Function at 0x4e5110
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4e72b0
sub esp, 0x64
movzx eax, word [esp + 0x70]
test ax, ax
je 0x4e7289
lea eax, [0x66c380]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [esp + 0x38], eax
movzx ecx, word [eax]
mov word [esp], cx
call fcn.00409480
lea eax, [0x66c380]
mov dword [esp], eax
call fcn.004c1310
mov eax, dword [esp + 8]
movzx ecx, word [esp + 0x70]
cmp cx, ax
jb 0x4e7234
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], 0
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65ec60]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x38]
mov dword [esp + 0x14], ebp
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e526d
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x48]
test eax, eax
je 0x4e5210
mov eax, dword [eax + 4]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], ecx
lea eax, [0x6b888c]
mov dword [esp], eax
mov dword [esp + 4], 0x29
lea eax, [esp + 0x4c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cac10
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x64
ret
mov eax, dword [esp + 0x38]
movzx ecx, word [eax]
cmp cx, 0x10b
je 0x4e6266
cmp cx, 0x20b
jne 0x4e61e3
lea eax, [0x69e2e0]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [esp + 0x3c], eax
lea ecx, [0x69e2e0]
mov dword [esp], ecx
call fcn.00409410
mov eax, dword [esp + 8]
lea ecx, [0x69e2e0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004c1310
mov eax, dword [esp + 8]
mov dword [esp + 0x2c], eax
lea ecx, [0x666640]
mov dword [esp], ecx
mov edx, dword [esp + 0x3c]
lea ebx, [edx + 0x70]
mov dword [esp + 0x34], ebx
mov dword [esp + 4], ebx
call fcn.00409410
mov eax, dword [esp + 8]
lea ecx, [0x666640]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004c1310
mov eax, dword [esp + 0x2c]
sub eax, dword [esp + 8]
mov dword [esp + 0x24], eax
movzx ecx, word [esp + 0x70]
cmp cx, ax
jb 0x4e6135
mov eax, dword [esp + 0x38]
movzx eax, word [eax]
mov ecx, dword [esp + 0x3c]
mov word [ecx], ax
lea eax, [0x6757e0]
mov dword [esp], eax
mov edx, dword [esp + 0x68]
mov dword [esp + 4], edx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65ed20]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 2]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e5399
mov edx, 1
jmp 0x4e5405
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65ed20]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x3c]
lea ebp, [ebx + 3]
mov dword [esp + 0x14], ebp
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e5413
mov edx, 1
jmp 0x4e54f1
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65eca0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 4]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e5485
mov edx, 1
jmp 0x4e54f1
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65eca0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 8]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e54ff
mov edx, 1
jmp 0x4e55dd
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65eca0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0xc]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e5571
mov edx, 1
jmp 0x4e55dd
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65eca0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x10]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e55eb
mov edx, 1
jmp 0x4e56c9
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65eca0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x14]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e565d
mov edx, 1
jmp 0x4e56c9
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65ece0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x18]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e56d7
mov edx, 1
jmp 0x4e57b5
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65eca0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x20]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e5749
mov edx, 1
jmp 0x4e57b5
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65eca0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x24]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e57c3
mov edx, 1
jmp 0x4e58a1
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65ec60]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x28]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e5835
mov edx, 1
jmp 0x4e58a1
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65ec60]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x2a]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e58af
mov edx, 1
jmp 0x4e598d
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65ec60]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x2c]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e5921
mov edx, 1
jmp 0x4e598d
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65ec60]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x2e]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e599b
mov edx, 1
jmp 0x4e5a79
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65ec60]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x30]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e5a0d
mov edx, 1
jmp 0x4e5a79
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65ec60]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x32]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e5a87
mov edx, 1
jmp 0x4e5b65
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65eca0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x34]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e5af9
mov edx, 1
jmp 0x4e5b65
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65eca0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x38]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e5b73
mov edx, 1
jmp 0x4e5c51
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65eca0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x3c]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e5be5
mov edx, 1
jmp 0x4e5c51
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65eca0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x40]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e5c5f
mov edx, 1
jmp 0x4e5d3d
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65ec60]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x44]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e5cd1
mov edx, 1
jmp 0x4e5d3d
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65ec60]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x3c]
lea ebp, [ebx + 0x46]
mov dword [esp + 0x14], ebp
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e5d4b
mov edx, 1
jmp 0x4e5e29
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65ece0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x48]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e5dbd
mov edx, 1
jmp 0x4e5e29
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65ece0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x50]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e5e37
mov edx, 1
jmp 0x4e5f15
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65ece0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x58]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e5ea9
mov edx, 1
jmp 0x4e5f15
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65ece0]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x3c]
lea ebp, [ebx + 0x60]
mov dword [esp + 0x14], ebp
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e5f23
mov edx, 1
jmp 0x4e6001
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65eca0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x68]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e5f95
mov edx, 1
jmp 0x4e6001
lea eax, [0x6757e0]
mov dword [esp], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 4], eax
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea ecx, [0x8ef150]
mov dword [esp + 0xc], ecx
lea ecx, [0x65eca0]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x3c]
lea edx, [ecx + 0x6c]
mov dword [esp + 0x14], edx
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e6081
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x48]
test eax, eax
je 0x4e6024
mov eax, dword [eax + 4]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], ecx
lea eax, [0x6b8863]
mov dword [esp], eax
mov dword [esp + 4], 0x29
lea eax, [esp + 0x4c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cac10
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x64
ret
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax + 0x6c]
mov edx, dword [esp + 0x68]
mov dword [esp], edx
mov edx, dword [esp + 0x6c]
mov dword [esp + 4], edx
movzx edx, word [esp + 0x70]
mov ebx, dword [esp + 0x24]
sub edx, ebx
mov word [esp + 8], dx
mov dword [esp + 0xc], ecx
call fcn.004e72c0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
test eax, eax
jne 0x4e6116
cmp ebp, 0x10
jl 0x4e60d2
mov ebp, 0x10
mov eax, dword [esp + 0x34]
cmp ebx, eax
je 0x4e60ed
mov dword [esp], eax
mov dword [esp + 4], ebx
shl ebp, 3
mov dword [esp + 8], ebp
call fcn.00464440
lea eax, [0x658c20]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
add esp, 0x64
ret
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x80], edx
add esp, 0x64
ret
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
mov word [esp], cx
call fcn.00409480
mov eax, dword [esp + 4]
lea ecx, [0x66c380]
mov dword [esp + 0x54], ecx
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x24]
mov dword [esp], eax
call fcn.004094f0
mov eax, dword [esp + 4]
lea ecx, [0x66ba40]
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x60], eax
lea eax, [0x6bdd5d]
mov dword [esp], eax
mov dword [esp + 4], 0x4c
lea eax, [esp + 0x54]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004cac10
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x64
ret
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
movzx eax, word [eax]
mov word [esp], ax
call fcn.00409480
mov eax, dword [esp + 4]
lea ecx, [0x66c380]
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x50], eax
lea eax, [0x6b9726]
mov dword [esp], eax
mov dword [esp + 4], 0x2c
lea eax, [esp + 0x4c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cac10
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x64
ret
lea eax, [0x69e820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [esp + 0x40], eax
lea ecx, [0x69e820]
mov dword [esp], ecx
call fcn.00409410
mov eax, dword [esp + 8]
lea ecx, [0x69e820]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004c1310
mov eax, dword [esp + 8]
mov dword [esp + 0x2c], eax
lea ecx, [0x666640]
mov dword [esp], ecx
mov edx, dword [esp + 0x40]
lea ebx, [edx + 0x60]
mov dword [esp + 0x30], ebx
mov dword [esp + 4], ebx
call fcn.00409410
mov eax, dword [esp + 8]
lea ecx, [0x666640]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004c1310
mov eax, dword [esp + 0x2c]
sub eax, dword [esp + 8]
mov dword [esp + 0x28], eax
movzx ecx, word [esp + 0x70]
cmp cx, ax
jb 0x4e7186
mov eax, dword [esp + 0x38]
movzx eax, word [eax]
mov ecx, dword [esp + 0x40]
mov word [ecx], ax
lea eax, [0x6757e0]
mov dword [esp], eax
mov edx, dword [esp + 0x68]
mov dword [esp + 4], edx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65ed20]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 2]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e6378
mov edx, 1
jmp 0x4e6456
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65ed20]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x40]
lea ebp, [ebx + 3]
mov dword [esp + 0x14], ebp
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e63ea
mov edx, 1
jmp 0x4e6456
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65eca0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 4]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e6464
mov edx, 1
jmp 0x4e6542
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65eca0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 8]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e64d6
mov edx, 1
jmp 0x4e6542
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65eca0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0xc]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e6550
mov edx, 1
jmp 0x4e662e
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65eca0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x10]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e65c2
mov edx, 1
jmp 0x4e662e
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65eca0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x14]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e663c
mov edx, 1
jmp 0x4e671a
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65eca0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x18]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e66ae
mov edx, 1
jmp 0x4e671a
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65eca0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x1c]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e6728
mov edx, 1
jmp 0x4e6806
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65eca0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x20]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e679a
mov edx, 1
jmp 0x4e6806
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65eca0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x24]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e6814
mov edx, 1
jmp 0x4e68f2
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65ec60]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x28]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e6886
mov edx, 1
jmp 0x4e68f2
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65ec60]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x2a]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e6900
mov edx, 1
jmp 0x4e69de
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65ec60]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x2c]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e6972
mov edx, 1
jmp 0x4e69de
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65ec60]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x2e]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e69ec
mov edx, 1
jmp 0x4e6aca
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65ec60]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x30]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e6a5e
mov edx, 1
jmp 0x4e6aca
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65ec60]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x32]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e6ad8
mov edx, 1
jmp 0x4e6bb6
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65eca0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x34]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e6b4a
mov edx, 1
jmp 0x4e6bb6
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65eca0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x38]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e6bc4
mov edx, 1
jmp 0x4e6ca2
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65eca0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x3c]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e6c36
mov edx, 1
jmp 0x4e6ca2
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65eca0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x40]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e6cb0
mov edx, 1
jmp 0x4e6d8e
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65ec60]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x44]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e6d22
mov edx, 1
jmp 0x4e6d8e
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65ec60]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x40]
lea ebp, [ebx + 0x46]
mov dword [esp + 0x14], ebp
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e6d9c
mov edx, 1
jmp 0x4e6e7a
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65eca0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x48]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e6e0e
mov edx, 1
jmp 0x4e6e7a
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65eca0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x4c]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e6e88
mov edx, 1
jmp 0x4e6f66
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65eca0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x50]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e6efa
mov edx, 1
jmp 0x4e6f66
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65eca0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x54]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e6f74
mov edx, 1
jmp 0x4e7052
lea eax, [0x6757e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea edx, [0x8ef150]
mov dword [esp + 0xc], edx
lea ebx, [0x65eca0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x58]
mov dword [esp + 0x14], esi
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e6fe6
mov edx, 1
jmp 0x4e7052
lea eax, [0x6757e0]
mov dword [esp], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 4], eax
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x71198c]
mov dword [esp + 8], ecx
lea ecx, [0x8ef150]
mov dword [esp + 0xc], ecx
lea ecx, [0x65eca0]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x40]
lea edx, [ecx + 0x5c]
mov dword [esp + 0x14], edx
call fcn.004bffa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e70d2
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x48]
test eax, eax
je 0x4e7075
mov eax, dword [eax + 4]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], ecx
lea eax, [0x6b8332]
mov dword [esp], eax
mov dword [esp + 4], 0x28
lea eax, [esp + 0x4c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cac10
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x64
ret
mov eax, dword [esp + 0x40]
mov ecx, dword [eax + 0x5c]
mov edx, dword [esp + 0x68]
mov dword [esp], edx
mov edx, dword [esp + 0x6c]
mov dword [esp + 4], edx
movzx edx, word [esp + 0x70]
mov ebx, dword [esp + 0x28]
sub edx, ebx
mov word [esp + 8], dx
mov dword [esp + 0xc], ecx
call fcn.004e72c0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
test eax, eax
jne 0x4e7167
cmp ebp, 0x10
jl 0x4e7123
mov ebp, 0x10
mov eax, dword [esp + 0x30]
cmp ebx, eax
je 0x4e713e
mov dword [esp], eax
mov dword [esp + 4], ebx
shl ebp, 3
mov dword [esp + 8], ebp
call fcn.00464440
lea eax, [0x658be0]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
add esp, 0x64
ret
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x80], edx
add esp, 0x64
ret
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
mov word [esp], cx
call fcn.00409480
mov eax, dword [esp + 4]
lea ecx, [0x66c380]
mov dword [esp + 0x54], ecx
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call fcn.004094f0
mov eax, dword [esp + 4]
lea ecx, [0x66ba40]
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x60], eax
lea eax, [0x6bdc32]
mov dword [esp], eax
mov dword [esp + 4], 0x4a
lea eax, [esp + 0x54]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004cac10
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x64
ret
lea eax, [0x6bca94]
mov dword [esp], eax
mov dword [esp + 4], 0x3c
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.004cac10
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x64
ret
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
add esp, 0x64
ret
call fcn.004626a0
jmp fcn.004e5110