Function at 0x4b7c38
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x2a8
push ebx
push ebp
push esi
mov esi, ecx
push edi
lea eax, [esi + 4]
push 4
xor ebx, ebx
push eax
mov dword [esi], ebx
call fcn.004c15e0
mov dword [esi + 8], ebx
mov dword [esp + 0x2c], ebx
mov eax, dword [esp + 0x2c]
mov dword [esi + 0x10], eax
mov dword [esp + 0x30], ebx
mov ecx, dword [esp + 0x30]
mov dword [esi + 0x14], ecx
mov dword [esi + 0x18], ebx
mov dword [esp + 0x38], ebx
mov edx, dword [esp + 0x38]
mov dword [esi + 0x1c], edx
mov ebp, 1
lea eax, [esi + 0x48]
mov edi, 0xfa0
mov dword [esi + 0xc], edi
push 4
push eax
mov dword [esi + 0x20], ebx
mov dword [esi + 0x24], ebp
mov dword [esi + 0x28], ebp
mov dword [esi + 0x2c], ebp
mov dword [esi + 0x30], ebp
mov dword [esi + 0x34], ebx
mov dword [esi + 0x38], ebx
mov dword [esi + 0x3c], ebx
mov dword [esi + 0x40], ebx
mov dword [esi + 0x44], ebx
call fcn.004c15e0
mov dword [esi + 0x4c], ebx
mov dword [esi + 0x64], ebx
mov dword [esi + 0x68], ebx
mov dword [esp + 0x34], ebx
mov eax, dword [esp + 0x34]
mov dword [esi + 0x54], eax
mov dword [esp + 0x38], ebx
mov ecx, dword [esp + 0x38]
mov dword [esi + 0x58], ecx
mov dword [esi + 0x5c], ebx
mov dword [esp + 0x40], ebx
mov edx, dword [esp + 0x40]
mov dword [esi + 0x60], edx
mov dword [esi + 0x50], edi
mov dword [esi + 0x70], ebp
mov dword [esp + 0x34], ebx
mov eax, dword [esp + 0x34]
mov dword [esi + 0x7c], eax
mov dword [esp + 0x38], ebx
mov ecx, dword [esp + 0x38]
mov dword [esi + 0x80], ecx
mov dword [esi + 0x74], ebx
mov dword [esi + 0x84], ebx
mov dword [esp + 0x40], ebx
mov edx, dword [esp + 0x40]
mov dword [esi + 0x78], edi
mov dword [esi + 0x88], edx
mov dword [esi + 0x8c], ebx
mov dword [esi + 0x90], ebx
mov dword [esi + 0x9c], ebx
mov dword [esi + 0xa0], ebx
add esp, 0x10
lea ecx, [esi + 0xac]
mov dword [esi + 0xa4], ebx
mov dword [esi + 0xa8], ebx
call fcn.004f7130
lea ebp, [esi + 0xb8]
mov dword [esp + 0x18], ebp
mov dword [ebp], ebx
mov dword [ebp + 4], ebx
mov dword [ebp + 8], 0xff
push 0x200
push ebx
call fcn.004c1720
mov dword [ebp], eax
mov dword [ebp + 4], ebx
mov word [eax], bx
push 0x200
push ebx
mov dword [esi + 0xc4], ebx
mov dword [esi + 0xc8], ebx
mov dword [esi + 0xcc], 0xff
call fcn.004c1720
mov dword [esi + 0xc4], eax
mov dword [esi + 0xc8], ebx
mov word [eax], bx
mov dword [esi + 0xd0], ebx
mov dword [esi + 0xe8], ebx
mov dword [esi + 0xec], ebx
mov dword [esp + 0x34], ebx
mov eax, dword [esp + 0x34]
mov dword [esi + 0xd8], eax
mov dword [esp + 0x38], ebx
mov ecx, dword [esp + 0x38]
mov dword [esi + 0xdc], ecx
mov dword [esi + 0xe0], ebx
mov dword [esp + 0x40], ebx
mov edx, dword [esp + 0x40]
mov dword [esi + 0xe4], edx
mov dword [esi + 0xd4], edi
mov dword [esi + 0xf4], 0x6000000
mov dword [esi + 0xf8], ebx
mov dword [esi + 0xfc], ebx
mov dword [esp + 0x34], ebx
mov eax, dword [esp + 0x34]
mov dword [esi + 0x108], eax
mov dword [esi + 0x100], ebx
mov dword [esp + 0x38], ebx
mov ecx, dword [esp + 0x38]
mov dword [esi + 0x10c], ecx
mov dword [esi + 0x110], ebx
mov dword [esi + 0x118], ebx
mov dword [esi + 0x11c], ebx
mov dword [esp + 0x40], ebx
mov edx, dword [esp + 0x40]
mov dword [esi + 0x114], edx
mov dword [esi + 0x104], edi
add esp, 0x10
lea ebp, [esi + 0x124]
push 1
mov dword [esp + 0x28], ebx
mov eax, dword [esp + 0x28]
mov dword [esp + 0x2c], ebx
mov ecx, dword [esp + 0x2c]
push 0x1000ad30
mov dword [ebp + 8], eax
mov dword [ebp + 0xc], ecx
mov dword [esp + 0x38], ebx
mov edx, dword [esp + 0x38]
push 0x1007a65c
mov dword [ebp], ebx
mov dword [ebp + 0x10], ebx
lea ecx, [esi + 0x144]
push 0x1007a650
mov dword [ebp + 4], edi
mov dword [ebp + 0x14], edx
mov dword [ebp + 0x18], ebx
mov dword [ebp + 0x1c], ebx
call fcn.004ab400
push 1
push 0x1000aee0
push 0x1007a640
lea ecx, [esi + 0x16c]
push 0x1007a650
call fcn.004ab400
push 1
push 0x1000b190
push 0x1007a634
lea ecx, [esi + 0x194]
push 0x1007a650
call fcn.004ab400
lea ecx, [esi + 0x1bc]
push 1
push 0x1000b210
push 0x1007a628
push 0x1007a650
call fcn.004ab400
push 1
push 0x1000b290
push 0x1007a618
lea ecx, [esi + 0x1e4]
push 0x1007a650
call fcn.004ab400
push 1
push 0x1000b2f0
push 0x1007a600
lea ecx, [esi + 0x20c]
push 0x1007a650
call fcn.004ab400
push 1
push 0x1000b360
push 0x1007a5e8
lea ecx, [esi + 0x234]
push 0x1007a650
call fcn.004ab400
push ebx
push 0x1000b3d0
push 0x1007a5e0
lea ecx, [esi + 0x25c]
push 0x1007a650
call fcn.004ab400
push 1
push 0x1000b500
push 0x1007a5d0
lea ecx, [esi + 0x284]
push 0x1007a650
call fcn.004ab400
push 1
push 0x1000b660
push 0x1007a5c0
lea ecx, [esi + 0x2ac]
push 0x1007a650
call fcn.004ab400
push 1
push 0x10002160
push 0x1007a5a8
lea ecx, [esi + 0x2d4]
push 0x1007a650
call fcn.004ab400
push 1
push 0x1000b780
push 0x1007a590
lea ecx, [esi + 0x2fc]
push 0x1007a650
