Function at 0x4af450
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x57c888
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xac
push ebx
push ebp
mov ebp, ecx
push esi
push edi
xor edi, edi
mov eax, dword [ebp + 0x90]
mov dword [esp + 0x18], ebp
push eax
push 0x5cce18
mov dword [esp + 0x54], edi
call fcn.00560f0e
lea ecx, [esp + 0x9c]
mov ebx, eax
push ecx
call fcn.0056b620
mov edx, dword [eax]
add esp, 0xc
cmp ebx, edi
mov dword [esp + 0x34], edx
mov eax, dword [eax + 4]
mov dword [esp + 0x38], eax
je 0x4af552
mov eax, dword [ebx + 0xa9c]
cmp eax, edi
je 0x4af552
mov ecx, dword [eax + 0x890]
cmp ecx, edi
je 0x4af552
cmp ecx, edi
jne 0x4af4d9
mov dword [esp + 0x4c], edi
jmp 0x4af552
cmp dword [eax + 0x720], edi
jle 0x4af4e8
add eax, 0x6f8
jmp 0x4af4f5
cmp dword [eax + 0x258], edi
jle 0x4af4d3
add eax, 0x230
cmp eax, edi
mov dword [esp + 0x4c], eax
je 0x4af552
mov edx, dword [ebx]
lea eax, [esp + 0x94]
push eax
mov ecx, ebx
xor esi, esi
xor edi, edi
call dword [edx + 0x348]
mov edx, dword [esp + 0x34]
mov ecx, eax
mov eax, dword [ecx]
cmp edx, eax
mov ecx, dword [ecx + 4]
jne 0x4af528
cmp dword [esp + 0x38], ecx
je 0x4af530
mov esi, dword [esp + 0x34]
mov edi, dword [esp + 0x38]
mov ecx, dword [esp + 0x4c]
push 0
push edi
lea edx, [esp + 0xb8]
push esi
push edx
call fcn.004ea810
mov eax, dword [esp + 0x4c]
xor edi, edi
mov dword [esp + 0xd4], eax
mov esi, dword [ebp + 8]
call fcn.004f6f20
push edi
push esi
lea ecx, [eax + 0x58]
call fcn.004b1330
neg eax
sbb eax, eax
mov esi, 1
neg eax
mov dword [esp + 0x10], eax
mov eax, dword [ebp + 8]
cmp eax, 0x427c
je 0x4af584
cmp eax, 0x427d
jne 0x4af588
mov dword [esp + 0x10], esi
mov ecx, dword [0x5d2824]
mov dword [esp + 0x7c], edi
cmp ecx, edi
je 0x4af5a5
cmp dword [ebp + 4], edi
jne 0x4af5a5
push eax
call fcn.004f34c0
mov dword [esp + 0x7c], eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00499f90
add esp, 4
mov dword [esp + 0x80], eax
call fcn.004cfde0
mov eax, dword [0x5d2640]
mov edx, dword [0x5d263c]
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0xd8]
cmp eax, edi
mov dword [esp + 0x94], edx
je 0x4af692
mov edx, dword [ebp]
mov ecx, ebp
call dword [edx + 0x68]
test eax, eax
je 0x4af69f
mov dword [esp + 0x50], edi
cmp dword [ebp + 0x8c], edi
je 0x4af610
cmp dword [ebp + 0xa0], edi
jne 0x4af610
mov dword [esp + 0xdc], esi
mov edi, dword [esp + 0x18]
mov ebp, dword [esp + 0xcc]
mov dword [esp + 0xac], 0
mov eax, dword [edi + 8]
test eax, eax
je 0x4af65c
cmp eax, 0xffffffff
je 0x4af65c
mov ecx, dword [edi + 0xa4]
test ecx, ecx
jne 0x4af65c
test ebx, ebx
je 0x4af65c
cmp dword [ebx + 0xaa0], eax
jne 0x4af65c
mov eax, dword [ebp]
push 0x5d208c
mov ecx, ebp
call dword [eax + 0x30]
mov dword [esp + 0xac], eax
mov ecx, dword [esp + 0xd0]
mov edx, dword [ecx]
mov dword [esp + 0x3c], edx
mov eax, dword [ecx + 4]
mov dword [esp + 0x40], eax
mov edx, dword [ecx + 8]
mov dword [esp + 0x44], edx
mov eax, dword [ecx + 0xc]
mov ecx, dword [0x5d1f54]
test ecx, ecx
mov dword [esp + 0x48], eax
je 0x4af6a8
mov esi, 1
jmp 0x4af717
test dword [ebp + 0xc], 0x40000
je 0x4af5f5
mov dword [esp + 0x50], esi
jmp 0x4af5f9
mov ecx, dword [0x5d1f58]
test ecx, ecx
jne 0x4af6f4
push 0x60
call fcn.00462ec0
add esp, 4
mov dword [esp + 0x70], eax
test eax, eax
mov dword [esp + 0xc4], 0
je 0x4af6e5
push 0
mov ecx, eax
call fcn.004a07e0
mov dword [esp + 0xc4], 0xffffffff
jmp 0x4af6f9
xor eax, eax
mov dword [esp + 0xc4], 0xffffffff
jmp 0x4af6f9
call fcn.00463754
mov esi, 1
mov dword [0x5d1f54], eax
mov dword [eax + 0x5c], esi
mov ecx, dword [0x5d1f54]
mov edx, dword [ecx]
call dword [edx + 0x18]
mov ecx, dword [0x5d1f54]
mov eax, dword [ecx]
call dword [eax + 0x164]
mov ecx, dword [esp + 0x3c]
add ecx, eax
mov dword [esp + 0x3c], ecx
mov ecx, dword [0x5d1f54]
test ecx, ecx
jne 0x4af799
mov ecx, dword [0x5d1f58]
test ecx, ecx
jne 0x4af77b
push 0x60
call fcn.00462ec0
add esp, 4
mov dword [esp + 0x70], eax
test eax, eax
mov dword [esp + 0xc4], esi
