Function at 0x496720
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xbe4
push ebx
push ebp
mov ebp, ecx
mov eax, dword [ebp + 0x18]
push esi
mov esi, dword [eax + 0x68]
mov eax, dword [ebp + 0x50]
test eax, eax
lea ebx, [ebp + 0x50]
mov dword [esp + 0x14], esi
je 0x496758
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x496758
mov ecx, ebp
call fcn.0048e810
test eax, eax
je 0x496758
mov ecx, ebp
call fcn.0048fe80
mov eax, dword [ebp + 0x4c]
test eax, eax
mov eax, dword [esp + 0xbfc]
je 0x4967d8
test eax, eax
jne 0x496782
test byte [ebp + 0x57], 1
je 0x496782
mov ecx, ebp
call fcn.0048fe80
mov eax, dword [ebp + 0x54]
and eax, 0xfeffffff
mov dword [ebp + 0x54], eax
mov eax, dword [ebp + 0x4c]
test eax, eax
jne 0x497ad0
cmp dword [ebx], 0
jne 0x497ad0
cmp word [esi + 0x2a], 0
jne 0x497ad0
mov ecx, dword [ebp + 4]
mov ecx, dword [ecx + 0x18]
test ecx, ecx
je 0x4967b8
call fcn.00426480
test al, al
jne 0x497ad0
mov eax, dword [ebp + 0x20]
test eax, eax
push edi
mov edi, dword [esp + 0xbf8]
je 0x4967f2
mov eax, dword [eax + 0x2c]
mov ecx, dword [eax + 0x210]
test ecx, ecx
je 0x4967e6
mov eax, ecx
jmp 0x4967ed
test eax, eax
mov eax, dword [ebp + 0x54]
je 0x49677a
or eax, 0x1000000
jmp 0x49677f
mov ecx, eax
call fcn.004a0d20
cmp eax, 8
jl 0x49685a
push edi
call fcn.0043dbc0
fld qword [0x5f66c8]
fucompp
add esp, 4
fnstsw ax
test ah, 0x44
jp 0x496826
push edi
call fcn.0043dbe0
fld qword [0x5f66c8]
fucompp
add esp, 4
fnstsw ax
test ah, 0x44
jnp case.0x496870.1
push edi
call fcn.0043dc00
fld qword [0x5f66c8]
fucompp
add esp, 4
fnstsw ax
test ah, 0x44
jp 0x49685a
push edi
call fcn.0043dc20
fld qword [0x5f66c8]
fucompp
add esp, 4
fnstsw ax
test ah, 0x44
jnp case.0x496870.1
mov eax, dword [ebp + 0x18]
mov ecx, dword [eax + 0x78]
cmp ecx, 0x62
ja case.0x496870.1
movzx edx, byte [ecx + 0x497afc]
jmp dword [edx*4 + 0x497adc]
mov ecx, dword [ebp + 4]
mov ecx, dword [ecx + 0x28]
test ecx, ecx
je 0x4968a9
mov esi, dword [esp + 0xc04]
mov edx, dword [esp + 0xbfc]
test esi, esi
setne al
push edx
push eax
push edi
call fcn.00494020
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xbe4
ret 0x10
push edi
push 0
push eax
push esi
lea ecx, [esp + 0x140]
call fcn.00421c80
mov eax, dword [ebp + 0x18]
mov cl, byte [eax + 0x7e]
cmp cl, 0x20
je 0x4968d5
cmp cl, 0x53
mov dword [esp + 0xbb8], 0
jne 0x4968e0
mov dword [esp + 0xbb8], 1
mov bl, byte [eax + 0x7e]
mov eax, dword [ebp + 8]
cmp bl, 0x53
setne cl
dec cl
and ecx, 2
test eax, eax
mov byte [esp + 0xbc0], cl
je 0x496911
mov edx, dword [eax + 4]
mov al, byte [edx + 0x5c]
test al, al
setne al
movzx ecx, al
mov dword [esp + 0xbbc], ecx
add edi, 0x1c
mov edx, dword [edi]
mov eax, dword [edi + 4]
mov ecx, dword [edi + 8]
mov dword [esp + 0x180], edx
mov edx, dword [edi + 0xc]
mov dword [esp + 0x18c], edx
mov edx, dword [esp + 0xc04]
mov dword [esp + 0x188], ecx
mov ecx, dword [esp + 0xbfc]
mov dword [esp + 0xbf0], ebp
push edx
add ebp, 0x7c
mov dword [esp + 0x188], eax
mov eax, dword [edi + 0x10]
push ebp
mov dword [esp + 0xbcc], ecx
push 1
lea ecx, [esp + 0x13c]
mov dword [esp + 0x19c], eax
call fcn.0048ee10
mov al, byte [esp + 0x150]
test al, al
lea ecx, [esp + 0x130]
jne 0x497390
call fcn.0049d140
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xbe4
ret 0x10
lea ecx, [esp + 0x48]
call fcn.004015f0
mov eax, dword [esi + 0x210]
test eax, eax
jne 0x4969b6
mov ecx, esi
call fcn.004a0d20
mov dword [esp + 0x8c], eax
mov eax, dword [ebp + 0x18]
mov ecx, dword [eax + 0x74]
mov edx, dword [eax + 0x70]
push ecx
push 0
push edx
lea ecx, [esp + 0x54]
call fcn.0049c9d0
mov eax, dword [ebp + 0x18]
mov dl, byte [eax + 0x7e]
xor ecx, ecx
cmp dl, 0x21
sete cl
lea edx, [esp + 0x114]
push edx
mov dword [esp + 0xb0], ecx
lea ecx, [esp + 0x4c]
call fcn.0049e5f0
lea eax, [esp + 0xcc]
mov ecx, 7
lea esi, [esp + 0x114]
lea edi, [esp + 0xcc]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0xbf8]
push eax
push ecx
mov edx, eax
push edx
call fcn.0043e4f0
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x54]
mov dl, byte [eax + ecx]
add esp, 0xc
inc eax
mov dword [esp + 0x4c], eax
mov cl, byte [eax + ecx]
inc eax
mov dword [esp + 0x4c], eax
movzx eax, cl
cmp eax, 0x20
movzx edx, dl
mov dword [esp + 0xa8], edx
mov dword [esp + 0xb4], eax
jg 0x497395
cmp edx, 0x20
jg 0x497395
mov eax, dword [ebp + 4]
xor esi, esi
cmp word [eax + 0x56], si
mov dword [esp + 0x38], esi
je 0x496a92
mov eax, dword [ebp + 0x2c]
cmp eax, esi
je 0x496a82
mov eax, dword [eax + 8]
jmp 0x496a84
xor eax, eax
push ebx
push eax
call fcn.0048c190
add esp, 8
mov dword [esp + 0x38], eax
mov eax, dword [ebp + 0x2c]
xor ebx, ebx
cmp eax, esi
mov dword [esp + 0x34], esi
mov dword [esp + 0x2c], ebx
je 0x496ab2
mov eax, dword [eax + 8]
cmp eax, esi
je 0x496ab2
mov eax, dword [eax + 0x3e0]
jmp 0x496ab4
xor eax, eax
push eax
lea ecx, [esp + 0x70]
push ecx
call fcn.0043e900
mov edx, dword [ebp + 4]
mov eax, dword [edx + 0x1c]
add esp, 8
cmp eax, esi
mov dword [esp + 0x90], esi
mov dword [esp + 0x44], esi
mov dword [esp + 0x30], esi
je 0x496b19
cmp dword [eax + 0xc], esi
jbe 0x496b19
mov ecx, dword [ebp + 0x2c]
cmp ecx, esi
je 0x496aec
mov ecx, dword [ecx + 8]
jmp 0x496aee
xor ecx, ecx
cmp dword [ecx + 0x104], esi
jne 0x496b19
mov ecx, dword [eax + 4]
mov edx, dword [eax + 8]
mov dword [esp + 0x30], ecx
lea ecx, [esp + 0x34]
push ecx
push esi
push eax
mov ecx, ebp
mov dword [esp + 0x50], edx
call fcn.00490930
mov dword [esp + 0x90], eax
push ebp
mov dword [esp + 0x40], 0x400
mov dword [esp + 0x2c], 0x44800000
mov dword [esp + 0x28], esi
mov dword [esp + 0x24], esi
mov dword [esp + 0x8c], esi
mov dword [esp + 0x44], esi
mov dword [esp + 0x98], esi
call fcn.00472a70
add esp, 4
test al, al
je 0x496b84
mov edx, dword [ebp + 0x18]
mov ecx, dword [edx + 0x68]
mov eax, dword [ecx + 0x210]
cmp eax, esi
jne 0x496b65
call fcn.004a0d20
cmp eax, 5
jle 0x496b84
mov eax, dword [ebp + 0x2c]
cmp eax, esi
je 0x496b76
mov eax, dword [eax + 8]
jmp 0x496b78
xor eax, eax
cmp dword [eax + 0x104], esi
jne 0x496b84
mov al, 1
jmp 0x496b86
xor al, al
mov ecx, dword [ebp + 4]
cmp word [ecx + 0x56], si
jne 0x496c92
test al, al
je 0x496c92
mov eax, ebp
mov edx, 0x200
mov ecx, dword [eax + 4]
cmp dword [ecx + 4], esi
je 0x496bb3
test dword [eax + 0x54], edx
jne 0x496c92
cmp word [ecx + 0x56], si
jne 0x496c92
mov eax, dword [eax + 8]
cmp eax, esi
jne 0x496ba2
mov ecx, ebp
call fcn.0048e040
push eax
lea edx, [esp + 0x17]
push edx
lea eax, [esp + 0xcc]
push eax
lea ecx, [esp + 0xc4]
push ecx
lea edx, [esp + 0xdc]
push edx
call fcn.0043f2e0
mov eax, dword [esp + 0xcc]
add esp, 0x14
cmp eax, esi
jle 0x496c92
cmp dword [esp + 0xbc], esi
jle 0x496c92
mov al, byte [esp + 0x13]
test al, al
jne 0x496c92
push 0x6c
call fcn.005dd330
mov edi, eax
add esp, 4
test edi, edi
je 0x496c68
mov ecx, dword [esp + 0xbf8]
mov eax, dword [ebp + 4]
mov eax, dword [eax + 0x18]
push ecx
lea edx, [esp + 0x118]
push edx
mov edx, dword [ebp + 0x18]
lea ecx, [esp + 0xd4]
