Function at 0x451190
Capabilities:
Check os version
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4c89e8
mov eax, dword fs:[0]
push eax
sub esp, 0x1f0
mov eax, dword [0x521da0]
xor eax, esp
mov dword [esp + 0x1e8], eax
push ebx
push esi
push edi
mov eax, dword [0x521da0]
xor eax, esp
push eax
lea eax, [esp + 0x200]
mov dword fs:[0], eax
xor ebx, ebx
mov edi, ecx
lea eax, [esp + 0x3b]
push eax
lea ecx, [esp + 0x3f]
push ecx
lea ecx, [esp + 0x88]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x74], ebx
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x68], ebx
mov dword [esp + 0x44], ebx
call fcn.0040fb50
or eax, 0xffffffff
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], ebx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x208], ebx
mov dword [esp + 0x1b0], 0xf
mov dword [esp + 0x1ac], ebx
mov byte [esp + 0x19c], bl
lea ecx, [esp + 0xbc]
mov byte [esp + 0x208], 1
call dword [0x4ce778]
push ebx
mov byte [esp + 0x20c], 2
call fcn.0049911e
lea esi, [edi + 8]
mov dword [esp + 0x60], edx
mov edx, dword [esi + 4]
push edx
mov dword [esp + 0x60], eax
mov eax, dword [esi]
push ebx
push eax
call fcn.00495e20
lea ecx, [esp + 0x68]
push ecx
lea edx, [esp + 0x164]
mov dword [esi + 8], ebx
push edx
mov dword [edi + 0x14], ebx
mov dword [edi + 0x18], ebx
call fcn.00498d93
add esp, 0x18
cmp eax, ebx
jne 0x4512aa
mov eax, dword [esp + 0x154]
mov dword [esp + 0x30], eax
jmp 0x4512b2
mov dword [esp + 0x30], 0xffffffff
lea ecx, [esp + 0x58]
push ecx
lea edx, [esp + 0x178]
push edx
call fcn.00498d93
add esp, 8
cmp eax, ebx
jne 0x4512d8
mov eax, dword [esp + 0x17c]
mov dword [esp + 0x34], eax
jmp 0x4512e0
mov dword [esp + 0x34], 0xffffffff
lea ecx, [esp + 0x58]
push ecx
lea edx, [esp + 0xe8]
push edx
call fcn.00498d93
neg eax
sbb eax, eax
not eax
and eax, dword [esp + 0xf8]
lea ecx, [esp + 0x110]
mov dword [esp + 0x34], eax
lea eax, [esp + 0x60]
push eax
push ecx
call fcn.00498d93
add esp, 0x10
cmp eax, ebx
jne 0x45132a
mov edx, dword [esp + 0x118]
inc edx
mov dword [esp + 0x14], edx
jmp 0x45132e
mov dword [esp + 0x14], ebx
lea eax, [esp + 0x58]
push eax
lea ecx, [esp + 0x130]
push ecx
call fcn.00498d93
add esp, 8
cmp eax, ebx
jne 0x451354
mov ebx, dword [esp + 0x140]
add ebx, 0x76c
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x2c]
push edx
mov edx, dword [esp + 0x18]
push eax
push ecx
push edx
push ebx
push str._d__02d__02d__02d:_02d
lea eax, [esp + 0x1cc]
push 0x40
push eax
call fcn.004974e5
lea eax, [esp + 0x1d4]
add esp, 0x20
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x451390
sub eax, edx
push eax
lea ecx, [esp + 0x1b8]
push ecx
lea ecx, [esp + 0x1a0]
call fcn.004028e0
mov edx, dword [esp + 0x1ac]
mov ebx, 4
push ebx
mov ecx, esi
mov dword [esp + 0x1c], edx
call fcn.0040c990
mov eax, dword [esi]
mov edx, dword [esi + 8]
push ebx
lea ecx, [esp + 0x1c]
push ecx
add edx, eax
push edx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
add esp, 0xc
cmp dword [esp + 0x1b0], 0x10
jb 0x4513f9
mov eax, dword [esp + 0x19c]
mov dword [esp + 0x14], eax
jmp 0x451404
lea ecx, [esp + 0x19c]
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0x18]
push eax
mov ecx, esi
mov dword [esp + 0x34], eax
call fcn.0040c990
mov edx, dword [esp + 0x30]
mov eax, dword [esi]
mov ecx, dword [esp + 0x14]
push edx
mov edx, dword [esi + 8]
push ecx
add edx, eax
push edx
call fcn.00497eb0
mov eax, dword [esp + 0x3c]
add dword [esi + 8], eax
add dword [edi + 0x14], eax
add esp, 0xc
push ebx
mov ecx, esi
call fcn.0040c990
mov eax, dword [esi]
mov edx, dword [esi + 8]
push ebx
lea ecx, [edi + 0x9f8]
push ecx
add edx, eax
push edx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
add esp, 0xc
push ebx
mov ecx, esi
call fcn.0040c990
mov eax, dword [esi]
lea ecx, [edi + 0x9f4]
push ebx
push ecx
mov ecx, dword [esi + 8]
add ecx, eax
push ecx
call fcn.00497eb0
add dword [esi + 8], ebx
mov eax, dword [edi + 0x9f4]
add dword [edi + 0x14], ebx
add esp, 0xc
push eax
mov ecx, esi
mov dword [esp + 0x18], eax
call fcn.0040c990
mov edx, dword [esp + 0x14]
mov eax, dword [esi]
push edx
mov edx, dword [esi + 8]
lea ecx, [edi + 0x5f0]
push ecx
add edx, eax
push edx
call fcn.00497eb0
mov eax, dword [esp + 0x20]
add dword [esi + 8], eax
add dword [edi + 0x14], eax
mov eax, dword [edi + 0x5e4]
add esp, 0xc
push ebx
mov ecx, esi
mov dword [esp + 0x1c], eax
call fcn.0040c990
mov eax, dword [esi]
mov edx, dword [esi + 8]
push ebx
lea ecx, [esp + 0x1c]
push ecx
add edx, eax
push edx
call fcn.00497eb0
add dword [esi + 8], ebx
mov eax, dword [esp + 0x24]
add esp, 0xc
add dword [edi + 0x14], ebx
push eax
mov ecx, esi
mov dword [esp + 0x18], eax
call fcn.0040c990
mov ecx, dword [esp + 0x14]
mov eax, dword [esi]
push ecx
mov ecx, dword [esi + 8]
lea edx, [edi + 0x1e0]
push edx
add ecx, eax
push ecx
call fcn.00497eb0
mov eax, dword [esp + 0x20]
add dword [esi + 8], eax
add dword [edi + 0x14], eax
add esp, 0xc
push ebx
mov ecx, esi
call fcn.0040c990
mov eax, dword [esi]
mov ecx, dword [esi + 8]
push ebx
lea edx, [edi + 0x9f0]
push edx
add ecx, eax
push ecx
call fcn.00497eb0
add dword [esi + 8], ebx
mov edx, dword [edi + 0xa5c]
add dword [edi + 0x14], ebx
add esp, 0xc
push ebx
mov ecx, esi
mov dword [esp + 0x1c], edx
call fcn.0040c990
mov eax, dword [esi]
mov edx, dword [esi + 8]
push ebx
lea ecx, [esp + 0x1c]
push ecx
add edx, eax
push edx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
add esp, 0xc
lea ecx, [esp + 0x40]
call fcn.0043de60
mov eax, dword [esp + 0x18]
mov byte [esp + 0x208], 3
mov dword [esp + 0x1c], 0
test eax, eax
jle 0x451846
lea esp, [esp]
mov ecx, dword [edi + 0xa58]
mov eax, dword [edi + 0xa5c]
add eax, ecx
mov dword [esp + 0x14], eax
cmp ecx, eax
jbe 0x4515bf
call fcn.00496353
mov eax, dword [esp + 0x14]
mov ecx, dword [edi + 0xa40]
mov dword [esp + 0xa4], ecx
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
test ecx, ecx
jne 0x45160d
call fcn.00496353
mov ecx, dword [esp + 0xa4]
mov eax, dword [esp + 0x14]
xor edx, edx
dec eax
mov dword [esp + 0x30], edx
mov edx, dword [edx + 0x1c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x30]
add edx, dword [eax + 0x18]
mov eax, dword [esp + 0x14]
cmp eax, edx
ja 0x451618
test ecx, ecx
je 0x451611
mov ecx, dword [ecx]
jmp 0x451613
mov edx, dword [ecx]
jmp 0x4515ea
xor ecx, ecx
cmp eax, dword [ecx + 0x18]
jae 0x45161d
call fcn.00496353
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x14]
mov dword [esp + 0xac], ecx
lea ecx, [esp + 0xac]
mov dword [esp + 0xb0], edx
call fcn.00435e40
mov ecx, dword [eax]
mov dword [esp + 0x70], ecx
mov edx, dword [eax + 4]
mov dword [esp + 0x74], edx
mov ecx, dword [eax + 8]
mov dword [esp + 0x78], ecx
mov edx, dword [eax + 0xc]
mov dword [esp + 0x14], eax
add eax, 0x10
lea ecx, [esp + 0x80]
mov dword [esp + 0x7c], edx
cmp ecx, eax
je 0x4516a8
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x80]
mov edx, dword [eax]
push eax
push ecx
push edx
push ecx
lea edx, [esp + 0xec]
push edx
lea ecx, [esp + 0x94]
call fcn.004108b0
mov eax, dword [esp + 0x14]
add eax, 0x10
push eax
lea ecx, [esp + 0x84]
call fcn.00412c00
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x30]
mov eax, dword [edi + 0xa5c]
mov dword [esp + 0xa0], ecx
test eax, eax
je 0x4516fa
mov edx, dword [edi + 0xa58]
mov ecx, dword [edi + 0xa54]
lea eax, [eax + edx - 1]
cmp ecx, eax
ja 0x4516d6
sub eax, ecx
mov ecx, dword [edi + 0xa50]
mov eax, dword [ecx + eax*4]
lea ecx, [eax + 0x10]
call fcn.00412830
add dword [edi + 0xa5c], 0xffffffff
jne 0x4516fa
mov dword [edi + 0xa58], 0
push 0x34
call fcn.00485167
add esp, 4
mov dword [esp + 0x14], eax
mov byte [esp + 0x208], bl
test eax, eax
je 0x451745
mov ecx, eax
lea edx, [esp + 0x3b]
push edx
lea eax, [esp + 0x3f]
add ecx, 0x10
push eax
call fcn.0040fb50
mov eax, dword [esp + 0x14]
xor ecx, ecx
mov dword [eax], 0xffffffff
mov dword [eax + 4], 0xffffffff
mov dword [eax + 8], ecx
mov dword [eax + 0x30], ecx
mov dword [eax + 0xc], ecx
jmp 0x451747
xor eax, eax
mov ecx, dword [esp + 0x70]
mov dword [eax], ecx
mov edx, dword [esp + 0x74]
mov dword [eax + 4], edx
mov ecx, dword [esp + 0x78]
mov dword [eax + 8], ecx
mov edx, dword [esp + 0x7c]
mov dword [eax + 0xc], edx
lea ecx, [eax + 0x10]
lea edx, [esp + 0x80]
mov dword [esp + 0x30], eax
mov byte [esp + 0x208], 3
mov dword [esp + 0x34], eax
cmp ecx, edx
je 0x4517b5
mov ecx, eax
mov eax, dword [ecx + 0x28]
mov edx, dword [eax]
add ecx, 0x10
push eax
mov eax, dword [ecx]
push eax
push edx
push eax
lea eax, [esp + 0xe4]
push eax
call fcn.004108b0
lea ecx, [esp + 0x80]
push ecx
mov ecx, dword [esp + 0x34]
add ecx, 0x10
call fcn.00412c00
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0xa0]
mov dword [eax + 0x30], edx
mov edx, dword [esp + 0x4c]
test edx, edx
jne 0x4517cd
mov dword [esp + 0x14], edx
jmp 0x4517da
mov ecx, dword [esp + 0x54]
sub ecx, edx
sar ecx, 2
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x50]
sub ecx, edx
sar ecx, 2
cmp ecx, dword [esp + 0x14]
jae 0x4517f8
mov ecx, dword [esp + 0x50]
mov dword [ecx], eax
add ecx, 4
mov dword [esp + 0x50], ecx
jmp 0x45182f
mov eax, dword [esp + 0x50]
mov dword [esp + 0x2c], eax
cmp dword [esp + 0x4c], eax
jbe 0x45180b
call fcn.00496353
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x40]
lea edx, [esp + 0x34]
push edx
push ecx
push eax
lea edx, [esp + 0xc0]
push edx
lea ecx, [esp + 0x50]
call fcn.0041c640
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x18]
inc edx
cmp edx, eax
mov dword [esp + 0x1c], edx
jl 0x4515a0
jmp 0x45184a
mov ecx, dword [esp + 0x50]
xor edx, edx
mov dword [esp + 0x68], 0
mov dword [esp + 0x1c], edx
test eax, eax
jle 0x451bc6
sub ecx, dword [esp + 0x4c]
sub eax, edx
dec eax
sar ecx, 2
mov dword [esp + 0x2c], eax
cmp eax, ecx
jb 0x45187b
call fcn.00496353
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x4c]
mov edx, dword [ecx + eax*4]
mov eax, dword [esi + 8]
add eax, ebx
cmp dword [esi + 4], eax
mov dword [esp + 0x34], edx
jge 0x4518b2
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push eax
push ecx
call fcn.00497ae5
mov dword [esi], eax
mov edx, dword [esi + 8]
add edx, ebx
add esp, 8
cmp dword [esi + 4], edx
jl 0x451890
mov eax, dword [esi]
mov ecx, dword [esp + 0x34]
mov edx, dword [esi + 8]
push ebx
push ecx
add edx, eax
push edx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
mov eax, dword [esi + 8]
add eax, ebx
add esp, 0xc
cmp dword [esi + 4], eax
jge 0x451902
jmp 0x4518e0
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push eax
push ecx
call fcn.00497ae5
mov dword [esi], eax
mov edx, dword [esi + 8]
add edx, ebx
add esp, 8
cmp dword [esi + 4], edx
jl 0x4518e0
mov ecx, dword [esp + 0x34]
mov eax, dword [esi]
add ecx, 4
push ebx
push ecx
mov ecx, dword [esi + 8]
add ecx, eax
push ecx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
mov edx, dword [esi + 8]
add edx, ebx
add esp, 0xc
cmp dword [esi + 4], edx
jge 0x451952
jmp 0x451930
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
push eax
mov eax, dword [esi]
push eax
call fcn.00497ae5
mov dword [esi], eax
mov ecx, dword [esi + 8]
add ecx, ebx
add esp, 8
cmp dword [esi + 4], ecx
jl 0x451930
mov ecx, dword [esp + 0x34]
mov eax, dword [esi]
mov edx, dword [esi + 8]
push ebx
add ecx, 8
push ecx
add edx, eax
push edx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
mov eax, dword [esi + 8]
add eax, ebx
add esp, 0xc
cmp dword [esi + 4], eax
jge 0x4519a2
jmp 0x451980
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push eax
push ecx
call fcn.00497ae5
mov dword [esi], eax
mov edx, dword [esi + 8]
add edx, ebx
add esp, 8
cmp dword [esi + 4], edx
jl 0x451980
mov ecx, dword [esp + 0x34]
mov eax, dword [esi]
add ecx, 0xc
push ebx
push ecx
mov ecx, dword [esi + 8]
add ecx, eax
push ecx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
mov edx, dword [esi + 8]
add edx, ebx
add esp, 0xc
cmp dword [esi + 4], edx
jge 0x4519f2
jmp 0x4519d0
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
push eax
mov eax, dword [esi]
push eax
call fcn.00497ae5
mov dword [esi], eax
mov ecx, dword [esi + 8]
add ecx, ebx
add esp, 8
cmp dword [esi + 4], ecx
jl 0x4519d0
mov ecx, dword [esp + 0x34]
mov eax, dword [esi]
mov edx, dword [esi + 8]
push ebx
add ecx, 0x30
push ecx
add edx, eax
push edx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
mov edx, dword [esi + 8]
mov eax, dword [esp + 0x40]
mov ecx, dword [eax + 0x2c]
add edx, ebx
add esp, 0xc
cmp dword [esi + 4], edx
mov dword [esp + 0x28], ecx
jge 0x451a52
jmp 0x451a30
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
push eax
mov eax, dword [esi]
push eax
call fcn.00497ae5
mov dword [esi], eax
mov ecx, dword [esi + 8]
add ecx, ebx
add esp, 8
cmp dword [esi + 4], ecx
jl 0x451a30
mov eax, dword [esi]
mov ecx, dword [esi + 8]
push ebx
lea edx, [esp + 0x2c]
push edx
add ecx, eax
push ecx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
mov ecx, dword [esp + 0x40]
mov eax, dword [ecx + 0x28]
mov eax, dword [eax]
mov edx, dword [ecx + 0x10]
add esp, 0xc
cmp dword [esp + 0x28], 0
mov dword [esp + 0x20], edx
mov dword [esp + 0x24], eax
mov dword [esp + 0x14], 0
jle 0x451bad
jmp 0x451aa0
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x451bd6
call fcn.00496353
xor eax, eax
mov ecx, dword [esp + 0x24]
cmp ecx, dword [eax + 0x18]
jne 0x451ac1
call fcn.00496353
mov ecx, dword [esi + 8]
mov edx, dword [esp + 0x24]
mov eax, dword [edx + 0xc]
add ecx, ebx
cmp dword [esi + 4], ecx
mov dword [esp + 0x3c], eax
jge 0x451b02
jmp 0x451ae0
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
mov edx, dword [esi]
push eax
push edx
call fcn.00497ae5
mov dword [esi], eax
mov eax, dword [esi + 8]
add eax, ebx
add esp, 8
cmp dword [esi + 4], eax
jl 0x451ae0
mov eax, dword [esi]
mov edx, dword [esi + 8]
push ebx
lea ecx, [esp + 0x40]
push ecx
add edx, eax
push edx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
add esp, 0xc
cmp dword [esp + 0x20], 0
jne 0x451bdd
call fcn.00496353
xor eax, eax
mov ecx, dword [esp + 0x24]
cmp ecx, dword [eax + 0x18]
jne 0x451b3e
call fcn.00496353
mov ecx, dword [esi + 8]
mov edx, dword [esp + 0x24]
mov eax, dword [edx + 0x10]
add ecx, ebx
cmp dword [esi + 4], ecx
mov dword [esp + 0x68], eax
jge 0x451b75
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
mov edx, dword [esi]
push eax
push edx
call fcn.00497ae5
mov dword [esi], eax
mov eax, dword [esi + 8]
add eax, ebx
add esp, 8
cmp dword [esi + 4], eax
jl 0x451b53
mov eax, dword [esi]
mov edx, dword [esi + 8]
push ebx
lea ecx, [esp + 0x6c]
push ecx
add edx, eax
push edx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
add esp, 0xc
lea ecx, [esp + 0x20]
call fcn.0040e1b0
mov eax, dword [esp + 0x14]
inc eax
cmp eax, dword [esp + 0x28]
