Function at 0x4faa30
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4fb8b1
sub esp, 0x74
mov eax, dword [esp + 0x80]
test eax, eax
je 0x4faa67
test eax, 0x200
jne 0x4faa67
lea ecx, [0x73dca4]
mov edx, dword [esp + 0x78]
jmp 0x4faa92
mov ecx, dword [esp + 0x78]
mov dword [esp], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00497710
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x58], edx
mov dword [esp + 0x30], ecx
mov ebx, dword [esp + 0x8c]
test ebx, ebx
je 0x4faabc
test ebx, 0x200
jne 0x4faabc
lea ebp, [0x73dca4]
mov esi, dword [esp + 0x84]
jmp 0x4faafc
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov ecx, dword [esp + 0x88]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00497710
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x58]
mov ebx, dword [esp + 0x8c]
mov ebp, eax
mov esi, ecx
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x30]
cmp ecx, ebp
jne 0x4fb552
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
call fcn.004038b0
movzx eax, byte [esp + 0xc]
test al, al
je 0x4fb552
nop
mov eax, dword [esp + 0x80]
mov ecx, eax
and eax, 0x1f
cmp eax, 0x11
ja 0x4fb013
cmp eax, 0xc
ja 0x4fae5f
cmp eax, 1
jne 0x4fabc2
nop
nop
mov eax, dword [esp + 0x7c]
movzx eax, byte [eax]
mov ecx, dword [esp + 0x8c]
mov edx, ecx
and ecx, 0x1f
cmp ecx, 1
je 0x4fab86
mov byte [esp + 0x23], al
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.004942d0
movzx eax, byte [esp + 0x23]
mov ecx, dword [esp + 0x88]
cmp byte [ecx], al
je 0x4fabb3
test al, al
je 0x4faba4
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
lea ecx, [eax - 2]
cmp ecx, 4
ja 0x4fad14
cmp eax, 3
ja 0x4fabf3
cmp eax, 2
jne 0x4fabe5
mov eax, dword [esp + 0x7c]
mov eax, dword [eax]
mov ecx, eax
sar eax, 0x1f
jmp 0x4fac27
mov ecx, dword [esp + 0x7c]
movsx eax, byte [ecx]
mov ecx, eax
sar eax, 0x1f
jmp 0x4fac27
cmp eax, 4
jne 0x4fac06
mov ecx, dword [esp + 0x7c]
movsx eax, word [ecx]
mov ecx, eax
sar eax, 0x1f
jmp 0x4fac27
cmp eax, 5
jne 0x4fac18
mov ecx, dword [esp + 0x7c]
mov eax, dword [ecx]
mov ecx, eax
sar eax, 0x1f
jmp 0x4fac27
mov ecx, dword [esp + 0x7c]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov edx, eax
mov eax, ecx
mov ecx, edx
nop
mov edx, dword [esp + 0x8c]
and edx, 0x1f
mov dword [esp + 0x44], edx
cmp edx, 3
ja 0x4fac6a
cmp edx, 2
jne 0x4fac50
mov edx, dword [esp + 0x88]
mov edx, dword [edx]
mov ebx, edx
sar edx, 0x1f
jmp 0x4facb0
cmp edx, 3
jne 0x4fb876
mov ebx, dword [esp + 0x88]
movsx edx, byte [ebx]
mov ebx, edx
sar edx, 0x1f
jmp 0x4facb0
cmp edx, 4
jne 0x4fac80
mov ebx, dword [esp + 0x88]
movsx edx, word [ebx]
mov ebx, edx
sar edx, 0x1f
jmp 0x4facb0
cmp edx, 5
jne 0x4fac95
mov ebx, dword [esp + 0x88]
mov edx, dword [ebx]
mov ebx, edx
sar edx, 0x1f
jmp 0x4facb0
cmp edx, 6
jne 0x4fb876
mov ebx, dword [esp + 0x88]
mov edx, dword [ebx]
mov ebx, dword [ebx + 4]
mov ebp, edx
mov edx, ebx
mov ebx, ebp
cmp eax, edx
xchg ebp, ebx
sete bl
xchg ebp, ebx
cmp ecx, ebx
xchg esi, ebx
setb bl
xchg esi, ebx
cmp eax, edx
xchg edi, ebx
setl bl
xchg edi, ebx
and esi, ebp
or edi, esi
xchg edi, eax
test al, al
xchg edi, eax
jne 0x4fad05
cmp ecx, ebx
seta cl
cmp eax, edx
setg al
and ecx, ebp
or eax, ecx
test al, al
je 0x4facf6
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
cmp eax, 7
jb 0x4fb561
cmp eax, 9
ja 0x4fad4c
cmp eax, 7
jne 0x4fad31
mov eax, dword [esp + 0x7c]
mov eax, dword [eax]
xor ecx, ecx
jmp 0x4fad73
cmp eax, 8
jne 0x4fad41
mov ecx, dword [esp + 0x7c]
movzx eax, byte [ecx]
xor ecx, ecx
jmp 0x4fad73
mov ecx, dword [esp + 0x7c]
movzx eax, word [ecx]
xor ecx, ecx
jmp 0x4fad73
cmp eax, 0xa
jne 0x4fad5b
mov ecx, dword [esp + 0x7c]
mov eax, dword [ecx]
xor ecx, ecx
jmp 0x4fad73
cmp eax, 0xb
jne 0x4fad6b
mov ecx, dword [esp + 0x7c]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
jmp 0x4fad73
mov edx, dword [esp + 0x7c]
mov eax, dword [edx]
xor ecx, ecx
nop
mov edx, dword [esp + 0x8c]
and edx, 0x1f
mov dword [esp + 0x44], edx
cmp edx, 9
ja 0x4fadc3
cmp edx, 7
jne 0x4fad99
mov edx, dword [esp + 0x88]
mov edx, dword [edx]
xor ebx, ebx
jmp 0x4fadfd
cmp edx, 8
jne 0x4fadac
mov ebx, dword [esp + 0x88]
movzx edx, byte [ebx]
xor ebx, ebx
jmp 0x4fadfd
