Function at 0x4d6d00
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x7c3e14]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x114]
cmp eax, dword [ecx + 8]
jbe 0x4d951a
sub esp, 0x194
mov eax, dword [esp + 0x1a0]
test eax, eax
jne 0x4d6eac
mov ecx, dword [esp + 0x1b0]
test ecx, ecx
je 0x4d6d52
test ecx, 0x200
jne 0x4d6d52
lea eax, [0x65b040]
mov ecx, dword [esp + 0x1a8]
jmp 0x4d6d78
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
mov eax, dword [esp + 0x1ac]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0048f510
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x138], ecx
mov dword [esp + 0x7c], eax
mov dword [esp + 0x184], 0
mov dword [esp + 0x188], 0
mov dword [esp + 0x18c], 0
mov dword [esp + 0x190], 0
mov edx, dword [esp + 0x19c]
mov dword [esp], edx
mov edx, dword [esp + 0x1a0]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1a4]
mov dword [esp + 8], edx
call fcn.00409ce0
mov eax, dword [esp + 0xc]
lea ecx, [0x5d72e0]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x188], eax
mov eax, dword [esp + 0x7c]
test eax, eax
je 0x4d6df7
mov eax, dword [eax + 4]
mov dword [esp + 0x18c], eax
mov eax, dword [esp + 0x138]
mov dword [esp + 0x190], eax
lea eax, [0x61bf1e]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x184]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c4e90
mov eax, dword [esp + 0x198]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x4d6e8f
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004d3a90
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x7c3fa0]
test eax, eax
je 0x4d6e8c
call fcn.00468410
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
mov dword [esp + 0x1b8], 0
mov dword [esp + 0x1bc], 0
add esp, 0x194
ret
mov eax, dword [esp + 0x19c]
cmp byte [eax], 0x6e
mov ecx, dword [esp + 0x1a8]
mov dword [esp], ecx
mov edx, dword [esp + 0x1ac]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x1b0]
mov dword [esp + 8], ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg ebp, eax
mov byte [esp + 0xc], al
xchg ebp, eax
call fcn.004d4150
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x1c]
test eax, eax
jne 0x4d9482
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4d73f1
mov edx, dword [esp + 0x19c]
movzx ebx, byte [edx]
cmp bl, 0x22
je 0x4d7234
movzx eax, byte [esp + 0x1b4]
test al, al
je 0x4d70a2
mov eax, dword [esp + 0x1b0]
test eax, eax
je 0x4d6f48
test eax, 0x200
jne 0x4d6f48
lea eax, [0x65b040]
mov ecx, dword [esp + 0x1a8]
jmp 0x4d6f6e
mov ecx, dword [esp + 0x1a8]
mov dword [esp], ecx
mov ecx, dword [esp + 0x1ac]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048f510
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x134], ecx
mov dword [esp + 0x78], eax
mov dword [esp + 0x184], 0
mov dword [esp + 0x188], 0
mov dword [esp + 0x18c], 0
mov dword [esp + 0x190], 0
mov edx, dword [esp + 0x19c]
mov dword [esp], edx
mov edx, dword [esp + 0x1a0]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1a4]
mov dword [esp + 8], edx
call fcn.00409ce0
mov eax, dword [esp + 0xc]
lea ecx, [0x5d72e0]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x188], eax
mov eax, dword [esp + 0x78]
test eax, eax
je 0x4d6fed
mov eax, dword [eax + 4]
mov dword [esp + 0x18c], eax
mov eax, dword [esp + 0x134]
mov dword [esp + 0x190], eax
lea eax, [0x61bf1e]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x184]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c4e90
mov eax, dword [esp + 0x198]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x4d7085
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004d3a90
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x7c3fa0]
test eax, eax
je 0x4d7082
call fcn.00468410
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
mov dword [esp + 0x1b8], 0
mov dword [esp + 0x1bc], 0
add esp, 0x194
ret
cmp bl, 0x66
je 0x4d70be
cmp bl, 0x6e
jne 0x4d70b9
lea eax, [0x60a560]
mov ecx, 4
jmp 0x4d70d6
cmp bl, 0x74
jne 0x4d70cb
lea eax, [0x60a564]
mov ecx, 4
jmp 0x4d70d6
lea eax, [0x60aa0b]
mov ecx, 6
mov dword [esp + 0x84], ecx
mov dword [esp + 0x13c], eax
mov edx, dword [esp + 0x1b0]
test edx, edx
je 0x4d7106
test edx, 0x200
jne 0x4d7106
mov edx, dword [esp + 0x1a8]
lea ebx, [0x65b040]
jmp 0x4d7130
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
mov eax, dword [esp + 0x1ac]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.0048f510
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ebx, eax
mov dword [esp + 0x130], edx
mov dword [esp + 0x74], ebx
mov eax, dword [esp + 0x198]
mov ecx, dword [eax + 0xc]
mov dword [esp + 0xc8], ecx
lea ebp, [0x5f4ee0]
mov dword [esp], ebp
call fcn.0040c420
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x84]
mov dword [eax + 4], ecx
mov ecx, dword [0x7c3fa0]
test ecx, ecx
jne 0x4d717b
mov ecx, dword [esp + 0x13c]
jmp 0x4d7189
call fcn.00468400
mov ecx, dword [esp + 0x13c]
mov dword [edi], ecx
mov dword [eax], ecx
mov ecx, dword [esp + 0x74]
mov dword [eax + 8], ecx
mov ecx, dword [0x7c3fa0]
test ecx, ecx
jne 0x4d71a5
mov ecx, dword [esp + 0x130]
jmp 0x4d71b3
call fcn.00468400
mov ecx, dword [esp + 0x130]
mov dword [edi], ecx
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0xc8]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x4d7217
mov dword [esp], ecx
lea edx, [0x659928]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004d3a90
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x7c3fa0]
test eax, eax
je 0x4d7214
call fcn.00468410
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
