Function at 0x495130
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0xe8
mov eax, dword [0x57f0b4]
xor eax, esp
mov dword [esp + 0xe4], eax
mov eax, ecx
mov dword [esp + 0xc], edx
mov ecx, dword [ebp + 0x14]
mov dword [esp + 0x14], eax
push esi
mov eax, dword [eax]
mov esi, dword [ebp + 0x10]
mov dword [esp + 0x60], eax
push edi
mov edi, dword [ebp + 8]
mov eax, dword [esi + 0x50]
mov dword [esp + 0x28], eax
movzx eax, byte [esi + 0x3c]
mov dword [esp + 0x84], ecx
mov ecx, dword [ebp + 0x18]
mov dword [esp + 0x88], ecx
lea ecx, [edi + 0x58]
mov dword [esp + 0x7c], ecx
lea ecx, [eax + eax*8]
mov eax, dword [edi + 4]
mov dword [esp + 0x40], edi
mov dword [esp + 0x18], esi
mov dword [esp + 0x54], 0
lea eax, [eax + ecx*8]
add eax, 8
mov dword [esp + 0x80], eax
mov eax, dword [eax + 0x2c]
mov dword [esp + 0x38], eax
cmp dword [edi + 0x200], eax
jne 0x4951c3
mov ecx, 1
xor edx, edx
jmp 0x495212
mov edx, dword [edi + 0x1fc]
mov eax, 1
cmp edx, eax
jle 0x4951f8
lea ecx, [edi + 0x204]
nop dword [eax + eax]
mov esi, dword [esp + 0x38]
cmp dword [ecx], esi
mov esi, dword [esp + 0x18]
je 0x495329
inc eax
add ecx, 4
cmp eax, edx
jl 0x4951e0
xorps xmm0, xmm0
movlpd qword [esp + 0x98], xmm0
mov edx, dword [esp + 0x9c]
mov ecx, dword [esp + 0x98]
not ecx
not edx
and ecx, dword [esp + 0x84]
and edx, dword [esp + 0x88]
mov dword [esi + 0x58], ecx
mov dword [esi + 0x5c], edx
mov esi, dword [ebp + 0xc]
mov ecx, esi
mov eax, dword [edi + 0x50]
mov edx, dword [edi + 0x54]
call fcn.00544cd0
mov edx, dword [esp + 0x1c]
and eax, 1
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov edi, dword [edx + 0x38]
dec edi
mov dword [edx + 0x38], edi
mov dword [ecx + 0x10], edi
mov dword [ecx + 0xc], edi
mov eax, dword [edx + 0x38]
dec eax
mov dword [esp + 0x60], edi
mov dword [edx + 0x38], eax
cmp byte [ecx + 0x3c], 0
mov dword [esp + 0x8c], eax
mov dword [ecx + 0x18], eax
jbe 0x49529d
mov eax, dword [esp + 0x80]
test byte [eax + 0x24], 8
je 0x49529d
mov eax, dword [edx + 0x2c]
inc eax
push 0
mov dword [edx + 0x2c], eax
mov edx, 0x47
push eax
mov dword [ecx], eax
mov ecx, dword [esp + 0x1c]
push 0
call fcn.0043fd40
add esp, 0xc
mov ecx, esi
test esi, esi
jle 0x4952c8
mov edx, dword [esp + 0x40]
lea eax, [esi + esi*2]
shl eax, 5
add edx, 0x338
add eax, edx
cmp dword [eax - 0x38], 0
jne 0x4952c8
cmp dword [eax], 0
jne 0x4952c8
dec ecx
sub eax, 0x60
test ecx, ecx
jg 0x4952b5
lea eax, [ecx + ecx*2]
mov ecx, dword [esp + 0x40]
shl eax, 5
mov esi, dword [eax + ecx + 0x30c]
mov eax, dword [esp + 0x80]
mov dword [esp + 0x50], esi
test byte [eax + 0x28], 0x20
je 0x495343
push dword [eax + 0x18]
mov esi, dword [eax + 0x1c]
mov edx, 0xa
mov ecx, dword [esp + 0x18]
push 0
push esi
call fcn.0043fd40
mov ecx, dword [esp + 0x20]
add esp, 0xc
mov edx, 0xb
push 0
push edi
push esi
call fcn.0043fd40
mov edi, dword [esp + 0x24]
add esp, 0xc
mov dword [edi + 0x44], eax
mov byte [edi + 0x3d], 8
jmp 0x496c99
xor ecx, ecx
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
cmovae edx, ecx
jmp 0x495212
mov edi, dword [esp + 0x28]
mov edx, dword [edi + 0x2c]
test edx, 0x400
je 0x495752
movzx eax, word [edi + 0x30]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x20], eax
lea edx, [eax + 2]
call fcn.0045eb40
mov edx, dword [esp + 0x18]
xor esi, esi
mov edi, eax
mov dword [esp + 0x2c], esi
mov dword [esp + 0x30], edi
lea ecx, [esi + 1]
mov eax, dword [edx + 0xc]
mov dword [esp + 0x34], eax
cmp dword [esp + 0x20], esi
jbe 0x495424
mov eax, dword [esp + 0x28]
mov eax, dword [eax + 0x38]
mov edx, dword [eax + esi*4]
mov dword [esp + 0x50], edx
test edx, edx
je 0x4955b3
test byte [edx + 0xc], 1
je 0x49555a
mov eax, ecx
mov ecx, esi
shl eax, cl
xor ecx, ecx
cmp esi, 0x1f
cmovg eax, ecx
mov ecx, dword [esp + 0x28]
test dword [ecx + 0x28], eax
mov ecx, dword [esp + 0x1c]
je 0x495533
mov edi, dword [ecx + 0x28]
inc dword [ecx + 0x2c]
mov esi, dword [ecx + 0x2c]
push edi
lea eax, [edi + 1]
mov dword [ecx + 0x28], eax
mov edx, dword [edx]
call fcn.00459620
mov eax, dword [esp + 0x34]
add esp, 4
mov ecx, dword [esp + 0x14]
add eax, 2
mov edx, 0xae
push esi
mov esi, dword [esp + 0x30]
add eax, esi
push eax
push edi
call fcn.0043fd40
mov edi, dword [esp + 0x3c]
add esp, 0xc
mov eax, dword [esp + 0x28]
mov ecx, 1
inc esi
mov dword [esp + 0x2c], esi
cmp esi, dword [esp + 0x20]
jl 0x495392
mov esi, dword [esp + 0x28]
mov edx, 0x47
mov ecx, dword [esp + 0x14]
push 0
push edi
push dword [esi + 0x18]
call fcn.0043fd40
mov ecx, dword [esp + 0x20]
lea eax, [edi + 1]
add esp, 0xc
mov edx, 0x47
push 0
push eax
push dword [esp + 0x28]
call fcn.0043fd40
mov ecx, dword [esp + 0x20]
add esp, 0xc
test byte [esi + 0x1c], 1
mov eax, 0xfffffffa
mov esi, dword [esi + 0x24]
mov edi, 0xffffffff
cmovne edi, eax
mov edx, 6
mov eax, dword [esp + 0x30]
push eax
push dword [esp + 0x38]
push dword [esp + 0x40]
call fcn.0043fd40
add esp, 0xc
mov edx, eax
push edi
mov edi, dword [esp + 0x18]
mov ecx, edi
push esi
call fcn.00440aa0
mov esi, dword [esp + 0x30]
add esp, 8
mov ecx, dword [esp + 0x64]
and dword [esi + 0x1c], 0xfffffffe
cmp byte [ecx + 0x57], 0
je 0x4954b7
mov dword [esi + 0x24], 0
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x38]
mov dword [ecx + 0x40], eax
mov eax, 0x3e
cmp byte [edx + 0x32], 0
mov edx, 0xb7
cmovne eax, edx
mov byte [ecx + 0x3d], al
mov eax, dword [edi + 0x6c]
xor edi, edi
mov dword [ecx + 0x44], eax
cmp dword [esp + 0x20], edi
jbe 0x496c97
mov eax, dword [esp + 0x30]
add eax, 2
mov dword [esp + 0x34], eax
nop word [eax + eax]
mov eax, dword [esi + 0x38]
mov edx, dword [eax + edi*4]
mov dword [esp + 0x50], edx
cmp edi, 0x10
jge 0x4955bc
mov ax, word [esi + 0x22]
mov cx, di
shr ax, cl
test al, 1
je 0x4955bc
mov ecx, dword [esp + 0x18]
call fcn.00493c00
jmp 0x49573e
lea eax, [esi + 2]
add eax, edi
push eax
push dword [esp + 0x48]
push esi
push dword [esp + 0x24]
call fcn.00493f10
mov eax, dword [esp + 0x28]
add esp, 0x10
mov ecx, dword [eax + 0x10]
mov dword [esp + 0x34], ecx
jmp 0x49540c
mov edx, dword [edx]
lea eax, [esi + 2]
mov ecx, dword [esp + 0x1c]
add eax, edi
push 1
push eax
mov edx, dword [edx + 0x10]
call fcn.00494bb0