je 0x4af76c
push 0
mov ecx, eax
call fcn.004a07e0
mov dword [esp + 0xc4], 0xffffffff
jmp 0x4af780
xor eax, eax
mov dword [esp + 0xc4], 0xffffffff
jmp 0x4af780
call fcn.00463754
mov dword [0x5d1f54], eax
mov dword [eax + 0x5c], esi
mov ecx, dword [0x5d1f54]
mov edx, dword [ecx]
call dword [edx + 0x18]
mov ecx, dword [0x5d1f54]
mov eax, dword [ecx]
call dword [eax + 0x164]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x34]
add eax, ecx
mov dword [esp + 0x60], ecx
mov ecx, dword [esp + 0x40]
add eax, edx
mov edx, dword [esp + 0x48]
mov dword [esp + 0x44], eax
mov dword [esp + 0x68], eax
push 0xffffffffffffffff
lea eax, [esp + 0x64]
push esi
push eax
mov dword [esp + 0x70], ecx
mov dword [esp + 0x78], edx
call dword [0x588604]
mov eax, dword [0x5cccb8]
test eax, eax
je 0x4af7f0
mov ecx, dword [edi + 8]
push ecx
call fcn.0056c960
add esp, 4
test eax, eax
jne 0x4af7f4
xor ebx, ebx
jmp 0x4af841
mov edx, dword [edi + 0x90]
xor ebx, ebx
push edx
push 0x5cce18
mov dword [esp + 0x78], ebx
call fcn.00560f0e
add esp, 8
test eax, eax
je 0x4af845
mov eax, dword [eax + 0x20]
push eax
call dword [0x5887cc]
push eax
call fcn.00462ea2
push eax
push 0x5cc2b8
call fcn.00560f0e
add esp, 8
test eax, eax
je 0x4af845
mov ecx, eax
call fcn.004be6b0
test eax, eax
je 0x4af845
mov ebx, esi
mov dword [esp + 0x70], ebx
mov esi, dword [esp + 0xdc]
xor edx, edx
cmp esi, edx
mov dword [esp + 0x30], edx
jne 0x4af8e1
mov eax, dword [0x5d1f54]
cmp eax, edx
jne 0x4af8d2
mov ecx, dword [0x5d1f58]
cmp ecx, edx
jne 0x4af8af
push 0x60
call fcn.00462ec0
add esp, 4
mov dword [esp + 0x54], eax
test eax, eax
mov dword [esp + 0xc4], 2
je 0x4af8a0
push 0
mov ecx, eax
call fcn.004a07e0
mov dword [esp + 0xc4], 0xffffffff
jmp 0x4af8b4
xor eax, eax
mov dword [esp + 0xc4], 0xffffffff
jmp 0x4af8b4
call fcn.00463754
mov dword [0x5d1f54], eax
mov dword [eax + 0x5c], 1
mov ecx, dword [0x5d1f54]
mov edx, dword [ecx]
call dword [edx + 0x18]
mov eax, dword [0x5d1f54]
xor edx, edx
mov ecx, dword [eax + 0x18]
mov dword [esp + 0x54], 1
cmp ecx, edx
jne 0x4af8e5
mov dword [esp + 0x54], edx
cmp ebx, edx
je 0x4af91f
cmp esi, edx
mov dword [esp + 0x30], 1
mov ecx, 0x110000
je 0x4af903
test dword [edi + 0xc], ecx
je 0x4af903
mov dword [esp + 0x30], edx
cmp dword [edi + 4], edx
je 0x4af90d
mov eax, dword [edi + 0x44]
jmp 0x4af910
mov eax, dword [edi + 0x40]
cmp eax, edx
jge 0x4af933
test dword [edi + 0xc], ecx
jne 0x4af933
mov dword [esp + 0x30], edx
jmp 0x4af933
test dword [edi + 0xc], 0x110000
je 0x4af933
xor eax, eax
cmp esi, edx
sete al
mov dword [esp + 0x30], eax
mov ecx, dword [edi + 0x18]
cmp ecx, edx
je 0x4af94b
cmp dword [edi + 4], edx
je 0x4af944
mov eax, dword [edi + 0x44]
jmp 0x4af947
mov eax, dword [edi + 0x40]
cmp eax, edx
jge 0x4af977
cmp dword [esp + 0x80], edx
jne 0x4af977
mov eax, dword [edi + 4]
mov ebx, 1
mov dword [edi + 0x18], ebx
mov dword [edi + 4], ebx
cmp dword [edi + 0x44], edx
jge 0x4af977
mov ebx, dword [edi + 0x40]
mov dword [edi + 4], edx
cmp ebx, edx
jge 0x4af977
mov dword [edi + 0x18], ecx
mov dword [edi + 4], eax
xor ebx, ebx
mov dword [esp + 0xa4], 0x58e20c
mov dword [esp + 0x14], ebx
mov dword [esp + 0xa8], ebx
lea ecx, [esp + 0x3c]
mov dword [esp + 0xc4], 3
push ecx
call dword [0x587148]
push eax
lea ecx, [esp + 0xa8]
call fcn.00463076
lea edx, [esp + 0x60]
push esi
push edx
push ebp
mov ecx, edi
call fcn.004f0f40
cmp dword [esp + 0x10], ebx
jne 0x4af9e5
cmp dword [edi + 0x18], ebx
je 0x4af9e5
cmp dword [edi + 4], ebx
je 0x4af9d5
mov eax, dword [edi + 0x44]
jmp 0x4af9d8
mov eax, dword [edi + 0x40]
cmp eax, ebx
jl 0x4af9e5
cmp dword [esp + 0xd4], ebx
jne 0x4af9f2
cmp dword [esp + 0x80], ebx
je 0x4afdf3
cmp esi, ebx
je 0x4afa8a
cmp dword [esp + 0xd8], ebx
jne 0x4afa8a
mov eax, dword [0x5d1f54]
cmp eax, ebx
jne 0x4afa73
mov ecx, dword [0x5d1f58]
cmp ecx, ebx
jne 0x4afa52
push 0x60
call fcn.00462ec0
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov byte [esp + 0xc4], 4
je 0x4afa46
push ebx
mov ecx, eax
