Function at 0x4d48cb
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x61be5c
call fcn.005fcaec
sub esp, 0xec
push ebx
push esi
push edi
xor ebx, ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x40], esp
push 0x26d
mov esi, 0x6805c0
push eax
mov ecx, esi
mov dword [ebp - 4], ebx
call fcn.00519b67
lea eax, [ebp - 0xf8]
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], bl
call fcn.00423f87
mov ecx, eax
call fcn.00404380
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.00403885
cmp eax, ebx
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x10], ebx
je 0x4d4948
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x10]
call fcn.0040398f
cmp eax, ebx
jge 0x4d4948
cmp eax, 0x80004002
je 0x4d4948
push eax
call fcn.005fc540
lea eax, [ebp - 0xf8]
push eax
mov byte [ebp - 4], 4
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d4963
push eax
call fcn.005fc540
mov eax, dword [ebp + 0xc]
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
call fcn.0041e159
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 5
mov dword [ebp - 0x14], ebx
call fcn.004d74de
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp + 8]
lea edx, [eax + 0xc]
mov byte [ebp - 4], 6
mov edi, eax
call fcn.0040dced
mov dword [edi + 0x14], eax
mov eax, dword [ebp - 0x14]
lea edx, [eax + 0x18]
xor ecx, ecx
mov edi, eax
call fcn.0040dced
push ecx
mov dword [edi + 0x20], eax
mov eax, esp
mov dword [ebp - 0x40], esp
push 0x26e
push eax
mov ecx, esi
call fcn.00519b67
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 6
call fcn.00423f87
mov ecx, eax
call fcn.00404380
cmp word [ebp - 0x58], 8
mov byte [ebp - 4], 8
jne 0x4d4b74
mov dword [ebp - 0x38], ebx
push 0x497
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
mov byte [ebp - 4], 9
call fcn.00519b03
push dword [ebp - 0x50]
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x38]
push eax
mov byte [ebp - 4], 0xa
call fcn.0040de82
mov eax, dword [ebp - 0x34]
add esp, 0xc
cmp eax, ebx
mov byte [ebp - 4], 9
je 0x4d4a24
add eax, 0xfffffff4
push eax
call fcn.00402ae9
pop ecx
push dword [ebp - 0x50]
mov edi, dword [ebp - 0x14]
call fcn.005fd00f
pop ecx
lea edx, [edi + 0x18]
mov ecx, eax
call fcn.0040dced
mov dword [edi + 0x20], eax
mov edi, 0x681f98
push edi
lea ecx, [ebp - 0xe8]
call fcn.005d8d79
push edi
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0xb
call fcn.005d8d79
push ebx
push ebx
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xc
call fcn.004dd2a7
push ecx
mov ecx, esp
mov dword [ebp - 0x40], esp
push eax
call fcn.00403955
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0xc
call fcn.0040464e
mov ecx, eax
call fcn.00423f87
mov ecx, eax
call fcn.004044ee
mov ecx, eax
mov byte [ebp - 4], 0xe
call fcn.00403885
cmp eax, ebx
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], ebx
je 0x4d4ad3
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x30]
call fcn.0040398f
cmp eax, ebx
jge 0x4d4ad3
cmp eax, 0x80004002
je 0x4d4ad3
push eax
call fcn.005fc540
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x12
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d4aeb
push eax
call fcn.005fc540
lea eax, [ebp - 0xd8]
push eax
mov byte [ebp - 4], 0x11
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d4b06
push eax
call fcn.005fc540
lea eax, [ebp - 0xe8]
push eax
mov byte [ebp - 4], 0x10
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d4b21
push eax
call fcn.005fc540
cmp dword [ebp - 0x30], ebx
jne 0x4d4b4c
lea ecx, [ebp - 0x30]
call fcn.005acebb
mov eax, dword [ebp - 0x38]
cmp eax, ebx
mov byte [ebp - 4], 8
je 0x4d5e24
add eax, 0xfffffff4
push eax
