mov ebp, dword [esp + 0x74]
jmp 0x4a845e
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 3
call fcn.004a70c0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x64]
mov edx, esi
mov edi, ebp
mov ebp, dword [esp + 0x74]
jmp 0x4a845e
mov edx, dword [esp + 0x3c]
cmp edx, 0x64
jge 0x4a926b
inc esi
cmp ebx, esi
jae 0x4a9216
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x6873e0]
mov dword [esp + 0x10], eax
call fcn.0044af60
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x3c]
mov edi, ebp
mov ebp, dword [esp + 0x74]
mov byte [esi + edi - 1], 0x20
cmp edx, 0xa
jge 0x4a926b
inc esi
cmp ebx, esi
jae 0x4a9266
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x6873e0]
mov dword [esp + 0x10], eax
call fcn.0044af60
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x74]
mov byte [esi + edi - 1], 0x20
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 0
call fcn.004a70c0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x64]
mov edx, esi
mov edi, ebp
mov ebp, dword [esp + 0x74]
jmp 0x4a845e
cmp edx, 0x114
je 0x4a936f
cmp edx, 0x20c
je 0x4a932f
cmp edx, 0x20d
jne 0x4a956d
mov eax, 0xaaaaaaab
imul ebp
add edx, ebp
sar edx, 3
mov eax, ebp
sar ebp, 0x1f
sub edx, ebp
lea edx, [edx + edx*2]
shl edx, 2
sub eax, edx
test eax, eax
jne 0x4a92ef
mov eax, 0xc
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.004a70c0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x64]
mov edx, esi
mov edi, ebp
mov ebp, dword [esp + 0x74]
jmp 0x4a845e
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], 2
call fcn.004a70c0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x64]
mov edx, esi
mov edi, ebp
mov ebp, dword [esp + 0x74]
jmp 0x4a845e
mov edx, dword [esp + 0x38]
test edx, edx
jge 0x4a9379
neg edx
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, 0x51eb851f
mov ecx, edx
imul edx
sar edx, 5
mov ebx, ecx
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x64
sub ebx, ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 2
call fcn.004a70c0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x64]
mov edx, esi
mov edi, ebp
mov ebp, dword [esp + 0x74]
jmp 0x4a845e
cmp edx, 0x210
jle 0x4a9608
cmp edx, 0x212
jle 0x4a9578
cmp edx, 0x215
jne 0x4a94ab
cmp ebp, 0xc
jl 0x4a944f
lea edx, [esi + 2]
cmp ebx, edx
jae 0x4a9447
mov dword [esp], edi
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 2
lea eax, [0x6873e0]
mov dword [esp + 0x10], eax
call fcn.0044af60
mov ebp, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0xa4]
mov edi, ebp
mov ebp, dword [esp + 0x74]
mov word [edi + esi], 0x4d50
jmp 0x4a94a2
lea edx, [esi + 2]
cmp ebx, edx
jae 0x4a949c
mov dword [esp], edi
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 2
lea eax, [0x6873e0]
mov dword [esp + 0x10], eax
call fcn.0044af60
mov ebp, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0xa4]
mov edi, ebp
mov ebp, dword [esp + 0x74]
mov word [edi + esi], 0x4d41
mov ecx, dword [esp + 0x64]
jmp 0x4a845e
cmp edx, 0x216
jne 0x4a956d
cmp ebp, 0xc
jl 0x4a9511
lea edx, [esi + 2]
cmp ebx, edx
jae 0x4a9509
mov dword [esp], edi
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 2
lea eax, [0x6873e0]
mov dword [esp + 0x10], eax
call fcn.0044af60
mov ebp, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0xa4]
mov edi, ebp
mov ebp, dword [esp + 0x74]
mov word [edi + esi], 0x6d70
jmp 0x4a9564