mov dword [esp + 0x14], eax
jl 0x451aa0
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x50]
inc edx
cmp edx, eax
mov dword [esp + 0x1c], edx
jl 0x451860
xor edx, edx
mov dword [esp + 0x1c], edx
test eax, eax
jle 0x451d3b
jmp 0x451bf4
mov eax, dword [eax]
jmp 0x451ab3
mov eax, dword [esp + 0x20]
mov eax, dword [eax]
jmp 0x451b30
mov ecx, dword [esp + 0x50]
sub ecx, dword [esp + 0x4c]
sub eax, edx
dec eax
sar ecx, 2
mov dword [esp + 0x2c], eax
cmp eax, ecx
jb 0x451c0f
call fcn.00496353
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x4c]
mov eax, dword [ecx + eax*4]
mov edx, dword [eax]
mov dword [esp + 0x70], edx
mov ecx, dword [eax + 4]
mov dword [esp + 0x74], ecx
mov edx, dword [eax + 8]
mov dword [esp + 0x78], edx
mov ecx, dword [eax + 0xc]
mov dword [esp + 0x7c], ecx
lea ecx, [eax + 0x10]
lea edx, [esp + 0x80]
mov dword [esp + 0x34], eax
cmp edx, ecx
je 0x451c83
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x80]
mov edx, dword [eax]
push eax
push ecx
push edx
push ecx
lea eax, [esp + 0xc4]
push eax
lea ecx, [esp + 0x94]
call fcn.004108b0
mov eax, dword [esp + 0x34]
add eax, 0x10
push eax
lea ecx, [esp + 0x84]
call fcn.00412c00
mov eax, dword [esp + 0x34]
mov edx, dword [edi + 0xa5c]
mov ecx, dword [eax + 0x30]
inc edx
mov dword [esp + 0xa0], ecx
cmp dword [edi + 0xa54], edx
ja 0x451ca9
push 1
lea ecx, [edi + 0xa40]
call fcn.0043d720
mov eax, dword [edi + 0xa58]
add eax, dword [edi + 0xa5c]
mov ecx, dword [edi + 0xa54]
mov dword [esp + 0x30], eax
cmp ecx, eax
ja 0x451cc9
sub eax, ecx
mov dword [esp + 0x30], eax
mov ecx, dword [edi + 0xa50]
cmp dword [ecx + eax*4], 0
jne 0x451cec
push 0x34
call fcn.00485167
mov edx, dword [edi + 0xa50]
mov ecx, dword [esp + 0x34]
add esp, 4
mov dword [edx + ecx*4], eax
mov edx, dword [edi + 0xa50]
mov eax, dword [esp + 0x30]
mov eax, dword [edx + eax*4]
lea ecx, [esp + 0x70]
push ecx
push eax
call fcn.004484d0
mov ecx, dword [esp + 0x3c]
inc dword [edi + 0xa5c]
add esp, 8
add ecx, 0x10
call fcn.00412830
mov edx, dword [esp + 0x34]
push edx
call fcn.00485196
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
inc edx
add esp, 4
cmp edx, eax
mov dword [esp + 0x1c], edx
jl 0x451bf0
mov eax, dword [esi + 8]
add eax, ebx
cmp dword [esi + 4], eax
jge 0x451d72
jmp 0x451d50
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push eax
push ecx
call fcn.00497ae5
mov dword [esi], eax
mov edx, dword [esi + 8]
add edx, ebx
add esp, 8
cmp dword [esi + 4], edx
jl 0x451d50
mov eax, dword [esi]
mov edx, dword [esi + 8]
push ebx
lea ecx, [edi + 0xa60]
push ecx
add edx, eax
push edx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
mov ecx, dword [esi + 8]
mov eax, dword [edi + 0xa80]
add ecx, ebx
add esp, 0xc
cmp dword [esi + 4], ecx
mov dword [esp + 0x28], eax
jge 0x451dc6
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
mov edx, dword [esi]
push eax
push edx
call fcn.00497ae5
mov dword [esi], eax
mov eax, dword [esi + 8]
add eax, ebx
add esp, 8
cmp dword [esi + 4], eax
jl 0x451da4
mov eax, dword [esi]
mov edx, dword [esi + 8]
push ebx
lea ecx, [esp + 0x2c]
push ecx
add edx, eax
push edx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
mov eax, dword [edi + 0xa7c]
mov eax, dword [eax]
mov ecx, dword [edi + 0xa64]
add esp, 0xc
cmp dword [esp + 0x28], 0
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
mov dword [esp + 0x1c], 0
jle 0x451f1d
jmp 0x451e10
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4522cb
call fcn.00496353
xor eax, eax
mov edx, dword [esp + 0x24]
cmp edx, dword [eax + 0x18]
jne 0x451e31
call fcn.00496353
mov edx, dword [esi + 8]
mov eax, dword [esp + 0x24]
mov ecx, dword [eax + 0xc]
add edx, ebx
cmp dword [esi + 4], edx
mov dword [esp + 0x3c], ecx
jge 0x451e72
jmp 0x451e50
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
push eax
mov eax, dword [esi]
push eax
call fcn.00497ae5
mov dword [esi], eax
mov ecx, dword [esi + 8]
add ecx, ebx
add esp, 8
cmp dword [esi + 4], ecx
jl 0x451e50
mov eax, dword [esi]
mov ecx, dword [esi + 8]
push ebx
lea edx, [esp + 0x40]
push edx
add ecx, eax
push ecx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
add esp, 0xc
cmp dword [esp + 0x20], 0
jne 0x4522d2
call fcn.00496353
xor eax, eax
mov ecx, dword [esp + 0x24]
cmp ecx, dword [eax + 0x18]
jne 0x451eae
call fcn.00496353
mov ecx, dword [esi + 8]
mov edx, dword [esp + 0x24]
mov eax, dword [edx + 0x10]
add ecx, ebx
cmp dword [esi + 4], ecx
mov dword [esp + 0x18], eax
jge 0x451ee5
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
mov edx, dword [esi]
push eax
push edx
call fcn.00497ae5
mov dword [esi], eax
mov eax, dword [esi + 8]
add eax, ebx
add esp, 8
cmp dword [esi + 4], eax
jl 0x451ec3
mov eax, dword [esi]
mov edx, dword [esi + 8]
push ebx
lea ecx, [esp + 0x1c]
push ecx
add edx, eax
push edx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
add esp, 0xc
lea ecx, [esp + 0x20]