call fcn.004a07e0
mov byte [esp + 0xc4], 3
jmp 0x4afa57
xor eax, eax
mov byte [esp + 0xc4], 3
jmp 0x4afa57
call fcn.00463754
mov dword [0x5d1f54], eax
mov dword [eax + 0x5c], 1
mov ecx, dword [0x5d1f54]
mov eax, dword [ecx]
call dword [eax + 0x18]
mov eax, dword [0x5d1f54]
cmp dword [eax + 0x10], ebx
je 0x4afa8a
mov eax, dword [edi + 0xc]
mov dword [esp + 0x14], 1
test eax, 0x50000
je 0x4afa8e
mov dword [esp + 0x14], ebx
lea ecx, [esp + 0xa4]
push ecx
mov ecx, ebp
call fcn.00463a24
mov eax, dword [esp + 0x48]
mov ebx, dword [esp + 0x40]
mov edi, dword [esp + 0x38]
sub eax, ebx
sub eax, edi
mov ecx, dword [esp + 0x3c]
cdq
mov ebx, dword [esp + 0x34]
sub eax, edx
mov edi, eax
mov eax, dword [esp + 0x44]
sub eax, ecx
sub eax, ebx
cdq
sub eax, edx
mov edx, dword [esp + 0x18]
mov esi, eax
mov eax, dword [edx + 0xc]
sar edi, 1
sar esi, 1
test eax, 0x10000
mov ebx, edi
je 0x4afbdc
mov eax, dword [esp + 0xd8]
test eax, eax
jne 0x4afbdc
mov eax, dword [0x5d1f54]
test eax, eax
jne 0x4afb5b
mov ecx, dword [0x5d1f58]
test ecx, ecx
jne 0x4afb3a
push 0x60
call fcn.00462ec0
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
mov byte [esp + 0xc4], 5
je 0x4afb2e
push 0
mov ecx, eax
call fcn.004a07e0
mov byte [esp + 0xc4], 3
jmp 0x4afb3f
xor eax, eax
mov byte [esp + 0xc4], 3
jmp 0x4afb3f
call fcn.00463754
mov dword [0x5d1f54], eax
mov dword [eax + 0x5c], 1
mov ecx, dword [0x5d1f54]
mov eax, dword [ecx]
call dword [eax + 0x18]
mov eax, dword [0x5d1f54]
mov ecx, dword [eax + 0x10]
test ecx, ecx
jne 0x4afbdc
test eax, eax
jne 0x4afbca
mov ecx, dword [0x5d1f58]
test ecx, ecx
jne 0x4afba9
push 0x60
call fcn.00462ec0
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
mov byte [esp + 0xc4], 6
je 0x4afb9d
push 0
mov ecx, eax
call fcn.004a07e0
mov byte [esp + 0xc4], 3
jmp 0x4afbae
xor eax, eax
mov byte [esp + 0xc4], 3
jmp 0x4afbae
call fcn.00463754
mov dword [0x5d1f54], eax
mov dword [eax + 0x5c], 1
mov ecx, dword [0x5d1f54]
mov edx, dword [ecx]
call dword [edx + 0x18]
mov eax, dword [0x5d1f54]
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x170]
test eax, eax
je 0x4afbdc
inc esi
lea ebx, [edi + 1]
mov edi, dword [esp + 0x18]
mov eax, dword [edi + 0xc]
test eax, 0x20000
jne 0x4afc0b
test eax, 0x40000
je 0x4afc0b
mov eax, dword [esp + 0xe0]
test eax, eax
je 0x4afc0b
mov eax, dword [esp + 0xd8]
test eax, eax
je 0x4afd05
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x34]
mov ecx, dword [esp + 0x40]
add eax, esi
add edx, eax
add ecx, ebx
mov dword [esp + 0x24], edx
mov edx, dword [esp + 0x38]
mov dword [esp + 0x20], ecx
add ecx, edx
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x80]
test ecx, ecx
mov dword [esp + 0x1c], eax
je 0x4afc51
lea eax, [esp + 0x1c]
push ecx
push eax
push ebp
mov ecx, edi
call fcn.004b1290
jmp 0x4afde7
mov ecx, dword [esp + 0x7c]
test ecx, ecx
je 0x4afc69
lea edx, [esp + 0x1c]
push edx
push ebp
call fcn.004f7d80
jmp 0x4afde7
mov esi, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
mov edi, eax
mov eax, dword [esp + 0x14]
add esi, ebx
mov dword [esp + 0x34], ecx
test eax, eax
je 0x4afcb0
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x4afc91
mov eax, dword [eax + 0x44]
jmp 0x4afc94
mov eax, dword [eax + 0x40]
push 0
mov ecx, dword [esp + 0xd8]
push 1
push 0
push 0
push 0
push eax
push esi
push edi
push ebp
call fcn.004eac00
dec edi
dec esi
mov eax, dword [esp + 0x50]
test eax, eax
je 0x4afcca
mov eax, dword [esp + 0xe0]
test eax, eax
je 0x4afcca
mov ecx, 1
jmp 0x4afccc
xor ecx, ecx
mov eax, dword [esp + 0x18]
mov edx, dword [eax + 4]
test edx, edx
je 0x4afcee
mov edx, dword [esp + 0x54]
mov eax, dword [eax + 0x44]
push edx
push 0
push 0
push ecx
push 0
push eax
push esi
push edi
jmp 0x4afdda
mov edx, dword [esp + 0x54]
mov eax, dword [eax + 0x40]
push edx
push 0
push 0
push ecx
push 0
push eax
push esi
push edi
jmp 0x4afdda
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x34]
mov ecx, dword [esp + 0x40]
add eax, esi
add edx, eax
