Function at 0x4b9722
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x55dbfb
push eax
mov dword fs:[0], esp
sub esp, 0x58
push ebx
push ebp
mov ebp, dword [esp + 0x78]
mov ebx, dword [esp + 0x70]
push esi
mov esi, ecx
push edi
mov edi, dword [esp + 0x7c]
mov al, byte [esi + 0x3324]
test al, al
je 0x4b973c
push ebp
push edi
push ebx
call fcn.004b5430
cmp ebx, 0x92d
ja 0x4bb09c
cmp ebx, 0x8fc
jae case.0x4bb0c5.2386
lea eax, [ebx - 0x7d1]
cmp eax, 0x122
ja case.0x4bb0c5.2423
jmp dword [eax*4 + 0x4bb9a4]
test ebp, ebp
jne 0x4b9784
mov esi, dword [esi + 0x3378]
lea ecx, [esi + 8]
call fcn.004c4350
inc eax
jmp 0x4bb98d
test edi, edi
je 0x4bb98b
push ebp
call fcn.004bbfe0
add esp, 4
xor ebx, ebx
dec edi
mov ebp, eax
test edi, edi
jbe 0x4b97b5
mov eax, dword [esi + 0x3378]
push ebx
lea ecx, [eax + 8]
call fcn.004c4060
mov byte [ebx + ebp], al
inc ebx
cmp ebx, edi
jb 0x4b979e
mov byte [ebx + ebp], 0
mov eax, ebx
jmp 0x4bb98d
test ebp, ebp
je 0x4bb98b
mov ecx, dword [esi + 0x3378]
add ecx, 8
call fcn.004c4920
mov eax, dword [esi + 0x3378]
lea ecx, [eax + 8]
call fcn.004c4350
mov ecx, dword [esi + 0x3378]
push eax
push 0
call fcn.004c07e0
push 0
mov ecx, esi
call fcn.004ae490
push ebp
call fcn.004bbfe0
mov ecx, dword [esi + 0x3378]
add esp, 4
push eax
push 0
call fcn.004c0f70
mov ecx, dword [esi + 0x3378]
add ecx, 8
call fcn.004c4930
mov eax, 1
jmp 0x4bb98d
mov ecx, esi
call fcn.004b4300
mov ecx, esi
call fcn.004ae9d0
jmp 0x4bb98b
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x44]
jmp 0x4bb98b
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x4c]
mov al, byte [esi + 0x31ea]
test al, al
jne 0x4b9861
mov ecx, esi
call fcn.004ae9d0
push 1
push 1
push 1
mov ecx, esi
call fcn.004aecf0
jmp 0x4bb98b
mov ecx, esi
call fcn.004b4550
mov ecx, esi
call fcn.004ae9d0
push 1
push 1
push 1
mov ecx, esi
call fcn.004aecf0
jmp 0x4bb98b
mov ecx, esi
call fcn.004b45e0
mov ecx, esi
call fcn.004ae9d0
jmp 0x4bb98b
mov eax, dword [esi + 0x3378]
lea ecx, [eax + 8]
call fcn.004c4950
jmp 0x4ba202
mov ecx, dword [esi + 0x3378]
add ecx, 8
call fcn.004c4940
jmp 0x4bb98b
mov eax, dword [esi + 0x32a0]
jmp 0x4bb98d
mov ecx, dword [esi + 0x3378]
push edi
call fcn.004c01b0
mov ecx, dword [esi + 0x3378]
inc edi
push edi
mov ebx, eax
call fcn.004c01b0
test ebp, ebp
mov dword [esp + 0x80], eax
jne 0x4b9904
sub eax, ebx
jmp 0x4bb98d
push ebp
call fcn.004bbfe0
mov ebp, dword [esp + 0x84]
add esp, 4
xor ecx, ecx
cmp ebx, ebp
mov edi, ebx
jge 0x4b9950
sub eax, ebx
mov dword [esp + 0x80], eax
mov eax, ebp
sub eax, ebx
mov dword [esp + 0x7c], eax
mov eax, dword [esi + 0x3378]
push edi
lea ecx, [eax + 8]
call fcn.004c4060
mov ecx, dword [esp + 0x80]
inc edi
cmp edi, ebp
mov byte [ecx + edi - 1], al
jl 0x4b992d
mov ecx, dword [esp + 0x7c]
mov eax, ecx
jmp 0x4bb98d
mov ecx, dword [esi + 0x3378]
call fcn.004c22e0
test eax, eax
je 0x4ba220
mov ecx, dword [esi + 0x3378]
call fcn.004c22e0
jmp 0x4bb98d
mov esi, dword [esi + 0x3378]
lea ecx, [esi + 8]
call fcn.004c4440
neg al
sbb eax, eax
inc eax
jmp 0x4bb98d
test ebp, ebp
mov eax, ebp
jge 0x4b99a6
mov eax, dword [esi + 0x3378]
lea ecx, [eax + 8]
call fcn.004c4350
test edi, edi
jge 0x4b99ac
mov edi, eax
push edi
push eax
mov ecx, esi
mov dword [esi + 0x32f4], 1
call fcn.004ae3d0
push 1
push 1
push 1
mov ecx, esi
call fcn.004aecf0
jmp 0x4bb98b
xor edi, edi
cmp ebp, edi
jne 0x4b9b0f
mov eax, dword [esi + 0x32f4]
cmp eax, 1
jne 0x4b9a02
mov ecx, esi
call fcn.004ae2f0
mov edi, 1
mov ecx, esi
sub edi, eax
call fcn.004ae310
add eax, edi
jmp 0x4bb98d
xor ebx, ebx
cmp eax, 3
je 0x4b9a1c
mov edx, dword [esi + 0x3378]
mov ebx, dword [edx + 0x4a0]
neg ebx
sbb ebx, ebx
add ebx, 2
mov ecx, esi
mov dword [esp + 0x40], edi
mov dword [esp + 0x60], edi
mov dword [esp + 0x64], edi
mov dword [esp + 0x3c], esi
mov byte [esp + 0x44], 1
call fcn.004ae2f0
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x48], eax
call fcn.004ae310
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x48]
mov ecx, dword [ecx + 0x3378]
push eax
call fcn.004c0220
mov edx, dword [esp + 0x4c]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x3c]
push edx
mov ecx, dword [eax + 0x3378]
call fcn.004c0220
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax + 0x3300]
mov edx, dword [eax + 0x32fc]
push ecx
push edx
call fcn.004bf3d0
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax + 0x3300]
mov edx, dword [eax + 0x32fc]
push ecx
push edx
call fcn.004bf3e0
mov dword [esp + 0x64], eax
mov al, byte [esp + 0x54]
add esp, 0x10
test al, al
je 0x4b9ac4
mov eax, dword [esp + 0x58]
mov dword [esp + 0x40], eax
jmp 0x4b9acc
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x40], ecx
mov dword [esp + 0x70], edi
mov edx, dword [esp + 0x40]
lea ecx, [esp + 0x3c]
push edx
call fcn.004b4160
mov al, byte [esp + 0x44]
test al, al
mov eax, dword [esp + 0x40]
je 0x4b9aed
inc eax
jmp 0x4b9aee
dec eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x60]
cmp eax, 0xffffffff
je 0x4b9b07
mov ecx, dword [esp + 0x64]