call fcn.0040e1b0
mov eax, dword [esp + 0x1c]
inc eax
cmp eax, dword [esp + 0x28]
mov dword [esp + 0x1c], eax
jl 0x451e10
mov eax, dword [esi + 8]
add eax, ebx
cmp dword [esi + 4], eax
jge 0x451f52
jmp 0x451f30
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push eax
push ecx
call fcn.00497ae5
mov dword [esi], eax
mov edx, dword [esi + 8]
add edx, ebx
add esp, 8
cmp dword [esi + 4], edx
jl 0x451f30
mov eax, dword [esi]
mov edx, dword [esi + 8]
push ebx
lea ecx, [edi + 0xacc]
push ecx
add edx, eax
push edx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
mov ecx, dword [esi + 8]
mov eax, dword [edi + 0xac0]
add ecx, ebx
add esp, 0xc
cmp dword [esi + 4], ecx
mov dword [esp + 0x28], eax
jge 0x451fa6
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
mov edx, dword [esi]
push eax
push edx
call fcn.00497ae5
mov dword [esi], eax
mov eax, dword [esi + 8]
add eax, ebx
add esp, 8
cmp dword [esi + 4], eax
jl 0x451f84
mov eax, dword [esi]
mov edx, dword [esi + 8]
push ebx
lea ecx, [esp + 0x2c]
push ecx
add edx, eax
push edx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
mov eax, dword [edi + 0xabc]
mov eax, dword [eax]
mov ecx, dword [edi + 0xaa4]
add esp, 0xc
cmp dword [esp + 0x28], 0
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
mov dword [esp + 0x1c], 0
jle 0x4520fd
jmp 0x451ff0
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4522dd
call fcn.00496353
xor eax, eax
mov edx, dword [esp + 0x24]
cmp edx, dword [eax + 0x18]
jne 0x452011
call fcn.00496353
mov edx, dword [esi + 8]
mov eax, dword [esp + 0x24]
mov ecx, dword [eax + 0xc]
add edx, ebx
cmp dword [esi + 4], edx
mov dword [esp + 0x3c], ecx
jge 0x452052
jmp 0x452030
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
push eax
mov eax, dword [esi]
push eax
call fcn.00497ae5
mov dword [esi], eax
mov ecx, dword [esi + 8]
add ecx, ebx
add esp, 8
cmp dword [esi + 4], ecx
jl 0x452030
mov eax, dword [esi]
mov ecx, dword [esi + 8]
push ebx
lea edx, [esp + 0x40]
push edx
add ecx, eax
push ecx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
add esp, 0xc
cmp dword [esp + 0x20], 0
jne 0x4522e4
call fcn.00496353
xor eax, eax
mov ecx, dword [esp + 0x24]
cmp ecx, dword [eax + 0x18]
jne 0x45208e
call fcn.00496353
mov ecx, dword [esi + 8]
mov edx, dword [esp + 0x24]
mov eax, dword [edx + 0x10]
add ecx, ebx
cmp dword [esi + 4], ecx
mov dword [esp + 0x18], eax
jge 0x4520c5
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
mov edx, dword [esi]
push eax
push edx
call fcn.00497ae5
mov dword [esi], eax
mov eax, dword [esi + 8]
add eax, ebx
add esp, 8
cmp dword [esi + 4], eax
jl 0x4520a3
mov eax, dword [esi]
mov edx, dword [esi + 8]
push ebx
lea ecx, [esp + 0x1c]
push ecx
add edx, eax
push edx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
add esp, 0xc
lea ecx, [esp + 0x20]
call fcn.0040e1b0
mov eax, dword [esp + 0x1c]
inc eax
cmp eax, dword [esp + 0x28]
mov dword [esp + 0x1c], eax
jl 0x451ff0
mov ecx, dword [edi + 0x9fd4]
mov dword [esp + 0x28], ecx
xor eax, eax
dec ecx
mov dword [esp + 0x1c], eax
test ecx, ecx
jle 0x452317
inc eax
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x2c]
push eax
lea ecx, [edi + 0x9fb8]
call fcn.00412930
mov eax, dword [eax]
mov edx, dword [esi + 8]
mov ecx, dword [eax + 0x1c]
add edx, ebx
cmp dword [esi + 4], edx
mov dword [esp + 0x14], eax
mov dword [esp + 0x6c], ecx
jge 0x452164
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
push eax
mov eax, dword [esi]
push eax
call fcn.00497ae5
mov dword [esi], eax
mov ecx, dword [esi + 8]
add ecx, ebx
add esp, 8
cmp dword [esi + 4], ecx
jl 0x452142
mov eax, dword [esi]
mov ecx, dword [esi + 8]
push ebx
lea edx, [esp + 0x70]
push edx
add ecx, eax
push ecx
call fcn.00497eb0
add dword [esi + 8], ebx
mov ecx, dword [esp + 0x20]
add esp, 0xc
add dword [edi + 0x14], ebx
mov eax, dword [ecx + 0x18]
mov eax, dword [eax]
mov edx, dword [ecx]
mov dword [esp + 0x20], edx
mov dword [esp + 0x24], eax
jmp 0x4521a0
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x18]
mov dword [esp + 0xa8], ecx
mov ecx, dword [eax]
mov eax, dword [esp + 0x20]
test eax, eax
je 0x4521bc
cmp eax, ecx
je 0x4521c5
call fcn.00496353
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
cmp edx, dword [esp + 0xa8]
je 0x452301
test eax, eax
jne 0x4522ef
call fcn.00496353
xor eax, eax
mov ecx, dword [esp + 0x24]
cmp ecx, dword [eax + 0x18]
jne 0x4521f3
call fcn.00496353
mov ecx, dword [esi + 8]
mov edx, dword [esp + 0x24]
mov eax, dword [edx + 0xc]
add ecx, ebx
cmp dword [esi + 4], ecx
mov dword [esp + 0x18], eax
jge 0x452232
jmp 0x452210
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
mov edx, dword [esi]
push eax
push edx
call fcn.00497ae5
mov dword [esi], eax
mov eax, dword [esi + 8]
add eax, ebx
add esp, 8
cmp dword [esi + 4], eax
jl 0x452210
mov edx, dword [esi]
add edx, dword [esi + 8]
push ebx
lea ecx, [esp + 0x1c]
push ecx
push edx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
add esp, 0xc
cmp dword [esp + 0x20], 0
jne 0x4522f6
call fcn.00496353
xor eax, eax
mov ecx, dword [esp + 0x24]
cmp ecx, dword [eax + 0x18]
jne 0x45226c
call fcn.00496353
mov ecx, dword [esi + 8]
mov edx, dword [esp + 0x24]
mov eax, dword [edx + 0x10]
add ecx, ebx
cmp dword [esi + 4], ecx
mov dword [esp + 0x18], eax
jge 0x4522a3
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
mov edx, dword [esi]
push eax
push edx
call fcn.00497ae5
mov dword [esi], eax
mov eax, dword [esi + 8]
add eax, ebx
add esp, 8
cmp dword [esi + 4], eax
jl 0x452281
mov edx, dword [esi]
add edx, dword [esi + 8]
push ebx
lea ecx, [esp + 0x1c]
push ecx
push edx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
add esp, 0xc
lea ecx, [esp + 0x20]
call fcn.0040e1b0
jmp 0x4521a0
mov eax, dword [eax]
jmp 0x451e23
mov edx, dword [esp + 0x20]
mov eax, dword [edx]
jmp 0x451ea0
mov eax, dword [eax]
jmp 0x452003
mov edx, dword [esp + 0x20]
mov eax, dword [edx]
jmp 0x452080
mov eax, dword [eax]
jmp 0x4521e5
mov eax, dword [esp + 0x20]
mov eax, dword [eax]
jmp 0x45225e
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x28]
inc eax
dec ecx
cmp eax, ecx
mov dword [esp + 0x1c], eax
jl 0x452116
mov edx, dword [esi + 8]
add edx, ebx
cmp dword [esi + 4], edx
jge 0x452343
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
push eax
mov eax, dword [esi]
push eax
call fcn.00497ae5
mov dword [esi], eax
mov ecx, dword [esi + 8]
add ecx, ebx
add esp, 8
cmp dword [esi + 4], ecx
jl 0x452321
mov eax, dword [esi]
mov ecx, dword [esi + 8]
push ebx
lea edx, [edi + 0xaf0]
push edx
add ecx, eax
push ecx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
mov edx, dword [esi + 8]
add edx, ebx
add esp, 0xc
cmp dword [esi + 4], edx
jge 0x452392
jmp 0x452370
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
push eax
mov eax, dword [esi]
push eax
call fcn.00497ae5
mov dword [esi], eax
mov ecx, dword [esi + 8]
add ecx, ebx
add esp, 8
cmp dword [esi + 4], ecx
jl 0x452370
mov eax, dword [esi]
mov ecx, dword [esi + 8]
push ebx
lea edx, [edi + 0x1448]
push edx
add ecx, eax
push ecx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
mov edx, dword [esi + 8]
add edx, ebx
add esp, 0xc
cmp dword [esi + 4], edx
jge 0x4523e2
lea ebx, [ebx]
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
push eax
mov eax, dword [esi]
push eax
call fcn.00497ae5
mov dword [esi], eax
mov ecx, dword [esi + 8]
add ecx, ebx
add esp, 8
cmp dword [esi + 4], ecx
jl 0x4523c0
mov eax, dword [esi]
mov ecx, dword [esi + 8]
push ebx
lea edx, [edi + 0x5ec]
push edx
add ecx, eax
push ecx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
mov edx, dword [esi + 8]
add edx, ebx
add esp, 0xc
cmp dword [esi + 4], edx
jge 0x452432
lea ebx, [ebx]
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
push eax
mov eax, dword [esi]
push eax
call fcn.00497ae5
mov dword [esi], eax
mov ecx, dword [esi + 8]
add ecx, ebx
add esp, 8
cmp dword [esi + 4], ecx
jl 0x452410
mov eax, dword [esi]
mov ecx, dword [esi + 8]
push ebx
lea edx, [edi + 0x895c]
push edx
add ecx, eax
push ecx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
mov edx, dword [esi + 8]
add edx, ebx
add esp, 0xc
cmp dword [esi + 4], edx
jge 0x452482
lea ebx, [ebx]
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
push eax
mov eax, dword [esi]
push eax
call fcn.00497ae5
mov dword [esi], eax
mov ecx, dword [esi + 8]
add ecx, ebx
add esp, 8
cmp dword [esi + 4], ecx
jl 0x452460
mov eax, dword [esi]
mov ecx, dword [esi + 8]
push ebx
lea edx, [edi + 0x120]
push edx
add ecx, eax
push ecx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
mov eax, dword [esi + 8]
mov edx, dword [edi + 0x4900]
add eax, ebx
add esp, 0xc
cmp dword [esi + 4], eax
mov dword [esp + 0x18], edx
jge 0x4524d6
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push eax
push ecx
call fcn.00497ae5
mov dword [esi], eax
mov edx, dword [esi + 8]
add edx, ebx
add esp, 8
cmp dword [esi + 4], edx
jl 0x4524b4
mov eax, dword [esi]
mov edx, dword [esi + 8]
push ebx
lea ecx, [esp + 0x1c]
push ecx
add edx, eax
push edx
call fcn.00497eb0
add dword [esi + 8], ebx
mov ecx, dword [edi + 0x1470]
add dword [edi + 0x14], ebx
xor eax, eax
add esp, 0xc
mov dword [esp + 0x28], ecx
mov dword [esp + 0x1c], eax
test ecx, ecx
jle 0x452539
push 0
push eax
lea ecx, [edi + 0x1450]
call fcn.00412680
test eax, eax
je 0x45252a
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0xc0]
call dword [0x4ce790]
mov eax, dword [esp + 0x1c]
inc eax
cmp eax, dword [esp + 0x28]
mov dword [esp + 0x1c], eax
jl 0x452506
lea ecx, [esp + 0xbc]
call dword [0x4ce780]
mov ecx, dword [esi + 8]
add ecx, ebx
cmp dword [esi + 4], ecx
mov dword [esp + 0x28], eax
jge 0x452576
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
mov edx, dword [esi]
push eax
push edx
call fcn.00497ae5
mov dword [esi], eax
mov eax, dword [esi + 8]
add eax, ebx
add esp, 8
cmp dword [esi + 4], eax
jl 0x452554
mov eax, dword [esi]
mov edx, dword [esi + 8]
push ebx
lea ecx, [esp + 0x2c]
push ecx
add edx, eax
push edx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
xor eax, eax
add esp, 0xc
cmp dword [esp + 0x28], eax
mov dword [esp + 0x1c], eax
jle 0x452741
push eax
lea ecx, [esp + 0xc0]
call dword [0x4ce6f8]
mov eax, dword [eax]
push 0
push eax
lea ecx, [edi + 0x1450]
call fcn.00412680
mov ecx, dword [eax + 0x9c]
mov dword [esp + 0x64], ecx
mov edx, dword [eax + 0xa0]
mov ecx, dword [esi + 8]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x60], edx
mov eax, dword [eax + 0x98]
add ecx, ebx
cmp dword [esi + 4], ecx
mov dword [esp + 0x18], eax
jge 0x452612
lea esp, [esp]
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
mov edx, dword [esi]
push eax
push edx
call fcn.00497ae5
mov dword [esi], eax
mov eax, dword [esi + 8]
add eax, ebx
add esp, 8
cmp dword [esi + 4], eax
jl 0x4525f0
mov eax, dword [esi]
mov edx, dword [esi + 8]
push ebx
lea ecx, [esp + 0x1c]
push ecx
add edx, eax
push edx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
mov eax, dword [esi + 8]
add eax, ebx
add esp, 0xc
cmp dword [esi + 4], eax
jge 0x452662
jmp 0x452640
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push eax
push ecx
call fcn.00497ae5
mov dword [esi], eax
mov edx, dword [esi + 8]
add edx, ebx
add esp, 8
cmp dword [esi + 4], edx
jl 0x452640
mov eax, dword [esi]
mov edx, dword [esi + 8]
push ebx
lea ecx, [esp + 0x68]
push ecx
add edx, eax
push edx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
mov eax, dword [esi + 8]
add eax, ebx
add esp, 0xc
cmp dword [esi + 4], eax
jge 0x4526b2
jmp 0x452690
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push eax
push ecx
call fcn.00497ae5
mov dword [esi], eax
mov edx, dword [esi + 8]
add edx, ebx
add esp, 8
cmp dword [esi + 4], edx
jl 0x452690
mov eax, dword [esi]
mov edx, dword [esi + 8]
push ebx
lea ecx, [esp + 0x64]
push ecx
add edx, eax
push edx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
mov edx, dword [esi + 8]
mov eax, dword [esp + 0x38]
mov ecx, dword [eax + 0xa4]
add edx, ebx
add esp, 0xc
cmp dword [esi + 4], edx
mov dword [esp + 0x18], ecx
jge 0x452712
jmp 0x4526f0
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
push eax
mov eax, dword [esi]
push eax
call fcn.00497ae5
mov dword [esi], eax
mov ecx, dword [esi + 8]
add ecx, ebx
add esp, 8
cmp dword [esi + 4], ecx
jl 0x4526f0
mov eax, dword [esi]
mov ecx, dword [esi + 8]
push ebx
lea edx, [esp + 0x1c]
push edx
add ecx, eax
push ecx
call fcn.00497eb0
mov eax, dword [esp + 0x28]
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
inc eax
add esp, 0xc
cmp eax, dword [esp + 0x28]
mov dword [esp + 0x1c], eax
jl 0x4525a2
mov edx, dword [esi + 8]
add edx, ebx
cmp dword [esi + 4], edx
jge 0x452772
jmp 0x452750
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
push eax
mov eax, dword [esi]
push eax
call fcn.00497ae5
mov dword [esi], eax
mov ecx, dword [esi + 8]
add ecx, ebx
add esp, 8
cmp dword [esi + 4], ecx
jl 0x452750
mov eax, dword [esi]
mov edx, dword [esi + 8]
lea ecx, [edi + 0x8960]
push ebx
push ecx
add edx, eax
push edx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
add esp, 0xc
cmp dword [edi + 0x8960], 0
je 0x452a26
mov eax, dword [edi + 0x8aa4]
test eax, eax
je 0x452986
add eax, 0xc8
mov dword [esp + 0x2c], eax
mov eax, dword [esi + 8]
add eax, ebx
cmp dword [esi + 4], eax
jge 0x4527e2
mov edi, edi
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push eax
push ecx
call fcn.00497ae5
mov dword [esi], eax
mov edx, dword [esi + 8]
add edx, ebx
add esp, 8
cmp dword [esi + 4], edx
jl 0x4527c0
mov eax, dword [esi]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 8]
push ebx
push ecx
add edx, eax
push edx
call fcn.00497eb0
add dword [esi + 8], ebx
mov eax, dword [edi + 0x8aa4]
add dword [edi + 0x14], ebx
add eax, 0xcc
mov dword [esp + 0x38], eax
mov eax, dword [esi + 8]
add eax, ebx
add esp, 0xc
cmp dword [esi + 4], eax
jge 0x452842
jmp 0x452820
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push eax
push ecx
call fcn.00497ae5
mov dword [esi], eax
mov edx, dword [esi + 8]
add edx, ebx
add esp, 8
cmp dword [esi + 4], edx
jl 0x452820
mov eax, dword [esi]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 8]
push ebx
push ecx
add edx, eax
push edx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
mov eax, dword [esi + 8]
add eax, ebx
add esp, 0xc
cmp dword [esi + 4], eax
jge 0x452892
jmp 0x452870
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push eax
push ecx
call fcn.00497ae5
mov dword [esi], eax
mov edx, dword [esi + 8]
add edx, ebx
add esp, 8
cmp dword [esi + 4], edx
jl 0x452870
mov eax, dword [esi]
lea ecx, [edi + 0x8964]
push ebx
push ecx
mov ecx, dword [esi + 8]
add ecx, eax
push ecx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
add esp, 0xc
cmp dword [edi + 0x8964], 1
jne 0x452a26
mov ecx, dword [edi + 0x8aa4]
mov eax, dword [ecx + 0x34]
sub eax, dword [ecx + 0x30]
add ecx, 0x24
sar eax, 2
xor ecx, ecx
mov dword [esp + 0x28], eax
mov dword [esp + 0x1c], ecx
test eax, eax
jle 0x452a26
mov eax, dword [edi + 0x8aa4]
mov edx, dword [eax + 0x34]
sub edx, dword [eax + 0x30]
add eax, 0x24
sar edx, 2
mov dword [esp + 0x14], ecx
mov dword [esp + 0x2c], eax
cmp ecx, edx
jb 0x452908
call fcn.00496353
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 0xc]
mov ecx, dword [esp + 0x14]
mov edx, dword [eax + ecx*4]
mov ecx, dword [esi + 8]
mov eax, dword [edx + 0xfc]
add ecx, ebx
cmp dword [esi + 4], ecx
mov dword [esp + 0x18], eax
jge 0x452952
jmp 0x452930
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
mov edx, dword [esi]
push eax
push edx
call fcn.00497ae5
mov dword [esi], eax
mov eax, dword [esi + 8]
add eax, ebx
add esp, 8
cmp dword [esi + 4], eax
jl 0x452930
mov eax, dword [esi]
mov edx, dword [esi + 8]
push ebx
lea ecx, [esp + 0x1c]
push ecx
add edx, eax
push edx
call fcn.00497eb0
mov ecx, dword [esp + 0x28]
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
inc ecx
add esp, 0xc
cmp ecx, dword [esp + 0x28]
mov dword [esp + 0x1c], ecx
jl 0x4528e1
jmp 0x452a26
mov eax, dword [esi + 8]
add eax, ebx
cmp dword [esi + 4], eax
mov dword [esp + 0x18], 0xffffffff
jge 0x4529c2
jmp 0x4529a0
add dword [esi + 4], 0x400
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push eax
push ecx
call fcn.00497ae5
mov dword [esi], eax
mov edx, dword [esi + 8]
add edx, ebx
add esp, 8
cmp dword [esi + 4], edx
jl 0x4529a0
mov eax, dword [esi]
mov edx, dword [esi + 8]
push ebx
lea ecx, [esp + 0x1c]
push ecx
add edx, eax
push edx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
add esp, 0xc
push ebx
mov ecx, esi
call fcn.0040c990
mov eax, dword [esi]
mov edx, dword [esi + 8]
push ebx
lea ecx, [esp + 0x1c]
push ecx
add edx, eax
push edx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
add esp, 0xc
push ebx
mov ecx, esi
call fcn.0040c990
mov eax, dword [esi]
mov edx, dword [esi + 8]
push ebx
lea ecx, [esp + 0x1c]
push ecx
add edx, eax
push edx
call fcn.00497eb0
add dword [esi + 8], ebx
add esp, 0xc
add dword [edi + 0x14], ebx
lea ecx, [edi + 0x8b14]
call fcn.00418c30
mov eax, dword [edi + 0x8b40]
push ebx
mov ecx, esi
mov dword [esp + 0x1c], eax
call fcn.0040c990
mov eax, dword [esi]
mov edx, dword [esi + 8]
push ebx
lea ecx, [esp + 0x1c]
push ecx
add edx, eax
push edx
call fcn.00497eb0
add dword [esi + 8], ebx
mov ecx, dword [edi + 0x8b38]
mov eax, dword [edi + 0x8b40]
add dword [edi + 0x14], ebx
add esp, 0xc
mov dword [esp + 0x2c], ecx
push eax
mov ecx, esi
mov dword [esp + 0x18], eax
call fcn.0040c990
mov edx, dword [esp + 0x14]
mov eax, dword [esi]
mov ecx, dword [esp + 0x2c]
push edx
mov edx, dword [esi + 8]
push ecx
add edx, eax
push edx
call fcn.00497eb0
mov eax, dword [esp + 0x20]
add dword [esi + 8], eax
add dword [edi + 0x14], eax
add esp, 0xc
push ebx
mov ecx, esi
call fcn.0040c990
mov eax, dword [esi]
mov edx, dword [esi + 8]
push ebx
lea ecx, [edi + 0x9ec0]
push ecx
add edx, eax
push edx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
add esp, 0xc
xor eax, eax
mov dword [esp + 0x1c], eax
jmp 0x452ad0
lea eax, [edi + eax*4 + 0xa450]
push ebx
mov ecx, esi
mov dword [esp + 0x30], eax
call fcn.0040c990
mov eax, dword [esi]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 8]
push ebx
push ecx
add edx, eax
push edx
call fcn.00497eb0
mov eax, dword [esp + 0x28]
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
inc eax
add esp, 0xc
cmp eax, 0xa
mov dword [esp + 0x1c], eax
jl 0x452ad0
push ebx
mov ecx, esi
call fcn.0040c990
mov eax, dword [esi]
mov edx, dword [esi + 8]
push ebx
lea ecx, [edi + 0xa0c0]
push ecx
add edx, eax
push edx
call fcn.00497eb0
add dword [esi + 8], ebx
add dword [edi + 0x14], ebx
add esp, 0xc
push ebx
mov ecx, esi
call fcn.0040c990
mov eax, dword [esi]
mov edx, dword [esi + 8]
push ebx
lea ecx, [edi + 0xa914]
push ecx
add edx, eax
push edx
call fcn.00497eb0
add dword [esi + 8], ebx
mov eax, dword [esp + 0x58]
add dword [edi + 0x14], ebx
add esp, 0xc
test eax, eax
je 0x452b6a
push eax
call fcn.00485196
add esp, 4
mov eax, dword [esp + 0x40]
xor esi, esi
push eax
mov dword [esp + 0x50], esi
mov dword [esp + 0x54], esi
mov dword [esp + 0x58], esi
call fcn.00485196
add esp, 4
lea ecx, [esp + 0xbc]
mov byte [esp + 0x208], 1
call dword [0x4ce78c]
cmp dword [esp + 0x1b0], 0x10
jb 0x452bb4
mov ecx, dword [esp + 0x19c]
push ecx
call fcn.00485196
add esp, 4
lea ecx, [esp + 0x80]
mov dword [esp + 0x1b0], 0xf
mov dword [esp + 0x1ac], esi
mov byte [esp + 0x19c], 0
mov dword [esp + 0x208], 0xffffffff
call fcn.00412830
mov ecx, dword [esp + 0x200]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1e8]
xor ecx, esp
call fcn.00496795
mov esp, ebp
pop ebp
ret