add ecx, ebx
mov dword [esp + 0x24], edx
mov edx, dword [esp + 0x38]
add edx, ecx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x28], edx
mov edx, dword [esp + 0x80]
test edx, edx
mov dword [esp + 0x20], ecx
je 0x4afd4b
lea eax, [esp + 0x1c]
push edx
push eax
push ebp
mov ecx, edi
call fcn.004b1290
jmp 0x4afde7
mov edx, dword [esp + 0x7c]
test edx, edx
je 0x4afd65
lea ecx, [esp + 0x1c]
push ecx
push ebp
mov ecx, edx
call fcn.004f7d80
jmp 0x4afde7
mov edx, dword [esp + 0x14]
test edx, edx
je 0x4afda5
mov edx, dword [edi + 4]
test edx, edx
je 0x4afd79
mov edx, dword [edi + 0x44]
jmp 0x4afd7c
mov edx, dword [edi + 0x40]
push 0
push 1
push 0
push 0
push 0
push edx
push ecx
mov ecx, dword [esp + 0xf0]
push eax
push ebp
call fcn.004eac00
push 0xffffffffffffffff
lea edx, [esp + 0x40]
push 0xffffffffffffffff
push edx
call dword [0x588608]
mov edx, dword [esp + 0x50]
mov eax, dword [edi + 4]
xor ecx, ecx
test edx, edx
setne cl
test eax, eax
je 0x4afdbc
mov eax, dword [edi + 0x44]
jmp 0x4afdbf
mov eax, dword [edi + 0x40]
mov edx, dword [esp + 0x54]
push edx
push 0
push 0
push ecx
mov ecx, dword [esp + 0x4c]
push 0
push eax
mov eax, dword [esp + 0x58]
add eax, ebx
add esi, ecx
push eax
push esi
mov ecx, dword [esp + 0xf4]
push ebp
call fcn.004eac00
mov edi, dword [esp + 0x18]
mov dword [esp + 0x14], 1
mov eax, dword [0x5d1f70]
test eax, eax
jne 0x4afe08
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x4afeda
mov ecx, dword [edi + 0x90]
test ecx, ecx
jne 0x4afe46
call fcn.004631c6
test eax, eax
je 0x4afe33
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x7c]
push eax
mov eax, dword [0x587934]
push eax
call fcn.00560f0e
add esp, 8
jmp 0x4afe55
xor eax, eax
push eax
mov eax, dword [0x587934]
push eax
call fcn.00560f0e
add esp, 8
jmp 0x4afe55
mov esi, dword [0x5d1edc]
test esi, esi
jne 0x4afe57
call fcn.00560f74
mov esi, eax
push esi
push 0x597828
call fcn.00560f0e
add esp, 8
test eax, eax
je 0x4afe7c
mov edx, dword [eax]
lea ecx, [esp + 0x3c]
push ecx
push edi
push ebp
mov ecx, eax
call dword [edx + 0x120]
jmp 0x4afed6
push esi
push 0x593700
call fcn.00560f0e
add esp, 8
test eax, eax
je 0x4afea1
mov edx, dword [eax]
lea ecx, [esp + 0x3c]
push ecx
push edi
push ebp
mov ecx, eax
call dword [edx + 0x118]
jmp 0x4afed6
push esi
push 0x597568
call fcn.00560f0e
add esp, 8
test eax, eax
jne 0x4afec5
push esi
push 0x5972a8
call fcn.00560f0e
add esp, 8
test eax, eax
je 0x4afeda
mov edx, dword [eax]
lea ecx, [esp + 0x3c]
push ecx
push edi
push ebp
mov ecx, eax
call dword [edx + 0x134]
mov dword [esp + 0x14], eax
xor ebx, ebx
mov ecx, ebp
push ebx
call fcn.004638fe
mov edx, dword [esp + 0x44]
mov eax, dword [edi + 0xc]
mov ecx, dword [esp + 0x14]
inc edx
and eax, 0x10000
mov dword [esp + 0x44], edx
je 0x4b008d
cmp ecx, ebx
jne 0x4b0095
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x48]
push 0xffffffffffffffff
lea eax, [esp + 0x20]
push ebx
push eax
mov dword [esp + 0x30], ecx
mov dword [esp + 0x34], edx
call dword [0x588604]
cmp dword [esp + 0x30], ebx
jne 0x4aff62
cmp dword [esp + 0x70], ebx
je 0x4aff62
mov ecx, dword [0x5d2004]
mov eax, 0x5d2000
mov edx, dword [ebp + 4]
neg eax
sbb eax, eax
and eax, ecx
lea ecx, [esp + 0x1c]
push eax
push ecx
push edx
call dword [0x588794]
mov eax, dword [esp + 0x28]
mov esi, dword [esp + 0x98]
sub eax, esi
mov esi, dword [esp + 0x20]
sub eax, esi
cdq
sub eax, edx
mov ecx, eax
mov eax, dword [esp + 0x24]
sar ecx, 1
add ecx, esi
mov esi, dword [esp + 0x94]
sub eax, esi
mov esi, dword [esp + 0x1c]
sub eax, esi
mov dword [esp + 0x58], ecx
cdq
sub eax, edx
lea ecx, [esp + 0x1c]
sar eax, 1
add eax, esi
mov esi, dword [edi + 0xac]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0xdc]
neg esi
sbb esi, esi
push eax
and esi, 0xa
push ecx
push ebp
mov ecx, edi
add esi, 2
call fcn.004f0f40
mov eax, dword [edi + 0xc]
lea edx, [esp + 0x34]
shr eax, 0x12
and eax, 1
push edx
lea ecx, [esp + 0x58]
push eax
push ecx
push esi
push ebp