sub ecx, eax
add ecx, ebx
add edi, ecx
jmp 0x4b9ad0
lea eax, [edi + 1]
jmp 0x4bb98d
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], edi
mov byte [esp + 0x30], 0
mov dword [esp + 0x34], edi
mov dword [esp + 0x38], edi
lea edx, [esp + 0x28]
mov ecx, esi
push edx
mov dword [esp + 0x74], 1
call fcn.004b72e0
push ebp
call fcn.004bbfe0
mov ecx, dword [esp + 0x30]
add esp, 4
xor esi, esi
cmp ecx, edi
je 0x4b9b64
jle 0x4b9b67
mov ecx, dword [esp + 0x28]
inc esi
mov dl, byte [esi + ecx - 1]
mov byte [esi + eax - 1], dl
mov ecx, dword [esp + 0x2c]
cmp esi, ecx
jl 0x4b9b4d
jmp 0x4b9b67
mov byte [eax], 0
mov eax, dword [esp + 0x28]
mov dword [esp + 0x70], 0xffffffff
push eax
call fcn.00548cc2
add esp, 4
mov eax, esi
jmp 0x4bb98d
test edi, edi
jl 0x4bb98b
mov ecx, dword [esi + 0x3378]
push edi
call fcn.004c0220
jmp 0x4bb98d
test edi, edi
jge 0x4b9bb7
mov ecx, esi
call fcn.004ae2f0
mov ecx, dword [esi + 0x3378]
push eax
call fcn.004c0220
mov edi, eax
test edi, edi
je 0x4bb98b
mov ecx, dword [esi + 0x3378]
call fcn.004c22e0
cmp edi, eax
jle 0x4bb819
or eax, 0xffffffff
jmp 0x4bb98d
test ebp, ebp
je 0x4bb98b
mov ecx, dword [esi + 0x3378]
add ecx, 8
call fcn.004c4920
mov ecx, esi
call fcn.004b3fa0
push ebp
call fcn.004bbfe0
mov ecx, dword [esi + 0x328c]
add esp, 4
mov edi, eax
push edi
push ecx
mov ecx, dword [esi + 0x3378]
call fcn.004c0f70
mov ecx, dword [esi + 0x3378]
add ecx, 8
call fcn.004c4930
push edi
call fcn.004b0120
mov ebx, dword [esi + 0x328c]
add esp, 4
add eax, ebx
mov ecx, esi
push eax
call fcn.004ae490
push 1
push 1
push 1
mov ecx, esi
call fcn.004aecf0
jmp 0x4bb98b
mov dword [esi + 0x3294], edi
jmp 0x4bb98b
mov eax, dword [esi + 0x3294]
jmp 0x4bb98d
mov dword [esi + 0x3298], edi
jmp 0x4bb98b
mov eax, dword [esi + 0x3298]
jmp 0x4bb98d
mov eax, dword [esi + 0x328c]
mov ecx, dword [esi + 0x3290]
cmp eax, ecx
jge 0x4b9c9f
mov dword [esi + 0x3294], eax
mov edx, dword [esi + 0x3290]
mov dword [esi + 0x3298], edx
jmp 0x4bb98b
mov dword [esi + 0x3294], ecx
mov eax, dword [esi + 0x328c]
mov dword [esi + 0x3298], eax
jmp 0x4bb98b
push edi
push ebp
call fcn.004bbfe0
add esp, 4
mov ecx, esi
push eax
push 0
call fcn.004b94e0
jmp 0x4bb98d
push edi
push ebp
call fcn.004bbfe0
add esp, 4
mov ecx, esi
push eax
push 1
call fcn.004b94e0
jmp 0x4bb98d
push edi
push ebp
call fcn.004bbfe0
add esp, 4
mov ecx, esi
push eax
call fcn.004b7120
jmp 0x4bb98d
mov dword [esi + 0x329c], edi
jmp 0x4bb98b
mov eax, dword [esi + 0x329c]
jmp 0x4bb98d
mov ecx, dword [esi + 0x32a0]
push 1
add ecx, ebp
push ecx
mov ecx, esi
call fcn.004aea00
mov edx, dword [esi + 0x2d88]
mov ecx, dword [esi + 0x31d8]
imul edx, edi
add edx, ecx
mov ecx, esi
push edx
call fcn.004aea80
mov eax, 1
jmp 0x4bb98d
mov ecx, dword [esi + 0x3378]
test edi, edi
setne al
push eax
add ecx, 8
call fcn.004c4420
mov eax, 1
jmp 0x4bb98d
mov esi, dword [esi + 0x3378]
lea ecx, [esi + 8]
call fcn.004c4410
and eax, 0xff
jmp 0x4bb98d
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x48]
and eax, 0xff
jmp 0x4bb98d
test ebp, ebp
jl 0x4bb98b
lea eax, [esp + 0x18]
push ebp
push eax
mov ecx, esi
call fcn.004ad4f0
mov ecx, eax
mov eax, dword [ecx]
mov edx, dword [ecx + 4]
mov dword [esp + 0x1c], edx
jmp 0x4bb98d
test ebp, ebp
jl 0x4bb98b
lea eax, [esp + 0x20]
push ebp
push eax
mov ecx, esi
call fcn.004ad4f0
mov ecx, dword [eax]
mov dword [esp + 0x10], ecx
mov eax, dword [eax + 4]
jmp 0x4bb98d
push ebp
push edi
mov ecx, esi
call fcn.004b6fc0
jmp 0x4bb98d
test ebp, ebp
je 0x4bb98b
mov eax, dword [ebp + 4]
cmp eax, 0xffffffff
jne 0x4b9e05
mov eax, dword [esi + 0x3378]
lea ecx, [eax + 8]
call fcn.004c4350
mov ecx, dword [ebp]
mov edx, dword [ebp + 8]
sub eax, ecx
mov edi, eax
push edi
push ecx
mov ecx, dword [esi + 0x3378]
push edx
add ecx, 8
call fcn.004c40a0
mov eax, dword [ebp + 8]
mov byte [edi + eax], 0
mov eax, edi
jmp 0x4bb98d
test edi, edi
setne cl
mov byte [esi + 0x31cd], cl
mov ecx, esi
call fcn.004ae0c0
jmp 0x4bb98b
test edi, edi
setne dl
push ebp
push edx
mov ecx, esi
call fcn.004b32c0
jmp 0x4bb98d
mov eax, dword [esi + 0x2e08]
jmp 0x4bb98d
mov eax, dword [esi + 0x2e0c]
jmp 0x4bb98d
mov ecx, esi
mov dword [esi + 0x2e08], ebp
call fcn.004ad110
jmp 0x4bb98b
mov ecx, esi
mov dword [esi + 0x2e0c], ebp
call fcn.004ad110
jmp 0x4bb98b
test ebp, ebp
je 0x4bb98b
push edi
push ebp
call fcn.004bbfe0
add esp, 4
mov ecx, esi
push eax
call fcn.004ae2c0
mov ecx, dword [esi + 0x3378]
push eax
call fcn.004c0fa0
mov eax, dword [esi + 0x328c]
mov ecx, esi
add eax, edi
push eax
call fcn.004ae490
jmp 0x4bb98b
test ebp, ebp
je 0x4bb98b
push edi
push ebp
call fcn.004bbfe0
add esp, 4
mov ecx, esi
push eax
call fcn.004ae2c0
mov ecx, dword [esi + 0x3378]
shl eax, 1
push eax
call fcn.004c0970
mov ecx, dword [esi + 0x328c]
shr edi, 1
add edi, ecx
mov ecx, esi
push edi
call fcn.004ae490
jmp 0x4bb98b
test ebp, ebp
je 0x4bb98b
cmp edi, 0xffffffff
mov ebx, edi
jne 0x4b9f24
mov ecx, esi
call fcn.004ae2c0
mov ebx, eax
mov ecx, esi
call fcn.004ae2c0
