Function at 0x48b5ea
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x74
push ebx
push esi
push edi
xor edi, edi
xor esi, esi
cmp dword [ebp + 0xc], 0x10
mov ebx, ecx
mov dword [ebp - 8], esi
mov dword [ebp - 4], edi
jbe 0x48b60e
mov dword [ebx + 0x50], 1
cmp dword [ebx + 0x50], edi
jne 0x48d5c0
mov eax, dword [ebp + 0xc]
push 0x10
pop ecx
sub ecx, eax
shl ecx, 2
push ecx
lea eax, [ebp + eax*4 - 0x74]
push edi
push eax
call sub.msvcrt.dll_memset
mov eax, dword [ebp + 0xc]
add esp, 0xc
cmp eax, edi
mov dword [ebp - 0xc], eax
jbe 0x48b66b
mov ecx, dword [ebx + 8]
dec dword [ebp - 0xc]
cmp ecx, edi
je 0x48b680
mov eax, dword [ecx + 8]
mov edx, dword [ebp - 0xc]
mov dword [ebp + edx*4 - 0x74], eax
mov eax, dword [ecx + 0xc]
mov dword [ecx + 8], edi
mov dword [ebx + 8], eax
dec dword [ecx + 0x10]
mov dword [ecx + 0xc], edi
jne 0x48b666
mov eax, dword [ecx]
push 1
call dword [eax]
cmp dword [ebp - 0xc], edi
ja 0x48b63b
mov eax, dword [ebp + 8]
cmp eax, 0x1b5
ja case.0x48b679.21
jmp dword [eax*4 + 0x48d5ca]
push 0x41dcac
push edi
push edi
push ebx
call fcn.0047ff04
add esp, 0x10
jmp 0x48d5c0
push 0x40
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push edi
mov ecx, eax
call fcn.0047beb3
mov esi, eax
jmp 0x48b6b7
xor esi, esi
push esi
mov ecx, ebx
call fcn.0047ff70
jmp case.0x48b679.250
push 0x40
call fcn.0044764f
cmp eax, edi
je 0x48b6fe
push dword [ebp - 0x74]
mov ecx, eax
push dword [ebx + 0x88]
push dword [ebx + 0x80]
push dword [ebx + 0x64]
push dword [ebx + 0x7c]
push dword [ebx + 0x78]
push dword [ebx + 0x74]
push dword [ebx + 0x70]
push dword [ebx + 0x6c]
push dword [ebx + 0x68]
call fcn.0047beb3
mov esi, eax
jmp 0x48b700
xor esi, esi
push esi
mov ecx, ebx
call fcn.0047ff70
test eax, eax
je case.0x48b679.250
mov eax, dword [ebx + 0x80]
mov ecx, dword [ebx + 4]
shl eax, 2
push 0x10
push eax
add ecx, 0x30
call fcn.004cbf66
cmp eax, edi
mov dword [esi + 0x3c], eax
je 0x48b746
mov ecx, dword [ebx + 0x80]
shl ecx, 2
push ecx
push dword [ebx + 0x24]
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
jmp 0x48b74e
push edi
mov ecx, ebx
call fcn.0047ff70
mov dword [ebp - 0x74], edi
jmp case.0x48b679.250
push dword [ebp - 0x70]
push dword [ebp - 0x74]
call fcn.0047bbc9
mov esi, eax
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x70], edi
jmp case.0x48b679.250
push edi
push edi
push dword [ebp - 0x74]
mov ecx, ebx
call fcn.0048041b
mov esi, eax
push esi
jmp 0x48b747
push edi
push dword [ebp - 0x6c]
mov ecx, ebx
push dword [ebp - 0x74]
call fcn.0048041b
mov esi, eax
push esi
mov ecx, ebx
call fcn.0047ff70
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x6c], edi
jmp case.0x48b679.250
mov esi, dword [ebp - 0x74]
mov dword [ebp - 0x74], edi
mov dword [ebx + 0x18], esi
jmp case.0x48b679.250
mov eax, dword [ebx + 0x18]
push dword [eax + 0x20]
push 9
mov ecx, ebx
call fcn.0047ffaa
jmp case.0x48b679.250
push edi
push dword [ebp - 0x6c]
mov ecx, ebx
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 7
call fcn.0048032f
mov esi, eax
push esi
mov ecx, ebx
call fcn.0047ff70
mov dword [ebp - 0x70], edi
jmp 0x48b79a
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 7
mov ecx, ebx
call fcn.0048032f
mov esi, eax
push esi
mov ecx, ebx
call fcn.0047ff70
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x68], edi
jmp case.0x48b679.250
mov ecx, ebx
call fcn.0047f709
jmp case.0x48b679.250
push edi
push dword [ebp - 0x74]
mov ecx, ebx
call fcn.0047f6ce
mov esi, eax
cmp esi, edi
je 0x48b833
mov dword [ebp - 0x74], edi
push esi
mov ecx, ebx
call fcn.004804a3
jmp case.0x48b679.250
push dword [ebp - 0x70]
mov ecx, ebx
push dword [ebp - 0x74]
call fcn.0047f6ce
mov esi, eax
cmp esi, edi
je 0x48b833
mov dword [ebp - 0x70], edi
jmp 0x48b830
push edi
push dword [ebp - 0x6c]
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 8
jmp 0x48b7f4
push dword [ebp - 0x68]
jmp 0x48b859
push dword [ebp - 0x70]
mov ecx, ebx
push dword [ebp - 0x74]
call fcn.0048067d
mov esi, dword [ebp - 0x74]
jmp 0x48b74e
push 0x20
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push edi
push edi
push 2
mov ecx, eax
call fcn.0047c341
jmp 0x48b6b1
push 0x20
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push edi
push edi
push 0x40
jmp 0x48b894
push 0x20
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push edi
push edi
push 1
jmp 0x48b894
push 0x20
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push edi
push edi
push 4
jmp 0x48b894
push 0x20
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push edi
push edi
push 0x100
jmp 0x48b894
push 0x20
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push edi
push edi
push 8
jmp 0x48b894
push 0x20
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push edi
push edi
push 0x20000
jmp 0x48b894
push 0x20
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push edi
push edi
push 0x40000
jmp 0x48b894
push 0x20
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push edi
push edi
push 0x80000
jmp 0x48b894
push 0x20
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push edi
push edi
push 0x100000
jmp 0x48b894
push edi
push dword [ebp - 0x74]
mov ecx, ebx
call fcn.0047f759
