Function at 0x4eb0f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x6c4e70]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x258]
cmp eax, dword [ecx + 8]
jbe 0x4ebffe
sub esp, 0x2d8
lea edi, [esp + 0x230]
xor eax, eax
call fcn.004610e8
mov ecx, dword [esp + 0x2dc]
mov dword [esp + 0x248], ecx
mov ecx, dword [esp + 0x2e0]
mov dword [esp + 0x24c], ecx
lea edi, [esp + 0xf4]
call fcn.004610e9
lea edi, [esp + 0x284]
call fcn.004610db
lea ecx, [esp + 0x284]
mov dword [esp + 0x100], ecx
call fcn.0044e280
mov ecx, dword [esp]
mov dword [esp + 0xfc], ecx
mov eax, 1
lea ecx, [esp + 0x230]
mov edx, 1
xor ebx, ebx
lea ebp, [esp + 0x3c]
xor esi, esi
xor edi, edi
xor eax, eax
mov dword [esp + 0x70], eax
xor eax, eax
mov dword [esp + 0x6c], eax
mov eax, 1
jmp 0x4eb1c7
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0x50]
mov ebx, dword [esp + 0x78]
mov dword [esp + 0x70], ebp
mov dword [esp + 0x6c], esi
mov ebp, dword [esp + 0xc4]
mov esi, dword [esp + 0xb4]
mov dword [esp + 0xc0], edi
test eax, eax
je 0x4eb24b
mov dword [esp + 0x78], edx
mov dword [esp + 0x74], eax
mov dword [esp + 0xc4], ecx
mov dword [esp + 0x9c], ebx
mov dword [esp + 0xe8], ebp
mov dword [esp + 0xc8], esi
call fcn.0040c790
mov eax, dword [esp]
mov dword [esp + 0xb4], eax
mov ecx, dword [esp + 0xc4]
mov edx, ecx
xor ebx, ebx
mov ebp, dword [esp + 0x70]
mov esi, dword [esp + 0x6c]
mov edi, dword [esp + 0xc0]
mov ebp, dword [esp + 0x9c]
mov dword [esp + 0x50], ebp
xor ebp, ebp
mov dword [esp + 0x4c], ebp
mov esi, dword [esp + 0xe8]
mov dword [esp + 0xb8], esi
mov ebp, dword [esp + 0x70]
mov esi, dword [esp + 0x6c]
jmp 0x4eb854
mov dword [esp], edi
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x70]
mov dword [esp + 8], ecx
call fcn.00409600
mov eax, dword [esp + 0xc]
lea ecx, [0x5c0814]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00467000
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0xc0]
mov ebx, eax
mov ebp, edx
xor esi, esi
xor edi, edi
jmp 0x4eb2b7
mov esi, dword [esp + 0x6c]
mov edi, dword [esp + 0xc0]
mov ebx, edx
mov esi, dword [esp + 0x90]
mov edx, eax
mov edi, ecx
mov ecx, dword [esp + 0x6c]
mov eax, ebp
mov ebp, dword [esp + 0xc0]
mov dword [esp + 0xe8], edx
mov dword [esp + 0x9c], eax
mov dword [esp + 0x98], edi
cmp esi, ecx
jge 0x4eb662
jae 0x4eb80d
mov dword [esp + 0x64], esi
shl esi, 5
mov dword [esp + 0x94], esi
lea edx, [esi + ebp]
lea edi, [esp + 0x150]
mov esi, edx
call fcn.004615b0
mov ecx, dword [esp + 0x150]
mov dword [esp + 0xbc], ecx
mov edx, dword [esp + 0x154]
mov dword [esp + 0x54], edx
mov esi, dword [esp + 0x64]
mov edi, dword [esp + 0x6c]
mov dword [esp + 0xa8], eax
mov eax, 1
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0xa8]
jmp 0x4eb6e7
mov eax, dword [esp + 0x9c]
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0xc0]
mov esi, dword [esp + 0x90]
mov edi, dword [esp + 0x6c]
cmp ebx, 1
jne 0x4eb444
mov ecx, dword [esp + 0x98]
inc ecx
cmp eax, ecx
jb 0x4eb371
mov edx, dword [esp + 0xe8]
jmp 0x4eb3b8
mov edx, dword [esp + 0xe8]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x5713e0]
mov dword [esp + 0x10], eax
call fcn.004495c0
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ebp, dword [esp + 0xc0]
mov esi, dword [esp + 0x90]
mov edi, dword [esp + 0x6c]
mov dword [esp + 0x44], ecx
mov ebx, dword [0x6c4f80]
lea ebp, [ecx - 1]
shl ebp, 5
add ebp, edx
test ebx, ebx
je 0x4eb41e
mov dword [esp + 0xb0], edx
mov dword [esp + 0x48], eax
mov dword [esp + 0xe8], ebp
lea eax, [0x5713e0]
mov dword [esp], eax
mov dword [esp + 4], ebp
lea eax, [esp + 0x150]
mov dword [esp + 8], eax
call fcn.00410740
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0xb0]
mov ebp, dword [esp + 0xe8]
mov esi, dword [esp + 0x90]
mov edi, dword [esp + 0x6c]
mov edi, ebp
lea esi, [esp + 0x150]
call fcn.004615b0
mov ebx, dword [esp + 0x90]
mov ebp, eax
mov ecx, dword [esp + 0x44]
mov eax, edx
mov edx, dword [esp + 0x70]
jmp 0x4eb292
mov edx, dword [esp + 0x70]
cmp edx, esi
jb 0x4eb7fd
mov ebx, dword [esp + 0x64]
cmp ebx, esi
ja 0x4eb7f4
lea edi, [esp + 0x110]
xor eax, eax
call fcn.004610e8
mov ecx, edx
sub ecx, ebx
neg ecx
sar ecx, 0x1f
mov ebx, dword [esp + 0x94]
and ebx, ecx
lea ecx, [ebx + ebp]
mov edi, ecx
mov ecx, dword [esp + 0x7c]
test ecx, ecx
jbe 0x4eb7eb
mov dword [esp + 0xe4], edi
mov ebx, dword [ebp + ebx + 0x10]
xor eax, eax
mov dword [esp + 0x60], eax
mov eax, 0xffffffff
mov dword [esp + 0x40], eax
xor eax, eax
jmp 0x4eb77d
lea edi, [esp + 0x110]
call fcn.004610e8
mov ebx, dword [esp + 0x90]
xor ecx, ecx
jmp 0x4eb53f
mov esi, dword [esp + 0x90]
mov ecx, ebp
mov ebx, dword [esp + 0x40]
test ebx, ebx
jl 0x4eb501
cmp ecx, ebx
jbe 0x4eb7e4
shl ebx, 5
mov ecx, dword [esp + 0xe4]
add ecx, ebx
lea edi, [esp + 0x110]
mov ebx, esi
mov esi, ecx
call fcn.004615b0
mov ecx, 1
jmp 0x4eb53f
cmp ecx, 1
jle 0x4eb518
lea edi, [esp + 0x110]
call fcn.004610e8
mov ebx, esi
xor ecx, ecx
jmp 0x4eb53f
test ecx, ecx
jbe 0x4eb7db
lea edi, [esp + 0x110]
mov esi, dword [esp + 0xe4]
call fcn.004615b0
mov ebx, dword [esp + 0x90]
mov ecx, 1
mov byte [esp + 0x3f], cl
lea edi, [esp + 0x1d0]
lea esi, [esp + 0x110]
call fcn.004615b0
movzx ecx, byte [esp + 0x3f]
test cl, cl
je 0x4eb648
mov ecx, dword [esp + 0x98]
inc ecx
mov ebp, dword [esp + 0x9c]
cmp ebp, ecx
jb 0x4eb57f
mov esi, dword [esp + 0xe8]
jmp 0x4eb5c3
mov eax, dword [esp + 0xe8]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x5713e0]
mov dword [esp + 0x10], eax
call fcn.004495c0
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ebx, dword [esp + 0x90]
mov esi, edx
mov ebp, eax
mov edx, dword [esp + 0x70]
mov dword [esp + 0x44], ecx
mov edi, dword [0x6c4f80]
lea eax, [ecx - 1]
shl eax, 5
add eax, esi
test edi, edi
je 0x4eb62f
mov dword [esp + 0xdc], esi
mov dword [esp + 0x8c], ebp
mov dword [esp + 0xe8], eax
lea ecx, [0x5713e0]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea ecx, [esp + 0x1d0]
mov dword [esp + 8], ecx
call fcn.00410740
mov eax, dword [esp + 0xe8]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x70]
mov ebx, dword [esp + 0x90]
mov ebp, dword [esp + 0x8c]
mov esi, dword [esp + 0xdc]
mov edi, eax
mov eax, esi
lea esi, [esp + 0x1d0]
call fcn.004615b0
mov ecx, dword [esp + 0x44]
jmp 0x4eb292
mov ecx, dword [esp + 0x98]
mov ebp, dword [esp + 0x9c]
mov eax, dword [esp + 0xe8]
jmp 0x4eb292
mov dword [esp], edx
mov dword [esp + 4], edi
mov dword [esp + 8], eax
call fcn.00409600
mov eax, dword [esp + 0xc]
lea ecx, [0x5c0830]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00467000
mov eax, dword [esp + 0xe8]
mov dword [esp + 0x2e4], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 0x2e8], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x2ec], eax
add esp, 0x2d8
ret
mov eax, dword [esp + 0x7c]
inc eax
mov ecx, dword [esp + 0xbc]
mov ebp, dword [esp + 0xc0]
mov esi, dword [esp + 0x64]
mov edi, dword [esp + 0x6c]
mov edx, dword [esp + 0x54]
mov ebx, dword [esp + 0x70]
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x9c]
mov ebx, dword [esp + 0x7c]
add esi, ebx
mov dword [esp + 0x90], esi
cmp edi, esi
jle 0x4eb353
jbe 0x4eb804
shl esi, 5
add esi, ebp
lea edi, [esp + 0x130]
call fcn.004615b0
mov ecx, dword [esp + 0x134]
cmp ecx, edx
jne 0x4eb348
mov eax, dword [esp + 0x130]
mov dword [esp], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00403360
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4eb6b9
jmp 0x4eb336
mov esi, dword [esp + 0xe0]
lea edi, [esi + 0x20]
inc ebx
mov esi, dword [esp + 0x7c]
mov esi, dword [esp + 0x90]
mov dword [esp + 0x60], ebx
mov dword [esp + 0x40], ebp
mov ebx, ecx
mov ebp, dword [esp + 0xc0]
mov ecx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x60]
cmp ebp, ecx
jge 0x4eb4ce
mov dword [esp + 0xe0], edi
lea edi, [esp + 0x170]
mov esi, dword [esp + 0xe0]
call fcn.004615b0
cmp dword [esp + 0x180], ebx
jg 0x4eb4c5
movzx ecx, byte [esp + 0x178]
test cl, cl
je 0x4eb7ce
mov ecx, ebx
mov ebx, dword [esp + 0x40]
test ebx, ebx
jge 0x4eb4ae
mov ebx, ebp
jmp 0x4eb752
mov ecx, ebx
mov ebx, ebp
mov ebp, dword [esp + 0x40]
jmp 0x4eb752
xor eax, eax
mov ecx, eax
call fcn.00460f60
mov eax, ebx
call fcn.00460f60
xor eax, eax
mov ecx, eax
call fcn.00460f60
mov eax, ebx
mov ecx, esi
call fcn.00460fc0
mov ecx, esi
call fcn.00460fa0
mov eax, esi
mov ecx, edi
call fcn.00460f60
mov eax, esi
call fcn.00460f60
mov edi, eax
mov eax, dword [esp + 0xe0]
add eax, 0x20
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x9c]
inc eax
mov dword [esp + 0x50], ebp
mov dword [esp + 0x4c], ebx
mov dword [esp + 0xb8], esi
mov ebx, eax
mov ebp, edi
mov esi, ecx
mov edi, edx
mov edx, dword [esp + 0xc4]
mov ecx, dword [esp + 0x80]
mov eax, dword [esp + 0x74]
cmp ebx, eax
jge 0x4eb19e
mov dword [esp + 0x9c], ebx
mov dword [esp + 0x98], ebp
mov dword [esp + 0x94], esi
mov dword [esp + 0xe4], edi
mov dword [esp + 0xe0], ecx
lea edi, [esp + 0x1b0]
mov esi, ecx
call fcn.004615b0
lea eax, [0x562360]
mov dword [esp], eax
lea ecx, [esp + 0xf4]
mov dword [esp + 4], ecx
lea edx, [esp + 0x1c8]
mov dword [esp + 8], edx
call fcn.0040cb70
mov eax, dword [esp + 0xc]
movzx eax, byte [eax]
test al, al
je 0x4eb8e9
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0xe4]
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x50]
mov esi, dword [esp + 0xb8]
jmp 0x4eb814
lea eax, [0x562360]
mov dword [esp], eax
lea ecx, [esp + 0xf4]
mov dword [esp + 4], ecx
lea edx, [esp + 0x1c8]
mov dword [esp + 8], edx
call fcn.0040d0c0
mov eax, dword [esp + 0xc]
mov byte [eax], 1
xor eax, eax
mov ecx, dword [esp + 0x98]
mov edx, dword [esp + 0xe4]
mov ebx, dword [esp + 0x94]
mov ebp, dword [esp + 0x50]
mov esi, dword [esp + 0xb8]
mov edi, dword [esp + 0x4c]
jmp 0x4eb976
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0xc0]
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x50]
mov esi, dword [esp + 0xb8]
jmp 0x4eb814
mov edi, dword [esp + 0x68]
inc edi
mov dword [esp + 0xa0], eax
mov eax, edi
mov edi, ebx
mov ebx, dword [esp + 0xa0]
mov dword [esp + 0x4c], edi
mov dword [esp + 0xb8], esi
mov dword [esp + 0x68], eax
mov dword [esp + 0xc0], edx
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x70], ecx
mov dword [esp + 0x50], ebp
mov ecx, dword [esp + 0x1c8]
mov edx, dword [esp + 0x1cc]
mov ecx, dword [ecx + 0x64]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 0x68]
cmp dword [esp + 4], eax
jle 0x4eb93c
mov ecx, dword [esp + 0x1c8]
mov edx, dword [esp + 0x1cc]
mov ecx, dword [ecx + 0x2c]
mov dword [esp], edx
mov dword [esp + 4], eax
call ecx
lea edi, [esp + 0x250]
lea esi, [esp + 8]
call fcn.0046157e
mov eax, dword [esp + 0x25c]
test eax, eax
je 0x4eba1c
movzx eax, byte [esp + 0x280]
test al, al
jne 0x4eba1c
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xc0]
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x50]
mov esi, dword [esp + 0xb8]
jmp 0x4eb95f
mov eax, dword [esp + 0x268]
mov ecx, dword [esp + 0x26c]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004dd8c0
movzx eax, byte [esp + 8]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
test al, al
je 0x4eba6a
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xc0]
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x50]
mov esi, dword [esp + 0xb8]
jmp 0x4eb95f
mov dword [esp + 0xd8], edx
mov dword [esp + 0x90], ecx
mov eax, dword [esp + 0x1c0]
lea ecx, [0x5609a0]
mov dword [esp], ecx
inc eax
mov dword [esp + 0x5c], eax
mov dword [esp + 4], eax
mov dword [esp + 8], eax
call fcn.00449500
mov eax, dword [esp + 0x1c0]
mov ecx, dword [esp + 0x5c]
cmp eax, ecx
jl 0x4ebaab
mov eax, ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0xd4], edx
mov ebx, dword [esp + 0x1bc]
cmp ebx, edx
je 0x4ebadf
mov dword [esp], edx
mov dword [esp + 4], ebx
shl eax, 2
mov dword [esp + 8], eax
call fcn.004617e0
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0xd4]
mov eax, dword [esp + 0x1c0]
cmp eax, ecx
jae 0x4ebff8
mov ecx, dword [esp + 0x68]
mov dword [edx + eax*4], ecx
mov eax, dword [esp + 0x260]
mov ebx, dword [esp + 0x264]
mov dword [esp + 0xec], eax
mov dword [esp + 0xf0], ebx
mov eax, dword [eax + 0x60]
mov dword [esp], ebx
call eax
mov eax, dword [esp + 8]
test eax, eax
jne 0x4ebb6a
mov eax, dword [esp + 0xec]
mov ecx, dword [esp + 0xf0]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 0x16
jne 0x4ebb6a
mov eax, dword [esp + 0xec]
mov ecx, dword [esp + 0xf0]
mov eax, dword [eax + 0x28]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0xec], eax
mov dword [esp + 0xf0], ecx
mov ecx, dword [esp + 0x90]
test ecx, ecx
je 0x4ebb7c
mov eax, 1
jmp 0x4ebbb4
movzx edx, byte [esp + 0x280]
test dl, dl
jne 0x4ebb8f
mov eax, 1
jmp 0x4ebbb4
mov eax, dword [esp + 0xec]
mov ecx, dword [esp + 0xf0]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 0x19
setne al
mov ecx, dword [esp + 0x90]
test al, al
je 0x4ebe29
test ecx, ecx
jne 0x4ebbd0
mov edx, dword [esp + 0x250]
mov ecx, dword [esp + 0x254]
jmp 0x4ebbd7
mov edx, dword [esp + 0xd8]
mov dword [esp + 0x58], ecx
setne bl
lea edi, [esp + 0x210]
xor eax, eax
call fcn.004610e8
mov ecx, dword [esp + 0x6c]
inc ecx
mov dword [esp + 0x210], edx
mov edx, dword [esp + 0x58]
mov dword [esp + 0x214], edx
mov byte [esp + 0x218], bl
mov edx, dword [esp + 0xd4]
mov dword [esp + 0x21c], edx
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x220], edx
mov dword [esp + 0x224], edx
mov edx, dword [esp + 0xec]
mov ebx, dword [esp + 0xf0]
mov dword [esp + 0x228], edx
mov dword [esp + 0x22c], ebx
mov edx, dword [esp + 0x70]
cmp edx, ecx
jb 0x4ebc5b
mov edx, dword [esp + 0xc0]
mov eax, dword [esp + 0x70]
jmp 0x4ebc90
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x5713e0]
mov dword [esp + 0x10], eax
call fcn.004495c0
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], edx
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x70], eax
mov ebx, dword [0x6c4f80]
lea ebp, [ecx - 1]
mov dword [esp + 0x90], ebp
shl ebp, 5
lea edi, [edx + ebp]
mov dword [esp + 0xe8], edi
test ebx, ebx
je 0x4ebce4
lea eax, [0x5713e0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea ecx, [esp + 0x210]
mov dword [esp + 8], ecx
call fcn.00410740
mov edi, dword [esp + 0xe8]
lea esi, [esp + 0x210]
call fcn.004615b0
lea eax, [0x562760]
mov dword [esp], eax
mov ecx, dword [esp + 0xc8]
mov dword [esp + 4], ecx
lea edx, [esp + 0x1c8]
mov dword [esp + 8], edx
call fcn.0040cb70
mov eax, dword [esp + 0xc]
cmp dword [eax], 1
jle 0x4ebe06
mov ecx, dword [esp + 0x6c]
mov eax, dword [esp + 0x90]
cmp ecx, eax
jbe 0x4ebff3
lea edi, [esp + 0x1f0]
mov esi, dword [esp + 0xe8]
call fcn.004615b0
mov eax, dword [esp + 0x6c]
inc eax
mov ecx, dword [esp + 0x70]
cmp ecx, eax
jb 0x4ebd5d
mov edx, dword [esp + 0xc0]
jmp 0x4ebd92
