Function at 0x4b96d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x57bb98
mov eax, dword fs:[0]
push eax
sub esp, 0x3bc
mov eax, dword [0x6a78d0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x3b4], ecx
mov eax, dword [ebp + 0x10]
mov esi, 0x85
mov edi, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x3ac], eax
mov eax, dword [ebp + 0x14]
movzx ecx, word [edi + 0xc]
mov dword [ebp - 0x3a4], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x3bc], eax
xor eax, eax
mov dword [ebp - 0x3c8], eax
mov dword [ebp - 0x3c4], eax
mov eax, ecx
mov dword [ebp - 0x3b0], 0x88
mov dword [ebp - 0x3a8], edx
mov dword [ebp - 0x3c0], 0x12c
cmp ax, word [ebp - 0x3b0]
je 0x4b9785
cmp cx, si
je 0x4b9785
mov eax, dword [ebp - 0x3c0]
cmp word [edx + 0x28], ax
je 0x4b9785
mov eax, ecx
mov ecx, 0x8e
cmp ax, cx
je 0x4b9785
mov dword [ebp - 0x3c4], edi
jmp 0x4b978b
mov dword [ebp - 0x3c8], edi
movzx eax, word [edx + 0x28]
mov esi, dword [sym.imp.MSVCR120.dll_sprintf]
add eax, 0xfffff7ff
cmp eax, 0x33
ja case.0x4b97aa.2050
movzx eax, byte [eax + 0x4bc27c]
jmp dword [eax*4 + 0x4bc250]
movzx eax, word [edx + 0x6c]
push eax
push 0x871
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
push 0x86c
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
jmp 0x4b991e
movzx eax, word [edx + 0x6c]
push eax
push 0x872
jmp 0x4b97bb
movzx eax, word [edx + 0x6c]
push eax
push 0x873
jmp 0x4b97bb
movzx eax, word [edx + 0x6c]
push eax
push 0x874
jmp 0x4b97bb
movzx eax, word [edx + 0x6c]
push eax
push 0x876
jmp 0x4b97bb
movzx eax, word [edx + 0x6c]
push eax
push 0x875
jmp 0x4b97bb
movzx eax, word [edx + 0x6c]
push eax
push 0x878
jmp 0x4b97bb
movzx eax, word [edx + 0x6c]
push eax
push 0x877
jmp 0x4b97bb
movzx eax, word [edx + 0x6c]
push eax
push 0x87a
jmp 0x4b97bb
movzx eax, word [edx + 0x38]
cmp eax, 7
ja case.default.0x4b9844
jmp dword [eax*4 + 0x4bc2b0]
push 0x197
jmp 0x4b9873
push 0x198
jmp 0x4b9873
push 0x199
jmp 0x4b9873
push 0x19a
jmp 0x4b9873
push 0x19b
jmp 0x4b9873
push 0x196
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x2a0]
push eax
call esi
mov edx, dword [ebp - 0x3a8]
add esp, 8
mov eax, 0xc54d
cmp word [edx], ax
jne 0x4b98bc
push 0x9f4
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x2a0]
push eax
call esi
mov edx, dword [ebp - 0x3a8]
add esp, 8
mov eax, 0xc54c
cmp word [edx], ax
jne 0x4b98e8
push 0x9f5
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x2a0]
push eax
call esi
mov edx, dword [ebp - 0x3a8]
add esp, 8
movzx eax, word [edx + 0x78]
sub eax, 0
je 0x4b9902
dec eax
jne case.0x4b97aa.2050
lea eax, [ebp - 0x2a0]
push eax
push 0x111
jmp 0x4b990e
lea eax, [ebp - 0x2a0]
push eax
push 0x110
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
push str.___________s___s
lea eax, [ebp - 0x140]
push eax
call esi
add esp, 0x10
push 1
push 0
push 0
push 0xffffc8
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.00441660
push dword [ebp - 0x3a8]
mov ecx, dword [ebp - 0x3b4]
xorps xmm1, xmm1
push edi
movss dword [ebp - 0x3b0], xmm1
call fcn.004bcb20
mov ecx, dword [ebp - 0x3a8]
movzx eax, word [ecx + 0x6a]
dec eax
je 0x4b997f
dec eax
jne 0x4b99a1
push eax
push eax
push eax
push 0xf83232
push 0xed
jmp 0x4b998f
push 0
push 0
push 0
push 0xf83232
push 0xec
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
mov ecx, edi
call fcn.00441660
mov eax, dword [ebp - 0x3a8]
movzx eax, word [eax + 0x6c]
test ax, ax
je 0x4b9a05
push eax
push 0xee
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push eax
call esi
mov eax, dword [0x6d13bc]
add esp, 0xc
mov ecx, dword [ebp - 0x3a8]
mov ax, word [eax + 0x45c]
cmp ax, word [ecx + 0x6c]
lea eax, [ebp - 0x140]
push 0
push 0
push 0
mov ecx, edi
jae 0x4b99fa
push 0xf83232
jmp 0x4b99ff
push 0xffffff
push eax
call fcn.00441660
push 0
push 0
push 0
push 0xffffff
push str.
mov ecx, edi
call fcn.00441660
mov eax, dword [ebp - 0x3a8]
movzx eax, word [eax + 0x6e]
test ax, ax
je 0x4b9a80
push eax
push 0xef
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push eax
call esi
mov eax, dword [0x6d13bc]
add esp, 0xc
mov ecx, dword [ebp - 0x3a8]
mov ax, word [eax + 0x66c]
cmp ax, word [ecx + 0x6e]
lea eax, [ebp - 0x140]
push 0
push 0
push 0
mov ecx, edi
jae 0x4b9a75
push 0xe61414
jmp 0x4b9a7a
push 0xffffff
push eax
call fcn.00441660
mov eax, dword [ebp - 0x3a8]
movzx eax, word [eax + 0x70]
test ax, ax
je 0x4b9ae4
push eax
push 0xf0
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push eax
call esi
mov eax, dword [0x6d13bc]
add esp, 0xc
mov ecx, dword [ebp - 0x3a8]
mov ax, word [eax + 0x66e]
cmp ax, word [ecx + 0x70]
lea eax, [ebp - 0x140]
push 0
push 0
push 0
mov ecx, edi
jae 0x4b9ad9
push 0xe61414
jmp 0x4b9ade
push 0xffffff
push eax
call fcn.00441660
mov eax, dword [ebp - 0x3a8]
movzx eax, word [eax + 0x72]
test ax, ax
je 0x4b9b48
push eax
push 0xf1
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push eax
call esi
mov eax, dword [0x6d13bc]
add esp, 0xc
mov ecx, dword [ebp - 0x3a8]
mov ax, word [eax + 0x670]
cmp ax, word [ecx + 0x72]
lea eax, [ebp - 0x140]
push 0
push 0
push 0
mov ecx, edi
jae 0x4b9b3d
push 0xe61414
jmp 0x4b9b42
push 0xffffff
push eax
call fcn.00441660
mov eax, dword [ebp - 0x3a8]
movzx eax, word [eax + 0x74]
test ax, ax
je 0x4b9bac
push eax
push 0xf2
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push eax
call esi
mov eax, dword [0x6d13bc]
add esp, 0xc
mov ecx, dword [ebp - 0x3a8]
mov ax, word [eax + 0x672]
cmp ax, word [ecx + 0x74]
lea eax, [ebp - 0x140]
push 0
push 0
push 0
mov ecx, edi
jae 0x4b9ba1
push 0xe61414
jmp 0x4b9ba6
push 0xffffff
push eax
call fcn.00441660
push 0
push 0
push 0
push 0xffffff
push 0x58497c
mov ecx, edi
call fcn.00441660
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4b9bda
movzx eax, word [eax + 8]
test ax, ax
je 0x4b9bda
mov ecx, eax
jmp 0x4b9bdc
xor ecx, ecx
mov eax, dword [ebp - 0x3a8]
movzx edx, word [eax + 0x3a]
test dx, dx
je 0x4b9c74
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4b9c2a
movzx eax, word [eax + 8]
test ax, ax
je 0x4b9c2a
push eax
lea eax, [ecx + edx]
mov ecx, 0x6d43a8
push eax
push 0x17e
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push 0x58e4dc
push eax
call esi
add esp, 0x14
jmp 0x4b9c4f