mov esi, eax
push esi
mov ecx, ebx
call fcn.0047ff70
test eax, eax
je case.0x48b679.250
jmp 0x48b74e
push 0x20
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push edi
push edi
push 0x200
jmp 0x48b894
push 0x20
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push edi
push edi
push 0x400
jmp 0x48b894
push 0x20
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push edi
push edi
push 0x800
jmp 0x48b894
push 0x20
call fcn.0044764f
cmp eax, edi
je 0x48ba13
push edi
push dword [ebp - 0x74]
push edi
push edi
mov ecx, eax
call fcn.0047c341
mov esi, eax
jmp 0x48ba15
xor esi, esi
push esi
mov ecx, ebx
call fcn.0047ff70
test eax, eax
je 0x48ba24
mov dword [ebp - 0x74], edi
push esi
mov ecx, ebx
call fcn.00485769
jmp case.0x48b679.250
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x74]
mov dword [ecx + 0x1c], eax
mov esi, dword [ebp - 0x74]
mov dword [ebp - 0x70], edi
jmp 0x48ba21
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 8]
push edi
push dword [eax + 0x1c]
lea ecx, [ebp - 0x34]
push edi
push edi
call fcn.0047c341
lea eax, [ebp - 0x34]
push eax
mov ecx, ebx
call fcn.00485769
mov esi, dword [ebp - 0x74]
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x74], edi
call fcn.0047d670
jmp case.0x48b679.250
mov eax, dword [ebp - 0x70]
mov eax, dword [eax + 8]
mov ecx, dword [ebp - 0x74]
mov eax, dword [eax + 0x1c]
mov dword [ecx + 0x1c], eax
push dword [ebp - 0x74]
mov ecx, ebx
call fcn.00485769
mov eax, dword [ebp - 0x74]
mov dword [eax + 0x1c], edi
mov esi, dword [ebp - 0x70]
jmp 0x48b766
push dword [ebp - 0x70]
mov ecx, ebx
push dword [ebp - 0x74]
call fcn.00486695
jmp 0x48b6b1
mov eax, dword [ebp - 0x74]
push dword [ebp - 0x70]
mov eax, dword [eax + 8]
push dword [eax + 0x1c]
mov ecx, ebx
call fcn.00486695
mov esi, eax
push esi
mov ecx, ebx
call fcn.0047ff70
push esi
push dword [ebp - 0x74]
call fcn.0047bbc9
mov esi, eax
jmp 0x48b74e
push 0x18
call fcn.0044764f
cmp eax, edi
je 0x48bafd
push 0x41dca0
push edi
push dword [ebp - 0x74]
mov ecx, eax
call fcn.0047bc12
jmp 0x48b98c
xor esi, esi
jmp 0x48b98e
push 0x18
call fcn.0044764f
cmp eax, edi
je 0x48bb25
push 0x41dca0
push dword [ebp - 0x70]
mov ecx, eax
push dword [ebp - 0x74]
call fcn.0047bc12
mov esi, eax
jmp 0x48bb27
xor esi, esi
push esi
mov ecx, ebx
call fcn.0047ff70
test eax, eax
je case.0x48b679.250
jmp 0x48b763
push edi
lea eax, [ebp - 8]
push eax
push 1
push dword [ebx + 0x10]
mov eax, dword [ebp - 0x74]
push edi
push edi
add eax, 0x18
push eax
push edi
mov ecx, ebx
call fcn.00485ec4
mov esi, dword [ebp - 8]
xor eax, eax
cmp dword [ebp + 0xc], edi
mov dword [ebp + 8], eax
jbe 0x48bb7f
mov ecx, dword [ebp + eax*4 - 0x74]
cmp ecx, edi
je 0x48bb73
dec dword [ecx + 0x10]
jne 0x48bb73
mov eax, dword [ecx]
push 1
call dword [eax]
mov eax, dword [ebp + 8]
inc eax
cmp eax, dword [ebp + 0xc]
mov dword [ebp + 8], eax
jb 0x48bb60
cmp dword [ebx + 0x54], edi
je 0x48d590
mov eax, dword [ebp - 4]
cmp eax, edi
je 0x48bb9c
dec dword [eax + 0x10]
jne 0x48bb9c
mov ecx, eax
mov eax, dword [ecx]
push 1
call dword [eax]
cmp esi, edi
je 0x48d5c0
dec dword [esi + 0x10]
jne 0x48d5c0
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax]
jmp 0x48d5c0
push edi
lea eax, [ebp - 8]
push eax
mov eax, dword [ebp - 0x74]
push 1
push dword [ebx + 0x10]
add eax, 0x18
push edi
push edi
push eax
push edi
mov ecx, ebx
call fcn.00485ec4
test eax, eax
jne 0x48bb53
mov esi, dword [ebp - 8]
cmp esi, edi
je case.0x48b679.250
cmp dword [esi + 4], 1
je case.0x48b679.250
mov eax, dword [ebp - 0x74]
push dword [eax + 0x20]
add eax, 0x18
push 0x41dc8c
push 0xbbd
push eax
push ebx
call fcn.0047fe37
add esp, 0x14
jmp case.0x48b679.250
push edi
lea eax, [ebp - 8]
push eax
push 0x20
jmp 0x48bb3f
push edi
lea eax, [ebp - 8]
push eax
push 0x80
jmp 0x48bb3f
push edi
lea eax, [ebp - 8]
push eax
push 0x40
jmp 0x48bb3f
lea eax, [ebp - 8]
push eax
push dword [ebp - 0x70]
mov ecx, ebx
push dword [ebp - 0x74]
call fcn.004830a1
mov dword [ebp - 0x70], edi
jmp 0x48bb53
push dword [ebp - 0x70]
mov ecx, ebx
push dword [ebp - 0x74]
call fcn.004869f3
jmp 0x48b98c
mov esi, dword [ebp - 0x74]
push esi
push dword [ebx + 0x10]
mov ecx, ebx
mov dword [ebp - 0x74], edi
call fcn.0048015c
jmp case.0x48b679.250
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push edi
push edi
push edi
mov ecx, eax
call fcn.0047c477
jmp 0x48b6b1
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push edi
push 5
jmp 0x48bc92
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push edi
push 0xb
jmp 0x48bc92
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push edi
push 0xc
jmp 0x48bc92
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push edi
push 0xd
jmp 0x48bc92
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push edi
push 9
jmp 0x48bc92
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push edi
push 0x10
jmp 0x48bc92
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push edi
push 0x14
jmp 0x48bc92
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 4
push 1
push edi
push 0xc
push 1
jmp 0x48bc93
push dword [ebp - 0x70]
mov ecx, ebx
push dword [ebp - 0x74]
call fcn.004868b7
jmp 0x48b6b1
