Function at 0x4e88d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x2e4]
cmp eax, dword [ecx + 8]
jbe 0x4ea4c4
sub esp, 0x364
mov edx, dword [esp + 0x368]
mov dword [edx + 0x18c], 0
mov dword [edx + 0xb4], 0
mov ebx, dword [esp + 0x36c]
mov ebp, dword [esp + 0x370]
xor eax, eax
jmp 0x4e8925
inc eax
mov ebx, ecx
mov ebp, edi
cmp ebp, eax
jle 0x4e8bab
mov dword [esp + 0x78], eax
mov ecx, ebx
lea ebx, [ebx + eax*8]
mov esi, dword [ebx + 4]
mov dword [esp + 0x114], esi
mov ebx, dword [ebx]
mov dword [esp + 0x50], ebx
test ebx, ebx
je 0x4e8b59
mov edi, ebp
lea ebp, [0x78569c]
cmp ebx, ebp
jne 0x4e8a4c
mov ebx, edi
lea edi, [esp + 0x1a4]
call fcn.004664c4
mov ecx, dword [edx + 0xb4]
inc ecx
mov ebp, dword [edx + 0xb0]
mov esi, ebx
mov ebx, dword [edx + 0xb8]
cmp ebx, ecx
jae 0x4e89ec
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x6ca380]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x368]
mov dword [ebx + 0xb8], edx
mov edx, dword [0x1eaa9f0]
test edx, edx
jne 0x4e89d2
mov dword [ebx + 0xb0], eax
jmp 0x4e89dd
lea edi, [ebx + 0xb0]
call fcn.00465d80
mov edx, ebx
mov esi, dword [esp + 0x370]
mov ebp, eax
mov eax, dword [esp + 0x78]
mov dword [edx + 0xb4], ecx
lea ecx, [ecx + ecx*2]
lea edi, [ebp + ecx*8 - 0x18]
mov ecx, dword [0x1eaa9f0]
test ecx, ecx
jne 0x4e8a11
lea esi, [esp + 0x1a4]
call fcn.004664c4
jmp 0x4e8a39
lea eax, [0x6ca380]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x1a4]
mov dword [esp + 8], eax
call fcn.004115f0
mov eax, dword [esp + 0x78]
mov edx, dword [esp + 0x368]
mov ecx, dword [esp + 0x36c]
mov edi, dword [esp + 0x370]
jmp 0x4e8920
lea ebp, [0x7857f0]
cmp ebx, ebp
jne 0x4e8a75
mov ebx, dword [esi + 4]
mov ebp, dword [esi]
mov dword [esp + 0x38], ebp
mov dword [esp + 0xf8], ebx
mov ebx, dword [esp + 0x50]
lea ebp, [0x785764]
jmp 0x4e8b82
lea ebp, [0x785804]
cmp ebx, ebp
jne 0x4e8ab5
mov edx, dword [esi + 4]
mov dword [esp + 0x150], edx
mov edx, dword [esi]
lea ebp, [0x785764]
mov dword [esp + 0x38], edx
mov ebp, dword [esp + 0x150]
mov dword [esp + 0xf8], ebp
mov edx, dword [esp + 0x368]
lea ebp, [0x785764]
jmp 0x4e8b82
lea ebp, [0x7856d8]
cmp ebx, ebp
jne 0x4e8af5
mov edx, dword [esi + 4]
mov dword [esp + 0x150], edx
mov edx, dword [esi]
lea ebp, [0x785764]
mov dword [esp + 0x38], edx
mov ebp, dword [esp + 0x150]
mov dword [esp + 0xf8], ebp
mov edx, dword [esp + 0x368]
lea ebp, [0x785764]
jmp 0x4e8b82
lea ebp, [0x785764]
cmp ebx, ebp
jne 0x4e8b42
lea edi, [esp + 0x1d8]
call fcn.004664ba
mov ecx, dword [esp + 0x1d8]
mov edx, dword [esp + 0x1dc]
mov esi, dword [esp + 0x114]
mov edi, dword [esp + 0x370]
mov dword [esp + 0x38], ecx
mov dword [esp + 0xf8], edx
mov ecx, dword [esp + 0x36c]
mov edx, dword [esp + 0x368]
jmp 0x4e8b82
xor ebp, ebp
mov dword [esp + 0x38], ebp
xor ebp, ebp
mov dword [esp + 0xf8], ebp
lea ebp, [0x785764]
jmp 0x4e8b82
lea ebp, [0x785764]
mov edi, dword [esp + 0x370]
xor edi, edi
mov dword [esp + 0x38], edi
xor ebp, ebp
mov dword [esp + 0xf8], ebp
mov edi, dword [esp + 0x370]
lea ebp, [0x785764]
mov ebp, dword [esp + 0x38]
test ebp, ebp
je 0x4e8920
mov ebx, dword [edx + 0x18c]
mov dword [esp + 0x74], ebx
mov dword [esp + 0x7c], eax
xor eax, eax
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x7c]
jmp 0x4ea117
mov eax, dword [edx + 0x188]
mov ecx, dword [edx + 0x18c]
mov dword [esp + 0x78], ecx
xor esi, esi
jmp 0x4e8c13
mov byte [eax + 0x8c], cl
add eax, 0x60
mov dword [esp], eax
lea edi, [esp + 4]
lea esi, [esp + 0x224]
call fcn.00466492
call fcn.004e3ec0
mov eax, dword [esp + 0x14c]
add eax, 0x38
mov ecx, dword [esp + 0x74]
lea esi, [ecx + 1]
mov ecx, dword [esp + 0x368]
mov edx, dword [esp + 0x78]
mov ecx, edx
mov edx, dword [esp + 0x368]
mov ebx, dword [esp + 0x36c]
mov ebp, dword [esp + 0x370]
cmp esi, ecx
jge 0x4e8dc3
mov dword [esp + 0x74], esi
lea edi, [esp + 0x2f4]
mov esi, eax
call fcn.00466474
mov ecx, dword [esp + 0x2f4]
mov ebx, dword [esp + 0x2f8]
mov dword [esp + 0x16c], ecx
mov dword [esp + 0x170], ebx
test ecx, ecx
je 0x4ea0e0
mov dword [esp + 0x14c], eax
mov eax, dword [edx + 0x18]
lea ecx, [0x69d6e0]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [esp + 0x16c]
mov dword [esp + 8], eax
call fcn.0040d010
movzx eax, byte [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov ecx, dword [ecx]
test al, al
jne 0x4e8d2e
lea eax, [0x6cd7a0]
mov dword [esp], eax
call fcn.0040be50
mov eax, dword [esp + 4]
mov dword [esp + 0x108], eax
mov ecx, dword [esp + 0x368]
mov edx, dword [ecx + 0x18]
test edx, edx
jne 0x4e8ce5
call fcn.0040ca70
mov eax, dword [0x1eaa9f0]
mov ecx, dword [esp]
test eax, eax
jne 0x4e8cd0
mov eax, dword [esp + 0x368]
mov dword [eax + 0x18], ecx
jmp 0x4e8ce3
mov edx, dword [esp + 0x368]
lea edi, [edx + 0x18]
mov eax, ecx
call fcn.00465d80
mov eax, edx
mov ecx, eax
mov eax, dword [ecx + 0x18]
lea edx, [0x69d6e0]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x16c]
mov dword [esp + 8], eax
call fcn.0040d390
mov edi, dword [esp + 0xc]
test byte [edi], al
mov eax, dword [0x1eaa9f0]
test eax, eax
jne 0x4e8d20
mov eax, dword [esp + 0x108]
mov dword [edi], eax
jmp 0x4e8d2c
mov eax, dword [esp + 0x108]
call fcn.00465d80
mov ecx, eax
mov dword [esp + 0x108], ecx
mov byte [ecx], 1
lea edi, [esp + 0x254]
lea esi, [esp + 0x2fc]
call fcn.00466488
mov eax, dword [esp + 0x108]
movzx ecx, byte [eax + 0x5c]
test cl, cl
je 0x4e8d61
mov ecx, 1
jmp 0x4e8d69
movzx ecx, byte [esp + 0x280]
mov byte [eax + 0x5c], cl
lea ecx, [eax + 0x30]
mov dword [esp], ecx
lea edi, [esp + 4]
lea esi, [esp + 0x254]
call fcn.00466492
call fcn.004e3ec0
lea edi, [esp + 0x224]
lea esi, [esp + 0x2fc]
call fcn.00466488
mov eax, dword [esp + 0x108]
movzx ecx, byte [eax + 0x8c]
test cl, cl
je 0x4e8db6
mov ecx, 1
jmp 0x4e8bbf
movzx ecx, byte [esp + 0x250]
jmp 0x4e8bbf
mov eax, dword [edx + 0x90]
mov ecx, dword [edx + 0xb4]
lea esi, [eax + ecx]
mov edi, dword [edx + 0x94]
mov ebx, dword [edx + 0x8c]
mov ebp, dword [edx + 0xb0]
cmp edi, esi
jae 0x4e8e30
mov dword [esp + 0x78], ecx
mov dword [esp + 0x148], ebp
mov dword [esp + 0x74], eax
mov dword [esp], ebx
mov dword [esp + 4], esi
mov dword [esp + 8], edi
mov dword [esp + 0xc], ecx
lea eax, [0x6ca380]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov ebx, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x78]
mov ebp, dword [esp + 0x148]
mov dword [esp + 0x78], edi
mov dword [esp + 0x74], esi
mov dword [esp + 0x148], ebx
lea edx, [0x6ca380]
mov dword [esp], edx
sub edi, eax
lea edx, [eax + eax*2]
xchg edi, ebx
neg ebx
xchg edi, ebx
shl edx, 3
sar edi, 0x1f
and edi, edx
lea edx, [ebx + edi]
mov dword [esp + 4], edx
sub esi, eax
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ecx
call fcn.00411700
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x368]
mov dword [ecx + 0x90], eax
mov eax, dword [esp + 0x78]
mov dword [ecx + 0x94], eax
mov eax, dword [0x1eaa9f0]
test eax, eax
jne 0x4e8ea9
mov eax, dword [esp + 0x148]
mov dword [ecx + 0x8c], eax
jmp 0x4e8ebb
lea edi, [ecx + 0x8c]
mov eax, dword [esp + 0x148]
call fcn.00465d80
mov eax, dword [ecx + 0x9c]
mov edx, dword [ecx + 0xb4]
lea ebx, [eax + edx]
mov ebp, dword [ecx + 0xa0]
mov esi, dword [ecx + 0x98]
mov edi, dword [ecx + 0xb0]
cmp ebp, ebx
jae 0x4e8f28
mov dword [esp + 0x78], edx
mov dword [esp + 0x148], edi
mov dword [esp + 0x74], eax
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edx
lea eax, [0x6ca380]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0x78]
mov edi, dword [esp + 0x148]
mov dword [esp + 0x78], ebp
mov dword [esp + 0x74], ebx
mov dword [esp + 0x148], esi
lea ecx, [0x6ca380]
mov dword [esp], ecx
sub ebp, eax
lea ecx, [eax + eax*2]
xchg ebp, ebx
neg ebx
xchg ebp, ebx
shl ecx, 3
sar ebp, 0x1f
and ebp, ecx
lea ecx, [esi + ebp]
mov dword [esp + 4], ecx
sub ebx, eax
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], edx
call fcn.00411700
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x368]
mov dword [ecx + 0x9c], eax
mov eax, dword [esp + 0x78]
mov dword [ecx + 0xa0], eax
mov eax, dword [0x1eaa9f0]
test eax, eax
jne 0x4e8fa1
mov ebx, dword [esp + 0x148]
mov dword [ecx + 0x98], ebx
jmp 0x4e8fb3
lea edi, [ecx + 0x98]
mov eax, dword [esp + 0x148]
call fcn.00465d80
mov ebx, dword [esp + 0x370]
mov ebp, dword [esp + 0x36c]
xor eax, eax
jmp 0x4e8fca
inc eax
mov ebx, esi
mov ebp, edx
cmp ebx, eax
jle 0x4e9425
mov edx, ebp
lea ebp, [ebp + eax*8]
mov esi, ebx
mov ebx, dword [ebp]
mov ebp, dword [ebp + 4]
test ebx, ebx
je 0x4e93ed
mov dword [esp + 0x78], eax
mov edi, ebp
lea ebp, [0x7856d8]
cmp ebx, ebp
jne 0x4e912d
mov ebx, dword [edi + 4]
mov dword [esp + 0x150], ebx
mov ebx, dword [edi]
test ebx, ebx
je 0x4e8fc5
mov dword [esp + 0x164], ebx
mov eax, dword [esp + 0x150]
mov dword [esp + 0x168], eax
mov eax, dword [ecx + 0x18]
lea edx, [0x69d6e0]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x164]
mov dword [esp + 8], eax
call fcn.0040d010
movzx eax, byte [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov ecx, dword [ecx]
test al, al
jne 0x4e90f9
lea eax, [0x6cd7a0]
mov dword [esp], eax
call fcn.0040be50
mov eax, dword [esp + 4]
mov dword [esp + 0x104], eax
mov ecx, dword [esp + 0x368]
mov edx, dword [ecx + 0x18]
test edx, edx
jne 0x4e90ae
call fcn.0040ca70
mov eax, dword [0x1eaa9f0]
mov ecx, dword [esp]
test eax, eax
jne 0x4e9099
mov eax, dword [esp + 0x368]
mov dword [eax + 0x18], ecx
jmp 0x4e90ac
mov edx, dword [esp + 0x368]
lea edi, [edx + 0x18]
mov eax, ecx
call fcn.00465d80
mov eax, edx
mov ecx, eax
mov eax, dword [ecx + 0x18]
lea edx, [0x69d6e0]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x164]
mov dword [esp + 8], eax
call fcn.0040d390
mov edi, dword [esp + 0xc]
test byte [edi], al
mov eax, dword [0x1eaa9f0]
test eax, eax
jne 0x4e90e9
mov ebx, dword [esp + 0x104]
mov dword [edi], ebx
jmp 0x4e90f7
mov eax, dword [esp + 0x104]
call fcn.00465d80
mov ebx, eax
mov ecx, ebx
mov byte [ecx], 1
nop
movzx ebx, byte [ecx + 0xd]
test bl, bl
je 0x4e93f8
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x368]
mov edx, dword [esp + 0x36c]
lea ebp, [0x7856d8]
mov esi, dword [esp + 0x370]
jmp 0x4e8fc5
lea ebp, [0x785764]
cmp ebx, ebp
jne 0x4e93e2
mov ebx, edi
lea edi, [esp + 0x1bc]
mov esi, ebx
call fcn.004664ba
mov ecx, dword [esp + 0x1bc]
mov ebx, dword [esp + 0x1c0]
test ecx, ecx
jne 0x4e9176
mov ecx, dword [esp + 0x368]
lea ebp, [0x7856d8]
mov esi, dword [esp + 0x370]
jmp 0x4e8fc5
mov dword [esp + 0x15c], ecx
mov dword [esp + 0x160], ebx
mov eax, dword [esp + 0x368]
mov ecx, dword [eax + 0x18]
lea edx, [0x69d6e0]
mov dword [esp], edx
mov dword [esp + 4], ecx
lea ecx, [esp + 0x15c]
mov dword [esp + 8], ecx
call fcn.0040d010
movzx eax, byte [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov ecx, dword [ecx]
test al, al
jne 0x4e9263
lea eax, [0x6cd7a0]
mov dword [esp], eax
call fcn.0040be50
mov eax, dword [esp + 4]
mov dword [esp + 0x100], eax
mov ecx, dword [esp + 0x368]
mov edx, dword [ecx + 0x18]
test edx, edx
jne 0x4e9218
call fcn.0040ca70
mov eax, dword [0x1eaa9f0]
mov ecx, dword [esp]
test eax, eax
jne 0x4e9203
mov eax, dword [esp + 0x368]
mov dword [eax + 0x18], ecx
jmp 0x4e9216
mov edx, dword [esp + 0x368]
lea edi, [edx + 0x18]
mov eax, ecx
call fcn.00465d80
mov eax, edx
mov ecx, eax
mov eax, dword [ecx + 0x18]
lea edx, [0x69d6e0]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x15c]
mov dword [esp + 8], eax
call fcn.0040d390
mov edi, dword [esp + 0xc]
test byte [edi], al
mov eax, dword [0x1eaa9f0]
test eax, eax
jne 0x4e9253
mov ebx, dword [esp + 0x100]
mov dword [edi], ebx
jmp 0x4e9261
mov eax, dword [esp + 0x100]
call fcn.00465d80
mov ebx, eax
mov ecx, ebx
mov dword [esp + 0x100], ecx
mov byte [ecx], 1
movzx ebx, byte [ecx + 8]
test bl, bl
je 0x4e9281
mov eax, 0
mov edx, 0
jmp 0x4e92d5
mov byte [esp + 0x33], bl
mov byte [ecx + 8], 1
lea edi, [esp + 0xc8]
xor eax, eax
call fcn.00465fe5
mov dword [esp + 0xc8], 1
lea ecx, [0x6d7c80]
mov dword [esp], ecx
lea edx, [esp + 0xc8]
mov dword [esp + 4], edx
call fcn.00409640
mov ecx, dword [esp + 8]
movzx edx, byte [esp + 0x33]
test dl, dl
lea eax, [0x785750]
mov edx, ecx
mov ecx, dword [esp + 0x100]
jne 0x4e9f9d
test eax, eax
je 0x4e93d1
lea ebx, [0x785750]
cmp eax, ebx
jne 0x4e931a
lea edi, [esp + 0x9c]
mov esi, edx
call fcn.00466492
mov ecx, dword [esp + 0x9c]
mov ebp, dword [esp + 0x100]
mov ebp, dword [ebp + 0x30]
and ebp, ecx
cmp ecx, ebp
sete cl
mov ebp, ecx
jmp 0x4e9f97
lea ebp, [0x78578c]
cmp eax, ebp
je 0x4e9334
lea ebp, [0x7857b4]
cmp eax, ebp
jne 0x4e9356
lea ebp, [0x78578c]
mov ebp, dword [ecx + 0x48]
test ebp, ebp
je 0x4e9345
mov ebp, 1
jmp 0x4e9f97
mov ebp, dword [ecx + 0x54]
test ebp, ebp
xchg ebp, ebx
setne bl
xchg ebp, ebx
jmp 0x4e9f97
mov dword [esp + 0xf4], edx
mov dword [esp + 0x34], eax
lea ebp, [0x7857dc]
cmp eax, ebp
jne 0x4e9397
mov ebp, dword [edx + 4]
mov dword [esp + 0x74], ebp
mov ebx, dword [edx]
mov dword [esp + 0x150], ebx
mov esi, ebx
mov ebx, dword [ecx + 0x44]
mov dword [esp + 0x144], ebx
mov edi, ebp
mov ebp, dword [ecx + 0x48]
mov dword [esp + 0x70], ebp
xor ecx, ecx
jmp 0x4ea06b
lea ebp, [0x7857a0]
cmp eax, ebp
jne 0x4e9f95
mov ebp, dword [edx + 4]
