Function at 0x48fef0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x8cbf38]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x28]
cmp eax, dword [ecx + 8]
jbe 0x491737
sub esp, 0xa8
mov eax, dword [esp + 0xb4]
test eax, eax
je 0x491071
mov ecx, dword [esp + 0xc0]
test ecx, ecx
je 0x49106d
test eax, 0x200
jne 0x48ff42
lea edx, [0x702820]
mov ebx, dword [esp + 0xac]
jmp 0x48ff7a
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov edx, dword [esp + 0xb0]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004a6270
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, eax
mov ebx, ecx
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xc0]
test ecx, 0x200
jne 0x48ff91
lea ebp, [0x702820]
mov esi, dword [esp + 0xb8]
jmp 0x48ffd9
mov dword [esp + 0x70], ebx
mov dword [esp + 0x34], edx
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov edx, dword [esp + 0xbc]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004a6270
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x34]
mov ebx, dword [esp + 0x70]
mov ebp, eax
mov esi, ecx
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xc0]
cmp edx, ebp
jne 0x48fff6
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
call fcn.00407c30
movzx eax, byte [esp + 0xc]
test al, al
jne 0x490005
mov byte [esp + 0xc8], 0
add esp, 0xa8
ret
mov eax, dword [0x6be7e0]
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov ebx, dword [esp + 0xb0]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0xb4]
mov dword [esp + 8], ebp
mov esi, dword [esp + 0xb8]
mov dword [esp + 0xc], esi
mov edi, dword [esp + 0xbc]
mov dword [esp + 0x10], edi
mov esi, dword [esp + 0xc0]
mov dword [esp + 0x14], esi
lea edx, [0x6be7e0]
call eax
movzx eax, byte [esp + 0x18]
test al, al
je 0x490231
mov eax, dword [esp + 0xb4]
mov ecx, eax
and eax, 0x1f
add eax, 0xffffffeb
nop
nop
cmp eax, 1
ja 0x4900b0
mov eax, dword [esp + 0xac]
cmp dword [eax], 4
jne 0x49171e
mov edx, dword [eax + 4]
test edx, edx
je 0x49171e
test ecx, 0x80
je 0x4900a5
mov edx, dword [esp + 0xb0]
mov ebx, dword [edx]
jmp 0x4900c0
mov edx, dword [esp + 0xb0]
mov ebx, edx
jmp 0x4900c0
mov eax, dword [esp + 0xac]
mov edx, dword [esp + 0xb0]
mov ebx, edx
mov ebp, dword [esp + 0xc0]
mov esi, ebp
and ebp, 0x1f
add ebp, 0xffffffeb
nop
nop
cmp ebp, 1
ja 0x490110
mov ebp, dword [esp + 0xb8]
cmp dword [ebp], 4
jne 0x491706
mov edi, dword [ebp + 4]
test edi, edi
je 0x491706
test esi, 0x80
je 0x490105
mov edi, dword [esp + 0xbc]
mov ebp, dword [edi]
jmp 0x490119
mov edi, dword [esp + 0xbc]
mov ebp, edi
jmp 0x490119
mov edi, dword [esp + 0xbc]
mov ebp, edi
mov dword [esp + 0x74], ebx
mov dword [esp + 0x7c], ebp
cmp ebp, ebx
jae 0x490135
test ecx, 0x200
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x74]
jmp 0x490143
test ecx, 0x200
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0x7c]
jne 0x490159
mov dword [esp + 0x60], eax
lea eax, [0x702820]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x60]
jmp 0x490187
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x78], ebp
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004a6270
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x78]
mov dword [esp + 0x30], eax
mov eax, ecx
mov dword [esp + 0x98], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], ebp
mov ecx, dword [esp + 0x30]
mov dword [esp + 0xa0], ecx
mov dword [esp + 0xa4], eax
lea eax, [0x634860]
mov dword [esp], eax
mov ecx, dword [esp + 0xc4]
mov dword [esp + 4], ecx
lea edx, [esp + 0x98]
mov dword [esp + 8], edx
call fcn.00410b30
mov eax, dword [esp + 0xc]
movzx eax, byte [eax]
test al, al
jne 0x49105e
lea eax, [0x634860]
mov dword [esp], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 4], eax
lea ecx, [esp + 0x98]
mov dword [esp + 8], ecx
call fcn.00411080
mov eax, dword [esp + 0xc]
mov byte [eax], 1
mov eax, dword [esp + 0xb4]
mov ecx, eax
and eax, 0x1f
nop
cmp eax, 0x11
ja 0x49061a
cmp eax, 0xc
jbe 0x49037b
cmp eax, 0xe
jbe 0x49030b
lea edx, [eax - 0xf]
cmp edx, 1
jbe 0x490271
cmp eax, 0x11
jne 0x490fbc
xor eax, eax
jmp 0x4915f2
cmp eax, 0xf
jne 0x490290
mov eax, dword [esp + 0xb0]
movss xmm0, dword [eax]
movss xmm1, dword [eax + 4]
cvtss2sd xmm0, xmm0
cvtss2sd xmm1, xmm1
jmp 0x4902a0
mov eax, dword [esp + 0xb0]
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
mov eax, dword [esp + 0xc0]
and eax, 0x1f
nop
cmp eax, 0xf
jne 0x4902ca
mov eax, dword [esp + 0xbc]
movss xmm2, dword [eax]
movss xmm3, dword [eax + 4]
cvtss2sd xmm2, xmm2
cvtss2sd xmm3, xmm3
jmp 0x4902e3
cmp eax, 0x10
jne 0x4915a6
mov eax, dword [esp + 0xbc]
movsd xmm2, qword [eax]
movsd xmm3, qword [eax + 8]
ucomisd xmm0, xmm2
sete cl
setnp al
and ecx, eax
ucomisd xmm1, xmm3
sete dl
setnp al
and edx, eax
and ecx, edx
mov byte [esp + 0xc8], cl
add esp, 0xa8
ret
cmp eax, 0xd
jne 0x490321
mov eax, dword [esp + 0xb0]
movss xmm0, dword [eax]
cvtss2sd xmm0, xmm0
jmp 0x49032c
mov eax, dword [esp + 0xb0]
movsd xmm0, qword [eax]
mov eax, dword [esp + 0xc0]
and eax, 0x1f
nop
cmp eax, 0xd
jne 0x49034d
mov eax, dword [esp + 0xbc]
movss xmm1, dword [eax]
cvtss2sd xmm1, xmm1
jmp 0x490361
cmp eax, 0xe
jne 0x491568
mov eax, dword [esp + 0xbc]
movsd xmm1, qword [eax]
ucomisd xmm1, xmm0
sete cl
setnp al
and ecx, eax
mov byte [esp + 0xc8], cl
add esp, 0xa8
ret
cmp eax, 1
jne 0x4903dc
mov eax, dword [esp + 0xc0]
mov ecx, eax
and eax, 0x1f
mov edx, dword [esp + 0xb0]
movzx edx, byte [edx]
cmp eax, 1
je 0x4903c2
mov byte [esp + 0x27], dl
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0049d470
movzx edx, byte [esp + 0x27]
mov eax, dword [esp + 0xbc]
cmp byte [eax], dl
sete al
mov byte [esp + 0xc8], al
add esp, 0xa8
ret
lea edx, [eax - 2]
cmp edx, 4
ja 0x490505
cmp eax, 3
ja 0x490419
cmp eax, 2
jne 0x490402
mov eax, dword [esp + 0xb0]
mov eax, dword [eax]
mov ecx, eax
sar eax, 0x1f
jmp 0x490462
mov ecx, dword [esp + 0xb0]
movsx eax, byte [ecx]
mov ecx, eax
sar ecx, 0x1f
mov edx, eax
mov eax, ecx
mov ecx, edx
jmp 0x490462
cmp eax, 4
jne 0x490435
mov ecx, dword [esp + 0xb0]
movsx eax, word [ecx]
mov ecx, eax
sar ecx, 0x1f
mov edx, eax
mov eax, ecx
mov ecx, edx
jmp 0x490462
cmp eax, 5
jne 0x490450
mov ecx, dword [esp + 0xb0]
mov eax, dword [ecx]
mov ecx, eax
sar ecx, 0x1f
mov edx, eax
mov eax, ecx
mov ecx, edx
jmp 0x490462
mov ecx, dword [esp + 0xb0]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov edx, eax
mov eax, ecx
mov ecx, edx
mov edx, dword [esp + 0xc0]
and edx, 0x1f
mov dword [esp + 0x5c], edx
nop
cmp edx, 3
ja 0x4904ab
cmp edx, 2
jne 0x490491
mov edx, dword [esp + 0xbc]
mov edx, dword [edx]
mov ebx, edx
sar edx, 0x1f
mov ebp, ebx
mov ebx, edx
mov edx, ebp
jmp 0x4904eb
cmp edx, 3
jne 0x49152e
mov ebx, dword [esp + 0xbc]
movsx edx, byte [ebx]
mov ebx, edx
sar ebx, 0x1f
jmp 0x4904eb
