Function at 0x495880
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x496701
sub esp, 0x74
mov eax, dword [esp + 0x80]
test eax, eax
je 0x4958b7
test eax, 0x200
jne 0x4958b7
lea ecx, [0x728fe4]
mov edx, dword [esp + 0x78]
jmp 0x4958e2
mov ecx, dword [esp + 0x78]
mov dword [esp], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x58], edx
mov dword [esp + 0x30], ecx
mov ebx, dword [esp + 0x8c]
test ebx, ebx
je 0x49590c
test ebx, 0x200
jne 0x49590c
lea ebp, [0x728fe4]
mov esi, dword [esp + 0x84]
jmp 0x49594c
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov ecx, dword [esp + 0x88]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x58]
mov ebx, dword [esp + 0x8c]
mov ebp, eax
mov esi, ecx
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x30]
cmp ecx, ebp
jne 0x4963a2
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
call fcn.004038b0
movzx eax, byte [esp + 0xc]
test al, al
je 0x4963a2
nop
mov eax, dword [esp + 0x80]
mov ecx, eax
and eax, 0x1f
cmp eax, 0x11
ja 0x495e63
cmp eax, 0xc
ja 0x495caf
cmp eax, 1
jne 0x495a12
nop
nop
mov eax, dword [esp + 0x7c]
movzx eax, byte [eax]
mov ecx, dword [esp + 0x8c]
mov edx, ecx
and ecx, 0x1f
cmp ecx, 1
je 0x4959d6
mov byte [esp + 0x23], al
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.004894c0
movzx eax, byte [esp + 0x23]
mov ecx, dword [esp + 0x88]
cmp byte [ecx], al
je 0x495a03
test al, al
je 0x4959f4
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
lea ecx, [eax - 2]
cmp ecx, 4
ja 0x495b64
cmp eax, 3
ja 0x495a43
cmp eax, 2
jne 0x495a35
mov eax, dword [esp + 0x7c]
mov eax, dword [eax]
mov ecx, eax
sar eax, 0x1f
jmp 0x495a77
mov ecx, dword [esp + 0x7c]
movsx eax, byte [ecx]
mov ecx, eax
sar eax, 0x1f
jmp 0x495a77
cmp eax, 4
jne 0x495a56
mov ecx, dword [esp + 0x7c]
movsx eax, word [ecx]
mov ecx, eax
sar eax, 0x1f
jmp 0x495a77
cmp eax, 5
jne 0x495a68
mov ecx, dword [esp + 0x7c]
mov eax, dword [ecx]
mov ecx, eax
sar eax, 0x1f
jmp 0x495a77
mov ecx, dword [esp + 0x7c]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov edx, eax
mov eax, ecx
mov ecx, edx
nop
mov edx, dword [esp + 0x8c]
and edx, 0x1f
mov dword [esp + 0x44], edx
cmp edx, 3
ja 0x495aba
cmp edx, 2
jne 0x495aa0
mov edx, dword [esp + 0x88]
mov edx, dword [edx]
mov ebx, edx
sar edx, 0x1f
jmp 0x495b00
cmp edx, 3
jne 0x4966c6
mov ebx, dword [esp + 0x88]
movsx edx, byte [ebx]
mov ebx, edx
sar edx, 0x1f
jmp 0x495b00
cmp edx, 4
jne 0x495ad0
mov ebx, dword [esp + 0x88]
movsx edx, word [ebx]
mov ebx, edx
sar edx, 0x1f
jmp 0x495b00
cmp edx, 5
jne 0x495ae5
mov ebx, dword [esp + 0x88]
mov edx, dword [ebx]
mov ebx, edx
sar edx, 0x1f
jmp 0x495b00
cmp edx, 6
jne 0x4966c6
mov ebx, dword [esp + 0x88]
mov edx, dword [ebx]
mov ebx, dword [ebx + 4]
mov ebp, edx
mov edx, ebx
mov ebx, ebp
cmp eax, edx
xchg ebp, ebx
sete bl
xchg ebp, ebx
cmp ecx, ebx
xchg esi, ebx
setb bl
xchg esi, ebx
cmp eax, edx
xchg edi, ebx
setl bl
xchg edi, ebx
and esi, ebp
or edi, esi
xchg edi, eax
test al, al
xchg edi, eax
jne 0x495b55
cmp ecx, ebx
seta cl
cmp eax, edx
setg al
and ecx, ebp
or eax, ecx
test al, al
je 0x495b46
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
cmp eax, 7
jb 0x4963b1
cmp eax, 9
ja 0x495b9c
cmp eax, 7
jne 0x495b81
mov eax, dword [esp + 0x7c]
mov eax, dword [eax]
xor ecx, ecx
jmp 0x495bc3
cmp eax, 8
jne 0x495b91
mov ecx, dword [esp + 0x7c]
movzx eax, byte [ecx]
xor ecx, ecx
jmp 0x495bc3
mov ecx, dword [esp + 0x7c]
movzx eax, word [ecx]
xor ecx, ecx
jmp 0x495bc3
cmp eax, 0xa
jne 0x495bab
mov ecx, dword [esp + 0x7c]
mov eax, dword [ecx]
xor ecx, ecx
jmp 0x495bc3
cmp eax, 0xb
jne 0x495bbb
mov ecx, dword [esp + 0x7c]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
jmp 0x495bc3
mov edx, dword [esp + 0x7c]
mov eax, dword [edx]
xor ecx, ecx
nop
mov edx, dword [esp + 0x8c]
and edx, 0x1f
mov dword [esp + 0x44], edx
cmp edx, 9
ja 0x495c13
cmp edx, 7
jne 0x495be9
mov edx, dword [esp + 0x88]
mov edx, dword [edx]
xor ebx, ebx
jmp 0x495c4d
cmp edx, 8
jne 0x495bfc
mov ebx, dword [esp + 0x88]
movzx edx, byte [ebx]
xor ebx, ebx
jmp 0x495c4d
cmp edx, 9
jne 0x49668c
mov ebx, dword [esp + 0x88]
movzx edx, word [ebx]
xor ebx, ebx
jmp 0x495c4d
cmp edx, 0xa
jne 0x495c25
mov ebx, dword [esp + 0x88]
mov edx, dword [ebx]
xor ebx, ebx
jmp 0x495c4d
cmp edx, 0xb
jne 0x495c38
mov ebx, dword [esp + 0x88]
mov edx, dword [ebx]
mov ebx, dword [ebx + 4]
jmp 0x495c4d
cmp edx, 0xc
jne 0x49668c
mov ebp, dword [esp + 0x88]
mov edx, dword [ebp]
xor ebx, ebx
cmp ecx, ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg esi, ebx
setb bl
xchg esi, ebx
cmp eax, edx
xchg edi, ebx
setb bl
xchg edi, ebx
and edi, ebp
or esi, edi
xchg esi, eax
test al, al
xchg esi, eax
jne 0x495ca0
cmp ecx, ebx
seta cl
cmp eax, edx
seta al
and eax, ebp
or ecx, eax
test cl, cl
je 0x495c91
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
cmp eax, 0xe
ja 0x495d4d
cmp eax, 0xd
jne 0x495ccb
mov eax, dword [esp + 0x7c]
movss xmm0, dword [eax]
cvtss2sd xmm0, xmm0
jmp 0x495cd3
mov eax, dword [esp + 0x7c]
movsd xmm0, qword [eax]
nop
mov eax, dword [esp + 0x8c]
and eax, 0x1f
cmp eax, 0xd
jne 0x495cf4
mov eax, dword [esp + 0x88]
movss xmm1, dword [eax]
cvtss2sd xmm1, xmm1
jmp 0x495d08
cmp eax, 0xe
jne 0x49664e
mov eax, dword [esp + 0x88]
movsd xmm1, qword [eax]
ucomisd xmm0, xmm0
jne 0x495d10
jnp 0x495d17
mov eax, 0xffffffff
jmp 0x495d42
ucomisd xmm1, xmm1
jne 0x495d1f
jnp 0x495d26
mov eax, 1
jmp 0x495d42
ucomisd xmm1, xmm0
jbe 0x495d33
mov eax, 0xffffffff
jmp 0x495d42
ucomisd xmm0, xmm1
jbe 0x495d40
mov eax, 1
jmp 0x495d42
xor eax, eax
mov dword [esp + 0x90], eax
add esp, 0x74
ret
lea edx, [eax - 0xf]
cmp edx, 1
ja 0x495e53
cmp eax, 0xf
jne 0x495d75
mov eax, dword [esp + 0x7c]
movss xmm0, dword [eax]
movss xmm1, dword [eax + 4]
cvtss2sd xmm0, xmm0
cvtss2sd xmm1, xmm1
jmp 0x495d82
mov eax, dword [esp + 0x7c]
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
nop
mov eax, dword [esp + 0x8c]
and eax, 0x1f
cmp eax, 0xf
jne 0x495dac
mov eax, dword [esp + 0x88]
movss xmm2, dword [eax]
movss xmm3, dword [eax + 4]
cvtss2sd xmm2, xmm2
cvtss2sd xmm3, xmm3
jmp 0x495dc5
cmp eax, 0x10
jne 0x496610
mov eax, dword [esp + 0x88]
movsd xmm2, qword [eax]
movsd xmm3, qword [eax + 8]
ucomisd xmm0, xmm0
jne 0x495dcd
jnp 0x495dd4
mov eax, 0xffffffff
jmp 0x495dff
ucomisd xmm2, xmm2
jne 0x495ddc
jnp 0x495de3
mov eax, 1
jmp 0x495dff
ucomisd xmm2, xmm0
jbe 0x495df0
mov eax, 0xffffffff
jmp 0x495dff
ucomisd xmm0, xmm2
jbe 0x495dfd
mov eax, 1
jmp 0x495dff
xor eax, eax
test eax, eax
jne 0x495e48
ucomisd xmm1, xmm1
jne 0x495e0b
jnp 0x495e12
mov eax, 0xffffffff
jmp 0x495e3d
ucomisd xmm3, xmm3
jne 0x495e1a
jnp 0x495e21
mov eax, 1
jmp 0x495e3d
ucomisd xmm3, xmm1
jbe 0x495e2e
mov eax, 0xffffffff
jmp 0x495e3d
ucomisd xmm1, xmm3
jbe 0x495e3b
mov eax, 1
jmp 0x495e3d
xor eax, eax
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov dword [esp + 0x90], eax
add esp, 0x74
ret
cmp eax, 0x11
jne 0x4963b1
xor eax, eax
jmp 0x496524
cmp eax, 0x16
ja 0x496229
cmp eax, 0x12
je 0x49614d
cmp eax, 0x14
je 0x495e88
cmp eax, 0x16
je 0x496322
jmp 0x4963b1
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov edx, dword [esp + 0x7c]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov ebx, dword [esp + 0x84]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x88]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0x8c]
mov dword [esp + 0x14], esi
call fcn.00496710
movzx eax, byte [esp + 0x1c]
mov ecx, dword [esp + 0x18]
test al, al
jne 0x496142
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov ecx, dword [esp + 0x7c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x80]
mov dword [esp + 8], edx
call fcn.0048a570
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
test edx, edx
je 0x495f13
test edx, 0x200
jne 0x495f13
mov ecx, eax
lea eax, [0x728fe4]
jmp 0x495f2b
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x495f32
mov eax, dword [eax + 4]
test eax, eax
je 0x495f9a
nop
movzx edx, byte [0x8b2ca0]
test dl, dl
je 0x495f6b
mov dword [0x8b2ca4], eax
mov edx, dword [0x8d9190]
test edx, edx
jne 0x495f5a
mov dword [0x8b2ca8], ecx
jmp 0x495f6b
lea edi, [0x8b2ca8]
mov edx, eax
mov eax, ecx
call fcn.004643a0
mov eax, edx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], ecx
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x495f92
nop
movzx edx, byte [eax + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x495fa0
or edx, 0x80
jmp 0x495fa0
xor edx, edx
xor eax, eax
xor ecx, ecx
jmp 0x495fa0
xor edx, edx
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x48], eax
mov dword [esp + 0x24], edx
mov dword [esp + 0x4c], ecx
mov ebx, dword [esp + 0x84]
mov dword [esp], ebx
mov ebp, dword [esp + 0x88]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x8c]
mov dword [esp + 8], esi
call fcn.0048a570
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
test edx, edx
je 0x495ff3
test edx, 0x200
jne 0x495ff3
mov ecx, eax
lea eax, [0x728fe4]
jmp 0x49600b
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x496012
mov eax, dword [eax + 4]
test eax, eax
je 0x49607a
nop
movzx edx, byte [0x8b2ca0]
test dl, dl
je 0x49604b
mov dword [0x8b2ca4], eax
mov edx, dword [0x8d9190]
test edx, edx
jne 0x49603a
mov dword [0x8b2ca8], ecx
jmp 0x49604b
lea edi, [0x8b2ca8]
mov edx, eax
mov eax, ecx
call fcn.004643a0
mov eax, edx
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], ecx
mov eax, dword [esp + 0x64]
test eax, eax
je 0x496072
nop
movzx edx, byte [eax + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x496080
or edx, 0x80
jmp 0x496080
xor edx, edx
xor eax, eax
xor ecx, ecx
jmp 0x496080
xor edx, edx
xor eax, eax
xor ecx, ecx
mov ebx, dword [esp + 0x48]
mov dword [esp], ebx
mov ebx, dword [esp + 0x4c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x24]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.00495880
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4960bb
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
call fcn.0048a570
mov eax, dword [esp + 0xc]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x5c], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x44], edx
mov ebx, dword [esp + 0x84]
mov dword [esp], ebx
mov ebx, dword [esp + 0x88]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x8c]
mov dword [esp + 8], ebx
call fcn.0048a570
mov eax, dword [esp + 0x60]
mov dword [esp], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
call fcn.00495880
mov eax, dword [esp + 0x18]
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov dword [esp + 0x90], ecx
add esp, 0x74
ret
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov edx, dword [esp + 0x7c]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov ebx, dword [esp + 0x84]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x88]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0x8c]
mov dword [esp + 0x14], esi
call fcn.00496710
movzx eax, byte [esp + 0x1c]
mov ecx, dword [esp + 0x18]
test al, al
jne 0x49621e
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
call fcn.0048b730
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x84]
mov dword [esp], ecx
mov ecx, dword [esp + 0x88]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 8], ecx
call fcn.0048b730
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x3c]
cmp eax, ecx
ja 0x49620f
jae 0x496200
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
mov dword [esp + 0x90], ecx
add esp, 0x74
ret
cmp eax, 0x18
jne 0x49630d
mov eax, dword [esp + 0x7c]
mov ecx, dword [eax]
mov dword [esp + 0x54], ecx
mov eax, dword [eax + 4]
mov dword [esp + 0x2c], eax
mov edx, dword [esp + 0x8c]
mov ebx, edx
and edx, 0x1f
cmp edx, 0x18
jne 0x496262
mov edx, dword [esp + 0x88]
mov ebx, dword [edx]
mov edx, dword [edx + 4]
jmp 0x496290
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.0048c8f0
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x28], edx
mov dword [esp + 0x50], ebx
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
call fcn.004029c0
mov eax, dword [esp + 0x10]
test eax, eax
jl 0x4962fe
mov eax, dword [esp + 0x54]
mov dword [esp], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0xc], eax
call fcn.004029c0
mov eax, dword [esp + 0x10]
test eax, eax
jle 0x4962ef
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
cmp eax, 0x19
jne 0x496319
xor eax, eax
jmp 0x49642a
cmp eax, 0x1a
jne 0x4963b1
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0048b730
mov eax, dword [esp + 0xc]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x84]
mov dword [esp], ecx
mov ecx, dword [esp + 0x88]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 8], ecx
call fcn.0048b730
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
ja 0x496393
jae 0x496384
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
mov eax, dword [esp + 0x30]
mov eax, dword [eax + 0x80]
mov ecx, dword [esp + 0x58]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x6c5722]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x15
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044e980
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409640
mov eax, dword [esp + 8]
lea ecx, [0x6871e0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436170
mov edx, dword [esp + 0x38]
lea eax, [edx + 1]
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x38], eax
mov edx, dword [esp + 0x78]
mov dword [esp], edx
mov ebx, dword [esp + 0x7c]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.0048b680
mov eax, dword [esp + 0x38]
cmp dword [esp + 0xc], eax
jle 0x496507
mov ecx, dword [esp + 0x78]
mov dword [esp], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x80]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.0048a720
mov eax, dword [esp + 0x10]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x5c], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], edx
mov ebx, dword [esp + 0x84]
mov dword [esp], ebx
mov ebp, dword [esp + 0x88]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x8c]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x38]
mov dword [esp + 0xc], edi
call fcn.0048a720
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x60]
mov dword [esp], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.00495880
mov eax, dword [esp + 0x18]
test eax, eax
je 0x49641c
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov edx, dword [esp + 0x34]
lea eax, [edx + 1]
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x34], eax
mov edx, dword [esp + 0x78]
mov dword [esp], edx
mov ebx, dword [esp + 0x7c]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.0048abb0
mov eax, dword [esp + 0x34]
cmp dword [esp + 0xc], eax
jle 0x496601
mov ecx, dword [esp + 0x78]
mov dword [esp], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x80]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.0048a810
mov eax, dword [esp + 0x10]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x5c], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], edx
mov ebx, dword [esp + 0x84]
mov dword [esp], ebx
mov ebp, dword [esp + 0x88]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x8c]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x34]
mov dword [esp + 0xc], edi
call fcn.0048a810
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x60]
mov dword [esp], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.00495880
mov eax, dword [esp + 0x18]
test eax, eax
je 0x496516
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x44], eax
lea eax, [0x6983c0]
mov dword [esp], eax
call fcn.0040bd00
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x15
lea ecx, [0x6c592f]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x68d800]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436170
mov dword [esp + 0x44], eax
lea eax, [0x6983c0]
mov dword [esp], eax
call fcn.0040bd00
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x6c4ae5]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x68d800]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436170
lea eax, [0x6983c0]
mov dword [esp], eax
call fcn.0040bd00
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x12
lea ecx, [0x6c41b5]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x68d800]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436170
lea eax, [0x6983c0]
mov dword [esp], eax
call fcn.0040bd00
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x11
lea ecx, [0x6c3aa5]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x68d800]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436170
nop
call fcn.00462f90
jmp fcn.00495880