lea eax, [ecx + edx]
mov ecx, 0x6d43a8
push eax
push 0x17e
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push 0x58a9d4
push eax
call esi
add esp, 0x10
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4b9c64
cmp word [eax + 8], 0
jne 0x4b9d21
push 0
push 0
push 0
push 0x87cefa
jmp 0x4b9d2c
mov edx, dword [ebp - 0x3ac]
test ecx, ecx
je 0x4b9cb0
test edx, edx
je 0x4b9cec
movzx eax, word [edx + 8]
test ax, ax
je 0x4b9cb0
push eax
push ecx
push 0x17e
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push 0x58e4dc
push eax
call esi
add esp, 0x14
jmp 0x4b9d21
test edx, edx
je 0x4b9cec
movzx eax, word [edx + 8]
test ax, ax
je 0x4b9cec
push eax
push 0x17e
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x87cefa
jmp 0x4b9d2c
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4b9d51
movzx eax, word [eax + 8]
test ax, ax
je 0x4b9d3a
push eax
push 0x17e
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.00441660
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4b9d51
movzx eax, word [eax + 0xa]
test ax, ax
je 0x4b9d51
mov ecx, eax
jmp 0x4b9d53
xor ecx, ecx
mov eax, dword [ebp - 0x3a8]
movzx edx, word [eax + 0x3c]
test dx, dx
je 0x4b9deb
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4b9da1
movzx eax, word [eax + 0xa]
test ax, ax
je 0x4b9da1
push eax
lea eax, [ecx + edx]
mov ecx, 0x6d43a8
push eax
push 0x17f
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push 0x58e4dc
push eax
call esi
add esp, 0x14
jmp 0x4b9dc6
lea eax, [ecx + edx]
mov ecx, 0x6d43a8
push eax
push 0x17f
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push 0x58a9d4
push eax
call esi
add esp, 0x10
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4b9ddb
cmp word [eax + 0xa], 0
jne 0x4b9e98
push 0
push 0
push 0
push 0x87cefa
jmp 0x4b9ea3
mov edx, dword [ebp - 0x3ac]
test ecx, ecx
je 0x4b9e27
test edx, edx
je 0x4b9e63
movzx eax, word [edx + 0xa]
test ax, ax
je 0x4b9e27
push eax
push ecx
push 0x17f
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push 0x58e4dc
push eax
call esi
add esp, 0x14
jmp 0x4b9e98
test edx, edx
je 0x4b9e63
movzx eax, word [edx + 0xa]
test ax, ax
je 0x4b9e63
push eax
push 0x17f
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x87cefa
jmp 0x4b9ea3
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4b9ec8
movzx eax, word [eax + 0xa]
test ax, ax
je 0x4b9eb1
push eax
push 0x17f
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.00441660
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4b9ec8
movzx eax, word [eax + 0xc]
test ax, ax
je 0x4b9ec8
mov ecx, eax
jmp 0x4b9eca
xor ecx, ecx
mov eax, dword [ebp - 0x3a8]
movzx edx, word [eax + 0x3e]
test dx, dx
je 0x4b9f62
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4b9f18
movzx eax, word [eax + 0xc]
test ax, ax
je 0x4b9f18
push eax
lea eax, [ecx + edx]
mov ecx, 0x6d43a8
push eax
push 0x180
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push 0x58e4dc
push eax
call esi
add esp, 0x14
jmp 0x4b9f3d
lea eax, [ecx + edx]
mov ecx, 0x6d43a8
push eax
push 0x180
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push 0x58a9d4
push eax
call esi
add esp, 0x10
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4b9f52
cmp word [eax + 0xc], 0
jne 0x4ba00f
push 0
push 0
push 0
push 0x87cefa
jmp 0x4ba01a
mov edx, dword [ebp - 0x3ac]
test ecx, ecx
je 0x4b9f9e
test edx, edx
je 0x4b9fda
movzx eax, word [edx + 0xc]
test ax, ax
je 0x4b9f9e
push eax
push ecx
push 0x180
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push 0x58e4dc
push eax
call esi
add esp, 0x14
jmp 0x4ba00f
test edx, edx
je 0x4b9fda
movzx eax, word [edx + 0xc]
test ax, ax
je 0x4b9fda
push eax
push 0x180
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x87cefa
jmp 0x4ba01a
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4ba03f
movzx eax, word [eax + 0xc]
test ax, ax
je 0x4ba028
push eax
push 0x180
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.00441660
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4ba03f
movzx eax, word [eax + 0xe]
test ax, ax
je 0x4ba03f
mov ecx, eax
jmp 0x4ba041
xor ecx, ecx
mov eax, dword [ebp - 0x3a8]
movzx edx, word [eax + 0x40]
test dx, dx
je 0x4ba0d9
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4ba08f
movzx eax, word [eax + 0xe]
test ax, ax
je 0x4ba08f
push eax
lea eax, [ecx + edx]
mov ecx, 0x6d43a8
push eax
push 0x181
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push 0x58e4dc
push eax
call esi
add esp, 0x14
jmp 0x4ba0b4
lea eax, [ecx + edx]
mov ecx, 0x6d43a8
push eax
push 0x181
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push 0x58a9d4
push eax
call esi
add esp, 0x10
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4ba0c9
cmp word [eax + 0xe], 0
jne 0x4ba186
push 0
push 0
push 0
push 0x87cefa
jmp 0x4ba191
mov edx, dword [ebp - 0x3ac]
test ecx, ecx
je 0x4ba115
test edx, edx
je 0x4ba151
movzx eax, word [edx + 0xe]
test ax, ax
je 0x4ba115
push eax
push ecx
push 0x181
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push 0x58e4dc
push eax
call esi
add esp, 0x14
jmp 0x4ba186
test edx, edx
je 0x4ba151
movzx eax, word [edx + 0xe]
test ax, ax
je 0x4ba151
push eax
push 0x181
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x87cefa
jmp 0x4ba191
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4ba1b6
movzx eax, word [eax + 0xe]
test ax, ax
je 0x4ba1a5
push eax
push 0x181
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.00441660
mov edx, dword [ebp - 0x3ac]
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4ba1b6
mov eax, dword [eax + 0x10]
test eax, eax
jne 0x4ba1b8
xor eax, eax
mov ecx, dword [ebp - 0x3a8]
mov ecx, dword [ecx + 0x44]
test ecx, ecx
je 0x4ba23f
test edx, edx
je 0x4ba1f7
mov edx, dword [edx + 0x10]
test edx, edx
je 0x4ba1f7
push edx
add eax, ecx
mov ecx, 0x6d43a8
push eax
push 0x182
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push 0x58e4dc
push eax
call esi
add esp, 0x14
jmp 0x4ba21b
add eax, ecx
mov ecx, 0x6d43a8
push eax
push 0x182
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push 0x58a9d4
push eax
call esi
add esp, 0x10
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4ba22f
cmp dword [eax + 0x10], 0
jne 0x4ba2e0
push 0
push 0
push 0
push 0x87cefa
jmp 0x4ba2eb
test eax, eax