mov edx, dword [esp + 0xc0]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x5713e0]
mov dword [esp + 0x10], eax
call fcn.004495c0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x70], ecx
mov ebx, dword [0x6c4f80]
lea ebp, [eax - 1]
shl ebp, 5
lea edi, [edx + ebp]
test ebx, ebx
je 0x4ebdf4
mov dword [esp + 0xd0], edx
mov dword [esp + 0x88], eax
mov dword [esp + 0xe8], edi
lea eax, [0x5713e0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x1f0]
mov dword [esp + 8], eax
call fcn.00410740
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0xd0]
mov edi, dword [esp + 0xe8]
lea esi, [esp + 0x1f0]
call fcn.004615b0
mov ecx, dword [esp + 0x70]
jmp 0x4ebe15
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xc0]
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x50]
mov esi, dword [esp + 0xb8]
jmp 0x4eb95f
lea eax, [0x562760]
mov dword [esp], eax
mov ecx, dword [esp + 0xb4]
mov dword [esp + 4], ecx
lea edx, [esp + 0xec]
mov dword [esp + 8], edx
call fcn.0040d0c0
mov eax, dword [esp + 0xc]
inc dword [eax]
lea eax, [0x562760]
mov dword [esp], eax
mov ecx, dword [esp + 0xb4]
mov dword [esp + 4], ecx
lea edx, [esp + 0xec]
mov dword [esp + 8], edx
call fcn.0040cb70
mov eax, dword [esp + 0xc]
cmp dword [eax], 1
je 0x4ebe94
mov ebp, dword [esp + 0x50]
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0xb8]
jmp 0x4ebfdb
mov eax, dword [esp + 0xec]
mov ecx, dword [esp + 0xf0]
mov eax, dword [eax + 0x60]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x90], ecx
lea edi, [esp + 0x190]
mov edx, eax
xor eax, eax
call fcn.004610e8
mov dword [esp + 0x190], edx
mov ecx, dword [esp + 0x90]
mov dword [esp + 0x194], ecx
mov ecx, dword [esp + 0xd4]
mov dword [esp + 0x19c], ecx
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0x1a4], ecx
mov ecx, dword [esp + 0xf0]
mov edx, dword [esp + 0xec]
mov dword [esp + 0x1a8], edx
mov dword [esp + 0x1ac], ecx
mov ecx, dword [esp + 0x4c]
inc ecx
mov edx, dword [esp + 0x50]
cmp edx, ecx
jb 0x4ebf32
mov esi, dword [esp + 0xb8]
mov ebp, edx
jmp 0x4ebf67
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x5713e0]
mov dword [esp + 0x10], eax
call fcn.004495c0
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov dword [esp + 0x4c], ecx
mov eax, dword [0x6c4f80]
lea edx, [ecx - 1]
shl edx, 5
lea edi, [esi + edx]
test eax, eax
je 0x4ebfc9
mov dword [esp + 0xcc], esi
mov dword [esp + 0x84], ebp
mov dword [esp + 0xe8], edi
lea eax, [0x5713e0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x190]
mov dword [esp + 8], eax
call fcn.00410740
mov ecx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x84]
mov esi, dword [esp + 0xcc]
mov edi, dword [esp + 0xe8]
mov eax, esi
lea esi, [esp + 0x190]
call fcn.004615b0
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0xc0]
mov ebx, ecx
mov esi, eax
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x6c]
jmp 0x4eb95f
call fcn.00460f60
call fcn.00460f60
nop
call fcn.0045faf0
jmp fcn.004eb0f0