push ecx
push eax
mov eax, dword [edx + 0x68]
mov ecx, dword [eax + 0xd4]
push ebp
push ecx
call fcn.00472ce0
add esp, 4
push eax
mov ecx, edi
call fcn.00471e60
mov dword [esp + 0x20], eax
jmp 0x496c70
mov dword [esp + 0x20], 0
mov eax, dword [esp + 0xbf8]
mov cl, byte [eax + 0x30]
test cl, cl
seta cl
lea edx, [esp + 0x34]
push edx
push ecx
mov ecx, dword [esp + 0x28]
push 0
push 0
call fcn.00472940
mov edi, dword [esp + 0x18]
mov eax, dword [edi + 0xd4]
test eax, eax
je 0x496cae
mov cl, byte [eax + 0xc6d]
test cl, cl
jne 0x497395
test ebx, ebx
jne 0x496f67
lea ecx, [esp + 0x48]
call fcn.0049ce30
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
mov al, byte [ecx + edx]
movzx ebx, al
inc ecx
test ebx, ebx
mov dword [esp + 0x4c], ecx
je 0x4972a5
mov eax, ebx
and eax, 8
mov dword [esp + 0x14], eax
je 0x496d3b
mov eax, edx
add eax, ecx
add ecx, 2
mov dword [esp + 0x4c], ecx
xor ecx, ecx
mov ch, byte [eax + 1]
mov cl, byte [eax]
push ecx
mov ecx, edi
call fcn.0049d9e0
mov esi, eax
test esi, esi
je 0x496d0d
cmp dword [esi + 0x78], 3
je 0x496d0d
xor esi, esi
test esi, esi
mov edi, 0x400
mov dword [esp + 0x3c], edi
mov dword [esp + 0x28], 0x44800000
je 0x496d3f
cmp byte [esi + 0x7e], 0x4b
jne 0x496d3f
mov edi, 0x5000
mov dword [esp + 0x3c], edi
mov dword [esp + 0x28], 0x46a00000
jmp 0x496d3f
mov edi, dword [esp + 0x3c]
mov ecx, ebx
and ecx, 4
jne 0x496d62
mov eax, dword [ebp + 0x2c]
test eax, eax
je 0x496d52
mov eax, dword [eax + 8]
jmp 0x496d54
xor eax, eax
mov edx, dword [eax + 0x104]
test edx, edx
je 0x496e32
test ecx, ecx
je 0x496e00
mov edx, dword [esp + 0xac]
push edx
lea eax, [esp + 0xcc]
push eax
lea ecx, [esp + 0x50]
call fcn.0049cb20
mov ecx, dword [esp + 0x20]
test ecx, ecx
mov eax, dword [eax]
mov dword [esp + 0xb0], eax
je 0x496e00
mov ecx, dword [esp + 0xbf8]
mov edx, dword [ecx + 0x1c]
add ecx, 0x1c
test edx, edx
mov dword [esp + 0x1c], eax
je 0x496dbd
push eax
lea edx, [esp + 0xc4]
push edx
call fcn.0046bed0
mov eax, dword [eax]
mov dword [esp + 0x1c], eax
mov al, byte [esp + 0x1f]
cmp al, 0xff
je 0x496e00
movzx ecx, byte [esp + 0x1c]
movzx eax, al
inc eax
imul ecx, eax
sar ecx, 8
mov byte [esp + 0x1c], cl
mov edx, dword [esp + 0x1c]
shr edx, 8
movzx edx, dl
imul edx, eax
sar edx, 8
mov byte [esp + 0x1d], dl
mov ecx, dword [esp + 0x1c]
shr ecx, 0x10
movzx ecx, cl
imul ecx, eax
sar ecx, 8
mov byte [esp + 0x1e], cl
mov edx, dword [ebp + 4]
cmp word [edx + 0x56], 0
jne 0x496e32
mov ecx, dword [esp + 0xbf8]
lea eax, [esp + 0x34]
push eax
push ecx
lea edx, [esp + 0xb8]
push edx
mov ecx, ebp
call fcn.00490930
test eax, eax
mov dword [esp + 0x38], eax
je case.0x496870.1
test bl, 1
je 0x496e59
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0x48]
add eax, ecx
add ecx, 2
mov dword [esp + 0x4c], ecx
xor ecx, ecx
mov ch, byte [eax + 1]
movzx eax, byte [eax]
movsx edx, cx
or edx, eax
mov dword [esp + 0x7c], edx
test bl, 2
je 0x496e84
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
lea eax, [ecx + edx]
add ecx, 2
mov dword [esp + 0x4c], ecx
xor ecx, ecx
mov ch, byte [eax + 1]
movzx eax, byte [eax]
movsx edx, cx
or edx, eax
mov dword [esp + 0x80], edx
mov eax, dword [esp + 0x14]
test eax, eax
je 0x496f45
mov eax, dword [ebp + 0x2c]
test eax, eax
je 0x496f07
mov eax, dword [eax + 8]
test eax, eax
je 0x496f07
mov ecx, dword [eax + 0x3e0]
test ecx, ecx
je 0x496f07
call fcn.004b4e30
test al, al
je 0x496f07
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
lea eax, [ecx + edx]
add ecx, 2
mov dword [esp + 0x4c], ecx
xor ecx, ecx
mov ch, byte [eax + 1]
mov cl, byte [eax]
mov dword [esp + 0x84], 1
movzx edx, cx
mov dword [esp + 0x14], edx
fild dword [esp + 0x14]
fld dword [0x5f6864]
fdiv dword [esp + 0x28]
fmulp st(1)
fstp dword [esp + 0x78]
mov eax, dword [esp + 0x78]
fld dword [esp + 0x78]
mov dword [esp + 0x6c], eax
fmul dword [esp + 0x28]
call fcn.004fae80
jmp 0x496f41
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
lea eax, [ecx + edx]
add ecx, 2
mov dword [esp + 0x4c], ecx
xor ecx, ecx
mov ch, byte [eax + 1]
mov cl, byte [eax]
mov eax, 0x10000
cdq
idiv edi
mov dword [esp + 0x84], 0
imul eax, ecx
mov dword [esp + 0x78], eax
mov dword [esp + 0x6c], eax
imul eax, edi
mov dword [esp + 0x24], eax
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
mov al, byte [ecx + edx]
inc ecx
movzx ebx, al
mov dword [esp + 0x4c], ecx
lea ecx, [esp + 0x48]
mov dword [esp + 0x2c], ebx
call fcn.0049ce20
test ebx, ebx
jle 0x4972a5
mov eax, dword [esp + 0xa8]
push eax
lea ecx, [esp + 0x4c]
call fcn.0049ce60
mov ecx, dword [esp + 0xb4]
push ecx
lea ecx, [esp + 0x4c]
mov ebx, eax
call fcn.0049cef0
test esi, esi
mov dword [esp + 0x14], eax
je 0x497287
mov ax, word [esi + 0x36]
test ax, ax
je 0x496fba
movzx edx, ax
cmp ebx, edx
jl 0x496fba
mov dword [esp + 0x14], 0
jmp 0x497287
lea eax, [esp + 0xf8]
push eax
lea ecx, [esp + 0xd0]
push ecx
lea edx, [esp + 0x74]
push edx
call fcn.0043e4f0
mov eax, dword [esp + 0x3c]
add esp, 0xc
test eax, eax
jbe 0x497059
mov ecx, dword [esp + 0x44]
mov edi, eax
mov al, byte [ecx]
dec edi
inc ecx
test al, al
mov dword [esp + 0x30], edi
mov dword [esp + 0x44], ecx
je 0x497059
mov ecx, dword [esp + 0x8c]
lea eax, [esp + 0xe8]
push eax
push ecx
push ebx
push esi
mov ecx, ebp
call fcn.0048c270
test al, al
je 0x497059
lea edx, [esp + 0xe8]
push edx
push 0xffffffffffffffe0
call fcn.0043f690
mov eax, dword [ebp + 0x2c]
add esp, 8
test eax, eax
je 0x497030
mov eax, dword [eax + 8]
jmp 0x497032
xor eax, eax
push 0
lea ecx, [ebp + 0x4c]
push ecx
push eax
mov eax, dword [esp + 0x9c]
push eax
lea ecx, [esp + 0x108]
push ecx
lea edx, [esp + 0xfc]
push edx
call fcn.0048dc20
add esp, 0x18
mov eax, dword [esp + 0x20]
test eax, eax
je 0x497186
fild dword [esp + 0x24]
fmul dword [eax + 0x4c]
fcomp dword [0x5fb080]
fnstsw ax
test ah, 0x41
jp 0x497186
cmp dword [esp + 0x40], esi
je 0x497111
mov al, byte [esi + 0x38]
mov ecx, dword [esi + 0x70]
xor edi, edi
test al, 8
je 0x4970c2
movzx eax, word [esi + 0x36]
lea eax, [ecx + eax*4]
cmp eax, ecx
jb 0x4970df
mov edx, dword [esi + 0x74]
add edx, ecx
cmp eax, edx
ja 0x4970df
movzx edx, byte [eax + 1]
xor ecx, ecx
mov ch, byte [eax + 3]
mov cl, byte [eax + 2]
movzx eax, byte [eax]
shl ecx, 8
or ecx, edx
shl ecx, 8
or ecx, eax
jmp 0x4970dd
movzx edx, word [esi + 0x36]
lea eax, [ecx + edx*2]
cmp eax, ecx
jb 0x4970df
mov edx, dword [esi + 0x74]
add edx, ecx
cmp eax, edx
ja 0x4970df
xor ecx, ecx
mov ch, byte [eax + 1]
mov cl, byte [eax]
mov edi, ecx
mov edx, dword [ebp + 0x18]
mov eax, dword [edx + 0x68]
mov ecx, dword [eax + 0xd4]
push ecx
call fcn.00472ce0
push esi
call fcn.00472dd0
mov dword [esp + 0x90], eax
mov eax, dword [esi + 0x70]
add esp, 8
add eax, edi
mov dword [esp + 0x40], esi
mov dword [esp + 0x94], eax
fild dword [esp + 0x7c]
mov edx, dword [esp + 0x94]
mov ecx, dword [esi + 0x70]
lea eax, [edx + ebx*2]
cmp eax, ecx
fstp dword [esp + 0x98]
fild dword [esp + 0x80]
fstp dword [esp + 0x9c]
jb 0x497395
mov edx, dword [esi + 0x74]
add edx, ecx
cmp eax, edx
ja 0x497395
mov edx, dword [esp + 0x24]
push 0
lea ecx, [esp + 0x9c]
push ecx
push edx
xor edx, edx
mov dx, word [eax]
mov eax, dword [esp + 0x94]
lea ecx, [esp + 0x28]
push ecx
mov ecx, dword [ebp + 0x50]
push ebx
push edx
mov edx, dword [esp + 0x58]
push eax
push ecx
mov ecx, dword [esp + 0x40]
push edx
call fcn.00474320
jmp 0x497287
mov al, byte [esi + 0x38]
xor edx, edx
test al, 8
je 0x4971bd
mov ecx, dword [esi + 0x70]
lea eax, [ecx + ebx*4]
cmp eax, ecx
jb 0x4971df
mov edi, dword [esi + 0x74]
add edi, ecx
cmp eax, edi
ja 0x4971df
movzx ecx, byte [eax + 1]
xor edx, edx
mov dh, byte [eax + 3]
mov dl, byte [eax + 2]
movzx eax, byte [eax]
shl edx, 8
or edx, ecx
shl edx, 8
or edx, eax
jmp 0x4971d7
mov eax, dword [esi + 0x70]
lea ecx, [eax + ebx*2]
cmp ecx, eax
jb 0x4971df
mov edi, dword [esi + 0x74]
add edi, eax
cmp ecx, edi
ja 0x4971df
xor edx, edx
mov dh, byte [ecx + 1]
mov dl, byte [ecx]
test edx, edx
jl 0x497395
cmp edx, dword [esi + 0x74]
jg 0x497395
lea ecx, [esp + 0xf8]
push ecx
push edx
mov edx, dword [esp + 0x20]
push esi
push edx
lea ecx, [esp + 0x140]
call fcn.00421c80
mov ecx, dword [esp + 0x1a8]
mov eax, 1
mov dword [esp + 0xbec], eax
mov dword [esp + 0xbf0], ebp
mov dword [ecx], 0
mov edx, dword [esp + 0x1ac]
mov dword [edx], 0
mov ecx, dword [esp + 0x1ac]
mov word [ecx + 4], 0
mov edx, dword [esp + 0x1a8]
mov ecx, dword [esp + 0x38]
mov dword [edx + 4], ecx
mov edx, dword [esp + 0xc04]
mov dword [esp + 0x1a4], eax
push edx
lea eax, [ebp + 0x7c]
push eax
push 0
lea ecx, [esp + 0x13c]
call fcn.0048ee10
mov al, byte [esp + 0x150]
test al, al
lea ecx, [esp + 0x130]
jne 0x497390
call fcn.0049d140
mov edx, dword [esp + 0x7c]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x2c]
add edx, ecx
dec eax
mov dword [esp + 0x7c], edx
mov dword [esp + 0x2c], eax
mov ebx, eax
jmp 0x496c92
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x4972b3
mov edx, dword [ecx]
push 1
call dword [edx]
lea ecx, [esp + 0x48]
call fcn.0049ce30
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xbe4
ret 0x10
push edi
push 0
push eax
push esi
lea ecx, [esp + 0x140]
call fcn.00421c80
mov eax, dword [ebp + 0x18]
mov cl, byte [eax + 0x7e]
cmp cl, 0x2e
je 0x4972f5
cmp cl, 0x54
mov dword [esp + 0xbb8], 0
jne 0x497300
mov dword [esp + 0xbb8], 1
cmp byte [eax + 0x7e], 0x54
setne al
dec al
add edi, 0x1c
mov ecx, dword [edi]
mov edx, dword [edi + 4]
mov dword [esp + 0x180], ecx
mov dword [esp + 0x184], edx
and eax, 2
mov byte [esp + 0xbc0], al
mov eax, dword [edi + 8]
mov ecx, dword [edi + 0xc]
mov edx, dword [edi + 0x10]
mov dword [esp + 0x188], eax
mov eax, dword [ebp + 4]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x190], edx
movzx ecx, word [eax + 0x5a]
mov edx, dword [esp + 0xbfc]
mov dword [esp + 0xbf0], ebp
mov dword [esp + 0x194], ecx
add ebp, 0x7c
push ebp
lea ecx, [esp + 0x134]
mov dword [esp + 0xbc8], edx
call fcn.0048f440
mov al, byte [esp + 0x150]
test al, al
lea ecx, [esp + 0x130]
je 0x49698a
call fcn.0049d140
mov esi, dword [esp + 0x18]
mov ecx, dword [esi + 0xd4]
push 1
call fcn.004b5010
mov eax, dword [esi + 0xd4]
mov ecx, dword [eax]
push 0x8e
push 3
push eax
call dword [ecx + 0xe0]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xbe4
ret 0x10
mov eax, dword [ebp + 4]
mov ecx, dword [eax + 0x18]
lea edx, [edi + 0x1c]
push edx
call fcn.0048c160
mov ecx, dword [ebp + 4]
mov eax, dword [ecx + 0x18]
push eax
call fcn.004f79e0
add esp, 4
test al, al
je case.0x496870.1
mov edx, dword [ebp + 4]
mov ecx, dword [edx + 0x18]
push 0
push 0
add edi, 0x30
push edi
push 0
call fcn.0042e900
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xbe4
ret 0x10
cmp dword [ebx], 0
jne case.0x496870.1
mov edi, dword [ebp + 4]
mov ecx, dword [edi + 8]
test ecx, ecx
je case.0x496870.1
mov cl, byte [eax + 0xc]
cmp cl, 2
jb 0x49758b
cmp cl, 5
ja 0x49758b
mov ecx, dword [edi + 0x50]
test ecx, ecx
je 0x49758b
mov cx, word [eax + 8]
test cx, cx
jbe 0x49758b
mov esi, dword [eax]
test esi, esi
je 0x49758b
mov edx, dword [eax + 4]
test edx, edx
je 0x49758b
mov ax, word [eax + 0xa]
cmp ax, 0xffff
jne 0x49747d
movzx eax, word [edi + 0x5a]
jmp 0x497480
movzx eax, ax
movzx ecx, cx
cdq
idiv ecx
mov ebx, edx
test ebx, ebx
mov dword [esp + 0x18], ebx
jl 0x49758b
lea eax, [esi + ebx*4]
cmp dword [eax], 0
jne 0x4974ad
dec ebx
sub eax, 4
test ebx, ebx
jge 0x497497
mov dword [esp + 0x18], ebx
jmp 0x49758b
test ebx, ebx
mov dword [esp + 0x18], ebx
jl 0x49758b
movzx edx, word [edi + 0x54]
cmp ebx, edx
je 0x49758b
mov esi, ebx
jmp 0x4974d0
mov ecx, dword [ebp + 4]
movzx eax, word [ecx + 0x54]
lea edi, [esi - 1]
cmp eax, edi
jl 0x4974e2
cmp ebx, eax
jg 0x497513
mov eax, dword [ebp + 0x18]
mov edx, dword [eax]
mov edx, dword [edx + esi*4]
test edx, edx
mov eax, dword [eax + 4]
mov eax, dword [eax + esi*4]
je 0x49750b
test eax, eax
je 0x49750b
mov ecx, dword [ecx + 0x50]
mov ebx, dword [ecx]
push eax
push edx
push ebp
call dword [ebx + 0x10]
test al, al
mov ebx, dword [esp + 0x18]
jne 0x497548
mov esi, edi
test esi, esi
jge 0x4974d0
jmp 0x49758b
mov ecx, dword [ebp + 4]
movzx esi, word [ecx + 0x54]
mov eax, dword [ebp + 0x18]
movzx ecx, word [eax + 8]
inc esi
cmp esi, ecx
jge 0x497546
mov edx, dword [eax]
lea eax, [edx + esi*4]
jmp 0x497530
cmp dword [eax], 0
jne 0x497544
mov edx, dword [ebp + 0x18]
movzx edx, word [edx + 8]
inc esi
add eax, 4
cmp esi, edx
jl 0x497530
cmp esi, ecx
je 0x49758b
test esi, esi
jl 0x49758b
cmp esi, ebx
jg 0x497579
mov eax, dword [ebp + 0x18]
mov ecx, dword [eax]
mov edx, dword [ecx + esi*4]
test edx, edx
mov eax, dword [eax + 4]
mov eax, dword [eax + esi*4]
je 0x497574
test eax, eax
je 0x497574
mov ecx, dword [ebp + 4]
mov ecx, dword [ecx + 0x50]
mov edi, dword [ecx]
push eax
push edx
push ebp
call dword [edi + 0xc]
inc esi
cmp esi, ebx
jle 0x497550
push ebx
mov ecx, ebp
call fcn.00495420
mov edx, dword [ebp + 4]
mov eax, dword [edx + 8]
mov byte [eax + 0x28], 0
mov ecx, dword [ebp + 4]
mov esi, dword [ecx + 8]
mov ecx, esi
mov dword [esp + 0x14], esi
call fcn.0043fd70
test eax, eax
jne 0x4975aa
cmp dword [esi + 0xc], 6
jne case.0x496870.1
cmp byte [esi + 0x28], 1
je case.0x496870.1
push 0x3c
call fcn.005dd330
mov esi, eax
add esp, 4
test esi, esi
je case.0x496870.1
mov ecx, ebp
call fcn.0048e810
push eax
mov ecx, esi
call fcn.00463100
mov ebx, eax
xor esi, esi
cmp ebx, esi
je case.0x496870.1
mov edx, dword [ebp + 4]
mov dword [ebp + 0x50], ebx
cmp word [edx + 0x56], si
mov ecx, ebx
je 0x4975fd
push 5
call fcn.00463200
jmp 0x497730
push 1
call fcn.00463200
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x10]
mov edx, dword [eax + 0x14]
mov dword [esp + 0x9c], ecx
push 1
mov ecx, ebx
mov dword [esp + 0xa4], esi
mov dword [esp + 0x9c], esi
mov dword [esp + 0xa8], edx
call fcn.00463200
mov eax, dword [ebp + 0x2c]
cmp eax, esi
je 0x497649
mov eax, dword [eax + 8]
cmp eax, esi
je 0x497649
mov eax, dword [eax + 0x3e0]
jmp 0x49764b
xor eax, eax
mov ecx, dword [ebp + 0x18]
push eax
mov eax, dword [ebx + 0x38]
add eax, 8
push eax
add ecx, 0x4c
push ecx
lea edx, [esp + 0xa4]
push edx
call fcn.0043ed10
mov esi, dword [ebx + 0x38]
add esi, 8
mov ecx, 7
lea edi, [esp + 0x108]
rep movsd dword es:[edi], dword [esi]
add esp, 0x10
mov ecx, ebp
call fcn.0048e810
mov ecx, dword [eax]
mov eax, dword [ebp + 0x2c]
test eax, eax
je 0x497693
mov eax, dword [eax + 8]
jmp 0x497695
xor eax, eax
mov eax, dword [eax + 0x3e0]
mov edx, dword [ebx + 0x38]
mov edi, dword [esp + 0xbf8]
push eax
add edx, 0x24
push edx
push ecx
lea eax, [esp + 0x104]
push eax
push edi
call fcn.0048c4b0
mov ecx, dword [ebx + 0x38]
mov esi, dword [esp + 0x28]
mov dword [ecx + 4], esi
mov edx, dword [ebx + 0x38]
mov word [edx], 0x41
mov eax, dword [ebp + 0x18]
mov cl, byte [eax + 0xd]
add esp, 0x14
test cl, 1
jne 0x4976df
mov eax, dword [ebx + 0x38]
or byte [eax], 2
mov edx, dword [ebx + 0x38]
lea ecx, [edi + 0x1c]
add edx, 0x40
mov eax, ecx
mov edi, dword [eax]
mov dword [edx], edi
mov edi, dword [eax + 4]
mov dword [edx + 4], edi
mov edi, dword [eax + 8]
mov dword [edx + 8], edi
mov edi, dword [eax + 0xc]
mov dword [edx + 0xc], edi
mov eax, dword [eax + 0x10]
mov dword [edx + 0x10], eax
call fcn.00444a80
or al, byte [esi + 0x20]
mov byte [ebx + 0x24], al
mov eax, dword [ebx + 0x38]
cmp dword [eax + 0x3c], 1
jne 0x497726
add eax, 0x24
push eax
call fcn.0043dd40
add esp, 4
mov ecx, dword [ebx + 0x38]
mov dword [ecx + 0x3c], 2
mov ecx, ebx
call fcn.0046f9a0
mov eax, dword [ebp + 0x2c]
test eax, eax
je 0x497743
mov ecx, dword [eax + 8]
jmp 0x497745
xor ecx, ecx
mov edx, dword [esp + 0xbf8]
push 0
lea eax, [ebp + 0x4c]
push eax
mov eax, dword [ebp + 0x18]
push ecx
push ebx
push edx
add eax, 0x4c
push eax
call fcn.0048dc20
add esp, 0x18
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xbe4
ret 0x10
mov ecx, dword [eax]
mov eax, dword [ecx]
test eax, eax
je case.0x496870.1
mov ecx, dword [eax + 4]
test ecx, ecx
je case.0x496870.1
push 0x3c
call fcn.005dd330
mov esi, eax
add esp, 4
test esi, esi
je case.0x496870.1
mov ecx, ebp
call fcn.0048e810
push eax
mov ecx, esi
call fcn.00463100
mov ebx, eax
test ebx, ebx
je case.0x496870.1
mov edx, dword [ebp + 4]
mov dword [ebp + 0x50], ebx
cmp word [edx + 0x56], 0
mov ecx, ebx
je 0x4977d0
push 5
call fcn.00463200
jmp 0x497a69
push 1
call fcn.00463200
mov ecx, ebp
call fcn.0048e810
mov edi, dword [eax]
mov esi, dword [esp + 0xbf8]
push esi
mov dword [esp + 0x18], edi
call fcn.0043ee90
add esp, 4
test eax, eax
je 0x497867
fild dword [esp + 0x14]
sub esp, 0x10
fmul qword [0x5f6e98]
fstp qword [esp + 0xa8]
fld qword [0x5f9d18]
fstp qword [esp + 8]
fld qword [esp + 0xa8]
fstp qword [esp]
push esi
call fcn.0043dbc0
push ecx
fstp qword [esp]
call fcn.0043d240
add esp, 0x18
test eax, eax
je 0x497867
fld qword [0x5f9d18]
sub esp, 0x10
fstp qword [esp + 8]
fld qword [esp + 0xa8]
fstp qword [esp]
push esi
call fcn.0043dc20
push ecx
fstp qword [esp]
call fcn.0043d240
add esp, 0x18
test eax, eax
je 0x497867
mov cl, 1
jmp 0x497869
xor cl, cl
cmp edi, 1
mov byte [esp + 0x13], cl
jle 0x4978ac
mov eax, dword [ebp + 0x18]
mov edx, dword [eax]
mov eax, dword [edx + 0x44]
dec eax
je 0x497888
dec eax
jne 0x4978ac
test cl, cl
je 0x49798d
mov ecx, dword [esi + 0x10]
mov eax, edi
cdq
sub eax, edx
sar eax, 1
add ecx, eax
lea edx, [edi - 1]
not edx
and ecx, edx
mov dword [esi + 0x10], ecx
mov ecx, dword [esi + 0x14]
add ecx, eax
and ecx, edx
mov dword [esi + 0x14], ecx
mov cl, byte [esp + 0x13]
test cl, cl
je 0x49798d
mov eax, dword [ebp + 0x2c]
test eax, eax
je 0x4978ca
mov eax, dword [eax + 8]
test eax, eax
je 0x4978ca
mov eax, dword [eax + 0x3e0]
jmp 0x4978cc
xor eax, eax
push eax
lea edx, [esp + 0x70]
push edx
call fcn.0043e900
mov eax, dword [esi + 0x10]
cdq
idiv edi
add esp, 8
shl eax, 0x10
mov dword [esp + 0x7c], eax
mov eax, dword [esi + 0x14]
cdq
idiv edi
shl eax, 0x10
mov dword [esp + 0x80], eax
mov eax, dword [ebp + 0x2c]
test eax, eax
je 0x49790d
mov eax, dword [eax + 8]
test eax, eax
je 0x49790d
mov eax, dword [eax + 0x3e0]
jmp 0x49790f
xor eax, eax
push eax
mov eax, dword [ebx + 0x38]
add eax, 0x24
push eax
lea ecx, [esp + 0x74]
push ecx
call fcn.0043f9a0
mov eax, dword [ebx + 0x38]
mov ecx, dword [eax + 0x3c]
add esp, 0xc
cmp ecx, 1
jne 0x49793b
add eax, 0x24
push eax
call fcn.0043dd40
add esp, 4
mov edx, dword [ebx + 0x38]
mov dword [edx + 0x3c], 2
mov eax, dword [ebp + 0x2c]
test eax, eax
je 0x497951
mov eax, dword [eax + 8]
jmp 0x497953
xor eax, eax
mov ecx, dword [eax + 0x104]
test ecx, ecx
je 0x497a03
mov edi, dword [ebx + 0x38]
add edi, 8
mov ecx, 7
lea esi, [esp + 0x6c]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebx + 0x38]
cmp dword [eax + 0x20], 1
jne 0x497a03
add eax, 8
push eax
call fcn.0043dd40
add esp, 4
jmp 0x497a03
lea eax, [esp + 0x6c]
push eax
push 0x140000
push 0x140000
call fcn.0043ea40
mov eax, dword [ebp + 0x2c]
add esp, 0xc
test eax, eax
je 0x4979b0
mov eax, dword [eax + 8]
jmp 0x4979b2
xor eax, eax
mov ecx, dword [eax + 0x104]
test ecx, ecx
je 0x4979d8
mov edi, dword [ebx + 0x38]
add edi, 8
mov ecx, 7
lea esi, [esp + 0x6c]
rep movsd dword es:[edi], dword [esi]
mov esi, dword [esp + 0xbf8]
mov edi, dword [esp + 0x14]
mov eax, dword [ebp + 0x2c]
test eax, eax
je 0x4979e4
mov eax, dword [eax + 8]
jmp 0x4979e6
xor eax, eax
mov ecx, dword [eax + 0x3e0]
mov edx, dword [ebx + 0x38]
push ecx
add edx, 0x24
push edx
push edi
lea eax, [esp + 0x78]
push eax
push esi
call fcn.0048c4b0
add esp, 0x14
mov ecx, dword [ebp + 0x18]
mov edx, dword [ecx]
mov eax, dword [ebx + 0x38]
add edx, 0x18
mov dword [eax + 4], edx
mov ecx, dword [ebx + 0x38]
mov word [ecx], 0x41
mov edx, dword [ebp + 0x18]
mov eax, dword [edx]
mov cl, byte [eax + 0x48]
test cl, cl
jne 0x497a2b
mov eax, dword [ebx + 0x38]
or byte [eax], 2
mov edx, dword [ebx + 0x38]
mov ecx, dword [esp + 0xbf8]
add ecx, 0x1c
add edx, 0x40
mov eax, ecx
mov esi, dword [eax]
mov dword [edx], esi
mov esi, dword [eax + 4]
mov dword [edx + 4], esi
mov esi, dword [eax + 8]
mov dword [edx + 8], esi
mov esi, dword [eax + 0xc]
mov dword [edx + 0xc], esi
mov eax, dword [eax + 0x10]
mov dword [edx + 0x10], eax
call fcn.00444a80
mov ecx, dword [ebp + 0x18]
mov edx, dword [ecx]
or al, byte [edx + 0x38]
mov byte [ebx + 0x24], al
mov ecx, ebx
call fcn.0046f9a0
mov eax, dword [ebp + 0x2c]
test eax, eax
je 0x497a7c
mov eax, dword [eax + 8]
jmp 0x497a7e
xor eax, eax
push 0
lea ecx, [ebp + 0x4c]
push ecx
mov ecx, dword [ebp + 0x18]
push eax
mov eax, dword [esp + 0xc04]
push ebx
push eax
add ecx, 0x4c
push ecx
call fcn.0048dc20
add esp, 0x18
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xbe4
ret 0x10
mov edx, dword [ebp + 4]
mov ecx, dword [edx + 0x28]
test ecx, ecx
je case.0x496870.1
mov ebx, dword [esp + 0xc04]
mov eax, dword [esp + 0xbfc]
test ebx, ebx
setne dl
push eax
push edx
push edi
call fcn.00494020
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xbe4
ret 0x10