je 0x4ba273
test edx, edx
je 0x4ba2ad
mov ecx, dword [edx + 0x10]
test ecx, ecx
je 0x4ba273
push ecx
push eax
push 0x182
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push 0x58e4dc
push eax
call esi
add esp, 0x14
jmp 0x4ba2e0
test edx, edx
je 0x4ba2ad
mov eax, dword [edx + 0x10]
test eax, eax
je 0x4ba2ad
push eax
push 0x182
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x87cefa
jmp 0x4ba2eb
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4ba310
mov eax, dword [eax + 0x10]
test eax, eax
je 0x4ba2f9
push eax
push 0x182
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.00441660
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4ba310
movzx eax, word [eax + 0x14]
test ax, ax
je 0x4ba310
mov ecx, eax
jmp 0x4ba312
xor ecx, ecx
mov eax, dword [ebp - 0x3a8]
movzx edx, word [eax + 0x4c]
test dx, dx
je 0x4ba3aa
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4ba360
movzx eax, word [eax + 0x14]
test ax, ax
je 0x4ba360
push eax
lea eax, [ecx + edx]
mov ecx, 0x6d43a8
push eax
push 0x183
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push 0x58e4dc
push eax
call esi
add esp, 0x14
jmp 0x4ba385
lea eax, [ecx + edx]
mov ecx, 0x6d43a8
push eax
push 0x183
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push 0x58a9d4
push eax
call esi
add esp, 0x10
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4ba39a
cmp word [eax + 0x14], 0
jne 0x4ba45d
push 0
push 0
push 0
push 0x87cefa
jmp 0x4ba468
test ecx, ecx
je 0x4ba3e6
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4ba428
movzx eax, word [eax + 0x14]
test ax, ax
je 0x4ba3e6
push eax
push ecx
push 0x183
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push 0x58e4dc
push eax
call esi
add esp, 0x14
jmp 0x4ba45d
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4ba428
movzx eax, word [eax + 0x14]
test ax, ax
je 0x4ba428
push eax
push 0x183
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x87cefa
jmp 0x4ba468
mov edx, dword [ebp - 0x3a4]
test edx, edx
je 0x4ba487
movzx eax, word [edx + 0x14]
test ax, ax
je 0x4ba47c
push eax
push 0x183
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.00441660
mov edx, dword [ebp - 0x3a4]
test edx, edx
je 0x4ba487
mov eax, dword [edx + 0x16]
test eax, eax
jne 0x4ba489
xor eax, eax
mov ecx, dword [ebp - 0x3a8]
mov ecx, dword [ecx + 0x48]
test ecx, ecx
je 0x4ba51a
mov edx, dword [ebp - 0x3ac]
test edx, edx
je 0x4ba4d2
mov edx, dword [edx + 0x16]
test edx, edx
je 0x4ba4d2
push edx
add eax, ecx
mov ecx, 0x6d43a8
push eax
push 0x184
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push 0x58e4dc
push eax
call esi
add esp, 0x14
jmp 0x4ba4f6
add eax, ecx
mov ecx, 0x6d43a8
push eax
push 0x184
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push 0x58a9d4
push eax
call esi
add esp, 0x10
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4ba50a
cmp dword [eax + 0x16], 0
jne 0x4ba5c1
push 0
push 0
push 0
push 0x87cefa
jmp 0x4ba5cc
test eax, eax
je 0x4ba554
mov ecx, dword [ebp - 0x3ac]
test ecx, ecx
je 0x4ba594
mov ecx, dword [ecx + 0x16]
test ecx, ecx
je 0x4ba554
push ecx
push eax
push 0x184
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push 0x58e4dc
push eax
call esi
add esp, 0x14
jmp 0x4ba5c1
mov ecx, dword [ebp - 0x3ac]
test ecx, ecx
je 0x4ba594
mov eax, dword [ecx + 0x16]
test eax, eax
je 0x4ba594
push eax
push 0x184
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x87cefa
jmp 0x4ba5cc
test edx, edx
je 0x4ba5e0
mov eax, dword [edx + 0x16]
test eax, eax
je 0x4ba5e0
push eax
push 0x184
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.00441660
mov edx, dword [ebp - 0x3a4]
movss xmm4, dword [0x586084]
mov esi, 1
jmp 0x4ba5f6
mov edx, dword [ebp - 0x3a4]
movzx ecx, si
xorps xmm2, xmm2
test cx, cx
jne 0x4ba606
movaps xmm1, xmm2
jmp 0x4ba61a
mov edx, dword [ebp - 0x3a8]
mov eax, ecx
movss xmm1, dword [edx + eax*4 + 0x4c]
mov edx, dword [ebp - 0x3a4]
cmp dword [ebp - 0x3ac], 0
mulss xmm1, xmm4
je 0x4ba65f
test cx, cx
jne 0x4ba63d
movaps xmm3, xmm2
mulss xmm3, xmm4
movss dword [ebp - 0x3b0], xmm3
jmp 0x4ba667
mov edx, dword [ebp - 0x3ac]
mov eax, ecx
movss xmm3, dword [edx + eax*4 + 0x16]
mov edx, dword [ebp - 0x3a4]
mulss xmm3, xmm4
movss dword [ebp - 0x3b0], xmm3
jmp 0x4ba667
movss xmm3, dword [ebp - 0x3b0]
test edx, edx
je 0x4ba685
test cx, cx
jne 0x4ba679
movaps xmm0, xmm2
mulss xmm0, xmm4
jmp 0x4ba688
movss xmm0, dword [edx + ecx*4 + 0x1a]
mulss xmm0, xmm4
jmp 0x4ba688
movaps xmm0, xmm2
cvttss2si eax, xmm1
movss dword [ebp - 0x3b8], xmm0
test eax, eax
je 0x4ba734
cvttss2si eax, xmm3
mov ecx, 0x6d43a8
addss xmm0, xmm1
test eax, eax
je 0x4ba6d7
push eax
cvttss2si eax, xmm0
push eax
lea eax, [esi + 0x108]
push eax
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push str._s__d_____d___
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x14
jmp 0x4ba6fe
cvttss2si eax, xmm0
push eax
lea eax, [esi + 0x108]
push eax
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push 0x58a9dc
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4ba7ef
movss xmm0, dword [ebp - 0x3b8]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x4ba7ef
push 0
push 0
push 0
push 0x55fc55
jmp 0x4ba7fa
cvttss2si ecx, xmm3
test ecx, ecx
je 0x4ba788
ucomiss xmm0, xmm2
push ecx
mov ecx, 0x6d43a8
lahf
test ah, 0x44
jnp 0x4ba774
cvttss2si eax, xmm0
push eax
lea eax, [esi + 0x108]
push eax
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push str._s__d_____d___
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x14
jmp 0x4ba7bd
lea eax, [esi + 0x108]
push eax
call fcn.004d43c0
push eax
push str._s___d___
jmp 0x4ba7ad
ucomiss xmm0, xmm2
lahf
test ah, 0x44
jnp 0x4ba7e6
cvttss2si eax, xmm0
mov ecx, 0x6d43a8
push eax
lea eax, [esi + 0x108]
push eax
call fcn.004d43c0
push eax
push 0x58a9dc
lea eax, [ebp - 0x140]
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
movss xmm0, dword [ebp - 0x3b8]
xorps xmm2, xmm2
ucomiss xmm0, xmm2
lahf
test ah, 0x44
jnp 0x4ba7de
push 0
push 0
push 0
push 0x55fc55
jmp 0x4ba7fa
movss xmm3, dword [ebp - 0x3b0]
ucomiss xmm3, xmm2
lahf
test ah, 0x44
jnp 0x4ba808
push 0
push 0
push 0
push 0x87cefa
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.00441660
movss xmm4, dword [0x586084]
inc esi
cmp esi, 5
jle 0x4ba5f0
mov esi, dword [ebp - 0x3a4]
test esi, esi
je 0x4ba831
movzx eax, word [esi + 0x1a]
test ax, ax
je 0x4ba831
mov ecx, eax
jmp 0x4ba833
xor ecx, ecx
mov eax, dword [ebp - 0x3a8]
mov esi, 0x80a
mov dword [ebp - 0x3b8], ecx
movzx edx, word [eax + 0x80]
test dx, dx
jne 0x4ba85d
cmp word [eax + 0x82], dx
je 0x4baa50
cmp word [eax + 0x28], si
je 0x4ba979
movzx esi, word [eax + 0x82]
mov eax, dword [ebp - 0x3ac]
cmp dx, si
jne 0x4ba8e0
test eax, eax
je 0x4ba8ad
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4ba8ad
push eax
mov eax, dword [ebp - 0x3b8]
movzx ecx, ax
add ecx, edx
push ecx
push 0x185
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
push str._s__d___d_
jmp 0x4ba940
mov eax, dword [ebp - 0x3b8]
movzx ecx, ax
add ecx, edx
push ecx
push 0x185
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push 0x58a9e8
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
jmp 0x4ba950
test eax, eax
je 0x4ba920
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4ba920
movzx ecx, cx
push eax
lea eax, [ecx + esi]
push eax
lea eax, [ecx + edx]
mov ecx, 0x6d43a8
push eax
push 0x185
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push str._s__d___d___d_
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x18
jmp 0x4ba950
movzx ecx, cx
lea eax, [ecx + esi]
push eax
lea eax, [ecx + edx]
mov ecx, 0x6d43a8
push eax
push 0x185
call fcn.004d43c0
push eax
push str._s__d___d
lea eax, [ebp - 0x140]
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x14
mov esi, dword [ebp - 0x3a4]
test esi, esi
je 0x4baa37
cmp word [esi + 0x1a], 0
je 0x4baa37
push 0
push 0
push 0
push 0x55fc55
jmp 0x4baa42
movzx ecx, word [eax + 0x82]
mov eax, dword [ebp - 0x3ac]
cmp dx, cx
jne 0x4ba9d9
test eax, eax
je 0x4ba9b1
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4ba9b1
push eax
push edx
push 0x185
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
push str._s__d_____d_
jmp 0x4baa27
push edx
push 0x185
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push str._s__d__
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
jmp 0x4baa37
test eax, eax
je 0x4baa10
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4baa10
push eax
push ecx
push edx
push 0x185
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push str._s__d_____d_____d_
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x18
jmp 0x4baa37
push ecx
push edx
push 0x185
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
push str._s__d_____d__
lea eax, [ebp - 0x140]
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x14
push 0
push 0
push 0
push 0x87cefa
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.00441660
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4baaa6
movzx eax, word [eax + 0x34]
test ax, ax
je 0x4baaa6
push eax
push 0x186
mov ecx, 0x6d43a8
call fcn.004d43c0
mov esi, dword [sym.imp.MSVCR120.dll_sprintf]
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call esi
add esp, 0x10
lea eax, [ebp - 0x140]
mov ecx, edi
push 0
push 0
push 0
push 0x87cefa
push eax
call fcn.00441660
jmp 0x4baaac
mov esi, dword [sym.imp.MSVCR120.dll_sprintf]
mov ecx, dword [ebp - 0x3a8]
movzx edx, word [ecx + 0x84]
test dx, dx
jne 0x4baacb
cmp word [ecx + 0x86], dx
je 0x4bacc6
mov eax, 0x80a
cmp word [ecx + 0x28], ax
mov eax, dword [ebp - 0x3ac]
je 0x4babfb
movzx esi, word [ecx + 0x86]
cmp dx, si
jne 0x4bab56
test eax, eax
je 0x4bab20
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4bab20
push eax
mov eax, dword [ebp - 0x3b8]
movzx ecx, ax
add ecx, edx
push ecx
push 0x187
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
push str._s__d___d_
jmp 0x4babc2
mov eax, dword [ebp - 0x3b8]
movzx ecx, ax
add ecx, edx
push ecx
push 0x187
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push 0x58a9e8
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
jmp 0x4babd2
test eax, eax
je 0x4bab9c
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4bab9c
mov ecx, dword [ebp - 0x3b8]
movzx ecx, cx
push eax
lea eax, [ecx + esi]
push eax
lea eax, [ecx + edx]
mov ecx, 0x6d43a8
push eax
push 0x187
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push str._s__d___d___d_
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x18
jmp 0x4babd2
mov eax, dword [ebp - 0x3b8]
movzx ecx, ax
lea eax, [ecx + esi]
push eax
lea eax, [ecx + edx]
mov ecx, 0x6d43a8
push eax
push 0x187
call fcn.004d43c0
push eax
push str._s__d___d
lea eax, [ebp - 0x140]
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x14
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4baca7
cmp word [eax + 0x1a], 0
je 0x4baca7
push 0
push 0
push 0
push 0x55fc55
jmp 0x4bacb2
movzx ecx, word [ecx + 0x86]
cmp dx, cx
jne 0x4bac51
test eax, eax
je 0x4bac2d
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4bac2d
push eax
push ecx
push 0x187
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
push str._s__d_____d_
jmp 0x4bac9b
push ecx
push 0x187
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push str._s__d__
push eax
call esi
add esp, 0x10
jmp 0x4baca7
test eax, eax
je 0x4bac84
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4bac84
push eax
push ecx
push edx
push 0x187
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push str._s__d_____d_____d_
push eax
call esi
add esp, 0x18
jmp 0x4baca7
push ecx
push edx
push 0x187
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
push str._s__d_____d__
lea eax, [ebp - 0x140]
push eax
call esi
add esp, 0x14
push 0
push 0
push 0
push 0x87cefa
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.00441660
mov ecx, dword [ebp - 0x3a8]
cmp word [ecx + 0x80], 0
mov edx, dword [ebp - 0x3a4]
jne 0x4badec
cmp word [ecx + 0x82], 0
jne 0x4badec
cmp word [ecx + 0x84], 0
jne 0x4badec
cmp word [ecx + 0x86], 0
jne 0x4badec
test edx, edx
je 0x4bad54
movzx ecx, word [edx + 0x1a]
test cx, cx
je 0x4bad54
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4bad9a
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4bad54
push eax
push ecx
push 0x2a9
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push str._s__d__d_
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x14
jmp 0x4badcd
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4bad9a
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4bad9a
push eax
push 0x2a9
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
push 0
push 0
push 0
push 0x87cefa
jmp 0x4badd8
test edx, edx
je 0x4badec
movzx eax, word [edx + 0x1a]
test ax, ax
je 0x4badec
push eax
push 0x2a9
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
push 0
push 0
push 0
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.00441660
mov edx, dword [ebp - 0x3a4]
mov esi, 1
jmp 0x4badf9
mov edx, dword [ebp - 0x3a4]
movzx ecx, si
xorps xmm2, xmm2
test cx, cx
jne 0x4bae09
movaps xmm1, xmm2
jmp 0x4bae20
mov edx, dword [ebp - 0x3a8]
mov eax, ecx
movss xmm1, dword [edx + eax*4 + 0x88]
mov edx, dword [ebp - 0x3a4]
cmp dword [ebp - 0x3ac], 0
movss xmm4, dword [0x586084]
mulss xmm1, xmm4
je 0x4bae6d
test cx, cx
jne 0x4bae4b
movaps xmm3, xmm2
mulss xmm3, xmm4
movss dword [ebp - 0x3b0], xmm3
jmp 0x4bae75
mov edx, dword [ebp - 0x3ac]
mov eax, ecx
movss xmm3, dword [edx + eax*4 + 0x32]
mov edx, dword [ebp - 0x3a4]
mulss xmm3, xmm4
movss dword [ebp - 0x3b0], xmm3
jmp 0x4bae75
movss xmm3, dword [ebp - 0x3b0]
test edx, edx
je 0x4bae93
test cx, cx
jne 0x4bae87
movaps xmm0, xmm2
mulss xmm0, xmm4
jmp 0x4bae96
movss xmm0, dword [edx + ecx*4 + 0x32]
mulss xmm0, xmm4
jmp 0x4bae96
movaps xmm0, xmm2
cvttss2si eax, xmm1
movss dword [ebp - 0x3b8], xmm0
test eax, eax
je 0x4baf42
cvttss2si eax, xmm3
mov ecx, 0x6d43a8
addss xmm0, xmm1
test eax, eax
je 0x4baee5
push eax
cvttss2si eax, xmm0
push eax
lea eax, [esi + 0x187]
push eax
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push str._s__d_____d___
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x14
jmp 0x4baf0c
cvttss2si eax, xmm0
push eax
lea eax, [esi + 0x187]
push eax
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push 0x58a9dc
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4baffd
movss xmm0, dword [ebp - 0x3b8]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x4baffd
push 0
push 0
push 0
push 0x55fc55
jmp 0x4bb008
cvttss2si ecx, xmm3
test ecx, ecx
je 0x4baf96
ucomiss xmm0, xmm2
push ecx
mov ecx, 0x6d43a8
lahf
test ah, 0x44
jnp 0x4baf82
cvttss2si eax, xmm0
push eax
lea eax, [esi + 0x187]
push eax
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push str._s__d_____d___
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x14
jmp 0x4bafcb
lea eax, [esi + 0x187]
push eax
call fcn.004d43c0
push eax
push str._s___d___
jmp 0x4bafbb
ucomiss xmm0, xmm2
lahf
test ah, 0x44
jnp 0x4baff4
cvttss2si eax, xmm0
mov ecx, 0x6d43a8
push eax
lea eax, [esi + 0x187]
push eax
call fcn.004d43c0
push eax
push 0x58a9dc
lea eax, [ebp - 0x140]
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
movss xmm0, dword [ebp - 0x3b8]
xorps xmm2, xmm2
ucomiss xmm0, xmm2
lahf
test ah, 0x44
jnp 0x4bafec
push 0
push 0
push 0
push 0x55fc55
jmp 0x4bb008
movss xmm3, dword [ebp - 0x3b0]
ucomiss xmm3, xmm2
lahf
test ah, 0x44
jnp 0x4bb016
push 0
push 0
push 0
push 0x87cefa
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.00441660
inc esi
cmp esi, 5
jle 0x4badf3
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4bb037
movzx eax, word [eax + 0x1c]
test ax, ax
je 0x4bb037
mov esi, eax
jmp 0x4bb039
xor esi, esi
mov eax, dword [ebp - 0x3a8]
movzx ecx, word [eax + 0xa4]
test cx, cx
je 0x4bb1a4
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4bb090
movzx eax, word [eax + 0x4e]
test ax, ax
je 0x4bb090
push eax
movzx eax, si
add ecx, eax
push ecx
push 0x18d
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push 0x58e4dc
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x14
jmp 0x4bb0bb
movzx eax, si
add ecx, eax
push ecx
push 0x18d
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push 0x58a9d4
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4bb194
test si, si
je 0x4bb194
push 0
push 0
push 0
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.00441660
mov esi, dword [sym.imp.MSVCR120.dll_sprintf]
mov ecx, dword [ebp - 0x3a8]
movzx eax, word [ecx + 0xa8]
test ax, ax
je 0x4bb13d
push eax
lea eax, [ecx + 2]
mov ecx, 0x6d43a8
push eax
push 0x18e
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push eax
call esi
add esp, 0x10
lea eax, [ebp - 0x140]
mov ecx, edi
push 0
push 0
push 0
push 0x87cefa
push eax
call fcn.00441660
mov eax, dword [ebp - 0x3a8]
cmp word [eax + 0xac], 0
je 0x4bb48a
movzx eax, word [eax + 0xaa]
test ax, ax
je 0x4bb48a
xorps xmm0, xmm0
mov byte [ebp - 0x34], 0
dec eax
movq qword [ebp - 0x23], xmm0
mov dword [ebp - 0x1b], 0
mov word [ebp - 0x17], 0
mov byte [ebp - 0x15], 0
movdqu xmmword [ebp - 0x33], xmm0
cmp eax, 0xa
ja case.default.0x4bb18d
jmp dword [eax*4 + 0x4bc2d0]
push 0
push 0
push 0
push 0x87cefa
jmp 0x4bb0dd
test si, si
je 0x4bb20a
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4bb263
movzx eax, word [eax + 0x4e]
test ax, ax
je 0x4bb20a
push eax
movzx eax, si
mov ecx, 0x6d43a8
push eax
push 0x18d
call fcn.004d43c0
mov esi, dword [sym.imp.MSVCR120.dll_sprintf]
push eax
lea eax, [ebp - 0x140]
push 0x58e4dc
push eax
call esi
add esp, 0x14
push 0
push 0
push 0
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.00441660
jmp 0x4bb0f1
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4bb263
movzx eax, word [eax + 0x4e]
test ax, ax
je 0x4bb263
push eax
push 0x18d
mov ecx, 0x6d43a8
call fcn.004d43c0
mov esi, dword [sym.imp.MSVCR120.dll_sprintf]
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call esi
add esp, 0x10
lea eax, [ebp - 0x140]
mov ecx, edi
push 0
push 0
push 0
push 0x87cefa
push eax
call fcn.00441660
jmp 0x4bb0f1
test si, si
je 0x4bb0eb
movzx eax, si
mov ecx, 0x6d43a8
push eax
push 0x18d
call fcn.004d43c0
mov esi, dword [sym.imp.MSVCR120.dll_sprintf]
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call esi
add esp, 0x10
jmp 0x4bb1ec
push 0x196
mov ecx, 0x6d43a8
call fcn.004d43c0
lea edx, [ebp - 0x34]
sub edx, eax
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4bb2b0
jmp case.default.0x4bb18d
push 0x197
mov ecx, 0x6d43a8
call fcn.004d43c0
lea edx, [ebp - 0x34]
sub edx, eax
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4bb2d6
jmp case.default.0x4bb18d
push 0x198
mov ecx, 0x6d43a8
call fcn.004d43c0
lea edx, [ebp - 0x34]
sub edx, eax
lea esp, [esp]