cmp edx, 9
jne 0x4fb83c
mov ebx, dword [esp + 0x88]
movzx edx, word [ebx]
xor ebx, ebx
jmp 0x4fadfd
cmp edx, 0xa
jne 0x4fadd5
mov ebx, dword [esp + 0x88]
mov edx, dword [ebx]
xor ebx, ebx
jmp 0x4fadfd
cmp edx, 0xb
jne 0x4fade8
mov ebx, dword [esp + 0x88]
mov edx, dword [ebx]
mov ebx, dword [ebx + 4]
jmp 0x4fadfd
cmp edx, 0xc
jne 0x4fb83c
mov ebp, dword [esp + 0x88]
mov edx, dword [ebp]
xor ebx, ebx
cmp ecx, ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg esi, ebx
setb bl
xchg esi, ebx
cmp eax, edx
xchg edi, ebx
setb bl
xchg edi, ebx
and edi, ebp
or esi, edi
xchg esi, eax
test al, al
xchg esi, eax
jne 0x4fae50
cmp ecx, ebx
seta cl
cmp eax, edx
seta al
and eax, ebp
or ecx, eax
test cl, cl
je 0x4fae41
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
cmp eax, 0xe
ja 0x4faefd
cmp eax, 0xd
jne 0x4fae7b
mov eax, dword [esp + 0x7c]
movss xmm0, dword [eax]
cvtss2sd xmm0, xmm0
jmp 0x4fae83
mov eax, dword [esp + 0x7c]
movsd xmm0, qword [eax]
nop
mov eax, dword [esp + 0x8c]
and eax, 0x1f
cmp eax, 0xd
jne 0x4faea4
mov eax, dword [esp + 0x88]
movss xmm1, dword [eax]
cvtss2sd xmm1, xmm1
jmp 0x4faeb8
cmp eax, 0xe
jne 0x4fb7fe
mov eax, dword [esp + 0x88]
movsd xmm1, qword [eax]
ucomisd xmm0, xmm0
jne 0x4faec0
jnp 0x4faec7
mov eax, 0xffffffff
jmp 0x4faef2
ucomisd xmm1, xmm1
jne 0x4faecf
jnp 0x4faed6
mov eax, 1
jmp 0x4faef2
ucomisd xmm1, xmm0
jbe 0x4faee3
mov eax, 0xffffffff
jmp 0x4faef2
ucomisd xmm0, xmm1
jbe 0x4faef0
mov eax, 1
jmp 0x4faef2
xor eax, eax
mov dword [esp + 0x90], eax
add esp, 0x74
ret
lea edx, [eax - 0xf]
cmp edx, 1
ja 0x4fb003
cmp eax, 0xf
jne 0x4faf25
mov eax, dword [esp + 0x7c]
movss xmm0, dword [eax]
movss xmm1, dword [eax + 4]
cvtss2sd xmm0, xmm0
cvtss2sd xmm1, xmm1
jmp 0x4faf32
mov eax, dword [esp + 0x7c]
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
nop
mov eax, dword [esp + 0x8c]
and eax, 0x1f
cmp eax, 0xf
jne 0x4faf5c
mov eax, dword [esp + 0x88]
movss xmm2, dword [eax]
movss xmm3, dword [eax + 4]
cvtss2sd xmm2, xmm2
cvtss2sd xmm3, xmm3
jmp 0x4faf75
cmp eax, 0x10
jne 0x4fb7c0
mov eax, dword [esp + 0x88]
movsd xmm2, qword [eax]
movsd xmm3, qword [eax + 8]
ucomisd xmm0, xmm0
jne 0x4faf7d
jnp 0x4faf84
mov eax, 0xffffffff
jmp 0x4fafaf
ucomisd xmm2, xmm2
jne 0x4faf8c
jnp 0x4faf93
mov eax, 1
jmp 0x4fafaf
ucomisd xmm2, xmm0
jbe 0x4fafa0
mov eax, 0xffffffff
jmp 0x4fafaf
ucomisd xmm0, xmm2
jbe 0x4fafad
mov eax, 1
jmp 0x4fafaf
xor eax, eax
test eax, eax
jne 0x4faff8
ucomisd xmm1, xmm1
jne 0x4fafbb
jnp 0x4fafc2
mov eax, 0xffffffff
jmp 0x4fafed
ucomisd xmm3, xmm3
jne 0x4fafca
jnp 0x4fafd1
mov eax, 1
jmp 0x4fafed
ucomisd xmm3, xmm1
jbe 0x4fafde
mov eax, 0xffffffff
jmp 0x4fafed
ucomisd xmm1, xmm3
jbe 0x4fafeb
mov eax, 1
jmp 0x4fafed
xor eax, eax
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov dword [esp + 0x90], eax
add esp, 0x74
ret
cmp eax, 0x11
jne 0x4fb561
xor eax, eax
jmp 0x4fb6d4
cmp eax, 0x16
ja 0x4fb3d9
cmp eax, 0x12
je 0x4fb2fd
cmp eax, 0x14
je 0x4fb038
cmp eax, 0x16
je 0x4fb4d2
jmp 0x4fb561
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov edx, dword [esp + 0x7c]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov ebx, dword [esp + 0x84]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x88]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0x8c]
mov dword [esp + 0x14], esi
call fcn.004fb8c0
movzx eax, byte [esp + 0x1c]
mov ecx, dword [esp + 0x18]
test al, al
jne 0x4fb2f2
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov ecx, dword [esp + 0x7c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x80]
mov dword [esp + 8], edx
call fcn.00495380
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
test edx, edx
je 0x4fb0c3
test edx, 0x200
jne 0x4fb0c3
mov ecx, eax
lea eax, [0x73dca4]
jmp 0x4fb0db
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00497710
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x4fb0e2
mov eax, dword [eax + 4]
test eax, eax
je 0x4fb14a
nop
movzx edx, byte [0x8cefa0]
test dl, dl
je 0x4fb11b
mov dword [0x8cefa4], eax
mov edx, dword [0x8f52e0]
test edx, edx
jne 0x4fb10a
mov dword [0x8cefa8], ecx
jmp 0x4fb11b
lea edi, [0x8cefa8]
mov edx, eax
mov eax, ecx
call fcn.004642e0
mov eax, edx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], ecx
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x4fb142
nop
movzx edx, byte [eax + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4fb150
or edx, 0x80
jmp 0x4fb150
xor edx, edx
xor eax, eax
xor ecx, ecx
jmp 0x4fb150
xor edx, edx
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x48], eax
mov dword [esp + 0x24], edx
mov dword [esp + 0x4c], ecx
mov ebx, dword [esp + 0x84]
mov dword [esp], ebx
mov ebp, dword [esp + 0x88]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x8c]
mov dword [esp + 8], esi
call fcn.00495380
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
test edx, edx
je 0x4fb1a3
test edx, 0x200
jne 0x4fb1a3
mov ecx, eax
lea eax, [0x73dca4]
jmp 0x4fb1bb
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00497710
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x4fb1c2
mov eax, dword [eax + 4]
test eax, eax
je 0x4fb22a
nop
movzx edx, byte [0x8cefa0]
test dl, dl
je 0x4fb1fb
mov dword [0x8cefa4], eax
mov edx, dword [0x8f52e0]
test edx, edx
jne 0x4fb1ea
mov dword [0x8cefa8], ecx
jmp 0x4fb1fb
lea edi, [0x8cefa8]
mov edx, eax
mov eax, ecx
call fcn.004642e0
mov eax, edx
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], ecx
mov eax, dword [esp + 0x64]
test eax, eax
je 0x4fb222
nop
movzx edx, byte [eax + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4fb230
or edx, 0x80
jmp 0x4fb230
xor edx, edx
xor eax, eax
xor ecx, ecx
jmp 0x4fb230
xor edx, edx
xor eax, eax
xor ecx, ecx
mov ebx, dword [esp + 0x48]
mov dword [esp], ebx
mov ebx, dword [esp + 0x4c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x24]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.004faa30
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4fb26b
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
call fcn.00495380
mov eax, dword [esp + 0xc]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x5c], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x44], edx
mov ebx, dword [esp + 0x84]
mov dword [esp], ebx
mov ebx, dword [esp + 0x88]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x8c]
mov dword [esp + 8], ebx
call fcn.00495380
mov eax, dword [esp + 0x60]
mov dword [esp], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
call fcn.004faa30
mov eax, dword [esp + 0x18]
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov dword [esp + 0x90], ecx
add esp, 0x74
ret
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov edx, dword [esp + 0x7c]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov ebx, dword [esp + 0x84]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x88]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0x8c]
mov dword [esp + 0x14], esi
call fcn.004fb8c0
movzx eax, byte [esp + 0x1c]
mov ecx, dword [esp + 0x18]
test al, al
jne 0x4fb3ce
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
call fcn.00496540
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x84]
mov dword [esp], ecx
mov ecx, dword [esp + 0x88]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 8], ecx
call fcn.00496540
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x3c]
cmp eax, ecx
ja 0x4fb3bf
jae 0x4fb3b0
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
mov dword [esp + 0x90], ecx
add esp, 0x74
ret
cmp eax, 0x18
jne 0x4fb4bd
mov eax, dword [esp + 0x7c]
mov ecx, dword [eax]
mov dword [esp + 0x54], ecx
mov eax, dword [eax + 4]
mov dword [esp + 0x2c], eax
mov edx, dword [esp + 0x8c]
mov ebx, edx
and edx, 0x1f
cmp edx, 0x18
jne 0x4fb412
mov edx, dword [esp + 0x88]
mov ebx, dword [edx]
mov edx, dword [edx + 4]
jmp 0x4fb440
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.00497630
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x28], edx
mov dword [esp + 0x50], ebx
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
call fcn.004029c0
mov eax, dword [esp + 0x10]
test eax, eax
jl 0x4fb4ae
mov eax, dword [esp + 0x54]
mov dword [esp], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0xc], eax
call fcn.004029c0
mov eax, dword [esp + 0x10]
test eax, eax
jle 0x4fb49f
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
cmp eax, 0x19
jne 0x4fb4c9
xor eax, eax
jmp 0x4fb5da
cmp eax, 0x1a
