Function at 0x4e6260
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x9aee30]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x180]
cmp eax, dword [ecx + 8]
jbe 0x4e875d
sub esp, 0x200
mov eax, dword [esp + 0x218]
cmp eax, 0x2710
jge 0x4e62a0
mov ecx, dword [esp + 0x214]
test ecx, ecx
jne 0x4e63a7
jmp 0x4e62c1
mov eax, dword [0x964a58]
mov ecx, dword [0x964a5c]
mov dword [esp + 0x21c], eax
mov dword [esp + 0x220], ecx
add esp, 0x200
ret
mov eax, dword [esp + 0x204]
mov dword [esp], eax
call fcn.004eba10
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
test eax, eax
jne 0x4e72a3
mov dword [esp + 0xe4], ecx
mov eax, dword [esp + 4]
mov dword [esp + 0x48], eax
lea ecx, [0x6b3360]
mov dword [esp], ecx
call fcn.0040d2a0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x48]
lea edx, [0x6b3360]
cmp ecx, edx
jne 0x4e6324
lea edi, [esp + 0x1c0]
mov esi, dword [esp + 0xe4]
call fcn.0046cffa
jmp 0x4e6336
lea edi, [esp + 0x1c0]
mov ebx, eax
xor eax, eax
call fcn.0046cb29
mov eax, ebx
lea edi, [esp + 0x1dc]
lea esi, [esp + 0x1c0]
call fcn.0046cffa
mov ecx, dword [0x9aef70]
test ecx, ecx
je 0x4e6384
mov dword [esp + 0x1fc], eax
lea ecx, [0x6b3360]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea ecx, [esp + 0x1dc]
mov dword [esp + 8], ecx
call fcn.00412800
mov eax, dword [esp + 0x1fc]
lea edx, [0x6b3360]
mov edi, eax
lea esi, [esp + 0x1dc]
call fcn.0046cffa
mov ecx, dword [esp + 0x48]
cmp ecx, edx
jne 0x4e62c1
mov ecx, eax
mov eax, dword [esp + 0x218]
mov dword [esp + 0x1bc], ecx
mov edx, dword [esp + 0x210]
mov ebx, edx
and edx, 0x1f
nop
cmp edx, 0x14
jne 0x4e6469
mov edx, dword [esp + 0x20c]
mov ebp, dword [edx]
test ebp, ebp
jne 0x4e63dd
mov ebp, dword [esp + 0x208]
jmp 0x4e6477
mov eax, dword [esp + 0x208]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.00493390
mov eax, dword [esp + 0x14]
mov ecx, eax
and eax, 0x1f
nop
cmp eax, 0x16
jne 0x4e643e
mov eax, dword [esp + 0x10]
test ecx, 0x200
jne 0x4e6421
test ecx, 0x80
je 0x4e641b
mov edx, dword [eax]
jmp 0x4e641d
mov edx, eax
test edx, edx
je 0x4e6427
mov edx, dword [esp + 0xc]
jmp 0x4e6453
mov ecx, dword [esp + 0x210]
mov edx, dword [esp + 0x208]
mov eax, dword [esp + 0x20c]
jmp 0x4e6453
mov ecx, dword [esp + 0x210]
mov edx, dword [esp + 0x208]
mov eax, dword [esp + 0x20c]
mov ebx, ecx
mov ebp, edx
mov ecx, dword [esp + 0x1bc]
mov edx, eax
mov eax, dword [esp + 0x218]
jmp 0x4e6477
mov edx, dword [esp + 0x20c]
mov ebp, dword [esp + 0x208]
mov esi, ebx
and ebx, 0x1f
nop
cmp ebx, 0x16
jne 0x4e656f
test esi, 0x200
jne 0x4e6543
test esi, 0x80
je 0x4e649e
mov ebx, dword [edx]
jmp 0x4e64a0
mov ebx, edx
test ebx, ebx
jne 0x4e6543
mov dword [esp + 0x154], edx
mov dword [esp + 0x144], ebp
mov dword [esp + 0xc8], esi
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], esi
call fcn.00494f80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x28]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00495c30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x144]
mov dword [esp], ebx
mov ebp, dword [esp + 0x154]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xc8]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.00494540
mov edx, dword [esp + 0x154]
mov ebp, dword [esp + 0x144]
mov esi, dword [esp + 0xc8]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], esi
call fcn.00493390
mov ebp, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x218]
mov ecx, dword [esp + 0x1bc]
mov esi, ebx
test esi, esi
je 0x4e8722
mov dword [esp + 0x60], esi
mov dword [esp + 0x150], edx
mov dword [esp + 0x140], ebp
test esi, 0x60
je 0x4e6595
xor ebx, ebx
jmp 0x4e65f0
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], esi
call fcn.00494f80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [0x96f0e0]
mov ebx, dword [0x96f0e4]
mov eax, dword [eax + 0x40]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call eax
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x1bc]
mov edx, dword [esp + 0x150]
mov ebp, dword [esp + 0x140]
mov esi, dword [esp + 0x60]
mov ebx, eax
mov eax, dword [esp + 0x218]
test bl, bl
jne 0x4e721b
test esi, 0x100
jne 0x4e660b
test esi, 0x60
jmp 0x4e66d0
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], esi
call fcn.004922a0
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4e86e8
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
test eax, 0x60
je 0x4e663a
xor ebx, ebx
jmp 0x4e669f
mov dword [esp + 0xc8], eax
mov dword [esp + 0x1b8], edx
mov dword [esp + 0x1b4], ecx
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00494f80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [0x96f0e0]
mov ebx, dword [0x96f0e4]
mov eax, dword [eax + 0x40]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call eax
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x1b4]
mov edx, dword [esp + 0x1b8]
mov ebx, eax
mov eax, dword [esp + 0xc8]
test bl, bl
jne 0x4e7193
mov eax, dword [esp + 0x60]
test eax, 0x60
mov eax, dword [esp + 0x218]
mov ecx, dword [esp + 0x1bc]
mov edx, dword [esp + 0x150]
mov ebp, dword [esp + 0x140]
mov esi, dword [esp + 0x60]
je 0x4e66d6
xor ebx, ebx
jmp 0x4e6731
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], esi
call fcn.00494f80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [0x96f0f0]
mov ebx, dword [0x96f0f4]
mov eax, dword [eax + 0x40]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call eax
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x1bc]
mov edx, dword [esp + 0x150]
mov ebp, dword [esp + 0x140]
mov esi, dword [esp + 0x60]
mov ebx, eax
mov eax, dword [esp + 0x218]
test bl, bl
jne 0x4e7116
test esi, 0x100
je 0x4e6801
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], esi
call fcn.004922a0
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4e86ae
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
test eax, 0x60
je 0x4e6774
xor ebx, ebx
jmp 0x4e67d9
mov dword [esp + 0xc8], eax
mov dword [esp + 0x1b8], edx
mov dword [esp + 0x1b4], ecx
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00494f80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [0x96f0f0]
mov ebx, dword [0x96f0f4]
mov eax, dword [eax + 0x40]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call eax
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x1b4]
mov edx, dword [esp + 0x1b8]
mov ebx, eax
mov eax, dword [esp + 0xc8]
test bl, bl
jne 0x4e7099
mov eax, dword [esp + 0x218]
mov ecx, dword [esp + 0x1bc]
mov edx, dword [esp + 0x150]
mov ebp, dword [esp + 0x140]
mov esi, dword [esp + 0x60]
mov ebx, esi
and esi, 0x1f
nop
nop
cmp esi, 0x14
ja 0x4e684f
test esi, esi
je 0x4e68cd
cmp esi, 0xe
jbe 0x4e685d
cmp esi, 0x14
jne 0x4e68cd
mov eax, dword [esp + 0x204]
mov dword [esp], eax
call fcn.004e9540
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x21c], eax
mov dword [esp + 0x220], ecx
add esp, 0x200
ret
cmp esi, 0x17
je 0x4e6e78
cmp esi, 0x18
jne 0x4e68c4
xor ecx, ecx
xor esi, esi
xor edi, edi
xor ecx, ecx
mov dword [esp + 0xec], ecx
xor ecx, ecx
mov dword [esp + 0xa0], ecx
xor ecx, ecx
mov dword [esp + 0x68], ecx
xor ecx, ecx
mov dword [esp + 0x6c], ecx
xor ecx, ecx
mov dword [esp + 0x3c], ecx
xor ecx, ecx
mov dword [esp + 0x158], ecx
xor ecx, ecx
mov dword [esp + 0x160], ecx
xor ecx, ecx
mov dword [esp + 0x15c], ecx
xor ecx, ecx
mov dword [esp + 0x164], ecx
xor ecx, ecx
mov dword [esp + 0xcc], ecx
xor ecx, ecx
mov dword [esp + 0xd0], ecx
xor ecx, ecx
jmp 0x4e72f4
cmp esi, 0x19
je 0x4e6988
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.00494f80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x6d2855]
mov dword [esp + 4], edx
mov dword [esp + 8], 0xd
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.00454370
mov eax, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0xdc], ecx
lea edx, [0x69de40]
mov dword [esp], edx
call fcn.0040d2a0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x44]
mov dword [eax + 4], ecx
mov ecx, dword [0x9aef70]
test ecx, ecx
jne 0x4e695d
mov ecx, dword [esp + 0xdc]
jmp 0x4e696b
call fcn.0046c890
mov ecx, dword [esp + 0xdc]
mov dword [edi], ecx
mov dword [eax], ecx
lea ecx, [0x74924c]
mov dword [esp + 0x21c], ecx
mov dword [esp + 0x220], eax
add esp, 0x200
ret
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.00494f80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
cmp dword [0x96f0f8], eax
jne 0x4e69e1
mov dword [esp + 0x78], eax
mov dword [esp + 0x170], ecx
mov edx, dword [0x96f0fc]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00404cd0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4e6d76
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x170]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004e9660
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x4e6d5d
mov edx, dword [esp + 8]
mov dword [esp + 0x180], edx
mov ebx, dword [edx]
test ebx, ebx
je 0x4e6c56
mov dword [esp + 0x1b0], ebx
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x4e6aff
mov ecx, dword [esp + 0x1bc]
cmp dword [ecx + 0xc], eax
je 0x4e6a33
mov eax, 1
jmp 0x4e6a66
mov edx, dword [ebx + 0xc]
mov ebp, dword [ecx + 8]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.00403200
movzx eax, byte [esp + 0xc]
xor eax, 1
mov ecx, dword [esp + 0x1bc]
mov edx, dword [esp + 0x180]
mov ebx, dword [esp + 0x1b0]
test al, al
je 0x4e6b06
mov eax, dword [ebx + 0xc]
mov edx, dword [ebx + 0x10]
mov ebx, dword [ecx + 8]
mov ecx, dword [ecx + 0xc]
mov dword [esp], 0
lea ebp, [0x6d7712]
mov dword [esp + 4], ebp
mov dword [esp + 8], 0x17
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
lea eax, [0x6d2162]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0xc
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ecx
lea eax, [0x746fc0]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], 1
call fcn.00454550
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0040ab30
mov eax, dword [esp + 8]
lea ecx, [0x7497c0]
mov dword [esp + 0x21c], ecx
mov dword [esp + 0x220], eax
add esp, 0x200
ret
mov ecx, dword [esp + 0x1bc]
mov eax, dword [ebx + 0x18]
test eax, eax
je 0x4e6b4d
cmp dword [ecx + 4], eax
je 0x4e6b19
mov eax, 1
jmp 0x4e6b4f
mov edx, dword [ebx + 0x14]
mov ebp, dword [ecx]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.00403200
movzx eax, byte [esp + 0xc]
xor eax, 1
mov ecx, dword [esp + 0x1bc]
mov edx, dword [esp + 0x180]
mov ebx, dword [esp + 0x1b0]
jmp 0x4e6b4f
xor eax, eax
test al, al
jne 0x4e6c68
mov dword [esp], ebx
mov eax, dword [esp + 0x140]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x150]
mov dword [esp + 8], ecx
mov edx, dword [esp + 0x60]
mov dword [esp + 0xc], edx
mov byte [esp + 0x10], 1
call fcn.004eb500
mov eax, dword [esp + 0x14]
mov dword [esp + 0x1b4], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1b8], ecx
mov edx, dword [esp + 0x1c]
mov dword [esp + 0xc8], edx
nop
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov byte [esp + 0xc], 1
call fcn.004937e0
lea eax, [0x6a4860]
cmp dword [esp + 0x10], eax
jne 0x4e6c4f
mov ecx, dword [esp + 0x1bc]
test byte [ecx], al
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0040a900
mov eax, dword [esp + 8]
lea ecx, [0x6a4860]
mov dword [esp + 0x124], ecx
mov dword [esp + 0x128], eax
mov ecx, dword [esp + 0x124]
test ecx, ecx
je 0x4e6c18
movzx edx, byte [ecx + 0xf]
nop
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4e6c1e
or edx, 0x80
jmp 0x4e6c1e
xor edx, edx
xor ecx, ecx
xor eax, eax
mov ebx, dword [esp + 0x1b4]
mov dword [esp], ebx
mov ebx, dword [esp + 0x1b8]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xc8]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.00494540
mov edx, dword [esp + 0x180]
mov ebx, dword [esp + 0x1bc]
mov ebp, dword [ebx + 0x10]
mov ebx, dword [ebx + 0x14]
jmp 0x4e7f71
mov eax, dword [ebx + 0xc]
mov ecx, dword [ebx + 0x10]
mov edx, dword [ebx + 0x14]
mov ebx, dword [ebx + 0x18]
mov dword [esp], 0
lea ebp, [0x6d4ab2]
mov dword [esp + 4], ebp
mov dword [esp + 8], 0x12
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
lea eax, [0x6d3c72]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0x10
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebx
lea eax, [0x6d163f]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], 0xa
call fcn.00454550
mov eax, dword [esp + 0x1bc]
mov ecx, dword [eax + 4]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x30]
test ecx, ecx
jne 0x4e6d0c
mov dword [esp], 0
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
lea eax, [0x6d2862]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0xd
call fcn.00454370
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
jmp 0x4e6d32
mov eax, dword [eax]
mov dword [esp], 0
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.00454370
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0040ab30
mov eax, dword [esp + 8]
lea ecx, [0x7497c0]
mov dword [esp + 0x21c], ecx
mov dword [esp + 0x220], eax
add esp, 0x200
ret
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x21c], eax
mov dword [esp + 0x220], ecx
add esp, 0x200
ret
mov eax, dword [esp + 0x1bc]
test byte [eax], al
lea ecx, [0x6a4860]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040a900
mov eax, dword [esp + 8]
lea ecx, [0x6a4860]
mov dword [esp + 0x12c], ecx
mov dword [esp + 0x130], eax
mov ecx, dword [esp + 0x12c]
test ecx, ecx
je 0x4e6dcb
movzx edx, byte [ecx + 0xf]
nop
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4e6dd1
or edx, 0x80
jmp 0x4e6dd1
xor edx, edx
xor ecx, ecx
xor eax, eax
mov ebx, dword [esp + 0x140]
mov dword [esp], ebx
mov ebx, dword [esp + 0x150]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x60]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.00494540
mov eax, dword [esp + 0x218]
xor ecx, ecx
xor esi, esi
xor edi, edi
xor edx, edx
mov dword [esp + 0xec], edx
xor ebx, ebx
xor ebp, ebp
mov dword [esp + 0xa0], ebp
xor eax, eax
mov dword [esp + 0x68], eax
xor eax, eax
mov dword [esp + 0x6c], eax
xor eax, eax
mov dword [esp + 0x3c], eax
xor ebp, ebp
xor eax, eax
mov dword [esp + 0x158], eax
xor edx, edx
xor eax, eax
mov dword [esp + 0x160], eax
xor eax, eax
mov dword [esp + 0x15c], eax
xor eax, eax
mov dword [esp + 0x164], eax
xor eax, eax
mov dword [esp + 0xcc], eax
xor eax, eax
mov dword [esp + 0xd0], eax
mov eax, dword [esp + 0x218]
jmp 0x4e72f4
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.00494f80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x28]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
jne 0x4e6f3c
mov eax, dword [esp + 0x218]
xor ecx, ecx
xor esi, esi
xor edi, edi
xor edx, edx
mov dword [esp + 0xec], edx
mov ebx, dword [esp + 0x60]
xor ebp, ebp
mov dword [esp + 0xa0], ebp
xor eax, eax
mov dword [esp + 0x68], eax
xor ebx, ebx
mov dword [esp + 0x6c], ebx
xor eax, eax
mov dword [esp + 0x3c], eax
mov ebp, dword [esp + 0x140]
xor eax, eax
mov dword [esp + 0x158], eax
mov edx, dword [esp + 0x150]
xor eax, eax
mov dword [esp + 0x160], eax
xor eax, eax
mov dword [esp + 0x15c], eax
xor eax, eax
mov dword [esp + 0x164], eax
xor eax, eax
mov dword [esp + 0xcc], eax
xor eax, eax
mov dword [esp + 0xd0], eax
mov eax, dword [esp + 0x218]
mov ebx, dword [esp + 0x60]
jmp 0x4e72f4
mov eax, dword [esp + 0x218]
inc eax
mov dword [esp + 0xc4], eax
mov ecx, dword [esp + 0x150]
mov edx, dword [ecx + 4]
mov dword [esp + 0x38], edx
lea ebx, [edx + 1]
mov dword [esp + 0xc0], ebx
nop
mov ebp, dword [esp + 0x140]
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov esi, dword [esp + 0x60]
mov dword [esp + 8], esi
mov dword [esp + 0xc], 1
call fcn.00495410
mov eax, dword [esp + 0x140]
mov dword [esp], eax
mov ecx, dword [esp + 0x150]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x60]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0xc0]
mov dword [esp + 0xc], ebx
call fcn.00494b70
mov eax, dword [esp + 0x140]
mov dword [esp], eax
mov ecx, dword [esp + 0x150]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x60]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x38]
mov dword [esp + 0xc], ebx
call fcn.00493630
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x204]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov eax, dword [esp + 0x1bc]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x14], eax
call fcn.004e6260
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4e707c
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xf8], eax
mov ecx, dword [esp + 0x140]
mov dword [esp], ecx
mov ecx, dword [esp + 0x150]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x60]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x38]
mov dword [esp + 0xc], ecx
call fcn.00494b70
mov eax, dword [esp + 0x54]
mov dword [esp + 0x21c], eax
mov eax, dword [esp + 0xf8]
mov dword [esp + 0x220], eax
add esp, 0x200
ret
mov dword [esp + 0x21c], 0
mov dword [esp + 0x220], 0
add esp, 0x200
ret
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov byte [esp + 0xc], 1
call fcn.004937e0
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4e72e6
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x104], ecx
lea edx, [0x9654e0]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0040ac30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x204]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x104]
mov dword [esp + 8], eax
call fcn.004e56f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x21c], eax
mov dword [esp + 0x220], ecx
add esp, 0x200
ret
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov byte [esp + 0xc], 1
call fcn.004937e0
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4e72d8
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x108], ecx
lea edx, [0x9654d0]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0040ac30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x204]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x108]
mov dword [esp + 8], eax
call fcn.004e56f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x21c], eax
mov dword [esp + 0x220], ecx
add esp, 0x200
ret
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov byte [esp + 0xc], 1
call fcn.004937e0
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4e72ca
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x10c], ecx
lea edx, [0x9654c0]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0040ac30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x204]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x10c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x1bc]
mov dword [esp + 0xc], eax
call fcn.004e5460
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x21c], eax
mov dword [esp + 0x220], ecx
add esp, 0x200
ret
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov byte [esp + 0xc], 1
call fcn.004937e0
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4e72bc
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x110], ecx
lea edx, [0x9654b0]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0040ac30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x204]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x110]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x1bc]
mov dword [esp + 0xc], eax
call fcn.004e5460
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x21c], eax
mov dword [esp + 0x220], ecx
add esp, 0x200
ret
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x21c], eax
mov dword [esp + 0x220], ecx
add esp, 0x200
ret
lea eax, [0x69bf40]
mov dword [esp], eax
call fcn.0040a890
lea eax, [0x69bf40]
mov dword [esp], eax
call fcn.0040a890
lea eax, [0x69c600]
mov dword [esp], eax
call fcn.0040a890
lea eax, [0x69c600]
mov dword [esp], eax
call fcn.0040a890
mov dword [esp + 0x14c], edx
mov dword [esp + 0x4c], ecx
mov dword [esp + 0xe8], esi
mov dword [esp + 0x13c], ebp
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x180], edi
mov dword [esp + 0xac], eax
xor eax, eax
mov dword [esp + 0x9c], eax
xor eax, eax
mov dword [esp + 0x98], eax
xor eax, eax
mov dword [esp + 0x188], eax
xor eax, eax
mov dword [esp + 0x88], eax
xor eax, eax
mov dword [esp + 0x8c], eax
xor eax, eax
mov dword [esp + 0x17c], eax
jmp 0x4e739e
mov edx, dword [esp + 0x14c]
mov dword [esp + 0x9c], esi
mov dword [esp + 0x98], edi
mov dword [esp + 0x88], ebx
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x17c], ebp
mov ecx, dword [esp + 0x4c]
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x13c]
mov esi, dword [esp + 0xe8]
mov edi, dword [esp + 0x180]
mov eax, dword [esp + 0x68]
test eax, eax
je 0x4e73c4
mov esi, dword [esp + 0x204]
mov edi, dword [esi + 0x44]
mov ecx, dword [esi + 0x6c]
mov edx, dword [edi + 4]
sub edx, dword [edi + 0xc]
test ecx, ecx
jl 0x4e73be
dec edx
mov dword [esp + 0x64], edx
jmp 0x4e73d1
mov dword [esp + 0xa4], eax
xor eax, eax
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x204]
mov dword [esp], eax
call fcn.004eba10
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x4e7eef
mov ebx, dword [esp + 4]
test ebx, ebx
je 0x4e785f
mov ebp, dword [ebx + 8]
mov esi, dword [esp + 8]
cmp ebp, 0x1af2ec90
ja 0x4e76dd
cmp ebp, 0x73e0f1a
jne 0x4e751e
lea eax, [0x699100]
cmp ebx, eax
jne 0x4e7513
mov ecx, dword [esi]
mov edx, dword [esp + 0x6c]
test edx, edx
jne 0x4e7449
mov ecx, dword [esp + 0x8c]
mov ebx, dword [esp + 0x88]
mov ebp, dword [esp + 0x17c]
jmp 0x4e7500
mov ebx, dword [esi + 4]
mov ebp, dword [esp + 0x88]
lea esi, [ebp + ebx]
mov edi, dword [esp + 0x8c]
cmp edi, esi
jae 0x4e74b9
mov dword [esp + 0x168], ecx
mov dword [esp + 0x70], ebx
mov eax, dword [esp + 0x17c]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edi
mov dword [esp + 0xc], ebx
lea eax, [0x692a40]
mov dword [esp + 0x10], eax
call fcn.004508b0
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x88]
mov dword [esp + 0x17c], eax
mov edi, ecx
mov ecx, dword [esp + 0x168]
mov dword [esp + 0x88], esi
mov dword [esp + 0x8c], edi
mov eax, dword [esp + 0x17c]
lea edx, [eax + ebp]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.0046d220
lea eax, [0x699100]
mov edx, dword [esp + 0x6c]
mov ecx, dword [esp + 0x8c]
mov ebx, dword [esp + 0x88]
mov ebp, dword [esp + 0x17c]
mov esi, dword [esp + 0x9c]
mov edi, dword [esp + 0x98]
jmp 0x4e7357
lea eax, [0x6b3360]
jmp 0x4e782d
cmp ebp, 0x1af2ec90
jne 0x4e76d2
lea eax, [0x6b3360]
cmp ebx, eax
jne 0x4e782d
mov dword [esp + 0xe0], esi
mov dword [esp], eax
call fcn.0040d2a0
mov eax, dword [0x9aef70]
mov edi, dword [esp + 4]
mov dword [esp + 0x1f8], edi
test eax, eax
je 0x4e7580
lea eax, [0x6b3360]
mov dword [esp], eax
mov dword [esp + 4], edi
mov eax, dword [esp + 0xe0]
mov dword [esp + 8], eax
call fcn.00412800
mov edi, dword [esp + 0x1f8]
mov esi, dword [esp + 0xe0]
call fcn.0046cffa
mov eax, dword [esp + 0x4c]
test eax, eax
jne 0x4e759b
xor ecx, ecx
jmp 0x4e767d
mov ecx, dword [esp + 0x204]
mov dword [esp], ecx
mov edx, dword [esp + 0x180]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xe8]
mov dword [esp + 8], ebx
mov ebp, dword [esp + 0xec]
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov esi, dword [esp + 0x1f8]
mov dword [esp + 0x20], esi
mov edi, dword [esp + 0x218]
mov dword [esp + 0x24], edi
call fcn.004e9050
mov eax, dword [esp + 0x2c]
test eax, eax
jne 0x4e78c3
movzx eax, byte [esp + 0x28]
test al, al
je 0x4e7618
mov ecx, dword [esp + 0x3c]
jmp 0x4e7677
mov ecx, dword [esp + 0x3c]
test ecx, ecx
je 0x4e7677
mov eax, dword [esp + 0x204]
mov dword [esp], eax
mov edx, dword [esp + 0xcc]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xd0]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov ebp, dword [esp + 0x1f8]
mov dword [esp + 0x10], ebp
mov ebp, dword [esp + 0x218]
lea esi, [ebp + 1]
mov dword [esp + 0x14], esi
call fcn.004e6260
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x4e78aa
mov ecx, dword [esp + 0x3c]
mov eax, 1
mov ecx, eax
mov eax, dword [esp + 0x4c]
test cl, cl
jne 0x4e76a0
mov eax, dword [esp + 0x204]
mov dword [esp], eax
call fcn.004e9540
mov eax, dword [esp + 4]
test eax, eax
jne 0x4e7891
mov eax, dword [esp + 0x4c]
lea eax, [0x699100]
mov edx, dword [esp + 0x6c]
mov esi, dword [esp + 0x9c]
mov edi, dword [esp + 0x98]
mov ecx, dword [esp + 0x8c]
mov ebx, dword [esp + 0x88]
mov ebp, dword [esp + 0x17c]
jmp 0x4e7357
lea eax, [0x6b3360]
jmp 0x4e782d
cmp ebp, 0x52bc758e
jne 0x4e7809
lea eax, [0x699040]
cmp ebx, eax
jne 0x4e7801
mov ecx, dword [esi]
mov edx, dword [esp + 0x5c]
test edx, edx
jne 0x4e771b
mov ecx, dword [esp + 0x9c]
mov ebx, dword [esp + 0x98]
mov ebp, dword [esp + 0x188]
jmp 0x4e77d2
mov ebx, dword [esi + 4]
mov ebp, dword [esp + 0x98]
lea esi, [ebp + ebx]
mov edi, dword [esp + 0x9c]
cmp edi, esi
jae 0x4e778b
mov dword [esp + 0x16c], ecx
mov dword [esp + 0x74], ebx
mov eax, dword [esp + 0x188]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edi
mov dword [esp + 0xc], ebx
lea eax, [0x692a40]
mov dword [esp + 0x10], eax
call fcn.004508b0
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0x98]
mov dword [esp + 0x188], eax
mov edi, ecx
mov ecx, dword [esp + 0x16c]
mov dword [esp + 0x9c], edi
mov dword [esp + 0x98], esi
mov eax, dword [esp + 0x188]
lea edx, [eax + ebp]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.0046d220
lea eax, [0x699040]
mov edx, dword [esp + 0x5c]
mov ecx, dword [esp + 0x9c]
mov ebx, dword [esp + 0x98]
mov ebp, dword [esp + 0x188]
lea eax, [0x699100]
mov edx, dword [esp + 0x6c]
mov esi, ecx
mov edi, ebx
mov ecx, dword [esp + 0x8c]
mov ebx, dword [esp + 0x88]
mov dword [esp + 0x188], ebp
mov ebp, dword [esp + 0x17c]
jmp 0x4e7357
lea ebp, [0x69dd80]
jmp 0x4e7827
cmp ebp, 0xa9877d67
jne 0x4e7821
lea ebp, [0x69dd80]
cmp ebx, ebp
je 0x4e78dc
jmp 0x4e7827
lea ebp, [0x69dd80]
lea eax, [0x6b3360]
lea eax, [0x699100]
mov edx, dword [esp + 0x6c]
mov esi, dword [esp + 0x9c]
mov edi, dword [esp + 0x98]
mov ecx, dword [esp + 0x8c]
mov ebx, dword [esp + 0x88]
mov ebp, dword [esp + 0x17c]
jmp 0x4e7357
lea eax, [0x699100]
mov edx, dword [esp + 0x6c]
mov esi, dword [esp + 0x9c]
mov edi, dword [esp + 0x98]
mov ecx, dword [esp + 0x8c]
mov ebx, dword [esp + 0x88]
mov ebp, dword [esp + 0x17c]
jmp 0x4e7357
mov ecx, dword [esp + 8]
mov dword [esp + 0x21c], eax
mov dword [esp + 0x220], ecx
add esp, 0x200
ret
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x21c], eax
mov dword [esp + 0x220], ecx
add esp, 0x200
ret
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x21c], eax
mov dword [esp + 0x220], ecx
add esp, 0x200
ret
mov ebx, dword [esp + 0x68]
test ebx, ebx
je 0x4e7961
mov ebp, dword [esp + 0x204]
mov esi, dword [ebp + 0x44]
mov ecx, dword [esi + 4]
mov eax, dword [esi + 0xc]
cmp ecx, eax
jb 0x4e7f68
mov edi, dword [esi]
mov edx, dword [esi + 8]
sub edx, eax
mov esi, edx
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, eax
add esi, edi
mov ecx, dword [esp + 0x64]
cmp ecx, edx
ja 0x4e7f63
mov eax, dword [esp + 0xa0]
cmp ecx, eax
jb 0x4e7f5e
sub edx, eax
mov edi, edx
neg edx
sar edx, 0x1f
and edx, eax
sub ecx, eax
add edx, esi
test eax, eax
jne 0x4e7967
mov eax, dword [0x9aef70]
test eax, eax
je 0x4e7958
mov eax, dword [ebp + 0x44]
mov esi, edi
call fcn.0046c890
mov dword [edi], eax
mov edi, esi
mov dword [ebp + 0x44], 0
jmp 0x4e7967
xor ecx, ecx
xor edx, edx
xor edi, edi
mov dword [esp + 0x184], edx
mov dword [esp + 0x90], ecx
mov dword [esp + 0x94], edi
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x4e79f7
test eax, 0x60
je 0x4e798f
xor ebp, ebp
jmp 0x4e79f9
mov ecx, dword [esp + 0x13c]
mov dword [esp], ecx
mov edx, dword [esp + 0x14c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00494f80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [0x96f0f0]
mov ebx, dword [0x96f0f4]
mov eax, dword [eax + 0x40]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call eax
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x184]
mov ebx, dword [esp + 0x68]
mov edi, dword [esp + 0x94]
mov ebp, eax
mov eax, dword [esp + 0x5c]
jmp 0x4e79f9
xor ebp, ebp
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x4e7a12
mov ebp, dword [esp + 0x13c]
mov esi, dword [esp + 0x14c]
jmp 0x4e7abd
mov ecx, dword [esp + 0x13c]
mov dword [esp], ecx
mov ecx, dword [esp + 0x14c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov byte [esp + 0xc], 1
call fcn.004937e0
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4e7f50
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x100], ecx
lea edx, [0x9654f0]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0040ac30
mov eax, dword [esp + 8]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x100]
mov dword [esp], ecx
mov ecx, dword [esp + 0x188]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x98]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x9c]
mov dword [esp + 0xc], ebx
call eax
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x4e7ed6
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x184]
mov ebx, dword [esp + 0x68]
mov edi, dword [esp + 0x94]
xor eax, eax
xor ebp, ebp
xor esi, esi
test eax, eax
je 0x4e7c30
test eax, 0x100
je 0x4e7c30
mov dword [esp + 0x148], esi
mov dword [esp + 0x138], ebp
mov dword [esp + 0x58], eax
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], eax
call fcn.004922a0
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4e7f16
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
test eax, 0x60
je 0x4e7b11
xor ebx, ebx
jmp 0x4e7b76
mov dword [esp + 0x1b8], edx
mov dword [esp + 0xc8], eax
mov dword [esp + 0x1b4], ecx
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00494f80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [0x96f0f0]
mov ebx, dword [0x96f0f4]
mov eax, dword [eax + 0x40]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call eax
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x1b4]
mov edx, dword [esp + 0x1b8]
mov ebx, eax
mov eax, dword [esp + 0xc8]
test bl, bl
jne 0x4e7b91
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x138]
mov edx, dword [esp + 0x148]
jmp 0x4e7c11
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov byte [esp + 0xc], 1
call fcn.004937e0
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4e7f08
mov ecx, dword [esp + 0x14]
mov dword [esp + 0xfc], ecx
lea edx, [0x965500]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0040ac30
mov eax, dword [esp + 8]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0xfc]
mov dword [esp], ecx
mov ecx, dword [esp + 0x188]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x98]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x9c]
mov dword [esp + 0xc], ebx
call eax
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x4e7c17
xor eax, eax
xor ecx, ecx
xor edx, edx
mov ebp, ecx
mov esi, edx
jmp 0x4e7c30
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x21c], eax
mov dword [esp + 0x220], ecx
add esp, 0x200
ret
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov eax, dword [esp + 0x188]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x14], eax
call fcn.004e8770
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x4e7ebd
mov eax, dword [esp + 0x6c]
and eax, 0x1f
nop
nop
cmp eax, 0x17
je 0x4e7ccd
cmp eax, 0x18
jne 0x4e7d62
mov dword [esp], 0
mov eax, dword [esp + 0x17c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 8], eax
call fcn.00454610
mov eax, dword [esp + 0x15c]
mov dword [esp], eax
mov eax, dword [esp + 0x164]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 8], eax
call fcn.00494d50
jmp 0x4e7d62
mov eax, dword [esp + 0x17c]
mov dword [esp], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 8], eax
call fcn.0040abb0
mov eax, dword [esp + 0xc]
lea ecx, [0x68a540]
mov dword [esp + 0x11c], ecx
mov dword [esp + 0x120], eax
mov edx, dword [esp + 0x11c]
test edx, edx
je 0x4e7d2e
movzx ebx, byte [edx + 0xf]
nop
mov ebp, ebx
and ebx, 0x1f
xchg ebp, eax
test al, 0x20
xchg ebp, eax
jne 0x4e7d34
or ebx, 0x80
jmp 0x4e7d34
xor ebx, ebx
xor edx, edx
xor eax, eax
mov ecx, dword [esp + 0x15c]
mov dword [esp], ecx
mov ecx, dword [esp + 0x164]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x6c]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ebx
call fcn.00494540
mov eax, dword [esp + 0x68]
mov ecx, eax
and eax, 0x1f
nop
nop
cmp eax, 0x17
je 0x4e7dc4
cmp eax, 0x18
jne 0x4e7ea0
mov dword [esp], 0
mov eax, dword [esp + 0x184]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 8], eax
call fcn.00454610
mov eax, dword [esp + 0x158]
mov dword [esp], eax
mov eax, dword [esp + 0x160]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 8], eax
call fcn.00494d50
jmp 0x4e7ea0
mov eax, dword [esp + 0x158]
mov dword [esp], eax
mov edx, dword [esp + 0x160]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00494f80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x28]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
jne 0x4e7ea0
mov eax, dword [esp + 0x184]
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 8], eax
call fcn.0040abb0
mov eax, dword [esp + 0xc]
lea ecx, [0x68a540]
mov dword [esp + 0x114], ecx
mov dword [esp + 0x118], eax
mov ecx, dword [esp + 0x114]
test ecx, ecx
je 0x4e7e6c
movzx edx, byte [ecx + 0xf]
nop
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4e7e72
or edx, 0x80
jmp 0x4e7e72
xor edx, edx
xor ecx, ecx
xor eax, eax
mov ebx, dword [esp + 0x158]
mov dword [esp], ebx
mov ebx, dword [esp + 0x160]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x68]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.00494540
mov dword [esp + 0x21c], 0
mov dword [esp + 0x220], 0
add esp, 0x200
ret
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x21c], eax
mov dword [esp + 0x220], ecx
add esp, 0x200
ret
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x21c], eax
mov dword [esp + 0x220], ecx
add esp, 0x200
ret
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x21c], eax
mov dword [esp + 0x220], ecx
add esp, 0x200
ret
lea eax, [0x69c600]
mov dword [esp], eax
call fcn.0040a890
lea eax, [0x6a4ce0]
mov dword [esp], eax
call fcn.0040d2a0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1a
lea ecx, [0x6d8fd2]
mov dword [eax], ecx
mov dword [eax + 8], 0
lea ecx, [0x699640]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00439660
lea eax, [0x69c600]
mov dword [esp], eax
call fcn.0040a890
call fcn.0046c970
call fcn.0046c950
call fcn.0046c970
add ebp, 0x18
dec ebx
test ebx, ebx
jle 0x4e8052
mov dword [esp + 0xc4], ebx
mov dword [esp + 0x1b8], ebp
lea edi, [esp + 0x18c]
mov esi, ebp
call fcn.0046d004
mov ecx, dword [edx + 8]
mov dword [esp + 0xc0], ecx
xor eax, eax
mov esi, 0xffffffff
xor edi, edi
jmp 0x4e8494
xchg edi, eax
test al, al
xchg edi, eax
jne 0x4e7f6d
test esi, esi
jl 0x4e7f6d
mov ecx, dword [edx + 8]
cmp esi, ecx
jae 0x4e86a0
mov eax, dword [edx + 4]
imul ecx, esi, 0x2c
add eax, ecx
mov dword [esp], eax
mov eax, dword [esp + 0x140]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x150]
mov dword [esp + 8], ecx
mov ebx, dword [esp + 0x60]
mov dword [esp + 0xc], ebx
mov byte [esp + 0x10], 1
call fcn.004eb500
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x204]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
lea edi, [esp + 0x10]
lea esi, [esp + 0x18c]
call fcn.0046d004
call fcn.004e5930
mov eax, dword [esp + 0x28]
test eax, eax
jne 0x4e8687
mov edx, dword [esp + 0x180]
mov ebx, dword [esp + 0xc4]
mov ebp, dword [esp + 0x1b8]
jmp 0x4e7f6d
mov ebx, dword [edx + 8]
mov dword [esp + 0xc4], ebx
xor eax, eax
xor ecx, ecx
xor ebp, ebp
xor esi, esi
xor edi, edi
xor eax, eax
mov dword [esp + 0xa0], eax
xor eax, eax
mov dword [esp + 0xcc], eax
xor eax, eax
mov dword [esp + 0x174], eax
xor eax, eax
mov dword [esp + 0xd4], eax
xor eax, eax
mov dword [esp + 0xf0], eax
xor eax, eax
mov dword [esp + 0xd0], eax
xor eax, eax
mov dword [esp + 0x178], eax
xor eax, eax
mov dword [esp + 0xf4], eax
xor eax, eax
mov dword [esp + 0xd8], eax
xor eax, eax
jmp 0x4e80e6
mov dword [esp + 0xf0], eax
mov eax, dword [esp + 0x80]
inc eax
mov dword [esp + 0x174], ebx
mov dword [esp + 0xf4], edx
mov edx, dword [esp + 0x180]
mov ebx, dword [esp + 0xc4]
cmp eax, ebx
jge 0x4e83ec
mov ebx, dword [edx + 8]
cmp eax, ebx
jae 0x4e846c
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x7c], ebp
mov dword [esp + 0x80], eax
mov dword [esp + 0x40], edi
mov ebx, dword [edx + 4]
imul edx, eax, 0x2c
mov eax, dword [edx + ebx + 0x1c]
and eax, 0x7f
add edx, ebx
cmp eax, 8
jg 0x4e8193
cmp eax, 4
je 0x4e812e
cmp eax, 8
jne 0x4e83d2
test esi, esi
je 0x4e8142
mov eax, dword [esp + 0xf0]
mov edx, dword [esp + 0xf4]
jmp 0x4e8187
mov dword [esp], edx
mov eax, dword [esp + 0x140]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x150]
mov dword [esp + 8], ecx
mov edx, dword [esp + 0x60]
mov dword [esp + 0xc], edx
mov byte [esp + 0x10], 1
call fcn.004eb500
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov ebp, dword [esp + 0x7c]
mov edi, dword [esp + 0x40]
mov edx, ecx
mov ecx, dword [esp + 0x3c]
mov ebx, dword [esp + 0x174]
jmp 0x4e80bb
mov dword [esp + 0x50], esi
cmp eax, 0x10
jne 0x4e82c7
test edi, edi
je 0x4e81c9
mov eax, dword [esp + 0x204]
mov edi, dword [esp + 0xa0]
mov ebp, dword [esp + 0x40]
mov edx, dword [esp + 0xd4]
mov ebx, dword [esp + 0xd8]
jmp 0x4e828a
mov dword [esp], edx
mov eax, dword [esp + 0x140]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x150]
mov dword [esp + 8], ecx
mov edx, dword [esp + 0x60]
mov dword [esp + 0xc], edx
mov byte [esp + 0x10], 1
call fcn.004eb500
mov eax, dword [esp + 0x204]
mov ecx, dword [eax + 0x44]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
test ecx, ecx
je 0x4e8220
mov esi, dword [eax + 0x6c]
mov edi, dword [ecx + 4]
nop
nop
sub edi, dword [ecx + 0xc]
test esi, esi
jl 0x4e828a
dec edi
jmp 0x4e828a
mov dword [esp + 0x1ac], edx
mov dword [esp + 0x1a8], ebx
mov dword [esp + 0xbc], ebp
lea eax, [0x6aaa00]
mov dword [esp], eax
call fcn.0040d2a0
mov eax, dword [0x9aef70]
mov ecx, dword [esp + 4]
test eax, eax
jne 0x4e825a
mov edx, dword [esp + 0x204]
jmp 0x4e826e
call fcn.0046c8a0
mov dword [edi], ecx
mov edx, dword [esp + 0x204]
mov ebx, dword [edx + 0x44]
mov dword [edi + 4], ebx
mov dword [edx + 0x44], ecx
mov eax, edx
mov edx, dword [esp + 0x1ac]
mov ebx, dword [esp + 0x1a8]
mov ebp, dword [esp + 0xbc]
xor edi, edi
mov esi, dword [esp + 0x50]
mov eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0xa0], edi
mov edi, ebp
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], ebx
mov edx, dword [esp + 0xf4]
mov ebp, dword [esp + 0x7c]
mov ebx, dword [esp + 0x174]
jmp 0x4e80bb
cmp eax, 0x20
jne 0x4e8341
test ebp, ebp
je 0x4e82e0
mov eax, dword [esp + 0x174]
mov edx, dword [esp + 0x178]
jmp 0x4e8325
mov dword [esp], edx
mov eax, dword [esp + 0x140]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x150]
mov dword [esp + 8], ecx
mov edx, dword [esp + 0x60]
mov dword [esp + 0xc], edx
mov byte [esp + 0x10], 1
call fcn.004eb500
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov esi, dword [esp + 0x50]
mov edi, dword [esp + 0x40]
mov edx, ecx
mov ecx, dword [esp + 0x3c]
mov ebx, eax
mov dword [esp + 0x178], edx
mov eax, dword [esp + 0xf0]
mov edx, dword [esp + 0xf4]
jmp 0x4e80bb
lea ebx, [eax - 0x40]
cmp ebx, 1
ja 0x4e83d2
test ecx, ecx
je 0x4e8361
mov eax, dword [esp + 0xcc]
mov edx, dword [esp + 0xd0]
jmp 0x4e83aa
mov dword [esp], edx
mov eax, dword [esp + 0x140]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x150]
mov dword [esp + 8], ecx
mov edx, dword [esp + 0x60]
mov dword [esp + 0xc], edx
mov byte [esp + 0x10], 1
call fcn.004eb500
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x7c]
mov esi, dword [esp + 0x50]
mov edi, dword [esp + 0x40]
mov ebx, ecx
mov ecx, edx
mov edx, ebx
mov ebx, dword [esp + 0x174]
mov dword [esp + 0xcc], eax
mov dword [esp + 0xd0], edx
mov eax, dword [esp + 0xf0]
mov edx, dword [esp + 0xf4]
jmp 0x4e80bb
mov eax, dword [esp + 0xf0]
mov edx, dword [esp + 0xf4]
mov ebx, dword [esp + 0x174]
jmp 0x4e80bb
mov eax, dword [esp + 0x218]
mov ebx, dword [esp + 0x150]
mov dword [esp + 0xec], ebx
mov ebx, esi
mov dword [esp + 0x68], edi
mov dword [esp + 0x6c], ebp
mov dword [esp + 0x3c], ecx
mov ebp, dword [esp + 0xf0]
mov esi, dword [esp + 0xd4]
mov dword [esp + 0x158], esi
mov edx, dword [esp + 0xf4]
mov esi, dword [esp + 0xd8]
mov dword [esp + 0x160], esi
mov esi, dword [esp + 0x174]
mov dword [esp + 0x15c], esi
mov esi, dword [esp + 0x178]
mov dword [esp + 0x164], esi
mov ecx, dword [esp + 0x60]
mov esi, dword [esp + 0x140]
mov edi, dword [esp + 0x180]
jmp 0x4e72f4
mov ecx, ebx
call fcn.0046c910
inc edx
mov ebx, dword [esp + 0x180]
mov ebx, dword [esp + 0xc4]
mov ebp, dword [esp + 0x1b8]
mov esi, eax
mov eax, edx
mov edx, dword [esp + 0x180]
cmp eax, ecx
jge 0x4e7fad
mov ebx, dword [edx + 8]
cmp eax, ebx
jae 0x4e86a7
mov ebx, dword [edx + 4]
mov dword [esp + 0x1b0], ebx
imul ebp, eax, 0x2c
mov edx, dword [ebx + ebp + 0x1c]
and edx, 0x7f
add ebx, ebp
cmp edx, 2
je 0x4e84dc
cmp edx, 0x42
jne 0x4e84d6
cmp esi, 0xffffffff
jne 0x4e84d0
mov edx, eax
jmp 0x4e8473
mov edx, eax
mov eax, esi
jmp 0x4e8473
mov edx, eax
mov eax, esi
jmp 0x4e8473
mov dword [esp + 0x134], ebx
mov dword [esp + 0xb8], ebp
mov dword [esp + 0x84], eax
xchg edi, eax
mov byte [esp + 0x37], al
xchg edi, eax
mov dword [esp + 0xb4], esi
mov dword [esp], ebx
mov eax, dword [esp + 0x140]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x150]
mov dword [esp + 8], ecx
mov edx, dword [esp + 0x60]
mov dword [esp + 0xc], edx
mov byte [esp + 0x10], 1
call fcn.004eb500
mov eax, dword [esp + 0x198]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x1b4], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x1a4], edx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0xc8], ebx
mov ebp, dword [esp + 0xb8]
mov esi, dword [esp + 0x1b0]
mov edi, dword [esi + ebp + 0xc]
mov ebx, dword [esp + 0x134]
cmp dword [ebx + 0x10], eax
je 0x4e8573
xor eax, eax
jmp 0x4e85ab
mov ecx, dword [esp + 0x194]
mov dword [esp], ecx
mov dword [esp + 4], edi
mov dword [esp + 8], eax
call fcn.00403200
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x1b4]
mov edx, dword [esp + 0x1a4]
mov ebp, dword [esp + 0xb8]
mov esi, dword [esp + 0x1b0]
test al, al
je 0x4e8604
mov ebx, dword [esi + ebp + 0x18]
mov ebp, dword [esi + ebp + 0x14]
test ebx, ebx
jne 0x4e85c4
mov eax, edx
mov edx, 1
jmp 0x4e8608
mov eax, edx
lea edx, [esp + 0x18c]
cmp dword [edx + 4], ebx
je 0x4e85d6
xor edx, edx
jmp 0x4e8608
mov eax, dword [esp + 0x18c]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.00403200
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x1b4]
mov edx, eax
mov eax, dword [esp + 0x1a4]
jmp 0x4e8608
mov eax, edx
xor edx, edx
test dl, dl
jne 0x4e8613
movzx eax, byte [esp + 0x37]
jmp 0x4e8652
mov edx, dword [esp + 0x204]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 0xc], eax
lea edi, [esp + 0x10]
lea esi, [esp + 0x18c]
call fcn.0046d004
call fcn.004e5930
mov eax, dword [esp + 0x28]
test eax, eax
jne 0x4e866e
mov eax, 1
mov ecx, dword [esp + 0xc0]
mov edx, dword [esp + 0x84]
mov edi, eax
mov eax, dword [esp + 0xb4]
jmp 0x4e8473
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x21c], eax
mov dword [esp + 0x220], ecx
add esp, 0x200
ret
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x21c], eax
mov dword [esp + 0x220], ecx
add esp, 0x200
ret
mov eax, esi
call fcn.0046c910
mov ecx, ebx
call fcn.0046c910
lea eax, [0x6a4ce0]
mov dword [esp], eax
call fcn.0040d2a0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1a
lea ecx, [0x6d8fd2]
mov dword [eax], ecx
mov dword [eax + 8], 0
lea ecx, [0x699640]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00439660
lea eax, [0x6a4ce0]
mov dword [esp], eax
call fcn.0040d2a0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1a
lea ecx, [0x6d8fd2]
mov dword [eax], ecx
mov dword [eax + 8], 0
lea ecx, [0x699640]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00439660
lea eax, [0x6a4ce0]
mov dword [esp], eax
call fcn.0040d2a0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1a
lea ecx, [0x6d8fd2]
mov dword [eax], ecx
mov dword [eax + 8], 0
lea ecx, [0x699640]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00439660
nop
call fcn.0046b490
jmp fcn.004e6260