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 4
push 4
push edi
push 0xc
push 2
jmp 0x48bc93
push dword [ebp - 0x6c]
mov ecx, ebx
push dword [ebp - 0x70]
push dword [ebp - 0x74]
call fcn.00486947
jmp 0x48b6b1
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push edi
push 0x17
push 3
jmp 0x48bc93
test word [ebx], 0x800
jne 0x48bdf8
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push edi
push 0x18
jmp 0x48bdd1
push 0x41dc5c
push 0xc0e
lea eax, [ebx + 0x28]
push eax
push ebx
call fcn.0047fe37
add esp, 0x10
jmp case.0x48b679.250
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48be35
push edi
push 4
push 1
push edi
push 0xc
push 1
mov ecx, eax
call fcn.0047c477
mov dword [ebp - 4], eax
jmp 0x48be38
mov dword [ebp - 4], edi
push dword [ebp - 4]
mov ecx, ebx
call fcn.0047ff70
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push dword [ebp - 4]
push 0x19
jmp 0x48bdd1
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48be81
push edi
push 4
push 1
push edi
push 0xc
push 1
mov ecx, eax
call fcn.0047c477
mov dword [ebp - 4], eax
jmp 0x48be84
mov dword [ebp - 4], edi
push dword [ebp - 4]
mov ecx, ebx
call fcn.0047ff70
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push dword [ebp - 4]
push 0x1a
jmp 0x48bdd1
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48becd
push edi
push 4
push 1
push edi
push 0xc
push 1
mov ecx, eax
call fcn.0047c477
mov dword [ebp - 4], eax
jmp 0x48bed0
mov dword [ebp - 4], edi
push dword [ebp - 4]
mov ecx, ebx
call fcn.0047ff70
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push dword [ebp - 4]
push 0x1b
jmp 0x48bdd1
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48bf19
push edi
push 4
push 1
push edi
push 0xc
push 1
mov ecx, eax
call fcn.0047c477
mov dword [ebp - 4], eax
jmp 0x48bf1c
mov dword [ebp - 4], edi
push dword [ebp - 4]
mov ecx, ebx
call fcn.0047ff70
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push dword [ebp - 4]
push 0x1c
jmp 0x48bdd1
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48bf65
push edi
push 4
push 1
push edi
push 0xc
push 1
mov ecx, eax
call fcn.0047c477
mov dword [ebp - 4], eax
jmp 0x48bf68
mov dword [ebp - 4], edi
push dword [ebp - 4]
mov ecx, ebx
call fcn.0047ff70
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push dword [ebp - 4]
push 0x1d
jmp 0x48bdd1
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48bfb1
push edi
push 4
push 1
push edi
push 0xc
push 1
mov ecx, eax
call fcn.0047c477
mov dword [ebp - 4], eax
jmp 0x48bfb4
mov dword [ebp - 4], edi
push dword [ebp - 4]
mov ecx, ebx
call fcn.0047ff70
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push dword [ebp - 4]
push 0x1e
jmp 0x48bdd1
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48bffd
push edi
push 4
push 1
push edi
push 0xc
push 1
mov ecx, eax
call fcn.0047c477
mov dword [ebp - 4], eax
jmp 0x48c000
mov dword [ebp - 4], edi
push dword [ebp - 4]
mov ecx, ebx
call fcn.0047ff70
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push dword [ebp - 4]
push 0x1f
jmp 0x48bdd1
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48bafd
push edi
push 1
push 1
push dword [ebp - 0x74]
push 0x19
push 3
mov ecx, eax
call fcn.0047c477
jmp 0x48b98c
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48bafd
push edi
push 1
push 1
push dword [ebp - 0x74]
push 0x1a
jmp 0x48c041
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48bafd
push edi
push 1
push 1
push dword [ebp - 0x74]
push 0x1b
jmp 0x48c041
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48bafd
push edi
push 1
push 1
push dword [ebp - 0x74]
push 0x1c
jmp 0x48c041
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48bafd
push edi
push 1
push 1
push dword [ebp - 0x74]
push 0x1d
jmp 0x48c041
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48bafd
push edi
push 1
push 1
push dword [ebp - 0x74]
push 0x1e
jmp 0x48c041
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48bafd
push edi
push 1
push 1
push dword [ebp - 0x74]
push 0x1f
jmp 0x48c041
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push edi
push 0x22
jmp 0x48bdd1
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push edi
push 0x27
jmp 0x48bdd1
test word [ebx], 0x800
jne 0x48c152
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push edi
push 0x23
jmp 0x48bdd1
push 0x41dc08
jmp 0x48bdfd
test word [ebx], 0x800
jne 0x48c17f
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push edi
push 0x24
jmp 0x48bdd1
push 0x41dbb0
jmp 0x48bdfd
test word [ebx], 0x800
jne 0x48c1ac
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push edi
push 0x25
jmp 0x48bdd1
push 0x41db58
jmp 0x48bdfd
test word [ebx], 0x800
jne 0x48c1d9
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push edi
push 0x26
jmp 0x48bdd1
push 0x41db00
jmp 0x48bdfd
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push edi
push 0x2b
jmp 0x48bdd1
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push edi
push 0x2c
jmp 0x48bdd1
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push edi
push 0x2d
jmp 0x48bdd1
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push edi
push 0x2e
jmp 0x48bdd1
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push edi