cmp edx, 4
jne 0x4904c1
mov ebx, dword [esp + 0xbc]
movsx edx, word [ebx]
mov ebx, edx
sar ebx, 0x1f
jmp 0x4904eb
cmp edx, 5
jne 0x4904d6
mov ebx, dword [esp + 0xbc]
mov edx, dword [ebx]
mov ebx, edx
sar ebx, 0x1f
jmp 0x4904eb
cmp edx, 6
jne 0x49152e
mov ebx, dword [esp + 0xbc]
mov edx, dword [ebx]
mov ebx, dword [ebx + 4]
cmp ecx, edx
sete cl
cmp eax, ebx
sete al
and ecx, eax
mov byte [esp + 0xc8], cl
add esp, 0xa8
ret
cmp eax, 7
jb 0x490fbc
cmp eax, 9
ja 0x490546
cmp eax, 7
jne 0x490525
mov eax, dword [esp + 0xb0]
mov eax, dword [eax]
xor ecx, ecx
jmp 0x490576
cmp eax, 8
jne 0x490538
mov ecx, dword [esp + 0xb0]
movzx eax, byte [ecx]
xor ecx, ecx
jmp 0x490576
mov ecx, dword [esp + 0xb0]
movzx eax, word [ecx]
xor ecx, ecx
jmp 0x490576
cmp eax, 0xa
jne 0x490558
mov ecx, dword [esp + 0xb0]
mov eax, dword [ecx]
xor ecx, ecx
jmp 0x490576
cmp eax, 0xb
jne 0x49056b
mov ecx, dword [esp + 0xb0]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
jmp 0x490576
mov edx, dword [esp + 0xb0]
mov eax, dword [edx]
xor ecx, ecx
mov edx, dword [esp + 0xc0]
and edx, 0x1f
mov dword [esp + 0x5c], edx
nop
cmp edx, 9
ja 0x4905c6
cmp edx, 7
jne 0x49059c
mov edx, dword [esp + 0xbc]
mov edx, dword [edx]
xor ebx, ebx
jmp 0x490600
cmp edx, 8
jne 0x4905af
mov ebx, dword [esp + 0xbc]
movzx edx, byte [ebx]
xor ebx, ebx
jmp 0x490600
cmp edx, 9
jne 0x4914f4
mov ebx, dword [esp + 0xbc]
movzx edx, word [ebx]
xor ebx, ebx
jmp 0x490600
cmp edx, 0xa
jne 0x4905d8
mov ebx, dword [esp + 0xbc]
mov edx, dword [ebx]
xor ebx, ebx
jmp 0x490600
cmp edx, 0xb
jne 0x4905eb
mov ebx, dword [esp + 0xbc]
mov edx, dword [ebx]
mov ebx, dword [ebx + 4]
jmp 0x490600
cmp edx, 0xc
jne 0x4914f4
mov ebp, dword [esp + 0xbc]
mov edx, dword [ebp]
xor ebx, ebx
cmp eax, edx
sete al
cmp ecx, ebx
sete cl
and ecx, eax
mov byte [esp + 0xc8], cl
add esp, 0xa8
ret
cmp eax, 0x15
jbe 0x490ad9
cmp eax, 0x17
jbe 0x4906f3
cmp eax, 0x18
je 0x490667
cmp eax, 0x19
jne 0x490fbc
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov edx, dword [esp + 0xb0]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004a3f80
mov eax, dword [esp + 0xc]
mov dword [esp + 0x40], eax
xor ecx, ecx
jmp 0x491404
mov eax, dword [esp + 0xc0]
mov ecx, eax
and eax, 0x1f
mov edx, dword [esp + 0xb0]
mov ebx, dword [edx + 4]
mov edx, dword [edx]
cmp eax, 0x18
jne 0x490692
mov eax, dword [esp + 0xbc]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
jmp 0x4906c8
mov dword [esp + 0x28], ebx
mov dword [esp + 0x68], edx
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004a5f40
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x68]
mov ebx, dword [esp + 0x28]
cmp eax, ebx
je 0x4906d0
xor eax, eax
jmp 0x4906e5
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00406eb0
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xc8], al
add esp, 0xa8
ret
cmp eax, 0x16
je 0x4909c7
mov eax, dword [esp + 0xb0]
test byte [eax], al
mov edx, dword [esp + 0xc0]
mov ebx, edx
and edx, 0x1f
mov dword [esp + 0x5c], edx
nop
cmp edx, 0x14
ja 0x490735
lea ebp, [edx - 0x12]
cmp ebp, 1
ja 0x49072b
test ebx, 0x200
jmp 0x49076e
cmp edx, 0x14
je 0x490747
jmp 0x4913bf
cmp edx, 0x16
ja 0x490742
test ebx, 0x200
jmp 0x49076e
cmp edx, 0x17
jne 0x49075f
mov ebp, dword [esp + 0xbc]
mov esi, dword [ebp]
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
xor esi, 1
jmp 0x4907a4
cmp edx, 0x1a
jne 0x4913bf