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4bb300
jmp case.default.0x4bb18d
push 0x199
mov ecx, 0x6d43a8
call fcn.004d43c0
lea edx, [ebp - 0x34]
sub edx, eax
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4bb326
jmp case.default.0x4bb18d
push 0x19a
mov ecx, 0x6d43a8
call fcn.004d43c0
lea edx, [ebp - 0x34]
sub edx, eax
lea esp, [esp]
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4bb350
jmp case.default.0x4bb18d
push 0x19b
mov ecx, 0x6d43a8
call fcn.004d43c0
lea edx, [ebp - 0x34]
sub edx, eax
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4bb376
jmp case.default.0x4bb18d
push 0x19c
mov ecx, 0x6d43a8
call fcn.004d43c0
lea edx, [ebp - 0x34]
sub edx, eax
lea esp, [esp]
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4bb3a0
jmp case.default.0x4bb18d
push 0x19d
mov ecx, 0x6d43a8
call fcn.004d43c0
lea edx, [ebp - 0x34]
sub edx, eax
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4bb3c6
jmp case.default.0x4bb18d
push 0x19e
mov ecx, 0x6d43a8
call fcn.004d43c0
lea edx, [ebp - 0x34]
sub edx, eax
lea esp, [esp]
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4bb3f0
jmp case.default.0x4bb18d
push 0x19f
mov ecx, 0x6d43a8
call fcn.004d43c0
lea edx, [ebp - 0x34]
sub edx, eax
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4bb413
jmp case.default.0x4bb18d
push 0x1a0
mov ecx, 0x6d43a8
call fcn.004d43c0
lea edx, [ebp - 0x34]
sub edx, eax
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4bb436
mov eax, dword [ebp - 0x3a8]
mov ecx, 0x6d43a8
movzx eax, word [eax + 0xac]
push eax
lea eax, [ebp - 0x34]
push eax
push 0x1a1
call fcn.004d43c0
push eax
lea eax, [ebp - 0x140]
push eax
call esi
add esp, 0x10
lea eax, [ebp - 0x140]
mov ecx, edi
push 0
push 0
push 0
push 0x87cefa
push eax
call fcn.00441660
mov eax, dword [ebp - 0x3bc]
test eax, eax
je 0x4bbace
cmp dword [eax], 0
je 0x4bbace
push 0
push 0
push 0
push 0xffffff
push 0x58497c
mov ecx, edi
call fcn.00441660
push dword [0x6d2408]
mov ecx, 0x6d43a8
push dword [0x6d2404]
push 0xa6a
call fcn.004d43c0
push eax
lea eax, [ebp - 0x3a0]
push eax
call esi
add esp, 0x10
lea eax, [ebp - 0x3a0]
mov ecx, edi
push 0
push 0
push 0
push 0xffffff
push eax
call fcn.00441660
lea ecx, [ebp - 0x34]
call fcn.0042f4b0
mov ecx, dword [ebp - 0x3bc]
mov dword [ebp - 4], 0
mov eax, dword [ecx + 8]
cmp eax, 1
jne 0x4bb551
push 0
lea eax, [ebp - 0x34]
mov ecx, 0x6cb060
push eax
push 0x93
call fcn.00439980
cmp dword [ebp - 0x30], 0
je 0x4bb620
push 0
lea eax, [ebp - 0x34]
mov ecx, edi
push eax
call fcn.00441640
mov dword [0x6d2408], 1
jmp 0x4bb620
jbe 0x4bb620
mov ecx, dword [ebp - 0x3b4]
xor edx, edx
movzx esi, ax
mov eax, esi
div dword [ecx + 0x30]
mov eax, dword [ecx + 0x34]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x4bb620
cmp dword [eax], esi
je 0x4bb585
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x4bb575
jmp 0x4bb620
mov esi, dword [eax + 4]
test esi, esi
je 0x4bb620
push 1
lea eax, [ebp - 0x34]
mov ecx, 0x6cb060
push eax
movzx eax, word [esi + 0x26]
push eax
call fcn.00439980
cmp dword [ebp - 0x30], 0
je 0x4bb5c2
push 0
lea eax, [ebp - 0x34]
mov ecx, edi
push eax
call fcn.00441640
mov dword [0x6d2404], 1
mov ecx, dword [ebp - 0x3b4]
xor edx, edx
movzx eax, word [esi + 0x24]
mov dword [ebp - 0x3b0], eax
div dword [ecx + 0x188]
mov eax, dword [ecx + 0x18c]
mov esi, dword [eax + edx*4]
test esi, esi
je 0x4bb5ff
mov eax, dword [ebp - 0x3b0]
lea ecx, [ecx]
cmp dword [esi], eax
je 0x4bb669
mov esi, dword [esi + 0xc]
test esi, esi
jne 0x4bb5f0
xor esi, esi
test esi, esi
je 0x4bb620
push 0
push 0
push 0
push 0xc8d7aa
push dword [esi]
mov ecx, edi
call fcn.00441660
mov esi, dword [esi + 4]
test esi, esi
jne 0x4bb605
mov eax, dword [ebp - 0x3bc]
mov eax, dword [eax + 0xc]
cmp eax, 1
jne 0x4bb66e
push 0
lea eax, [ebp - 0x34]
mov ecx, 0x6cb060
push eax
push 0x93
call fcn.00439980
cmp dword [ebp - 0x30], 0
je 0x4bb74b
push 1
lea eax, [ebp - 0x34]
mov ecx, edi
push eax
call fcn.00441640
mov dword [0x6d2408], 2
jmp 0x4bb74b
mov esi, dword [esi + 4]
jmp 0x4bb601
jbe 0x4bb74b
mov eax, dword [ebp - 0x3bc]
xor edx, edx
mov ecx, dword [ebp - 0x3b4]
movzx esi, word [eax + 0xc]
mov eax, esi
div dword [ecx + 0x30]
mov eax, dword [ecx + 0x34]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x4bb74b
lea esp, [esp]
cmp dword [eax], esi
je 0x4bb6b0
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x4bb6a0
jmp 0x4bb74b
mov esi, dword [eax + 4]
test esi, esi
je 0x4bb74b
push 1
lea eax, [ebp - 0x34]
mov ecx, 0x6cb060
push eax
movzx eax, word [esi + 0x26]
push eax
call fcn.00439980
cmp dword [ebp - 0x30], 0
je 0x4bb6ed
push 1
lea eax, [ebp - 0x34]
mov ecx, edi
push eax
call fcn.00441640
mov dword [0x6d2404], 2
mov ecx, dword [ebp - 0x3b4]
xor edx, edx
movzx eax, word [esi + 0x24]
mov dword [ebp - 0x3b0], eax
div dword [ecx + 0x188]
mov eax, dword [ecx + 0x18c]
mov esi, dword [eax + edx*4]
test esi, esi
je 0x4bb727
mov eax, dword [ebp - 0x3b0]
cmp dword [esi], eax
je 0x4bb794
mov esi, dword [esi + 0xc]
test esi, esi
jne 0x4bb718
xor esi, esi
test esi, esi
je 0x4bb74b
lea ecx, [ecx]
push 0
push 0
push 0
push 0xc8d7aa
push dword [esi]
mov ecx, edi
call fcn.00441660
mov esi, dword [esi + 4]
test esi, esi
jne 0x4bb730
mov eax, dword [ebp - 0x3bc]
mov eax, dword [eax + 0x10]
cmp eax, 1
jne 0x4bb799
push 0
lea eax, [ebp - 0x34]
mov ecx, 0x6cb060
push eax
push 0x93
call fcn.00439980
cmp dword [ebp - 0x30], 0
je 0x4bb86c
push 2
lea eax, [ebp - 0x34]
mov ecx, edi
push eax
call fcn.00441640
mov dword [0x6d2408], 3
jmp 0x4bb86c
mov esi, dword [esi + 4]
jmp 0x4bb729
jbe 0x4bb86c
mov eax, dword [ebp - 0x3bc]
xor edx, edx
mov ecx, dword [ebp - 0x3b4]
movzx esi, word [eax + 0x10]
mov eax, esi
div dword [ecx + 0x30]
mov eax, dword [ecx + 0x34]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x4bb86c
cmp dword [eax], esi
je 0x4bb7d4
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x4bb7c4
jmp 0x4bb86c
mov esi, dword [eax + 4]
test esi, esi
je 0x4bb86c
push 1
lea eax, [ebp - 0x34]
mov ecx, 0x6cb060
push eax
movzx eax, word [esi + 0x26]
push eax
call fcn.00439980
cmp dword [ebp - 0x30], 0
je 0x4bb811
push 2
lea eax, [ebp - 0x34]
mov ecx, edi
push eax
call fcn.00441640