call fcn.004ab400
push 1
push 0x100021a0
push 0x1007a57c
lea ecx, [esi + 0x324]
push 0x1007a650
call fcn.004ab400
push 1
push 0x10002210
push 0x1007a568
lea ecx, [esi + 0x34c]
push 0x1007a650
call fcn.004ab400
push 1
push 0x1000b7e0
push 0x1007a558
lea ecx, [esi + 0x374]
push 0x1007a650
call fcn.004ab400
push 1
push 0x10002270
push 0x1007a540
lea ecx, [esi + 0x39c]
push 0x1007a650
call fcn.004ab400
push ebx
push 0x1000b850
push 0x1007a52c
lea ecx, [esi + 0x3c4]
push 0x1007a650
call fcn.004ab400
push 1
push 0x1000b920
push 0x1007a510
lea ecx, [esi + 0x3ec]
push 0x1007a650
call fcn.004ab400
push 1
push 0x1000b980
push 0x1007a4f0
lea ecx, [esi + 0x414]
push 0x1007a650
call fcn.004ab400
push 1
push 0x1000b9f0
push 0x1007a4d8
lea ecx, [esi + 0x43c]
push 0x1007a650
call fcn.004ab400
push 1
push 0x1000ba80
push 0x1007a4cc
lea ecx, [esi + 0x464]
push 0x1007a650
call fcn.004ab400
push 1
push 0x1000bb60
push 0x1007a4bc
lea ecx, [esi + 0x48c]
push 0x1007a650
call fcn.004ab400
push 1
push 0x1000bbf0
push 0x1007a4a8
lea ecx, [esi + 0x4b4]
push 0x1007a650
call fcn.004ab400
push 1
push 0x1000bc70
push 0x1007a498
lea ecx, [esi + 0x4dc]
push 0x1007a650
call fcn.004ab400
push 1
push 0x1000bcf0
push 0x1007a47c
lea ecx, [esi + 0x504]
push 0x1007a650
call fcn.004ab400
push 1
push 0x1000bd70
push 0x1007a464
lea ecx, [esi + 0x52c]
push 0x1007a650
call fcn.004ab400
push 1
push 0x1000be60
push 0x1007a448
lea ecx, [esi + 0x554]
push 0x1007a650
call fcn.004ab400
push 1
push 0x10004a30
push 0x1007a438
lea ecx, [esi + 0x57c]
push 0x1007a650
call fcn.004ab400
push 2
push 0x10004b20
push 0x1007a42c
lea ecx, [esi + 0x5a4]
push 0x1007a650
call fcn.004ab400
push 2
push 0x100022b0
push 0x1007a420
lea ecx, [esi + 0x5cc]
push 0x1007a650
call fcn.004ab400
lea ecx, [esi + 0x5f4]
push 2
push 0x10004c40
push 0x1007a40c
push 0x1007a650
call fcn.004ab400
push 2
push 0x10002330
push 0x1007a3fc
lea ecx, [esi + 0x61c]
push 0x1007a650
call fcn.004ab400
push 2
push 0x10002380
push 0x1007a3e8
lea ecx, [esi + 0x644]
push 0x1007a650
call fcn.004ab400
push 2
push 0x10002410
push 0x1007a3dc
lea ecx, [esi + 0x66c]
push 0x1007a650
call fcn.004ab400
push 2
push 0x10004de0
push 0x1007a3d0
lea ecx, [esi + 0x694]
push 0x1007a650
call fcn.004ab400
push 2
push 0x1000bf90
push 0x1007a3c4
lea ecx, [esi + 0x6bc]
push 0x1007a650
call fcn.004ab400
push 2
push 0x100024b0
push 0x1007a3b0
lea ecx, [esi + 0x6e4]
push 0x1007a650
call fcn.004ab400
push 2
push 0x100025c0
push 0x1007a3a4
lea ecx, [esi + 0x70c]
push 0x1007a650
call fcn.004ab400
push 2
push 0x10002570
push 0x1007a398
lea ecx, [esi + 0x734]
push 0x1007a650
call fcn.004ab400
push 2
push 0x10002600
push 0x1007a38c
lea ecx, [esi + 0x75c]
push 0x1007a650
call fcn.004ab400
push 2
push 0x10002690
push 0x1007a374
lea ecx, [esi + 0x784]
push 0x1007a650
call fcn.004ab400
push 2
push 0x10004ef0
push 0x1007a364
lea ecx, [esi + 0x7ac]
push 0x1007a650
call fcn.004ab400
push 2
push 0x10004fe0
push 0x1007a354
lea ecx, [esi + 0x7d4]
push 0x1007a650
call fcn.004ab400
push 2
push 0x1000c100
push 0x1007a344
lea ecx, [esi + 0x7fc]
push 0x1007a650
call fcn.004ab400
push 2
push 0x1000c1c0
push 0x1007a338
lea ecx, [esi + 0x824]
push 0x1007a650
call fcn.004ab400
push 2
push 0x10002720
push 0x1007a324
lea ecx, [esi + 0x84c]
push 0x1007a650
call fcn.004ab400
push 2
push 0x100050a0
push 0x1007a314
lea ecx, [esi + 0x874]
push 0x1007a650
call fcn.004ab400
push 2
push 0x10005190
push 0x1007a308
lea ecx, [esi + 0x89c]
push 0x1007a650
call fcn.004ab400
push 2
push 0x10005250
push 0x1007a2fc
lea ecx, [esi + 0x8c4]
push 0x1007a650
call fcn.004ab400
push ebx
push 0x1000c270
push 0x1007a2ec
lea ecx, [esi + 0x8ec]
push 0x1007a650
call fcn.004ab400
push ebx
push 0x10007b50
push 0x1007a2dc
lea edi, [esi + 0x914]
lea ecx, [esi + 0x920]
push 0x10078694
mov dword [edi], ebx
mov dword [edi + 4], ebx
call fcn.004ab400
push ebx
push 0x10001340
push 0x1007a2b4
lea ecx, [esi + 0x948]
push 0x1007a650
call fcn.004ab400
push ebx
push 0x1000e940
push 0x1007a2a4
lea ecx, [esi + 0x970]
push 0x10078694
call fcn.004ab400
push ebx
push 0x1000c370
push 0x1007a294
lea ecx, [esi + 0x998]
push 0x10078694
call fcn.004ab400
push ebx
push 0x10010210
push 0x1007a28c
lea ecx, [esi + 0x9c0]
push 0x10078694
call fcn.004ab400
push ebx
push 0x10008d00
push 0x10078fc0
lea ecx, [esi + 0x9e8]
push 0x1007a27c
call fcn.004ab400
push ebx
push 0x10008d60
push 0x10078fd4
lea ecx, [esi + 0xa10]
push 0x1007a27c
call fcn.004ab400
push ebx
push 0x100064e0
push 0x10078590
lea ecx, [esi + 0xa38]
push 0x1007a650
call fcn.004ab400
push ebx
push 0x10001770
push 0x1007a26c
lea ecx, [esi + 0xa60]
push 0x1007a650
call fcn.004ab400
push ebx
push 0x10006680
push 0x1007a250
lea ecx, [esi + 0xa88]
push 0x1007a650
call fcn.004ab400
push ebx
push 0x1000ce40