call fcn.00402ae9
pop ecx
jmp 0x4d5e24
push dword [ebp - 0x30]
lea ecx, [ebp - 0x2c]
call fcn.00402473
lea ecx, [ebp - 0x30]
call fcn.005acebb
mov eax, dword [ebp - 0x38]
cmp eax, ebx
mov byte [ebp - 4], 8
je 0x4d4b74
add eax, 0xfffffff4
push eax
call fcn.00402ae9
pop ecx
mov eax, dword [ebp + 8]
mov dword [ebp - 0x34], eax
push ebx
lea eax, [ebp - 0x34]
mov edi, 0x67fa70
push eax
mov ecx, edi
call fcn.0040eeea
test eax, eax
jne 0x4d5e24
mov eax, dword [ebp + 8]
mov dword [ebp + 8], eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp + 8]
push eax
mov ecx, edi
call fcn.004d762c
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x2bf
push eax
mov ecx, esi
call fcn.00519b67
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 8
call fcn.00423f87
mov ecx, eax
call fcn.00404380
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x29d
push eax
mov ecx, esi
mov byte [ebp - 4], 0x14
call fcn.00519b67
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x14
call fcn.00423f87
mov ecx, eax
call fcn.00404380
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x2c0
push eax
mov ecx, esi
mov byte [ebp - 4], 0x16
call fcn.00519b67
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x16
call fcn.00423f87
mov ecx, eax
call fcn.00404380
xor ecx, ecx
cmp word [ebp - 0x98], bx
mov byte [ebp - 4], 0x18
setne cl
xor eax, eax
cmp word [ebp - 0xa8], bx
setne al
mov edi, eax
xor eax, eax
cmp word [ebp - 0x88], bx
setne al
cmp eax, ebx
je 0x4d4c71
mov eax, dword [ebp - 0x14]
mov edi, eax
lea edx, [eax + 0x34]
push 3
jmp 0x4d4c97
cmp ecx, ebx
je 0x4d4c89
cmp edi, ebx
je 0x4d5dd3
mov eax, dword [ebp - 0x14]
mov edi, eax
lea edx, [eax + 0x34]
push 2
jmp 0x4d4c97
mov eax, dword [ebp - 0x14]
cmp edi, ebx
mov edi, eax
lea edx, [eax + 0x34]
je 0x4d4c9a
push 1
pop ecx
jmp 0x4d4c9c
xor ecx, ecx
call fcn.0040dced
push ecx
mov dword [edi + 0x3c], eax
mov eax, esp
mov dword [ebp + 8], esp
push 0x2c9
push eax
mov ecx, esi
call fcn.00519b67
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x18
call fcn.00423f87
mov ecx, eax
call fcn.00404380
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp word [ebp - 0xc8], bx
lea edx, [eax + 0x40]
setne cl
mov byte [ebp - 4], 0x1a
mov edi, eax
call fcn.0040dced
mov dword [edi + 0x48], eax
lea eax, [ebp - 0x78]
push eax
call dword [fcn.00635234]
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x499
push eax
mov ecx, esi
mov byte [ebp - 4], 0x1b
call fcn.00519b67
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1b
call fcn.00423f87
mov ecx, eax
call fcn.00404380
cmp word [eax], 8
mov byte [ebp - 4], 0x1d
mov edi, 0x67f068
jne 0x4d4d3d
mov eax, dword [eax + 8]
jmp 0x4d4d3f
mov eax, edi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
add ecx, 0x24
push eax
call fcn.0042f7ce
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d4d65
push eax
call fcn.005fc540
push edi
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x49a
push eax
mov ecx, esi
call fcn.00519b67
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1b
call fcn.00423f87
mov ecx, eax
call fcn.00404380
push eax
mov byte [ebp - 4], 0x1f
call fcn.0043a655
add esp, 4
mov dword [ebp + 8], esp
mov ecx, esp
push eax
call fcn.00402a05
call fcn.0044368c
mov edx, dword [ebp - 0x14]
pop ecx
mov edi, edx
add edx, 0x28
mov ecx, eax
call fcn.0040dced
mov dword [edi + 0x30], eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d4dd8
push eax
call fcn.005fc540
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x49b
push eax
mov ecx, esi
call fcn.00519b67
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1b
call fcn.00423f87
mov ecx, eax
call fcn.00404380
push eax
mov byte [ebp - 4], 0x21
call fcn.0040e892
mov edi, eax
pop ecx
neg edi
pop ecx
sbb edi, edi
lea ecx, [ebp - 0x18]
neg edi
call fcn.004a35f6
lea edx, [eax + 0x4c]
mov ecx, edi
mov dword [ebp + 8], eax
call fcn.0040dced
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x54], eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d4e4a
push eax
call fcn.005fc540
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x49c
push eax
mov ecx, esi
call fcn.00519b67
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1b
call fcn.00423f87
mov ecx, eax
call fcn.00404380
push eax
mov byte [ebp - 4], 0x23
call fcn.0040e892
mov edi, eax
pop ecx
neg edi
pop ecx
sbb edi, edi
lea ecx, [ebp - 0x18]
neg edi
call fcn.004a35f6
lea edx, [eax + 0x58]
mov ecx, edi
mov dword [ebp + 8], eax
call fcn.0040dced
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x60], eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d4ebc
push eax
call fcn.005fc540
push 1
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x49d
push eax
mov ecx, esi
call fcn.00519b67
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1b
call fcn.00423f87
mov ecx, eax
call fcn.00404380
push eax
mov byte [ebp - 4], 0x25
call fcn.0040e892
pop ecx
pop ecx
lea ecx, [ebp - 0x18]
mov dword [ebp + 8], eax
call fcn.004a35f6
mov ecx, dword [ebp + 8]
mov edi, eax
lea edx, [edi + 0x64]
call fcn.0040dced
mov dword [edi + 0x6c], eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d4f27
push eax
call fcn.005fc540
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x49e
push eax
mov ecx, esi
call fcn.00519b67
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1b
call fcn.00423f87
mov ecx, eax
call fcn.00404380
push eax
mov byte [ebp - 4], 0x27
call fcn.0040e892
pop ecx
pop ecx
lea ecx, [ebp - 0x18]
mov dword [ebp + 8], eax
call fcn.004a35f6
mov ecx, dword [ebp + 8]
mov edi, eax
lea edx, [edi + 0x70]
call fcn.0040dced
mov dword [edi + 0x78], eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d4f91
push eax
call fcn.005fc540
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x49f
push eax
mov ecx, esi
call fcn.00519b67
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1b
call fcn.00423f87
mov ecx, eax
call fcn.00404380
push eax
mov byte [ebp - 4], 0x29
call fcn.0040e892
pop ecx
pop ecx
lea ecx, [ebp - 0x18]
mov dword [ebp + 8], eax
call fcn.004a35f6
mov ecx, dword [ebp + 8]
mov edi, eax
lea edx, [edi + 0x7c]
call fcn.0040dced
mov dword [edi + 0x84], eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d4ffe
push eax
call fcn.005fc540
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x4a0
push eax
mov ecx, esi
call fcn.00519b67
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1b
call fcn.00423f87
mov ecx, eax
call fcn.00404380
push eax
mov byte [ebp - 4], 0x2b
call fcn.0040e892
add eax, 0x64
push eax
push ebx
call fcn.004d7716
mov edi, 0x8c
add esp, 0x10
cmp eax, edi
mov ecx, eax
jl 0x4d504d
mov ecx, edi
mov eax, dword [ebp - 0x14]
lea edx, [eax + 0x88]
mov dword [ebp + 8], eax
call fcn.0040dced
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x90], eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d507f
push eax
call fcn.005fc540
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x4a1
push eax
mov ecx, esi
call fcn.00519b67
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1b
call fcn.00423f87
mov ecx, eax
call fcn.00404380
push eax
mov byte [ebp - 4], 0x2d
call fcn.0040e892
add eax, 0x64
push eax
push ebx
call fcn.004d7716
add esp, 0x10
cmp eax, edi
mov ecx, eax
jl 0x4d50c9
mov ecx, edi
mov eax, dword [ebp - 0x14]
lea edx, [eax + 0x94]
mov edi, eax
call fcn.0040dced
mov dword [edi + 0x9c], eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d50f7
push eax
call fcn.005fc540
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x4a2
push eax
mov ecx, esi
call fcn.00519b67
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1b
call fcn.00423f87
mov ecx, eax
call fcn.00404380
push eax
mov byte [ebp - 4], 0x2f
call fcn.0040e892
push eax
push ebx
call fcn.004d7716
mov edi, 0x3e7
add esp, 0x10
cmp eax, edi
mov ecx, eax
jl 0x4d5143
mov ecx, edi
mov eax, dword [ebp - 0x14]
lea edx, [eax + 0xa0]
mov dword [ebp + 8], eax
call fcn.0040dced
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xa8], eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d5175
push eax
call fcn.005fc540
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x4a3
push eax
mov ecx, esi
call fcn.00519b67
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1b
call fcn.00423f87
mov ecx, eax
call fcn.00404380
push eax
mov byte [ebp - 4], 0x31
call fcn.0040e892
push eax
push ebx
call fcn.004d7716
add esp, 0x10
cmp eax, edi
mov ecx, eax
jl 0x4d51bc
mov ecx, edi
mov eax, dword [ebp - 0x14]
lea edx, [eax + 0xac]
mov dword [ebp + 8], eax
call fcn.0040dced
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xb4], eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d51ee
push eax
call fcn.005fc540
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x4a4
push eax
mov ecx, esi
call fcn.00519b67
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1b
call fcn.00423f87
mov ecx, eax
call fcn.00404380
push eax
mov byte [ebp - 4], 0x33
call fcn.0040e892
push eax
push ebx
call fcn.004d7716
add esp, 0x10
cmp eax, edi
mov ecx, eax
jl 0x4d5235
mov ecx, edi
mov eax, dword [ebp - 0x14]
lea edx, [eax + 0xb8]
mov dword [ebp + 8], eax
call fcn.0040dced
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc0], eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d5267
push eax
call fcn.005fc540
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x4a5
push eax
mov ecx, esi
call fcn.00519b67
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1b
call fcn.00423f87
mov ecx, eax
call fcn.00404380
push eax
mov byte [ebp - 4], 0x35
call fcn.0040e892
push eax
push ebx
call fcn.004d7716
add esp, 0x10
cmp eax, edi
mov ecx, eax
jl 0x4d52ae
mov ecx, edi
mov eax, dword [ebp - 0x14]
lea edx, [eax + 0xc4]
mov edi, eax
call fcn.0040dced
mov dword [edi + 0xcc], eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d52dc
push eax
call fcn.005fc540
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x4a6
push eax
mov ecx, esi
call fcn.00519b67
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1b
call fcn.00423f87
mov ecx, eax
call fcn.00404380
push eax
mov byte [ebp - 4], 0x37
call fcn.0040e892
pop ecx
pop ecx
lea ecx, [ebp - 0x18]
mov dword [ebp + 8], eax
call fcn.004a35f6
mov ecx, dword [ebp + 8]
mov edi, eax
lea edx, [edi + 0xd0]
call fcn.0040dced
mov dword [edi + 0xd8], eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d534c
push eax
call fcn.005fc540
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x4a7
push eax
mov ecx, esi
call fcn.00519b67
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1b
call fcn.00423f87
mov ecx, eax
call fcn.00404380
push eax
mov byte [ebp - 4], 0x39
call fcn.0040e892
pop ecx
pop ecx
lea ecx, [ebp - 0x18]
mov dword [ebp + 8], eax
call fcn.004a35f6
mov ecx, dword [ebp + 8]
mov edi, eax
lea edx, [edi + 0xdc]
call fcn.0040dced
mov dword [edi + 0xe4], eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d53bc
push eax
call fcn.005fc540