test ebx, 0x200
je 0x49077b
mov ebp, dword [esp + 0xbc]
xor esi, esi
jmp 0x4907a4
test ebx, 0x80
je 0x49078f
mov ebp, dword [esp + 0xbc]
mov esi, dword [ebp]
jmp 0x490798
mov ebp, dword [esp + 0xbc]
mov esi, ebp
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
xor esi, 1
mov edi, dword [eax]
test edi, edi
xchg edi, ebx
setne bl
xchg edi, ebx
xor edi, 1
xchg esi, eax
xchg edi, ebx
cmp al, bl
xchg edi, ebx
xchg esi, eax
jne 0x4909b8
mov esi, dword [eax + 4]
cmp edx, 0x17
jne 0x4907cd
mov edx, dword [ebp + 4]
jmp 0x49080c
mov dword [esp + 0x3c], esi
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
call fcn.004a2cf0
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0xb4]
mov ebx, dword [esp + 0xc0]
mov ebp, dword [esp + 0xbc]
mov esi, dword [esp + 0x3c]
cmp edx, esi
jne 0x4909a9
mov edx, dword [esp + 0xac]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004a6600
mov eax, dword [esp + 0xc]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0xb8]
mov dword [esp], ecx
mov edx, dword [esp + 0xbc]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xc0]
mov dword [esp + 8], ebx
call fcn.004a6600
mov eax, dword [esp + 0x94]
cmp dword [esp + 0xc], eax
je 0x49099a
mov eax, dword [esp + 0xb4]
test eax, 0x200
jne 0x490889
lea ecx, [0x702820]
mov edx, dword [esp + 0xac]
jmp 0x4908b3
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov edx, dword [esp + 0xb0]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004a6270
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, dword [ecx + 0x28]
mov dword [esp], edx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
je 0x4908d9
xor eax, eax
jmp 0x4912ce
mov eax, dword [esp + 0xac]
cmp dword [0x8a6570], eax
jne 0x4908f6
mov eax, dword [esp + 0xb0]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
jmp 0x49091c
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 8], eax
call fcn.0049d590
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0xb8]
cmp dword [0x8a6570], edx
jne 0x490939
mov edx, dword [esp + 0xbc]
mov ebx, dword [edx]
mov edx, dword [edx + 4]
jmp 0x49096f
mov dword [esp + 0x2c], eax
mov dword [esp + 0x6c], ecx
mov dword [esp], edx
mov eax, dword [esp + 0xbc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xc0]
mov dword [esp + 8], eax
call fcn.0049d590
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x6c]
cmp eax, edx
je 0x490977
xor eax, eax
jmp 0x49098c
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.00406eb0
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xc8], al
add esp, 0xa8
ret
mov byte [esp + 0xc8], 1
add esp, 0xa8
ret
mov byte [esp + 0xc8], 0
add esp, 0xa8
ret
mov byte [esp + 0xc8], 0
add esp, 0xa8
ret
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov edx, dword [esp + 0xb0]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004a6600
mov eax, dword [esp + 0xc]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0xb8]
mov dword [esp], ecx
mov edx, dword [esp + 0xbc]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xc0]
mov dword [esp + 8], ebx
call fcn.004a6600
mov eax, dword [esp + 0x94]
cmp dword [esp + 0xc], eax
jne 0x490a31
mov byte [esp + 0xc8], 1
add esp, 0xa8
ret
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 8], eax
call fcn.004a11a0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xb8]
mov dword [esp], ebx
mov ebx, dword [esp + 0xbc]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xc0]
mov dword [esp + 8], ebx
call fcn.004a11a0
mov eax, dword [esp + 0x90]
mov dword [esp], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x18], eax
call fcn.0048fef0
movzx eax, byte [esp + 0x1c]
mov byte [esp + 0xc8], al
add esp, 0xa8
ret
cmp eax, 0x13
jne 0x490bb4
test ecx, 0x200
jne 0x490b96
test ecx, 0x80
je 0x490b01
mov eax, dword [esp + 0xb0]
mov eax, dword [eax]
jmp 0x490b08
mov eax, dword [esp + 0xb0]
test eax, eax
jne 0x490b96
mov eax, dword [esp + 0xc0]
mov ecx, eax
and eax, 0x1f
mov dword [esp + 0x5c], eax
nop
cmp eax, 0x14
ja 0x490b40
lea edx, [eax - 0x12]
cmp edx, 1
ja 0x490b36
test ecx, 0x200
jmp 0x490b71
cmp eax, 0x14
je 0x490b52
jmp 0x49128d
cmp eax, 0x16
ja 0x490b4d
test ecx, 0x200
jmp 0x490b71
cmp eax, 0x17
jne 0x490b62
mov eax, dword [esp + 0xbc]
mov eax, dword [eax]
test eax, eax
setne al
jmp 0x490b92
cmp eax, 0x1a
jne 0x49128d
test ecx, 0x200
jne 0x490b96
test ecx, 0x80
je 0x490b86
mov eax, dword [esp + 0xbc]
mov eax, dword [eax]
jmp 0x490b8d
mov eax, dword [esp + 0xbc]
test eax, eax
setne al
test al, al
je 0x490ba5
mov byte [esp + 0xc8], 0
add esp, 0xa8
ret
mov byte [esp + 0xc8], 1
add esp, 0xa8
ret
cmp eax, 0x14
jne 0x490d9e
mov eax, dword [esp + 0xb0]
mov edx, dword [eax]
test edx, edx
je 0x490cfe
mov ebx, dword [esp + 0xc0]
mov ebp, ebx
and ebx, 0x1f
mov dword [esp + 0x5c], ebx
nop
cmp ebx, 0x14
ja 0x490bfe
lea esi, [ebx - 0x12]
cmp esi, 1
ja 0x490bf4
test ebp, 0x200
jmp 0x490c33
cmp ebx, 0x14
je 0x490c10
jmp 0x491253
cmp ebx, 0x16
ja 0x490c0b
test ebp, 0x200
jmp 0x490c33
cmp ebx, 0x17
jne 0x490c24
mov ebx, dword [esp + 0xbc]
mov esi, dword [ebx]
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
jmp 0x490c5a
cmp ebx, 0x1a
jne 0x491253
test ebp, 0x200
jne 0x490c64
test ebp, 0x80
je 0x490c48
mov ebx, dword [esp + 0xbc]
mov esi, dword [ebx]
jmp 0x490c51
mov ebx, dword [esp + 0xbc]
mov esi, ebx
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
xchg esi, eax
test al, al
xchg esi, eax
je 0x490d0c
mov edx, dword [esp + 0xac]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004a11a0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xb8]
mov dword [esp], ebx
mov ebx, dword [esp + 0xbc]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xc0]
mov dword [esp + 8], ebx
call fcn.004a11a0
mov eax, dword [esp + 0x90]
mov dword [esp], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x18], eax
call fcn.0048fef0
movzx eax, byte [esp + 0x1c]
mov byte [esp + 0xc8], al
add esp, 0xa8
ret
mov ebx, dword [esp + 0xbc]
mov ebp, dword [esp + 0xc0]
test byte [eax], al
mov eax, ebp
and ebp, 0x1f
mov dword [esp + 0x5c], ebp
nop
cmp ebp, 0x14
ja 0x490d36
lea ecx, [ebp - 0x12]
cmp ecx, 1
ja 0x490d2c
test eax, 0x200
jmp 0x490d63
cmp ebp, 0x14
je 0x490d47
jmp 0x491219
cmp ebp, 0x16
ja 0x490d42
test eax, 0x200
jmp 0x490d63
cmp ebp, 0x17
jne 0x490d55
mov eax, dword [ebx]
test eax, eax
setne al
xor eax, 1
test edx, edx
jmp 0x490d85
cmp ebp, 0x1a
jne 0x491219
test eax, 0x200
je 0x490d6e
test edx, edx
mov eax, 0
jmp 0x490d85
test eax, 0x80
je 0x490d79
mov eax, dword [ebx]
jmp 0x490d7b
mov eax, ebx
test eax, eax
setne al
xor eax, 1
test edx, edx
setne cl
xor ecx, 1
cmp al, cl
sete al
mov byte [esp + 0xc8], al
add esp, 0xa8
ret
cmp eax, 0x15
jne 0x490fbc
test ecx, 0x200
je 0x490dba
mov eax, dword [esp + 0xb0]
xor edx, edx
jmp 0x490dde
test ecx, 0x80
je 0x490dcd
mov eax, dword [esp + 0xb0]
mov edx, dword [eax]
jmp 0x490dd6
mov eax, dword [esp + 0xb0]
mov edx, eax
test edx, edx
setne dl
xor edx, 1
mov ebx, dword [esp + 0xc0]
mov ebp, ebx
and ebx, 0x1f
mov dword [esp + 0x5c], ebx
nop
cmp ebx, 0x14
ja 0x490e0e
lea esi, [ebx - 0x12]
cmp esi, 1
ja 0x490e04
test ebp, 0x200
jmp 0x490e46
cmp ebx, 0x14
je 0x490e20
jmp 0x4911df
cmp ebx, 0x16
ja 0x490e1b
test ebp, 0x200
jmp 0x490e46
cmp ebx, 0x17
jne 0x490e37
mov esi, dword [esp + 0xbc]
mov edi, dword [esi]
test edi, edi
xchg edi, ebx
setne bl
xchg edi, ebx
xor edi, 1
jmp 0x490e7b
cmp ebx, 0x1a
jne 0x4911df
test ebp, 0x200
je 0x490e53
mov esi, dword [esp + 0xbc]
xor edi, edi
jmp 0x490e7b
test ebp, 0x80
je 0x490e66
mov esi, dword [esp + 0xbc]
mov edi, dword [esi]
jmp 0x490e6f
mov esi, dword [esp + 0xbc]
mov edi, esi
test edi, edi
xchg edi, ebx
setne bl
xchg edi, ebx
xor edi, 1
xchg edi, eax
cmp al, dl
xchg edi, eax
jne 0x490fad
mov edx, dword [esp + 0xac]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004a2cf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x5c]
cmp ecx, 0x17
jne 0x490eb5
mov ecx, dword [esp + 0xbc]
mov edx, dword [ecx + 4]
jmp 0x490eed
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov ecx, dword [esp + 0xbc]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xc0]
mov dword [esp + 8], edx
call fcn.004a2cf0
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0xbc]
cmp edx, eax
jne 0x490f9e
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov ecx, dword [esp + 0xb0]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xb4]
mov dword [esp + 8], edx
call fcn.004a6600
mov eax, dword [esp + 0xc]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0xb8]
mov dword [esp], ecx
mov edx, dword [esp + 0xbc]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xc0]
mov dword [esp + 8], ebx
call fcn.004a6600
mov eax, dword [esp + 0x94]
cmp dword [esp + 0xc], eax
je 0x490f8f
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov ecx, dword [esp + 0xb0]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xb4]
mov dword [esp + 8], edx
call fcn.004a3180
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x58], ecx
xor edx, edx
jmp 0x4910a8
mov byte [esp + 0xc8], 1
add esp, 0xa8
ret
mov byte [esp + 0xc8], 0
add esp, 0xa8
ret
mov byte [esp + 0xc8], 0
add esp, 0xa8
ret
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov byte [esp + 0xc], 0
call fcn.004a2110
mov eax, dword [esp + 0x10]
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0xb8]
mov dword [esp], edx
mov edx, dword [esp + 0xbc]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xc0]
mov dword [esp + 8], edx
mov byte [esp + 0xc], 0
call fcn.004a2110
mov eax, dword [esp + 0x8c]
cmp dword [esp + 0x10], eax
je 0x491030
xor eax, eax
jmp 0x491050
mov ecx, dword [esp + 0x14]
mov dword [esp], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00407b50
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xc8], al
add esp, 0xa8
ret
mov byte [esp + 0xc8], 1
add esp, 0xa8
ret
test eax, eax
jmp 0x491078
mov ecx, dword [esp + 0xc0]
setne al
test ecx, ecx
setne cl
cmp cl, al
sete al
mov byte [esp + 0xc8], al
add esp, 0xa8
ret
mov ebx, dword [esp + 0x94]
lea eax, [ebx + 0xc]
mov ebx, dword [esp + 0x54]
lea edx, [ebx + 1]
mov ecx, dword [esp + 0x58]
cmp edx, ecx
jge 0x4911d0
mov dword [esp + 0x54], edx
mov dword [esp + 0x94], eax
mov ecx, dword [eax]
mov dword [esp + 0x90], ecx
mov edx, dword [eax + 4]
mov dword [esp + 0x88], edx
mov ebx, dword [eax + 8]
mov dword [esp + 0x5c], ebx
mov ebp, dword [esp + 0xac]
mov dword [esp], ebp
mov esi, dword [esp + 0xb0]
mov dword [esp + 4], esi
mov edi, dword [esp + 0xb4]
mov dword [esp + 8], edi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ebx
call fcn.004a2f10
mov eax, dword [esp + 0x20]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x84], ecx
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x80], edx
mov ebx, dword [esp + 0xb8]
mov dword [esp], ebx
mov ebp, dword [esp + 0xbc]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xc0]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x90]
mov dword [esp + 0xc], edi
mov edi, dword [esp + 0x88]
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x5c]
mov dword [esp + 0x14], edi
call fcn.004a2f10
mov eax, dword [esp + 0x50]
test eax, eax
je 0x4911c1
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x4911c1
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x84]
mov dword [esp], ebp
mov ebp, dword [esp + 0x80]
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x18], eax
call fcn.0048fef0
movzx eax, byte [esp + 0x1c]
test al, al
jne 0x491093
mov byte [esp + 0xc8], 0
add esp, 0xa8
ret
mov byte [esp + 0xc8], 1
add esp, 0xa8
ret
lea eax, [0x6427c0]
mov dword [esp], eax
call fcn.0040fcf0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x6824e1]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x638060]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0043c340
lea eax, [0x6427c0]
mov dword [esp], eax
call fcn.0040fcf0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x6824e1]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x638060]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0043c340
lea eax, [0x6427c0]
mov dword [esp], eax
call fcn.0040fcf0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x6824e1]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x638060]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0043c340
lea eax, [0x6427c0]
mov dword [esp], eax
call fcn.0040fcf0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x6824e1]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x638060]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0043c340
mov ecx, dword [esp + 0x48]
lea eax, [ecx + 1]
mov ecx, dword [esp + 0xb0]
cmp dword [ecx + 4], eax
jle 0x4913b0
mov dword [esp + 0x48], eax
mov edx, dword [esp + 0xac]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004a1d60
mov eax, dword [esp + 0x10]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xb8]
mov dword [esp], ebx
mov ebp, dword [esp + 0xbc]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xc0]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x48]
mov dword [esp + 0xc], edi
call fcn.004a1d60
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x90]
mov dword [esp], ebx
mov ebx, dword [esp + 0x94]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x18], eax
call fcn.0048fef0
movzx eax, byte [esp + 0x1c]
test al, al
jne 0x4912c7
mov byte [esp + 0xc8], 0
add esp, 0xa8
ret
mov byte [esp + 0xc8], 1
add esp, 0xa8
ret
lea eax, [0x6427c0]
mov dword [esp], eax
call fcn.0040fcf0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x6824e1]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x638060]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0043c340