push 0x1007a238
lea ecx, [esi + 0xab0]
push 0x1007a650
call fcn.004ab400
push ebx
push 0x100017a0
push 0x1007a228
lea ecx, [esi + 0xad8]
push 0x1007a650
call fcn.004ab400
push ebx
push 0x1000d040
push 0x1007a210
lea ecx, [esi + 0xb00]
push 0x1007a204
call fcn.004ab400
push ebx
push 0x1000d140
push 0x1007a1f0
lea ecx, [esi + 0xb28]
push 0x1007a204
call fcn.004ab400
push ebx
push 0x100105b0
push 0x1007a1dc
lea ecx, [esi + 0xb50]
push 0x1007a204
call fcn.004ab400
push ebx
push 0x1000f800
push 0x1007a1c8
lea ecx, [esi + 0xb78]
push 0x1007a204
call fcn.004ab400
push ebx
push 0x1000f920
push 0x1007a1b4
lea ecx, [esi + 0xba0]
push 0x1007a204
call fcn.004ab400
push ebx
push 0x1000ff30
push 0x1007a1a0
lea ecx, [esi + 0xbc8]
push 0x1007a204
call fcn.004ab400
push 1
push 0x10002a70
push 0x1007a190
lea ecx, [esi + 0xbf4]
push 0x1007a180
mov dword [esi + 0xbf0], ebx
call fcn.004ab400
push 1
push 0x10002a80
push 0x1007a170
lea ecx, [esi + 0xc1c]
push 0x1007a180
call fcn.004ab400
mov dword [0x100b7078], esi
call dword [0x10078150]
push 0x178
mov dword [esi + 0x98], eax
call fcn.004a8640
add esp, 4
cmp eax, ebx
je 0x4b864f
push esi
mov ecx, eax
call fcn.004d5500
mov dword [esp + 0x14], eax
jmp 0x4b8653
mov dword [esp + 0x14], ebx
mov eax, dword [esi]
cmp eax, ebx
mov dword [esp + 0x10], eax
je 0x4b8673
mov ecx, eax
call fcn.004d5920
mov eax, dword [esp + 0x10]
push eax
call fcn.004a8630
add esp, 4
mov dword [esi], ebx
mov ecx, dword [esp + 0x14]
lea eax, [esi + 4]
push eax
mov dword [esi], ecx
call fcn.00506dc0
add esp, 4
lea eax, [esi + 0x144]
lea edx, [esp + 0x10]
mov dword [esp + 0x10], eax
push edx
mov eax, edx
push eax
mov ecx, edi
call fcn.004ab050
lea ecx, [esp + 0x14]
push ecx
mov edx, ecx
lea eax, [esi + 0x16c]
push edx
mov ecx, edi
mov dword [esp + 0x1c], eax
call fcn.004ab050
lea eax, [esi + 0x194]
mov dword [esp + 0x38], eax
lea eax, [esp + 0x38]
mov ecx, eax
push eax
push ecx
mov ecx, edi
call fcn.004ab050
lea eax, [esi + 0x1bc]
lea edx, [esp + 0x1c]
mov dword [esp + 0x1c], eax
push edx
mov eax, edx
push eax
mov ecx, edi
call fcn.004ab050
lea ecx, [esp + 0xfc]
push ecx
mov edx, ecx
lea eax, [esi + 0x1e4]
push edx
mov ecx, edi
mov dword [esp + 0x104], eax
call fcn.004ab050
lea eax, [esi + 0x20c]
mov dword [esp + 0x84], eax
lea eax, [esp + 0x84]
mov ecx, eax
push eax
push ecx
mov ecx, edi
call fcn.004ab050
lea eax, [esi + 0x234]
lea edx, [esp + 0x8c]
mov dword [esp + 0x8c], eax
push edx
mov eax, edx
push eax
mov ecx, edi
call fcn.004ab050
lea ecx, [esp + 0x94]
push ecx
mov edx, ecx
lea eax, [esi + 0x25c]
push edx
mov ecx, edi
mov dword [esp + 0x9c], eax
call fcn.004ab050
lea eax, [esi + 0x284]
mov dword [esp + 0x9c], eax
lea eax, [esp + 0x9c]
mov ecx, eax
push eax
push ecx
mov ecx, edi
call fcn.004ab050
lea eax, [esi + 0x2ac]
mov dword [esp + 0xa4], eax
lea edx, [esp + 0xa4]
push edx
mov eax, edx
push eax
mov ecx, edi
call fcn.004ab050
lea ecx, [esp + 0xac]
push ecx
mov edx, ecx
lea eax, [esi + 0x2d4]
push edx
mov ecx, edi
mov dword [esp + 0xb4], eax
call fcn.004ab050
lea eax, [esi + 0x2fc]
mov dword [esp + 0xb4], eax
lea eax, [esp + 0xb4]
mov ecx, eax
push eax
push ecx
mov ecx, edi
call fcn.004ab050
lea eax, [esi + 0x324]
lea edx, [esp + 0xbc]
mov dword [esp + 0xbc], eax
push edx
mov eax, edx
push eax
mov ecx, edi
call fcn.004ab050
lea ecx, [esp + 0xc4]
push ecx
mov edx, ecx
lea eax, [esi + 0x34c]
push edx
mov ecx, edi
mov dword [esp + 0xcc], eax
call fcn.004ab050
lea eax, [esi + 0x374]
mov dword [esp + 0x140], eax
lea eax, [esp + 0x140]
mov ecx, eax
push eax
push ecx
mov ecx, edi
call fcn.004ab050
lea eax, [esi + 0x39c]
lea edx, [esp + 0x13c]
mov dword [esp + 0x13c], eax
push edx
mov eax, edx
push eax
mov ecx, edi
call fcn.004ab050
lea ecx, [esp + 0x6c]
push ecx
mov edx, ecx
lea eax, [esi + 0x3c4]
push edx
mov ecx, edi
mov dword [esp + 0x74], eax
call fcn.004ab050
lea eax, [esi + 0x3ec]
mov dword [esp + 0xd8], eax
lea eax, [esp + 0xd8]
mov ecx, eax
push eax
push ecx
mov ecx, edi
call fcn.004ab050
lea eax, [esi + 0x414]
lea edx, [esp + 0x74]
mov dword [esp + 0x74], eax
push edx
mov eax, edx
push eax
mov ecx, edi
call fcn.004ab050
lea eax, [esi + 0x43c]
lea ecx, [esp + 0xe0]
mov dword [esp + 0xe0], eax
push ecx
mov edx, ecx
push edx
mov ecx, edi
call fcn.004ab050
lea eax, [esi + 0x464]
mov dword [esp + 0x80], eax
lea eax, [esp + 0x80]
mov ecx, eax
push eax
push ecx
mov ecx, edi
call fcn.004ab050
lea eax, [esi + 0x48c]
lea edx, [esp + 0xe8]
mov dword [esp + 0xe8], eax
push edx
mov eax, edx
push eax
mov ecx, edi
call fcn.004ab050
lea ecx, [esp + 0x88]
push ecx
mov edx, ecx
lea eax, [esi + 0x4b4]
push edx
mov ecx, edi
mov dword [esp + 0x90], eax
call fcn.004ab050
lea eax, [esi + 0x4dc]
mov dword [esp + 0xf0], eax
lea eax, [esp + 0xf0]
mov ecx, eax
push eax