push 0x2f
jmp 0x48bdd1
test word [ebx], 0x800
jne 0x48c292
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push edi
push 0x30
jmp 0x48bdd1
push 0x41dac4
jmp 0x48bdfd
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48c2bd
push edi
push 4
push 1
push edi
push 0xc
push 1
mov ecx, eax
call fcn.0047c477
mov dword [ebp - 4], eax
jmp 0x48c2c0
mov dword [ebp - 4], edi
push dword [ebp - 4]
mov ecx, ebx
call fcn.0047ff70
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push dword [ebp - 4]
push 0x28
jmp 0x48bdd1
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48bafd
push edi
push 1
push 1
push dword [ebp - 0x74]
push 0x28
jmp 0x48c041
lea eax, [ebp + 8]
push eax
push dword [ebp - 0x70]
mov ecx, ebx
mov dword [ebp + 8], edi
call fcn.00485958
test eax, eax
jge 0x48c322
push 0x41daa8
jmp 0x48c32c
cmp dword [ebp + 8], edi
jne 0x48c350
push 0x41da88
mov eax, dword [ebp - 0x70]
mov ecx, eax
add eax, 0x38
neg ecx
sbb ecx, ecx
push 0xbcc
and ecx, eax
push ecx
push ebx
call fcn.0047fe37
add esp, 0x10
xor esi, esi
jmp case.0x48b679.250
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48bafd
push edi
push 1
push dword [ebp + 8]
push dword [ebp - 0x74]
push 0x20
jmp 0x48c041
lea eax, [ebp + 8]
push eax
push dword [ebp - 0x70]
mov ecx, ebx
mov dword [ebp + 8], edi
call fcn.00485958
test eax, eax
jl 0x48c31b
cmp dword [ebp + 8], edi
je 0x48c327
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48bafd
push edi
push 1
push dword [ebp + 8]
push dword [ebp - 0x74]
push 0x21
jmp 0x48c041
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48bafd
push 0x800000
push 1
push 1
jmp 0x48c365
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48bafd
push 0x800000
push 1
push 1
jmp 0x48c39e
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push edi
push 0x31
jmp 0x48bdd1
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push edi
push 0x32
jmp 0x48bdd1
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push edi
push 0x33
jmp 0x48bdd1
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48bafd
push edi
push 1
push 1
push dword [ebp - 0x74]
push 0x34
jmp 0x48c041
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48bafd
push edi
push 1
push 1
push dword [ebp - 0x74]
push 0x35
jmp 0x48c041
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48bafd
push edi
push 1
push 1
push dword [ebp - 0x74]
push 0x36
jmp 0x48c041
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push edi
push 0x29
jmp 0x48bdd1
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push 1
push 1
push edi
push 0x2a
jmp 0x48bdd1
push dword [ebp - 0x74]
push edi
mov ecx, ebx
call fcn.0048685a
jmp 0x48b6b1
push dword [ebp - 0x74]
push dword [ebp - 0x6c]
jmp 0x48c4c6
mov eax, dword [ebp - 0x70]
mov eax, dword [eax + 8]
add eax, 0x1c
push eax
push dword [eax]
mov ecx, ebx
push dword [ebp - 0x74]
call fcn.004830a1
jmp case.0x48b679.141
push edi
xor esi, esi
push 1
jmp 0x48b7b8
xor esi, esi
mov ecx, ebx
call fcn.004800b5
jmp case.0x48b679.250
push 0x18
call fcn.0044764f
cmp eax, edi
je 0x48bafd
push 0x41da7c
jmp 0x48baed
push 0x18
call fcn.0044764f
cmp eax, edi
je 0x48c545
push 0x41da7c
push edi
push dword [ebp - 0x74]
mov ecx, eax
call fcn.0047bc12
mov esi, eax
jmp 0x48c547
xor esi, esi
push esi
mov ecx, ebx
call fcn.0047ff70
test eax, eax
je 0x48c556
mov dword [ebp - 0x74], edi
push dword [ebx + 0x10]
mov ecx, ebx
call fcn.00480198
jmp case.0x48b679.250
push dword [ebp - 0x70]
push dword [ebp - 0x74]
call fcn.0047bbc9
jmp 0x48bb21
push 0x24
call fcn.0044764f
cmp eax, edi
je 0x48bafd
push edi
push dword [ebp - 0x74]
push edi
push edi
mov ecx, eax
call fcn.0047cd50
jmp 0x48b98c
push 0x24
call fcn.0044764f
cmp eax, edi
je 0x48bb25
push edi
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push edi
mov ecx, eax
call fcn.0047cd50
jmp 0x48bb21
push 0x24
call fcn.0044764f
cmp eax, edi
je 0x48bafd
push edi
push dword [ebp - 0x74]
push edi
push 1
jmp 0x48c58a
push 0x24
call fcn.0044764f
cmp eax, edi
je 0x48bb25
push edi
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 1
jmp 0x48c5ad
push 0x24
call fcn.0044764f
cmp eax, edi
je 0x48bb25
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push edi
jmp 0x48c5e7
push 0x24
call fcn.0044764f
cmp eax, edi
je 0x48c624
push dword [ebp - 0x6c]
mov ecx, eax
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 1
call fcn.0047cd50
mov esi, eax
jmp 0x48c626
xor esi, esi
push esi
mov ecx, ebx
call fcn.0047ff70
test eax, eax
je case.0x48b679.250
mov dword [ebp - 0x74], edi
jmp 0x48b7e1
push edi
xor esi, esi
push 5
jmp 0x48b7b8
push dword [ebp - 0x74]
mov ecx, ebx
call fcn.004846d5
mov esi, eax
push esi
mov ecx, ebx
call fcn.0047ff70
push 0x18
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push 0x41c418
push edi
push esi
mov ecx, eax
call fcn.0047bc12
jmp 0x48b6b1
mov esi, dword [ebp - 0x70]
mov dword [ebp - 0x70], edi
mov ecx, ebx
call fcn.0047f733
jmp case.0x48b679.250
push dword [ebp - 0x70]
push dword [ebp - 0x74]
call fcn.0047bbc9
mov esi, eax
mov dword [ebp - 0x74], edi
jmp 0x48c681
push dword [ebp - 0x68]
mov ecx, ebx
push dword [ebp - 0x6c]
push dword [ebp - 0x70]
push dword [ebp - 0x74]
call fcn.00489649
