Function at 0x4e3c80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x1cc]
cmp eax, dword [ecx + 8]
jbe 0x4e6444
sub esp, 0x24c
mov eax, dword [esp + 0x250]
mov dword [esp], eax
mov ecx, dword [esp + 0x254]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x258]
mov dword [esp + 8], edx
call fcn.00482080
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0xc]
mov esi, dword [esp + 0x268]
mov edi, dword [esp + 0x260]
cmp esi, edi
jne 0x4e3d79
mov eax, dword [esp + 0x250]
mov dword [esp], eax
mov eax, dword [esp + 0x254]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x258]
mov dword [esp + 8], eax
lea edi, [esp + 0xc]
lea esi, [esp + 0x26c]
call fcn.0045e584
call fcn.004e6450
movzx eax, byte [esp + 0x24]
test al, al
je 0x4e3d57
xor eax, eax
xor ecx, ecx
mov edx, dword [esp + 0x268]
mov dword [esp + 0x284], edx
mov dword [esp + 0x288], eax
mov dword [esp + 0x28c], ecx
add esp, 0x24c
ret
lea eax, [0x6132c1]
mov dword [esp], eax
mov dword [esp + 4], 0x12
call fcn.00409130
mov ecx, dword [esp + 8]
lea eax, [0x65ed70]
jmp 0x4e3d34
mov dword [esp + 0xa0], eax
mov dword [esp + 0x110], ecx
mov dword [esp + 0x10c], edx
mov dword [esp + 0x108], ebp
mov dword [esp + 0xbc], ebx
mov ecx, dword [eax + 0x50]
mov dword [esp], ebx
call ecx
cmp dword [esp + 4], 0x14
je 0x4e63f5
xor eax, eax
test al, al
je 0x4e463b
mov eax, dword [esp + 0x25c]
mov dword [esp], eax
mov ecx, dword [esp + 0x260]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x264]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x268]
mov dword [esp + 0xc], ebx
call fcn.004e33a0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x10]
movzx ebp, byte [esp + 0x1c]
mov esi, dword [esp + 0x24]
mov dword [esp + 0x108], esi
mov edi, dword [esp + 0x28]
mov esi, dword [esp + 0x24]
mov dword [esp + 0xac], ebx
mov dword [esp + 0xb0], edx
mov dword [esp + 0xb4], ecx
xchg ebp, eax
mov byte [esp + 0xb8], al
xchg ebp, eax
test esi, esi
jne 0x4e4618
mov dword [esp + 0x4c], eax
mov dword [esp + 0xa0], esi
lea esi, [ecx + eax]
cmp eax, esi
jle 0x4e3e89
lea eax, [0x611ae7]
mov dword [esp], eax
mov dword [esp + 4], 0xe
call fcn.00409130
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x284], ecx
lea ecx, [0x65ed70]
mov dword [esp + 0x288], ecx
mov dword [esp + 0x28c], eax
add esp, 0x24c
ret
mov dword [esp + 0x9c], ebx
mov ebx, dword [esp + 0x260]
cmp ebx, esi
jl 0x4e3e49
mov dword [esp + 0x98], esi
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4e3fcb
mov eax, dword [esp + 0xa0]
xor ecx, ecx
xor edx, edx
test eax, eax
jne 0x4e3faf
mov dword [esp + 0x108], edi
mov dword [esp + 0xa0], eax
test ecx, ecx
je 0x4e3f5c
nop
movzx ebx, byte [0x783630]
test bl, bl
je 0x4e3efb
mov dword [0x783634], ecx
mov ebx, dword [0x7a0970]
test ebx, ebx
jne 0x4e3f95
mov dword [0x783638], edx
mov dword [esp + 0x11c], ecx
mov dword [esp + 0x120], edx
mov ecx, dword [esp + 0x11c]
test ecx, ecx
je 0x4e3f8d
nop
movzx ebx, byte [ecx + 0xf]
mov ebp, ebx
and ebx, 0x1f
xchg ebp, eax
test al, 0x20
xchg ebp, eax
jne 0x4e3f2b
or ebx, 0x80
mov eax, dword [esp + 0x250]
mov dword [esp], eax
mov eax, dword [esp + 0x254]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x258]
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ebx
call fcn.00481610
mov eax, dword [esp + 0x98]
mov dword [esp + 0x284], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x288], eax
mov eax, dword [esp + 0x108]
mov dword [esp + 0x28c], eax
add esp, 0x24c
ret
xor ebx, ebx
xor ecx, ecx
xor edx, edx
jmp 0x4e3f2b
mov ebx, edi
lea edi, [0x783638]
mov ebp, eax
mov eax, edx
call fcn.0045de10
mov eax, ebp
mov edi, ebx
jmp 0x4e3efb
mov dword [esp + 0x284], esi
mov dword [esp + 0x288], eax
mov dword [esp + 0x28c], edi
add esp, 0x24c
ret
mov ebx, dword [esp + 0x9c]
test ebx, ebx
jne 0x4e3eac
mov ebx, dword [esp + 0x264]
cmp esi, ebx
ja 0x4e643a
cmp eax, esi
ja 0x4e6433
sub ebx, eax
mov dword [esp + 0x80], ebx
neg ebx
sar ebx, 0x1f
and ebx, eax
mov eax, esi
mov esi, dword [esp + 0x25c]
lea ebp, [ebx + esi]
cmp edx, 0x12
jg 0x4e43aa
cmp edx, 4
jg 0x4e4214
cmp edx, 2
je 0x4e41b6
cmp edx, 3
jne 0x4e4164
test ecx, ecx
je 0x4e4137
movzx edx, byte [ebx + esi]
movzx ebx, dl
cmp ebx, 7
jle 0x4e40da
lea eax, [0x6198a8]
mov dword [esp], eax
mov dword [esp + 4], 0x22
call fcn.00409130
mov eax, dword [esp + 8]
xor ecx, ecx
xor edx, edx
xor ebx, ebx
lea ebp, [0x65ed70]
xor esi, esi
mov dword [esp + 0x74], ebp
mov dword [esp + 0xd0], eax
mov dword [esp + 0x134], esi
mov dword [esp + 0x138], edx
mov dword [esp + 0x13c], ecx
mov dword [esp + 0x140], ebx
lea ecx, [0x5f6960]
mov dword [esp], ecx
lea ecx, [esp + 0x134]
mov dword [esp + 4], ecx
call fcn.00408f40
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0xd0]
mov esi, dword [esp + 0x98]
mov edi, ebx
mov ebp, eax
mov eax, edx
mov edx, ecx
mov ecx, ebp
jmp 0x4e3eb7
cmp ecx, 1
jne 0x4e40e7
test ebx, ebx
jg 0x4e4049
movzx esi, byte [ecx + ebp - 1]
mov edi, ecx
mov ecx, edx
mov eax, 1
shl eax, cl
dec eax
xchg esi, ebx
test al, bl
xchg esi, ebx
jne 0x4e4049
lea edx, [edi - 1]
mov edi, edx
shl edx, 3
sub edx, ebx
mov eax, edi
mov edi, dword [esp + 0x80]
lea ecx, [edi - 1]
mov edi, ecx
neg ecx
sar ecx, 0x1f
and ecx, 1
lea esi, [ebp + ecx]
mov ecx, edi
mov ebx, edx
xor ebp, ebp
mov edx, eax
xor eax, eax
jmp 0x4e4071
lea eax, [0x614ef0]
mov dword [esp], eax
mov dword [esp + 4], 0x16
call fcn.00409130
mov eax, dword [esp + 8]
xor ecx, ecx
xor edx, edx
xor ebx, ebx
lea ebp, [0x65ed70]
xor esi, esi
jmp 0x4e4071
cmp edx, 4
je 0x4e417b
xor eax, eax
xor ecx, ecx
mov edx, dword [esp + 0xa0]
mov ebx, edi
jmp 0x4e40c4
mov dword [esp + 0x104], edi
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
call fcn.004091b0
mov ecx, dword [esp + 0xc]
lea eax, [0x5d3720]
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x104]
jmp 0x4e40c4
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
call fcn.004e1d20
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0xa0], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x108], ebx
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.00409080
mov ecx, dword [esp + 8]
lea eax, [0x5daa00]
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x108]
jmp 0x4e40c4
cmp edx, 6
je 0x4e4344
cmp edx, 0xc
je 0x4e4289
cmp edx, 0x12
jne 0x4e4169
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
call fcn.004e2f30
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0xa0], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x108], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409130
mov ecx, dword [esp + 8]
lea eax, [0x5db180]
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x108]
jmp 0x4e40c4
mov dword [esp + 0xd8], ebp
mov dword [esp + 0x9c], ecx
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
call fcn.004661c0
movzx eax, byte [esp + 0xc]
test al, al
je 0x4e4316
mov dword [esp], 0
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 8], eax
call fcn.00448630
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
xor edx, edx
xor ebx, ebx
mov dword [esp + 0xd4], ebx
mov dword [esp + 0x78], edx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409130
mov ecx, dword [esp + 8]
lea eax, [0x5db180]
mov edx, dword [esp + 0x78]
mov ebx, dword [esp + 0xd4]
jmp 0x4e40c4
nop
lea eax, [0x5e46a0]
mov dword [esp], eax
call fcn.0040b8d0
mov ebx, dword [esp + 4]
mov dword [ebx + 4], 0x1a
lea eax, [0x6164db]
mov dword [ebx], eax
xor ecx, ecx
lea edx, [0x65e99c]
xor eax, eax
jmp 0x4e42e5
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
call fcn.004e2570
mov eax, dword [esp + 0x18]
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x108], ecx
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
call fcn.004091b0
mov ecx, dword [esp + 0xc]
lea eax, [0x5e8580]
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x108]
jmp 0x4e40c4
cmp edx, 0x16
jg 0x4e44c1
cmp edx, 0x13
je 0x4e4463
cmp edx, 0x14
je 0x4e4428
cmp edx, 0x16
jne 0x4e4169
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
call fcn.004e30f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0xa0], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x108], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409130
mov ecx, dword [esp + 8]
lea eax, [0x5db180]
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x108]
jmp 0x4e40c4
mov dword [esp], 0
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
call fcn.00448630
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409130
mov ecx, dword [esp + 8]
lea eax, [0x5db180]
xor edx, edx
xor ebx, ebx
jmp 0x4e40c4
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
call fcn.004e2ff0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0xa0], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x108], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409130
mov ecx, dword [esp + 8]
lea eax, [0x5db180]
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x108]
jmp 0x4e40c4
cmp edx, 0x17
je 0x4e45a7
cmp edx, 0x18
je 0x4e4536
cmp edx, 0x1e
jne 0x4e4169
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
call fcn.004e31a0
mov eax, dword [esp + 0x14]
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x108], ecx
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.00409130
mov ecx, dword [esp + 8]
lea eax, [0x5db180]
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x108]
jmp 0x4e40c4
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
call fcn.004e2cf0
mov eax, dword [esp + 0x20]
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x108], ecx
lea edi, [esp + 0x144]
lea esi, [esp + 0xc]
call fcn.0045e58e
lea ecx, [0x60c6c0]
mov dword [esp], ecx
lea ecx, [esp + 0x144]
mov dword [esp + 4], ecx
call fcn.00408f40
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x108]
jmp 0x4e40c4
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
call fcn.004e2990
mov eax, dword [esp + 0x20]
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x108], ecx
lea edi, [esp + 0x158]
lea esi, [esp + 0xc]
call fcn.0045e58e
lea ecx, [0x60c6c0]
mov dword [esp], ecx
lea ecx, [esp + 0x158]
mov dword [esp + 4], ecx
call fcn.00408f40
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x108]
jmp 0x4e40c4
mov dword [esp + 0x284], eax
mov eax, dword [esp + 0x108]
mov dword [esp + 0x288], eax
mov dword [esp + 0x28c], edi
add esp, 0x24c
ret
mov eax, dword [esp + 0x25c]
mov dword [esp], eax
mov ecx, dword [esp + 0x260]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x264]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x268]
mov dword [esp + 0xc], ebx
call fcn.004e33a0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x104], ebx
mov ebp, dword [esp + 0x18]
movzx esi, byte [esp + 0x1c]
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x28]
mov dword [esp + 0xac], ecx
mov dword [esp + 0xb0], edi
mov dword [esp + 0xb4], ebp
xchg esi, eax
mov byte [esp + 0xb8], al
xchg esi, eax
test edx, edx
jne 0x4e63d2