push ecx
mov ecx, edi
call fcn.004ab050
lea eax, [esi + 0x504]
lea edx, [esp + 0x90]
mov dword [esp + 0x90], eax
push edx
mov eax, edx
push eax
mov ecx, edi
call fcn.004ab050
lea ecx, [esp + 0xf8]
push ecx
mov edx, ecx
lea eax, [esi + 0x52c]
push edx
mov ecx, edi
mov dword [esp + 0x100], eax
call fcn.004ab050
lea eax, [esi + 0x554]
mov dword [esp + 0x98], eax
lea eax, [esp + 0x98]
mov ecx, eax
push eax
push ecx
mov ecx, edi
call fcn.004ab050
lea eax, [esi + 0x57c]
lea edx, [esp + 0x100]
mov dword [esp + 0x100], eax
push edx
mov eax, edx
push eax
mov ecx, edi
call fcn.004ab050
lea ecx, [esp + 0xa0]
push ecx
mov edx, ecx
lea eax, [esi + 0x5a4]
push edx
mov ecx, edi
mov dword [esp + 0xa8], eax
call fcn.004ab050
lea eax, [esi + 0x5cc]
mov dword [esp + 0x108], eax
lea eax, [esp + 0x108]
push eax
mov ecx, eax
push ecx
mov ecx, edi
call fcn.004ab050
lea eax, [esi + 0x5f4]
lea edx, [esp + 0xa8]
mov dword [esp + 0xa8], eax
push edx
mov eax, edx
push eax
mov ecx, edi
call fcn.004ab050
lea ecx, [esp + 0x110]
push ecx
mov edx, ecx
lea eax, [esi + 0x61c]
push edx
mov ecx, edi
mov dword [esp + 0x118], eax
call fcn.004ab050
lea eax, [esi + 0x644]
mov dword [esp + 0xb0], eax
lea eax, [esp + 0xb0]
mov ecx, eax
push eax
push ecx
mov ecx, edi
call fcn.004ab050
lea eax, [esi + 0x66c]
lea edx, [esp + 0x118]
mov dword [esp + 0x118], eax
push edx
mov eax, edx
push eax
mov ecx, edi
call fcn.004ab050
lea ecx, [esp + 0xb8]
push ecx
mov edx, ecx
lea eax, [esi + 0x694]
push edx
mov ecx, edi
mov dword [esp + 0xc0], eax
call fcn.004ab050
lea eax, [esi + 0x6bc]
mov dword [esp + 0x120], eax
lea eax, [esp + 0x120]
mov ecx, eax
push eax
push ecx
mov ecx, edi
call fcn.004ab050
lea eax, [esi + 0x6e4]
lea edx, [esp + 0xc0]
mov dword [esp + 0xc0], eax
push edx
mov eax, edx
push eax
mov ecx, edi
call fcn.004ab050
lea ecx, [esp + 0x128]
push ecx
mov edx, ecx
lea eax, [esi + 0x70c]
push edx
mov ecx, edi
mov dword [esp + 0x130], eax
call fcn.004ab050
lea eax, [esi + 0x734]
mov dword [esp + 0xc8], eax
lea eax, [esp + 0xc8]
mov ecx, eax
push eax
push ecx
mov ecx, edi
call fcn.004ab050
lea eax, [esi + 0x75c]
lea edx, [esp + 0x130]
mov dword [esp + 0x130], eax
push edx
mov eax, edx
push eax
mov ecx, edi
call fcn.004ab050
lea ecx, [esp + 0x138]
push ecx
mov edx, ecx
lea eax, [esi + 0x784]
push edx
mov ecx, edi
mov dword [esp + 0x140], eax
call fcn.004ab050
lea eax, [esi + 0x7ac]
mov dword [esp + 0xd4], eax
lea eax, [esp + 0xd4]
mov ecx, eax
push eax
push ecx
mov ecx, edi
call fcn.004ab050
lea eax, [esi + 0x7d4]
lea edx, [esp + 0x11c]
mov dword [esp + 0x11c], eax
push edx
mov eax, edx
push eax
mov ecx, edi
call fcn.004ab050
lea ecx, [esp + 0xdc]
push ecx
mov edx, ecx
lea eax, [esi + 0x7fc]
push edx
mov ecx, edi
mov dword [esp + 0xe4], eax
call fcn.004ab050
lea eax, [esi + 0x824]
mov dword [esp + 0x15c], eax
lea eax, [esp + 0x15c]
mov ecx, eax
push eax
push ecx
mov ecx, edi
call fcn.004ab050
lea eax, [esi + 0x84c]
lea edx, [esp + 0xe4]
mov dword [esp + 0xe4], eax
push edx
mov eax, edx
push eax
mov ecx, edi
call fcn.004ab050
lea ecx, [esp + 0x124]
push ecx
mov edx, ecx
lea eax, [esi + 0x874]
push edx
mov ecx, edi
mov dword [esp + 0x12c], eax
call fcn.004ab050
lea eax, [esi + 0x89c]
mov dword [esp + 0xec], eax
lea eax, [esp + 0xec]
mov ecx, eax
push eax
push ecx
mov ecx, edi
call fcn.004ab050
lea eax, [esi + 0x8c4]
lea edx, [esp + 0x144]
mov dword [esp + 0x144], eax
push edx
mov eax, edx
push eax
mov ecx, edi
call fcn.004ab050
lea ecx, [esp + 0xf4]
push ecx
mov edx, ecx
lea eax, [esi + 0x8ec]
mov dword [esp + 0xf8], eax
push edx
mov ecx, edi
call fcn.004ab050
lea eax, [esi + 0xa88]
mov dword [esp + 0x12c], eax
lea eax, [esp + 0x12c]
mov ecx, eax
push eax
push ecx
mov ecx, edi
call fcn.004ab050
lea eax, [esi + 0xab0]
lea edx, [esp + 0x64]
mov dword [esp + 0x64], eax
push edx
mov eax, edx
push eax
mov ecx, edi
call fcn.004ab050
lea ecx, [esp + 0x158]
push ecx
mov edx, ecx
lea eax, [esi + 0xad8]
push edx
mov ecx, edi
mov dword [esp + 0x160], eax
call fcn.004ab050
lea eax, [esi + 0x920]
mov dword [esp + 0x104], eax
lea eax, [esp + 0x104]
mov ecx, eax
push eax
push ecx
mov ecx, edi
call fcn.004ab050
lea eax, [esi + 0x948]
lea edx, [esp + 0x134]
mov dword [esp + 0x134], eax
push edx
mov eax, edx
push eax
mov ecx, edi
call fcn.004ab050
lea ecx, [esp + 0x10c]
push ecx
mov edx, ecx
lea eax, [esi + 0x970]
push edx
mov ecx, edi
mov dword [esp + 0x114], eax
call fcn.004ab050
lea eax, [esi + 0x998]
mov dword [esp + 0x154], eax
lea eax, [esp + 0x154]
mov ecx, eax
push eax
push ecx
mov ecx, edi
call fcn.004ab050
lea eax, [esi + 0x9c0]
lea edx, [esp + 0x114]
mov dword [esp + 0x114], eax
push edx
mov eax, edx
push eax
mov ecx, edi
call fcn.004ab050
lea ecx, [esp + 0xcc]
push ecx
mov edx, ecx
lea eax, [esi + 0x9e8]