push ebp
mov edi, eax
call fcn.004bbfe0
mov ecx, dword [esi + 0x3378]
add esp, 4
mov ebp, eax
push ebp
push ebx
call fcn.004c0f70
cmp edi, ebx
jle 0x4b9f54
push ebp
call fcn.004b0120
add esp, 4
add edi, eax
push edi
mov ecx, esi
call fcn.004ae490
jmp 0x4bb98b
mov eax, dword [esi + 0x3378]
lea ecx, [eax + 8]
call fcn.004c4350
push edi
push ebp
mov ebx, eax
call fcn.004bbfe0
mov ecx, dword [esi + 0x3378]
add esp, 4
push eax
push ebx
call fcn.004c0fa0
jmp 0x4bb98b
mov ecx, esi
call fcn.004b4210
jmp 0x4bb98b
mov ecx, esi
call fcn.004b42b0
jmp 0x4bb98b
test edi, edi
setne cl
push ecx
mov ecx, dword [esi + 0x3378]
add ecx, 8
call fcn.004c48f0
jmp 0x4bb98b
mov esi, dword [esi + 0x3378]
lea ecx, [esi + 8]
call fcn.004c4910
and eax, 0xff
jmp 0x4bb98d
mov ecx, dword [esi + 0x3378]
add ecx, 8
call fcn.004c4920
jmp 0x4bb98b
mov ecx, dword [esi + 0x3378]
add ecx, 8
call fcn.004c4930
jmp 0x4bb98b
mov eax, dword [esi + 0x322c]
jmp 0x4bb98d
mov dword [esi + 0x322c], edi
jmp 0x4bb98b
mov ecx, dword [esi + 0x3378]
push 0
call fcn.004c23b0
test ebp, ebp
je 0x4bb98b
mov ecx, dword [esi + 0x3378]
push 2
push ebp
call fcn.004c2420
jmp 0x4bb98b
mov esi, dword [esi + 0x3378]
lea ecx, [esi + 8]
call fcn.004c4350
jmp 0x4bb98d
mov esi, dword [esi + 0x3378]
push edi
lea ecx, [esi + 8]
call fcn.004c4060
movsx eax, al
jmp 0x4bb98d
mov edx, dword [esi + 0x3290]
mov ecx, esi
push edx
push edi
call fcn.004ae3d0
jmp 0x4bb98b
mov eax, dword [esi + 0x328c]
jmp 0x4bb98d
mov eax, dword [esi + 0x328c]
push edi
push eax
mov ecx, esi
call fcn.004ae3d0
jmp 0x4bb98b
mov eax, dword [esi + 0x3290]
jmp 0x4bb98d
mov ecx, dword [esi + 0x328c]
push edi
push edi
push ecx
call fcn.004bf3e0
add esp, 8
mov ecx, esi
push eax
call fcn.004ae3d0
jmp 0x4bb98b
mov edx, dword [esi + 0x328c]
mov eax, dword [esi + 0x3290]
push edx
push eax
call fcn.004bf3d0
add esp, 8
jmp 0x4bb98d
mov ecx, dword [esi + 0x3290]
push edi
push ecx
call fcn.004bf3d0
add esp, 8
mov ecx, esi
push eax
push edi
call fcn.004ae3d0
jmp 0x4bb98b
mov edx, dword [esi + 0x328c]
mov eax, dword [esi + 0x3290]
push edx
push eax
call fcn.004bf3e0
add esp, 8
jmp 0x4bb98d
mov dword [esi + 0x31b8], edi
jmp 0x4bb98b
mov eax, dword [esi + 0x31b8]
jmp 0x4bb98d
mov dword [esi + 0x31bc], edi
jmp 0x4bb98b
mov eax, dword [esi + 0x31bc]
jmp 0x4bb98d
mov eax, dword [esi + 0x3378]
lea ecx, [eax + 8]
call fcn.004c4350
cmp edi, eax
jge 0x4bb98b
mov esi, dword [esi + 0x3378]
push edi
lea ecx, [esi + 8]
call fcn.004c4110
movsx eax, al
jmp 0x4bb98d
mov ecx, esi
call fcn.004b4630
jmp 0x4bb98b
mov ecx, esi
call fcn.004b45b0
jmp 0x4bb98b
mov ecx, dword [esi + 0x3378]
call fcn.004bfff0
jmp 0x4bb98b
test ebp, ebp
je 0x4bb98b
mov ebx, dword [ebp]
mov eax, dword [ebp + 4]
xor edi, edi
cmp ebx, eax
jge 0x4ba1de
mov eax, dword [esi + 0x3378]
push ebx
lea ecx, [eax + 8]
call fcn.004c4060
mov ecx, dword [ebp + 8]
push ebx
mov byte [edi + ecx], al
mov eax, dword [esi + 0x3378]
inc edi
lea ecx, [eax + 8]
call fcn.004c4110
mov edx, dword [ebp + 8]
inc edi
inc ebx
mov byte [edi + edx - 1], al
mov eax, dword [ebp + 4]
cmp ebx, eax
jl 0x4ba1a9
mov eax, dword [ebp + 8]
mov byte [edi + eax], 0
mov ecx, dword [ebp + 8]
mov eax, edi
mov byte [edi + ecx + 1], 0
jmp 0x4bb98d
mov eax, dword [esi + 0x3378]
lea ecx, [eax + 8]
call fcn.004c4a10
test al, al
je 0x4bb98b
mov esi, dword [esi + 0x3378]
lea ecx, [esi + 8]
call fcn.004c4410
test al, al
jne 0x4bb98b
mov eax, 1
jmp 0x4bb98d
mov esi, dword [esi + 0x3378]
push edi
lea ecx, [esi + 8]
call fcn.004c4510
jmp 0x4bb98d
mov ecx, dword [esi + 0x3378]
push edi
call fcn.004c00f0
jmp 0x4bb98b
mov eax, dword [esi + 0x2e50]
jmp 0x4bb98d
mov ecx, esi
mov dword [esi + 0x2e50], edi
call fcn.004ae0c0
jmp 0x4bb98b
push ebp
push edi
mov ecx, esi
call fcn.004ad8d0
jmp 0x4bb98d
push ebp
push edi
mov ecx, esi
call fcn.004adb80
jmp 0x4bb98d
push edi
mov ecx, esi
call fcn.004b71a0
jmp 0x4bb98b
push edi
mov ecx, esi
call fcn.004ae490
push 1
push 1
push 1
mov ecx, esi
call fcn.004aecf0
mov ecx, esi
call fcn.004ae0c0
jmp 0x4bb98b
mov edx, dword [esi + 0x328c]
mov ecx, dword [esi + 0x3378]
push edx
call fcn.004c0220
mov ecx, dword [esi + 0x3378]
push eax
mov dword [esp + 0x84], eax
call fcn.004c01b0
mov ecx, dword [esi + 0x3378]
mov ebx, eax
mov eax, dword [esp + 0x80]
inc eax
push eax
call fcn.004c01b0
test ebp, ebp
mov dword [esp + 0x80], eax
jne 0x4ba304
sub eax, ebx
inc eax
jmp 0x4bb98d
push ebp
call fcn.004bbfe0
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x84]
add esp, 4
xor ebp, ebp
cmp ebx, eax
jae 0x4ba35b
mov eax, dword [esp + 0x7c]
dec edi
sub eax, ebx
mov dword [esp + 0x78], edi
mov edi, ebx
mov dword [esp + 0x10], eax
cmp ebp, dword [esp + 0x78]
jae 0x4ba35b
mov eax, dword [esi + 0x3378]
push edi
lea ecx, [eax + 8]
call fcn.004c4060
mov ecx, dword [esp + 0x10]
inc ebp
mov byte [ecx + edi], al
mov eax, dword [esp + 0x80]
inc edi
cmp edi, eax
jb 0x4ba332
mov edx, dword [esp + 0x7c]
mov byte [edx + ebp], 0
mov eax, dword [esi + 0x328c]
sub eax, ebx