mov dword [esp + 0x1b8], 0
mov dword [esp + 0x1bc], 0
add esp, 0x194
ret
mov dword [esp + 0x88], eax
mov dword [esp + 0x140], ecx
mov dword [esp], edx
mov eax, dword [esp + 0x1a0]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x1a4]
mov dword [esp + 8], ecx
call fcn.004d9cc0
movzx eax, byte [esp + 0x18]
test al, al
jne 0x4d73a6
movzx eax, byte [esp + 0x1b4]
test al, al
je 0x4d9501
mov eax, dword [esp + 0x1b0]
test eax, eax
je 0x4d729e
test eax, 0x200
jne 0x4d729e
lea eax, [0x65b040]
mov ecx, dword [esp + 0x1a8]
jmp 0x4d72c4
mov ecx, dword [esp + 0x1a8]
mov dword [esp], ecx
mov ecx, dword [esp + 0x1ac]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048f510
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x12c], ecx
mov dword [esp + 0x70], eax
mov dword [esp + 0x184], 0
mov dword [esp + 0x188], 0
mov dword [esp + 0x18c], 0
mov dword [esp + 0x190], 0
mov edx, dword [esp + 0x19c]
mov dword [esp], edx
mov edx, dword [esp + 0x1a0]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1a4]
mov dword [esp + 8], edx
call fcn.00409ce0
mov eax, dword [esp + 0xc]
lea ecx, [0x5d72e0]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x188], eax
mov eax, dword [esp + 0x70]
test eax, eax
je 0x4d7343
mov eax, dword [eax + 4]
mov dword [esp + 0x18c], eax
mov eax, dword [esp + 0x12c]
mov dword [esp + 0x190], eax
lea eax, [0x61bf1e]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x184]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c4e90
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1b8], eax
mov dword [esp + 0x1bc], ecx
add esp, 0x194
ret
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x88]
mov ecx, dword [ecx + 0x10]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x140]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x1b8], eax
mov dword [esp + 0x1bc], ecx
add esp, 0x194
ret
mov eax, dword [esp + 0x19c]
movzx ecx, byte [eax]
mov edx, dword [esp + 0x28]
mov dword [esp + 0xac], edx
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x160], ebx
mov ebp, dword [esp + 0x24]
mov dword [esp + 0x15c], ebp
cmp cl, 0x66
ja 0x4d7d85
cmp cl, 0x22
je 0x4d7438
cmp cl, 0x66
je 0x4d7f39
jmp 0x4d853d
mov dword [esp], eax
mov ecx, dword [esp + 0x1a0]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x1a4]
mov dword [esp + 8], edx
call fcn.004d9cc0
movzx eax, byte [esp + 0x18]
mov ecx, dword [esp + 0x14]
test al, al
je 0x4d7c4c
mov eax, dword [esp + 0xac]
mov edx, eax
and eax, 0x1f
nop
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x148], ebx
mov ebp, dword [esp + 0x10]
mov dword [esp + 0x90], ebp
nop
cmp eax, 0x14
je 0x4d7a61
cmp eax, 0x17
jne 0x4d7771
mov dword [esp + 0x94], ecx
test edx, 0x200
jne 0x4d74bb
lea eax, [0x65b040]
mov esi, dword [esp + 0x160]
jmp 0x4d74e3
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov ecx, dword [esp + 0x15c]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0048f510
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov esi, ebx
mov eax, dword [eax + 0x28]
mov dword [esp], esi
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
je 0x4d761b
mov eax, dword [esp + 0xac]
test eax, 0x200
jne 0x4d7523
lea eax, [0x65b040]
mov ebx, dword [esp + 0x160]
jmp 0x4d7549
mov ecx, dword [esp + 0x160]
mov dword [esp], ecx
mov ecx, dword [esp + 0x15c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048f510
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x10c], ebx
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0xc]
mov dword [esp + 0xc8], edx
lea ebp, [0x5f4ee0]
mov dword [esp], ebp
call fcn.0040c420
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x60aa11]
mov dword [eax], ecx
mov ecx, dword [esp + 0x50]
mov dword [eax + 8], ecx
mov ecx, dword [0x7c3fa0]
test ecx, ecx
jne 0x4d75a0
mov ecx, dword [esp + 0x10c]
jmp 0x4d75ae
call fcn.00468400
mov ecx, dword [esp + 0x10c]
mov dword [edi], ecx
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0xc8]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x4d9465
mov dword [esp], ecx
lea edx, [0x659928]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004d3a90
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x7c3fa0]
test eax, eax
je 0x4d7613
call fcn.00468410
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
jmp 0x4d9465
mov eax, dword [0x79d6a0]
cmp dword [eax + 0x140], 0xffffffff
jne 0x4d7646
mov eax, dword [esp + 0x90]
lea ecx, [eax + eax*2]
mov edx, ecx
shl ecx, 1
sar ecx, 0x1f
shr ecx, 0x1d
lea ecx, [ecx + edx*2]
sar ecx, 3
jmp 0x4d7653
mov eax, dword [esp + 0x90]
shr eax, 2
lea ecx, [eax + eax*2]
mov dword [esp + 0x80], ecx
lea eax, [0x5ddd80]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.0044d9f0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x158], eax
mov ecx, dword [0x79d6a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x80]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ecx
mov edx, dword [esp + 0x148]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x90]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x94]
mov dword [esp + 0x18], edx
call fcn.00493a20
mov eax, dword [esp + 0x20]
test eax, eax
je 0x4d7721
mov eax, dword [esp + 0x198]
mov ecx, dword [eax + 0x3c]
nop
test ecx, ecx
jne 0x4d9465
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004d3a90
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x7c3fa0]
test eax, eax
je 0x4d7719
call fcn.00468410
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
jmp 0x4d9465
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x80]
cmp edx, ecx
jb 0x4d94fc
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov eax, dword [esp + 0x15c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x158]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.0048e640
jmp 0x4d9465
cmp eax, 0x18
jne 0x4d794e
test edx, 0x200
jne 0x4d7791
lea eax, [0x65b040]
mov ecx, dword [esp + 0x160]
jmp 0x4d77ce
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov ecx, dword [esp + 0x15c]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0048f510
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov edx, dword [esp + 0xac]
mov ebp, dword [esp + 0x90]
mov ecx, ebx
mov ebx, dword [esp + 0x148]
cmp dword [0x79d978], eax
je 0x4d77dd
xor eax, eax
jmp 0x4d786b
mov edx, dword [0x79d97c]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004040d0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4d7815
mov edx, dword [esp + 0xac]
mov ebx, dword [esp + 0x148]
mov ebp, dword [esp + 0x90]
xor eax, eax
jmp 0x4d786b
lea eax, [esp + 0xcc]
mov dword [esp], eax
mov eax, dword [esp + 0x148]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x90]
mov dword [esp + 8], ecx
call fcn.004517c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004dd110
movzx eax, byte [esp + 8]
xor eax, 1
mov edx, dword [esp + 0xac]
mov ebx, dword [esp + 0x148]
mov ebp, dword [esp + 0x90]
test al, al
jne 0x4d78ad
mov dword [esp], 0
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
call fcn.004517c0
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov eax, dword [esp + 0x15c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.0048f080
jmp 0x4d9465
mov dword [esp + 0x17c], 0
mov dword [esp + 0x180], 0
mov eax, dword [esp + 0x19c]
mov dword [esp], eax
mov eax, dword [esp + 0x1a0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x1a4]
mov dword [esp + 8], eax
call fcn.00409ce0
mov eax, dword [esp + 0xc]
lea ecx, [0x5d72e0]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x180], eax
lea eax, [0x61bab7]
mov dword [esp], eax
mov dword [esp + 4], 0x40
lea eax, [esp + 0x17c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004c4e90
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1b8], eax
mov dword [esp + 0x1bc], ecx
add esp, 0x194
ret
test edx, edx
je 0x4d7969
test edx, 0x200
jne 0x4d7969
lea eax, [0x65b040]
mov ebx, dword [esp + 0x160]
jmp 0x4d798f
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov eax, dword [esp + 0x15c]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.0048f510
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x110], ebx
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0xc]
mov dword [esp + 0xc8], edx
lea ebp, [0x5f4ee0]
mov dword [esp], ebp
call fcn.0040c420
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x60aa11]
mov dword [eax], ecx
mov ecx, dword [esp + 0x54]
mov dword [eax + 8], ecx
mov ecx, dword [0x7c3fa0]
test ecx, ecx
jne 0x4d79e6
mov ecx, dword [esp + 0x110]
jmp 0x4d79f4
call fcn.00468400
mov ecx, dword [esp + 0x110]
mov dword [edi], ecx
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0xc8]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x4d9465
mov dword [esp], ecx
lea edx, [0x659928]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004d3a90
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x7c3fa0]
test eax, eax
je 0x4d7a59
call fcn.00468410
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
jmp 0x4d9465
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov ecx, dword [esp + 0x15c]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0048e140
mov eax, dword [esp + 0xc]
test eax, eax
je 0x4d7ba0
mov eax, dword [esp + 0xac]
test eax, 0x200
jne 0x4d7aa8
lea eax, [0x65b040]
mov ebx, dword [esp + 0x160]
jmp 0x4d7ace
mov ecx, dword [esp + 0x160]
mov dword [esp], ecx
mov ecx, dword [esp + 0x15c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048f510
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x108], ebx
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0xc]
mov dword [esp + 0xc8], edx
lea ebp, [0x5f4ee0]
mov dword [esp], ebp
call fcn.0040c420
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x60aa11]
mov dword [eax], ecx
mov ecx, dword [esp + 0x4c]
mov dword [eax + 8], ecx
mov ecx, dword [0x7c3fa0]
test ecx, ecx
jne 0x4d7b25
mov ecx, dword [esp + 0x108]
jmp 0x4d7b33
call fcn.00468400
mov ecx, dword [esp + 0x108]
mov dword [edi], ecx
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0xc8]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x4d9465
mov dword [esp], ecx
lea edx, [0x659928]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004d3a90
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x7c3fa0]
test eax, eax
je 0x4d7b98
call fcn.00468410
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
jmp 0x4d9465
mov dword [esp], 0
mov eax, dword [esp + 0x148]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 8], eax
call fcn.004517c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409c60
mov eax, dword [esp + 8]
lea ecx, [0x5dda40]
mov dword [esp + 0x16c], ecx
mov dword [esp + 0x170], eax
mov ecx, dword [esp + 0x16c]
test ecx, ecx
je 0x4d7c10
movzx edx, byte [ecx + 0xf]
nop
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4d7c16
or edx, 0x80
jmp 0x4d7c16
xor edx, edx
xor ecx, ecx
xor eax, eax
mov ebx, dword [esp + 0x160]
mov dword [esp], ebx
mov ebx, dword [esp + 0x15c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xac]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.0048e460
jmp 0x4d9465
movzx eax, byte [esp + 0x1b4]
test al, al
je 0x4d94e4
mov eax, dword [esp + 0xac]
test eax, eax
je 0x4d7c7d
test eax, 0x200
jne 0x4d7c7d
lea eax, [0x65b040]
mov ebx, dword [esp + 0x160]
jmp 0x4d7ca3
mov ecx, dword [esp + 0x160]
mov dword [esp], ecx
mov ecx, dword [esp + 0x15c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048f510
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x114], ebx
mov dword [esp + 0x58], eax
mov dword [esp + 0x184], 0
mov dword [esp + 0x188], 0
mov dword [esp + 0x18c], 0
mov dword [esp + 0x190], 0
mov ecx, dword [esp + 0x19c]
mov dword [esp], ecx
mov ecx, dword [esp + 0x1a0]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x1a4]
mov dword [esp + 8], ecx
call fcn.00409ce0
mov eax, dword [esp + 0xc]
lea ecx, [0x5d72e0]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x188], eax
mov eax, dword [esp + 0x58]
test eax, eax
je 0x4d7d22
mov eax, dword [eax + 4]
mov dword [esp + 0x18c], eax
mov eax, dword [esp + 0x114]
mov dword [esp + 0x190], eax
lea eax, [0x61bf1e]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x184]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c4e90
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1b8], eax
mov dword [esp + 0x1bc], ecx
add esp, 0x194
ret
cmp cl, 0x6e
jne 0x4d7f30
movzx ecx, byte [esp + 0x1b4]
test cl, cl
je 0x4d7f08
mov ecx, dword [esp + 0x1a0]
cmp ecx, 4
jne 0x4d7db6
cmp dword [eax], 0x6c6c756e
je 0x4d7f08
test edx, edx
je 0x4d7dca
test edx, 0x200
jne 0x4d7dca
lea edx, [0x65b040]
jmp 0x4d7df2
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
call fcn.0048f510
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov ecx, dword [esp + 0x1a0]
mov edx, eax
mov eax, dword [esp + 0x19c]
mov dword [esp + 0x128], ebx
mov dword [esp + 0x6c], edx
mov dword [esp + 0x184], 0
mov dword [esp + 0x188], 0
mov dword [esp + 0x18c], 0
mov dword [esp + 0x190], 0
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x1a4]
mov dword [esp + 8], eax
call fcn.00409ce0
mov eax, dword [esp + 0xc]
lea ecx, [0x5d72e0]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x188], eax
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x4d7e65
mov edx, dword [eax + 4]
jmp 0x4d7e67
mov edx, eax
mov dword [esp + 0x18c], edx
mov eax, dword [esp + 0x128]
mov dword [esp + 0x190], eax
lea eax, [0x61bf1e]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x184]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c4e90
mov eax, dword [esp + 0x198]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x4d9465
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004d3a90
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x7c3fa0]
test eax, eax
je 0x4d7f00
call fcn.00468410
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
jmp 0x4d9465
mov eax, edx
and edx, 0x1f
lea ecx, [edx - 0x14]
nop
nop
cmp ecx, 3
ja 0x4d9465
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.0048d340
jmp 0x4d9465
cmp cl, 0x74
jne 0x4d853d
movzx esi, byte [esp + 0x1b4]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4d80cc
mov edi, dword [esp + 0x1a0]
cmp edi, 4
jne 0x4d7f63
cmp dword [eax], 0x65757274
je 0x4d80d3
cmp edi, 5
jne 0x4d7f7a
cmp dword [eax], 0x736c6166
jne 0x4d7f7a
cmp byte [eax + 4], 0x65
je 0x4d80d3
test edx, edx
je 0x4d7f8e
test edx, 0x200
jne 0x4d7f8e
lea ecx, [0x65b040]
jmp 0x4d7fb6
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
call fcn.0048f510
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov edi, dword [esp + 0x1a0]
mov ecx, eax
mov eax, dword [esp + 0x19c]
mov dword [esp + 0x124], ebx
mov dword [esp + 0x68], ecx
mov dword [esp + 0x184], 0
mov dword [esp + 0x188], 0
mov dword [esp + 0x18c], 0
mov dword [esp + 0x190], 0
mov dword [esp], eax
mov dword [esp + 4], edi
mov eax, dword [esp + 0x1a4]
mov dword [esp + 8], eax
call fcn.00409ce0
mov eax, dword [esp + 0xc]
lea ecx, [0x5d72e0]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x188], eax
mov eax, dword [esp + 0x68]
test eax, eax
je 0x4d8029
mov ecx, dword [eax + 4]
jmp 0x4d802b
mov ecx, eax
mov dword [esp + 0x18c], ecx
mov eax, dword [esp + 0x124]
mov dword [esp + 0x190], eax
lea eax, [0x61bf1e]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x184]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c4e90
mov eax, dword [esp + 0x198]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x4d9465
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004d3a90
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x7c3fa0]
test eax, eax
je 0x4d80c4
call fcn.00468410
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
jmp 0x4d9465
mov edi, dword [esp + 0x1a0]
and edx, 0x1f
nop
nop
cmp cl, 0x74
sete cl
cmp edx, 1
je 0x4d851d
cmp edx, 0x14
je 0x4d8357
xchg esi, eax
test al, al
xchg esi, eax
je 0x4d8253
mov ecx, dword [esp + 0xac]
test ecx, ecx
je 0x4d8115
test ecx, 0x200
jne 0x4d8115
lea ecx, [0x65b040]
jmp 0x4d813d
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
call fcn.0048f510
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov edi, dword [esp + 0x1a0]
mov ecx, eax
mov eax, dword [esp + 0x19c]
mov dword [esp + 0x64], ecx
mov dword [esp + 0x120], ebx
mov dword [esp + 0x184], 0
mov dword [esp + 0x188], 0
mov dword [esp + 0x18c], 0
mov dword [esp + 0x190], 0
mov dword [esp], eax
mov dword [esp + 4], edi
mov eax, dword [esp + 0x1a4]
mov dword [esp + 8], eax
call fcn.00409ce0
mov eax, dword [esp + 0xc]
lea ecx, [0x5d72e0]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x188], eax
mov eax, dword [esp + 0x64]
test eax, eax
je 0x4d81b0
mov ecx, dword [eax + 4]
jmp 0x4d81b2
mov ecx, eax
mov dword [esp + 0x18c], ecx
mov eax, dword [esp + 0x120]
mov dword [esp + 0x190], eax
lea eax, [0x61bf1e]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x184]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c4e90
mov eax, dword [esp + 0x198]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x4d9465
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004d3a90
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x7c3fa0]
test eax, eax
je 0x4d824b
call fcn.00468410
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
jmp 0x4d9465
mov eax, dword [esp + 0xac]
test eax, eax
je 0x4d826d
test eax, 0x200
jne 0x4d826d
lea eax, [0x65b040]
jmp 0x4d8285
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.0048f510
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x11c], ebx
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0xc]
mov dword [esp + 0xc8], edx
lea ebp, [0x5f4ee0]
mov dword [esp], ebp
call fcn.0040c420
mov eax, dword [esp + 4]
mov dword [eax + 4], 4
lea ecx, [0x60a564]
mov dword [eax], ecx
mov ecx, dword [esp + 0x60]
mov dword [eax + 8], ecx
mov ecx, dword [0x7c3fa0]
test ecx, ecx
jne 0x4d82dc
mov ecx, dword [esp + 0x11c]
jmp 0x4d82ea
call fcn.00468400
mov ecx, dword [esp + 0x11c]
mov dword [edi], ecx
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0xc8]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x4d9465
mov dword [esp], ecx
lea edx, [0x659928]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004d3a90
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x7c3fa0]
test eax, eax
je 0x4d834f
call fcn.00468410
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
jmp 0x4d9465
mov byte [esp + 0x2f], cl
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.0048e140
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x4d8408
movzx eax, byte [esp + 0x2f]
movzx eax, al
lea ecx, [0x772a00]
lea eax, [ecx + eax*8]
lea ecx, [0x5dda80]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x178], eax
mov eax, dword [esp + 0x174]
test eax, eax
je 0x4d83cc
movzx ecx, byte [eax + 0xf]
nop
mov edx, ecx
and ecx, 0x1f
test dl, 0x20
jne 0x4d83c3
or ecx, 0x80
mov edx, dword [esp + 0x178]
jmp 0x4d83d2
xor ecx, ecx
xor eax, eax
xor edx, edx
mov ebx, dword [esp + 0x160]
mov dword [esp], ebx
mov ebx, dword [esp + 0x15c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xac]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
call fcn.0048e460
jmp 0x4d9465
mov eax, dword [esp + 0xac]
test eax, 0x200
jne 0x4d8425
lea eax, [0x65b040]
mov ebx, dword [esp + 0x160]
jmp 0x4d844b
mov ecx, dword [esp + 0x160]
mov dword [esp], ecx
mov ecx, dword [esp + 0x15c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048f510
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x118], ebx
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0xc]
mov dword [esp + 0xc8], edx
lea ebp, [0x5f4ee0]
mov dword [esp], ebp
call fcn.0040c420
mov eax, dword [esp + 4]
mov dword [eax + 4], 4
lea ecx, [0x60a564]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
mov ecx, dword [0x7c3fa0]
test ecx, ecx
jne 0x4d84a2
mov ecx, dword [esp + 0x118]
jmp 0x4d84b0
call fcn.00468400
mov ecx, dword [esp + 0x118]
mov dword [edi], ecx
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0xc8]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x4d9465
mov dword [esp], ecx
lea edx, [0x659928]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004d3a90
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x7c3fa0]
test eax, eax
je 0x4d8515
call fcn.00468410
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
jmp 0x4d9465
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
mov byte [esp + 0xc], cl
call fcn.0048e580
jmp 0x4d9465
cmp cl, 0x2d
je 0x4d8676
add ecx, 0xffffffd0
cmp cl, 9
jbe 0x4d8676
movzx ecx, byte [esp + 0x1b4]
test cl, cl
je 0x4d94cc
test edx, edx
je 0x4d8576
test edx, 0x200
jne 0x4d8576
lea ecx, [0x65b040]
jmp 0x4d8597
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
call fcn.0048f510
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov ecx, eax
mov eax, dword [esp + 0x19c]
mov dword [esp + 0x104], ebx
mov dword [esp + 0x48], ecx
mov dword [esp + 0x184], 0
mov dword [esp + 0x188], 0
mov dword [esp + 0x18c], 0
mov dword [esp + 0x190], 0
mov dword [esp], eax
mov eax, dword [esp + 0x1a0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x1a4]
mov dword [esp + 8], eax
call fcn.00409ce0
mov eax, dword [esp + 0xc]
lea ecx, [0x5d72e0]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x188], eax
mov eax, dword [esp + 0x48]
test eax, eax
je 0x4d8611
mov ecx, dword [eax + 4]
jmp 0x4d8613
mov ecx, eax
mov dword [esp + 0x18c], ecx
mov eax, dword [esp + 0x104]
mov dword [esp + 0x190], eax
lea eax, [0x61bf1e]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x184]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c4e90
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1b8], eax
mov dword [esp + 0x1bc], ecx
add esp, 0x194
ret
mov dword [esp], 0
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x1a0]
mov dword [esp + 8], ecx
call fcn.004517c0
mov eax, dword [esp + 0xac]
mov ecx, eax
and eax, 0x1f
mov edx, dword [esp + 0xc]
mov dword [esp + 0x144], edx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x8c], ebx
cmp eax, 0xc
ja 0x4d8c59
lea ebp, [eax - 2]
cmp ebp, 4
jbe 0x4d897e
cmp eax, 7
jb 0x4d8ede
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], 0xa
mov dword [esp + 0xc], 0x40
call fcn.00476380
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x4d87db
mov eax, dword [esp + 0x14]
mov dword [esp + 0xa8], eax
mov edx, dword [esp + 0x10]
mov dword [esp + 0x9c], edx
mov ebx, dword [esp + 0x160]
mov ebp, dword [ebx]
shl ebp, 3
lea ecx, [ebp - 0x40]
neg ecx
mov dword [esp + 0xc4], ecx
mov ebp, edx
shl edx, cl
shl eax, cl
lea edi, [ecx - 0x20]
mov dword [esp + 0xc0], edi
mov ecx, edi
shl ebp, cl
neg ecx
mov dword [esp + 0xbc], ecx
mov ebx, dword [esp + 0x9c]
shr ebx, cl
cmp edi, 0x20
sbb esi, esi
mov dword [esp + 0xb8], esi
and ebp, esi
mov esi, dword [esp + 0xc4]
cmp esi, 0x20
sbb edi, edi
mov dword [esp + 0xb4], edi
and eax, edi
and edx, edi
mov ecx, esi
shr edx, cl
and edx, edi
mov edi, dword [esp + 0xbc]
cmp edi, 0x20
sbb ecx, ecx
and ebx, ecx
or ebx, eax
or ebp, ebx
mov eax, ecx
mov ecx, edi
mov ebx, ebp
shl ebp, cl
and ebp, eax
or edx, ebp
mov ecx, dword [esp + 0xc0]
mov eax, ebx
shr ebx, cl
mov ebp, dword [esp + 0xb8]
and ebx, ebp
or edx, ebx
mov ecx, esi
shr eax, cl
mov ebx, dword [esp + 0xb4]
and eax, ebx
mov ebx, dword [esp + 0xa8]
cmp ebx, eax
setne al
mov ebp, dword [esp + 0x9c]
cmp ebp, edx
setne dl
or eax, edx
test al, al
je 0x4d894c
mov eax, dword [esp + 0xac]
test eax, 0x200
jne 0x4d87f8
mov ebx, dword [esp + 0x160]
lea eax, [0x65b040]
jmp 0x4d881e
mov ecx, dword [esp + 0x160]
mov dword [esp], ecx
mov ecx, dword [esp + 0x15c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048f510
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0xf0], ebx
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0xc]
mov dword [esp + 0xc8], edx
lea ebp, [0x5f4ee0]
mov dword [esp], ebp
call fcn.0040c420
mov eax, dword [esp + 4]
mov dword [esp + 0x154], eax
mov dword [esp], 0
lea ecx, [0x60acfc]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov ecx, dword [esp + 0x144]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x10], ecx
call fcn.00451520
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x154]
mov dword [edx + 4], eax
mov eax, dword [0x7c3fa0]
test eax, eax
je 0x4d88af
call fcn.00468410
mov dword [edi], ecx
mov eax, dword [edx]
mov dword [edi + 4], eax
mov dword [edx], ecx
mov eax, dword [esp + 0x34]
mov dword [edx + 8], eax
mov eax, dword [0x7c3fa0]
test eax, eax
jne 0x4d88cb
mov eax, dword [esp + 0xf0]
jmp 0x4d88df
call fcn.00468410
mov eax, dword [esp + 0xf0]
mov dword [edi], eax
mov ecx, dword [edx + 0xc]
mov dword [edi + 4], ecx
mov dword [edx + 0xc], eax
mov eax, dword [esp + 0xc8]
dec eax
mov dword [edx + 0x10], eax
sar eax, 0x1f
mov dword [edx + 0x14], eax
mov eax, dword [esp + 0x198]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x4d9465
mov dword [esp], eax
lea ecx, [0x659928]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004d3a90
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x7c3fa0]
test eax, eax
je 0x4d8944
call fcn.00468410
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
jmp 0x4d9465
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov eax, dword [esp + 0x15c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], ebp
call fcn.0048ef80
jmp 0x4d9465
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], 0xa
mov dword [esp + 0xc], 0x40
call fcn.00476da0
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x4d8ab2
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa0], eax
mov edx, dword [esp + 0x14]
mov dword [esp + 0xa4], edx
mov ebx, dword [esp + 0x160]
mov ebp, dword [ebx]
shl ebp, 3
lea ecx, [ebp - 0x40]
neg ecx
mov dword [esp + 0xc4], ecx
mov ebp, eax
shl eax, cl
shl edx, cl
lea edi, [ecx - 0x20]
mov ecx, edi
shl ebp, cl
neg ecx
mov dword [esp + 0xc0], ecx
mov ebx, dword [esp + 0xa0]
shr ebx, cl
mov dword [esp + 0xbc], ebx
mov esi, dword [esp + 0xc4]
shr esi, 5
cmp edi, 0x20
sbb ebx, ebx
and ebp, ebx
mov dword [esp + 0xb8], ebp
not ebx
or ebx, edi
mov dword [esp + 0xb4], ebx
mov edi, dword [esp + 0xc4]
cmp edi, 0x20
sbb ebx, ebx
sbb ebp, ebp
and eax, ebx
and edx, ebx
mov ecx, edi
shr eax, cl
and eax, ebx
xchg ebp, ebx
not ebx
xchg ebp, ebx
or ecx, ebp
cmp esi, 1
sbb ebx, ebx
xor ebx, 0xffffffff
mov ebp, dword [esp + 0xc0]
cmp ebp, 0x20
sbb esi, esi
mov edi, dword [esp + 0xbc]
and edi, esi
or edx, edi
mov edi, dword [esp + 0xb8]
or edi, edx
mov dword [esp + 0xc0], edi
mov edx, ecx
mov ecx, dword [esp + 0xb4]
sar edi, cl
and ebx, edi
mov ecx, ebp
mov ebp, dword [esp + 0xc0]
mov edi, ebp
shl ebp, cl
and ebp, esi
or eax, ebp
or ebx, eax
mov ecx, edx
sar edi, cl
mov eax, dword [esp + 0xa4]
cmp eax, edi
setne al
mov edx, dword [esp + 0xa0]
cmp edx, ebx
setne bl
or ebx, eax
test bl, bl
je 0x4d8c23
mov eax, dword [esp + 0xac]
test eax, 0x200
jne 0x4d8acf
mov ebx, dword [esp + 0x160]
lea eax, [0x65b040]
jmp 0x4d8af5
mov ecx, dword [esp + 0x160]
mov dword [esp], ecx
mov ecx, dword [esp + 0x15c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048f510
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0xf4], ebx
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0xc]
mov dword [esp + 0xc8], edx
lea ebp, [0x5f4ee0]
mov dword [esp], ebp
call fcn.0040c420
mov eax, dword [esp + 4]
mov dword [esp + 0x154], eax
mov dword [esp], 0
lea ecx, [0x60acfc]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov ecx, dword [esp + 0x144]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x10], ecx
call fcn.00451520
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x154]
mov dword [edx + 4], eax
mov eax, dword [0x7c3fa0]
test eax, eax
je 0x4d8b86
call fcn.00468410
mov dword [edi], ecx
mov eax, dword [edx]
mov dword [edi + 4], eax
mov dword [edx], ecx
mov eax, dword [esp + 0x38]
mov dword [edx + 8], eax
mov eax, dword [0x7c3fa0]
test eax, eax
jne 0x4d8ba2
mov eax, dword [esp + 0xf4]
jmp 0x4d8bb6
call fcn.00468410
mov eax, dword [esp + 0xf4]
mov dword [edi], eax
mov ecx, dword [edx + 0xc]
mov dword [edi + 4], ecx
mov dword [edx + 0xc], eax
mov eax, dword [esp + 0xc8]
dec eax
mov dword [edx + 0x10], eax
sar eax, 0x1f
mov dword [edx + 0x14], eax
mov eax, dword [esp + 0x198]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x4d9465
mov dword [esp], eax
lea ecx, [0x659928]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004d3a90
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x7c3fa0]
test eax, eax
je 0x4d8c1b
call fcn.00468410
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
jmp 0x4d9465
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x160]
mov dword [esp], ecx
mov ecx, dword [esp + 0x15c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xac]
mov dword [esp + 8], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
call fcn.0048e9a0
jmp 0x4d9465
cmp eax, 0xe
ja 0x4d8ed5
mov dword [esp + 0xb0], eax
test ecx, 0x200
jne 0x4d8c80
lea ebp, [0x65b040]
mov esi, dword [esp + 0x160]
jmp 0x4d8caa
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov edx, dword [esp + 0x15c]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.0048f510
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov ebp, eax
mov esi, ebx
mov eax, dword [ebp + 0x18]
mov dword [esp], esi
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x144]
mov dword [esp], ecx
mov edx, dword [esp + 0x8c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00475be0
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4d8cea
mov eax, dword [esp + 0xac]
test eax, 0x200
jmp 0x4d8d46
mov eax, dword [esp + 0xb0]
cmp eax, 0xd
jne 0x4d8eab
movsd xmm0, qword [esp + 0xc]
nop
xorps xmm1, xmm1
ucomisd xmm1, xmm0
jbe 0x4d8d16
movsd xmm1, qword [0x6590c4]
pxor xmm0, xmm1
movsd xmm1, qword [0x6590b4]
ucomisd xmm0, xmm1
jbe 0x4d8eab
movsd xmm1, qword [0x6590bc]
ucomisd xmm1, xmm0
jb 0x4d8eab
mov eax, dword [esp + 0xac]
test eax, 0x200
jne 0x4d8d57
mov ebx, dword [esp + 0x160]
lea eax, [0x65b040]
jmp 0x4d8d7d
mov ecx, dword [esp + 0x160]
mov dword [esp], ecx
mov ecx, dword [esp + 0x15c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048f510
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x30], eax
mov dword [esp + 0xec], ebx
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0xc]
mov dword [esp + 0xc8], edx
lea ebp, [0x5f4ee0]
mov dword [esp], ebp
call fcn.0040c420
mov eax, dword [esp + 4]
mov dword [esp + 0x154], eax
mov dword [esp], 0
lea ecx, [0x60acfc]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov ecx, dword [esp + 0x144]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x10], ecx
call fcn.00451520
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x154]
mov dword [edx + 4], eax
mov eax, dword [0x7c3fa0]
test eax, eax
je 0x4d8e0e
call fcn.00468410
mov dword [edi], ecx
mov eax, dword [edx]
mov dword [edi + 4], eax
mov dword [edx], ecx
mov eax, dword [esp + 0x30]
mov dword [edx + 8], eax
mov eax, dword [0x7c3fa0]
test eax, eax
jne 0x4d8e2a
mov eax, dword [esp + 0xec]
jmp 0x4d8e3e
call fcn.00468410
mov eax, dword [esp + 0xec]
mov dword [edi], eax
mov ecx, dword [edx + 0xc]
mov dword [edi + 4], ecx
mov dword [edx + 0xc], eax
mov eax, dword [esp + 0xc8]
dec eax
mov dword [edx + 0x10], eax
sar eax, 0x1f
mov dword [edx + 0x14], eax
mov eax, dword [esp + 0x198]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x4d9465
mov dword [esp], eax
lea ecx, [0x659928]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004d3a90
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x7c3fa0]
test eax, eax
je 0x4d8ea3
call fcn.00468410
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
jmp 0x4d9465
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov eax, dword [esp + 0x15c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.0048e8e0
jmp 0x4d9465
cmp eax, 0x14
je 0x4d91f4
cmp eax, 0x18
jne 0x4d8f79
test ecx, 0x200
jne 0x4d8efe
lea eax, [0x65b040]
mov ebp, dword [esp + 0x160]
jmp 0x4d8f3b
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov edx, dword [esp + 0x15c]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.0048f510
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0x144]
mov ebp, ebx
mov ebx, dword [esp + 0x8c]
cmp dword [0x79d978], eax
je 0x4d8f47
xor eax, eax
jmp 0x4d8f7b
mov ecx, dword [0x79d97c]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
call fcn.004040d0
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0x144]
mov ebx, dword [esp + 0x8c]
jmp 0x4d8f7b
xor eax, eax
test al, al
jne 0x4d91c9
movzx eax, byte [esp + 0x1b4]
test al, al
je 0x4d90b6
test ecx, ecx
je 0x4d8fae
test ecx, 0x200
jne 0x4d8fae
lea eax, [0x65b040]
mov ebx, dword [esp + 0x160]
jmp 0x4d8fd4
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov eax, dword [esp + 0x15c]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0048f510
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x100], ebx
mov dword [esp + 0x44], eax
mov dword [esp + 0x184], 0
mov dword [esp + 0x188], 0
mov dword [esp + 0x18c], 0
mov dword [esp + 0x190], 0
mov ecx, dword [esp + 0x19c]
mov dword [esp], ecx
mov ecx, dword [esp + 0x1a0]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x1a4]
mov dword [esp + 8], ecx
call fcn.00409ce0
mov eax, dword [esp + 0xc]
lea ecx, [0x5d72e0]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x188], eax
mov eax, dword [esp + 0x44]
test eax, eax
je 0x4d9053
mov eax, dword [eax + 4]
mov dword [esp + 0x18c], eax
mov eax, dword [esp + 0x100]
mov dword [esp + 0x190], eax
lea eax, [0x61bf1e]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x184]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c4e90
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1b8], eax
mov dword [esp + 0x1bc], ecx
add esp, 0x194
ret
test ecx, ecx
je 0x4d90d1
test ecx, 0x200
jne 0x4d90d1
lea eax, [0x65b040]
mov ebx, dword [esp + 0x160]
jmp 0x4d90f7
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov eax, dword [esp + 0x15c]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0048f510
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0xfc], ebx
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0xc]
mov dword [esp + 0xc8], edx
lea ebp, [0x5f4ee0]
mov dword [esp], ebp
call fcn.0040c420
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x60aa0b]
mov dword [eax], ecx
mov ecx, dword [esp + 0x40]
mov dword [eax + 8], ecx
mov ecx, dword [0x7c3fa0]
test ecx, ecx
jne 0x4d914e
mov ecx, dword [esp + 0xfc]
jmp 0x4d915c
call fcn.00468400
mov ecx, dword [esp + 0xfc]
mov dword [edi], ecx
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0xc8]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x4d9465
mov dword [esp], ecx
lea edx, [0x659928]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004d3a90
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x7c3fa0]
test eax, eax
je 0x4d91c1
call fcn.00468410
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
jmp 0x4d9465
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov eax, dword [esp + 0x15c]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.0048f080
jmp 0x4d9465
mov eax, dword [esp + 0x198]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.004d6b20
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
test eax, eax
je 0x4d927b
mov eax, dword [esp + 0x198]
mov ecx, dword [eax + 0x3c]
nop
test ecx, ecx
jne 0x4d9465
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004d3a90
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x7c3fa0]
test eax, eax
je 0x4d9273
call fcn.00468410
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
jmp 0x4d9465
mov dword [esp + 0x98], ecx
mov dword [esp + 0x150], edx
mov dword [esp + 0x14c], ebx
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov ecx, dword [esp + 0x15c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xac]
mov dword [esp + 8], edx
call fcn.0048e140
mov eax, dword [esp + 0xc]
test eax, eax
je 0x4d93d6
mov eax, dword [esp + 0xac]
test eax, 0x200
jne 0x4d92de
lea eax, [0x65b040]
mov ebx, dword [esp + 0x160]
jmp 0x4d9304
mov ecx, dword [esp + 0x160]
mov dword [esp], ecx
mov ecx, dword [esp + 0x15c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048f510
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x3c], eax
mov dword [esp + 0xf8], ebx
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0xc]
mov dword [esp + 0xc8], edx
lea ebp, [0x5f4ee0]
mov dword [esp], ebp
call fcn.0040c420
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x60aa0b]
mov dword [eax], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 8], ecx
mov ecx, dword [0x7c3fa0]
test ecx, ecx
jne 0x4d935b
mov ecx, dword [esp + 0xf8]
jmp 0x4d9369
call fcn.00468400
mov ecx, dword [esp + 0xf8]
mov dword [edi], ecx
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0xc8]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x198]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x4d9465
mov dword [esp], ecx
lea edx, [0x659928]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004d3a90
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x198]
mov dword [edx + 0x3c], eax
mov eax, dword [0x7c3fa0]
test eax, eax
je 0x4d93ce
call fcn.00468410
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
jmp 0x4d9465
mov eax, dword [esp + 0x98]
test eax, eax
je 0x4d942e
mov eax, dword [esp + 0x150]
mov dword [esp + 0x164], eax
mov eax, dword [esp + 0x14c]
mov dword [esp + 0x168], eax
mov eax, dword [esp + 0x164]
test eax, eax
je 0x4d9426
movzx ecx, byte [eax + 0xf]
nop
mov edx, ecx
and ecx, 0x1f
test dl, 0x20
jne 0x4d941d
or ecx, 0x80
mov edx, dword [esp + 0x168]
jmp 0x4d9434
xor ecx, ecx
xor eax, eax
xor edx, edx
jmp 0x4d9434
xor ecx, ecx
xor eax, eax
xor edx, edx
mov ebx, dword [esp + 0x160]
mov dword [esp], ebx
mov ebx, dword [esp + 0x15c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xac]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
call fcn.0048e460
mov dword [esp + 0x1b8], 0
mov dword [esp + 0x1bc], 0
add esp, 0x194
ret
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp], ecx
mov ecx, dword [esp + 0x19c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x1a0]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x1a4]
mov dword [esp + 0xc], ecx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x1b8], eax
mov dword [esp + 0x1bc], ecx
add esp, 0x194
ret
lea eax, [0x5dda40]
mov dword [esp], eax
lea eax, [0x6590d4]
mov dword [esp + 4], eax
call fcn.004382f0
lea eax, [0x5dda40]
mov dword [esp], eax
lea eax, [0x6590d4]
mov dword [esp + 4], eax
call fcn.004382f0
call fcn.004684a0
lea eax, [0x5dda40]
mov dword [esp], eax
lea eax, [0x6590d4]
mov dword [esp + 4], eax
call fcn.004382f0
nop
call fcn.00467000
jmp fcn.004d6d00