Function at 0x48ae30
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xbe4
push ebx
push ebp
mov ebp, ecx
mov eax, dword [ebp + 0x18]
push esi
mov esi, dword [eax + 0x68]
mov eax, dword [ebp + 0x50]
test eax, eax
lea ebx, [ebp + 0x50]
mov dword [esp + 0x14], esi
je 0x48ae68
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x48ae68
mov ecx, ebp
call fcn.00482f90
test eax, eax
je 0x48ae68
mov ecx, ebp
call fcn.00484600
mov eax, dword [ebp + 0x4c]
test eax, eax
mov eax, dword [esp + 0xbfc]
je 0x48aee8
test eax, eax
jne 0x48ae92
test byte [ebp + 0x57], 1
je 0x48ae92
mov ecx, ebp
call fcn.00484600
mov eax, dword [ebp + 0x54]
and eax, 0xfeffffff
mov dword [ebp + 0x54], eax
mov eax, dword [ebp + 0x4c]
test eax, eax
jne 0x48c1c0
cmp dword [ebx], 0
jne 0x48c1c0
cmp word [esi + 0x2a], 0
jne 0x48c1c0
mov ecx, dword [ebp + 4]
mov ecx, dword [ecx + 0x18]
test ecx, ecx
je 0x48aec8
call fcn.00424e10
test al, al
jne 0x48c1c0
mov eax, dword [ebp + 0x20]
test eax, eax
push edi
mov edi, dword [esp + 0xbf8]
je 0x48af02
mov eax, dword [eax + 0x2c]
mov ecx, dword [eax + 0x210]
test ecx, ecx
je 0x48aef6
mov eax, ecx
jmp 0x48aefd
test eax, eax
mov eax, dword [ebp + 0x54]
je 0x48ae8a
or eax, 0x1000000
jmp 0x48ae8f
mov ecx, eax
call fcn.00494e90
cmp eax, 8
jl 0x48af6a
push edi
call fcn.0043c480
fld qword [0x5d76b8]
fucompp
add esp, 4
fnstsw ax
test ah, 0x44
jp 0x48af36
push edi
call fcn.0043c4a0
fld qword [0x5d76b8]
fucompp
add esp, 4
fnstsw ax
test ah, 0x44
jnp case.0x48af80.1
push edi
call fcn.0043c4c0
fld qword [0x5d76b8]
fucompp
add esp, 4
fnstsw ax
test ah, 0x44
jp 0x48af6a
push edi
call fcn.0043c4e0
fld qword [0x5d76b8]
fucompp
add esp, 4
fnstsw ax
test ah, 0x44
jnp case.0x48af80.1
mov eax, dword [ebp + 0x18]
mov ecx, dword [eax + 0x78]
cmp ecx, 0x62
ja case.0x48af80.1
movzx edx, byte [ecx + 0x48c1ec]
jmp dword [edx*4 + 0x48c1cc]
mov ecx, dword [ebp + 4]
mov ecx, dword [ecx + 0x28]
test ecx, ecx
je 0x48afb9
mov esi, dword [esp + 0xc04]
mov edx, dword [esp + 0xbfc]
test esi, esi
setne al
push edx
push eax
push edi
call fcn.00488740
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xbe4
ret 0x10
push edi
push 0
push eax
push esi
lea ecx, [esp + 0x140]
call fcn.00420600
mov eax, dword [ebp + 0x18]
mov cl, byte [eax + 0x7e]
cmp cl, 0x20
je 0x48afe5
cmp cl, 0x53
mov dword [esp + 0xbb8], 0
jne 0x48aff0
mov dword [esp + 0xbb8], 1
mov bl, byte [eax + 0x7e]
mov eax, dword [ebp + 8]
cmp bl, 0x53
setne cl
dec cl
and ecx, 2
test eax, eax
mov byte [esp + 0xbc0], cl
je 0x48b021
mov edx, dword [eax + 4]
mov al, byte [edx + 0x5c]
test al, al
setne al
movzx ecx, al
mov dword [esp + 0xbbc], ecx
add edi, 0x1c
mov edx, dword [edi]
mov eax, dword [edi + 4]
mov ecx, dword [edi + 8]
mov dword [esp + 0x180], edx
mov edx, dword [edi + 0xc]
mov dword [esp + 0x18c], edx
mov edx, dword [esp + 0xc04]
mov dword [esp + 0x188], ecx
mov ecx, dword [esp + 0xbfc]
mov dword [esp + 0xbf0], ebp
push edx
add ebp, 0x7c
mov dword [esp + 0x188], eax
mov eax, dword [edi + 0x10]
push ebp
mov dword [esp + 0xbcc], ecx
push 1
lea ecx, [esp + 0x13c]
mov dword [esp + 0x19c], eax
call fcn.00483590
mov al, byte [esp + 0x150]
test al, al
lea ecx, [esp + 0x130]
jne 0x48baa0
call fcn.004918d0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xbe4
ret 0x10
lea ecx, [esp + 0x48]
call fcn.00401580
mov eax, dword [esi + 0x210]
test eax, eax
jne 0x48b0c6
mov ecx, esi
call fcn.00494e90
mov dword [esp + 0x8c], eax
mov eax, dword [ebp + 0x18]
mov ecx, dword [eax + 0x74]
mov edx, dword [eax + 0x70]
push ecx
push 0
push edx
lea ecx, [esp + 0x54]
call fcn.00491160
mov eax, dword [ebp + 0x18]
mov dl, byte [eax + 0x7e]
xor ecx, ecx
cmp dl, 0x21
sete cl
lea edx, [esp + 0x114]
push edx
mov dword [esp + 0xb0], ecx
lea ecx, [esp + 0x4c]
call fcn.004928e0
lea eax, [esp + 0xcc]
mov ecx, 7
lea esi, [esp + 0x114]
lea edi, [esp + 0xcc]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0xbf8]
push eax
push ecx
mov edx, eax
push edx
call fcn.0043cdb0
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x54]
mov dl, byte [eax + ecx]
add esp, 0xc
inc eax
mov dword [esp + 0x4c], eax
mov cl, byte [eax + ecx]
inc eax
mov dword [esp + 0x4c], eax
movzx eax, cl
cmp eax, 0x20
movzx edx, dl
mov dword [esp + 0xa8], edx
mov dword [esp + 0xb4], eax
jg 0x48baa5
cmp edx, 0x20
jg 0x48baa5
mov eax, dword [ebp + 4]
xor esi, esi
cmp word [eax + 0x56], si
mov dword [esp + 0x38], esi
je 0x48b1a2
mov eax, dword [ebp + 0x2c]
cmp eax, esi
je 0x48b192
mov eax, dword [eax + 8]
jmp 0x48b194
xor eax, eax
push ebx
push eax
call fcn.00480960
add esp, 8
mov dword [esp + 0x38], eax
mov eax, dword [ebp + 0x2c]
xor ebx, ebx
cmp eax, esi
mov dword [esp + 0x34], esi
mov dword [esp + 0x2c], ebx
je 0x48b1c2
mov eax, dword [eax + 8]
cmp eax, esi
je 0x48b1c2
mov eax, dword [eax + 0x3e0]
jmp 0x48b1c4
xor eax, eax
push eax
lea ecx, [esp + 0x70]
push ecx
call fcn.0043d1c0
mov edx, dword [ebp + 4]
mov eax, dword [edx + 0x1c]
add esp, 8
cmp eax, esi
mov dword [esp + 0x90], esi
mov dword [esp + 0x44], esi
mov dword [esp + 0x30], esi
je 0x48b229
cmp dword [eax + 0xc], esi
jbe 0x48b229
mov ecx, dword [ebp + 0x2c]
cmp ecx, esi
je 0x48b1fc
mov ecx, dword [ecx + 8]
jmp 0x48b1fe
xor ecx, ecx
cmp dword [ecx + 0x104], esi
jne 0x48b229
mov ecx, dword [eax + 4]
mov edx, dword [eax + 8]
mov dword [esp + 0x30], ecx
lea ecx, [esp + 0x34]
push ecx
push esi
push eax
mov ecx, ebp
mov dword [esp + 0x50], edx
call fcn.004850b0
mov dword [esp + 0x90], eax
push ebp
mov dword [esp + 0x40], 0x400
mov dword [esp + 0x2c], 0x44800000
mov dword [esp + 0x28], esi
mov dword [esp + 0x24], esi
mov dword [esp + 0x8c], esi
mov dword [esp + 0x44], esi
mov dword [esp + 0x98], esi
call fcn.004687e0
add esp, 4
test al, al
je 0x48b294
mov edx, dword [ebp + 0x18]
mov ecx, dword [edx + 0x68]
mov eax, dword [ecx + 0x210]
cmp eax, esi
jne 0x48b275
call fcn.00494e90
cmp eax, 5
jle 0x48b294
mov eax, dword [ebp + 0x2c]
cmp eax, esi
je 0x48b286
mov eax, dword [eax + 8]
jmp 0x48b288
xor eax, eax
cmp dword [eax + 0x104], esi
jne 0x48b294
mov al, 1
jmp 0x48b296
xor al, al
mov ecx, dword [ebp + 4]
cmp word [ecx + 0x56], si
jne 0x48b3a2
test al, al
je 0x48b3a2
mov eax, ebp
mov edx, 0x200
mov ecx, dword [eax + 4]
cmp dword [ecx + 4], esi
je 0x48b2c3
test dword [eax + 0x54], edx
jne 0x48b3a2
cmp word [ecx + 0x56], si
jne 0x48b3a2
mov eax, dword [eax + 8]
cmp eax, esi
jne 0x48b2b2
mov ecx, ebp
call fcn.004827c0
push eax
lea edx, [esp + 0x17]
push edx
lea eax, [esp + 0xcc]
push eax
lea ecx, [esp + 0xc4]
push ecx
lea edx, [esp + 0xdc]
push edx
call fcn.0043dba0
mov eax, dword [esp + 0xcc]
add esp, 0x14
cmp eax, esi
jle 0x48b3a2
cmp dword [esp + 0xbc], esi
jle 0x48b3a2
mov al, byte [esp + 0x13]
test al, al
jne 0x48b3a2
push 0x6c
call fcn.0043f000
mov edi, eax
add esp, 4
test edi, edi
je 0x48b378
mov ecx, dword [esp + 0xbf8]
mov eax, dword [ebp + 4]
mov eax, dword [eax + 0x18]
push ecx
lea edx, [esp + 0x118]
push edx
mov edx, dword [ebp + 0x18]
lea ecx, [esp + 0xd4]
push ecx
push eax
mov eax, dword [edx + 0x68]
mov ecx, dword [eax + 0xd0]
push ebp
push ecx
call fcn.00468a50
add esp, 4
push eax
mov ecx, edi
call fcn.00467bb0
mov dword [esp + 0x20], eax
jmp 0x48b380
mov dword [esp + 0x20], 0
mov eax, dword [esp + 0xbf8]
mov cl, byte [eax + 0x30]
test cl, cl
seta cl
lea edx, [esp + 0x34]
push edx
push ecx
mov ecx, dword [esp + 0x28]
push 0
push 0
call fcn.004686b0
mov edi, dword [esp + 0x18]
mov eax, dword [edi + 0xd0]
test eax, eax
je 0x48b3be
mov cl, byte [eax + 0xa45]
test cl, cl
jne 0x48baa5
test ebx, ebx
jne 0x48b677
lea ecx, [esp + 0x48]
call fcn.004915c0
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
mov al, byte [ecx + edx]
movzx ebx, al
inc ecx
test ebx, ebx
mov dword [esp + 0x4c], ecx
je 0x48b9b5
mov eax, ebx
and eax, 8
mov dword [esp + 0x14], eax
je 0x48b44b
mov eax, edx
add eax, ecx
add ecx, 2
mov dword [esp + 0x4c], ecx
xor ecx, ecx
mov ch, byte [eax + 1]
mov cl, byte [eax]
push ecx
mov ecx, edi
call fcn.00491c60
mov esi, eax
test esi, esi
je 0x48b41d
cmp dword [esi + 0x78], 3
je 0x48b41d
xor esi, esi
test esi, esi
mov edi, 0x400
mov dword [esp + 0x3c], edi
mov dword [esp + 0x28], 0x44800000
je 0x48b44f
cmp byte [esi + 0x7e], 0x4b
jne 0x48b44f
mov edi, 0x5000
mov dword [esp + 0x3c], edi
mov dword [esp + 0x28], 0x46a00000
jmp 0x48b44f
mov edi, dword [esp + 0x3c]
mov ecx, ebx
and ecx, 4
jne 0x48b472
mov eax, dword [ebp + 0x2c]
test eax, eax
je 0x48b462
mov eax, dword [eax + 8]
jmp 0x48b464
xor eax, eax
mov edx, dword [eax + 0x104]
test edx, edx
je 0x48b542
test ecx, ecx
je 0x48b510
mov edx, dword [esp + 0xac]
push edx
lea eax, [esp + 0xcc]
push eax
lea ecx, [esp + 0x50]
call fcn.004912b0
mov ecx, dword [esp + 0x20]
test ecx, ecx
mov eax, dword [eax]
mov dword [esp + 0xb0], eax
je 0x48b510
mov ecx, dword [esp + 0xbf8]
mov edx, dword [ecx + 0x1c]
add ecx, 0x1c
test edx, edx
mov dword [esp + 0x1c], eax
je 0x48b4cd
push eax
lea edx, [esp + 0xc4]
push edx
call fcn.00461c20
mov eax, dword [eax]
mov dword [esp + 0x1c], eax
mov al, byte [esp + 0x1f]
cmp al, 0xff
je 0x48b510
movzx ecx, byte [esp + 0x1c]
movzx eax, al
inc eax
imul ecx, eax
sar ecx, 8
mov byte [esp + 0x1c], cl
mov edx, dword [esp + 0x1c]
shr edx, 8
movzx edx, dl
imul edx, eax
sar edx, 8
mov byte [esp + 0x1d], dl
mov ecx, dword [esp + 0x1c]
shr ecx, 0x10
movzx ecx, cl
imul ecx, eax
sar ecx, 8
mov byte [esp + 0x1e], cl
mov edx, dword [ebp + 4]
cmp word [edx + 0x56], 0
jne 0x48b542
mov ecx, dword [esp + 0xbf8]
lea eax, [esp + 0x34]
push eax
push ecx
lea edx, [esp + 0xb8]
push edx
mov ecx, ebp
call fcn.004850b0
test eax, eax
mov dword [esp + 0x38], eax
je case.0x48af80.1
test bl, 1
je 0x48b569
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0x48]
add eax, ecx
add ecx, 2
mov dword [esp + 0x4c], ecx
xor ecx, ecx
mov ch, byte [eax + 1]
movzx eax, byte [eax]
movsx edx, cx
or edx, eax
mov dword [esp + 0x7c], edx
test bl, 2
je 0x48b594
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
lea eax, [ecx + edx]
add ecx, 2
mov dword [esp + 0x4c], ecx
xor ecx, ecx
mov ch, byte [eax + 1]
movzx eax, byte [eax]
movsx edx, cx
or edx, eax
mov dword [esp + 0x80], edx
mov eax, dword [esp + 0x14]
test eax, eax
je 0x48b655
mov eax, dword [ebp + 0x2c]
test eax, eax
je 0x48b617
mov eax, dword [eax + 8]
test eax, eax
je 0x48b617
mov ecx, dword [eax + 0x3e0]
test ecx, ecx
je 0x48b617
call fcn.004a7700
test al, al
je 0x48b617
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
lea eax, [ecx + edx]
add ecx, 2
mov dword [esp + 0x4c], ecx
xor ecx, ecx
mov ch, byte [eax + 1]
mov cl, byte [eax]
mov dword [esp + 0x84], 1
movzx edx, cx
mov dword [esp + 0x14], edx
fild dword [esp + 0x14]
fld dword [0x5d7858]
fdiv dword [esp + 0x28]
fmulp st(1)
fstp dword [esp + 0x78]
mov eax, dword [esp + 0x78]
fld dword [esp + 0x78]
mov dword [esp + 0x6c], eax
fmul dword [esp + 0x28]
call fcn.004ebb60
jmp 0x48b651
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
lea eax, [ecx + edx]
add ecx, 2
mov dword [esp + 0x4c], ecx
xor ecx, ecx
mov ch, byte [eax + 1]
mov cl, byte [eax]
mov eax, 0x10000
cdq
idiv edi
mov dword [esp + 0x84], 0
imul eax, ecx
mov dword [esp + 0x78], eax
mov dword [esp + 0x6c], eax
imul eax, edi
mov dword [esp + 0x24], eax
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
mov al, byte [ecx + edx]
inc ecx
movzx ebx, al
mov dword [esp + 0x4c], ecx
lea ecx, [esp + 0x48]
mov dword [esp + 0x2c], ebx
call fcn.004915b0
test ebx, ebx
jle 0x48b9b5
mov eax, dword [esp + 0xa8]
push eax
lea ecx, [esp + 0x4c]
call fcn.004915f0
mov ecx, dword [esp + 0xb4]
push ecx
lea ecx, [esp + 0x4c]
mov ebx, eax
call fcn.00491680
test esi, esi
mov dword [esp + 0x14], eax
je 0x48b997
mov ax, word [esi + 0x36]
test ax, ax
je 0x48b6ca
movzx edx, ax
cmp ebx, edx
jl 0x48b6ca
mov dword [esp + 0x14], 0
jmp 0x48b997
lea eax, [esp + 0xf8]
push eax
lea ecx, [esp + 0xd0]
push ecx
lea edx, [esp + 0x74]
push edx
call fcn.0043cdb0
mov eax, dword [esp + 0x3c]
add esp, 0xc
test eax, eax
jbe 0x48b769
mov ecx, dword [esp + 0x44]
mov edi, eax
mov al, byte [ecx]
dec edi
inc ecx
test al, al
mov dword [esp + 0x30], edi
mov dword [esp + 0x44], ecx
je 0x48b769
mov ecx, dword [esp + 0x8c]
lea eax, [esp + 0xe8]
push eax
push ecx
push ebx
push esi
mov ecx, ebp
call fcn.00480a40
test al, al
je 0x48b769
lea edx, [esp + 0xe8]
push edx
push 0xffffffffffffffe0
call fcn.0043df50
mov eax, dword [ebp + 0x2c]
add esp, 8
test eax, eax
je 0x48b740
mov eax, dword [eax + 8]
jmp 0x48b742
xor eax, eax
push 0
lea ecx, [ebp + 0x4c]
push ecx
push eax
mov eax, dword [esp + 0x9c]
push eax
lea ecx, [esp + 0x108]
push ecx
lea edx, [esp + 0xfc]
push edx
call fcn.004823a0
add esp, 0x18
mov eax, dword [esp + 0x20]
test eax, eax
je 0x48b896
fild dword [esp + 0x24]
fmul dword [eax + 0x4c]
fcomp dword [0x5db9b8]
fnstsw ax
test ah, 0x41
jp 0x48b896
cmp dword [esp + 0x40], esi
je 0x48b821
mov al, byte [esi + 0x38]
mov ecx, dword [esi + 0x70]
xor edi, edi
test al, 8
je 0x48b7d2
movzx eax, word [esi + 0x36]
lea eax, [ecx + eax*4]
cmp eax, ecx
jb 0x48b7ef
mov edx, dword [esi + 0x74]
add edx, ecx
cmp eax, edx
ja 0x48b7ef
movzx edx, byte [eax + 1]
xor ecx, ecx
mov ch, byte [eax + 3]
mov cl, byte [eax + 2]
movzx eax, byte [eax]
shl ecx, 8
or ecx, edx
shl ecx, 8
or ecx, eax
jmp 0x48b7ed
movzx edx, word [esi + 0x36]
lea eax, [ecx + edx*2]
cmp eax, ecx
jb 0x48b7ef
mov edx, dword [esi + 0x74]
add edx, ecx
cmp eax, edx
ja 0x48b7ef
xor ecx, ecx
mov ch, byte [eax + 1]
mov cl, byte [eax]
mov edi, ecx
mov edx, dword [ebp + 0x18]
mov eax, dword [edx + 0x68]
mov ecx, dword [eax + 0xd0]
push ecx
call fcn.00468a50
push esi
call fcn.00468b40
mov dword [esp + 0x90], eax
mov eax, dword [esi + 0x70]
add esp, 8
add eax, edi
mov dword [esp + 0x40], esi
mov dword [esp + 0x94], eax
fild dword [esp + 0x7c]
mov edx, dword [esp + 0x94]
mov ecx, dword [esi + 0x70]
lea eax, [edx + ebx*2]
cmp eax, ecx
fstp dword [esp + 0x98]
fild dword [esp + 0x80]
fstp dword [esp + 0x9c]
jb 0x48baa5
mov edx, dword [esi + 0x74]
add edx, ecx
cmp eax, edx
ja 0x48baa5
mov edx, dword [esp + 0x24]
push 0
lea ecx, [esp + 0x9c]
push ecx
push edx
xor edx, edx
mov dx, word [eax]
mov eax, dword [esp + 0x94]
lea ecx, [esp + 0x28]
push ecx
mov ecx, dword [ebp + 0x50]
push ebx
push edx
mov edx, dword [esp + 0x58]
push eax
push ecx
mov ecx, dword [esp + 0x40]
push edx
call fcn.0046a020
jmp 0x48b997
mov al, byte [esi + 0x38]
xor edx, edx
test al, 8
je 0x48b8cd
mov ecx, dword [esi + 0x70]
lea eax, [ecx + ebx*4]
cmp eax, ecx
jb 0x48b8ef
mov edi, dword [esi + 0x74]
add edi, ecx
cmp eax, edi
ja 0x48b8ef
movzx ecx, byte [eax + 1]
xor edx, edx
mov dh, byte [eax + 3]
mov dl, byte [eax + 2]
movzx eax, byte [eax]
shl edx, 8
or edx, ecx
shl edx, 8
or edx, eax
jmp 0x48b8e7
mov eax, dword [esi + 0x70]
lea ecx, [eax + ebx*2]
cmp ecx, eax
jb 0x48b8ef
mov edi, dword [esi + 0x74]
add edi, eax
cmp ecx, edi
ja 0x48b8ef
xor edx, edx
mov dh, byte [ecx + 1]
mov dl, byte [ecx]
test edx, edx
jl 0x48baa5
cmp edx, dword [esi + 0x74]
jg 0x48baa5
lea ecx, [esp + 0xf8]
push ecx
push edx
mov edx, dword [esp + 0x20]
push esi
push edx
lea ecx, [esp + 0x140]
call fcn.00420600
mov ecx, dword [esp + 0x1a8]
mov eax, 1
mov dword [esp + 0xbec], eax
mov dword [esp + 0xbf0], ebp
mov dword [ecx], 0
mov edx, dword [esp + 0x1ac]
mov dword [edx], 0
mov ecx, dword [esp + 0x1ac]
mov word [ecx + 4], 0
mov edx, dword [esp + 0x1a8]
mov ecx, dword [esp + 0x38]
mov dword [edx + 4], ecx
mov edx, dword [esp + 0xc04]
mov dword [esp + 0x1a4], eax
push edx
lea eax, [ebp + 0x7c]
push eax
push 0
lea ecx, [esp + 0x13c]
call fcn.00483590
mov al, byte [esp + 0x150]
test al, al
lea ecx, [esp + 0x130]
jne 0x48baa0
call fcn.004918d0
mov edx, dword [esp + 0x7c]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x2c]
add edx, ecx
dec eax
mov dword [esp + 0x7c], edx
mov dword [esp + 0x2c], eax
mov ebx, eax
jmp 0x48b3a2
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x48b9c3
mov edx, dword [ecx]
push 1
call dword [edx]
lea ecx, [esp + 0x48]
call fcn.004915c0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xbe4
ret 0x10
push edi
push 0
push eax
push esi
lea ecx, [esp + 0x140]
call fcn.00420600
mov eax, dword [ebp + 0x18]
mov cl, byte [eax + 0x7e]
cmp cl, 0x2e
je 0x48ba05
cmp cl, 0x54
mov dword [esp + 0xbb8], 0
jne 0x48ba10
mov dword [esp + 0xbb8], 1
cmp byte [eax + 0x7e], 0x54
setne al
dec al
add edi, 0x1c
mov ecx, dword [edi]
mov edx, dword [edi + 4]
mov dword [esp + 0x180], ecx
mov dword [esp + 0x184], edx
and eax, 2
mov byte [esp + 0xbc0], al
mov eax, dword [edi + 8]
mov ecx, dword [edi + 0xc]
mov edx, dword [edi + 0x10]
mov dword [esp + 0x188], eax
mov eax, dword [ebp + 4]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x190], edx
movzx ecx, word [eax + 0x5a]
mov edx, dword [esp + 0xbfc]
mov dword [esp + 0xbf0], ebp
mov dword [esp + 0x194], ecx
add ebp, 0x7c
push ebp
lea ecx, [esp + 0x134]
mov dword [esp + 0xbc8], edx
call fcn.00483bc0
mov al, byte [esp + 0x150]
test al, al
lea ecx, [esp + 0x130]
je 0x48b09a
call fcn.004918d0
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + 0xd0]
push 1
call fcn.004a78e0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xbe4
ret 0x10
mov edx, dword [ebp + 4]
lea ecx, [edi + 0x1c]
push ecx
mov ecx, dword [edx + 0x18]
call fcn.00480930
mov eax, dword [ebp + 4]
mov eax, dword [eax + 0x18]
push eax
call fcn.004e8710
add esp, 4
test al, al
je case.0x48af80.1
mov ecx, dword [ebp + 4]
mov ecx, dword [ecx + 0x18]
push 0
push 0
add edi, 0x30
push edi
push 0
call fcn.0042d280
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xbe4
ret 0x10
cmp dword [ebx], 0
jne case.0x48af80.1
mov edi, dword [ebp + 4]
mov ecx, dword [edi + 8]
test ecx, ecx
je case.0x48af80.1
mov cl, byte [eax + 0xc]
cmp cl, 2
jb 0x48bc7b
cmp cl, 5
ja 0x48bc7b
mov ecx, dword [edi + 0x50]
test ecx, ecx
je 0x48bc7b
mov cx, word [eax + 8]
test cx, cx
jbe 0x48bc7b
mov esi, dword [eax]
test esi, esi
je 0x48bc7b
mov edx, dword [eax + 4]
test edx, edx
je 0x48bc7b
mov ax, word [eax + 0xa]
cmp ax, 0xffff
jne 0x48bb74
movzx eax, word [edi + 0x5a]
jmp 0x48bb77
movzx eax, ax
movzx ecx, cx
cdq
idiv ecx
mov ebx, edx
test ebx, ebx
mov dword [esp + 0x18], ebx
jl 0x48bc7b
lea eax, [esi + ebx*4]
mov edi, edi
cmp dword [eax], 0
jne 0x48bba6
dec ebx
sub eax, 4
test ebx, ebx
jge 0x48bb90
mov dword [esp + 0x18], ebx
jmp 0x48bc7b
test ebx, ebx
mov dword [esp + 0x18], ebx
jl 0x48bc7b
movzx edx, word [edi + 0x54]
cmp ebx, edx
je 0x48bc7b
mov esi, ebx
mov ecx, dword [ebp + 4]
movzx eax, word [ecx + 0x54]
lea edi, [esi - 1]
cmp eax, edi
jl 0x48bbd2
cmp ebx, eax
jg 0x48bc03
mov eax, dword [ebp + 0x18]
mov edx, dword [eax]
mov edx, dword [edx + esi*4]
test edx, edx
mov eax, dword [eax + 4]
mov eax, dword [eax + esi*4]
je 0x48bbfb
test eax, eax
je 0x48bbfb
mov ecx, dword [ecx + 0x50]
mov ebx, dword [ecx]
push eax
push edx
push ebp
call dword [ebx + 0x10]
test al, al
mov ebx, dword [esp + 0x18]
jne 0x48bc38
mov esi, edi
test esi, esi
jge 0x48bbc0
jmp 0x48bc7b
mov ecx, dword [ebp + 4]
movzx esi, word [ecx + 0x54]
mov eax, dword [ebp + 0x18]
movzx ecx, word [eax + 8]
inc esi
cmp esi, ecx
jge 0x48bc36
mov edx, dword [eax]
lea eax, [edx + esi*4]
jmp 0x48bc20
cmp dword [eax], 0
jne 0x48bc34
mov edx, dword [ebp + 0x18]
movzx edx, word [edx + 8]
inc esi
add eax, 4
cmp esi, edx
jl 0x48bc20
cmp esi, ecx
je 0x48bc7b
test esi, esi
jl 0x48bc7b
cmp esi, ebx
jg 0x48bc69
mov eax, dword [ebp + 0x18]
mov ecx, dword [eax]
mov edx, dword [ecx + esi*4]
test edx, edx
mov eax, dword [eax + 4]
mov eax, dword [eax + esi*4]
je 0x48bc64
test eax, eax
je 0x48bc64
mov ecx, dword [ebp + 4]
mov ecx, dword [ecx + 0x50]
mov edi, dword [ecx]
push eax
push edx
push ebp
call dword [edi + 0xc]
inc esi
cmp esi, ebx
jle 0x48bc40
push ebx
mov ecx, ebp
call fcn.00489b40
mov edx, dword [ebp + 4]
mov eax, dword [edx + 8]
mov byte [eax + 0x28], 0
mov ecx, dword [ebp + 4]
mov esi, dword [ecx + 8]
mov ecx, esi
mov dword [esp + 0x14], esi
call fcn.0043e630
test eax, eax
jne 0x48bc9a
cmp dword [esi + 0xc], 6
jne case.0x48af80.1
cmp byte [esi + 0x28], 1
je case.0x48af80.1
push 0x3c
call fcn.0043f000
mov esi, eax
add esp, 4
test esi, esi
je case.0x48af80.1
mov ecx, ebp
call fcn.00482f90
push eax
mov ecx, esi
call fcn.00458e50
mov ebx, eax
xor esi, esi
cmp ebx, esi
je case.0x48af80.1
mov edx, dword [ebp + 4]
mov dword [ebp + 0x50], ebx
cmp word [edx + 0x56], si
mov ecx, ebx
je 0x48bced
push 5
call fcn.00458f50
jmp 0x48be20
push 1
call fcn.00458f50
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x10]
mov edx, dword [eax + 0x14]
mov dword [esp + 0x9c], ecx
push 1
mov ecx, ebx
mov dword [esp + 0xa4], esi
mov dword [esp + 0x9c], esi
mov dword [esp + 0xa8], edx
call fcn.00458f50
mov eax, dword [ebp + 0x2c]
cmp eax, esi
je 0x48bd39
mov eax, dword [eax + 8]
cmp eax, esi
je 0x48bd39
mov eax, dword [eax + 0x3e0]
jmp 0x48bd3b
xor eax, eax
mov ecx, dword [ebp + 0x18]
push eax
mov eax, dword [ebx + 0x38]
add eax, 8
push eax
add ecx, 0x4c
push ecx
lea edx, [esp + 0xa4]
push edx
call fcn.0043d5d0
mov esi, dword [ebx + 0x38]
add esi, 8
mov ecx, 7
lea edi, [esp + 0x108]
rep movsd dword es:[edi], dword [esi]
add esp, 0x10
mov ecx, ebp
call fcn.00482f90
mov ecx, dword [eax]
mov eax, dword [ebp + 0x2c]
test eax, eax
je 0x48bd83
mov eax, dword [eax + 8]
jmp 0x48bd85
xor eax, eax
mov eax, dword [eax + 0x3e0]
mov edx, dword [ebx + 0x38]
mov edi, dword [esp + 0xbf8]
push eax
add edx, 0x24
push edx
push ecx
lea eax, [esp + 0x104]
push eax
push edi
call fcn.00480c80
mov ecx, dword [ebx + 0x38]
mov esi, dword [esp + 0x28]
mov dword [ecx + 4], esi
mov edx, dword [ebx + 0x38]
mov word [edx], 0x41
mov eax, dword [ebp + 0x18]
mov cl, byte [eax + 0xd]
add esp, 0x14
test cl, 1
jne 0x48bdcf
mov eax, dword [ebx + 0x38]
or byte [eax], 2
mov edx, dword [ebx + 0x38]
lea ecx, [edi + 0x1c]
add edx, 0x40
mov eax, ecx
mov edi, dword [eax]
mov dword [edx], edi
mov edi, dword [eax + 4]
mov dword [edx + 4], edi
mov edi, dword [eax + 8]
mov dword [edx + 8], edi
mov edi, dword [eax + 0xc]
mov dword [edx + 0xc], edi
mov eax, dword [eax + 0x10]
mov dword [edx + 0x10], eax
call fcn.00443300
or al, byte [esi + 0x20]
mov byte [ebx + 0x24], al
mov eax, dword [ebx + 0x38]
cmp dword [eax + 0x3c], 1
jne 0x48be16
add eax, 0x24
push eax
call fcn.0043c600
add esp, 4
mov ecx, dword [ebx + 0x38]
mov dword [ecx + 0x3c], 2
mov ecx, ebx
call fcn.004656f0
mov eax, dword [ebp + 0x2c]
test eax, eax
je 0x48be33
mov ecx, dword [eax + 8]
jmp 0x48be35
xor ecx, ecx
mov edx, dword [esp + 0xbf8]
push 0
lea eax, [ebp + 0x4c]
push eax
mov eax, dword [ebp + 0x18]
push ecx
push ebx
push edx
add eax, 0x4c
push eax
call fcn.004823a0
add esp, 0x18
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xbe4
ret 0x10
mov ecx, dword [eax]
mov eax, dword [ecx]
test eax, eax
je case.0x48af80.1
mov ecx, dword [eax + 4]
test ecx, ecx
je case.0x48af80.1
push 0x3c
call fcn.0043f000
mov esi, eax
add esp, 4
test esi, esi
je case.0x48af80.1
mov ecx, ebp
call fcn.00482f90
push eax
mov ecx, esi
call fcn.00458e50
mov ebx, eax
test ebx, ebx
je case.0x48af80.1
mov edx, dword [ebp + 4]
mov dword [ebp + 0x50], ebx
cmp word [edx + 0x56], 0
mov ecx, ebx
je 0x48bec0
push 5
call fcn.00458f50
jmp 0x48c159
push 1
call fcn.00458f50
mov ecx, ebp
call fcn.00482f90
mov edi, dword [eax]
mov esi, dword [esp + 0xbf8]
push esi
mov dword [esp + 0x18], edi
call fcn.0043d750
add esp, 4
test eax, eax
je 0x48bf57
fild dword [esp + 0x14]
sub esp, 0x10
fmul qword [0x5d7e80]
fstp qword [esp + 0xa8]
fld qword [0x5daaf8]
fstp qword [esp + 8]
fld qword [esp + 0xa8]
fstp qword [esp]
push esi
call fcn.0043c480
push ecx
fstp qword [esp]
call fcn.0043bb00
add esp, 0x18
test eax, eax
je 0x48bf57
fld qword [0x5daaf8]
sub esp, 0x10
fstp qword [esp + 8]
fld qword [esp + 0xa8]
fstp qword [esp]
push esi
call fcn.0043c4e0
push ecx
fstp qword [esp]
call fcn.0043bb00
add esp, 0x18
test eax, eax
je 0x48bf57
mov cl, 1
jmp 0x48bf59
xor cl, cl
cmp edi, 1
mov byte [esp + 0x13], cl
jle 0x48bf9c
mov eax, dword [ebp + 0x18]
mov edx, dword [eax]
mov eax, dword [edx + 0x44]
dec eax
je 0x48bf78
dec eax
jne 0x48bf9c
test cl, cl
je 0x48c07d
mov ecx, dword [esi + 0x10]
mov eax, edi
cdq
sub eax, edx
sar eax, 1
add ecx, eax
lea edx, [edi - 1]
not edx
and ecx, edx
mov dword [esi + 0x10], ecx
mov ecx, dword [esi + 0x14]
add ecx, eax
and ecx, edx
mov dword [esi + 0x14], ecx