jmp 0x48b6b1
push 0x18
call fcn.0044764f
cmp eax, edi
je 0x48bafd
push 0x41da70
jmp 0x48baed
push 0x18
call fcn.0044764f
cmp eax, edi
je 0x48bb25
push 0x41da70
jmp 0x48bb14
push dword [ebp - 0x74]
mov ecx, ebx
call fcn.00485a72
mov esi, eax
jmp case.0x48b679.250
push dword [ebp - 0x70]
mov ecx, ebx
call fcn.00485a72
push eax
jmp 0x48bace
push edi
push edi
mov ecx, ebx
call fcn.0047f808
jmp 0x48b6b1
push edi
push dword [ebp - 0x74]
mov ecx, ebx
call fcn.0047f808
jmp 0x48b77a
push dword [ebp - 0x70]
mov ecx, ebx
push dword [ebp - 0x74]
call fcn.0047f808
mov esi, eax
push esi
mov ecx, ebx
call fcn.0047ff70
jmp 0x48b763
mov eax, dword [ebp - 0x74]
cmp eax, edi
je case.0x48b679.196
mov eax, dword [eax + 8]
cmp eax, edi
mov dword [ebp - 0xc], eax
je case.0x48b679.196
mov ecx, dword [ebp - 0x70]
mov esi, dword [eax + 0x1c]
mov dword [eax + 0x20], ecx
mov eax, dword [ebp - 0x6c]
push 0x3c
mov dword [ebp - 0x10], esi
mov dword [esi + 0x38], eax
mov dword [esi + 0x54], 1
call fcn.0044764f
cmp eax, edi
je 0x48c790
mov ecx, eax
call fcn.0047c7b3
mov dword [ebp + 8], eax
jmp 0x48c793
mov dword [ebp + 8], edi
push dword [ebp + 8]
mov ecx, ebx
call fcn.0047ff70
cmp dword [ebp + 8], edi
mov dword [esi + 0x48], eax
je 0x48c7f8
mov esi, dword [ebp + 8]
mov dword [esi + 0x14], 1
mov eax, dword [ebx + 0x7c]
mov dword [esi + 0x38], eax
inc dword [ebx + 0x7c]
push 0x68
call fcn.0044764f
cmp eax, edi
je 0x48c7d9
lea ecx, [ebx + 0x28]
push ecx
push 1
push edi
push edi
push edi
push edi
mov ecx, eax
call fcn.0047c940
mov dword [ebp + 8], eax
jmp 0x48c7dc
mov dword [ebp + 8], edi
push dword [ebp + 8]
mov ecx, ebx
call fcn.0047ff70
cmp dword [ebp + 8], edi
mov dword [esi + 0x34], eax
je 0x48c7f8
push dword [ebp + 8]
mov ecx, ebx
call fcn.0048269e
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x6c], edi
mov esi, dword [eax + 0x18]
mov eax, dword [ebx + 0x10]
add esi, 0x18
mov dword [ebp - 0x14], esi
jmp 0x48c844
push dword [ebp + 8]
mov ecx, ebx
push esi
call fcn.0047e794
jmp 0x48c837
mov ecx, dword [eax + 8]
cmp ecx, edi
je 0x48c834
cmp dword [ecx + 4], 6
jne 0x48c834
mov ecx, dword [ecx + 0x30]
mov edx, dword [ebp - 0xc]
cmp ecx, dword [edx + 0x30]
je 0x48c860
mov eax, dword [eax + 0xc]
cmp eax, edi
mov dword [ebp - 8], eax
jne 0x48c81c
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x24]
cmp eax, edi
mov dword [ebp + 8], eax
jne 0x48c80f
mov esi, dword [ebp - 0x74]
mov ecx, ebx
mov dword [ebp - 0x74], edi
call fcn.004800b5
mov dword [ebx + 0x1c], edi
jmp case.0x48b679.250
mov eax, dword [ebp - 8]
mov eax, dword [eax + 8]
mov esi, dword [eax + 0x1c]
mov eax, dword [ebp - 0x10]
cmp esi, eax
je 0x48c892
cmp dword [esi + 0x54], edi
je 0x48c892
mov eax, dword [ebp - 0x14]
push dword [eax + 8]
push 0x41da58
push 0xbfd
push eax
push ebx
call fcn.0047fe37
mov eax, dword [ebp - 0x10]
add esp, 0x14
mov ecx, dword [ebp - 8]
mov dword [esi + 0x54], 1
mov ecx, dword [ecx + 8]
mov dword [ecx + 0x1c], eax
inc dword [eax + 0x10]
dec dword [esi + 0x10]
jne case.0x48b679.196
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax]
jmp case.0x48b679.196
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
push dword [ebp - 0x70]
push edi
mov ecx, ebx
call fcn.0048a260
mov esi, eax
push esi
mov ecx, ebx
call fcn.0047ff70
jmp 0x48c684
push dword [ebp - 0x64]
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
push dword [ebp - 0x74]
jmp 0x48c8be
push dword [ebx + 0x20]
xor esi, esi
push 2
jmp 0x48b7b8
push 0x20
call fcn.0044764f
cmp eax, edi
je 0x48ba13
push edi
push dword [ebp - 0x74]
push edi
push 0x10
jmp 0x48ba08
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x74]
mov dword [ecx + 0x1c], eax
mov esi, dword [ebp - 0x74]
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x74], edi
test byte [esi + 0x14], 0x70
jne 0x48ba24
or dword [esi + 0x14], 0x10
jmp 0x48ba24
push 0x20
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push edi
push edi
push 0x10
jmp 0x48b894
push 0x20
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push edi
push edi
push 0x20
jmp 0x48b894
push 0x20
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push edi
push edi
push 0x30
jmp 0x48b894
push 0x20
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push edi
push edi
push 0x50
jmp 0x48b894
push 0x20
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push edi
push edi
push 0x1000
jmp 0x48b894
push 0x20
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push edi
push edi
push 0x2000
jmp 0x48b894
push 0x20
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push edi
push edi
push 0x4000
jmp 0x48b894
push 0x20
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push edi
push edi
push 0x8000
jmp 0x48b894
push 0x20
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
push edi
push edi
push 0x10000
jmp 0x48b894
push 1
jmp 0x48b982
push 0x18
call fcn.0044764f
cmp eax, edi
je 0x48ca42
push 0x41be98
push edi
push edi
mov ecx, eax
call fcn.0047bc12
mov esi, eax
jmp 0x48ca44
xor esi, esi
push esi
mov ecx, ebx
call fcn.0047ff70
test eax, eax
je 0x48ca8a
push 0x3c
call fcn.0044764f
cmp eax, edi
je 0x48ca70
push edi
push dword [ebp - 0x70]
mov ecx, eax
