Function at 0x4f6ee6
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
push 0x3be
push dword [8]
mov ecx, 2
call fcn.004f3045
add esp, 8
mov dword [ebp - 0xc], eax
push 0
mov ebx, 0x6c8
call fcn.006e5705
add esp, 4
mov dword [ebp - 0x10], eax
push 0x80000004
push 0
push 0x10
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4f6f4c
mov eax, 0x15
push eax
push 0x80000004
push 0
push 0x3c9
push 0x80000004
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x4f6f6c
mov eax, 0x15
push eax
push 4
mov ebx, 0x8c8
call fcn.006e5705
add esp, 0x34
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4f6f92
push ebx
call fcn.006e56ed
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4f6fa2
push ebx
call fcn.006e56ed
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x4f6fb5
mov eax, 0x15
push eax
push 1
mov ebx, 0x164
call fcn.006e5705
add esp, 0x10
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], edx
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4f6fde
push ebx
call fcn.006e56ed
add esp, 4
fld qword [ebp - 0x1c]
call fcn.004f36bc
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 1
jne 0x4f7057
push 0
mov ebx, 0x6c8
call fcn.006e5705
add esp, 4
mov dword [ebp - 0xc], eax
push 0x3d4
push dword [ebp - 0xc]
push 0x3da
mov ecx, 3
call fcn.004f3045
add esp, 0xc
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4f7035
push ebx
call fcn.006e56ed
add esp, 4
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [0x74]
test ebx, ebx
je 0x4f704c
push ebx
call fcn.006e56ed
add esp, 4
pop eax
mov dword [0x74], eax
jmp 0x4f7076
mov eax, 0x3be
push eax
mov ebx, dword [0x74]
test ebx, ebx
je 0x4f7070
push ebx
call fcn.006e56ed
add esp, 4
pop eax
mov dword [0x74], eax
push 0x80000004
push 0
mov eax, dword [0x74]
test eax, eax
jne 0x4f708b
mov eax, 0x15
push eax
push 1
mov ebx, 0x24c
call fcn.006e5705
add esp, 0x10
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x4f7159
mov eax, 0x3e2
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
call fcn.004f3dbb
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4f70cf
push ebx
call fcn.006e56ed
add esp, 4
mov eax, 0x137
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
call fcn.004f3dbb
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4f70f3
push ebx
call fcn.006e56ed
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x4f7106
mov eax, 0x15
push eax
push 0x80000301
push 0
push 0
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4f7126
mov eax, 0x15
push eax
push 3
mov ebx, 0x300
call fcn.006e5705
add esp, 0x28
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4f7149
push ebx
call fcn.006e56ed
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4f7159
push ebx
call fcn.006e56ed
add esp, 4
push dword [0x74]
push dword [8]
mov ecx, 2
call fcn.004f3045
add esp, 8
mov dword [ebp - 0xc], eax
push 0
push 0
push 0
push 1
mov ebx, 0xbc
mov eax, 9
call fcn.006e5711
add esp, 0x10
mov dword [ebp - 0x10], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4f71a8
mov eax, 0x15
push eax
push 0x80000004
push 0
push 0x3f3
push 0x80000004
push 0
push 0x3f6
push 0x80000004
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x4f71d4
mov eax, 0x15
push eax
push 4
mov ebx, 0x8cc
call fcn.006e5705
add esp, 0x34
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4f71f7
push ebx
call fcn.006e56ed
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4f7207
push ebx
call fcn.006e56ed
add esp, 4
push dword [0x74]
push dword [8]
mov ecx, 2
call fcn.004f3045
add esp, 8
mov dword [ebp - 0xc], eax
push 0
mov ebx, 0x6c8
call fcn.006e5705
add esp, 4
mov dword [ebp - 0x10], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4f724b
mov eax, 0x15
push eax
push 0x80000004
push 0
push 0x3fb
push 0x80000004
push 0
push 0x3f6
push 0x80000004
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x4f7277
mov eax, 0x15
push eax
push 4
mov ebx, 0x8cc
call fcn.006e5705
add esp, 0x34
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4f729a
push ebx
call fcn.006e56ed
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4f72aa
push ebx
call fcn.006e56ed
add esp, 4
mov ebx, dword [0x18]
add ebx, 0x78
mov dword [ebp - 0xc], ebx
push dword [0x74]
push dword [8]
mov ecx, 2
call fcn.004f3045
add esp, 8
mov dword [ebp - 0x10], eax
push 0x80000004
push 0
push 0x10
push 0x80000004
push 0
push 0x400
push 0x80000004
push 0
push 0x406
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4f7309
mov eax, 0x15
push eax
push 4
mov ebx, 0x8c8
call fcn.006e5705
add esp, 0x34
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4f732f
push ebx
call fcn.006e56ed
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x4f7342
mov eax, 0x15
push eax
push 1
mov ebx, 0x9dc
call fcn.006e5705
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4f7368
push ebx
call fcn.006e56ed
add esp, 4
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x18]
mov ebx, dword [ebx + 0x7c]
mov dword [ebp - 0xc], ebx
push dword [0x74]
push dword [8]
mov ecx, 2
call fcn.004f3045
add esp, 8
mov dword [ebp - 0x10], eax
push 0x80000004
push 0
push 0x10
push 0x80000004
push 0
push 0x40b
push 0x80000004
push 0
push 0x412
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4f73cf
mov eax, 0x15
push eax
push 4
mov ebx, 0x8c8
call fcn.006e5705
add esp, 0x34
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4f73f5
push ebx
call fcn.006e56ed
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x4f7408
mov eax, 0x15
push eax
push 1
mov ebx, 0x9dc
call fcn.006e5705
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4f742e
push ebx
call fcn.006e56ed
add esp, 4
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x18]
mov ebx, dword [ebx + 0x7c]
add ebx, 4
mov dword [ebp - 0xc], ebx
push dword [0x74]
push dword [8]
mov ecx, 2
call fcn.004f3045
add esp, 8
mov dword [ebp - 0x10], eax
push 0x80000004
push 0
push 0x10
push 0x80000004
push 0
push 0x416
push 0x80000004
push 0
push 0x412
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4f7498
mov eax, 0x15
push eax
push 4
mov ebx, 0x8c8
call fcn.006e5705
add esp, 0x34
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4f74be
push ebx
call fcn.006e56ed
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x4f74d1
mov eax, 0x15
push eax
push 1
mov ebx, 0x9dc
call fcn.006e5705
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4f74f7
push ebx
call fcn.006e56ed
add esp, 4
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x18]
mov ebx, dword [ebx]
mov dword [ebp - 0xc], ebx
push dword [0x74]
push dword [8]
mov ecx, 2
call fcn.004f3045
add esp, 8
mov dword [ebp - 0x10], eax
push 0x80000004
push 0
push 0x41e
push 0x80000004
push 0
push 0x43c
push 0x80000004
push 0
push 0x441
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4f755d
mov eax, 0x15
push eax
push 4
mov ebx, 0x8c8
call fcn.006e5705
add esp, 0x34
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4f7583
push ebx
call fcn.006e56ed
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4f7599
push ebx
call fcn.006e56ed
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x18]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0xc], ebx
push dword [0x74]
push dword [8]
mov ecx, 2
call fcn.004f3045
add esp, 8
mov dword [ebp - 0x10], eax
push 0x80000004
push 0
push 0x372
push 0x80000004
push 0
push 0x448
push 0x80000004
push 0
push 0x441
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4f7600
mov eax, 0x15
push eax
push 4
mov ebx, 0x8c8
call fcn.006e5705
add esp, 0x34
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4f7626
push ebx
call fcn.006e56ed
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4f763c
push ebx
call fcn.006e56ed
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x18]
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0xc], ebx
push dword [0x74]
push dword [8]
mov ecx, 2
call fcn.004f3045
add esp, 8
mov dword [ebp - 0x10], eax
push 0x80000004
push 0
push 0x44b
push 0x80000004
push 0
push 0x450
push 0x80000004
push 0
push 0x441
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4f76a3
mov eax, 0x15
push eax
push 4
mov ebx, 0x8c8
call fcn.006e5705
add esp, 0x34
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4f76c9
push ebx
call fcn.006e56ed
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4f76df
push ebx
call fcn.006e56ed
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x18]
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0xc], ebx
push dword [0x74]
push dword [8]
mov ecx, 2
call fcn.004f3045
add esp, 8
mov dword [ebp - 0x10], eax
push 0x80000004
push 0
push 0x459
push 0x80000004
push 0
push 0x45e
push 0x80000004
push 0
push 0x441
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4f7746
mov eax, 0x15
push eax
push 4
mov ebx, 0x8c8
call fcn.006e5705
add esp, 0x34
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4f776c
push ebx
call fcn.006e56ed
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4f7782
push ebx
call fcn.006e56ed
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x18]
mov ebx, dword [ebx]
add ebx, 0x14
mov dword [ebp - 0xc], ebx
push dword [0x74]
push dword [8]
mov ecx, 2
call fcn.004f3045
add esp, 8
mov dword [ebp - 0x10], eax
push 0x80000004
push 0
push 0x463
push 0x80000004
push 0
push 0x469
push 0x80000004
push 0
push 0x441
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4f77e9
mov eax, 0x15
push eax
push 4
mov ebx, 0x8c8
call fcn.006e5705
add esp, 0x34
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4f780f
push ebx
call fcn.006e56ed
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4f7825
push ebx
call fcn.006e56ed
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x18]
mov ebx, dword [ebx]
add ebx, 0x18
mov dword [ebp - 0xc], ebx
push dword [0x74]
push dword [8]
mov ecx, 2
call fcn.004f3045
add esp, 8
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
mov eax, 0x46e
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
call fcn.004fc77d
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4f7886
push ebx
call fcn.006e56ed
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4f7896
push ebx
call fcn.006e56ed
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x4f78a9
mov eax, 0x15
push eax
push 0x80000004
push 0
push 0x47b
push 0x80000004
push 0
push 0x441
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4f78d5
mov eax, 0x15
push eax
push 4
mov ebx, 0x8c8
call fcn.006e5705
add esp, 0x34
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4f78fb
push ebx
call fcn.006e56ed
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4f790b
push ebx
call fcn.006e56ed
add esp, 4
mov dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.004fcbe8
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4f7934
push ebx
call fcn.006e56ed
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4f7944
push ebx
call fcn.006e56ed
add esp, 4
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4f795a
push ebx
call fcn.006e56ed
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x18]
add ebx, 4
mov dword [ebp - 0xc], ebx
mov ebx, dword [0x18]
mov dword [ebp - 0x10], ebx
mov ebx, dword [ebp - 0x10]
mov eax, dword [ebx]
push eax
push 0x1c
call fcn.006e56f3
add esp, 4
pop esi
mov edi, eax
push eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x4f79a8
push eax
mov ebx, eax
call fcn.004f2fda
inc eax
push eax
call fcn.006e56f3
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x4f79c7
push eax
mov ebx, eax
call fcn.004f2fda
inc eax
push eax
call fcn.006e56f3
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x4f79e6
push eax
mov ebx, eax
call fcn.004f2fda
inc eax
push eax
call fcn.006e56f3
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x4f7a05
push eax
mov ebx, eax
call fcn.004f2fda
inc eax
push eax
call fcn.006e56f3
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x4f7a24
push eax
mov ebx, eax
call fcn.004f2fda
inc eax
push eax
call fcn.006e56f3
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x4f7a43
push eax
mov ebx, eax
call fcn.004f2fda
inc eax
push eax
call fcn.006e56f3
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x4f7a62
push eax
mov ebx, eax
call fcn.004f2fda
inc eax
push eax
call fcn.006e56f3
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
pop eax
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
push ebx
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x4f7a7d
push ebx
call fcn.006e56ed
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x4f7a91
push ebx
call fcn.006e56ed
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x4f7aa5
push ebx
call fcn.006e56ed
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x4f7ab9
push ebx
call fcn.006e56ed
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x4f7acd
push ebx
call fcn.006e56ed
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x4f7ae1
push ebx
call fcn.006e56ed
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x4f7af5
push ebx
call fcn.006e56ed
add esp, 4
pop ebx
call fcn.006e56ed
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x18]
mov ebx, dword [ebx + 4]
add ebx, 0x14
mov dword [ebp - 0xc], ebx
mov eax, 0x3f6
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4f7b2b
push ebx
call fcn.006e56ed
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x18]
mov ebx, dword [ebx + 4]
add ebx, 0x18
mov dword [ebp - 0xc], ebx
mov eax, 0x484
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4f7b58
push ebx
call fcn.006e56ed
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x18]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0xc], ebx
push 0x80000301
push 0
push 4
push 0x80000004
push 0
mov ebx, dword [ebp - 0xc]
mov eax, dword [ebx]
test eax, eax
jne 0x4f7b8d
mov eax, 0x15
push eax
push 2
mov ebx, 0x134
call fcn.006e5705
add esp, 0x1c
mov dword [ebp - 0x10], eax
push 0x490
push dword [ebp - 0x10]
call fcn.004f31dd
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4f7bd1
push ebx
call fcn.006e56ed
add esp, 4
cmp dword [ebp - 0x14], 0
jne 0x4f7c5c
mov ebx, dword [0x18]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x18], ebx
push 0x80000301
push 0
push 4
push 0x80000004
push 0
mov ebx, dword [ebp - 0x18]
mov eax, dword [ebx]
test eax, eax
jne 0x4f7c0a
mov eax, 0x15
push eax
push 2
mov ebx, 0x134
call fcn.006e5705
add esp, 0x1c
mov dword [ebp - 0x1c], eax
push 0x495
push dword [ebp - 0x1c]
call fcn.004f31dd
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4f7c4e
push ebx
call fcn.006e56ed
add esp, 4
cmp dword [ebp - 0x20], 0
jne 0x4f7c5c
xor eax, eax
jmp 0x4f7c61
mov eax, 1
test eax, eax
je 0x4f7c83
mov ebx, dword [0x18]
add ebx, 0x2c
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov dword [ebx], 1
jmp 0x4f7c98
mov ebx, dword [0x18]
add ebx, 0x2c
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov dword [ebx], 0
mov ebx, dword [0x18]
mov ebx, dword [ebx + 0x3c]
mov dword [ebp - 0xc], ebx
push dword [0x74]
push dword [8]
mov ecx, 2
call fcn.004f3045
add esp, 8
mov dword [ebp - 0x10], eax
push 0
push 0
push 0
push 0x80000004
push 0
push 0x49a
push 0x80000004
push 0
push 0x4a5
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4f7cf1
mov eax, 0x15
push eax
push 4
mov ebx, 0x8c8
call fcn.006e5705
add esp, 0x34
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4f7d17
push ebx
call fcn.006e56ed
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4f7d2d
push ebx
call fcn.006e56ed
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x18]
mov ebx, dword [ebx + 0x3c]
add ebx, 4
mov dword [ebp - 0xc], ebx
push dword [0x74]
push dword [8]
mov ecx, 2
call fcn.004f3045
add esp, 8
mov dword [ebp - 0x10], eax
push 0
push 0
push 0
push 0x80000004
push 0
push 0x4aa
push 0x80000004
push 0
push 0x4a5
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4f7d8f
mov eax, 0x15
push eax
push 4
mov ebx, 0x8c8
call fcn.006e5705
add esp, 0x34
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4f7db5
push ebx
call fcn.006e56ed
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4f7dcb
push ebx
call fcn.006e56ed
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x18]
mov ebx, dword [ebx + 0x3c]
add ebx, 8
mov dword [ebp - 0xc], ebx
push dword [0x74]
push dword [8]
mov ecx, 2
call fcn.004f3045
add esp, 8
mov dword [ebp - 0x10], eax
push 0
push 0
push 0
push 0x80000004
push 0
push 0x4b3
push 0x80000004
push 0
push 0x4a5
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4f7e2d
mov eax, 0x15
push eax
push 4
mov ebx, 0x8c8
call fcn.006e5705
add esp, 0x34
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4f7e53
push ebx
call fcn.006e56ed
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4f7e69
push ebx
call fcn.006e56ed
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x18]
mov ebx, dword [ebx + 0x3c]
add ebx, 0xc
mov dword [ebp - 0xc], ebx
push dword [0x74]
push dword [8]
mov ecx, 2
call fcn.004f3045
add esp, 8
mov dword [ebp - 0x10], eax
push 0
push 0
push 0
push 0x80000004
push 0
push 0x4ba
push 0x80000004
push 0
push 0x4a5
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4f7ecb
mov eax, 0x15
push eax
push 4
mov ebx, 0x8c8
call fcn.006e5705
add esp, 0x34
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4f7ef1
push ebx
call fcn.006e56ed
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4f7f07
push ebx
call fcn.006e56ed
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x18]
mov ebx, dword [ebx + 0x3c]
add ebx, 0x10
mov dword [ebp - 0xc], ebx
push dword [0x74]
push dword [8]
mov ecx, 2
call fcn.004f3045
add esp, 8
mov dword [ebp - 0x10], eax
push 0x4c5
push dword [8]
mov ecx, 2
call fcn.004f3045
add esp, 8
mov dword [ebp - 0x14], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x4f7f66
mov eax, 0x15
push eax
push 0x80000004
push 0
push 0x4cc
push 0x80000004
push 0
push 0x4a5
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4f7f92
mov eax, 0x15
push eax
push 4
mov ebx, 0x8c8
call fcn.006e5705
add esp, 0x34
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4f7fb8
push ebx
call fcn.006e56ed
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4f7fc8
push ebx
call fcn.006e56ed
add esp, 4
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4f7fde
push ebx
call fcn.006e56ed
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x18]
mov ebx, dword [ebx + 0x1c]
mov dword [ebp - 0xc], ebx
push dword [0x74]
push dword [8]
mov ecx, 2
call fcn.004f3045
add esp, 8
mov dword [ebp - 0x10], eax
push 0x80000004
push 0
push 0x4d6
push 0x80000004
push 0
push 0x4dc
push 0x80000004
push 0
push 0x4dc
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4f8043
mov eax, 0x15
push eax
push 4
mov ebx, 0x8c8
call fcn.006e5705
add esp, 0x34
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4f8069
push ebx
call fcn.006e56ed
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4f807f
push ebx
call fcn.006e56ed
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x18]
mov ebx, dword [ebx + 0x1c]
add ebx, 4
mov dword [ebp - 0xc], ebx
mov ebx, dword [0x18]
mov ebx, dword [ebx + 0x1c]
mov dword [ebp - 0x10], ebx
mov ebx, dword [ebp - 0x10]
push dword [ebx]
push 0x4e1
push dword [8]
mov ecx, 3
call fcn.004f3045
add esp, 0xc
mov dword [ebp - 0x14], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x4f80d3
mov eax, 0x15
push eax
push 1
mov ebx, 0x268
call fcn.006e5705
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4f80f9
push ebx
call fcn.006e56ed
add esp, 4
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4f810f
push ebx
call fcn.006e56ed
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
push 0x4e8
push dword [8]
mov ecx, 2
call fcn.004f3045
add esp, 8
mov dword [ebp - 0xc], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x4f8143
mov eax, 0x15
push eax
push 1
mov ebx, 0x268
call fcn.006e5705
add esp, 0x10
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4f8169
push ebx
call fcn.006e56ed
add esp, 4
push 0x80000005
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4f817c
mov eax, 0x18
push eax
push 1
mov ebx, 0x168
call fcn.006e5705
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4f81a2
push ebx
call fcn.006e56ed
add esp, 4
lea eax, [ebp - 0x14]
push eax
call fcn.004fd140
mov ebx, eax
test ebx, ebx
je 0x4f81ba
push ebx
call fcn.006e56ed
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4f81ca
push ebx
call fcn.006e56ed
add esp, 4
mov ebx, dword [0x18]
mov ebx, dword [ebx + 0x24]
mov dword [ebp - 0xc], ebx
push dword [0x74]
push dword [8]
mov ecx, 2
call fcn.004f3045
add esp, 8
mov dword [ebp - 0x10], eax
push 0
push 0
push 0
push 0x80000004
push 0
push 0x4fb
push 0x80000004
push 0
push 0x406
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4f8223
mov eax, 0x15
push eax
push 4
mov ebx, 0x8c8
call fcn.006e5705
add esp, 0x34
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4f8249
push ebx
call fcn.006e56ed
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x4f825c
mov eax, 0x15
push eax
push 1
mov ebx, 0x164
call fcn.006e5705
add esp, 0x10
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], edx
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4f8285
push ebx
call fcn.006e56ed
add esp, 4
fld qword [ebp - 0x1c]
call fcn.004f36bc
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x18]
mov ebx, dword [ebx + 0x24]
add ebx, 4
mov dword [ebp - 0xc], ebx
push 0x4ff
push dword [8]
mov ecx, 2
call fcn.004f3045
add esp, 8
mov dword [ebp - 0x10], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4f82cf
mov eax, 0x15
push eax
push 1
mov ebx, 0x268
call fcn.006e5705
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4f82f5
push ebx
call fcn.006e56ed
add esp, 4
push 0x80000005
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x4f8308
mov eax, 0x18
push eax
push 1
mov ebx, 0x168
call fcn.006e5705
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4f832e
push ebx
call fcn.006e56ed
add esp, 4
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4f8344
push ebx
call fcn.006e56ed
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x18]
add ebx, 0x28
mov dword [ebp - 0xc], ebx
push dword [0x74]
push dword [8]
mov ecx, 2
call fcn.004f3045
add esp, 8
mov dword [ebp - 0x10], eax
push 0
push 0
push 0
push 0x80000004
push 0
push 0x50b
push 0x80000004
push 0
push 0x510
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4f83a3
mov eax, 0x15
push eax
push 4
mov ebx, 0x8c8
call fcn.006e5705
add esp, 0x34
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4f83c9
push ebx
call fcn.006e56ed
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4f83df
push ebx
call fcn.006e56ed
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x18]
add ebx, 0x28
mov dword [ebp - 0xc], ebx
mov ebx, dword [0x18]
add ebx, 0x28
mov dword [ebp - 0x10], ebx
push dword [ebp - 0x10]
call fcn.004fe2d3
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4f841e
push ebx
call fcn.006e56ed
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
xor ecx, ecx
lea eax, [ebp - 8]
mov ebx, eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
cmp ecx, 3
jg 0x4f851d
mov ebx, dword [0x78]
call fcn.004f4439
push ebx
push ecx
mov eax, dword [ebp - 8]
dec eax
jns 0x4f8459
push 4
call fcn.006e56f9
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4f846c
push 1
call fcn.006e56f9
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0xc], ebx
push 0x80000301
push 0
push dword [ebp - 8]
push 1
mov ebx, 0x168
call fcn.006e5705
add esp, 0x10
mov dword [ebp - 0x10], eax
push dword [ebp - 0x10]
push 0x516
push dword [8]
mov ecx, 3
call fcn.004f3045
add esp, 0xc
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4f84c1
push ebx
call fcn.006e56ed
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x4f84d4
mov eax, 0x15
push eax
push 1
mov ebx, 0x268
call fcn.006e5705
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4f84fa
push ebx
call fcn.006e56ed
add esp, 4
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4f8510
push ebx
call fcn.006e56ed
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
pop ebx
pop ecx
jmp 0x4f842b
add esp, 8
mov ebx, dword [0x18]
mov ebx, dword [ebx + 0x34]
mov dword [ebp - 0xc], ebx
push dword [0x74]
push dword [8]
mov ecx, 2
call fcn.004f3045
add esp, 8
mov dword [ebp - 0x10], eax
push 0x80000004
push 0
push 0x10
push 0x80000004
push 0
push 0x520
push 0x80000004
push 0
push 0x527
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4f857f
mov eax, 0x15
push eax
push 4
mov ebx, 0x8c8
call fcn.006e5705
add esp, 0x34
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4f85a5
push ebx
call fcn.006e56ed
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x4f85b8
mov eax, 0x15
push eax
push 1
mov ebx, 0x164
call fcn.006e5705
add esp, 0x10
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], edx
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4f85e1
push ebx
call fcn.006e56ed
add esp, 4
fld qword [ebp - 0x1c]
call fcn.004f36bc
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x18]
mov ebx, dword [ebx + 0x34]
add ebx, 4
mov dword [ebp - 0xc], ebx
push dword [0x74]
push dword [8]
mov ecx, 2
call fcn.004f3045
add esp, 8
mov dword [ebp - 0x10], eax
push 0x80000004
push 0
push 0x52c
push 0x80000004
push 0
push 0x52e
push 0x80000004
push 0
push 0x527
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4f8650
mov eax, 0x15
push eax
push 4
mov ebx, 0x8c8
call fcn.006e5705
add esp, 0x34
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4f8676
push ebx
call fcn.006e56ed
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x4f8689
mov eax, 0x15
push eax
push 1
mov ebx, 0x164
call fcn.006e5705
add esp, 0x10
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], edx
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4f86b2
push ebx
call fcn.006e56ed
add esp, 4
fld qword [ebp - 0x1c]
fmul qword [0x538]
fstp qword [ebp - 0x24]
fld qword [ebp - 0x24]
call fcn.004f36bc
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x18]
mov ebx, dword [ebx + 0x34]
add ebx, 8
mov dword [ebp - 0xc], ebx
push dword [0x74]
push dword [8]
mov ecx, 2
call fcn.004f3045
add esp, 8
mov dword [ebp - 0x10], eax
push 0x80000004
push 0
push 0x540
push 0x80000004
push 0
push 0x545
push 0x80000004
push 0
push 0x527
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4f872d
mov eax, 0x15
push eax
push 4
mov ebx, 0x8c8
call fcn.006e5705
add esp, 0x34
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4f8753
push ebx
call fcn.006e56ed
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4f8769
push ebx
call fcn.006e56ed
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x18]
mov ebx, dword [ebx + 0x48]
mov dword [ebp - 0xc], ebx
push dword [0x74]
push dword [8]
mov ecx, 2
call fcn.004f3045
add esp, 8
mov dword [ebp - 0x10], eax
push 0x80000004
push 0
push 0x4b
push 0x80000004
push 0
push 0x549
push 0x80000004
push 0
push 0x558
push 0x80000004
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4f87ce