Function at 0x497860
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4986e1
sub esp, 0x74
mov eax, dword [esp + 0x80]
test eax, eax
je 0x497897
test eax, 0x200
jne 0x497897
lea ecx, [0x73b54c]
mov edx, dword [esp + 0x78]
jmp 0x4978c2
mov ecx, dword [esp + 0x78]
mov dword [esp], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.0048cfe0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x58], edx
mov dword [esp + 0x30], ecx
mov ebx, dword [esp + 0x8c]
test ebx, ebx
je 0x4978ec
test ebx, 0x200
jne 0x4978ec
lea ebp, [0x73b54c]
mov esi, dword [esp + 0x84]
jmp 0x49792c
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov ecx, dword [esp + 0x88]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.0048cfe0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x58]
mov ebx, dword [esp + 0x8c]
mov ebp, eax
mov esi, ecx
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x30]
cmp ecx, ebp
jne 0x498382
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
call fcn.004037d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x498382
nop
mov eax, dword [esp + 0x80]
mov ecx, eax
and eax, 0x1f
cmp eax, 0x11
ja 0x497e43
cmp eax, 0xc
ja 0x497c8f
cmp eax, 1
jne 0x4979f2
nop
nop
mov eax, dword [esp + 0x7c]
movzx eax, byte [eax]
mov ecx, dword [esp + 0x8c]
mov edx, ecx
and ecx, 0x1f
cmp ecx, 1
je 0x4979b6
mov byte [esp + 0x23], al
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.00489ad0
movzx eax, byte [esp + 0x23]
mov ecx, dword [esp + 0x88]
cmp byte [ecx], al
je 0x4979e3
test al, al
je 0x4979d4
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
lea ecx, [eax - 2]
cmp ecx, 4
ja 0x497b44
cmp eax, 3
ja 0x497a23
cmp eax, 2
jne 0x497a15
mov eax, dword [esp + 0x7c]
mov eax, dword [eax]
mov ecx, eax
sar eax, 0x1f
jmp 0x497a57
mov ecx, dword [esp + 0x7c]
movsx eax, byte [ecx]
mov ecx, eax
sar eax, 0x1f
jmp 0x497a57
cmp eax, 4
jne 0x497a36
mov ecx, dword [esp + 0x7c]
movsx eax, word [ecx]
mov ecx, eax
sar eax, 0x1f
jmp 0x497a57
cmp eax, 5
jne 0x497a48
mov ecx, dword [esp + 0x7c]
mov eax, dword [ecx]
mov ecx, eax
sar eax, 0x1f
jmp 0x497a57
mov ecx, dword [esp + 0x7c]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov edx, eax
mov eax, ecx
mov ecx, edx
nop
mov edx, dword [esp + 0x8c]
and edx, 0x1f
mov dword [esp + 0x44], edx
cmp edx, 3
ja 0x497a9a
cmp edx, 2
jne 0x497a80
mov edx, dword [esp + 0x88]
mov edx, dword [edx]
mov ebx, edx
sar edx, 0x1f
jmp 0x497ae0
cmp edx, 3
jne 0x4986a6
mov ebx, dword [esp + 0x88]
movsx edx, byte [ebx]
mov ebx, edx
sar edx, 0x1f
jmp 0x497ae0
cmp edx, 4
jne 0x497ab0
mov ebx, dword [esp + 0x88]
movsx edx, word [ebx]
mov ebx, edx
sar edx, 0x1f
jmp 0x497ae0
cmp edx, 5
jne 0x497ac5
mov ebx, dword [esp + 0x88]
mov edx, dword [ebx]
mov ebx, edx
sar edx, 0x1f
jmp 0x497ae0
cmp edx, 6
jne 0x4986a6
mov ebx, dword [esp + 0x88]
mov edx, dword [ebx]
mov ebx, dword [ebx + 4]
mov ebp, edx
mov edx, ebx
mov ebx, ebp
cmp eax, edx
xchg ebp, ebx
sete bl
xchg ebp, ebx
cmp ecx, ebx
xchg esi, ebx
setb bl
xchg esi, ebx
cmp eax, edx
xchg edi, ebx
setl bl
xchg edi, ebx
and esi, ebp
or edi, esi
xchg edi, eax
test al, al
xchg edi, eax
jne 0x497b35
cmp ecx, ebx
seta cl
cmp eax, edx
setg al
and ecx, ebp
or eax, ecx
test al, al
je 0x497b26
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
cmp eax, 7
jb 0x498391
cmp eax, 9
ja 0x497b7c
cmp eax, 7
jne 0x497b61
mov eax, dword [esp + 0x7c]
mov eax, dword [eax]
xor ecx, ecx
jmp 0x497ba3
cmp eax, 8
jne 0x497b71
mov ecx, dword [esp + 0x7c]
movzx eax, byte [ecx]
xor ecx, ecx
jmp 0x497ba3
mov ecx, dword [esp + 0x7c]
movzx eax, word [ecx]
xor ecx, ecx
jmp 0x497ba3
cmp eax, 0xa
jne 0x497b8b
mov ecx, dword [esp + 0x7c]
mov eax, dword [ecx]
xor ecx, ecx
jmp 0x497ba3
cmp eax, 0xb
jne 0x497b9b
mov ecx, dword [esp + 0x7c]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
jmp 0x497ba3
mov edx, dword [esp + 0x7c]
mov eax, dword [edx]
xor ecx, ecx
nop
mov edx, dword [esp + 0x8c]
and edx, 0x1f
mov dword [esp + 0x44], edx
cmp edx, 9
ja 0x497bf3
cmp edx, 7
jne 0x497bc9
mov edx, dword [esp + 0x88]
mov edx, dword [edx]
xor ebx, ebx
jmp 0x497c2d
cmp edx, 8
jne 0x497bdc
mov ebx, dword [esp + 0x88]
movzx edx, byte [ebx]
xor ebx, ebx
jmp 0x497c2d
cmp edx, 9
jne 0x49866c
mov ebx, dword [esp + 0x88]
movzx edx, word [ebx]
xor ebx, ebx
jmp 0x497c2d
cmp edx, 0xa
jne 0x497c05
mov ebx, dword [esp + 0x88]
mov edx, dword [ebx]
xor ebx, ebx
jmp 0x497c2d
cmp edx, 0xb
jne 0x497c18
mov ebx, dword [esp + 0x88]
mov edx, dword [ebx]
mov ebx, dword [ebx + 4]
jmp 0x497c2d
cmp edx, 0xc
jne 0x49866c
mov ebp, dword [esp + 0x88]
mov edx, dword [ebp]
xor ebx, ebx
cmp ecx, ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg esi, ebx
setb bl
xchg esi, ebx
cmp eax, edx
xchg edi, ebx
setb bl
xchg edi, ebx
and edi, ebp
or esi, edi
xchg esi, eax
test al, al
xchg esi, eax
jne 0x497c80
cmp ecx, ebx
seta cl
cmp eax, edx
seta al
and eax, ebp
or ecx, eax
test cl, cl
je 0x497c71
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
cmp eax, 0xe
ja 0x497d2d
cmp eax, 0xd
jne 0x497cab
mov eax, dword [esp + 0x7c]
movss xmm0, dword [eax]
cvtss2sd xmm0, xmm0
jmp 0x497cb3
mov eax, dword [esp + 0x7c]
movsd xmm0, qword [eax]
nop
mov eax, dword [esp + 0x8c]
and eax, 0x1f
cmp eax, 0xd
jne 0x497cd4
mov eax, dword [esp + 0x88]
movss xmm1, dword [eax]
cvtss2sd xmm1, xmm1
jmp 0x497ce8
cmp eax, 0xe
jne 0x49862e
mov eax, dword [esp + 0x88]
movsd xmm1, qword [eax]
ucomisd xmm0, xmm0
jne 0x497cf0
jnp 0x497cf7
mov eax, 0xffffffff
jmp 0x497d22
ucomisd xmm1, xmm1
jne 0x497cff
jnp 0x497d06
mov eax, 1
jmp 0x497d22
ucomisd xmm1, xmm0
jbe 0x497d13
mov eax, 0xffffffff
jmp 0x497d22
ucomisd xmm0, xmm1
jbe 0x497d20
mov eax, 1
jmp 0x497d22
xor eax, eax
mov dword [esp + 0x90], eax
add esp, 0x74
ret
lea edx, [eax - 0xf]
cmp edx, 1
ja 0x497e33
cmp eax, 0xf
jne 0x497d55
mov eax, dword [esp + 0x7c]
movss xmm0, dword [eax]
cvtss2sd xmm0, xmm0
movss xmm1, dword [eax + 4]
cvtss2sd xmm1, xmm1
jmp 0x497d62
mov eax, dword [esp + 0x7c]
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
nop
mov eax, dword [esp + 0x8c]
and eax, 0x1f
cmp eax, 0xf
jne 0x497d8c
mov eax, dword [esp + 0x88]
movss xmm2, dword [eax]
cvtss2sd xmm2, xmm2
movss xmm3, dword [eax + 4]
cvtss2sd xmm3, xmm3
jmp 0x497da5
cmp eax, 0x10
jne 0x4985f0
mov eax, dword [esp + 0x88]
movsd xmm2, qword [eax]
movsd xmm3, qword [eax + 8]
ucomisd xmm0, xmm0
jne 0x497dad
jnp 0x497db4
mov eax, 0xffffffff
jmp 0x497ddf
ucomisd xmm2, xmm2
jne 0x497dbc
jnp 0x497dc3
mov eax, 1
jmp 0x497ddf
ucomisd xmm2, xmm0
jbe 0x497dd0
mov eax, 0xffffffff
jmp 0x497ddf
ucomisd xmm0, xmm2
jbe 0x497ddd
mov eax, 1
jmp 0x497ddf
xor eax, eax
test eax, eax
jne 0x497e28
ucomisd xmm1, xmm1
jne 0x497deb
jnp 0x497df2
mov eax, 0xffffffff
jmp 0x497e1d
ucomisd xmm3, xmm3
jne 0x497dfa
jnp 0x497e01
mov eax, 1
jmp 0x497e1d
ucomisd xmm3, xmm1
jbe 0x497e0e
mov eax, 0xffffffff
jmp 0x497e1d
ucomisd xmm1, xmm3
jbe 0x497e1b
mov eax, 1
jmp 0x497e1d
xor eax, eax
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov dword [esp + 0x90], eax
add esp, 0x74
ret
cmp eax, 0x11
jne 0x498391
xor eax, eax
jmp 0x498504
cmp eax, 0x16
ja 0x498209
cmp eax, 0x12
je 0x49812d
cmp eax, 0x14
je 0x497e68
cmp eax, 0x16
je 0x498302
jmp 0x498391
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov edx, dword [esp + 0x7c]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov ebx, dword [esp + 0x84]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x88]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0x8c]
mov dword [esp + 0x14], esi
call fcn.004986f0
movzx eax, byte [esp + 0x1c]
mov ecx, dword [esp + 0x18]
test al, al
jne 0x498122
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov ecx, dword [esp + 0x7c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x80]
mov dword [esp + 8], edx
call fcn.0048ab80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
test edx, edx
je 0x497ef3
test edx, 0x200
jne 0x497ef3
mov ecx, eax
lea eax, [0x73b54c]
jmp 0x497f0b
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0048cfe0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x497f12
mov eax, dword [eax + 4]
test eax, eax
je 0x497f7a
nop
movzx edx, byte [0x8c1150]
test dl, dl
je 0x497f4b
mov dword [0x8c1154], eax
mov edx, dword [0x8e84e0]
test edx, edx
jne 0x497f3a
mov dword [0x8c1158], ecx
jmp 0x497f4b
lea edi, [0x8c1158]
mov edx, eax
mov eax, ecx
call fcn.00463080
mov eax, edx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], ecx
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x497f72
nop
movzx edx, byte [eax + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x497f80
or edx, 0x80
jmp 0x497f80
xor edx, edx
xor eax, eax
xor ecx, ecx
jmp 0x497f80
xor edx, edx
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x48], eax
mov dword [esp + 0x24], edx
mov dword [esp + 0x4c], ecx
mov ebx, dword [esp + 0x84]
mov dword [esp], ebx
mov ebp, dword [esp + 0x88]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x8c]
mov dword [esp + 8], esi
call fcn.0048ab80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
test edx, edx
je 0x497fd3
test edx, 0x200
jne 0x497fd3
mov ecx, eax
lea eax, [0x73b54c]
jmp 0x497feb
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0048cfe0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x497ff2
mov eax, dword [eax + 4]
test eax, eax
je 0x49805a
nop
movzx edx, byte [0x8c1150]
test dl, dl
je 0x49802b
mov dword [0x8c1154], eax
mov edx, dword [0x8e84e0]
test edx, edx
jne 0x49801a
mov dword [0x8c1158], ecx
jmp 0x49802b
lea edi, [0x8c1158]
mov edx, eax
mov eax, ecx
call fcn.00463080
mov eax, edx
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], ecx
mov eax, dword [esp + 0x64]
test eax, eax
je 0x498052
nop
movzx edx, byte [eax + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x498060
or edx, 0x80
jmp 0x498060
xor edx, edx
xor eax, eax
xor ecx, ecx
jmp 0x498060
xor edx, edx
xor eax, eax
xor ecx, ecx
mov ebx, dword [esp + 0x48]
mov dword [esp], ebx
mov ebx, dword [esp + 0x4c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x24]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.00497860
mov eax, dword [esp + 0x18]
test eax, eax
je 0x49809b
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
call fcn.0048ab80
mov eax, dword [esp + 0xc]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x5c], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x44], edx
mov ebx, dword [esp + 0x84]
mov dword [esp], ebx
mov ebx, dword [esp + 0x88]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x8c]
mov dword [esp + 8], ebx
call fcn.0048ab80
mov eax, dword [esp + 0x60]
mov dword [esp], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
call fcn.00497860
mov eax, dword [esp + 0x18]
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov dword [esp + 0x90], ecx
add esp, 0x74
ret
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov edx, dword [esp + 0x7c]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov ebx, dword [esp + 0x84]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x88]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0x8c]
mov dword [esp + 0x14], esi
call fcn.004986f0
movzx eax, byte [esp + 0x1c]
mov ecx, dword [esp + 0x18]
test al, al
jne 0x4981fe
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
call fcn.0048bd40
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x84]
mov dword [esp], ecx
mov ecx, dword [esp + 0x88]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 8], ecx
call fcn.0048bd40
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x3c]
cmp eax, ecx
ja 0x4981ef
jae 0x4981e0
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
mov dword [esp + 0x90], ecx
add esp, 0x74
ret
cmp eax, 0x18
jne 0x4982ed
mov eax, dword [esp + 0x7c]
mov ecx, dword [eax]
mov dword [esp + 0x54], ecx
mov eax, dword [eax + 4]
mov dword [esp + 0x2c], eax
mov edx, dword [esp + 0x8c]
mov ebx, edx
and edx, 0x1f
cmp edx, 0x18
jne 0x498242
mov edx, dword [esp + 0x88]
mov ebx, dword [edx]
mov edx, dword [edx + 4]
jmp 0x498270
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.0048cf00
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x28], edx
mov dword [esp + 0x50], ebx
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
call fcn.004028e0
mov eax, dword [esp + 0x10]
test eax, eax
jl 0x4982de
mov eax, dword [esp + 0x54]
mov dword [esp], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0xc], eax
call fcn.004028e0
mov eax, dword [esp + 0x10]
test eax, eax
jle 0x4982cf
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
cmp eax, 0x19
jne 0x4982f9
xor eax, eax
jmp 0x49840a
cmp eax, 0x1a
jne 0x498391
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0048bd40
mov eax, dword [esp + 0xc]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x84]
mov dword [esp], ecx
mov ecx, dword [esp + 0x88]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 8], ecx
call fcn.0048bd40
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
ja 0x498373
jae 0x498364
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
mov eax, dword [esp + 0x30]
mov eax, dword [eax + 0x80]
mov ecx, dword [esp + 0x58]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x6cb56f]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x15
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044ef90
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004091e0
mov eax, dword [esp + 8]
lea ecx, [0x68e4c0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436f70
mov edx, dword [esp + 0x38]
lea eax, [edx + 1]
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x38], eax
mov edx, dword [esp + 0x78]
mov dword [esp], edx
mov ebx, dword [esp + 0x7c]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.0048bc90
mov eax, dword [esp + 0x38]
cmp dword [esp + 0xc], eax
jle 0x4984e7
mov ecx, dword [esp + 0x78]
mov dword [esp], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x80]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.0048ad30
mov eax, dword [esp + 0x10]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x5c], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], edx
mov ebx, dword [esp + 0x84]
mov dword [esp], ebx
mov ebp, dword [esp + 0x88]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x8c]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x38]
mov dword [esp + 0xc], edi
call fcn.0048ad30
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x60]
mov dword [esp], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.00497860
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4983fc
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov edx, dword [esp + 0x34]
lea eax, [edx + 1]
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x34], eax
mov edx, dword [esp + 0x78]
mov dword [esp], edx
mov ebx, dword [esp + 0x7c]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.0048b1c0
mov eax, dword [esp + 0x34]
cmp dword [esp + 0xc], eax
jle 0x4985e1
mov ecx, dword [esp + 0x78]
mov dword [esp], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x80]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.0048ae20
mov eax, dword [esp + 0x10]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x5c], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], edx
mov ebx, dword [esp + 0x84]
mov dword [esp], ebx
mov ebp, dword [esp + 0x88]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x8c]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x34]
mov dword [esp + 0xc], edi
call fcn.0048ae20
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x60]
mov dword [esp], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.00497860
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4984f6
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x44], eax
lea eax, [0x69efa0]
mov dword [esp], eax
call fcn.0040b800
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x15
lea ecx, [0x6cb7a6]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x6948e0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436f70
mov dword [esp + 0x44], eax
lea eax, [0x69efa0]
mov dword [esp], eax
call fcn.0040b800
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x6ca8e5]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x6948e0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436f70
lea eax, [0x69efa0]
mov dword [esp], eax
call fcn.0040b800
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x12
lea ecx, [0x6ca049]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x6948e0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436f70
lea eax, [0x69efa0]
mov dword [esp], eax
call fcn.0040b800
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x11
lea ecx, [0x6c9991]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x6948e0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436f70
nop
call fcn.00461c70
jmp fcn.00497860