jne 0x4fb561
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00496540
mov eax, dword [esp + 0xc]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x84]
mov dword [esp], ecx
mov ecx, dword [esp + 0x88]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 8], ecx
call fcn.00496540
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
ja 0x4fb543
jae 0x4fb534
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
mov eax, dword [esp + 0x30]
mov eax, dword [eax + 0x80]
mov ecx, dword [esp + 0x58]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x6d8675]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x15
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044eb50
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409670
mov eax, dword [esp + 8]
lea ecx, [0x698ba0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436320
mov edx, dword [esp + 0x38]
lea eax, [edx + 1]
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x38], eax
mov edx, dword [esp + 0x78]
mov dword [esp], edx
mov ebx, dword [esp + 0x7c]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.00496490
mov eax, dword [esp + 0x38]
cmp dword [esp + 0xc], eax
jle 0x4fb6b7
mov ecx, dword [esp + 0x78]
mov dword [esp], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x80]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.00495530
mov eax, dword [esp + 0x10]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x5c], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], edx
mov ebx, dword [esp + 0x84]
mov dword [esp], ebx
mov ebp, dword [esp + 0x88]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x8c]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x38]
mov dword [esp + 0xc], edi
call fcn.00495530
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x60]
mov dword [esp], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.004faa30
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4fb5cc
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov edx, dword [esp + 0x34]
lea eax, [edx + 1]
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x34], eax
mov edx, dword [esp + 0x78]
mov dword [esp], edx
mov ebx, dword [esp + 0x7c]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.004959c0
mov eax, dword [esp + 0x34]
cmp dword [esp + 0xc], eax
jle 0x4fb7b1
mov ecx, dword [esp + 0x78]
mov dword [esp], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x80]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.00495620
mov eax, dword [esp + 0x10]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x5c], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], edx
mov ebx, dword [esp + 0x84]
mov dword [esp], ebx
mov ebp, dword [esp + 0x88]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x8c]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x34]
mov dword [esp + 0xc], edi
call fcn.00495620
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x60]
mov dword [esp], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.004faa30
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4fb6c6
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x44], eax
lea eax, [0x6a9ec0]
mov dword [esp], eax
call fcn.0040bd30
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x15
lea ecx, [0x6d8897]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x69f2a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436320
mov dword [esp + 0x44], eax
lea eax, [0x6a9ec0]
mov dword [esp], eax
call fcn.0040bd30
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x6d79ad]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x69f2a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436320
lea eax, [0x6a9ec0]
mov dword [esp], eax
call fcn.0040bd30
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x12
lea ecx, [0x6d70b6]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x69f2a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436320
lea eax, [0x6a9ec0]
mov dword [esp], eax
call fcn.0040bd30
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x11
lea ecx, [0x6d6983]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x69f2a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436320
nop
call fcn.00462ed0
jmp fcn.004faa30