Function at 0x48aa40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x1c8
push ebx
mov ebx, dword [esp + 0x1d0]
push ebp
push esi
xor esi, esi
mov dword [ebx], esi
mov dword [ebx + 4], esi
mov dword [ebx + 8], esi
mov dword [esp + 0x18], esi
mov eax, dword [esp + 0x18]
mov dword [ebx + 0x10], eax
push edi
mov dword [esp + 0x20], esi
mov ecx, dword [esp + 0x20]
mov dword [ebx + 0x14], ecx
mov dword [esp + 0x24], esi
mov edx, dword [esp + 0x24]
mov dword [ebx + 0x18], edx
mov ebp, 1
lea eax, [ebx + 0x44]
push 4
mov edi, 0xfa0
mov dword [ebx + 0xc], edi
push eax
mov dword [ebx + 0x1c], esi
mov dword [ebx + 0x20], ebp
mov dword [ebx + 0x24], ebp
mov dword [ebx + 0x28], ebp
mov dword [ebx + 0x2c], ebp
mov dword [ebx + 0x30], esi
mov dword [ebx + 0x34], esi
mov dword [ebx + 0x38], esi
mov dword [ebx + 0x3c], esi
mov dword [ebx + 0x40], esi
call dword [0x10075f84]
mov dword [ebx + 0x48], esi
mov dword [ebx + 0x5c], esi
mov dword [ebx + 0x60], esi
mov dword [esp + 0x1c], esi
mov eax, dword [esp + 0x1c]
mov dword [ebx + 0x50], eax
mov dword [esp + 0x20], esi
mov ecx, dword [esp + 0x20]
mov dword [ebx + 0x54], ecx
mov dword [esp + 0x24], esi
mov edx, dword [esp + 0x24]
mov dword [ebx + 0x58], edx
mov dword [ebx + 0x4c], edi
mov dword [ebx + 0x68], ebp
mov dword [esp + 0x1c], esi
mov eax, dword [esp + 0x1c]
mov dword [ebx + 0x74], eax
mov dword [esp + 0x20], esi
mov ecx, dword [esp + 0x20]
mov dword [ebx + 0x6c], esi
mov dword [ebx + 0x78], ecx
mov dword [esp + 0x24], esi
mov edx, dword [esp + 0x24]
mov dword [ebx + 0x70], edi
mov dword [ebx + 0x7c], edx
mov dword [ebx + 0x80], esi
mov dword [ebx + 0x84], esi
mov dword [ebx + 0x90], esi
push 0x200
xor eax, eax
mov dword [ebx + 0x94], esi
mov dword [ebx + 0x98], esi
mov dword [ebx + 0x9c], 0xff
call fcn.004b15e0
mov dword [ebx + 0x94], eax
mov dword [ebx + 0x98], esi
mov word [eax], si
lea edi, [ebx + 0xa4]
add esp, 4
push 0x200
xor eax, eax
mov dword [esp + 0x34], edi
mov dword [edi], esi
mov dword [edi + 4], esi
mov dword [edi + 8], 0xff
call fcn.004b15e0
mov dword [edi], eax
mov dword [edi + 4], esi
mov word [eax], si
add esp, 4
push 0x200
xor eax, eax
mov dword [ebx + 0xb0], esi
mov dword [ebx + 0xb4], esi
mov dword [ebx + 0xb8], 0xff
call fcn.004b15e0
mov dword [ebx + 0xb0], eax
mov dword [ebx + 0xb4], esi
mov word [eax], si
mov dword [esp + 0x20], esi
mov eax, dword [esp + 0x20]
add esp, 4
mov dword [esp + 0x20], esi
mov ecx, dword [esp + 0x20]
mov dword [ebx + 0xc4], eax
mov dword [esp + 0x24], esi
mov edx, dword [esp + 0x24]
mov dword [ebx + 0xc8], ecx
mov dword [ebx + 0xbc], esi
push 0x1005f4a4
mov dword [ebx + 0xc0], 0xfa0
mov dword [ebx + 0xcc], edx
mov dword [ebx + 0xd0], esi
mov dword [ebx + 0xd4], esi
lea edi, [ebx + 0xe0]
push 0x1005f4b0
mov ecx, ebp
mov eax, 0x100055f0
mov dword [ebx + 0xdc], 0x6000000
call fcn.00489720
push 0x1005f4bc
lea edi, [ebx + 0x108]
push 0x1005f4b0
mov ecx, ebp
mov eax, 0x100058d0
call fcn.00489720
push 0x1005f4cc
lea edi, [ebx + 0x130]
push 0x1005f4b0
mov ecx, ebp
mov eax, 0x10005bf0
call fcn.00489720
push 0x1005f4d8
lea edi, [ebx + 0x158]
push 0x1005f4b0
mov ecx, ebp
mov eax, 0x10005c60
call fcn.00489720
push 0x1005f4e4
lea edi, [ebx + 0x180]
push 0x1005f4b0
mov ecx, ebp
mov eax, 0x10005cd0
call fcn.00489720
push 0x1005f4f4
lea edi, [ebx + 0x1a8]
push 0x1005f4b0
mov ecx, ebp
mov eax, 0x10005d20
call fcn.00489720
push 0x1005f50c
lea edi, [ebx + 0x1d0]
push 0x1005f4b0
mov ecx, ebp
mov eax, 0x10006480
call fcn.00489720
push 0x1005f524
lea edi, [ebx + 0x1f8]
push 0x1005f4b0
xor ecx, ecx
mov eax, 0x10006b90
call fcn.00489720
push 0x1005f52c
lea edi, [ebx + 0x220]
push 0x1005f4b0
mov ecx, ebp
mov eax, 0x10006d50
call fcn.00489720
push 0x1005f53c
lea edi, [ebx + 0x248]
push 0x1005f4b0
mov ecx, ebp
mov eax, 0x10006f20
call fcn.00489720
push 0x1005f54c
lea edi, [ebx + 0x270]
push 0x1005f4b0
mov ecx, ebp
mov eax, 0x10007090
call fcn.00489720
push 0x1005f564
lea edi, [ebx + 0x298]
push 0x1005f4b0
mov ecx, ebp
mov eax, 0x100070f0
call fcn.00489720
push 0x1005f57c
lea edi, [ebx + 0x2c0]
push 0x1005f4b0
mov ecx, ebp
mov eax, 0x10007170
call fcn.00489720
push 0x1005f590
lea edi, [ebx + 0x2e8]
push 0x1005f4b0
mov ecx, ebp
mov eax, 0x100071d0
call fcn.00489720
push 0x1005f5a4
lea edi, [ebx + 0x310]
push 0x1005f4b0
mov ecx, ebp
mov eax, 0x10007220
call fcn.00489720
push 0x1005f5b4
lea edi, [ebx + 0x338]
push 0x1005f4b0
mov ecx, ebp
mov eax, 0x10007280
call fcn.00489720
push 0x1005f5cc
lea edi, [ebx + 0x360]
push 0x1005f4b0
xor ecx, ecx
mov eax, 0x100072a0
call fcn.00489720
push 0x1005f5e0
lea edi, [ebx + 0x388]
push 0x1005f4b0
mov ecx, ebp
mov eax, 0x10007350
call fcn.00489720
push 0x1005f5fc
lea edi, [ebx + 0x3b0]
push 0x1005f4b0
mov ecx, ebp
mov eax, 0x100073d0
call fcn.00489720
push 0x1005f61c
lea edi, [ebx + 0x3d8]
push 0x1005f4b0
mov ecx, ebp
mov eax, 0x100077a0
call fcn.00489720
push 0x1005f634
lea edi, [ebx + 0x400]
push 0x1005f4b0
mov ecx, ebp
mov eax, 0x10007880
call fcn.00489720
push 0x1005f640
lea edi, [ebx + 0x428]
push 0x1005f4b0
mov ecx, ebp
mov eax, 0x10007940
call fcn.00489720
lea edi, [ebx + 0x450]
push 0x1005f650
push 0x1005f4b0
mov ecx, ebp
mov eax, 0x100079b0
call fcn.00489720
push 0x1005f664
lea edi, [ebx + 0x478]
push 0x1005f4b0
mov ecx, ebp
mov eax, 0x10007a10
call fcn.00489720
push 0x1005f674
lea edi, [ebx + 0x4a0]
push 0x1005f4b0
mov ecx, ebp
mov eax, 0x10007bf0
call fcn.00489720
push 0x1005f690
lea edi, [ebx + 0x4c8]
push 0x1005f4b0
mov ecx, ebp
mov eax, 0x10007cb0
call fcn.00489720
push 0x1005f6a8
lea edi, [ebx + 0x4f0]
push 0x1005f4b0
mov ecx, ebp
mov eax, 0x10007d80
call fcn.00489720
push 0x1005f6c4
lea edi, [ebx + 0x518]
push 0x1005f4b0
mov ecx, ebp
mov eax, 0x10007f10
call fcn.00489720
push 0x1005f6d4
lea edi, [ebx + 0x540]
push 0x1005f4b0
mov ecx, 2
mov eax, 0x10008050
call fcn.00489720
push 0x1005f6e0
lea edi, [ebx + 0x568]
push 0x1005f4b0
mov ecx, 2
mov eax, 0x100081f0
call fcn.00489720
push 0x1005f6ec
lea edi, [ebx + 0x590]
push 0x1005f4b0
mov ecx, 2
mov eax, 0x100082e0
call fcn.00489720
push 0x1005f700
lea edi, [ebx + 0x5b8]
push 0x1005f4b0
mov ecx, 2
mov eax, 0x10008450
call fcn.00489720
push 0x1005f710
lea edi, [ebx + 0x5e0]
push 0x1005f4b0
mov ecx, 2
mov eax, 0x100084f0
call fcn.00489720
push 0x1005f724
lea edi, [ebx + 0x608]
push 0x1005f4b0
mov ecx, 2
mov eax, 0x10008620
call fcn.00489720
push 0x1005f730
lea edi, [ebx + 0x630]
push 0x1005f4b0
mov ecx, 2
mov eax, 0x10008720
call fcn.00489720
push 0x1005f73c
lea edi, [ebx + 0x658]
push 0x1005f4b0
mov ecx, 2
mov eax, 0x100088c0
call fcn.00489720
push 0x1005f748
lea edi, [ebx + 0x680]
push 0x1005f4b0
mov ecx, 2
mov eax, 0x10008aa0
call fcn.00489720
push 0x1005f75c
lea edi, [ebx + 0x6a8]
push 0x1005f4b0
mov ecx, 2
mov eax, 0x10008cb0
call fcn.00489720
push 0x1005f768
lea edi, [ebx + 0x6d0]
push 0x1005f4b0
mov ecx, 2
mov eax, 0x10008c30
call fcn.00489720
push 0x1005f774
lea edi, [ebx + 0x6f8]
push 0x1005f4b0
mov ecx, 2
mov eax, 0x10008d00
call fcn.00489720
push 0x1005f780
lea edi, [ebx + 0x720]
push 0x1005f4b0
mov ecx, 2
mov eax, 0x10008e20
call fcn.00489720
push 0x1005f798
lea edi, [ebx + 0x748]
push 0x1005f4b0
mov ecx, 2
mov eax, 0x10008f30
call fcn.00489720
push 0x1005f7a8
lea edi, [ebx + 0x770]
push 0x1005f4b0
mov ecx, 2
mov eax, 0x100090e0
call fcn.00489720
push 0x1005f7b8
lea edi, [ebx + 0x798]
push 0x1005f4b0
mov ecx, 2
mov eax, 0x10009240
call fcn.00489720
push 0x1005f7c8
lea edi, [ebx + 0x7c0]
push 0x1005f4b0
mov ecx, 2
mov eax, 0x10009370
call fcn.00489720
push 0x1005f7d4
lea edi, [ebx + 0x7e8]
push 0x1005f4b0
mov ecx, 2
mov eax, 0x10009490
call fcn.00489720
push 0x1005f7e8
lea edi, [ebx + 0x810]
push 0x1005f4b0
mov ecx, 2
mov eax, 0x10009570
call fcn.00489720
push 0x1005f7f8
lea edi, [ebx + 0x838]
push 0x1005f4b0
mov ecx, 2
mov eax, 0x10009720
call fcn.00489720
push 0x1005f804
lea edi, [ebx + 0x860]
push 0x1005f4b0
xor ecx, ecx
mov eax, 0x10009820
call fcn.00489720
lea ebp, [ebx + 0x888]
mov dword [ebp], esi
push 0x1005f814
lea edi, [ebx + 0x894]
push 0x1005f2e0
xor ecx, ecx
mov eax, 0x10009a00
mov dword [ebp + 4], esi
call fcn.00489720
push 0x1005f824
lea edi, [ebx + 0x8bc]
push 0x1005f4b0
xor ecx, ecx
mov eax, 0x10009f10
call fcn.00489720
push 0x1005f84c
lea edi, [ebx + 0x8e4]
push 0x1005f2e0
xor ecx, ecx
mov eax, 0x1000a850
call fcn.00489720
push 0x1005f85c
lea edi, [ebx + 0x90c]
push 0x1005f2e0
xor ecx, ecx
mov eax, 0x1000b7b0
call fcn.00489720
push 0x1005f86c
lea edi, [ebx + 0x934]
push 0x1005f2e0
xor ecx, ecx
mov eax, 0x1000a4c0
call fcn.00489720
push 0x1005f874
lea edi, [ebx + 0x95c]
push 0x1005f888
xor ecx, ecx
mov eax, 0x1000d780
call fcn.00489720
push 0x1005f898
lea edi, [ebx + 0x984]
push 0x1005f888
xor ecx, ecx
mov eax, 0x1000d800
call fcn.00489720
push 0x1005f8ac
lea edi, [ebx + 0x9ac]
push 0x1005f4b0
xor ecx, ecx
mov eax, 0x1000d880
call fcn.00489720
push 0x1005f8b8
lea edi, [ebx + 0x9d4]
push 0x1005f4b0
xor ecx, ecx
mov eax, 0x1000da80
call fcn.00489720
push 0x1005f8c8
lea edi, [ebx + 0x9fc]
push 0x1005f4b0
xor ecx, ecx
mov eax, 0x1000da90
call fcn.00489720
push 0x1005f8e4
lea edi, [ebx + 0xa24]
push 0x1005f4b0
xor ecx, ecx
mov eax, 0x1000dce0
call fcn.00489720
push 0x1005f8fc
lea edi, [ebx + 0xa4c]
push 0x1005f4b0
xor ecx, ecx
mov eax, 0x1000dee0
call fcn.00489720
push 0x1005f90c
lea edi, [ebx + 0xa74]
push 0x1005f924
xor ecx, ecx
mov eax, 0x1000df30
call fcn.00489720
lea edi, [ebx + 0xa9c]
push 0x1005f930
push 0x1005f924
xor ecx, ecx
mov eax, 0x1000e020
call fcn.00489720
push 0x1005f944
lea edi, [ebx + 0xac4]
push 0x1005f924
xor ecx, ecx
mov eax, 0x1000e080
call fcn.00489720
push 0x1005f958
lea edi, [ebx + 0xaec]
push 0x1005f924
xor ecx, ecx
mov eax, 0x1000e760
call fcn.00489720
push 0x1005f96c
lea edi, [ebx + 0xb14]
push 0x1005f924
xor ecx, ecx
mov eax, 0x1000e870
call fcn.00489720
push 0x1005f980
lea edi, [ebx + 0xb3c]
push 0x1005f990
mov ecx, 1
mov eax, 0x1000eec0
call fcn.00489720
push 0x1005f9a0
lea edi, [ebx + 0xb64]
push 0x1005f990
mov ecx, 1
mov eax, 0x1000f040
call fcn.00489720
mov dword [0x10075e30], ebx
call dword [0x1005f064]
push 0x15c
mov dword [ebx + 0x8c], eax
call fcn.004b1530
add esp, 4
cmp eax, esi
je 0x48b3ec
push ebx
mov esi, eax
call fcn.004bcdf0
mov esi, eax
mov edi, dword [ebx]
test edi, edi
je 0x48b404
call fcn.004bd0e0
mov eax, edi
call fcn.004b16a0
mov dword [ebx], 0
push 0xa8
mov dword [ebx], esi
call fcn.004b1530
add esp, 4
test eax, eax
je 0x48b422
mov esi, eax
call fcn.004d84c0
mov esi, eax
jmp 0x48b424
xor esi, esi
mov edi, dword [ebx + 4]
test edi, edi
je 0x48b43f
push edi
call fcn.004d86b0
mov eax, edi
call fcn.004b16a0
mov dword [ebx + 4], 0
lea eax, [ebx + 0xe0]
mov dword [esp + 0x34], eax
lea eax, [esp + 0x34]
push eax
mov ecx, eax
push ecx
mov edi, ebp
mov dword [ebx + 4], esi
call fcn.00498cc0
lea eax, [ebx + 0x108]
lea edx, [esp + 0x38]
mov dword [esp + 0x38], eax
push edx
mov eax, edx
push eax
call fcn.00498cc0
lea ecx, [esp + 0x18]
push ecx
mov edx, ecx
lea eax, [ebx + 0x130]
push edx
mov dword [esp + 0x20], eax
call fcn.00498cc0
lea eax, [ebx + 0x158]
mov dword [esp + 0x14], eax
lea eax, [esp + 0x14]
push eax
mov ecx, eax
push ecx
call fcn.00498cc0
lea eax, [ebx + 0x180]
lea edx, [esp + 0x138]
mov dword [esp + 0x138], eax
push edx
mov eax, edx
push eax
call fcn.00498cc0
lea ecx, [esp + 0xd8]
push ecx
mov edx, ecx
lea eax, [ebx + 0x1a8]
push edx
mov dword [esp + 0xe0], eax
call fcn.00498cc0
lea eax, [ebx + 0x1d0]
mov dword [esp + 0xe0], eax
lea eax, [esp + 0xe0]
push eax
mov ecx, eax
push ecx
call fcn.00498cc0
lea eax, [ebx + 0x1f8]
lea edx, [esp + 0xe8]
mov dword [esp + 0xe8], eax
push edx
mov eax, edx
push eax
call fcn.00498cc0
lea ecx, [esp + 0xf0]
push ecx
mov edx, ecx
lea eax, [ebx + 0x220]
push edx
mov dword [esp + 0xf8], eax
call fcn.00498cc0
lea eax, [ebx + 0x248]
mov dword [esp + 0xf8], eax
lea eax, [esp + 0xf8]
push eax
mov ecx, eax
push ecx
call fcn.00498cc0
lea eax, [ebx + 0x270]
lea edx, [esp + 0x100]
mov dword [esp + 0x100], eax
push edx
mov eax, edx
push eax
call fcn.00498cc0
lea eax, [ebx + 0x298]
mov dword [esp + 0x154], eax
lea ecx, [esp + 0x154]
push ecx
mov edx, ecx
push edx
call fcn.00498cc0
lea eax, [ebx + 0x2c0]
mov dword [esp + 0x58], eax
lea eax, [esp + 0x58]
push eax
mov ecx, eax
push ecx
call fcn.00498cc0
lea eax, [ebx + 0x2e8]
lea edx, [esp + 0xec]
mov dword [esp + 0xec], eax
push edx
mov eax, edx
push eax
call fcn.00498cc0
lea ecx, [esp + 0x60]
push ecx
mov edx, ecx
lea eax, [ebx + 0x310]
push edx
mov dword [esp + 0x68], eax
call fcn.00498cc0
lea eax, [ebx + 0x338]
mov dword [esp + 0x114], eax
lea eax, [esp + 0x114]
push eax
mov ecx, eax
push ecx
call fcn.00498cc0
lea eax, [ebx + 0x360]
lea edx, [esp + 0x68]
mov dword [esp + 0x68], eax
push edx
mov eax, edx
push eax
call fcn.00498cc0
lea ecx, [esp + 0xf4]
push ecx
mov edx, ecx
lea eax, [ebx + 0x388]
push edx
mov dword [esp + 0xfc], eax
call fcn.00498cc0
lea eax, [ebx + 0x3b0]
mov dword [esp + 0x70], eax
lea eax, [esp + 0x70]
push eax
mov ecx, eax
push ecx
call fcn.00498cc0
lea eax, [ebx + 0x3d8]
lea edx, [esp + 0x11c]
mov dword [esp + 0x11c], eax
push edx
mov eax, edx
push eax
call fcn.00498cc0
lea ecx, [esp + 0x78]
push ecx
mov edx, ecx
lea eax, [ebx + 0x400]
push edx
mov dword [esp + 0x80], eax
call fcn.00498cc0
lea eax, [ebx + 0x428]
mov dword [esp + 0xfc], eax
lea eax, [esp + 0xfc]
push eax
mov ecx, eax
push ecx
call fcn.00498cc0
lea eax, [ebx + 0x450]
lea edx, [esp + 0x80]
mov dword [esp + 0x80], eax
push edx
mov eax, edx
push eax
call fcn.00498cc0
lea ecx, [esp + 0x124]
push ecx
mov edx, ecx
lea eax, [ebx + 0x478]
push edx
mov dword [esp + 0x12c], eax
call fcn.00498cc0
lea eax, [ebx + 0x4a0]
mov dword [esp + 0x88], eax
lea eax, [esp + 0x88]
push eax
mov ecx, eax
push ecx
call fcn.00498cc0
lea eax, [ebx + 0x4c8]
lea edx, [esp + 0x104]
mov dword [esp + 0x104], eax
push edx
mov eax, edx
push eax
call fcn.00498cc0
lea ecx, [esp + 0x90]
push ecx
mov edx, ecx
lea eax, [ebx + 0x4f0]
push edx
mov dword [esp + 0x98], eax
call fcn.00498cc0
lea eax, [ebx + 0x518]
mov dword [esp + 0x12c], eax
lea eax, [esp + 0x12c]
push eax
mov ecx, eax
push ecx
call fcn.00498cc0
lea eax, [ebx + 0x540]
lea edx, [esp + 0x98]
mov dword [esp + 0x98], eax
push edx
mov eax, edx
push eax
call fcn.00498cc0
lea ecx, [esp + 0x134]
push ecx
mov edx, ecx
lea eax, [ebx + 0x568]
push edx
mov dword [esp + 0x13c], eax
call fcn.00498cc0
lea eax, [ebx + 0x590]
mov dword [esp + 0xa0], eax
lea eax, [esp + 0xa0]
push eax
mov ecx, eax
push ecx
call fcn.00498cc0
lea eax, [ebx + 0x5b8]
lea edx, [esp + 0x110]
mov dword [esp + 0x110], eax
push edx
mov eax, edx
push eax
call fcn.00498cc0
lea ecx, [esp + 0xa8]
push ecx
mov edx, ecx
lea eax, [ebx + 0x5e0]
push edx
mov dword [esp + 0xb0], eax
call fcn.00498cc0
lea eax, [ebx + 0x608]
mov dword [esp + 0x130], eax
lea eax, [esp + 0x130]
push eax
mov ecx, eax
push ecx
call fcn.00498cc0
lea eax, [ebx + 0x630]
mov dword [esp + 0xb0], eax
lea edx, [esp + 0xb0]
push edx
mov eax, edx
push eax
call fcn.00498cc0
lea ecx, [esp + 0x118]
push ecx
mov edx, ecx
lea eax, [ebx + 0x658]
push edx
mov dword [esp + 0x120], eax
call fcn.00498cc0
lea eax, [ebx + 0x680]
mov dword [esp + 0xb8], eax
lea eax, [esp + 0xb8]
push eax
mov ecx, eax
push ecx
call fcn.00498cc0
lea eax, [ebx + 0x6a8]
lea edx, [esp + 0x144]
mov dword [esp + 0x144], eax
push edx
mov eax, edx