mov cl, byte [esp + 0x13]
test cl, cl
je 0x48c07d
mov eax, dword [ebp + 0x2c]
test eax, eax
je 0x48bfba
mov eax, dword [eax + 8]
test eax, eax
je 0x48bfba
mov eax, dword [eax + 0x3e0]
jmp 0x48bfbc
xor eax, eax
push eax
lea edx, [esp + 0x70]
push edx
call fcn.0043d1c0
mov eax, dword [esi + 0x10]
cdq
idiv edi
add esp, 8
shl eax, 0x10
mov dword [esp + 0x7c], eax
mov eax, dword [esi + 0x14]
cdq
idiv edi
shl eax, 0x10
mov dword [esp + 0x80], eax
mov eax, dword [ebp + 0x2c]
test eax, eax
je 0x48bffd
mov eax, dword [eax + 8]
test eax, eax
je 0x48bffd
mov eax, dword [eax + 0x3e0]
jmp 0x48bfff
xor eax, eax
push eax
mov eax, dword [ebx + 0x38]
add eax, 0x24
push eax
lea ecx, [esp + 0x74]
push ecx
call fcn.0043e260
mov eax, dword [ebx + 0x38]
mov ecx, dword [eax + 0x3c]
add esp, 0xc
cmp ecx, 1
jne 0x48c02b
add eax, 0x24
push eax
call fcn.0043c600
add esp, 4
mov edx, dword [ebx + 0x38]
mov dword [edx + 0x3c], 2
mov eax, dword [ebp + 0x2c]
test eax, eax
je 0x48c041
mov eax, dword [eax + 8]
jmp 0x48c043
xor eax, eax
mov ecx, dword [eax + 0x104]
test ecx, ecx
je 0x48c0f3
mov edi, dword [ebx + 0x38]
add edi, 8
mov ecx, 7
lea esi, [esp + 0x6c]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebx + 0x38]
cmp dword [eax + 0x20], 1
jne 0x48c0f3
add eax, 8
push eax
call fcn.0043c600
add esp, 4
jmp 0x48c0f3
lea eax, [esp + 0x6c]
push eax
push 0x140000
push 0x140000
call fcn.0043d300
mov eax, dword [ebp + 0x2c]
add esp, 0xc
test eax, eax
je 0x48c0a0
mov eax, dword [eax + 8]
jmp 0x48c0a2
xor eax, eax
mov ecx, dword [eax + 0x104]
test ecx, ecx
je 0x48c0c8
mov edi, dword [ebx + 0x38]
add edi, 8
mov ecx, 7
lea esi, [esp + 0x6c]
rep movsd dword es:[edi], dword [esi]
mov esi, dword [esp + 0xbf8]
mov edi, dword [esp + 0x14]
mov eax, dword [ebp + 0x2c]
test eax, eax
je 0x48c0d4
mov eax, dword [eax + 8]
jmp 0x48c0d6
xor eax, eax
mov ecx, dword [eax + 0x3e0]
mov edx, dword [ebx + 0x38]
push ecx
add edx, 0x24
push edx
push edi
lea eax, [esp + 0x78]
push eax
push esi
call fcn.00480c80
add esp, 0x14
mov ecx, dword [ebp + 0x18]
mov edx, dword [ecx]
mov eax, dword [ebx + 0x38]
add edx, 0x18
mov dword [eax + 4], edx
mov ecx, dword [ebx + 0x38]
mov word [ecx], 0x41
mov edx, dword [ebp + 0x18]
mov eax, dword [edx]
mov cl, byte [eax + 0x48]
test cl, cl
jne 0x48c11b
mov eax, dword [ebx + 0x38]
or byte [eax], 2
mov edx, dword [ebx + 0x38]
mov ecx, dword [esp + 0xbf8]
add ecx, 0x1c
add edx, 0x40
mov eax, ecx
mov esi, dword [eax]
mov dword [edx], esi
mov esi, dword [eax + 4]
mov dword [edx + 4], esi
mov esi, dword [eax + 8]
mov dword [edx + 8], esi
mov esi, dword [eax + 0xc]
mov dword [edx + 0xc], esi
mov eax, dword [eax + 0x10]
mov dword [edx + 0x10], eax
call fcn.00443300
mov ecx, dword [ebp + 0x18]
mov edx, dword [ecx]
or al, byte [edx + 0x38]
mov byte [ebx + 0x24], al
mov ecx, ebx
call fcn.004656f0
mov eax, dword [ebp + 0x2c]
test eax, eax
je 0x48c16c
mov eax, dword [eax + 8]
jmp 0x48c16e
xor eax, eax
push 0
lea ecx, [ebp + 0x4c]
push ecx
mov ecx, dword [ebp + 0x18]
push eax
mov eax, dword [esp + 0xc04]
push ebx
push eax
add ecx, 0x4c
push ecx
call fcn.004823a0
add esp, 0x18
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xbe4
ret 0x10
mov edx, dword [ebp + 4]
mov ecx, dword [edx + 0x28]
test ecx, ecx
je case.0x48af80.1
mov ebx, dword [esp + 0xc04]
mov eax, dword [esp + 0xbfc]
test ebx, ebx
setne dl
push eax
push edx
push edi
call fcn.00488740
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xbe4
ret 0x10