mov eax, dword [esp + 0x58]
add esp, 8
cmp byte [eax + 0xf], 0x4a
mov eax, dword [esp + 0x28]
jne 0x495410
test byte [eax + 0x1c], 2
je 0x495410
mov eax, dword [esp + 0x40]
mov edx, 0x47
mov ecx, dword [esp + 0x14]
push 0
mov eax, dword [eax + 0x14]
push dword [eax + 0xc]
push 0
call fcn.0043fd40
add esp, 0xc
jmp 0x49540c
mov eax, dword [esp + 0x28]
jmp 0x495415
test byte [edx + 0xc], 1
je 0x49573e
mov ecx, edi
mov eax, 1
shl eax, cl
xor ecx, ecx
cmp edi, 0x1f
cmovg eax, ecx
test dword [esi + 0x28], eax
jne 0x49573e
mov eax, dword [esp + 0x64]
cmp byte [eax + 0x57], cl
jne 0x49573e
mov esi, dword [esp + 0x18]
mov dword [esp + 0x2c], ecx
cmp dword [esi + 0x48], ecx
jle 0x495687
mov ecx, dword [esp + 0x14]
mov esi, dword [esi + 0x4c]
add esi, 4
mov eax, dword [ecx]
mov dh, byte [eax + 0x57]
nop dword [eax]
mov eax, dword [esi]
test eax, eax
jns 0x49561a
mov eax, dword [ecx + 0x6c]
dec eax
test dh, dh
je 0x495625
mov ecx, 0x629608
jmp 0x495632
lea ecx, [eax + eax*4]
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 0x68]
lea ecx, [eax + ecx*4]
mov dl, byte [ecx]
cmp dl, 0x5e
jne 0x495644
mov eax, dword [esp + 0x34]
add eax, edi
cmp dword [ecx + 0xc], eax
jmp 0x495652
cmp dl, 0x87
jne 0x495654
mov eax, dword [esp + 0x34]
add eax, edi
cmp dword [ecx + 8], eax
je 0x49566f
mov ecx, dword [esp + 0x2c]
add esi, 0x14
mov eax, dword [esp + 0x18]
inc ecx
mov dword [esp + 0x2c], ecx
cmp ecx, dword [eax + 0x48]
jge 0x495687
mov ecx, dword [esp + 0x14]
jmp 0x495610
push dword [ecx + 0xc]
movzx edx, dl
push dword [ecx + 8]
push dword [ecx + 4]
mov ecx, dword [esp + 0x20]
call fcn.0043fd40
add esp, 0xc
mov ecx, dword [esp + 0x1c]
mov edx, 0x35
push 0
push 0
call fcn.00456af0
mov esi, eax
add esp, 8
mov eax, dword [esp + 0x64]
cmp byte [eax + 0x57], 0
jne 0x49572d
mov eax, dword [esp + 0x50]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax]
mov edx, dword [eax + 0xc]
test ecx, ecx
jle 0x4956c6
mov eax, dword [edx + 0x14]
lea ecx, [ecx + ecx*4]
mov edx, dword [eax + ecx*4 - 0xc]
mov ecx, dword [esp + 0x64]
lea eax, [esp + 0x98]
mov dword [esi + 0xc], edx
mov edx, 0xb0
push 0
push eax
mov dword [esp + 0xa0], 0
mov dword [esp + 0xa4], 0
call fcn.00456930
mov ecx, eax
add esp, 8
mov dword [esi + 0x10], ecx
test ecx, ecx
je 0x495722
mov eax, dword [esp + 0x34]
add eax, edi
mov dword [ecx + 0x1c], eax
mov eax, dword [esp + 0x18]
push 0x10
push dword [eax + 0x18]
push esi
push dword [esp + 0x28]
call fcn.0045d6f0
add esp, 0x10
mov eax, dword [esp + 0x64]
mov dword [esi + 0xc], 0
test esi, esi
je 0x49573a
mov edx, esi
mov ecx, eax
call fcn.004570e0
mov esi, dword [esp + 0x28]
inc edi
cmp edi, dword [esp + 0x20]
jl 0x495500
mov edi, dword [esp + 0x18]
jmp 0x496c99
test dl, 5
setne cl
bt edx, 8
setb al
test al, cl
je 0x495836
mov eax, dword [edi + 0x38]
mov edx, dword [eax]
mov eax, dword [esp + 0x1c]
mov ecx, eax
inc dword [eax + 0x2c]
mov esi, dword [eax + 0x2c]
push esi
push dword [esp + 0x48]
push 0
push dword [esp + 0x24]
call fcn.00493f10
mov edi, eax
add esp, 0x10
cmp edi, esi
je 0x4957ad
test esi, esi
je 0x4957ad
mov ecx, dword [esp + 0x1c]
mov al, byte [ecx + 0x13]
cmp al, 8
jae 0x4957ad
movzx eax, al
mov dword [ecx + eax*4 + 0x98], esi
inc byte [ecx + 0x13]
mov eax, dword [esp + 0x18]
mov esi, dword [eax + 0x10]
mov eax, dword [eax + 0x34]
test eax, eax
je 0x495812
mov ecx, dword [esp + 0x14]
mov edx, 0x3f
push edi
push esi
push eax
call fcn.0043fd40
mov edx, dword [esp + 0x20]
mov ecx, eax
add esp, 0xc
mov eax, dword [edx]
cmp byte [eax + 0x57], 0
jne 0x4957f0
mov eax, dword [edx + 0x68]
lea ecx, [ecx + ecx*4]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], 1
push dword [esp + 0x88]
mov edx, dword [esp + 0x44]
push dword [esp + 0x88]
mov ecx, dword [esp + 0x24]
push esi
push dword [ebp + 0xc]
call fcn.00494ff0
add esp, 0x10
mov ecx, dword [esp + 0x14]
mov edx, 0x1d
push edi
push esi
push dword [esp + 0x40]
call fcn.0043fd40
mov edi, dword [esp + 0x24]
add esp, 0xc
mov byte [edi + 0x3d], 0xb7
jmp 0x496c99
mov eax, edx
and eax, 0x102
cmp eax, 0x102
jne 0x495a75
xor esi, esi
mov dword [esp + 0x34], 0xb7
xor ecx, ecx
mov dword [esp + 0x70], 0
test dl, 0x20
je 0x49586b
mov eax, dword [edi + 0x38]
lea edi, [esi + 4]
mov ecx, dword [eax]
jmp 0x49586d
xor edi, edi
test dl, 0x10
je 0x49587c
mov eax, dword [esp + 0x28]
mov eax, dword [eax + 0x38]
mov esi, dword [edi + eax]
mov edx, dword [esp + 0x44]
mov eax, ecx
test edx, edx
cmove eax, esi
cmove esi, ecx
mov dword [esp + 0x68], eax
test esi, esi
je 0x49594c
mov edi, dword [esi]
mov dword [esp + 0x20], 0x16141517
mov ecx, dword [edi + 0x10]
call fcn.00456140
mov ecx, dword [esp + 0x1c]
cmp eax, 1
jle 0x4958e3
call fcn.0045eb00
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0xe8], eax
mov edx, dword [edi + 0x10]
push 1
push eax
mov dword [esp + 0x34], eax
call fcn.00494bb0
movzx eax, byte [edi]
add esp, 8
inc eax
and eax, 2
or eax, 1
mov al, byte [esp + eax + 0x20]
jmp 0x49590c
mov edx, dword [edi + 0x10]
lea eax, [esp + 0xe8]
push eax
call fcn.0045ccd0
mov ecx, dword [esp + 0x1c]
add esp, 4
mov edx, esi
mov dword [esp + 0x2c], eax
call fcn.00493c00
movzx eax, byte [edi]
mov al, byte [esp + eax - 0x16]
push dword [esp + 0x2c]
mov ecx, dword [esp + 0x18]
push dword [esp + 0x64]
movzx edx, al
push dword [esp + 0x40]
call fcn.0043fd40
mov ecx, dword [esp + 0xf4]
add esp, 0xc
mov edx, dword [esp + 0x1c]
test ecx, ecx
je 0x495970
mov al, byte [edx + 0x13]
cmp al, 8
jae 0x495970
movzx eax, al
mov dword [edx + eax*4 + 0x98], ecx
inc byte [edx + 0x13]
jmp 0x495970
mov ecx, dword [esp + 0x14]
xor edx, 1
push 0
push dword [esp + 0x54]
push dword [esp + 0x40]
lea edx, [edx*4 + 0x1f]
call fcn.0043fd40
mov edx, dword [esp + 0x28]
add esp, 0xc
mov edi, dword [esp + 0x68]
test edi, edi
je 0x4959e4
mov esi, dword [edi]
inc dword [edx + 0x2c]
mov eax, dword [edx + 0x2c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esi + 0x10]
push 1
push eax
mov dword [esp + 0x78], eax
call fcn.00494bb0
mov ecx, dword [esi + 0x10]
add esp, 8
call fcn.00456140
cmp eax, 1
jg 0x4959bd
mov al, byte [esi]
cmp al, 0x38
je 0x4959ad
cmp al, 0x36
jne 0x4959bd
mov eax, dword [esp + 0x44]
xor eax, 1
lea eax, [eax*2 + 0x37]
jmp 0x4959c8
mov eax, dword [esp + 0x44]
lea eax, [eax*2 + 0x36]
mov ecx, dword [esi + 0x10]
mov dword [esp + 0x34], eax
call fcn.00456140
cmp eax, 1
jg 0x4959e4
mov ecx, dword [esp + 0x18]
mov edx, edi
call fcn.00493c00
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x44], 0
mov edx, dword [esp + 0x18]
mov edi, dword [esp + 0x34]
mov ecx, dword [eax + 0x6c]
sete al
add al, 0x25
mov byte [edx + 0x3d], al
mov eax, dword [esp + 0x38]
mov dword [edx + 0x40], eax
mov dword [edx + 0x44], ecx
cmp edi, 0xb7
je 0x496c93
mov eax, dword [esp + 0x1c]
mov edx, 0x87
mov ecx, dword [esp + 0x14]
push 0
inc dword [eax + 0x2c]
mov esi, dword [eax + 0x2c]
push esi
push dword [esp + 0x40]
call fcn.0043fd40
add esp, 0xc
mov edx, edi
push esi
push dword [esp + 0x64]
mov esi, dword [esp + 0x1c]
mov ecx, esi
push dword [esp + 0x78]
call fcn.0043fd40
mov eax, dword [esi + 0x6c]
add esp, 0xc
mov edi, dword [esp + 0x18]
test eax, eax
jle 0x496c99
lea ecx, [eax + eax*4]
mov edx, 0x53
mov eax, dword [esi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
jmp 0x496c99
test edx, 0x200
je 0x4964cf
movzx ecx, word [edi + 0x18]
xor esi, esi
movzx edi, word [edi + 0x1a]
mov eax, edi
mov dword [esp + 0x50], ecx
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x6c], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x30], esi
movzx eax, word [eax + 0x1c]
mov dword [esp + 0x70], eax
xor eax, eax
mov dword [esp + 0x34], eax
mov byte [esp + 0x27], al
mov byte [esp + 0x7b], al
mov dword [esp + 0x5c], eax
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x28]
mov eax, dword [eax + 0x20]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x18]
mov eax, dword [eax + 8]
mov dword [esp + 0x4c], eax
movzx eax, cx
mov dword [esp + 0x48], eax
mov ecx, eax
test dl, 0x20
je 0x495b04
mov eax, dword [esp + 0x28]
mov esi, edi
mov dword [esp + 0x30], edi
mov eax, dword [eax + 0x38]
mov eax, dword [eax + ecx*4]
inc ecx
mov dword [esp + 0x6c], eax
test dl, 0x10
je 0x495bd8
mov edi, dword [esp + 0x28]
mov dword [esp + 0x60], edx
mov eax, dword [edi + 0x38]
movzx edi, word [edi + 0x1c]
cmp esi, edi
mov ecx, dword [eax + ecx*4]
cmova edi, esi
mov eax, edx
mov dword [esp + 0x20], ecx
mov edx, 0x100
test word [ecx + 0xa], dx
je 0x495b92
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
push 0
mov eax, dword [ecx + 0x2c]
inc eax
mov dword [ecx + 0x2c], eax
mov ecx, esi
push eax
mov dword [edx + 0x2c], eax
mov edx, 0x47
push 1
call fcn.0043fd40
mov eax, dword [esi + 0x6c]
xor ecx, ecx
mov esi, dword [esp + 0x24]
add esp, 0xc
mov edx, dword [esp + 0x48]
shl dword [esi + 0x2c], 1
mov dword [esi + 0x30], eax
mov eax, dword [esp + 0x58]
mov eax, dword [eax + 0x1c]
cmp byte [edx + eax], 1
mov eax, dword [esp + 0x28]
sete cl
xor ecx, dword [esp + 0x44]
or dword [esi + 0x2c], ecx
mov eax, dword [eax + 0x2c]
mov dword [esp + 0x60], eax
cmp dword [esp + 0x6c], 0
mov edx, eax
mov esi, edi
jne 0x495bdc
mov edx, dword [esp + 0x58]
mov ecx, dword [esp + 0x48]
mov eax, dword [edx + 4]
movsx esi, word [eax + ecx*2]
test esi, esi
js 0x495bc5
mov eax, dword [edx + 0xc]
mov ecx, esi
add ecx, ecx
mov eax, dword [eax + 4]
test byte [eax + ecx*8 + 4], 0xf
je 0x495d0e
mov eax, dword [esp + 0x60]
mov edx, eax
mov dword [esp + 0x30], edi
cmp esi, 0xfffffffe
je 0x495d12
mov esi, dword [esp + 0x30]
test dl, 0x30
jne 0x495c2e
test edx, 0x80000
je 0x495c2e
mov ecx, dword [esp + 0x1c]
mov esi, 1
mov edi, dword [esp + 0x18]
mov byte [esp + 0x27], 1
inc dword [ecx + 0x2c]
cmp dword [edi], 0
mov eax, dword [ecx + 0x2c]
mov dword [esp + 0x5c], eax
mov dword [edi + 0x24], eax
je 0x495c25
mov ecx, dword [esp + 0x14]
lea edx, [esi + 0x46]
push 0
push eax
push 0
call fcn.0043fd40
mov ecx, dword [esp + 0x28]
add esp, 0xc
dec dword [ecx + 0x38]
mov eax, dword [ecx + 0x38]
mov dword [edi + 0x28], eax
mov eax, dword [esp + 0x58]
mov edi, dword [esp + 0x50]
cmp di, word [eax + 0x34]
jae 0x495c84
mov eax, dword [eax + 0x1c]
xor ecx, ecx
mov edx, dword [esp + 0x48]
cmp byte [edx + eax], cl
sete cl
cmp dword [esp + 0x44], ecx
jne 0x495c84
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x70]
mov dword [esp + 0x6c], eax
mov al, byte [esp + 0x27]
mov byte [esp + 0x7b], al
mov eax, dword [esp + 0x74]
mov dword [esp + 0x20], ecx
movzx ecx, dx
movzx eax, al
mov byte [esp + 0x27], 0
mov dword [esp + 0x74], ecx
mov dword [esp + 0x70], eax
cmp dword [ebp + 0xc], 0
jle 0x495cb0
mov eax, dword [esp + 0x28]
test dword [eax + 0x2c], 0x100000
je 0x495cb0
mov ecx, dword [esp + 0x14]
mov edx, 0x88
push 0
push 0
push dword [esp + 0x54]
call fcn.0043fd40
add esp, 0xc
mov edx, dword [esp + 0x18]
lea eax, [esp + 0xe8]
mov ecx, dword [esp + 0x1c]
push eax
push esi
push dword [esp + 0x4c]
call fcn.00494570
mov esi, dword [esp + 0x54]
mov edx, eax
mov eax, dword [esp + 0xf4]
add esp, 0xc
mov dword [esp + 0x54], edx
test eax, eax
je 0x495cfe
cmp word [esp + 0x70], 0
je 0x495cfe
mov ecx, dword [esp + 0x64]
lea edx, [esi + eax]
call fcn.0041e440
mov edx, dword [esp + 0x54]
mov dword [esp + 0x34], eax
cmp dword [esp + 0x5c], 0
mov eax, dword [esp + 0x18]
je 0x495d20
mov eax, dword [eax + 0x28]
jmp 0x495d23
mov eax, dword [esp + 0x60]
mov byte [esp + 0x27], 1
mov edx, eax
mov esi, edi
jmp 0x495bdc
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x3c], eax
test ecx, ecx
je 0x495d3d
test byte [ecx + 0xc], 0x28
mov dword [esp + 0x30], 0
je 0x495d45
mov dword [esp + 0x30], 1
mov eax, dword [esp + 0x20]
test eax, eax
je 0x495d5b
test byte [eax + 0xc], 0x28
jne 0x495d5b
xor eax, eax
mov dword [esp + 0x60], eax
jmp 0x495d63
mov dword [esp + 0x60], 1
test ecx, ecx
jne 0x495db0
test di, di
jne 0x495db0
xor eax, eax
mov dword [esp + 0x68], eax
mov al, byte [esp + 0x27]
mov edi, esi
test al, al
je 0x495e84
mov dword [esp + 0x30], 0
mov ecx, dword [esp + 0x14]
lea eax, [edx + esi]
push 0
push eax
push 0
mov edx, 0x4b
call fcn.0043fd40
mov al, byte [esp + 0x33]
add esp, 0xc
mov esi, 1
inc edi
jmp 0x495e93
mov eax, 1
mov edi, esi
mov dword [esp + 0x68], eax
test ecx, ecx
je 0x495d72
mov eax, dword [ecx]
mov esi, dword [eax + 0x10]
mov eax, dword [esp + 0x74]
movzx ecx, ax
mov eax, dword [esp + 0x48]
add eax, edx
mov edx, esi
push ecx
mov ecx, dword [esp + 0x20]
push eax
call fcn.00494bb0
push dword [esp + 0x74]
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
call fcn.004949d0
mov eax, dword [esp + 0x78]
add esp, 0xc
test byte [eax + 0xa], 0x80
jne 0x495e27
mov ecx, esi
call fcn.004588a0
test eax, eax
je 0x495e27
mov eax, dword [esp + 0x48]
mov edx, 0x32
add eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x14]
push 0
push dword [esp + 0x40]
push eax
call fcn.0043fd40
add esp, 0xc
mov eax, dword [esp + 0xe8]
test eax, eax
je 0x495e48
add eax, dword [esp + 0x48]
mov ecx, esi
push eax
mov eax, dword [esp + 0x78]
movzx edx, ax
call fcn.00493cc0
add esp, 4
mov ecx, dword [esp + 0x74]
movzx eax, cx
mov ecx, esi
add edi, eax
call fcn.00456140
cmp eax, 1
jg 0x495e73
mov edx, dword [esp + 0x6c]
mov ecx, dword [esp + 0x18]
call fcn.00493c00
xor al, al
mov esi, 1
jmp 0x495e93
mov dword [esp + 0x30], 1
xor al, al
mov esi, 1
jmp 0x495e93
cmp dword [esp + 0x5c], 0
jne 0x495d88
mov esi, dword [esp + 0x68]
push dword [esp + 0xe8]
mov edx, dword [esp + 0x58]
movzx ecx, al
mov eax, edi
sub eax, ecx
mov dword [esp + 0x54], ecx
mov ecx, dword [esp + 0x20]
push eax
call fcn.00493c70
mov eax, dword [esp + 0x30]
add esp, 8
movzx eax, word [eax + 0x32]
test ax, ax
je 0x495ecb
cmp edi, eax
je 0x496052
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x495ee9
mov ecx, dword [esp + 0x14]
mov edx, 0x47
push 0
push eax
push 1
call fcn.0043fd40
add esp, 0xc
mov eax, dword [esp + 0x18]
mov eax, dword [eax + 0x34]
test eax, eax
je 0x495f55
mov ecx, dword [esp + 0x54]
mov edx, 0x3f
push ecx
push dword [esp + 0x40]
mov ecx, dword [esp + 0x1c]
push eax
call fcn.0043fd40
mov edx, dword [esp + 0x20]
mov ecx, eax
add esp, 0xc
mov eax, dword [edx]
cmp byte [eax + 0x57], 0
jne 0x495f30
mov eax, dword [edx + 0x68]
lea ecx, [ecx + ecx*4]
mov edx, dword [esp + 0x48]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edx
push dword [esp + 0x88]
mov edx, dword [esp + 0x44]
push dword [esp + 0x88]
mov ecx, dword [esp + 0x24]
push dword [esp + 0x44]
push dword [ebp + 0xc]
call fcn.00494ff0
add esp, 0x10
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x44]
lea eax, [eax + esi*2]
movzx esi, byte [ecx + eax*2 + 0x567508]
mov eax, dword [esp + 0x28]
test dword [eax + 0x2c], 0x100000
je 0x495fb0
cmp esi, 0x16
jne 0x495fb0
mov eax, dword [esp + 0x58]
push 0
push 0
mov eax, dword [eax + 8]
movsx ecx, word [eax]
mov eax, 0x66666667
add ecx, 9
imul ecx
mov ecx, dword [esp + 0x1c]
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [esi + 0x66]
push eax
call fcn.0043fd40
add esp, 0xc
mov dword [esp + 0x2c], eax
push dword [esp + 0x54]
mov edx, esi
mov esi, dword [esp + 0x18]
push dword [esp + 0x40]
mov ecx, esi
push dword [esp + 0x54]
call fcn.0043fd40
mov ecx, eax
add esp, 0xc
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x495fe5
mov eax, dword [esi + 0x68]
lea ecx, [ecx + ecx*4]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edi
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x496056
mov eax, dword [esi + 0x6c]
mov edx, 8
push 0
add eax, 2
mov ecx, esi
push eax
push 0
call fcn.0043fd40
mov ecx, dword [esp + 0x50]
add esp, 0xc
mov eax, 1
cmp eax, edi
push dword [esp + 0x54]
sbb eax, eax
push dword [esp + 0x40]
and eax, 4
push dword [esp + 0x54]
movzx edx, byte [eax + ecx + 0x56750a]
mov ecx, esi
call fcn.0043fd40
mov ecx, eax
add esp, 0xc
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x496052
mov eax, dword [esi + 0x68]
lea ecx, [ecx + ecx*4]
sub edi, dword [esp + 0x30]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edi
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x48]
mov esi, ecx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x30], esi
test edx, edx
je 0x49620a
cmp dword [esp + 0x2c], 0
mov eax, dword [edx]
mov esi, dword [eax + 0x10]
je 0x496086
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [eax + 0x6c]
mov dword [edx + 0x44], eax
mov eax, dword [esp + 0x70]
mov edx, esi
movzx edi, ax
mov eax, dword [esp + 0x54]
add eax, ecx
mov ecx, dword [esp + 0x1c]
push edi
push eax
call fcn.00494bb0
push dword [esp + 0x28]
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
call fcn.004949d0
mov eax, dword [esp + 0x2c]
add esp, 0xc
test byte [eax + 0xa], 0x80
jne 0x4960e9
mov ecx, esi
call fcn.004588a0
test eax, eax
je 0x4960e9
mov eax, dword [esp + 0x54]
mov edx, 0x32
add eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x14]
push 0
push dword [esp + 0x40]
push eax
call fcn.0043fd40
add esp, 0xc
mov eax, dword [esp + 0x34]
test eax, eax
je 0x49611b
push eax
mov edx, edi
mov ecx, esi
call fcn.00493cc0
mov ecx, dword [esp + 0x58]
add esp, 4
mov edx, dword [esp + 0x48]
mov eax, dword [esp + 0x34]
push eax
lea edx, [ecx + edx]
mov ecx, dword [esp + 0x20]
push edi
call fcn.00493c70
add esp, 8
add dword [esp + 0x30], edi
mov ecx, esi
call fcn.00456140
cmp eax, 1
jg 0x4961fc
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
call fcn.00493c00
mov esi, dword [esp + 0x30]
mov edi, dword [esp + 0x60]
mov edx, dword [esp + 0xe8]
test edx, edx
je 0x496158
mov ecx, dword [esp + 0x64]
call fcn.0041def0
mov eax, dword [esp + 0x34]
test eax, eax
je 0x49616b
mov ecx, dword [esp + 0x64]
mov edx, eax
call fcn.0041def0
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
cmp dword [ecx + 0x44], 0
jne 0x49617f
mov eax, dword [edx + 0x6c]
mov dword [ecx + 0x44], eax
test esi, esi
je 0x496246
mov ecx, dword [esp + 0x5c]
test ecx, ecx
je 0x4961aa
mov eax, dword [edx + 0x6c]
mov edx, 0x10
push 0
add eax, 3
push eax
push ecx
mov ecx, dword [esp + 0x20]
call fcn.0043fd40
add esp, 0xc
mov eax, dword [esp + 0x44]
push dword [esp + 0x54]
push dword [esp + 0x40]
movzx edx, byte [edi + eax*2 + 0x56871c]
push dword [esp + 0x54]
mov edi, dword [esp + 0x20]
mov ecx, edi
call fcn.0043fd40
mov ecx, eax
add esp, 0xc
mov eax, dword [edi]
cmp byte [eax + 0x57], 0
jne 0x4961e9
mov eax, dword [edi + 0x68]
lea ecx, [ecx + ecx*4]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], esi
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x49624a
mov edx, eax
mov ecx, edi
call fcn.00440760
jmp 0x49624a
mov esi, dword [esp + 0x30]
mov edi, 1
jmp 0x496144
cmp byte [esp + 0x7b], 0
je 0x496140
test eax, eax
jne 0x49623c
push eax
mov eax, dword [esp + 0x58]
mov edx, 0x4b
add eax, ecx
mov ecx, dword [esp + 0x18]
push eax
push 0
call fcn.0043fd40
add esp, 0xc
xor edi, edi
inc esi
jmp 0x496144
mov edi, dword [esp + 0x60]
inc esi
jmp 0x496144
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0x5c]
test ecx, ecx
je 0x4962b5
mov eax, dword [edi + 0x6c]
mov edx, 0xf
push 0
add eax, 2
push eax
push ecx
mov ecx, edi
call fcn.0043fd40
mov eax, dword [esp + 0x50]
add esp, 0xc
mov edi, dword [esp + 0x50]
mov ecx, dword [esp + 0x14]
push dword [esp + 0x54]
movzx edx, byte [edi + eax*2 + 0x56871c]
push dword [esp + 0x40]
push dword [esp + 0x54]
call fcn.0043fd40
mov edx, dword [esp + 0x20]
mov ecx, eax
add esp, 0xc
mov eax, dword [edx]
cmp byte [eax + 0x57], 0
jne 0x4962b5
mov eax, dword [edx + 0x68]
lea ecx, [ecx + ecx*4]
mov byte [eax + ecx*4 + 1], 0xfd
lea ecx, [eax + ecx*4]
lea eax, [edi + esi]
mov dword [ecx + 0x10], eax
mov esi, dword [esp + 0x28]
mov eax, dword [esi + 0x2c]
test eax, 0x40000
je 0x4962e1
mov eax, dword [esp + 0x48]
mov edx, 0x7d
mov ecx, dword [esp + 0x14]
push eax
push eax
push dword [esp + 0x54]
call fcn.0043fd40
mov eax, dword [esi + 0x2c]
add esp, 0xc
mov ecx, dword [esp + 0x40]
mov edx, 0x1020
test al, 0x40
je 0x4962fe
test word [ecx + 0x2c], dx
jne 0x4962fe
mov edi, 1
jmp 0x496434
mov eax, dword [esp + 0x58]
xor edi, edi
mov esi, dword [eax + 0xc]
test byte [esi + 0x1c], 0x80
jne 0x49632a
push dword [esp + 0x4c]
mov esi, eax
push dword [esp + 0x3c]
mov edx, esi
call fcn.00494a30
mov eax, dword [esp + 0x54]
add esp, 8
jmp 0x49643c
mov eax, dword [esp + 0x4c]
cmp dword [esp + 0x38], eax
je 0x496438
mov esi, dword [esi + 8]
test esi, esi
je 0x496350
nop
mov eax, dword [esi + 0x38]
and al, 3
cmp al, 2
je 0x496350
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x496340
movzx edx, word [esi + 0x32]
mov ecx, dword [esp + 0x1c]
call fcn.0045eb40
mov dword [esp + 0x68], eax
xor edi, edi
movzx eax, word [esi + 0x32]
mov ecx, eax
mov dword [esp + 0x2c], edi
mov dword [esp + 0x50], ecx
xor ecx, ecx
cmp cx, ax
jae 0x4963ee
nop dword [eax + eax]
mov eax, dword [esp + 0x58]
xor ecx, ecx
movzx edx, word [eax + 0x34]
test edx, edx
je 0x4963b1
mov eax, dword [esi + 4]
movzx edi, word [eax + edi*2]
mov eax, dword [esp + 0x58]
mov eax, dword [eax + 4]
nop dword [eax]
cmp di, word [eax]
je 0x4963e5
inc ecx
add eax, 2
cmp ecx, edx
jl 0x4963a0
mov edi, dword [esp + 0x2c]
or ecx, 0xffffffff
mov eax, dword [esp + 0x68]
mov edx, 0x5e
add eax, edi
push eax
movsx eax, cx
mov ecx, dword [esp + 0x18]
push eax
push dword [esp + 0x54]
call fcn.0043fd40
movzx ecx, word [esi + 0x32]
inc edi
add esp, 0xc
mov dword [esp + 0x2c], edi
cmp edi, ecx
jl 0x496380
mov esi, ecx
jmp 0x4963f2
mov edi, dword [esp + 0x2c]
movzx ecx, cx
jmp 0x4963b4
mov esi, dword [esp + 0x50]
push dword [esp + 0x68]
mov edi, dword [esp + 0x18]
mov edx, 0x1b
push dword [esp + 0x90]
mov ecx, edi
push dword [esp + 0x40]
call fcn.0043fd40
mov ecx, eax
add esp, 0xc
mov eax, dword [edi]
cmp byte [eax + 0x57], 0
jne 0x496432
mov eax, dword [edi + 0x68]
lea ecx, [ecx + ecx*4]
mov byte [eax + ecx*4 + 1], 0xfd
lea ecx, [eax + ecx*4]
movzx eax, si
mov dword [ecx + 0x10], eax
xor edi, edi
mov eax, dword [esp + 0x4c]
mov esi, dword [esp + 0x58]
mov edx, dword [esp + 0x18]
cmp dword [edx], 0
jne 0x49647b
mov ecx, dword [esp + 0x40]
mov edx, 0x1020
test word [ecx + 0x2c], dx
jne 0x496464
mov edx, dword [esp + 0x38]
push ecx
push eax
mov ecx, esi
call fcn.00494da0
add esp, 8
mov ecx, dword [esi + 0x24]
test ecx, ecx
je 0x49647b
push dword [esp + 0x7c]
mov edx, dword [esp + 0x3c]
call fcn.00494f70
add esp, 4
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x18]
test dword [ecx + 0x2c], 0x1000
je 0x496492
mov byte [edx + 0x3d], 0xb7
jmp 0x49649f
cmp dword [esp + 0x44], 0
sete al
add al, 0x25
mov byte [edx + 0x3d], al
mov eax, dword [esp + 0x4c]
mov dword [edx + 0x40], eax
mov al, byte [ecx + 0x2e]
and al, 1
mov byte [edx + 0x3e], al
test byte [ecx + 0x2c], 0xf
jne 0x4964b8
mov byte [edx + 0x3f], 1
test edi, edi
mov edi, 0
cmove edi, esi
mov dword [esp + 0x54], edi
mov edi, dword [esp + 0x18]
jmp 0x496c99
test edx, 0x2000
je 0x496c47
mov esi, dword [esp + 0x1c]
mov dword [esp + 0x70], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
mov eax, dword [esi + 0x28]
dec dword [esi + 0x38]
inc dword [esi + 0x2c]
mov dword [esp + 0x28], eax
inc eax
mov dword [esi + 0x28], eax
mov eax, dword [esi + 0x38]
mov edx, dword [esi + 0x2c]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x44], edx
mov dword [esp + 0x2c], 0
mov dword [esp + 0x3c], 0
mov ecx, dword [eax + 0x10]
mov eax, dword [edi + 0x38]
mov edi, dword [esp + 0x40]
mov dword [esp + 0x6c], ecx
mov eax, dword [eax]
mov dword [esp + 0x58], eax
mov eax, dword [eax + 0x18]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x18]
mov byte [eax + 0x3d], 0x43
mov dword [eax + 0x40], edx
mov al, byte [edi + 0x30]
cmp al, 1
jbe 0x496691
mov ecx, dword [esp + 0x64]
movzx eax, al
sub eax, dword [ebp + 0xc]
dec eax
mov dword [esp + 0x68], eax
push 0
lea eax, [eax + eax*8]
lea eax, [eax*8 + 0x50]
push eax
test ecx, ecx
je 0x49658b
call fcn.0041e1f0
mov esi, eax
mov dword [esp + 0x64], esi
jmp 0x496596
call fcn.0041dc00
mov esi, eax
mov dword [esp + 0x64], eax
add esp, 8
test esi, esi
jne 0x4965bf
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x88]
pop edi
pop esi
mov ecx, dword [esp + 0xe4]
xor ecx, esp
call fcn.00518690
mov esp, ebp
pop ebp
ret
mov edx, dword [esp + 0x68]
lea eax, [edx + 1]
movzx eax, al
mov dword [esi + 4], eax
mov dword [esi], eax
mov eax, dword [esp + 0x80]
movups xmm0, xmmword [eax]
movups xmmword [esi + 8], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [esi + 0x18], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [esi + 0x28], xmm0
movups xmm0, xmmword [eax + 0x30]
movups xmmword [esi + 0x38], xmm0
movq xmm0, qword [eax + 0x40]
movq qword [esi + 0x48], xmm0
mov edi, dword [edi + 4]
cmp edx, 1
jl 0x496653
lea ecx, [esi + 0x50]
mov esi, dword [esp + 0x18]
add esi, 0x9c
movzx eax, byte [esi]
lea esi, [esi + 0x60]
lea ecx, [ecx + 0x48]
lea eax, [eax + eax*8]
movups xmm0, xmmword [edi + eax*8 + 8]
movups xmmword [ecx - 0x48], xmm0
movups xmm0, xmmword [edi + eax*8 + 0x18]
movups xmmword [ecx - 0x38], xmm0
movups xmm0, xmmword [edi + eax*8 + 0x28]
movups xmmword [ecx - 0x28], xmm0
movups xmm0, xmmword [edi + eax*8 + 0x38]
movups xmmword [ecx - 0x18], xmm0
movq xmm0, qword [edi + eax*8 + 0x48]
movq qword [ecx - 8], xmm0
sub edx, 1
jne 0x496613
mov edi, dword [esp + 0x40]
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x6c]
test byte [edi + 0x2c], 0x10
jne 0x496707
test byte [ecx + 0x1c], 0x80
jne 0x49669a
inc dword [esi + 0x2c]
mov edx, 0x4b
mov eax, dword [esi + 0x2c]
mov ecx, dword [esp + 0x14]
push 0
push eax
push 0
mov dword [esp + 0x3c], eax
call fcn.0043fd40
add esp, 0xc
jmp 0x4966fd
mov eax, dword [edi + 4]
mov dword [esp + 0x5c], eax
jmp 0x49665f
mov esi, dword [ecx + 8]
test esi, esi
je 0x4966b1
mov eax, dword [esi + 0x38]
and al, 3
cmp al, 2
je 0x4966b1
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x4966a1
mov edi, dword [esp + 0x1c]
mov edx, 0x76
push 0
mov ecx, dword [edi + 0x28]
mov dword [esp + 0x34], ecx
lea eax, [ecx + 1]
mov dword [edi + 0x28], eax
movzx eax, word [esi + 0x32]
push eax
push ecx
mov ecx, dword [esp + 0x20]
call fcn.0043fd40
mov edi, dword [edi + 8]
add esp, 0xc
mov edx, esi
mov esi, dword [esp + 0x1c]
mov ecx, esi
call fcn.0046c590
test eax, eax
je 0x4966fd
push 0xfffffffffffffff8
mov edx, eax
mov ecx, edi
call fcn.00440b30
add esp, 4
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x14]
mov edx, 0x47
push 0
push dword [esp + 0x48]
push 0
call fcn.0043fd40
mov dword [esp + 0xa4], eax
add esp, 0xc
mov eax, dword [esp + 0x7c]
mov ecx, dword [eax + 0xc]
cmp ecx, 1
jle 0x4967d7
xor edi, edi
test ecx, ecx
jle 0x4967d7
mov ecx, dword [esp + 0x58]
xor esi, esi
mov edx, 0x8006
jmp 0x496754
mov eax, dword [esp + 0x7c]
mov eax, dword [eax + 0x18]
add eax, esi
cmp eax, ecx
je 0x4967a1
test word [eax + 0xa], dx
jne 0x4967a1
mov edx, 0x1fff
test word [eax + 0xc], dx
je 0x4967a1
mov edx, dword [eax]
test dword [edx + 4], 0x400000
jne 0x4967a1
mov ecx, dword [esp + 0x64]
push 0
push 0
call fcn.004572f0
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x24]
push eax
call fcn.00456ce0
mov ecx, dword [esp + 0x64]
add esp, 0xc
mov dword [esp + 0x3c], eax
jmp 0x4967a5
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x7c]
inc edi
add esi, 0x30
cmp edi, dword [edx + 0xc]
mov edx, 0x8006
jl 0x496750
mov esi, dword [esp + 0x1c]
test eax, eax
je 0x4967db
push eax
push 0
mov edx, 0x1002c
mov ecx, esi
call fcn.00456af0
add esp, 8
mov dword [esp + 0x3c], eax
jmp 0x4967db
mov esi, dword [esp + 0x1c]
push str.MULTI_INDEX_OR
push 1
push esi
call fcn.00440270
mov edx, dword [esp + 0x6c]
xor ecx, ecx
add esp, 0xc
mov dword [esp + 0x20], ecx
cmp dword [edx + 0xc], ecx
jle 0x49687e
mov edi, 0x400
lea eax, [ecx + ecx*2]
shl eax, 4
add eax, dword [edx + 0x18]
mov edx, dword [esp + 0x38]
cmp dword [eax + 0x14], edx
je 0x49681b
test word [eax + 0xc], di
je 0x49686e
mov edx, dword [eax]
xor edi, edi
mov dword [esp + 0x4c], edi
test edx, edx
je 0x49683d
mov ecx, dword [esp + 0x64]
push edi
push edi
call fcn.004572f0
mov ecx, dword [esp + 0x28]
add esp, 8
mov esi, eax
jmp 0x49683f
xor esi, esi
mov eax, dword [esp + 0x64]
mov dword [esp + 0x90], esi
cmp byte [eax + 0x57], 0
je 0x4968e6
test esi, esi
je 0x496865
mov edx, esi
mov ecx, eax
call fcn.004570e0
mov ecx, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
mov edi, 0x400
mov eax, dword [esp + 0x60]
inc ecx
mov dword [esp + 0x20], ecx
mov edx, eax
cmp ecx, dword [eax + 0xc]
jl 0x496803
mov ecx, esi
call fcn.00440230
mov edi, dword [esp + 0x18]
mov dword [esi + 0xdc], eax
mov eax, dword [esp + 0x70]
mov dword [edi + 0x48], eax
test eax, eax
je 0x4968a1
mov eax, dword [esp + 0x28]
mov dword [edi + 8], eax
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x4968bb
mov ecx, dword [esp + 0x64]
mov edx, eax
mov dword [eax + 0xc], 0
call fcn.004570e0
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0x98]
mov edx, dword [esi + 0x6c]
test ecx, ecx
jns 0x4968d0
lea ecx, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x496be3
mov eax, 0x629608
jmp 0x496bec
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x4968f3
mov dword [eax + 0xc], esi
mov esi, eax
lea eax, [ecx + 1]
push eax
push str.INDEX__d
push 1
push dword [esp + 0x28]
call fcn.00440270
push dword [esp + 0x38]
mov edx, dword [esp + 0x70]
mov ecx, dword [esp + 0x30]
push 0x20
push 0
push 0
push 0
push esi
call fcn.004a0670
mov esi, eax
add esp, 0x28
mov dword [esp + 0x48], esi
test esi, esi
je 0x496bc0
mov edx, dword [esp + 0x5c]
lea ecx, [esi + 0x300]
push 0
push ecx
mov ecx, dword [esp + 0x24]
call fcn.00493690
mov eax, dword [esp + 0x48]
add esp, 8
test byte [eax + 0x2c], 0x10
jne 0x496b13
mov eax, dword [esp + 0x60]
mov esi, dword [esp + 0x20]
mov eax, dword [eax + 0xc]
dec eax
cmp esi, eax
mov eax, 0xffffffff
cmove esi, eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x68], esi
test byte [eax + 0x1c], 0x80
jne 0x4969d4
mov edi, dword [esp + 0x34]
mov edx, eax
mov ecx, dword [esp + 0x14]
push edi
push 0xffffffffffffffff
push dword [esp + 0x40]
call fcn.0045b200
mov ecx, dword [esp + 0x20]
add esp, 0xc
mov edx, 0x2e
push edi
push 0
push dword [esp + 0x38]
call fcn.0043fd40
mov edx, dword [esp + 0x20]
mov edi, eax
add esp, 0xc
mov eax, dword [edx]
cmp byte [eax + 0x57], 0
jne 0x496b0f
mov eax, dword [edx + 0x68]
lea ecx, [edi + edi*4]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], esi
jmp 0x496b0f
mov esi, dword [eax + 8]
test esi, esi
je 0x4969f0
nop dword [eax + eax]
mov eax, dword [esi + 0x38]
and al, 3
cmp al, 2
je 0x4969f0
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x4969e0
movzx eax, word [esi + 0x32]
mov ecx, dword [esp + 0x1c]
mov edx, eax
mov dword [esp + 0x74], eax
call fcn.0045eb40
xor edi, edi
mov dword [esp + 0xe8], eax
cmp dword [esp + 0x74], edi
jbe 0x496a40
mov edx, dword [esp + 0x6c]
lea ecx, [edi + eax]
mov eax, dword [esi + 4]
push ecx
mov ecx, dword [esp + 0x18]
movsx eax, word [eax + edi*2]
push eax
push dword [esp + 0x40]
call fcn.0045b200
mov eax, dword [esp + 0xf4]
inc edi
add esp, 0xc
cmp edi, dword [esp + 0x74]
jl 0x496a12
mov esi, dword [esp + 0x68]
test esi, esi
je 0x496a85
mov edi, dword [esp + 0x14]
mov edx, 0x1c
push eax
push 0
push dword [esp + 0x38]
mov ecx, edi
call fcn.0043fd40
mov ecx, eax
add esp, 0xc
mov eax, dword [edi]
mov dword [esp + 0x4c], ecx
cmp byte [eax + 0x57], 0
jne 0x496a83
mov eax, dword [edi + 0x68]
lea ecx, [ecx + ecx*4]
mov edx, dword [esp + 0x74]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edx
test esi, esi
mov esi, dword [esp + 0x74]
mov edi, dword [esp + 0xe8]
js 0x496afc
push dword [esp + 0x34]
mov ecx, dword [esp + 0x18]
mov edx, 0x61
push esi
push edi
call fcn.0043fd40
mov ecx, dword [esp + 0x20]
add esp, 0xc
mov edx, 0x8a
push edi
push dword [esp + 0x38]
push dword [esp + 0x38]
call fcn.0043fd40
mov edx, dword [esp + 0x20]
add esp, 0xc
mov ecx, dword [edx]
cmp byte [ecx + 0x57], 0
jne 0x496ade
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0x68]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], esi
cmp dword [esp + 0x68], 0
je 0x496afc
mov eax, dword [edx + 0x6c]
test eax, eax
jle 0x496afc
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0x68]
mov edx, 0x10
mov word [eax + ecx*4 - 0x12], dx
mov ecx, dword [esp + 0x1c]
mov edx, edi
push esi
call fcn.0045eba0
mov edi, dword [esp + 0x50]
add esp, 4
mov esi, dword [esp + 0x48]
mov ecx, dword [esp + 0x14]
mov edx, 9
push 0
push dword [esp + 0x54]
push dword [esp + 0x4c]
call fcn.0043fd40
add esp, 0xc
test edi, edi
je 0x496b3d
mov ecx, dword [esp + 0x14]
mov edx, edi
call fcn.00440760
mov edx, dword [esi + 0x34]
mov ecx, 1
mov eax, dword [esp + 0x2c]
test dl, 2
cmovne eax, ecx
mov ecx, dword [esi + 0x350]
mov dword [esp + 0x2c], eax
test dword [ecx + 0x2c], 0x200
je 0x496b91
cmp dword [esp + 0x20], 0
je 0x496b72
mov eax, dword [esp + 0x70]
cmp dword [ecx + 0x20], eax
jne 0x496b91
mov eax, dword [esp + 0x6c]
test byte [eax + 0x1c], 0x80
je 0x496b88
mov eax, dword [ecx + 0x20]
mov eax, dword [eax + 0x38]
and al, 3
cmp al, 2
je 0x496b91
mov eax, dword [ecx + 0x20]
mov dword [esp + 0x70], eax
jmp 0x496b99
mov dword [esp + 0x70], 0
test dl, 1
je 0x496ba6
mov eax, dword [esp + 0x40]
or dword [eax + 0x34], 1
mov ecx, esi
call fcn.004a13a0
mov esi, dword [esp + 0x1c]
mov ecx, esi
call fcn.00440230
mov dword [esi + 0xdc], eax
jmp 0x496bc4
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x90]
test eax, eax
je 0x496bda
mov ecx, dword [esp + 0x64]
mov edx, eax
call fcn.004570e0
mov ecx, dword [esp + 0x20]
jmp 0x496869
mov eax, dword [esi + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 4], edx
mov ecx, esi
push 0
push dword [edi + 0xc]
mov edx, 8
push 0
call fcn.0043fd40
mov edx, dword [esp + 0x5c]
add esp, 0xc
mov ecx, esi
call fcn.004404e0
mov eax, dword [esi + 0x6c]
mov dword [edi + 0x44], eax
mov eax, dword [esp + 0x40]
cmp byte [eax + 0x30], 1
jbe 0x496c33
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x496c33
mov ecx, dword [esp + 0x64]
mov edx, eax
call fcn.0041def0
cmp dword [esp + 0x2c], 0
jne 0x496c99
mov edx, dword [esp + 0x58]
mov ecx, edi
call fcn.00493c00
jmp 0x496c99
mov eax, dword [esp + 0x80]
mov edi, dword [esp + 0x18]
test byte [eax + 0x28], 0x40
je 0x496c5e
mov byte [edi + 0x3d], 0xb7
jmp 0x496c99
mov ecx, dword [esp + 0x44]
push 0
push esi
mov al, byte [ecx + 0x565af0]
movzx edx, byte [ecx + 0x565b4c]
mov ecx, dword [esp + 0x1c]
mov byte [edi + 0x3d], al
mov eax, dword [esp + 0x40]
push eax
mov dword [edi + 0x40], eax
call fcn.0043fd40
add esp, 0xc
mov byte [edi + 0x3f], 1
inc eax
mov dword [edi + 0x44], eax
jmp 0x496c99
mov edi, edx
jmp 0x496c99
mov edi, ecx
mov eax, dword [esp + 0x54]
mov edx, dword [esp + 0x7c]
neg eax
sbb eax, eax
add eax, 2
mov dword [esp + 0x2c], eax
nop dword [eax]
mov eax, dword [edx + 0xc]
xor ecx, ecx
mov esi, dword [edx + 0x18]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x68], eax
test eax, eax
jle 0x496e86
nop dword [eax + eax]
movzx edx, word [esi + 0xa]
xor eax, eax
mov dword [esp + 0x50], eax
test dl, 6
jne 0x496e6b
mov ecx, dword [esi + 0x28]
mov eax, dword [esi + 0x2c]
and ecx, dword [edi + 0x58]
and eax, dword [edi + 0x5c]
or ecx, eax
je 0x496d04
mov eax, dword [esp + 0x40]
or dword [eax + 0x34], 2
mov ecx, dword [esp + 0x20]
jmp 0x496e6b
mov eax, dword [esp + 0x80]
mov edi, dword [esi]
mov dword [esp + 0x98], edi
test byte [eax + 0x24], 0x58
je 0x496d98
test byte [edi + 4], 3
je 0x496e63
mov ecx, dword [esp + 0x40]
mov edi, dword [edi + 0x24]
cmp dword [ecx + 0x200], edi
jne 0x496d40
mov ecx, 1
xor edx, edx
jmp 0x496d7b
mov edx, dword [ecx + 0x1fc]
mov eax, 1
cmp edx, eax
jle 0x496d61
add ecx, 0x204
cmp dword [ecx], edi
je 0x496dc8
inc eax
add ecx, 4
cmp eax, edx
jl 0x496d55
xorps xmm0, xmm0
movlpd qword [esp + 0x90], xmm0
mov edx, dword [esp + 0x94]
mov ecx, dword [esp + 0x90]
mov edi, dword [esp + 0x18]
and ecx, dword [edi + 0x58]
and edx, dword [edi + 0x5c]
or ecx, edx
jne 0x496cfb
movzx edx, word [esi + 0xa]
mov edi, dword [esp + 0x98]
mov eax, dword [esp + 0x2c]
cmp eax, 1
jne 0x496ddf
mov eax, dword [esp + 0x18]
mov ecx, edi
push dword [esp + 0x54]
mov edx, dword [eax + 4]
call fcn.0045e510
add esp, 4
test eax, eax
jne 0x496de4
mov ecx, 2
mov dword [esp + 0x20], ecx
jmp 0x496e67
xor ecx, ecx
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
cmovae edx, ecx
jmp 0x496d7b
cmp eax, 3
jge 0x496e03
movzx edx, word [esi + 0xa]
test edx, 0x1000
je 0x496e03
mov ecx, dword [esp + 0x20]
test ecx, ecx
jne 0x496e67
mov ecx, 3
mov dword [esp + 0x20], ecx
jmp 0x496e67
test edx, 0x200
je 0x496e35
mov eax, dword [esp + 0x18]
mov edx, dword [eax + 0x2c]
test edx, edx
je 0x496e35
mov ecx, dword [esp + 0x14]
mov eax, edx
push 0
shr eax, 1
and edx, 1
push 0
push eax
add edx, 0xf
call fcn.0043fd40
add esp, 0xc
mov dword [esp + 0x50], eax
push 0x10
push dword [esp + 0x90]
push edi
push dword [esp + 0x28]
call fcn.0045d6f0
mov eax, dword [esp + 0x60]
add esp, 0x10
test eax, eax
je 0x496e5e
mov ecx, dword [esp + 0x14]
mov edx, eax
call fcn.00440760
or word [esi + 0xa], 4
mov ecx, dword [esp + 0x20]
mov edi, dword [esp + 0x18]
mov eax, dword [esp + 0x68]
add esi, 0x30
dec eax
mov dword [esp + 0x68], eax
test eax, eax
jg 0x496cd0
mov edx, dword [esp + 0x7c]
mov esi, dword [edx + 0x18]
mov dword [esp + 0x2c], ecx
test ecx, ecx
jg 0x496cb0
mov eax, dword [edx + 0x14]
mov dword [esp + 0x20], eax
test eax, eax
jle 0x496fc0
lea edi, [esi + 0xc]
mov esi, eax
test byte [edi - 2], 6
jne 0x496fb0
movzx eax, word [edi]
mov edx, 0xb
test al, 0x82
setne cl
bt ax, dx
setb al
test al, cl
je 0x496fb0
mov ecx, dword [esp + 0x38]
cmp dword [edi + 8], ecx
jne 0x496fb0
mov eax, dword [esp + 0x80]
test byte [eax + 0x24], 0x58
jne 0x496fb0
mov eax, dword [edi - 0xc]
mov edx, ecx
mov ecx, dword [esp + 0x7c]
push 0
push 0x83
push dword [esp + 0x90]
mov dword [esp + 0xa4], eax
push dword [esp + 0x90]
push dword [edi + 0xc]
call fcn.0049a670
mov esi, eax
add esp, 0x14
test esi, esi
je 0x496fac
test byte [esi + 0xa], 4
jne 0x496fac
test byte [esi + 0xc], 1
je 0x496f4a
mov eax, dword [esi]
test dword [eax + 4], 0x1000
je 0x496f4a
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jg 0x496fac
mov eax, dword [esi]
push 0x10
push dword [esp + 0x90]
movups xmm0, xmmword [eax]
movups xmmword [esp + 0xa8], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [esp + 0xb8], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [esp + 0xc8], xmm0
mov eax, dword [eax + 0x30]
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0xa0]
mov eax, dword [eax + 0xc]
mov dword [esp + 0xb4], eax
lea eax, [esp + 0xa8]
push eax
push dword [esp + 0x28]
call fcn.0045d6f0
add esp, 0x10
or word [esi + 0xa], 4
mov esi, dword [esp + 0x20]
dec esi
add edi, 0x30
mov dword [esp + 0x20], esi
test esi, esi
jg 0x496ea6
mov edx, dword [esp + 0x18]
mov eax, dword [edx + 0x38]
mov dword [esp + 0x2c], eax
test eax, eax
je 0x4971b5
movzx eax, byte [edx + 0x3c]
lea ecx, [eax + eax*8]
mov eax, dword [esp + 0x40]
mov eax, dword [eax + 4]
mov edi, dword [eax + ecx*8 + 0x18]
mov dword [esp + 0x98], edi
test byte [edi + 0x1c], 0x80
jne 0x49702e
mov ecx, dword [esp + 0x1c]
mov edx, 2
call fcn.0045eb40
mov esi, eax
mov edx, edi
mov eax, dword [esp + 0x18]
mov dword [esp + 0xe8], esi
lea ecx, [esi + 1]
push ecx
mov ecx, dword [esp + 0x18]
push 0xffffffffffffffff
push dword [eax + 4]
call fcn.0045b200
add esp, 0xc
mov edi, 1
jmp 0x4970ab
mov esi, dword [edi + 8]
test esi, esi
je 0x497045
mov eax, dword [esi + 0x38]
and al, 3
cmp al, 2
je 0x497045
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x497035
movzx eax, word [esi + 0x32]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x34], eax
lea edx, [eax + 1]
call fcn.0045eb40
xor edi, edi
mov dword [esp + 0xe8], eax
cmp dword [esp + 0x34], edi
jbe 0x4970a0
inc eax
mov dword [esp + 0x90], eax
mov edx, dword [esp + 0x98]
add eax, edi
mov ecx, dword [esp + 0x14]
push eax
mov eax, dword [esi + 4]
movsx eax, word [eax + edi*2]
push eax
push dword [esp + 0x40]
call fcn.0045b200
mov eax, dword [esp + 0x9c]
inc edi
add esp, 0xc
cmp edi, dword [esp + 0x34]
jl 0x497070
mov esi, dword [esp + 0xe8]
mov edi, dword [esp + 0x34]
mov ecx, dword [esp + 0x14]
lea eax, [esi + 1]
push eax
mov eax, dword [esp + 0x30]
mov edx, 0x1c
push 0
push dword [eax]
call fcn.0043fd40
mov edx, dword [esp + 0x20]
add esp, 0xc
mov dword [esp + 0x98], eax
mov ecx, dword [edx]
cmp byte [ecx + 0x57], 0
jne 0x4970f1
mov ecx, dword [edx + 0x68]
lea esi, [eax + eax*4]
mov byte [ecx + esi*4 + 1], 0xfd
mov dword [ecx + esi*4 + 0x10], edi
mov esi, dword [esp + 0xe8]
mov ecx, dword [esp + 0x14]
lea eax, [esi + 1]
push esi
push edi
push eax
mov edx, 0x61
call fcn.0043fd40
mov ecx, dword [esp + 0x20]
lea eax, [esi + 1]
add esp, 0xc
mov edx, 0x8a
push eax
mov eax, dword [esp + 0x30]
push esi
push dword [eax]
call fcn.0043fd40
mov edx, dword [esp + 0x20]
add esp, 0xc
mov ecx, dword [edx]
cmp byte [ecx + 0x57], 0
jne 0x49713f
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0x68]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edi
mov ecx, dword [esp + 0x14]
lea eax, [esi + 1]
push eax
mov eax, dword [esp + 0x30]
mov edx, 0xb3
push 0
push dword [eax + 4]
call fcn.0043fd40
mov edx, dword [esp + 0x20]
add esp, 0xc
mov ecx, dword [edx]
cmp byte [ecx + 0x57], 0
jne 0x497178
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0x68]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edi
mov eax, dword [edx + 0x6c]
test eax, eax
jle 0x49718f
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0x68]
mov edx, 0x10
mov word [eax + ecx*4 - 0x12], dx
mov edx, dword [esp + 0x98]
mov ecx, dword [esp + 0x14]
call fcn.00440760
mov ecx, dword [esp + 0x1c]
lea eax, [edi + 1]
push eax
mov edx, esi
call fcn.0045eba0
mov edx, dword [esp + 0x1c]
add esp, 4
mov ecx, dword [edx]
mov edi, dword [esp + 0x14]
test ecx, ecx
je 0x4971e3
mov eax, dword [edi + 0x6c]
push 0
push ecx
mov dword [edx + 0x1c], eax
mov ecx, edi
push 1
mov edx, 0x47
call fcn.0043fd40
mov edx, dword [esp + 0x24]
add esp, 0xc
cmp dword [edx + 0x38], 0
je 0x497215
mov esi, dword [edx + 0x38]
test esi, esi
je 0x497273
push 0
push dword [esi + 8]
mov edx, 0x4a
mov ecx, edi
push 0
call fcn.0043fd40
mov eax, dword [edi + 0x6c]
add esp, 0xc
mov edx, dword [esp + 0x18]
mov dword [esi + 0xc], eax
mov eax, dword [esp + 0x1c]
inc byte [eax + 0x1a]
mov eax, dword [esp + 0x7c]
xor edi, edi
mov esi, dword [eax + 0x18]
cmp dword [eax + 0x14], edi
jle 0x497273
test byte [esi + 0xa], 6
jne 0x497262
mov ecx, dword [esi + 0x28]
mov eax, dword [esi + 0x2c]
and ecx, dword [edx + 0x58]
and eax, dword [edx + 0x5c]
or ecx, eax
jne 0x497262
mov eax, dword [esp + 0x80]
test byte [eax + 0x24], 0x40
jne 0x497262
push 0x10
push dword [esp + 0x90]
push dword [esi]
push dword [esp + 0x28]
call fcn.0045d6f0
add esp, 0x10
or word [esi + 0xa], 4
mov edx, dword [esp + 0x7c]
inc edi
add esi, 0x30
cmp edi, dword [edx + 0x14]
mov edx, dword [esp + 0x18]
jl 0x497223
mov ecx, dword [esp + 0xec]
mov eax, dword [edx + 0x58]
mov edx, dword [edx + 0x5c]
pop edi
pop esi
xor ecx, esp
call fcn.00518690
mov esp, ebp
pop ebp
ret