jmp 0x4bb98d
mov eax, dword [esi + 0x3378]
mov eax, dword [eax + 0x474]
jmp 0x4bb98d
mov ecx, dword [esi + 0x3378]
mov eax, dword [ecx + 0x4a0]
jmp 0x4bb98d
mov edx, dword [esi + 0x3378]
mov dword [edx + 0x4a0], edi
jmp 0x4bb98b
mov ecx, dword [esi + 0x3378]
push ebp
push edi
call fcn.004c2480
jmp 0x4bb98b
mov ecx, dword [esi + 0x3378]
push ebp
push edi
call fcn.004c24a0
jmp 0x4bb98b
test ebp, ebp
je 0x4bb98b
push ebp
call fcn.004bbfe0
mov ecx, dword [esi + 0x3378]
add esp, 4
push eax
push edi
call fcn.004c2560
jmp 0x4bb98b
test edi, edi
setne al
mov byte [esi + 0x31d5], al
jmp 0x4bb98b
xor eax, eax
mov al, byte [esi + 0x31d5]
jmp 0x4bb98d
xor eax, eax
mov al, byte [esi + 0x31d6]
jmp 0x4bb98d
test edi, edi
setne cl
mov byte [esi + 0x31d6], cl
mov ecx, esi
call fcn.004ad110
jmp 0x4bb98b
test edi, edi
jbe 0x4bb97b
mov edx, dword [esi + 0x3378]
mov dword [edx + 0x4a8], edi
mov eax, dword [esi + 0x3378]
mov ecx, dword [eax + 0x4ac]
test ecx, ecx
jne 0x4bb97b
mov ecx, dword [eax + 0x4a8]
mov dword [eax + 0x4b0], ecx
mov ecx, esi
call fcn.004ad110
jmp 0x4bb98b
mov edx, dword [esi + 0x3378]
mov eax, dword [edx + 0x4a8]
jmp 0x4bb98d
mov eax, dword [esi + 0x3378]
mov dword [eax + 0x4ac], edi
mov eax, dword [esi + 0x3378]
mov ecx, dword [eax + 0x4ac]
test ecx, ecx
jne 0x4ba49e
mov ecx, dword [eax + 0x4a8]
mov dword [eax + 0x4b0], ecx
mov ecx, esi
call fcn.004ad110
jmp 0x4bb98b
mov edx, dword [esi + 0x3378]
mov eax, dword [edx + 0x4ac]
jmp 0x4bb98d
mov ecx, dword [esi + 0x3378]
test edi, edi
setne al
mov byte [ecx + 0x4b4], al
mov ecx, esi
call fcn.004ad110
jmp 0x4bb98b
mov edx, dword [esi + 0x3378]
xor eax, eax
mov al, byte [edx + 0x4b4]
jmp 0x4bb98d
mov ecx, dword [esi + 0x3378]
push ebp
push edi
call fcn.004c1170
jmp 0x4bb98b
mov ecx, dword [esi + 0x3378]
push edi
call fcn.004c10e0
jmp 0x4bb98d
mov ecx, dword [esi + 0x3378]
push edi
call fcn.004c1260
jmp 0x4bb98d
mov ecx, dword [esi + 0x3378]
test edi, edi
setne al
mov byte [ecx + 0x4b5], al
jmp 0x4bb98b
mov edx, dword [esi + 0x3378]
xor eax, eax
mov al, byte [edx + 0x4b5]
jmp 0x4bb98d
mov ecx, dword [esi + 0x3378]
test edi, edi
setne al
mov byte [ecx + 0x4b6], al
jmp 0x4bb98b
mov edx, dword [esi + 0x3378]
xor eax, eax
mov al, byte [edx + 0x4b6]
jmp 0x4bb98d
mov dword [esi + 0x325c], edi
mov dword [esi + 0x3260], edi
jmp 0x4bb98b
mov eax, dword [esi + 0x325c]
jmp 0x4bb98d
mov ecx, dword [esi + 0x3378]
test ebp, ebp
setne al
push eax
push 0xffffffffffffffff
push edi
call fcn.004c1670
jmp 0x4bb98d
test ebp, ebp
setne cl
push ecx
mov ecx, dword [esi + 0x3378]
push 1
push edi
call fcn.004c1670
jmp 0x4bb98d
dec edi
je 0x4ba5e3
dec edi
je 0x4ba5d7
mov dword [esi + 0x3354], 0
jmp 0x4ba5ed
mov dword [esi + 0x3354], 2
jmp 0x4ba5ed
mov dword [esi + 0x3354], 1
mov ecx, esi
mov dword [esi + 0x31d8], 0
call fcn.004ad110
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x3c]
jmp 0x4bb98b
mov eax, dword [esi + 0x3354]
jmp 0x4bb98d
push edi
lea ecx, [esi + 0x3200]
call fcn.004ac9c0
jmp 0x4bb98b
mov eax, dword [esi + 0x3204]
jmp 0x4bb98d
test edi, edi
jbe 0x4bb98b
cmp edi, dword [esi + 0x31e4]
je 0x4bb98b
mov ecx, esi
mov dword [esi + 0x31e4], edi
call fcn.004b3ba0
jmp 0x4bb98b
mov eax, dword [esi + 0x31e4]
jmp 0x4bb98d
mov ecx, esi
call fcn.004af770
jmp 0x4bb98b
push edi
mov ecx, esi
call fcn.004af860
jmp 0x4bb98b
push ebp
call fcn.004bbfe0
add esp, 4
mov ecx, esi
push eax
push edi
call fcn.004b3ab0
jmp 0x4bb98d
mov eax, dword [esi + 0x2d78]
jmp 0x4bb98d
xor eax, eax
test edi, edi
setne al
xor ecx, ecx
mov cl, byte [esi + 0x31e9]
cmp ecx, eax
je 0x4bb98b
test edi, edi
setne dl
mov ecx, esi
mov byte [esi + 0x31e9], dl
call fcn.004b3ba0
jmp 0x4bb98b
xor eax, eax
mov al, byte [esi + 0x31e9]
jmp 0x4bb98d
mov ecx, dword [esi + 0x3378]
push edi
call fcn.004c12d0
jmp 0x4bb98d
xor eax, eax
test edi, edi
setne al
xor ecx, ecx
mov cl, byte [esi + 0x31e0]
cmp ecx, eax
je 0x4bb98b
test edi, edi
setne dl
mov ecx, esi
mov byte [esi + 0x31e0], dl
call fcn.004b3ba0
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x3c]
jmp 0x4bb98b
xor eax, eax
mov al, byte [esi + 0x31e0]
jmp 0x4bb98d
xor ecx, ecx
test edi, edi
setne cl
xor edx, edx
mov dl, byte [esi + 0x31e8]
cmp edx, ecx
je 0x4bb98b
test edi, edi
setne al
mov ecx, esi
mov byte [esi + 0x31e8], al
call fcn.004b3ba0
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x3c]
jmp 0x4bb98b
xor eax, eax
mov al, byte [esi + 0x31e8]
jmp 0x4bb98d
test edi, edi
setne al
mov ecx, esi
mov byte [esi + 0x2e54], al
call fcn.004ae0c0
jmp 0x4bb98b
xor eax, eax
mov al, byte [esi + 0x2e54]
jmp 0x4bb98d
cmp dword [esi + 0x32bc], edi
jne 0x4ba7a1
test edi, edi
jbe 0x4bb98b
mov ecx, esi
mov dword [esi + 0x32bc], edi
call fcn.004ae0c0
jmp 0x4bb98b
mov eax, dword [esi + 0x32bc]
jmp 0x4bb98d
mov ecx, dword [esi + 0x3378]
push edi
call fcn.004c01c0
jmp 0x4bb98d
mov ecx, dword [esi + 0x3378]
mov dword [ecx + 0x4a4], edi
mov ecx, esi
call fcn.004ad110
jmp 0x4bb98b
mov edx, dword [esi + 0x3378]
mov eax, dword [edx + 0x4a4]
jmp 0x4bb98d
test edi, edi
setne al
mov ecx, esi
mov byte [esi + 0x31b4], al
call fcn.004ad110
jmp 0x4bb98b
xor eax, eax
mov al, byte [esi + 0x31b4]
jmp 0x4bb98d
cmp edi, 0x1f
ja 0x4ba82b
lea ecx, [edi + edi*2 + 0x543]
mov dword [esi + ecx*8], ebp
mov ecx, esi
call fcn.004ad0b0
mov ecx, esi
call fcn.004ae100
jmp 0x4bb98b
cmp edi, 0x1f
ja 0x4ba84d
lea edx, [edi + edi*2]
mov dword [esi + edx*8 + 0x2a1c], ebp
mov ecx, esi
call fcn.004ad0b0
mov ecx, esi
call fcn.004ae100
jmp 0x4bb98b
cmp edi, 0x1f
ja 0x4ba86f
lea eax, [edi + edi*2]
mov dword [esi + eax*8 + 0x2a24], ebp
mov ecx, esi
call fcn.004ad0b0
mov ecx, esi
call fcn.004ae100
jmp 0x4bb98b
mov ecx, dword [esi + 0x3378]
push ebp
push edi
call fcn.004c0010
jmp 0x4bb98d
mov ecx, dword [esi + 0x3378]
push ebp
push edi
call fcn.004c0080
jmp 0x4bb98b
mov ecx, dword [esi + 0x3378]
push edi
call fcn.004c0150
jmp 0x4bb98b
mov esi, dword [esi + 0x3378]
push edi
lea ecx, [esi + 8]
call fcn.004c44b0
jmp 0x4bb98d
mov ecx, dword [esi + 0x3378]
call fcn.004c22e0
mov ebx, eax
cmp edi, ebx
jge 0x4b9bd0
mov eax, dword [esi + 0x3378]
push edi
lea ecx, [eax + 8]
call fcn.004c44b0
test ebp, eax
jne 0x4bad7c
inc edi
cmp edi, ebx
jl 0x4ba8e0
or eax, 0xffffffff
jmp 0x4bb98d
test edi, edi
jl 0x4b9bd0
mov eax, dword [esi + 0x3378]
push edi
lea ecx, [eax + 8]
call fcn.004c44b0
test ebp, eax
jne 0x4bad7c
dec edi
jns 0x4ba90c
or eax, 0xffffffff
jmp 0x4bb98d
cmp edi, 0x1f
ja 0x4ba94c
push ebp
call fcn.004bbfe0
add esp, 4
lea ecx, [edi + edi*2 + 0x543]
push eax
lea ecx, [esi + ecx*8]
call fcn.00506670
mov ecx, esi
call fcn.004ad0b0
mov ecx, esi
call fcn.004ae100
jmp 0x4bb98b
push edi
call fcn.004bbfd0
add esp, 4
test al, al
je 0x4bb98b
test ebp, ebp
sete dl
shl edi, 4
mov ecx, esi
mov byte [edi + esi + 0x2e18], dl
call fcn.004ad110
jmp 0x4bb98b
push edi
call fcn.004bbfd0
add esp, 4
test al, al
je 0x4bb98b
shl edi, 4
xor eax, eax
mov cl, byte [edi + esi + 0x2e18]
test cl, cl
sete al
jmp 0x4bb98d
push edi
call fcn.004bbfd0
add esp, 4
test al, al
je 0x4bb98b
shl edi, 4
mov ecx, dword [edi + esi + 0x2e1c]
lea eax, [edi + esi + 0x2e1c]
cmp ecx, ebp
je 0x4bb98b
mov ecx, esi
mov dword [eax], ebp
call fcn.004ad110
jmp 0x4bb98b
push edi
call fcn.004bbfd0
add esp, 4
test al, al
je 0x4bb98b
shl edi, 4
mov eax, dword [edi + esi + 0x2e1c]
jmp 0x4bb98d
push edi
call fcn.004bbfd0
add esp, 4
test al, al
je 0x4bb98b
add edi, 0x2e2
mov ecx, esi
shl edi, 4
mov dword [edi + esi], ebp
call fcn.004ad110
jmp 0x4bb98b
push edi
call fcn.004bbfd0
add esp, 4
test al, al
je 0x4bb98b
add edi, 0x2e2
shl edi, 4
mov eax, dword [edi + esi]
jmp 0x4bb98d
push edi
call fcn.004bbfd0
add esp, 4
test al, al
je 0x4bb98b
test ebp, ebp
setne al
shl edi, 4
mov ecx, esi
mov byte [edi + esi + 0x2e24], al
call fcn.004ad110
jmp 0x4bb98b
push edi
call fcn.004bbfd0
add esp, 4
test al, al
je 0x4bb98b
shl edi, 4
xor eax, eax
mov cl, byte [edi + esi + 0x2e24]
test cl, cl
setne al
jmp 0x4bb98d
lea ecx, [esi + 0x14]
call fcn.005065a0
mov ecx, esi
call fcn.004ad110
jmp 0x4bb98b
cmp edi, 0x7f
ja 0x4bb98b
lea ecx, [edi + edi*4]
shl ecx, 4
mov dword [ecx + esi + 0x218], ebp
mov ecx, esi
call fcn.004ad110
jmp 0x4bb98b
cmp edi, 0x7f
ja 0x4bb98b
lea edx, [edi + edi*4]
mov ecx, esi
shl edx, 4
mov dword [edx + esi + 0x220], ebp
call fcn.004ad110
jmp 0x4bb98b
cmp edi, 0x7f
ja 0x4bb98b
test ebp, ebp
lea ecx, [edi + edi*4]
setne al
shl ecx, 4
mov byte [ecx + esi + 0x229], al
mov ecx, esi
call fcn.004ad110
jmp 0x4bb98b
cmp edi, 0x7f
ja 0x4bb98b
test ebp, ebp
lea eax, [edi + edi*4]
mov ecx, esi
setne dl
shl eax, 4
mov byte [eax + esi + 0x22a], dl
call fcn.004ad110
jmp 0x4bb98b
cmp edi, 0x7f
ja 0x4bb98b
test ebp, ebp
lea edx, [edi + edi*4]
setne cl
shl edx, 4
mov byte [edx + esi + 0x238], cl
mov ecx, esi
call fcn.004ad110
jmp 0x4bb98b
cmp edi, 0x7f
ja 0x4bb98b
lea eax, [edi + edi*4]
mov ecx, esi
shl eax, 4
mov dword [eax + esi + 0x22c], ebp
call fcn.004ad110
jmp 0x4bb98b
test ebp, ebp
je 0x4bb98b
cmp edi, 0x7f
ja 0x4bb98b
push ebp
call fcn.004bbfe0
add esp, 4
lea ecx, [esi + 0x14]
push eax
push edi
call fcn.005065f0
mov ecx, esi
call fcn.004ad110
jmp 0x4bb98b
cmp edi, 0x7f
ja 0x4bb98b
test ebp, ebp
lea edx, [edi + edi*4]
setne cl
shl edx, 4
mov byte [edx + esi + 0x239], cl
mov ecx, esi
call fcn.004ad110
jmp 0x4bb98b
cmp edi, 0x7f
ja 0x4bb98b
lea eax, [edi + edi*4]
mov ecx, esi
shl eax, 4
mov dword [eax + esi + 0x23c], ebp
call fcn.004ad110
jmp 0x4bb98b
cmp edi, 0x7f
ja 0x4bb98b
lea ecx, [edi + edi*4]
shl ecx, 4
mov dword [ecx + esi + 0x234], ebp
mov ecx, esi
call fcn.004ad110
jmp 0x4bb98b
cmp edi, 0x7f
ja 0x4bb98b
test ebp, ebp
lea eax, [edi + edi*4]
mov ecx, esi
setne dl
shl eax, 4
mov byte [eax + esi + 0x240], dl
call fcn.004ad110
jmp 0x4bb98b
cmp edi, 0x7f
ja 0x4bb98b
test ebp, ebp
lea edx, [edi + edi*4]
setne cl
shl edx, 4
mov byte [edx + esi + 0x241], cl
mov ecx, esi
call fcn.004ad110
jmp 0x4bb98b
lea ecx, [esi + 0x14]
call fcn.00506560
mov ecx, esi
call fcn.004ad110
jmp 0x4bb98b
mov ecx, dword [esi + 0x3378]
push edi
call fcn.004c2450
jmp 0x4bb98b
mov eax, dword [esi + 0x3378]
mov eax, dword [eax + 0x498]
jmp 0x4bb98d
mov esi, dword [esi + 0x3378]
push ebp
push edi
lea ecx, [esi + 8]
call fcn.004c4ae0
jmp 0x4bb98d
mov esi, dword [esi + 0x3378]
push edi
lea ecx, [esi + 8]
call fcn.004c4c30
jmp 0x4bb98d
mov esi, dword [esi + 0x3378]
lea ecx, [esi + 8]
call fcn.004c4d00
jmp 0x4bb98d
xor eax, eax
mov al, byte [esi + 0x2e60]
jmp 0x4bb98d
test edi, edi
setne cl
mov byte [esi + 0x2e60], cl
mov ecx, esi
call fcn.004ad110
jmp 0x4bb98b
mov eax, dword [esi + 0x2e64]
jmp 0x4bb98d
mov ecx, esi
mov dword [esi + 0x2e64], edi
call fcn.004ad110
jmp 0x4bb98b
push edi
lea ecx, [esi + 0x332c]
call fcn.00504ef0
jmp 0x4bb98d
push edi
lea ecx, [esi + 0x332c]
call fcn.00504f30
jmp 0x4bb98d
push edi
mov ecx, esi
call fcn.004b95e0
jmp 0x4bb98d
mov ecx, dword [esi + 0x3378]
push ebp
push edi
call fcn.004c02c0
mov edi, eax
cmp edi, ebp
je 0x4bad7c
mov ecx, esi
call fcn.004ae100
mov eax, edi
jmp 0x4bb98d
mov esi, dword [esi + 0x3378]
push edi
lea ecx, [esi + 8]
call fcn.004c4d50
jmp 0x4bb98d
mov ecx, dword [esi + 0x3378]
push ebp
push edi
call fcn.004c0340
jmp 0x4bb98d
mov ecx, dword [esi + 0x3378]
push edi
call fcn.004c0420
jmp 0x4bb98d
push 1
push ebp
push edi
lea ecx, [esi + 0x332c]
call fcn.005052d0
mov ecx, esi
call fcn.004b3ba0
mov ecx, esi
call fcn.004ae0c0
jmp 0x4bb98b
push 0
push ebp
push edi
lea ecx, [esi + 0x332c]
call fcn.005052d0
mov ecx, esi
call fcn.004b3ba0
mov ecx, esi
call fcn.004ae0c0
jmp 0x4bb98b
push edi
lea ecx, [esi + 0x332c]
call fcn.005052a0
and eax, 0xff
jmp 0x4bb98d
test ebp, ebp
setne dl
push edx
push edi
lea ecx, [esi + 0x332c]
call fcn.005053a0
test al, al
je 0x4bb98b
mov ecx, esi
call fcn.004ae100
jmp 0x4bb98b
push edi
lea ecx, [esi + 0x332c]
call fcn.00505370
and eax, 0xff
jmp 0x4bb98d
mov ecx, esi
mov dword [esi + 0x3328], edi
call fcn.004ae0c0
jmp 0x4bb98b
push edi
mov ecx, esi
call fcn.004b91e0
jmp 0x4bb98b
push 0
push edi
mov ecx, esi
call fcn.004b9310
jmp 0x4bb98b
push 1
push edi
mov ecx, esi
call fcn.004b9310
jmp 0x4bb98b
test edi, edi
setne al
mov byte [esi + 0x2d8c], al
mov ecx, esi
mov dword [esi + 0x2d90], ebp
call fcn.004ad110
jmp 0x4bb98b
test edi, edi
setne cl
mov byte [esi + 0x2d98], cl
mov ecx, esi
mov dword [esi + 0x2d9c], ebp
call fcn.004ad110
jmp 0x4bb98b
test edi, edi
setne dl
mov ecx, esi
mov byte [esi + 0x2dac], dl
mov dword [esi + 0x2db0], ebp
call fcn.004ad110
jmp 0x4bb98b
test edi, edi
setne al
mov ecx, esi
mov byte [esi + 0x2db8], al
mov dword [esi + 0x2dbc], ebp
call fcn.004ad110
jmp 0x4bb98b
mov ecx, esi
mov dword [esi + 0x2e58], edi
call fcn.004ad110
jmp 0x4bb98b
mov eax, dword [esi + 0x2e58]
jmp 0x4bb98d
test edi, edi
ja 0x4baf38
mov ecx, esi
mov dword [esi + 0x2e78], 0
call fcn.004ad110
jmp 0x4bb98b
mov ecx, 3
cmp edi, ecx
jb 0x4baf53
mov dword [esi + 0x2e78], ecx
mov ecx, esi
call fcn.004ad110
jmp 0x4bb98b
mov ecx, esi
mov dword [esi + 0x2e78], edi
call fcn.004ad110
jmp 0x4bb98b
mov eax, dword [esi + 0x2e78]
jmp 0x4bb98d
push ebp
jmp 0x4baf78
push 0x87c
mov ecx, edi
sar ecx, 0x10
movsx edx, cx
movsx eax, di
push edx
push eax
lea ecx, [esi + 0x321c]
call fcn.00505530
jmp 0x4bb98b
lea ecx, [esi + 0x321c]
call fcn.00505510
jmp 0x4bb98b
cmp edi, 7
ja 0x4bb98b
lea ecx, [edi + edi*2 + 0xb46]
mov dword [esi + ecx*4], ebp
mov ecx, esi
call fcn.004ad110
jmp 0x4bb98b
cmp edi, 7
ja 0x4bb98b
lea edx, [edi + edi*2 + 0xb46]
mov eax, dword [esi + edx*4]
jmp 0x4bb98d
cmp edi, 7
ja 0x4bb98b
lea eax, [edi + edi*2]
mov ecx, esi
mov dword [esi + eax*4 + 0x2d1c], ebp
call fcn.004ad110
jmp 0x4bb98b
cmp edi, 7
ja 0x4bb98b
lea ecx, [edi + edi*2]
mov eax, dword [esi + ecx*4 + 0x2d1c]
jmp 0x4bb98d
mov ecx, dword [esi + 0x3378]
push edi
call fcn.004c1430
mov edx, dword [esi + 0x3290]
mov eax, dword [esi + 0x328c]
push edx
push eax
mov ecx, esi
call fcn.004ae3d0
mov ecx, esi
call fcn.004ae0c0
jmp 0x4bb98b
test edi, edi
setne cl
mov byte [esi + 0x31ce], cl
jmp 0x4bb98b
mov cl, byte [esi + 0x31ce]
xor eax, eax
test cl, cl
setne al
jmp 0x4bb98d
test edi, edi
setne dl
mov ecx, esi
mov byte [esi + 0x2dd4], dl
mov dword [esi + 0x2dd8], ebp
call fcn.004ad110
jmp 0x4bb98b
test edi, edi
setne al
mov ecx, esi
mov byte [esi + 0x2de0], al
mov dword [esi + 0x2de4], ebp
call fcn.004ad110
jmp 0x4bb98b
cmp ebx, 0xbb9
ja 0x4bb950
je 0x4bb947
lea eax, [ebx - 0x92e]
cmp eax, 0x73
ja case.0x4bb0c5.2423
xor ecx, ecx
mov cl, byte [eax + 0x4bbf58]
jmp dword [ecx*4 + 0x4bbe30]
push ebp
push edi
mov ecx, esi
call fcn.004b7580
jmp 0x4bb98b
push ebp
call fcn.004bbfe0
add esp, 4
mov ecx, esi
push eax
push edi
call fcn.004b7680
jmp 0x4bb98b
test edi, edi
jl 0x4bb98b
mov eax, dword [esi + 0x3378]
lea ecx, [eax + 8]
call fcn.004c4350
mov ecx, dword [esi + 0x3378]
push eax
call fcn.004c0220
cmp edi, eax
jg 0x4bb98b
mov ecx, dword [esi + 0x3378]
lea edx, [edi + 1]
push edx
call fcn.004c01b0
mov ecx, dword [esi + 0x3378]
push edi
mov ebx, eax
call fcn.004c01b0
sub ebx, eax
mov eax, ebx
jmp 0x4bb98d
mov ecx, dword [esi + 0x3378]
push 1
dec edi
push 0xffffffffffffffff
push edi
call fcn.004c0610
jmp 0x4bb98d
mov ecx, dword [esi + 0x3378]
push 1
inc edi
push 1
push edi
call fcn.004c0610
jmp 0x4bb98d
mov dword [esi + 0x31d8], edi
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x34]
mov ecx, esi
call fcn.004ae0c0
jmp 0x4bb98b
mov eax, dword [esi + 0x31d8]
jmp 0x4bb98d
test ebp, ebp
je 0x4bb98b
mov ecx, dword [esi + 0x3378]
push 0
push ebp
call fcn.004c2420
jmp 0x4bb98b
mov ecx, dword [esi + 0x3378]
push 1
call fcn.004c23b0
jmp 0x4bb98b
lea ecx, [edi + edi]
push ecx
mov ecx, dword [esi + 0x3378]
add ecx, 8
call fcn.004c4360
jmp 0x4bb98b
xor edx, edx
cmp edi, 1
sete dl
mov dword [esi + 0x31c0], edx
jmp 0x4bb98b
mov eax, dword [esi + 0x31c0]
jmp 0x4bb98d
mov dword [esi + 0x3368], edi
mov eax, dword [esi + 0x3370]
mov dword [esi + 0x3374], eax
mov cl, byte [esi + 0x3368]
test cl, 2
je 0x4bb21e
test eax, eax
jne 0x4bb21e
mov dword [esi + 0x3374], 1
mov ecx, esi
call fcn.004ad110
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x3c]
jmp 0x4bb98b
mov eax, dword [esi + 0x3368]
jmp 0x4bb98d
mov ecx, esi
mov dword [esi + 0x336c], edi
call fcn.004ad110
jmp 0x4bb98b
mov eax, dword [esi + 0x336c]
jmp 0x4bb98d
mov dword [esi + 0x3370], edi
mov dword [esi + 0x3374], edi
test byte [esi + 0x3368], 2
je 0x4bb27c
test edi, edi
jne 0x4bb27c
mov dword [esi + 0x3374], 1
mov ecx, esi
call fcn.004ad110
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x3c]
jmp 0x4bb98b
mov eax, dword [esi + 0x3370]
jmp 0x4bb98d
xor eax, eax
test edi, edi
setne al
xor ecx, ecx
mov cl, byte [esi + 0x31ea]
cmp ecx, eax
je 0x4bb98b
test edi, edi
setne dl
mov byte [esi + 0x31ea], dl
jmp 0x4bb98b
xor eax, eax
mov al, byte [esi + 0x31ea]
jmp 0x4bb98d
mov al, byte [esi + 0x31ea]
test al, al
sete al
mov byte [esi + 0x31ea], al
jmp 0x4bb98b
mov ecx, dword [esi + 0x3378]
push ebp
push edi
call fcn.004c1350
jmp 0x4bb98d
cmp edi, 0x7f
ja 0x4bb98b
test ebp, ebp
lea edx, [edi + edi*4]
setne cl
shl edx, 4
mov byte [edx + esi + 0x242], cl
mov ecx, esi
call fcn.004ad110
jmp 0x4bb98b
mov ecx, esi
call fcn.004b7040
jmp 0x4bb98b
push ebp
push edi
push ebx
mov ecx, esi
call fcn.004b7050
jmp 0x4bb98d
mov dword [esi + 0x3310], edi
mov dword [esi + 0x3308], edi
mov dword [esi + 0x3314], ebp
mov dword [esi + 0x330c], ebp
jmp 0x4bb98b
mov dword [esi + 0x3308], edi
mov dword [esi + 0x330c], ebp
jmp 0x4bb98b
mov dword [esi + 0x3310], edi
mov dword [esi + 0x3314], ebp
jmp 0x4bb98b
mov dword [esi + 0x3318], edi
mov dword [esi + 0x331c], ebp
jmp 0x4bb98b
mov ecx, esi
call fcn.004ad2d0
jmp 0x4bb98d
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x70]
jmp 0x4bb98d
push 0x22
push ebp
push edi
mov ecx, esi
call fcn.004b8f90
jmp 0x4bb98b
push 0x23
push 0xffffffffffffffff
push edi
mov ecx, esi
call fcn.004b8f90
jmp 0x4bb98b
push ebp
push edi
mov ecx, esi
call fcn.004b8e80
jmp 0x4bb98d
xor eax, eax
mov al, byte [esi + 0x2e55]
jmp 0x4bb98d
test edi, edi
setne cl
mov byte [esi + 0x2e55], cl
mov ecx, esi
call fcn.004ad110
jmp 0x4bb98b
mov ecx, esi
mov dword [esi + 0x2e4c], edi
call fcn.004ad110
mov ecx, esi
call fcn.004b4dd0
jmp 0x4bb98b
mov eax, dword [esi + 0x2e4c]
jmp 0x4bb98d
mov eax, dword [esi + 0x32c0]
jmp 0x4bb98d
mov ecx, esi
mov dword [esi + 0x32c0], edi
call fcn.004ad110
jmp 0x4bb98b
mov eax, dword [esi + 0x2e74]
jmp 0x4bb98d
mov ecx, esi
mov dword [esi + 0x2e74], edi
call fcn.004ad110
jmp 0x4bb98b
mov eax, dword [esi + 0x2e6c]
jmp 0x4bb98d
mov ecx, esi
mov dword [esi + 0x2e6c], edi
call fcn.004ad110
jmp 0x4bb98b
mov eax, dword [esi + 0x3378]
jmp 0x4bb98d
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x6c]
push ebp
mov ecx, esi
call fcn.004b9030
jmp 0x4bb98b
push 0x4b8
call fcn.00548c99
add esp, 4
mov dword [esp + 0x80], eax
test eax, eax
mov dword [esp + 0x70], 2
je 0x4bb4b9
mov ecx, eax
call fcn.004bfdf0
mov esi, eax
jmp 0x4bb4bb
xor esi, esi
test esi, esi
mov dword [esp + 0x70], 0xffffffff
je 0x4bb4ce
mov ecx, esi
call fcn.004bffc0
mov eax, esi
jmp 0x4bb98d
mov ecx, ebp
call fcn.004bffc0
jmp 0x4bb98d
mov ecx, ebp
call fcn.004bffd0
jmp 0x4bb98d
mov dword [esi + 0x32dc], edi
jmp 0x4bb98b
mov eax, dword [esi + 0x32dc]
jmp 0x4bb98d
mov dword [esi + 0x32a8], edi
jmp 0x4bb98b
mov ecx, dword [esi + 0x32f4]
xor eax, eax
cmp ecx, 2
sete al
jmp 0x4bb98d
sub edi, 0
je 0x4bb52c
dec edi
je 0x4bb57d
dec edi
je 0x4bb543
mov al, byte [esi + 0x32f8]
test al, al
je 0x4bb5ab
cmp dword [esi + 0x32f4], 1
jne 0x4bb5ab
xor eax, eax
jmp 0x4bb5b0
mov al, byte [esi + 0x32f8]
mov ecx, 3
test al, al
je 0x4bb56a
cmp dword [esi + 0x32f4], ecx
jne 0x4bb56a
xor eax, eax
mov dword [esi + 0x32f4], ecx
mov byte [esi + 0x32f8], al
jmp 0x4bb5c0
mov eax, 1
mov dword [esi + 0x32f4], ecx
mov byte [esi + 0x32f8], al
jmp 0x4bb5c0
mov al, byte [esi + 0x32f8]
test al, al
je 0x4bb594
cmp dword [esi + 0x32f4], 2
jne 0x4bb594
xor eax, eax
jmp 0x4bb599
mov eax, 1
mov byte [esi + 0x32f8], al
mov dword [esi + 0x32f4], 2
jmp 0x4bb5c0
mov eax, 1
mov byte [esi + 0x32f8], al
mov dword [esi + 0x32f4], 1
mov eax, dword [esi + 0x3290]
mov ecx, dword [esi + 0x328c]
push eax
push ecx
mov ecx, esi
call fcn.004ae370
mov esi, dword [esi + 0x32f4]
dec esi
je 0x4bb98b
dec esi
je 0x4ba220
dec esi
jne 0x4bb98b
mov eax, 2
jmp 0x4bb98d
xor eax, eax
mov ecx, esi
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x3c], esi
mov byte [esp + 0x44], 1
call fcn.004ae2f0
mov ebx, eax
mov ecx, esi
mov dword [esp + 0x48], ebx
call fcn.004ae310
mov ecx, dword [esi + 0x3378]
mov ebp, eax
push ebx
mov dword [esp + 0x50], ebp
call fcn.004c0220
mov ecx, dword [esi + 0x3378]
mov ebx, eax
push ebp
mov dword [esp + 0x5c], ebx
call fcn.004c0220
mov edx, dword [esi + 0x3300]
mov dword [esp + 0x5c], eax
mov eax, dword [esi + 0x32fc]
push edx
push eax
call fcn.004bf3d0
mov ecx, dword [esi + 0x3300]
mov edx, dword [esi + 0x32fc]
mov ebp, eax
push ecx
push edx
mov dword [esp + 0x60], ebp
call fcn.004bf3e0
add esp, 0x10
mov dword [esp + 0x54], eax
mov dword [esp + 0x40], ebx
mov ecx, 3
cmp edi, ebx
mov dword [esp + 0x70], ecx
jl 0x4bb72b
cmp edi, dword [esp + 0x5c]
jg 0x4bb72b
mov eax, dword [esi + 0x32f4]
cmp eax, 2
jne 0x4bb6c9
push ebp
push edi
mov ecx, esi
call fcn.004ade30
mov ebx, eax
mov eax, dword [esp + 0x54]
push eax
push edi
mov ecx, esi
mov dword [esp + 0x68], ebx
call fcn.004ade30
mov eax, ebx
jmp 0x4bb98d
cmp eax, ecx
jne 0x4bb6f3
mov ecx, dword [esi + 0x3378]
push edi
call fcn.004c01b0
mov ecx, dword [esi + 0x3378]
inc edi
mov ebx, eax
push edi
mov dword [esp + 0x64], ebx
call fcn.004c01b0
mov eax, ebx
jmp 0x4bb98d
cmp edi, ebx
jne 0x4bb6fd
mov ebx, dword [esp + 0x48]
jmp 0x4bb70b
mov ecx, dword [esi + 0x3378]
push edi
call fcn.004c01b0
mov ebx, eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x60], ebx
cmp edi, eax
je 0x4bb72e
mov ecx, dword [esi + 0x3378]
inc edi
push edi
call fcn.004c01b0
mov eax, ebx
jmp 0x4bb98d
or ebx, 0xffffffff
mov eax, ebx
jmp 0x4bb98d
xor eax, eax
mov ecx, esi
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x3c], esi
mov byte [esp + 0x44], 1
call fcn.004ae2f0
mov ebp, eax
mov ecx, esi
mov dword [esp + 0x48], ebp
call fcn.004ae310
mov ecx, dword [esi + 0x3378]
push ebp
mov dword [esp + 0x50], eax
call fcn.004c0220
mov ecx, dword [esp + 0x4c]
mov ebx, eax
push ecx
mov ecx, dword [esi + 0x3378]
mov dword [esp + 0x5c], ebx
call fcn.004c0220
mov edx, dword [esi + 0x3300]
mov dword [esp + 0x5c], eax
mov eax, dword [esi + 0x32fc]
push edx
push eax
call fcn.004bf3d0
mov ecx, dword [esi + 0x3300]
mov edx, dword [esi + 0x32fc]
push ecx
push edx
mov dword [esp + 0x60], eax
call fcn.004bf3e0
add esp, 0x10
mov dword [esp + 0x54], eax
mov dword [esp + 0x40], ebx
cmp edi, ebx
mov dword [esp + 0x70], 4
jl 0x4b9bd0
cmp edi, dword [esp + 0x5c]
jg 0x4b9bd0
mov eax, dword [esi + 0x32f4]
cmp eax, 2
jne 0x4bb803
mov eax, dword [esp + 0x50]
mov ecx, esi
push eax
push edi
call fcn.004ade30
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x60], eax
push ecx
push edi
mov ecx, esi
call fcn.004ade30
jmp 0x4bb98d
cmp eax, 3
jne 0x4bb82a
mov ecx, dword [esi + 0x3378]
push edi
call fcn.004c01b0
mov dword [esp + 0x60], eax
inc edi
mov ecx, dword [esi + 0x3378]
push edi
call fcn.004c01b0
jmp 0x4bb98d
cmp edi, ebx
jne 0x4bb834
mov dword [esp + 0x60], ebp
jmp 0x4bb844
mov ecx, dword [esi + 0x3378]
push edi
call fcn.004c01b0
mov dword [esp + 0x60], eax
cmp edi, dword [esp + 0x5c]
jne 0x4bb818
mov eax, dword [esp + 0x4c]
jmp 0x4bb98d
test edi, edi
setne dl
push edx
mov ecx, esi
call fcn.004b8ba0
jmp 0x4bb98b
xor eax, eax
mov al, byte [esi + 0x31cc]
jmp 0x4bb98d
mov dword [esi + 0x31d0], edi
jmp 0x4bb98b
mov eax, dword [esi + 0x31d0]
jmp 0x4bb98d
test edi, edi
setne al
mov byte [esi + 0x31d4], al
jmp 0x4bb98b
xor eax, eax
mov al, byte [esi + 0x31d4]
jmp 0x4bb98d
mov edx, dword [esi]
push 1
mov ecx, esi
mov dword [esi + 0x31c4], edi
call dword [edx + 0x7c]
jmp 0x4bb98b
mov eax, dword [esi + 0x31c4]
jmp 0x4bb98d
mov dword [esi + 0x31c8], edi
jmp 0x4bb98b
mov eax, dword [esi + 0x31c8]
jmp 0x4bb98d
push 1
mov ecx, esi
call fcn.004aeaf0
jmp 0x4bb98b
test edi, edi
setne al
mov ecx, esi
mov byte [esi + 0x2dec], al
mov dword [esi + 0x2df0], ebp
call fcn.004ad110
jmp 0x4bb98b
test edi, edi
setne cl
mov byte [esi + 0x2df8], cl
mov ecx, esi
mov dword [esi + 0x2dfc], ebp
call fcn.004ad110
jmp 0x4bb98b
test edi, edi
setne dl
mov ecx, esi
mov byte [esi + 0x2e04], dl
call fcn.004ad110
jmp 0x4bb98b
test edi, edi
setne al
mov ecx, esi
mov byte [esi + 0x2e05], al
call fcn.004ad110
jmp 0x4bb98b
mov byte [esi + 0x3324], 1
jmp 0x4bb98b
cmp ebx, 0xbba
je 0x4bb984
cmp ebx, 0x1a0a
je 0x4bb96f
mov edx, dword [esi]
push ebp
push edi
push ebx
mov ecx, esi
call dword [edx + 0x98]
jmp 0x4bb98d
mov dword [esi + 0x2e80], edi
mov dword [esi + 0x2e84], ebp
mov ecx, esi
call fcn.004ad110
jmp 0x4bb98b
mov byte [esi + 0x3324], 0
xor eax, eax
mov ecx, dword [esp + 0x68]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x64
ret 0xc