push edx
mov ecx, edi
mov dword [esp + 0xd4], eax
call fcn.004ab050
lea eax, [esi + 0xa10]
mov dword [esp + 0xd0], eax
lea eax, [esp + 0xd0]
mov ecx, eax
push eax
push ecx
mov ecx, edi
call fcn.004ab050
lea eax, [esi + 0xa38]
lea edx, [esp + 0x68]
mov dword [esp + 0x68], eax
push edx
mov eax, edx
push eax
mov ecx, edi
call fcn.004ab050
lea ecx, [esp + 0x70]
push ecx
mov edx, ecx
lea eax, [esi + 0xa60]
push edx
mov ecx, edi
mov dword [esp + 0x78], eax
call fcn.004ab050
lea eax, [esi + 0xb00]
mov dword [esp + 0x78], eax
lea eax, [esp + 0x78]
mov ecx, eax
push eax
push ecx
mov ecx, edi
call fcn.004ab050
lea eax, [esi + 0xb28]
lea edx, [esp + 0x50]
mov dword [esp + 0x50], eax
push edx
mov eax, edx
push eax
mov ecx, edi
call fcn.004ab050
lea ecx, [esp + 0x48]
push ecx
mov edx, ecx
lea eax, [esi + 0xb50]
push edx
mov ecx, edi
mov dword [esp + 0x50], eax
call fcn.004ab050
lea eax, [esi + 0xb78]
mov dword [esp + 0x54], eax
lea eax, [esp + 0x54]
mov ecx, eax
push eax
push ecx
mov ecx, edi
call fcn.004ab050
lea eax, [esi + 0xba0]
lea edx, [esp + 0x4c]
mov dword [esp + 0x4c], eax
push edx
mov eax, edx
push eax
mov ecx, edi
call fcn.004ab050
lea ecx, [esp + 0x44]
push ecx
mov edx, ecx
lea eax, [esi + 0xbf4]
push edx
mov ecx, edi
mov dword [esp + 0x4c], eax
call fcn.004ab050
lea eax, [esi + 0xc1c]
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x3c]
mov ecx, eax
push eax
push ecx
mov ecx, edi
call fcn.004ab050
lea eax, [esi + 0xbc8]
lea edx, [esp + 0x40]
mov dword [esp + 0x40], eax
push edx
mov eax, edx
push eax
mov ecx, edi
call fcn.004ab050
mov edi, dword [edi]
cmp edi, ebx
je 0x4b8ec3
nop
mov eax, dword [edi + 8]
mov eax, dword [eax + 4]
cmp dword [eax], ebx
mov edi, dword [edi + 4]
je 0x4b8ebf
mov edx, dword [eax + 8]
push 5
lea ecx, [eax + 0x19]
push ecx
push edx
call fcn.004c85e0
add esp, 0xc
cmp edi, ebx
jne 0x4b8ea0
lea eax, [esp + 0x20]
push eax
call fcn.004c0db0
mov edi, eax
mov eax, dword [esi + 0x48]
add esp, 4
cmp eax, ebx
je 0x4b8ee4
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov dword [esi + 0x48], ebx
mov eax, dword [edi]
cmp eax, ebx
mov dword [esi + 0x48], eax
je 0x4b8ef4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call edx
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x4b8f04
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov ecx, esi
call fcn.004abe20
lea eax, [esp + 0x27c]
push 0x1007a154
push eax
call fcn.004c9730
add esp, 4
push eax
lea ecx, [esp + 0x1e4]
push ecx
call fcn.004aaf30
add esp, 0xc
push eax
mov ecx, ebp
call fcn.004b0530
push eax
mov ecx, ebp
call fcn.004b1780
mov eax, dword [esp + 0x1dc]
cmp eax, ebx
je 0x4b8f6a
push eax
call fcn.004c17d0
add esp, 4
mov dword [esp + 0x1dc], ebx
mov dword [esp + 0x1e0], ebx
mov dword [esp + 0x1e4], ebx
mov eax, dword [esp + 0x27c]
cmp eax, ebx
je 0x4b8f7e
push eax
call fcn.004c17d0
add esp, 4
lea edx, [esp + 0x270]
push 0x1007a13c
push edx
call fcn.004c9730
add esp, 4
push eax
lea eax, [esp + 0x1cc]
push eax
call fcn.004aaf30
add esp, 0xc
push eax
mov ecx, ebp
call fcn.004b0530
push eax
mov ecx, ebp
call fcn.004b1780
mov eax, dword [esp + 0x1c4]
cmp eax, ebx
je 0x4b8fdd
push eax
call fcn.004c17d0
add esp, 4
mov dword [esp + 0x1c4], ebx
mov dword [esp + 0x1c8], ebx
mov dword [esp + 0x1cc], ebx
mov eax, dword [esp + 0x270]
cmp eax, ebx
je 0x4b8ff1
push eax
call fcn.004c17d0
add esp, 4
lea ecx, [esp + 0x288]
push 0x1007a120
push ecx
call fcn.004c9730
add esp, 4
push eax
lea edx, [esp + 0x1fc]
push edx
call fcn.004aaf30
add esp, 0xc
push eax
mov ecx, ebp
call fcn.004b0530
push eax
mov ecx, ebp
call fcn.004b1780
mov eax, dword [esp + 0x1f4]
cmp eax, ebx
je 0x4b9050
push eax
call fcn.004c17d0
add esp, 4
mov dword [esp + 0x1f4], ebx
mov dword [esp + 0x1f8], ebx
mov dword [esp + 0x1fc], ebx
mov eax, dword [esp + 0x288]
cmp eax, ebx
je 0x4b9064
push eax
call fcn.004c17d0
add esp, 4
lea eax, [esp + 0x240]
push 0x1007a104
push eax
call fcn.004c9730
add esp, 4
push eax
lea ecx, [esp + 0x1a8]
push ecx
call fcn.004aaf30
add esp, 0xc
push eax
mov ecx, ebp
call fcn.004b0530
push eax
mov ecx, ebp
call fcn.004b1780
mov eax, dword [esp + 0x1a0]
cmp eax, ebx
je 0x4b90c3
push eax
call fcn.004c17d0
add esp, 4
mov dword [esp + 0x1a0], ebx
mov dword [esp + 0x1a4], ebx
mov dword [esp + 0x1a8], ebx
mov eax, dword [esp + 0x240]
cmp eax, ebx
je 0x4b90d7
push eax
call fcn.004c17d0
add esp, 4
lea edx, [esp + 0x264]
push 0x1007a0ec
push edx
call fcn.004c9730
add esp, 4
push eax
lea eax, [esp + 0x1c0]
push eax
call fcn.004aaf30
add esp, 0xc
push eax
mov ecx, ebp
call fcn.004b0530
push eax
mov ecx, ebp
call fcn.004b1780
mov eax, dword [esp + 0x1b8]
cmp eax, ebx
je 0x4b9136
push eax
call fcn.004c17d0
add esp, 4
mov dword [esp + 0x1b8], ebx
mov dword [esp + 0x1bc], ebx
mov dword [esp + 0x1c0], ebx
mov eax, dword [esp + 0x264]
cmp eax, ebx
je 0x4b914a
push eax
call fcn.004c17d0
add esp, 4
lea ecx, [esp + 0x294]
push 0x1007a0d8
push ecx
call fcn.004c9730
add esp, 4
push eax
lea edx, [esp + 0x1d8]
push edx
call fcn.004aaf30
add esp, 0xc
push eax
mov ecx, ebp
call fcn.004b0530
push eax
mov ecx, ebp
call fcn.004b1780
mov eax, dword [esp + 0x1d0]
cmp eax, ebx
je 0x4b91a9
push eax
call fcn.004c17d0
add esp, 4
mov dword [esp + 0x1d0], ebx
mov dword [esp + 0x1d4], ebx
mov dword [esp + 0x1d8], ebx
mov eax, dword [esp + 0x294]
cmp eax, ebx
je 0x4b91bd
push eax
call fcn.004c17d0
add esp, 4
lea eax, [esp + 0x24c]
push 0x1007a0c4
push eax
call fcn.004c9730
add esp, 4
push eax
lea ecx, [esp + 0x1f0]
push ecx
call fcn.004aaf30
add esp, 0xc
push eax
mov ecx, ebp
call fcn.004b0530
push eax
mov ecx, ebp
call fcn.004b1780
mov eax, dword [esp + 0x1e8]
cmp eax, ebx
je 0x4b921c
push eax
call fcn.004c17d0
add esp, 4
mov dword [esp + 0x1e8], ebx
mov dword [esp + 0x1ec], ebx
mov dword [esp + 0x1f0], ebx
mov eax, dword [esp + 0x24c]
cmp eax, ebx
je 0x4b9230
push eax
call fcn.004c17d0
add esp, 4
lea edx, [esp + 0x258]
push 0x1007a0b4
push edx
call fcn.004c9730
add esp, 4
push eax
lea eax, [esp + 0x208]
push eax
call fcn.004aaf30
add esp, 0xc
push eax
mov ecx, ebp
call fcn.004b0530
push eax
mov ecx, ebp
call fcn.004b1780
mov eax, dword [esp + 0x200]
cmp eax, ebx
je 0x4b928f
push eax
call fcn.004c17d0
add esp, 4
mov dword [esp + 0x200], ebx
mov dword [esp + 0x204], ebx
mov dword [esp + 0x208], ebx
mov eax, dword [esp + 0x258]
cmp eax, ebx
je 0x4b92a3
push eax
call fcn.004c17d0
add esp, 4
mov ecx, dword [0x100b70c0]
push ecx
lea ecx, [esp + 0x164]
mov dword [esp + 0x164], ebx
mov dword [esp + 0x168], ebx
mov dword [esp + 0x16c], ebx
call fcn.004aa370
mov edx, dword [esp + 0x160]
push 0x10079018
push edx
call fcn.004c8940
add esp, 8
push eax
lea ecx, [esp + 0x18c]
mov dword [esp + 0x18c], ebx
mov dword [esp + 0x190], ebx
mov dword [esp + 0x194], ebx
call fcn.004aa370
mov edi, dword [esp + 0x188]
push edi
lea ecx, [esp + 0x164]
call fcn.004aa370
cmp edi, ebx
je 0x4b9323
push edi
call fcn.004c17d0
add esp, 4
lea eax, [esp + 0x160]
push eax
mov ecx, ebp
call fcn.004b0530
push eax
mov ecx, ebp
call fcn.004b1780
mov eax, dword [esp + 0x160]
cmp eax, ebx
je 0x4b934e
push eax
call fcn.004c17d0
add esp, 4
call fcn.004ae8b0
mov eax, dword [0x100b70b0]
cmp eax, ebx
je 0x4b9363
push eax
call dword [0x1007814c]
cmp dword [0x100b70d4], ebx
mov ebp, dword [0x100780a4]
je 0x4b93bd
push ebx
call ebp
mov edi, dword [eax + 0x3c]
lea ecx, [esp + 0x34]
push ecx
push 4
add edi, eax
push 0xf8
push edi
call dword [0x10078148]
test eax, eax
je 0x4b93bd
mov edx, dword [0x100b70d4]
mov dword [edi + 0xe8], edx
mov eax, dword [0x100b70d8]
lea ecx, [esp + 0x34]
push ecx
mov dword [edi + 0xec], eax
mov edx, dword [esp + 0x38]
push edx
push 0xf8
push edi
call dword [0x10078148]
call fcn.004a95a0
cmp dword [0x100b70dc], ebx
je 0x4b93e8
push ebx
call ebp
mov ecx, dword [eax + 0x3c]
add ecx, eax
mov ecx, dword [ecx + 0x28]
cmp ecx, ebx
je 0x4b9ba2
add eax, ecx
call eax
push eax
call dword [0x10078144]
mov eax, dword [0x100b70ac]
cmp eax, ebx
je 0x4b9c29
push eax
lea ecx, [esp + 0x198]
mov dword [esp + 0x198], ebx
mov dword [esp + 0x19c], ebx
mov dword [esp + 0x1a0], ebx
call fcn.004aa370
mov edi, dword [esp + 0x194]
mov ecx, dword [esp + 0x18]
push edi
call fcn.004aa370
cmp edi, ebx
je 0x4b9435
push edi
call fcn.004c17d0
add esp, 4
mov eax, dword [esp + 0x18]
mov eax, dword [eax]
push ebx
push ebx
push 3
push ebx
push 1
push 0x80000000
push eax
call dword [0x10078040]
mov ecx, dword [esi]
mov edi, eax
lea eax, [esi + 0xac]
push eax
push edi
call fcn.004d0b40
push ebx
push edi
call dword [0x100780ec]
xor ebp, ebp
cmp eax, ebx
mov dword [esp + 0x34], eax
mov dword [esp + 0x78], ebp
jbe 0x4b9486
mov ecx, eax
push ecx
call fcn.004c1680
mov ebp, eax
add esp, 4
mov dword [esp + 0x78], ebp
mov eax, dword [esp + 0x34]
push ebx
lea edx, [esp + 0x21c]
push edx
push eax
push ebp
push edi
call dword [0x1007803c]
push edi
call dword [0x1007810c]
push 1
sub esp, 0xc
mov ecx, esp
push 0x1007a094
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.004aa410
sub esp, 0xc
mov ecx, esp
push 0x1007a090
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.004aa410
push ebp
call fcn.004ca770
add esp, 0x20
push 1
sub esp, 0xc
mov ecx, esp
push 0x1007a078
mov dword [esp + 0x68], eax
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.004aa410
sub esp, 0xc
mov ecx, esp
push 0x1007a090
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.004aa410
push ebp
call fcn.004c9ea0
add esp, 0x20
lea ecx, [esp + 0x21c]
push ecx
push 0x18
lea edx, [esp + 0x2a8]
push edx
push ebx
mov dword [esp + 0x5c], eax
call dword [0x10078204]
push eax
call dword [0x100b7318]
mov eax, dword [esp + 0x2a4]
mov ecx, dword [0x100b7188]
mov dword [esp + 0x3c], eax
add eax, 8
mov dword [esp + 0x10], eax
mov eax, dword [eax]
mov edi, dword [eax + 0x3c]
add edi, eax
mov dword [esp + 0x40], eax
mov eax, dword [edi + 0x50]
xor edx, edx
mov dword [esp + 0x20], eax
div ecx
cmp edx, ebx
jne 0x4b9575
mov eax, dword [esp + 0x20]
jmp 0x4b957b
add eax, 1
imul eax, ecx
mov dword [esp + 0x34], eax
mov eax, dword [ebp + 0x3c]
add eax, ebp
mov dword [esp + 0x1c], eax
mov eax, dword [eax + 0x50]
xor edx, edx
div ecx
cmp edx, ebx
jne 0x4b959c
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx + 0x50]
jmp 0x4b95a2
add eax, 1
imul eax, ecx
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x2a4]
mov dword [esp + 0x38], eax
mov eax, dword [edx]
mov edx, dword [ecx + 0x10]
push eax
add edx, 0x38
push edx
call dword [0x100b7330]
mov eax, dword [esp + 0x1c]
movzx eax, word [eax + 0x5c]
cmp ax, 2
jne 0x4b95de
cmp word [edi + 0x5c], 3
jne 0x4b95fd
call dword [0x10078140]
jmp 0x4b95fd
cmp ax, 3
jne 0x4b95fd
cmp word [edi + 0x5c], 2
jne 0x4b95fd
test dword [0x100b70bc], 8
jne 0x4b95fd
call dword [0x1007813c]
mov ecx, dword [esp + 0x1c]
cmp word [ecx + 0x5c], 3
jne 0x4b962f
cmp word [edi + 0x5c], 3
jne 0x4b9619
cmp dword [0x100b70b4], ebx
jne 0x4b962f
jmp 0x4b9622
mov eax, dword [0x100b70b4]
cmp eax, ebx
jne 0x4b9628
mov edx, dword [esp + 0x18]
mov eax, dword [edx]
push eax
call dword [0x10078138]
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx]
push edx
lea eax, [esp + 0x17c]
push eax
call fcn.004e67e0
mov eax, dword [esp + 0x180]
add esp, 8
push 0x10079018
mov dword [esp + 0x18], eax
mov edi, eax
call dword [0x100780bc]
push edi
mov dword [esp + 0x24], eax
call dword [0x100780bc]
mov ecx, dword [esp + 0x20]
cmp eax, ecx
jl 0x4b96ae
push 0x10079018
xor edi, edi
call dword [0x100780bc]
test eax, eax
jle 0x4b96ae
mov ecx, dword [esp + 0x178]
mov dx, word [ecx + edi*2]
cmp dx, word [edi*2 + 0x10079018]
jne 0x4b96ae
add dword [esp + 0x14], 2
push 0x10079018
add edi, 1
call dword [0x100780bc]
cmp edi, eax
jl 0x4b9682
push 0x200
push ebx
mov dword [esp + 0x158], 0xff
call fcn.004c1720
push 4
mov dword [esp + 0x154], eax
mov dword [esp + 0x158], ebx
mov word [eax], bx
call fcn.004c1680
add esp, 0xc
push 1
push eax
push 0x1007a06c
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], 2
call dword [0x10078134]
cmp eax, ebx
jbe 0x4b9773
add eax, 1
push eax
lea ecx, [esp + 0x60]
call fcn.004a9370
mov eax, dword [esp + 0x60]
mov edi, dword [esp + 0x5c]
lea ecx, [eax + eax]
push ecx
push edi
call fcn.004c15e0
mov edx, dword [esp + 0x68]
add esp, 8
push edx
push edi
push 0x1007a06c
call dword [0x10078134]
push edi
lea ecx, [esp + 0x1b0]
mov dword [esp + 0x1b0], ebx
mov dword [esp + 0x1b4], ebx
mov dword [esp + 0x1b8], ebx
call fcn.004aa370
mov edi, dword [esp + 0x1ac]
push edi
lea ecx, [esp + 0x14c]
call fcn.004aa370
cmp edi, ebx
je 0x4b9773
push edi
call fcn.004c17d0
add esp, 4
push 0x1007a068
lea ecx, [esp + 0x14c]
call fcn.004aa190
mov eax, dword [esp + 0x14]
push eax
lea ecx, [esp + 0x14c]
call fcn.004aa190
push 0x1007a068
lea ecx, [esp + 0x14c]
call fcn.004aa190
mov ecx, dword [esp + 0x148]
push ecx
push 0x1007a06c
call dword [0x10078130]
mov edx, dword [esp + 0x18]
mov eax, dword [edx]
push 2
push ebx
push eax
call dword [0x100780e8]
mov edi, eax
mov eax, dword [esp + 0x1c]
push ebp
push eax
mov dword [esp + 0x58], edi
call fcn.004c8b40
add esp, 8
cmp dword [0x100b72c0], ebx
mov dword [esp + 0x48], eax
mov dword [esp + 0x44], ebx
je 0x4b9864
cmp dword [0x100b72bc], ebx
je 0x4b9864
lea ecx, [esp + 0x220]
push 0x20
push ecx
call fcn.004c15e0
mov edx, dword [esp + 0x20]
mov eax, dword [edx]
add esp, 8
lea ecx, [esp + 0x220]
push ecx
mov dword [esp + 0x224], 0x20
mov dword [esp + 0x228], 0x80
mov dword [esp + 0x240], edi
mov dword [esp + 0x22c], eax
call dword [0x100b72c0]
cmp eax, 0xffffffff
mov dword [0x100b6218], eax
je 0x4b9864
lea edx, [esp + 0x184]
push edx
push eax
call dword [0x100b72bc]
test eax, eax
je 0x4b9864
mov dword [esp + 0x44], 1
mov eax, dword [esp + 0x40]
cmp eax, dword [0x100b70b8]
jne 0x4b98b2
mov edx, dword [esp + 0x10]
mov eax, dword [edx]
mov ecx, dword [0x100b7078]
mov edi, dword [ecx + 0x3a8]
push eax
call dword [0x10078204]
push eax
call edi
mov ecx, dword [esp + 0x10]
mov ebp, dword [esp + 0x34]
mov edx, dword [ecx]
mov edi, dword [0x10078200]
push 0x40
push 0x2000
push ebp
push edx
call edi
push 0x40
push 0x1000
push ebp
push eax
call edi
cmp dword [esp + 0x4c], ebx
mov eax, dword [0x100b70b8]
mov dword [esi + 0xb4], eax
je 0x4b98f0
push 0x1007a04c
call dword [0x100780c8]
cmp eax, ebx
je 0x4b98f0
push 0x1007a02c
push eax
call dword [0x100780a0]
cmp eax, ebx
je 0x4b98f0
cmp dword [eax], ebx
je 0x4b98f0
mov dword [esi + 0xa0], 1
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx]
push eax
mov dword [esi + 0x9c], 1
call dword [0x100780a8]
mov edx, dword [esp + 0x10]
mov ebp, eax
mov eax, dword [esp + 0x3c]
mov dword [esi + 0x9c], ebx
mov ecx, dword [eax + 0xc]
mov dword [edx], ebp
mov eax, dword [ecx + 0xc]
mov edx, dword [esp + 0x40]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], ebx
xor edi, edi
lea ecx, [ecx]
mov ecx, dword [eax + 0x18]
cmp ecx, edx
jne 0x4b9947
cmp dword [esp + 0x10], ebx
jne 0x4b9947
mov dword [esp + 0x10], eax
mov word [eax + 0x3a], bx
jmp 0x4b994d
cmp ecx, ebp
jne 0x4b994d
mov edi, eax
mov ecx, dword [esp + 0x14]
mov word [eax + 0x38], 0xffff
mov eax, dword [eax]
cmp dword [eax], ecx
jne 0x4b9930
mov eax, dword [ebp + 0x3c]
add eax, ebp
push 9
push eax
call fcn.004c8cc0
add esp, 8
cmp eax, ebx
je 0x4b9983
mov ecx, dword [eax]
cmp ecx, ebx
je 0x4b9983
cmp dword [eax + 4], 0x18
jb 0x4b9983
mov edx, dword [ecx + ebp + 8]
mov dword [edx], ebx
push 1
push ebx
push ebp
call fcn.004c9ca0
add esp, 0xc
cmp dword [esp + 0x54], ebx
je 0x4b99a0
push 0x1007a00c
call dword [0x100780c8]
push ebp
mov ecx, esi
call fcn.004af830
cmp edi, ebx
je 0x4b99c4
mov eax, dword [esp + 0x1c]
cmp dword [eax + 0xc0], ebx
je 0x4b99c4
push 0x10007110
mov ecx, esi
call fcn.004abf60
mov ecx, dword [esp + 0x10]
cmp ecx, ebx
je 0x4b9a1e
cmp edi, ebx
je 0x4b9a1e
mov edx, dword [ecx + 4]
mov eax, dword [ecx]
mov dword [esp + 0x10], eax
mov eax, dword [edi + 4]
mov dword [esp + 0x20], edx
mov edx, dword [edi]
mov dword [eax], edx
mov dword [edx + 4], eax
mov eax, dword [esp + 0x20]
mov dword [eax], edi
mov dword [edi + 4], eax
mov eax, dword [esp + 0x10]
mov dword [edi], eax
mov dword [eax + 4], edi
mov edx, dword [ecx + 0xc]
mov ecx, dword [ecx + 8]
lea eax, [edi + 8]
mov edi, dword [eax]
mov dword [esp + 0x10], ecx
mov ecx, dword [eax + 4]
mov dword [ecx], edi
mov dword [edi + 4], ecx
mov ecx, dword [esp + 0x10]
mov dword [edx], eax
mov dword [eax + 4], edx
mov dword [eax], ecx
mov dword [ecx + 4], eax
mov edx, dword [esp + 0x3c]
mov eax, dword [edx + 0xc]
mov edi, dword [eax + 0x14]
mov dword [esp + 0x14], edi
lea esp, [esp]
mov ecx, dword [edi + 0x28]
push ecx
call dword [0x1007812c]
push 0x10079c68
call dword [0x1007812c]
mov edi, dword [edi]
mov edx, dword [esp + 0x14]
cmp dword [edi], edx
jne 0x4b9a30
cmp dword [esp + 0x48], ebx
mov ecx, dword [esp + 0x38]
je 0x4b9b4c
lea eax, [esp + 0x20c]
push eax
push 0x40
push ecx
push ebp
call dword [0x10078148]
push 0x10078f34
call dword [0x100780a8]
push 0x10078f20
push eax
call dword [0x100780a0]
lea edx, [esp + 0x58]
push edx
mov esi, eax
call dword [0x10078128]
push eax
call esi
push 0x200
push ebx
mov ebp, eax
mov dword [esp + 0x17c], 0xff
call fcn.004c1720
mov edi, eax
mov esi, 1
add esp, 8
mov word [edi], bx
cmp dword [esp + 0x58], esi
mov dword [esp + 0x16c], edi
mov dword [esp + 0x170], ebx
jle 0x4b9b2b
nop
push 0x10078ba8
lea ecx, [esp + 0x170]
call fcn.004aa190
mov eax, dword [ebp + esi*4]
push eax
lea ecx, [esp + 0x170]
call fcn.004aa190
mov ecx, dword [esp + 0x58]
add ecx, 0xffffffff
cmp ecx, esi
mov eax, 0x10078ba8
je 0x4b9b07
mov eax, 0x1007a004
push eax
lea ecx, [esp + 0x170]
call fcn.004aa190
add esi, 1
cmp esi, dword [esp + 0x58]
jl 0x4b9ad0
mov ebx, dword [esp + 0x170]
mov edi, dword [esp + 0x16c]
push ebp
call dword [0x100780e4]
mov edx, dword [esp + 0x18]
mov eax, dword [edx]
neg ebx
sbb ebx, ebx
and ebx, edi
push ebx
push eax
call fcn.004ad150
push eax
call dword [0x10078144]
lea eax, [esp + 0x214]
push eax
push 0x40
push ecx
push ebp
call dword [0x10078148]
mov edx, dword [esp + 0x38]
lea eax, [edx + ebp]
cmp ebp, eax
mov edi, ebp
mov dword [esp + 0x20], eax
jae 0x4b9b93
mov eax, dword [0x100b7170]
lea ecx, [esp + 0x210]
push ecx
push 0x40
push eax
push edi
call dword [0x10078148]
mov eax, dword [0x100b7170]
add edi, eax
cmp edi, dword [esp + 0x20]
jb 0x4b9b74
mov edx, dword [esp + 0x1c]
mov eax, dword [edx + 0x28]
cmp eax, ebx
je 0x4b9ba9
add ebp, eax
call ebp
push ebx
call dword [0x10078144]
cmp dword [esp + 0x44], ebx
je 0x4b9bc3
mov eax, dword [0x100b72b8]
cmp eax, ebx
je 0x4b9bc3
mov ecx, dword [esp + 0x184]
push ecx
push ebx
call eax
mov edx, dword [esp + 0x50]
push edx
call dword [0x10078088]
mov eax, dword [esp + 0x5c]
cmp eax, ebx
je 0x4b9bdf
push eax
call fcn.004c17d0
add esp, 4
mov eax, dword [esp + 0x148]
cmp eax, ebx
je 0x4b9bf3
push eax
call fcn.004c17d0
add esp, 4
mov eax, dword [esp + 0x178]
cmp eax, ebx
je 0x4b9c1c
push eax
call fcn.004c17d0
add esp, 4
mov dword [esp + 0x178], ebx
mov dword [esp + 0x17c], ebx
mov dword [esp + 0x180], ebx
mov eax, dword [esp + 0x78]
push eax
call fcn.004c17d0
add esp, 4
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
add esp, 0x2a8
ret