push dword [ebp - 0x6c]
push dword [ebp - 0x74]
push 3
call fcn.0047c08c
jmp 0x48ca72
xor eax, eax
push eax
mov ecx, ebx
mov dword [esi + 8], eax
call fcn.0047ff70
test eax, eax
je 0x48ca8a
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x6c], edi
inc dword [ebx + 0x68]
jmp case.0x48b679.250
push 0x18
call fcn.0044764f
cmp eax, edi
je 0x48caaf
push 0x41be98
push edi
push edi
mov ecx, eax
call fcn.0047bc12
mov esi, eax
jmp 0x48cab1
xor esi, esi
push esi
mov ecx, ebx
call fcn.0047ff70
test eax, eax
je 0x48cb14
push 0x3c
call fcn.0044764f
cmp eax, edi
je 0x48cadd
push edi
push dword [ebp - 0x70]
mov ecx, eax
push dword [ebp - 0x6c]
push dword [ebp - 0x74]
push 4
call fcn.0047c08c
jmp 0x48cadf
xor eax, eax
push eax
mov ecx, ebx
mov dword [esi + 8], eax
call fcn.0047ff70
test eax, eax
je 0x48cb14
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x6c], edi
mov eax, dword [esi + 8]
cmp dword [eax + 0x18], edi
je 0x48cb14
push edi
push eax
mov ecx, ebx
call fcn.004801d7
test eax, eax
jge 0x48cb14
push edi
mov ecx, ebx
call fcn.0047ff70
inc dword [ebx + 0x6c]
jmp case.0x48b679.250
push edi
push 6
mov ecx, ebx
call fcn.0047ffaa
jmp case.0x48b679.4
push 0x18
call fcn.0044764f
cmp eax, edi
je 0x48cb48
push 0x41da50
push edi
push edi
mov ecx, eax
call fcn.0047bc12
mov esi, eax
jmp 0x48cb4a
xor esi, esi
push esi
mov ecx, ebx
call fcn.0047ff70
test eax, eax
je case.0x48b679.250
push 0x3c
call fcn.0044764f
cmp eax, edi
je 0x48cb7a
push edi
push dword [ebp - 0x70]
mov ecx, eax
push dword [ebp - 0x6c]
push dword [ebp - 0x74]
push 5
call fcn.0047c08c
jmp 0x48cb7c
xor eax, eax
mov dword [esi + 8], eax
push eax
jmp 0x48c627
push edi
push 8
mov ecx, ebx
call fcn.0047ffaa
mov dword [ebx + 0x58], edi
jmp case.0x48b679.4
mov ecx, ebx
mov dword [ebx + 0x58], 1
xor esi, esi
call fcn.004800b5
mov eax, dword [ebx + 0x10]
cmp eax, edi
je case.0x48b679.250
cmp dword [eax + 0x14], 8
jne case.0x48b679.250
mov dword [ebx + 0x58], edi
jmp case.0x48b679.250
lea eax, [ebp - 0x74]
push eax
mov ecx, ebx
call fcn.00490a37
jmp 0x48b6b1
test word [ebx], 0x800
je case.0x48b679.244
push 0x41da14
jmp 0x48bdfd
push 0x18
call fcn.0044764f
cmp eax, edi
je 0x48cc02
push 0x41c300
push edi
push edi
mov ecx, eax
call fcn.0047bc12
mov esi, eax
jmp 0x48cc04
xor esi, esi
push esi
mov ecx, ebx
call fcn.0047ff70
test eax, eax
je case.0x48b679.250
push 0x20
call fcn.0044764f
cmp eax, edi
je 0x48cc31
push dword [ebp - 0x68]
mov ecx, eax
push dword [ebp - 0x70]
push dword [ebp - 0x74]
call fcn.0047cc01
jmp 0x48cc33
xor eax, eax
push eax
mov ecx, ebx
mov dword [esi + 8], eax
call fcn.0047ff70
test eax, eax
je case.0x48b679.250
mov dword [ebp - 0x74], edi
jmp 0x48b808
push 0x40
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
lea ecx, [ebx + 0x28]
push ecx
mov ecx, eax
call fcn.0047be22
jmp 0x48b6b1
push edi
xor esi, esi
push 3
jmp 0x48b7b8
push dword [ebp - 0x74]
mov ecx, ebx
call fcn.0047f061
jmp 0x48c6f6
push dword [ebp - 0x74]
push edi
mov ecx, ebx
call fcn.00487c6f
jmp 0x48c6f6
push dword [ebp - 0x74]
push dword [ebp - 0x70]
jmp 0x48cc8a
push dword [ebp - 0x74]
push dword [ebp - 0x70]
push edi
push dword [ebp - 0x6c]
push dword [ebp - 0x70]
push edi
mov ecx, ebx
call fcn.004881af
jmp 0x48c6f6
push 0x18
call fcn.0044764f
cmp eax, edi
je 0x48bafd
push 0x41be98
jmp 0x48baed
push dword [ebp - 0x74]
mov ecx, ebx
call fcn.00485401
jmp 0x48c6f6
push dword [ebp - 0x74]
mov ecx, ebx
call fcn.00485344
jmp 0x48c6f6
push dword [ebp - 0x74]
mov ecx, ebx
call fcn.004851ca
jmp 0x48c6f6
push dword [ebp - 0x74]
mov ecx, ebx
call fcn.00485287
jmp 0x48c6f6
push dword [ebp - 0x74]
push dword [ebp - 0x6c]
push edi
push dword [ebp - 0x70]
push edi
jmp 0x48ccab
push dword [ebp - 0x74]
push dword [ebp - 0x64]
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
push dword [ebp - 0x70]
push edi
mov ecx, ebx
call fcn.004881af
mov esi, eax
jmp case.0x48b679.17
push dword [ebp - 0x74]
mov esi, dword [ebp - 0x70]
push esi
mov ecx, ebx
call fcn.0047e8e1
jmp 0x48b763
push dword [ebp - 0x70]
push dword [ebp - 0x68]
push edi
push dword [ebp - 0x6c]
push edi
push dword [ebp - 0x74]
jmp 0x48ccac
push dword [ebp - 0x70]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
push dword [ebp - 0x74]
jmp 0x48cd2a
push dword [ebp - 0x74]
push edi
push dword [ebp - 0x6c]
push dword [ebp - 0x70]
push edi
mov ecx, ebx
call fcn.00487dd2
jmp 0x48c6f6
push dword [ebp - 0x74]
push dword [ebp - 0x68]
jmp 0x48cd76
push dword [ebp - 0x74]
push dword [ebp - 0x6c]
push dword [ebp - 0x70]
push edi
mov ecx, ebx
call fcn.00488013
jmp 0x48c6f6
push dword [ebp - 0x70]
push edi
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
push dword [ebp - 0x74]
jmp 0x48cd7d
push dword [ebp - 0x70]
push dword [ebp - 0x64]
jmp 0x48cdab
push dword [ebp - 0x70]
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
push dword [ebp - 0x74]
jmp 0x48cd9b
push dword [ebp - 0x74]
mov ecx, ebx
call fcn.004859cd
jmp 0x48c6f6
push 0x18
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push edi
mov ecx, eax
call fcn.0047c2ce
jmp 0x48b6b1
push 0x18
call fcn.0044764f
cmp eax, edi
je 0x48bafd
push 0x41da04
jmp 0x48baed
push 0x18
call fcn.0044764f
cmp eax, edi
je 0x48ce2f
push 0x41da04
push edi
push dword [ebp - 0x70]
mov ecx, eax
call fcn.0047bc12
mov esi, eax
jmp 0x48ce31
xor esi, esi
push esi
mov ecx, ebx
call fcn.0047ff70
test eax, eax
je case.0x48b679.250
push esi
jmp 0x48b759
push dword [ebp - 0x70]
mov ecx, ebx
push dword [ebp - 0x74]
call fcn.004854be
jmp 0x48c6f6
push 0x40
call fcn.0044764f
cmp eax, edi
je 0x48ce73
lea ecx, [ebx + 0x28]
push ecx
mov ecx, eax
call fcn.0047be22
mov esi, eax
jmp 0x48ce75
xor esi, esi
push esi
mov ecx, ebx
call fcn.0047ff70
push edi
push 4
jmp 0x48b7b8
push 0x18
call fcn.0044764f
cmp eax, edi
je 0x48bafd
push 0x41d9f8
jmp 0x48baed
push 0x18
call fcn.0044764f
cmp eax, edi
je 0x48bb25
push 0x41d9f8
jmp 0x48bb14
mov esi, dword [ebp - 0x74]
push edi
push esi
mov ecx, ebx
call fcn.0047ee82
test eax, eax
push esi
mov ecx, ebx
je 0x48cedb
call fcn.004857ed
mov esi, eax
push esi
mov ecx, ebx
call fcn.0047ff70
jmp 0x48cf20
call fcn.0047efd1
test eax, eax
je 0x48b74e
push 0x18
call fcn.0044764f
cmp eax, edi
je 0x48bafd
push 0x41c368
jmp 0x48baed
push dword [ebp - 0x70]
mov ecx, ebx
push dword [ebp - 0x74]
call fcn.0047faec
mov esi, eax
push esi
mov ecx, ebx
call fcn.0047ff70
test eax, eax
je case.0x48b679.250
push 0x18
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
push 0x41c368
jmp 0x48c670
push 0x68
lea esi, [ebx + 0x28]
call fcn.0044764f
cmp eax, edi
je 0x48cf59
push esi
push 1
push edi
push edi
push edi
push edi
mov ecx, eax
call fcn.0047c940
mov esi, eax
jmp 0x48cf5b
xor esi, esi
cmp esi, edi
je 0x48b6b5
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48cf83
push 0x200
push 1
push 1
push edi
push edi
push edi
mov ecx, eax
call fcn.0047c477
jmp 0x48cf85
xor eax, eax
cmp eax, edi
mov dword [esi + 0x14], eax
je 0x48cff4
push 0x58
call fcn.0044764f
cmp eax, edi
mov dword [ebp + 8], eax
je 0x48cfb9
lea edx, [ebx + 0x88]
mov ecx, dword [edx]
lea eax, [ecx + 1]
mov dword [edx], eax
push ecx
lea eax, [ebx + 0x28]
push eax
push 1
mov ecx, dword [ebp + 8]
push edi
call fcn.0047cafb
jmp 0x48cfbb
xor eax, eax
cmp eax, edi
mov dword [esi + 0x24], eax
je 0x48cff4
push 0x18
call fcn.0044764f
cmp eax, edi
je 0x48cfdf
push 0x41c418
push edi
push dword [esi + 0x24]
mov ecx, eax
call fcn.0047bc12
jmp 0x48cfe1
xor eax, eax
cmp eax, edi
je 0x48cff4
push esi
mov ecx, ebx
mov dword [esi + 0x24], eax
call fcn.0048269e
test eax, eax
jge 0x48d00a
dec dword [esi + 0x10]
jne 0x48b6b5
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax]
jmp 0x48b6b5
push esi
mov ecx, ebx
call fcn.00482179
jmp 0x48b6b7
push 0x68
lea esi, [ebx + 0x28]
call fcn.0044764f
cmp eax, edi
je 0x48d037
push esi
push 1
push edi
push edi
push edi
push edi
mov ecx, eax
call fcn.0047c940
mov esi, eax
jmp 0x48d039
xor esi, esi
cmp esi, edi
je 0x48b6b5
push 0x2c
call fcn.0044764f
cmp eax, edi
je 0x48d061
push 0x200
push 1
push 1
push edi
push edi
push edi
mov ecx, eax
call fcn.0047c477
jmp 0x48d063
xor eax, eax
cmp eax, edi
mov dword [esi + 0x14], eax
je 0x48cff4
push 0x58
call fcn.0044764f
cmp eax, edi
mov dword [ebp + 8], eax
je 0x48cfb9
lea edx, [ebx + 0x88]
mov ecx, dword [edx]
lea eax, [ecx + 1]
mov dword [edx], eax
push ecx
lea eax, [ebx + 0x28]
push eax
push edi
jmp 0x48cfae
push dword [ebp - 0x74]
mov ecx, ebx
call fcn.00483c15
jmp 0x48b6b1
push dword [ebp - 0x74]
mov ecx, ebx
call fcn.00483c91
jmp 0x48b6b1
push edi
push dword [ebp - 0x74]
mov ecx, ebx
call fcn.00486a6f
jmp 0x48b6b1
lea eax, [ebx + 0x28]
push eax
mov ecx, ebx
call fcn.00483dad
jmp 0x48b6b1
push 1
push 1
push dword [ebp - 0x70]
mov ecx, ebx
push dword [ebp - 0x74]
call fcn.00486c56
jmp 0x48b6b1
push edi
push dword [ebp - 0x70]
mov ecx, ebx
push dword [ebp - 0x74]
call fcn.0048a71d
jmp 0x48b6b1
push dword [ebp - 0x74]
mov ecx, ebx
call fcn.00480df7
mov esi, eax
cmp esi, edi
jmp 0x48b998
lea eax, [ebp + 8]
push eax
push dword [ebp - 0x74]
mov ecx, ebx
call fcn.00490921
test eax, eax
jl case.0x48b679.250
push 0x58
call fcn.0044764f
cmp eax, edi
je 0x48b6b5
lea edx, [ebx + 0x88]
mov esi, dword [edx]
lea ecx, [esi + 1]
mov dword [edx], ecx
mov ecx, dword [ebp - 0x74]
push esi
add ecx, 0x18
push ecx
push dword [ebp + 8]
mov ecx, eax
push 2
call fcn.0047cafb
jmp 0x48b6b1
lea eax, [ebp + 8]
push eax
push dword [ebp - 0x70]
mov ecx, ebx
call fcn.00490921
test eax, eax
jl case.0x48b679.250
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp + 8]
or dword [eax + 0x20], ecx
mov esi, dword [ebp - 0x74]
jmp case.0x48b679.250
push dword [ebp - 0x70]
mov ecx, ebx
call fcn.00484472
jmp 0x48c6f6
push dword [ebp - 0x74]
jmp 0x48d183
test word [ebx], 0x800
je case.0x48b679.331
push 0x41d9c0
jmp 0x48bdfd
push edi
push edi
push dword [ebp - 0x6c]
push dword [ebp - 0x70]
push dword [ebp - 0x74]
mov ecx, ebx
call fcn.0048b39e
jmp 0x48c6f6
mov eax, dword [ebp - 0x70]
push edi
push dword [eax + 0x20]
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
jmp 0x48d1ad
test word [ebx], 0x800
jne 0x48d1e1
push dword [ebp - 0x74]
mov ecx, ebx
call fcn.004845c1
jmp 0x48b6b1
push 0x41d980
jmp 0x48bdfd
push 1
jmp 0x48d1a6
push dword [ebp - 0x74]
mov ecx, ebx
call fcn.004846d5
jmp 0x48b6b1
push dword [ebp - 0x70]
mov ecx, ebx
push dword [ebp - 0x74]
call fcn.00487258
jmp 0x48b6b1
push dword [ebp - 0x70]
mov ecx, ebx
push dword [ebp - 0x74]
call fcn.00483fab
jmp 0x48b6b1
push edi
push 1
push edi
push dword [ebp - 0x74]
push 0x2d
mov ecx, ebx
call fcn.0048747e
jmp 0x48b6b1
push edi
push 1
push edi
push dword [ebp - 0x74]
push 0x2e
jmp 0x48d22b
push dword [ebp - 0x6c]
mov ecx, ebx
push dword [ebp - 0x70]
push dword [ebp - 0x74]
call fcn.0048aced
jmp 0x48b6b1
push edi
push 1
push edi
push dword [ebp - 0x74]
push 2
jmp 0x48d22b
push edi
push 1
push edi
push dword [ebp - 0x74]
push 3
jmp 0x48d22b
push edi
push 1
push edi
push dword [ebp - 0x74]
push 4
jmp 0x48d22b
push edi
push 1
push edi
push dword [ebp - 0x74]
push 5
jmp 0x48d22b
push edi
push 1
push edi
push dword [ebp - 0x74]
push 6
jmp 0x48d22b
push edi
push 1
push edi
push dword [ebp - 0x74]
push 7
jmp 0x48d22b
push 1
push edi
jmp 0x48d0d6
push edi
push 1
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 8
jmp 0x48d22b
push edi
push 1
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 9
jmp 0x48d22b
push edi
push 1
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 0xa
jmp 0x48d22b
push edi
push 1
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 0xb
jmp 0x48d22b
push edi
push 1
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 0xc
jmp 0x48d22b
push edi
push 1
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 0xd
jmp 0x48d22b
push edi
push 1
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 0xe
jmp 0x48d22b
push edi
push 1
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 0xf
jmp 0x48d22b
push edi
push 1
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 0x10
jmp 0x48d22b
push edi
push 1
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 0x11
jmp 0x48d22b
push edi
push 1
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 0x12
jmp 0x48d22b
push edi
push 1
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 0x13
jmp 0x48d22b
push edi
push 1
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 0x14
jmp 0x48d22b
push edi
push 1
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 0x15
jmp 0x48d22b
push edi
push 1
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 0x16
jmp 0x48d22b
push edi
push 1
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 0x17
jmp 0x48d22b
push edi
push 1
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 0x18
jmp 0x48d22b
push edi
push 1
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 0x19
jmp 0x48d22b
push dword [ebp - 0x6c]
mov ecx, ebx
push dword [ebp - 0x70]
push dword [ebp - 0x74]
call fcn.00486ea6
jmp 0x48b6b1
push edi
push 1
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 0x1b
jmp 0x48d22b
push edi
push 1
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 0x23
jmp 0x48d22b
push edi
push 1
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 0x24
jmp 0x48d22b
push edi
push 1
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 0x25
jmp 0x48d22b
push edi
push 1
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 0x26
jmp 0x48d22b
push edi
push 1
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 0x27
jmp 0x48d22b
push edi
push 1
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 0x28
jmp 0x48d22b
push edi
push 1
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 0x29
jmp 0x48d22b
push edi
push 1
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 0x2a
jmp 0x48d22b
push edi
push 1
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 0x2b
jmp 0x48d22b
push edi
push 1
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 0x2c
jmp 0x48d22b
push 0x18
call fcn.0044764f
cmp eax, edi
je 0x48bafd
push 0x41d970
jmp 0x48baed
push 0x18
call fcn.0044764f
cmp eax, edi
je 0x48ce2f
push 0x41d970
jmp 0x48ce20
push 0x18
call fcn.0044764f
cmp eax, edi
je 0x48bafd
push 0x41c418
jmp 0x48baed
mov eax, dword [ebx + 0x10]
cmp eax, edi
je 0x48d4ff
cmp dword [eax + 0x14], 8
jne 0x48d4ff
mov eax, dword [ebp - 0x70]
cmp eax, edi
jne 0x48d4e8
mov eax, dword [ebp - 0x74]
push 0x41d928
push 0xc09
add eax, 0x38
push eax
push ebx
call fcn.0047fea1
add esp, 0x10
push edi
push edi
push dword [ebp - 0x74]
push dword [ebp - 0x70]
push 1
jmp 0x48d22b
mov esi, dword [ebp - 0x74]
mov dword [ebp - 0x74], edi
neg dword [esi + 0x20]
jmp case.0x48b679.250
mov esi, dword [ebp - 0x74]
mov dword [ebp - 0x74], edi
fld qword [esi + 0x20]
fchs
fstp qword [esi + 0x20]
jmp case.0x48b679.250
push dword [ebp - 0x70]
mov ecx, ebx
push dword [ebp - 0x74]
call fcn.0047faec
jmp 0x48c6f6
mov esi, dword [ebp - 0x74]
mov eax, dword [esi + 0x20]
mov dword [ebx + 0x20], eax
jmp 0x48b74e
push dword [ebp - 0x70]
mov ecx, ebx
push dword [ebp - 0x74]
call fcn.0047fc05
jmp 0x48c6f6
mov ecx, ebx
call fcn.0047f0e0
jmp 0x48c6f6
push edi
mov ecx, ebx
call fcn.0047f100
jmp 0x48c6f6
push 1
jmp 0x48d56e
push 0x41d900
push edi
push edi
push ebx
call fcn.0047ff04
jmp 0x48be0c
push 0x18
call fcn.0044764f
cmp eax, edi
je 0x48d5ad
push 0x41d8f8
push dword [ebx + 8]
mov ecx, eax
push esi
call fcn.0047bc12
jmp 0x48d5af
xor eax, eax
cmp eax, edi
jne 0x48d5bd
push 0x4068a0
jmp 0x48b685
mov dword [ebx + 8], eax
pop edi
pop esi
pop ebx
leave
ret 8