push eax
call fcn.00498cc0
lea ecx, [esp + 0xc0]
push ecx
mov edx, ecx
lea eax, [ebx + 0x6d0]
push edx
mov dword [esp + 0xc8], eax
call fcn.00498cc0
lea eax, [ebx + 0x6f8]
mov dword [esp + 0x120], eax
lea eax, [esp + 0x120]
push eax
mov ecx, eax
push ecx
call fcn.00498cc0
lea eax, [ebx + 0x720]
lea edx, [esp + 0xc8]
mov dword [esp + 0xc8], eax
push edx
mov eax, edx
push eax
call fcn.00498cc0
lea ecx, [esp + 0x50]
push ecx
mov edx, ecx
lea eax, [ebx + 0x748]
push edx
mov dword [esp + 0x58], eax
call fcn.00498cc0
lea eax, [ebx + 0x770]
mov dword [esp + 0xd4], eax
lea eax, [esp + 0xd4]
push eax
mov ecx, eax
push ecx
call fcn.00498cc0
lea eax, [ebx + 0x798]
lea edx, [esp + 0x128]
mov dword [esp + 0x128], eax
push edx
mov eax, edx
push eax
call fcn.00498cc0
lea ecx, [esp + 0xdc]
push ecx
mov edx, ecx
lea eax, [ebx + 0x7c0]
push edx
mov dword [esp + 0xe4], eax
call fcn.00498cc0
lea eax, [ebx + 0x7e8]
mov dword [esp + 0x108], eax
lea eax, [esp + 0x108]
push eax
mov ecx, eax
push ecx
call fcn.00498cc0
lea eax, [ebx + 0x810]
lea edx, [esp + 0xe4]
mov dword [esp + 0xe4], eax
push edx
mov eax, edx
push eax
call fcn.00498cc0
lea ecx, [esp + 0x10c]
push ecx
mov edx, ecx
lea eax, [ebx + 0x838]
push edx
mov dword [esp + 0x114], eax
call fcn.00498cc0
lea eax, [ebx + 0x860]
mov dword [esp + 0x54], eax
lea eax, [esp + 0x54]
push eax
mov ecx, eax
push ecx
call fcn.00498cc0
lea eax, [ebx + 0x9fc]
lea edx, [esp + 0x5c]
mov dword [esp + 0x5c], eax
push edx
mov eax, edx
push eax
call fcn.00498cc0
lea ecx, [esp + 0x64]
push ecx
mov edx, ecx
lea eax, [ebx + 0xa24]
push edx
mov dword [esp + 0x6c], eax
call fcn.00498cc0
lea eax, [ebx + 0xa4c]
mov dword [esp + 0x6c], eax
lea eax, [esp + 0x6c]
push eax
mov ecx, eax
push ecx
call fcn.00498cc0
lea eax, [ebx + 0x894]
lea edx, [esp + 0x74]
mov dword [esp + 0x74], eax
push edx
mov eax, edx
push eax
call fcn.00498cc0
lea ecx, [esp + 0x7c]
push ecx
mov edx, ecx
lea eax, [ebx + 0x8bc]
push edx
mov dword [esp + 0x84], eax
call fcn.00498cc0
lea eax, [ebx + 0x8e4]
mov dword [esp + 0x84], eax
lea eax, [esp + 0x84]
push eax
mov ecx, eax
push ecx
call fcn.00498cc0
lea eax, [ebx + 0x90c]
lea edx, [esp + 0x8c]
mov dword [esp + 0x8c], eax
push edx
mov eax, edx
push eax
call fcn.00498cc0
lea ecx, [esp + 0x94]
push ecx
mov edx, ecx
lea eax, [ebx + 0x934]
push edx
mov dword [esp + 0x9c], eax
call fcn.00498cc0
lea eax, [ebx + 0x95c]
mov dword [esp + 0x9c], eax
lea eax, [esp + 0x9c]
push eax
mov ecx, eax
push ecx
call fcn.00498cc0
lea eax, [ebx + 0x984]
lea edx, [esp + 0xa4]
mov dword [esp + 0xa4], eax
push edx
mov eax, edx
push eax
call fcn.00498cc0
lea ecx, [esp + 0xac]
push ecx
mov edx, ecx
lea eax, [ebx + 0x9ac]
push edx
mov dword [esp + 0xb4], eax
call fcn.00498cc0
lea eax, [ebx + 0x9d4]
mov dword [esp + 0xb4], eax
lea eax, [esp + 0xb4]
push eax
mov ecx, eax
push ecx
call fcn.00498cc0
lea eax, [ebx + 0xa74]
lea edx, [esp + 0xbc]
mov dword [esp + 0xbc], eax
push edx
mov eax, edx
push eax
call fcn.00498cc0
lea ecx, [esp + 0xc4]
push ecx
mov edx, ecx
lea eax, [ebx + 0xa9c]
push edx
mov dword [esp + 0xcc], eax
call fcn.00498cc0
lea eax, [ebx + 0xac4]
mov dword [esp + 0xcc], eax
lea eax, [esp + 0xcc]
push eax
mov ecx, eax
push ecx
call fcn.00498cc0
lea eax, [ebx + 0xaec]
lea edx, [esp + 0x48]
mov dword [esp + 0x48], eax
push edx
mov eax, edx
push eax
call fcn.00498cc0
lea ecx, [esp + 0x2c]
push ecx
mov edx, ecx
lea eax, [ebx + 0xb14]
push edx
mov dword [esp + 0x34], eax
call fcn.00498cc0
lea eax, [ebx + 0xb3c]
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x3c]
push eax
mov ecx, eax
push ecx
call fcn.00498cc0
lea eax, [ebx + 0xb64]
lea edx, [esp + 0x40]
mov dword [esp + 0x40], eax
push edx
mov eax, edx
push eax
call fcn.00498cc0
mov esi, dword [ebp]
test esi, esi
je 0x48bbe6
lea ecx, [ecx]
mov eax, dword [esi + 8]
mov ebp, dword [eax + 4]
cmp dword [ebp], 0
mov esi, dword [esi + 4]
je 0x48bbe2
mov edi, dword [ebp + 8]
lea ecx, [esp + 0x44]
push ecx
push 0x40
push 5
push edi
call dword [0x1005f06c]
push 5
add ebp, 0x19
push ebp
push edi
call dword [0x10075f88]
mov eax, dword [esp + 0x44]
lea edx, [esp + 0x44]
push edx
push eax
push 5
push edi
call dword [0x1005f06c]
push 5
push edi
call dword [0x1005f1dc]
push eax
call dword [0x1005f1e0]
test esi, esi
jne 0x48bb90
push 0xc
call fcn.004b1530
xor ebp, ebp
add esp, 4
cmp eax, ebp
je 0x48bcf0
mov dword [eax + 4], 0x1006a088
mov dword [eax + 8], ebp
mov dword [eax], 0x1006ac50
mov dword [eax + 4], 0x1006ac5c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov esi, eax
call edx
mov ecx, dword [0x10075eb4]
mov eax, dword [ecx]
mov edx, dword [eax + 0x48]
push esi
push 0x10069ff8
call edx
mov eax, dword [ebx + 0x44]
cmp eax, ebp
je 0x48bc3f
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov dword [ebx + 0x44], ebp
cmp esi, ebp
mov dword [ebx + 0x44], esi
je 0x48bc55
mov eax, dword [esi]
mov ecx, dword [eax]
push esi
call ecx
mov edx, dword [esi]
mov eax, dword [edx + 4]
push esi
call eax
call fcn.0048cad0
call fcn.0048cc20
mov eax, dword [0x10075e60]
cmp eax, ebp
je 0x48bc6f
push eax
call dword [0x1005f068]
cmp dword [0x10075e84], ebp
mov edi, dword [0x1005f1d4]
je 0x48bcc9
push ebp
call edi
mov esi, dword [eax + 0x3c]
lea ecx, [esp + 0x28]
push ecx
push 4
add esi, eax
push 0xf8
push esi
call dword [0x1005f06c]
test eax, eax
je 0x48bcc9
mov edx, dword [0x10075e84]
mov dword [esi + 0xe8], edx
mov eax, dword [0x10075e88]
lea ecx, [esp + 0x28]
push ecx
mov dword [esi + 0xec], eax
mov edx, dword [esp + 0x2c]
push edx
push 0xf8
push esi
call dword [0x1005f06c]
call fcn.0048c4a0
cmp dword [0x10075e8c], ebp
je 0x48bcfe
push ebp
call edi
mov ecx, dword [eax + 0x3c]
add ecx, eax
mov ecx, dword [ecx + 0x28]
cmp ecx, ebp
je 0x48bcf7
add ecx, eax
call ecx
push eax
call dword [0x1005f070]
xor esi, esi
jmp 0x48bc1a
push ebp
call dword [0x1005f070]
mov eax, dword [0x10075e5c]
cmp eax, ebp
je 0x48c437
push eax
lea edi, [esp + 0x16c]
mov dword [esp + 0x16c], ebp
mov dword [esp + 0x170], ebp
mov dword [esp + 0x174], ebp
call fcn.00498aa0
mov esi, dword [esp + 0x168]
mov edi, dword [esp + 0x30]
push esi
call fcn.00498aa0
cmp esi, ebp
je 0x48bd49
mov eax, esi
call fcn.004b16a0
push 0
push 0
push 3
push 0
push 1
mov eax, edi
mov eax, dword [eax]
push 0x80000000
push eax
call dword [0x1005f074]
mov esi, eax
lea eax, [ebx + 0x94]
push eax
mov eax, dword [ebx]
push esi
call fcn.004c4bc0
push 0
push esi
call dword [0x1005f078]
mov ebp, eax
xor edi, edi
test ebp, ebp
mov dword [esp + 0xcc], edi
jbe 0x48bd9e
push ebp
call fcn.004b1530
mov edi, eax
add esp, 4
mov dword [esp + 0xcc], edi
push 0
lea ecx, [esp + 0x19c]
push ecx
push ebp
push edi
push esi
call dword [0x1005f07c]
push esi
call dword [0x1005f080]
lea edx, [esp + 0x190]
push edx
push 0x18
lea eax, [esp + 0x1c8]
push eax
push 0
call dword [0x1005f1dc]
push eax
call dword [0x10075f70]
mov ebp, dword [esp + 0x1c4]
lea eax, [ebp + 8]
mov dword [esp + 0x44], eax
mov eax, dword [eax]
mov esi, dword [eax + 0x3c]
mov ecx, dword [esi + eax + 0x50]
add esi, eax
mov dword [esp + 0x40], eax
xor edx, edx
mov eax, ecx
div dword [0x10075f14]
mov dword [esp + 0x3c], ebp
test edx, edx
jne 0x48be14
mov dword [esp + 0x28], ecx
mov ecx, dword [0x10075f14]
jmp 0x48be24
mov ecx, dword [0x10075f14]
add eax, 1
imul eax, ecx
mov dword [esp + 0x28], eax
mov eax, dword [edi + 0x3c]
add eax, edi
mov edi, dword [eax + 0x50]
mov dword [esp + 0x18], eax
xor edx, edx
mov eax, edi
div ecx
test edx, edx
jne 0x48be40
mov dword [esp + 0x34], edi
jmp 0x48be4a
add eax, 1
imul eax, ecx
mov dword [esp + 0x34], eax
mov edi, dword [esp + 0x30]
mov ecx, dword [edi]
mov edx, dword [ebp + 0x10]
push ecx
add edx, 0x38
push edx
call dword [0x10075f80]
mov ebp, dword [esp + 0x18]
movzx eax, word [ebp + 0x5c]
cmp ax, 2
jne 0x48be7b
cmp word [esi + 0x5c], 3
jne 0x48be9a
call dword [0x1005f084]
jmp 0x48be9a
cmp ax, 3
jne 0x48be9a
cmp word [esi + 0x5c], 2
jne 0x48be9a
test dword [0x10075e6c], 8
jne 0x48be9a
call dword [0x1005f088]
mov eax, 3
cmp word [ebp + 0x5c], ax
jne 0x48bec8
cmp word [esi + 0x5c], ax
jne 0x48beb6
cmp dword [0x10075e64], 0
jne 0x48bec8
jmp 0x48bebf
mov eax, dword [0x10075e64]
test eax, eax
jne 0x48bec1
mov eax, dword [edi]
push eax
call dword [0x1005f08c]
mov ecx, dword [edi]
push ecx
lea eax, [esp + 0x184]
call fcn.004bc9d0
mov ebp, dword [esp + 0x184]
mov edi, dword [0x1005f040]
add esp, 4
push 0x1005f9b0
mov dword [esp + 0x18], ebp
call edi
push ebp
mov esi, eax
call edi
cmp eax, esi
jl 0x48bf4b
push 0x1005f9b0
xor esi, esi
call edi
test eax, eax
jle 0x48bf4b
mov eax, ebp
sub eax, 0x1005f9b0
mov dword [esp + 0x2c], eax
jmp 0x48bf24
mov eax, dword [esp + 0x2c]
mov dx, word [eax + esi*2 + 0x1005f9b0]
cmp dx, word [esi*2 + 0x1005f9b0]
jne 0x48bf47
push 0x1005f9b0
add ebp, 2
add esi, 1
call edi
cmp esi, eax
jl 0x48bf20
mov dword [esp + 0x14], ebp
push 0x200
xor eax, eax
mov dword [esp + 0x154], 0xff
call fcn.004b15e0
add esp, 4
push 4
mov dword [esp + 0x14c], eax
mov dword [esp + 0x150], 0
mov word [eax], 0
call fcn.004b1530
mov edi, dword [0x1005f090]
add esp, 4
push 1
push eax
push 0x1005f9bc
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], 2
call edi
test eax, eax
jbe 0x48c025
add eax, 1
lea esi, [esp + 0x13c]
call fcn.00497da0
mov ebp, dword [esp + 0x140]
mov esi, dword [esp + 0x13c]
lea eax, [ebp + ebp]
push eax
push esi
call dword [0x10075f84]
push ebp
push esi
push 0x1005f9bc
call edi
xor ebp, ebp
push esi
lea edi, [esp + 0x178]
mov dword [esp + 0x178], ebp
mov dword [esp + 0x17c], ebp
mov dword [esp + 0x180], ebp
call fcn.00498aa0
mov esi, dword [esp + 0x174]
push esi
lea edi, [esp + 0x14c]
call fcn.00498aa0
cmp esi, ebp
je 0x48c021
mov eax, esi
call fcn.004b16a0
mov ebp, dword [esp + 0x14]
push 0x1005f9c8
lea esi, [esp + 0x14c]
call fcn.00497c00
push ebp
call fcn.00497c00
push 0x1005f9c8
call fcn.00497c00
mov ecx, dword [esp + 0x148]
push ecx
push 0x1005f9bc
call dword [0x1005f094]
mov edi, dword [esp + 0x30]
mov eax, dword [edi]
push 2
xor ebp, ebp
push ebp
push eax
call dword [0x1005f098]
mov ecx, dword [esp + 0x18]
mov esi, eax
mov eax, dword [ecx + 0xe8]
cmp eax, ebp
mov dword [esp + 0x48], esi
jne 0x48c085
mov dword [esp + 0x38], ebp
jmp 0x48c0a4
mov edx, dword [ecx + 0x50]
cmp eax, edx
jb 0x48c092
mov dword [esp + 0x38], ebp
jmp 0x48c0a4
mov ecx, dword [ecx + 0xec]
add ecx, eax
cmp ecx, edx
sbb eax, eax
neg eax
mov dword [esp + 0x38], eax
cmp dword [0x10075f28], ebp
mov dword [esp + 0x2c], ebp
je 0x48c121
cmp dword [0x10075f24], ebp
je 0x48c121
push 0x20
lea edx, [esp + 0x1a4]
push edx
call dword [0x10075f84]
mov eax, dword [edi]
lea ecx, [esp + 0x1a0]
push ecx
mov dword [esp + 0x1a4], 0x20
mov dword [esp + 0x1a8], 0x80
mov dword [esp + 0x1c0], esi
mov dword [esp + 0x1ac], eax
call dword [0x10075f28]
cmp eax, 0xffffffff
mov dword [0x1006fa04], eax
je 0x48c121
lea edx, [esp + 0x164]
push edx
push eax
call dword [0x10075f24]
test eax, eax
je 0x48c121
mov dword [esp + 0x2c], 1
mov eax, dword [esp + 0x40]
cmp eax, dword [0x10075e68]
jne 0x48c16d
mov ebp, dword [esp + 0x44]
mov edx, dword [ebp]
mov ecx, dword [0x10075e30]
mov esi, dword [ecx + 0x344]
push edx
call dword [0x1005f1dc]
push eax
call esi
mov edi, dword [esp + 0x28]
mov eax, dword [ebp]
mov esi, dword [0x1005f1e4]
push 0x40
push 0x2000
push edi
push eax
call esi
push 0x40
push 0x1000
push edi
push eax
call esi
mov edx, dword [esp + 0x30]
mov ecx, dword [0x10075e68]
mov eax, dword [edx]
push eax
mov dword [ebx + 0xa0], ecx
mov dword [ebx + 0x90], 1
call dword [0x1005f09c]
mov ebp, eax
xor esi, esi
push ebp
mov dword [ebx + 0x90], esi
call fcn.004bb0b0
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x40]
mov edx, dword [ecx + 0xc]
mov dword [eax], ebp
mov eax, dword [edx + 0xc]
mov edx, dword [esp + 0x44]
add esp, 4
mov dword [esp + 0x14], eax
xor edi, edi
lea ecx, [ecx]
mov ecx, dword [eax + 0x18]
cmp ecx, edx
jne 0x48c1d5
test edi, edi
jne 0x48c1d5
mov edi, eax
mov word [eax + 0x3a], 0
jmp 0x48c1db
cmp ecx, ebp
jne 0x48c1db
mov esi, eax
mov ecx, dword [esp + 0x14]
mov word [eax + 0x38], 0xffff
mov eax, dword [eax]
cmp dword [eax], ecx
jne 0x48c1c0
test esi, esi
je 0x48c201
mov edx, dword [esp + 0x18]
cmp dword [edx + 0xc0], 0
je 0x48c201
call fcn.0048d420
test edi, edi
je 0x48c247
test esi, esi
je 0x48c247
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov edx, dword [esi]
mov dword [esp + 0x28], ecx
mov ecx, dword [esi + 4]
mov dword [ecx], edx
mov dword [edx + 4], ecx
mov dword [eax], esi
mov dword [esi + 4], eax
mov eax, dword [esp + 0x28]
mov dword [esi], eax
mov dword [eax + 4], esi
mov ecx, dword [edi + 0xc]
mov edi, dword [edi + 8]
mov edx, dword [esi + 0xc]
lea eax, [esi + 8]
mov esi, dword [eax]
mov dword [edx], esi
mov dword [esi + 4], edx
mov dword [ecx], eax
mov dword [eax + 4], ecx
mov dword [eax], edi
mov dword [edi + 4], eax
mov edx, dword [esp + 0x3c]
mov eax, dword [edx + 0xc]
mov esi, dword [eax + 0x14]
mov edi, dword [0x1005f0a0]
mov dword [esp + 0x14], esi
jmp 0x48c260
mov ecx, dword [esi + 0x28]
push ecx
call edi
push 0x1005f9cc
call edi
mov esi, dword [esi]
mov edx, dword [esp + 0x14]
cmp dword [esi], edx
jne 0x48c260
cmp dword [esp + 0x38], 0
je 0x48c375
mov ecx, dword [esp + 0x34]
lea eax, [esp + 0x194]
push eax
push 0x40
push ecx
push ebp
call dword [0x1005f06c]
push 0x1005f9d4
call dword [0x1005f09c]
push 0x1005f9ec
push eax
call dword [0x1005f100]
lea edx, [esp + 0x4c]
push edx
mov esi, eax
call dword [0x1005f0a4]
push eax
call esi
mov ebp, eax
push 0x200
xor eax, eax
mov dword [esp + 0x164], 0xff
call fcn.004b15e0
xor esi, esi
mov ebx, eax
mov edi, 1
add esp, 4
mov word [ebx], si
cmp dword [esp + 0x4c], edi
mov dword [esp + 0x158], ebx
mov dword [esp + 0x15c], esi
jle 0x48c354
jmp 0x48c300
push 0x1005fa00
lea esi, [esp + 0x15c]
call fcn.00497c00
mov eax, dword [ebp + edi*4]
push eax
call fcn.00497c00
mov ecx, dword [esp + 0x4c]
add ecx, 0xffffffff
cmp ecx, edi
mov eax, 0x1005fa00
je 0x48c330
mov eax, 0x1005fa04
push eax
lea esi, [esp + 0x15c]
call fcn.00497c00
add edi, 1
cmp edi, dword [esp + 0x4c]
jl 0x48c300
mov esi, dword [esp + 0x15c]
mov ebx, dword [esp + 0x158]
push ebp
call dword [0x1005f0a8]
mov edx, dword [esp + 0x30]
mov eax, dword [edx]
neg esi
sbb esi, esi
and esi, ebx
push esi
push eax
call fcn.004951f0
push eax
call dword [0x1005f070]
mov edi, dword [esp + 0x34]
lea eax, [esp + 0x18c]
push eax
push 0x40
push edi
push ebp
call dword [0x1005f06c]
add edi, ebp
cmp ebp, edi
mov esi, ebp
jae 0x48c3bd
mov eax, dword [0x10075efc]
jmp 0x48c3a0
lea ecx, [esp + 0x19c]
push ecx
push 0x40
push eax
push esi
call dword [0x1005f06c]
mov eax, dword [0x10075efc]
add esi, eax
cmp esi, edi
jb 0x48c3a0
mov edx, dword [esp + 0x18]
mov eax, dword [edx + 0x28]
test eax, eax
je 0x48c3d4
add eax, ebp
call eax
push 0
call dword [0x1005f070]
cmp dword [esp + 0x2c], 0
je 0x48c3f0
mov eax, dword [0x10075f20]
test eax, eax
je 0x48c3f0
mov ecx, dword [esp + 0x164]
push ecx
push 0
call eax
mov edx, dword [esp + 0x48]
push edx
call dword [0x1005f034]
mov eax, dword [esp + 0x13c]
test eax, eax
je 0x48c40b
call fcn.004b16a0
mov eax, dword [esp + 0x148]
test eax, eax
je 0x48c41b
call fcn.004b16a0
mov eax, dword [esp + 0x180]
test eax, eax
je 0x48c42b
call fcn.004b16a0
mov eax, dword [esp + 0xcc]
call fcn.004b16a0
pop edi
pop esi
pop ebp
mov eax, ebx
pop ebx
add esp, 0x1c8
ret 4