mov dword [0x6d2404], 3
mov ecx, dword [ebp - 0x3b4]
xor edx, edx
movzx eax, word [esi + 0x24]
mov dword [ebp - 0x3b0], eax
div dword [ecx + 0x188]
mov eax, dword [ecx + 0x18c]
mov esi, dword [eax + edx*4]
test esi, esi
je 0x4bb84b
mov eax, dword [ebp - 0x3b0]
lea esp, [esp]
cmp dword [esi], eax
je 0x4bb8b3
mov esi, dword [esi + 0xc]
test esi, esi
jne 0x4bb840
xor esi, esi
test esi, esi
je 0x4bb86c
push 0
push 0
push 0
push 0xc8d7aa
push dword [esi]
mov ecx, edi
call fcn.00441660
mov esi, dword [esi + 4]
test esi, esi
jne 0x4bb851
mov esi, dword [ebp - 0x3bc]
cmp dword [esi + 0x14], 1
jne 0x4bb8b8
push 0
lea eax, [ebp - 0x34]
mov ecx, 0x6cb060
push eax
push 0x93
call fcn.00439980
cmp dword [ebp - 0x30], 0
je 0x4bb992
push 3
lea eax, [ebp - 0x34]
mov ecx, edi
push eax
call fcn.00441640
mov dword [0x6d2408], 4
jmp 0x4bb992
mov esi, dword [esi + 4]
jmp 0x4bb84d
cmp dword [esi + 8], 3
jbe 0x4bb992
mov ecx, dword [ebp - 0x3b4]
xor edx, edx
movzx esi, word [esi + 0x14]
mov eax, esi
div dword [ecx + 0x30]
mov eax, dword [ecx + 0x34]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x4bb98c
cmp dword [eax], esi
je 0x4bb8f1
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x4bb8e1
jmp 0x4bb98c
mov esi, dword [eax + 4]
test esi, esi
je 0x4bb98c
push 1
lea eax, [ebp - 0x34]
mov ecx, 0x6cb060
push eax
movzx eax, word [esi + 0x26]
push eax
call fcn.00439980
cmp dword [ebp - 0x30], 0
je 0x4bb92e
push 3
lea eax, [ebp - 0x34]
mov ecx, edi
push eax
call fcn.00441640
mov dword [0x6d2404], 4
mov ecx, dword [ebp - 0x3b4]
xor edx, edx
movzx eax, word [esi + 0x24]
mov dword [ebp - 0x3b0], eax
div dword [ecx + 0x188]
mov eax, dword [ecx + 0x18c]
mov esi, dword [eax + edx*4]
test esi, esi
je 0x4bb96b
mov eax, dword [ebp - 0x3b0]
lea esp, [esp]
cmp dword [esi], eax
je 0x4bb9d5
mov esi, dword [esi + 0xc]
test esi, esi
jne 0x4bb960
xor esi, esi
test esi, esi
je 0x4bb98c
push 0
push 0
push 0
push 0xc8d7aa
push dword [esi]
mov ecx, edi
call fcn.00441660
mov esi, dword [esi + 4]
test esi, esi
jne 0x4bb971
mov esi, dword [ebp - 0x3bc]
mov eax, dword [esi + 0x18]
cmp eax, 1
jne 0x4bb9da
push 0
lea eax, [ebp - 0x34]
mov ecx, 0x6cb060
push eax
push 0x93
call fcn.00439980
cmp dword [ebp - 0x30], 0
je 0x4bbab0
push 4
lea eax, [ebp - 0x34]
mov ecx, edi
push eax
call fcn.00441640
mov dword [0x6d2408], 5
jmp 0x4bbab0
mov esi, dword [esi + 4]
jmp 0x4bb96d
jbe 0x4bbab0
mov eax, dword [ebp - 0x3bc]
xor edx, edx
mov ecx, dword [ebp - 0x3b4]
movzx esi, word [eax + 0x18]
mov eax, esi
div dword [ecx + 0x30]
mov eax, dword [ecx + 0x34]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x4bbab0
cmp dword [eax], esi
je 0x4bba15
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x4bba05
jmp 0x4bbab0
mov esi, dword [eax + 4]
test esi, esi
je 0x4bbab0
push 1
lea eax, [ebp - 0x34]
mov ecx, 0x6cb060
push eax
movzx eax, word [esi + 0x26]
push eax
call fcn.00439980
cmp dword [ebp - 0x30], 0
je 0x4bba52
push 4
lea eax, [ebp - 0x34]
mov ecx, edi
push eax
call fcn.00441640
mov dword [0x6d2404], 5
mov ecx, dword [ebp - 0x3b4]
xor edx, edx
movzx eax, word [esi + 0x24]
mov dword [ebp - 0x3b0], eax
div dword [ecx + 0x188]
mov eax, dword [ecx + 0x18c]
mov esi, dword [eax + edx*4]
test esi, esi
je 0x4bba8f
mov eax, dword [ebp - 0x3b0]
lea ecx, [ecx]
cmp dword [esi], eax
je 0x4bbc46
mov esi, dword [esi + 0xc]
test esi, esi
jne 0x4bba80
xor esi, esi
test esi, esi
je 0x4bbab0
push 0
push 0
push 0
push 0xc8d7aa
push dword [esi]
mov ecx, edi
call fcn.00441660
mov esi, dword [esi + 4]
test esi, esi
jne 0x4bba95
lea ecx, [ebp - 0x3a0]
mov al, byte [ecx]
lea ecx, [ecx + 1]
test al, al
jne 0x4bbab6
lea ecx, [ebp - 0x34]
mov dword [ebp - 4], 0xffffffff
call fcn.0042f4c0
mov esi, dword [ebp - 0x3a8]
mov eax, 0x100
test word [esi + 0x28], ax
je 0x4bbaec
mov ecx, dword [ebp - 0x3b4]
push esi
push edi
call fcn.004a9560
cmp word [esi + 0xca], 0
je 0x4bbb03
mov ecx, dword [ebp - 0x3b4]
push esi
push edi
call fcn.004a9450
mov ecx, 0x834
cmp word [esi + 0x28], cx
jne 0x4bbb20
mov ecx, dword [ebp - 0x3b4]
push esi
push edi
call fcn.004aaa30
mov ecx, 0x834
movzx eax, word [esi + 0x28]
mov edx, dword [ebp - 0x3a4]
test eax, 0x800
je 0x4bbb6c
cmp ax, cx
jae 0x4bbb6c
test edx, edx
je 0x4bbb40
cmp dword [edx + 4], 0
jne 0x4bbb4f
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4bbb6c
cmp dword [eax], 0
je 0x4bbb6c
push 0
push 0
push 0
push 0xffffff
push 0x58497c
mov ecx, edi
call fcn.00441660
mov edx, dword [ebp - 0x3a4]
movzx ecx, word [esi + 0x28]
test ecx, 0x800
je 0x4bbdf6
mov eax, 0x834
cmp cx, ax
jae 0x4bbdf6
movzx eax, word [edi + 0xc]
mov esi, 0x88
cmp ax, si
je 0x4bbdf6
mov esi, 0x85
cmp ax, si
je 0x4bbdf6
cmp cx, word [ebp - 0x3c0]
je 0x4bbdf6
mov ecx, 0x80
cmp ax, cx
je 0x4bbdf6
test edx, edx
je 0x4bbcd2
cmp dword [edx + 4], 0
je 0x4bbcd2
push 0x9b4
mov ecx, 0x6d43a8
call fcn.004d43c0
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4bbbf0
sub eax, edx
add eax, 2
push eax
lea eax, [ebp - 0x170]
push str.
push eax
call fcn.00518910
lea esi, [edi + 0x9e4]
add esp, 0xc
test esi, esi
je 0x4bbcd2
mov ecx, str.monster
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4bbc4e
test dl, dl
je 0x4bbc42
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4bbc4e
add eax, 2
add ecx, 2
test dl, dl
jne 0x4bbc26
xor eax, eax
jmp 0x4bbc53
mov esi, dword [esi + 4]
jmp 0x4bba91
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4bbc8d
push 0x9b3
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x40]
push 0x58e018
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
push 0
push 0
push 0
push 0xf83232
jmp 0x4bbcb2
push esi
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x40]
push 0x58e018
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
push 0
push 0
push 0
push 0xffffff
push 0xffffff
lea eax, [ebp - 0x40]
mov ecx, 0x6d43a8
push eax
push 0x9b4
call fcn.004d43c0
push eax
mov ecx, edi
call fcn.00441650
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4bbdf6
cmp dword [eax], 0
je 0x4bbdf6
push 0x9b5
mov ecx, 0x6d43a8
call fcn.004d43c0
lea edx, [eax + 1]
jmp 0x4bbd00
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4bbd00
sub eax, edx
add eax, 2
push eax
lea eax, [ebp - 0x170]
push str.
push eax
call fcn.00518910
lea esi, [edi + 0x9f5]
add esp, 0xc
test esi, esi
je 0x4bbdf6
mov ecx, str.monster
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4bbd56
test dl, dl
je 0x4bbd52
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4bbd56
add eax, 2
add ecx, 2
test dl, dl
jne 0x4bbd36
xor eax, eax
jmp 0x4bbd5b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4bbd98
push 0x9b3
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x1a0]
push 0x58e018
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
push 0
push 0
push 0
push 0xf83232
jmp 0x4bbdc0
push esi
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x1a0]
push 0x58e018
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
push 0
push 0
push 0
push 0xffffff
push 0xffffff
lea eax, [ebp - 0x1a0]
mov ecx, 0x6d43a8
push eax
push 0x9b5
call fcn.004d43c0
push eax
mov ecx, edi
call fcn.00441650
push 0x2f
lea eax, [ebp - 0x1a0]
push 0
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
mov eax, dword [ebp - 0x3a8]
mov ecx, edi
push 0
push 0
push 0
movzx esi, word [eax + 0x24]
push 0xffffff
push 0x58497c
call fcn.00441660
mov ecx, dword [ebp - 0x3b4]
xor edx, edx
mov eax, esi
div dword [ecx + 0x188]
mov eax, dword [ecx + 0x18c]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x4bbe63
cmp dword [eax], esi
je 0x4bbe41
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x4bbe34
jmp 0x4bbe63
mov esi, dword [eax + 4]
test esi, esi
je 0x4bbe63
push 0
push 0
push 0
push 0xc8d7aa
push dword [esi]
mov ecx, edi
call fcn.00441660
mov esi, dword [esi + 4]
test esi, esi
jne 0x4bbe48
cmp dword [ebp + 0x1c], 0
jne 0x4bc08e
mov ecx, dword [ebp - 0x3c4]
test ecx, ecx
je 0x4bbe83
mov eax, dword [ecx]
mov eax, dword [eax + 0x7c]
call eax
movzx ecx, ax
jmp 0x4bbe94
mov eax, dword [ebp - 0x3c8]
test eax, eax
je 0x4bbeca
movzx ecx, word [eax + 0x9c4]
cmp ecx, 0xffffffff
je 0x4bbeca
lea eax, [ecx - 0x50]
cmp eax, 9
ja 0x4bbeca
push ecx
mov ecx, dword [ebp - 0x3b4]
lea eax, [edi + 0x58]
push eax
mov dword [edi + 0x910], 0
mov dword [edi + 0x914], 0
call fcn.004bc790
jmp 0x4bc231
mov eax, dword [ebp - 0x3a8]
mov esi, 0x801
xor ecx, ecx
xor edx, edx
movzx eax, word [eax + 0x28]
cmp ax, si
jne 0x4bbef8
mov ecx, dword [0x6bbb10]
push 0x51
call fcn.00453ac0
mov esi, eax
xor ecx, ecx
jmp 0x4bc055
mov esi, 0x807
cmp ax, si
jne 0x4bbf18
mov ecx, dword [0x6bbb10]
push 0x52
call fcn.00453ac0
mov esi, eax
xor ecx, ecx
jmp 0x4bc055
mov esi, 0x808
cmp ax, si
jne 0x4bbf38
mov ecx, dword [0x6bbb10]
push 0x50
call fcn.00453ac0
mov esi, eax
xor ecx, ecx
jmp 0x4bc055
mov esi, 0x809
cmp ax, si
jne 0x4bbf58
mov ecx, dword [0x6bbb10]
push 0x53
call fcn.00453ac0
mov esi, eax
xor ecx, ecx
jmp 0x4bc055
mov esi, 0x80b
cmp ax, si
jne 0x4bbf78
mov ecx, dword [0x6bbb10]
push 0x56
call fcn.00453ac0
mov esi, eax
xor ecx, ecx
jmp 0x4bc055
mov esi, 0x80d
cmp ax, si
jne 0x4bbf98
mov ecx, dword [0x6bbb10]
push 0x57
call fcn.00453ac0
mov esi, eax
xor ecx, ecx
jmp 0x4bc055
mov esi, 0x80a
cmp ax, si
jne 0x4bbfb8
mov ecx, dword [0x6bbb10]
push 0x58
call fcn.00453ac0
mov esi, eax
xor ecx, ecx
jmp 0x4bc055
mov esi, 0x80c
cmp ax, si
jne 0x4bbfd8
mov ecx, dword [0x6bbb10]
push 0x59
call fcn.00453ac0
mov esi, eax
xor ecx, ecx
jmp 0x4bc055
mov esi, 0x816
cmp ax, si
jne 0x4bbff5
mov ecx, dword [0x6bbb10]
push 0x5a
call fcn.00453ac0
mov esi, eax
xor ecx, ecx
jmp 0x4bc055
mov esi, 0x80e
cmp ax, si
jne 0x4bc010
mov ecx, dword [0x6bbb10]
push 0x54
call fcn.00453ac0
push 0x55
jmp 0x4bc046
mov esi, 0x80f
cmp ax, si
jne 0x4bc02d
mov ecx, dword [0x6bbb10]
push 0x5b
call fcn.00453ac0
mov esi, eax
xor ecx, ecx
jmp 0x4bc055
mov esi, 0x810
cmp ax, si
jne 0x4bc06b
mov ecx, dword [0x6bbb10]
push 0x5c
call fcn.00453ac0
push 0x5d
mov ecx, dword [0x6bbb10]
mov esi, eax
call fcn.00453ac0
mov ecx, eax
test esi, esi
je 0x4bc069
lea eax, [esi + 0x58]
mov edx, 1
mov dword [edi + 0x910], eax
jmp 0x4bc075
xor edx, edx
mov dword [edi + 0x910], 0
test ecx, ecx
je 0x4bc087
lea eax, [ecx + 0x58]
mov dword [edi + 0x914], eax
jmp 0x4bc1f8
test edx, edx
jmp 0x4bc1ec
mov eax, dword [ebp - 0x3a8]
mov esi, 0x801
xor edx, edx
xor ecx, ecx
movzx eax, word [eax + 0x28]
cmp ax, si
jne 0x4bc0bc
mov ecx, dword [0x6bbb10]
push 0x51
call fcn.00453ac0
mov esi, eax
xor edx, edx
jmp 0x4bc1bb
mov esi, 0x807
cmp ax, si
jne 0x4bc0dc
mov ecx, dword [0x6bbb10]
push 0x52
call fcn.00453ac0
mov esi, eax
xor edx, edx
jmp 0x4bc1bb
mov esi, 0x808
cmp ax, si
jne 0x4bc0fc
mov ecx, dword [0x6bbb10]
push 0x50
call fcn.00453ac0
mov esi, eax
xor edx, edx
jmp 0x4bc1bb
mov esi, 0x809
cmp ax, si
jne 0x4bc11c
mov ecx, dword [0x6bbb10]
push 0x53
call fcn.00453ac0
mov esi, eax
xor edx, edx
jmp 0x4bc1bb
mov esi, 0x80b
cmp ax, si
jne 0x4bc13c
mov ecx, dword [0x6bbb10]
push 0x56
call fcn.00453ac0
mov esi, eax
xor edx, edx
jmp 0x4bc1bb
mov esi, 0x80d
cmp ax, si
jne 0x4bc159
mov ecx, dword [0x6bbb10]
push 0x57
call fcn.00453ac0
mov esi, eax
xor edx, edx
jmp 0x4bc1bb
mov esi, 0x80a
cmp ax, si
jne 0x4bc176
mov ecx, dword [0x6bbb10]
push 0x58
call fcn.00453ac0
mov esi, eax
xor edx, edx
jmp 0x4bc1bb
mov esi, 0x80c
cmp ax, si
jne 0x4bc193
mov ecx, dword [0x6bbb10]
push 0x59
call fcn.00453ac0
mov esi, eax
xor edx, edx
jmp 0x4bc1bb
mov esi, 0x80e
cmp ax, si
jne 0x4bc1d1
mov ecx, dword [0x6bbb10]
push 0x54
call fcn.00453ac0
mov ecx, dword [0x6bbb10]
mov esi, eax
push 0x55
call fcn.00453ac0
mov edx, eax
test esi, esi
je 0x4bc1cf
lea ecx, [esi + 0x58]
mov dword [edi + 0x910], ecx
mov ecx, 1
jmp 0x4bc1db
xor ecx, ecx
mov dword [edi + 0x910], 0
test edx, edx
je 0x4bc1ea
lea eax, [edx + 0x58]
mov dword [edi + 0x914], eax
jmp 0x4bc1f8
test ecx, ecx
mov dword [edi + 0x914], 0
je 0x4bc231
push 0
push 0
push 0
push 0xffffff
push 0x58497c
mov ecx, edi
call fcn.00441660
push 0
push 0
push 0
push 0xff00
push 0xa7c
mov ecx, 0x6d43a8
call fcn.004d43c0
push eax
mov ecx, edi
call fcn.00441660
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00574cc2
mov esp, ebp
pop ebp
ret 0x18