lea edx, [esi + 2]
cmp ebx, edx
jae 0x4a955e
mov dword [esp], edi
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 2
lea eax, [0x6873e0]
mov dword [esp + 0x10], eax
call fcn.0044af60
mov ebp, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0xa4]
mov edi, ebp
mov ebp, dword [esp + 0x74]
mov word [edi + esi], 0x6d61
mov ecx, dword [esp + 0x64]
jmp 0x4a845e
mov ecx, dword [esp + 0x64]
mov edx, esi
jmp 0x4a845e
cmp edx, 0x211
jne 0x4a95c4
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.004a70c0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x64]
mov edx, esi
mov edi, ebp
mov ebp, dword [esp + 0x74]
jmp 0x4a845e
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.004a70c0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x64]
mov edx, esi
mov edi, ebp
mov ebp, dword [esp + 0x74]
jmp 0x4a845e
cmp edx, 0x20e
jne 0x4a9674
mov eax, 0xaaaaaaab
imul ebp
add edx, ebp
sar edx, 3
mov eax, ebp
sar ebp, 0x1f
sub edx, ebp
lea edx, [edx + edx*2]
shl edx, 2
sub eax, edx
test eax, eax
jne 0x4a9634
mov eax, 0xc
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.004a70c0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x64]
mov edx, esi
mov edi, ebp
mov ebp, dword [esp + 0x74]
jmp 0x4a845e
cmp edx, 0x20f
jne 0x4a96c0
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x70]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.004a70c0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x64]
mov edx, esi
mov edi, ebp
mov ebp, dword [esp + 0x74]
jmp 0x4a845e
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x70]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.004a70c0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x64]
mov edx, esi
mov edi, ebp
mov ebp, dword [esp + 0x74]
jmp 0x4a845e
mov esi, dword [esp + 0xa8]
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x1b8]
mov dword [esp + 0x1fc], ebp
mov dword [esp + 0x200], esi
mov dword [esp + 0x204], ebx
add esp, 0x1d0
ret
cmp eax, 0x14
ja 0x4a9845
lea ecx, [esp + 0x138]
mov dword [esp], ecx
lea ecx, [0x6c0eb2]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xa
lea edx, [eax - 0x14]
neg edx
mov ebx, edx
neg edx
sar edx, 0x1f
and eax, edx
lea eax, [esp + eax + 0xdc]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebx
lea eax, [0x725418]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 1
call fcn.0044ea20
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
cmp eax, 3
jb 0x4a9839
mov eax, dword [esp + 0xa4]
lea ecx, [eax + 3]
mov edx, dword [esp + 0xa0]
cmp edx, ecx
jb 0x4a97bd
mov ebp, dword [esp + 0x1b4]
jmp 0x4a9809
mov dword [esp + 0x198], ebx
mov eax, dword [esp + 0x1b4]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], 3
lea eax, [0x6873e0]
mov dword [esp + 0x10], eax
call fcn.0044af60
mov ebp, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0xa4]
mov edx, ebx
mov ebx, dword [esp + 0x198]
movzx esi, word [ebx]
mov edi, esi
movzx esi, byte [ebx + 2]
mov word [ebp + eax], di
xchg esi, ebx
mov byte [ebp + eax + 2], bl
xchg esi, ebx
mov eax, dword [esp + 0x1a4]
mov ebx, edx
mov edx, ecx
mov edi, ebp
mov ecx, dword [esp + 0x64]
mov ebp, dword [esp + 0x74]
jmp 0x4a845e
mov ecx, 3
mov edx, eax
call fcn.00464440
mov ecx, 0x14
call fcn.00464480
add ebx, 0x30
mov byte [esp + ecx + 0xdb], bl
mov ebp, edx
mov ecx, eax
mov eax, edi
test eax, eax
seta dl
test ebp, ebp
seta bl
