Function at 0x496f40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x497dc1
sub esp, 0x74
mov eax, dword [esp + 0x80]
test eax, eax
je 0x496f77
test eax, 0x200
jne 0x496f77
lea ecx, [0x541020]
mov edx, dword [esp + 0x78]
jmp 0x496fa2
mov ecx, dword [esp + 0x78]
mov dword [esp], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004957a0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x58], edx
mov dword [esp + 0x30], ecx
mov ebx, dword [esp + 0x8c]
test ebx, ebx
je 0x496fcc
test ebx, 0x200
jne 0x496fcc
lea ebp, [0x541020]
mov esi, dword [esp + 0x84]
jmp 0x49700c
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov ecx, dword [esp + 0x88]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.004957a0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x58]
mov ebx, dword [esp + 0x8c]
mov ebp, eax
mov esi, ecx
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x30]
cmp ecx, ebp
jne 0x497a62
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
call fcn.00403590
movzx eax, byte [esp + 0xc]
test al, al
je 0x497a62
nop
mov eax, dword [esp + 0x80]
mov ecx, eax
and eax, 0x1f
cmp eax, 0x11
ja 0x497523
cmp eax, 0xc
ja 0x49736f
cmp eax, 1
jne 0x4970d2
nop
nop
mov eax, dword [esp + 0x7c]
movzx eax, byte [eax]
mov ecx, dword [esp + 0x8c]
mov edx, ecx
and ecx, 0x1f
cmp ecx, 1
je 0x497096
mov byte [esp + 0x23], al
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.004935a0
movzx eax, byte [esp + 0x23]
mov ecx, dword [esp + 0x88]
cmp byte [ecx], al
je 0x4970c3
test al, al
je 0x4970b4
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
lea ecx, [eax - 2]
cmp ecx, 4
ja 0x497224
cmp eax, 3
ja 0x497103
cmp eax, 2
jne 0x4970f5
mov eax, dword [esp + 0x7c]
mov eax, dword [eax]
mov ecx, eax
sar eax, 0x1f
jmp 0x497137
mov ecx, dword [esp + 0x7c]
movsx eax, byte [ecx]
mov ecx, eax
sar eax, 0x1f
jmp 0x497137
cmp eax, 4
jne 0x497116
mov ecx, dword [esp + 0x7c]
movsx eax, word [ecx]
mov ecx, eax
sar eax, 0x1f
jmp 0x497137
cmp eax, 5
jne 0x497128
mov ecx, dword [esp + 0x7c]
mov eax, dword [ecx]
mov ecx, eax
sar eax, 0x1f
jmp 0x497137
mov ecx, dword [esp + 0x7c]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov edx, eax
mov eax, ecx
mov ecx, edx
nop
mov edx, dword [esp + 0x8c]
and edx, 0x1f
mov dword [esp + 0x44], edx
cmp edx, 3
ja 0x49717a
cmp edx, 2
jne 0x497160
mov edx, dword [esp + 0x88]
mov edx, dword [edx]
mov ebx, edx
sar edx, 0x1f
jmp 0x4971c0
cmp edx, 3
jne 0x497d86
mov ebx, dword [esp + 0x88]
movsx edx, byte [ebx]
mov ebx, edx
sar edx, 0x1f
jmp 0x4971c0
cmp edx, 4
jne 0x497190
mov ebx, dword [esp + 0x88]
movsx edx, word [ebx]
mov ebx, edx
sar edx, 0x1f
jmp 0x4971c0
cmp edx, 5
jne 0x4971a5
mov ebx, dword [esp + 0x88]
mov edx, dword [ebx]
mov ebx, edx
sar edx, 0x1f
jmp 0x4971c0
cmp edx, 6
jne 0x497d86
mov ebx, dword [esp + 0x88]
mov edx, dword [ebx]
mov ebx, dword [ebx + 4]
mov ebp, edx
mov edx, ebx
mov ebx, ebp
cmp eax, edx
xchg ebp, ebx
sete bl
xchg ebp, ebx
cmp ecx, ebx
xchg esi, ebx
setb bl
xchg esi, ebx
cmp eax, edx
xchg edi, ebx
setl bl
xchg edi, ebx
and esi, ebp
or edi, esi
xchg edi, eax
test al, al
xchg edi, eax
jne 0x497215
cmp ecx, ebx
seta cl
cmp eax, edx
setg al
and ecx, ebp
or eax, ecx
test al, al
je 0x497206
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
cmp eax, 7
jb 0x497a71
cmp eax, 9
ja 0x49725c
cmp eax, 7
jne 0x497241
mov eax, dword [esp + 0x7c]
mov eax, dword [eax]
xor ecx, ecx
jmp 0x497283
cmp eax, 8
jne 0x497251
mov ecx, dword [esp + 0x7c]
movzx eax, byte [ecx]
xor ecx, ecx
jmp 0x497283
mov ecx, dword [esp + 0x7c]
movzx eax, word [ecx]
xor ecx, ecx
jmp 0x497283
cmp eax, 0xa
jne 0x49726b
mov ecx, dword [esp + 0x7c]
mov eax, dword [ecx]
xor ecx, ecx
jmp 0x497283
cmp eax, 0xb
jne 0x49727b
mov ecx, dword [esp + 0x7c]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
jmp 0x497283
mov edx, dword [esp + 0x7c]
mov eax, dword [edx]
xor ecx, ecx
nop
mov edx, dword [esp + 0x8c]
and edx, 0x1f
mov dword [esp + 0x44], edx
cmp edx, 9
ja 0x4972d3
cmp edx, 7
jne 0x4972a9
mov edx, dword [esp + 0x88]
mov edx, dword [edx]
xor ebx, ebx
jmp 0x49730d
cmp edx, 8
jne 0x4972bc
mov ebx, dword [esp + 0x88]
movzx edx, byte [ebx]
xor ebx, ebx
jmp 0x49730d
cmp edx, 9
jne 0x497d4c
mov ebx, dword [esp + 0x88]
movzx edx, word [ebx]
xor ebx, ebx
jmp 0x49730d
cmp edx, 0xa
jne 0x4972e5
mov ebx, dword [esp + 0x88]
mov edx, dword [ebx]
xor ebx, ebx
jmp 0x49730d
cmp edx, 0xb
jne 0x4972f8
mov ebx, dword [esp + 0x88]
mov edx, dword [ebx]
mov ebx, dword [ebx + 4]
jmp 0x49730d
cmp edx, 0xc
jne 0x497d4c
mov ebp, dword [esp + 0x88]
mov edx, dword [ebp]
xor ebx, ebx
cmp ecx, ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg esi, ebx
setb bl
xchg esi, ebx
cmp eax, edx
xchg edi, ebx
setb bl
xchg edi, ebx
and edi, ebp
or esi, edi
xchg esi, eax
test al, al
xchg esi, eax
jne 0x497360
cmp ecx, ebx
seta cl
cmp eax, edx
seta al
and eax, ebp
or ecx, eax
test cl, cl
je 0x497351
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
cmp eax, 0xe
ja 0x49740d
cmp eax, 0xd
jne 0x49738b
mov eax, dword [esp + 0x7c]
movss xmm0, dword [eax]
cvtss2sd xmm0, xmm0
jmp 0x497393
mov eax, dword [esp + 0x7c]
movsd xmm0, qword [eax]
nop
mov eax, dword [esp + 0x8c]
and eax, 0x1f
cmp eax, 0xd
jne 0x4973b4
mov eax, dword [esp + 0x88]
movss xmm1, dword [eax]
cvtss2sd xmm1, xmm1
jmp 0x4973c8
cmp eax, 0xe
jne 0x497d0e
mov eax, dword [esp + 0x88]
movsd xmm1, qword [eax]
ucomisd xmm0, xmm0
jne 0x4973d0
jnp 0x4973d7
mov eax, 0xffffffff
jmp 0x497402
ucomisd xmm1, xmm1
jne 0x4973df
jnp 0x4973e6
mov eax, 1
jmp 0x497402
ucomisd xmm1, xmm0
jbe 0x4973f3
mov eax, 0xffffffff
jmp 0x497402
ucomisd xmm0, xmm1
jbe 0x497400
mov eax, 1
jmp 0x497402
xor eax, eax
mov dword [esp + 0x90], eax
add esp, 0x74
ret
lea edx, [eax - 0xf]
cmp edx, 1
ja 0x497513
cmp eax, 0xf
jne 0x497435
mov eax, dword [esp + 0x7c]
movss xmm0, dword [eax]
movss xmm1, dword [eax + 4]
cvtss2sd xmm0, xmm0
cvtss2sd xmm1, xmm1
jmp 0x497442
mov eax, dword [esp + 0x7c]
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
nop
mov eax, dword [esp + 0x8c]
and eax, 0x1f
cmp eax, 0xf
jne 0x49746c
mov eax, dword [esp + 0x88]
movss xmm2, dword [eax]
movss xmm3, dword [eax + 4]
cvtss2sd xmm2, xmm2
cvtss2sd xmm3, xmm3
jmp 0x497485
cmp eax, 0x10
jne 0x497cd0
mov eax, dword [esp + 0x88]
movsd xmm2, qword [eax]
movsd xmm3, qword [eax + 8]
ucomisd xmm0, xmm0
jne 0x49748d
jnp 0x497494
mov eax, 0xffffffff
jmp 0x4974bf
ucomisd xmm2, xmm2
jne 0x49749c
jnp 0x4974a3
mov eax, 1
jmp 0x4974bf
ucomisd xmm2, xmm0
jbe 0x4974b0
mov eax, 0xffffffff
jmp 0x4974bf
ucomisd xmm0, xmm2
jbe 0x4974bd
mov eax, 1
jmp 0x4974bf
xor eax, eax
test eax, eax
jne 0x497508
ucomisd xmm1, xmm1
jne 0x4974cb
jnp 0x4974d2
mov eax, 0xffffffff
jmp 0x4974fd
ucomisd xmm3, xmm3
jne 0x4974da
jnp 0x4974e1
mov eax, 1
jmp 0x4974fd
ucomisd xmm3, xmm1
jbe 0x4974ee
mov eax, 0xffffffff
jmp 0x4974fd
ucomisd xmm1, xmm3
jbe 0x4974fb
mov eax, 1
jmp 0x4974fd
xor eax, eax
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov dword [esp + 0x90], eax
add esp, 0x74
ret
cmp eax, 0x11
jne 0x497a71
xor eax, eax
jmp 0x497be4
cmp eax, 0x16
ja 0x4978e9
cmp eax, 0x12
je 0x49780d
cmp eax, 0x14
je 0x497548
cmp eax, 0x16
je 0x4979e2
jmp 0x497a71
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov edx, dword [esp + 0x7c]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov ebx, dword [esp + 0x84]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x88]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0x8c]
mov dword [esp + 0x14], esi
call fcn.00497dd0
movzx eax, byte [esp + 0x1c]
mov ecx, dword [esp + 0x18]
test al, al
jne 0x497802
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov ecx, dword [esp + 0x7c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x80]
mov dword [esp + 8], edx
call fcn.00494560
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
test edx, edx
je 0x4975d3
test edx, 0x200
jne 0x4975d3
mov ecx, eax
lea eax, [0x541020]
jmp 0x4975eb
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004957a0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x4975f2
mov eax, dword [eax + 4]
test eax, eax
je 0x49765a
nop
movzx edx, byte [0x6165a0]
test dl, dl
je 0x49762b
mov dword [0x6165a4], eax
mov edx, dword [0x63b5a0]
test edx, edx
jne 0x49761a
mov dword [0x6165a8], ecx
jmp 0x49762b
lea edi, [0x6165a8]
mov edx, eax
mov eax, ecx
call fcn.00461550
mov eax, edx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], ecx
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x497652
nop
movzx edx, byte [eax + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x497660
or edx, 0x80
jmp 0x497660
xor edx, edx
xor eax, eax
xor ecx, ecx
jmp 0x497660
xor edx, edx
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x48], eax
mov dword [esp + 0x24], edx
mov dword [esp + 0x4c], ecx
mov ebx, dword [esp + 0x84]
mov dword [esp], ebx
mov ebp, dword [esp + 0x88]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x8c]
mov dword [esp + 8], esi
call fcn.00494560
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
test edx, edx
je 0x4976b3
test edx, 0x200
jne 0x4976b3
mov ecx, eax
lea eax, [0x541020]
jmp 0x4976cb
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004957a0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x4976d2
mov eax, dword [eax + 4]
test eax, eax
je 0x49773a
nop
movzx edx, byte [0x6165a0]
test dl, dl
je 0x49770b
mov dword [0x6165a4], eax
mov edx, dword [0x63b5a0]
test edx, edx
jne 0x4976fa
mov dword [0x6165a8], ecx
jmp 0x49770b
lea edi, [0x6165a8]
mov edx, eax
mov eax, ecx
call fcn.00461550
mov eax, edx
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], ecx
mov eax, dword [esp + 0x64]
test eax, eax
je 0x497732
nop
movzx edx, byte [eax + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x497740
or edx, 0x80
jmp 0x497740
xor edx, edx
xor eax, eax
xor ecx, ecx
jmp 0x497740
xor edx, edx
xor eax, eax
xor ecx, ecx
mov ebx, dword [esp + 0x48]
mov dword [esp], ebx
mov ebx, dword [esp + 0x4c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x24]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.00496f40
mov eax, dword [esp + 0x18]
test eax, eax
je 0x49777b
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
call fcn.00494560
mov eax, dword [esp + 0xc]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x5c], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x44], edx
mov ebx, dword [esp + 0x84]
mov dword [esp], ebx
mov ebx, dword [esp + 0x88]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x8c]
mov dword [esp + 8], ebx
call fcn.00494560
mov eax, dword [esp + 0x60]
mov dword [esp], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
call fcn.00496f40
mov eax, dword [esp + 0x18]
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov dword [esp + 0x90], ecx
add esp, 0x74
ret
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov edx, dword [esp + 0x7c]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov ebx, dword [esp + 0x84]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x88]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0x8c]
mov dword [esp + 0x14], esi
call fcn.00497dd0
movzx eax, byte [esp + 0x1c]
mov ecx, dword [esp + 0x18]
test al, al
jne 0x4978de
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
call fcn.00495260
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x84]
mov dword [esp], ecx
mov ecx, dword [esp + 0x88]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 8], ecx
call fcn.00495260
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x3c]
cmp eax, ecx
ja 0x4978cf
jae 0x4978c0
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
mov dword [esp + 0x90], ecx
add esp, 0x74
ret
cmp eax, 0x18
jne 0x4979cd
mov eax, dword [esp + 0x7c]
mov ecx, dword [eax]
mov dword [esp + 0x54], ecx
mov eax, dword [eax + 4]
mov dword [esp + 0x2c], eax
mov edx, dword [esp + 0x8c]
mov ebx, edx
and edx, 0x1f
cmp edx, 0x18
jne 0x497922
mov edx, dword [esp + 0x88]
mov ebx, dword [edx]
mov edx, dword [edx + 4]
jmp 0x497950
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004956c0
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x28], edx
mov dword [esp + 0x50], ebx
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
call fcn.00402700
mov eax, dword [esp + 0x10]
test eax, eax
jl 0x4979be
mov eax, dword [esp + 0x54]
mov dword [esp], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0xc], eax
call fcn.00402700
mov eax, dword [esp + 0x10]
test eax, eax
jle 0x4979af
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
cmp eax, 0x19
jne 0x4979d9
xor eax, eax
jmp 0x497aea
cmp eax, 0x1a
jne 0x497a71
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00495260
mov eax, dword [esp + 0xc]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x84]
mov dword [esp], ecx
mov ecx, dword [esp + 0x88]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 8], ecx
call fcn.00495260
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
ja 0x497a53
jae 0x497a44
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
mov eax, dword [esp + 0x30]
mov eax, dword [eax + 0x80]
mov ecx, dword [esp + 0x58]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x511787]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x15
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044ce40
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409060
mov eax, dword [esp + 8]
lea ecx, [0x4f63c0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00434b80
mov edx, dword [esp + 0x38]
lea eax, [edx + 1]
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x38], eax
mov edx, dword [esp + 0x78]
mov dword [esp], edx
mov ebx, dword [esp + 0x7c]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.004951b0
mov eax, dword [esp + 0x38]
cmp dword [esp + 0xc], eax
jle 0x497bc7
mov ecx, dword [esp + 0x78]
mov dword [esp], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x80]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.00494710
mov eax, dword [esp + 0x10]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x5c], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], edx
mov ebx, dword [esp + 0x84]
mov dword [esp], ebx
mov ebp, dword [esp + 0x88]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x8c]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x38]
mov dword [esp + 0xc], edi
call fcn.00494710
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x60]
mov dword [esp], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.00496f40
mov eax, dword [esp + 0x18]
test eax, eax
je 0x497adc
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov edx, dword [esp + 0x34]
lea eax, [edx + 1]
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x34], eax
mov edx, dword [esp + 0x78]
mov dword [esp], edx
mov ebx, dword [esp + 0x7c]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.00494ba0
mov eax, dword [esp + 0x34]
cmp dword [esp + 0xc], eax
jle 0x497cc1
mov ecx, dword [esp + 0x78]
mov dword [esp], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x80]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.00494800
mov eax, dword [esp + 0x10]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x5c], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], edx
mov ebx, dword [esp + 0x84]
mov dword [esp], ebx
mov ebp, dword [esp + 0x88]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x8c]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x34]
mov dword [esp + 0xc], edi
call fcn.00494800
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x60]
mov dword [esp], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.00496f40
mov eax, dword [esp + 0x18]
test eax, eax
je 0x497bd6
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x44], eax
lea eax, [0x4fb6a0]
mov dword [esp], eax
call fcn.0040b720
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x15
lea ecx, [0x5118c2]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x4f7ec0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00434b80
mov dword [esp + 0x44], eax
lea eax, [0x4fb6a0]
mov dword [esp], eax
call fcn.0040b720
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x510c77]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x4f7ec0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00434b80
lea eax, [0x4fb6a0]
mov dword [esp], eax
call fcn.0040b720
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x12
lea ecx, [0x51052f]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x4f7ec0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00434b80
lea eax, [0x4fb6a0]
mov dword [esp], eax
call fcn.0040b720
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x11
lea ecx, [0x50fece]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x4f7ec0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00434b80
nop
call fcn.00460140
jmp fcn.00496f40