mov dword [esp + 0x74], ebp
mov ebx, dword [edx]
mov dword [esp + 0x150], ebx
mov esi, ebx
mov ebx, dword [ecx + 0x50]
mov dword [esp + 0x144], ebx
mov edi, ebp
mov ebp, dword [ecx + 0x54]
mov dword [esp + 0x70], ebp
xor ecx, ecx
jmp 0x4e9fea
lea ebx, [0x785750]
lea ebp, [0x7857a0]
jmp 0x4e9f95
lea ebp, [0x7856d8]
jmp 0x4e8fc5
lea ebp, [0x7856d8]
jmp 0x4e8fc5
mov byte [ecx + 0xd], 1
lea eax, [0x7856c4]
mov dword [esp + 0x378], eax
lea eax, [0x934160]
mov dword [esp + 0x37c], eax
mov byte [esp + 0x380], 1
add esp, 0x364
ret
movzx ebx, byte [ecx + 0x184]
test bl, bl
jne 0x4e9441
mov ebx, dword [ecx + 0xd8]
mov dword [esp + 0x78], ebx
xor eax, eax
jmp 0x4e9734
mov eax, dword [ecx + 0x188]
mov edx, dword [ecx + 0x18c]
mov dword [esp + 0x78], edx
xor ebx, ebx
jmp 0x4e9494
mov byte [eax + 0xbc], cl
add eax, 0x90
mov dword [esp], eax
lea edi, [esp + 4]
lea esi, [esp + 0x1f4]
call fcn.00466492
call fcn.004e3ec0
mov eax, dword [esp + 0x14c]
add eax, 0x38
mov ecx, dword [esp + 0x74]
lea ebx, [ecx + 1]
mov ecx, dword [esp + 0x368]
mov edx, dword [esp + 0x78]
cmp ebx, edx
jge 0x4e95fc
lea edi, [esp + 0x284]
mov esi, eax
call fcn.00466474
mov ecx, dword [esp + 0x284]
mov ebp, dword [esp + 0x288]
mov dword [esp + 0x154], ecx
mov dword [esp + 0x158], ebp
test ecx, ecx
je 0x4e9719
mov dword [esp + 0x74], ebx
mov dword [esp + 0x14c], eax
mov eax, dword [esp + 0x368]
mov ecx, dword [eax + 0x18]
lea edx, [0x69d6e0]
mov dword [esp], edx
mov dword [esp + 4], ecx
lea ecx, [esp + 0x154]
mov dword [esp + 8], ecx
call fcn.0040d010
movzx eax, byte [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov ecx, dword [ecx]
test al, al
jne 0x4e95b6
lea eax, [0x6cd7a0]
mov dword [esp], eax
call fcn.0040be50
mov eax, dword [esp + 4]
mov dword [esp + 0xfc], eax
mov ecx, dword [esp + 0x368]
mov edx, dword [ecx + 0x18]
test edx, edx
jne 0x4e956d
call fcn.0040ca70
mov eax, dword [0x1eaa9f0]
mov ecx, dword [esp]
test eax, eax
jne 0x4e9558
mov eax, dword [esp + 0x368]
mov dword [eax + 0x18], ecx
jmp 0x4e956b
mov edx, dword [esp + 0x368]
lea edi, [edx + 0x18]
mov eax, ecx
call fcn.00465d80
mov eax, edx
mov ecx, eax
mov eax, dword [ecx + 0x18]
lea edx, [0x69d6e0]
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [esp + 0x154]
mov dword [esp + 8], eax
call fcn.0040d390
mov edi, dword [esp + 0xc]
test byte [edi], al
mov eax, dword [0x1eaa9f0]
test eax, eax
jne 0x4e95a8
mov eax, dword [esp + 0xfc]
mov dword [edi], eax
jmp 0x4e95b4
mov eax, dword [esp + 0xfc]
call fcn.00465d80
mov ecx, eax
mov dword [esp + 0xfc], ecx
mov byte [ecx], 1
lea edi, [esp + 0x1f4]
lea esi, [esp + 0x28c]
call fcn.00466488
mov eax, dword [esp + 0xfc]
movzx ecx, byte [eax + 0xbc]
test cl, cl
je 0x4e95ef
mov ecx, 1
jmp 0x4e9455
movzx ecx, byte [esp + 0x220]
jmp 0x4e9455
mov eax, dword [ecx + 0xa8]
mov edx, dword [ecx + 0xb4]
lea ebx, [eax + edx]
mov ebp, dword [ecx + 0xac]
mov esi, dword [ecx + 0xa4]
mov edi, dword [ecx + 0xb0]
cmp ebp, ebx
jae 0x4e9669
mov dword [esp + 0x78], eax
mov dword [esp + 0x148], edi
mov dword [esp + 0x74], edx
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edx
lea eax, [0x6ca380]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
mov edi, dword [esp + 0x148]
mov dword [esp + 0x78], ebp
mov dword [esp + 0x74], ebx
mov dword [esp + 0x148], esi
lea ecx, [0x6ca380]
mov dword [esp], ecx
lea ecx, [eax + eax*2]
sub ebp, eax
xchg ebp, ebx
neg ebx
xchg ebp, ebx
shl ecx, 3
sar ebp, 0x1f
and ebp, ecx
lea ecx, [esi + ebp]
mov dword [esp + 4], ecx
sub ebx, eax
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], edx
call fcn.00411700
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x368]
mov dword [ecx + 0xa8], eax
mov eax, dword [esp + 0x78]
mov dword [ecx + 0xac], eax
mov eax, dword [0x1eaa9f0]
test eax, eax
jne 0x4e96e2
mov eax, dword [esp + 0x148]
mov dword [ecx + 0xa4], eax
jmp 0x4e96f4
lea edi, [ecx + 0xa4]
mov eax, dword [esp + 0x148]
call fcn.00465d80
mov dword [esp + 0x378], 0
mov dword [esp + 0x37c], 0
mov byte [esp + 0x380], 0
add esp, 0x364
ret
lea eax, [0x69bcc0]
mov dword [esp], eax
lea eax, [0x784954]
mov dword [esp + 4], eax
call fcn.00436d20
inc eax
mov ebx, edx
cmp eax, ebx
jge 0x4e9441
mov ebp, dword [ecx + 0xd4]
mov edx, ebx
mov ebx, dword [ecx + 0xd8]
cmp eax, ebx
jae 0x4e9f8e
mov dword [esp + 0x140], ebp
mov dword [esp + 0x40], eax
imul ebx, eax, 0x7c
mov dword [esp + 0x74], ebx
mov esi, ebx
mov ebx, dword [ebx + ebp + 0x70]
mov edi, ebx
lea ebx, [ebp + esi + 0x70]
mov dword [esp + 0x13c], ebx
mov ebx, dword [esi + ebp + 0x74]
mov dword [esp + 0x70], ebx
mov dword [esp + 0x94], eax
xor eax, eax
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x94]
jmp 0x4e97ac
add edi, 0x10
mov ebx, dword [esp + 0x3c]
inc ebx
mov ebp, dword [esp + 0x140]
mov dword [esp + 0x3c], ebx
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x3c]
cmp ebp, ebx
jge 0x4e9731
mov dword [esp + 0x14c], edi
mov ebx, dword [edi]
mov dword [esp + 0x6c], ebx
mov ebp, dword [edi + 4]
mov dword [esp + 0x150], ebp
mov ebp, dword [edi + 8]
mov dword [esp + 0x68], ebp
mov ebp, dword [edi + 0xc]
mov dword [esp + 0x138], ebp
test ebx, ebx
je 0x4e9856
lea ebp, [0x785688]
cmp ebx, ebp
jne 0x4e984f
mov ebx, dword [esp + 0x150]
mov ebp, dword [ebx + 8]
mov dword [esp + 0x64], ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 0x60], ebp
mov ebx, dword [ebx]
mov dword [esp + 0x138], ebx
mov ebx, dword [esp + 0x140]
mov ebp, dword [ebx + esi + 0x14]
mov dword [esp + 0x4c], ebp
mov ebx, dword [ebx + esi + 0x18]
mov dword [esp + 0x10c], ebx
mov ebx, dword [ecx + 0xb0]
mov ebp, dword [ecx + 0xb4]
mov dword [esp + 0x5c], ebp
mov dword [esp + 0x84], eax
xor eax, eax
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x84]
jmp 0x4e9df8
mov ebp, dword [esp + 0x138]
mov ebx, dword [ecx + 0x188]
mov ebp, dword [ecx + 0x18c]
mov dword [esp + 0x60], ebp
mov dword [esp + 0x8c], eax
xor eax, eax
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x8c]
jmp 0x4e98c3
cmp ebx, ebp
mov ecx, dword [esp + 0x368]
mov esi, dword [esp + 0x74]
mov edi, dword [esp + 0x14c]
setl bl
test bl, bl
je 0x4e9795
jmp 0x4e9986
mov esi, dword [esp + 0x134]
add esi, 0x38
inc ebx
mov ecx, dword [esp + 0x368]
mov edi, dword [esp + 0x14c]
mov dword [esp + 0x5c], ebx
mov ebx, esi
mov esi, dword [esp + 0x74]
mov dword [esp + 0x58], ebx
mov ebx, dword [esp + 0x5c]
cmp ebx, ebp
jge 0x4e9890
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x134], ecx
lea edi, [esp + 0x2bc]
mov esi, ecx
call fcn.00466474
mov ecx, dword [esp + 0x2c0]
mov esi, ecx
mov ecx, dword [esp + 0x68]
cmp dword [esp + 0x2bc], ecx
je 0x4e9902
xor esi, esi
jmp 0x4e9977
mov dword [esp], ecx
mov eax, dword [esp + 0x138]
mov dword [esp + 4], eax
mov dword [esp + 8], esi
call fcn.00403860
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4e993a
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x78]
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x60]
xor esi, esi
jmp 0x4e9977
lea eax, [esp + 0x2c4]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x150]
mov dword [esp + 8], ecx
call fcn.004eb4b0
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x78]
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x60]
mov esi, eax
mov eax, dword [esp + 0x40]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4e98a0
jmp 0x4e987c
mov ebx, dword [esp + 0x140]
mov edx, dword [ebx + esi + 0x78]
mov ebp, dword [esi + ebx + 0x74]
mov edi, dword [esi + ebx + 0x70]
mov ebx, dword [esp + 0x3c]
cmp ebx, edx
ja 0x4e9dca
lea esi, [ebx + 1]
cmp ebp, esi
jb 0x4e9dc1
mov dword [esp + 0x78], edx
mov dword [esp + 0x70], ebp
lea ecx, [ebp - 1]
sub ebp, ebx
sub edx, ebx
dec edx
neg edx
shl esi, 4
sar edx, 0x1f
and esi, edx
lea edx, [edi + esi]
lea ebx, [ebp - 1]
mov esi, dword [esp + 0x78]
cmp esi, ecx
jae 0x4e9a22
mov dword [esp + 0x78], ebx
mov dword [esp + 0x130], edx
mov dword [esp + 0x60], ebp
mov dword [esp], edi
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
lea eax, [0x6b2140]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + 0x60]
mov esi, edx
mov edx, dword [esp + 0x130]
mov dword [esp + 0x78], esi
mov dword [esp + 0x60], ecx
mov dword [esp + 0x130], edi
lea eax, [0x6b2140]
mov dword [esp], eax
mov eax, dword [esp + 0x70]
sub eax, ebp
mov dword [esp + 0x70], eax
sub esi, eax
xchg esi, ebx
neg ebx
xchg esi, ebx
shl eax, 4
sar esi, 0x1f
and eax, esi
add eax, edi
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
sub ecx, eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.00411700
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x140]
mov dword [edx + eax + 0x74], ecx
mov ecx, dword [esp + 0x78]
mov dword [edx + eax + 0x78], ecx
mov ecx, dword [0x1eaa9f0]
test ecx, ecx
jne 0x4e9aa3
mov ebx, dword [esp + 0x130]
mov dword [edx + eax + 0x70], ebx
jmp 0x4e9aba
mov edi, dword [esp + 0x13c]
mov ecx, eax
mov eax, dword [esp + 0x130]
call fcn.00465d80
mov eax, ecx
nop
mov ebx, dword [esp + 0x40]
test ebx, ebx
je 0x4e9b3c
mov ebp, dword [esp + 0x368]
mov ecx, ebx
mov ebx, dword [ebp + 0xd4]
mov edx, ebp
mov ebp, dword [ebp + 0xd8]
test ebp, ebp
jbe 0x4e9db8
cmp ecx, ebp
jae 0x4e9daf
mov dword [esp + 0x140], ebx
lea edi, [ebx + 8]
mov ebp, dword [0x1eaa9f0]
lea esi, [ebx + eax + 8]
test ebp, ebp
jne 0x4e9b09
call fcn.004663fc
jmp 0x4e9b31
lea eax, [0x6d0fe0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
call fcn.004115f0
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0x368]
mov ebx, dword [esp + 0x140]
mov ebp, dword [esp + 0x40]
mov ecx, 1
jmp 0x4e9b7c
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x378], eax
mov eax, dword [esp + 0x150]
mov dword [esp + 0x37c], eax
mov byte [esp + 0x380], 1
add esp, 0x364
ret
mov esi, dword [esp + 0x44]
inc esi
mov ebp, dword [esp + 0x40]
mov edx, dword [esp + 0x368]
mov eax, dword [esp + 0x74]
mov ebx, ecx
mov ecx, esi
cmp ecx, ebp
jg 0x4e9c86
mov esi, dword [ebx + 0x74]
mov edi, dword [ebx + 0x78]
mov ebp, dword [ebx + 0x70]
mov ebx, dword [edx + 0xd4]
mov edx, dword [edx + 0xd8]
cmp ecx, edx
jae 0x4e9da6
mov dword [esp + 0x78], esi
mov dword [esp + 0x44], ecx
imul edx, ecx, 0x7c
mov eax, dword [edx + ebx + 0x74]
lea ecx, [esi + eax]
mov edx, dword [edx + ebx + 0x70]
cmp edi, ecx
jae 0x4e9bff
mov dword [esp + 0x70], eax
mov dword [esp + 0x130], edx
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
mov dword [esp + 0xc], eax
lea ecx, [0x6b2140]
mov dword [esp + 0x10], ecx
call fcn.0044be60
mov ebp, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x70]
mov edx, dword [esp + 0x130]
mov esi, dword [esp + 0x78]
mov dword [esp + 0x70], edi
mov dword [esp + 0x60], ecx
mov dword [esp + 0x130], ebp
lea ebx, [0x6b2140]
mov dword [esp], ebx
sub edi, esi
xchg edi, ebx
neg ebx
xchg edi, ebx
shl esi, 4
sar edi, 0x1f
and esi, edi
add esi, ebp
mov dword [esp + 4], esi
mov esi, dword [esp + 0x78]
sub ecx, esi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
call fcn.00411700
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x140]
mov dword [ecx + 0x74], eax
mov eax, dword [esp + 0x70]
mov dword [ecx + 0x78], eax
mov eax, dword [0x1eaa9f0]
test eax, eax
jne 0x4e9c72
mov ebx, dword [esp + 0x130]
mov dword [ecx + 0x70], ebx
jmp 0x4e9b64
lea edi, [ecx + 0x70]
mov eax, dword [esp + 0x130]
call fcn.00465d80
jmp 0x4e9b64
mov ebx, dword [edx + 0xdc]
mov esi, dword [edx + 0xd4]
mov ecx, dword [edx + 0xd8]
cmp ebx, 1
jb 0x4e9d9a
lea edi, [ebp + 1]
cmp ecx, edi
jb 0x4e9d93
sub ecx, ebp
mov edi, ebx
sub ebx, ebp
dec ebx
neg ebx
sar ebx, 0x1f
add eax, 0x7c
and eax, ebx
add eax, esi
lea ebx, [ecx - 1]
cmp edi, ecx
jae 0x4e9d08
mov dword [esp + 0x78], ebx
mov dword [esp + 0x140], eax
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
mov dword [esp + 0xc], ebx
lea eax, [0x6bc2c0]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x140]
mov edi, ebx
mov ebx, dword [esp + 0x78]
mov dword [esp + 0x78], edi
mov dword [esp + 0x74], ecx
mov dword [esp + 0x140], esi
lea edx, [0x6bc2c0]
mov dword [esp], edx
lea edx, [edi - 1]
neg edx
sar edx, 0x1f
and edx, 0x7c
add edx, esi
mov dword [esp + 4], edx
lea edx, [ecx - 1]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebx
call fcn.00411700
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x368]
mov dword [ecx + 0xd8], eax
mov eax, dword [esp + 0x78]
mov dword [ecx + 0xdc], eax
mov eax, dword [0x1eaa9f0]
test eax, eax
jne 0x4e9d7c
mov eax, dword [esp + 0x140]
mov dword [ecx + 0xd4], eax
jmp 0x4e9b3c
lea edi, [ecx + 0xd4]
mov eax, dword [esp + 0x140]
call fcn.00465d80
jmp 0x4e9b3c
mov eax, edi
call fcn.00465e60
mov ecx, 1
xor edx, edx
call fcn.00465e40
mov eax, ecx
mov ecx, edx
call fcn.00465e00
mov eax, ecx
mov ecx, ebp
call fcn.00465e00
xor eax, eax
mov ecx, eax
call fcn.00465e00
mov eax, esi
mov ecx, ebp
call fcn.00465e60
mov ecx, ebx
call fcn.00465e40
mov ebp, dword [esp + 0x134]
add ebp, 0x18
inc edi
mov ecx, dword [esp + 0x368]
mov esi, dword [esp + 0x74]
mov dword [esp + 0x54], edi
mov ebx, ebp
mov ebp, dword [esp + 0x5c]
mov edi, dword [esp + 0x14c]
mov dword [esp + 0x68], ebx
mov ebx, dword [esp + 0x54]
cmp ebx, ebp
jge 0x4e9f86
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x134], ecx
lea edi, [esp + 0x18c]
mov esi, ecx
call fcn.004664c4
lea edi, [esp + 0x174]
lea esi, [esp + 0x18c]
call fcn.004664c4
mov ecx, dword [esp + 0x174]
mov esi, ebp
mov ebp, dword [esp + 0x178]
test ecx, ecx
je 0x4e9e90
mov edi, ebp
mov ebp, dword [esp + 0x4c]
cmp ecx, ebp
je 0x4e9e59
mov ecx, 1
jmp 0x4e9e96
mov dword [esp], ecx
mov dword [esp + 4], edi
mov eax, dword [esp + 0x10c]
mov dword [esp + 8], eax
call fcn.00403860
movzx eax, byte [esp + 0xc]
xor eax, 1
mov edx, dword [esp + 0x78]
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0x4c]
mov esi, dword [esp + 0x5c]
mov ecx, eax
mov eax, dword [esp + 0x40]
jmp 0x4e9e96
mov ebp, dword [esp + 0x4c]
xor ecx, ecx
test cl, cl
je 0x4e9ea9
mov ecx, ebp
mov edi, ebx
xor ebp, ebp
mov ebx, dword [esp + 0x60]
jmp 0x4e9f68
mov ecx, ebp
mov ebp, dword [esp + 0x188]
mov edi, ebx
mov ebx, dword [esp + 0x184]
test ebp, ebp
je 0x4e9f17
mov dword [esp + 0x12c], ebx
mov ebx, dword [esp + 0x60]
cmp ebp, ebx
je 0x4e9ed5
mov ebp, 1
jmp 0x4e9f1d
mov eax, dword [esp + 0x12c]
mov dword [esp], eax
mov eax, dword [esp + 0x138]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
call fcn.00402a80
movzx eax, byte [esp + 0xc]
xor eax, 1
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x78]
mov ebx, dword [esp + 0x60]
mov esi, dword [esp + 0x5c]
mov edi, dword [esp + 0x54]
mov ebp, eax
mov eax, dword [esp + 0x40]
jmp 0x4e9f1d
mov ebx, dword [esp + 0x60]
xor ebp, ebp
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4e9f27
xor ebp, ebp
jmp 0x4e9f68
mov ebp, dword [esp + 0x17c]
mov ebx, dword [esp + 0x64]
and ebx, ebp
cmp ebp, ebx
je 0x4e9f40
mov ebx, dword [esp + 0x60]
xor ebp, ebp
jmp 0x4e9f68
mov ebx, dword [esp + 0x180]
or ebp, ebx
xchg ebp, ebx
not ebx
xchg ebp, ebx
mov ebx, dword [esp + 0x64]
test ebp, ebx
je 0x4e9f5f
mov ebx, dword [esp + 0x60]
xor ebp, ebp
jmp 0x4e9f68
mov ebx, dword [esp + 0x60]
mov ebp, 1
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4e9dd1
cmp edi, esi
mov ecx, dword [esp + 0x368]
mov esi, dword [esp + 0x74]
mov edi, dword [esp + 0x14c]
setl bl
jmp 0x4e9893
mov ecx, ebx
call fcn.00465e00
xor ebp, ebp
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x4e9fc1
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x368]
mov edx, dword [esp + 0x36c]
lea ebp, [0x7856d8]
mov esi, dword [esp + 0x370]
jmp 0x4e8fc5
mov dword [esp + 0x378], eax
mov dword [esp + 0x37c], edx
mov byte [esp + 0x380], 1
add esp, 0x364
ret
inc ecx
mov ebp, dword [esp + 0x70]
mov ebx, dword [esp + 0x144]
cmp ecx, ebp
jge 0x4ea04e
lea ebx, [ebx + ecx*8]
mov ebp, dword [ebx + 4]
mov ebx, dword [ebx]
cmp ebp, edi
jne 0x4e9fde
mov dword [esp + 0x60], ecx
mov dword [esp], ebx
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
call fcn.00402a80
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4ea033
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0xf4]
mov esi, dword [esp + 0x150]
mov edi, dword [esp + 0x74]
jmp 0x4e9fde
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0xf4]
lea ebx, [0x785750]
mov ebp, 1
jmp 0x4e9f97
lea ebx, [0x785750]
lea ebp, [0x7857a0]
jmp 0x4e9f95
inc ecx
mov ebp, dword [esp + 0x70]
mov ebx, dword [esp + 0x144]
cmp ecx, ebp
jge 0x4ea0cf
lea ebx, [ebx + ecx*8]
mov ebp, dword [ebx + 4]
mov ebx, dword [ebx]
cmp ebp, edi
jne 0x4ea05f
mov dword [esp + 0x60], ecx
mov dword [esp], ebx
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
call fcn.00402a80
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4ea0b4
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0xf4]
mov esi, dword [esp + 0x150]
mov edi, dword [esp + 0x74]
jmp 0x4ea05f
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0xf4]
lea ebx, [0x785750]
mov ebp, 1
jmp 0x4e9f97
lea ebx, [0x785750]
lea ebp, [0x7857a0]
jmp 0x4e9f95
lea eax, [0x69bcc0]
mov dword [esp], eax
lea eax, [0x784954]
mov dword [esp + 4], eax
call fcn.00436d20
mov edx, dword [esp + 0x48]
inc edx
mov ebp, dword [esp + 0x368]
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0x38]
mov dword [esp + 0x48], edx
mov edx, dword [esp + 0x368]
mov ebp, dword [esp + 0x48]
cmp ebp, ebx
jge 0x4ea1c9
mov ebx, dword [edx + 0x188]
mov edx, dword [edx + 0x18c]
cmp ebp, edx
jae 0x4ea4ba
mov dword [esp + 0x128], ebx
imul edx, ebp, 0x38
mov dword [esp + 0x70], edx
mov ebp, dword [ebx + edx]
mov edx, dword [ebx + edx + 4]
mov ebx, dword [esp + 0x38]
cmp ebx, ebp
jne 0x4ea0f8
mov dword [esp], ebp
mov dword [esp + 4], edx
mov eax, dword [esp + 0xf8]
mov dword [esp + 8], eax
call fcn.00403860
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4ea196
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x36c]
mov ebx, dword [esp + 0x38]
mov esi, dword [esp + 0x114]
mov edi, dword [esp + 0x370]
jmp 0x4ea0f8
mov edx, dword [esp + 0x128]
mov ebx, dword [esp + 0x70]
lea edx, [ebx + edx + 8]
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x36c]
mov esi, dword [esp + 0x114]
mov edi, dword [esp + 0x370]
mov ebx, edx
mov edx, dword [esp + 0x368]
jmp 0x4ea1cb
xor ebx, ebx
test ebx, ebx
jne 0x4ea478
mov ebx, dword [edx + 0x18c]
cmp dword [edx + 0x190], ebx
jle 0x4ea344
lea ebp, [ebx + 1]
mov dword [edx + 0x18c], ebp
mov edx, dword [edx + 0x188]
cmp ebx, ebp
jae 0x4ea4b1
imul ebx, ebx, 0x38
mov ebp, dword [esp + 0x38]
mov dword [edx + ebx], ebp
mov ebp, dword [0x1eaa9f0]
lea ecx, [edx + ebx + 4]
mov dword [esp + 0x124], ecx
lea ecx, [edx + ebx + 8]
lea esi, [edx + ebx + 0x1c]
mov dword [esp + 0x120], esi
lea esi, [edx + ebx + 0x28]
test ebp, ebp
jne 0x4ea23b
mov ebp, dword [esp + 0xf8]
mov dword [edx + ebx + 4], ebp
jmp 0x4ea256
mov ebp, edi
mov edi, dword [esp + 0x124]
mov eax, dword [esp + 0xf8]
call fcn.00465d80
mov eax, dword [esp + 0x78]
mov edi, ebp
mov dword [esp + 0x110], ecx
mov dword [esp + 0x11c], esi
mov ebp, dword [0x1eaa9f0]
mov esi, dword [edx + ebx + 0x1c]
mov dword [esp + 0x144], esi
mov esi, dword [edx + ebx + 0x24]
mov dword [esp + 0x74], esi
mov esi, dword [edx + ebx + 0x28]
mov dword [esp + 0x118], esi
mov esi, dword [edx + ebx + 0x30]
test ebp, ebp
jne 0x4ea2a8
mov ebp, edi
mov edi, ecx
xor eax, eax
call fcn.00465fe4
mov ecx, dword [esp + 0x144]
mov dword [edx + ebx + 0x1c], ecx
jmp 0x4ea2f2
mov dword [esp + 0x70], esi
mov dword [esp + 0x128], edx
mov dword [esp + 0x60], ebx
lea eax, [0x6b2020]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004117d0
mov edi, dword [esp + 0x120]
mov eax, dword [esp + 0x144]
call fcn.00465d80
mov edx, dword [esp + 0x128]
mov ebx, dword [esp + 0x60]
mov ebp, dword [esp + 0x370]
mov esi, dword [esp + 0x70]
mov ecx, dword [esp + 0x74]
mov dword [edx + ebx + 0x24], ecx
mov ecx, dword [0x1eaa9f0]
test ecx, ecx
jne 0x4ea311
mov eax, dword [esp + 0x118]
mov dword [edx + ebx + 0x28], eax
jmp 0x4ea324
mov edi, dword [esp + 0x11c]
mov eax, dword [esp + 0x118]
call fcn.00465d80
mov dword [edx + ebx + 0x30], esi
mov eax, ebp
mov edx, dword [esp + 0x368]
mov ebp, dword [esp + 0x114]
mov ecx, dword [esp + 0x110]
jmp 0x4ea474
mov dword [esp + 0x74], ebx
mov ebp, edi
lea edi, [esp + 0x32c]
xor eax, eax
call fcn.00465fe2
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x32c], ecx
mov ecx, dword [esp + 0xf8]
mov dword [esp + 0x330], ecx
mov ecx, dword [edx + 0x188]
mov eax, ebp
mov ebp, dword [edx + 0x190]
mov edi, ebx
mov ebx, dword [edx + 0x18c]
inc ebx
cmp ebp, ebx
jae 0x4ea3fc
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6b21a0]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x368]
mov dword [ebx + 0x190], edx
mov edx, dword [0x1eaa9f0]
test edx, edx
jne 0x4ea3d9
mov dword [ebx + 0x188], eax
jmp 0x4ea3e4
lea edi, [ebx + 0x188]
call fcn.00465d80
mov edx, ebx
mov esi, dword [esp + 0x114]
mov edi, dword [esp + 0x74]
mov ebx, ecx
mov ecx, eax
mov eax, dword [esp + 0x370]
mov dword [edx + 0x18c], ebx
imul ebx, ebx, 0x38
lea ecx, [ebx + ecx - 0x38]
mov ebx, dword [0x1eaa9f0]
test ebx, ebx
jne 0x4ea427
mov ebx, edi
mov edi, ecx
mov ebp, esi
lea esi, [esp + 0x32c]
call fcn.00466474
jmp 0x4ea45d
lea eax, [0x6b21a0]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [esp + 0x32c]
mov dword [esp + 8], eax
call fcn.004115f0
mov eax, dword [esp + 0x370]
mov edx, dword [esp + 0x368]
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0x114]
mov ecx, dword [edx + 0x18c]
mov esi, dword [edx + 0x188]
cmp ecx, ebx
jbe 0x4ea4aa
imul ebx, ebx, 0x38
lea ecx, [esi + ebx + 8]
mov esi, ebp
mov ebx, ecx
mov dword [esp], ebx
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov dword [esp + 8], esi
call fcn.004eb3e0
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x36c]
mov edx, dword [esp + 0x368]
mov edi, dword [esp + 0x370]
jmp 0x4e8920
mov eax, ebx
call fcn.00465e00
mov eax, ebx
mov ecx, ebp
call fcn.00465e00
mov eax, ebp
mov ecx, edx
call fcn.00465e00
nop
call fcn.004649b0
jmp fcn.004e88d0