xchg esi, ebx
sete bl
xchg esi, ebx
and esi, edx
or esi, ebx
xchg esi, eax
test al, al
xchg esi, eax
je 0x4a9935
mov dword [esp + 0x44], eax
mov edx, eax
mov eax, 0xcccccccd
mov ebx, edx
mul ebp
shr edx, 3
lea esi, [edx + edx*4]
shl esi, 1
sub ebp, esi
mov eax, 0x19999999
mov esi, edx
mul ebp
mov dword [esp + 0x9c], edx
mov dword [esp + 0x98], eax
mov edi, eax
mov eax, 0xcccccccd
mul ebx
shr edx, 3
mov eax, esi
lea esi, [edx + edx*4]
shl esi, 1
sub ebx, esi
lea ebp, [ebp + ebp*2]
lea ebx, [ebx + ebp*2]
mov ebp, eax
mov eax, 0xcccccccd
mov esi, edx
mul ebx
shr edx, 3
mov dword [esp + 0x94], edx
mov ebx, esi
add esi, 0
add edi, esi
mov dword [esp + 0x90], edi
add edi, edx
mov eax, 0xa
mul edi
add ebx, 0
adc ebp, 0
mov edx, dword [esp + 0x98]
add edx, esi
mov edx, dword [esp + 0x9c]
adc edx, ebp
mov ebx, dword [esp + 0x90]
mov ebp, dword [esp + 0x94]
add ebx, ebp
adc edx, 0
mov ebx, dword [esp + 0x44]
sub ebx, eax
lea eax, [ecx - 1]
cmp eax, 0x14
jb 0x4a984f
jmp 0x4a993c
mov eax, ecx
jmp 0x4a9735
mov ecx, 0x14
call fcn.00464420
call fcn.00464420
mov edx, dword [esp + 0xa4]
lea ebx, [eax + edx]
mov ebp, dword [esp + 0xa0]
cmp ebp, ebx
jb 0x4a9969
mov esi, dword [esp + 0x1b4]
jmp 0x4a99bb
mov dword [esp + 0x5c], eax
mov dword [esp + 0x1a8], ecx
mov ecx, dword [esp + 0x1b4]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], eax
lea ecx, [0x6873e0]
mov dword [esp + 0x10], ecx
call fcn.0044af60
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1a8]
mov edx, dword [esp + 0xa4]
mov esi, ebp
mov ebp, eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x1b8], esi
mov dword [esp + 0xac], ebp
mov dword [esp + 0xa8], ebx
add edx, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00464d30
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x64]
mov ebp, dword [esp + 0x74]
mov ebx, dword [esp + 0xac]
mov edx, dword [esp + 0xa8]
mov edi, dword [esp + 0x1b8]
jmp 0x4a845e
call fcn.00464420
cmp eax, 0x14
ja 0x4a9a72
lea ecx, [esp + 0x118]
mov dword [esp], ecx
lea ecx, [0x6c0eb2]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xa
lea edx, [eax - 0x14]
neg edx
mov ebx, edx
neg edx
sar edx, 0x1f
and eax, edx
lea eax, [esp + eax + 0xc8]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebx
lea eax, [0x725418]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 1
call fcn.0044ea20
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
jmp 0x4a994b
mov ecx, 0x14
call fcn.00464480
lea ebx, [edx + 0x30]
mov byte [esp + ecx + 0xc7], bl
mov edx, edi
test ebp, ebp
seta bl
test edx, edx
xchg esi, ebx
seta bl
xchg esi, ebx
test ebp, ebp
xchg edi, ebx
sete bl
xchg edi, ebx
and edi, esi
or edi, ebx
xchg edi, eax
test al, al
xchg edi, eax
je 0x4a9a10
mov dword [esp + 0x40], edx
mov ecx, eax
mov eax, 0xcccccccd
mov ebx, edx
mul ebp
shr edx, 3
lea esi, [edx + edx*4]
shl esi, 1
sub ebp, esi
mov eax, 0x19999999
mov esi, edx
mul ebp
mov dword [esp + 0x9c], edx
mov dword [esp + 0x98], eax
mov edi, eax
mov eax, 0xcccccccd
mul ebx
shr edx, 3
mov dword [esp + 0x94], edx
mov eax, esi
lea esi, [edx + edx*4]
lea ebp, [ebp + ebp*2]
shl esi, 1
sub ebx, esi
lea ebx, [ebx + ebp*2]
mov ebp, eax
mov eax, ebx
mov esi, 0xcccccccd
mov ebx, edx
mul esi
shr edx, 3
mov dword [esp + 0x90], edx
add ebx, 0
add edi, ebx
mov dword [esp + 0x8c], edi
add edi, edx
mov eax, edi
mov esi, 0xa
mul esi