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebx
call fcn.004cff50
mov eax, dword [0x5d1f54]
add esp, 0x14
cmp eax, ebx
jne 0x4b0057
mov ecx, dword [0x5d1f58]
cmp ecx, ebx
jne 0x4b0036
push 0x60
call fcn.00462ec0
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov byte [esp + 0xc4], 7
je 0x4b002a
push ebx
mov ecx, eax
call fcn.004a07e0
mov byte [esp + 0xc4], 3
jmp 0x4b003b
xor eax, eax
mov byte [esp + 0xc4], 3
jmp 0x4b003b
call fcn.00463754
mov dword [0x5d1f54], eax
mov dword [eax + 0x5c], 1
mov ecx, dword [0x5d1f54]
mov edx, dword [ecx]
call dword [edx + 0x18]
mov eax, dword [0x5d1f54]
mov esi, dword [esp + 0x60]
push 1
sub esp, 0x10
mov edx, dword [eax]
mov ecx, esp
push edi
push ebp
mov dword [ecx], esi
mov esi, dword [esp + 0x80]
mov dword [ecx + 4], esi
mov esi, dword [esp + 0x84]
mov dword [ecx + 8], esi
mov esi, dword [esp + 0x88]
mov dword [ecx + 0xc], esi
mov ecx, eax
jmp 0x4b01fc
cmp ecx, ebx
je 0x4b01ff
cmp dword [esp + 0xdc], ebx
je 0x4b014f
cmp eax, ebx
jne 0x4b014f
mov ecx, dword [0x5d1f54]
cmp ecx, ebx
jne 0x4b0118
mov ecx, dword [0x5d1f58]
cmp ecx, ebx
jne 0x4b00f6
push 0x60
call fcn.00462ec0
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov byte [esp + 0xc4], 8
je 0x4b00ea
push ebx
mov ecx, eax
call fcn.004a07e0
mov byte [esp + 0xc4], 3
jmp 0x4b00fb
xor eax, eax
mov byte [esp + 0xc4], 3
jmp 0x4b00fb
call fcn.00463754
mov dword [0x5d1f54], eax
mov dword [eax + 0x5c], 1
mov ecx, dword [0x5d1f54]
mov edx, dword [ecx]
call dword [edx + 0x18]
mov ecx, dword [0x5d1f54]
mov esi, dword [esp + 0x60]
push 2
sub esp, 0x10
mov eax, dword [ecx]
mov edx, esp
push edi
push ebp
mov dword [edx], esi
mov esi, dword [esp + 0x80]
mov dword [edx + 4], esi
mov esi, dword [esp + 0x84]
mov dword [edx + 8], esi
mov esi, dword [esp + 0x88]
mov dword [edx + 0xc], esi
call dword [eax + 0x60]
jmp 0x4b01ff
cmp ecx, ebx
je 0x4b01ff
cmp eax, ebx
je 0x4b01ff
mov ecx, dword [0x5d1f54]
cmp ecx, ebx
jne 0x4b01cd
mov ecx, dword [0x5d1f58]
cmp ecx, ebx
jne 0x4b01ab
push 0x60
call fcn.00462ec0
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov byte [esp + 0xc4], 9
je 0x4b019f
push ebx
mov ecx, eax
call fcn.004a07e0
mov byte [esp + 0xc4], 3
jmp 0x4b01b0
xor eax, eax
mov byte [esp + 0xc4], 3
jmp 0x4b01b0
call fcn.00463754
mov dword [0x5d1f54], eax
mov dword [eax + 0x5c], 1
mov ecx, dword [0x5d1f54]
mov eax, dword [ecx]
call dword [eax + 0x18]
mov ecx, dword [0x5d1f54]
mov esi, dword [esp + 0x60]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
push edi
push ebp
mov dword [eax], esi
mov esi, dword [esp + 0x80]
mov dword [eax + 4], esi
mov esi, dword [esp + 0x84]
mov dword [eax + 8], esi
mov esi, dword [esp + 0x88]
mov dword [eax + 0xc], esi
call dword [edx + 0x60]
mov eax, dword [esp + 0x14]
mov dword [esp + 0x30], 0xffffffff
cmp eax, ebx
jne 0x4b049f
mov eax, dword [edi + 8]
cmp eax, 0xf060
ja 0x4b0244
je 0x4b023d
sub eax, 0xf020
je 0x4b0236
sub eax, 0x10
jne 0x4b049f
mov ebx, 6
jmp 0x4b0254
mov ebx, 3
jmp 0x4b0254
mov ebx, 5
jmp 0x4b0254
cmp eax, 0xf120
jne 0x4b049f
mov ebx, 4
mov ecx, dword [esp + 0x3c]
mov esi, dword [0x5d1f54]
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x44]
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x48]
test esi, esi
mov dword [esp + 0x30], ebx
mov dword [esp + 0x20], edx
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ecx
jne 0x4b02ea
mov ecx, dword [0x5d1f58]
test ecx, ecx
jne 0x4b02c4
push 0x60
call fcn.00462ec0
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
mov byte [esp + 0xc4], 0xa
je 0x4b02b8
push esi
mov ecx, eax
call fcn.004a07e0
mov byte [esp + 0xc4], 3
jmp 0x4b02c9
xor eax, eax
mov byte [esp + 0xc4], 3
jmp 0x4b02c9
call fcn.00463754
mov dword [0x5d1f54], eax
mov dword [eax + 0x5c], 1
mov ecx, dword [0x5d1f54]
mov edx, dword [ecx]
call dword [edx + 0x18]
mov esi, dword [0x5d1f54]
test esi, esi
je 0x4b02ee
mov edi, esi
jmp 0x4b0353
mov ecx, dword [0x5d1f58]
test ecx, ecx
jne 0x4b0331
push 0x60
call fcn.00462ec0
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
mov byte [esp + 0xc4], 0xb
je 0x4b0325
push 0
mov ecx, eax
call fcn.004a07e0
mov byte [esp + 0xc4], 3
jmp 0x4b0336
xor eax, eax
mov byte [esp + 0xc4], 3
jmp 0x4b0336
call fcn.00463754
mov dword [0x5d1f54], eax
mov dword [eax + 0x5c], 1
mov ecx, dword [0x5d1f54]
mov eax, dword [ecx]
call dword [eax + 0x18]
mov edi, dword [0x5d1f54]
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x164]
mov esi, eax
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x164]
neg esi
neg eax
push esi
lea ecx, [esp + 0x20]
push eax
push ecx
call dword [0x588604]
mov eax, dword [esp + 0x28]
mov esi, dword [esp + 0x98]
sub eax, esi
mov esi, dword [esp + 0x20]
sub eax, esi
cdq
sub eax, edx
mov ecx, eax
mov eax, dword [esp + 0x24]
sar ecx, 1
add ecx, esi
mov esi, dword [esp + 0x94]
sub eax, esi
mov esi, dword [esp + 0x1c]
sub eax, esi
mov dword [esp + 0x74], ecx
cdq
sub eax, edx
mov ecx, dword [esp + 0x18]
sar eax, 1
add eax, esi
mov esi, dword [esp + 0xdc]
lea edx, [esp + 0x60]
push esi
push edx
push ebp
mov dword [esp + 0x7c], eax
call fcn.004f0f40
lea eax, [esp + 0x34]
xor edi, edi
push eax
mov eax, dword [esp + 0x54]
xor ecx, ecx
cmp eax, edi
setne cl
lea edx, [esp + 0x74]
push ecx
push edx
push ebx
push ebp
mov dword [esp + 0x48], edi
mov dword [esp + 0x4c], edi
call fcn.004cff50
add esp, 0x14
cmp esi, edi
je 0x4b049f
mov ecx, dword [0x5d1f54]
test ecx, ecx
jne 0x4b046f
mov ecx, dword [0x5d1f58]
test ecx, ecx
jne 0x4b044d
push 0x60
call fcn.00462ec0
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
mov byte [esp + 0xc4], 0xc
je 0x4b0441
push edi
mov ecx, eax
call fcn.004a07e0
mov byte [esp + 0xc4], 3
jmp 0x4b0452
xor eax, eax
mov byte [esp + 0xc4], 3
jmp 0x4b0452
call fcn.00463754
mov dword [0x5d1f54], eax
mov dword [eax + 0x5c], 1
mov ecx, dword [0x5d1f54]
mov eax, dword [ecx]
call dword [eax + 0x18]
mov ecx, dword [0x5d1f54]
mov esi, dword [esp + 0x60]
push 2
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0x78]
mov dword [eax + 4], esi
mov esi, dword [esp + 0x7c]
mov dword [eax + 8], esi
mov esi, dword [esp + 0x80]
mov dword [eax + 0xc], esi
mov eax, dword [esp + 0x2c]
push eax
push ebp
call dword [edx + 0x60]
mov ecx, dword [esp + 0xd0]
mov edx, dword [ecx]
mov dword [esp + 0x84], edx
mov eax, dword [ecx + 4]
mov dword [esp + 0x88], eax
mov edx, dword [ecx + 8]
mov dword [esp + 0x8c], edx
mov eax, dword [ecx + 0xc]
mov ecx, dword [0x5d1f54]
test ecx, ecx
mov dword [esp + 0x90], eax
jne 0x4b053c
mov ecx, dword [0x5d1f58]
test ecx, ecx
jne 0x4b051a
push 0x60
call fcn.00462ec0
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
mov byte [esp + 0xc4], 0xd
je 0x4b050e
push 0
mov ecx, eax
call fcn.004a07e0
mov byte [esp + 0xc4], 3
jmp 0x4b051f
xor eax, eax
mov byte [esp + 0xc4], 3
jmp 0x4b051f
call fcn.00463754
mov dword [0x5d1f54], eax
mov dword [eax + 0x5c], 1
mov ecx, dword [0x5d1f54]
mov edx, dword [ecx]
call dword [edx + 0x18]
mov ecx, dword [0x5d1f54]
mov eax, dword [ecx]
call dword [eax + 0x164]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0xdc]
test edx, edx
lea eax, [eax + ecx + 2]
mov dword [esp + 0x84], eax
je 0x4b0658
mov edi, dword [esp + 0x60]
mov ebx, dword [esp + 0x64]
mov ebp, dword [esp + 0x6c]
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x18]
test dword [ecx + 0xc], 0x10000
jne 0x4b058e
mov ecx, dword [esp + 0x14]
test ecx, ecx
jne 0x4b058e
cmp dword [esp + 0x30], 0xffffffff
je 0x4b0591
lea edi, [eax - 1]
mov edx, dword [esp + 0xd0]
mov eax, dword [esp + 0x50]
mov esi, dword [edx + 8]
dec esi
test eax, eax
je 0x4b05af
mov eax, dword [0x5d1f94]
mov dword [esp + 0x5c], eax
jmp 0x4b05b9
mov ecx, dword [0x5d1fb8]
mov dword [esp + 0x5c], ecx
mov ecx, dword [0x5d1f54]
test ecx, ecx
jne 0x4b0628
mov ecx, dword [0x5d1f58]
test ecx, ecx
jne 0x4b0606
push 0x60
call fcn.00462ec0
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
mov byte [esp + 0xc4], 0xe
je 0x4b05fa
push 0
mov ecx, eax
call fcn.004a07e0
mov byte [esp + 0xc4], 3