mov edx, dword [esp + 0x44]
lea ecx, [edx + 1]
mov eax, dword [esp + 0x40]
cmp ecx, eax
jge 0x4914e5
mov dword [esp + 0x44], ecx
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov edx, dword [esp + 0xb0]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.004a1350
mov eax, dword [esp + 0x10]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xb8]
mov dword [esp], ebx
mov ebp, dword [esp + 0xbc]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xc0]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x44]
mov dword [esp + 0xc], edi
call fcn.004a1350
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x90]
mov dword [esp], ebx
mov ebx, dword [esp + 0x94]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x18], eax
call fcn.0048fef0
movzx eax, byte [esp + 0x1c]
test al, al
jne 0x4913f9
mov byte [esp + 0xc8], 0
add esp, 0xa8
ret
mov byte [esp + 0xc8], 1
add esp, 0xa8
ret
lea eax, [0x6427c0]
mov dword [esp], eax
call fcn.0040fcf0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x12
lea ecx, [0x681d01]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x638060]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0043c340
lea eax, [0x6427c0]
mov dword [esp], eax
call fcn.0040fcf0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x11
lea ecx, [0x681717]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x638060]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0043c340
mov dword [esp + 0x5c], eax
lea eax, [0x6427c0]
mov dword [esp], eax
call fcn.0040fcf0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x6824f4]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x638060]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0043c340
mov dword [esp + 0x5c], eax
lea eax, [0x6427c0]
mov dword [esp], eax
call fcn.0040fcf0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x15
lea ecx, [0x6835f8]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x638060]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0043c340
mov edx, dword [esp + 0x4c]
lea eax, [edx + 1]
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x4c], eax
mov edx, dword [esp + 0xac]
mov dword [esp], edx
mov ebx, dword [esp + 0xb0]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.004a2cf0
mov eax, dword [esp + 0x4c]
cmp dword [esp + 0xc], eax
jle 0x4916f7
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov edx, dword [esp + 0xb0]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004a1d60
mov eax, dword [esp + 0x10]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xb8]
mov dword [esp], ebx
mov ebp, dword [esp + 0xbc]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xc0]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x4c]
mov dword [esp + 0xc], edi
call fcn.004a1d60
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x90]
mov dword [esp], ebx
mov ebx, dword [esp + 0x94]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x18], eax
call fcn.0048fef0
movzx eax, byte [esp + 0x1c]
test al, al
jne 0x4915e4
mov byte [esp + 0xc8], 0
add esp, 0xa8
ret
mov byte [esp + 0xc8], 1
add esp, 0xa8
ret
lea eax, [0x62efe0]
mov dword [esp], eax
lea eax, [0x700fa0]
mov dword [esp + 4], eax
call fcn.0043c340
lea eax, [0x62efe0]
mov dword [esp], eax
lea eax, [0x700fa0]
mov dword [esp + 4], eax
call fcn.0043c340
nop
call fcn.0046aab0
jmp fcn.0048fef0