mov edx, dword [esp + 0x94]
add edx, 0
adc ebp, 0
mov edx, dword [esp + 0x98]
add edx, ebx
mov edx, dword [esp + 0x9c]
adc ebp, edx
mov edx, dword [esp + 0x8c]
mov ebx, dword [esp + 0x90]
add edx, ebx
adc ebp, 0
mov edx, dword [esp + 0x40]
sub edx, eax
lea eax, [ecx - 1]
cmp eax, 0x14
jb 0x4a9a7c
mov ecx, 0x14
call fcn.00464420
cmp eax, 0x14
ja 0x4a9ce8
lea ecx, [esp + 0x178]
mov dword [esp], ecx
lea ecx, [0x6c0606]
mov dword [esp + 4], ecx
mov dword [esp + 8], 8
lea edx, [eax - 0x14]
neg edx
mov ebx, edx
neg edx
sar edx, 0x1f
and eax, edx
lea eax, [esp + eax + 0x104]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebx
lea eax, [0x725418]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 1
call fcn.0044ea20
mov esi, dword [esp + 0x1c]
mov ebx, dword [esp + 0x20]
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x74]
mov ebp, dword [esp + 0x6c]
cmp ebx, 3
jb 0x4a9cdc
mov dword [esp + 0x1a0], esi
mov ebx, dword [esp + 0xa4]
lea edi, [ebx + 3]
mov eax, dword [esp + 0xa0]
cmp eax, edi
jb 0x4a9c33
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0x1b4]
mov dword [esp + 0x1b8], eax
mov eax, dword [esp + 0xb8]
jmp 0x4a9c8b
mov ecx, dword [esp + 0x1b4]
mov dword [esp], ecx
mov dword [esp + 4], edi
mov dword [esp + 8], eax
mov dword [esp + 0xc], 3
lea eax, [0x6873e0]
mov dword [esp + 0x10], eax
call fcn.0044af60
mov ebp, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x74]
mov esi, dword [esp + 0x1a0]
mov dword [esp + 0x1b8], ebp
mov eax, ebx
mov ebx, dword [esp + 0xa4]
mov ebp, dword [esp + 0x6c]
movzx esi, word [esi]
mov word [esp + 0x2a], si
mov esi, dword [esp + 0x1a0]
movzx esi, byte [esi + 2]
xchg esi, eax
mov byte [esp + 0x28], al
xchg esi, eax
movzx esi, word [esp + 0x2a]
mov ecx, dword [esp + 0x1b8]
mov word [ecx + ebx], si
movzx esi, byte [esp + 0x28]
xchg esi, eax
mov byte [ecx + ebx + 2], al
xchg esi, eax
mov ecx, dword [esp + 0x64]
mov ebp, edx
mov ebx, eax
mov edx, edi
mov edi, dword [esp + 0x1b8]
mov eax, dword [esp + 0x1a4]
jmp 0x4a845e
mov ecx, 3
mov edx, ebx
call fcn.00464440
mov ecx, 0x14
call fcn.00464480
mov esi, edi
lea edi, [edx + 0x30]
xchg edi, eax
mov byte [esp + ecx + 0x103], al
xchg edi, eax
mov edx, dword [esp + 0x74]
mov ebp, esi
mov ecx, eax
mov eax, dword [esp + 0x6c]
mov esi, dword [esp + 0xa4]
test ebp, ebp
xchg edi, ebx
sete bl
xchg edi, ebx
test ebx, ebx
seta dl
test ebp, ebp
xchg esi, ebx
seta bl
xchg esi, ebx
and edi, edx
or edi, esi
xchg edi, eax
test al, al
xchg edi, eax
je 0x4a9dfa
mov dword [esp + 0x4c], ebx
mov eax, 0xcccccccd
mul ebp
shr edx, 3
lea edi, [edx + edx*4]
shl edi, 1
sub ebp, edi
mov eax, 0x19999999
mov edi, edx
mul ebp
mov dword [esp + 0x9c], edx
mov dword [esp + 0x98], eax
mov eax, 0xcccccccd
mul ebx
shr edx, 3
mov dword [esp + 0x94], edx
lea esi, [edx + edx*4]
lea ebp, [ebp + ebp*2]
shl esi, 1
sub ebx, esi
lea ebx, [ebx + ebp*2]
mov eax, 0xcccccccd
mov esi, edx
mul ebx
shr edx, 3
mov dword [esp + 0x90], edx
add esi, 0
mov ebx, dword [esp + 0x98]
add ebx, esi
mov dword [esp + 0x8c], ebx
add ebx, edx
mov eax, ebx
mov ebp, 0xa
mul ebp
mov edx, dword [esp + 0x94]
add edx, 0
adc edi, 0
mov edx, dword [esp + 0x98]
add edx, esi
mov edx, dword [esp + 0x9c]
adc edi, edx
mov edx, dword [esp + 0x8c]
mov esi, dword [esp + 0x90]
add edx, esi
adc edi, 0
mov edx, dword [esp + 0x4c]
sub edx, eax
lea eax, [ecx - 1]
cmp eax, 0x14
jb 0x4a9cf2
jmp 0x4a9e0c
mov edx, dword [esp + 0x74]
mov esi, dword [esp + 0xa4]
mov eax, ecx
jmp 0x4a9b7c
mov ecx, 0x14
call fcn.00464420
mov eax, ebx
mov ecx, edi
call fcn.00464420
lea edi, [ebx + esi]
mov eax, dword [esp + 0xa0]
cmp eax, edi
jb 0x4a9e4b
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0x1b4]
mov dword [esp + 0x1b8], eax
mov eax, dword [esp + 0xb0]
jmp 0x4a9ea2
mov dword [esp + 0x19c], ebp
mov dword [esp + 0x2c], ebx
mov ecx, dword [esp + 0x1b4]
mov dword [esp], ecx
mov dword [esp + 4], edi
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
lea eax, [0x6873e0]
mov dword [esp + 0x10], eax
call fcn.0044af60
mov ebp, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov esi, dword [esp + 0xa4]
mov dword [esp + 0x1b8], ebp
mov eax, ebx
mov ebx, dword [esp + 0x2c]
mov ebp, dword [esp + 0x19c]
mov dword [esp + 0xac], eax
mov dword [esp + 0xa8], edi
mov ecx, dword [esp + 0x1b8]
lea edx, [ecx + esi]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
call fcn.00464d30
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x64]
mov ebp, dword [esp + 0x74]
mov ebx, dword [esp + 0xac]
mov edx, dword [esp + 0xa8]
mov edi, dword [esp + 0x1b8]
jmp 0x4a845e
mov eax, ebp
mov ecx, edi
call fcn.00464420
cmp eax, 0x14
ja 0x4a9f74
lea ecx, [esp + 0x158]
mov dword [esp], ecx
lea ecx, [0x6c0606]
mov dword [esp + 4], ecx
mov dword [esp + 8], 8
lea edx, [eax - 0x14]
neg edx
mov ebx, edx
neg edx
sar edx, 0x1f
and eax, edx
lea eax, [esp + eax + 0xf0]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebx
lea eax, [0x725418]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 1
call fcn.0044ea20
mov ebp, dword [esp + 0x1c]
mov ebx, dword [esp + 0x20]
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x6c]
mov esi, dword [esp + 0xa4]
jmp 0x4a9e1f
mov ecx, 0x14
call fcn.00464480
lea edi, [ebp + 0x30]
xchg edi, eax
mov byte [esp + ecx + 0xef], al
xchg edi, eax
mov esi, dword [esp + 0xa4]
mov ebp, ebx
mov ecx, eax
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xa0]
test edx, edx
xchg edi, ebx
sete bl
xchg edi, ebx
test ebp, ebp
seta bl
test edx, edx
xchg esi, ebx
seta bl
xchg esi, ebx
and edi, ebx
or edi, esi
xchg edi, eax
test al, al
xchg edi, eax
je 0x4aa091
mov dword [esp + 0x48], ebp
mov eax, edx
mov esi, 0xcccccccd
mov edi, edx
mul esi
shr edx, 3
mov dword [esp + 0x9c], edx
lea ebx, [edx + edx*4]
shl ebx, 1
sub edi, ebx
mov eax, 0x19999999
mul edi
mov dword [esp + 0x98], edx
mov dword [esp + 0x94], eax
lea edi, [edi + edi*2]
mov eax, ebp
mul esi
shr edx, 3
mov dword [esp + 0x90], edx
lea ebx, [edx + edx*4]
shl ebx, 1
sub ebp, ebx
lea ebx, [ebp + edi*2]
mov eax, esi
mov edi, edx
mul ebx
shr edx, 3
mov dword [esp + 0x8c], edx
add edi, 0
mov ebx, dword [esp + 0x94]
add ebx, edi
mov dword [esp + 0x88], ebx
add ebx, edx
mov eax, ebx
mov ebp, 0xa
mul ebp
mov edx, dword [esp + 0x90]
add edx, 0
mov edx, dword [esp + 0x9c]
adc edx, 0
mov ebp, dword [esp + 0x94]
add ebp, edi
mov ebp, dword [esp + 0x98]
adc edx, ebp
mov ebp, dword [esp + 0x88]
mov edi, dword [esp + 0x8c]
add ebp, edi
adc edx, 0
mov ebp, dword [esp + 0x48]
sub ebp, eax
lea eax, [ecx - 1]
cmp eax, 0x14
jb 0x4a9f7e
jmp 0x4aa0a6
mov ebx, dword [esp + 0xa0]
mov esi, dword [esp + 0xa4]
mov eax, ecx
jmp 0x4a9efc
mov ecx, 0x14
call fcn.00464420
nop
call fcn.00462f90
jmp fcn.004a8370