mov dword [esp + 0x9c], eax
movzx eax, byte [esp + 0x26d]
test al, al
je 0x4e63b1
movzx eax, byte [esp + 0x26e]
test al, al
je 0x4e63a7
mov eax, 1
mov dword [esp + 0x94], edx
mov dword [esp + 0x100], ebx
mov edx, dword [esp + 0x260]
mov ebx, dword [esp + 0x9c]
cmp edx, ebx
je 0x4e6364
cmp eax, ecx
jne 0x4e62cc
mov eax, dword [esp + 0x274]
cmp dword [eax], edi
jne 0x4e62cc
test ebp, ebp
jne 0x4e62c2
mov dword [esp + 0x98], ecx
mov eax, dword [0x782fdc]
mov ecx, dword [esp + 0x110]
cmp dword [0x782fd8], ecx
je 0x4e6237
test ebp, ebp
jg 0x4e481c
mov eax, dword [0x782fc4]
cmp dword [0x782fc0], ecx
je 0x4e47a1
lea eax, [0x61cf79]
mov dword [esp], eax
mov dword [esp + 4], 0x2d
call fcn.00409130
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0x284], ecx
lea ecx, [0x65ed5c]
mov dword [esp + 0x288], ecx
mov dword [esp + 0x28c], eax
add esp, 0x24c
ret
mov dword [esp], ecx
mov ecx, dword [esp + 0x10c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004037c0
movzx eax, byte [esp + 0xc]
test al, al
je 0x4e475e
mov eax, dword [esp + 0x250]
mov dword [esp], eax
mov eax, dword [esp + 0x254]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x258]
mov dword [esp + 8], eax
mov byte [esp + 0xc], 1
call fcn.00481740
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x284], eax
mov eax, dword [esp + 0x104]
mov dword [esp + 0x288], eax
mov eax, dword [esp + 0x100]
mov dword [esp + 0x28c], eax
add esp, 0x24c
ret
mov eax, dword [esp + 0x25c]
mov dword [esp], eax
mov dword [esp + 4], edx
mov ecx, dword [esp + 0x264]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
call fcn.004e33a0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
movzx edx, byte [esp + 0x1c]
mov ebx, dword [esp + 0x24]
mov ebp, dword [esp + 0x10]
mov esi, dword [esp + 0x18]
mov edi, dword [esp + 0x24]
mov dword [esp + 0x104], edi
mov edi, dword [esp + 0x28]
mov dword [esp + 0xac], ebp
mov dword [esp + 0xb0], ecx
mov dword [esp + 0xb4], esi
mov byte [esp + 0xb8], dl
test ebx, ebx
jne 0x4e6214
mov dword [esp + 0x104], edi
mov dword [esp + 0x94], ebx
mov byte [esp + 0x41], dl
mov dword [esp + 0x7c], esi
mov dword [esp + 0x44], ecx
mov dword [esp + 0x48], ebp
mov dword [esp + 0x50], eax
mov ebx, dword [esp + 0x108]
mov dword [esp], ebx
mov ebx, dword [esp + 0xbc]
mov dword [esp + 4], ebx
call fcn.004e6e50
mov eax, dword [esp + 0xc]
movzx ecx, byte [esp + 8]
movzx edx, byte [esp + 0x11]
movzx ebx, byte [esp + 0x10]
test dl, dl
je 0x4e6161
cmp eax, 0x13
jne 0x4e6150
mov ebp, dword [esp + 0x48]
test ebp, ebp
jne 0x4e6136
mov edx, ebx
mov ebx, dword [esp + 0x44]
cmp ebx, 0x14
jg 0x4e6119
cmp ebx, 0xc
jne 0x4e60fc
mov eax, ebx
cmp ebx, 0x17
jne 0x4e4923
cmp eax, 0x18
jne 0x4e4923
test ebp, ebp
jne 0x4e4923
mov ebx, 0x18
mov esi, ebp
movzx ebp, byte [esp + 0x280]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4e4938
mov ebx, 0x11
mov byte [esp + 0x42], cl
movzx ebp, byte [esp + 0x26d]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4e60bd
mov edi, ebx
mov ebx, 0
mov dword [esp + 0x64], ebx
mov ebx, edi
je 0x4e606a
mov ebp, dword [esp + 0x64]
je 0x4e602f
mov dword [esp + 0x60], ebx
test cl, cl
je 0x4e601a
movzx ebp, byte [esp + 0x42]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4e5df2
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x50]
lea ecx, [ebp + ebx]
cmp ecx, ebp
jge 0x4e49d6
lea eax, [0x611ae7]
mov dword [esp], eax
mov dword [esp + 4], 0xe
call fcn.00409130
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x284], ecx
lea ecx, [0x65ed70]
mov dword [esp + 0x288], ecx
mov dword [esp + 0x28c], eax
add esp, 0x24c
ret
mov esi, dword [esp + 0x260]
cmp esi, ecx
jl 0x4e4996
mov esi, dword [esp + 0x264]
cmp esi, ecx
jb 0x4e642c
cmp ecx, ebp
jb 0x4e6425
mov dword [esp + 0x9c], ecx
mov dword [esp + 0x98], edi
mov eax, dword [esp + 0x250]
mov dword [esp], eax
mov ecx, dword [esp + 0x254]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x258]
mov dword [esp + 8], edx
call fcn.0047fa50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov byte [esp + 0xc], 1
call fcn.00480790
mov eax, dword [esp + 0x264]
mov ecx, dword [esp + 0x50]
sub eax, ecx
mov ebx, eax
neg eax
sar eax, 0x1f
and eax, ecx
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x25c]
lea ebp, [eax + ecx]
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
mov dword [esp + 0xfc], edi
mov edi, dword [esp + 0x14]
mov dword [esp + 0xf8], edi
mov edi, dword [esp + 0x14]
mov dword [esp + 0xf4], edi
mov edi, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0xf0], edx
mov edx, dword [esp + 0x14]
mov dword [esp + 0xec], edx
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x14]
test esi, esi
je 0x4e4b44
mov dword [esp + 0xe8], edx
mov edx, dword [esi + 8]
cmp edx, 0x4c618499
ja 0x4e5acb
cmp edx, 0x1c87085b
jne 0x4e58ae
lea eax, [0x5cc260]
cmp edi, eax
jne 0x4e4b44
mov dword [esp], ebp
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004e1f70
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
test ecx, ecx
je 0x4e4b39
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x284], eax
mov dword [esp + 0x288], edx
mov dword [esp + 0x28c], ebx
add esp, 0x24c
ret
mov ecx, dword [esp + 0xec]
mov dword [ecx], eax
jmp 0x4e4b16
mov dword [esp + 0x8c], ebx
mov dword [esp + 0xdc], ebp
nop
mov eax, dword [esp + 0x258]
mov edx, eax
and eax, 0x1f
cmp eax, 6
ja 0x4e4e5e
cmp eax, 1
jne 0x4e4c60
mov eax, dword [esp + 0x7c]
cmp eax, 1
jne 0x4e4c32
mov eax, dword [esp + 0x90]
movzx eax, byte [eax + ecx]
test al, al
jne 0x4e4bf4
xor eax, eax
xor ecx, ecx
xor ebx, ebx
test ecx, ecx
je 0x4e4bba
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x284], eax
mov dword [esp + 0x288], ecx
mov dword [esp + 0x28c], ebx
add esp, 0x24c
ret
mov dword [esp + 0x68], ecx
mov dword [esp + 0xc4], ebx
mov ecx, dword [esp + 0x250]
mov dword [esp], ecx
mov ecx, dword [esp + 0x254]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov byte [esp + 0xc], al
call fcn.00481740
mov ecx, dword [esp + 0x68]
mov ebx, dword [esp + 0xc4]
jmp 0x4e4b97
cmp al, 0xff
jne 0x4e4c04
mov eax, 1
xor ecx, ecx
xor ebx, ebx
jmp 0x4e4b93
lea eax, [0x612061]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00409130
mov ebx, dword [esp + 8]
mov edx, dword [esp + 0x258]
xor eax, eax
lea ecx, [0x65ed70]
jmp 0x4e4b93
lea eax, [0x612061]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00409130
mov ebx, dword [esp + 8]
mov edx, dword [esp + 0x258]
lea ecx, [0x65ed70]
xor eax, eax
jmp 0x4e4b93
cmp eax, 2
jne 0x4e4db5
mov eax, dword [esp + 0x250]
mov dword [esp], eax
mov ecx, dword [esp + 0x254]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00482080
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x7c]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 4
jne 0x4e4d41
mov eax, dword [esp + 0xdc]
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 8], eax
call fcn.004e1f70
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
test ecx, ecx
je 0x4e4cf7
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x284], eax
mov dword [esp + 0x288], ecx
mov dword [esp + 0x28c], edx
add esp, 0x24c
ret
mov dword [esp + 0xcc], edx
mov dword [esp + 0x70], ecx
mov ecx, dword [esp + 0x250]
mov dword [esp], ecx
mov ecx, dword [esp + 0x254]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x258]
mov dword [esp + 8], ecx
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
call fcn.00481a70
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0xcc]
jmp 0x4e4cd4
mov eax, dword [esp + 0xdc]
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 8], eax
call fcn.004e1d20
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
test eax, eax
je 0x4e4d78
mov edx, ecx
mov ecx, eax
jmp 0x4e4cd4
mov dword [esp + 0xc8], ecx
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x250]
mov dword [esp], eax
mov eax, dword [esp + 0x254]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x258]
mov dword [esp + 8], eax
call fcn.00481a70
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0xc8]
jmp 0x4e4d6f
cmp eax, 5
jae 0x4e4c69
mov eax, dword [esp + 0x250]
mov dword [esp], eax
mov eax, dword [esp + 0x254]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.00482080
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x6117eb]
mov dword [esp + 4], edx
mov dword [esp + 8], 0xd
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.004484b0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409130
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0x284], ecx
lea ecx, [0x65ed5c]
mov dword [esp + 0x288], ecx
mov dword [esp + 0x28c], eax
add esp, 0x24c
ret
cmp eax, 0x17
je 0x4e5625
cmp eax, 0x18
jne 0x4e5134
mov eax, dword [esp + 0x98]
cmp eax, 0x13
jg 0x4e506f
cmp eax, 0xc
je 0x4e4fe8
cmp eax, 0x12
je 0x4e4fbf
cmp eax, 0x13
je 0x4e4f96
mov dword [esp + 0x12c], 0
mov dword [esp + 0x130], 0
mov dword [esp], eax
call fcn.00409020
mov eax, dword [esp + 4]
lea ecx, [0x5da940]
mov dword [esp + 0x12c], ecx
mov dword [esp + 0x130], eax
lea eax, [0x61aed5]
mov dword [esp], eax
mov dword [esp + 4], 0x26
lea eax, [esp + 0x12c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004affe0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409130
mov eax, dword [esp + 8]
lea ecx, [0x65ed70]
xor edx, edx
xor ebx, ebx
test ecx, ecx
je 0x4e4f4b
mov edx, dword [esp + 0x9c]
mov dword [esp + 0x284], edx
mov dword [esp + 0x288], ecx
mov dword [esp + 0x28c], eax
add esp, 0x24c
ret
mov dword [esp + 0x108], eax
mov dword [esp + 0xa0], ecx
mov eax, dword [esp + 0x250]
mov dword [esp], eax
mov eax, dword [esp + 0x254]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x258]
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00481c70
mov eax, dword [esp + 0x108]
mov ecx, dword [esp + 0xa0]
jmp 0x4e4f28
mov dword [esp], ebp
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004e2ff0
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
jmp 0x4e4f24
mov dword [esp], ebp
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004e2f30
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
jmp 0x4e4f24
mov dword [esp], ebp
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004661c0
movzx eax, byte [esp + 0xc]
test al, al
je 0x4e5041
mov dword [esp], 0
mov eax, dword [esp + 0xdc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 8], eax
call fcn.00448630
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
xor edx, edx
xor ebx, ebx
mov ebp, ecx
mov ecx, edx
mov edx, ebp
mov esi, eax
mov eax, ebx
mov ebx, esi
jmp 0x4e4f24
nop
lea eax, [0x5e46a0]
mov dword [esp], eax
call fcn.0040b8d0
mov ebx, dword [esp + 4]
mov dword [ebx + 4], 0x1a
lea eax, [0x6164db]
mov dword [ebx], eax
xor ecx, ecx
lea edx, [0x65e99c]
xor eax, eax
jmp 0x4e5030
cmp eax, 0x16
jg 0x4e50d4
cmp eax, 0x14
je 0x4e50ab
cmp eax, 0x16
jne 0x4e4e9b
mov dword [esp], ebp
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004e30f0
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
jmp 0x4e4f24
mov dword [esp], 0
mov dword [esp + 4], ebp
mov eax, dword [esp + 0x7c]
mov dword [esp + 8], eax
call fcn.00448630
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
xor ecx, ecx
xor eax, eax
jmp 0x4e4f24
cmp eax, 0x1b
je 0x4e510b
cmp eax, 0x1e
jne 0x4e4e9b
mov dword [esp], ebp
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004e31a0
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
jmp 0x4e4f24
mov dword [esp], 0
mov dword [esp + 4], ebp
mov eax, dword [esp + 0x7c]
mov dword [esp + 8], eax
call fcn.00448630
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
xor ecx, ecx
xor eax, eax
jmp 0x4e4f24
cmp eax, 0x19
jne 0x4e4dbe
xor eax, eax
jmp 0x4e5148
mov ecx, dword [esp + 0x58]
lea eax, [ecx + 1]
mov dword [esp + 0x58], eax
mov ecx, dword [esp + 0xa0]
mov edx, dword [ecx + 0x64]
mov ebx, dword [esp + 0xbc]
mov dword [esp], ebx
call edx
mov eax, dword [esp + 0x58]
cmp dword [esp + 4], eax
jle 0x4e51e4
mov ecx, dword [esp + 0xa0]
mov edx, dword [ecx + 0x2c]
mov ebx, dword [esp + 0xbc]
mov dword [esp], ebx
mov dword [esp + 4], eax
call edx
lea edi, [esp + 0x218]
lea esi, [esp + 8]
call fcn.0045e53e
mov eax, dword [esp + 0x224]
test eax, eax
je 0x4e5141
lea eax, [0x6193ec]
mov dword [esp], eax
mov dword [esp + 4], 0x21
call fcn.00409130
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0x284], ecx
lea ecx, [0x65ed5c]
mov dword [esp + 0x288], ecx
mov dword [esp + 0x28c], eax
add esp, 0x24c
ret
mov eax, dword [esp + 0xa0]
mov ecx, dword [eax + 0x64]
mov edx, dword [esp + 0xbc]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
test eax, eax
jg 0x4e55bd
xor eax, eax
test al, al
je 0x4e5346
mov eax, dword [esp + 0x268]
mov ecx, dword [esp + 0x9c]
cmp eax, ecx
ja 0x4e6419
mov eax, dword [esp + 0x250]
mov dword [esp], eax
mov ecx, dword [esp + 0x254]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x258]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.004804e0
mov eax, dword [esp + 0x264]
mov ecx, dword [esp + 0x268]
sub eax, ecx
mov edx, eax
neg eax
sar eax, 0x1f
and eax, ecx
mov ebx, dword [esp + 0x25c]
add eax, ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0xe4], ebx
mov ebp, dword [esp + 0x14]
mov dword [esp + 0x10c], ebp
mov esi, dword [esp + 0x18]
mov dword [esp + 0x88], esi
mov dword [esp], eax
mov eax, dword [esp + 0x9c]
sub eax, ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.004091b0
mov eax, dword [esp + 0xc]
nop
movzx ecx, byte [0x783630]
test cl, cl
je 0x4e55b2
lea ecx, [0x5db9a0]
mov dword [0x783634], ecx
mov edx, dword [0x7a0970]
test edx, edx
jne 0x4e55a2
mov dword [0x783638], eax
mov dword [esp + 0x114], ecx
mov dword [esp + 0x118], eax
mov ecx, dword [esp + 0x114]
test ecx, ecx
je 0x4e5597
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4e5315
or edx, 0x80
mov ebx, dword [esp + 0xe4]
mov dword [esp], ebx
mov ebx, dword [esp + 0x10c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x88]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.00481610
xor eax, eax
xor ecx, ecx
mov edx, dword [esp + 0x94]
mov ebx, dword [esp + 0x104]
jmp 0x4e535b
inc eax
mov dword [esp + 0x108], ebx
mov dword [esp + 0x94], edx
mov dword [esp + 0x5c], eax
mov dword [esp + 0x54], ecx
mov ebp, dword [esp + 0xa0]
mov esi, dword [ebp + 0x64]
mov edi, dword [esp + 0xbc]
mov dword [esp], edi
call esi
mov eax, dword [esp + 0x5c]
cmp dword [esp + 4], eax
jle 0x4e5566
mov ecx, dword [esp + 0xa0]
mov edx, dword [ecx + 0x2c]
mov ebx, dword [esp + 0xbc]
mov dword [esp], ebx
mov dword [esp + 4], eax
call edx
lea edi, [esp + 0x1e4]
lea esi, [esp + 8]
call fcn.0045e53e
mov eax, dword [esp + 0x5c]
test eax, eax
jne 0x4e555f
mov ecx, dword [esp + 0x1f4]
mov edx, dword [esp + 0x1f8]
mov ebx, dword [0x782fd4]
cmp dword [0x782fd0], ecx
je 0x4e5541
xor ecx, ecx
test cl, cl
je 0x4e5408
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x94]
mov ebx, dword [esp + 0x108]
jmp 0x4e535a
mov ecx, dword [esp + 0x250]
mov dword [esp], ecx
mov edx, dword [esp + 0x254]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x258]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004804e0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xe4], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x10c], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x88], edx
mov ebx, dword [esp + 0x1fc]
mov ebp, dword [esp + 0x200]
mov dword [esp], ebx
mov dword [esp + 4], ebp
lea ebx, [0x60f311]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 4
call fcn.0047ad20
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004e68f0
lea edi, [esp + 0x180]
lea esi, [esp + 8]
call fcn.0045e584
mov eax, dword [esp + 0xe4]
mov dword [esp], eax
mov eax, dword [esp + 0x10c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x8c]
mov dword [esp + 0x14], edx
mov ebx, dword [esp + 0x54]
mov dword [esp + 0x18], ebx
lea edi, [esp + 0x1c]
lea esi, [esp + 0x180]
call fcn.0045e584
call fcn.004e3c80
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x3c]
test ecx, ecx
jne 0x4e551e
mov edx, ecx
mov ecx, eax
mov eax, dword [esp + 0x5c]
jmp 0x4e535a
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x284], eax
mov dword [esp + 0x288], edx
mov dword [esp + 0x28c], ebx
add esp, 0x24c
ret
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.004037c0
movzx ecx, byte [esp + 0xc]
mov eax, dword [esp + 0x5c]
jmp 0x4e53ed
xor ecx, ecx
jmp 0x4e53ed
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x284], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0x288], eax
mov eax, dword [esp + 0x108]
mov dword [esp + 0x28c], eax
add esp, 0x24c
ret
xor edx, edx
xor ecx, ecx
xor eax, eax
jmp 0x4e5315
lea edi, [0x783638]
call fcn.0045de10
jmp 0x4e52e3
lea ecx, [0x5db9a0]
jmp 0x4e52e3
mov eax, dword [esp + 0xa0]
mov ecx, dword [eax + 0x2c]
mov edx, dword [esp + 0xbc]
mov dword [esp], edx
mov dword [esp + 4], 0
call ecx
lea edi, [esp + 0x218]
lea esi, [esp + 8]
call fcn.0045e53e
mov eax, dword [esp + 0x228]
mov ecx, dword [esp + 0x22c]
mov edx, dword [0x782fd4]
cmp dword [0x782fd0], eax
je 0x4e560e
xor eax, eax
jmp 0x4e5208
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004037c0
movzx eax, byte [esp + 0xc]
jmp 0x4e5609
mov eax, dword [esp + 0xa0]
mov ecx, dword [eax + 0x28]
mov edx, dword [esp + 0xbc]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
jne 0x4e57c2
mov eax, dword [esp + 0x108]
mov dword [esp], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], eax
call fcn.00482630
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x250]
mov dword [esp], ebx
mov ebp, dword [esp + 0x254]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x258]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.00481610
mov eax, dword [esp + 0xdc]
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 8], eax
call fcn.004091b0
mov eax, dword [esp + 0xc]
nop
movzx ecx, byte [0x783630]
test cl, cl
je 0x4e57b7
lea ecx, [0x5d3720]
mov dword [0x783634], ecx
mov edx, dword [0x7a0970]
test edx, edx
jne 0x4e57a7
mov dword [0x783638], eax
mov dword [esp + 0x124], ecx
mov dword [esp + 0x128], eax
mov ecx, dword [esp + 0x124]
test ecx, ecx
je 0x4e579f
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4e573d
or edx, 0x80
mov ebx, dword [esp + 0x250]
mov dword [esp], ebx
mov ebx, dword [esp + 0x254]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x258]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.004822f0
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x284], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0x288], eax
mov eax, dword [esp + 0x104]
mov dword [esp + 0x28c], eax
add esp, 0x24c
ret
xor edx, edx
xor ecx, ecx
xor eax, eax
jmp 0x4e573d
lea edi, [0x783638]
call fcn.0045de10
jmp 0x4e570f
lea ecx, [0x5d3720]
jmp 0x4e570f
mov eax, dword [esp + 0xa0]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0xbc]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xdc]
mov dword [esp], edx
mov edx, dword [esp + 0x7c]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x8c]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x108]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0xbc]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
call fcn.004e3850
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x24]
mov ebp, dword [esp + 0x28]
mov esi, dword [esp + 0x2c]
test eax, eax
je 0x4e585f
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x284], eax
mov dword [esp + 0x288], ebp
mov dword [esp + 0x28c], esi
add esp, 0x24c
ret
mov dword [esp + 0xc0], esi
mov dword [esp + 0x108], ebp
mov eax, dword [esp + 0x250]
mov dword [esp], eax
mov eax, dword [esp + 0x254]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x258]
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ebx
call fcn.00481610
mov ebp, dword [esp + 0x108]
mov esi, dword [esp + 0xc0]
jmp 0x4e583c
cmp edx, 0x26ca392d
jne 0x4e5a46
lea edx, [0x60d980]
cmp edi, edx
jne 0x4e4b44
mov ecx, dword [esp + 0x98]
cmp ecx, 0x17
jne 0x4e598f
lea edi, [esp + 0x16c]
xor eax, eax
call fcn.0045e0ab
mov dword [esp], ebp
mov ecx, dword [esp + 0x7c]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.004e2990
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x108], ecx
mov edx, dword [esp + 0x24]
lea edi, [esp + 0x16c]
lea esi, [esp + 0xc]
call fcn.0045e58e
mov edi, dword [esp + 0xf0]
test byte [edi], al
mov ecx, dword [0x7a0970]
test ecx, ecx
jne 0x4e5962
lea esi, [esp + 0x16c]
call fcn.0045e58e
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x284], eax
mov eax, dword [esp + 0x108]
mov dword [esp + 0x288], eax
mov dword [esp + 0x28c], edx
add esp, 0x24c
ret
mov dword [esp + 0x104], edx
lea eax, [0x60c6c0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x16c]
mov dword [esp + 8], eax
call fcn.004106a0
mov edx, dword [esp + 0x104]
jmp 0x4e5938
lea edi, [esp + 0x16c]
xor eax, eax
call fcn.0045e0ab
mov dword [esp], ebp
mov ecx, dword [esp + 0x7c]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.004e2cf0
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x108], ecx
mov edx, dword [esp + 0x24]
lea edi, [esp + 0x16c]
lea esi, [esp + 0xc]
call fcn.0045e58e
mov edi, dword [esp + 0xf0]
test byte [edi], al
mov ecx, dword [0x7a0970]
test ecx, ecx
jne 0x4e5a19
lea esi, [esp + 0x16c]
call fcn.0045e58e
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x284], eax
mov eax, dword [esp + 0x108]
mov dword [esp + 0x288], eax
mov dword [esp + 0x28c], edx
add esp, 0x24c
ret
mov dword [esp + 0x104], edx
lea eax, [0x60c6c0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x16c]
mov dword [esp + 8], eax
call fcn.004106a0
mov edx, dword [esp + 0x104]
jmp 0x4e59ef
cmp edx, 0x4c618499
jne 0x4e4b44
lea eax, [0x5e6a80]
cmp edi, eax
jne 0x4e4b44
mov dword [esp], ebp
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004e2570
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov edi, dword [esp + 0xf8]
mov dword [edi + 4], ecx
mov dword [edi + 8], edx
mov ecx, dword [0x7a0970]
test ecx, ecx
jne 0x4e5ac4
mov dword [edi], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x284], eax
mov dword [esp + 0x288], ebx
mov dword [esp + 0x28c], ebp
add esp, 0x24c
ret
call fcn.0045de10
jmp 0x4e5aa1
cmp edx, 0x7418f6b4
ja 0x4e5bb2
cmp edx, 0x4d10f6f9
jne 0x4e5b28
lea eax, [0x5cc2a0]
cmp edi, eax
jne 0x4e4b44
mov eax, dword [esp + 0xe8]
mov byte [eax], 1
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x284], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0x288], eax
mov eax, dword [esp + 0x104]
mov dword [esp + 0x28c], eax
add esp, 0x24c
ret
cmp edx, 0x7418f6b4
jne 0x4e4b44
lea edx, [0x5ca7e0]
cmp edi, edx
jne 0x4e4b44
mov dword [esp + 0xe0], eax
mov dword [esp], ebp
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004e20f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
test ecx, ecx
je 0x4e5b94
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x284], eax
mov dword [esp + 0x288], edx
mov dword [esp + 0x28c], ebx
add esp, 0x24c
ret
mov edi, dword [esp + 0xe0]
test byte [edi], al
mov ecx, dword [0x7a0970]
test ecx, ecx
jne 0x4e5bab
mov dword [edi], eax
jmp 0x4e5b71
call fcn.0045de10
jmp 0x4e5b71
cmp edx, 0x8faab972
jne 0x4e5cce
lea edx, [0x5cc320]
cmp edi, edx
jne 0x4e4b44
mov eax, dword [esp + 0x268]
mov edx, dword [esp + 0x9c]
cmp eax, edx
ja 0x4e641e
lea edi, [esp + 0x198]
mov esi, eax
xor eax, eax
call fcn.0045e0a7
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x198], ecx
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x19c], ecx
movzx ecx, byte [esp + 0x41]
mov byte [esp + 0x1a0], cl
mov dword [esp + 0x1a4], ebp
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x1a8], ecx
mov dword [esp + 0x1ac], ebx
mov ecx, dword [esp + 0x264]
sub ecx, esi
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, esi
mov ebp, dword [esp + 0x25c]
add ecx, ebp
mov dword [esp + 0x1b0], ecx
sub edx, esi
mov dword [esp + 0x1b4], edx
mov dword [esp + 0x1b8], ebx
mov edi, dword [esp + 0xfc]
test byte [edi], al
mov edx, dword [0x7a0970]
test edx, edx
jne 0x4e5caf
lea esi, [esp + 0x198]
call fcn.0045e566
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x284], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0x288], eax
mov eax, dword [esp + 0x104]
mov dword [esp + 0x28c], eax
add esp, 0x24c
ret
lea eax, [0x5f7260]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x198]
mov dword [esp + 8], eax
call fcn.004106a0
jmp 0x4e5c7e
cmp edx, 0xeb2625b9
jne 0x4e4b44
lea edx, [0x5e6a20]
cmp edi, edx
jne 0x4e4b44
mov edx, dword [esp + 0x7c]
test edx, edx
je 0x4e5dc5
mov esi, dword [esp + 0x90]
movzx ecx, byte [esi + ecx]
movzx esi, cl
cmp esi, 7
jle 0x4e5d7b
lea eax, [0x6198a8]
mov dword [esp], eax
mov dword [esp + 4], 0x22
call fcn.00409130
mov eax, dword [esp + 8]
xor ecx, ecx
xor edx, edx
xor ebx, ebx
xor ebp, ebp
lea esi, [0x65ed70]
mov edi, dword [esp + 0xf4]
mov dword [edi + 4], ebx
mov dword [edi + 8], edx
mov dword [edi + 0xc], ebp
mov edx, dword [0x7a0970]
test edx, edx
jne 0x4e5d6e
mov dword [edi], ecx
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0x284], ecx
mov dword [esp + 0x288], esi
mov dword [esp + 0x28c], eax
add esp, 0x24c
ret
mov edx, eax
mov eax, ecx
call fcn.0045de10
mov eax, edx
jmp 0x4e5d4b
cmp edx, 1
jne 0x4e5d84
test esi, esi
jg 0x4e5d07
mov eax, ebp
movzx ebp, byte [edx + ebp - 1]
mov edi, ebx
mov ebx, 1
shl ebx, cl
dec ebx
xchg ebp, eax
test bl, al
xchg ebp, eax
jne 0x4e5d07
lea ebp, [edx - 1]
mov ebx, ebp
shl ebp, 3
sub ebp, esi
lea edx, [edi - 1]
mov ecx, edx
neg edx
sar edx, 0x1f
and edx, 1
add eax, edx
mov edx, ecx
xor esi, esi
mov ecx, eax
xor eax, eax
jmp 0x4e5d2f
lea eax, [0x614ef0]
mov dword [esp], eax
mov dword [esp + 4], 0x16
call fcn.00409130
mov eax, dword [esp + 8]
xor ecx, ecx
xor edx, edx
xor ebx, ebx
xor ebp, ebp
lea esi, [0x65ed70]
jmp 0x4e5d2f
movzx ebp, byte [esp + 0x41]
xchg ebp, eax
cmp dl, al
xchg ebp, eax
je 0x4e4986
mov eax, dword [esp + 0x250]
mov dword [esp], eax
mov eax, dword [esp + 0x254]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x258]
mov dword [esp + 8], eax
lea edi, [esp + 0xc]
lea esi, [esp + 0x26c]
call fcn.0045e584
call fcn.004e6450
movzx eax, byte [esp + 0x24]
test al, al
je 0x4e5e70
mov eax, dword [esp + 0x268]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x104]
mov dword [esp + 0x284], eax
mov dword [esp + 0x288], ecx
mov dword [esp + 0x28c], edx
add esp, 0x24c
ret
mov eax, dword [esp + 0x48]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0xb4], eax
movzx eax, byte [esp + 0x41]
mov byte [esp + 0xb8], al
lea edi, [esp + 0x180]
lea esi, [esp + 0x26c]
call fcn.0045e584
mov eax, dword [esp + 0xa0]
mov eax, dword [eax + 0x60]
mov ecx, dword [esp + 0xbc]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov dword [esp + 0x108], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x9c], ecx
lea edi, [esp + 0x1bc]
xor eax, eax
call fcn.0045e0a6
mov eax, dword [esp + 0x60]
mov dword [esp], eax
call fcn.00409020
mov eax, dword [esp + 4]
lea ecx, [0x5da940]
mov dword [esp + 0x1bc], ecx
mov dword [esp + 0x1c0], eax
lea eax, [0x5f3f80]
mov dword [esp], eax
lea eax, [esp + 0xac]
mov dword [esp + 4], eax
call fcn.00409230
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c8], ecx
lea eax, [0x5ffb20]
mov dword [esp], eax
lea eax, [esp + 0x180]
mov dword [esp + 4], eax
call fcn.00408f40
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x1cc], eax
mov dword [esp + 0x1d0], ecx
mov eax, dword [esp + 0x108]
mov dword [esp], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 4], eax
call fcn.00409130
mov eax, dword [esp + 8]
lea ecx, [0x5db180]
mov dword [esp + 0x1d4], ecx
mov dword [esp + 0x1d8], eax
mov eax, dword [esp + 0x50]
mov dword [esp], eax
call fcn.00409020
mov eax, dword [esp + 4]
lea ecx, [0x5da940]
mov dword [esp + 0x1dc], ecx
mov dword [esp + 0x1e0], eax
lea eax, [0x61b419]
mov dword [esp], eax
mov dword [esp + 4], 0x27
lea eax, [esp + 0x1bc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 5
mov dword [esp + 0x10], 5
call fcn.004affe0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409130
mov edx, dword [esp + 8]
mov eax, dword [esp + 0x50]
lea ecx, [0x65ed5c]
jmp 0x4e5e54
cmp esi, ebp
jne 0x4e5e01
cmp eax, ebx
jne 0x4e5e01
jmp 0x4e4977
mov dword [esp + 0x60], ebx
movzx ebx, byte [esp + 0x26f]
test bl, bl
je 0x4e6061
mov ebx, dword [esp + 0x274]
test ebx, ebx
je 0x4e6058
mov ebx, dword [ebx]
xor ecx, ecx
mov ebp, 3
jmp 0x4e496b
mov ebx, dword [esp + 0x60]
jmp 0x4e496b
mov ebx, dword [esp + 0x60]
jmp 0x4e496b
mov dword [esp + 0x90], ebx
movzx ebx, byte [esp + 0x26e]
test bl, bl
je 0x4e60ad
mov ebx, dword [esp + 0x274]
test ebx, ebx
je 0x4e609d
mov ebx, dword [ebx]
xchg ebp, eax
test al, al
xchg ebp, eax
mov ebp, 1
mov ecx, 0
jmp 0x4e4965
xchg ebp, eax
test al, al
xchg ebp, eax
mov ebx, dword [esp + 0x90]
jmp 0x4e4961
xchg ebp, eax
test al, al
xchg ebp, eax
mov ebx, dword [esp + 0x90]
jmp 0x4e4961
mov edi, ebx
mov ebx, dword [esp + 0x274]
test ebx, ebx
je 0x4e60f1
mov ebx, dword [ebx]
xchg ebp, eax
test al, al
xchg ebp, eax
mov dword [esp + 0xa4], eax
mov eax, 2
mov dword [esp + 0x64], eax
mov ecx, 0
mov eax, dword [esp + 0xa4]
jmp 0x4e495b
xchg ebp, eax
test al, al
xchg ebp, eax
mov ebx, edi
jmp 0x4e494e
cmp ebx, 0x12
je 0x4e490e
cmp ebx, 0x14
je 0x4e490e
mov ebx, eax
mov eax, dword [esp + 0x44]
jmp 0x4e4910
cmp ebx, 0x16
je 0x4e490e
cmp ebx, 0x1b
je 0x4e490e
cmp ebx, 0x1e
je 0x4e490e
jmp 0x4e610e
mov edx, ebx
mov ebx, dword [esp + 0x278]
test ebx, ebx
je 0x4e614c
mov eax, dword [esp + 0x44]
jmp 0x4e4910
mov ebx, eax
jmp 0x4e6143
mov edx, ebx
mov ebp, dword [esp + 0x48]
mov ebx, eax
mov eax, dword [esp + 0x44]
jmp 0x4e4910
mov dword [esp + 0x12c], 0
mov dword [esp + 0x130], 0
mov eax, dword [esp + 0x110]
test eax, eax
je 0x4e620d
mov ecx, dword [eax + 4]
mov dword [esp + 0x12c], ecx
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x130], eax
lea eax, [0x613ae2]
mov dword [esp], eax
mov dword [esp + 4], 0x13
lea eax, [esp + 0x12c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004affe0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409130
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x284], ecx
lea ecx, [0x65ed5c]
mov dword [esp + 0x288], ecx
mov dword [esp + 0x28c], eax
add esp, 0x24c
ret
mov ecx, eax
jmp 0x4e6189
mov dword [esp + 0x284], eax
mov eax, dword [esp + 0x104]
mov dword [esp + 0x288], eax
mov dword [esp + 0x28c], edi
add esp, 0x24c
ret
xchg esi, eax
mov byte [esp + 0x43], al
xchg esi, eax
mov dword [esp + 0x8c], ebp
mov dword [esp + 0x84], edi
mov dword [esp], ecx
mov edx, dword [esp + 0x10c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004037c0
movzx eax, byte [esp + 0xc]
test al, al
je 0x4e629f
mov ebp, dword [esp + 0x98]
mov esi, dword [esp + 0x8c]
mov ecx, dword [esp + 0x84]
mov eax, dword [esp + 0x9c]
mov ebx, dword [esp + 0x94]
movzx edx, byte [esp + 0x43]
mov edi, dword [esp + 0x100]
jmp 0x4e488a
mov eax, dword [esp + 0x8c]
test eax, eax
mov ecx, dword [esp + 0x110]
mov edx, dword [esp + 0x260]
mov ebx, dword [esp + 0x9c]
jmp 0x4e474a
xchg esi, eax
test al, al
xchg esi, eax
jne 0x4e4728
mov eax, dword [esp + 0x250]
mov dword [esp], eax
mov eax, dword [esp + 0x254]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x258]
mov dword [esp + 8], eax
lea edi, [esp + 0xc]
lea esi, [esp + 0x26c]
call fcn.0045e584
call fcn.004e6450
movzx eax, byte [esp + 0x24]
test al, al
je 0x4e633b
mov eax, dword [esp + 0x268]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x100]
mov dword [esp + 0x284], eax
mov dword [esp + 0x288], ecx
mov dword [esp + 0x28c], edx
add esp, 0x24c
ret
lea eax, [0x61a8d5]
mov dword [esp], eax
mov dword [esp + 4], 0x25
call fcn.00409130
mov edx, dword [esp + 8]
mov eax, dword [esp + 0x9c]
lea ecx, [0x65ed5c]
jmp 0x4e631f
lea eax, [0x615f34]
mov dword [esp], eax
mov dword [esp + 4], 0x19
call fcn.00409130
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0x284], ecx
lea ecx, [0x65ed5c]
mov dword [esp + 0x288], ecx
mov dword [esp + 0x28c], eax
add esp, 0x24c
ret
mov eax, 2
jmp 0x4e46e5
mov eax, dword [esp + 0x9c]
mov eax, esi
mov esi, ebp
mov ebp, ecx
mov ecx, edi
mov edi, ebx
mov ebx, edx
mov edx, eax
mov eax, dword [esp + 0x9c]
jmp 0x4e488a
mov dword [esp + 0x284], eax
mov eax, dword [esp + 0x104]
mov dword [esp + 0x288], eax
mov dword [esp + 0x28c], ebx
add esp, 0x24c
ret
mov eax, dword [esp + 0xa0]
mov ecx, dword [eax + 0x6c]
mov edx, dword [esp + 0xbc]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
test eax, eax
sete al
jmp 0x4e3db1
call fcn.0045def0
mov ecx, edx
call fcn.0045def0
mov eax, ebp
call fcn.0045def0
mov edx, esi
call fcn.0045ded0
mov ecx, esi
call fcn.0045def0
mov ecx, esi
mov edx, ebx
call fcn.0045ded0
nop
call fcn.0045c8b0
jmp fcn.004e3c80