jmp 0x4b060b
xor eax, eax
mov byte [esp + 0xc4], 3
jmp 0x4b060b
call fcn.00463754
mov dword [0x5d1f54], eax
mov dword [eax + 0x5c], 1
mov ecx, dword [0x5d1f54]
mov edx, dword [ecx]
call dword [edx + 0x18]
mov ecx, dword [0x5d1f54]
lea edx, [esp + 0x5c]
mov eax, dword [ecx]
push edx
sub esp, 0x10
mov edx, esp
mov dword [edx], edi
mov dword [edx + 4], ebx
mov dword [edx + 8], esi
mov dword [edx + 0xc], ebp
mov edx, dword [esp + 0x2c]
push edx
mov edx, dword [esp + 0xe4]
push edx
call dword [eax + 0x68]
mov ebp, dword [esp + 0xcc]
jmp 0x4b0675
mov eax, dword [esp + 0x50]
test eax, eax
je 0x4b066b
mov eax, dword [0x5d1fb0]
mov dword [esp + 0x5c], eax
jmp 0x4b0675
mov ecx, dword [0x5d1fa0]
mov dword [esp + 0x5c], ecx
mov ebx, dword [esp + 0x18]
lea ecx, [esp + 0x2c]
lea esi, [ebx + 0x10]
push esi
call fcn.00462f38
lea ecx, [esp + 0x78]
mov byte [esp + 0xc4], 0xf
call fcn.00462ea8
push 9
mov ecx, esi
mov byte [esp + 0xc8], 0x10
call fcn.0046305e
mov edi, eax
test edi, edi
jl 0x4b0711
lea edx, [esp + 0x10]
push edi
push edx
lea ecx, [esp + 0x34]
call fcn.004630a0
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0xc8], 0x11
call fcn.00462ed8
lea ecx, [esp + 0x10]
mov byte [esp + 0xc4], 0x10
call fcn.00462da6
inc edi
lea eax, [esp + 0x10]
push edi
push eax
mov ecx, esi
call fcn.0046309a
push eax
lea ecx, [esp + 0x7c]
mov byte [esp + 0xc8], 0x12
call fcn.00462ed8
lea ecx, [esp + 0x10]
mov byte [esp + 0xc4], 0x10
call fcn.00462da6
mov ecx, dword [ebp + 8]
push ecx
call dword [0x587074]
mov ecx, dword [esp + 0x84]
mov dword [esp + 0x7c], eax
mov eax, dword [ebx + 0x20]
add ecx, 3
test eax, eax
mov dword [esp + 0x84], ecx
jne 0x4b081e
push 0x5c9cb0
lea ecx, [esp + 0x74]
call fcn.00462da0
mov edx, dword [esp + 0x2c]
mov byte [esp + 0xc4], 0x13
mov eax, dword [edx - 8]
test eax, eax
jle 0x4b07fb
mov esi, dword [0x5870a0]
lea eax, [esp + 0x70]
lea ecx, [esp + 0x2c]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
call fcn.00463052
mov eax, dword [eax]
lea edx, [esp + 0x34]
push edx
mov ecx, dword [eax - 8]
push ecx
push eax
mov eax, dword [ebp + 8]
push eax
call esi
mov ecx, dword [esp + 0x8c]
mov edi, dword [esp + 0x84]
mov edx, dword [esp + 0x34]
sub ecx, edi
cmp edx, ecx
lea ecx, [esp + 0x10]
setg bl
call fcn.00462da6
test bl, bl
je 0x4b07fb
mov edx, dword [esp + 0x2c]
lea ecx, [esp + 0x2c]
mov eax, dword [edx - 8]
dec eax
push eax
lea eax, [esp + 0x58]
push eax
call fcn.004630a0
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0xc8], 0x14
call fcn.00462ed8
lea ecx, [esp + 0x54]
mov byte [esp + 0xc4], 0x13
call fcn.00462da6
mov ecx, dword [esp + 0x2c]
mov eax, dword [ecx - 8]
test eax, eax
jg 0x4b0766
lea edx, [esp + 0x70]
lea ecx, [esp + 0x2c]
push edx
call fcn.00463088
lea ecx, [esp + 0x70]
mov byte [esp + 0xc4], 0x10
call fcn.00462da6
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x50]
test esi, esi
je 0x4b090e
mov eax, dword [esp + 0xdc]
test eax, eax
jne 0x4b090e
mov eax, dword [0x5d1f54]
test eax, eax
jne 0x4b08a6
mov ecx, dword [0x5d1f58]
test ecx, ecx
jne 0x4b0885
push 0x60
call fcn.00462ec0
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
mov byte [esp + 0xc4], 0x15
je 0x4b0879
push 0
mov ecx, eax
call fcn.004a07e0
mov byte [esp + 0xc4], 0x10
jmp 0x4b088a
xor eax, eax
mov byte [esp + 0xc4], 0x10
jmp 0x4b088a
call fcn.00463754
mov dword [0x5d1f54], eax
mov dword [eax + 0x5c], 1
mov ecx, dword [0x5d1f54]
mov eax, dword [ecx]
call dword [eax + 0x18]
mov eax, dword [0x5d1f54]
mov ecx, dword [eax + 0x14]
test ecx, ecx
je 0x4b090e
mov eax, dword [0x5d1f9c]
mov edx, dword [ebp]
push eax
mov ecx, ebp
call dword [edx + 0x38]
mov edx, dword [esp + 0x88]
mov ecx, dword [esp + 0x84]
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x20], edx
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x90]
push 1
lea edx, [esp + 0x20]
push 1
push edx
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], ecx
call dword [0x588608]
mov eax, dword [esp + 0x2c]
mov edx, dword [ebp]
lea edi, [esp + 0x1c]
push 0x24
mov ecx, dword [eax - 8]
push edi
push ecx
push eax
mov ecx, ebp
call dword [edx + 0x70]
mov ecx, dword [esp + 0x5c]
mov eax, dword [ebp]
push ecx
mov ecx, ebp
call dword [eax + 0x38]
mov eax, dword [esp + 0x2c]
mov edx, dword [ebp]
lea edi, [esp + 0x84]
push 0x24
mov ecx, dword [eax - 8]
push edi
push ecx
push eax
mov ecx, ebp
call dword [edx + 0x70]
mov eax, dword [esp + 0x78]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x4b0a99
mov edx, dword [esp + 0x88]
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0x84]
mov dword [esp + 0x20], edx
mov edx, dword [esp + 0x94]
mov dword [esp + 0x24], eax
sub eax, edx
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x90]
sub eax, 3
test esi, esi
mov dword [esp + 0x28], ecx
mov dword [esp + 0x24], eax
je 0x4b0a74
mov eax, dword [esp + 0xdc]
test eax, eax
jne 0x4b0a74
mov eax, dword [0x5d1f54]
test eax, eax
jne 0x4b0a05
mov ecx, dword [0x5d1f58]
test ecx, ecx
jne 0x4b09e4
push 0x60
call fcn.00462ec0
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
mov byte [esp + 0xc4], 0x16
je 0x4b09d8
push 0
mov ecx, eax
call fcn.004a07e0
mov byte [esp + 0xc4], 0x10
jmp 0x4b09e9
xor eax, eax
mov byte [esp + 0xc4], 0x10
jmp 0x4b09e9
call fcn.00463754
mov dword [0x5d1f54], eax
mov dword [eax + 0x5c], 1
mov ecx, dword [0x5d1f54]
mov edx, dword [ecx]
call dword [edx + 0x18]
mov eax, dword [0x5d1f54]
mov ecx, dword [eax + 0x14]
test ecx, ecx
je 0x4b0a74
mov ecx, dword [0x5d1f9c]
mov eax, dword [ebp]
push ecx
mov ecx, ebp
call dword [eax + 0x38]
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x98], eax
mov dword [esp + 0x94], edx
mov edx, dword [esp + 0x28]
push 1
lea eax, [esp + 0x98]
push 1
push eax
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xac], edx
call dword [0x588608]
mov eax, dword [esp + 0x78]
mov edx, dword [ebp]
lea esi, [esp + 0x94]
push 0x26
mov ecx, dword [eax - 8]
push esi
push ecx
push eax
mov ecx, ebp
call dword [edx + 0x70]
mov ecx, dword [esp + 0x5c]
mov eax, dword [ebp]
push ecx
mov ecx, ebp
call dword [eax + 0x38]
mov eax, dword [esp + 0x78]
mov edx, dword [ebp]
lea esi, [esp + 0x1c]
push 0x26
mov ecx, dword [eax - 8]
push esi
push ecx
push eax
mov ecx, ebp
call dword [edx + 0x70]
cmp dword [ebx + 8], 0xffffffff
je 0x4b0ab7
mov eax, dword [ebx + 0x84]
test eax, eax
jne 0x4b0ab7
mov eax, dword [ebx + 0xa4]
test eax, eax
je 0x4b0b60
mov eax, dword [ebp]
push 0x5d20bc
mov ecx, ebp
call dword [eax + 0x30]
mov esi, eax
mov eax, dword [esp + 0xd0]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x1c], ecx
mov ecx, dword [eax + 8]
mov dword [esp + 0x20], edx
mov edx, dword [eax + 0xc]
mov dword [esp + 0x24], ecx
mov ecx, dword [ebx + 0x90]
mov dword [esp + 0x28], edx
call fcn.00560f62
test eax, 0x400000
mov eax, 0x5cc118
jne 0x4b0b04
mov eax, 0x5cc114
push eax
lea ecx, [esp + 0x58]
call fcn.00462da0
mov eax, dword [ebx + 0xbc]
mov byte [esp + 0xc4], 0x17
test eax, eax
je 0x4b0b2e
push 0x5cc110
lea ecx, [esp + 0x58]
call fcn.00462f32
mov eax, dword [esp + 0x54]
mov edx, dword [ebp]
lea edi, [esp + 0x1c]
push 0x26
mov ecx, dword [eax - 8]
push edi
push ecx
push eax
mov ecx, ebp
call dword [edx + 0x70]
mov eax, dword [ebp]
push esi
mov ecx, ebp
call dword [eax + 0x30]
lea ecx, [esp + 0x54]
mov byte [esp + 0xc4], 0x10
call fcn.00462da6
mov eax, dword [esp + 0xac]
test eax, eax
je 0x4b0b74
mov edx, dword [ebp]
push eax
mov ecx, ebp
call dword [edx + 0x30]
mov ecx, dword [esp + 0x7c]
mov eax, dword [ebp]
push ecx
mov ecx, ebp
call dword [eax + 0x38]
mov ecx, dword [esp + 0x4c]
test ecx, ecx
je 0x4b0b96
lea edx, [esp + 0xb0]
push edx
call fcn.004eaa20
lea ecx, [esp + 0x78]
mov byte [esp + 0xc4], 0xf
call fcn.00462da6
lea ecx, [esp + 0x2c]
mov byte [esp + 0xc4], 3
call fcn.00462da6
mov dword [esp + 0xa4], 0x588b4c
lea ecx, [esp + 0xa4]
mov dword [esp + 0xc4], 0x18
call fcn.00463082
mov ecx, dword [esp + 0xbc]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0xb8
ret 0x18