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x4a8
push eax
mov ecx, esi
call fcn.00519b67
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1b
call fcn.00423f87
mov ecx, eax
call fcn.00404380
push eax
mov byte [ebp - 4], 0x3b
call fcn.0040e892
pop ecx
pop ecx
lea ecx, [ebp - 0x18]
mov dword [ebp + 8], eax
call fcn.004a35f6
mov ecx, dword [ebp + 8]
mov edi, eax
lea edx, [edi + 0xe8]
call fcn.0040dced
mov dword [edi + 0xf0], eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d542c
push eax
call fcn.005fc540
push 1
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x4a9
push eax
mov ecx, esi
call fcn.00519b67
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1b
call fcn.00423f87
mov ecx, eax
call fcn.00404380
push eax
mov byte [ebp - 4], 0x3d
call fcn.0040e892
pop ecx
pop ecx
lea ecx, [ebp - 0x18]
mov dword [ebp + 8], eax
call fcn.004a35f6
mov ecx, dword [ebp + 8]
mov edi, eax
lea edx, [edi + 0xf4]
call fcn.0040dced
mov dword [edi + 0xfc], eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d549d
push eax
call fcn.005fc540
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x4aa
push eax
mov ecx, esi
call fcn.00519b67
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1b
call fcn.00423f87
mov ecx, eax
call fcn.00404380
push eax
lea eax, [ebp - 0x78]
push eax
mov byte [ebp - 4], 0x3f
call fcn.004029a9
cmp eax, ebx
pop ecx
pop ecx
jge 0x4d54e1
push eax
call fcn.005fc540
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d54f9
push eax
call fcn.005fc540
cmp word [ebp - 0x78], 8
mov eax, dword [ebp - 0x70]
je 0x4d5508
mov eax, 0x67f068
mov ecx, dword [ebp - 0x14]
add ecx, 0x100
push ecx
push eax
call fcn.004d5e71
test eax, eax
pop ecx
pop ecx
jne 0x4d560e
lea eax, [ebp - 0x78]
push eax
mov byte [ebp - 4], 0x1a
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d553a
push eax
call fcn.005fc540
lea eax, [ebp - 0xc8]
push eax
mov byte [ebp - 4], 0x18
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d5555
push eax
call fcn.005fc540
lea eax, [ebp - 0x88]
push eax
mov byte [ebp - 4], 0x16
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d5570
push eax
call fcn.005fc540
lea eax, [ebp - 0xa8]
push eax
mov byte [ebp - 4], 0x14
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d558b
push eax
call fcn.005fc540
lea eax, [ebp - 0x98]
push eax
mov byte [ebp - 4], 8
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d55a6
push eax
call fcn.005fc540
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 6
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d55be
push eax
call fcn.005fc540
cmp dword [ebp - 0x14], ebx
mov byte [ebp - 4], 5
je 0x4d55d3
push ebx
lea ecx, [ebp - 0x18]
call fcn.004d7506
mov dword [ebp - 0x14], ebx
mov eax, dword [ebp - 0x2c]
cmp eax, ebx
mov byte [ebp - 4], 4
je 0x4d55e4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10]
cmp eax, ebx
mov byte [ebp - 4], bl
je 0x4d55f4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp + 0xc]
or dword [ebp - 4], 0xffffffff
cmp eax, ebx
je 0x4d5e60
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x4d5e60
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x4ab
push eax
mov ecx, esi
call fcn.00519b67
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1b
call fcn.00423f87
mov ecx, eax
call fcn.00404380
push eax
mov byte [ebp - 4], 0x41
call fcn.0040e892
pop ecx
pop ecx
lea ecx, [ebp - 0x18]
mov edi, eax
call fcn.004a35f6
mov dword [eax + 0x120], edi
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d566d
push eax
call fcn.005fc540
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x4ac
push eax
mov ecx, esi
call fcn.00519b67
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1b
call fcn.00423f87
mov ecx, eax
call fcn.00404380
push eax
mov byte [ebp - 4], 0x43
call fcn.0040e892
pop ecx
pop ecx
lea ecx, [ebp - 0x18]
mov edi, eax
call fcn.004a35f6
mov dword [eax + 0x124], edi
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d56cc
push eax
call fcn.005fc540
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x302
push eax
mov ecx, esi
call fcn.00519b67
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1b
call fcn.00423f87
mov ecx, eax
call fcn.00404380
push eax
mov byte [ebp - 4], 0x45
call fcn.0040e892
mov edi, eax
pop ecx
neg edi
pop ecx
sbb edi, edi
lea ecx, [ebp - 0x18]
neg edi
call fcn.004a35f6
lea edx, [eax + 0x128]
mov ecx, edi
mov dword [ebp + 8], eax
call fcn.0040dced
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x130], eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d5744
push eax
call fcn.005fc540
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x4ae
push eax
mov ecx, esi
call fcn.00519b67
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1b
call fcn.00423f87
mov ecx, eax
call fcn.00404380
push eax
mov byte [ebp - 4], 0x47
call fcn.0040e892
mov edi, eax
pop ecx
neg edi
pop ecx
sbb edi, edi
lea ecx, [ebp - 0x18]
neg edi
call fcn.004a35f6
lea edx, [eax + 0x14c]
mov ecx, edi
mov dword [ebp + 8], eax
call fcn.0040dced
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x154], eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d57bc
push eax
call fcn.005fc540
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x4af
push eax
mov ecx, esi
call fcn.00519b67
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1b
call fcn.00423f87
mov ecx, eax
call fcn.00404380
push eax
mov byte [ebp - 4], 0x49
call fcn.0040e892
mov edi, eax
pop ecx
neg edi
pop ecx
sbb edi, edi
lea ecx, [ebp - 0x18]
neg edi
call fcn.004a35f6
lea edx, [eax + 0x158]
mov ecx, edi
mov dword [ebp + 8], eax
call fcn.0040dced
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x160], eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d5834
push eax
call fcn.005fc540
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x857
push eax
mov ecx, esi
call fcn.00519b67
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1b
call fcn.00423f87
mov ecx, eax
call fcn.00404380
push eax
mov byte [ebp - 4], 0x4b
call fcn.0040e892
mov edi, eax
pop ecx
neg edi
pop ecx
sbb edi, edi
lea ecx, [ebp - 0x18]
neg edi
call fcn.004a35f6
lea edx, [eax + 0x140]
mov ecx, edi
mov dword [ebp + 8], eax
call fcn.0040dced
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x148], eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d58ac
push eax
call fcn.005fc540
push ecx
fld1
push ecx
fstp qword [esp]
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x4b0
push eax
mov ecx, esi
call fcn.00519b67
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1b
call fcn.00423f87
mov ecx, eax
call fcn.00404380
push eax
mov byte [ebp - 4], 0x4d
call fcn.0047802b
fstp qword [ebp - 0x44]
add esp, 0xc
lea ecx, [ebp - 0x18]
call fcn.004a35f6
fld qword [ebp - 0x44]
fstp qword [eax + 0x138]
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d5916
push eax
call fcn.005fc540
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x858
push eax
mov ecx, esi
call fcn.00519b67
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1b
call fcn.00423f87
mov ecx, eax
call fcn.00404380
push eax
mov byte [ebp - 4], 0x4f
call fcn.0040e892
mov edi, eax
pop ecx
neg edi
pop ecx
sbb edi, edi
lea ecx, [ebp - 0x18]
neg edi
call fcn.004a35f6
lea edx, [eax + 0x164]
mov ecx, edi
mov dword [ebp + 8], eax
call fcn.0040dced
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x16c], eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d598e
push eax
call fcn.005fc540
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x8a5
push eax
mov ecx, esi
call fcn.00519b67
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1b
call fcn.00423f87
mov ecx, eax
call fcn.00404380
push eax
mov byte [ebp - 4], 0x51
call fcn.0040e892
mov edi, eax
pop ecx
neg edi
pop ecx
sbb edi, edi
lea ecx, [ebp - 0x18]
neg edi
call fcn.004a35f6
mov dword [eax + 0x170], edi
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d59f3
push eax
call fcn.005fc540
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x180], ebx
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x17c], ebx
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x178], ebx
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x174], ebx
lea eax, [ebp - 0xb8]
push eax
call dword [fcn.00635234]
cmp dword [ebp - 0x2c], ebx
mov byte [ebp - 4], 0x52
jne 0x4d5a37
push 0x80004003
call fcn.005fc540
mov ecx, dword [ebp - 0x2c]
lea eax, [ebp - 0x34]
push eax
call fcn.0040444c
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x53
call fcn.00402da6
mov eax, dword [ebp - 0x34]
cmp eax, ebx
mov byte [ebp - 4], 0x55
je 0x4d5a61
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x5c], ebx
mov edi, 0x619
cmp dword [ebp - 0x48], ebx
jne 0x4d5a78
push 0x80004003
call fcn.005fc540
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax]
lea edx, [ebp - 0x5c]
push edx
lea edx, [ebp - 0xb8]
push edx
push 1
push eax
call dword [ecx + 0xc]
test eax, eax
jne 0x4d5c0a
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.00404654
pop ecx
pop ecx
push 0x2fa
lea eax, [ebp - 0x38]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x56
call fcn.00519b03
mov ecx, dword [ebp - 0x30]
cmp ecx, ebx
mov eax, dword [eax]
je 0x4d5ac9
mov ecx, dword [ecx]
jmp 0x4d5acb
xor ecx, ecx
push 6
push eax
push ecx
call fcn.005fe5dd
add esp, 0xc
neg eax
sbb al, al
inc al
lea ecx, [ebp - 0x38]
mov byte [ebp + 0xb], al
call fcn.00402385
cmp byte [ebp + 0xb], bl
je 0x4d5af6
mov eax, dword [ebp - 0x14]
inc dword [eax + 0x174]
push edi
lea eax, [ebp - 0x64]
push eax
mov ecx, esi
call fcn.00519b03
mov ecx, dword [ebp - 0x30]
cmp ecx, ebx
mov eax, dword [eax]
je 0x4d5b0f
mov ecx, dword [ecx]
jmp 0x4d5b11
xor ecx, ecx
push 5
push eax
push ecx
call fcn.005fe5dd
add esp, 0xc
neg eax
sbb al, al
inc al
lea ecx, [ebp - 0x64]
mov byte [ebp + 0xb], al
call fcn.00402385
cmp byte [ebp + 0xb], bl
je 0x4d5b41
mov eax, dword [ebp - 0x14]
inc dword [eax + 0x178]
jmp 0x4d5bd7
push 0x2dd
lea eax, [ebp - 0x68]
push eax
mov ecx, esi
call fcn.00519b03
mov ecx, dword [ebp - 0x30]
cmp ecx, ebx
mov eax, dword [eax]
je 0x4d5b5e
mov ecx, dword [ecx]
jmp 0x4d5b60
xor ecx, ecx
push 3
push eax
push ecx
call fcn.005fe5dd
add esp, 0xc
neg eax
sbb al, al
inc al
lea ecx, [ebp - 0x68]
mov byte [ebp + 0xb], al
call fcn.00402385
cmp byte [ebp + 0xb], bl
je 0x4d5b8d
mov eax, dword [ebp - 0x14]
inc dword [eax + 0x180]
jmp 0x4d5bd7
push 0x28f
lea eax, [ebp - 0x40]
push eax
mov ecx, esi
call fcn.00519b03
mov ecx, dword [ebp - 0x30]
cmp ecx, ebx
mov eax, dword [eax]
je 0x4d5baa
mov ecx, dword [ecx]
jmp 0x4d5bac
xor ecx, ecx
push 3
push eax
push ecx
call fcn.005fe5dd
add esp, 0xc
neg eax
sbb al, al
inc al
lea ecx, [ebp - 0x40]
mov byte [ebp + 0xb], al
call fcn.00402385
cmp byte [ebp + 0xb], bl
je 0x4d5bd7
mov eax, dword [ebp - 0x14]
inc dword [eax + 0x17c]
mov ecx, dword [ebp - 0x30]
cmp ecx, ebx
mov byte [ebp - 4], 0x55
je 0x4d5bea
call fcn.00402d75
mov dword [ebp - 0x30], ebx
lea eax, [ebp - 0xb8]
push eax
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d5a69
push eax
call fcn.005fc540
jmp 0x4d5a69
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x40], esp
push edi
push eax
mov ecx, esi
call fcn.00519b67
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x55
call fcn.00423f87
mov ecx, eax
call fcn.00404380
mov ecx, eax
mov byte [ebp - 4], 0x58
call fcn.00403885
cmp eax, ebx
mov dword [ebp + 8], eax
mov dword [ebp - 0x3c], ebx
je 0x4d5c64
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x3c]
call fcn.0040398f
cmp eax, ebx
jge 0x4d5c64
cmp eax, 0x80004002
je 0x4d5c64
push eax
call fcn.005fc540
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x5a
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d5c7c
push eax
call fcn.005fc540
mov eax, dword [ebp - 0x3c]
cmp eax, ebx
je 0x4d5cae
push ecx
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [ebp - 0x3c]
cmp eax, ebx
mov dword [ebp - 0x40], esp
je 0x4d5c98
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x5a
call fcn.004a35f6
mov ecx, eax
call fcn.004d7248
mov eax, dword [ebp - 0x3c]
cmp eax, ebx
mov byte [ebp - 4], 0x55
je 0x4d5cbc
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x48]
cmp eax, ebx
mov byte [ebp - 4], 0x52
je 0x4d5ccd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [ebp - 0xb8]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d5ce8
push eax
call fcn.005fc540
lea eax, [ebp - 0x78]
push eax
mov byte [ebp - 4], 0x1a
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d5d00
push eax
call fcn.005fc540
lea eax, [ebp - 0xc8]
push eax
mov byte [ebp - 4], 0x18
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d5d1b
push eax
call fcn.005fc540
lea eax, [ebp - 0x88]
push eax
mov byte [ebp - 4], 0x16
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d5d36
push eax
call fcn.005fc540
lea eax, [ebp - 0xa8]
push eax
mov byte [ebp - 4], 0x14
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d5d51
push eax
call fcn.005fc540
lea eax, [ebp - 0x98]
push eax
mov byte [ebp - 4], 8
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d5d6c
push eax
call fcn.005fc540
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 6
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d5d84
push eax
call fcn.005fc540
cmp dword [ebp - 0x14], ebx
mov byte [ebp - 4], 5
je 0x4d5d99
push ebx
lea ecx, [ebp - 0x18]
call fcn.004d7506
mov dword [ebp - 0x14], ebx
mov eax, dword [ebp - 0x2c]
cmp eax, ebx
mov byte [ebp - 4], 4
je 0x4d5daa
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10]
cmp eax, ebx
mov byte [ebp - 4], bl
je 0x4d5dba
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp + 0xc]
or dword [ebp - 4], 0xffffffff
cmp eax, ebx
je 0x4d5dcb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push 1
pop eax
jmp 0x4d5e62
lea eax, [ebp - 0x88]
push eax
mov byte [ebp - 4], 0x16
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d5dee
push eax
call fcn.005fc540
lea eax, [ebp - 0xa8]
push eax
mov byte [ebp - 4], 0x14
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d5e09
push eax
call fcn.005fc540
lea eax, [ebp - 0x98]
push eax
mov byte [ebp - 4], 8
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d5e24
push eax
call fcn.005fc540
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 6
call fcn.0040273a
cmp eax, ebx
pop ecx
jge 0x4d5e3c
push eax
call fcn.005fc540
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 5
call fcn.004b04ce
lea ecx, [ebp - 0x2c]
call fcn.005acebb
lea ecx, [ebp - 0x10]
call fcn.005acebb
lea ecx, [ebp + 0xc]
call fcn.005acebb
xor eax, eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret