Function at 0x478600
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xb4
push ebx
xor ebx, ebx
xor eax, eax
push esi
mov esi, dword [ebp + 8]
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov eax, dword [esi]
push edi
mov dword [esp + 0x58], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x80], ebx
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x88], ebx
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x70], eax
cmp dword [esi + 0x40], ebx
jne 0x47a3ed
cmp byte [eax + 0x41], bl
jne 0x47a3ed
mov ecx, dword [ebp + 0xc]
call fcn.0045acc0
mov dword [esp + 0xc], eax
cmp eax, ebx
je 0x47a3ed
mov edi, eax
mov eax, dword [ebp + 8]
mov esi, dword [edi + 0x40]
mov ecx, dword [eax]
call fcn.0046ad20
mov edx, dword [ebp + 0x10]
mov esi, dword [ebp + 8]
lea ecx, [esp + 0x50]
push ecx
push edx
mov dword [esp + 0x54], eax
push 0x6e
mov edx, edi
mov eax, esi
call fcn.00477ae0
mov dword [esp + 0x84], eax
xor eax, eax
add esp, 0xc
cmp dword [edi + 0xc], ebx
setne al
mov dword [esp + 0x60], eax
mov eax, edi
mov edi, esi
call fcn.00456780
test eax, eax
jne 0x47a3ed
mov ecx, dword [esp + 0x50]
push ecx
mov ecx, dword [esp + 0x10]
call fcn.0045adb0
add esp, 4
test eax, eax
jne 0x47a3ed
mov eax, dword [esi + 0x44]
mov edx, dword [ebp + 0xc]
mov dword [edx + 0x38], eax
inc dword [esi + 0x44]
mov edx, dword [esi + 0x44]
mov dword [esp + 0x24], eax
mov dword [esp + 0x30], eax
inc eax
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0xc]
test byte [eax + 0x2a], 0x20
jne 0x47870f
mov dword [esp + 0x34], ebx
jmp 0x478718
call fcn.00454810
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 8]
xor edi, edi
cmp eax, ebx
je 0x47874e
mov ecx, dword [eax + 0x34]
and cl, 3
cmp cl, 2
jne 0x478740
cmp dword [esp + 0x34], ebx
je 0x478740
mov ecx, dword [ebp + 0xc]
mov dword [esp + 0x24], edx
mov dword [ecx + 0x38], edx
inc dword [esi + 0x44]
mov eax, dword [eax + 0x14]
mov edx, dword [esi + 0x44]
inc edi
cmp eax, ebx
jne 0x478725
mov edx, dword [esp + 0xc]
movsx eax, word [edx + 0x22]
mov esi, dword [esp + 0x70]
add eax, edi
lea ecx, [edi + eax*4 + 2]
push ebx
push ecx
call fcn.004184b0
add esp, 8
mov dword [esp + 0x3c], eax
cmp eax, ebx
je 0x47a3ed
mov edx, dword [esp + 0xc]
movsx eax, word [edx + 0x22]
mov ecx, dword [esp + 0x3c]
lea esi, [ecx + eax*4]
lea eax, [edi + 1]
push eax
mov dword [esp + 0x88], esi
lea esi, [esi + edi*4]
push 1
push esi
mov dword [esp + 0x80], esi
mov dword [esp + 0x24], eax
call fcn.004f8f00
mov ecx, dword [esp + 0x18]
xor edx, edx
add esp, 0xc
mov byte [esi + edi + 1], bl
xor eax, eax
cmp dx, word [ecx + 0x22]
jge 0x4787d3
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0xc]
mov dword [ecx + eax*4], 0xffffffff
movsx esi, word [edx + 0x22]
inc eax
cmp eax, esi
jl 0x4787c3
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], ebx
mov dword [esp + 0xa8], ebx
mov dword [esp + 0xac], ebx
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xb4], ebx
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xbc], ebx
mov dword [esp + 0xa0], edx
mov dword [esp + 0xa4], eax
mov byte [esp + 0x2f], bl
mov byte [esp + 0x23], bl
mov dword [esp + 0x44], ebx
cmp dword [ecx], ebx
jle 0x478a77
mov dword [esp + 0x10], ebx
lea ebx, [ebx]
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + 4]
mov ecx, dword [esp + 0x10]
mov edi, dword [ecx + eax]
lea esi, [esp + 0xa0]
call fcn.00449430
test eax, eax
jne 0x47a3ed
mov eax, dword [esp + 0xc]
movsx ecx, word [eax + 0x22]
xor esi, esi
mov dword [esp + 0x28], ecx
cmp ecx, ebx
jle 0x4788f4
mov edx, dword [ebp + 0x10]
mov ecx, dword [edx + 4]
add ecx, dword [esp + 0x10]
mov edi, dword [eax + 4]
mov dword [esp + 0x14], ecx
mov ecx, dword [ecx + 4]
mov dword [esp + 0x1c], ecx
nop
mov edx, dword [esp + 0x1c]
mov eax, dword [edi]
push edx
push eax
call fcn.0041af90
add esp, 8
test eax, eax
je 0x4788b0
inc esi
add edi, 0x18
cmp esi, dword [esp + 0x28]
jl 0x478890
jmp 0x4788f0
mov eax, dword [esp + 0xc]
movsx ecx, word [eax + 0x20]
cmp esi, ecx
jne 0x4788cd
mov edx, dword [esp + 0x14]
mov eax, dword [edx]
mov byte [esp + 0x23], 1
mov dword [esp + 0x64], eax
jmp 0x4788e5
cmp dword [esp + 0x34], ebx
je 0x4788e5
mov eax, dword [eax + 4]
lea ecx, [esi + esi*2]
test byte [eax + ecx*8 + 0x17], 1
je 0x4788e5
mov byte [esp + 0x2f], 1
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x44]
mov dword [edx + esi*4], eax
mov eax, dword [esp + 0xc]
movsx ecx, word [eax + 0x22]
cmp esi, ecx
jl 0x478965
cmp dword [esp + 0x34], ebx
jne 0x478a4e
mov edx, dword [ebp + 0x10]
mov edi, dword [esp + 0x10]
add edi, dword [edx + 4]
push 0x54e790
mov esi, dword [edi + 4]
push esi
call fcn.0041af90
add esp, 8
test eax, eax
je 0x47894d
push 0x54e798
push esi
call fcn.0041af90
add esp, 8
test eax, eax
je 0x47894d
push 0x54e7a0
push esi
call fcn.0041af90
add esp, 8
test eax, eax
jne 0x478a4e
mov edx, dword [edi]
or esi, 0xffffffff
mov byte [esp + 0x23], 1
mov dword [esp + 0x64], edx
mov dword [esp + 0x1c], 0x551ca0
jmp 0x478980
cmp esi, ebx
jge 0x478973
mov dword [esp + 0x1c], 0x551ca0
jmp 0x478980
mov edx, dword [eax + 4]
lea ecx, [esi + esi*2]
mov eax, dword [edx + ecx*8]
mov dword [esp + 0x1c], eax
mov edx, dword [esp + 0x70]
mov ecx, dword [esp + 0x4c]
mov eax, dword [edx + 0x10]
mov edx, dword [esp + 0xc]
mov edi, dword [ebp + 8]
add ecx, ecx
mov ecx, dword [eax + ecx*8]
mov eax, dword [edx]
mov dword [esp + 0x14], eax
mov eax, dword [edi]
mov dword [esp + 0x28], ecx
cmp byte [eax + 0x91], bl
jne 0x4789ff
cmp byte [edi + 0x1bf], bl
jne 0x4789ff
mov ecx, dword [eax + 0x11c]
cmp ecx, ebx
je 0x4789ff
mov edx, dword [edi + 0x1e8]
mov eax, dword [eax + 0x120]
push edx
mov edx, dword [esp + 0x2c]
push edx
mov edx, dword [esp + 0x24]
push edx
mov edx, dword [esp + 0x20]
push edx
push 0x17
push eax
call ecx
add esp, 0x18
cmp eax, 1
je 0x478a1a
cmp eax, ebx
je 0x4789ef
cmp eax, 2
jne 0x478a34
cmp eax, 2
jne 0x4789ff
mov ecx, dword [esp + 0x3c]
mov dword [ecx + esi*4], 0xffffffff
mov eax, dword [esp + 0x44]
mov edx, dword [ebp + 0x10]
add dword [esp + 0x10], 0x18
inc eax
mov dword [esp + 0x44], eax
cmp eax, dword [edx]
jl 0x478840
jmp 0x478a79
push 0x54f1e8
push edi
call fcn.0041ad80
add esp, 8
mov dword [edi + 0xc], 0x17
jmp 0x47a3ed
push 0x54f184
push edi
call fcn.0041ad80
add esp, 8
mov dword [edi + 0xc], 1
jmp 0x47a3ed
mov ecx, dword [ebp + 0x10]
mov eax, dword [esp + 0x44]
mov edx, dword [ecx + 4]
mov esi, dword [ebp + 8]
lea eax, [eax + eax*2]
mov eax, dword [edx + eax*8 + 4]
push eax
push 0x551c8c
push esi
call fcn.0041ad80
mov byte [esi + 0x11], 1
jmp 0x47a3ea
mov edi, edx
mov eax, dword [ebp + 0xc]
mov cl, byte [esp + 0x2f]
add cl, byte [esp + 0x23]
mov dword [eax + 0x48], ebx
mov dword [eax + 0x4c], ebx
mov edx, dword [edi]
test dword [edx + 0x18], 0x80000
mov byte [esp + 0x48], cl
je 0x478ab9
mov edx, dword [esp + 0xc]
movzx eax, cl
mov ecx, dword [esp + 0x3c]
push eax
push ecx
push edx
call fcn.00461060
mov cl, byte [esp + 0x54]
add esp, 0xc
mov dword [esp + 0x5c], eax
jmp 0x478abd
mov dword [esp + 0x5c], ebx
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 8]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], eax
cmp eax, ebx
je 0x478b5c
jmp 0x478ada
mov cl, byte [esp + 0x48]
cmp cl, bl
jne 0x478b24
cmp dword [esp + 0x5c], ebx
jne 0x478b24
cmp dword [eax + 0x24], ebx
jne 0x478b24
cmp eax, dword [esp + 0x34]
je 0x478b24
movzx esi, word [eax + 0x2e]
xor edx, edx
xor ecx, ecx
mov dword [esp + 0x1c], esi
cmp esi, ebx
jle 0x478b2e
mov edx, dword [eax + 4]
mov eax, dword [esp + 0x3c]
movsx esi, word [edx]
cmp dword [eax + esi*4], ebx
jge 0x478b20
inc ecx
add edx, 2
cmp ecx, dword [esp + 0x1c]
jl 0x478b06
mov eax, dword [esp + 0x10]
mov edx, ebx
jmp 0x478b2e
mov eax, dword [esp + 0x10]
inc dword [edi + 0x48]
mov edx, dword [edi + 0x48]
cmp edx, ebx
jne 0x478b3a
mov ecx, dword [esp + 0x74]
mov esi, dword [esp + 0x14]
mov byte [esi + ecx + 1], bl
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0x84]
mov dword [esi + ecx*4], edx
mov eax, dword [eax + 0x14]
inc ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ecx
cmp eax, ebx
jne 0x478ad6
mov eax, dword [edi + 8]
mov dword [esp + 0x38], eax
cmp eax, ebx
jne 0x478c29
mov esi, dword [edi]
push ebx
push 0xd0
mov dword [esp + 0x24], esi
call fcn.004184b0
mov esi, eax
add esp, 8
cmp esi, ebx
je 0x478cd9
push 0xd0
push ebx
push esi
call fcn.004f8f00
mov eax, dword [esp + 0x28]
mov dword [esi], eax
mov ecx, dword [eax + 4]
add esp, 0xc
cmp ecx, ebx
je 0x478ba8
mov dword [ecx + 0x30], esi
mov edx, dword [eax + 4]
mov dword [esi + 0x34], edx
mov dword [esi + 0x30], ebx
mov dword [eax + 4], esi
mov dword [esi + 0x28], 0x26bceaa5
mov dword [esi + 0x18], edi
mov dword [edi + 8], esi
mov dword [esp + 0x38], esi
cmp esi, ebx
je 0x478c09
mov eax, dword [esi + 0x20]
mov ecx, dword [esi + 0x18]
mov dword [esp + 0x1c], eax
cmp dword [ecx + 0x54], eax
jg 0x478be9
push esi
call fcn.00436c80
add esp, 4
test eax, eax
jne 0x478c09
mov eax, dword [esp + 0x1c]
inc dword [esi + 0x20]
lea edx, [eax + eax*4]
mov eax, dword [esi + 4]
lea eax, [eax + edx*4]
mov byte [eax + 3], bl
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov word [eax], 0x9e
cmp dword [edi + 0x198], ebx
jne 0x478c1d
mov ecx, dword [edi]
test byte [ecx + 0x3c], 8
jne 0x478c1d
mov byte [edi + 0x17], 1
cmp esi, ebx
je 0x47a3ed
mov eax, dword [esp + 0x38]
cmp byte [edi + 0x12], bl
jne 0x478c32
or dword [eax + 0x58], 4
mov eax, dword [edi + 0x198]
mov dword [esp + 0x1c], eax
cmp eax, ebx
jne 0x478c46
mov dword [esp + 0x1c], edi
mov eax, edi
mov ecx, dword [esp + 0x4c]
mov edx, dword [eax + 0x14c]
mov esi, 1
shl esi, cl
test edx, esi
jne 0x478c92
mov ecx, esi
or ecx, edx
mov edx, dword [eax]
mov dword [eax + 0x14c], ecx
mov ecx, dword [esp + 0x4c]
mov edx, dword [edx + 0x10]
add ecx, ecx
mov ecx, dword [edx + ecx*8 + 0xc]
mov edx, dword [ecx]
mov ecx, dword [esp + 0x4c]
mov dword [eax + ecx*4 + 0x150], edx
cmp ecx, 1
jne 0x478c92
mov ebx, eax
call fcn.004593a0
mov edi, dword [ebp + 8]
xor ebx, ebx
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0xc]
or dword [eax + 0x148], esi
or byte [eax + 0x14], 1
test byte [ecx + 0x2a], 0x10
je 0x478ce0
mov eax, dword [ebp + 0x18]
mov edx, dword [ebp + 0x14]
push eax
mov eax, dword [esp + 0x40]
push edx
mov edx, dword [esp + 0x6c]
push eax
mov eax, dword [ebp + 0x10]
push edx
push eax
push ecx
mov ecx, dword [ebp + 0xc]
push ecx
push edi
call fcn.0047a690
add esp, 0x20
mov dword [ebp + 0x14], ebx
mov dword [ebp + 0xc], ebx
jmp 0x47a3ed
xor esi, esi
jmp 0x478bbe
mov edx, 1
add dword [edi + 0x48], edx
mov eax, dword [edi + 0x48]
mov dword [esp + 0x28], eax
inc eax
mov dword [edi + 0x48], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x40], eax
cmp byte [esp + 0x2f], bl
jne 0x478d0d
cmp dword [esp + 0x78], ebx
jne 0x478d0d
cmp dword [esp + 0x5c], ebx
je 0x478d1d
lea esi, [eax + 1]
mov dword [esp + 0x7c], esi
movsx esi, word [ecx + 0x22]
add esi, eax
mov dword [edi + 0x48], esi
cmp byte [esp + 0x48], bl
jne 0x478d2f
cmp dword [esp + 0x78], ebx
jne 0x478d2f
cmp dword [esp + 0x5c], ebx
je 0x478d39
add dword [edi + 0x48], edx
mov edx, dword [edi + 0x48]
mov dword [esp + 0x68], edx
mov eax, dword [edi + 0x48]
lea edx, [eax + 1]
mov dword [esp + 0x1c], edx
movsx edx, word [ecx + 0x22]
add edx, eax
mov dword [edi + 0x48], edx
cmp dword [esp + 0x60], ebx
je 0x478d81
mov eax, dword [edi + 0x1e8]
mov edx, dword [ecx]
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0x24]
push eax
mov dword [edi + 0x1e8], edx
mov edx, dword [ebp + 0x14]
push edx
push ecx
push edi
mov dword [esp + 0xac], edi
call fcn.0045ae40
add esp, 0x10
mov edi, dword [ebp + 0x14]
lea esi, [esp + 0xa0]
call fcn.00449430
test eax, eax
jne 0x47a3ed
mov eax, dword [esp + 0xc]
test byte [eax + 0x2a], 0x20
jne 0x478e9d
mov edi, dword [esp + 0x38]
mov esi, dword [edi + 0x20]
mov ecx, dword [edi + 0x18]
cmp dword [ecx + 0x54], esi
jg 0x478dc2
push edi
call fcn.00436c80
add esp, 4
test eax, eax
jne 0x478dea
mov eax, dword [edi + 4]
inc dword [edi + 0x20]
mov ecx, dword [esp + 0x28]
lea edx, [esi + esi*4]
lea eax, [eax + edx*4]
mov edx, dword [esp + 0x40]
mov byte [eax + 3], bl
mov dword [eax + 4], ebx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], ebx
mov word [eax], 0x1a
mov eax, dword [esp + 0x6c]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0xc]
push eax
mov eax, dword [ebp + 8]
push 4
push ebx
push ebx
push ecx
push edx
push eax
call fcn.00485da0
add esp, 0x1c
mov dword [esp + 0x10], eax
cmp eax, ebx
je 0x47a3ed
mov ecx, dword [eax + 0x3c]
mov edx, dword [eax + 0x40]
movzx eax, byte [eax + 0x26]
mov esi, dword [edi + 0x20]
mov dword [esp + 0x90], ecx
mov ecx, dword [edi + 0x18]
mov dword [esp + 0x94], edx
mov dword [esp + 0x4c], eax
cmp dword [ecx + 0x54], esi
jg 0x478e47
push edi
call fcn.00436c80
add esp, 4
test eax, eax
jne 0x478e6f
mov eax, dword [edi + 4]
inc dword [edi + 0x20]
mov ecx, dword [esp + 0x24]
lea edx, [esi + esi*4]
lea eax, [eax + edx*4]
mov edx, dword [esp + 0x40]
mov byte [eax + 3], bl
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov word [eax], 0x68
cmp dword [esp + 0x4c], ebx
jne 0x478e8e
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x28]
push eax
push ecx
push 0x81
mov esi, edi
call fcn.00436e20
add esp, 0xc
mov edx, dword [esp + 0x10]
push edx
call fcn.004867c0
jmp 0x47911d
mov eax, dword [esp + 0x34]
movzx edx, word [eax + 0x2e]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x48]
lea esi, [ecx + 1]
movsx edi, dx
lea ecx, [edi + ecx + 1]
mov dword [eax + 0x48], ecx
mov dword [esp + 0x54], ecx
mov ecx, dword [eax + 0x44]
mov dword [esp + 0x80], ecx
inc ecx
mov dword [esp + 0x44], esi
mov esi, dword [esp + 0x38]
mov dword [eax + 0x44], ecx
mov eax, dword [esi + 0x20]
mov ecx, dword [esi + 0x18]
mov dword [esp + 0x10], eax
cmp dword [ecx + 0x54], eax
jg 0x478ef2
push esi
call fcn.00436c80
add esp, 4
test eax, eax
jne 0x478f16
mov eax, dword [esp + 0x10]
inc dword [esi + 0x20]
mov ecx, dword [esp + 0x44]
lea edx, [eax + eax*4]
mov eax, dword [esi + 4]
lea eax, [eax + edx*4]
mov byte [eax + 3], bl
mov dword [eax + 4], ebx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov word [eax], 0x1a
mov ecx, dword [esi + 0x20]
mov edx, dword [esi + 0x18]
mov dword [esp + 0x10], ecx
cmp dword [edx + 0x54], ecx
jg 0x478f40
push esi
call fcn.00436c80
add esp, 4
test eax, eax
je 0x478f3c
mov dword [esp + 0x14], 1
jmp 0x478f6b
mov ecx, dword [esp + 0x10]
mov edx, dword [esi + 4]
inc dword [esi + 0x20]
lea eax, [ecx + ecx*4]
lea eax, [edx + eax*4]
mov edx, dword [esp + 0x80]
mov byte [eax + 3], bl
mov dword [eax + 4], edx
mov dword [eax + 8], edi
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov word [eax], 0x39
mov dword [esp + 0x14], ecx
mov esi, dword [ebp + 8]
mov ecx, dword [esp + 0x34]
mov eax, esi
call fcn.00437770
mov eax, dword [esp + 0x6c]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0xc]
push eax
push 4
push ebx
push ebx
push ecx
push edx
push esi
call fcn.00485da0
add esp, 0x1c
mov dword [esp + 0x10], eax
cmp eax, ebx
je 0x47a3ed
mov ecx, dword [eax + 0x3c]
mov edx, dword [eax + 0x40]
movzx eax, byte [eax + 0x26]
xor esi, esi
mov dword [esp + 0x90], ecx
mov dword [esp + 0x94], edx
mov dword [esp + 0x4c], eax
cmp edi, ebx
jle 0x478fef
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x34]
mov eax, dword [edx + 4]
mov edx, dword [esp + 0x24]
add ecx, esi
push ecx
movsx ecx, word [eax + esi*2]
mov eax, dword [esp + 0x10]
push ecx
push edx
push eax
mov eax, dword [esp + 0x48]
call fcn.0044cfa0
inc esi
add esp, 0x10
cmp esi, edi
jl 0x478fc1
cmp dword [esp + 0x4c], ebx
je 0x479053
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x38]
cmp ecx, dword [edx + 0x20]
jge 0x47903f
mov eax, ecx
mov ecx, dword [edx + 4]
mov edx, dword [edx]
lea eax, [eax + eax*4]
lea esi, [ecx + eax*4]
movsx eax, byte [esi + 1]
mov ecx, dword [esi + 0x10]
call fcn.00437440
mov edx, dword [esp + 0x38]
mov dword [esi], ebx
mov dword [esi + 4], ebx
mov dword [esi + 8], ebx
mov dword [esi + 0xc], ebx
mov dword [esi + 0x10], ebx
mov byte [esi], 0x9f
mov eax, dword [edx + 0x20]
dec eax
cmp dword [esp + 0x14], eax
jne 0x47903f
mov ecx, edx
mov dword [ecx + 0x20], eax
mov edx, dword [esp + 0x44]
mov dword [esp + 0x8c], edi
mov dword [esp + 0x54], edx
jmp 0x47910f
mov esi, dword [esp + 0x34]
mov eax, dword [esp + 0x38]
call fcn.00462170
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x38]
mov esi, dword [eax + 0x20]
mov eax, dword [eax + 0x18]
cmp dword [eax + 0x54], esi
jg 0x47908b
mov ecx, dword [esp + 0x38]
push ecx
call fcn.00436c80
add esp, 4
test eax, eax
je 0x47908b
mov eax, 1
jmp 0x4790b9
mov eax, dword [esp + 0x38]
inc dword [eax + 0x20]
mov eax, dword [eax + 4]
mov ecx, dword [esp + 0x44]
lea edx, [esi + esi*4]
lea eax, [eax + edx*4]
mov edx, dword [esp + 0x54]
mov byte [eax + 3], bl
mov dword [eax + 4], ecx
mov dword [eax + 8], edi
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], ebx
mov word [eax], 0x31
mov eax, esi
mov esi, dword [esp + 0x38]
mov ecx, edi
mov edi, dword [esp + 0x14]
push esi
call fcn.00437690
mov edi, dword [esi + 0x20]
mov eax, dword [esi + 0x18]
add esp, 4
cmp dword [eax + 0x54], edi
jg 0x4790e4
push esi
call fcn.00436c80
add esp, 4
test eax, eax
jne 0x47910f
mov edx, dword [esi + 4]
inc dword [esi + 0x20]
lea ecx, [edi + edi*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x54]
mov byte [eax + 3], bl
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov word [eax], 0x6f
mov eax, dword [esp + 0x10]
push eax
call fcn.004867c0
mov edi, dword [esp + 0x3c]
mov ecx, dword [esp + 0x74]
add esp, 4
test byte [ecx + 0x18], 0x80
je 0x479183
mov edx, dword [ebp + 8]
cmp dword [edx + 0x19c], ebx
jne 0x479183
mov eax, edx
inc dword [eax + 0x48]
mov esi, dword [edi + 0x20]
mov ecx, dword [edi + 0x18]
mov eax, dword [eax + 0x48]
mov dword [esp + 0x88], eax
cmp dword [ecx + 0x54], esi
jg 0x47915c
push edi
call fcn.00436c80
add esp, 4
test eax, eax
jne 0x479183
mov eax, dword [edi + 4]
inc dword [edi + 0x20]
mov ecx, dword [esp + 0x88]
lea edx, [esi + esi*4]
lea eax, [eax + edx*4]
mov byte [eax + 3], bl
mov dword [eax + 4], ebx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov word [eax], 0x17
mov ecx, dword [edi + 0x18]
mov eax, dword [ecx + 0x6c]
lea edx, [eax + 1]
mov dword [ecx + 0x6c], edx
lea edx, [eax - 1]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], eax
test eax, edx
jne 0x4791c5
lea ecx, [eax*8 + 4]
push ebx
push ecx
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx + 0x70]
mov esi, dword [ecx]
call fcn.00418620
mov edx, dword [esp + 0x18]
mov dword [edx + 0x70], eax
mov eax, dword [esp + 0x1c]
add esp, 8
mov ecx, edx
mov ecx, dword [ecx + 0x70]
cmp ecx, ebx
je 0x4791d3
mov dword [ecx + eax*4], 0xffffffff
or ecx, 0xffffffff
sub ecx, eax
mov dword [esp + 0x10], ecx
cmp dword [esp + 0x60], ebx
jne 0x479268
mov ecx, 5
cmp dword [ebp + 0x18], ecx
jne 0x479206
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x74]
push eax
push 1
push esi
call fcn.004f8f00
add esp, 0xc
jmp 0x479221
mov edx, dword [esp + 0xc]
mov eax, dword [edx + 8]
cmp eax, ebx
je 0x47921d
cmp byte [eax + 0x32], cl
je 0x4791f0
mov eax, dword [eax + 0x14]
cmp eax, ebx
jne 0x479211
mov esi, dword [esp + 0x74]
cmp dword [esp + 0x4c], ebx
je 0x47924b
mov eax, dword [esp + 0x90]
cmp eax, ebx
jl 0x479239
sub eax, dword [esp + 0x30]
mov byte [eax + esi], bl
mov eax, dword [esp + 0x94]
cmp eax, ebx
jl 0x47924b
sub eax, dword [esp + 0x30]
mov byte [eax + esi], bl
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0xc]
mov eax, dword [ebp + 8]
push ebx
push ebx
push esi
push ecx
push 0x37
push edx
push eax
call fcn.00465a50
add esp, 0x1c
jmp 0x47926c
mov esi, dword [esp + 0x74]
cmp dword [esp + 0x4c], ebx
je 0x47930f
sub esi, dword [esp + 0x30]
mov ecx, dword [esp + 0x24]
cmp byte [esi + ecx], bl
je 0x4792ac
cmp dword [esp + 0x60], ebx
jne 0x4792ac
mov edx, dword [esp + 0x8c]
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x10]
push edx
mov edx, dword [esp + 0x28]
push eax
push ecx
push edx
push 0x45
mov eax, edi
call fcn.00437060
add esp, 0x14
mov eax, dword [esp + 0x10]
mov dword [esp + 0x30], eax
cmp dword [esp + 0x34], ebx
je 0x4792c4
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x18], ecx
jmp 0x4792cc
mov edx, dword [esp + 0x40]
mov dword [esp + 0x18], edx
mov esi, dword [edi + 0x20]
mov eax, dword [edi + 0x18]
cmp dword [eax + 0x54], esi
jg 0x4792e8
push edi
call fcn.00436c80
add esp, 4
test eax, eax
jne 0x4794ba
mov edx, dword [edi + 4]
inc dword [edi + 0x20]
lea ecx, [esi + esi*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x10]
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov dword [eax + 0xc], ebx
mov word [eax], 0x4c
jmp 0x4794b4
cmp dword [esp + 0x34], ebx
je 0x479424
mov ecx, dword [edi + 0x18]
mov eax, dword [ecx + 0x6c]
lea edx, [eax + 1]
mov dword [ecx + 0x6c], edx
lea edx, [eax - 1]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], eax
test eax, edx
jne 0x47935b
lea ecx, [eax*8 + 4]
push ebx
push ecx
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx + 0x70]
mov esi, dword [ecx]
call fcn.00418620
mov edx, dword [esp + 0x1c]
mov dword [edx + 0x70], eax
mov eax, dword [esp + 0x20]
add esp, 8
mov ecx, edx
mov ecx, dword [ecx + 0x70]
cmp ecx, ebx
je 0x479369
mov dword [ecx + eax*4], 0xffffffff
mov esi, dword [edi + 0x20]
or ecx, 0xffffffff
sub ecx, eax
mov eax, dword [edi + 0x18]
mov dword [esp + 0x30], ecx
cmp dword [eax + 0x54], esi
jg 0x47938a
push edi
call fcn.00436c80
add esp, 4
test eax, eax
jne 0x4793b5
mov edx, dword [edi + 4]
inc dword [edi + 0x20]
lea ecx, [esi + esi*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x10]
mov byte [eax + 3], bl
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov word [eax], 0x6d
mov esi, dword [edi + 0x20]
mov eax, dword [edi + 0x18]
cmp dword [eax + 0x54], esi
jg 0x4793d4
push edi
call fcn.00436c80
add esp, 4
test eax, eax
je 0x4793d4
mov esi, 1
jmp 0x4793ff
mov edx, dword [edi + 4]
inc dword [edi + 0x20]
lea ecx, [esi + esi*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x54]
mov byte [eax + 3], bl
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov word [eax], 0x66
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x24]
push ebx
push eax
push ecx
push edx
push 0x45
mov eax, edi
mov dword [esp + 0x6c], esi
call fcn.00437060
add esp, 0x14
jmp 0x4794ba
mov esi, dword [edi + 0x20]
mov eax, dword [edi + 0x18]
cmp dword [eax + 0x54], esi
jg 0x479446
push edi
call fcn.00436c80
add esp, 4
test eax, eax
je 0x479446
mov dword [esp + 0x30], 1
jmp 0x479476
mov edx, dword [edi + 4]
inc dword [edi + 0x20]
lea ecx, [esi + esi*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x10]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x40]
mov byte [eax + 3], bl
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ebx
mov word [eax], 0x82
mov dword [esp + 0x30], esi
mov esi, dword [edi + 0x20]
mov edx, dword [edi + 0x18]
cmp dword [edx + 0x54], esi
jg 0x47948e
push edi
call fcn.00436c80
add esp, 4
test eax, eax
jne 0x4794ba
mov ecx, dword [edi + 4]
inc dword [edi + 0x20]
mov edx, dword [esp + 0x24]
lea eax, [esi + esi*4]
lea eax, [ecx + eax*4]
mov ecx, dword [esp + 0x30]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x40]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov word [eax], 0x49
mov dword [eax + 0x10], ebx
mov byte [eax + 3], bl
cmp byte [esp + 0x23], bl
je 0x4795cb
mov eax, dword [esp + 0x64]
cmp eax, ebx
je 0x479523
cmp byte [eax], 0x9f
jne 0x479523
mov eax, dword [eax + 0x1c]
mov ecx, dword [ebp + 8]
mov esi, dword [ecx + 8]
mov edx, dword [esi + 0x18]
mov dword [esp + 0x28], eax
mov eax, dword [esi + 0x20]
mov dword [esp + 0x18], eax
cmp dword [edx + 0x54], eax
jg 0x479502
push esi
call fcn.00436c80
add esp, 4
test eax, eax
jne 0x47958f
mov eax, dword [esp + 0x18]
mov ecx, dword [esi + 4]
inc dword [esi + 0x20]
mov edx, dword [esp + 0x28]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
mov ecx, dword [esp + 0x68]
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov word [eax], 0x1f
jmp 0x479586
mov esi, dword [esp + 0x68]
mov edx, dword [ebp + 8]
push esi
push eax
push edx
call fcn.0044d270
add esp, 0xc
mov dword [esp + 0x28], eax
cmp eax, esi
je 0x47958f
mov eax, dword [ebp + 8]
mov esi, dword [eax + 8]
cmp esi, ebx
je 0x47958f
mov eax, dword [esi + 0x20]
mov ecx, dword [esi + 0x18]
mov dword [esp + 0x18], eax
cmp dword [ecx + 0x54], eax
jg 0x479567
push esi
call fcn.00436c80
add esp, 4
test eax, eax
jne 0x47958f
mov eax, dword [esp + 0x18]
inc dword [esi + 0x20]
mov ecx, dword [esp + 0x28]
lea edx, [eax + eax*4]
mov eax, dword [esi + 4]
lea eax, [eax + edx*4]
mov edx, dword [esp + 0x68]
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov word [eax], 0x20
mov dword [eax + 0x10], ebx
mov dword [eax + 0xc], ebx
mov byte [eax + 3], bl
mov esi, dword [edi + 0x20]
mov eax, dword [edi + 0x18]
cmp dword [eax + 0x54], esi
jg 0x4795a7
push edi
call fcn.00436c80
add esp, 4
test eax, eax
jne 0x4795cb
mov edx, dword [edi + 4]
inc dword [edi + 0x20]
lea ecx, [esi + esi*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x68]
mov byte [eax + 3], bl
mov dword [eax + 4], ecx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov word [eax], 0x26
cmp byte [esp + 0x2f], bl
jne 0x4796aa
cmp dword [esp + 0x5c], ebx
jne 0x4796b4
cmp dword [esp + 0x78], ebx
je 0x47974d
mov dword [esp + 0x64], ebx
mov ecx, dword [ebp + 0x18]
mov edx, dword [esp + 0xc]
mov eax, dword [ebp + 0x10]
push ecx
mov ecx, dword [ebp + 8]
push edx
push 3
push ebx
push eax
mov eax, dword [esp + 0x8c]
push ecx
call fcn.00478460
or dword [esp + 0x7c], eax
mov eax, dword [esp + 0x24]
xor edx, edx
add esp, 0x18
xor esi, esi
cmp dx, word [eax + 0x22]
jge 0x479701
mov dword [esp + 0x28], ebx
lea ebx, [ebx]
mov eax, dword [esp + 0x64]
cmp eax, 0xffffffff
je 0x4796ce
cmp esi, 0x20
jge 0x47964f
mov edx, 1
mov ecx, esi
shl edx, cl
test eax, edx
jne 0x4796ce
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 4]
mov edx, dword [esp + 0x28]
test byte [ecx + edx + 0x17], 1
jne 0x4796ce
mov eax, dword [edi + 0x20]
mov ecx, dword [edi + 0x18]
mov dword [esp + 0x18], eax
cmp dword [ecx + 0x54], eax
jg 0x479681
push edi
call fcn.00436c80
add esp, 4
test eax, eax
jne 0x4796eb
mov eax, dword [esp + 0x18]
inc dword [edi + 0x20]
mov ecx, dword [esp + 0x7c]
lea edx, [eax + eax*4]
mov eax, dword [edi + 4]
lea eax, [eax + edx*4]
lea edx, [esi + ecx]
mov byte [eax + 3], bl
mov dword [eax + 4], ebx
mov dword [eax + 8], edx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov word [eax], 0x1a
jmp 0x4796eb
cmp dword [esp + 0x5c], ebx
je 0x4795e9
mov edx, dword [esp + 0xc]
mov eax, dword [ebp + 8]
push edx
push eax
call fcn.00460f80
add esp, 8
mov dword [esp + 0x64], eax
jmp 0x4795ed
mov eax, dword [esp + 0x7c]
mov edx, dword [esp + 0x24]
lea ecx, [esi + eax]
mov eax, dword [esp + 0xc]
push ecx
push esi
push edx
push eax
mov eax, edi
call fcn.0044cfa0
add esp, 0x10
mov ecx, dword [esp + 0xc]
movsx edx, word [ecx + 0x22]
add dword [esp + 0x28], 0x18
inc esi
cmp esi, edx
jl 0x479630
cmp byte [esp + 0x23], bl
jne 0x47974d
cmp dword [esp + 0x34], ebx
jne 0x47974d
mov esi, dword [edi + 0x20]
mov eax, dword [edi + 0x18]
cmp dword [eax + 0x54], esi
jg 0x479725
push edi
call fcn.00436c80
add esp, 4
test eax, eax
jne 0x47974d
mov edx, dword [edi + 4]
inc dword [edi + 0x20]
lea ecx, [esi + esi*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x68]
mov byte [eax + 3], bl
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov word [eax], 0x1f
mov eax, dword [ebp + 0x18]
mov esi, dword [esp + 0xc]
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
push eax
mov eax, dword [esp + 0x7c]
push esi
push 1
push 1
push ecx
push edx
call fcn.00478460
mov dword [esp + 0x40], eax
xor eax, eax
add esp, 0x18
mov dword [esp + 0x44], ebx
cmp ax, word [esi + 0x22]
jge 0x4799b9
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x14], ecx
lea ebx, [ebx]
mov edx, dword [esp + 0xc]
movsx eax, word [edx + 0x20]
mov ecx, dword [esp + 0x44]
cmp ecx, eax
jne 0x47982c
mov eax, dword [edi + 0x20]
mov esi, dword [edi + 0x18]
mov dword [esp + 0x18], eax
cmp dword [esi + 0x54], eax
jg 0x479824
mov eax, dword [esi + 0x54]
cmp eax, ebx
je 0x4797be
add eax, eax
jmp 0x4797c3
mov eax, 0x33
lea ecx, [eax + eax*4]
mov eax, dword [esi]
add ecx, ecx
add ecx, ecx
push ebx
mov ebx, dword [edi + 4]
push ecx
call fcn.00418550
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x47999a
mov eax, dword [esi]
test eax, eax
je 0x479802
cmp ebx, dword [eax + 0x114]
jb 0x479802
cmp ebx, dword [eax + 0x118]
jae 0x479802
movzx ecx, word [eax + 0xf8]
jmp 0x47980e
push ebx
call dword [0x54c280]
mov ecx, eax
add esp, 4
mov eax, 0xcccccccd
mul ecx
mov eax, dword [esp + 0x18]
shr edx, 4
mov dword [esi + 0x54], edx
mov dword [edi + 4], ebx
xor ebx, ebx
lea edx, [eax + eax*4]
jmp 0x47995f
mov eax, dword [esp + 0x3c]
mov eax, dword [eax + ecx*4]
cmp eax, ebx
jl 0x479928
mov edx, dword [ebp + 0x10]
lea ecx, [eax + eax*2]
mov eax, dword [edx + 4]
mov eax, dword [eax + ecx*8]
cmp eax, ebx
je 0x4798ae
cmp byte [eax], 0x9f
jne 0x4798ae
mov ecx, dword [eax + 0x1c]
mov edx, dword [ebp + 8]
mov esi, dword [edx + 8]
mov eax, dword [esi + 0x20]
mov dword [esp + 0x7c], ecx
mov ecx, dword [esi + 0x18]
mov dword [esp + 0x18], eax
cmp dword [ecx + 0x54], eax
jg 0x479881
push esi
call fcn.00436c80
add esp, 4
test eax, eax
jne 0x47999c
mov eax, dword [esp + 0x18]
inc dword [esi + 0x20]
mov ecx, dword [esp + 0x7c]
lea edx, [eax + eax*4]
mov eax, dword [esi + 4]
lea eax, [eax + edx*4]
mov edx, dword [esp + 0x14]
mov byte [eax + 3], bl
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov word [eax], 0x1f
jmp 0x47999c
mov esi, dword [esp + 0x14]
push esi
push eax
mov eax, dword [ebp + 8]
push eax
call fcn.0044d270
add esp, 0xc
mov dword [esp + 0x7c], eax
cmp eax, esi
je 0x47999c
mov ecx, dword [ebp + 8]
mov esi, dword [ecx + 8]
cmp esi, ebx
je 0x47999c
mov eax, dword [esi + 0x20]
mov edx, dword [esi + 0x18]
mov dword [esp + 0x18], eax
cmp dword [edx + 0x54], eax
jg 0x4798fe
push esi
call fcn.00436c80
add esp, 4
test eax, eax
jne 0x47999c
mov eax, dword [esp + 0x18]
mov ecx, dword [esi + 4]
inc dword [esi + 0x20]
mov edx, dword [esp + 0x7c]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
mov ecx, dword [esp + 0x14]
mov byte [eax + 3], bl
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov word [eax], 0x20
jmp 0x47999c
test dword [esp + 0x50], 1
je 0x479982
cmp ecx, 0x1f
jg 0x479982
mov eax, 1
shl eax, cl
test dword [esp + 0x28], eax
jne 0x479982
mov esi, dword [edi + 0x20]
mov ecx, dword [edi + 0x18]
cmp dword [ecx + 0x54], esi
jg 0x47995c
push edi
call fcn.00436c80
add esp, 4
test eax, eax
jne 0x47999c
lea edx, [esi + esi*4]
mov eax, dword [edi + 4]
inc dword [edi + 0x20]
mov ecx, dword [esp + 0x14]
lea eax, [eax + edx*4]
mov byte [eax + 3], bl
mov dword [eax + 4], ebx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov word [eax], 0x1a
jmp 0x47999c
mov eax, dword [esp + 0x14]
push eax
push ecx
mov ecx, dword [esp + 0x2c]
push ecx
push edx
mov eax, edi
call fcn.0044cfa0
add esp, 0x10
jmp 0x47999c
xor ebx, ebx
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0x44]
movsx ecx, word [edx + 0x22]
inc dword [esp + 0x14]
inc eax
mov dword [esp + 0x44], eax
cmp eax, ecx
jl 0x479790
test byte [esp + 0x50], 1
je 0x479b4c
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0xc]
push edx
mov ebx, edi
call fcn.004621f0
mov ebx, dword [esp + 0x7c]
add esp, 4
test ebx, ebx
je 0x479a26
mov esi, dword [esp + 0x30]
cmp byte [ebx + 8], 0x6e
jne 0x479a1f
cmp byte [ebx + 9], 1
jne 0x479a1f
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebx + 0x10]
push eax
push ecx
call fcn.00477a40
add esp, 8
test eax, eax
je 0x479a1f
mov edx, dword [ebp + 0x18]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0xc]
push esi
push edx
mov edx, dword [ebp + 8]
push eax
push ecx
push ebx
push edx
call fcn.004782a0
add esp, 0x18
mov ebx, dword [ebx + 0x20]
test ebx, ebx
jne 0x4799e3
cmp dword [esp + 0x34], 0
je 0x479a55
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x30]
push eax
mov eax, dword [esp + 0x28]
push ecx
push edx
push eax
push 0x45
mov eax, edi
call fcn.00437060
add esp, 0x14
jmp 0x479b05
mov eax, dword [edi + 0x20]
mov esi, dword [edi + 0x18]
mov dword [esp + 0x18], eax
cmp dword [esi + 0x54], eax
jg 0x479ad4
mov eax, dword [esi + 0x54]
test eax, eax
je 0x479a6f
add eax, eax
jmp 0x479a74
mov eax, 0x33
mov ebx, dword [edi + 4]
lea ecx, [eax + eax*4]
mov eax, dword [esi]
add ecx, ecx
add ecx, ecx
push 0
push ecx
call fcn.00418550
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x479b05
mov eax, dword [esi]
test eax, eax
je 0x479ab4
cmp ebx, dword [eax + 0x114]
jb 0x479ab4
cmp ebx, dword [eax + 0x118]
jae 0x479ab4
movzx ecx, word [eax + 0xf8]
jmp 0x479ac0
push ebx
call dword [0x54c280]
mov ecx, eax
add esp, 4
mov eax, 0xcccccccd
mul ecx
mov eax, dword [esp + 0x18]
shr edx, 4
mov dword [esi + 0x54], edx
mov dword [edi + 4], ebx
inc dword [edi + 0x20]
mov ecx, dword [esp + 0x24]
lea edx, [eax + eax*4]
mov eax, dword [edi + 4]
lea eax, [eax + edx*4]
mov edx, dword [esp + 0x30]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x40]
mov byte [eax + 3], 0
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], 0
mov word [eax], 0x49
mov eax, dword [esp + 0xc]
xor edx, edx
xor ebx, ebx
cmp dx, word [eax + 0x22]
jge 0x479b4a
mov ecx, dword [esp + 0x3c]
cmp dword [ecx + ebx*4], 0
mov esi, dword [esp + 0xc]
jge 0x479b41
movsx edx, word [esi + 0x20]
cmp ebx, edx
je 0x479b41
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x24]
add eax, ebx
push eax
push ebx
push ecx
push esi
mov eax, edi
call fcn.0044cfa0
add esp, 0x10
movsx edx, word [esi + 0x22]
inc ebx
cmp ebx, edx
jl 0x479b13
xor ebx, ebx
cmp dword [esp + 0x60], ebx
jne 0x479e53
mov ecx, dword [esp + 0x30]
mov edx, dword [ebp + 0x18]
mov esi, dword [esp + 0x40]
lea eax, [esp + 0x50]
push eax
mov eax, dword [esp + 0x4c]
push ecx
mov ecx, dword [esp + 0x70]
push edx
mov edx, dword [esp + 0x78]
push eax
mov eax, dword [esp + 0x34]
push esi
push ecx
mov ecx, dword [esp + 0x9c]
push edx
mov edx, dword [esp + 0x28]
push eax
mov eax, dword [ebp + 8]
push ecx
push edx
push eax
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x7c], ebx
call fcn.00463f80
add esp, 0x2c
cmp dword [esp + 0x5c], ebx
je 0x479bc5
movzx ecx, byte [esp + 0x48]
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0xc]
push ecx
mov ecx, dword [ebp + 8]
push edx
push ebx
push esi
push eax
push ecx
call fcn.00460940
add esp, 0x18
cmp dword [esp + 0x50], ebx
jne 0x479bd5
cmp byte [esp + 0x48], bl
je 0x479cbb
cmp dword [esp + 0x34], ebx
je 0x479c03
mov edx, dword [esp + 0x8c]
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x24]
push edx
push eax
push ebx
push ecx
push 0x45
mov eax, edi
call fcn.00437060
add esp, 0x14
mov dword [esp + 0x60], eax
jmp 0x479cbb
mov eax, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
mov dword [esp + 0x1c], eax
cmp dword [eax + 0x54], esi
jg 0x479c8f
mov eax, dword [eax + 0x54]
cmp eax, ebx
je 0x479c21
add eax, eax
jmp 0x479c26
mov eax, 0x33
lea edx, [eax + eax*4]
mov eax, dword [esp + 0x1c]
mov eax, dword [eax]
add edx, edx
add edx, edx
push ebx
mov ebx, dword [edi + 4]
push edx
call fcn.00418550
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x479d11
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
test eax, eax
je 0x479c6d
cmp ebx, dword [eax + 0x114]
jb 0x479c6d
cmp ebx, dword [eax + 0x118]
jae 0x479c6d
movzx ecx, word [eax + 0xf8]
jmp 0x479c79
push ebx
call dword [0x54c280]
mov ecx, eax
add esp, 4
mov eax, 0xcccccccd
mul ecx
mov eax, dword [esp + 0x1c]
shr edx, 4
mov dword [eax + 0x54], edx
mov dword [edi + 4], ebx
xor ebx, ebx
mov edx, dword [edi + 4]
inc dword [edi + 0x20]
lea ecx, [esi + esi*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x40]
mov byte [eax + 3], bl
mov dword [eax + 4], ecx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], ebx
mov word [eax], 0x49
mov dword [esp + 0x60], esi
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x24]
push eax
mov eax, dword [ebp + 8]
push ecx
mov ecx, dword [esp + 0x14]
push edx
push eax
call fcn.0045bc80
add esp, 0x10
cmp dword [esp + 0x5c], ebx
jne 0x479cf3
cmp byte [esp + 0x48], bl
jne 0x479cf3
cmp dword [esp + 0x34], ebx
je 0x479da7
mov eax, dword [edi + 0x20]
mov esi, dword [edi + 0x18]
mov dword [esp + 0x18], eax
cmp dword [esi + 0x54], eax
jg 0x479d7f
mov eax, dword [esi + 0x54]
cmp eax, ebx
je 0x479d1d
add eax, eax
jmp 0x479d22
mov dword [esp + 0x60], 1
xor ebx, ebx
jmp 0x479cbb
mov eax, 0x33
lea ecx, [eax + eax*4]
mov eax, dword [esi]
add ecx, ecx
add ecx, ecx
push ebx
mov ebx, dword [edi + 4]
push ecx
call fcn.00418550
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x479da5
mov eax, dword [esi]
test eax, eax
je 0x479d5d
cmp ebx, dword [eax + 0x114]
jb 0x479d5d
cmp ebx, dword [eax + 0x118]
jae 0x479d5d
movzx ecx, word [eax + 0xf8]
jmp 0x479d69
push ebx
call dword [0x54c280]
mov ecx, eax
add esp, 4
mov eax, 0xcccccccd
mul ecx
mov eax, dword [esp + 0x18]
shr edx, 4
mov dword [esi + 0x54], edx
mov dword [edi + 4], ebx
xor ebx, ebx
inc dword [edi + 0x20]
mov ecx, dword [esp + 0x24]
lea edx, [eax + eax*4]
mov eax, dword [edi + 4]
lea eax, [eax + edx*4]
mov byte [eax + 3], bl
mov dword [eax + 4], ecx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov word [eax], 0x62
jmp 0x479da7
xor ebx, ebx
cmp dword [esp + 0x50], ebx
jne 0x479db3
cmp byte [esp + 0x48], bl
je 0x479dd2
mov eax, dword [edi + 0x20]
mov ecx, dword [esp + 0x60]
cmp eax, ecx
jbe 0x479dc8
lea edx, [ecx + ecx*4]
mov ecx, dword [edi + 4]
mov dword [ecx + edx*4 + 8], eax
mov edx, dword [edi + 0x20]
mov eax, dword [edi + 0x18]
dec edx
mov dword [eax + 0x58], edx
mov esi, dword [esp + 0x5c]
cmp esi, ebx
je 0x479dfc
movzx ecx, byte [esp + 0x48]
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x68]
push ecx
mov ecx, dword [esp + 0x10]
push edx
mov edx, dword [ebp + 8]
push eax
push ebx
push ecx
push edx
call fcn.00460940
add esp, 0x18
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x6c]
push ebx
push ebx
push 1
push eax
mov eax, dword [esp + 0x34]
push ecx
mov ecx, dword [esp + 0x20]
push edx
mov edx, dword [ebp + 8]
push eax
push ecx
push edx
call fcn.00465750
add esp, 0x24
cmp esi, ebx
je 0x479e53
movzx eax, byte [esp + 0x48]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x40]
mov esi, dword [esp + 0xc]
mov edi, dword [ebp + 8]
push eax
mov eax, dword [ebp + 0x10]
push ecx
push edx
push eax
call fcn.00461db0
mov edi, dword [esp + 0x48]
add esp, 0x10
mov ecx, dword [esp + 0x70]
test byte [ecx + 0x18], 0x80
je 0x479f24
mov edx, dword [ebp + 8]
cmp dword [edx + 0x19c], ebx
jne 0x479f24
mov eax, dword [edi + 0x20]
mov esi, dword [edi + 0x18]
mov dword [esp + 0x18], eax
cmp dword [esi + 0x54], eax
jg 0x479ef4
mov eax, dword [esi + 0x54]
cmp eax, ebx
je 0x479e8e
add eax, eax
jmp 0x479e93
mov eax, 0x33
lea eax, [eax + eax*4]
add eax, eax
add eax, eax
push ebx
mov ebx, dword [edi + 4]
push eax
mov eax, dword [esi]
call fcn.00418550
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x479f22
mov eax, dword [esi]
test eax, eax
je 0x479ed2
cmp ebx, dword [eax + 0x114]
jb 0x479ed2
cmp ebx, dword [eax + 0x118]
jae 0x479ed2
movzx ecx, word [eax + 0xf8]
jmp 0x479ede
push ebx
call dword [0x54c280]
mov ecx, eax
add esp, 4
mov eax, 0xcccccccd
mul ecx
mov eax, dword [esp + 0x18]
shr edx, 4
mov dword [esi + 0x54], edx
mov dword [edi + 4], ebx
xor ebx, ebx
lea edx, [eax + eax*4]
mov eax, dword [edi + 4]
lea eax, [eax + edx*4]
mov edx, dword [esp + 0x88]
mov ecx, 1
add dword [edi + 0x20], ecx
mov byte [eax + 3], bl
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov word [eax], 0x25
jmp 0x479f24
xor ebx, ebx
mov esi, dword [esp + 0x78]
cmp esi, ebx
je 0x479f77
lea esp, [esp]
cmp byte [esi + 8], 0x6e
jne 0x479f70
cmp byte [esi + 9], 2
jne 0x479f70
mov eax, dword [ebp + 0x10]
mov ecx, dword [esi + 0x10]
push eax
push ecx
call fcn.00477a40
add esp, 8
test eax, eax
je 0x479f70
mov edx, dword [esp + 0x30]
mov eax, dword [ebp + 0x18]
mov ecx, dword [esp + 0x40]
push edx
mov edx, dword [esp + 0x10]
push eax
mov eax, dword [ebp + 8]
push ecx
push edx
push esi
push eax
call fcn.004782a0
add esp, 0x18
mov esi, dword [esi + 0x20]
cmp esi, ebx
jne 0x479f30
cmp dword [esp + 0x4c], ebx
jne 0x47a107
cmp dword [esp + 0x34], ebx
je 0x47a05f
mov ecx, dword [edi + 0x18]
or eax, 0xffffffff
sub eax, dword [esp + 0x30]
js 0x479fa4
mov edx, dword [ecx + 0x70]
cmp edx, ebx
je 0x479fa4
mov esi, dword [edi + 0x20]
mov dword [edx + eax*4], esi
mov edx, dword [edi + 0x20]
dec edx
mov dword [ecx + 0x58], edx
mov eax, dword [edi + 0x20]
mov esi, dword [edi + 0x18]
mov dword [esp + 0x18], eax
cmp dword [esi + 0x54], eax
jg 0x47a02f
mov eax, dword [esi + 0x54]
cmp eax, ebx
je 0x479fc9
add eax, eax
jmp 0x479fce
mov eax, 0x33
lea eax, [eax + eax*4]
add eax, eax
add eax, eax
push ebx
mov ebx, dword [edi + 4]
push eax
mov eax, dword [esi]
call fcn.00418550
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x47a105
mov eax, dword [esi]
test eax, eax
je 0x47a00d
cmp ebx, dword [eax + 0x114]
jb 0x47a00d
cmp ebx, dword [eax + 0x118]
jae 0x47a00d
movzx ecx, word [eax + 0xf8]
jmp 0x47a019
push ebx
call dword [0x54c280]
mov ecx, eax
add esp, 4
mov eax, 0xcccccccd
mul ecx
mov eax, dword [esp + 0x18]
shr edx, 4
mov dword [esi + 0x54], edx
mov dword [edi + 4], ebx
xor ebx, ebx
mov edx, dword [edi + 4]
inc dword [edi + 0x20]
lea ecx, [eax + eax*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x58]
mov byte [eax + 3], bl
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov word [eax], 8
jmp 0x47a107
mov eax, dword [edi + 0x20]
mov esi, dword [edi + 0x18]
mov dword [esp + 0x58], eax
cmp dword [esi + 0x54], eax
jg 0x47a0df
mov eax, dword [esi + 0x54]
cmp eax, ebx
je 0x47a07d
add eax, eax
jmp 0x47a082
mov eax, 0x33
lea eax, [eax + eax*4]
add eax, eax
add eax, eax
push ebx
mov ebx, dword [edi + 4]
push eax
mov eax, dword [esi]
call fcn.00418550
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x47a105
mov eax, dword [esi]
test eax, eax
je 0x47a0bd
cmp ebx, dword [eax + 0x114]
jb 0x47a0bd
cmp ebx, dword [eax + 0x118]
jae 0x47a0bd
movzx ecx, word [eax + 0xf8]
jmp 0x47a0c9
push ebx
call dword [0x54c280]
mov ecx, eax
add esp, 4
mov eax, 0xcccccccd
mul ecx
mov eax, dword [esp + 0x58]
shr edx, 4
mov dword [esi + 0x54], edx
mov dword [edi + 4], ebx
xor ebx, ebx
mov edx, dword [edi + 4]
inc dword [edi + 0x20]
lea ecx, [eax + eax*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x30]
mov byte [eax + 3], bl
mov dword [eax + 4], ebx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov word [eax], 0xe
jmp 0x47a107
xor ebx, ebx
mov ecx, dword [edi + 0x18]
or eax, 0xffffffff
sub eax, dword [esp + 0x10]
js 0x47a120
mov edx, dword [ecx + 0x70]
cmp edx, ebx
je 0x47a120
mov esi, dword [edi + 0x20]
mov dword [edx + eax*4], esi
mov edx, dword [edi + 0x20]
mov eax, dword [esp + 0xc]
dec edx
mov dword [ecx + 0x58], edx
mov eax, dword [eax + 8]
mov dword [esp + 0x10], eax
cmp eax, ebx
je 0x47a21f
mov edx, dword [esp + 0x74]
mov ecx, dword [esp + 0x6c]
inc edx
mov dword [esp + 0x50], ecx
mov dword [esp + 0x1c], edx
mov eax, dword [esp + 0x1c]
cmp byte [eax], bl
je 0x47a1ff
mov eax, dword [edi + 0x20]
mov esi, dword [edi + 0x18]
mov dword [esp + 0x58], eax
cmp dword [esi + 0x54], eax
jg 0x47a1d7
mov eax, dword [esi + 0x54]
cmp eax, ebx
je 0x47a175
add eax, eax
jmp 0x47a17a
mov eax, 0x33
lea ecx, [eax + eax*4]
mov eax, dword [esi]
add ecx, ecx
add ecx, ecx
push ebx
mov ebx, dword [edi + 4]
push ecx
call fcn.00418550
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x47a1fd
mov eax, dword [esi]
test eax, eax
je 0x47a1b5
cmp ebx, dword [eax + 0x114]
jb 0x47a1b5
cmp ebx, dword [eax + 0x118]
jae 0x47a1b5
movzx ecx, word [eax + 0xf8]
jmp 0x47a1c1
push ebx
call dword [0x54c280]
mov ecx, eax
add esp, 4
mov eax, 0xcccccccd
mul ecx
mov eax, dword [esp + 0x58]
shr edx, 4
mov dword [esi + 0x54], edx
mov dword [edi + 4], ebx
xor ebx, ebx
inc dword [edi + 0x20]
mov ecx, dword [esp + 0x50]
lea edx, [eax + eax*4]
mov eax, dword [edi + 4]
lea eax, [eax + edx*4]
mov byte [eax + 3], bl
mov dword [eax + 4], ecx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov word [eax], 0x3d
jmp 0x47a1ff
xor ebx, ebx
mov edx, dword [esp + 0x10]
mov eax, dword [edx + 0x14]
mov ecx, 1
add dword [esp + 0x1c], ecx
add dword [esp + 0x50], ecx
mov dword [esp + 0x10], eax
cmp eax, ebx
jne 0x47a14b
mov eax, dword [esp + 0x6c]
cmp dword [esp + 0x24], eax
jge 0x47a2d5
mov eax, dword [edi + 0x20]
mov esi, dword [edi + 0x18]
mov dword [esp + 0x58], eax
cmp dword [esi + 0x54], eax
jg 0x47a2ad
mov eax, dword [esi + 0x54]
cmp eax, ebx
je 0x47a24b
add eax, eax
jmp 0x47a250
mov eax, 0x33
lea ecx, [eax + eax*4]
mov eax, dword [esi]
add ecx, ecx
add ecx, ecx
push ebx
mov ebx, dword [edi + 4]
push ecx
call fcn.00418550
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x47a2d3
mov eax, dword [esi]
test eax, eax
je 0x47a28b
cmp ebx, dword [eax + 0x114]
jb 0x47a28b
cmp ebx, dword [eax + 0x118]
jae 0x47a28b
movzx ecx, word [eax + 0xf8]
jmp 0x47a297
push ebx
call dword [0x54c280]
mov ecx, eax
add esp, 4
mov eax, 0xcccccccd
mul ecx
mov eax, dword [esp + 0x58]
shr edx, 4
mov dword [esi + 0x54], edx
mov dword [edi + 4], ebx
xor ebx, ebx
inc dword [edi + 0x20]
mov ecx, dword [esp + 0x24]
lea edx, [eax + eax*4]
mov eax, dword [edi + 4]
lea eax, [eax + edx*4]
mov byte [eax + 3], bl
mov dword [eax + 4], ecx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov word [eax], 0x3d
jmp 0x47a2d5
xor ebx, ebx
mov esi, dword [ebp + 8]
cmp byte [esi + 0x12], bl
jne 0x47a2ee
cmp dword [esi + 0x19c], ebx
jne 0x47a2ee
push esi
call fcn.00462870
add esp, 4
mov edx, dword [esp + 0x70]
test byte [edx + 0x18], 0x80
je 0x47a3ed
cmp dword [esi + 0x19c], ebx
jne 0x47a3ed
cmp byte [esi + 0x12], bl
jne 0x47a3ed
mov eax, dword [edi + 0x20]
mov esi, dword [edi + 0x18]
mov dword [esp + 0x58], eax
cmp dword [esi + 0x54], eax
jg 0x47a395
mov eax, dword [esi + 0x54]
cmp eax, ebx
je 0x47a32f
add eax, eax
jmp 0x47a334
mov eax, 0x33
lea eax, [eax + eax*4]
add eax, eax
add eax, eax
push ebx
mov ebx, dword [edi + 4]
push eax
mov eax, dword [esi]
call fcn.00418550
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x47a3c3
mov eax, dword [esi]
test eax, eax
je 0x47a373
cmp ebx, dword [eax + 0x114]
jb 0x47a373
cmp ebx, dword [eax + 0x118]
jae 0x47a373
movzx ecx, word [eax + 0xf8]
jmp 0x47a37f
push ebx
call dword [0x54c280]
mov ecx, eax
add esp, 4
mov eax, 0xcccccccd
mul ecx
mov eax, dword [esp + 0x58]
shr edx, 4
mov dword [esi + 0x54], edx
mov dword [edi + 4], ebx
xor ebx, ebx
lea edx, [eax + eax*4]
mov eax, dword [edi + 4]
lea eax, [eax + edx*4]
mov edx, dword [esp + 0x88]
mov ecx, 1
add dword [edi + 0x20], ecx
mov byte [eax + 3], bl
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov word [eax], 0x21
jmp 0x47a3c5
xor ebx, ebx
push 1
push edi
call fcn.00438830
mov eax, dword [edi]
add esp, 8
cmp byte [eax + 0x41], bl
jne 0x47a3ed
mov ecx, dword [edi + 0x10]
push ebx
push 1
push 0x551ca8
or eax, 0xffffffff
call fcn.00436220
add esp, 0xc
mov eax, dword [esp + 0x9c]
cmp eax, ebx
je 0x47a405
mov ecx, dword [esp + 0x98]
mov dword [eax + 0x1e8], ecx
mov edi, dword [esp + 0x3c]
mov esi, dword [esp + 0x70]
cmp edi, ebx
je 0x47a4ac
cmp esi, ebx
je 0x47a455
cmp dword [esi + 0x208], ebx
je 0x47a42f
mov eax, edi
mov ecx, esi
call fcn.004181f0
jmp 0x47a4ac
cmp edi, dword [esi + 0x114]
jb 0x47a455
cmp edi, dword [esi + 0x118]
jae 0x47a455
mov edx, dword [esi + 0x110]
mov dword [edi], edx
dec dword [esi + 0xfc]
mov dword [esi + 0x110], edi
jmp 0x47a4ac
cmp dword [0x54c250], ebx
je 0x47a4a2
mov eax, dword [0x55ba68]
cmp eax, ebx
je 0x47a470
push eax
call dword [0x54c2a4]
add esp, 4
push edi
call dword [0x54c280]
sub dword [0x55b8b8], eax
dec dword [0x55b8dc]
add esp, 4
push edi
call dword [0x54c278]
mov eax, dword [0x55ba68]
add esp, 4
cmp eax, ebx
je 0x47a4ac
push eax
call dword [0x54c2ac]
jmp 0x47a4a9
push edi
call dword [0x54c278]
add esp, 4
mov eax, dword [ebp + 0xc]
push eax
mov eax, esi
call fcn.00458cd0
mov ecx, dword [ebp + 0x10]
add esp, 4
push ecx
push esi
call fcn.0044b2e0
mov eax, dword [ebp + 0x14]
add esp, 8
cmp eax, ebx
je 0x47a689
test dword [eax + 4], 0x4000
jne 0x47a5d3
mov edi, eax
mov edx, dword [edi + 0xc]
push edx
push esi
call fcn.0044a550
mov eax, dword [edi + 0x10]
push eax
push esi
call fcn.0044a550
add esp, 0x10
test dword [edi + 4], 0x10000
je 0x47a5a9
mov ecx, edi
mov edi, dword [ecx + 8]
cmp edi, ebx
je 0x47a5a9
cmp esi, ebx
je 0x47a552
cmp dword [esi + 0x208], ebx
je 0x47a52c
mov eax, edi
mov ecx, esi
call fcn.004181f0
jmp 0x47a5a9
cmp edi, dword [esi + 0x114]
jb 0x47a552
cmp edi, dword [esi + 0x118]
jae 0x47a552
mov edx, dword [esi + 0x110]
mov dword [edi], edx
dec dword [esi + 0xfc]
mov dword [esi + 0x110], edi
jmp 0x47a5a9
cmp dword [0x54c250], ebx
je 0x47a59f
mov eax, dword [0x55ba68]
cmp eax, ebx
je 0x47a56d
push eax
call dword [0x54c2a4]
add esp, 4
push edi
call dword [0x54c280]
sub dword [0x55b8b8], eax
dec dword [0x55b8dc]
add esp, 4
push edi
call dword [0x54c278]
mov eax, dword [0x55ba68]
add esp, 4
cmp eax, ebx
je 0x47a5a9
push eax
call dword [0x54c2ac]
jmp 0x47a5a6
push edi
call dword [0x54c278]
add esp, 4
mov eax, dword [ebp + 0x14]
test dword [eax + 4], 0x800
je 0x47a5c6
mov eax, dword [eax + 0x14]
push 1
push eax
push esi
call fcn.0046b6a0
add esp, 0xc
jmp 0x47a5d3
mov ecx, dword [eax + 0x14]
push ecx
push esi
call fcn.0044b2e0
add esp, 8
mov edi, dword [ebp + 0x14]
test dword [edi + 4], 0x8000
jne 0x47a689
cmp esi, ebx
je 0x47a62a
cmp dword [esi + 0x208], ebx
je 0x47a5ff
mov eax, edi
mov ecx, esi
call fcn.004181f0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edi, dword [esi + 0x114]
jb 0x47a62a
cmp edi, dword [esi + 0x118]
jae 0x47a62a
mov edx, dword [esi + 0x110]
mov dword [edi], edx
dec dword [esi + 0xfc]
mov dword [esi + 0x110], edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [0x54c250], ebx
je 0x47a67f
mov eax, dword [0x55ba68]
cmp eax, ebx
je 0x47a645
push eax
call dword [0x54c2a4]
add esp, 4
push edi
call dword [0x54c280]
sub dword [0x55b8b8], eax
dec dword [0x55b8dc]
add esp, 4
push edi
call dword [0x54c278]
mov eax, dword [0x55ba68]
add esp, 4
cmp eax, ebx
je 0x47a689
push eax
call dword [0x54c2ac]
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push edi
call dword [0x54c278]
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret