Function at 0x4d0aa0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x98]
cmp eax, dword [ecx + 8]
jbe 0x4d1b1e
sub esp, 0x118
mov eax, dword [esp + 0x124]
test eax, 0x200
jne 0x4d16d0
test eax, 0x80
je 0x4d16c4
mov eax, dword [esp + 0x120]
mov eax, dword [eax]
mov ecx, dword [esp + 0x11c]
xor edx, edx
xor ebx, ebx
xor ebp, ebp
xor esi, esi
test eax, eax
je 0x4d1b05
mov dword [esp + 0xbc], eax
mov dword [esp + 0x3c], esi
mov dword [esp + 0x9c], ebx
mov dword [esp + 0x98], ebp
mov dword [esp + 0xac], edx
mov dword [esp + 0xa8], ecx
mov edi, dword [esp + 0x12c]
cmp edi, 9
je 0x4d1692
mov dword [esp + 0x88], eax
xor eax, eax
mov byte [esp + 0x2b], al
test byte [ecx], al
mov dword [esp], ecx
call fcn.004cad40
mov eax, dword [esp + 4]
mov dword [esp + 0x54], eax
movzx ecx, byte [esp + 0x2b]
test cl, cl
je 0x4d1620
mov eax, dword [esp + 0xa8]
mov dword [esp], eax
call fcn.004ca4d0
movzx eax, byte [esp + 4]
test al, al
je 0x4d1aed
mov edx, dword [esp + 0x54]
mov ecx, dword [esp + 0x134]
cmp edx, ecx
jg 0x4d1ad5
jl 0x4d1abd
test ecx, ecx
jle 0x4d1614
mov ebx, dword [esp + 0x130]
mov eax, ebx
xor ebp, ebp
jmp 0x4d0bb0
add ebx, 0xc
mov esi, dword [ebx + 8]
test esi, 0x1f
je 0x4d1a1d
inc ebp
cmp ebp, ecx
jl 0x4d0bad
mov dword [esp + 0x54], edx
xor ebx, ebx
jmp 0x4d0beb
mov ebp, dword [esp + 0x68]
lea ebx, [ebp + 1]
mov ebp, dword [esp + 0x130]
mov esi, dword [esp + 0x134]
mov edi, dword [esp + 0x54]
mov eax, ebp
mov ecx, esi
mov edx, edi
cmp ebx, edx
jge 0x4d0c87
cmp ebx, ecx
jae 0x4d1a16
mov dword [esp + 0x68], ebx
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + ecx*4]
mov ebp, dword [eax + ecx*4 + 4]
mov ecx, dword [eax + ecx*4 + 8]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
call fcn.004d6580
mov eax, dword [esp + 0xc]
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0xa8]
mov dword [esp], edx
mov ebx, dword [esp + 0x68]
mov dword [esp + 4], ebx
call fcn.004caa30
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xa4], ecx
mov edx, dword [esp + 0x30]
mov ebx, dword [edx + 0x14]
mov ebp, dword [esp + 0x94]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call ebx
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4d0bcc
jmp 0x4d18db
movzx ebx, byte [esp + 0x2b]
test bl, bl
je 0x4d15e9
xor ebx, ebx
test bl, bl
je 0x4d15e2
mov eax, dword [esp + 0xa8]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.004caa30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x134]
mov ecx, dword [esp + 0x54]
sub eax, ecx
mov dword [esp + 0x58], eax
mov dword [esp + 8], eax
mov dword [esp + 0xc], eax
call fcn.004d7060
mov eax, dword [esp + 0x10]
mov dword [esp + 0xe4], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0xe0], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x84], edx
mov ebx, dword [esp + 0xa8]
mov dword [esp], ebx
mov ebp, dword [esp + 0x54]
mov dword [esp + 4], ebp
call fcn.004caa30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov eax, dword [eax + 0x28]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0xc0], ecx
mov edx, dword [esp + 0x58]
mov ebx, dword [esp + 0x130]
mov ebp, dword [esp + 0x134]
mov esi, dword [esp + 0x54]
xor edi, edi
jmp 0x4d0dfe
mov eax, dword [esp + 0xe4]
mov dword [esp], eax
mov ecx, dword [esp + 0xe0]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x84]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x60]
mov dword [esp + 0xc], ebx
call fcn.004d2c50
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov eax, dword [esp + 0xdc]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xd8]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x14], eax
call fcn.004d5090
mov eax, dword [esp + 0x60]
lea edi, [eax + 1]
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0x134]
mov ebx, dword [esp + 0x54]
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0xc0]
mov edx, dword [esp + 0x58]
mov ebx, dword [esp + 0x130]
mov ebp, dword [esp + 0x134]
mov esi, dword [esp + 0x54]
cmp edx, edi
jle 0x4d0e87
add esi, edi
cmp esi, ebp
jae 0x4d18d2
mov dword [esp + 0x60], edi
lea eax, [esi + esi*2]
mov ecx, dword [ebx + eax*4]
mov dword [esp + 0xdc], ecx
mov edx, dword [ebx + eax*4 + 4]
mov dword [esp + 0xd8], edx
mov eax, dword [ebx + eax*4 + 8]
mov dword [esp + 0x80], eax
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004d6580
mov eax, dword [esp + 0xc]
mov dword [esp + 0x2c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x90], ecx
mov edx, dword [eax + 0x14]
mov dword [esp], ecx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0xc0]
mov dword [esp + 8], ebp
call edx
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4d0d56
jmp 0x4d1797
lea eax, [0xb8cfe0]
mov dword [esp], eax
lea ecx, [esi + 1]
mov dword [esp + 0x138], ecx
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.00446f30
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 0x138]
mov ecx, dword [esp + 0x54]
cmp edx, ecx
jb 0x4d1792
mov dword [esp + 0xd8], eax
lea edx, [0xb8cfe0]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov ebx, dword [esp + 0x130]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x134]
mov dword [esp + 0x10], ebx
call fcn.00411930
mov ecx, dword [esp + 0x138]
mov eax, dword [esp + 0x54]
cmp ecx, eax
jbe 0x4d178d
lea edx, [eax + eax*2]
mov ebx, dword [esp + 0x84]
mov ebp, dword [esp + 0xd8]
mov dword [ebp + edx*4 + 8], ebx
mov ebx, dword [0x10fd360]
lea edi, [ebp + edx*4]
lea esi, [ebp + edx*4 + 4]
test ebx, ebx
jne 0x4d15c3
mov eax, dword [esp + 0xe4]
mov dword [ebp + edx*4], eax
mov eax, dword [esp + 0xe0]
mov dword [ebp + edx*4 + 4], eax
mov dword [esp + 0x134], ecx
mov dword [esp + 0x130], ebp
mov eax, dword [esp + 0xa8]
mov dword [esp], eax
call fcn.004cad40
mov eax, dword [esp + 0x134]
cmp dword [esp + 4], eax
jne 0x4d1775
mov eax, dword [esp + 0xa8]
mov dword [esp], eax
call fcn.004cade0
mov eax, dword [esp + 4]
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0xa8]
mov dword [esp], ecx
mov edx, dword [esp + 0xac]
mov dword [esp + 4], edx
call fcn.004cf0f0
mov eax, dword [esp + 8]
mov dword [esp + 0xb4], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x4c], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0xb8], edx
mov ebx, dword [esp + 0x48]
test ebx, ebx
jne 0x4d15ac
mov dword [esp], edx
call fcn.0046b5b0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
lea edx, [0xaa9960]
cmp edx, eax
jne 0x4d175f
mov ebx, dword [esp + 0xac]
test ebx, ebx
je 0x4d15a5
mov ebx, dword [esp + 0x98]
movzx ebx, byte [ebx + 0xf]
mov ebp, ebx
and ebx, 0x1f
cmp ebx, 0x14
jne 0x4d153c
test byte [ecx], al
mov ebx, dword [0x10fd360]
mov ebp, dword [esp + 0x9c]
mov eax, dword [ebp + 4]
test ebx, ebx
jne 0x4d1530
mov dword [ecx], eax
mov eax, 4
mov dword [esp + 0xb0], ecx
mov ebx, dword [esp + 0x134]
test ebx, ebx
jle 0x4d115a
mov ebp, dword [esp + 0x130]
xor esi, esi
jmp 0x4d1076
mov edi, dword [esp + 0xd4]
lea ebp, [edi + 0xc]
lea edx, [0xaa9960]
mov ebx, dword [esp + 0x134]
mov esi, ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 0xd4], ebp
mov dword [esp + 0x5c], esi
mov dword [esp + 0x7c], eax
mov edi, dword [ebp + 8]
mov dword [esp + 0x84], edi
mov edx, dword [ebp + 4]
mov dword [esp + 0xe0], edx
mov ebp, dword [ebp]
mov dword [esp + 0xe4], ebp
nop
test edi, edi
jne 0x4d151f
mov dword [esp], edi
call fcn.004d0290
mov eax, dword [esp + 0xa8]
mov dword [esp], eax
mov ecx, dword [esp + 0x5c]
mov dword [esp + 4], ecx
call fcn.004caa30
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
lea edx, [0xc92ac0]
cmp edx, ecx
jne 0x4d1743
movzx ecx, byte [eax + 0xd]
mov ebx, dword [esp + 0x7c]
lea ebx, [ebx + ecx - 1]
neg ecx
and ecx, ebx
mov dword [esp + 0x34], ecx
mov ebx, dword [eax]
test ebx, ebx
jne 0x4d144c
mov ecx, dword [esp + 0xe4]
mov dword [esp], ecx
mov ecx, dword [esp + 0xe0]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x84]
mov dword [esp + 8], ecx
lea ecx, [0xb9ccaa]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 0x12
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0
call fcn.004d74d0
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x5c]
inc ecx
mov edx, dword [esp + 0x134]
cmp edx, ecx
jg 0x4d1056
mov eax, dword [esp + 0xb4]
mov ecx, dword [eax]
mov dword [esp], eax
mov edx, dword [esp + 0xbc]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xb0]
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x10], ecx
call fcn.0045f600
movzx eax, byte [0x10fccb1]
test al, al
jne 0x4d143c
mov eax, dword [esp + 0x48]
test eax, eax
je 0x4d13f8
mov eax, dword [esp + 0xb4]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0xc], ecx
call fcn.0045b690
lea eax, [0xb8cfe0]
mov dword [esp], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov dword [esp + 8], eax
call fcn.00446f30
mov eax, dword [esp + 0xc]
mov dword [esp + 0xe0], eax
xor ecx, ecx
mov edx, dword [esp + 0x4c]
jmp 0x4d122a
mov eax, dword [esp + 0x40]
mov eax, dword [eax + 0x7c]
mov ecx, dword [esp + 0xa0]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 0x64]
lea ecx, [eax + 1]
mov eax, dword [esp + 4]
mov edx, dword [esp + 0x38]
add edx, eax
mov eax, dword [esp + 0xe0]
mov ebx, dword [esp + 0x48]
cmp ebx, ecx
jle 0x4d13dc
mov dword [esp + 0x64], ecx
mov dword [esp + 0x4c], edx
mov eax, dword [esp + 0xa8]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004caec0
mov eax, dword [esp + 8]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xa0], ecx
mov edx, dword [eax + 0x10]
mov dword [esp], ecx
call edx
mov eax, dword [esp + 4]
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x40]
mov edx, dword [ecx + 0x7c]
mov ebx, dword [esp + 0xa0]
mov dword [esp], ebx
call edx
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x4c]
lea ecx, [ecx + eax - 1]
neg eax
and eax, ecx
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 4]
test ecx, ecx
je 0x4d1356
mov eax, dword [esp + 0x40]
mov ecx, dword [eax + 0x50]
mov edx, dword [esp + 0xa0]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 0x40]
mov edx, dword [ecx + 0x84]
mov ebx, dword [esp + 0xa0]
mov dword [esp], ebx
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0xb0]
lea ebx, [edx + ecx]
mov ebp, dword [esp + 0x48]
mov esi, dword [esp + 0x64]
cmp ebp, esi
jbe 0x4d173a
mov edi, edx
mov edx, dword [esp + 0x74]
or edx, 0x80
lea ebp, [esi + esi*2]
mov ecx, dword [esp + 0xe0]
mov dword [ecx + ebp*4 + 8], edx
mov edx, dword [0x10fd360]
lea esi, [ecx + ebp*4]
mov dword [esp + 0xd0], esi
lea esi, [ecx + ebp*4 + 4]
test edx, edx
jne 0x4d1338
mov dword [ecx + ebp*4], eax
mov dword [ecx + ebp*4 + 4], ebx
jmp 0x4d11ff
mov edx, edi
mov edi, dword [esp + 0xd0]
call fcn.00460b40
mov edi, esi
mov eax, ebx
call fcn.00460b40
mov edi, edx
jmp 0x4d11ff
mov eax, dword [esp + 0x40]
mov dword [esp], eax
mov ecx, dword [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.004d7360
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0x64]
cmp ebx, ebp
jbe 0x4d1731
lea esi, [ebp + ebp*2]
mov edi, ebx
mov ebx, dword [esp + 0xe0]
mov dword [ebx + esi*4 + 8], edx
mov edx, dword [0x10fd360]
lea ebp, [ebx + esi*4]
mov dword [esp + 0xcc], ebp
lea ebp, [ebx + esi*4 + 4]
test edx, edx
jne 0x4d13be
mov dword [ebx + esi*4], eax
mov dword [ebx + esi*4 + 4], ecx
jmp 0x4d11ff
mov edx, edi
mov edi, dword [esp + 0xcc]
call fcn.00460b40
mov edi, ebp
mov eax, ecx
call fcn.00460b40
mov edi, edx
jmp 0x4d11ff
mov dword [esp + 0x13c], eax
mov dword [esp + 0x140], ebx
mov dword [esp + 0x144], ebx
add esp, 0x118
ret
mov eax, dword [esp + 0xb4]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.0045b650
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
lea eax, [0xaa9960]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 8], eax
call fcn.0046b510
xor ebx, ebx
xor eax, eax
jmp 0x4d13dc
call fcn.004179c0
mov eax, dword [esp + 0x48]
test eax, eax
jmp 0x4d11a2
mov dword [esp + 0xc8], eax
mov dword [esp + 0x50], ebx
mov edx, dword [esp + 0xe4]
mov dword [esp], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x84]
mov dword [esp + 8], edx
lea edx, [0xb9ccaa]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 0x12
mov dword [esp + 0x14], eax
mov ebx, dword [esp + 0xb0]
lea ebp, [ebx + ecx]
mov dword [esp + 0xc4], ebp
mov dword [esp + 0x18], ebp
call fcn.004d74d0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
test ecx, 0x80
jne 0x4d14f4
mov ecx, dword [0x10fd360]
test ecx, ecx
jne 0x4d14db
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0xb0]
mov dword [edx + ecx], eax
mov ebx, dword [esp + 0x50]
lea eax, [ecx + ebx]
jmp 0x4d1146
mov edi, dword [esp + 0xc4]
call fcn.00460b40
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0xb0]
jmp 0x4d14cf
mov ecx, dword [esp + 0xc8]
mov dword [esp], ecx
mov ecx, dword [esp + 0xc4]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0045b410
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0xb0]
jmp 0x4d14cf
test edi, 0x60
jne 0x4d10ac
jmp 0x4d10b4
mov edi, ecx
call fcn.00460b40
jmp 0x4d1030
mov ebx, dword [esp + 0x3c]
test ebx, 0x80
je 0x4d154f
xchg ebp, eax
test al, 0x20
xchg ebp, eax
jne 0x4d157c
test byte [ecx], al
mov ebx, dword [0x10fd360]
test ebx, ebx
jne 0x4d1569
mov eax, dword [esp + 0x9c]
mov dword [ecx], eax
jmp 0x4d1030
mov edi, ecx
mov eax, dword [esp + 0x9c]
call fcn.00460b40
jmp 0x4d1030
test byte [ecx], al
mov ebx, dword [0x10fd360]
mov ebp, dword [esp + 0x9c]
mov eax, dword [ebp]
test ebx, ebx
jne 0x4d1599
mov dword [ecx], eax
jmp 0x4d1030
mov edi, ecx
call fcn.00460b40
jmp 0x4d1030
xor eax, eax
jmp 0x4d1035
mov dword [esp], eax
call fcn.0045aec0
mov ecx, dword [esp + 4]
lea edx, [0xaa9960]
jmp 0x4d0fec
mov eax, dword [esp + 0xe4]
call fcn.00460b40
mov edi, esi
mov eax, dword [esp + 0xe0]
call fcn.00460b40
jmp 0x4d0f45
mov ebp, eax
jmp 0x4d0f45
mov eax, dword [esp + 0xa8]
mov dword [esp], eax
call fcn.004ca4d0
movzx ebx, byte [esp + 4]
mov eax, dword [esp + 0x130]
mov ecx, dword [esp + 0x134]
mov edx, dword [esp + 0x54]
jmp 0x4d0c96
mov eax, dword [esp + 0x130]
jmp 0x4d0bc4
mov eax, dword [esp + 0xa8]
mov dword [esp], eax
call fcn.004ca4d0
movzx eax, byte [esp + 4]
test al, al
je 0x4d168c
mov eax, dword [esp + 0x54]
dec eax
mov ecx, dword [esp + 0x134]
cmp eax, ecx
jg 0x4d1aa5
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0xa8]
mov dword [esp], eax
call fcn.004ca4d0
movzx eax, byte [esp + 4]
test al, al
je 0x4d1678
mov ecx, dword [esp + 0x134]
mov edx, dword [esp + 0x54]
jmp 0x4d0b98
mov edx, dword [esp + 0x54]
mov ecx, dword [esp + 0x134]
cmp edx, ecx
jge 0x4d1668
jmp 0x4d1a8d
mov eax, dword [esp + 0x54]
jmp 0x4d163d
mov eax, dword [esp + 0x128]
mov dword [esp], eax
lea ecx, [0xb94177]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.00402a10
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0xa8]
mov byte [esp + 0x2b], al
jmp 0x4d0b44
mov eax, dword [esp + 0x120]
jmp 0x4d0ae9
mov ecx, dword [esp + 0x128]
mov dword [esp], ecx
mov edx, dword [esp + 0x12c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x11c]
mov dword [esp + 8], ebx
mov ebp, dword [esp + 0x120]
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], eax
sar eax, 0xa
mov dword [esp + 0x14], eax
call fcn.004d1b30
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
mov ebx, dword [esp + 0x120]
mov ebp, dword [esp + 0x11c]
mov esi, dword [esp + 0x124]
jmp 0x4d0af8
mov eax, ebp
mov ecx, ebx
call fcn.00460bc0
mov eax, esi
mov ecx, ebp
call fcn.00460bc0
mov dword [esp], ecx
lea eax, [0xb83f00]
mov dword [esp + 4], eax
lea eax, [0xb6e640]
mov dword [esp + 8], eax
call fcn.004091d0
mov dword [esp], eax
mov dword [esp + 4], edx
lea eax, [0xaa8d60]
mov dword [esp + 8], eax
call fcn.00409130
lea eax, [0xaa9660]
mov dword [esp], eax
lea eax, [0xc75bf0]
mov dword [esp + 4], eax
call fcn.00433120
call fcn.00460bc0
call fcn.00460c00
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 0x80]
mov ecx, dword [esp + 0x90]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov dword [esp + 0xc8], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0x6c]
mov edx, dword [edx + 0x80]
mov ebx, dword [esp + 0xc0]
mov dword [esp], ebx
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x70], ecx
lea edi, [esp + 0xe8]
mov edx, eax
xor eax, eax
call fcn.00460de4
lea eax, [0xb9eff2]
mov dword [esp + 0xe8], eax
mov dword [esp + 0xec], 0x14
mov eax, dword [esp + 0xc8]
mov dword [esp + 0xf0], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0xf4], eax
lea eax, [0xb93edd]
mov dword [esp + 0xf8], eax
mov dword [esp + 0xfc], 9
mov dword [esp + 0x100], edx
mov eax, dword [esp + 0x70]
mov dword [esp + 0x104], eax
lea eax, [0xb8eaf4]
mov dword [esp + 0x108], eax
mov dword [esp + 0x10c], 4
mov eax, dword [esp + 0x128]
mov dword [esp + 0x110], eax
mov eax, dword [esp + 0x12c]
mov dword [esp + 0x114], eax
mov dword [esp], 0
lea eax, [esp + 0xe8]
mov dword [esp + 4], eax
mov dword [esp + 8], 6
mov dword [esp + 0xc], 6
call fcn.0044a210
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409480
mov eax, dword [esp + 8]
lea ecx, [0xaa9660]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00433120
mov eax, esi
mov ecx, ebp
call fcn.00460bc0
mov eax, dword [esp + 0x30]
mov eax, dword [eax + 0x80]
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov dword [esp + 0xc8], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0x44]
mov edx, dword [edx + 0x80]
mov ebx, dword [esp + 0xa4]
mov dword [esp], ebx
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x70], ecx
lea edi, [esp + 0xe8]
mov edx, eax
xor eax, eax
call fcn.00460de4
lea eax, [0xb94b58]
mov dword [esp + 0xe8], eax
mov dword [esp + 0xec], 9
mov eax, dword [esp + 0x128]
mov dword [esp + 0xf0], eax
mov eax, dword [esp + 0x12c]
mov dword [esp + 0xf4], eax
lea eax, [0xb91d5b]
mov dword [esp + 0xf8], eax
mov dword [esp + 0xfc], 7
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x100], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x104], eax
lea eax, [0xb93edd]
mov dword [esp + 0x108], eax
mov dword [esp + 0x10c], 9
mov dword [esp + 0x110], edx
mov eax, dword [esp + 0x70]
mov dword [esp + 0x114], eax
mov dword [esp], 0
lea eax, [esp + 0xe8]
mov dword [esp + 4], eax
mov dword [esp + 8], 6
mov dword [esp + 0xc], 6
call fcn.0044a210
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409480
mov eax, dword [esp + 8]
lea ecx, [0xaa9660]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00433120
mov eax, ebx
call fcn.00460bc0
mov dword [esp], 0
lea eax, [0xb94b58]
mov dword [esp + 4], eax
mov dword [esp + 8], 9
mov eax, dword [esp + 0x128]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x12c]
mov dword [esp + 0x10], eax
lea eax, [0xba4666]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0x1a
call fcn.0044a4a0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409480
mov eax, dword [esp + 8]
lea ecx, [0xaa9660]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00433120
lea eax, [0xaa9660]
mov dword [esp], eax
lea eax, [0xc75be8]
mov dword [esp + 4], eax
call fcn.00433120
lea eax, [0xaa9660]
mov dword [esp], eax
lea eax, [0xc75be0]
mov dword [esp + 4], eax
call fcn.00433120
lea eax, [0xaa9660]
mov dword [esp], eax
lea eax, [0xc75bd8]
mov dword [esp + 4], eax
call fcn.00433120
lea eax, [0xaa9660]
mov dword [esp], eax
lea eax, [0xc75bd0]
mov dword [esp + 4], eax
call fcn.00433120
lea eax, [0xaa9660]
mov dword [esp], eax
lea eax, [0xc75bc8]
mov dword [esp + 4], eax
call fcn.00433120
lea eax, [0xaa9660]
mov dword [esp], eax
lea eax, [0xc75bc0]
mov dword [esp + 4], eax
call fcn.00433120
nop
call fcn.0045f5f0
jmp fcn.004d0aa0